general

[lament tendon]

People send like 1 message per week in those, lel.

[sturdy sequoia]

so quiet

[sinful moon]

and all the better for it lol

[willow delta]

lmaoo

[loud marlin]

ello eliz

[willow delta]

guys

why dont thm do giveaways for prem

i want it sooo badd bruh

[lament tendon]

They do sometimes.

[warm basin]

dont study how to hack for certs. study how to hack certs

[willow delta]

never seen one since i joined lol

[lofty pawn]

lol

[sturdy sequoia]

theyre a business trying to make money

[dark wolf]

how long ago did you join?

they just did a contest to get gold tickets

and a prem sub was a prize

[willow delta]

yh i saw that

i got like

[dark wolf]

see, they do giveaways

[lament tendon]

I mean you joined the server 6 days ago. Dunno how long you've been on THM for.

[willow delta]

extra streak

[dark wolf]

they are a business, they need to pay their workers

[willow delta]

freezes

[dark wolf]

so their families can eat

[hardy hazel]

btw i have question about im newly start to learing soc analysts, do u have any idea how much time i need to starting junior or smthng like that

[willow delta]

like 2 month

got 68 days streak

[serene hedge]

Is something wrong with TryHackMe’s servers? It’s so slow right now. VMs aren’t loading fullscreen mode and takes forever to process a response in rooms. Sometimes saying an unknown error occured. I tested my internet speed and download/upload came out very fast so not something on my end

[hardy hazel]

im sys admin and it specialist normaly

[lament tendon]

Alright, then no wonder. They do like 1 or two events with prices a year, if even.

[willow delta]

damn

im waiting for the advent of cyber tbh

is it on 1 dec?

[dark wolf]

Hard to tell, if you want to troubleshoot it, clear your cookies and cache and/or try in private mode in the browser.

[sinful moon]

If that's already what you do for a living, it won't take long at all to pivot

[dark wolf]

Try a different browser and/or restart yoru coputer

[hardy hazel]

im newly move another country and i have fresh start

[willow delta]

guys is it bad that i completed like 200 rooms in 2 months? 💀

[hardy hazel]

that reason i wanna learn soc analysts

[sturdy sequoia]

bad?

[sinful moon]

Totally fair, just yeah tons of rooms on THM for this topic

[serene hedge]

Definitely doesn’t seem to be on y end. Everything works well except tryhackme so wanted to see if someone experienced the same

[willow delta]

idk is it?

[hardy hazel]

im little bit tired sys admin

[blazing granite]

https://tenor.com/view/it-problem-phone-call-have-you-tried-turning-it-off-and-on-again-gif-17823069

[sturdy sequoia]

how would it be bad?

[willow delta]

like if im doing them to fast or some shit idk man

it feels that i am doing too many rooms like in a short period

[lament tendon]

Are you taking proper notes and do you remember the stuff you learned about?

[willow delta]

yh ofc

[lament tendon]

Then no, it is not too fast.

[willow delta]

alr bro

[dark wolf]

Once you progress more it will get harder

[willow delta]

yhh true its getting harder for me

im like doing 10-20 events per day

before

i did like 100 each day 💀

but im trying to do hard ctf

[silver hornet]

[sinful moon]

and retaining that info...?

[dark wolf]

Yeah, keep it up!!

[willow delta]

i mean meduim

[willow delta]

what bro

[sturdy sequoia]

100 in a day? they must have been really short

[willow delta]

yhh thats when i started

[sinful moon]

aka did you actually learn and potentially take notes on such?

[willow delta]

i just did easy walkthrough and ctfs

but now these hard and meduims got short answers

not that many as walkthought

you know cuz they do not tell you exactly what you should do like a beg

[sinful moon]

It's just not a race, this is supposed to be for your learning and experience

[sturdy sequoia]

how did you do 100 in a day but only 200 in 2 months?

[willow delta]

bro not rooms

i said events

[dark wolf]

yup, makes you learn more .. once you have a foundation, you can start figuring out what you need to do by trial and error

[willow delta]

mb

i meant

questions

[sturdy sequoia]

whats an event?

[hardy hazel]

@sinful moon do u have any advice for me? like which rooms i need to do next after pre-security

[willow delta]

i though they were called evnts

lol

[sturdy sequoia]

oh

[dark wolf]

a question

[willow delta]

yh

[long lotus]

hi guys

i finished my web site

[sinful moon]

I mean there's a big pretty roadmap at https://tryhackme.com/hacktivities which spells it out

[willow delta]

nice

[willow delta]

bro i wish i could complete them all

or made them for free users at least

[lofty pawn]

This isn't about speedrunning courses, this is about learning.

[blazing granite]

it doesn't like it, it's just the game of numbers, just throw spaghetti on the wall something will stick 😛

[dark wolf]

yes, education cost money and this site is super cheap

[willow delta]

yhh true

learned a lot in thm tbh

[dark wolf]

you must sacrifice in life to achieve ultimate riches

so mow some cars or wash some lawns maybe?

[willow delta]

guys

[long lotus]

Could you guys rate my website?

[willow delta]

in bug bountry

[hardy hazel]

alright thank u very much for helping

[twin ridge]

Gave +1 Rep to @sinful moon (current: #35 - 323)

[willow delta]

if u find a bug

do you have to report it

and like

[dark wolf]

I don't think they allow that here

[willow delta]

report how to fix it too?

[blazing granite]

https://tenor.com/view/lawn-mower-fast-honda-fun-riding-gif-22519899

[willow delta]

or just report the bug

[long lotus]

https://guilhermemontoya.pro/

[thin mantle]

hi

[lament tendon]

I love clicking on links to random websites.

[long lotus]

[lofty pawn]

Same here.

[willow delta]

bruh its not even in english

[sinful moon]

......you report the vulnerability with very detailed information of how it was achieved. I think you need to learn about how bug bounties work before considering such

[long lotus]

yeah...

you need to translate

on browser

[willow delta]

yh yh i know bro im just learning right now

[modern fox]

gato

[blazing granite]

I thought it was horse not cat 🤣

[sinful moon]

horse did say cat though

[blazing granite]

el caballo dijo gato 🤣

[lament tendon]

IDK, your CTF thingy seems a little easy.

You should try to obfuscate the Javascript that is used to check it or do the check server side.

[lofty pawn]

What if the horse identifies as a cat?

[sinful moon]

alright I'm too exhasted from brainrot side of discord lol

[long lotus]

LOOL

nice dude

[lofty pawn]

sorry lmao

[long lotus]

xD

[sinful moon]

You're fine just long day

[lofty pawn]

Do you prefer vim or nano?

[sinful moon]

vim for the last 18+ years

[lofty pawn]

How do you even manage lmao

[sturdy sequoia]

nano. but thats just out of habit rather than anything else

[sinful moon]

I learned

[dark wolf]

I love VIM

[blazing granite]

vim FTW!!!! 🙂

[sinful moon]

just been on Linux for as long as vim, and zsh, and more

[lofty pawn]

lmao https://stackoverflow.com/questions/11828270/how-do-i-exit-vim

[dark wolf]

LOL

[sand trench]

just start vim in easy mode

[blazing granite]

I didn't have much of a choice back then, and once you get used to it that's it

[sinful moon]

plus yeah vim keybinds are eveywhere in the terminal realistically

[lament tendon]

I believe in Neovim superiority.

[sinful moon]

how do you move around or search in journalctl, yeah just vim keybinds

obvs I use neovim but mhmm

[lament tendon]

I mean it is just good.

[sinful moon]

I'm just oldschool enough that I need a alias vim="nvim" in my `~./zshrc' lol

[lament tendon]

And every not good keybind can just be rebound anyways.

[lament tendon]

Based.

Even do that for vi.

[sinful moon]

vi should just already be a symbolic link for such, but it shouldn't matter too much if you set your $EDITOR

[blazing granite]

I remember vi 🙂

[lament tendon]

Man, I still work on systems where there only is vi.

[lofty pawn]

What distro do you all use for your production systems? Been using Debian 12 lately. Ubuntu 22.04 has too much bloat imo.

[lament tendon]

Kinda funky when not even backspace works as you'd expect it to.

[sinful moon]

Ubuntu Server for prod, I can't trust that the people who come after me will know a single thing about Linux

[lofty pawn]

I tried using Windows Server. Never again.

[sinful moon]

Which is why I also have very detailed documentation internally lol

[lofty pawn]

Linux is the way.

[lament tendon]

My server runs Ubuntu as well.

[sinful moon]

to be clear prod should mean at work and not just your homelab lol

[lament tendon]

Work is different, no prod stuff there. We do pentesting and are allowed to run whatever we want as long as we get the job done.

[sinful moon]

my homelab server is on Proxmox

[lament tendon]

I just have a VPS with docker on it.

Because cheap.

[lofty pawn]

Hetzner? OVH?

[lament tendon]

Currently unable to run a server from home, but I will set one up as soon as I can.

Hetzner.

[lofty pawn]

Good stuff.

[sinful moon]

I do similar for my personal pentesting server yee

and heck some prod stuff at work lol

[lament tendon]

A homeserver is more convenient then a VPS to be honest, just because all my services need client side encryption or I cannot use them.

Which means I need to skip on a lot of cool stuff I'd like to have.

[sharp veldt]

Update. I have the password and Apple ID for my laptop but it’s asking me to reset the number using a device that was stolen 😭

[lament tendon]

Anyways, it's late and I gotta get to work tomorrow.

[sinful moon]

But VPS has complete isolation from your internal personal services and etc, so why not both lol

okie, see ya bit

[lament tendon]

Watcha mean by complete isolation?

If Hetzner wants my files, they get my files.

[sinful moon]

aka you're not worrying about VLANs and etc if you're deploing anything sensitive a VPS. It has nothing to do with your home network and etc as deploying in your homelab virtual host may

[lofty pawn]

Ttyl

[lament tendon]

Oh, no no, that's all good. xD

That part is covered by Hetzner and their firewall.

[sinful moon]

Indeed but anyways I'll let you head to bed lol

[lament tendon]

But I am using it to sync contacts and my calendars and todos and whatnot, so I want to keep stuff private.

[sinful moon]

uhoh

[lofty pawn]

They also allow bridging through multiple VMs so they can connect to each other.

vSwitch.

[lament tendon]

Uh oh?

[sinful moon]

Maybe I misunderstood if your VPS isn't used for pentesting at all but still

[lament tendon]

It's not, no.

[sinful moon]

alright bit better

[lament tendon]

For work we got different solutions that I will not disclose.

My VPS just hosts a couple services I use in my personal daily life.

Having your own cloud is quite convenient.

[sinful moon]

mhmm

for personal yeah I have my homelab server doing tons and yeah an entirely pentesting focused VPS that I use with THM/HTB and more

[lament tendon]

That's kinda wild.

What stuff do you run on there for THM/HTB?

[sinful moon]

Literally everything?

[lament tendon]

I usually just abuse the AttackBoxes as cloud machines when I need one on the fly.

[sinful moon]

oh, i mean just typical tooling and etc, I just have headless Arch with the packages I need

[sand trench]

meep moops it is the time for sleep sloops to the beep boops

[lament tendon]

Makes sense.

[willow delta]

yoo this lab is gltiched i think

[lament tendon]

Mostly use VMs for CTFs and the sort.

[sinful moon]

Only time in my life I have ever considered Arch for a server because big lol to that, but has all the infosec tooling I need and it's not like production critical, it's just a tool I use

[lament tendon]

Currently in the process of setting up a Nix config for my offensive machines as well, so they will be identical no matter what system I use them on.

[sinful moon]

good luck I have opinions on Nix, but I'm happy that everyone can use whatever distro is most suited to them

[lament tendon]

I am interested in your opinions.

[lofty pawn]

i use arch btw

[lament tendon]

Only recently started working with it, and so far it seems very cool.

[lament tendon]

I think all of us do.

[sinful moon]

To be fair my opinons were not informed that Nix can even do preset package config overlays like you described

[lofty pawn]

It's a phrase.

[sinful moon]

but hashed based unique file paths to every app and needing to customize every script for your distro are not the ost fun

[lofty pawn]

A lot of people say it to "flex on people" like it's a big deal

[strong fjord]

Is it just me or thm is trippin

[sinful moon]

It's a dumb meme, let it die

[lament tendon]

Nix can do a whole bunch of cool stuff.
Like you can set it up on Arch or something, and then have a dedicated workspace in some folder that Nix automatically configures and un-configures simply by you cd-ing into that directory.

And with flakes, you just get stable software deployment alongside whatever distro you use normally, which is also pretty neat.

[sinful moon]

If I wanted to flex I'd just say I've been Arch main since 2008 and that much is not a lie, but I also will not recommend it to others unless they actually think it sounds appealing. I only know it's perfect for me

[lament tendon]

But to be honest, I am currently writing a config to switch my entire system to NixOS, so I would wonder what you think about it and what issues you have had.

[blazing granite]

I don't 🤣

[lament tendon]

https://tenor.com/view/lenny-confetti-hired-kitten-stare-kitting-looking-kitty-cool-kitty-gif-9918300050481591273

[chrome condor]

for the people that are currently working either in red teaming or pentesting anything offensive in general , i got some questions for a product research am doing :
1-is the market really big or is it that only big tech companies invest in it ,
2- if u deploy a product for the sake of pentesting and red teaming how u deal with regulations and how to avoid the clients that might use it in a harmful way
3-do u think that the different products in the field lack a more good ui/ux experience or that u dont care bout it

[sinful moon]

Nah it sounds like you are more informed than I am Bit, so go for it. The issues I had were a bit more fundimental/low level

[lofty pawn]

I wanna build Arch from the bottom just for the learning experience.

[whole yew]

https://tenor.com/view/cat-puke-rudy-cat-cat-gagging-cat-meme-gif-18354011395109234480

[loud marlin]

yes you can
https://wiki.archlinux.org/title/Archiso

[blazing granite]

If I want to flex I'd mention I've used Linux since 1993 😉 🤣

[sinful moon]

...that is literaly how Arch is is installed, yes.

[lofty pawn]

I know lol

[sinful moon]

alex I think you misunderstand

[lament tendon]

We made the mistake of mentioning a Linux distribution, now watch the chat disolve into chaos.

[loud marlin]

arch have tool for it to make like iso based on own apps and things what you have

[whole yew]

I had a copy of RHL that came on floppy disk.... Pretty sure it was RHL1.0. If only I could find it......

[loud marlin]

i did ?

[lament tendon]

Check this out: https://www.linuxfromscratch.org/

[sinful moon]

They just want to install Arch up from minimal enviroment, which is liteally how it always works, not customize an ISO with a preset config

[whole yew]

if you really want the full 'i built all my own modules' you can roll with gentoo or LFS

[loud marlin]

oooh... then just offical arch and go for it

[sinful moon]

Yeah everyone with decent Linux experience should LFS at least once

[whole yew]

arch does have an installer now, it kind of 'cheats' the full arch experience we all know and struggled with

[sinful moon]

it's not recommended, and it's there just for people to script

[sturdy sequoia]

If you want to make an apple pie from scratch you must first invent the universe

[sinful moon]

peoplel misunderstand it

[blazing granite]

I used rh back in the day also, SCO, Solaris, FreeBSD that brings me back 🙂

[lofty pawn]

Exactly, which is the reason I want to install from the bottom.

[sinful moon]

mhmm just literally follow the Installation Guide on the Wiki and that is the experience

[sturdy sequoia]

Was fedora before or after red hat?

[lament tendon]

Anyhow, 1 AM. I will take my leave.

[sinful moon]

after

[lofty pawn]

Same here.

[lament tendon]

Nice talking to everyone, see you guys around.

[whole yew]

i would suggest you don't do that on a bare metal system you actually need to have usable. The experienec is pretty much the same doing it from a vm

[whole yew]

Parallel. Red Hat owns Fedora, as much as anything can own a FOSS product

[sinful moon]

I mean... but sure if it's your first time why not

[strong fjord]

Is thm down for you? It's down for me

[gusty inlet]

Is the website insanely slow for other people too?

[lofty pawn]

Yeah I'd just get a VPS from Hetzner

[strong fjord]

Yeah

[sturdy sequoia]

Yer a few people have complained here

[lofty pawn]

Probably AWS shitting it's pants again

[blazing granite]

after, if I'm not mistaken first release was back in 2003

[gusty inlet]

I heard there's a DNS problem on Azure and AWS but that's it.

[blazing granite]

nowadays is upstream of redhat

[strong fjord]

https://tenor.com/view/aww-hell-nahh-aww-hell-aww-hell-nahh-gif-9659330954843262630

[lofty pawn]

Majority of the Internet is powered by Azure and AWS

yikes

[strong fjord]

I need to finish cybersec 101

Before my sub renews

[loud marlin]

https://www.youtube.com/watch?v=YC7NMbl4goo is waht i liked

[lofty pawn]

cybersec 404

not found

heh...

[strong fjord]

I was gonna say 500+

[blazing granite]

If you hate yourself just install linux from scratch 🤣

[sinful moon]

Please don't recommend inferior random easily outdated guides when we literally have the Arch Wiki...

unless I misunderstand, just good thing to mention

[lofty pawn]

I trust the Arch Wiki more than a random YouTube video

[loud marlin]

is less than y cca

arch btw

[sinful moon]

nice cava config

[loud marlin]

i still didin't make it as wish =/

[lofty pawn]

wheres neofetch

[loud marlin]

fastfetch ftw

[sinful moon]

yeah lol

[lofty pawn]

what's the difference

[blazing granite]

you never do 🤣

[loud marlin]

neo = out of service

[sinful moon]

neofetch is depreciated and fastfestch has been decided by the community to the the successor

[loud marlin]

listen here you little shit... arch job is newer done ❤️

[sinful moon]

You're just seeing alex's highly customized fastfetch

[sinful moon]

by default it just looks like NeoFetch but with more info

[blazing granite]

my point exactly, change it every 2 minutes and never happy 😉 😛 🤣

[sinful moon]

Nah for me it's mostly set it and forget it once things are configured

but fair I've been doing this for nearly 20 years lol

[lofty pawn]

Let me guess. You're using PuTTY?

[blazing granite]

indeed, I got the way I liked it and stuck with that 🙂

[sinful moon]

....who?

[lofty pawn]

You.

[sinful moon]

To do what? And not really?

[blazing granite]

the only putty I know is the one that little kids use 😛

[lofty pawn]

Was more of a response to this.

[sinful moon]

If you mean to communicate with my VPS, no I need much more than PuTTY can provide, I don't think it does SSH tunneling and more

[sinful moon]

No that was in reference to my use of Arch Linux as my main distro

[coarse fog]

I have to install it for an assignment in one of my classes.

[lofty pawn]

I've been using Termius lately

I love it

[sinful moon]

...your class told you to install Arch on a server?!?

[coarse fog]

Oh no, not a server, but my personal machine.

[sinful moon]

Alacritty is my terminal of choice

Fair enough

[coarse fog]

From what I've heard, the installation process for Arch is super tedious.

[lofty pawn]

Good luck soldier

[sinful moon]

Potentially but you're forced to learn how Linux actually works to proceed

instead of just like "lol installer did it, now idk how to fix"

Learning how Linux works and all the component fit together should be of extreme interest to someone before they even consider using Arch imho

[blazing granite]

linux from scratch or gentoo before arch 🤣

[sinful moon]

Nah Arch is siginificantly esier to get into and introduce these concepts than either. From there sure I would say it's LFS or Gentoo time but only (imho) for learning. But there's some who stick with Gentoo and want to compile absolutely everything under the sun and more power to them I guess

[coarse fog]

I mean, I know a little bit. I know some commands, how to navigate through the file system, just the basics.

[sinful moon]

Well again I won't recommend Arch to you unless you think that sounds perfect, building a base config (that you set up even) up to a usable environment.

I try not to recommend distros to anyone these days tbh, I'm just too far away from that perspective anymore

[blazing granite]

I know 🙂 I used gentoo for a few months a long time ago, then I decided I wanted to have a life too 🤣

[sinful moon]

haha totally fair

[gusty inlet]

Damn the website is REALLY slow...

I wanna have fun with AD...

[sinful moon]

That's why you should have a home AD lab already c:

[gusty inlet]

https://tenor.com/view/gohine-hohino-no-hohineee-gohineee-gif-17792172174678204487

[sinful moon]

in it's own cute little VLAN doing it's thing

[blazing granite]

a few people complain about that earlier

[sinful moon]

Dkob is too afraid of actually administrating said AD domain 😉

[blazing granite]

can be a pain

[sinful moon]

It's orderds of magnitude easier and more intuitive than freaking Azure/Entra ID/Intune crap though lol

AD and GPO just werk, you own them and they're easy

[blazing granite]

I haven't done anything with azure, just a bit of aws

[sinful moon]

Azure/Entra/Intune, whoops you're missing the licenses needed to rent this feature, whoops gotta relean everything you know because we reinvented the wheel, also sorry we renamed and redesigned that feature two weeks ago

Count yourself lucky then

[blazing granite]

sounds a lot like microsoft, why I'm not surprise 🤣

[sinful moon]

mhmm

[blazing granite]

I have the gin and tonic, I guess I'll do some CCNA study, tv show and sleep so see you 🙂

Masterchef Israel 🙂

[molten wyvern]

Just Fresh installed my system and going for a newish look

[sinful moon]

it's certainly a look. Hope you have an OLED screen for that since yeah it does look nice with such. But I presume you cropped out your panel and such unless you went ultra-minimalist

[molten wyvern]

i got rid of the panel

[rose creek]

how does one learn opsec??

[oblique loom]

By doing it

[thorn tusk]

Hey THM Staff -

Are the pentesters and security professionals who are testing your AI Pentesting Agent going to be compensated for their time? Or are you expecting them to volunteer to help build this separate start-up?
#announcements message

[gusty inlet]

This is a huge question TBH, I learned OPSEC through my CRTO but it depends I'd say... the OPSEC for a red team engagement would be very different from the type of OPSEC you'd need for a pentest.

[oblique loom]

In my exp, all the DAs will say this and that. But only you can learn what's true if you put the effort into it

[gusty inlet]

Doubt you'll get an answer in here. Do you have access to #lounge ?

[oblique loom]

And dont let the gatekeepers put you down

[lavish maple]

hey bro I am new too

I am nigerian, let's connect please.

[thorn tusk]

No. I was removed from other channels because apparently "Hack Smarter" - my 1-person course platform - is a "competitor" to THM according to Skidy 🙃

[oblique loom]

O wow....

[gusty inlet]

Hm ok. I'll ask internally and get an answer to the people that asked. How would you like for me to reach out to you for the answer?

[oblique loom]

Part of me isnt surprised

[thorn tusk]

Anything works! You can tag me, DM me, or just shoot me an email - [e-mail]

[oblique loom]

Everyone wanna gatekeep these days smh

[gusty inlet]

Alright will do.

[thorn tusk]

Really appreciate the quick response!

[oblique loom]

"competitor" lol

[sinful moon]

Interesting I don't have access either with advanced servers channels and such, but I won't question it

[thorn tusk]

My thoughts exactly lol but it's all good

[languid flint]

can I post something to ask if these questions relate to Cyber/Info Sec?

[gusty inlet]

Do you have content for Red Team operations?

(Anything that's CRTO level + ?)

[oblique loom]

Its the gatekeeping that urks me

Ive seen that so much in IT

All IT fields

[thorn tusk]

Okay so I know you're not trying to trap me lol but I don't want to break any rules by advertising other content. Yes, I have a video course with labs on Sliver C2 - covering pentesting as well as EV Evasion. The final capstone requires fully evading defender for a stable Sliver session (and doing some post-exploitation).

I'm not sure if it's great prep for the CRTO though; but it's good prep for something like the OSEP on evasion

[gusty inlet]

I already have the CRTO, I'm just looking for something more.

[thorn tusk]

Ah yeah, I don't think it would be a good fit for you (you'd be beyond it). This is a review from someone with the CAPE, CWEE, and OSEP -

[gusty inlet]

I was thinking pro labs from HTB, but apparently these are shared machines so not private.

[thorn tusk]

We are releasing ranges very soon (7 - 10 machines), and each one will be a fully private instance as long as I don't go broke 😂

[rapid merlin]

@thorn tusk wow 🤯 it's really u

[gusty inlet]

Is it unlimited launches? If so I'd reconsider.

Had a chat with rastamouse (ZeroPoint Security)
Dude almost went broke due to it.

[thorn tusk]

I've always been a big fan of THM. I think I've made hundreds of videos promoting them for free (and some of the official challenge machines - including Sliver Platter which I think is part of the official PT1 prep). I was really disappointed when THM leadership saw my platform as a competitor. I'm also not being invited to participate in Advent of Cyber this year either (apparently)

[thorn tusk]

Sort of - but it's not unlimted for the student. I set the amount of time they get (and then they can purchase more lab time at cost if they want)

[sinful moon]

Yeah all the wishes for luck, never seen your videos nor heard of you, but it's nice people coming out with more content like this

[oblique loom]

Fuck the gatekeeping tbh

[thorn tusk]

It is!

[oblique loom]

People wanna getkeep

its annoying

[rapid merlin]

Big fan

🫡

[thorn tusk]

Thank you, I appreciate it!!

[twin ridge]

Gave +1 Rep to @frozen hull (current: #269 - 35)

[rapid merlin]

They r scared of u

[oblique loom]

You do you and dont any asshole tell you otherwise

[sinful moon]

Try getting into smaller orgs, it's a blast 🙃

[thorn tusk]

I think it's just one person at the top 😄 - I'm still friends with many of the THM people and they are all amazing

[rapid merlin]

Can I give u friend request 🥺

Please

[languid flint]

I received some questions regarding something If i post to see if they are related to cyber security would that breach a server rule?

[sinful moon]

In that there's no gatekeeping, you're instead found to possess all the skills you reasonably have and whoops now you have 12 job titles lol

[thorn tusk]

Sure but I'll be honest, I get way too many messages on Discord + LinkedIn. Best way to get a hold of me is email. I do my best to read and respond to each email - [e-mail]

[rapid merlin]

Got it sir, thanks

[twin ridge]

Gave +1 Rep to @thorn tusk (current: #111 - 84)

[halcyon comet]

nice to meet you I heard you pen testing on NetworkChuck websites and its crazy caido its interesting.
I tried to use caido and wow its like better then burpsuite.

[sturdy sequoia]

this is general chat. you can ask anything as long as it doesnt break the rules

[thorn tusk]

Nice to meet you as well! Chuck is a genuinely nice person. I hung out with him quite a bit at Defcon this year!

[sinful moon]

Someday I'll finally get to go to defcon lol. Just sure not at this current job

[halcyon comet]

yeah he love coffee and he is coffee guy

[thorn tusk]

It's not worth it TBH. I'd recommend Wild West Hacking Fest instead in Deadwood, SD. It's sort of like Defcon, but much smaller and no lines. I still go to Defcon each year; but if cost is a factor I'd skip defcon and do WWHF

[gusty inlet]

@thorn tusk I saw the course content, do you mainly focus on Defender or do you also go more into the other Windows mechanisms?
(MDE, AMSI, etc...)

[sinful moon]

my close friend and peer was like of course our org payed everything... riparoonie

[gusty inlet]

I'm struggling to find a course on solely windows and its internals.

[sinful moon]

Totally fair, I've just never gotten to attend an infosec con in general and yeah it would be useful, for learning and networking and more

[thorn tusk]

It is primarly defender with a nim stager to teach how to use a stager to bypass Defender (and some basic EDRs)

[languid flint]

I got a practice assessment question for an internship but I feel like it does not correlate for cybersecurity at all. Like it asks me to code. This is a siimilar question I made from what I was asked= INTEGER func(INTEGER a, INTEGER b) {
if (b == 0)
return 1;
INTEGER temp = func(a, b / 2);
if (b % 2 != 0)
return temp * temp * a;
else
return temp * temp;
}
Pick ONE option:

125

27

243

210

DO NOT ANSWER JUST tell me if this has anything to do with cyber security

[thorn tusk]

It's not "strictly" cyber... but cybersecurity is an advanced field and require at least basic knowledge of programming/scripting - which I'm guessing is what they are aiming for here

[halcyon comet]

Honestly you should collab with Scammer Payback and the rest like John hammond, Ryan - 0Day, Nanobaiter are doing like anti scam call center and start having fun with the scammers.

[bleak quartz]

It's the guy behind the awesome courses!

I enjoyed the Sliver one a lot

[gusty inlet]

If you ever launch a course solely on evasion + windows internals (Maybe just the basics - but most importantly Evasion) drop me a ping or DM. I'll gladly purchase and test it out. I usually also review lots of them - especially certs. (Currently I hold 7)

I also write review on https://dragkob.com and my PT1 review currently holds over 10K individual views.
So if you ever launch a course on evasion from the literal basics to advanced, I'm willing to being the first to purchase and review. Drop me a ping whenever.

[thorn tusk]

I actually had the opportunity to be on the Red Team Village Keynote at Defcon with 0day and Nahamsec. Learning their anti-scam stuff would be fun!

[thorn tusk]

yooo awesome, glad you enjoyed it!

[languid flint]

As someone who started tryhackme about a month ago and knows nothing and needs internship what would you recommend for me to learn regrading blue team?

[halcyon comet]

Yeah nice

[thorn tusk]

This is awesome! I'll check this out right now and we'll stay in touch. Would you ever make your own course or labs (if you don't already?)

[gusty inlet]

I have access to so much courses from my certs that maybe I could, but I honestly don't think I'd have the time.

[thorn tusk]

Honestly I'd strongly suggest to begin with the basics. Getting the Comptia Trifeca (A+, Network+, Security+) will give you very good fundamentals and looks great on a resume

[gusty inlet]

I'd gladly make one on offensive phishing though.

[thorn tusk]

Well if you ever want to create a lab, and do not want to wait the 1+ year waiting period of THM, reach out 😄

[sinful moon]

Evil.... nevermind I won't mention the full name just in case, room when? lol

[languid flint]

Would you still recommend me going for an internship? Im bout to graduate 2027.

[halcyon comet]

or like if you doing coursea and they have a lab or it will tell you how to create your own lab like on linux to have fun

[gusty inlet]

Honestly go for internships. Unfortunately I had to give up on my dream of being a red team operator just because I chose the wrong internships.

Pick wisely.

I'm now stuck in blue team.

BUT if you get the chance, the same company could also take you full time.

[sinful moon]

I doubt it's that all or nothing, but that's fair

[gusty inlet]

I had 2 blue team internships, so all my opportunities were for blue team roles. I'm now 2 years in and I still regret it.

[thorn tusk]

Wait.... why does that require you giving up the dream of being on the red team (esp. with your certs)? Job market sort of sucks right now but you would do a great job I'm sure

[gusty inlet]

As you said job market sucks, especially in France or Europe in general.

[sinful moon]

Honestly though, I have major concerns about folks who go straight into infosec out of college. Where's your help desk and grounding experience for end user expectations and working with teams

[languid flint]

sounds good. I am planning to initially become a security analyst and slowly merge into security engineer

[thorn tusk]

Ah - yeah I'm in the US. I'm not sure what offensive security roles are like over there

[gusty inlet]

No one's willing to give a chance. People with OSCP are not even getting interviews for junior pentest positions in my country.

[thorn tusk]

So what I recommend is OSCP + CVE(s) - and that tends to help you stand out. Have you looked into doing CVE hunting? It's actually way easier than I expected

[dark wolf]

Same with the US

[gusty inlet]

I already have a CVE coming soon hopefully.

It's underway.

[thorn tusk]

My Sliver Platter room on THM is based on 8 CVEs I found over a 2 week period of being bored 😄

[thorn tusk]

Nice!! That's awesome

[dark wolf]

Nice, please say its not citrix lol

[gusty inlet]

NO not citrix LMAO, but here's a sneak peak...
https://github.com/Dragkob/PwnAndGo

Created yesterday, everything is still not published until I get my CVE and it's patched.

[sinful moon]

You all should do more poking at access control infra because holy crap it's everywhere and not well maintained

[languid flint]

also I am not finished with pre security pathway yet but any practices or projects I should slowly start because I feel like just reading and taking notes is not helping me

[sinful moon]

And at worst... exposed to the internet 🙃

[gusty inlet]

Yes, I work in IAM and some of the solutions have so many vulns...

[sinful moon]

Haha totally fair

[gusty inlet]

The CVE I found is a Windows Signin bypass

[dark wolf]

try some easy ctf's to change and mix it up

put into practice what you are reading and learning in one way or another

[thorn tusk]

Alright all, I'm jumping off for the night but it was fun chatting! When THM announces Advent of Cyber, make sure you all ask where Papa Shell is this year

[sinful moon]

Good luck with the Microsoft "boss" (unless this is third party sign-in related)

inb4 Won't Fix kinda issue :c

[dark wolf]

Aren't passkeys awesome

[rapid merlin]

damn

[gusty inlet]

I'll head off too, long day ahead tomorrow. Good night!

[dark wolf]

night dkob

[sinful moon]

G'night both

[rapid merlin]

General nappy time

🫡

[sinful moon]

If this is serious (and I doubt it) you just screwed over yourself and the vendor by not disclosing this properly.

[bleak quartz]

Dunno if this is true but don't post the details

[halcyon comet]

oh.

[bleak quartz]

We had the same thing in mind

Funny

[sinful moon]

mhmm lol

[austere verge]

Meow

[sinful moon]

you can like... redact that if this isn't a joke lol, just by deleting your message, but it is now out there in some capacity

[bleak quartz]

It is

[halcyon comet]

screwed?

[bleak quartz]

Discord scrapers...

[sinful moon]

mhmm

[halcyon comet]

its from the website called hackerone you should try it.

[bleak quartz]

You just shared a vuln or possibly

What stops me from abusing it?

Exactly.

Just don't do this in the future. Keep it private

[sinful moon]

we're aware of HackerOne, but I think you may have some misconceptions in how bug bounty is supposed to work

[hazy flame]

[bleak quartz]

Nuke that idea

[dark wolf]

yes

[halcyon comet]

i know follow the scopes and rules that you can do and cant do.

[sinful moon]

Yet you broke one of the most fundamental rules about disclosure of your research

[bleak quartz]

You can't post details of what u found like this

U can post a blog or so after and still depends on their rules and policy

But AFTER it's patched

[halcyon comet]

ok but i cant post it on bug bounty or no?

[bleak quartz]

Otherwise it could be abused

[hazy flame]

Make a website to teach a skill–then create a machine to make said skill near obsolete. smh

[halcyon comet]

it should be patched its like old.

[sinful moon]

People only post about these things after they've been responsably disclosed

and patched, and etc

[stoic flame]

What's all the fuss about guys?

[bright stone]

I wonder did anyone submitted an eligible bug bounty rapport and got paid?

[dawn wren]

THM has everything i need so many snake oil hackers out there come up with these bland memberships and platforms that dont have much to offer compared to THM let alone HTB.

[stoic flame]

That's true

[dawn wren]

I've been in this game for 5 years and THM and HTB by far best any sort of competition out there on Udemy or anything else. No bootcamp can get you ready for the real world believe me I made that mistake. Cybersecurity takes years to master its a lifelong journey there is no way to learn and do it all. As long as you stay consistent and updated with THM your good. There is no reason to jump around here or there.

[stoic flame]

I've seen many cybersecurity courses but none of them are like THM or HTB

[merry umbra]

Yoyo guys

Is this a good plan

I already completed TryHackMe presecurity, and i have noted it all down but ofc if you have any recommendations for videos to add to my brain please feel free to, and then I will fo the cybersecurity 101 and watch videos and stuff and continue the THM roadmap and im gonna start watching Professor Messer from the start to end ofc and note it all down

[merry umbra]

How would you approach the rooms tho

Like notes aswell?

[stoic flame]

There is no point in taking notes if you are not using those

[merry umbra]

I know but sometimes I forget lessons

😭

[marsh lark]

so, make them useable

simple

[merry umbra]

💀

[stoic flame]

Then use them until they become part of your brain

[merry umbra]

Yea true

Should I just purely follow THM?

Like im new, just completed thm

Shall I just follow thm? And forget everything else

Atm

[marsh lark]

uh no

u should take notes

u wont remember everything u learn

[stoic flame]

You can try HTB or other if you want to

[merry umbra]

As a beginner?

[marsh lark]

start with THM for now

[merry umbra]

Sounds good

I wish like i had someone who was in the same shoes as me and we could discuss what we learn and shi

💀

[stoic flame]

There are lots of people here, hope you will find one

[merry umbra]

Ty dawg

[dawn wren]

I take my time and if I am stuck I'll use the echo to guide me or my other Ai assistant to help me solve challenges.

[merry umbra]

Do you go back to rooms ?

[dawn wren]

If it's a vulnerability I want to master or learn more about yes. Other than that I keep moving.

[merry umbra]

I see, how did you start cybersecurity from the start?

[gritty fern]

You should always take notes on anything new. It is extremely helpful later on

[merry umbra]

I use obsidian for my notes

Brief notes

[gritty fern]

Good choice, I personally just use docs but its all opinion

[marsh lark]

me too 🙂

[merry umbra]

I see, could I ask if you could start from scratch 0 cybersec knowledge, how would you do it?

[merry umbra]

We just built different

🧠

[stoic flame]

Everyone here is an abnormal person

[gritty fern]

use tryhackme for the basics, learn C, C++ and asm. network a LOT

[merry umbra]

Oh why those two specific languages?

Is python fine ?

Since im learning this

[gritty fern]

Python isnt bad at all. I hate python though

[marsh lark]

python for scripting

[gritty fern]

C and C++ are great to know since you get to understand a computer better and also knowing C is great for analyzing decompiled binaries. ASM for the ability to reverse engineer

I also just believe in C/C++ superiority

[stoic flame]

Also most of the malware is written in C

[sturdy sequoia]

yer it depends on your goals

[gritty fern]

Oh and C++ is the best interpreted language anyway

[sturdy sequoia]

theres so much to learn it can be overwhelming

[stoic flame]

Recently I encountered a malware attack

[rapid merlin]

What did it do

[stoic flame]

Call forwarding and take control over the user messenger and spread the malware through messages

[dawn wren]

It's a very long story.

[rapid merlin]

I see

Just like Herodotus

[dark wolf]

[dawn wren]

I will never go back to other platforms ever again THM this is it for the rest of my life when it comes to cybersecurity. The only other is HTB and I'm sorry their prices are REDICULOUS. Other platforms dont have have the resources not even portswigger academy pretty bland IMO.

[rapid merlin]

https://tenor.com/view/rules-reeves-excommunicado-john-wick-gif-19346376

@stoic flame don't send friend request without permission

[stoic flame]

Ok

[dark wolf]

Plot twist, we ARE the animals

[rapid merlin]

Bro has a point

Some humans r below animals

[marsh lark]

the only good price on HTB: student plan

[dark wolf]

Friend don't let friends split the earth in half with a toothpick

[marsh lark]

-# which I can have

[dawn wren]

HTB's prices for a membership are ridiculous. THM is a cheaper alternative and they are constantly updating, and creating new challenges and so on THIS IS IT. I mean seriously what more can anyone want ?

[rapid merlin]

Have u tried some challenges in HTB?

[dawn wren]

Yeah i did and I see no difference your not going to convince me otherwise THM IMO is superior in terms of quality, and content.

[rapid merlin]

[rapid merlin]

Njoy

[dark wolf]

You are supposed to be convincing people to use THM not HTB

Did you get your letters mixed up again?

[rapid merlin]

Y not both

[dark wolf]

[marsh lark]

I think they both do have great quality, but THM is better imo

price wise, content wise, etc.

thats why I support THM 😁

[celest dirge]

Imho, both are good in terms of content.
HTB for thinking outside the box and it's difficulty,
TryHackMe for being beginner friendly.

[sinful moon]

Mhmm THM is much better for walkthroughs, community especially and well they also have the CTFs and challenges. HTB is all the opposite, great CTFs and challenges, crappy community (few outliers though) but walkthroughs (via HTB University) need work, but do have some unique rooms.

But this is just like, my opinon, man

[marsh lark]

yup

[wicked pumice]

If i want to learn cybersecurity. In your opinion, htb is better?

[marsh lark]

for beginners, I recommend THM

[fringe nacelle]

Depends on what you want to learn for CyberSecurity, but if you have no idea nor any experience in IT, you better off with THM

[eternal plover]

Have you tried OneNote?

[topaz sedge]

For a beginner, I do recommend THM, but if you're above a beginner, I do recommend HTB even though the prices are expensive

[marsh lark]

ngl, I only use onenote for drawing

while coding

[topaz sedge]

HTB offers more difficult and more real life type pentesting scenarios

When I transitioned from THM to HTB, I had a curve ball

[fringe nacelle]

HTB season boxes are free iirc and if you can reach a certain level they'll give you a 1 month subscription

[topaz sedge]

Took me a while to adjust

[topaz sedge]

Yea

[marsh lark]

labs?

[topaz sedge]

Only retired machines require subscription

Active machines are free

[fringe nacelle]

Blind boxes idk what thm calls them

[marsh lark]

?

[topaz sedge]

Ye

HTB Labs

[marsh lark]

gotcha

[topaz sedge]

I do admit, the prices of both HTB Labs and Academy can be steep

[fringe nacelle]

We just call them boxes

[marsh lark]

except for student plan

[marsh lark]

real

[topaz sedge]

Student plan only applies to academy
Not labs

[marsh lark]

yeah

but they prepare u for labs

[topaz sedge]

Tbh I have both academy and labs subscription, I do feel it's worth it
No offence but I feel Academy's material is more detailed than THM's walkthroughs

Especially when you're studying about exploits

It's one of the most comprehensive, detailed study material I've ever seen

[marsh lark]

understandable

[topaz sedge]

But.....
As a beginner, yes THM would be more helpful

[marsh lark]

the reason I dont recommend THM to advanced users is that they will disagree since they know most of the stuff in there

[topaz sedge]

Pretty much

[marsh lark]

beginners however is the opposite story

I’d like if THM adds rooms that are VERY advanced

[topaz sedge]

Yea they should

I think they can just increase the general difficulty of all machines

[fringe nacelle]

Does THM allow the community to make the rooms?

[topaz sedge]

Yea pretty sure

[fringe nacelle]

Because HTB pays people to make boxes for their seasons

[marsh lark]

only challenge boxes rn

although it takes like 1 year to be fully verified and added to THM IF it gets accepted

[fringe nacelle]

Noted

[fringe nacelle]

God have mercy

[marsh lark]

[sinful moon]

Don't focus all your efforts on any one resource, THM is a great place to start and spend time with, but make sure to learn via all avenues avaliable, beyond just HTM and more, there's infosec news, there's vuln writups, etc etc

[topaz sedge]

HTM

Bro I don't like that my role is piss colored in this server

Why can't they make 0x9 a different shade

[fringe nacelle]

Yeah never just stick to 1 platform or source for information.

HTB, THM, Pentesterlabs, Pwnedlabs, CTFs, Cryptohack, etc

Read CVEs, blogs, free resources are everywhere

But the majority of people are lazy

[wicked pumice]

Bout to sacrifice my whole life into cybersecurity

[marsh lark]

[wicked pumice]

Thanks

[twin ridge]

Gave +1 Rep to @fringe nacelle (current: #375 - 20)

[wicked pumice]

I will finish htb then continue thm

[topaz sedge]

Good luck

Gonna be hard but it'll be worth it

[wicked pumice]

Was doing cybersecuirt junior path in htb

Finished all fundamentals so far

[topaz sedge]

That's nice

[fringe nacelle]

Cjca? Nice

[topaz sedge]

Good luck

[marsh lark]

ah for the CJCA

[wicked pumice]

Yeah

[topaz sedge]

I've completed the CWES path

I'll go for CPTS path now

[wicked pumice]

Took you how long?

[fringe nacelle]

Do you have a life homie? Holy shit

[topaz sedge]

Uhh did like one module per day

[wicked pumice]

Ooo same

Lol

[marsh lark]

I need to do CPTS for certs

[topaz sedge]

No. 🧍‍♂️

[wicked pumice]

My brain can't handle all module in one day

[topaz sedge]

Genuinely speaking, most of my hobbies I do alone, so no, not much social life overall

[fringe nacelle]

Goodluck, CPTS is definitely the hardest one out of all the beginner ones

[marsh lark]

aiming for cert CPTS and PT1

[marsh lark]

yup

[wicked pumice]

Aghhh shit

[topaz sedge]

I have bought PT1 but still haven't given it yet

[marsh lark]

ah

[topaz sedge]

I need to practice Active Directory before giving PT1

[fringe nacelle]

Shit me too, but like idk. I just finished college, I work full time so now that I'm free from going into debt I can finally grind again

[marsh lark]

oh yeah

[topaz sedge]

That's good
I'm still in college but have holiday these days, so I just stay at home doing stuff

[marsh lark]

forgot about AD

[fringe nacelle]

Going for my Net+ soon and I'll take Cwes for the fun of it. Idk if I plan to do the CPTS I'm really only interested in Networking and Web stuff

[topaz sedge]

Man I should go to college tbh, I haven't met anyone in a while

[fringe nacelle]

I only went on campus for my IT classes, other than that I stayed online

[wicked pumice]

I need to finish cjca before taking sec+ lol

Luckily we can take the exam anytime

[topaz sedge]

Mine doesn't have online mode 😔

[fringe nacelle]

I feel like you can do Sec+ before HTB certs. Uh, just ensure you know what certs the job field around you want.

Don't fall down into a cert Pokemon grind

[marsh lark]

that’ll be me

[wicked pumice]

Our program haven't started yet so yeah i still have 1-2 months

[fringe nacelle]

Is it apart of your college?

[marsh lark]

only going for CPTS and possibly PT1 if I get better in AD

[topaz sedge]

Gotta catch em all

[fringe nacelle]

My old coworker talked about their college making them do Sec+

[wicked pumice]

Nah, some institutions offer free training

So i take it

[topaz sedge]

Tbh if you clear CPTS, you can pretty much clear most of the certs in the market, cause CPTS is genuinely pretty hard

[marsh lark]

doesnt include AD tho

[fringe nacelle]

Interesting, I'm just using Messer and then having an AI generate obscure questions with a MCQ that challenges me to think.

[topaz sedge]

I have a senior in college who is really really good in penetration testing. He's cleared OSCP and CPTS, he told me CPTS was harder than OSCP

[topaz sedge]

It does

[fringe nacelle]

Hold up what are thm rules with links again?

[wicked pumice]

Oo that's nice idea

[fringe nacelle]

Can I just share a link or will a lurking mod hit me lol

[wicked pumice]

Using gpt to create questions

[marsh lark]

wut

[topaz sedge]

Do trial and error
Share a link and experiment

[marsh lark]

really?

[topaz sedge]

Yea

[marsh lark]

CPTS path has AD?

[fringe nacelle]

Yeah just ensure the Ai keeps everything relevant. It loves to hallucinate

[marsh lark]

ah, then PERFECT

can do PT1

[fringe nacelle]

I mean you won't become a master AD hacker, but yes it includes it.

[topaz sedge]

Yea it does

[topaz sedge]

Do PT1 first
It'll be easier

[fringe nacelle]

Wth is PT1

Did thm release a red cert?

[topaz sedge]

THM pentesting cert

[fringe nacelle]

[topaz sedge]

THM has 2 certs IIRC

SAL 1 and PT1

[marsh lark]

nyo

[fringe nacelle]

Does it also use the horrible Ai grading system?

[topaz sedge]

SAL is for security analyst
PT is for penetration testing

[topaz sedge]

Hopefully not

[fringe nacelle]

I feel like it would

[topaz sedge]

@marsh lark did they give option to remove echo from THM

[marsh lark]

yes

[fringe nacelle]

Not echo

[topaz sedge]

Thank God! 🙏🙏

[twin ridge]

Gave +1 Rep to @marsh lark (current: #26 - 410)

[topaz sedge]

That damn bot is the reason I left studying from THM

[fringe nacelle]

They have an AI that grades the cert, that then tells you if you've passed or not

[marsh lark]

it does use AI in its grading somewhere I believe

🤷

[topaz sedge]

Hopefully they grade through humans

Not sure

[fringe nacelle]

I don't believe so

Unless they changed it

I remember making jokes that people could poison the grading ai

[topaz sedge]

Alright bruh

[topaz sedge]

Good idea

[fringe nacelle]

Anyways just double check what your job field wants before collecting everything you see.

Work on projects as well

[mental fiber]

Hi chat

[dark wolf]

Hi HAens

[static tapir]

I was digging through TryHackMe resources and came across this link: http://admin.tryhackme.com/. thinking it was notes or part of the "DNS in Detail" room (https://tryhackme.com/room/dnsindetail). But little did I know, I fall for the oldest, most criminal trick you can get away with — honestly thought no one could pull that on me until now. So TryHackMe HQ, consider this your official notice!😭

(Obiviously joking)

[dark wolf]

I hiked up to a mountain peak and there was a log to put your name in it

i wrote in admin.tryhackme.com in it

just in case lol

[static tapir]

Who ever did this, need a raise😂

This was funniest thing all day

[dark wolf]

Yeah it is

[mental fiber]

Most hilarious HQ I know hahaha

[pine bison]

just do crtp

[pine bison]

reminds me of this LMFAO

[topaz sedge]

Lmao

[carmine oasis]

Hello good morning.

[carmine oasis]

:- ) AI is the same. It collects our data.

[pine bison]

yes, thats was my point?

[dark mason]

Nuh uh, they don't

[marsh lark]

👀

[final star]

Hey any one want learn refunding

Or carding elsee

[sturdy sequoia]

whats that?

[rapid merlin]

[pine bison]

gtfo of here. I bet u cant do either. leave

[sturdy sequoia]

what is it?

[rapid merlin]

Fraud

[sturdy sequoia]

aahhh

[narrow yew]

We are all friends

Saw an image on Twitter that sums up our group pretty well.

[rapid merlin]

[narrow yew]

Hey lill still sick boi

[rapid merlin]

Sup alive fossil

Hru

[narrow yew]

Waking up, reading emails, remember that I should have remembered things yesterday 😄remembering

[rapid merlin]

Well njoy

[narrow yew]

I will probably just read on twitter for an hour

[rapid merlin]

With a coffee right?

[narrow yew]

New tools, PoCs, CVEs, etc

[rapid merlin]

Cool

[narrow yew]

With caffeine

In a can

[rapid merlin]

[narrow yew]

Looking to build a down detector instead of paying for a service

But there should be some free things on github I assume

[rapid merlin]

Y build when u can steal

[narrow yew]

What is this steal

Have you not watched the borrower's

It is not stealing if its on github

[narrow yew]

Stealing is what sqlmap does behind torify

But who counts

[rapid merlin]

Build it urself

More fun

[narrow yew]

Sure

But there is also time spent

[rapid merlin]

Right u busy man

Forgot

[gleaming iris]

very slow THM today

[worn lagoon]

who writes content for the THM? I just can't understand this "A website where if you enter incorrect input, an error message is displayed. The content of the error message gets taken from the error parameter in the query string and is built directly into the page source."?

[marsh lark]

-# I can understand it

[rapid merlin]

[marsh lark]

although the content writer depends on which room u are talking about

[worn lagoon]

Thanks, but who are the authors? THM or anyone can be an author?

[marsh lark]

it used to be anyone for walkthrough rooms,but now people can submit only challenge rooms

so it would depend on the room

[worn lagoon]

ok, I see. Sometimes it is just hard to understand some of the content. Here is another example: "The attacker could send links or embed them into an iframe on another website containing a JavaScript payload to potential victims getting them to execute code on their browser, potentially revealing session or customer information."

[rapid merlin]

Just use a ai

[marsh lark]

so, u probably need pre req info for that

[rapid merlin]

Input a prompt like: explain me this in simple words and with an example or something

[marsh lark]

that is also a way

[worn lagoon]

yep, that is what I am doing now.

[rapid merlin]

Before u ask what's clanker

It's ai

I changed it

[topaz sedge]

Pretty accurate

Blue team does pay well in the beginning

Red team pays well when you have lots of experience

Usually people start off as blue team but transition to red

[narrow yew]

My blue team pays well for all levels and progress, I do both blue and red and it is quite nice

[topaz sedge]

So basically purple?

[narrow yew]

Well my hat have all colours

[topaz sedge]

Man I should start studying some defence based cybersec too
Usually red --> blue is easier than blue --> red

[marsh lark]

all colors is black.....

[rapid merlin]

As a great toaster once said " u can't master red until u master blue "

[narrow yew]

We donät have red in my team, we have services for that. I can not stop poking things

[marsh lark]

unless you add white, which would then become gray.........

[marsh lark]

do you mean @cosmic pendant ?

[narrow yew]

All white hats get dirty with time

[rapid merlin]

Is there anyone else as good as him

[marsh lark]

[marsh lark]

-# no

he once made a plan for getting eJPT

-# altho I'm not gonna follow his plan as.... he wants me to complete all of THM and HTB...............

[topaz sedge]

Do it

[marsh lark]

NYO

[rapid merlin]

[marsh lark]

I'm gettin CPTS and PT1

[topaz sedge]

😔

[marsh lark]

I got 3 months (around) of HTB academy in gift card, so

[rapid merlin]

Does completing it affects u in any way?

[marsh lark]

just gives me INFINITE knowledge

[rapid merlin]

Then y u saying no

[marsh lark]

takes too much time

[rapid merlin]

U have plenty

[marsh lark]

I don't

[rapid merlin]

[marsh lark]

I have to apply to high school (once again, idc if I get in or not)

I have coding to do

I have school work

[rapid merlin]

Learn time management

[marsh lark]

I also have to learn AI and do AI stuff

if I get luckily, I might got to Silicon Valley next year

[marsh lark]

I am managing my time

well in fact

[fringe nacelle]

Apply to a highschool? The fuck lol

[marsh lark]

yes lol

they are American Boarding schools

[rapid merlin]

Top lvl ones

[fringe nacelle]

Don't get bullied donut.

[rapid merlin]

.1 % acceptance rate

[marsh lark]

actually 13%

but thousands of applicants

idc if I get in lol

I probably won't

[rapid merlin]

Welcome to our life

U learning

[marsh lark]

well, I already failed to get in this year

[fringe nacelle]

It'll just be more work for yah. I guess it would look good on a resume, but connections if anything, well if they're even still alive by the time you get a job

[marsh lark]

-# cuz I actually increased my skills by probably more than 100% this last few months

[marsh lark]

thats why I'm talking to yall rn

[rapid merlin]

https://tenor.com/view/wake-up-to-reality-madara-uchiha-madara-uchihas-words-madara-speech-on-reality-gif-25405442

[marsh lark]

true

[fringe nacelle]

I spent my childhood slamming games and sleeping in school

[marsh lark]

altho these last few months have gotten better than my plan

I've increased my coding skills by a ton

[rapid merlin]

Jxnsbdmsnavdhsq

U stole my luck

[marsh lark]

I'm doing ethical hacking now

and doing AI stuff

[rapid merlin]

[marsh lark]

there was this one school that really liked me, but now they are ignoring me

[rapid merlin]

[marsh lark]

yeah, sad

oh well

[rapid merlin]

Jealousy

[chilly veldt]

I have to reconfigure my whole network 😭

[marsh lark]

for the exam?

[rapid merlin]

U better than them

[marsh lark]

[vital elk]

newb question here anyone have expirience with kali-whoami ? i know its fairly old but is it worth running or is it any good ? seen someone say that when a os connects to your ip first even if you run a changer/vpn it can easily be uncovered because of some logs or something and i always assumed any free program wouldn't be as good as a actual service ? but then i think in a hypothetical situation that if certain individuals where to push hard enough a vpn service would sell you out

[rapid merlin]

https://tenor.com/view/imostergolfra-gif-25274972

[vital elk]

love that lol

[rapid merlin]

Yo

Hru

[marsh lark]

once I get CPTS, they can't ignore me

[rapid merlin]

[fringe nacelle]

Wait til you learn about the corporate world

[marsh lark]

I have 4-8 years left

depends on when I enter the corporate world

I could always intern at ryan's company

[fringe nacelle]

Well you should be good by then, just keep up with the Ai trend since it'll be incorporated everywhere

[rapid merlin]

Donut codes better than ai

[marsh lark]

that..... is actually true

[fringe nacelle]

Let me see a spinning donut

[marsh lark]

https://tenor.com/view/ace-one-piece-ace-one-piece-donut-luffy-gif-7963656468025218985

[rapid merlin]

https://tenor.com/view/donut-code-computer-gif-11570094

[chilly veldt]

yeeee, my server mates don't know anything about networking, so apparently I have to level down the ip config

[charred cave]

https://tenor.com/view/donut-spin-gif-18347399

[marsh lark]

oof

[charred cave]

😑

[marsh lark]

gotta /verify

[sharp citrus]

@charred cave

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 30, 2025, 7:39 AM

[charred cave]

i will

[rapid merlin]

Damn

[chilly veldt]

so instead of running on 10.0.x.x/16, 10.1.x.x/16 and 10.2.0.x/24, I have to make everything into 10.0.x.x/16 🙁

means I have to redo my ipsec tunnel, reconfig a firewall and much more

[rapid merlin]

Protect it from ip address conflicts

[marsh lark]

btw, did you sell both your motorcycles?

[chilly veldt]

only one is sold so far

[marsh lark]

ah

[chilly veldt]

other is still up on marketplace

[marsh lark]

at least you sold one quickly

[rapid merlin]

How much

Which one the suzuki, if i remember right?

[chilly veldt]

the blue GS500E is still up for sale, for 1,205.07 Euro

[marsh lark]

how much did you sell the first one for?

[rapid merlin]

Damn

[marsh lark]

I have no idea how much a family car costs tho

what the, $48,000?!

[chilly veldt]

870.35 Euros, cause of engine issues

[marsh lark]

ah

[rapid merlin]

[marsh lark]

WHY ARE CARS SOOOOOOOOOOOOOO EXPENSIVE?!

[rapid merlin]

Which one

[marsh lark]

ALL OF THEM

[rapid merlin]

Santa comes with it?

[marsh lark]

this is A BIG CAR tho

[rapid merlin]

Before taxes

[marsh lark]

looks like 3 layers of seats?

[storm lily]

Anyone know an app how to see whats on someone's phone without them knowing and without having the app on both devices. Must be free

[marsh lark]

that sounds....... illegal

or at least unethical anyway

[sturdy sequoia]

illegal activity isnt allowed here

[storm lily]

Been searching on tor onion browser couldn't even find there

[stoic flame]

This is called hacking

[storm lily]

Isnt this a hacking server???

[rapid merlin]

Screen share

[marsh lark]

ethical hacking server

[sturdy sequoia]

ethical hacking only

[storm lily]

I cant have acces to the other phone so how do i screen share

[rapid merlin]

Ask him politely

[storm lily]

Please

[stoic flame]

You are on the wrong server