general

[solar skiff]

If it was, you'd be a millionaire in jail prob

[modern fox]

mafia boss who controls everything from inside ahh

login info and cookies separate u wont be able to login with cookies, cookies has other purposes (useful ones mostly 💀) and cookies encrypted with that websites panel or whatever

aint that easy to take em either

just dont use weak password

know what i mean

@rapid merlinello

[sturdy sequoia]

now i want a cookie

[rapid merlin]

yes

[strange ivy]

[rapid merlin]

what do you want to say

[solar skiff]

https://tenor.com/view/rio-rio-movie-rio2-roberto-blu-gif-24926546

[sturdy sequoia]

i found some shorbread. close enough

[modern fox]

...

u see what i mean

[rapid merlin]

yes i knew then what the attacker do on the cookies

[modern fox]

no i mean

[modern fox]

.

[gray pine]

Hey guys, Im trying to download nessus and the video tutorial I was watching, featured nessus essentials, which in my case I don't even have that option. The videos Im watching are a bit old and dont treat the problem. Doesn anyone here knows the solution or that can point me to the right direction?

[sturdy sequoia]

the nessus website probably has an installation guide

[modern fox]

where u wanna download it

[gray pine]

Ye, but the thing is that I want nessus essentials and when Im prompted which version do I need are only: nessus expert and professional, which are paid versions

[gray pine]

I went to the official site

[modern fox]

no i mean u wanna download it to linux or windows

[rapid merlin]

When you log in to a website (like Gmail, Facebook, or Discord), the site doesn’t ask for your password every time you click something. Instead, it gives your browser a cookie — a small file that proves “this is you, already logged in.”

👉 If an attacker somehow steals that cookie from your browser and loads it into their own browser:

The website will think they are you.

They can open the site and be logged into your account right away, without typing your password or 2FA code.

That’s why cookie theft is dangerous — it’s like someone copying the key to your house. They don’t need your fingerprint (password) anymore; they just use the copied key (cookie).

this is what chatgpt is saying

[gray pine]

linux

[sturdy sequoia]

thats not quite accurate. i wouldnt go to chatgpt to answer your questions

[modern fox]

cookie is just a verification that u are that person

[rapid merlin]

hallucinations

[modern fox]

dang i thought they had the fast download from terminal but no

[rapid merlin]

sometimes i hear voices

[gray pine]

its not the download that gives me the problem but the license, I want the free version not the paid one.

[rapid merlin]

so its a verification and when this passed to another browser then the attacker can login to our accounts because he has verified himself as us

[gray pine]

Its called nessus essentials and I saw it on the video tutorial but thats a bit outdated so when I go there the essentials are not even an option anymore lol.

[modern fox]

dude... if he can login to ur account he doesnt need the cookie omg thats not easy to steal you know what i mean cookies encrypted but if he has ur login info ofc new cookie created and now site thinks that hacker is u

[dusky epoch]

Hello, is it me or are rooms not showing target IPs once machines are deployed

[tired wolf]

https://tenor.com/view/battle-cat-air-cat-pilot-cat-cat-war-cat-gif-9888863539466296855

[rapid merlin]

does the NSA spy on everyone?

[tired wolf]

no

[sturdy sequoia]

no

[proper dome]

no

[modern fox]

wait i cant find free version either...

[rapid merlin]

what if someone here works for the NSA

[gray pine]

Thats what Im saying 😭

[sturdy sequoia]

there might be. but so what?

[tired wolf]

schizo

https://cdn.discordapp.com/attachments/1013636347019411506/1366388469064273930/togif.gif

[rapid merlin]

are women real?

[modern fox]

ig got fully payed...

[tired wolf]

ask chatgpt

[gray pine]

what tool do u use for vuln scanning that is free?

[rapid merlin]

but fr what if im a terrorist does that mean im being watched?

[modern fox]

i was thinking of using nessus either 😭

[tired wolf]

no

[sturdy sequoia]

i thought nessus was still free with kali

[tired wolf]

nessus is a freemium

isnt it

[modern fox]

idk we cant find free version

[modern fox]

how much is it

[tired wolf]

https://www.tenable.com/products/nessus/nessus-essentials

[gray pine]

When Im prompted on installation which version do I need I only see these 2 😭

[gray pine]

Yes and when u follow it u still dont see it in the prompt lol

[gray pine]

1 Year - $4,390

[modern fox]

dayum

[gray pine]

fr

Trynna make us all go broke

[tired wolf]

?

[sturdy sequoia]

their faq says its free
"Nessus® Essentials is free to use to scan any environment, but it is limited to 16 IP addresses per scanner. It is ideal for educators, students, and anyone starting out in cyber security. "

[modern fox]

wait i found it

[gray pine]

I download it and follow it, when I go to register offline, I dont see the nessus essentials

[modern fox]

it says u gotta fill a form and receive 1 year license activation code...

so temp free 😭

[gray pine]

fr

can u provide a screenshot please?

[tired wolf]

you're gonna make me install it

https://cdn.discordapp.com/attachments/1013636347019411506/1366388469064273930/togif.gif

[gray pine]

well if u do and find what Im looking for Ill owe u one

[gray pine]

Im just a beginner guys 😔

[tired wolf]

i assume the issue is beyond this page

[gray pine]

yes

[rapid merlin]

so what if he decrypts the cookies

[modern fox]

IT IS NOT THAT EASY YOU KNOW WHAT I MEAN

[gray pine]

after that I chose register offline as per the tutorial and then I dont see the essentials option @tired wolf

[rapid merlin]

okay as you say

[modern fox]

he has ur login > he logs in > new cookie > site thinks him is u

ur cookies not safe even if theyre encrypted everyone selling ur cookies to everyone

chrome, facebook, utub, tikgram, instatok

[gray pine]

we share the same server that Im facing the problem in, Im trynna get PNPT certified and Im going through the PEH course lol

[modern fox]

LMFAO

[sturdy sequoia]

To summarise, you don't need to worry about someone stealing your cookies

[tired wolf]

@gray pine i understand

theres no nessus essentials

[modern fox]

install free stuff to buy omg

[sturdy sequoia]

Is it a separate download?

[modern fox]

type shi

[gray pine]

They are scamming us fr

[tired wolf]

nay

[modern fox]

fr

[sturdy sequoia]

That sucks

[gray pine]

Thanks for helping guys, especially @tired wolf that actually went through it!

[twin ridge]

Gave +1 Rep to @tired wolf (current: #1270 - 4)

[sturdy sequoia]

Is there an open source competitor to nessus?

[tired wolf]

openvas

https://www.openvas.org/

[sturdy sequoia]

Can metasploit scan or does that just exploit?

[tired wolf]

both i think?

i havent used it

cant say for sure

[civic mural]

thm down?? room's ip not showing

[sturdy sequoia]

I just found the awesome Linux priv esc list. This is gonna be so useful. Why didn't I find this sooner

[gray pine]

I quickly saw it, I think u have to fill out a form and request it

[civic mural]

guys???

[gray pine]

lemme test that real quick

[dusky epoch]

Also experiencing the same issue

[jolly abyss]

But how do I know which rooms to do 🤔

[gray pine]

which room r u facing problems tho cause I cant find one to replicate the issue

[civic mural]

tried 2-3 dif rooms
same issue on all of em

[gray pine]

ok just name one so I can replicate it

[civic mural]

anniiev2

https://tryhackme.com/room/annie

tried different medium difficulty rooms, same issue

[sturdy sequoia]

whichever ones you want

[scarlet cove]

same issue here in easy rooms, including basic pentesting

[gray pine]

samme issue

[civic mural]

how can we let devs know? do they already know? any announcement?

[hoary kettle]

hey can anyone tell me why my machine ip not showing after start machine after 2 minutes....?

[gray pine]

we r going through the same problem

we ALL (as in you and me)

[chrome condor]

hey so i got this problem where it doesnt show me the ip address of the target machine in tryhackme it shows me the copy button but even when i press nothing gets copied is this a server problem that ishould just wait for or my problem :

[chrome condor]

oh okay universal

[hoary kettle]

oh but now its showing

[rapid wyvern]

same for me

[modern fox]

@gray pinebtw u can use metasploit as well

for vuln scan

[gray pine]

thank you! I pray u have a blessed day!

[twin ridge]

Gave +1 Rep to @modern fox (current: #616 - 11)

[modern fox]

oh thanks man u too 😭

[twin ridge]

Gave +1 Rep to @gray pine (current: #858 - 7)

[chrome condor]

thats my dilemma in cyber sec , having too many options to do the same thing

[sturdy sequoia]

its much better than having not enough

[gray pine]

u just have to try them all out and figure which one u like best

[modern fox]

thats actually good thing

[chrome condor]

yea fair enough

[gray pine]

fr

[modern fox]

exactly

[sturdy sequoia]

back in my day.....

[chrome condor]

really ? thought it was more of a situation based rather than just personal preference

[gray pine]

id love to hear that!

[chrome condor]

manual sql injection aah vibe

[modern fox]

nah man thats actually good thing to have more tools because they're complete one anothers lacks

[sturdy sequoia]

oh i could tell so many stories

[gray pine]

fr, u find one thing with one and one more with the other

[chrome condor]

thank u i understand

[gray pine]

pray tell

[twin ridge]

Gave +1 Rep to @modern fox (current: #573 - 12)

[modern fox]

inject sql with syringe

[modern fox]

exactly

[gray pine]

😭 🙏

[sturdy sequoia]

there were no youtube tutorials, no online test machines, no ethical hacker forums. it was all word of mouth and test it yourself

[modern fox]

good old times

[gray pine]

WE ALL have it easy now fr

[sturdy sequoia]

defcon and 2600 were still small (especially where i live). the hacker groups were quite private and it took actual knowledge to gain more knowledge

[gray pine]

back when I had to stackoverflow something instead of chatgpt-ing it

[chrome condor]

correct me if am wrong but werent systems too very very weak in security compared to today

[modern fox]

idk back than someday maybe it was good

[sturdy sequoia]

i have a physcial book that i bought in a physical book store

[gray pine]

lol u such a troll

[sturdy sequoia]

yer less secure but harder to be a script kiddie

[mossy river]

It's a bug, a patch should be live for it soon

[gray pine]

damn that mustve SUCKED

[modern fox]

https://tenor.com/view/fknbnuy-reaction-animal-speed-fast-gif-21698273

[ripe sleet]

There we go, sorry bout that Jabba. Anyhow, how're you

[gray pine]

what my cat does at 7am

[modern fox]

exactly

[sturdy sequoia]

it was definitely a different experience to now. one thing im thankful for is actually having to understand everything rather than asking ai or a chat room with thousands of people

[mossy river]

Bit of a headache but alright nevertheless.
How are you? Up to anything interesting?

[sturdy sequoia]

just discussing the olden days

[modern fox]

3am*

[ripe sleet]

I have this cybersecurity club today
Hopefully they can help with this one NCL problem. Speaking of which, are there any THM rooms that explain anything related to hex and analyzing a hex dump?

[mossy river]

Does anyone else have the problem when you're waiting for something and you can't do anything until that thing is done?

[ripe sleet]

Every day

[sturdy sequoia]

imagine finding a toy in a cereal box that can be used to make free payphone calls. it was a crazy time to be alive

[ripe sleet]

Also, congratulations on your rankup Shyft 🥳 🥳 🥳 🥳!!!

[chrome condor]

id say everyday

[sturdy sequoia]

thanks. i didnt even notice the colour change

[twin ridge]

Gave +1 Rep to @ripe sleet (current: #109 - 83)

[mossy river]

oooo Cyber club, what do you get up to in that?

I can't think of any rooms off the top of my head 😔 sorry

[ripe sleet]

All's good, but they do like an NCL module every week or so. Though, I have gotten better at understanding awk with the help of Vigor and GPT

I'm trying to minmax my methods to make them the most efficient

[sturdy sequoia]

wireshark was ethereal, kali was backtrack, aircrack was still aircrack 😛

[mossy river]

I only ask because something is happening on Tuesday and it's completely taken over my brain, I just want to bed rot and wait

[mossy river]

Run by students I assume?

[ripe sleet]

Oh? I'm sorry to hear that! I hope it's nothing bad

[ripe sleet]

Yup

[cloud quiver]

I also do bed rot in such situations 🤣

[frozen gull]

guys i heard

[ripe sleet]

Hello KGB!

[frozen gull]

comptia secAI+ is free

how do u get it

any idea ?

[chilly bronze]

Can aircrack attack or find drone Signals?

[ripe sleet]

What certs do you plan on getting next KGB?

[mossy river]

Prime day 😔 😆 Feels pathetic just waiting

But alas I must work and earn a paycheck

[sturdy sequoia]

if those signals are wifi, maybe

[ripe sleet]

Nah, it's not pathetic. I'm happy that you have something to look forward to. 🙂

[cloud quiver]

Certs are on pause for now 🙂 . Already have a few , haven't seen any bemefits yet 🙂

[ripe sleet]

Have you learned anything new recently?

[frozen gull]

kgb

reccomend some certs

which are affordable and effective

[mossy river]

It's, hopefullly, a new PC

[frozen gull]

to slap on my resume

[ripe sleet]

I hope that it is!

[jolly abyss]

I want practice the topics that I complete

[frozen gull]

[mossy river]

I'm over budget by £400

[ripe sleet]

There's this older Christmas movie that has this one inspirational song that applies to cyber and mostly everything else. It's from this movie called santa claus is coming to town where the song is "put one foot in front of the other."

[ripe sleet]

Are you able to pay bills and stuff?

Like you're not bankrupt or anything right?

[mossy river]

Yes yes don't worry 😄

[ripe sleet]

https://tenor.com/view/sweating-gif-6497153096045529135

[mossy river]

My partner has given me some money for part of it which has helped a lot

[mossy river]

Not that I need it, I think she just feels bad cause of how sad I was when my tower stopped working 😆

She's a cutie, I begrugendly accepted her money

[ripe sleet]

I hope that everything goes swimmingly for you and your purchase Jabba

[mossy river]

I'm super super excited to buy it

[ripe sleet]

I'm excited for you!

[hoary kettle]

hey can anyone tell me why my kali not connected to tryhackme through openvpn

[topaz sedge]

I was out with my tech club friends and I have to say, they're way more fun than my literary club friends not even joking

[ripe sleet]

Can you ping 10.10.10.10?

Did you previously connect and forget to close that session?

Sometimes you might have to kill that previous process to start a new one

[frozen gull]

we got a cybersec club i applied didnt get selected cuz i am a junior

[topaz sedge]

I laughed so hard with them that I felt I was dying
With literary club friends, I have to be careful about my jokes so much that I don't say some dark joke

[topaz sedge]

Damn

[ripe sleet]

Those are the best kind of friends

[topaz sedge]

IKR

[ripe sleet]

I have friends that are like that and it's always a fun time

[topaz sedge]

I love the tech club I'm a part of
It's a bit small but the quality of people is just insanely good and better than other tech clubs of college

[ripe sleet]

I have a friend that I send the most effed up reels to and we just send them to each other

[topaz sedge]

Yea that kind of friendship is best

[ripe sleet]

Quality over quantity is good

[topaz sedge]

Yea

[ripe sleet]

You can really understand them as people

[topaz sedge]

Yeaa

I got in the cybersec department of that club

And it's pretty good

[ripe sleet]

I was in like 3 tech clubs on the e-board in my previous college

[topaz sedge]

The entire club built the college website and we manage it

[ripe sleet]

One of which was my own club

[topaz sedge]

Nicee

[ripe sleet]

Too bad it's dead

[topaz sedge]

Awww

[ripe sleet]

If we had like 4-5 more years we could turn that shit into a powerhouse

[ripe sleet]

We had some fun

[topaz sedge]

It's alright
Good things seldom last long

[ripe sleet]

I made 3 ctfs for that club

The 1st one, I didn't realize that AWS doesn't like ubuntu 24

[cloud quiver]

Currently , checking up typescript and mongodb

[ripe sleet]

Let's gooo

I hope that's going well for you!

[marsh lark]

🤣

I am online for the first time today lol

how is everybody 🙂

[sturdy sequoia]

going really well. got a level up and a 30 day streak today

u?

[marsh lark]

good, had my coding class, learned a new data structure (that I actually didn't learn on purpose cuz it never really comes up)

[sand trench]

thanks for the review... yeah still gotta expand on some stuff and order it better while adding more boxes to check off

[twin ridge]

Gave +1 Rep to @simple wadi (current: #2100 - 2)

[boreal scarab]

D ALL OF THE ABOVE!!!!!!!

[tribal bison]

what does this 5 months free discount is about?

[narrow yew]

pekaboo

[tribal bison]

i pay 95.50euros for 12 months

[blissful snow]

closet

[tribal bison]

but get 5 months for free?

or 12+5

[narrow yew]

THat is not for you

[tribal bison]

i dont get you

[marsh lark]

@mossy river could you explain

I actually don't understand it myself lol

[tribal bison]

i mean every once a month there is a yearly discout

every month the same discount

whats different this time

[narrow yew]

you pay for an annual plan but get effectively 17 months of access for the price of 12.

[marsh lark]

thats not it

from what I heard from Jabba

[narrow yew]

It could be

[marsh lark]

what I remember

is that it was not 5 extra months, but 5 free months

what I'm not sure about is how that is calculated

[tribal bison]

so its just for marketing purposes

[narrow yew]

Then you buy 7 and get 5

[marsh lark]

🤷

[tribal bison]

i would assume so

its the same by saying you get 25% off

[narrow yew]

Well what is the price for this deal

I cant see the price since I have a sub

Or where they drunk when they made the add

[tribal bison]

from €10.50/month its €7.88

which is 25% off

i will just wait for black friday

[narrow yew]

I assue it is explained further up from past days if you just look.

[tribal bison]

no no it ok i got it

[ripe sleet]

Hello Matt!

[narrow yew]

Matt friends

[sage pulsar]

hi guys

im new

[sturdy sequoia]

welcome

[narrow yew]

You think it would be cheaper

[sage pulsar]

tnxs

[torn olive]

anyone seen comet-perplexity.ai? offers too good of a reward in discord quests, I wonder how much data they are vacuuming

💀 downloaded new ai-browser, kept it for 15min, deleted everything, hit them with GDPR request 💀

cant wait for new fireship video....

[sage pulsar]

i did the same

[narrow yew]

I had a look at this.

The 5months you "get" is based out of pay per month price not annual 12month price

[ripe sleet]

Welcome!

[sage pulsar]

tnxs

[boreal scarab]

https://tenor.com/view/seagull-screaming-scream-seagull-screaming-meme-gif-18193351

[ripe sleet]

@cloud quiver

[ripe sleet]

https://tenor.com/view/enbabyfazball-fish-thirsty-gif-12496812153427391344

[grim sparrow]

Done!

[cloud quiver]

Done 🙂

[ripe sleet]

Thank you!

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 5972)

[queen flare]

5000 internet points

I wonder if i can use a VM for the quest

install discord on a vm and do it

lmao

[torn olive]

~5eur / client adds up fast

to be fair some banks offer up to 50 for registering, but yeah, I dont trust it

[queen flare]

or maybe download the browser on my host and then block it with firewall and keep it open to do the quest

[torn olive]

@cloud quiver

[grim sparrow]

Done!

[queen flare]

how are unverified users posting images

[sturdy sequoia]

it just stops embeds afaik

[queen flare]

it needs more stopping power

a desert eagle can be considered

[torn olive]

best of luck, to delete account is one click with 30days data deletion prommise (gdpr compliant), and gdpr requests seems to be simple to make. .com/datarequest

[boreal scarab]

dont post my guns.... dont post my guns

[queen flare]

i'm not in europe so i'm not protected by gdpr

[rapid merlin]

Hello

[torn olive]

im just interested how much they got on me during 15min...

[torn olive]

😭

some things are better, some are worse

[queen flare]

could you let me know, when they reach out to you

i'm curious

[worn gazelle]

just seen someone with a HTB hoodie in my unie

[queen flare]

buy em a coffee

[bitter olive]

hello people

I want to share this video

https://youtu.be/0h-zxfEF740?si=CSd5kCv-UZ89rc_5

very interesting

[torn olive]

offer them an USB

[worn gazelle]

🤨

[queen flare]

@torn olive how'd u calculate the 5 euro thingy

[worn gazelle]

way gift not working

[sturdy sequoia]

if youre asking why the gif wasnt working its because you need to verify your account

[torn olive]

it offers 5k points, DC store equals around 7eur, - im assuming they paying way less 5< (?)

[worn gazelle]

oh i removed that when I changed my email. i think

[queen flare]

i would think that they have some kind of deal with discord rather than paying for each

[torn olive]

i mean, possible, thats still monetary value

[queen flare]

yeah but its not the same as they'd have to pay 5 euros for everyone who does the quest. they likely have a deal with discord that i'll u pay u guys x dollars, and in return you'll publish this quest

they're likely paying more than the 700 orbs quests but it doesn't mean they have to pay 5 eur for each customer

[torn olive]

that still has an equilibrium of X per person

[steel aspen]

New set up

Don't mind the JH vid

[hallow jolt]

hello guys

how are you guys doing?

[steel aspen]

Good you?

[hallow jolt]

im goood

https://tenor.com/view/penguin-linux-tux-tux-linux-gif-341950137175367051

[rapid merlin]

Need more screens.

[hallow jolt]

i see

how many do you have now?

[modern fox]

sup sup

[modern fox]

https://tenor.com/view/penguin-work-hard-gif-8451442284034383693

[boreal scarab]

https://tenor.com/view/cat-gif-27161863

[tall vine]

g9 everyone

[torn olive]

likely I wont forget, so Ill try to let you know, - takes a month tho

[pseudo surge]

hello

[modern fox]

whats this

[pseudo surge]

any python developers

[weak badge]

Any good ctfs / vuln labs for Wordpress? Or some kinda docker image I can pull down that’s intentionally vulnerable and a good representation of how people are using wp these days?

[hallow jolt]

nmap is the goat

[wraith pivot]

Hi I connected thru openvpn when I try to go to the target machines website http://targetmachineip it loads forever

Anyone knows why?

[rich jackal]

DId you power it up

[undone kiln]

try to ping the machine ip and see if your properly connected to the openvpn

[quasi karma]

Did you start the machine? You need to start to generate the ip

[wraith pivot]

Guys of course I turned the machine on

And yes I was connected to the VPN

Don't know why it just didn't want to work

[rich jackal]

Then why does it say http://targetmachineip/

[wraith pivot]

That's an example

[rich jackal]

it changes when it has an actual IP Address

[wraith pivot]

I know it had an actual ip

I pressed on it and it just loaded forever

And after some time the website timed out

[boreal scarab]

I need coffee

[wraith pivot]

I found the same issue on reddit

[undone kiln]

did you ping it?

[narrow yew]

ill ping you

[undone kiln]

@narrow yew

[limber linden]

Yo

[wraith pivot]

https://www.reddit.com/r/tryhackme/comments/1h8orjj/cant_open_target_machine_website_in_browser_of/

[rapid merlin]

Ok

[glacial berry]

https://tenor.com/view/job-job-application-jobless-gif-2757097081210871087

Hello everyone

[limber linden]

Hey

[undone kiln]

Hey

[glacial berry]

https://tenor.com/view/hey-there-dax-mallard-caspar-jennings-migration-hello-there-gif-11733235842390128464

[undone kiln]

https://tenor.com/view/indian-tiktok-cringe-gif-26054928

[limber linden]

https://tenor.com/view/my-life-my-rules-gif-10436468092816510991

[narrow yew]

Better to report all gif kids

[limber linden]

Why I cannot post anything here

[undone kiln]

cause youre a racist

[sturdy sequoia]

you need to verify your account

[limber linden]

Ohh

Right

I didn't verify my account

[limber linden]

😭

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 3, 2025, 1:52 PM

[limber linden]

@undone kiln

@undone kiln what do you call a man is from Senegal

[undone kiln]

@mossy river being racist to indians

[rapid merlin]

no

[glacial berry]

You both Indians?

[limber linden]

Yo

[mossy river]

You know deleting your message just makes it look worse right?

[undone kiln]

it is worse

[limber linden]

Don't do racism

[glacial berry]

[boreal scarab]

https://tenor.com/view/what-is-this-whats-happening-gif-14760168

[limber linden]

We are all human

[rapid merlin]

im sorry i wont be racist

pls dont ban me

[limber linden]

@undone kiln answer my question

[sturdy sequoia]

there should be a no tolerance on racism

[limber linden]

Yes

[grim sparrow]

@rapid merlin has been warned.

[undone kiln]

what'

@mossy river

atleast mute him for a day

[glacial berry]

Who is gravity 👀

[boreal scarab]

Let the mods do their job people!

Move on, situation is over.

[mossy river]

You were muted for provoking community members, would you prefer to be also put on a final warning? 🤔

[undone kiln]

HOW TF HE CAN CALL ME A PAJEET

[mossy river]

He didn’t call you a pajeet.

[limber linden]

😭

[undone kiln]

See the logs

[limber linden]

Yo this is a first degree racism

[mossy river]

His message wasn’t directed at anyone hence the warning and not immediate ban

[boreal scarab]

He asked in GENERAL, not targeted as a specific person

[glacial berry]

https://tenor.com/view/shocked-surprised-gasp-what-cat-shock-gif-635629308990545194

Why not let it go this time

[limber linden]

This message was intentionally

[mossy river]

Please avoid mini-modding

[tired wolf]

https://cdn.discordapp.com/attachments/1013636347019411506/1366388469064273930/togif.gif

[limber linden]

Ok

[limber linden]

😭

[glacial berry]

Is is petrol or diesel?

[boreal scarab]

Yesn't

[mossy river]

Appreciated

[limber linden]

@mossy river can you tell me why I cannot post anything in this server

[tired wolf]

raw crude oil

[glacial berry]

Oh my

[sturdy sequoia]

youve already been told

[mossy river]

You haven’t verified your account #start-here

[glacial berry]

It has those carbon chunks, right?

[limber linden]

Can you direct me the link

Please

[sturdy sequoia]

its right there

[limber linden]

😸

[sturdy sequoia]

are you trolling?

[boreal scarab]

Whats with little kids and trying to relate to adults? Like i'm working on ipads, and the kids feel the need to tell me they have ipads

I swear, it's like they're on autopilot telling you stories lol

[distant robin]

no, I had the same problem until someone directed me to how to verify my account. Lol.

[sturdy sequoia]

they were told minutes earlier. then literally replied to a link asking for a link

[sharp citrus]

@limber linden

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 3, 2025, 2:03 PM

[loud orbit]

Sup chat

[distant robin]

Yeah I did the same thing too because I couldn't understand what I was supposed to do and I also explained that I haven't done things like this in a long time so I was a little confused.

[distant robin]

@sturdy sequoia this is what I got too and took a while to get it sorted out.

[sturdy sequoia]

i was just alluding to the fact that they literally asked the same question and got the same answer. it sounded like they were trolling

anyway

[winged nimbus]

what are you expecting them to talk about, are they going to talk about RF frequency modulation or something lol

[boreal scarab]

YES!

Anything but telling me they have an iPad case like the one iPad i'm holding has

I. DO. NOT. CARE.

[sand trench]

we are in the last day of the dino run 2 kickstarter

looks like we hit some stretch goals but not all D:

[winged nimbus]

what is it?

[sand trench]

old flash game where you run from the wall of doom after the astroid that killed the dinos hit
this is the sequel made in unity
they have a lot of stuff planned and some stuff already working

[winged nimbus]

ohhhhh

like the no internet dino

[boreal scarab]

They put on a video for the kids to keep them occupied... it's working on me.

[sand trench]

kinda but better...

[winged nimbus]

been a long time since i have played it

[winged nimbus]

put on darknet diaries lol

[sand trench]

https://www.kickstarter.com/projects/pixeljam/the-dino-run-2-early-access-campaign/

[distant robin]

ice cream please

[boreal scarab]

I actually meet Jack at DC33

[sand trench]

if you wanna check out the kickstarter

[winged nimbus]

cool

[sand trench]

pixeljam are the good guys :D

[queen flare]

anyone wanna vc?

[sand trench]

who did you not meet at defcon??? :P

[queen flare]

i'm so bored

[boreal scarab]

He signed my duck badge!

I'm Duck Rhysider. And this is Ducknet Diaries

[boreal scarab]

I meet Jack Rhysider, Ryan Montgomery, Deviant Ollam

I was busy this year lol

[modern fox]

no more left 🐥

[winged nimbus]

does he still wear the bandana

[boreal scarab]

Yep, you see 0 parts of his face. He hides it all

[winged nimbus]

fair

is jack even his real name lol

it is 3am and there is like a fucking duck or something making sounds that sound like a duck

outside

[coral lynx]

Guys why tryhack content don't make me professional at cyber security and Dont deep in vulnabilitys

[sturdy sequoia]

what?

[boreal scarab]

Probably not lol

[winged nimbus]

kinda sounds like a duck being attacked by a large rat or something

[boreal scarab]

THAT'S DUCK RHYSIDER!

[winged nimbus]

whos the rat

if it is a rat

[boreal scarab]

RAT RHYSIDER!

[winged nimbus]

Could also be cat rhysider

[boreal scarab]

Now you're getting it!!

[rapid merlin]

is there anyone can hack fr?

[winged nimbus]

Wdym

I haven’t uses unity in years and i just got a vulnerability report which is interesting

[sand trench]

well seems shadow "fixed" 1 problem but now got new problem :P

[rapid merlin]

i mean who knows how to hack a person

[boreal scarab]

Thats Social Engineering

[zinc aspen]

.

[stable pier]

HI

[zinc aspen]

hlo

[stable pier]

SATORI SEDAI YORU WASHUKAI

[modern fox]

holy tough storm we have omg

[mental kraken]

hello people

I am solving OWASP juice shop

and i think this room is bugged

it doesn't want to give me the flags for the XSS's

can someone help?

[loud marlin]

#room-help

[mental kraken]

ty

[smoky sail]

@small kernel
t'as dis quoi dans mon dos ?

[topaz sedge]

english only pls

[smoky sail]

why ?

[loud marlin]

#rules

[topaz sedge]

cause its the rules

[smoky sail]

k

[mental kraken]

man no one is helping lol

the room is literally broken

[mossy river]

It's all voluntary, there is no expectation for anyone to help you 😅

[mossy river]

Ping a moderator please, don't mini-mod

[topaz sedge]

my apologies

[mossy river]

No worries 😄

[frozen gull]

what do y'all think of portswigger labs

worth it ?

and the certif as well

[mossy river]

Mhm of course

[frozen gull]

so

hmm

do u get any kind of certif by doing the portswigger labs

instead of paying that 99$

[hoary pasture]

chat

do we have any new update on owasp top 10?

or is it 2021?

[sand trench]

2021 newest for now

in novemeber they will release a 2025 version

[hoary pasture]

oh oh alr ty

[sand trench]

https://owasp.org/www-project-top-ten/

echo "enable privacy extensions for ipv6 in networkmanager"
echo "[connection]" > /etc/NetworkManager/conf.d/10-ip6-privacy.conf
echo "ipv6.ip6-privacy=2" >> /etc/NetworkManager/conf.d/10-ip6-privacy.conf

echo "disable connectivity check in networkmanager"
echo "[connectivity]" > /etc/NetworkManager/conf.d/11-connectivity-check-disable.conf
echo "enabled=false"  >> /etc/NetworkManager/conf.d/11-connectivity-check-disable.conf

work in progress much :D

probably better ways to do this actually but whatever

[frozen gull]

[hoary pasture]

[frozen gull]

peeepee

[soft salmon]

Portswigger shows how many labs you have completed and stuff you can post it on socials to show how dedicated you have been

[short cove]

Hello if anyone can get me a $15 steam gift card i can paypal them 50$ but i need it quick, pls dm me

[ashen summit]

Hey guys, anyone recommend a quality VPN for hiding your IP.

[distant robin]

https://tenor.com/view/i-miss-you-gif-9601499254078520677

[boreal scarab]

Use case?

[ashen summit]

Case?

Is that a VPN?

I'm still a bit of a newbie by the way.

[silver sky]

Wild suggestion, use the $50 to buy a Steam Giftcard?

[loud marlin]

why you wish to hide you ip for start

[silver sky]

Nah as in why do you need a VPN? What you gonna use it for?

and don't just say hiding my IP

[ashen summit]

I'm going to hack Amazon.

[silver sky]

Oh fascinating

[loud marlin]

ask @gusty inlet ... and that sounds illega

[ashen summit]

Just curious. I was watching the Youtube guy who hacks people. He said he uses Nord VPN.

[silver sky]

Please standby, a senior adviser will be with you shortly

[loud marlin]

you think to hack amazon, and i can't hack my own lab and get banned by fail2ban

[ashen summit]

🤣

Jeez....I can barely get through John the Ripper on basic.....🤣

[loud marlin]

by hide you ip in sense doing bad things, vpn will not do you good... for start

[frozen gull]

https://youtu.be/14l51vt5kdQ?si=9KbyDJeVSZxFehMy

holy sh8

[ashen summit]

I would love to do what that guy does - on Scammer Payback. Those videos are awesome.

[silver sky]

That's still a criminal offence

[ashen summit]

He must do it with law enforcement.

[silver sky]

We don't discuss or engage in such activities

[ashen summit]

I wonder how else he does it?

[silver sky]

No they literally don't

[loud marlin]

you know that he have many legal things in backend by doing that. he is not doing that for the lolz

[ashen summit]

Is he not? But 4 million hits!

[silver sky]

Doesn't mean it's legal

[ashen summit]

8 million subscribers!

[loud marlin]

sub/hits means nothing. illegal is illegal

[silver sky]

I could hit the front page of the news for a crime and be seen by millions but doesn't mean it's legal because so many people saw it

[ashen summit]

I guess I'll never know.

[silver sky]

I'm telling you now, it's not legal

[ashen summit]

I know. I was just curious.

[loud marlin]

my advice. is to be carefull with words. this is cyber sec discord

[silver sky]

And there are those who work in law enforcement here.....

[loud marlin]

guess #start-here and #rules is nice place to go with

[silver sky]

And more than likely three letter agencies too

[ashen summit]

Thanks for your advice 🙂

[twin ridge]

Gave +1 Rep to @silver sky (current: #36 - 295)

[ashen summit]

So what are the rules on port mapping?

[silver sky]

If it's your network or a network you have a legal contract with, sure.

Random network is a no no

[solar skiff]

That's active recon. Only if your have written permission from the owner

[ashen summit]

I guess that's how professional Penetration Testers do it then?

[loud marlin]

• is legally approwed

[silver sky]

Not even written permission, a legally binding contract that has been reviewed by solicitors

[high mulch]

https://tenor.com/view/rules-gif-18225622

[silver sky]

Don't get yourself stung

[solar skiff]

Ok, fair enough

[silver sky]

And also make sure you have adequate insurance.

[stoic quarry]

https://nmap.org/book/legal-issues.html

[loud marlin]

getting visited by 3 letter agencies is not fun....

[silver sky]

Or getting sued for millions because you fucked up

[loud marlin]

tru tru

[stoic quarry]

Your honor I didn't mean to

[silver sky]

As Zoz famously said "don't fuck it up"

That was a great DEFCON talk

[loud marlin]

link it pls

[silver sky]

https://youtu.be/J1q4Ir2J8P8?si=GRg2lXSM5_qYOoQM

[loud marlin]

oh.. the guy who decide to find his laptop 🙂

[devout cove]

most likely if you port scan a big entity, they won't sue you / get a 3 letter agency visit... cause most likely they get port scan a crazy amount of time per day that they can't take action against everyone.. Probably they will simply block IP / automatically set some extra rule for your IP to block / rate limit / audit for more suspicious activity, and as you get more persisting and attempt more stuff, they will probably escalate to more drastic legal action

Most enterprise have IPS that are configured to log/audit/enforce different set of action on different pattern/behaviour (Like port scan / fuzzing around / trying to inject known exploit... for example STI, SQL injection and other). The more you persist/poke hard, the more they will look at you closely and may react with legal action

AKA its a bad idea to attack an enterprise cause what you think is just gentle/for fun / think has no consequence may at some point go above their tolerence threshold and trigger legal action. They will notice, they have the tool to monitor. You don't know what is their tolerance threshold...

[silver sky]

Same guy

That was also a good talk

And so was this one:
https://youtu.be/fWk_rMQiDGc?si=bV_PMErfCPG6HYA7

[boreal scarab]

https://tenor.com/view/enbabyfazball-fish-thirsty-gif-12496812153427391344

[ashen summit]

Wow! I saw about people in England being extradited to America for hacking. Imagine being in an America jail!

All for scanning a port!

[digital estuary]

https://tenor.com/view/cat-shower-cat-kitty-kitty-shower-showering-gif-16885876113304224165

[ashen summit]

I had a scam call once from India and was like 'Ben Chod!' They soon hung up 🤣

[silver sky]

Cool story thank you for sharing.

[sand trench]

yeah that is one of the most fun defcon talks to watch now and again

[modern fox]

https://cdn.discordapp.com/attachments/1372366755338653780/1421604023538155570/STK-20250927-WA0004.webp

[grizzled sky]

https://tenor.com/view/cute-cha-pri-gif-4196443019552842049

and yeah one of these days i should go watch through the best talks from defcon;

i am still working my way through the podcast darknet diaries;

[dark wolf]

Should I go back and spam post the 200+ THM rooms i have done on my linkedin?

[zealous socket]

[loud marlin]

no

[devout cove]

An interesting topic lately... Kernel level Anticheat... AKA lets try to make PC like a game console, a sandbox where user is limtied on what he can or can't do with his device, while also introducing a host of issue.

Kernel level DRM where the user don't control his computer anymore... Valorant/BF6's Anticheat solution that may be incompatible with AV solution, and incompatible with each other, and also prevent user from installing legitimate software. The kernel Anticheat used by BF6 for example prevent the installation of process monitor by windows systinternal. They are trying to make PC like a game console, a sandbox environment where its a blackbox/trusted environment where the user is limited in what he can do / not do. But this open up the door for some backdoor / supply chain attack. Oh, also since the Anticheat of BF6 also need control over the secure boot, it may also have compatibiltiy issue with dual booting with linux

[dark wolf]

you are right. my 676 connections probably don’t care and will unfriend me

[grizzled sky]

you can still use it though. i sent an llm the screenshots of all the rooms i did and had it create an inventory of all the skills i learned from them;

[dark wolf]

EA games was bought by saudi arabia and jared kushner

RIP EA

[dark wolf]

That’s smart!

[modern fox]

its wild that valorant has so much control over users pc

[dark wolf]

Fsck any game requiring kernel stuff

not gonna happen

[grizzled sky]

the funny thing is i probably still have more experience doing the thm rooms with those skills than most of the people who just copy and paste the requirements of a job posting to their resume and hope they don't get asked about it at the interview;

[modern fox]

so true

[grizzled sky]

thm actually forces you to have to use the tools enough to understand them, as long as you didn't copy and paste the answers;

[dark wolf]

That is the problem. You can get those certifications or even room completion notices and still not know what you’re doing.

[modern fox]

fr

[dark wolf]

That is why listing certifications and completion certificates. Don’t always help very much. Having experience means a lot more.

[devout cove]

My bad, i said DRM when what I wanted to say was Anti cheat, just corrected it

[dark wolf]

Once you get into a position, and they see what you were capable of, then you have a chance to shine and show them what you really know

[grizzled sky]

yeah its a catch 22. even for entry level it jobs, you need 3-5 years hands on experience;

in my case i did freelance for 10 years in it;

[swift prism]

Does tryhackme have a referral program?

[devout cove]

At this point, if a game require any kind of intrusive Anticheat, I would rather play that game on console, or not play the game at all if that game isn't worth it. Nothing worse than some problematic Anticheat on my computer. No way i would compromised my computer because a company think they will stop cheater using a kernel anti cheat. Cheater will find way around it, but legitimate user are penalized. Its a big security breach

[grizzled sky]

so even if i didn't do on site experience in a soc or something official, i easily have more than enough experience between my certs and from going to senior homes and volunteering to help set up wifi and security for seniors in my area;

[glacial cove]

Sounds like it'd be a fun exercise to create a maximally undetectable VM with a virtualised TPM just to spite it

[grizzled sky]

its also why i strongly recomend getting in contact with senior homes if you are new to cyber and looking for clients. seniors at least in my area always tip well if you are nice;

[modern fox]

i deleted everything about valorant from my pc when i learned about the valorants anticheat system and that they can literally control everything 😭😭😭

[grizzled sky]

yeah that's part of the reason i game on linux. every game is sandboxed;

[devout cove]

The stupid thing is a kernel anti cheat basically behave like an active threat protection... like An antivirus... It just mean that if someone want to cheat, he will just use the same technic used by malware writter, there are technic to evade EDR solution, the same technic will be used to evade the kernel anti cheat. People will just start writing cheat solution like malware

[restive pike]

I heard gen z Rust Programmers use anime girl pfp

[grizzled sky]

kernel level is the most egregious, but running any software on your pc is inherently a security risk that windows doesn't really have a good solution for besides hoping that steam and other large storefronts for games and software doesn't allow malware on its platform;

[dark wolf]

If I cannot cheat in a game I refuse to play it.

[frank talon]

Anyone interested in helping me ideate a project please dm me
the base idea is an 'adversarial AI attack defender focusing on the healthcare niche'
Im not an expert but erm, would appreciate if youre down to discuss in dms

[grizzled sky]

could you explain here? i'm currious what that means;

if you're saying defending against ai, its called a firewall;

ideally healthcare shouldn't be exposed to the outside internet at all;

[frank talon]

no defending healthcare AI Models/LLMs from adversarial attacks such as data poisoning, prompt injections, evasion attacks

[grizzled sky]

llms are not doctors;

they shouldn't be used for health care purposes period;

actual machine learning absolutely is good for health care though;

but llms are not secure as a tech enough to be relied on for life threatening access to patients;

[frank talon]

yes true but healthcare firms are moving towards AI like any other fields
not to take direct decisions but mainly to assist them in safe tasks
take ibm watson for example

well yeah not specifically AI but ML models too

[grizzled sky]

ml security is a different beast;

[devout cove]

I play most of my game on either Linux (Game that are better on computer) or on Console (Game that play better on console, have intrusive anti cheat, or game that have nasty DRM on PC (On console, game don't need DRM, since they used the console built-in one... )...From Kernel Anti cheat that compromised your computer while restricting what you can or can't do in your computer like in BF6/Valorant ... To DRM that make the game super slow... Remember Assassin creeds in 2018 or so, the game would barely hit 60 FPS with some of the best GPU, while it would run super fast and look nice on console, because of the DRM that was super ressources heavy

[glacial cove]

My friend, game hackers have already gone the extra mile actually 😭

The exploits I'm aware of against kernel-level anti-cheat is above that of EDR + Antivirus. Hackers are currently using hardware and PCIE devices to write straight to the memory of a live PC from that of an external Linux device

They use display merging hardware and a 2nd machine to draw ESPs for example and then combine the outputs using specialised hardware

Or use programmable macro devices to merge legitemate input with automated scripted keystrokes

It's insane 😭

[frank talon]

lets say using ML in cancer detection
its trained on some datasets to identify patterns
some attacker messes with this data
thats an adversarial attack

[grizzled sky]

then that's database security;

it'd be the same whether ml is involved or not;

hash the datasets;

[frank talon]

i guess
what about defense against evasion attacks
prompt injections (yea this is more AI)

[devout cove]

I know, but those are not easily accessible solution. I already did some experiment with an FPGA to drive the input of the computer while reading display output. Hardware solution are impossible to block, but at the end of the day, not many people can apply it

[grizzled sky]

like i said, prompt injection is why llms shouldn't be used in health care;

[loud marlin]

proxmox ❤️

[grizzled sky]

at a foundational level, there is no securing them for anything life threatening;

[ashen summit]

Interesting: https://www.youtube.com/watch?v=Re1dAB7pyeQ

[frank talon]

why cant they be used for assistance?

[grizzled sky]

because if they are injected, proving they are is impossible atm;

we don't understand them enough at this stage to be able to verify if they have been modified in a malicious way;

databases we can verify with hashing;

or simply backups;

if llms are foss, we could theoretically hash them and have each prompt be untied to each other so that it reverts to its default each time;

[frank talon]

oh
well I guess I could try to come up with a defense for prompt injections tho that kinda sounds impossible like you said

[grizzled sky]

but then they are just only able to output 1 thing, and that still means verifying the outputs and inputs;

[frank talon]

how about evasion attacks on ML models?
manipulating input data during inference time to trick a machine learning model into producing an incorrect output, such as misclassifying a normal-looking image

[devout cove]

i feel the whole LLM security (company trying to protect against injection / people specializing in prompt injection) kinda pointless / stupid, cause its impossible to ever have a fully secured LLM, thus in the first place, LLM shouldn't be able to take action (Like modify stuff / run shell command) and shouldn't have access to any sensible/confidential data

[grizzled sky]

i think the root problem is the datasets in those cases from what i can tell;

ml afaik doesn't rely on manipulating the datasets meaning that as long as you authenticate integrity of the datasets you should be safe from malicious edits;

[frank talon]

yeah gotta filter the data and curate it which many trainers miss

[grizzled sky]

i don't know enough about ml to be certain though, if anyone has experience with that i'd be interested to know;

i have some experience in llms from the research i'm working on as a part of trying to specialize into mcp security, but ml is outside what i have direct experience with;

[frank talon]

I mean adversarial training exists anyway
like tesla uses it on its autonomous vehicle systems to avoid misinterpretations of road signs
training on "corrupt" data
like sometimes the stop signs might have stickers on it or the paints come off and it might trick the car into assuming the sign as something else
well this is an old solution I guess nothing new

[grizzled sky]

tesla isn't a good example for security imo;

[frank talon]

for context I was considering this idea for a capstone project 😂
welp idk

[grizzled sky]

though that's more cause of elon than anything the actual engineers are doing;

[frank talon]

if yall got anything fire lmk, I try to build up on ideas

[grizzled sky]

if you are like me, my suggestion is to focus more specific;

in my case, i am specifically focusing on mcp;

[frank talon]

fair

[grizzled sky]

that keeps me focused on 1 part of llms rather than trying to breadth out into every area of its security;

since we simply have too much we don't know about it from what i have seen and read so far;

[frank talon]

but its kinda tough coz the judges look at the solution from a business perspective so I gotta find a balance between something too niche and too generic

[grizzled sky]

mcp at least is grounded enough since its parallel to api security;

[frank talon]

right

[grizzled sky]

so a lot of it is just applying the same protections as api;

the big added issue to security is vibe coding;

and specifically people using llms to automate creating api connections and thus not considering the endpoint security needed;

[frank talon]

yeah and its increasing daily

[grizzled sky]

for mcp to work as a protocol, there needs to first be some security in authenticating what mcps are verified, and thus working with the companies creating api to create official mcp with proper security imo;

but of course that currently isn't happening so its the wild west where any mcp created could be secure or insecure;

[frank talon]

whatever I see as a problem, I immediately think of a potential solution
maybe theres a counter to faults made from vibe coding

[frank talon]

hm

[grizzled sky]

the biggest one is building in checks into vibe coding;

if we could even just ensure that these models built in unit testing to the software they build, that would go a long way;

[frank talon]

how about a software to automate testing on vibe coded solutions

hmm

[grizzled sky]

we have that, its called unit testing;

[frank talon]

lol

[grizzled sky]

like in javascript there's jest for instance;

[frank talon]

yeah jest

or integrate it directly into AI chatbot but thats just like trying to solve the problem after creating the problem which couldve been avoided in the first place

eh

yeah that sentence. didnt make sense

xd

[grizzled sky]

the main thing is training vibe coders to actually read the tests if not the code itself;

[frank talon]

cant beat laziness mayne
we seek the easy way out

but yeah thats bare minimum else we all cooked

[grizzled sky]

the biggest issue imo is vibe coding is incentivised from speed being the main incentive financially for coders;

[frank talon]

yup

[grizzled sky]

as long as we are paid in salary or hourly, the incentive is fast vs good;

[frank talon]

pretty much
running for the moolah

[grizzled sky]

that's also why i think the root of all of this is capitalism, the financial incentive is the core vulnerability that created vibe coding imo;

basically there needs to be tools for employers to be able to identify bad code much more than just for vibe coders to create it;

and that means effective unit testing and tools for mangers;

[dark wolf]

you know what's a little frustrating the more rooms I am doing ....

[frank talon]

okay so
what are some top vulns in mcp
which you think are solvable?

[dark wolf]

I find errors that are clearly wrong and a problem. There is a bug-report forum here for that I think.

[grizzled sky]

i mean besides humans, the biggest issue fundamentally is its a fluff layer on top of api keys;

[dark wolf]

But there are almost never replies so why waste my time showing where the errors are

When no one will read it or fix it

[grizzled sky]

and people aren't being trained on how encrypted keys work and to keep them private in .env files;

[frank talon]

ah

[frank talon]

or they know it but they dont know how seriously necessary that is

[dark wolf]

The writeup shows another port open .. the answer

[grizzled sky]

or they financially are incentivised not to care because "i don't work in security i'm just the coder" mentality;

either way this is still an area i am only just starting to dive deeper into;

[frank talon]

fairs

[grizzled sky]

but its been fun and my hope is i can create something valuable that will also hopefully help me find work;

[rapid merlin]

any experieced and potenial hacker here?

[dark wolf]

No, I am a janitor

[grizzled sky]

i do think you have the right idea though, trying to work on real issues as a project is always more fun than tutorial hell;

[rapid merlin]

okk

[grizzled sky]

https://dontasktoask.com/

[dark wolf]

What do you need DR Black?? Read the #rules before asking

Be VERY careful about what you ask!!

[frank talon]

hope you do fr
im still unsure bout my career path lol
its between AI and cyber
as boring as that sounds kek

[frank talon]

mhm

[grizzled sky]

if you want to do ai, go into ml;

[dark wolf]

Different things are boring to different people. You ahve to do what you have a PASSION for

[rapid merlin]

dont wry bro

[frank talon]

real

[grizzled sky]

llm is not ai, its a prediction algorithm;

[rapid merlin]

whats this?

[frank talon]

yeah I am
still a newbie but diving into ML and DL

[dark wolf]

It means don't ask a question for the sole purpose of asking a question. Just ask the question you want answered to begin with.

[grizzled sky]

https://www.geeksforgeeks.org/machine-learning/difference-between-machine-learning-and-predictive-modelling/

btw for those wondering the difference, this goes into it well;

tldr; real ai is solving problems that don't have answers, predictive models like llms are just using data that already exists to make predictions, in this case predictions of what word should come next;

that's not to say llms aren't impressive when used correctly, but they are also not trying to answer problems that we don't already have answers for the way robotics is trying to teach robots how to answer and ideally solve new problems outside what it was trained on so far;

[dark wolf]

AI can't determine if the answer is right. Humans can verify it and coach the AI telling it what it did right and wrong and then AI can try again until it solves it.

[frank talon]

Ig agents are more useful

when u give fine tuned llms agency to do a specific task and work in harmony with other agents

tho the inaccuracies with most LLMs dont give us hope

[sand trench]

YAWN

[grizzled sky]

https://youtube.com/shorts/95Mk03c-H7g?si=bhvuVX7xxKwGIsXq

[dark wolf]

it’s early evening. why u so tired

[low flame]

i need help

can someone?

[grizzled sky]

Me but playing with homelabs;

[dark wolf]

ask the question

[sand trench]

because only sleep roughly 4 hours a night

[low flame]

umm...i m in john the ripper basic

[dark wolf]

that will do it

[grizzled sky]

https://dontasktoask.com/

[low flame]

and i am not able to usee it

[dark wolf]

why not? do you get an error

[low flame]

ya

see this

[frank talon]

wb bleeding jumbo

[low flame]

i was using the machine given in the room

[sand trench]

the john and hash id commands are meant to be run on the attackbox or your own kali linux install
not on the target machine as user

[low flame]

ok

so i also need to run attackbox side by side?

[signal widget]

Is there anywhere I can learn A+ ?

For free

[sand trench]

yuups

[low flame]

no idea, what is A+

[dark wolf]

Also keep in mind that some of the "examples" are just that .. ."examples" sometimes you have to modify the command to match your environment

[sand trench]

search for guides on your search engine of choice or on video platforms like youtube
you won't get the certifaction but you will get the knowledge

[low flame]

ok

[signal widget]

Thank you

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2229)

[sand trench]

no problem

[low flame]

but those questions in room are too ez, i just guessed them by length, and used hashes.ccom for hash

[sand trench]

fair... you can do that
just you are losing some of the learning opertunity by not doing the exercise as explained

[low flame]

yeah

thanks for help guys

[sand trench]

you're welcome

[polar shale]

Professor Messer is a great resource

[signal widget]

Are they free

[polar shale]

Yes the course

[signal widget]

Sick thanks

[polar shale]

Their are paid study notes n stuff but not necessary to pass

[polar shale]

Enjoy bro

[wispy geyser]

@ripe sleet i have to go cause my phone number is causing me to be rate limited

but i will stay in the server

[ripe sleet]

Let's gooo

If you ever need to contact me just dm me

[digital estuary]

https://tenor.com/view/gumbus-gumbus-cat-gumbus-babby-old-baby-freaky-gif-4497378494140279825

[summer sandal]

Damn

[loud marlin]

oh boy

[tall steeple]

hey guys needed some adive, theres a cybersecurity capture the flag event happening and its being hosted by my school. I signed up for it even though im a beginner and they accepted my application. Im worried if i go to the event that Im going to hold my team back as I am a beginner and dont have as much knowledge/experience in Capture the flag events (this would be my first one). However, I really want the experience and to network with the other people at this event. Any advice would be greatly appreciated!

[rapid merlin]

We're old...

[sand trench]

makemkv has better ui then this :P

[loud marlin]

heh

[summer sandal]

Do some ctf at home like tryhackme or hackthebox first to khow what u will be dealing with

[sand trench]

also bet you don't know this ralex but worth asking
any idea how to setup fcitx in wayland???

[umbral bay]

👋

[rapid merlin]

Hey.

[summer sandal]

[loud marlin]

oh no... heh never need smth like that heh

[sand trench]

well need ibus or fcitx on hyprland for gnome applications to be able to take ¨ ^ ~ chars now

due to a recent change

which sucks if shadow wanna use ghostty a lot

[loud marlin]

as far i know dont have issue with things at all so far

[ruby fog]

Hello how are you alllllll , iiiiii am in a bit of a dillma right now i was trying to automate some of my tasks but i found a vulnerability while doing so and i want report it , i dont know how to and how much details should i put in the report and all that

[vague monolith]

I just realized that I won 2 silver raffles. 😭

[ruby fog]

anyone got any advice on this ?

[vague monolith]

i just saw the mail 🤣

[ruby fog]

congratz boi

or girl xd

[sand trench]

check the bug bounty program sites to see if the thingy you are dealing with has a bug bounty program
as then you have a reasonable disclosure method
otherwise it can get kinda messy

[vague monolith]

But I don't think I'm in time to claim it anymore haha

[ruby fog]

yaaaaaaaaaa i kinda did check that already and there were none

[ruby fog]

checking wont do no harm sooooooooo yeah

[sand trench]

well then there is to check if they have some sort of support email you can reach

not ideal to send that kinda vulns over email but sometimes it is the only option

[vague monolith]

But I have no idea how. The event happened almost a month ago

[ruby fog]

yeahh that exactly what i mean like i dont know what to send for them to take it srsly without 1 thinking i am black malling them , 2 without disclosing too much to the wrong ppl

[boreal scarab]

I swear. I hate this generations videos for kids

Nice artwork, cliche everything

[ruby fog]

nah they work on hooking kids , colours , fast clips and so on

[ruby fog]

this is why i came here to ask for advice from the gurus

[boreal scarab]

They RUINED rescue heroes

[scenic oasis]

#random - got a Sora2 invite code if anyone’s interested.

[rapid merlin]

Profile picture from Black Clover.

[sand trench]

eeeh not that into making videos using openai

[scenic oasis]

All good - figured I’d ask. Seems to be all the hype on X rn

[boreal scarab]

I swear, Al Rocker is in this teaching kids about fall

https://tenor.com/view/squidward-meme-twitter-gif-26315828

[queen flare]

@torn olive looks like i don't have to actually use the browser for the quest

i can block it in with firewall and open it, and it still completes the quest

how the hell does this browser detect my other browser profiles though

[torn olive]

Static files btw

[queen flare]

wdym

like offline files stored on my device that the browser looks for?

[torn olive]

Yep

[queen flare]

i lowkey like the music

[sand trench]

hahahah @boreal scarab is getting old and hating on new stuffs

[queen flare]

good thing that it plays offline

[torn olive]

It had music??

[queen flare]

yeah

i opened it and its playing music

still is

[torn olive]

XD

[boreal scarab]

https://tenor.com/view/where-is-my-free-coffee-gif-3269213794652962951

[queen flare]

i can show u in stream if u want

lmao

[torn olive]

Lmao gimme a sec

[north sequoia]

Giving someone a rare account if they can script something with python for me

[boreal scarab]

Wtf kinda name is that

[queen flare]

@cloud quiver

[north sequoia]

Huh

Please

[boreal scarab]

https://tenor.com/view/barney-no-himym-barney-smile-no-hm-no-barney-gif-26652793

[north sequoia]

DM me

[torn olive]

room?

[north sequoia]

Anyone just DM me if u can do python shit

I know the github page to get the scripts

[queen flare]

@torn olive can u hear music?

[torn olive]

yep

[rapid merlin]

Someone built The Tower of Babylon!!

[queen flare]

can't really talk cause i don't have headphones connected lmao

feel free to stay and listen till i finish the quest though

[tall steeple]

yeah ive done quite a few easy picoctfs, but i prob need to practice more

[queen flare]

xD

[torn olive]

i clicked around a bit, its chromium based, uses AI agents to "automate tasks".

Absolutely not worth IMO missing a bunch of features normal browser has

[queen flare]

yeah i'm just gonna enjoy the music till my quest finishes, then uninstall

[torn olive]

minimal lightweight look

[queen flare]

@limber gust i'm here but can't talk

you're also definitely not a girl

[rapid merlin]

Girl = Guy in real life.

[chilly veldt]

👀

[sand trench]

work in progress continues :D

[stiff geyser]

some kind of hardening script with emphasis on privacy?

[sand trench]

yuups for shadows EU privacy and security checklist and scripts thingy on github

[celest dirge]

Your name reminds me of this

[queen flare]

since shadow likes privacy so much, and since i do too, would shadow mind if i bother her in the near future with my privacy related questions, or discuss my ideas for better privacy sometimes?

[queen flare]

also dafuq is that?

[dark wolf]

we should ban names like that

[sand trench]

go ahead and ping shadow for that... would love to discuss it

[celest dirge]

This was posted by the official account, and I have no idea what they are trying to say

[narrow yew]

Anyone done todays flags for huntress ctf?

[queen flare]

12 hours ago from now?

[celest dirge]

Days ago

[mossy river]

KFC pretty much hired a GenZ marketing team and let them shitpost

[queen flare]

i wonder what they are marketing with that lmao

[mossy river]

KFC UK & Ireland on Instagram is literally just memes and trolling, it's not even a business account atp

[narrow yew]

@quick blaze not even you?

[mossy river]

It's all about playing the algorithm, more people who see your posts, more people follow the account and then you can make normal posts (not reels) which will be pushed onto people's feed

[quick blaze]

Hmm?

[celest dirge]

Same with LetsDefend on LinkedIn, it's either all memes, or newly released challenges.

[quick blaze]

Huntress?

[narrow yew]

BLue you doing ctf.huntress.com ?
john hammonds month ctf

I am stuck

[mossy river]

LinkedIn is a new environment that people are testing memes with- it has been strictly professional for a long time and 'shitposting' has been highly scrutinised

[stiff geyser]

Ill be sure to check it out when you're done

[mossy river]

Duolingo have been breaking the LinkedIn cycle but they were also the first people to do it on the rest of social media

[quick blaze]

Oh bet I'll join it.

[sand trench]

just quick reminder that the script is arch linux focused

[boreal scarab]

I love that!

[quick blaze]

Seems like it's steganography?

[narrow yew]

Well we have tried everything, I cant get it

[queen flare]

i wrote a short blog post earlier about digital privacy (also my first blog article ever), would u like taking a look?

[quick blaze]

audio steg is NOT that difficult. 🤔

[queen flare]

and give me some feedback

[sand trench]

sure

[digital estuary]

did ea nasir return?

oh

his mesopotamian name is gone

ea nasir sells high-quality courses on cybersecurity 😱

[queen flare]

https://medium.com/@scorpius_55528/your-breezy-handbook-to-digital-privacy-tools-3cbe42ee1331