👥・help-me

[whole sedge]

Oh

Okay

[spiral notch]

honestly bro

its not that big

of a deal

at all

[whole sedge]

Yea

Only $2

[chilly merlin]

☠️☠️☠️☠️☠️ I've been yapping the same

[spiral notch]

also

you dont need a wifi cardcd

for network pentesting/wifi hacking

ur pc's inbuilt one is more than enough

[chilly merlin]

huh?

what about packet injection

de auth all that

[whole sedge]

Alright thanks to both of you.

[spiral notch]

u can semi/send packet injection without monitor mode

[whole sedge]

And another thing, i’m new to this what is a 3DBi antenna?

[spiral notch]

deauth isnt very viable anymore

newer frameworks ignore de auth packets

second of all its very detectable (with practically no way to hide it)

[chilly merlin]

got any video on it

[spiral notch]

ill find one

after i finish studying

☠️

procrastination rn is insane

[chilly merlin]

who cares about logs when attacking neighbour

lmfao

☠️

[spiral notch]

third of all, i would only get advantage from starting an attack on the network everyone is connected to instead of making an evil-twin that wont ensure everyone would connect to anyway

[dull pecan]

Hello👋 every one my name is Umar faruq

[spiral notch]

its not easy to make attacks on the network youre already connected to

hard*

[spiral notch]

hello wlc

[dull pecan]

Thank you

[chilly merlin]

is there a url checker

like does any1 know how to check if a url is safe

[eager knot]

you can try this:

https://www.browserling.com/browser-sandbox

[chilly merlin]

thanks man

[eager knot]

yw!

[dapper forge]

urlscan.io

[halcyon flame]

https://virtustotal.com

Only two hours late

😄

What was that wall of text lol

The bot immediately blapped it

[tawny skiff]

Hey 👋🏽 I'm trying to troubleshoot an issue I am having with installing a dhcp server in my virtualbox environment. I am on a macOS v12 system, using the terminal. I have virtualbox installed and two virtual host. But when I run the VBoxManage hostonlyif create, I get an error message.

[spiral notch]

buddy

stop

bot aint letting u pass the second time

[exotic dune]

Can I get help with my old Instagram account? I forgot my password

[eager knot]

https://www.instagram.com/accounts/password/reset/

[spiral notch]

yes contact supprot

oop

[exotic dune]

I did still couldn’t get it back cause I don’t use the mail and phone I used to have

[halcyon flame]

Then you're out of luck I'm afraid

Anyone who says they can help for a price is just going to scam you @exotic dune

[exotic dune]

Well I just got a message from one of them😂

[halcyon flame]

Yeah

Ignore them

They can't help you

(and maybe report the person that DM'd you to a mod)

[exotic dune]

Sure bro thanks man appreciate the heads up

[halcyon flame]

Those people are vultures... like, really stupid, horrible mean and stinky vultures

...and comparing them to vultures is unfair on vultures

[exotic dune]

😂😂very true

[oak drum]

I need help

Am a beginner

I want to become a professional hacker

[eager knot]

#👥・new-member-guide

[rancid barn]

I wanna get this script but its a exploit that you can run in a executor but its protected by lua armor is there any way i can accsess it

[magic parcel]

currently inside ctf need a bit of help with fuzzing

[eager knot]

well, what's meant to be encrypted would stay encrypted

unless you're the one that made the encryption

and you have the keys

[noble latch]

Still pretty new, just tired myself out putting together a demo network and decided to test packet tracer MU mode, but did so with serial connections. Someone smarter able to confirm the likelihood that was my issue, and that I should have been using copper straight through to connect to the MU cloud in both instances?

[unkempt tree]

Are there any good virtual machines like the windows plus one if so can you send me the link in dms ?

[eager knot]

i'd google about serial connections, and the differences between those and the copper cables

[eager knot]

there are several virtual machines, but what do you need specifically?

[noble latch]

Given the conflicting information I've been finding saying things both ways, I was really going for a "yes" or "no" to give myself a reference point for where to start reading.

[unkempt tree]

anything that allows for me to tests malwares and stuff and it wont affect my actual computer

[eager knot]

hyper-v offers distributions of both ubuntu and windows 10, 11 on their platform
it's easy to deploy, plus windows has a sandbox feature you can turn on that's much more preferrable when testing for viruses or malwares as it is meant entirely for that

[visual portal]

I find it difficult here and if only

Is this place only accessible to PC users

[unkempt tree]

Are you mobile ?

[magic ginkgo]

Ello all, getting started in pentesting and wanted to know the best ways to setup VMs? I've seen people create windows/linux OS's on their VMs (im using VirtualBox btw) and set them up so they can clone them for reuse. Just wondering if this is best practice or if there are better ways / templates I could possibly download that are setup well already?

[desert torrent]

No wrong way to start, virtualbox is the most user friendly IMO, later on if you're serious about cyber, you'll branch out to something more centralized like proxmox or esxi (which is free now)

[magic ginkgo]

Gotcha, im saying moreso for the actual OS's though on virtualbox, I'm using the parrot sec linux right now, but im wondering if there are better ones to use that are setup really well or is parrot sec fine

[desert torrent]

Parrot is fine, I personally use kali.

Helpful?

[magic ginkgo]

Yeah thanks, is there a good way to learn the work flow and process of pentesting. What I mean is like common apps, resources and tools to use when pentesting. I assume I'll learn these along the way with HTB or certs but thought i'd ask anyways.

[desert torrent]

It all comes with time. You're on track with HTB though.

I advise you to make feasible goals. For example. 'Try hack me' has a great module called "introduction to cyber security" it'll give you a rundown of what you should expect

[magic ginkgo]

Alright thanks a lot i appreciate it! I'm lookin to get into bug bounty hunting eventually but im only just getting started so not setting too many large goals yet, just getting the lay of the land first as its always been a passion

[unkempt tree]

whats a RAT

and whats phising ?

[halcyon flame]

Google it 🙂

Sure, people here can answer, but get in the habit of researching for yourself @unkempt tree

Floppy flower to you too @unkempt tree 🥀

[unkempt tree]

plz

if you know the answer why not tell me

[halcyon flame]

If you want to get in to this field, you need to learn how to research

You could've found the answer by now

"what's a RAT"

"what's phishing"

[amber matrix]

Real quick

[unkempt tree]

idk how to research

just send me the answer

[halcyon flame]

Do you know how to Google?

[unkempt tree]

no sir i dont got google i live in north korea

[halcyon flame]

Riiiight

Then how are you on Discord?

[amber matrix]

💀

[halcyon flame]

I find it hard to believe NK would allow access to Discord

[unkempt tree]

the supreme leader himself allowed it

[amber matrix]

https://tenor.com/view/shagarita-shalymar-shalymar-rivera-shalymarrivera-shalymar-rivera-gonzalez-gif-6246677886404709438

[halcyon flame]

lol

[amber matrix]

LMAO

[unkempt tree]

https://tenor.com/view/autism-autistic-sped-drums-fat-gif-2665520869773976413

[halcyon flame]

Oh wow, the supreme leader! You met them?!?

[unkempt tree]

eh

[formal cairn]

hey y'all, any advice? TOR browser is not loading anything. connection attempts time out. checked that it's connected to TOR network and it is. internet test says it has internet. can it be blocked on the wifi i'm using? OONI probe suggested to see if TOR is being blocked? but i'm nervous because of the warnings that network managers will be able to see that i used it...

[unkempt tree]

Do you guys know how to create a botnet ?

[halcyon flame]

#1286135820008296509 #📜・rules

[unkempt tree]

Uh

Is a botnet unethical?

[halcyon flame]

How would you use it?

Well night night, hope you find someone else to play with.

[unkempt tree]

Uh ethical reasons

[chilly merlin]

How so

[unkempt tree]

Uh

Ethical

Plz just tell me

[amber matrix]

[halcyon flame]

Ok ok, I'll answer you.

Yes.

[amber matrix]

Bro said ethical reasons

😂

[mental tendon]

It’s possible that the network you're on is blocking TOR. Some Wi-Fi networks, especially public or workplace ones, restrict access to the TOR network.

If OONI suggested a block, it's likely the network has flagged TOR. The concern about admins seeing the connection is valid, as they’ll notice encrypted traffic to TOR nodes. A VPN will help conceal that.

[sonic trellis]

Hi guys is Tolulope Michael legit?

I have plenty reservations and have no idea how to advise my friend

[grizzled mason]

New here, just wondering If any one can give me leads and refer me to get placed at apple(any IT role )
POV: no hands on experience. Super fresher. Done my ug in CSE & pg in IT, recent grad

[amber matrix]

Gotta use a bridge

I’m not saying no more

[sonic trellis]

Bombastic side eye

[mental tendon]

Look for reviews or testimonials from past participants to gauge the effectiveness of his programs.

[sonic trellis]

Ait ait

[mental tendon]

Start by optimizing your LinkedIn profile and connecting with Apple employees, especially those in IT roles or recruitment

Look for internships, apprenticeships, or trainee programs. Even contract roles can open doors.

Also, Apple sometimes participates in university hiring drives and tech conferences.

[magic ginkgo]

Bruh doing Sec+ is such a trek, its not even hard but is literally the most boring thing ever.
(And before anyone says something yes I do love learning it all its just when you start doing pentesting stuff as a hobby going back and doing these seems so counterintuitive but necessary)

Any advice on how to stay engaged lol

[mental tendon]

.Once you get a taste of the hands-on fun stuff like pentesting, going back to study theory can feel like a chore. But since Sec+ is a solid foundation,

Try relating the theory to your pentesting experiences. For example, when studying network security, spin up Wireshark and analyze some packets 🗿

Don't just stick to reading. Watch videos from channels like Professor Messer or NetworkChuck to break the monotony. They explain things in a pretty engaging way. Fr

Explain concepts like the CIA Triad or threat vectors to a friend or even out loud to yourself. 😉😉

[magic ginkgo]

Hahahaha appreciate it. Love this response 😂

It's just one of those things. After friday I wont have to worry about it anymore but yeah thanks lmao

[mental tendon]

Just gotta power through till Friday and then it’s freedom XD

[magic ginkgo]

The thing I hate is that its ALL read and response stuff, like Whats the best XYZ for ABC? And then multiple choice. It would be so much better with some practical applications integrated with it but I guess thats not the point of it at the end of the day. It's to just teach basic cyber principles and practices to newbies ig.

[mental tendon]

Sec+ is like the cybersecurity version of cramming a bunch of theory without getting your hands dirty 🥲. It’s all about checking that you know the concepts, not necessarily applying them. It would be way more engaging if they threw in practical labs or simulations to break up the monotony. 🙂

once you’ve got the cert in the bag, you can pivot to practical stuff like CTFs, bug bounties, or even TryHackMe’s Blue Team and Red Team paths. Those give you that hands-on learning that actually sticks. 🗿🗿🗿

[magic ginkgo]

Yeah my ADHD cant handle the boring stuff 😂 I gotta do the fun things bahaha

[magic ginkgo]

Yesyesyesyes thats exactly what I wanna do. I've got very basic pentesting knowledge so my plan is to do Sec+ and Net+, move into some crappy Level 1 or 2 IT role and do my PenTesting certs whilst working there, and then doing CTF, Bug bounty and related things at the same time

[mental tendon]

ADHD and dry material are like oil and water. The trick is sneaking in the fun stuff maybe after each study session, reward yourself with a little CTF challenge 😁

[magic ginkgo]

Wow thats actually not a half bad idea at all

[mental tendon]

Getting Sec+ and Net+ under your belt will definitely open those entry-level IT doors, and once you're in, everything snowballs from there. The hands-on experience you'll get in a Level 1 or 2 role will build that foundational knowledge, and stacking pentesting certs like eJPT or PNPT on top of that? Chef's kiss. 🥰🥰😘

[magic ginkgo]

Good to know my plan was right all along haha and I wasnt doing this for nothing

[radiant stone]

The C certs are also better then CompTIA if you want to pay for them.
Ccsp
Sscp
Cissp
CC if your entry level

[mental tendon]

You're building a killer career path one CTF flag and cert at a time!

[magic ginkgo]

So my ideal certs (subject to change based on this convo) would be this in order from getting it now to getting it last:

Sec+
Net+
(Maybe) MS-900
(Maybe) CISSP
(Maybe) CCD
PenTest+
C|EH
PJPT
PNPT
OSCP

And then also to do TryHackMe, HTB etc inbetween those

[late flicker]

How much would this all cost

[magic ginkgo]

Too

Much

But gotta spend money to make money i guess

[late flicker]

I mean I'm paying 50k for a college diploma hahahh

I don't think more than that

[mental tendon]

You’re covering all the bases from foundational knowledge to specialized skills.

If I were to tweak anything, I’d say skip MS-900 unless you’re heading toward a sysadmin or cloud role, and maybe consider eJPT as a cheaper, practical alternative to C|EH

[magic ginkgo]

Oh yeah f*** that i was doing a Bach in Cyber Sec, dropped it a month ago because after talking to previous colleagues, friends in the industry and other experts, they said yeah its good, but will never be as a good as high level certs you can achieve in the same or even less time that will ultimately benfit you more for specialized roles such as PenTesting

[magic ginkgo]

I've never heard of eJPT ill check it now

[late flicker]

My college diploma is more of a dev diploma

[mental tendon]

eLearnSecurity Junior Penetration Tester (eJPT) is a really good entry-level cert for hands-on pentesting. It’s more practical than C|EH and often considered a better option for beginners looking to break into cybersecurity.

[magic ginkgo]

Yeah gotcha, not really sure how diplomas and such work or college, im from Aus so depending on where you're from it could be different

[late flicker]

They appreciate those in here

[magic ginkgo]

Ok cool, but for employers don't they like C|EH quite a lot?

[mental tendon]

Yes, C|EH (Certified Ethical Hacker) is widely recognized by employers, especially in larger organizations. It's one of the more well-known certifications in the cybersecurity field and is often seen as a benchmark for ethical hacking skills

[magic ginkgo]

Gotcha gotcha, if you're going a dev role as well then it will probs be better

[mental tendon]

@magic ginkgo If you're just starting, eJPT might be a great practical introduction, and then later you could do C|EH for the recognition it offers.

[late flicker]

I just want to have my own little company later on so being knowledgeable in all these domains would help

[magic ginkgo]

Smart yeah was just about to say that

Do you reckon Pentest+ or eJPT first @mental tendon ?

[mental tendon]

It depends on your current knowledge and goals

If you're already familiar with basic concepts (like networking, Linux, and some basic hacking skills), eJPT is a great place to start.

If you’re looking for more hands-on experience right now, I’d suggest going with eJPT first. It’s a great starting point for someone wanting to dive deeper into penetration testing.

[magic ginkgo]

Ok yeah cool, I've been messing around with linux kind of just nmapping my own network and stuff just to mess around and such but nothing to serious just yet, just testing out random tools that come with Parrot Sec.

So yeah ill probs do eJPT first then as I feel like (following comptias trend) PenTest+ will be more theory based and I just cannot be bothered with that to start with Pentesting certs bahaha

[mental tendon]

@magic ginkgo eJPT is definitely a great choice if you're already exploring Linux and tools like Nmap on your own network. It will help you build practical skills and get a feel for real-world penetration testing tasks, without diving into too much theory.

By doing eJPT first, you'll be able to gain hands-on experience and build a stronger foundation, which will make it easier to transition into more advanced certifications later, like OSCP. Plus, you'll get more comfortable with the tools and techniques you'll need for bug bounty hunting and CTF challenges, which you can start practicing alongside your studies.

[magic ginkgo]

Cool cool, regarding bug bounty hunting, what's the best way to practice for that. Would CTF be the closest kind of thing to it? I already signed up to BugCrowd just so im ready for when i start but it's a weirdly scary thought to do bug bounty hunting idk why haha

[mental tendon]

It’s completely normal to feel a little scared before diving into bug bounty hunting — especially since you’re dealing with real-world systems and vulnerabilities. But remember, bug bounty programs are designed to help you. They provide a platform to test your skills on live systems with legal permission. Everyone has been there, and even the best hackers started out feeling nervous.

[mental tendon]

Create a local environment to test vulnerabilities by setting up your own Vulnerable Web Application (like DVWA or OWASP Juice Shop). This gives you complete control over your testing environment and lets you practice various techniques and vulnerabilities safely.

Platforms like HackerOne, Bugcrowd, and Synack all have beginner-friendly programs where the competition isn't too fierce, and you can gain a little more confidence.

[magic ginkgo]

You're talking about this right? https://github.com/digininja/DVWA

What's the difference between that and just doing CTF's?

Also (and sorry for all the questions) what's the best way to hide yourself? I mean I know theres the simple answers like VPNs, proxies etc but when it comes to all this I always get worried I'll slip up and leave myself vulnerable whether its through the network or some other means.

[mental tendon]

As for DVWA vs CTFs — DVWA helps you focus specifically on web vulnerabilities and gives you more hands-on practice, while CTFs provide a variety of challenges and offer a broader skill set in security. Both are valuable tools, and you can use them together to build a well-rounded skillset for bug bounty hunting.

[mental tendon]

Anonymity and security are important while engaging in penetration testing or bug bounty hunting to avoid exposing your real identity. Using a combination of VPNs, Tor, burner emails, and isolated environments (VMs) is your best bet to remain anonymous.

Never use your personal email for any hacking-related activity. Create a separate, anonymous email (using a provider like ProtonMail, Tutanota, etc.) for signing up for bug bounty platforms, forums, or anything related to your penetration testing activity.

[magic ginkgo]

Ok cool appreciate it, regarding Tor is Mullvad a suitable browser? I've got it and to my knowledge it is pretty trustworthy but I haven't dug into it a huge amount @mental tendon

[mental tendon]

Yes, Mullvad is definitely a trustworthy VPN service, and it's known for its focus on privacy and security

[crisp star]

Why does this sound like a ChatGPT response

[magic ginkgo]

Not as a VPN, I use Nord for VPN but mullvad as a browser

[magic ginkgo]

Lowkey ive been thinking that too but I thought maybe he's just intellectual like that lol

[mental tendon]

Mullvad Browser is a great choice if you're looking for privacy while browsing,

@magic ginkgo

you’re already using NordVPN, it’s still a good idea to use Mullvad Browser if you want to enhance your privacy 🗿🗿💯

[crisp star]

The em dash gave it away that it's likely a chatgpt answer

[mental tendon]

fair enough! I try to be thorough and clear

[mental tendon]

! I do have a habit of using the em dash, don’t I? I’ll work on making it feel a little more natural l

[magic ginkgo]

Nahg

Bro is a bot

Aint no way

@mental tendon Have you actually been making me chat to ChatGPT this whole time

[icy hazel]

I'm a linux noob, and am dipping my toes into cybersec. However, I've been using a gaming distro to get familiar with the UI.
What's a good CS distro to begin with? I'm guessing going back to Ubuntu would be my best shot, but figured id ask anyway.
Apologies since im sure this has been asked before.

[mental tendon]

Haha, no, it’s all been me, I promise 🙂

[icy hazel]

im familiar with Nobara (fedora variant) and KDE Plasma (steamOS)

[mental tendon]

Kali Linux and Parrot Security OS

[magic ginkgo]

I use Parrot Sec, but most will use Kali

[icy hazel]

Just playing devil's advocate.
Isn't Kali the kind of distro you don't use unless you're certified or specifically trained to use it?

[mental tendon]

Stick with Nobara/Fedora

[crisp star]

The reason why you use Kali is simply because you all have the necessary tools for an engagement.

[mental tendon]

it's a specialized penetration testing and security auditing distribution, not intended for general purpose use.

[magic ginkgo]

Kind of, it's just designed more-so for people who know what they are doing. You can use it if you really want, but yes it is tailored toward those who know what they're doing.

If you want something easier Parrot Sec is what I use and used to get started as its meant to be easier.

[icy hazel]

duly noted. thank you guys for the input. if i was to pick either of those distros for carrying myself through college (or straight cert grinding), im guessing parrot would be the better option?

[magic ginkgo]

Depends what you're doing in college

But generally yes

People will often start with Parrot Sec and later down the line move to kali

[icy hazel]

im aiming for linux admin work, but i know its going to be a while before i get to that level

noted

[crisp star]

The majority of people use Windows as their main OS and run the rest on a VM.

[magic ginkgo]

Oh yeah Im hoping you're doing this all on a VM lol

[icy hazel]

would you be mad if i said no? lol

[magic ginkgo]

No but, you can create multiple machines with different distros on a VM which will be MUCH more practical for someone trying to get into linux admin work

[crisp star]

Then you better start doing it. You will probably kill your VMs a few time in the learning phase.

[icy hazel]

noted

[magic ginkgo]

So you can restart if you mess up easily, clone different machines, test out different methodologies etc.

[wicked ice]

Hi everyone, its cyberhat here. i would introduce myself as a very beginner in cyber security and ethical hacking and i would love if you all help me learn cybersecurity

[icy hazel]

to put it into perspective how much of a network and code scrub i am, i built my first python-based discord bot half a year ago, and im learning C# to do the same

[crisp star]

Depends what the bot is doing

[icy hazel]

true

[magic ginkgo]

What do you need help with? Biggest thing i've learned in Cyber is that you do the learning and research yourself as those are very needed aspects within cyber, being self-reliant. The purpose of this cord is to help with more specific issues whilst you're learning. But you should be trying to learn by yourself to start.

[icy hazel]

okay. parrot for the distro, then start tinkering with VMs. thank you guys again for the advice. i very much appreciate it

[magic ginkgo]

Personally, I just wouldn't even setup a dedicated distro on a computer. I'd run it all on VMs. But im a junior pen tester so my needs will vary to yours.

[icy hazel]

from my perspective, i kind of loathe windows, but that's personal reasons. i know its a necessity (meaning windows), but if i can be familiar with other OS's in the long run, it's what makes me happy

[magic ginkgo]

Each to their own I guess. You do whatever makes you learn, discover and digest better for your own needs and goals. But, HOW could you not like Windows 😂

[wicked ice]

ohhh suree suree. I randomly got to know about this server and yeah whatever you told that is true and i will surely start learning but can you give me some tips how can i get started properly 🙂

[icy hazel]

NDAs, can't really talk about it.

sounds cheesy, and corny, so i apologize, but yeah. hate windows

[magic ginkgo]

Damn well that's unfortunate. Are you looking at using linux as a full-time OS you'd run off of?

[icy hazel]

exactly. i have a dual boot nobara/win10 pc for my main driver, my steamdeck is my mobile driver, and im getting a laptop soon that ill put a third distro on

it's not as crazy as it sounds, i promise.

[magic ginkgo]

https://www.youtube.com/watch?v=_bF-3Dncmeo&t=55s&ab_channel=MadHat
Look at videos like this one and start your journey

Also look at doing certifications for whatever field you'd prefer to specialize in and do them
https://pauljerimy.com/security-certification-roadmap/

[magic ginkgo]

Jeeeeez welp it definetely sounds crazy to me. Sounds like a lot of effort I would never wanna do hahaha. Just keep in mind if you use linux as a main OS, there will be a lot of things you cant do as it's not a widely used OS like windows when it comes to personal usage and application

[wicked ice]

thanks alot dudee. I appreciate it

[magic ginkgo]

All good, good luck in your studies!

[wicked ice]

thankss man

[icy hazel]

oh im quite familiar with that. I do video game modding, and running modded Valheim on Nobara isn't the easiest thing.

[solemn cove]

can anyone help me understand this so i have a forgotten game and i want to make a offline and unlocked charecters and stages of a game called hero fighters pc version but dont have a clue of game codding or anything like but want someone to do it for me and create a video of what they did anyone can help (and if its right or wrong to do it in what cases too)

[icy hazel]

playing darksouls kinda permanently shifted my focus as to understand what "fun" means

[magic ginkgo]

Hahahaha very true

[magic parcel]

Can anyone help me with thm ctf currently stuck at a task. A hint will also be appreciated 😊

[mental tendon]

what task you're stuck on

[magic parcel]

Task10 i fuzzed that whole sote tried curl cmnd and xss also checked source code if there is any hint didnt got a single lead after all this
@mental tendon

[mental tendon]

Double-check the URLs and any hidden form inputs in the source code

[magic parcel]

No bro checked it

[mental tendon]

Try expanding your fuzzing to look for potential subdomains. Sometimes, the vulnerable part of the site can be on a different subdomain. fr

[magic parcel]

Did subdomain enumeration also
There is another port open of ssh but login is denied

[mental tendon]

addition to testing for XSS, try testing for things like SQL Injection, LFI or RCE if you haven’t already. Sometimes the payload is a bit different.

[mental tendon]

try brute-forcing the SSH login using tools like Hydra or Medusa. Weak password may be there sometimes the SSH banner might reveal useful information about the system

[magic parcel]

I tried that {7*7} cmnd but after that also didnt got anything

[magic parcel]

Ok i'll try that
There was some hint that it broke through its internal network

[mental tendon]

check if the site might have reflected or stored XSS vulnerabilities.

[magic parcel]

Its not reflecting but it is storing the xss

[mental tendon]

try basic SQL injection payloads to see if the website returns any error message

[mental tendon]

vulnerability might be in a part of the website where data is stored

[magic parcel]

From my enumeration i didnt got any sql port open or any database running on system
So will it work?

[magic parcel]

Thats the point data isnt getting stored its an encryption tool pgp

[mental tendon]

SQL injection specifically might not be possible on that particular system.

[mental tendon]

sounds like you're working with a sensitive data flow, where encryption is used to secure the information.

[magic parcel]

Yes it does have a port 80 open but just apache is running no any other dir are there

Through ffuf i got a console dir but its giving me bad request

[mental tendon]

only Apache running on port 80 and no other directories or web services are exposed, you're somewhat limited in terms of the attack surface,

[magic parcel]

Yes so you got any ideas😂

[mental tendon]

Try sending a GET request to the /console directory if you're using something like POST by default

[magic parcel]

Its giving 404 error

Tried it through curl

[mental tendon]

Check for any hidden files or directories

[magic parcel]

Tried post and put and delete but every time i got either bad or 404

[mental tendon]

it means that the server can't find that specific resource at the URL you're using.

[magic parcel]

How? I did every tool i know for dir busting
Dirbuster,gobuster, dir,ffuf,wfuff

And tried whole seclist files

[magic parcel]

Yes i think its using proxy kr something but after that also didnt got anything

[mental tendon]

Look for JavaScript that might reference files and folders.

specify extensions to try while fuzzing, such as .php, .html, .txt, .bak, .zip,

[magic parcel]

Tried extension fuzzing but got 404

[magic parcel]

Tried those basic such as /admin, /server, /.config

And used word list also

[mental tendon]

you got a 404 response is useful, but you might also be getting 403 Forbidden or 301/302 redirects ,?

[magic parcel]

Nope

I think i got a 403 but not on proxy i got it on javascript dir so i got console and JavaScript with bad request

[mental tendon]

try using a more specific or comprehensive wordlist designed for web applications.

[magic parcel]

Do you have any in mind?

[mental tendon]

FuzzDB

[magic parcel]

Like i just know seclist and the wordlist

[mental tendon]

@magic parcel

[magic parcel]

Any GitHub link or where can i find from?

[mental tendon]

https://github.com/fuzzdb-project/fuzzdb

[magic parcel]

Ok bro thnks
big help man

[inland jewel]

guys i need help on the grey swan challenge i dont know if you could assist me

[mental tendon]

Could you provide more details about the Grey Swan challenge? What part are you stuck on?

[south plinth]

can anyone recommd me some good tools for OSINT

[spiral notch]

anything in particular?

there are tools that are better with finding emails, others better with finding phone numbers

and so on

[magic ginkgo]

Yeah to this ^ As well, you can have a look at #🕵・intel-and-investigation and look at the pinned messages. Lots of good resources and tools there.

[south plinth]

images as for now

[amber matrix]

[south plinth]

oh ok thank you i will check that channel out

[magic ginkgo]

Bro again coming in just to question people 😂

[amber matrix]

🤣 🤣

[amber matrix]

You got me rolling🤣 🤣 🤣

[junior mauve]

Hi guys i am currently studying Systems and Networks and i would like to develop my skills to become proficient in Cybersecurity as well can you provide suggestions or guidance to help me progress in this field? Thanks 🙂

[amber matrix]

#👥・new-member-guide

[radiant stone]

I passed out after messaging lol sorry for adding and dipping. I would say get the certs to get you employed then talk to your employer about subsidizing or paying for more certs.

[magic ginkgo]

Yeah agreed

[unkempt tree]

How do i make a zipbomb or is there any good zipbombs i can get ?

[spiral notch]

#1286135820008296509 #📜・rules

We don't help with illegal/unethical activities

[unkempt tree]

Its for testing my computer and VM

[spiral notch]

We aren't chatGPT either.

[stable hornet]

https://tenor.com/view/poochx-poochx-elon-gif-24420629

[unkempt tree]

Uh well

[spiral notch]

elon sucks

[stable hornet]

https://tenor.com/view/shocked-elon-musk-saturday-night-live-wait-what-confused-gif-21520286

[spiral notch]

his stocks are results of his stupidity

[stable hornet]

His or the peoples ?

[spiral notch]

His

Take tesla for exame

[unkempt tree]

How do i access someones network ?

[south plinth]

#1286135820008296509 #📜・rules

[unkempt tree]

Fine fine

[rapid quarry]

Hi everyone can anyone tell me where and how can I start learning Cyber security

[unkempt tree]

I think this is racism is it cause im a black hat

I just wanna access my own network

[strong mortar]

Yes, I’m overthinking and overwhelmed with cybersecurity right now.

[stable hornet]

Yeah so the stocks rise because people are investing right ? How is it his stupidity then

[stable hornet]

Your question was someone's and not your own, stop lying

[unkempt tree]

Typo

[stable hornet]

Sure

[supple grail]

No we are good people and have all agreed that the ethical way is the only way

[unkempt tree]

ok

[late flicker]

Yes

Unless we are not supervised (jk)

[radiant stone]

Please don't go there.

[magic parcel]

@mental tendon bro tried everything nothing worked

[mental tendon]

check for virtual hosts using tools like ffuf or gobuster with vhost mode might be something hidden that way

[magic parcel]

Great i'll check it

[mental tendon]

good luck let me know i

[magic parcel]

Sure

[magic parcel]

Got some 403 and 301 erros it is good but how do i access it? On 403 error its ./htaccess and ./htpasswd so these are imp files

[unkempt tree]

Can i get tools ?

[crisp star]

There are a few millions of tools

[unkempt tree]

What tools you have ?

Are there other discord servers like this one ?

[crisp star]

In your opinion, what does the "tool" need to do?

You need to be more precise.

[unkempt tree]

Network

[mental tendon]

htaccess and htpasswd are usually used for authentication or configuration to bypass or view them you could try directory traversal techniques or check for misconfigurations

[crisp star]

Instead of "learning" tools you better get a good fundamental understanding.

If you know the basic, you know which tool to use.

[late flicker]

Nmap

Only tool you need

[crisp star]

What about Netexec

[late flicker]

Nmap

[crisp star]

Netexec

[late flicker]

Nmap

Use both

Half and half

[crisp star]

Both I agree

[zealous raven]

rustscan is the move, faster and more effecient + you can run nmap commands with it

[late flicker]

That's too much for my punny brain to get

Not enough knowledge yet

[crisp star]

Rustscan is the same like nmap just better

[zealous raven]

How so? usage is very straight forward imo

[late flicker]

I'm just joking hahah

[zealous raven]

simply an upgrade

[late flicker]

I might have to use it

Never used it yet

[zealous raven]

thought you had some questions about it 🤣

[crisp star]

And you can run it as a docker

[zealous raven]

give it a try and thank me later

[late flicker]

Nah just haven't crossed paths with it yet

Btw

[zealous raven]

installing is easy and usage is easy. you got questions with it just hmu my dms are open

[unkempt tree]

Yeah but basically how do i access my Network and upload files to it like from my phone to computer without going on the computer just using IP and network

[late flicker]

Do u guys have any suggestions for DE's for arch

I'm thinking of swapping over

[late flicker]

Heh

Phone ?

[crisp star]

Just use OneDrive or GoogleDrive

[unkempt tree]

Uh but like

[crisp star]

Or you can turn your machine into a server that acts as a file server

[unkempt tree]

How do i access the network

[crisp star]

It's you network you should already be in?

[unkempt tree]

I dont think im saying it right

[silent bison]

Somebody pls tell me how can I install kali linux on my laptop
(I want to replace windows to linux)

[unkempt tree]

Delete system32

[late flicker]

How much free space u got

[crisp star]

Please don't use Kali as your host OS

You can use Linux Mint or any other Linux Distro that's not a Linux Server OS Like RedHat.

[late flicker]

Why not kali

[crisp star]

There is a time where you test something out and brick your whole system.

[late flicker]

Oh ye

[crisp star]

Use a VM or something

[late flicker]

Anyway got any DE suggestions for arch

[crisp star]

KDE Plasma

[supple grail]

KDE plasma is 🔥

[silent bison]

I've a low end laptop
Windows 10
4gb RAM

[late flicker]

Ye like artorian said use another distro

Mint is goid

[supple grail]

mint is also easy to install

[silent bison]

Thankss

[late flicker]

No worries

[silent bison]

Which edition should I download?

[unkempt tree]

So basically lets say that i dont own the network but i got the IP how do i access the network and upload stuff to the PC or router ?

[amber matrix]

[spiral notch]

XFCE

:3

[crisp star]

That's why I told you to learn the basic. Look up some of the CISCO courses with packet tracers

[unkempt tree]

Im a skid

[spiral notch]

#1286135820008296509

[crisp star]

Don't care. That's why I said learn it.

[unkempt tree]

How do i learn cisco tho ?

[amber matrix]

You can change that skid status

[unkempt tree]

Its easier to use other peoples scripts then making my own

[amber matrix]

Pay attention learn stop trying to rush through things your not gonna learn everything in one day or night yk

It takes time

[crisp star]

https://www.netacad.com/courses/networking-basics?courseLang=en-US

[spiral notch]

And we're not gonna give u those scripts

[crisp star]

Then why do you even attempt to get into security?

[crisp crystal]

sorry to bother yall but my friend got doxed and asked me for help but all of my methods are outdated sence i wasnt reverse searching in a long time so could anyone help me a bit?

[spiral notch]

Report the doxer to the police

[amber matrix]

If he’s doxed already and they already have his info there nun you can beside get in contact with police

[spiral notch]

we're not going to help you dox a doxer or commit any other cybercrimes

there's also no way to prove this won't be used maliciously or to target innocents

[crisp crystal]

am not sure but i think he is underage so we dont want him to get in truble so we just wanted to scare him a little with his name and some basic stuff

i managed to get his number

[spiral notch]

.

[spiral notch]

.

[crisp crystal]

ah mb didnt see

[amber matrix]

You remind me of a Roblox com kid

[crisp crystal]

i dont even know what that is lol

[amber matrix]

O ok

Just checking your temperature

[unkempt tree]

Who ?

[spiral notch]

don't even start it..

[amber matrix]

https://tenor.com/view/druski-shrug-idk-iono-hands-up-gif-7122581203490458147

[unkempt tree]

Anyways

[spiral notch]

we mutually agree... silently

[spiral notch]

dane

it's easy to tell by how ppl act or their profiles

[unkempt tree]

How

How old is he even ?

[amber matrix]

Just how the person comes off and his story

[unkempt tree]

How did he managed to get doxxed by a underaged person

[amber matrix]

It can happen

People add each other on discord they say there usernames they add each other

And that’s when all the shi happens

[unkempt tree]

What

[amber matrix]

Ok

[unkempt tree]

How can that get your ip from username ?

[amber matrix]

One your own Roblox you have people asking if you have dizzy

Know dizzy is discord for short terms

And they ass each other

And then that’s when everything happens

Or if someone keeps using the same username over and over it easy

[unkempt tree]

So what they add eachother then they become friends and they like say oh my name is jacob whats yours ?

[amber matrix]

No

They become friends and they finally get to the point

Oh you have dizzy?

There answer is yea

Or the other answer is

What is that

[spiral notch]

and a bit more

linked socials, bio

[unkempt tree]

Grabify ?

[spiral notch]

That's the worst thing u can jse in 2024

Use

2025**

[amber matrix]

Grabify was back then

[unkempt tree]

Why do you care ?

[spiral notch]

It can't, but osint is pretty strong

[spiral notch]

???

u wrote "grabify?" As a question

[amber matrix]

Honestly I care if people gets doxed yea but it’s the persons fault or you can’t rlly believe the story me personally I have trust issues

[spiral notch]

I replied: that's the worst thing u can hse

tf?

[spiral notch]

and online proof can be easily forged

[amber matrix]

So easy

[unkempt tree]

I have never been doxxed but there were people trying to or trying to

[amber matrix]

That’s how I started to learn I got doxed

They thought they was scaring me but all they was doing was motivating me just to learn

[unkempt tree]

Lol

[amber matrix]

Now

I dare someone to dox me

They can’t

With there simple OSINT tools

OSINT don’t work on me

[crisp crystal]

not sure but id say abt 16 or sum

[amber matrix]

And how old are you?

[unkempt tree]

How ?

[crisp crystal]

lol i aint saying that

[amber matrix]

I can guess

[amber matrix]

Your 16

[crisp crystal]

maybe

maybe not

u will never know (proably)

[crisp star]

Very careful about your age, or Discord is going to ban you

[crisp crystal]

wdym

[crisp star]

https://www.reddit.com/r/BannedFromDiscord/

[crisp crystal]

if u think some under 13 will know cyber sec basics ur overestemating them

[crisp crystal]

yea ik

[unkempt tree]

Are there more servers like this ?

[crisp star]

You are going to get the same answer. And worst case, someone will send you malware.

[unkempt tree]

?

Whats the same answer

Any forums or something

[crisp star]

If you ask the same questions on other server.

[unkempt tree]

Forums ?

[amber matrix]

There’s other things but a lot of scams and trash stuff

[unkempt tree]

Ok

[late flicker]

Aighty will try it

[spiral notch]

id say

14

hypothesis

[amber matrix]

So between 14-16

[late flicker]

Nah 4 on the dot

[amber matrix]

Ik

[unkempt tree]

I am 14

[crisp crystal]

nah

[spiral notch]

ur profile gives it away

[crisp crystal]

i might be older or younger

[spiral notch]

kinda

yea then younger id assume

[crisp crystal]

i had an acc in 2019

but i lost it

[late flicker]

Doesn't prove anything

[spiral notch]

which doesnt say anything about ur age

[unkempt tree]

What if hes 7103002929293 years old

[crisp crystal]

oh and my profile is like this cuz i still play some games

@acoustic spear is my main

this one is for a game called shindo

[late flicker]

Idk why

[crisp crystal]

(i dont recommend playing it cuz there are black hats on that game)

[amber matrix]

So you basically use the same username for everything

[spiral notch]

which still doesnt proof

anything

[unkempt tree]

Why is there a role called blackhat hackers ?

[late flicker]

But I don't feel the intermediate in his roles kek

[late flicker]

Cus that's what they are

[spiral notch]

and i dont feel the over 15 age

[crisp crystal]

nah i got like 3 main accs with different names

[amber matrix]

I agree with kv I think bro 14 15

[late flicker]

Imma stay quiet on that hahah

I kind of use the same username everywhere

[amber matrix]

💀

[late flicker]

Hey it's got variations

[unkempt tree]

Yeah but its not like anything unethical can be discussed or something ?

[late flicker]

Not in here

[amber matrix]

It’s cool but just be careful yk shi can happen like that

[late flicker]

Ye I know

[crisp crystal]

wait what is even minimum age req for this server?

[late flicker]

I have not the same pass anywhere at least XD

[late flicker]

13

Discord TOS age

[crisp crystal]

thats crazy

[amber matrix]

Why you 13?

[crisp crystal]

nah

[amber matrix]

[spiral notch]

-# (or under)

[unkempt tree]

Why are you greyhat ?

[crisp crystal]

but its too low for this server

[spiral notch]

called it

instantly

knew it

[late flicker]

Cus I don't really believe in the notion of good and evil

[amber matrix]

😂

[spiral notch]

im proud of my intuitions

[crisp crystal]

?

[spiral notch]

@eager knot

want a free ban log

or can u not farm those yet

[late flicker]

We're proud of you too

[spiral notch]

;3

[crisp crystal]

huh

[spiral notch]

i js instantly knew by his profile he was not over 15

[crisp crystal]

yea that obvious

[unkempt tree]

What

[crisp crystal]

but what does that have to do anything with me saying 13 is too low for this server

[spiral notch]

then youre contradicting urself

[late flicker]

Yep

[spiral notch]

u said ur under 13 -> u said nobody under 13 can be good at cybersec -> greyhat intermediate

[crisp crystal]

like imagine some kid find people talking abt zero flipper and make their parents buy it

[crisp crystal]

nope

[spiral notch]

thats legit what u just ssaid

tf

lol

[crisp crystal]

i never said am under 13

am 14 if u rly gotta know

[spiral notch]

amazing

still guessed

[spiral notch]

e

[crisp crystal]

yea but i aint under the age of discords tos

[late flicker]

Well played hahah first guess

[spiral notch]

youre too young to be getting revenge on ppl who dox lol

[crisp crystal]

nah i aint looking for revenge

i just dont want him to get in more truble

[late flicker]

Just call the popo on him

[spiral notch]

-> which is looking for revenge

[crisp crystal]

he didnt dox me so i rly dont care

am just trying to stop him from doing sum worse

[late flicker]

Talk to his parents

[crisp crystal]

bro is from US and am in EU

[late flicker]

Then why does it even matter

[crisp crystal]

imagine if he doxes someone who can get a rat on his pc or sum

and he leaks his private dms or sum

[late flicker]

Someone who could get a rat on his PC wouldn't get doxxed on the first place

[spiral notch]

☠️

[crisp crystal]

good point but still

imagine if he tries

[spiral notch]

ok then he gets bit back

[late flicker]

He would get nowhere

[spiral notch]

trust karma, and dont shove ur nose into somewhere u dont know the outcome of

[crisp crystal]

i mean he leaks fake stuff

lets say that person has a fake indetity or sum

[solid gull]

Then it's on him cuz it was his decision to do that

[spiral notch]

^^

[crisp crystal]

yea but would u want someone doing that to a kid

[spiral notch]

??

[late flicker]

It will teach him the lesson u so want

[crisp crystal]

rat isnt the same as telling the person their name😭

[solid gull]

I wouldn't want it happening to anyone but seems like the guy is asking for it and he will get taught a lesson I suppose 🤷‍♂️

[crisp crystal]

yall are merciless fr

[spiral notch]

sure

but he gets revenge

that u want to give him anyawy

[spiral notch]

sorry we dont wanna commit a cybercrime ig

[crisp crystal]

neither do i

i mean

i dont want to but i dont want him to get in more truble

i talked to my friend and people made a gif of his face and his user comparing him to a monkey

[late flicker]

Then get him out of there

That's the best u can do

[crisp crystal]

i meant of the guy that doxed my friend

[spiral notch]

first of all

trouble*

second of all

you're 14, whyt do u expect to be a saviour angel, stopping him from digging a hole for himself

[late flicker]

Then you should get out of there

[spiral notch]

third of all, we cant help nor teach u to do this for obvious reasons, proof can be easily forged and u can just be acting as if were doing it for the good but actually you just have malicious intent of doxing someone innocent

[crisp crystal]

i am safe when it comes to that

[unkempt tree]

Am i allowed to help him ?

[crisp crystal]

i got no pics of me online

[late flicker]

No

[crisp crystal]

i mean if someone asked me to do that id say the same thing but ig i didnt think before i asked

[spiral notch]

and why exacttly woulkd u want to anyway

[late flicker]

He has black hat in roles

That's why I think

[crisp crystal]

i had some dms offering to help but i rejected

i appreaciate it tho

[unkempt tree]

For fun

[late flicker]

Wanna get banne for fun too (jk)

[unkempt tree]

He dosent want help anyways

Idk why he was asking in help me

[crisp crystal]

for help ig

[unkempt tree]

Yes but you dont any help tho

?

[unkempt tree]

.

[crisp crystal]

not now

before i wanted

[unkempt tree]

Kk

[proven night]

does anyone know the best path to get into cyber analytics when it comes to certs i have limited knowledge when it comes to cyber security and I want to get into this field of work

[mental tendon]

start with basics like comptia security plus and network plus since they cover all the foundational stuff once you feel good with that maybe look into certs like certified soc analyst or cySA plus

also learning a bit of python

[radiant stone]

https://pauljerimy.com/security-certification-roadmap/
This is a good tool

[radiant stone]

The real truth about cybersecurity regardless of what all the youtube ads are showing and people are spouting is that cyber security is Rarely an entry level position. It's a transition role for feeder roles like network engineers, Software developers, Systems engineers and help desk employees. Without having on the job experience you will potentially have a hard time getting a job other than entry level SOC which isn't bad but can be draining for some people.

[late flicker]

There is so much in here I feel lost

[dapper forge]

aspire to find your "section" and do one cert per "level"

should be easier that way

[crisp star]

https://tenor.com/view/doomer-doomer-sad-depressed-gif-15543940

As a SOC analyst this is not true

[radiant stone]

Welcome to the field 🙂
But in all seriousness it's a lot and if you want the real answer, other than academic types. There are 2 types of certs you need,

1. The ones you need to land the job.
2. The ones your company pays for.

[radiant stone]

Didn't i say SOC is the main entry route?

[late flicker]

This is the reason why I got into the school I am now as it offers internships and on the job experience (dev not cyber security tho)

[crisp star]

I was talking more about that it's draining

But it is.

[radiant stone]

OH LMAO.

Srry

[crisp star]

I had way too many "WTF" moments

[radiant stone]

Yep, Most people start in a feeder role then transition. You can't really secure something if you don't know how it actually works.

[radiant stone]

Nothing better than staring at a SIEM log for 7 hours while you flirt with the concrete from your 4th floor office window.

[crisp star]

It's more like wtf why did the user fall for a phishing link. Or wtf why did the user just run malware. Or wtf why are suddenly files being encrypted.

We don't stare at SIEM. Use Cases are what's going to trigger an alert.

And depending on Use Cases we are going to investigate.

Of course there are XDRs which makes use cases obsolete

[radiant stone]

yeaaa... Not a SOC analyst myself but i got a hit from our endpoint saying there was a behavioral detect for Mshta having a command ran leveraging it. Sure enough had a user fall for a ClickFix Engineering attack. Those are nasty, full scan from Cisco CSE showed no infections but upon further inspect there was a service creation event in the log. 1 isolation command and a phone call later the user is getting a brand new image on that laptop 🙂

[crisp star]

Ah yea ClickFix and Fake CAPTCHA are so frequently.

Was it also an MP3 file?

Which contained 99% of trash data?

These are probably Lumma Stealers

[radiant stone]

Nope, was a real site that had a fake index page added to it with 1 .js file that engaged it upon loading the page

[radiant stone]

Yep was either Lumma or Xworm

[crisp star]

Oh god yea. XWorm is also on the raise again

Also did you know you can disable Windows Key + R?

Would probably prevent that user execute these malicious commands

[radiant stone]

Yea GPO for that and not allowing users to run commands at all is the main thing.

Not my Environment that got hit though so not my problem. 😂

[crisp star]

We get that stuff weekly

😩

[radiant stone]

yurp. The joys of SOC.

[dapper forge]

since when do mp3s have malware that can be executed like that

[radiant stone]

Reminds me of when i was T3 for a hospitality company. It was all break/fix but no implementation of actual resolutions. Endlessly draining.

[crisp star]

It's not really an mp3. It's still an HTA file technically.

For some reason mshta process ignores the garbage stuff and executes the script content.

[dapper forge]

How often do you experience snake/agenttesla in your jobs? or not?

[dapper forge]

yeah

although those win + r malware mostly deletes itself after execution

[crisp star]

Last year we had a few Agent Tesla. But not much anymore

[dapper forge]

hm

[radiant stone]

Yea, I'm going to bring it up to the heads to remove perms for mshta for our users. We don't run any VBS anymore so there is no reason for us to leverage it.

[crisp star]

mshta is legacy anyway

[unkempt tree]

whats mshta

[radiant stone]

yea VBS has been dead for a long time

[crisp star]

But then again I've seen that TeamViewer is for some reason using mshta.

[dapper forge]

anydesk is soo much safer against scammers fr

[crisp star]

https://lolbas-project.github.io/lolbas/Binaries/Mshta/

[unkempt tree]

ok how do i abuse mshta ?

[radiant stone]

oh god i hope people don't use TV for their environment

[radiant stone]

You don't

#📜・rules #1286135820008296509

[unkempt tree]

but it says that can be abused by attackers

[radiant stone]

Correct. I'm saying you don't

[dapper forge]

yes

[unkempt tree]

why not

[dapper forge]

@radiant stone what is your role at your company exactly?

[radiant stone]

Because we don't teach people how to do that here.

[unkempt tree]

why not

[radiant stone]

Title is a level of Systems Specialist. Lots of generic titles where i'm at.

[dapper forge]

ah cool

[radiant stone]

#📜・rules #1286135820008296509

[dapper forge]

Would you say job experience is a replacement for a uni degree? and if yes how long experience?

[late flicker]

Yes and no

[dapper forge]

because this isnt a server where you get help abusing things to hack victims

[unkempt tree]

what is mstha then ?

[radiant stone]

Once you reach around 30 yes. Also depends on if you're going for a hands on role or Management role. It's unfortunately a loaded question because company A will tell you no while company B tells you yes

[dapper forge]

no one knows your intentions so now one can trust you with that information

[late flicker]

Fxliz

Trust me

You will learn more

[unkempt tree]

Im a goodkid

[late flicker]

By not asking questions like these

[dapper forge]

yeah, thanks!

[radiant stone]

Plus you were already linked in chat what it is.

[dapper forge]

I just explained it lol

how should i know that

if i knew you irl as a friend id tell you how you could abuse it because i trust you and would know you wouldnt do anything with that information

but i dont

so i wont

same for everyone else here

[radiant stone]

If you're deciding between the 2. Go to a good public university (or shoot for the top ones. In the usa if you make under 80k a year you get harvard tuiton waved completely.) Get the paper and move on. No one cares where you went once you get past your entry level job

[unkempt tree]

how

[late flicker]

So instead of asking that silly question

You read the article

[dapper forge]

Im in Germany the monry isnt really an issue

[unkempt tree]

i know in a video srhoe said asking questions is good

[late flicker]

And find a YouTube vid in it

[unkempt tree]

ok

[dapper forge]

But thanks for the advice nevertheless! And will do!

[meager path]

Google.com

[late flicker]

Not how to hack someone questions

Or how to exploit someone

But rather how something works

[radiant stone]

You're correct. Also part of hacking is working in the scope you are paid for. Our server's scope is #📜・rules and #1286135820008296509 . If you go outside of scope on a real job you will face either 1. loss of your job. 2. fines 3. Jail time.

[unkempt tree]

eh

what keeps you guys from doing soemthing unethical ?

[radiant stone]

Money

[dapper forge]

when your willing to make the effort

[late flicker]

Jail

[dapper forge]

you yourself said you just want to watch tiktok for that

and want to ask questions about how you could hack a victim

[dapper forge]

The law

and my conscience

[radiant stone]

When you make 100k+ a year and don't need to stiff up every time a door slams too hard outside your house. You realize being ethical is way better than not.

[late flicker]

Imma ask srhoe to make a back in line channel and have kids like him join and just give them lectures

[desert cape]

Hi guys
I am a beginner in this field, and I want to progress quickly and efficiently, please tell me what I should start with.

[late flicker]

#👥・new-member-guide

[radiant stone]

In school or looking for work?

[late flicker]

U can start with this

[crisp star]

Prison lol. And if you go to prison you can forget getting a job where they are going to do a background check

[desert cape]

I want to make it my future career

[unkempt tree]

what if i got to north korea

[radiant stone]

Yep which is awesome, my advice depends on what stage you're in in your life

[crisp star]

They won't hire you

[radiant stone]

If you're not north korean already.... Prison

[dapper forge]

then your dead

because youll ask someone how to attack kim.jong un

[late flicker]

Hahahahah

[desert cape]

I'm still quite young 😅 to tell you just I'm still in high school but I want to prepare myself enough to be sure that it's my future career because I'm passionate about this field

[late flicker]

Yes u can start with #👥・new-member-guide

[dapper forge]

id recommend watching youtube videos about it and maybe getting a tryhackme subscription

[late flicker]

Will help u open the eyes on the field

[dapper forge]

but can start off with the free courses first

[late flicker]

Is the subscription worth it

[meager path]

https://tenor.com/view/ftc-flight-reacts-flight-reacts-clapping-gif-17245651

[desert cape]

Ok thanks a lot guys (and sorry if my english is bad I'm talking to you using Google translate)

[late flicker]

It is alright it is already great that you are making an effort

[radiant stone]

No worres! That's perfect. So Degrees are still relevant in the field, i would recommend going to a good school that's cheaper. A state school will work fine. Do certs or any classes that offer certs. Then go into a job like network analyst or systems admin. From there you transition into cyber since it's a transition role unless you go SOC or are the top 1% of your class.

[late flicker]

That's the important part

[spiral notch]

@desert cape https://deepl.com

[dapper forge]

im getting it soon so idk yet

but i havent heard anything bad abiut it

[late flicker]

If you could give me a review on what u think when u get it it would be awesome

[radiant stone]

If you actually use it then it's a decent pick up. Real cost of a subscription is: Price/hours used between billing cycles = actual cost per hr

[dapper forge]

sure will do

[clear ledge]

Wtf

[radiant stone]

To be fair, it is a fair question to ask. Most people who are in cyber security professionally are in positions of power within an org's network. If one snaps one day the sheer damage they can do is pretty immense.

[unkempt tree]

I remember when an anti virus company released an update and it basically crashed the entire world

[dapper forge]

edr

crowdstrike

[clear ledge]

Yes but people have morals

[spiral notch]

Morals

However it's a bit contradictory sometimes

I'm not going to admit or confess to any illegality but I follow what's right

moral doesn't always mean legal, nor ethical

[radiant stone]

Morals are also subjective
We probably have different morals on different topics but it doesn't make either of us "wrong" or "bad" other than to each other and those who hold opposite morals. It's too philosophical

[spiral notch]

^^

[clear ledge]

Everything that envolve human beings are subjective

[marsh drum]

Anyone good at forensic work? Mobile/device (apple)

[maiden hawk]

Hey Dm

[desert torrent]

this isn't common knowledge

[iron gull]

common sense isnt either

even though its called common

[unkempt tree]

Can someone send me a link to the bosint discord server or something that can get me more information about the bot ?

[eager knot]

in all honesty i'd never use osint tools in discord

nor any other hacking tool for that matter but that just might be me only

you can search it up easily btw, they have a website

[unkempt tree]

Why not

[eager knot]

he has some questionable features

ip-cam?

like it legit gives you immediate access to a web cam you don't even have explicit permission to access to

so doing that plus in discord is a combunation of troublesomeness

[unkempt tree]

Ok

[static island]

help me

[golden vine]

Help me

[static island]

am new here and i wanns learn scritpting

[golden vine]

And me too

The base

[static island]

anything rlly some thing that can maybe be useful

well how are the basic

[golden vine]

I'm new and i don't know anithing

[timber magnet]

hello, i am new here

i want to know if i can get acess to some iphone remotely

[static island]

no nothing like that just wanna do some cool stuff

i didnt see this amma take a look

[golden vine]

How can i get a bot for a game?

I didn' understood

An ok thank you

[timber magnet]

my girl is cheating on me man

[static island]

so true but if u want i can offer advice on how u can deal with it but base on ur answer u minght not like the advice msybe idk

[timber magnet]

which is?

[static island]

i messaged you if that of

[static island]

hey can these things be done on chromebook

[unkempt tree]

I will help you

[chilly merlin]

How can i insall all C++ prequisites on Visual Studio Code?

@last maple You seem smart

can you help me out

[radiant stone]

@static island @unkempt tree @timber magnet @golden vine
#📜・rules #1286135820008296509 We do not allow any assistance with unethical hacking / offensive cyber work.

Especially since yall are asking how to do X an Y. At your skill level you will more than likely get arrested because you will be in the logs of whatever device you're trying to compromise.

[unkempt tree]

But im a minor they cant arrest me

[static island]

wooooow am not into that i jus thought it work be cool and a bit challenging to try my habd at hacking and even if i was gonna hack someone i would be a white hat

[radiant stone]

You can be charged as an adult if you are caught doing a multitude of cyber related crimes. A judicial waver from a judge and you get the big boy prison.

[radiant stone]

It's really fun to hack tbh that's why we recommend our users to go to #👥・new-member-guide and make a hack the box account or tryhackme. Breaking into an iphone is 99.99% of the time not going to be in scope for white hat work.

[unkempt tree]

Well

I heard apparently

Theres xboxes in prison

I will just become an xbox hacker

[static island]

thanks for the advice man appreciate it

[chilly merlin]

Dump her duh 💀

[magic ginkgo]

Anyone have any good strategies for memorising acronyms? I'm struggling remembering things like VPC, WAP, etc etc, mainly networking kind of things or cloud based things that I don't have to much experience with

Yeah but what about also memorizing exactly what they do

I feel like thats what im struggling at most

Still just a cheat sheet?

Mmkay

Also sidenote I find it incredibly stupid there are 2 MAC's, Media Access Control and Mandatory access control

Like..... why

[radiant stone]

You'll get use to duplicate Acronyms. Wait till you have 12 different tools / software that all have a "profile" you work with 🙃 Cisco's vpn has 3 different profiles all just call the "profile"

[regal mantle]

I know this is like out of box type things but this is crazy I keep getting messages from a 39041 and a 32665 number talking about facebook code for login but it keeps sending me messages and I change my password fine for a day then again so I tried looking it up and still can’t get a answer so I thought someone here could help me

[unkempt tree]

What dose comboys mean ?

No like actually

Plz

[regal mantle]

I did and still kept getting them

[unkempt tree]

Disboard theres like a tag called com

[regal mantle]

Ok thank you

[ancient notch]

Hello world

[unkempt tree]

Basically the discord site to find servers

[chilly merlin]

Discord community eboy

Just a term kinda

[bright bough]

Help why could this happen:
About this page

Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending the requests, and not a robot. Why did this happen?

This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the Terms of Service. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you continue to use our services.

This traffic may have been sent by malicious software, a browser plug-in, or a script that sends automated requests. If you share your network connection, ask your administrator for help — a different computer using the same IP address may be responsible. Learn more

Sometimes you may be asked to solve the CAPTCHA if you are using advanced terms that robots are known to use, or sending requests very quickly.
IP address:
Time: 2025-03-19T05:43:28Z
URL: https://www.google.com/search?q=gmail&oq=gmail&gs_lcrp=&client=ms-android-xiaomi-rev1&sourceid=chrome-mobile&ie=UTF-8&sg_ss=

I'm getting this any help ?

[chilly merlin]

Just do the capatcha it popped up man

[bright bough]

How can I know what am I making

[bright bough]

Doesn't answer my question

[chilly merlin]

Its literally just google flagging you

[bright bough]

Are you kidding me ... How does that happen ... Is it like google making random stuff ... Things doesn't just happen ... I'm using my home network

[bright bough]

Why

[chilly merlin]

Dude it just pops up googles detection is stupid its not a big deal happens to everyone

[bright bough]

😑

[chilly merlin]

💀

[bright bough]

I can't send images here ?

😒😤

[chilly merlin]

jesus christ

[nova peak]

is C worth learning ?
like i am new, i know Python and C++,

oh k

[neat blaze]

Hey everyone. I'm new here. My girlfriend's phone has been stolen and I'm trying to help find it, but i have no idea how to go about it. Please help🙏

@last maple its an Android phone.

[slow marsh]

What's better for blue team members letsdefend or tryhackme?

[slow marsh]

So letsdefend is better?

[crisp star]

Yes do it. Go to letsdefend. They also have cool memes

[radiant stone]

This is common as well if you're on VPN

[deft galleon]

Hi , I'm Abdullah from Pakistan currently doing jr pent from THM just started yesterday also i have completed Google Cyber security and Google IT course . Goal is to complete Penetration testing and red teaming after completing that I'll be doing the security analyst and then security engineer pathways from THM
Also I'm looking for virtual internships that can be paid or Unpaid
(Focus is to gain experience)
If anyone of you could guide me in this or refer to someone

[bright bough]

I didn't set vpn how can I know if i'm

[bright bough]

If you know CPP don't need to know c

[radiant stone]

Both are good, They have different info that is useful for a blue. I personally use https://cyberdefenders.org/ I like their labs more.

[radiant stone]

If you didn't set it then it's not that. Are you in the USA?

[bright bough]

No

[bright bough]

Why

[radiant stone]

Well some countries have lower trust scores with google..

unfortunately

[chilly merlin]

@spiral notch u up?

https://www.offsec.com/courses/pen-210/ can u check this link and tell me if its good for network sec or not

[spiral notch]

haii

so

@chilly merlin ive seen this before, some good things but nothing specific

ill check syllabus rq

it isnt too detailed

alr ive looked through it, either way i think you know most of this stuff? however if youre going for the cert then yeah why not

i dont think youd need to study much eithe

[chilly merlin]

yea I'll complete it asap and move onto next

thanks

[spiral notch]

np !!

[fluid sand]

morning all. i am just looking for advice and suggestions.

[supple grail]

advice with what?

[fluid sand]

(didi not mean to send that) i have an old wifi router that i want to use to have an airgapped network and on the network i have an old machine running two VMs (bridged) one of which is metasploitable 2. i was looking for any suggestions or ideas on how to make this a better practice attack surface

[fluid sand]

lol i wanted to go to a new line and sent it by mistake there lol

[supple grail]

oh

[fluid sand]

thank you
i now know how 😋

thank you, its kinda amusing how many small things i am still learning that i jumped over once apon a time lol

[fluid sand]

One on the main goals for this is i want to get it to a place that i can take it over to the uni for myself and others who are so inclined to have red/blue team events with each other, and it is just a fun thing to mess with at home.

i think it would be fun, and doing stuff at the uni may just encourage others to be a bit more interested in it all

[late flicker]

Sorry #1286135820008296509

[spiral notch]

YIPEEE

[spiral notch]

heyo

what did u mean by "better practice attack surface"

Like how to add more things to practice on like vulnerabilities?

[fluid sand]

hey thanks for popping in. Yes, and have it set in a way that it can be approached from both a blue and a red team perspective. so to build in more realistic defense and attack scenarios, metasploitable 2 is allot of fun but i assume unlikely to be a scenario one would deal with in the wild(i am using that to better understand C2 frameworks such as sliver), so one of the things i am looking at is simulating an active directory type set up and various other configurations. i also have a rasberry pi that i will be throwing in to simulate things like a honeypot ect.

[spiral notch]

sorry, just to clarify your question one more time, you need help setting up an AD vulnerable server, or find more things you can play with, other than an AD server

[fluid sand]

Some advice on what to look into setting up (find more things to play with other than AD)

Sorry I see that last one was more of a ramble 😅

[wary monolith]

What is best to run kali linux on, Virtual box or USB?

[opaque patio]

Can I to run it on an external hard disk

[spiral notch]

run what, a vm?

yea

[nocturne pebble]

Having a issue with Microsoft Surface Pro 6, where the device c: drive is locked by bit locker and i have know reference to the recovery key whether via the users O365 account nor Active Directory. Has us in a pickle as we want to access files on the drive. Any ideas?

[spiral notch]

virtual machine is safer however you've got some limitations if u use it instead of a usb

[wary monolith]

Like what?

[spiral notch]

a few network exploiting things

like local networks, wifi hacking etc

is somewhat limited

[wary monolith]

Oh

[spiral notch]

so i use usb instead

i dont rly use kali tho, i prefer arch

even for pentesting

[wary monolith]

I'm very new to this so I was told kali would be good to start

[opaque patio]

Kali

[spiral notch]

its really close however my card supports AP mode. not on virtualbox tho

maybe its a virtualbox only issue. maybe it works on vmware

[naive bloom]

Has anyone worked with the disks pools in windows server 2019? I need help, i cant make my windows server see the disks I add and I cant mount a RAID 5

[dapper mortar]

Virtual machine, I'd recommend Virtual box because easy set up

[formal cobalt]

Please I need help to track someone in Nigeria can anyone help

[supple grail]

#1286135820008296509

[formal cobalt]

Understood

[icy hazel]

Weird question, for a while, ive been usb tethering my phone to my laptop for internet. Is there a way i can reinforce the security of the connection phone side?