👥・help-me

[spiral notch]

cryptography will require lots

[grave delta]

Ik but I don’t know why math scares me a lot The thing is during my school. I have performed very bad, but I kind of want to improve, but maths really scares me specially calculus. The advice you gave away your I got this very same advice. I was asking Perplexity. AI

[brave tendon]

Hello I'm new here

[spiral notch]

perplexity is the worst ai

also u won’t need calc for cybersec ew

dw

[grave delta]

😭😭 I got the pro subscription of it and I was using Claude 4.5. I guess in Perplexity Pro and it told me. I would be needing calculus for cryptography to be accurate. It said discrete mathematics. I might be wrong is discrete mathematics calculus only right?

[spiral notch]

No is not

Discrete math is a different field

[plush phoenix]

Does anyone know of a way to hack back into an old facebook account? it's my account from years ago that my ex locked me out of I can't remember the email and don't have the password anymore because he changed it and never gave it to me

[spiral notch]

we don’t help with illegalities

[plush phoenix]

its my account? so not technically illegal

[spiral notch]

its your account but its not your servers

facebook still owns the accoount and youd be hacking the entirety of facebook. not just your account

[plush phoenix]

Oh ok that makes sense I didn't think of it that way. is there a way to figure out what the email is? if I knew that I could get back in by using the email

[spiral notch]

you can attempt to contact facebook support

otherwise no

[plush phoenix]

Oh ok well thank you anyways lol

[grave delta]

Can you please guide me for the mathematic portions like I know it’s lots of work, but I really have no idea. Could you just really tell me what are the topics in mathematics like chapters for example, linear algebra or probability of statistics like what are the topics I need to cover in mathematics so that I don’t face any problem in future for cyber security

[feral lintel]

I don't believe there to be such an immediate correlation between math and Cybersecurity, unless you go into very specific fields.
My view with a math degree might be biased, but I wouldn't worry too much about learning all that prior to computer science or InfoSec.

[ivory sigil]

Can I do both blue and red teaming

[feral lintel]

sure. there is in fact a thing called purple teaming

[spiral notch]

depends on what field

in cyber

youre doing

ive said that already

[fallow schooner]

Yoyoyo

I Need some help

I'm seeking for a script maybe or something to search the entire internet for a TV show/film

[feral lintel]

The word you're looking for is "search engine".
I believe Google is still popular these days

[fallow schooner]

Nono u're not getting me

[feral lintel]

I do

[fallow schooner]

Yeah actually u're making me think at dorking

I'm searching an italian series from 1861 hahahaha

It's pretty hard to to find It

[feral lintel]

That seems... Quite old for a TV show, lol

[fallow schooner]

Yeah

Gf mom want to watch It so i need to find It😂

[feral lintel]

Wow, good luck with that.
That might almost be a project for IRL search, antiquarian shop, library, that kind of place

[hybrid onyx]

Hello, months ago i was very interested in cybersecurity so i started to watch some courses about penetration testing and yes i got the basics and i learned how to use some tools like nmap, metasploit, sqlmap... i learned a lot about tracking, backdoors, footprinting, telemetry's and i became so careful with using apps since then, after i just lost hope and i stopped learning because my path wasn't clear, i didn't know how that will help me in my future especially i'm still studying. i just need some advices guys

[chilly merlin]

#👥・new-member-guide

It's a structured path

[hybrid onyx]

i almost did all those THM rooms

[chilly merlin]

Htb?

Portswigger?

@slow edge

sus

[slow edge]

Ya I handled it

[chilly merlin]

He posted it in more channels watch out

[slow edge]

He is gone 🫡

[chilly merlin]

https://tenor.com/view/lego-batman-salute-smile-greeting-gif-17150810

[timber stone]

Hello, I'm trying to learn kotlin for app development are there any sites I can use to find projects for beginners.

[next tinsel]

GUYSu, i needs help with a galaxy tab a9 x110

ts is stuck in fastboot mode what do i dooooooo

it belongs to a fren and he want me to give it back to him on monday

[vivid geyser]

Which channel is for OS development? Or where can I find people in this server who are interested in OS Development

[slow edge]

We don't have specific OS dev channel, but we do have places like #😎・systems #💬・programming #🤖・hardware-hacking where you can find people interested in OS development

[slow edge]

https://github.com/solygambas/kotlin-projects

[timber stone]

Thank you

[wind willow]

Can anyone help me bypass double counter alt account checker

[lost vapor]

we don't help with unethical activities

[wind willow]

But there are black hats here

[lost vapor]

doesn't matter, rules apply to both

and don't get scammed in dms

[wind willow]

I know that

[wind willow]

So black hat is legal ?

[slow edge]

A simple google search would say black hat is illegal! Ya there are all hats here, but they all follow #📜・rules and if you want to learn cybersec (legally) then you should also follow the same rules

[wind willow]

It's always confusing to me but I am cool with it

It's like teaching illegal things legally

[feral lintel]

if that is confusing to you, you really need to learn more about that craft.
It's like saying a baseball bat is illegal because you can use it to assault someone, and you "legally" teach it during baseball

[spiral notch]

just cuz some of us are blackhats does not mean we will help you with illegalities

[rain knot]

especially not in discord lol

[nova carbon]

hey @minor blade @shadow fractal @ripe panther any chance I can get a perma link for this server so I can share with my college club

oh wait, your server allows me to do it. nvrmd.

[sharp thorn]

Hey everyone
So I am in my 5th semester of my graduation and now they started the cybersecurity now and am more interested in it from the beginning but I need to pass and complete my remaining subjects too so am not started CS now I need to do something in this Cybersecurity for my portfolio so any suggestions,
I want to do projects and research also any insights of this also.

Thanks in advance

[chilly merlin]

#👥・new-member-guide

[sharp thorn]

Thanks for your help, i need projects and research. I mean what projects help to build my portfolio and research topics .

[chilly merlin]

It depends on what team ur interested in

I would highly suggest googling some labs or on yt

[iron pilot]

Hello I'm new and I will like to be tought to be a black hat

[feral lintel]

that's illegal, you will not receive help for that here, and the people that DM you are trying to scam you

[feral lintel]

what exactly do you picture when asking to become a "black hat"?
Cause if you actually want to be a criminal, asking on a public Discord server is a poor choice to start with

[torn harbor]

kk ty @feral lintel

i just need help recoverying the email without getting the police involved

[feral lintel]

google support aside there's little that can be done

[lofty sparrow]

This !!!

[lofty sparrow]

If they are anything like yahoo they will tell u tough luck make a new one just went through that

[whole patio]

No #📜・rules

[rain knot]

"....without the police getting involved" is a no go anywhere on Discord, fam. fix your comsec

[sharp thorn]

Thanks brother

[last thunder]

Hey guys! Im from India and a complete newbie, I want to learn hacking and stuff from you guys, is there anyone that can help me or guide me not for cybersecurity but im really inclined towards ethical hacking and stuff

[feral lintel]

you want to learn ethical hacking, but not cybersecurity? Did I get that right?

well, there is something like #💕・free-resources

[vital smelt]

i wanna learn aswell

[feral lintel]

#👥・new-member-guide is also quite extensive

[last thunder]

Not like i dont wanna learn cybersec its just that I really get a adrenaline rush when i hear oh this guy hacked a website, oh that guy got into a company’s database like its really mesmerising for me so yea

[feral lintel]

huh. well, if you want to be on the news as a criminal, not sure if we ~~can ~~ want to help with that.

but CTFs can give you quite a rush, too

[last thunder]

Not as a criminal but like recently one of a guy in my country found an issue wherein Nasa had easy access to its database so he reported the vulnerability and got into the hall of fame

[feral lintel]

gotcha. like a bug bounty hunter?

[last thunder]

Yeaa exactly like that

[feral lintel]

well there are tons of resources in those channels I linked, you could take a look there
personally I'm also a big fan of the Hack the Box platform

[last thunder]

Sure Ill check on that! thanks alot!

[wind willow]

So if someone did help me it's illegal?

[spiral notch]

Wdym

[wind willow]

Nevermind

[dense mortar]

no stop asking ffs
if they could they would just report it to our bug bounty program
not be hanging out on discord

[woven anvil]

@torn harbor
Please stop asking this #📜・rules
Final warning.

[spiral notch]

what’d he ask

[feral lintel]

the usual, hacking google kind of stuff

"for learning purposes" I believe

[dense mortar]

something about hacking gmail

[spiral notch]

ofc lmfao

[dense mortar]

which is ironic bc i literally work for them

[spiral notch]

me and a lot of colleagues would never work for Google even with good conditions - the carelessness of big corps about smaller employees is insane, as well as privacy concerns and disagreements with surveillance expectations and goals

[torn harbor]

yo @dense mortar can you get my email back for me?

[spiral notch]

no, he will not

[dense mortar]

no i don't work in support
you'd be surprised how many people report to our bug bounty with shit like this
like how is bug bounty easier to find than support

[dense mortar]

congrats i guess
but i like working there and i need money

[spiral notch]

fairs !

[limpid delta]

I use windows 10 on the site a had about a tool for brute-forcing called dirb, I want to ask is it like and application or it a langues built in site the web to access infor.

[haughty dawn]

my first infosec job was at a tech megacorp. i don't regret it at all, i wouldn't have my current career without that job. but i also wouldn't want to work somewhere like that again, being a numbered cog in the machine sucked.

[haughty dawn]

what you said is hard to understand but you might be talking about dirbuster

[limpid delta]

Yes

[dense mortar]

megacorps vary based on which corp and which team and which role

[limpid delta]

Is dirb like a web langues built into a website or is it an application

[haughty dawn]

https://www.kali.org/tools/dirbuster/
https://github.com/OJ/gobuster

[deft violet]

Its a command line web content scanner. One of many tools that all do the same thing. Looks for directories and files.

[limpid delta]

I wanted to know if it's can be installed to a computer like every other application or whether it on a website content

[haughty dawn]

their message answered that. you can also read the links

[haughty dawn]

yeah, i loved my team and job, but ultimately we were still cogs. whole red team got laid off and everything we built wiped, just because the stock dropped a point

at a much smaller place now, work isn't as fun (blue vs red) but i have way more impact and company seems to care more about employees

[limpid delta]

Thanks all I understand it more now it a Linux application I was using window to search that is were I was stocked out

[haughty dawn]

gobuster has windows releases

[limpid delta]

I try but can't download

[haughty dawn]

why not?

[limpid delta]

I visited the website you sent for me I don't see the download link of the gobustet

[haughty dawn]

https://github.com/OJ/gobuster/releases

[frail stirrup]

can someone point me towards the nonce section

[feral lintel]

the what now?

that word has some vastly different meanings, just from looking it up on Wikipedia....

[frail stirrup]

in the html context

[feral lintel]

phew, much better than the British slang meaning
I'm afraid I can't help you then ^^

[limpid delta]

Thank you I have downloaded 6

[haughty dawn]

6?

[hybrid swallow]

Hi guys! early on I was doing some kind of ctf and got to a path into the domain that has a shell.php. But now that path is behind a cloudflare. Is there a way to have it available again? or to bypass cloudflare :c

[spiral notch]

what ctf?

[hybrid swallow]

shared

[sacred nacelle]

Hey guys I need help with md5 stuff

[feral lintel]

Care to specify?

[deft violet]

Shared as in other users are using the ctf? You're probably seeing someone else's php shell upload. Your best bet would be to figure out how they got it there.

Unless youre referring to the htb box named shared, in which case its a retired machine and has write ups online.

[drowsy crane]

Hey! How you find some or the location of the place where some is trying to charge your debit card? I haven’t it physically with me but someone is trying to charge my card somewhere else

[deft violet]

Contact the bank they can tell you. And lock the card immediately

[deep pendant]

Is it worth studying C++ or Python for pentesting/red-teaming?

[spiral notch]

Python for a lot of the automation

if you’re going into red teaming

[dense mortar]

it doesn't matter

[sacred nacelle]

I’m trying to get an invite code but it keeps coming up wrong they have given me the code it’s in js

[slow edge]

Is it some kind of cryptography competition?

[sacred nacelle]

Its for a job?

[feral lintel]

You are being very vague, even if we knew that this was for a legitimate purpose, you haven't provided any information that would make help even possible

[sacred nacelle]

https://offsec.jobs.division5.io/challenge.js

I can’t send photos here?

It’s a graduate position I just can’t get in there tbh I don’t have much experience that’s like everything I can give you

I can’t send photos here?

[sacred nacelle]

Sorry forgot to tag you

[feral lintel]

Hm, currently on my phone, might be easier on a computer, lol

Isn't that just a CAPTCHA sort of thing? Never seen that before

[sacred nacelle]

Umm I don’t think it’s a captcha that’s just the page a block of code and then there’s a /api/seed where I can get the seed from but every time I’ve gotten a code it’s wrong so idk what I’m doing

[feral lintel]

Like I said, though to navigate on the phone, I just read something about a code that refreshes every minute, sounded like a mechanism against automation.
I could take another look from my computer tomorrow, perhaps someone else has some insight in the meantime.

I think sharing pictures is tied to a level on this server btw, I admit, that makes troubleshooting even more difficult

[deft violet]

Can share images in chat2 at level 10

[sacred nacelle]

Ohhh okay ohhh it doesn’t show the whole chunk of code written on the page?

[feral lintel]

I was a page prior to that, the listing. No offense, I don't like following stranger's links directly and prefer to find my way there through Google 😉
Didn't check thoroughly

[feral lintel]

Isn't that the subscription one?

[deft violet]

Nah it unlocks at 10

Pretty sure

[feral lintel]

Ah, for me it showed that I have to subscribe or something, lol

[sacred nacelle]

Ahhh yes fair enough was trying to be less vague all goods

[feral lintel]

Oh you're good, thanks for the details. Sure we can figure it out

[feral lintel]

Lol, just took a screenshot and then remembered that I can't share pictures here either 🤣

Something about an OwlSec Server subscription
Might be different with nitro?

[woven anvil]

@lilac lake
Is there a reason you are spamming every chat with this link?

[lilac lake]

I just wish if anyone will be needing to upgrade to any MacBook Pro

[lilac lake]

But no big deal just wanted to stay in a system

[lilac lake]

The link got no harm

[woven anvil]

Just don't spam all the chats with it. If you want to talk about it, then #💬・old-gen-chat

[lilac lake]

Ok

[left edge]

i am new to the field wanted a career change from HVAC i bought the security 701 book to study with the practice question book but its still not clicking is there something else i could study as well to help me get a better understanding

[open prism]

Is there anything related with algorithm. Which one i can learn and use it for my working purpose?

[jovial light]

Have you checked out the online course for Sec+ 701 by Professer Messer on Youtube? He does a pretty good job of breaking things down and making it easier to understand concepts

[chilly merlin]

#👥・new-member-guide

[chilly merlin]

I don't get ur question

[bronze osprey]

Yoyo wassup

Any way to get the home adress with an ip adress?

[chilly merlin]

? I can't help u with that

[plush coral]

there are websites for that, but remember that things like blackmail even online are illegal

[bronze osprey]

I’ve been looking for reliable websites that’s provides accurate informations actually, couldn’t find any

[chilly merlin]

That's unethical for us to tell you I hope u understand

Can't

[craggy tide]

It's not possible at all?😭😭

[woven anvil]

I have already responded to you in another channel, please stop spamming this

[chilly merlin]

It's unethical for us to help u with that

[craggy tide]

This is just the second and you guys reported me as spam😔

[chilly merlin]

It's cz we can't help u with that req

[arctic rampart]

Hello

[whole patio]

tf you are talking about

[plush coral]

the guy was talking about finding home-addresses from ip...

[whole patio]

And your answer was BS

You cant find any home address from an IP, not even remotely

[plush coral]

I was able to

[whole patio]

You think this is up for debate? No wonder you flag an OpenAI guild tag

[plush coral]

I mean you can check it yourself, I have nothing to prove to you

[whole patio]

Its not something I am remotely unsure about. It can't be done. Behind the providers NAT on mobile, or the address allocation on IPV4 and IPV6 only reaching towards the last known DSLAM or cell tower, and rotating IP allocation.. this is technically not possible.
I am just point this out, cause all the time we get kids and young adults who belief this fairy tale and ask how to do that, and usually people with more actual experience are there to set the record straight. Just making sure now that your nonsense is not left uncommented

[plush coral]

I'm sorry, but I was able to get a pretty precise location on one of my friends using their IP.

[whole patio]

"a pretty precise location"? You were talking home addresses earlier

if you check up my IP online, it shows something about 150 miles away.. is that "pretty precise location" in your eyes?

You tried to sound like you have an answer, but the reality is you are very unclear about the reality, how networking works, how the infrastructure functions.. so it's okay to just now reply to a question, if you do not know it

[woven anvil]

@raw vortex Please don't ask for pirated media

[whole patio]

#📜・rules We are not helping with illegal stuff

[raw vortex]

so i will reframe my question, any place to learn free other then yt ;-;

[whole patio]

#💕・free-resources

[raw vortex]

some dude in dms actually gave me idk now if its real or fake

[whole patio]

We find out in a short while, when you show up again complaining that you were scammed by someone

[raw vortex]

i aint downloading off a random website 😭

i jus needed courses to get started in the cyberworld so yeah

[whole patio]

#👥・new-member-guide

[woven anvil]

If its in DMs, its usually fake, because if they put it here in the open, they would get called out on it.

[raw vortex]

yea the wbsite looks sketchy

its smth downloadlynet and the domain

[digital harbor]

Hello @everyone

Newbie here😁

[whole patio]

you tried to ping ~100.000 people to tell them you are new.. in the help-channel?

[digital harbor]

What's wrong with that?

[stray abyss]

hello guys

[chilly merlin]

Well A it's not allowed only admins and owner can do that
B it didn't work cz normal user don't have those perms C becz it's annoying when ppl ping u

[chilly merlin]

Hello

[stray abyss]

i wanted to ask that

can we retrieve msgs

from an insta ID

[chilly merlin]

?

[stray abyss]

or whatsapp?

[chilly merlin]

Ur msgs?

[stray abyss]

no

[chilly merlin]

No u can't

[stray abyss]

oh

we can't also hack them right?

[chilly merlin]

Nope

[digital harbor]

Right

[stray abyss]

oh thanks for help

[chilly merlin]

No prob

[stray abyss]

btw i have an Instagram ID but i forgot it's email and my phone number is changed i tried to reclaim it but it is not working

i forgot the password

and my mobile number is changed

so i can't login

can you help with that?

[chilly merlin]

For one don't be sending ur email in a place brimming with hackers try and think before u act

Second u should contact meta

For that

[stray abyss]

i did

[stray abyss]

sorry for that

[chilly merlin]

Did u setup an otp

[stray abyss]

they said you need the mobile number or you pics of the post i have done

but i didn't post anything

[stray abyss]

i tried but the mobile number is changed

[chilly merlin]

What does that mean

[stray abyss]

i don't have the old one

[chilly merlin]

It's been hacked?

[stray abyss]

no no

[chilly merlin]

Or did u change it and lose it

[stray abyss]

yes

i changed my mobile number

[chilly merlin]

U have access to ur mail that you put on it?

[stray abyss]

no

[chilly merlin]

Then there's nothing we can do

[stray abyss]

damn

no problem

[chilly merlin]

Sorry man

[stray abyss]

btw thanks bro

[chilly merlin]

No prob

[stray abyss]

no problem 🙂

[stray abyss]

👍🏻🙂

[whole patio]

So an insta ID.. but not registered to any email address of yours.. nor to any phone number of yours.. and it has a password you don't know...

[stray mural]

it's hacked you mean

[whole patio]

#👥・help-me message I was just summarizing this gem

[stray mural]

No

[chilly merlin]

Guys I already answered what r we doing

[heavy wind]

idek if i can ask in this chanel but can anyone help me get into like hacking ik python and c++ prett good but i just cant like put shit together to make like malware or anything

[chilly merlin]

#👥・new-member-guide

[heavy wind]

thank youuu

[chilly merlin]

Ur welcome

[scenic creek]

Need help old account got cracked PLEASE

[misty oyster]

sudo apt install firefox here

did that help you

Ok whats the problem

[scenic creek]

Its a personal thing where i dont what one one to have acces

I dont know anything im new

[whole patio]

Contact the support for whatever service your account was at

[scenic creek]

I dont have acces my 16 got stolen old accounts on a different number which i dont remember

Snapchat my personal life pictures of family crédito cards

[whole patio]

"Contact the support" for "Whatever service your account was at"

If its not on your device, you dont have the credentials and your dont have the number, then let the service explain to you that there is nothing they can do for you

[scenic creek]

How did they have acces to my iPhone 16  did y respond

[whole patio]

Interesting question, but none of us can shed light on it, so pointless to ponder

[scenic creek]

I live in a different country now

[whole patio]

It happens

Moving to north korea, forgetting the us phone number.. happens all the time

[scenic creek]

They been using my Facebook vea use they change profile pics

[whole patio]

The important part is, though - contact "the support", not "us"

[chilly merlin]

We can't help u with that

[scenic creek]

Thank you

[chilly merlin]

I'm afraid

[misty oyster]

Dude what friggin situation have you gotten yourself into????

Im sorry I think you are dealing with Aizen what kind of high level theiving is this

Wdym you live in a different country now?

Stolen on a trip?

Contact snapchat support and give proof that youre the original owner

[keen mason]

is VulnHub good for Learning Pentesting?

is it web related or just Os related?

[golden vault]

Hi..I need someone to help me create a Bot for hacking Bitcoin phrase

[humble gyro]

Ok

Not for free thou

[golden vault]

How much?

[keen mason]

Yeah... no one is gonna really help you on that bro. #📜・rules ..

[humble gyro]

Why’s that ?

[keen mason]

be careful.. You have a Very Bad Ofsec.. You can Easily Get Scam..

[golden vault]

Alright thanks

But I still need help please

[humble gyro]

And you can easily get helped anyways sent you Dm

[keen mason]

why do you need to hack pitcoin Phrase??

[keen mason]

Yeah.. That Bit$h trying to scam @lost vapor

https://tenor.com/view/mods-discord-mod-moderator-moderation-clash-of-clans-gif-24080525

[humble gyro]

Yo a who🛸re u know thst

[keen mason]

read #📜・rules

[golden vault]

I need to retrieve my lost bitcoin phrase

[keen mason]

you need to show proof that you actual own that bitcoin wallet and we are not hacker for hire.. this is a place to learn about pentesting.... #👥・new-member-guide ...

[golden vault]

Alright thanks..please can you teach me pentesting with my kali

[keen mason]

sure.. what you need help with??

if you are new i would recommend tryhackme or hackthebox academy..

[golden vault]

Can you teach please, so that I can Dm you

[keen mason]

don't Dm me you can ask help here...

[whole patio]

You download the vulnerable machines, and run them locally. It's not as curated as other services though. On the other hand - free

[keen mason]

cool thanks.. 🫡 i'll trying running one on vm..

[whole patio]

Make sure to follow their lab setup, those machines should not see the network

[chilly merlin]

@slow edge

[keen mason]

i would recommend https://tryhackme.com.. if you are a beginner.. and learn Linux fundamental first..

[keen mason]

https://tenor.com/view/wrench-watch-dogs2-gunnin-gif-13336626

[slow edge]

@golden vault do not ask for such help here, please read #📜・rules and do not accept DMs for such help, they are scammers

[golden vault]

Thank you I am reading the rules now

[slow edge]

Do not do DM solicitation, I know what you are trying to do here. Stop scamming people. Please read #📜・rules last warning

[humble gyro]

Ok it’s cool just trying to help nothing else

[keen mason]

https://tenor.com/view/mad-angry-upset-throw-chair-gif-15422261

[drowsy crane]

Ok I definitely did but I’m still getting notifications that these idiots are trying to charge my card. I want to absolutely catch them

[feral lintel]

unless you are in law enforcement, you should very much not be catching them

[marble heart]

Hello, I'm a complete beginner and a new member of this discord.
I came here to ask for help in recovering my very first gmail account.

[keen mason]

learn brute forcing.. I have never tried it outside HTB and THM box so idk if it will work or not...

[keen mason]

first learn burpsuite first

[marble heart]

Idk what you mean tho sorry. Imma try those tomorrow

[keen mason]

https://tryhackme.com/module/learn-burp-suite

[marble heart]

Idk why but it took me 4 years to think of trying this

[keen mason]

read #👥・new-member-guide it will guide you if you are complete beginner

[feral lintel]

what kind of crappy advice is this?

[feral lintel]

you don't just casually hack google, that's illegal

[keen mason]

it sleeping time here soo that the best i got

[feral lintel]

yeah, don't be advising to do illegal stuff even if you're about to pass out

[keen mason]

it not illegal to learn...

[feral lintel]

well, if someone asks to access "their" old gmail account, the answer is "no", and not "learn bruteforcing"...that leaves very little to the imagination

[whole patio]

enter gmail into the search function on this server, this questions comes up all the time

[keen mason]

https://tenor.com/view/midnightgif300-gif-1342012341207187635

https://tenor.com/view/sleep-time-gif-2822468507363798988

[feral lintel]

lol, good night @keen mason

[keen mason]

Night buddy...

[feral lintel]

not gonna happen

and careful with the DMs you get, cause chances are that people are trying to scam you

[feral lintel]

ah ok, I see now that this is like a mini challenge to solve

// hand rolling an MD5 implementation seems like a good idea, but I can't get it working...
is it something obvious like just the MD5 hash of that seed or something? not gonna be able to spend too much time on this atm, though I do like puzzles like that. not sure if I missed anyone else here giving it a whirl

[whole patio]

enter gmail into the search function on this server, this questions comes up all the time

[deft violet]

The charge won't go through once the card is locked. Your best bet if you want some type of justice is to contact law enforcement. The bank can tell you where the charge is coming from, give this info to the law and report it. Get a new card.

[silent bobcat]

at this point just cancel card get new one

[rapid crest]

Hi everyone

[chilly merlin]

Hello

[rapid crest]

Can someone help me find some information for honda motorcycles

[keen mason]

Picture of Honda motorcycle??... You can Google or duckduckgo it..

[rapid crest]

Im a motorcycle mechanic and i just want to explore many things i want to see the wiring diagrams

[keen mason]

Oh....... Google (honda motorcycles Wiring Diagram)

There are YouTube videos too...

[chilly merlin]

hey guys so i was studying and stumbled upon a famous tool that does a dhcp starvation attack , and i stumbled upon a solution to it in this video https://www.youtube.com/watch?v=JB-0gIE-JuM

my question is , is this solution still relevant?

cuz

i have

no idea

[rare flume]

Iwonder if i downloaded malware in virtual machine my main pc would affect with malware or the malware would delete as soon idelete the virtual machine?

[odd steeple]

Your main PC could be affected if:
-You enabled shared folders or drag-and-drop.
-You opened links or files from the VM on your host.
-The malware exploited a hypervisor vulnerability (extremely rare).
-You used “bridged” networking, and the malware attacked other devices on your network

otherwise u are good

deleteing the vm would have not effect on ur host

[rare flume]

Ty

[spiral notch]

just don’t play with settings, use the defaults

and you’ll be safe

[odd steeple]

no worries!

[whole patio]

And if this is some antivirus complaining about the kali VM, just ignore it

[chilly merlin]

rephrasing my question i was asking if there are different solutions or is it okay to stick with this one just to know the attack and defense or am i exaggerating it, or should i read more or should i stop talking about this here

https://tenor.com/view/glorp-outer-space-gif-988837663270596515

[grave delta]

I just now requested something , and now I see my messages deleted why though?

[solid gull]

Most likely doesn't comply with #📜・rules

Also change ur username

[bitter cave]

What is the best website or method to study cve(s)

[dense mortar]

Just search the vuln class and term writeup in google search

[grave delta]

So I went through -
#📜・certs-and-career for red team and I was surfing through each and every certificate and each and every of them are too costly, and being honest, affordability is an issue for me and I am not even getting free alternatives of those certifications. Now I wanted to know what should I do. I was thinking to get knowledge for each and every certifications, but what if I do where will I test my skills and if I want to get a job without the certification, how can I make people? The company believe that I do acquire the skills?

[slow edge]

CWE
NVD

[bitter cave]

Thanks bro 👍

[bitter cave]

Thanks bro 👍 although I have tried studying from both of them but the interface is kind of complicated with bunch of urls any suggestion where and how to start if I'm studying on these sites

[whole patio]

Short answer - you probably won't

It varies regionally, but in a nutshell - free certs are pretty much worthless when it comes to looking for employment

[slow edge]

Ya, try to look for popular CVEs and search them on this sites

Ik the interface is sick but ya that is a good way to study them! You will get use to it. You just need any CVE code to begin with

[whole patio]

And looking for red teaming positions from the start is probably just a terrible career plan

[grave delta]

So should I start from blue teaming ?

[whole patio]

What exactly is your current qualification

[grave delta]

I have just completed my class 12 and I have zero knowledge about computer science and mathematics right now. I am in my first year of my college and I am pursuing bachelors in computer application.

[bitter cave]

Great bro I would suggest start learning networking and c programming

[whole patio]

So you are looking at entry level jobs. Cybersecurity really isn't an entry level field

Maybe don't stress yourself about it then, get a few years of actual work experience in IT, see whether you feel you are ready, once you know a bit more what awaits you

[grave delta]

I have started learning C programming language from this YouTube channel. Apna College.😭

[bitter cave]

If u r understanding then it's good otherwise move on to platforms like exercism, codeacademy

[grave delta]

Actually, I really don’t know anything about cyber security. What made me love this space was from this series mr robot and I decided once I join college, I would start learning cyber security, but now once I am trying to understand, what should I do? It’s really getting very confusing.

[grave delta]

Are these platform really good? If yes, then please tell me because I want to learn C language properly and I guess in my upcoming semester , there is also DSA with C language.

[bitter cave]

Yes these platforms are good as u will actually code instead of just watching a YouTube video

[whole patio]

Just start on fundamental IT knowledge, get real life experience and forget about a job in cybersecurity for the time being. Chances are you are strongly underestimating the requirements right now anyway.

[grave delta]

Thanks for helping me out. I will surely try this out.❤️

[grave delta]

I am not underestimating the requirements. It’s just I know you need too much knowledge right now. I am 19 years old and I was thinking if I start early. It would be beneficial for me. You guys must have more experience than me. That’s the reason I am asking about, and I am very sorry if my questions irritate you, it’s just I get too tense
And academic wise I am not a bright student so I am trying to do better

[dense mortar]

anyone know how to find offsets within objects in v8 js engine in the sandbox?

[whole patio]

It does not irritiate me, try not to attribute any malicious intent to what I am saying to you. Its just that people like you show up aaaaall the time.
Imagine that pentesting means you bet on your ability to know more about systems, infrastructure, networks, applications than the people that administrate them. And then imagine that security architects/SOC analysts know more about what pentesters are doing, and how to prevent them from doing it, than the attackers so... and place yourself somewhere in that construct.

You have no real world experience, you know, what is technically known as, "jack shit". Dont take it personally, its just what it is.

Keeping up to date with current techniques, threats, exploit strategies, is by itself practically a full time job. And that is if you specialize

It comes from the heart, when I say to you - "get real world IT experience first, before you even consider cybersecurity as a career option"

knock yourself out on course material.. let some epmployers pay for certifications.. you will rather soon realize you had no idea how big this even gets.. in the meantime you need a source of income, and that is what my recommendation is.. get a job in IT.. any job.. help desk, admin, programmer, anything.. to get a base foundation to actually build upon

[grave delta]

So correct me, if I am wrong, what you’re trying to say that I complete my college degree try to learn some job, and while I am doing my job, then I should pursue in this path of cyber security?

[whole patio]

My personal suggestion would be to learn for your IT job, and forget about cybersecurity for the time being.. but I'm not your real mom, you can do as you like.. most people that have 10+ years of experience in IT tell me straight away that they have looked at pentesting, and say they are not ready for it.

The field attracts a lot of people, but few actually have this drive to dive ridiculously deep into documentation, RFCs, read up on reports, and dismantle the stuff because they have this intrinsical motivation to understand how stuff even works.. those people find cyber security a fulfilling field.. the rest quickly loses interest, when they realize how, on the surface, "boring" it can be, how frustrating, and that what they see in movies and series is essentially just fiction

But, again, you can do whatever you want

some opportunities may show up, they may not. Maybe you find a job where they want you to specialize, maybe its a job where they frown upon certs that make it more likely for you to look for another employer..

[grave delta]

At what age did you start learning about cyber security? Did you start learning about it before college/during college or after you landed a it job

[whole patio]

My vita is not something that can work as a blueprint for people today

I started with DOS and Novell, BNC-networks and 386 cpus

[dense mortar]

i started a 200k+/yr cyber job straight out of college
it really depends on what uni you go to and what area in cyber and what you are doing to learn outside the classroom

[whole patio]

Thats probably not an option anymore today, but YMMV

I know very, very few people who had a straight career path into cyber security

[woven anvil]

@grave delta
what Eris said.
Cybersec is just a branch of IT. People are trying to learn "how to attack Active Directory", without first understanding how to use an Active Directory, or Networking or whatever. It puts you at a disadvantage to learn that way.

[dense mortar]

i started it last year
its definitely an option in usa

[edgy crow]

I'm having an issue keeping VBS turned off on win 11, I've already disabled core functions, i've not only set reg key values to zero but i even deleted a few require to keep vbs running. I run the vbs bcdedit vms launch type off command and even the vbs command as well AND ITS STILL RUNNING WHY??? I dont even see device guard in local group editor that file is missing entirely SOMEONE HELP

something to note too. I came across a powershell command that disables vbs but only after a fresh restart and only on that restart.

[edgy crow]

also side note I LOVE CASHYOS i didnt know they had a discord.

[chilly merlin]

Seems like a very obscure problem

[edgy crow]

yeah im failing to understand how i've virtually shot the process 30 times in the chest and its still up and walking around

[chilly merlin]

Gimme a min

[woven anvil]

They are really nice to beginners. They just never talk about advanced networking, so I tend to be here more.

[woven anvil]

slmgr.vbs is crying

[woven anvil]

HKLM\Software\Microsoft\Windows Script Host\Settings DWORD(32): Enable Value of 0 is disabled, 1 is enabled.
I assume you tried this entry?

[chilly merlin]

I'm not aware of such problems so see if this helps
https://x.com/i/grok/share/Ak3i6bTyWjcnuY4enaBaM6hUg

[edgy crow]

no i will try this now give me one minuet

[woven anvil]

would potentially need a reboot

[edgy crow]

only reg keys present in this file are
active debug
displaylogo
silentterminate
usewinsafer

[woven anvil]

So they are saying to add it like this (with DWORD(32) )

[edgy crow]

ohhh ok I added the dword reg value preset to zero all i need to do is restart and check if it worked?

[woven anvil]

You can check if it worked right away, but if it didn't, then yeah, do a restart then check

I will never ever remember which registry keys apply live

[edgy crow]

vbs is still running

[woven anvil]

Try "Enabled" instead. Might have been a typo from the reddit

[edgy crow]

damn i wish i could a freaking screenshot

vbs is still running gonna do ANOTHER reset give me a sec

[edgy crow]

nope still running

[edgy crow]

I just ran the same commands and im getting the same cscript error

but vbs is still walking around my system cocky to still be alive

[sacred nacelle]

Hey I firgurered out thank you man

[feral lintel]

nice, congrats!

[edgy crow]

I need vbs off for nested virtualization, I know you have to turn it off sometimes to avoid conflicts since they both rely on hardware virtualization but what if i just left the damn thing on? Cause this feels impossible LMAO

[digital pendant]

Hey i have a question i started using tryhackme to learn about cybersecurity before i start my coursera certifications( waiting on a sale lol) should i just pay for premium until coursera goes on sale im assuming by new years or black friday or should i just stick with the free stuff ?

[dense mortar]

free

[digital pendant]

The paid stuffs not worth it? i was going to just try for a month

[dense mortar]

no

[fathom idol]

What do you think it is better to learn from TryHackMe or HTB?

[woven anvil]

What VBS thing is still running? Is it an application that brings its own intepreter?

[digital pendant]

Understood im just eager to learn lol

[austere orbit]

Hey guys

[dense mortar]

learn what

[fathom idol]

Sorry forgot to mention but Cybersecurity

[dense mortar]

yeah like what in cyber

[fathom idol]

Tbh I don't have an idea but mainly Networking 😄

[edgy crow]

I'm not sure I checking VBS status through sysinfo and it still says its running but when i utilize the powershell script i found on github it it will display disabled or "not running" under the vbs tab in sysinfo but like i said it only works for that one restart

[dense mortar]

https://teachyourselfcs.com/#networking

[fathom idol]

Also what if I wanna do Ethical Hacking? 👀

[edgy crow]

you wanna do net working fiddle around with cisco packet tracer i like it alot

[dense mortar]

ethical hacking of what?

[fathom idol]

Ouu, interesting 👀

[fathom idol]

Could you please elaborate?

[edgy crow]

cisco packet tracer is like working in a data center setting up server racks and what not but its all virtual and things like hubs routers and switches have a physical tab so you can get a good look at the hardware and how it functions through how it looks cause you can understand something alot easier when you can visualize the thing you are working with

[drowsy crane]

Which certification or cert path would you all recommend

[dense mortar]

what are you trying to hack: websites, mobile apps, iot, phones, servers, just local privilege escalation/individual programs, entire networks, industrial controllers,
they are pretty different

[fathom idol]

Yes, ik that and I have tried using it too before, I used to watch NetworkChuck for that.

It kinda looks a bit confusing, ik it won't be much confusing later on but yeah

[dense mortar]

for what

[fathom idol]

What if I say almost ALL 😈 or mainly website, desktop software & applications, servers and networks

[edgy crow]

id ask for what but the market is so competitve that people will have certs that dont even focus on they specific job they are applying for which makes it even more competitive.

[drowsy crane]

I’m sure what arena I should go into security? Or Devops or whatever. I want to get into tech

[drowsy crane]

Oh wow

[dense mortar]

im assuming you'll spend a decent amount of time on things not hacking
each one takes like your whole life

[dense mortar]

that's for you to decide
how would i know what you want to do in life???

[fathom idol]

Yeah I understand that but I will mainly go into servers and networks, wanna have my own server hosting service one day

[dense mortar]

people saying market is so competitive are usually entry level(little or no experience) and have no skills
like most areas its saturated when you're a beginner bc so is everyone else applying

[dense mortar]

i guess you want to do pentesting?
are you more interested in using existing vulns or finding new ones

[edgy crow]

I have zero industry experience so i'll say its damn competitive. all my experience is youtube videos and vuln hub hacking, college, and some things i've done on my own like my own home network and the like

[fathom idol]

Both and while I am interested in HACKING a network, I am also interested in building and managing servers AND networks

[dense mortar]

hang in there that's the hardest part
but once you have some experience it's much easier

[dense mortar]

do you want to do pentesting?
are you more interested in using existing vulns or finding new ones?

[edgy crow]

its hard man employers dont care about all the things I've done on my own self taught AND college instruction they just want industry experience and comptia certs bro its really hard

[fathom idol]

1. I am not sure what is pentesting
2. Both OR Finding new ones 😋

[woven anvil]

👀

[edgy crow]

THERES A GAME?!?!?!

[fathom idol]

WHAT

[woven anvil]

not yet, but we can talk about it more in #💬・old-gen-chat

[fathom idol]

Let me download it RIGHT NOW

.<

[edgy crow]

YEAH YEAH anyway please help bro KILL VBS FOR ME

[dense mortar]

are you still a student? i'd recommend doing internships
or join a top ctf team or do bug bounty/report 0days

things on your own time are unlikely to be relevant to the job and most people probably have already done what you have

[woven anvil]

it sounds like the registry stops it from working, so i'll look into why it won't show up or change in sysinfo

[edgy crow]

I could always call and stream my screen so you know what i have done already

[dense mortar]

just play ctfs https://ctfsites.github.io/

[edgy crow]

how do i compete against other people with miles of more knowledge then me on bug bountys man

[fathom idol]

Alright but what will help me with server building? 🤔

[dense mortar]

anything on google search
idk why you'd want to build a server

[fathom idol]

I mentioned my aim above, it's not my ultimate goal but that's something I am interested in

[woven anvil]

Cisco Packet Tracer would be the tool to use to get started with Network building.
Servers, it depends on if you mean physical, or just running server software on a managed OS

[azure cloak]

Seems suspicious

[feral lintel]

then don't follow the link?

[woven anvil]

If its suspicious, then don't post it here please 🙂

[feral lintel]

online crypto casino, yeah, does not sound legit

[azure cloak]

Sorry I wanted to see if anyone could work their magic and check its legitness

[woven anvil]

If someone DM'd it to you from this server, then please open a #📩┃ticket about it

[dense mortar]

why'd i get timed out?

[woven anvil]

Its not legit. Any online casino is not legit.

[feral lintel]

personally I like to google the domain (not follow any links directly)

[woven anvil]

Bot thought you were spamming the server.

[molten bane]

is it a bad thing to install node in my Kali VM on the root, or is it okay?

[dense mortar]

effort and time
find a type of vuln then look for it in software
also there's plenty of areas that aren't looked at by anyone yet so focus on those

[dense mortar]

how? i didn't spam

[woven anvil]

¯_(ツ)_/¯

It deleted my GIF and told me to stop spamming earlier

Bot is the ultimate power

[sacred nacelle]

Hey thanks I think I was just being an idiot

[dense mortar]

it doesn't matter

[feral lintel]

out of curiosity, what was it in the end? maybe I'm an idiot, too 😉

[edgy crow]

ill keep doing vuln hub vms and getting access to those and I'll try a couple ctfs never done one of those before and I'll do a bug bounty or ATTEMPT one when i feel ready. Thank you

[edgy crow]

Can i just keep vbs running? mind you i wanted it off for nested virutalization but if its not gonna conflict with proxmox and the like i'll just leave it alone this is frustrating LMAO

[digital pendant]

Is taking the path of security engingeer into pentesting/red teaming a common thing?

[woven anvil]

I have never manually managed it, and have not had any issues with nested virtualization going from Qemu/KVM -> Proxmox VM -> Hyper-v VM

[molten bane]

aight, tyty

[dense mortar]

not even necessarily bug bounty programs but even just looking at popular software companies make

[edgy crow]

ahhh gotcha so my college instructor is making me do something that's not needed dope LMAO

[woven anvil]

I mean, if hes getting you to use proxmox, then im already impressed

seeing people strugle with virtualbox makes me wince

[dense mortar]

security engineer can be anything its a vague PR term
source i am one and interviewed for many completely separate jobs all with the name "security engineer"

[edgy crow]

wait why would using proxmox impress you? I've already built the vm for it and everything doesnt seem to complicated so far..?

[digital pendant]

What would be best to focus on for that role or do u need a little bit of everything ?

[spiral notch]

not always

sometimes we want you to stand out from the others

make an original project

get creative

certs too ofc

[dense mortar]

ive seen it used for software engineer that automates incident detection and response, IAM, PKI/secrets management but also for offensive security or malware analysts or compliance(yuck)
all of those are different jobs so idk what you mean

[woven anvil]

Because people i know irl who go for cybersec courses end up buying an overheating 16GB of RAM gaming laptop, then get told to use Virtualbox, and aren't told the difference between the desktop version of ubuntu, and the minimal/server version. So helping them, its just waiting for their VM to do anything >.>

[dense mortar]

for security its easy to think of one just find an 0day since by definition its original
or add a feature to some open source project companies use

[edgy crow]

I am using LFS to create a linux distro for my schools sec program

[spiral notch]

also you’re putting a lot at risk if you have no understanding of the field yet go to secure many assets

[spiral notch]

see that’s cool! You could list it

add a special touch to it

[digital pendant]

Lol i was just wondering what jobs it mainly consists of but like u said its just a pr term but im looking into pentesting red teaming i do want a little background info on soc aswell

[spiral notch]

oo red teaming super fun

[digital pendant]

Lol i just need to study and get these certs i always wanted to be a hacker lol

[spiral notch]

https://tenor.com/view/dahlia-frosting-silly-cupcake-cupcake-frosting-gif-11885464312866396494

I work as a red team operator

[dense mortar]

@edgy crow for resume projects generally if the answer to these 2 isn't yes then it's not going to help very much:

1. Does the project impact companies?
2. Is no one else applying probably doing the same project?

[edgy crow]

IG i'll just go work as a data center tech or something to get industry experience LIKE idk LMAO

[dense mortar]

i'd recommend software engineer or SRE over data center or sysadmin

[edgy crow]

the amount of people that tell me landing in cyber sec right out of college is nay impossible and i dont even want like red teaming or something out the gate ill take SOC analyst or sys admin something LOL

[dense mortar]

are you in usa? if you know assembly i know a few places without many applicants that offer paid internships with no experience @edgy crow

[chilly merlin]

It's ez

[edgy crow]

I am yes but i live in the south

[dense mortar]

also most people apply to the same 1k jobs
there's tons that most won't find

[chilly merlin]

Just have a couple projects and know how they work

[dense mortar]

if you like assembly there are tons of government contractors in virginia and miami

[edgy crow]

well like what? I mentioned ealier I do vuln hub hacking on isolated networks on vmware and im doing LFS to make a linux distro but other then that what else can i do?

[chilly merlin]

For soc?

You need to be able to work on siems

Triage threats hunting

Do projects that show case that

[dense mortar]

why would anyone want to soc 😭

[chilly merlin]

What kinda argument is that

[edgy crow]

dude i just want industry experience I'd like to go to blue teamming in the future i'll take anything and who knows maybe i'll like it

[dense mortar]

nothing don't mind me i just hate it and would never do it

[chilly merlin]

Okay

[sacred nacelle]

I think the main problem was the code at the bottom bc standard md5 hash is abcd abcddcd

[dense mortar]

i have a list of offensive security companies dying to find people that don't require prior experience

[sacred nacelle]

I can’t even remember what I did I messed around with it so much and then it just popped up

[chilly merlin]

🤨

doubt

[dense mortar]

i can send it i even have recruiter emails
i had to turn down a lot of cool places

[chilly merlin]

Send it

[edgy crow]

BEGGING

[chilly merlin]

I'm employed

I just wanna see

[edgy crow]

must be nice

[chilly merlin]

It aint

But yeah getting paid

[edgy crow]

i'd love to work in cyber anywhere really just need a bone one bone thrown at me

[chilly merlin]

If ur in to defensive go to letsdefend

[edgy crow]

ooooo thank you!

[chilly merlin]

Ok.

[dense mortar]

i just dmed places with paid internships and doable interview

offensive security only

[edgy crow]

I'll take anything but i'm def interested in defensive sec

just need experience first thats all i need rn

[dense mortar]

idk any defensive
i can help with resumes and fnding internships/entry level

[edgy crow]

hey do i need to pay for anything to go through this entire soc analyst course on lets defend?

[chilly merlin]

It's like tryhackme

Subscription based

[edgy crow]

i really wanna do defense is the paid version worth anything?

[chilly merlin]

When u start it

The first lessons are free

You can see if that's ur jam

[edgy crow]

ok i'll just run through everything i can do for free first then thank you i really appreciate it

[chilly merlin]

It's all good

[woven anvil]

You can practice defense for free, just install securityonion or similar

[chilly merlin]

Yeah but

It's more structured that way

And not having to set it up

[edgy crow]

im looking at this and is this just a practice tool? it seems like a sorta management tool so how can this help me practice?

[chilly merlin]

That's what most siems look like

Not all

[woven anvil]

Its a full SIEM that uses open source tooling to scan network traffic, and logship from your systems.

As well as some alerting, and incident management

[edgy crow]

How can i use this tool to start projects that look good to hiring managers?

[chilly merlin]

Well what I did was I did a cloud security project with the guide of cwx and put that on

Nope

If u look up soc labs

You'll find plenty

[vapid crescent]

hey guys im learning on xss attack but i dont think i have time for now to learn deeeply javascript , so is it that i learn as i go through portswigger labs of xss and just try to find the answer on the internet by finding a similar problem and seeing another person solution? like how exactly should i finish xss labs and become confortable with it i dont feel learning java script is practical

[dense mortar]

yes

[vapid crescent]

so i should just try to find how people solve my specific problem?

[dense mortar]

yes

[vapid crescent]

thanks

[dense mortar]

yes

[feral lintel]

Wait, you want to get comfortable, but don't have time to learn? I don't understand

[remote creek]

Lolz

[vapid crescent]

i can learn , but i have a time limit for now i need at least to be able to solve one when i encounter it

i want to walk first

not go deepp in java

[remote creek]

How do you want to understand something if you have no knowledge about it and how it works??

[vapid crescent]

so is your advice to take a java course and learn?

[dense mortar]

yes

javascript is not java btw

[remote creek]

Not java🤦, JavaScript

[vapid crescent]

wait there is a difference

[remote creek]

Yes

[dense mortar]

yes

[remote creek]

Big difference

[vapid crescent]

alright than maybe i will learn javascript in the future

[feral lintel]

So yeah, you should learn some basics before getting into XSS

[spiral notch]

2 completely different languages

[woven anvil]

I hate both equally though

[dense mortar]

yes

[remote creek]

Xss

[feral lintel]

Hate typing on my phone... Thx

[spiral notch]

xsxs

[feral lintel]

XYZ

[vapid crescent]

is that perfectionism

[feral lintel]

Attention to detail, whatever you want to call it

Details matter sometimes

[vapid crescent]

yea never knew java and javascript are different

[remote creek]

Focusing on server side vulnerability is cooler than client side

[remote creek]

Then you have a lot to learn before you will think html is python

[dense mortar]

its just called javascript bc investors were throwing money at java at the time

[remote creek]

Java is still being used up till now

[dense mortar]

it was supposedly to be a scheme dialect but the creator wanted to copy java

so its a weird mix only taking the objects idea and dot syntax

[vapid crescent]

so i should learn js basics and that would be enough for me to continue my xss? or is there specifics

[dense mortar]

yes

i love how this guy always knows the answer but asks anyway

[vapid crescent]

wdym

[dense mortar]

the answer is always yes

[remote creek]

First of all, learn about JavaScript, play with it, build stuffs with, know it's syntax very well, then learn about xss, how can developers make a mistake of letting xss present in their website, how can you spot it and what learn how to craft your own xss payloads that could bypass wafs, and remember we don't only have reflected xss, we have stored xss, blind xss and dom xss, you have to know how to find this xss vulnerabilities on your target

One can use xss to steal session tokens too

There's a lot you need to calm down and learn if you want to be good

[dense mortar]

who said i'm not good

[remote creek]

Not you

I'm talking to jalax

[vapid crescent]

alright than , if i put most my day into study i can be xss ready in 30 days? and you think yt is enough to start learning js?

[dense mortar]

yes

the answer is always YES

[remote creek]

Lolz, I don't know, but to me, 6 months is ok

[vapid crescent]

thats motivating

[vapid crescent]

wow

[dense mortar]

yes

[lost vapor]

there are many kinds of xss
the easier ones are reflected and stored xss
a much more harder form would be dom xss, which takes place in the dom tree of a website usually

[dense mortar]

i'm trying to break javascript

[lost vapor]

let's not forget to mention nowadays, CSP plays a major role in this vuln
needs to be bypassed

[remote creek]

That's why one needs to be creative with their approach of attack

[vapid crescent]

so how many years do i need to understand what you guys are talking about

[remote creek]

It all depends on you and not us

If you're serious, you will make the year or month productive, but if you're not, you will make the years longer and the months longer

[dense mortar]

never ask that it's a lifelong journey

plus we don't know your future

[vapid crescent]

too philosophical for pentesting but thanks

[remote creek]

😂😂😂

[dense mortar]

your attitude shouldn't be "what's the least amount of time i can take to do this"

[vapid crescent]

im curious can i know how much experience do you have zoku and duereturn

[dense mortar]

i work at :redacted: doing cybersecurity
for almost 2 years

[vapid crescent]

maybe i just love deadlines and putting clear targets

[dense mortar]

you'll hate cyber then

[vapid crescent]

does xss labs like the ones on portswigger feels easy for you? not the extreme just normal ones

[dense mortar]

yep

[remote creek]

I'm always on 4chan and a private channel on an irc platform.... that's all I know about myself, the rest are private

[weary bough]

How can i hack My girl friend password on her Fb

[vapid crescent]

lol

[dense mortar]

mods ban @oak olive

[remote creek]

Lolz ask mark

[weary bough]

Am New i need help i wanna Be Like you guys

[remote creek]

Like who?

[weary bough]

Mark please help me

[lost vapor]

we don't do that here #📜・rules

[weary bough]

Ok Thanks

[remote creek]

Oops

[feral lintel]

godspeed to that "girlfriend"

[edgy crow]

yesh yikes

[weary bough]

How

[feral lintel]

I hope that this person can stay far away from you

[haughty dawn]

if you're trying to hack your gf's accounts then you're a pos and she should dump you

[weary bough]

She already i just wanna know who She Talk to

[feral lintel]

None of your business

[haughty dawn]

tough shit, not your business

[woven anvil]

Don't ask this here.
#📜・rules

[slow edge]

Damn you are fast 😆

[weary bough]

Am sorry

Ok

[remote creek]

Use that energy to stack some cash up

[weary bough]

Lol

Good night everyone

[woven anvil]

@rocky drift
Please no talking about religion here. We must respect everyone.

[vapid crescent]

eempathetic server

[dense mortar]

what if respecting others is against my religion

[woven anvil]

Then don't talk about it here.

@remote creek @dense mortar
Not here guys.

[hardy rain]

Lowk tryna show my friend how to doxx using a IP grabber hidden in a image but ion got have my PC or laptop nm

[remote creek]

So my message was spiritually just deleted, this is not normal

[dense mortar]

there's no issue with sharing an IP

[hardy rain]

??

[remote creek]

So what's the point of telling this story with no happy ending??

[dense mortar]

this will explain it for you https://www.youtube.com/watch?v=MS7WRuzNYDc

[full crag]

Im looking for help with EdiZon on switch. Am I in the right place?

[light phoenix]

Whoever can answer this pls lmk.

I am unsure of what route regarding cybersecurity I wish to go down.

How do I determine if I like red or blue teaming better? Is there a certain certification I can do to determine this? Ive heard that the CJCA cert will help me with finding this out.

Lmk your thoughts!!
I want confirmation before I dive into it

[molten bane]

hey 🙂, how much memory you guys recommend for a Kali VM?

[slow edge]

Check out these useful channels:
#👥・new-member-guide
#💕・free-resources

Programming:

• Scripting: Python, Ruby, Go
• Web exploitation: JavaScript, PHP, ASPX, SQL
• Binary Exploitation: C, C++, Assembly, Rust
  Learn any or all above langs as per requirement

Networking: netacad is good platform
OSes: Windows (especially powershell), Linux (especially bash)
After covering fundamentals: Tryhackme, Hackthebox, similar platforms for hands on
Most important: Mindset
Ebooks to read for cybersecurity:

Cybersecurity centric books:

• https://security-books.notion.site/

about red team route and blue team route, I would suggest to do both initially to know about it
And about certs we have #📜・certs-and-career and #💬・certs to help with that

[remote creek]

Being a red teamer is the best step first, you can only defend something if you once learned how to attack it in different ways

[remote creek]

To be honest with you, those certs all they do is take money and leave you with no real life experiences sometimes they behave like YouTube

The best way is to start with yourself or find someone that's ahead of you in the field with real life experiences

[light phoenix]

What certifications do you personally have that can land me a job in the future?

[remote creek]

First of all how are your skills or experience??

Can you boldly say that you can hack anything??

[light phoenix]

Negative, Imma try to get basic certs before anything. Imma try to get security plus and possibly ccna from comptia. Besides that I have thought of going down the route of a CEH certification or a CYSA+ Cert

Idek how to code tbh. I just wanna know what sort of path I should be taking

[dense mortar]

certs

[light phoenix]

They look good on a resume 🙏

[dense mortar]

no lol

[light phoenix]

Then what do you do lol

[dense mortar]

get experience

[remote creek]

Good luck in wasting those good money

[remote creek]

So many people with certs, but no experience

[light phoenix]

So In other words, the best way to move forward in this is to get hands on and learn from mistakes??

[woven anvil]

Thats why we do technical interviews >:D

[remote creek]

And that's where many of them lose the job

[woven anvil]

Get the knowledge.
Use the knowledge to fly by only the certs you need for the positions you want at the company you want.

Having a big repository of certs, when a company only wants 2 or 3 doesn't help

[remote creek]

They won't listen, just leave them to go burn their money on certs

[light phoenix]

Okay so don't waste the money on the cert unless it's gonna be mandatory for the job?

[woven anvil]

Yeah, you can look into what subject a cert goes through, and prepare for those subjects in knowledge, but its better to find out what certs are needed for companies in your area.

[light phoenix]

Okay tysm

[remote creek]

You are welcome

[scenic creek]

Hello everyone

Ok

[warm blade]

I am looking for good certs for web based hacking like bug bounties

[remote creek]

🤦🤦🤦🤦

[remote creek]

Must everything be certs

[warm blade]

I have tried the the free route and literally could not get anywhere and I’m literally about to pay someone to teach me. I’ve been saving up and I have money to throw away. Plus, I know not everything in this world is free so I better just pay for it to get better service and know what I’m doing.

[remote creek]

Check your inbox

[novel swan]

is there a free course to learn cybersecurity/ethical hacking i could be provided with possibly?

[remote creek]

Learn Linux first

[deft violet]

Even offering that on open channels is a great way to get scammed. If youre gonna pay for learning, pay for accredited courses.

[slow edge]

Udemy and Coursera has many free courses
Main things to focus are Programming, Networking and OS

Also tryhackme has some free resources

[haughty dawn]

i disagree with this as a blanket statement. i learned a good amount from doing the CRTO and it came in useful when i later did a pentest that was heavy on AD

[novel swan]

thank you

[haughty dawn]

don't do CEH, no one respects it, it's just a checkbox for govt jobs

[remote creek]

It's because you were more focused on active directory, and how is it going now??

[haughty dawn]

i don't understand what you're saying/asking

[remote creek]

Did you used the certs to get a job??

[haughty dawn]

got my current job shortly after getting the cert, don't think it made a huge difference on this one. application response rate did seem to go up significantly after adding to my resume.

but what i learned from CRTO was very useful for that pen test contract side gig, wouldn't have done as well on it otherwise

[remote creek]

I see, well congrats and more wins to come, I need to herbinate for n9w

[light phoenix]

Ok 👍

[rare obsidian]

How do I start

[whole patio]

#👥・new-member-guide

[supple cliff]

Hey everyone I'm 100% new to this hacking thing. I really want to learn can you guys or gals point me in a no so confusing direction?

[chilly merlin]

Hello, new here and just looking to connect and continue learning.

I went to Lincoln Tech for the Computer Support Technician program. Basically a lot of A+ material mixed with real hands-on labs and troubleshooting. Since then I’ve picked up the Google Technical Support Fundamentals and Google Cybersecurity certs and I’m currently studying for Security+

I’ve learned Python for automation and simple scripting and I like messing around with IoT devices whenever I can. Just finished the ZTM Ethical Hacking course and started working through TryHackMe, leaning more toward the junior pentesting route.

Most of my work happens in Kali Linux, though I use Windows here and there too. My focus right now is wrapping up Security+ and continuing to build out my portfolio projects.

Always open to meeting people who are learning, building or just doing cool stuff in the field.

[whole patio]

#👥・new-member-guide

[onyx cave]

how can i create an HMD softlock

[whole patio]

Look for MDM solutions instead

HMD is just a brand name

[frank plover]

Gm Friends

What’s the best vpn with dedicated iP and why 🫡

[crisp star]

Your own router.

[frank plover]

Can u explain more detailed?

[idle stirrup]

Log in on your router and take a look.

[onyx cave]

how can i change the serial number of my device

[whole patio]

what device

[crisp star]

Login into your router and set your own VPN. Or, you explain why you need a VPN in the first place.

Else you can just ask google and they will say just use NordVPN or Proton or Mullvad.

[onyx cave]

phone

[frank plover]

A vpn with dedicated IP so I look in the holidays like I am at home 🏠

And always have the same ip

[whole patio]

look into your router

[crisp star]

Yea then just configure your router.

Having the same IP depends on your ISP.

[frank plover]

But is the router then a repeater? Or how does he use the hotel WiFi?

[whole patio]

Unless your "at home" is an hotel, then no - the router you have at home obviously

[frank plover]

I found already a away with a opensource router but I thought maybe some ppl have good ideas here to improve it 👍 especially vpn

[onyx cave]

plz help me its a Samsung phone

[crisp star]

Dude. You should just check if your home router has already a build in VPN. If not, get a newer model.

[frank plover]

Thanks 👍🏽

[whole patio]

May I ask "why" you want to?

[remote creek]

It also depends on the VPN, using the wrong might or will make you feel like you are actually secured

But they might be selling out your activities

[onyx cave]

study reasons

[whole patio]

Well, study on then

[sonic ermine]

how can i start learn

[chilly merlin]

#👥・new-member-guide

[narrow fulcrum]

I really want to learn more on trading can anyone be of help...

Can anyone help with online trading

[sonic ermine]

i need any one to help me to start learn by share live

[whole patio]

Thats not going to happen, or going to cost you way more than you think

[versed pewter]

hi

[keen pewter]

guys windows sandbox is safe to use or not?

[next ravine]

it depends on what you doing

virtual machines are the best

[reef plume]

im tryna live boot parrot htb on an external ssd im kinda stuck rn if anyone wants to give me a hand thanks

[spiral notch]

you’re barely giving any info

what issue are you facing

what vm are you using

how are you setting it up

what solutions have you tried

[reef plume]

i live booted it to an external ssd not a vm i just launched it and im in a terminal chatgpt gave no help and i have no more free chats lmao

it says enable less(1)-like paging, “set pager=1”

[next ravine]

external ssd ?

[reef plume]

yea

like a flash drive but a bit bigger

[lunar cypress]

[next ravine]

did you download the bootable version

[reef plume]

yes

[lunar cypress]

Rule 1 of anything related to tech: seldom few men trust gpt

[next ravine]

excuse my shit English

[reef plume]

well im new so i do what i can

[next ravine]

did you turn off secure boot

[reef plume]

is cool you sont have to have perfect eng

ye i did

[next ravine]

what do you see

does the screen freez of

[reef plume]

.

[lunar cypress]

Try making it on the top of the boot list in your bios

[reef plume]

its not frozen i can type commands

but i dont wanna type anything that i dont know what it does

[next ravine]

maybe courrpted

[reef plume]

aight holon

[next ravine]

try do it from a usb works the best

[lunar cypress]

What does it say exactly?

[reef plume]

i think so too but man i waited an HOUR for it to boot

[lunar cypress]

???

[reef plume]

this bro

[next ravine]

what tool did you use to to make it

[reef plume]

it literally says this

rufus

[lunar cypress]

This is abnormal, what specs are you using??

[reef plume]

persistence thats why im guessing it took so long

[next ravine]

check if the usb or your ssd is bootable and also are you using a pc or laptop

[reef plume]

laptop its bootable for sure bc ive booted other systems on it in the past

they all worked im facing the issue just now unfortunately

[next ravine]

set pager=1

in the command line

in the grub.cfg

[reef plume]

did nothing

[next ravine]

ill do some reasrch for you one mint

i send you the solution to your dms try that

[reef plume]

i did i think i have to manually reinstall grub

[next ravine]

i think you might have to

[chilly merlin]

Hi I am undergraduate and I love Cyber security should I do degree in cyber security

[marble heart]

hi

i am a complete noob

[lost vapor]

welcome! #👥・new-member-guide

[rare flume]

what is better windows sandbox or vm?

[lost vapor]

vm

windows sandbox has actually introduced vulnerablities in the past for some reason

better to deploy a whole vm and try what you wanna try there

[rare flume]

ty

[lost vapor]

plus hyper-v is a type 1 hypervisor making it less likely for anyone to vm escape

[whole patio]

The parrot discord daily reminds people not to use rufus. BalenaEtcher is recommended

[lost echo]

how i hack my neighbours device is the best approach a evil twin attack?

[crisp star]

No. You just ask him for his password.

[lost echo]

cant

[crisp star]

Yea probably because it's not legal?

[lost echo]

its first educational purposes

im tring to become a ethical hacker

the more knowledge the better

then inform him about his vulnerabilities ect help him fix it

[crisp star]

Then do TryHackMe or HackTheBox

[lost echo]

^

[crisp star]

Evil Twin is not a vulnerability

[lost echo]

😭

[spiral notch]

LOL

Evil twin is not a vulnerability

oh he already said

[spiral notch]

just go do hackthebox

learn cybersecurity legally

if that’s genuinely your only intention

also evil twin attack will not get his WiFi password

[lost echo]

it looks for handshakes

[still yoke]

Who is really good at programming? If you want, could you teach me? In private and via messages if possible.

[spiral notch]

lmao

[lost echo]

does it not?

disconnect them

[spiral notch]

it doesn’t

[lost echo]

looks for handshakes

ig im wrong

good to learn what does it do then

[spiral notch]

a de auth attack disconnects

Then

them

and then also yoinks the handshake

[still yoke]

please

[spiral notch]

an evil twin one just clones the WiFi

makes a 1:1 copy but you’re controlled by it

[lost echo]

mhm and when they connect

it will takw them to a login page

right or smth like it and enter password

[spiral notch]

yes but

that’s mostly used to steal their gmail for example

Or an acc different than their WiFi pass

[lost echo]

ah

[spiral notch]

because it will seem sketchy

[lost echo]

i got a question

[latent root]

I saw something on twitter and I want some my avatar similar like that

[spiral notch]

after u connect to a WiFi to be asked to input it

[lost echo]

what are some of the best wordlist generators

?

[spiral notch]

world lists are sht

bruteforcing is inefficient

This isn’t the 90s anymore

[lost echo]

then what do u do

thought it would be good if you have there name age ect

[spiral notch]

depends

to what

[lost echo]

lets start of with simple social media accounts

[spiral notch]

now that’s where you enter the territory of being a kid asking how to hack social media’s for your own good

we don’t teach that here

no matter whether we’re legal or not, we cannot teach illegalities on discord

neither wanna be liable for anything

[lost echo]

no

[spiral notch]

what language? many resources in the internet

you don’t need a private mentor

[lost echo]

i’m genuinely curious

also you have any wordpress vulnerability on the latest one

[spiral notch]

there’s quite a few

[still yoke]

wait you mean language like Italian or English or language like python

?

[lost echo]

could you share them

[lost echo]

js,py,c# ect he means

[spiral notch]

she

[lost echo]

mb

[still yoke]

ok

[spiral notch]

search on Google for any that have been found

[still yoke]

idk

[lost echo]

wait coyld u dm me rq?

[spiral notch]

those which are still efficient and don’t have a patch

are still 0days

and I’m not sharing 0days with randoms, no one here will lol

[lost echo]

😭

check pms

[spiral notch]

could’ve asked here

get started on Tryhackme

learn some basic web exp

learn owasp methology

learn how to use tools like sqlmap efficiently (not just sticking them into login pages)

[lost echo]

is tryhack me really good?

[spiral notch]

it’s not bad yeah

good legal material and the rooms babysit you

[lost echo]

how do i expand my knowledge on coding i know a bit of js and py mostly ja

js*

node

[spiral notch]

depends on what you’re lacking in