#general

1 messages · Page 1958 of 1

wicked lagoon
#

send roadmap

rapid merlin
#

you do NOT need to learn assembly

past sparrow
#

Assembly is only worth if you are navigating towards Reverse Engineering

bleak quartz
#

Yes, assembly is very niche

past sparrow
#

Rootkit research and whatever

wicked lagoon
#

which has more priority ???

rapid merlin
#

I study software engineering in the uni so I think malware researcher

steep sequoia
#

Assembly is incredibly unuseful

rapid merlin
steep sequoia
#

Like what would you use it for lol , you’re not a caveman

wicked lagoon
wicked lagoon
#

too much stuff to learn

rapid merlin
past sparrow
rapid merlin
#

if you want to lean more into developmet, Rust, C++, and Go are all useful

#

C first

wicked lagoon
past sparrow
#

Okay fair, if you work with lowlevel hardware

#

processor factory or so

steep sequoia
rapid merlin
wicked lagoon
#

imma go study before i make my roadmap even bigger

bleak quartz
#

ation

past sparrow
#

To be fair, I wouldn't put much effort to learning specifics of language at this point, you have AI that can conveniently port from 1 language to another

austere current
#

the browser is saying I ran out of blocks and making me pay

steep sequoia
bleak quartz
#

just rev engineering is not doing it justice at all

hard ravine
#

just come to Dms @austere current

bleak quartz
past sparrow
bleak quartz
#

simple

steep sequoia
rapid merlin
past sparrow
#

Or if you are going towards ICS/IOT security

rapid merlin
bleak quartz
#

able to write your own scripts for quick tooling

bleak quartz
hard ravine
rapid merlin
#

then go with Rust, C knowledge can be learnt later down the line anyways

steep sequoia
#

You’ll unlikely even dive much into classes during a month of learning

bleak quartz
rapid merlin
past sparrow
#

I don't see this arguing here answering any question, so many people with so many opinions

steep sequoia
#

I’ve pretty much finished everything on codeacedmy for C JavaScript python and ruby, still wouldn’t say I’m any good at any of them

bleak quartz
rapid merlin
#

100 lines in C is like 10 in python

bleak quartz
#

But for tooling python is a match made in heaven

austere current
rapid merlin
mellow blade
rapid merlin
#

what field are you going into Critical?

wicked lagoon
#

anyone passed the github foundations certfication ?

steep sequoia
hard ravine
#

try changing browser maybe or something because ive been using notion for a bit and never had that issue

bleak quartz
rapid merlin
bleak quartz
#

Lots of newbie devs got this weird idea that one lang is used for X and another is used for Y only

hard ravine
bleak quartz
#

not sure where it comes from

steep sequoia
rapid merlin
bleak quartz
rapid merlin
steep sequoia
#

You can do anything with any of them, but they perform better in things

#

It’s just a matter of efficiency at the end of the day

bleak quartz
hard ravine
bleak quartz
#

Python is quick to write as so much is already made for you

rapid merlin
bleak quartz
#

but C requires you to build the foundation, but is way faster

rapid merlin
austere current
rapid merlin
#

literally everything

bleak quartz
#

ye

sturdy sequoia
hard ravine
rapid merlin
rapid merlin
rapid merlin
#

literally everything man

#

I have so much knowledge and I don't know how to use it, literally

#

your computer

bleak quartz
#

don't spread lies just because you lack knowledge

rapid merlin
hard ravine
rapid merlin
bleak quartz
steep sequoia
#

He’s just going to say everything is a tool anyway

bleak quartz
#
  1. you can collaborate
  2. You can sync for free, their official page even guides you to do it
rapid merlin
steep sequoia
#

You can make a car class and do funny things

hard ravine
round orbit
#

Whoever thought that PowerShell should run Base64 encoded?
For example:

powershell -eC cABpAG4AZwAgADEALgAxAC4AMQAuADEA
rapid merlin
bleak quartz
steep sequoia
#

You can port scan with python

bleak quartz
#

Obsidian is very friendly to ppl working on their platform

round orbit
#

I fuckin love Obsidian haha

#

I got all my workmates on it

bleak quartz
#

you can choose to use thei sync, or use syncathing or other system all for free and takes 5 mins to setup

round orbit
#

I have a Wiki vault shared to all users

bleak quartz
#

Collaborate you can with a custom plugin, you can even self-host the entire thing so nothing leaves your control

hard ravine
bleak quartz
#

and all plugins must be opensrc

round orbit
#

Nah I wouldn't recommend that, I give everyone read-only access using OneDrive

bleak quartz
#

💪

round orbit
#

If you give everyone edit and you both edit the same file at the same time 😄

#

It's gonna suck

hard ravine
austere current
bleak quartz
winged nimbus
steep sequoia
#

I’ve never even used the obsidian graph tool

#

Don’t know how to

bleak quartz
#

using dropbox or wtv

bleak quartz
#

just use the side bar for file navig

#

folder tree

#

or wtv

hard ravine
rapid merlin
round orbit
hard ravine
rapid merlin
austere current
austere current
steep sequoia
#

That’s just how I enter photos

hard ravine
steep sequoia
#

![[

round orbit
#

And actually kinda useful

steep sequoia
#

I know it would be useful I’m just to lazy to link stuff

rapid merlin
round orbit
#

I can colour code my graph and see what I know and what I don't, and prioritise

rapid merlin
#

Are they good

steep sequoia
#

You can do it as a project

round orbit
#

You can also port scan with nmap 😄

rapid merlin
#

all will teach you different things so yeah

steep sequoia
#

But it will already been done before

round orbit
#

No need to reinvent the wheel

rapid merlin
twin ridgeBOT
#

Gave +1 Rep to @wind tree (current: #999 - 6)

steep sequoia
bleak quartz
#

interesting self-report but I use the folder tree as I said lmfao

#

It's very organized

rapid merlin
round orbit
austere current
rapid merlin
bleak quartz
steep sequoia
bleak quartz
#

each dot is a file

hard ravine
bleak quartz
hard ravine
#

but whatever that globe was , its an horrible

rapid merlin
bleak quartz
round orbit
rapid merlin
austere current
rapid merlin
bleak quartz
steep sequoia
#

It’s all about living off the land tho

bleak quartz
#

ctrl + x for me

austere current
round orbit
#

I'd rather install nmap? nmap can't run code lol

austere current
#

I just have it as an icon in the top right

bleak quartz
steep sequoia
bleak quartz
#

lots of times we got these annoying things that love to kick our arbitrary unsigned files

rapid merlin
molten wyvern
rapid merlin
#

rare but it can happen

bleak quartz
#

on a victim machine??

round orbit
#

What are we talking about here

bleak quartz
#

no way u moving nmap to victim machine 😭

steep sequoia
#

Why would you ever even have nmap

round orbit
#

You don't use nmap?

bleak quartz
steep sequoia
#

At least there’s reason python or nc would be on someone’s machine

molten wyvern
#

Python is goated

round orbit
#

Yeah most companies don't let you just run python freely lmao wtf

rapid merlin
#

what are we talking about

rapid merlin
#

this conversation is actually making me cry

steep sequoia
round orbit
# rapid merlin what are we talking about

Fun fact, today I saw a company's cloudflare DNS get hijacked and their website was redirecting to some funky malicious default landing page in google cloud, it wasn't even configured properly

#

And also I resolved an AiTM proxy attack to some website hosted on an apache server running AlmaLinux which was interesting

#

I reported it to Cloudflare

#

Hope it gets nuked

steep sequoia
#

All I did today was refactor awful bat scripts

round orbit
#

Goddamn phishermen man, ppl need to stop calling them hackers. logging in ain't hacking

rapid merlin
#

that sounds really interesting to be completely honest though

round orbit
#

Getting more comfy with PowerShell tho

steep sequoia
#

I fear our support partners are useless

#

Got me to refactor a ps1 today that took over a day to run before they stopped it manually

#

It had an infinite loop 😪

rapid merlin
round orbit
#

AI?

rapid merlin
#

probably

#

did it have an unnecessary amount of comments?

steep sequoia
#

No ai this I know

#

Unless they memorized it and wrote it back by hand

round orbit
#

From experience, AI can achieve what you want, but only after you tell it off several times, get angry with it and tell it how bad it is

opal igloo
#

or the popular chatbots, not actually AI

round orbit
#

People joke about how much I use AI for, but I'm probably the one AI hates the most, and I have the most distrust in it 😂 I ask it to prove everything, give sources for everything, and if it ain't got a source I assume it's wrong

steep sequoia
#

I don’t want to be mean to our in house ai

#

Because it’s monitored

opal igloo
#

Tell them it's for development purposes

#

like a father beating his child

rapid merlin
steep sequoia
#

Kept tripping the firewalls today trying to test some XSS

round orbit
rapid merlin
steep sequoia
#

Hit them with the Debug_mode: see it freak out

rapid merlin
steep sequoia
#

I think it’s just ChatGPT

round orbit
steep sequoia
#

I wasn’t involved with it separate project team

rapid merlin
#

ah fair enough

round orbit
#

I heard Perplexity Pro is pretty good, on a technical level. I've always used ChatGPT Plus so I won't be switching

#

It's weird how more context gives you a better answer but if you give it so much context/data it just messes everything up

rapid merlin
steep sequoia
#

I only use ChatGPT to generate tinder and hinge responses ngl

#

We have different uses I fear

rapid merlin
#

a lot of the time it doesnt keep a lot of details, you will have to remind it 100 times

rapid merlin
round orbit
#

Would putting it all into a single txt file work around that?

#

I remember back in the day prompts were so limited and uploading txt files was the workaround lol

steep sequoia
rapid merlin
#

if you have Pro and have a very long chat where you notice ChatGPT starting to forget things, just tell it to condense your entire chat into a single batch output then send it back to the model, then keep using it as normal

#

not exactly that, its a bit of fumbling around to make sure it actually picks up all the info but its an easy way to bypass token limits

#

also Perplexity's mainly good for real-time searching and citing sources so its better if you want more professional responses

round orbit
#

I thought ChatGPT has access to other chats?

rapid merlin
#

it does

round orbit
#

Can you not just create a new chat and ask it to review the old chat?

rapid merlin
#

you can but its not always amazing with that

#

just make a project and then include something like - Import all project history in your prompt

round orbit
#

I always thought that the token limit applied to different messages, not 1 large prompt. so if I paste in an entire SOC case I'm working on and give it a question, it should imo have the entire case in memory to answer my question

rapid merlin
#

yeah it should

#

just include - Think thoroughly and - Search the web in your prompt normally after the question (forces it to activate all the models features)

round orbit
#

I do that a lot, especially if it's been escalated to me from one of the engineers below me. I ain't got time to read from the beginning 😄

rapid merlin
#

true true

long plaza
#

hey whatsup everyonee

rapid merlin
#

Now for the next step

long plaza
#

ayyy I didnt even notice it switched finally!!

velvet gull
rapid merlin
rapid merlin
long plaza
rapid merlin
#

Don't forget to take notes btw

velvet gull
tired peak
#

I never take notes

rapid merlin
#

Notion can have a slight learning curve compared to Obsidian but it is way better

long plaza
rapid merlin
rapid merlin
lone basin
#

Hello

rapid merlin
rapid merlin
tired peak
lone basin
#

What are you talking abt

rapid merlin
# velvet gull probably tired 😄

Btw can I tell you about something silly in dm, like just something I wanted to say because it's kinda making me frustrated and I told valiant and he joked about it cri

rapid merlin
velvet gull
rapid merlin
rapid merlin
rapid merlin
tired peak
lone basin
#

Who is into red teaming

tired peak
#

not i

rapid merlin
#

and all notes apps should hopefully have an export function at least to MD

lone basin
#

Aren’t red teamer dangerous

rapid merlin
#

no...?

velvet gull
# rapid merlin Joplin

you can import them with a zip but i personally copied them over manually to sort them properly lol

long plaza
tired peak
lone basin
tropic sluice
rapid merlin
#

its an ethical choice to be a good actor blobfingerguns

lone basin
tired peak
#

red teaming isn't hacking although it may involve hacking

rapid merlin
lone basin
#

But they could be a danger

#

Right?

rapid merlin
#

who?

lone basin
#

Red teamers

rapid merlin
#

I mean I suppose so?

#

there is a potential for danger, they themselves are not dangerous though

lone basin
#

Im new to cybersecurity so i get so many stupid questions in mg head srry

bleak quartz
#

I'm going through a whole cert map atm

rapid merlin
bleak quartz
#

I've written a lot of writeups

#

As well for the challenges I did

#

Huge focus on windows active directory

lone basin
rapid merlin
bleak quartz
#

I'm very impressed if you can handle all the information

rapid merlin
bleak quartz
#

Notes are like a second brain

#

Extremely useful

rapid merlin
bleak quartz
#

There's no way there's a person out there who doesn't take notes

lone basin
#

Guys i will start my first step in red teaming soon any advice ?

bleak quartz
#

I can't even comprehend that 😭 at least some level of notes

lone basin
#

I just want to be better

rapid merlin
#

as long as you know how to find the information easily it wouldn't be absolutely horrible

rapid merlin
bleak quartz
rapid merlin
bleak quartz
#

Go through the basics first it will carry you later on

lone basin
#

I saw google IT support course on coursera

rapid merlin
#

if you already know the basic not worth it

bleak quartz
#

That's good for foundational level knowledge

bleak quartz
lone basin
#

I learned so many things but i forget little things

bleak quartz
#

Nah do it, cybersec 101 is very basics u can finish it quickly if you alrd got experience

bleak quartz
bleak quartz
#

Gtg

rapid merlin
# bleak quartz Hm?

its very basic, I would only suggest it for those who want to know if they enjoy the industry or not

steep sequoia
#

You got a good grasp of the OSI model ?

rapid merlin
#

and those who need the absolute fundamentals

lone basin
#

My next is a start in red team or smth like that

bleak quartz
#

So 100% he does

rapid merlin
rapid merlin
bleak quartz
tired peak
bleak quartz
#

How do you operate?

#

So let me get this straight

lone basin
bleak quartz
#

You're doing a lab on thm, and u just remember everything, all the ports, all the services, all the exposed endpoints etc??

#

None of that is notes anywhere

#

Noted*

lone basin
rapid merlin
bleak quartz
rapid merlin
#

there are lots of tools for you to utilise to learn

rapid merlin
#

plenty

#

depends what you like and dont like

tired peak
bleak quartz
#

Will hurt you in the long run for sure

bleak quartz
#

Welp whatever floats your boat ig if it works it works just sounds insane to me

tired peak
# bleak quartz What about reporting?

so, I'm an architect and in part of my job, I will do things where I test things out and come up with a design, how things should work, I do document that out

lone basin
#

I dont want to stop learning when i find many things difficult and i have long way, i want to achieve things to keep motivated, im new to this world so im kinda lost

frigid valley
#

Not everyone learns or operates the same. Its ok

tired peak
#

but like if you just talking about doing a box on THM or even studying for certs, I don't take notes

rapid merlin
bleak quartz
#

Ye welp whatever floats your boat as I said

tired peak
lone basin
rapid merlin
tired peak
bleak quartz
#

Figure it out as u go

#

I'm here cuz I alrd studied all day

lone basin
bleak quartz
#

Brain is exhausted

lone basin
lone basin
tired peak
tired peak
lone basin
tired peak
#

and you have already built a linux VM?

lone basin
#

JavaScript

lone basin
tired peak
lone basin
#

Ok

#

Thank y’all

dark wolf
#

Ummm Do I just share that everywhere and people will give me money or what?

tired peak
dark wolf
#

No idea what it means lol

rapid merlin
bleak quartz
# dark wolf

I just sent you a giftcard for 50 million usd, just click the link in your mail and you will receive all the money!!!

tired peak
tropic sluice
dark wolf
boreal scarab
#

@sand trench I'm following in your footsteps, I'm posting Cheese Of The day in 3 other discords catroombaexceptionallyfast

tired peak
#

I remember when 13 was the top level..

naive lagoon
#

Yall know any free grow a garden scripts?

sand trench
naive lagoon
#

Like no key

silver sky
# naive lagoon Yall know any free grow a garden scripts?

To make your garden grow faster for free, focus on optimizing conditions: improve soil with homemade compost/mulch, ensure proper sun/water, use free cuttings/seeds from neighbors, create mini-greenhouses from jugs for warmth, and plant quick growers like lettuce or beans, providing rich, airy soil and consistent moisture.

tropic sluice
#

He's asking for screenplay scripts to read to his plants

long plaza
#

Stawp it why the bullying

boreal scarab
long plaza
#

Grandpa?

hushed carbon
#

i tried getting shell on tv and i shocked myself badly😖

hushed carbon
#

yes

#

now theres weird marks on my hand

rapid merlin
#

so not okay pepega

hushed carbon
#

is it burn

rapid merlin
#

what colour?

hushed carbon
#

red

rapid merlin
#

most likely a burn or just skin irritation then

hushed carbon
#

i think i accidentally touched multiple capacitorscri

vivid rune
sand trench
#

oooh might be a lightning scar

oblique loom
#

Found this in the wild

#

No I didnt "havk" it

#

Was a Shodan banner

#

VNC w/o auth is asking for trouble

#

Unless it's a "trap"

#

Kinda like this

rapid merlin
sand trench
rapid merlin
#

yeah thats true

earnest swift
sand trench
#

also have had a big shock once from opening an old crt tv

#

do not recommend

#

did not shock shadow but their screwdriver

#

and that was very loud

tired peak
#

these SOC rooms are killing me, y'all who do SOC are the true heroes

sand trench
#

it is mostly reading logs and figuring out what is normal stuff and what is abnormal
and then how much you need to act on it

tired peak
#

yeah and its a snooze fest

tired peak
# hard ravine SOC is fun

when I did SOC adjacent work, it was already after someone validated an incident happened but this stuff, nah

hard ravine
tired peak
hard ravine
oblique loom
#

I am totally convinced that Shodan is just easy/fast Google Dorking. But if you really knew GD you wouldn't need Shodan at all

tired peak
oblique loom
#

Is it worth ~$500 a month for me to pay again? 🤔

tired peak
#

$500/month!? I thought it was like $60/year?

oblique loom
#

I have the small business

#

plan

#

Mid-tier

#

I use Shodan daily

tired peak
#

thats only something you can decide

oblique loom
#

I share it with my small team but idk..

#

We will see

dark wolf
#

come hiking with me on 1/1 chainz

hard ravine
oblique loom
#

Its too cold rn

#

Burn out too

dark wolf
#

bah

oblique loom
#

Im so tired from all the bs in my life rn

dark wolf
#

I have 7 people going

oblique loom
#

work, personal, social. blah blah blah

#

In spring, yes

#

I can do spring

#

Its when I go out anyways

dark wolf
#

cuz you are missing nature 🙂 im going climbing indoors too

oblique loom
#

I dont like cold and I dont like dark. I need sun and warm

hard ravine
dark wolf
#

hehe, i'm always in a good mood

#

And it's so satisfying to make it to the top, you have to follow the colors

#

you can't just grab any one

oblique loom
#

I'll be in a good mood when I get rid of the roaches in my ghetto ass overpriced apt

dark wolf
#

Move to Inspirada or Anthem

oblique loom
#

Oh I wish

sand trench
#

and time to go to sleep sloop land where the beeps are booping and shadow goes meeping mooping meep moop

hard ravine
rapid merlin
#

Heyo

#

I'm looking for help lol

sturdy sequoia
#

help with what?

rapid merlin
#

So my old phone broke

#

And I lost access to my old discord lol

winged nimbus
#

@gusty inlet

winged nimbus
rapid merlin
#

Ah ok

#

Damn

#

Was gonna hack my own account

#

Well thanks

sturdy sequoia
rapid merlin
#

Where can I get discord support

#

Oh ok

rapid merlin
#

Damn

oblique loom
#

Discord has a support email but its hard to find

pulsar spoke
#

Buha

oblique loom
#

I had to track it down once for something a year ago

#

I dont have it anymore tho

#

Search their Twitter, that's actually where I remember finding it

rapid merlin
pure steeple
#
Discord Inc.
444 De Haro Street
Suite 200
San Francisco, CA 94107
United States of America

Phone: 888-594-0085
Email: support@discord.com

Discord Customer Support: https://support.discord.com/hc/en-us/requests/new
rapid merlin
oblique loom
#

I just dont remeber the exact email

rapid merlin
#

thats good then, from past experience its not very reliable 🤷‍♂️

hushed carbon
oblique loom
#

I swear, some of these labs were spit-glued together

hushed carbon
#

i need to complete comptia pentest+ path before 1:55 pm tomorrow

#

so i can get the cert printed

#

im only at 54%

oblique loom
#

How are you taking the test rn

hushed carbon
#

huh

#

the path

oblique loom
#

Or you mean online course?

hushed carbon
oblique loom
#

Oh. that

#

Thought you meant the actual CompTIA

hushed carbon
#

im to broke to afford that

oblique loom
#

I did for my sec+ and tbh its way better

#

But I can understand

hushed carbon
#

i hope to win pt1 in the aoc

oblique loom
#

I've done too many THM rooms

#

Lot of em broken cause they're poorly maintained

#

There's only so much hacking a VM can take before you need to restart it or something at least

#

I'll renew my 1x year sub when THM stops neglecting

#

Either maintain them or retire the lab

#

But don't let it sit abandoned for 4 years

wispy nova
#

how can you win pt1 from aoc?

#

can we still join?

tropic sluice
#

U can start with any AOC room

tropic sluice
oblique loom
#

You can join any lab

hushed carbon
#

im getting closer to top 1%

wispy nova
#

thanks guys

oblique loom
wispy nova
hushed carbon
wispy nova
#

considered for price*

oblique loom
# hushed carbon 😱
  1. Keep on the grind
  2. Dont fall back, even when it gets to ya
  3. Fk what Gatekeepers say, they like to bs
elder ermine
#

Freak

#

The main Red Team / Pen Test walkthroughs are Paywalled

#

:(

oblique loom
#

I recommend the 1 month and see how it goes

elder ermine
#

I dont got a credit card dawg

oblique loom
#

Its like, $10 I think

elder ermine
#

I dont got money

#

Im a minor

#

(IM 14)

oblique loom
#

Start a business

elder ermine
#

(JUST TO CLARIFY)

elder ermine
#

Exactly what would I do?

#

Too broke to buy lemonade

silver hornet
oblique loom
#

Idk, you can do something for a little cash, $10 worth

elder ermine
#

uhmmm

#

Midterms are kinda over so I cant sell answers...

oblique loom
#

If not, then just wait

oblique loom
#

THM aint dying anytime soon

elder ermine
#

Truw

long plaza
#

u got a few friends??

elder ermine
#

Uhhh

#

define friends

#

If you are asking me to ask them for cash, no way.

elder ermine
#

I dont ask friends for cash

tropic sluice
#

Ask ur parents for $

elder ermine
#

ehhh

#

christmas is cutting close

oblique loom
#

Just be patient, dude

elder ermine
#

presents already under the tree

tropic sluice
#

Anyways

elder ermine
#

Ill just do some free rooms

tropic sluice
#

Look at this cute cat who sacrificed his loved ones for the mangenkyo sharingun

oblique loom
elder ermine
oblique loom
#

I would say, do the networking basics

#

Get that knowledge in first

#

They should be free

elder ermine
#

TCP Packets, Wireshark, etc etc

#

Ive done uh

#

EternalBlue

oblique loom
#

Are you blue or red?

elder ermine
#

and a few other arbitrary rooms

#

Red

oblique loom
#

Then do the offensive hacking rooms that are free

elder ermine
#

Do you think HackerOne is a good place to go too?

#

for VDPs (Vulnerabilty Disclosure Programs)

oblique loom
elder ermine
#

(that is if you are 18+. smth)

oblique loom
#

Lots of exploits for many reasons

#

Not so much bugs, but you do find them here and there

elder ermine
#

What did you say you use again?

#

Shodan?

oblique loom
elder ermine
#

jesus

#

im goo

#

good*

oblique loom
#

I use it quite often

#

Like, all day every day

#

Also, I have a small team

#

I share it with them, guess makes sense since its the "small business" subscription

#

Shodan tho, like to hide the good stuff behind their enterprise subscription

#

Thats like, little over $1,000 a month

elder ermine
#

oh my

#

thats a LOT

oblique loom
#

Shodan be the sht, no joke

#

Me and my team actually have some little rep going on cause of it

paper pecan
#

hewo~

oblique loom
#

Sup

paper pecan
#

good

#

sup

oblique loom
#

Turning off my VPN

plush needle
#

🤔

oblique loom
#

Was wondering why sht be slow

#

Was scooping out this server, nothing intersting tho, but lot of weird stuff

lucid pumiceBOT
#

@kind wagon has been warned.

oblique loom
#

Or something lol

#

idfk

#

All I know about Russia stuff is that they post lots of Ukraine war vids on Telegram

#

Ukraine does the same sht

#

Like, GoPro FPV videos

river condor
oblique loom
river condor
elder ermine
river condor
oblique loom
river condor
#

Hy

elder ermine
#

Im making a vulnerable Windows server for yall to play w/ :3

river condor
oblique loom
river condor
oblique loom
river condor
elder ermine
#

Ill give ya a hint! its MsSQL is misconfigured! Ill post the link soon! (im using cloudflared for tunneling cause i dont like port forwarding)

oblique loom
elder ermine
#

gulp

river condor
oblique loom
#

I do that to furries

#

I used to be one

#

Was a thing back then

elder ermine
oblique loom
elder ermine
#

Im making a cloudflared tunnel to my vulnerable Windows server :3

#

Its a VM

#

Is it possible for a hacker to go from VM -> HHost

#

Host*

elder ermine
river condor
elder ermine
#

and so my Host

river condor
#

Idk tbh

covert plover
#

Is there anyone that can help me understand the most common attacks to protect myself against. I’m building a SAAS and my main worry is overload on api or attacks I have never heard of due to my in experience. ??

river condor
#

I'm stipids

wispy nova
oblique loom
elder ermine
#

Im gonna post a link to my vulnerable machine and pray no one goes out of scope 🙏

oblique loom
#

Pretty uncommon tho

elder ermine
#

buni

oblique loom
#

Typically its consider kinda sophistcated to break out of a VM

#

No one gonna waste their time

covert plover
# wispy nova what kind of saas can u share more details

I can privately if available for a quick talk I’m not a technical founder I have stumbled my way through creating a some what viable MVP using ai for all coding needs.

But along the way have learnt a lot about the way stacks work. But privately I can go into more detail int he business itself and the stack and real logic im using if you can help me understand where I may be open to exploitation

oblique loom
#

Unless you gov or something

elder ermine
#

ok thx <3

elder ermine
#

its not up rn cuz i dont have my cloudflared working

oblique loom
# elder ermine ok thx <3

You got nothing to worry about. Your attack sureface is propbably low and your attraction is close to zero

pure steeple
oblique loom
covert plover
#

And if using a 3rd part like supabase for auth will their own handling help avoid these auth issues.

In terms of aid api usage that’s my hardest understanding. I have org based api access with token creation and I have usage logs linked to tokens but as I’m not a developer myself in term of the industry standard for protecting api calls I’m oblivious

elder ermine
#

this one

oblique loom
#

Gatekeepers?

#

Na

pure steeple
#

Reported

elder ermine
#

THIS

#

@oblique loom

oblique loom
#

Oh yea

#

Cant do that sht here

elder ermine
#

Ok lemme get the mods :3

#

@hasty sand

#

THERES A GUY BUYING WALLETS!

#

HERE

#

and now we wait <3

oblique loom
#

But yea, the gatekeepers be gatekeeping

elder ermine
#

fr

river condor
#

Also is 0day the guys who does cool stuffs oohhhhh I liek hims

lucid pumiceBOT
#

:hammer: victorysaom_10610#0 has been banned.

elder ermine
#

AWESOME :3

#

W Mods

#

OHHH

#

I see

#

theres a difference between the two Mod roles

#

mb 0day :<

oblique loom
#

Can we get rid of the moose guy while we at it? jk jk

elder ermine
#

Ok im gonna do some final testing of my cloudflared, making sure my domain works and everything

oblique loom
river condor
#

Wait what is the discord admin rank anyway

pure steeple
#

ty mods

oblique loom
# river condor Ah

They someone here that dont like me for whateves and try to start drama at times

elder ermine
#

Yall mind if I post a quick test vulnerable website to make sure my cloudflared is working?

elder ermine
#

:3

river condor
#

Wait KC?

elder ermine
river condor
#

Is that the KC ik?

#

Hello?

#

Whole ah paragraph he's typing

oblique loom
# river condor Ah

Totally random, but I like that pfp, fk it im going back to furry pfp again lol

oblique loom
covert plover
#

in term sof logic i have spent weeks using ai to refine all issues i have manully found aswell as codexs smoke flags finds and solved them to points i cant recreate any bugs threw ui/ux controls or threw api calls even down too the overdue payent and read only acess flags etc.

i have a few edge functios setup for syncing data threw frontend cloudflare api proxt and frontend pages aswell as the supabase edge fucntions.

in total im worried due to my 73 edge functions that can be acessed threw enterpirse plans and if someon ewas motivated enough they could maybe find errors with my limit enformcent.

river condor
#

What the absolute helli is this guy typing wholy

hushed carbon
#

ive spent hours doing jr pen test path

#

wait no

hushed carbon
#

comptia pentest+

hushed carbon
elder ermine
#

:p

oblique loom
hushed carbon
elder ermine
#

instead, im here spending over an hour setting up my cloudflared

elder ermine
hushed carbon
river condor
#

Is 0day cool?

hushed carbon
elder ermine
oblique loom
#

He

#

Okay

#

XP

river condor
#

Aw man

covert plover
# oblique loom What you mean by "Enterprise plans"?

my SAAS is based around 3 plans. a starter plan limiting certain aspects as does business plasn but enterpise plans that include custom SLA with B2B contrats to ensure realtime help with bugs found and minimising any downtime. aswell as custom limits surrounding business logic itself

river condor
#

Is there a rule that says no dming admins?

oblique loom
#

I thought you meant Shodan Enterprise

pure steeple
river condor
#

Oh

#

Hmm I'ma try it

pure steeple
covert plover
#

am i right in thinking with a very nich non ad based marketing. My full cleint base will be threw word of mouth or cold calls to specific users. i dont need to worry as much about someone with a specific goal to exploit my system.

oblique loom
#

Ive tagged them

river condor
#

Can you tag an admin and ask?

oblique loom
river condor
oblique loom
#

Na na

#

You do it xP

river condor
#

What one should I tag?

oblique loom
#

Show your strength

#

Anyone

river condor
#

@plush needle am I aloud to dm admins?

covert plover
#

okay so running threw and pushing any seperated logics to resolve a singular point of truth would be the best point.

i have started to migrate to a singe point of truth but my migrations are really starting to stack to ensure nothing is affected that exists in my current db.

with that being said i think i do have enough freedom backend to move any business logic or points of refrnce to a more centralised sigualr point of truth for each aspect

pure steeple
#

Here's some advise: If it's a good idea, get some backers (investors) and then hire someone like a sw developer or contract to a security firm to do a pen test. I don't care how many times you went over it, if you don't know code and you got AI to do it, it's going to have holes.

oblique loom
#

@plush needle you mod now?

#

Were you always mod?

#

Idr

covert plover
#

that does make a lot of sense honestly its just trusting my current ai system to do it entirley.

i think at the end of the day before full launch im going to need to pay a dev to fully audit my code. THats the cost of ai developemnt i guess

pure steeple
river condor
oblique loom
#

Animales

pure steeple
oblique loom
#

Theres nothing to understand lol

covert plover
#

i understand the concept and if i was bulding myself then id be in a good position but do you think i can trust ai on a development level to complete a request to ensure no old paths are bypassing new truths or should i just take the cost on the chin of paying for a full audit before deployment

oblique loom
#

Aw sht they typin

#

Here it comes

plush needle
oblique loom
plush needle
pure steeple
river condor
#

Sorry to bother

pure steeple
#

Well since you got him here, now we need to know what the best Bioshock is

oblique loom
#

The one wise cat

elder ermine
#

Finally finished guys.. after SLL/TLS hell

#

Vulnerable site.

#

SQLi and XSS

elder ermine
#

Im just gonna have it up for like 5 mins, this is just to test it works for my next VM

#

Incase you dont believe me.

oblique loom
#

Or

#

admin:password

#

Both have worked in the field

elder ermine
#

wdym?

oblique loom
#

I gave you the answer lol

elder ermine
#

Also, wrong.

#

The password is secure, dw

#

but the server runs unfiltered variables through SQL

oblique loom
#

Then we do dic attack

covert plover
#

appreciate the help. most people hate the fact of ai being used and get offended for some odd reson. i understand they think its a shrtcut as it realy is but as a non technical founder it can take my ideas and build a read MVP.

but ye i will probably just pay for an auit in the end.

i have spent month upon month verbally building an app using NL text to fully explain all bugs i find and use ai smoke screens to solve issues.

i feel im at a real good place.

each rg gets its own subdomain, payment systemts front and bacend seem very well in sync and i cnt physically re creae any bugs.

but your 100 percent right when it comes to api usage and things ai just really isnt trained for yet atleast not specifcially on the models i used. its worth using a real human auditor to secure my code then hitting issues later.

and for refrence the auth data isnt sensitive itslef but the idea itslef is built around complince in the construction industry but thats the least of my worries as i haev spoke with experts about that and have family that helped me tailor the ui itslf and the real complinace itelft.

the issue comes with where you say the things ai just wont catch

elder ermine
#

no

oblique loom
#

If dic attack dont work we do SE

elder ermine
#

dick?

oblique loom
elder ermine
#

Oh

covert plover
#

lol my bad

elder ermine
#

Just do SQLi 😭

#

I legit built this app for testing SQLi and XSS

#

🙏

pure steeple
#

yep works

elder ermine
#

well shiot

#

shit*

oblique loom
elder ermine
#

that was fast

oblique loom
#

Then yes we would try that to

elder ermine
#

it also has XSS vuln in the profile descriptions

oblique loom
covert plover
#

ye leave it lol you gave me enough help appreciate it #

elder ermine
#

goodnight

oblique loom
#

If your SQL is open to the internet I could dictionary attack it. But will it succeed? Probably not

pure steeple
#

alright boys, let's blow up his cloud bill 😆

oblique loom
#

At best, micro-DDOS

covert plover
#

ye i read a lot on sam altman, he is pushing the next big ideas will be made from those that diddnt take the time to learn the skill but have the ideas due to the rise of ai. Not saying it will be me thats an improbability but not being in the chances would make it impossible 👍

oblique loom
#

I too have to get ready for the sleep, so I understand

#

Cousin is asleep now, I too shall get ready for the sleep

#

When cousin awakes, I will awake

rapid merlin
oblique loom
rapid merlin
oblique loom
#

Same thing

#

Same message

#

Probably

rapid merlin
#

who is pennywise

oblique loom
#

He got himself done in so

#

Idc lol

rapid merlin
#

what does mean by this

#

and also guys can i remove this spammer flag from me and if yes then how

winged nimbus
oblique loom
#

2 messages from spammer lmao

boreal scarab
winged nimbus
rapid merlin
oblique loom
#

LOL

rapid merlin
#

but how to contact support freglar

covert plover
#

okay appreciate it. i might even first package as individual systems to my first clients to pull bug reports and efficiency reports so i can then push a real centralised one site one sub domain per org within the same auth and buckets etc. This ill avoid most issues as i can just limit each packaged org to the usage i terms of cloudflare and supabase so pysically they cant abuse systems even if logic is broken.

that way i can learn if any, what routs they will take to abuse services and then ensure that the centralised domain on deployment is safter a few month in.

of migrating or moving all databases nt a master database.

oblique loom
#

Hey now, I didn't do anything

#

I just saw the same prompt

rapid merlin
oblique loom
winged nimbus
#

idk

hushed carbon
#

almost done😣

oblique loom
#

You're almost there!

hushed carbon
#

i still have to do the 3 owasp rooms😔

oblique loom
#

Rest is good too

hushed carbon
#

i have to finish tonight

covert plover
#

@rapid merlin you have any wide estimate what I would be paying for a audit of this kind.

I know it will be based on size but even a wide range of??

hushed carbon
#

i have to finish tonight or else i cant print the cert

#

i print it at school then laminate it

#

and tomorrow is last day of school before christmas break

covert plover
#

So shouldn’t be paying more than 4 figures really. Just don’t want a wild quote as I’m like a granny being quoted on her roof in this sense.

blissful current
hushed carbon
#

last 3

#

i will hit 100 rooms

hushed carbon
fading perch
#

HAPPY NEW YEAR EVERYONE

long plaza
#

what?

tiny arch
#

Buddy traveled through time

dark wolf
unkempt kernel
hushed carbon
#

ok im at 100 now

unkempt kernel
#

which one was the 100th

hushed carbon
#

owasp top 10 2025: application design flaws

unkempt kernel
hushed carbon
#

after like 3 hourscri 🥹

blissful current
quartz drum
#

Wazzap beijing

stoic quarry
#

Morning

dark wolf
#

Hiya

#

Whats going on? I'm playing a pokergame online as 2 different people at the same table

stoic quarry
#

Cool

#

Gamble safe I guess

dark wolf
#

sometimes i do another pokergame with 3 people lol and then i go all in with all of them

stoic quarry
#

Cool beans

dark wolf
#

what have you been up to

stoic quarry
#

Been a busy bee

#

Applying for jobs

#

Workin

#

I was expecting to have a new job by now 🚬

long plaza
#

hiya

stoic quarry
#

Ello 👋

long plaza
stoic quarry
#

Doing okay aye, just tired

#

Yourself?

long plaza
stoic quarry
#

Nice

left hedge
long plaza
stoic quarry
#

Working lol

long plaza
#

oo on what?

stoic quarry
#

Uh

#

My job

long plaza
#

oh okkk

stoic quarry
#

12 hour shifts yo

narrow yew
#

@stoic quarry what did you do to the site?

#

@dark wolf it was you viggo, I knew it

narrow yew
#

I will not be silenced!

#

whoaaaa

#

friday is here