👥・help-me

[rotund pelican]

So Hostile for no reason

But igh

[halcyon flame]

https://tenor.com/view/sealyx-naked-gun-the-naked-gun-facepalm-facepalm-meme-gif-11743768702765397589

We get so many people asking exactly this same kind of thing so often

It feels like people just don't think, or expect that "hackers" can just break in to accounts like in the films

[rotund pelican]

I'm just saying

[halcyon flame]

It's just not the case, and it's frustrating that people just don't think sometimes..

[rotund pelican]

I mean I think but I was just trying to recover his acc and Surprise him with it

That it that all

[raven lodge]

https://tenor.com/view/haxxor-haxor-hack-hacker-mad-is-cute-gif-20709615

damn. Sniped.

[rotund pelican]

Trust if I had the hacking skill I would do it my self not even join this group

[halcyon flame]

You can't just hack accounts like that though.

As I said, drop the subject please

[rotund pelican]

??

[raven lodge]

Trust me, if you had those skills, you’d also have the brain power and intellect to know that its just not worth your time and energy. Its not just a one click solution. Heck ~ i dont even think mitnick could fkn do it 😭

[halcyon flame]

Accounts being "hacked" are 99% of the time people falling for social engineering attacks and sharing their credentials, running dodgy things they download from random websites, or sharing credentials with "friends" or family that then nick the account.

There are rare cases of account takeover vulnerabilities in services, but that definitely is the 1%

There is no tipitytapity "roblox_hack_account <id>" shiz out there

So, sorry that I came across hostile

This kind of request is simply a daily occurance here

and it does get a bit old

Especially when you point to rules, and state it's an ethical server, and they go ahead and ask anyway

[little canyon]

can someone help me with a pretty basic thing about linux terminal? I can't send pics here but I can explain

[halcyon flame]

Don't ask to ask, just ask 😉 What's up?

[raven lodge]

Try and embed with Img.bb, gives us a better standpoint

Or imgur

[little canyon]

so I used grep command on a file but it doesn't do anything, and the typing thing (idk how to name it) is like not showing which folder I'm at, it's just there

[little canyon]

oh ok ty

[raven lodge]

What command did you use??

[little canyon]

grep

[halcyon flame]

What else though

[raven lodge]

Just grep?

[little canyon]

access.log (from tryhackme)

[halcyon flame]

Any other arguments?

[raven lodge]

Ahh the old access.log grep

[little canyon]

it's hard to explain if I don't show the pic, one sec

[halcyon flame]

Just type the command here

[little canyon]

grep ''access.log''

it didn't do anything

[raven lodge]

Linux Fundamentals 2 if im not wrong

Yeahhh

[halcyon flame]

Right

You haven't told grep where to look

It';s waiting for input at that point

[little canyon]

no no

[halcyon flame]

grep findthisstring access.log, or grep findthisstring < access.log, or cat access.log | grep findthisstring

[little canyon]

yea I get that part but this is the problem hold on

[halcyon flame]

Was grep "access.log" the full command you typed?

[little canyon]

yea but wait a sec

[halcyon flame]

...ok

[little canyon]

can I send the imgur link here?

[raven lodge]

Yuh

[little canyon]

https://imgur.com/a/1ACtwL0

so I tried to go back using cd etc but it doesnt

[halcyon flame]

(base) g0blin@ITX:~$ echo Branlyn > Branlyn
(base) g0blin@ITX:~$ grep Branlyn
NOTHINGISHAPPENING^C
(base) g0blin@ITX:~$ grep Branlyn Branlyn
Branlyn

[little canyon]

I used some noob command like exit lol don't judge me

[halcyon flame]

If nothing is happening, hit CTRL+C

[little canyon]

ohh that

thank you

I just wanted to go back that was the problem

[raven lodge]

Oh

Okay :)) well good luck on grepping buddy

[little canyon]

oh it doesn't actually work

when I do that combination it just shows a C

like if I typed it

https://imgur.com/53e05pY

[halcyon flame]

Is this on a reverse shell?

If so, you'll need to restart the shell

[raven lodge]

Nah, hes on Linux Fundementals 1

Most likely an attack box

[halcyon flame]

🤷‍♂️ CTRL+C should terminate the command

Or CTRL+Z to suspend it

[raven lodge]

Can you exit the terminal? Not the box, just the terminal

[halcyon flame]

If the attack box on THM doesn't let you use key combos like CTRL+C, then that's a THM problem

[raven lodge]

thm slander will not be tolerated lol 😏

[little canyon]

No, I just remembered the guy on the video said CTRL, L cleans it

it worked that way

[halcyon flame]

I'm not slandering THM

[little canyon]

so in an actual linux terminal it would be CTR, C ?

[raven lodge]

Yes

[halcyon flame]

CTRL+L just clears the screen, like cls

It wouldn't terminate the process

[little canyon]

oh

ok I'll just reset it

[halcyon flame]

At this point I'd just close the terminal and try again 😅

[little canyon]

yeah the problem is that sometimes I type things wrong and resetting it everytime is annoying. I was looking for a faster way lol

but ty I got it

[halcyon flame]

Mac by any chance?

[rotund pelican]

Thx for the help tho

[little canyon]

windows

[halcyon flame]

Ah ok nvm then

I just recall common control combos work a little different on Macs with their keyboard layout

Good luck 🙂

[raven lodge]

Ah nvm, i was gonna say kill the grep process

But okie 🙂

Have good night

[halcyon flame]

Yeah, that's what CTRL+C should've done, but unsure how you were connected at this point

Were you SSH'd in, connected via attack box, via a reverse shell / RCE?

[raven lodge]

If im not wrongggg, i think it might an SSH logon

Yeahhh

[halcyon flame]

Weird if it didn't work on SSH then 🤷‍♂️

[little canyon]

I have no idea what is all that lol

I'm new on this

just following the tryhackme tutorials, they don't say anything about that yet

afaik

[rotund pelican]

Got a different question

[halcyon flame]

Is it an ethical question, and does it not break any of the #📜・rules ?

[raven lodge]

Okay, but please. Do get a methodology ~ understand the commands and dont just flounce along with no end goal.

Made that mistake the first time

[little canyon]

doesn't THM show me all those things? or do you mean the basic linux commands

[trim latch]

Just tell your question and you get an answer

[rotund pelican]

Nah I just not focused on getting into hacking I'm mean I want to start but I just not know where to start from

[raven lodge]

Not a methodology ~ you have to get that yourself. Once you finish these rooms, you forget them pretty quickly so type these commands/ screenshots somewhere of how you did what you did.

Only you can understand you.

[trim latch]

#👥・new-member-guide

[rotund pelican]

Thx bro

[little canyon]

what methodology should I look for exactly? linux?

[raven lodge]

Nono - a methodology is how you approach things. How you take in stuff. You gotta figure that yourself

You can look it up ofc. Gain insight. But again, you have to put it in place

[spiral notch]

for typing it out somewhere, use https://obsidian.md the best note taking app

@little canyon ^-^

[little canyon]

Thank you

[molten elbow]

.

can anyone help i think my girlfriend is cheating on how can i monitor her messages on her social media account like whatsapp for example

[south plinth]

pls read the #📜・rules

[molten elbow]

forget I even asked didnt read properly

[spiral notch]

If you have trust issues talk with her

or break up

invading her privacy is not something you should even consider

[molten elbow]

as if she would allow that spent a whole lot of time and effort on her dont wanna lose that over me being stupid

word

[spiral notch]

(as a cybersec expert who’s been in a relationship for over 2 and a half years, and been long distance for around half that time. Everyone can get paranoid and overthink, important you talk it out. I’ve never invaded my partners privacy, even as easy as itd be and as many times she’s offered to give me passwords to her accounts so I can have a peace of mind)

[spiral notch]

mhm good

[polar moth]

unsure if this will help any of you, had to get my developers to learn. Maybe this willbe helpful.

[shell sinew]

is this this new audio malware?

[lament obsidian]

Guys im learning Pre Security for tryhackme but im getting so burnt out cuz its all just content and i want to do some real practical hacking. What will you lot recommend?

[viral ridge]

I’m trying to build a virtual SOC lab so I can add it to my resume

[viral ridge]

Anyone who has a recommended guild I can follow

And also if you’re also a beginner and you’re interested in building your own virtual SOClab we can work together and build the project

[crisp star]

I don't like virtual SOC lab.

Way too unrealistic.

In my opinion, it would be much better if you get experience with DFIR stuff as a SOC analyst.

HackTheBox has sherlock series that you can do.

[viral ridge]

Need something to put on my resume

[viral ridge]

Why don’t you like virtual SOC lab?

[viral ridge]

I’ll check it out

[crisp star]

Because it's not something I consider as a skill set. Well, maybe if you want to go into engineering stuff, then it might be worth it.
But then again you can also learn how to set-up a SIEM like QRadar for free.

[woven anvil]

What about a playground for testing(same tooling)

[viral ridge]

Yeah my main aim is to know how to analyze logs detect threats and all that

[woven anvil]

could easily spin up a proxmox server, and then do a graylog vm, and some application VMs

[crisp star]

Then it would be worth just doing some Let's defend exercise.
https://letsdefend.io/

[viral ridge]

Is this free?

[crisp star]

If you want to go in-depth of an incident, which is from initial access, all the way to exfiltration then you could do Xintra couse. But that's going to cost quite a bit.

[crisp star]

Some are free.

It follow a similiar subscription model like TryHackMe and HackTheBox.

[viral ridge]

Does free certifications count while searching for entry role jobs?

I’m just curious that’s why I’m asking

[crisp star]

It depends what "requirement" the comapny has.

https://www.reddit.com/r/cybersecurity/s/uG2Eew5lb3
Would be worth reading that's the issue I've also seen when people apply for jobs.

[woven anvil]

best to get the knowledge, find the job you want, then get the certs you need for the jobs i would assume? (from someone with a job in IT, and an expired A+ cert)

[crisp star]

We are just giving people assessments and see how they peform.

The rest is having the right soft skills.

[viral ridge]

Tried working on Hack the box some days back I had issues connecting the lab to my VM

[crisp star]

lol when I had to do the assessment, I had to use splunk for the first time.

[viral ridge]

I’ll try again tonight any challenge I face I’ll come here

[viral ridge]

Ahh😂

[viral ridge]

How was the assessment?

[crisp star]

I mean I did pass it and got invited for an interview and got the job in the end.

[viral ridge]

Since it was your first time using splunk did you find it difficult or hard to use?

[crisp star]

Not at all. I just sticked with the basic and the document I found on the internet.

[faint zenith]

can someonee tell me where do i start from cause i know nothing about hacking

[spiral notch]

No

as an employer (sometimes) - certs have no value

[spiral notch]

#👥・new-member-guide

[nocturne monolith]

Hello, I'm looking for resources to learn the basics of the network up to advanced courses

[spiral notch]

Pins in #🌐・iot-and-networking , and scavenge #💕・free-resources

[nocturne monolith]

Okok ty

[jagged elm]

I need help with the graft Open Redirect

[subtle minnow]

Hi are there any people who could help me out? My laptop had been hacked and i reseted my laptop. Then like after a day the same person hacked me (i think he uses my laptop as storage.)

[sudden island]

Is there any decent free python learning websites?

[bronze marten]

Kernel level rootkit then if you keep getting hacked

[subtle minnow]

U think so? I dont think so, hes stupid he literally installed pics of everything about him. My laptop now contains also hes passwords to all hes accounts and mails

[bronze marten]

Wait what laptop do you have?

[flint cape]

does anyone know of a trusted site where i can run my phone nmr for data leaks?
recently someone managed to obtain my personal info through it

[verbal cedar]

coddy

[spiral notch]

I mean you said you reinstalled, and your laptop was still infected

[neon raven]

you tired w3school

[neon raven]

you need a database for data leaks on a website interface you can access from the device(phone)

??

[sudden island]

Nope

[sudden island]

Ty

[neon raven]

Try it

[subtle minnow]

Yeah

[subtle minnow]

HP i5

[subtle minnow]

Well, which stupid hacker downloads almost all hes info on another guys laptop, i literally logged in one of hes gmails and he has pics n vids of him and hes friends, a phone number (maybe hes), hes accounts. Almost like transfering hes laptop data to mine

Or im stupid and thats what hackers do? (Sorry im new)

And if it is kernel level rootkit. Is there anyway to stop it from happening?

Im going to reset my laptop once more and see if it happens again

[spiral notch]

not really unless they’d want to frame you..

[spiral notch]

lots but you can never really be too sure

completely safest would be to

factory reset your router, get a new storage whether ssd or hdd and rip out and get a new motherboard (that’s if speaking practically and theoretically)

[subtle minnow]

Oh okay thank you sir

Wait could it be this guy got my phonenumber? Today 17 mins before i woke up, i got called by a number (twice). I instantly called the number back. And it says that the number is not in use?.

[subtle minnow]

Is there any other way? Aint rlly got money to buy a new motherboard

[subtle minnow]

I dont think so bc the guy that hacked me is korean, and the number that called me is from my country

[sudden island]

i will ty

[spiral notch]

yeah could be, if your number was ever used or listed on ur pc

[spiral notch]

That’s completely safe? Using a different pc lol

malware development is a crazy art

can stay after factory resets and reinstalls, you could try clearing the boot sector though. Should still be pretty effective and see if it works then

[subtle minnow]

Nahh never

[subtle minnow]

Could u teach me how? Im not really good with all that

[viral ridge]

How long is the Pwnbox always down for? in HTB?

[spiral notch]

you got an MBR or GPT?

[naive olive]

The best way is just to change a harddisk or an ssd

Its not expensive and its rly effective

[trim sierra]

fixed

[crisp star]

You upload your stuff on GitHub and share the link.

[trim sierra]

thank you! yeah I realized I had to edit the pages to brach from main and root 🙏🏻

[dapper blaze]

hi i am just beginner who dosn't know shit about hacking and cyber security, could anyone suggest from where should i start

[halcyon flame]

#👥・new-member-guide #💕・free-resources

[dapper blaze]

thankyou

[pale marsh]

I let my brother use my pc for a few hours n now I have some virus called win32expiro and I can’t get rid of it I tried iso disk and scanning before windows starts and I’ve tried regular anti viruses and I can’t shake it any tips?? 😭😭

[grim cape]

Hey uh, i'm new here. just wondering how to access the voice channels etc? I've read every channel, checked every role, done the onboarding twice and can't figure how to earn/access the locked stuff.

[spiral notch]

level 1, just text for a bit

[bronze marten]

what sign is your computer showing?

like any random popups

ETC

[pale marsh]

I js wiped os 😭😭 it was popping up Win64/Expiro.DD!MTB and Win64/Expiro.EB!MTB and legit files were already infected so I took a usb n js wiped.

[rapid verge]

i am frustrated from thm rooms ,labs , ctfs all , when i try to do i can't do them and stuck . 😭 , how u deal with it when u was starting .

[subtle minnow]

Idk what that id

[subtle minnow]

Thanks bro

[spare pilot]

If you have your own machine with hypervisor capabilities, i would recommend using their open vpn files to connect

[spare pilot]

That's totally normal as you start, take some break if you have to and come back later and try to solve it again, .... If stuck again internet is your best friend google some stuff and go through some walkthrough and over time you will develop some techniques of your own. Just always keep on learning

[mystic glen]

@radiant stone i don't have proxy access nor any of the assets

Just configuring fortiSiem

[radiant stone]

Yea i mean in the configuration, you don't have proxies declaried anywhere right?

[mystic glen]

Don't even know whats the architecture just the ssd is 20 Tb ram enough everything is fine just this error comes

[mystic glen]

Nope

We didn't even have proxy setup

Server was offline came online but still same error

When trying to deploy

[radiant stone]

Ok so it's a 502 gateway error which is always fun

ok so tail the pheonix log

and reproduce the error

are the logs more verbose

[mystic glen]

Yes Error 502 been stuck in this for 1 week no progress

[radiant stone]

Because the phoenix log should tell you what it's failing to connect to

[mystic glen]

Ok will check brother thanks for the info

[radiant stone]

No worries

[mystic glen]

Have you had similar error

In past?

[radiant stone]

No but i'm vaguely familiar with forti devices

[mystic glen]

You were a soc engineer as well?

🤔

[radiant stone]

Not for Fort, We're a qradar workshop

[mystic glen]

Oo thanks lets keep in touch do help me if i need in future senior

Thanks again

[radiant stone]

I'll be around in here

Also make sure you're reading the log in real time when the error happens

Or else you might not catch it

[mystic glen]

Oo ok

[radiant stone]

Could be a device naming issue. Make sure you're using the FQDN for your CMDB device entries

[dire python]

Hi l am computer science student just learning about programming
Can you guys give roadmap on how to become a cyber security analyst

[mystic glen]

I double check it always and tried again and again more than 5 times today only

[mystic glen]

Try THM or Ciso free junior analyst courses

[dire python]

Thank you ☺️☺️

[unreal dune]

Heyy everyone ,
I am looking for a Fresher Penetration Tester (remote) .
For any openings please do consider me .

[crisp star]

Your chances are higher if you look on a dedicated job platform.

[unreal dune]

Thank you for your response but i tried at some places , didnt get any vacancy + I have not much experience finding jobs liek this

[unreal plank]

I have asked this before, and life got in the way.
I am trying to start out at Ground Zero with very early skills. Think early Commodore programing on cassette tapes early.
I am wanting to learn skills to help me get any job at this point.
If possible, what can I do and where to start? Any and all assistance is greatly appreciated.

[unreal dune]

Hey there ! Hope you are doing good
For cybersecurity start with basics like Programming skills (python) and do explore platforms like Tryhackme .

You can gain great knowledge with practical approach .

[crisp star]

Did you graduate by doing a bachlor or master in cyber security, computer science or something similiar related to IT?

[unreal dune]

I am doing my graduation in AI&DS adn this is my last year so need to get some remote internships or jobs for practical hands on

[real depot]

Heyy guys i just downloaded something and it detected a trojan in windows defender but the strange thing is other people have it too and its clean so i wanna run it trough a virtual machine but idk how and what to use since you need a buissnes email can somebody help me pls

[crisp star]

I'm not aware if AI&DS has some relations to cyber security. Maybe try and get a foothold first which is looking for AI&DS hire.

[unreal dune]

Its not too much realted but has taught me alot .
also i dont want to go for any role of my degree coz it will involve development of AI model and i want to go further in red teaming or pen testing roles .

[unreal dune]

i dont think we need business email for vmware?

[real depot]

wich one can i use ?

i only found ones where i need buissnes email or other stuff

[crisp star]

That's going to be tough. Depending on your country, you might have to compete against over +100 applicants for the same position. As soon there is one who has exerpience with pentest you are pretty much out from the hiring process.
Maybe you can increase your chance if you have pentest / red team related certificates.

[unreal dune]

No , you just need to download it from broadcom website
actually it wil redirect u from vmware to broadcom but do check before downlaoding it .
https://youtu.be/k00VSMHmSpI?si=c1ryEYF3Wy1RhvJR

[unreal dune]

I hav been doing pretty good at Tryhackme but since courses are expensive i have planned to do them after earning

[real depot]

i cant register

when i wanna set a username its says something about my email

[real depot]

you do need a buissnes email for that

[spiral notch]

You’re not finding anyone on discord

especially with barely any info you gave

[spiral notch]

You don’t need a business email

what’d you download lol

[glad wigeon]

Pleas Im trying to to work on my cyber security journey and I need assistance , I tried to work on my vitural machine environment on my VMware window using quasar rat , to attack my other device but I notice window defender automatically disabled it even though it was tuned off … I need assistance on how to set get it through …

[spiral notch]

sorry we don’t teach skids to bypass AVs using GitHub rats

[glad wigeon]

What’s the meaning of skids Are you trying to intimidate me because I asked an important question. I’m into cyber security and ive got some of my certification, I strive to be the best In what ever I do in life , I take life seriously and I’m here to learn so I can be able to acquire the right set of skills. If you don’t know how it works how can you invent or work on some personal or team project . The cyber space is all about attack and defend so what the hell are you trying to say ? You were supposed to to give me an hit and not to discourage me . I hate negative beliefs , who think anything isn’t possible .

[whole parcel]

Think pad T410 with 8ram update and SSD upgraded how do we all feel about it for learning purposes

@eager knot any feedback would be dope

Keep in mind 8g ram is the make for that model

Oh guess it's a new one @lost vapor

[spiral notch]

you’re not learning anything, chances are you’re just going to use it illegally

skids are script kiddies btw

[hollow saffron]

anyone know how to bypass otp im testing on a website and it has a very wierd system that im pretty sure its vurnable but im just not sure how to approach it anymore ive been trying for days

[spiral notch]

and what have you tried

[hollow saffron]

almost every response manipulation possible but the wierd is when u type a wrong otp and try to manipulate the responses u wont get a 200 ok code but when u type the first 2-3 letters of the otp code correct u get it and i found more wierd stuff that could lead to something

[buoyant tangle]

Hello frnds , I am new here and I am just starting my cybersecurity journey . Can you guys plz tell me that should I consider purple team path or one from red or blue team ? I am confused 🥺

[supple grail]

it depends on what you want to do and like

i guess you could see red team as sorta like the attackers and blue team as the defenders

[buoyant tangle]

I mean if there is scope in purple team . I mean do organisations hire purple team ???🤔

[supple grail]

im pretty sure they do hire purple team

because its a bit of both

[crisp star]

Unlikely. Companies to offer purple team egagment. But you will either be the one looking and logs and detection or the one attacking. In the end, both teams will submit their report what they found or what has beeen detected.

[buoyant tangle]

Oooooookkkkkkkk thank you guys 😁. I will start with Purple team and if I find it difficult I will change it in future. Thank you for clearing my doubt 😁🥸

I am first going to start with red team . And after completing it completely I will join blue team if I still wished at that time 😁

[crisp star]

You better start with either blue team or red team.

And maybe you get the chance doing an engagment

[buoyant tangle]

Yes I am going to start with red team 😁

[mental tendon]

there are brokers out there offering discounted Avios or account top-ups, but
it’s against BA’s terms to share or trade points like this
your account can be flagged or shut down with no warning

[lost vapor]

@mental prismwe don't assist with unethical activities, review our #📜・rules before asking for anything else

you can contact authorities regarding said incident and work directly and ethically with them

we don't assist with unethical questions or activity, as it is against BA's TOS and our server #📜・rules

[mental prism]

Thanks for the response but assuredly, it's not unethical. I can send you loads of evidence in your dm please.
It's very serious 🙏🏻

[lost vapor]

it is unethical due to the fact not you nor i am authorized by any government bodies to go and actively search after the person. even if he happens to be a blackmailer. best you can do is contact authorities and work ethically.

[spiral notch]

disso on a streak

[mental prism]

It's alright.
Thanks a lot for the assistance so far.

[flat pulsar]

anyone can help me on home labs? i was just wondering will ECC be very crucial for it? the goal of my home lab is to create virtualizations instance, probably 2 or 3 only

[lyric shore]

hey does anyone know how i can join voice channels in this server?

[mental tendon]

nah you don’t need ECC memory for a small home lab with 2–3 virtual machines. it’s a nice to have, not a must.

at least 16GB RAM (more = better if you’re doing heavy VM work)

CPU with virtualization support (Intel VT-x or AMD-V)

dedicated NIC if you’re doing network labs

[rapid verge]

just click on vc and join .

[lost vapor]

what operating systems exactly were you told to make? or is it up to you to decide?

[lost vapor]

also what @mental tendon said is true, no need for alot of memory
but just about enough for the tasks you want to accomplish, if these are example virtual environments i'd even go as low as 2/4 gb of ram

depending on if they are linux or windows

@lyric shorewrong reply btw sorry

[oak oracle]

hi everyone so i just started learning cybersec but i am confused now u know just watching every tutorial on yt just to get more confuse i actually come from arts background dont know much about coding can u plzz give me advice on how should i start

[lost vapor]

You should look here:) #👥・new-member-guide

[oak oracle]

ok thanks

[mellow geyser]

hey is there a way to find the name of the with the phone no. its an old contact arond 4 yrs

[halcyon flame]

Call it and ask?

Any other way would be deemed unethical, and this is an ethical server.

[valid belfry]

I can help

[flat pulsar]

of course proxmox for this thing

[flat pulsar]

damn bro, i was planning to buy that kind of thinkcentre but keep thinking is it worth because there's no ECC, cant stop getting people mentioning ECC is important

[valid belfry]

Use Optiplex

[valid belfry]

I can also help with proxmox related tnings

[flat pulsar]

any specific ones?

[valid belfry]

The Dell Optiplex towers in general are business grade

And the Optiplex micros

[flat pulsar]

you run proxies too? i was just wondering will that munch my internet that much or no?

[valid belfry]

Ecc memory is on literal servers I am fairly sure

Nah it will not, I do run it on my ip

I have charter com with 1gb plan, 80, 443 opened

This is a reverse proxy

Im happy to help as well, excited

[flat pulsar]

yeah i do know that, it's just some like HP z240 comes with ECC compatible, people recommend me to just find ECC compatibles one

[valid belfry]

I haven't had issues with my setup, running since 2023

[flat pulsar]

i will ask with you again later, still collecting budget

[flat pulsar]

alright i guess without ECC is the way to go

[valid belfry]

You in the USA ?

[flat pulsar]

nah i'm not

[valid belfry]

Ah, eBay over here is very good, not sure if they are in your country, feel free to friend me and join the homelab discord

[flat pulsar]

yeah i checked the marketplace, my country sucks at it

[valid belfry]

Which country if you don't mind

[flat pulsar]

sorry but yeah, might need to skip this part

[valid belfry]

That's definitely okay lol

[halcyon flame]

ECC not 100% required unless you're going in to big enterprise.. and even then, it depends on the system and requirements

[valid belfry]

^

[flat pulsar]

i just really want to have the real feel of building backends

and run some vuln machinese there to pentest it

[valid belfry]

I run game servers on my regular ram with the current setup

[halcyon flame]

That doesn't mean you need ecc ram though

[valid belfry]

You'd be eating money

[flat pulsar]

funny fun facts, i dont know why but in my country, used up ECC rams are a lot and cheap

[halcyon flame]

It is simply a feature of the ram that makes it more resilient to errors

[flat pulsar]

got it, thanks dude

[halcyon flame]

Errors as in preventing rare data corruption in memory in operation

[flat pulsar]

yo dude i've added you, interested on joining the homelab server

[flat pulsar]

yeah probably NAS needs more of it?

[halcyon flame]

ECC ram can actually reduce performance as well

[flat pulsar]

ohhh that's a new thing to know, thanks

[halcyon flame]

Not necessarily

RAM usage on NAS is minimal, but that depends upon how they are used

If they are used and shared between many people as a central data store, perhaps? But even then.. the failure is in RAM, not in the storage

Honestly I see ECC as a waste, unless you're again in to big enterprise where you're at such a scale that these kind of corruptions can happen at such a frequency due to scale that they impact business

But maybe I'm just talking BS.. I've never been in that position

We don't use ECC ram AFAIK for our hypervisor clusters, because the VMs are very ephemeral

[valid belfry]

Yep here's my nas usage en

Rn

[halcyon flame]

The criticality of data integrity is what drives the decision to use ECC RAM or not

[flat pulsar]

i see

[halcyon flame]

But that's data in transit, or in active use of applications

[flat pulsar]

but do you guys suggest more me using xeon or just use like whatever i have already? well if budget is not an issue

[halcyon flame]

Sure, I suppose a memory failure / corruption could theortically impact data being written to a disk

Question is.. do you need more power right now?

[flat pulsar]

nah i'm good with it, i dont mind anyway, i dont use NAS

[flat pulsar]

i just cant stop thinking about future proofing my pc, i just want it to last as long as it could

[halcyon flame]

The most likely failure points of PCs are storage, and GPU

Hard Disks, physical damage can happen.. SSDs.. they have a limited life span on write operations, and will fail eventually

GPU... equally they have a lifespan depending upon usage, and even with general usage, gaming etc.. no mining.. they can and do fail sometimes

[flat pulsar]

got it

i guess its better for me just start first and grow the home lab

[flat pulsar]

thanks btw

[halcyon flame]

Aye, I'd recommend now growing until you have a need to

It's tempting

but you can achieve a lot with a humble setup

[halcyon flame]

No worries 🙂

[flat pulsar]

the fact that people on homelab servers got more racks than wadrobes

[halcyon flame]

It has the same addictive properties as photography

Just one more lens, I could use this

[flat pulsar]

yeah hell for me, cause i got that addiction on photography too

cooked financial

[signal cypress]

Guys please help--
Best tool and techniques for recon in bug hunting

[mental tendon]

subfinder, amass, httpx, nuclei, ffuf, waybackurls, gau. for recon flow: map subdomains → probe alive hosts → scan with nuclei → JS analysis + dir busting.

[valid belfry]

Look on YouTube

[zenith gulch]

Hi guys, far from being any sort of expert in it related business. Got a question, lets say you got scammed, is there a way to retrieve data from (Whatsapp/other social media)business accounts telephone numbers?

[flat pulsar]

as far as i know, retrieving data is like copying a file from someone, even so one copy of it being deleted, the other copy will work just fine

[scenic lantern]

If you’re concerned about your own data, focus on recovery options provided by the platform. If you’re trying to retrieve data from someone else’s account, it's best to go through legal channels and platform support, rather than attempting unauthorized access.

[flat fox]

Hi everyone.
So I'm a complete beginner who just finished learning networking at a pretty decent level and wanted to get started with Linux.
For that, I tried the Bandit Overthewire games.
However, while moving from Level 1-2 in CMD or Powershell, it always says Permission Denied, even after inputting the exact password (multiple tries) that I had obtained from the README file in level 1.
Require help from anyone who has checked it out recently or someone who can guide me on why this is happening...

[junior phoenix]

Hey everyone I opened my PC and I found a problem it in startup repair for windows 10 I tried a lot to fix it and I watch a lot of YouTube videos but it's still stuck
Can anyone help plz

[gaunt dagger]

Yes why

[gaunt dagger]

Is the number still active that’s the first question

[tame mesa]

is the new member guide (after completing the whole guide) enough to get all the necessary information if i want to land cybersecurity job in IT?

[zenith gulch]

seems so, what are best options? thank you all for your answers/insights

[supple grail]

Contact authorities

[supple grail]

Do you mean the OS fundamentals and network stuff?

I doubt that it will be enough, if you really really want a job you might want to try to get a cert, I'm not really educated when it comes to certifications tho

[reef radish]

Guys how do I terminate a virus or a demon in my pc?

[supple grail]

You can try installing a reliable antivirus and check if that gets the job done, if it doesn't I might need some more info on which type of malware it is to help

[dim stirrup]

Yh this should work

[halcyon flame]

No @fiery trellis, this is an ethical server. Anyone stating that they can help you in DMs are just out to scam you.

Read #📜・rules

[shell sinew]

@valid hull lets talk here

[valid hull]

yeah bro

as i said , i know only those

[shell sinew]

https://youtube.com/playlist?list=PLyJqGMYm0vnMHLPbmT1-fknzTzR7auBEb&si=g_uzPkYBL3gTph3n

check this

[valid hull]

networking i saw CCNA playlist of david bombal

[valid hull]

Wont this be advanced topic for my knowledge

[shell sinew]

naaah

you will learn doing it

understand why does something work and how

you can experiment with different parameters etc

the only thing that would be „advanced” is writing your own IDS (Intrusion Detection System) rules

but you can learn it in a day if you sit on it a lil

[valid hull]

yeah bro

Bro check DM

[shell sinew]

cant talk that much, im at work 😭

[valid hull]

Ok got . i have a doubt

i will check out and practice th playlist u gave

But linux commands i dont know the network commands in linux . i know from ls to grep, awk . basics

[royal scarab]

im currently on summer vacation and i can take one cybersecurity course, knowing that i am a complete beginner and i need something strong to support my university application, im ready to do self study for any information i should know before a course but i need a strong course. what do you recommend

[lost vapor]

#👥・new-member-guide

[valid hull]

Bro we use kali or ubuntu

[halcyon flame]

Who's "we"?

I've used Windows most of my professional life 😛

Besides, the ELK stack is not an OS 😉

But it is 100% awesome

Even the free community edition includes a set of their SIEM features now

https://www.elastic.co/subscriptions

There's their well documented ECK stack too (Elastic Cloud on Kubernetes) https://www.elastic.co/elastic-cloud-kubernetes

I'll stop geeking out about Elastic now.. but it is sooooo good, and has come along so far in recent years

[shell sinew]

I used kali purple for SIEM, OPNsense firewall, suricata IDPS, kali for attacker machine, windows 10 + 8 + xp as victim machines

[halcyon flame]

Poor Windows, always getting picked on

🤣

[valid hull]

How to download kali purple . I think I have normal kali

[shell sinew]

you dont need it, you can do it on normal too

remember this:
linux distros are like collection of tools, if one distro doesnt have preinstalled* tools of 2nd distro you can just install them

[valid hull]

I have not yet started that video from tmrw I am starting .

[shell sinew]

so don't think about distro that much

[valid hull]

Haaa . I asked that because . I searched in chatgpt . It said no it's different

[valid hull]

Haa

[shell sinew]

OFC!!! we gotta destroy windows

[halcyon flame]

Boooo nooo, don't be mean

😄

[valid hull]

Bro . Is that playlist starts from basic. And I think that playlist is job of soc

[valid hull]

Bro that was I but auto crt issue **

[halcyon flame]

Ok, I was just trying to be funny.

[valid hull]

Have u tried this bro

https://youtube.com/playlist?list=PLyJqGMYm0vnMHLPbmT1-fknzTzR7auBEb&si=g_uzPkYBL3gTph3n

[halcyon flame]

I've used the ELK stack for ages, and have had some experience with their SIEM features, yes

We use it at work, and I use it personally for a few things also

SumoLogic was very nice in a previous position, and they've changed their pricing to be based on purely compute, instead of ingest as it used to be

They also now offer SIEM functionality too

..but I've not had a chance to try SumoLogic's SIEM offering yet

Their query language was very nice to work with

[valid hull]

U gave more knowledge

[shell sinew]

@valid hull
check this:
https://gitlab.com/kalilinux/kali-purple/documentation/-/wikis/home

[valid hull]

But I don't know this

Can I install this in vm ware pro

[halcyon flame]

🤷‍♂️ I like to share, and now you know that SumoLogic exists now too

No, it is a SaaS product

There probably is an on site package, but for big bucks

https://www.sumologic.com/

[valid hull]

Haaa

[shell sinew]

@halcyon flame check the link I gave, should be more than enough for him :PP

[halcyon flame]

Yeaaah

[halcyon flame]

I'll stop on the subject now, if all I get is "haaa" for sharing lol

[valid hull]

Bro in that there is 3 iso . Shall I install kali purple

[shell sinew]

here you have FULL guide

just follow the steps and understand what and why is smth used

[valid hull]

Yeah bro

[shell sinew]

wait, @halcyon flame shouldny a DETECT be before PROTECT? like in NIST?

or am I stupid haha

[halcyon flame]

Oh hahah

Hang on yeah, they're backwards surely?

Ah well, each to their own??

lol

[shell sinew]

oh nvm, im stupid...
had to search it up haha

[halcyon flame]

You had me doubting

I should've Googled too to make sure, so as to not look stupid

🤣

[shell sinew]

we all stupid haha

[halcyon flame]

YAY

[valid hull]

@halcyon flame @shell sinew thank you . I will check out the info u guys gave and install the kali in vm and I will ping u guys if any doubts occurs

[shell sinew]

one last thing

UNDERSTAND what youre doing

search things online

read

[valid hull]

Yas bro sure

[outer pendant]

I have the hashes (capture 01 - cap) from airmon-ng can anyone help to get the pass frm it ROCKYOU is not working is there any other method?

[mental tendon]

combine rockyou with rules:
hashcat -a 0 -m 2500 capture.hccapx rockyou.txt -r rules/best64.rule

[outer pendant]

Ok let me check

[rotund spruce]

Yo i have a question

What code do hackers use

I heard it was C++ but idkn

[outer pendant]

Knowing bash or Python is much better

[rotund spruce]

Alright thanks

Plus you know something like pegasus

How is that undetectable and can breach your device with like a text

It dosnt make any sense to me how that works

[dusky acorn]

hello guys , I have been looking for a laptop for the last month that would be adequate for my future modules and I asked for help whether is this laptop good or not for them , turned out it was good but not fabricated anymore so I moved on and looked for another 5 laptops and turned out that all of them aren't available , so please can someone help me find a good laptop according to my modules and knows that it's available, I am an AI student

[outer pendant]

Discovery is the key to yeey brother!!

[outer pendant]

Where r u frm and what is u r mainly lookn for

[dusky acorn]

is this the right channel to ask for?

[outer pendant]

I think so i m not sure

[rotund spruce]

It is a help me channel so ig

[dusky acorn]

I am for morocco but I am looking to buy it from france because I got a brother there , turned out if non EU are buying , they don't pay taxes , and here are my modules if that what you mean but looking for :Semester 5 (S5):

Signal Processing
Mechatronics
Human-Machine Interface: Java
Networks
Introduction to Cybersecurity
Semester 6 (S6):
Parallel Computing
Embedded Systems
Image Processing
Advanced Algorithms
Operations Research

Semester 7 (S7):
Machine Learning
Computer Vision
R Programming and Data Analysis
Project Management
Pattern Recognition
Graph Theory

Semester 8 (S8):
Deep Learning
Unsupervised Machine Learning
Digital Entrepreneurship
XML Technologies and NoSQL Databases
Natural Language Processing (NLP)
Speech Synthesis

[halcyon flame]

We are not a server for avoiding taxes.

lol

Anyway

Sound like fun modules

[dusky acorn]

so ur here to help or to troll?

[halcyon flame]

Will your school have GPU resources available to use, or are you expected to have those resources available by yourself?

(just looking at the later semester, although likely wouldn't need anything THAT powerful tbh)

I'd assume the campus would have some resources available for you to pass your workloads to?

[dusky acorn]

they have the resources , but I live at the campus and it's a 15 min walk

I should for each time I want to work , to go there not knowing if there is a professor because without one , you are not allowed to work there

that's why I am looking for a laptop

[halcyon flame]

Would've thought they'd provide remote access to resources when required.. seems a little unreasonable of them to expect everyone to come with a laptop with a half decent GPU. Have they told you any kind of range of specs you will need?

[dusky acorn]

for some projects they did speech recognition , cars registration numbers recognition , and speaker recognition

no they didn't , and professor's are unreachable

[halcyon flame]

That can be done with something like a RaspberryPi to be honest

What is your budget?

[dusky acorn]

around a 1000 euros

[halcyon flame]

Well.. personally I love my HP Envy x360. Only an i5, no dedicated GPU, but it's solidly constructed, excellent battery life, and if you're only going to be doing those kind of machine learning tasks, even without an integrated GPU it'd have enough power to do image and speech recognition I believe

Really weird they don't tell you what you would need ahead of starting the course 😦

[dusky acorn]

yeah man , our establishement is rigged , the principle was just a teacher and volunteered to be one while the previous one went , and from then we are just down

[summer rivet]

Can anyone help me with a memory card for my nintendo switch I had took the memory card out and it got cracked at the end of it And I don't want to format the memory card because then I will lose my screenshot And videos.
On it , does anyone have any way for me To get them all Off of it without formatting it and i've already tried Putting it into the computer and it tells me to format it as well.

[halcyon flame]

So when you put it back in the switch, I assume it doesn't work, or does it?

? @summer rivet

[summer rivet]

No, it works, it just tells me to format it.

@halcyon flame

[still lintel]

Anyone else unable to log into tryhackme? It might just be me {skill issue}. I haven't used the site in a while now, but if I do forgot password it doesn't send me an email

[halcyon flame]

It tells you to format it when you plug it in to the switch as well?

Thought you meant it told you to format it when you put it into your computer, mb

Which one is it 😅

I'd suggest reaching out to their support team, I don't think we can really help, but yes I can login. @still lintel

[summer rivet]

it's both 😭

[halcyon flame]

Damn 😦

You could try to do data recovery on it

But there's no guarantee with that

@summer rivet simple guide from GPT here.. https://chatgpt.com/share/68630767-2c58-800c-8176-95cc0ad6fdaa

That was with Windows.. but similar process with Linux, just ask it for the same for Linux

[summer rivet]

I sadly only have a Chromebook.

[halcyon flame]

Depending upon the chromebook, you may be able to use their linux release, or other data recovery options.

[summer rivet]

It's the Chromebook from 2020. They just stop doing the security updates. But I have put it in developer mode and I can use lunix.

[halcyon flame]

Sorry, it's late here, and I'm not sure I have the energy to guide you through this, and there is not even any guarantee you'd retrieve everything. I'd recommend showing a photo here as to how you damaged it, it may be a total write-off, or maybe someone else can help you.

[summer rivet]

I can't send pictures but I'll lyk if I fix it

[halcyon flame]

Upload a photo to link imgr or something

You can then paste the link

[valid hull]

@halcyon flame bro I have dm u . Not able to do

[trim latch]

Can I get a cybersecurity job without having a degree ?

[south plinth]

depends on what kind of job you are looking for in cybersecurity

[lost vapor]

yes, through projects and overall good resume showcase/connections

a degree is just another key of many

[crisp star]

Sure. But you better hope that the ATS of the hiring company doesn't filter you out just because you don't have something like a Bachelor degree

[polar pond]

Any good recommendations for learning how to maintain databases with Linux? Im not too good with them and I am looking into jobs but they all want at least some knowledge

[woven anvil]

For companies that don't filter employment through HR/agencies first, sure

[dense glade]

Title: Seeking Expert Assistance with Web Application Penetration Testing

Message:

Hello everyone,

I am currently working on a web application penetration testing challenge my first time, and could use some expert advice. I have identified that the application does not record cookies or sessions, and I am trying to bypass the authentication for the /profile endpoint to retrieve a flag. For an

Details:

Application URL: 68.183.205.254:33048
Endpoint: /profile
Login Endpoint: /login
Issue: The application transmits passwords over cleartext HTTP, making them vulnerable to interception.
What I've Tried:

Intercepted and modified requests using Burp Suite.
Used Burp Intruder to brute-force common username and password combinations.
Tried SQL injection payloads in the password field.
Attempted parameter tampering with various values.
Request for Assistance:
I am looking for additional strategies or insights from experienced penetration testers. Specifically, I would appreciate advice on:

Effective payloads and techniques for bypassing authentication when passwords are transmitted over cleartext HTTP.
Any advanced techniques or tools that might help in this scenario.
Possible locations of the flag, Where should i be looking?
Any guidance or shared experiences would be greatly appreciated. Thank you in advance for your help!

Heres the challenge question

AI Access Control

You're a curious user who just signed up on "NeoIntel", a sleek AI tech company platform. Everything looks secure—modern design, SSL, good headers, sanitized inputs. But can you sneak into the admin's profile and discover the hidden flag?

[valid hull]

@shell sinew THe lab dection video u gave i saw the first video . i DOwnloaded cent os iso . But he installed the SIEM 2 But the resouce it didnt get and understand

[placid gust]

Hey does anyone know how I can get a US SIM I can use to one WhatsApp ?

[heady zephyr]

https://receive-sms.io

[lost vapor]

Hey, we do not allow any unethical/illegal activities discussed in our server, please refer to our #📜・rules

[lost vapor]

Just use your local sim, why do you need a US one?

[wintry frost]

hello everyone
i would need advice on a graphics card
i wanna build a gaming pc, but idk if i wanna go for a amd Radeon RX 9070 or an Nvidia GeForce RTX 5070
anyone can help?

[lost vapor]

Go for nvidia

[wintry frost]

ouch

why so?

[placid gust]

Because it's for an illegal purpose

[lost vapor]

Familiar, supported quite alot
Why did you wanna go with radeon initially?

[wintry frost]

to pay less really

[lost vapor]

Oh ok, we don't help with those as mentioned above #📜・rules

[wintry frost]

so geforce is better?

[lost vapor]

I mean makes sense, grforce is better but if you want to go with something else you always can, just comparring preformances based on what i've seen from nvidia

[wintry frost]

what about between the radeon and a rtx 5060?

[lost vapor]

In terms of actual comparison nvidia has alot more implemented features

Not needed all the time but it is better than the radeon in terms of preforming

[heady zephyr]

ok but since it's justice I don't see what's illegal in it, those ones should be punished if not by law, it's by me then

[lost vapor]

It is unethical and we cannot assist with that unfortunately, whatever you do is your decision but we cannot actively assist that nor do we generally do hirings

[heady zephyr]

understood

[lament obsidian]

Can someone explain to me what DNS is because im doing the pre security tryhackme course and i simply do not underestand it.

[lost vapor]

dns is simply a domain name system, it basically translates ip addresses to domain names and can do the opposite as well at rare times.

[lament obsidian]

what about MX and TXT records?

[lost vapor]

for example, when you access google.com
you're actually accessing 142.250.75.110
but a dns translates it so that the domain name will point to that address

[lost vapor]

mx records are related to smtp services

mx records are basically mail addresses that are registered on the same domain

for example
[e-mail]

and txt's are basically notes

text form that is humanly readable

[lament obsidian]

Ok thank you is DNS important for pentesting or ethical hacking?

[lost vapor]

oh get a correction btw regarding TXT
turns out it's also used for security measures
aka blacklisting

[lament obsidian]

Thank you very much Mr.Dissonance I really appreciate it 🙂

[halcyon flame]

Security measures, authentication (e.g. validating ownership of the domain), DMARC, SPF, DKIM, various other bits and bobs, but blacklisting? Curious about that point

Not contradicting, just adding 🙂

[tulip pollen]

@frail herald

Any further doubts which can help will be cleared here!

[fair turret]

So my buddy got his phone stolen, unfortunately for him he didnt have his Gmail accounts logged in on any other device and he has 2 factors authentication on, but the pin gets sent to his phone number... which he can't access 🤣
He called his ISP and got his details to a new number but the security pin is not being sent to his new number. Is there anything else we can try?

Ik this is an ethical server, and all actions taken are with the owners (him) consent

[spiral notch]

yes

especially network entering

pentesting *

[spiral notch]

nvidia

listen to disso

it’s more compatible, more feature rich

better performing

and so on

even if Radeon sometimes releases gpus which are more efficient, they’re not optimised at all

[spiral notch]

nope, not rly

[runic knot]

Does anyone have any advice as to getting into a career in cyber/IT. I’m in school and have been applying for months but haven’t gotten any responses. Is there any positions I should be looking for or anything I should be doing?

[gaunt dagger]

Hacking, cybersecurity, networking, AI

[shell sinew]

internships
doing cyber labs like portswigger, htb, thm etc.
getting certified (infosec is a good start, then some practical ones, then job related like CTPS for network pentesting or CWEE for web pentesting etc.)

almost forgot, try CTFs competitions (ctftime.org -> upcoming)

[sharp venture]

can someone help me get kali on my phone bc its bugging

Just Dm me if you can help

[halcyon flame]

https://www.kali.org/docs/nethunter/installing-nethunter/

"it's bugging" doesn't provide much to help anyone help you

How is it bugging

[spiral notch]

resume. Focus on making it stand out

[runic knot]

How should I do that. I have done some homework projects should I put those in?

[spiral notch]

I’m taking a kid as an intern in an instant if I see mad potential, all really possible to display thru the resume

[spiral notch]

make projects that actually solve an issue

Something that brings a change

Something that not many people have thought of, and nobody has ever pulled off

[runic knot]

Any ideas on where to start or how to find a start lol ?

[spiral notch]

spend a normal day of your life doing normal things but being more careful

“oh man, I wish there was this one quality of life tool that would make my life easier while doing this task”

“for some reason, there is no tool that does that task, although it would be SUPER helpful, so why not be the first one to make one?”

[runic knot]

Ok sounds good. Thank you

[runic knot]

Thank you

[sharp venture]

It gives me a "404 error" and says "404 Not Found" when I get to the https part

[sharp venture]

Nvm fixed it thanks for the help though

[sacred nacelle]

Hey guys this may sounds kinda dumb but I’m doing a cloud security project and want to post it when it’s complete it’s pretty basic I’m pretty sure but where do I post it and how do I link it to my resume without letting them log into my aws acc I’m documenting everything I do

[haughty haven]

Hello people! I just want to know how to possibly recover I banned account after it was stolen by someone because my friend account was stolen and by time he got it back it's now banned doess anyone here have advice on recovering it? If u do it's much appreciated

[lost vapor]

by making a report to the service that you're using.
if they don't want to restore the account, then i'm afraid that nothing could be done.
a friendly reminder! do not take recovery offerings that cost money from anyone!

[haughty haven]

Thank you sir

[mental tendon]

just document everything well screenshots, diagrams, configs (without creds), and upload it to GitHub or make a small portfolio site. then just link that in your resume. no one needs access to your AWS, they just wanna see how you think and build stuff.

[olive iris]

just asking does anyone have a link to a telegram bot? I can elaborate why in dm but just ask if you need to know before giving bot

[spiral notch]

to what telegram bot?

[tribal karma]

Can anyone tell me how google dorking is used in cybersecurity, and where I can practice it ethically ?

[plain snow]

Is there a tool that can check multiple account from an api account generator

And send the working ones to telegram?

[mental tendon]

google dorking is used to find sensitive or exposed info on websites using specific search queries like finding login pages config files or even open cameras it's often used in recon to gather intel before launching tests

try it on your own websites or use platforms like tryhackme or hackthebox that have labs focused on recon and osint

[lost vapor]

You can practice directly at https://google.com/

[tribal karma]

Thx

[tribal karma]

Thx

[wicked pike]

My responder picks up an error when using hashcat, "token encoding error". not sure as to why

[lost vapor]

what command are you trying to pass down?

and what's the hash you're trying to encode

or token

in that case

[fickle dawn]

do you have an info about google dork?

[verbal cedar]

what do u wanna know

[vague tusk]

I want to ask, are the HTB Penetration Testing Path, PJPT, and eJPT gives me the same results?

[pale galleon]

Hell no

From what I've personally heard, HTB Penetration testing path will give you the most you can take from all of those

[polar spindle]

Which tool can get info on social accounts on a number

[radiant stone]

Unfortunately we cannot provide recommendations for tracing. You can find OSINT tools on the web.

[dusk flint]

write your own cuh

would be good for you

[pale cipher]

Hello everyone...
I’m currently a cybersecurity major in high school and I’m interested in pursuing a degree that would lead to a government job in the future. Could anyone please suggest how I should approach this path? Which college programs or degrees are widely recognized and valued by government agencies? Thank you!

[lost vapor]

hey:)
recommend checking these
#👥・new-member-guide
#📜・certs-and-career

[unique urchin]

Yo guys so my pc was on for the past 5 hours, I was sleeping and when I went to check on it, cmd prompt flashed for a second. Idk how many times it did flash b4 coz I was sleeping but I instantly turned off my pc and everything. Am I cooked? And how do I counter this if I'm cooked💔

[raven plover]

yo, anyone here familiar with paypal integration? i wanna know if anybody figured out how to setup the paypal react client sdk, the popup works but the create order and capture order methods seem to be depricated

[jaunty sand]

Hi everyone! I'm currently in Year 12 and planning to major in Cybersecurity in college. I'm interested in doing some advanced learning, and I wanted to ask if should I start by learning defensive techniques before offensive ones? I only have basic knowledge of Java and Python, so should I deepen my understanding of Python first before starting with the basics in #👥・new-member-guide ?

[pale galleon]

You can start learning offensive/defensive security independently, but they are chained. When you learn how to attack - you'll also learn how to defend vice versa

About the python part - if you can automate very basic tasks using python, it's enough to proceed

[slow tulip]

Hey guys for advance web exploitation or just in general do u need to learn laravel php

[lost vapor]

it can help advance your skill, but generally it's recommended to learn pure php

[junior lantern]

Can someone tell me how I can hack my school WiFi ?
Basically I just want to see it password
Using python

[lost vapor]

hey, we don't assist with any illegal or unethical activities
please read our #📜・rules

[lost vapor]

hey, sorry
we don't teach or assist with any unethical activities
please make sure to read our #📜・rules

[gleaming grotto]

Copy

[lost vapor]

?

[lunar gale]

Need help starting up new

[lost vapor]

#👥・new-member-guide oh here you go:)

[lunar gale]

Okay 👌

[gleaming grotto]

Meaning I understand, I’ll have to figure something else out. But I appreciate you hearing me out

[mental tendon]

could be from a scheduled task, update, background script, or in rare cases malware.

[mental tendon]

createorder and captureorder are not deprecated they need to be defined as props inside paypalbuttons component from react paypal sdk use createorder to set up the transaction and onapprove to capture the payment this is the standard method now with the latest sdk

[mossy echo]

is searching in e waste to practice hardware hacking a good idea

[gusty hull]

Hi i am new

[lost vapor]

welcome!
feel free to chat here #💬・old-gen-chat
if you need a place to start, head here #👥・new-member-guide

[unique urchin]

I did download 2 pirated games

Sooo yeah

[carmine sedge]

Can someone say how i can download ghost esp 32 and put on all illegal things

[radiant stone]

We don't assist with illegal acts in this server

[raven plover]

Do you have any updated documentation or source code so i can understand how it works?

[hybrid mural]

Hey
I'm a student of cyber security and want to earn something from cyber security, I know basics of networking, kali linux,, but I want to do something which is legal and I can earn from that

Can you guys help me out?

[restive talon]

I am a fresh student of cyber security and I am in my networking, I want to go into red team and I need a mentor that will be guiding please any available?

[swift glade]

Hello

[swift glade]

API 404 error any help?

[pale galleon]

elaborate

[pale galleon]

In this channel we answer questions voluntarily, sort of a small mentorship

In case you'll be facing problems with finding a mentor - just imagine everybody in this channel is your mentor and ask whatever you want, we'll answer everything we can

[carmine sedge]

Guys

I put marauder on CYD

Didnt work

Changed it to bruce

And now the shark is green and the screen is white

Basically the colors are green and white

I tried changing them but didnt work

[limpid wharf]

Hello, im a army veteran and i believe my wife is cheating. Can someone help?

[pale galleon]

#📜・rules, sorry

[slow tulip]

There is a channel on YouTube call udy u shall contact him he can really help u

[charred vigil]

that's not really ethical if you wanna get in to your wife's private things

[slow tulip]

Yea

[charred vigil]

maybe marriage counselling would be better then do illegal things that can get you in to trouble and if your wife finds out you found a way to get in to her stuff. and dint cheat she will never trust you again

[prime prawn]

That's some good advice

[charred vigil]

just normal logic in my eyes

[prime prawn]

Marriage counseling is better that trying to embarrass her in un ethic manner

[mental tendon]

react‑paypal‑js docs show exactly how to wrap your app with PayPalScriptProvider and use <PayPalButtons> with createOrder and onApprove props

[mental tendon]

do a full system scan with malwarebytes or windows defender asap and check task scheduler for anything suspicious

[swift glade]

Yes are you still there?

[swift glade]

I’m using Replit to run trading bot but am having a hard time getting app to connect to api ..I can add you as a developer though email i tried everything chat gpt and gork sent me im lost

[tough meteor]

Hey im stuck at hackmyvm fuzz machine practical where I have exploited the machines and also found suid binaries which I found something like /usr/bin/sudo
/bin/bbsuid

[south trout]

Hi guys, I need help with installing github file after extraction, how does one install them ?

[mental tendon]

check your api key and make sure it is in the replit secrets tab use the correct endpoint and method from the api docs if it still fails the api might be blocking replit ip addresses in that case try running the bot locally or using a proxy also look at the error logs in the console they usually tell you what went wrong

[mental tendon]

look closer at the suid binaries especially bbsuid check if it allows you to run any command or if it drops to a shell you can also use tools like linpeas or lse to analyze permissions and capabilities if sudo is misconfigured that might be your privilege escalation path try running sudo -l and see what it allows

[tough meteor]

Sudo -l won't run without root password

[mental tendon]

check if the repo has a readme or install instructions usually after extraction you need to run commands like ./configure && make && sudo make install or sometimes just python setup.py install or npm install depending on the project type always check for a requirements file or dependencies before installing

[mental tendon]

then focus on bbsuid run it and observe its behavior check with strings /bin/bbsuid or ltrace to see what it does it might call another binary or give you unintended access try common inputs or escape sequences to

[pale galleon]

sudo should have the S bit, it's intended

[slender stratus]

im new to all this any recommendations to how i can find a diection or where to start from

[pale galleon]

#👥・new-member-guide, #💕・free-resources, #📜・certs-and-career

[slender stratus]

so this diecord is centered on cybersecurity right?

[pale galleon]

Not really, we have general compsci related channels too :>

[spiral notch]

mostly

[torn pine]

Please who can help me add multiple telegram users to my channel

[spiral notch]

a good friend of mine

https://google.com

[dim stirrup]

That's sad to hear but , it's better to be sure

[spiral notch]

sure he will

lol

[lavish kernel]

Hello may someone help me I have suspicion on someone wanting to ||kill themselves||

Please

[spiral notch]

and what help would cybersecurity specialists and hackers bring?

we’re not supermen, sorry

[lavish kernel]

Oh I apologize I thought y'all could find addresses and save my bad

[lavish kernel]

Thx for telling me

[radiant stone]

People can do it but location tracing is again our #📜・rules . If you're concerned call the police they can help trace.

[halcyon flame]

Or just speak to your wife.. if you invade her privacy, how do you think that's going to end?

[valid belfry]

You are a veteran you should know the laws, thank you for serving

[hardy pulsar]

Ive probably asked this before I've watched a video on setting up a virtual machine but the only thing that confused me was that they kali Linux and Ubuntu as operating systems for the Oracle virtual machines but when they loaded it it was Kali linux

[jaunty sand]

Hi again, everyone! I’m planning to switch to Linux and was wondering which distro I should choose. I was considering either Arch or Kali Linux. I’m still in Grade 12, so I’m currently learning programming languages. I often have to finish
assignments and create programs for class, so I need a distro that I can use for normal day to day tasks while also experimenting with things like brute forcing. Could anyone recommend a distro that balances both programming and cybersecurity learning?

[south plinth]

Arch is a good distro but you have to manually configure a lot of thing but if you have the time to learn I say go for arch since you need it for class too but Kali is mainly used for pentesting so maybe you could use arch as your main OS and then create Kali using VM

[south plinth]

Arch is more flexible

[brave aspen]

Also I got informed about the existence of Black Arch quite some time ago, which is Arch but Kali in a nutshell Don't

[south plinth]

there is more tools if I am not wrong but I do not think you will use all the tools there

[brave aspen]

Again I'm not too confident of this statement—novice here—but not necessarily you'll also need to use all of the tools in Kali.

[south plinth]

I have not use all the tools in kali before but I think some people use all the tools there

[brave aspen]

Yeah pretty much you said it.

I'd just say give Black Arch a go, no need later to use a VM if your PC isn't as powerful as needed (from personal experience you might encounter vram issues which will make you need to up it on the config)

[radiant stone]

Parrot is also a nice distro

[south plinth]

I have just switch from kali to parrot

[brave aspen]

-# Never heard of it but I'm willing if you speak about it

[crisp star]

The reason why people use Kali or Parrot is because you already have all the necessary packages preinstalled. You could also just use a normal Linux based distro and install the tools yourself, which will take longer.

[lost vapor]

parrot is basically kind of like kali
they update their system more often than kali in my opinion
which is a good thing

i use parrot

[spiral notch]

Arch :3

[brave aspen]

Any other notable differences

[spiral notch]

GOODMORNING disso

[spiral notch]

Yes

Parrot being updated often

Isn’t the main like

Benefit of it

It uses the MATE mgr , which is twice as lightweight

Well not twice

But it’s more lightweight than xfce

Requires 2gb over 4gb ram

like kali does

[spiral notch]

no

never

I’ve tested every pentesting distro and many oses

black arch is at the bottom of my list

[brave aspen]

°-°

I stand corrected then!

[spiral notch]

it is horrible in every way possible man

[lost vapor]

good morning kiwiii:D

[brave aspen]

I'm all ears, and thanks for letting me know. Better to hear pro's experience than to go blindly and fall into a pitfall

[spiral notch]

the main issue is ssecurity with Blackheath

black arch**

[lost vapor]

oh and it also has some extra privacy tools

not that i specifically need time but yeah

[brave aspen]

The course I followed (which I didn't finish and probs gonna drop and start again learning not from 0 but choosing a diff learning route) went with Kali and some script that tweaked it (dunno what the name was)

[radiant stone]

I love parrot. I also just put my sudo auth on my Yubikeys. So much nicer to tap the key instead of typing passwords

[brave aspen]

So it's a dogshit in terms of you getting cooked?

[spiral notch]

yes

like

you’re the one getting hacked

[brave aspen]

...

In Russia we don't install Linux to hack others, we install Linux to hack ourselves

[south plinth]

i started using parrot and I am in love with it

[brave aspen]

Imma check its website, dunno if I should switch. Main reason would be the UX improving on a VM.
-# Graphical issues, latency...

[spiral notch]

half of their tools are deprecated

[lost vapor]

what hypervisor do you use? (the platform that virtualizes your machine)

[spiral notch]

they don’t update, and when u do a full system update

half of the tools will not exist or be hijacked by malware

[brave aspen]

-# Why would they call it hypervisor
VMware workstation! It's the one on the course I followed

[spiral notch]

most of the packages there are installed with aur, and let’s be real, nobody checks the src of every single aur pkg

[spiral notch]

use virtualbox and add the kvm paravirtualization interface to make it way quicker

[lost vapor]

ok that should be good:)
if you're all into preformance and the quality of using your vm
i also recommend hyper-v

[spiral notch]

also enable PAE NX to prevent heartbleed attacks and escaping via cpu back doors

[brave aspen]

Hmm

[spiral notch]

for literally no reason, it isn’t enabled by default

[south plinth]

this is the most technical conversation ever

[spiral notch]

sorry am a nerd

he just wants a damn vm

😞

[brave aspen]

No...

Keep on :3

-# I am totally going to detonate a graphite bomb on your location that I totally know

Either way so
Use virtualbox and add KVM paravirtualization + enable PAR NX for extra security

[spiral notch]

Yes

3d accel if you’re still laggy although it’s often a hit or miss

128mb video memory

[brave aspen]

Oh shit yeah lol

[spiral notch]

6gb max ram allocation

[brave aspen]

I had to enable disable, seemed to didn't do shit guess what

[spiral notch]

2-3 cores

[brave aspen]

Had to up the VRAM on the txt file

• VirtualBox
  • Add KVM Para virtualization
  • Enable Par NX
  • 3d accel
  • 128mb vram
  • 6gb ram
  • 2-3 cores

And I should have a smoother experience than what I used before, correct?

[spiral notch]

yes

[brave aspen]

It's your setup right

[spiral notch]

virtualbox guest addons too often help

they’re mainly used for rescaling and being able to fullscreeen but also for shared clipboard

it’s just a package u install on ur vm

[brave aspen]

I've never heard of add-ons for vbox but aight... Is the shared clipboard safe?

[fathom pebble]

Hello can someone please help me get my Facebook account back please

#👥・help-me Please

[spiral notch]

don’t use shared clipboard

not rly safe for malware testing

but if you’re not installing anything sketch it’s useful

let’s you go back and forth between vm and host to copy paste

[spiral notch]

No

Support can help

[fathom pebble]

Thanks

[spiral notch]

Go to meta support

[fathom pebble]

Someone changed my logins including my email and phone number

[spiral notch]

unlucky

[fathom pebble]

🙏🏽

[echo void]

can somone tell me why i only get 200-300 fps in fortnite on all low settings while i have a 5070 and ryzen 7 9800x3d

[spiral notch]

are you sure you’re using your dGPU

[echo void]

whats a dgpu

nvm i figured it out

how do i check if iam though

how do i check im not on igpu

[spiral notch]

dedicated gpu

[spiral notch]

Open task manager

and play a game

[echo void]

then

[spiral notch]

?

[echo void]

then what do id o

[spiral notch]

nvidia control panel

switch fortnite to use dgpu

[echo void]

where in nvidia control panel

[woven anvil]

Is your monitor plugged into the GPU itself, or is it plugged into the motherboard portion where all the USBs are

[dusky moat]

can you help me i keep getting this error Error extracting certificate fields: Error: Google Cloud Document AI API endpoint not found. Please check your deployment configuration.
at Gp (index-DwODWtIg.js:198:69280)
at async index-DwODWtIg.js:198:71402
I have set the env variables in vercel's system env configurations also

[mental tendon]

make sure the sdk is the right one
use @google-cloud/documentai npm package if on node.

if your processor is in us, and you're using the global endpoint, it won’t work. use the region-specific one.

[honest token]

Hi
I have a problem joining a voice channel, it shows me that everyone is closed. How could I fix this?

[lost vapor]

by talking more in chat, you will rank up
once at the owlet rank, you'll be able to join voice chats
refer to #🤝・roles-info

[honest token]

I didn't have this problem before, and I spent a lot of time on VC

[lost vapor]

well the flow changed
it's because we had particular incidents in voice chats from new members

[honest token]

Oh okay

[golden oracle]

Do anybody know unlock a iPhone or iPad that they forgot the passcode in the email code

It’s not unlocking on iTunes

[median zealot]

Hey there

[lost vapor]

heya:)
chat's in here #💬・old-gen-chat

[soft smelt]

hello everyone so I have bit of a problem that i dont know how to fix. So, pretty much people from all over the world (according to steam's security emails) are consistently using the correct name and password to get into my steam account, thanks to steam guard they have not been able to gain access. Similar things have been happening to my gmail account, with the use of malware byte's digital footprint tool i know that my passwords are getting leaked into sketchy telegram channels. I have done countless malware scans ect but this continues to happen, does anyone have any idea how I can stop this from happening?

[spiral notch]

factory reset your device

and change your passwords

[soft smelt]

yk deep down i knew that that was the answer I jus rly didnt want to have to redownload cyberpunk

[spiral notch]

well deep down that still might not get rid of malware that stays persistent even after factory resets, to fully get rid of actually sophisticated malware itd take many more steps but it should most likely do the job

so trust me, reinstalling cyberpunk isnt that bad

[soft smelt]

yeah ill get on that soon, thank you

[lament hemlock]

Hello world!

I am trying to start building a homelab as a project so I can better understand the networking and cyber security tools that I need to get used to!

I know that people build homelabs for other stuff like hosting media or game servers and I'm curious on what I personally need for the cyber security field!

If you have any advice on specs like
What generation CPUs, Intel or AMD, Ram, Brands or even specific PCs, I would love to get any and all advice! (Currently considering Mini-Pcs but not sure if that's the right choice for the field)

Also I was going to pick up a network switch for it? Would that be a good idea and if so is there any other devices you guys would recommend?

Thanks in advance!

[steady nest]

what do you guys think about the online courses that "teach you ethical hacking". Are they real or a cash grab?

[weary peak]

Hello

Ask admins

I am busy

[civic needle]

#👥・new-member-guide

[chilly merlin]

👍

[civic needle]

No one “teaches” here. Tryhachme and hackthebox are both good resources to start

[weary peak]

Let's see

[mental tendon]

taught by people who worked in security or placed in real jobs

hands-on labs (vm-based, cloud-based, or CTF-style)

clear roadmap: linux → networking → scripting → vulnerabilities → exploitation

shows the why behind the tools (not just “run nmap”)

Cash grabs :

clickbait promises (e.g. “be a hacker in 10 hours”)

copied material from blogs or youtube

[mental tendon]

cpu: 4 cores minimum. 8+ threads ideal.
intel or amd both fine avoid ultra low power chips (celeron, atom).
7th gen intel and newer is a good floor. ryzen 3000 or newer is solid.

ram: 16gb minimum. 32gb+ strongly preferred.
more vms = more ram. defender, elk, and windows eat memory fast.

storage: ssd > hdd. nvme if possible.
minimum 500gb, ideally 1tb+. get a second disk for vm snapshots if you can.

[maiden bough]

Hello All 🥰

Please can anyone track IMEI number?

[south plinth]

we do not help in unethical thing pls read #📜・rules

[spiral notch]

just get 32gb, nvme ssd and literally any cpu made in the last few years. I5 or i7, with more cores

[lament forum]

i got permission to hack into a websit "leroyvandooren.nl" i scanned all ports and fount ftp is open but password protected i got some banner information and its "Speak friend, and enter"

i ran "nmap -sV -p 21 leroyvandooren.nl" and it got me this
21/tcp open ftp ftpd.bin round-robin file server 3.4.0r16

anyone knows any vulnrabilities for this version or anything to get accesss to ftp?

i went online to find more info about it and found nothing so i need yall's help

[lament hemlock]

I appreciate the response!! Thank you

[lament hemlock]

Thanks for the response!!

[mental tendon]

"Speak friend, and enter"

this could be a password hint likely a reference to “mellon” from lord of the rings. try logging in with:

ftp leroyvandooren.nl

username: anonymous

password: mellon

also try:

username: ftp, password: mellon

username: admin, password: mellon

no password (just press enter)

[solemn cove]

can anyone help me recreate a game or if not just look in the game tell me how to unlock the charecters and also its cuz i cant to pay to unlock but my little brother want to play it with all charector and i over reacted and said i will so if you can then please help
Game name : hero fighter pc version
and if not i am thnkfull for you to tell me y

[spiral notch]

#📜・rules

we don’t help with fracking games, or any other unethical things

you shouldn’t lie to your siblings.. let this be a lesson

[solemn cove]

okie thks

[lament forum]

nothing worked i did try mellon as passowords and i forgot to mention that last night i bruteforced it using rockyou.txt so maybe im temp banned so can u try it for me?

[lost vapor]

hey, we cannot verify that you indeed have permission to pentest said domain
with that being said: we cannot help you at all. even if you did have permission, they hired YOU to do the job.
please don't discuss about this subject further.

[lament forum]

thank you for warning me i will not discuss this topic any further

but if i provided proof would i still be able to talk about it or/and get help about it?

[lost vapor]

well, asking for help regarding that would not be vial since they entrust you to interact with their domain not us
why exactly were you given permission to pentest this website? and is their ftp in scope?

[lament forum]

it was a friend i had contact with him for a long time and this is his website, hes making a new one and since he knows that im a nerd i asked permision for pentesting the website and he agreed since he was making a new website entirly

and no their ftp isnt in scope

[lost vapor]

oh then you should probably leave their ftp be

lol

[spiral notch]

so why are you trying to pentesting their ftp dawg

[lament forum]

why not

but fr i just wanna improve my skills for more irl scenarios

[lost vapor]

if you're pentesting their ftp and it's out of scope it is considered unethical and illegal

[lost vapor]

htb

hackthebox.com

you should really check it

the stuff they have over there is even harder than irl pentesting sometimes

[lament forum]

oh okay i didnt know

[lament forum]

il check it out

[lost vapor]

yes
you're also more than welcomed to check here for a guided path #👥・new-member-guide

[lament forum]

okay thank you and sorry for the stuff

[lost vapor]

you're all good
just pointing you in the right directions

[lament forum]

thank you 🙏

[lost vapor]

don't want your career to fumble

[spiral notch]

because you’re committing a damn cybercrime

[lament forum]

yeah my bad i didnt know im kinda new as i stated before

[exotic oriole]

With all due respect, does anyone have or know how to get a hacked Sony Vegas? 🥺

[lost vapor]

hey, we don't help with that here
please read our #📜・rules

[exotic oriole]

Ok sorry

Didnt know that

[trim latch]

Who is familiar with hacking CCTV I have a question

[spiral notch]

uhhh doubt that’s ethical

but go on..

[trim latch]

Can I hack a CCTV camera using mobile or need a Laptop?

I have a project idea

[exotic oriole]

🥺🥀💔

[lost vapor]

need a laptop mostly

[trim latch]

Okay thanks

[spiral notch]

both possible

laptop is easier but is also easier to hack everything with a laptop

[trim latch]

Okay thanks

[valid belfry]

This ain't mr robot

[trim latch]

??

[hardy violet]

Can anyone help me figure out a way around for web scraping? Every YouTube vid suggests a paid proxy website, i can't pay for it

[spiral notch]

Wdym

just code your own scraper

or are you looking for free proxies?

[hardy violet]

Ofc but most sites block your ip if they detect it. There are paid options to prevent it a little but are there no workarounds?

[spiral notch]

it shouldn’t block your home ip?

how did one ruin his rep

set timeouts lol

[spiral notch]

free proxies yea

their rep is sometimes non existent too but like

still a viable method

[hardy violet]

I haven't tried it yet, but as far as I've heard it does. Thought of tor as a solution but linkedin blocks it

[spiral notch]

dude

you’re mixing up botting lol

if you make your scraper with timeouts

and

make it not act roboty

you’ve got nothing to worry abt

worst case if yeah u need proxies for rly quick scrapes

[hardy violet]

Damn that's kinda valid, I'd have to request html of the webpage after passing captcha that might get annoying tbh, I'll try

[spiral notch]

take free proxies for
The internet

from the internet*

and then filter them