👥・help-me

[safe fjord]

what's the command in sftp to get the file?

is it just get?

[halcyon flame]

yes

[safe fjord]

Error on line 95:

Can't redefine existing key at row 96, col 34, pos 2994: 95: main.plugins.expv2.enabled = true 96> main.plugins.expv2.enabled = true ^ 97: main.plugins.expv2.lvl_x_coord = 0

[halcyon flame]

Well that suggests there's a value on line 96 which defines the same value as on line 95 for main.plugins.expv2.enabled

[safe fjord]

ah

[halcyon flame]

I'd suggest SSH'ing in to it, editing the file and going to that line to see what's up

[safe fjord]

duplicate line

[halcyon flame]

Remove and reboot, see if that helps

[safe fjord]

attempting a reboot

nice, that fixed everything

[halcyon flame]

Cool

[safe fjord]

thanks for the help g0blin, you rule

[halcyon flame]

No worries 🙂

[hoary pawn]

I want become a hacker how i can start

I want hack my girlfriend account

I already hacked her heart

[halcyon flame]

ffs

No, you creep

Why would you want to hack your girlfriends account

This is an ethical server #📜・rules @hoary pawn

[fair turret]

Can someone explain the difference between writing an algorithm and writing pseudocode? I'm struggling to see a difference between the 2

[hoary pawn]

Ask chat gpt

[fair turret]

I did. What I understand is that algorithms are more complex and in depth and are more for computers to understand while pseudo is more basic and made for human understanding.
Which doesn't help me because they both still look the same to me

Nvm i got an asnwer on a forum 🫡

[hoary pawn]

Send it to me

Reddit?

[summer night]

What do you guys think is the best thing to do if the police seized my laptop

[lost vapor]

get on the ground and put your hands behind your back
answer with honesty if they ask for any weapons on you
let them search your laptop
comply, and if you didn't do anything you're not cooked

[raven pond]

Whatever you did to cause that, figure out a way to do it ethically.

[spiral notch]

I can assume you didn’t do anything with logs or mem?

ur a little cooked then

better call Saul

[nova rain]

Hi, new to the server and was wondering which chat is appropriate for questions about certs and learning resources. Is it this one?

I’m mainly wondering about career resources and interview advice

[spiral notch]

#💬・certs #💕・free-resources

[nova rain]

thank you

[spiral notch]

ofc ^-^

[summer night]

So I ended up just giving it up. They took it down to their station, I don't know what's going to happen next

[summer night]

Yes I did call saul

[spiral notch]

fire

[summer night]

I don't they will find much to be honest

I smashed my old one

That had some stuff that was probably illegal

[lost vapor]

What is bro up to🥀

[summer night]

I'm from the matrix

[spiral notch]

bro

lowkey dumb, admitting to crime on one of the biggest cybersecurity discord servers

[novel sage]

Hello, good afternoon. Sorry to bother you. My friend @devout umbra and I have a problem and need help. I want to fix some notes from the 1st, 2nd, and 3rd trimester of geometry and chemistry course without anyone noticing. and we need help please.

the page where they have the grades is in renweb

[shadow fractal]

We do not do that here, please refer to #📜・rules

[novel sage]

Okay, that's fine, don't worry, I'm sorry.

[shadow fractal]

No worries, stay safe

[safe fjord]

so i just tried to metasploit a windows server's rdp port, it said exploit aborted due to failure: bad-config: server requires NLA (Cred SSP) security which mitigates this vulnerability

[amber crypt]

Is there a way for me to send a video so I can ask for help

[spiral notch]

??

just text it?

[rough cove]

Yo can anyone help my friend DC account got hacked

[wet trail]

You don't necessarily have to write pseudo code in order to describe an algorithm. You can describe an algorithm in plain english. for example in order to perform a random search, repeatedly select a random element and check to see if it is what you are looking for. Repeat this process until you find the element you are searching for, or have determined that the element is not in the set.

[rough cove]

anyone??

[civic needle]

No we don’t do that here brochacho

[rough cove]

where can i get help then

[civic needle]

Idk discord support probably

[valid belfry]

Don't give the password

They need a search warrant

[summer night]

I didn't. They didn't even find anything

Because they couldn't

[spiral notch]

discord support

[keen nexus]

Hello. I'm getting started with tryhackme. My machine is on Squid proxy 4.10 but its giving me an error saying too short. How do I go about it?

[dense violet]

Hi, does anyone here have a google play console?? I need some help
Dm me if you do

[radiant stone]

you can just openly ask the question

[dense violet]

Oh, didn’t know if it was against group rule or something

But basically, I looking to buy one, I’d have opened a new one, but I need an older one.

[radiant stone]

Ah yea we don't allow sales on the discord, it's not against asking but yea just no open sales. Plus i would say go through a legit platform as many people will probably scam u

[low furnace]

Watch them pull the discord logs from his computer or something lmao

[mossy echo]

There are also a lot of feds lurking here

[low furnace]

Yeah, but the weight of that depends on what country he's from as well.

[mossy echo]

Yea but still

[low furnace]

I agree though, Discord is a horrible place to admit crimes, let alone a cybersecurity server lmao

[frosty geode]

Hey anyone have free time????
I need someone for a project on oswaptop10

[spiral notch]

specify your question a little more lol

how much free time, what kind of project, etc

[queen gazelle]

Hey guys

[chilly merlin]

hey

[queen gazelle]

i am going to work on a project for my college.

needed you guys to question my idea and find some flaws or any suggestions.

i would love to share if you all wanna know

[chilly merlin]

okay

[queen gazelle]

the project idea 👇

CryptARP replaces traditional ARP behavior with a cryptographic mechanism where devices sign their IP–MAC bindings using Ed25519. Each ARP reply includes a timestamped signature that is verified before updating the ARP cache.

It Prevents:

ARP spoofing, MAC/IP identity forging, MITM attacks, ARP cache poisoning, replay attacks, basic Evil Twin threats, and passive sniffing in LAN and mesh networks.

[chilly merlin]

1. Key Distribution and Management

   Potential Flaw: Your system relies on devices having public/private key pairs and the ability to verify signatures via public keys. How are these public keys distributed and trusted in the network? Without a secure and scalable key distribution mechanism (e.g., PKI, pre-shared keys, or a trusted directory), devices may not be able to verify signatures reliably.

   Suggestion: Consider integrating a secure and automated key management infrastructure, such as a lightweight certificate authority (CA) or decentralized trust model, especially for dynamic or large-scale networks.

2. Performance Overhead

   Potential Flaw: Ed25519 signing and verification, while efficient, still introduce computational overhead compared to traditional ARP. In high-throughput or resource-constrained environments (e.g., IoT devices), this could cause latency or battery drain.

   Suggestion: Benchmark the performance impact on typical devices in your target environment. Consider caching verified bindings for some time to reduce repeated signature verification or using hardware acceleration where available.

3. Timestamp Synchronization

   Potential Flaw: Your scheme relies on timestamps to prevent replay attacks. However, devices must have synchronized clocks to validate timestamps correctly. Clock drift or lack of synchronization protocols (e.g., NTP) could cause legitimate ARP replies to be rejected.

   Suggestion: Implement tolerance windows for timestamps and consider fallback mechanisms for clock synchronization. Alternatively, use nonce-based or challenge-response mechanisms to prevent replay without strict time dependency.

4. Initial Bootstrapping and Unknown Devices

   Potential Flaw: How does a device handle ARP requests/replies from previously unknown devices whose public keys it does not have? This could lead to connectivity issues or delays.

   Suggestion: Define a secure onboarding process for new devices, possibly involving manual key exchange, out-of-band verification, or trust-on-first-use (TOFU) with warnings.

5. Compatibility and Deployment

   Potential Flaw: CryptARP replaces traditional ARP behavior, which might break compatibility with existing devices or legacy systems that do not support cryptographic ARP.

   Suggestion: Consider backward compatibility modes or gradual deployment strategies, such as operating in parallel with traditional ARP and falling back when cryptographic verification is not possible.

6. Denial of Service (DoS) Risks

   Potential Flaw: Attackers might flood the network with bogus ARP replies containing invalid signatures, forcing devices to perform expensive signature verifications repeatedly.

   Suggestion: Implement rate limiting, caching, or preliminary checks (e.g., verifying sender IP/MAC formats) before signature verification to mitigate DoS risks.

I really like the idea

[queen gazelle]

actually I appreciate the questions.
currently I'll be developing it in a small scale environment and later on for zero-trust policy Enterprises. (army,banks, government facilities)

Q1-> for now the key distribution will be manual between host and user (trial period).
but yeah for large scale I really Have to think and learn more.

Q2->
time delay of 4-5sec can be added to prevent overloading of request or Only verifying first few requests and then dumping them.

Q3-> basically my idea is
HNID->hash(MAC || IP || random number) + signature.

Q4->
will have to think more on this.

Q5->
suggestion considered!
legacy issues are real.
I haven't thought of it to be on scale which causes legacy issues.

Q6
limiting number of requests.

[spiral notch]

point 6 is not a solution, limiting the number of requests for networks is never a solution and will cause more issues than solutions

for point 4 there’s not many great solutions, especially when compatibility comes in place

I used to work as a network pentester, and injecting and taking advantage of bootstrap flaws was something I’d love to exploit as they’d be less secure, firstly because of their not so great architecture, secondly just because of many misconfigs due to network architects just being lazy, or knowing there isn’t many viable solutions so they didn’t put much work into securing it anyway

[fast vector]

How do I create a personal ai assistant similar to Jarvis ? On Linux ?

[valid belfry]

Allow list.

[queen gazelle]

can you explain more?

[queen gazelle]

thanks for replying.
would love some further suggestions on this idea

[river sorrel]

why i am not able to speak ?
what role should i get !?

[radiant stone]

You will need to reach level 1. You can do this by typing messages to get exp. You are able to get exp every 60 seconds and can check your progress in #🦉・ranks

[echo crystal]

Who can help with deep live cam

[bronze olive]

How can I boot my computer been stuck on restart. Critical process Dead

Just ran chkdsk C: /f /r and it won’t run pass stage 4

[spiral notch]

??

[echo crystal]

Can you??

[valid belfry]

@bronze olive yo

[spiral notch]

you need to clarify on what you mean

[echo crystal]

I want to set up a Deep live cam on my laptop

I need someone who can lead me through

[chilly merlin]

Hello , I hope you are doing well, I’m trying to keep myself from getting lost in the field of bug bounty.

A friend and I used to study XSS together as our first vulnerability, but something happened that will keep us from studying together for the next three years. I don’t know what to do—it’s truly sad, and I feel completely adrift without him. He was the only person I could study with and discuss XSS vulnerabilities.

So far, I’ve completed 29 out of 33 labs on PortSwigger, 6 out of 15 labs on xss.pwnfunction, and I’ve finished studying the XSS modules in INE’s eLearnSecurity EWAPTv1 course. At the moment, I don’t have a clear plan for discovering XSS vulnerabilities in real-world applications. I’m unsure what steps to take or what strategy to follow. As I mentioned, I currently have no one to study or exchange ideas with.

If you have the time, could you please share an A‑to‑Z plan for how I can start finding and analyzing XSS vulnerabilities in the real world?
So that I can move on to another vulnerability, because I don’t want to shock you with how much time I’ve spent studying just XSS.

[fluid surge]

hey bro do you know how to recover the linkedin account its temporarly restricted i did the verification process stilll restricted i also tried to massage them on twitter still no response

[drowsy ridge]

Someone interested in getting a yt channel?

[chilly merlin]

hiii, how can I fix this?

oh noo, no image perms

[pale galleon]

drop it to imgur and send the link here

[chilly merlin]

I'll send it hang on

[vapid adder]

Hello I started my Cyber sec journey recently i was on web dev path for 1 year did a lot of projects

Currently doing Pre sec on THM and Following the new beginner guide of this server

I just wanted to know if I am into blue team doing Soc1/SAL1
And compTIA sec+ is enough to get a good job?

And also is it ok if i also explore pentesting areas?

[supple grail]

those certs should land you a job yes, it will probably be soc tier/level 1 tho and exploring pentesting is fun, i recommend doing that

[crisp star]

There are a lot of factors that depend to get a job as a SOC.
Some companies basically requires you to have a bachelor or master degree.
And some other require to have x years of experience in IT.

Having knowledge in both fields makes you quite valuable as a SOC.

[vapid adder]

@crisp star I am currently doing bachelors in Computer Science and Engineering will that be okay?

[crisp star]

That's already a good advantage then when you start applying.

[spiral notch]

regarding the cert, more is always going to be better aslong as its relevant, and also focus lots on building your portfolio/resume, adding projects and achievements and making it stand out

regarding "is it ok if you explore pentesting areas?"

obviously it is

youre exploring something new to you, learning something new, and enjoying

why wouldnt it be?

[vapid adder]

THANKS

[warm flower]

Is buying THM Premium worth it?

[lost vapor]

if you're looking to learn and spend alot of time doing so while not giving up: yes

[warm flower]

Alr, tysm
Thats what i wanna do, i am stuck on wevdev rn, and i wanna move finally somewhere

[lost vapor]

i remember being at your stage exactly
thm has a good amount of infosec
but if you can understand what hackthebox has to offer
then i heavily suggest

(i am also learning through their academy)

[spiral notch]

your profile

your username

your about me

is amazing

[warm flower]

Tysmmmmm <3

[dusky moat]

Yo I'm gonna be completely honest, got a hackathon on tuesday, can I steal any banger ideas you guys might suggest

[spiral notch]

pst pst https://chatgpt.com

[vapid adder]

@spiral notch @lost vapor
Can you help me HTB’s CDSA is it good?

[dusky moat]

It's limited by data

I want something out of the box

Something wacko

[lost vapor]

i think it's good

you can feel free to look at this #📜・certs-and-career

[vapid adder]

Doing CDSA on HTB is better or THM SAL1?

[lost vapor]

i'd take htb's

it looks better on the resume

plus i love their art it looks so much better than thm

thm artist when actually creating a badass design (they never will)💔

[solid gull]

🥀

[lost vapor]

meanwhile you have fine shyt over here🔥

[hard torrent]

Hey guys,

Anyone know how to crack a 2021 MS Word document which has open password activated on it?

I have a document i created a long while ago that i kinda need rn. I forgot the password to open it.

[zealous moss]

yo

add me back chap

[spiral notch]

#📜・rules

we dontm help wit things that could be used unethically or illegally

[lunar eagle]

Anyone here explored advanced Twitter recon or lookup utilities? Been diving into some OSINT work, but hit a wall. Would be cool to connect with someone who's navigated that space before — feel free to DM.

[halcyon flame]

Part of a CTF or something?

[night island]

A part of a CTF

[halcyon flame]

An ongoing CTF?

[night island]

Ended

[halcyon flame]

Looks like it says it ends 2025-12-29?

[lost vapor]

right after my birthday fr

[halcyon flame]

Don't cheat, work with a team

[night island]

It ended, i have a certificate of that CTF

[lost vapor]

well that means you've solved it

didn't you?

[night island]

Well, i think i will do it by my selft

[halcyon flame]

That challenge also has 0 solves

So yeah

I'd recommend doing it yourself.

And don't lie

🤷‍♂️

[raven plover]

yo chat, i have a genuine question,
now as a networks and distributed systems student on the verge of graduating, should i do my thesis about security or blockchain?
what do you suggest?

[lost vapor]

security would come first in my opinion

i mean at either case

[raven plover]

i seee

[hard obsidian]

does anyone know how to find "origin IP"? like the actual server behind amazon ELB or uk other services....

[halcyon flame]

Usually not without great effort, or using other vulnerabilities.

[hard obsidian]

who's vulnerabilities... like where to get started (its holidays and I have a ton of time lol)

[halcyon flame]

Also, that first "great effort" method, is not always possible.

IT depends

[hard obsidian]

mmhm

[halcyon flame]

What's the target.. is it a bounty program or VDP?

Do you have permission?

[hard obsidian]

yeah

its

[halcyon flame]

So, what is it?

[hard obsidian]

a bounty program

a club in my college set it up

challenge kind of a thing

thought it would be simple

[halcyon flame]

If you don't have much experience in pentesting or finding vulnerabilities, maybe check out #💕・free-resources

[hard obsidian]

no access?

[halcyon flame]

We can't just walk someone through looking for vulnerabilties and exploiting a target for which we don't know for sure ifyou have permission for or not

[hard obsidian]

valid

[halcyon flame]

Add roles in id:customize

[hard obsidian]

okie thanks

[fallen oyster]

I need help setting up my virtual machine. Please help.

[shut monolith]

Hi

How do I check my laptop ports version(if it's a 2.0 port or 3.0)

[lyric basin]

Question

[supple grail]

Which step exactly do you need help with?

Sorry for the late reply I had an exam

[supple grail]

On windows it should be in device manager or system info

[spiral notch]

?

[lyric basin]

The root icon near my name is gone how do I get it back

[halcyon flame]

God damn.. learn to Google

Or explore

or use eyes

or do anything else apart from just ask people for the answer

[supple grail]

Go to settings, edit user profile and scroll down

[lyric basin]

Graci

[supple grail]

No problem

[shut monolith]

Ok

[fallen oyster]

Windows setup- active windows ( I don’t have a product key ) select the operating system you want to install? Windows’s 11 prob x64, This PC can’t run windows 11.

[supple grail]

Did you allocate 4 GB of ram?

[fallen oyster]

Yes

[supple grail]

Are you using virtual box?

As far as I know windows 11 searches for tpm 2

Press shift+ F10 during install to open a command window and open regedit after that

[fallen oyster]

Yes oracle virtual box

[supple grail]

Go to hkey local machine / system/ setup and create a key named "LabConfig" and create the dword values, BypassTPMCheck

Set it to one

And while you are there also add a dword value named BypassSecureBootCheck

Also set it to one

That should work, if it doesn't let me know

[south plinth]

when we are learning pentesting should we specialize in one domain all learn something in all domain

[tame tinsel]

I want to add JVM option in intellj

How do I do it

[fallen oyster]

My apologies for late response, it didn’t work for me. Going to try it again.

[tame tinsel]

Someone plz help 🥹

[supple grail]

i dont really have an idea what else it could be, i recommend watching a youtube tutorial

let me see if i can find one

oh yeah also, what didnt work? opening the terminal or the regedit

[viscid crane]

Good morning all!
I need help on tryhackme shell overview

[burnt torrent]

Hey everyone, I'm looking to learn hacking, (both blackhat and whitehat havking) where can i learn and develop my skills? Are there any free websites/videos/tutorials you would recommend? Thank you!

[bronze marten]

#👥・new-member-guide you can find your guide there

if you need any more questions don’t be afraid to ask!

[fallen oyster]

It all work, I can get in the terminal and got into registry editor. I took the steps.

But I still can’t get through Microsoft setup

[vague umbra]

Hey everyone, I need your help. I’m really interested in starting a career in cybersecurity. I have some basic knowledge of Kali Linux, but I’m not sure about the career path or what the scope is in this field. I’d really appreciate it if someone could guide me how should I begin my journey in cybersecurity? And is it a good idea to pursue a career in this field?

[radiant stone]

It's not an entry level career. You'll wanna make sure to familiarize yourself with systems and operating systems. Service desk or a systems admin / network analyst are the best feeder roles to transition into cyber

[vague umbra]

can you tell me what are Service desk or a systems admin / network analyst please

[radiant stone]

Job titles in IT

[vague umbra]

like what are they actually responsible for

[fallen oyster]

I wish I could pic what I got on registry editor . All the steps are there and I even found a YouTube tutorial. Smh, this is beyond me.

[supple grail]

does it have to be windows 11? windows 10 is way easier to set up, just make sure it doesnt have wifi during the account setup so you can create a local account instead of using your microsoft account

i think they might have patched those windows 11 methods

[fallen oyster]

They had to, I’m not really seeing to many windows 11 tutorials. Nubie question, does that mean I would have to switch my pruduct token to 10 on my device? It doesn’t allow me to drop to 10 on the machine, if you can switch it on the machine is there away?

[supple grail]

i once created a windows 10 vm and i just skipped the product key part so i dont really know

[woven wasp]

This course is limited 🥲

[fallen oyster]

Stupid windows… ruining my life smh… I have to figure out how to change it to 10 in the vm.

[supple grail]

you can just get the windows 10 iso

[spiral notch]

depends

on what type of pentesting

its always good to be profficient in 1 but have a bit of skills in other types too

[rapid current]

Hey guys. I want to gain some IT skills online as I am preparing to join university to do electrical engineering course

[brisk ibex]

Hello am kind of new to the chat I am trying to learn how to spam so I can create a income for myself if there’s anyone in here can help me or point me e in the right directions it will be much appreciated

[keen pawn]

Hello,
I'm currently studying for the eWPT and I'm at the Web Proxies module.
To be honest, I still don’t fully understand what cookies are or what some of the info in HTTP headers means, and I feel kind of lost.

The problem is that the labs in the eWPT course aren’t really challenging — they’re just simple practice exercises based on what was taught. I want to go deeper and work on real-world style labs.

Can you please recommend in detail:

Which PortSwigger labs I should do?

Which TryHackMe rooms would help?

Which Hack The Box machines are good for this topic?

I’d really appreciate a full, detailed answer to help guide me in the right direction.

[pale galleon]

#📜・rules

[pale galleon]

#💕・free-resources, #👥・new-member-guide

[tidal rune]

many un replied texts here

[halcyon flame]

They are not meant to be replied to - they are channels to list resources more than anything

[tidal rune]

yeah many just join and ask for help without checking any of them

[keen pawn]

yall started talking here after i wrote my question ffs😭

[spiral notch]

i wont be able to give you a ful guide on everything however you should definitely research some practice courses for the cert

second of all regarding cookies and HTTP headers give me a sec

https://tryhackme.com/room/httpindetail

here u go, this should be enough

[gray kestrel]

anyone doing the sorcery box? I could really use some help q.q

[south plinth]

ohh i see

[mental tendon]

tell me where you’re stuck

[woven wasp]

https://www.coursejoiner.com/development/real-ethical-hacking-in-46-hours-certificated-csehceh-pro-free-course-3/

I need a course like this for beginners. This is limited but I need the free one's

[woven wasp]

Course "Real Ethical Hacking in 46 Hours: Certificated CSEH+CEH PRO- (Free Course)"

[lost vapor]

there's no actual course that can teach you ethical hacking in 46 hours
they are just lying
ethical hacking takes a long time to master

lots of technologies to learn

if you want the proper way of doing so, i recommend looking here #👥・new-member-guide

[woven wasp]

Thanks buddy

[woven wasp]

As for you how much it takes to Master, approx?

[lost vapor]

i am one year in and i still have lots to learn

[woven wasp]

Okh that's great, keep up

[mental tendon]

with zero IT or coding background, expect 1.5 to 3 years

[dusty sequoia]

is there any where i can get intership in india , iam almost at final year, i did projects, certs, only intership is missing?

[storm mesa]

hey guys I need some help with a project

[autumn carbon]

Hello everyone am new here please I want to learn ethical hacking I have always dreamed of it can anyone help

[storm mesa]

https://eu.docworkspace.com/d/sICzRj6adAq65xMIG?sa=601.1074

This is what I need help with

[solid gull]

#👥・new-member-guide

[lost vapor]

Hey, contact and work with authorities. We don't help with any unethical activities so please read our #📜・rules

[hidden anchor]

thanks for th info, sorryy for bother

[fleet drift]

do someone know why i cant talk on voice chat

[woven anvil]

maybe if you already knew networking really well...and programming....and web dev/security.... and chip design..... yeah, then maybe a 46 hour intro could teach something

[lost vapor]

you gotta rank up, in order to do that you just gotta talk in chat a bit more
but don't spam, just genuinely speak to people

[woven anvil]

Service Desk - Responsible for handling First-Level support, where they receive the call, and are able to gather information to fix, or to pass off to a different role
Systems Admin - Responsible for handling the Operating system's security + configuration. Things that are too difficult or out of scope for the Service Desk to handle, these guys will typically take on.
Network Analyst - These guys aer responsible for knowing exactly what is on the network, where it is on the network, and what each resource gets access to. They usually maintain the network equipment(routers, switches, APs) as well as fixing issues directly related to their department.

[south plinth]

what other programming language do we need to learn other then python for pentesting

[lost vapor]

well depends on what path you want to go by

web pentesting? reverse engineering?

[south plinth]

i am more into cloud pentesting

cause i feel like that is more in demand now

[lost vapor]

i see
well in that case languages like C would help

[south plinth]

do we need to know go?

[lost vapor]

not really it's kind of the same as python

interpreter language

[south plinth]

ohhh

i see

[woven anvil]

I would say if you also want to look at Azure-related stuff, powershell is pretty useful to understand

[south plinth]

thank you for the advice

ok

[lost vapor]

you will work around the consoles alot to interact with cloud services

[south plinth]

ok thx for the advice

[lost vapor]

@willow vortex #👥・new-member-guide

[lament obsidian]

Can anyone hook me up with a link to a free course which gives you a certificate at the end thank you 🙂

[spiral notch]

none

like theres literally pretty much none

those which give free certs have absoluitely no value in the industry

[lament obsidian]

😭

Thank you anyway 🙂

[spiral notch]

no worries, its kinda the point of certs

theyre somewhat expensive to the point where people cant just be buying and keep failing them

yet free certs, noobs will do them.. and fail... and do them again since theyre free... and fail again... and do them again since theyre free... and fail again... and do them again since theyre free...

[woven anvil]

The best thing you can get for free is knowledge

which is better than a cert 😮

[tardy canyon]

Does certs have like a expiration date/ renewal

[lost vapor]

kinda
it's because information and ways of preperation is mostly dynamic in the industry

[halcyon flame]

Sorry, that's piracy, and unethical. Not something we can help you with here.

Ask your tutor for help regarding gaining access to a copy of the book, on loan or whatever

[deep root]

Oh okay sorry thankyou

[obtuse turret]

Hi quick question I am a beginner in cyber and wanted to learn powershell empire is it easy to use

[stray mural]

learn the powershell first

[south plinth]

for cloud pentesting should i specialize in one cloud domain all know abit of every cloud domain

[dusty swift]

Is there anywhere in this server that goes over DFIR

[lost vapor]

There is a htb module for that, i recommend generally

[dusty swift]

#htb

where can i find this ?

[lost vapor]

https://academy.hackthebox.com/course/preview/security-incident-reporting

[vapid adder]

@lost vapor is macbook m4 good for cyber ? with pararells?

[lost vapor]

eh
i wouldn't consider mac products to be good for cyber security related tasks

if you want more freedom on your system thinkpads are the way to go

[fleet drift]

yo can someone help me

[spiral notch]

?

[fleet drift]

i can open virtual box

he close immediately and show me a problem

[spiral notch]

what problem

[fleet drift]

Error in C\Users\opbra.VirtualBox\VirtualBox.xml
(line 22) -- UUID
"(00000000-0000-j000-0000-000000000000)" has zero format.
D: \tinderboxa\win-7.1\src\ VBox\Main\src-
server\VirtualBox/mpl.cpp(844] (long _cdecl
VirtualBox init(void)).

can some mr robot guy help me whit this?

[vapid adder]

@spiral notch @lost vapor is getting soc analyst or any junior role of cyber sec job hard?

[lost vapor]

depends on your knowledge and foundation but generally speaking
landing a job in blue teaming is more achievable than red teaming atm

[spiral notch]

skills

and a good resukme

will land you anywhere

[fleet drift]

@spiral notch

[spiral notch]

you barely gave any details

what os are u trying to boot

are u using a vdi

how did u set up the machine

[fleet drift]

I’m on Windows 11, and I’m trying to boot Kali Linux (latest ISO).
I created a new VM in VirtualBox, selected Linux > Debian (64-bit), assigned 4 GB of RAM, and created a 20 GB VDI.
The ISO file was downloaded from the official Kali Linux website.
I haven’t even reached the part where I can start the VM. The issue appears immediately when I open VirtualBox, before I can even select or boot any machine.
The error says:
"UUID "00000000-0000-0000-0000-000000000000" has zero format"
and refers to a problem in the VirtualBox.xml file.

[pine talon]

Hello, so I need some help here, I bought a used Thinkpad E480 with an i5 8300u 16gb of ram and an integrated gpu. I am using kali bare metal and everytime I open a new firefox tab the cpu fan starts ramping up for a while.

Do you guys think I should change to ubuntu or debian since they are a litte more light weight

and I can also install all the tools I need there

[forest orchid]

Please

i'm done

2 day's in a row

i still get read failed when i use airo dump

can someone watch my virtual machine screenshare in dm?

[lost vapor]

wdym
are you trying to attack a wifi?

[forest orchid]

Yeah

to sniff and do other stuff

much more of learning

But it just would not work

[forest orchid]

I am screensharing at focus room

[lost vapor]

https://academy.hackthebox.com/course/preview/wi-fi-penetration-testing-basics

there, you can learn through this module

[spiral notch]

what doesnt owrk?

[forest orchid]

[forest orchid]

Can you see for yourself at focus room>

cant describe it really well

[spiral notch]

uhh sure

[vapid adder]

thank man

[spiral notch]

give me a bit

[vapid adder]

thanksss

@spiral notch @lost vapor you guys really helpful thanks a lot!

[forest orchid]

:3

[spiral notch]

@forest orchid ya im back

[forest orchid]

me too

I'm at #focusroom

Hello...?

[spiral notch]

move to coding

@forest orchid

[lilac granite]

#📩┃ticket fix this

[lost vapor]

@hoary iris@chilly merlin

[lunar eagle]

anyone go?t access to x look up tool

?

[polar prism]

Please where can I buy good EV signing

Or anywhere I can sign without the LLC hassle

[true flame]

Can anyone help me I am struggling to set a cookie in deployed site the backend is sending the set cookie header but the cookie is not being set my code is {httpOnly:true,secure:true,sameSite:'none'}

Backend is on render and frontend on netlify

[errant parrot]

=

[mental tendon]

when making your fetch or axios call, make sure you add this:

fetch('https://your-backend-url.com/api/whatever', {
method: 'POST',
credentials: 'include',
headers: {
'Content-Type': 'application/json',
},
body: JSON.stringify(data),
});

without credentials: 'include', the browser will ignore the Set-Cookie header

[mental tendon]

if you don’t have an LLC you could either:

register a cheap one (some US states like wyoming or delaware let you do it for around $50–$100)

or go with a standard (non-EV) code signing certificate as an individual

[mental tendon]

isn’t publicly accessible

[polar prism]

Thanks but the standard one will still show the defender smart screen which I don’t want

[mental tendon]

the only real way to bypass the warning instantly is with an EV code signing certificate. they cost more and require a registered business (LLC or similar), but they give your app instant trust with Windows.

[polar prism]

Thanks I’ll work on it

[woven anvil]

well

theres been reports of more and more legit signed applications getting sweeped up

[mental tendon]

especially from lesser-known certs or devs with low reputation. code signing alone isn't enough now; rep and behavior matter more.

[olive iris]

any neovim enjoyers here? I was wondering if its possible to when you are browsing like your file tree to enter a folder in your nvim editor to then sort of reopen a dir from that point and close all other folders like remove them from view so example:

you do
nvim ~/
but then you get to the folder you wanna be in and have some key-bind that acts as:
nvim ~/folder/where/i/want/to/be
and it sort of closes all others and removes them from "workspace"

[deft bronze]

how do I get the server tag

oh nvm

I got it

[formal venture]

Help me pls , My my flash drive got the RAW type and is no longer formatted tried via cmd, used "hhd llf" and dmde.I was installing Linux and during the installation my lights went out

[true flame]

@mental tendon const checkinfo=await axios.post(${process.env.REACT_APP_BACKEND_URL}/login,userinfo,{withCredentials:true})
Still it is not setting the cookie

[sand flax]

Your no longer able to re format it?

[mental tendon]

backend must set the cookie with:

res.cookie('token', value, {
httpOnly: true,
secure: true,
sameSite: 'none'
})

✅ all these options must match the frontend setup.

[polar prism]

@mental tendon can you recommend a site I can get the EV cert from

[marble tapir]

Prompt one question at a time pls

Thanks in advance to those who are helping.

[neon raven]

So what we need to do is go on the platform and ask questions?

[true flame]

@mental tendon backend is the way that you said and it worked on localhost but it is not working when deployed

[crisp star]

https://tenor.com/view/thats-an-ad-thats-an-ad-jimmy-thats-an-ad-jimmy-south-park-south-park-gif-21350739

[marble tapir]

Yes

[marble tapir]

Yes

[formal venture]

ye

Can this damage the drivers of the flash drive itself?

I tried a couple more methods but it got bricked

[lost vapor]

@marble tapirheya
congrats and the project and all
we don't advertise over here though
sorry, and good luck!

[sand flax]

U can format in in a windows cmd

Im pretty sure

If this is just a flash drive

But if your whole pc is bricked

Yea ggs

But if u have another device

Reformate the flash drive

Via cmd

And use windows media recovery tool

If ur use linux

Its easier

[formal venture]

I tried but when I reformate , flash drive just disconnecting from windows and I got error , I cant send image here for show u

[supple grail]

send it in my dms ill send it in here for you

https://media.discordapp.net/attachments/1385273566332850297/1385273610620502026/2025-06-19_174543.gif?ex=68557815&is=68542695&hm=8584d5a52a277ef368ecc20866a607c1a3ac16ec8428017fc4c67070ea9661b8&=&width=823&height=413

[sand flax]

Yea

Clean it

[sand flax]

Server or ur pc

Ooh

A vm

[supple grail]

the images are from @formal venture i just sent them cause he doesnt have image perms

[formal venture]

Thx for all , I found the reason , controller is dead

[sand flax]

I see

Ggs

[formal venture]

rest in peace

[sand flax]

Yea

How tf did it get fried

[formal venture]

I spent 2 days trying to restore it and didn't check the most obvious thing

[sand flax]

@formal venture What linux distro u tryna install

[formal venture]

first tried arch, and then decided to install kali

[hushed sphinx]

hey. can someone help me? i'm trying to get into cyber security but i don't where to start. can someone suggest some topics that i should learn?

[spiral notch]

networking web theory

web exploiting

network exploiting

then branch out onto other things

digital forensics

soc and blueteaming

or redteaming

RE or malware analysis (and maldev)

[hushed sphinx]

any recommended sources to learn all of these?

[spiral notch]

tryhackme learning roadmap

free one

hackthebox

then for more specific, come back later to get more specific info

once you know what youll be asking for or looking for

[hushed sphinx]

Alright Thanks a lot👍

[mossy echo]

anyone has decent ressources the get into hardware

[mental tendon]

probably a cross-origin or HTTPS issue. both frontend and backend need to be on HTTPS, and backend CORS config must allow your exact Netlify domain with credentials: true. also check if the browser’s blocking third-party cookies.

[mental tendon]

DigiCert, Sectigo (formerly Comodo), GlobalSign and SSL.com

all of these require a registered business entity to meet EV validation and come with hardware token/HSM

[lunar eagle]

it is

[hardy current]

VM Name: Parrot OS Security Edition

The virtual machine 'Parrot OS Security Edition' has terminated unexpectedly during startup with exit code -1073740791 (0xc0000409). More details may be available in 'C:\Users\h9ndl\VirtualBox VMs\Parrot OS Security Edition\Logs\VBoxHardening.log'.
Result Code:
E_FAIL (0X80004005)
Component:
MachineWrap
Interface:
IMachine {300763af-5d6b-46e6-aa96-273eac15538a}

kinda tweaking rn

[supple grail]

can you check the VBoxHardening.log?

[hardy current]

yes and ill send it rn

[hardy current]

check dms it wont let me paste the txt here/upload it

[supple grail]

alr

which vbox version are you using?

[hardy current]

oracle , just plain

[supple grail]

i mean like the newest or an older version?

[hardy current]

newest

[supple grail]

have you tried reinstalling vbox?

[hardy current]

i have, i had to do it to fix a previous issue aswell

[simple rose]

Are these books good for learning ethical hacking? Hacking the hacker by Roger A. Grimes, How to Hack like Ghost breaching the cloud by Sparc Flow, and Hands on Hacking by Matthew Hickey and Jennifer Arcuri?

[bronze marten]

theres ton of books to choose from

one i recommend is Hacking: The Art of Exploitation, 2nd Edition

[hardy current]

Pkease someone 😭

[crisp smelt]

Is there a way to get a 2fa sms message on a number that is no longer active, if so how, trying to get access to my email after changing numbers.. my mess up, forgot the PW and can't change my PW without 2fa.

[spiral notch]

no legal way 🥀

no illegal way most likely either, depends on the provider

anyways

unfortunately nothing you can do from here except for contact support

if that failed too, then nothing u can do

[winter axle]

Does anybody have any resources on using a FlipperZero?

[spiral notch]

wdym using it

you have a flipper and you dont know how to use it?

[winter axle]

Yeah not fa real 😅

[spiral notch]

got any modules for it?

[winter axle]

Naw just it by itself right now. I can get some modules later. Also if you recommend any

[spiral notch]

depends

what are u planning ot use it for/

?

[winter axle]

Spoofing, jamming, emulate RFID/NFC cards, RF signals

Just fun stuff really

Bad USB also

[spiral notch]

everything is pretty straight forward regarding these things on it

you just need to read and use common sense

its not like youd really need any specific docs

for the things youre trying to do

[hardy current]

Please someone 😭🙏

[valid belfry]

No

Zero detail= no help

[chilly merlin]

Why did the old man with alzheimer's react a heartbreak 🥀

@mossy echo

[valid belfry]

because you sound dumb

that is why

[mossy echo]

Yep

[chilly merlin]

how lol

[valid belfry]

Because you want to commit crimes ?

And disrupt service people pay for

[chilly merlin]

of course 🙄

sybau

[valid belfry]

Exactly so stop pusc

You don't have a job

[chilly merlin]

I do

jk

[valid belfry]

Stop ruining other people's things

[chilly merlin]

how am i supposed to have a job if im not old enough

[valid belfry]

You'll regret it once you get thrown in jail

By studying mate

[chilly merlin]

you cant

[valid belfry]

Yeah you can

[chilly merlin]

no

[valid belfry]

I went to court for it when I was 13

Not for what you are doing lol

[chilly merlin]

what did you do

[valid belfry]

Doesn't matter what I did

What matters is you stop now

[chilly merlin]

it does

[valid belfry]

Or you'll probably mess up your future

[chilly merlin]

it really does matter

thats what this whole server is about

[valid belfry]

I understand

[chilly merlin]

kinda

[valid belfry]

I have a esp32 that does what you want

[chilly merlin]

why

fine i will stop 🥀

[valid belfry]

If you are trying to crack wpa I'll just tell you that it's not worth trying

Will save you the time

[chilly merlin]

wdym crack wpa?

lol, I just wanted to make a firmware on an esp32, i had no idea on what else to make.

[valid belfry]

You should try homelab @chilly merlin

[chilly merlin]

alright

[valid belfry]

Gives you legal things to do

[chilly merlin]

Whats a homelab

[valid belfry]

You host things you'd normally pay for thatre open source

[chilly merlin]

like a server?

[valid belfry]

Siuc as a VPN to connect to your things, a movie server, something fun

Yeah

Exactly

Server(s)

[chilly merlin]

How can I start? if you dont mind.

@valid belfry what is "redecohosting.com"

[valid belfry]

Vps provider, I am the system enginner/sys admin/ cto

[chilly merlin]

Oh wow really

[valid belfry]

Yep

It's a startup for my bud

You stalking me 😭

[chilly merlin]

i made a simple android backdoor for both my Android phones, i used a free service localtonet for TCP connection, the port changes tho for the service i yse. so i want a static port so the connection isnt lost or disrupted, any tips or suggestions?

[spiral notch]

Barely any space for troubleshooting

why does the port change? Is it because it’s not prioritized and the service is always pushed around? is it because of a bad config in the settings?

have you tried checking configs

see if you can change it to a static port

[vernal cape]

hey can anyone help me with my linux i have 100GB of unallocated space but i cant extend my / drive

[lunar eagle]

does anyone here got access to x look up tools?

[edgy prairie]

Who knows how to flash a Nokia c32

[woven anvil]

what Filesystem? Are LVs involved? What distro?

[spiral notch]

clarify

[chilly merlin]

i checked the settings on the hosted service i was running for port forwarding, nothing that gave me the option to set a static port on it, only port i can really change is the client side of it and that is the client IP and client Port.

but i think maybe the dynamic port changing is for security if im correct (which im probably not) or its just setup to be that way i guess

either way the time i have a connection the the phone the given time when the port changes is about enough time to put the payload on the phone and run msfconsole and simply gain access to the phone

[shell pendant]

Hey everyone, I just wanted to share something important. My Facebook account got permanently disabled for no valid reason. At first, it was just suspended and asked for the usual verification. While I was uploading the face video for verification, the screen just kept loading… and then suddenly I got a notification saying that my account has been permanently disabled.

This is really frustrating because I was using that account to run my online shop, and it was a major source of income for me. If anyone knows any way to recover a disabled Facebook account, or has gone through something similar and managed to fix it, please let me know. I'd really appreciate any help 🙏

[shell sinew]

Contact FB's support

[spiral notch]

as above, did u contact Facebook support

[shell pendant]

Account wasn't meta verified so there's no support team or something, I emailed to whatever emails I could find, but don't think it'll work

[spiral notch]

then it’s lost unfortunately

we don’t recover accounts, especially since it’ll be illegal and unethical

we’re ethical hackers, not cybercriminals

[naive olive]

Hey guys i just got a message from a sccamer trying with a phishing link and i know its connected to a discord webhook is there any way to obtain it and just destroy the server that he got??

[shell sinew]

read it again and then read #📜・rules ❤️

[naive olive]

i mean im just askin

[spiral notch]

send me the link

I’d love to check it out

[turbid warren]

Hi , Do you think using chatgpt in CTFs consider as cheatting

?

[lost vapor]

depends

but mostly the answer would be yes

i think

[bronze marten]

if its just simple questions then no

but other than that

yes

[woven anvil]

You are 100% cheating yourself if you wanted to learn anything, and you get someone else to do it(AI included)

[neon raven]

Ctfs are for your practice buddy they have hints/doc with them refer to that they contain more information than a simple answer from chatgpt...

[sand flax]

How can i start learning a bit of nmap and metasploit

Just for fun

Im not tryna go in depth

Just to learn how to exploit ports

[chilly merlin]

google

paste the same question in google lots of articles

[desert torrent]

don't you got your own IT server to maintain?

🤔

[ruby mason]

I need help with telegram premium
Anyone pls🙏

[crisp star]

If you need help, ask.

[ruby mason]

I need help with telegram premium

[crisp star]

You have to be more specific.

[ruby mason]

I need help with telegram premium but I don’t really know if there might be someone here who might help me with that but please🙏🙏
I’d really appreciate it if I will be able to find someone who might assist me with it🙏🙏

[pale galleon]

ask

[wet shoal]

Hi all, I'm currently a beginner in cybersec and learning i need some help, first of all my PC/laptop is lagging when im typing in here like a medium delay, second im choosing Parrot OS as my learning software and i need some upgrades, im upgrading my RAM from 8GB to 32 GBs and I need some more suggestions if needed to update

i have a Intel i5 CPU and my gpu is RTX 3050 Geforce, the GPU i wont upgrade but should i upgrade my CPU?

[junior furnace]

Hello All, does anyone use Ligolo-ng for pivoting ? I'm trying to find out after I execute the agent then go back to Kali and run nmap -sn it's not picking up all the ip's , it's registering 2 out of the 4 Ip's but I need all 4 to get the SID to forge the Golden Ticket

[woven anvil]

When you say lagging, do you mean lagging in Windows, or have you installed ParrotOS onto the computer?
Windows Typically "Wants" 16GB minimum, as the OS itself tries to eat up 4-6GB itself, leaving you very little room for applications.
Most Linux, if the DE is heavy, the OS can use up to 4GB, but if its light, then the OS should be using around 1-2GB. This makes 8GB more Viable.

That is just a baseline

Any application you run over it, be a web browser, office document/spreadsheet app, or security tool, will use RAM. So only you will know what workload you are trying to achieve.

For CPU, i5 is typically fine for most tasks. Would specifically need to know which i5 it is. Upgrading a CPU(Especially for Intel) usually means upgrading the motherboard as well, or else you are left with very small changes between i5, i7 and i9 for that specific generation. Especially in a Laptop where the CPU is usually not socketed.

[wet shoal]

lagging like the text lags when i type in like i clicjk the keyboard and the text takes a while to load

[woven anvil]

• What OS is this happening on?
• What applications are you running on the computer?
• How hot is the computer?
• What model CPU is your i5

[trim latch]

Is there any site I can scan my number to make sure it’s not pwned by a data breacher
🗿

[wet shoal]

i still havent downloaded Parrot with VB, but im planning to when i get the RAM

as of now, settings, task manager, discord and 5 tabs in chrome

idk how to see that

Intel Core i5-10300H CPU 2.50GHz

[woven anvil]

Assume it is, protect accordingly

[woven anvil]

Ok, so this is all running in Windows itself?

[wet shoal]

yes, im planning to download Parrot OS with Virtual Box once i update everything

[woven anvil]

What does the performance tab of task manager look like

[wet shoal]

wym

[trim latch]

I don't think 3 hours ago someone called me from Zimbabwe🗿

[woven anvil]

Open the application called "Task Manager". If you hover over the Tabs on the left, there is one called performance. I can't post screenshots here, but I can DM you screenshots if you want

[woven anvil]

I get calls from all over the world, as companies collect your number and sell it to advertisers. They end up both in advertisers hands, and in collection DBs on Darkweb/random places

So at any time, if you give your phone number to anyone, you can end up on a list with random gooners calling you for money

[trim latch]

That a reason I ask for the website so I can scan my number

[woven anvil]

Assume your phone number is not safe, and never a safe method to use in MFA

[trim latch]

To know it's on dark web or no

[trim latch]

Really? There's no way?

[woven anvil]

Some companies offer a paid service to do this with emails and such. Its a paid service because they went out of their way to gather the data, parse it, and offer searches for it. Some companies offer free searches(can find on google), but its possible that they are just collecting data as well. I don't think there is a well-known service like HIBP that will check for phone numbers.(It only does emails)

From my usage of these tools at work, there is not much you can do once you find the information is leaked. You switch phone numbers, you give it to the same services, and now you are on a list again. You switch emails, and same thing(Emails you can use Groups if you have your own domain, and use a business email service that allows custom domains, or host your own email server to find out which random company sold your email away. You can't do this with phone numbers)

There is even reports of people just walking into companies that sell phones, they tell them that they lost their last phone, and just take ownership of your number. Then they use that to now have access to people's 2FA codes that they have set via SMS.

Best thing to do is to practice good security overall, don't tie anything to your phone number if you can avoid it. Make sure your 2FA/MFA are not SMS-based. If they are, change them to TOTP or better. Use a Password Manager(You can host it yourself, or use something like keepass, MAKE SURE TO BACK UP WITH ENCRYPTION IF YOU SELF HOST), and get some long randomized passwords on services that you use. If running Windows, make sure Defender is up to date. Get better control over the Firewall. Understand the stuff that you are trying to protect. Those will do way more for you in the long run.

[trim latch]

Ayo

[trim latch]

Alright I'm gonna do it thank you

[dapper lodge]

did you get up and running with parrot?

[wet shoal]

haven't amde the change with my RAM yet

[dapper lodge]

what edition are you looking to try?

[wet shoal]

wym

[dapper lodge]

they have a Security, Home, Cloud, Architect and Rasberry pi versions. Why are you changing your ram? I was going to give it a go with what I already have.

[wet shoal]

security and also it would lag very badly\

[dapper lodge]

ahhok gotcha. Are you switching from Kali? I am just looking to try it out I dont know if I will keep it but I have heard it runs very well even with lower amounts of RAM

[wet shoal]

nah im a complete beginner

[dapper lodge]

me as well. I will probably have to read a lot in order to get it right. I have a few other things to tackle before I am ready to give it a shot.

[spiral notch]

yapper is back

[spiral notch]

are u trying a vm or baremetal

also enable swap

if u have low ram

makes it smooth af

and gives you free ram (literally)

[spiral notch]

what does? Parrot?

[wet shoal]

Virtual Box.

[spiral notch]

feel free to ask me anything abt pentesting distros, I’ve practically tried all of them ^-^ @dapper lodge

[spiral notch]

ah yeah so van

vm*

enable KVM in the paravirtualization settings

it’ll run way smoother

also try 3d acceleration

and set video memory to the max, default is 16mb

set it to 128mb

should run way smoother after

how much ram and cpu cores did u allocate it btw?

3d accel can be unstable af tho

[woven anvil]

They have 8GB system RAM, so they are upgrading before they begin

They wanted to know what else they would need to upgrade(CPU and such)

i think they are going to 2x16GB?

and its a laptop, so no upgrading other things really besides SSD

[woven anvil]

Do you eventually just make your own with all the tools that you actually use? or do you use those distros

[spiral notch]

I usually set up my own for long term, as I do t use half of the tools offered in kali, and as an arch user, I care about no bloat and every single free mb of memory. pentesting distros give practically no benefits at the price they come, it’s rather for lazy asses who cba to set up their own

It’s more of a boot up and get it done type of linux

[spiral notch]

32gb is overkill af

unless they’ll be playing like valorant

while doing ctfs

All at the same time

[spiral notch]

I5 or i7, 4c would be amazing

even if at 2.5ghz for example

[woven anvil]

its already an i5.

[woven anvil]

They have 8, which is annoying in windows.

[woven anvil]

Arch Master Race(im on cachy)

[spiral notch]

annoying is an understatement

windows on idle loves to eat out at least 3

[peak lake]

I have a question. I am in the process of creating a custom game launcher. What are the steps to getting the mixed kernel to work? I have two kernels, one for Linux and one for Windows.

[stable hornet]

Hello guys, quick question, I'm considering doing the CPTS path on HTB, I have the student subscription option available, after I buy the student subscription, can i access the the Pentester path without worrying about cubes ? and I have to pay for the exam separately ?

[shell sinew]

you have it all described there but YES:

1. you can access the pentest path without the cubes (with a student discount you have 3 paths for free - no cubes needed)
2. you have to pay for the exam separately, the student discount doesn't include free exam voucher

[chilly merlin]

Any recommendations on where to start learning how to hack peoples accounts?

[halcyon flame]

THis is an ethical server. We will not help you regarding this.

It's not something as simple as "make hack go now, steal account" anyway

Anyone offering to help you in DM, for free or paid, will only be out to scam you.

[chilly merlin]

I fully understand, my scope on it wasn’t originally just going out to hack people lol, one of my buddies had one of their accounts hacked in a video game, wanted to see if there could be a way to get it back through fighting fire with fire

[halcyon flame]

Well then they should reach out to the games support team.

Two wrongs do not make a right. Read #📜・rules

[chilly merlin]

Very right you are goblin man

[royal pewter]

hi guys i’m new in to hacking like i don’t know anything and i use an iphone which makes it difficult for me but if anyone can tell me any tips or tool i can learn hacking that would be great and i’ll be really thankful

[peak lake]

okay get laptop first

[mental tendon]

that’s gonna limit what you can run

Read “The Web Application Hacker’s Handbook” (or OWASP Top 10)

[stable hornet]

cool, thanks a lot man

[shell sinew]

refer to #👥・new-member-guide

[quaint sail]

yoo i started with TryHackMe but it is not all free so is there a better way

[spiral notch]

the free is way more than enough man

[quaint sail]

the linux fundemental in the pre security is paid and its very important

[spiral notch]

it hsows you the courses names, you are easily going to be able to find alternatives lol

[dapper lodge]

Quick question for anyone running tails off a USB. When going through set up (on Mac) was there anyway to click setup other than with a corded mouse? (My keyboard and trackpad are not functioning and all the mouse options I have are wireless) don’t want to go buy a corded mouse unless I have to.

[spiral notch]

yes, set up Bluetooth

[rustic glade]

Anyone got a place where i can practice with active directories and networking ?

[broken spindle]

Wanna know , which proxy do u guys use for burp suite ?

[broken spindle]

Simple ctf

[broken spindle]

Any of you , let me know

[south plinth]

htb should have some active directories lab

[glacial anchor]

i want to start my journey in cybersec this summer, i need help to know where to start from.

[shell sinew]

#👥・new-member-guide
or

1. infosec related certs, like this SEC+ or smth higher
2. smth with enterprise architecture, like CISCO, Microsoft, AWS certs
3. theeeen some job related ones, for example OSCP, CPTS etc. etc.

[spring locust]

Is this the correct path I should consider getting into cybersecurity? I have CCNA,CCNP,LINUX,AD knowledge.

CCNA → Security+ → CySA+ or Cisco CyberOps → CEH/PenTest+ → GCIH → (optional CISSP/CISM later)

[shell sinew]

why are you doing both blue and red team?
from CEH/PenTest+ to GCIH?

[spring locust]

I thought I'll start from blue then end up on the offence side

Guide me kind sir

[shell sinew]

I mean yes, you can start with blue then transition to red but I don't recommend becoming a certs collector just bc

I'd do CCNA, Sec+, CPTS (pentests) after those I'd think about more in-depth path like web / network etc

[spring locust]

I completely agree

[spring locust]

Thanks for this

😊🫱🏻‍🫲🏼

[last pumice]

Hi there guys can anyone tell me which hidden application is the best for secur my data on social media and in my devices that even the greatest hacker can go in thanks 😊

[lost vapor]

none

everything can be hacked

[last pumice]

Is there anything that girl can have a little peace of mind 😀

[lost vapor]

are you a girl or something wait i don't get it

what do you need specifically

and why

[mellow geyser]

what about the quantum entanglement the new tech

[lost vapor]

🤫

[mellow geyser]

heheh

do you really think its unhackable i do agree about the photon that it can't be duplicated but the device or the ray can be hacked

[last pumice]

Yes I am I girl and what I am asking is there any application hiden that can help me improve my security I mean in social media and In my devices like for example is eset app is there any stronger that can really help

[lost vapor]

well
there's kaspersky security
do you have a built in antivirus?

those are usually better for your phone

[last pumice]

Okay buddy can you tell me more abaut it

[lost vapor]

kaspersky is an antivirus for the phone

but don't have more than 1 antivirus active

it's going to slow down your phone

[last pumice]

Okay can i find it in play store or In Google

[lost vapor]

yes

[last pumice]

I find it on Google

Thanks buddy

[uncut edge]

Heguys

[halcyon flame]

Not here @uncut edge

This is an ethical server, and that is a case for the authorities

Sorry

[uncut edge]

okag

[halcyon flame]

Read #📜・rules

And don't post personal information online fml

[spiral notch]

if ur looking for an antivirus

just dont download any apps

and youll be fine

if youre looking to not have ur socials hacker

hacked*

dont click on sketchy links

or input ur credentials or give them away to sketchy places

and youll be fine

its just common sense

[neat tundra]

Hey guys I need help rq

My dad was searching to see if our calls were being forwarded and tracked

And everyone in the family’s is disabled except for my dads

And we can’t disable it at all

It’s saying the guy tracking him is from Texas, I already looked up his number and saw all the details

[dapper lodge]

Due to the security of Tails things like Bluetooth are disabled. I’m going to have to breakdown and buy a USB hub since the ports on my Mac are so close together I can’t plug the USB and an adapter at the same time. (Thanks Apple)

[halcyon flame]

Speak to your mobile provider. You can disable call forwarding with specific number / codes you dial, but if you are unable to research this or do this, speak to your mobile provider.

[neat tundra]

Okay thanks

We tried the codes,so I’ll have my dad try and talk to the mobile provider

[halcyon flame]

Past that advice, there's not much we can really do for you. If anyone reaches out asking you to do anything past those codes you dial in, don't follow along with them

They will likely just be there to try and scam you.

The service provider are the ones to help you best in this case

[neat tundra]

Okay thanks man

Shi lowk scaring him

[halcyon flame]

No worries, good luck.

[neat tundra]

So I’m js tryna help any way I can

[halcyon flame]

But yeah.. a 5 minute call with the mobile provider will be able to have any forwarding etc disabled

[neat tundra]

Okay thanks

I think it’s cuz of his instagram account or something

Cuz of his opinion pisses people off and he gets hate comments

But we’ll never know lmao

The call was being forwarded to some guy who owns a tree cutting company in Texas

Like tf

[halcyon flame]

Yeah probably not.. just solve the immediate concern and put it behind them

[neat tundra]

Ok

[tribal karma]

Is tryhackme more beginner friendly than hack the box?

[shell sinew]

yes

[tribal karma]

Thx

[light mica]

#👥・new-member-guide also tryhackme for the beginners the free path is enough to learn the basics

[broken spindle]

Wanna know , which proxy do u guys use for burp suite ?

Instead of foxy proxy

Which are still better ?

[junior mauve]

@wet adder

@dark jackal

[wet adder]

a

[stray mural]

burp is good. you can also use Caido

for website penetration testing, there's https://portswigger.net/web-security/dashboard

You'll find bunch of rooms and modules in tryhackme and HTB platform related network penetration testing🙂

[keen pivot]

Is there a way to retrieve a pass ode out of samsung bios recovery log

[spiral notch]

probably, will be in the hashed version tho most likely

[chilly merlin]

I have a problem with a roouter is says that is connected to internet without internet the Wlan show light on in the router but the DSL and Online turn off and start blinking try ti establish the connection

If i have acces to manage the router settings what should i check and if problem is not there should i call the ISP

[shell sinew]

feel free to call ur ISP

[spiral notch]

factory reset it

unplug all the cables and rep lug them

wait like 5 mins between

unplug the cable you almost literally screw into your wal, sorry forgot what it’s called

[blazing gull]

thanks dude

[bleak condor]

is there a way i could listen to my local police chatter using my flipper zero?

[drowsy lichen]

How can i create a link that takes picture without the person knowing using termux

[boreal hedge]

Does anyone here can help me install a kernel for my oneplus 7T HD1907

[trim latch]

This is an ethical server

[drowsy lichen]

Im just trying to troll my friends

[spiral notch]

for sure u are

[radiant stone]

Trolling or not unfortunately it's against our #📜・rules and #👥・info

[spiral notch]

#📜・rules of

ooo

nice timing

[radiant stone]

https://tenor.com/view/quick-draw-cowboy-gif-25170342

[final osprey]

https://tenor.com/view/my-man-trust-chest-pound-brotherhood-gif-17669441

[wary jewel]

Please do anyone know of any online business course which I can earn money by working or something legitimately, I am now at home and waiting for my pending results to proceed in my High school

[regal cairn]

I’m a recent graduate looking for work please let me know if anyone knows any good companies that are hiring entry level. 😭😭 In Florida or remote. I feel so lost.

[trim latch]

Look at the Indeed job app

[trim latch]

Look at Alison or coursers

[indigo grove]

Any admin?

[shell sinew]

#📩┃ticket

[little canyon]

I've never used those usb systems like Tails, I'm about to get one and try nmap and other stuff to tweak around, how can I do it in a way that I'm safe and not breaking any laws?

for example, while using those programs, how can I be safe and not tracked? are proxy chains enough for that?

[woven anvil]

Doing it in a way that you are safe and not breaking any laws requires that you are doing it to devices that you are authorized to do it on(or own), on a network that you are authorized to do it on(or own).

[woven anvil]

If you are trying not to be tracked while trying to scan a network or host that you are not authorized to scan, then that can be seen as unethical activity.

[little canyon]

yeah it'd be with my own devices or network. But how do I know they won't think I'm an intruder? Can't hackers join the same network someway?

[woven anvil]

who is they?

If I use a VM on my own network to nmap scan/whatever a VM on my own network, then I am the only one who knows about it, and is effected.

If you are port scanning Google, or any public sites, then you are not scanning a host or network you are authorized to scan.

[little canyon]

the ISP? can't they see anomalies on my network and think someway a hacker got into the network if I try that?

[woven anvil]

If you scan outside of your network, they can 100% see it

[little canyon]

got it thanks

[woven anvil]

If you are worried about the ISP, then just make sure you have your own router, and practice behind that

VMs make this really easy to test and play around with

as you can have a VM that is a router

and learn networking as well(pfsense and opnsense both run great in a VM)

[little canyon]

oh that'd help yea. I'm actually pretty new on this, all I have done is like 4h of tryhackme. But I don't want to do something wrong when I start using the VM and the terminal stuff

[woven anvil]

VM is the perfect tool to learn to use first imo.
You can make as many mistakes as you want in your VM environment, then destroy and rebuild as many times as you want

Once you get comfortable with VMs, then you know how you want to build your "Playground" to test with

[little canyon]

got it thanks

[verbal cedar]

"unzip: cannot find or open /root/Download/android*.zip, /root/Download/android*.zip.zip or /root/Download/android*.zip.ZIP." can someone help me with this error im getting on kali

[woven anvil]

what are you doing leading up to the error?

[verbal cedar]

unzip ~/Download/android*.zip -d /opt

im trying to unzip it

[woven anvil]

try by absolute path, and without the wildcard

tab should autocomplete the file name

[verbal cedar]

wdym could you write and show it to me please

[woven anvil]

What is the full path to the .zip you are trying to extract

[verbal cedar]

/Download/android*.zip -d /opt

[woven anvil]

You are using
~
Which means "My Home Directory".

It thinks you are running as root, so it is checking the root's "Home Directory" which is usually /root

[verbal cedar]

so i should try it without rooting

[woven anvil]

do you know what root does?

[verbal cedar]

a bit not much

that its only used in administrative tasks which require administrative permission

[indigo sluice]

hey, where can I find the databases that have been leaked or had data breaches? for example dueling network had data breach in 2017 how can I find that data?

[frosty geode]

Can anyone give me a AlienDot ios-rat tutorial plz I can't find any on the internet

[verbal cedar]

thorugh telegram and X (twitter)

[indigo sluice]

can you guide me through it? is there a specific telegram channel? and the main thing I am looking for is to find the owner of a specific email how is that possible?

[shell sinew]

no, read the #📜・rules

and stop spamming channels

[frosty geode]

plz dont get angy at meee i just wanted to test something sorry 🥺

[verbal cedar]

even i dont know thsese channels but what u can do is reach google customer support they will help you out woth the mail owner they wont probably tell u who it is but they might reach them on your behalf depending on the issue

but the teletgram channnels can be found at discord or X or even whatsapp but you nees to really dig into it you can also try 4chan

[indigo sluice]

thank you very much

[spiral notch]

that’s the worst place to search for those

they’ll be fed honeypots xd

[spiral notch]

if you’re trying to find them illegally, don’t

If you’re trying to find ur own breached credentials

Go to haveibeenpwned

[uneven sand]

yo chat

i had like an email thats old asf

and the phone i had it on broke

and i dont remember the password to it either

and google support is basically useless

can anybody help me? i had a lot of important stuff on there

and a lot of childhood memories

[spiral notch]

contact support

unfortunately we can’t do anything, as it’s past legal norms as well

[cedar gull]

What's is the best linux for (Gaming) i need help to choose idk what to go with atm

[spiral notch]

there’s no best Linux for gaming

it all depends on what and how you set up

I’d go arch, but I suggest arch for everything. No bloat, nothing that will slow down processes in the background, super lightweight distort

Distro *

[lament obsidian]

Its for hella advanced ppl tho

im using Parrot OS in general because i cant go on the kali linux site

😭

[spiral notch]

No it’s not

lol

It’s easy af

Don’t believe what others say till you try it yourself

[lament obsidian]

doesnt it come empty with no tools tho?

[spiral notch]

Yes?

That’s the point of it being lightweight

No spyware no bloatware

[lament obsidian]

yh but inexperienced ppl wont know the best tools and stuff

to download

[spiral notch]

Also he asked abt a good os for gaming btw

re read the msg

[lament obsidian]

yh im just talking about it for everything

gaming but also cyber security

[spiral notch]

it’s amazing for cybersec too

I daily drive it

as my main environment for coding and penetrating

unless I code things like malware which is directed for windows often

and/or scripts for windows specifically

it’s also amazing to set up

it’s beautiful af

[lament obsidian]

daymm

when you first get it tho its fully black tho right?

[spiral notch]

No

That’s wm dependent

Not distro dependent

[lament obsidian]

well im knew to Cyber Security you think i should switch from parrot OS to arch rn?

[spiral notch]

You should deffo try the different oses

Switch to arch if you want pretty much the most customization

No spyware

No bloatware

No sketchy tools reinstalled

reinstalled

pre*

And good support

[lament obsidian]

ok thank you 🙂

[bleak condor]

hey how would i be able to make a bug for listening?

[neon raven]

👀 what bro..

[bleak condor]

im interested in how electronics work and if im able to make one for my appartment incase of breakins

[woven anvil]

CachyOS is a good choice for Arch(good recommendation that will give sane defaults)

[bronze kraken]

could anyone here recommend some resource to learn computer architecture thnx

[trim latch]

Look at #💕・free-resources maybe you find some course

[bronze kraken]

Thanks greatly appreciated :)

[rotund pelican]

I got a question for a hacker that can help me

[halcyon flame]

Just ask the question here @rotund pelican - if you can't ask the question because it is unethical, or breaks #📜・rules, then this is not the place for you.

[rotund pelican]

I can say the question

I got proof

[halcyon flame]

Don't ask to ask, just ask

If it is against the rules, or unethical though...

https://tenor.com/view/thor-thor-infinity-war-gif-25139201

[rotund pelican]

Nah my brother roblox acc go hacked and I was try to see if one of yall can help me get it back

That all

[chilly merlin]

no

[halcyon flame]

fml

No, speak to support

We can't help you

[rotund pelican]

Ok

[chilly merlin]

https://tenor.com/view/owlsec-bombata-kurojna-jovkomajmuno-gif-16119016965218867202

[light mica]

check his email when his password changes roblox sends a if it wasnt you click here to reset

[rotund pelican]

Thx

[trim latch]

Lol🤣 empad failed

[light mica]

epic embed fail

[halcyon flame]

You didn't read rules did you

Or did you just not understand them

[rotund pelican]

Just did understand that all

[halcyon flame]

So you asked anyway

Is hacking someones account an ethical action?

Answer me that

[rotund pelican]

Nah

[halcyon flame]

Then wtf did you ask your question

Anyway.. ask support

[trim latch]

Well actually

[halcyon flame]

We can't help, and anyone offering to help will just be out to scam you

[rotund pelican]

???

[trim latch]

A Roblox account is not important you can create 10 more

[rotund pelican]

He spent over 200 hundred dollars on this acc

That why I asked

[halcyon flame]

You expect me to believe you had to come here because you needed to be told that you needed to be told to reach out to support to recover an account?

So what

Just drop the subject

This is an ethical server.

[rotund pelican]

I been trying

They keep say I need a credit card that I don't even have no more

[halcyon flame]

Well, speak to your bank

[rotund pelican]

Igh

Thx

[halcyon flame]

Did you really not think of these things before coming here?

I just.. urgh

[rotund pelican]

Nah it been 5 years

[halcyon flame]

lol

You will not get it back

Accept it and move on

[rotund pelican]

Ok