👥・help-me

[spiral notch]

they might be bale to help

[dry lantern]

Support on exchange?

[wispy oriole]

I wanna learn to hack.
I need the total basic

[turbid jasper]

I wouldn’t use cc101, unless you want to be sub 433MHz if memory doesn’t fail me and maurader I don’t think it will run in it. I would use ESP32 (-S; S2)

[dry lantern]

Whats up?

[timid marten]

@dry lantern I can help you

[spark lodge]

#👥・new-member-guide
And Google.com
Good luck

[tall jacinth]

Anyone know how to make bugs for specific jobs?

[spiral notch]

hi

@dry lantern

on rn?

[spiral notch]

#👥・new-member-guide

[novel forge]

Which website can I use to verify my Facebook account for free, without paying any fees?"

Where can I download the Arc Mode for Call of Duty, and is there an official website or link to access it for free?"

[chilly merlin]

Omg hiii hru

[slim basalt]

Hey everyone i could really use some some im trying to learn how to use active directory i installed it and now I can't get my regular desktop to open

[uncut dove]

damn

[slim basalt]

Do you think you could help me out if possible?

[turbid flume]

Like the face verification?

You have to do that yourself, we don't do that type of stuff here.

[turbid flume]

Try restarting? from what i'm seeing AD shouldn't mess with the desktop.

[slim basalt]

I pmd you i sent an image

[turbid flume]

UPDATE: he installed windows server 💀

https://media.discordapp.net/attachments/1335438717716004938/1335438782106832926/20250201_211210.jpg?ex=67a02bc8&is=679eda48&hm=83d85295844817aef796baa939e5435e5dd28698330086bc9f28c82828445fc2&=&format=webp&width=873&height=654

[mental shore]

what had you installed before that?

[turbid flume]

@slim basalt

[crisp star]

Wait did he install the Windows Server version without the GUI?

[turbid flume]

I didn't know there was a GUI version

but that's what the photo shows

[crisp star]

Yea when you install a windows server you can choose if you want to install it with the GUI or without it.

[mental shore]

you need to reinstall your OS after that an Hypervisor and then you put that stuff like Windows Server in a VM

[turbid flume]

he said he had a kali vm alr

just didn't think to do it with this

[mental shore]

where is that kali VM? not on that PC

[turbid flume]

it was on that pc

keyword was

[mental shore]

yeah not anymore

[turbid flume]

he said he has a win 11 usb so everything should be fine 🙏

[mental shore]

thats good yeah it will be fine. But if he has never made a domain like picking the roles ans stuff he could need some help there

its not hard but you kinda need to see it ones

[slim basalt]

I fixed it yall !!! Did a fresh install of windows 11 😁

[plush spoke]

Why is my computer using so much RAM?

RAM using is 50% and I barely do anything

[little pike]

Navigate to the Broadcom Support Portal and click Login in the upper right corner.
Enter your Broadcom Account email address after which you'll receive a message stating "Your account is locked". Click Unlock Account.

it asks me for my password

and WHEN

i enter it

it takes me back to this page

bro what do i do

this is for vmware

[swift iris]

What is HTTP parameter pollution?

[crisp star]

https://portswigger.net/kb/issues/00501400_client-side-http-parameter-pollution-reflected

[chilly merlin]

hello guys i need help with my kali cmd
my terminal suddendly became like this
https://imgur.com/a/epn93w8

and kali-dark isnt in preferences

[crisp star]

Just open the terminal settings

And change the background colour

[chilly merlin]

and kali-dark isnt in preferences

je but

like

kali-dark is in the themes folder

but not in the preferences

[plucky summit]

Hi guys my telegram account is hacked is there anything else i can do other than asking for support?

[snow mauve]

Tracked them on twitter?
Or you go in back way redemption

[snow mauve]

DM locked!

[crisp star]

Only support

[spiral notch]

No, also don't trust any dms you recieve as they most likely will ask you for money and scam you

[plucky summit]

I cant even access it bro

[plucky summit]

Dont know how to do that

[tacit pasture]

DM me

[plucky summit]

done

[spiral notch]

dont

bro

its a scam

how oblivious are you

[plucky summit]

when you get your account hacked you belive everyone ig

[tacit pasture]

I didn’t see a text

[tacit pasture]

Can you shut up and mind your business

[timid marten]

@snow mauve can I help you

[tacit pasture]

I didn’t see a message from you

[spiral notch]

yeah, dont

you already hasve 3 bots dming you

[spiral notch]

how will u recover his acc

hack into the telegram db?

be so fucken fr

skid

cmon

go on

reply

im waiting

[plucky summit]

anyway i think i reset the account it would reset in 40 hr

[tacit pasture]

Bro shut up and try to keep to your business

[plucky summit]

just need to confirm that account is deleted

[spiral notch]

ohhhh

i can see youre the master hacker

what will you do

[tacit pasture]

Okay if it does not I’m waiting on your text

[spiral notch]

hack me?

stop scamming people. its 2025, it barely works

[spiral notch]

which he wont

because hes not dumb

what a surprise, isn't it?

[uneven eagle]

why wouldnt you wanna ask for support

you been doing something naughty?

[plucky summit]

i mailed them 10 times

[uneven eagle]

ah fair

[plucky summit]

and my account consist of only manga and light novel channels

and some football link for watching matches

[uneven eagle]

yeah support is your only option man

[plucky summit]

but they dont even respond bro

[uneven eagle]

well i doubt anyone here works for telegram bro

their support is dogshit tho u are right

[plucky summit]

unless you have premium

[uneven eagle]

yep premium gets priority unfortunately

[clever rune]

please only contact support or deactivate the email attached to your telegram... and pls dont pay anyone who claims they can get it back it simply wont happen, think with common sense

especially people who's discord profiles have only existed for 10 days....

[spiral notch]

^^

[ivory patio]

hm thanks i will use bruce

[bold brook]

Where can I resell my gift card

[vital robin]

Is there anyway I can trace an individual through a bitcoin transaction? I was scammed out of bitcoin and am pretty livid.

[uneven eagle]

https://cards2cash.co.uk/

[bold brook]

Thanks 🙏

[chilly merlin]

Wtf

@flint galleon do not ping mods kindly bot will time you out

[flint galleon]

okay, thx

[lofty flare]

Hello, I am currently using TailOS (USB), a modified Linux OS that routes all internet traffic through Tor. I am looking for a way to change my location and hide from websites that my traffic is going through Tor (I would like to set up a VPN/PROXY after Tor in TailsOS). I've tried configuring OpenVPN, Wireguard, and using public proxies, but I haven't been able to make it work. I can't find any tutorials online (except for a Russian VPN one, which seems pretty sketchy and I’m not really keen on using it). The thing is, I'm the ultimate noob (the command line terrifies me). Is there any chance there are some experts in this field who could help me or know where I could look for more info?

[timid marten]

Do you need a guide @lofty flare

[lofty flare]

Yes please

[timid marten]

I can help you bro @vital robin

[night yacht]

Hey I've got a delicate situation that needs some attention. Feel free to DM me

[upper heart]

hello, is there a free way to find someone for a phone number

[obsidian spade]

does vmware player get installed automatically along with vmware workstation? I just realized I have it installed but I never did it.

[chilly eagle]

Yea

[chilly eagle]

Read #1286135820008296509

[upper heart]

ok

[sterile burrow]

hi guys

trying to hashcat a zip password

and i get this messajes from hashcat

[spiral notch]

?

[sterile burrow]

oh i cant upload images

[spiral notch]

Copy paste

[sterile burrow]

Session..........: hashcat
Status...........: Exhausted
Hash.Mode........: 13600 (WinZip)
Hash.Target......: $zip2$030306e857d69bb36a94b117c802015ea135f50.../zip2$
Time.Started.....: Sun Feb 02 22:49:44 2025 (4 secs)
Time.Estimated...: Sun Feb 02 22:49:48 2025 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Mask.......: ?u?l?u?l?u [5]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 2952.7 kH/s (5.95ms) @ Accel:2 Loops:999 Thr:512 Vec:1
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 11881376/11881376 (100.00%)
Rejected.........: 0/11881376 (0.00%)
Restore.Point....: 456976/456976 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:25-26 Iteration:0-999
Candidate.Engine.: Device Generator
Candidates.#1....: XvDzU -> XqIhQ
Hardware.Mon.#1..: Temp: 65c Util: 89% Core:2460MHz Mem:8001MHz Bus:8

and the candidates are not correct

[spiral notch]

Why are ur Temps on 65c when cracking a zip

💀

Also your bruteforcing via what list

[sterile burrow]

hashcat -m 13600 -a 3 hash.txt ?u?l?u?l?u
this is the command

and i have extrated the hash with john and auto identify the hash with --identify

and also a menu with bypass quit status etc appears

also when i file the .zip says AES encrypted

[crisp star]

That's because the standard .zip file is using the AES encryption algorithm.

And why would you even brute force a 7z file?

[sterile burrow]

what?

[crisp star]

I mean you try to recover the password for a 7zip file?

[sterile burrow]

yes

[crisp star]

Is this some kind of CTF challenge?

Because It's nearly impossible to find the correct password.

[sterile burrow]

yea

[prime verge]

any1 have much experience with mrchromebox?

or any experience to do with replacing ChromeOS with a common linux distro

[clever lodge]

Look on YouTube

[prime verge]

have done

my problem is more specific

target device is a ideapad 5 flex (amd64), trying to boot debian ISO from a bootable USB drive created with balenaEtcher
Trying to fully replace the chromeOS ROM, not looking for multiboot
for UEFI

when trying to run the MrChromeBox script it tries and fail to find a target directory
cd; curl -LO mrchromebox.tech/firmware-util.sh && sudo bash firmware-util.sh

the error is not certificate related

if someone has any experience with this topic i can give more details and a better breakdown

[clever lodge]

Would anyone be interested in helping me find someone that was being a racist pos on call of duty? If it’s allowed here

[spiral notch]

Unfortunately we don't help with unethical things. Refer to #1286135820008296509

[clever lodge]

Okay that’s cool

[fair jackal]

I'm currently taking a course on cyber security- Does anyone know a good site to practice on for free

[spiral notch]

Wdym verify your Facebook account?

what did u mean by verifying your Facebook app

[turbid flume]

no

[turbid flume]

he wants the blue check next to his name

you normally pay 14 dollars for it

[fading galleon]

just a typical nooby question... If I do a bruteforce attack from my system A to System B, under what condition does my IP address get shown to the owner of system B?
in other words, what is there on system B that is able to identify my IP Address...?

[graceful saffron]

It gets shown to system B via monitoring mechanisms on that endpoint

Or in relation to that endpoint

[fading galleon]

ok...Thanks...! Since I have just started in this field, just curious to know... isn't bruteforce like - aggressive in nature and a 'so to speak' infiltrator tool? i deally supposed to be anonymous to the system B?

[I mean m thinking aloud.. like whats the point if I get discovered]

[graceful saffron]

Yes, if you are targeting SSH with a brute force attack.. You are actively making repeated login requests from your device, to the server. Therefore you're taking up a lot of connection space which makes it aggressive

It depends what you're aiming for but the gist of it stays the same

[graceful saffron]

Well you probably shouldn't have been targeting that system 😉

[fading galleon]

hmmmm [sigh].. so what other things like SSH can possibly expose my IP...

[graceful saffron]

Wdym?

[fading galleon]

so i mean, bruteforce isn't really conspicuous...

I am just tryyna understand... that brute is not the silent type

[graceful saffron]

No it's not, but it's alright if you have permission

[fading galleon]

aah! okay

[graceful saffron]

Silent type of what? Just tryna understand

[fading galleon]

i mean like 'un-seen'/ 'stealth'

[graceful saffron]

Yes this is considered active

You can remain stealthy, but not with brute forcing

[fading galleon]

okkkkkk [light bulb moment]

[halcyon flame]

If you want to interact with the target, then it's considered active. Passive means getting information from sites like shodan, certificate transparency logs, archive, etc

[fading galleon]

okkk

[halcyon flame]

If you interact, then the IP you are interacting from will be visible to the target. Spoofing will not work, as how are you going to receive the traffic when the target responds to the spoofed IP instead of your own

[fading galleon]

point noted!

[halcyon flame]

Know you didn't ask about Spoofing, but just thought I'd point it out 🙂

[turbid flume]

You could proxy though right?

[fading galleon]

i liked that answer .. it just put 2 + 2 together in my brain

[halcyon flame]

You could use a proxy yes, but my statement is still true

The IP of the proxy would be visible to the target

[fading galleon]

i am way too new to know that

[fading galleon]

hmm, that makes sense to me

[graceful saffron]

Yes this is true

Aye new role 😎

I liked red better

[fading galleon]

so, when 'they' like news rooms and other similar agencies talk about 'data breach' and hackers-who-got-into-the-system kinda news, don't such hackers get tracked ?? how do THEY do that... i mean going by the theory that they have to interact with the system

[turbid flume]

makes sense.

[halcyon flame]

They do have to, but more often than not it's not a matter of tracking attackers through network traffic, but human error and getting sloppy

[fading galleon]

ah-hah

[halcyon flame]

That's not to say that network traffic can't be used to track down activity

I don't pretend how much data, or the breadth of monitoring of data is by five eyes and other gov depts is, but I imagine it's enough to be useful when tracking down origins of traffic

..even through proxies, and Tor.. don't get me started on that 😄

Own enough of the network, and it is useless. Own the entry and exit nodes, it's useless

[graceful saffron]

Aren't exit nodes unencrypted to the host?

[halcyon flame]

Indeed

Well, unencrypted as in network data

service data obviously still encrypted, e.g. https

Even without those two clauses, timing attacks on network data can still be used to associate someone with a Tor session, given enough visibility of the networks used in the layers of the path

[graceful saffron]

So tor endpoints always have to be web servers?

[halcyon flame]

No

[fading galleon]

this is a case I read about, there was a bank that got jacked for $ 1,09,30,300.00.... the money travelled [online for sure]... and what and how is still a mystery.. nothing recovered yet... not to my knowledge

[graceful saffron]

I'm not a tor guru

[halcyon flame]

TLDR Tor is a proxy. Entry and Exit nodes are the way in to the network. Once inside the network, a path through the network is negotiated, aka layers, hence onion

Data going to entry nodes is encrypted through the chain of keys of the layers of the path

Each step of the path, the data is decrypted a step further

[graceful saffron]

Yea side-channel priv esc in pentesting if guy uses tor

[halcyon flame]

When it ends at the exit node, it's then finally decrypted to the original traffic

Same goes with traffic ingressing back to the origin

[fading galleon]

[I need meds]... what is TLDR stand for?

[halcyon flame]

Nice idea, but again.. it is ultimately susceptible to high ownership of the network. Own the layers, own the traffic. Of course also owning the exit node means being able to sniff on the network traffic. Not so much of an issue if it's all encrypted like https, but it still gives metadata that is useful

Too Long Didn't Read

[graceful saffron]

Is the chain of keys 'web hook?' related management on the local device connecting to the Tor entry node?

[halcyon flame]

Sorry, out of context, kinda meant "this is the short version"

[fading galleon]

aaah oka

[fading galleon]

it was awesome... I just read a bit about it just now

[halcyon flame]

The chain of keys is negotiated by the client when connecting, and then decided upon through the network node by node. The chain of keys is decided by which nodes you connect through on the network. Tor nodes are publicly listed, and that is how a path through the network is decided

(over, very over simplified, but that's the idea)

I've a vide regarding Tor if you are interested from like 8 years ago, but still very relevant and interesting

It goes through what I've described in more detail, and obviously more accurately

[fading galleon]

interested

[halcyon flame]

https://www.youtube.com/watch?v=rwawq8PsozU

[fading galleon]

God Bless Ya

[halcyon flame]

Sorry, kinda took that conversation way off course hahah

[fading galleon]

heheh, nah its good

any knowledge is good/ m a sucker for knowledge

but I always pray that I understand it...

else, id sleep on top of my keyboard

[graceful saffron]

Yes you can also mess with cache to potentially infer about the chain of keys.. it's pretty complex

You've also got a middle node, whatever that is for

[left wolf]

anyone know how to pull ips??
I really need it and I got a reward for those who can

[halcyon flame]

Pull ips?

Like, chat up lines?

[fading galleon]

pull IPs?

[left wolf]

Yes

Grabing an ip...

[halcyon flame]

#📜・rules #1286135820008296509

[fading galleon]

I dunno what that means

[left wolf]

its for a good purpose

[halcyon flame]

I was trying to be funny @fading galleon - "pull" is to "hook up" with someone in British slang

[halcyon flame]

We don't know that.

[left wolf]

want me to tell why?

[fading galleon]

hahahahahaha gotcha

[halcyon flame]

To tell you why we don't know it's for good purposes?

[left wolf]

no what the purpose is

[halcyon flame]

You're the one asking for it, you know the purpose

What on earth is going on

[left wolf]

for me to tell you what the purpose goblin...

[graceful saffron]

You could play around with using protocol poisoning, SSL/TLS, MitM as well

[halcyon flame]

Got any references? Always curious to learn more on attacks on Tor

Did a load of research and detecting of malicious nodes years ago

[graceful saffron]

No these are just ideas, but I probably go decently deep.. I'm just learning about these topics myself haha

[halcyon flame]

Aha ok, no worries

[graceful saffron]

"Access all Tor nodes and then become Tor"

[left wolf]

I can dm you and you will know its not for bad purposes

[halcyon flame]

Just say it here, I don't accept random DMs

[left wolf]

its personal

[halcyon flame]

If it's personal, it sounds like it's likely against #1286135820008296509

[graceful saffron]

Do you know much about web stuff @halcyon flame?

[halcyon flame]

Know enough yeah

[graceful saffron]

You could teach me networking, and I teach you web

Tryna become a penetration tester eventually

[halcyon flame]

I don't have the time to teach, sorry 🙂

[left wolf]

There's a disgusting SO here that left my friend traumatized. I need his ip to use as a means to get him to apologize. thats it. so its very sentimental but its ethanical in a way

[fading galleon]

so, here's one more nooby question: India is ok with CEH-from EC Council... rest of the World - Comptia [et al] .... I bought some old books for Comptia A+/Network+/Security +... tried to go through them... but its all theory ... why is Comptia given preference? [no offense to anyone]

[halcyon flame]

And there we go. Speak to the authorities.

This is not ethical, even given the best intentions.

[graceful saffron]

That's not a real apology and that's not what we do here

[left wolf]

thats wack, you know they wont do anything. and i dont know any personal details about him so what can i say.

[halcyon flame]

We can't help, sorry

[graceful saffron]

A security officer?

[halcyon flame]

As I said, regardless of best intentions, this server is not for vigilante action, or unethical / illegal activities.

All you can do is to speak to the authorities, report what you know. It's possible your report could help to build a case, in case they have done the same to others.

Don't assume others will do the same, because if everyone assumes that nobody speaks up.

[graceful saffron]

Because of the certificate you get for each CompTIA Exam, proving you studied the materials which you can present to employers

[halcyon flame]

Same thing as shouting "dial 999" in an emergency. You need to tell someone directly, or everyone assumes someone else has done it

Kinda..

[fading galleon]

so doesn't that same thing happen for EC council??

[halcyon flame]

You wouldn't achieve anything with an IP address anyway

[graceful saffron]

IP addresses just show you their public IP

We cant help you but if you want to get into hacking as a hobby you should start with OSINT @left wolf

[fading galleon]

Thank you @graceful saffron and @halcyon flame , much appreciate your help

but I gtg now... just got off the night shift [IST].. now sleep deprived

[graceful saffron]

CEH is a multi choice questionnaire which is tailored to beginners, the book itself is useful, the certificate is pretty meaningless imo

[graceful saffron]

Alright, have a chill night man

[fading galleon]

I see what you mean

[fading galleon]

Thanks Man! I will ! Cheers again !

[graceful saffron]

Yeah so it won't help you get a job, although it will give you knowledge

[fading galleon]

hmmm..! I see your point

[graceful saffron]

CompTIA will, because the questions on the certificate are ambiguous and quite lengthy

[fading galleon]

Aowhhh!

[graceful saffron]

But good luck, you should first understand your learning path before getting into cyber security

[fading galleon]

absolutely ! 100% ... thats what I am trying to figure out night and day... someday I shall make it too

Slow But Steady !

[graceful saffron]

If you just want a role, then you need to train for that specific job opportunity down the line. Like SOC analyst, IT help desk, Network engineer, penetration tester, auditor, administrator, consultant etc.

Database administrator, hardware guy

[fading galleon]

nah, it's not just about a role... to me, deep knowledge of things matter a lot... I would wanna grow in CyberSec only.. vertical take-off

pen test is what I think is closest to what I have in mind..

end of road will be 'Red Teaming'... i mean . not End-End... thats the goal

[graceful saffron]

Yeah that's difficult because of the sheer amount of knowledge you need to know, however you can become a junior penetration tester with the right connections and certs.
What kind of knowledge are you starting with currently?

[graceful saffron]

Red teaming is sick

Threat emulation exercises

[fading galleon]

presently I am getting introduced to CEH things.. so learning various concepts and tools and so on so forth

building up a base

[graceful saffron]

You should watch some YouTube when you encounter a concept you don't know, use tryhackme and hack the box as well

Hack The Box is more advanced though, so maybe start with tryhackme

[fading galleon]

tbh, I am non -tech guy... but I am that fellow who will wake up from the dead and fight back... I was in HR for 17 yrs and made a switch three yrs ago into IT... all was thru self study.. so here I am

[graceful saffron]

Pwn.college is good too for ctf based exercises

[graceful saffron]

Welcome, yeah it's a neverending road

Especially with AI and all of that

[fading galleon]

thats wht I love about it... HR sucked anyway 😁

[graceful saffron]

What didn't you like about it?

[fading galleon]

reading resumes.... boring as hell

[graceful saffron]

Feed em into the shredder

[fading galleon]

there was a time when I worked as a Global head for a MNC... but the job entailed same thing... resumes/ salary negotiations/ bosses asking for a new strategy... giving employees the same crap wrapped in a new pkg

no fun

[graceful saffron]

Just make an RNG that picks 3 resumes from a folder then overwrite the other resume files you download over and over again.

If the resume looks good, then keep it, if not then run it again

[fading galleon]

i could call out a bluff n the resume by just talking to the guy who sat there claiming he was too good for the job

[graceful saffron]

HR speed running

How?

Are they bad or you just know how to access them clearly

[fading galleon]

how... well, if you have read like close to 3000 resumes in a month for all these years and talked to those people, you get a hang of it...

[graceful saffron]

That's a good combination of knowledge to have in a company setting

[graceful saffron]

If the resumes are too long, do you just throw them out?

[fading galleon]

you just know the guy is bluffing... e.g. I was doing an interview for an F&B org... the dude claimed to be Snr. Exec Chef... showed me his work on his laptop... all fancy... big resume.. called himself expert in Italian

5 Mins into the interview... I understood

[fading galleon]

no... I hv treated every resume with respect. maybe the guy doesn't know how to make resumes, but he has worked for it...

[graceful saffron]

https://tenor.com/view/typing-keyboard-funny-lol-gif-17582856

[fading galleon]

hehehe

[graceful saffron]

Professional right there

[graceful saffron]

That's actually cool, I think that's a good way of going about it.. Now AI would be a pain compared to 3 years sgo

[halcyon flame]

Kudos

I'm sure it can be hard for teams when dealing with high volumes.. but it's the least that can be done

Never know if you are passing up a diamond in the rough if you don't at least give a few minutes of your time to seriously read a covering letter and CV. Some people are so skilled.. but not in all things, like written communication

When you spot someone, and when you see them through, join and flourish.. so awesome.

I leave recruitment and interviewing (for the most part) to those better than I 😆

[fading galleon]

well, ideally when a person says he's expert with Italian food... I ask two opening question... 1. what 'is' Pasta? .... 2. how many pages are in HACCP describing the making of Potato fries...

and thats it

[halcyon flame]

I find it hard to get a read on some people, and it's bitten me in the arse a couple of times.

[fading galleon]

I have given time to every single person who presented his/her resume... selection is secondary

🫡

[graceful saffron]

I'd say "pasta is delicious, I'll make it up for you in the kitchen, you'll love it 😋" and "I read the content not the pages, but I can show you"

[fading galleon]

yeah, to Err is Human... guess it applies to both sides of the table

[fading galleon]

selected !! 😁

[graceful saffron]

Ayee 🕺 🍻

[fading galleon]

okay.. i really need to wind up now

good talking to you both!! will catch up

ciao!

[graceful saffron]

For sure man, have a good night

[graceful saffron]

What type of services are you recruiting in?

[halcyon flame]

Many departments, would be quicker to paste the link - is that allowed @chilly merlin ?

[turbid flume]

yeh

so long as it's not a discord invite it should be fine (or like a scam / phishing link)

(it gets auto sniped)

and you get timed

[halcyon flame]

Trial defender, trial mod?

[turbid flume]

yeh

same thing

[halcyon flame]

Cool cool https://apply.workable.com/hack-the-box-ltd

👆 @graceful saffron

[graceful saffron]

Alright sweet, I'll check it out

Gotta love hack the box

[halcyon flame]

Thanks 🙂 Still find it crazy what it's grown in to. Just wish it was around when I was learning as a kid 🤣

I mean, I'm still learning

but it would've made things easier hahah

[turbid flume]

(just checked, trial defender is the role before defender, only trial we have)

[graceful saffron]

Oh man, well you've done a great job at giving what you wanted as a kid to everyone else

[graceful saffron]

Are any of these remote?

[halcyon flame]

You can filter by location type, but generally roles require a certain locality due to part of the role

Remote in this case usually means "not Greece"

I don't think there are any truly remote roles at the moment, as in areas not listed in the current locations under remote workplace type

We try to hire people in areas where we already have others team members near by, even if we don't have an official office space there right now. Full remote, we have a few in that position (myself included, apart from when I go to Greece for certain meetings), but we try again to hire near by other team members in order to ensure some sort of connection with the rest of the team that's not just a webcam

[graceful saffron]

Ohh I see, that makes a lot of sense, I've taken a look at the MSSP job offering posted a few months ago and it looks interesting, although it may not be the opportunity I'm working towards currently

Although I'd highly recommend it to anyone else looking to expand their horizons.
I'm just looking for more of a researcher role if that makes sense

Like I'm confident in my SOC concepts, Confident in web penetration testing, getting better at network engineering, understanding different protocols, forensics, IR, regulations, frameworks, development, hardware, languages and directory structures (which I'm getting better at), protocols, automation, Linux and windows tooling and hooking, etc

[halcyon flame]

Yeah, makes complete sense

[graceful saffron]

Yea, so I might just try and harness it to become a bug bounty hunter

The problem is that, I'm not the greatest with mobile yet

It would be good to collaborate together with someone to achieve a higher tier vulnerability

Or it may help for attack vectors and scope management

[graceful saffron]

I'm wondering, what was your original idea when it came to HTB?

Expectations vs reality?

[halcyon flame]

I joined after it was started - ch4p was the original founder, but the aim was to have a middle ground between the complexity and non-realistic scenarios seen within CTFs, and the high cost of industry accepted certifications.

He wanted somewhere to practice himself, and HTB was the result

[chilly merlin]

Sadly they don't have any jobs in India

[graceful saffron]

So expectations were a middle ground focusing on the ways an attacker thinks and they executed it perfectly

One misconception a lot of people have about hacking is that everything works the same, it definitely doesn't

[chilly merlin]

I got scammed $900 through Apple Cash I only have the scammers numbers(s) what do I do? I reached out to my bank, Apple, and the police and still no help but I filed a claim with FTC

[spiral notch]

There's nothing more you can do

Just hope

We can't hack accounts for you or help you in any other unethical or illegal activities

So just learn from your mistakes

[oak quarry]

Hello everyone

[gaunt comet]

Hello

[oak quarry]

Is there any way I can use Kali Linux on my browser without having to install it on my virtual machine or my pc

[gaunt comet]

yeh there are services that provide virtual boxs on ur web broswer

[gaunt comet]

or u could just use a vps

[oak quarry]

wow that's good.
please name it

[gaunt comet]

AWS, google cloud, microsoft azure. there is definitely others.

[oak quarry]

Thanks Chief

[strange tinsel]

Please how can I setup a VPN

[spiral notch]

What vpn?

Just download

[little pike]

Yo im tryna nmap my Metasploitable i have connected them to the same ip and set everything up it still doesnt show up all the operating system and stuff can someone help a brother out?

i cant see any of the networks services available and stuff

i did nmap -sV -O -and the correct port

it still doesnt show up tho

[gaunt comet]

Are you running the metasplotable on a VPS or on ur home network?

[little pike]

home network

[gaunt comet]

On a serpate machine? or in a VM?

[little pike]

vm

[gaunt comet]

ohh intersting, there tends to be problems with creating a metasploaitble within a vm, especially when trying to run nmap scans etc, this tends to be caused by a lack of isolation. It would be best to try and create a metasploitable environment on a seperate machine or on a VPS. Are you using virtual box?

[little pike]

yes im using virtual box and wdym by a seperate machine like another laptop or smth?

[gaunt comet]

yeh exactly, but i could still try and help with the vm if you would like

you need to make the vm an actual device on your network, this requires some configuration on virtual box.

[little pike]

are you down to this a little later

ill share my screen

[gaunt comet]

@little pike unfortunatley i wont be on later, but im sure someone else who is knowledgeable can help! This link might be usefull aswell (Its official virtual box ducmentation on how to bridge your vm): https://www.virtualbox.org/manual/topics/networkingdetails.html#network_bridged

[spiral veldt]

can anyone help me with vpn

[little pike]

Alright thanks a lot ill go through it as soon as I can thanks a lot

[little pike]

Whats up

[gaunt comet]

All goods boss!

[gaunt comet]

sure, watcha need help with?

[little pike]

♥️

[spiral veldt]

i need and vpn login that i can use

[gaunt comet]

What do you mean boss? like u need an account?

[spiral veldt]

yes

[gaunt comet]

Why dont you just create one?

[chilly merlin]

Check pins in #😈・pentesting

[spiral veldt]

i can create i still need to sub so that why i need login

[chilly merlin]

[gaunt comet]

nothings free amigo

[spiral veldt]

okay amigo

[gaunt comet]

if you're worried about leaking your IP, you can use TOR, which is actually free

[little pike]

I am trying to scan my metasploitable machine with nmap and it shows all that all ports are filtred, more specificly:

All 1000 scanned ports on <here i took out the ip adress> are in ignored states.

Not shown: 1000 filtered tcp ports (no-response)

Nmap done: 1 IP address (1 host up) scanned in 201.41 seconds

[inner pine]

Bruh my dad clicked on a ad in Facebook and it said his Facebook account was close to being suspended and made us call this number but it seems like a total scam

I don’t know if it was real or not since his acc works now

[upbeat veldt]

Sounds like a scam ngl

[upbeat veldt]

What was the the nmap command you used?

[little pike]

nmap -sV -O and the ip

i tried -sU too

same result

[upbeat veldt]

So just a version and os scan 🤔 you could also try -p- to scan all ports Incase the exposed port is not in the top 1000..

Or maybe try adding -Pn if it's a windows machine

Or if scanning all ports is taking too long you could also try something like https://github.com/dievus/threader3000

[little pike]

so then id have to do nmpa -sV -O -Pn and the ip?

the other person told me to "you need to make the vm an actual device on your network, this requires some configuration on virtual box."

im not sure how to do it tho

[upbeat veldt]

Yes that's correct

[wild ferry]

I have a question regarding network interaction via VPN in my case. My college uses Sophos as an internet solution, which requires us to login using a username and password. This happens only when the college allocated DNS is used to access the portal. If other DNS is used, it simply does not work. When I connect a VPN, it uses its own private DNS, which results in the connection being dropped after 3 mins or so. I did a workaround through it by letting their Client Auth Agent (a client installed in my system to auto login to the network) bypass VPN. I am not exactly sure how this interaction would work. It works, but I just want to know if my college will still be able to see the sites I go to? Essentially it's doing something like this to my understanding.

Other Apps <- VPN <- Internet provided <- (Sophos Client -> Authenticate Internet)

[little pike]

Alright ill check it out in a bit

[upbeat veldt]

Ahhh that makes sense you will most likely want your metasploitable on an isolated part of your network that way you don't expose the VM to the internet. And then configure your Kali machine so the 2 can communicate.. let me find a link to a YouTube video that will walk you through this

[little pike]

alright bet ill prob need the link

[upbeat veldt]

https://youtube.com/watch?v=mvsiuLzpx2E you want the isolated network part

[little pike]

alr thx

[fleet flare]

VirtualBox - Error In supR3Hardened WinReSpawn
NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries) (rc=-101)
Make sure the kernel module has been loaded successfully.
where: supR3HardenedWinReSpawn what: 3 VERR_OPEN_FAILED (-101) - File/ Device open failed. Driver is probably stuck stopping/starting. Try 'sc.exe query vboxsup' to get more information about its state. Rebooting may actually help.

can someone help me with this

it happened after I updated VirtualBox

[little pike]

1 sec i know the fix

can u vc?

[fleet flare]

I found it thanks just restarted my pc but I have other problem

[little pike]

uh

it takes more than that

[little pike]

C:\Program Files\Oracle\VirtualBox\drivers\vboxsup

[fleet flare]

I installed guest additions and since that the clipboard didn't' work it was working before that and the drag and drop is not working also

[little pike]

go there right the vboxsup.inf fille and click install

[little pike]

i dont know abt that mb

[fleet flare]

it is making me crazy

[little pike]

bro u gotta mentor like me

igot my pookie zoro

@karmic leaf

my goat

🤑

[karmic leaf]

😭

[fleet flare]

I didn't get what exactly do you mean but I hope that @karmic leaf can help me

[little pike]

😭

na

[karmic leaf]

Well i surly can not.. i wont say that im just starting because im not and dragging myself all the way down to "what does ls do in terminal" wont be it for me.. for my level or a bit lower than me yeah sure i can help with stuff like ctfs or maybe trying to code malware or any programming language but i dont think i can do it like that..

[little pike]

hes only mine

[little pike]

bro lwk

i gotta hack into my ipad

cuz my dad keeps taking it

and i keep sus stuff in it

[fleet flare]

oh oh

[little pike]

my entire gallery is just pictures of my misses so like i gotta hack into it and deny him access whenever he tries to go on there so

[karmic leaf]

😭

bro 😭

[little pike]

not sus like that bro

its only pictures of my girlfriend

[fleet flare]

ah ok

[little pike]

but he doesnt know yet uk

😔

idek if he uses it

he changed my password on it too

[fleet flare]

what it is girlfriend?

[little pike]

the thing is attached to me tho it has my gmail allat i just gotta control over it on my pc

[little pike]

its a app thing

[fleet flare]

this is weird isn't it is your Ipad?

[little pike]

u do sudo girlfriend --rizz

[little pike]

but like he doesnt want me to use the ipad too

idk why

[fleet flare]

you installed linux on the ipad?😂

[little pike]

😔 yes i needed to use the girlfriend app

[chilly merlin]

[fleet flare]

and what is the repo for that is it school or university or what?

[little pike]

friends friends

[fleet flare]

how to add this repo so I can install the app?

[swift iris]

can someone help me test for server-side parameter pollution in a query string??

[little pike]

uh sudo install girlfriend

might work

just check and lmk

[winged fern]

Places to read news? Onion?

[fleet flare]

yeah it worked just needed sudo apt update thanks

[little pike]

😘 ur welcome

[fleet flare]

you deserve ⭐ ⭐ ⭐ ⭐ ⭐

[little pike]

❤️ @karmic leaf see this

u should teach like this bruh instead of watching me suffer

[fleet flare]

yes we will be in a better world if everyone is like you!

[little pike]

😔

[chilly merlin]

https://tenor.com/view/caseoh-curt-idk-food-hunger-gif-5357725025351395900

[fleet flare]

when I have kids I will tell them that you should be like this guy

[little pike]

thats great bro ill tell them abt what a great guy u were too

lemme go back to studying i feel bad rn

[fleet flare]

yeah you should

[little pike]

fr

[karmic leaf]

fr

[maiden violet]

What’s that?

[maiden violet]

You can’t do that

[fleet flare]

yes I know t

apple locks every thing

[maiden violet]

You can do it on the older ones

[maiden violet]

Not everything

Macs are open

[fleet flare]

just use their software

[fleet flare]

so you can you do dual boot

or install other software?

[little pike]

BRO

im gonna rage

https://www.youtube.com/watch?v=mvsiuLzpx2E

@tr

@upbeat veldt dint work

thx tho bro

[little pike]

its a joke

[little pike]

it was a joke

bro

im so tired bruh

im actually sad bruh

i gotta figure this out before i sleep

i got 40 min left

[karmic leaf]

haha

[karmic leaf]

rip

[little pike]

bro

i think i figured it out

i got them on the same 127. ip adress

lemme check

[karmic leaf]

127.0.0.1 is your local ip

[little pike]

BRO

its

pinging

dms

i wanna curse to express my excitement rn

[fleet flare]

can someone help me installing guest additions in VirtualBox on kali linux or give me a resource he used and worked with him?

[chilly merlin]

https://www.kali.org/docs/virtualization/install-virtualbox-guest-additions-on-kali/

[fleet flare]

I will put this in virustotal first

[maiden violet]

Hello red boi

[fleet flare]

404!

[maiden violet]

https://www.kali.org/docs/virtualization/install-virtualbox-host/

https://www.kali.org/docs/virtualization/install-virtualbox-guest-additions/

[chilly merlin]

https://www.kali.org/docs/virtualization/install-virtualbox-guest-additions/

[rapid current]

Guys I need to unlock my modem. Any help

[halcyon flame]

Chips arrived @sturdy lance, 7 days delivery my arse. Gotta dig out my electronics gear from the boxes in the garage now to find a USB/UART bridge in order to get it wired up. Still not expecting them to be actual C5 modules, but who knows 😆

[vernal viper]

hi

can i get help

[spiral notch]

hi

what help

i dont look nor answer to dms

this is a channel for a reason

[vernal viper]

the problem with openvpn

dosnt work

when i try to connect to my tryhackme vpn file

[halcyon flame]

THM probably have their own support, right.. but, copy and paste the errors from the log - you don't need to provide a screenshot.

(also here there's #1014044825512849498)

Why not?

The error message from openvpn

Not from Discord

If your message is being deleted, it probably has too many repeated caps in. Post the log on pastebin or something

or as a GitHub Gist

[vernal viper]

how

[halcyon flame]

or speak to THM support

[vernal viper]

😭

ok

sudo openvpn name.ovpn
2025-02-03 19 40 14 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
...... Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
........ Note: '--allow-compression' is not set to 'no', disabling data channel offload.
.... OpenVPN 2.6.13 [git:makepkg/5662b3a8eb9e5744+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jan 15 2025
.... library versions: OpenSSL 3.4.0 22 Oct 2024, LZO 2.10
...... DCO version: N/A
... OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
... OpenSSL: error:0A080009:SSL routines::PEM lib:
.. Cannot load inline certificate file
......... : Exiting due to fatal error

the problem with time repet alot of times

[spiral notch]

we're not your slaves..

[vernal viper]

?

[halcyon flame]

lol

Yeah.. go speak with THM support - we can't help you with this

[vernal viper]

ok ok ime sorry

[halcyon flame]

It's a problem with your configuration file

[vernal viper]

@spiral notchimean i fix the discord problem not the openvpn

Do not be upset with me

[halcyon flame]

If your message got blocked, it was for a reason

Making demands of people who are trying to help.. not a great look my person

Anyway, good luck.

[vernal viper]

I say you that the problem was because of the time returning more than once

[halcyon flame]

🤷‍♂️

[vernal viper]

Sorry if you feel bad

[halcyon flame]

I'm fine, just giving you a heads up. Try to be polite, not demanding ey

Much more likely to get help then

[vernal viper]

bro the translate on discord so bad

[fleet flare]

I tried this https://www.kali.org/docs/virtualization/install-virtualbox-guest-additions/#virtualbox-guest-x11, and the drag from the guest machine to the host does not work. Also, I can't drop files directly onto the desktop—I have to open Thunar first and then drop the file inside. Any ideas on how to fix this?

[wild ferry]

bump

[spiral notch]

Dont think anyone here has experience with that. I also often have issues with our schools network restrictions

I suggest just read the docs

Find a work around

What I tried to do

[wild ferry]

I have already found a work around, which I have mentioned. I wanted to know if the work around is secure or not

[spiral notch]

Safe as in undetectable?

Apologies, I misunderstood your question at first

[wild ferry]

Safe as in if my traffic is not exposed to college servers with the work around.

[spiral notch]

Using a VPN, since that unblocked your websites, it means the von network is prioritized which would most likely mean it's safe

However is it your own laptop or the wchool laptop?

They could've installed foreign applications like spyware

[wild ferry]

Own

[spiral notch]

If you let them double click anything

Then there's no way to be 100% sure

[wild ferry]

Ah, no one has done anything to my laptop. It's just the firewall they use for the dorm wifi

[spiral notch]

Yeah a vpn should be fine then

Prevents any mitm attacks and arp spoofing

[grave vector]

I am new to cybersecruity I am 14 what do I need to learn

[spiral notch]

#👥・new-member-guide

[grave vector]

Thanks

[spiral notch]

no worries

[grave vector]

Is try hack me free ?

[fluid ore]

Where can i learn my sql for ethical hacking

[spiral notch]

Yes

[spiral notch]

Just sql? https://w3schools.com

[true lark]

Apart of it free

[true lark]

Portswigger is good place

[urban estuary]

hello friend good day sorry the mailer you give me isnt helping i tired to make payment

its not working

[halcyon flame]

What?

I didn't give you any mailer

Oh.. you mean those services

Whether or not you can purchase them, sorry that's not something I can help with

[eager knot]

i feel like there's something i'm missing, i've just finished my hacking college and got my associate's degree
later on i've been practicing very little at hackthebox mostly, since i see it fitting for the type of study i want to go through (not strictly web pentesting)
i have a fair amount of knowledge when it comes to tools and the use of certain libraries in python in which i've also mentioned in my resume
i've been applying to jobs, many jobs that either are at entry level or require experience (i know i have none but we can never know)
i have been applying for 3 weeks, i know it's a very little amount of time but i feel like there's something i'm doing wrong
in what field should i try and start with first despite my academic studies? do you think companies who hire for positions like soc analysts would care for help desk experience?

[upbeat veldt]

Yea I'm sure various different jobs could translate into something useful in the field, it all depends on how you word it. You could try to tailor your resume to reflect the job description you are applying for. Say the company is looking for someone with experience in XYZ, if it's a true statement for you then reword it a little, proficient in XYZ etc etc... Go through a bunch of different job posts for that type of position and pull out bullet points that you are capable of doing... Create a list now you have a template for that specific job title... Then shoot your shot..

[upbeat briar]

if you would ever be willing to VC, i can give you some general employment advice as straight forward as i can put it that may be of use to you for the position you're in right now

[upbeat briar]

this is really good too

[eager knot]

thank you for the straight forward advice!
i'll try and find a way to make editing the resume in such method easier, since editing it and saving it each time as a pdf can be a bit too much for each job application, maybe if i could make more templates of my resume for various pre-planned purposes i can make something like that happen, is that what you had in mind?

[eager knot]

i could use any help i can get honestly, so i'd be willing
i can ping you (if it's allowed and you have time) whenever i am available to be there if that's ok by you ofc

[upbeat briar]

fs take your time

[upper heart]

i lost my password to my oracle vm can i get it back

[snow mauve]

Alright man
My job
Reply DM

[upbeat briar]

How do you personally handle the internal debate of when you’re ‘allowed’ to call yourself a hacker? I find myself struggling to feel entitled to any sense of pride in my knowledge because it feels like there’s always another level I haven’t reached yet. Do you think there’s a defining moment where someone truly becomes a hacker, or is it just a mindset? Can you only consider yourself one if you’ve learned a certain way, have done XYZ amount of things?

I find when I do get the motivation to study and perform my CTF’s & Boot2Roots, I feel unstoppable and my calculated progress expanding. Feeling like I’m thinking outside the box and actually accomplishing what I want to do is exciting. But then moral dilemmas come back when I realize I may only be on the 10th step of the 10,000 step ladder that other people are already at, and therefore don’t deserve to feel pride in what I’ve done, or the way that I do it.

[halcyon flame]

It's not like being a lawyer, passing the bar. Being a hacker is a mindset. Sure, perhaps you don't know as much as someone else, but nobody knows everything. If you have the drive to grow, the desire to make things work the way you want, not the way they should, to patch things together to work as greater than the sum.. if you are inquisitive, curious and realise that nobody knows everything - that we all start somewhere

You're a hacker

You can be a child with a set of lego making something great, and be a hacker. Someone who makes something work to better their life, even if it wasn't intended to work that way, a hacker. Pentesting, programming, endeavouring to always grow and to use your skill, persistence and knowledge to adapt not only yourself to your situation, but the tools and materials you have available as well.. hacker

Hacker isn't a check box. It's a way of thinking.

[halcyon flame]

Is it a password for an encrypted disk, for the BIOS, what?

For the OS itself?

If it's for a VM of yours and it's just the root / user password you've lost, there's an easy way around that.

...so long as the disk is not encrypted..

[upbeat briar]

thank you for the wisdom, insight and encouragement, i sincerely appreciate it

[light skiff]

Hey guys I need help from someone to get emails of 2 gmail accounts opened on an android phone i think. Can anybody help me pls pls pls?

[upbeat briar]

services are not provided in this community. enthusiast conversations only

[gaunt comet]

#1286135820008296509

[little pike]

yo any tools for control over my brothers laptop to troll him?

i wanna just bug him out over and over i can have remote access to his laptop that isnt a problem but like how do i do it

[chilly merlin]

teamviewer ☠️

[halcyon flame]

And this is where the saying "brotherly love" comes from

[gaunt comet]

if he is connected to ur local network, u can remotley shutdown his computer from cmd, fun lil prank

[little pike]

alright thx a lot

[gaunt comet]

all good!

[light skiff]

How much is this access limited to?

Can i get into the emails & stuff too?

[gaunt comet]

generally speaking no

[light skiff]

Is it possible in any way?

[gaunt comet]

do you mean from cmd? or exploiting a computer?

[untold pecan]

Same

[light skiff]

Idk what’s a cmd but yeah a computer that’s miles away

[gaunt comet]

sounds like a case of imposter syndrome

[gaunt comet]

yes its definitely possible.

[untold pecan]

I remember one website, where it would show fake windows update. Good enough to troll him.
Open the website and let him wait for several hours

https://cdn.discordapp.com/emojis/1311351427490254969.gif?quality=lossless&name=popcat_hyper&size=48

[light skiff]

Can anybody teach me this pls

[little pike]

😭 i did it on him before

he was stressing

[light skiff]

Lmfao

[gaunt comet]

#👥・new-member-guide

[gaunt comet]

u can also dos urself 😂

thats a fun lil prank

[light skiff]

Can u help me out? Pls

[light skiff]

I sent u a dm

[gaunt comet]

u can ask questions here homie!

[light skiff]

How do i do it?

[light skiff]

This didn’t help fosho cuz

[chilly merlin]

check ss64

[light skiff]

Where

[chilly merlin]

google

[light skiff]

Can anybody do it for me pls? The latter. Asap

[upbeat briar]

Sir yes sir

That’ll be 5 ring pops

I accept shipping

[light skiff]

I genuinely need help

[crisp star]

Just ask

And you shouldn't DM people for obvious reasons. Too many scamers.

Just like this person who has in his Bios that he's offering recovery and hacking services. That's going to be 99% a scam

[light skiff]

Some body PLEASE help

[gaunt comet]

help with what bro, ask the question?

[crisp star]

https://dontasktoask.com

Just ask?

[chilly merlin]

like a somebody someone help him!! 👊 🚨

[gaunt comet]

maybe he should just ask?

[crisp star]

Maybe he doesn't know how to ask

[light skiff]

I need remote access to a device far away

Ive asled twoce by now this is 3rd

[crisp star]

That doesn't sound like it's a device that belongs to you.

[light skiff]

It has my info

[gaunt comet]

#1286135820008296509

[light skiff]

Not that ive done anything wrong rather i was wronged

[light skiff]

?

[gaunt comet]

brother, read it

[crisp star]

It's a yes or no question. If it's a device that doesn't belong to you, you don't have the right to get access to it.

[light skiff]

It does belong to me

My emails r there

But used by someone else now

[crisp star]

[light skiff]

God

It’s too complex

[crisp star]

it's not

[light skiff]

If anyone can help pls dm me

Even if i gotta pay

[crisp star]

you only getting scammed

[light skiff]

It is u don’t know the actual reality

[crisp star]

I do.

[gaunt comet]

this aint the server for that kinda of stuff homie

[light skiff]

How about teaching ne then?

[light skiff]

Ok well then u can tell me which server is

[gaunt comet]

google

[crisp star]

My teaching is always the same.

1. Don't click on suspicious link
2. Don't download suspicious applications
3. In case your account got compromised, restage your device and then change all your passwords.

[gaunt comet]

thats a pretty good server

[main wren]

Hey I'm trying to disassemble an exe using Ida free but the task is to find the cryptography algorithm used but I'm not good with assembly if anyone can help then much appreciated

Like I got the session key and the public keys but idk how to find the private key and I'm pretty sure it's Diffie Hellman algorithm 😭 but idk how to find the private keys

[crisp star]

in what language was the app written in?

[main wren]

Umm I'm not sure, tbh this is the second time professor asked us to use Ida free but he didn't really explain much. Like finding passwords was easier than this. Though I managed to find some information but need to know how to find the private keys

[crisp star]

https://github.com/horsicq/Detect-It-Easy

It's important to know the language and / or the compiler that is being used.

Because if it's written in something like Go it's going to be a bit different

[main wren]

Okay I'll let you know in a couple mins

Yeh that's true

But this is probably C, C++

[light skiff]

Not helping man

[light skiff]

Which

[gaunt comet]

google

[main wren]

It's a pe32 btw @crisp star

[light skiff]

If u can’t help y even bother shitting

[main wren]

Written in C++

[gaunt comet]

lmao

[viscid adder]

Learning a process is not a problem but the usage of the process.

[crisp star]

Can you see a function related to something like encryption?

[main wren]

Checked through functions but nothing says encryption or anything but I could maybe send the main function's contents

[crisp star]

can you even see the function name or are they all stripped?

[main wren]

Yeh I can see the function names

[crisp star]

Well that's good than.

Have you considered that this could also be just a XOR encryption?

[main wren]

Um nope the filename says

DH-modified-last

So I thought it could be related to Diffie Hellman

[light skiff]

The usage is my problem none of u would object if u were in my situation calm ur horses down @gaunt comet

[crisp star]

but your only task is to figure out which encryption has been used?

[main wren]

Yeh and the private, public and shared session keys

[gaunt comet]

lmao, im 99% sure if u knew how to exploit someones computer you would do it for unethical purposes, thats why we dont entertain ur questions.

[viscid adder]

Fact ✅️

[crisp star]

I probably need the file to help you further. But maybe you can look for strings. Since it's a university / school task it shouldn't be too complex.

[main wren]

Like I searched in string too but couldn't find "private" string

[crisp star]

Maybe it has a different name

[main wren]

Hmmm yeh could be

But

[crisp star]

You could also use tools like Floss. But I doubt that's going to be something they expect you to use.

[main wren]

Yehh this work only requires Ida

Okay so it says

.text:00941130 call    sub_941200
.text:00941135 add     esp, 8
.text:00941138 mov     edx, [ebp+var_C]
.text:0094113B push    edx
.text:0094113C push    5
.text:0094113E call    sub_9410A0
.text:00941143 add     esp, 8
.text:00941146 mov     [ebp+var_8], eax
.text:00941149 mov     eax, [ebp+var_8]
.text:0094114C push    eax
.text:0094114D push    offset aBobSendsAliceT ; "BOB sends ALICE the session's public ke"...
.text:00941152 call    sub_941200```

[crisp star]

Ah the alice and bob story

[main wren]

Just a portion of the main function

Yes

So it's probably Diffie right

[crisp star]

Yea

[main wren]

Yehhh but how to go further with identifying the keys that's the question mark here

I got the public keys and the session key by using the breakpoint properly so it showed

[crisp star]

what happens if you just run the application?

[main wren]

When I run the app it quits itself but if I use a breakpoint it pauses the operation

So I can view the output

Like it's supposed to just show the public keys and the session key so quickly and the app quits itself

[light skiff]

Bro talks like u r 1 of em. Listen I wouldn’t be joining this discord, make a discord account just for the sake of asking help for this if I wasn’t this troubled. U guys do ur regular time wasting shit here but im here for a purpose. Which is not illegal but i need some proofs prior to proceeding. @viscid adder fact check ur asses bro. What’s even wrong with people these days? I really wish the worst be upon u 2 from the bottom of my heart to not even want to hear out my story. I sincerely curse u for the humans u r

[gaunt comet]

brother, no one on this discord is gonna teach you how to hack into a computer that you dont own. simple as that.

[light skiff]

Who tf said i dont own u dumbful

[viscid adder]

Aight.
Tell me your story, I want to hear.
DM

[light skiff]

What’s with mockery among u people? U can’t shut quiet if u can’t help?

[gaunt comet]

Whats this then?^

"far away" 😂

[viscid adder]

LMAO 🤣

[crisp star]

It's more that your story doesn't sound like it's in good faith. You ask to get access to a remote device that you don't own, just because your account got hacked?

[main wren]

Do you want me to send the pics for you to see the text properly if you could help

[crisp star]

I probably need the file to even help you. But I don't have a Pc right now.

[main wren]

I see oof

Um will you be able to help me later when you have a pc if I send you the file?

[crisp star]

it depends how tired i am after work

[main wren]

Oh okay

Thank you still

I'll be sending the file, if possible please review

[crisp star]

you could also join a reverse engineering discord server

[main wren]

Any recommendations?

[crisp star]

Just google Reverse Engineering Discord server. There should be one with about 18k people.

[main wren]

Oh okay

[crisp star]

Also make sure you read the rule in here.

[main wren]

Okay

[upbeat briar]

Any cool/interesting post-root tools to play with?

[plucky shoal]

Hello guys i m beginner for cyber security and i don't know how can i start can u help to what i want to learn

[viscid adder]

#👥・new-member-guide
You can begin here.

[torn tapir]

could you use a different audio player using a type 2 hypervisor on a computer with hardware that only uses a bad default software?

since you can set the input and output

[light skiff]

Apparently the device has been moved far away so that i cant access @viscid adder what’s so fun about laughing on someone who’s the victim of a criminal case asking people for help?

[gaunt comet]

https://tenor.com/view/bruh-meme-gif-26978290

[halcyon flame]

I mean if it's already far away and you don't have remote access configured, you're kinda out of luck @light skiff :\

The only advice I can give is to cooperate with the authorities. If you know where the device is, work with them, do not attempt to recover it yourself. You never know who you are going to run in to, and what they may be willing to do.

[olive tapir]

🙂

[woven karma]

Anyone with any ideas on how get through to this company?

https://vsys.host

they have so many websites that are stealing my copyrighted work and they do not answer abuse emails… it is basically a safe haven for online thieves

[sweet knot]

Does anyone know what is the solution if bot attacks like dos and d dos are being performed on youtube lives??

[spiral notch]

Ddos attacks can't be performed on yt live streams

[sweet knot]

Okay

Like the views are going from 15k to 80 k and then coming back

Is there any solution??

[spiral notch]

Those could just be raids and such

[spiral notch]

Add better anti bot protection

If they're spamming your chats

If they're just viewing, you can't do anything, I don't think there's any point in doing anything either

Why wouldn't you want more views if it doesn't bother

[sweet knot]

Its a channel that is for students for preparation for exams and next week we are having the exams

Like the mains

So somebody is spamming like bot viewers and making fluctuations

Causing them to stop the live classes

[sweet knot]

Is it possible so for YouTube lives ?

[sick leaf]

I've been messing around with the Wifi Nugget (esp8266). Does anyone have previous experience?

[main wren]

if anyone can help me with the reverse engineering please, I have tried the best to understand but it's very new for me. The questions I asked are here

[little pike]

Im trying to set up a proxychain and i did the steps shown in this video https://www.youtube.com/watch?v=KWwOU1z5E8E&t=465s and i watched like 3 other videos same thing and whenever i tried checking my ip it was never liked masked or anything and even when i did the proxychains wget -qO- ifconfig.me command the only ip i got back was mine and so im sure it dint work if anyone is free can someone just help me out https://media.discordapp.net/attachments/1335257626698842236/1336402385920196680/image.png?ex=67a3ad35&is=67a25bb5&hm=35e9e654f40bb670758d59f4c1cbd43c12e1469bb030151f3cbe05a59563e27f&=&format=webp&quality=lossless&width=727&height=227

thats the thing that has shown up

i watched network chucks video too

and an0n Ali's video all of them were on this topic

the results were the same as they all do the same thing more or less 😔

https://media.discordapp.net/attachments/1335257626698842236/1336393144144760932/image.png?ex=67a3a49a&is=67a2531a&hm=9541020fd4fc361db397d2354650cc82171f40073054da4158bcde83c6acdfaf&=&format=webp&quality=lossless&width=1440&height=657

this is a clip of what i did

dynamic chain is on proxy dns is on and i tried it out again

https://media.discordapp.net/attachments/1335257626698842236/1336403847538802688/image.png?ex=67a3ae92&is=67a25d12&hm=f3dfcd93c9640833bf6e55d349c8bee09108c3ceebcd8d352cd0a0cdf28cd2dd&=&format=webp&quality=lossless&width=1440&height=621

[steady bay]

I need help with something

[spiral notch]

What's up

[steady bay]

I'm having some issues to open or active apache2.service

On kali linux

[jaunty tiger]

Hello everyone , Please am new here someone should help me with coding, where can I start from

[cobalt mantle]

youtube
google
websites with challeges on specific topics can help you get better

idk

you can do so many things

[uneven eagle]

what path do you wanna take

and what languages u wanna learn

[flint galleon]

There are a lot of good tutorials on YouTube (just make sure you make smaller unique projects without tutorials, so you won't be lost in the tutorial hell). Also there are pretty great paid courses on Udemy in various themes but you can skip those, you don't have to spend money. There is FreeCodeCamp.org and their YouTube channel (which is extremely useful) and also every programming language and everything related to programming has documentation, which can be bad sometimes but still is a useful resource.

You also have to choose a programming language based on what you want to achieve with coding. For example: web dev, app development, game dev, etc.

[indigo panther]

So I got my Minecraft account got hacked about an year ago, is there anyway to get it back? And also they somehow locked me out my of own computer so I can’t even log into my own computer, like when I put in my password I can’t log into my computer, can anyone help me with this?

[azure finch]

Yeah definitely not

At that point I’d just wipe your computer

[earnest hedge]

account's done for. wipe ur system

[merry nexus]

fresh os install solved

[azure finch]

Yeah you’re cooked lol

[earnest hedge]

maybe some scope of data recovery if u try scavenging ur ssd/hdd externally but i wouldnt poke around there anymore cuz

well ur cooked

[tight silo]

Hello everyone , Please am new here someone should help me with coding, where can I start from

[earnest hedge]

id say start out with platforms like freecodecamp/boot.dev.
starting language should be c/c++ or java (in my opinion)
once u get thru the basics (statements, conditionals, arrays, functions, loops, pointers), i'd say move on to data structures like stack, queues, linked lists etc.
leetcode/codeforces for practice

[tight silo]

Ok thank you.

[strange tapir]

Can someone help me with link where I can check if website is fake or real please??

[naive wharf]

Hello! Odd question but is there any way to see a deleted image or video in discord messages? The internet hasn’t been helpful unfortunately

[slim basalt]

https://lookup.icann.org/en

[slim basalt]

Nope not unless your a server owner or your using better discord with the MessageLoggerV2 plugin

[naive wharf]

And I'm assuming It can't show me something from like a year ago right?

[slim basalt]

nope it would have to be something after not prior to installation

[naive wharf]

Darn. Ah well thanks anyways

[chilly merlin]

So this is basically for identifying if whatever website or links is a physing attempt, scam or if it's actually legit ?

[slim basalt]

Well a phishing site should be fairly easy to recognize if you know what to look for most times you can tell from the url but it says the creation date and other information you can use to deduce the legitimacy of a website

[chilly merlin]

So basically something like this that was sent in general or any link in general you can find out the creation time and other info?

#💬・old-gen-chat message

And is it used often in like pen testing and other things related in cybersecurity?

[frigid cypress]

and how do u exactly do that

[spiral notch]

you heck the url

check*

accounts.google.com is fine

accounts.googl3.web is not

you can input fake credentials and see if it recognizes incorrect data

[frigid cypress]

yea ngl its basic knowledge to know those are fake, i want to know if a webs is legit or not they could have a complete unique name and could be a scam or not

[fallen lynx]

Should I get the cyber security bachelor degree or no ?? In Russia

[uneven eagle]

yes

[chilly eagle]

#👥・new-member-guide

: )

[spiral notch]

could u clarify?

[gray moon]

Hello does anyone have a custom code that integrates Marauder and CC1101 on an M5StickC Plus2? Im looking to run both attacks from the same device. Thanks!

[spiral ruin]

downloaded kali on a old laptop and now i cant use the touchpad anymore

[eager knot]

https://www.maketecheasier.com/fix-touchpad-not-working-linux/

try those steps

also there's the gui settings which have a mouse & touchpad section, make sure that touchpad is toggled on there

[chilly shadow]

I need help please
I wanted to create new emails but the ask for phone number verification and it's a must
Is there any way to pass that

[crisp star]

You have to enter a valid phone number.

[barren verge]

Anyone familiar with TDX ARENA CERTIFICATION TESTING PLEASE HELP

[slim basalt]

https://quackr.io/ might work unsure but worth a try

[rugged solar]

hi i need to start in bug bounty but idk where i start

[chilly merlin]

do you guys know what is password when I try ssh hackthebox attack box to my kali linux?

[plucky plaza]

can someone help me

[naive bloom]

hello, has anyone used phpldapadmin before?

I need help, I dont know how to correctly modify the xml files to set some setting as I would like them to be

[chilly merlin]

@karmic leaf cloned the site

got the html file

[karmic leaf]

good stuff man..

[chilly merlin]

the tool is available in kali

give it a go on a test website

[karmic leaf]

will do when im fre

[upbeat briar]

What specifically are you trying to change. Question is too broad

[naive bloom]

sorry for my poor question, when im adding users with phpldapadmin I would like to have Bash as the default login shell and when im putting the password for any user I would like to have SSHA as the default encryption method, instead of md5

In theory I should be able to make that happen but i dont know how since I have never used xml

[upbeat briar]

To set Bash as the default login shell, edit the templates/creation/your_template.xml file and set /bin/bash as the default for loginShell. For SSHA encryption, check config.php and set password_hash to SSHA instead of MD5.

[naive bloom]

im gonna try that, thank you!

[upbeat briar]

YouTube

[naive bloom]

can I dm you? I dont have a template of my own and I directly use the posixAccount one, there's already some stuff written and I dont know where to edit

@upbeat briar

[upbeat briar]

Idc

[chilly merlin]

☠️

[sterile bear]

Hello guys can someone help me with a problem that I have? One guy stole a cat from my girlfriend basically she give the cat for pet sitting while she came to me in UAE, long story short he blocked her and we contact him on Facebook but this arrogant piss of *** cocky on chat and don't want to cooperate, we have insurance on the cat passport, microchip on her name. What I need help is to get some informations of him, Guvernamental, Phone number (i really want to call him to see how he react). How can i do that? Any advice will be much appriciate. I have his facebook.

[halcyon flame]

Speak to the authorities. You will not get help online.

Anyone who offers help for monoey will just scam you

[sterile bear]

Thank you!

[halcyon flame]

Good luck

[sterile bear]

Thank you, I really apprciate it.

[sand drift]

Anyone have a script for world of outlaws dirt racing 24 for Cronus zen ps5 compatible

[sacred pine]

Looking for funding for a project

🙏

( i just need a dedi )

[spiral notch]

#1286135820008296509

[candid harbor]

I need some opinions. A discord bot with functions like port scanner, geolocator, etc, would be a good project for my portfolio?

[spiral notch]

Yeah

What lang will you code it in?

[earnest hedge]

pretty sure ur gonna have a lot of trouble building that ngl

[halcyon flame]

What's the project? Say here, not open for DMs

[halcyon flame]

A bot to scan IPs provided etc, not to geolocate Discord users, right?

I mean.. just Google Discord automation libraries or unofficial API docs if you don't want to use a library and do it yourself. If you really wanna build a bot that provides services like scanning an IP, that traffic would come from the bot, and as such be your responsibility. Could make it safer (for you) by doing stuff like domain validation, like letsencrypt does prior to issuing certificates for example.

(e.g. to scan this target, you must verify yourself as an owner)

[astral owl]

Why cant I speak on voice channels?

[chilly eagle]

Now you can

[drifting remnant]

Any PL/SQL experts here? Would love someone to check my work. And give me some pointers.

[candid harbor]

Python

[candid harbor]

I will use some APIs here and there

[candid harbor]

I am not planing to let others use it. The bot will stay in a private server where is just me.

[halcyon flame]

There's a Python library called discordpy you could use to make it easier

or you can work direct with the websocket API, but using the library would be much easier and more robust

[candid harbor]

that's what I am gonna use

[frigid monolith]

hey guys i am starting bug bounty any advice

[floral jackal]

Hi I need to know some first project for noob I

[tulip pond]

Bro is some one good with computer and laptop hardware

I need help

[drowsy socket]

is a serching tools website worth my 30$?

cause i dont understand anything from github

[hot dawn]

hey yall

okay so im neha so basically i need help with getting the question papers for our upcoming finals which the whole class is gonna fail cause of the whackass teachers so the question papers are uploaded in the teachers portal so ill need somebody to LIKE GET INTO IT AND LIKE GET THE QUESTION PAPER SO LIEK DM IF U CAN DO THAT

[chilly eagle]

#1286135820008296509

https://tenor.com/view/go-study-learn-do-better-be-better-learning-gif-14502469

[crisp star]

skill issue

[rancid rover]

Help me find someone name & address

[uneven eagle]

you want us to somehow get the papers for an exam that isnt released yet?

yeah easy give me 2 seconds bro

https://tenor.com/view/breezy-hacker-im-in-matrix-laptop-gif-22983973

[spiral notch]

#1286135820008296509

[candid harbor]

Is A+ cert worth taking, or should I start with Security+?

[crisp star]

A+ is great if you pretty much start with 0 knowledge about IT. Security+ is something you should do if you already have the fundamental.

[lavish flower]

So crazy question. If I feel like my phone or account was hacked and someone is watching my incoming and outgoing messages/calls how could I find out?