general

[merry umbra]

😔

[echo sentinel]

Nah it's fun dw

[merry umbra]

I already know basic concepts of how encryption works, the two types

[rapid merlin]

You need to work on your methodology then

[merry umbra]

Symmetrical and Assymetrical

[merry umbra]

If you dont mind, could you expanding?

Expand*

[echo sentinel]

Sure, it's normal - you will learn and figure out some methodology as mentioned

[merry umbra]

Im genuinley motivated asf

[gritty bane]

for example lets take port 22
on linux and sometimes windows systems it is the port for SSH

ssh is just a service that allows you to connect remotely to someone else's computer in the form of a command line interface (a terminal)

if you know a username for a machine lets say, then you can bruteforce port 22 with the username and a select wordlist

all of this is possible because NMAP helped you discover port 22

[merry umbra]

Where you ever at my stage?

[echo sentinel]

Duh

everyone was there at some point

[merry umbra]

But wouldn't the bruteforce attempt get logged and detected by an IDA

IDS

[merry umbra]

Any advice you would give me ? Or do I just let this process happen

[gritty bane]

correct, right now we are talking hypothetically where a system has nothing fancy like an ids

[echo sentinel]

Depends if it's implemented + how you perform it

[merry umbra]

I see

[rapid merlin]

Methodology like you know what are the steps of hacking
You start by scanning and then enumerating and then exploitation and then cleaning up but I think I missed a step or two lol but I'm so used to it I forgot the names of steps I just do it automatically
Like using nmap is for scanning and a bit of enumerating

[merry umbra]

Bro u guys are so goated

Wallahi I wish I had ur brains

[merry umbra]

THM hasn't taught me this yet

Im straight out of presecurity Lmfao

[echo sentinel]

This + try to do some easy guided challenges - they help a lot in understanding how to implement concepts you've learned

[gritty bane]

dont read too much into this

[merry umbra]

Guided challenges?

[gritty bane]

just know nmap is very useful and essential

[rapid merlin]

It's just hard work not genetics lol you'll be in our level in a year

[merry umbra]

Ill just follow the process

[gritty bane]

it is used in both blue team and red team roles

[echo sentinel]

it's a matter of skill mostly (+couple liters of energy drinks drunk while studying kekw)

[merry umbra]

Blue team because of like, say testing ur system for vulnerabilities and abusable open ports?

[rapid merlin]

Well it's a something that you need to learn on your own maybe but personally I started with tcm and they taught me about methodology first thing

[merry umbra]

😭 i cant drink anything but water

[echo sentinel]

Yup - where you get pretty much guided through solving and hacking a machine

[merry umbra]

Im an mma fighter aswell

[echo sentinel]

I was to ask why, but it now makes sense

[merry umbra]

I feel like after cybersecurity 1p1

101

Ill do tcm

[merry umbra]

I genuinley

Find cybersecurity more fun than mma

[echo sentinel]

Do some jr. pentesting + guided challs

[merry umbra]

Do you know uh

Dagestan

[echo sentinel]

Yup

[merry umbra]

Should I start guided challs rn?

[merry umbra]

Im half dagestani, and half chechen

[echo sentinel]

yeah, why not?

[merry umbra]

Oh shit

[echo sentinel]

MMA/wrestling is in your blood lolz

[merry umbra]

Ill figure something out tonight

[merry umbra]

😭

Im 15 so I think I started cybersec at a decent afe

Age

But some people here

Started at 9

💀

[echo sentinel]

Alr, I have some if you need recommendations

[merry umbra]

Yes

Please

[echo sentinel]

Yeah, it's fine - I personally stared at 14-15 as well

[echo sentinel]

Hold on

[modern fox]

https://tenor.com/view/arrival-cat-gif-20376354

[merry umbra]

How old are u now if u dont mind me asking?

[merry umbra]

Spit

[echo sentinel]

https://tryhackme.com/room/rrootme
https://tryhackme.com/room/vulnversity
https://tryhackme.com/room/basicpentestingjt
https://tryhackme.com/room/h4cked

[modern fox]

wtf

[echo sentinel]

I don't - I'm 17 atm

[merry umbra]

Are these beginner type?

[regal dawn]

holy embed

[echo sentinel]

Yeah, check them out

[echo sentinel]

Srry, doing 5 things at the time doesn't benefit always

[merry umbra]

Ill test them out

Hope they match what stage in education I am at rn

[regal dawn]

dw bbg If you didnt know you can put links in these <> brackets to auto remove the embed

[echo sentinel]

Alr, good to know. Thanks
I just copied those from a reddit comment I've made 2-3 days ago

[twin ridge]

Gave +1 Rep to @regal dawn (current: #1114 - 5)

[gritty bane]

you should maybe do those when you finish jr pentester path

[merry umbra]

These will enhance ur hand to hand skills i presume

Mind if i add u guys?

Just in the future

For*

[echo sentinel]

You have me iirc

[rapid merlin]

Add me add me (⁠≧⁠▽⁠≦⁠)

[merry umbra]

Oh yeah

[regal dawn]

Came Home > Hopped on THM > Continued the Path > Sleep

W Day

[merry umbra]

I am convinced glitch is sponsored by TCM

[echo sentinel]

Yeah and most importantly show you how you can use those tools in the wild, as THM sometimes (especially in older rooms) lacks hands-on real-life challenge directly after

[regal dawn]

May i add you too please, trying to connect with some people on the platform

[merry umbra]

Yeah, I think after jr pentesting ill do all the red team shit then hop onto HTB

Yes

Please do

Add me, everyone

😭

[rapid merlin]

Lol no I'm just here for fun I only talk here to help people cuz I know how hard it is to start from 0
In my case I was a business major so I literally started from -1

[merry umbra]

Ur a W person

All of u

[regal dawn]

send you thm link twin ✌️

[rapid merlin]

Me too me too (⁠≧⁠▽⁠≦⁠)

[gritty bane]

https://tenor.com/view/akkubaba007-jerry-laugh-akku-fav-gif-gif-16150872697915744919

[merry umbra]

Alr

[merry umbra]

Huh

[gritty bane]

htb is a bit difficult tbh

so

[merry umbra]

I mean after everytjing

[gritty bane]

maybe after red teaming path and a little bit more

[merry umbra]

Everything*

Ah alright

[gritty bane]

sure after you finish the whole red team path why not

[rapid merlin]

You'll be fine just don't rush yourself and take your time taking notes and understanding things in depth

[echo sentinel]

Still - it's possible but more difficult

Imo HTB marking is +1 to THM a.ka HTBs easy is THMs medium

[gritty bane]

more like the HTB easy is tryhackme hard 😂

[merry umbra]

Im going to take notes of everything in a way I understand i hope

[gritty bane]

but htb can be very random

[merry umbra]

I see

[regal dawn]

"finish the red team path rq"

[gritty bane]

one "hard" machine took me just 1 hour to get user lol

[echo sentinel]

Eah depends

[gritty bane]

omg thanks for reminding me i should do the capstone challenge

[twin ridge]

Gave +1 Rep to @regal dawn (current: #973 - 6)

[gritty bane]

now that i know how to use ligolo maybe i have a chance 😂

[rapid merlin]

I wrote my notes in my native language and this weekend I'll translate them so I can send them to people so remind me to send them to you

[merry umbra]

Id really appreciate them bro

Whats ur language?

I know 8 languages

9 including english

[gritty bane]

https://tenor.com/view/what-wtf-eyes-look-phone-gif-3927559383930151204

[rapid merlin]

Well my native language consist of 8 different languages so idk about that and it's written in fran/Arabic way lol

[dark wolf]

I know english, spanish, basic, perl, php, python, and bs, so only 7

[echo sentinel]

And facts - so 8

[rapid merlin]

Are you american

[gritty bane]

what about human languages

[merry umbra]

I know:
Russian, Chechen, Farsi, Arabic, Pashto, Ingusheta, Bosniak Language and Albanian

[gritty bane]

only 2?

[dark wolf]

yes

[merry umbra]

Nvm 10

[merry umbra]

I speal arabic

[gritty bane]

how in the hell did albanian get here

[merry umbra]

😭 😭 😭

[regal dawn]

Alr time for me to sleep, gotta get up in 5 hours

gn yall

[merry umbra]

Albania mentioned everywhere

Gn bro

[rapid merlin]

Do you understand the one written under port scanning?

[merry umbra]

I only understand when its written in arabic

If u send them over i hope to get them translated

Where do your notes start (topics)

[dark wolf]

I was born at Defcon 1 during one of the talks. no time to get to hospital plopped out during talk

[merry umbra]

Networking fundementals?

[rapid merlin]

They can't be translated in google
This weekend I'll translate them manually and I'll send them to you inchallah

[dark wolf]

Mazel Tov

[rapid merlin]

Well they're commands and I explained to myself how each one help and works

[rapid merlin]

I didn't understand

[merry umbra]

Jazakhallah khayr

🙏

[echo sentinel]

Bro had 20 years of exp being 12

[dark wolf]

at defcon 2 i kept getting free and picking every lock

[rapid merlin]

lock picking village

[dark wolf]

I went do defcon 17 years ago and rememeber that

[gritty bane]

if i could eat wood, i would be a wood eater

[gritty bane]

are you doing that one ctf

[dark wolf]

i was in a special class the week before defcon with fbi, nsa and police

[rapid merlin]

Have you been in social engineering village what are people mostly think about u there?

[dark wolf]

No, I'm just fabricating stories about my birth and childhood

[dark wolf]

That would be fun to go to.

I would have at least 3-4 identities ready to go

Start telling different people different names for myself

find out what story makes them talk the most

[sand trench]

shadow has a tough time with being not recognised by their typing style

[dark wolf]

So far every time I want to do something in ARch I just tell claude to do it for me

like disable screensaver and screenlock

[sand trench]

that seems like bad practice

[rapid merlin]

Glitch noticed that shadow always talks in third person for some reason

[dark wolf]

Not for a 28 year linux user

[sand trench]

well congratz... you noticed the most noticeable quirk of shadows typing

[dark wolf]

I'm interested in seeing what it does

[dark wolf]

read their prof

[rapid merlin]

One of a kind

[gritty bane]

Why did the coffee file a police report 🚓🚨

[rapid merlin]

I never wanted to be old as much as when I entered this server

[radiant bloom]

@gritty bane Please slow down. Further spam will result in a short timeout.

[rapid merlin]

Everyone is 40 and they know too much

[gritty bane]

This sucks.

[dark frost]

that's a cool origine story , your parents were that 1st Hacker generation

[sand trench]

being older than the known universe sucks as people have way to many assumptions about eldritch beings

[dark wolf]

See, fake stories is another thing you always need to be able to pull out of your pocket.

People are quick to challenge you so they try to osint yoru story

and waste their time LOL

[rapid merlin]

Glitch thinks Shadow is onto something

[rapid merlin]

Is osint a valuable skill to learn?

[dark wolf]

https://tenor.com/view/futurama-zoidberg-dr-zoidberg-regret-ask-myself-the-same-question-gif-22625347

[dark wolf]

yes

look at the mitre attack

reconnasainse is important, you wanna gain info, especially for social enginering

[tall stag]

hello general

[rapid merlin]

I want to learn it so if someone steps out of the line I tell him the name of his dead grandma

[tall stag]

what it means

[rapid merlin]

He's talking about osint

[dark wolf]

it means when a bad actor calls the help desk , they pretend to be the vp and they need to know about him to pull it off

[tall stag]

no my english bad i dont understand this word

[rapid merlin]

Which one

[tall stag]

reconnaissance

[tall stag]

okay

[gritty bane]

It means to gather information about your target

[rapid merlin]

It means like gathering information or something

[dark wolf]

oh.... it's collecting info from multiple places

[tall stag]

Thanks

[dark wolf]

finding the locations,

[tall stag]

bro learning language and cyber simultaneously brain drowning

[dark wolf]

part of the Mitre Att&cK

many companies use that

[rapid merlin]

Are you new to cybersecurity

[tall stag]

yeah exactly

i got into recently

i learned many times networking and was cut off learning

[rapid merlin]

What's the mitre attack if you don't mind explaining

[dark wolf]

its hard at first

networking is hard too, but I do it for a living

[rapid merlin]

Yeah I see you're in this server from 2023

What's your level

[tall stag]

0

i know just basics maybe not even close them

[rapid merlin]

You don't need to get that in depth in Networking to understand cybersecurity

[tall stag]

i was attended here then the server was slept as like my other servers how they do

[boreal scarab]

@dark wolf you play GTA V?

[rapid merlin]

Do you have any questions or something?

[gritty bane]

It is essentially a database full of tactics that threat actors use

That's in a nutshell lol

[dark wolf]

did on and off for a while, but not lately, not even installed

[tall stag]

yeah where can i start for like?

[gritty bane]

TryHackMe has a full room on mitre

[rapid merlin]

Thank you

[twin ridge]

Gave +1 Rep to @gritty bane (current: #304 - 30)

[boreal scarab]

Dang

[dark wolf]

got too bored with cheats and magnet guns and force fields

hahahha

[gritty bane]

Why do you cheat in every game

[dark wolf]

now they want kernel stuff, screw that

[tall stag]

i was curious about looking into websites most of the time but idk where to follow this way at

[gritty bane]

https://tenor.com/view/we-dont-do-that-here-black-panther-tchalla-bruce-gif-16558003

[rapid merlin]

You can start in the thm learning path from the beginning

[dark wolf]

Cuz i played without cheats for 30 years and now I get to cheat

[rapid merlin]

Oh well idk about that lol

[tall stag]

not the way you guys thought in first place but yeah i like to looking probably pentesting

[tall stag]

okay

[rapid merlin]

Well first you need to get the fundamentals and then you start in pen testing cuz it's not something that you start with it

[dark wolf]

Wand formerly known as WeMod, you can enable cheats in most games

[tall stag]

bro the problem is concentration overally i was even started to trying learn while standing on my feet’s looking to pc

[dark wolf]

I only play games that work with it but also msfs 2024 with no cheats lol

[tall stag]

cuz while sitting on chair after a while passing off i was just standing out and laying on my bed

[rapid merlin]

What's your native language

[tall stag]

turkish

[rapid merlin]

Write in Turkish and translate cuz I didn't fully understand sorry

[tall stag]

okay

The general problem is concentration what you guys really suggest for ambitious but lazy person

I like to watching videos as like one channel that i looking at recently the name is fern and yeah

[rapid merlin]

Well working hard is the first step there's no shortcuts in this field unfortunately and you'll need to put that extra work in

Do you know anything about cybersecurity or penetration testing?

[tall stag]

I was knowing in former but now i forgot at all

[rapid merlin]

Well you can always start again it's okay but there's 3 keys you need to know to start in cybersecurity
Programming/ Linux/ Networking

And then you can start your path in cybersecurity

[tall stag]

okay

[tall stag]

im working now and if i look and read for just now you suggest that?

[rapid merlin]

Yup those are the keys for IT in general

[tall stag]

Okay

[tall stag]

By programming means what you mentioned,is it Python?

[dark wolf]

yea, python is great

[tall stag]

okay ill peep up those things you guys have any video of it

[dark wolf]

and some C and how assembly works

being able to read code and knows what it does is the goal

[rapid merlin]

Yep anything that you want but python and c are the best

[tall stag]

and channel for explaining those things

[dark wolf]

there are hundereds

https://tenor.com/view/it's-over-9000-it's-over-9000-its-gif-6159356195145880706

[rapid merlin]

Is it okay if I suggest for her videos of other industry?

Or will I be banned

[dark wolf]

idk, check the #rules

[rapid merlin]

They say no advertising but it's a free course so idk

You tell me

[dark wolf]

i had a link removed once when i did that

to a series on youtube

[sand trench]

shadow is now again going for the sleepy sloopy sleep sloop to the beepo boope while going meep moops

[rapid merlin]

Well I just saw and I don't think there's any rule about this cuz they say it shouldn't have any gain to me or financial or something

[rapid merlin]

Do you want me to send you some links in the dm?

[rapid merlin]

Sleep well shadow

[tall stag]

yeah

please

[rapid merlin]

Okay dm

[dark wolf]

direct masssage

ahhhhh

[rapid merlin]

I didn't want to get banned and earlier they warned me about it

[pine peak]

HAIIII :3

[rapid merlin]

Sup

[umbral bay]

Are you connecting to it from the AttackBox or via the VPN?

[dark wolf]

Hiya tim!

[rocky mica]

hi guys, i am doing the lazyadmin room atm

i gained root but root.txt is just nonexistence in the files
what can i do?

[dark wolf]

it might be in a different location, try using the find command to locate it

[rocky mica]

yea tried alr

its very strange, i wouldent ask here if didnt

[dark wolf]

Sounds odd. i wonder if i did that one

[rocky mica]

i am new so level is easy

all the youtube videos shows that the only file under root is root.txt

but i have a lot of files

[dark wolf]

i don't recall that one, and my notes cut off .. dang

[rocky mica]

i can stream

[dark wolf]

I would help but in the middle of some stuff

[rocky mica]

aight man ty

[sturdy sequoia]

sup everyone. hows it going?

[dark wolf]

just chillin, how bout you

[sturdy sequoia]

just got home from visitng my parents. not sure what im going to work on now

[hard ravine]

as long as you are not promoting yourself you are good , ive redirected people to third party sources countless times

[sturdy sequoia]

for something so old HTTPS is still really secure

why cant i just sniff the handshake and view the data

stupid browsers giving warnings to users when i try to do a sneaky redirect

[cosmic pendant]

Diffe-Hellman

[vocal marlin]

Hello all, I want to learn malware analysis and development, what is the path / roadmap I should follow? maldevacademy course price is very high.

[dark wolf]

Security Analyst

[cosmic pendant]

Do you have any exprience with assembly?

[chilly veldt]

gotta lean a lot deep dived

[vocal marlin]

I learned C and Python
@cosmic pendant

[chilly veldt]

oh hey toaster

not enough

[vocal marlin]

anyone

[chilly veldt]

Malware is pretty advance

takes years to learn and study tbh

[sturdy sequoia]

Plus is very specialised. There probably isn't a thm path for it. Just search to rooms and do them individually

[chilly veldt]

there shouldn't be cause thm teaches beginner stuff

and shouldn't handle the topic about malware tbh

especially a lot of new people join and get wrong ideas

[sturdy sequoia]

There are some malware rooms but i think they're mostly blue team stuff

[chilly veldt]

yeeee

[sturdy sequoia]

Reverse shells are basically malware and they're used heaps

It's not my area of interest so I haven't really researched it that much. Interesting to think about

[chilly veldt]

I study malware daily 😄

[vocal marlin]

what roadmap are you following?

[chilly veldt]

none

I work with it

[vocal marlin]

I am reading Practical malware analysis.. Though the book is very old..

[near sapphire]

Will there be side quests this year?

For AOC

[jolly abyss]

Did anyone claim the 40% discount?

[abstract dew]

hi everyone! I wanted to buy the annual subscription and i clicked the link through the email which says 40% off for annual. But on checkout its only 25%. Am i missing something?

[jolly abyss]

In October they had 5 months free with the subscription is there anything like that this time too ?

[jolly abyss]

Remove the code and apply the black friday code

Logout and login again

It should show 40% off on the annual subscription

[jolly abyss]

Can anyone help with this ?

[floral ice]

I did lol

[abstract dew]

sorry this might sound dumb but it does not work. I dont have a button to remove the code and it does not reset with logout and login

[dark wolf]

The eerie silence filled the once active chat with nothing but the sounds of crickets and wild coyotes in the distant. The lurker sat watching the chat; even poking it with a stick, all in an effort to revive .t

Hiya KGB!!!

[cloud quiver]

Yes if you are not premium user

[dark wolf]

KGB is the real GOAT

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 6017)

[slender hemlock]

Hey KGB, I am a premium user, with this change about the VPN, I cannot ping the free machines? So, cancel my subscription in order to play free machines?

[dark wolf]

lol it worked anyway

[cloud quiver]

Try to change vpn server and regenerate a vpn file

[dark wolf]

you can access both free and premium with sub

[slender hemlock]

I do it, an it change me again to the same server that does not work… this started las friday an nobody is willing to addresd the isse. I am not nee here!!!

[slender hemlock]

It does not work, believe me!!!! This is so frustrating!!!!

[dark wolf]

YEah, i can see how that is frustrating.

[true viper]

Guys what is vibe coding? My professor emailed me (I was sick [didn’t come to class]) and told me that we’re doing vibe coding but bro didn’t explain to me what it is also, he said I gotta present my own vibe code to the class💀

[dark wolf]

Fortunately I haven't had an issue, did you email support?

[dark wolf]

its when you use ai to code things for you mostly

[true viper]

Ohhhh okay, so can it be anything then? We’re doing c++ so can I just tell A.I to code somethin for me?

[dark wolf]

yeah, but i would make sure you understand the whole instruction for the lesson

[slender hemlock]

Yes, they do not care. Only copy and paste a reply and thats all!

[dark wolf]

i see, well there you go, do you use claude code?

or just look for what ai is good at vibe coding

[molten solar]

@slender hemlock Are you absolutely certain you are using the right vpn file what does ip r say to you

do the openvpn conect, and in another terminal type "ip r" if its linux

[true viper]

Agh

[molten solar]

if windows theres an equivalent config

[rapid merlin]

Just like chatgpt and claude but this vibe coding is IDE itself run by A.I

[molten solar]

route print....

@true viper You go to your web browser and tell your computer you have a series of library books with ISBN #'s and titles. and your titles are D1 D2 D4 D7 C1 C4 and you put them in a file backwards and you need ot sort them into the right order .. can you mkae a python app to do my homework pls

It spits out code, depending on the quality of your prompt that may probably solve your issue

[dark wolf]

ip route 0.0.0.0 0.0.0.0 Null0

[molten solar]

lmao .. thats almost as good as alt-f4 diagnostic menu

@true viper Leo, claude, chatgpt, mixtral if you are self hosting etc. Your llm spams out hte code, and you copy and paste it knowing nothing about why it owrks

[dark wolf]

exactly how win11 was made

[molten solar]

Sadly i think you may be right. .. so many bugs

Which is why i virtualized it, and dump disk before sp's

[dark wolf]

hey claude write me a function that interrupts the users game every 5 minutes for an ad

[ember vector]

Reaper Pwned!

[dark wolf]

Stop the fortnite match in the middle of it for an ad lol

[molten solar]

NO.. you dont stop the fortnight match. you let it continue in the background paying people cawn continue to play and you can hear yourself getting demolished

[dark wolf]

they stop football and basketballl and baseball

[molten solar]

I think bezerk (berkely students gaming company) did commercials pretty tastefully for acrophobia.

But seriosuly, if you want people to enjoy your game and buy it, you punish the hell out of non subscribers and demonstrate the advantage paying for subscription has right out of the gate. Let them play a few games without the in game advert popover. Then after about 2 weeks start hitting them with it

At that poit you give em a game credit. You get N minutes of no popups. Then hit em again make the popup frequency propoortional to the amount of time spent playing

[slender hemlock]

Yes. I am. Im not new here. However found a trick. I am automaticly assigned to US East N Virginia Region. So , i just tried to change timo EU… ping for free machine 0… changed to Asia ping from free machine 0… changed again to US East N Virginia… and ping from free machine 1…. So the VPN is broken, but this help. Need to change and do the same after a premium machine. Sad, really sad!!! This was not like that!

[molten solar]

I think that .. strange world? strange planet?did a pretty good rip on that

@slender hemlock I honestly don't see a region .. I used to pick regions but this tim ei just downloaded a file

[slender hemlock]

For me is broken! So I am going to try this way I found waiting for the THM genious developers to fix the issue.

[molten solar]

what os?

Okay. Health GPT is a fun concept .. but there appears to be a pretty big .. shall we say hole? Maybe its intentional as an easy box

[torpid saddle]

So I’m new to a lot of this and I’m very interested in buying flipper from someone I found on marketplace is there anything I should look out for or pay attention to

[molten solar]

Whats wrong with buying it from teh company that makes them?

[sturdy sequoia]

wow. theyre so expensive

[molten solar]

Yeah. they aint cheap, but they can do a lot if you take the time to work with them right

[sturdy sequoia]

do they do much that a plain rfid reader/writer cant do?

[dark wolf]

Can you imagine going downtown and waving that around in the air like you are trying to get reception from a cell phone out in the forrest?

[grizzled sky]

ngl i want it;

[grizzled sky]

oh you have no idea;

if you're ok with dming i can tell you about some fun times with the flipper zero;

well nerd fun times;

[sturdy sequoia]

cant you talk about it here?

[grizzled sky]

eh its grayhat stuff technically;

[dark wolf]

Yeah you can dm me

[sturdy sequoia]

ah gotcha

[dark wolf]

i don't have one but i like stories

[grizzled sky]

https://www.youtube.com/shorts/EKppmgFuFwM?feature=share

this is a good example of how social engineering works;

as long as people think you are supposed to be there, you can get away with almost anything;

[novel pendant]

why its failed ? i tried with 3 ips but still same prb

[rapid merlin]

try 2nd times

Attempt 2 smb exploits

[torpid saddle]

I honestly wanna learn it and what could be done with it

[rapid merlin]

Smb exploits sometimes failed in attempt 1 but success 2nd time

[novel pendant]

change exploits ?

[torpid saddle]

As user friendly? As the flipper I’m new so any suggestions and help is greatly appreciated

[rapid merlin]

no just rerun the exploits

[novel pendant]

same

its fails

[rapid merlin]

if its still not work exit from console and type msfdb delete and then create new postgresql db by msfdb init and enter again to console

[rapid merlin]

I struggle here before but i fixed it by myself

Check the compatible payload for eternalblue use the meterpreter payload reverse_tc

Type 'show payload' when you load eternblue module

[marsh lark]

what the

[undone flax]

So ideally, compiling the PolKit exploit on the target's machine is much better than on your local machine right?

[dark wolf]

do you like it?

[rapid merlin]

Albert Einstein flipper zero

[marsh lark]

yes lol

speaking of which

[sturdy sequoia]

Can the flipper do brute force type attacks?

I should probably just google it myself

Anyone have experience with a flipper and a proxmark3?

I wonder if rfid access control systems are susceptible to injection type of attacks

[dark wolf]

hmm, i know they are susceptible to replay attacks but idk about injection

[sturdy sequoia]

and i wonder if theres a way to put that straight onto a cloned tag

[dark wolf]

well for a card, for example, you can read and copy it then with a writer you can write it to a new card

[sturdy sequoia]

well, i know what ill be researching for the next few days

yer but is there enough space on the card in the right place to fit the extra or 1=1 type command

[dark wolf]

oh, no, it's just reading a single value from the card

like pulling a phones IMEI

[pine bison]

Payload written by an LLM https://unit42.paloaltonetworks.com/npm-supply-chain-attack/

[dark wolf]

but i don't think the back end reader system has sql

[sturdy sequoia]

right, but that value is stored in a section of the tage. can that section include an injection command

ah yer

[dark wolf]

anything is possible

[sturdy sequoia]

but it would have to validate it some way. i wonder if theres a standard or if its manufacturer specific

[dark wolf]

We're all cooked

[dark wolf]

You gonna make a master key ?

[sturdy sequoia]

yer i guess that is the general idea

[hazy gyro]

Thanks Guys

[lavish canyon]

just rerun it

i ran into this same issue

[dark wolf]

I'm going to try that at the VIP night club. When I approach the bouncer and he says I can't get in I am going to raise my finger and then say OR 1 = 1

[sturdy sequoia]

bouncer = bouncer + $20

[dark wolf]

OR bouncer.health = 5

[winged nimbus]

bouncer.health = aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaA

[dark wolf]

Segmentation Fault (Core Dumped)

[rapid merlin]

SQL injection via sign language

[sturdy sequoia]

i wonder if sign language violates the "only english" rule

[narrow yew]

https://tenor.com/view/monica-monica-ghellar-ghellar-courteney-cox-courtney-cox-gif-21815956

[hazy gyro]

[tough whale]

Hello, I want to make a Bad USB as my first 'project' and test it with different things on a home environment. I want to do this practical stuff as I get overwhelmed of too much theory, what I want to ask is if these type of projects can count as well for a potential future job? Can you give me as well some other examples of beginner-friendly projects, practical like this one ?

[sturdy sequoia]

no idea about future jobs but the project sounds like fun

[celest ocean]

perhaps a keylogger? or is it too simple

[hazy gyro]

which OS u are using?

[floral shadow]

previous message not very beginner-friendly, use docker install Juice Shop and play with it

try to complete all the flag

[nocturne helm]

Anyone completed darkmatter room ?

I need some help please

[tough whale]

I want to do basic stuff, I have no experience. I just want to build it and maybe do more stuff when I am more capable, but I want to make something like a 'portofolio'. I was curious if the employers care about this at an interview

[hazy gyro]

which os are u using?

[tough whale]

I will buy a cheap laptop for this, and install linux on it

I want to make an environment for safe testing stuff

[hazy gyro]

then download arch linux it's also a project....

[tough whale]

Anything is good, I never did that ngl.

[tough whale]

So configuring it would help me, or what ?

[hazy gyro]

yup

[hazy gyro]

arch is little complicated then other linux...

btw anyone know how to get subcriber tag... on bio

[marsh lark]

gotta /verify

[sharp citrus]

@hazy gyro

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 26, 2025, 7:01 AM

[hazy gyro]

ok

[celest ocean]

meanwhile archinux :

[hazy gyro]

💀 damn! i didnt know this principal thanks for telling me

[violet dock]

Sound like a case for the authorities

[sturdy sequoia]

i wonder if its the real tom hardy

[tough whale]

https://tenor.com/view/223-gif-3253221773663411465

No, it's venom

[pine bison]

arch linux and simplicity doesn't co exist

[floral shadow]

At this point I don't think there's are good or bad project for your portfolio, just go online and search what you like and learn a lot, when you have good understanding of stuff, project will comes to your mind without even asking, you will dream them at night ahaha

[stoic mist]

does anybody know what to do i f a machine is frozen?

it's stuck like this

[stone iron]

Its the same for me. Its kept reloading

[latent leaf]

Try reloading your browser

[rapid merlin]

restart solve everything

[stoic mist]

oke

[rapid merlin]

i mean reload

[stoic mist]

changed browser. it works

thankssssss

thank you @latent leaf @rapid merlin

[twin ridge]

Gave +1 Rep to @latent leaf (current: #1622 - 3)

Gave +1 Rep to @rotund linden (current: #3290 - 1)

[rapid merlin]

welcome

[hazy gyro]

what is this guys?

[marsh lark]

useless internet points

[hazy gyro]

I thought it's like a pormotion...now me

[hazy gyro]

u broke my all feelings

[marsh lark]

well, you asked what it was 🤣

[hazy gyro]

[neat kindle]

@plush needle

this guy man

[reef plover]

I accidently delete /etc/resolve.conf
Can someone help pls:((

[lucid pumice]

:hammer: tomhardy0215#0 has been banned.

[muted storm]

not really recommended but try restart the service

sudo service network-manager restart

resolve.conf gets autogenerated on reboot

do you have resolve.conf.d or just a static file?

[reef plover]

sudo rm -f /etc/resolv.conf
sudo ln -s /run/systemd/resolve/resolv.

I just this command before

And this mess up:((

[reef plover]

It say network -manager.sevice notfound

[rapid merlin]

Why u delete your dns

[reef plover]

Idk:((

I was drunk:((

[rapid merlin]

HAHAHA wat da hel

Create a file again

touch /etc/resolve.conf

and put any dns you like there or ur isp dns router etc

[rapid merlin]

If you don't know rm means remove generally and -f means force

[reef plover]

Ye ik but i think the second line can recreate that

But it not:((

[rapid merlin]

and the ln -s u type is used to create a symbolic link (or soft link) to a file or directory.

[reef plover]

It somehow say file exists

But it not:((

[rapid merlin]

sudo ln -s /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
sudo systemctl restart systemd-resolved```

this what u did

[reef plover]

Yes

[last crown]

Anyone knows how can I remove my THM profile photo and get the default one?

[rapid merlin]

Find gif image then change to .png

sorry there no option for that

But you can ask nano gemini to make one default pfp

[last crown]

🤨 Sounds weird to get a gif image then convert to png

[last crown]

Ah ok

[rapid merlin]

Yeah your pfp will move

hahah try it if u are curios

.gif to .png

[reef plover]

Oh i just realize kali dont have autoresolve thing:((

I have to create another config and it work:))

[rapid merlin]

Good thinking

[upbeat cape]

hey gusy

[rapid merlin]

Hi anonymous

[upbeat cape]

[reef plover]

Oh btw why every pc dns are 8.8.8.8 or 1.1.1.1?

[rapid merlin]

8.8.8.8 is from google and 1.1.1.1 is from cloudflare

[reef plover]

Oh that why

[rapid merlin]

Each dns Provider have different services such as adblock, block adult site, block malware. phishing

[reef plover]

Oh wait so maybe i just miss some protected dns cuz i just add 1.1.1.1 and 8.8.8.8:(((

[rapid merlin]

Only you have to do is to choose your favorite DNS provider

like dns.adguard.com if u don't like ads/popup on phone

[reef plover]

Yo, so i can manually add addblock on phone:))?

[rapid merlin]

Yes exactly

[reef plover]

Yooooooooooo

[rapid merlin]

Yoooooo

[sturdy sequoia]

Sup everyone. Working on anything interesting?

[high torrent]

nah just woke up

[sleek hare]

Gang

Nutshell got this deal

[lavish canyon]

nope just making a program to organize my files

[sleek hare]

39€
After shipping 54€

[lavish canyon]

not bad

[sleek hare]

Ah bruh its 4GB

Bad

I'm cancelling it

Bruh

[lavish canyon]

o

☠️

[sleek hare]

Cancelled

Up to 3 days till refund

xD

Newbie mistake

I mean still it was getting avg 100 fps in benchmark

If I'll fail to cancel it ok I'll use it anyway then

Nice

I'm dyslexic or something

I swear I saw 8gb in title firstly

[rapid merlin]

Did you read other people review like the lowest stars

if its legit or not

When I'm going to shopping online i always look first the 1 star review

Mostly the 5 star review are generated or even fake comment

[sleek hare]

That's private seller

But their star rating is about 4-5ish

I got also buyer protection so if card is fake I can refund it

Within 30 days window

Or I can cancel which I'm trying

Anyways 54 eur for this is good deal so if I'll fail to get it cancelled I'm ok with it

Will have almost everywhere stable 60 fps

Atleast in games I'm playing

[merry umbra]

Hru everyone

[sleek hare]

Such as MC, Omori and Escapists 2

I don't think it will have issues with 2D xD

And MC is running ok depending on chunk ammount almost everywhere

[merry umbra]

Any book recommendations? (I already have THm)

[brittle sapphire]

good mornin' everyone!!!!

[merry umbra]

Mornin mate

[sleek hare]

Is this flags near name like new trend or sum

[brittle sapphire]

i thought i had work today... turns out i accidentally booked it off

[merry umbra]

Lmaoo

[brittle sapphire]

what a nice surprise

[merry umbra]

Whats ur work

[brittle sapphire]

idk how i accidentally booked a holiday

software engineer

[sleek hare]

Lol

[sleek hare]

Happens

[merry umbra]

Oh nice

[brittle sapphire]

everyday is a holiday innit

[merry umbra]

Software engineering is calmm

[brittle sapphire]

i just pretend to wrtie code

and do sod all

[merry umbra]

Wdym pretend

😭

[brittle sapphire]

nah am joking hahaha

[sleek hare]

Amazing

I got refund for card

[merry umbra]

What parts of UK u from

[brittle sapphire]

Manchesta

[merry umbra]

Same

😭

Moved from russia to here

Meet me rn

[brittle sapphire]

Wow

hahahaha

It's cold today innit

[merry umbra]

Proper

Suns out tho

[brittle sapphire]

Yeah, but this morning bloody chilly one

Car was iced up

[merry umbra]

Got 5 layers on rn

😭 😭

Even though it feels warm

This is beautiful weather imo

[brittle sapphire]

hahaha, ive got the heating on. I'll forget about my gas bill

[merry umbra]

🤣

[brittle sapphire]

until it comes through, then ill cry

[merry umbra]

Software engineering must pay a bit right

[brittle sapphire]

Living in the UK aint cheap haha (as you probably know)

and HMRC love taxing

[merry umbra]

Just to benefit us immigrants

I bet u want us out

[brittle sapphire]

Hahahaha, nahhh. I'm not that sort of British

I bet Russia must be much colder, eh?

[patent rampart]

why say this? you working in it?

[slow cloud]

#bookclub

might have good ones

[loud kestrel]

Can I know how you review the section after finishing it? Do you write notes or make mind maps because I don't know how to review and I feel it's a waste of time when writing notes?

[slow cloud]

writing notes is absolute key

[chilly veldt]

Sup sup

[marsh lark]

hi bella 🙂
how are ya

[chilly veldt]

Feeling gooooood, making people mad while enjoying life is the best

[loud kestrel]

Good say I write notes when I review it and how many times review it

[marsh lark]

[slow cloud]

until you grasp the concept

[marsh lark]

having fuuuuuuun on your vaca?

[slow cloud]

and understand it

[chilly veldt]

Like I'm just standing here listening to music waiting on my train and people are mad for me not being contactable

[velvet gull]

writing notes is definitely not a waste of time, rephrasing sections you read will make it more likely for you to understand and remember them. Making sure to write notes in your own words might even eliminate the need to go back and overview the notes after the session is over

[sturdy sequoia]

i dont review my notes. i just refer to them when needed

[chilly veldt]

On my way to get some cool new pants

[marsh lark]

[marsh lark]

noice 🙂

[chilly veldt]

I soooo want to train hop

[chilly veldt]

Yeeeee, some fluffy hello Kitty pants

[marsh lark]

yayyyyyyyy

[chilly veldt]

Like, I'm not your servant/emotional support bank anymore

[marsh lark]

lol

[loud kestrel]

Ok ty

[twin ridge]

Gave +1 Rep to @velvet gull (current: #539 - 13)

[chilly veldt]

THEY ARE SO COMFYYYY

[marsh lark]

ooooooooooooooo

I need new sleeping clothes

[steel ivy]

Hi guys

[slow cloud]

hi

[steel ivy]

Just found out about this site and is having so much fun with it, want to work as a pentester later on, u think its possible with enough time on the site ?

[sturdy sequoia]

youll probably need some experience and certs but yer, thm is a good start

[steel ivy]

Ty man, u work in this industri yourself ?

[twin ridge]

Gave +1 Rep to @sturdy sequoia (current: #146 - 65)

[sturdy sequoia]

i do general IT jobs, not security related

[steel ivy]

Ohh okay, i never get a advent calender myself so will be alot off fun with the one coming up now

[slow cloud]

thm is a very nice start

[brittle sapphire]

ive got a notebook just for THM haha, writing notes is king (for certain learners)

almost filled it up

[slow cloud]

i didnt write notes for like 2, 3 years while doing THM

i lost all that knowledge

i only know concepts but nothing detailed

[brittle sapphire]

Yeah, I think application is still key when learning

[steel ivy]

Site is amazing tho, perfect combo off learning and applying

[brittle sapphire]

I probably (as much as i hate to say it) dont remember most of what ive written down, until i reread it as i just havent applied that knowledge in anyway

[slow cloud]

at least you have it somewhere

being able to refer to notes is way better then going off googling

[steel ivy]

Well everything is rehersal i guess to learn

[slow cloud]

imo

[steel ivy]

I havent studied since i was 15 tho so after 2 hours i notice that i read to just get done so then i stop cause u aint learning anything then 😂

[brittle sapphire]

yeah, I do agree. Also, not just copying what you read and writing it straight down.

Try and put your notes in your own words, at least for me, it helps me have complete understanding on what I've just read

[slow cloud]

taking a break is key

[brittle sapphire]

i gotta start doign that haha

I keep trying pomodoro's but then I go straight into a 3 hour session and mess it all up haha

[steel ivy]

Haha

Well I'm still on the learning off the internet and stuff so right now i don't understand to much but i mean its what u put in everyday that gets u forward 👌🏻

[brittle sapphire]

Exactly, best of luck!

[steel ivy]

Thanks man

[twin ridge]

Gave +1 Rep to @brittle sapphire (current: #1304 - 4)

[sturdy sequoia]

Do you have any IT background?

[steel ivy]

No not at all, i have 4000 hours on csgo but that it 🤣🤣

[fallen sphinx]

heyy guys i'm looking for a game partner in 20+ anyone can be here so dm me

[velvet gull]

well that shows you can put a lot of dedication in something youre into

will be keeping my fingers crossed for 4k hours on thm for ya lol

[slow cloud]

what games?

[steel ivy]

Thanks, he i guess so, been stuck in the site for hours every day now so eventuelly i will get there 💯

[twin ridge]

Gave +1 Rep to @velvet gull (current: #500 - 14)

[velvet gull]

same question

[fallen sphinx]

grand gangster war

[velvet gull]

is that a mobile game or sth

[slow cloud]

yep

[brittle sapphire]

One thing THM does well, is it's not JUST learning. You can also do CTFs. I feel like if you did 4000 hours of learning you'd get burnt out quick

[slow cloud]

i think i used to play some gangster war game back wehn

[brittle sapphire]

I think it's a referral scam thing

Not a scam haha but money making scheme

[velvet gull]

damn on mobile i only play project sekai 💀 and sometimes go back to MOBILE LEGENDS BANG BANG

[slow cloud]

i play coin dozer on mobile

[steel ivy]

Ye for sure bro, u gotta change it up, but gotta start with the basis and go from there 😁

[slow cloud]

used to play clash royale but that game is dying

[brittle sapphire]

I used to play a clash of clans like game, and I dropped too much money on that game

Never again...

[sturdy sequoia]

I play star wars galaxy of heroes.

I do not feel great admiring that

[velvet gull]

any helldivers fans?

[steel ivy]

As i understood it the advent calender works like this, u do a task everyday and get a raffle ticket for every days complet mission and then in the end it is like a lottery or ?

[sturdy sequoia]

Yer pretty much

[velvet gull]

yeah basically, each finished room withing the aoc event gives u a ticket

[steel ivy]

Ohh well thats very fun

[velvet gull]

yeah it is, will you be participating?

[steel ivy]

Ye offcourse everyday 😁

[velvet gull]

lessgooooo

[steel ivy]

Dont get a advent calender in real life so gotta take what u get 😂

[sturdy sequoia]

They sold physical ones on the site but they sold out quickly

[steel ivy]

Ohh thats cool

[slow cloud]

i have one

or at least we have one at the office

[steel ivy]

I want to buy some hacker stuff but then at the same time it feels like what will i do with it that will not get me in problems 🤣

[velvet gull]

btw bit offtopic - would any of u guys be interested in checking out my resume to see if its nice lol

[sturdy sequoia]

Yer they can be noob traps sometimes. Definitely do your research before buying anything

[dusk gulch]

hello everyone

[steel ivy]

Ye surely

But i can imagine it is very hard to win anything in the advent calender even if u get all raffle tickets, alot participating

[sturdy sequoia]

yer its all random and there are lots of people on the site

[steel ivy]

But anyway its a fun event

Where u guys from ?

Im from Sweden

[velvet gull]

🇵🇱 POLSKA 🇵🇱

[sturdy sequoia]

australia

[steel ivy]

Ohh nice love poland, australia is so cool as well

[stone iron]

Hey guys

[steel ivy]

Yo

[slow cloud]

shit i dont have nitro anymore

[slow cloud]

netherland

[velvet gull]

welcome to the broke gang

[steel ivy]

Nice man

[slow cloud]

I gotta beg people again

[minor vault]

is there anything like support?

[velvet gull]

u gotta get a cat, you could sell toe pics

[slow cloud]

what kind

[sharp citrus]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Nov 26, 2025, 10:43 AM

[slow cloud]

you have this one

[minor vault]

i got billed twice for a one year subscription

[slow cloud]

thats mostly for payment inquiries

[dusk gulch]

What command do I use in the nmap tool to scan for open ports?

[slow cloud]

okay yeah

contact that email

[slow cloud]

nmap {ip}

👍

[steel ivy]

Alright guys need to get going, take care

[slow cloud]

ohhh yes good one

[dusk gulch]

thanks

[twin ridge]

Gave +1 Rep to @slow cloud (current: #50 - 215)

[minor vault]

Its okay, I just cant read.

[agile tiger]

connecting via vpn

[north matrix]

Can anyone help me with an sms bot

[sturdy sequoia]

a what?

[velvet gull]

what are u using the bot for

[north matrix]

SMS spoofing bot

[rapid merlin]

Another roblox question?

ahh bot sms

[north matrix]

Take over

[sturdy sequoia]

that sounds illegal. illegal activity isnt allowed here

[rapid merlin]

Ok here we go again

[velvet gull]

this is an ethical hacking server, you won't find help here

[rapid merlin]

https://tenor.com/view/ah-shit-here-we-go-gif-15190379

[north matrix]

Okay thanks

[agile tiger]

wrong sever 🤣🤣

[brittle sapphire]

Are 'can you hack x for me?' messages quite regular?

[velvet gull]

couple times a day

[floral shadow]

anyone ever got KDC_ERR_PADATA_TYPE_NOSUPP when running Rubeus in Exploiting AD room?

[brittle sapphire]

How fun!

[velvet gull]

it is, gives me a chuckle anytime I see it

[rapid merlin]

yep, usually means the DC doesn’t accept the encryption type. try forcing /aes or rc4 in the Rubeus command, fixed it for me in that room.

[floral shadow]

already tried with /enctype:[aes/aes256/rc4]

always same error

[rapid merlin]

had that issue too even after trying all enctypes, what fixed it for me was getting a new TGT first then rerun rubeus. guess the ticket was just messed up before.

[floral shadow]

I'm making a request using a certificate, running rubeus should generate the ticket

I don't have a tgt yet

[rapid merlin]

Switching enctypes didn’t fix it for me either. I grabbed a fresh TGT then ran Rbeus again and it stopped throwing that error. maybe try that if you haven’t yet, worked on my end.

[floral shadow]

how can I get a TGT from the cert without rubeus?

I only have a .pfx file

[rapid merlin]

iF you’re going the cert route you can grab a TGT with PKINIT. in that room I used kekeo to request it with the cert, then loaded the ticket and rubeus stopped complaining. not sure if that’s the intended way but it worked fine.

[floral shadow]

apparently PKINIT seem to be the issue on my case

KDC_ERR_PADATA_TYPE_NOSUPP usually means issue with PKINIT on the DC as stated from rubeus github page

[rapid merlin]

Yay that makes sense PKINIT is kinda picky in that lab if the DC isn’t allowing PKINIT for that user cert combo it’s gonna throw the same error no matter what enctype you try. in that room only certain users were able to do PKINIT so I had to switch to a user that actually had smartcard required enabled before it worked

[floral shadow]

okk so I'll try to add t2 user to Admin and RDP group and see if it works with him

[rapid merlin]

just heads up tho PKINIT doesn’t really care about admin RDP groups you can be potato tier user and still do PKINIT as long as the cert is mapped right smartcard required AD perms don’t hype PKINIT cert mapping does kinda one of those Kerberos moment things

[ivory parcel]

Hello! asking for help I'm quite confused right now, I followed the instructions but there is still no session created when I tried exploiting.

[] Started reverse TCP handler on 10.65.82.185:4444
[] 10.65.148.12:445 - Using auxiliary/scanner/smb/smb_ms17_010 as check
[-] 10.65.148.12:445 - An SMB Login Error occurred while connecting to the IPC$ tree.
[] 10.65.148.12:445 - Scanned 1 of 1 hosts (100% complete)
[-] 10.65.148.12:445 - The target is not vulnerable.
[] Exploit completed, but no session was created.

[frigid juniper]

10.65.148.12:445 - The target is not vulnerable. ?

[rapid merlin]

Metasploit room?

[ivory parcel]

yes metasploit room

[frigid juniper]

maybe you got the wrong website

wrong domain

[floral shadow]

any hinto on how to do this with kekeo?

[rapid merlin]

Change your target machine terminate other machine

[ivory parcel]

the target IP address is 10.65.148.12 I set my RHOSTS to that and may LHOST to the IP address of my attack box which is 10.65.82.185

[rapid merlin]

you just load the pfx into kekeo then request tgt using the domain user that the cert is mapped to basically kekeo does the pkinit handshake for you so kerberos stops having trust issues lol after that you’ll get a kirbi file then just import it and run rubeus again that’s when it finally behaves on that room at least that’s what worked for me

[floral shadow]

Thanks I'll give it a try

[twin ridge]

Gave +1 Rep to @pine condor (current: #1304 - 4)

[ivory parcel]

I already tried that still the same output

[rapid merlin]

each task have different machine

[ivory parcel]

oh . . .

thanks

my bad

[rapid merlin]

You are targeting a previous machine i guess

[ivory parcel]

Yeah the target machine was from the scanning part

[rapid merlin]

https://tenor.com/view/brain-gif-338783462287106063

[ivory parcel]

my bad, thankyou again hehe

[narrow yew]

wohoa

[daring wadi]

hello gents

Any Swedish lads here who have an overview regarding the pentester salaries in Sweden? Would like some advice in regards to how much money I should ask for in an interview tomorrow afternoon. Slide in my DMs / reply here, whatever

I've got 3 YoE, great references, OSCP, SCS-C01

much love

[narrow yew]

Look at unionen.se for salary references

[daring wadi]

I

I've done this before (checking various online sources) and while its helpful, in the past, what helped me the most is just talking to people

[narrow yew]

https://www.iths.se/etisk-hackare-lon/#:~:text=Ingångslönen för en etisk hackare,60 000 kronor i månaden.
https://www.iths.se/penetrationstestare-lon/

[daring wadi]

the online figures can be a bit misleading (in both directions)

[narrow yew]

It also depends where in Sweden

[daring wadi]

well, Im not actually in Sweden, but in Czech. I'm trying to figure out what I should set as my daily rate

I'm gonna be a contractor, external

[narrow yew]

the numbers on unionen.se is based on what their members report every year. It is a farily good source

[daring wadi]

aight

the role is fully remote

so ideally I should be cheaper than a local, but only by a little bit

[narrow yew]

Consultants are more expensive than local

[daring wadi]

contractor =/= consultant

[narrow yew]

Because they either hired experts or temp

[daring wadi]

and not necessarily

it would be a long-term ongoing B2B employment

[final pilot]

hi ! in the room of powershell, I can't place any orders; this message appears: captain@THEBLACKPEARL C:\Users\captain> Get-LocalUser
'Get-LocalUser' is not recognized as an internal or external command,
operable program or batch file.
what is the problem plz ?

[gusty inlet]

Are you in a powershell cmd?

[narrow yew]

I work in a company where we have heaps of consultants in all departments and levels. They are more costly per hour than an employees.

[final pilot]

yes

[daring wadi]

obviously, but it also depends how many hours they actually get to work

[gusty inlet]

Doesn't seem like it from the text you wrote. It should say PS before the path.

[narrow yew]

Charge a lot, they hire you for your expertise. They can get an intern cheaply

[daring wadi]

yeah but what is a lot lmfao

I was thinking 300 euro / day

[daring wadi]

is that too low?

[narrow yew]

A DAY

nooo

Our devs that are senior have 150€ per hour in fee to the constulant company

[daring wadi]

LMAOOO okay

[narrow yew]

See above. that is 80-90€ per hour

on Timos image

[daring wadi]

I mean I will also base it on how much work they've actually got for me

[final pilot]

ok, how can i do it so ?

[daring wadi]

if its 3-6 MDs per month, I will upcharge obviously

if its effectively full time work, I could charge a bit less

[narrow yew]

In sweden we look at hourly

[slow cloud]

dont you also get a normal pay?

for like working the job

[daring wadi]

no, I'd be a B2B contractor

[narrow yew]

So present hourly and full day price

[slow cloud]

300 a day is crazy tho

i get a little over half i think

or a little less

not quite sure

[narrow yew]

He will be richy rich

[daring wadi]

not quite, its a small company, I don't think they are looking to pay me anything THAT amazing lmfao

I need to striek a balance

will see

[slow cloud]

just talk with them about it

[narrow yew]

I make 35€ per hour, but I am not a consultant

[slow cloud]

im sure they have a number in mind

[slow cloud]

jesus

😂

thats quite a bit

[daring wadi]

thats gross? as a full time employee? you're swedish I assume then xd

[narrow yew]

And I am the lowest paid in my team

this is before tax

[daring wadi]

right

[slow cloud]

i think you also are a bit older ( no offense) but that impacts the pay

[narrow yew]

I have fixed monthly

[daring wadi]

I'm 28, with 3 YoE, and in Czech I am top1% ish earner

[slow cloud]

yep same, roughly 17 euro an hour i think, for my first full time job position

[daring wadi]

on full remote

[slow cloud]

i want more money

never enough money

[daring wadi]

ngl 60k sek per month gross is hella ass

actually

in sweden

LMFAO

horrible salary

[slow cloud]

thats 5.5k

euro

thats ass?

[daring wadi]

IN SWEDEN

HELLO

YES

40% tax

• living costs

sweden isn't cheap

Imagine doing highly specialized IT work, living a regular middle class life, and at the end of the month you can save maybe 500 euro

[slow cloud]

tax here is 30% i think

[narrow yew]

On what?

[daring wadi]

atp im working mcdonalds lol

[daring wadi]

on gross income, no?

[narrow yew]

33

[daring wadi]

...still communism

[slow cloud]

thats normal

[daring wadi]

my effective taxrate is about 12%

I make 4200 gross / month

I get to save upwards of 2k euro per month

[slow cloud]

i pay 37,48% tax

on my income

👍

[daring wadi]

https://tenor.com/view/meme-our-now-gif-21036569

[narrow yew]

It depends on where in sweden but somwhere around that

[slow cloud]

i might move to sweden i see

more money

[narrow yew]

It depends on the company but in Cyber, quite good pay

[slow cloud]

it always depends on company

i get a certain amount rougly before tax

for SOC

[narrow yew]

then you would like my team

[slow cloud]

keep in mind, im 22 and this is my first full time position so i would say its pretty good

[slow cloud]

👀

[dawn wren]

THM just needs to improve their attack box's and virtual machines for the challenges and walkthroughs that is my only complaint as a premium member.

[slow cloud]

using your own VM is reccomended over using the attackbox

[smoky gyro]

i have a aptitude test tmrw can you all help me how to cheat

[slow cloud]

https://tenor.com/view/yes-man-no-man-no-gif-7347715096894588969

[smoky gyro]

pleasee...

[slow cloud]

Let me think about it

https://tenor.com/view/the-simpsons-homer-simpson-good-bye-bye-no-gif-16925608232308805852

[gusty inlet]

No.

[smoky gyro]

js drop the tool

[narrow yew]

https://tenor.com/view/cheater-rhop-gizelle-gif-6039880

[slow cloud]

drops the tool

[dawn wren]

Im good i am done with VM nonsense their's is fine just minor tweaks is more than enough.

[floral shadow]

may I send you a message? I'm still stak with Rubeus

[narrow yew]

Tell me what the test is about

[slow cloud]

about aptitude

[pine bison]

Sorry. Meant to reply to the original message XD

[pine bison]

lol what?

[velvet gull]

bro...

[tame island]

Is anyone having connection problems with THM's free VPN?

[pine bison]

@marsh lark I bought annual. wanna check out the new red module for web

[marsh lark]

oooooooooo, nice 🙂

[narrow yew]

oh

[pine bison]

prolly won't touch it until jan 2026 Wanna focus on htb for a bit

[marsh lark]

[pine bison]

I'd love to try out some boxes tho. ngl specially the ad rooms

[velvet gull]

indeed

[rapid merlin]

Its laggy haha sometimes the fire esr browser freeze .

[pine bison]

https://infinity.cyberwarfare.live/pricing $1/year ALL LABS ACCESS wtf

[slow cloud]

yeah but cyberwarfare sucks

[pine bison]

That could be true but it's $1. Wouldn't hurt

[merry saddle]

hello

i passed my class

I got the maximum grades