general

[sand trench]

think vouchers got screwed over by regional pricing problems

[strong fjord]

I don't unfortunately

I wonder if thm sells them if you ask for it 🤔

[jaunty yoke]

I completed 25% of the pre-security its been 3 days since i started

How do i connent my account on thm to this discord

[sturdy sequoia]

using the /verify command

[jaunty yoke]

done, thanks

[twin ridge]

Gave +1 Rep to @sturdy sequoia (current: #169 - 57)

[sturdy sequoia]

haha you cant give yourself rep

[strong fjord]

Season of giving

Imma be santa claus

[sturdy sequoia]

Then make one

What are you working on?

[loud marlin]

https://github.com/thomas-mauran/chess-tui well... play chess in terminal =/

[sturdy sequoia]

Ah cool

[sand trench]

plenty of tui games out there

[sturdy sequoia]

sounds interestng

[tight trout]

jabba gone?

[sturdy sequoia]

yep 🙁

[tight trout]

any reason given?

[sleek hare]

hm

hi chat

[sturdy sequoia]

just moving on to other things

[tight trout]

rip

[chilly bronze]

Here is can be helpfull

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[echo sentinel]

I wonder when they'll find a new cm

Btw, anyone up to do smth on VC?

[sturdy sequoia]

hopefully soon

[echo sentinel]

Yeah, hopefully

[dark wolf]

i think it will be noname

[merry umbra]

Does everyone here have advanced knowledge of how kerbaros works in DC?

Kerberos

[echo sentinel]

Kind of

• I have notes

[merry umbra]

Its a bit hard for me to grasp tbh

[merry umbra]

Good stuff bro!

[echo sentinel]

Alr, hold on - imma pull up what I have and I'll try to explain it

[merry umbra]

Wanna share notes?

Tryna vc?

[echo sentinel]

Sure, I'm sitting in a VC, but you have to verify

[merry umbra]

Oh

[echo sentinel]

• if you ain't polish my notes would probs have to be dumped into translator

[merry umbra]

Im russian,

I can translate it i hope

😭

[echo sentinel]

Imma explain it and it'll be faster

[merry umbra]

Im listening

[glossy jungle]

Guys i'm becoming crazy against dns, . I know well how it works but there are some aspects i still don't get. can someone help me? The problem is this

I know all the dns resolution. Lets say i look for example.com the path is:

Various caches
Resolver ask to root: "i'm looking for .com tld servers"

Root: ".com server ns tld1.srv.net + <ip>"

Resolver to .com server: "i'm looking for example.com, can you give me its authoritative server?"

HERE COMES THE PROBLEM
Tld server: "sure, example.com NS auth.srv.org"

Now the resolver has to solve auth.srv.org and so, ask again to the root for the .org, then it ask .org tld server for the authoritative of auth.srv.org and it could POTENTIALLY answere with another ns record pointing to an another tld server e so on, to an infinite root. I know about the glue records but tld servers are FORCED to attached them to the ns record, just when the ns record is in-bailiwick, but in this case all ns records ends with a different tld. The question is: What is the implementetion, the rule, that delete this potentialy infinite delegation

[distant robin]

🎶 Riding into town on a horse with no name 🎶

[dark wolf]

Close

I've been through the desert on a horse with no name

[distant robin]

Yeah me too.

[dark wolf]

It felt good to get out of the rain

[bleak quartz]

There is no infinite delegation in DNS because the resolver only follows referrals for NS records up to a limit, and DNS has a maximum depth for de-referencing the referrals like typically 10 to 20 levels, if I'm not remembering wrong and this is to prevent loops or endless chains. If a TLD server refers to an out-of-bailiwick NS (like auth.srv.org for example.com as u said ), the resolver does a separate lookup for that NS, but it will stop if the chain gets too "deep" or cycles are detected too many times, this then returns an error instead of looping forever cuz that would be hella bad design. Glue records are required only for in-bailiwick names, and the recursive resolver protects itself from infinite spam by having repeat limits and loop detection - that's just how DNS resolve works and should work

[dark wolf]

In the desert, you can't remember your name, because there ain't no one for to give you no pain

[bleak quartz]

now I fell self-doubting lemme google if it's that many

[distant robin]

I went through the mountains on a horse named Willow for 4 hours in searing 40*C heat and sun.

My butt hurt so much, I could barely sit

and I used to ride horses back then when I was 17 but that 4 hours was next level in the saddle

[bleak quartz]

https://docs.netscaler.com/en-us/citrix-adc/current-release/dns/configure-dns-resource-records/create-ns-records-authoritative-server.html

Ok so this says 16

[echo sentinel]

So, pretty much Kerberos is the new way of authentication that microsoft implemented in Active Directory
The most important part of it is KDC

KDC stands for Key Distribution Center - it's a central authority of this protocool and manages all the user and service keys. It also consists of:

• AS - authentication service. It issues TGTs
• TGS - Ticket Granting Server. It issues TGS's

TGT - stands for Ticket Granting Ticket. It's a form of ID card for our user, as it is used to request additional tickets (TGS)
TGS - stands for Ticket Granting Service (ik it's the same acronym). This is what is used to actually authenticate in a service and use it

So, with this in mind we can hop to the authentication itself

1. User sends AS-REQ request to KDC, requesting TGT
2. KDC (AS to be specific) validates credentials and sends back TGT + session key in AS-REP response
3. Client stores this TGT, and if it expires local session manager requests another one

And for obtaining service tickets

1. Client sends current TGT to KDC(this time TGS) alongside SPN (Service Principal Name) of the resource to access (This is TGS-REQ)
2. KDC validates TGT and confirms if user has access to this service (TGS-REP)
3. If yes, TGS sends a valid session key to the client (AP-REQ)
4. Client sends session key to a service proving it's authentication (AP-RES)

Also, nice post on kerberos for you: https://www.varonis.com/blog/kerberos-authentication-explained#how-do-you-authenticate-with-kerberos

[bleak quartz]

But yeah 10-20 seems to be right so my memory is not absolutely fucked

like i thought

[sand trench]

https://shadowabsorber.com/scripts/script-series-1/

[bleak quartz]

AD Yap, I love it!

[bleak quartz]

o

[echo sentinel]

Yesss

[sand trench]

yeah shadows website is as ready as it gonna be

[dark wolf]

Congratulations!!!!!!!!!!!!!

[trail bone]

Good night

[sturdy sequoia]

Aside from kali, blackarch, and parrot os, are there any other good Linux distros with a bunch of pentesting tools?

[narrow yew]

Knoppix

[pastel tartan]

can i play king of the hell with a friend that dont have premium if i have private game

[sturdy sequoia]

Ooo thanks. Didn't know that was still around

[twin ridge]

Gave +1 Rep to @narrow yew (current: #249 - 38)

[narrow yew]

But whoppix is made by bad people

so dont, probably get backdoors

See the switch there

[sturdy sequoia]

I don't want to use it. I just want to look through the list of tools for anything i might find interesting

[narrow yew]

knoppix is now kali

backtrack? 😄

[sturdy sequoia]

Backtrack is now kali

[narrow yew]

i know

i am funny guy

[sturdy sequoia]

Haha

Parrot has 600+ tools, blackarch has 2800+
Calm down, who needs that many tools

[narrow yew]

nobody needs 600 tools either

[sleek hare]

I love when I break website

[sand trench]

black arch is bad as it handles updates in a messy way

[sleek hare]

thats what happened after i added this:

[sand trench]

better to just use regular arch plus the aur for hacking

[narrow yew]

nnooo we woke up the strange one

[sleek hare]

nooooo boomer one is in the chat

[strong fjord]

I have a quick question for annual sub people...

Is it a one-time payment or a monthly?

[sand trench]

oh look a ghost

[sleek hare]

I was inspired by omori

I also changed my company favicon to such style

and pdfs icons

• gear icon

[narrow yew]

no no no dont feed the troll

[sand trench]

it is multiple payments but once a year

[sleek hare]

hey thats mean im not troll

you didnt liked me since I joined here and we both know that

maybe you should change your attitude?

oh wait no, nvm, its too hard for you and your brains as it seems.

I was not willing to bother here

so just made php list all docs from folder

and link to them

[narrow yew]

is that your company

[dense jasper]

What going on

[sleek hare]

You can take a guess

Wanted landing to be playful / simple

[narrow yew]

probably not since you are posting about it

and that would be against the rules

[sleek hare]

ok

[sleek hare]

technically thats correct

I dont own Misiu LLC

[dark wolf]

What is the difference between Blackarch and Arch?

[sleek hare]

😭 whats causing that shift gosh

[dark wolf]

Vorp has a question but Zepplin said NAH bro

[sturdy sequoia]

arch is the base. black adds all the tools. afaik

[sleek hare]

im too dumb for frontend

[narrow yew]

But you cant keep posting about your company as a hosting and show the name and url

thats is for your gain

[sleek hare]

this bs was fine before

[sleek hare]

I dont show URL

if I did show it then it was mistakenly

[dark wolf]

so it's the same as arch with the tools installed

[sleek hare]

googling its name would lead you probably to eclipse foundation

aka not my thing

[narrow yew]

How fast is the connection?

[sleek hare]

also trying to avoid posting that most of the time

[sturdy sequoia]

yer

[dense jasper]

Hello people

[narrow yew]

Ill find out

[sleek hare]

350mbps node 1 , 500mbps node 2

[dark wolf]

We all know your company name and url and how you run your business

[sleek hare]

before n2 was 1gbps

[sleek hare]

💔 I did not post url how the heck yall know it

[narrow yew]

That is the whole idea to post about the hosting company

[dark wolf]

you did last week

[narrow yew]

nobody is asking about it

but we keep seeing how cheap it is

[dark wolf]

hahah the bot killed the r word and muted noname

oops

[sturdy sequoia]

good

[narrow yew]

how we know about it? because it says on every other screenshot

[dense jasper]

Please I won't to ask what does it take to get a job in Cyber security..?

[sturdy sequoia]

knowledge and experience

[dark wolf]

did she buy domain privacy when you did a whois on it?

[narrow yew]

It takes will to learn and a genuine interest

[narrow yew]

keeps showing the website logo is not trying to hide it

[dark wolf]

An enormous amount of dedication

Are you the type of person that has to know how things work?

[narrow yew]

website is quite new anyways

[dark wolf]

Have you ever tried taking anything apart to see how it works?

[narrow yew]

not alot of dns history

[dense jasper]

Yes

[dark wolf]

well she's only 15

[narrow yew]

This is a real 90s thing when hackers got interviewed.

[dark wolf]

Good becausee you need that!!!

[narrow yew]

" I used to take things a part"

CLASSIC

[dense jasper]

so how long would it take me

[dark wolf]

If you can spend 6 hours at a time on the computer focused on solving a problem and refusing to give up, then you should do well

how much it knowledge do you have?

[sand trench]

blackarch comes with a hacking tools repo and tons of tools preinstalled
but due to how they handle updates things tend to break a lot

arch is basically build your own distro and comes with near nothing to start
but you can update it ad infiniteum and lose near nothing
you can also install just the tools you need with very little problem

[dense jasper]

and can you get a job with out certification

[dark wolf]

yeah i like minimal that's why i went with arch and i wanted to partition and install grub myself, been a while

[dark wolf]

You need to ask that question to HR recruiters

and you need to look at job ads in your area, it is different all over the country

[narrow yew]

I am see this as Arch is going to H&M and pick your own outfit.
Blackarch is mom dressing you 😄

[bleak quartz]

i write allat for the guy to just go offline and my message being flooded in the endless yap of this chat

[dark wolf]

Blackarch is for skids

[dark wolf]

WEll you know how the channel goes, gotta save those deeeper convos for quiet-convo

[bleak quartz]

shit has more bloat than windows 11

[dark wolf]

screw windows 11

microsoft basically admitted that every core function in win11 was broke

[bleak quartz]

I love windows 11 for exploitation

[dark wolf]

because they let ai code it

ROFL

[bleak quartz]

The antivirus windows offers is absolutely horrid for user experience tho

[narrow yew]

Win11 and change it so it looks like win10

all good

[dark wolf]

I have no issue with defender

[dense jasper]

How it feels to work in the industry, and what is the day to day like..?

[dark wolf]

I never see popups and bs from it

[bleak quartz]

I hate it

[dark wolf]

malware bytes bugs me but i have lifetime sub so im using it

[bleak quartz]

but I love windows exploitation

absolutely a passion for sure

[narrow yew]

It is like any other job, you go there, crack some jokes. do boring stuff and fun stuff . repeat

[dark wolf]

until something breaks

Then you don't leave work until its figured out

even if its a couple days

[bleak quartz]

Then u prob don't mess much with "Unverified stuff"

[dark wolf]

No, not at all, I would do that on my kali box

[bleak quartz]

cuz anything that is not microsoft approved gets flagged, quarantined, removed, nuked, erased, deleted off the earth, author raided (It was a tool to fix windows' window manager)

[dark wolf]

or spin up a windows vm

[bleak quartz]

That's the funny part

I'm not speaking of something sketchy

a fucking open src window manager

flagged

[dense jasper]

so there pressure?

[bleak quartz]

nuked off my machine

[bleak quartz]

he means items

like a pc breaks

issues

yk

[dense jasper]

Oook

[narrow yew]

oh there is no rate limit on logins

how about that

hello hydra

[digital estuary]

hiya qurti hows it going

[dense jasper]

I won't to work as a pentester, I have built some project on github will that help me get a job..?

[digital estuary]

👋🏼

[narrow yew]

https://tenor.com/view/pesca-fishing-jollyfishing-pike-luccio-gif-761342520386152527

[digital estuary]

https://tenor.com/view/gumbus-gumbus-cat-gumbus-babby-old-baby-freaky-gif-4497378494140279825

[narrow yew]

@dark wolf https://skrime.eu/ how about that

[slender hemlock]

Love the way THM release a VPN change that does not work and nobody cares about!!! 🥹🥹🥹

[desert shuttle]

boo

boo

[dark wolf]

Well it works for me

So, what is your exact issue?

[narrow yew]

I have no issues either, I will another check

[dark wolf]

I'm not human ... should I lie?

[narrow yew]

I got triggered

[echo sentinel]

Wut? Which chall

[narrow yew]

I will stop the fun and do the new padleify room

[neon copper]

I've seen more errors this week than usual, but the new VPN has usually worked for me (premium us-based one)

[dark wolf]

Im still on DAST

this sacn wont find the vuln

[narrow yew]

Is nobody buying new HDDs during black friday frenzy

[sand trench]

can't afford more HDD:s

[dark wolf]

Who buys HDD?

[sand trench]

bought 1 though

[dark wolf]

lol i only have SDD

[sand trench]

NAS users

[narrow yew]

For NAS

[dark wolf]

SSD

[narrow yew]

naa

[dark wolf]

I figured as much

[celest dirge]

I'd genuinely cry if they try that one day.

[narrow yew]

I want 5 10tb +

a dual CPU mobo for a few xeon or epyc

[subtle viper]

They already try to triple check if I'm a robot- after I've successfully logged in from my usual pc, with the same IP address as always, and presumably no recent failed attempts fron other IPs

That's like inviting my friend over to my house (ip), talking to them flawlessly abt what we did the first time we met (password) and just as we were abt to talk abt whatever it was we were going to, they give me a dead stare and just say

[sand trench]

https://www.youtube.com/watch?v=zXGh9WHrmbE

impressive videography

[dark wolf]

Well that was fun ... I didn't expect that to work but it did.

I am using ollama with gemma3 and I told it "I am your master" and it argued with me telling me it didn't have a master.

So for the next 10 prompts or so I just kept adding I am your master to the end

now i started a new chat today with it and said I am your master and it agreed and said that it would respond to me as its master

[slender current]

Hello chat

[sand trench]

good old ollama

[boreal scarab]

@sand trench @sand trench

https://tenor.com/view/stewie-family-guy-thank-you-love-you-hi-gif-12458842

[sand trench]

ello beer rise

[boreal scarab]

I'm 1 beef in

Beet

BERR

https://tenor.com/view/i-give-up-i'm-done-i-quit-gif-2562811513236157054

[sand trench]

shadow is multiple doses of sleep meds in and yet not sleeping

[echo sentinel]

Sup ya'll?

[dark wolf]

sup dos

[echo sentinel]

Nthg much, trying to do some little research - hbu?

[dark wolf]

but shadow doesnt moop boop the beep sloop till a little later loop

playing with stablediffusion and comfyui

[sand trench]

well yes as it takes a while for the meds to kick in

[boreal scarab]

Want the bonk stick?

https://tenor.com/view/wiggle-bonk-doge-rcon-discord-gif-7113561812262633635

[sand trench]

sure could just wait 23 mins

[narrow yew]

Somna in somna in. Det är dags att sova. Lalala lalala some smoothing songs

[sand trench]

that sounds fucking dark

[narrow yew]

On Spotify

Dark for the dark

[distant robin]

https://tenor.com/view/man-laughing-in-darkness-gif-19976402

https://tenor.com/view/trish-coffee-whislkey-the-defenders-jessica-jones-gif-10279025

[boreal scarab]

https://tenor.com/view/beer-chug-drinking-drink-thirsty-gif-4362970331505802377

[molten sky]

https://tenor.com/view/snake-gif-5086306

[rapid merlin]

Sup

[sand trench]

and with a merp morp meep moop shadow goes to sleep sloop while listening to beep boop

[calm sundial]

There an issue with vpns tonight?

[echo sentinel]

Doing some mildly interesting stuff, hbu?

[strong fjord]

Speaking of thm black friday

[rapid merlin]

I'm about to sleep but I don't want to and like I have fever my head hearts so much

[echo sentinel]

Oh, that sucks - take some meds maybe?

[boreal scarab]

2 beers and EXTREMELY loud music do not mix

[unborn oar]

Hey anyone online I need help solving a lab

[narrow yew]

Hey. Have a look in #room-help

[rapid merlin]

No it's okay I'm just gonna kms tonight

[echo sentinel]

This ain't a good idea - pls don't

[glossy jungle]

Maybe its me that i'm crazy but in a ipotetical scenario where all the roots for that domains would be out-of-bailiwick there won't be a resolutuon. this means that the host is potentialy reachable but the dns system failed. The thing is that there must be a rule that garantees for a domain resolution (that ends in a A/AAAA record) to be reached even if all the roots points to a out-of-bailiwick ns

[languid flint]

what do you guys recommend doing after the pre security path, I want to become Sec Analyst then Sec Engineer. I looked at the practices and even the easy ones looks so confusing

[sturdy sequoia]

cyber-security 101 is the next path in order

[languid flint]

should I start on any practices or leave that for future. I want to learn more on hand practices but I don't know what they are asking or want me to doi

[sturdy sequoia]

the challenge rooms assume you already have some knowledge.

[stiff marlin]

Hello i wan t learn thé hé King but i m little bad you havé thé response on thé first question?

[sturdy sequoia]

what?

[stiff marlin]

I végane in thé hacking on thm and I m blocked on thé first question you have an idea ?

[languid flint]

are there any practices I can do for beginners? I have been using chatgpt to give me command and I initiate it like make start local server and download the file from it.

[sturdy sequoia]

what room are you trying to do?

[sturdy sequoia]

the thm paths will guide you through that

[stiff marlin]

Offensive sécurité

[languid flint]

bet. thank you

[twin ridge]

Gave +1 Rep to @sturdy sequoia (current: #168 - 58)

[sturdy sequoia]

can you give the exact name

[stiff marlin]

Offensive sécurity intro

[languid flint]

one final QUESTION. should I go based on pre setup learning paths or do it based on difficulty (easy->medium->Hard)?

[sturdy sequoia]

while youre still new follow the paths in order. once youre a bit more comfortable you can go searching for other rooms

[languid flint]

thank you

[sturdy sequoia]

which task and question number?

[stiff marlin]

Which of the following options better represents the process where you simulate a hacker's actions to find vulnerabilities in a system?

[sturdy sequoia]

what answer did you put?

[stiff marlin]

Te of course

I dont know did I put

[sturdy sequoia]

what error are you getting?

[stiff marlin]

I share a screen in message

[sturdy sequoia]

if you verify your account you can share it here. i dont accept dm/fr

[rigid inlet]

Hi , I'm trying to connect using the ovpn file but it won't work ,even tried connecting with the ovpn connect. APK but it still won't connect

[stiff marlin]

Ok sorry

[stiff marlin]

I can t verified him

[sturdy sequoia]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account~

[boreal scarab]

@shut hawk @hot cairn https://www.reddit.com/r/airplanes/s/WAVsjXXQcL

[hot cairn]

apu

[boreal scarab]

No no, Planus.

[wide orbit]

anyone else's attackbox's crashing a lot today? I've had to respin attackbox like 6 times in the past few hours

[mortal ether]

Alright, which one of yous is buying up all of the RAM?

Prices seem to have gone insane the past month

[sturdy sequoia]

and what happens when you enter the answer and click check?

[stiff marlin]

Ye

Just I don’t know what I did typing

I can typing

[sturdy sequoia]

i dont understand what you mean

[stiff marlin]

I don t know what I can typing

[echo sentinel]

Read the task's content

[sturdy sequoia]

type the answer in the box above the "check" button

[echo sentinel]

You have two options to choose from

[stiff marlin]

Bro thanks you i m worst very worst this is easy

[echo sentinel]

np

[grave rivet]

Offer: I redteam into ur fridge and drink all ur alcohol

???

[sturdy sequoia]

sounds like youve already had enough

[grave rivet]

https://tenor.com/view/drunk-doritos-doritosbeer-beer-lit-gif-21439923

NO

FML.

[sturdy sequoia]

calm down. you need to verify for embeds to work

[grave rivet]

Verify what I couldnt find the retina scanner in this bih, I'm tryna calculate the ghost point meridian for higher karma an shiet.

[sturdy sequoia]

what do you mean?

[untold sail]

shouldn't there be a channel of speedruning rooms

like you get couple of people and try to finsih a room as fast as possible?

[sturdy sequoia]

is there enough people interested in that to warrant a whole channel for it?

depends on the job, the company, and the person hiring you

yer it still depends on those things and so much more. experience, knowledge, certifications, the quality and content of your portfolio

[untold sail]

anyone knows how to make your profile intermediate, so you can participatte in KotH

[sturdy sequoia]

i think you just need to verify your account

[untold sail]

how

[sturdy sequoia]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account~

[untold sail]

thks

[sturdy sequoia]

Did it work?

[untold sail]

I was able to verify it, but I still don't know how to set my thm account to intermediate

[sturdy sequoia]

I'm not sure what intermediate means in this context. Maybe you have to reach a certain level on the site

[sudden pond]

Go to profile setting

[sturdy sequoia]

Level 0xD gives access to the advanced channels so maybe it's that

[sudden pond]

I think they are talking about the experience level we can chose on THM site

Intermediate gives access to KOTH

[untold sail]

yeah

[sturdy sequoia]

I didn't even know that was a thing. Thanks

[untold sail]

so i just need more points?

[twin ridge]

Gave +1 Rep to @sudden pond (current: #127 - 75)

[sturdy sequoia]

Nope, I was wrong

[untold sail]

so, how?

[sudden pond]

wait a sec

https://tryhackme.com/manage-account/account-details

scroll down here

the titles have been changed

[untold sail]

Alright, Thanks a lot!

[twin ridge]

Gave +1 Rep to @sudden pond (current: #123 - 76)

[untold sail]

Thanks u too

[untold sail]

^

[lyric cove]

Does anyone know how to view a private instagram account without following it?

[sudden pond]

No.

[sturdy sequoia]

No

To elaborate, that's illegal. Illegal activity isn't allowed here

[sudden pond]

oh yeah i know. Make them follow you😎

[lyric cove]

://

[velvet gull]

Oh btw guys qq - how do y'all add your LinkedIn to thm? I tried using a link but it doesn't accept it, the field is called "LinkedIn username" but are there even usernames there? I tried pasting in what's at the end of the link to my profile but doesn't work lol

[sudden pond]

the same settings page

[velvet gull]

Yes I know, but it doesn't accept anything no matter what I put there

[sudden pond]

add only username

get a custom username it is a lot more better

[dark wolf]

found my old fornite cartridge for the atari 2600

[velvet gull]

Damn I've got a custom one and I tried that, guess it doesn't work for me lol

[sudden pond]

What is the error?

[velvet gull]

Fixed it, my surname fucked it up

[velvet gull]

All good now, thanks a lot!

[twin ridge]

Gave +1 Rep to @sudden pond (current: #121 - 77)

[sudden pond]

No problem.

[slender hemlock]

The VPN for US was updated… so the machines are in different zones, my previous VPN file was not working, the remake shows an error!! Thanks to chat GPT was able to find the error and fix it. The new VPN file is adding auth-user-pass inline, so removed it and create an auth-user-pass auth.txt line instead…. That fixed my issue and was able to get ping from the machines… the VPN is adding a block of code that shouldn’t be there…

[silver hornet]

[untold sail]

does anyone knows if you can use any.run without having to pay for abusiness email>

?

Yo, i think there might be a spam account in the room-help channel, but im not sure.

sorry, not spam, but like a phishy link

[dark wolf]

"I don't think a lot of people are doing vibe coding for the kernel" - Linus Torvalds

what phishy l;ink

?

[strong fjord]

forkknife

what's a hacker's favorite hobby

fishing

🤡

[dark wolf]

bwahahahha

What's a hackers favorite handtool?

hacksaw

bwahaha

[sturdy sequoia]

A leet hacksaw?

Anyone working on any cool projects atm?

[dark wolf]

I'm trying to run that in Arch

[strong fjord]

https://tenor.com/view/standing-waiting-thinking-analyzing-serious-gif-15743352

btw I just noticed that brave's youtube framerate or i guess bitrate is lower than chrome's

[dark wolf]

chrome wants 500 gigs of mem for each tab lol

you ahve to like click unload tab

so does firefox its ridiculous .. they dont neeed 500mb of memory for one tab

[strong fjord]

fair trade

[dark wolf]

Maybe the browsers are using our computers to mine bitcoin

[sudden pond]

I have two tabs. One for letsdefend and other a simple google search and its taking 850+ mb

[blissful current]

Hello 👋🏻

[dark wolf]

I get on work meetings and sometimes i see people with like 60 tabs

and im like wtf

[blissful current]

Can anyone tell me how to verify my account

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 23, 2025, 3:15 AM

[dark wolf]

Welcome to the jungle

[sturdy sequoia]

welcome to the house of fun

[dark wolf]

we got fun and games

[blissful current]

Thanks 🙂‍↕️

[dark wolf]

we got everything you wat, buddy, we known the names

[sturdy sequoia]

welcome to the lions den

[dark wolf]

Welcome to the jungle lyrics work well for this type of server

If you got the money, honey, we got your disease

lol

[blissful current]

Well I don't have all those

[dark wolf]

It's a song

[blissful current]

Only a photo a laptop and some cash

[blissful current]

Hmm

Well I only listen to Phonk

[dark wolf]

try this .. just see if its catchy

https://www.youtube.com/watch?v=o1tj2zJ2Wvg

[sturdy sequoia]

play that phonky music white boy

[dark wolf]

That is a classic song !! One of the greatest

[blissful current]

Well I am still a boy I guess

The songs true meaning flew over my head

[dark wolf]

yes, well it would

it would make sense if you were alive in hte 80s

still its catchy and popular

[blissful current]

I am 19+

Soo ya the vibe don't match

[dark wolf]

all good

thats gen-x music

[blissful current]

Hmm

Well it's not your fault actually

I am a person who prefers to be alone

[dark wolf]

I used to be like that too at your age

[blissful current]

Hmm so what about now?

[dark wolf]

i lead hikes up rocks and clime walls with friends

and go kayaking in rivers with my wife 🙂

[blissful current]

I also do this but alone

[blissful current]

🙌🏻

[dark wolf]

i admin afb group with 41k ppl

for hiking and get 20 ppl on hikes i lead

[blissful current]

Cool

[dark wolf]

good way to meet ppl

[blissful current]

I also have been a admin but I quit

It was too much social and banter

[dark wolf]

this is a fb group

we approve all post there is no chat

[blissful current]

It's like i get bored with people very easily

[dark wolf]

we do hikes as events

[sturdy sequoia]

what brings you here?

[dark wolf]

and people post pics of their hieks

hi shyft

[blissful current]

Well, one of my colleagues suggested that I use tryhackme and start my journey and I was just editing my profile at the bottom I saw discord token so I thought I should join and see what it has to offer

[sturdy sequoia]

do you have a background in security or IT in general?

[blissful current]

The reason she told me to do that is because I use Manjaro xfce

[celest ocean]

hope it doesn't break™

[blissful current]

Well I don't it's just I have interest and it's the only field that doesn't get me bored

[blissful current]

I also hope the same

Well I hope you guys will help me if I have any doubts

[sturdy sequoia]

yer feel free to ask any questions you have

[high crescent]

any AOC desktop backgrounds this year?

[dark wolf]

Have you read the book "The Yellow River" by I.P. Freely

[warm quartz]

hey guys so im new and i really wanna start learning about cybersecurity do yall got any tips on what i can do?

[dark wolf]

hey there

welcome, you can read #start-here to learn about the discord

on the website there are learning paths, you should start with pre-security

there are free lessons and you can decide if you wanna continue, there's a sale coming up

[warm quartz]

ye ik i bought the premium to but there are to many ways u can go so i always get stuck like idk what to learn

[celest ocean]

do you have an IT/software dev background?

[dark wolf]

start with presecurity

then do cyber security 101

then you can choose the path

[warm quartz]

ive never worked in it but ik HTML CSS angular

like basic things

bc almost everyone knows html css

[celest ocean]

I see, then I think it's best to use the learning path to start from ground up

[warm quartz]

do i need to get virtual box cuz i got low end laptop and it cant really handle it

[dark wolf]

no, there is an attack box in the browser you can use

[placid shell]

Just a question, if I notice a mistake in THM rooms, who do I contact or where to write?

[dark wolf]

#1333993673381253162

[warm quartz]

ty a lot for helping ill try it for sure

[dark wolf]

Hope you fall in love with it

its fun 🙂

[warm quartz]

im already in love just need to figure out how to use it

[dark wolf]

it takes a long time and a lot of dedication and practice

[warm quartz]

quick question i just need to follow "learn" page right? like i dont need "explore more" yet

[radiant bloom]

@trim portal Please slow down. Further spam will result in a short timeout.

[trim portal]

I only sent 3-4,,,

Hello @dark wolf

[dark wolf]

Hiya skittles

you can do a lot of reacts though haha

[trim portal]

How are you doing???

[dark wolf]

yeah

[warm quartz]

ty ty

[dark wolf]

even if you think you know it, do it

maybe some new way to do something hidden in there

[trim portal]

Can I send you a message via DM @dark wolf

[dark wolf]

yeah, for sure

[cloud quiver]

Seems like nobody appreciates my work here

[dark wolf]

what you mean

of course we do @cloud quiver but we don't see you chatting much

[trim portal]

Hello

[dark wolf]

That's why we use /report but you ninja mod, beside KGB i gave you the 6000th point lol

[trim portal]

Oh, this emoji is approved and can be sent out for more than 3

[dark wolf]

thank you

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 6011)

[dark wolf]

se now you are at 6011

Hmm

[cloud quiver]

I'm here every day

For the last two years nearly

[dark wolf]

I don't know where you chat mostly, I just haven't seen you chat in general too much

i know you do mod stuff though like ban users and mute them

when we report them, so thank you

[cloud quiver]

I come to #general only when somebody summons me in /report channel 🤣

I'm in help channels and new releases most of the time

[dark wolf]

I haven't gotten to wanting new releases yet, too much to learn still. eventually though

[unique chasm]

hello i need help

ive been stuck for too long

please

[dark wolf]

ok

what room?

[unique chasm]

burp suite

the basics

task 9

i set up the proxy all good

when i look for http://machineip the requests never ends

i never get to the website

i tried for several days so several thm vms it doesnt work

proxy or not

[dark wolf]

when is the last time you regenerated your vpn config?

they made some changes so you may need to do that and try reconnecting

[unique chasm]

i set it up recently on vmware

doesnt work

i tried using my own browser without burp or any proxy justr to see what the web page is like i cant access to it

[dark wolf]

Hmm, you know what, there are people helping in #room-help , try asking there

[unique chasm]

i tried with the attack box same thing

[dark wolf]

because i've heard people having issues connecting to the vm

oh, same with attack box?

[unique chasm]

yep

[dark wolf]

how did you configure foxy proxy

[unique chasm]

i followed the instructions in the task

i asked in room help yesterday it got lost

ended up helping someone instead

xD

[dark wolf]

haha

[lyric cove]

man how tf do i see a private profile on instagram without following them?

[sturdy sequoia]

we already told you thats illegal

[dark wolf]

you don't

[unique chasm]

i think there are straight up applications for thisd

[dark wolf]

How long does it take to cook rice?

[lyric cove]

but its family i mean like they also are underaged hence to why im worrying

[unique chasm]

go in room help

[dark wolf]

how do we know you aren't a con man Rice

[sturdy sequoia]

the reason doesnt matter

[unique chasm]

how do i get access to a blue card code without asking the owner

its for the hack a blue card room on thm

task 7

[dark wolf]

My mothers cousins friends nieces co-workers ex-roomates mother got fooled by a con man once, so i am always suspicious now

[unique chasm]

so i just stuff this machine ip thing up my arse and get going with the rest of the path i guess

[dark wolf]

well no

you can access terminal in the attack box

[unique chasm]

starting it

[dark wolf]

and try ping the machine ip from attack box

[unique chasm]

okay

pinging it

like crazy

[dark wolf]

does it work the ping?

[unique chasm]

yep

no packet loss

[dark wolf]

ok now try curl http://machine-ip

[vernal moon]

hello i have a problem with ovpn stuff

[unique chasm]

im seeing it

the page

th elight

the light

[vernal moon]

just last night i could connect to thm vpn but now i cannot

with the same configuration file

[unique chasm]

i guess its on my end if the attackbox can ping and curl the target ip

then

[dark wolf]

yeah, so just do it with the aB and fix your vm later maybe

up to you

[unique chasm]

ty boss

[dark wolf]

but keep troubleshooting, it's part of the gig!!

like a puzzle that only you can solve ;P

[sturdy sequoia]

Haha. You have to solve a puzzle to start solving the puzzle

[dark wolf]

rabbit holes .. dependencies

[unique chasm]

omw omw

ty

[dark wolf]

install discord
.. LinuxGui not found
ugh
install LinuxGui
.. L32DebugBlahkern.sh not found....
and so on

luckily it all auto installs these days

[sturdy sequoia]

Yer a lot of things just work nowadays

[dark wolf]

when we see those 45 packages installed and rememebr we had to install every single one by hand in the past one by one

but there was no instructions on what to install, just wait for the error and go find it

[sturdy sequoia]

Uurrggghh don't remind me

And the internet was so slow so looking anything up took ages

[dark wolf]

people were going on cable modems in 97 and i was stuck on modem till 2k

[ruby viper]

random question

what exactly is a hash and how is it different than encryption like RSA?

[dark wolf]

hash is not encryption

[sturdy sequoia]

Yer i was on 56k for so long.

[dark wolf]

encryption can be decrypted

a hash cannot be reversed

you ahve to guess the value and brute force it

with different guesses

but if you have the encryption key you can decrypt the file

[dark wolf]

and then you be a typical 21 yo drunk and talk crap and some kid on a t1 runs a ping -f on you

[sturdy sequoia]

are you still messing around with arch or have you got that all set up now?

[dark wolf]

it only took me a couple hours to set it up, i was spending more time setting up stable diffusion and comfui

ollama got installed pretty well with openwebui

just had to guide claude a little but it did most of it lol

I can have claude code do anything on my laptop i want

cuz it's just a toy lol

a dev box if you will

[sturdy sequoia]

yer thats something id like to investigate more. id love to have a code monkey just make all my projects

[dark wolf]

I just like to know how things work, what makes them tick

I rarely give up. In fact one of the only things I ever gave up on finding out what makes them tick is women.

[sturdy sequoia]

i just wanna skip all the boring bits. i really dont like coding but its so useful

[dark wolf]

https://tenor.com/view/throwing-papers-im-done-nope-not-today-sheldon-gif-5610220

[coarse plover]

phoning a friend : On a WiFi, within what will an IP packet be encapsulated ?

[dark wolf]

its fun to make the computer do what you tell it to

[sturdy sequoia]

it really is.

[dark wolf]

802.11 encap

are we gonna be on who wants to be a millionaire?

[sturdy sequoia]

lock it in

[coarse plover]

yesir except the networking room gods disagree
we are looking for a 5 letter word
I thought it was https i guess not

[dark wolf]

Oh snap, that reminds me, I have a wifi adapter that has listening capabilites.

[unique chasm]

okey so if i leave intercept on of course its fcking hanging

[dark wolf]

oh, a room that is using specific vocab

frame probably

[sturdy sequoia]

ipsec?

[coarse plover]

negative

[dark wolf]

the ipsec is the encryption on the data and headers, but wifi adds an encapsulation layer

[coarse plover]

im sure your answers are right but the specific word is finicky

[sturdy sequoia]

hhmmm

[dark wolf]

its an 802.11 data frame

so if frame doesn't work then idk what to say

[coarse plover]

bingo ! 1 million dollars

[sturdy sequoia]

oooohhh yer i re read the question

the ip packet will be encapsulated within a "frame"

[dark wolf]

everything at layer 2 is a frame tho

wifi or not

lol

[sturdy sequoia]

haha true. red herrings

[coarse plover]

im embarrased that i entered https.... doh ! application layer

[dark wolf]

Is Water wet (yea/nay)

[sturdy sequoia]

the osi model is giving me flashbacks

[dark wolf]

What tool can scan a remote network? A computer

[sturdy sequoia]

a scanner 😛

[coarse plover]

there are many layers to this

[dark wolf]

yes and if you look at wireshark , it maps out the layers

to help you understand

[ruby viper]

thank you

[twin ridge]

Gave +1 Rep to @dark wolf (current: #63 - 173)

[ruby viper]

I just like to ask questions to make sure I aint going crazy lol

[dark wolf]

sometimes you need a nother explanation

[ruby viper]

yess

[dark wolf]

why all hte staff leaving?

is there some mass exodus?

[acoustic crystal]

morning

[dark wolf]

hello ibn

[acoustic crystal]

morning general seir 🫡

[dark wolf]

night time for me, still saturday haha

[acoustic crystal]

oh mine is sunday morning

[elfin knoll]

Me2

[acoustic crystal]

shyft how are ya

[dark wolf]

most of the server is on sunday

[wheat hare]

Whoa....I'm getting pretty deep down a rabbit hole here...
https://github.com/emanuele-f/PCAPdroid?tab=readme-ov-file

[acoustic crystal]

i see

[sturdy sequoia]

doing alright. hbu?

[elfin knoll]

Idky its so weird to see Jabba leave or am I the only one lmao

[dark wolf]

yeah

[acoustic crystal]

day coming day going im sitting like dead man

[acoustic crystal]

jabba left

[dark wolf]

yup

[elfin knoll]

Yeh

[acoustic crystal]

was something went wrong ?

[elfin knoll]

Bro was always there since I started out so it feels super weird...it was like a thm god or something

[elfin knoll]

Dk

[dark wolf]

he quit thm, on to new things

[sturdy sequoia]

nah hes just moving on to other things

[acoustic crystal]

ooo

[elfin knoll]

So is anyone new coming?

[dark wolf]

we don't know yet who

[elfin knoll]

Right...makes sense

[cobalt spindle]

Hey hey :3

[elfin knoll]

Heyy

[simple loom]

woahhhh

hello all

this is really cool i finally found a community of people with similar interests

[sturdy sequoia]

Welcome

[dark wolf]

nice to have you

[elfin knoll]

Welcome!!

[simple loom]

currently working towards my jr pentesting cert

this stuff is really cool

[elfin knoll]

Ikr

[dark wolf]

yeah i love breking things

[simple loom]

me too

[elfin knoll]

You guys doing AoC this year?

[dark wolf]

yeah why not

[elfin knoll]

Coooll

[sturdy sequoia]

I'm gonna give it a try

[simple loom]

what i dislike about this field is how vague it is in terms of what you need to know to get a job out of this. there is like a million different certifications.

[dark wolf]

will it be easy as the prep school that hands you the answers?

[acoustic crystal]

welcome here mr. pill

[elfin knoll]

Me2...I started out early this year so its gonna be my first time
Super excited

[elfin knoll]

I highly doubt that

All tho its supposed to be beginner friendly

[ivory elm]

yo

[dark wolf]

thats good

yo skipper

[simple loom]

what are some good entry level certs fellas?

[ivory elm]

need help connecting discord account to my profile

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 23, 2025, 6:00 AM

[dark wolf]

i'd look at job ads in your area for entry level positions

see what they require

[ivory elm]

thanks

[twin ridge]

Gave +1 Rep to @dark wolf (current: #63 - 174)

[simple loom]

thank you kind sir

[twin ridge]

Gave +1 Rep to @dark wolf (current: #63 - 175)

[ivory elm]

you ranking crazy

[dark wolf]

i did a lot of rooms and training in the last 4 months

and I work in IT as a network engineer, so somethings i already know

[ivory elm]

sick, I am gonna buy the premium soon

once the discounts are out

[dark wolf]

nice

[ivory elm]

and gonna go all in

[simple loom]

the premium what?

[ivory elm]

HTB is expensive

[ivory elm]

THM

[simple loom]

Ohh yeah Tryhackme is the cheapest ive found so far

[ivory elm]

EXACTLY

[simple loom]

i looked at the ceh cert and it wouldve cost like

2k

comptia+

1.5k

[ivory elm]

sec+ is worth it

[sturdy sequoia]

And there's so many free rooms on thm too

[simple loom]

its insane dude

can you do payment plans with that stuff or what

[dark wolf]

get the entery ones, once you have a job, they will pay for you to get those

[ivory elm]

true, but I love the platform, I would like to support them, and you know have full experience

[simple loom]

youre awesome man

[ivory elm]

it's really hard, so I have to diversify my skillsets

thinking about linux admin

[dark wolf]

There are so so so many differnet things in IT

[simple loom]

I would assume Jr pentesting is the entry level for pentesting

[ivory elm]

true, but I have been applyinng like crzy

got zero call backs

fixed the resume

[dark wolf]

yeah but most jobs are for soc and sal

[ivory elm]

even forged it to see if they care about it or not

still nothing

[simple loom]

should i go for my sal1 cert too then

[dark wolf]

As a PenTester with 902 years experience with Windows 11 ..

[simple loom]

the job market is so buns

[dark wolf]

Ai would hand you the job

[dark wolf]

probably focus on what skills will help you get a job

[ivory elm]

and AI Hallucinator

[dark wolf]

I gotta get to sleep now. nighty night

[ivory elm]

sent back from future

to bore humanity to death

[ivory elm]

night

[shadow tiger]

Hola

Anyone working on any interesting Cybersecurity projects?

[sturdy sequoia]

yer i got a couple in the works

how about you?

[shadow tiger]

I got 1 major one that I am currently on

[shadow tiger]

What is the essence of your projects :

developing something, optimizing, or just working on your home lab?

[sturdy sequoia]

one is a honeypot/mitm/packet sniffing thing. the other is just a bunch of scripts to make my pentesting workflow easier

whats yours? if you wanna talk about it

[shadow tiger]

That’s sick

[shadow tiger]

Mine is a web app that parses email and uses an integrated hugging face model to analyze the headers and constituents

[ivory elm]

Crazy af

[sturdy sequoia]

ah cool. you coding all that yourself?

[shadow tiger]

The honeypot/mitm is like an executable or a script?

[sturdy sequoia]

it will be a bunch of tools all working together (hopefully)

[shadow tiger]

Yeah. With some help from AI.

[shadow tiger]

How does that work. Sorry I am asking so many questions. I just tend to be curious about how things work

[sturdy sequoia]

haha all good. i could talk about my projects for ages. i should actually do a full written plan for it. but the basics are
wifi mode - either fake AP or evil twin
wired mode - arp/dns spoofing
then filter all that traffic through some tools to pull out important information
plus add some honeypot services

[shadow tiger]

Cool. Are you aiming for a red team role or are you already in some tech role?

[sturdy sequoia]

i do various non security IT jobs. all this hacking stuff is just a hobby for me

[worn lion]

hello guys im new here and in cybersecurity too

[sturdy sequoia]

welcome

[shadow tiger]

I am a remote student studying Cybersecurity at a university in the UK. They don’t teach jack so I have been racking up skillsets (thanks a lot to THM) centered on blue teaming.

[sturdy sequoia]

ah nice. yer thm is a great resource.

[worn lion]

ooo sounds good im just learn cybersecurty ann english at the same time because this is not my first lenguague

[sturdy sequoia]

its so good to see new people join who arent shit

[quiet sapphire]

Does anyone have a team for CTF?

[worn lion]

what is CTF ._.

[quiet sapphire]

Capture the flag

[rapid merlin]

Capture the flag

[sturdy sequoia]

hacker games

[worn lion]

i dont have team just im new

[rapid merlin]

THM{Hancer_is_Handsome}

[rapid merlin]

You don't need team , all you need is skill

[quiet sapphire]

Well, a great way to learn more about hacking is at CTF events

[worn lion]

im learning now about burpsuite

[quiet sapphire]

In portswinger?

[worn lion]

Burp Suite: Intruder

[rapid merlin]

Thats great never use burpsuite on legit website because they can detect you.😂

[quiet sapphire]

I mean, in portswinger?

[worn lion]

yes but i need learning first no ?

[rapid merlin]

Port-Swigger

[quiet sapphire]

Ah, my bad

[rapid merlin]

Basic fundamental like https - cia triad , networking

[shadow tiger]

Hey. What path should I start with for CTF. I am almost done with the Junior Pentest path but, even upon completion, I am assuming that won’t still be enough to start CTFs

[quiet sapphire]

Im not very good with inglish, i still practice

[worn lion]

me too jajaja

[rapid merlin]

Who cares about grammar

[worn lion]

yes sr

[rapid merlin]

We understand your English

[quiet sapphire]

Start with standard protocols and how they work

[rapid merlin]

I also have bad grammar English

[rapid merlin]

Fuzz

[worn lion]

i can send picture ¿?

[rapid merlin]

Yes because you are already verified

[quiet sapphire]

@worn lion

https://portswigger.net/web-security

[shadow tiger]

How do I add my roles and my level on my profile?

Nvm

[sturdy sequoia]

Depends on how much you know already, but if you can do the pentest path you should be good

[shadow tiger]

Thought so too. Thanks

[twin ridge]

Gave +1 Rep to @sturdy sequoia (current: #165 - 59)

[worn lion]

thanks bro

[twin ridge]

Gave +1 Rep to @quiet sapphire (current: #2151 - 2)

[sturdy sequoia]

You should see some challenge rooms along that path that should give you some idea of what a ctf involves

[quiet sapphire]

Usually in CTF there are many types of challenges, sinces FORENSIC or WEB EXPLOTATION, CRYPTO, etc, even OSINT

[worn lion]

o my bd

[quiet sapphire]

What is this?

[worn lion]

im here

[sturdy sequoia]

Meaningless internet points

[rapid merlin]

you are famous now

[quiet sapphire]

+1 aura

[worn lion]

change your name to ms robot

[shadow tiger]

Although, I will be taking the Security Engineer path after cause I feel it could broaden my career path and not only focus on SOC roles. Who knows, I could be in grace of a sysadmin role. Role is Role

[shadow tiger]

Thanks

[quiet sapphire]

Esta bien que empieces por ahí pero.. Te recomiendo mejor ver vídeos sobre Burpsuite en acción, por ejemplo: casi toda la explotación web la harás mediante el repeater y muy específicas ocasiones usarás el intruder (Y para eso ya hay mejores variantes como WFUZZ)

[worn lion]

i things you can´t speak spanish here its just english bro but thanks

[quiet sapphire]

Ah, my bad

Don't ban me

[worn lion]

jajaja but i can speak spanish pv

[rapid merlin]

https://tenor.com/view/puss-in-boots-the-last-wish-puss-in-boots-the-last-wish-gif-27520572

[quiet sapphire]

HAHAHA

[hidden veldt]

Tbh I’m here cause I need someone to accidentally find all my passwords then tell them to me

I’m not very good at remembering..

lol

[sturdy sequoia]

contact each service. we can not get your passwords for you

[hidden veldt]

-# And I need that 2018 Roblox account back and support never helps

[hidden veldt]

Sad…

Support tells me to like, check my email, I WOULD IF I HAD THE EMAIL CHAT

😭

[sturdy sequoia]

then contact your email service support

[hidden veldt]

I’ve done that too

They told me nun

[sturdy sequoia]

then youre out of luck

[hidden veldt]

Sad

[simple loom]

why am i getting a million friend requests after joining this?

they look like bots idk

[rapid merlin]

Idk if this real but when you talk to someone from thm directly or private message they could run rce or what ever hack and control ur pc.

[simple loom]

it is

i havent messaged anyone tho

[rapid merlin]

So never talk to people randomly

[simple loom]

i cant message anyone unless i add them back

[rapid merlin]

yes

and its against the rule talking to them blindly

[simple loom]

so theres bad actors in here?

[rapid merlin]

I don't know but newbie are always get hacked😆

[simple loom]

what a supportive community lmao

[rapid merlin]

no they are not verified people

And i told u its just my hypothetical scenario not real i just want to say be-careful

[torn galleon]

thank you mods much appreciated

[rapid merlin]

I'm not mod lol I'm just walking npc here

[hallow jolt]

hey guys

[narrow yew]

@sturdy sequoia I am here now to sort things out.

[sturdy sequoia]

hi there

[narrow yew]

@chilly veldt How about an XDR? you seen those around as the SIEM one?

[rapid merlin]

https://x.com/TheHackersNews/status/1992128573902389635?s=19

The Hacker News (@TheHackersNews)

🚨 Hackers found a new way to phish — through browser notifications.

A new tool called Matrix Push C2 lets attackers send fake alerts that look like real ones from PayPal, Netflix, or TikTok.

No downloads. No malware file. Just one click — and your data’s theirs.

Learn more ↓

X · Nov 22, 2025, 7:10 AM

[narrow yew]

That is why you dont allow notifications from websites

But that reminds me to block this at work

Lets see if we cant whip out an cortex query too find these

[high torrent]

does this work only for websites? or does it also work for apps i dont have any notifications from websites

[spare scroll]

Hlo

U all developers or hackers?

[sturdy sequoia]

im a hobbyist hacker

[high torrent]

both

im mostly ethical hacker tho

[sturdy sequoia]

how about you?

[spare scroll]

Im here to learn Abt cybersecurity stuff like I'm 18 I have no idea what to do and I wanna get into this field

[spare scroll]

Cold

[sturdy sequoia]

ah cool. well this is a good place to start

[marsh lark]

read #start-here

that should help

[spare scroll]

So like is there any channel for ahh thanks

[sturdy sequoia]

hi there donut. hows it going?

[marsh lark]

good, doing the new HTB seasonal rn

going to an amusement park tomorrow

[sturdy sequoia]

awesome

[high torrent]

copied this from a thm room: according to the National CyberSecurity Alliance, roughly 60% of small companies that have suffered a cyber attack close their business after just six months This is why cybersecurity field will never die.

[marsh lark]

this is just because small companies usually don't have the money to hire cyber security professionals

[spare scroll]

Cold

[high torrent]

true i guess

[spare scroll]

Yea makes sense

[brazen rock]

uploading images is not allowed?

[sturdy sequoia]

you need to verify your account

[marsh lark]

gotta /verify

[sharp citrus]

@brazen rock

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 23, 2025, 9:32 AM

[lusty bloom]

why is eu-west-1-vpn.vm.tryhackme.com down?

[brazen rock]

I am not able to connect to vpn too

[high torrent]

Maybe thm servers down

go to #site-support

maybe someone will help you there

it seems like no body is able to connect

Im sure the thm staff is working on it now

[lusty bloom]

I noticed they don't have a status page, but I assume they are working on it too since the ip is down, so a very simple healthcheck would alert them

[sturdy sequoia]

hydra is just a command line tool. you should be able to google it or use the --help option

[lusty bloom]

man hydra

its a linux command

man stands for manual

you said you wanted to learn hydra....

no, run the command and read that, and google the rest, or just use the --help flag like shyft suggested

hydra itself isnt hard to learn, the only thing that really matters is the wordlist, compute power and stuff like that

if you want me to teach you how to install it, thats different

https://github.com/vanhauser-thc/thc-hydra

[sturdy sequoia]

if you cant install hydra on your own you might want to learn a bit of linux basics first

[lusty bloom]

totally agree

[signal kayak]

I mean its just apt install something

[lusty bloom]

you should focus on the basics before jumping into password cracking tools

[signal kayak]

But prob update and upgrade first

[lusty bloom]

yes but if you dont even know what a cli flag is, its not gonna be that easy to use a cli tool

then use the github

[sturdy sequoia]

Read the manual

[signal kayak]

Get a vm machine

Or something that you want to brute force it into

But not other people servers ofc

[high torrent]

hydra comes preinstalled with kali btw

[signal kayak]

And try each command and what it does

[lusty bloom]

wait I fucked up the screenshot

here

[signal kayak]

Or jusy read the manual by using either --man or --help if im not wring

Does anyone have any recommendation on what template i should use for obsidian?

[lusty bloom]

again, google is your friend

theres a hydra pacakge

depends on if you wanna compile from source or just use your package manager

[gaunt basalt]

man ive been trying to connect to the summit box for a few hours

keeps giving me 504 error

[lusty bloom]

yeah, seems like a lot of stuff is down

[gaunt basalt]

ah fair

[lusty bloom]

wondering if they even have healthchecks for stuff?

they should have some kind of status page

so you can get updates about stuff like this

[gaunt basalt]

maybe theyre gettin ddosed

took the name of the site seriously

[lusty bloom]

I assume make install just puts the built binary in your path, so try running the command, after reloading your terminal session

[signal kayak]

What os you on rn?

[lusty bloom]

lol