quiet-conversation

[marble coyote]

kk

[unborn jasper]

Wanna bet?

[south inlet]

If you wanna flag your account for anti cheating, go for it.

[fresh fog]

hi guys i have the same problem as this
https://forums.kali.org/showthread.php?78131-Can-t-Access-Specific-Website-On-Kali-But-Can-On-Windows

any guess why I can't access exploit-db on my kali vm but on my host I can? 😣

[unborn jasper]

oh dont worry i'll record myself doing it and upload it to yubtub as proof

[south inlet]

So you're going to go for no sleep for 7 days?

[unborn jasper]

no ill take naps

[unborn jasper]

also i am permanently sleep deprived

[south inlet]

What about every day life?

[unborn jasper]

i got no life

[south inlet]

So you sit in front of your computer all day, every day?

No school, job etc?

[unborn jasper]

no but im ded

[little shore]

Have you tried to do curl -v https://www.exploit-db.com/ ?

Just to get an idea if your request is reaching the website?

[polar river]

@unborn jasper even if you do it 24/7 you won't be able to do it

unless ur just copy and pasting flags

[unborn jasper]

im a speed reader

[unborn jasper]

also to complete rooms i only need to answer the questions sooo...

[polar river]

a lot of the rooms require machines to solve

[south inlet]

Still need to do the material etc to get flags and what not.

[unborn jasper]

i still believe its possible

[unborn jasper]

whatever it takes bro

[polar river]

@unborn jasper do IT

[tawdry dove]

Let's see what happens when you cruise through only entering answers...

[unborn jasper]

aight, b e t

[unborn jasper]

just watch me

[tepid dome]

@tawdry dove Just joined this server. Where does one go about acquiring those custom roles?

[fathom panther]

Custom roles are provided by mods or through an event.

[merry smelt]

I'm not really active on this server, but I have to went this somewhere, where it will be understood.

I suddenly had the urge to clean up my KeePass database. It's only around 180-200 passwords (not counting other stuff), so how much time can that be?

It turns out, I hate the current web. Many sites changed the login page link (because they expose something like login3.auth.mydomain.com/aLotOf=Parameters&andNotRedirectUrl=ButLikeOneTimeTokens and now they have version 8...), which you cannot even bookmark.

Many of my accounts simply are dead.

Some others changed backends and my old password is not accepted anymore and have to change (my favourite was where I had a [a-z0-9]{32} password and now I must have a [a-zA-Z0-9]{16}, note the change of 32 → 16).

Some others I can still log in, but my history is gone (my favourite so far: a multi-billion, international company simply does not show my old order for a laptop, even though their software installed on the laptop shows that the warranty is still valid).

And what prompted this message was this gem [see screenshot]. Why-oh-why would you put a LINK between the username and password field and not fix your tabbing order? Yes, I have to have yet another unique auto-type sequence with an extra TAB in the middle 🙄 (I gave up counting, on how many sites did I have to add {ENTER}{DELAY 1500} instead of {TAB} between username and password, because you have to type your e-mail, hit enter, and wait for the password field to load 🙄 ). I'm fuming.

Sorry for the WoT and have a nice day 💚

(Update: I can't even 🤣 OpenAI has a redirect to a login/authentication app, which does not set the website title, so I cannot match it for auto-type in KeePass)

[untold lark]

glad we are chatting about rootme , cause i hit a wall. i know the answer but my gobuster, isn't running . gobuster dir -u http://10.10.221.155 -w /usr/share/wordlists/dirb/common.txt . is this correct?

[cinder lintel]

yes.. heads up to #room-help

[untold lark]

Thanks

[hoary nymph]

Gave +1 Rep to @cinder lintel

[burnt night]

Websites that no longer respect tab navigation for forms suck. Horrifically inaccessible

[twin ridge]

I'm sorry :(. On a more serious note though, have you looked into a self hosted BitWarden or something to replace keepass? I think it respects web forms a lot better than keepass

[merry smelt]

Nah, kinda privacy freak and don't want to host my passwords anywhere. The smaller problem is really the forms...

the main problems are:

• sites not making login link bookmarkable
• sites not setting HTML title on login page or setting it to something generic like 'Sign in'
• sites inexclipably and without notice deleting users or not accepting correct passwords

[twin ridge]

Oh for sure, so if even self-hosted is out there are not many solutions indeed

I wonder if keepass xc is better on web forms

[mighty echo]

Convenience Vs security

[spark sun]

bitwarden can be entirely local - if you wanted to host a server for it, you certainly can, but last time i used the client side application there was no requirement to sync to a server

[merry smelt]

Look chums, I am happy with KeePass, KeePass is not the problem 😅

[cobalt trail]

Anyone here who uses Stable Diffusion?

[tawdry dove]

I believe there is an AI thread under general

[worldly holly]

Keepass ftw tbh

[south inlet]

You say that, but I just cracked one.

[worldly holly]

With a weak password probably xd

[sacred vale]

any recommendations for a browser?

[radiant jacinth]

I know this is a long shot but can anyone help me with examsoft/exemplify?

[covert vapor]

What are you looking for exactly? If you want one for general use just use Firefox as it uses the gecko rendering engine. If you want a chromium base (most browsers/bulk of users) use Brave. If you are on Mac I would use Orion (basically better safari) built on webkit. For linux all this applies but for webkit use Gnome Web/Epiphany which is the same thing with two names.

[merry smelt]

Had once experimented, how I would secure a really crucical KeePass DB (like for a 3-letter agency or such). The problem is the password, it should be 20+ char random, difficult to crack. So use the XKCD "hack", but put in l33t, multiple languages and nonsense grammar.

Then, as a second factor, add a Yubikey challenge-response for which the HMAC key has been generated on an airgapped machine and the KDBX master password set also there.

So, you create an airgapped machine with KeePass and YKMan, create an empty DB, set a good PWD and challenge-response, then close the DB, print it out as Base64, which you deserialize on a non-air-gapped machine (typing it from the screen). Destroy the generator machine.

Good luck cracking this DB.

[twin ridge]

if you can sniff out the AES key the DB is encrypted with it doesn't matter what you shove in front

you'll probably need an agent on the machine listening for a keepass unlock

[merry smelt]

My standard answer to any kind of evil maid attack is: If Mallory has access to your hardware, you lost, end of discussion.

[twin ridge]

could be a software agent

[merry smelt]

... which has access to your hardware (in order to read the key, it need direct RAM access, cicumventing OS protections)

[twin ridge]

there were semi-recent flaws in keepass allowing the key to leak

[south inlet]

^

Dumping the memory

[twin ridge]

That too

[merry smelt]

That's what I mean... c'mon, if an attacker can dump your PC's RAM, you have bigger problems than what password manager you use...

[worldly holly]

I mean... if the attacker has access to your computer that's game over already

What's next?
Host your keepass DB on a airgapped raspberry pi with a screen and hand copy the passwords? XD

ngl that would actually be a cute project

Isn't there a mouse that can save passwords? As in having an internal clipboard ?

Host your passwords on your flipper as ducky scripts

[merry smelt]

Nah, then it's easier to have no passwords. Just always click "I have forgotten my password" and reset it at each login to a randomly generated new one. Even a GUID should do the trick and that you can generate e.g., just by opening https://duckduckgo.com/?t=ffab&q=guid&atb=v320-1&ia=answer

[twin ridge]

That's basically what keepass does

[spark sun]

bad idea- the storage in the flipper is not exactly well-known to be robust

[worldly holly]

It requires physical access tho

[spark sun]

SDCards in general are notorious for wearing out extremely quickly. Additionally, the storage inside the flipper really isn't certified. It's possible it could fail at any time, without knowing when due to the constant access reads and writes

[worldly holly]

Very true!

Ciphered piece of paper it is then

[twin ridge]

Read shouldn't be too hard on the card

[radiant jacinth]

hi guys!!

[worldly holly]

It still has a limit of operations I guess

[twin ridge]

Like everything

[spark sun]

less worried about it on the card, completely unsure how many R/W the onboard storage is

[twin ridge]

It's a very small amount of flash

[barren cedar]

Hi guys, does anyone have exam soft link?

[burnt night]

For what?

[barren cedar]

@burnt night to get the exams

[twin ridge]

I have a feeling I don't want to know

[junior verge]

what is an exam soft link?

[sacred vale]

same

[south inlet]

Probably an exam dump

[junior verge]

hmm you got an avatar now :O

[south inlet]

Only for Xmas.

I mean, it's always been there, is that your internet just loading it?

[twin ridge]

Aaah it's a skelington

[south inlet]

https://tenor.com/view/jack-jack-skellington-jack-and-sally-nightmare-before-christmas-nbc-gif-7483399265633771255

[mortal venture]

cannot believe i just spent an hour going down a rabbit hole on the wonderland box, whos whole thing is "don't go down the rabbit hole" ninja you are evil

[summer verge]

if there is a place to go down the rabbit hole is probably wonderland 😉 😂

[south inlet]

One of my favourite rooms.

[twin ridge]

rofl

you have to fall down part of a rabbit hole at one point iirc

[final gyro]

hi

[vale juniper]

So quiet here.

[soft pier]

yeah it is quiet convo

[solemn pagoda]

Dark

Hello everyone, glad to be here, my first time in advent of cyber security

[worldly holly]

Congrats!

[distant minnow]

me too! let's have fun 😄

[arctic tendon]

Hey friends, anyone has an indication where i can read papers about security in general

[fervent steppe]

🥚 👀

[spark idol]

👍 😂

[formal mist]

hey there

why so slow here?

[azure wasp]

Because it is for quite conversations, much calmer than general chat normally is

[formal mist]

ok cool

[radiant jacinth]

@arctic tendon hello, i v got some pdf if you want, about cybersecurity, and you call also follow People like John Hammond to learn Cybersec, RED Team, BLUE Team, and so on

https://www.youtube.com/@_JohnHammond

Hello to everyone 😉

[fallen vine]

amazing

[tacit patrol]

anyone doing day2 advent of cyber right now?

[astral tide]

Probably not, since it's not out yet. 🙂 The daily AOC rooms are released at 4pm GMT each day (as mentioned here)

[tacit patrol]

I meant the side quest one

[astral tide]

Those are released weekly-ish. The exact timeframes are mentioned in the description of the SQ room.

[tacit patrol]

no for the task 1 they say that the key is inside the social media links inside the post of 28th to 30th november

check it once in ur tryhackme account

[astral tide]

Ah, that's what you meant. 🙂 Yes, there's much more than that already available, since yesterday. You should cotinue, it's a deep rabbit-hole.

[astral tide]

There's also a dedicated channel here: #1174347459116417054

[tacit patrol]

ohh thanks alot for it

[cerulean dove]

hi guys

i am new to cybersecurity

any advice where to start?

[tawdry dove]

#start-here

[cerulean dove]

yeessssss!

[civic root]

There are no URLs in that message.

[mortal venture]

this is so Muir. All this work lol

[soft pier]

hahahahaa that is awesome

[azure wasp]

oh haha, that is pretty cool

[quaint basin]

You'd be surprised

[night silo]

bro, the attention to detail needed

[civic wasp]

That's so cool!

[radiant jacinth]

Someone want to resolve a CTF with me?

[tawdry dove]

If this is an active CTF, we cannot assist

[candid sigil]

So I'm on Day 3, trying to input the link address given, into web browser, but it's not working...

Should I reboot the attack box, since I tried to do day 2-3 back to back?

[soft pier]

you need to start both the target machine and the attackbox... and then to access the target machine go to said address on the attackbox

anyways if you need more help #room-help is the place

[candid sigil]

Right, I did input into the attack boxes browser,

[soft pier]

did you input 10.x.x.x or did you input machine_ip

of course with the other stuff like http and port number

[candid sigil]

The former,

[crude sail]

How can i start both the target machine and attack box?

[soft pier]

for starting the target machine it is this button:

for the attackbox it is this:

[winged rain]

--min-rate 5000

[regal venture]

yeah eventually i just scanned the ports 1001-9999

and it went way faster

who knew lmao

[small void]

💀🌞

[maiden nacelle]

What's the button for hacking into the mainframe?

[short pulsar]

I've been wanting to know one thing... Which language of program is needed to be learnt to then learn hacking?

[summer verge]

Python, bash, javascript for web hacking, SQL, to name a few

[soft pier]

none technically... but it is helpful to know a few
a lot of exploits are in c/c++
and then there is a ton of python to use for different scripting and exploits too
shell scripting will let you automate some tasks and for that you use bash
for website hacking knowing how to read html and javascript will get you quite far
databases like the sql ones will also help a lot

[summer verge]

Yep, I forgot C, thanks shadow

[frail vault]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Dec 4, 2023, 9:42 PM

TryHackMe's Github

Get the bot's GitHub link.

​

https://github.com/JabbaSec/tryhackme

TryHackMe Socials · Dec 4, 2023, 9:43 PM

[inner oracle]

Hi, sorry to bother, but I was trying to complete day 4 AOC but it kept saying that the link wasn't working, so I tried to reopen the attackbot hoping that would help but it says I need to pay for it and I can not open a VPN because I am completing the challenges on a Chromebook. Any advice?

[summer verge]

try #site-support

[inner oracle]

Okay, thank you

[cunning elbow]

︎︎︎
︎︎︎

(quiet message)

[summer verge]

maybe try #room-help

[soft pier]

yeah the attackbox is limited to 1 hour a day for free users... sorry that this is limiting you with your chromebook.... hopefully you can solve it later or get on another computer where you can run your own personal vm soon

[inner oracle]

It’s fine, I should have looked into what I would need to run the vpn before starting the challenge. I managed to watch the video and work with someone else who was also doing the challenge through the process to get the answers so that’s a plus.

[stark cargo]

Has anyone used hackthissite before? From what I can tell its safe for the most part but I want to be sure

[soft pier]

the hackthissite.org??? yeah have done that in the past... it is safe but old and kinda outdated

[stark cargo]

Thanks. You say its old and outdated, are the challenges not as relevant anymore?

[hoary nymph]

Gave +1 Rep to @soft pier

[soft pier]

they are still a bit relevant but there are a lot more content on tryhackme.com that goes more in depth and teaches you more stuffs

[stark cargo]

Okay thank you

[soft pier]

no problem

go ahead and try those challenges if you want but you will probably have a hard time finding guided content for it

[opaque ravine]

Chill jams

[mortal venture]

for some reason every time i try to connect to THM using my ovpn file it never connects. Muirs script always shows my tun0 not existing and when the script tries to connect it always works perfectly fine. sudo openvpn ./xtwo.ovpn just does not work for some reason but isn't that the exact same command that the script is using??

Also Muir how were you able to get openvpn to run in the background, fg shows no current jobs running. Bro is a wizard

[mortal venture]

I can only connect using the troubleshooting script, I do not know what I am doing wrong.

me running said command

[azure wasp]

That looks like it would work?

[mortal venture]

hmmmm...it is working.....

you know what it was, the initialization sequence completed was moved up a few lines, and since that wasn't the last line i blindly believed that the vpn was not working

[tawdry dove]

That was going to be my question

1. Did you turn it off and then on again
2. Did you try and ping/tracepath a box
   Lol

[mortal venture]

its times like these where i realize how little i actually know and comprehend

[little crescent]

Happens to the best of us

[everyday]

[pastel wyvern]

so this is a quiet conversation

BWHAHAHAHA

Im at class

and its boring

[south inlet]

You'd be surprised how many people miss that though.

[frail vault]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Dec 6, 2023, 6:59 PM

[short pulsar]

Thanks for your reply man.

[hoary nymph]

Gave +1 Rep to @soft pier

[soft pier]

no problem

[short pulsar]

Thank you also

[summer verge]

Actually not a man if you read the username 😂 I'm not talking about me just in case

[short pulsar]

Oh yeah that's my regular word you know... I have no idea about the idiom in English.

Actually English is not my First Language

However, I assume I have gained at least the intermediate level.

Nice to meet you by the way.

[summer verge]

Just leave the man out and you'll be OK everytime 😂

[short pulsar]

Yes seargent!

May I add you to my friends' list?

[summer verge]

I'm more than glad to chat here in the public, but I don't add people that I don't know or haven't chat for a long time. No offence

[short pulsar]

No that's ok, not a problem at all. Anyways, do you have experince in hacking?

A newcomer, interested in learning these stuff.

[thick barn]

what do u use for buffer overflow testing? Guess it would be better to have VM with Windows as lab environment - if I'm correct let me know which win should i use...
saw win 7 is recomennded but hard to find trusted iso

[raven bluff]

help me

[tawdry dove]

With?

[frail vault]

I could not find an article, please try again.

[quaint basin]

You talking about exploit development?
You use whatever the software is designed to execute on 🤷‍♂️

[tawdry dove]

If this is for a THM room, #room-help is the best place to receive assistance. If this is for Advent of Cyber, #1174347459116417054

[slim void]

thanks man

[hoary nymph]

Gave +1 Rep to @tawdry dove

[hollow holly]

I've been away from cybersecurity for a while. Any advice on getting back into it?

I feel like I literally forgot everything I knew :/

[cunning elbow]

doing the advent of cyber sidequest 😈

https://tryhackme.com/room/adventofcyber23sidequest

[serene kelp]

Where do I actually find people to "hack" with?
Like a group/friends to do CTFs with

[teal mesa]

I know on other HTB they encourage joining groups and have "Find a grouo" pages for any CTFs that they host

[little shore]

Probably post something in here or in #infosec-general

[hollow holly]

I'll look into it, thanks.

[hoary nymph]

Gave +1 Rep to @cunning elbow

[warm ore]

it means alot when people reply people

[delicate plaza]

side quest answerd?

[little shore]

You'll have to wait on the 28th December for any hints.

[limber zephyr]

@pom#0375

[patent gate]

Its a roald dahl book I remember from my childhood.

[delicate plaza]

side quest answerd?

[twin ridge]

you won't get any here

[polar river]

@odd acorn there may be a chance Parker Jones is a scammer due to his account bio

[icy scroll]

Im also just coming back after a few year dip.. Just browse through the learning rooms you've completed and make a fresh set of notes.. You'll pick it all up pretty fast (with actually a better understanding).

[buoyant maple]

its been more than a few years for me, longer than expected

site is good revision tactic.

[woeful forum]

What VMs do you guys use for malware analysis?

[grizzled scarab]

as in what host? or what image ? personaly i use proxmox

[marsh bronze]

Are asking the Hypervisor we use or the actual linux Box

[woeful forum]

both

[woeful forum]

host to be specific

[marsh bronze]

ohh, well me i use Oracle Virtual Box with Parrot OS

[woeful forum]

but hypervisor is a dilemma too

[woeful forum]

Oracle is a new one, haven't heard of that in quite a while

[marsh bronze]

Oracle Virtual Box is a type 2 hypervisor

[grizzled scarab]

? oracle vb is whats recomended on most web pages describing how to setup a home lab

[marsh bronze]

Its a free Hypervisor from Oracle

[grizzled scarab]

not new 😉

[marsh bronze]

Yeah, but me also use Vmware workstation pro

[woeful forum]

looks like i was in the wrong place then

hmm gonna look into that

[marsh bronze]

No worries, what was your issue

[woeful forum]

I'm actually looking to get into malware analysis

[marsh bronze]

You should also look into learning about nested Virtualization

[woeful forum]

need a vm and a hypervisor for that

[marsh bronze]

yeah me too

[woeful forum]

vm in a vm?

[marsh bronze]

Yes please

[marsh bronze]

Its very interesting

[grizzled scarab]

i have proxmox setup on a old Supermicro 12 cores 64G 4TB 😉 - it's farily easy to spin up a small box and test stuff in it - could do a nested vm but not really needed

[woeful forum]

I did hear bout malwares capable of bleeding out of vms, does nested virtualization help with that?

[grizzled scarab]

depends on how they are setup - you can make an isolated network and use that , not easy to break out of a vm , but it can happen

[marsh bronze]

Yes malware can bleed out of the vm, it also depends on the way you setup your VM and hypervisor

[marsh bronze]

Create a snapshot of your VM before you start testing malware. This will allow you to restore your VM to its original state if the malware does manage to infect it. Use a firewall to block network connections from the malware. This will prevent the malware from communicating with other computers on the network

[woeful forum]

Hmmm, so i need to config my hypervisor, up a firewall, nest the vms if i have to and I'm good to go?

I got Remnux on Vmware17 rn

[grizzled scarab]

some hosts have a built in firewall - i just isolate the entire thing - forces me to open a console to a machine on that network and not just ssh in from my "real" network (like my home would be 10.10.X.X where the lab is 172.1.2.X)

[radiant jacinth]

Shhh

[crimson swallow]

Guys can anyone tell me ..as a beginner in cyber security what should be my first project ..... any reference is appreciated

[twin ridge]

Something simple, but it can be whatever you want it to be 🙂

[crimson swallow]

Can you give me some examples

[twin ridge]

Port scanner, fuzzer, c2

Malware detector based on Yara?

Might be more intermediate though

[crimson swallow]

Thanks .....

[analog loom]

Hey guys,
I have a small problem and I hope someone can help me.

So basically I want to fuzz a binary and unluckily the part I am particularly interested in is a TCP socket that runs on a specific port.
There are many other sockets doing some stuff but i don t care about them.
How do I override the open(), close() and accept() functions with a shared object (the socketfuzz.c in the AFL++ utils) of this particular socket without disabling everything else so i can fuzz this port?
I am currently using AFL++ on qemu mode. And what i am trying is to have input files in stead of the actual socket communication. I have to use binary only instrumentation without the actual source code.

Does anyone maybe have a hint how I could approach this problem?
Every hint or idea is welcomed. 😄

[tawdry dove]

Is this for a THM room?

[analog loom]

nope but i hope that is not a problem 😅

[tawdry dove]

Who/what is it for?

[analog loom]

for my bachelors. i am trying to have an approach on fuzzing network services and the efficency difference between network based protocol fuzzing and file based fuzzing.

and i came to the conclusion that protocol fuzzing is painfully slow and i hoped to find another approach. especially for automated bugg testing in the industry

[faint gate]

actually a very nice bachelor topic to investigate

[graceful umbra]

I am a bit of an IT vet, acheved my associates back in '08 and most job have bene "The" IT guy allowing me to do everything from helpdesk to admin. Solid Generalist that has always ben interested in cyber. Is it worth it to do 2 more years of school and get a BS or would I be better off working on certs and becoming more specialized? what are you thoughts?

[twin ridge]

For you, I'd look into certs tbh, you have tons of experience to the point we're school probably isn't even looked at on a resume

But that's my opinion

If you want a cert though, get your employer to pay for it

[analog loom]

Thanks 😄

[hoary nymph]

Gave +1 Rep to @faint gate

[hot salmon]

Hello all

[faint gate]

Hi, somebody here who got nice security questions for my podcast with Daniel Stenberg (maker of curl) it is for a course for my bachelor

[compact bane]

لزبف as, mi mo@cunning elbow

[merry smelt]

Random discovery: DeviantArt locked 2FA behind a paywall 😂 Unless you have a subscription (the cheapest is $1.66/mo w/ 50% off, so $3.95/mo), you cannot activate 2FA 😂 chef's kiss

[cunning elbow]

?

[meager drift]

quiet!

[summer verge]

Lisbef if I'm not mistaken. I know a bit of Arabic 🙂

[steady echo]

Based on Shodan.io, what is the 3rd most common port used for nginx?

[steady echo]

Any one answer it

[cunning elbow]

port 80 the third

[odd acorn]

#room-help

[glossy apex]

I hesitate to retake my subscription..

[summer verge]

nobody can make that decision for you, first make sure you have the money, and then think about how useful and enjoyment you got from the subscription. After that if you really enjoy it and you think you can continue learning then you have your answer 🙂

[frail vault]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Dec 19, 2023, 3:45 AM

Pong!

API Latency

105ms

Client Ping

235ms

Dec 19, 2023, 3:47 AM

[pulsar forum]

good evening fellow quiet conversers

[glossy apex]

So i retake it..

😂

[summer verge]

congrats!!!

[spare sphinx]

Hi

[bleak crescent]

hi

[odd acorn]

@radiant jacinth Keep it PG13

[chrome void]

Hi

[frail vault]

Pong!

API Latency

110ms

Client Ping

254ms

Dec 21, 2023, 8:42 AM

[marsh bronze]

Hello everyone

[junior ice]

Howdy

[stark cargo]

Im currently using a proxy chain on my vm, and I can connect to any site(to my knowledge) except for google.com. why is this?

[fathom panther]

What's the error when connecting to google ?

[stark cargo]

It says "!!!need more proxies!!!" And times out

[stark cargo]

Ps. adding more proxies didnt work. I also tried using different types of proxies like only https insteas of http, not sure if that would do anything anyways, I dont really know how proxies work

[brazen meadow]

why not just stick to tor then

[stark cargo]

Yeah I might, but I still want to figure out why it isnt working

[deep hazel]

Hi everyone. Please I am having issues connecting to the THM network using the OpenVPN. I keep getting this error message.

sudo openvpn Downloads/TheHood.ovpn
[sudo] password for kali:
2023-12-22 11:02:09 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2023-12-22 11:02:09 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-12-22 11:02:09 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2023-12-22 11:02:09 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-12-22 11:02:09 library versions: OpenSSL 3.0.10 1 Aug 2023, LZO 2.10
2023-12-22 11:02:09 DCO version: N/A
2023-12-22 11:02:09 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.129.195:1194
2023-12-22 11:02:09 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-12-22 11:02:09 UDPv4 link local: (not bound)
2023-12-22 11:02:09 UDPv4 link remote: [AF_INET]18.202.129.195:1194
2023-12-22 11:03:09 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2023-12-22 11:03:09 TLS Error: TLS handshake failed
2023-12-22 11:03:09 SIGUSR1[soft,tls-error] received, process restarting
2023-12-22 11:03:09 Restart pause, 1 second(s)
2023-12-22 11:03:10 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.129.195:1194
2023-12-22 11:03:10 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-12-22 11:03:10 UDPv4 link local: (not bound)
2023-12-22 11:03:10 UDPv4 link remote: [AF_INET]18.202.129.195:1194

[fathom panther]

Hey, #site-support may be better. You can also try the vpn script

[frail vault]

Troubleshooting OpenVPN on Linux and Mac

Article Link

https://help.tryhackme.com/en/articles/6496058-troubleshooting-openvpn-on-linux-and-mac

Dec 22, 2023, 11:44 AM

[austere pier]

Hi

[burnt night]

@tulip shore Please don't do this. You're not a moderator and it's rude.

[tulip shore]

It was meant as a joke, channel name #quiet-conversation and me saying what I said about waking up

thought it was funny ig not. MB

[burnt night]

Jokes are meant to be funny, that was just hostile to the user, please don't be hostile to other users

[tulip shore]

Well I do apologise

[autumn trout]

Anyone know of a seedphrase (bip-39) to wallet address script? other than just importing. Looking for some sort of algo to do this 😛
i know i can read the RFC and do it myself but would rather copy someone elses code lol

[quiet spear]

jooo what u said

sick

[civic root]

There are no URLs in that message.

[lucid wadi]

Hello guys....
Tryhackme vpn is forbidden in my country and I try alot of ways to connect....
Outline Beta: now stopped and doesn't work
Planet vpn: doesn't work now
Vpngate: don't work
I tried to install old version of openvpn but I'm stuck here

[azure wasp]

If your country does not allow OpenVPN then your only option would be to use the in browser attackbox provided by THM

[lucid wadi]

But it's slower than the vpn connection

[azure wasp]

That is true, but there is nothing we can do about your country's restrictions regarding the VPN

[south inlet]

https://tenor.com/view/morgan-freeman-hes-right-you-know-correct-true-right-gif-27174315

[wooden geode]

when are the adventofcyber certifs gonna roll out ?

[rough gyro]

I'm curious, who here genuinely likes Active Directory themed boxes?

I love AD

Not an AD fan

To Staff: I hope the poll is OK here, if you must take it down I understand.

[tall saddle]

I'll just say that learning Active Directory and Group Policy in production use at work is what made Windows sysadmin click for me, yeah this is fundamentally how Windows Server domains are supposed to work.

These rooms are extremely valuable real world info that you will see in prod. Great to spin up your own Windows Server test labs, there's 90 day evaluation ISOs for Windows Server 2019/2022 you can spin up

"Oh this is literally what I used to log into my profile on any computer back in high school when we first got XP machines" (would have been Windows Server 2003 R2)

tl;dr yes very valuable and relevant info in these rooms, and it's what I have to make sure we're protected against at work (lol not to wreck the poll)

[fathom panther]

Do you follow SwiftOnSecurity @tall saddle ? I think this thread is something you’d like. https://x.com/swiftonsecurity/status/1734772483302289682

[tall saddle]

Him and Kevin Beaumount are my all time faves indeed

Yes this is why I love SwiftOnSecurity. He drives home so often how the things he learned in help desk regularly save the day for all kinds of tasks

help desk is not a dirty word, and teaches you so so much

I get massive respect for people who accended from there as I did, but heck I sure dip into help desk to this day at this smaller org I'm at

[mighty echo]

what is this black magic

[radiant jacinth]

google santa tracker is infinitely better than the norad one

[wanton atlas]

you download qubes on a laptop, don't give it permission to do anything but just exist. A week passes and your OS is graphically unstable...

just annoyed

[frail vault]

Pong!

API Latency

110ms

Client Ping

193ms

Dec 25, 2023, 6:41 AM

[unique bolt]

This is so cool holy crap

[strange basin]

.

[frail vault]

Pong!

API Latency

101ms

Client Ping

265ms

Dec 27, 2023, 3:41 PM

[orchid oxide]

hi

[frail vault]

Pong!

API Latency

107ms

Client Ping

160ms

Dec 27, 2023, 9:36 PM

[night shale]

Interesting 🙂 https://securelist.com/operation-triangulation-the-last-hardware-mystery/111669/

[rough gyro]

Well that's a delicious bite of the big Apple.

[wide flume]

!rank

[south inlet]

We use / now, instead of !

[wide flume]

ohhh thanks for the help

[hoary nymph]

Gave +1 Rep to @south inlet

[wide flume]

/rank

[mighty echo]

This should pop up when you type it in

[narrow onyx]

Where are we gonna type it ?

[little shore]

Anywhere you need it, but ideally should be in the #bot-commands channel.

[brazen island]

this might sound a bit stupid, but how do i start my hacking journey? im completely new to this kinda stuff

[south inlet]

Have a read over #start-here

[odd acorn]

If you type it anywhere other than #bot-commands only you will see the bot’s response

[vivid skiff]

I’ve been meaning to say so I like the hacking thing but how can I use this on websites and how am I soposto remember everything

[oblique rover]

I feel the same way to remember everything and it is very overwhelming. I think practicing over and over again with setting up defenses and configuring firewalls is a great start. I am trying to learn as much as I can in that regard with repetition.

[vivid skiff]

Ok

[night shale]

You're not supposed to remember everything, that's what we have documentation and google for 🙂 Just keep exploring things you like and whatever you do often will automatically be things you start remembering. Things move so fast in the cybersecurity area anyway, what you remember from years ago will likely be outdated by now.

[rigid crown]

Guys is jr pentest path and oscp are enough to take ejptv2? I didn’t like the ins course but I liked thm path’s more

[fathom panther]

if youre taking OSCP, you have no need for ejptv2

[rigid crown]

I wanna take ejptv2 after one month, I didn’t have enough budget for oscp rn

I mean the oscp parh

Path^

[fathom panther]

You should also do the Wreath room if you have time

[rigid crown]

So u this jr pentest path and oscp path+ weath room are enough to pass ejptv? I have technical knowledge im not completely beginner

So u think*

[light flax]

Guys any suggestions for good free note taking app on Linux.

[night shale]

Tried https://obsidian.md/ ?

[gaunt loom]

i did expose today, it was quite difficult for my level but i liked how it combined lots of layers and included a new tool i've never used before

[low salmon]

Fav notes app<3

[solemn leaf]

Aimbot

[radiant jacinth]

why do u think that

https://www.youtube.com/watch?v=GujqU6eFey8&t=8s&ab_channel=Prime

is this aimbot too

[spark sun]

I would need to see complete clips; the tracking is sus, but not totally unreasonable for 2-3s at a time from different games

[south inlet]

I'd need to play the game to make a decision, but that does look very much like aim-bot.

[mighty echo]

I wouldn't say that tracking is sus, they're both pretty close to each other with barely any movement, like juun said you'd need more clips

You can't make a decision based on 3 seconds of gameplay

(I've played Apex for a couple months)

[spark sun]

the short perfect mass tracking at close range is the sus part; also the tracking through a couple of pillars, but that could be explained by good prediction. Like i said, need more data to go from 'kinda sus at times' to 'definitely cheating'

[mighty echo]

@spark sun

[fathom panther]

Using controller on Apex is broken due to its "aim assist". Theres a reason why the pros are looking to switch to controller versus MKB as it has more value overall when doing fights.

[odd acorn]

It just looks like controller aim assist

[fathom panther]

Heck, even pro teams are looking for having at least one controller player on their roster

[hasty atlas]

hi THM hackers

haven't talked in this server in quite a while, nor have I done any THM rooms. thinking about getting back into it... what are your suggestions for those v rusty hacking skills?

[fickle compass]

I took a break a while back as well and came back to it. I helps to go back and go over stuff you already know/knew for just a refresher and then just get back into it where you left off. And do some CTF's, it doesnt take long to get back into the swing of things

[hasty atlas]

great suggestions, thank you 🙂 ethical hacking has been so fun for me in the past, but I work in a tech job that is totally unrelated to security, so I spend a lot of my time learning things related to that...

[hoary nymph]

Gave +1 Rep to @fickle compass

[sleek creek]

im doing the "Simple CTF" room, and i'm struggling to understand how the exploit you need to use works, https://www.exploit-db.com/exploits/46635. Aren't there an enormous amount of different salts, how does it crack it in like under 10 seconds

[fathom panther]

It dumps the salt used in hashing the password plus the algorithm used is MD5 which is super easy to generate nowadays (i think i can do around 10M hashes in 1 sec, others can do more) and the password used is easily crackable.

[sleek creek]

i don't think i quite understand how it's revealing the salt here ngl

because the payload seems to make a query to search for the salt used (to then check if it exists based on the time delay), but why/where would that be stored?

[fathom panther]

The CMS seems to store the encoded salt in the database under the cms_siteprefs table.

[sleek creek]

hmm okay but still, if a salt is only comprised of upper and lower chars and is something relatively short like 10 chars, thats still 52^10 different combinations, which at 10M per second would still take 27 millenia

[sleek creek]

now that i re-read the code i understand it even less lol. Isn't it just trying substrings of the dictionary = '1234567890qwertyuiopasdfghjklzxcvbnmQWERTYUIOPASDFGHJKLZXCVBNM@._-$'
in order and hoping it works?

[twin ridge]

MD5 is closer to the billions of hashes per second

[real jungle]

Hi THM hackers
Can someone tell me how much time an nmap scanning could take (all ports)?

[odd acorn]

Well it depends on:

• connection
• speed of your machine
• speed of the server
• flags used
• services running on the target

[real jungle]

Ok !
Cuz It's been at least 15min and it's not even close to the end

[odd acorn]

What flags are you using? Are you on the AttackBox?

[daring vapor]

Try to use —min-rate 2500

[real jungle]

Yeah on the attackbox

Thanks guys

[real jungle]

Something I can't understand: the port 22 was "open" when I first scanned the ports. but now that I try to connect through ssh (using an ssh private key), it said that the port is closed

Here is the exact message : Connection closed by IP_ADDRESS port 22

It's the last question of the "exploiting smb" section

The question : Now, use the information you have already gathered to work out the username of the account. Then, use the service and key to log-in to the server.

What is the smb.txt flag?

[grizzled scarab]

sounds like they talking about smb not ssh (smbclient) - and when you get a "Connection closed by IP_ADDRESS port 22" that doesnt mean the port is closed - it means the service behind that port (ssh) disconnected - no reasion given

[real jungle]

Hum ok
Thanks

Thanks for shedding light on the meaning of the message but given that an id_rsa file is for an ssh authentication, I think they are talking about ssh

Otherwise why should I have to download the key ?

[grizzled scarab]

if your using a key the format is ssh -i /<path and keyname> username@ipaddress

scp is the same format fyi

also , when having issues with ssh you can use -v

[ornate dagger]

Why use nmap when you have rustscan 👀❓

[mighty echo]

Less noise

They both have their uses

[real jungle]

@grizzled scarab I used the -i switch and the path but still ! The same problem

[grizzled scarab]

try with the -v ssh -i /<path and keyname> username@ipaddress -v

it should tell you where it's dying

keys also need to be 600 chmod 600 blah_id

it's user,group,world and binary so 4,2,1 rwx (read write execute) so 600 = 4+2,0,0 or rw-------

[spark sun]

Once a key has been generated, it should never be modified. 0600 would be a bad choice for key permissions

[frail rapids]

Does anyone know any "airgapped" modern cars?

I want to drive a modern car which is completely offline due to attack surface

[spark sun]

your car is more at-risk from canbus exposure than any radios

[frail rapids]

Ideal type would be a modern sports car with modern safety measures

[frail rapids]

atleast no network-based canbus exposure ^-^

[spark sun]

canbus usually doesn't have direct access to the radios.

[tawdry dove]

Good luck

Car security is usually setup like an onion with different layers/zones. Layer 0 is your critical and the outermost layer is likely going to be infotainment/accessories. Devices usually are allowed to talk directly to the adjacent zone but not to the zone after. Layer 0 can talk to layer 1 but not 2, 3 can talk to 4 and 2 but not 5, etc etc

If you format messages correctly, afaik, or they're doing something quirky you can get around some protections

[frail rapids]

All the recent attacks on tesla scare me

[spark sun]

i mean, that's tesla..... I wouldn't own one

[worldly holly]

could you link a few?

[candid tartan]

https://tenor.com/view/the-flintstones-fred-wilma-dino-gif-13215672

[stark cargo]

Why is wifi not showing up here?

[tawdry dove]

What are you trying to do also what is this for? It's going to show up as the device name, it's not going to say wifi.

[stark cargo]

Its not really for anything Im just messing around with wireshark. Also when I used it before wifi was a capture option, but it just disapeared. I cant see any traffic whatsoever besides an occasional spike from eth0

[warm peak]

is it a vm?

[dapper steeple]

Hello i need a job in portugal for entry level in the field of cyber security any help please ?

[south inlet]

Google & Liinkedin would be your best bet.

[stark cargo]

Yup

[grizzled scarab]

and dice

[warm peak]

That's probably why

[south inlet]

Ye, you'd need to have a seperate NIC to do that.

[grizzled scarab]

depending on the host system - direct access to hardware can be an issue in vm's

[south inlet]

If it's a USB it will be no issue.

[stark cargo]

Thanks

[hoary nymph]

Gave +1 Rep to @warm peak (current: #7 - 777)

[stark cargo]

It worked before on the vm, so Im guessing it might be because I tried to isolate the vm to protect my host from malware? Dont remember exactly what I did to isolate it but could this be why?

[grizzled scarab]

possibly - i would be just guessing in the dark as i dont know anything about your setup - if possable you could spin up another vm just to test if you can access from that

[south inlet]

Which hyperviser do you use?

[stark cargo]

Thanks

[hoary nymph]

Gave +1 Rep to @grizzled scarab (current: #150 - 41)

[stark cargo]

I use virtualbox

[soft pier]

oh wait wrong channel

[rugged frigate]

Hello

I was using the BurpSuite Repeater Room on tryhackme. in Task 6, Capture a request to http://MACHINE_IP/ in the Proxy module and send it to Repeater.

Send the request once from Repeater — you should see the HTML source code for the page you requested in the Response view.

Try viewing this in one of the other display options (e.g. Hex).

Using Inspector (or manually, if you prefer), add a header called FlagAuthorised and set it to have a value of True, WHEN I DID THIS IN THE BURPSUITE , THERE IS NO RESPONSE SHOWING? CAN ANYONE HAS ANY IDEA WHY

[south inlet]

Are you using an actual IP, or "machine_ip"

[rugged frigate]

machine_ip

[south inlet]

That's why it isn't working...

You need to start the machine with the green button

[frail vault]

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Jan 5, 2024, 6:49 PM

[rugged frigate]

i am using the burpsuite community version on my windows

[south inlet]

Yeah, but there is no website in http://machine_ip

[rugged frigate]

Oh , so I have to use the machine from the tryhackmeroo only

[south inlet]

Not only, but if you're doing the THM room, it makes sense.

[rugged frigate]

okay, thankyou

[covert pendant]

So I'm trying to get access to this Room but it says "not-found"

[dim heath]

#743859653343182930

[odd acorn]

Throwback was retired:)

[radiant jacinth]

Hey all! I wasn't entirely sure where to ask, so i'm gonna drop this here... I broke my last VM and am having trouble installing a new one haha ˙◠˙

[candid tartan]

what kind of problems with new one

[radiant jacinth]

Change mirror returns me to the previous "Enter HTTP proxy info" screen

[candid tartan]

that looks alike internet connection

might better download kali for VM software you use

[radiant jacinth]

Ah, are you talking about the vm package installer?

[candid tartan]

you use VBox or VMware

[radiant jacinth]

VMware :]!

[radiant jacinth]

I'll try that! ty ty

do you have any idea why it was doing that? You said it mmight be an internet issue?

[candid tartan]

is much more simple. it's pre build file just as VM make one

[candid tartan]

looks like it cant reach internet/repo

is you VMware network set to NAT or other something

[radiant jacinth]

so weird 🤨 It is set to NAT, but when I installed my previous one i Had the same settings and it worked so idk what changed haha :((

[candid tartan]

try this pre build VM.. if is ok for you to wait to be downloaded 🙂

[radiant jacinth]

Alright, thanks so much! :]

[candid tartan]

np

[radiant jacinth]

Heyy, sorry for spamming about this haha :(( I tried installing w/ the pre built vm and it won't start up for me. When i try to open it, it gives me this msg

tried a couple different network settings while downloading with the regular installer, and that didn't work either • ᴖ • ｡

[south inlet]

Looks like it can't find the file it's booting from.

[radiant jacinth]

Hmm 😶 I wonder why that would happen? I unzipped the file in the same dir I initially downloaded it to...

[south inlet]

It looks like it's in Temp folder, which is a temporary folder, so Windows may have deleted it.

[candid tartan]

did you follow any guide to set it up or ?

[radiant jacinth]

Do you have any idea what would be causing the error with not being able to find a acess a mirror for the machines? I had been having this problem for awhile, and none of the mirrors close to me would work. I tried adding it manually to the source list but that didn't seem to ork either so I couldn't download anything ahaha :((

[candid tartan]

as scrub say. looks some issue in temp folder. did you might try restart pc in this time

[radiant jacinth]

ah, that makes sense

[candid tartan]

also can you copy that error in text form nad post it here

[radiant jacinth]

VM Name: kali-linux-2023.4-virtualbox-amd64

Could not open the medium 'C:\Users\redactedlol\AppData\Local\Temp\6f386a8a-4175-4461-b67c-cd2e64e9c071_kali-linux-2023.4-virtualbox-amd64.7z.071\kali-linux-2023.4-virtualbox-amd64\kali-linux-2023.4-virtualbox-amd64.vdi'.
VD: error VERR_FILE_NOT_FOUND opening image file 'C:\Users\redacted\AppData\Local\Temp\6f386a8a-4175-4461-b67c-cd2e64e9c071_kali-linux-2023.4-virtualbox-amd64.7z.071\kali-linux-2023.4-virtualbox-amd64\kali-linux-2023.4-virtualbox-amd64.vdi' (VERR_FILE_NOT_FOUND).
Result Code:
E_FAIL (0X80004005)
Component:
MediumWrap
Interface:
IMedium {ad47ad09-787b-44ab-b343-a082a3f2dfb1}

[candid tartan]

you using virtual box, not and VMware ?

[radiant jacinth]

Here it is, files being in the tmp folder def. sounds like it could be the reason though! The repo error is just so frustrating, because I can't really find a fix on Google either :((

[radiant jacinth]

Yeah, I noticed I said Vmware earlier on accident i'm on vb

[candid tartan]

ooh

then did you downlaod virtualbox kali pre build

[radiant jacinth]

Yeup :((

[candid tartan]

ok. so you have Vbox kali from kali site. not the VMware one

[radiant jacinth]

Yeah, I downloaded the prebuilt one for virtualbox

[candid tartan]

ok

since the error is for vbox. and is VirtualBox E_FAIL (0x80004005) errors can occur for a variety of reasons. It includes faulty settings in VirtualBox and incompatibilities with third-party applications. Additionally, improper Network Adapter configuration and incorrect configuration files may also cause this issue. The error generally appears after you install a new release of VirtualBox.

one solution ppl do is to run cmd as administrator and run: bcdedit /set hypervisorlaunchtype off

and after command restart pc

[hybrid granite]

When connecting on Tryhackme OpenVPN through their Kali machine, is it automatically connected or I need to setup connection?

[candid tartan]

local kali or kali provided by THM

[hybrid granite]

Kali provided by THM

[candid tartan]

then you do not need to use VPN file at all. kali that THM provide in -browser is automatic connect

[hybrid granite]

Weird, it says I am not connected

[candid tartan]

VPN file, and connection is needed if you use kali on you own pc

[hybrid granite]

No no, It's THM Kali machine

[candid tartan]

it might say that if you dont use local pc with VPN file

if is thm then is not needed to manual connection

[hybrid granite]

Oh ok

[candid tartan]

VPN is needed only if you use you own kali PC or VM local.

[hybrid granite]

Because I get error when performin enum4linux. So I thought maybe it's because I am not connected

[candid tartan]

just be awre that THM kali, in-browser, it can be slow and if you have pooc connection it might get extra slow

you can post you error in #room-help or so, and some will jump in

[little shore]

What error are you having?

[rugged frigate]

Hii, i was using tryhackme Redteam Recon and in task 3, when i do the WHois command in the teminal machine, it shows
''connect: Network is unreachable'' can anyone tell what can i do

[little shore]

In which machine are you running the command from?

[rugged frigate]

attackbox

[summer verge]

post it on #room-help

[rugged frigate]

i used IP today, it still didnt work,

i tried so many times, still no respose

[summer verge]

so wait, asking the same question many times in many places, only will annoy people. It won't work in your advantage. If people didn't answer is because they don't know or they are busy

[rugged frigate]

lol im not saying that i didnt get response from them , i meant the response in the burpsuite machineeee

[summer verge]

I thought you were replying of my msg early, anyways know you know for the next time 😉 😂

[rugged frigate]

no no

[summer verge]

just a bit of common sense, I've been in the game for a long time 🙂

[mighty echo]

best not to assume

[summer verge]

when you assume you make a a... of u and me I know 😂

[grizzled scarab]

i love how people think a spelling trick taught to 8yr olds has anything to do with the meaning of the word

[errant estuary]

I enjoyed the tomghost room very much
I didn't expect 210 points from an easy room. Is there a lot of rooms with bonus points?

[fathom panther]

Yeah, i think ive seen hard rooms with bonus points

[lime fern]

How do you be “quiet” in texts

[open roost]

🤫 🔇

[prisma latch]

no need to yell

[south inlet]

This channel is for people who might be overwhelmed with the speed general can go at, so they can chat in where things are slowed down.

[lime fern]

Oh

[lusty locust]

Count me in

[abstract drift]

count me in!

[rugged frigate]

LETSS GOOO!

[last sluice]

Add me in your friendlist guys

[last sluice]

.

[last sluice]

.

[chrome roost]

Sure

[bleak wing]

Why am I reading all of these like yall whispering😭

[azure wasp]

We are all whispering, its quiet conversation after all

[chrome roost]

Good one

[chrome zealot]

Hi. anyone home?

it is 11 30 pm..... i am whisssssssspering

[bold merlin]

I'd be interested to try

[sharp ivy]

I'd like to join

[prisma latch]

Been going really hard on THM these days and would be cool to do it with others! Def interested!

[kindred creek]

interested

[rough gyro]

I finally took the time to look into the learning paths, I've already covered/had practice with almost all the topics in Red Team/Jr Pentest.

I don't have a lot of available time to work on things, think I should go through the content anyways just to have it checked off and not staring into my soul?

[wind aurora]

Hi. I just started tryhackme for the first time and I can't answer the second task. Can someone guide me, please?

[south inlet]

Second task of what which room?

#room-help also would be better.

[wind aurora]

I solved the task already.

[azure wasp]

@unborn geyser Why have you sent me a friend request? You kind of look like a bot

I have no cyber problems and also friending someone without permission breaks the rules of this server

Ah now you're spamming

[viral rivet]

hey guys i'm new and i was wondering if anyone new how to convert pcap files to viewable files in on chromebook linux

[twin ridge]

What do you mean by viewable? You should be able to open them in wireshark

[lavish valley]

Use wireshark to open pcap file

[civic egret]

Hi 🙂 someone knows a good linux Bluetooth adapter for testing hack devices via Bluetooth?

[sleek creek]

pretty sure i saw some video from john hammond or david bombal talking about which adapters they recommend and for what purpose

[civic egret]

Gonna watch it, thanks

[hoary nymph]

Gave +1 Rep to @sleek creek (current: #1966 - 1)

[bold merlin]

Yesterday, I used the -c option of vim to escalate privilege. Its a classic: vim -c ':!/bin/sh' I suppose the creation of this feature (the -c option) was motivated by a certain need of vim users , but at the same time it seems pretty "overpowered" and easily insecure. Do you think its the responsibility of the developers to avoid giving options like that that could easily become insecure or should the developers create their tool (here, vim) without limiting it, leaving the rest to the cybersecurity specialists ?

[cyan ridge]

what's sh

i don't think that's how it works; if a tool is ment to be used, it will always be able to be hacked. u can do all u want to make it difficult but it will be hackable.
devs are innocent, as this would be impossible to do irl, or they might as well let the user permission to get root directly without vim

-c enable Syntax Highlighting
Open Multiple Files
Search
Highlight
Set File Encoding
vim wouldnt be vim without these -c applications + I'm sure u can abuse anything really in general, like a text editor even without the -c option, it's just one way to do it

also hackers could create a -c if they want, they dont need to wait for devs to create it, it's like inventing a bycicle, they didnt create -c nor rotating wheels to moov, it's like a concept that's already there: it's just a possible way to get root if it's -door wide open insecure, its probably overpowered to be able to moov so fast, but even without creating a bycicle so it doesnt get Unintendedly used ,hackers could create one themselves. therefore creating a new motorcycle instead is as dangerous as delivering it home to hackers, if u don't deliver it, they'll go get it. All about how hard is it to go get it, and not really on creating it or not since they could do it very well if they have the knowledge and time

i talk too much gl reading trought, hope u like phylosophy mess xd haha

[bold merlin]

Actually I am very happy that you took the time to answer, thanks

[hoary nymph]

Gave +1 Rep to @cyan ridge (current: #1966 - 1)

[bold merlin]

Hello everyone, we are searching for people that have already completed an easy CTF to learn and practice together through the easy and intermediate penetration testing learning paths and CTFs. We are already an active group of motivated people and we are trying to grow with people that are committed to learn and practice and already have some basics down. Send me a message if you're interested, talking very briefly about your experience in cybersecurity on try hack me or other platforms.

Feel free to @ me here too

[twin ridge]

It has legitimate uses, and you probably shouldn't need to elevate vim without a password anyways

-c merely launches a command

[viscid crescent]

yo can somebody say waht hackers can do with ip address??

[lime fern]

Loads of malicious stuff. DdoS, accessing your location, your own computer runs off a ip address so they could use that in bad ways to. There’s tons of stuff

[errant estuary]

but with an IPv4 behind couple CGNATs, I'd imagine there can't be done as much as with one public IPv4 assigned directly to your machine

[lime fern]

Yeah it all comes down to the level of security

[twin ridge]

Not that much to be honest

Location can be guessed to within the city or county level, generally not much more precise

DDoS sure, but why would people waste resources ddosing you?

[lime fern]

Games

[twin ridge]

Hmm?

[lime fern]

People ddos all the time in games. Get mad that you absolutely destroy em so they turn into skids

[twin ridge]

Probably more a standard dos than a ddos

[lime fern]

Yes

It’s definitely not like you hear actual groups setting up botnets

Still annoying tho

[twin ridge]

That probably won't last too long in any case, and the ISP will probably start filtering more

[lime fern]

Definitely

[twin ridge]

In any case your IP address won't allow much.

Not much more than a physical address in any case

[lime fern]

So it’s more of a address when your scaling the web

[twin ridge]

Mmhmm

[chrome tiger]

my friend has this old ass youtube account, he lost the password for it years ago and wants it back cause its funny

does anyone know how to get in without the password or email?

[azure wasp]

You contact google/youtube and see what they can do for you

[winged rain]

It depends on how old the account is. If it's before Google acquired YouTube and you don't know the email then the channel is practically lost

Otherwise you would have to go through this: https://support.google.com/accounts/troubleshooter/2402620

[stuck pumice]

Nice try champ

[opal sand]

bro is trying to reverse engineer

[midnight ravine]

I was reading earlier on how exploit development was getting harder and the barrier to entry was increasing. What is the thoughts of people in here? Are we all eventually just going to be searching for web exploits?

[fathom panther]

Exploit development is a small specialized field where you need tons of experience and knowledge to develop particular exploits in the modern world. I think its normal for it to have a high barrier to entry.

[midnight ravine]

interesting, thats what I want to do ideally. Find exploits one day in various systems. Though apparently with modern security features things like buffer overflows are apparently no longer as prevalent. On reddit they were saying that Rust memory safety would help protect from these vulnerabilities. Some even talking about it like a catacylsm of no longer being able to find the low hanging fruit anymore.

[fathom panther]

There are still unsafe coding practices related to Rust.

Plus, its not moreso the programming language but rather the developers who create applications or systems using that language will be the issue.

There will be times that maybe an unsafe function is justified to be used.

[midnight ravine]

yeah this is one of my primary concerns for the field because I dont want to be outdated and outfoxed by a machine

[midnight ravine]

one thing I've noticed here in that the game seems about finding the ways to think outside the box in the rules, and to catch them in a catch-22 security wise.

[bright cedar]

@radiant jacinth you're reading too much fiction again...get back to your cave!

But I do think AI will make it easier for exploit developement; since the AI can try multiple things that would take humans much longer to do

[lime fern]

What happens if I SHOUT in the quiet zone

[frail vault]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 18, 2024, 11:14 PM

[sleek creek]

does anyone know what happens if you make a request to an AP without encrypting the request with the PTK? Does it just fail?

[frail vault]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 19, 2024, 11:06 PM

[twin ridge]

You get muted 😉

[split badge]

is it safe to submit our personal data to THM??

it said for non student so if a student submit their data anyone can see it??

[south inlet]

People can't see this information.

[desert hare]

Anyone who's good with networking understands this?

Linux to Windows(OS Host):
Source: Linux IP & MAC
Destination: Google IP & Windows Mac

Windows to Router:
Source: Windows IP & Mac address
Destination: IP Google & MAC_iR ROUTER

Router to Google Server:
Source: Router IP(ipe_R) & MAC address(mace_R)
Destinaion: Google IP & MAC address

Im thinking its related to ARP

The teacher is not really good at explaining lol, why is there two router(maci and mace)?

[gleaming wadi]

could'nt imagine a more confusing drawing

on the other hand, why shouldn't there be two routers? Maybe there is a "bigger network" inbetween them, idk

[south inlet]

Packet tracer would be excellent for this.

[radiant jacinth]

haii so these day i am looking for penetration testing of hardware and embedded system. like web, Mobile, API penetration testing no more content are available for embedded. anyone is aware of embedded penetration testing. plz share the link, pdf or resources. i have list of attack vector form OWASP top 10 but concept or hands on activity on each test-case is lacking, and no platform provide it.

[molten dune]

Can someone explain me what is the point of tryhackme room initial access when we know that all techniques that are used in that room are impossiblleee to succeed on modern comoputers ?

[short elk]

what do you mean by modern computers? computers on the internet? maybe. computers on an internal network? you have no idea

[molten dune]

I mean, every computer will notice RAT virus when you send to victim, or link with code etc…

Are there any initial access techniques ?

That can evade Antivirus, windows defender etc.

[hidden crest]

Hey is anyone down to join my team for 0xl4ugh ctf on Feb 9th in 2 weeks

[twin ridge]

those aren't initial access

anyways, those are advanced topics that we don't discuss in General

[molten dune]

Then, what it is ?

[frail vault]

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Jan 24, 2024, 2:20 PM

[fathom panther]

Here is the article link for advanced channels

[molten dune]

Thanks !

[real jungle]

Is gobuster always that slow even with the threads set to 64?

[odd acorn]

Plenty of reasons:

• your machine can't handle that many threads
• your connection is slow
• the machine you're attacking can't handle that many requests

[real jungle]

Maybe the 3rd option
I have a pretty good machine and my connection is also good

So there isn't any trick to make it faster?

[odd acorn]

Yes, reduce the amount of threads.
Speed isn't necessarily something you'll always want in this field.

Be patient so you don't break anything and get yourself in a lot of trouble (IRL, not on TryHackMe) :)

[real jungle]

Ok

[quaint basin]

Chances of having 64+ logical cores (one per thread + more to handle everything else your PC is trying to run, without having to context switch) on consumer grade equipment are slim. Assuming you're using a VM on your host, chances of that go down significantly.
Now, granted when you're making network connections you should have a bit of tolerance for context switching as you wait for responses, but regardless, 64 threads is unlikely to be as beneficial as you think it is

That said, if it's a THM machine then chances are it is actually option 3, yes
That and Gobuster is not the fastest option available

Although as Jabba said, speed isn't what you want IRL

[twin ridge]

Yeah but for gobuster chances are that most of the threads are waiting for a response rather than doing anything useful

So 64 isn't entirely out there

[quaint basin]

True

[twin ridge]

Server on the other hand is probably having trouble

[spark sun]

network threads are much more tolerant of context switching than pure processing threads. Approach it from the context of 'how much time is spent waiting for a TCP response at layer2'

[quaint basin]

With a good connection, is the latency there going to be enough to keep a full 64 threads busy though?

Actually, thinking about it, even on a good connection probably

[spark sun]

What's the best cast latency for that, compared to time cost of context switching on the same core

By far the dominating factor should be waiting on packets at layer2, not swapping the PCB

[quaint basin]

Yeah, orders of magnitudes of difference. Didn't totally think that one through -- it has been a long day 😆

[spark sun]

It's all good. It's a thing that 99% of actual programmers don't really think about, until they have to do a high-compute task across a network

[quaint basin]

The interesting thing is though, remember that C++ port scanner I built for uni a few years back? Think you (and Hydra actually) looked over the source code in passing a year or so after I submitted it, so probably 2021/2022-ish.

Part of that was performance testing -- I remember distinctly that the optimal number of threads to have running simultaneously was about 3 higher than the logical cores of the CPU I was running it on

[spark sun]

it should have been way higher than that, honestly

when I wrote a port scanner in python, the ratio was more like 100 threads for every physical core

[quaint basin]

Could easily have been other bottlenecks there -- lecturers didn't hugely care about the results as long as the scientific method was right

[spark sun]

IIRC if you structure the C/C++ network piece correctly, the ratio should be around an order of magnitude higher

[south inlet]

takes notes

[quaint basin]

Oh, the other thing was that it was scanning something on the same wired network though

So network latency would have been tiny

[spark sun]

Also keep in mind that my pyscanner was about on par with nmap for port scanning - no other functionality. I also overtuned the hell out of my code as well

Yeah, that would have an affect - but not as much as you'd think, given how fast the latest 802.11 protocols are

[quaint basin]

I'd expect it to be significantly faster than scanning something over OpenVPN (THM network) though, especially if you're a long way from Ireland

[spark sun]

Tunneling is always going to be slower

[quaint basin]

Assuming that's the context for the original question anyway

[spark sun]

If you wanted to really go crazy with optimization, you'd track how many open connection requests your program has and optimize around expected timeout vs response timings

[quaint basin]

No thanks
Much though I love programming, I don't think I'd enjoy doing it professionally

[twin ridge]

Probably depends on how the threads are blocking as well

[frail rapids]

I hope I'm not talking horsecrap but can't the same be achieved way faster by just doing async socket reads and checking if theres data

bcs then you can send 1000+ packets over 1000+ different socket fd's, and then poll each fd for data in the main thread

then its just a matter of transmitting the right amount of packets so there wont be a backlog of packets to handle

would be pretty funny if this could be done with io uring tbh since there wont be any ctx switching which saves a few ms possibly

[spark sun]

That's basically the technique. I'm the c api, you have to build a bit to manage all those descriptors

[tacit mural]

I have just finished Intro to networking room, this is my first room and it is cool.

[karmic current]

good job

[rapid parrot]

Hi everybody - I'm new to THM and CTF in general - So far I've completed the 'Introduction to Cyber Security' and 'Pre security' rooms - I'm currently doing the 'Complete Beginner' room and going to school (AP degree) where I'm learning about networking/Linux and C/Python programming.
I'm curios about what people set up is while doing THM and CTF's in general and I was hoping to get some recommendations.
Do you guys use a VM with Kali? - Just use the THM attackbox? - Running linux on 'bare metal' ? - Dual boot?

So far I just used a combination of the THM attackbox and WSL2 with Ubuntu.

Thanks in advance!

[neon marsh]

Kali VM just in case you break something on accident. You can turn it off and on to fix it.

[south inlet]

Kali Vm is the easiest, and probably one of the best.

Wsl has networking issues, as good as it may be.

Dual boot, Windows could eat some of the partition, and Kali Linux is a terrible distro to run as a main.

[serene trench]

Not to mention that it also makes GRUB your boot manager, so you have to specify windows on boot, etc.

Yeah, I personally wouldn't drive Kali bare metal. I (personally) install too much stuff frequently that can break it, or where I appreciate having a quick back-up. I use it like a "dev" environment i.e. "let's give this a try...oh it broke something? okay i've got a snapshot for that" - takes 20 seconds to restore"

Kali in a VM will do you just fine. Unless you want to run your own linux distro and add tools accordingly, Kali is well-rounded, and the install process let's you decide how "heavy" you want to make it

As much as I love the AttackBox (as the maintainer) It really doesn't beat your own setup, configured how you like, with the tools you want available on launch

it is super convenient for doing rooms here and there if you don't have access to your environment, or, for example, there are some rooms (especially older) that are generally only compatible with the AttackBox (because more modern versions of the OS make it quite difficult to go backwards)

[twin ridge]

I run Kali off a vagrant-controlled VM, provisioned by ansible to make it easier to kickstart it back up when I invariably break everything

some have also said I was insane though so, something grain of salt

[sonic fog]

I run Kali via a VM inside Hyper-V with checkpoints, so I can revert if anything breaks, which it usually does. Works absolutely fine for me!

Starting to notice a theme here with Kali bricking 😉

[cyan ridge]

what kind of task would break it? can't relate

[spark sun]

I am at the point where it's easier for me to standardize my tools with ansible playbooks and roles - bringing toolkits like kali into a 'secure boundary zone' is more hassle than it's worth, when i can use the company standard distro and install from git with a lot less hassle (because I can throw everythign through the CI/CD scanner to validate the tool doesn't have any known malicious stuff in it)

[serene trench]

Yes yes and that’s a good call. However, it’s a lotta work & overhead for the average “home” user 😁

[cyan ridge]

how do u get the exact same lateral bar on the right on kali or parrot? got used to it

[lament furnace]

Hi all. So im getting kinda deep into this and looking at what others are saying, i am realizing a lot of people are talking about taking notes. I haven’t taken any 🙈🙈😬😬

I have always been a if i dont know how to do it, ill google it and figure it out that way kind of person. Learning the core concepts on how to do things, fundamentally understanding it, rather than sweating the specifics that i can always reference later. Am i setting myself up for long term hacking failure if i am not taking notes?

[cyan ridge]

same

[summer verge]

Taking note is proven useful, but every person it a world, so you have to do what works for you, but my advice is that before you dismiss taking notes completely give a shot, and see if works for you, you know what people say don't knock it until you try it. 🙂

[tacit mural]

I have just completed wiresharkthebasics room. If anyone will ever forget how one can go to a certain packet, or apply a simple filter, hmu.

[cerulean saddle]

yay thats epic!

[tacit mural]

Notes are an extension to your brain, not only a paper database for specifics 😄 A mind map so you can brainstorm with yourself, an ordered list of actions you've taken before you got into a bug. Procedures you might not want to think about all the time you do them, so you can write them down and reconsider each part individually at any time. The beautiful thing about notes is that they come up in a different form to serve a different purpose 😄

[cyan ridge]

u r very smart

[tacit mural]

I have completed a room called furthernmap. Nmap looks like a very advanced tool, it sure will take more than one room to master it. I will buy Gordon "Fyodor" Lyon's book "Nmap Network Scanning". Having a physical point of reference would be very comfortable.

[frail rapids]

If you have to run kali as vm because you're afraid you could break something, you shouldnt even think about dual booting linux

It takes one big screwup and you accidentally corrupted the disk with your other os (i.e. windows)

[south inlet]

I didn't say about breaking Kali.

Kali is very easily broken, it's nothing to be afraid about.

However I've heard far more reports of Windows eating up the partition data.

Thus, breaking the Kali.

[spark sun]

What's more likely to happen is that a windows update rewrites the boot partition with the windows boot loader. Unless one understands how the boot partition is structured and is willing to put up with fixing it, strongly recommend no one dual boots from the same drive.

[south inlet]

My main point was, in a VM, Kali is far easier to run.

[tawdry dove]

This

Dual booting is antiquated, VMs are super easy and save a ton of headache

[rapid parrot]

Thanks for all the answers so far and your insight! 🙏

[radiant jacinth]

Is there somewhere I can access the answer sheets?

[lime fern]

As in answers for rooms?. If you really can’t figure it out google the thm room. Or if you just want a hint and you figure out the rest ask in #room-hints

[radiant jacinth]

Ok

[sleek nova]

What's everyone's programming/cybersec music taste?

Heavy metal, electronic, classical?

[rapid parrot]

Check out Nerdcore - Ohm-I & ytcracker

[near valley]

Yes.

[vapid oyster]

@sleek nova https://www.youtube.com/watch?v=D1NdGBldg3w

[lament tangle]

https://www.youtube.com/watch?v=dQw4w9WgXcQ

Thanks to the /flags directories on the machines.

[hoary nymph]

Gave +1 Rep to @sleek nova (current: #1982 - 1)

[civic root]

:hammer: ryan.l4#0 has been banned.

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[spare sun]

kpop lmao

[cyan ridge]

north or south?

[spare sun]

explain what the difference is

[cyan ridge]

idk

north is more like classical music

[spare sun]

i do like classical

but i also really like upbeat music

[lime fern]

https://youtu.be/astISOttCQ0?si=uc0acW1FT98iBtli

You know no good music if you ain’t listening to this

[cyan ridge]

🔥

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[cyan ridge]

@dreamy kayak u are community mentor, mentor me

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[dreamy kayak]

is the best mentor

[cyan ridge]

xd

[nocturne notch]

I saw that one podcast you were on recently, damn that video title is pretty badass "#1 ethical hacker"

[candid tartan]

looks like it have 2x size bigger tounge 🙂

[dreamy kayak]

Yeah, they titled it that, but I’ve never claimed that 😂 nice to meet you!

[nocturne notch]

Nice to meet you too, hope you're doing well today

[spark sun]

ollie spam is best spam

[serene trench]

ollie ❤️

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[odd acorn]

@open roost I have removed the YouTube link because the video topic is not appropriate for this environment 🙂

[open roost]

Gotcha my bad 👍

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[simple oak]

can any one intresting in making CTF team or any one need partner beginning well suffice

[tawdry slate]

MailAddr: [e-mail]
IP Range: 10.200.X.0/24

These details are now active. As you can see, we have already purchased a domain for domain squatting to be used for phishing.
Once you discover the webmail server, you can use these details to authenticate and recover additional project information from your mailbox.
Once you have performed actions to compromise the network, please authenticate to e-Citizen in order to provide an update to the government. If your update is sufficient, you will be awarded a flag to indicate progress.

“How can i access this email. I have already breached the perimeter but am am not able to access webmail “

[cyan ridge]

what is it, a ctf?

[azure wasp]

Seems like something from the red team capstone? If so then #red-team-capstone-challenge

[south inlet]

There is multiple ways to get to the webserver mail.

[wintry hazel]

Hi, i'm kinda new to all of this (it's been 30 day since i started)

I that recommanded to set up a personalized attack box ?

If yes, any walktrought vidéo to recommand for that kind of stuff ?

I would also take any youtube channel recommandation 🙂

Thanks.

[little shore]

As you are still learning, personalising your own VM might be tricky (unless you have extensive Linux background or experience). Using a pre-built Kali in a VM would be ideal as you can play around with it as much as you'd like.

[wintry hazel]

Ok so just using a prebuilt kali could be a good strating point, do i understand it correctly ?
How could i learn and improve starting from something like that ?

[little shore]

Yes, you can download a VM image from OffSec's website. As you install or add tools in your VM, you'll understand the dependencies or requirements for each, the use of reliable sources in your source.list, compatibility issues, etc.

[opal sandal]

Hello,

I'm new here, I've just had a look around the websites for the time being, I haven't done anything big myself yet.

I have one question: can I use the website and the exercises free of charge or do I have to pay a fee to continue or do I have to pay a fee to unlock certain tasks?

Thanks!

[serene trench]

Welcome 👋

Approximately 70-80% of THM is free, just create an account and go 🙂

There is subscriber-only content that will required purchasing a subscription however

[opal sandal]

thanks! 🙂

[hoary nymph]

Gave +1 Rep to @serene trench (current: #8 - 800)

[wintry hazel]

Honestly it's so well made that it's addictive, you just dosn't stop to learn.

[midnight ravine]

I gotta say, I am really enjoying all the various practice boxes. They can be tough at times but once you get the ball rolling and get everything together its quite devastating on unsecured systems and very fun!

[opal sandal]

ok, sounds good. - i will test it this weekend 😄 🙂

[hardy moon]

I am as well, sometimes they make me question my mental capabilities, being new to cybersec and terrible at web apps. MR robot CTF gave quite the challenge and I just rooted it and it made me super happy. It also helped me understand where to focus on my studies.

[wispy turret]

Hey! Has anyone here ever taken coding/cybersec bootcamp courses or does anyone know much about bootcamps? I'm trying to find the right one for me to sign up for next year. Any tips would be great! 😄

[radiant jacinth]

I heard thaht the Bootcamp "Le Wagon" is a very good one. You can find some information online, a lot of reddit posts also. Also some Countries take the course fee themselv so its totaly free for you.

[wispy turret]

thank you! I'll look into it!

[hoary nymph]

Gave +1 Rep to @drowsy swallow (current: #1319 - 2)

[radiant jacinth]

I dont know from which country do you are. So i know a lot of them in Germany also.

[radiant jacinth]

I don't think it's worth the money paying for a cybersec bootcamp, U can get a lot of knowledge from various platforms like HTB, THM, portswigger academy, medium articles, people in discord .... for coding u can use books and leetcode problems to get familiar with algorithms and data structures ... you just need to organise your time

[nimble kiln]

Does anyone know any good CTF challenge rooms on THM for practising Windows privesc? Most of them seem to be Linux based. It's hard to find something good.

[south inlet]

Search windows

[summer verge]

depends on the person, it's true that there are a lot of good info out there, but it's spread all over the place, some people need more structure, hence those courses.

[lament tangle]

I'm curious about something, do hackers try to exploit a router to gain a shell inside the router's operating system and try to escalate their priveleges to gain full control over the router and do such things like MITM and stuff? If every technological device is infact a computer, this must be a thing right?

[mighty echo]

MITM isn't really great considering everything has TLS/SSL these days

[spark sun]

it's possible, things like that tend to be patched immediately

[lament tangle]

So technically an old tech device can be turned into a hacking lab, interesting. Thanks!

[hoary nymph]

Gave +1 Rep to @spark sun (current: #10 - 723)

[spark sun]

There are way easier ways to learn those techniques - any equipment known to be vulnerable will have been EOL and decommed for quite some time. As a leaerning exercise, it's probably decent? But your time is probably better spent on other things

[lament tangle]

I have an old range extender in my home and I got this idea to try to exploit inside it to eventually use it to intercept signals and poison the traffic etc. for learning purposes of course. That's why I asked hehe.

[spark sun]

Unless you have a EE B.Sc or are extremely knowledgable in signals processing and encryption, a hugely uphill struggle.

[barren cloud]

Hello
I would like to ask for a coupon for premium access
Thank you

[little shore]

70-80% of THM's content is free. You can dive in on those while saving up for premium.

[barren cloud]

That's true but still
I want to have access for the paid one.
Anyone can provide me with a coupon.

Thank you ❤️

[fathom panther]

A coupon is $14 only

[barren cloud]

What do you mean?
14$ in my country currency is way more

I am not from the US unfortunately

We are living in different worlds
Please some respect to others

[smoky mortar]

Hello, there are no discount coupons. 🙂

[barren cloud]

Ok thanks admin for letting me know
But how to receive one in the future?
I hope you can make that happen

[hoary nymph]

Gave +1 Rep to @smoky mortar (current: #15 - 425)

[rigid briar]

I'm thinking about TLS every time I solve thm chellenges where you using http connection. Is it worth spending time on this if there is TLS/SSL everywhere?

[mighty echo]

TLS solves some issues, but it won't really help you much with other web exploits like XSS, SQLi, CSRF, SSRF etc

[wintry hazel]

Hi !
Anyone know a website or smth that could help me to master networking fundamentals trough exercises, like thm make us practice hacking trough rooms ?

[lime fern]

Did you already do the networking fundamentals in the thm path?

[wintry hazel]

yhea, I did all the fundamentals, but i want to master them so i can remember them naturally and instantly.

[vestal gyro]

Maybe the networking courses on Cisco Network Academy is something you could try?
https://www.netacad.com/courses/networking

[wintry hazel]

i'll check it out

thanks

[vestal gyro]

No problem, I'm happy to help.

[summer verge]

https://skillsforall.com/ also part of Cisco has a few network courses

@wintry hazel https://skillsforall.com/career-path/network-technician?courseLang=en-US

career path of 4 courses for free 🙂

[rich dragon]

Hey guys I just completed the Linux fundamentals and I want to put knowledge to practice is that enough for joining the rooms or I need to go through the network staff and tools. I'm little bit confused here

[lime fern]

Nope you can start doing rooms when ever you want. Most rooms that say easy actually explain what you have to do. But once you start doing harder rooms it slows down

But it’s always good to have knowledge on the rooms

[rich dragon]

Does anyone know some rooms in THM for practicing Linux skills

I do have a question though can you connect to the THM machines remotely from your virtual machine

[south inlet]

Yes, you need to be connected to the VPN

[frail vault]

Getting Started with OpenVPN

Article Link

https://help.tryhackme.com/en/articles/6611809-getting-started-with-openvpn

Feb 12, 2024, 7:09 PM

[rich dragon]

Does it require any subscription or something like that

[south inlet]

Not at all 🙂

[lethal zenith]

Hello, i have question. I preparing for my master degree thesis, i want to prepare IDS/IPS test enviroment. I want to use some tools to generate traffic in the network(simulate DDOS attacks or something). I find the metasploit framework, can you give me examples of tools what can i use to make analyse for my thesis?

[south inlet]

We don't help with coursework

[burnt night]

@warm wind keep it appropriate for an educational environment

[surreal bolt]

Can anyone please tell me, How can I master in Microsoft defender for Endpoint and Splunk Enterprise? I didn't get the right material?

[round kraken]

Hi

[fathom panther]

what do you mean by you didnt get the right material?

mastering it involves actively working with the product

[summer verge]

There are a few rooms about Splunk, used the search function on the site, also the best way to master is use it. Practice makes perfect

[surreal bolt]

I mean right sources

[summer verge]

did you check their websites?

[round kraken]

Guys

[surreal bolt]

Okay

[cyan ridge]

yes

[round kraken]

What's up

[deep palm]

Hi. I’ve made the decision to pursue cyber security as a career but I’m having trouble as to where to start. The amount of information is overwhelming and there’s so many mixed opinions in terms of gaining a successful career in CySec with or without university.

For a bit of background, I’m from the UK. I have decent foundational knowledge in IT and did hardware and networking with Cisco CCNA in college about 6/7 years back (do not remember a thing). I’ve now decided that this is what I want to pursue as a career, so to be on the safe side, I’m classing myself as a complete beginner as I don’t want to skip things just to have gaps in my learning.

As I stated before, the vast amount of pathways in CySec and the information surrounding the different fields is very overwhelming. I’m not sure where to start. I’d really like to speak to someone who is willing to help and has maybe been in my position? Thanks

[dusty zodiac]

I'm in a somewhat similar situation. My 2 cents is ot just start without too much thinking.
I've started with the goal to finish some learning paths to build some hands-on experience and have a very rough understanding on the tools at disposal.

[deep palm]

Yeah, I’ve started as well - paying for the monthly subscription. It just feels like I’m trying to manoeuvre in a desert without a compass. It’s a daunting feeling.

[twin ridge]

That's where the learning paths should help. Otherwise I'd just do whatever seems interesting to learn 😉

There's no wrong way to learn

[deep palm]

My question is though, is THM the only thing I should use to land a job in CySec?

[fathom panther]

That's subjective, but imo it takes a bit of skill and luck to land a job

The biggest factor is referrals

[twin ridge]

nah, it helps though

[deep palm]

So what else? That answer doesn't really help as I already explained I'm getting overwhelmed by the amount of information out there

[twin ridge]

then break it down, what do you want to learn?

specifically

the rabbit hole goes deep in infosec

[long geyser]

It's similar to any field that you would want to get a job in (aside from those low barrier for entry jobs like busser etc.) If you don't have an initial start in the field, everything will be overwhelming. You need a general understanding of IT to begin to delve deeper into the many branches of information security. As you've said, you have the foundational knowledge and have gone through CCNA, so you should maybe take a look at Network Engineering positions and see their responsibilities and see whether you can find yourself in them. If you can't, but see something that interests you, look at what positions in the cyber security world do those activities and start narrowing it down from there if you are uncertain of where you want to go.

I imagine it sort of as me being young and seeing someone do something cool and me wanting to do it as well. So it would be easier for me to see a job position and try to imagine myself if I want to do that.

Try to look at job adverts wherever you want to work at and start from there, but that's just my opinion.

As you are already on TryHackMe, try to do different types of challenge rooms, from phishing, log analysis, to web ctfs etc and see what tickles your fancy.

Try to pick a random easy room, look at the tags and start exploring from there.

Research is a HUGE part of the industry, so you need to pick that skill up ASAP.

[radiant jacinth]

Anywhere where poeple dont care about age when hiring and also accepts free work?

[south inlet]

About age...

How old are you?

[radiant jacinth]

15

[long geyser]

If you are in school, you can ask around if they need IT help in any kind, for sure you can volunteer there.

Also reach out to family members and offer help with thingies in the case that some of them are running a business/group/club etc.

Don't know what type of free work you want to be doing though so I guess I'll stick to those answers.

[radiant jacinth]

Thanks

[frail rapids]

what I did back in the day was checking for bugs in commercial platforms only students have access to since less people will be able to perform security testing

think stuff like learning management systems

I was fortunate enough to land a job at an LMS, and pivoted from there

[frail rapids]

at your age it is more about connections than spray-and-praying jobs on indeed/linkedin

so I'd just slide into dms of some lead devs at some national/regional places, and mention you're a student and mention your skills. if you're lucky they will offer you some sort of job which is a bit symbolic but also important, kind of like an internship

and once you've landed that, you got yourselves a shot at other, more high-profile jobs because you got work experience

[radiant jacinth]

Okay

Thanks alot

And what do i do if i have nothing to show my expierence i have a red team learning path cert from tryhackme but thats about it

Ok

[frail rapids]

again, do not do anything illegal in the process

[radiant jacinth]

Ill have to check the laws for computer access

Like i cant dos them and stuff but maybe i can do some active recon?

[daring vapor]

It’s best to search if there are any bug bounty programs for this software, otherwise it still could be illegal

[radiant jacinth]

Will do

[frail rapids]

or security.txt and responsible disclosure policies

bug bounty programs are a bit unrealistic for this purpose

considering most programs are mass scanned and the chance of getting a job at the same company as a result of the disclosure is greatly reduced

[radiant jacinth]

Is security.txt responsible for all user interaction and permission?

[frail rapids]

security.txt contains an email address for security disclosures

and optionally the url to the responsible disclosure policy

[radiant jacinth]

What if i found a site without security.txt?

[last trellis]

hey guys, someone here have ever had a burnout or impostor syndrome?

I had study security like 2 years. I stopped study in this month beacuse i feel like my mind is gonna blow up at the same time i understand the theory but in practice i feel like a nerver used a computer., maybe i'm with impostor syndrome, idk.

so if someone have any tips, please share if me.

(sorry for bad english, i'm not used to writing in english 😦 )

[radiant jacinth]

Everyone goes at their own pace

[radiant jacinth]

Do you have an established path?

[last trellis]

maybe, i started with pentest, i bought a course here in brazil called desec security, they have a certification called DCTP (Desec Certified Penetration Tester) for jobs in brazil some company ask for this certification. Now I'm about to finish the first part of the course.

but when i finish buffer overflow topic i started seach for exploits in desktop apps and gaming hacking, so at this point the things get a little bit harder.

do you have any advice for a pentest path ?

(DCTP is a exam in portuguese and It's something close to OSCP exam)

[radiant jacinth]

My guess is that you should complete that course since you already paid for it, I'm guessing that you're going for a Pentest position, however, I'm afraid that's not an entry level cybersecurity and that might be a frustration in the future since they're going to ask you for years of experience beforehand.

However, if this is a on-site learning platform, talk with your teachers and study the job market in Brazil, you might be able to see any other remote positions within South America or Portugal ( SOC Analyst positions work around the clock, so this might be a good bet)

Get good at networking, consider taking the CCST Networking on Netacad, which learning is free and the exam would be around 100$ if you're willing to take it

And network (meet other professionals in your area) if you can, this last thing helped me a lot in order to see which direction to take, and a possibility in the future to further increase your chance of landing a job

Oh, and learn at least one language for automating, Python would be a good bet

[radiant jacinth]

@frail rapids

[last trellis]

thanks a lot for the help ❤️

i'll do this, i know a automating language, now a days i work with python so the only thing i have in this list is python 😄
here in brazil most of the postions are in the blue team and appsec, we have some pentester but most of the pentester are working in USA or Europe.
for a entry level postion we dont have for secutiry jobs, most the jobs are for mid+.

but thanks for the help, i will do what u say

[hoary nymph]

Gave +1 Rep to @ebon prism (current: #1321 - 2)

[gentle jolt]

@gritty latch

[brave bane]

anyone know anything abut cyber sec red teammin

i did BT for 1 an a 8 month

i mean 1 yr and 8mnth

[brave bane]

learn python like ez languages

and then follow some cyber sec experts

and enter a community like tryhackme or htb

sorry for ||htb|| im soo sorry cuz i just wanted to help

@radiant jacinth this is the advice for u

welc

sohh

anyone know rt's

im new to the line

[radiant jacinth]

Can I Do Fake AP and deauthenticate clients In the same Time With only ESP8266?

[odd acorn]

This is restricted to the advanced channels given your reputation of asking unethical questions.

[radiant jacinth]

I found the answer

[ashen moss]

hello there

[soft pier]

@burnt night ⬆️

[civic root]

:hammer: snazzyhype#0 has been banned.

[soft pier]

thank you james again

[radiant jacinth]

Annyeong haseo

[foggy star]

how is everyone?

[slender coral]

pretty good

[foggy star]

thats good buddy

[slender coral]

what about you? :)

[foggy star]

cant complain. the sky isnt falling so im good.

[slender coral]

sounds good to me

[foggy star]

yes sir. whats your plans for today
?

[slender coral]

idk really, 've been procrastinating, which is I guess not really good 😅

just sometimes have these boring days when I ain't doing anything

[foggy star]

dont we all? i get like that sometimes

[slender coral]

for real yeah

[foggy star]

i got a new computer chair so i got to put that together lol

[slender coral]

oh that's cool!

I guess I'll finally get a second monitor for my birthday

[foggy star]

funny you say that. my buddy john got a new monitor for gaming

[slender coral]

what's the resolution?

[foggy star]

the one that curves WQHD 3440x1440

[slender coral]

oh dayumn

that's pretty good ngl

[foggy star]

yeaah pretty sick

[slender coral]

yeah lol now imagine mine is a cheap LG 1920x1080

[foggy star]

mine are old too. like 10 years old lol

[slender coral]

classic ahah

[foggy star]

i know right! lol

i got to go and pick up my computer chair. i will talk to you real soon!

take care!

[slender coral]

see you have fun!

[foggy star]

hows it going?

[slender coral]

not bad

were watching Sherlock

[foggy star]

awesome. im just doing some studying for net+

[slender coral]

oh cool man! wish you luck with the exam

[foggy star]

thanks man. what do you do?

[slender coral]

well, I am trying to learn something on thm (like basic cybersec)

also I learn C programming

[mystic tulip]

I am learning C/C++, Java and cyber security from certification courses and tryhackme

Any recommendations on rooms which I should check out on tryhackme?

My level on cyber sec is beginner - intermediate

[slender coral]

it's a separate resource, but you may try completing Mr. Robot room in Vulnhub

I heard from people it's on somewhat intermediate level of skill

[foggy star]

same here. im just starting out. im a journeyman welder by trade. i like playing with computers on my sowntime

[mystic tulip]

I have quite decent understanding of Linux, I have been using Linux for a few months now

[foggy star]

goodjob!

[mystic tulip]

I have heard of it on a network chuck video iirc

Couldn't try due to a tight schedule

[slender coral]

oh, i'm using it as a main OS

i use arch btw

[foggy star]

niiceeeeeeeeeeeeeeeee

[mystic tulip]

Nice