general

[wicked cove]

my intelligence compared to y’all’s is like a comparison of a autistic turtle

[sturdy sequoia]

here we go again

[queen flare]

@gusty inlet

[wicked cove]

what did I do

😭✌️

[tropic sluice]

autistic turtle to what

[tawny bolt]

I’ve already reported earlier I think mods are asleep

[wicked cove]

just reporting me for no reason man

✌️ 💔

[modern bay]

You can't mention that in a discord hacking group because you know

[wicked cove]

mention what

[queen flare]

oh, i tagged kgb before but pinged dkob in case his timezone is off.

[wicked cove]

bro I don’t know

[tropic sluice]

illigal hacking

and ignoring ppl when they tell u its illigal

[wicked cove]

nice spelling but it’s whatever if I get banned

[modern bay]

I got to be careful with you ...

[wicked cove]

fr what they gon sentence a minor

[marsh lark]

probably very early for them

[sturdy sequoia]

why cant all teenagers be as mature as you are?

[marsh lark]

[tropic sluice]

i thought he was an adult

[modern bay]

Sentenced to 5 hours without tiktok to improve attention span

[tawny bolt]

No he’s 13

[wicked cove]

WAIT WOAH WOAH NO

CHILL

[queen flare]

@marsh lark may i send a friend request? (since you've added all my friends and not me)

[tropic sluice]

donut?

[marsh lark]

sure lol

[queen flare]

ok done

[tawny bolt]

Yes

[tropic sluice]

huh

[marsh lark]

I’m 14 lol

[celest dirge]

Sup chat, what did I miss?

[tropic sluice]

not much

[queen flare]

https://tenor.com/view/woah-saturday-night-live-ooh-wide-eyes-open-oh-wow-gif-330822258640101097

[sturdy sequoia]

oh boy, so much

[tawny bolt]

Femboy spam

[queen flare]

everything interesting

[modern bay]

What about tomboys

[wicked cove]

Noooo

[tropic sluice]

yes

[celest dirge]

Ohhhh, alrighty

[wicked cove]

femboys best

[tropic sluice]

about equal

[celest dirge]

Okay, yeah that's something new

[wicked cove]

femboys a point up

[queen flare]

0xNexion now be madly scrolling up to see what went on

[tawny bolt]

Who is your pfp

[queen flare]

borat

actor is sacha baron cohen

[celest dirge]

Your name reminds me of a blog about a malware that was posted on the Fortinet blog
https://www.fortinet.com/blog/threat-research/iot-malware-gayfemboy-mirai-based-botnet-campaign

[tawny bolt]

Bro 😭

[celest dirge]

Crazy innit?

[wicked cove]

ts is NOT a Chinese security firm ware

[celest dirge]

I'm about to

[wicked cove]

what’s so wrong

[tawny bolt]

https://tenor.com/view/stan-twt-reaction-meme-funny-begging-crying-gif-11151243012681431164

[wicked cove]

that’s just a femboy

[tawny bolt]

That’s not the one I replied to

[hushed carbon]

He was talking about the dancing guy

[wicked cove]

oh

MB

[celest dirge]

I think I have enough context
-# I think

[wicked cove]

that’s on me twin

[hushed carbon]

[tawny bolt]

[wicked cove]

what do yall do in ts server

[hushed carbon]

Opus 4.5 made this is it good

[hushed carbon]

Kiss and cuddle

[celest dirge]

This is?

[modern bay]

Tf you think you're doing sending me a friend request

[wicked cove]

Ohhh

[hushed carbon]

Website

[wicked cove]

I add lots of people for unknown reasons

mb

I need to stop adding random people

[celest dirge]

Sorry for stalking your bio, but I got the reference 🔥🔥🔥

https://tenor.com/view/gta-big-smoke-cluckin-bell-food-fast-food-gif-23787879

[wicked cove]

Tuff reference

[modern bay]

[celest dirge]

San Andreas will always be my fav game

Mainly because it was part of my childhood

[severe ore]

Guys listen

[modern bay]

I am deaf though

[rapid merlin]

Did you play red alert 2 before?

[sturdy sequoia]

I'd rather not

[celest dirge]

Well, we'd love to, but you're muted

[tawny bolt]

No

[sturdy sequoia]

They tried to ping everyone

[modern bay]

What about Nfs 2006

[rapid merlin]

Need for speed underground 2 i know that

[wicked cove]

why don’t they just make it not work

instead of muting

[tawny bolt]

Why do people do that knowing they will be muted immediately

[celest dirge]

I played Rivals, which was by far a really good game.

[sturdy sequoia]

I doubt they read the rules

[rapid merlin]

You have son right now if you play warcraft 3 ft and dota

[modern bay]

Just like the people that go in tight caves and end up stuck

[wicked cove]

fuck cave divers

[tawny bolt]

That actually seems fun though

[wicked cove]

Hell Na

[celest dirge]

I don't think it's about reading the rules but rather having some common sense and a bit of ethics.

But that's just me.

[tawny bolt]

It’s not even a funny troll it’s just stupid

[sturdy sequoia]

Yer that too. Some people are just...... different

[modern bay]

Do it then

[celest dirge]

They're kids, so it's to be expected.

[tawny bolt]

I would but I’m too fat. I wouldn’t be able to make it past the entrance

[steady pewter]

Ehh.. that shouldn't be an excuse though..

[modern bay]

Bro's holding himself back

[celest dirge]

Yeah, I definitely get what you mean, sometimes questionable.

[wicked cove]

back again

[sturdy sequoia]

I still want to follow the rules :p

[wicked cove]

My twins js went to sleep

.fm

[tawny bolt]

Bro has twins 😭✌️

[celest dirge]

Yeah, that may be the case, but not all young individuals have fully matured mentally yet, I'd say 50/50.

[wicked cove]

unc do u not know slang ✌️

[tawny bolt]

Plenty of adults who never mature either tbf

[silk coral]

Wait there is rules here?

[modern bay]

Some people are extraordinary and have a wide range of ... Backgrounds and abilities

[sturdy sequoia]

Also true

[steady pewter]

There are also very mature young individuals too.

[sturdy sequoia]

Exactly

[hushed carbon]

Like donutmaster 🍩

[wicked cove]

when u say abilities I think of people ddosing in Xbox parties

[celest dirge]

Sometimes, I wish the entire human population had some sort of mental maturity.

[wicked cove]

say one wrong thing mane and my router getting fried 😡 l

[celest dirge]

And a bit of competency

[tawny bolt]

We are just hairless monkeys

[wicked cove]

Anyone know how to be kinda immune to ddoses

[modern bay]

I bet you were not present for the black ops 2 lobbies

Oh good old days

[sturdy sequoia]

i blame the parents

[wicked cove]

w

[tawny bolt]

Cloudflare

[hushed carbon]

Firewall

[steady pewter]

https://tenor.com/view/yes-pickle-thatsapickle-spongebob-patrick-gif-20410132

[steady pewter]

[wicked cove]

oh is that why I haven’t been ddosed ever since Ive used ts

[celest dirge]

Unfortunately, I never got to participate cuz I never had Xbox live. I did however have black ops 1 and 2 along with good ol Minecraft during those days.

[hushed carbon]

Maybe u just unknown

[wicked cove]

I play rainbow six siege and rust on Xbox and I got ddosed with all my rockets during a raid

😔

[modern bay]

Not yet i am going to make your fridge show screenshots of your messages

[celest dirge]

Disconnect yourself from the internet.

[modern bay]

So your parents can see

[wicked cove]

good

[wicked cove]

what about my e kittens (satire btw)

[steady pewter]

This made me laugh.

[hushed carbon]

Do smart fridges have operating systems

Or firmware

[steady pewter]

Yes.

[celest dirge]

Yw!

[steady pewter]

They do.

[wicked cove]

My friend connected to his Samsung fridge and let me say words on his fridge and it was so loud 😭😭

[hushed carbon]

Yes to os?

[tawny bolt]

Is there a way to touch grass while still sitting in my gaming chair

[steady pewter]

both. You need firmware and an OS.

[modern bay]

Grass keyboard

[celest dirge]

DoorDash or GrubHub.

[steady pewter]

Grow some wheatgrass in a pot.

[hushed carbon]

Arch linux on Samsung smart fridge

Ai powered toaster🤤🤤

[celest dirge]

Actually, better yet, just ask someone to pick up grass and bring it to you

[tawny bolt]

Unfortunately my mom’s basement gets no natural sunlight so it would immediately die

[steady pewter]

That thing will burn your bread out of spite.

[steady pewter]

Have you heard of || UV lamps ||?

[hushed carbon]

Ai needs to power everything

[tawny bolt]

Light burns my skin so that’s a no-go

[steady pewter]

Put it into a box.

[tawny bolt]

Holy ragebait

[celest dirge]

Yeah, I'm a cybersecurity guy, so of course my house is fully integrated with AI👾

[tawny bolt]

My kitten waifu steals and sits in all my boxes

[sturdy sequoia]

your what?

[modern bay]

How are you not a mod

[tawny bolt]

Ikr I have so many e-kittens it’s unbelievable

[celest dirge]

Just gonna leave this here

[modern bay]

What about e dogs

[steady pewter]

https://tenor.com/view/batman-im-no-community-abed-batmana-bed-cant-sleep-gif-14104787

[tawny bolt]

capcut

[hushed carbon]

I went to bed without finishing my website today

[tawny bolt]

I’m a cat person, sorry

[tawny bolt]

Is this your cat?

[hushed carbon]

Yes

[modern bay]

You'll have time for it after the mods check logs

[tawny bolt]

They are very cute

[celest dirge]

I can relate to the capcut once. I remember staying up all night learning fractions on top of fractions. I had a can of monster and some candy until I had a breakthrough of understanding.

[hushed carbon]

Huh

[celest dirge]

Cat is super adorable, here's mine. A bit dated but

[modern bay]

If they ban you, you'll get more time

[hushed carbon]

Very cute

[hushed carbon]

Why would they ban me

[celest dirge]

Thank you, I love her with all my heart

[twin ridge]

Gave +1 Rep to @hushed carbon (current: #3411 - 1)

[tawny bolt]

Femboy-posting. They are trying to silence you

Literally 1984

[lost pelican]

https://tenor.com/view/cat-meme-cat-cats-cat-hug-cat-love-gif-9176149428765300540

[dark wolf]

Time to play HD Poker as 3 players on 3 accounts at the same table LOL

[lost pelican]

Rake

[celest dirge]

I suddenly have the urge to learn assembly language.

Actually, I might just do that throughout the entire night.

[queen flare]

why is this showing up instead of my ip starting with 10

can anyone tell me whats going on here?

[wicked cove]

This happens to me when I have a private dns

instead of public ip I mean *

[marsh lark]

iirc thm gives a private ip now

[wicked cove]

I got a private ip and it starts using 192

[marsh lark]

or at least, 192.*

[wicked cove]

Very annoying for video games

[marsh lark]

10.* is also private, but

[queen flare]

so this is normal?

[marsh lark]

yeah

[modern bay]

Because i have root in ur system

[queen flare]

in that case, what ip am i supposed to use for LHOST in exploits?

[marsh lark]

the tun0

192.*

[queen flare]

oh

[marsh lark]

yep

should work exactly the same

[queen flare]

oh ofc, i am an idiot

if i am connected through vpn, the private ip should work

smh

[marsh fern]

yo how do i protect myself if im being targeted by cyber criminals

[hushed carbon]

Hi donutmaster

[queen flare]

that's a vague question but follow good cybersec practices ig

[marsh fern]

using a vpn

and

like

what other things

[modern bay]

Click the link to my website for more info

[sturdy sequoia]

dont click on dodgey links

[queen flare]

using password managers, not reusing passwords etc.

[marsh lark]

don't click on phishy links, or download phishy stuff

[marsh fern]

Alright

Got it

no

im not running

shit

[queen flare]

good

you're starting to learn

[marsh lark]

good, best not to download from the start either

[marsh fern]

:D

[modern bay]

Congrats bro you won a new iphone link in dm

[marsh fern]

nuh uh

[queen flare]

i am the nigerian prince

i need money

[marsh fern]

LOL

[modern bay]

Yuh uh

[marsh fern]

double it and give it to the next person

[queen flare]

i am the next person

[modern bay]

https://tenor.com/view/star-wars-nuh-uh-vader-gif-5071198947190348918

[marsh fern]

2 iphones and tons of malware for you

[modern bay]

What if i am fr fr

[marsh fern]

i already have one

[modern bay]

You'll never know unless you check

[marsh fern]

so

nah

ill pass

[modern bay]

Well you can sell

[marsh fern]

buddy no

@queen flare someone's threatening to edr me

[queen flare]

edr?

[marsh fern]

yea

[queen flare]

what is that

[marsh lark]

endpoint detection and response?

[marsh fern]

They didn't specify

[queen flare]

they're bluffing

block them

[modern bay]

No they're not

[marsh fern]

Alrr

ok it moved up to swatting

[queen flare]

do they know your location

[marsh fern]

no

[marsh lark]

yeah, I think they might be bluffing lol

[marsh fern]

he sounds like a squeaker

[marsh lark]

the only reason they moved up is because they want you to be baited I think

[queen flare]

then just block them and ignore them

[modern bay]

What if they're legit

There are good people that like to help

[marsh fern]

Guy's saying i my infos in a restorecore leak

There's

[queen flare]

if they could do something, they would have already done it instead of threatening u

[marsh fern]

:(

[marsh fern]

yeah it's not my ip lmao

[queen flare]

they're just baiting u

[modern bay]

No he's a good guy

Check dm for free iphone btw

[marsh fern]

ima shove that iphone up someones ass if you mention it again

Can't they ddos it

[marsh lark]

not how DDOS works lol

[marsh fern]

oh

[modern bay]

Oh just set up proxy server for ur fridge that should do it

[marsh fern]

This guy's smoking salvia or something

[modern bay]

Not cool

[wicked cove]

Mine would say Georgia but I live in Mississippi 😭

they think there so tuff when they use ip grabbers

[marsh fern]

real

bruh this guy's saying hes 764

💔

so tuff boi

[modern bay]

I use mac address grabber

[wicked cove]

hey dont do that

Grrrr

[marsh fern]

do image loggers exist

[queen flare]

a logger, as you may guess logs something

[sturdy sequoia]

Can you be more specific

[queen flare]

image logger certainly is not a popular term

so u need to explain what you're thinking of

[modern bay]

Yea you gotta open port 3389 to stop it

[tawdry crescent]

Can I through in a link here? It is related to THM...

[hybrid plover]

🤣

[tawdry crescent]

I mean I'm just gonna copy paste a LinkedIn post's Link.

All the better then.

https://www.linkedin.com/posts/haris-afridi-globex_tryhackme-recapme-2025-activity-7405117446942142464-Tg7m?utm_source=share&utm_medium=member_desktop&rcm=ACoAAF1iWLIBlasGe8hHxPu_XzfHzvB4h3jMEgo

My ReCapMe 2025 at THM. 🥳

[modern bay]

No way people are sharing those

[modern bay]

Free will

[sturdy sequoia]

Different people like different things

[silver hornet]

I didn't even know that I used to be at this rank

[steady pewter]

That's one way to put it.

Although I'm sure that "getting babied" and receiving support are two different things.

[modern bay]

Well ur dad has counter evidence for that

[marsh fern]

like clicking an image or downloading it gives the other person your ip

[tawny bolt]

I don’t think that’s possible

[marsh fern]

yeah i thought so

this guy says hes harmful but sounds like a squeaker

Im just fucking with him rn

[tawny bolt]

Why do you care what others are doing in their learning journey

[modern bay]

Possible for links though

[sturdy sequoia]

why?

[marsh fern]

Bored

[sturdy sequoia]

you need a better hobby

[marsh fern]

true

[steady pewter]

https://tenor.com/view/nonoriv-explosion-exploding-let-it-blow-gif-15700397

Yeah, do something like this:

Become a billionaire.

Eh.. no need to comment on their learning process.

[tawny bolt]

Yeah but no need to be rude about it

Everyone learns differently and at different paces

[modern bay]

No they need to look though

[tawny bolt]

I mean to me it sounds like you’re implying people who use THM are stupid

Ok

[steady pewter]

CTFs

What I like to do, is solve a CTF myself, and then cross-reference it to writeups to see how I did.

[brittle bramble]

can someone help me with a simple issue im having? im new to linux and THM so please be easy lol

[tawny bolt]

What’s the issue?

[fringe nacelle]

Leaving comfort zones are hard though

[brittle bramble]

Room: offensivesecurityintro
Task 3: dirb https://fakebank.thm/ (find hidden links)
Issue: failed connection to host it says in terminal and found 0 while there should be two?

in the terminal it says posisble cause: couldnt connect, but why? im new to linux too, so AHHHH

[tawny bolt]

Are you using an AttackBox or OpenVPN?

[brittle bramble]

i have no idea gang i wont lie

how do I see

how can i fix

and what does it do

[tawny bolt]

The AttackBox is the one you use in the browser on the THM website

[brittle bramble]

oh I tried on both

said the same thing

on on a new machine i just got

and decided to try ubuntu

[marsh lark]

could you send a screenshot?

[brittle bramble]

yes just one moment !

:3

nevermind gentlemen

the issue at hand is resolved

it is simple to put it

i am just dumb

[tawny bolt]

I was about to say, I just ran the command and it's working on my end

Glad you figured it out

[brittle bramble]

yeah I had been mistyping the link the whole damn time 🥀

[wicked cove]

what is the job where u help old people with technology because I think I would be good at tha5

That*

[marsh lark]

I..... don't think there is a job like that

[pseudo light]

Brother can someone explain why am I having trouble connecting to remote pc access in attackbox??

[cold junco]

Small business PC shops do a lot of helping elderly people. Geeksquad does too, but geeksquad generally doesn't know what they are doing.

[wicked cove]

Tech help?

[marsh lark]

that would be helpdesk, isn't necessarily for "old people"

[pseudo light]

Hello @hushed carbon brother here??

[winged nimbus]

most of it is volunteering

[prisma mesa]

what is the commmand cd challenges/ used for ?

[sturdy sequoia]

change directory to the challenges directory

[winged nimbus]

it is to navigate into the challenges folder

it is like double clicking a folder in windows

[prisma mesa]

ok it means that iam going into challenge flder in my desktop

[winged nimbus]

yes

[prisma mesa]

ok but then how can i know or see if there is that folder in there

[sturdy sequoia]

ls or dir depending on what os youre on

[winged nimbus]

if you are on linux, you can use the command ls challenges

or if you are already in challenges you can just run ls

[prisma mesa]

ok understood it i said ls enter then i saw challenges/ so that means that there is a folder called challenges in my desktop

and to enter that folder i have to use cd then the folder name / then thats how i enter in the folder

[winged nimbus]

if you find a command that you don't understand, you can use man to open the manual for that command, for example man ls or man cd

[winged nimbus]

yes

[winged nimbus]

You don't necessarily need the / in challenges

[prisma mesa]

ok thank u very much

[winged nimbus]

alg

[rapid merlin]

what the best way to learn how to use kali linux properly

man

whoami

🥀

[solemn breach]

wsupp tryhackthebox people

ls depression

ls anxiety

python anxietystopper.exe

git clone https//dontpaythetherapist.git

[prisma mesa]

what is the use dir,dir /a

[winged nimbus]

dir is like ls but for windows

[lost pelican]

[elfin walrus]

Hello

I’ve been looking for a place to learn about hacking I wanted to learn it just as a useful skill and it would help with my bad computer skills. Looking for a place to start that won’t steal all my details

I’m open to pointers or advice

[sturdy sequoia]

#start-here

[elfin walrus]

Thanks : )

[twin ridge]

Gave +1 Rep to @sturdy sequoia (current: #90 - 111)

[covert crest]

Hello

[prisma mesa]

i completed all the roons in advent of cyper prep truck and i cant see the tickets i got how can i see it

[sturdy sequoia]

you dont get tickets from the prep track

you can see your tickets on your dashboard. and you dont "use" tickets, there will be a raffle

[prisma mesa]

bro make me understand this do i have to finish all the challenges in there like advent cyper linux cli shell fishing marry all or just the advent

[sturdy sequoia]

you dont have to finish any but for every one you do finish you get 1 ticket

[hearty finch]

Bro what are side quests? Does they offer a ticket?
Have you solved any...

[prisma mesa]

so now finishing the advent cyper prep truck i got 1 ticket and i need to finish others to get more tickets

[sturdy sequoia]

side quests are tough challenges. each side quest you finish also gives 1 ticket. i have comepleted one side quest

[sturdy sequoia]

yes

[tawny bolt]

Yes they do and they are much harder than the regular quests

[hearty finch]

Okay

[sturdy sequoia]

not a single person completed side quest 1 in the first 24 hours

[hearty finch]

Ohh looks like they are for pros...
Should a beginner try it?

[sturdy sequoia]

i mean you can try it. but dont expect to get very far on your own

[hearty finch]

Okk bro🫡

[low nebula]

does advent of cyber rooms can give you by chance 3 tickets max?

[sturdy sequoia]

each room gives 1 ticket

[low nebula]

oh ok ty

[worldly pollen]

good morning

[leaden shale]

hello

[sturdy sequoia]

@brazen egret please dont dm/fr without asking first

[grizzled sentinel]

I’m opening spots for 4 experienced individuals only. If you think you qualify, DM me

[sturdy sequoia]

spots for what?

[novel ingot]

spots for what ?

ah

raced

[grizzled sentinel]

All details are shared privately

[novel ingot]

right

seems legit

[sturdy sequoia]

what? you dont trust a random invite from an account that was created yesterday?

[novel ingot]

what's your prediction about the mystery mission here ? "I wAnT tO h4cK tHe g0uVeRnMeNt"

[silver sky]

https://tenor.com/view/i-see-no-problem-here-crazy-eyes-gif-12788383

[sturdy sequoia]

haha nah i think its a lot less than that. my guess is theyre trying to stalk someone

[rapid merlin]

@dark wolf what about dis one

[novel ingot]

the guy's name is matrix so maybe he wants us to choose a pill ?

[grizzled sentinel]

Creation date doesn’t matter my friend

I don’t discuss details publicly

[silver sky]

I'm not your friend pal

[novel ingot]

so blue or red pill ?

[grizzled sentinel]

alright then

[rapid merlin]

Am I tho

[silver sky]

https://tenor.com/view/scammer-scam-redeeming-whyareyouredeeming-kitboga-gif-19964723

[twin flume]

Has anyone gotten a THM hoodie? If so, how does it fit? True to size?

[silver sky]

I've got one from like 2020. It's true to size then. Idk about now but their t-shirts are pretty spot on

[twin flume]

Awesome thanks Santa 😉

[twin ridge]

Gave +1 Rep to @silver sky (current: #36 - 308)

[silver sky]

Your welcome! Ho ho ho!

[carmine pollen]

i cant connect using ssh in attackbox it's been days since it became like this

[novel ingot]

are you connected to the THM VPN?

[carmine pollen]

no, im only running attackbox

[novel ingot]

and you want to ssh from your computer to the attack box ?

[twin flume]

I would try running Kali with OpenVPN to see if that allows you. Are you running any personal vpn, and what is the error?

[carmine pollen]

im using the exact command provided by the room im following

[twin flume]

It appears it’s connecting, but you’re not typing the password

The password is same as the user login, but it will not display characters when you’re typing

[rapid merlin]

Use your own VM

[sturdy sequoia]

does the task require a public key? looks like the password is incorrect

[leaden shale]

hello chat

hru

[sturdy sequoia]

doing pretty good. u?

[leaden shale]

nice

[carmine pollen]

im following this one guide, last time it worked but now its days not working and i cant complete the room

[twin flume]

Type the password, which is the same as the login. It will not display characters as you enter the password.

[leaden shale]

Which languages should I know for programming and hacking? Can someone tell me?

[carmine pollen]

did that many times, but im getting permission denied. The one i'm typing is also "tryhackme"

[sturdy sequoia]

Python is the most commonly suggested one

[leaden shale]

ik basic py

[sturdy sequoia]

What specific area of cyber sec are you interested in?

[twin flume]

Interesting. To me, it looks like a credential issue: it is communicating with the server but is rejecting the login. Try rebooting your system, and launch a fresh attack box and target

[steel aspen]

Just fill in this google Docs form

Anyone play where winds meet?

[rapid merlin]

This lil kitty is working undercover or must be special agent potato

[steel aspen]

It's literally in the name, he's Neo

[sturdy sequoia]

Or just a kid trying to hack a roblox account

[rapid merlin]

🤣

[steel aspen]

Wonder if he unplugged yet

[steel aspen]

Pretty good game

[novel ingot]

so who's curious enough to dm him to check what's his final goal ?

[sturdy sequoia]

Of all the places to go and try scam someone, so many people pick this server.

[steel aspen]

Can I relink my THM account to this one? I've got another account I use mroe with a different name

[steel aspen]

Does that count as irony?

[leaden shale]

me black hat hahaha

[sturdy sequoia]

Close enough if not

[steel aspen]

The THM account called this I haven't used in a bit

[sturdy sequoia]

Yer but what area? General pentesting? Exploit hunting? Malware dev?

[sturdy sequoia]

Not sure if you can do it. Might need to contact thm support. I know they can

[steel aspen]

Guess it's alright

[rapid merlin]

I'm little bit confused your bio says 'Ethical Hacker' and you claim you are black hat

[steel aspen]

Not that important lol

[steel aspen]

Dang he got us good

[sturdy sequoia]

Yer i don't take people too seriously when they call themselves a black hat

[novel ingot]

another day in the mind of a 12 years old

[rapid merlin]

I will call you ethical blackhat

[carmine pollen]

no luck with this

[novel ingot]

this server is too funny every time I feel like I'm bad at anything on a computer I go here or on linkedin for a couple of minutes and my ego is restored

[steel aspen]

Is this for AOC?

[sturdy sequoia]

youre trying to ssh to the wrong machine

[novel ingot]

no is linuw basic 2

he showed this before

[rapid merlin]

your stress reliever

[sturdy sequoia]

your local ip is the same as the one youre trying to connect to

[rapid merlin]

or more stress I guess

[novel ingot]

I didn't even notice

[sturdy sequoia]

i didnt notice it the first screenshot either

[novel ingot]

oh that's a nice one

[carmine pollen]

i don't get what you guys are talking about, can you help me?

[novel ingot]

sure what is the IP of the actual machine that you want to connect to

not the attack box ip please

[sturdy sequoia]

in the thm room there will be 2 ip addresses. one for the attack box and one for the target. your ip ends in 204. what does the other one end in?

[rapid merlin]

Have you look the icon (!) below you will see other details you might used

Thanks hahah

[twin ridge]

Gave +1 Rep to @carmine pollen (current: #3412 - 1)

[novel ingot]

bruh

[rapid merlin]

He give away his credentials

[novel ingot]

who is going to connect to his attackbox now

[carmine pollen]

oh sorry, i didnt know

[rapid merlin]

Don't do that ever again bro haha

[carmine pollen]

yeah i will take that as a lesson

[novel ingot]

give me a second I'll show you

[rapid merlin]

ssh root@privateip you see a while ago

[novel ingot]

here you click on the stat button

then you will see an machine IP like shown above

so next you start the attackbox

start the terminal in your attacbox

[subtle cairn]

should i read everything on windows fundamentals 1? i lowk know what they are saying

[novel ingot]

then ssh tryhackme@<the_ip_of_the_machine>

not the attack box since you are already typing this command from the attackbox

[leaden shale]

Web Application Security

[sturdy sequoia]

its good for a refresher but if you already know it then just skip it

[rapid merlin]

I'm newbie too but i have few knowledge, and you should try it because its help you later to exploits windows

[sturdy sequoia]

php and js are useful for that

[novel ingot]

like this

[subtle cairn]

like skip the whole part?

[woeful rock]

Happy Friday 😛

[shrewd parrot]

So uh does premiums "unlimited attackbox and kali" mean unlimited time or more instances of the machine(s)

[sturdy sequoia]

sure. skip to the end and see if you can answer the questions

[carmine pollen]

thanks, i need to run the target machine first before running the attackbox thank you very much for those who help me and gave me valuable lesson (gotta learn hard)

[subtle cairn]

i feel like its wasting some time

[rapid merlin]

Same feeling at first

[subtle cairn]

alright thanks

[twin ridge]

Gave +1 Rep to @sturdy sequoia (current: #90 - 112)

[sturdy sequoia]

both at the same time in either order

[leaden shale]

ok

[woeful rock]

Dropped a new VM Escape and RDP hackback. Microsoft just approved them

[true urchin]

Is this a exploiter? There's no way to complete 600 rooms in one month

[sturdy sequoia]

probably

[novel ingot]

he copied the answer from the web and this guys probably doesn't know anything

[twin flume]

Happy learning and hacking 🤙🏼

[true urchin]

Yeah probably but I think it has been done with a exploit, no way someone sits there and copies answers from over 600 rooms

[sturdy sequoia]

the score is meaningless anyway

[true urchin]

Well he can claim he is top 600 worldwide on tryhackme

[novel ingot]

you don't know what stupid people can do, do you ?

[sturdy sequoia]

so? that title is meaningless

[true urchin]

That's unbelievable stupidity

[true urchin]

I guess

[rapid merlin]

flag hunters not hacker

Tryhackme cookies should track user if they accessing the medium website

[true urchin]

It doesn't prove someone can hack its more of a status on tryhackme

[rapid merlin]

avoid cheating

[novel ingot]

the only meaning that the score / rank gives, is imho the motivation of someone to learn

[sturdy sequoia]

exactly. its meaningless. who cares if people cheat. use the site to learn, not to flex on the internet

[true urchin]

Why would you want to be top 600 on tryhackme and not being able to even scan a target 😂

[novel ingot]

mainly on this platform where no task is that hard and where everything is guided to succeed easily

[sturdy sequoia]

to brag about internet points

[rapid merlin]

Other need to write their experience in hacking to proven themselves and adding reputation to their cv

[true urchin]

seems goofy to me

[sturdy sequoia]

it is

[true urchin]

Linking your Linkedin to a Tryhackme account your obviously cheating on also seems pretty stupid

[sturdy sequoia]

yer thats a strange one

i wonder if people also link to their github thats full of AI coded slop

[true urchin]

Let's check 😉

[sturdy sequoia]

chatgpt write me 10 scripts to put on github

[novel ingot]

you don't even imagine what people does with AI for their ego

[true urchin]

😂

[rapid merlin]

LMAO

[true urchin]

You were right haha

[sturdy sequoia]

i wonder what its like having a world view like that. to think you can just cheat and everyone will think youre cool

[rapid merlin]

wat da hellelieee

[novel ingot]

I dm the matrix guy he didn't answer (sad I wanted to be part of his secret mission)

[rapid merlin]

At least you only have 6 script instead of 10

[misty violet]

Hey , where can I buy Public IPs for my VPS Hosting. Or setup NAT since ill have less than 10 vps

[true urchin]

It’s not my profile it’s the profile of the person we were just talking about

[rapid merlin]

Alright

[cosmic sleet]

The site seems faster as compared to the previous 11 days

[rapid merlin]

Hello guys i need your helps

[velvet gull]

what do you need help with? 🙂

[rapid merlin]

Idk where to go but im being blackmailed on telegram by someone he is asking for money someone can help?🙂

[sturdy sequoia]

go to the police

[rapid merlin]

He doesn’t live in my country

[rapid merlin]

You go to the police station

[silver sky]

Doesn't matter go to the police and block them

[rapid merlin]

He is say he will post my photos if i don’t give him money

[rapid merlin]

Okay

I thought someone could help

[rapid merlin]

It's okay let him post them I'll put a like and comment on them

[rapid merlin]

It’s not funny😭

[neat kindle]

uhhh im having a stroke rn???
its Intro To Networking room btw

like do you want me to type it out in letters?

[velvet gull]

oh I remember that, the answer actually isn't the name of a layer 😄

[neat kindle]

it asks for a number??

[velvet gull]

I think they were copying and pasting that over all questions after everything was written and missed that this one it didn't relate to

[silver sky]

They won't.

[neat kindle]

lemme figure it out

[rapid merlin]

Wdym?

[velvet gull]

don't wire any money, it's most probably a scam but just to be safe go to the police to report it

[silver sky]

They won't post your photos. It's called sexstortion. It's a common thing. They just want the money and hope you'll call their bluff.

[rapid merlin]

He is not really posting it online but will send it to people i know

[neat kindle]

ok figured it out

[neat kindle]

i dare them to post mine

i would thank them for kickstarting my new career

[velvet gull]

isn't paperclip always nude?

[neat kindle]

you never know

[rapid merlin]

How did they even get a hold of those photos

[rapid merlin]

I don’t know man

[novel ingot]

it's fake

[silver sky]

They will always say that but they won't

[novel ingot]

classic scam

[neat kindle]

ask them for proof

ask them to send some pics

[rapid merlin]

He did show me the pics

[rapid merlin]

Dude you don't know to who you sent photos like that?

[neat kindle]

what guarentee is there that they wont release after the ransom?

[neat kindle]

is it yours or is it AI generated?

[velvet gull]

glitch don't think about it, don't listen to this, stay pure

[silver sky]

Did you send them to a woman who approached you on the internet who seemed too good to be true?

[rapid merlin]

I didn’t send maybe someone took it from my phone idk i lost my gmail one time maybe they got it from there

[neat kindle]

WHO THE FUCK STORES NUDES ON GOOGLE

[rapid merlin]

You keep photos like that in your phone? 😭

Dude

[rapid merlin]

I don’t store but it backup automatically

Anyway dude report them, that's your only solution

[neat kindle]

if youre taking nudes, you take extra care to NOT let it touch anything related to internet

[rapid merlin]

I was only 2 pics

And how did they even get the contact of your family and friends

This whole thing seems sketchy

[rapid merlin]

On my instagram

It may be one of your friends or something

[rapid merlin]

He doesn’t live in my country

Imma just go back to studying, hope you find a solution

[rapid merlin]

Yeah

[silver sky]

Yeah he's in Nigeria or Ghana.

I see lots of people at work fall for the same scams.

Block and report and DO NOT SEND ANY MONEY.

[velvet gull]

@rapid merlin listen to Santa, he's very wise

[rapid merlin]

He is french i think

[rapid merlin]

Okay😭

[silver sky]

Because once you send the money, it'll never be enough and they'll keep asking for more

[neat kindle]

you ppl never experienced getting scammed in games lol

[quaint pendant]

yeah sending money doesn't remove the material, it just confirms you're willing to pay money.

[novel ingot]

yes many country in africa have french as language spoken

[mental island]

Happy Friday everyone.

[rapid merlin]

I wouldn’t send money that’s why im asking for solutions

[silver sky]

Block and report

Perfect solution

[rapid merlin]

I sent a mail to telegram but they haven’t responded yet

[quaint pendant]

there's not too much to do except maybe inform your family about the photos. The material is out there regardless of what you do at this point, you can only do damage control.

[novel ingot]

first mistake just block and report to police

[silver sky]

Report it to law enforcement too

[rapid merlin]

Okay

[novel ingot]

bro this story is fake this is a known scam

[rapid merlin]

Man i just hope it is

[novel ingot]

the scam consists in the victim to be afraid and pay money for nothing

[quaint pendant]

but yes, contact law enforcement, save any communications you received from the attacker, and block them. Change your credentials on every account associated with where those photos came from.

[rapid merlin]

But what if i don’t pay what they gonna do?

[silver sky]

Move on to the next victim who will pay

[novel ingot]

they going to do nothing about it because they have nothing

[rapid merlin]

Okay i gonna trust you guys on this one

[quaint pendant]

likely nothing, there is a risk/effort/reward matrix the attacker has to follow.

[rapid merlin]

Le Monke

[quaint pendant]

if you make one of those 3 things bad for them, they just pass unless the motive isn't just money.

but in this case it sounds like it's just money.

[rapid merlin]

Are you victim of ai that remove your c?

[quaint pendant]

scam or not, it's still good to take appropriate action.

My son's computer got compromised and I just had to rotate a lot of account credentials to recover everything related to it, even though (in my estimation) they just dumped or sold the creds on a black market. The odds of the creds leading to anything significant were very low, but not zero.

[high torrent]

guys after i cancle my subscription for a month before it ends will i still have the premium rooms untill it ends

[rapid merlin]

I don't think so

[novel ingot]

I had an email account (from the time I did osint work) and the goal was to receive as much phishing mail as possible on this account so I have so many example of this

[novel ingot]

bro it's different to have a computer compromised than receiving phishing email

[silver sky]

Yes

[quaint pendant]

well it sounded like the photos were something they had stored somewhere.

[novel ingot]

even if this is true (photo stored in a cloud somewhere) there is no way that they accessed it without compromising /using compromised credentials so this is fake if the user didn't click / download anything sus

[quaint pendant]

im just going off what they said in chat

Idk where to go but im being blackmailed on telegram by someone he is asking for money someone can help?🙂

He did show me the pics

assuming they're not faked in some way, this indicates an opsec or infosec compromise

either the images were semi-public and they were able to associate it with them, or they were stolen.

[silver sky]

The reality is, he got catfished and sent them over

[quaint pendant]

yeah, possibly lol

[silver sky]

More than likely, it's very common

[quaint pendant]

the internet was a mistake

[silver sky]

😂😂😂

[unique mural]

Hi everyone! I’m Gh0stIsR00t.
I’m currently learning cybersecurity and focusing on penetration testing and web security.
I practice daily on TryHackMe and Hack The Box to improve my practical skills.
Excited to join the community, learn from others, and share my progress.
Happy hacking!

[quaint pendant]

back in my day we sent Polaroid d pics in the mail

and it was a felony to open the d package

[rapid merlin]

No its not ai

[novel ingot]

@sturdy sequoia I am not disapointed right now

[sturdy sequoia]

fuck that guy

[silver sky]

Jesus Christ 😂

[novel ingot]

bro I'm crying

[novel ingot]

did you click on any suspicious link or downloaded anything weird ?

[rapid merlin]

Idk i don’t think so

[winged nimbus]

who is that clown lol

[tropic sluice]

I have something like this from a conspiracy theory site

[novel ingot]

I doubt change the password of your mail / storage space from where the pics was stolen then block the scammer + report to police

[tropic sluice]

I probably can't post it here tho

Now that I think Abt it

[novel ingot]

he is probably from there if I had to guess

[rapid merlin]

Yeah i will thanks for the advice

[twin ridge]

Gave +1 Rep to @novel ingot (current: #810 - 8)

[tropic sluice]

Looks like discord

[novel ingot]

speaking of "the people that control the money"

[winged nimbus]

french is spoken in ghana

[novel ingot]

in france too it doesn't mean anything I can speak french too

[rapid merlin]

Doctor, your patient has escaped again.

[novel ingot]

sadly can't cure stupid

[rapid merlin]

Hahahaha

I want to react but i'm not verified yet but u know i laugh so hard here

[novel ingot]

just verify your THM account or you are too afraid because they control the world

[rapid merlin]

Mods are busy

[wanton gyro]

Hello. Recently joined this server out of curiosity. What does it take to become a professional ethical hacker? Any courses recommended?

[velvet gull]

start with #start-here

[novel ingot]

knowing the bases of computer science before

[wanton gyro]

Understood. Thanks.

[twin ridge]

Gave +1 Rep to @velvet gull (current: #174 - 57)

[wanton gyro]

Well versed with that.

[steel aspen]

Chat is quiet tonight

Usually wild h4xx0rs start appearing more about now

[novel ingot]

maybe it's not the night for every hacker

[steel aspen]

Guess not

[merry saddle]

hey

i replaced my pc case , and after i click the power button

the cpu cooler makes a huge noise and then stops

but it takes a lot to boot the bios, also my windows is not being seen , like it can't boot u[p

any reason why ? and if so , what did I do wrong ?

can it be because I made a mistake when the cpu cooler is active

[hearty fern]

somethings probably shorting you

[novel ingot]

check on the internet if your problem is a know issue with the brand and model of your cpu cooler

[jaunty goblet]

how many times can i retake the pt1 test

[rare latch]

Question: What linux is most used by Pentester/hacker professionals?
Some use Kali, but some find it bloated
Just wanted to see what most of you use and prefer

Ive been a kali user for a while but want to restart on another OS (This one kinda broke 😂 )

[torpid zinc]

Just use kali

If it works, it works

[hearty fern]

just keep Kali in a virtual machine and if it breaks restore to a working version

[jaunty goblet]

the thing is anyone can recreate kali, its just debian with hacking tools installed
just sudo apt install all the tools u need on arch/fedora/debian

[torpid zinc]

Its only bloated if you don't use the apps, and they can be deleted

[rare latch]

I mean fair, but I use Linux as actual OS too.
Dual boot, Windows for gaming and Kali for regular things.

So the reinstalling of stuff i dont mind much

[torpid zinc]

Don't use kali for daily driving

[rare latch]

exactly 😂

[torpid zinc]

Also it should be in a virtual machine environment

[novel ingot]

kali linux is very used since many tools are already installed in it however more experience people prefers to use an other OS where they can manage their system as they wish like for example arch linux

[steel aspen]

Learned that the hard way, I'm on Mint now

[torpid zinc]

Arch doesn't have more customisation than kali, the difference is arch forces you to build it

[rapid merlin]

Bora hack?

[jaunty goblet]

just use fedora or debian

if ur a newbie

[torpid zinc]

Generally for just pentesting you want something that works out of the box

[novel ingot]

the difference is massive since you control every thing in your OS- I used Debian because I like it

[novel ingot]

bruh

[steel aspen]

How can you control the kernel in windows?

[novel ingot]

modify registry

[torpid zinc]

Mint, ubuntu, xubuntu are beginner friendly

[high torrent]

bruh what thm said i completetd ms azure path and i didnt even do anything lol

[steel aspen]

linux seems easier idk

[torpid zinc]

You don't, it controls you

[novel ingot]

yes for sure

[torpid zinc]

Quite literally with its ai

[rare latch]

Blackarch seems like a fun challenge 😂

[slow cloud]

you install the iso

thats it

[steel aspen]

Mint is exactly like windows almost

[rapid merlin]

Did you start taking notes

[steel aspen]

With the layout at least

Reminds me of XP

[slow cloud]

blackarch is no challenge, if you want a challenge, rebuild blackarch from scratch

[pure steeple]

Any particular reason it needs to be in a VM? (vs just a clean install on a clean machine?)

[sturdy sequoia]

blackarch, talk about bloat

[torpid zinc]

Yeah, i have not tried it before, I went to dabian then ubuntu

[rare latch]

Some..... not fully yet. Working on it combined with just changing my work environment fully first

[rapid merlin]

https://tenor.com/view/neko-pat-gif-18592698

Good boy

[slow cloud]

vm is just better, more secure, snapshots, if you mess up you can easily make a new one

[rare latch]

crazy.

[lament tendon]

By that definition, Kali is bloat as well, no?

[slow cloud]

yeah

it has 1000000 tools

and you use only 10

[sturdy sequoia]

yer kali has 600 tools, blackarch has 2800

[torpid zinc]

For basic stuff you can go bare metal, but reverse engineering and malware dev, you don't want bare metal due to security issues

[slow cloud]

it would be best to make your own hacking OS i guess

install the tools you need

[rapid merlin]

Switch to parrot os

[jaunty goblet]

you must take 10 kernels of corn and sacrifice them in the name of the command prompt

then you shall be able to tame the kernel

[lament tendon]

Preinstalled or just listed in the repo?

[rare latch]

i was looking at that one too, looks funny also. might just try it for the funsie

[steel aspen]

Kernel goes Pop!_OS

[sturdy sequoia]

the repos. not sure how many come preinstalled in either

[rare latch]

or hanna montana linux

[rapid merlin]

Make many vms and try all of them

[slow cloud]

templeOS

[torpid zinc]

If you use pop, just leave 😂

Jk

[steel aspen]

Just making a bad joke

[pure steeple]

Interesting. Elaborate? If I wipe a hard drive and re-install (or boot from USB) and also unplug for 10 sec. to clear volitle RAM, is there additional concern?

[torpid zinc]

Labubu ubuntu is where its at

[slow cloud]

you can turn easily turn off nic's in a vm

[sturdy sequoia]

they all work. its just personal preference

[lament tendon]

How is listing stuff in the repo bloat? 😭
Arch gotta be the most bloated distro out there because of the AUR.

[lament tendon]

This I agree with.

[steel aspen]

Then you get the hardcore i use arch btw or other people thinking their distro is bette

better

[slow cloud]

i use arch btw

[pure steeple]

It's hard to beat an un-plugged cable. VM / Turn of NIC ... still a VM breakout is possible?

[slow cloud]

not just arch, every OS has that. Look at macOS fanboys

[steel aspen]

Mac isn't in the convo at all

[torpid zinc]

If you want to risk and go bare metal, you can no problems
Just makers of kali and alot of cyber specialists say to use in vm for added security

[lament tendon]

The most superior distro is whatever I am currently using, easy.

[steel aspen]

Which is 8-bit instructions?

[slow cloud]

vm breakout is posible but rare i think

just use what you personally enjoy

[torpid zinc]

Plus kali vm is easier to use with internal networks when connecting to Vulnlabs

[pure steeple]

If you have stuff on the host that you want to keep separate I understand the + security ( I think ). If it's a clean host / clean install, I don't see how VM adds extra security, so that is what I'm trying to learn about.

[slow cloud]

yeah but installing everytime

thats just a hassle

reverting a snapshot

way easier

[pure steeple]

Sure.

[slow cloud]

lets say you have to install your OS 10 times a day

i could not be bothered

[torpid zinc]

Are you planning on using local hack boxes like vulnlab

[lament tendon]

https://tenor.com/view/nix-nixos-nix-my-beloved-linux-gif-16687923917201934033

[rapid merlin]

What do I need to learn to start using arch

[high torrent]

bro why did you change your profile picture again

[lament tendon]

Basic CLI and debugging/log reading skills.

[high torrent]

this is the third time

[rapid merlin]

I thought this one is the jolliest of them all

[pure steeple]

Is fair. The host can suck up resources CPU, MEM though. Bare metal ... you get all the stuffs.

[high torrent]

alr what i mean is just pick one

its kinda good actually

[rapid merlin]

Sorry I won't change it again

[pure steeple]

Yes.

[slow cloud]

you need to learn how to read the wiki https://archlinux.org/

[high torrent]

its fine i mean because you change it a lot recently

its your choice

[torpid zinc]

Snorting crushed coffee beans, high tolerance and bad posture 😄

[rapid merlin]

No, sorry master it won't happen again

[high torrent]

bro its fine

[torpid zinc]

Then use a vm, have kali and the vuln lab .ova connected on an internal network and connect kali also to Internet by NAT

You have both under one software

Bare metal you'd need two physical devices

[pure steeple]

Yes, I have an old laptop. I'd like to allocate all of the cpu/mem to Kali, and not have to have some reserved for the host.

[torpid zinc]

How do you expect the lab machine to connect to kali

Given its designed to be sandboxed in a vm

[rapid merlin]

Guys I have a question but I feel it's kinda stupid

Why are Chinese have their own servers in everything like games or websites or everything they're separated from us

[torpid zinc]

Faster response times

[jaunty goblet]

censorship

[torpid zinc]

That too

[steel aspen]

Can't find what's taking up all the space on my tablet

[torpid zinc]

All games have separate servers for different countries

Like Asia, NA, EU

[torpid zinc]

For websites, considering majority of the servers and cloud are American owned businesses, china would benefit having their own for national security reasons

Its like south korea doesn't use Google products mainly, rather Naver

[jaunty goblet]

time to go live in south korea

[torpid zinc]

Nah

The economy is bust

And only good paying jobs are held by top 7 big companies

[jaunty goblet]

dont forget the gender wars

[torpid zinc]

You get that in the west

[jaunty goblet]

i didnt know a government could be both misandrist and misogynistic at the same time

[steel aspen]

Are we allowed to talk about Australia and the digital ID thing ?

[torpid zinc]

Is what it is

[jaunty goblet]

not nearly as much

[jaunty goblet]

yes

we hate it

[steel aspen]

Ironically a privacy breach

[pure steeple]

I can't test until I pay for vulnlab (which, not ready to do yet)

Network1 > Desktop > Does desktop stuff
Network2 > Laptop (Kali) > OVPN > Does compsec stuff

[torpid zinc]

Australia is fine, other than every animal wants to kill you

[rapid merlin]

The US economy in the last year is just 6 big companies exchanging fake trillions of dollars inside each other

[torpid zinc]

Probably not allowed to post links here

[torpid zinc]

Welcome to capitalism

[pure steeple]

Oh I see, if you want to run your own home lab, and have a network with an attack machine and a vulnerable machine

[torpid zinc]

If you want a home lab, you could go bare metal kali and use a nas server for vms

[slow cloud]

kali bare metal 😕

[torpid zinc]

😂 I use virtbox

[steel aspen]

What are home labs used for?

[slow cloud]

you can, just depended on what the link is

[slow cloud]

anything, im planning to use it for a SIEM, NDR, EDR etc when i move out

[slow cloud]

hacking systems

vulnerable systems

etc

[pure steeple]

Option 1 (three physical machines)
  Network1 > Desktop > Does desktop stuff
  Network2 > Laptop (Kali) > OVPN > Does compsec stuff
  Network2 > Other Laptop > Acts like target

Option 2 (two physical machines)
  Network1 > Desktop > Does desktop stuff

  Network2 > Laptop (Host) > VM (Kali) (Attack) 
  Network2 > Laptop (Host) > VM (Target) 

I see here how VM would save you having to need a 3rd physical machine

[torpid zinc]

It was for vulnlab machines but posting it here is probably not a great idea considering the effort THM puts into their products

[slow cloud]

i think you can

i always point people to vulnhub

[steel aspen]

Can you get one to look out for you entire network EDR, firewalls, network scanning, pcap analyzing?

[torpid zinc]

Fairs, https://vulnhub.com/

Thats the website for the vm machines

[slow cloud]

you should be able

[torpid zinc]

Although I'd recommend learning before doing them

[steel aspen]

Would you do that from one machine or a few?

Interesting topic

[slow cloud]

Probably a couple

Since a siem is very resource intensive

[steel aspen]

And like IDS/IPS

[slow cloud]

At least ELK is

[steel aspen]

Not using splunk?

splunk keeps asveritsing to me on facebook lol

[slow cloud]

I like ELK more

But i guess its preference

[pure steeple]

Splunk is fine, but $$$ for premium features? They want you to pay.

[steel aspen]

Better layout? I did the AOC and splunk looked like it had stuff everywhere

is ELK a better layout?

[slow cloud]

I would say so

But once again

It depends on what you prefer

Both have there plus and minuses

[pure steeple]

Try both. No penalty to trying each.

[jaunty goblet]

ping @marble matrix

[steel aspen]

Do you use SIEMs for home use tho?

[jaunty goblet]

response time slow

are u lagging

[slow cloud]

I have not, but id like to

Since if u have a NDR, EDR etc. I would like to have all that data in a big bucket

Instead of multiple portals

[steel aspen]

I wouldn't mind setting up like wireshark or tshark and snort along with doing network scans and different IDS/IPS ones to go over my network

Idk if snort is used as a whole but learned it from here

[slow cloud]

Then why not do it? Only issue is the device ownership anf stuff

If you live with others i think you would need permission maybe. Or at least discuss it with them

[steel aspen]

Yeah need a lot of devices n I live with poeple lol don't wanna take up a whole space

[slow cloud]

I would use vms

[steel aspen]

We do have a spare room but the router is in the lounge

Makes it slower

spare room on the other end unfortunately

[pure steeple]

Do you mean VMs that run in the cloud? (on AWS or Azure etc.)

[slow cloud]

nah id run them at home

cheaper probably

since network and EDR logs can take up quite some storage

[silk crane]

Hey

[blissful current]

[patent hull]

hello

any proffesional hackers?

[slow cloud]

yeha

i am

[novel pendant]

Hi, I need a little help with the room “Juicy the Dog.”
I have found some of the flags, but I am stuck on the last two flags and cannot figure out what to enumerate next.

[high torrent]

guys is it just me or do the name of tools used for hacking so ridiculous like look

[high torrent]

ethical*

[patent hull]

you aware about the react server components hack

[slow cloud]

yeah i saw the cve

[patent hull]

sorry

exploit

yeah i just want ask some questions

[torpid zinc]

Virtual box, vmware, QEMU based

[rustic crest]

hello everyone can someone pls help me with this room of AOC

[quiet bramble]

What's the name of this THM room ?

[blissful current]

DuckerRubby

[rustic crest]

i found the flag already and the machine is not detecting it so its not getting completed

its the first room btw the CLi one

[high torrent]

Systems as Attack Vectors

[blissful current]

[quiet bramble]

I solved this room already but somehow didn't notice the rubber ducky lol

Thank you

[patent hull]

ok so i have two server one is for frontend, and you can rce into my frontend, or frontend is hacked, my backend server is separate, so can anyone access backend server or send malicious payloads, trough formdata or query params or anything that is used to interact with backend so that it will be compromised, this is not practical question, as i updated my packages, but lets say tomorrow another vuln came in with higher cvss, i know, frontend is totally doomed, like hacker can do anything means like from eaves dropping to completed control of frontend redirecting to malicious website, but i just want to know about backend, if frontend server is hacked, will my backend server is hacked, provided that my backend is a separate, written in any language doesn't matter, has good rate limiting, no shell access and waf and all, and frontend only know about the endpoint that it will talk, will it be affected??

[rapid merlin]

Don't be neutral, always pick a side

[patent hull]

frontend is nextjs vuln package, backend is anything

frontend only knows about my backend endpoint, nothing else, like no db.execute and all

[high torrent]

lol, your welcome

[blissful current]

[rapid merlin]

You think you're better than me

[pure steeple]

"it depends". Front end will reveal information about the back end. That information would lead to people enumerating the back end. Will they find an open port, service, vulnerability? Will they find an un-protected api key, or login or cookie in the front end (or front end code) to allow access to the back end?

You could hire the contracted services of a pen tester, and they'll tell you! (for like, $1000+ ?)

[blissful current]

in wot?

[rapid merlin]

I'm gonna destroy you