quiet-conversation

[arctic jetty]

im trying yo learn how to use php and actualy PUT it into a site

[radiant jacinth]

Cool

[charred furnace]

What’s the goal of your website?

[arctic jetty]

idk im just trying to fuck around

[analog jewel]

you want to put it on the web ?

[astral crescent]

‘The ps-less way using status files’ starts one too many sed imho.

[grand citrus]

Add a new entry called „The ps-less way using status file with less sed“ to the list.

[serene trench]

and there's more

[astral crescent]

If there was a recent commit I would totally submit this PR +:!find /proc -name status | while read file; do echo "$file: "; cat $file | grep vim; done | grep -B1 vim | grep -v Name | while read line; do sed 's/^\/proc\///g; s/\/.*//g'; done | xargs kill -9

[elfin orbit]

What is this doing?

ChatGPT saves the day 🙂 https://pastebin.com/ny3qMTXv

[astral crescent]

Actually now that I look at it it makes no sense to invoke sed for each line, either 😄

[grand citrus]

It exits vim.

[elfin orbit]

I had figured that much, I was just trying to understand the bash commands 🙂 I shared a pastebin breaking it down in case anyone else wanted to learn it

[sand radish]

I let chatGPT write me a script that converts a Postman collection JSON to a markdown list, that can then be c/p'ed into an enhancing-mindmap note.
I can post it if anyone is interested.
if anyone is doing a lot of work with APIs and wants to visualize them easily

[elfin orbit]

I'd be interested!

@sand radish

[sand radish]

Here's the script. Run it as python postman2md.py postman-collection.json and it will output a postman collection name.md file in the same location.

import json
import sys

def parse_item(item, indent=0):
    markdown = ""
    if "item" in item:
        markdown += "\n" + "\t" * indent + "- " + item["name"]
        for sub_item in item["item"]:
            markdown += parse_item(sub_item, indent + 1)
    else:
        if "request" in item:
            markdown += "\n" + "\t" * indent + "- **" + item["request"].get("method", "METHOD") + "** " + item["name"]
#            markdown += "\n" + "\t" * (indent + 1) + "- `" + "/".join(item["request"]["url"].get("path", ["PATH"])) + "`"
#            description = item["request"].get("description", "DESCRIPTION")
#            description = description.replace('\n', ' ')  # Remove newline characters
#            markdown += "\n" + "\t" * (indent + 1) + "- " + description
    return markdown

def postman_to_markdown(json_file):
    with open(json_file, 'r') as f:
        data = json.load(f)

    markdown = "- " + data["info"]["name"]

    for item in data["item"]:
        markdown += parse_item(item, 1)

    md_file = data["info"]["name"] + ".md"
    with open(md_file, 'w') as f:
        f.write(markdown)

if __name__ == "__main__":
    postman_to_markdown(sys.argv[1])

Uncomment the few lines if you want to get the description and path for the API endpoints (can't recommend on large projects).

I'm using the following template for each host/system. Just paste the api name.md file into it.

---
mindmap-plugin: basic
---

# {{title}}
## API

The ## API is not necessary and creates an additional, superfluous node in the mindmap. I use the enhancing mindmap plugin. It can export the mindmap as HTML, which contains the mindmap as a base64 encoded PNG.

example mindmap (without the ## API)

[mighty echo]

@spark sun

[spark sun]

They are already gone

[river ocean]

Quickly @smoky mortar mind if I dm me regarding a project of mine (Seeing if I could use THM and all with it?)

[smoky mortar]

Go ahead. 🙂

[south inlet]

It's for people who might find #general overwhelming with the speed it can go at sometimes.

[winged matrix]

nice

[frail rapids]

did google knowingly buy all bit flippable versions of google.com? Or did they just buy all misspellings

the former would be interesting since they chose to buy and manage all those domains instead of just implementing industry wide TCP-based DNS

[burnt night]

"Just implementing industry wide tcp-based dns"
You mean updating every single device with a DNS client on it that's in service?

[frail rapids]

At that time they could probably get away with implementing backwards compatibility with DNS over UDP

[south carbon]

DNS over TCP exists since a very long time and implemented probably by all mainstream operating systems. It’s there as SHOULD (in IETF definition) since at least RFC 1123 from 1989.

[short elk]

what would using tcp solve?

data would still be susceptible to bit flips

oh the checksum i assume?

[south carbon]

Yeah, checksum would be sufficient to detect single bit flips in header or payload

[radiant jacinth]

Hi Tryhackme Admin, I am the number one (#1) of june month, but not get the "Monthly Hacker" badge. Could you please check the information for me?

[radiant jacinth]

Thank you :D, But I not get the "Monthly Hacker" badge. Can I get help with the review again? TT

[hoary nymph]

Gave +1 Rep to @quartz spire

[mighty echo]

Can you show the monthly leaderboard?

[radiant jacinth]

Yep, you can see on this link: https://anonymfile.com/qyDJY/photo-2566-07-06-102646-pm.jpeg

Can someone help me? I contacted the admin 3-4 days ago but no response...

[mighty echo]

Typical response time atm is 7 days, sorry

[odd acorn]

Please don't ping administrators for site issues^
Although right now we have employees in the administrator roles, usually Discord roles are filled by volunteers (mentors, moderators) and cannot help with the site 🙂

[soft pier]

go go go power badgers

[candid tartan]

gota catch them all

[soft pier]

https://tenor.com/view/badger-badger-badger-mushroom-mushroom-mushroom-iggydr-gif-18197905

[twin ridge]

snaaaaake! ooooh it's a snaaaaaaaake!!

[candid tartan]

snaaakes with legs ❤️

[soft pier]

this proves that some of us are old

[honest burrow]

guys, I'm trying to understand how SMTP servers work;
suppose I send and email to [e-mail] to an SMTP server like postfix. Tell me if I understand this correctly:
-postfix firstly checks if the domains of the sender and recipient are the same
-they are not, so postfix sends a DNS request for gmail.com for MX records
-postfix sends the message to the server described in MX record for gmail.com

is this how it generally work?

[winged rain]

yep

[twin ridge]

for the record: https://youtu.be/EIyixC9NsLI

[south inlet]

http://weebls-stuff.com/toons/chutney-animated-music-video-mrweebl/

[candid tartan]

ppl tend just to post issue/problem without reading of how to. also ppl are not rply eager even to read rules and so. which is sad

[south carbon]

There is such: http://catb.org/~esr/faqs/smart-questions.html

[mighty echo]

whether or not people choose to read it is another story

[winter hearth]

Should be pinned imho

[burnt night]

That doesn't make people read it

[south inlet]

I think there is. in the room help pins.

[mighty echo]

#room-help message

#room-help message

[high remnant]

@smoky mortar can I dm you for an question in room creation

[south inlet]

I see now why you tried to DM me.

[high remnant]

[stuck pumice]

bruh

[astral island]

Hiii

[odd acorn]

@astral island Please do not post URLs to rooms that have not already been reviewed by our team 🙂

It will be made public in due time

[radiant jacinth]

What's a quiet conversation?

[soft pier]

a channel where heated topics never happen and where you are limited on how qucikly you can post new messages to make it more chill

[south inlet]

So people don't get overhwlemed by the speed of general.

[analog frigate]

Hello everyone, after completing the Pre Security and Introduction to Cyber Security Paths, you'd reccommend following this (obviously not starting from the first room) https://tryhackme.com/r/resources/blog/free_path or completing other learning paths( if yes, which ones?) I'm subscribed so i have access to all of them. Thanks

[rain vector]

I'm doing the Complete Beginner path after those two.

[analog frigate]

thanks

[sacred lagoon]

could somebody private message me , i need help with the setup and install of Streamify by Kit4Py on github

[odd acorn]

This is illegal if you use this without the consent of the owners (in this case, the Spotify team).

Please don’t ask for help here

[late cipher]

[rain cloak]

https://giphy.com/gifs/thebachelor-episode-7-abc-xTiN0h0Kh5gH7yQYUw

[vestal parrot]

Throw some css in thre

maybe some JS

[south carbon]

Why would someone do that? This is text to read, not “content to consume”.

[quasi turtle]

One reason would be to make it easier to read

If youre gonna ask people to first read 10 paragraphs about reading before asking, you could at least strive to make that a better and more effective experience 😉

[south carbon]

First, this is not even my page. Second, this is a standard format for Linux HOWTOs and I think it’s good. Third, it’s not my problem if someone cannot read a 10 paragraphs of coherent text. I have zero expectations, and it’s no enquirer’s benefit, not to mine to learn how to ask better questions.

[quasi turtle]

you asked why someone would do that ¯_(ツ)_/¯

[vestal parrot]

oh that person is mad about something and channeling all that rage onto suggestions.

[summer verge]

some people call it "constructive criticism" because it has the word constructive you shouldn't get mad about it 😂

[fossil palm]

I used to want to work in cybersecurity as a pentester or specialist but I realized how competitive the market for that job is and my life changed a bit so I'm graduating early with a major in criminology and minor in information systems to do a job in law enforcement and I like it. Weird how things changed so fast after 2 years since i graduated hs

[summer verge]

Are you going to work in digital forensics? I love forensics

[fossil palm]

nope, more so research intelligence. I thought about forensics but its not for me

[summer verge]

Research intelligence is also great, but I love forensics so much 🙂

[fossil palm]

understandable

[summer verge]

either way is a great job 🙂

[fossil palm]

Yeah, I just really just enjoy finding information to fit the pieces of the puzzle then explaining it in a way that most can understand, my professors recommended a career path in counter terrorism and so i made a path from entry to senior starting from research

[summer verge]

Wow counter terrorism, that's amazing, pretty exciting and big responsibility at the same time 🙂

[fossil palm]

yep, someone's gotta do the job even if the pay isnt attractive to most. new friends and big impacts

[honest burrow]

lemme proudly present my new login screen

[honest burrow]

cybersec is competitive?

[honest burrow]

Would doubt 1000s jobs but didn't consider it very competitive

[honest burrow]

right, that makes sense

how about experience as software dev? is it relevant at all?

[misty swan]

hey guys im a male age 15 im on my alt rn but i really need someones help because my girlfriends ex has nudes of her and is threataning to sell them online which is 1. illegal since me and her are minors and 2. very unethical of him so i was wondering if anyone here can help me somehow get his address to get cops at his door or if someome can help me do anything about it virtually as neither of us live in the same country as him and really need to put an end to his shenanigans, if anyone can help please dm me on this account

[honest burrow]

bruh

[tawdry dove]

Someone will be with you in a moment

[spark sun]

contact law enforcement. Many localities have revenge porn laws, and there could be complications (such as invalidating evidence) if you do you your own investigation

Your girlfriend should go to the police and tell them what the situation is.

[tawdry dove]

Idk, I just say it because I can't do anything and it avoids minimod

[misty swan]

issue is neither of us know where he lives all we know is that he lives in spain but even after using an ip grabber from grabify on him he used vpn so i cant track where his address is to give to cops

so im mainly wondering if anyone here has experience in pulling real addresses that we can then use to stop this guy

[honest burrow]

just ask him

[spark sun]

Last time, contact the police.

[spark sun]

Just don't.

[misty swan]

if u were tryna sell someons gfs nudes would u just tell them ur location?

[spark sun]

Vigilante stuff often means the culprit gets away with it, because you are poisoning the well and not keeping proper chain of custody. Have LEO start an investigation into the cybercrime, that's really the best way you can move forward.

[tawdry dove]

https://en.m.wikipedia.org/wiki/Fruit_of_the_poisonous_tree

Supplemental reading

[quasi turtle]

please post this to #room-help with the name of the room etc.

[south carbon]

Could be relevant for AppSec, depending on your experience.

[soft pier]

nice,... now you just have a lot of other badges to get

[honest burrow]

i dont get it - how can I communicate with HTTP server over telnet protocol, if both these protocols are on the same OSI layer?

[soft pier]

because the tellnet app is funky

[honest burrow]

what does telnet client exactly do then?

I mean - what does it do when I connect to a http server on port 80

[soft pier]

it establishes a connection with the server normally then asks for you to send input which it then sends over to the server line by line until you send 2 empty new lines as that the server takes as the end of the request.... at which point the server sends back the data requested

if you need a more in depth what exactly is going on shadow can't provide it as they are not 100% sure how it works

[honest burrow]

my understanding was, the connection itself is handled by TCP protocol, then HTTP protocol handles exchanging data; therefore I don't understand what does telnet "bring to the table"

guess I'll do a wireshark deep dive then

I hate not fully understanding something

[winged rain]

Re-organized my notes again 😮‍💨

[quasi turtle]

that looks beautiful

[winged rain]

It's not very organized just overarching keywords:

Attachments or anything that takes you outside obsidian (links, files, etc.)

[south carbon]

telnet application can be considered a simple tcp client. When you use it to connect to a server port and there is no terminal negotiation, telnet will act almost like netcat. All telnet application-level specifics will be ignored. Then you can use HTTP verbs emulating HTTP over TCP.

[honest burrow]

thanks!

[hoary nymph]

Gave +1 Rep to @south carbon

[spring swan]

is it covid-23?

[limpid ridge]

I know you sent this photo yesterday, but what note taking software is that?

Oh I’m dumb, the question was answered right above me, apologies for the long

[north kindle]

hi

[spring steppe]

hi

@spring steppe

gis

[tawdry dove]

Do you have a particular question? Are you looking for site admins or the discord moderation team?

[hoary nymph]

Gave +1 Rep to @tawdry dove

[radiant jacinth]

What software did you use?

[mighty echo]

It's obsidian notes

[radiant jacinth]

Thank you

[pearl narwhal]

IT sec only wants you to use one note

[devout thunder]

What tool is this?

[candid tartan]

it's Obsidian note taking app

[fervent idol]

Yoo, how can I learn to take, organize notes like you?

[zinc oasis]

obsidian is great for note taking, and its not hard to use. I highly recommend it

[winged rain]

Start with a big concept, split it into smaller concepts, learn more about smaller concepts, build up to bigger concept, connect concepts with others until you have a big web of ideas, expand your ideas, profit, start with another big concept

[zinc oasis]

👍

[winged rain]

I can PM you a demo if you'd like

[candid tartan]

• obsidian have shit load of comunity plugins to step up the game

[fervent idol]

Ye, I'd like

[ruby cloud]

How do you color them so nicely? I only get neat gray dots.

[winged rain]

If you got to settings (the cog on the right) and then groups, you can choose colours for the dots based on different criteria

[ruby cloud]

Thanks 🙂

[hoary nymph]

Gave +1 Rep to @winged rain

[sand temple]

Hey, I'm looking to build a CTF team with two other team members, preferably intermediate level (some prior CTF experience), and preferably with some rev experience. If anyone is interested, DM me

[tight merlin]

Heyaa, I have experience in Cloud security, SOC, Scuritity Compliance and sort of red teaming as well.
I am looking for freelance project where I can work on managing security compliance on Azure platform.
If anyone has any opportunity around this then please DM me.

[radiant jacinth]

I watched Lo and Behold and I learned that the first word on the internet was "Lo"

In 1969 when ARPANET was created, a UCLA computer was communicating with a SRI computer, UCLA's computer being the first network node ever and SRI being the second, and when ppl on the ucla computer were going to type login or log on not sure which, stanford's computer crashed on the letter G and so only L and O were sent and received over the internet

on Lo and Behold the documentary

https://www.youtube.com/watch?v=q3g3hqNJqpQ&t=5254s

btw this is legitimate it just has ads, not bootleg movie. It's from Youtube official. So don't ban me mods plz.

Oh sorry it's probably geo locked. US Based.

https://tenor.com/view/google-logo-meme-animate-logo-google-gif-24209368

yeah so now you know that the first word typed on the internet was Lo

[foggy nimbus]

!level

ouch

!echo

[mighty echo]

#bot-commands will work

[subtle chasm]

thanks, I have not seen this! Right up my alley.

[hoary nymph]

Gave +1 Rep to @spiral basin

[radiant jacinth]

very good enjoy

[radiant jacinth]

I know I haven't been as active as I should be on here, but I've been super busy these last couple months really honing down on my A game and studying for the Sec+ and Net+. Now that I am done with one goal, I plan on being more active on here. Really appreciate this community and it's members which make it a great environment to be in. 👍

[alpine linden]

Keep taking goals down 💪

[radiant jacinth]

@radiant jacinth The material I used initially was Udemy course videos and the Total Seminars textbook. I also practiced heavily on free online exam practice questions found at examcompass.com. Mind you, I also had other proprietary material from class that helped a lot, so don't want to rob you from the expectation that Udemy and Textbook were the only materials i used to pass the exam. Though i do say this, Udemy videos coupled with Security+ Textbook can definitely do the trick in passing your exam. Being that you will see questions you read on that Texbook, on the exam......also last but not last what helped another was doing the ISO 27001 and HTTP in detail rooms from TryHackMe. I did see questions on the exam regarding ISO 27000, and the OSI Model room

[hoary nymph]

Gave +1 Rep to @olive tundra

[radiant jacinth]

hello people

[radiant jacinth]

Finally got the badge. I'm suppose to get a wallet version as well

[twin ridge]

grats

[radiant jacinth]

grats

[radiant jacinth]

Thank you all! I do want to say that Mknukn and among the rest of THM members definitely had a portion of inspiration in getting this done. Can't show my gratitude enough, this community has been amazing and overall amazing to me. 💙

[dusk trellis]

Is there a way to save it in yourself the motivation you get at like 2AM while browsing the internet ?
Am i the only one like this ? I would start doing push-ups at like 3 AM and thinking about opening my LLC and learn a new language and find something new to do

[south inlet]

You could use will power.

[dusk trellis]

Where do i download that ?

[scarlet moth]

Discipline

[dense karma]

"Start off by making your bed." By making your bed, you start your day with a sense of order, discipline, and accomplishment. It sets a positive tone, giving you a small but tangible victory that can serve as a foundation for productivity and motivation throughout the day.

[dusk trellis]

Already doing that

[night shale]

Whats stopping you from doing all of those things at 2AM though? Not everybody has the same sleep cycle 🙂

[dusk trellis]

my full time job that start at 8

[dense karma]

Wake up earlier and go to the gym or go to the gym straight from work (keep gym clothes /pre workout in your car) then youll be full of endorphins that will motivate you to get shit done when you get home.

[dusk trellis]

i work remotely and my gym is on the 1st floor of my building

I just wanted to vent 😄 all is good, we got work to do

[twin ridge]

That helps

[dusk trellis]

Yeah, helps pay the bills
But soon. gonna transition to a cybersec role and finally be a bit more fulfilled from doing my job

[twin ridge]

sounds like a plan, good hunting

[dense karma]

If you work at home, couldn't you negotiate with your boss to start work at a later time? As long as it gets done I don't see how they would mind? Gotta do whats best for you. Being awake till 2am and starting work at 8am isnt enough sleep ideally also, so they would probably notice an improvement

[dusk trellis]

Ah yes cause Amazon cares 😄

[dense karma]

Fuckkk amazon

[stray tundra]

once you get high enough up they start to treat you like a human. buddy of mine has a ton of paid leave

and other benefits

[dusk trellis]

To get high enough you have to have a PhD and Master's in licking boots and kissing asses on a corporate scale

[winged rain]

Average corporate hell enjoyer

[sacred elk]

Just finished the Jr. Penetration tester learning path. Idk if it's supposed to be that hard for noobs. but some parts were really challenging.
Anyways, satisfaction levels are at an ATH and on to the next challenge. THM rulz!

[dusk trellis]

What's your next step?

[sacred elk]

i'll do the OWASP room and try some of the easier CTFs, then go onto the offensive Pentesting learning path. Outside of THM i'll apply to a local university on Monday, if i get in, i'll earn a Masters degree in Cybersecurity and digital forensics

learn some stuff, have some legit certification in my resume and hopefully switch to a job in cyber 🙂

[dusk trellis]

Awesome sauce ! Solid plan ! Good luck

[errant vapor]

Lost my 53 day streak today🥲 what’s the highest you ppl ever got?

[south inlet]

73

[soft pier]

718 and counting

[summer verge]

42

[quartz spire]

just proved i am not a robot, i passed the test

[errant vapor]

https://tenor.com/view/sorprendido-cara-surprised-shocked-face-wow-oh-god-gif-15759918

[errant vapor]

See u next year at 1000!

[soft pier]

yuups

the goal is to get the max streak badge

[errant vapor]

What’s the max?

[soft pier]

1500 days for the highest level streak badge which is what shadow meant with max

[radiant jacinth]

if anyone still wants a switch

on woot.com

[south inlet]

Japanese one at that.

[stray tundra]

finished the "complete beginner" room. feels good man

[vagrant shard]

@stray tundra I am halfway through, that is such a pain of a module to go through, good stuff

[stray tundra]

The ctfs at the end were pretty tough. But not to bad otherwise

[golden sphinx]

how do i change my country in tryhackme profile?

[hollow hare]

http://tryhackme.com/api/user/update-timezone
and refresh

[runic haven]

Which room is that?

[stray tundra]

Sorry, I guess the correct terminology is "Learning path" so I completed the "Complete Beginner Learning Path"

[runic haven]

Ah okay is that the introtocyber path? Is it completely free?

[stray tundra]

I'm subscribed so I'm not sure if it's free

But I think the intro to security path is different

[runic haven]

Ah okay then thanks

[hoary nymph]

Gave +1 Rep to @stray tundra

[winged rain]

I find it incredibly cool that obsidian can just show what HTML code does:

[vagrant shard]

huh how did you do that @winged rain

is that a plugin?

[winged rain]

Nope, all you need to do is write some HTML code and it'll magically show you a preview, here's the code underneath (I added a single back-tick so it dosen't go away when i try to SS):

[fair cobalt]

I love obsidian

[last otter]

Please how to solve the 504 gateway timeout..

[south inlet]

You're using the wrong IP, you need to start the machine on Task 1, 2 or 3 or something.

You're trying to access the Attackbox IP in the browser in the Attackbox

[last otter]

This is the page. https://LAB_WEB_URL.p.thmlabs.com

[south inlet]

Yeah, you need to start the machine, what room are you doing?

[last otter]

Walking An Application task 1

[south inlet]

Then press the green start machine button on task 1

[last otter]

Not opening

[south inlet]

Did you get a Red box at the top?

[last otter]

Yes. After clicking the green Start Machine, 2 red boxes appear, 1 access Machines and 2, Terminate.

[south inlet]

Use the IP that populates that box.

If you require anymore help, #room-help is the channel that you need to use.

[tawdry dove]

You know there are feds here, right?

[smoky mortar]

That's not what this Discord server is for.

[lucid creek]

Hello, someone know if its possible with gobuster to scan subdirectory in the middle of address ? Exemple : asddasd.com/asdsa/54645/sdsa
asddasd.com/asdsa/54646/sdsa
asddasd.com/asdsa/54647/sdsa
etc etc ..

[olive frost]

Not too sure, but at least with ffuf you can

[lucid creek]

Thanks ffuf works

[hoary nymph]

Gave +1 Rep to @olive frost

[sand ginkgo]

Hello guys,

Im working on an university Project where we need to pentest a Network. Ive Scanned its dmz with nessus and found that 3 Hosts with " Unix Operating system unsupported Version detection" (Debian 8.0). How can i exploit the old os ? I dont get how the exploit db works

[warm peak]

ask your classmates or teachers

[sand ginkgo]

Well id Love too but my teacher Just threw us into Cold water. We basically only got a few pdfs about pentesting and he wont give us hints. We also do Not know our classmates neither can contact Them. So im Just swimming and have No Idea how i can Pass this course 😂

[warm peak]

we sadly can't help with your courses, so I would look into finding a way to get help from your school, sorry 😄

[sand ginkgo]

You mean youre Not allowed to or Not able to? What is the general way you would exploit an old OS Debian 8.0 ?

[tawdry dove]

Not allowed.

We are unable to assist with schoolwork. Best course of action is to ask the teacher

[sand ginkgo]

And you cannot even Point me in a Direction how i can solve it myself? I mean its a kinda generic question. Otherwise i cannot expect any Help for all Kind of Penetration Testing questions since i might need it for a university Project ?

[scarlet moth]

ask your professor/TAs

[jolly wraith]

i wish i had pentest assignments at school

[radiant jacinth]

Dumbest rule bruh

[tawdry dove]

Not assisting with homework?

[radiant jacinth]

yes

[twin ridge]

Same

[winged rain]

The rule is to literally protect you. It'll turn out much worse for you if you get slapped with an academic dishonesty for getting help on the internet

[twin ridge]

Some would call said assistance cheating. This rule is simply a precaution against that

[radiant jacinth]

The rule still dum

[sand ginkgo]

Its Like Not even assisting with Homework at this Point. I have to fulfill a full Penetration Test of a system and i could ask ANY Question about Cyber Security in this context at this Moment.

[twin ridge]

Thems the rules, please follow them

[twin ridge]

That's not being assessed per se though

Homework and Exams are assessing your knowledge of a subject, not the internet's

Also if we do their homework for them, then they aren't learning anything

[sand ginkgo]

I totally understand and even greet this Kind of rule in General but IMO the rule doesnt make Sense for this Situation since its a general Question about a pentesting Procedure.
But it seems i cannot expect any Help since it might be for Homework in the end. What Kind of questions are allowed to answer then ?

@twin ridge

[twin ridge]

Questions based on rooms are fine, general questions are alright

[sand ginkgo]

How can i exploit an old OS Like Debian 8.0 where nessus told me "Unix Operating system unsupported Version detection". I tried to Look it up in the exploit DB but cant find it since i dont know for what im supposed to Look for

[twin ridge]

Yeah but the coursework should help there

Exploitdb isn't the only source and that Nessus alert alone isn't super helpful

But they need to learn to dig deeper

[pine pollen]

hello i have a problem with mysql in linux can someone help ?

[tawdry dove]

Is this for THM content?

[pine pollen]

nope. i'm studying sql idk why mysql doesn't work on my linux

[summer verge]

https://www.digitalocean.com/community/tutorials/how-to-install-mysql-on-ubuntu-20-04 this might help

[quartz spire]

the weeknd is studying SQL on a Linux machine not related to THM, interesting

[brisk urchin]

true

[short elk]

what problem?

[brisk urchin]

idk

[brisk urchin]

yo

[summer verge]

tu

[pine pollen]

E: Package 'mysql-server' has no installation candidate

[summer verge]

which distro are you using?

[pine pollen]

i downloaded it from here : https://www.linuxvmimages.com/images/kalilinux-2022/

[summer verge]

https://www.kali.org/tools/mysql-defaults/

[pine pollen]

thanks body

[hoary nymph]

Gave +1 Rep to @summer verge

[summer verge]

anytime 🙂

[radiant jacinth]

Hi

[winged rain]

[tawdry dove]

Yeah, it was rejected the same day

[inland umbra]

what joke am i missing here

[serene trench]

DVWA (Damn Vulnerable Web App) is a web application that intentionally has a lot of vulnerabilities for you to practice with 🙂 https://github.com/digininja/DVWA. Basically the person is reporting vulnerabilities of an application that is designed to be vulnerable 😄

[inland umbra]

ah okay, 😄

[serene trench]

yup...safe to say people were not amused

[quaint basin]

On the contrary, it was absolutely hilarious lmao

That researcher is lucky they reported it under a handle -- I doubt they'd be getting any job offers for a very long time if they'd used their name

None of the other exploits in their repo are valid either 😆

[mighty echo]

this guy must be great fun

[fallow crystal]

hey guys

[stray tundra]

hi!

[south inlet]

What do you require help with, exactly?

[quasi turtle]

thats illegal

[gaunt loom]

i just did skynet and it was a lot of fun, would recommend for beginners 🙂

[quartz spire]

is skynet a THM room? or some other CTF?

[gaunt loom]

it's a thm ctf/room! https://tryhackme.com/room/skynet

[quartz spire]

thanks for the recommendation

[static lily]

does anyone know a way to grab a ip from a link thats then redirected to what the linked looked like originaly?

[odd acorn]

Why

[static lily]

coz i wanna try it out on my self

idk just to learn ig

[odd acorn]

But why that specifically?

[static lily]

wdum? - mask the link?

[odd acorn]

Grabbing an IP address from a link

It’s relatively pointless in actual cyber

[static lily]

idk im new to this lol im just intrested coz it seems cool lol

[odd acorn]

I would steer away from that and learn proper cyber #start-here

[static lily]

ah alr

[static lily]

what would be the best one to do after the beginner one?

[odd acorn]

#general message

[static lily]

cool thanks

[hoary nymph]

Gave +1 Rep to @odd acorn

[static lily]

is it worth using a vm coz i got w11 on my pc so should i use kali on the vm and then run THM on there?

[odd acorn]

Yup

[static lily]

is orcal a good vm software?

[odd acorn]

Yup it’s good, I don’t particularly use it though

[static lily]

which one do you use?

[odd acorn]

VMware

[static lily]

does it cost anything?

its look v confusing icl

[odd acorn]

They have a free version but Oracle VBox is arguably better than VMware free.

VMware free has better performance but is very restricted in terms of features

[static lily]

sounds good ill stick with orcale for now

[radiant jacinth]

how do people design their own like os take for example pwnagotchi or flipper

[quartz spire]

i think YouTube spacehuhn will provide some insights

[frail rapids]

is there an overview of the security implications of python in excel?

[tawdry dove]

It's being run in a locked down Azure instance, not local.

Online O365 only afaik

[radiant jacinth]

marsmellows on a stick over a grill/fire or charcoal?

[quartz spire]

the magic 8 ball says ... 🔥

[radiant jacinth]

🔥

[quartz spire]

🔥

[radiant jacinth]

🔥

[quartz spire]

🚒

[radiant jacinth]

🧑‍🚒

[quartz spire]

🏕️

[radiant jacinth]

🌳 🔥

[quartz spire]

oh no

[radiant jacinth]

👱 ➡️ 👻

[quartz spire]

👻 ➡️ 🤖

[faint coyote]

heyy guys

what do you guys do when yall are bored?

[summer verge]

Only boring people get bored 😂

[radiant jacinth]

ever try reading?

[gaunt loom]

I just did the Bounty Hacker room. I think it's the first room where I've not had to look at any writeups. Hooray!

[warm peak]

Eyyyy, congrats! one step closer to knowledge!!

[radiant jacinth]

Comgrats! Keep up the great work!

[mighty echo]

same-site cookies.

https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions

if the cookie doesn't have the secure attribute set then you could theoretically get it if they were to be using HTTP and not HTTPS

just by intercepting the request to the site

[radiant jacinth]

yeah i just relized that

that would make it to easy then lol

[sacred elk]

site seems to be down

[cinder bobcat]

Indeed it does

[quaint basin]

Not actually true.
The exact scenario up there (redirecting through an attacker controlled server) isn't necessarily how it would be done, but IP grabbing is often a part of reconnaissance in red team ops.
You don't want your C2 infra to be accessible to anyone who isn't operating inside the organisation -- both from a liability perspective, and in terms of opsec (e.g. an employee executing a payload on a personal PC at home, or someone actively trying to hunt you respectively). Restricting it by IP is one of the measures you'd take to block that.

Pointless for pentesting / most things on the blue side though

[odd acorn]

Sorry, yes you’re right. I was tunnel visioned by their proposed scenario

[quaint basin]

All good 🙂

[mortal venture]

Doing some job hunting and I noticed a LOT of jobs want sql experience so. I was wondering if anyone had any reputable or "off the top of my head" sources where I can learn sql. I'm at work and haven't looked myself, just figured I would ask here first because the sources I get here are 10x better than anything I have found myself

[spark sun]

IMO you are better off learning relational algebra than a specific DB engine - it's totally fine to pick an engine (postgres or maria would be my top recommendations) to practice on, but understand what the math is doing when you run a query first.

[twin ridge]

Postgres is probably more popular in enterprise settings

[civic root]

Done!

[vagrant shard]

@wary cradle you there?

got a question about the OSCP you took 👀

[radiant jacinth]

What's your question?

[rare geode]

Looking for someone to chill with, I’m 17 from the uk and just started tryhackme, am going to be active 6+ hours a day and am a chill person to hang around with

[odd acorn]

ayoo, hmu

[dense fiber]

how i got act of kindness badge

[sudden lark]

Hello !!! I have a question about networking anyone can you explain that concept?

[south inlet]

Just ask your question what you don't know, or need to know.

[fiery wolf]

Hello everyone! Please help me to decrypt the password from the handshake file captured of wifi ?

[south inlet]

Which W-Fi ?

[fiery wolf]

Worldlink

[south inlet]

I mean, is it your own?

[fiery wolf]

yes

[rugged frigate]

[south inlet]

Do you own the router, or rent it from your ISP?

[fiery wolf]

No, it's my own

Would you tell me how to do so ?

[mighty echo]

look into the wifi cracking room on tryhackme

[fiery wolf]

Thanks boss..

[hoary nymph]

Gave +1 Rep to @mighty echo

[dusk laurel]

Hi

[gaunt loom]

i completed tomghost today (with no writeup hehe) and achieved level 9 🙂 it's a great room!

[gilded minnow]

hai iam stuck with nmap NetSecMod Room 06 nmap Reports Q1 Check the attached Nmap logs. How many systems are listening on the HTTPS port? scp not working time out and try ssh that also how can i solve that

[long timber]

#room-hints

[soft pier]

@twin ridge @odd acorn

[civic root]

Done!

[soft pier]

thanks

[grand citrus]

I have no study group for you, but you can ask about a lot of stuff on here, either in #room-help / #room-hints or in #infosec-general .

[hoary nymph]

Gave +1 Rep to @grand citrus

[steel smelt]

hey, I hope you are all well. I need assistance with my virtual machine, it appears to have a bug.

[tawdry dove]

If you have a question, just ask

[steel smelt]

my Linux Machine has a bug. I need assistance with removing it so I can proceed with the training.

[tawdry dove]

This isn't enough information. If you want assistance you're going to need to expand. Start by verifying so you can post screenshots if necessary.

!docs verify

[deft fossil]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[tawdry dove]

Follow the above instructions to verify

[rich mantle]

my life has bugs I'd like to remove... 🙂

[odd acorn]

@rare geode That is NOT at all appropriate here. If you say anything like that again, you will be removed.

[long spear]

Try debugging tools, like self-development

[stable creek]

Hey guys

I'm having some troubles with open vpn and Kali Linux

Could anyone help?

[azure wasp]

Go and explain your issue in #site-support, you should also verify so you can send screenshots

!docs verify

[deft fossil]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[steel smelt]

hey, this is what I was referring to yestarday, It has a bug

[azure wasp]

What bug? Seems to be working how it should to me

If you are referring to the ls results being different that is on purpose. The stuff on the left is just an example and on the right is what you interact with for the practical part of the room

[halcyon ether]

Hey guys
can you help me in tryhackme lab "blue" error
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=-=-=-=-=-=-=-=-=-=Fail-=-=-=-=-=-=-=-=-=-=-=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==

and another error is
in "vulnversity" labs when we run the uploaded file
WARNING: Failed to daemonise. This is quite common and not fatal. Connection refused (111)

[rugged frigate]

make sure to listen on the port specified in the reverseshell.

[south inlet]

Did you set lhost?

[halcyon ether]

yes

[slim shell]

Make sure your lhost is your THM IP and not your VPN IP; if you are using vpn and not the attack box. I had to correct this on a box and was able to get it to work.

[river ocean]

@odd acorn ❤️

[formal gazelle]

!update

[neon hull]

Does anyone here know about temux and setting up Kali/Vnc cause im stuck

[junior ermine]

I'm familiar with tmux. what's your question?

[radiant jacinth]

tmux is kinda hard to learn for me

[neon hull]

So im trying to connect to nethunter kex, but it says "unable to contact setting server, failed to executr dbus-launch"

@junior ermine

[neon hull]

basically i cant get kali to set up a server to connect to

[junior ermine]

I’ve never used kex, but if you have some docs and can point me to where it’s failing I might be able to help.

[neon hull]

will do

[stray pilot]

You meant termux here dontcha?

[neon hull]

Yeah

[junior ermine]

Well that makes more sense. While reading the docs on kex, I couldn't figure out what tmux had to do with it.

[steel smelt]

it doesn't show the list of things in the above folders, it doesn't show

[steel smelt]

for example

[azure wasp]

That is not a bug, you'll see that question 2 in the task asks "Which directory contains a file?", so there is only supposed to be one directory with a file and others are intended to be empty

[steel smelt]

all the folders are empty

[azure wasp]

Oh? can you send a screenshot of that?

[south inlet]

The screenshots are examples.

[steel smelt]

I can't open the Linux Machine as I am not a subscribed user, so I have limited time.

but i did try opening each folder, i did not see anything or file in any folder. which means i couldn't perform any other command like cat, cd, ls etc

[azure wasp]

Well without screenshots it is hard to tell what went wrong, but there should be a file a file present for sure. You're saying you tried to cd into all four directories and then you ran ls within each one?

[south inlet]

Are you doing Linux fundamental 1?

Also, should move this to #room-help

[azure wasp]

oh yeah I forgot we were in the worng chanel, thanks

[steel smelt]

Literally each one of them.

[radiant jacinth]

https://twitter.com/helloNikoheart/status/1698971499552453020

Nikoheart (@helloNikoheart)

⚠️ DISCORD PSA

Be extremely careful when clicking on links in Discord from now on.

The Markdown Syntax allows you to hide what links are at first glance. The only way you'd be able to tell the difference is by hovering over the link and seeing if both URLs match.

Likes

28296

Retweets

14181

Twitter · Sep 5, 2023, 8:09 AM

[rugged frigate]

bit of an oversight there discord

[gaunt loom]

there's even a way to hide embeds 😅

[radiant jacinth]

ج ح خ د

[rugged frigate]

the usual way with less and greater than sign doesn't really work for me.

[odd acorn]

Discord warn you before opening a link.

example.com

[radiant jacinth]

I'm glad lmao

[silk tusk]

How do I fix (no wireless extensions) on kalilinux ?

Also can’t find Wi-Fi on my kalilinux

[south inlet]

Right click the network part

[silk tusk]

I did that 😞
Wireless isn’t part

[summer verge]

are you running kali on a VM?

[silk tusk]

Yes

[summer verge]

if you're running on a VM kali thinks that wireless internet is regular eth

@silk tusk try this https://nooblinux.com/connecting-a-wireless-adapter-to-kali-linux-virtual-machine/

[silk tusk]

Okay will give it a try

[shut rivet]

Hey folks is there a good list of boxes somewhere that all collectivly build on each other. Starting from Zero knowledge to somewhat advanced?

[ashen edge]

How long would you recommend trying an attack vector before deciding to try something else when you’re doing a CTF? I find I spend way too much time on dead ends.

[shut rivet]

for me once I feel stuck i move to something else

[ashen edge]

I guess I just can’t determine if I’m stuck or if I’m doing something wrong/missing something 😅😂

[steep parrot]

hi

[errant pumice]

hello

[vital vortex]

hello

guy's

[warm shell]

hy guys

anyone help me solve Risk Management
task 10

[azure wasp]

Go to #1146822130831478919 and explain your issue

[agile girder]

why everyone is quiet here

[quasi turtle]

Sssssh

[frail rapids]

are there tools to identify an EDR/antivirus on a device as attacker?

i.e. searching signatures like process names, or dropping false flags to see how the EDR responds

[soft pier]

not sure if we are allowed to discuss that in here instead of #exploit-and-mal-studies

[rose axle]

No access :<

[grand citrus]

No access :< ^2

[copper reef]

hi i have problem with openvpn anyone can hellp me??

[tawdry dove]

#site-support

[regal void]

Hello 👋🏻, I'm at last , that I run the doubletroube mechine in my Kali using virtual box , i configured the exploit and payload by in images . But won't get the reverse shell it shows failed to daemonise . I'm stuck here. Can anyone help me to solve this issue and demonstrate it .

[twin ridge]

Did you set the ip to yours rather than exactly like the images?

[regal void]

Yes @twin ridge , I

I change the ip

And port of mine

[twin ridge]

That happens sometimes, did you try again?

[south inlet]

Ghost ping?

[kindred barn]

👀

[twin ridge]

Looks like

[frail rapids]

what's the cheapest and most secure way to store confidential business data?

[soft pier]

offline encrypted hard drives that are only connected when you need to read them

encrypted as in full disk encryption at the least and multiple layers of encryption at best

[frail rapids]

that requires making backups though

so I was thinking storing an encrypted folder in the cloud and decrypting it locally with a security key when necessary

[sage sierra]

ok but what makes business data something that a hacker would want anyways lol

[frail rapids]

since stealing encrypted data is useless

[soft pier]

then you have a continues on going cost fo the cloud service

[frail rapids]

an practical example is blueprints for ASML machines

[soft pier]

a hdd hosted at your own location is cheaper

[frail rapids]

fair enough

[sage sierra]

true

[soft pier]

but if you need easy access a locally hosted hdd in a server using smb and encrypted files on said smb share would work neatly

[frail rapids]

that would tickle my spidey senses

oh wait nvm encrypted files could work

[soft pier]

think you can setup full disk encryption on that to for if the server is ever off and therefor offline

[frail rapids]

I'd be more worried about ransomware deploying on the network when the nas is online

and the attackers yoinking credentials to it when doing recon in the network

[soft pier]

yeah if those are some major worries offline hdd:s that are only connected for when they are needed will be better

[frail rapids]

would be neat if there was FIDO-based auth for SMB

so ransomware would be near-impossible to roll out on it as it would require an end user to press the hardware button

[soft pier]

hmmm

good question if microsoft has implemented any smart cards or hardware keys for authentication for these kinda stuff

[autumn trout]

thoughts? i am looking for a cheap gaming pc. i have a gtx 2070 i plan to use 🙂

[short elk]

define secure?

[serene trench]

yeah looks pretty good. I'm not too familiar with the AMD line but I think would defo consider the 5500 budget friendly. IMHO 16gb RAM is the minimum these days

maybe wanna get an aftermarket cooler but suppose you can just see how it goes. Budget 'n all 😄

[fathom panther]

How much are you paying for it

[autumn trout]

my daily driver laptop has 2gb of RAM lmao 😂

thank youuu

[frail rapids]

preventing the typical threats to small business

like someone invading their network without them knowing and stealing data

[short elk]

so only business-sensitive data

some cloud solution will be best, depends on the type of data if you’re wanting more thorough answers though

[primal steppe]

pre-supposing your crypto is good

[formal wing]

was just curious if there were any current promo codes going on! @ me if anyone has an answer

[fathom panther]

If its business-sensitive data, an encrypted S3 bucket works already

But still, the cheapest solution is user awareness, MFA, Password Policy, etc.; those are all free to implement

For small businesses, its unlikely they’d have anything running locally like websites (except maybe AD). Those would most likely be hosted on a provider, from there you’d already have segregation of networks. The immediate threats I can think of are either physical attacks, insider threats, and segregation of networks (e.g., guest network and internal network together)

[hasty atlas]

I'm curious to hear people's thoughts on impostor syndrome

I do not work in or aspire to work in cybersecurity, as many on this server do. I have a job writing code in C# to test other code

but I feel impostor syndrome is rampant throughout the world of working in tech generally

[fathom panther]

Yep, I deal with it in some cases

Especially when I fail on something I know I shouldn’t be failing on

[hasty atlas]

have you found anything that helps with it?

[fathom panther]

The best way I deal with it is I say to myself that its normal to have knowledge gaps

[fathom panther]

Identifying where I am weak at, and generally being confident in what I know and what I don’t know

[hasty atlas]

nice. that does sound useful

[burnt night]

I'd be concerned the case won't put enough air through and the power supply isn't likely up to RTX 2070 load

[fathom panther]

I’d say you can also get a better motherboard, A520 series is the lowest of the motherboard tiers and won’t give you as much power as you’d need and might generate more heat depending on the load

[autumn trout]

good points! i actually have a very old gaming pc (i7, 2070) i use as a home lab. maybe it’d be better if i turn it into a mini pc and salvage the parts

[autumn trout]

I have things using port 8080:

netstat -ano | grep 8080
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      off (0.00/0/0)
tcp        0      0 127.0.0.1:8080          127.0.0.1:40186         TIME_WAIT   timewait (35.73/0/0)
tcp        0      0 127.0.0.1:8080          127.0.0.1:37358         TIME_WAIT   timewait (5.72/0/0)
tcp        0      0 127.0.0.1:8080          127.0.0.1:58148         TIME_WAIT   timewait (50.72/0/0)
tcp        0      0 127.0.0.1:8080          127.0.0.1:33554         TIME_WAIT   timewait (20.73/0/0)

But I can't find any process which uses port 8080:

$ lsof -i:8080
<nothing>

This is preventing me from deploying a docker app which exposes to 8080. How do I figure out what's using 8080 and kill it? 🤔 Restarts do not help 😦

[short elk]

try sudo ss -tlpn, shows the process using it

[frail rapids]

does anyone know a tool to crack an ssh privkey password when the start and end of it are known?

forgot the password for my vm management ssh key and apparently never wrote it down

[rugged frigate]

I think there are ways to recover a partially lost key. Don't know the terminology of it.

[radiant jacinth]

https://twitter.com/nicksortor/status/1703862848127201493

Nick Sortor (@nicksortor)

🚨 #BREAKING: The US Marine Corps has just issued a two-day "stand-down" order for "all aviation units" both "inside and outside" of the U.S. following the disappearance of a F-35 warplane — ABC

Their reason is currently unknown.

Is it possible that our most advanced aircraft…

Likes

5151

Retweets

2159

Twitter · Sep 18, 2023, 8:05 PM

[tacit sapphire]

It's kind of insane how often multi million dollar aircraft just vanaish so often.

[radiant jacinth]

maybe it got hacked

[tacit sapphire]

lol. imagine

[radiant jacinth]

I am

[tawdry dove]

What a dumb tweet

There was an issue/mishap that forced the pilot to eject over South Carolina. The plane continued flying and is presumed to be in a body of water, narrowed it to two lakes, they're still searching. The safety standown is a common thing applied when the cause of the mishap is still undetermined.

So they want the metrics from the aircraft to determine if it's going to be a fleet wide issue or a singular one

[radiant jacinth]

well now it's boring

[primal steppe]

They found it, I do have some questions though

[random spoke]

hello

I from China

[azure wasp]

Hello

[gaunt loom]

hello

[mortal venture]

Anyone take LPI Linux Essensials? How is it? I will be taking it soon for school and wanna get an idea of what I will be looking at.

[alpine rover]

Its a great course!

[cobalt trail]

o7 ready to clear at least 5 rooms today

[radiant jacinth]

i have completed 22 in 2 hours today

[cobalt trail]

i am slow 😦

[cobalt trail]

my excuse is adhd what about you?

[severe pasture]

Not bad dude, that's a pretty solid effort

[cobalt trail]

got stuck on my 3rd room Mnemonic but now i am stuck learning how to use emoji's in hashcat... ADHD takes me down all the roads all at once.

[severe pasture]

Ahh yeah, you can caught by honeypots when hacking. That's nothing new but with time you'll be able to spot them

[autumn trout]

My docker service is running. docker complains that Cannot connect to the Docker daemon at unix:///run/user/1000/docker.sock. Is the docker daemon running?.

Before I restarted the service, there were some in-app warnings about "out of memory".

I cannot seem to restart docker or use it due to the daemon error.

Any ideas? I am sure I need to do something to expand storage or something but can't work it out 🤔

[spark sun]

that shouldn't be a storage problem

are you running the docker rootless or the actual root context docker daemon?

[autumn trout]

i am not sure, it definitely is not running with root though

it was working fine until a few days ago when it "randomly" stopped, so something changed to break it 😛

[spark sun]

if you are running it as a daemon, it expects root

would recommend switching orchestrators to podman with quadlet for systemd unit files

so that you can still run rootless but have it available as a scheduled service

[autumn trout]

ok i tried to install podman:

E: You don't have enough free space in /var/cache/apt/archives/.

I think it's the same error, my docker apps were reporting low / no memory too

[spark sun]

storage and memory are not the same

check memfree and memavailable in /proc/meminfo

[autumn trout]

/dev/mapper/ubuntu--vg-ubuntu--lv  226G  216G     0 100% /

This looks suspicious

[spark sun]

vs df -h and du -h

[autumn trout]

100% use 😄

[spark sun]

if it's complaining about lack of memory, i'd expect that's a quota memory issue

if it's saying out of storage, that's an entirely different thing

[autumn trout]

would be storage, i am pretty sure this will solve it:

https://askubuntu.com/a/1117523

I have seen this before in the past 😄

[spark sun]

right, but again... resizing LVM is unrelated to memory. Expanding the LVM partitions with pv, lg and lv doesn't do anything to solve memory quota in your orchestrator

unless this is a regional thing where memory doesn't mean volatile?

[autumn trout]

sorry, storage

[formal wing]

Anyone willing to donate a promo code or premium voucher 🤝 hmu❤️

[twin ridge]

there are giveaways help from time to time

[fossil palm]

yeah and theres also the fact that im looking into gov jobs but its rather limited given my gpa my first year in college wasnt as good so I decided to work on a trading company instead to help with my 'lack of experience' professionally

[high horizon]

suppp.......... i play a lot of rooms in tryhackme and i stuck on the vip rooms anyone who wants to give me premium voucher to support me i would really appreaciate it

[inland bobcat]

Any other Mocca drinkers?

[tribal tundra]

more a latte guy

[knotty aspen]

I love them all. Mocha for a cold day, latte for the morning.

[lunar laurel]

Yesssss mochas

[gaunt loom]

did the Res room today, it was a challenge but i feel like i learned better recon techniques 👍

[quartz spire]

for those into cryptography

ROT13

[candid tartan]

at last put text 🙂 lazy to retype lol

[quartz spire]

haha ok

hfr fgebat rapelcgvba znel, Dhrra bs fpbgynaq

[candid tartan]

will do my queen

[swift oak]

use strong encryption
mary, Queen of scotland

And if you're into cryptography or more likely cryptanalyse, I think you know that mary got killed because of a code based on on mono-alphabetic substution which is based on cesar

And because of a traiter

[tulip sage]

i will hack you with html

im joking

its not possible

[radiant jacinth]

u mirin' bro

[fathom panther]

@twin ridge

[twin ridge]

Yeah I saw that, it's a bad joke

[tired prairie]

Is https://tryhackme.com/room/netsecchallenge seen as a "CTF room"? since it has the charts and all...?

[mighty echo]

yes, it is a challenge room

[tired prairie]

Then I have completed my first challenge room 🥳

[carmine quartz]

this was hilarious!

[modern stone]

New playlist for hacking (it really does feel like this sometimes) 😂

[unique bolt]

Grind or die?? Nuh uh

Take frequent breaks and don't die 👍

[tired prairie]

Dying is the biggest productivity killer

[unique bolt]

Oh yeah

[tired prairie]

Is there anyone with PNPT certificate? :)

[little shore]

You could try lurking in the TCM Security discord if you need info on PNPT.

[small void]

I'm gonna die peacefully

[tardy scaffold]

Expect few everyone is just doing to die peacefully

[vocal ridge]

so uhh..

I am completely unable to access BIOS lol. Replaced the CMOS battery. Tried to reboot to UEFI (don't have uefi)

It doesn't have UEFI. Pretty old motherboard.

I've never seen this happen before.

I've never not been able to access BIOS and not have the chip be broken and Windows still boots lmao

can't open boot menu... nadda

fiddled with connections... re seated everything..

i guess it's time...

[pliant umbra]

hey i need help vpn is not connected

[fathom panther]

Try the vpn script

!vpnscript

[deft fossil]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[pliant umbra]

not working

[vocal ridge]

i forget, can't you generate a new one?

[fathom panther]

#site-support

[gusty walrus]

It's not possible to help you when "Not connected" and "not working" is your best description of your issue.
Go through this room again:
https://tryhackme.com/room/openvpn

[gaunt loom]

completed nax today, was really exhausting to get the ||npiet|| to work

[trail cove]

If you have questions about a cert, just ask. We've talked about it lots in #cyber-and-careers and yes, as @little shore suggests, the TCM Discord

[tired prairie]

It's solved :)

[summer lily]

B

[polar shard]

e

[radiant jacinth]

https://www.pcworld.com/article/2044341/reading-a-skype-message-could-reveal-your-location-to-hackers.html

anyone know if this got patched?'

[rigid crown]

Have anyone took ejptv2 before?

[desert idol]

Who even uses Skype anymore... (Except for corporations that is...)

[radiant jacinth]

Ive been informed that ms teams is basically skype reskinned

don';t know if this is true it probably would have said Ms Teams too so I guess it's not true

[mortal venture]

Has anyone done overthewire? I got stuck on bandit20 and I looked up a tutorial and i am not fully understanding what is going on. I do for the most part but not 100%. I included a screenshot of my terminal and a link to the tutorial I followed, and the level https://medium.com/secttp/overthewire-bandit-level-20-a1af9a042c56 | https://overthewire.org/wargames/bandit/bandit21.html

[mortal venture]

Please ping / DM me with any help and thank you in advanced 🙂

[near sparrow]

I did over the wire years ago

there’s a guide out there if u can’t figure it out

[burnt night]

Skype for business was a product a while ago, and completely different from skype aside from branding

[stray drift]

What if God was the first magician, and everyone treated him like a prophet because no one understood what he was doing. So exagerated stories were passed along his lifetime and suddenly he became more of a God figure than a prophet. Sooner or later the Bible started reflecting all these God like stories and Christianity started becoming a thing.

but because it was based in truth to begin with, people just naturally believed that everything was as the exaggerated stories claimed so no one really questioned it.

Just thoughts I ponder occasionally.

[unique bolt]

Read dune it's good and digs into the whole messiah concept in a fun way

i mean it digs into quite a bit more, but you might find it interesting

[twin ridge]

The last couple books are not easy reads though

[unique bolt]

Still haven't read the last 2 but omg emperor of dune is such a good read. Probably my favourite out of the first four I've read

[spark sun]

God Emporer of Dune was where the series started to go off the rails, but the next book is really where things got weird

[smoky mortar]

Hahaha. I recommend reading the fairly decent exposition and choice of views in The God of Metaphysics, by T.L.S. Sprigge. 🙂

[oak lynx]

In my mind, God Emperor is the last book in the series. It is totally divergent in a lot of ways but is like a spiritual successor to the OG three. I wish it would have ended there lol

[winged rain]

This is a very specific view through the lens of Christianity. The concept of God is different in other religions.

Actually sorry, the concept is the same but God's priorities are different

[unique bolt]

I'll have to get to it at some point, I've been meaning to reread the whole series

[oak lynx]

totally worth it. I think there are a lot of cool payoffs that happen in God Emperor that sort of justify a lot of the previous books world building.

[unique bolt]

Yeah i've read god emperor of dune, that one's my favourite i reckon

I haven't read books 5 and 6 though

[oak lynx]

ah gotcha, yeah 5 and 6 were not particularly memorable to me. I might also have to go back in for a reread sometime

Need to look at the Stellaris DLC. Would like to do a Golden Path faction with a giant worm as the leader lol

[twin ridge]

Wasn't chapterhouse the last entry...anyways

My copies are back in Canada: (

[oak lynx]

yep, just meant I pretend the last two don't exist. Its a pretty perfect story with God Emperor being last imo

[twin ridge]

¯_(ツ)_/¯

[meager drift]

(╯°□°)╯︵ ┻━┻

uwu ¯_(ツ)_/¯

[twin ridge]

┬─┬ノ(ಠ_ಠノ)

[south inlet]

Don't flip the table!

[twin ridge]

needs a /tableset

[sonic crane]

.Hey guys I have a question. I want to be a red teamer. I'm doing Jnr penetration tester path. But I'm having trouble grasping the full concept. So can I do security engineer and coc path first practice it a little then come back to penetration path.What I'm trying to ask is that can I become a red teamer later by first learning blue team

[meager drift]

😠

[twin ridge]

yes.

[mighty echo]

(╯°□°)╯︵ ┻━┻

[soft pier]

[twin ridge]

put that back

[radiant jacinth]

Why why why

[mighty echo]

┬─┬ノ( º _ ºノ)

[fringe coral]

Is there A list of machines in try hack me from easiest to the hardest

[soft pier]

nope but if you wanna make one feel free to do so

[hard bay]

Since they cover a wide variety of topics, difficulty is probably more based around which ones you're more or less comfortable with

I had a much easier time with retro than a recent software room I forgot the name of despite retro being labeled hard

[odd acorn]

Difficulty is subjective 💃

[twin ridge]

yeah depends on what you're good at

[solid crystal]

i need some help in king of the hill h1 easy when you type nano backup.sh i cant save with new edit

[south inlet]

You need to to use sudo

[twin ridge]

Probably shouldn't be giving hints for a koth

[south inlet]

See, I thought this also,

But it's not really strictly koth.

There is some files that won't save unless you sudo.

[twin ridge]

¯_(ツ)_/¯

[odd acorn]

No official rules against it, and god knows there are a million write ups out there.

We need 3-4 boxes per machine that can deploy so that there are ‘random’ footholds each time

[twin ridge]

Cause they're owned by root generally

[twin ridge]

Fair

[polar plank]

🗣️WAIT IS THIS QUITE CONVERSATION!!!💥💥💯💥💥💯💯💥💥💥💯💯💥💥💥💥

[soft pier]

shadows poor ears

[rugged frigate]

quiet!

[mortal venture]

quite the conversation indeed

[quaint basin]

What, Fortune wasn't enough for ya?

I do actually have plans here for Chameleon -- was going to be pretty much exactly that. A box with about 15-20 Docker images, each containing their own autogens. A bunch of them would be picked at random at boot and built.

I decided against building the thing when it became clear that KoTH was being largely abandoned. No point in building a box that wouldn't get added 🤷‍♂️

[twin ridge]

Sad

Interesting idea though

[stray tundra]

thats kind of sad, was hoping to be able to participate one day

[soft pier]

sounds like that would be an amazing normal ctf room on tryhackme too... but yeah sad it got canceled

just imagine people trying to do writeups when the room is random

[twin ridge]

eventually you'd get them all

[soft pier]

true but that did not seem to be the case with red team capstone

[vernal veldt]

Hello .someone's on the line

1

[south inlet]

On the line, or on-line

[cobalt trail]

https://tenor.com/view/loser-online-is-the-homestuck-gif-24872474

How y'all doing?

[dire skiff]

Doing good doing good, currently still waking up and in dire need of a coffee lol. How's you?

[stray tundra]

calling it a night actually

[plucky crow]

good good.. gm

[cobalt trail]

I made Cafe Bustello Coffee... i dont think i can ever go back to any other brand...

[crisp yarrow]

Hi everyone, I have a Linux question and need a bit help. How would I extract all files (photos - .jpg) from one folder and hundreds subfolders and move/copy them in one new folder? I would like to do that from terminal in one command. Another problem is that each of that .jpg photo has another file with .jpg.json extension but I want only .jpg.
Thank you

[crystal compass]

@crisp yarrow If you're familiar with piping, I would starting by taking a look at the find and xargs manual pages. The one liner should be fairly straight forward with these.

Actually, find's -exec operand makes xargs unnecessary.

[crisp yarrow]

I'm going trough man pages now to see if I can figure it out

[sonic moss]

Do you want to keep the directory structure?

[crisp yarrow]

They are all mixed anyway so, no.

[radiant jacinth]

Hi

[sonic moss]

The command to find all the JPG files: find DIRECTORY -name "*.jpg", and it allows you to execute something with -exec. You could do something like `find DIRECTORY -name "*.jpg" -exec mv "{}" "DIRECTORY_OUT/$(basename {})" \;

[crisp yarrow]

I used this find . -type f -name "*.jpg" and get the result. how should I move that result into new directory? Using pipe?

[sonic moss]

Piping is to exchange content, I understand that you only want to move the files

[crisp yarrow]

yes

[sonic moss]

So use mv in combination with find

[crisp yarrow]

find . -type f -name "*.jpg" mv /new_directory
like this?

[sonic moss]

No, like I indicated:
find DIRECTORY -name "*.jpg" -exec mv "{}" "DIRECTORY_OUT/$(basename {})" \\; (and I realized I need to escape the backslash. We can make it simpler actually:
find DIRECTORY -name "*.jpg" -exec mv "{}" DIRECTORY_OUT \\;

mkdir jpg_files
find JPG_DIR -exec mv "{}" jpg_files \\;

That should work, but tell me if you have issues

[copper tree]

There is already so many random shit going on it would probably make people paranoid and crazy

[odd acorn]

It would make it more competitive ✨

There will be no more remembering how to get onto each box and getting root within a minute

[stable raven]

Please am having a problem here, Whenever I try to use my root Terminal to connect to an IP host, after I enter the IP, it asks me if I'm sure I want to continue connecting (yes/no). I type "yes" and then it asks me to enter a password. However, I notice that I am always unable to input my password to connect to the server IP.

[fathom panther]

It's not echoed back

Continue typing and then just hit enter

[stable raven]

i try that it not allowing me pressing at all i don't move forward after i enter IP Address

[fathom panther]

#room-help

[sweet crest]

then you might have to use something like hydra. to find the correct password to use.

[finite elm]

Hello guys, would like to enter Security based role, right now working as Sys Admin. Doing rooms in THM, however feel like I need someone experienced on my side, so writing with question maybe someone wants to be a mentor, or enjoys helping others like a True Cyber Dad, please DM 🙂

[deep reef]

GhatGPT is a great mentor always available for you (I am serious). Anything you don't get just type: Explain me "this concept" or "this piece of code" and it will do it very efficiently in a step by step fashion. https://chat.openai.com/auth/login

[finite elm]

yeah, using that also, but sometimes encountered false info, although not related to cyber security

[odd acorn]

Don’t become reliant on ChatGPT

[cloud scroll]

Hi guys

[cobalt trail]

You can ask it to give you better google queries that is about it... until chatgpt is able to google/bing and then fact check its own output we will not give it any more than 10% trust.

[odd acorn]

ChatGPT can use bing. But do you know who else can? You.
You're in information security, what makes you a professional is your ability to research and find information.

[cobalt trail]

That is what i just said... we can use ChatGPT to get out of your tunnel vision approach to broaden your mind and see it from another perspective...

[odd acorn]

Wut

[odd acorn]

Where sorry?

[cobalt trail]

I am not sure how to reformulate it in easier terms... so i'll use ChatGPT to express myself better:

You can leverage ChatGPT to enhance your brainstorming by seeking improved Google queries, but it's important to maintain skepticism, as ChatGPT's capacity to fact-check its own output is limited; however, ChatGPT can help you break out of tunnel vision and view problems from alternative perspectives.

[deep reef]

You can use ChatGPT for a lot more than that to be fair. But for what I mentioned in this specific case, is that if someone have questions and can't find answers while googling or binging or w/e, ChatGPT is great at breaking complex things down step by step.

For example, you can copy and paste a complex bash command with multiple pipe operators, and will break it down in 10 secs step by step, and even give you extra info of when it is usually used and why is it good or bad.

[mighty echo]

It cant analyse things (like bash commands) in real time....its spitting out information based on training data from <2021

[deep reef]

Searching for 10 commands in a row using google and try to understand what each one does separately would take someone a lot more time, assuming that he found relevant answers for each one with simple enough explanations.

[cobalt trail]

I understand how it can break down code / commands and give you a brief description of their function... but being lazy is bad especially when it comes to this stuff.. you can not just blindly trust GPT to give you accurate information be it a brief description or else.

[deep reef]

I don't trust blindly anyone, even a "mentor" or a "professor", so that applies to anything and everyone. Also, it is not a matter of laziness, but of time efficiency and clarity of explanation for a specific case.

[deep reef]

It can analyze bash commands in an excellent fashion, and I am using it all the time when I am learning something new. Bash commands (and most things) hasn't changed dramatically since 2021. In addition, there are alternatives like Bing AI that can do the same things that are of today, so feel free to use that if you are querying something that has changed so much since 2021.

[cobalt trail]

It most definetaly can analyze but not run any commands. It's like asking your professor "what does this string do: <string>" and professor just tells you what it does and what it may be used for that is it... It's like asking ChatGPT what can i do with a spoon? You can dig a hole, eat food, scoop ice cream, and so on.... Things you normally wouldn't think of personally unless ofcourse you have 130+ IQ

[mighty echo]

That's what I meant by "analyse in real time"....the difference between ChatGPT and a professor, is a professor has the academic experience to back them up, chatgpt is just a large language model that produces a lot of junk. As Jabba said, you shouldn't rely on it

Sure, it might seem helpful in some cases but you will always be better of doing your own research

[deep reef]

Well, it's internet.

Google search can produce a lot of junk, but I don't see anyone saying "don't use google".

I remember when I was studying on another domain, Wikipedia was "forbidden", although it was, and still is, a great place to start learning/searching for something unknown to you.

And to be honest, I have met a lot of professors that produced a lot of "junk" and outdated knowledge due to their narrow perspective or personal beliefs.

[mighty echo]

Googles just a search engine, it'll give you sources based on your query - sure, there is miss-information on the internet. However, unlike ChatGPT (which remember, is trained on this false information), it won't confidently bullshit to you from these sources. You'll be able to handpick the sources you use yourself, and you'll have a wide variety to choose from. Yes, professors can also make mistakes but that is nowhere as near as much as what chatgpt can give

[simple raft]

guyz, how do I start with??

[tawdry dove]

#start-here

[polar plank]

🗣️OMG IT IS QUITE CONVERSATION🐵🙈🤫🤫

[verbal leaf]

FR

[twin ridge]

shhhh

[sweet crest]

https://tenor.com/view/meme-meeting-hello-wazzup-whats-up-gif-15305051

[scarlet jacinth]

Hi Experts, would you plz suggest me about wireless VAPT test on vmware Lab?

[novel adder]

Hi! Any useful resources/videos to learn Android development in Java?

[lunar laurel]

🤣

[pseudo lake]

1

[winged rain]

2

[twin ridge]

3

[mighty echo]

2

[south inlet]

1

[quaint basin]

0

[desert idol]

-1

[spark sun]

4,294,967,294

[sweet crest]

112358132134

[soft pier]

2.718281828

[winged rain]

NaN

[south inlet]

π

[sweet crest]

3.1415926535

[rugged frigate]

2.4142135623

[mighty echo]

42

[soft pier]

69

[candid tartan]

localhost

[opal sedge]

E.

[loud holly]

Why must I stare at php code and not understand it

[finite elm]

because we are here for suffering

[polar river]

that is the rule of life

Look at code and pretend to understand it

[loud holly]

Only took a couple hours but I got it lmao

[radiant jacinth]

hey i need to complete a chat bot python so any one here can help me

Shh it’s quiet

[spare grail]

Hello guys, I have been trying to decode this encoded text 5c6a31c7e14571ff96644900bceaf219 but I have not had any luck, could someone please help me.

[south inlet]

Where did you get this from?

[frail rapids]

Isn't that a hash? 😂

[scenic burrow]

true

[twin ridge]

lets avoid helping with questonable requests until we can verify that it's ok

[little phoenix]

hello guys , i have one question , imagine that i have a System and he shall prevent the automatic execution of any software resident on external storage devices or media attached to the System.

what should i do to resolve this probleme ?

[twin ridge]

eh? sounds like decent security practices 🙂

[little phoenix]

like if you put a usb key , the systeme will not run software that s reside inside

[twin ridge]

yeah, a lot of places do that, especially on corpo laptops, why are you trying to bypass this?

[little phoenix]

i try to find the conf and understand how i can secure

[twin ridge]

in Windows, there's a group policy defined by the domain admin

[little phoenix]

i search it in oracle

[twin ridge]

o.O

[thick barn]

hello good ppl, what in your opinion would be enough to start working in cyber? I'm around 70% done on portswigger and I'm going to complete all red team paths on tryhackme + some cfts - will it be enough to get employed as a junior pentester somewhere? or what do i need to do more? also if I would suceed a bugbounty does it count for applying aswell?

[radiant jacinth]

Shh it’s quiet

[trail cove]

Those are all good things to understand. Bug bounty report submissions and participation on somewhere like HackerOne or Bugcrowd where your profile can earn reputation and make you eligible for more challenging bounties can help. Winning CTF competitions or being ranked high up can really help. Competing can contribute too. You should also keep in mind that CTFs aren't the same as pentesting. The goal of a pentest isn't just to get to root on all the targets. But definitely learn on PicoCTF

THM paths and certificates can be used to demonstrate that you are learning but aren't given much consideration in job hunts. All of the things you mentioned do add up together to give a better profile of you as a hacker though so keep up the good work.

You should consider certifications on top of all of that as a lot of hiring orgs really want you to have the OSCP but there are better and cheaper certs that don't have the same recognition yet, like HTB CPTS and TCM PNPT, ZeroPoint's CRTO 1 & 2, Altered Security's CRTP, CRTE & CRTM and a few others.

Check out this video and this article for an interesting discussion on such things
https://www.youtube.com/watch?v=-5s2R0Mldgw
https://medium.com/@0xP/why-htbs-cpts-exam-will-become-the-standard-for-modern-day-penetration-testers-34668fde209f

[thick barn]

ty sir, gonna check it right away

[hoary nymph]

Gave +1 Rep to @trail cove

[drifting grail]

I want to give this CPTS exam what to do?

[drifting grail]

Thank you 👍

[hoary nymph]

Gave +1 Rep to @trail cove

[mortal venture]

My roommate frequently installs mods for games, and to keep them from getting flagged he disabled windows defender. Recently my pfsense blocked a sketchy game so he hardlined into the modem. How can I knock some common sense into this guy man

His excuse is turning on windows defender for 2 minutes, doing a quick scan and going "see nothing wrong".

[tawdry dove]

As long as he's not putting your devices at risk, leave him be. He's not your responsibility

[mortal venture]

Yeah but he messed up my pfsense and now I have to reinstall it, as the issue is something I don't know how to fix. I dont even know what he did lol

[tawdry dove]

How did he mess it up? Does he have a login?

[mortal venture]

No he just moved cords around, plugged and unplugged things. My best guess is my pfsense didn't like being unplugged and something went wrong

[tawdry dove]

I'm going to bet there was an issue with the config and that this is just pure coincidence. However, set ground rules on what he is and isn't allowed to touch (as long as it's 100% yours). Other than that, leave him be. Not really your place to tut tut at him

[twin ridge]

Segregate the network blocks and give him an unfiltered access

[silver willow]

give him a game with lolz for giggles jk subnetting and seperating the network or something like a pi hole or dns blocker always works. im still in the doghouse for running those programs off of a smart tv with alerts enabled by misconfig

works with firesticks to can add a vpn to boot for ease

ps worked in 2022 should still work now

type c to c on certain routers may also work thats for nethunters

[signal dagger]

hi

[cobalt patio]

hi

[quiet yacht]

Hey Hey, any one intresting to to team up for a medium level mashine, im a "newbie". tomorrow

[olive pier]

is any pro haker availible ?

i have a compitition only 30 minutes remaining

pakistan cyber hackathon

anyone ca help me ?

it is CTF

by cyber telent

😭 please help me

anyone ?

[twin ridge]

We can't help with active ctfs

Good luck

[olive pier]

please

[twin ridge]

Sorry mate, that would be cheating

[olive pier]

my team member has left me 😭

[twin ridge]

Then use your own skills

[olive pier]

mind blank

[twin ridge]

Happens, and it sucks, but still can't help, move on to a different challenge if possible

[olive pier]

please brother its just initail phase for shortlisting

[twin ridge]

Look, the rules are clear, we will not help you to cheat.

[radiant jacinth]

bro

[twin ridge]

?

[keen ember]

I've been asked by 2 highschools to give like an introductory / master talk about the cyberspace...

I'll be mentioning both thm and htb, do i need approval first in order to use THM's logo in my presentation?

[bright cedar]

Lol relax man...its not that serious

[bright cedar]

it's a public company unless your sharing company secrets, I wouldn't lose sleep over it.

[keen ember]

Rather be safe then sorry and no will just give a talk and mentioning them

[spark sun]

I would email support and ask about a 'press pack'. Usually companies will have some kind of branding ready to go to use in presentations and the like.

[bright cedar]

It's a plubic company. what problem do you think you'll end up in. You're audience are highschoolers.

[keen ember]

Thank you juun! Will do

[hoary nymph]

Gave +1 Rep to @spark sun

[spark sun]

Which stock ticker is THM registered on?

[bright cedar]

You are not using it to monetize are you?

If you are not using their name for financial gain, you do not need approval. stop trying to make this a big deal lol.

[keen ember]

Whut I'm a college studentt myself i do this all for free lmao

[spark sun]

Some companies get real weird about their branding being used in things they didn't approve; IMO better to not have the question of liability.

[bright cedar]

do your little talk and keep it pushing

[keen ember]

I'll go with juun's advice

[spark sun]

I haven't heard of THM being particularly litigious, and I wouldn't imagine their legal would get mad at you unless you made a claim of representation.

[bright cedar]

I'll bet you they'll laugh at the request

[keen ember]

Representation as in that i'm speaking on behalf of them ?

[spark sun]

That's usually what it means

[keen ember]

Can you please calm down with the snarky comments

[spark sun]

One of my former employers is a really well known company, and they were very very particular about employees giving talks to outsiders. One of the big rules was that you were speaking on behalf of yourself and not the company and you had to really get that point across

[keen ember]

Gotcha, not native English but no i won't be representing myself as a representative from thm

[keen ember]

Oh yeah it's defo on my own behalf

Thanks @spark sun for the insightfull advice!

[hoary nymph]

Gave +1 Rep to @spark sun

[odd acorn]

We still own the copyright to all art and images on TryHackMe.

Please ask permission before using them 🙂

[twin ridge]

Pretty sure they're still a private enterprise

[keen ember]

That's my intent and will email support this week about the matter 🙂

[marsh bronze]

AM here and am interested

[fierce breach]

hey i find many problems when i execute the command ffuf -w /usr/share/wordlists/SecLists/Usernames/Names/names.txt -X POST -d "username=FUZZ&email=x&password=x&cpassword=x" -H "Content-Type: application/x-www-form-urlencoded" -u http://10.10.174.101/customers/signup -mr "username already exists it doesnt show anything it show a list of codes a looot of lines with no results what shoud i do please??? this command is in the task of user enumeration in jr penetration tester

[little shore]

Suggest you post this in the #room-help channel for better response / feedback.

[loud holly]

anyone else studying for the sec+?

[echo portal]

hello

[harsh stone]

Hello

[tender birch]

Hows everyone this chill morning

[rose viper]

Good

[sturdy fossil]

HELP (150 London Wall, Barbican, London EC2Y 5HN, Regno Unito) ADDRES CORRECT?

51°31'4.00"N, 0°5'48.30"W (coordinate)

[south inlet]

Is this for THM?

[sturdy fossil]

yes

[south inlet]

Which room?

And please use #room-help (with context)

[sturdy fossil]

Intro to Digital Forensics

ah ok

[sweet epoch]

ssshhh y'all are being too loud in here

[versed wedge]

hey, can anyone plss help me with dreaming challenge??

https://tryhackme.com/jr/dreaming this onw

i am not able to proceed after the first command

[hidden oyster]

Has anyone her got a job in cyber security without going to college or a degree in IT. I am currently a teacher and thinking of making the transition. I've always been fascinated with technology and have taught grades K-2 basic computer science alongside my core curriculum! Then this year I have been teaching it full time in a larger school district.

[frail rapids]

what would be the best way to circumvent irl facial recognition from cameras?

I ocassionally go to parties and don't want that to be found on background checks involving facial based searches like pimeyes

[frail rapids]

I assume wearing party-like sunglasses wont fix it right? since theres mole tracking n stuff

[mighty echo]

wear a mask maybe?

[tawdry dove]

Don't go out in public? Following reasoning seems kind of shaky too, ngl

If you go out in public at all, you're going to have your picture taken by a myriad of entities whether it be government, businesses, private residences, tourists taking photos etc etc

[short elk]

what’s got you so paranoid

[nimble tapir]

where you stuck at?

[nimble tapir]

hella sus

[frail rapids]

ah yes sorry forgot to tell it was for bankrobbing

[solid cradle]

Hey guys, i've just finished the THM challenge "RootMe". I've answered all questions and i'm having less points than the top 5 players. They got more points bc they've done it quicker than me ?

[tawdry dove]

Bloods, meaning the first to complete the room, get more points

[solar trail]

You can find bootcamps near you which can offer work placement without having a degree. Also having some cybersecurity certifications help there is a list somewhere on here.

[little shore]

https://help.tryhackme.com/en/articles/6563910-points-explained

[solid cradle]

Thanks 🫶🏻

[hoary nymph]

Gave +1 Rep to @little shore

[sharp plank]

So uhm. Just curious if anyone had opinions on this, but I started collecting all my pws in a password protected OneNote page a long time ago and like... on a scale of 'wtf' to 'stop doing that immediately' how unsecure is that password management strategy?

My thinking at the time was convenience + who tf is out there targetting OneNote, you know?

[spark sun]

i would not do it that way, nor would i ever recommend that. you should be using a passwword management tool, like bitwarden or keepass

[sharp plank]

Yeaaah I thought it might not be a great idea lol. Thank you for the advice!

[hoary nymph]

Gave +1 Rep to @spark sun

[stiff pendant]

I'm currently studing for sec+ planning on taking it in march

[loud holly]

What section are you currently learning? @stiff pendant

[stiff pendant]

I just started working through Architecture and Design

[loud holly]

ah i see

[pallid vale]

Hey guys I have a question to ask about getting certifications. Im currently doing a university certificate in cybersecurity with the intention of getting a bachelors degree. Would you recommend me to do the google cybersecurity and it support certs?

[timid quail]

I did one of them they’re not bad but that’s what I think you should try one then do what you want !

🙂

[craggy zealot]

I just saw the discount for an annual membership $8.40 a month. Wasn't the original price $10.50 a month and first 3 months free? Or is the pricing of $8.40 a month forever?

[little shore]

It is only for a limited time as part of the Black Friday / Advent of Cyber event.

The Advent of Cyber discount will end of December 7th.

[craggy zealot]

So the Black Friday prices would be the monthly pricing for a lifetime if I subscribe now?

[little shore]

No, it will only apply to your current subscription

if you subscribe for a month using the discount code, only the following month will be discounted, if you opt for the annual subscription, the discount code will only apply for the following year.

[craggy zealot]

Ok. So for one year that would be $100,80. And after Black Friday $97,20 (9x10,80 first 3 months free as I recall)?

[little shore]

The computation is not as straightforward if I remember it correctly.

[fathom panther]

Annual at 20% off (8.4 USD x 12) -> 100.8

Annual full price (10.5 USD x 12) -> 126

Monthly for 9 months (14 USD x 12) -> 126

I’d say there’s ambiguity with the explanation in the pricing page. Its not technically “free”, you’re getting it at a discounted price compared to its monthly rate.

[unborn jasper]

ambiguity = more customers = more moneh

[fathom panther]

I’d say its better to say that its 25% cheaper than paying for the monthly rate if youre going annual than saying you get 3 months free

[unborn jasper]

we like moneh

[craggy zealot]

Ok. I thought the first 3 months were free with an annual price. Maybe I misread it

[fathom panther]

They arent technically free. Just discounted compared to monthly rate.

[pallid vale]

Thanks

[hoary nymph]

Gave +1 Rep to @timid quail

[little shore]

Considering the amount of content THM makes available to the community, I'd say its worth it though.

[frail smelt]

I just finished the Google it support and about to finish the cybersecurity one as well probably by tonight or tomorrow. Lots of good information and easily digestible

[unborn jasper]

free stuffz = more people learning on the site = more reputation = more investnent = more moneh

we like moneh

[marble coyote]

one question for a staff can someone complete 500+ rooms in just a week ???

[south inlet]

I doubt it.

500 rooms in 7 days = 71 rooms a day.

[marble coyote]

yeah

[south inlet]

They'd need to do 3 rooms an hour every day all day.

Check the rules.