#👥・help-me

1 messages · Page 61 of 1

humble geyser
#

I would just need to do my research in what I have to actually learn

halcyon flame
#

What's up @gilded siren ?

gilded siren
#

How was your day

halcyon flame
#

Fine, you? If you have something to ask, you can share it here - I don't accept DMs from those I don't know I'm afraid.

chilly merlin
#

Hey i am asking if i should use proxychains before every commande or is it automatically working once configured?

eager knot
upper iris
#

Hadoop Distributed File System (HDFS) @chilly merlin

chilly merlin
#

I guess it’s similar to that

halcyon flame
honest bridge
radiant stone
#

Please remember if there are users of our server dming you to do illicit acts or offering services we encourage you to make a #📩┃ticket and provide evidence to allow us to protect our members.

honest bridge
#

@chilly merlin i need help with my biology assignment

halcyon flame
#

@grave dew Not here please, this is an ethical server. Read #📜・rules

chilly merlin
#

im thinking of switching to linux mint which edition do you guys recommend i get?

honest bridge
#

still need help with biology

honest bridge
#

i completed the fuck@ss biology assignment and i dont even care if i fail im just glad its over

honest bridge
#

It’s not homework 🤬

#

It’s just work I do at home

chilly merlin
#

☠️

bleak bronze
#

Does anybody know how to jailbreak a ipad 10th gen

broken spindle
honest bridge
bleak bronze
#

Understood, thanks

late flicker
supple grail
shy siren
#

Can i just use the vpn of tryhackme or hack the box instead of using the vm 1 time per days :v

supple grail
#

you mean the openvpn thing?

#

there is a thm room on it

shy siren
supple grail
#

yeah it should work

ripe flame
#

Hi

late flicker
#

if u need help u can just start with the question

#

no need to hold back

ripe flame
#

👍🏻😁

clear spade
#

Hello iv been trying to boot kali linux on my laptop but iv already been using windows before and windows keeps blocking the boot, is there any possible way for me to boot kali without having to erase the laptop

broken spindle
#

Yes , you can use kali linux as a virtual machine or Bootable machine

clear spade
#

What if i dont want to use a virtual box because in the virtual box it doesnt give me complete acces to all commands

eager knot
#

like what?

#

like which commands i mean

broken spindle
clear spade
#

I have virtual box and i cant use all commands

broken spindle
#

I'm using vbox, ain't got stuck since yet

broken spindle
clear spade
#

Most of the programs that are in the kali starter kit like nmap

eager knot
#

wdym

#

of course you can use nmap

broken spindle
#

Wdym?

clear spade
#

It doesnt work for me?

eager knot
#

what error do you get?

broken spindle
#

Can you run sudo su ?

clear spade
#

I dont remember what error

broken spindle
#

It will give you root access , if you can then you can utilize all the commands

eager knot
#

try it again and tell me, also don't forget that once you run the system you need to fully update and upgrade it

broken spindle
clear spade
#

Ill try thanks

eager knot
#

just do
sudo apt update && sudo apt full-upgrade

clear spade
#

Thanks

supple grail
broken spindle
#

I Didn't know about this , lol🤣

scarlet aurora
#

how to get level 1?

chilly eagle
#

chat to level up

chilly eagle
#

sniped ok

desert torrent
#

I need help someone help me 😭

#

(I'm not home to provide further context)

eager knot
supple grail
desert torrent
#

alright. back on my laptop

supple grail
#

so uhh

#

whats the issue?

desert torrent
#

my terminal isn't cool (transparent)

supple grail
#

did you press apply?

desert torrent
#

yes

#

that was the active config

normal hornet
#

Who can help me with this 2). Brute force the website http://testphp.vulnweb.com/ and find
the directories that are present in the website.

desert torrent
#

im running qterminal btw, sensible finds and runs my terminal

eager knot
#

either that, or gobuster/fuff

normal hornet
heady eagle
#

i want to move my kali from c drive to another drive

desert torrent
#

the transparency issue was caused by a picom start-up issue

#

other issue 🙂
After a system update, system can't auto detect directories. https://imgur.com/Q6XscI6

argcomplete is installed

#

im working on it too, just reaching out to see if anyone has any input

sour badger
#

When you need help or have a question, drop it here

#

@pine terrace

pine terrace
#

TY 🙏@sour badger

soft stump
#

Yo I need help installing a OS on my Hard drive

#

So my Laptop is without OS right now and I’m using a Kali Live boot stick rn

chilly merlin
#

lol

#

grab an iso

#

flash the iso to the usb via balena etcher

#

go to ur bios

#

make boot priority the USB

#

and install via there

calm plaza
#

What is the best wordlist to crack the .zip file in the Nocturnal machine on Hack The Box?
Hi, I'm working on the Nocturnal machine on Hack The Box and need to crack the password for a .zip file associated with the machine. I've tried several common wordlists, but haven't had much success so far. What do you think is the best wordlist for this kind of challenge? Is there a wordlist that has worked well for Nocturnal, or any more comprehensive lists you would recommend for this kind of cracking attempt?

I would really appreciate any advice on how to improve my cracking attempts to keep progressing on the machine.

calm plaza
eager knot
#

hmmm

#

maybe the password is not in a wordlist

#

but rather somewhere else

#

since it's an active machine i kindly ask you to dm me in order to get further assistance

#

we don't want to spoil any information regarding it

calm plaza
#

okayy

#

thx

chilly merlin
obtuse scarab
#

Is there a red hat certification just asking I haven’t been seeing anything on it was looking into it. Just wanted to know if anybody know.

calm plaza
chilly eagle
#

This ?

obtuse scarab
normal hornet
#

Am using Kali Linux virtual box, but I can't screenshot my work...pls some should help me out.

supple grail
#

It should open a menu to screenshot

normal hornet
chilly merlin
#

go to

#

ur main system

#

windows key + snipping tool

normal hornet
#

Is not working

vague tusk
#

hello guys,
i didnt visit thm for months and i want to come back and be conistent, but i think this is not enought to focus on thm only, i thing i should follow a youtube channel of someone hacking for solving or read writeups or something, does anyone knows a good guid or sources please?
thanks.

soft stump
chilly merlin
stray mural
#

I'm on windows rn. I tried to change the hosts file using notepad running as admin. I inputted an htb machine's ip address tab space and it's name like dog.htb

#

but still the website isn't running

#

how to troubleshoot this:)

keen notch
#

What is the difference Between m5stick c and m5stick c plus 2

topaz bloom
#

how to get started with ctf?

#

Do I have to read all of that?

chilly eagle
#

"You want to get started with ctf " right

topaz bloom
chilly eagle
topaz bloom
toxic gale
#

hey im upgrading to win 11 today cus of the support ending later this year for Win 10 do you have any recomendations for settings or other tips that could help with performance or privacy? i dont know enough about the topic but ive heard that win 11 has some annoying features that are on by default. itd help me greatly if people would have recomendations

eager knot
#

Otherwise you'll face problems

eager knot
late flicker
#

ftp> ls
200 PORT command successful. Consider using PASV.
425 Failed to establish connection.
ftp>
guys i tried using pasv
still the same

#

its done fixed it

toxic gale
pulsar niche
#

Hey guys,
I recently bought a laptop from a guy in my locality so I can start learning about Networking, Linux and hacking but it was a company laptop that he had laying around.
I got Kali installed in it through a friend but the company logo still shows up as soon as I power on the laptop and then loads into kali. I updated the BIOS but still no effect.

I wanted to know if I can just change it back to Dell and not have the company logo show up.

Laptop: Dell Latitude 3420

Any help is appreciated 🙂

fallen pagoda
#

Hello everyone
Just wanted to know that if i want to create a cyber security solution based company what suggestion would you give me ?

spark cipher
#

hello people
can someone help me with a network domain project, i have to present it to my teachers later

#

and i don't understand the whole thing is my problem...

civic needle
#

Is metasploit a good tool for rats?

eager knot
#

one kind of shell that would come pretty close to a "rat" would be the meterpreter shell

civic needle
#

🙏🏼thank you very much

native fern
#

could someone dm me? i could really use some help

radiant stone
idle otter
#

hello i need help for bypass cloudflare, anyone can help me

eager knot
idle otter
#

my dads website attacked few times i look for how but i cant find that

#

someone find real ip but i cant find it

eager knot
#

best solution is to block cloudflare's ip addresses from accessing the website as they are not for personal use usually

radiant stone
#

@idle otter We unfortunately cannot assist with bypassing Cloudlfare as that would expose origin addresses.

I would recommend talking to your dad about setting up a proxy for his website. They are cheap and easy to set up.

#

This can add an extra layer to help protect the Origin server.

stray mural
spiral notch
#

mroeew

spiral notch
#

Hmm on windows

#

interesting

#

are u sure the website exists?

#

like why are u trynna change ur hosts fine on windows to access a htb machine

stray mural
torn marsh
#

@1rokos hello

stray mural
#

To open the website running on ip address's port 80, i have to include that ip address in hosts file right?

spiral notch
maiden scaffold
#

looking into safer alternatives to gmail and such.
What is the general opinion on protonMail?

stray mural
lost atlas
#

How does hardware fingerprinting ban work? Sry if question is unethical

lost atlas
#

No like if the device gets banned from a certain forum starting with r

#

And it ends with eddit

late flicker
#

We can't help ban evade

lost atlas
#

Ok sorry

late flicker
#

But it surely bans ur Mac address

#

I may be wrong

eager knot
#

how a hwid ban works is that it takes the id of your motherboard or any element in your device and uses it to blacklist your machine from communicating with the servers

lost atlas
#

Are you joking or is this true

eager knot
#

it is true

#

alot of big companies use that method to avoid hackers

#

gaming companies especially

lost atlas
#

That is bonkers altough i thought it was more "complicated"

eager knot
#

it isn't hard locating a hwid btw

#

it's a serial identifier for a device

#

and it can't be changed

lost atlas
#

So how does the browser check my hardware id tho

#

And i even used vpn

eager knot
#

you can type that in your cmd to find out what's your hwid

#

wmic csproduct get uuid

eager knot
#

you can't evade a hardware id ban

#

that's why companies use it

lost atlas
#

But thats not the same as browser fingerprinting right

#

Thats a different type of ban

eager knot
#

oh yeah you're right actually

#

browsers can't really directly obtain that

#

they make a profile based off of your browser prefs

#

it could also be many other factors too

#

point is you can't really know what they are basing their banning system off of

lost atlas
#

Ye it could even be silly stuff

#

Like just let Machine learning decide which patterns wre most recognizable

eager knot
#

yup

late flicker
eager knot
#

ye

lost atlas
#

Does very old hardware have ids too

#

That can be recognized

#

Doesnt solve the issue just curious

late flicker
lost atlas
#

Ok well then thats settled

spiral notch
#

Mac addresses are local btw

late flicker
spiral notch
late flicker
#

(I'm still not at that part in network fundamentals)

spiral notch
late flicker
#

How are u today btw kV

#

Better ?

spiral notch
#

Mac addresses are only local

spiral notch
#

Not rly

#

I'll go to the doctor if it doesn't grt better by friday

late flicker
spiral notch
#

No clue why in so irresponsible with my health lol but

#

yeahh just don't wanna be spending my holidays going hospital to hospital

#

rather skip class

analog adder
#

my start menu (w10) just stopped working from yesterday, it just switches to a loading cursor for a few seconds and doesnt do anything

eager knot
late flicker
radiant stone
#

This is RIOT's team talking about how they work

lost atlas
#

thanks mate

radiant stone
#

Keep in mind HWID bans are generally considered a rare form of ban.

lost atlas
#

in reddit they seem to be quite common

eager knot
#

it's not the same technology as your said before

#

hwid and browser fingerprinting are two different methods

lost atlas
#

ah yes yes you are right

#

i dont even know what i got

#

probably browser

eager knot
#

most likely browser since websites cannot directly get your hwid

radiant stone
# lost atlas in reddit they seem to be quite common

Depends on the game. League (as of the date of writing that article) alleged they have only given out a handful of Bans. now That is in contrast to their playerbase which is 150M registered accounts. Lets say 0.001% of accounts are HWID banned that's still 1500 people who can yell on reddit. But that's only for 1 game

analog adder
#

still not working

#

do you think it might be something to do with ram?

#

i have been having a lot of bsods during boot recently

eager knot
#

also try and run this command sfc /scannow

analog adder
#

searched the codes up a while ago

eager knot
#

oh i see

analog adder
#

and they were ram related

eager knot
#

how much memory does your computer have

analog adder
#

ddr4

#

maybe faulty stick?

eager knot
#

oh then it shouldn't be problematic but

#

i am not sure

#

i need the specific error

#

can't assume things off the air

analog adder
#

alr

radiant stone
#

for the system

analog adder
#

uhh no

#

also i found em

#

uh

#

oops

eager knot
#

oh nw

radiant stone
#

avoid caps

eager knot
#

i see it

radiant stone
#

bot hates it

analog adder
#

yea my bad

eager knot
# analog adder yea my bad

try and run the following commands via your cmd:
DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow (run this one twice one after another)

#

run one by one

#

start with the first line and move on slowly until the third one

analog adder
#

uhh

#

issue

eager knot
#

yeah?

analog adder
#

i need to open an admin cmd

eager knot
#

yup

analog adder
#

is there any way to do that using windows + r

#

as i said

eager knot
#

ohh ok

analog adder
#

i cant open start

#

so i cant open an admin cmd

eager knot
analog adder
#

ahh

#

ty

eager knot
#

yw!

analog adder
#

No component store corruption detected.
The operation completed successfully.

eager knot
#

wdym, was it the first command?

analog adder
#

ye

eager knot
#

the output for the first one that is

#

oh ok

#

move to the second

analog adder
#

i did

#

its a progressbar now

eager knot
#

mhm

analog adder
#

ill reply when something fun happens

#

in the meantime

eager knot
#

np

analog adder
#

ill go custom rom my tablet for fun

#

err

#

is it supposed to be stuck at 26.6

#

%

eager knot
#

yup

#

sometimes it happens

#

let it work it's magic

analog adder
#

k

eager knot
#

regardless of them i'll also recommend that you'll preform a chkdsk

#

but that'll come after the commands i've provided

analog adder
#

okaysies

#

hold on

#

theoretically, what would happen if i closed the cmd

eager knot
#

then the operation would stop

#

it's not very good

analog adder
#

no i mean

#

would it break anything

eager knot
#

most likely

analog adder
#

aw shucks

#

i swear if it doesnt get past 26%

eager knot
#

because it's mid rewriting some of the system files

analog adder
#

ah

eager knot
#

it will dw

#

it just takes time

analog adder
#

speaking of

#

its on 55% and going!

eager knot
#

yup there you go

analog adder
#

i was REALLY close to closing it

eager knot
#

lol dw

#

patience is key

analog adder
#

aight

#

im gonna crash out if it doesnt go to fastboot

#

one more freaking time

eager knot
#

lol

analog adder
#

aight managed to boot it into twrp

eager knot
#

wait did you finish the commands i gave you?

analog adder
#

no

eager knot
#

oh just make sure you don't brick the system or anything

analog adder
#

just started last command

eager knot
#

ohh np np

#

run it twice so when one finishes, just run another one

#

sometimes windows doesn't find the problems in the first scan

#

had an experience with that

analog adder
#

it found corrupt ones

#

anyways

#

whats the chkdsk one

#

is it just that

eager knot
#

ohh ok

#

chkdsk like that

#

but you'll have to restart

#

in order for it to start working

#

just type in this command chkdsk /f /r

analog adder
#

uhh ok

#

whats /f for

eager knot
#

it'll ask you if you want to restart now or later

#

let me check because i myself don't remember lol

analog adder
#

real

eager knot
#

i think it has something to do with fixing the broken fragments

analog adder
#

oh

eager knot
#

ohh ok i was partially right

#

it fixes errors on the disk

analog adder
#

cannot lock current drive

eager knot
#

aka the hard drive

#

wdym

#

is that the output you're getting?

analog adder
#

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

eager knot
#

ohh ok type in Y

analog adder
#

k

eager knot
#

now when you restart your computer a disk scan will run

#

it'll take some time

analog adder
#

i forgot

eager knot
#

just let it run fully is what's important

analog adder
#

how do you restart using cmd

eager knot
#

ohh you have to do it like that let me check

analog adder
#

ik its shutdown /r something

eager knot
#

shutdown /r /t 0

analog adder
#

but theres more

eager knot
#

yes

analog adder
#

alr thanx

#

do you just have a really fast web browser or some large book full of windows stuff

#

how do you find this all out by "checking"

#

xd

eager knot
#

no i just have chatgpt for the stuff i don't remember lmfao

#

sometimes

analog adder
#

ah alr

eager knot
#

but sometimes i actually search the internet for solutions

#

for example your error

late flicker
radiant stone
analog adder
eager knot
#

does your pc feel different?

deep heath
#

Guys, anyone here a front end and a back end developer? And does anyone know how to integrate crypto getaways in a website?

desert torrent
desert torrent
crimson rock
#

Question guys, i have a lenovo legion 5 with an rtx 3070 and ryzen 7 5800h, i really dont know how many monitors it can support?

exotic sequoia
#

I need help

#

Is there anyone?

civic needle
#

Pretty sure they got banned

#

But also is anyone proficient in ducky script?

keen mortar
#

Hello brothers, can someone help me out with an isue

#

I want to extract a person's phone number from snapchat

celest veldt
#

Hi guys (need help)

I made this web app where you can search if a number’s been breached. I’m hosting it locally using localhost and exposing it with Cloudflared, which works great. But since it runs on my own PC, I don’t want my real IP exposed people can trace where the tunnel’s coming from. I looked into VPS options but don’t wanna pay. Is there a way to keep it running from my PC while hiding my IP?

eager knot
#

doing that without exposing your own network address would be to stick to cloudflare

#

you can try and pentest your own website yourself and see if you can find anything related to your real network address

#

if you have any functions that could lead to it, etc

supple grail
solid gull
celest veldt
supple grail
chilly merlin
ember arch
#

Hey ik im not too active of a member but looking for opinions on this offer i got. For context, I am a graduating senior computer science student who is current in a small town where rent is fairly low (500-750 for 1-2 bedrooms). I got an offer from this manufacturer I am interning at where they want me to come in as a contractor working for $20/hr for the summer, and in the winter allow me to make 55k a year moving forward. Is this a good offer? My first reaction was disappointment but looking for some other ppls opinions. Anything helps.

amber matrix
ember arch
#

That’s what I was thinking

#

I thought atleast 60k bare minimum

amber matrix
#

Yea sure 20$H ok we can work with that

#

How many hours you would be working?

ember arch
#

Full time 40hr/week

#

It comes out to around 41k/year

amber matrix
#

41k is pretty low tbh

#

But then again your area it’s cheap so that’s not bad

#

For you

#

But if you ask anyone else that’s pretty cheap for your yearly

#

@radiant stone what you think mb for ping but that’s low right?

chilly merlin
amber matrix
#

Ok so it’s not bad

ember arch
#

Thanks for replying

amber matrix
radiant stone
#

I also started as a contractor but I was at 16$ an hour later bumped to 19$. I was offered a FT position after my year of contracting which brought me to 55$ and hour

#

So as long as benefits are included and you're making 55k a year that is not bad for your first job. See if there is movement internally, if not then get the 2-3 years of experience and apply other places that offer more.

#

First gig is always the hardest and a lot of times you take it on the nose for what you're paid since you lack industry experience.

ember arch
#

They said benefits come include but I still have to wait and see what’s all included

desert torrent
#

Shouldn't look for reasons since they can be falsified. Instead go off the general premise

#

you'll trust a stranger on the internet over their intentions? :0

#

"Should i help someone find information on someone else over shady terms?"

#

Just giving something to think about while i'm on

fiery pewter
#

I have a question

#

Do you know a method to increase the fps of a game code in python

brisk dawn
#

I've been working on installing Kali Linux on a Chromebook but I want to install more tools, is there a quick way to do so?

abstract ridge
#

Aren't Chromebooks really prone to crashing?

little bridge
#

how effective kali on chrome book is it worth it or do i need decent book to start that. they are very cheap here

midnight leaf
#

Hi

abstract ridge
little bridge
#

the thing i use linux over VM, cause most my work require windows i wish MS make copy of 365 compatible with linux else i can start switching

abstract ridge
#

Yeah it's better to get a better quality laptop because VMs can often lag

radiant stone
little bridge
#

but doesnt feel as good as when i installed its as main OS there

fiery pewter
#

@radiant stone kinda but it’s just a little a game with friends

abstract ridge
radiant stone
# little bridge how effective kali on chrome book is it worth it or do i need decent book to sta...
little bridge
#

another question is it me or it feels AMD way supprior to intel now adays

radiant stone
radiant stone
little bridge
#

as for laptop its basicly i have its 4800H cpu and 32gb rams i can run several VMs there while doing other tasks

fiery pewter
#

@radiant stone ok but don’t you have advice more for game on 2D

spiral notch
#

tool*

brisk dawn
#

Thank you @spiral notch

radiant stone
clear oar
#

I-

drowsy wren
#

Anyone here an actual pen tester?

strange frigate
#

Hi dudes, my Wolf Puppy says hello

spring dew
#

👀

brisk dawn
#

@abstract ridge with the way im setting it up it won't crash so easily

clear oar
spring dew
#

What happened? I got transported to this room

supple grail
radiant stone
spring dew
#

Did I get soft booted? lol

radiant stone
clear oar
#

What happen to the other red people….

drowsy wren
radiant stone
clear oar
muted mesa
#

Is something wrong with the chat

drowsy wren
verbal flame
#

Chat is my name red

floral idol
#

I'm all red

rugged ocean
#

Yes

drowsy wren
desert sluice
#

Anyone who knows about bug bounty ??

verbal flame
#

How to remove the red name?

clear oar
spring dew
#

So since we are all here.

clear oar
spring dew
#

🔥

verbal flame
#

But I can't spam right 🫨

drowsy wren
#

Is the CEH worth getting??

clear oar
#

Yep! Be sure to talk with other members! It helps! Others was spamming before I dunno where they went tho! (Dyslexic ash mb)

humble rivet
#

Brrr

gloomy radish
#

What is the best platform to learn programming?

tidal shore
spring dew
#

This was a test

desert sluice
drowsy wren
#

Is the hack the box cert worth getting?

gloomy radish
tidal shore
radiant stone
#

#chat has been resolved. Please migrate back unless you are here to ask questions.

desert sluice
desert sluice
# gloomy radish Sounds good.

Same goes for w3school, it is also same website but as i listen from others that, gfg is for someone who knows a little bit or have a basics of coding

ocean lintel
#

Help guys I'm low on data🥲

desert sluice
#

Anyone know any bug hunter ?

gloomy radish
desert sluice
#

All the best for your journey 👍🏼

gloomy radish
cerulean sandal
#

Hi I have this dell xps 13 that is giving me 3 orange flash of light then 1 flash of white light on the mousepad led. The screen doesn’t turn on and it allegedly needs a bios recovery

#

What should I do

radiant stone
#

Try changing out the CMOS

cerulean sandal
#

Where would it be on a 9350

#

I’m looking on Amazon for the cmos replacement battery

radiant stone
radiant stone
cerulean sandal
radiant stone
cerulean sandal
#

Mine needs the thin connector

radiant stone
#

Disregard ya you'll need to buy it

#

Forgot they have a unique cmos

cerulean sandal
#

Yup np found one for just 7 bucks

radiant stone
#

Wait

#

I think you just open it

cerulean sandal
#

It’s like glued tight

radiant stone
#

Does the white cover come off

#

If not buy a replacement that let's you switch them out for easier maintenance

cerulean sandal
#

Well from the motherboard yes, but the wires no

radiant stone
cerulean sandal
#

Yup thx for the support🫠

radiant stone
#

Np

#

If you're not getting any display also you can try checking the screen connections to the mobo. They can come loose or fray from the joints. But CMOS will be the best first check

hexed hinge
#

Hi...
By any chance any ones used a dark web escrow service 🤔

cerulean estuary
#

Hey guys. I want to build software by myself. Mainly web apps. I am currently a fullstack developer (know just very basic safety measures), but i want to learn a bit of everything inluding cybersecurity, because i want to create my apps as safe as possible. I already took 3 udemy courses on ethical hacking and network security(the bestsellers) and i plan to complete coursera google cybersecurity course. If i just want to work for myself and build safe software, is this enough, or you have any other suggestion? Should i obtain any certifications, or study elsewhere? Thank you in advance!

spiral notch
#

network security is good to just get to know the basics

#

to make sure your data is encrypted well

#

against man in the middle attacks and other network snooping techniques

#

considering youd like to learn web security

#

its a good idea to learn CTFs (capture the flag)

#

those often require exploitation of web services

#

to get a flag

#

capture it basically

#

you can get started on some good beginner friendly services that explain well

#

tryhackme is very beginner friendly, especialyl for those that just know the basics of computing (like literally holding a mouse)

#

if you're past that, you might find hackthebox better, however u might find the first one too easy while the second one too hard

#

so its okay to also mix both

#

sorry for the long textwall, hope this helps

cerulean estuary
#

Thank you so much! @spiral notch ☺️

spiral notch
flint crypt
#

Hi everyone,

I'm pretty new to hacking and really want to get better at it. I’ve installed Kali Linux on a virtual machine, but I’m not exactly sure what to do next. I was thinking of checking out some tools on GitHub, studying how they work, and memorizing Linux commands and tools like a kind of vocabulary book.

I’ve seen previous posts mentioning platforms like TryHackMe and Hack The Box do you think I should start using those as a beginner? Also, should I learn some programming languages as part of the journey?

I know this kind of question has probably been asked many times before, so I’m really sorry if I’m repeating something you’ve all heard a lot. I just want to make sure I’m on the right path and learning in the most effective way.

Any advice or tips would mean a lot. Thanks in advance (and im sorry for such Long Text) 😞

flint crypt
#

Oh Ty😭

spiral notch
#

tutorials

#

its more than just a little tutorial, it is massive in the amount of knowledge it gives

flint crypt
spiral notch
river grail
#

Guys i need your help
I have a final project
Our e-commerce project is about designing an online store.

Right now, there are still a few things we need to figure out — like how to separate the website from Visual Studio, and how we can add a new product without having to write its code manually.

Also, we added the feature to add products to the cart, but we didn’t finish what comes after that. So we’re thinking: how do we complete the order process? Like adding delivery info and payment options.

The main problem we’re stuck on is how to secure financial transactions — especially when it comes to bank cards.

By the way, does anyone have a ready-made online store we can look at?

fringe mural
#

ok so what is DOM based XSS used for because i don't really see a vulnerbility in self XSS

plush crown
#

Yo I need help with my apple account

eager knot
eager knot
plush crown
#

I can’t update my apps and when I change my iCloud it’s still the same

eager knot
fringe mural
eager knot
#

more so for affecting someone's browser

#

stealing session ids etc

#

but nowadays browsers have protection against xss

eager knot
# fringe mural What use is it tho for phishing or something?

👍👍👍 and subscribe for more DOM XSS tutorials: https://www.youtube.com/channel/UC2vVVgKKzN-Gb_xeaUY0o-Q?sub_confirmation=1
Check out my best selling AppSec book: https://amzn.to/3pGO4Vz
Check out my behind-the-scenes newsletter: https://www.andrewhoffman.me/newsletter/

DOM-based cross-site scripting (DOM XSS) is a form of cross site scr...

▶ Play video
#

watch this

#

should give you a good understanding

plush crown
eager knot
#

also check your storage

plush crown
#

My apple phone

eager knot
#

i know

#

restart your iphone

obtuse osprey
#

Discord’s website says go to privacy and safety in user settings, then select the violation but I can’t find anything but data and privacy, then when I click on it, it doesn’t let me select the violation.

#

It just says how it uses my data

#

I’ve already reached out to discord with an appeal to update my age information though

#

Or should I have appealed something different?

plush crown
#

It’s says my account has been disabled from iTunes so I can’t use AppStore

fringe mural
eager knot
#

the reason why it's of interest to the company to fix such a security flaw is their trust

#

if users are getting affected by a hacker manipulating an element inside of their website and sends the url around social media for example, and a user gets hurt: he would immediately suspect the website 100%

#

bad reputation = big womp womp L bozo company

#

that's why companies usually fix xss vulnerabilities in their webapps

fringe mural
#

Ah so reputation

#

And a safety piece but mostly reputation?

eager knot
#

imagine i come to you, send you a link like google.com
but google.com is a trusted website! BEEP, let's pretend that's not the case and google has a dom xss vulnerability, meaning i as a hacker can manipulate an element within their webapp client side and send you that same link with the edited element

#

and that edited element has a script that steals your cookies

#

and sends them directly to me

fringe mural
#

Sounds a bit like I forgot the name something with redirect

#

Where you can modify the link of a legitimate website to redirect to yours

eager knot
#

you can see how bad it is from here if you understand what i'm saying lol

fringe mural
#

Yeah

fringe mural
#

I forgot the name of it

eager knot
#

in your case that would either be Iframe injection or something else

eager knot
#

open redirect i think

fringe mural
#

I found that when I was doing a bug bounty on nasa

fringe mural
#

I forgot the name of that

eager knot
#

yup

fringe mural
#

Iframe is where you can overlay for example a fake login button and use open redirect to have it redirect to your domain

eager knot
#

exactly

fringe mural
#

I couldn’t find a open redirect vulnerability so it became a P5

#

Otherwise it would stay a p4 and I would get a LOR

#

☹️

#

Still searching for stuff tho and I might have found something

#

Kinda

#

Just have to get it work out the way I want it to

copper sparrow
#

hey my google acc just got hacked

#

pls help?

eager knot
eager knot
copper sparrow
#

thanks

eager knot
#

yw, good luck

copper sparrow
#

ty

azure nexus
#

Iv been hearing people’s stories on discord about the abuse from other people who in my opinion have no right to be in any type of platform especially if they are all age platforms Im not asking for anything but maybe a point in the right direction to get the justice for those who are still trying to get by day to day and not be another statistic in a file somewhere. Im in ILF and have been trying to be a supportive friend for the ones who have opened up to me but I want to do so much more for them and I am trying I understand if you want to talk in my dm they are open for anyone who can help thank you

spiral notch
#

discord does an amazing job in banning such people, terminating their accs, and/or even contacting higher authorities when needed

azure nexus
hollow cairn
#

So for someone that has no experience in Cybersecurity and Linux and knows a little bit of python is it worth getting the THM premium and following their "Cyber Security Learning Roadmap"?

eager knot
#

i am not sure what's included in the 101 path but

#

if thm has networking fundamentals in it you should totally take it as a starter

hollow cairn
eager knot
#

yes i feel like that would help in terms of network understanding, since hacking is mostly all about that internet connection might as well learn how things travel

#

i can say for certain that it helps further on when actively hacking machines

hollow cairn
#

So I was watching NetworkChuck's video where he gave a roadmap and he said to start with A+ and I stared that. Would you recommend finishing that and then start with Network+ or shall I drop A+ and start with Network+ ?

kind cloak
#

What would be the best way to start ethical hacking (is it even called ethical hacking)

kind cloak
#

Thannkskn

#

Thanks *

eager knot
#

after a+ of course

#

so a+, either network+ or whichever path you may choose to proceed with

#

and then i'd say it's safe to move forward to thm

hollow cairn
#

Thank you

#

You is a life saver I was so confused on what to do.

turbid birch
#

Hello everyone
Greetings to you all
Please I need ur help on something

Is there any one that can help me with a Windows activation key please
I want to activate mine
Or anything I can do to sort out the problem
Thanks

unreal heart
#

yo

proven night
#

whats a good siem tool to use and learn

desert torrent
#

Isn't that sht so dumb? They watermark your monitor

proven night
#

thank you man

#

ill look into snort

tardy sage
#

Not too sure if it’s allowed to asked here but I have a Sha1 hash 183b6e32604fca6bf44459883d5dc6f804f3bf18. I’ve had a look some of those “decyptors” sites, but they don’t have the hash stored. Gonna try hashcat next but thought I’d ask here first

desert torrent
desert torrent
desert torrent
#

i just tried for a sec. it's probably best not to try

eager knot
lofty temple
#

Hypothetically speaking, if your country's govt wanted access to your devices and go through all your info any time they, how would you go about protecting your privacy?

civic needle
#

Most of the time that’ll be good enough for anyone. Unless the gov has your device

crisp star
civic needle
lofty temple
#

Ah thank you🫂

civic needle
#

But yeah if criminal then they’ll take your device and do forensics. So can’t really do anything for that

civic needle
crisp star
spiral notch
#

@lofty temple a live os is what youre looking for. its an operating system that works entirely on the usb stick, and loads into the ram. an example would be tails, which has everything made for privacy, including onion routing and so on, but its a pain to work with if you need other apps downloaded, etc, so i like to use arch as a live os and just harden it.

spiral notch
civic needle
#

Lmao I’m stupid

spiral notch
#

no trace left unless dropped into liquid nitrogen

#

or the BIOS modified

civic needle
#

^^

cobalt pecan
#

hi guys, can someone pls help me, there's a suspicious number that is always auto verifying in all of my 3 google personal accounts, and I don't know who's the person uses the number, and even I remove it several times, it always coming back no matter what, but for now I removed it again to check if its gonna be back again, i have my screenshot of the suspicious number, and can you guys track what device is the number connected to ?, thanks in advance

spiral notch
#

and add 2 factor authentication

#

we dont perform cybercrimes or track people for you

cobalt pecan
#

already did it yesterday, but it still popping up

spiral notch
#

consider running antiviruses, or reinstalling your system

cobalt pecan
#

thanks, I'll be inform you again if something happened

fringe mural
lofty temple
eager knot
#

every country's law varies

#

the way things are done as well

#

protecting your data from the government is an insanely hard task

#

not that it's not doable, it's just that it's almost impossible if they are onto you

#

so i'd say, just be careful with the things you do so that you'll have nothing to worry about

spiral notch
#

atleast for feds

#

not lower tier LE

grave flower
#

can we automated the nessus scans with scripting?

civic needle
spiral notch
#

it depends on the severity of the crime youve done

civic needle
#

Yeah. Like if you’ve done anything to the gov especially

#

Well even if they thing

#

Think*

eager knot
hexed hinge
#

🤔

civic needle
#

Erm idk if this is illegal or now but if so it’s against the servers rules

haughty nova
#

whats that

chilly merlin
civic needle
#

got sniped

#

But I meant for the laws placed on them

#

They spy on you all the time

lofty temple
eager knot
#

they aren't after anything as minor as that

#

i mean sure it's illegal, but it's also overlooked

civic needle
#

Yeah lmao. Unless you’re in like North Korea or sum. Other than that ur chilling

lofty temple
#

Lol okay 💀

distant shadow
#

So I have had my last account hack off a pressed link . Does anyone know the tool ?

exotic elbow
distant shadow
#

I would like to see the process

civic needle
#

That or don’t press untrusted links

distant shadow
#

I understand that part . I had a young mod who took care of my server.

exotic elbow
distant shadow
#

I would like to trace the proccess

civic needle
#

?

#

Like understand how it’s done?

#

If so there’s vids on YouTube

distant shadow
#

Ok .

civic needle
#

But if you mean being able to trace back who created the link or whatever it’s prob whoever sent you the link

civic needle
#

Yeah

distant shadow
#

That’s the thing . It’s gone so I should bother but thanks to you all

spiral notch
#

Not going to teach the entire process and/or setup

brisk token
#

Can someone help me

#

I have bsod

#

And my pc won’t restart

#

When I restart it it goes there

supple grail
#

it goes where?

#

does it blue screen when you boot it?

brisk token
#

Yah

#

I turn it off then turn it on

#

Safe mode doesn’t work

haughty nova
brisk token
#

I have a pc

haughty nova
#

pc i mean

#

what brand

brisk token
#

Radeon

haughty nova
#

so you can try to boot into bios

#

then win recovery

brisk token
#

Ik how to boot in bios

#

But I can’t

haughty nova
#

what does it do

brisk token
#

I try to

haughty nova
#

just a black screen?

brisk token
#

No it is in bsod

#

But I have 4 options

#

Esc

#

To go into bios

#

Are

#

Go into options were it shows safe mode and stuff

haughty nova
#

it might be a hardware issue if you keep blue screening

#

you can either try to:

  1. boot into recovery and run diagnostics if any issues are present
  2. run memory diagnostics in bios
  3. factory reset if you cant get past the booting sequence into windows
exotic elbow
#

reasons why I use Linux

soft smelt
#

just bought thm premium last night and i am doing the cyber security 101 and prescurity learning paths, are these a good place to start as a beginner, if so what should i progress onto next?

chilly eagle
soft smelt
#

i had heard previously that it wasnt the best off some fella on yt so i was just wondering

#

thanks man

soft smelt
#

sorry i had heard it wasnt the best and it was a fella on yt that said that if that makes sense

chilly eagle
#

ahh

#

you may get more ideas

soft smelt
#

i appreciate it man

chilly eagle
#

; )

elfin moat
#

Does anyone have the fix for Kali to detect my Alfa wifi card? I am running a VM.

brisk token
#

Memory diagnostic

haughty nova
#

google

brisk token
#

Mines gigabyte

#

Imma look it up rn

#

I can’t seem to find it

haughty nova
# brisk token I can’t seem to find it

You’re going to need to run troubleshooting options from Windows recovery. Needing to find the root of the problem will help you figure out why u keep blue screening

#

Otherwise it might be a hardware problem

brisk token
#

K

formal warren
#

Guys, i read the guide but i not know how start lol, if i become with HTTP/HTTPS/IP/DNS/NETWORK/PYTHON and after C++ is a good plan?

#

a friend told me to do it like this

eager knot
supple grail
#

yk

supple grail
#

just make sure you know your network stuff

karmic leaf
#

Just make sure you learn networking basics before going too deep

karmic leaf
#

Said the same thing

supple grail
#

we both said the same thing cause its the best thing

#

the most important

karmic leaf
#

if your a beginner then Its gonna be hard for you

#

gonna take your a few months or even an year

#

so dont rush it

formal warren
#

oh ok men

supple grail
#

yeah make sure you really know python before jumping to c++

supple grail
#

python is easier to learn and is sorta like the introduction to programming

formal warren
supple grail
karmic leaf
karmic leaf
formal warren
karmic leaf
formal warren
#

I understand bro

#

thx

brisk token
#

Do it on my main pc

polar saffron
#

Good afternoon guys someone up my TikTok page and take my TikTok. Can someone help me to get back my TikTok please I use it to connect with my friends and my family members.

red tundra
#

can someone get tracked down , even if he's using Qubes OS ?

eager knot
#

treat privacy as a tool against real hackers
at the end the government has more advanced technology to get what they need

red tundra
eager knot
#

well, let's say that you have done something illegal using qubes, you've used a vpn service, you've used it along with some proxies but here are questions that can be asked:

  1. what was done
  2. how was done
  3. and what's left behind

these answers can be a lead to alot of small pieces that could point back at you

red tundra
eager knot
#

i mean of course if you're gonna hurt someone and try to hide it eventually when a group of big people are after you you're gonna somehow slip and lose

red tundra
eager knot
#

yup

#

i mean it's not a 100% guarantee right?

#

but it's enough percentage to make you not take the risk

red tundra
eager knot
#

only if something has happened that of interest to them, and it ends up somehow leading them to you

#

even when it has nothing to do with you sometimes

#

as in: even if you didn't do anything

#

it can tie you up by a simple mention of something

#

but it has to be very specific as well

#

not that they will arrest you or anything

#

but they will keep watch

#

and they have the tools to do that

red tundra
#

all that shi can turn scary sometimes yeah

eager knot
#

heard of someone in my country that police was actively monitoring their internet connection while also letting them know that they are being monitored so

red tundra
eager knot
#

government agencies use more than just osint

eager knot
#

they have specially crafted exploits for many vulnerabilities and 0days that we may not have heard of before

red tundra
#

no option left

eager knot
#

not much no lol

marsh ermine
eager knot
#

unless it's someone of interest to them
you know they might have hacked a bank in the country for all we know

#

it doesn't cost them money using those exploits

#

they are their own founders

eager knot
marsh ermine
#

Yeah it's moreover used for government conflicts

red tundra
#

while we r trynna use tech n tools to perform attacks which are totally out of date, they r palying smart

marsh ermine
#

I haven't heard any "regular" person experiencing a 0day attack

eager knot
#

i see those who are mostly tailed are those who are breaching big companies

#

which makes sense

marsh ermine
#

I mean @red tundra you could use tor bridges to disguise your activity

#

When you aren't it shows the tor browser I believe on your ISP

#

but when doing a tor bridge, it masks it with regular websites (Facebook, Insta, etc)

eager knot
#

tor isn't as reliable

#

but yeah

#

that's why people combine it with a vpn

#

but you also gotta make sure that you change specific browser preferences

marsh ermine
eager knot
#

that you're also not vulnerable to any exploits as well

#

browser exploitations specifically

marsh ermine
marsh ermine
red tundra
eager knot
#

tor is good but some tor nodes are being held by people who track whatever traffic is going on in there

#

we don't actively know who they are and they can come from every angle

#

when you communicate with the first node without using a vpn your traffic is exposed to them

marsh ermine
#

but isnt tor open source

eager knot
#

tor the browser is open source

#

but the nodes aren't

#

lol

deft gull
#

Does anyone know how to properly use kali linux on an iphone, and Set it up so it will work properly, Without jailbreaking my phone, Cause im new.

eager knot
#

and also you gotta trust your vpn provider

#

so it wouldn't be just any vpn

#

has to be reliable

#

also your isp that is initiating the connection as well

marsh ermine
#

It's all about trust lmao

#

yeah

#

it's the same with emails

red tundra
marsh ermine
#

the provider can see everything you do, you just trust them that they wont

eager knot
marsh ermine
#

oh without jailbreaking

#

yeah UTM

#

Install Altstore on PC and iPhone, install UTM

#

Cons: Have to refresh cert every 7 days

deft gull
eager knot
eager knot
#

either that or just generally malicious people that are looking for creds or

#

any private information passing through the network insecurely

red tundra
# eager knot exactly that

well often times they act like ppls who are desperate to buy services over there but yeah theyre imposters

fossil spire
#

Gys Just wanna know which should I use kali or parrot

deft gull
eager knot
#

if you want it to be that is

#

so it all depends on what you want more

brisk token
#

I need help

#

@haughty nova

#

This is what it says

#

Recovery
Your PC couldn't start properly
The application or operating system couldn't be loaded because a required file is missing or contains errors.
File: |windows|system32\winload.efi
Error code: 0xc0000098
You'll need to use recovery tools. If you don't have any installation media (like a disc or USB device), contact your PC administrator or PC/Device manufacturer.
Press Enter to try again
Press F1 to enter Recovery Environment
Press F8 for Startup Settings
Press Esc for UEFI Firmware Settings

deft gull
deft gull
brisk token
supple grail
#

you need an usb stick

brisk token
#

Bru

supple grail
#

and another device that can install the recovery tools to it

brisk token
#

So there’s no other way

brisk token
#

Book

#

To download the stuff

supple grail
#

i think so yeah

brisk token
#

What’s the site for the stuff

spiral notch
#

win11?

brisk token
#

Yah

spiral notch
#

search for the windows 11 iso file

#

Although they recently changed it that you have to install an official Microsoft app being

#

Media creation tool

#

Which sucks because you can't run it on mac

brisk token
#

Bru

#

I have nothing else I’m done

spiral notch
#

you might have luck tho

#

it might only be an iso

#

@brisk token nvm sorry for the scare

#

iso file is available publicly

brisk token
#

K

civic needle
#

How tf did system 32 get deleted off your pc?

brisk token
#

Idk

brisk token
#

I plugged the cable in on my monitor

#

When I was done I unplugged it

spiral notch
civic needle
#

Yeah that’s like super hard to do. You can barely even force delete it without doing a crazy amount of steps. Just reinstall windows atp

brisk token
#

I didn’t do it I probably had I virus

civic needle
#

Probably

spiral notch
spiral notch
#

u too

grim peak
#

Hi everyone, I’m new to this discord community. I’m making a career transition from IT Training to cloud system admin. What are some good project ideas for a cloud security engineer? I graduate with my degree in cybersecurity this fall, so I’m hoping to be in a cloud security role within the next 1-2yrs.

#

I still want some hands on experience with system administration though.

near wave
crude wing
#

idk if this is the right place or not but i need help with installing debian on a dell poweredge r420, i keep getting the error PTE Read access is not set

ancient wasp
#

Also if u tell me what exact debian iso your using and how ur installing it (USB? iDRAC? DVD?)? i can tailor the advice better from there

hexed heron
#

hey guys
uhm i ve been using windows ever since i can remember and i want to get into hacking , i have a tiny bit of expiriance with python , html css and js but not like acuall hacking stuff (but ive tried htb and thm)
whats the best distro of linux for me?

spiral notch
#

most common for ethical hackers is kali linux, although it's just Debian with all the tools preinstalled

#

I prefer arch as it's lightweight and clean, and I just install the tools I know I'll be working with

hexed heron
#

isnt arch like one of the hardest distros to install?

sand nimbus
#

Someone should pls help me with RHEL 8 or 9 for my VMware