👥・help-me

[jolly orchid]

building the lab sounds like the best option outside of the vulnerable machine thanks for the advice

[granite zealot]

I'm not with my system right now

[whole patio]

still waiting, buddy

[granite zealot]

When I get home I will try it

[whole patio]

alright

[granite zealot]

But I want to show you a screenshot of what is showing before

But I cant sent it to the group

[whole patio]

You won't have the permission for screenshots here

[granite zealot]

So I want DM @whole patio

[whole patio]

Just show me the output of the command I gave you, when you are back at your computer

I don't do "support via DM" here

[charred lava]

can someone help me witha ndroid root files extract

Active.sav
1 /storage/emulated/0/‪Android/data/com.pubg.imobile/files/UE4Game/ShadowTrackerExtra/ShadowTrackerExtra/Saved/SaveGames/Active.sav: open failed: EACCES (Permission denied)

what to do

[lost vapor]

seems like you lack permissions to transfer them

what are you trying to do again?

or extract in that matter

[charred lava]

how can i give permission

[lost vapor]

well
you gotta have root privileges

and for that i would assume rooting your phone

[charred lava]

i enabled root permission

its on emulator

[lost vapor]

if you are through a phone that is

[odd steeple]

what android version? is it 11?

[lost vapor]

oh ok then you have to root the emulator

what emulator is it again?

also it looks like you're trying to copy a pubg save file?

[charred lava]

mumu player

yes

[lost vapor]

yeah mumu player is not rooted

i don't think they'll let you root it

[charred lava]

it is rooted ..it has option of root enable

[odd steeple]

i think hes trying to install cheats for pubg mobile 🤦‍♂️

[charred lava]

no i am trying to change config file to reduce the graphics quality nothing more ..i used to do it but now i am unable to do

due to some android update

is there way to copy that file

[lost vapor]

oh ok yeah i see what the update is

even when your phone's rooted it's hard to access /android/data to begin with

[charred lava]

so is there any workaround

its android 12

[lost vapor]

if you had access to the SE you could just disable the restriction

adb shell setenforce 0

it's a linux command but android is linux based

[charred lava]

i have adb enabled

[lost vapor]

yeah

disable it

[charred lava]

ok

how to access se

i am in hacking vc can you join i can share screen

[lost vapor]

did you get a file manager that has root access btw? could also help
you can try and get Root Explorer

i can't hop on vc atm

i'm about to study soon

[charred lava]

yes i have archiver and root explorer both same problem

still have same issue

[lost vapor]

go to your mumu adb folder in your own computer
open up a cmd directly on the path
connect to the local adb server adb.exe connect 127.0.0.1:7555
open a shell session with adb adb root , adb shell
and disable the enforced security su, setenforce 0
and reboot your emulator

idk if these steps would work for you all the way

all depends on the emulator

never done these stuff before so these are all researches

[charred lava]

how to find this

where can i find it

[lost vapor]

C:\Program Files (x86)\Nemu\vmonitor\bin\

located here or somewhere around

dunno

[charred lava]

its 64 bit

[lost vapor]

yeah so just adjust accordingly

the name i meant

[charred lava]

what will be name of folder

C:\Program Files\Netease\MuMu\nx_device

i found this

search-ms:displayname=Search%20Results%20in%20MuMu&crumb=location:C%3A%5CProgram%20Files%5CNetease%5CMuMu\sh_c_bin

[lost vapor]

kk good
now just go there and open up a cmd

[charred lava]

there is a file name default inside it

[lost vapor]

wdym

just open up a cmd at the folder's location

[charred lava]

.db file

[lost vapor]

it's a database

either that or smth else

not important in short

we're looking for adb.exe

[charred lava]

PS C:\Program Files\Netease\MuMu\nx_device\12.0\device> adb.exe connect 127.0.0.1:7555
adb.exe : The term 'adb.exe' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1

• adb.exe connect 127.0.0.1:7555

•   + CategoryInfo          : ObjectNotFound: (adb.exe:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

[lost vapor]

yeah because it's not in the folder is it?

try and find adb.exe somewhere around

idk where it's located

[charred lava]

it will be there ??

[lost vapor]

idk dude

never done mumu emulator related stuff

let alone android but i know linux

guess we'll have to see

[charred lava]

i can see 2 adb exe

[lost vapor]

one is enough

now open up a cmd at the location

and just do the same thing

[charred lava]

Suggestion [3,General]: The command adb.exe was not found, but does exist in the current location. Windows PowerShell does not load commands from the current location by default. If you trust this command, instead type: ".\adb.exe". See "get-help about_Command_Precedence" for more details.

[lost vapor]

oh well it tells you what to do

read it

[charred lava]

.\adb.exe

[lost vapor]

yup

that's the line you gotta change and that's it

.\adb.exe connect 127.0.0.1:7555

[charred lava]

cannot connect to 127.0.0.1:7555: No connection could be made because the target machine actively refused it. (10061)

[lost vapor]

oh cooked

welp there's no way to change it then

[charred lava]

why

[lost vapor]

they deny access to it

[charred lava]

is there any emulator that allow access

[lost vapor]

idk of any nope

[charred lava]

i just want copy of that file

[lost vapor]

yeah ik but i can't really help with that beyond of what i've tried

nor can anyone really help pull all the strings

[odd steeple]

try bluestacks ig

[lost vapor]

you're gonna have to research more

[charred lava]

bluestacks dont have direct option to root it

[odd steeple]

ah

[lost vapor]

also i am not sure if game modification is against their TOS

ik it's just texture or what not

but still not sure

[charred lava]

no its just the option that is available in low end phones

i want to enable it on high end phone .. so low grphics with better visuals

one of my friend bypasses it since more than 6 month if i send you tool can you help me with how it works

[lost vapor]

like i've said do your research or just ask your friend to help
we're no tech support here and can't pull all the strings

[whole patio]

Sounds more and more like attempting to glitch graphics to cheat, tbh

[true rapids]

hello guys,joined soon.any one to give me a road map .i want to be ethical hacker.currently software engineering student

[odd steeple]

#👥・new-member-guide

[jagged swallow]

I've found a telegram group that scams people by giving them fake task any idea how can I report them

[north nacelle]

EL
Can't drop data to guest ...
DnD: Error: Drag and drop to guest not possible -- either the guest OS does not support this, or the Guest Additions are not installed.
Result Code:
VBOX_E_DND_E (0x80bb0011)
Component:
GuestDnDTarget Wrap
Interface:
IGuestDnDTarge t
{50ce4b51-0ff7-46b7-a138-3c6e5ac94 6b4}
Callee:
IDnDTarget
{ff5befc3-4ba3-
7903-2aa4-4398 8ba11554}
7:03 AM
8/28/2025
Right Ctrl

[fathom summit]

Are you using virtualbox?

Do you have guest additions? Have you been able to drag & drop before?

@north nacelle

[north nacelle]

yes

[north nacelle]

no just inst

[fathom summit]

https://www.virtualbox.org/manual/ch04.html

[tough moat]

I need a pc that’s cheap I just want to download stuff into like a test pc

Basically a test subject

[whole patio]

Simply a virtual machine?

[fathom summit]

Raspberry pi

[tough moat]

How much storage

[whole patio]

I don't think you do

[neon lintel]

There are quite a few, selenium seems good

[fathom summit]

@robust walrus we do not help with that here. Please don’t ask again!

[fathom summit]

It depends

[whole parcel]

Yeah why not a VM

[tough moat]

I got a hdd hard drive

[slow sierra]

Hey

What the difference between namp -sS and nmap -sT -T0 from stealth

[opal pilot]

https://tenor.com/view/google-exists-google-search-it-geekboy-geekboy-cz-gif-25933207

[pallid wyvern]

nmap -sS = Stealthier — uses SYN scan, doesn't complete handshake.

nmap -sT -T0 = Not stealthy — full TCP connect, but very slow (because -T0 is "paranoid" timing).

[slow sierra]

Yah I know but I mean is they both will pass the system? Or sS more stealthy? Than t0

[pallid wyvern]

-sS is more stealthy than -sT -T0.

[slow sierra]

Thank man

[pallid wyvern]

The reason nmap -sS is more stealthy than nmap -sT -T0 comes down to how each scan interacts with the target system. The -sS option performs a SYN scan, which is often called a "half-open" scan because it only sends the initial SYN packet to initiate a connection. If the port is open, the target replies with a SYN-ACK, but instead of completing the handshake by sending an ACK (like a normal connection would), the scanner immediately sends an RST (reset) packet to tear it down. This incomplete handshake means the connection is never fully established, and because of that, it often doesn’t get logged by services or firewalls that only record full connections. It’s a preferred stealth method because it's fast, effective, and less likely to trigger intrusion detection systems (IDS), especially those looking for full TCP connections.

On the other hand, -sT is a TCP connect scan which uses the operating system’s normal networking stack to complete the full TCP three-way handshake. That means every scanned port results in a real connection being made, just like any other legitimate user would do. When you add -T0 (paranoid timing), it makes the scan extremely slow and spaced out in time, which can help avoid triggering rate-based alerts or basic IDS thresholds. However, even though it’s slower and less aggressive, each connection is still fully logged by the target as a legitimate TCP connection attempt. So while -T0 helps with avoiding suspicion due to scan speed, it does nothing to hide the scan technique itself, which is still obvious to systems that log or monitor connections.

In short, -sS avoids making full connections, which makes it inherently stealthier, while -sT -T0 just scans more slowly but is still very visible to any decent monitoring system.

[next dagger]

is she locked out or is the account closed?

[leaden crane]

prolly locked out. seems like.

[spiral notch]

contact support of the email provider

[strange aspen]

I really want to make my career in cybersecurity

Can anyone guide me?

[spiral notch]

mhm #👥・new-member-guide

[charred vigil]

Hello

[strange aspen]

Please check your dm

[strange aspen]

☺️🥲

[lofty tangle]

Please can anyone guide me on a cracking and configs course 🙏

[strange aspen]

Coz I really really need ur help

[spiral notch]

I’m cracking what

on*

#📜・rules

[next dagger]

he’s asking for combolists and cracked software that you find on breachforums and all

[lofty tangle]

Thanks id keep checking tho

[spiral notch]

😭

LMAO

[lofty tangle]

I don't think I'm relaying my message well enough

[spiral notch]

ofc

[lofty tangle]

Any sites
I'm currently doing this for research purpose I need to be able to get the lists myself

[spiral notch]

for sure bro

research purposes my ass

read the rules lol

this isn’t an illegal community

we wouldn’t exist as a community if we’d help with these things left and right

[lofty tangle]

Its all hacking

Not illegal means I'm unto

Ok got it.

I saw option for grey hat when signing here rn

[spiral notch]

those that are illegal here don’t help either

because they don’t want to get

[lofty tangle]

Gotcha

[spiral notch]

caught later on

[lofty tangle]

Gotcha

[spiral notch]

or be an accomplice

[spiral notch]

if you want to learn legal cybersecurity and become industry ready though, go to #👥・new-member-guide

[lofty tangle]

Thank you

I really need this I'm very new here

[civic copper]

you need help?

nvm he wants illegals

[raw nymph]

Good day everyone, please I'm trying to learn or work in cybersecurity, but currently I'm in my second year Computer science major. I only have a router, a dell latitude e5570 core i3 6th generation, 8gb ram, 256gb nvme ssd

Currently I don't know where to start from, thinking about it alone seems overwhelming, but I think I would love being a pentester or a cybersecurity engineer, but no path to follow, and also can't afford any of those certs at the moment because they are too costly, I need a guide please

[astral blade]

hey, so I have been following the guide on the discord, and going through THM pre security but, intro to lan, osi model, packets and frames, and extending your network are all paywalled. What do I do?

[solid gull]

Move onto any other free room in pre security or cybersec 101 🤷‍♂️

[astral blade]

thanks

[spiral notch]

#👥・new-member-guide

also your laptop is more than enough for learning and hacking

[whole patio]

Arguably its at the lower end of the spectrum to enjoy the ride

[raw nymph]

Okay, thanks

[whole patio]

@granite zealot I already told you I don't do support over DMs

for the third, and final, time.. what is the output you get from apt policy openvpn

[granite zealot]

It said installed (none)
Candidate
Version table 2.6.14-1

Then 500

[whole patio]

so several things - first: You are doing upgrading wrong. This is the way to do it https://www.kali.org/docs/general-use/updating-kali/

the other thing - you have conflicting dependencies installed. This is something you caused yourself.. either you followed some outdated guide, or something chatgpt told you to do. This is why your update fails

I don't know what it is you did, and I have little hope that you know yourself.. but either you need to painstakingly undo what it did.. or this is just broken beyond repair and should be reinstalled altogether

[granite zealot]

So what am I gonna do now

Cause I have no idea what I did

[whole patio]

Install kali new

[granite zealot]

Okay

[whole patio]

and dont install stuff outside of the repository

if its not installed with apt install then stay away from it.

[granite zealot]

Okay sir

[whole patio]

IF you do - it's assumed you kinda know what you are doing

[granite zealot]

I will install it again and give you feedback

[fathom summit]

Who tf breaking rules in here 😂 jkjk Hope everyone is have a good day & thank you all for helping others 🫶

https://tenor.com/view/im-watching-watch-you-eyes-on-you-kid-cute-gif-16282723

[granite zealot]

But pls where can I get the direct source to download Kali?

Cause maybe I downloaded it from a wrong source

[opal pilot]

Why d’you want to install kali from beginning if it’s just openvpn who’s broken

[whole patio]

kali.org

[granite zealot]

Okay

[opal pilot]

Also just search up install kali linux and it will show up

[whole patio]

its not openvpn thats broken

[granite zealot]

@opal pilot I'm finding it difficult to install open vpn

[whole patio]

no you are not

[opal pilot]

What is it

[whole patio]

you broke your installation - and as a "result" you cant update anymore, and as a result you cant install from repositories anymore

since they do not know what caused it, the chances to recover from this are low.. reinstallation should be way faster

[opal pilot]

Just add the default kali repo to the source.list file?

[whole patio]

eh... no

[opal pilot]

What did he broke lol

[whole patio]

he doesn't know. but it ended up in already conflicting dependencies, that are installed right now. So unless that is resolved, apt will look at the mess and say "Yeah no, I'm not going to touch this with a 10 foot pole anymore"

this can be salvaged, "if" you know what caused the "impossible situation" and repair it manually.. but this does not seem to be a realistic option here

[opal pilot]

Lol yea he won’t fix everything manually

[granite zealot]

Wait it looks like I downloaded the wrong version

Cause to download it takes a large amount of megabyte

[opal pilot]

It’s an iso file

You can install it through torrent tho to make it even faster

But it shouldn’t take very long with a descent wifi connection

[granite zealot]

Our network this side is not stable

Very poor

Even the wifi here too

[whole patio]

always select the button that says "recommended"

[granite zealot]

But pls I want to as a question can you connect ur Kali to your Google Chrome ?

[whole patio]

google chrome on linux is just the same browser as it is elsewhere

[fast rapids]

why do you want to use the default browser anyway

[whole patio]

Seconded. Michael may be better off with a linux distro that is more lenient towards new users

[opal pilot]

M-m-m-miiiint

The goat

[stiff adder]

Hi , I am suspicious that my device has probably been breached recently , however after which i did reset it , but now i have some huge suspicions over the data that i might have lost and multiple other things , since i have less of IT knowledge ....can someone here help me out in understanding what i can do to keep myself secure and limit the amount of damage . Can someone help?

[fast rapids]

kalis pretty simple idk

[fast rapids]

get a new device

what device was it anyway

[stiff adder]

hey i know this might look a bit fun or something ... but i find it a bit serious for me ....can someone help??

[fast rapids]

yeah what device is it

[stiff adder]

It is samsung A50

[whole patio]

so a smartphone then

what made you think it would be compromised?

[fast rapids]

login to your google account from a desktop browser

click "security"

check sussy signins

any weird devices u dont use with that email there?

[stiff adder]

During restting it , I could clearly see a random application installed and logged into some account , which i had never done on my own

[fast rapids]

whats the app name?

[opal pilot]

An app? Does it by change have no icon?

Or no name

[whole patio]

Resetting it, wiping it in the process.. this might bring back some stock software you don't remember, or that got a different name/icon with later updates.

It is very unlikely to have a smarthphone persistently compromised as a normal person.. so unless your life or that of your "enemies" is quite spicy.. I would not assume that anything people threw at you survived a reset. That being said - I would not consider an android 9 smartphone especially secure, and if replacing it is an option, I would consider that

[stiff adder]

it was named after a number - 74758517719

[stiff adder]

it had an android icon

[fast rapids]

lemme check that rq

[stiff adder]

i can share the image if somehow it is possible

[stiff adder]

mentioned

[fast rapids]

did you check the google devices though?

[opal pilot]

It’s probably a third app app that you installed and it send a request to connect to a port of the hacker

For him to be able to read files and extract them etc

[stiff adder]

bro i have some huge suspicions over the things that are kind of going on in my life .... and i have least of IT knowledge nor am i much of a chat person ... i would really appreciate if a person withthe right security knowledge or experience can connect with me

[fast rapids]

try factory resetting it without restoring any cloud services

[whole patio]

I have seen my fair share of people that assumed they were hit with - essentially - nation state malware, all of them did not quite have a technical background. What I have "not" seen, is an ordinary person actually being targeted

[fast rapids]

yeah

[whole patio]

not saying it is ruled out.. but you pretty much "know" whether you are a potential target..

[stiff adder]

yes , i did reset yes thats what i did , and right now i belive my device is secure but there are things i am a bit concerned about

[fast rapids]

but did you restore cloud services with it?

also may you list your concerns besides the 74758517719 app

[stiff adder]

logged in to google acc , thats it ....is it also not secure

drive and all

[fast rapids]

did you restore anything from google drive?

[stiff adder]

not like downloading it on device ....do u basically say that some file on it could be a malware?

[fast rapids]

possibly

[whole patio]

"Is it theoretically possible"-questions are always nonsensical. This answer will always be "it depends" and the one giving the answer and the one receiving it take very different meaning away from it

[fast rapids]

some of the files could've been infected and if you restored it then it could potentially bring the malware back

[stiff adder]

By any chance , will anyone be comfortable in connecting on voice chat or google meet

[fast rapids]

no sry

[whole patio]

What, like a cave man? No

[vernal crater]

What are the best TryHackme certs?

[fleet coral]

is there anyone that can help me with octosniff?

[fast rapids]

SAL1

[fast rapids]

never heard of that

[fathom summit]

https://tenor.com/view/im-watching-watch-you-eyes-on-you-kid-cute-gif-16282723

[fathom summit]

What are you using it for?

[fast rapids]

??

[fleet coral]

nothing malicious i promise

[fathom summit]

Well now I highly doubt that since that is the first thing you said

[fast rapids]

oh its like phishing

[fathom summit]

Make sure to read the #📜・rules

[fast rapids]

or something

[fleet coral]

first

its not illegal

[fathom summit]

Duh

[fleet coral]

so i can use it

[fathom summit]

But people use it maliciously

[fleet coral]

and what did i say

[fast rapids]

he isnt gpt, saying your not using it maliciously wont bypass a human

[fathom summit]

Yea but you couldn’t tell us what you were using it for and your first response made you a little sus to us

[fleet coral]

i can see that

[fathom summit]

So explain. What are you using it for

[fast rapids]

"nothing malicious i promise"

[fleet coral]

im simply asking for help and if you dont want to give it then dont

[fathom summit]

You showed up 12 mins ago and the first thing you ask about is a tool that is known to be used maliciously?

[fleet coral]

i found this discord on a video off instagram

[spiral notch]

ye from srhoe

[spiral notch]

omfg

this dude

[fathom summit]

https://tenor.com/view/im-watching-watch-you-eyes-on-you-kid-cute-gif-16282723

[fleet coral]

you guys are clearly no help so nvm

[spiral notch]

no shot

this is a legal community

[fathom summit]

You are welcomed here but please read the #📜・rules and come correct. Still couldn’t tell me what you are using it for. Wow!

[fast rapids]

Guilt tripping refers to the act of making someone feel guilty, often to manipulate them into changing their behavior or complying with a request.

[fleet coral]

look at this chat

this was all because i asked for helpXD

and you felt the need to push for imformation you dont need

[spiral notch]

we do

because we don’t assist with things you’ll clearly use illegally

smh

[fathom summit]

No your first question here, being here for 15 mins was about a tool known to be used maliciously and you couldn’t tell us nor explain what you wanted to use it for after being asked 3 times. Make it make sense please

https://tenor.com/view/im-watching-watch-you-eyes-on-you-kid-cute-gif-16282723

@lost vapor 👀 ⬆️

[lost vapor]

@fleet corali see this, and i cannot see a logical reason for one to want to use this
this is basically an ip sniffer, nothing educative about it nor can i see a reason for you to use it legally

[fast rapids]

exactly

[lost vapor]

we're talking about an ip sniffer for playstation platforms nontheless
the most non serious platforms on earth

[woven anvil]

I just looked it up, It looks like a sniffer that looks like has logic in to decrypt communication between consoles and servers. I have no idea how that could be legal

[fast rapids]

"most non serious" 🤣

[woven anvil]

There is also no code available, so it itself could have malicious code in it too that the users are unaware of

I found a similar project. Research time!

[lost vapor]

i'd like to inspect the code for stuff like that too ngl

[fast rapids]

they had to clarify "100% no malware" in the description

[lost vapor]

gonna research as well

[woven anvil]

Just like Microsoft Clarifying that SMB3 encryption is WAN-ready

[fast rapids]

every trojan tells you that its a trojan if it is a trojan ofc

[next dagger]

octosniff

new toy for the babies?

[woven anvil]

appairently old

[next dagger]

ohhh never heard of it

[woven anvil]

Same, but their copyright can't lie

[next dagger]

oof

[woven anvil]

Instagram Support

[hollow tendon]

good luck with that

[woven anvil]

Who do you think has access to the back-end

[hollow tendon]

i tried with them 4 times and it was linked to the same email i use rn but no good

[fathom summit]

@hasty ether we do not do account recovery here. You can contact the proper support for that platform and go from there. But here, read the #📜・rules # 3

[whole patio]

Maybe we should offer "account burial services" .. find closure, maybe recite a poem in its memory

[slow sierra]

If I want to test all uni's server to test DOS attack for research purposes should I take premation from all of them ?

[whole patio]

you should take that "want" of yours, press it into a tiny ball and put it far away

[slow sierra]

It's for research I want to find which one has best server I didn't ask about how to DOS I asked as bout seeking permissions

[whole patio]

It is always "for research", "educational purpose", "curiosity" or whatever people think up as an excuse.. but you're not the owner of those servers. You are not the service providers for that servers.. whether they happen to be hosted on premise, whether they are hosted by some service providers.. you don't even know who to ask for and whether they are authorized to even give you permission.

So stop pretending your weird curiosity has a PHD, and it is fine, and keep your hands off of other peoples infrastructure, before you disrupt some service that, as it turns out, was critical.

"No sir, I'm not an arsonist, I am a fire-proof researcher"

[vernal thunder]

hi guys i have a question, lets say you're keeping up to date with new cybersecurity vulns, exploits, etc. How long will that usually take, does it take like 30 -60 minutes, hours, how long?

[slow sierra]

did i say to you how to preform dos ?

[whole patio]

You asked what you should do, if you want to do X. (ask for permission)
But doing X is a really dumb idea, regardless of whether you ask for permission.
That you didn't ask "how do I perform this" doesn't change it.

If a child come up to me with a skalpel and asks whether it should ask permission to operate a liver out of his best buddy, I am telling it not to do that.. if it replies "I didn't ask you HOW to cut someone open" is a weak, weak, weak argument

[whole patio]

That depends.. at some point you will be part of a network, where people know what you are doing and will inform you about stuff you should be aware of.. so it feels like barely an effort anymore

[slow sierra]

maybe i ask it in wrong way i know i should always ask permeation and NDA , i was asking if i want to compare two systeam i should ask them both right?

[whole patio]

You are really not getting it, are you

oh well, I did my due dilligence here

[slow sierra]

i got your point budy

[whole patio]

no you didnt

Listen

[slow sierra]

but im asking in legal term in real word i should ask for permeation before doing any thing right ?

[whole patio]

You do not even have an idea of who you have to ask.. this is a childish notion "I ask the university, right?"
Whom are you asking there? Are those systems even provided by the person(s) you ask.. can you verify that.. are those person(s) even authorized to answer your question? Ask a professor of the faculty? If he says "yes", did he even check with the service provider? Does he even KNOW that his servers are maintained by a service provider? Could the service provider then maybe give you permission? Hell no it can't, cause it has no idea what services the client is even running there.

Stop trying to rationalize that weird idea that anyone out there wants you to do that, can authorize you to do that, and "leave it be"

If they want someone to test their security and failback/fallback solutions.. THEY will look for somebody.. someone way more qualified and insured and organized than you

I'm so happy for you, that you learned about this new thing that people call dos - but you are not some freelance dos-protection researcher.. you are just looking for an excuse to do something, that the world does not want you to do

[vernal thunder]

like with other pentesters and stuff?

[whole patio]

might be pentesters, might be security researchers, people you met over a shared software solution, people that sift news articles and think to themselves "oh wow, that is something that Pibbler would want to know about"

[slow sierra]

I see your point about the legal and technical aspects. However, I would appreciate feedback that focuses on the issue rather than personal remarks about my understanding or intentions

[whole patio]

I'm sure you do

[vernal thunder]

but lets say im like solo right, idk if thats possible as a job for a pentester (since im new to cybersecurity), how much would i have to study the new updates for?

[whole patio]

That is assuming there is some arbitrary mark to reach. No pentester out there is proficient at the bleeding edge of all topics and technologies, and some may be part of an organization that develops their own tools and maintains their own database of vulnerabilities that are not public knowledge.

If you are indeed solo, it varies wildly depending on how much the spectrum of your service covers. Even with distinctions of app/secure coding assessments it will depend on whether you know the specific issues of this or that programming language.

I know you are looking for a number of ~ daily hours here, but it will most likely be the other way round.. how much time do you have, and how efficiently can you fill those

I'm no pentester, I am an infosec consultant.. I have a good working knowledge of pentesting, but I would not be able maintain the level of up to date specifics to be satisfied myself with it, while still doing the consulting part.. so I don't try to

I personally consider "being" a pentester already a full time job

doing the job comes on top of that

ymmv though.. there are surely pentesters out there who are comfortable just working through their company playbook and call it a day

[vernal thunder]

ahh okokk, i just dont wanna sound rude here and dont take it personal or anyone readin this, but keeping up to dates like everyweek sound so exhausting and it gives me the image that pentesters are on their computer 24/7. I just started getting into pentesting and im loving it ngl, but keeping up to date makes me feel that i wont be able to go outside at all lol.

[whole patio]

That is why it is a good idea to crowdsource the "staying up to date" part with likeminded people

for instance.. you dont have to check every new tool or script by yourself.. quite often people just like to tell that they found something cool

[fathom summit]

Ok you all are writing books in here now 🤷‍♂️ cool, @ me if sh!t goes against the #📜・rules 🫡

https://tenor.com/view/im-watching-watch-you-eyes-on-you-kid-cute-gif-16282723

[whole patio]

could we also order 3 cokes for table5? 😛

[fathom summit]

https://tenor.com/view/yoongi2swag-gif-22464848

[vernal thunder]

ah okokkk, thatnk you so much, sorry for the big bother

[whole patio]

no bother at all

in fact I "should" follow the course I am doing right now, but am lowkey not motivated to do so, so any distraction is welcome 😉

[vernal thunder]

matter fact, one final thing, could you potentially get fired from your job if you dont keep up with new vulns or exploits?

[whole patio]

I don't think a company would risk getting sued because they did not provide their employees with the necessary training they expect them to have.

I would assume, in many cases, the question isn't whether you risk getting fired.. it is whether you will be promoted or getting a raise, if you do not offer more to your boss.

Honestly the reality is quite often that your team lead or your boss expects you to have certifications, because clients want to see that, but then there is not a high expectation for what you can actually deliver. You are always time constrained during an engagement, and the client might be ah-oh-kay with "no significant finding at all" anyway, cause they just have to do a pentest for compliance reasons and don't really want to fix anything.

many pentesters just burn out cause their own expectations are not met by their daily job, and they end up following the playbook and writing reports, while they know they "could" be doing a lot more meaningful stuff

But.. if you are the kinda person that is intrinsically motivated to always better themselves.. then the question of "do I get fired if I don't do X?" won't come up anyway.
If you are not that kinda person.. you will probably not consider pentesting a job you enjoy doing

some people pursue the career because it pays well without any personal, inner involvement.. those mostly just don't make it

Of course - all bets are out the window if your are solo/freelancer 😉

So my advice.. get an industry-wide recognized certification.. choose a single field you are getting REALLY good in.. become the "guy or gal to ask, if that comes up" .. find someone who will employ you, and the rest will follow

[vernal thunder]

Ah Okok, so from what I kinda understood is that when you get hired, someone in there will train you and how to keep up with updates, or simple networking in the people from your job or anywhere that is in cybersecurity will also keep you up to date?

[umbral grove]

how hack roblox

:3

[whole patio]

gosh that sounds illegal

[whole patio]

that's the theory at least

[umbral grove]

but i hacked acount ;w;

also whats good chat

[vernal thunder]

Ah okokkk, well thank you so muchhhh

[silk nest]

Good morning I'm new here need help learning ethical and also need some help getting into my old gmails that have 2fa but they have all my pics n things from the past 20 years if someone could guide me or give me a hand I'd be more then happy n thankful

[whole patio]

your gmail is gone, if google support will not help you

as for the other question #👥・new-member-guide

[somber flicker]

I have a slight problem and I’m looking for someone to help me solve it.. I have someone sending hateful comments about a friend on a dedicated IG page and I would like to have it removed… how can I get that done?

[next dagger]

report to instagram

the only way

[wicked forge]

How to install windows 11 when a prompt message comes saying "Install driver to show hardware"

[tired eagle]

you'll need to lookup and install the drivers specific to your computer spec

put them onto a usb and plug them in then select those drivers for install

they'll need to be the right ones though

[wicked forge]

Put them into separate usb?

[tired eagle]

yeah

[wicked forge]

Ok

Thanks

[spiral notch]

????????

[spiral notch]

no

you don’t need to put drivers on a usb

you install drivers from the correct manufacturer and run the file as a normal executable

[tired eagle]

ive had this issue before, that was one of the resolutions that worked for

[spiral notch]

oh

[tired eagle]

yes this is not possible

[spiral notch]

he’s failing to install

windows

Just reflect

[tired eagle]

when you are in the installation thing

[spiral notch]

Reflash

He has

A corrupted image probably

he should just reflash and reattempt install

[odd steeple]

i wanna learn bash, anyone can give me course recommendations?

[tired eagle]

https://www.youtube.com/watch?v=PNhq_4d-5ek

[odd steeple]

thanks ill check it out

[polar rover]

I want to build a web crawler with Scrapy any suggestions on where to start

[rare heart]

Hi guys
I'm new here🙃

[dim stirrup]

Hey

[chilly merlin]

Welcome! Check this out https://discord.com/channels/990435451334688768/1306084252437450763

[chilly merlin]

https://docs.scrapy.org/en/latest/intro/tutorial.html

[polar rover]

Thank you

[chilly merlin]

Also some alternatives exist like : beautiful soup, playwright, selenium,mechanical soup, frameless, colly, etc.

If you’re targeting social media I can recommend one or two books.

[chilly merlin]

https://www.codecademy.com/catalog/language/bash

[chilly merlin]

https://learn.microsoft.com/en-us/answers/questions/3934054/install-driver-to-show-hardware?utm_source=chatgpt.com

[chilly merlin]

Did you save your 2fa recovery code?

[silk nest]

I did but they were lost due to me becoming homeless shortly after

Im just now getting out of that

[chilly merlin]

https://support.google.com/accounts/answer/185834?hl=en

If all else fails you’re gonna need to contact customer support. We’re not gonna be able to help you recover your account any better than Google can.

[silk nest]

I can dig it

Thank u for the advice

I've not been able to contact customer support either

It sucks

[chilly merlin]

Sorry you’re having to deal with that. You can always try to explain your situation and get any sensitive documents sent to a new account if you’re in a bad spot (need legal documents etc that are trapped in the old email). I can definitely sympathize for anyone crossing over the path of being homeless. Best of luck, and well done on making it this far! That’s not easy to recover from.

[chilly merlin]

I think I’ve written a book or two in here, will try to refrain from now on. Sorry ❤️

[fathom summit]

I was just kitten. I am being a hoot. Please proceed if it is helpful & educational. Thank you for sharing

[orchid elm]

I want to become a server security but I don't have any tools

[opal pilot]

gifty.com

[orchid elm]

What is this link for?

[opal pilot]

free giftcard

[orchid elm]

Really ☺️

[opal pilot]

[fathom summit]

@orchid elm this is the second time you have asked for something unethical. Please read the #📜・rules when you come back from timeout.

[opal pilot]

gifty.com

do I have to repeat it?

[tame sluice]

anyone here?

[spiral notch]

dude

Just ask lol

and wait for someone to reply

https://dontasktoask.com

[tame sluice]

have u tried bug bounty hunting?

[tame sluice]

thats very nice

[fathom summit]

I was just about to point this out 😂

[spiral notch]

LMAO

yeah people don’t enjoy reading roles

or bios

[fathom summit]

Right

[tame sluice]

well then did u earn that alone?

[spiral notch]

yes

I don’t like sharing

:3

[tame sluice]

without a team?

[spiral notch]

Yes

Well

Wdym

For bugs?

[tame sluice]

ur amzing man

[spiral notch]

I bughunted mostly alone, what I did in a team I didn’t list as earnings

[tame sluice]

well i can send my road map here right?

ye my massege got blocked (:

@spiral notch i will dm u

[spiral notch]

oh huh

[spiral notch]

alr but we can continue here later on

In case others have issues too

or similar questions

[tame sluice]

ye sure i just send u the road map u can review it and we will talk here

[stark willow]

i need help with installing kali linux

[tame sluice]

alr i can help u

[hardy pulsar]

The vm machine?

[stark willow]

Yeep

[hardy pulsar]

Youtube can help you

I did it that way but took me a bit of time to understand

[stark willow]

Nope all it has is old versions

New versions the updated onces are confusing

[hardy pulsar]

I dont think it does

[stark willow]

You have idea about setting up the harddrive and all

?

[hardy pulsar]

I think there r some new ones

[stark willow]

Ir does

I am trying since 3 days

The new once are troublesome

[hardy pulsar]

Oh fair enough o probably gonna have to redo the installation then if I have downloaded the older version 😭😭

[stark willow]

Yea

[hoary marten]

i aspire to be you

[next dagger]

work towards it that’s the only way

[spiral notch]

and I believe you can be better

[hardy pulsar]

Is your earnings after tax or before tax?

[spiral notch]

after obv

[hardy pulsar]

Wow you must be hitting 6 figures a year if thats after tex

[spiral notch]

I do, I work in cybersec as a red team operator and part time employer :3

these earnings are not really tied to job earnings, atleast not entirely

[hardy pulsar]

Wow thats impressive are you based in the UK or different country

[spiral notch]

Cz

[hardy pulsar]

Czech?

[spiral notch]

yes

[plucky moon]

Has anyone installed tails? If so, I can use some help, I believe I’m missing something

[spiral notch]

https://dontasktoask.com

[whole patio]

#👥・help-me message anything new on that front I talked to you about

[stark willow]

Well i contacted a friend we are sorting things out

[whole patio]

so.. you did not compare any checksums then

and you didnt look up how to do that in the two days since I suggested that as the next step

[stark willow]

Well i considered reading the guide

I felt it's better to uninstall the vm and re install again

[whole patio]

So you did.. and what did that consideration lead to?

[whole patio]

But doing the same stuff that didn't work before, again, didn't help then

[stark willow]

Still in mid process......had ro deal with other shit

[whole patio]

alright then

[stark willow]

Do things from scratch using the guide

[whole patio]

the official guide on kali.org?

[chilly merlin]

https://www.kali.org/docs/installation/hard-disk-install/

[whole patio]

not that one, if he is using virtualbox as hypervisor

[chilly merlin]

https://www.kali.org/docs/virtualization/install-virtualbox-guest-vm/

[whole patio]

I still assume, from our prior interaction, that his download is corrupt or altered by AV .. but confirming that proved.. difficult

oh well

[gray linden]

sorry for the very late reply i know but i wanna make sure i didn't allow any suspicious files from getintopc.com

and if i did intall adware or spyware or any other shit how do i get rid of it?

[whole patio]

It always depends

So what indicators of compromise are you sure about? Whats makes you think you got malware

forget about maybes for a moment - what are we sure about

[lofty palm]

Is anyone going to register to the holmes CTF on Hackthebox?

Because I want a team to play with

[gray linden]

well i got my ram a bit to high but it was from bitdefender antivirus i deleted it afterwards
today i got like a black screen with like the "X" and the minimize to taskbar on my screen for one second

rn im playing rainbow six seige

what are the symptoms of crypto miners?

[whole patio]

"My ram usage is high and everything seems slow" is always something people notice, even if they have no malware at all.

That black box - any accompanying circumstances? Did you install or update or start something at that time?

Any maybe stop playing if you are looking for help at the same time

respect other peoples time here

[gray linden]

sorry i can respond at the same pace and no i did not open or uninstall something at that time i was just looking on temu

[whole patio]

so thats something then.
Has any antivirus software currently reported findings?

[gray linden]

no

[whole patio]

Alright, assessment so far

[gray linden]

mind if i ask what is assessment?

[whole patio]

looking at what we have

So unless you have more to go on.. like "I downloaded something shady and ran it" or "cracks", "keyloggers", some "mods" you installed or anything like that.. we only assume compromised systems right now.

Are there other machines with the same operating system at you network?

do you share with family/friends/study buddys or anything like that

[gray linden]

no it's my personal pc

[whole patio]

I mean the network

[gray linden]

like

if my family members experience the same problems?

[whole patio]

Since we have pretty much nothing to go on right now - could be a family member that got malware, and it had opportunity to spread. Could be that you have an outdated router somewhere that has known vulnerabilites, etc.. we don't know your situation and we can't read your mind.

You ask us "how to remove malware", but unless we have an idea about what is going on over there, thats hard to tell

Thats why I said "it always depends"

If I tell you what files to save somewhere and reinstall, but the attack vector was somewhere else, we have not gained anything

[gray linden]

yes i might ask some hard to ask questions i don't really know what to do

[whole patio]

thats why I am leading you with questions

So unless you have more to go on.. like "I downloaded something shady and ran it" or "cracks", "keyloggers", some "mods" you installed or anything like that.. we only assume compromised systems right now.

This was one of them, btw

[gray linden]

sorry for wasting time just for the record is microsoft the best antivitus and should i not waste my time with the others?

[whole patio]

I see you are on a server with a ps3 emulator.. got any new games there that where cracked, for instance

[gray linden]

yes

but the sites i visited show really no problems with that

like keyloggers or spyware

[whole patio]

Its not unusual that those get picked up days, weeks, even months later - its always a cat&mouse game for malware signatures to get updated. Especially if malware is not widely spread.. if its only "people that downloaded this ps3 image", it might take a lot longer than for example "I sent my malware via email to 250.000 people

Alright - what I would do, if I were in your situation. Assuming that you think you got some malware, and whether or not thats true, you want a clean slate

[gray linden]

so to redownload windows again?

[whole patio]

find some external hard disk, thats big enough to hold all the data you want to keep. pictures, documents, the %AppData% folder, password container, etc-

Make a backup of your files there. Store the external hardware away somewhere afterwards, we are not touching that one for at least a week

get a windows installation media, that was downloaded and flashed on a different machine.. ask friend, family, colleagues to do that.

Install anew from that installation medium. Do not connect to any shares like oneDrive, dropbox or whatever you kids use nowadays .. feel free to install programs from their official sources.. use those to change passwords at different services.. like your mail password, your steam password, etc

Check whether anything that seems odd happens

After about a week - attach the external hard drive. Scan it with any antivirus you like, I personally like to recommend malwarebyte antimalware.. in its free version its not a regular AV software, its more something you use if and when you need to check something

if it detects something, we look at that. If it detects nothing, I would assume that media and document files are fine. and reassemble your data structure from there

====

That is what I would suggest, just to ease your mind though.

So far I have not seen anything that actually confirms you have malware on your system

and keep away from cracked software .. beside cheats and mod packs its the number one vector for attackers

use a password manager, activate 2fa authetification where possible, get a haircut .. the usual advice

[gray linden]

thx i already did the haircut tho

[whole patio]

👍

and if you want, keep the hard drive as it is.. look again in a month, see whether you were right and that there WAS something fishy there.

I think my personal record was malware, that got detected 3 years after the fact

[fast night]

Hey guys ,i am trying to secure my phone well for fun and I made a statful firewall for it and I prevented apk from executing any port for long session ,and I was wondering Is there any execution beside apk in the phones by default i should block too or apk is the only danger

[whole patio]

a client had a machine, that had the "VLC plus" player installed. That was a rip off of the real vlc player, and had at various times been used to install adware/malware.. they actually found the malware, but did not attribute it to that software

jellybeans was also malware that went below the radar for a long time

at least there used to be at least one version

[plucky moon]

I was able to get to the booting part of tails but now it shows this. The next step is the persistence option that should be popping up. Does anyone know how I can fix this?

[olive raven]

Does anyone work in cyber security or has worked in cyber security that i can interview briefly?

It's for a paper for my class

[hardy pulsar]

@ some1 called i bark at computers n see if they can help u

[feral raven]

hey, had a quick question. Is it good that i use nala instead of apt in kali ?

[chilly merlin]

I mean if it’s good for you, then it’s good.

Just a different package manager. Some people still prefer apt. Sort of a broken wheel situation.

But that’s the beauty of Linux right? It’s whatever works for you.

@feral raven

[tame sluice]

Anyone have experience with bug bounty?

[torn sun]

I’m iso help removing a virus from my laptops if anyone can help or point me in the right direction it would be most appreciated

[crisp star]

Grab MalwareBytes and run a full scan and pray it finds something. But if you want to be on the safe side, you just do a fresh Windows 11 installation.

[torn sun]

It’s staying after a clean install and wiping disk from parted live

[fathom summit]

Why do you think you have a virus?

[torn sun]

MB has no direction

Hang on I’ll share some pics

[fathom summit]

You can’t share pics. Could you explain ioc?

[torn sun]

Thousands of registries that are new and super sketchy, a DVDRW volume that’s ONLY been seen in winPE cmd prompt and is writ protected that I can’t remove, remote featues that are disabled turning themselves on , a lot more crap as well

[crisp star]

That is not a sign of compromise.

[torn sun]

I’ve wiped every disk with gparted multiple times and done fresh installs with different new windows via jump drive and immediately after install it returns

[crisp star]

There are a few registries that are interesting for malwares. One of them is for persistance.
https://attack.mitre.org/techniques/T1547/001/

[pliant palm]

ya wipe it is my call

[pliant palm]

older windows reads Old burn sectors of dvd / cd

so lets say you half burn a dvd (100 megs. ) change your mind and write NEW data older windows can "pick" what part to read new windows just reads the last one by default

[fathom summit]

Imo those are strange behaviors but they aren’t ioc by themselves. a virus is something you can verify, like a malicious hash, IP, or registry key. Its not accurate to just call that a virus without solid evidence, it could also be system anomalies or config issues. 🤷‍♂️

[whole patio]

https://dontasktoask.com/

[chilly merlin]

If you’re paranoid you can just replace the hard drive lol

[spiral notch]

lmaoo

same timing

[next dagger]

😂

[next dagger]

how many times would you keep asking this lol

[viscid crane]

@chilly merlin

[chilly merlin]

alr

lol

iw dev comes up with the interface

[viscid crane]

phy#0
Interface wlan1
type managed

you see that?

[chilly merlin]

pylon changed the name of the interface but yes i do. phy#1, interface PYLON, ifidex 2, wdev 0x100000001, addr, type managed

[viscid crane]

sudo airmon-ng check kill

[chilly merlin]

👍

[viscid crane]

sudo ip link set wlan1 down
sudo iw dev wlan1 set type monitor
sudo ip link set wlan1 up

[chilly merlin]

yea 2nd command didnt work

[viscid crane]

Turn monitor mode ON (robust)

0) Auto-detect the AWUS1900 (driver = 8814au)

IFACE=$(for i in /sys/class/net/wlan*; do d=$(readlink -f "$i/device/driver" 2>/dev/null || true); [[ "$d" == "8814au" ]] && basename "$i"; done | head -n1)
echo "AWUS1900 interface: ${IFACE:-NOT FOUND}"; [ -n "$IFACE" ] || exit 1

1) Stop services that interfere

sudo airmon-ng check kill

2) Try native monitor mode; if it fails, create a separate monitor iface

sudo ip link set "$IFACE" down
if sudo iw dev "$IFACE" set type monitor 2>/dev/null; then
MON="$IFACE"
else
sudo iw dev "$IFACE" interface add mon0 type monitor
MON="mon0"
fi
sudo ip link set "$MON" up

3) Show result

echo "Monitor interface: $MON"
iw dev

You can now capture on $MON (e.g., airodump-ng $MON or open it in Wireshark).

Turn monitor mode OFF (back to normal Wi-Fi)

Re-detect the base AWUS1900 iface

IFACE=$(for i in /sys/class/net/wlan*; do d=$(readlink -f "$i/device/driver" 2>/dev/null || true); [[ "$d" == "8814au" ]] && basename "$i"; done | head -n1)

If we made a separate monitor iface (mon0), delete it

if ip link show mon0 &>/dev/null; then
sudo ip link set mon0 down
sudo iw dev mon0 del
fi

Put the base iface back to managed and re-enable networking

sudo ip link set "$IFACE" down
sudo iw dev "$IFACE" set type managed
sudo ip link set "$IFACE" up
sudo systemctl restart NetworkManager
nmcli dev status

If you still get an error, run:

iw dev; iw list | sed -n '/Supported interface modes:/,/^$/p'

and check that monitor is listed and the iface name matches what you’re using.

i hope that works. im getting customers and jumped the gun

[chilly merlin]

all good man, ill figure it out, thx

[viscid crane]

tell me how its going

[chilly merlin]

am i spossed to put the 2nd part in a file and then run it bc thats what im about to do and then run it

[opal pilot]

what's the problem?

[whole patio]

The usual.. realtek

[chilly merlin]

yep, tbh instructions are kinda confusing for step 2

[versed pagoda]

Im trying to get a virtual machine on my desktop, I downloaded kali linux virtual box tor, and then i seeded it and i try to extract the folder and it basically says an unexpected error is preventing the archive from being extracted error 0x800FFF catastrpohic failure

[fresh forum]

Anyone got any tips into breaking into Kali Linux I’m a beginner when it comes to it

[chilly merlin]

#👥・new-member-guide

[whole patio]

there is no kali linux virtual box tor to download.. whats the file name of the thing you downloaded

[fresh forum]

Thx

[versed pagoda]

I didnt say it exactly right i went to kali linux selected the virtual box download and clicked tor

[whole patio]

filename

there is no "tor" button on the website

[versed pagoda]

Now u got me thinking dawg

check dms cs i dont got pic perms

[whole patio]

unless you downloaded from some weird sketchy site other than the official one

[whole patio]

you dont need pics permission to give me a file name

[versed pagoda]

Oh i was showing u the torrent

[versed pagoda]

kali-linux-2025.2-virtualbox-amd64.7z.torrent

This is the torrent file

[whole patio]

torrent then, okay - you do have a torrent client installed?

[versed pagoda]

Thats my fault abriviating torrent when tor is also a popular thing

[versed pagoda]

Yes qbittorrent

[whole parcel]

I understand u went to virtual machines then torrent docs or sum u went to torrent ?

[versed pagoda]

i already

did that

[whole patio]

your host OS is windows, I guess?

[versed pagoda]

yes

Might be the first problem haha

[whole parcel]

I stead of torrent see the lil arrow pointing down. Use that for 7z at least that's what I used previously

Instead*

[whole patio]

Alright. Every now and then Windows has a thing about looking at kali images and saying LOLNOPE, that is why its a good idea to download it into a folder that is excempt from defender, or whatever your antivirus solution is.
torrent should do its own integrity check here

[versed pagoda]

Yes im using windows defender

And how would i excempt a folder

I dont even have folder protection on

[whole patio]

https://www.google.com/search?q=microsoft+defender+exempt+folder

[versed pagoda]

doing that rn

[whole patio]

Please don't try to DM me ^^ we can do all this here

[versed pagoda]

Didnt try to dm you* it went through

But alright yeah that works with me

Just sent an image cause i havent unlocked the perms yet

Excempting it didnt work

[whole patio]

Do you know how to compare checksums?

[fresh forum]

Hey does anyone here know any browsers to stay anonymous

That don’t collect data etc

[whole patio]

those are not the same thing, but.. if we are talking about desktop browsers, I like to recommend librewolf and taking some time reading up on extensions/plugins to give you that warm, fuzzy feeling

[fresh forum]

Ohhh thank you

[rancid echo]

Yessir

[rancid echo]

Okay thank you sir

[umbral grove]

@wanton marsh @radiant stone do you to know how to do linux depoly

[granite vale]

Hardened Firefox is better than all

Imo

[whole patio]

If you use firefox and your usual routine after installing in is to go through all the settings and turn off reporting, tracking and activate enhanced privacy setting.. save yourself to trouble and take librewolf right away.. its firefox without the stuff no one wants

No "we have AI now, too, to group your tabs!"

[chilly eagle]

[honest pendant]

How to take over a domain ? Any resources writeup or YouTube video? If you have kindly share and ping me

[whole patio]

you mean like a domain transfer request to a domain registrar?

maybe describe what you want to do

[honest pendant]

Takeover like if there is any misconfiguration we can get full access to the domain.

[whole patio]

an internet domain, or a "this is my AD and this is my domain controller"

[honest pendant]

Internet domain

[whole patio]

You dont

There is no administrator in a company that "configures his domain wrong, and then its gone". Those are registered and handled by domain registrars in constant communication.
You can put up a domain transfer request with any domain registrar and say.. you know what? gmail.com .. I would like to have that. And they take your PII for that, and inform the current owner.. then they all laugh about you and tell you to pound sand

what "does" happen though.. from time to time.. is that people forget to pay for their domain, and after a while it becomes legally available

[honest pendant]

I'll be real i want to take over my university website 😬

[whole patio]

There are oh so many things I would like to say now

but.. let's keep those in the realm of vivid imagination and go "Gosh, that sounds super illegal, and thus #📜・rules 3 goes into effect"

[honest pendant]

Okay I won't repeat this again

[devout vine]

Is the cybersecurity roadmap on roadmap.sh good?
https://roadmap.sh/cyber-security

[whole patio]

It's so often referenced, that its neither good nor bad anymore, it's just a reference lots of people use by now. Whats your next question there?

[devout vine]

I was wondering if it's something I should follow

[next dagger]

looks pretty good to me. no harm in following it but make sure you do your external research on each concept mentioned in the flow. explore different resources, sign up on thm/htb, practice web attacks on portswigger academy and keep learning about stuff from there

[devout vine]

Okay, thank you

[next dagger]

though this isn’t the entire thing and you definitely don’t want to consider yourself an expert if you go through this because the concepts are just to provide you the knowledge you should know before mastering something

[next dagger]

you can’t takeover a domain, but a subdomain takeover is very possible and frequently happens in the wild but obv you don’t want to test your uni against it and cause problems to yourself

[chilly merlin]

Listen to this

https://m.youtube.com/watch?v=G399x-r5ZSw&list=PLtN43kak3fFEEDNo0ks9QVKYfQpT2yUEo&index=11&pp=iAQB

Then, don’t do it, lol.

[bold cradle]

hello guys iam a new member

did anyone completed ejpt ? if yes then can u give me any suggestions?

also iam new to cybersecurity and all....

[hardy pulsar]

If youre new you should complete the basics first

Majority of the people here have done ejpt

@bold cradle

[finite vessel]

If you dont mind me asking, what's ejpt

[hardy pulsar]

Ejpt is a specialised certification for red team pen tester

[finite vessel]

oh ic

sucks being a complete noob 🫠

imma try learn allat all the way

💪

[next dagger]

oops jk wrong channel

[hardy pulsar]

Im not advanced enough for that 🤣

[next dagger]

dw i was jk

[hardy pulsar]

Alright 😂

[hardy pulsar]

If you want to improve go on HTB and THM to improve

[finite vessel]

aight thx m8

should i try doin both

[hardy pulsar]

Yes it will help theres a guide if you want to follow it in #👥・new-member-guide

@finite vessel

[next dagger]

no. pick thm and grind it for like a few months then switch to htb

both have different environments to learn

[finite vessel]

got it got it

[chilly merlin]

Being a complete noob is great. Lots of easy wins in the beginning.

Enjoy it ❤️

[finite vessel]

yeah for sure!! felt like a community like this is gon help me out big time

thanks man 🙏

[versed sail]

I am using caelestia dots in Arch linux.

and there is a particular part here : https://github.com/caelestia-dots/shell/blob/main/modules/dashboard/Performance.qml

I want it to be in C and not F right

But I don't know where it exists in my system

It's not in the config file

It does exist here : ~/.local/share/caelestia/shell/modules/dashboard/

but when I edit it, the changes does not apply

function displayTemp(temp: real): string {
    return `${Math.ceil(temp)}°C`;
}

I used this

Either my code is incorrect, or the file is not connected to it

Need help

[chilly merlin]

What the hell

[bleak geyser]

which laptop should i get to learn hacking ?

or can i use my windows desktop

[chilly merlin]

You can. It doesn’t even have to be great. You could get by with 4 cores and 8gb but windows is gonna run like a poop stick.

6-8 cores is gonna be nicer and 16GB ram

If you go with Linux it’ll utilize your resources better, so if you have a lower spec laptop it’ll kinda make up for it.

I personally recommend grabbing a refurb thinkpad.

I got a t490 for $200 off Newegg

Threw fedora on it

[finite vessel]

what linux distro

is good for beginners

i just installed mint on my old ass laptop

does that check out

[ocean parrot]

Hello everyone I looking for someone who passed CND EC counsil certificate , I prepare for this certificate I need help to know how to prepare for exam and advice to pass exam 😊

[chilly merlin]

If you want something more like windows to ease your way into Linux, Mint is the perfect choice!

[spiral notch]

Check the last pin

[chilly merlin]

If you want something similar to the ease and usability of windows, but more obviously Linux, maybe give Ubuntu a try.

[spiral notch]

And jump to that message

On this channel

[finite vessel]

ohshi mb gng thx tho

[finite vessel]

thanks 🔥

[spiral notch]

It’s a very verbose and descriptive paragraph of most popular distros

Their pros, cons, my opinion, and different ways of installing Linux too

[chilly merlin]

Honestly playing around and trying out different distributions is ja healthy part of learning Linux.

[spiral notch]

wrote it all myself, was a pain in the ass and like 10k characters

[chilly merlin]

Don’t get too caught up on which distribution is best at this level.

The answer is always gonna depend on your use case.

[finite vessel]

aight thanks guys 🫡

[chilly merlin]

No problem! Enjoy the journey 🙂

Speaking of which…

https://linuxjourney.com

[finite vessel]

I know this is kind of a stretch but my school provides free access to almost all of the courses in Coursera

and I've been keeping an eye of Google's cybersec professional cert

is that the best one on coursera or should I go with IBM's

[bleak geyser]

@chilly merlin thanks for ur help bro

[twin sentinel]

I think it depends on your career goal and learning preferences

I would recommend Google's certificate if you are just starting with cybersec.In other hand, if you're interested on specific topics and you do have basic knowledge of IT, I would say you chose IBM's certificate

[finite vessel]

thx brother

[finite heath]

Hello there,

I need to know which extensions I should use as an AppSec?

For now I have installed

- uBlock Origin
- Wappalyzer
- User-Agent Switcher
- FoxyProxy
- Open Multiple URLs

What else I should know about...?

Just the names are also fine.. I will look the details about them on Google later.. just want to know the names..

[viral ridge]

what could be the issue if I can’t copy and paste from my main system to my VM fusion

[lost vapor]

what hypervisor are you using?

and what operating system to you have virtualized?

[chilly merlin]

how do i get started in cybersecurity? im beginner at python and lua

[crisp star]

If your goal is to get a job in the end, you probably want to pursue a degree in cyber security.

[chilly merlin]

thanks

appreciate it

[crisp star]

Else you have the usual learning platforms like TryHackMe, HackTheBox and PortSwigger lab.

[chilly merlin]

alright, thanks

[whole parcel]

Also the Linux foundations website. Idk if that's already been posted.

[chilly merlin]

Any time 🙂

[chilly merlin]

hey i think i have a problem with task 3 in tryhackme

Gonna have to specify which room.

Offensive Security Intro

[chilly merlin]

it is Offensive Security Intro

https://discord.com/channels/521382216299839518/522158539129618453

when i run dirb http://fakebank.thm it gives me this error : "fatal too many errors connecting to host"

[viral ridge]

VM fusion

[viral ridge]

Ubuntu

[viral ridge]

Ubuntu And Kali Linux

[chilly merlin]

Double check your target url and command syntax

[lost vapor]

if it's vmware they have a toolkit you can install on your vm
within the menu bar

[chilly merlin]

i did thats the thing

Do you have a bad network connection 🤔

it just says (!) FATAL: Too many errors connecting to host
(Possible cause: COULDNT CONNECT)

[chilly merlin]

not really

Maybe check url and syntax one more time lol

i did 4 times 😭

i executed the command like 5 times

i mean i got the answer in the main page

and not the VM

so

https://discord.com/channels/521382216299839518/522158539129618453

im trying to figure out why

thanks

Yeah, no prob.

[chilly merlin]

quick question, can i post any achievement in #1261679451251409007 even if its small

Yeah bro

💯

Even the small achievement matter :3

Cyber is a long journey, and there will be many small steps along the way. Definitely celebrate them 🙂

[viral ridge]

I sent a picture to your dm so you can guide me through it

[chilly merlin]

thank you brother

[versed sail]

guys anybody help please

[lost vapor]

do follow along with the article over here: https://community.spiceworks.com/t/a-step-by-step-guide-on-installing-vmware-tools-on-linux-windows-macos-freebsd-and-solaris/1014028

[versed sail]

DISSO

help me T-T

[lost vapor]

heya:)
i'm afraid i'm not as familiar with arch as i've never used it before

[versed sail]

uh oh

nono but it's not about arch

specifically

I just need to locate where the dotfile is in

I wiped out my entire de, keyring, sddm, dependencies, browser, and so much ... earlier in the process :D

finally fixed it in 3 hrs

[lost vapor]

ohhh

did you find the location of the file specified?

[versed sail]

no

still not

Do you wanna help?

[versed sail]

just needed to find this one on my system

[lost vapor]

tried that?
find / -type d -name dashboard 2>/dev/null

[versed sail]

YES

thanks!!

I got it

[chilly merlin]

😄

[versed sail]

@lost vapor Thank you so much! It worked. I found the file and fixed it

[finite vessel]

yall, should i use obsidian as my note taking shi

so that i can also go back and reference my knowledge repertoire

[chilly merlin]

You should at least give it a try.

Some people quite like markdown and the obsidian graph view. Kinda where it gets the nick name “second brain”.

@finite vessel

[finite vessel]

yes, quite aware of the markdown thing-y

[chilly merlin]

?

[finite vessel]

lmfao i was thinking of not taking down notes but i realized that's too stupid of me not to do

[chilly merlin]

It would be foolish to venture down the path of cyber security and not take extensive notes.

It’s too much to remember.

[finite vessel]

and my current note-taking app doesnt work with me (hierarchy-based, like folders)

[chilly merlin]

I feel that.

[finite vessel]

real

thanks you a big help today

🙏

[chilly merlin]

I landed on notion after trying a handful of note taking apps.

I personally just prefer the ease of use and simplicity.

I’m currently too lazy to bother with markdown XD

Which is pretty bad of me, but hey, everyone’s brain is different lol.

[chilly merlin]

Hey, if it’s helpful to you then I’m glad 🙂

[finite vessel]

I used a lot of Notion before, but for some reason I just stopped using it (prolly im the lazy-to-take-notes type)

This is probably a "me" problem 😂

[chilly merlin]

But yeah your instincts are spot on, it’s good that you identified the need for good notes early on!

[chilly merlin]

Heh, no worries. It takes some time to develop the habit.

You’ll refine your methods for taking notes along the way and become more efficient.

Just keep at it ❤️

[finite vessel]

Appreciate the push man, thank you lots 💟

[chilly merlin]

💯

I look forward to hearing more about your journey, later on!

[bold cradle]

Why don't you try hyde? I am currently using it, and it is very good in performance and all

[versed sail]

I think I am good. I am getting used to caelestia

[bold cradle]

👍

[woven anvil]

Take notes in your preferred way, then get chatGPT to turn it into markdown, then review it for accuracy.

Eventually, you will want to make "small changes here and there" to what it did, and you can get familiar with the markdown syntax over time

[woven anvil]

^ I think i meant this for you

[rancid echo]

How do i contact support

[chilly merlin]

@woven anvil that’s actually really clever, thanks for the tip!

[finite vessel]

Yes!

I prompted my GPT to be fully optimized to convert my long ass noted to concise marked down notes

[fierce lark]

Hey , now i was watching a 15 hours Ethical hacking course and i dont think it would give me everything i need of course but what do i need more to improve my skills and get better at it?

[chilly merlin]

Practice in labs.

Set up your own or use something like tryhackme/hackthebox, or do all 3 ❤️

https://overthewire.org/wargames/ is pretty cool, too. Just get your hands dirty.

@fierce lark

[fierce lark]

thank you , will try them out

[fathom summit]

Hey @rancid echo , sorry to hear about that. We do not do account recovery here #📜・rules but like someone mentioned earlier you will need to contact the platforms support team. Best of luck.

[next dagger]

he posted the same text earlier and got the same answer earlier

[spiral notch]

such a broad question

[neon ore]

Is anyone here familiar with the OCR technology from Rocketbook?

I want to try something but I'm not sure how to proceed.

[spiral notch]

https://dontasktoask.com

[spiral notch]

why not do it manually?

if you’re trying to clean up your server

[weak thorn]

Sup yall

[opaque rock]

Hello

[weak thorn]

Hey

[opaque rock]

Cuz i´m lazy

122 channels yk

[spiral notch]

eh shouldn’t take longer than like 5 mins lol

unfortunate but atleast you’re not breaking any tos

[opaque rock]

nahhhhh i´m lazzzzzzzzyyyyyy .-.

[opaque rock]

Could but...

[umbral grove]

@fathom summit

@stray mural

scamers are the worst of rats

1076065145475825684

[forest finch]

@lost vapor please ban the same guy...

[umbral grove]

they were

and it is a scamer

[valid belfry]

hello everyone

[coarse pike]

help

[open laurel]

Hi dropping by say hi that I’ll become a regular I’m looking to learn

Everything this has to offer

[next dagger]

let’s see how consistent you are when you say you’d be a regular

[open laurel]

And why is that

[next dagger]

people say they’d be consistent and all and then no clue of them after a few days lol

[open laurel]

If you don’t hear from me it’s my intent no more no less but one thing you should know about me is that my time is important so if I say I’m going to invest time in to something I’ll be there or I’ll be watching

[next dagger]

okay but don’t just watch, participate as well

[open laurel]

You right sometimes I prefer to sit back and watch you won’t understand trust me

[woven anvil]

I lurked on like 30 different discords before i started talking on a few of them to practice the knowledge i've built up.

[open laurel]

Good that and I have my reasons mostly because I like to stay incognito sometimes helps

[next dagger]

i understand that and respect it, but what i believe is the more you start communicating with the right people the better you understand something and also make friends. people who won’t look down at you because you don’t know something

[open laurel]

I want friends I just can’t bear more though so give me time fyi tag I will respond

[languid spruce]

I’ve finished school for cybersecurity. Got some certs and applied at hundreds of places and not 1 interview… I need to start my career somewhere and idk where to go anymore. I can do remote as I have everything I need and top Quality Office space. Anybody know anywhere I can apply at at Tier 1 in Arizona?

[quiet lion]

Can I get some help?

[umbral grove]

sure what do you need

[quiet lion]

You’re good, thank you but someone already helped me

[umbral grove]

oki

[jade bone]

Signed up for HTB been doing a few modules but am running out of cubes, I started with 40 cubes and am now down to 10. Is there a way to get more cubes and if possible for free? I'm not trying to spend heaps of money but also dont want to keep shifting between htb, thm etc I mainly want to kind of finish one before I do the other. TIA 😁

[umbral grove]

@unkempt summit never come here agian we dont care for you

@stray mural

can you time them out untill mods ban thx

fake staff and scamer

[woven anvil]

they just join the server, and DM you out of nowhere?

[umbral grove]

no they sent a inv here i joined ther server they claimed to be staff for owlsec and i asked who is the current owner and they dint know

[languid spruce]

I’ve finished school for cybersecurity. Got some certs and applied at hundreds of places and not 1 interview… I need to start my career somewhere and idk where to go anymore. I can do remote as I have everything I need and top Quality Office space. Anybody know anywhere I can apply at at Tier 1 in Arizona?

[next dagger]

if it's still not resolved just make a ticket

[next dagger]

you asked the same thing above lol

[umbral grove]

i have

[languid spruce]

Yeah but no one answered

[umbral grove]

just need some more staff

[umbral grove]

what dose you cv look like

[languid spruce]

Went and completed cybersecurity school and have like 5 certifications. Learned how to deal with routers, servers, troubleshooting them and computers and building computers from scratch

Kinda the basics but I need to start a job somewhere and begin my career

[umbral grove]

try with help desk

[next dagger]

i just like a flavor that boots faster and has the stuff i need without fancy widgets flying all around. like dont fancy it too much, keep it simple yet appealing (obv not those ultra-fancy owl backgrounds you sent earlier). make a logo kind of thing and let it be the face of the os

[hollow aspen]

Need help with a MEDIUM machine (first medium).

[chilly moth]

Hello guys I have a Question. I'm Currently taking a course on cybersec in coursera and I wanted to ask what to do after I finished this course? and improve on my skills to be hirable. I want to get into cybersecurity field as a soc analyst and I need guidance from people that are already in cybersec field. Thank you

[lost vapor]

either hackthebox or tryhackme are good platforms to further practice and gain more knowledge in the field

[crisp star]

For SOC analyst, you actually look into recognized certificates like BTL 1, BTL 2 and CCD.

[crisp star]

https://youtu.be/iUAqNI_zTOc?feature=shared

https://youtu.be/CwqzjEthweA?feature=shared

The interview one is pretty amusing 😂

Especially if you already work as a SOC analyst

[whole patio]

That's actually a really good video

[opal pilot]

roadmap vs reality, that's the most relatable thumbnail I've ever seen 😭

[chilly moth]

Thank you guys

[still rose]

Yo guys, i was wondering if there is anyway to spoof my IP to a burp collab link. There is this bug bounty website which takes my ip when i login directly from the tcp handshake (the network layer) and then puts that in jwt token. I wanna test it that what if i could put something else in the ip field. And no the basic alg, none bs by directly changing the jwt doesnt work. Is there anyway to achieve this ?

Might lil stupid but if there is some way to spoof it, ill give it a shot