general

[slow cloud]

Coffee sounds good rn

[shy forge]

its good some flag need extra caffeine

[slow cloud]

Doing some THM?

[zenith mesa]

Hey Boys

[slow cloud]

wassup

[zenith mesa]

Managing mehn

Been a while since i chatted in here

[shy forge]

right

[slow cloud]

nice nice

[zenith mesa]

Woow you are a very old memeber mehn

Since 2017

That's interesting

[slow cloud]

made my discord back then

its been a while yea

[knotty valve]

Also fedora but nicer

[frozen charm]

lovely

[zenith mesa]

Hey anyone can share premium login for THM? I just want to experience some labs

[knotty valve]

there's plenty of free rooms

[zenith mesa]

Wooow interesting

[zenith mesa]

Done with those bro

[mossy river]

This is against our Terms of Service

[chilly veldt]

I mean, if you join the giveaway in #community-announcements you can possibly win premium

[zenith mesa]

Sorry didn't know

[frozen charm]

https://tenor.com/view/phineasandferb-ferb-cool-50s-gif-4588056

[knotty valve]

does that stack on current subs?

[shy forge]

premium is worth

go for it

[knotty valve]

that's something I should be asking jabba ngl

[chilly veldt]

it kinda does, not sure if they have changed it, but you'll have to stop the renewal and then apply the voucher

[knotty valve]

ah

[torpid stag]

I really hope I get a shot. Tried paying for i t multiple ways but man. Stripe hates me

Even the support couldn't do it

[bleak quartz]

😭

[bleak quartz]

can you normally purchase stuff?

[torpid stag]

Yeah, I used cards which I normally use

[bleak quartz]

Get a paysafe card

works with anything that has issues

[torpid stag]

Pay-safe?

Is it one of those virtual cards?

[bleak quartz]

yuh

https://www.paysafecard.com/en-gb/buy-paysafecard-online-3/

[woeful cedar]

I am tired

[bleak quartz]

Caffeine.

[woeful cedar]

I dont drink coffee

Or any forms of caffeine

[bleak quartz]

How

[woeful cedar]

What how?

[bleak quartz]

Are you a student?

[woeful cedar]

Yes

College

[bleak quartz]

How tf

oh

[woeful cedar]

What? 😭

[slow cloud]

i didnt drink coffee until like a year ago

when i started working, but i only drink it at work

[bleak quartz]

I drink it to stay awake to finish assignments, commissions etc.

Without it I would be so cooked

[woeful cedar]

I drink it rarely, like once or twice in a month

But that's it

[bleak quartz]

lucky

[woeful cedar]

Just sleep

[bleak quartz]

coffee tastes good tho

[bleak quartz]

student

also whats that

[torpid stag]

Same here

[bleak quartz]

"sleep" you say

[knotty valve]

Uploaded my website to the server

now to actually install the tools to run it

[woeful cedar]

I am a student too 😭

I just sleep 7-8 hours a day

[dark mason]

I hate how the ftp is ran as root

[woeful cedar]

And can stay awake

[knotty valve]

sftp and I'm logged in as root cause I haven't setup the user yet

[chilly veldt]

or get revolut

revolut works

they also have one time use cards

[slow cloud]

revolut is very nice

[woeful cedar]

How has been using Arch for you

How was the experience

[zinc wolf]

hii

[chilly veldt]

I hate that the cleaners turned off my vpn 😦

that means I have to go to school tomorrow

[boreal scarab]

Bella has to touch grass? Oh no.

[rapid merlin]

Bellas has school? Bella told me they were 21 and at work

[chilly veldt]

more like I have to drive the motorcycle in rain

[chilly veldt]

I do both work and study 😄

[rapid merlin]

https://tenor.com/view/side-eye-dog-suspicious-look-suspicious-doubt-dog-doubt-gif-23680990

[round onyx]

honestly yeah in the rain is just icky

[topaz falcon]

Erm akshhally it's to ride ☝️🤓

[blissful current]

[topaz falcon]

Be safe in the rain though

[blissful current]

[torpid stag]

I'm unsure if they're available in my country though

[slow cloud]

gonna buy 15 euro earbuds, how bad can they be

[torpid stag]

both revolut and paysafe

[sick lance]

Can't be worse than none.

[slow cloud]

truee

[slow cloud]

https://help.revolut.com/en-NL/help/profile-and-plan/profile-plan/verifying-identity/what-countries-are-supported/

[rapid merlin]

I like the rain

[slow cloud]

https://www.paysafecard.com/fileadmin/Website/Dokumente/B2B/availability-of-products-en.pdf

here you go @torpid stag you can check

[topaz falcon]

Moondrop chu are really good for their price. Around $15-$18

[slow cloud]

these are Fresh ’n Rebel

[torpid stag]

As I thought. Neither works here

[sick lance]

I remember I used to only buy Skullcandy.

Then they went downhill.

[slow cloud]

alot of people from my class had the skullcandies with the crazy bass

i like my sony xm3

i will never buy anything other then sony, even tho the xm5 and 6 are ugly

[rapid merlin]

scene kid

[sick lance]

Not at all, it just had the best sound quality.

[rapid merlin]

I was the only goth in the group to never own skull candy 😦

Feels bad

[chilly veldt]

Saying we “drive” a motorcycle will be understood and isn’t grammatically incorrect, despite being the less common term to use compared to “ride”.
especially when talking about the conditions and talking about taking a motorcycle as a different option than a car.
my sentence indicates that I wouldn't be driving a car but instead taking my motorcycle, plus referring to the conditions of the weather making the roads I will be driving on a non optimal condition.

therefore it is acceptable and often the choice to use the word drive instead of riding a motorcycle

[bleak quartz]

[bleak quartz]

true tho

[blissful current]

i keep getting their discount coupons a lot lol

[gusty inlet]

https://tenor.com/view/kitty-cat-hello-chat-gif-26128152

[slow cloud]

https://tenor.com/view/forrest-gump-wave-hello-hi-sup-gif-16159238468026206620

[rapid merlin]

Theyre still running?

I didn't know they still made them

[sick lance]

These days I only buy headphones is when I need a new pair for my PS.

[chilly veldt]

sony just dropped their new xm6

[blissful current]

ya ...with some heavy discounts ...which do feel like its original price should have been

i use JBL

[rapid merlin]

I took off my headset to see what I bought and I still dont know

xD

[slow cloud]

i dont like their style tho, the small thingy on the xm3 and 4 and it looked better

[blissful current]

[rapid merlin]

Logitech

[chilly veldt]

what small thingy?

[rapid merlin]

I had to check amazon

[blissful current]

[chilly veldt]

the top bar?

[blissful current]

thats epic

[slow cloud]

idk how to explain it

[bleak quartz]

Try EPOS

[slow cloud]

this is the xm3 and 4

[chilly veldt]

the headband

[bleak quartz]

Hella underrated

[slow cloud]

this 5 adn 6

[rapid merlin]

They had good reviews but the sound is trash.

[bleak quartz]

https://www.eposaudio.com/en/us/gaming/products/h3pro-hybrid-green-bluetooth-low-latency-connection-gaming-headset-1000894
I got this

[blissful current]

oh ..damn

[slow cloud]

Yess thank you

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #8 - 984)

[chilly veldt]

yeah, I mean you don't feel the difference, I got the xm5's and they are lovely

[bleak quartz]

doesnt embed idk why

https://www.eposaudio.com/en/us/gaming

This is hella underrated

[chilly veldt]

only reason I would get xm6 is because they are now foldable and have better ANC

[bleak quartz]

and cheap

[rapid merlin]

Give it a year I'm sure to break them and I'll have to replace them anyways.

[bleak quartz]

or at least in comparison

[dark mason]

Guys, I captured the flag

[slow cloud]

this one send me to demant

[bleak quartz]

Reference?!

[slow cloud]

https://urlscan.io/result/01970c9b-43b5-71df-8e70-e600cfa636f4/

login.microsoft online

[bleak quartz]

idk why

its in me and my friends gc

[slow cloud]

yeah me neither

just wanted to share

[bleak quartz]

I bought it from that exact site

a year ago or so

[blissful current]

i use JBL Tune 770 NC

solid Base and sound and Adaptive Noise Cancellation is Mid compared to flagship NC Headphones (Like Bose) but still does good enough job
plus has both BT and Wired 3.5mm option
battery Upto 70hrs without NC , with NC enabled around 44hrs

[slow cloud]

epos exists

just not that link or something i gues

[bleak quartz]

yeah ofc it does

[rapid merlin]

I don't know what half of that is you just said but okay 😆

[bleak quartz]

Oh they changed their links thats why ye

[blissful current]

[bleak quartz]

https://www.eposaudio.com/en/us/gaming/products/
Redirects just to gaming

https://www.eposaudio.com/en/us/gaming/support/product-support

Here you can see em

nvm that goes to demant too

tf is going on

[slow cloud]

demant is the parent company of epos

according to gpt

[bleak quartz]

Oo

[slow cloud]

still weird tho

idk why that happens

[bleak quartz]

Anyways that headset has been the highest quality that I've used so far out of all headsets

dunno what kind of downfall they going through rn but the headsets are nice lol

[bleak quartz]

Oh

It's now fully owned by Demant

that's why

[sullen schooner]

Uh guys, do you know about prompt theory?

People actually believe in that?

[bleak quartz]

People believe in anything

[sullen schooner]

I guess

[slow cloud]

this? https://www.prompttheory.com/

[sullen schooner]

No i think it says that we are nothing but prompts from an AI bot

With a user controlling our destiny or sm5

[slow cloud]

oh yeah i see

[sullen schooner]

Like a roleplay charbot

[slow cloud]

i shouldve looked further in the google serach

[sullen schooner]

I think Google's veo 3 has something to do with this

But I'm still reading

[slow cloud]

i think its the same argument as we live in a simulation

https://www.reddit.com/r/ChatGPT/comments/1kswt10/prompt_theory_made_with_veo_3/

[sullen schooner]

Ya the matrix one

[knotty valve]

Finally got my website back up :D

Only took me 8 months

[clever locust]

hi folks

[slow cloud]

hi

[sullen schooner]

I saw this exact vid on insta

That's why I looked up the prompt theory lol

[clever locust]

how do you do

[slow cloud]

im fine what about u

[knotty valve]

I was half expecting a "can you hack my instagram pls"

[slow cloud]

same

[knotty valve]

I wonder how many staff work at THM

[slow cloud]

the blue ranked staff?

[knotty valve]

In general

[crystal moss]

I just started watching the documentary "cyber bunker" about the server bunker in Germany for darkweb... interesting story

[knotty valve]

nice

I accidentally friended someone when scrolling through the member list 😂

[crystal moss]

:).

[knotty valve]

Discord needs an "Are you sure?" button

i swear

[gusty inlet]

Which platform is it on?

[slow cloud]

netflix i think

yep

https://www.justwatch.com/

amazing site

you can see where you can stream a certain show

[gusty inlet]

This one?

[crystal moss]

Yes

[slow cloud]

its been on my list for a while

[crystal moss]

It is a Republic tahay say , with a structure like a state.. 🙂

[mental stratus]

I'm sorry to ask, i'm looking for any good room about "parameter tampering", any suggestion?

[shy forge]

Hi guyz any quick tip for anything which you find basic but quit interesting?

[rapid merlin]

There’s so many bugs in this room.

[slow cloud]

which one

[rapid merlin]

I’m done

I’m going out lmao

I was clearly never meant for the red road

I’m in walking an application.

First the red box just didn’t show up and now I can’t enter the next flag which I can clearly see

Am I being dumb?

[slow cloud]

well is that the flag for the question?

also #room-help

[gusty inlet]

You can't copy/paste flags containing _.

[rapid merlin]

I also tried to type it

I mean I tried to type it first and then I tried a copy paste

[gusty inlet]

The answer box on THM already has _ preset to autofill it. For example just fill it with 'a's and you'll see _ being autofilled in some places.

[rapid merlin]

Yes so I tried to put in just the letters

[knotty valve]

You can occasionally

[rapid merlin]

It’s like entering the _ in the incorrect place

[knotty valve]

You also can't paste in anything if the cursor isn't at the start as well

[rapid merlin]

I don’t know why

[gusty inlet]

Or maybe it's not that flag.

[rapid merlin]

Alright let me check

[knotty valve]

Flags change occasionally when they update rooms

Could be a typo somewhere too

[shy forge]

which room is it i guess i done it yesterday

[rapid merlin]

Okay well I’m wrong lmao

[blissful current]

ello

[rapid merlin]

I was looking at the inspect part of it

The red box was a bugging though

[safe oxide]

Henlo

[knotty valve]

Hello fellow human beings

[rapid merlin]

It turns out I was the bug

[knotty valve]

Mood

[rapid merlin]

https://tenor.com/view/shirosaki-hana-shirosaki-hana-anime-nod-nod-gif-3093171800157173367

[blissful current]

[rapid merlin]

Okay I need to eat before I do any more rooms

[boreal scarab]

Doing a badge CTF from DEF CON 31....

[rapid merlin]

Yo what

😆

[safe oxide]

Blood is fuel

[knotty valve]

Love these little joys in defcon

[blissful current]

https://tenor.com/view/terminator-sunglasses-shades-t800-arnold-schwarzenegger-gif-27448475

[knotty valve]

I got a few good laughs from 2019

Absolutely loved it

[boreal scarab]

It's this badge

[blissful current]

[safe oxide]

Alien theme this year

[blissful current]

for what?

[knotty valve]

Defcon 33

Think we're up to 33 anyway

[boreal scarab]

Looking at the readme......

ROBOTS TRANSCLUSIVE XENOMORPHIC TRANSCRIPTOR - HUMAN INTERATION CONTROL SCENE (R.TXT-HICS) ERROR CODES:

1. Watch more YouTube
2. Ask ChatGPT
3. REDACTED (For the current broadcasted REDACTED, see the REDACTED)

K thanks readme....

[brisk bison]

Hey 👋
Quick question (might sound silly, but bear with me):
If I forgot to cancel the auto-renewal for a monthly subscription and the payment failed due to insufficient funds, does that mean I still owe anything?

[boreal scarab]

No, your sub just ends

[brisk bison]

ok, glad to hear that

[knotty valve]

Nyo but I do believe the service is suspended until paid or it reaches the end of the grace and it just drops you back to free

By service I just mean access to paid

[brisk bison]

yeah i got that

[boreal scarab]

31 was 23, 32 was 24, 33 is 25

[brisk bison]

thanks guys

❤️

[knotty valve]

Yea, oki
I forgot how many there's been so far lol

[boreal scarab]

Hrm, got a submit and a login page. I swear, this is turning into web pen and I hate web pen

[frozen charm]

need ricing :' )

[lament tendon]

Make up your mind, dang.

[knotty valve]

Looks fine lol

[frozen charm]

i just installed them in additional

deleting neovim

[knotty valve]

F neovim

[frozen charm]

:' )

[lament tendon]

F neovim? Neovim is goated.

[frozen charm]

btw m not able to set fancurves

[frozen charm]

any way to set legion fancurves on arch?

[lament tendon]

I mihgt know if you explain to me what you mean by fancurve.

Animations?

[frozen charm]

fan speeds

[knotty valve]

Fan control

[frozen charm]

like legion vantage

[lament tendon]

Oh, right.

[knotty valve]

With lm-sensors

Iirc

[frozen charm]

:' )

[lament tendon]

There's a package called fancontrol, maybe that'll work for you?

[knotty valve]

https://wiki.archlinux.org/title/Fan_speed_control

[lament tendon]

My fan speed worked out of the box on base Arch, I did not install anything special for it.

It just goes up when how and down when not.

[knotty valve]

They all do cause it's hard coded to the bios and that's normally typical effective speeds

[frozen charm]

didnt work

know wot gpt suggested?

allocate 30gb to windows and switch to windows and set the fancurves and return to arch for ur work

dual boot basically

[knotty valve]

Lmfao

[lament tendon]

Wat

[frozen charm]

:' )

[blissful current]

VM >>

[frozen charm]

i really want to use linux as my daily driver

[slow cloud]

Why not start with Ubuntu or mint then

[sullen schooner]

Cuz kali is just better

[lament tendon]

Are your fans not working at all?

[frozen charm]

mine is arch

[frozen charm]

they are

[slow cloud]

True but its not the best for daily driving imo

[blissful current]

[frozen charm]

i just want to clean the sokaed heat

[lament tendon]

Danm, just let other people use what they want, why does it always have to be an argument?

[frozen charm]

:' ) my friend completed his osep on arch with exegol

yesterday he submitted the report

[slow cloud]

Just asking questions bud

[lament tendon]

https://wiki.archlinux.org/title/Fan_speed_control

[whole gazelle]

LMAOO

[frozen charm]

didnt work

[slow cloud]

what exactly didnt work

[slow cloud]

that gives a bit more info then this

[lament tendon]

You first need to make a config file.

Read the wiki page.

It also has alternatives.

Like nbfc.

[slow cloud]

The arch wiki is goated

[lament tendon]

Just check the wiki link, there's one section for most types of laptop, with different tolls you can try.

[frozen charm]

i tried nbfc at the first

[frozen charm]

yep

[heady summit]

i'm not even sorry but i can't help myself.. maybe if companies would give a shit about their product, then it might not be so ridiculously easy for me to crack them..

[blissful current]

[sullen schooner]

Banned

[blissful current]

[sullen schooner]

Asimovvv!

[blissful current]

heh?

[mossy river]

Please don’t discuss piracy here

[gusty inlet]

https://tenor.com/view/inside-out-joy-hi-hey-hello-gif-16203965

[frank hawk]

Hello

May i ask if there is such thing as Free PT01 ?

like when you finished the Junior Penetration Testing Path

?

[sick lance]

There is no current free foucher for PT1.

[alpine fossil]

Y'all am I gonna get hacked when joining this server?

[sick lance]

No.

[rapid merlin]

Hi all,
Just getting started in the pentesting world, and I'm keen to get some hands-on experience through CTFs. My manager recommended them, so I went to join one yesterday, but it turned out I needed a team – which I don't have yet as a newbie!
Anyone got room for an eager learner on their team, or perhaps want to team up with another beginner? Let me know!

[oak salmon]

I know nothing about pentesting can I join?

[crystal mauve]

Hi stuart, you don’t really need a team. There are plenty of walkthroughs on YouTube and #room-help is a great place to get help if you’ve gotten stuck. Joining Voice chat is also a good place to find team mates

[safe oxide]

Hallo mate

[sick lance]

I don't think they meant on THM.

[crystal mauve]

Rly

[sick lance]

There is only one room on THM that required a "team" and that's closed.

[rapid merlin]

Yeah it wasn't for thm, the one I wanted to do was the nahamsec ctf this weekend

[crystal mauve]

Oh ic

Prob should go to nahamsecs discord, not sure if that material is pay walled

[gusty inlet]

Documentary's awesome.

[crystal moss]

yes it was really interesting...

[dark grove]

hi all correct me if I am the for openvpn ssh tryhackme@ ipaddress provided and the password to enter is tryhackme right ?

[sick lance]

Not always.

[dark grove]

opps but i remember correctly back then so long i use openvpn the default password is always tryhackme did they changed it ?

[sick lance]

The default password of Tryhackme is only on a handful of machines.

Otherwise the CTF's would be easier if all the passwords were tryhackme.

[dark grove]

ok I am doing an easy challenge known as network services but when i ssh it prompted me for the password the problem is I dont know the password 😦

[sick lance]

Maybe you don't need to SSH?

Or maybe there is another form of authorisation required, such as a key.

[boreal scarab]

"The 5 Talking A.S.S. H.O.L.E. mouth indicators say horrible things via light. See the appendix for the color code to swear word translation."

[dark grove]

a key ?

[sick lance]

Possibly.

[dark grove]

nope dont have I am stucked with this lab if I cant ssh as the lab mentioned to use openvpn 😦

[sick lance]

#room-help

[sullen schooner]

Scrubz has everyone's control. Probably has 3 backdoors in ur device too

[swift quail]

😆

Hello all I am new

[queen flare]

hi new

i'm scorpius

[alpine fossil]

I'm not even kidding I tought I was gonna get hacked when I joined this

[safe oxide]

Hallo new

[sullen schooner]

Well this website is actually a dare. See the name "TryHackMe"

[alpine fossil]

Anyhow I REALLY want to learn whatever hacking stuff or computer things you learn here

[sullen schooner]

Don't join unless you want others to hack you

[queen flare]

#start-here

[sullen schooner]

Wait. You didn't come via website?

[alpine fossil]

I love to program with all my heart and made a gambling game at school 🤑

[alpine fossil]

Discord

Server finding function

I was bored

[sullen schooner]

Google "TryHackMe"

[alpine fossil]

So I joined like a thousand servers

[sullen schooner]

And click the website

Lmao

[alpine fossil]

My brother has tried it and it seemed fun

So I felt why not learning it

[alpine fossil]

Sadly I didn't earn anything from people gambling on it 😔

[sullen schooner]

This is hilarious

But I gotta go

Got a train to catch

[rapid merlin]

Really?

[sullen schooner]

Yes. Don't believe anything he says

He's mod for a reason

[safe oxide]

Hehee

[hearty otter]

if i have 2 arms, how many arms exist in the world

[spice olive]

if i have one tounge, how many tounge exist in the world

[hearty otter]

depends on situation

[sullen schooner]

: )

[hearty otter]

why mad

[spice olive]

🫵

[hearty otter]

absolute cinema

[hearty otter]

bro saved the situation

[tardy finch]

i know there is first blood. is there such a thing as second blood or top ten blood?

[rapid merlin]

You can make your own game, and have such features

[ocean sparrow]

what is a good cybersec project idea that I can build on my own, I need my resume to standout with all the competition in this field 😭

[rapid merlin]

Device encryption

[ocean sparrow]

can u pls elaborate a lil sir

[grim sparrow]

Done!

[rapid merlin]

What

[ocean sparrow]

i meant on the device encryption idea, what will it do actually

[rapid merlin]

Do we have a room in how web crawlers are created

[spice olive]

Guys, I'm new to hacking. Should I start with Kali Linux?

[rapid merlin]

You encrypt a hard drive of a device

[blissful current]

Any Linux Platform ...your choice

[spice olive]

people say kali linux is hard for new users

[blissful current]

Pretty much Same as any other Linux

[spice olive]

alright

[blissful current]

The ethical hacking tools might be the "tough" thing u mentioned for some

[spice olive]

[rapid merlin]

If somebody steals your device and your hard drive is encrypted, the data in the hard drive is encrypted and can't be read .

[bleak quartz]

it's from the more friendlier side compared to others imo

[blissful current]

Can go for kali since it provides all the tools inbuilt ..if u don't want any sort of hassle afterwards of manual installations

[spice olive]

alright

[blissful current]

Not all but most ...usually used tools

[bleak quartz]

a bunch

also u can choose which tools you want to have pre installed

[flint badge]

Hey, is anyone familiar with the task 2 on Snort "TryHackMe" ? I need some help to complete the question.

[oblique loom]

My current course is making me take the comptia A+ x.x

[sick lance]

#room-help

[bleak quartz]

I can

lets move to that tho

[bleak quartz]

so scbruz police don't get angry

[bronze eagle]

When can we have server tag? So we are cool too

[bleak quartz]

#room-help

go

[sick lance]

Oh no, how dare I ask a member to move their conversation to a more apt channel.

[oblique loom]

Speaking of labs I haven't done one since Feb and I feel so rusty

[rapid merlin]

People get so annoyed at you for modding when you're a mod XD

its ironic aint it

[bronze eagle]

Hihihi thats okay :3 Resting is fuuuuuun

[bleak quartz]

Haha

[bleak quartz]

I didn't mean it seriously

😭

[oblique loom]

Im not resting, just been too preoccupied with college and work x.x

[rapid merlin]

It's everyday for him though, everyone does it to scrubz

[bronze eagle]

ahhhh slaving is sadge 😦

[oblique loom]

Current course is so boring it's grueling

It's like basic IT stuff kinda

A+ stuff

Only good news is if I get my A+ it also renews my security +

[boreal scarab]

So far, this DEFCON Badge CTF has: Web pen, cryptography, stegonography

https://tenor.com/view/detective-pikachu-coffee-drink-coffee-caffeine-no-coffee-gif-25440709

[sick lance]

Can it open wigle.net?

[boreal scarab]

Yes, yes it can.

I was prob temp blocked from their site for trying to login too many times with failures lol

[sick lance]

That would be an account lockout, not IP.

[sand trench]

depends

some services do ip lockouts

which is poopy

[boreal scarab]

You'd think so , but nope, on VPN i was able to sign into my account, so not an account lockout, they IP locked me out

[sick lance]

Skill issue.

[boreal scarab]

Cryptography done, flag acquired. new path opened up

[unique phoenix]

Is there any plans in the future on adding a button/option to disable the AI thingy?

[split plover]

What ai thingy bro?

[brittle siren]

Does somone know hackin

?

[unique phoenix]

Echo, the things that "helps" you.

[spice olive]

what is hackin

[brittle siren]

Hacking

[spice olive]

[blissful current]

never heard of it

[split plover]

Hahah 🤣

[spice olive]

[brittle siren]

[blissful current]

[split plover]

@brittle siren what is it buddy? You wanna learn hacking?

[brittle siren]

Yes

[split plover]

Hmm... Interesting

[brittle siren]

I wanna hack hack this guy who stole my account and scammed me

[split plover]

🙂

[spice olive]

[blissful current]

[brittle siren]

55$ account

[blissful current]

contact police/Authorities/Cyber Crime Branches for it then

[split plover]

Fr lol

[brittle siren]

Tell me process idk how to

[blissful current]

search on google ...as per your country's laws and regulations and complaint filings

[brittle siren]

Tht guy isn't from country

[brittle siren]

[spice olive]

so he is from the ocean

[blissful current]

i mean u file complaint in ur own country first right?
then they'll handle the rest

[brittle siren]

Idk he from china most porlly

[mossy river]

That would be illegal and against the community rules

[wheat hare]

Damn, I just missed seeing my rank at 6900 😅

[brittle siren]

[mossy river]

Use the report commands to report rule breakers please

[brittle siren]

[spice olive]

[blissful current]

ah well, i keep forgetting that exists

next time will do

[brittle siren]

U mean me

I don't know I broke the rule

[rapid merlin]

cool yet scary name

[brittle siren]

[mossy river]

Rule breakers is a collection

[blissful current]

u mean 6969*

[wheat hare]

That would've been even more epic! ( I mean "NICE" 😆 )

[spice olive]

🤖

[blissful current]

[boreal scarab]

FLAGS CAPTURED: 1/19

OH FUCK MY LIFE!

[rapid merlin]

What are you up to ?

[blissful current]

DEFCON

[boreal scarab]

Doing, or attempting to do a CTF from DEFCON 31

[rapid merlin]

Is that going on right now?

[blissful current]

old one he's doing i think

idk , all the good stuff takes place in y'all countries

[wheat hare]

Sounds more exciting than "upgrading" Windows 10 to 11 tho

[boreal scarab]

2023 defcon

19 flags, working this alone besides a team... yep, I'm screwed

[rapid merlin]

A part of me wants to try 😂

[boreal scarab]

I can also change the color of the lights, has to mean something....

[rapid merlin]

We had a question in tryhackme in a room about changing the colour of lights

It was a room that spoke about attacks towards physical end points

[half badge]

Guys I started studying again! Yayy

Did some cryptography today and I'll continue

[sand trench]

congratz... remember to take notes and teach your rubber ducky

[half badge]

Got any good room recs abt cryptography? (Free cause this time period no money :3) Or challenge rooms?

[half badge]

Tysm shadow is so kind always

[last harbor]

I think I do

[half badge]

Feel free to send!

[blissful current]

hmm...,Not bad PPLX

now i dont think i'll ever even get confused or forget the 7 layers of OSI in sequence lol

[last harbor]

U can do “cryptography basics”

[half badge]

Well yeah. Got any challenge rooms you'd recommend for cryptography?

[last harbor]

Idk

I don’t have any

[blissful current]

search on the site in challenge section , you'll get some

[sand trench]

https://tryhackme.com/hacktivities/search?page=1&pov=all&order=most-popular&difficulty=all&roomType=challenge&contentSubType=free&kind=all&searchText=cryptography

[rapid merlin]

I think after this red team room I'll do a blue

Mix it up a bit

Can we something similar on other browsers? "User-Agent Switcher and Manager"

[blissful snow]

purple

[rapid merlin]

The one that " gives you the ability to pretend to be accessing the webpage from a different operating system"

[blissful current]

i think u can

maybe by making a Custom script? or perhaps an extension?

[rapid merlin]

That is an extension but it’s for Firefox

I’m tired now

https://tenor.com/view/nap-time-boo-monsters-inc-sleep-gif-10523564546651807055

[blissful current]

Custom scripts probably then

[half badge]

Guys for those of you who use obsidian is it reliable? Like if I lose a device all data lost?

Any cloud or option to transfer to usb?

[blissful current]

i think u can make backups and save the file in ur USB

[half badge]

Ty

[slow cloud]

[blissful current]

[kindred yew]

Hello chat, long time no see.

[sand trench]

ello fox

shadow would be in FRA or SÄPO

[kindred yew]

I have probably missed so many wallpapers

[blissful current]

1

[sand trench]

Wallpaper of the day:

[blissful current]

or maybe 2-3

[slow cloud]

More a men in black suits department you know

https://tenor.com/view/йокелемене-men-in-black-light-sunglasses-gif-15516530

[kindred yew]

https://tenor.com/view/coffin-dance-meme-man-men-african-ghana-africa-funeral-coffin-dance-man-men-gif-16802146

[slow cloud]

Now look in the camera

[blissful current]

[slow cloud]

Nah i dont work for a government or any thing like it

[bleak quartz]

https://cdn.discordapp.com/attachments/725692503172579379/747945584941334538/image0.gif

[slow cloud]

I work for a mssp

NOOO

https://tenor.com/view/abort-mission-running-away-jerry-twin-peaks-gif-10802857692585960657

[bleak quartz]

😂

[slow cloud]

I use one drive to back them up but pretty much any storage solution will work since obsidian notes are pretty much just markdown files

[bleak quartz]

https://tenor.com/view/fehlerhaft-fehler-bugs-bug-gif-26196067

Dw lol

Very understandable from the context anyways

[half badge]

Is it paid?

[blissful current]

open source , free

[half badge]

Ty

[twin ridge]

Gave +1 Rep to @slow cloud (current: #99 - 80)

[half badge]

Ahh okay

[slow cloud]

Maaaaybe

[bleak quartz]

Yes

[slow cloud]

Top 100

[bleak quartz]

Very reliable

Also read their website

They got answers to ur other qs

[slow cloud]

Arch/Arch

Yes

[half badge]

Yes

[blissful current]

Arch

[bleak quartz]

Obsidian is so good

Absolutely love it

[slow cloud]

5806 Archieroy

[blissful current]

windowns

[slow cloud]

We'll how will u guys know who's team you are on? We just scream we use arch

[half badge]

An obsidian vault on a github repo could perhaps work too? Maybe

[slow cloud]

We use arch as a battle cry goes kinda hard

[slow cloud]

As long as you can get the files on your own machine

[blissful current]

[half badge]

Yeah

[slow cloud]

I don't know if obsidian can fetch files from a repo. Probably not natively

https://tenor.com/view/bh187-braveheart-cheer-battle-cry-war-cry-gif-19285838

We have pewdiepie

[blissful snow]

why does tryhack vpn never works

well hardly

[sand trench]

one of the most common obsidian plugins integrates git

[slow cloud]

Oh damn, cool

Moving to git then

[slow cloud]

Us archians have suffered enough through the install we can take on everything

[ocean sparrow]

thanks man

[twin ridge]

Gave +1 Rep to @rare galleon (current: #1898 - 2)

[slow cloud]

[blissful current]

[slow cloud]

Ubuntu allience

Need i say more

[blissful current]

i'll probably be getting cooked in the interview tomorrow

[slow cloud]

You'll be fineee, what are you interviewing for

https://tenor.com/view/patrick-star-dumb-duh-gif-13669009

Avarage member of your silly army ^

[blissful current]

Apprenticeship as probably Analyst or Dev or something

in ANZ

[slow cloud]

Falls to their knees, barely able to speak, voice trembling:
"You… you’re stronger than I thought… But listen… that thing… it can’t be defeated… not by force… not by anyone…"

How can one defeat itself

[blissful current]

the weirdest thing i have seen today

[slow cloud]

Its my dual boot

[blissful current]

🌬️

[swift quail]

nooooo!

[shy vortex]

Wassup everyone !

[swift quail]

IM BLIND

[slow cloud]

Wasssaaaaa

[swift quail]

warrap runescape 3

[shy vortex]

Lmao

How ya doing

Glad today we got a day off from work 🙂 lol

[swift quail]

I memorized where the keys were two seconds before you nuked my eyes from hannah montannah

[blissful current]

gonna be my First F2F Interview tho
nervous af already

[crystal mauve]

Wanna practice ?

[blissful current]

am off to sleep after reading thru Kubernetes and Qliksense's Docs

will see Tomorrow's shit Tomorrow

[crystal mauve]

How much soda did you drink

[swift quail]

loool

he's funny

[crystal mauve]

Good luck

[boreal scarab]

Wait, I refresh the page and the flag amount changes..... my head hurts

[swift quail]

you

bud

[blissful current]

Kome D. Luffy

[swift quail]

I think you can do both and win life altogether, I think it would be good mix.

Stand up comedy at night

blue teamin in the morning

[last harbor]

Wats happening here

[blissful current]

aight am off to sleep ...read enough ...will see in morning before the interview probably

Good night

[slow cloud]

Goodnight Goodluck tomorrow

[boreal scarab]

AHHHHHHHHH

@polar spoke I'm going insane, hashcat is not playing nice with me, can I DM you?

[polar spoke]

sup

[boreal scarab]

Have a hash, that I believe to be MD5, but no matter -m 0 -m 1000, still says there's no hashes

[trim portal]

Hello, may I ask if there is website you can recommend for almost like AI-tools to ask about excel formulae please?

I am sorry if my question is not topic related.

[slow cloud]

I think any of the ai tools can create excel formulas

Have not done it myself that much so cant vouch for any

[trim portal]

I found a small issue with a table with values coming from another sheet in the excel, and it keeps showing there are missing values despite I already input everything.

I asked but it couldn't answer..🥹

[polar spoke]

you cant get it to load the hash?

[trim portal]

And because I am not the owner of the files, I am clueless of what went wrong (yet I am expected to fix them since missing values can affect the graph)

But thank you for answering! 🥹

[twin ridge]

Gave +1 Rep to @arctic gyro (current: #1898 - 2)

[slow cloud]

The excel world championships are crazy

[trim portal]

OMG, that exist?!

[tight trout]

mornin yall

[slow cloud]

Yesss

https://youtu.be/QwNoFOUiSiE?si=yuxENg0_nsUhIE7N

[trim portal]

What does that mean if you don't mind me asking?

[slow cloud]

[trim portal]

Oh no no, I don't see Pookie as a flirting word.

[sand trench]

beautiful website: https://lrclib.net/

[trim portal]

Ok, I just checked. The formulae that seemed to be making the table on second sheet is not an official excel formula But I don't know how to carry on and search from there 😭

Interesting...

Thank you!! I will check them out now!!!

[twin ridge]

Gave +1 Rep to @umbral geyser (current: #1898 - 2)

[sick lance]

My roles aren't updating for everyone

Apply for jobs

[sand trench]

yeah they post open jobs on a few places when there are any

[sick lance]

Yeah.

LinkedIn and a jobs page.

[hearty otter]

how was the application process until you landed to the job

[safe heart]

has anyone here read Real-World Bug Hunting?

[hearty otter]

no tell me about it

[safe heart]

idk i might buy it lmfao

[sudden pollen]

Can someone tell me the best place to learn cyber security without going to school

[hearty otter]

damn we both do not know it

is it a coincidience

[safe heart]

sad

[safe heart]

hack twitter

[hearty otter]

you should learn fundamentals first before crybersecurity

mit has public courses

[sudden pollen]

Is hack twitter a website ? Or

after learning fundamentals where should I go to learn cybersecurity

[safe heart]

my networking skills need to be improved

[sick lance]

It was good.

[sand trench]

https://tryhackme.com/
youtubers
cve proof of concept writeups
tons of hacker specific news sources

[crystal mauve]

U don’t have to, fundamentals can b boring

[hearty otter]

damn, bro is talking like a politician 😭

[hearty otter]

improve it 🫢

[hearty otter]

you can't skip things just cuz it's boring tho

i hate reading boring emails too but still do

[safe heart]

how

[hearty otter]

idk bro i am freshman 😢

[crystal mauve]

Yeah you can

[hearty otter]

if you have enough skills at it then yeah 😄

or money to pay people for doing it

[safe heart]

i am junior

[crystal mauve]

You don’t have to know a single port and what it is to run an nmap scan

[hearty otter]

sheesh how is it going

[safe heart]

sophomore year is horrible goodluck

[sudden pollen]

What did you mean hack twitter

[safe heart]

hack twitter

[crystal mauve]

Tryhackme teaches fundamentals, you’re at the right place

[sudden pollen]

does it teach like cybersecurity i don’t really care abt fundamentals

[crystal mauve]

Yah basically skips the boring stuff after presecurity 101

[safe heart]

fundamentals is essential imo

[crystal mauve]

U don’t even need any extra tags for most ctfs

[pallid lotus]

Yeah, this is really dumb advice.

[naive violet]

Fundamentals are fundamental, hence the name. They're a foundation to build on.

[crystal mauve]

U don’t need to memorize ports n networking cables to do ctfs

[naive violet]

They might not be interesting, but they're critical

[crystal mauve]

If he wants to jump in let him

[sick lance]

Are you thinking of applying?

[stark sequoia]

if you dont learn the fundamentals you will forever be a script kiddie

[sick lance]

It was good to meet the team.

[pallid lotus]

Hacking is about leveraging knowledge to make things do stuff they're not supposed to do.
It's a mastery of other forms of computer science.

If you don't understand those other forms, how tf do you expect to do anything?

[naive violet]

Until you need to work out what to plug
Or what systems are out of scope
Or why you can't hit a target

[stark sequoia]

sure but you need to know what they are to look them up if needed

[pallid lotus]

Learning also != Memorising

[crystal mauve]

He’s gonna be using a walkthrough likely , no noob is gonna correctly enumerate and find an exploit on their own

[pallid lotus]

Yeah, and you'll stay a noob if you don't understand what you're looking at lmfao

[crystal mauve]

No it’s called practice - u learn while working and learning

[naive violet]

Well, why not? Because they keep skipping the fundamentals!
HTB's style of easy where it's find software, find version, find exploit, pop is the baseline that you should have before jumping in

[sick lance]

Unless you just copy a walkthrough

And don't learn.

Waste of time.

[crystal mauve]

He’s not applying for a job lol

[naive violet]

You need to care about the fundamentals.
Pleasr take this advice from people in the Industry and involved in hiring processes etc

[crystal mauve]

He’s trying that have fun

[pallid lotus]

Learning to break stuff without understanding how it works is like building a castle on sand.

It won't go well.

You need to understand the fundamentals before you can be remotely good at your job.
If you can't build it, you shouldn't be hacking it.

[naive violet]

It's more fun when you know how stuff works...

Whole hacker mentality is knowing how stuff works

[sudden pollen]

I said I don’t really care cause I’ve already leaned fundamentals

[crystal mauve]

Stop trying to push people to learn A+ material when they just wanna run a friggin scan

[naive violet]

You're the one that said A+

[stark sequoia]

is this ragebait?

[crystal mauve]

It’s silly , they will get to learning the fundamentals if they find a passion for it

[sand trench]

A hacker embodies a boundless passion and insatiable thirst for understanding the complexities of a system, computers and networks in particular. They revel in the pursuit of knowledge and mastery, constantly seeking new solutions and opportunities for growth. Their drive and innovative spirit inspire and are inspired by the hacker community, where ideas and knowledge are freely shared and valued regardless of their origin.
--Silk

[naive violet]

Don't skip them. It'll be quick if you already know them.
Foundations and fundamentals vary between fields

[pallid lotus]

Again. Castle on sand. No point in skipping ahead.

If you don't know what you're looking at then you're not really hacking. You're just running tools, or following someone else's path.

[sand trench]

shadow is feeling stupid as they can't figure out how to set a specific browser as default on arch linux

[stark sequoia]

think about it. If youre just using the tools then.... what are you learning? Theres literally 0 thinking involved and just running a bunch of commands you had laid out to you. That aint fun

[hearty otter]

Yeah why not

[pallid lotus]

That's very different from how it feels when you actually know what you're doing.

[crystal mauve]

Using the tools u can learn to understand them ? lol

[naive violet]

Not xdg?

[patent falcon]

anyone knows a good alternative for the vuln machine of the book hacking the art of exploitation?

[stark sequoia]

no you wont, you never will becaues they abstract the concepts from you

then you wont be able to understand why something went wrong.

[crystal mauve]

Do you guys sit and real every manual before playing a video game or do u actually play it n get good ?

[sand trench]

well yeah but apparently shadows xdg entry is blocked as they set the $BROWSER variable but the variable does not work currently... gonna try commenting it out and then reloading window manager after the stream shadow is watching is over

[stark sequoia]

can you make video games by just playing games?

or do you understand how game engines work?

[rapid merlin]

Hey scrubz I'm learning traceroute. It says "traceroute command traces the route taken by the packets from your system to another host" Could it be traced back if the packet is caught. Can I find someone from the packets sent in

[crystal mauve]

He’s not trying to learn to be a programmer he wants to hack a box

[sand trench]

don't see why not as your ip will be the orginating ip for the traceroute package

[rapid merlin]

I wish I had taken that nap earlier

I'm so tired

[crystal mauve]

No lol

[rapid merlin]

I went to lay down and my kid saw it as a challenge to wrestle.

[pallid lotus]

If I tell you to run an nmap scan on port 2893, can you tell me what actually happens when you do it? Can you tell me how that service works, how it's deployed? Can you take me through the network flow, and ascertain how that infrastructure works?

Without that, you're a script kiddie. Nothing more.

Also, cyber security isn't a game smh

[last pewter]

Yes and yes

[sand trench]

thanks for confirming shadow is a script kiddie muiri

[rapid merlin]

Thanks

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2150)

[pallid lotus]

Yw. Go learn networking lmao

[crystal mauve]

U think he or anyone needs to know all that to get their feet wet using basic tools ? No he’s starting off he’s not trying to apply for a pen tester position

[pallid lotus]

Yes. I absolutely do.

Because that's the foundation of hacking. Not the tools. Not the CTFs. That.

[sand trench]

well will go back to uni after shadow has gone through enough treatment to not feel like a depressed potato with the anxiety of a bun bun

[rapid merlin]

Idk, i kinda see it from both perspectives, basics and fundamentals are definitely needed, but if you don't start with some of the fun stuff and get some context of why it matters and build some interest, stuff can maybe get a bit boring and you can hit a wall just studying theory

[glossy mural]

Ro Bot Rock

[pallid lotus]

I remember adding this lmao

[last pewter]

Learning the theory before using tools is always good though. Sure you can do both at the same time; i like splitting my sessions into 3 parts. Theory for an hour, beef up my computers defenses 30mins, do fun stuff and apply what i learned for an hour.

[rapid merlin]

Completely relatable to be honest. Treatment doesn't work on me, sadge.

Uni also expensive

[sick lance]

Somebody could find you, but unless you have higher access,.you won't find anything concrete

[sand trench]

eeeeh the most expensive part of uni here is the books we have to get to read and study

[crystal mauve]

I did walkthroughs n basic ctfs for months then realized I need to learn the fundamentals. But starting off just diving in and using tools got me to the point in taking web security , networking , etc much more seriously. But if it wasn’t for aimless nmap scans I would not have become motivated to get there

[sand trench]

as shadow has stable housing and decent bit of dinner food options

[rapid merlin]

I mean can I reverse them finding me with the tracerroute.

[pliant cairn]

just a quick question - is there an SSTI room/CTF on THM? i know there are but searching gave me unrelated.

[rapid merlin]

I dont know if Im even making sense. I've only powered up a brain cell. The rest of me is in another universe.

[narrow bone]

Jep i feel that 100%
I am preparing for the Network+ for some weeks now and my view has totaly changed. Things get way easier once i started to truly understand everything around and with networks

[stark sequoia]

i feel like when it comes to CTFs you either know what you are doing or copy commands then completely forget about the solution. Theres not much learning going on unless you do both the theory and a practical example. Thats how it should be done for beginners

[sick lance]

They would be like a MiTM, so probably not

[rapid merlin]

I did fundamentals first before anything else I think.

[sand trench]

shadow built birdhouses first

[rapid merlin]

Okay, I see.

[crystal mauve]

Yep

[pallid lotus]

Eh?

[pliant cairn]

i see some chatter on traceroute. So, just to add. Its over the protocol called ICMP. mainly just to discover network hops and nothing other than that. well there are similat tools like tcpping and other protocols that do the similar thing but more or less, if you made a request you are supposed to receive a response so, the packets have to know where to reach to. So, yeah someone can trace back to you 🙂 @rapid merlin

[sick lance]

They're not asking if she can be traced, she's asking if they can trace them.

[pallid lotus]

End of the day, as far as your router is concerned, it's just been pinged.

[sick lance]

Wrong direct.reply.

[crystal mauve]

And yeah that would be what someone could answer if they had in depth knowledge , but if you’re NEW to cyber security you will be running BASIC scans on EASY machines , where stuff is EASY to find

[pallid lotus]

So, yes, the originating IP will be in your firewall logs, assuming the firewall records that stuff.

[inland moon]

Can i u guys something

[pallid lotus]

But you're not going to see all the way back.

[sick lance]

Bold to assume. 😄

[pallid lotus]

Just the source address. Not the route it took to get to you.

[pallid lotus]

I run OPNsense. It's beautiful

[pliant cairn]

people might have missed my question - any rooms/ctf on THM for SSTI?

searching didnt help

[inland moon]

Is it possible to hack using mobile phone?

[sand trench]

shadows ip is 127.0.0.1 most of the time

[sick lance]

The average user doesn't.

[pliant cairn]

damn same. can 2 people have same IP addresses. 🤓

[sand trench]

yes if they are on NAT:d networks

[sick lance]

Can they? Yes.

Should they? No.

[pliant cairn]

superior than Palo alto. #hottake

[sand trench]

2 different nat:d networks thatn is

[rapid merlin]

So it does leave some sort of pathway back to them? So TECHNICALLY speaking. Could I find my way back to the attacker through that or would I utilise another method to reverse it.

[pliant cairn]

ofcourse im just kidding

[sand trench]

well you can have fun denial of service if you accidentally set the ip:s to the same number on two computers inside one network

been there done that

[pallid lotus]

If you're new to cyber security then you should already have a good knowledge of computer science -- which all that stuff comes under.

Cyber security is the expert application of other forms of computer science. In itself it is not -- and should not -- be entry level.
For the record, you're not being shot down for no reason. Teaching people tools without understanding is dangerous. Chances are they're gonna hit something they shouldn't hit, which won't end well for anyone.

[pliant cairn]

route? no. destination. yes. if there were artifacts left by an attacker. like logs. then we can see the destination the data exfiltrated or just connection made to the machine you are testing on.

[pallid lotus]

You wouldn't "reverse" anything. All you would see is an ICMP / UDP packet from the original IP.

Which may or may not belong to the attacker.

[crystal mauve]

Where do u draw the line tho, oh don’t use a rustscan unless you understand how rust works!?

[stark sequoia]

mine is localhost 😎

[sand trench]

during gymnasium years as a project shadow had to setup a server and some clients and accidentally duplicated a static ip... took about 45 mins of troubleshooting to figure out that was the cause

[rapid merlin]

"Not extry level" Yep. I started in cyber and that's why it was so painful 😂

[pliant cairn]

most of the time not attacker's XDXD

[rapid merlin]

Okay Thank you

[twin ridge]

Gave +1 Rep to @pallid lotus (current: #10 - 882)

[sick lance]

So why did you say "eh" to me.

[rapid merlin]

Thanks

[pliant cairn]

it will be very fun. cyber is what we all enjoy here

[pallid lotus]

Function rather than implementation. Don't use rustscan unless you understand:

1. Fundamentally what a port scanner does
2. How rustscan functions
3. The legalities behind scanning stuff on the internet.

Rustscan actually being a very good example there because it's designed to be fast at the expense of safety.

i.e. it's a bad choice irl

[sand trench]

shadow has some understanding of networks and networking but there is huge gaps in their knowledge

some of which is unknown unknowns

some of which are known unknowns and so on

[crystal mauve]

Also platforms like thm bridge that gap allowing new users to be introduced to those tools in a safe environment? It’s the entire point of them , there’s a friggin module called PRESECURITY

[stark sequoia]

its okay as long as you know what you dont know so you can look it up when needed

[warm grotto]

Rustscan, ay?

[steady pewter]

Hallo everyone.

[sick lance]

Eh, I just stick with nmap.

[pallid lotus]

Yes, and that isn't necessarily a good idea.
When THM started it catered primarily to cyber security / comp sci students. These days it's marketed at people with no technical knowledge at all.
The fact it exists doesn't inherently mean that's sensible.

[sick lance]

I'm not impatient enough 😄

[crystal mauve]

It works great for beginner ctfs tho

[pallid lotus]

And that is exactly my point. It's great for CTFs, but if you don't understand the nuances of what it's doing, you're going to end up damaging something when you start working IRL.

Which is why it's so important to not skip over that stuff when you're learning it in the first place.

[rapid merlin]

definitely agree with those points

[pallid lotus]

Just generally speaking there are times when a portscan is not a good idea, period. If you can't recognise those and just blindly scan everything then, again, you're going to cause problems.

[steady pewter]

yeah..rustscan is good for speed and CTFs, but..it tends to be..overly agressive at times.

[sand trench]

still prefer nmap due to how many options it gives you for optimising for stealth vs speed and harmful vs safe scans

[warm grotto]

What's an example of a scan being harmful?

[sand trench]

check the nmap unsafe scripts

[pallid lotus]

So, yeah, if you're treating CTFs like a game, and have zero intention of ever going into industry or otherwise applying what you've learned in the real world, sure, dive straight in. No problem with that.

[sand trench]

there you go

[crystal mauve]

I think u have a tough time separating IRL reckless practices with what’s actually being done via thm

[rapid merlin]

I just feel like if you take a complete rookie and force them to go really in-depth in networks or something like that for a long time, without any prior context, quite a bit of people will be thrown off the bus

[pallid lotus]

Certain networking appliances, some lights out software, and a lot of old OT stuff really doesn't like being scanned.

i.e., it falls over.

[crystal mauve]

Thank you

[twin ridge]

Gave +1 Rep to @pallid lotus (current: #10 - 883)

[pallid lotus]

I know a guy who took out an oil rig mainframe that way.

[sand trench]

welp that is a big problem

[warm grotto]

Ah, so just a simple nmap scan in some cases can end up causing a Denial of Service?

[pallid lotus]

Yep. Thing ran for 30 years straight with no problems until rookie threw nmap at it

[pallid lotus]

Yeah

[sand trench]

yuups

[crystal mauve]

I’ve heard if u run a scan on an fbi website it’s an auto felony , this true @pallid lotus ?

[sand trench]

nmap can definitely do denial of service

intentionally or not

[sick lance]

Yeah.

[pallid lotus]

Point being: if you're telling people to do that, make that abundantly clear.

[crystal mauve]

Okay agreed

[wheat hare]

Nice. 2 hrs later my "upgrade" from Windows 10 to 11 is complete...

[pallid lotus]

Check local laws. That'll be an American thing if so.
Different countries have different opinions on that.

[sick lance]

Wow

That was ages.

[pallid lotus]

Rule of thumb is that it's much safer to just not touch anything you've not been given express permission to touch.

[sick lance]

I can't remember how long mine took, but it wasn't 2 hours.

[sand trench]

rule of thumb send anonymous tips to the CIA if you live in the usa

[warm grotto]

Interesting. Good to know. I guess that makes sense thinking back to Highschool. We had thin client linux boxes for login and sometimes when we'd be in the computer lab, I found out when you nmap'd one of the logged in clients' IPs, a black bar with white text would pop up at the bottom saying random crap sometimes. Found it funny at the time because one of the things said was "HELP", but now that you mention it, that does make sense. Things can respond in ways not especially understood.

[rapid merlin]

Man you guys kinda making me a little bit nervous haha

I did a short internship a while ago as a kinda cyber analyst/it-support in a small/medium company and did a port scan

[wheat hare]

lol yeah, A couple years ago when I did it, it didn't take too long at all. But I didn't like 11 at all so I switched back to 10. I think there have just been a bunch more patches to the OS since then that made it take so long.

[woeful rock]

[rapid merlin]

I hope nothing went out of service 😂

I had asked for permission though

[pallid lotus]

You should be. Again, this isn't a game. A cavalier attitude to security will -- sooner or later -- bite you in the arse

[safe heart]

no

[pallid lotus]

You'd know if it had

I wouldn't worry about that specifically 😂

[rapid merlin]

Yeah i figure aswell 😄

[safe heart]

i inject fsociety.bat on my pc and it got ratted

[pallid lotus]

Even if you didn't catch the error, you'd have an angry sysadmin yelling at you very quickly.

[pallid lotus]

That sounds like a FAFO situation

Play stupid games, win stupid prizes 🤷‍♂️

[safe heart]

i watned to be like mr.robot

yeah how do i download opsec

[wheat hare]

Also, I'm not sure how realistic of a possibility that the hardware of my aging computer contributed to the time it took to switch the OS, but I can't help thinking it did.

[pallid lotus]

Oh dear Lord

On that note, I'm going for dinner.

[sand trench]

have a good din din muiri

[safe heart]

yum

[crystal mauve]

Provecho

[pallid lotus]

Please never say that again

[sand trench]

aaaand fixed the setting browser problem

that was a lot easier then shadow expected it to be

[gusty inlet]

I just came back from scrolling and reading an hour of chat to see Manner's and Muiri's conversation.

[crystal mauve]

lol

what do u think dkob? fooolish to start running scans before knowing the background and its noise?

[gusty inlet]

I stayed awake until 4Am yesterday just to know EXACTLY how AS-REP works. I already knew but I wanted to deep dive in it. Like very deeply. And after looking at exactly what's inside the rep blob and as well as the enc_part, I totally and definitely understand Muiri's point. It's just another level when you actually understand what's happening. Not only does this help you break things, but also find mistakes. I found a mistake in the AD section of THM when it comes to AS-REP.

But yeah if someone just wanna be here for the fun of it, sure get directly into CTF but maybe make sure that that's what they're here for. Most people want to become good I'd like to assume so better tell them not to skip.

@pallid lotus Generally speaking do you think going this deep will help my journey into red teaming?

[pallid lotus]

Depends what you're doing. For most red team roles, yes, 100%

[crystal mauve]

true they did ask about cybersecurity, not ctfs

[gusty inlet]

Gotcha thanks helps a lot! - @pallid lotus

For context I saw that the course on THM mentioned that the AS-REP had the TGT and gave back as well the session key... But I thought there must be something more. Turns out it doesn't give the "session key" but actually the enc-part which holds it.

[steady pewter]

Is this like..ooh, I see..kerberos.

[gusty inlet]

Yeah but it is super generalised. To be fair it was an introductory course but it's still inaccurate information.

I was looking at AS-REP Roasting deep dive using Black Hat USA 2014 PPT material and I thought that there must be more... and indeed there was.

[steady pewter]

yeah, Roasting is a bit tricky...

[gusty inlet]

IMO the easiest AD Account attack.

[steady pewter]

What can I say? I'm not very fluent in AD.

[gusty inlet]

Oh gotcha no worries.

[jovial mountain]

Good evening to all

[steady pewter]

Good Afternoon.