👥・help-me

[twilit elm]

Hey i want to learn hacking of fb insta & google.

Where should i start?

What is sigh?

I am beginner.

I dont know even coding.

I want to hack one guy he scammed my agency and took all the acess.

[distant ether]

Then make a report to your law enforcement if a crime happened against your "agency"? Unless you're agency is doing illegal things ( which it shouldn't ).

Also look at the #📜・rules please and thanks

[livid basin]

Hi everyone I’m interested in learning Dev OP any suggestions on what basic I should start learning first ?

[wanton marsh]

Are you looking to learn it for industry job style thing

Or just learning

[livid basin]

Both I figured if I could learn that maybe I could get a job lol but also think that’s a good skill to know what you think ?

[chilly merlin]

Cisco skill for all

Check that out once

[dapper mortar]

test

im trying to send send some code but owlbot keeps telling me not to send the same message again but ive never sent it before

does anyone know how to get around that?

[chilly merlin]

What code

[dapper mortar]

im trying to send the copy and past of my command line

[chilly merlin]

Why so

[dapper mortar]

im trying to set up a proxy chain and im getting an error message after running proxychains firefox www.bing.com

[wanton marsh]

I would recommend looking into azure dev ops then tbh

[distant ether]

Try sending it in a code block using the back ticks and in separate messages

[chilly merlin]

Teach me the way master

[dapper mortar]

[proxychains] config file found: /etc/proxychains.conf [proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4 [proxychains] DLL init: proxychains-ng 4.17 [proxychains] DLL init: proxychains-ng 4.17 Running Firefox as root in a regular user's session is not supported. ($XAUTHORITY is /home/kali/.Xauthority which is owned by kali.)

there we go

[wanton marsh]

Try changing to a non root user

[chilly merlin]

This error occurs because you're trying to run Firefox as the root user, which is not recommended and can lead to security risks and other issues. Specifically, the error message is telling you that the $XAUTHORITY file (which is used to manage X sessions) is owned by a regular user (kali), and running a graphical application like Firefox as root in a session owned by a regular user can cause problem

[dapper mortar]

alright bet let me try that rq

[distant ether]

https://tenor.com/view/chatgpt-jarvis-iron-man-unsure-gif-758258540099951503

Joking lol

[dapper mortar]

perfect that you so much

[livid basin]

Sweet 🙌🏾 I like this alrey good looking

[chilly merlin]

Ayoo that is chat gpt

Yea it is

Why all the hassle

Yk

[distant ether]

Btw are you trying to use proxychains4 or are you typing proxychains?

[chilly merlin]

Smart work

[livid basin]

Copy

[dapper mortar]

Typing proxychians and it worked thanks yall

[wanton marsh]

Once you get the basics down also lean some Cisco as that should cover you for all industry standards

[chilly merlin]

Already gave him cisco skills for all that should be enough

[distant ether]

Oh ok. Was just asking since some machines would be the updated command as proxychains4 and others would be still be proxychains

[wanton marsh]

Perfect

[dapper mortar]

Np! And is there a difference between the two?

Would you mind explaining it?

[dapper mortar]

Thank you so much! I appreciate the explanation

[exotic willow]

hey anybody for help ?,

[rough spindle]

@exotic willow help with what ?

[exotic willow]

i am writing some commands and fixing seclists on my kali vm $

[exotic willow]

client.Timeout exceeded while awaiting headers

what can i do when this error appear

@rough spindle

[rough spindle]

can you be more specific with your problem statement ?

@exotic willow if you're requesting a server for a specific data through API call you can first identify what's the API generic response time with a simple curl or browser and based on that you can increase the timeout, but again it will depend where you're getting this error from

[exotic willow]

no i did the gobuster command

m lokin for hidden pages

can we go in private so i can explain more ?

@rough spindle

[unborn zealot]

Hey there guys i wish to be a pentester but like when i try ctf and stuff they seem kinda hard am i doing something wrong or its just part of the process ?

[chilly merlin]

Your doing good jus need some practice

Get basics done first

[unborn zealot]

Alright thanks

[true jungle]

can we use discord webhook in xss payloads ?

[uncut wedge]

you aren't doing anything wrong. you're just overlooking vulnerable spots and everyone struggles with that, even me 🙂 it's just that you're struggling more because you lack experience of doing a pentest like @chilly merlin said. the more websites you test, the better you'll understand how websites work both at the front and back and what technologies are used

[wheat lotus]

study theory first, learn how things work

[uncut wedge]

what...

[unborn zealot]

Thanks for your valuable comment ill do check it out

[unborn zealot]

Will do thanks a lot

Starting with htb and and thm is fine right ?

[wheat lotus]

yup

[uncut wedge]

good luckk!

[uncut wedge]

yess

[unborn zealot]

Well i tried root-me but its not so beginner friendly

[wheat lotus]

i started by buying the subscription for thm

[unborn zealot]

Had me demotivated lol

[uncut wedge]

thm is better and beginner-friendly by what i heard

[wheat lotus]

yes

[unborn zealot]

I would love to buy thm subscription but rn kinda cant afford it

Will do the free ones first

[uncut wedge]

it has free rooms too i think

yess

[unborn zealot]

Until i am worthy enough for the paid one

[wheat lotus]

you can use a education email and get it for like 11$ i think

[unborn zealot]

Ah did not know that thanks for the info

[wheat lotus]

yes there are, but i would recommend following a path. and most of the rooms in those paths are subscribers only

[unborn zealot]

Also do you guys mind if i dm you someday regarding my cybersec questions ?

[uncut wedge]

ahh okii. then a sub will do wondersss

[wheat lotus]

sure

[unborn zealot]

Yeah i did burpsuite few months ago it was free now its paid

[uncut wedge]

i don't check dms too often. you can drop your queries in here too and more people can help you out 💜

[unborn zealot]

Thanks a lot i really appreciate it

[unborn zealot]

Alright thanks a lot for your help

[uncut wedge]

npp and good luck hacker!! 💜

[wheat lotus]

yup, the thing is that htb pricing is not fair and somewhat not logical, so i started with thm, its fairly cheap and begginer friendly.

[unborn zealot]

Yes thank you and have a great day/night

[uncut wedge]

understood. thm is the most viable option then

[uncut wedge]

you too!!

[wheat lotus]

you talk like an ai

literally

[uncut wedge]

me??

loll

[wheat lotus]

yea lol

[uncut wedge]

whyy 😦

[wheat lotus]

idk you just do

[uncut wedge]

i'm the server kitten and my claws are sharp

[unborn zealot]

I think i will watch mr robot now see ya guys

[uncut wedge]

mr robot fanatic

[wheat lotus]

how many a's and n's are there in "banana" ? ai test

[unborn zealot]

I have been procrastinating it for so long i havent finished the second season its been 3 months since i started watching it

[uncut wedge]

hmmmm

4 a's 1 n

[wheat lotus]

uhuh

[uncut wedge]

i left it in the middle. got too psychological lol

[uncut wedge]

seeee i'm correct

hehe

[wheat lotus]

yea you are right

[unborn zealot]

Does that mean i am an , ai ? 😳

[uncut wedge]

if you say it's wrong, then yes

[unborn zealot]

Well i think we may have a problem then

[uncut wedge]

😂

[wheat lotus]

wow, ai with personal problems. damn

[unborn zealot]

Not the best ai out there

[uncut wedge]

ai now has cognition capabilitiesss

[unborn zealot]

Does that mean the end is near 😳

[wheat lotus]

wow, an ai which asks the users to get info. damn

i guess the roles are reversed

[unborn zealot]

Doesnt trust google 🙏🏻

[uncut wedge]

he needs to rethink about the model used to train him hehe

[wheat lotus]

fr

this is what happens when you push the code but forget git add .

[unborn zealot]

Hello World

O that looks fancy

[upbeat storm]

Does anyone know about lateral movement in windows using Trusted Domain

[true jungle]

i was learning xss i was asking someone where i receive cookies for exemple he told me to use discord webhook

[quasi berry]

No

Do not do that

[torpid jackal]

😭

[quasi berry]

Use portswigger academy, and you can use a python http server :)

[dense flower]

for someone thats a total beginner with no knowledge of any coding whatsoever how does one get started? im really really interested in cybersecurity and i feel like i dont know where to begin. is there a roadmap? or a specific course i have to take? alot of people tell me to start off with Python, but once i learn that where do i go from there? Please if anyone can help me out that would be extremeley helpful.

[true jungle]

can you explain why ?

[true jungle]

okk thank you

[half tusk]

hey quick question , so lets say im trying to find an xss , the thing is that i dont understand how can i find a vulnerable subdomain to attack ? , like should i go over every subdomain or use some sort of a tool cause im kinda confused

[distant ether]

Go to Portswigger website and you can learn XSS there, how it works & why & how to look for it

They have Labs for you to practice in

[loud yew]

Hey I need help trying to get into a old snap how would I do that?

[runic oar]

Is this server partenered with portswigger?

[viscid needle]

Heyy i want to make a bot

Can someone help me

Automation bot

????

[dapper mortar]

what type of bot

like a discord bot or like ai or smtn

[formal terrace]

so i ran rkhunter and i got this, are these false positives?
https://media.discordapp.net/attachments/985202086037843968/1272705830655098921/image.png?ex=66bbf32b&is=66baa1ab&hm=d63248854b26831438a0ad20839bf69cdcb40d1dcb548a77f995ed9aa5fd36b6&=&format=webp&quality=lossless&width=441&height=671

it looks like it

[mossy sedge]

Hello team,
I need help I have been hacked almost 4 months ,this hacker demanded random and didn't bother, he has access to my emails and contacts ,I have factory reset my laptop and phone ,and blocked all inbound rule from my firewall and install malwarebytes and crowdsec, yesterday I checked on my eventviewer on my windows laptop and with 4625 ,I notice two ip address still monitoring my PC as well as my gone.
How do I resolve this and try to find the hacker.
I am open to help and suggestions.
I will showcase the message from the hacker and the iP address I captured

[chilly merlin]

I can't really help you and identifying the hackers because that would be considered vigilantism and just leave that to the police make sure you run a full scan on Malwarebytes and not just a quick scan and if that doesn't resolve it try to use a rootkit scanner such as Kaspersky's TDSSKiller and for the passwords I recommend you to not use the compromised device to change your passwords use an external device that the attackers don't have access to and what I recommend for your router is to change the administrator password and update the firmware

[vague sedge]

How do you guys know if you have been hacked already? Like what do hackers typically do? Just steal all your money? Delete your apps? Are there any warning signs to pay attention to?

[small wraith]

i mean it rlly depends on intent and y they hacking u in the first place, a lot of the time theyll steal personal info, take money, install malware, spy on u (webcam, keystrokes, mic), or encrypt ur files and ask for money (ransomware)

to tell if ur hacked, check for anything unusual, like frequent pop up ads or your machine slowing down, also apps or software that ur not familiar with, anti virus warnings, unusual logins, and getting locked out of ur accounts

If u think u r hacked monitor all ur accounts especially banking and the important ones, change passwords enable 2 factor auth, and constantly check for malware with an antivirus or smth

[glacial trench]

How does encryption work on files? Does the encryption work on what's inside of the file or the file itself?

[small wraith]

i mean there r different types of encryption but most of the time it affects the data inside a file basically being scrambled by an encryption algorithm

[glacial trench]

Got it. Thank you 😊

[small wraith]

any time

[glacial trench]

Can you name some which scramble the data inside of it and some that encrypt the entire file?

I want to research on them

[small wraith]

encryption methods?

[high lion]

i need some help on capture the flag, so i am going to orgganize a event on capture the flag in my college so i want to know how a ctf should be and what are rules and more if anyone can help me please dm me it will be appreciated

the participants will be very beginner in coding and the college instructed me to keep it very basic and dont want me to use very high tech stuffs

[timid cargo]

im preparing for a bootcamp and i need some good material for binary exploitations and network security, would be good if there is also some python and bash materials, thanks in advance :D

[obsidian umbra]

Yo help, what’s a good coding language to start malware scripting Ik like c, c++, c# are good and also powershell to good to

I’m thinking c#

And then powershell for the higher admin

[maiden violet]

Python or c++

[glacial trench]

Yeah

[shell sinew]

not C?

[glacial trench]

So I was wondering how do antiviruses actually stop malware? There are a lot of security software available but still I hear about companies getting hacked every other day

[steady trail]

so i want to start coding but i do not yet have a clue on where to start learning

[rigid flax]

Antiviruses work in 3 different way. 1) If the malware or virus certificated by a cyber researcher the antivirus program will be updated and it will be detected by the update. 2) Antiviruses have also intuitional approach to target. That means antiviruses also checking what this program will do to your computer. If it thinks it is dangerous or causing data leaks it will stop the program instantly. 3) Authorization. This part is complicated; some malwares want to work on kernel level or different level of OS. It depends on what level of protection you allowed to your computer malwares might want to access to unauthorized level.

Companies getting hacked is completely different story because most of the companies didn't want to hire cyber security specialist and most of them are using weak passwords or they didn't give any training to their employees about threats. All hack cases should be considered and investigated separately. Therefore If you specify the hack case I will try to explain you what went wrong in the company

[spiral badge]

Yo guys I need urgently to understand something I woke and found my TikTok got hacked and there no going back basically unfortunately

However my TikTok account uses the same pass and email as my email account, and my email showed 5 notifications saying verify if it’s you even tho it wasn’t me.

Now should I be worried about the hacker having access to my email account ? I just enabled 2fa rn.

I’m safe and do I need change he passwords for accounts I use since I use the same pass for almost eveyrhing?

Do u y’all think he’ll able to find out my other emails and passwords and hack them? And should I change every account with the same password ?

[glacial trench]

Oh ok! Now I got it. So if a malware writer writes the malware himself it will get detected. Also Antiviruses check behaviour of the malware and third is they abuse permissions by computer

I heard about the breach in BKN and I was thinking how and what can be the reason these breaches are successful

[rigid flax]

Of course the hacker will able to get all your data. You have said 5 notifications. That means the hacer has already tried to get it. First thing first you need to remove the malware. When you think it is safe change all your passwords

[spiral badge]

Wait so even after I enabled 2fa the hacker still has access to my account right now? I check my activity and there doesn’t see m to be anything suspicious

Only thing he affected me with was deleting my TIKTOK account.

So should I be worried about my current email account and the other ones?

[rigid flax]

Yes it is true. Sorry English is not my mother tongue. Do you know what is the CVE number of that breach? I can check it when I'm free

[glacial trench]

It's ok and no I don't know

Sorry

[small wraith]

there are a bunch of different encryption methods for that, but I’d look into AES, blowfish.

wait what operating system r u on?

if ur not on Linux they have some other encryption things that are native to Mac and windows

[glacial trench]

I'm on Mac but just curious

[small wraith]

ok then for Mac look into FileVault as well but it’s not meant for single file or folder encryption it encrypts startup disks

[split cloak]

Hi friends i am new to hacking and programming can you help me where to start

I'm currently studying Python but it's hard to find information about all of this, it's all confusing.

[shell sinew]

check out tryhackme[.]com and go to learn tab

start with pre security and follow the roadmap

❤️

[rigid flax]

Yes you should because we don't know where this attack came from

[split cloak]

@shell sinew Thank you so much for information

[glacial trench]

Yes I know about it. So do these software encrypt the entire file or the contents of the file?

[chilly merlin]

Use vera crypt for real encryption

[glacial trench]

Vera crypt?

[maiden violet]

uwu

[shell sinew]

https://tenor.com/view/scream-loud-scream-girl-kid-hispanic-girl-gif-3761151244536557927

[maiden violet]

im sorry?

[shell sinew]

np np (got me triggered)

[chilly merlin]

https://tenor.com/view/scream-run-away-gif-23892939

[shell sinew]

https://tenor.com/view/wait-a-minute-who-are-you-kazoo-kid-funny-gif-16933963

[small wraith]

file vault? filevault encrypts disks basically locking a user out of their computer

pretty sure aes can do both and blowfish is meant for files

[chilly merlin]

https://tenor.com/view/viyeongg-kid-from-tiktok-giving-side-eye-gif-27574662

[glacial trench]

Got it. Thanks 👍🏻

[small wraith]

fs any time

[chilly merlin]

CVE stands for Common Vulnerabilities and Exposures, and it's a database of publicly disclosed computer security flaws. Each flaw is assigned a CVE ID number. The MITRE Corporation oversees CVE, and CVE Numbering Authorities (CNAs) support it. CNAs include open-source initiatives and government bodies like the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency

When a new vulnerability is discovered, the responsible CNA requests a CVE ID from MITRE. Security advisories issued by vendors and researchers almost always mention at least one CVE ID

Hackers can also use CVEs to identify vulnerabilities that can be exploited in target systems. They can then develop or adapt exploit tools to take advantage of these weaknesses

@rigid flax

[chilly merlin]

Yea 2fa can be bypassed

Better to change password

[chilly merlin]

Every malware has certain type of behavior known as signature the av is trained by these signatures and they catch these types eventually as far i know

[glacial trench]

Yes I'm aware of that but like how does malware still manages to infect systems?

[chilly merlin]

They write in a way like entirely new one

So av couldn't detect

[glacial trench]

I see. So malware writers know how antiviruses detect malware and then they write their own version to bypass it?

[chilly merlin]

Yea so they do research how av work so that they can write effectively

[glacial trench]

Great. Thanks 👍🏻

[chilly merlin]

Are there any free https proxies? If so where could i get them? I am trying to practice python by web scraping but keep getting blocked.

[chilly merlin]

Ask Google but they aren't that effective

Okay thank you

[chilly merlin]

Web scraping

Hmm

Using request?

Modules

Beautiful soup python package?

it makes a request to google to grab links... thats all

[chilly merlin]

Hmm good one

[chilly merlin]

Most web scraping projects follow a specific pattern to extract data from the same website. This approach can result in anti-bot detection. For example, clicking the same elements, using the same scroll height, and following a similar navigation pattern for every request put you at risk of getting blocked.

https://www.geeksforgeeks.org/web-scraping-without-getting-blocked/

@chilly merlin

I try to help as much as possible

I appreciate your help. Thank you :D

[rigid flax]

I know. That's the reason why I requested the CVE number. I've been working as a cyber security specialist for 3 years

[chilly merlin]

I apologise

So what do want specifically

[rigid flax]

Nothing. I just answered the question

[chilly merlin]

My bad interpretation then

I overlooked

[rigid flax]

No worries. It is ok 🙂

[chilly merlin]

Thank u

[rigid flax]

You're welcome

[glacial trench]

Which country are you working in?

[rigid flax]

Türkiye and UK

[glacial trench]

Oh nice

[chilly merlin]

@glacial trench need to whisper some thing in dms

If I'm allowed

[glacial trench]

Sure

[quasi berry]

no

#📜・rules

[chilly merlin]

bro

[shadow fractal]

Nothing illegal he said

Welp

Unfortunately we do not do these type of things

[obsidian umbra]

thx

[uncut wedge]

nim, go, rust, cpp, c# all are perfecttt

[uncut wedge]

perfect choicee. has a superrrrb support for mem management

[uncut wedge]

pep chan, python is good for backdoors but it's the last language you want to choose for maldev 😾

[obsidian umbra]

Much appreciated Mimi

[uncut wedge]

it's toooo big of a process than just antiviruses. you have several other defences in place including edrs (if the company can afford them) and firewalls. usually the attacks you're referring to are pre-planned and are executed by more than one channel. example, you plant a whistleblower in a company and he provides you information on the patches he's working on/the systems he is analyzing. you will plan your exploitation based on the information you know, and try making it as grey/whitebox as possible because we hate exploitation without information

[chilly merlin]

So. She won't know things u say

She a beginner

I told her in a way she understands

[uncut wedge]

ahh okii. i tried explaining in layman terms tho 😦

[chilly merlin]

Yeah i referred u to her. U might see her around

[uncut wedge]

okii nww! i'll be happy to assist her 💜

[chilly merlin]

She india tooo ask her samosa

[keen finch]

Hello I'm new and still a beginner in learning cyber security

[chilly merlin]

#1181325692823150642

Now

[keen finch]

Much appreciated

[uncut wedge]

omgg samosaaa

i want

[uncut wedge]

hiiii

[celest patio]

Welcome, i wish you the best on your journey 🫡

[viscid needle]

Can someone explain how to access dark web

[echo trench]

Can someone point me in a place where to start? I’m a complete noob & don’t wanna start in the middle when I should be doing something on a beginners level

[dapper mortar]

Go to https://www.torproject.org/download/ and download the browser for your OS

[shut hornet]

Can someone point me in a place where to start? I’m a complete noob & don’t wanna start in the middle when I should be doing something on a beginners level

[dapper mortar]

@echo trench @shut hornet
What do yall want to do with comp sci/cyber?

What's your end goal

[shut hornet]

Never really thought of this, I just know I want to do it

[chilly merlin]

if you want to learn i recommend going to https://tryhackme.com/ and do the pre-security and introduction to cyber security
and use this to figure out what role in cybersecurity do you want

https://tryhackme.com/r/careers/quiz

[shut hornet]

Thanks

[weak bough]

Do we have to pay ?

[dapper mortar]

No it's free

[chilly merlin]

some of the courses on THM are free and some are not I recommend just getting premium it's just 14 USD

[spiral badge]

Alr i did earlier, but tbh I don’t really think he has access to my email since activity log showed no suspicious changes.

I also think it may have been just my TT hacked and that’s it but worry about my email cuz you can’t login on TT without a pass and if he knows my pass then he defo could’ve been on my email but I still see no sign of anything on my email.

Anyways I changed and secured everything

[mossy quail]

Hey.Can someone help me?!I have problems with the driver,alfa wifi adaptor(

RTL8187 on kali🫣

[glacial trench]

Okok tysm for answering 😊

[sweet bluff]

BOIS someone help me out im tryna get cracked vegas pro idk if this exe is a virus can someone help me check pls

[chilly merlin]

No piracy here brother

[uncut wedge]

whyy

[wind knoll]

guys help me unlock iphone 7

[worldly venture]

enter your password

[wind knoll]

you trying to be funny?

[worldly venture]

That's how you unlock your iphone 7

I'm right

[wind knoll]

its blocked bro i need help opening it

[worldly venture]

Blocked?

Like, parental controls?

[shadow fractal]

Stop with the insults... That's uncalled for

[worldly venture]

???

You just need to be more specific in your question

[chilly merlin]

lool

[chilly merlin]

its not fun, its not interesting either

its slow

there isnt alot of what ur thinking on there

[hasty carbon]

Hey what’s happening everyone

[worldly venture]

Doxing back is never the answer

[shadow fractal]

We do not do that here... Refer to #📜・rules

[maiden violet]

Damn

[uncut wedge]

....

why so rudee

[dawn mirage]

Heavens

[chilly merlin]

Hard reset

[maiden violet]

Wait what?

[livid cedar]

That’s not the intention… Just want to figure who’s behind it…

[livid cedar]

As I am being framed 💀

[quasi berry]

#📜・rules

[halcyon bough]

do any of you have any resources related to creating an ids for a fog computing environment.

[chilly merlin]

Guys, its a dumb question, next Tuesday is my programming exam, which will test html, javascript and css?
Any recs on like crashcourses/videos on yt that I can watch :)))

[chilly merlin]

Crash course

[chilly merlin]

Errr ok alright thank you

Hmm

I didn't say anything though

[dawn mirage]

Heavenso. Yo question.
How am I able to encrypt or further protect me email from hackers and being able to be accessed? Talk to me like I don’t know coding nor scripting yet. I need help.

[shell sinew]

@quasi berry help our brother, oh great sage of opsec

[quasi berry]

Soon

[uncut wedge]

lloyd567 rudee 😦

pep channnn hii

[maiden violet]

hi mimi han

[uncut wedge]

hryy

[weary hollow]

Yall I'm new here can someone please educate me?

#👥・help-me need some basics

[chilly merlin]

Top 3 help me questions answered

• "how can I get started in cybersecurity and I don't know what role should I do in cybersecurity"

• if you want to learn i recommend going to https://tryhackme.com/ and do the pre-security and introduction to cyber security and use this to figure out what role in cybersecurity do you want https://tryhackme.com/r/careers/quiz some of the courses on THM are free and some are not I recommend just getting premium it's just 14 USD

• "I got hacked can you hack the hackers that hacked me"

• we do not assist with vigilantism and I recommend you to check out the rules we can help you get the hackers off your compromise machine and that's it

• "Can you guys recover my Instagram Facebook and Etc social media account"

• all we can really say to you is there a recovery method on that account and if there's not we're just going to provide you the social media's support link

[desert viper]

Hello, i hope u all was having a good nigth, im new trying to understand this , and also im trying few machines from a spanish guy that made is own web about this, but i get stuck too much all the time and i enjoy search for new info but some times i end up mad and whit half of the work done, i want to ask if meaby someone could help me a bit if i get any cuestion about , how treat TTI for example and more that i want to understand . Im soo sorry if i dont writte good , it is couse im spanish and also im trying to learn the most i cant and lenguage. Thanks for ur time and sorry if i bother any of u. Good night too all of u.

[fickle mauve]

It's great to see your enthusiasm for learning. I have a list of plans called a playbook or some may call a check list.

1. Break Down Problems: When you get stuck try to break the problem into smaller parts focus on understanding one piece at a time. It's okay to take a long time to figure things out.

2. Stay Organized: Keep notes on what you learn and the steps you take. So when you're stuck you can refer back to the notes you took to see what you've already tried and do more research once you've done everything you possible could.

3. Use the Community: Don’t hesitate to ask questions. I bet many people here have been in your shoes and are happy to help (I'm new to this server I don't exactly know but looks promising)

4. Celebrate Small Wins!!!!! 😄 : Recognize your progress even if it feels small each step forward is a success and over time those small wins will add up and keep you motivated. KEEP THAT MORALE HIGH SHOOTING INTO THE SKY the confidence enthusiasm and discipline will guide you.

Oh also !!! don’t worry too much about your English the most important thing is that you’re trying, and people will appreciate your effort!!!!! you got this 😄

[desert viper]

Thank u too much for ur help , im gonna try as u say and keep foward step by step whitout stress and taking notes for the future if i get stuck again on something. Thanks u too much for ur time and ur honesty, i honestly appreciate that.

[fickle mauve]

Of course!!! I was in your position seven years ago! I understand how challenging this field can be but you’ve got this. Honestly if I hadn’t gotten into cybersecurity I’m not sure where I’d be today (:

[desert viper]

Did u have OSCP?

It is a silly question honestly ,if i dont want to answer it im gonna understand

[fickle mauve]

No I have eJPT, A+, ITF+, Net +, Security +, Linux +, CASP +, CySA+, PenTest +, AWS Certified Cloud Practitioner, Google Cybersecurity Certificate. I've never really looked into penetration testing as a potential career I've only wanted to be a security analyst I've never tried hack the box, or Try hack Me or any CTF platforms.

[desert viper]

Wow u have a lot off cets ! it took seven years to do all off this? Anyway ,u know how u use ur time

[wintry crane]

i got 26 points in hacker101ctf
still dont got any invitations?

[charred fractal]

hey guys

im new to cyber sec and i want to start as a begginer and level up to advance but the problem is idk where and how to start

i just joined a graduate program in cybersec and need guidance and help

[fickle mauve]

Maybe Five Years or Four, I went to WGU so that helped a lot.

[fickle mauve]

I'd start with foundation skills like Basic IT, Networking, Security Fundamentals. google offers great courses to get you that stepping stone, real world experiences is going to help you learn more and advance your skills get a Internship.

[charred fractal]

can you tell me which course is it and is it free or paid?

[fickle mauve]

Visit Coursera and search for Google Cybersecurity or Google IT Support. You can start with a 7-day free trial, and the subscription costs around $39 per month. This is a cost effective way to explore a field you might be interested in especially compared to spending $1,000 on college courses that may not align with your interests.

[charred fractal]

okay thanks a lot

is the internship requirements very high in the field? or are they good for freshers

[fickle mauve]

I would say go into helpdesk first (this use to be the standard when I was growing up not anymore) but I feel help desk will help you get transferable skills which cannot be taught only through life experience's and broad your technical skills but technical skills can be taught

[charred fractal]

when u say help desk what does that means?

college helpdesk?

[fickle mauve]

Just I.T helpdesk

So I.T intern

I.T assistant

Information systems Intern etc

[charred fractal]

oh now i get it

thanks a lot will look into it

[fickle mauve]

Of course :p

[turbid chasm]

How can I log in to GitHub

[uncut wedge]

google 🙂

[wispy barn]

I like ur pfp

[fickle verge]

Guy;s

lest perform some exciting works

hellow

[chilly merlin]

https://tenor.com/view/batman-checking-on-you-watching-dark-knight-gif-13846231

[minor blade]

We’ve introduced a new role called <@&1273635619205025823> . If you're interested in becoming a defender, you’ll need to identify and report individuals who are causing problems or being disruptive in the server.

[chilly merlin]

https://tenor.com/view/pick-me-over-here-pointing-choose-me-blake-shelton-gif-15188350

[chilly merlin]

So how report

Exactly

[minor blade]

@ under the trouble maker.

[chilly merlin]

Sorry can u gimme a demo

U can use me

As a victim

[timid cargo]

its probably meant to ping under the user

[timid cargo]

@minor blade

like this probably

[chilly merlin]

Hmm that would cause more drama

Like i should ping srhoe

[timid cargo]

maybe you ping some other high role

not specifically srhoe

[chilly merlin]

Hmm

But still

[timid cargo]

defenders are active for the most part of the time tbh

[chilly merlin]

That could cause soome drama

Yea most of time

[shadow fractal]

Ping any of the mods/defenders or me

[maiden violet]

I have been doing this for a while tho

[maiden violet]

Open a ticket for that

With screenshots of the conversations

[minor blade]

You want to be trial defender?

[maiden violet]

Sure if it means protecting owlsec

[minor blade]

Okay

[swift aspen]

Hello, the only Wi-Fi adapter available in my region right now is the TP-LINK Archer T2U Plus. I'm wondering if it will work with my Kali Linux VM. I understand I'll need to install drivers, but I've seen mixed results online regarding its compatibility.

[brisk lantern]

yo so i got a really old iphone i believe its 4s and its in the itunes recovery mode any tips on how i could get it unlocked

or in other words make it usable

[maiden violet]

Did you force restart it?

[brisk lantern]

i didnt do anything i found it like this in my storage

[chilly merlin]

Hard reset maybe

[brisk lantern]

how do i do it?

[chilly merlin]

Dunno in iphones

[brisk lantern]

mmm

[chilly merlin]

Does it have password

Like a number to unlock

[brisk lantern]

its asking me to enter the country,language and then connect to ihone or apple id

[chilly merlin]

Well do it

Or it's not yours 🧐

[brisk lantern]

i dont even remember whos phone this is

its a really old one

i found this

[chilly merlin]

Well can't help

[brisk lantern]

im suprised it works tbh

[chilly merlin]

Cuz

[brisk lantern]

yeah i understand

[chilly merlin]

Thank you

[brisk lantern]

im doing this as a time pass anyway

[chilly merlin]

I cannot not this time coz I'm under observation

[timid cargo]

cyanide and ben probably lurking

:D

[chilly merlin]

I know

Ben

You see me

[timid cargo]

ben sees everything

[chilly merlin]

The eye

Come out

Cyanide is more stealthy than ben

[quasi berry]

Nah

I've been watching you for a while now :)

[chilly merlin]

Stalker

[brisk lantern]

lmao

[quasi berry]

Cy isn't even here, yet

[chilly merlin]

Figured must be in work

[fiery gate]

Does any one know realistic Ai voiceover for free???

[chilly merlin]

@quasi berry 👆

[maiden violet]

Ooo

[gloomy arch]

sup

[shadow fractal]

I am on and off

For today

My day off from work

[quasi berry]

Fair enough

[shadow fractal]

If needed, ping

[sly spire]

hey

[chilly merlin]

Hey delll

[gloomy arch]

💀

[gloomy arch]

whats good

[chilly merlin]

Hmm

[sly spire]

all good u?

[turbid warren]

is there any videos to learn buffer over flow i find it complicated in tryhackme

[sly spire]

https://www.youtube.com/playlist?list=PLLKT__MCUeix3O0DPbmuaRuR_4Hxo4m3G

i did not watch it but TheCyberMentor channel is great

[turbid warren]

thank you

[sly spire]

anytime

[chilly merlin]

There is module on buffer overflow on htb

[turbid warren]

will take a look on that

[upbeat veldt]

Thing about TCM video is you'll need to create a home lab for testing the BO.. you could use the TCM video and then use THM labs if you don't want to create a home lab for testing though...

[turbid warren]

yeah thats the thing that i want to do cuz i didnt know what i was doing in THM i was just copying and pasting

[shell sinew]

can someone help me with remotely connecting to kali desktop?
I have this problem when I try to connect to kali from Windows (remote dekstop windows app) I enter username and password but it won't connect.
the remote desktop app just closes

[chilly merlin]

rdp?

is the kali machine setup for it? is it fully like allowing it

[shell sinew]

XRDP

all enabled

did it with this -- tutorial

it detects kali but after entering username and password it just closes

[uncut wedge]

i use anydesk and it works wonderss. not sure about xrdp

[fickle mauve]

Getting the TPLink T2U to work with Kali Linux can be tricky because it requires manually installing drivers that aren't included with the operating system : / and it may suck even after installation you might encounter issues like unstable connections difficulties getting the adapter to work in monitor mode. if its possible try to get Alfa AWUS036NHA but the region issue is a problem : \ , I would try looking somewhere else.

[ember stream]

Anyone knows of a method to fully disable RAT or Remote Access on a windows device? Blocking the ports do not solve it in the case that anydesk for example is installed without your knowledge. Or is there a method to block rat connections on http and https ports?

[chilly merlin]

try malware bytes

maybe helpful

lemme check

To fully disable or prevent RAT (Remote Access Trojan) connections on a Windows device:

Uninstall Suspicious Software:

Go to Control Panel > Programs and Features and uninstall any unknown or unauthorized remote access software (e.g., AnyDesk, TeamViewer).
Disable Remote Access:

Remote Desktop: Disable in Control Panel > System > Remote settings.
Remote Assistance: Uncheck "Allow Remote Assistance" in the same settings.
Firewall Rules:

Create outbound firewall rules to block specific remote access software executables (e.g., AnyDesk.exe).
Consider blocking non-essential ports if specific RATs are known to use them.
Network Monitoring:

Use tools like Wireshark to detect unusual connections over HTTP/HTTPS and identify their source.
System Security:

Keep software updated, enable 2FA, and consider using application whitelisting or advanced threat protection tools.
Disable Services:

Use services.msc to disable suspicious services from starting automatically.
Consider a System Reset:

If the threat persists, reimage or reset the device to remove any RAT completely.

[golden musk]

hey guys, I am a family man and I have severe narcolepsy and cataplexy. this condition makes it impossible to get a job and disability does not acknowledge it as a worthy condition. was wondering if anybody in here knows how to legitimately make money online, no gatekeeping just literally a real way. to this point, i don't think this even exists, but then again I've never been in a discord with a bunch of hackers before so, it's worth a shot, can anybody help me?

[stuck spear]

Hey guys...

Please I need your help

Can I download or in Kali Linux or parrot OS on my Android phone????

[chilly merlin]

Yea

Kali nethunter

[stuck spear]

Ok...
Thank you

[spiral notch]

heyo

https://github.com/mayankmetha/Rucky/releases/tag/2.3

is rucky safe?

i barely know any java so id be clueless looking over sourcecode

[zenith depot]

hey

does someones have like a modified image or smth for kali nethunter that arent on the oficial phones list?

or its recommended to just buy the phones listed?

[maiden meadow]

why dont people adjust now that some people know there are technologies that can cause voices in people's heads? like verifiable strings of related patents for their development, it doesnt get much more obvious. Not just voices but a tonne of mental health symptoms like causing specific dreams and causing the feeling of bugs on your skin!

@golden musk have you tried things like making an instagram, tiktok, facebook account and posting the answers to the top questions on google for your neiche?

[queen wraith]

Goodmorning guys i am new here … i was wondering whats the best mac to use as someone who is getting into tech , coding , cybersecurity.. i am in school and need a good computer i can use for a while .. tha ks

[golden musk]

no I haven't sounds interesting, never thought of that, how do you find the top questions on google for your niche?

[small wraith]

probably one with an intel chip so you can dual boot Linux, or use a VM

unfortunately m1 or m2 chips don’t really allow you to dual boot and with virtual machines there are many limitations so I’d go for intel processor

[lament walrus]

Help

Ecm factorisation

Need github code

Cant find working one

Already have a code that not work

:/

[olive saffron]

Hello guys I need someone who gave Comptia A security exam to help me out with something

[golden musk]

is it as simple as typing a question about my niche in google and seeing what drops down?

[chilly merlin]

#1181325692823150642

[lament walrus]

I'm an idiot

[formal kettle]

Does the Linux Essentials YouTube playlist only work for Linux? Like what I’m learning?

Cause I’m on Windows. Might be misunderstanding it

[chilly merlin]

Yep

Most server are made of linux so in order to break into and how b to navigate around need to know linux

Feel free to correct me

[formal kettle]

Ah. So is there any way to emulate Linux on a windows pc or would I have to buy a laptop

[chilly merlin]

Emulate?

U mean use linux on windows

[formal kettle]

Yeah

[chilly merlin]

Vm

[formal kettle]

Pardon?

[chilly merlin]

Wait

[chilly merlin]

https://youtu.be/MPkni85O9JA?feature=shared

[formal kettle]

Alright, thank you

[west wren]

Holla 👋👋!

Hey everyone am new here here is the thing.
I am know at final year of high school but because of some war events the formal education has paused, So i decided to take the E-learning journey seriously.

I have been very passionate about the technology field since my early age

I am currently on my half way to finish the Google IT support professional certificate program and i was thinking to go for thier cybersecurity professional certificate

[small wraith]

Nice

[west wren]

Do you think it's a good start in the cyber security field ?

[small wraith]

Ye I think it’s a great start

Did you end up getting the cert?

[west wren]

Just one more week

[small wraith]

Good luck!

[west wren]

Will it be enough to get a job 🤔😕? mybe

[small wraith]

Yeah cyber security certifs r rlly good especially if you don’t have any actual job experience it shows that you know your shit

[west wren]

Hmmmmm

I still need like a plan or a roadmap for it

[small wraith]

I’d say go for at least 2 certification before the end of college and then do internships

what kind of cybersec are you going to specialize in?

[west wren]

Well for now am just trying to start .

[small wraith]

alright first I would try to learn a programming language and then it really depends what you want to learn to move from there

If you want to learn penetrating, I would learn about all the different tools and functionalities, then do htb or tryhackme

If u wanna do forensics prob go into osint

[west wren]

I have a good fundamentals in programing

C

Python mostly

[small wraith]

Oh that’s great now all you rlly gotta do is figure out what you want to do

[west wren]

I tried flutter for a while

[small wraith]

nice

[west wren]

U know what

Mybe after i take the Google cybersecurity professional certificate, I will probably have a good knowledge of where i wanna start and where i wanna go .

[small wraith]

Ye prob

Good luck on your cert!

[west wren]

Thank you for your help 🙏🙂

Much appreciated ☺️😃

[small wraith]

Any time! Lmk how it goes

[versed spruce]

Hi! Which channel am I allowed to send a google form survey about job + major satisfaction + advice?

[quasi berry]

@shadow fractal

[shadow fractal]

Hmmm?

[quasi berry]

She asked a question

How to answer

[shadow fractal]

Just a few mins

[shadow fractal]

In regards of the forms themselves we do not have a dedicated channel for this

[small wraith]

I mean this could be a good place for it since they’re technically asking for help

[shadow fractal]

If there is a specific like question/interest, yes it would be the correct place here

But for sending forms, we do not promote those too much

[small wraith]

Ah ok

[maiden violet]

Very cute YouTube ngl

[uncut wedge]

you can ask people heree itself 🙂 forms are considered as promotion like what red one said

[ember kettle]

Hi I’m new here and new to this entire tech world as a whole, and I’d like some advice on getting started with recommendations for tools, websites, forums etc. Also interested in ways to browse the web undetected, building a low key email address, advice for a VPN and whatever else helpful knowledge. Idk if any of this makes any sense. I have an interest but don’t know where to start 😞

[quasi berry]

Check out the following: #1187866812235386920 message, https://discord.com/channels/990435451334688768/1273978113931481138

[gritty laurel]

this is a education server too?

[maiden violet]

Wdym an education server?

[gritty laurel]

education server, skibidi rizz gyatt pomni

[maiden violet]

We don’t teach stuff

We could help you out

[ember kettle]

I appreciate this greatly Ben thank you

[thin flax]

I am trying to install my WiFi adapter on Kali but it keep saying “unable to locate package mt7612u-dkms “

[molten maple]

wheres a good place to learn c#

wheres a good place to learn sql

[versed spruce]

alright, ill send it here + if it's not allowed I'll remove my message

[versed spruce]

tysm!

Link to survey: https://docs.google.com/forms/d/e/1FAIpQLSeGItkqomd9tdCHwtQLcyUDwv-KvdZbYpjtYyTX14eha9SOaw/viewform?usp=sf_link

[stuck spear]

Hey guys...please I need your help...How do I run a command on termux with my Android phone... please

[chilly merlin]

https://youtu.be/Yl7NFenTgIo?feature=shared

[uncut wedge]

run sudo apt update once. if it still doesn’t work write in google how to install mt7612u-dkms in kali 🙂

[uncut wedge]

c# i mostly learned from books. i have 3 of them: c# for dummies, c# 12 in a nutshell and getting started with advanced c#

and then practice it on windows 🙂 vscode already have the c# dev kit so you can compile the code there

and for sql i watched a youtube playlist

https://youtube.com/playlist?list=PLsjUcU8CQXGFFAhJI6qTA8owv3z9jBbpd&si=Nap-BpBpVvAi1PkB

and practiced it in mysql workbench

[stark wing]

How can I thoroughly check my device for backdoors or some malware persistence?

[chilly merlin]

Malwarebytes software

[stark wing]

It says that os is not supported for me when I run it

[chilly merlin]

What os u use

[stark wing]

Win 10 right now

[chilly merlin]

Download windows version

[stark wing]

Actually that is what I did still it said that the device is not supported, which makes me suspecious

[chilly merlin]

Hmm

@uncut wedge

👆

Wait someone will get to u

[stark wing]

Another issue that I need help is how to find if a particular link provided to me by someone is malacious or has redirections in it?
And what would be the best way to open random links on the internet (like vmware/virtual box) or maybe something more lightweight or online service?

[chilly merlin]

Virus total

[stark wing]

Thank you

[chilly merlin]

You're welcome

[stark wing]

Also I do know that the crack of softwares are highly insecure but if I still want to use them, how can I know that the crack is safe?

[chilly merlin]

Do not discuss this here

We not encourage piracy or cracked softwares

Thank you

[stark wing]

I get it

How can I create a safe environment with the lowest consumption of my cpu, memory and other resources to test a malware?

[chilly merlin]

U use windows

?

[stark wing]

Yes Sir

[chilly merlin]

Remove it and use linux on bare metal

And start doing malware analysis

[stark wing]

The virus is of Win 10 though

[chilly merlin]

As linux condumes less resources

[chilly merlin]

Doesn't matter we doing malware analysis

[stark wing]

I already have linux in dual boot

[chilly merlin]

Perfect start malware analysis

Then

in a safe environment

No one's active in server

@shadow fractal

U here pal

[stark wing]

It's okay when they get active, I'll be here.
Thank you for the help Sir

[knotty falcon]

which is best for coding windows, linux or mac?

[chilly merlin]

Windows. vscode

[knotty falcon]

ok

[quasi berry]

No worries

[uncut wedge]

you can code on any platform. depends on preference 🙂

[west wren]

What is the better option.
1 - dual boot windows 10 and kali Linux in the same hard drive.
2 - put each of them on a sapreate hard drive ( i will have to buy a hard disk caddy and i already have an extra hard disk )

If it's a labtob

[chilly merlin]

Seperate

My opinion

[olive iris]

alright as I asked in main chat here it is again so how unsafe is it to actually run a work website that is online in a next dev environment? but the data handler api is fully apart from it written in python and needs user credentials to get anything from it?

don't sugarcoat the response be as real as possible on how dumb it is if it is and please explain why so I can actually evolve and understand lol

[chilly merlin]

@quasi berry 👆

he is good in this

[olive iris]

alright 🙂 thank you

please ping me if you respond so I notice

[chilly merlin]

1. Exposure to Attacks
   Public Access: If your development environment is accessible online, it becomes a potential target for attackers. Even if it's not meant to be public, if someone discovers it, they could exploit any weaknesses in it.
2. Data and API Risks
   Credentials Leakage: If the API requires credentials and those credentials are hardcoded or inadequately protected in the development environment, there's a risk they could be exposed. Attackers might attempt to use these credentials to access the API or other services.
3. Unintended Consequences
   Leak of Sensitive Information: Even if the API is separate, the website itself might inadvertently leak information about the API or the system. Attackers might gain insights into the structure, endpoints, or vulnerabilities of the API through the website.

this is what i got

[olive iris]

alright I'm good then 🙂 thank you very much

the api is fully seperated and only info about the api on the next application is the url to it. there is no credentials since that is the users login 🙂

[chilly merlin]

wait for benny say

who knows

[quasi berry]

There is something called a bed that I am gonna rest in for a bit and I will get to this when I get to this ❤️

[zinc wind]

does anyone how to fix unknown hard error?

i really need some help

alr did

[frosty dove]

Hi everyone,

I hope you're all doing well. I’m reaching out for help with recovering my Hotmail account, which I am currently unable to access. I have proof that the account belongs to me, including recent emails and relevant information.

If you have any advice or know someone who might be able to assist, I would greatly appreciate your help or any guidance you can provide.

Thank you so much!

[sly spire]

did you try to contact support?

[frosty dove]

Yes i did i give the information they ask me and as soon as i click submit i get an email saying how i didnt give enough information

Its like they are ignoring me

[sly spire]

@quasi berry

[frosty dove]

Do i contact him?

[quasi berry]

What's up?

[frosty dove]

I need help recovering my hotmail account

I have proof its mine

[obtuse spindle]

You're just gonna have to contact the domain

[frosty dove]

Whats that im not really a cyber dude

[obtuse spindle]

Go to the the Microsoft support page

https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://support.microsoft.com/en-us&ved=2ahUKEwjYm__IpvyHAxWdpokEHb7TKsQQFnoECAkQAQ&usg=AOvVaw0BFc3xPJleowYctDIBzqsd

[frosty dove]

Ok im there

[obtuse spindle]

now sign in

[frosty dove]

I did and it says help us secure your account

But i didnt link phone number

I tried recovering again but still the same they said the results should be ready in 24h but i got mine in 5 seconds after submitting

[maiden violet]

Gimme

[subtle tundra]

Are there any long range RFID readers/writers

[maiden violet]

Read #📜・rules

[kind yew]

I recently bought cheep android device from a company called trackfone (I got the blu view 5) so that I could root it and run kali without loosing my data but I have had some trouble with the rooting prosses I downloaded kingo root and it stopped at 90% then I tried the pc version and after enabling USB debugging the app would not recognize that anything was plugged in (I did check to make sure it was a data cable) does anyone have any ideas?

[quasi berry]

Use magisk instead

[kind yew]

Oh thank you

[timid cargo]

any good resources for reverse engineering with ghidra or gdb?

[uncut wedge]

i referred to the ghidra book and random youtube tuts for ghidra and the art of debugging for anything gdb and eclipse

[timid cargo]

i see, thanks for the resources :D

[uncut wedge]

yww good luck 💜

[chilly merlin]

dualboot cuh

[small wraith]

anyone got gnome extensions for gradient borders?

[boreal solstice]

https://tenor.com/view/im-watching-stalking-lurking-watching-peek-gif-7914122

[crimson rock]

Want to get started with cyber security, do you guys have any suggestions on what to get for a certification?

[small wraith]

depends what you want to do in cyber

dif certs for dif sections

[chilly merlin]

look at the pins

[chilly merlin]

#1181325692823150642

Depends on your budget

On certs

Atleast ejpt

[stark wing]

@uncut wedge @shadow fractal any of you know how to test a malware in a safe environment in Win10?

[small wraith]

vm

or sandbox

also have a vpn

[chilly merlin]

Seems the staff are participating in ctf patience

[stark wing]

I have heard that some virus can surpass the boundries of vm or sandbox and can get into your host system.
I could be wrong

[chilly merlin]

Post this in malware analysis channel

[small wraith]

yeah they can so you may wanna layre it

layer

i also prob wouldn't do it on my main pc or desktop

get like a cheap laptop or smth

[grim quartz]

Ey
Can someone help me?
Im using UTM
To install Debian in a VM in my 8gen iPad (editado)
But
When I'm in the grub
And I chose the option GNU/linux

Its just a black screen with a blinking“_”

Idk why the grub runs good

But that doesn’t

Idk why

It’s a non grafic Debian iso

[chilly merlin]

the black screen with a blinking cursor usually indicates that the system is trying to boot but isn't able to proceed further. Here are some steps you can try to troubleshoot this issue:

1. Check the ISO File: Ensure that the Debian ISO file you used for the installation is not corrupted. You can verify its integrity by checking the checksum of the ISO file and comparing it with the one provided on the Debian website.

2. Try a Different Boot Option:

   • When you're in the GRUB menu, instead of choosing the default option, try selecting the "Advanced options" or any recovery mode to see if that helps.

3. Modify GRUB Boot Parameters:

   • In the GRUB menu, highlight the GNU/Linux option and press e to edit the boot parameters.
   • Look for the line starting with linux and try adding nomodeset at the end of that line. Then press Ctrl + X to boot with the modified parameters.
   • This option disables some advanced video modes that might be incompatible with your setup, allowing you to proceed with the boot.

4. Check UTM Settings:

   • Ensure that UTM is configured correctly. Double-check that the virtual machine has enough RAM, disk space, and that the correct architecture (x86_64 for most modern systems) is selected.
   • Make sure the virtual hard drive is attached properly and is set as the boot device.

5. Use a Different Debian Version:

   • Sometimes, certain versions of Debian might have compatibility issues with virtual environments. If you're using Debian Stable, you might want to try Debian Testing or even a different version (e.g., a netinst image) to see if it works better.

6. Try a Different Display/Graphics Configuration:

   • In UTM settings, try changing the display or graphics adapter to a different one, like from virtio to VGA or QXL, and see if that allows the VM to boot correctly.

Did u check forums

For this problem

[chilly merlin]

Have you tried booting into a live session?

[chilly merlin]

It's possible but highly unlikely for someone with not-so-good skills

[grim quartz]

It’s not posible

Cuz it’s a iso image

In the grub just give 3 options

The normal

The fail-safe mod

And the shell

[chilly merlin]

What linux distro are you looking to install

[grim quartz]

Debían

It’s aaaa

Lemesee

Debian 10.4 (Custom i3)

Architecture: ARM64
Memory: 1024 MiB
Disk: 10 GiB
Display: VGA+Console
SPICE tools: Installed

[chilly merlin]

turn off uefi boot on UTM

[grim quartz]

Ok

[drifting eagle]

hi fellows
i start my cybersec degree next month i am a complete beginner i dont even know programming im totally lost right now
im looking for someone who can get me started with something
idk how to begin
i literally know nothing other than what cybersec is
any headstart would be appreaciated like what should i start learning rn
and im sorry if i sound like a complete beginner because i am one

[chilly merlin]

#1181325692823150642 there is a roadmap

Look at it

[chilly merlin]

look at the pins

[south valley]

How i can resize my root partition no kali Linux?

[drifting eagle]

Thanks

[ember kettle]

What do you guys recommend as an install method for Linux on windows? What distribution do you recommend

[chilly merlin]

arch

[icy parcel]

Hey guys, Doing a information science degree but I have an academic paper to write- running a bit late on submission but I need a few more responses for a survey for my paper, can I post it here?

[quasi berry]

🤨

@shadow fractal

[shadow fractal]

Not approved unfortunately

Thanks Ben

@quasi berry @icy parcel

[icy parcel]

I understand.. well I appreciate it.

[stuck spear]

Does anyone know how to continue a hanging installation of Kali nethunter

It stopped installing due to some network issue... and I don't know how to continue it...I really need help here... please anyone

[stuck spear]

okay I'm trying to run nethunter but it ain't working

Do you have any idea on how to fix it

[subtle tundra]

Is there any reasonable way into my WPA2 network if WPA2 is virtually uncrackable

Like without physical access

[quasi berry]

Pixie dust attack

[subtle tundra]

What does that do?

Doesn't it rely on WPS?

If so then I never use it

[quasi berry]

Doesn't matter if you never use it, matters whether it's enabled or not 🤨

[vagrant zinc]

Can I ask anyone if its true that I can hack my own credit report and erase bad information?

[chilly merlin]

#📜・rules

[subtle tundra]

how so?

If no one clicks the button then WPS never opens?

[quasi berry]

You don't ever need to click the WPS button to perform a pixie dust attack

[subtle tundra]

Are pixie dust attacks actually accurate though?

I'm pretty sure I have run multiple before

and they all failed

like other WPA2 cracking techniques

[quasi berry]

Mhm they are

There is a box on HTB which focuses on hacking Wifi, you should check it out

[subtle tundra]

and then what about WPA3?

Wifite2 is a good way to just do all of this easily right?

[quasi berry]

WPA3 so far to my knowledge does not have any vulns that are publicly known

[grim quartz]

I didn’t made the vm boot

Still the same error

[spark marlin]

Hey, where and how can I find info on nanobots and how they're made or developed?

[dawn mirage]

Yeah who has a link or info on nanobots? This would be cool ^

Also where is the section I can go to ask for things in secrecy or privacy best for info I want to obtain? I’m still learning, so I can’t hack yet :/

[high river]

Where to Start learning? HELP

[chilly merlin]

#1181325692823150642

[vital latch]

Please can somebody, tech me, how can I be a hacker, I've been doing it my ways and do not have experience so please I need help, I really love to be a hacker but I don't know how, so I need someone to tech me, 🙏🙏

[uncut wedge]

you can use wsl or a virtualization software like vmware or virtualbox 🙂 depends on your pc’s specs

[uncut wedge]

talk here and you’ll pretty much understand how to become one hehe

[vital latch]

@chilly merlin alright

[chilly merlin]

Wait what

Why u ping me

[vital latch]

Oh, sorry it's a mistake

[normal heart]

Learn how to Google dork and optimize your searches for the best results; learn the fundamentals of Linux and Windows.

Learn SEO! It is crucial to finding proper information in what you want to learn. I can find almost anything because of my specifications on which words I use when searching.

https://blog.degruyter.com/why-and-how-to-optimize-academic-articles-for-search-engines/

[unborn zealot]

can someone help me with this htb web fuzzing

i dont know what am doing wrong

noone online ?

sad

[shadow fractal]

@unborn zealot

I use this cheatsheet as an example

And modify it to my needs

Usage: ffuf [flags]

Flags:
-w Wordlist file path
-u Target URL
-H Custom header (can be used multiple times)
-X HTTP method (default: GET)
-r Follow redirects
-t Number of concurrent threads (default: 40)
-p Proxy URL
-c Custom match string (can be used multiple times)
-exclude-dirs Comma-separated list of directories to exclude
-mc Maximum number of matches to output
-v Verbose output

Examples:

1. Basic usage:
   ffuf -w wordlist.txt -u http://example.com/FUZZ

2. Add custom header:
   ffuf -w wordlist.txt -u http://example.com/FUZZ -H "Authorization: Bearer <token>"

3. Use POST method:
   ffuf -w wordlist.txt -u http://example.com/api -X POST -d "param1=value1&param2=value2"

4. Finding subdomain:
   ffuf -u https://FUZZ.example.com -w wordlist.txt -mc 200,301,302,403

5. Follow redirects:
   ffuf -w wordlist.txt -u http://example.com/FUZZ -r

6. Use a proxy:
   ffuf -w wordlist.txt -u http://example.com/FUZZ -p http://127.0.0.1:8080

7. Exclude directories:
   ffuf -w wordlist.txt -u http://example.com/FUZZ -exclude-dirs "admin,backup,test"

8. Use custom match string:
   ffuf -w wordlist.txt -u http://example.com/FUZZ -c "Password incorrect"

9. Number of threads:
   ffuf -w wordlist.txt -u http://example.com/FUZZ -t 50

I thtink it was on medium

[unborn zealot]

thanks for the cheatsheet its most probably me who is doing somethig wrong

[shadow fractal]

Nah man, ur fine

[chilly merlin]

👀

I was away for badminton

[shrewd nova]

I need a bit of help. So I am using Kali's prebuilt for VMware. But I am thinking to switch to the iso file ? Will it be good?

[timid cargo]

do you plan to use the iso on vmware?

[shrewd nova]

yeah!!

But I have never done it so I wanted a headsup

[timid cargo]

then id suggest sticking to the prebuilt for vmware since it is optimized to run on a virtual environment

the iso file wont have the additional files that make the user experience better on a VM

[shrewd nova]

I have been using it since a long time. It's getting slow. firefox is not running so good. Like I facing bit of trouble while doing some bug hunting

[shrewd nova]

Oh okokok!! Do you have any suggestions for any alternative

[timid cargo]

i can understand that, you could try looking for an update with the services, you can also just reinstall the machine entirely

[timid cargo]

you can look in to dual boot, in simple words you have 2 os's on the same install

it will certainly be more efficient than a VM

[shrewd nova]

Yeah Ik.. I thought about that for a while but it will require a lot of work

[shrewd nova]

I think so

[shrewd nova]

reinstalling it again will cost me downloading entire thing again 🥲 all the tools and all. Isn't there some other way

[timid cargo]

it might seem tedious, but you also gain knowledge with partitioning

[shrewd nova]

yeah

[timid cargo]

if youre running with a VM, id generally stick to the prebuilt images

consider looking in to a dual boot sometime, it is good knowledge

[shrewd nova]

what about using it on wsl?

[timid cargo]

havent really looked in the experience with using wsl, so cant really say much about it

sorry

[shrewd nova]

No worries .. Thanks for the help

[timid cargo]

always <3

[lean brook]

Anyone here from New York

[minor thorn]

hey what resources one should use to get good remote job in cyber security , as of now my friend is security analyst L1

[timid cargo]

you can check out #1181325692823150642

[minor thorn]

the problem is i don't have any idea about it nor he has much of sense about it

as he got his job from the help of his academy and he's not that skilled

[chilly merlin]

#1181325692823150642

[minor thorn]

so i just want to help him get job , so need material to help him

[timid cargo]

i would suggest starting from basics

[chilly merlin]

what job

[timid cargo]

if you have the resources, you can suggest THM

they have both theory and practicals there

[chilly merlin]

Interesting stuff

dm me i can give u something

[minor thorn]

me ?

[chilly merlin]

yep

[chilly merlin]

Can anyone help me find out why my phone isn't recognised by any PC after unlocking its bootloader
I have tried the following:

• Using different cables and ports
• Using different PCs and Operating Systems
• installing MTP drivers
  Enabling USB debugging
• Changing my MTP settings under Developer settings
• Tried troubleshooting on linux
• Restarted both laptop and phone several times
• Resetted the phone twice
• updating windows
• Re-locking the bootloader
  But all seems to fail.

[maiden violet]

What company is your phone

[chilly merlin]

Samsung

A31

[chilly merlin]

I'm starting to think it's a hardware issue

[maiden violet]

What’s your usb config

[chilly merlin]

On the phone. I've tried all, USB tethering and Transferring images/files

Still doesn't work

[zenith monolith]

Hey guys please help
Im trying to unlock my phone forgot password
its Samsung A14

I have tried using the power button + volume buttons
Still cant factories keeps sending me main screen

[zenith monolith]

Download hiSuit on your computer it will work fine

[maiden violet]

did you make a Samsung account?

[maiden violet]

Go to Developer options on your phone.
Find and tap on "Revoke USB debugging authorizations," and then try reconnecting your phone to your PC.

[zenith monolith]

I don't remember setting one up

[dapper mortar]

Hey does anyone know if trycrack me is a good way to learn reverse engineering?

[maiden violet]

either we use some third party tools or do some coding

[maiden violet]

https://download.wondershare.com/drfone_unlock_full3372.exe might be good tool to use

[silk ginkgo]

Using [1,0] would not be appropriate if your goal is to capture all valid IP addresses. The expression [1,0] specifically limits the matches to sequences containing only the digits 1 and 0, which is not representative of all possible digits in an IP address (which can range from 0 to 9).

Correct Regex for IP Addresses

To match all possible valid IP addresses, you should use a pattern that allows any digit from 0 to 9. A common regex for matching IPv4 addresses is:

\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b

Explanation:

1. [0-9]{1,3}: Matches 1 to 3 digits, which corresponds to each segment of an IP address (since each segment can range from 0 to 255).

2. (?:[0-9]{1,3}\.){3}: This part matches the first three segments of an IP address, where each segment is followed by a dot (.).

3. [0-9]{1,3}: Finally, this part matches the last segment of the IP address.

4. \b: Word boundary anchors to ensure that the match is a complete IP address, not just part of a longer string.

Example Matches

This pattern would match:

• 192.168.1.1
• 10.0.0.255
• 172.16.254.1
  But it wouldn't match an IP like 999.999.999.999 because the segments in an IP address must be between 0 and 255.

Summary

If you want to capture all IP addresses, replace [1,0]{1,3} with [0-9]{1,3} in your regex. The [1,0] only matches 1 and 0, which would not work for general IP addresses.

@vague tusk
Sorry mods for chat flooding

COULD BE WRONG

[vague tusk]

why no match 999.999.999.999 ?

[silk ginkgo]

Chatgpt

I honestly have no idea what that is

[vague tusk]

thx

[maiden violet]

\b((25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])\b

This goes from 0.0.0.0 to 255.255.255.255

[chilly merlin]

On windows or Linux because my phones isn't recognised in both

[chilly merlin]

Not really. If he didn't setup a samsung account he can just reset his phone from recovery mode

[chilly merlin]

I already tried that datpep. It didn't work

[chilly merlin]

You will have to reset your phone from Recovery settings.
Power off your phone
Hold the power button and Volume Up button constantly until you enter recovery mode.
Use the volume buttons to navigate to Reset phone and use the power button to select it.
Note:This will wipe everything on your phone

[maiden violet]

That would be a factory reset

I was talking about tools that let you bypass

[chilly merlin]

For free?

Dr Fone isn't free

[maiden violet]

That’s why I said some coding

[chilly merlin]

That's the only option to regain access to me

[chilly merlin]

Are you gonna teach him how to do everything.

[maiden violet]

No

[chilly merlin]

Okay

But what can I do for mine??

[hollow pasture]

t!info

[thin flax]

Does anyone know how to install the WiFi adapter with the mt7612u chip set in Kali Linux?

[chilly merlin]

@tame spruce

[tame spruce]

I will do my best lemme know when you can get on

[shell sinew]

doesnt it work out of the box?

on Kali

[normal heart]

Verify Kernel Version:

Since the MT7612U chipset has been supported in-kernel since Linux kernel v4.19 (2018), ensure your Kali Linux installation is running a modern kernel version. You can check your kernel version by running uname -a in the terminal.

Plug in the Adapter:

Insert the USB WiFi adapter based on the MT7612U chipset into your Kali Linux system.

Verify Adapter Detected:

Run lsusb in the terminal to verify that the adapter is detected by your system.

Configure WiFi:

You can configure the WiFi adapter using the standard Linux wireless tools, such as iwconfig and wpa_supplicant. You may need to specify the adapter’s interface name, which can be obtained by running ip link show.

Known Issue with VirtualBox:

If you’re running Kali Linux in VirtualBox, you may experience issues with the adapter not being detected. There is no known workaround for this issue.

Optional:

Disable LED:

If your adapter has an LED and it doesn’t come on automatically when the system is turned on, you can disable it by modifying the adapter’s configuration or firmware (if possible).

Monitor Mode and Packet Injection:

The MT7612U chipset supports AP, monitor mode, and packet injection. You can use tools like airmon-ng and tcpdump to configure and utilize these features.

[tame spruce]

I have looked up some vids I think it should work ride of the box but I also saw on there website a link to download a driver for Linux so maybe that could help if it doesn't work for him

[shell sinew]

on Kali is should be for 99% out of the box

for sure

[sly spire]

@chilly merlin reply to your msgs (issue)

[chilly merlin]

@sly spire here it is

[sly spire]

https://chatgpt.com/share/8716fbd4-ff12-482b-9be5-f3ac4ef3fdcc

[north tree]

Hey guys im just getting into cyber security and wondering what are the some of the best beginner certificated i should be aiming for. I heard the google one is pretty good and one of my friends is recommending me the CodePath one as well. What do you guys think?

[chilly merlin]

CCNA
CCNP
CCNA security

[chilly merlin]

Start with net+ or sec+ above mentioned by hondrix were also good

[unique elbow]

Does anyone have idea about an discord link masking methode ?

[chilly merlin]

What do you mean

Like masking a discord URL

[sly spire]

you mean google?

[chilly merlin]

You can use https://bit.ly or https://tinyurl.com to mask your URLs for free

[unborn zealot]

can anyone help me with htb we fuzz ?

[chilly merlin]

hmm

whats the matter

[unborn zealot]

Using GoBuster against the target system to fuzz for vhosts using the common.txt wordlist, which vhost starts with the prefix "web-"? Respond with the full vhost, eg web-123.inlanefreight.htb.

[chilly merlin]

there are htb modules for it

[unborn zealot]

i cant find the one with web- prefix even after using | grep web-

[chilly merlin]

it appemnds web at front

[chilly merlin]

did u try to use write ups

[unborn zealot]

write up from other people ?

[chilly merlin]

yea

[unborn zealot]

i didnt lemme see

i cant find the new ones

[chilly merlin]

module name

?

[unborn zealot]

i think the module has been updated

[unborn zealot]

web fuzzing

web fuzzing > Virtual Host and Subdomain Fuzzing

[chilly merlin]

web fuzzing with fufff?

[unborn zealot]

yes

[chilly merlin]

@shadow fractal cani share the yt link

of htb module

i mean sloved one

guy was stuck

@unborn zealot wait

[unborn zealot]

ok

[chilly merlin]

or see requests

[unborn zealot]

done

[chilly merlin]

friend

im done

[karmic prairie]

I have a problem, i wanted to configure my raspberry pi 5 with kali linux and use it on my ipad, when i type ip a it says that usb0 is down, how do i solve this?

[jovial temple]

so i made a nat network in virtualbox

and i can't nmap my vuln vm with my kali

netdiscover can identify the target but nmap don't give a damn about it

[sly spire]

the other machine is it nat also?

[jovial temple]

yep

all in lab1

[sly spire]

send me ss let me try and help you

[upbeat veldt]

You could create an isolated internal network, create a DHCP server to get unique IP addresses for each machine on internal network... Then both machines should be able to communicate between each other... I'm pretty sure right now both VMs on nat network may have the same IP ...

[jovial temple]

i have DHCP enable

IPv4 prefix is 10.0.2.0/24

so i don't get why it's not working with symfonos series

but only with metasploitable

i think i have issue with my kali linux vm

i get like weird boot message errors sometimes

[upbeat veldt]

When you run ip a on Kali is it the same IP as with other VM?

[jovial temple]

same as metasploitable yes

it's just soo weird

sometimes it works

sometime no

even a ping dosen''t work

[upbeat veldt]

So they will need to be different if want Kali to communicate with the other .. you can try something like this to setup an isolated environment... Just remember to switch it back to nat if you need the internet ..https://youtu.be/mvsiuLzpx2E?si=QyEzG7V8kGryYe2m around 6:03 is what you're looking for... That should fix your issue

[jovial temple]

i'll do that right away

thanks man

[proper ruin]

Does anyone know how to use burpsuite proxy on a mobile app?
ive tried a lot of tutorials online but nothing have worked
it might be bcs my phone isnt rooted

[chilly merlin]

idk we can use burp on mobile

[proper ruin]

wdym

[chilly merlin]

https://portswigger.net/burp/documentation/desktop/mobile/config-android-device

https://forum.portswigger.net/thread/burp-proxy-with-android-no-connection-to-proxy-from-other-device-f720ba7b

[proper ruin]

is it possible this didnt work for me because I used a coffee shop wifi?

[chilly merlin]

Hmm dunno

[proper ruin]

maybe they blocked client-to-client communication

[chilly merlin]

Try it witt your mobile data instead

[proper ruin]

You mean make a hotspot and have my computer connected to it?

ive tried but then I cant set up a proxy

[chilly merlin]

Did u setup ssl certificate

[proper ruin]

No

But I did set up a CA certificate

[chilly merlin]

Hmm

@quasi berry

👆

[quasi berry]

Let me catch up on what is going on 🤨

@proper ruin What device are you using? Android or Iphone?

[thin flax]

Lsusb
Bus 001 Device 001: ID 1d6b:0002 Linux foundation 2.0root hub

Bus 001Device 002:ID 80ee:0021 virtual box USB Tablet

Bus 002 Device 001:ID 1d6b:0003 Linux foundation 3.0 root hub

Bus 002 Device 002:ID 0e8d:7612 MediaTek Inc. MT7612U 802.11a/b/g/n/ac Wireless Adapter

Adapter is recognized but lsusb shows me

Lo No wireless extension
eth0 No wireless extension

[proper ruin]

android

[quasi berry]

Have you setup the proxy listener in Burp?

[proper ruin]

I think the problem is the public ish wifi bcs i couldn't ping my phone either

[chilly merlin]

Better to answer what he asked

[quasi berry]

Have you done all the steps in this guide? @proper ruin

[proper ruin]

yes

[quasi berry]

Hmm

[proper ruin]

the result was my phone just not having internet and burp not catching anything

[chilly merlin]

I could do what i can.the minute it's out of my hand i pinged u

Hold on what ip u use

[quasi berry]

I would love to see how you have everything setup since I feel like there may be a misconfiguration going on

[turbid warren]

So I completed the THM pentration tester creer paths and I want do deep more in it ,
I am doing CTFs and I take a look on HTB academy and I see that its more advanced so my question is shoold i pay and take the pentration tester path on HTB or no

[chilly merlin]

Yea go for it

[timid cargo]

you can get it for cheaper if you have a students email

[chilly merlin]

Hmm

Yea

[turbid warren]

thnks for helping and I have no problem with money i just dont want to drop it in things that i dont need that y am asking

[trail talon]

Can I get the road map? For hacking