#general

1 messages ยท Page 2476 of 1

cursive bone
#

๐Ÿ‘€

digital estuary
#

๐Ÿ‘€

quasi dome
#

Cish

digital estuary
warped blade
#

good shit

agile marten
warped blade
#

hello

blissful current
gusty inlet
#

You know, after Microsoft saying that creds are in clear text in memory "By Design" kek

frozen gull
gusty inlet
#

A lot of public PoCs out there but all of them are super loud and unoptimized

#

I'll open-source a basic skeleton PoC that people in RTOs can optimize to be OPSec-Safe

cobalt knot
#

hello guys does tryhackme removed the sound after played after room finished ?

gusty inlet
#

Most PoCs use MiniDumpWriteDump which is an EDR fire alert

exotic flame
#

d

rigid urchin
cobalt knot
rigid urchin
#

Strange

cobalt knot
#

but while i answer questions sound played but at finished room ending it was not

quasi dome
#

Just finish the rooms bro ๐Ÿ˜ญ

cobalt knot
#

bro just finished one room but my cp score droped -1 ๐Ÿคท today total i finished 2 rooms why i still got cp -1

warped blade
gusty inlet
warped blade
#

oh

#

do u want mine

gusty inlet
#

I'd need a callback function though.

warped blade
#

why?

gusty inlet
hexed rune
#

wassup dkob

cobalt knot
warped blade
gusty inlet
#

Directly from memory?
My current logic is:

  • CreateToolhelp32Snapshot (List Processes)
  • OpenProcess (Get a handle on msedge via PID)
  • PssCaptureSnapshot (Creates a SnapShot of the main process)
warped blade
#

directly from memory

gusty inlet
#

Step 4 is either MiniDumpWriteDump (Which I'm avoiding) or from Memory (Which I'm working on)

warped blade
#

why do u need PssCaptureSnapshot

gusty inlet
#

I don't want to interact with the main process

gusty inlet
gusty inlet
sharp citrusBOT
gusty inlet
warped blade
#

openprocess

#

ntreadvirtualmemory

#

thats it

gusty inlet
#

Hmm but this is not very opsec safe

#

Works for Defender, sucks for EDRs

blissful current
rigid urchin
bleak prairie
gusty inlet
#

How does Just use Linux fix my problem? kek

bleak prairie
warped blade
#

but minidumpwritedump generates etw and reads the target anyway

#

and the handle with VM_WRITE+ access is creating regardless

gusty inlet
#

My handle currently has: PROCESS_VM_READ & PROCESS_DUP_HANDLE

warped blade
#

yes

#

VM_READ

blissful current
#

@gusty inlet oh btw check this, I added all 3 things to OVT (A toolkit me making, well for fun even if nobody cares about it) for bloodhound features , works instantly Via RUST, Axum and D3js and TUI with REPL Shell

No Neo4j, python or JVM BS

  • Graph TUI
  • Tree TUI
  • Bloodhound like neat GUI (Local)
gusty inlet
#

Then what... Direct Syscalls in Assembly? kek

sand trench
#

??? thats a thing you can do????

warped blade
#

no, ur handle still exists, and the stackwalk on the Ob* callback is now detecting ur direct syscall too

manic lagoon
#

anyone knows is there any good room to use my skills after finishing the cyber 101 ?

warped blade
#

also MiReadWriteVirtualMemory logs reads to etw

gusty inlet
hexed rune
gusty inlet
#

WriteProperty on member attributes for groups shows as "AddMember" on BH kek

gusty inlet
# warped blade also MiReadWriteVirtualMemory logs reads to etw

I'm not too worried about ETW, there are ways to make it blind, I'm just really thinking like how do people bypass EDRs if literally every single function is now monitored.
Or maybe, these events do get logged, but operators rely on a bit of luck for SOC to not notice

#

OBV they bypass and hide a lot, but some functions are just necessary to use and will be logged at some point

warped blade
#

or fuck with other processes

gusty inlet
warped blade
#

"ways to make etw blind" is quite vague id like to know how that works with kernel etw providers that arent accessible by anything below SYSTEM, and in many cases not accessible by anything that isnt PPL

gusty inlet
#

Then what's your alternative?

warped blade
#

duplicate handle has another Ob* callback on it

#

well u cant really just not be detected thats kind of impossible due to the way windows is structured

#

but there's many other ways to leverage other things to get access to stuff

#

it just depends how deep the edr is and how tight its detections are

#

generally when u start reading other processes memory u dont really care abt detections

gusty inlet
#

Aren't EDRs just bare bone deep nowadays?

warped blade
#

what does that mean

gusty inlet
#

They are all kernel level

warped blade
#

yes

#

some hypervisor

zenith gull
#

Hello

warped blade
#

well not anymore, microsoft locked that down

#

VBS isnt helping the rootkits

gusty inlet
#

Well rip then

warped blade
#

welcome to offsec

gusty inlet
#

I doubt there's literally no way of reading another's process memory without having it detected... something must exist

warped blade
#

of course something exists

#

just think wider ur not trying to subvert the readmemory api that isnt possible but leveraging other things to do it for you or doing it indirectly is

gusty inlet
#

@tulip shore

#

Ah he left rip

blissful current
gusty inlet
#

Looks very populated

#

A bit hard to read

blissful current
blissful current
#

had taken the json files from the HTB module target machine , they are highly filled up with Users and computers on the domains

blissful current
# sand trench care to explain what this is???

Its a Active directory exploitation framework im creating(for fun) , what u see is just one of the features which replicates Bloodhound (a Tool to visualize relationships in AD - OUs, Groups, USers , Domains , computers etc etc)

so i made my own 3 visualization versions which work instantly and locally (Graph TUI, Tree TUI, Graph GUI)

sand trench
#

oooh now shadow sees it

#

so bloudhoung as a tui app

#

neart

blissful current
#

looks liek this

sand trench
#

tytypoisd galore

blissful current
blissful current
#

Yet to improvise more and its still WIP

warped blade
#

malware is going to hate going up against this

gusty inlet
#

@warped blade Seems like this dumper bypasses AVs too... only EDR seems to be a problem (Rightfully so)

warped blade
#

most AV's barely have a driver

gusty inlet
#

Wow, AVs are really that shit?

blissful current
warped blade
#

yes

drifting tendon
#

guys i got a problem like i had a mail my 2nd main gmail acc and it was on my old phone and i broked it i got a new one and now how can i have that mail i just remember the email name but not the password

warped blade
#

windows defender does have the capability to detect such things (of course), but none if it is enabled unless ur on MDE

gusty inlet
#

Even BitDefender didn't even flinch

drifting tendon
gusty inlet
warped blade
#

THTS WHAT I SAID

blissful current
# gusty inlet Even BitDefender didn't even flinch

Its just a Random ahh project i have been working for last 6 months , so dont judge lmao
Coz me is broke and cant really do anything else for eg go for another cert or Afford HTB silver/gold plan, or play games since GPU is ded

gusty inlet
#

One thing I learned about myself is that I absolutely suck at pentesting...

warped blade
#

why do u say that

gusty inlet
#

The only thing I'm interested in is evasion and overall RTO tradecraft

blissful current
gusty inlet
# warped blade why do u say that

Because I have like 10 certs and I still struggle at medium THM rooms sometimes.
The reason? I'm too lazy to spend 2 hours enumerating or getting "very creative" for me to get a LFI in the end kek

blissful current
#

I suck at web af ngl that i understood in CTFs xD

gusty inlet
#

@warped blade So do you think reading from memory is overall better than MiniDumpWriteDump right?

#

Even if both are overall shit for EDRs

sand trench
#

@warped blade wanna appoligise for yesterday
windows is probably more secure then linux
but linux is more easy to check if it is secure as you can read the code
and being able to read the code makes you able to see if it is more or less privacy respecting

but this is like comparing your own email server vs gmail

#

if we look at the amount of CVE:s windows is lower then linux by quite a margin

#

though it is not that easy to compare them

blissful current
warped blade
warped blade
gusty inlet
twin ridgeBOT
#

Gave +1 Rep to @warped blade (current: #165 - 67)

blissful current
sand trench
#

find it weird that microsoft is pushing so hard for bitlocker to be on by default without telling people that they need to keep a backup of the backup key in a safe somewhere or similar to not have huge risk of losing their data.... but to some degree it is helpful

warped blade
inner wing
#

Dead project this channel lol๐Ÿคฃ

warped blade
dreamy bronze
#

anyone know where i can find mem forensics labs, has anyone ever gotten them from github lmao

warped blade
#

who knows if edr's hook dump apis

dreamy bronze
warped blade
#

probably not

blissful current
gusty inlet
warped blade
#

no no i mean like

#

let me just visualize

gusty inlet
#

Ok

blissful current
sand trench
dreamy bronze
twin ridgeBOT
#

Gave +1 Rep to @sand trench (current: #3 - 2357)

warped blade
#

MiniDumpWriteDump calls a fuckton of functions internally including ETW meaning that calling MiniDumpWriteDump sends telemetry to ETW

sand trench
gusty inlet
#

Ok yes this makes sense

warped blade
#

readmemory also sends data to etw so its a tradeoff regardless but the readmemory etw flag is also Etw-Ti* exclusive

#

and readmemory's etw is kernel only

blissful current
#

will prolly have to learn more and gitgud at WEB as well , to may do some sort of bugbounty to showcase...so that MAYBE some hiring chance increase somewhere

The HRs dont even know shit about da roles , so welp idk what to say , could ease up things or F up things , either of these

gusty inlet
#

Are you looking at offensive roles exclusively?

radiant bloomBOT
#

@rancid drum Please slow down. Further spam will result in a short timeout.

blissful current
gusty inlet
#

A yeah fair enough

#

I think I will be stuck in blue. Not really sad about it though

blissful current
#

my current plan is to take IT/SWE exp and slowly pivot to cyber sec within my current org ...if i get an opportunity that is.

sand trench
#

shadow is stuck in the privacy hole

tired elm
#

Someone said something about note taking... How, when?

blissful current
tired elm
#

Even on try hack me?

blissful current
#

any sort of learning anywhere

notes always helps , even when u go for professional certs , notes will be SUPER HELPFUL

tired elm
sand trench
#

you can also subliment your notes with
flash cards
or rubber duck debugging

tired elm
#

Wts tht

warped blade
#

used to do that with my ex

#

๐Ÿ’”

sand trench
#

flash cards is cards with a question or a short sentence about a topic
which you read and try to answer or explain to get better at a topic

rubber duck debugging is explaining your problem or what you are learning to a rubber duck
instead of a human
this often helps you figure out the problem as you are putting it in spoken words

dull otter
#

Rubber ducking

blissful current
tired elm
#

Shoukd it be specifically rubber duck?

blissful current
warped blade
blissful current
dull otter
#

Me to my rubber duck โ€œIm trying to fix this block of code so that it can uhhhh ahhh hmmmโ€

sand trench
dull otter
#

Pet rock

tired elm
sand trench
#

no problem

#

you have a lot to learn for now

tired elm
#

Yeah a LOT actually

#

A LOTT LOTTT

blissful current
#

My brain tired n bout to shut down in an hour or so

blue_screen

#

me sleep early today

dull otter
#

@finite basalt

blissful current
chilly compass
#

Who's going to be doing the AI Odyssey CTF next week

sand trench
#

madaidans is reputable on this field as being a dev on whonix if you wondering his creds

#

this is his blog site

oak river
coarse hedge
edgy fossil
#

yep

#

i was muted

#

by that nerd bot

blissful current
radiant bloomBOT
#

@silk sapphire Please slow down. Further spam will result in a short timeout.

blissful current
edgy fossil
#

@radiant bloom

#

can u be serious

#

?

rigid urchin
#

Its a bot it doesn't respond to us peons

swift jolt
#

Hi guys

blissful current
#

da bot was serious tho , he blocked a compromised account spamming
(that Mr. beast screenshots shit)

sleek grove
#

lol

rigid urchin
blissful current
rigid urchin
blissful current
swift jolt
#

Hi bruhh

finite basalt
#

Mind you I wouldn't go to Tenerife I don't think

scenic trench
#

yooo guys

dull otter
finite basalt
#

Nah never been

dull otter
#

mind you there is benidorm

finite basalt
#

Not my scene I don't think

dull otter
#

substantially worse

finite basalt
#

Never been benidorm either and really don't fancy it

dull otter
#

understandable

quasi dome
#

๐Ÿ˜ก

boreal scarab
scenic trench
dreamy bronze
#

youre not in the sudoers file this incident will be reported

dim pelican
#

can i do a recap without having it showing up by itself

bleak flicker
#

hello๐Ÿ˜ƒ

river ore
#

Hi

river ore
dim pelican
river ore
finite basalt
#

I feel my mortal soul leaving my body

finite basalt
#

Sustenance is en route poste haste, but I fear my body may wither away before the food makes it to my humble abode

finite basalt
#

hanging in there

#

I've had a bagel, brew, latte and some water in 31 hours ๐Ÿ˜ญ I forgot to eat and now it's bitten me in the arse

#

this pizza does not know what's coming to it when it gets here

dull otter
blissful current
finite basalt
#

the pizza doth bang

blissful current
dull otter
#

I love how there's always a single bullshit task at the beginning of every walkthrough

#

if I'm not in the mood I just hit that and enjoy my day

sand trench
finite basalt
#

also no more purple shadow ๐Ÿ‘€

#

congrats on becoming a room tester

dull otter
#

she doesn't know about the mortal and immortal soul paradigm

sand trench
finite basalt
#

I yearn for this superpower

sand trench
#

the no purple is because discord is a poopy platform doing weird and shady stuff with your data

finite basalt
#

ah I just saw the colour changed

rigid urchin
sand trench
oak river
#

May this esteemed gentleman ask a questions regarding buying a smartphone?

#

How do you feel about google pixels?

rigid urchin
sand trench
oak river
rigid urchin
#

Yeah

oak river
#

I am currently with Huawei P30 and its iron

rigid urchin
#

It should

oak river
#

And P30 is like I dont know 10 years old?

sand trench
#

yes

river garden
#

hey guys, it's me Vlad

sand trench
oak river
river garden
oak river
#

Im considering between Motorolla, Sony, Pixel and Samsung

sand trench
river garden
sand trench
rigid urchin
sand trench
sick lance
#

Do Sony still make phones?

#

Wild.

oak river
#

Although I am capable of flashing another OS

oak river
#

Though not popular

#

Maybe?

sick lance
#

If you don't want AI, don't get an AI phone.

sand trench
#

get pixel
go to local place with public wifi
use laptop to flash graphene os to pixel
enjoy 0 AI or unescarry telemtry
enjoy good privacy and security

rigid urchin
#

All phones are eventually going to have ai in them if not already so we will have to flash them with roms like graphene to avoid ai

oak river
river ore
#

You use graphene os

sick lance
sand trench
oak river
sand trench
rigid urchin
#

That is poor security posture

oak river
sick lance
sick lance
oak river
#

We can get "Dumb" phones

river ore
#

@sick lance You're back i see

sand trench
sick lance
sick lance
rigid urchin
#

It doesn't have to be latest but as long as its still supported

sand trench
oak river
#

I want the best bang for my buck

#

Pixel 10 Pro seems like it

sick lance
#

I'm not including you owning the phone.

rigid urchin
#

I mean i went from a note10 to s24 ultra and I am happy with my upgrade.

sand trench
#

and yes it was a phone shadow owned

sick lance
#

So no.

#

You haven't tried to hack a phone then.

sand trench
sick lance
#

"Not getting an up to date phone is bad security posture"

How many people, can realistically hack your phone, that isn't nation state?

rigid urchin
#

Phones do have better security than computers but that doesn't mean they aren't prone to being hacked.

sick lance
#

I'll wait.

sand trench
sick lance
sand trench
sick lance
#

Android and Apple pay big money to whoever can hack their phones.

#

Apple's BB is very generous.

rigid urchin
#

Right but I imagine that is more of a controlled test without having someone's personal information compromised

sand trench
#

know that said bb stands for bug bounty but started imagining apple having a BB gun and shooting people or something with it

sick lance
rigid urchin
#

Or maybe it has dummy data in it to simulate

sick lance
#

That's just stupid.

rigid urchin
#

Yeah that makes more sense

sick lance
#

Phones have good security.

oak river
#

I'm just laughing over here thinking that the pixel will literally teach google everything about me

#

But yeah - at least another alt OS can be flashed

sand trench
sick lance
rigid urchin
#

Thats why we don't need mobile avs

#

Thank God

sand trench
sick lance
#

I think, now I can't honestly remember, but it was in the region of 70-odd % for when a mobile phone is hacked, it was the end user.

#

Not the security, or the handset itself.

rigid urchin
#

I think that could apply to computers too though user error

sick lance
#

Computers and phones are essentially the same, but different.

#

A phone is more sandboxed.

#

Realistically, the only people who would have the power to complete hack your phone, Graphene OS or not, is nation state.

#

And if you're targeted by a nation state.

#

you have bigger problems.

#

Thanks for coming to my TedTalk.

rigid urchin
#

How does that work in the broad context of telecommunications companies being hacked i.e. the big three in the U.S. for example

#

I know its not the phones directly but does it have some impact

sick lance
#

Are you talking about phone, or records?

rigid urchin
#

I guess it wouldn't have an affect on the phones but definitely on records?

sick lance
#

If it's records, they'll attack the carrier.

#

In which case, that will be 9/10 social eng.

#

Graphene OS won't protect you from a sim swap, also you abide by the same rules if you use normal calls/SMS.

round orbit
#

Iโ€™ve had reverse shells longer than I have relationships

sick lance
#

All that can be done without even touching your phone.

rigid urchin
#

It is nation state

#

Most likely

slow cloud
rigid urchin
sick lance
#

That was fun read.

rigid urchin
sick lance
sand trench
#

anyone have a good website for nutrionlabels of different nuts???

sharp lark
#

Hiiii everyone

sand trench
#

ello wazir

finite basalt
#

tbf the phone stuff is very cool

#

the architecture itself is inherently harder to exploit because something in memory cannot be write and execute at the same time iirc

#

Other stuff on top of that ofc but at the hardware level there's inherent differences in how memory is managed that makes it harder

worldly pollen
#

my kali vm too slow how can i speed up?

#

my m4 air has 16gb ram and I have 15gb

tranquil geyser
#

more ram

worldly pollen
wooden pendant
#

hi

tranquil geyser
#

u have 16gb and ur allocating 15 to ur vm?

worldly pollen
tranquil geyser
#

and its still slow?

worldly pollen
tranquil geyser
#

wadahel

wooden pendant
rigid urchin
#

That makes no sense

worldly pollen
#

I am having fps drops

tranquil geyser
#

๐Ÿ˜ญ

worldly pollen
tranquil geyser
#

what are u running

rigid urchin
#

Well your host system is struggling to function on 1 gb of ram

worldly pollen
tranquil geyser
#

yea why are you allocating 15 to ur vm anyway

#

leave some for ur host

rigid urchin
#

Unless they have only one gb of ram on the vm allocated and 15 remains its hard to know for sure without seeing the setup

tranquil geyser
#

yeah leave 3-4 for the host that should do it

rigid urchin
#

Oh you can go to 4 gigs or 8

worldly pollen
#

u mean the core?

rigid urchin
#

No

#

Where is the ram allocation

tranquil geyser
dreamy bronze
rigid urchin
worldly pollen
rigid urchin
#

VMware doesn't work on apple silicon

tranquil geyser
#

oh shoot apple

dreamy bronze
rigid urchin
#

UTM is fine

dreamy bronze
#

vms are no fun on mac

#

i hated it

tranquil geyser
rigid urchin
#

But its still kind of barebones

rigid urchin
worldly pollen
#

I mean I bought this m4 thing because I tough the cpu is super fast

#

but acuallty not

tranquil geyser
#

idk

#

never had one

dreamy bronze
rigid urchin
worldly pollen
dreamy bronze
#

i have 8 ๐Ÿ’”

tranquil geyser
#

noob

rigid urchin
#

I mean to be fair macs memory management is pretty good

worldly pollen
dreamy bronze
#

itโ€™s not bad

worldly pollen
#

or buy a new one

tranquil geyser
dreamy bronze
#

LOL

#

legit

worldly pollen
#

just looking cool

rigid urchin
#

I mean i have an m1 macbook pro

#

But its for graphical work

worldly pollen
#

but I am quite sure thinkpad mogs any macbook

tranquil geyser
#

everyone buys apple products to look cool

rigid urchin
tranquil geyser
#

and tbf it does look cool ion blame them

worldly pollen
rigid urchin
#

Apple silicon is so incredibly efficient

worldly pollen
#

not for coding

rigid urchin
#

For battery life

sharp lark
rigid urchin
sharp lark
#

Apple silicon

sharp lark
rigid urchin
sharp lark
rigid urchin
#

Not like I have the space for it anyway.

worldly pollen
#

guys having thinkpad might be the best thing

sharp lark
tranquil geyser
#

its just peak

rigid urchin
#

Battery life wise no

sharp lark
worldly pollen
tranquil geyser
worldly pollen
#

thats why I switch up to mac

rigid urchin
#

It would last maybe 3 hours

worldly pollen
#

my mum has a 2gb ram laptop with no any graffic card

rigid urchin
#

Now it can't even be used without being plugged in but its in storage

tranquil geyser
#

bro that shi prob went thru hell

worldly pollen
#

is that better

tranquil geyser
#

there are some cmnds u can run to get a battery life report

rigid urchin
tranquil geyser
#

forgot them completely but used to help understand stuff

finite basalt
rigid urchin
tranquil geyser
worldly pollen
finite basalt
#

I've used a powerbank to charge my lenovo laptop while working and got it to last me a full working day 9-5

worldly pollen
#

but what yall thinking

finite basalt
#

and that was that it didn't go flat, it could've gone longer

rigid urchin
#

Then try again

finite basalt
#

I still have a laptop from 2004, I just don't use it kekw

rigid urchin
#

That should even out the host and vm

worldly pollen
rigid urchin
tranquil geyser
finite basalt
#

Also got myself an HP elitebook from 2019, a dell from 2022 and my work laptops

worldly pollen
finite basalt
#

which I do use all of those laptops

tranquil geyser
#

even 4gb is fine for kali tbh

finite basalt
#

The HP I bought while i had issues with the dell, which I had before 2022 but was upgraded when replaced in 2022/2023. I kept it and use it for when I don't want a heavy gaming laptop with no battery life but want something more efficient and low-powered

rigid urchin
finite basalt
#

I actually put the ram kit I used to upgrade my dell into the HP when I returned my dell so it's a Ryzen 7 Pro 2700U with 32GB DDR4

tranquil geyser
#

ghidra used to crash my kali vm alot

finite basalt
#

Really??

tranquil geyser
#

yea

finite basalt
#

tbf there's no reason you can't use ghidra on your host

rigid urchin
#

Maybe there was a reason they didn't want to

finite basalt
#

Maybe but in many cases it's probably fine

sharp lark
tranquil geyser
#

nah i just like to keep all the hacking stuff in vms

finite basalt
#

I remember virtualising a full AD stack on my laptop ๐Ÿคฃ

tranquil geyser
finite basalt
#

was using 18/22 threads and 32/64GB RAM

tranquil geyser
#

woa

finite basalt
#

Laptop was rather toasty but ran it like a champ

tranquil geyser
#

i hate laptops man

#

i'm getting a desktop

finite basalt
#

Now that it's been replaced by dell I love my laptop, not as free to upgrade as a desktop and thermals are shit but I've worked around that

serene ginkgo
#

wsg chat

tranquil geyser
#

ye

finite basalt
#

had issues in my old laptop with ssd overheating so I got some bluetack and stuck it between the case and the ssd and then used calipers to measure the clearance and then used a drill press and a vice to cnc an amazon heatsink down to the right dimensions for the case ๐Ÿคฃ

topaz steeple
#

What do yall do after you pull an allnighter which isnt sleep

finite basalt
#

my current laptop actually has decent airflow so it's not a problem, the old one would reach 95C and shutdown ๐Ÿ˜ญ this laptop I've upgraded from 16gb DDR5 to 64gb, 512GB NVMe to 2tb NVMe and then installed liquid metal TIM

finite basalt
finite basalt
#

or get a second wind and carry on ๐Ÿคฃ

topaz steeple
#

Its been 2 days and im starting to see things

finite basalt
#

Should see a doctor if that's a frequent thing

topaz steeple
rigid urchin
#

Go sleep

tranquil geyser
finite basalt
# tranquil geyser holy

It then started killing nand controllers on three different SSDs (2 brand new) so I returned it out of warranty and told them I'm looking forward to my replacement, argued until they conceded and gave me a laptop 2 generations newer kekw

tranquil geyser
#

exams ?

rigid urchin
#

College days lol

topaz steeple
finite basalt
#

was not at all impressed

tranquil geyser
#

good

rigid urchin
#

God college was 17 years ago for me omg my past is almost old enough to serve in the military.

finite basalt
#

even less impressed when they argued with me, failed to repair it and it broke entirely 3 days after I got it back because there was a short somewhere on the mobo. Had to argue with them again

tranquil geyser
finite basalt
#

Vaguely remember one argument was that the charger was integrated with the mobo, said no it's not I'm holding it in my hand currently..
Told them, I've just disconnected it to test for a short with a multimeter and they finally started to listen to me

tranquil geyser
#

keep going i guess idk

topaz steeple
rigid urchin
#

Studying is good but don't study too hard sleep is important too

topaz steeple
tranquil geyser
#

i've overslept but i've never overstudied

sharp lark
rigid urchin
flat bone
topaz steeple
tranquil geyser
rigid urchin
#

Trying to be a poli sci major?

topaz steeple
tranquil geyser
#

i bought some vitamins pills

topaz steeple
tranquil geyser
#

they said they're good for exams

#

and shit

tranquil geyser
#

i'm done with calc tho bahaha

rigid urchin
topaz steeple
#

And hit the โ€œabsolute cinemaโ€ emote when the explanation hits the spot

tranquil geyser
#

peak

topaz steeple
sharp lark
# rigid urchin Trying to be a poli sci major?

Im major in international relations and diplomacy but i want to work in cybersecurity preferably for an embassy but before that i need lots of experience
Recently i actually was told i could have a cybersecurity internship at a private bank in my country but nothing is yet certain

sand trench
#

shadow is shit at math if we look at how math works for physics and the universe

rigid urchin
sand trench
#

still don't grasp this math perfectly yet

topaz steeple
tranquil geyser
#

shadow its useless anyway

sand trench
molten sonnet
tranquil geyser
sand trench
#

you mean shadow having fun and being confused for years by that wikipedia page is useless

rigid urchin
#

I don't think for shadow its a lack of time its probably more a lack of understanding certain concepts

topaz steeple
rigid urchin
topaz steeple
sand trench
#

the home work
1+1 = 2
the exam:

tranquil geyser
#

yeah nah

#

i mean i've came across worse shit but it kinda just looks the same

topaz steeple
tranquil geyser
#

no numbers

#

just scary symbols

sand trench
rigid urchin
#

Omega and epsilon

sharp lark
#

Im not good at math or sciences but im going to learn the math required for cybersecurity and networking stuff because i love cybersecurity and im from a background of humanities

midnight panther
#

Hi, I'm new here .. can someone give me some usefull advices how to use discord, about it's purpose .. I am into hacking, ethical like most of us here, anything motivational and usefull. I did a lot of thm tasks and willing to learn

topaz steeple
#

I think in middle school and high school I was shit scared of my teachers which is why i couldnt grasp maths.

sand trench
#

here is the whole thingy by zooming out to fit it:

rigid urchin
#

Oh delta

tranquil geyser
molten sonnet
topaz steeple
sharp lark
rigid urchin
#

Yeah its a monstrous problem

sand trench
#

subnetting is not that hard really

rigid urchin
#

At least for me

tranquil geyser
#

i only have to take probabiliy now

#

and i'm done with maths

#

probably

sharp lark
midnight panther
sand trench
rigid urchin
#

The probability of that is 100% because ray said so

tranquil geyser
#

!!

rigid urchin
#

I stopped at precalc

#

That knowledge is gone

#

In the recesses of my brain

tranquil geyser
#

even better

#

i deadass got like 1.7/20 in the maths module this semester

narrow heron
#

Hey everyone! I'm a first-year IT student looking for a mentor who's currently working in the field. My goal is to get into ethical hacking / penetration testing and I'd love to connect with someone who can help point me in the right direction. Whether it's resources, certifications, or just general advice

rigid urchin
hexed rune
#

Its the best

hexed rune
rigid urchin
#

Before delving into pen testing and ethical hacking

hexed rune
#

@topaz steeple wassup

topaz steeple
#

We chilling doe

sand trench
hexed rune
#

@frail zenith wassup

topaz steeple
hexed rune
topaz steeple
hexed rune
#

Then i forgot my password

#

Then i got a new number

#

Took me some time

topaz steeple
#

Ayeee

hexed rune
#

Trying to get my life together

#

Will be graduating next month

topaz steeple
hexed rune
#

The world is looking for fresh meat

topaz steeple
hexed rune
sand trench
hexed rune
twin ridgeBOT
#

Gave +1 Rep to @topaz steeple (current: #179 - 62)

topaz steeple
hexed rune
#

Really keen on becoming like mr. Robot

sand trench
#

:D

topaz steeple
hexed rune
#

I am a bit paranoid now so the first few steps towards mr. Robot have been taken

hexed rune
sand trench
hexed rune
midnight panther
#

Is it possible to join let's say red team but some kind of begginer version?

topaz steeple
hexed rune
#

Got it

hexed rune
#

I wouldve been pursing photography

sand trench
topaz steeple
#

Id just smoke some.

worldly pollen
#

guys why I cannot start scaning?

hexed rune
#

I really wanted to become a chef then i saw the lives of cook and joined comp sci

topaz steeple
hexed rune
#

Nmap is boring when is nmap 2 coming out

sand trench
hexed rune
topaz steeple
hexed rune
#

It was good

#

Gonna make it again some time

hexed rune
#

Rawdgging my pain rn

sand trench
#

it goes into what ingridents mix well with others

rigid urchin
#

Shadow you are a wealth of information lol

topaz steeple
hexed rune
#

Never really tried spaghetti before until now i definitely want more of it

worldly pollen
#

can someone help me about openvas?

sand trench
#

making it so you can experiment and make your own recipes easier instead of following others

hexed rune
#

I want to join the wall street

#

Or dalal street for india

topaz steeple
hexed rune
twin ridgeBOT
#

Gave +1 Rep to @sand trench (current: #3 - 2358)

sand trench
sand trench
sand trench
#

got a copy of it to give to shadows father as he enjoys cooking

hexed rune
topaz steeple
sand trench
#

A hacker embodies a boundless passion and insatiable thirst for understanding the complexities of a system, computers and networks in particular. They revel in the pursuit of knowledge and mastery, constantly seeking new solutions and opportunities for growth. Their drive and innovative spirit inspire and are inspired by the hacker community, where ideas and knowledge are freely shared and valued regardless of their origin.
--Silk

there is a very very big reason shadow lives by this definition to an insane depth in a ton of different topics

worldly pollen
#

I really need some help where can i ask that

hexed rune
topaz steeple
hexed rune
#

I couldve been a tutor for politics but no one needs a tutor for politics lmao

worldly pollen
topaz steeple
sand trench
#

that would be the advanced help channel

hexed rune
sand trench
#

which is mostly for topics to spicy for general

worldly pollen
worldly pollen
#

can i send a picture

topaz steeple
#

I might do teaching and learn backend development tho ngl. I realised i have free will so why not use it this way

sand trench
worldly pollen
sand trench
#

basically never used gui for metasploit ยฏ_(ใƒ„)_/ยฏ

oblique harness
#

hey guys

#

soooo, tomorrow im going to do my first cyber cert (eJPT) , does anyone know a good cert road for red team? i was thinking
eJPT -> comptia security + -> PNPT -> OSCP

oblique harness
#

ohh mb

molten sonnet
#

Holy ad

tranquil geyser
#

js is so annoying ๐Ÿ˜”

lucid pumiceBOT
#

Done!

rigid urchin
#

I figured it out just needed to wait til I had service on my phone to enter the command

granite kayak
#

look you did it : )

rigid urchin
#

Thanks @cloud quiver appreciate ya

twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #1 - 6188)

granite kayak
#

Bluey

#

is your discord working again? ^^

arctic spruce
#

yep just needed the mfa....lol

granite kayak
#

good good : )

arctic spruce
#

first time being hacked and i was like bruh never again

#

literally the day of...woke up saw an email saying that i was banned and i was like bruh...it messaged everyone

#

the crazy thing is that I research the pics that got sent and was like that is soo weird...

granite kayak
#

damn mr beast and his aggressive promotions

#

^^

arctic spruce
#

its a scam very

rigid urchin
granite kayak
#

i know i know ^^

twin ridgeBOT
#

Gave +1 Rep to @rigid urchin (current: #829 - 9)

arctic spruce
#

i will admit that i was looking into bots and i think the link someone sent here got hacked and spread to me

dull otter
#

Fool me once

dull otter
#

My favourite variant is

#

Fool me once shame on you

#

Fool me twice

#

I canโ€™t get fooled again

arctic spruce
#

fool me twice i go die oh

#

nvm lol

dull otter
#

By George Bush

granite kayak
#

My favorite one is probably one that went on and on forever like fool me again now i want to be fooled so whos really getting fooled etc sooo long ^^ i dont remember where its from

dull otter
#

I feel like thatโ€™s from the office too

granite kayak
#

could be some show probably ^^

dull otter
#

Ive definitely heard it before

arctic spruce
#

damn i really need to watch the office

rigid urchin
#

Bush could have said it first then the show used it lol

graceful maple
#

Hi everyone ๐Ÿ‘‹
Iโ€™m looking for a WhatsApp group or small community of people interested, students in cybersecurity or IT in France or other

Iโ€™d like to learn, share ideas, and connect with people who are serious about these fields.

If you know any good group, I would really appreciate it if you could let me know. Thank you!

arctic spruce
#

this is a discord group

#

just come on by and talk lol

graceful maple
#

Haha okay ๐Ÿ˜„ Iโ€™m here already, Iโ€™ll join the chat.

arctic spruce
sand trench
#

hmmmm shadow is deep in the things right now

sand trench
arctic spruce
#

why peak your interest from researching?

sand trench
#

because complex maths fun??

#

and a digital alternative to cash is also intriguing

novel girder
granite kayak
#

is that a question that turned into an ad..?

rigid urchin
#

Yeah basically

#

๐Ÿ˜„

rigid urchin
#

or more

#

depending on how wanna pay

#

I would honestly not do this program

sand trench
#

neither does shaodw

arctic spruce
#

and if it is partnership with ironcircle aka thrivedx

#

no bueno

rigid urchin
fluid chasm
#

Hey chat

#

I finished beginner path , there are SO many room and idk where to start

#

I want strong theory before learning how hacking work

rigid urchin
#

Well just find something that interests you

fluid chasm
#

Testing

rigid urchin
#

not trying to dissuade you but without the foundations the concepts aren't going to be easy to understand.

little kite
#

Check, check, am I finally able to text in this now?

fluid chasm
rigid urchin
#

start with presecurity

#

and work your way from there

sand trench
fluid chasm
tranquil geyser
#

goodnight people

sand trench
#

good night ray

tranquil geyser
#

goodnight shadow

little kite
rigid urchin
# fluid chasm And after that

I would just keep looking for more and more advanced stuff after presecurity there will be more stuff for you to learn.

#

@sand trench with tryhackme what's the best path towards pentesting?

#

rooms wise

fluid chasm
novel girder
sand trench
#

anyways shadow is gonna go lie down in bed and go meep moop to beep boop while going sleep sloop

rigid urchin
cyan grove
#

Stay hydrated

novel girder
twin ridgeBOT
#

Gave +1 Rep to @arctic spruce (current: #542 - 15)

mental spoke
#

rip just barely out of my price range

#

i need a few more dollars i think

#

like 730k more

#

ill get there soon chat

tropic notch
forest spire
#

Please, I need help because I've been having trouble.

mental spoke
forest spire
#

My account x

#

Formerly Twitter

mental spoke
#

Ppl here arent account recovery or account support

#

nor will they ever help you hack anything besides THM attack boxes

mental spoke
snow python
#

Uh...

#

Canvas?

snow python
#

Anyone else see?

rigid urchin
#

You mean the breach from shinyhunters?

snow python
#

Yep.

rigid urchin
#

yeah that was pretty major

snow python
#

Time to change my passwords.

#

When did it happen?

#

Did anyone else use canvas?

forest spire
mental spoke
#

No one will provide support for that here

tropic notch
#

You're gonna end up like the 50 other people coming in here asking

forest spire
mental spoke
#

We have no proof its your account. Nor do most ppl here hack user accounts like that

rigid urchin
forest spire
#

I have proof

tropic notch
#

This is a cybersec server

mental spoke
#

its unethical and not allowed here

gusty inlet
#

โณ โณ โณ ๐Ÿ—ฟ

granite kayak
#

whats that

forest spire
tropic notch
cursive bone
#

??????

snow python
rigid urchin
#

not just once

tropic notch
#

I've never used canvas in my life

snow python
#

I was lucky, and got a screenshot of the ransom alert.

tropic notch
#

Except for class

mental spoke
#

I better go check if i was apart of the compromise

snow python
#

Apparently they were so excited that they made both a light and a dark theme, depending on which you used for canvas.

forest spire
mental spoke
#

No you need to take this up with support

#

they are the only ppl that can further help you

tropic notch
#

I like how you refuse no isn't no good enough

#

๐Ÿ˜ญ ๐Ÿ˜ญ ๐Ÿ˜ญ

granite kayak
rigid urchin
#

Just no!!

mental spoke
#

If support cannot help you or wont then im not sure what to tell you. I dont intend to sound rude but its not how this place operates.

#

Support will always do more than anyone here can to recover an account that actually belongs to you

granite kayak
#

btw fun to see how the bot does not recognize thnx as a thanks flagged for the count ^^

mental spoke
#

for rep?

granite kayak
#

ye i saw ty and thx work so thnx is not commonly used i guess ^^

mental spoke
#

Blame them for not using fuzzy matching

#

etc

granite kayak
#

๐Ÿ˜„

rigid urchin
#

So it seems like passwords weren't affected

#

in the breach

hollow pivot
#

Hey guys i need help, tryna check in for my exam. but i needs selfie verification and my desktop dont have a camera.. what do i do ... theres no option to continue on phone or sumn..

#

anyone know how i can go about doing this

rigid urchin
#

Can you not take a picture with your phone send it to your computer?

hollow pivot
#

it needs to be a live selfie

snow python
snow python
snow python
hollow pivot
snow python
hollow pivot
snow python
#

This is for looking up if your stuff was hacked.

#

I'm good, but my family is not.

hidden anchor
#

Yeah the college I visited they don't have canvas service.

tropic notch
#

I've got blackboard

#

So I'm gucci

#

But tbh my data is prob out there somewhere

gusty inlet
warped blade
#

meow

gusty inlet
true viper
#

Bruuuh canvas got hacked blobknife

warped blade
#

ur reading the process directly not the snapshot

gusty inlet
#

Oh oops I literally noted this and forgot to tweak it

#

Let me change this

gusty inlet
undone hemlock
#

guys !!

gusty inlet
undone hemlock
gusty inlet
#

Now it should be:

  • Snapshot freezes memory space with old data
  • Points to it
  • I dump this data space
#

The main parent keeps going independently

#

I'll also need to fix the PathAlpha then

undone hemlock
#

How do you study when you are in the TryHackMe room/lab? I feel I am lost

#

Should I understand everything and save it in my brain like I have an exam tomorrow?

warped blade
warped blade
#

if u have good memory & ur the type of person to do something once and remember it then do that

#

if u need heavy theory to remember then do that

#

if u need notes then write notes

#

everyone learns differently

gusty inlet
#

Doing last checks to make sure it's all good...

#

Oh maybe it's still incorrect, one sec

warped blade
#

ur enuming with pss now

#

but still rpm-ing hProcess

#

ur getting the regions from the snapshot then reading rpm on that region but not from the snapshot, from edge's memory directly

#

I want to research Instrumentation Callbacks they're so interesting but so undocumented