quiet-conversation

[wind comet]

Hi everyone, i have a question, did thmhave a public api? i wanted to use it to get my own account information in real time to upload them on a portfolio

[weary meteor]

Click on your profile picture > Get profile badge ID > First one is live 😄

[wind comet]

ohhh haha i didnt saw, thanks !

[weak notch]

good day fam, anyone with ccst cybersecurity exam dums please share

[weary meteor]

Please don't use dumps 😉

[weak notch]

please advice

[weary meteor]

There's no point of getting a cert if you're going to use dumps . You won't prove knowledge of the subject that way , you will memorize answer patterns . I 100% disagree with that 🙂

[weak notch]

noted thank you ,will have to stick to the right method

[maiden zealot]

Hi Everyone,

Quick question:

I’ve gained some certifications and skills in ethical hacking, and I’ve been wanting to try out bug bounty hunting. However, I feel a bit lost. Most of my experience comes from CTFs or school assignments, where there’s always a clear path or you know exactly where to look (Or they give you a clue in the right direction).

In bug bounty hunting, you start from scratch, and the targets are often high-level companies that surely have the basics of security covered. How do you even begin in this field?

What has your experience been like?

[weary meteor]

They don't have to be high-profile companies a lot of smaller ones have bug bountry programs 😄

[weary meteor]

I don't know particularly for CCTS but many certs have official preparation exams , try to check those 🙂

[maiden zealot]

Any websites you recommend to check out for those?
Personally only familiar with hackerone, and on those i see the big companies only (NBA, Netflix etc)(Way out of my league haha)

[weak notch]

will do check but what ive seen sofar are demo's with few questions to attends to

[weary meteor]

Hacker one , Bugcrowd

Try to search for newer programs or smaller bounties 😄 . Also check out https://discord.com/channels/521382216299839518/743858961593139361 channel 🙂

[maiden zealot]

👌🏼 I will, thank you sir 🫡

[brisk folio]

F in chat for my streak 🥹

[rose lark]

f

[weary meteor]

You can ask support to recover it 🙂

[brisk folio]

Is that not against rules? I lost track of time and didn't have a freeze equipped. It's on me I feel like.

[weary meteor]

I think it isn't 🙂 . They restored some streaks in the past , you only need to be ask asap 😄

[brisk folio]

I`ll give it a shot, do I ask them on discord or send an email?

[weary meteor]

Send email to || [e-mail] || 🙂

[brisk folio]

Thanks!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #11 - 767)

[sinful vault]

Same...bug bounty programs are not beginner friendly unfortunatelly, it takes time to even hope to earn something. Finding a job is hard even for people with bachelor, master, certificates, experience and referral letter and I don't really think the market will get better...

[nova tree]

No system is completely secure, even though companies may cover basics, your job is to think like an attacker and find any gaps or cracks they missed, my suggestion is that you start small even if you don't find any critical bugs, as well as building a solid foundation

[brisk folio]

Furthermore, the thing with large companies is that while they might have more resources to delegate to cybersecurity, they also have more moving parts, more staff to train, bigger network to protect, more assets to catalogue, etc. The size of the target on their back grows larger and larger exponentially, so you shouldn't necessarily give up in the face of large corporations (as long as you do it legally, ofc)

[amber crow]

Thanku brother

[zealous jungle]

[void badger]

im in the corner

whut

[void badger]

tryhackme time, well wishes y'aall

[weary meteor]

Happy hacking 😄

[void badger]

enjoying the struggle

[stoic copper]

hello

good day

Am new here and my name is robert

Am here to learn more about hacking

[onyx pike]

Hello

I'm looking to learn more as well 🙂

[shadow jacinth]

what are you hacking for $10?

[fierce ocean]

wth is going on over here???

[weary meteor]

@south inlet

[south inlet]

We're not hackers for hire my dude.

[astral hull]

I got a question guys did anyone ever analysed a malware with themida?

[south inlet]

Hi there, malware analysis is restricted to our advanced channels.

[frail vault]

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Dec 6, 2024, 4:08 PM

[astral hull]

Oh okay I didn't know that, apologizies

[granite mesa]

You pull this from the Mayors repo lol

Anybody using arch and displaylink dock? If so roll back linux kernel to 6.11 lol new upsate brokw everything

[marsh nymph]

Hello

[edgy widget]

hi need help .............udo apt update
Hit:1 http://http.kali.org/kali kali-rolling InRelease
Get:2 https://ppa.launchpadcontent.net/i2p-maintainers/i2p/ubuntu noble InRelease [18.1 kB]
Err:2 https://ppa.launchpadcontent.net/i2p-maintainers/i2p/ubuntu noble InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A6D4480DE82574BB NO_PUBKEY AB9660B9EB2CC88B
Warning: GPG error: https://ppa.launchpadcontent.net/i2p-maintainers/i2p/ubuntu noble InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A6D4480DE82574BB NO_PUBKEY AB9660B9EB2CC88B
Error: The repository 'https://ppa.launchpadcontent.net/i2p-maintainers/i2p/ubuntu noble InRelease' is not signed.
Notice: Updating from such a repository can't be done securely, and is therefore disabled by default.
Notice: See apt-secure(8) manpage for repository creation and user configuration details.

[tawdry dove]

Have you conducted a query utilizing your favorite search engine?

[quasi apex]

Guys, what is the difference between a Web-based Kali Linux machine and the AttackBox?

[nova tree]

You don't have to manage or maintain VM because everything is hosted on a web, unlike attackbox which is far more better with specific configurations, either connected via RDP or SSH

[weary meteor]

AttackBox runs on Ubuntu and have fewer tools , Kali is more robust 😄

[south inlet]

The web based Kali machine is also maintaned.

[alpine minnow]

Hello, after I finish jr penetration path where I can practice? or i should enroll in another path before i start practice

[weary meteor]

You can start with some easier CTFs 😄

[placid depot]

Hello everyone, I think this is a good place to talk about it because something has been bothering me for a few months now, it's the fact that I completely lost my passion for cybersecurity and computer science in general, and I would like to "get it back" but I can't seem to find how.

I've been thinking about why that could have happened and tried some "friendly projects" with the only goal of making me passionate again, like following tutorials to code an AI that plays mario bros on NES, or even the advent of cyber. But i'm kinda ashamed to say that I think IT annoys me now. I still do it as my job and i'm fine with it, but a year and a half ago I was working almost everyday on something related to cyber, and now if I don't force myself nothing happens and I don't take that much pleasure anymore

Sorry for the big text, but I just wanted to know if anyone had experienced a similar situation and if you had tips to make it better

[fleet siren]

Pill, take a chill guys.

[tawdry dove]

You're burnt out. Find something outside of computers/schooling and do that. Club sports, hiking, etc etc

[daring sierra]

Hi everyone, I need to do a interview project for college, and I need someone who already work in cybersec. The project is just basically answering some questions related to the career and the writting. Thank you!

[south inlet]

Hi, we don't help with school work in this server. 🙂

[daring sierra]

Ah okay :), I didnt know

[grave bridge]

What do you call a lazy kangaroo

[summer verge]

A pouch potato 😂

[quaint basin]

It should be a lazy baby kangaroo though. Or a lazy Joey to an audience who would understand that

[summer verge]

@grave bridge What do you call the opposite of a lazy kangaroo?

A kanga-do!

[grave bridge]

I found a dad

[summer verge]

I know a lot of dad joke, but I'm not dad at least not that I know of, nobody has come knocking to my door yet 😉 😛 😂

[odd plank]

I just had a nightmare i got hacked and everything was targeted and it did the hacker movie thing where my monitor had skulls on it.

[stoic copper]

Hello good day here, please is anyone here among the Lazarus group?

[crimson lark]

anyone here doing aoc 2024?

[south inlet]

Probably not 😅

[hot orbit]

I am

[crimson lark]

have you completed day 5

[static anchor]

im having issues with aoc day 5 where it seems like im not able to access the wareville wishshop through burp

[weary meteor]

Turn off Interceptor in Burp 🙂

[ionic hearth]

[weary meteor]

Yes , do you encounter any issues 🙂 ?

[static anchor]

omg, i think i have ben trying to figure it out for almost an hour or two
thank you 🫡

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #7 - 1017)

[crimson lark]

not any issues but a confusion

[weary meteor]

What's the problem 🙂 ?

[crimson lark]

in Task 11, how can we see what's written in wishlist.php code

after we click add to wishlist, it is written that an AJAX call is made to wishlist.php....

then the XML format

and then it is written that wishlist.php accepts the request and parses the request to following code....

//the code//

my question is how do we find out //the code// from the website

<?php
..
...
libxml_disable_entity_loader(false);
$wishlist = simplexml_load_string($xml_data, "SimpleXMLElement", LIBXML_NOENT);

...
..
echo "Item added to your wishlist successfully.";
?>

This is the code mentioned in the challenge

[weary meteor]

That's just an example of how vuln. code could look like , it's common to see such code snippets in lessons so that you know how vuln. code could look like if you're performing white-box assignment or you stumble across source code during black-box assignment 😄

[crimson lark]

ohk...... wt are white box and black box assignements btw?

and the payload mentioned in tthe website is made as an assumption that the following code might be parsed by wishlist.php?

ok i got the basic overview of white box and black box

[weary meteor]

In white box assigment you're given the whole picture of the vulnerable app 🙂 . You're given access to the source code, network diagram, some history about the the app,... In black box assignment you don't have any prior knowledge of vulnerable web app server ( you need to manually explore it and see how everything functions ) 😄 . You can learn more about it in the Task 4 of the following room 🙂 .

https://tryhackme.com/r/room/pentestingfundamentals

[crimson lark]

thanks for such a descriptive answer ❤️

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #7 - 1018)

[crimson lark]

wtf... there's a leaderboard for this........ that's great

[weary meteor]

It's , funny little gimick 😄

[crimson lark]

[radiant summit]

Hi everyone,
I’m looking to join a team focused on ethical hacking and cybersecurity. I’m currently pursuing a BSc in CSE and am at Level 10 on TryHackMe, where I’m actively learning and practicing.
I’m eager to connect with like-minded individuals, whether beginners or advanced professionals, to share knowledge for each other’s growth. Building friendships with others passionate about cybersecurity would mean a lot to me. basically i need some friend to motivate me and other also in this line,,,,,,,,,If you’re interested, let’s connect and grow together in this exciting field!

[odd plank]

Does anyone else set youtube to 3x speed and watch tutorials

[autumn pike]

Mine is 2x

[remote yacht]

@odd plank @autumn pike
You don't both don't use 15x?

[uncut flower]

Hey everyone!

I'm TGoldenBoy, and I'm excited to join this community! I'm looking to make friends and learn more about cybersecurity. I'll be starting with SOC studies and plan to dive into Pentesting later on.

Looking forward to connecting with you all!

Cheers, TGoldenBoy

[weary meteor]

Hello TGoldenBoy , welcome to community , glad to have you here 😄

[uncut flower]

Thank you Sir

[onyx pike]

thank you. i am actually in IT but would love to explore more ethical hacking. i have tried a few 'easy' boxes but found them hard 😞

[hoary nymph]

Gave +1 Rep to @rocky mural (current: #2462 - 1)

[shadow dragon]

are you in the practice rooms or learning rooms?

[onyx pike]

practice

[shadow dragon]

do learning rooms first, in my opinion

I've been doing learning rooms and it's been tedious, whereas progress has been slow but coming along! keep in mind, I've been putting in some effort so it depends on the user, if that makes sense

[onyx pike]

i do understand the basics, its just more learning the tools and how they work for reconnaissance, enumeration

ill go through some of the learning stuff. thank you❤️

what ive noticed in the learning parts its just more theory rather than practical in regards to the tools that are going to be used. is there a path that explains the tools and how/when to use them when doing a CTF? or should i just do boxes with a tutorial on the side and follow along

[shadow dragon]

the learning rooms include both, just stick to the roadmap and you'll see what I mean. again, it's tedious af but worth it in the end, esp since you can do rooms, which is sick af

[onyx pike]

alright thank you bro ❤️

[hollow wing]

I want to become a hacker, what should I do?

[inland stirrup]

Join THM (it is the best investment you will ever make, then think, eat, drink and sleep Cyber. 🙂

[earnest void]

Hi, I am into Cybersecurity Governance job already.
But want to learn and grow more into the field.
Using THM for a while now(not much consistently)
Want to know the right approach to roadmaps and rooms.

[weary meteor]

You can follow roadmap from THM 🙂

https://tryhackme.com/r/hacktivities/

[pure wagon]

Read and watch everything you find about hacking online

[crimson lark]

how do i fix frequent disconnection to attackbox?

[fair vine]

do you receive any kind of error message?

[crimson lark]

no it just says disconnected and prompts for reconnection

after reconnecting it opens to the same screen though

nvm.... it didnt happen after i connected to another wifi

might be wifi issue

anyways thanks for the reply

[fair vine]

no problem, sorry i couldnt help further

[crimson lark]

no issues,.,.

BTW another question........ i am doing aoc 2024 everyday, and at the end of tasks it suggests rooms to complete if i want to dig in into a topic..... as a beginner should i do them right oW?

there are some machines which are on medium difficulty,,,, should i do/try them?

[fair vine]

you can always try

most of the times in rooms they tell you prerequsite knowlegde often with a link to a room

[crimson lark]

ahhh yeaa... thnx

thanks

[fair vine]

and if you feel like the rooms are too difficult you can always do some external research or return later at a date

and people are always here to help with any rooms that are on tryhackme

[crimson lark]

why didnt that yagpbd thing came off

[fair vine]

if you want to give someone rep you gotta reply to the message or ping them in the thanks

thanks @crimson lark

[hoary nymph]

Gave +1 Rep to @crimson lark (current: #2465 - 1)

[crimson lark]

thanks @fair vine

[hoary nymph]

Gave +1 Rep to @fair vine (current: #349 - 16)

[fair vine]

thanks

and this should also do it but it has a 5 min delay i think between reps

[radiant jacinth]

@worthy jackal i found gold out of nowhere

i was looking if codecademy had any cool golang cybersec related projects

and saw they released courses on comptia certs

https://www.codecademy.com/catalog/subject/information-technology

they even have SSCP lol

[worthy jackal]

Ooo! Good find! :D

[signal summit]

WOW! @radiant jacinth Thank you for sharing this 👍🏼

[hoary nymph]

Gave +1 Rep to @solemn pecan (current: #1214 - 3)

[radiant jacinth]

[silent river]

https://tenor.com/view/panda-animated-lazy-sleepy-cute-gif-2629443692090400496

[dry geode]

@radiant jacinth im better

[radiant jacinth]

you do counter me

[storm snow]

thanks for sharing @radiant jacinth

[hoary nymph]

Gave +1 Rep to @solemn pecan (current: #979 - 4)

[radiant jacinth]

[signal summit]

But you forgot to mention codeacademy is paid subscription 😭

[fathom panther]

Yeah, it follows a freemium model

[summer verge]

IDK how is now but some years ago it was kind of restrictive without a sub

[lucid timber]

How is everyone?

[weary meteor]

Thanks for asking , good 😄 . How are you 🙂 ?

[hoary nymph]

Gave +1 Rep to @lucid timber (current: #2470 - 1)

[lucid timber]

Good!

[weary meteor]

Glad to hear that , have a nice day buddy 😄

[lucid timber]

Great u too!

[native jolt]

so i am new to what you guys are suggest

[south inlet]

For what?

[lucid timber]

lol me too I wanna learn to hack

[tawdry dove]

#start-here

[lucid timber]

Yay

[onyx pike]

I'm a bit behind on thm advent and up to day 4. The video for day 4 sadly isnt the greatest to learn from, too quick and she just reads it out like you are reading to a child. I really like the video from day 3, that guy really went in depth for newbies.

[muted pivot]

each person has their own teaching style, what worked well for you might not work well for others 🙂 they all do their best and each person helps in their own way

[steep patio]

hello everyone, is anyone here following the "cyversecurity roadmap for beginners-

by youtube with sandra

[jaunty skiff]

How many hours a day do you recommend spending on TryHackMe while still in school?

[wintry comet]

However many you want, spend as many as you can if you want

[jaunty skiff]

Thing is I can't do too much because of studying and hobbies.

[wintry comet]

Well then don't spend much, spend as much as you like, even if that's 10min a day. There is no specific time amount that you should be spending

[jaunty skiff]

Alright mate thx

[hoary nymph]

Gave +1 Rep to @wintry comet (current: #418 - 13)

[tawny barn]

Doing very little a day won't help u feel engaged

I'd say do at least 1h a day

[jaunty skiff]

yeah that's around the same amount I'm doing right now

[still crow]

hi

[versed swallow]

Tis the season to fry your arduino mega tra [la]{8} .... I grabbed a 12v 2a dc barrel and ... it looks like a test lead got unplugged from the pcb so i opened it up, plugged it back into my aruino ...and then the cpu promptly started to burn my fingers ... wunderbar

So much for my lcd color wheel driving the fiber optic christmas tree

(it was an old 12v light originally, when the wheel motor burned out first i replaced hte motor, when the second one died, i just replaced the wheel AND bulb with a pcb circle mount led and wrote a program to drive it)

and just like that, i need to replace my mega .... time to pull anohter out of the ramps boxes i have stashed for making 3d printers/engravers

phew.. down to last one.

[radiant jacinth]

it depends where your trying to get with it. If it is just a hobby 30 mins to a hour is good, but if you want to go further with it maybe a couple hours is best.

I have fun doing it, so i try to do it whenever i have time

[lilac zinc]

Hi! I'm reading the Advent of cyber D9 about GRC and Risk Assessment. One thing I don't understand is, when you perform a Risk Assessment to a third-party, you have to trust they're telling the truth. How do you verify that?

[hearty saffron]

Hacking is what I have always dreamed of

I left medical like to computer because of hacking, haven’t gone far for now but the dream of it is still germinating badly

Any advice for a new beginner?

[radiant jacinth]

Learn everything you possibly can, spend as much time as you can trying out different rooms, learn different methods and techniques.

[hearty saffron]

Can I ask

In tryhackme does it also teaches about kali linux

[radiant jacinth]

Yes, you can find all sorts of stuff here: https://tryhackme.com/r/hacktivities/search?page=1&kind=all&searchText=Kali+linux

a lot of the rooms are free, but you can also just search google for the ones that aren't

[hearty saffron]

Ok thanks pal

[radiant jacinth]

No problem, Good luck!

[simple anvil]

I'm trying to answer a question in Linux fundamental part3 section 3
they are asking me to run "python3 -m http.server" and download http://10.10.150.148:8000/.flag.txt so I ran the command "wget http://10.10.150.148:8000/.flag.txt" and somehow, its saying connection refused. Am I doing something wrong?

[weary meteor]

Could you provide a screenshot 🙂 ?

[simple anvil]

Somehow I can’t send a screenshot or picture in the chat

[weary meteor]

You need to verify first 🙂

[simple anvil]

Ooo alright

[weary meteor]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[radiant jacinth]

would this be the place to ask a kinda specific question

[weary meteor]

You can ask here or in https://discord.com/channels/521382216299839518/680459914828972076 🙂

[radiant jacinth]

Uhhh so basically

would hacking into your old discord account that got hacked already by someone else for very non-ethical purposes (those reasons being attempting to scam your friends out of real money) be considered a “good” use of hacking

No offense to discord support bc i know they’re only human and can only do so much but it’s been half a year and i ain’t heard nothing, just had me wonderin

[weary meteor]

Try to contact Discord support in order to recover your old account 🙂

[jovial forum]

They could be busy as an there is an influx of tickets, try emailing them again with the old support ticket number attached

[radiant jacinth]

Aii gotchu, appreciate it

[jovial forum]

KGB whats up man, How are you?

[weary meteor]

Thanks for asking buddy , I'm really good for now , how are you 😄 ?

[hoary nymph]

Gave +1 Rep to @jovial forum (current: #314 - 18)

[jovial forum]

Thats good to hear, Im doing great, thx

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #7 - 1213)

[weary meteor]

So glad to hear that , have a nice day buddy 😄

[jovial forum]

You too mate

[weary meteor]

You need to ssh into target machine and run server on it 🙂

[simple anvil]

thanks, it worked!

[weary meteor]

Glad to hear that , keep going buddy 🙂

[solemn garnet]

Started Advent-of-Cyber two days ago. I am on day 8 now. What a fun intro crash course on Blue Team security. I am "Scriptkiddy food" not even Scriptkiddy 🙂 However, I didn't think I would have the opportunity to see yet alone learn SIEM software and AWS cloud security techniques this soon. Lots of fun!

[weary meteor]

Great progress buddy , keep going 😄

[hard torrent]

Anyone from staff here

[iron berry]

Hi I'm new to the field of computer science with no prior knowledge I want to start learning cloud plus cyber security is it a good idea and can you tell about some resources

[weary meteor]

Welcome 🙂 . You can start with this pathway 😄

https://tryhackme.com/r/path/outline/presecurity

[ember bay]

hey guys does anyone cleared AV evasion :Shellcode Task 7 i did got reversh shell but can't Esclate to Adminitrator Can any one Help Thankyou

[tawdry dove]

#room-help for assistance with TryHackMe rooms

[fiery fractal]

Analyzing Netflow Data Try Hack Me - does anyone know what software I use to analyze the packet information

[radiant jacinth]

Im pretty sure you would use wire-shark

[tropic grove]

why i can't add photo over here. is there anyone who can help me with that

[weary meteor]

You will need to verify first 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[tropic grove]

okay. thanks

[radiant jacinth]

Have a good day pretty people 👋

[weary meteor]

Thanks , you too buddy 😄

[hoary nymph]

Gave +1 Rep to @dense mason (current: #1644 - 2)

[granite mesa]

Just jokes @odd acorn 😃

[granite mesa]

Okay im just gonna delete that it was joke lol maybe just one thats nlt funny lol

[remote yacht]

I thought it was a lil funny
Gave me a light chuckle

[open galleon]

guys yesterday i find flipper zero at just 20 dollars in a site which make me curious. so i dig into it and booked one. i thought that i've to pay online but there's cod available. after i complete my booking they called me for confirmation too. but after a while when i do some research on them i found that they scammed many peoples already. here we dont have any strong laws to take steps against them. so anyone have any suggestion to stop them from scamming people.

[weary meteor]

When something seems too good to be true it's probably a scam 🙂

[open galleon]

Yaa but here most of the people are not aware of this scams

And there are no such laws to take steps against them

[spark sun]

Generally we ask that you don't post known scam links to chat, even if you are just trying to bring awareness

[open galleon]

Okay I'll remember that

[radiant jacinth]

What languages are needed for someone in cybersec, I know basic python, I know a good amount of full stack web languages and that's it, I've been using computers since 9 years old so I have a pretty intuitive sense in that field

[weary meteor]

JS if you're interested in web vulns. 🙂

[keen swan]

It's okay if I learn basics of it

[weary meteor]

Yes , as you practice over time you will get better and better . You have a room on THM about JS basics 🙂

[keen swan]

Thanks 😅

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #7 - 1330)

[weary meteor]

This is the room 😄

https://tryhackme.com/r/room/javascriptessentials

[wary wren]

My bosses, please I need help with an iphone 6s bypass

[south inlet]

We can't help with this, sorry.

It would be against our community rules.

[young gulch]

Good luck

[spiral needle]

Hi

I need a help perform security testing like DAST sast for internally hosted web app

[south inlet]

Hosted where?

[spiral needle]

Edge server

I mean it’s not a public web app

[south inlet]

Is this for your job?

[spiral needle]

Yea

Yes

I’m fresher for this role

[south inlet]

Ah, then please ask your supervisor or manager, we can't help you with this in this server.

Also best not to discuss internal infrastructure with a server full of hackers...

Please see our Employee assignments page here as our community guidelines and rules prohibit help with this.

[spiral needle]

Got it

[crimson lark]

Android phone has been hacked due to opening of malicious file.
How to remove the malware
: Any apps: ?

[tawdry dove]

Malwarebytes

[south inlet]

I'd use Malware-Bytes, or complete factory wipe.

[tawdry dove]

Or format the phone

[crimson lark]

Does malware bytes require subscription?

[south inlet]

To scan and clean, I don't think so.

However I don't have an option that is free/cheap that doesn't require formatting the handset.

[crimson lark]

What paid apps are good

[south inlet]

Malware-Bytes is the only thing I'll suggest.

[crimson lark]

It found the app and i deleted it

Will it still have traces of the malwar?

[tawdry dove]

Use Malwarebytes to see

[nimble prawn]

fresh os install

[spare oak]

https://www.reddit.com/r/privacy/comments/fc5t7g/i_dont_trust_malwarebytes_they_want_your_data_bad/

[south inlet]

Oh look,.a Reddit post.

Must be bad.

[spare oak]

Just a bunch of peeps telling their sides of a story

Pure bs

[tawdry dove]

Reddit is a very reputable source...

[crimson lark]

Context please. Coz i also sometimes prefer reddit posts 😅

[crimson lark]

I ran it.... It found 2 threats and deleted the app..... Should i still reset the phone or is it safe now?

[spare oak]

I haven't denied that.

[tawdry dove]

It was sarcasm, meant to be a captain obvious joke that reddit is not always a good source

[summer verge]

Reddit, it's a very good source for weird things 😂

[grave bridge]

r/linuxsucks and r/windowssucks are literally the same subreddit, it's just linux users

[pure wagon]

I was about to say to delete the app in case you find it rather factory reset or smth. As android apps work in sand box environment. Means they have their own isolated space to prevent unauthorised access from any other apps/files in the system. Also, make sure to check if there were any new files created or modified by the malware cuz that might leave traces for malware in that case it's usually recommended to factory reset. I'm not an expert at this. Still learning about malwares (windows specifically). And sorry for my broken English lol 😅

[proven lichen]

@pure wagon what languages speak you

[pure wagon]

None, cuz I speak languages 🙂😎

[tranquil mango]

So relatable💔

[fierce canopy]

i think i would like to get into cyber and tech journalism but i don't understand how people get leads. usually the first time i hear of anything is from reading articles already covering whatever i'm interested in. does anyone have any tips?

just realized tips could either mean leads or advice and i'm asking for the latter

[tawdry dove]

You need to build trust in the industry. People will be hesitant to talk to randos, but if you have a reputable block or current career in journalism people will be more likely to talk to you. It's common for people to float around topic areas when starting in journalism before going for a niche. There are also strict ethical requirements when it comes to journalism, of which you typically learn about in a degree program. As for getting started, I'd probably go talk to your local newspaper and see if they're looking for any staff to get your foot in.

[fierce canopy]

i don’t have anything at all yet, and i’m not willing to quit my current career to pursue this hobby, but i am looking to get in contact with people who share the same interests. i need to start with some blog posts i think, but even there, idk where to start. i went to uni for comp sci so i’m not familiar with the field of journalism at all, i just know i have my interests i’d like to investigate, but i’m not sure how to start

[west rain]

Journalists take the same route as OSINT investigators as they cant research something not known to the public without getting in trouble. So being good at OSINT, phone calls and social engineering should do the trick for you.

[weary meteor]

@south inlet

[radiant jacinth]

@worthy jackal a+ practice question of the day:

Which of the following types of USB connections can support up to 4.5 watts of power per connected device?

A. USB 1.0
B. USB 1.1
C. USB 2.0
D. USB 3.0

why does IT support need to know that? god knows

|| Answer is D ||

[south inlet]

Is this part of an exam?

[radiant jacinth]

it's practice question for comptia a+ not actual question

well maybe it's actual idk but it's from udemy

[karmic sigil]

hey

is there anyone here

[south inlet]

No.

[south inlet]

I'm sorry, bad joke.

We are.

[west rain]

How slow is this slow mode?

Ok just 10 secs

[autumn trout]

anyone here a google sheets expert?

my end goal is:

1. record transactions on a day by day basis

2. show a monthly over-view of this spending

3. compare this to a set budget, so if i spend £500 but my budget is £1000 it will tell me i am 50% of the way there

4. i did using a table of daily transactions

5. i did using a pivot table, row = month and value = sum of month

6. i have no idea how to do. Because pivot tables are variable and can change, it is hard. i can hard-code stuff, but because they change hard-coding is not good 😦

Anyone know what I should do here? 🙏

[brisk folio]

this is interesting, are you still working on this?

[surreal quiver]

Hey guys I'm trying to crack a wpa2 captured handshake password without a wordlist because its probably not in english. Any ideas?

[south inlet]

What are you cracking?

[jade otter]

I’m curious
Why would that power wattage matter if you are just using it for normal use?
Orrrr does it matter if you are using the USB for naughty activities

[radiant jacinth]

no clue it's from dion practice exams

i think the questions from them are a bit extreme

or unrealistic

[sudden furnace]

你们那里现在是深夜还是白天

[south inlet]

English only please.

[sudden furnace]

Is it late at night or daytime where you are?

[surreal quiver]

I have captured the handshake with aircrack but I'm having trouble with the password

[south inlet]

WiFi hacking is for our advanced channels.

[frail vault]

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Dec 20, 2024, 8:09 AM

[autumn trout]

yeah, i am thinking to ignore the pivot table and play with sumif and have ugly mini-tables in excel of each month 🤔

[autumn trout]

just solved it

i used sumif and ugly tables

[civic root]

:hammer: 2130880375#0 has been banned.

:hammer: 2130880375#0 has been banned.

[civic root]

[BAN] User left the discord server.

[burnt night]

It ain't D
USB3 standardises 1.5A @ 5V which is 7.5W

Usb2 is 500mA so also doesn't line up

Apparently 900mA by default for usb3, who knew?

[radiant jacinth]

"USB 3.0 and 3.1 allow 5V at 900 mA (4.5W). "

from google

[burnt night]

You can demand 1.5a with the charger ID pins

https://hackaday.com/2023/01/04/all-about-usb-c-resistors-and-emarkers/

Good stuff the USB spec

[radiant jacinth]

I have no idea it just seemed odd to have that question in A+

[burnt night]

About a million ways you can do it and be spec compliant, and no one ends up doing it

[radiant jacinth]

btw how do u even know this

you're into IoT?

[burnt night]

Hardware stuff

[worthy jackal]

Wrong channel; sorry

[crisp ivy]

Uhm

[wild compass]

Hey

I have a question

[south inlet]

What's up?

[wild compass]

I want you help me gain access my dummy Gmail account and I want to understand how it was done
Can someone teach me

[south inlet]

No, that would be illegal, and against our community rules.

[wild compass]

I want to know how images are uploaded too

[south inlet]

You need to verify your THM account for that.

[frail vault]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 22, 2024, 10:04 AM

[wild compass]

Can I learn pentesting

[south inlet]

Yes.

[weak nova]

Where can I ask a question about day 18 AoC2024?

[weary meteor]

Here https://discord.com/channels/521382216299839518/1305926862114914325 😄

[weak nova]

Thanks!

[radiant jacinth]

.

[wild compass]

Teach me pls

[south inlet]

Have a read over #start-here

[wild compass]

I don't know how to navigate my way

Im a complete beginner

[charred quiver]

hi

[weary meteor]

Hi , welcome 🙂

[charred quiver]

ty

will i succeed in this field

[weary meteor]

If you work hard you sure will 🙂

[charred quiver]

u got any tips to be consistent btw

[radiant jacinth]

Practice, fail, cry a little and keep pushing forward

[lilac zinc]

Will the advent event be available in January? Can't work on it that much these days

[weary meteor]

Yes , it will stay 🙂

[lilac zinc]

Nice, it's a lot of fun and full of discoveries 😁

[past lark]

hey, advent of cyber event has over so how am i gonna receive the prize ? : )

[weary meteor]

Prize drawing is on Jan 6th 🙂

[serene forge]

Is there any room for side quest?

[weary meteor]

Here 🙂

https://tryhackme.com/r/room/adventofcyber24sidequest

https://discord.com/channels/521382216299839518/1312113121040535656

[serene forge]

I meant, on discord

[weary meteor]

https://discord.com/channels/521382216299839518/1312113121040535656

[serene forge]

And also, till when they are open?

[weary meteor]

It will stay , but you can win raffle tickets before Jan 1st 🙂

[placid panther]

What's this "Learn and win prizes" room

Is it still valid

[weary meteor]

No , it isn't 🙂

[brisk folio]

@weary meteor what happens if i foresee not being at home for several days at a time? can i like buy streak freeze? do you know?

[weary meteor]

I don't think there's option to buy streak freeze , but you can ask THM staff to restore your streak if you loose it

[brisk folio]

i'll send them an email 🥹 thanks for the headsup

[weary meteor]

Here's the mail 🙂

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 25, 2024, 5:04 AM

[livid gulch]

Hi everyone. Have anyone tried running dualmonitor on virtualbox? Been running with one monitor now, even though my host has more monitors.

[hearty saffron]

Please how does THM learning looks like

[weary meteor]

There should be a option for multi monitor setting under Graphics or Display menu in settings 🙂

[weary meteor]

What are you interested in 🙂 ?

[hearty saffron]

Just want to see a screenshot of the learning field

Am yet to start tho

[uneven helm]

Merry Christmas! ⭐🐴🐮🐷🐔🐥🐭

[shell dawn]

Merry Christmas!!!

[weary meteor]

@uneven helm @shell dawn Merry Christmas 🎄 🎅 ☃️ 😄

[small gate]

You can create a free account and have a look

[gray walrus]

i want to tryHackme learning!

[weary meteor]

Check out roadmap 🙂

https://tryhackme.com/r/hacktivities

[gray walrus]

What should I learn as basic knowledge?

[weary meteor]

https://tryhackme.com/r/path/outline/presecurity

Follow along this path , It will teach you all the fundamentals needed 🙂

[gray walrus]

Can I check out all the roadmaps on the tryhackme website?

[weary meteor]

Yes on the link above 🙂

[gray walrus]

ok...!!

[river storm]

As someone who is entering into the cyber / IT world in his early 30's I feel like I have many dumb questions. I've managed to get my CompTIA Sec+ and i'm hoping to finish up the Net+ within the next few weeks. I'm still pretty new and trying to land an entry level role within IT. I grew up with the appreciation of wanting to understand technology, but never focused on it till I turned 30.

I feel like I want to get into network and cloud security, and I plan to get my CCNA and AWS Cloud Practitioner in 2025. I know I still have a LOT to learn. My question is in turn this: during the months i'm not working towards certifications, what should I be working towards? My current goal for 2025 is to continue working through THM CTFs and completing modules, I want to finish up Net+, CCNA, and AWS, and I was planning on taking some udemy courses this year on Linux, SQL, Python, CSS/HTML, and maybe C++ or C#.

[weary meteor]

Welcome 😄

I would recommend you to skip AWS practitioner certs if you ever had touch with IT/cloud in the past because they might be pretty basic to you , go straight to associate level ones 🙂 . If you're beginning your journey in IT then go with practitioner 😄 .

[river storm]

I'll definitely look into the associate cert over the practitioner. I really haven't looked into much of the cloud side of certificates just yet because I wanted to make sure I had a strong foundation before diving into them. So i just selected the most basic as my first step (:

[spark ferry]

Testing

Oh perfect

[weary meteor]

I have CISCO's and AWS's certs , if you have any questions feel free to ask 😄 .

[river storm]

I'll definitely keep you on retention when I start my CCNA in March. I definitely want to get better with linux and SQL before diving into my next cert

[weary meteor]

Good luck on your certification journey 😄 🚀

[karmic sonnet]

Tbh, SQL & CSS/HTML are just something you can master in a few days, let's say a week for each one with a good tutorial and it's done ... it's the easiest in all you can try and you've mentioned.

[quaint basin]

... Master? ... In a few days?
This should be good

[summer verge]

that's a person with great confidence or total denial, I can't tell 😉 😛 😂

[tawdry dove]

The fact that SQL is even there makes it 10x better

[fossil pendant]

i did not google

[plain glade]

hi

[weary meteor]

Hi , welcome 😄

[river storm]

I was expecting to spend about a month on each one. I assumed that it’d be better to get as in depth as I could for each one to continue being well rounded in my 2nd year of building foundations I should’ve had 13 years ago 😅

[signal sinew]

Ola

[karmic sonnet]

Up to you, but you'll get bored and go round learning what you've already seen for css/html !^^ Even if you go to the extend into learning a framework/tool to use them, such as Tailwind or Bootstrap for css/html, it won't take you that long ... the hardest is to maintain an inherited awkward spaghetti css monolith file, because it was made with some feet and no brain cell was injected all along !^^
On the other hand, if you try to look into DB administration tools such as PostgreSQL DB or Azur SQL DB it might take more than a month : with the latest for instance, there are so many features as ancillary services to administrate a server, you may spend years on it ... it's MS after all !^^
If you are on the defensive side, you may need to help maintain a DB on a daily basis ... on the offensive side, you don't need to go into deep DB admin, "just" how to hack the credentials and then to retrieve data are enough ...

[stable charm]

small game, this image is linked to which series ?

[quaint basin]

"just" how to hack the credentials and then to retrieve data are enough

Uh, no. For a pentest role you need to know how to secure a range of different DBMS. "Bruteforce credentials and steal data" doesn't even come into it.
Credential attacks are on the checklist, but they're one bullet point, not the whole thing.
Red team ops you might have an end goal of exfiltrating data from a DB, but the same applies -- there's a lot more to it than just "hack the credentials".

God only knows what you think the "offensive side" does, but I promise you that it involves a lot more than just "hack all the things".

[last mulch]

Hey guys please i wanna to ask if someone is familiar with openvpn and the iptables i have a pb routing the traffic through tor please

[weary meteor]

You can learn more about OpenVPN here 🙂

https://tryhackme.com/r/room/openvpn

[last mulch]

It have nothing i mean i'm hosting a server on tor and i wanna to route all the traffic through tor but i'm getting some errors i need some help

[last mulch]

This one all what it have's just how to connect to tryhackme servers

[weary meteor]

https://tryhackme.com/r/room/torforbeginners

[mystic tulip]

Do you recommend CCNA for a final year uni student?

[weary meteor]

Why not , it's an industrial standard cert for networking although be aware it is a foundational one 🙂

[mystic tulip]

Is it a better option than network+

[weary meteor]

I would personally go with CCNA 🙂 . Try to also consult with somebody from https://discord.com/channels/521382216299839518/707992725646999553 🙂

[buoyant copper]

Can anyone gift me free premium voucher 🥺

[stable charm]

why ?

[south inlet]

Please don't ask for these in this server.

[buoyant copper]

I am currently on a tight budget 🥺

[stable charm]

lol, 14$ MDR

[versed swallow]

Anyone here have a black-belt in usb management?

I've got a device that likes to disconnect itself after about 90 seconds of inactivity from the usb bus. But for that 90 seconds, if i can connect to it, it will stay connected a lot longer .. not indefinitely, but long enough to access and program.

The only caveat is that communicating with it requires a 32 bit ehci type interface on a windows xp driver 😦 I've done the connect, and map the usb host device to the vm image during that 90 seconds, and then if i reconnect it, i can get the vm started and the system talking (Hey, hooray for a 15 second windows post with a 10 second login splash) ...

Does anyone know how to diagnose if the timeout is device side, or host side?

root@capgras:/etc/udev/rules.d# cat 99-usb-power.rules
ACTION=="add", SUBSYSTEM=="usb", ATTR{idVendor}=="4647", ATTR{idProduct}=="3000", ATTR{power/control}="on"

otherwise i have to connect device, boot vm, flash, then after flashing, shut down vm, reconnect device, boot vm, then verify the flash. which is a little cumbersome to get in under the timeout period.

[Sat Dec 28 04:07:44 2024] usb 1-10: new full-speed USB device number 54 using xhci_hcd
[Sat Dec 28 04:08:28 2024] usb 1-10: USB disconnect, device number 54
[Sat Dec 28 04:08:38 2024] usb 1-10: new full-speed USB device number 55 using xhci_hcd
[Sat Dec 28 04:09:12 2024] usb 1-10: USB disconnect, device number 55
[Sat Dec 28 04:40:43 2024] usb 9-4.3: USB disconnect, device number 34
[Sat Dec 28 04:40:43 2024] usb 9-4.3.2: USB disconnect, device number 35
[Sat Dec 28 04:40:43 2024] usb 10-4.3: USB disconnect, device number 15
[Sat Dec 28 04:40:44 2024] usb 9-4.2.1: reset full-speed USB device number 6 using xhci_hcd
[Sat Dec 28 10:44:02 2024] usb 1-10: new full-speed USB device number 56 using xhci_hcd
[Sat Dec 28 10:44:04 2024] usb 1-10: USB disconnect, device number 56

The only other way would be to hack windows driver so it could work in windows 11 .... but it's x86 territory

[vital kernel]

How would you limit your Google search to PDF files containing the terms cyber warfare report?
Ans: filetype:ppt cyber warfare report
is this. correct or incorrect ans?

[weary meteor]

filetype:pdf not ppt 🙂

[vital kernel]

Thankyou

[weary meteor]

Does it work now 🙂 ?

[weary meteor]

Glad to hear that , keep up the good work 😄

[radiant jacinth]

Hello, I want to connect the tplink tl wn8200nd adapter to the virtualbox kali linux. When I plug it in, wifi appears, I press connect and enter the password, but it does not connect, it keeps going around and around, I would be glad if you can help me.

[weary meteor]

Try to change network mode to bridged in VM settings

[radiant jacinth]

I tried this

[weary meteor]

Change to NAT if you haven't

[radiant jacinth]

I tried that too

[zinc iris]

I'll say mr.robot, just by the clothes and the old man ghost

[foggy totem]

Mr robot , the guy looks like Elliot

[iron pine]

https://tenor.com/view/ban-hammer-yoshi-mario-discord-gif-12444703281338986867

[ionic hornet]

@south inlet

[chilly snow]

I watched 1 season then stopped but the middle guy is defo Elliot, "Mr robot" to his left at the bottom, then that guy who I forgot his name in the blue shirt, his boss is the ghost again don't remember, the girl with the green shirt on the left is the FBI agent

Maybe it was 2 seasons (I remember nuthing)

[lament arrow]

Hi guys

How to fix (no sound problem with Kali Linux in VMware) ?

[south inlet]

Is it muted?

[lament arrow]

Yeah no sound at all

[fleet inlet]

hey im new here how can i get started

[weary meteor]

Welcome 🙂 . You can start with this pathway 🙂

https://tryhackme.com/r/path/outline/presecurity

[fleet inlet]

thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #5 - 1676)

[shadow mauve]

Does anyone have experience with running Kali via UTM on a Mac? I was gifted a Macbook (absolute Apple-Newb) and wanted to use it for THM. I set up Kali on UTM but the window is so tiny and the resolution is just meh... but I can't find anything to fix this and now I was thinking maybe it's because of UTM? Maybe I should try a different VM?

[south inlet]

You need to install brew, to install openvpn and run the VPN from there.

[shadow mauve]

Oh, didn't even try to get into the network because the window is so tiny 😅 But if I get you right I won't be able to anyways without brew?

[south inlet]

I'm not too sure tbh, whenever someone has an issue with Apple, that's what I suggest, I'm a Windows user and I have zero knowledge on MacOs.

[shadow mauve]

Me too but I am still running the Attack Box and was thinking this might be a good chance to have a dedicated piece of hardware for this ... otherwise I think I will hardly use it

[south inlet]

I'd suggest not using MacOs then, as some of their chips don't even support virtulization.

[shadow mauve]

But it's running already... the whole question I was asking is how to get a higher resolution because it looks like it's running on 640x480 and my eyes hurt when I maximize it 😅

[forest forge]

Hi

[harsh linden]

What?

[harsh linden]

Yes, I have it running quite well on M1 chip. Parrot, kali, and windows

[harsh linden]

Brew is a Mac OS utility package manager. I believe they are saying to just run the Mac OS directly? Brew does have most of the tools. But you can virtualize parrot and kali. The effectiveness might depend on your Mac setup(ram)

[placid panther]

Which channel do you guys suggest to learn CLOUD COMPUTING FROM SCRATCH

[shadow mauve]

Thanks... the question I had was kinda overread or IDK why we had this connversation. I have UTM and Kali running on a small M2 Macbook which was gifted to me and I don't have any Apple experience. And my only question was how I can increase the resolution of the Kali VM because it's really small (maybe like 800x6000 ?) and it's absolutley no fun to work with it this way. Do you know if there are any options which I did not see or how to get a better resolution within the VM? Or maybe UTM is the reason and I should try a different environment?

[hoary nymph]

Gave +1 Rep to @harsh linden (current: #533 - 10)

[shadow mauve]

All the big ones usually have learning platforms where you can start off... AWS Skill Builder, Microsoft Learn, Google The Arcade etc ... and Oracle has a Free Tier and learning material as well. The others have free tiers as well but they are different. You get some credit and once it's used up you either have to pay or can't use some service anymore... Oracle has a good chunk of their services which will remain free

[bold olive]

..

[harsh linden]

What iso did you use to install(arm?), and how? which UTM system level settings and Display level settions do you have selected? have you tried changing the resolution in the kali display preferences? do you know if you have virtio and spice tools installed on the guest vm(kali)?

[shadow mauve]

Now that's a lot of questions 🙂 I will look into it as soon as I find the time and might get back to you. Thanks in advance 🙂

[hoary nymph]

Gave +1 Rep to @harsh linden (current: #493 - 11)

[harsh linden]

I was thinking of doing a small write-up, I can ping you if I get to it soon. though, it would be interesting to hear about the process you went through to setup so i can include those details too. cheers

[shadow mauve]

It's my first Apple device so I am really new to it and went with UTM because it was the first thing that popped up when I searched for VM's ... (or was it given on the Kali page? can't remember). But I can try to reassemble it and send you the info. I remember that I had to look up something about the display settings otherwise I only had a black screen. And I had to run a CLI during installation. I will make myself a reminder and get back to you with the info that I can recall

[harsh linden]

yea that can be expected. you probably just need to change the default display preferences, and update the resolution to one of the 16:10 resolutions

[placid panther]

Thank you mate

[hoary nymph]

Gave +1 Rep to @shadow mauve (current: #1672 - 2)

[hollow stirrup]

what's +1 rep is?

can use rooms while using macchanger and torghost ip switcher?

[jovial forum]

• rep is given when someone says thanks when replying to the person. on the left its position and on the right its the amount of reps/thanks received

[hoary nymph]

Gave +1 Rep to @hollow stirrup (current: #1672 - 2)

[jovial forum]

in my reply there was thanks so it gives you a rep

[shadow mauve]

@harsh linden Would it be sufficient for you if I just drop you some bullet points? If you want to go into detail here and there we could continue from there

[tall relic]

There should be more payment options other than credit and debit cards....

like I am in India, and as I can see the payment in my currency now so I should choose most famous option in India which is UPI.

I am just giving a small suggestion.

Because many people from India face issue with cards, because banks by default give Rupay cards. And many people don't know if they have to active international transactions in their card app.

[fossil pulsar]

Darth Vader for some odd reason it rejects my Credit card

I use paypal @tall relic that works

[tall relic]

for me PayPal not working...

that's why I use my debit card..

[fossil pulsar]

My Debit and Credit card did not work

[tall relic]

but as it is expired now... and I have to go to my home town branch to get a new one, because if I apply online they will give me Rupay card, which I don't want... and also they will give me less limit card.... I want to get the platinum visa only..

[fossil pulsar]

oh totally different process where I am from

[tall relic]

you should check in your card details in banking app if the international transaction is on or not. And selection also like what services are on in international.

[fossil pulsar]

My cards are on hold for some odd reason

All of them

[tall relic]

I am no expert.

But yes, in India PayPal have to follow lot of restrictions, so it is not working as it use to work in other countries.

now I want to buy the subscription like right now, but I can't buy it now.... because my card is expired. 🙂

[fossil pulsar]

same lmao

I can't buy the subscription but I want to right now

I got to call the bank

[tall relic]

yeah,,

[tall saffron]

hello any help to contact tryhackme sales here

or send me any tryhackme sales email id

[weary meteor]

Try to reach out to support 🙂

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 3, 2025, 11:24 AM

[tall saffron]

Thank You

[tawdry dove]

There are a few emails, what are you looking to do?

[surreal quiver]

Hey guys I think I've definitely been hacked. Any advice to getting to the bottom of it and securing my system? How to kick them off and keep it that way?

[south inlet]

What males you think you've been hacked?

[surreal quiver]

Today some files were missing I found them in the trash, my pc keeps freezing and it's restarting on it's own

[south inlet]

Have you ran an anti-virus scan?

[surreal quiver]

Anti-virus never finds anything

[south inlet]

Which one do you use?

[surreal quiver]

I don't have one currently because you have to pay for but I had some issues before and never found anything I think it was avast norton or someting like that with a free trial

[south inlet]

I suggest using Malware-Bytes.

It's free, but a purchase will give you real time protection and other stuff.

[surreal quiver]

I could try it for free but what if it doesn't find anything

[quaint basin]

Or just use Defender...

It's built into Windows and it's easily one of the best (if not outright at this point).

[surreal quiver]

I'm on ubuntu so I think I'll try clamav

[next bronze]

Try Kaspersky

Malwarebytes is okay, but its like 50% adware lmao

[south inlet]

Wat?

[next bronze]

It keeps giving me ads everyday (non subscribed to premium plan)

Honestly annoying

[restive blade]

Just like McAfee

[neon dirge]

it depends on where he lives but many countries stopped Kaspersky

[tawdry dove]

Saying Malwarebytes is filled with adware, without proof, and then recommending a company that may or may not be involved with the Russian Government is pretty comical. Thanks for today's laugh

[hoary nymph]

Gave +1 Rep to @next bronze (current: #400 - 14)

[next bronze]

I mean, it's still a good AV 😭

Also, I got like 10 or more popups per day with Malwarebytes

[surreal quiver]

Clamav found just the metasploit payloads because it's installed so I guess it recognized them as malicious except that nothing

[tawdry dove]

Words have meaning. Calling a legitimate piece of software, adware, on a very public forum can have consequences in the form of people seeing your writing and making decisions off of it and in some cases, if the company is more litigious, they will drop a defamation/liable suit on you. A free piece of software that asks you to purchase the premium, is by definition, not adware.

[next bronze]

Well, it makes sense when you look at it that way

[weary viper]

hi

[weary meteor]

Hi , welcome 😄

[vital acorn]

Hello guys

[fresh spade]

hello

[surreal quiver]

Any thoughts and tips on using clamav and maldet together?

[surreal quiver]

I also have snort installed but it detects just normal traffic,once it found something suspicous so I blocked the ip but that could just be changed with vpn. I did some cleaning to speed up ubuntu too like autoremove,apt clean...

The questions is how could someone do it and how to fix and prevent it

[trail matrix]

@weary meteor do you work with THM ? you are super active in this discord 😅

[weary meteor]

No , I do not work for THM 🙂

[trail matrix]

Sometimes I think you are a bot 🙂

[weary meteor]

I should be real 😄

[trail matrix]

I hope so 🙃

[compact robin]

you do get this a lott

[weary meteor]

Yes 😄

[trail matrix]

well they should at least pay him, for his time and contribution to this community

[pearl vector]

23k msgs in 3 months is next level 🫡

[pure wagon]

How you see that bro?

[south inlet]

Search bar.

[main siren]

To me, what KGB does is really admirable. He helps a lot of people, including me when I need help.
And he’s insane #14 on the general all-time leaderboard!!!

[floral garnet]

Hi guys, there's a guy harassing my friend for several month and death threatening her. i need to connect to his socials accounts to take proofs and file a complain against him

[weary meteor]

Thank you 🙂

[hoary nymph]

Gave +1 Rep to @main siren (current: #1685 - 2)

[weary meteor]

@south inlet

[floral garnet]

he can help me ?

[south inlet]

Please go to the police, or contact the platform support

[floral garnet]

yeah but she dont want to, she's afraid, and ok for the support, thanks so much

[south inlet]

She doesn't have to be, it's their job.

Having someone coming in to it could escalate the problem.

[floral garnet]

right thankss

[dull salmon]

Hey everyone. Who can give an advice about setting home lab on like purple teaming. There will be like me trying to hack, also some SIEM maybe, where I can also look for logs and what happened. Which resources are good to build that kind of lab?

[pure wagon]

Does anyone have experience with OS hacking? I'd appreciate it if you could guide me. I wanna prepare myself to compete in pwn2own.

[weary meteor]

Wdym by OS hacking 🙂 ?

[pure wagon]

Operating system hacking like hacking windows?

[next bronze]

THM has some great rooms for that

The Pentest+ learning path will help you with hacking a Windows system, escalating in AD, etc

[weary meteor]

https://tryhackme.com/r/room/windowsprivesc20

Check out this room 🙂

[pure wagon]

Ok thanks

[pure wagon]

Btw this emoji. It's dangerous. Fr, cuz it has several meanings if you know what I mean.

[weary meteor]

No , I don't know , can you elaborate 🙂 ?

[pure wagon]

Lol, it makes me feel dumb. I am like sh*t did I ask something wrong

[next bronze]

I think they mean that it can be interpreted in multiple ways

Nws, nobody criticizes you :) we're all here to learn

[weary meteor]

No , it doesn't mean that , it's a happy smiley guy , to cheer things up 😄

[pure wagon]

Haha yeah I see

[weary meteor]

No bad intentions in mind

[pure wagon]

Np sir

[weary meteor]

Sorry again if it was offensive 😦

[pure wagon]

Bro bro, that's fine, my friend. It wasn't offensive or smth.

[undone basin]

who is KGB

[undone basin]

are you are you new on tryhackme?

[weary meteor]

Not exactly . I have been on THM for quite some time by this point 😄

[undone basin]

can we partner up

[weary meteor]

Of course, we're all one big team here , feel free to reach out whenever you need help 😄

[undone basin]

@main siren how long are you into hacking

[undone basin]

👍

[weary meteor]

If you need help with some room on THM , feel free to reach out in https://discord.com/channels/521382216299839518/522158539129618453 channel 😄

[undone basin]

thanks

[main siren]

I've been into IT, programming, and stuff for about 3 years. I'm a student.
And Hacking? Pure hacking? Not so much.

[undone basin]

what do you mean by pure hacking

[main siren]

Like fully dedicated to studying hacking

[undone basin]

wow

[feral mesa]

what is zip in billing address

[novel forge]

postal code

[feral mesa]

👍

[rugged turret]

Anyone know any hacker group chats I can join ?

[weary meteor]

Check out https://discord.com/channels/521382216299839518/680459914828972076 discussion 🙂

[rugged turret]

Thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 1902)

[lilac zinc]

Just finished the OWASP top 10.. SSRF looks powerful .. how do webapps protect against this?

[past lark]

guys, when're gonna receive the prize of advent of cyber ?

[weary meteor]

Check your email 🙂

[past lark]

i didn't receive any mail from thm since dec 30

🙂

[weary meteor]

Winners were contacted on email on Jan 6th , if you haven't received an email that means that you're probably not among them 😦 . Try to check out spam folder just to make sure

[past lark]

nope, there's nothing either

😢

[weary meteor]

😭

[misty sorrel]

Hello all, I'm still kinda new to the whole security stuff and I had a shower thought yesterday. Maybe I‘m stupid but wouldn‘t it make sense to save usernames/mailadresses as hashes so that when a databreach occurs not only passwords are hashed. This would make it much more unappealing to leak such data in the first place!?

[tawdry dove]

Because they are used for identification as an identity factor, not authentication, and hashing them would cripple the usability of services.

[ionic needle]

And usernames are always retrieved by websites back to the users

e.g. who made the post

[misty sorrel]

ah okay this makes total sense and confirms my first hunch that I'm just stupid 😄 thanks!

[spark sun]

It's not a bad thought for a newcomer to security to have, it's just usable. Look into the CIA triad and how security requirements have to be balanced against business needs.

[echo warren]

@odd acorn

[hoary ridge]

hi

[weary meteor]

Hi , welcome 😄

[hoary ridge]

can u tell me how to write the answer of "Which team focuses on defensive security?" this question answer is blue term but it saying incorrect answer

[weary meteor]

Blue team not Blue term 🙂

Also be aware that answers need to be in English

[hoary ridge]

thx

[radiant jacinth]

absolutely unrelated but i'd like to inform of my new findings:
hot chocolate and sweet chili doritos dont mix very well.

[silent river]

I am working my way through the Sec Eng path right now. Is there a way to find what rooms that are meant for Sec Eng to practice in? Are the practice rooms more for Pen/SOC?

[weary meteor]

You have SOC1 and SOC2 path 🙂

[silent river]

Are there practice rooms for Sec Eng?

[weary meteor]

Yeah , they're 🙂

[weary meteor]

I would recommend you to ask these guys for a career/certificate advice https://discord.com/channels/521382216299839518/707992725646999553 🙂

[radiant jacinth]

alright thank you, i will move my message there

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 1935)

[ionic hornet]

thanks

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 1939)

[golden charm]

Hello guys

[weary meteor]

Hello , welcome 😄

[golden charm]

Hello, Which learning path should I go for to be able to work at a company that runs a social platform?

[weary meteor]

If you want to break into cyber security , I would recommend you to start with Pre-Security pathway, you can check it on the link below 🙂 . What do you mean exactly when you say runs a social media platform 🙂 ?

https://tryhackme.com/r/path/outline/presecurity

[golden charm]

I already finished the Pre-Security and Cyber Security 101 paths, now I don’t know I should study for Security Analyst or Penetration Tester.

The company is a startup that just launched a social media platform similar to TikTok and instagram. They gave me two months to be competent enough to join their cyber team

[weary meteor]

What's supposed to be your job inside that company 🙂 ?

[golden charm]

The way they explained it to me, for now they’re really just trying to get a cyber team to deal with attacks and threats. Hence I can’t make up my mind on whether to go for Security Analyst or Penetration Tester

[weary meteor]

For a security analyst you can check out SOC1 pathway 🙂

https://tryhackme.com/r/path/outline/soclevel1

[golden charm]

Is it better to start with SOC1 or Jr Penetration Tester?

[harsh linden]

one month for each is enough time to finish both soc1 and pentester, depending on the hours you can put in each week

[weary meteor]

Those are two different fields , if you want to be a security analyst and prevent threats go with SOC1 pathway 🙂

[golden charm]

Thing is I have a full time job and I need to the money to survive, and I think completing the practical rooms would more time

[weary meteor]

SOC1 and SOC2 have practice rooms 🙂

[golden charm]

Yeah? I always wanted to be a pentester but if I have to go SOC to grab the opportunity then I’ll do it, thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 1962)

[golden charm]

I want to prepare myself thoroughly, so i think I’ll go for more rooms before I take on the job

[weary meteor]

Yeah , best way to learn is through practice 🙂

[golden charm]

Yes, so one month for the learning path, then the next month will be for practicals

Thank you so much for your help, I’ve made up my mind. I’ll work my way up to Security Engineer while working at the company

[weary meteor]

Yeah , take your time , learning + practice = best combo 🙂 . Good luck on your job interview and hopefully on your future job 🙂

[golden charm]

Thank you, I’ll definitely keep you updated

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 1963)

[weary meteor]

Keep up the good work , I hope that will hear some good news from you in a month or two 😄 . If you ever need any help feel free to reach out here 🙂

[golden charm]

You got it, first update will be on the 1st of February. I hope our time zones are not too far apart, I’m in South Africa

[weary meteor]

Fingers crossed for your job interview , wish you all the luck , study hard your work will pay off 🤞 🙂

[golden charm]

Thank you for that, it’s motivating really🙏

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 1966)

[silk dragon]

M1 Air OR T440p Upgraded

[tawdry dove]

For?

[silk dragon]

daily usage, maybe light gaming. mainly just for school

[odd acorn]

I personally wouldn't go for ARM for gaming

[indigo root]

Analyst is probably easier

[tawdry dove]

Agree with Jabba. If you're using it for school, you should look ahead at classes to see if they have any specific computer requirements such as minimum performance specifications or processor architecture requirements.

[silk dragon]

I got both already

just thinking if i need both still lol, i havent upgraded my T440p yet

[twilit lantern]

Which language is easier to learn rust or java

[indigo root]

Either. Learn what works better for your use case. I prefer java though

[next bronze]

java

[vapid harness]

java for me

[ionic needle]

How many questions do you guys do per day? Need to set a new target

[pastel bear]

I just do the questions until my brain starts to fatigue. I spend a few hours a day on tmh

[silent river]

It depends on the day and the topic/room

sometimes 5, other times 65...

The entry level stuff, the stuff I alreadyn know.... it was almost 200....

There are Many factors.

[weary meteor]

It depends from day to day and on room difficulty . Don't set a number of question answered as a target 🙂

[summer verge]

phyton

[rocky arch]

Koth requirements?

[weary meteor]

I think that you need to verify to access https://discord.com/channels/521382216299839518/695343809726513292 channel 😄

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

If you want to access koth on THM web site go to your Account settings and change your Technical Ability description to Intermediate or Advanced 🙂

[ionic hornet]

thanks

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #4 - 2006)

[south inlet]

You get voted in by Community Mentors, for being helpful and respectful in the server.

[gusty magnet]

Guys I am absolute noob, where do i start?

i wanna be a bad ass hacker

[south inlet]

Have a read over #start-here

[gusty magnet]

alright thanks

will i be able to learn everything or do ineed to buy premium subscription?

[ionic hornet]

most stuff on thm is free

[gusty magnet]

i see but advanced stuff for atually securing a job is paid?

[ionic hornet]

good question, perhaps @south inlet has an answer for that

[south inlet]

60% of the content is free, however you'd want to learn with outside sources too.

[gusty magnet]

alright , could I know the outside sources i can follow?

[south inlet]

Eh, I usually use which ever sources I can find

[gusty magnet]

https://tenor.com/view/besos-gif-27336541

okie thanks 🙂 are you a pro hacker?

[zinc iris]

Hi everyone

I have a question

some of the rooms I tried , I got like 260 or 300 points , and in the chart some people can reach to 600 or 700 , and some times it's and easy room !!! what they do differently ???

[turbid wasp]

I was just looking into this a few days ago. It depends on the type of room and how close to the release date that you answered the questions.
https://help.tryhackme.com/en/articles/6563910-points-explained

[zinc iris]

OH, so it's not something I do wrong !

I was kinda try to work faster !!

[turbid wasp]

No, most likely the high point scorers got "first blood"

[zinc iris]

Well , I'm relieved now

thank you

[turbid wasp]

np 😉

[weary meteor]

Those are "blood points". Whoever finishes the task first gets more points than everybody else 😄

[iron carbon]

Hi @weary meteor I'm attempting the Jewel challenge in the uploads vuln room. https://tryhackme.com/r/room/uploadvulns

I have uploaded my Js payload and I've identified the file using gobuster. Using http://jewel.uploadvulns.thm/admin I tried executing my payload using ../content/<filename>.jpg but I am getting a module not found error

[vast rune]

hi everyone :)
just a question:
if i need to make a crypted folder on my desktop (windows) what should i do?

[opal void]

hmm make 2 forlders both with the same thing in it and make 1 of them more look like it is correpted so change the ting a bit and done :)

[rugged frigate]

why would you need one?

[weary meteor]

Hi, can you send a message in https://discord.com/channels/521382216299839518/522158539129618453 , provide a screenshot if possible 🙂

[zinc iris]

Thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #3 - 2062)

[zinc iris]

There is many ways to hide stuff in windows I recommend this video :

https://www.youtube.com/watch?v=VcqtWsbSbgU&pp=ygUZbmV0d29ya2NodWNrIGhpZGUgZm9ubGRlcg%3D%3D

You can hide files inside other files , I think it's the best way if the files are really important

[shy scaffold]

Question, how do I get the colored roles here?

[frail vault]

@shy scaffold

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 13, 2025, 10:20 PM

[weary meteor]

You will need to verify , follow instructions from the link above 🙂

[warped badger]

🇫🇷 Becarefull french speakers.
Google translate confuse "decrypt" and "cracking"

[tidal creek]

Hey, am I the only one who gets confused with the streaks on tryhackme? I feel like I am answering questions every day, but my streak is lost nonetheless. So I assume the streak is lost when I do two sessions within 24h (say 7pm and then 7pm next day) and it is counted as the same day. So for me to continue my streak I would have to answer a question between 7pm next day (i.e. 24h after my first session) and 7pm the day after (i.e. 48h after my first session). So on the third day, when I answer a question at 8pm, my streak is lost because more than 48h passed between the first and last session, while the second day was not recognized due to being within the 24h of the first day. It is confusing to write this but I hope it makes sense.

So my question is why is it not counted from 12am to 12am? I assume it's because of varying time zones of the users? Then I think it would make a lot of sense to inlcude a visual timer or something to let the user know when the streak will break.

[weary meteor]

Streak should follow midnight in your time-zone . You can ask staff to restore your streak 🙂

[sly gale]

Ethical or Unethical one!?

[soft pier]

could it be because there is no good french word for the word crack in the hacking sense???

[warped badger]

I don't think there is an equivalent, but we just use the english term.

[soft pier]

yeah that would make sense then why google translate messes up

[tidal creek]

Alright thanks 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #3 - 2077)

[weary meteor]

I don't think this translation is wrong , seems good to me 🙂

[weary meteor]

Here's the support mail if needed 😄

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 14, 2025, 12:09 PM

[warped badger]

it is. "déchiffrer" mean "décrypt" and we can not decrypt an hash

[weary meteor]

Yeah but many people use these terms interchangeably decipher/crack 😄 . As per Cambridge Dictionary , decipher means - to discover the meaning of something , doesn't necessarily mean decryption 🙂 .

[warped badger]

words have meaning. if i point this out it's because it can make some paragraphs of tryhackme confusing for french speakers

and there is no "decipher" word in the text i showed

[weary meteor]

Oh I'm so sorry , I assumed that dechiffrer means decipher , I'm sorry my bad 😄

[warped badger]

np 😄

[tidal creek]

I am pretty sure that's true though. Decrypt in french means décrypter as far as I know.

[tidal creek]

Just like used in the first sentence in the picture 😄

[warped badger]

it's true but it can be confusing that's the point. It can be interpreted in different ways

[surreal quiver]

Does reinstalling an OS get rid of malware completely?

[weary meteor]

It should 🙂

[ionic hornet]

except for malware which is in the bootsector, but havent heard for ages that this kind of malware is still around

ah bootkits, that was the name >> https://en.wikipedia.org/wiki/Rootkit#bootkit

[karmic sonnet]

I wish it was the only mistake ... it cost me a certification in 2013 ! 😢
Since then I became good enough in English to pass my certifications in English ... and I never regretted it !
That would be my best advice to french learners ... do it ... in english !^^

[onyx valley]

Hey who help me with hacking a car

Can*

I know Teslas have been patched

But what company’s like Toyota and Chevy

Is it possible to unlock the car with the user app by using someone’s email

Yes i watched mr.robot today

[summer verge]

@odd acorn maybe you want to take this one 🙂

[warm star]

Hi!
I have a comprehension question regarding the "Advent of Cyber Day 14". I think the channel is closed, so I would try my chances here 🙂 In the challenge we create a MITM attack by using burp suite to intercept logins from users. The website is not secure and we are using brup to create self-signed certificates. While I understand that the traffic is not secure, I don't understand how we can intercept the login traffic. In past tasks, we only intercepted our own requests to a server and tampered with this. But how can we intercept requests from others? Or is this because we are actually simulating logins from users and that's why we can intercept it? But in that case, the task would be a very artificial attack I guess. Help is appreciated! 🙂

[weary meteor]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 🙂

[warm star]

Alright, thanks 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #3 - 2108)

[smoky mortar]

cheese-of-the-day

[soft pier]

cheese of the day has migrated to this new cheese of the day thread above

#873642346762350592 food should now be less cluttered and allow more standalone pictures and discussions without cheese interfering

[sharp chasm]

So, the Metasploit:Exploitation room says it should take 20 minutes. I am starting to feel kinda dumb. ._.

[weary meteor]

No , don't pay attention to that , it's useless 🙂 .

[sharp chasm]

I've spent like 6 hours q.q

[weary meteor]

It's fine , especially if it is your first time 🙂

[sharp chasm]

Ty for the encouragement ^.^

[weary meteor]

You're doing great , keep up the good work 😄 . And once again , please don't pay attention to that timer , just ignore it . It can't go bit further than truth 😄 .

[sharp chasm]

I try not to. It's definitely just my first stumbling block I've hit.

[weary meteor]

You will face many more but don't stop , feel free to reach out here whenever you need help 🙂

[sharp chasm]

Tyvm. I will.

[zinc iris]

some rooms have 0 min , don't expect that to be true too lol, I just ignore the timer and just work ...

[sharp chasm]

That’s what I’ve been doing. On the last room I was in I spent like 2 hours trying to find a solution I already had lol! I used John the ripper to crack a hashed password and kept thinking I was getting some sort of error, nah I just didn’t real the file right. I have the same problem as when I get in arguments, I have no idea when to stop XD

[twin ridge]

I mean that's a UX problem with John, but I have a feeling the devs don't care

[zinc iris]

I think if we practice enough we will be familier with the patterns and know exactly when to stop

[weary meteor]

Yes, it is correct 🙂

[sharp chasm]

Yeah I was seeing the hash string in the john.pot and the password was at the end of the hash but it just looked like a continuation o fit

[zinc iris]

Did anyone completed a room , and the points were just 0 ?! I wonder why that is ?

[summer verge]

can be a very old room, or a room you did, deleted and did it again, there are other scenarios but I don't remember all of them now

[zinc iris]

I guess old , the room I just did is 1669 days ago, thx

[hoary nymph]

Gave +1 Rep to @summer verge (current: #60 - 141)

[weary meteor]

Depends which room 🙂

[gritty sluice]

Man, I'm starting my journey with the book "Linux Basics For Hackers"

and just understanding the commands and how to use them in generals is breaking my brain.

I'm also learning my brain is very lazy, lol. That will change tho hehe

[weary meteor]

Check out this path you also have practice labs attached to these rooms 🙂
https://tryhackme.com/r/module/linux-fundamentals

[gritty sluice]

Yeah, I've done those already. Yet I have a vague memory. I need to revisit those or something.

Other then that, how you feeling KGB? You doing anything fun at the moment?

[weary meteor]

Thanks for asking , I'm good , how are you 😄 ?

[hoary nymph]

Gave +1 Rep to @gritty sluice (current: #2598 - 1)

[gritty sluice]

nuthin really, I was just reading the book I mentioned trying to learn something

I'm about to get ready for work tomorrow, we got a team meeting tomorrow, and I hate meetings

We get free lunch tho, so that's a plus

[weary meteor]

Well, that's a great way to spend your time , keep up the good work . Btw have a nice day at work , hope that your mettings is going to be well 😄

[gritty sluice]

Yeah, I'm on the Help Desk at my current company. We have one like every month. So, they want me to be an actor and be an end-user.

lol, my script is "An Angry end-user that doesn't want to get off the phone".

Lol, I'm for it

[weary meteor]

Well , that sounds like a very likeable scenario 🤣

[gritty sluice]

I'm for it. Time to put my acting skills to the test

[weary meteor]

Good luck 🤣

[bronze hill]

ey chaps! I could only complete the free rooms till LAN classes on the THM btw.
can't go ahead as I am a student earning no money so as to pay for the premium rooms lol.

and my question is can I go ahead to practise linux commands on the THM for free or I even have no way to do so??

pls help me know better.

[weary meteor]

Check out this module
https://tryhackme.com/r/module/linux-fundamentals

[bronze hill]

is this full free??

or prem rooms available in the mid of the way lol???

[weary meteor]

You can see a list of free linux rooms here
https://tryhackme.com/r/hacktivities/search?page=1&contentSubType=free&kind=all&searchText=linux

[bronze hill]

bro! the part 2 is prem again!! 😦

_<

[weary meteor]

https://tryhackme.com/r/hacktivities/search?page=1&contentSubType=free&kind=all&searchText=linux

This is all free

[gleaming blade]

@weary meteor I wanna ask, how important to know inside-out Goverment and Regulations? I cant add the pic by the way...

[weary meteor]

You will need to verify in order to upload images
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account 🙂

[gleaming blade]

Thanks, i did, the quession remains, how important it is?

[weary meteor]

Well it's important to get familiar with laws/regulations in your area to make sure you aren't doing anything that's against them and make sure that you aren't breaking any local laws 🙂 .

What's legal in one place/country/state may be illegal in another 🙂 .

[gleaming blade]

So based on this, if i do things local i need to know rules set by NBSZ, if i reach a server in USA i need to know the rules set by NSA?! Oh my god..

[tidal solar]

Finished some 50 rooms but so far had to read writeups for each challenges
Not that I am following a learning path, just completed rooms on topics I was already familiar with

[stiff berry]

I am having this problem with the outlook API . In order to get the outlook API you've to create an app registration which requires an active directory and for that you've to also create an Azure account. In the process of signing-in, it seems the offer is not available in my region(Malawi) and i cannot processed further. There is this other way i found out, by signing-in using Microsoft 365 developers program and when i tried, it gave me an error saying am not qualified.

[tawdry dove]

Reach out to Microsoft support and they will give you next steps. If you're in a region they do not support, you're out of luck.

[stiff berry]

Seems like thats the only solution.... Thanks mate!

[hoary nymph]

Gave +1 Rep to @tawdry dove (current: #20 - 489)

[little shore]

It is what it is. There may be different laws depending on the jurisdiction so we have to make sure we operate within the bounds of what is ethical and legal accordingly.

[gleaming blade]

And what happens if u accidentally step out of boundaries?!

[tawdry dove]

The NSA at least doesn't set laws, you need to follow the rules and regulations of the host country as well as your local laws and regulations. That being said, if you're doing everything ethnically, you'll follow the scope set forth in the contract.

[tawdry dove]

You realistically shouldn't get to that point

[gleaming blade]

Cool, thank u guys:)

[trail matrix]

got a question, do people still use Zeek ? or there are better tools and this one is not efficient anymore ?

[zinc iris]

it was about linux priv esc :

https://tryhackme.com/r/room/linuxprivescarena

[zinc iris]

look , if you use books it's cool and kinda have everything , but websites like tryhackme , with examples and questions are faster and more efficient

[zinc iris]

I just looked more into my rooms and for some reason in this room : https://tryhackme.com/r/room/ctf I got 60 points while the other users got much mroe , I wonder why ?!!!!

[weary meteor]

This room was updated it used to have more questions 🙂

[dense rivet]

It's said that learning Python is necessary for a SOC analyst, but in the path of SOC doesn't have a room to learn Python, I mean THM has rooms of Python basics and Python for Pentesters but not for SOC analysts. Which other resources would you guys recommend for people to learn Python especially for SOC analyst?

[weary meteor]

I think that these two should be fine for beginning 🙂

[dense rivet]

Ok, but do you think it'll help learning Python for PenTesters too?

Cuz the purpous seems different

[weary meteor]

Yeah , I would recommend to check it out 🙂

[dense rivet]

Ok I'll check that out, thank you!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #3 - 2197)

[twilit lantern]

Whats you guys go to resource for learning c

[weary meteor]

I would recommend freeCodeCamp and codeCademy for beginning 🙂

[twilit lantern]

Thanks !

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #3 - 2199)

[zinc iris]

oh okay thanx

[weary meteor]

For others rooms , who first gets the right answer gets more points than everybody else ( "blood points" ) . You can learn more about points on the link below 😄 .
https://help.tryhackme.com/en/articles/6563910-points-explained

[zinc iris]

thx bro

[rare galleon]

does anyone have 3month premium voucher gift from christmas event but can not use???

[shy scaffold]

Hey, is it recommended to understand how to solve for hexadecimal numbers when it comes to learning networking?

Like hexadecimal to normal base 10 math and vice versa

[weary meteor]

Yes , it is an essential skill , it is present in most if not all networking exams 🙂

[shy scaffold]

Is there any rooms you can recommend to learn how hexadecimal works?

Or sources

[weary meteor]

There's no room on THM dedicated to that but check out this video from David Bombal it will definitely help 🙂
https://www.youtube.com/watch?v=bqF0zoGTaY0

[shy scaffold]

Thanks!

What about rooms to practice concepts from the iso model? I understand but it's hard to remember them all at once from just reading it

I like hands on stuff

[weary meteor]

Don't pay too much attention on OSI especially if you are on beginning of your journey 🙂 . Continue with other networking rooms all those concepts will fall into place over time 🙂

[tidal solar]

Try Wireshark 101 next or may be do it after networking module

[ionic needle]

Read some basic number theory books or videos

[young gulch]

Hexa decimal is a Base 16 number :), 0 1 2 3 4 5 6 7 8 9 A B C D E F
as for Binary it's Base 2 , 0 1
Normal numbers Base 10 , 0 1 2 3 4 5 6 7 8 9
|--------|---------|
Base 10 , Base 16
0 = 0
1=1
2=2
3=3
4=4
5=5
6=6
7=7
8=8
9=9
10= A
11 = B
12 = C
13 = D
14 = E
15 = F

when you write write a large numder in base 10 , for example 1337 : you can separate it in 4 way : 1 x 10^3 + 3 x 10^2 + 3 x 10^1 + 7x10^0 = 1337
Same goes for Hexadecimal , 0xAB12 : Ax16^3 + Bx16^2 + 1x16^1 + 2 x16^0

[tribal topaz]

Hey everyone! My name is Davey, I am extremely new to this community and discord in general! I like to exercise, play games, and I have joined discord because after looking everywhere for a community of people who actually know this stuff! I ended up joining this server and a few others. Thank you for letting me in and I hope we can all become good friends!

[weary meteor]

Hi Davey , welcome to community 😄

[zinc iris]

Welcome, hope you got what you looking for here

[midnight current]

beej.us guide to c programming

beautifully explained, plus actually fun to follow along

[uneven ether]

Hey. I have connection errors every couple of minutes. Does anyone have same? Using AttackBox. Please help me

[weary meteor]

AttackBox is already connected to THM network . How do you have errors ?

[chrome elbow]

+rep

[hoary nymph]

Gave +1 Rep to @young gulch (current: #306 - 20)

[turbid wasp]

Well this is an interesting tidbit of history

https://www.tomshardware.com/tech-industry/cyber-security/the-first-ever-ransomware-dropped-35-years-ago-disguised-as-a-floppy-sharing-aids-information

[tidal solar]

https://x.com/fs0c131y/status/1881105445856874977

Baptiste Robert (@fs0c131y) on X

The IP address of DrugHub, a well-known dark web drug marketplace, has been exposed.

The website owner made a critical OPSEC blunder.

It's OPSEC time!

X · Jan 19, 2025, 10:24 PM

[tidal solar]

https://x.com/josephfcox/status/1881343994212614335

Joseph Cox (@josephfcox) on X

New from 404 Media: meet GeoSpy, a powerful AI tool that lets cops (& stalkers) geolocate photos in seconds. Trained on millions of images, it picks out soil, architecture, etc. GeoSpy closed public access after asked for comment, now marketing to police https://t.co/khS4bDlclP

X · Jan 20, 2025, 2:12 PM

[south inlet]

@pseudo meadow stop dm'ing people please, this server is not for that.

[pseudo meadow]

@south inlet Got it but I'm just trying too understand community ppl and I only text those who are allow dm.. But yeah if you want I don't text so I understand. Looking forward to your response

[south inlet]

The content of the DM's isn't what this server is for

[pseudo meadow]

I got your point Thanks I will be care next time ❤️ thanks for your calm behavior Respect for you 🙏🏻

[radiant jacinth]

I've got a question, all the techniques for web application testing that i've currently learnt till now is for HTTP, would the skills transfer to HTTPS? Thanks for answering in advance.

[next bronze]

I think it would be the same, but making HTTPS sites would require getting SSL certificates

Many techniques remain the same

[tidal solar]

https://x.com/troyhunt/status/1881643578654622070

Troy Hunt (@troyhunt) on X

You absolute muppet, Ghulam 🤦‍♂️

X · Jan 21, 2025, 10:02 AM

[next bronze]

What 💀

Security researcher + does not know how to google lmao

I feel bad for the 497 companies who got this email

[quaint basin]

I mean, HTTPS is just HTTP wrapped inside TLS...
There's more to think about with HTTPS, but I can't think of any technical considerations that go away. Some risk changes, etc, but chances of you having learnt those from a course are slim.

[radiant jacinth]

so everything ive learnt with HTTP would work with HTTPS but i will need to learn extra stuff/steps when i get to HTTPS? im just wondering how the skills would be transferred to irl since most websites are HTTPS nowadays

[next bronze]

It doesn't change how we exploit the site functionality, in most cases

[quaint basin]

Pretty much, yes. And fyi, a site using HTTP is usually a finding in a pentest

[hoary nymph]

Gave +1 Rep to @raven burrow (current: #382 - 15)

[quaint basin]

In what world was that a "thank you" ya moronic pile of bolts lmfao

[harsh linden]

`YAGPDB.xyz ✔️APP
Gave +1 Rep to @YAGPDB.xyz(current: #1 - ♾️)

[south inlet]

The bot is broken.

[south inlet]

Pretty broken.

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 823)

[south inlet]

See?

Pretty, difficulty have triggered the rep points.

[radiant jacinth]

ah thank you for clearning things up, this has been bothering me for the past few days ha!

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 824)

[quaint basin]

That is wild

[south inlet]

i'm pretty sure -l doesnt work with -a 0

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 825)

[south inlet]

😄

[tidal solar]

😅

[formal oxide]

Guys im try’na join room [Wreath] and its not working…Help!

[trail matrix]

well do you have a 7 days streak ?

[zinc iris]

The new room is killing me , and I didn't finish it , 2 hour so far ! (MBR and GPT Analysis)

[weary meteor]

Well it is big 🙂

[frosty grove]

Any body else practice alot or is it just me?

[weary meteor]

I'm currently going through new room 🙂
https://tryhackme.com/r/room/mbrandgptanalysis

[frosty grove]

I see im just practicing linux parts 1 again gett used to commands
Echo
Whoami
Ls
Cs
Cat
Pwd etc etc

Lots to learn and this is just the start
When you need encourgement whats your preferd go to?

[weary meteor]

You're doing a great job , keep up the good work 😄 .

[frosty grove]

I apperciate that i worked on it for atleast a total.of a hour its a little daunting but once i grt used to grep and pwd i need more examples to make them work for me to learn do the other parts of linux show/teach that?

[weary meteor]

Well since you need Linux on everyday basis in cybersecurity you will get used to these commands pretty fast 😄

[frosty grove]

Okay ive gotten used to echo
Whoami
Ls
Cd
And alittle of cat so you think ill be okay if i do parts 2 tomrrow?

[weary meteor]

Yes , go slowly don't rush 🙂

[frosty grove]

Thanks.. thats what im trying to do.. ill see how it goes for me tomrrow im gonna take a break

Really apperciate you responding btw. Youre doing a good job too

[weary meteor]

Thank you 🙂

[hoary nymph]

Gave +1 Rep to @frosty grove (current: #1714 - 2)

[frosty grove]

Youre welcome!

[odd acorn]

Doxxing isn't appreciated here. Regardless of who or what they did, please don't post any details of anyone in the Discord server (this includes social media posts which contain user details).

[tidal solar]

Makes sense. 👍

[zinc iris]

all of us

[warped badger]

I would like to create a virtualbox on my pc to install linux
We to need choose how many ram will be dedicated to the VM,
But when the Vm will be closed, my pc will find all its ram right ?

[soft pier]

yeah when you shut down the vm your host computer has access to all of it again

[warped badger]

ok thank you 👌

[hoary nymph]

Gave +1 Rep to @soft pier (current: #4 - 2064)

[warped horizon]

I don't believe it will 'reserve' the RAM, rather just let the VM use it. So it will still be available while running it. C'est bien.

[zinc iris]

yeah that's right

I would like to learn about how to repair corrupted images, is there rooms about that in THM ?

[next bronze]

Can tell you from personal experience that its much faster to delete the image and re-extract it from the zip rather than troubleshooting or repairing it

You can still repair it if you want to, just that this will be a lot faster

[weary meteor]

Yes, there is 🙂 . Check out new #1331657410091417600 room 🙂

https://tryhackme.com/r/room/mbrandgptanalysis

[weary meteor]

I would recommend you to give at least 4GB of RAM to your Linux VM 🙂

[fresh slate]

While we are at VMs, I created a windows 2016 server follow KevtechIT support channel in order to learn the basics of Active Directory, can you recommend how much RAM should I allocate?

[weary meteor]

4-8 🙂

[warped badger]

Ok ! Thank you

[hoary nymph]

Gave +1 Rep to @warped horizon (current: #1714 - 2)

[warped badger]

Noted ! Thank you

[weary meteor]

Also if you're really have 32GB of RAM , you can easily go with 8GB dedicated to your VM which I definitely recommend 🙂

[warped badger]

i have 16 go of ram

[weary meteor]

That's also great , go with 8 on VM 🙂

[warped badger]

ok thx 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2421)

[tidal solar]

https://samcurry.net/hacking-subaru

[civic root]

URL Scan Report

Report for https://tryhackme.com/r/room/mbrandgptanalysis

Malicious?

false