quiet-conversation

[dusty sleet]

true sry

[tulip mountain]

beginner advise: If you run into some file type you don't know and it's encrypted/encoded like .asc just save yourself a lot brickwall beating and see if john the ripper has a tool for it.

[radiant jacinth]

and use file

[radiant jacinth]

I tried out mr robot ctf and like I got the first flag easy and I figured this ser the pace of the other flags but I was wrong based on my searching of already shared tips in here on this room

[dusty sleet]

i am now 0x9
i am officially in the "ok" kids league

[frail rapids]

i am now 0xD

i am officially still in the "ok" kids league

[dusty sleet]

niccce so I am not even born to be a kid yet

[radiant jacinth]

when 0xE & 0xF

[radiant jacinth]

What's a higher title than God?

[quaint basin]

Lead Mod

[radiant jacinth]

Would that have too much effect on your level on the website?

[quaint basin]

No -- Contributor does though

I am level 998 on the site

[dusty sleet]

bug hunter
muiri doesn't have it i guess

[quaint basin]

Not strictly true. I prefer my contributor role

[west shadow]

Is using autorecon tool wiser?
as in for nmap and dir fuzzing stuffs?

[dusty sleet]

I too prefer your contrib role, many splendid stuff thy haf done < 3

[lone pivot]

There's not one.

[radiant jacinth]

.. I know, I was being sarcastic.

[lone pivot]

So was I.

[radiant jacinth]

Only God there is the Mother, in the eyes of a child, but that's my opinion.

And also William Makepeace Thackeray.

[old trench]

hi

[lunar pike]

late hi

[bleak breach]

Even later hello!

[tawdry dove]

Today is a "date that will live in infamy"

80th anniversary as well

[twin ridge]

was that Pearl Harbour?

I don't remember, Americans were always a little self-centred 😛

[tawdry dove]

Yeah, Pearl Harbor

[radiant jacinth]

no cap!

[lyric aurora]

Shut up

[burnt night]

Don't be rude.

[flat mountain]

morning all

[dusty sleet]

What is the name of thm room that teaches the basics of security frameworks ?

[twin ridge]

Which one?

[real lintel]

I wish Attack Box was unlimited until the Christmas.

[quaint basin]

It is... for subs

[pallid citrus]

Lol was about to say the same

[quaint basin]

It's one of the subscriber perks 🤷‍♂️
That, more content, and faster machines.

[rapid summit]

Or less slow in case of windows vms 🙂

[quaint basin]

Depends what's running on them and what they're bumped to, tbh

Like, a lightweight Windows VM running on t2.medium is nippy af

That's obviously vastly overkill though, so we don't do that. Most Windows VMs get bumped to t2.small (2Gb RAM) and that's more than enough to make them comfortably fast

Unless you forget to turn off automatic updates...

[dusty sleet]

principals of security, nice room

[wintry seal]

.

[frail rapids]

Need to work on my highschool profile essay but I'm so unmotivated aaa

Need to answer like... 4 more questions https://i.imgur.com/Gsxb6si.png

I already answered 2

[short elk]

fix those reds

[dusty sleet]

ia m me

[half depot]

It seems ur a fellow dutchman😎

[frail rapids]

Yesss

[radiant jacinth]

[mortal venture]

updated me apt repo and half way through this happened to my terminal

anyone know why lol. im sure i can reboot and it will be fine im just curious.. Not even sure what to ask google so

[north roost]

gonna guess you are using zsh and your update tried sourcing your .bashrc file

try source ~/.zshrc

[woven patrol]

Because the process, you last ran, printed some special characters but didn't print the closing parts
For instance, \33[0;0m to reset color and some other stuff (see man console_codes, ESC CSI section)

You can reset your terminal

[mild umbra]

Wow, thanks @woven patrol I’ve had this issue before and I’ve never known how to fix it. :D

[hoary nymph]

Gave +1 Rep to @woven patrol

[mortal venture]

Thank you @north roost

[hoary nymph]

Gave +1 Rep to @north roost

[mortal venture]

And thank you

[frail rapids]

Why is TTL described in seconds instead of hops?

[rapid summit]

Perhaps you should give a bit more context on this. For example, in IPv4, it’s not seconds in practice, as every hop needs to decrement the value by at least one.

[spark shale]

My icmp packet made the kessel run in 12 hops

[radiant jacinth]

NES and SNES creator Masayuki Uemura passed away

RIP

kringlecon started!

[radiant jacinth]

Yoyo

[mortal venture]

Does anyone know how hashing works? Or any site that can actually tell me. I want to know what’s actually going on but all of my research just says it’s “a one way cryptographic function” and nothing past that. It’s quite infuriating actually.

[twin ridge]

take a bit of data, mangle it in such a way that you
a) cannot get the data back from the hash
b) small changes in data cause big changes in the hash

basically

also that the function returns the same output for a given input (ie no randomness)

[mortal venture]

Well yeah I know but how does it do that

[mortal venture]

That’s what is happening and I want to know how

I want to understand the “mangling” that’s going on in The process

[twin ridge]

Depends on the algorithm. Here's md5 for example https://en.m.wikipedia.org/wiki/MD5

They generally play with modulo arithmetic a lot

[mortal venture]

BRUH

Hours of searching and I didn’t even think to check wiki. I actually hate myself smh. Thank you @twin ridge

[hoary nymph]

Gave +1 Rep to @twin ridge

[quaint vortex]

I have a question about Jobs Board and how to get something in there if anybody could give me a hand?

Feel free to DM me and I can give more info =]

[burnt night]

Hi, reach out if you need. Assuming Muir hasn't already

[quaint vortex]

James! It's been too long. Ty

[frail rapids]

Sheesh I just found my grades from year 7

fortnite addiction moment

[timber lantern]

advies negatief 😉

[frail rapids]

[burnt night]

@timber lantern Please keep it English only. This is part of rule 8.

[timber lantern]

ok , srry

i was distracted by these grades

[frail rapids]

My exam week ended a few days ago; grades are looking good but still need to get my English grade

had to write an essay on COVID vaccinations

[radiant jacinth]

I had to write one about last year's economic situation lol

[timber lantern]

that was mandatory?

[radiant jacinth]

yep uni work

[frail rapids]

I had to do that as a practical exam for economics at the start of this year

Basically analyzing the impact of COVID on the job maket

[radiant jacinth]

Pretty easy ngl I was inspired 😄

[burnt night]

I'm writing one about zoom teaching atm

[radiant jacinth]

Yep same Lau

[burnt night]

It's at least cyber security related

[timber lantern]

let me geuss: conclusion is more jobs available on job market?

[frail rapids]

Yep something like that

The teacher set a 1 page limit (thankfully) https://i.imgur.com/7CLG6W4.png

I just threw random graphs in there so I looked smart™️

[timber lantern]

lol

[radiant jacinth]

No page limit so I wrote 4 then final conclusion otherwise it'd have quickly become a entire book

[frail rapids]

Ah kek

I once wrote a 56 page booklet on python for my CS teacher

https://i.imgur.com/stRPFmb.png

he promised me a 9.0 or higher if I submitted this as a final exam project

[radiant jacinth]

That's the first I've seen Covid mentioned since joining.

Pleasantly surprised it's not a much spoken about topic.

[merry smelt]

Is it just me, or it's indeed scary, when you log in into your e-banking with 2FA and a "We are sorry, the resource cannot be found" + broken CSS HTML welcomes you. Without any outage messages on the bank's site itself.

[radiant jacinth]

holy crap

[frail rapids]

Made that when I was 15 and the quality of the booklet itself is bad, while the explanations are pretty good

I kind of want to remaster it but I currently do not have the time 🥲

[merry smelt]

"9.0 or higher"? What kind of grade-scale is that?

[burnt night]

Hopefully 0 to 10 on a 1 decimal place scale

Which is effectively percentage points

[merry smelt]

The question is always: where is the cut? (I.e., below what is a failing grade)

[frail rapids]

Yeah, or a 1 to 10, not sure

[frail rapids]

5.5 in the Netherlands

[merry smelt]

thx

[tall meadow]

Hi 👋🏿

[radiant jacinth]

Good morning 🌻

[radiant jacinth]

https://twitter.com/majornelson/status/1469709375153455110

Larry Hryb ☁ (@majornelson)

It's esports for...wait for it.....@msexcel https://t.co/RuxHrYRC28

Twitter · Dec 11, 2021, 4:43 PM

I had no idea this was a thing

[radiant jacinth]

My switch has Xmas season

[burnt night]

@dry torrent #bot-commands please

[dry torrent]

kk

[radiant jacinth]

looking at this convo made me think about my upcoming grades, btw I'm IBDP. That shit is hard

[dusty sleet]

w my homie

drinkin cherry coke < 3

[dusty sleet]

@half fractal first time drinkin cherry coke 🤯🥳🥳

[half fractal]

[dusty sleet]

it ain't tasty but anything to get accepted into cherry cult

[radiant jacinth]

hi guys, anybody here for a bit of career advice?

[spark sun]

#cyber-and-careers

[radiant jacinth]

Not to brag but thm has by far the best clear and understandable form of explanation when it comes to explaining IDORS. Other resources are really good as well

[craggy shoal]

100% agree

[short elk]

hello spanish people

habla ana

is that really used in conversation?

[scarlet moth]

I think in a conversation that is more formal, I can see it (phone conversation)

[odd acorn]

Duolingo is super formal to the point where you’re alienated in a real situation

[rapid summit]

What, you don't talk about cooks preparing snakes for food?

[odd acorn]

Especially with what I’ve picked up from German, it’s not that similar to how Duolingo makes you learn it.

Which is why it’s always best to supplement Duolingo with another form of studies or research. If you can actually talk to Spanish people often it will benefit you.

[tawdry dove]

Yeah, duolingo and the way they teach German in school is super formal in the US. We had a teacher from Germany my freshman year where we were learning more slang but she left. When I went to Germany, I found out the locals call it "ballroom German"

[dusty sleet]

which is good or bad?

what are some walkthrough rooms about pwn tools?

[radiant jacinth]

https://tryhackme.com/room/introtopwntools is a good one

[dusty sleet]

yea ive seen that and finished it

[tawdry dove]

For formal? It makes it awkward and you as a non native speaker have a hard time conversing with a native speaker

It also immediately pegs you as an outsider, which in some cases can be bad or even outright dangerous

[frail rapids]

Does this look like a formal essay title page? https://images-ext-1.discordapp.net/external/HhYOyXgHlQLBUmonw2X5zMyWdKL9u3hkUS-wvXUqLkA/https/i.imgur.com/msPy39t.png?width=646&height=910

I didn't want to go overkill with buzzword images

especially because my entire essay is this black-white style

[scarlet moth]

If you want to know how people talk naturally, it is best to watch various tv shows, "Nailed it" and "Niquelao" are great ones and get you learning kitchen related stuff, be careful of telenovelas because of overdramatization, but tv shows, movies, podcasts, books, etc will help with natural language... lots of Spanish learning was initially geared at business learners so often there is a formality in there

[tawdry dove]

I'd go black text or blue with white background for a formal paper

[frail rapids]

Yeah it is, I'm using word on darkmode

[tawdry dove]

Oh that's trippy

[frail rapids]

https://i.imgur.com/iXtV9Qt.png

[tawdry dove]

Do you have a subtitle?

[frail rapids]

Subtitle?

[tawdry dove]

Yeah so my last formal paper was a look into Data Exfiltration. So the Title was Data Exfiltration and then the subtitle was "a look into the methods and techniques used by actors to remove data from your environment"

Idk if it was exactly that but same point

It's a way to lead people into the paper and generate intrigue. Rather than a mostly white page

[frail rapids]

Ohhh like that

[crimson thunder]

goodmorning

[dusty sleet]

No one :

pwntools:

[carmine geode]

excited for this 🥳

[ripe haven]

Reeee lets goooooooooo

[twin ridge]

:(

[bleak breach]

Oooooo

[burnt night]

@twin ridge rip

[twin ridge]

I know

[rapid summit]

Don’t worry, It’s still great for rabbit holes.

[twin ridge]

Hmm?

Well I think I have an idea for a challenge box but I don't know if it's viable yet

[rapid summit]

now that I think of it, it might be hard to spot if this was used for a rabbit hole.

[gloomy cave]

.

[toxic tusk]

@fringe ocean mind if i drop a dm?

[radiant jacinth]

imagine you are driving through a lonely road at midnight which is notorious for crimes. Now a women with heavy luggage waves for a lift.Will u stop ur car and offer her a lift ?
1 - I will offer lift.
0 - I will ignore her.

need it for a survey

[scarlet moth]

if this is an area notorious for crimes, how do you know she doesn't have a dead body in that suitcase?

[radiant jacinth]

you know nothing about her but you are also not sure that what if she really need help

[scarlet moth]

and real question, is why are you asking this question here and what is this survey for?

and why are you driving through an area known for criminal activity at midnight? are you on your way to a crime yourself?

[radiant jacinth]

here more people are active , so i can get a better response and this a survey for my study of 3 physcological phenomena - Moral licensing , Unknown trust and emotional quotient . That road comes into the route for ur home

thats why u have to drive through it

[burnt night]

You got an ethics review for the study?

Asking people ethics questions without an ethics review is ironic

[radiant jacinth]

sorry i can't understand what are u saying . are u saying that i should have a ethics review for it?

[quaint basin]

Basically, yes

[radiant jacinth]

ok

[runic raptor]

@radiant jacinth 0

[azure trench]

I hope you liked it! I am thinking about making a sequel sometime, maybe going into more advanced stuff like ROP, leaking stack canaries, etc. I'm almost to Christmas break from grad school, so I may be able to start cooking one up soon. Is there anything y'all would like to see in it?

[dusty sleet]

I absolutely loved it!!!
I would really appreciate a sequel room that focuses even more on the python pwntools library, and another room on how to bypass the executable protections, Thank you for the awesome content.

[hoary nymph]

Gave +1 Rep to @azure trench

[obsidian thorn]

general chat is being confusing so im coming over here

[dusty sleet]

echo #general | grep "useful"

[obsidian thorn]

ahh okay, 0 results

[dusty sleet]

you existed there

at least 1 result

[obsidian thorn]

so - 8

sorry i meant negative 8

[dusty sleet]

ah yes - self sabotage - my favorite

[onyx quartz]

Port 42069. my favorite from now on.

[radiant jacinth]

Lol

[dusty sleet]

i prefer 1234

[radiant jacinth]

Hello dear

I am program developer. and how can I get job?

I have many skill and experiencs.

[rapid summit]

Write a resume/CV, find job openings, apply.

[radiant jacinth]

Thanks. I have already CV. how can I get job?

[hoary nymph]

Gave +1 Rep to @rapid summit

[radiant jacinth]

I want to work for a long term with client.

[rapid summit]

Look for job openings. That's the next step. Linkedin, company websites, local forums that list employment opportunities may help with this.

[radiant jacinth]

Thanks. but do you know client? if you know , please introduce me.

[hoary nymph]

Gave +1 Rep to @rapid summit

[rapid summit]

@radiant jacinth please do not send unsolicited DMs. Look for companies that interest you. Locally, ones that offer remote positions, ones that you might want to relocate to. You'll need to do the research yourself.

[radiant jacinth]

Ok. thanks.

[hoary nymph]

Gave +1 Rep to @rapid summit

[fringe ocean]

yaa sure. why not.

[dusty sleet]

A raisin isn't a dried grape, a grape is a moist raisin

[dusty sleet]

Ive just read this company's job posting, what do yall think about it

[quaint minnow]

I know my username but I don't know my e-mail address so I can't reset my password, what should I do?

[frail vault]

Did you use a burner email or something?

[rapid summit]

Create a new account and use it instead.

[quaint minnow]

I myself used my mail but forgot which one

[sterile hatch]

just try all, how many can it be

[echo dust]

Worst case scenario arrEmail = @(email1,email2,email3,email4) fnTryAllResetOptions(arrEmail)... 😄

[frail rapids]

https://i.imgur.com/fjbl5N0.png
https://i.imgur.com/pmg4JEm.png

which version looks better? I tried using APA for the first version

[tawdry dove]

MLA is probably one of the better looking formats but that's probably because I grew up with it

Also graphs go in its own section

I think

[frail rapids]

Ah okay

[indigo blade]

Doe maar APA, ziet er netter uit

[burnt night]

Please keep it in English only here, this is a part of rule 8

[indigo blade]

Please dear fellow Netherlandian, If you would be so kind to use the APA format for your source disclosure in your documentation, that would indeed be preferable for mine eyeballs and the eyeballs of any reader of thine technoscrolls.

[frail rapids]

[dusty sleet]

https://www.youtube.com/channel/UC6kdRM6PIsTlZhGnu0d25SQ

[odd acorn]

“Rick astley”

[snow quiver]

lol

[dusty sleet]

yes

[frail rapids]

just made a masterpiece https://i.imgur.com/XCE59mY.png

I call it "pieton"

[fiery elk]

bruteforce it, kek. ( not literally )

try ever single email you have & password till you get it.

[odd acorn]

Let’s not try to suggest to brute force anything on the site.. especially as all that will happen is cloudflare will ban your IP.

[fiery elk]

I’m not talking about actually bruteforcing it
I should’ve worded that better. I’m talking about just guessing every email you got until you find the one.

[odd acorn]

There’s a word for that, what’s it called again

😄

[icy scroll]

HEY!!!! Go Me!!

[mortal venture]

Hey I have a sort of dumb question, it makes sense to ask in my head but I’m sure the answer is something obvious that I can’t think of

Why stop at AES-256 bit encryption? Why not go all the way to AES-65536 encryption or something. I’m sure the answer is simple I just can’t put a pin on it. Maybe a hint? I kind of want to figure this out myself but I’m stuck

[spark sun]

Time

[mortal venture]

OH

[mortal venture]

Thank you so much

[hoary nymph]

Gave +1 Rep to @spark sun

[mortal venture]

I’ve always found it difficult to find a site that can explain and teach bash scripting. Especially Regex examples and explanations. And today while looking up a question I found a good site that explains a good amount about bash (specifically special characters and what they all do). The site is tldp dot org if anyone wants to look. Right now I’m looking at the advanced bash scripting guide it’s a nice read (despite me not knowing any beginner level bash scripting)☠️☠️

I was curious as to why most bash scripts ami saw started with random stuff like ‘\n %s #n’ and just seemingly random stuff and I happened upon this site after about 20 minutes of looking lol. I still don’t know the answer but I will after reading for some time 🙂

[echo dust]

Computing power mostly.
AES-512 isn't uncommon.

[tawdry dove]

This. It becomes impractical and cumbersome. I don't think AES uses primes but that would be another factor for cryptosystems that do

At least if my dinosaur pea brain remembered Cryptography class correctly

[radiant jacinth]

my brain couldn't survive that class

[soft pier]

wait aes-512??? shadow has never seen that be used or refered to anywhere else

[echo dust]

It's been creeping in for a couple of years now.
I can't remember off hand, but a couple services I've interacted with have offered it as a default

[soft pier]

still sounds weird as the standard and definition for aes only defines keys up to 256 bits

[echo dust]

https://ieeexplore.ieee.org/document/6122835

[soft pier]

well huh

[echo dust]

It doesn't look like a fully adopted standard yet. Wish I remembered where I've seen it.

[soft pier]

https://crypto.stackexchange.com/questions/20253/why-we-cant-implement-aes-512-key-size is what shadow found as the first result on the topic using duckduckgo

still it seems like a good idea to some extent to continue improving on AES.... but shadow is fearful for how we are going to handle the problem of quantum computers cracking cryptos and is unsure which are safe or not in that senario

[echo dust]

Definitely. Quantum superiority is a believably attainable goal at this point. Which essentially means it is an inevitable reality.

And I doubt any classical algorithms will be particularly resilient. Even extraordinarily large private key spaces only offer so much resistance when enough QuBits are arranged to simultaneously test dozens of permutations of 5+ characters at a time.

[woven patrol]

Then there will be algorithms which are designed with Quantum Computation in mind, so as to make it harder for these systems as well to crack brute-force the keys

[spark sun]

Can confirm that AES512 is FIPS compliant.

[echo dust]

I believe that is where elliptic curve crypto research comes in presently.

[woven patrol]

It is surely just one among others 👍

[soft pier]

what is FIPS again???

[woven patrol]

A norm from NIST...Federal Information Processing Standard (FIPS)

[woven patrol]

Isn't AES512 non-standard, as AES supports {128, 192, 256}?
I mean popular libraries do not implement/provide any methods, do they?

[brisk grove]

@mortal venture computation power mostly. If you have a raspberry pi, try to ssh-keygen a 16384 key, you can do it but it will take awhile to create. Also a user with a key that big cause the puny raspberry pi to hang while it processes that giant key

if you have powerful computers and security is more of a concern then speed...go big, if you are catering to general public, where speed might be more valuable then security (go capitalism!) then go smaller

[spark sun]

Federal Information Processing Sys- er, Standard. Edited because I forgot and had to look it up

[soft pier]

oh that response took a while... still thanks for stating it.... now time to look into exactly what that means

[hoary nymph]

Gave +1 Rep to @spark sun

[soft pier]

ah so they handle standards for use in computer systems that are none miliatry but still connected to the government

together with other standard creators

[spark sun]

Yeah, got busy with work meetings. Hard to skive off for discord when meetings aren't a waste of time

[soft pier]

true and completely fine... hope the meetings went well and are going well if you are still in some.... don't mind us while we find the info ourselves

[spark sun]

Nah, work is done for the day. I still have reading to do but that never ends

[mortal venture]

noted noted thnx

[dusty sleet]

ive just read half of Gilgamesh story summary and I am now mad that I didn't know it existed before

[mortal venture]

Can someone reaaalllyy dumb down the path environment variable? I can only find a lot of techy explanations that make little sense to me (sorry small brain 😦 )

Maybe I can understand the techy explanations if I can get a dumbed down explanation first? Idk

[burnt night]

There's an explanation in Deja Vu that I'm very proud of

[mortal venture]

Is that a YouTuber or website or something?

Sounds like a book

[burnt night]

https://tryhackme.com/room/dejavu

[mortal venture]

Oh…… I should have thought of that first lol. Thank you once again James 🙂

[mortal venture]

I literally skipped to task 5 and I’ve already learned like 3 things in just the first few paragraphs. I shall complete this room when I get home :). Thank you again

[hoary nymph]

Gave +1 Rep to @burnt night

[quaint basin]

that strikes me as a lesson learnt on the advantages of taking your time and absorbing information, eh? 😆

It's all there for a reason -- it's foolish to skip over it :)

[burnt night]

I think they jumped to the information that was relevant to their question - I don't think they'd started the room first.

[quaint basin]

Oh. Oops

Yeah, I misread that 😅

[mortal venture]

James is correct although your input is always appreciated Muir!! 😄

[alpine isle]

Can anyone point out how to decode this hex to text : '0bd8df'

[mortal venture]

https://gchq.github.io/CyberChef/

Your question equals a one half fraction though. The website is drag and drop

[quaint basin]

Yeah, sorry -- read that completely wrong 😄

[alpine isle]

Tried that but i think i cooked the wrong recipe and burnt it xd wdyt the right recipe would b?

[mortal venture]

‘From Hex’

What did you use? screenshot works also

[mortal venture]

Wait did you use a zero instead of the letter o lol

[alpine isle]

I used from hex the output is this:
.Øß

Is that unicode?

[alpine isle]

It was zero 🤔

[plush anvil]

Freeganism is looks good

[mortal venture]

It was a zero? Hmm. Where are you getting the hex output from?

[covert finch]

E

[alpine isle]

Is it like missing some field?
I double checked the dropper ps1 file that i got this hex string from this string is kind of like a path component to a url e.g http://c2cdomain.com/0bd8df

[mortal venture]

Why are you trying to convert it from hex🤨

[burnt night]

Yeah that's not going to mean anything

It's just going to make it harder for others to stumble on it, or potentially work as an ID for something.

[alpine isle]

Shouldn't I 🤔

[alpine isle]

Could be possible 🤔

[mortal venture]

It’s just a directory what are you trying to get from the name of the directory

[alpine isle]

Any suggestions on what should i do with it cuz I've run out of recipes 😂

[mortal venture]

Do Nothing

[alpine isle]

Yeah!

[burnt night]

It's not encoded text

[mortal venture]

It’s like how YouTube puts all their videos under directories such as “akfUbU73J” it means nothing

[alpine isle]

So it's like that huh 🤔

[mortal venture]

Typically yeah

[alpine isle]

But the source said it was encoded 🤔

[mortal venture]

What source

[alpine isle]

A ps1 file i got assigned to analyze xd

[mortal venture]

What ps1 file

Gonna need some more info man :/

Is this for a box? Schoolwork?

[alpine isle]

I'll drop the ss for that file in a few mins

[alpine isle]

Nah just random malware research

I'll post in a few mins

[alpine isle]

snipped a few lines of code so av wont delete it as malware

[burnt night]

@alpine isle Please don't post malware even if it is part of your homework.
Please don't ask for homework help. Talk to your teacher for help first.

[alpine isle]

It was just regular text now explaining the part of code i was lost in.. since i snipped all the functionalities away 😅 and this isn't hw 🤦‍♂️

[burnt night]

Malware discussion is only allowed in #exploit-and-mal-studies
This channel is locked behind certain roles including but not limited to 0xD, OSCP, or Throwback.
Thank you

[hoary nymph]

Gave +1 Rep to @alpine isle

[mortal venture]

Google is always a good help sorry :/

[azure trench]

Hi y'all, made some banana pudding a few weeks ago. Meant to post it here in our unofficial cooking channel. I ran out of Nilla Wafers, so couldn't cover the whole top, so I tried a X to spread them evenly. It was still really tasty, it was a big hit at a potluck.

[radiant jacinth]

Looks delicious 😋

[frail rapids]

😋 😋

[exotic haven]

Hey need some help
I was able to login into as a certain user. while poking around i found the authorized keys of another user, now i want to escalate priveledges to that user but i dont know how to go about it

[dusty sleet]

is this a room?

[azure trench]

I hope so

[dusty sleet]

[spark sun]

#room-hints or #room-help may be more appropriate - which room is this for?

[radiant jacinth]

https://www.reddit.com/r/pcmasterrace/comments/rl61hp/g_o_o_d/

[scarlet moth]

and it used to be meth labs, now its crypto mining

[radiant jacinth]

lol

I too think crypto is like meth

/s cause I don't want any bs from people

[dusty sleet]

funny certificate

laugh()

[hoary vale]

laugh track

seinfeld theme

[mortal venture]

Hey I’m starting to dabble in malware analysis. Nothing too fancy just getting my feet wet. Right now I’m installing ghidra, should I learn to code first? I understand the very basic things of python and that’s about it but I can’t make any programs or anything more than a few lines of code. Looking for any tips on getting a started. Helpful pre requisites is what I’m looking for 🙂

[mortal venture]

What I’m asking is how advanced does my knowledge of what language(s) should I have to be able to take things apart

[radiant jacinth]

I'm not into MA but according to what I've seen it's essential to learn/have knowledge in C so you can write your own basic program and decompile it to understand how things work in Assembly first

tl;dr Learn C

[mortal venture]

Appreciate the works my guy. Will be looking into C then

[radiant jacinth]

Anytime, there is a Reverse Engineering server so if you need an invit you can ping me

[mortal venture]

I will take an invite 🙂

[radiant jacinth]

I'll send it in pm if you don't mind, not 100% sure if it's allowed through channels

[burnt night]

It's explicitly prohibited in the rules.

[radiant jacinth]

😄

[frail rapids]

Man I wish I had business ideas

I'm an incredibly economic person who's interested in management and marketing but I just cannot come up with a business idea

And if I come up with a business idea the SWOT analysis is a big negative

Like AI freelancing for businesses
Strengths: I know how it works
Weaknesses: I do not know how to apply it in the real world
Opportunities: There's local businesses who may want it
Threats: there's always some online person doing it for 1$ an hour

[mortal venture]

Please be my guest 🙂

[radiant jacinth]

Friend request sent

[mortal venture]

accepted

[echo dust]

Grab the e-book of "Hacking: Art of Exploitation"
Just the first 3 or 4 chapters of it should be enough to get you started.

[burnt night]

I can recommend NoStarch's malware analysis book too

[mortal venture]

ooh noted will take a look

i will be looking at that also thanks james 🙂

[echo dust]

And from this AoC3 challenge. REMnux looks like a good toolkit after you've done that.
The barrier to entry is a LOT lower than people think fortunately if you have any scripting background.

[frail rapids]

Is reading books the best way to get into cybersec?

I'm currently reading cyberjutsu and I like it, but I feel like it's mixing stories with important information

Which I don't like, because I want both ones seperated for efficiency sake

[tawdry dove]

It's a supplement to actual work experience

[shy badger]

hi

[tawdry dove]

If you mix personal stories with technical information it makes it easier to understand and remember

[frail rapids]

Hmm I guess you got a point there

[echo dust]

AoE is less a book you read, and more a book you do.
I suspect the malware analysis book is similar.

[tribal zenith]

Hi

[burnt night]

Bit of both for the malware analysis book.
It's a lot of useful information, with practical exercises

[autumn trout]

Have some tryhackme memes:

https://www.reddit.com/r/tryhackme/comments/rm4ye1/hacking_tryhackme_with_skills_you_learnt_from/
https://www.reddit.com/r/tryhackme/comments/rluf62/inception/

[dusty sleet]

https://youtube.com/shorts/WjdZNPZ1SXo?feature=share

[frail rapids]

Is the pentest+ harder than the OSCP?

When I look at it's curriculum it has waaay more theory

https://i.imgur.com/neGaPwr.png

IMO the OSCP covers more practical things like exploits et cetera

[dusty sleet]

question for M1 owners, is it practical to get one for pentesting?
I am considering buying a macbook 13 '' I7 intel cpu, should I get that or the M1 for pentesting ?

[north roost]

haven't taken the OSCP so not really an objective take but CompTIA tests are generally "hard" because of the sheer amount of memorization they generally require, doesn't mean you are more of a pentester than someone with OSCP but it just tests you differently

[north roost]

if they haven't fixed virtualization I wouldn't touch it with a ten-foot pole

[strange nest]

depends on what you plan on doing pentesting-wise. there are arm versions for kali and parrot and the m1 is generally quite powerful (also for compiling and programming). but some areas like malware analysis or reverse engineering that largely run on intel architecture will be harder to accomplish on m1 (or not at all)

[radiant jacinth]

I wouldn't take an m1 if you paid me.

[quaint basin]

I would. Been fancying trying some MacOS hacking for a while now

As a daily driver? Nope

[dusty sleet]

m1 or Intel?

[dusty sleet]

thanks 😊

[hoary nymph]

Gave +1 Rep to @strange nest

[mortal venture]

so you guys know that for example, typing “vim” in any directory will open the text editor? Is that what adding something to the path variable means? I don’t fully understand this but the more programs I research the more this comes up so I really want to understand the Whole path variable bit as much as possible

Ooohh while on the subject what do you guys think of this? Close friend said I can get any laptop for Christmas and this was my choice. I plan on wiping it with a red key and installing kali or parrot

^^^ pls ping

[sinful belfry]

spend hours on THM with little completion

[dusty sleet]

ye path = directories ur shell wil look in for other programs that you don't provide full path to

attacking wise: changing path var and writing malicious programs then renaming them to legit one can lead to a script executing your malicious program cause its the only one with that name in path variable.

[mortal venture]

Interesting thank you

[quaint basin]

Either 🤷‍♂️

[radiant jacinth]

What do you currently use?

[quaint basin]

MSI GS66 -- same as I would after getting a Mac

Literally the only reason I would want one is to practice attacking

[strange hull]

Oh no it's vulnerable to log4j

[mortal venture]

What is? Kali?

[burnt night]

Not the only one necessarily, just the first it finds. And not just scripts. Calls to system() etc.

[dusty sleet]

comment on the topic of 13"(inch) laplops vs 16"

[strange nest]

16" would be way too big for me. everything above 14" is just too bulky for working in transit etc. i prefer 12 - 13"

[burnt night]

I used a 12.5" Thinkpad x230 for a while

Swapped to a 14" latitude 5400 and I'm happy

[dusty sleet]

I have a 16 and thinking of getting a 13 one cause lighter

[burnt night]

I went from 15.6" to 12.5" for a massive weight reduction, then to a 14" that weighs about the same or less

[dusty sleet]

what do you think aboutbthe new mac screen ratios,(more squared)

[burnt night]

I personally like 16:10 but I'd never buy a mac

Are the macs like 5:4 or something?

[wary cradle]

i personally prefer portability and plugging into screens wherever i can

[dusty sleet]

14" model on far right
13" model on far left

[wary cradle]

oh my god the notch

[burnt night]

Yes, gross

[dusty sleet]

i felt cringe when i saw it but it actually kinda nice

i likeit now

[wary cradle]

Probably get used to it. same as with phones

[dusty sleet]

u don't notice it much and if u want u can disable it cutting top bar and everything get shifted down

[wary cradle]

and i suppose it's true black, so you don't notice it much

[dusty sleet]

yess

you might disagree on a lotta stuff apple does, but they do make nice screens and thats a fact

[twin ridge]

framework looks nice IMO

Apple makes good hardware, but they're way way overpriced

[radiant jacinth]

I thought about that before I ended up with a Zbook.

[pure mantle]

How thick is that thing? Does it feel/look hefty?

[dusty sleet]

ama get 14 inch macbook pro intel í7 and pay my kidney

[scarlet moth]

your kidneys are worth more than that

[strange nest]

so i finally finished the Complete Beginner path (yay). what would you suggest doing next? i think putting all the new knowledge into practice would be best before enrolling in the next learning path. where can i do that best?

[halcyon ginkgo]

I would have a crack at cyber defense or jr pen tester (depending on if offence or defense if your focus.) Well done on fishing the beginner path!

[strange nest]

thank you! i think i am gonna go with defense since i'm pretty interested in forensics 🙂

[visual breach]

//n
"N' bb vb bv vb bv lll[[[[[

[earnest path]

Hey team, I was looking for courses for CompTia certs, and I came across https://stacksocial.com/. Does anyone have any input on that site and it’s training? I don’t really have an issue with paying 600-900$ for the official courses, but this seems dirt cheap to not search about it. Thanks 😁

[celest cairn]

rip moocow, you will live on forever as energy in our bodies

[mortal venture]

okay im really sorry for this but just to be clear. If i install a program and want to be able to call said program / script without having to navigate to its directory, i simply add its full directory path to the PATH environmental variable? And its as simple as that (non pentesting scenario)

And pentesting wise, if lets say a SUID binary has root permissions, i can change its $PATH variable to lets say /bin/sh for example and gain a root shell?

[spark sun]

That's kind of not how environment vars work

[mortal venture]

Sorry for the ping, wanted to include the past convo for context

[spark sun]

so the environment var is scoped to a shell instance

[mortal venture]

so once i close said terminal it resets to default???

[spark sun]

when you terminate the shell, whatever you have set for a env var goes away - such as modifying $PATH

[mortal venture]

so how do programs like VIM and subl text editor work then?

[spark sun]

settings a standard $PATH may look something like this, from a .bashrc or .zshrc file: export PATH = /home/<user/bin;/usr/bin;/usr/sbin

modifying that var while preserving the old data: export PATH=/new/path;$PATH

by pre-pending your change, the system will look in that area before looking in all the other directories

[mortal venture]

I feel like its on the tip of my tongue but its just not clicking

im really sorry

[spark sun]

a binary may set environment vars within the scope of its own execution as well - this is more common with desktop or GUI applications

You don't need to apologize, you don't know yet 🙂 asking questions is how you get to know

[mortal venture]

Yeah but i feel like that one guy ya know?

Any good sources where i can research this that you would happen to know off the top of your head? I tried researchon my own and its making less sense than you guys are here

[spark sun]

The GNU docs are a good place to read up on, but it may feel like drinking from the firehose https://www.gnu.org/software/libc/manual/html_node/Environment-Variables.html

[mortal venture]

thats really how it was on my own so i came here for help 😦

[spark sun]

This is context-specific to C, but a lot of the idea are transferable

Lets move this to #infosec-general , so you aren't slowmode limited

[mortal venture]

If anyone has any more input in the matter please ping as it will be appreciated

[brisk grove]

i believe those ; should be : or do ; work in path? im afraid to try 😛

[spark sun]

semi-colon is the separator, IIRC. it's super easy to check in the terminal though

[brisk grove]

i just did, echo $PATH first so i have an original to go back to, but export PATH=/tmp;$PATH && echo $PATH shows /tmp only

and what would you call the process here? the command parser?

[spark sun]

command execution?

[pine iron]

I believe what's happening is the semicolon is treated as a pipe or whatever the proper word is, to my knowledge semicolon is the proper seperator for the path variable
Edit: only just came back to this and realised I said semicolon both times, meant to say colon is the proper separator

[echo dust]

Definitely full colons in my path.

Semi Colons are commonly "end of line", used so you can run several command sequentially.

[spark sun]

Yeah, I'm mistaken then. : is the correct separator, ; is the end-of-statement delimiter

[kind kraken]

Yep

[dusty sleet]

nope'nt

[kind kraken]

not not !No(Yesn't)

[dusty sleet]

I was looking at the top 50 peeps profiles and this guy caught my attention, I have no idea if he is trolling (to see what I mean go to his website , see his certs and resume)
https://tryhackme.com/p/AFVANMJ

main stuff that caught my eyes:
expertise in so many areas
bad english

how is this even possible in one year

[heady creek]

how it feels to chew 5gum

[dusty sleet]

casually

[heady creek]

OS CDeezNuts

what even is OSCD

is that the new Mac one

[dusty sleet]

no its a subway new menu thing

[fiery flicker]

Probably he did not bother to write the exact dates. 🙂

[kind kraken]

and maybe he doesn't need English. Think about Kojima, he literally has a studio at Sony and yet he still doesn't speak English.

[quaint basin]

Doesn't really matter: even without the obviously fake certs on it, chances of it being rejected immediately by recruiters are really high.
A) it's cert stacking, plain and simple. Getting certs for the sake of having them doesn't impress anyone, and you can't absorb information that fast.
B) with the number that are there, that is 100% fake. There are 39 certs on that list, including the ones that don't exist and several certs that take at least a month to prep for. To do that you would need to sit just over three exams every month and not fail any of them -- that's about 8 days of prep time for every exam. It's simply not plausible.
If it is real then this individual would have to already be an expert in all of these areas, in which case they would also know about cert stacking, as well as how fake that list looks. It stinks of inexperience, which contradicts that.

In other words, don't worry about it. It will do them no favours, and indeed will likely give recruiters a good laugh before they toss it in the bin.

[mighty oyster]

He probably thought it is Offensive Security Certified Developer lol.

[young thicket]

Does anyone know how to set up QoS on ZTE router? I understand how QoS works and I know exactly what I want to do. I just don't get the interface of ZTE router. If anyone can help me just DM me and I will send you screenshots of the rotuer settings. Thanks in advance.

[dusty sleet]

My brain can't accept there isn't a ctf in this ad
https://youtu.be/Wav_1mqY5ZU?t=20

[radiant jacinth]

oh god

[lilac gust]

true, another point being they listed certified for some things but for OSCP stuff they just mentioned "training" so whatever that means, bought course maybe? so it might be a little misleading

[radiant jacinth]

goes into diabetic coma

https://tenor.com/view/super-smash-bros-ultimate-super-smash-bros-captain-falcon-ramen-ramen-noodles-gif-17585089

[waxen sage]

why?

[radiant jacinth]

https://tenor.com/view/me-gaming-we-do-a-little-gaming-we-do-a-little-bit-of-gaming-gif-23897236

[dusty sleet]

ama post some nice gifs so ^ gif can go away

https://tenor.com/view/cat-power-cat-cat-pillow-repost-this-post-this-cat-gif-23865940

https://tenor.com/view/uwu-owo-owow-uwuu-gif-23842323

[frail rapids]

Does an app always react the same to HTTP headers like text encoding?

Or can it be altered by a programmer or server type?

[dusty sleet]

i guess it can be altered in server side logic to return different response to clients

[twin ridge]

That's usually accept and content type headers

[autumn trout]

@obtuse marsh do you know if I can implement royalties in ERC-20 tokens?

Basically if you transfer the token 5% of that transfer goes to an address is what I want

Ideally I want anNFT but with the liquidity of a token I think

[radiant jacinth]

Once you find the email sender's IP address, where can you retrieve more information about the IP?

[west rain]

It depends on your goal

[odd acorn]

@burnt night :dancedance:

[radiant jacinth]

bro it is try hack me question

like i know whoip website

[odd acorn]

How is this a TryHackMe question?

[west rain]

I completely misunderstood lol

[odd acorn]

Room URL, task name?

[radiant jacinth]

wait

Phishing Emails 1

Learn all the components that make up an email.

[odd acorn]

Task?

[radiant jacinth]

4

[odd acorn]

Ah, I found it.

[radiant jacinth]

I was gonna say I remember doing that task, th header one?

[odd acorn]

I would suggest that in future you format your questions because unverified users asking questions like that is super sketch

Also #room-help :p

[radiant jacinth]

ok

[obtuse marsh]

I'm not sure how one would do that given ERC20s are meant to be currency tokens and I haven't played around with the idea of royalties on chain either.

[short elk]

bilingual people i gots a question

when you read something in your "second" language, do you read it in that language? or do you translate it back into your native language as you're reading it?

[burnt night]

I'm barely literate but from what I understand with learning a second language, it depends how well you know the language. When you're starting out, you often translate as you go but as you get fluent you'll be able to process the language straight up

[radiant jacinth]

I read it in that language but the translation into my native one is "automatic" & done in the same time, so I guess it's a mix

[short elk]

oooh interesting, thank you for that :D

[pallid citrus]

I think in that language....sometimes I forget words in my native language, but remember in another

[willow glen]

English is my second language, but when I'm reading or hearing it there is no translation going on in my head. But other languages that I'm not fluent yet there's more processing, when I need to think about meanings

[pallid citrus]

It's even more fun when you know more than two...then it can be a real scramble sometimes with words...funny how it helps to remember things when it's somehow associated with another language

[short elk]

it's so interesting to me how you can just do that, hopefully i get to that stage within a few years so i can understand properly 😅

[pallid citrus]

Fluency is a big thing

For example swedish for me is like so that I can understand it pretty well and even speak to a somewhat good degree, but can't really produce text for the life of me

[willow glen]

Sounds like my Swedish, I understand it, but producing it takes some work

[soft pier]

native swedish person here.... and even for shadow it is sometimes hard and english is easier

probably has to do with how much shadow browses the web and uses english

[willow glen]

Sometimes things just feel easier in English than in my native (Finnish). Probably the same reasons spending so much time using English

[soft pier]

almost asked a question in here that would stir up potential problems just now but lets avoid it for the reason of keeping this chat quiet

[dusty sleet]

I do understand english in english for the most part

[pallid citrus]

If there's something you want to ask relating to swedish/finnish you can always dm :)

[short elk]

maybe i should switch everything up to spanish to see if it helps

[twin ridge]

Yes

Well the former, when i speak or write in French or English there is no translation for me.

But I grew up with both languages simultaneously so I may be just weird

Though my French is definitely weaker than my English

Even though I technically learned French first

[echo dust]

That's normal, I know folks brought up with three languages, and within their own community they will constantly string all three languages together to form sentences, without even realising the language switching.

[twin ridge]

That happens as well

[final gulch]

I read it in the language I'm seeing

[waxen sage]

Thank you

[hoary nymph]

Gave +1 Rep to @dusty sleet

[severe pasture]

For those that use notion, especially for writeups what are some of the features that you use for both general note-taking and writeups?

[stiff oracle]

i actually went from notion to using obsidian... I loved notion for its ease of use, but my goodness obsidian is just so much better, so much cleaner, easier.. best of all its all in md format, so if you wanted you can just create a site from it too.

[twin ridge]

Until defender breaks everything when you copy a pho rev shell into your notes

[radiant jacinth]

any begginers hackers that are looking to team up?

anyone?

[severe pasture]

Hmm that's fair I'll definitely check out obsidian thanks for the pointer!

[hoary nymph]

Gave +1 Rep to @stiff oracle

[lapis socket]

Give ur tryhackme Id i have begineer team

[next viper]

Me too.. I am a beginners

🙃

[twin ridge]

probably 😛

[remote echo]

Most of your problems are already solved. I’ve only encountered AV deleting a note once. Set an exception and have never had a problem again. If you think setting an exception is bad then you can have a longer conversation with me where I rant about that. The preview and edit mode is still present but it’s really not bad ctrl + e makes it seamless there is also now rendering directly in the editor so no need really to switch back and forth. By text size I assume you mean headers? Most of those can be easily done using plugins or templates. You just need to spend the little time to get obsidian to meet your needs.

[forest kelp]

Not sure if the is a better room for this... Wondering what hypervisors folks are using. I was using ESXi on my servers and VMware workstation on my laptop but the new minipcs I was going to use have Realtek NICs and drivers aren't getting any support with a vmware fling.

[visual breach]

virtualbox

[spark sun]

I mainly use QEMU-KVM - on my sole windows PC, I use vbox. I'm in the processing of rebuilding my homelab hardware, considering making an attempt at OpenStack but more likely proxmox when I get around to that.

[visual breach]

I would like to migrate away from virtualbox, but tbh, it works and I haven't spent a lot of time researching other options

[scarlet moth]

I like VMware better than virtualbox

[steady nova]

same, but virtualbox is free

[radiant jacinth]

vmware is as well. Workstation Player.

[steady nova]

ya, but that one ain't as useful as virtualbox

[odd acorn]

Virtualbox for testing and devving, VMware for general use

VMware's performance is outstanding

[steady nova]

I use both tho. Workstation Player for a kali machine I use on THM and what not, and virtualbox for labs

[radiant jacinth]

Try out virt-manager if your on Linux, can also convert all of your current images to qcow2 or raw images (which it uses), prefer it to VMware and Virtualbox personally.

[visual breach]

will take a look, thx

[spark sun]

virt-manager is just a frontend to a QEMU-KVM backend. virt-manager can also connect to a remote hypervisor host, it doesn't have to be local

[visual breach]

ooo, nice

[radiant jacinth]

Sorry only saw what @spark sun said there yeah virt-manager is QEMU-KVM

[radiant jacinth]

Also yeah I use proxmox for everything else its wonderful 😄

[spark sun]

Hands down the best converter for image filetypes is vbox though. VDI, VMDK can break stuff pretty horrendously, Vbox is the most reliable hypervisor tooling if you need to do a conversion locally

[visual breach]

I don't do a lot of conversions, but I do often work with the UI on the server

[radiant jacinth]

I have my THM kali VM on my laptop in case i need to go travelling and when I plug my laptop into my network i can spin up my VM from the laptop on my desktop for the dual screen comfort.

[dusty sleet]

hi

[twin ridge]

Vmware can export to ova well enough

Vbox doesn't play nice with HyperV despite the marketing saying it works

[spark sun]

My biggest headaches have always been hyper-v --> anything else conversions

[twin ridge]

Not even talking conversions, just having hyperv or wsl enabled breaks vbox

[spark sun]

oh, that's true

i have hyperv enabled so little, i didn't even think of that

[twin ridge]

Vmware works though

[spark sun]

until vmware stops working because your enterprise pushed an update that made the current version of vmware stop working

[twin ridge]

That's a different issue

[spark sun]

and you aren't allowed to manually update because even though you have local admin, you are not allowed to use it

yeah

[burnt night]

Well, WSL2

[spark sun]

that's most of my frustration with VMWare WS Pro. Broken corp management, not the tool itself

[twin ridge]

WSL1 is just broken

[forest kelp]

Why is vbox better for dev/testing? I haven't used it since BackTrack was a new thing so I haven't kept up with it as a product. Work pays for my VMWare Workstation license so I havent needed to look for free alternatives on desktop side. Just looking into baremetal server options. I get vmware vCenter for free but it lacks support for non-enterprise scenarios. I have two Intel NUCs on order but they have been backordered for 10 months now.

[odd acorn]

It might not be, I was just stating what I used, didn't say I thought it was better 😅

[north roost]

proxmox has been really nice as a baremetal option but really depends what you are trying to do

[rough valve]

proxmox is a type 1 hypervisor, right?

[north roost]

yes

[sharp sequoia]

@burnt night, sorry to annoy you with this ping. Can I have ur help please ?
I would like to unlink my THM account to this Discord account for relink it by another one (@weak halo). Can I have your help, please ?
I don't know who to talk about it, or where, and I see you write on the #general. That's why I ask to you.
It's not urgent, I can wait if you are already busy !

Btw, I'm very sorry if it's not the place for asking this. True is, I don't know where to ask.
And I don't want to DM, out of fear to annoying you.

[scarlet moth]

post in #site-support and don't tag James

[sharp sequoia]

Oh thanks ! I'm sorry again.

[radiant jacinth]

@brisk grove Back?

[dusk pond]

Hello, as creator Is there any possibility to get a full Chart (charts are max 10 users) ?

[forest kelp]

Ah true, you didnt say it. For some reason I read it as one being better than the other. Lack of sleep I suppose.

[odd acorn]

You should catch up on your sleep if you haven’t been

[forest kelp]

Probably a good idea. I need to pace myself on rooms. Set a goal of the 365 streak. Cant burn through all the content in a month.

[odd acorn]

I burned through a ton of content in a really short time and all it did was make me irritable, tired but more importantly start to struggle.
I was so burnt out that I couldn't focus on rooms and I was making silly mistakes, started to make it harder to progress.

I took a 3-5 month break because I couldn't get back into it and after all that time I came back into it slowly and the amount I was taking in was massive.
Sleep deprivation and overwhelming yourself with content honestly just sucks the life out of you lol

[dusty sleet]

tldr
slep eat , don't overwhelm or life vaccumed

[quaint basin]

Take a look at the stats tab in the manage room page :)

[true sundial]

Hello, what exactly was advent of cyber event? I missed the same. Will there another one anytime soon?

[tawdry dove]

Advent of Cyber is an event that corresponds with Advent, the holiday. It's used as an introduction into the world of Cyber with new challenges everyday during Advent. The event is an annual event

So the next one will be during Advent next year

[waxen sage]

@true sundial AoC3 and the past ones AoC2 and AoC1 are now just normal THM rooms with a survey of 20-24 topics now. You can still do them. The part that passed was the chance to be in a prize raffle.

[frail rapids]

Is using double hashes a good way to prevent cracking?

So basically hashing a hash of a password and storing that in a db for example

[quaint basin]

Only if attackers don't know that it's happening

[brisk patio]

how can i start for ethical hacking

[forest kelp]

work through the learning paths https://tryhackme.com/hacktivities. Start with Basic, pre-security, then jr pentester. There is a lot of overlap but more practive the better

[brisk patio]

thanks

[scarlet moth]

#start-here

[dusty sleet]

why does sosumi macos suck so much

and how to make it usable

[hoary vale]

I didn't know that existed tbh

MacOS kinda hates being run on not mac

[dusty sleet]

tru

[radiant jacinth]

what do you think of tthat: https://www.freethink.com/series/challengers/right-to-repair?utm_source=facebook&utm_medium=social&utm_campaign=BigThinkdotcom&fbclid=IwAR1H6XVEvTb6HtBwOBIOC_sSzy0-YHJI50B0jkNygDQt67Ba2Yuc5iL-7ug ?

[hoary vale]

I really like the concept

Main downside for me would be lack of discrete gpu

At the price-point I configured I could get a similarly spec'd RTX 3000 series laptop

$2,200 for i7 (4.8GHz, 2TB, 32GB RAM

Could get an ROG Zephyrus with a Ryzen 5900HS, 3070, 2TB, 32GB RAM, QHD display, for $2,199 on newegg right now

[mortal venture]

why is snort so difficult to install on kali i hate it here

imma try out suricata i guess...

i mean i guess no one that needs snort uses kali but still jeez man

[radiant jacinth]

Any tips for note keeping while studying. I keep underestimating its importance

[gray jetty]

everyone seems to be recommending notion.com or cherrytree for offline notes
just try to note down anything new you learn(doesn't have to be report ready, just a note)!

[radiant jacinth]

thank you, I will check it out

[hoary nymph]

Gave +1 Rep to @gray jetty

[quaint basin]

Pretty sure that breaches ToS

[brisk grove]

hrm?

[quaint basin]

cc @gray jetty
Notion is gorgeous but leaves you totally reliant on the website being reachable / available.
Cherrytree is brilliant, but starts crashing big time with big notebooks. Also virtually impossible to export out of.
Joplin is meant to be pretty good. A lot of people use Obsidian, but it's less good if you do any Windows stuff because it stores in plaintext that gets yeeted by AV.
Trilium is objectively the best.

[radiant jacinth]

Have you started Wreath?

[brisk grove]

not yet, I have been finishing a project that I was working on before I found THM. Lost my streak a few days ago 😦

probably start on it today

[radiant jacinth]

I'll definitely check out Trilium. Thanks

[hoary nymph]

Gave +1 Rep to @quaint basin

[gray jetty]

Well, I certainly don't have the experience you have, thanks for the info!

[hoary nymph]

Gave +1 Rep to @quaint basin

[brisk grove]

the 1st few tasks are basically a walkthrough right?

[radiant jacinth]

Your absence has been noticeable :)

[radiant jacinth]

Yes. Basically, I have a silly question, I asked in #wreath-network - maybe you are gonna have the patience to answer :-/

[brisk grove]

yeah, THM kinda took over my life on december 1st lol. Since the daily challenges were done I figured I would try and finish up a few things before diving back in

about the perl command?
just scrolling through that room atm

[radiant jacinth]

Yes. I literally copied/pasted it from the exploit (filled out the variables for IP and port). People think it's weird trying to do it manually if you have a script that can do it for you. Hm.

[brisk grove]

lets talk about wreath in that channel

i do the same thing you do. Use an exploit to do whatever, then go back and understand the exploit and in some cases write my own simple version.

[dusty sleet]

even in vm?

[quaint basin]

Anything that isn't baremetal Apple hardware, yes. It must be licensed and installed on an actual Mac to be legal.

Even Amazon have to abide by that -- their MacOS EC2 instances all run on Mac hardware.

[mortal venture]

anyone know how to run a cmd command in windows every 5 minutes? having a hard time finding the info on google :/ maybe im just bad idk

also on startup. like a crontab but on windows

[woven patrol]

Task scheduler can be used to do both of these

[mortal venture]

thank you ill look into that 🙂

[hoary nymph]

Gave +1 Rep to @woven patrol

[mortal venture]

Ah THANK YOU SO MUCH AGAIN!!! although I still needed to research a lot of topics I successfully made a task to fetch a file from urlhaus api every 5 minutes and save it to a file to use as a ruleset for Suricata. I feel good about myself 🙂

[hoary nymph]

Gave +1 Rep to @woven patrol

[mortal venture]

big step for me

ah i came across a small issue if anyone can help. the script works beautifully but now the cmd shell created a popup. any way around this or no? :/

[quaint basin]

PowerShell or cmd?

[mortal venture]

cmd

[quaint basin]

PowerShell you can use -windowstyle hidden to avoid displaying it. CMD I don't think has that option or an equivalent

There's probably a way to run it in a new session somewhere, or you could write a service to do it for you (or run it under a different account)

[mortal venture]

PS doesnt have output redirection, and i dont know any other way to do this command, but ill look into it thank you

[quaint basin]

It doesn't?

[mortal venture]

i dont think so

[quaint basin]

What format is your script?

[mortal venture]

curl https://urlhaus.abuse.ch/downloads/suricata-ids/ > C:\Program Files\Suricata\rules\suricata-ruleset.rules just a simple curl into a file

[quaint basin]

Oh, then that is very easy

Change that to be:

powershell.exe -nop -w hidden -c "iwr https://urlhaus.abuse.ch/downloads/suricata-ids/ -o C:\Program Files\Suricata\rules\suricata-ruleset.rules"```

That outta do it

Assuming you have PowerShell >4 or whenever they added Invoke-WebRequest -- there are other ways to do it though if not

[mortal venture]

why do i have to specify powershell.exe in powershell hmmm i have so much to learn

[quaint basin]

You're doing this in task scheduler, yes?

[mortal venture]

oh ive been getting that error does that mean i just have to upgrade, yes in task scheduler

[quaint basin]

Task Scheduler executes commands through cmd.
Hm, come to think of it, that will probably still flash up a command window, but not for long

[mortal venture]

i can do some more research, thank you for the knowledge once again Muir

[quaint basin]

Oh, apparently it's even easier than that
https://pureinfotech.com/prevent-command-window-appearing-scheduled-tasks-windows-10/

[mortal venture]

oh darn it took you 2 minutes and ive been looking for like 25 smh

[quaint basin]

Turns out there is an option to do it in Task Scheduler. Gotta love Google

[mortal venture]

If I use an IPS and IDS like snort or suricata in a vm can it still capture my host machine? I don’t see why it won’t but I just want to be sure. I want to learn how to properly implement these rulesets and using them on windows is a pain in the ass and has costed me hours and hours of troubleshooting with very little improvement

I thought I finally got somewhere with suricata but turns out it needs to be compiled in Cygwin which in and of itself has costed me the past 4 ish hours of troubleshooting

Would be easier to just install a centos vm for the sole purpose of learning to use these programs but absolutely zero traffic happens in my current vm’s besides tryhack me and such so it would be pointless if they can’t detect traffic outside of VM’s

You know what. I bet I can google this give me 2 seconds

Apparently yes but it’s very very complicated ugh

[bleak nymph]

If I expose 3389 for rdp on my home router, would it be likely to get hacked if I used a strong password?

[dusty sleet]

no

update everything to latest version

also u are already exposed lol

[bleak nymph]

is xrdp safe since its an open source version of rdp

[dusty sleet]

we wouldn't know unless there is a public cve of any of them so either is fine

[bleak nymph]

thanks

[dusty sleet]

ya hala

[bleak nymph]

Not sure if this is allowed but I am trying to do a reverse shell with telnet on my router using routersploit.
But I am not sure how to access it using a backdoor with telnet. I tried nc -lvp 4445 but it doesn't work but I think that is for ssh. Any help?

[] Running module exploits/routers/netgear/r7000_r6400_rce...
[+] Target is probably vulnerable
[] Invoking command loop...
[*] It is blind command injection. Try to start telnet with telnet telnetd -p '4445'

[+] Welcome to cmd. Commands are sent to the target via the execute method.
[*] For further exploitation use 'show payloads' and 'set payload <payload>' commands.

[dusty sleet]

I think the AoC winners list have a bug

my name isn't there 😭

[quaint basin]

Nope. That is intended.

[digital spruce]

brutal haha

[dire raven]

effectively brutal o_O

[glacial flame]

Critical

[dusty sleet]

bruh get a pentesting permission next time

[warm surge]

I have a .snap file in my ubuntu . How can I install it?

[short elk]

snap install file.snap

[dusty sleet]

Santa brought me no gifts this eve.
I am the grinch on the next one.
https://youtu.be/o_hjXmiJLAw

[radiant jacinth]

Figured out that ssh issue; was my own vpn betraying me @final gulch

[wary tundra]

hi, guys i'm a bit confused what does this command do "cut -c 4-"

[wary tundra]

i'm looking at it, the way I understand it since -c is select only these characters is only remove character "4-"?

[radiant jacinth]

Hm :) Look at my screenshot

[wary tundra]

okay, i got it. thank you very much!

[radiant jacinth]

At the output.

No problem

[wary tundra]

in man cat
-e equivalent to -vE, what does this stand for?

[burnt night]

So go to the entries for -v and -E

[radiant jacinth]

What are "tickets" used for. I see there are some on my public THM profile

[burnt night]

Nothing at the moment, there is no ticket event running

[radiant jacinth]

is it going to be in close future ?

[burnt night]

No idea. I'm not site staff.

[dusty sleet]

Question:

me rn

I want :

I tried this logic flow and it doesn't tunnel openvpn through the proxy at all:

[north roost]

why do you want to proxy VPN traffic thru Squid? Its more designed to cache web traffic

[dusty sleet]

What is a more suitable proxy server then ?

[north roost]

I just wouldn't proxy VPN traffic in that scenario at all

[burnt night]

You want to MITM https or what?

[dusty sleet]

No I want openvpn UDP only

[burnt night]

You want to MITM OpenVPN?

[dusty sleet]

not really, what I really want is away to access an openvpn connection through a proxy
be it:
local openvpn packet -> proxy -> destination
or preferably:
local packets -> destinations
local packets that have the destination as the openvpn accessable devices -> proxy that is running openvpn -> openvpn packet to destination

[spark sun]

Set up a segmented VLAN. Throw the VPN on a device designated as the default gateway. Assign things that use the VPN to that VLAN

[dusty sleet]

I have an azure server, sorry but I understand very little of what you've said, Where should I start ?

What the real REAL problem is the following:
It was a peaceful connection in the land of ogolashia

Then out of nowhere a great evil came upon the land,and with malicious intent and merciless eyes struck the connection to the heavens with a great hammer:

And since then the people of ogolashia are denied the blessings of the heavens under the rule of the evil ISP

[burnt night]

The real solution is to talk to your ISP.

Don't try and bypass their restrictions. We WILL NOT help you with that. They're in place for a reason.

[spark sun]

I don't even know what you're trying to do, but this narrative makes no sense.

[dusty sleet]

excuse me trying to forge literiture while going through cryptic documentation

😄

[burnt night]

Someone blocked OpenVPN on their network and they're trying to bypass it.

[dusty sleet]

to end the story:
A mysteriuos figure appears:

[oblique breach]

Fibonacci blackhat? 😄

[spark sun]

Yeah, I hoped it wasn't, and it was just a really bad way to ask about site to site VPN.

[dusty sleet]

answer in next comic 🤠

[burnt night]

I'm just going to ask you to stop here.
It's at best unethical and and worst illegal to help you bypass the restrictions. TALK TO YOUR ISP.
If you don't stop, you will be muted.

[dusty sleet]

i accept my fate plus I won't discuss your policy nor ill try to etc etc, but please do you know of any reason an isp would block udp packets but not tcp?

[burnt night]

Talk to them...

[dusty sleet]

I am trying to talk to them for 4 months now, you can even see that in official emails I sent to thm, problem w my isp is they always let you to talk to customer support only to tell you to restart the router ,no real explanation whatsoever

hence why i am asking u

[burnt night]

Then you're not talking to the right people.

And again, no asking here.

[dusty sleet]

ok.

[frail rapids]

Does RSA use a key derivation function to generate a public key based on a priv key?

I'm trying to understand a diagram in https://tryhackme.com/room/zer0logon

Session key = KDF(secret, challenges)

[burnt night]

RSA needs a key pair, they're generated at the same time

[quaint basin]

I have a blog post on this somewhere

Go search RSA on my blog

[visual breach]

anyone know of a good tutorial for setting up an openvpn server? I am using a dd-wrt router if that helps?

[naive crag]

Have you tried https://youtu.be/04EmeXSZo_0 ? Iam always using that for my setup. ( It's been a while )

[frail rapids]

Again in https://tryhackme.com/room/zer0logon: why does the script have a loop with attempts?

[quaint basin]

@celest cairn Explain thyself!

[frail rapids]

Why is the attack up to chance? I thought it was all cryptographic and thus be just math and thus be not up to luck

[celest cairn]

probability still plays into it which is the element of luck

you have a 50/50 chance to win a game of heads or tails, but theoretically, you could never win

the same kind of thing happens here.

[frail rapids]

Ahh okay

I just went back and read

When an attacker sends a message only containing zeros with the IV of zero, there is a 1-in-256 chance that the Ciphertext will be Zero.

does it have to do with this?

[celest cairn]

yep

that's exactly it

that was the programming error on Microsoft's end that caused zero logon

that 1/256 chance

chance isn't the right word, I dont think

https://www.secura.com/uploads/whitepapers/Zerologon.pdf

page 4 and 5 has the specific details that I don't recall right now

[frail rapids]

Ohhh

Using AES-CFB8 with a fixed IV of 16 bytes of zeros, Tervoort discovered there is a likelihood that one of every 256 keys used will create cipher text that has a value of all zeros. This is an exceedingly small number of keys for the attacker to try to create cipher text of all zeros. It would take just a matter of 2-3 seconds, at most, for the hacker's computer to do this.

wait so it's just trying to make an int8 or whatever 00000000?

[celest cairn]

I think so

[frail rapids]

hence the 2^8

[celest cairn]

it's been so long since i've looked at the exploit lol

theoretically, I think Zero Logon is still possible, but the odds of it are just so low

[frail rapids]

oHhHh

[celest cairn]

unless they've written an exclusion for all zeros

[frail rapids]

Welp now I finally understand what IV does in AES

so that's that

[celest cairn]

alls it takes is for cryptography to be explained by someone who knows what they're doing lol

I barely do

[frail rapids]

Really fun and interesting room!

[tawdry dove]

Cryptography is hard for my pee brain

I cried all the way through the course

[frail rapids]

I really like it. I'm planning on reading a crypto book after finishing cyberjutsu

[mortal venture]

How difficult was the sec+ and what was it about

obviously security but I mean.

[digital spruce]

sec+ is just book knowledge

like "which is better, des or aes" and "looking over someone's shoulder to look at their screen is
a.) bluesnarfing
b.) water hole attack
c.) shoulder surfing
d.) bring a jerk"

[tawdry dove]

What's on the exam is well documented by Comptia, so I suggest taking a look at their syllabus. Professor Messer's videos, Get Certified Get Ahead, and Dion's quizzes are all excellent study resources. I was nervous for the exam, procrastinated, and then hardcore studied for a week and passed. Forget the actual score but it wasn't bad. I also have a degree in Computer Security so much of the exam was a condensed recap of everything I had learned.

[tawdry dove]

While this is true for some, I wouldn't necessarily say it's the norm. I also took 501 so I can't comment on the questions in 601, which is the current exam

I also had an abnormal test experience where I got something like 7 or 8 PBQs. Which was not fun

[mortal venture]

Man i studied for my a+ like a year ago I forgot abt professor messor lol

Thanks man

[visual breach]

thx

[hoary nymph]

Gave +1 Rep to @naive crag

[frail rapids]

Mann I wish I could get a job with just CTF experience

Sucks that you need college and uni certs for most jobs

[gray jetty]

tell me about it, huh

more sarcasm

[burnt night]

You can, but it's rare. A few people here, myself included, have said their companies are trying to hire people with skills rather than certs

[visual breach]

I'm one of those people, but we're not currently hiring sadly

[burnt night]

My company are but we're south coast UK and no remote work for probation period

[visual breach]

we're a remote company, but that unfortunately means it's really easy for us to fill positions

[short elk]

unfortunately?

[spark sun]

Hard to bring in specific talent when you can draw from the entire country

[short elk]

would that not make it easier?

more of a selection?

[spark sun]

The talent pool you can draw from is much larger - unless your specific candidate is already top tier, it's hard to justify "we can bring in this guy I know, or we can bring in a nationally known expert for the same role"

[short elk]

ohhhh

i thought you meant specific as in like "we need an analyst that does x,y,z with a,b,c"

[frail rapids]

I just had my first beers ever 😎

time to be an alcoholist

[summer verge]

Enjoy it, there is a whole world out there, wine, spirits, etc 🙂

[odd acorn]

It’s vodka time

[hoary vale]

moonshine, because it ain't alcohol unless your car treats it like E85 fuel (not even kidding)

god bless america

[twin ridge]

In moderation of course

:p

Doesn't make it less true though ;)

[summer verge]

Of course.

[odd acorn]

Moderation is out of the window, it’s party time

[summer verge]

I was a sommelier so I’m all about appreciation of a good and fine beverage and not to get piss 🙂

[twin ridge]

Well I have a Saint-Joseph here :)

Bit young, but it has the punch of the syrah that goes well. Really wish I had deer though

[rapid summit]

I have Ca' Del Bosco Franciacorta.

[twin ridge]

:o

Arhu send caribou!

[rapid summit]

! There you go.

I'm pretty sure I could find some reindeer jerky, if you like that 😄 That'd even survive mailing.

[twin ridge]

Hehe

[rapid summit]

Looks like that's available in a local supermarket, even this far south.

[frail rapids]

3 shots and 6 hours later: headache is starting to kick in

this is the moment where my prefrontal cortex is going to commit not alive

[gray jetty]

Just saw that 0day has no certs at all, is that for real or did he not just add any here?

[quaint basin]

He told me to remove his cert roles a while back. He just doesn't like people knowing what he has 🤷‍♂️

[gray jetty]

Oic

[winged rain]

Has anyone watched mr.robot season 5?

[radiant jacinth]

According to the officials, season 4 was the last season of Mr. Robot and there will be no more season 5

[frail rapids]

Does anyone know if there will be more AD rooms released because of the OSCP changes?

^to the red team path as well

[radiant jacinth]

how can i verify myself

[gray jetty]

!docs verify

[deft fossil]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[gray jetty]

dm @deft fossil with !verify <discord token>

token is on you thm profile

[frail rapids]

can someone make more AD rooms please? https://i.imgur.com/kVdEGlN.png

[quaint basin]

Mayyyyyyyyybeeeee

[burnt night]

-ban @rotund rose -ddays 1 Piracy shit

[hoary nymph]

🔨 Banned outis720#3376 indefinitely

[frail rapids]

typo

[kindred lily]

Guys i need help yesterday i lost my streak it was around 50 the reason why is because i was doing CEHV11 exam and i was revising all day so I completely forgot about the streak. My exam was 10 pm yesterday

I passed it with high score, easy one

[frail rapids]

email support

[kindred lily]

Could u type it here pls the email

[quaint basin]

Rude smh

[kindred lily]

Why rude ?

[quaint basin]

LMGTFY is.. sarcastic at best and insulting at worst

!email

[deft fossil]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[quaint basin]

Enjoy

[kindred lily]

Sorry for that but really i am not concentrating because i am in an emergency situation in my family

Thank u so much

[quaint basin]

Oh, not you, don't worry!
You didn't do anything

I was replying to Lau

[mortal venture]

does anyone here use suricata? im having an issue adding my own ruleset and despite following their documentation i seem to be doing something wrong

[tawdry dove]

Have you seen the videos from Lawrence Systems?

[mortal venture]

I have not but will do now thank you 🙂

[hoary nymph]

Gave +1 Rep to @tawdry dove

[short elk]

another spanish question from me xx

how big of a deal is ser vs estar? if i accidently use son instead of estan, can the sentence still be understood?

eg. duolingo says los boligrafos estan a la izquierda but i would probably without thinking say los boligrafos son a la izquierda

[frail rapids]

Does anyone know what can cause distortions like this in RTL SDR? https://i.imgur.com/6LLmiTG.png

zoomed out: https://i.imgur.com/HvCcofJ.png

this is a regular FM radio channel

[tawdry dove]

Interesting. Are you currently tuned to that or?

[frail rapids]

Yeah

It's got even worse issues now https://i.imgur.com/XALDyv8.png

[radiant jacinth]

https://tenor.com/view/aliens-giorgio-conspiracion-memealiens-aliens-history-historychannel-gif-9621737

[frail rapids]

the weather is normal with just a bit of wind, and the antenna is working as it should on other frequencies

[soft pier]

would like to answer microwaves in a microwave oven but dunno if that frequency line up with normal FM radio.... at least it lines up with standard wifi 2.4 Ghz

[frail rapids]

https://i.imgur.com/T6Pie4E.png

this is so incredibly vague

[tawdry dove]

some docs said the red is what you're currently tuned to but I'm not sure if that's the same red line

I didn't have any pictures

[frail rapids]

oh

yeah no the color scheme is basically blue to red, based on the strength of the signal

so background noise and weak signals are blue while high quality commercial radio stations are red and have strong signals

[tawdry dove]

Is the radio station overpowered?

[frail rapids]

Doubt it

that signal with the issues is the strongest signal, though

https://i.imgur.com/Uglcg3O.png

[visual breach]

this worked spectacularly! Thank you again

[hoary nymph]

Gave +1 Rep to @naive crag

[regal jetty]

Ser vs. estar is a big deal in that they have fundamentally different meanings and roles (contrary to the common glossing-over, they're not simply options on either side of a boundary between a "permanent" and a "temporary" attribute)
But at the same time, not a big deal in that, because they are fundamentally different, native speakers don't confuse them and don't have to think about which one to use.

Using the wrong one would be similar to when a Spanish speaker makes the wrong choice between "do" and "make" in a situation where they would say hacer. It will generally be possible to understand your intention from the context, but it will be initially confusing

[signal hull]

Every language tends to have intricacies that are easily lost on non-native speakers, but are fully natural and make sense to those that grew up with the language

[summer verge]

2 questions if I may. 1) Are you really learning. IDK why but I’ve never trusted duolingo. 2) Porque Espa#ol 🙂 why Spanish.?

[winged rain]

I had a substitue teacher in French who had learned the language through Duolingo

[ripe haven]

Can anyone recommend a sous vide set for like 100$ (preferably from amazon, no need for a vacuum machine thingy)

[twin ridge]

Isn't that just the carrier wave ?

[frail rapids]

No it's the actual radio frequency of the music

[short elk]

oh wow thank you for the reply !! i guess it really is worth me learning how to properly use them before i get in too deep aha

[hoary nymph]

Gave +1 Rep to @regal jetty

[short elk]

yes i’ve learnt a lot from it, and because i like the language and would like to spend time in mexico

[torn tulip]

sup

[short elk]

hola xx

[torn tulip]

Check dm

[summer verge]

Great! I’m always curious. Spanish wouldn’t be my first choice if I didn’t speak the language that why I asked. I had no choice Spanish it’s my mother tongue but not a language that I particularly like. Don’t get me wrong I don’t hate it, but it’s not a language that I’d put effort in learning if I hadn’t already known it. Asi que si tenes alguna pregunta o te puedo ayudar en algo escribime

[frail rapids]

What's a good tool to analyse authentication codes from modulated RF waves?

I'm currently messing with Audacity but it doesn't allow for any guide lines etc

[regal jetty]

This page goes over some tools https://www.elttam.com/blog/intro-sdr-and-rf-analysis/#content

[pure citrus]

its sus in here

lets hack evil corp

[twin ridge]

Yeah Nah, lets not start anything black hat here

[winged rain]

There is no evil corp

That's just what Elliot imagined it stood for

[soft pier]

lets all go hack the gibson

in the game that is named hacknet

[radiant jacinth]

https://tenor.com/view/hack-the-planet-gif-15624885

[echo dust]

Have you tried BitBurner yet?

[soft pier]

nopes

and already spent the christmas money on other stuffs

[radiant jacinth]

Isn't it free?

[soft pier]

¯_(ツ)_/¯

[hoary vale]

I downloaded that a few days ago but I have yet to launch it

[soft pier]

another problem is that shadow kinda lacks the time management skills to set up time to play games nowadays

[dusty sleet]

hamzawinix suffers from similar problems

[frail rapids]

lau suffers from similar problems

[waxen sage]

Sometimes planning time for play is helpful. It schedules time for rest and keeps play from distracting work.

[zealous pasture]

FYI, this phishing attempt was sent to hundreds of users. The "Discord Staff" user and I were in the same discord "The Isle Official Discord".

[quaint basin]

Fortunately they don't appear to be in here :)

[dusty sleet]

They are getting smarter by not entering the dragon's den 😎

[burnt night]

Click the "report spam" button, easy as.

[frail rapids]

Got this in the logs today

https://images-ext-1.discordapp.net/external/Z19ac51XPx6821MZsUGeJly6PpGgnP0LYUm76aXbEv8/https/i.imgur.com/Z5e8IL3.png

:3

[soft pier]

doubt that website is a good idea to visit

[frail rapids]

I visited it