general

[split rampart]

The implant is an .hta file that pulls down and decrypts a payload to bypass Windows 11 defender

That sounds like a dating profile bio lol

[rapid merlin]

[native parrot]

Yo????

[split rampart]

Sup

[native parrot]

That sounds really cool 😭

[split rampart]

It is

Lol

The last one got past MacOS too

MacOS security is good, but it's not as good as people think it is

[native parrot]

There's always a flaw in everything

[rapid merlin]

If Mac was Windows it would get yeeted

[native parrot]

Does Windows have better security?

[split rampart]

Security teams for both Apple and Microsoft aren't ready for Rust malware

No, Windows 11 defender sucks. It's smarter than it used to be, but you can still get shells with PS1 scripts and Python .exes

[native parrot]

😭 Good to know

[split rampart]

It's good to be careful and to do virus scans

[slow cloud]

I dont think we can discuss that in this channel, i feel like it might be for the advanced channels

[rapid merlin]

best av is common sense guys

[split rampart]

Chrome security is really vulnerable to clipboard injection too

Oh okay, sorry

[native parrot]

I learned some thing new¯_(ツ)_/¯

[slow cloud]

Just thread carefully

[split rampart]

Just remember, if a captcha tells you that you have to verify by holding Windows + R and hitting CTRL + V

don't do it

That's the most common way chrome users are getting pwned right now

[slow cloud]

Ive never seen that captcha

[native parrot]

Me neither

[split rampart]

https://youtu.be/lSa_wHW1pgQ?si=DwuiPnEP3loogBEl

John Hammond to the rescue

It's very easy to recreate

[rapid merlin]

it's used a lot with crypto drainers

[split rampart]

Yeah, and infostealers

I think chrome defends against clipboard hijacking now, but you can just have the payload copy to the clipboard when the user clicks the captcha

[rapid merlin]

it's simple concept yet people fall for it

[native parrot]

People don't thing about a reCaptcha like that tbf

[split rampart]

Yeah. And if you're a threat actor, you don't need everyone to fall for it. If even 30% of victims do, they're in business

[rapid merlin]

are you sure, when you have to execute ps?

[split rampart]

Never forget that the vast majority of ransomware attacks happened because someone clicked a link

If it looks really official, people are more likely to fall for it.

[native parrot]

I mean most people wouldn't know that reCaptcha doesn't ask you to use keyboard shortcuts, like elderly

Or kids

[split rampart]

Yeah. A fair amount of young adults too tbh

Plus, people tend to fall for social engineering more if they're tired, distracted, having a bad day etc

Threat actors aren't worried about the people who see through it though, it's the minority of people who don't they're targeting

[rapid merlin]

not necessarily, you will be surprised how uneducated people are regarding this matter

[native parrot]

Yeah, happened to me twice on a bad day. Separate years but I learned

[split rampart]

Everyone's human

[split rampart]

Oh yeah. Young people are becoming less computer savvy too in recent years because they only use apps.

[zenith arrow]

i just fell for it once but it wasn't so dangerous i guess i got my account quickly and he didn't get a lot

[split rampart]

Yay

[rapid merlin]

It's true, their ability to think weakens

[split rampart]

That's why offensive security will never die

People will always click on bad links sometimes

[rapid merlin]

I don't think AI will replace offsec

[split rampart]

Plus, all these vibe coded websites are full of security holes and it's not getting better

Nah, never, it'll just help

[severe swallow]

hi

[split rampart]

Someone on Reddit was mad because he had seen like 8 vibe coded websites with the same insecure API vulnerability. Then someone vibe coded a website to check for security holes in vibe coded sites. That site had the security hole too

Same one

[severe swallow]

is echo good to use as a beginner?

[cosmic pendant]

oh clickfix

[rapid merlin]

You still have to understand what AI outputs for your use case, you can't expect AI to be flawless. It's effectiveness is based on yourself

[cosmic pendant]

AI is never, never never flawless

it's Stochastic

[boreal scarab]

https://tenor.com/view/dumb-and-dumber-dumb-and-dumber-gif-jim-carrey-dumb-and-dumber-jim-carrey-jimcarrey-gif-13624953691709811452

Dumb and Dumber

[split rampart]

LMFAOOOOOOOO

if I were a mod I'd pin that

[cosmic pendant]

It really adds to the conversation eh?

[split rampart]

AI just replaces stack exchange and needing to Google things and ask people. It can't defend against human nincompoopery

[boreal scarab]

Yes

[cosmic pendant]

Hyd Berries

[native parrot]

My discord was hacked last year, but like, there was nothing for the hacker to steal so bro gave up😭

[split rampart]

It's wild to think of all these vibe coders with GPT just churning out app after app, all with the same vulnerability

[boreal scarab]

I'll admit it. I vibecode. But all my vibecode is for MY use, not the public.

[native parrot]

THIS

[boreal scarab]

So I dont give 2 shits if its vulnerable or not

[boreal scarab]

Tired, very very tired. I need more coffee

[marsh lark]

yoyo 🙂

[cosmic pendant]

https://tenor.com/view/microwave-gif-18041779

[boreal scarab]

https://tenor.com/view/no-comment-quiet-mute-mute-deer-pause-gif-3676484987657574386

[marsh lark]

the microwave 🤣

[boreal scarab]

https://tenor.com/view/not-today-satan-nope-stay-away-preacher-pastor-gif-14450356

[zenith arrow]

i got hacked by a fake server and a fake verifaction it was mostly

just a bot going thru my account

but i toke the link of the fishing site and got every fake server he made

[split rampart]

Nice!!!!!!!

That's awesome

[zenith arrow]

ikr lol

[boreal scarab]

Oh many people friend me on steam thinking their slick and try and steal my account. I get like 4 requests a day. I have fun fucking with them

Like yes... give me the link, i totally wont spam your shitty fucking DB with false creds manually.... or report your site many many times

[native parrot]

😭 I remember I was so mad because the scheme literally played on my emotions (like most do)

[zenith arrow]

i feel you lol

[cosmic pendant]

2FA is your friend

Yubikeys are even more more your friend

[native parrot]

Yup 🙏

[cosmic pendant]

buy 3 of them, use them

[marsh lark]

hi Toaster 🙂
how have you been?

[split rampart]

Donut master and toaster

[zenith arrow]

bro it's so stressful to learn cyber security by my own it's just hard and get boring whene you don't understand something also being busy with highschool it's like everyone is against me

[split rampart]

Starting to get hungry

[split rampart]

You're learning in high school? Excellent.

[zenith arrow]

i started in middle school but i stopped a lot

[split rampart]

Trust me, everyone goes through what you just described when they learn this stuff

[native parrot]

I started learning summer before junior year of college

[split rampart]

Wow. You're either going to be a prodigy or already are @zenith arrow

[marsh lark]

I get that sometimes lol

[split rampart]

You're probably getting it more than you think

[native parrot]

Definitely

[split rampart]

Security is hard, and learning it and finding your way gets boring sometimes. It's okay to take breaks, it's okay to not be perfect. Stick with it and maybe you'll surpass us all. Rooting for you hard

[zenith arrow]

lol i lost hope whene i found a bounty before but since my country doesn't have paypal i just didn't get anything i was just sad and all so i left it all for a while

[native parrot]

Everything you learned is there, trust, and if you don't think you'll remember then take notes along the way

[split rampart]

Wait wait wait

You found a bounty already and you're worried you're not getting it?

[marsh lark]

how big was the bounty?

[zenith arrow]

this year is the most important in my life so i am focusing on school to join a good college

[split rampart]

Trust me, you're getting it

[cosmic pendant]

I have some bad news for you about college....

[marsh lark]

I'm trying to get into some high schools right now

[zenith arrow]

no big it was leaked infos but i am sure i'll get something from it for sure

[split rampart]

You probably already have more practical skills than a lot of entry level SOC analysts

[split rampart]

Yeah LOL

[zenith arrow]

what is it lol

[split rampart]

disregard college, get certified instead

[zenith arrow]

i didn't get you lol

[native parrot]

College isn't specific enough to Cybersecurity

[marsh lark]

?

[split rampart]

Many degree holders say they regret getting a degree and see it as a waste of time

[zenith arrow]

i have a lot of intreasts i participate in math olympiad and physics tournaments and chess tournaments so coding and hacking is one of those things

[split rampart]

Ahhh so you're a genius

Very good

[zenith arrow]

i didn't get what u mean by trying to get into some highschools

[split rampart]

You're definitely on the right track and I'm sure closer than you think. The problem is probably that you know what you don't know, which makes imposter syndrome worse

[marsh lark]

applying to high schools right now

[zenith arrow]

most of ppl ik say so but tbh i don't feel satisfied by what i do

[split rampart]

Get used to imposter syndrome btw

[zenith arrow]

oh lol got you ur in middle school ?

[marsh lark]

technically in high school first year

I'm 14

[native parrot]

Dang

[zenith arrow]

ok ok i get it now lol

[native parrot]

Child prodigies🧍‍♂️

[split rampart]

Aw, y'all just some goobers. And getting into infosec?

That's REALLY smart

If you're a 14 year old or younger and you're going around cramming for an infosec career and dreaming of being a security analyst, you will go far

You may not appreciate how rare that is

[zenith arrow]

i relized that ppl get impressed by well what i think is easy stuff like for example my first project that i presented to an algerian important guy whatever he is it was just a basic search engine i was like bro i made it in couple hours while they were so impressed

just idk how to describe it

[split rampart]

You probably have imposter syndrome and you're comparing yourself to the best of the best

Which isn't fair

[zenith arrow]

exactly

[zenith arrow]

i always whene i start something

i don't just start it i wanna be good at it so whene i see that i am not like the best in it

i just don't feel it

[split rampart]

You're also working uphill because security is waaaaaay more complex than it used to be, so don't be mad at yourself for struggling

[native parrot]

I mean you're doing a lot more than most 20 year olds in my class rn, me included

[split rampart]

Older hackers downplay that but back in the day security didn't even exist

[zenith arrow]

oh yeah i totally relize that trust me lol

it's not like 2010 and those cool years

[split rampart]

Yeah. 2018 was the worst time to get into red teaming. I wanted to go back to 1995. Not anymore. AI may be starting a new red team golden age

[zenith arrow]

lol

[marsh lark]

I might say the opposite

[split rampart]

Go on

[marsh lark]

AI is really bad for offensive security people (red teamers, pentesters, etc.)

[zenith arrow]

yo algeria have a very famous hacker well he was a spammer but he got famous anyone knows him here

[split rampart]

How so

[marsh lark]

Because now, we see these AI models finding 0days, vulnerabilities, etc.

companies are gonna be like, "oh wow, we don't need to hire these pentesters/red teamers. We just need to use these AI models"

[split rampart]

Ohhhhhhhh you mean it's bad for the profession

[marsh lark]

even some markets have already gotten much worse for offense security

[split rampart]

Yeah

[zenith arrow]

i feel like whene they get hacked by a human they will miss humans again

[native parrot]

Yeahhh

[marsh lark]

we never know, but its possible

[split rampart]

AI can find AD misconfigs ezpz

[split rampart]

They gonna get hacked LOL

[zenith arrow]

yeah

[native parrot]

Could they find more deep-rooted issues?

[split rampart]

Like what

[marsh lark]

but those are the decisions they make

[native parrot]

Idk, just like something that'd take more work to find and fix

[split rampart]

Hopefully they learn their lesson and hire humans again

[dim anchor]

https://tenor.com/view/it's-britney-im-back-michael-scott-gif-15345579002234772033

[native parrot]

The premium user thing looks like that LinkedIn pfp banner

[dim anchor]

Yeah it looks like open to work xD

[native parrot]

Lol yeah 😭

[dim anchor]

Working on SOC Level 2 path today 😄

In January I'm doing my Masters so trying to prepare 🙂

[native parrot]

Oh! Congrats, hope that goes well

[zenith arrow]

impressive

[marsh lark]

very nice 🙂

[dim anchor]

Thanks, I also have 9 certifications xD But always learning more

[twin ridge]

Gave +1 Rep to @zenith arrow (current: #3259 - 1)

[zenith arrow]

how old r u tho

[dim anchor]

29 buddy

[marsh lark]

noice 🙂

[faint epoch]

Anyone?

[zenith arrow]

we're close ia m 17 almost 30

[native parrot]

Theoretically?

[dim anchor]

Thanks, next step is get the Masters in Cyber and BTL2 😄

[twin ridge]

Gave +1 Rep to @marsh lark (current: #24 - 422)

[velvet gull]

They're always asking theoretically

And for educational purposes

[dim anchor]

xD

Some things never change here in #general

[native parrot]

😭 I meant that as a "it could be but I also don't know"

[dim anchor]

If you are 17, and you are here, you're on the right track 🙂

[zenith arrow]

lol we had a nice chat about that before lol but thnx

i started whene i was 14 or 15

but i stopped a lot

[dim anchor]

Really? My memory is bad 😄

[zenith arrow]

no not with you

[dim anchor]

Ahh okay

Cyber is a great path, it has given me an amazing life so far.

Now I want to become a Principal level analyst so I'm back here studying again

[split rampart]

Wholesome

[zenith arrow]

@dim anchor here

[split rampart]

Thankfully security is fascinating

[zenith arrow]

that's cool bro

[split rampart]

Studying = fun

[dim anchor]

It's awesome. Always changing and evolving.

[split rampart]

I know right

So many new threats, so many new vectors

[zenith arrow]

started from homo sapiens and still going lol

[dim anchor]

Hahahah

[split rampart]

Imagine cybersecurity when we were cavemen

[dim anchor]

xD

[zenith arrow]

ddos attack against the cave door

that would be bad right

or probably no door just some leavs

[cosmic pendant]

You guys aren't thoughtful enough

cutting the bridge so you can't cross the river

Dam the river so it floods the other tribes fire

[zenith arrow]

they can just climb

[dim anchor]

xD

[cosmic pendant]

cut down trees and aim them at the cave entrance

[dim anchor]

Alright back to work for me 😄 Aurora EDR now

[zenith arrow]

good luck

[cosmic pendant]

So many options

[marsh lark]

[zenith arrow]

whene ur a kid they just make you watch john's videos

[cosmic pendant]

hammy?

[marsh lark]

[split rampart]

Windows security circa 2000

[zenith arrow]

[zenith arrow]

exactly lol

[chilly veldt]

Toaster, I may have messed up

[cosmic pendant]

Don't do that

[loud marlin]

deleted production table in sql ?

[marsh lark]

what happened?

[loud marlin]

press enter... god damn lol

[chilly veldt]

Yeah, so my friend cremated her mom and sent her off to sea today, so I was told, no jokes, by my girlfriend, and then my friend texted me that some of her ashes got in her face and mouth and without thinking I just said "she just wanted to give you one last kiss goodbye"

[cosmic pendant]

nothing I want to say is appropriate for this server. so I'll reply Cool

[loud marlin]

you are fracking legend 🙂

[cosmic pendant]

lolol

[chilly veldt]

Yeeahhhh, it just blurted out

[chilly veldt]

You can dm me it

[marsh lark]

happens to all of us

[velvet gull]

That's honestly kinda cute, I wouldn't categorize it as a joke

[cosmic pendant]

I guess you could say she was ashen in the face

[chilly veldt]

The way i said it in Danish made it sound like a joke, cause over the last 2 weeks we've made dead mom jokes

[velvet gull]

Oh welp 💀

[loud marlin]

this is getting better and better

[chilly veldt]

(it's her way of coping)

[velvet gull]

Dark humor is the best type of therapy tho ngl

[cosmic pendant]

Talk about a bad case of dry mouth

[chilly veldt]

Yeah, and we are going to a drifting event later, and I wanna make so many bad jokes

[chilly veldt]

Worst part is, I just moisturized cause I didn't want ashy skin since it's 5C outside

[loud marlin]

yep... better and better 🙂

[marsh lark]

how is everything so connected 🤣

in a way

[chilly veldt]

Well, at least we get to see rubber burning later

And I have cleaned my car, so it isn't dusty when I pick her up

[dark wolf]

https://tenor.com/view/they-see-me-rollin-they-hatin-barbie-jeep-gif-9208098081207781643

[clever turret]

Lenny

[iron trellis]

im planning on doing writeups for ctfs or other things i do later on to get in the practice of doing them-- where would i post that, if at all?

[split rampart]

Medium @iron trellis

LinkedIn

Reddit

Personal website

But mainly medium

[iron trellis]

might go on medium then

[split rampart]

Yay

Dew it

[iron trellis]

lowk i've never comprehended that you could just post stuff on there, i've always read articles from it and never registered it as something you could join

[split rampart]

I know right lol I had that same arc

It's because it looks so spiffy and legit

[iron trellis]

YEAH

[split rampart]

Enjoy

Post your stuff here if possible

[iron trellis]

thank you ^_^ i'd probably enjoy it more than linkedin and reddit anyways, the former feels like it'd be oversaturated with hypebro stuff and the latter has redditors

[iron trellis]

will do!

[split rampart]

I'm sure it will be great

[austere osprey]

👍

[scenic steeple]

hlo cAn any onehelp mr

in a room called sequence

[stoic quarry]

Ask in #room-help

Also what sort of help do you need lol

[scenic steeple]

https://tryhackme.com/room/sequence

[scenic steeple]

already asked there

[scenic steeple]

im struck at listening to get a cookie
refer the below write up
https://domoon.medium.com/sequence-thm-writeup-f7cfe3c5d954

[stoic quarry]

Just wait for someone to help

I mean

Are you editing it to go to your IP?

[scenic steeple]

[stoic quarry]

Or just copying it

[scenic steeple]

editing it

[weary veldt]

Check someone's write up

[grizzled sky]

Nobody:

Me: https://youtu.be/Q_dLCNUFsV8?si=oeDSQneJoc5jdEAR ;

[clear sparrow]

Hi everyone, glad to be here

[stoic quarry]

Ello

[tranquil comet]

Hope everyone is doing well

[sharp bay]

Hii

I want to become hacker

How to become hacker

[celest dirge]

Just get good

[sharp bay]

But how

[celest dirge]

Seriously though #start-here

Then work your way up

[split rampart]

I'm gonna be totally serious here

Ask ChatGPT

[sharp bay]

where should i get learning video material

[sharp bay]

how to be a good hacker

[split rampart]

You become a hacker by signing up for tryhackme or hackthebox

[sharp bay]

ohh

[split rampart]

Pick an extremely easy box and do it

Just follow the guide

[sharp bay]

i have heard that hackthebox is hard

[split rampart]

Do Null or Blue on hackthebox

A lot is but there's easy ones too

Seriously, do Blue

[round summit]

Sounds like the worst idea today

[split rampart]

If you do that and get through the entire thing start to finish, you probably have some potential

[stable steeple]

Easy hackthebox=medium thm sometimes but on htb you have intermediate levels in the easy range (piece of cake is the easiest)

[split rampart]

Some of them you can tell the people doing the boxes are so skilled they lost all frame of reference over what "easy" means

[sharp bay]

ohh

[stable steeple]

You can give a shot to https://github.com/Hunterdii/TryHackMe-Roadmap

[sharp bay]

thanks guys you are heere to help me

[stable steeple]

There are rooms ordered by diff and types

[sharp bay]

i know a little bit red team stuff

[split rampart]

So they're like, oh, all I had to do was find a bunch of misconfigs, chain three exploits together, and write my own exploit. Better rate that one easy

[marsh lark]

which room was that one

[stable steeple]

I guess it was an example

[split rampart]

I'm exaggerating for rhetorical purposes

[marsh lark]

ah lol

[stable steeple]

I have the feeling that medium labs are unbalanced sometimes, last medium one was something I fking never heard about and finding it was wild

[split rampart]

Which one

[stable steeple]

I did it because I was exhausted and I tested everything I found xD

[stable steeple]

Unbaked pie

[split rampart]

Good job tho

[stable steeple]

It was a python pickle object serialization rce

Tf

[split rampart]

Was it fun

[sharp bay]

ohhh

[stable steeple]

How am I supposed to know that the cookie was a pickle object lol

[stable steeple]

The privesc was really really funny

[sharp bay]

guys i know a little bit red team stuff what should i learn next

[stable steeple]

Local remote port forwarding

Docker evasion

Funny stuff

[sharp bay]

what is remote port forwarding?

[split rampart]

Learn netcat and socket programming

[stable steeple]

Cyber security 101 is pretty good

[sharp bay]

sorry local

[split rampart]

Yeah honestly do like a cybersecurity 101 thing and just start learning the absolute basics

[sharp bay]

you mean that nc -nvlp 444 that one?

[split rampart]

It helps to take a coding class

[sharp bay]

i hate coding

[split rampart]

Even if you don't use any of it, learning it will always make you better at hacking or anything else in engineering for that matter

[split rampart]

Yes

I hated coding too

[sharp bay]

that one i know a little bit

to catch rev shells

[split rampart]

But it's cool once you actually accomplish the goal and look at the finished product and go there, it works

Coding is mostly looking stuff up anyway for the first few years

Although now everyone uses AI

[sharp bay]

i say AI to make my automation scripts

[stable steeple]

Like when a machine can access another one in its local network eg the machine is 127.0.1.2 and the other one 127.0.1.3, you can from the first one access to ssh on the second one but ssh isn't installed so you will do remote port forwarding to do something like "when I try on my own machine to access to 127.0.0.1:9001 i redirect the request from 127.0.1.2 to 127.0.1.3:22

Like tunneling

[spice sigil]

Hey everyone, I have a question for the penetration testers here.
Would you be interested in metal tracks that focus on themes from our field —
hacking, servers, sysadmin life, artificial intelligence, ultra-intelligence, mythical machines, digital folklore, and the mysteries of computer systems?

I’m asking out of curiosity, because I’ve noticed that most metal music rarely touches the culture of cybersecurity, and I wonder if a darker, more technical, story-driven approach would resonate with people in this space.

Would something like that appeal to you, or is the community not into metal at all?

Thanks in advance for your thoughts.

[stable steeple]

With something called chisel

[split rampart]

I don't like metal

Make some trip hop

[spice sigil]

No body is perfect 😏

[split rampart]

Lmao

[stable steeple]

I'm a huge metal lover, metalcore, deathcore, hardcore, would be really funny an hacking themed song lol

[sharp bay]

if ssh isnt installed then how you do local port forwarding? with chisel ?

[split rampart]

I think maybe we're getting ahead of ourselves. How about this: why do you want to be a hacker

[spice sigil]

I just uploaded my new song that’s why I am asking I have it in #876804968731009055 if you want to give a try , I just want to speak about our fields

And our work on PCs

[sharp bay]

i am cruious to know that

nothing is ahead if you understand that

and i think i can get that

[stable steeple]

Yeah I upload chisel on the machine then I use my computer with chisel "chisel server -p 1234 --remote" and on the target I do "chisel client myip:1234 R:9001:127.0.1.3:22"

[sharp bay]

so that's y

[split rampart]

I completely don't understand

[sharp bay]

ohh noicee

@stable steeple have you ever tried ligolo for pivoting and port forwarding stuff

[split rampart]

If you come in and ask how do I be a hacker you're going to get ten different answers

[sharp bay]

ligolo is awesome

[split rampart]

Why specifically do you want to learn

[sharp bay]

you will fall in love with that

[stable steeple]

1234 is the chisel port, R for remote, 9001 my own port, 127.0.1.3 the target, 22 the remote port

[stable steeple]

I never tried ligolo

[stable steeple]

I'll check that !

[sharp bay]

try and you will thank me later

[twin ridge]

Gave +1 Rep to @stable steeple (current: #448 - 16)

[stable steeple]

Lol xD I'll give a shot

[sharp bay]

this is the same fucking bot who muted me permanenetly

withouth any reason

[sharp bay]

yeah give a adrenaline shot

[stable steeple]

Fair enough 🤣

[stable steeple]

Oh jeez it is really good af !!

[loud marlin]

@boreal scarab i have bright idea...

[stable steeple]

Guitar is good and your voice is really good too !!

[sharp bay]

snake buddy

[clever turret]

[sharp bay]

would you pls guide me?

should i dm you?

[stable steeple]

bout what?

Last time someone told me that he asked me how to hack Instagram please don't do that I swear 😭

[sharp bay]

like reagrding hacking and all stuff

[blissful frost]

Is there a room to learn chisel in thm?

[main sphinx]

Damn

[stable steeple]

Yup!

Unbaked pie

[sharp bay]

instagram hkers dont use chisel and ligolo my friend

[stable steeple]

The foothold is kinda hard

[blissful frost]

They always ask how to hack tt for me tho 😭 🙏

[sharp bay]

i would say learn ligolo

[stable steeple]

Fr

[sharp bay]

if you want to learn pivoting and portforwarding stuff

ligolo is a heaven for hakcer

[blissful frost]

Yes I heard most people saying ligolo is better

Yk what bet

I am learning ligolo instead

[main sphinx]

I’m new af; currently 2 nd month of 2nd course in university. But wanna move faster smh. Learning cybersecurity essentials/linux essentials/programming project bla bla. So after doing netacad labs in packer tracer and virtual machine what can I do¿ and what project what knowledge and skills I must have for at least breathing air in hackathon activity hall

I forgot hey guys never mind

[dark wolf]

Takes at least 2 years

[celest dirge]

MERRY CHRISTMAS EVERYONE

[dark wolf]

There is so many topics to study and cover, it's not a quick few months course

[austere osprey]

.

[dark wolf]

you are 40 days early

[celest dirge]

Yes.

[main sphinx]

Yup I know . But I’m real into learning

[dark wolf]

Keep up the good work

[celest dirge]

It's never too early to celebrate.

I'm also hyped for Advent of Cyber 2025

[dark wolf]

Ok if it's never to early let's celebrate my hacking competition that I am doing where the top prize is $1 million. Registration opens in 20 years and the event is in 2048

If I am still alive

[celest dirge]

LOLL

[sharp bay]

Ohhh myy gawwddd

[main sphinx]

The one thing I’m not going to the classes and doing all in home, I need group of people/friebds who knows not for helping like who see it from more big shapes and sometimes hangout in chat/dm/voice guys if you don’t mind can we like huh say our names/nicks whatever and like Hiii

¿

[main sphinx]

Congratulations 🤙

[main sphinx]

XD English is not Englishing

[dark wolf]

Try Chat GPT or Gemini instead of Google Translate

[main sphinx]

just hey there I’m Anya. I do speak English. I’m charging my phone now just don’t have the keyboards here (voice)

[dark wolf]

Yeh the voice to text is horrible for me too

[main sphinx]

[lost pelican]

[main sphinx]

The only thing I noticed in screen of devices in Mr Robot is Terminal of Linux

root $

XD

[round fossil]

hi guys,

I need help with a machine which i am not able to solve.

I am facing problems with intial access

I am running it on my local machine.

can anyone try and help me ? It will be a great help.

[brazen egret]

Which machine mate?

[round fossil]

not a THM machine.

[brazen egret]

Then?

[round fossil]

can I DM you?

.ova file

[brazen egret]

Yeah sure

Got it

[lament tendon]

Hello random internet people.

What's up?

[iron trellis]

hacking in general is going to be hard, since its a step above using computers normally. you need to know everything about a system in order to break and bend it to your will
don't let it discourage you. im using THM both to learn cybersecurity but also to get over my lifelong habit of giving up on something just because its initially difficult

[iron trellis]

woke up after 'just resting my eyes' 😭

[lament tendon]

Fair.

[iron trellis]

^^^ its really cool seeing my work pay off after trudging through reviews or somehing difficult, especially when a walkthrough leaves me to figure something out on my own and im able to find a flag after some thought

im saying this after only being on it for like 10 days but still

[sand trench]

?????

[dark wolf]

I've found some ways of hacking into systems where I can grab people off the streets to help and it makes it more efficient

With my methods, people need zero expereince

[sand trench]

advent of cyber generally covers topics from all types of cyber security... which can be helpful if you only got the redteaming/pentesting part... and the side quests are generally content that can take ages for even skilled people

[dark wolf]

what is advent of cyber anyway?

is it a team event or individual?

[iron trellis]

i've tried this before but they keep asking about 'being let out' or say that 'people will know they're gone' instead of helping me with what i need :/

[sand trench]

room on tryhackme where they release a task every day to teach people hacking

[iron trellis]

thats a thing?

[dark wolf]

No one ever asks me about things like that, I guess my methods provide them with entertainment.

[sand trench]

main side of it is individual and you can get help from anyone with problems
side quests are either indivdual or team effort with no communication of other teams

[dark wolf]

And they aren't worried about being found out because it's obvious from what we are doing that we will be found out

[iron trellis]

i think its just because you're a master hacker and you're able to be a people whisperer

[dark wolf]

I generally use an assortment of chainsaws, clawhammers and even some heavy machinary sometimes. It's all hacked up by the time we are done

[iron trellis]

oh advent of cyber is a christmas calendar thing i think

[dark wolf]

but do you choose from different tasks and get points for each one you complete ?

[iron trellis]

im not sure, im looking it up on the site and seeing a few christmas rooms then like 49 pages of other stuff

[sand trench]

https://www.youtube.com/watch?v=1wJsdP2Uv2Y

[dark wolf]

It's a daily release of tasks covering many fundamentals

its for newbies and experienced people alike it seems

how cool

[sand trench]

^ yuuup yuup

the last few years there have at least been 1 day where shadow learned something new

[dark wolf]

i need to learn how to hack roblux and instagram to get at my friends ex wife, just for educational purposes, my friend wanted me to help him

[iron trellis]

firefox seems to have been updating a ton of stuff recently, its cool

[dark wolf]

God knows whats in those updates

[sand trench]

yeah and this is impressive stuffs... here is hoping it goes downstream into librewolf too

[iron trellis]

this firefox update LAAACCEEEDD!!!!

[dark wolf]

God knows why firefox and chrome want a gig of ram for each open tab. WHYYYY The page is already rendered for god sake

[iron trellis]

i like that i can put a pin code on my private tabs

[iron trellis]

this- i thought oculus was the one making my computer shit itself but turns out it slows down a bit because i have 13 tabs open

[dark wolf]

yeah, its ridiculous

[iron trellis]

even though i really reallly need all of those tabs... because i will get to them eventually

[iron trellis]

well. the oculus software WAS making my pc shit itself a little. it slowed my pc down so much i thought it had contracted a disease until i opened wireshark and saw it blabbing to meta

zuckerberg was giggling like a gnome running around my pc until i shot him dead

[dark wolf]

Good on you for opening wireshark. Too many people dont

[iron trellis]

i've used it for years (its cool to see everything going on) but it was rlly useful there

by 'used it for years' i mean 'opened ocassionally then stared at because i didn't know what i was seeing'

[lament tendon]

I just blocked most of Meta's domains on DNS level, works pretty well.

[sand trench]

shadows firefox only loads the tabs shadow has visited since they started the browser

[lament tendon]

Sorta same. My tabs unload themselves after a while of not being used.

Pretty neat feature, because now you can have unlimited tabs.

[loud marlin]

obsidian is fun... until you start =/

[modern fox]

https://tenor.com/view/do-not-question-or-argue-admins-no-abuse-gif-25738879

[narrow yew]

We just left you alone for 5 minutes mr

and you are back on arch 😄

[loud marlin]

mind you business 🙂

[narrow yew]

I do like the world domination

[loud marlin]

again... mind you business ❤️

[narrow yew]

You can go bed now

With no dessert

[loud marlin]

smh...

[narrow yew]

Someone is cranky today

https://tenor.com/view/banana-king-louie-junglebook-gif-25027205

[loud marlin]

nah...

[sand trench]

feels overkill and it is closed source too so blegh

[loud marlin]

but but plugins

[long lotus]

based

[dark wolf]

Try notepad.exe

It's not bloatd at all

[sand trench]

neovim has plugins :P

[narrow yew]

Notepad++.

[delicate frigate]

I'm just ken

[dark wolf]

too bloated

i need vi or emacs

😛

[narrow yew]

I am bloated

[sand trench]

wait you are calling emacs unbloated???

[dark wolf]

https://tenor.com/view/futurama-bender-drunk-drinking-drinking-beer-gif-11835017561485705592

[dark wolf]

emacs 1.0

[delicate frigate]

Anywhere else I'd be a ten 😔

[narrow yew]

I just made a great dinner and ate too much.

[dark wolf]

use edlin, vi is bloted

[delicate frigate]

Edlin bloated too tbh

[dark wolf]

i'm about to go to brunch and eat too much

[sand trench]

used ed

sed is bloated

[delicate frigate]

Nah sed is the most bloated

[loud marlin]

https://tenor.com/view/get-out-leave-gif-5785321051025239919

[sand trench]

trilium next supports plugins

[narrow yew]

Haha wtf, that is not what I wanted to share

https://tenor.com/view/arch-arch-linux-btw-i-use-arch-btw-zyzz-gif-25959390

I did download arch...

[celest dirge]

https://tenor.com/view/linux-yeah-i-use-linux-gigachad-chad-arch-linux-gif-26093280

[long lotus]

https://tenor.com/view/agartha-gif-4902096986506097408

[arctic epoch]

i like arch linux, best repository out there.

[night condor]

Hy guys

[boreal scarab]

Whats the idea?

[celest dirge]

Hello OSINT man

[narrow yew]

Arch.

Hello!

[modern fox]

nostalgia hits hard

[modern fox]

https://tenor.com/view/buff-guy-strong-strong-man-rule13-13do-not-disagree-with-admins-or-they-will-ban-you-gif-18069308

[celest dirge]

https://tenor.com/view/idiot-server-rule-14-server-rule-rule14-gif-26912526

[boreal scarab]

https://tenor.com/view/scooby-doo-thats-me-that-is-me-me-scooby-doo-the-movie-gif-23569029

[boreal scarab]

I use Arch BTW

[narrow yew]

I know

you all do

[loud marlin]

well.. ppl add thermal paste in nozzle thread to get better cooling when printing. why not try liquid metal?

[boreal scarab]

[narrow yew]

On their Enders? 😄

[loud marlin]

on any with unicorn nozle

[boreal scarab]

Something something something HOT AS FUCK NOZZLE

[narrow yew]

Just dont touch it, it is not the nozzle the fans want to cool down

[loud marlin]

yea. will not do it when nozzle is 250c

[boreal scarab]

Actually i may need your 3d skills @loud marlin . My cousij has a request. So if i cant find a model, I need help

[narrow yew]

What model

Ill get it for you

[loud marlin]

sure. let me just first setup mic and so

[boreal scarab]

It's of a particular trailer

[narrow yew]

Then I dont have it

If its from a patreon creator, jsut let me know

[boreal scarab]

Lemme hop on my laptop

[boreal scarab]

Will do, appreciate it! 🫡

[narrow yew]

that goes for ralexander also, just ping me for patreon

[loud marlin]

where we go?

[boreal scarab]

We can DM

[loud marlin]

sure

[stable steeple]

https://github.com/soldatov-ss/thanos

The best tool I've seen so far

sudo thanos --recursive /

Let's gamble

[narrow yew]

I would not download something from someones account that is named Soldat SS

[stoic quarry]

Or that deletes half your files, I'd hope

[narrow yew]

Greetings! All good?

[stoic quarry]

Doing p good aye

Yourself?

[narrow yew]

I am just eyeying some mobo kits on Aliexpress for homelab build

[empty notch]

Hello, do i learn to hack using the information in the website? Can i then get a job based on the knowledge i gain?

[rapid merlin]

Got scamed 76 dollars but i will be making 300 dollars this month for sure😭

[narrow yew]

I want a dual CPU but not something that need its own room to run

[stoic quarry]

Fun, got a build in mind?

[wraith crescent]

Maybe

[stoic quarry]

Yes, plenty of people have

[narrow yew]

The things you can learn on the website, will get you further along your learning path.

Advance far and have something to show off in your resume

[empty notch]

okey, so i should start with the website?

[narrow yew]

I rather hire someone that is top 50 on THM and have a genuine interest compared to someone that did their OSCP 5 years ago

[stoic quarry]

https://tryhackme.com/resources/success-story

[narrow yew]

Start and see if you like it,

Start get familiarized with the tools, look some things up. Look everything up

[empty notch]

Do i learn like literally hacking or is it just around it? i want to specialize in hacking

[empty notch]

i like it

[narrow yew]

I just want something that can run VMs, proxmox, trueNAS etc.

I have too much hording going on. I need space.

[stoic quarry]

Nice nice

[stoic quarry]

Red teaming/pentesting is a field in cybersecurity, sure

[narrow yew]

I would like a dual CPU setup, but rather not X99 but then it fast becomes expensive

[stoic quarry]

Fancy, never seen a dual CPU setup meself

[narrow yew]

I just want to throw as much cores in as possible

[empty notch]

so you could hack my pc now, or a company and tell them what is wrong with their defence?

[tired wolf]

not inherently wrong, but what could be improved

[stoic quarry]

No.

You need permission first

[empty notch]

yes, but with that ofc.

[stable steeple]

Oh jeez I didn't realize this point tf

[empty notch]

and have you learned this from the courses on the website, or should i also learn something else?

[stoic quarry]

Start with fundamentals and move on to other stuff, all things you can learn on TryHackMe

[narrow yew]

I am old so I have just learned while growing up. I used to work as an Web-admin for many years doing bug bounty after work.

Reported some stuff to the IT Sec team, now I am a part of that team instead

When I was young alot of servers did not even have shadow on their passwd

🙂

[empty notch]

sorry but that dont tell me a lot. I am a beginner😂

[stoic quarry]

Yeah so just get started on TryHackMe, its made for beginner's

[stoic quarry]

That's bonkers tho haha

[empty notch]

Alright

What basic things should i learn in the beginning that i have to learn?

I know its probably everything, but is there something spesific

[stoic quarry]

Fundamentals

The presecurity path will be your friend

https://tryhackme.com/path/outline/presecurity

And the other paths after that: https://tryhackme.com/hacktivities

[empty notch]

Okey, 23% on the pre security, trying to do somehting everyday.

[narrow yew]

One story I read online and this had nothing to do with me at all... they found found a shell account and from this leveraged root access.

Turned out it was a huge webhost for banks/hotels in Belgium. They threw the passwd in to John,

After a few days on PentiumII, root pass was "BLA"

This story was imagined to be around 26 years ago

[empty notch]

Did it take you guys a long time to get where you are at now??

[stoic quarry]

Nice! Just keep going every day and you'll get there eventually

[narrow yew]

Alot of beginners in this study are doing something similar to cyber in school or a course.

You can ofc learn on your own also

[empty notch]

Yep i am just doing it as a hobby

Did it take you guys a long time to get where you are at now?

[boreal scarab]

@loud marlin When your filament has been subject to moisture and is reading 50% RH in your dryer....

https://tenor.com/view/moist-moisture-meter-wet-gif-22355893

[sturdy sequoia]

around 25 years so far

[empty notch]

Damn

What age did you start

[sturdy sequoia]

mid teens

[narrow yew]

When we grew up there were no streaming, no touch screens, no tablets.

We had slow internet connections and copied games on 3.5 "floppys 😄

[sturdy sequoia]

rollerblades and techno 😛

[empty notch]

Damn, i am starting now. 19 years old

[narrow yew]

That is great

[sturdy sequoia]

19 is ifne. everyone has a different journey

[stoic quarry]

💯 , dont fall into the trap of comparing yourself to other people

[arctic epoch]

not really. i studied cybersec as a degree, but it did take me a lot of job apps. 1 year after college: i got my job, but i got burnt out, quit in 6 months, did 3 months help desk and then been in my current role for 3 years now. it's been 5 years since i graduated college and i didn't really keep up with cyber post-grad so I'm doing a recap now by participating in tryhackme's security engineer path, and i'm considering red-team cert too before I move on to eJPT at INE. the guy who teaches that course is my old fave youtuber, Alexis Ahmed aka Metasploit.

also - i sort of regret doing cybersecurity as a degree. i think it's better to understand Information Technology, or Computer Science first.

[stoic quarry]

I've heard similar sentiments aye

Also let's you pivot easier if you need to

[empty notch]

Try to learn the it or cs now and then you know cybersecurity plus the other ones

[sturdy sequoia]

but if its just a hobby, no stress. just do what you want. follow the suff you find interesting

[empty notch]

Yes, i want to join the military and i think its good to know at least the basics of cybersecurity

[arctic epoch]

that's what i am doing. i'm doing OSSU Pre-College Math requirements + Sophia Credits after I finish the course and then I'll do the core cs curriculum from ossu, and then I'll do an accredited Masters in CS or maybe an MIS so I can get into leadership... OR I'll just do WGU at an accelerated course and hopefully work reimburses me for it

[slim tide]

YOOOOO

[empty notch]

Niceee

[slim tide]

Could anyone help me someone that knows how to hack?

[boreal scarab]

I have a beer. I have wet filament. And I have a 3d model to come up with

https://tenor.com/view/laugh-right-idk-confused-i-dont-know-gif-9945076779520634348

[arctic epoch]

i think we need context as grey hat / black-hat activities are not allowed.

[sturdy sequoia]

Help with?

[arctic epoch]

see rule #4

[slim tide]

Are you atheist, Christian what's your believes?

[arctic epoch]

ah, you must've read my bio! I don't know what my belief is tbh, i'm still searching

I lean Buddhist these days.

[slim tide]

I just need help hacking my school to change my grades

Im honest

[empty notch]

Hermetic philosophy is a life hack

[sturdy sequoia]

That's illegal. Illegal activity isn't allowed here

[slim tide]

Well think about it that way

You could help and change my grades a little

[arctic epoch]

LOL

No

[slim tide]

Sooner or later ill find someone to help me

[sturdy sequoia]

No. If you keep asking you'll get banned

[slim tide]

I dont have to find someone in here

[arctic epoch]

how about you actually study and learn from your mistakes. '

u aint gonna grow if you keep failing and taking shortcuts

[slim tide]

What im saying is that its better for me to get help here then somewhere else

[arctic epoch]

broo yesss. have you read the kybalion?

[empty notch]

Yes

[slim tide]

Yall could help me and change my grades a little

[sturdy sequoia]

You will not get help here

[empty notch]

Currently reading

[bronze bough]

Hey does anyone know how to solve Software supply chain failure task in OWASP top 10 2025 room Im exhausted trying payloads no hints or methods given this time

[slim tide]

But if i find a black hat im gonna totally change my grades and other people

So technically if yall help me it would be a good thing

[arctic epoch]

how old r u, like 12? someone get the mods here.

[stoic quarry]

That would be illegal

[sturdy sequoia]

Just reported

[slim tide]

Asking isnt illegal

Doing it is

[sturdy sequoia]

Read the rules

[arctic epoch]

would you ask the traffic police to speed 20mph above the speed-limit? no. same logic applies

[slim tide]

They wouldn't arrest me if i ask

[bronze bough]

Hey does anyone know how to solve Software supply chain failure task in OWASP top 10 2025 room Im exhausted trying payloads no hints or methods given this time

[bronze bough]

Anyone

[sturdy sequoia]

Try #room-help

[arctic epoch]

check under Support. there should be a channel to post question

[slim tide]

Why would you limit yourself to moral rules if you dont know what to believe in

😈

[empty notch]

Bruh

[empty notch]

You must be 12 or low iq

[slim tide]

Just trying to get my grades from a 0 to a 100

[empty notch]

0 holy

How did you manage to get that

[slim tide]

By not doing the exam

[empty notch]

Damn

[slim tide]

Would you rather try and still fail or not try at all and just save your time?

[empty notch]

I would study and get the 100

[slim tide]

Why not study hacking ?

[empty notch]

You talking about what you believe in you gotta believe in yourself

[slim tide]

I said if you dont know what to believe in then you should limit yourself to moral rules

[trail prairie]

Hey anyone know how to overcome Reddit ban invasion ?

[sturdy sequoia]

No.

[empty notch]

Sam khab

Sam khan

Have you read the kybalion?

Finished?

[arctic epoch]

let's say. if you even change your grades, you get caught. you'll get in trouble.

heck - in college, if you cheat, you lose your financial aid, and it goes on your record

sometimes they will even expel you.

[slim tide]

Tell me some hot takes on animes since you watch that lets have some debates

[arctic epoch]

I am still reading it. i am like 25% through it

[empty notch]

Nice, its a litteral bible

[arctic epoch]

how about nah.

[arctic epoch]

yes. the kybalion got me into gnostiicsm too

check out the youtuber, let's talk religion

he got me into theology.

[empty notch]

Will do

Do you know what astral projection is?

[sturdy sequoia]

also be careful on the religious talk. thats not allowed here either

[empty notch]

Oh

This is philosophy though

Is that allowed?

[sturdy sequoia]

Avoid sensitive or divisive topics such as politics, religion, or other controversial subjects.

[empty notch]

Okey

[sturdy sequoia]

interperate that how you will

[cosmic pendant]

not a lot of wiggle room.....

[stoic quarry]

Not really lol

Better to just stick to Infosec kinda stuff

[sturdy sequoia]

"controversial subjects" is vague

[stoic quarry]

Anthropic claiming their AI is a really good hacker actually (they pinkie promise it's not just a marketing ploy) should be controversial...

[sturdy sequoia]

I wonder if locksmith discords have noobs going into their server asking how to rob a bank

[stoic quarry]

Lmao

[echo sentinel]

Probs nope. Only thing I could possibly imagine would be someone asking how can they open other persons house xD

[sturdy sequoia]

Haha yer i couldn't think of another similar enable l example. Like asking the cops how to hide a body

[twilit wave]

hacker illegal insatgram or facebook username admin password how with illegal

[sturdy sequoia]

Haha this is what runs through my mind whenever a new person talks here

[misty violet]

Hi, is there a working rdp for Gnome?

[echo sentinel]

Remina?

[sturdy sequoia]

wouldnt any linux rdp client/server work in gnome?

[echo sentinel]

Ahh Insatgram my fav social media - alongside Facebuk, and TigTok

[misty violet]

I meant like I want to use Gnome for my Linux VPS but I dont know how I can connect via RDP. Xfce worked fine but I am struggling with Gnome.

[olive ridge]

I think you can't access your linux pc via RDP

[misty violet]

you can?

[modern fox]

hi

[echo sentinel]

https://gitlab.gnome.org/GNOME/gnome-remote-desktop

Maybe this thing?

[echo sentinel]

Hello

[misty violet]

thanks, ill try that

[twin ridge]

Gave +1 Rep to @echo sentinel (current: #327 - 26)

[arctic epoch]

I've heard of it. I don't really follow it though. I just know as much as that one horror movie, Insidious.

[empty notch]

Look at the gateaway prosess on cia.gov

And come back when you have researched it

Its no joke. The cia uses it. Or used

[sturdy sequoia]

just another form of magic

[empty notch]

Nope its not magic

Look it up

Cia has researched it

[sturdy sequoia]

it is. and i have. astral projection is not real

[empty notch]

So why is the cia literally sayin it os

Is

[sturdy sequoia]

i dont know. ask the cia. wheres the peer reviewed study?

[olive wedge]

Hi team !!!
Recently I have been assigned a new task todo!

My task is :
We are recently deploying an app, for both mobile and web. (for now, the application is going to be published for users in USA & UK ).

I am assigned to Ensure Compliance Using "Federal Grade Security Standards" - CJIS & GDPR.

So, As I am new to the compliance ensuring standards,
I just want to know,

what should be my to-do ? ( workflow / Checklist / whatelse !!! ...... )
If possible, Please provide me a reply !
It would be a huge help!

[echo sentinel]

Brother, stop with it pls

[twilit wave]

That right is brute force I follow password Failure but so hard to I again learn still not finally how 😭

[hollow pivot]

One message removed from a suspended account.

[sturdy sequoia]

just in case youre being serious. illegal activity isnt allowed here.

[hollow pivot]

One message removed from a suspended account.

[mossy river]

Discussing ToS violations of other platforms isn’t allowed here

[stoic quarry]

Certs look good

[hollow pivot]

One message removed from a suspended account.

[arctic epoch]

THM certs are good but most employers will look for DoD 8570 or well now it's called 8170 baseline certs.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[arctic epoch]

those will pass the HR filter check

[hollow pivot]

One message removed from a suspended account.

[stoic quarry]

That depends entirely on where you are

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[stoic quarry]

Someone in Europe probably doesn't need DoD baseline certs

[echo sentinel]

Tbf I'd say THM certs are much better proof of your skills than Sec+ and CEH

[hollow pivot]

One message removed from a suspended account.

[hollow pivot]

One message removed from a suspended account.

[stoic quarry]

Look at the job postings near you and see which certs they ask for

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[stoic quarry]

Then go for them

[halcyon loom]

i mean i wouldn't apply to a company asking for CEH nowadays tbh

[arctic epoch]

it's a standardization list of certs needed to be a fed contractor or work for the govt.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[stoic quarry]

If you have all the other required certs. Yeah

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[stoic quarry]

If you only have the SAL1 when they ask for Sec+, Network+ etc, then no

[hollow pivot]

One message removed from a suspended account.

[stoic quarry]

But having additional certs makes you stand out for sure

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[stoic quarry]

Yeah

They're very widely adopted

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[arctic epoch]

i wasn't really a fan of the sec+ because it's q&a, doesn't test your knowledge as a lab would.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[stoic quarry]

Military contractor lol

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[arctic epoch]

i hate to be the bearer of bad news but i wish the market was just apply as you please and get in but all imma just say is good luck.

i've applied to places like lockheed, palantir, general dynamics, rejected.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[halcyon loom]

Sometimes luck is needed too, you kinda have to be somewhere at the right time.
A lot of things can go wrong so make sure you have backup plans

[stoic quarry]

It's more the people you know aye

[arctic epoch]

this chat probably goes in careers chat but anyways. I reccommend MITRE as they cater to college graduates. @hollow pivot

[gray sonnet]

Hi

[stoic quarry]

If you have a friend at a company you're more likely to get a job there than if you don't

[hollow pivot]

One message removed from a suspended account.

[celest dirge]

Cool, here's my messy and expensive cert roadmap.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[hollow pivot]

One message removed from a suspended account.

[arctic epoch]

OK. I like this. a cert roadmap in an excel sheet, nice.

[narrow yew]

You will land a job long before that is completed

[celest dirge]

Most likely

[hollow pivot]

One message removed from a suspended account.

[stoic quarry]

Missing the usual comptia ones there

[narrow yew]

Even SC200 would land you a soc job

[hollow pivot]

One message removed from a suspended account.

[stoic quarry]

You'd think

[arctic epoch]

engineers is fine. they can still refer you, and also you could still join their department.

[stoic quarry]

<--- has his SC-200

[arctic epoch]

for ex. i'm a systems engineer, but i actually do cyber compliance stuff

[narrow yew]

I sould have found you before we hired a JR after summer

[stoic quarry]

🙁

[hollow pivot]

One message removed from a suspended account.

[celest dirge]

Man, Security+ is overhyped and it feels like everyone has it.
I negated it because it doesn't feel unique.

[modern fox]

LOTL attacks room so good ngl

[stoic quarry]

It's often a HR check thing. Also a requirement for some Govt contracts

[hollow pivot]

One message removed from a suspended account.

[arctic epoch]

yess. i suggest waiting until your junior year. focus on them studies.

[halcyon loom]

HR will look at it and think if everyone has it and you don't then you're doing something wrong

[stoic quarry]

You don't really want go be unique in the certs you have. Just get the ones with the most value

[modern fox]

nice tag

[halcyon loom]

they aren't technical people

[hollow pivot]

One message removed from a suspended account.

[stoic quarry]

HR will go "Oh we asked chatgpt what certs a soc analyst should have. It said Sec+. This guy doesn't have it though"

[arctic epoch]

funny. i didn't renew my sec+, it felt overrated and an employer just asked for it recently.

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[arctic epoch]

funny i have this bookmarked. thats a solid resource.

[hollow pivot]

One message removed from a suspended account.

[halcyon loom]

CEH isn't imo

[hollow pivot]

One message removed from a suspended account.

[narrow yew]

Depends, do you have a job currently?

[hollow pivot]

One message removed from a suspended account.

[hollow pivot]

One message removed from a suspended account.

[arctic epoch]

i concur. CEH is a multiple choice exam, doesn't really test practical knwoledge.

[narrow yew]

They write that its required because they know of it, some old guys are working there that knows of it from 10 years ago

[hollow pivot]

One message removed from a suspended account.

[halcyon loom]

as i said i wouldn't want to work at a company that requires CEH. It is very old and doesn't really gives you hand on experience

[arctic epoch]

also ec-council prices are ridiculous. get an employer to pay for the CEH.. if you really want it.

[hollow pivot]

One message removed from a suspended account.

[narrow yew]

Job fairs and look up Head of IT Security, CISO, Cyber managers and just introduce yourself on LinkedIn.

[modern fox]

true

[arctic epoch]

I'd avoid all the certs that start with G. GIAC certs are also insanely expensive.. better to have an employer pay for it

[narrow yew]

Everyone needs summer workers for low level work

[stoic quarry]

Will do low level work for money

[celest dirge]

https://tenor.com/view/crying-emoji-dies-gif-21956120

[narrow yew]

Summer is close by

[hollow pivot]

One message removed from a suspended account.

[narrow yew]

We will talk before that

[arctic epoch]

My friend at Deloitte is having Deloitte pay for GCIH because his SOC team is now handling incident response

[stoic quarry]

Not here it ain't

[hollow pivot]

One message removed from a suspended account.

[narrow yew]

First winter and some holidays, Then spring then summer ;D

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[modern fox]

whats the topic yall

[arctic epoch]

cert exploration

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[modern fox]

damned topic ngl

[narrow yew]

We can talk here, questions related to work and entry things are good for most here

[hollow pivot]

One message removed from a suspended account.

[hollow pivot]

One message removed from a suspended account.

[cosmic pendant]

Should I let my certs expire?

[modern fox]

i feel ya

[arctic epoch]

u dont need all the certs. also don't cert-chase. pursue what you are interested in.

also, experience always triumphs certs.

[echo sentinel]

Yes, welcome to cybersecurity - Were your impostor syndrome has impostor syndrome and you always feel like a newbie

[narrow yew]

Skills and knowlage are the same even if they expire

[arctic epoch]

[cosmic pendant]

Good answer, but not the same for insurance though 😄

[hollow pivot]

One message removed from a suspended account.

One message removed from a suspended account.

[arctic epoch]

0

none of my jobs required certs

[cosmic pendant]

Depends what' youre doing

But more and more you do

#CyberInsurance

[hollow pivot]

One message removed from a suspended account.

[hollow pivot]

One message removed from a suspended account.

[cosmic pendant]

Most people, start on helpdesk

[arctic epoch]

THM is good. I've had employers ask for THM and HTB experience, and yeah, it depends what you're doing.

[narrow yew]

Look at Orange cyberdefence, they have a great onboarding of new analyst's

[cosmic pendant]

Cyber is not a newbie friendly role and it's more and more becoming much harder

[narrow yew]

They even use THM in their roadmaps

[cosmic pendant]

Also, it's becoming more and omre pretend security.

[hollow pivot]

One message removed from a suspended account.

[cosmic pendant]

very very few people understand actual security

[hollow pivot]

One message removed from a suspended account.

[arctic epoch]

I've listed my college projects on my resume, pentesting, network analysis, vulnerability assessments, aws setting up an ec2 instance and assigning user privileges, group policies (IAM)

[hollow pivot]

One message removed from a suspended account.

[narrow yew]

Should be more then enough

[hollow pivot]

One message removed from a suspended account.

[twin ridge]

Gave +1 Rep to @narrow yew (current: #296 - 31)

[arctic epoch]

thank you!

[twin ridge]

Gave +1 Rep to @narrow yew (current: #291 - 32)

[hollow pivot]

One message removed from a suspended account.

[narrow yew]

I dont need any rep, not sure what it is for. Give them to shadow

There should be a #cert room

[stoic quarry]

Comptia ateast let you renew certs if you do a higher tier one within the timeframe

[narrow yew]

There are also points toward certs to attend conferences and such

[modern fox]

fr what reps for

[stoic quarry]

Ye

[narrow yew]

To show that you are a nice guy? I have no idea

[stoic quarry]

Social clout ig

[narrow yew]

Making progress on the blog post?

[stoic quarry]

Got a few in the works aye

[narrow yew]

I see the link now, great

[tired wolf]

hot take, i’d say the technical part is becoming easier

[urban kindle]

hey is there anybody who can help me bc idk why but i downloaded a blender file and let it execute python code. i have the base64 here if anybody could help me what to do id be very happy

[stoic quarry]

Pop the filehash into VirusTotal

See if anyone else has reported it

[narrow yew]

and/or any.run

[stoic quarry]

Need an account 🙁

[narrow yew]

naa you dont

[stoic quarry]

Do you not?

[sleek hare]

Any run is really cool

[narrow yew]

https://app.any.run/#register

you can still submit file or URL here

[sleek hare]

Hai chat btw

[narrow yew]

woth no account

[stoic quarry]

Ahh nice

[sleek hare]

Chat

[narrow yew]

just remove the regidster part

[sleek hare]

Shall I stream tmrw me doing some hard room

😭 had no time today

[stoic quarry]

I tried creating a free account but they rejected me 🙁