quiet-conversation

[stuck drum]

Hello everyone,

I’m currently looking for a tutor or mentor who can help me improve my skills in email penetration testing, phishing techniques (for ethical purposes), and general ethical hacking. I'm serious about learning and would appreciate guidance, whether it's through private sessions or structured lessons.

If anyone is offering tutoring or can point me in the right direction, please DM me. Thank you!

[next bronze]

What's email penetration testing?

[rustic patrol]

Probably a dumb question....Anyone can confirm that ctfs like The Sticker Shop
https://tryhackme.com/room/thestickershop

can be expected for OSCP?

[hard kestrel]

hello guys, is this a place where I can find charge-free helpers/advisers about certain hacks?

[weary meteor]

For OSCP advice try to ask guys in #cyber-and-careers channel 🙂

[weary meteor]

Wdym by that ?

[hard kestrel]

like can you please tell me how i can hack a feature, without me having to pay you to do so?

[weary meteor]

We don't do that here , we aren't hackers for hire

[hard kestrel]

yes i know you dont do games..

[hard kestrel]

why mention ''hire'', tho?

[hard kestrel]

Joo has already told me it's not about working on / hacking games. I understood it

[strange plank]

That is insanely easy compared to OSCP standalones.

[chrome adder]

Hello guys. I just started my cybersecurity journey two weeks ago. It's been daunting to be honest. I'd like to connect with like-minded fellows. Sharing insights, tips, new updates, helping one another grow, teaching and also learning from one another. Tutors and mentors(if possible) to be able to make this journey less challenging. Send me a message if you'd like to connect. I'm in Georgia, USA if there's also the chance of a physical connection. Thank you.

[solemn elbow]

Hey just added you now bro

[chrome adder]

Ok bro

[chrome adder]

Sent you a message

[rustic patrol]

Really? I couldn't find tutorials or write ups that follow the rules and regulations of the exam. ||People were using AI to make a script to exploit that vuln||

[quaint basin]

Can't use AI in the exam, and yes, that is insanely easy compared to OSCP... which is saying something given OSCP is entry level.

[rustic patrol]

If I want to make a similar script..I do it manually with any language of my choice? Are there any other ways to achieve something similar other than scripting manually maybe with any tool?

[quaint basin]

I mean, not really? You need a language which will execute in the browser, bearing in mind you don't have full control over the application. JavaScript is realistically the only choice.

As far as automating that goes, yes, probably, but the JS required to exploit that is less than foundational. It isn't really worth the time building a tool for it.

[strange plank]

Why would people make a TryHackMe writeup for an easy room that would follow the OSCP (From offsec) rules and regulations?
They are not related in any way.

You just need basic JS knowledge for this room. I personally did not use any AI tool. This is how programmers have been doing for years before AI, but people now just use AI mindlessly.

[quaint basin]

At the end of the day, remember that "hacking" is just abusing flaws in a system. You need to understand what you're looking at. You need to understand how programs work. How infrastructure is built. When you look at an app like that, you need to understand how it's likely to be architected, how the software stack works, the locations where it may be hosted, the kinds of flaw it may be vulnerable to -- and how those flaws may be implemented in the code, etc, etc, etc.
The most important thing for a hacker is mindset. You need to want to learn everything. Don't shy away from building knowledge in foundational topics. At the end of the day, that is far more important than knowing how to use hacking tools.

[jagged nymph]

Hey all, if I'm in the wrong channel for this, let me know, but I came across Digital Forensics Examiner as a potential career, but it doesn't come up on TryHackMe as a path. Does this fall under something else?

[plush bronze]

@frail vault I sent a message to you via email for a week now but I am yet to get a reply from you. I was enquiring to know how I will subscribe to your business plan for my students.

[strange plank]

You are talking to a bot.

[plush bronze]

You mean your email is a bot

[strange plank]

No, you are actually talking to a bot. @frail vault is a bot.

It won't respond.

[queen knoll]

Hello I'm Carlos and i am a computer network administrator and cyber security consultant and analyst for 12 years now my certs are

CompTIA Network+ and Cisco certifications like CCNA and CCNP also (CEH)

I'M here to be of service and answer questions i am also looking for recommendations or to download any type of .apks of any good ethical hacking apps to add to my collection apps or hacking tools apps and or exploits my DM is always open

[queen knoll]

Thank you and you're welcome

[hoary nymph]

Gave +1 Rep to @winged nymph (current: #2853 - 1)

[plush bronze]

My bad!
Thank you

[silver parrot]

I have a 2-year gap after graduation. I am unemployed. I'm having a tough time. This is my first time here. I don't know if this is the right channel to ask for help. I started learning defensive and did a one-month internship. I recently started learning Web application Pentesting, and it's so exhausting. I am feeling like quitting cyber and starting something fresh.

[north roost]

pentesting is difficult and rightly so, theres a reason a lot of people tend to start with IT -> Blue team -> Red team; in either case there are so many niches in cyber that you are bound to find yours, stick with it and keep showing up to train/practice/learn

[clear junco]

Whats the reason your motivation is wasted? What keeps you away from trying? Explain your struggle some more, maybe i can give you some motivational adivce ☺️@north roost

[silver parrot]

I started learning web app pentesting using PortSwigger Labs, even though I am also following a playlist. Now, when I started reading the book "Web Hacking Arsenal: A Practical Guide to Modern Web Pentesting" by Rafah Baloch. It made me realise there's so much data, so many commands, so many recon steps and whatnot. After reading only 2 chapters. I now just don't want to continue. This is so frustrating. Even knowing that in the end, the steps that have been mentioned within the book are nothing but reality.

[smoky robin]

“Hey folks, I’m diving deep into cybersecurity and ethical hacking. Currently going through Python Crash Course + Linux. Learning daily, building tools, and aiming for bug bounty/CTFs soon. Looking forward to learning and contributing!”

I am looking for a mentorship because i am confused what to do next?

[oblique laurel]

You want to make a living with bug bounty hunting? Then go try find some bugs! Wanna play CTF? Go play and c what you do not know yet ..and then learn it, so next time u know better {SIMPLE as that} 🙂 btw what tools are you building? where can we c them?

[patent siren]

We are at same place

[patent siren]

Bounty will be hard to win

[oblique laurel]

remember: "a journey of a thousand miles begins with a single step" @smoky robin was asking about the next step, and that is always a single step even if you feel that'll be a long way 2 go.. all it takes is to figure out where you stand now, where you want to be in the future and what exact steps might be in between 😉 usually it begins with just starting. don't think - act

[patent siren]

Ok thank you

[hoary nymph]

Gave +1 Rep to @oblique laurel (current: #2857 - 1)

[valid pond]

Who here uses or has used vulnhub? I don’t know how to set up an environment for practice. Please help

[south inlet]

You download it?

[uncut flower]

make sure to set up your air-gapped network before attempting to hack anything from vulnhub

[stable charm]

😉

[strange plank]

Something seems wrong, leagues have been out for 4 weeks, how come you have all 5 badges?

Were you also one of the people with 2 league promotion bug?

Oh nvm, looks like you don't have any of those badges.

[slate fossil]

if i get promoted to one league to another and don't get the badge then is there any way to get that particular badge later?

[weary meteor]

yeah , drop to that league again and be the #1 for that week 🙂

[slate fossil]

nice

[lone relic]

it mentions "play 2 rooms to join", if i dont join that week do i demote

[mossy axle]

My guess is yes.

[mossy axle]

I have also experienced that bug twice for both Sapphire and Diamond. Its probably time related, i got a badge for Sapphire and it got unlocked after ~3 hours.

[radiant jacinth]

Hello

[weary meteor]

We don't do that here

[granite crest]

Btw @quaint basin I just redid Wreath to practice, 10/10 room

[obtuse elbow]

i just made it to Sapphire League : D

[reef sparrow]

i have only the diamond badge but i am stuck diamond

[stable charm]

ok and I already have the sapphire badge

[onyx atlas]

Nicely done!

[onyx atlas]

V nice, I lost my 100 day one

[little shore]

Are you referring to your streak? Did you lose it recently? If you did, you can ask THM Support to restore it for you.

[onyx atlas]

It was a while ago

[granite crest]

Just started watching a video about TOR vulns that popped up on my feed. No idea who this guy is or if he's trustworthy but his beard is glorious

It's like some sort of bald Gandalf

[covert remnant]

I've seen him before but I forgot the name

Send me the yt link pls

[granite crest]

Sure

https://youtu.be/ooNmubCA680?si=q5Glynqf4fCxBjA-

As I said, idk this guy so do not blame me if he says smth wild or false

I'm still watching it

[mossy axle]

You passed 5 leagues in 4 weeks? This should be the badges list page, not the earned badges page.

[stable charm]

Yes, I just have the Diamond League.

[proud salmon]

hey @stable charm can i DM u cause i see u was FR because i will sometime need , like some help

[stable charm]

yes no problem

[toxic lagoon]

Dude used to run an illegal darknet market and got jail time for it (his channel even used to be called "DoingFedTime"). Now, he spends his time and energy trying to help people understand and increase their security and privacy. And yes, his beard is downright incredible lol

EDIT: by "illegal", I'm referring to the same sort of market that got Ross Ulbricht locked up, just on a much smaller scale. At least, that's what I'm remembering, it has been ages since I watched his videos

[weary meteor]

Great job , keep it up 🙂 🚀

[spice wraith]

Beard = professional at his work and know what he does

[verbal pilot]

Hope I can reach you too in case of any problem I’m a beginner

[silver parrot]

Hey
Is there anyone who does web app pentesting or bug bounties?
I am looking to form a team where we can engage daily, learn, grow and get that future job we aim for.

[weary meteor]

Yeah , there is . Check out #bug-bounty channel 🙂

[silver parrot]

Thanks!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4848)

[amber sorrel]

Hey everyone! I’ve started my journey into cybersecurity—so far I’ve learned Linux file navigation, basic networking, Nmap commands, and how to use Wireshark for stealth scans. Right now, I’m diving into Linux privilege escalation. I’m looking for a mentor to guide me along the way!

[strange plank]

Good luck!

[meager lynx]

Id recommend boot to root challenges, try to do as much as you can by yourself, once you hit a point where you hit a wall, open up a write up on the challenge, but read it only until the point where it gives you a hint where to go from there. Repeat until done

[warped orchid]

Hello friends,
I am can anyone please help me understand if pursuing
A triple Bachelors in

1. Cybersecurity
2. CyberOperations
3. Cybersecurity Policy and Management.

Is it possible to get a better entry level job, obviously along with the other necessary certifications and Internships in the field.

[next bronze]

a triple bachelors?

you mean three degrees?

besides, all of those topics likely come under cybersecurity as a whole

[warped orchid]

Yes three degrees, so more in depth studies.

[oblique laurel]

do not try to do everything .. do one thing well 😉

[reef sparrow]

deff get something refurbished

wayy better price for performance than something new

[muted torrent]

Not gonna lie, it's disappointing to see previously free courses get turned into paid courses

[south inlet]

Where?

[muted torrent]

Intro to LAN
Linux fundamentals 2&3
Wireshark: the basics

They were free rooms a year ago or so, I recommended them to a friend along with some others and these ones are now premium rooms.

[south inlet]

Yes, rooms get switched about now and then.

[muted torrent]

I mean I get that, but it's just disappointing. Especially when they're pretty basic introductory rooms

[muted torrent]

comnmunuty

<@&612305984752451594>

[weary meteor]

Thanks , he is removed 🙂

[muted torrent]

Appreciate you

[surreal quiver]

Hey @weary meteor a while ago you recommended me codecademy for python. I was doing burp academy up until a couple weeks ago then I started python and i have finished the basics now it seems reasonable to go on to finish intermediate but I'm not sure how would I go about writing scripts for cyber. Do you maybe know any sources on that? So far it has really improved my understanding of it

[weary meteor]

Glad to hear that . THM recently released about making custom scripts in python , check it out 🙂
https://tryhackme.com/room/customtoolingpython

[surreal quiver]

I did already, i guess exercising it more would be good and looking at at the libraries documentation couldnt hurt either.

Congrats on becoming a mod btw

[weary meteor]

Thanks 🙂

[hoary nymph]

Gave +1 Rep to @surreal quiver (current: #980 - 5)

[weary helm]

Anyone tried to use Tails OS with Ventoy?

[fair vine]

Yeah i dont think that works, at least not the persistent storage bit

but its not recommended:
"Tails recommends against any and all non-standard installations, including multi-boots and things like Ventoy. Tails may not work as intended and it exposes your installation to malicious and accidental interference. In short, you would not be able to trust it."

[shell summit]

it's just better to follow the installation instructions for TailsOS

[quaint basin]

As a side note, Ventoy is also subject to some controversy right now.

Something about injecting known malicious root certs in PXE Windows installs (iVentoy, rather than the USB installer, although people are questioning how opaque its source is).

https://www.reddit.com/r/sysadmin/s/ybr9QWyWVJ

[soft pier]

oh damn that sounds bad

.... but are there any competitors to what ventoy does or is shadow basically stuck with it for their backup install linux iso and memtest86+ usb stick???

[scarlet kayak]

who knows about evilginx

[tawdry dove]

The person?

Or the framework? If it's the framework, what are you trying to do?

[scarlet kayak]

the framework

i'm trying to learn about it

[glass elk]

Hey! Anyone go through the Cybersecurity and information assurance bachelors program with WGU? I’m thinking of going through with it. Thanks to THM I like.. love cybersecurity

https://www.wgu.edu/online-it-degrees/cybersecurity-information-assurance-bachelors-program.html?query=quiz&refer_id=ga-1-589512227648-98479532353&ch=PDSRCH&strala_kw=wgu+degrees&strala_mt=e&strala_dv=m&strala_pl=&strala_nw=g&strala_ap=&s_loc_physical_ms=9033187&s_targetid=kwd-297286709498&gad_source=1&gad_campaignid=1019539613&gclid=Cj0KCQjwrPHABhCIARIsAFW2XBNrKd0EBV8V_O4R1QmDyZ8OU0zYMOrl9XjTSFTMqtawqIrZz2pS2MUaAkhxEALw_wcB&pa=pa02&cb=pb07%2C+pb08&xa=xa02&xb=xb01%2C+xb04&xd=Security+and+data+protection %2C+Data+analysis+and+decision+making%2C+Websites+and+applications 

Want to know if it’s worth it/respected? — or if I should just get net+, comptia sec+ and sal1 and network my way into a job

[turbid wasp]

I don't know enough about WGU or the cybersecurity industry to give you a solid answer, but as far as certs and networking vs a bachelor's degree in general, it depends on what your goals are.

Do you want to just get a job in a specific industry? Then go with the certs and networking and working your way up. It will be much less of a financial burden and you'll gain a ton of experience in a specific field. But that comes at the risk of pigeonholing yourself in that field and possibly having to work harder and longer to get to where you want to be than you might have expected at the start.

Do you want to be exposed to a wide variety of subjects and perspectives that you can use to grow into a well-rounded and adaptable human being that can see the bigger pictures? Then go with the Bachelors if you can afford it (or can get a scholarship or can deal with the crushing student loans).

Keep in mind that my advice is biased by the fact that I have 3 Bachelors degrees and worked for 10 years between the 1st two and the 3rd in an unrelated, blue-collar industry where certs and networking are just as if not more important than any degree...🤷‍♂️

[glass elk]

Thanks for the advice. Definitely shaped my perspective on the matter!

[hoary nymph]

Gave +1 Rep to @turbid wasp (current: #854 - 6)

[cinder lotus]

I did this, took me 2 years. It taught me theory, but not really experience. It will primarily take you through the path of acquiring your CASP+ through CompTIA, with a couple of other certs along the way. A+ was, in my opinion, the toughest besides the Capstone as I knew nothing starting out, the layout of CompTIAs exams can be intimidating, and there are two exams to pass (at least when i did it in 2022). It's great, but don't believe the people that did it in 6 months, some of those courses are outright exhausting. My recommendation is save your money and study with Professer Messer for free for the A+, Sec+, and Net+, then when you feel ready to take those, start WGU and steamroll through the prereqs and those beginner certs to save time.

[glass elk]

Really insightful! Thanks for that. I really like the sound of that too, not that I’m in a rush, but it definitely sounds more appealing to get the entry certs out the way.

[hoary nymph]

Gave +1 Rep to @cinder lotus (current: #1144 - 4)

[rich gyro]

.

bruh

[sharp barn]

Anyone got any opinions on OffSec. It’s expensive and i want to hear from you all before hopping on that.

[weary meteor]

For a certification advice , try to ask guys in #cyber-and-careers channel 🙂

[sharp barn]

Thanks KGB!

[frozen shore]

how important it is do you guys think that you remember very info-packed/non-task based rooms such as governance & regulation or red team engagements?

[vernal raft]

Knowing laws and regs is important in every aspect of everything, but, as for the rest I've just been taking notes and referencing them we needed vs trying to remember it all. Same for some of the task based stuff too. It's a lot to remember

[tawdry dove]

Important, seeing as staying in scope is a core tenet of staying out of prison.

[frozen shore]

guess im gonna have to revisit those rooms once in a while

[lapis frigate]

Or you could make offline notes with notepad or MS word

I make notes for almost every room I complete

[south inlet]

I take notes for everything I do.

[lapis frigate]

Exactly, very important

Some details will need to be taken down somewhere

[quaint basin]

Oh Jesus, you're gonna have fun searching those in a few months

[tulip sierra]

I was skeptical of using things like OneNote, but it’s actually been nice as I’ve kept things organized and it’s been easy to look things up

[surreal quiver]

I also take offline notes for everything how else would you do it, it all seems important and its not easy to remeber everything. I mostly know where to look when I need something. Also making a page or 2 of main notes that you know you are gonna need and use also helps

[lapis frigate]

It actually makes searching for stuff easier if you organise the topics properly

[barren yarrow]

and when the key is fixed, I want to play Russian

[quaint basin]

I have a 500Mb notebook. 4000 odd pages built up over the last few years, and it grows constantly. Give it time and you will too.

You're going to struggle to search that if it's in a collection of word documents.
Text (MD) in something like Obsidian to manage node relationships is pretty common, although you may run into problems when you start storing anything malicious related to Windows.

Personally I would go for something hierarchical. The tree structure makes it easy to follow down from high level topics to more specific branches. That's me though

[quaint basin]

And yes, OneNote falls into that category. My intern last year favoured OneNote. Worked well for them

Not sure how well it scales granted, but you'll find out I'm sure

[south inlet]

I use OneNote in Uni for taking really quick notes, I could load up the lecturers pdfs and then use my graphic tab to take notes quickly during, them import it to trilluim.

[oblique laurel]

oh nice one single file with information about everything you do .. what could possibly go wrong m(

[south inlet]

I don't have to solve the same problem twice?

[oblique laurel]

yeah and one additional problem: protecting that file 😄

[covert remnant]

with common sense you can get very far

[oblique laurel]

i stick with "what I don't have doesn't cause any trouble" but i wish y'all good luck 🙂

[covert remnant]

Sure, you can have physical notes too and lock them in a safe or sum

Me personally I don't write absolutely everything and prob neither do Scrubz, it's mostly just stuff for learning purposes or maybe some plans or exam days

[oblique laurel]

sounds like you are well educated and with that comes good decisions about those things 🙂 what exam are you taking?

[quaint basin]

Yeah, that's going to severely limit you in this industry. There's far more to know than you can keep in your head.

Be sensible. Keep notes encrypted. Etc, etc, etc.
But one way or another you're gonna need to take them lmao.

As Scrubz said -- you never want to solve the same problem twice. Especially complex problems which can take weeks and dozens of fragmented resources to tackle.

[oblique laurel]

4n6 likes that d-_-b traces everywhere 😛

besides, you are right. i train my muscle memory and use manpages or history and logs. if i need to write down specifics i use a sheet of paper and later burn that

all i wanted was to raise awareness that's all 🙂

[quaint basin]

Raise awareness for... what... exactly? Data breaches? Yes, they happen. The solution isn't "don't keep data" though lmao

By all means, rely solely on your muscle memory and manpages (or your generally unencrypted raw data sources), but you will end up losing things 😆
e.g., I don't need to backdoor an ESXi hypervisor every day, but I sure as heck don't want to redo the research into how to do it the next time I need to -- whether that's next week, or in two years.

[astral steeple]

Hi everyone, I've been studying on tryhackme for a few months now and I've finished the free course. Does anyone know if there's a chance to get a discount on the monthly subscription?

[weary meteor]

There's a discount only on annual sub at the moment 😦

[astral steeple]

oh ok @weary meteor

@weary meteor just a question. I've had problems on the "silver Platter" room. I think the VMs aren't working properly. Where can I report the problem, since I don't have permission to write in the #room-bug channel?

[south inlet]

what didn't work?

[weary meteor]

How ?

[astral steeple]

no ping on the machine and i can't see the website

[weary meteor]

Can you provide a shot ?

[south inlet]

#site-support please

[astral steeple]

ok

[tawdry dove]

You want to share notes and fixes for that? Lol

[quaint basin]

What, backdooring ESXi? No chance

[tawdry dove]

😭

[tawdry dove]

Is there a fix at least?

[quaint basin]

Just reversing it lmao
To clarify, I'm talking tradecraft, not 0days.

[tawdry dove]

Gotcha

[civic root]

Done!

[strange plank]

That was extremely fast lol.

https://tenor.com/view/test-gif-2341822946696656132

[atomic mesa]

Is there anyone ?

[radiant plank]

i need help

[weary meteor]

Try to ask in #room-help channel 🙂

[radiant plank]

i messeged you because you see know more then anyone on here

[orchid sphinx]

hi

[inner obsidian]

Hi hi

[next bronze]

Something recently went fucky on my windows, it wouldn't boot. Troubleshot some stuff from the boot sequence, set it to auto repair the disk, and it worked. Anyone know if any logs are made? (I'd love to go through them if they are)

[fervent dagger]

hi

[bitter vale]

Maybe check the event viewer? Otherwise check if there's any boot logs. I don't know where they're present but there ought to be

[strange plank]

Wrong server for that.

[errant smelt]

wssup

[proven sphinx]

[wheat spindle]

yo, does anyone know how to spam someone on gmail, I would like to test it ?

[south inlet]

This sounds unethical

[wheat spindle]

litle

However, if this is inappropriate, I apologize for the question and do not expect an answer

[south inlet]

it is. 🙂

[robust fractal]

😂

[keen needle]

anyone have open dms

[granite crest]

Why?

[keen needle]

just a question

[granite crest]

Fair enough, I meant what would you like to speak about?

[eager sky]

Anybody here that can pull a wifi pass from a handshake capture for me? My hardware isn't ideal and I have time constraints

[south inlet]

Why?

[eager sky]

I'm having trouble finding the right community to ask tbh.. I have commercial space with devices containing creds from an old SSID and need to migrate them to the new network. These are permanently installed and I cannot access for hard reset. My only hope to interface with them is to obtain access to the existing AP before it is powered down

[south inlet]

This isn't really the server for that.

[eager sky]

What is? I'm not sure where the best place to ask is

[south inlet]

Wifi hacking is reserved for our advanced channels.

[eager sky]

That doesnt really help me though...

[south inlet]

Sorry to hear that, doesn't change my answer.

[sonic iron]

Good morning!

[inner sparrow]

Mornin mate

[fervent dagger]

which type of kali linux i should download as a beginner

[weary meteor]

Latest version

[fervent dagger]

installer machine or virtual machine

/what is difference between installer machine and virtual machine

[fervent dagger]

bro i send pic to you personally can you please see it

[weary meteor]

i would recommend you to use kali as a vm

[fervent dagger]

ok

can send send me the how it look like

[ivory saddle]

yoooo wassup hackers

[weary meteor]

you have an official guide on the link below
https://www.kali.org/docs/virtualization/install-virtualbox-guest-vm/

[ivory saddle]

minimal would be fine, if u have a strong pc i suggest a VM

[fervent dagger]

https://www.kali.org/get-kali/#kali-platforms

how is it bro

[fervent dagger]

hoe to download bro

[ivory saddle]

ma man just watch a youtube tutorial

there is a guy called david bombal

[fervent dagger]

ok

[weary meteor]

you have everything explained there , read carefully

[fair vine]

You dont have to spam it

[humble isle]

The first word lol

[toxic lagoon]

No offense but if you're struggling to figure out how to download and use a Virtualbox image, you might need to work on your IT fundamentals first and foremost. I know it seems boring but without a strong IT foundation, it's gonna be very challenging for you to get into anything related to cybersecurity.

Even if you don't plan to go for the certification, running through a CompTIA A+ course (even free ones, such as Professor Messer's courses for the A+ 220-1101 and 1102) would be very helpful in getting you up to speed on what you'd need to know. Once you figure all that out, learning the fundamentals of Linux, getting comfortable with advanced Windows (power user) features and basic networking would be extremely helpful. I have all those skills but still struggle with some cybersec concepts/tools, so yeah, you definitely need that foundation.

Also, if you're using THM for your cybersecurity training, it's perfectly acceptable to use the AttackBox VMs. I have Kali set up in VirtualBox but still just use the THM AttackBox for ease of use. Having Kali set up in Virtualbox would be helpful for practice, though. You could also set up Kali as a CLI within WSL if you're using Windows, but I wouldn't say that's the ideal setup unless you're an advanced user. If you happen to be interested in doing that, though, Networkchuck has a great video on that https://youtu.be/vxTW22y8zV8

On a different note, what do y'all sip on when learning or working? I'm a huge teahead, I drink all sorts of tea. I tend to prefer Japanese teas but I do really love the variety present in Chinese teas. I'm a massive geek about that stuff, could ramble on for hours but I won't unless someone else here is also a geek like me 😂 But yeah, just curious if anyone else gets a boost in focus from anything!

[fervent dagger]

thank you bro for your great support for begginers

[toxic lagoon]

Happy I could help! I'm still a beginner myself (in terms of cybersec) but I try to help out when I'm able 🙂

[fervent dagger]

can i message you personally for any douts

[toxic lagoon]

Well, like I said, I'm far from a pro, I'm just a little bit further on the journey. Probably best to just ask things in this server if they're relevant 🙂

[fervent dagger]

for a begginnner only begginer can help

[shell summit]

check out #start-here

[acoustic lodge]

I honestly can't sit down and learn/work if I don't have matcha or coffee with me

[fervent dagger]

thank you bro

[toxic lagoon]

Nah, anyone can help, but when you ask for help, definitely give some detail on approximately where you're at in your journey so people know what sort of things to tell you

[toxic lagoon]

Matcha is fantastic for focus, at least to me! I have a heavy caffeine tolerance so very little aside from matcha and some pu-erh teas actually hit me. Even coffee gives me no noticeable effects haha

[fervent dagger]

i will start in a few days ahead of my exams

[toxic lagoon]

Take your time, no need to rush things. The stronger grasp you have on the basics, the easier it'll be to not only tackle the challenges of learning security concepts, but it'll also make it easier for you to ask for help when you need it

[fervent dagger]

is these job is worth

[toxic lagoon]

Depends on what you mean by "worth it". Keep in mind, what I'm about to say is just what I've heard and seen in my own research, it's not based on my own experiences. The field of cybersecurity can be a very lucrative career. Pentesting, for example, can make you a six-figure salary (in the US) but you also have to account for your own experience, skills and education. In other words, someone at entry-level will not be making nearly that. I've been on the lookout for entry level helpdesk positions for myself and I've noticed an annual salary range of around $32,000 to $45,000 for most of the positions I checked. Also depends on location.

As for other possible ways of defining "worth it", I know that as you advance in the field, there's more opportunity for remote work, flexible hours (that is probably most true about red team types of positions), and so forth. If you love tech and are passionate about the concept of security, that can definitely ensure it's worth it.

At the end of the day, only you can really answer that question, but for me, I felt it was definitely worth it

[spark sun]

That's a little low for helpdesk, but that could be regional because that's a cheaper area to live. info/cyber security is not entry level to IT, and pentest is not entry level to security roles. Realistically, you need at minimum 4-5 years of experience because an employer will be willing to trust you with pentest unless you have degress or other relevant qualifications.

Even then, getting OSCP without having work history is not likely to land the coveted pentest role.

[fervent dagger]

thanks for clear cut vision of cybersecuritu bro

[hoary nymph]

Gave +1 Rep to @toxic lagoon (current: #860 - 6)

[toxic lagoon]

It probably is but I've never worked in IT before, and I can only work remotely (I live in a small town with next to no businesses with an IT department), so I'm willing to go for a lower wage if it gets my foot in the door and connects me with potential mentors. Wouldn't turn down higher wages if I find them, though haha.

And yeah, it definitely will take a reasonable amount of time to get yourself to the point of landing a position that you really want. At this point in my own career, though, I just want to get my foot in the door like I said. I learn best by doing, so it'd be very helpful alongside working on THM

[fervent dagger]

[radiant jacinth]

Hey guys 👋
Can you help me to solve this lab
https://tryhackme.com/room/techtrixctfevent

I'm struggling in task 3 & 4

[ocean pelican]

If I don’t have coffe or anything I just start getting hungry after a while

Idk if I’m weird but Coffey removes hunger for me

[south inlet]

#room-help

[little shore]

I checked the link the user shared and it seems to be a private room.

[south inlet]

We can't help with private rooms..:)

[bright tinsel]

Hello, I need help, I have a friend who was fooled by someone on Instagram, we know that it is probably someone from high school except that the person cannot file a complaint without proof and does not want to go to the police. I have a few photos (profile photo, and post on TikTok) but the reverse search on Google leads to nothing.
anyone have any advice?

[strange plank]

Sorry we can't really help you with that in this server.

[bright tinsel]

Do you know of another server or solution?

[strange plank]

Ethically speaking, no one can help you besides the local authorities.

[bright tinsel]

ok thanks !!

[hoary nymph]

Gave +1 Rep to @strange plank (current: #65 - 140)

[gusty pecan]

Hello everyone,

I'm currently working through the "Linux Fundamentals Part 2" room and am encountering an issue while attempting to SSH into the target machine. The instructions indicate that the username is tryhackme and the password is also tryhackme. However, I'm receiving an authentication error upon login.

I've ensured that:

The target machine is properly deployed and running.

I'm using the correct IP address provided in the room.

The SSH command is formatted as ssh tryhackme@<IP_ADDRESS>.

I'm entering the password exactly as specified, noting that there is no visual feedback when typing the password. It is just saying access denied

Could anyone provide guidance or share their experience with this issue? Any assistance would be greatly appreciated.

[weary meteor]

Try to ask guys in #room-help channel 🙂

[lethal pine]

hii every one can any one help me about https://muquestionpapers.com/ i am a college student i want to download PYQ i don't know why my antivirus detect this website as a fraud

can any one telll me if i access this website what possible thing gona happen

[knotty harness]

yall u got any good but cheap wifi dongles for hacking(15$-25$)?

[little shore]

PYQ? Also, if this is related to any college assignment, folks might not help as assisting with school assignments isn't encouraged here.

[south inlet]

WiFi hacking is for advanced channels

[wind prairie]

PYQ = Previous Year Questions. Dude prolly want help downloading some

[past olive]

This has got to be the best help request i’ve ever seen

[past olive]

Almost didn’t recognize you with the different pfp lol

[runic bison]

Hi gys

[gusty pecan]

Ok thx

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 4977)

[round snow]

This where I ask questions?

[weary meteor]

Depends which question 🙂

[round snow]

It's bout tryhackme learning curve

There's this question I'm stuck at dunno if it's from tryhackme or I ain't seeing it well

[weary meteor]

Try to ask it in #room-help channel 🙂

[toxic lagoon]

Anyone here ever watch K-drama? If so, have you seen any related to cybersecurity or tech thriller in general? My favorite one (Extraordinary Attorney Woo) has a two-part finale centered around a case of spear phishing against an online retailer, causing a major data breach that leads to the case where the two rival law firms battle it out. Those episodes were actually part of what led me to think about cybersec as a career change

[little shore]

Ohh.. I do. Haven't watched that one yet though. There was an episode on Start-Up that touched on a cyber attack but it was just a brief one if my memory serves me right.

[toxic lagoon]

Nice! Start-Up has been on my backlog for a bit, I have to be careful with K-dramas because they are addictive and suck away all my free time 😂 But yeah, if you get the chance, definitely check out Attorney Woo. The finale is great because of that case and everything comes full circle. Some of the best writing I've ever seen in a TV show!

Also insanely wholesome throughout. I was aware of some of the struggles that people with ASD deal with but that show helped me understand things quite a bit more

[toxic lagoon]

On the subject of relevant entertainment, anyone else here really love the Watch Dogs games? Nowhere near as realistic as games like Hacknet (also a great one!) but the combo of techno-thriller storytelling, geek and hacker culture references and generally solid open world gameplay is a blast, in my opinion!

[little shore]

The last once I've watched was IU's drama (as you can see in my discord pfp). 🤣

[toxic lagoon]

I'm still pretty inexperienced with K-drama so I'm not sure who it is to be honest 😅

[little shore]

Oohh.. do check When life gives you tangerines.. it's focused mainly on family though..

Thought of sharing a URL, but the last time I did that, I got a timeout 🤣

[toxic lagoon]

Haha no worries, I've actually seen that title before but haven't watched it. And I don't mind the family focus, as long as it's not an overly mushy romance story I can generally give it a go haha. Speaking of good ones, check out Castaway Diva when you can. Also has Park Eun-Bin from Attorney Woo and it's equally well-written, even has her singing many times throughout! If links get you a timeout here, and you're interested in hearing that, search "Park Eun-Bin Someday"; I'm partial to her "Beyond the Studio" live performance but any of them are great haha

[south inlet]

@regal heron I've already asked you not to advertise your media.

[fair vine]

We cant no

[civic root]

:hammer: testmewanker_00739#0 has been banned.

[civic root]

[BAN] User left the discord server.

[granite crest]

They are a lot of fun, but I kind of wish they would show the effects of the dystopian parts

We are just sort of told that they're evil without witnessing it

Tbh in 2 they do have a lot of side and main stories that show it but we don't really see it in the world

Same with Legion where it's apparently a militaristic takeover but protesters can literally set up camp in the streets without getting arrested

I do really enjoy the gameplay mechanics though

[toxic lagoon]

The dystopian parts of Blume and such? The first game did do that with the privacy invasion minigames and such, that was one feature I really wish they would have kept in the sequels. The second game did have some moments like that but usually only as part of the main story.

I also think part of Ubisoft's reasoning for not going too hardcore on the dystopian aspects was because then it'd really feel like a cyberpunk franchise. I think they wanted it to feel more like "GTA if people could see what's going on", so to speak. But that's just my guess lol

[radiant jacinth]

Just finished the 3 games

I love it

[toxic lagoon]

Nice! I still haven't played Legion yet but the first two games are among my all-time favorites

[radiant jacinth]

People say the first two are better but tbh i liked it

[toxic lagoon]

Yeah, I did play a tiny bit of a free trial one time, I can see that it'd be fun. I think the reason people didn't care for it as much is the lack of a solid protagonist. I think Ubisoft would've done better to have had either Aiden or Marcus (or an equally great main character) in Legion but with the ability to switch out to random characters for certain missions and such

[radiant jacinth]

Yeah it was a bit unnecessary to design the game in the way that you can hire people and add to your team

But overall i liked the story

[toxic lagoon]

I mean, I get where they were going, the concept is cool but shouldn't have completely replaced a proper protagonist, not in a game like that

[radiant jacinth]

Yeah i agree

But you get to play with aiden and wrench when you buy the dlcs😂

[toxic lagoon]

Haha yeah, whenever I get to Legion, I definitely plan to place the DLCs! I just hope Ubisoft considers reviving the series at some point (as long as it's looong after they get their act together)

[radiant jacinth]

I’m waiting till they put it on sale tbh,m😂

[toxic lagoon]

On the subject of solid hacker games, one that doesn't seem to get as much attention is NITE Team 4. Instead of playing as a black hat or hacktivist, you play as a cyberwarfare specialist for the US military. Definitely a pretty darn interesting one! It's also part of the larger "Black Watchman" ARG, though you don't have to play that to enjoy NITE Team 4

[radiant jacinth]

I will give it a look

[rocky edge]

Anyone have any tips / ideas or ways to choose a thesis topic?
I am majoring in Computer Science with a specialization of Big Data at a Hungarian university
I've tried to make a thesis this year, but I chose the topic before I knew what I wanted and it was so dreadful and uninteresting for me that I couldn't finish it

[south inlet]

We don't help with acedemic work.

[rocky edge]

Just tips for finding my topic

[south inlet]

Your topic is your idea.

That's the whole point of the thesis.

[rocky edge]

There is nothing wrong in asking for help and searching for inspiration imo

[south inlet]

There is if it's against our community rules, and possibly your own Student Code of Conduct.

[rocky edge]

Well is it against rules?

And it's not against the rules at my uni, I'm free to choose my topic

[south inlet]

It's against our rules to help with academic work/projects.

[rocky edge]

It is not direct help, I'm just looking for suggestions on a way to make my own findings for someone more experienced in this

But if it's still against the rules, then I'll delete it

[versed swallow]

@rocky edge How about Dynamics of foot traffic manipulation in relation to strategic pinpoint signal jamming? IF you're going to break a rule might as well make it worth it

Thought experiment involving computers.. How can you tell in a browser you are watching something .. Right now my logic is as lame as "IF you spent X time on a Y min runtime and X >= 75% of Y then youw atched it.

[rocky edge]

It's interesting, but rather specific. How would I get data for that?

[versed swallow]

The same way you get to carnagie hall?

[south inlet]

Did you not see the full previous conversation?

[little shore]

I don't think we can help you on this one, sorry.

[remote yacht]

I don't know if this is the proper way to send feedback

In the (i) menu below splitscreen machines it explains how to open clipboard on attackbox but I feel it should also include how to open it on windows machines (ctrl+shift+alt on windows / ctrl+shift+option on mac)
Could have it automatically detect if it is an attackbox or windows but honestly it would be easiest (and probably best) if it just said in writing:

• On windows web-based machines click CTRL+SHIFT+ALT or CTRL+SHIFT+OPTION on Mac.

[weary meteor]

Try to send it to #feedback-and-ideas 🙂

[fervent dagger]

hi

what is the syntax of ping 10.10.10.10

[weary meteor]

First of all watch on your language ( swear words / slurs aren't allowed here ) , second - try to describe your exact problem maybe we can help you 🙂

[weary meteor]

Well it is
ping 10.10.10.10

[fervent dagger]

it is a code ij the tryhackme

[nocturne river]

I'm not exactly sure what swear you're referring to but good to know mods are monitoring the net and this is not a place to have casual conversations. I will seek fellowship elsewhere.

[weary meteor]

?

[eager belfry]

Bro is quitting THM

My Mistake

[wet echo]

You know when I first joined this server I just assumed you were an undercover mod. Congrats on the uncovering ❤️

[inner sparrow]

Well he is the KGB

[astral steeple]

some italian here?

[granite crest]

Here you go

[astral steeple]

@granite crest .....heaven

[strange plank]

That looks awesome.

[granite crest]

Oh, no, that's a stock image

Just wanted to make the joke

It does look good though

[silver oasis]

Hey guys! I just did the “The Hashing Basics” room and I’m confused about this. Please help me out!

When decrypting a hash using hashcat, we use the command
Hashcat -m <hash type> -a <attack mode> hash file wordlist

So my doubt is, how would I know what type of hash it is? Even if I check the hash using online platform such as hashes.com and suppose it says, sha256…..there are like hundreds of those hashes on the example page of hashcat

So how should I approach this?

(I’m currently doing the Cybersecurity 101 path and I’ve did it till John The Ripper Room)

Like what values after -m should I fill? How to figure that out?

[trail matrix]

your best choice now is to open the hascat page , do 'ctrl+f', enter the first letters of the given Hash, generally with this approach, you can get the exact type

[silver oasis]

That doesn’t work. I tried that during the task

And even if I identify by their prefix, for MD5, those prefix don’t work and it gets harder and harder to shortlist

[wraith steppe]

i like this new feature

[weary meteor]

You could try to use tool called hash-id , it can help you detect tge hash although it isn't 100% accurate all of the time

[stray aurora]

I would like to ask, is it really useful to learn cryptography in information security? I feel that in modern times, passwords are hard not to be cracked if they don't sacrifice performance like ORAM or mix in useless information

[silver oasis]

Ohh, okay, I’ll try that
Thankyou

[modest sentinel]

Who can teach me how to code?

[weary meteor]

Check out freeCodeCamp on YouTube 🙂

[modest sentinel]

But can’t you just teach me on YouTube I already tried and I can’t understand

[weary meteor]

Learning coding is a life-long process

[vocal zenith]

Mee tooo,i m with you mahn

[bitter vale]

I thought the same too

[raw trail]

hi im interested to find cybersecuirty jobs and research works anyone can share info

[weary meteor]

Try to ask guys in #cyber-and-careers channel , they will give you some great advice 🙂

[radiant jacinth]

hi ppl :]

[weary meteor]

Hi , welcome 🙂

[mellow ember]

Hi

[mystic mirage]

hi , please I need support in the Public Key Cryptography Basics last exercise , I am running gpg --decrypt confidential_message.gpg but i only get no such file or Directory

I tried the backup kay but same result also

I double checked the files and there are there in the right Directory

[south inlet]

#room-help

[gilded pilot]

Hello all, I want to know how hashing work (types like md2),

and it is (theoratically) possible to make hash to certain text by hand without the need for any electric device? (The word 'World', for examble).

Thanks in advance.

*example

[covert remnant]

Alrrr so hashing basically turns any input like ur "world" into a fixed size, unique looking value using sset algorithm (like MD2).

MD2 pads the input, uses a lookup table, and performs many byte level operations with it.

Yes, you can do it by hand, but it will be VERY slow and painful as fuck you'd need to follow the EXACT steps carefully and do many small calculations that NO ONE ont his planet wants to do

[weary meteor]

You can learn it on the link below 🙂
https://tryhackme.com/room/hashingbasics

[sacred mural]

https://www.reddit.com/r/tryhackme/s/46lTbFOjxE

Guys where Can I find more info on this one ?

[weary meteor]

as it says more info will be provided today 🙂

[gilded pilot]

@covert remnant @weary meteor Thanks!

[hoary nymph]

Gave +1 Rep to @covert remnant (current: #403 - 16)

[covert remnant]

Np :)

[trail matrix]

yo, instead of notion/ obsidien, where do u people save notes , commands, etc...
tells as if there is a better alternative 🙃

[soft pier]

github/gitlab

[fair vine]

i save it on onedrive but i wanna move to github

[trail matrix]

for noting, do u open a github page on a browser and start noting ? or u do it via cmd?

[soft pier]

write notes in neovim then sync with git

but if you want more or less all in one solution triliumnext goes far

[trail matrix]

thanks, i will try it and see if it's suitable with me

[hoary nymph]

Gave +1 Rep to @soft pier (current: #4 - 2151)

[azure creek]

Does anyone know the best resource to learn how to code in python form a cybersecurity perspective?

[soft pier]

would point at the book named black hat python

[neon falcon]

@soft pier thanks for suggesting

[hoary nymph]

Gave +1 Rep to @soft pier (current: #4 - 2152)

[weary meteor]

check out freeCodeCamp on YT 🙂

[azure creek]

I’ve done freecodecamp before it’s just that it teach it from a cybersecurity perspective

[weary meteor]

Check these resources
https://tryhackme.com/room/customtoolingpython
https://tryhackme.com/room/pythonforcybersecurity

[strange plank]

Absolute legend. @serene trench

[serene trench]

you know the score 😎

[serene trench]

brilliant show

[spiral oasis]

guys i have basic knowledge of python but i am not able to make scripts so i uses ai and do some little change and use it so can you guys tell how can i improve my python script creation or use ai?

[shell summit]

find something you want to write a script for, and dont use ai. if you are unsure of something, look it up and read the docs rather than use ai. not only can it be wrong, but you learn good lessons from reading the docs

[spark sun]

Improve your problem solving skills.

Work through a problem, top to bottom, of the steps needed to solve it. If you are just sitting down to bang on the keyboard and hope a script comes out, it's no wonder you have difficulty scripting.

Are you familiar with what 'tech debt'? It's worth looking up if you don't know.

[magic shore]

Juun good piece of advice

[signal narwhal]

Hey guys just a quick question - is Kali Linux still the recommended distro for ctf and pen testing? Anyone running parrot? And also, how? Bare metal or through a VM?

I'm trying different things just trying to find a good workflow so keen to hear your setups 👍

[covert remnant]

Personal preference tbh

Run what you like, don't listen to randos just screaming and fighting over distros. You see something you like? Go for it, enjoying your time is what matters.

[covert remnant]

Also ye I use parrot and kali, in VM. And I prefer Kali at least for now

Amd digital ocean for VPS

[signal narwhal]

Thanks mate I appreciate it.

What do you use the VPS for?
Ive got a hetzner VPS sitting there monitoring my home lab with wazuh but not sure if I could be doing more with it.

Or did you mean, you run Kali on the VPS?

[shell summit]

i use parrot home for daily driving, same is as the security version, just more geared to development and privacy. it doesn't have any of the hacking tools on it. i like it bc it's lightweight, uses MATE out of the box, and has some privacy things i like

[golden crest]

Hi Guys, rate from 1 to 10 the best three LLM models finetuned on CyberSec stuff. 👀

[signal narwhal]

Thank you ☺️

[hoary nymph]

Gave +1 Rep to @shell summit (current: #611 - 10)

[weary meteor]

I would recommend you to use them in a vm environment 🙂

[weary meteor]

I know only about PentestGPT for now

[nimble locust]

when will pt1 giveaway be ending?

[south inlet]

All the information is in the form.

[nimble locust]

giveaway ending date isnt mentioned i checked again. can u send? maybe i m missing something

[oblique laurel]

keep in mind that hetzner does not allow portscans

[marble axle]

hello guyz

[crude thicket]

hello 🙂

[marble axle]

any idea how can i connect my account to discord ?

[frail vault]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 29, 2025, 9:49 AM

[marble axle]

thanks

[hoary nymph]

Gave +1 Rep to @frail vault (current: #61 - 147)

[marble axle]

thanks gives reputation ?

[crude thicket]

yes, but you cannot give yourself reputation 🙂

only when someone else thanks you 🙂

[marble axle]

understood

no one will thank themselfs anyways

[crude thicket]

someone tried it before (of course, it didn't work) 🙂

[marble axle]

🤣 lol

[quaint basin]

Really?
Is your first thought as a hacker not "oooh, I wonder if there are any abusable edge cases the developers didn't consider"?

[marble axle]

i mean everything should not be overthinked i come to discord to chill out i shut down my brain

[quaint basin]

https://tenor.com/view/hack-the-planet-gif-15624885

[sleek patio]

When you tried your first CTF ( catch the flag) how did you find it? Even though I am new to cyber security I decided to give it a go, and looking at the Cheese CTF level (easy) I was like hell yeah. Few minutes in I realized I know nothing, I looked at some of the walk through' s and it ranged from sql injection to knowing alot about php etc. What was your experience like? did you find it hard? or is it just me.

[inner sparrow]

Ctfs are always hard cz they are designed to be otherwise they would.be very boring and most people starting out find them hard just gotta squeeze and enjoy

[south inlet]

Cheese CTF is probably a bad example

Try simple CTF

[sleek patio]

Thanks. Gosh I feel alot better lol. At one point I was looking for the ssh login 😢 to the box I was trying to hack.

[hoary nymph]

Gave +1 Rep to @south inlet (current: #2 - 3788)

[sleek patio]

thanks that helps alot, I was like crap is this even for me.

[quaint basin]

Eh? No they're not

There are some ridiculously simple CTFs floating around. I should know -- I wrote some of them in my early student days.

[inner sparrow]

Welp I haven't played simple tbh

[quaint basin]

Simple as in easy. Not simple as in the room SimpleCTF

[inner sparrow]

But muiri most people get like 50-100 points even in easy ctfs like ehhh nahamcon

[unreal stratus]

[boreal hollow]

description

[tiny geyser]

how can you enter this giveaway bcs I can't seem to find anything on it on the THM site

[nimble locust]

i saw it on linkedin

[radiant jacinth]

Thanks

[hoary nymph]

Gave +1 Rep to @quaint basin (current: #10 - 886)

[tiny geyser]

thanks!

[hoary nymph]

Gave +1 Rep to @nimble locust (current: #1907 - 2)

[pastel atlas]

hello

[jade flax]

Is Jr Penetration Testing really worth the time? I have an intern in 2 weeks and during these 2 weeks, I want to improve my knowledge about cybersecurity. Ive already completed 2 beginner courses. Now I want to gain experience with Linux tools and the offensive side.
I also thought to directly start solving difficult CTFs but maybe this course would be a better starting point. What you think guys? Which path should I do?

[compact briar]

sudo apt install hacking sklls because i suck

[weary meteor]

Of course it is worth , I definitely recommend it 🙂

[twin ridge]

It's usually "that's odd"

Sometimes also "wait what?"

And also "did they seriously do that? No it can't be... Ah yep, they did. And now I have to write the report"

Insert explicatives as needed

[rustic trail]

Been grinding pentesting for a year and looking to collab with someone who knows the basics and is active daily.
Let’s team up, build projects, and grow together (ethically, of course).

Non-negotiable: Be active on Discord every day.

If you're down to level up together, DM me.

[south inlet]

Wow, a daily commitment, how can you pass that up?

[worn cove]

Oh

[hazy citrus]

Can you please say what is YARA?

[deep lantern]

@hazy citrus YARA is a tool used as forensics and analysis of files based on strings/binary data. It is mainly a CLI (Command Line Interface) or Linux terminal application. It allows you to write up rules. I am just starting to use this tool.

If you are familair with Linux terminal, you can use any editor like nano to create them.

[weary meteor]

No but rules look much better and well organized with proper intendation 🙂

[deep lantern]

@weary meteor ok, got it! Thank you my good man.

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5065)

[hazy citrus]

Thank you say about it...😉

[hoary nymph]

Gave +1 Rep to @deep lantern (current: #1907 - 2)

[weary meteor]

please don't advertise here 🙂

[warm breach]

let it be for a few min

pls

[weary meteor]

No , self-promotion is prohibited by #rules

[spice wraith]

https://youtu.be/YPW_HeOHA1E?si=p1jcNfvqb3tgCMHh

[pure garnet]

https://tenor.com/view/pudding-gif-3571016

[primal whale]

has anybody seen something like this before?

trying execute -f

[quaint basin]

What's the problem...?

[primal whale]

i'm trying to execute find to escalate privileges but for some reason i can't get it to run. i'm pretty new

workin on pt1

[quaint basin]

You're currently in a meterpreter session, not a command shell.
Meterpreter is what we would call a command and control (C2) agent. It's (roughly) platform agnostic and exposes its own set of functionality.

That does include dropping into a command shell on the victim (the command is literally shell).

Bear in mind that it's... not exactly good opsec (although Meterpreter just generally is signatured to high heaven). Won't make a jot of difference here obviously, but worth getting into good habits early 🤷‍♂️

[primal whale]

thanks

sounds like i should do the metasploit / meterpreter room first

[dusk shard]

What websites do you usually use to read articles about network security, which publish articles about the latest technology?

[last wagon]

Hey, I've been trying to purchase tryhackme premium for past couple of months, and it ha sproblem processing payment. Can anyone help me ?

[weary meteor]

For paynent related issues reach out directly to support on the email below

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 2, 2025, 6:45 AM

[warped badger]

Hello !
Maybe it's a dumb question but:
I finished every "pathway" of Penetration Tester in THM
Except "Red Teaming".
And i'm wondering if i should do this pathway ?because, i don't want to be a red teamer. But just a pentester 😅

[crude thicket]

it can be very beneficial as a pentester. just becasue the pathway is called Red Teaming doesn't mean you shouldn't do it because you won't become a Red Teamer 🙂

[unique barn]

Amazing, keep it up.

[warped badger]

yes but Is it really necessary to pass your first certifications for example? I absolutely want to get to the essentials for now

[crude thicket]

depends on your certifications, but it can be helpful

[warped badger]

like OSCP or even the PT1 from thm

[crude thicket]

yeah, the Red Team pathway would be very helpful in those

[warped badger]

ok thank you

[hoary nymph]

Gave +1 Rep to @crude thicket (current: #73 - 122)

[crude thicket]

no problem 🙂

[glass pier]

bro, you should run it at shell

[pastel smelt]

does tryhackme have a new promo for premium?

[south inlet]

Not yet

[stone pike]

Hello guys I feel silly having to ask for help for this CTF - The Game would anyone be able to help point me in the right direction.

I unzipped the file and changed the permissions to allow the file to be executable and I am getting the zsh: exec format error.

[crude thicket]

you have to give executable permisions to the file. to do that, you can do "chmod +x (file)"

[vocal smelt]

Hey everyone, I'm new to cyber security about a little over three months I believe since I started learning through tryhackme; coming from a software engineering background. I've been having a hard time doing some of the capture the flags feeling like I don't know where do begin. Does anybody have any tips for getting started with the CTFs?

For context I just finished the Networking course that goes over TCPDumps and WireShark.

[crude thicket]

those rooms are more connected to blue teaming than red teaming (red teaming is closer to CTFS), so I would recommend to take the Junior Pentester Path first (also completing the pre-security and cyberscurity 101 paths), and then doing ctfs

[vocal smelt]

Thank you DonutMaster, for you're response! What would you recommend I should do to practice the skills I learned in those rooms. Also, I did plan to do the Junior Pentester Path I just have to finish the cybersecurity 101 path.

[hoary nymph]

Gave +1 Rep to @crude thicket (current: #72 - 126)

[crude thicket]

which other paths have you completed?

[vocal smelt]

I've completed everything up to the Cryptography lesson that where I'm at now

[crude thicket]

have you completed the SOC Level 1 path or the Security Engineer path?

[vocal smelt]

No only the pre-security path and half way through the cybersecurity 101 path

[crude thicket]

ahh, then just continue with the jr. pentester path, and you should be able to solve some easy challenges 🙂

[vocal smelt]

Thanks man! Have you done the Jr Pentester path yet?

[hoary nymph]

Gave +1 Rep to @crude thicket (current: #72 - 127)

[crude thicket]

I've finished the Jr Penetration path + the Web Funcamentals path (technically I have like one room left for the Web Fundamentals, but 95% done)

[pearl pebble]

Love it

[vocal smelt]

How was it? Was it difficult?

[crude thicket]

not too difficult, but depends on the person 🙂

[pearl pebble]

Always easier when you do it because you're genuiely curious and not the lovely pay packet

[vocal smelt]

That's good to hear! I really wish I had more time during the day to dedicate to this I would be way farther along. How long have you been doing cybersecurity?

[vocal smelt]

Hey jortboy3000 nice to meet you!

[crude thicket]

around 2 months (I'm a student, so I have tons of time)

[vocal smelt]

That's awesome! Are you in college?

[crude thicket]

no, I'm not even in high school yet 🤣

[vocal smelt]

haha dam dude! That's awesome, I wish I could have started when I was younger the computer I had at the time was so slow and I was never able to convince my parents to get me a better computer

[crude thicket]

ahh

[vocal smelt]

I also ended up going the AI and Software engineering route because that's what we were told would guarantee us a career

[crude thicket]

actually, that is a very good path towards a good job these days

[vocal smelt]

I had better luck finding something down the AI route however, trying to find something in Software engineering has been a challenge

[crude thicket]

good luck!

[vocal smelt]

Thanks man!

[hoary nymph]

Gave +1 Rep to @crude thicket (current: #69 - 129)

[idle junco]

hello guys i just subscibed to sal 1 certificate and i coudlnt find the path start can anybody help me please

[warped badger]

#quiet-conversation message
@weary meteor what do you think about it 🙂 ?

[weary meteor]

I would definitely recommend you to do so , extract knowledge won't hurt 😄 . Btw Red Teaming path is very detailed and you definitely learn a lot by going through it 🙂 . So , I would definitely say - Yes !

[warped badger]

ok thank you 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5089)

[nimble bough]

When you're in the page for the certification, there's a tab that shows "Recommended Learning".

[nimble bough]

It'll show you all of the rooms that are advised to go through for studying

[dull girder]

Achieved top 7% in 24 days

[crude thicket]

congrats 🙂

[dull girder]

https://tenor.com/view/lazy-cat-stairs-gif-20611362

Take a break next

[inner sparrow]

YESSSSS

[lavish creek]

top 2 % in 15 days

is what i did

[crude thicket]

in my opinion, it's not really important how high ranking you are and how quickly you got it

[lavish creek]

whatever

solving 8 machines daily without seeing writeups

is something important i feel

[crude thicket]

I was just expressing my opinion 🙂

[lavish creek]

even i was expressing man chill

[crude thicket]

ok?

[echo finch]

agreed

[spiral oasis]

.

[spiral oasis]

IS it possible to make a payload for android using metasploit focussing on

after the device restart the payload connection will reestablish

after the network change like victim switch there wifi or use the data or turn off and on there data and wifi the connection should reestablished automatically means the connection should active everytime

connection can only be closed if attacker wants and then when attacker wants he can reestablished the conection

payload should not be detect by antivirus and while installing it google play protect shouldn't warn as harmful or unknown software and block it

the payload apk can be deleted by an user but the payload should work for example i can delete the payload after opening it one time but it should work even the apk is deleted it can be communicate over wide network not only local network

[pearl pebble]

Yes... quite advanced but yes

[civic root]

Done!

[jovial raven]

hi

[fair vine]

wassup

[crude thicket]

whatsup 🙂

[livid summit]

Hi everyone, I'm looking forward to joining the ranks of cyber security analysts. Question though, how is AI affecting what we do? I personally am pretty leery of how quickly AI has been integrated into everything and I've seen enough movies to know it's not a great idea for the reigns to be quite as lax as they currently are, but how is it affecting the profession itself? Are we as needed as we were a year or two ago? And if so, have you found that you needed to shift your focus in some way to more AI-based red/blue/purple-teaming?

[fallen wedge]

Hey everybody! Looking for people to exchange and building a community, so write me a PM to discuss about topics, helping with learning etc. I am from Austria 🇦🇹, if anybody is from the DACH region it would also be nice🤙🏽

Nice greets 🤘🏼

[fathom panther]

There is a lot of automation that is being done where AI is used to ingest tons of data to make sense and see patterns. It takes some of the L1 grunt work off so that SOC can work on faster triage, etc.

I've also seen it implemented as a search tool where it parses through tons of inventory to find specific things you're looking for like "Give me a list of users who haven't rotated their password in 90 days" or "Give me a list of EC2 instances that are public"

There's still things to study and I myself know that human verification is still required to the data that AI spits out

[spiral oasis]

what does Pm mean? bytheway i am from nepal i am new at this field if you consult then take me on your community

[fair vine]

PM means private message, its another word for DM (direct message)

[spiral oasis]

ohh

[livid summit]

Okay, that makes sense, thanks. I'm just scared of getting into this field further (I graduated boot camp last year and have a Sec+ and just passed my ISC2 CC exam but am currently in Networking rather than officially cyber) and finding out I'm obsolete before I even get started, really. I hope that's not the case though. Your answer helps, thank you

[hoary nymph]

Gave +1 Rep to @fathom panther (current: #22 - 457)

[fathom panther]

There is a considerable shift into integrating AI in most IT jobs so I think as long as you're working in IT, there's still fear of getting replaced by AI but I think its still far fetched.

[livid summit]

That makes sense. I'll keep that in mind and maybe try to embrace it so I can pivot if needed. Thank you for your help and input!

[next bronze]

To add onto it, AI is mainly integrated into workflows to help streamline the work. I wouldn't say that it would ever replace entire job positions by itself

It's nothing like the Terminator either and never will be for the foreseeable future, don't worry

When people say AI would replace jobs, what it is more accurately doing is replacing jobs where your only responsibility is GIGO in my opinion. It's nowhere close to taking on the responsibilities of an entire complex role, such as a system administrator or L1 SOC.

Plus, if companies train and use their own models with the aim of replacing job roles, it introduces an even bigger risk in itself since there's not nearly as much filtering, the sheer amount of data used to train the model, etc. Using established models can only go so far too

Also, a lot of companies do have strict policies around AI usage by employees

Not related to the topic but just a thought I remembered. My father's company has ChatGPT blocked

[south inlet]

Is that from a "AI is bad" PoV, or the org doesn't want an employee spill secrets on a LLM?

[next bronze]

The latter

I can imagine that employees would go ahead and paste error dumps with sensitive info directly into chatgpt

[livid summit]

Okay, that makes sense. I've seen how it's being used to kind of serve as a SIEM for industries that wouldn't normally have that capability, but I wasn't sure how it was being implemented in our field and whether or not I had the absolute worst luck at timing for a career change haha

Good to know, that's what I'm worried about too (too many sci-fi movies, I guess)

Okay, I can see how the issues in training models would pose considerable barriers to automating more than just the data aggregation purposes.

Thank you for helping and your input as well! This conversation is truly helping me feel less apprehensive

[hoary nymph]

Gave +1 Rep to @next bronze (current: #153 - 58)

[wide vessel]

We’re already seeing AI take over many traditional security tasks—like Tier 1 SOC analysis, responding to phishing attempts, parsing logs, and even some parts of penetration testing. What used to require entire teams can now be done by intelligent tools.

That’s why the real value for security professionals now lies in more strategic, creative, and cross-functional areas—like threat modeling, simulating real-world attackers, securing AI systems, ensuring responsible data use, and aligning risk with business goals.

[livid summit]

That's interesting! Okay, so if I focus more on more creative aspects, that could be a better track to try and future-proof my career as much as possible then. That helps, because a key consideration in me entering the field was the possibility of being creative as well as technologically focused

[tawny perch]

Pls can anyone help me to answer task 4 question?

[weary meteor]

Try to ask in #room-help channel 🙂

[toxic lagoon]

Does anyone here listen to any sort of music while learning? Just curious because I've found that lo-fi, low-intensity post-rock and ambient eletronic genres like synthwave/vaporwave are really helpful in keeping me from getting stresed out while learning

[wide vessel]

Exactly! That creative + technical mix is what got me into cyber too. And yeah, AI’s taking over a lot of the routine stuff—but it still can’t beat humans when it comes to big-picture thinking like figuring out what is suspicious and what could be testing and understanding context, or thinking like a real attacker.

Stuff like threat modeling, explaining risk to non-tech folks (we do alot of this stuff with the help of Chatgpt), or making ethical calls—those still need a human touch. That’s the kind of work we should try to lean into more.

And with how fast AI is evolving—especially with agentic AI and things like MCP—it feels like teams will get leaner, and each person will need to cover more ground.

[weary meteor]

https://discord.com/channels/521382216299839518/876804968731009055
Try to ask these guys 🙂

[toxic lagoon]

I wasn't aware that existed haha, thanks!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5120)

[humble musk]

I’ve been listening to classical style piano a lot lately while studying, andreavanzo , gibran alcocer

[radiant jacinth]

Juice WRLD is my favorite for chillin

[radiant jacinth]

.

[merry maple]

Saint Pepsi/Skylar Spence is good too

[wild rune]

hello kbg uncle jk

[wild rune]

gym bro

[oblique laurel]

TECHNO !!! ❤️

[merry stump]

Hey guys my name is exoe and am new, it's nice to meet you all

[crude thicket]

Welcome to the community Exoe 🙂 👋

[versed swallow]

Now that i have something like this.
How would I even begin to encrich threat intelligence to this

I was thinking about trying a visualization if a dns query was made for an asset N seconds before it started getting enumerated .. who done it .

[gritty mortar]

I’m Darrel, currently diving deep into cybersecurity and just finished the Junior Penetration Tester path here on TryHackMe. I’m building a 50-project portfolio, sharing my progress on GitHub and Twitter — and I’d really love to connect with other learners, especially teens or young tech enthusiasts who are on a similar journey.

If you're into pentesting, ethical hacking, or just passionate about tech in general, feel free to hit me up! Would be awesome to learn, grow, and vibe together. 🚀🔐

Let’s build a strong tech tribe!

— @gritty mortar

[toxic lagoon]

Check out Master Boot Record if you get the chance. Not exactly techno, more like computer-generated (not AI) metal for IT geeks. It's one of my go-to listens if I'm doing low intensity IT-related tasks 😎

[toxic lagoon]

Welcome!

[oblique laurel]

found it "https://soundcloud.com/masterbootrecordmusic" && i love it ❤️ thank you!!

[hoary nymph]

Gave +1 Rep to @toxic lagoon (current: #778 - 7)

[lavish creek]

[toxic lagoon]

No problem! They also have a Bandcamp if you prefer that platform. Cool stuff!

[peak cedar]

sup

[raw crane]

Hi

[pearl vector]

I gave in and bought one month premium

gotta make this month count

[pearl vector]

finished an entire module in one sitting 😅

Summit was fun

[strange plank]

Nice good job!

[unreal moth]

Hi, what has made you all prefer cybersecurity over , for example, programming or other IT fields?

(My question does not assume that you do not do programming)

[limpid bramble]

Hi, I am competing in a competition in a bit with both red and blue elements. One of the red team topics is related to ARP spoofing, routing protocol exploits, SNMP exploits, VLAN hopping, STP exploits, and Mac flooding, which I am not at all familiar with. Where can I learn about these as well as protections against them?

[nova dove]

Whats good my names Tax/TaxRealtor. Good to meet u guys

[radiant jacinth]

Hey! I’ve been learning the basics of ethical hacking and I really want to get better. Can you suggest how I should continue learning or what resources you’d recommend?

[crude thicket]

you can start with tryhackme's roadmap:
https://tryhackme.com/hacktivities

[radiant jacinth]

Thanks man
is they any path or source that make me very good at what we do like deeper into hacking

[hoary nymph]

Gave +1 Rep to @crude thicket (current: #55 - 173)

[crude thicket]

depends on what you wanna do, all of the paths are a part of ethical hacking 🙂

[radiant jacinth]

Something fun way 🤗

[crude thicket]

fun way?

[radiant jacinth]

I mean very serious ethical hacker likeeeee 0day

[crude thicket]

again depends

can't really give a specific path that you should follow

[radiant jacinth]

So confused 😵‍💫

[crude thicket]

you have to follow the path you want to follow

[radiant jacinth]

Ok like bug bounty, pentester more offensive side

[crude thicket]

then, you should finish the Pre Security and Cyber Security 101 first, then continue with the Penterster path

[radiant jacinth]

Ok roger that 👍

[coral hull]

Hello everyone, I have a question Even though I have 240 points I am not on the list of the best in June? The worst have 120 points. What is the problem?

[crude thicket]

what do you mean? could you /verify and send a screenshot?

[frail vault]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 11, 2025, 3:48 PM

[coral hull]

This is my weekly league compete leaderboards

And Main Leaderboards

[crude thicket]

refresh the page

[coral hull]

I try it, it dosen't work

It has been like this from the very beginning, it's not the first week.

[crude thicket]

which country did you set it to?

[coral hull]

i mean month

Poland

[crude thicket]

ok, one sec

[crude thicket]

shows like this to me:

[coral hull]

There is a problem with this system. Switch to "All time" and then to "monthly", then you will see the correct score.

[crude thicket]

yeah, there is a little bug where it shows like that sometimes, but idk

[fallow bloom]

Recently, one Azure room was added, but
it would be a problem if a room was added after the cloud subscription expired.
I can't afford to pay full price just to work on an additional room.
I'd like to see a plan that is affordable for people who have paid in the past.

[crude thicket]

There’s also the business plan, where you can get access these rooms for free, but it has to include a group of people

[terse arrow]

@crude thicket
Do u know basic or full about hacking skills

[granite crest]

He's "TITAN" rank

I'd say it's a safe bet he knows what he's doing

[terse arrow]

I need some help in learning so asking to everyone

[viscid gorge]

“Remember switching to your sidearm is faster than reloading”

[clear marten]

Im am noob

[strange plank]

Not really, I've seen people being TITAN just because they copy paste answers and take absolutely no note.

Rank doesn't tell much.

[granite crest]

Forgot to account for that possibility

[strange plank]

https://tenor.com/view/carson-wcth-happens-to-the-best-of-us-hearties-gif-11543686

[granite crest]

On a better note

I am so close to getting to titan

As you said, it means nothing, but it gives me a nice sense of achievement

[unreal moth]

How much time is recommended to spend on thm per day for someone interesting in a career in cybersecurity?

[humble isle]

As much as u can. When I started cybersecurity, I used to study(not thm) for atleast 10 hrs a day

[lusty tusk]

Hey I want to learn something new can anyone help me

[crude thicket]

you can start with tryhackme's roadmap if you'd like:
https://tryhackme.com/hacktivities

[smoky oracle]

Could you help me, please!

I can't install php7.2-cli and gitlab-runner on the AttackBox.

[south inlet]

Please don't post your message accross multiple channels.

[smoky oracle]

so sorry, my fall

[fair vine]

yeah thats me

not the copy paste part, but the no note taking

I did most of the grind in school so i wasnt too worried about it, now im regretting it

[civic zodiac]

Hello

[ocean zealot]

hi guys

[median vortex]

Hey is anyone experiencing Internet outage?

[blissful skiff]

Hi everyone,
I'm having trouble posting reviews on Google Maps. Every time I try to submit a review, it gets blocked automatically. I've tried using VPNs, waiting between posts, switching accounts, and even using different devices, but nothing seems to work.
It looks like Google is still detecting something and blocking my reviews anyway.
Has anyone dealt with this before or knows how to get around these blocks?

[tawdry dove]

If they're blocking you, they likely have a reason. Helping you evade and protections they have in place would be a violation of TOS

[blissful skiff]

Sorry, I’m new here, and since I saw "hack" in the name, I thought you might help me with a way to bypass that unfair block, because I just want to support a family member’s place with good reviews.

[weary meteor]

That's not a way to support a businness btw it is illegal

[blissful skiff]

Illegal? What exactly is supposed to be illegal? Going against the rules of Saint Google? I'm just writing reviews, leaving positive comments — I'm not stealing data or sending people anywhere, just reviews. But anyway, I see it's impossible. Nobody gives me an answer, and I've been searching for a while now.

[tawdry dove]

Here's the rules for the US: https://www.ftc.gov/news-events/news/press-releases/2024/08/federal-trade-commission-announces-final-rule-banning-fake-reviews-testimonials

I'm assuming UK/EU have similar rules

[hoary nymph]

🔨 Banned saqh21 indefinitely

[whole plank]

Hey guys does anyone tried blue machine using wsl?

If so i am unable to complete it because all i am getting is "Exploit completed but no session was created".

So, If possible can you please help me?

[south inlet]

Wsl is poor for THM.

[whole plank]

And, why is that if i may ask

[south inlet]

Well, the issue you're experiencing is a common flaw with WSL.

[whole plank]

Then what is the best solution for this?

[south inlet]

Stop using a WSL and use a dedicated VM or attackbox

[whole plank]

I think VM is the only option i have

Attackbox is good and i like it personally but it lags a lot on my wifi

[crude thicket]

the attackbox doesn't have like really good specs, so that's why it is a bit laggy

[whole plank]

Oh, All this time i thought it was because of internet connection

[crude thicket]

that probably won't be the cause of it (it could maybe make it a little bit slower, but that isn't the full reason)

[whole plank]

Can you explain it more if possible?

[crude thicket]

I'm just saying your internet connection isn't the cause your the lag

[whole plank]

Right, I understand that but what about the vmware thing? Do you really think that it is more effecient than the cloud ones which they provide?

[crude thicket]

depends on your computer's specs

[whole plank]

Well, I have 24 gigs of ram and i am running a i5 10300H cpu

Is that fine?

[crude thicket]

seems good

like 8 gigs of ram and some cpu power should be enough for the vm

[whole plank]

Okay i will give it a try. Thank you so much for your advice.

[crude thicket]

no problem 🙂

[jovial shale]

Hi everyone, . I'm new to cybersecurity and trying to improve my English too. I'm learning Python and ethical hacking. I want to make friends and learn together. Anyone here wants to talk or help?

[vagrant jetty]

We can be friends

[brisk oar]

Hi, I’m T-MISSE — proudly South African, now thriving in the USA. I’m a man who walked away from the 9–5 grind in pursuit of freedom, passion, and purpose. From building online ventures to expressing myself through fashion, art, and creativity, I’ve learned to turn every challenge into a stepping stone. I’m here to grow with intention, live with style, and one day give my parents the soft, stress-free life they truly deserve.

[terse arrow]

Create a group as friends and add me

[jovial shale]

Ok

[prime depot]

Guys i've got a question in the presecurity modul is the théory that important

Like i have to remember everything ?

[feral swift]

You don't need to have evrey detail memorized, but what you want is a strong genral networking. Networking is the foundation of any IT job, not just Cyber.

[frosty wolf]

What

[ocean ice]

Make notes so that you can reference it in the future

[vital reef]

Yh me bro 👋🏽im a beginner want to be a ethical hacker red team and learning ,anyone who wants to talk or help I’m all for it

[supple drum]

Tolu; UK. aspiring security engineer so more blue team than red

[jovial shale]

What does blue mean and what does red mean?

[supple drum]

blue is defensive security (soc analysts and engineers) and red is offensive security (pen testers/ethical hackers)

[weary meteor]

Please don't post job posting prior to get in touch with admins 🙂

[hasty minnow]

Excuse me, I'm looking for someone who does Artificial Intelligence.

[weary meteor]

Well , you said that you're looking to hire someone 🙂 . Anyway if you're looking for somebody to team up with in pursuit of the same career path feel free to send a mesaage in #general or #cyber-and-careers channel 🙂

[radiant jacinth]

windows 10 ( provide by thm) , it shows reconnecting , and i and not able to sign out..
Does anyone know what's is happening and how to fix it !?

[teal basin]

same budy i wld love to discuss stuff together

feel free to dm me if u wanna ask or talk abt stuff

[manic ridge]

Hi all, I'm brand new to discord, brand new to tryhackme and 6 months into a cyber security degree - Help 😆

[teal basin]

i have just finished the metasploit basics. i wanna practice a lil more in metaspoilt cuz i seem to be struggling a bit. Are there any rooms u wld recommend?

[tame gazelle]

Oops

Thought this was the Hack The Box server

[radiant jacinth]

Why you not try hack the box Labs

[fair vine]

You can download metasploitable, its a vulnrable vm

[teal basin]

Where do I find this vm?

[teal basin]

I will try it once now that u mentioned it

[fair vine]

https://www.vulnhub.com/?q=metasploitable here you have 1 and 2 but i think 3 had been released

[teal basin]

thank you 🙂

[hoary nymph]

Gave +1 Rep to @fair vine (current: #88 - 93)

[fair vine]

No worries!! goodluck, metasploit is a fun tool

[teal basin]

ikr

even though i kind of hit a roadblock

it was fun to do mess with the modules and stuff

[rustic olive]

hats off to the genius/geniuses invented the time based blind SQLi... I guess if someone is determined to destroy something, they’ll find a way...

[frank stag]

hi guys im new to cybersecurity ..i dont know where to start and what to watch or read to master hacking can anyone help me

[granite crest]

There's a fine line between genius and raving lunatic...

[weary meteor]

Welcome , you can follow this pathway 🙂
https://tryhackme.com/hacktivities

[hollow arch]

@weary meteor I completed 8% of the presecurity... moving on to LAN it asks to subscribe... is there no direct link?

i mean is it that one has to subscribe to get thru to LAN?

kinda mandate?

[weary meteor]

That's a premium room , you'll need subscription to access it . You can go to this link and select free roadmap
https://tryhackme.com/hacktivities

[hollow arch]

ok

Thank you.. trying that

[hollow arch]

This is good!! Thanks again!

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5233)

[radiant jacinth]

Hello guys. If you want to find a software cracking service, where can you go?

[sage swift]

hi guys can i ask if its worth it to subscribe a premuime for a fresher like me ?

[low jungle]

first complete the free modules and rooms

then sub

[toxic lagoon]

I agree with POWDAR's suggestion. There are a lot of free modules/rooms to check out, I'd recommend starting with that to see if you enjoy using the service. If it seems like something you'd enjoy and get value out of, go for it!

[toxic lagoon]

That's not what THM is about. This service is about learning cybersecurity topics with hands-on demonstrations/labs to help the knowledge sink in

Anyways, on a different subject, does anyone here dabble in Arduino or microcontrollers of any sort? I did a basic LED switcher with an Arduino Uno starter kit a little while ago but haven't found time to do more. Nonetheless, I really enjoyed it because it helped me further my understanding of the barebones fundamentals of how computation works

[weary meteor]

Definitely not here , piracy is illegal

[restive wigeon]

Hello everyone, please who can put me through tryhackme brick heist

[weary meteor]

Try to ask in #room-help channel 🙂

[blazing pebble]

Hello everyone, can someone help me with openvpn connection? I ran trobleshooting script and it said that I need ask for assistance here.

[weary meteor]

Can you provide some shots in #site-support channel

[rare swift]

hello guys, what is the best channel to discuss a CTF not related to THM?

[weary meteor]

None , we can't help you with non thm ctfs 😦

[rare swift]

alright, thanks!

[toxic lagoon]

Is anyone else really getting tired of the constant pop-up banners on the site? I get like two banners about the PT1, one about the Discord, one about the various rooms, it shows up at least once every day and drives me insane

[tawdry pumice]

I’m into microcontrollers:). currently working through a YouTube series by Paul McWhorter.

@toxic lagoon I haven’t noticed the banners tbh. Are you using the free version or subscription?

[toxic lagoon]

Nice! I've also been (slowly) working through a series from a channel called Science Buddies. I felt a strange satisfaction from getting a red and blue LED blinking on the breadboard haha

[toxic lagoon]

I'm a subscriber, I get them at least once per day. I normally could block the elements with Brave Shields but I turned off Shields on THM because I have a bug with my current install that locks on the "forgetful browsing" feature, meaning it'd log me out any time I close the browser unless I turn them off for specific sites (and I have ~3 months until I start fresh with Linux anyway, so I just bear with it)

On another note, since #general is currently talking about causing slug genocide by salting them, has anyone else had any trouble with THM VMs today/tonight? I've had my VM disconnect three times in the last 30 minutes or so

[tawdry pumice]

Ive never heard of Science Buddies. I'll have to check them out. Oh yeah dude any little circuit is satisfying! A lot goes into even the simplest of circuits

[toxic lagoon]

It also doesn't hurt that I'm impossibly fascinated by LEDs for some reason haha. But I know stuff like Arduino is capable of so much more, I really hope life calms down a bit so I can get back to playing around with it!

This is the playlist I'm working on, btw: https://youtube.com/playlist?list=PLlBVuTSjOrclb0iCMSRpS_H1lSrlSVeEm

[tawdry pumice]

Ohh you know what now that you mention ad blockers, maybe my blocker is keeping them at bay. Ill have to deactivate mine and see what comes up

[toxic lagoon]

Yeah, the weird thing is, I feel like I've seen the banners on one of my laptops as well and I didn't have to deactivate Shields on that system. I could be wrong, though. I just wish there was an option for "don't show again", because I am interested in things like the PT1 and may go for it in the future, but it's not relevant to me yet because I'm just finishing up the Cybersecurity 101 learning path

[tawdry pumice]

Guy talking speaks very clearly. Seems like a good tutorial:)

[toxic lagoon]

I agree, he made it very easy to grasp! My main struggle was trying to do it all with a tiny workspace 😂

[tawdry pumice]

I feel the same way in regards to PT1. Id be interested in the future but there would be no point in me getting ads for them now because my CyberSec journey has just begun

[tawdry pumice]

I agree, its hard to find space to keep everything organized

[toxic lagoon]

Nice, I saw the newcomer badge on your name but I had no idea where you were in the journey. Do you have any idea what your aim is once you get through the basics? I'd love to head into pentesting myself but I've heard and assume starting off with something like a level 1 SOC analyst position would be an easier way to get my foot into the door of this industry lol

[tawdry pumice]

@toxic lagoon this is my current project. Writing a program that controls a stepper motor and uses a little button switch to dictate the direction of rotation:)

[toxic lagoon]

Sounds pretty slick! Have you thought of some practical applications for it or are you just tinkering with it? I only have one Arduino board so I'm stuck with just tinkering myself lol

[tawdry pumice]

Yeah I’m on the same boat. I’d love to eventually be offensive, but will likely work through the SOC paths to have greater chance of landing an entry level job. I’m actually even going to be applying for help desk positions. Anything to get my foot in the door

[toxic lagoon]

... aaaand, that's VM crash #4, all in the course of an hour

[toxic lagoon]

Yep, that's a smart move especially if you don't have an IT background. I've been a computer geek my whole life but no real IT experience so I'm trying to land a helpdesk job atm too

[tawdry pumice]

Just tinkering for now:). I feel like I lack creativity when it comes to making actual application projects. For now I’m just having fun figuring out how things work

[toxic lagoon]

Gotcha, probably best to play around with stuff before committing anyway haha

[tawdry pumice]

Nice. Would it be okay to come to you in the future if I have some questions? How far along are you in THM by the way?

[toxic lagoon]

Sure, I'm far from a pro but if I pick up any sort of helpful tips along the way, I'm happy to pass them on 🙂

About two and a half rooms away from finishing the Cybersecurity 101 learning path, and I also completed the Pre-Security one because a lot of the rooms are shared between those two paths (and what wasn't shared, I ran through pretty quickly). Probably going to head into the SOC Level 1 path after this, though I might play around with Jr Penetration Tester to see which seems more viable for me right now

Lol nah, it's no problem, I just can't promise I'll always be of much help 😂 But if I can, I'm happy to pass on whatever I can

Aaalright, I'm going to call it a night, had the VM disconnect again. Just going to move on to some Python or mess around with my Arduino I guess lol

[tawdry pumice]

Thanks. It would mainly be to have a buddy to talk to about CyberSec and THM stuff:). It can get lonely out here. At least it does for me haha. Thats awesome! I worked though PreSec as well. Currently in Sec101 in the Networking section. We'll be on a similar path then

[hoary nymph]

Gave +1 Rep to @toxic lagoon (current: #715 - 8)

[tawdry pumice]

Sounds good. Ill see you around. Good talking Jacob:)

[toxic lagoon]

Agreed, the community is nice here but it doesn't hurt to have friends to chat with in more of a 1-on-1 conversation. And nice, definitely very similar!

I'll still be on Discord for a little bit though

[tawdry pumice]

Right on. I'm actually going to hop off haha. Gonna try to get through another section of Networking before i hit the hay. Sent you a friend request, hope thats okay. Wont be offended if you decline

[toxic lagoon]

Sure thing, take care! And no worries, I saw and accepted it lol

Pretty sure that sort of thing isn't allowed here. Correct me if I'm wrong, @weary meteor @south inlet

[weary meteor]

That's not allowed here

[covert remnant]

What was it?

[weary meteor]

nvm

[lapis cypress]

Hi
Please does anyone know where I can get data analysis certificate

[weary meteor]

Try to ask guys from #cyber-and-careers channel 🙂

[lapis cypress]

Thank you sir

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5256)

[prime depot]

Guys in the Linux fundmentals part 2 in the task 2 u have to login to the Linux machine but when i have to write the password i cant it doesnt show anything on the screen

[weary meteor]

Try to ask in #room-help channel 🙂

[prime depot]

Yeah mb

[fickle galleon]

I was wondering about the league locked legend badge
How do I get it, since the description isn't really descriptive

[weary meteor]

That badge was awarded to the people who experienced issues with league system in the first week of its release . I don't think it is obtainable anymore

[fickle galleon]

OK fine
I'll just forget it then

[spare crypt]

Hey guys I have some traveling to do tomorrow. can you guys perhaps suggest me good content on pen testing enumeration? I want to start working on it so I know how to tackle a machine/system from the start when no much info is provided. My goal is to gather knowledge and build my own methods.

[weary meteor]

https://tryhackme.com/room/hackermethodology

[spare crypt]

Thank you. For what I understand Nmap seems to be where I want to focus at the moment to get deep understand of this tool and build my own "Cheatsheet" . I have done the Nmap room but if there is something more in depth please let me know. I really want o start mastering Nmap. 🙂

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5268)

[weary meteor]

There's a whole module dedicated to nmap on THM 🙂
https://tryhackme.com/module/nmap

[spare crypt]

Yes this is more what i was looking for 🙂 Cheers

[austere surge]

Roadmap for ethical hacking plz

[strange plank]

Hey! Here you go: https://tryhackme.com/hacktivities

[austere surge]

Tqs bud,how long will it take to cover this?

[strange plank]

Depends on how much time you put into it. 😉

[neat vessel]

Hi

[austere surge]

And do u have any key tips to watch put to speed up my process

[austere surge]

On avg ,how long would it take?

[strange plank]

That's exactly what you don't want to do. Rushing in Cybersecurity does not work.

[austere surge]

It covers everything right?

[strange plank]

Not quite literally EVERYTHING, but enough to get you started. This field is huge.

[austere surge]

Also i got selected as something red teaming,in that ,what about other courses like pen testing

[austere surge]

What are ur expertise

[strange plank]

You can see my certs on my profile + I do blue team stuff at work.

[austere surge]

Cool

Thanks bud ,ill try out

[strange plank]

Sure thing.

[thin birch]

Yo everyone can anyone plz tell from where to start learning cybersecurity i work IT operations on-site and i wanna start learning cybersecurity

[tawdry pumice]

How did you get on this server?

A good place to start learning would be on the TryHackMe website. Once you have more experience you can add HackTheBox CTFs

[shrewd meadow]

This

[weary meteor]

You can follow this roadmap from THM 🙂
https://tryhackme.com/hacktivities

[golden jay]

ELLO EVRYONEEEEE(it's kinda nice to scream in "quiet conversation")

[next pawn]

hi

[cold bay]

Is there any student group for the industrial intrusion ctf, I am currently alone, and would be eager to join a student group. If there is anyone, who has vacancy in their group please do, let me know 😇

[weary meteor]

Check out this channel to find a partner #1385311669256982608 🙂

[cold bay]

unable to message in that channel

[weary meteor]

You will have to verify first , follow instructions from the link below to learn how to do so 🙂

[frail vault]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 21, 2025, 6:13 AM

[cold bay]

thanks, my account is verified!🥲

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5293)

[vague lagoon]

hi

[clear hill]

Hey

Is there any soc analyst I want to talk to him plz let me know

!?

[weary meteor]

What's the issue 🙂 ?

[clear hill]

I want to know thing of soc analyst

Like how to be soc analyst and etc

[weary meteor]

Check out this path on THM 🙂
https://tryhackme.com/r/path/outline/soclevel1

[weary meteor]

You can learn all about it in the path above 🙂

[clear hill]

Ok thx

You are analyst or something

[carmine skiff]

Same
want to team up?

[vagrant dove]

is it crucial to take notes during path learning ? im currently at the cybersecurity 101 , at 30% should i go back to take some notes ?

[south inlet]

How are you going to remember everything you ever learn?

[vagrant dove]

no but for example the OSI model that has 7 layer , like should i know it or i can just check it along on internet everytime i need it ?

[south inlet]

Both?

[vagrant dove]

okk, thank you

[hoary nymph]

Gave +1 Rep to @south inlet (current: #2 - 3868)

[barren flower]

Hey is there any ethical guys who can help me and my friend for a gmail recovery

[weary meteor]

We don't do that here , contact Google's support team

[barren flower]

But the guy who took it already changed the password and the recovery code is only sending to that account which is with some anonymous guy who we don't even know

We have our combined 6-8 years Clash of Clans Account linked with that gmail that's our tension

[weary meteor]

Sorry but we can't help you with that

[barren flower]

Where can I found support google team is just sending the code that gmail only

Which makes it difficult but why isn't it with the phone number

@weary meteor nobody is really supporting us 😞

[weary meteor]

I told you multiple times , we can't help you with that , contacting Google's support is your only option

[barren flower]

Ok thank you

[jade raptor]

can some put me through on how to link my local kali terminal to tryhackme

i have been able to setup my openvpn but still finding it diffcult to work directly on my local terminal. i need this because my attackbox is seriously lagging

[radiant jacinth]

If someone is good with snort I would really appreciate help with my snort project, I have some issues I cant fix

[strange plank]

Once you connect to the VPN then there's nothing else to do.

[jade raptor]

really

but i still cant access the link provided in the room i'm currently working on my linux browser

[strange plank]

You can ask for help in #room-help.

[tawdry pumice]

There’s a module on THM for setting up OpenVPN to get on tryHackMes network. Did you use that module?

[jade raptor]

Nope, all i did was to follow the instruction available. download the file and use sudo privelidge to access it on the terminal

[tawdry pumice]

https://tryhackme.com/room/openvpn TryHackMe | OpenVPN

[jade raptor]

thank you.. i will give it a try and feedback

Thanks mate its sorted

[robust raft]

Hi

[cold bay]

heello

[robust raft]

How are you?

[cold bay]

doing good, and u?

[merry maple]

Hello!

[cold bay]

how is your day going?

[merry maple]

Good

[robust raft]

@nizhanthh fine

[vague lagoon]

hi

[shell summit]

hi!

[vague lagoon]

how are you/

[shell summit]

good, you?

[vague lagoon]

good

[robust raft]

Hi

[weak hull]

is premium worth buying?

[crude thicket]

in my opinion, 100%

[tawdry pumice]

It has been for me

[dusky badge]

Totally worth it, I am loving my experience with premium. I am able to learn lot more topics using TryHackMe subscription.

[worldly copper]

yea i also have premium of tryhackme

[weary meteor]

Yes but I would recommend you to complete the free pathway first and decide after that 🙂 . You can find the pathway on the link below just select the free option
https://tryhackme.com/hacktivities

[harsh python]

Hi @weary meteor are Entra ID rooms already available in Azure path?

[weary meteor]

I think that it is only available for business users

[harsh python]

got it, thanks

[hoary nymph]

Gave +1 Rep to @weary meteor (current: #1 - 5311)

[limpid yoke]

Hello

[strange plank]

Hello.

[limpid yoke]

Check your dm pls

[tawdry pumice]

Sus

[fleet cloak]

hello

[robust raft]

Hi

[radiant jacinth]

hi

[copper finch]

Yoo

[radiant jacinth]

are you an experience one in the field??

[tawdry pumice]

I think they’re just a humble florist

[merry maple]

Hello!

[robust raft]

Yay!

How are you?

[merry maple]

I'm doing good

[mild moat]

I am well too 🌸

Can I ask for some advice about ethical ways of data collection, please? Since the topic is related to how people use AI (i.e., how they interact with AI chatbots).

[robust raft]

May be dark fly0123 guide you better

[merry maple]

The rule of thumb that I would say is to not share information that can lead to exposing you. But unless you turn it off for like GPT and so on, then there's really nothing that you can do per say.

But could potentially go into a little bit more detail on what you mean by the ethical ways of data collection?

[robust raft]

But I will try my best to help you about this field

[merry maple]

I'd imagine that it also depends on the laws for privacy as well. I know the EU has the General Data Protection Regulation (GDPR) as well which could potentially hinder LLM companies from collecting certain information. But for storing said data that's collected, I believe the standard is prolly an encrypted database

Like do you mean from the user's perspective or from the company's perspective

[mild moat]

There is a recent trend of exposing how some AI chatbots like character.ai are challenging children safety online, and I like to study more about it by conducting a research (from a social science perspective) about reasons people rely on AI chatbots, the potential risks they put themselves into and how does it affect the wider population.

[merry maple]

There's a lot of issues I'd imagine. For one, a person may get attached to a specific AI like on Character.ai. This actually happened on the news. But as far as what they could get from this information is a lot. It's kind of like using a minion to get information from you. So like let's do example A: You have a lovestarved male right. You could quite literally get an AI that masquerades as a woman and then manipulate the info out of him. But I'd imagine people rely on them for companionship when they're feeling lonely sorta. Additionally, if such info is leaked. It'll expose the interesting and twisted fantasies some people have

There's also the other perspective of using a chatbot like GPT as like a therapy equivalent sorta. However, there are also some situations with AI that have supposedly told people to do stuff that I cannot say here

[tawdry pumice]

There’s a loneliness epidemic that’s definitely contributing to a rise in ai use/dependency. affecting both males and females

[unreal meadow]

1. Pseudotherapy - generally therapy is expensive and the system fails them, so people will tend to rely on an LLM with a unique personality to help them vent more safely and feel validated (this is because LLMs are designed with a safeguard to prevent them from producing harmful information or responses (this is also subject to failure))
2. Risks is subject to the actual idea of a risk, I'd like you to clarify what risks exactly so i can give better insight
3. the affect on the general populus is actually very minimal because most people are conservative with technology and will avoid using new things because they believe "old is gold" in some cases it can also harm employment in certain environments as companies introduce new technology before its standardised

[merry maple]

There was a guy on the news who essentially married an AI

[mild moat]

Yes, I thought about that too.
I've also heard some disturbing things people do (which I cannot say on here) with AI using another platform.

[unreal meadow]

Shapes, Inc.

[tawdry pumice]

#1 is so true. I’m in a subreddit for CPTSD and many users there talk of how they use AI as their therapist

[merry maple]

Especially on the sites that allows NSFW stuff..

[mild moat]

Yes, that. And with how it is wild spread on multiple platforms like whatsapp, Twitter etc, its pretty worrying.

[unreal meadow]

It's not advisable from a medical PoV, but I can see why it's important to so many people and I feel bad that the system is failing them and isn't as accessible as it should be :(

[merry maple]

I'd imagine that it's soley dependant on the Companies running it. As well as the privacy laws of that given country/state. I know Ashlynn mentioned previously that Australia has some good privacy laws

[unreal meadow]

Nothing they've done is actually ethical, I'd recommend reading up on RealityWhispers notion, I also have insights wrt them but I won't disclose for safety reasons of the people involved

[merry maple]

I can definitely see this. Especially with the sensitive data that is associated with medical stuff.

[tawdry pumice]

I agree. It’s terrible and even dangerous/life threatening for those who are high risk. Like you say, it’s a sign of how our system is failing its citizens. I imagine here in the US where healthcare is not a human right, use of AI as unlicensed therapists is much higher than in other countries with universal healthcare

[unreal meadow]

Not just data, but LLMs can produce harmful information by accident that can lead to death or serious injuries and we saw this with Gemini

[merry maple]

Was it gemini that caused the death of a young boy? Or was that a different one

[unreal meadow]

They all have, but a lot of it is swept under the rug for corpo fame

[merry maple]

Oof, it was actually character.ai