👥・help-me

[wary heath]

if it is ill try to help to fix it

[short grotto]

Alright thank you so much!

[wary heath]

no problem, enjoy

[grand heath]

Hey can anyone help me in pico ctf i just started ctf and do not understand much of it

[red star]

I've found professor Messer and he seems legit

[broken fossil]

Anyone black arch user?

[wary heath]

ohh nicee have fun with learning!

[forest sable]

Any Arch user

[lime trench]

Oh, they'll let you know...

[nocturne girder]

Am new here please i need help on where to start from but frist i greet the house..

[uneven comet]

Greetings everyone,
I'm new here please i need help on where to start from

[spark grotto]

hii!

any one can help dm me

[swift cedar]

Here

[pulsar meteor]

I dont currently use arch, but i have in the past.

[forest sable]

Nice

[wary gate]

In an Active Directory environment, what are the common reasons why a domain controller (server) may not trust a device (computer or laptop), and what steps can be taken to resolve the issue and re-establish trust between the device and the domain?

[dreamy fog]

please guy, who can help me get my instagram back

[livid garnet]

what happened?

[wary heath]

there are many reasons but heres what i think:
1.DNS issues

• If the device cannot resolve the domain controller's name or SRV records due to DNS misconfiguration, it cannot establish trust.

2.computer account password mismatch
each computer with a AD domain has an account with a password that is updated, if the password that is stored on the device does not match the one in the AD trust is broken.

3 network connectivity problem
-If the device cannot communicate with the domain controller due to network issues, trust cannot be made.

hope it helps

[void night]

Anyone recommend me the best VM to use kali linux

[chilly eagle]

thonkk

vmware workstation

17 pro

[pearl nacelle]

hey i have a friend assume that my victim i have access to my frnds mobile like i want to build spyware app for them any help

[chilly eagle]

no

[twin niche]

How can I get WhatsApp bot ?

[livid garnet]

go on youtube and look for a tutorial

[hard nacelle]

I need help trying to monitor who is hacking my network I have a neighbor who is taking black hat hacking way too seriously and he has been trying to bruteforce his way into my network by social engineering and other means but I can't prove it's him. Are there any tools out there for windows that can monitor this ?

[wary heath]

oh use wireshark

[shell anchor]

I need Cyber Security Roadmap and Become Job ready with full Topic covered without missing anything and be ready to do remote job from home because I am from non technical background any help for me ?

[chilly eagle]

#👥・new-member-guide

roadmap.sh

[marble crater]

I am and also a fedora linux user too...

[shell anchor]

How to get remote job? In cyber security ... Any idea? Fro non technical learner?..

[hard nacelle]

Thank you

[wary heath]

no problem u can search a tutorial on youtube on how to use it its great!

[marsh cloak]

hi guys, im trying to pentest our wifi home network using aircrack-ng. Do you guys have a link where i can read or a video that i can watch on how to use this one. I found something but it is not working.

[hard nacelle]

Right on man I appreciate it, I'll check out the tutorial on YouTube and begin learning how to use wireshark properly.

[wary heath]

okay good luck

[chilly zephyr]

Hello people and admin, i wanna learn how to become white hat Hacker from scratchand what type of tools, software everything which is essential for that, they use or what language they use most as my background i am coming from non tech field and i wanna become master in security and hacking also i wanna learn how to use python in analytics,stock market analysis, algorithmic trading and Many more, so if anyone knows how to become pro in this things please show me the path our certificate which can help me to land a good job.

[chilly eagle]

https://www.cyberly.org/en/guides/aircrack-ng/index.html

https://www.aircrack-ng.org/doku.php?id=tutorial

[dense zodiac]

Anyone got data tower and/or wifi 3d imagery radar live updating movements so like a Basic 3d radar but every movement is tracked and updating as km viewing so I can see things move I need it portable so icsn start the script on my android device
Tracking interferences/ movements in between the signals my device and the towers connected

[burnt echo]

Anyone who understands the implementation of bpg? And bgp security?

[dapper oracle]

Hello Guys I am new in this channel I Want learn how to code and cyber security I Already went through the courses I want to use python as my language after the python courses on the (noob) content where should I go next?

[wary heath]

bgp is used to exchange routing information between different networks (ASes - Autonomous Systems) on the Internet. It’s a path vector protocol, meaning it uses paths, networks, and attributes to make routing decisions

[rain harbor]

I need money

To reap

[foggy cradle]

where can i get orcus rat?? im trying to learn pentesting

[woeful locust]

Is it customary to come up with a hacker name? Lol

[delicate ether]

hello, can someone halp me find flag in tis image?

https://drive.google.com/file/d/1yDtgUZCAiA4sgHEhCqwmbCSFucuWFkMD/view?usp=sharing

what tools should i use?

[chilly zephyr]

Anyone have information how to become...

[chilly eagle]

#👥・new-member-guide

but u wont find about using python in analytics there

[brisk verge]

#👥・help-me What are the most basic skills I need to start building on in coding in general?

[delicate ether]

guys please 🙂

[chilly zephyr]

Okay buddy, thanks ✌🏻

[chilly eagle]

But u can learn python there

Bet some youtube has gud tutorials on data handling and scipy , pandas libraries etc..

[chilly zephyr]

Oh okay, i'll try

[chilly eagle]

Try asking here #1343811480822485012 or #💬・programming

[chilly zephyr]

Okaay 👍🏻

[spark sigil]

Hello everyone. I'm new in here because i need help about getting my Gmail Address back

[foggy cradle]

Where can i get orcus rat?

can yall not ignore me 😭

[steel crest]

the mod said we don't do that here

[foggy cradle]

Oh

[spark sigil]

And how can i get Python?

[broken scarab]

Hello guys, how are you? So, I have been in college for 2 1/2 years, yet I still do not feel like i learned a lot about cybersecurity or hacking (pen test) in these years. I am in my final semester, are there any other resources I can study that provide real insight ? i am doing hack the box stuff (sherlocks) to learn a bit, i feel like they help more than college itself.

[eager knot]

you can use thm, portswigger, and look here as well #👥・new-member-guide

[delicate ether]

I think noone would read old messages so yeah i just respond so its visible

[eager knot]

there are lots of ways to grab data from an image

[sick leaf]

I am learning about crypto mixers, it's code, and why it's so effective to obscure and make bitcoins anonymous for educational purposes. Can anyone point me in the right direction?

[steel crest]

Just use XMR coin at that point (Monero)

It's fully anon

[delicate ether]

Exiftool didnt show anything special, binwalk1showed one thing that was 0 and warning that one or more files fsiled to extrcat no utility was found o unimplemented

[broken scarab]

thank you, i will check it out

[delicate ether]

Is there any other ways i can check? Most popular one?

[eager knot]

who implemented a flag in that image?

[delicate ether]

Someone who made ctf challange😭

I have no idea what to do, tried binwalk, exiftool

[eager knot]

i found a signature in the picture

i don't know if it's related to the flag but the hash type of it is sha256

||37665cc64f37074e22a1db9b138b6a39f98d4355cbd339fe50a7aab507eba1fc||

(censored in case you don't want spoilers)

[crisp star]

A hash is not an encryption

[eager knot]

excuses

[delicate ether]

thanks bro ❤️

for help

[eager knot]

👍

[tacit moss]

how can i join the general voice chat pls

[forest sable]

Does anyone have a list of All Kali Linux tools and there uses and how to use

[eager knot]

you need to message more in the server in order to rank up and have access to them

[tacit moss]

@eager knot aaa ok ok

thnx

[eager knot]

https://www.kali.org/tools/

[civic umbra]

Hello friends I am new to cybersecurity can anyone help to upskill me😀

[main wren]

Hey so, I installed security onion if anyone's familiar umm I need help. So the security onion is working properly in the VMware but the interface isn't being able to be opened in the host machine. I turned off the firewall and proxy also when I try to ping the host machine from security onion it works just the web interface won't load.

[opal fractal]

I don't think onion can work with a firewall because onion it a private browser

[main wren]

Yeh I mean it's turned off in the host os @opal fractal

But I can ping security onion

Like maybe for a minute or something the interface is up and then it's back to site unreachable

[wary heath]

check if the web interface is running

[main wren]

From security onion?

[wary heath]

yes

run

[main wren]

Oh what command

[opal fractal]

Can you use only the onion with the safety side

[wary heath]

sudo so-status

[ember shore]

Please I'm new and I'm wanting to learn cyber security please someone take me me in as his/ her brought up

[main wren]

Everything says "ok"

When I ran so-status

[wary heath]

okay

[main wren]

I didn't get you

[wary heath]

check if security onion is listening on the correct port

here is the command

sudo netstat -tulnp | grep LISTEN

[main wren]

Oh okay

[ember shore]

Please I'm new and I'm wanting to learn cyber security please someone take me me in as his/ her brought up

[viscid shore]

Please I'm new and I'm wanting to learn cyber security please someone take me me in as his/ her brought up

[main wren]

Damn

Spam

[main wren]

I think it's listening, how can I make sure

[wary heath]

look for like

ports 433

https

[main wren]

Yeh it says listen

[wary heath]

or porta like 80 http

[wary heath]

okay

[main wren]

Yeh like everything's listening

[wary heath]

did u check the firewall

[main wren]

Of host?

[wary heath]

nono on security onion

[main wren]

Oh no, uhm can you mention the command if possible

But the interface did work initially

It just got interrupted in between or something maybe

[wary heath]

sudo ufw status
sudo iptables -L -n -v

[ember shore]

@viscid shore you want to tutor me?

[wary heath]

if something is blocking it

then

[opal fractal]

His new

[wary heath]

sudo ufw allow 443/tcp
sudo ufw allow 80/tcp

[main wren]

But it's saying that ufw command not found

I know that's what we normally use for firewall but hm

[viscid shore]

Yes

[ember shore]

Please I'm new and I'm wanting to learn cyber security please someone take me me in as his/ her brought up

[wary heath]

yeah but why tho

[main wren]

I'm not sure

[wary heath]

check if the firewall is running

sudo systemctl status firewalld

[main wren]

I'm installing ufw

[wary heath]

oh good okay

[main wren]

Ufw is inactive

[wary heath]

ohhh

[main wren]

I did these

It gave me

ERROR: problem running

[wary heath]

run sestatus

to check selinux

[main wren]

Selinux status enabled

[wary heath]

good

did u check if firewall was running

[main wren]

It said inactive

And the host machine is turned off

Idk what the issue is

It pings too

[wary heath]

i dont know

[main wren]

Oof :(

[wary heath]

Restart the firewall

sudo systemctl restart netfilter-persistent

[main wren]

Okay

[wary heath]

maybe that

[main wren]

No the service is not found

[wary heath]

idk then bro sorry

[main wren]

"Disconnected from the manager" "Attempting to connect"

Security onion web interface

If I reload it'll go and become site unreachable hm

[spiral notch]

hi

what field of cybersec do u enjopy

[frigid monolith]

hey i am doing a bug bounty need some advice

when I am mapping the website using ffuf it crashes and is no longer acessible what should I do

[radiant stone]

What's the error code from the website? 404, 500? Ect

[frigid monolith]

refused to connect

no error codes

connection refused

does it mean that my connection is blocked

[radiant stone]

Yes. Is it routing through VPN or tor?

[supple escarp]

Hey guys. What are some of the best resources that you guys use in CTF challenges?

I am asking because I want to familarize myself with resources that I can use to solve challenges in CTF competitions.

[tepid dust]

hey

[blazing tusk]

I wanted to install blackarch on a USB (live boot) but I don't have enough admin privileges (don't question that) is there any walk arounds ?

My problem is that I can't make my USB bootable

[chilly merlin]

@supple escarp Snyk is a great source code scanner!

[nimble shadow]

i used balena etcher what did you use?

[nimble shadow]

^

[unique sage]

Maybe use a vm or port rufus

[blazing tusk]

I have high restrictions the bare minimum I can make is using power shell command prompt and installing files

But when I download a exe file it won't work

[nimble shadow]

r u on some school computer lol

on what os r u?

[blazing tusk]

I'm on windows

[unique sage]

I think you should use powershell

[blazing tusk]

It's my computer but my parent put them

[nimble shadow]

ah that's very sad

[blazing tusk]

That's why I want to change

[nimble shadow]

can't you open .exe from powershell

??

[blazing tusk]

But I do have Linux on my school computer it's an os I think it's name is educaandos (Ubuntu based)

[blazing tusk]

Nope

I don't think it will work either

[nimble shadow]

ok then do it from there

you are not bios locked are you?

[blazing tusk]

How I'm very bad at this stuff

[unique sage]

I just said that

[blazing tusk]

In my school yes on mine no

[nimble shadow]

install os iso on pc install balenaetcher use it to flash to usb boot it from usb and your fine

[nimble shadow]

ok i did not notive

notice*

[blazing tusk]

It shows me an error

[nimble shadow]

what error

[blazing tusk]

I meant this

[nimble shadow]

what error

what error

what error

[blazing tusk]

I even tried Lili 2.2

[nimble shadow]

what error

[blazing tusk]

One sec

[nimble shadow]

read the error

google the error

then give it

and ask for help

ok i don't have any more time bye

[unique sage]

wow

[blazing tusk]

Bye

[tired cloud]

Can someone help me
I have a error problem installing mafia2 pc game on i3 4gb ram laptop
Error: isdone.dll
An error occurred when unpacking
Unarc.dll returned an error code: -1
Error:archive data corrupted decompression fails

[stone heron]

Hi I'm a beginner I know some simple stuff like how to set up Kali (don't know much about the tools on Kali or how can I properly use them )rubber ducky WiFi pineapple I just simply know what they used for basic simple fing ı'm trying to learn more about hacking ı have low experience of hacking any advices for me will be happy to lisen

[viscid crane]

My email was hijacked

I got to recover it from old phone number and I get some weird emails that I believe belongs to a person in the company

I can't get his email

But I have a number that I believe could be linked to his email (hopefully)

#$&+$#

[unreal bloom]

Hi ,, so im having issues with pacman. I will tell you what I've done and then tell u the error:
sudo pacman-key --init
sudo pacman-key --populate archlinux
sudo pacman -Syu <thePackage>
the error im getting is:
vim signature from "source" is unknown trust
error: failed to commit transaction (invalid or corrupt package (PGP signature))

[frigid monolith]

none

[foggy cradle]

Im new to kali. what tools should i learn to use

[viscid crane]

If anyone can help please let me know or PM me

[barren wagon]

Hey one question should i use macos to learn cybersec hacking or should i install a virtual disk image like kali or parrot ? what are your suggestions and what would be better.

Personally i want to use macos for learning but im not sure that is it correct or worng or will it have some effects on the learning . Many people generally say use linux if you are trying to learn anything related to comp sci or cybersec , but i do not know why ( I do know about like how linux provids a goto env for these task), but does it really matter when it comes to choosing and OS ?

[dusty pier]

Use macos as ur main os and get a VM with Kali on it it is good bc it comes with tools for things related to cybersec and will help out

[barren wagon]

i have done some research , and like while kali linux provides over 600+ tools but irl at most 50 of them are used and most of the commons ones can be used on macos so like is learning cybersec and hacking better in someway in linux , like i can get the tools on macos as well.

[west token]

If you want to learn cybersecurity, using macOS is fine, but Linux (especially Kali or Parrot in a virtual machine) is a better choice. Most cybersecurity tools are designed for Linux, and you'll gain hands-on experience with an industry-standard environment. If you're comfortable with macOS, you can use tools like Homebrew to install some security tools, but for a full experience, I recommend setting up a Linux VM. (if im wrong someone correct me.)

[barren wagon]

so basically when we talk about linux for cybersecurity and hacking , it is preferred because like its a standard in the industry ,( like more support , more active development ) ?

[west token]

You're right that many cybersecurity tools available on Kali Linux can also be installed on macOS. However, Linux is still the preferred choice for cybersecurity because it's more flexible, widely used in professional environments, and has better support for tools like network scanners, exploit frameworks, and penetration testing suites. If you're comfortable with macOS, you can still learn a lot, but using a Linux VM or dual-boot setup will give you a more complete experience.

[west token]

Yes, Linux is preferred for cybersecurity and hacking because it is the industry standard. It offers better support, an active development community, and more flexibility for running security tools compared to other operating systems.

[woeful locust]

It's likely the specs on the computer are too low. Windows itself uses over 3GB of RAM. i3 isn't a fast processor either. You want at least 8GB of RAM i5 or better.

[west token]

if im wrong someone correct me

[barren wagon]

I see , is it like the OS limitations that like people prefer Linux over like windows or macos ( like ik macos has some like security stuff in it ).

[somber hamlet]

Hi, can someone here help me get free/cheap API keys from multiple AI(like Gpt, claude, XAI, Gemini, perplexity, etc) for a project i am building. Pls dm if u know how can these APIs the more the better

[west token]

Yes, people prefer Linux over Windows or macOS for cybersecurity mainly because of OS limitations. While macOS has built-in security features, Linux offers more flexibility, better tool compatibility, and deeper system control, making it the preferred choice for hacking and penetration testing.

[barren wagon]

Ig this much is convincing to boot a disk image

[west token]

Glad to hear that! Booting a Linux disk image will give you the best hands-on experience for cybersecurity and hacking.

[barren wagon]

Is there some particular linux distro i should be using like preferred , i tried like kali linux in the past because of like how it give of the hacker vibes uk ( I use kali im a hacker ) but i only used it for basic coding work in school .

[exotic elbow]

Try parrot os, its also debian based so the commands are preferably the same

[barren wagon]

i have heard about that one

ok i will try it out

[exotic elbow]

Let me know if you have issues.

[west token]

If you're learning cybersecurity, Kali Linux and Parrot OS are great choices since they come with pre-installed security tools. However, if you want a more stable and general-purpose Linux experience, Ubuntu or Debian might be better, and you can install security tools as needed. It depends on whether you want an all-in-one hacking setup or a more flexible system. (someone correct me if i said something wrong.)

[barren wagon]

Umm what i will do is i will install both kali and parrot and decide which to use upon how the OS ui looks (im just a baby, i like good looking things pls do not attack me).

[exotic elbow]

Its ok, I feel you. Try a live usb bootable device:
Use ventoy2
And flash the usb,
Then in the file manager, put the iso image inside.

[barren wagon]

💀 umm ig that a bit too much for my system to handle , i have a mac so ig my device hardware wont allow it (tbh i will just use a VM), but once i get goods hands on linux i will try it on my windows laptop which has been sitting somewhere idk.

[exotic elbow]

Your choice, Have fun. for now I'm going to bed as right now it is 3:21 AM

[barren wagon]

🛐 pls have a good rest

[exotic elbow]

Thanks

[west token]

That sounds like a great plan! Both Kali and Parrot OS have their own advantages, so testing them out will help you decide which one suits you best. And no worries, a good UI makes the experience better too!. feel free to ask anything else u can dm me i will answer tmr or td since my dms are closed cuz i work as co owner and mod in other two servers.

[barren wagon]

🛐 thank you dark for the help , also you type pretty fast (my peak is 83 wpm but only for once)

[west token]

Yeah, running multiple VMs can be resource-intensive, especially on a Mac. Using a VM for now is a good idea, but once you have access to your Windows laptop, installing Linux directly on it would give you better performance.

[west token]

i have to sometimes

[barren wagon]

🌩️ fast

[west token]

also anytime

[spiral notch]

if you like good ui

go pentest on arch

full customization

[halcyon flame]

full suffering

[spiral notch]

ITS FUN

i dont use half the tools that come preinstalled on kali anyway

lmao

[halcyon flame]

Hehe

[dreamy fog]

can anyone help me get my instagram back?

[halcyon flame]

What I mean is, I prefer to use my tools rather than spend time ricing them. Each to their own

[halcyon flame]

Instagram support.

Anyone who says they can get it back for you will likely just be looking to do you further harm.

[spiral notch]

the opposite for me LMAO

[dreamy fog]

no response from them

[halcyon flame]

Then you're out of luck most likely, sorry

[dreamy fog]

alright, thank you

[west token]

Arch Linux with a pentesting setup might be a great choice. cuz ig it gives you full control over the look and tools you use. (if im wrong correct me)

[barren wagon]

💀 i have tried installing it once , nvm i will forget that arch is a thing for now

[spiral notch]

yep

made my recent one look like mac

check it out

1s

[halcyon flame]

Not gonna lie, the themes people come up with, they are beautiful

[spiral notch]

https://catboys.vercel.app/image/b6b6b35d-7495-44eb-89b1-f8e5bac0a6c1

[barren wagon]

💀 the router spider is it ?

[spiral notch]

yessir

[halcyon flame]

I just see aesthetics a bit of a waste of time for a VM I'll be potentially rolling back frequently. I work mostly in the terminal anyway, so WSL2 works fine for me

[spiral notch]

use it daily

[spiral notch]

never rolled back, too lazy to figure out

[halcyon flame]

Obviously anything even slightly risky I use a VM

Hah, too lazy to snapshot but not to rice

Fair 😉

[spiral notch]

worked on a network spoofer recently, changes your NIC manufacturer, assigns new ip but sends fake packets with a fake ip to leave off trace, disable background processes and send windows-like TTL packets

instead - messed up my entire kali vm

internet stopped working and permantly thought its ip assigned was the gateway ip, thinking its permanently the gateway now

[barren wagon]

💀 other than IP and packets nothing got to my head

[spiral notch]

tried everything to reset, even overriding and force setting tables manually, nothing happened

so atp just switched to arch cuz why not, decided to take the opportunity and try out pentesting on it

[halcyon flame]

Spoofing is so useless, apart from for amplification DoS or other niche cases

[valid bronze]

Hi, I want to buy a new laptop and I'm debating whether to buy a laptop with a GPU like RTX 4050 or without, I'd appreciate your opinion.

[halcyon flame]

Well, do you need a good GPU or not?

Will you be gaming, running CUDA tasks?

[valid bronze]

Not really,

[halcyon flame]

Then honestly both Intel and AMD onboard GPUs are surprisingly capable

[valid bronze]

Something hashcat but nothing more then that actually 😅

[halcyon flame]

They won't obviously run all AAA titles, but you'd be surprised. Most recent AMD have capability equivalent to a 4060 with their onboard GPU

(on mobile chip)

[barren wagon]

do get a laptop with a gpu if your budget allows you too ( but like think about your work case also).

[halcyon flame]

A laptop with a dedicated GPU will mean a big hit to battery life also, even with just normal operation

(as in, no gaming etc)

Even a 10th gen i5's Iris onboard GPU is fine for low demand tasks

[barren wagon]

You will have to carry the power brick with you one drawback it has

[halcyon flame]

You're not gonna hit mega high hash rates or be able to run AI models

But for day to day usage and low demand games (or even some modern games, to an extent) they are surprisingly capable

[west token]

If you need GPU power for work (e.g., cybersecurity, AI, or graphics), a dedicated GPU is beneficial. But for general use, an integrated GPU may be sufficient while offering better battery life.

if i said smt wrong correct me

[halcyon flame]

The AMD Ryzen AI MAX 300 is the CPU with an integrated GPU comparable to the Nvidia 4060, but is very new on the market

Part of the Zen 5 lineup

Would never have imagined being able to play AAA titles at a comfortable frame rate with an integrated GPU, but here we are

At the end of the day, the tradeoff is battery life and cooling comfort vs having a beefy GPU

For a daily driver I'd take an integrated GPU and offload any heavy tasks to a short lived cloud server with GPU over a chunky, heavy, hot and noisy laptop any day

(HP x360 Envy are nice)

[barren wagon]

My windows laptop configuration was Ryzen 7 5700u with its integrated Radeon Graphics having around 2bg of VRam and 16gb ddr4 , it performs great till this day only its 4 years old and its battery a bit less competent as it was before but day to day tasks are still non laggy , ( I gridend many games on this like valorant hitting 150+fps now it gives around 100 - 120 , i played god of war and others as well )
but as for video rendering tasks it was not very great. ( I have had this laptop for 4 years before switching to macbook).

[halcyon flame]

I've an x360 i5 13th gen, the battery life rocks, it is fast enough for daily tasks, and can even run most of the games I like perfectly fine (ok, I like mostly roguelike that don't have high GPU requirements, but it ran Diablo 4 fine when it came out, mostly..)

That was with the integrated UHD770 GPU

[barren wagon]

I agree with that a 100%.

[halcyon flame]

£729 for an Envy x360 Ryzen 5 8640HS

[valid bronze]

I don't really need a GPU, but because I'm a relative beginner in the field of red teaming and I don't work in the field yet, I just wanted to make sure I don't need a GPU for day-to-day work.

[halcyon flame]

Yeah.. only thing you'd really need it for is for any tasks like hashcat with GPU, or running AI models if that's your thing

And again, for that if it's a one off shot in the field, you can (sometimes) just spin up a template on DigitalOcean, AWS or whatever and pass your workload over to that

[barren wagon]

The integrated GPUs are capable by a lot for day to day work and casual entertainment.

[halcyon flame]

The number of times you'd need to run an intensive GPU task for cracking hashes or whatever, if it's part of an engagement and time is of the essence, you'd want to use something much more powerful than a mobile GPU

I'd go for something with the all day battery life every time

..also, the fact your laptop doesn't sound like a helicopter taking off when you open your browser of choice with more than a few windows is nice

🤣

[valid bronze]

🤣🤣🤣

[barren wagon]

You can get a macbook with the M series chip the performance of these chips are great with both arithmetic and graphics processing , but then again macOS has many limitations to it cause of security features.

[halcyon flame]

Heard mixed opinions on their chips

and it seems to be very "marmite"

Love it, or hate it.. but regardless the numbers seem very impressive

[barren wagon]

🛐 but i guess if you are running hashcat then you must be alreay using linux

[halcyon flame]

Works fine on Windows too with GPU acceleration, just FYI

[lethal finch]

Yo can someone help me get my password back

[barren wagon]

I mean people are like hardcore critics and they will notice stuff which the average user like me wont notice , so in my pov this chip is giving me power on the go with a great battery life ( i have been using this M series powered chip and i have seen no issues till now) only it being ARM the assembly code for this is diffrent from what i learnt (pain TwT).

[wraith wave]

Was there a quantum computing channel in here?

[barren wagon]

I have been here for a day i have not seen any quantum computing channel here

💀

idk what im saying

[wraith wave]

Oh i saw a reel, and it showed a quantum computing channel

[halcyon flame]

Pinged you Pandas

Some need to expand the channels I've read here previously - the Quantom Computing channel is under the [ COMPUTER SCIENCE ] category

[barren wagon]

ohh there is a channel for that ? why cant is see it

[wraith wave]

Want me to ping you?

[barren wagon]

🛐 forgive me i just hit the show all channles and i got it

🛐

i forgot something like that was there

feels like i am reborn hehe will just go look over the other channels

[wraith wave]

Fr me too

[jolly minnow]

Who here knows is good at SQL injection?

[halcyon flame]

As I said, I know enough

What's the question?

[jolly minnow]

Just trying to get into a database

Kinda a noob

[halcyon flame]

What database?

[jolly minnow]

Can I dm?

[halcyon flame]

No

You can ask here

[jolly minnow]

😑

[halcyon flame]

If it's a database you're not meant to be accessing, or you don't have permission to access, just don't.

[jolly minnow]

Ok

[halcyon flame]

This is an ethical server. That's why I said you should read #📜・rules and #1286135820008296509 before posting here @jolly minnow. I guess you didn't?

[jolly minnow]

I did the first time I joined

But I never said I didn’t have permission to the database

[halcyon flame]

Then feel free to post about it here, I'll help if I can

Like is a CTF, bug bounty, what?

Look, if I can see you legitimately are permitted to access it such as a bounty programme, or a CTF that's already finished (e.g. not cheating), I can advise.. but if you're nost posting here, then that smells like something you shouldn't be posting @jolly minnow.

Good luck, take care.

[jolly minnow]

CTF

[halcyon flame]

Got a link?

[jolly minnow]

Yes but I’m not posting here please

[halcyon flame]

What about a name of the CTF? Why don't you want to post?

Whatever, it's fine, but I'm not touching anything you're hesitant to post publicly, sorry

[jolly minnow]

Ok

[supple escarp]

Ah alr, I'll check it out. Thanks!

[barren wagon]

💀 wait a sec there are things like source code scanners ? i thought people looked at source code manually .

[dusty pier]

To find vulns, errors, bugs etc

[barren wagon]

🛐

damn i did not know about this

[halcyon flame]

There are static code analysis tools, yes, like SonarQub, Datadog I think provide some, but many more language specific ones out there

How I did it was find keywords or patterns of interest, then manually review hits of interest

But certainly there is tooling that can effectively perform analysis of code bases for vulnerabilities by converting to an AST (Abstract syntax tree) and performing analysis on the structural representation of the code.

It's damned tricky to build even a simple static code analysis tool, like even just variable taint analysis in something like a PHP codebase can make your head swim, but it's possible.

Another method for discovering vulnerabilities (more specifically in binaries, not even neccesarily with the source available) is fuzzing, where by a tool will explore the various branches of the program, using algorithms to test various payloads to find vulnerabilities (very simplified explanation there), like the AFL (Americal Fuzzy Lop) project https://github.com/google/AFL

Now archived since 2024, but I believe there are maintained forks out there, and it's still certainly effective.

[barren wagon]

I will check this stuff out, i smell some black magic code in it

[dark isle]

How do we speak on VC in General?

[halcyon flame]

You need to rank up, which you do by chatting and interacting on the server.

[viral zodiac]

Hi guys, I have joined the server recently. I would like to learn about cyber security. Can you help me where to start from?

[silk garnet]

Hi

I look for help

[halcyon flame]

Check out #👥・new-member-guide - it contains some resources that can help you get started @viral zodiac @silk garnet

[silk garnet]

Get them message me

[halcyon flame]

Huh? No, read the content in that channel, it will help you get started.

[silk garnet]

Ok

[fast pier]

What’s the best humaniser for ai?

[rocky lantern]

How can I approach a bug in web application ?

[dull remnant]

Hello, I'm a beginner with the realm of securing web applications and have been developing a authentication system using NextJS, Redis and Prisma/PostgreSQL.

I'd really appreciate it if anyone here could review the code, and point out potential security flaws, I intend on pushing it to production oneday in the future.

Thank you.

Here is the Github repository: https://github.com/montizo/melon

Thank you again, I really appreciate it.

[neat temple]

Hey.., is it possible for me to create a Webpage only using mobile phone?

[radiant stone]

Is it possible to develop the code and publish from a phone. Yes. Will you enjoy doing it. Probably not

[neat temple]

...how do i begin to lean...I only know about floor level basics of c++, javascript,html,sql(thanks to the schools half cooked syllabus)

Which one should i prioritize first

[low beacon]

I am trying to crawl a web app using burp pro with a recorded login flow but when i see the crawl live, its just repeating the login flow over and over again and not actually crawling anything. What am I doing wrong here?

Any help

Scope is set and everything gets logged when i proxy it but crawling is just repeating login requests

[radiant stone]

Html first. Get the foundation down before trying to build a house. There are some good free learning guides everywhere.
Here's one with a built in lite ide
https://www.learn-html.org/

[neat temple]

Thank you for the efforts

[fringe relic]

hi, my whatsapp got hacked, is there anything i can do?

[radiant stone]

No worries

[radiant stone]

File with support ASAP. Change any passwords on accounts similar to that one. And make sure all current and future accounts have MFA for now on.

[polar moth]

Hello, does anyone know if it is possible to crack a wifi password without using bruteforce in kali?

[chilly merlin]

Why?

[polar moth]

Because I'm new to cyber security and would like to be a good pentester

[radiant stone]

Unfortunately since there is no way of confirming you're not doing this maliciously can't tell you how. But if you want to learn how yourself there are tutorials online like ones offered by predatech

[chilly merlin]

Have u tried to use google and yt and Ai

[polar moth]

It's hard ti find some working tutorials

But thanks for the help

[chilly merlin]

Hmm

I tried and worked for me

[radiant stone]

99% of tutorials will not work out of box for any pentesting as they are constantly patched out. Learning how things work then doing it yourself with that knowledge is the main goal of pentesting.

[polar moth]

Oh ok I'll search harder then

[low beacon]

What is good tool to automate crawling a graphql based web app

[chilly merlin]

Take a course or smth for a structural approach

U need a adapter remember

[radiant stone]

☝🏻 this is correct

Learn the principles of how it works and you will be able to learn how to manipulate it.

[chilly merlin]

Graphql api?

[polar moth]

Thanks guys

[chilly merlin]

Like finding api end points?

All that

[radiant stone]

No problem. It'll be hard and you'll fail a lot but keep at it and you'll figure it out.

[low beacon]

Yes, trying burp pro but its not crawling the complete app

[chilly merlin]

U can try to do i manually by turning or proxy

And use postman

[low beacon]

Yea, I am doing that right now but want to automate some stuff to crawl and scan on a regular basis

[chilly merlin]

1. GraphQL Voyager

2. Clairvoyance

3. GraphQLMap

4. InQL

5. GQLCrawler

6. Postman

7. Selenium

8. Playwright

I used AI BTW

[polar moth]

One more question, do you know if it is necessary to do a university to get a job as pentester or can it be okay to only have certificates?

[low beacon]

Haha, the issue is I am able to manually proxy through burp but when I launch a crawler all it does is repeat just the login flow.

[radiant stone]

Depends on your country, the industry you're going into and the culture of where you live

[chilly merlin]

U need to configure the logij n details

[polar moth]

Italy

[chilly merlin]

How can it scan without login creds man

[low beacon]

I am using recorded login method and I can see the app log in while crawling and then it just dies and does the same thing again

[low beacon]

Login is working, creds are provided

[radiant stone]

Unfortunately I'm not familiar with any of the 3 criteria for Italy. I would reach out to industry professionals or you can email companies and ask their HR departments. It's not uncommon for students to ask how to get ahead when they start going for jobs. You can also see if there is any communities in your area for it like guilds or associations and ask field professionals.

[chilly merlin]

1. Session Tokens Not Persisting

2. CSRF Protection or Expiring Tokens

3. GraphQL Rate Limiting

4. JavaScript-Based Authentication

5. Incorrect Request Replay

[brisk herald]

hi! can someone help me with getting back my suspended instagram account?

[chilly merlin]

Maybe

[polar moth]

Thanks again

[radiant stone]

Put a support ticket in. Follow any standard recovery steps.

[radiant stone]

Any time. Good luck!

[brisk herald]

i did it like 3 times and it didn’t work

[radiant stone]

Unfortunately no one here will help you break into any accounts. You will need to follow normal recovery methods and secure your current other accounts to make sure it doesn't spread.

[brisk herald]

but that was my account, not someone else’s

[radiant stone]

Unfortunately no way for anyone here to know that for certain.

[chilly merlin]

Did u read #1286135820008296509 ?

You gonna get DMS from random people offering to hack it by now

[somber hamlet]

Even I got it when I first messaged here

[proper dagger]

.

[mild sable]

Hi! So there's a company which basically gave money for ads but you had to deposit a certain amount of money and they convinced a lot of people about how they're legit and actually they were for a while and a lot of people got benefit from them. But later on they closed all the withdrawals and boom it's a scam. So for anyone who knows cyber security here, is there a way of getting back your money through their website or anything?

Please inform if you can help

[barren wagon]

Report to consumer court

[polar moth]

@radiant stone just to know, can you crack the password of the wifi with aireplay-ng by doing a deauth attack, capturing the WPA handshake without using a dictionary like rockyou.txt for a bruteforce? (sorry for bad english)

[mild sable]

Is there any other way to get the money back

[livid sun]

im begineer, any guides or study plan you guys followed? I want to build tools in rust. related to pentesting

[silent river]

Have you written anything that involves networks yet? Maybe look at writing a webserver. You can go through it after and see how many ways you can exploit it. Improve the webserver and try again

It'll give you good practice of how stuff on that level works and how to write tools to automate your attacks

You'll be able to use those tools when writing PoCs and looking for vulnerabilities

[barren wagon]

You can try to track the people , but wouldn't recommend

[worthy abyss]

any1 know where to get cheap domains?

[vernal cape]

Free dns

[mild sable]

You know i was really looking for an ethical solution that involves "breaking" into there and getting the money somehow. (I'm a beginner in this so pardon me if im being too unrealistic)

[vernal cape]

Hey how can i check if i have one program an i want to check code which will be readable for my dumb brain it has dll,pak,exe files

[jade panther]

What are your opinoins on parrot os ?

[honest owl]

I need help with dezactivating a wifi camera named imou

A 360° tracking camera

[verbal perch]

Hey everyone, I need help deleting my second Google account. I've been trying for hours, but Google says it will delete all my data from my main account, and I don't want that to happen. Does anyone know how to delete the second account without affecting my main one? I’m also happy to join a call if that’s easier. Any help would be really appreciated!

[silent river]

Private window, log into your second account and delete it through that

[verbal perch]

i dont understand

its kinda sync with my main acc

so if i delete it will also delete the data from my main acc

[neat temple]

What happens if someone enter .json in an form of my webpage

And he entered some script with xss.report something

[hearty finch]

Hello do you know any ai that can help find social media account through their pictures

[amber matrix]

[tender perch]

can someone help me with 2 python codes i am unable to run due to traceback error

[verbal lotus]

can someone explain how to download cuda and install it succesfullty ?

[vernal cape]

hi i found one bug called session token in url in login page of website how can i get more info about it so i can report it on hacker one the website name is something kinnye its a shopping website

[vernal cape]

there is no way to do that if you are thinking doing in on social media like instagram,facebook,twitter,etc
if you tried with ai it will ask for money if its scam website or even legit oshint cant get you images if id is private unless it doesent follow your account
and if you try to get it using burpsuite you might get 400 access denied

[rotund cedar]

Hey

[vernal cape]

ai doesent reconize photo and can find account

[spiral notch]

sure send the code here

[rotund cedar]

Can someone help me to login in my Instagram account because i forgot my password and no Gmail and number was linked with it

[vernal cape]

my boi you lost the account

[rotund cedar]

Really?

[vernal cape]

not really

[rotund cedar]

Thanks boi✨

[vernal cape]

find bug in forget password like reset link to your http.server instagram might denied access but i dont know it will work or not

[neat temple]

Can anyone please explain this

So I've disabled the forms option now 🤣🥲

@barren wagon ...can u ?🥲

[gilded hedge]

cann anyone help me

i forgot my password to sandisk security

private acess

[clear ledge]

#1286135820008296509

[tender perch]

Here or in dm @spiral notch

[viral gyro]

Hello can anyone help me?My very old and precious youtube channel got banned due to posting a Spiderman:No Way Home movie video I took from the theater way back in December 2021 and it got banned after a while

[rocky gull]

Sony

[tender perch]

unable to send here so send to you dm

[spiral notch]

Nothing you can do about it

Well contact support amd try to appeal it perhaps

[spiral notch]

Could you clarify

[twilit osprey]

Can somebody help me i got an account from 2020 on tiktok i know the email but not the passoword i got important messages

[spiral notch]

You can report it only if they have a pending bug bounty iirc

[royal moon]

Help im a victim of investment scam how recover my fund can you tell me how im using termux in my android is that's possible ?

[spiral notch]

Nobody will really help you find the vulnerability as they'd rather find it themselves and take the money instead. Sorru

Sorry*

[twilit osprey]

Can somebody help me i got an account from 2020 on tiktok i know the email but not the passoword i got important messages

[spiral notch]

Contact support

We don't hack accounts here because there's no way to prove jts actually yours

[twilit osprey]

But i cant acceses the email bc its on my old phone but bro it is me i can prove it

[neat temple]

Some guy entered some script in my webpages text box but i think it didnt work as he intended

Is there a way i can block his ip (webpage is in netlyfy)

[royal moon]

Okay thank you very much

[tender perch]

@spiral notch plz check dm I send you code

[twilit osprey]

Can somebody help me i got an account from 2020 on tiktok i know the email but not the passoword i got important messages and i cant accses the old email does anybody know how to get it back

[neat temple]

Is netlyfy's feature to block ip adress paid only?i cant find exact info in their documents

[clear ledge]

#1286135820008296509 please read

[barren wagon]

Sorry for the late reply, I am as well a beginner and someone with some with experience might be able to help with this

[spiral notch]

Sorry I'm out rn, will check once in back home

[spiral notch]

Yeah u can do it thru frontend

[barren wagon]

Yes sir what can I help you with ?

[neat temple]

Wt can i do to be safe

[neat temple]

I am not an expert so...i didn't get it

[barren wagon]

What is that question

Safe as in ?

[spiral notch]

I don't think there's overly a need for such things like stalking

[spiral notch]

Yes it's possible it u modify the code

Hardcode it into the page to not load it for certain ips

[tender perch]

Ok no problem

[spiral notch]

is xss even an issue in ur page, does it hold any valuable information?

@neat temple

[mild sable]

Wdym by stalking? The web has scammed a lot of people

[chilly merlin]

hey guys
i have been trying to build a tool for injecting a exe but everytime i inject a text the app will not work bc it vilonate it and inject bss part is not exectable anyway , does anybody know how to inject the exe in right way

[spiral notch]

U said u were looking for an ethical money making method that includes breaking into something

??

[mild sable]

Oh no no

[neat temple]

No the page and its data is js waste am worried if someone can get the data in my device with the attack

[mild sable]

@spiral notch

[spiral notch]

If you're hosting on netlify

You dhould be fine

[neat temple]

Oh okey

[spiral notch]

Probably is yea

[neat temple]

I was just worried about my device

By the way thanks ✌🏻

[spiral notch]

But thing is, nobody here that knows how to cause damage or do this, would do it

Because it's still illegal, even tho it's ethical

[mild sable]

Yeah probably

[spiral notch]

Were not becoming cybercriminals because of this situation, so best to do is js to let it go

[mild sable]

It's just a lot to let go

Idk

What to do but

It will get better ofc

[clear ledge]

Go to your local police and report it.

Try to discover who is behind the scam

[mild sable]

A ton of people already did

[clear ledge]

Or go to a darkweb and contract someone to do the dirt work for you

But i don’t recommend this

[upper path]

Hello guys, I have a question. Does Man in the middle actually work when cracking/bruting wifi passwords?

[mild sable]

I can't do that nahhh

I just wanted an expert to give some help

[clear ledge]

Im not a expert but in this case the only legal stuff to do is to go to the police

[verbal knoll]

Guys I have a efi/boot/mmx64.efi not found boot problem and I can't even run my bootloader's for Linux to download

I've been looking at solutions for a week and still can't get trough it and I'm sick of windows making updates without permission

Secure boot is disabled but where to reinstall the grub of I may ask

Ok I have UEFI

[chilly eagle]

#1286135820008296509

[fringe patio]

I need help with a web bot issue

[verbal knoll]

I'm still on windows and when I try to boot the USB bootloader it just gives me the EFI error and there I am

[verbal knoll]

Sorry but I didn't meant to try you to unlocking of Maki someone's other devices offline boot but I rather try to fix my( EFI/boot/mmx64.efi not found) error and I've been on this thing for a week but if I missed a rule then I'm sorry to do so

[chilly eagle]

i didnt reply to u breh

its some other guy

[verbal knoll]

Ok fine 👌

[gleaming gate]

2 questions:

• what programming language do yall recommend for Discord Bots (kind of like an all-in-one bot)
• whats a good way to learn this language

Note: I only know really basic html and css, as I never really focused on programming

[spiral notch]

Python, and use https://w3schools.com

[spiral notch]

https://dontasktoask.com

[gleaming gate]

thanks

[radiant steppe]

any body good with the pin64 phone ? im trying to get it to flash so i can run kali on it

[warm iron]

I tried all the methods in decoding the [handcheck] and it did not work, is there another way or a website

🤔

[fringe mural]

how do i increase the speed of sqlmap i did threads=10 but it's still hella slow

[calm tide]

Can anyone help me to unsuspend my Twitter account

[hollow fjord]

@shadow fractal ✨ I wanna request to join the ctf team

[alpine charm]

guys is there a channel in the server for optimizing pc's and stuff? or learning how to make my pc run faster and smotther?

[spiral notch]

10 threads is not enough...

Try 100 atleast

[spiral notch]

Install arch

😇

[alpine charm]

whats arch?

[barren wagon]

arch linux

[spiral notch]

Arch linux, its not too friendly for beginners, but it's one of the most lightweight distributions

[barren wagon]

like the meme, I use arch btw

[spiral notch]

Can run off of 1 gig, doesnt sell your data, doesnt have bloatware

Runs super fast and most games work on it (except for riot games like valorsnt and league of legends) all steam games should work and more, it's compatible with pretty much anything nowadays

[alpine charm]

"arch linux" i am guessing its for linux users? or can i use it on windows 11?

[spiral notch]

Also really customizable

[spiral notch]

Yeah you can

You can either make a second installation and choose what to boot your pc into

Or download a virtual machine which will make Linux run inside of an app, as soon as you're done you just close it and you have normal windows

Second would be the safest option, because everything is isolated, and even if you download a virus, your main pc doesnt get infected. It's like a sandbox

[alpine charm]

cool

[spiral notch]

Why are you trying to optimize your pc though?

[alpine charm]

where do i learn abt it? youtube?

[spiral notch]

Yeah youtube has decent install guides, I can also show you in like an hour or so if ur free

[alpine charm]

well i optimized my pc "asus laptop" to run valorant the game from 60 to 200 fps, and i am wondering if i can do more, plus i might in the future optimize ppls pcs for many as a side hustle or smth

[spiral notch]

Ah sadly valorwnt doesn't work on arch linux

Cuz of vanguard

[alpine charm]

oh cool np

[spiral notch]

It's my fav cuz u can customize it lots too

You can find different designs people did in this server in #💻・setup-and-rice

[alpine charm]

thats interesting, and thanks

[spiral notch]

Wrong channel sorry

Every image you see that has a big A logo on the screenshot is arch

[barren wagon]

you are reaching peak tbh if u did that

[spiral notch]

Amd a way people have customized it

[spiral notch]

True, since it's a laptop

[alpine charm]

nope i can do 300 but it would just take alot more power, and i have it limited on 130 now i am not crazy dw🤪 😅

thats why i think i could make it a side hustle since i did smth that couldn't usually be done!

[barren wagon]

i ment physical hardware limitations dear

after optimizing u can just overclock

[alpine charm]

oh yeah dw i have an eye on that if i do the max too long the battery life span die's i have experrienced that before

[barren wagon]

🛐 i ment capacitor damage

laptops dont do to well on that part

[alpine charm]

yeah yeah i know dw i said that i can make it at those levels but i don't keep it there so that what you are saying doesn't happen

thx for your concern tho

[barren wagon]

gl getting more FPS on them games

[fiery pewter]

What is the better language tu learned absolutely for cybersecurity

[spiral notch]

Depends on what field you want to do

[fiery pewter]

Blue or red team

[spiral notch]

No like

Network exploiting, web exploiting, reverse engineering, malware analysis, maldev and so on

[dreamy tree]

Hey

I have an issue installing kali on a usb

Rufus takes century to install

50% needed 7 hours

So i canceled

Cleared the disk

Than i tried balena etcher

But it fails

But it says that the volume doesnt contain a recognized file system

Anyone can help?

[spiral notch]

Are you trying to live boot or flash to reformat a pc?

[dreamy tree]

Live boot

[radiant stone]

Are you making a lab system or making a bare metal system for use.

[spiral notch]

ic, Rufus better for that

what configuration do you use?

[dreamy tree]

I have never heard of thode worda

[chilly merlin]

Hi i need help

[spiral notch]

Like what do u select before clicking go or whatever button that is

[radiant stone]

Is this for practice or are you going to make this a system you are using actively and know what you're doing

[spiral notch]

sup

[chilly merlin]

Sup

[dreamy tree]

Those matter?

[chilly merlin]

Are u good cybersecurity person?

[dreamy tree]

Ordinary ig

[spiral notch]

I don't think it matters, he if he did enough research to knoe what live boot is

[dreamy tree]

Learner

[spiral notch]

He'll know whst decision to make

[radiant stone]

Yes because it changes if I recommend you making a bootable or a virtual machine

[spiral notch]

6+ years

[dreamy tree]

No no

[chilly merlin]

Im trying to install gobuster on my kali linux

[dreamy tree]

Not virtual machine

NOT THAT

[spiral notch]

worked Parr time defending and attacking many company networks

[radiant stone]

Awh come on man don't make him learn the hard way 💀

[chilly merlin]

Come priv

[radiant stone]

Why not

[spiral notch]

uh

[dreamy tree]

I cant use it

Its just

[radiant stone]

Technical limitations?

[dreamy tree]

Not for me

[spiral notch]

well kali is better it's true but whatever u can live boot too

what configuration do u use on rufus

[dreamy tree]

1 sec

[spiral notch]

also arch better fr

Even for lentesting

I use arch

I rice it to sooth my eyes

[radiant stone]

What are the specs for the machine writing the USB as well. I wrote a 16gb iso to USB in 15 minutes yesterday.

[dreamy tree]

Im trying to install arch rn

[dreamy tree]

128gb

I installed it before

On the same usb

In 40 minutes

[radiant stone]

Sorry processor and ram of the writer system

[dreamy tree]

16gb ram and 220gb ssd

[radiant stone]

And the processor

[dreamy tree]

I love arch

[dreamy tree]

Idk

I dont know much in pc parts

I use laptop

[radiant stone]

Windows system?

[dreamy tree]

Yes

11

Btw

Another queation

On blackarch

[radiant stone]

Task manager -> performance -> CPU it'll tell you

Or under systeminformation

[dreamy tree]

Ok 1 sec leme see

Intel r core i7

1.80ghz

@spiral notch

You use arch live boot?

[spiral notch]

ya love ut

I asked ur Rufus config tho

[dreamy tree]

I dont know what you mean

What file system i used?

Like

Target system?

Boot selection?

Like

What

Hey you here?

@spiral notch

[exotic elbow]

It takes too long, and it doesn't have the tools.

[dreamy tree]

Bro fr said that it doeant have the tools?

[exotic elbow]

Hmm?

[dreamy tree]

Aech has morw tools than kali

[exotic elbow]

Oh, yes it doesn't, it's not worth it, and I wasted 7 hours for nothing.

[exotic elbow]

If blackarch is what you mean, then yes.

[dreamy tree]

Yes

@spiral notch

@spiral notch

Heyy

[spiral notch]

??

[exotic elbow]

I tried arch, it took me 7 hours to dual boot it, was disappointed once I opened the tools directory.

[spiral notch]

💀

@dreamy tree @quartz fog @chilly merlin @chilly merlin

@radiant stone @turbid flume @lyric totem

[chilly merlin]

what

dawg

[lyric totem]

?

[spiral notch]

sigma arch beginner

[radiant stone]

💀

Also

[radiant stone]

Future advice. Always test in a VM if possible. Be respectful to your bare metal lol

[radiant stone]

Probably base clock. Shouldn't take hours to image through Rufus. You have it plugged into a USB3.0 slot and have a USB 3.0 drive yea?

[dreamy tree]

I belive that my ports are all 3.0s

[turbid flume]

💀

[exotic elbow]

Bare metal?

[exotic elbow]

Come on, spill the juice, what is it?

[lyric totem]

You didn’t give it enough of a attempt

You booted in, thought it was out of box and hated it

[exotic elbow]

Ohhh

[radiant stone]

No worries.

Terminology time with Milk

Bare metal:
a system that has the operating system or other main systems running directly on the hardware itself.

VM / virtual machine
A psudo computer that operates in an enclosed container that can be restored easily and does not directly touch the hardware in many circumstances. Usually operates under a parent operating system called a hypervisor (type 1 in this use case).

Virtual machines can be blown up and restored very easily while bare metal you need to go through the process of reinstalling and dealing with potentially fatal corruptions.

[exotic elbow]

Still wouldn't even use arch, I would prefer blackarch.

[lime barn]

Is there like people here to help me get into like old accounts i forgot passwords to?

[exotic elbow]

Contact support

This is an advice, don't take me wrong.

[tawny coral]

No, we don't do that here. Please see #📜・rules and #1286135820008296509

[spiral notch]

@chilly merlin why block me ;(

not nice

[sage kernel]

I forgot black arch existed ngl

[chilly merlin]

Maybe u bit hard

[vague plaza]

Sup everyone hope you guys are doing well

I just want to know if anyone can help me with creating a vanity wallet for eth erc20

[sick wadi]

Hey all, I wanted to learn reverse engineering can anyone of you help me with roadmap or content to start with?

[toxic current]

Guys

I need help

[clear ledge]

what do you need my friend?

[clear ledge]

Learn assembly and search in youtube for IronByte on youtube

[wooden rain]

Is there a way to access someone’s number if they are emailing me from thier phone.

[nimble shadow]

You can try googling for sites that do that

Also idk wdym, emailing by smpt/ esmpt or by sms /rcs

[chilly merlin]

can somebody teach me how to use cookies on steam?

[brisk sonnet]

Anyone know a spoofer for val that work with asus??

[spiral notch]

@static abyss

https://tenor.com/view/am-i-cookedd-am-i-cooked-gif-7478847585523279700

[static abyss]

https://media.discordapp.net/attachments/1142715444931874897/1181887792029118534/attachment.gif

[wary heath]

https://tenor.com/view/funny-gif-8245799729991793282

[exotic elbow]

I don't think so, an email can be used on neumourous phones.

[wooden hinge]

Not without explicitly providing that information to you.

[swift steeple]

Guys, im new in cybersecurity and i would like to receibe help from someone w experience (my main language is spanish but i know some english)

[wooden hinge]

https://dontasktoask.com/

[swift steeple]

Whats that?

[wooden hinge]

Dont ask to ask just ask

[plucky bobcat]

Don’t click links 🤓

[swift steeple]

Too late

Jaja

[plucky bobcat]

Always use virus total or something

[swift steeple]

Yeepiee i lost my bank account!!!

[plucky bobcat]

YAYYA

My ssn got took

[swift steeple]

Shit

[swift steeple]

Tell me what tf is that please

[wooden rain]

@nimble shadow SMS and they only use one phone but I tried inspecting headers and all this

[lavish kernel]

Hey I need help with something I joined ask if I could get help

[plucky bobcat]

I clicked it

[wooden hinge]

https://dontasktoask.com/

[lavish kernel]

I lost my old gmail acc is their a possible way get it back

[swift steeple]

Me tio

[wooden hinge]

Did your email get compromised or did you forget your login information

[formal wadi]

Can someone with a windows compiler, preferably mingw, compile and run some windows API code real quick? Just run make inside the directory and run both binaries. This is for my OS class but i have 0 access to a windows machine to test out the program.

[swift steeple]

Google suporte usually helps

Try contacting them

[lavish kernel]

I got my old phone destroyed and shit so and I forgot my password tbh

[lavish kernel]

Oh Ok thx I try that then

[lavish kernel]

I think it had 2fa on it tho

[wooden hinge]

Try recovering it on another device. Presumably you set up recovery questions before. If all else fails call customer support.

[swift steeple]

Ok thank you for the info

[lavish kernel]

Okay thank you so much

[swift steeple]

Dont u have a recvery number??

[wooden hinge]

Considering their phone was destroyed that probably isnt much use now

[lavish kernel]

Nope sadly I lost everything on my phone all my old accounts and stuff

Got destroyed by my friend when he got mad

[swift steeple]

U could sue him

[swift steeple]

He can take the chip an put it on another phone

If the chip bay is broken he Will have to open the Phone from behind

[lavish kernel]

Eh my mom bought it so she could but true but he's one yr older then me

[swift steeple]

Ask him for money so you can repair it

[lavish kernel]

Bet

[spiral notch]

a link

to explain

that you sohuld ask a question directly

instead of asking to ask a question

dont go "guys i have a question" ❌
instead, go "guys, i have a question regarding that topic, and how can i achieve this, by using that?" ✅

[spiral notch]

use a vm??

[swift steeple]

Yeah yeah

Thank you

[spiral notch]

anyway,s what was your question

[wooden hinge]

Use a VM. I do not encourage seeking out people to do these sorts of things for you. It arouses suspicion.

[spiral notch]

@swift steeple

[wooden hinge]

...so, did you have a question

[spiral notch]

😭

[formal wadi]

I understand, but you can see the files you are compiling. I do not have SPACE for a vm on my machine. I have 20gb left which is not enough.

im not sending binaries

[wooden hinge]

If you truly do not have the resources to do coursework i would encourage you to reach out to your professor.

[swift steeple]

Tell me

[swift steeple]

I will think more so u dont loose time

Thanks for ur time

[formal wadi]

i have the resources, i just forgot its due tonight and i am not home. I have a windows machine.

[spiral notch]

yea bro nobody running ur win calls on their pc

[formal wadi]

asking for someone to just compile and run a simple windows api program is not in the slightest bit suspicious when you can read the code yourself…

[swift steeple]

Why the skull

[formal wadi]

Its two files 🥲

[wooden hinge]

...okay, youll probably have to figure that out on your own then. Sorry. As i said i dont encourage anyone to fulfil your request.

It is extremely unsafe.

[formal wadi]

Yeah okay broski… unsafe. Right

you havent even read it yet

ill ask someone else ig

[wooden hinge]

🤨

1. Nondescript win calls
2. For cybersec coursework
3. With some level of urgency, appearently
4. And no other alternatives

Anyone should have red alarm bells going off in their head.

Good luck with your assignment

[formal wadi]

Nondescript win calls? Man you are some work

wanna read this yourself and you tell me what is unsafe nondescript win calls? Never said it was for cybersecurity, it’s for an operating systems course testing interprocess communication. I have to turn it in by midnight and need someone to test it cause I cannot at the moment. Alternative for what… its on a goddamn github repo

if it were actually shady, id ask you to run a binary without telling you what it is or what the source looks like

[timber walrus]

Guys I have a question. Me and my wife are soon to have a baby and we are looking at baby monitors. We were debating between closed circuit ones (connect via radio frequency) or WiFi ones. We think closed one would be more secure... but I think though radio frequency ones can also be hacked due to radio signals interference. I've seen some horrible stories, so i want to know which ones you think are safer.. better of you know the best ones I can buy here on UK.

Thank you

[wooden hinge]

I would use wifi. Modern wifi standards employ secure encryption protocols which protect the data being transmitted. If you are concerned about your wifi device, make sure you change the default credentials for the wifi itself and administrator rights on your router/wireless access point. Newer wifi devices allow you to split up your network into multiple parts that cannot talk to each other, you may do that as well if you wish.

Generally, abuse of wireless devices like that will only happen if the credentials or access to the network was already compromised in some way, as opposed to some sort of inherent insecurity in the device.

[timber walrus]

Ok that i need to research how to do that for sure. I have already Surfshark to protect my devices, but never messed with the WiFi credentials etc. Good point because some devices now can have radio frequency and WiFi baby monitors, so if I get one capable of that, I can try your way. Some people responded that radio frequency is better in the chat, so now I will have to do some research on what you said. Thank you for responding, I appreciate it.

[wooden hinge]

No problem. Regardless of what you end up using i recommend changing your default credentials to something more secure for any wifi access points or routers. Without doing that, anyone gaining access to your network is trivial.

[spiral notch]

As a network exploit dev - go wifi

Much safer

Just dont show unauthorized people to connect to your wifi (for obvious reasons) and you should be fine

[timber walrus]

Wow that's crazy.. I thought I was safe with my VPN. Definitely will ask ChatGpt how to change credentials. Thank you

[wooden hinge]

Check for the local IP address for your router, usually written on a sticker. It will look something like 1.196.168.1

Enter that into your browser on a computer connected to your wifi.

[clear ledge]

True shit ahaha

[spiral notch]

ip route on Linux

[timber walrus]

Ok that's really interesting coming from a professional. Ok I will take in into consideration as well as Unkown said. Thank you for your response

[spiral notch]

or ipconfig on win iirc

[wooden hinge]

^ you can also use console commands to find it

[timber walrus]

Ah aha. I see what you say

[spiral notch]

it leads you to the gateway ip where the admin panel is usually located

You can change wifi settings with it

Block websites or users, change credentials and more

[clear ledge]

Search for those that work only in the application or use peer to peer communication.Wifi ones can be hacked and most of people dont change the default login, making it easier.

[timber walrus]

That's so good man, I had no clue. You guys been very helpful, thank you

[spiral notch]

Except he's gonna change the default login

If he doesn't expose it publicly, or uses ssh then he's for nothing to worry abt

[wooden hinge]

(Changing your wifi credentials is good practice anyway.)

[spiral notch]

Also @timber walrus Search up "how strong is my password" and click one of the first links to try out different passwords. These websites usually tell you how long it'd take an attacker to crack your password

[timber walrus]

Thank you for your response. I am more convinced now with the WiFi one as guy here told me how to change default login. I do appreciate your answer.

[spiral notch]

16 different characters, and it'd already take them thousands of years to crack if they have a strong computer

[clear ledge]

Yeah of course but dont you think peer to peer more safe? I know if change you default login is way safer but i was studying this topics last week and i got the idea it was more safe.

[timber walrus]

Interesting point. Will have a look this weekend at that.

[spiral notch]

And what exactly in using wifi is unsafe?

p2p can be mitm'ed easier

[clear ledge]

If someone broke into the wifi home

[clear ledge]

I will study more about that

Thank you🙏🏻

[spiral notch]

Which you would do by bruteforcing

which would take way too long

[timber walrus]

Is how i started my point. I did my own research and came up between me and my wife that radio frequency will be best. But I remembered a friend of mine told me about a Discord channel were top hackers etc congregate.. so I joined to ask professionals opinion. I take my family security seriously and with 1st baby coming, I sad to say I know nothing about baby monitors.. why I asked here.

[clear ledge]

In some cases you have the public ip address associate in some port with the camera , leading you to the login

[spiral notch]

which isn't an issue if his password is long enough

[clear ledge]

I know you are absolutely right

Thank you for the explanation

[spiral notch]

The most damage can be caused by connecting to his network

Worst (somewhat realistic) case would be that his friend comes over to connect to his network then his friend gets hacked, the hacker steals saved wifi passwords and uses it to connect to his network

For which there are still ways to be secure against that

[halcyon flame]

MAC allow lists

..but MAC addresses can be changed ofc

[clear ledge]

I hadn’t thought about it in that way

[halcyon flame]

But we're getting in to edge case territory there 😄

[clear ledge]

I will search more about mitm for this scenario

[timber walrus]

Hmm interesting stuff. Wife's friends are candidates of the point @spiral notch . My friends are all using VPN etc and more secure inclined.. but for sure not bulletproof.

You guys know your stuff lol

[halcyon flame]

Believing you're more secure by using a VPN can actually be counterproductive to maintaining a safe posture online, as it gives some a false sense of security, whereas for the most part it's purely a way of routing traffic through another location. Sure, some services have additional benefits like DNS servers that are managed and null route things like know ad networks or malicious domains (like the PiHole does), but a VPN is no replacement for common sense and a little bit of focus on observing not only what you click on, but also what you interact with. Social engineers can catch even the best of us off guard, and these days unfortunately you need to stay very much on your toes.

[spiral notch]

Are you learning networking in cybersec currently?

[clear ledge]

Yeah

[spiral notch]

Oo fun

Literally the only thing I do

[clear ledge]

Goin for the 3rd year in computer engineering

Focus in network and security

But more focus on protecting networks the course

[spiral notch]

There's still ways to protect yourself from those, guest networks, and so on

[spiral notch]

cool, what are yall learning rn?

[clear ledge]

Router protection and good pratices for safer network environments

Studying for my CCNA exam too

The university paid for the network students

[spiral notch]

well yeah but what exactly in it tho

what methods of protection are you learning currently

[spiral notch]

oo fire

[clear ledge]

In university encryption and ssh

But i want to start by my own study for penthest or red teams

[spiral notch]

redteaming is super fun

[clear ledge]

I dont know where start:/

[spiral notch]

I love playing with my companies blue teams' nerves

so fun messing around

[clear ledge]

Hahahahaha yeah that seems fun

[spiral notch]

Since yall learning ssh I can assume you learned packets, ARP and such?

[clear ledge]

Yeah

[spiral notch]

Learn arp poisoning

Search it up

[clear ledge]

Okok, thank you 🙏🏻

[spiral notch]

Watch a few yt vids

You'll understand it yourself but in dummy terms

Arp poisoning is

[clear ledge]

Do you recommend tryhackme for learning this path or have others ways

[spiral notch]

Where you poison the router and make all devices send packets through you (being MITM) that way you're able to see all network activity on the wifi

[clear ledge]

Woww cool

[spiral notch]

Then later you can decrypt the ssl and get access to actual unencrypted packets like logins and such

[clear ledge]

I will certainly search for that

[spiral notch]

They mostly do web and server exploiting

Not much of internal network redteaming

[clear ledge]

Hmmmm okok

[spiral notch]

feel free to dm me if u have any questions abt it

[clear ledge]

Ohhh thank you bro🙏🏻🙏🏻

[spiral notch]

I'm just coding some payloads rn for network pentesting

I want to automate most of it anyway

[spiral notch]

after that you can also treat yourself a little by learning hping3 and router floods

[clear ledge]

Its nice have people like you, helping others in cybersecurity

[timber walrus]

That's valid point mate and definitely something healthy to remember. I only stated in the bounds of being more secure. Of course if you click on stuff without thinking is not much that can help you. Thank you for you response

[spiral notch]

small fun tool, turns your router into a toaster

[clear ledge]

Hahahaha

[spiral notch]

I do it for breakfast daily

[spiral notch]

ahaha I just enjoy being here

[timber walrus]

Cheers all for responses, I am off to sleep. Really appreciate it. 🙏

[spiral notch]

cya, no worries

happy to help

[halcyon flame]

So, if you're a detective, I'd say do some detective work and research the subject for yourself

If you're trying to transfer content from a phone you do not own that is encrypted, you are out of luck

[rotund socket]

Hı can someone help me with ss7 attack