👥・help-me

[whole patio]

Doesn't sound like it, but it might

[rugged arch]

yo

[mellow geyser]

hey guys i have friend and in there is a discord bot who has taken control and it around 2k people in that server does any one know how to remove that bot

[chilly merlin]

U remove the bot? From server settings

[mellow geyser]

they gave the bot permission accidently and if they remove the bot from the server they said all the roles which are assigned to the people will go away with it

[chilly merlin]

Okay

So ?

Make em again

[serene cedar]

i am a 3rd year Computer Science student so do you think i can do it in 2 years ?

thought that is the only field that AI can't take place of

[fringe mural]

partially yes and no AI can do some things not everything tho

[serene cedar]

are u a cybersecurity student or u are working?

[wet gate]

yeah probably

[mellow geyser]

you mean make the roles again there som emany people ?

[chilly merlin]

U can make a channel where people can go and get their roles

It's better then having a bit take control of ur server

Tsk tsk

[mellow geyser]

the thing si that the bot is above admin role

and my frined does not have acces to server settings

[astral wagon]

How can I install an app that is not available in my region yet

[mellow geyser]

can i dm you pls

[brazen sierra]

Yes I was seeking an invite anyway I got it already I emailed them and got the invite. Tq for the replies though.

[mellow geyser]

can i pls dm you

[shrewd forum]

[spiral notch]

then here’s nothing

there’s nothing

you can do

[tight hazel]

What's up guys

[woeful jasper]

I have been using this app called HackerX to learn some beginer skills and I was just wondering if I should be sharing the certifications to LinkedIn? The app has a button for it but I think that is a bad idea.

[woven anvil]

@versed pagoda
Please ask general questions in here. That channel is not for questions.

[slow edge]

Depends, I have seen people share every small cert they get! It is really upto you.

[whole patio]

I unfollow those people quickly

[valid belfry]

I would personally avoid that

[feral lintel]

very personal take: use these features sparingly. Adding bigger milestones to a cert list on your profile is one thing (I do that with course SERIES for example, not individual courses), but I would only share it with the network if I have some words to say about. If it was a cert I had put a lot of effort in or want to give a shoutout to someone specifically for example

[serene cedar]

they say using people's tools won't make u a hacker is this true ?

[wet gate]

not necessarily true

[feral lintel]

everyone has to start somewhere, no need to spin up your own OS to start learning. Using tools is fine, everybody uses tools

[serene cedar]

thank you guys

would you be able to get a job in cybersecuirty with Computer science degree with skills but not certs

?

[whole patio]

That's essentially an "is it possible?"-question, and those always have an unhelpfully large answer-space

So "No, unless yes"

Either relevant certs, connections or incredible luck

[snow wharf]

agreed

[sour moon]

Hello, how can i check if the breach happened within the prem?

Does it reflect on the logs?

SME. Without active directory

[woven anvil]

Its up to the company to have logs.
If you didn't set up logging, then you can check if there is anything on the firewall or event viewer, but each individual company is responsible for setting up their own OS management + logging.

[muted birch]

Hi does anyone know any free open source virtual machines apart from vm box and VMware on windows

[hazy sorrel]

Well I have a question guys, do you think network attacks are still relevant? As in attackers trying to breach networks in breaking into the WiFi externally, poisoning ARP tables, doing enumeration, MiTM attacks, finding vulnerabilities, so on it seems very tedious, time consuming and noisy for network admins.

Aren’t attackers breaching organizations more and more through social engineering and phishing than actual network attacks?

[crisp star]

It's a mix of both. A lot of times I see that attackers exploit something that is exposed to the public web. e.g. Firewall, VPN and so on.
If they have an initial foothold, then the usual stuff is happening. AD recon and trying to get domain admin as fast as possible.

[hazy sorrel]

So it would be from the outside in, something connected to the internet that allows to breach into their private networks. Not a guy parked outside the business with a Wireless Adapter trying to hack in and work their way up. Okay I appreciate the feedback!

[halcyon crypt]

Is the Mitre ATT&CK navigator the best option for focusing the matrix on your particular task 🤔

[rain knot]

No, or it depends.

[halcyon crypt]

Should I just full dive into the official Mitre Docs

[crisp star]

Most of the time, attacks happen online and not someone who is physically there. It can happen, but this is such a rare case.

[whole patio]

vmware is not open source.
qemu should be available on windows, too - though if you are looking for one that is easier to set up and use than virtualbox, then qemu may not be what you are looking for.

[hazy sorrel]

Thank you!!

[versed dragon]

Has anyone here used volatility3 ? one of the labs i wanted to do needed to use this tool and from the looks of it, it does seem like a huge topic to explore....wanted to ask for some advice while learning it and if there are any good resources from which i can learn from

[civic musk]

I need help please

[wet gate]

the latter would more be the case yeah

[wet gate]

with

[whole patio]

anything in particular, or can we choose what with

[civic musk]

I need some one to help me out on a project

[wet gate]

help you with what

[whole patio]

Don't make it difficult to help you, just spit it out

[civic musk]

Can we chat privately

[civic musk]

?

Can we

[whole patio]

Put it out in the open or not, your choice, but I don't do DMs on a public server

[civic musk]

I will dm

It’s not something too good

[whole patio]

Then keep it to yourself

[civic musk]

Please

[whole patio]

I told you no, how hard is that to understand

[night tide]

and he sent a friend request

[whole patio]

same here

[civic musk]

I just need help

[night tide]

then ask here mate

[civic musk]

It got to be private

[whole patio]

Then you are not getting help, simple as that

your choice

[gusty tide]

[polar aurora]

Hi need an app or a website where I can enter a mobile phone number and “ping” it multiple times to cause it to freeze up, this is for educational and ethical hacking purposes only, any and all help will be greatly appreciated, Thank you very much ☺️

[wet gate]

doesnt exist

[versed pagoda]

was gonna delete it after it got answered my bad wasn't online but got 3 pings

@spiral notch did u anwser my question sorry if u did i didnt see

[spiral notch]

what question

[woven anvil]

Are kernel-level anti-cheats considered spyware

[versed pagoda]

in setup and rice i dont know if u saw it was asking about vanguard

[versed pagoda]

pretty sure its Chinese not that it matters

but im just wondering since i might play it

[woven anvil]

The answer is:
They get higher than SYSTEM level access. Which means they can implement spyware/malicious code, and you wouldn't have any control, or wouldn't have to re-authorize it.

So, we don't know what the proprietary code is doing. And there are tools to try and see, but those usually get flagged by the anti-cheat software. Things like Procmon i think usually get blocked.

[versed pagoda]

got it

[whole patio]

The bet is still open whether game developers will get their act together and support linux without that borderline malware, or whether one linux distro will cave in and become the solution for all the kids who want that kernel level anticheat micro transaction kiddy shooter

[spiral notch]

oh

that yes it is indeed spyware

[woven anvil]

I mean, if the games spy on you or not, they don't need kernel-level drivers to do that. And then the OS itself is also "a kernel-level driver that spies on you"

[whole patio]

Micro-transaction games try to ensure the value of their virtual goods by trying to prevent any tool interfering with the game.. a short while ago we had a situation where two different games flagged each other as manipulation, cause they both tried to be the sole king on the hill monitoring the system ^^

I personally would trust a distro dev team more to keep an eye on malicious components, than I would trust a game company

And I guess none of us trust tpm

[woven anvil]

If it wasn't pre-loaded with a microsoft key, i would trust it

[whole patio]

And since you can't check for yourself..

[woven anvil]

its just a crypto chip w/ storage

some TPM chips you can put your own key

and those ones, sure

but its used right now as a "Microsoft to Unique ID your machine + choose what its allowed to run" kinda donks

[whole patio]

you can "add" your own, not make sure that those self signed certs are the only ones

its a black box for all intents and purposes

Still have an old laptop without tpm chip, just in case

[woven anvil]

install proxmox on every computer, and use vTPMs everywhere

https://github.com/stefanberger/swtpm
The code that is compatible with TPM

[woven anvil]

@lofty willow
Don't ask for unethical things here.
#📜・rules

[lofty willow]

My apologies

The phones under my name by the way

[woven anvil]

I don't care

[lofty willow]

Fully understand again my apologies

@woven anvil I'm very sorry brother.

[woven anvil]

Don't apoligize to me. Apoligize to her.

[lofty willow]

Lol

[woven anvil]

#1070121989479596086 if you need to talk about it.

[lofty willow]

Always appreciate it thank you

[lost jay]

hey does anyone know how to pick ip over a call or track online activities/ locations if possible with just a phone number ?

[whole patio]

not possible, also #📜・rules we do not help with stalking

[lost jay]

okay, thanks for pointing that out

[terse turtle]

Is ccna a good cert to have if following the pentest road?

[remote creek]

😂😂😂😂😂😂

[tidal roost]

guys

i need a lil help with thm

anyone awake?

[spiral notch]

just ask

[tidal roost]

im solving it right now lol but thanks anyways

[feral lintel]

They also have their own Discord server

[proud olive]

Hey guys, I'm trying to get kali nethunter on this samsung s20 fe, but the OEM unlock option is not showing I've tried this for the past couple weeks, I need help

[candid iris]

hey guys, i'm trying to turn my pic into an art or 2d for my music album cover as i'm unable to do it myself

anyone pls

[oak robin]

So, I got fished for 500. I mean you gotta learn the hard way sometimes lol

[coral dock]

I have recently been hearing about the eval() function in Javascript being exploited. is anyone here educated enough to take time out of their day and explain how it works 💪

[deft violet]

Common for xss and it doesn't typically allow proper sanitization. It has a bad habit of taking user input and plugging it directly into the dom.
@coral dock

If you're evaluating web page source code its definitely a red flag.

[coral dock]

what you're saying, is it mostly sends the user input to the console?

[deft violet]

"Eval is evil" is the saying

[deft violet]

https://medium.com/@zaid.zrf/how-eval-can-lead-to-xss-an-in-depth-lab-analysis-3b0d367fd480

Random medium post on it and there's articles everywhere. Probably that can all explain it better than I can.

No. We dont help with this

@fathom summit

[fathom summit]

https://tenor.com/view/gun-slinger-gun-slinging-cowboy-red-dead-gif-15753058

[kind void]

do you what you learn in oscp do you in the job do the same ? thing ?

[deft violet]

Oscp is very much a practical/applied certification

[mortal hemlock]

What sup ppl. Hey, I need some help with an issue in the thm room "windows command line" evertime I put in ssh user@......... I get ssh: Could not resolve hostage ...............: Name or service not known. What is going on?

[deft violet]

Thm has their own discord, js. You using your own VPN connect?

[remote remnant]

is there any powershell cmd method to get a Windows 10 home license for free?

[neat shuttle]

I want to study ccsp any free resources or yt videos that would help

[lost vapor]

#👥・new-member-guide
#💕・free-resources
#🌐・iot-and-networking

[chilly merlin]

Massgrave.dev

[wise iris]

how can use this into my advantage

@wise iris hola!!

[deft violet]

Do what

[wise iris]

i am newbie!! here and i am taking classes on ethical hacking so i need to know everthing abt this group anybody can help me

[deft violet]

#👥・new-member-guide

[wise iris]

@deft violet dude it needs subscription!!

[solid gull]

Nope, there's some free THM and HTB rooms/modules aswell

[wise iris]

lemme check!!

[solid gull]

Check out pre security on Tryhackme

[wise iris]

going on that and i found it thx dude

dude is it nescary to learn reconassince and info gathering

[deft violet]

Yes absolutely

Can't hack what you cant find.

Good recon and enumeration is huge.

[wise iris]

hmm thx dude i will st my journey if any doubts i will take u r help

[low bison]

👍

[dusty bear]

Hi everyone!
I’m getting started in cybersecurity. Done with the theory part through courses, books, and blogs. Now I want to move into hands-on practice before jumping into full CTFs or projects.

Where should I actually begin? What practical labs or platforms helped you build real skills...
Also, should I really stick with HTB or THM, or do you all have better recommendations for solid, real-world practice?

[austere glacier]

Hi guys I em new

Can someone help me how to hack?

[wet gate]

yes go with tryhackme and htb

[wet gate]

#👥・new-member-guide

[austere glacier]

Where do I know how to hack

[dusty bear]

Alright, thanks!

[wet gate]

on websites such as tryhackme and hackthebox

it takes years to learn

[jaunty wigeon]

Where do one get tryhackme

[wet gate]

https://tryhackme.com/hacktivities

[serene cedar]

Then my Computer Science degree is nothing once i graduate

[mortal hemlock]

https://tenor.com/view/whats-up-gif-22904841

What sup ppl! Who do I address if I have a question about the 100 day challenge?

[jaunty wigeon]

Cool

[terse turtle]

Probs

Its technically possible to get a internship or beginner position closely related to your industry, as for directly in your industry, you might need certs and work experience

[spiral notch]

anyone in chat

they’ll often redirect you to someone else if they don’t know

[whole patio]

I would not say "nothing", its may just not be enough to compete in cybersecurity with people that do have certs there

I told you that your vague question has a large answer-space depending on circumstances

[hardy pulsar]

just curious to ask is it possible to text and use apps on the darkweb?

[oak oracle]

Someone active here please tell me how to make that secure boot mode standard to enable

I tried everything

[mortal hemlock]

Thanks!

I have a few apps to help with learning Linux, Python, and SQL. Will screenshots of progress be sufficient for the 100 Day challenge?

[wet gate]

yh but they’re nothing special

[naive badge]

Hi! anyone who has taken EC-council's cnd that could help me out? I've got a few questions about it

[oak robin]

Alright now I have been trained even more yay. Learning the hard way

[rugged arch]

htb vs tryhackme which is worth for real world experience

[hard blade]

Aight. I need 40GB to install ParrotOs as my new main. How TF do I do this?

Since I won't be using windows anymore, I can just wipe it and boot from ext. Yeah?

[deft violet]

Usually handle the partitions from the Linux bootable.

That said parrot, you sure?

[wise iris]

help me with this error NSE: [ftp-bounce] PORT response: 500 Illegal PORT command.

after using nmap

[hard blade]

I tried that. It said it didnt have the space to install. I'll boot again to show what pops up

[deft violet]

That's a new one. You cant get to the installer partitioning tool?

[hard blade]

There's a 99% chance I'm a potato and doing it wrong

[deft violet]

If you go down to partitions on the left. What do you see there?

[hard blade]

It isn't clickable. None of it is

[deft violet]

Oh. Calamares lol. I havent messed with parrot in ages.

[hard blade]

Would there be a better Linux daily driver?

[deft violet]

Its fast boot in windows. Thats keeping the partitions locked.

As far as a better daily driver yeah pretty much any general use linux imo. Take that with a grain of salt. If you just really want parrot, its doable.

[hard blade]

So back to the bios boot window we go

[deft violet]

You need to change fast boot in windows settings

[hard blade]

Nah shit I just want something Linux that's good for sec but not Kali. I'll VM kali

[deft violet]

Should be under control panel->power options->

Choose what power buttons do or something similar

[hard blade]

Thank you for your help!

[deft violet]

Np

Just uncheck the box under there for fast boot. May be another tab under there I don't remember but that should get you close

If that doesn't work you can just boot into the parrot live and reformat from there.

[hard blade]

Yeah it did nothing. Me and this laptop are about to fight

[deft violet]

Id boot into the parrot live and use gparted

[devout nebula]

you need more space on your discs is that right? Cause what I can see from pic your only partition that have capacity is full

[deft violet]

No he needs to wipe windows

[devout nebula]

well , that is easy

[hard blade]

I'm tempted to just clear the disk. I just don't know what happens if I do 🤣

[devout nebula]

so create bootable usb windows installer , boot windows from the usb and during installation wipe all of the disc

[hard blade]

I know internet things. Not so much CPU things

[deft violet]

Why would you do this when you can just do it from the Linux bootable he already has.

[devout nebula]

apparently cause he can't right?

[deft violet]

He can't from the calamares installer. He should be able to from the live environment

We havent tried it yet

[devout nebula]

Oooo , yes , I was not in the whole story ,sry

[deft violet]

That's where we're at.

[hard blade]

Booting back in parrot to try gparted

[devout nebula]

well it's simple if you format your C drive , you don't have OS anymore

[hard blade]

Does that make it basically bricked or can I still get to bios? For future reference

[devout nebula]

you can go to bios and that is it

[deft violet]

That's basically what yoire about to do with gparted. Just delete the partitions then boot back into calamares.

[hard blade]

I ran sudo gparted. Not sure what to do from here.

[oak robin]

Whomever helped me thank you!

[hard blade]

Just delete that and then back to the installer

[deft violet]

You need the correct drive from the drop down on the right

That 150g is that the flash or your main disk

Looks like the flash drive

[hard blade]

I think it's the flash honestly. The drop down has no other options

[deft violet]

Open a terminal and type lsblk

[hard blade]

It says segmentation fault

[deft violet]

Wtf lol

[hard blade]

Right?

I'm glad it's not just me

It was the ext hd. I unplugged it and ran gparted and now it's blank

[deft violet]

This leans me to think there's something wrong with the parrot usb. What tool did you use to make it?

[hard blade]

Rufus

[deft violet]

Ah ok. We probably need to redo this.

[hard blade]

I had to do DD because the other option sent me to gnu

[deft violet]

Did you select the right partition scheme when you flashed the usb?

[hard blade]

Lol I honestly don't know, I just followed what Google said

[deft violet]

Go reflash the usb and under the Rufus options make sure you select gpt under the partition scheme.

[hard blade]

I'll have to fk with it more when I take lunch. I have to get ready for work now

[deft violet]

Sorry bud. Don't mean to give you run around.

[spiral notch]

it’s horrible

[hard blade]

I took note

[spiral notch]

don’t waste ur time

on any of ECC certs

[hard blade]

Oh bro! You helped troubleshoot the hell out of this thing. I appreciate your time and help greatly brotha

[spiral notch]

yes and as resetti has said it’s nothing special. nothing “like in the movies”

[spiral notch]

yes. as long as u screenshotncompleting some course

Screenshot completing*

[slow edge]

Just call them and ask them

[bronze mirage]

😆

[slow edge]

Also if you are asking it for tracking purpose, then we do not provide such tricks here. Make sure to read #📜・rules

[queen magnet]

hola guys actually on a bug bounty, if someone has some usefull information about CVE-2025-32101, because i dont stop getting false positive about it and i am not sure if i am doing something wrong or cannot trigger the script to make the exploit work ! really thank for you help in advance

[spiral notch]

there’s not much to it

just object injection

let’s you execute arbitrary code

that’s it, your question isn’t very clear

[queen magnet]

ok i will try to be mor specific, the object ijection work with a post request, th thing is in the template provided b nuclei there is also a get request on a sh.phtml.... which trigger the template to interprete in as a positive and i feel that either i am missing something or i am letting it pass through my nose (sorry if i am not clear in my explanation, i am on 8 hours straight into it and english isnt really my native langage)

[wet gate]

if there isn’t any public proof of concept exploit available for it, don’t expect to be able to exploit it without patch reverse engineering the vuln

[queen magnet]

there is PoC, my point isnt about the PoC but ore about this get request that trigger a false positive on a file even though there isnt the POST request needed to make the injection

[wet gate]

this doesn’t make sense

wdym triggered a false positive

[queen magnet]

i am just not explaiining it clearyy

[wet gate]

if you’re getting false positives relating to exploits when testing, chances are the vuln is patched

[queen magnet]

look the nuclei template scan for this - raw:
- |
GET /cache_public/sh.phtml HTTP/1.1
Host: {{Hostname}}
X-Requested-With: XMLHttpRequest
X: {{base64(cmd)}}

and when found this kind of pattern trigger a positive result for the vulnerabilite, the thing is when i look deeper into the link i got for this, it get weird cause its a angular JS tem[plate in my bug bounty case, not at all php and i was wondering if some one had some info about it ?

[wet gate]

chances are that’s not a vulnerable endpoint

and you’re looking at something completely different

[naive badge]

Company's paying, but I get it. Is there any alternative you recommend?

[wet gate]

comptia, offsec, sans

[queen magnet]

i know, i was just wondering, cause false positive is current and dont mind it, but wantd to talk to avoid a false negative ;D anyway thx for your time guys

[naive badge]

...I'm talking network security oriented cert. Not names of cert providers 🙃

[wet gate]

yeah go look on their sites for network related certs

???

if ur that lazy then i dont expect u to pass em anyways

[naive badge]

What

XD

I know which ones there are, just asking for recs from ppl who've actually certs related to the topic

But alr bro

Thx

[wet gate]

you should search for certs that are related to your job and company

not ask for recommended certs from people who do not do the same job as you

those three providers all have network related certs in some capacity, go check out their sites for them

[naive badge]

Got it, thx

[fathom shore]

someone hacked my microsoft account with this weird email @lontano.cloud and I can't figure out what it is since I don't really know these types of stuff

[wet gate]

reset your password etc, contact microsoft for support

[sand bramble]

Where do I purchase a licence for my application so that I get verified on mobile stores?

[wet gate]

you can find this information on google for apple or android devices, however your application would also most likely have to be checked for malware etc

[sand bramble]

Someone tried to access my Microsoft account too 6 times today using a VPN

[inner notch]

Chat I'm doing a degree in Networking and Cybersecurty. I've heard so many people saying degrees in this field are a scam. Anyone got any opinions?

[sand bramble]

It doesn't have any malware I learnt how to program bro two weeks ago I asked for help. Remember 😅

[spiral notch]

yeah!

comptia network+, CCNA

[lean kraken]

Hello!! Guy's I'm new here and I want to create final year project on cybersecurity can anyone help me or give me some idea about project?

[spiral notch]

CCNA is for advanced networking

[wet gate]

CEH is a scam

that’s about it

[wet gate]

ask chatgpt

[spiral notch]

degrees

[sand bramble]

Yooh as long as you gain the knowledge it's cool

[spiral notch]

he’s asking for uni degrees

i believe

[spiral notch]

no???

[inner notch]

Make a virtual network. Implement security measures. Break them

[wet gate]

good, in that case then you can check out android and apple developer posts regarding getting licenses to upload your app to their stores

[spiral notch]

degrees still help

just not much

[wet gate]

oh ye

[sand bramble]

😅😅 they don't study in school or what

[naive badge]

I've been studying for it and I honestly liked it a lot (I'm yet to take the actual cert because I'm a coward) but I thought the network security module was quite short ;~;

[lean kraken]

@wet gate Sir i'm asking u guys because u guys know better then chatgpt

[wet gate]

cybersecurity is a broad subject, you should maybe focus on a specific area of it
for example crypto fraud, or nation state attacks, or advanced malware campaigns, or ddos attacks maybe

[naive badge]

I was hoping the CND would go in more depth on secure network architecture seeing the modules it contains, but idk

[sand bramble]

Do I require some sort of background education to do network administration shiet

[lean kraken]

Can YOU explain me like ...

[inner notch]

Well I could but it's better if you find out yourself

[wet gate]

ideally

[naive badge]

Yeah yeah XD exactly. For foundational stuff I think it's quite good tho

[lean kraken]

thnx

[lean kraken]

thank YOU sir

[inner notch]

Ideally but as long as you ve got Cisco qualifications, you maybe worked in a helpdesk you can advance from there

[sand bramble]

But the foundational stuff I can teach myself right,,

[inner notch]

Very much so, even more than that

[naive badge]

I'd say absolutely

I'd say it depends on how hands on you are

[inner notch]

I've been reading a bunch of research papers on bandwidth management as they tend to go quite in depth

[sand bramble]

Point me in the right direction please,,I want to learn

[sand bramble]

I love hands on stuff you know learning while making mistakes,,

[wet gate]

https://tryhackme.com

[inner notch]

Learn about hyper V or oracle virtual boxes. How to simulate networks. Use Microsoft tools like active directory to assign roles. Implement access layers in AD to give certain users if your network different kinds of access. Use Kali Linux virtual machines, learn to use Linux obv, read about the tools it comes with

Oh yeah and try hack me
And hack the box

[naive badge]

Homelabbing

You can set up a few virtual machines and try to replicate projects on them

[sand bramble]

Awesome I've heard of this I'll try it out in a few hours to see how it goes,,,

[naive badge]

If you actually need a proper guide to start from zero and wanna follow the ccna route

https://youtube.com/playlist?list=PLxbwE86jKRgMpuZuLBivzlM8s2Dk5lXBQ&si=z4tVeE2VoxtzIDlC

Check out this playlist

Jeremy's videos are rlly good for learning ccna + networking foundations

[sand bramble]

Is YouTube really a good place to learn this stuff,,,I've never tried it ,,,😅

[naive badge]

The only downside about ccna is that it is very cisco-dependent

[naive badge]

I don't think it's about the platform but the quality of the content you consume in it

[sand bramble]

Yeah well most people just upload to get monetized so lots of things are just junk

[naive badge]

But THM and HTB are really good sources as well. I like their learning paths a lot, but I've only ever used them for learning ethical hacking stuff

[naive badge]

I agree 100%

I'd say Jeremy's channel is quite good tho. I learned a lot from his ccna content

[sand bramble]

I'll check it out though if someone else learnt from there then maybe there's some good content

[inner notch]

Not wrong but still very transferable skills. I would say it doesn't really matter because Cisco is everywhere but for the University I worked in we switched to Aruba!!

[naive badge]

I agree on that, but at some points while studying I was like "is this a cert or an ad" (now I know it's both) lolol

But the material is good yeah

[wet gate]

yes

so is google

[sand bramble]

Okay will check it out as well

Have you interacted with the site??

[wet gate]

yeah good site

same with codecademy

though it would be ideal to pick a language you want to learn first(if you even want to learn to code)

[sand bramble]

Python I guess is quite easy

[wet gate]

yeah

https://learnpython.org

html is not a coding language

[sand bramble]

Yeah I've been using HTML to create my website I didn't get a free host for a domain

[wet gate]

it is a markup language

HyperText Markup Language

[elfin dust]

guys i changed something in registry and now my laptop has the blue error Screen how do i fix it

[hearty loom]

i need to ask about osint

who can help

[dusky chasm]

Need to learn everything about mint cinnamon

I am a complete beginner

[deft violet]

https://labex.io/linuxjourney

[dusky chasm]

Thx

[whole patio]

With the amount of info given - do something else in the registry

[whole patio]

dont ask for "someone", ask the real question for the group here

[ancient grove]

a black metal cybersec person?? i didnt know those existed

uhhh im trying to set up burp suite again and the normal process wont work

i feel like an idiot (and probably am) but genuinely have tried setting it up normally

lmk if theres anything that i might be doing wrong

[wet gate]

what about it isn’t working

burp has its own built in browser now so u can literally just download the community edition and hit open browser to start capturing traffic

[ancient grove]

i tried that

ill just try again

[wet gate]

what isn’t working about it

[ancient grove]

lol i just forgot something for the built in browser. it works now.

thanks for the reminder tho

[thin marten]

anyone here do "editor" on HTB? I am stuck on the priv esc. I am trying to use CVE-2024-32019 but I just get a shell as myself even though ndsudo runs as root.

[deft violet]

Look for a 2025 cve for sudo

[thin marten]

srry if this is a stupid question but how do you get the sudo version if you cant run sudo?

[slow edge]

You cannot run sudo, but there are other binaries which might help you with exploits on sudo! You just need to find that binary

[thin marten]

is it not ndsudo?

I might just be doing something wrong

[slow edge]

Ya you're on the right path

[spiral notch]

ahem https://gtfobins.github.io

[thin marten]

I think I am just doing something wronh whilst following this https://github.com/netdata/netdata/security/advisories/GHSA-pmhq-4cxq-wj93

[spiral notch]

no problem

wait

is editor a seasonal machine

like

active

[thin marten]

yeah its active. ill f off lol was tryna see if anyone had tips

ill keep running w ndsudo

[halcyon crypt]

What's everyone's thoughts on the asus Tuf line?

[spiral notch]

depends

the line makes a lot of things

[spiral notch]

cannot help with that then

[halcyon crypt]

Laptop Ryzen 7 with 16gb RAM 6gb RTX 4050

[spiral notch]

ohh youre talking abt laptops

yeah their laptop line is amazing

[halcyon crypt]

Its on sale for a good price and im thinking of buying it but I don't know much about the brand

[spiral notch]

ive been running everything on an asus tuf since 2020

and have done a lot of everything on this

from pretty hardcore gaming

[halcyon crypt]

499

[spiral notch]

to hacktivism and attempts to prevent violence digitally

etc

its really goo, yes

good

asus itself, interesting how you odnt know thel ine

[halcyon crypt]

I meant to elaborate earlier but my adhd reached out to hold my hand

[spiral notch]

its a good and really popular one as well

[halcyon crypt]

I know the line just never used one personally

[spiral notch]

or nltot likne

i meant brand

ohh

oki

well yeah its very good

[halcyon crypt]

Damn it my wife is going to murder me in the morning

[spiral notch]

^

[spiral notch]

^

its very compatible

with anything

[spiral notch]

happens to the best of us

[halcyon crypt]

We've been sharing a dell g15 i got for her

And I saw this on sale and thought hmm

[spiral notch]

yeah

its amazing

get it forsure

[sour sentinel]

Hello, I just joined and I’m having trouble with a basic ctf challenge for my Uni where I am supposed to retrieve a flag in a database but they have an input checker that checks for “SELECT”, “UNION”, “ ‘ “, “OR” and “\””. Any suggestions on what I could try?
( sorry if the English isn’t perfect) if you can’t tell I’m pretty new to this

They said it should be doable without a tool such as SQLMap

[slow edge]

Did the restriction is only on "SELECT"? did you tried changing the case and doing something like "select" or "Select" or "sElect"?

[sour sentinel]

Yes and that seemed to work but I couldn’t figure out how to start the inject without the “ ‘ “

It hard coded the restrictions

So “ SELECT” and such is only uppercase filtered

[slow edge]

Okay if both quotes ' " are blocked then
How is the structure of Database there, if there is any numerical value which is associated with the flag part, like an id
Then you can print that particular data without quotes

[sour sentinel]

Yes it’s labeled with the id of 4

[slow edge]

Then what is blocking running select * from database where id = 4;

If you can bypass select the way I told you then this should work

[slow edge]

For int values, you can skip quotes

id=1; select ....

or id=1 uNion ....

[sour sentinel]

Ah I’m forgot “=“ is also blocked but I will try your suggestion with select * from database where Id between 4 and 4. Would this also work?

So to start the inject you can skip the “ ‘ marks?

[slow edge]

Ya if the query is already taking an int then you can skip the quotes

[slow edge]

Ya it will work! And if possible then just dump the whole database, no need for where or =

[sour sentinel]

Thank you so much! I have been beating my head against a wall for a while now!!!! You are a life saver

[sour sentinel]

Sorry last question, would I also still need a % sign or anything at the start of the inject?

[deft violet]

sudo --version

[sweet rapids]

anyone have a unlock all tool for bo7 camos and guns? please dm me

[deft violet]

Not something we are gonna help with.

[whole patio]

As long as you either do not plan to run linux on it, or make sure that this particular brand/models isn't known to be problematic with linux. the asus TUF usually is problematic though

[crisp star]

Ewww bo7

[ripe igloo]

bo7 why?

[hardy pulsar]

Oh i see

[plucky gate]

Which of the following is associated with using peer-to-peer networks?

Options:

a) Where to place the server

b) Whose computer is least busy and can act as the server

c) The security associated with such a network

d) Having enough peers to support creating such a network

Guys please help me to know which one is the answer and some reasoning behind the answer

[neon raven]

Ummm if you think about peer to peer and its logic answer here is quite obvious isn't it

[chilly merlin]

C

[neon raven]

?

[plucky gate]

Some says C and I think D

Because the definition which I know it says security is always weaker than the client server in P2P

So for me security is never an option but it seems to be people saying this is the correct option

[neon raven]

I think security of a network is important and it is something every network needs to be considered before getting in place or being active it is not specific to peer to peer

[chilly merlin]

A) there is no central server
B) peers dynamically share responsiblility there is no designated single server
D) more peers does improve performance but it's not a defining concern of p2p

[plucky gate]

Ummm

Hmmmm

[neon raven]

uMm for a and b I think the same but for c I expressed my views so I think it should be d

[plucky gate]

Gotcha

[neon raven]

Cause we work directly sharing our stuff i think it is important that we have peer to keep running the network effectively

[chilly merlin]

The most distinctive issue related to p2p is security for example
Lack of central control leading to risks like malware distribution

Difficulty in authentication and trust between peers

Exposure of IP addresses and potential for attacks

Challenges in enforcing content policies or preventing illegal sharing

So from the options u gave me I think its C

[whole patio]

Arguably that is solved by hashes.. downloading the wrong files is not a technical issue

I'd go for D, if only one answer is expected

[neon raven]

If it continues their would legitly be

Team C
Team D

lol

[whole patio]

choosing C implies nefarious intents, and while we might go there mentally, it is not inherent to p2p network solutions

[chilly merlin]

I mean even the official CompTIA and Cisco objectives list the primary concerns/disadvantages of P2P as:

Difficult to secure
Difficult to manage/enforce policy
No centralized control

But one could argue that the question is too vague in saying "having enough peers" cz obv you can't have a p2p

With just one device

[high rune]

Hi everyone im a student that wiling learn about hacking and cybersecurity i want to know about basic and to learn and go to the highest level in hacking and cybersecurity i would like get your guidance can you plese support me please im still a beginner and can someone tell what steps should i take to reach to that level 🙏 😊

[whole patio]

#👥・new-member-guide

[high rune]

Thanks bro

[spiral notch]

D

[mental plume]

.

[humble vector]

Hello guys I'm a graphic designer .. am willing to work for anybody on a remote job .. kindly send a DM if you need my services

[zealous gorge]

If anybody could tell me if we could bypass dep on mac

[lusty spade]

Question, what exactly is the benefit of blind sql injection? Little confused on how it would help not to have an output

[whole patio]

Sometimes you don't have the luxury to see the output presented to you. Its not that its more beneficial, sometimes it may be necessary

[lusty spade]

It confuses me a bit because injections seem to be based on extracting data. So not having an output makes me think it would only serve to DOS the target.

[lusty spade]

Do you know any example where it would be used or is it for just interruption?

[outer jacinth]

▫️ CSA ( Certified SOC Analyst)
▫️ eCIR ( Certified Incident Responder)
▫️ eCDFP ( Certified Digital Forensics Professional)
▫️ NSE4
▫️ Q-Radar
▫️ Splunk

Good enough for SOC jobs ?

[whole patio]

https://medium.com/@soltanovkamil19/blind-sql-injection-821d9f91cc0e this is what I found with a glance

[lusty spade]

Ahhhh I get it now, it’s not that there’s no output at all, the responsiveness of the query is the output

Thank youu

[wet gate]

yes

[halcyon crypt]

Anyone having issues with THM openvpn?

They updated my account to the "premium config" so I regenerated and download it start openvpn but when I check the tun0 interface my machine now lists IP's in the 192. range instead of the 10.

Their website says im connected to their network but when I start a machine in the room it's IP is a 10 range and my pings fail

[potent peak]

hello all happy Sunday

[whole patio]

Working fine with me

[halcyon crypt]

@whole patio may i ask what OS you are using on your end to run openvpn it appears to be an issue with those using Kali

[whole patio]

The vpn is opened inside a kali VM

[wet gate]

try the other config see what happens

[halcyon crypt]

@wet gate yea that will be my next step. I just wanted to get the room done so I gave in in used the attackbox 🤢

[wet gate]

lol

[valid belfry]

I use openvpn

Send screenshot of error

[wet gate]

don’t think there is necessarily an error, more a misconfiguration by the sounds of it

[halcyon crypt]

There is no error the openvpn service is starting and running perfectly fine on my machine. THM's site even shows me connected to their network. There is an issue with the connection to the Internal THM machines

@resetti I thought that so I looked at the config file didnt see anything glaring out as the problem even sent it to Gemini and was told it should still route all thm traffic through the tunnel

[mortal glacier]

i'll pay anyone to help

[valid belfry]

If you can't describe your issue I'm good @mortal glacier

[mortal glacier]

basically someone hacled my girlfriends discord entire computer started talking to her through a browser because her sister downloaded something from some guy named luna like a fake hello kitty miecrfaft link

thye are tryna black mail the child and her

[valid belfry]

That is 100% her fault I'll be real

[mortal glacier]

for 100 crypto

[eager ocean]

hey do anyone have any drive or any blog website in which i can get all the material required form basic to addvanced?

[mortal glacier]

she knows

[valid belfry]

Its nearly impossible to get ratted on windows now

Tell her not to pay and to just reimsge her laptop

[mortal glacier]

ok what about the discord account

is it possible

to get it back

[valid belfry]

Contact discord support

And try a reset from email

[mortal glacier]

they took the email and number off the account im assuming

cause she tried

and they said it didnt exist

[valid belfry]

Who's they

[eager ocean]

hey do anyone have any drive or any blog website in which i can get all the material required form basic to addvanced?

[mortal glacier]

the person who stole

it

i mean i spoke to him in call

he is from turkey

she is willing to pay so am i

[halcyon crypt]

so for some reason with the new THM config it sets my wlan adapter to the 10. range and the tun0 to a 192.168 range

[toxic forum]

Can someone recommend me videos for cybersec basic fundamentals?

[wet gate]

such an unbelievably bold claim

[wet gate]

https://tryhackme.com and https://academy.hackthebox.com

[wet gate]

does she still have the file or link that she downloaded

[valid belfry]

You have to be genuinely just downloading random things

Just be*

[wet gate]

in most cases young people will sought out programs, tools, cheats, whatever for games, this leaves an easy way for any “hacker” with a github rat to target those people

[mortal glacier]

yea

[valid belfry]

Yep I used to do it, miss it

Good ol nanocore

[wet gate]

send it to me

[mortal glacier]

in dms?

or can i send it here

[wet gate]

so my point stands, it’s nowhere near “impossible” in this day and age, even not relating to rats, but cyber espionage still requires social engineering and some sort of payload to be executed on the machine

[wet gate]

dms don’t send it here

[mortal glacier]

i also have the telegram they tried to extort on

[valid belfry]

You have to be careless

[mortal glacier]

this is what her sister downloaded

[valid belfry]

This is probably not how it happened

[wet gate]

obviously, which most young people/uneducated people are

[valid belfry]

😭 I'm 20

Learned not to do those things at 13

[wet gate]

that landing page screams malware

[valid belfry]

I wouldn't waste my time designing that for mal

[wet gate]

likewise, as i was interested in computer security, of which i’m sure you probably were too

[valid belfry]

I wish I thought about that tactic back then

[wet gate]

who says it isn’t AI generated/cloned off another site for ease

[valid belfry]

True, chatgpt is pretty good now

[wet gate]

my point is not everyone grows up with this knowledge dawg

[valid belfry]

Forgot how easy It was to make a website

You're right

We are blessed with knowledge

[mortal glacier]

well her sister is young

and isnt on the internet

cause her parents didnt let her have a pc yet

thats why she let her little sister try it out

[valid belfry]

Let me get this straight

We are communicating " us > you > them"?

[wet gate]

delete this btw

[valid belfry]

That'll be counterproductive

[mortal glacier]

Ok

[wet gate]

i want time to download the payload

[wet gate]

what

[mortal glacier]

im confused by this sorry

[mortal glacier]

i came here to find help cause her sister and my gf are being extorted and blackmailed

for crypto

we arent on the internet like that

i know better but

they dont

[wet gate]

don’t pay just wait

[valid belfry]

This is a port scan

[mortal glacier]

Ok thank you

[valid belfry]

Did the photo send

[wet gate]

yes

[mortal glacier]

yes

[valid belfry]

Christ discord is buggy

212.68.34.228

That's the server hosting it, appears to be a vps out of turkey

Oh also upnp

[wet gate]

go shell it bigman

[valid belfry]

Probably want to turn that off

😭 I don't do that sht anymore

All legal, I work helpdesk

[wet gate]

mhm

[mortal glacier]

the guy was also using w okada voice changer when i was talking to him

he shared his screen

[mortal glacier]

idk if it helps but i got pictures of some of the info

[slow edge]

Is this related to some kind of vigilante stuff or just investigation? If it is an investigation then make sure not to reveal too much info here, you can take this in DMs. Everything else is good 👍

[wet gate]

yeah

[wet gate]

investi

[mortal glacier]

i added you

[slow edge]

Ya then not an issue! Just make sure nothing serious is dropped here! but ya investigation is fine. I just speed read things so I was just clarifying

[queen gazelle]

Yo

i got an interview offer from META ∞, detection & response security engineer, Intern role.

i want to prepare for the interview.
I am very confused where to start. Interview's on 25th

[spiral notch]

very confused as in you dont even know what youre doing?

[queen gazelle]

not confident enough, i have experience with Android malware analysis from my previous intern.
But this one focuses on different thing.
Idk how will I crack the interview :/

[visual dawn]

Hey fellas, I am currently trying to learn on how increase my privacy and give big tech as little data about me as possible.
I trying to reduce my browsers uniqueness to avoid fingerprinting - Therefore i started to use firefox and have the settings set to block all activity tracking and fingerprinting. I also use the firefox multi account extension, proton VPN and ublock. For research purposes I started to use the Tor browser. Now my problem is that some websites are not working anymore, or keep bugging me with captchas. I understand that VPN-IP Lists are tracked by many companies to block them but i dont realy get why others are not working at all. Are there any guides on that? I also like to watch free anime streams in embedded sites but they seem to not work anymore either.

[spiral notch]

ublock by default can block too much

[whole patio]

Rule of thumb - if it is a free vpn server or tor connection, many sites just block you

[strong cloak]

I am trying to run a tool on my kali linux vm and it throws this error can anyone help me?? Thanks in advance

SyntaxError: Non-UTF-8 code starting with '\xcb' in file /home/rabie/Downloads/WIFI-HACKING/WIFI.py on line 1, but no encoding declared; see https://peps.python.org/pep-0263/ for details

[spiral notch]

not a kali issue

[strong cloak]

I know it is a problem in the program

How can i fix it

[spiral notch]

bro

we have no idea how considering you didnt even wesent ur py file

lol

[strong cloak]

I clone a github repo and followed the steps but it threw that error

[whole patio]

Created:
06-Jun-2001

Look for something from this decade

[whole patio]

When was the project last updated, according to the github page?

[strong cloak]

10 months ago

[visual dawn]

What VM-Ware are you guys recommending? Id like to experiment with linux and with googles API for gemini to work in a CLI

[whole patio]

either virtualbox for ease of use, or qemu for a bit more options

and the word you were looking for is "hypervisor"

We don't help with account recovery, of that accounts service provider can't help you

[fleet granite]

Hello guys,so I was trying to make my pedrive persistence linux (Cinnamon Mint) the size 45 gb my pendrive is Sandisk and it is usb 3.2 gen 1 so i tried to use rufus and i tried GPT and MRB partition scheme and FAT32 file system and target system is BIOS or UEFI (this is only one available) and cluster size is 32 Kilobite ,so i made my drive persisitence using GPT but then when i installed discord and reboot again i found the file gone like it is liek it doesnot exist

[deft violet]

Help im dm's is typically frowned on. Prefer you to ask any questions you have here.

[worthy zodiac]

Anyone heard of mysterium vpn?

[spiral notch]

yes what abt it

[ashen nacelle]

can anyone teach me the good hacking

[wet gate]

the good hacking

[whole patio]

#👥・new-member-guide

[fleet granite]

can some one help me with it

i ahve tried many times

[golden bloom]

If they just hacked her email, let her change the password and disconnect all devices of it. Also clean all cookies on the browser and what I woeld personally do is on each service she uses disconnect ALL devices and after that refactor the PC and/or mobile phone and trying to change password for all services she uses.

[fleet granite]

not a hacker though but i would explore the google account and look for leads

i think there is a plce not sure where but can be found inside the google account where it shows what devices it is connected

also i think you can log devices from there

[lilac carbon]

Thank you

[fleet granite]

wlecome, also shift all the information of the gmail in the pendrive without using the computer and then delete things of that account i belive that will be safe using computer i am not sure but i believe is unsafe personally i would do that becuase people cannot track pendrive (up to my knowledge)

[golden bloom]

If you got an offer from Meta you should not be confused for knowing where to start

[golden bloom]

The reason your files disappeared is likely because Linux Mint booted into 'Live Mode' (RAM only) instead of mounting that 45GB partition.

• Even if Rufus creates the partition, the bootloader often forgets to tell the OS to use it. When you boot, you need to ensure you are selecting a specific "Persistent" option in the menu, or press e to edit the boot line and manually add the word persistent to the text.

• You used FAT32, which has a 4GB max file size limit. Trying to force 45GB persistence on FAT32 often causes glitches.

Since you have a fast USB 3.2 drive and want that much storage, why using 'Persistence' (which is buggy). Instead, grab a second USB stick with the installer on it and perform a Full Install onto your SanDisk (formatting it as Ext4). It will act like a real portable SSD, it won't delete your files, and it will be much faster.

[spiral notch]

can you not like

chatgpt answers for others

they come here for genuine answers from experts, not from chatgpt copy pastors

we have enough of these

[fleet granite]

So i found that my linux was using the persistence mode ,i used terminal (forgot one but asked help of ai to give me a cdoe to run on terminal) and found that it is indeed persistence ,so as you said about full installation of Sandisk can you pelase elaborate on how i should format my drive to use it also my pendrive is 128 gb (originally it is 114 gb ) so i want 45 gb to be used in linux and the rest storage as a siple drive to store my file normally

[oak robin]

And they got the last card from my deck

[vital pollen]

hi friends does anyone know any remote internships for cybersec? i've been hunting for remote internships rn but can't find

[wet gate]

rare

[hollow lance]

How do I reverse search an address.

[slow edge]

What address?

[hollow lance]

Just an address in the USA.

[slow edge]

We do not help with such things because it can be used for tracking. Please make sure to read our #📜・rules

[hollow lance]

Then where do I learn how to mostly attack (Red Hat)

I know how to defend, but I don't know how attacks work or how to attack on my own.

[deft violet]

https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux

[oak robin]

Please stop spiking me

[deft violet]

Do what

[hushed osprey]

can anyone give me hacking whats app

[whole patio]

no, stop asking
#📜・rules

Also, no need to DM me

[spiral notch]

i think you meant red team

[whole patio]

Do not DM me, if you have anything to say, say it here

[rapid oasis]

illegal requests are forbiden

[craggy tide]

can anyone give me hacking whats app

[fleet granite]

Anyone please

[twilit topaz]

any ssh study material plug over here ???

[whole patio]

https://forums.linuxmint.com/viewtopic.php?f=42&t=287353 I do not know which guide you followed, but this seems to be referenced even today

[fringe raft]

Hello any wiki that talks and deepens the understanding of reverse shell?

(Educational purposes due to it being our final project where we attack another computer in the same network)

[crisp star]

Just read up what a shell is?

[craggy tide]

google is free

[fringe raft]

I know about it... i just cant understand it

im asking for reccomendations lile theres a lot of resources in google.

But some of them are not inline

tried asking chatgpt to deepen it and it wont cause of the policy

[crisp star]

It's very simple. Victim connects back to the attackers machine.

Else just play with a C2 framework

https://www.revshells.com/

[fringe raft]

Thank you so much

[craggy tide]

are you dyno

[fringe raft]

No... technically yes

[spiral notch]

anything more specific? there’s not much to learn abt rev shells

[fleet granite]

I don't have much knowledge of computing 😢

[fleet granite]

amy yt video you recommend

[whole patio]

I recommend you use actual documentation, and get that knowledge of computing

[fringe raft]

Well i though rev shells are hard cause that is our final project. Ive been asking reddits what tools are used and such

[fleet granite]

thanks

[fleet granite]

thanks tooo

[deft violet]

The basics of what a rev shell is are not hard at all. Getting one can be, depending on the exploit used.

[fringe raft]

Hmm i see. im still getting through the basics of linux and the only tool i know as of rn is nmaps and a bit of wireshark

[whole patio]

Don't worry too much about "how tools work" then.. there are a lot more low hanging fruits to feast upon before that

[frigid dew]

hey, could someone kindly share web exploitation resources pls?

[spiral notch]

not the rev shell that’s hard

it’s just communication after an exploit so that you can do whatever you wanted to do

exploiting the thing itself

is the hardest part

[spiral notch]

great then learn en

em

[molten bane]

any netacad networking course recommendation? beginner here

[oak robin]

I need something to prove I'm not crazy right now brought to the house

💯 😎 😎

[slow edge]

@crimson aspen
Firstly, there is no way to find someone’s email out of their insta until and unless you don’t have some data points, with their name it is not possible.
Lastly, we do not provide help with that so please make sure to read #📜・rules and do not pay anyone who DMs you about this, there are scammers here.

[crimson aspen]

Sorry

[jagged bridge]

Is the any software developers? If yes please let me know how yall be generating incomes plug a brother out

[fervent frost]

Im not able to text in #💬・old-gen-chat

[wet gate]

getting a job

[whole patio]

You cant post pictures there, is that what you mean?

[spiral notch]

LMAO

so first you wanna learn to exploit it

and then defend from it

lmfaooo

you can’t exploit it via metasploit

maybe don’t act as anonymous and be a skid trying to pull insta ips

disgraceful to the actual founder of anonymous who used to be here

in owlsec

exploits

that get latched

patched

fairly quick

[leaden gale]

Not for too long

I just wanna learn everything properly

[wet gate]

https://tryhackme.com/hacktivities

[leaden gale]

Thanks

At least someone who doesn't
Makes fun of you for being a beginner but guides

[chilly merlin]

Hey Guys I just completed the CEH v12 (and the graded assignment was alarmingly easy) Yeah I know v13 contains AI and much more stuff but I am confused.. Does anyone have any experience with CEH v12 or CEH in general? What do you think about it?

[whole patio]

if your first question is "how to do carding, how to install tor and hide my IP" but after two weeks you still have not seen #👥・new-member-guide - maybe its not everyone else but you?

[whole patio]

It's pretty much worthless

[chilly merlin]

I was afraid it is xDD

[spiral notch]

not making fun of u for being a beginner

but being a cringe anon kid after seeing a tiktok edit

[leaden gale]

My school gives about 5-7 assignments a day of about 200 pages what do I even do.
So I thought of asking experienced ppl who have already read that

[spiral notch]

mhm

from anonymous

so real

[whole patio]

So lazy and can't be bothered to find out yourself

That is going to be one short journey

[spiral notch]

watch him get scammed

by that person asking money to mentor him

or teach him to be a con kid

com kid

[wet gate]

joke cert

[leaden gale]

Sorry if I made you angry

[wet gate]

ask for help from ur school

thats their job

then ur school is shit

[leaden gale]

Yes

[deft violet]

Oh, fake anon. Nice.

[leaden gale]

And I didn't said I am a real anon

I am just a beginner

[deft violet]

The user name implies it

Be like me walking into a biker bar wearing a Mongols patch and being like "I didn't say I was a mongol"

[leaden gale]

Okh

[latent basalt]

Hi

Can anyone mentor me

[deft violet]

This is not a line of work where private mentorship is really a thing. It is constantly evolving and you gotta get used to self learning. Only way this works.

[whole patio]

That person played a joke on you. No one here will

[latent basalt]

☺️

[fleet granite]

any specific website you use to learn

[deft violet]

There's loads. Hack the box, portswigger academy, tryhackme

[upper talon]

I want to get into penetration testing but unsure what the best way is to progress skills and certs, ideally would love to have the OSCP but I’d like to build up to it if I can since that’s expensive, any advice?

[fervent frost]

Nope... I'm not able to text any message

[whole patio]

There are several links in #👥・new-member-guide #🛠️resources-tools #💕・free-resources - no use trying to look for recommendations/shortcuts/walkthroughs to this. Just start and see where it gets you

Avoid youtube and LLMs, be prepared for this to take time.

[willow pawn]

Hello, i have a question about taking down a tiktok acc that post some inappropriate content, what's the quickest way?

[whole patio]

Report them, get over it if nothing happens

[wet gate]

report it

[wet gate]

#👥・new-member-guide https://tryhackme.com/hacktivities

[fringe mural]

can someone help me with learning how to test for race conditions since i tbh have no clue

[fleet granite]

thanks

[fleet granite]

thanks

[tender dock]

Does anyone know on how to get unbanned from Instagram, ive been banned for something i didnt even do , is it the new a.i fault?

[whole patio]

Seriously?

[shadow rose]

🤔

[uneven eagle]

Appeal or create a new account.

[tender dock]

Yes

[uneven eagle]

That is the only way unless you somehow find a 0 day in instagrams servers lmfao

[uneven eagle]

You should probably remove the "Intermediate" role from your profile btw.

[tender dock]

Already appealed

[uneven eagle]

Then make a new account.

[tender dock]

Why

[tender dock]

I got so much memories from fam on there , damn

[uneven eagle]

Because there's no way in hell you're intermediate by any standard judging by the question you asked.

[uneven eagle]

Maybe don't violate the TOS. Or better yet, keep backups.

[tender dock]

I didn't violate it

[uneven eagle]

🧢

[tender dock]

🤦

[uneven eagle]

I can guarantee you either commented some racist/sexist shit, or you were pretending to be someone else.

That's the case 99% of the time.

[tender dock]

No no no

I don't comment

[tender dock]

Dont assume Stuff

[main rampart]

guys how do i clean my android with linkux, its been hacked trough termux i thiink, degraded the shell and change booting

[deft violet]

If your phone actually has a virus it would need to be factory reset. What makes you think it's hacked?

[steel egret]

Does anyone know any glitches in credit Union

[deft violet]

We do not assist with illegal activities #📜・rules

[spiral notch]

even if we would

we wouldnt tell you

dw

[hidden mountain]

Hello all i am in need of a bit of help anyone willing thx

[whole patio]

You need to tell us the problem first

[hidden mountain]

Ok cool am sure it is fairly simple just not for me lol. i am on root me doing ctf and i cant seem to get the ssh to connect i have root username and password i think but it refuses connection

i have used sqlmap and obtained the credentials i can access the database phpmyadmin i have dumped the database and dehashed the passwords its driving me nuts

i dont want to bruteforce and i dont think it would work within the timelimit anyway

[woeful bronze]

is ssh with hashing?

[hidden mountain]

not sure what you mean by that mate explain please

[woeful bronze]

actually what do you even need ssh for if you're root?

diffrent server?

[hidden mountain]

i have root credentials obtained from the sql database but i cannot access the web server

the credentials i have should work to log me in via ssh it connects to login "ssh -o HostKeyAlgorithms=+ssh-rsa root@212.129.29.185" but refuses the passwords

[deft violet]

You sure the root creds are usable via ssh

[woeful bronze]

phpmyadmin is for web most of the time

it keeps passwords for the website not for ssh

[hidden mountain]

haaha nope but they should be

[deft violet]

Usually your initial exploit on a ctf is gonna be user level

[woeful bronze]

pretty sure most ssh don't even use a DB. Just some file on the system

[deft violet]

Yeah you'd be banking that those credentials are used twice. In the web app and also for the root account via ssh, and that ssh by root isnt pub/private key

[hidden mountain]

so maybe a different exploit i have used sqlmap nikto scan was indicating lots of sql vulnerabilities

[woeful bronze]

I wish I could see the website, there's probably an exploit to use to enumarate the system files to find the ssh key. Or just the flag...

[deft violet]

Why cant you see the website?

[woeful bronze]

Because I'm not running the ctf lol

[deft violet]

Oh mb lol

Wrong user

[woeful bronze]

np

If SQLmap and nicto say multiple valns it's very likely that there is a possibility for system file access (php is shit)

[hidden mountain]

its a virtual machine on (https://www.root-me.org/en/Capture-The-Flag/CTF-all-the-day/) you have to be logged in to access them

[woeful bronze]

ctf num?

[deft violet]

If you truly hit a dead end, you can always search for a write up for the machine.

[hidden mountain]

Exploit KB Vulnerable Web App

[hidden mountain]

man i have been tempted but thought better to come in here and learn how

[hidden mountain]

Exploit KB Vulnerable Web App

[woeful bronze]

what's the phpmyadmin user and pass just to save time?

[hidden mountain]

phpmadmin login root password toor i know original eh lol

[woeful bronze]

lol

[hidden mountain]

these are the creds i got from the db members login :admin : P@ssw0rd
r00t 1qa2ws
editor q1w2e3r4

[hidden mountain]

do you think i should just try something like dirbuster

[woeful bronze]

I'm testing to see If I change the href in downloads if it can let you download some previous directory from the server files.

probably not, but worth the try

tried it, nope

[main rampart]

its downgraded , no ggoe store, auto boots,

[woeful bronze]

pretty sure it's just LOAD_FILE() as a query

[spiral notch]

nikoo

nikto

is so inaccurate

[woeful bronze]

doesn't matter after all. phpmyadmin was literally completely open

just testing queries now to enum system files

[vestal shard]

@silk zenith

[hidden mountain]

please elaborate dude very interested

[woeful bronze]

SELECT LOAD_FILE(CONCAT(@@datadir, '../../../../etc/passwd'));

you pass this as a query

and it shows the content as a blob

uh, can't send images and can't sent the text

I'll dm it to you

[hidden mountain]

cool man

[wooden crane]

Hello all, I’m sorry probably you get this question a lot but can someone guide me if it is worth getting the THM subscription and later, certification?
I’m more on the Blue Team side of things. Is it going to be helpful to learn?

[ripe igloo]

Get the subscription, it's worth it

[wooden crane]

Thanks, I probably needed to hear someone say that so ima go ahead and get the Black Friday deal lol
Have you tried it in your time too? When you were starting out

[fleet zephyr]

so i am a college student rn interested on cyber security i studied ccna but didnnt wrote exam for it i aim for cissp but it need profeessional experience as requirement should i write ccna exam and prepare for ccnp and go for cissp?

[devout linden]

100% woth it. There is a Black friday deal on my side for renewal idk about new people.

[fleet zephyr]

i should get a clear path idea before i face my college placements coming up on april someone please help me

[wooden crane]

Yes I also see a discount as a new user. Are you actively using it?

[fleet zephyr]

how much does thm cost for 1 month

if u got any offer

[wooden crane]

There’s yearly subscription for $79

[fleet zephyr]

i am thinking should i go for yearly but if i really lock in i can maybe finish all challenges in 1 month

[wooden crane]

Me too, thinking of pacing it out to see where I feel like I’m a good fit. I think doing it faster will make me forget things faster. Maybe 2 months?

[fleet zephyr]

ya im thinking same

we need some professional's word but no one is online here

[wooden crane]

Some gave me a go so I’m probably going for it

[left valve]

hey uh question, this isn't really tied to coding or non of that but, if I have some bit in a bitcoin account and I want to clean it, how do I do that (Educational Purpose)

sounds BAD but I actually do want to know (I don't have time to be a criminal)

[oblique kettle]

https://x.com/_ttkcyrax/status/1993174176803238049

[dense palm]

Anyone who can hack school portal and change campus marks

[left valve]

Yo ass aint up to no good😭 (joke)

[dense palm]

@left valve @left valve come on

[crisp star]

Did you, maybe try and just learn to get good grades?

[left valve]

Ong

[crisp star]

If you read #📜・rules then you can guess that no one is gonna help you.

Except for scammers.

[dense palm]

@crisp star okay what about you

[crisp star]

You think that hacking into a school system is legal?

[dense palm]

I just had an inquiry @crisp star

[crisp star]

From?

[dense palm]

@crisp star I mean was speaking for myself

[left valve]

A thought that came up after watching one 0day vid🔥

[whole patio]

Long story short, we don't help with this, and it's a weird request

[short oasis]

How hard would it be to make an osint tool with python?

[rapid oasis]

it depends on a scope you want to cover

[short oasis]

How so?

Im looking to make one for server I'm running

[rapid oasis]

This should be easier, I thought you are thinking about some social media analysis

[short oasis]

Ah, I dont really need much. Do you have any advice on how to get started on it?

[steady palm]

And Deadbeef gave you a justifiable answer.Read the #📜・rules and dont ask for that again.

[molten widget]

@left valve hey there

[hidden mountain]

good morning all does anyone in here know about esp32 marauder i have an issue with mine not recording .pcap

[wet gate]

you use a mixer, and or convert it to something like XMR, then mix that too

[wet gate]

buy access to some osint platform and utilise their API

[spiral notch]

can? sure

will? no

[chilly merlin]

I don’t want to be hacked anymore so can someone hack me more? 🤷

[woeful bronze]

Huh?

[chilly merlin]

They got me good

[woeful bronze]

Nuke?

[whole patio]

Just ignore them, honestly ^^

[woeful bronze]

https://tenor.com/view/mus8029-they-got-me-cuh-gif-1861339534397801359

Ah.. bummer can't send the "got me cuuh" meme

[mental tide]

can anyone help me to learn some network security development subject

[chilly merlin]

Of mice and men with computers my name is Lenny

[main rampart]

What does this mean, eli5

[fringe mural]

how can i install this model cuz i have no clue: https://ollama.com/library/dolphin-mistral:7b

[whole patio]

The command is there right on the top right - after you executed the ollama base installation script

follow that
https://ollama.com/download

[fringe mural]

i'm not on macOS

also i have it downloaded

[whole patio]

Thats not for macOS

[fringe mural]

i just don't know how to get the model in ollama

[whole patio]

MacOS just happened to be at the front of the site

[fringe mural]

wait do i run it in cmd or what?

[whole patio]

long story short - yes

[fringe mural]

alright

4.1 gigs meh

[whole patio]

thats a small one

[fringe mural]

7B parameters

it's fine for what i need to use it for

beside i can't have it take up to much RAM since i only have 16 gigs

[whole patio]

Im just saying that 4.1 is not big in terms of models

[fringe mural]

i would've downloaded a bigger model if i had the ram LOL

[fringe mural]

i don't have enough RAM for a bigger model if i want to use the rest of my computer LOL

[whole patio]

RAM is always a priority for me in machines, yeah

[fringe mural]

i have 16 gigs 7B parameters will do it prob also it's uncensored which i kinda need

[wet gate]

just use deephat or venice

[fringe mural]

can you locally run it since the whole reason i wanted to download ollama because i wanted to locally host it LOL

[wet gate]

yeah

its on huggingface

[fringe mural]

and than which one is the best to download

i'll first have to remove ollama now :/

[wet gate]

deephat hasnt been too bad for me

though dont expect it to be smart with that amount of ram

[fringe mural]

if i would use a model that can use the full 16gigs would that be better?

[whole patio]

not necessarily

[fringe mural]

wym?

[whole patio]

exactly what I said

You asked "IS IT BETTER?" and the reply is "Not necessarily"

[fringe mural]

would it depend on the parameters?

[whole patio]

well the output is by definition non-deterministic, so you can read from the tea leaf which exact detail is positive or negative.. which is fast, which is younger, which is bigger, ...

[fringe mural]

i mean the model i'm using now isn't bad

[whole patio]

Asking for help with getting a job has not been fruitful on this server. If you get offers via DM they are likely a scam

[whole patio]

@patent phoenix I don't want to be your friend

Maybe less discord, more job hunting

[patent phoenix]

😂

Fair

[fringe mural]

i'm searching for like a home server rack any recomendations i found this: https://www.alibaba.com/product-detail/Factory-Design-22U-Network-Cabinets-19_1601241580238.html?mark=google_shopping&pcy=nl_en

[thin girder]

Hello everyone, i'm looking for some opinions from people who work in cyber security of choosing between two roles:

Role 1 – Advanced Internal IT Support (Large Tech Company)

This role is part of a modern, fast-moving tech environment at a larger company with many internal career paths and development opportunities.
It's not a traditional helpdesk job — instead, you handle a wide range of technical issues across Mac, Linux, and Windows without escalation tiers. You work closely with developers, deal with access management in tools like Bitbucket/Jira, troubleshoot complex client issues, and support internal systems in a mixed OS and DevOps-oriented environment.

Overall, the role gives broad exposure to modern tech stacks, development workflows, identity/access, automation, and real problem-solving across diverse systems.

Role 2 – Network-Focused IT Technician (Smaller Systems Integrator)

This role is more focused on networking and infrastructure, working with technologies such as switching, routing, firewalls, and Cisco-based environments. The work includes installation, configuration, troubleshooting, and supporting customer network environments. The role builds deep knowledge in network security, connectivity, and infrastructure operations.

It's a more traditional IT technician path with stronger emphasis on networks, hardware, and customer environments rather than development, internal systems, or mixed OS ecosystems.

Which role would you say is more beneficial if my long-term goal is to work in offensive security/pentesting?

[lament ingot]

Sometimes just typing even though not enough space can be accepted there it happened to me once

[rapid oasis]

it should be correct, maybe try 'mondays'