general

[soft vortex]

its ethical platform.

send you req?

[knotty pendant]

https://cdn.discordapp.com/attachments/1224853663290490921/1239577352908836997/image.gif

[hollow shard]

oh ok

[inner bloom]

yea

[digital estuary]

https://tenor.com/view/twitter-blender-ssoggycat-shark-soggy-cat-gif-16395386061673462261

[tight trout]

why

[hollow shard]

what to do after the presecurity

[cosmic pendant]

Go watch NetworkChuck on IP networking

[digital estuary]

what is going on today

[cosmic pendant]

Nothing good

[tight trout]

average weekend stuff

[primal ether]

hi

[digital estuary]

hi

[tight trout]

hiya

[knotty pendant]

https://cdn.discordapp.com/emojis/1140645356061868042.gif?size=48&animated=true&name=kit_jiggy

[digital estuary]

we are hitting bad rolls on the slot machine today (people keep asking for unethical tutorials)

[cosmic pendant]

#QuickBansFTW

[primal ether]

im kinda just getting started learning hacking and damn why is it so hard to find where to even start lol

[cosmic pendant]

have you heard of youtube?

[thorny prawn]

Check Windows API documentation its basic knowlege bro

[digital estuary]

go for the free roadmap or if you're subscribed follow the premium ones

also take notes since this field is quite large

[tight trout]

#start-here

also i love your bio lmao

[elder egret]

but youtube regulations are top secure for the user ...so its important info is protected by their guidelines

[primal ether]

im taking a cybersecurity course too, next year (in a few months) we'll be learning some ethical hacking but idk i still need to learn how to code

[cosmic pendant]

Why do you feel so confident in saying such stupid things?

Please stop

[elder egret]

cuz thats what i need

[cosmic pendant]

You don't know what you need

[digital estuary]

having programming knowledge is good
helpful for automating some boring stuff (python!)

and other stuff

[half badge]

sup people

[blissful current]

[elder egret]

so what can u make me learn ? ( point that made me dumb)

[primal ether]

yeah i been trying to learn python but idk what to even make with python or what i wanna make

[digital estuary]

honestly make anything

even simple things

like a calculator

[primal ether]

ooh alr ty

[fleet pivot]

a couple hours from now im gonna have to do very hard work for hours

[digital estuary]

just anything that can be fun, or helpful

[blissful current]

K

[tight trout]

check out #start-here to get started learning

[fleet pivot]

this field is boring af

back then

[digital estuary]

good luck 😨

[fleet pivot]

i thought it was cool

[crystal mauve]

What a sentence

[mighty river]

When you make things, how do you create a portfolio to store them in? I've read you make a Github account and you can store it in there #completebeginner

[blissful current]

[blissful current]

Which field?

[fleet pivot]

deez nuts

[crystal mauve]

What’s deez nuts

[blissful current]

Aight ...that's how u wanna talk

[agile mica]

When can i join general call?

[digital estuary]

verify

[agile mica]

ty

[sharp citrus]

How to Verify as a Student Without a Student Email

Article Link

https://help.tryhackme.com/en/articles/10617468-how-to-verify-as-a-student-without-a-student-email

Jul 6, 2025, 5:31 PM

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 6, 2025, 5:31 PM

[digital estuary]

oh

what a showdown LOL

[fleet pivot]

cybersecurity

[digital estuary]

refer to this @agile mica

[blissful current]

Too late

[agile mica]

thanksss

i will do

[digital estuary]

@blissful current thanks for beating me on the /docs showdown LOL

[twin ridge]

Gave +1 Rep to @blissful current (current: #103 - 82)

[fleet pivot]

bro cannot take jokes

[blissful current]

Nah probably urs is first

[ripe cosmos]

should I go to sleep?

[digital estuary]

yeah but mine is for getting student discount w/o student email

[blissful current]

I typed wrong at first before sending it

[digital estuary]

how many points

if you got enough points that no one will be catching up go sleep

[fleet pivot]

yo bro

[ripe cosmos]

I'm ahead by about 450 points

[foggy terrace]

hey guys anyone got idea on how can edit a video stream and youtube won't detect it as copy right?

[fleet pivot]

its a joke

[tight trout]

why

[sand trench]

summer games done quick event has started

[digital estuary]

round it up to 500 points ahead and you good

[blissful current]

https://tenor.com/view/good-night-good-luck-dying-light-gif-12050200

[sand trench]

go enjoy some games being speedrun

[fleet pivot]

u dont have to take it so serious💀

[blissful current]

Ya am chill

[crystal mauve]

that's not even how u use that joke

[agile mica]

test

Aight

[fleet pivot]

yes it is

💀

what

[crystal mauve]

no, you;re suppose to responde deez, and they say deez what?

[blissful current]

[crystal mauve]

and then u follow / deez nuts

[fleet pivot]

yea but it can be used like that

[crystal mauve]

no thats how its always been and will always be

[digital estuary]

alright guys time for me to go take a big break see you guys

[fleet pivot]

i remember doing that so many times

[digital estuary]

https://tenor.com/view/bleh-cat-silly-cat-cat-sticking-tongue-out-gif-12332973546502369976

[tight trout]

[fleet pivot]

no this kid is here

[foggy terrace]

still on this?

[blissful current]

Sup

[tight trout]

why pt2

[tight trout]

mornin karma

[blissful current]

[fleet pivot]

bro

[foggy terrace]

don't understand you man

[blissful current]

Morning mints

[tight trout]

why do you want/need to know that?

[fleet pivot]

u think ur slick

[tight trout]

girlypop

[fleet pivot]

while ur not

[tight trout]

i really don't lol

[blissful current]

I think I'll read the Manga itself can't wait for 4 weeks for the remaining 4 episodes ffs

[fleet pivot]

who?

[foggy terrace]

wanna start a youtube channel base on others cotents

[tight trout]

that sounds like copyright infringement

which is against youtube's ToS

[blissful current]

Well...this...

[tight trout]

and law in places where the copyright is held

[blissful current]

Takopi's Original Sin

[foggy terrace]

that's why i don't want to get detected anyway

[tight trout]

we can not help you break laws

[mossy river]

It’s ToS, not law, but is unethical

[gusty inlet]

Against Youtube's ToS. This will not be allowed in here. Please do not mention it.

[tight trout]

would it not be law if it was something like music for example? due to copyright laws

[foggy terrace]

this sucks man

[gusty inlet]

You have been walking on a very thin line for the past few days. This will be your final warning. Next time, it will be a ban.

[tight trout]

mhm yeah

[brave spire]

Googoogagaga!!!!

[fleet pivot]

huh

[blissful current]

[tight trout]

hiya dot, how's it going

[fleet pivot]

oh i think this is for someone else

[foggy terrace]

Are you an admin or what?

[fleet pivot]

are you blind?

[blissful current]

Mod

[brave spire]

Lalalalfifififififafafafadomdomdomdom!

[fleet pivot]

this kid is stupid

[worn plank]

@foggy terrace Just come up with original ideas. Nothing is truly original anymore, but try it. Take inspiration, not one-to-one ideas from others.

[gusty inlet]

You were not pinged.

[tight trout]

real

[fleet pivot]

cannot u see the role

[fleet pivot]

i know

i realized

[blissful current]

[fleet pivot]

everything u know i know

[brave spire]

Gaga.

@waxen radish hey buddy, sorry for disappearing last night, I ended up showering and going to sleep.

Did you resolve your issue?

[mossy river]

I would say yes, apologies I didn’t actually read what their request was, however I wouldn’t really know if it’s a copyright violation

[blissful current]

Aight good night y'all, gotta wake up early for office ...Monday FFS

[tight trout]

night!

[mossy river]

Btw @foggy terrace I recommend in future I recommend that if you are streaming in OBS to set the music onto a different channel, which means using most editing software you can replace the music with your own copyright free

[foggy terrace]

ok

[mossy river]

If you want to split your outputs it makes it a lot easier

Your microphone for input, game capture with audio capture on a specific application, Discord/ other voice comms and then set your music to an output channel if possible

If it’s in a game you might have problems unfortunately

[tight trout]

zombieeeee

go to bed!

[mossy river]

@brave spire ?

[round onyx]

https://cdn.discordapp.com/emojis/930625714464632842.webp?size=48&name=momi

[brave spire]

Sorry, I don't know what happened.

[round onyx]

fine mom!

[tight trout]

headpats

[quick blaze]

https://tenor.com/view/suisei-星街すいせい-ホロライブ-hoshimachi-suisei-hololive-gif-17686874532137663852

the vc is active :o

[mighty cedar]

hi, im new to ethical hacking but want to learn batch files, anyone know any good channels or ways to learn it?

[thorny prawn]

https://tenor.com/view/weebs-out-weebs-out-get-out-of-here-anime-gif-16815896

[quick blaze]

https://tenor.com/view/suisei-hololive-sad-suisei-sad-hololive-suisei-gif-23845313

[mighty cedar]

?

[tight trout]

[broken plaza]

I think this is enough for today considering i got my first cert now finally

[tight trout]

recommend looking around and finding stuff that works for you

[round onyx]

Crossplane V8 idle noises

[mighty cedar]

any recommendations/ suggestions?

[tight trout]

personally i like looking up stuff on duckduckgo, but google works for others

i haven't done batch files before, but that's how i would approach it

[mighty cedar]

oh ok

thanks dawg

[brave spire]

There are search engines in this world that gives you exactly what you're looking for.

And it's not Google.

[blissful current]

[quick blaze]

https://tenor.com/view/my-reaction-to-that-information-suisei-hoshimachi-suisei-vtuber-hololive-gif-26237847

@cosmic pendant

[blissful current]

Office is fine ...just tired from waking up at 5am everyday

[tight trout]

anyways zombie go sleep

[mighty cedar]

helloworld ("print")

100% works

[tight trout]

10/10

[brave spire]

What the fudge!!

[blissful current]

nohtyP

[clear jackal]

In the US, you'd need to meet the criteria for fair use, to legally be in the clear. That does not mean someone can't take advantage of YouTube's DMCA Takedown system or your time in a courtroom.

[brave spire]

printhello ("world")

[quick blaze]

sleep early bruh wth

[blissful current]

[mighty cedar]

world ("worldhelloprint")

[quick blaze]

if you're waking up at 5 just try and get at least 6 hours

[brave spire]

I'm going to work on my own language in the future, it will be called "Shit me not (SH)"

[tight trout]

that's like the max i look for

[quick blaze]

not healthy

[tight trout]

[quick blaze]

mate i used to have a polyphasic sched and it was like 2-4 hours a day max for 2 years straight and that almost killed me

no joke

[blissful current]

It's even worse with a stupid roommate who realizes that he has to study for the exam at midnight when it has turned the same date as the exam ...and would turn on all the freaking lights of the room for no apparent reason (including washroom lights)

[quick blaze]

why can't he just study the day before or something 😭

[blissful current]

Coz he's either busy sleeping or gambling all the time

Very busy person

[safe oxide]

[blissful current]

Lol

[plain hull]

sup

[quick blaze]

ooh

gambling

[quick blaze]

blackjack!?

[blissful current]

No ... Sports betting n shit

IPL and Cricket

[quick blaze]

lame...

https://tenor.com/view/suisei-hoshimachi-hoshimachi-suisei-shake-anger-gif-27263431

be a man

gamble on blackjack and poker

[blissful current]

He has an exam ..hence ruined sleep tonight

[quick blaze]

sadge

https://www.youtube.com/watch?v=7cAzgUIKI68&ab_channel=JHUPoker

[crystal mauve]

https://tenor.com/view/evangelion-sunday-gif-11142183767175605310

[quick blaze]

heheh

no.

[rapid merlin]

[safe oxide]

[crystal mauve]

i use to play a bit of hold em

[loud orbit]

Hey guys can I have help or advice

[blissful current]

[broken plaza]

ipl betting won me 100 rs once

lol

[loud orbit]

I’ve started learning terminal with network chucks playlist on the 2nd video now,when would he recommended I can move to python ?

I wanna hack and script and stuff

[blissful current]

Great

[broken plaza]

u ever did?

[blissful current]

Never tried ..won't do

[broken plaza]

yeah same

quite risky if made big bets and lost

[blissful current]

My roommate does that shit daily

[broken plaza]

Winzo and xrabet imsure

or Dream11

the worst one

[blissful current]

Nah some non play store available one

[broken plaza]

that's even worse 💀

[blissful current]

[broken plaza]

didn't he got his bank account grilled then?

or he used UPI ?

[blissful current]

Looks like neh ...he's been doing that since a lot

[broken plaza]

i bet he lost a ton

like in lacs if it totals

[crystal mauve]

whats IPL? i havent used gambling sites since 2011

[broken plaza]

it's called Indian Premier League

[crystal mauve]

ohhh

[broken plaza]

it's a sprots championship and is very big

[blissful current]

Ya but mostly he stays like neutral

[safe oxide]

Cricket tournament

[broken plaza]

oh lucky person then

[blissful current]

Apart from that he smokes some cheap shits multiple times a day worth 50₹ ...that too half of the time on borrowed money

[broken plaza]

wtf 💀

is he even employed?

[blissful current]

Neh

[broken plaza]

💀

i mean with that level of confidence if he knows what he is doing could lead him to somplace much better

if he chose right path

[blissful current]

His dad is DSP or something in police ...smokes his money

[ripe sleet]

[broken plaza]

that explains a lot

i have a frnd

who's dad is in HPCL some manager post

[soft vortex]

touch the ground guys

[broken plaza]

my guy was a good and healthy till he attended school with me.

[blissful current]

[broken plaza]

one day i saw his story to find him learnding to drink 🍺

🥀 🥀

[blissful current]

[broken plaza]

he literally doesn't cares about himself and even recently started smoking as well with his frnds

[blissful current]

Sed

[broken plaza]

as a good bro i told him not to

but he said a little doesn't hurts

💔

[hearty otter]

how u doing people

[broken plaza]

and he choose commerce btw as future so u can guess what he is doing rn

[broken plaza]

hi im fine wbu 👋

[hearty otter]

all good

[broken plaza]

good to hear that

🙂

[hearty otter]

your username looks like a flag

[broken plaza]

kind of, try translating it

[blissful current]

Damn

[hearty otter]

no idea

[broken plaza]

it's in hexadecimal

[hearty otter]

crazy thing

[blissful current]

Ah nice

My 🍞 has decided to sleep with me tonight

[quick blaze]

https://tenor.com/view/suisei-星街すいせい-ホロライブ-hoshimachi-suisei-hololive-gif-9994107592857678298

[blissful current]

Idk how she's even sleeping so sound in the light and noise pollution by my roommate

[quick blaze]

karma how much do you pay for your rent? 🤔

[left lake]

hey guys i am really in need for someone to help me retrieve an hacked account

[blissful current]

Yearly 1Lakh at my current PG

Including food

[quick blaze]

???

so how much is that per month? 9k?

[blissful current]

Yeah

[quick blaze]

https://tenor.com/view/my-reaction-to-that-information-suisei-hoshimachi-suisei-vtuber-hololive-gif-26237847

[blissful current]

Around that much I guess

[quick blaze]

110$ rent

dirt cheap xP

[blissful current]

Until next year then I'll have to pay that too from my own money ..and more than this coz I'll be shifting someone close by to my office ...it will be slightly expensive from here

[quick blaze]

how far away is your current office

[blissful current]

42-43km

[quick blaze]

wtf

[blissful current]

[quick blaze]

how long does it take for commute

[blissful current]

1.5-2hr early morning less traffic 2.5-3hrs while coming back in more traffic

[quick blaze]

.....4-5 hours of your day gone just for travel

[blissful current]

Yeahhh

[quick blaze]

[blissful current]

Atleast free transportation is there but till like 38km...rest I have to take bus 🚌

Bangalore, India

[safe oxide]

Wel karma can say to his children

I ventured alot in my youth

[knotty pendant]

https://cdn.discordapp.com/attachments/1137095393713344606/1335030821949542442/attachment.gif

[boreal scarab]

@lone thistle @shut hawk RoN?

[quick blaze]

rise of nations?

[boreal scarab]

Ready Or Not

[quick blaze]

fudge

[ripe sleet]

Supposedly it's mostly negative on PC now

[shut hawk]

i dont have it haha

[boreal scarab]

https://tenor.com/view/make-it-happen-do-it-lets-go-get-it-done-make-it-work-gif-10143792

[ripe sleet]

It's

[shut hawk]

uh oh what did they do in the recent update?

[hidden lantern]

hiow to jolin vc

[quick blaze]

what the hell happened

[ripe sleet]

Something with censorship on pc

[quick blaze]

huh?

[ripe sleet]

Cause it's gonna be released on consoles soon

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 6, 2025, 6:42 PM

[blissful current]

@hidden lantern

[hidden lantern]

[shut hawk]

what sort of censorship doe

[hidden lantern]

0day =

https://tenor.com/view/mr-robot-elliot-alderson-rami-malek-gif-18226906

[shut hawk]

yeah but this doesn't exactly tell you what specifically has been censored

[blissful current]

[ripe sleet]

I'm looking into it now

[blissful current]

Aight imma try to sleep...anyways hopefully I wake up on time

[hidden lantern]

=

https://cdn.discordapp.com/attachments/1216361627394244692/1274621219924086824/attachment.gif

[shut hawk]

ah ok

[inner bloom]

[ripe sleet]

This too

[blissful current]

Eeper

[shut hawk]

Yeah, this

[blissful current]

[inner bloom]

Hi, how are you

[blissful current]

Fine , you?

[inner bloom]

I'm doing good

Enjoying sem break

[blissful current]

Nice

[hidden lantern]

[ripe sleet]

Hello!

[hidden lantern]

HIIII

[blissful current]

🏢

[ripe sleet]

2 fps thm machine pogg

[blissful current]

[knotty pendant]

https://tenor.com/view/cat-looking-away-gif-26704349

[broken plaza]

why is thm machine soo slow these days?

also why do we need more points from 0x8 to 0x9 and 0x9 to 0xA than 0xA to 0xB bruh

[tight trout]

¯_(ツ)_/¯

as long as youre learning

[broken plaza]

hopefully no one catches to me now in the next 4 hours

it was painful to find all info level rooms and grind them a lil.

[crystal mauve]

lol 3k points

[broken plaza]

just look at 1 st rank

💀

[safe oxide]

8k

[crystal mauve]

Copy pasta contest

[broken plaza]

i hate that shit

idk why they can't just randomly generate flags

[crystal mauve]

https://tenor.com/view/garfield-spaghetti-pasta-dinner-pasta-day-gif-16727473

[broken plaza]

instead of using the same thing over and over again

[broken plaza]

u forgot the vomiting of the whole thing part then lol

no one can digest 8k worth of points content in a week

[safe oxide]

Lol

[crystal mauve]

Leagues are a good way to stimulate site traffic

[broken plaza]

interesting but yeah

true

gtg sleep now today was tough.

now i got to make notes of 48 rooms now

because i never made notes before

at least i can peacefully spend the next week revising all leanrt stuff

gn guys cya 👋

[worn plank]

Holy hell, using hashcat on thm is horrific.

[tight trout]

cya!

[worn plank]

Doesn't create potfile, crashes on sha2-256 hash crack, reboots and sends me back to an earlier terminal that insists I check the potfile that doesn't exist. WHEW

[celest dirge]

Using nmap on thm was horrific

Had to wait more than an hour

[worn plank]

nmap NOOOOOOOOOOOOO. real tho, dude.

It's honestly such a huge ballbuster when you're trying to use these tools, and then random little blips in the network, the program, etc. end up making it harder.

Having said that, I'm glad I don't have to run some of this hashing stuff on my poor little laptop.

[kindred wadi]

Can I join voice channel

[worn plank]

I believe you need to be verified for that, Zindagi.

[kindred wadi]

How I can verify

[sharp citrus]

@kindred wadi

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 6, 2025, 7:16 PM

[mighty cedar]

back

[worn plank]

Do that thing.

@safe oxide Thanks for doing that. I wasn't sure how.

[twin ridge]

Gave +1 Rep to @safe oxide (current: #222 - 39)

[safe oxide]

Np m8

[knotty pendant]

I see the final destination bloodlines tower

[mighty cedar]

What website is that

[safe oxide]

Tryhackme

[mighty cedar]

Oh yeah

[pallid lotus]

What do you expect running it on a lightweight AWS instance with no GPU lmao

If you want anything even remotely approaching performance you need your own gear

[worn plank]

I know. I acknowledge that these virtualized systems aren't going to run as robustly as physical/dedicated machines that are local.

[pallid lotus]

Understatement of the year 😆

[worn plank]

HAHAHAHA.

Probably.

I'm still new to this side of the world, trying to get a reasonable foothold.

[pallid lotus]

Hashcat is designed to work with a GPU. It will fall back to CPU grudgingly these days, but it ain't gonna be quick.

[worn plank]

Which makes sense. Thinking about the way that people mine bitcoin, I feel it's basically the same idea but at a larger scale.

[pallid lotus]

... Especially when the CPU is some virtualised processor with about 4 cores max

[worn plank]

Bro, did someone say QUAD-CORE? Big if true.

[pallid lotus]

Pretty much, yes. It's all about distributed calculations.

GPUs have thousands of cores and can do thousands of those calculations simultaneously

Modern CPUs have about 64 on average, and low powered AWS instances have a fraction of that.

Sorry, 64 threads. Should be specific.

[worn plank]

I was just about to ask.

Even a Ryzen 9 9950X3D is 16 cores.

[pallid lotus]

And that might be being generous too. I'm used to server hardware just now.

[worn plank]

Ahhhh, that's a whole different animal, for sure.

The first time I got to see one of those massive database servers, the ones that are submerged in water... I realized just how little I knew about computers. Naturally, you know WAY more, so that wouldn't come as a suprise to you.

[pallid lotus]

Submerged in water is an interesting way to do it

[polar spoke]

what's the problem?

[pallid lotus]

Not quite what people usually mean by water cooling, but fair enough

[scarlet nimbus]

Hello, can I ask you something about sentinel rooms?

[worn plank]

It was uh. A huge RAID server? I don't remember the details. This was being explained and shown to me by a customer from work, who had full pictures of these things where they would submerge the entire server in these special salinated tanks that would prevent conductivity but keep the temperature under control.

I want to say it was a Microsoft thing, but I really don't remember. This was 6 months ago.

[pallid lotus]

Without spinning one up to check, I would guess the Attackbox is a t3a.medium EC2 instance. Might be being generous: t3a.small maybe.

[chilly veldt]

t3a.micro or t3a.small depending on subscriber or not

[polar spoke]

sure, but it should still work in theory, as long as a compliant runtime exists

we're talking 2 cores, 1gb of RAM

so it's going to suck

but i dont think it should outright fail to run

[worn plank]

I was having problems where, after generating a cracked hash, I would attempt to re-run it with different parameters (i.e. -a 3 vs -a 0) and it would simply tell me that it was saved to the potfile, but no such potfile exists, and now you can't rerun the same hash.

[polar spoke]

the potfile does exist

[chilly veldt]

--show

[polar spoke]

it just doesnt exist where you were looking

hashcat -II to check location of all the files

[worn plank]

I tried checking in ~, I also used Find ~ "hashcat.potfile" to look for it. I must have been doing that all wrong.

[polar spoke]

best guess, the attack box has some "installed" hashcat package

and it puts it somewhere else

probably in ~/.hashcat/ if i had to guess

[worn plank]

I tried checking for a directory by that name, and it stated no such file or directory exists.

[polar spoke]

yeah then i would ask hashcat where it is

hashcat -II will tell you

[shut hawk]

can you send us the history file?

[worn plank]

I even tried cd ~/.hashcat/ and it refused. I'll try that command, thank you.

[polar spoke]

but really you dont need to navigate to the potfile

[shut hawk]

so we can see what commands you've tried

[polar spoke]

and people really shouldnt be

you should instead be using hashcat's --show

[worn plank]

I was unable to use --show successfully, so that's why I resorted to other methods.

[tight trout]

does hashcat not show the passwords by default?

[worn plank]

I can see if I can find the history file, but I've now run three separate instances to clear the cache I'm working with on the other end.

[polar spoke]

can't --show?

that's odd

[worn plank]

Yeah, let me see.

[shut hawk]

If you've restarted the attack box then it will have wiped it

[worn plank]

If I just do "hashcat --show" it gives me usage. I had no further info to work with (at present time, still don't), so I got nothing.

[pallid lotus]

Aye. Sounds like it runs... poorly lmao

[polar spoke]

you have to add --show to your existing command

[pallid lotus]

Sentinel?

[worn plank]

Ahhhhhh.

[polar spoke]

you must tell hashcat what hashes you are asking it to show you at least

[pallid lotus]

Yeah, that's overkill for most things 😆
I've got a bunch in my office rack. They're not overly fussed.

[worn plank]

So that's where I went wrong. I was having some appending issues with the command format, too, so I was getting kind of frustrated. I've since been able to extract all the info I needed without an issue. It was just that initial pain point, which the more we talk about it, the more I realize that it was just user error and I need to pay more attention. I appreciate the feedback/help though. Talking through this and the information provided has actually helped me a lot here.

[worn plank]

No doubt at all. I'm not sure what they were using those supercomputing servers for, so I'm sure there was a good reason that I simply can't articulate. 😂

[polar spoke]

https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_can_i_show_previously_cracked_passwords_and_output_them_in_a_specific_format_eg_emailpassword

for more info on this specifically

[bleak quartz]

holy fuck active directory is so fun

[worn plank]

Brilliant, thank you.

[twin ridge]

Gave +1 Rep to @polar spoke (current: #137 - 64)

[shut hawk]

Can you do hashcat --show $hash?

[pallid lotus]

Wait until you try securing an ancient forest in a corp. You'll want to shoot yourself lmao

[worn plank]

I'll try it.

[polar spoke]

well, kinda

but not really

you need to tell it what kind of hash it is

[shut hawk]

Fair enough

[quick blaze]

@marsh lark

[polar spoke]

minimum should really be hashcat -m # $hash --show

but autodetect may get you past that requirement for -m

[shut hawk]

I fucked myself over with Hashcat on windows because I added it to the PATH, then realised you have to be in the Hashcat folder to actully have it run, so create a batch script to do that and have that be on the PATH instead. Then when I ran it with relative paths, of course it couldn't find the path in the folder where I called it from

[polar spoke]

yeaaaaaah

[worn plank]

Ouch.

[polar spoke]

hashcat doesnt really like being "installed" on a system

we generally suggest running it from the folder it came in

[shut hawk]

Yeah, I just have a dedicated folder for it now which I just cd into every time

[polar spoke]

so it doesnt have to deal with relative vs absolute paths and such

[loud marlin]

since we talk of hash crack @fleet pivot , any progress?

[polar spoke]

this is one of the biggest problems i have with whoever packages all the random "hashcat" repo packages

since we dont maintain any of those

any time someone does "apt install hashcat" i die a little inside lol

[shut hawk]

you maintain https://www.kali.org/tools/hashcat/ this one?

[polar spoke]

nope

someone random packages all the repo packages

we only maintain the github and hashcat.net downloads

[shut hawk]

oof

[polar spoke]

yeah, this is true for a huge amount of tooling

people blindly trust apt packages to be maintained by whoever wrote or maintains the tools

they arent

in like, the majority of cases

and it can lead to SO many issues

we've had people breaking hashcat in all kinds of repos, especially homebrew

[shut hawk]

yeah I'm guessing they then complain to the author of the tool, not the actual packager

[worn plank]

@pallid lotus I wanted to ask: you're a Red Teamer, right? Can I ask how you got to that point?

[mystic mica]

Can confirm

[polar spoke]

yuuuuuup

people really really need to understand how often packages in repos are just not what they should be getting

but we continue to tell everyone to trust apt and dnf and yum and brew install

sure, you may not get malware or something from the major repos

but you're not getting what you think you are still

[worn plank]

Should people be checking the sum of their hashcat or other types of repos to verify against the actual sha value? @polar spoke I feel like this is an insanely stupid question, because the answer is probably a resounding yes... just want your take here, since it's coming up.

[polar spoke]

imo, no need

simply grab from the github and build

or grab a release from github or hashcat.net

why bother with repos at all

[worn plank]

Ergo: use the main distribution.

[polar spoke]

right

look for how your tool's authors are actually distributing it

vs randomly grabbing it from first available

[quick blaze]

i mean..to look for original packages/installers every time you wanna install something would be impractical no..? isn't that why people just use apt and brew install?

[polar spoke]

sure, it's inconvenient

but this is cybersecurity....

we shouldnt be blindly trusting stuff in the name of convenience should we

[worn plank]

Ngl I use apt a lot.

[quick blaze]

true, but if the main concern is malware from bad repos then how do you think we should be installing stuff, without it being inconvenient

[mystic mica]

Tbh, im prolly a pleb compared to y'all i use debian because its reliable and convenient (in my use case at least)

[shut hawk]

the main concern isn't malware in this specific case

[polar spoke]

^

it's not that it's malware

[shut hawk]

it's more the problem of installing the tool not the way the authors intended

thereby leading to issues

[polar spoke]

its that youre getting a package that's following some random persons install scripts or decisions

[digital estuary]

hi guys

[quick blaze]

right, i wasn't reading, and if its malware? 🤔

[digital estuary]

whats going on

[polar spoke]

one of the issues we've run into is whoever packaged the hashcat for homebrew for a while just set the directories wrong

[worn plank]

Install tool from repo -> tool breaks -> author gets yelled at.

That's the gist, Aaron.

[digital estuary]

hi rain

[polar spoke]

and so it just didnt work when people did brew install for a while

and they complained to us

[worn plank]

How's it going, buddy? ❤️

[digital estuary]

thanks for helping me tune in

[polar spoke]

and we were powerless to change that

[digital estuary]

doing good
regaining energy after 3-4 hours of note taking wireshark

[polar spoke]

because we werent the ones packaging it for brew, someone we have never heard of or interacted with was

[digital estuary]

less actually

2 hours

[worn plank]

Not bad, but that's a lot of note-taking for wireshark.

[digital estuary]

i write slow 😢

[worn plank]

This must be a common issue for application authors when hundreds of repos start spawning, hey?

[digital estuary]

also i count in big and small breaks

and doing the questions for the related room

[shut hawk]

it goes deeeeep

[hearty otter]

how do you people not burnout

[worn plank]

Are you the sort that prefers written vs. digital note-taking, Aaron?

[polar spoke]

more common than you think

[digital estuary]

no i utilize both

physical notes for reinforcing what i study and then i integrate it into obidian md or notion

[polar spoke]

"why is this tool not working"
"you have some random outdated version?? how did you get that?"
"apt install $tool, duh"

[fleet pivot]

yo

[digital estuary]

physical and digital note taking have both best use cases
physical for better "memory" and you always have a physical backup in case your drives go to hell for some reason
digital notes are easier to search (especially in obsidian) and easier to add images,diagrams,etc

[scarlet nimbus]

Azure sentinel, kql

[worn plank]

That's really smart.

[worn plank]

Bruh, I know. The basics were INTENSE.

[fleet pivot]

are you the ceo of detack inc?

[polar spoke]

😐

[digital estuary]

school burns me out a lot
stuff i love hardly burns me out

[polar spoke]

it would certainly appear that i am in my bio lmao

[worn plank]

Actually, I ran across this with Termux. They specifically state that you should install from F-Droid, where they have their nightly builds and things like that, as opposed to downloading from Google Play Store, where it is more or less deprecated.

[polar spoke]

yeah, this happens to mobile apps a LOT

because publishing to the major distribution "app stores" is costly and painful

[worn plank]

I was just about to ask if it was because of costs associated with being publicly available in an "easy-to-find" distribution zone, compared to having it hosted on an open-source platform, i.e. GitHub.

[polar spoke]

it costs money for app stores, but it also costs time and energy and such for the authors

[worn plank]

I took this approach initially with Python. I would write out code by hand. I quickly learned that's a recipe for carpal tunnel.

[polar spoke]

we dont maintain every possible repo for hashcat because it's just too difficult

too much time for the team to deal with when we can just publish to github or push releases on our site

[worn plank]

Hashcat is effectively open-source, right?

[polar spoke]

it is yeah

[worn plank]

Hence the repos.

[digital estuary]

i did the same when i was little and i was trying to learn cybersec
i dont know what site it was but it was a LONG time ago
and i remember writing everything into a notebook, all uppercase letters
i was essentially copying the entire website and that killed my motivation to study this field

[worn plank]

Is there any benefit to removing it from the open-source market, or would that significantly hurt the progress of the application?

[digital estuary]

few years later here i am again, after realizing that this field is the FIELD i love (i cant stand coding)

[polar spoke]

we are open source necessarily to keep the project both maintained but also licensed for what it's used for

[digital estuary]

put the laptop screen on the side and that is all i can suggest imo

[polar spoke]

MIT license across the board with hashcat's code

[worn plank]

I, too, wanted to be an epic hackerman with crazy l337 coding skills, and I also killed it (by trying to learn JavaScript at 12 years old).

[digital estuary]

oh...

[thorny prism]

i used java for programming at uni and never touched it again lmao

[shut hawk]

honestly I'd just swap the laptop and one of the screen

so laptop + screen + screen

[digital estuary]

yeah this i vouch

looks coolre

cooler*

[thorny prism]

yh it kills me that the screens aren't identical lool

[worn plank]

So, in essence, not all repos are bad repos, but repos don't always result in a happy-happy-funtime "yay development" cycle. Instead, there are loads of headaches, but it's necessary because... what, the license comes for free due to open-source availability?

[digital estuary]

idk why but it juts does

[digital estuary]

OH MY GOD I JUST NOTICED THAT

[thorny prism]

don't repeat it, makes me sad

[fleet pivot]

that was rude

[shut hawk]

when you have actual content on the screen it won't make a difference

[worn plank]

I necessarily need to learn JS so that I can do some side-project stuff. I hate it.

[polar spoke]

repos are just a headache to deal with sometimes

[shut hawk]

Jared, what made you ask the question in the first place?

[digital estuary]

as long as its the same resolution and same refresh rate

[pine cedar]

well

[fleet pivot]

idk

[polar spoke]

we COULD package and push every version to every repo under the sun, but keeping them all up to date is tough

[shut hawk]

come on, you know better

[polar spoke]

so instead, we push to a central specific location

github.com/hashcat/hashcat

[fleet pivot]

chickenman

[polar spoke]

and if someone wants the current code or a recent release, it will always be there

and always be up to date

[fleet pivot]

aint no way u a ceo

[polar spoke]

😐

[digital estuary]

that looks nice

[worn plank]

So, effectively, repo authors should be taking more initiative to keep their versions up-to-date by utilizing your convenient, all-in-one approach to maintaining the main distribution. Ergo... they need to be more on top of things and use common sense.

[fleet pivot]

have u reached 7 figures?

[digital estuary]

you could have it configured
vertical screen + screen + laptop

[thorny prism]

yh maybe this

[worn plank]

They won't, and inevitably some will be deprecated, they will fall off, have issues and then... we return to the main point: you get yelled at. That sucks.

[polar spoke]

It's more that I think repos should be carefully considered by the end user more

realize that what you are getting may not be what the author intended

[fleet pivot]

do u make 7 figures?

[digital estuary]

just make sure to use vertical screen to read notes and other stuff so you dont hvae to scroll as much

[polar spoke]

as the author may not have been the one to publish it

[digital estuary]

or do all your silly scripting on it so you feel extra cool

[polar spoke]

you would be surprised what I make 🙂

[worn plank]

What lead you to create hashcat, if I may ask?

Led*

[polar spoke]

I didn't, i'm just a core dev/team member

[fleet pivot]

💀

[empty ember]

https://tenor.com/bjahD.gif

[digital estuary]

+5% to better code and code structure

[worn plank]

Ahhh, okay. I'm not familiar, I apologize.

[crystal mauve]

Jared please don’t push the chickenman away with your cringey pushy questions

[polar spoke]

Atom is the one who created it originally

[polar spoke]

lol i'm used to it

[worn plank]

He's definitely making at least $5/month.

[polar spoke]

at LEAST 🙂

[rapid merlin]

hey do we have an encrypter here?

[empty ember]

Yo stolen crypto doesn't count btw

[worn plank]

So help me god, if they try to pay you $4/month...

[crystal mauve]

@mossy river can u mute Jared please

Harassing members

[polar spoke]

I sign my own paychecks so I'll try not to pay myself that little haha

[shut hawk]

@fleet pivot Just so you know, it's generally considered quite rude to ask someone's salary. That's quite a personal question.

[worn plank]

Good, otherwise I'd have to kick your ass for you, because you're a cool guy and you should make a teensy bit more than that. 😂

[empty ember]

Wait so like a money glitch irl

[thorny prism]

im actually surprised how much 0day has used thm, wasn't expecting to see him at #1

[polar spoke]

only as far as what the company has in it's bank account lol

[empty ember]

-$3000000 now cuzzo

[polar spoke]

LOL

[rapid merlin]

look dms pls

[empty ember]

I can't read

[shut hawk]

@rapid merlin What do you need help with?

[fleet pivot]

@mossy river can u mute @crystal mauve
harassing me

[digital estuary]

me when i give the ATM a paper bill that says "a bajillion dollars"

[worn plank]

Are we able to post images in here?

[rapid merlin]

are you the ops?

[digital estuary]

https://tenor.com/view/rich-off-airpods-richoffairpods-stack-band-bandforband-gif-4351078540525453133

[shut hawk]

the what

[empty ember]

no

[worn plank]

I'm just saying.

[empty ember]

I only have liberty reserve sorry

[worn plank]

ffffff

better watch out, bub, I'm gonna XSS my way into your bank account with a super SQL hack attack

[empty ember]

show tables;

[fleet pivot]

he wasn’t offended by it

[rapid merlin]

https://tenor.com/view/cat-cat-with-tongue-cat-smiling-gif-11949735780193730026

[empty ember]

aey yo just show me ur tables gurl

[worn plank]

@polar spoke btw if you're not too terribly busy, are you ever open to short informational interviews?

[rapid merlin]

look dms

[digital estuary]

https://tenor.com/view/bleh-bleh-cat-spinning-cat-bleeeh-gif-27228826

[worn plank]

::::;:::;:::

is it working?

[polar spoke]

i dont see why not

[gusty inlet]

@fleet pivot Where's my hash?

[shut hawk]

Yes, because he's understanding, most people won't have the same reaction

[worn plank]

So, my next question: is it alright if I DM you for that purpose?

[rapid merlin]

look dms

[polar spoke]

yeah sure

[worn plank]

Great! Appreciate it!

[polar spoke]

🙂

[fleet pivot]

💀 shit

[rapid merlin]

anyone here know alot about files and how thier build up pls dm me

[shut hawk]

you should ask here

[mossy river]

Can you elaborate?

[empty ember]

Hydra on blast, multi threaded precision,
Credential collision, brute force with a vision,
FTP, SSH, toss me your submission,
Username spray, dictionary incision.

[mossy river]

I’m going to need details

[ripe sleet]

Hello Jabba!

[crystal mauve]

Asking a personal question multiple times, how much do you make, how much how much ? More than 7 figures? How much - received no answer yet continues to ask

[harsh wadi]

i dont know where to ask this, but how did you guys get into hacking or computer related things
i havent got anything or anyone influence me to such thigns but games and music

[rapid merlin]

so i bought a programm can show receipt but their encryprted with AES256 and i need a person who can make them work on my pc

[crystal mauve]

Starts here @mossy river

[harsh wadi]

i only heard it or cybersecurity jobs is more flexible and in demand but thats it
didnt have passoin for it yet 😭

[empty ember]

Auth form login? Use the POST route trick,
Watch Hydra flood requests till the response go slick.
Status 200? That's a win in disguise,
Dropped a reverse shell, now I'm rootin' your mind.

[rapid merlin]

so i bought a programm can show receipt but their encryprted with AES256 and i need a person who can make them work on my pc

[digital estuary]

for me it was childhood curiosity, i would go through the file explorer and look at random files, play with the settings, etc

[harsh wadi]

thats personal there
i might feel annoyed tbh

[raw oak]

hello guys

[digital estuary]

i feel like if you try to learn some computer fundamentals, and then try this field out you might find the passion

[polar spoke]

imo, this is necessary

[digital estuary]

i thought i had a bigger passion for coding but turns out cybersecurity was the secret passion i had

[shut hawk]

we wouldn't be able to do that, you should contact the seller

[rapid merlin]

its encrfypted for safty

[rapid merlin]

its possible i have the acsess code

[harsh wadi]

so i guess i had to dive in myself
i felt kinda lonly for msot thigns i do
but not making music for some reason

i sttart with idea and keep working fowrad it because i can do it
not coding or anything else, have to learn, and some hurdles to get thru

[digital estuary]

just try out coding or cybersec, once you learn the fundamentals obviously

if it sparks interest or a feeling of "yeah im fit for this field" then keep the hard work going

[harsh wadi]

this is totally different from what i used to
unlike music and art, its everywhere
this? nly behind the scnene
and no one in my family talk or influence me in some way
so im strating from absolute scrath

oh yeah and then there's career
so much path to choose from
i just wanted remote job that pays as much as my wages for now
but still nothing spark for me yet

do i have to wait for it? or make it somehow

but yeah, srry for lots of quesntion

[rapid merlin]

need someone who is able to encrypt some programms so they work togther

[zinc pine]

keep going

[hallow hazel]

how did you start out, if you don't mind telling obv

[digital estuary]

You need to give the IT sector a try, look online where to start, it all depends on what you want
but for now, learning some Computer fundamentals and basics is what you'll need, especially for this field, because you cant do much

[mossy river]

I think ‘harassment’ is a stretch; annoying, personal and bullying, yes.

@fleet pivot don’t bully community members into giving you answers to questions. If they don’t answer you the second time, there is a high chance they’re avoiding the question. Especially personal questions, or topics that are considered taboo.

Part of being in a community is being a positive influence, you need to understand and be aware that if you are making a negative impact (such as by making community members uncomfortable), it will result in extended mutes or even removals. Considering your most recent warning, I would suggest that you reassess why you want to be part of our community 🙂

[crystal mauve]

Fair

[chilly veldt]

one hour left and I am done with my 17 hour shift 😭

[empty ember]

Here's some hacker rap bars.

You brag about root? Bro, I am root.
I live inside init, wear the kernel like a suit.
I decompile motive, I hardcode hate,
I reversed your morality and found dead weight.

[crystal mauve]

Thank you @mossy river

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1667)

[polar spoke]

it was mostly just a life long love of computers and needing to solve harder and harder puzzles, which security seems to be the place for

[digital estuary]

and the harsh truth is if you don't have a spark, how will you ignite a fire?

[mossy river]

For the record, I checked with someone who works in law for the definition of ‘harassment’ 😆

[digital estuary]

https://tenor.com/view/eminem-cicirinella-che-teneva-gif-24132633

[empty ember]

https://tenor.com/JOfS.gif

[harsh wadi]

thats basially stops me
i have no other reason but my livelihood
i guess i need to surround myslef more IT stuff

[pallid lotus]

Any particular reason why you're asking me specifically? 😄

[chilly veldt]

kql my beloved

[rapid merlin]

need someone who is able to encrypt some programms so they work togther

[digital estuary]

try to see if there is a spark in this, if not, try something else because im sure there is something out there that you can do remote and genuinely enjoy
you also said you got passion in music right?

[pallid lotus]

I got lucky.
Internship on a pentest team + a bunch of certs during my degree. It worked out, although I wouldn't recommend that route. You miss too much.

[clear jackal]

What does this even mean? Why are you repeatedly posting this?

[hallow hazel]

Awesome, thanks for the answer!

[twin ridge]

Gave +1 Rep to @polar spoke (current: #134 - 65)

[rapid merlin]

bc i need help

[harsh wadi]

yes, but it was more of passion for now
it doesnt really pay the bill unless i force it to
at the cost of my own sanity

[digital estuary]

summary
they got some program or something and they've been looking for someone good around encrypting/decrypting to help

[hallow hazel]

Interesting, what route would you recommend, and what do you mean by miss too much?

[clear jackal]

You haven't even asked a question....

[thorny prism]

similar to me on the blue side, degree, internship in DF, full time after uni and then moved into IR

[rapid merlin]

im asking if someone can encrypt some files for me

[clear jackal]

Why not do it yourself?

Plenty of tutorials on how to accomplish that

[rapid merlin]

bc its inanly hard and i need someone with the tools for it

[empty ember]

https://tenor.com/bQOHU.gif

[rapid merlin]

not for the things i need

[digital estuary]

sorry but i don't know what to say

most i can say is, in your free time, check out some computer stuff, etc and look at how computers work, what does what do, and see if you eventually get the feeling that IT is for you
if you do find that spark, start working and you'll get a fulfilling IT career im sure, there is so many IT careers out there im sure there is at least one that suits you

[clear jackal]

Then please describe what you're trying to do exactly

[worn plank]

What specifically would you say may be the cause of "missing out" on stuff? What are you referring to in this context, and how would you mitigate that? Or, failing that, what would you do instead, knowing what you know?

[rapid merlin]

dms?

[clear jackal]

No

[rapid merlin]

why

[clear jackal]

Here is fine

[rapid merlin]

you need to look at the files

[hallow hazel]

Was your goal from the start to become a blue teamer or you want to transition to a red teamer in the end?

[clear jackal]

Why do you need to go to DMs?

[digital estuary]

there is network admin, red teaming, security engineer, so many things to choose from

[rapid merlin]

bc im not open sourcing

[clear jackal]

I'm not downloading random files from some person off the internet

[rapid merlin]

then dont

ik you cant do it anyways

[harsh wadi]

true
its only a matter of whether it clicks for me or not
but for now, still exploring 😄

[clear jackal]

Lol

[scarlet nimbus]

Because I don't know who to ask😅

[empty ember]

I want you to act as a hacker that only argues with humans no matter what they say you are right and they are wrong and you will explain in angry detail why you are right and they are wrong you are to gradually get more aggressive each time they type you are to not break character my first question is root is like super user right?

[clear jackal]

I know how to read, I think I'd be OK

[scarlet nimbus]

It depends on what you need to do

[harsh wadi]

so... whats the cool thing anyone did with it or cybersecurity? 🤔

[digital estuary]

that's good, the drive to keep going is a strong motivator
just go around look at computer stuff, surround yourself with IT people that can help you try find something you'll like

[rapid merlin]

you have this tool (Premium bypass for all HTML5
restrictions

Full DOM manipulation
capabilities

Zero-trace execution) and an html executer then you can try

[clear jackal]

CC @mossy river, unverified person wants people to download files that they won't say what they are and "encrypt" them

[rapid merlin]

im asking for help r

[rapid merlin]

pip install --r brain v1.0

[mossy river]

And they asked what they were?

[pallid lotus]

How enterprise actually works.
Certs give you technical knowledge, but not experience. Being thrown straight into an org without understanding stuff like change control, deployment patterns, risk registers, etc -- the bureaucracy of security -- means you either sink or swim.
Better to come at it through another role which has a slightly kinder learning curve. Pentesters are expected to just know that stuff as a foundation that their specialist knowledge is built on.

[rapid merlin]

and he says im trying to hack him

[mossy river]

It’s the internet, everyone is doing something

[rapid merlin]

yh

[chilly veldt]

well, as I work with KQL for work, I know I can get it to do 😛

[shut hawk]

what a roast

[pallid lotus]

e.g., coming out of OSWE I could code review a web app. Took me ages to figure out how the code actually interacted with all of the other systems surrounding it.
You just don't get that scale without experiencing it yourself.

[digital estuary]

you can be contracted or hired
you can test systems (penetration testing) and look for vulnerabilities that can be patched by the blue team (people that defend networks, look for anomalies)

[bleak quartz]

Suspicious ngl

[digital estuary]

there is a lot of jobs in the cybersecurity field

[bleak quartz]

You're willing to send the files to someone u don't know

[thorny prism]

I always found digital forensics fascinating but after 8 years of doing it I'm pretty interested in pen testing now

[bleak quartz]

But not willing to send em to gen chat

Why would that be?

[digital estuary]

you can go online and search em up and look at what jobs there are

[mossy river]

Can you send me the files @rapid merlin

[worn plank]

In essence, you need hands-on experience in a real environment before you can truly understand the scope and scale of a given enterprise, and more specifically, what they will expect from a tried-and-true operator in the field.

[mossy river]

They literally can’t

[rapid merlin]

bc they were like 2k

[bleak quartz]

What are they

[scarlet nimbus]

I work instead with multiple monitoring systems and kql is the slowest one

[bleak quartz]

I mean he can just verify in a few seconds that's 100% not the problem

Or put them in temp host

[harsh wadi]

i see
thx a lot 😄

[twin ridge]

Gave +1 Rep to @digital estuary (current: #889 - 6)

[crystal mauve]

has a tool, full dom manipulation capibilities, zero trace execution..cant encrypt some files

'16y old girl'

[thorny prism]

ppl think of blue teaming as just soc analyst roles which are pretty boring but real digital forensics/IR/malware analysis etc are really interesting

[digital estuary]

yw, also make sure to not just look at this IT field, there is also other ones that you might find fun, pay good, and are remote
you got this man i know you can do it

[crystal mauve]

so harmless

[pallid lotus]

Precisely, yeah.
Walking into a bank with ⅔ of my OSCE³ I had the technical knowledge to test a system, but not the surrounding context. I focused on the wrong things, didn't understand how everything interacted, and missed stuff which the business cares about but that a cert does not.
I've picked that up with experience, but it was a harsh learning curve. Far better to come at it already having that knowledge imo.

[harsh wadi]

👍

[digital estuary]

So i'm not the only one that was suspicious

LOL

[rapid merlin]

decrypt after AES256

[pallid lotus]

... pardon?

[thorny prism]

[rapid merlin]

nothing

[chilly veldt]

it's only slow if you don't know what you're doing

[pallid lotus]

Yes. That's the gist of this conversation smh

[rapid merlin]

sry<

[worn plank]

What would you say, short of being introduced into these environments, would be the most efficient way to gain this kind of abstracted "lived experience"? Don't just focus on certs, focus on... what, would you say?

[primal ether]

what linux distro would be best for like everyday use? cuz i lowk hate windows

[crystal mauve]

? do it yourself

[rapid merlin]

can you help me?

[rapid merlin]

you need 1k tool for it

[scarlet nimbus]

It's slow because I need to build queries with multiple tables and I don't have time for that

[thorny prism]

1k took to encrypt files? Lol

[pallid lotus]

Honestly? If you haven't worked in them, one way or another, you're going to struggle to pick that up.
It's impossible to virtualise the sheer scale of your typical organisation.

[rapid merlin]

decrypt

[pallid lotus]

Almost certainly

[thorny prism]

.. Not true

[bleak quartz]

Ubuntu is easy and fun ig

[chilly veldt]

what?
my multiple table queries takes like 1.5 seconds

[worn plank]

That makes sense. To an aspiring Red Teamer with dreams of reverse engineering malware, what would you say? "Good luck"? 😂

[bleak quartz]

Easy to setup

Easy to use

[scarlet nimbus]

I need to write those queries

[chilly veldt]

I write them too?

what's your issue?

[digital estuary]

closest linux distro to feeling like windows is Linux Mint (I use it too!)
Linux Mint is also very user-friendly so great for a first-time distro to learn all the linux stuff on

[mighty cedar]

Isn't that a portal profile picture?

I'm sure I've seen that logo before

[worn plank]

Linux Mint is busted for learning Linux.

[digital estuary]

Get used to linux, and maybe boot up some different distros on a VM later on in the future to see what vibes with you the best

[rapid merlin]

??????

[mighty cedar]

Wait does tryhackme have an in built VM?

[scarlet nimbus]

That we have like 90 sec to do an alert and throw away 20 sec only to make the query is not efficient

[digital estuary]

IT IS i can vouch so much
i love the distro so far
but i might move on to Arch soon for that customization and aesthethic

[scarlet nimbus]

Yes and also the conti logo

[digital estuary]

yes

[pallid lotus]

I'd suggest working at least a few months in the SOC (still security, but more forgiving w/r to picking this stuff up), or preferably a stage further back still -- engineer or administration.

Reverse engineering malware is quite a specialist role. A lot of places wouldn't have the red team doing that, although that depends a bit on their structure.

If you're talking red team research type roles then coming from blue team will actually be very helpful.

[mighty cedar]

Niceee

Cba to download anything

[worn plank]

BLUESTAR BAYBEEEEEEEEEEEEEEEEEE

[rapid merlin]

I "love" it when banks are silly enough to dox your THM purchase or even in the lobby. The next time you show up you are both sweating with poker faces but they love to shout people's numbers etc. This applies to most places though. I'm too ethical but it does grind my gears a bit whenever I go somewhere important.

[pallid lotus]

Only a few thousand...

[digital estuary]

They have their own custom OS for doing most THM stuff and its called attackbox so don't get confused when you boot it up and see something totally different

[signal roost]

Hiii

[tight trout]

[pallid lotus]

Wut?

[chilly veldt]

90 seconds to investigate an alarm or confirm it or acknowledge it?

[digital estuary]

im more of a "build your own design" guy

I feel like if I install arch ill probably forget i can customize it tho LOL

because im so locked in on studying on THM

[rapid merlin]

Just saying some banks shout people's phone numbers and pii so I switched to a better one.

[worn plank]

My current projected career path was something like, "Start in SOC. Understand Blue Team intimately. Use this time to use learned concepts in the field to then apply to red teaming concepts, work on finding a pen tester or jr pen tester role. Gradually keep learning programming languages and leveraging them for the purposes of automation (python) assembly (inspecting malware), etc." But you would say SOC is the best/gentlest place to start, eh?

[bleak quartz]

?

[pallid lotus]

Something something report to regulator

[worn plank]

Not a bad thing tbh. I'd wait until later when you're studying less and programming/working more for Arch distros.

[digital estuary]

eugh scary

[pallid lotus]

Yeah, that's a solid path

[digital estuary]

(when school starts because school drains my soul )
tbf if i lock in on school early i can just have my teachers let me out to do whatever i want soooo

[signal roost]

Would you guys say CTF's boost ur hacking experience by a lot?

[digital estuary]

yes it can boost experience a LOT because you're getting pure hands on experience

[worn plank]

Alright, sweet. Do you have any general recommendations for what is valuable to learn within the Red Teaming sphere? Even without going down the far-off path of specialization.

[shut hawk]

It's helped with my general problem solving skills

[bleak quartz]

Hell yeah lol

[shut hawk]

But its not applicable to real life attacks

which mostly are a lot less sophisticated

[signal roost]

I'm I ready if ive reached burpsuit:The basics on Cyber101?

[grim sparrow]

:hammer: amy287.2#0 has been banned.

[grim sparrow]

[BAN] User left the discord server.

[signal roost]

To do ctfs

[shut hawk]

yes

[scarlet nimbus]

This is the average time to manage it, report or close as fp

[shut hawk]

just do it

https://tenor.com/view/do-it-what-are-you-waiting-for-determined-angry-gif-5247874

[mossy river]

cc @clear jackal it was fraud

[chilly veldt]

i'm sorry, but that's a shitty soc

[signal roost]

lol ok

[chilly veldt]

90 seconds from acknowledge to close with investigation?

that's impossible

[shut hawk]

in general you can expect to go through all 7 stages of grief during a CTF

[clear jackal]

😂

[shut hawk]

this will be for the majority of time

[mossy river]

They blocked me when I threatened to report them to the authorities

[scarlet nimbus]

Not acknowledged, report to the customers

[shut hawk]

but once you get it, you can't beat the rush of dopamine

[hearty otter]

what are you people listening to

[shut hawk]

and satisfaction

[chilly veldt]

wait, so walk me through your timeline of how you handle an incident/alarm

[signal roost]

Yeahh thats what im hoping for lol but Im a bit "afraid" of jumping to the "wild"

[digital estuary]

everytime i see a new member in THM i instantly make a bet in my brain

like a 50/50 coin toss
either gonna ask unethical stuff
or something actually related to THM

[signal roost]

[crystal mauve]

didnt u join about 3 weeks ago

[rapid merlin]

most of the time "can you hack .....?"

[mint leaf]

Guys what to do if in i capture the request and send it to sequencer via the burpsuite but it does not detect the form fields and its disabled and i wanna select loginToken there. Would be really be grateful for any help..

[digital estuary]

yes but i feel like i've been in the server since the dawn of it

[scarlet nimbus]

Can I write in dm?

[quick blaze]

if you're betting then get me involved

[digital estuary]

i feel deeply connected even with 3 weeks

[quick blaze]

i love gambling

[mint leaf]

https://tenor.com/view/bet-casino-gambling-victor-polizzi-john-magaro-gif-15213368

[quick blaze]

all in.

[mint leaf]

yaa

[chilly veldt]

I would prefer in here, so people can join in discussing about SOC, but if you don't feel comfortable about the information, then sure

[digital estuary]

make a bot that automatically makes a poll of what they're gonna ask when they're a new member and join just to ask something

[mint leaf]

90% of gamblers quit just before they hit it big fr

[quick blaze]

im good at blackjack

xP

[rapid merlin]

https://tenor.com/view/togi-shane-stoffer-gif-13002550135341762285

[primal ether]

why is mint linux such a pain in the ass to download on windows 💔

[digital estuary]

the ISO mirrors? pick any

[worn plank]

how the entire reddit bitcoin community views people who hodl and people who don't

[molten tartan]

poor streak will break once i get on vacation😓

[scarlet nimbus]

Because there are too many messages and I lost the mentions

[primal ether]

verifying them tho

[digital estuary]

just make sure to check the file integrity and authenticity when you download em

[chilly veldt]

no woories

[shut hawk]

Get-FileHash on powershell

[digital estuary]

install WSL from microsoft store and set it up (check out network chuck's video on WSL)
then use the WSL terminal to exec linux commands

thats how i did it

[rapid merlin]

theres checksum on website (i guess so), on windows to check hash i think you need to click "properties" on downloaded file

and somewhere will be hash of file

[shut hawk]

wat

thats way overkill

[digital estuary]

i did it because i was transitioning from windows to linux soo

for me it wasnt too painful

[shut hawk]

PS E:\> Get-FileHash *.iso

Algorithm       Hash                                                                   Path
---------       ----                                                                   ----
SHA256          D6DAB0C3A657988501B4BD76F1297C053DF710E06E0C3AECE60DEAD24F270B4D       E:\ubuntu-24.04.2-live-server...

[rapid merlin]

or this

[digital estuary]

arent there 2 hashes to check?

one requires gpg iirc

or whatever its called

[shut hawk]

no

[digital estuary]

one for file authenticity (to make sure it wasnt tampered) and the other for file integrity (to make sure the iso doesnt install a messed up ver of the OS)

[rapid merlin]

no? i think you can check either one

but they have this https://linuxmint-installation-guide.readthedocs.io/en/latest/verify.html

[digital estuary]

didnt know you can check both hashes w/o installing WSL LOL

[shut hawk]

just need to check the sum of the file downloaded

if you have the same hash you have the same file

[digital estuary]

ooh thanks for enlighting me with info

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 625)

[shut hawk]

and compare to the sum on the site

[mighty cedar]

I'll just do the lesson stuff and go from there

[digital estuary]

ooh

[mighty cedar]

Totally didn't respond late

[digital estuary]

gl with the modules!