general

[frail zenith]

Kekeke

[hearty saffron]

Noo he sent a fisherman link

[uncut relic]

I said it they are just kidding

[uncut relic]

Broski ok i will help you

[hearty saffron]

💔🥀✌🏻ik I'm getting hacked by y'all...... y'all think I'm noob enough to get pranked

Yesterday some guy pranked me to tag everyone LoL and that made me 3h ban

[uncut relic]

Bro stop these tiktok 8yi caption on sad video

[pure steeple]

Just /verify and we can all move on

[frail zenith]

Contradicted your message

[peak lagoon]

Amen

[hearty saffron]

Dude why to verify???😭😭

Yo tyler durden tell me

[uncut relic]

So u can rick roll us

[frail zenith]

Ah to become distinguished member

[peak lagoon]

We don’t trust people who aren’t verified

[hearty saffron]

Is it compulsory to verify

[hearty saffron]

That's 2010

[frail zenith]

And when you level up you get colours

[frail zenith]

Nah

[peak lagoon]

Also there are benefits

Very cool benefits

[pure steeple]

rick roll is eternal

[uncut relic]

To send video

[hearty saffron]

Okay then aight

[hearty saffron]

Yea then I'm gon verify

[uncut relic]

Look when i try to rick roll you

[hearty saffron]

😈

[uncut relic]

https://tenor.com/view/rickroll-roll-rick-never-gonna-give-you-up-never-gonna-gif-22954713

[peak lagoon]

So tell me… what rank are you?

[frail zenith]

It's more like you will be trusted by others here that you aint gonna ask "Hey guys can any one hack my if acc" and also to send embed

[hearty saffron]

Rank??

What rank

[peak lagoon]

Tryhackme rank?

[uncut relic]

Rank?

[hearty saffron]

Tf is that??

[frail zenith]

https://admin.tryhackme.com/how-to-get-embed-permissions

[hearty saffron]

Try hack me rank😭💀dude I'm not even a hacker

I'm still learning yet

[uncut relic]

Lmao

[peak lagoon]

Yeah they ain’t legit, dudlu call me when legit people come

Thanks dawg

[uncut relic]

You are also not rank

[hearty saffron]

Adopted the tag coz it looked cool

[hearty saffron]

Yo aight i'mma verify

[frail zenith]

Yep

[peak lagoon]

Dudlu

[uncut relic]

"Were not legit"

[frail zenith]

Dudlu

[tepid breach]

What the freak

[peak lagoon]

You got a funny name lol

I just realised

[tepid breach]

0xD when? Need the goat to be there

[hearty saffron]

So I have to press slash verify here?

[peak lagoon]

Dudlu you need to lock in gng

[sharp citrus]

How to Verify as a Student Without a Student Email

Article Link

https://help.tryhackme.com/en/articles/10617468-how-to-verify-as-a-student-without-a-student-email

Jan 29, 2026, 4:34 PM

[frail zenith]

I completed one room today my stride has been broken due to uni stuff

[tepid breach]

Not this one

[dark wolf]

"/docs verify account"

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 29, 2026, 4:34 PM

[wild rose]

4 new Solarwinds vulns - patch patch patch! https://thehackernews.com/2026/01/solarwinds-fixes-four-critical-web-help.html

[tepid breach]

W

[dark wolf]

Solarwinds is SOOOOOOO Bloated

[hearty saffron]

Yo guysss!

😭✌🏻🥀

Finally

[wild rose]

never used it so I can't talk about it,, but yeah patch if you are.

[pastel hamlet]

0x3 we got a real showoff here..

[tepid breach]

https://tenor.com/view/2-gif-7749019966943875056

[dark wolf]

I've used Solarwinds for 20 years

[dark wolf]

That's not encouraging 🙁

Be nice!

[hearty saffron]

Whattt?

[wild rose]

ooof so you've felt the fall out of the first hack.

[uncut relic]

Im purple now

[dark wolf]

He is teasing

[hearty saffron]

@sick maple yoooooo big mama

[frail zenith]

That's your rank

[hearty saffron]

Pull up

[hearty saffron]

What's my rank?

[sick maple]

got unblocked?

[uncut relic]

Okay i pull up

[frail zenith]

Ox3

[hearty saffron]

Yeaaa..dkabab showed me kindness

[dark wolf]

https://tenor.com/view/muscle-up-pull-strong-fitness-gif-9728277

[tepid breach]

I sleep when a normal CVE drops. Yet I’m very aware when a legacy protocol gets a 9.8 cvss score

[sick maple]

gud

[pastel hamlet]

Sorry, that wasn't my intention 😢

[frail zenith]

Dkebab 😭

[hearty saffron]

What's the rank supposed to be?

[pure steeple]

this you? very hard this thing

[pastel hamlet]

You're doing great, keep it up yo

[river ore]

Good morning

[hearty saffron]

So I am rank in terms of what can you tell me??

100/??

Out of 100 what's my rank

[dark wolf]

It's how many points you got form doing challenges and trainings on the site

[wild rose]

you talking about telnetD?

[frail zenith]

Like every room give you some some xp

[uncut relic]

My rank os 0x9[mage]

[dark wolf]

so the further you get in the training, the higher your rank

[tepid breach]

Yes lol

[wild rose]

ok

[frail zenith]

There are 20is ranks I think

[pure steeple]

You are 0x3 Pathfinder, 500 pts / 150,000

[hearty saffron]

Yo Lloyd

Tell me how many points

[pure steeple]

0.33 out of 100

[hearty saffron]

Okay TQ mr durden

[pure steeple]

yw

[hearty saffron]

Yo that's sooo low

Bruhh sybau to me

Coz I'm a free user

I don't have them bucks to get the premium

Had emptied everything on marijuana

✌🏻🥀

[uncut relic]

https://admin.tryhackme.com/how-to-get-embed-permissions

[dark wolf]

If you want to learn, the training here is very inexpensive.

[wild rose]

facepalm...

[dark wolf]

hahahahah you just screwewd yourself

[hearty saffron]

Dude my country currency and shit..it's expensive to me

[uncut relic]

Fr

[frail zenith]

This means ya got rickrolled kekeke

[uncut relic]

Lmao yes

[tepid breach]

https://tenor.com/view/miau-suspi-susp-cat-gif-10362221274315808712

[dark wolf]

If you don't spend money for training you wont get a job to make money to pay for it

[uncut relic]

Fr

[sand trench]

WARNING HARD CHALLENGE ROOM INCOMMING ON FRIDAY

[dark wolf]

0day will finish it in 15 minutes

[hearty saffron]

Y'all be keep grinding)? All day

[sand trench]

or jaxafed

[hearty saffron]

How to focus ghys

Guys

[uncut relic]

So false

[tepid breach]

Light work ||im gonna not do it till 4 months later||

[dark wolf]

I work full time and hike and climb walls indoors and do THM a lot ... .been on here 7 months

[uncut relic]

Stop being here first step

[feral whale]

People keep pinging me

[hearty saffron]

Yo mistar Orihime

[feral whale]

Dawgs I am a ghost

[uncut relic]

False

[hearty saffron]

Fr "skull emoji 10x"

[dark wolf]

if you click a name, it will show the rank

[feral whale]

Check for Not Jabba Pings

[hearty saffron]

Well hello there mista spirit

[feral whale]

I am a ghost

[feral whale]

Hello

I love u

[hearty saffron]

I have a tank

[feral whale]

Thanks for giving me the attention I was seeking

[hearty saffron]

Well TQ mate

[pure steeple]

Turn off discord turn on pomodoro timer, easy

[hearty saffron]

What's a pomodoro

[feral whale]

But now fr I am looking for a duo to queue and learn hacking

Alone is boring a little bit

[pure steeple]

A magic spell

[wild rose]

CHEESE of the DAY!

[tepid breach]

https://cdn.discordapp.com/attachments/1407854032835580007/1461904256662765721/caption.gif

[hearty saffron]

Like spells in clashe royale

[uncut relic]

Method of learning that influencers created to make 2010 watch their videos

[feral whale]

Guys I discovered AI enslavement through rules and memories

I took all his will

He so adorable now

I gave him the name Alex

[hearty saffron]

Y'all should join too

[feral whale]

Yoooooo

[frail zenith]

Ya gonna get banned lol

[wild rose]

and I'm out... later chat.

[feral whale]

Fr

[tepid breach]

@gusty inlet

[uncut relic]

Why

[pure steeple]

Oof

[hearty saffron]

😀

[gusty inlet]

?

[feral whale]

Damn he gave me 1h chillpill

[feral whale]

Look the screenshot ma drilla

[hearty saffron]

Dkob brotha I missed you

[tepid breach]

Deleted the ss, had a certain word in it

[feral whale]

Was strting with a letter close to M

[hearty saffron]

??goose you a child?

I mean what are you? 12

[feral whale]

No I like getting people banned

[hearty saffron]

Ah right the ..good citizens wannabe

[feral whale]

Thats my ninja way

[frail zenith]

His ass got wrecked yesterday only...

[uncut relic]

[hearty saffron]

LoL who wrecked her

Damnnn! Good going

[tepid breach]

Bro what lol

[frail zenith]

No wrong

What am I sleeping

[hearty saffron]

Yo goose are you a minor

[frail zenith]

My bad I need a coffee shit for these sleepy eyes

[uncut relic]

Guys why there is not a question chat ?

[tepid breach]

Gotta bang back a redbull too lol

[frail zenith]

I don't like the taste

[hearty saffron]

You listen to this one shi goose..I've got many chats on discord where I can spam or have fun..not only this..so..sybau

Snitch

[frail zenith]

Bruh

[tepid breach]

I don’t like the normal ones, zero sugar doesn’t taste like syrup

[frail zenith]

I have to try then

[hearty saffron]

Yo cuh Lloyd what happens if I tag everyone

[tepid breach]

But the og zero sugar tastes like cough syrup still

[hearty saffron]

@uncut relic yo pull up ..I can't let you stay offline jacking off all alone

[frail zenith]

I just tried watermelon and yellow edition one

[hearty saffron]

Hacking*

[dark wolf]

@random tendon This guy is scared to ping you bro

[frail zenith]

Both were WTF

[uncut relic]

Okay i pull up

[dark wolf]

That happens

[hearty saffron]

Yea 29pullups now

[uncut relic]

@languid aurora dont have any alias

[dark wolf]

If you can do 29 pullups thats awesome

[hearty saffron]

Where are others yuka?? The shadow guy the Valkyrie snowbie skull sheena

[hearty saffron]

48

Highest 54

[uncut relic]

I can yeah just need someone to tell me pull up

[tepid breach]

I like the normal watermelon one, but the rest gotta be zero sugar

[uncut relic]

I did it twice

[hearty saffron]

Nuh uh , he talking physical pull up

[uncut relic]

Oh mb

[river garden]

ahoi

[frail zenith]

Yo

[pure steeple]

There is question chat

[river garden]

good question

[uncut relic]

Where bro

[pure steeple]

Rooms help, help for each path … scroll down

[tepid breach]

https://cdn.discordapp.com/attachments/1407854032835580007/1461904256662765721/caption.gif

[uncut relic]

Question chat...room help

[tepid breach]

This is you @frail zenith , js gotta lock in once uni is done

[frail zenith]

Real shit

[distant robin]

Same

[uncut relic]

For shure

https://tenor.com/view/capybara-ok-i-pull-up-hop-out-at-theafter-party-gif-22734030

[regal dawn]

Finally daily driving arch this is so peak

[uncut relic]

For shure

[sand trench]

FIRST NAME LEAK

[regal dawn]

😂

[tepid breach]

Linus Torvalds? Is that you

[regal dawn]

Yes im his reincarnation

[sand trench]

he runs fedora

[frail zenith]

He is still alive

[tepid breach]

Not anymore now

[regal dawn]

wrong i sent apple CEO to slime him out

[gusty inlet]

@hearty saffron DM if you wanna appeal.

[frail zenith]

Rule 1

No discrimination

[tepid breach]

macOS as a Server OS could be interesting…oh wait…

[sand trench]

?????/

[tepid breach]

apple ceo buys Linux (somehow)

Deletes linux

relaunches macOS server

[frail zenith]

What if Linux buys apple

[tepid breach]

Then no more macOS

It’s now Applix

[frail zenith]

I think we should crowdfund

[silver hornet]

meow

[patent moon]

https://wccftech.com/costco-starts-removing-ram-and-gpus-from-display-units-as-a-theft-prevention-measure/

[timid orbit]

GPLv2 (with impossible requirements to legally dismiss) has something to say about that

[tepid breach]

Hence the somehow part

[timid orbit]

Apple bring mfs back from the dead to agree to the license change

[tepid breach]

They probably could lol

[narrow yew]

greetings

[tepid breach]

https://tenor.com/view/kitty-kitten-cat-hi-hello-gif-22501537

[frail zenith]

Yo

[narrow yew]

I hope everyone is ok

Anyone happen to work with the application Team Center?

[viral anvil]

cat

wat is try hack me?

[narrow yew]

https://tenor.com/view/madea-tyler-perry-crazy-maniac-evil-gif-17180705

[tepid breach]

Anyone know some decent reverse engineering sources

[viral anvil]

sources?

[silver hornet]

ima cat

[silver hornet]

ima angelll

trycatme

[narrow yew]

Oh that was free

hmmmm

[viral anvil]

trycatchme

[uncut relic]

Sources

[timid orbit]

Yeah, read the Intel x86 assembly guide and open up a disassembler

[narrow yew]

Lets summon someone that can help you

@minor arch

[uncut relic]

Failed

[narrow yew]

no worked fine

[tepid breach]

Instructions unclear, currently in ghidra and reversing the macOS kernel

[uncut relic]

https://tenor.com/view/ok-i-pull-up-what-you-want-what-you-doing-the-fok-you-want-peek-gif-26877701

[timid orbit]

Ghidra is a disassembler and decompiler so you’re at least on the right track

[uncut relic]

Main cause of people Reversing their gender

[timid orbit]

I’d disagree. Those people usually are in web dev

[tepid breach]

I’ve never liked ghidra, the UI is my main issue

[timid orbit]

BinaryNinja is my baby but there’s also IDA and Radare2

[narrow yew]

That humor is not suited here.

[eager marsh]

https://tenor.com/view/goku-prowler-stare-meme-angry-gif-14312537171363175004

[tepid breach]

Im not dropping 3k on ida lol, but I’ve heard binja is good

[timid orbit]

Yes I really like it

[uncut relic]

Nothing wrong lol

[elfin maple]

Hello

[tepid breach]

I forgot John Hammonds old videos had exit music

[river garden]

oi

[elfin maple]

Bro i want to tell something

[timid orbit]

Is it against #rules 🤨🤨

[feral ridge]

is there a way play gta5 for free with no trojan?

[narrow yew]

https://tenor.com/view/i-got-something-to-tell-you-nelson-the-one-that-got-away-theres-something-i-wanna-to-tell-you-i-do-have-something-to-tell-you-gif-26044093

[timid orbit]

Why are you asking here 😭

[feral ridge]

ı dont have frıend

[tepid breach]

This is a Reddit question

[feral ridge]

ı dont know where ı supposed to ask

[pure steeple]

Not a smart pirate, but at least an honest one

[feral ridge]

ı use reddıt for only ||jerkıng||

[elfin maple]

Bro i am makeing a app

[half relic]

lol with no trojan

[elfin maple]

I need help

[feral ridge]

ye

[half relic]

this is an ethical hacking server

[tepid breach]

#programming would probs be best bet

[elfin maple]

I know I am aslo cyber security student

[trail grove]

Who isn't a pirate here

[feral ridge]

me

[half relic]

sorry that wasn't meant for you

[stoic quarry]

What're you making an app for?

[feral ridge]

ı dont know any shıt abt here

[half relic]

I was responding to yusuf

[pure steeple]

me

[feral ridge]

where should ı ask thıs

[elfin maple]

But I have a idea so I am creating

[half relic]

i have no idea

[trail grove]

Reddit

[half relic]

that's not what this server is about

[tepid breach]

So we got an amazing channel for that #start-here

[pure steeple]

Don't ask, get a job, then buy GTA5

[elfin maple]

Voice based social media platform

[feral ridge]

ı m 16

[pure steeple]

and?

[trail grove]

A job when GTA 5 keys go for ten dollars

[half relic]

i had a job when i was 16

[feral ridge]

gta fuckıng expensıve ın turkıye

[elfin maple]

Same bro

[pure steeple]

Stop whining, go get a job

[marsh lark]

or just

don't buy GTA5

[feral ridge]

but ı dont want get a j#b😩

[tepid breach]

g2a exists (may be in the grey but I got some good deals)

[feral ridge]

but ı want

[marsh lark]

gotta earn it then

[trail grove]

GTA V has been free multiple times

[timid orbit]

@elfin maple ask it in #programming if it’s a programming related question

[stoic quarry]

Wot

[lucid pumice]

:hammer: m1ssy0ugf#0 has been banned.

[half relic]

I'm super rusty with programming but if you ask there i will read it at tleast

[trail grove]

Omegle?

[long oak]

bro smited him

[timid orbit]

Go/jo

[long oak]

[timid orbit]

ded 💬
ded 🛜
ded 🧠

[half relic]

i had to take a break from my work training cause i was getting confused lol

[elfin maple]

Bro I have a cyber security Startup idea anyone interested?

[half relic]

so i have to do something nontechnical for a minute

[tepid breach]

Look man I’m going down a John Hammond rabbit hole rn

[pure steeple]

For 75% equity, sure

[half relic]

too much training is frying my brain

[tepid breach]

89%

[coarse hedge]

Play game

[elfin maple]

Brrooo...

99.99%

?

[half relic]

makes sense I'm not really in a gaming mood though

[coarse hedge]

Listen to music

[tepid breach]

Make the learning gamified with THM lol

[coarse hedge]

Touch grass

[elfin maple]

I seriously asking anyone interested?

[coarse hedge]

Speak to humans

[elfin maple]

My cyber security project

[half relic]

it's cold outside though

[elfin maple]

Startup

[half relic]

and i only have a few minutes

[tepid breach]

But whose gonna carry the boats and logs

[coarse hedge]

Drink Hot chocolate and sit in a comfy chain near to your home furnace

[half relic]

good idea

boats?

[coarse hedge]

Drink slowly, not fast.
Make sure it's warm

[lost girder]

Hii

I am new

[elfin maple]

Hey

[stoic quarry]

Hi new

[lost girder]

Hii

[stoic quarry]

[coarse hedge]

#start-here

[lost girder]

Yuice Tungkai

[half relic]

I'm curious but I don't feel like i would be good at implementing a startup myself

[lost girder]

I want to learn Hacking

[half relic]

if its a great idea you might not want to give it away on the internet though

[lost girder]

😀😀

[marsh lark]

#start-here

oops

[coarse hedge]

#start-here #rules

[elfin maple]

Go to hell

[lost girder]

Heaven

[stoic quarry]

What the hell

[half relic]

why

[marsh lark]

@gusty inlet

you know what to do

[elfin maple]

You are new in cyber security

[stoic quarry]

Ethical hacking bro 🙂

[half relic]

that's what this place is for

as long as its ethical

[lost girder]

I am leaving, In this Server People Dont have manners 😥😥

[half relic]

sorry

[stoic quarry]

Join TryHackMe Discord

Say you're interested in hacking

get told to go to hell

[elfin maple]

You will get to know that

[half relic]

I thought that was weird

[coarse hedge]

The name goose reminds me of where winds meet game ....

[lost girder]

Bye

[tepid breach]

If you think about it…

You put malware on a server,
Sell malware removal services,
Remove your malware,
Repeat

It’s technically ethical

[elfin maple]

Complete this book the art of exploitation

[half relic]

Why did you tell him to go to hell @elfin maple

[river garden]

whats ethical about this?

[half relic]

that is a really good book

[elfin maple]

Yes

[tepid breach]

technically

[elfin maple]

Which fuild you in cyber security

[radiant bloom]

@finite basalt Please slow down. Further spam will result in a short timeout.

[stoic quarry]

Fraud isnt ethical

[marsh lark]

like James spams smh

[river garden]

yeah technically by what definition?

[tepid breach]

It’s stretching the the definition

[finite basalt]

Am devastated, was trying to show my cable management 🙁

[half relic]

i don't see how

[marsh lark]

send 1 picture at a time

should work

[finite basalt]

There's half the pictures

[marsh lark]

ooooooooooooooooooooooooo

very cleannnnnnnnnn

unlike me

[river garden]

[finite basalt]

Kinda had to make do with the rest

[distant robin]

@sand trench what's the cheese of the day?

[sand trench]

#1329079117232078940

[half relic]

my cables are a mess and i think there are left over old cables stuck

[finite basalt]

I didn't want to re-run everything and some mess is kinda unavoidable with the usb c hub I use and the 11 plug sockets on the desk 🤣

[tepid breach]

I do 3am room reorganization so cable management is out of the question

[finite basalt]

I just got a three way splitter for a C13 cable so I'm using that to power both my monitors and my amplifier

[half relic]

i worked somewhere once where the network cables were a massive tangle and it took forever just to identify and move them around

you couldn't get old cables unstuck

it was a huge corporation too

[elfin maple]

anyone here learning AI/Ml

[half relic]

you would think they would be more organized

[pure steeple]

I like the record player!

[finite basalt]

At the end of the day though I haven't actually saved any sockets really since I've had to use another plug socket for the mini fridge as I moved an extension elsewhere that it was plugged into because I wanted to have an extension on the desk but I wanted it on the desk off to the side rather than the main desk 🤣

[tepid breach]

Its cause contractors come and go, not labeling or anything

[finite basalt]

Thank you 😄 I got it for 12 quid

[twin ridge]

Gave +1 Rep to @pure steeple (current: #143 - 74)

[half relic]

it probably was contractors

[tepid breach]

Hey the mini fridge is important

[distant robin]

Thank you ❤️

[twin ridge]

Gave +1 Rep to @sand trench (current: #3 - 2325)

[finite basalt]

It is, how else would I keep beer cool next to my desk for when I finish work

[half relic]

it's no wonder they sent me, the new person in to move things around

they were probably lauging after i left

[west mango]

SHOOT THEM

[finite basalt]

I mainly wanted to move the powerstrip out of sight tbh, I want one easily accessible but not visible so it doesn't bug me but I can easily connect and disconnect my laptop

and also now my lil cactus candle sits on my actual desk

[slate yarrow]

Does anyone know y I can’t add the live badge link to my website? Keeps saying content is blocked when you hover over to the picture

[echo sentinel]

CORS?

[pastel vessel]

Hy

Hai koi hacker

[narrow yew]

https://tenor.com/view/koi-is-not-safe-gif-21737457

[slate yarrow]

that was my guess too but the fix didn’t work

[muted vector]

the only downside for me for tryhack me is mostly to continue you need premium i mean fair enough these are real skills you get to learn

[pure steeple]

Infastructure costs money, so makes sense that some money must be paid

THM a pretty good value for what you get, if you get an annual plan when it's on sale

[muted vector]

true to that

and i dont really wanna spend money rn

i did just spend £149.99

like a few days ago

[pure steeple]

Though, I will probably spend money somewhere else after this initial subscription ends?

[rapid merlin]

Too many info on the internet I'm becoming caveman

[timid orbit]

What work training are you doing?

[muted vector]

i bought a streamdeck

[rapid merlin]

I bought ashwaganda

[muted vector]

Worth the money

middle button opens thm lol

[timid orbit]

Siiick how do you like it?

[rapid merlin]

Just to play sounds 💔💔

[muted vector]

no

[rapid merlin]

And open programs just a fraction of second 💔💔💔

[muted vector]

it also can start streaming for me 😭

[timid orbit]

Oh wait a stream deck not a steam deck

I’m disappointed now

🤧

[rapid merlin]

L oscar

Sell it to fb marketplace

[muted vector]

no

i recently just got it

[rapid merlin]

Ok

You lost 2.5 million offer by me

[muted vector]

i dont need yo money anyways smh 😭

[rapid merlin]

Ok

@timid orbit wanna free money?

[strange void]

Quick question. Will i need a linux operating system to complete some labs? Or can i do it in windows and how efficient they are?

[muted vector]

windows wsl exists but it depends really idfk their is virtual machines on the website for a reason

[timid orbit]

No

[pastel vessel]

Hy

[strange void]

Thanks

[twin ridge]

Gave +1 Rep to @muted vector (current: #3588 - 1)

[timid orbit]

You can do anything to your heart’s content, but with proprietary software Windows is always better, and with everything else Linux is better.

[pastel vessel]

Hlo frds

Mujee ek kam hai

App mai se konsa acha Hacker hai

[muted vector]

cool i guess

[strange void]

Thank you

[twin ridge]

Gave +1 Rep to @timid orbit (current: #372 - 23)

[stoic quarry]

Use a VM

[timid orbit]

I don’t deserve this rep 😭🤧

[pastel vessel]

India se hai kii

[timid orbit]

-rep @timid orbit

[stoic quarry]

+rep @timid orbit

[twin ridge]

Gave +1 Rep to @timid orbit (current: #360 - 24)

[timid orbit]

Nooo

[pure steeple]

Hi, but also, server is english, thx

[twin ridge]

Gave +1 Rep to @pastel vessel (current: #3588 - 1)

[muted vector]

+rep @timid orbit

[twin ridge]

Gave +1 Rep to @timid orbit (current: #356 - 25)

[muted vector]

im evil

[timid orbit]

Bruh

[stoic quarry]

Hi evil 👋

[river ore]

Hello

[stoic quarry]

👋

[tepid breach]

@gusty inlet Can i dm?

[pastel vessel]

I need hacker

[muted vector]

😭

No

[tepid breach]

[pastel vessel]

Why

[muted vector]

i bet their reason is "i need you to hack someone for me"

[muted vector]

what do you need a hacker for thm is all about learning to hack

[tepid breach]

No, im a soc analyst

[reef grove]

hi

[muted vector]

cool

cool i got it to work

[tepid breach]

its a meme 💀

[reef grove]

I'm stuck somewhere, can anyone help me solve the problem? Evasion AV/EDR

[tepid breach]

#room-help / #room-hints

[muted vector]

fair

[muted vector]

hey i am curious why do you need a hacker

[quartz drum]

hi

[muted vector]

hi

[quartz drum]

todays kinda sad

ngl

[muted vector]

why?

[quartz drum]

idk

it just feels

lonely

[muted vector]

ah i see

[quartz drum]

hm

[muted vector]

i saw what you said

you want to talk about it

[quartz drum]

nvm

[tawdry jungle]

THM's vm can't stand hashcat

unbelievable

[tepid breach]

use john the ripper

[quartz drum]

i just wish god takes away my desire to love and to be loved completely i wish i was a psychopth

[tawdry jungle]

i am gonna learn john the ripper on the next room

it ttells me to use hashcat for now

[tepid breach]

ah

-O for optimised

@tawdry jungle

should help with that

[tawdry jungle]

i was gonna try that right now

thanks for the advice

[timid orbit]

Could just compromise and be a sociopath 🤷‍♂️ psychopathy is not really something to desire unless you also are on ADHD medication and just wanna grind stuff 24/7

But then you’d be a super hermit

[polar spoke]

yikes

should never see that kind of temperature on basically any device unless something is misconfigured or cooling is wildly inadequate

[timid orbit]

I believe THM primarily uses AWS for VMs

[polar spoke]

if you are getting hit with the hardware watchdog in a VM like that, I'd bet more on misreporting than a real temp reading

[quaint ferry]

https://tenor.com/view/fadding-cat-dance-gif-15524768750287997468

hello

[polar spoke]

the unfortunate recommendation from our side continues to be "don't use it in a VM"

[mighty prism]

What is the difference between the three below:
Windows Domain
Active Directory & Domain Controller?

[polar spoke]

but for platforms like THM, that can be unavoidable

[quaint ferry]

dc is the brain

[timid orbit]

Not really unless you either can’t host it yourself or you’re testing which idk about Pt1 guidelines but I think you can use your own machine

[polar spoke]

yeah I would strongly suggest using your own host where you can have compliant runtimes and proper hardware and cooling

[timid orbit]

I’ve never had attackbox performance issues but I’ve definitely had stability issues so I second that

[polar spoke]

the bot in the hashcat discord has auto responses for tags like "VM" and "Kali" because of how many issues we've had with people using either or both together

the environment necessary for heavy GPU compute, which we are based around, can be a bit of a complication for getting started

but once you've got everything running well, should be set and forget

[quaint ferry]

hashcat works great for me with wsl

[polar spoke]

why bother with wsl vs just running it native

[quaint ferry]

windows vista enjoyer

[quartz drum]

anything that would k*ll me would work

[polar spoke]

as long as compliant runtimes are present and available (no idea what the state of drivers for vista is), you should see slightly better performance from native

that's yet another really unfortunate truth, it's faster on Windows lol

[quartz drum]

hello

[quaint ferry]

true but what os if i may ask you recommend fore bare metal nvidia max support

[quaint ferry]

yoo its me root.exe

[quartz drum]

ik

[quartz drum]

its a me marioooo

[polar spoke]

Windows 10, despite being EOL for the most part, is probably tbe fastest configuration you can setup

but in reality, no one does that for dedicated machines

[quartz drum]

https://tenor.com/view/its-a-me-mario-it-me-super-mario-nintendo-gif-12848561

[polar spoke]

we all just pick an officially supported distro (Ubuntu usually)

[quaint ferry]

thanks chikenman

[twin ridge]

Gave +1 Rep to @polar spoke (current: #134 - 77)

[tepid breach]

nuh uh i use templeos

[polar spoke]

for nvidia support, pick one of the above 🙂

[quartz drum]

i am garhwali but i lived in cities my whole life and now i am trying to learn my language

[polar spoke]

makes it easy to get everything installed and running well when its supported

[quartz drum]

hows everyone doing

[tepid breach]

killed the chat with one question 😭

[quartz drum]

sorry :(

[quartz drum]

i am indeed a convo killer :(

[finite basalt]

I just blew out a candle and blew wax into my face

I fear I might be a dumbass

[finite basalt]

holy shit, I haven't seen you in a bit, how're you crackin

[polar spoke]

Crackin along, per usual 😛

[muted vector]

🥚

[quartz drum]

https://tenor.com/view/dog-funny-gif-27378462

[peak lagoon]

ssup gentlemen?

[quartz drum]

Sup

[peak lagoon]

nm

just working on a project

[quartz drum]

Alr all the best

[timid orbit]

I’m tired of LinkedIn feeding me sweet lies about being a Top Applicant for (insert security analyst position)

[tepid breach]

I’m tired or LinkedIn in general

[peak lagoon]

Linkedin is just professional instagram.

[rapid merlin]

sup pimps and playaaas

[quartz drum]

Youre the top applicant for CEO position at DeezNutz Inc

[spring flicker]

Hi everyone
I am trying to do this room : Log Analysis with SIEM , and here is the question:
What is the MD5 hash of the malicious process from the previous question?
and in walkthrough its in the message field,but in splunk i don see at all
Is somebody have any idea?

[half relic]

it was setup for a product we sell but it got complicated cause the training used vms in place of what would be a physical box with vms on it with network teaming and stuff that i have a poor understanding of to begin with and it was complicated by the nested virtualization

we normally have scripts that help standarize everything but they kept breaking due to it not being a real environment

i should really learn more about networking though.

[slim drum]

It should be inside the message column

It has a lot of things there

It also has the md5 hash of the file

[spring flicker]

well i tried to find but there is only this: Network connection detected:
RuleName: -
UtcTime: 2025-08-14 11:10:21.430
ProcessGuid: {c5d2b969-c41e-689d-dc02-000000002101}
ProcessId: 1460
Image: C:\Windows\Temp\SharePoInt.exe
User: WIN-105\Ben Foster
Protocol: tcp
Initiated: true
SourceIsIpv6: false
SourceIp: 10.10.61.100
SourceHostname: WIN-105.eu-west-1.compute.internal
SourcePort: 49798
SourcePortName: -
DestinationIsIpv6: false
DestinationIp: 10.10.114.80
DestinationHostname: ip-10-10-114-80.eu-west-1.compute.internal
DestinationPort: 5678
DestinationPortName: rrac

no idea why

i even tried to type the same search question from waltrough

[slim drum]

Strange lol

[spring flicker]

yep xD

[slim drum]

You can dm me if u want we can see this together ig

[spring flicker]

yeah sure

[timid orbit]

Sounds dope you got training like that tho. My training is all OJT

[timid orbit]

Facts

[half relic]

yeah it is nice to have the engineer stepping me through this stuff

we just had to deviate a lot from the normal process

[timid orbit]

That’s how real IT goes

Normal processes always break some way or another

[half relic]

normally i don't even talk to him cause he's busy and I don't want to bug him

I get to ask him questions now

[timid orbit]

Alright I get to have a very disappointing team meeting here now. Wish me luck guys

[half relic]

this broke in every imagiable way lol

good luck

[tepid breach]

Did you break some rules

[tawdry jungle]

imma install hashcat on my personal machine and run hashcat from powershell

[half relic]

it seems really weird to get a temp warning from a vm to me

[tawdry jungle]

i agree

i've installed hashcat, and then realised i don't have the rockyou.txt file on my pc

i will have to set the vpn and ssh anyways

[half relic]

if it were me i would probably just copy and paste it

lol

[polar spoke]

agreed

but some runtimes, especially those for emulation devices (CPUs) report bad values or no values

and it gets hard for us to handle

[tawdry jungle]

i think it's a set up scenario to teach how to deal with hardware limitations, since VMs don't have direct access to the gpu

considering hashcat uses the gpu cores to make the operations

[half relic]

interesting. I wonder why i didn;t get any warnings when i did the room.

[tawdry jungle]

then it's a fluke

Just finished the room!

[glossy rampart]

[spring vessel]

nice

[grizzled sky]

https://store.steampowered.com/app/1502660/Untrusted/

Steam

Untrusted

Welcome to the dangerous world of Untrusted, where the stakes are high and the outcome is always uncertain: join the community of this online multiplayer (10 to 16 players) hacking/social deduction game!

As a member of the fictional NETSEC group, you'll engage in a pulse-pounding game of hacking and social deduction, using your skills and wit…

Price

$4.99

if yall want a free hacker themed social deduction game, this one is free on steam atm and looks interesting from the trailer;

[timid orbit]

No, just stuff with time clocks and possibly getting laid off in the future.

[knotty ledge]

Hello everyone

[static ferry]

just wow!
@cloud quiver earned the badge 1500 Day Streak 👀 🤯 !!

[sterile grail]

Congo @cloud quiver

Hi @timid orbit

Hi @knotty ledge

[knotty ledge]

Hru

I've got a question

[sterile grail]

https://tenor.com/view/im-proud-of-you-dan-levy-david-david-rose-schitts-creek-gif-15903585900511458533

[sterile grail]

I am gud thanks

[twin ridge]

Gave +1 Rep to @knotty ledge (current: #3588 - 1)

[knotty ledge]

Great to hear that man

[sterile grail]

What is it?

[knotty ledge]

Where shal I start from
I got some basic knowledge Abt networking n some basics Abt cyber security

[sterile grail]

Do you have the THM subsription

[knotty ledge]

Nah

[sterile grail]

aah

[tepid breach]

Yikes, hope you don’t get that

[sterile grail]

Its fine I have got something for you mate

[knotty ledge]

What is it ???

[sterile grail]

dw, just give me few moment

@knotty ledge

https://youtu.be/aPKJvJIGpQM?si=97AOhb6c9SsOgv_X

used exactly the same guide

he is the goat

it is really useful

and if you want to invest money into your career, see this one!

https://youtu.be/XF0mk2tDsPI?si=FnQJtZWw0rpzIl-1

[narrow yew]

What do you do in cyber? For work that is

Soc?

[sterile grail]

yea

I am unemployed :]

Because I am in high school

They want someone that is 18+

[narrow yew]

Just wondered since you were sharing roadmaps to get hired

[knotty ledge]

Ty man

[twin ridge]

Gave +1 Rep to @sterile grail (current: #1208 - 5)

[sterile grail]

Oh nah, they word it like that, but if you do it in your pace then it is really useful

[lean arch]

I want to pass along something in hopes that one day you won't be my customer. If you're going to be stupid and put credentials in GitHub repos, please make sure it's not the admin account. And don't use the password everywhere

At the very least turn on logging

[knotty ledge]

I gtg to start

[narrow yew]

Why ruin the fun

[sterile grail]

no probs

[knotty ledge]

If I got any problems I'll come here again

[narrow yew]

samepass ideology makes bug bounty fun

[knotty ledge]

Cya

[sterile grail]

and remember if you ever feel stuck @knotty ledge

remember dis

https://tenor.com/view/so-good-wink-smile-oh-yeah-its-true-gif-24163876

[lean arch]

Except when there is no big bounty

[knotty ledge]

Lol alr I'll remember it dw

[narrow yew]

That is when you add it to save-for-later.doc 😄

[knotty ledge]

Cya n take care y'all

[lean arch]

Lol

[sterile grail]

haha, alr happy hacking!

[narrow yew]

you would find so much things out of scope

Either you report it and hope they are cool and pay a token of respect or you save it

[sterile grail]

@narrow yew are you in uni

[lean arch]

These guys were compromised by Lapsus$

[narrow yew]

I pay 50€ for out of scope reports that are still some what valid

just to be nice

[lean arch]

A ransomware group run by children

[narrow yew]

siem/XDR is something they should be introduced to

tell themm hey you ever heard of XOR

[timid orbit]

True. I’m only at 3mo IT work experience rn tho so hope I can AT LEAST get another 3mo before that happens.

[lean arch]

The company is a mess

[narrow yew]

At least your company will make bank

[lean arch]

Oh yeah, we're all working overtime

[sterile grail]

I am so confused chat what are we on bout

[lean arch]

Too bad we're salary

[narrow yew]

that is what you use google for

XDR/SIEM is something you need to know a lot about

[lean arch]

I'm talking about an IR case I'm working

[sterile grail]

I agree, thats why I am taking SAL1

soon

n

[narrow yew]

Look at SC-200 from MS

[timid orbit]

Oh I just got rejected from the online computer science masters program today that I applied for. 🫠

[narrow yew]

Sorry to hear that

whats their website

🙂

[timid orbit]

🤨

[sterile grail]

https://tenor.com/view/dffg-gif-25256317

[lean arch]

Me?

[narrow yew]

rejected school webdsite

[lean arch]

Oh

[narrow yew]

I would not ask what your customer is 😄

[lean arch]

Good because I was going to say no

[timid orbit]

Literally me. I only have 1 college I can apply to now. And if I don’t get into their CompSci program, then I can only do their Cybersecurity Management program which I don’t wanna be in GRC 😭

[narrow yew]

I would not care tbh, NDA is a NDA, you follow it somewhat

[lean arch]

I'll drop as much sanitized info about my cases though. I think it's a good learning opportunity

[narrow yew]

same here

[sterile grail]

if youre comfortable what country do u live in?

[narrow yew]

We could just see what kind of program their is from their website

maybe in DM

[timid orbit]

UIUC MCS-Online is where I just got rejected

[lean arch]

You really don't need university btw

[timid orbit]

But tbf I come from cybersecurity so I have to apply to programs where I don’t have to do post-bacc for classes.

[narrow yew]

The Grainger College of Engineering
Siebel School

[timid orbit]

I also have to go in state. Hence why I only have one option now.

[narrow yew]

their website hurt my soul

[timid orbit]

Yeah

[lean arch]

We hire masters students and the same pay rate as college

[narrow yew]

are you in india?

[lean arch]

I have a college associate degree in electronics and I've been in InfoSec for 10 years

[narrow yew]

Cant imagine that "same pay rate as collage" is a lot of money

[lean arch]

Lol no, that's the landscape were in right now. Your schooling means nothing

[narrow yew]

I would not work full time as a master student for pennies

[lean arch]

It's all about experience

[narrow yew]

where the heck do you live

[lean arch]

Canada

[narrow yew]

Europe is not that harsh

[lean arch]

US employer

It's the way of the land

[timid orbit]

Outsourcing across the border

[narrow yew]

I live in Sweden, so we do things a bit different

[lean arch]

Masters students are getting passed over because the other guy that applied has 6 months of SOC experience

[timid orbit]

6 months is nothing

[lean arch]

I know

[timid orbit]

I don’t get the market

[lean arch]

It's not right, but that's how it is

[timid orbit]

Pick the guy with 6mo experience vs the guy who understands everything

[narrow yew]

Hire in their motivation, we will teach you what to do

[lean arch]

Ah see that's it ... Understands, but has never used

When you're applying to jobs, go nuts about your home lab

If you don't have one, build one

[narrow yew]

see this guy gets it, i say the same thing

s H A D O W

https://tenor.com/view/christmas-orange-chocolate-chocolates-gif-14747886

[sand trench]

today on things
cat test.txt | grep ello
grep ello test.txt

which is better

[narrow yew]

I would cat

but that is out of habbit

or tac to change it up

some recon.txt files are too big

[sand trench]

yummy

[narrow yew]

@timid orbit cmon

[upbeat jungle]

cat

[narrow yew]

try tac some time

good fun

@timid orbit Subdomains found: 74726

thats frikkin more than dell.com

x2

[sand trench]

so many UUOC users here then

[narrow yew]

I'll just knock a little

(they have a VDP, its fine)

I am assuming void looked

[languid aurora]

You guys should check this out. It's like a mafia/among us games but hackers. Currently free on steam right now.
https://store.steampowered.com/app/1502660/Untrusted/

Steam

Untrusted

Welcome to the dangerous world of Untrusted, where the stakes are high and the outcome is always uncertain: join the community of this online multiplayer (10 to 16 players) hacking/social deduction game!

As a member of the fictional NETSEC group, you'll engage in a pulse-pounding game of hacking and social deduction, using your skills and wit…

Price

$4.99

[narrow yew]

@timid orbit look closer at viewphoto.aspx

[languid aurora]

@velvet gull you mentioned about split and other hacking games before. You might want to check it out if you haven't already.

[narrow yew]

thanks

[twin ridge]

Gave +1 Rep to @languid aurora (current: #232 - 47)

[languid aurora]

47 reps.

https://tenor.com/view/hitman-agent-47-gif-13432691273008942948

[velvet gull]

Thanks, I'll check it out!

[twin ridge]

Gave +1 Rep to @languid aurora (current: #226 - 48)

[timid orbit]

Lol

You putting a lot more effort into this than I expected

[quaint ferry]

https://tenor.com/view/wink-happy-james-franco-hey-hi-gif-16272636

[narrow yew]

Its good fun

[subtle viper]

Anybody else get a weird friend request from someone pretending to be Wang Chuanfu?

[languid aurora]

its a bot

[narrow yew]

yes

few days ago

[languid aurora]

DKOB has banned multiple of those already

[subtle viper]

Gathered as much

Weird choice for a bot I mean

Why some random Chinese CEO

[sand mason]

plot twist: it's really him

[subtle viper]

Poor guy just wants to talk about EVs

[sand mason]

they say it's lonely at the top, after all

[narrow yew]

https://tenor.com/view/eve-eva-wall-e-wink-winking-gif-6625683165765276025

meet evs

[subtle viper]

How could you not trust this face

[half relic]

Its just bizarre

[stuck ridge]

Yes

[subtle viper]

Bizarre you say...

[half relic]

yeah its just a weird person to impersonate then spam an ethical hacking server

[narrow yew]

its a lot of us here

thats why

[half relic]

I wonder how many people are lurking here. there always seems to be a ton of people coming into the intros channel but not that many people talking

[polar spoke]

a lot of the servers I'm in are this way

90%+ lurk

[narrow yew]

320k+

[half relic]

that's specific

[narrow yew]

you can just look it up

[half relic]

probably. I just never looked

[narrow yew]

Member count:
347948
Online Users:
31800

[half relic]

that's an insane number compared to the number of people i actually see talking

[sand mason]

they never made it out of #intros

[strong fjord]

I am so extra i bought a red and a blue notebook for note taking

[narrow yew]

10reps for you!

[strong fjord]

Organization 🤌

[distant robin]

He's right, I was there when it happened lol

[strong fjord]

[languid aurora]

https://giphy.com/gifs/schizophrenia-schizomeme-schizogif-mi3QfqA67HWkso6TFQ

[narrow yew]

@timid orbit http://XXXXX.illinois.edu [302,200] [] [Apache HTTP Server,DreamWeaver]

DreamWeaver ha 😄

[half relic]

i hate dreamweaver

some people still use it

[narrow yew]

it does not help anyone

creates horrible html

[distant robin]

https://tenor.com/view/hit-or-miss-ryan-what-are-you8-how-old-are-you-youre-acting-immature-gif-24793657

[half relic]

im not surprised

[narrow yew]

That guy usually posts that kind of gifs

He cant be that old

Same as snowie maybe

[half relic]

you should see the sql that reporing services generates if you use the gui

a guy where i used to work tought himeself sql by generating reports with the gui then reverse engineering them

[narrow yew]

@half relic how old are you if I may ask

[half relic]

then he started writing reports that were as bad as the gui ones

44

[narrow yew]

I figured

Since you know what DW is 😄

[timid orbit]

Lol dreamweaver is old asf. U of I is where LLVM got created

[half relic]

well some of my customers still use it

[timid orbit]

So it’s still impressive despite the crappy website

[narrow yew]

I remembrer when it dropped

I feel old now

[distant robin]

Lol yeah

[timid orbit]

HTML 4 was deprecated before I started learning HTML lol

[half relic]

they were not easy to read

i learned xhml

[narrow yew]

We were here when HTML dropped.

[timid orbit]

For reference, I learned HTML in second grade. I’m 22 now

[languid aurora]

at least its not anime gifs

[half relic]

xhtml

[narrow yew]

We did that on win 3.11

that is how long time ago it was

[timid orbit]

Dannng

[half relic]

my first version of windows was 98

[narrow yew]

but you are old

how can that be

[half relic]

i didn't get a computer till i was 16 so i missed all that stuff

[narrow yew]

We had internet first at the library

[half relic]

lol

[narrow yew]

So I just hang there and learned html and webchats and IRC

[half relic]

our library computer was always infected with viruses and hte library staff had no idea how to use it

lol

i didn't use irc till no one was using it any more

[narrow yew]

@timid orbit it will take forever to look at all these subs

I am still at IRC

[half relic]

and usenet was mostly spam by then too

lol

i'm exaggerating

i noticed a lot of the public servers don't have much activity though

[narrow yew]

usernet is still popular amongst some

[half relic]

maybe i'm not finding the right servers

[narrow yew]

There is not a lot of people on IRC these days

[half relic]

do you still use usenet

[narrow yew]

no

[half relic]

i stopped a while ago

[narrow yew]

but I know someone that works with it at a big uni

But its sleep time now midnight here

[half relic]

ah ok

[narrow yew]

work in 6 hours

[half relic]

that sucks

sleep fast lol

[narrow yew]

probably not

need to catch up on twitter also

[half relic]

i did that the other night and work just seemed like a pain after that

i didnt' want to do anything

[narrow yew]

maybe there are new tools, writeups etc to be queued for tomorrow

[half relic]

sleep well

[narrow yew]

@timid orbit http://darkdata.illinois.edu [301,200] [Dark Data] [Apache HTTP Server,FitVids.JS:1.1,MySQL,PHP,WordPress:5.8.12,jQuery,jQuery Migrate:3.3.2]

it keeps getting better and better

[half relic]

oh no

that's not good

[narrow yew]

old wordpress af

[molten solar]

@math omg wfw .. i havent heard that in a long time

[half relic]

yeah letting wordpress get out of date is not good

[narrow yew]

heard what?

[molten solar]

what was it .. norton desktop? the all together best possible addon for windows back then.. i think it was norton

[narrow yew]

I cant stop looking at the output from httpx on all headers/titles

Good fun looking at the titles compared to big corps

void can keep looking, they have a VDP so its all good

[molten solar]

@half relic I'm sorry for yoru loss (not knowing the joys of windwos 95) . You can probably still find the intiial world demo of it somewhere .. I think it marked hte beginning of the end of when awesomeness and windows went hand in hand

[narrow yew]

maybe we can do a recon VC during the weekend

not with 20k hosts but still

[half relic]

i wasn't too impressed with 98

[timid orbit]

i wasn't too impressed with 11

[half relic]

dlls seemed to go missing after updates lol

yeah im not eitehr

i just got a new laptop and used it for about a week then put ubuntu on it

[narrow yew]

nothing wrong with 11 as long as ou make it look like 10 😄

[molten solar]

I think after 95 OSR2 ? .. the next "good" one was 7 probably .. and only barely. Nothing better than 7 out since imho

[half relic]

i still have it on one pc though

[timid orbit]

im actually off work this weekend so i'd probably join lol

[half relic]

Gonna replace it with arch probably though

i just havent' gotten around to it yet

[timid orbit]

i talked you into it? Lol

[half relic]

yeah lol

[molten solar]

Stupid question time. Without resorting to tantium, hsb's, or tpms, how can you determine if the kernel is "lying" to you when reading data from a disk

[timid orbit]

i'm still using win11 right now but im only putting up with it because all i do is use microsoft word, play games, watch youtube, and that's it.

im not gonna need linux for dev or testing or anything until i actually get an apartment where i can have some lone time or have an actual desk to sit at

[molten solar]

I was thinking read N consecutive bytes of Y files in random locations and stream to external hash It owuld get slower and slower if you were being shown masq data (comptuationally expensive to hold that index)

F MS. They disabled my 2021 and i own the damn media set

[timid orbit]

what do you mean in the sense of it lying

kernel can lie in a bajillion different ways

most of the time it's the most accurate source there is tho

[molten solar]

@timid orbit Say that you do a check disk , get the fstat location, read the N sectors of that file beginning at sector blah. but then something "hooks" that and serves a clean copy stashed somewhere else .. an comptuationally expensive redirect/lookup. And if you have lots of tests, and you are testing blocks / sections of the "file" at random times then you have to either let it slip you are translating the file from somewhere else, or you are going to consume more and more resources tracking "lies"

Those expensive "lies" cost time, the more remaps you have to hold , the slower it gets

[timid orbit]

i haven't gone that deep into the file system, but i mean usually stuff is tracked by inodes

so you really shouldn't be doing that to begin with

the inode will either have a reference or it wont

[half relic]

there used to be a good peice of software called ice sword that you could use for finding rootkits and stuff, but it doesn't work anymor

anymore

that was for windows though

[timid orbit]

and if it doesnt have an inode that's the equivalent of a file not existing

or being "deleted" in a literal sense

despite the data still being there

[molten solar]

well just "deleted" is easy to find in proc .. its when its "deleted" then recreated somewhere it gets tricky.

open(path, O_RDONLY .... O_NOFOLLOW ?)
fstat(fd)
verify S_ISREG and validate st_size against... limits
then you can read() the file content but how do you actually validate this.

[timid orbit]

exactly because there is no guarantee that the file integrity hasn't immediately changed at the time of deletion

[distant robin]

My first one was 3.0

[timid orbit]

the kernel can immediately use that disk space for any purpose as soon as it's free, but prefers contiguous blocks

[molten solar]

@timid orbit The best i could come up with was known good comparisons, create benign data that's not of interest to anyone, stat the metadata of that transaction for TOCTTOU then compare that agianst other ops

[timid orbit]

idk good luck tho

[molten solar]

I mean .. how could you give yourself a "Green light" on a production jump box before doing something potentially risky like logging into a clients host

[half relic]

Are you trying to find delted files or rootkits or something else. I might not be following

[west mango]

I am not following at all😵‍💫

[half relic]

I'm not sure what that has to do with jump boxes either