#general
1 messages ยท Page 2476 of 1
๐
Cish
I want this as my friend
good shit
i don't blame you
hello

I'm creating a CPP project to dump Edge Creds from memory
You know, after Microsoft saying that creds are in clear text in memory "By Design" 
Honestly who does that
Yeah saw that


A lot of public PoCs out there but all of them are super loud and unoptimized
I'll open-source a basic skeleton PoC that people in RTOs can optimize to be OPSec-Safe
hello guys does tryhackme removed the sound after played after room finished ?
Most PoCs use MiniDumpWriteDump which is an EDR fire alert
Nope
d
Check if your volume is muted
volume is up but while i am completing burp suite rooms sound was not playing
Strange
but while i answer questions sound played but at finished room ending it was not
Just finish the rooms bro ๐ญ
bro just finished one room but my cp score droped -1 ๐คท today total i finished 2 rooms why i still got cp -1
is there a reason why u dont directly read memory?
I'm literally trying a fileless approach as we speak!
I'd need a callback function though.
why?
??
What else do you have in mind?
wdym
wassup dkob
capability score got -1 even i completed two rooms today
Directly from memory?
My current logic is:
- CreateToolhelp32Snapshot (List Processes)
- OpenProcess (Get a handle on msedge via PID)
- PssCaptureSnapshot (Creates a SnapShot of the main process)
directly from memory
Step 4 is either MiniDumpWriteDump (Which I'm avoiding) or from Memory (Which I'm working on)
why do u need PssCaptureSnapshot
I don't want to interact with the main process
Nothing much wbu?
Verify and send a screenshot
fair
Mind sharing how you read yours?
sup
I mean to be fair defender is pretty weak security anyway
Just use Linux
How does Just use Linux fix my problem? 
Linux solves everyoneโs problems
im not trying to be subtle
but minidumpwritedump generates etw and reads the target anyway
and the handle with VM_WRITE+ access is creating regardless
My handle currently has: PROCESS_VM_READ & PROCESS_DUP_HANDLE
@gusty inlet oh btw check this, I added all 3 things to OVT (A toolkit me making, well for fun even if nobody cares about it) for bloodhound features , works instantly Via RUST, Axum and D3js and TUI with REPL Shell
No Neo4j, python or JVM BS
- Graph TUI
- Tree TUI
- Bloodhound like neat GUI (Local)
Then what... Direct Syscalls in Assembly? 
??? thats a thing you can do????
no, ur handle still exists, and the stackwalk on the Ob* callback is now detecting ur direct syscall too
anyone knows is there any good room to use my skills after finishing the cyber 101 ?
also MiReadWriteVirtualMemory logs reads to etw
Oh really cool, if you want to be better than BloodHound then please show ACLs too
For example: Write perms on UAC Attributes do not show on BH
Just hoping that a satellite falls on me
WriteProperty on member attributes for groups shows as "AddMember" on BH 
I'm not too worried about ETW, there are ways to make it blind, I'm just really thinking like how do people bypass EDRs if literally every single function is now monitored.
Or maybe, these events do get logged, but operators rely on a bit of luck for SOC to not notice
OBV they bypass and hide a lot, but some functions are just necessary to use and will be logged at some point
you dont open a VM_READ handle
or fuck with other processes
So no Handle Hijacking
"ways to make etw blind" is quite vague id like to know how that works with kernel etw providers that arent accessible by anything below SYSTEM, and in many cases not accessible by anything that isnt PPL
Then what's your alternative?
duplicate handle has another Ob* callback on it
well u cant really just not be detected thats kind of impossible due to the way windows is structured
but there's many other ways to leverage other things to get access to stuff
it just depends how deep the edr is and how tight its detections are
generally when u start reading other processes memory u dont really care abt detections
Aren't EDRs just bare bone deep nowadays?
what does that mean
They are all kernel level
Hello
Well rip then
welcome to offsec
I doubt there's literally no way of reading another's process memory without having it detected... something must exist
of course something exists
just think wider ur not trying to subvert the readmemory api that isnt possible but leveraging other things to do it for you or doing it indirectly is
YOS, i have ACLs already included in graphs
-# took me time to reply coz i was starting the Machine and get a screenshot to show lel
i really dk what im looking at
ah yeah can filter out stuff , i didnt filter anything rn thatswhy
care to explain what this is???
had taken the json files from the HTB module target machine , they are highly filled up with Users and computers on the domains
Its a Active directory exploitation framework im creating(for fun) , what u see is just one of the features which replicates Bloodhound (a Tool to visualize relationships in AD - OUs, Groups, USers , Domains , computers etc etc)
so i made my own 3 visualization versions which work instantly and locally (Graph TUI, Tree TUI, Graph GUI)
looks liek this
tytypoisd galore

Send in the GH link
Yet to improvise more and its still WIP
malware is going to hate going up against this
@warped blade Seems like this dumper bypasses AVs too... only EDR seems to be a problem (Rightfully so)
well AV's are a lot less invasive then EDR's, so writing/reading memory generally isnt even a thought in the AV's mind, as they mostly operate off signatures
most AV's barely have a driver
Wow, AVs are really that shit?
https://github.com/Karmanya03/Overthrone
Its a bit still unstable in some cases , I'm fixing them manually which will idk take an eternity xD
testing n debugging ongoing
yes
guys i got a problem like i had a mail my 2nd main gmail acc and it was on my old phone and i broked it i got a new one and now how can i have that mail i just remember the email name but not the password
windows defender does have the capability to detect such things (of course), but none if it is enabled unless ur on MDE
tf is the girl on ur pfp bro
This ReadMe is the size of a dictionary 
THTS WHAT I SAID
Its just a Random ahh project i have been working for last 6 months , so dont judge lmao
Coz me is broke and cant really do anything else for eg go for another cert or Afford HTB silver/gold plan, or play games since GPU is ded

One thing I learned about myself is that I absolutely suck at pentesting...
why do u say that
The only thing I'm interested in is evasion and overall RTO tradecraft
same , but i aint getting any job related to this sedly , so am stuck being a Software Engg
Because I have like 10 certs and I still struggle at medium THM rooms sometimes.
The reason? I'm too lazy to spend 2 hours enumerating or getting "very creative" for me to get a LFI in the end 
I suck at web af ngl that i understood in CTFs xD
@warped blade So do you think reading from memory is overall better than MiniDumpWriteDump right?
Even if both are overall shit for EDRs
@warped blade wanna appoligise for yesterday
windows is probably more secure then linux
but linux is more easy to check if it is secure as you can read the code
and being able to read the code makes you able to see if it is more or less privacy respecting
but this is like comparing your own email server vs gmail
if we look at the amount of CVE:s windows is lower then linux by quite a margin
though it is not that easy to compare them
Ah that reminds me, Ashlynn is making her own email server
well technically minidumpwritedump is more stable and secure due to it being designed for it, but its also a lot of extra steps and a lot more noise then just reading memory directly, and for something as simple as doing a rough byte scan for url, user, password regex i dont think dumping to disk is necessity
yes
i agree with this
in an EDR/AV sense, both will be equally, if not minidump more "detected", but the handle alone is the initial flag
Yes but you're taking complexity into factor - forget it. I want reliability and OPSEC.
Ok ty!
Gave +1 Rep to @warped blade (current: #165 - 67)
hmmm dumping to disk would probably be a bit noisy right?
find it weird that microsoft is pushing so hard for bitlocker to be on by default without telling people that they need to keep a backup of the backup key in a safe somewhere or similar to not have huge risk of losing their data.... but to some degree it is helpful
minidump has to do a bunch of enumeration, allocations, file creations, structured reading, snapshots and a shit ton of other internal stuff, where as RPM and a rule is just that
Dead project this channel lol๐คฃ
it also shows a dropped .dmp/bin file yes which an aggressive EDR could flag
Yeahh
anyone know where i can find mem forensics labs, has anyone ever gotten them from github lmao
who knows if edr's hook dump apis

probably not

You mean I won't need to scan for processes and find msedge before proceeding with the rest?
Ok
lmao ...said random thing n left
think hackthissite.org had a few but not 100% sure on that front
otherwise might be a few on tryhackme but dunno the right search term
getting them from github might be possible if github is not pooping the bed right now
i did every one on thm and i will check that out thanks
Gave +1 Rep to @sand trench (current: #3 - 2357)
MiniDumpWriteDump calls a fuckton of functions internally including ETW meaning that calling MiniDumpWriteDump sends telemetry to ETW
just a slight warning on those... they are quite old so a lot of the stuff you might be able to learn from it can be outdated
Ok yes this makes sense
readmemory also sends data to etw so its a tradeoff regardless but the readmemory etw flag is also Etw-Ti* exclusive
and readmemory's etw is kernel only
will prolly have to learn more and gitgud at WEB as well , to may do some sort of bugbounty to showcase...so that MAYBE some hiring chance increase somewhere
The HRs dont even know shit about da roles , so welp idk what to say , could ease up things or F up things , either of these
Are you looking at offensive roles exclusively?
@rancid drum Please slow down. Further spam will result in a short timeout.
Anything works as long as cyber sec for starters , but preferably Offensive roles (long term goal too)
my current plan is to take IT/SWE exp and slowly pivot to cyber sec within my current org ...if i get an opportunity that is.
shadow is stuck in the privacy hole
Someone said something about note taking... How, when?
when?- when learning.
How? - Pen-n-paper classic way OR digital notes using apps like Obsidian, Trillium Notes or whatever suits ya
Even on try hack me?
any sort of learning anywhere
notes always helps , even when u go for professional certs , notes will be SUPER HELPFUL

you can also subliment your notes with
flash cards
or rubber duck debugging
Wts tht
flash cards is cards with a question or a short sentence about a topic
which you read and try to answer or explain to get better at a topic
rubber duck debugging is explaining your problem or what you are learning to a rubber duck
instead of a human
this often helps you figure out the problem as you are putting it in spoken words
Rubber ducking

No lol , take any object
a gf

Me to my rubber duck โIm trying to fix this block of code so that it can uhhhh ahhh hmmmโ
shadow uses a set of small rocks with painted on eyes.. so anything works really
Pet rock
๐ญ dont say like tht
Aight aight
Thnksss
@finite basalt
good night karma
sleep well 
I'll be awake for an hour or so tho
Who's going to be doing the AI Odyssey CTF next week
enjoy this read: https://madaidans-insecurities.github.io/linux.html
madaidans is reputable on this field as being a dev on whonix if you wondering his creds
this is his blog site
Are those 0x53... and something codes assembly?
Not you, again

@silk sapphire Please slow down. Further spam will result in a short timeout.

Its a bot it doesn't respond to us peons
Hi guys
da bot was serious tho , he blocked a compromised account spamming
(that Mr. beast screenshots shit)
lol
That thing is still going around like crazy
daily shit literally bruh
Its so annoying

Hi bruhh
I fancy myself an okay looking Brit ๐ฅฒ
Mind you I wouldn't go to Tenerife I don't think
yooo guys
have you never been? that tweet is highly accurate
Nah never been
mind you there is benidorm
Not my scene I don't think
substantially worse
Never been benidorm either and really don't fancy it
understandable
๐ก

can i do a recap without having it showing up by itself
hello๐
Hi
I don't think so
oof that should be a feature
I agree

I feel my mortal soul leaving my body
This is not a Doctor Strange movie.
Sustenance is en route poste haste, but I fear my body may wither away before the food makes it to my humble abode
Hang in there, James.
hanging in there
I've had a bagel, brew, latte and some water in 31 hours ๐ญ I forgot to eat and now it's bitten me in the arse
this pizza does not know what's coming to it when it gets here
christ almighty man take it easy on yourself

the pizza doth bang

I love how there's always a single bullshit task at the beginning of every walkthrough
if I'm not in the mood I just hit that and enjoy my day
what makes your soal mortal???
starvation apparently ๐
also no more purple shadow ๐
congrats on becoming a room tester
been a room tester for ever
I yearn for this superpower
the no purple is because discord is a poopy platform doing weird and shady stuff with your data
ah I just saw the colour changed
To be fair that could be said about every social media platform
exceptions for now:
mastodon
lemmy
matrix
simplex
fluxer( this is a really big for now on this one )
May this esteemed gentleman ask a questions regarding buying a smartphone?
How do you feel about google pixels?
Pretty decent actually
not that great for performance
decent camera if wanna sell it to googles specific things that are not available on custom roms
best option for security and privacy with graphene os
With another operating system flashed or the google OS itself? Because in terms of telemetry I know its hell
Will a pixel last like 7 years?
Yeah
I am currently with Huawei P30 and its iron
It should
And P30 is like I dont know 10 years old?
yes
hey guys, it's me Vlad
where are your skewers and marshmallows
Hey Vlad!
you mean bc i like to impale things?
Im considering between Motorolla, Sony, Pixel and Samsung
nod nod nod

timeframe?? fi you wait long enough motorolla will have graphene os support
Whats Motorola rolling out another razer version?
1 month
go for a pixel with graphene os then
I am heavily considering pixel, but the AI and telemetry is worrying me
Although I am capable of flashing another OS
Yes and they are good I think
Though not popular
Maybe?
Pixel 10?
If you don't want AI, don't get an AI phone.
get pixel
go to local place with public wifi
use laptop to flash graphene os to pixel
enjoy 0 AI or unescarry telemtry
enjoy good privacy and security
All phones are eventually going to have ai in them if not already so we will have to flash them with roms like graphene to avoid ai
Pixel 10 Pro
You use graphene os
Nobody forces you to buy up to date phones...
oh wow you are made of money then???
Agree, like a relative of mine said, everyone is spying on you, just think of who wants to spy you - China or the USA lmao
nobody forces you to update things so you dont get hacked is what that sentence reads like....
That is poor security posture
Which one?
What is?
Have you ever tried to hack a phone?
True and nobody forces us to get "Smart" phones
We can get "Dumb" phones
@sick lance You're back i see
yes but it has been quite a while
No, I'm Scrubz.
How did it go for you?
It doesn't have to be latest but as long as its still supported
easyish before flashing to lineage os
So you hacked an android phone to get root privs?
I'm not including you owning the phone.
I mean i went from a note10 to s24 ultra and I am happy with my upgrade.
and to read all the data shadow could from it yes yes
and yes it was a phone shadow owned
you want shadow to be unethical and illegal and hack a phone they don't own???
"Not getting an up to date phone is bad security posture"
How many people, can realistically hack your phone, that isn't nation state?
Phones do have better security than computers but that doesn't mean they aren't prone to being hacked.
I'll wait.
because of graphene os that number is very very small
That's not an answer to how many people can realistically hack your phone, that isn't nation state.
fine if shadow has to abide by that rule
0
Android and Apple pay big money to whoever can hack their phones.
Apple's BB is very generous.
Right but I imagine that is more of a controlled test without having someone's personal information compromised
know that said bb stands for bug bounty but started imagining apple having a BB gun and shooting people or something with it
Most people who do BB, won't do it on a phone they don't own...
Or maybe it has dummy data in it to simulate
That's just stupid.
Yeah that makes more sense
Phones have good security.
I'm just laughing over here thinking that the pixel will literally teach google everything about me
But yeah - at least another alt OS can be flashed
back in the android 4.x.x era not so much... but yeah
Back in the x.x era of anything can be argued as easy to hack.
eeeeh electron tubes were not easy to hack
I think, now I can't honestly remember, but it was in the region of 70-odd % for when a mobile phone is hacked, it was the end user.
Not the security, or the handset itself.
I think that could apply to computers too though user error
Computers and phones are essentially the same, but different.
A phone is more sandboxed.
Realistically, the only people who would have the power to complete hack your phone, Graphene OS or not, is nation state.
And if you're targeted by a nation state.
you have bigger problems.
Thanks for coming to my TedTalk.
How does that work in the broad context of telecommunications companies being hacked i.e. the big three in the U.S. for example
I know its not the phones directly but does it have some impact
You need to specify.
Are you talking about phone, or records?
I guess it wouldn't have an affect on the phones but definitely on records?
If it's records, they'll attack the carrier.
In which case, that will be 9/10 social eng.
Graphene OS won't protect you from a sim swap, also you abide by the same rules if you use normal calls/SMS.
Iโve had reverse shells longer than I have relationships
All that can be done without even touching your phone.
https://www.congress.gov/crs-product/IF12798 I know its from congress but this is the thing I was referring to
It is nation state
Most likely
๐
I think they used CALEA?
Volt typhoon has a thm room iirc
Yep they do
That was fun read.
Oh really?
Yeah, I aleady knew some stuff.
anyone have a good website for nutrionlabels of different nuts???
Hiiii everyone
ello wazir
tbf the phone stuff is very cool
the architecture itself is inherently harder to exploit because something in memory cannot be write and execute at the same time iirc
Other stuff on top of that ofc but at the hardware level there's inherent differences in how memory is managed that makes it harder
more ram
got difference idea?
hi
u have 16gb and ur allocating 15 to ur vm?
Hey
and its still slow?
yes
wadahel
Hi Marius, I also like milfs and boobs
That makes no sense
I am having fps drops
๐ญ
everybodys do nowadays
what are u running
Well your host system is struggling to function on 1 gb of ram
what do you mean by that
lol
Unless they have only one gb of ram on the vm allocated and 15 remains its hard to know for sure without seeing the setup
yeah leave 3-4 for the host that should do it
Oh you can go to 4 gigs or 8
u mean the core?
is that vmware

Nope
UTM
VMware doesn't work on apple silicon
oh shoot apple
brother
UTM is fine
just look for the mem allocation
But its still kind of barebones
I mean i did it for a while on intel based macs and it was alright
I mean I bought this m4 thing because I tough the cpu is super fast
but acuallty not
u have 16gb ram on your mac ?
It is fast but vms are not something it was designed for initially
yeah
i have 8 ๐
noob
I mean to be fair macs memory management is pretty good
I mean not too bad but u can incrase the value of ram socket in the future
yeah i saw
Its soldered
itโs not bad
or buy a new one
what apple wants you to do
but I am quite sure thinkpad mogs any macbook
everyone buys apple products to look cool
Until the battery life is garbo
and tbf it does look cool ion blame them
oh for mostly using for kali any some tools like nessus openvas
Apple silicon is so incredibly efficient
not for coding
For battery life
I had kali on vmare on my macbook and it worked pretty well until it crashed
Yeah but was it intel based?
Apple silicon
Ts was some months ago I was a total noob i started crying over that like an idiot
noob
Really hmm I was under the impression they still didn't get it work I will have to check it out
๐ซ
Not like I have the space for it anyway.
guys having thinkpad might be the best thing
They do work sure sometimes shit like this happens but it is compatible
lenovo is undefeated for laptops
its just peak
Battery life wise no
I want to buy a thinkpad its kinda frustrating to work on macbook on homebrew especially when it comes to scanning and enumeration
yk what I used a lenavo ideapad gaming 3 and it was a terriable experiance for me
ur just hating
thats why I switch up to mac
Nope my mom had a lenovo
It would last maybe 3 hours
lenovo loq is peak
my mum has a 2gb ram laptop with no any graffic card
Now it can't even be used without being plugged in but its in storage
bro that shi prob went thru hell
is that better
there are some cmnds u can run to get a battery life report
7 years of work
forgot them completely but used to help understand stuff
My lenovo's class ๐คทโโ๏ธ how old was your mam's laptop?
We got it in 2011 iirc and it lasted until 2018.
thats fair most people cant go on for more than 3 years without switching
sorry for reposting
I've used a powerbank to charge my lenovo laptop while working and got it to last me a full working day 9-5
but what yall thinking
and that was that it didn't go flat, it could've gone longer
I still have a laptop from 2004, I just don't use it 
That should even out the host and vm
ight cool lets see
I had a macbook pro from 2009 last until 2016
that's ur kali vm right
Also got myself an HP elitebook from 2019, a dell from 2022 and my work laptops
yeah its
which I do use all of those laptops
ye 8gb will run smoothly and you're left with 8 for ur host machine
even 4gb is fine for kali tbh
The HP I bought while i had issues with the dell, which I had before 2022 but was upgraded when replaced in 2022/2023. I kept it and use it for when I don't want a heavy gaming laptop with no battery life but want something more efficient and low-powered
Yeah but i figure if they are using a few tools at the same time its good to have a buffer
I actually put the ram kit I used to upgrade my dell into the HP when I returned my dell so it's a Ryzen 7 Pro 2700U with 32GB DDR4
ghidra used to crash my kali vm alot
Really??
yea
tbf there's no reason you can't use ghidra on your host
Maybe there was a reason they didn't want to
Maybe but in many cases it's probably fine
Typa event that lowk gives u a panic attack
nah i just like to keep all the hacking stuff in vms
I remember virtualising a full AD stack on my laptop ๐คฃ
i just turn that shi off 
Lmaooooo
was using 18/22 threads and 32/64GB RAM
woa
Laptop was rather toasty but ran it like a champ
Now that it's been replaced by dell I love my laptop, not as free to upgrade as a desktop and thermals are shit but I've worked around that
wsg chat
ye
had issues in my old laptop with ssd overheating so I got some bluetack and stuck it between the case and the ssd and then used calipers to measure the clearance and then used a drill press and a vice to cnc an amazon heatsink down to the right dimensions for the case ๐คฃ
What do yall do after you pull an allnighter which isnt sleep
my current laptop actually has decent airflow so it's not a problem, the old one would reach 95C and shutdown ๐ญ this laptop I've upgraded from 16gb DDR5 to 64gb, 512GB NVMe to 2tb NVMe and then installed liquid metal TIM
Feel like a zombie, eat and eventually sleep ๐คฃ
do iy again
or get a second wind and carry on ๐คฃ
Its been 2 days and im starting to see things
holy
Should see a doctor if that's a frequent thing
Its only when I pull an allnighter or like sleep at 2 or 4 am
Yeah definitely don't do that
Go sleep
why are you pulling allnighters
It then started killing nand controllers on three different SSDs (2 brand new) so I returned it out of warranty and told them I'm looking forward to my replacement, argued until they conceded and gave me a laptop 2 generations newer 
exams ?
College days lol
dang
Cuz im unemployed asf. Nd i need to lock in , im also working as a tutor rn. So im studying cybersecurity and the things i need to tutor
was not at all impressed
good
God college was 17 years ago for me omg my past is almost old enough to serve in the military.
We got fossils over here
even less impressed when they argued with me, failed to repair it and it broke entirely 3 days after I got it back because there was a short somewhere on the mobo. Had to argue with them again
same situation except i'm doing nothing about it
Vaguely remember one argument was that the charger was integrated with the mobo, said no it's not I'm holding it in my hand currently..
Told them, I've just disconnected it to test for a short with a multimeter and they finally started to listen to me
keep going i guess idk
Twinsssssssssss
Studying is good but don't study too hard sleep is important too
We (yes we) finna see each other in heaven atp
i've overslept but i've never overstudied
Im studying international relations and i go to government organized events and ask for cybersecurity internships
I have overslept pulled all nighters felt like I haven't slept in days
Man I haven't slept for 3 days
I never faced overstudying but i like its happening rn which is so surreal
๐ฅน
Oooh thats interesting
Trying to be a poli sci major?
We angels finna go up to heaven king
dang
i bought some vitamins pills
Because tell me why am i looking forward to calculus
thats crazy yeah
i'm done with calc tho bahaha
Never was super good at math but I at least know enough ram increments that make sense lol
And hit the โabsolute cinemaโ emote when the explanation hits the spot
peak
I too am shit at math but now im looking forward to learning it ngl
Im major in international relations and diplomacy but i want to work in cybersecurity preferably for an embassy but before that i need lots of experience
Recently i actually was told i could have a cybersecurity internship at a private bank in my country but nothing is yet certain
shadow is shit at math if we look at how math works for physics and the universe
In pair production, a photon creates an electron positron pair. In the process of photons scattering in air (e.g. in lightning discharges), the most important interaction is the scattering of photons at the nuclei of atoms or molecules. The full quantum mechanical process of pair production can be described by the quadruply differential cross se...
Cyber is tough to get into jobs wise good luck
still don't grasp this math perfectly yet
There is always time
shadow its useless anyway
. . . really??
Math is extremely fun
yuuuuurrr
you mean shadow having fun and being confused for years by that wikipedia page is useless
I don't think for shadow its a lack of time its probably more a lack of understanding certain concepts
Im looking forward to questions i cant solve lol
i dont get how that's fun
Imaginary numbers
Too bad a chad like me doesnt have to imagine
the home work
1+1 = 2
the exam:
2 is the only number I see big dawg else its english
that is the start of the page... the real problem is further down
Omega and epsilon
Im not good at math or sciences but im going to learn the math required for cybersecurity and networking stuff because i love cybersecurity and im from a background of humanities

Have fun with subnetting
Hi, I'm new here .. can someone give me some usefull advices how to use discord, about it's purpose .. I am into hacking, ethical like most of us here, anything motivational and usefull. I did a lot of thm tasks and willing to learn
I think in middle school and high school I was shit scared of my teachers which is why i couldnt grasp maths.
here is the whole thingy by zooming out to fit it:
Oh delta
oh nah that I6 explains everything
You need guidance with what exactly
Just symbols holyy
I did some beginner binary and ip adress problems, subnetting gonna be interesting
Yeah its a monstrous problem
subnetting is not that hard really
Binary and ipaddress aren't necessarily the problem its breaking down cidr notations into usable hosts and networks
At least for me
It was shoved down my throat and the teachers were overly judgemental and in comp sci we didnt learn shit
I liked to write stories and learn about ancient cultures
How to use THM discord, what topics are about and just simple stuff..Is it possbile to get Bursuite PRO for webapp testing that is not paid version and still safe?
Good to know!!!
ah so thats the crux
you have to do probability
to know if you are probably done with math
indeed
The probability of that is 100% because ray said so
!!
Hey everyone! I'm a first-year IT student looking for a mentor who's currently working in the field. My goal is to get into ethical hacking / penetration testing and I'd love to connect with someone who can help point me in the right direction. Whether it's resources, certifications, or just general advice
Hackthebox
Well for starters I would focus on learning the fundamentals
Its the best
For starters i would love to have some french fries
Before delving into pen testing and ethical hacking
@topaz steeple wassup
normal roadmap:
helpdesk
IT
Sys Admin
Security Operations Center analyst level 1
SOC analyst level 2
SOC analyst level 3
pentester
@frail zenith wassup
Yooo big dawg you disappeared off the face of the earth or wha
Takes 30 yrs of experience just to get replaced by ai
Disappeared
Where
Ayeee
Idk i just
Trying to get my life together
Will be graduating next month
W plays man.
The world is looking for fresh meat
Congrats on makin it king
Yessss sirrrr
thats what the CEO:s think
they think that AI:s are smart and inteligent and sentient because it spits out things like they say
instead of us realising that CEO:s are not sentient and just spit out nonesense
Thank you broda going for masters cuz i got no job lmao
Gave +1 Rep to @topaz steeple (current: #179 - 62)
Where we thinking
MSc digital forensics
Really keen on becoming like mr. Robot
Holy bars
:D
Ayeee whatever makes you happy king
I am a bit paranoid now so the first few steps towards mr. Robot have been taken
40 yrs down the line idk
you have a ton of things to learn then
but here is a small guide for compartmentalisation:
public use
private use
anonymous use
senisitive use
Gotta google the meaning of word compartmentalisation
Is it possible to join let's say red team but some kind of begginer version?
Whats life if you are not happy living it.
Got it
If money wasnt a problem
I wouldve been pursing photography
junior pentester roles do sometimes exist yes
but without having a good grasp of how systems and networks work it is quite hard to be very productive and good at breaching systems
none the less writing reports explaining your findings
Id just smoke some.
guys why I cannot start scaning?
I really wanted to become a chef then i saw the lives of cook and joined comp sci
Are you gon cook the code my guy?
Nmap is boring when is nmap 2 coming out
want a chef book recommendation to enhance your home cooking???
Ai is cooking my code rn
Can you cook a joint?
Ai is shit.
The last time i cooked was probably egg fried rice in indian style
It was good
Gonna make it again some time
i know some basic stuff
it goes into what ingridents mix well with others
Shadow you are a wealth of information lol
Im finna leave software engineering ngl
Never really tried spaghetti before until now i definitely want more of it
can someone help me about openvas?
making it so you can experiment and make your own recipes easier instead of following others
Shits boring af
I want to join the wall street
Or dalal street for india
Ayeee quant boy
Thanks for this :)
Gave +1 Rep to @sand trench (current: #3 - 2358)
yeah shadow is looking forward to the taco one pot with extra cheddar and mozzarella that shadow will have probably within a week or two
no problem
got a copy of it to give to shadows father as he enjoys cooking
Insane money glitch
:D
How is life mate
I started tutoring cuz i needec some money
A hacker embodies a boundless passion and insatiable thirst for understanding the complexities of a system, computers and networks in particular. They revel in the pursuit of knowledge and mastery, constantly seeking new solutions and opportunities for growth. Their drive and innovative spirit inspire and are inspired by the hacker community, where ideas and knowledge are freely shared and valued regardless of their origin.
--Silk
there is a very very big reason shadow lives by this definition to an insane depth in a ton of different topics
I really need some help where can i ask that
Oooo i see you got da money ?
Yeah probably will
I couldve been a tutor for politics but no one needs a tutor for politics lmao
no access
Politics? There must be some lol
that would be the advanced help channel
Well its just something people can read and eventually spiral it down to 2 things
which is mostly for topics to spicy for general
probably it not something spicy
Idk much bout it
can i send a picture
I might do teaching and learn backend development tho ngl. I realised i have free will so why not use it this way
i.e malware discussions are limited to the advanced channels to a degree
just this I dont know why I cant start scaning
basically never used gui for metasploit ยฏ_(ใ)_/ยฏ
hey guys
soooo, tomorrow im going to do my first cyber cert (eJPT) , does anyone know a good cert road for red team? i was thinking
eJPT -> comptia security + -> PNPT -> OSCP
ohh mb
Holy ad
js is so annoying ๐
Done!
I figured it out just needed to wait til I had service on my phone to enter the command
look you did it : )
Thanks @cloud quiver appreciate ya
Gave +1 Rep to @cloud quiver (current: #1 - 6188)
yep just needed the mfa....lol
good good : )
first time being hacked and i was like bruh never again
literally the day of...woke up saw an email saying that i was banned and i was like bruh...it messaged everyone
the crazy thing is that I research the pics that got sent and was like that is soo weird...
its a scam very
Welcome back sorry you got hacked but now this will tell ya to be more vigilant
i know i know ^^
ty ty mighty thor lol
Gave +1 Rep to @rigid urchin (current: #829 - 9)
i will admit that i was looking into bots and i think the link someone sent here got hacked and spread to me
Thats usually how it starts
Fool me once
My favourite variant is
Fool me once shame on you
Fool me twice
I canโt get fooled again
By George Bush
My favorite one is probably one that went on and on forever like fool me again now i want to be fooled so whos really getting fooled etc sooo long ^^ i dont remember where its from
I feel like thatโs from the office too
could be some show probably ^^
Ive definitely heard it before
damn i really need to watch the office
Bush could have said it first then the show used it lol
Hi everyone ๐
Iโm looking for a WhatsApp group or small community of people interested, students in cybersecurity or IT in France or other
Iโd like to learn, share ideas, and connect with people who are serious about these fields.
If you know any good group, I would really appreciate it if you could let me know. Thank you!
Haha okay ๐ Iโm here already, Iโll join the chat.


hmmmm shadow is deep in the things right now
researching about crypto currencies
why peak your interest from researching?
Anyone have any good or bad experiences with WGU? Their cyber security degree or otherwise. You can knock it out on a few months if you come prepared. Includes 16 certs.
https://www.wgu.edu/online-it-degrees/cybersecurity-information-assurance-bachelors-program.html
is that a question that turned into an ad..?
also it's not a few months its 2 years
or more
depending on how wanna pay
I would honestly not do this program
I don't trust the link
neither does shaodw
I looked at it that is insanity to potentially get 16 certs in that short of amount of time good luck. I sacrificed so you may live ๐
Hey chat
I finished beginner path , there are SO many room and idk where to start
I want strong theory before learning how hacking work
Well just find something that interests you
ok well you shouldn't really dive that far
not trying to dissuade you but without the foundations the concepts aren't going to be easy to understand.
Check, check, am I finally able to text in this now?
That why I am asking room to have theory
nope you are not ;P
And after that
goodnight people
good night ray
goodnight shadow
Back to the drawing board ๐คฃ ๐คฃ ๐คฃ๐คฃ
I would just keep looking for more and more advanced stuff after presecurity there will be more stuff for you to learn.
@sand trench with tryhackme what's the best path towards pentesting?
rooms wise
I asked Claude AI to do begging to advanced course in :
Network
computer science
How to using windows + powershell
How to use Linux + bash
Cyber security theory
Python
Yeah, some dude with a youtube channel claimed a few months of work for it (because you can go at your "own pace") but even if I studied for a year first the few months thing sounds pretty far fetched
It's completely unreasonable
follow the pathways for the red/attacking side basically
anyways shadow is gonna go lie down in bed and go meep moop to beep boop while going sleep sloop
ah I guess that would make the most sense
later shadow
Stay hydrated
Thanks for pointing this out. After reading about thrivedx/ironcircle I'll be avoiding them like the plague
Gave +1 Rep to @arctic spruce (current: #542 - 15)
rip just barely out of my price range
i need a few more dollars i think
like 730k more
ill get there soon chat
Damn that's cheap
Please, I need help because I've been having trouble.
thats what im saying
Ppl here arent account recovery or account support
nor will they ever help you hack anything besides THM attack boxes
Whats youre problem
Anyone else see?
You mean the breach from shinyhunters?
Yep.
yeah that was pretty major
No bro, not that. I need to hack my account, which was modified by a stranger who took it over.
No one will provide support for that here
Dude no one's gonna do that quit now
You're gonna end up like the 50 other people coming in here asking
Ok bruh
We have no proof its your account. Nor do most ppl here hack user accounts like that
omg they hacked it twice wtf
I have proof
This is a cybersec server
its unethical and not allowed here
โณ โณ โณ ๐ฟ
whats that
I have 10000 proof bruh screenshots
Is this like a new room
Yep.
I've never used canvas in my life
I was lucky, and got a screenshot of the ransom alert.
Except for class
I better go check if i was apart of the compromise
Apparently they were so excited that they made both a light and a dark theme, depending on which you used for canvas.
Lol, can you help me? I have proof and I've even tried contacting support, but they're completely blocking me.
No you need to take this up with support
they are the only ppl that can further help you
no one can help you already told you so and you even said "ok" before move on contact support ^^
Just no!!
Ok
If support cannot help you or wont then im not sure what to tell you. I dont intend to sound rude but its not how this place operates.
Support will always do more than anyone here can to recover an account that actually belongs to you
Ok Thnx brug
Bruh
btw fun to see how the bot does not recognize thnx as a thanks flagged for the count ^^
for rep?
ye i saw ty and thx work so thnx is not commonly used i guess ^^
๐
Hey guys i need help, tryna check in for my exam. but i needs selfie verification and my desktop dont have a camera.. what do i do ... theres no option to continue on phone or sumn..
anyone know how i can go about doing this
Can you not take a picture with your phone send it to your computer?
it needs to be a live selfie
Still better to change them. What people say is sometimes different than what people do.
When I did my PT1, I was able to take it on my phone, then I just used the phone for that part. Is this a THM exam, or something else?
yes it is a thm exam.. sec1
Okay. I know that I had to take the picture on my phone, and then I used the same website that they gave me and it worked fine.
howd u do this cos i aint getting the option
That's what I remember, but I could be wrong about it. Someone else might have to help. I don't remember every detail.
ill try figure it out.. i wish they sent a barcode or sumn to continue session on phone or sumn
no problem ,thanks anyway
Yeah the college I visited they don't have canvas service.
Nope. It's a project!
meow
whats the point of the snapshot if u dont use it
ur reading the process directly not the snapshot
If you want, start an issue on GH so you can get contri
guys !!
sure
I fixed it, just open an issue
can I ask something?
Now it should be:
- Snapshot freezes memory space with old data
- Points to it
- I dump this data space
The main parent keeps going independently
I'll also need to fix the PathAlpha then
How do you study when you are in the TryHackMe room/lab? I feel I am lost
Should I understand everything and save it in my brain like I have an exam tomorrow?
The current code uses; ScanMemoryRegions(hProcess);, hProcess is obtained by HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ | PROCESS_DUP_HANDLE, FALSE, targetPid); The R...
it all depends on how u learn
if u have good memory & ur the type of person to do something once and remember it then do that
if u need heavy theory to remember then do that
if u need notes then write notes
everyone learns differently
Doing last checks to make sure it's all good...
Oh maybe it's still incorrect, one sec
ur enuming with pss now
but still rpm-ing hProcess
ur getting the regions from the snapshot then reading rpm on that region but not from the snapshot, from edge's memory directly
I want to research Instrumentation Callbacks they're so interesting but so undocumented
then document them





