👥・help-me

[woven anvil]

Sorry, just saw this now.
Cachy hosts their own Repos, and their own mirrors. There is some downtime when they push changes, as the changes propagate across the CDN.

So "Not effected by Arch getting DDoSed, but there is still a slight delay".

It is possible to just use Arch, and then the cachy kernel if that is the only thing that interests.

[vivid vessel]

What’s the better way to start learning Linux — installing and using Ubuntu, or going with Fedora? I’m trying to figure out which distro makes the most sense for someone who’s just beginning to learn the operating system.

[sharp gazelle]

https://cryptify.today/ is this actually a good crypter?

[austere mulch]

i need help

[mighty matrix]

what laptop is recommended for cybersecurity, and hacking that’s reliable and in the $600-$1000 range

[whole patio]

Either one is fine

[whole patio]

Any thinkpad you can get in that price range. Depending on the field you are looking for the actual hardware requirements are rather modest

[whole patio]

You keep saying that. Maybe, just an idea though, you should muster the courage to tell people what you need help "with"

[austere mulch]

i have iphone 12 pro that my late cousin left for me and i cant by pass the activation lock can some help me if possible

[whole patio]

We are not helping you enter a potenially stolen phone. Contact apple support with that story.

[mighty matrix]

would an asus “tuf gaming” laptop be fairly good for hacking?

[whole patio]

If they can't help you, no one here will

[whole patio]

No

Most gaming laptops, ASUS TUF prominently among them, have horrible linux support and people keep complaining and regretting buying them

YMMV

[mighty matrix]

oh

[austere mulch]

ok sure i was just asking and its not stolen iphone

[mighty matrix]

I have no clue what type of laptop to get

[whole patio]

I told you

[mighty matrix]

thinkpad?

[whole patio]

No of course not. It's always from a dead or missing relative or significant other. Funny how no one ever asks for one that they stole or bought stolen

[mighty matrix]

I thought that was one sort of add on to a trackpad, sorry, i’m fairly new to cyber security and laptop type technology lol

[whole patio]

Doesn't matter - answer stays the same

[whole patio]

Thinkpad is a brand, they have several models. Which one depends on pricing in your area and whether you want to buy new or refurbished

maybe just buy a really cheap refurbished thinkpad, save the money and buy one when you actually know what specs you need, depending on your field

[toxic grove]

I think i have a compromised phone.

Scenario - guest wifi network setup on virgin router. I connect two devices to it, s24 ultra and s8 ultra. I run a fing app scan from google play store tp identify devices

Fing scan on s24 ultra
192.168.1.1 (router)
192.168.1.4 (s24 ultra)
192.168.1.30(unknown 1)
192.168.1.38(unknown 2)
192.168.1.71(unknown 3)
192.168.1.79(unknown 4)
Note: whenever i connect to other wifi networks the unknown devices appear there also. The unknown devices dont appear in router dhcp.

Fing scan on s8 ultra
192.168.1.1 (router)
192.168.1.5 (s8 ultra)

My s24 ultra connection settings only shows the 192.168.1.4 address. I cannot find out where the other IPs are coming from. Is there something i could to do find out further? Port scans have been done and none return, i think it could be 161 snmp though.

[tardy glacier]

Sound like a false positive and they’re probably virtual interfaces and device discovery services on your S24 Ultra that Fing is misinterpreting as separate hosts

[toxic grove]

Hmm. It would be interesting to see if another samsung s24 ultra has the same issue or not - that would be the true way to rule this out.

[tardy glacier]

Yes indeed

[deft violet]

Eh ill probably stick with arch as my workstation bare metal. Probably spin up cachy on a vm at some point and tool around a bit. Appreciate it 👊

[austere mulch]

dnt victimize all people please

[whole patio]

I dont think the word means what you think it does

Anf if you want to play the hurt party, maybe don't join a hacking server with your request and then try to play innocent about what you wanted

[wet gate]

not possible

[wet gate]

u could just say it’s not possible considering his iphone spec and version

[whole patio]

I could, though I prefer to provide context.. cause I see "this isnt possible" more often challenged in comparison to explaining the reasoning help would not be provided anyway according to the #rules, and that they receive no help here if apple support cant help them.
Just to make sure someone else does not decide to ride the pony down a different route, clueless, "just suggesting" and so forth

[timber grail]

Do yall know of any free voip providers that give sip server credentials so I can use it with microsip?

[wet gate]

doesnt exist

services are paid

[timber grail]

fah

what if i host my own voip server

can i get a sip trunk for free or a way to connect to outbound real numbers for free

[viral night]

Hey guys I was able to solve easy level CTF in picoCTF but when I attempt to solve Medium level I get stuck.
where do I start learning from so that I could solve those???

[bronze canyon]

hey i installed hyprland and
i can't connect to internet
what were the terminal commands?? i tried iwctl and it just keeps loading

[wet gate]

do more easy ctfs before movinh on to medium ones

[clever cairn]

Hi

Sudo apt install opsec

😎

[bronze canyon]

https://tenor.com/bj9pQ.gif

[slow edge]

general chat at #💬・old-gen-chat

[bronze canyon]

which course in port swigger academy should i begin with? their interface was pretty confusing to know which is for beginners or which is not

[wet gate]

xss

[bronze canyon]

thankssss

[hollow dew]

Whenever i am trying to intercept some requests in burpsuite i am getting lots of requests i don't know why might be multiple calling is there in the web application.
can anyone help how to filter the request for which i am looking for

[left nacelle]

You need to add your target to the scope or it Will pick up any traffic

[viral night]

Should I use ventoy for multiple ISO. I have read in reddit that it has serious security issues I don't know if I should use it

What should I do ??

[halcyon flint]

Anyone got any idea how to make something like a WiFi pineapple with a rpi5

[woven anvil]

No, SIP trunks are what usually cost money, and are usually the least complicated part of a PBX

Think of it like "Internet without an ISP", you can set up your own router, but you won't get internet still.

[woven anvil]

If wifi, then for me the application wasn't installed, but defaults for cachy came with network-manager-applet which controls the gui wifi selector.

[woven anvil]

Please don't respond to messages of people asking for unethical stuff.

No, you are responding to someone who was told 7 hours ago that they should not ask for things that break the #📜・rules , and you told them to look for unethical sources to bypass a security feature.

Do not do that here.

Doesn't matter. Sending someone off to unethical resources is not what we do on this server.

[dim cove]

Hey any one I need assist

[bronze canyon]

i see
I'll manually try installing thid when i get home
and also i tried iwctl and nmctl
both didn't work

[woven anvil]

mine didn't have those installed.
I sat there like a dufus for a while before i realized that they expect me to gui it.

Benefit of using Vanilla Arch, you know what is installed because you chose it XD

[bronze canyon]

yuppp

many don't appreciate it at first but as you learn its a blessing

[rapid oasis]

please help me find a repo for linux-headers-4.8.0-41-generic_4.8.0-41.44~16.04.1_amd64.deb
😄

[slow sky]

I feel like security+ and network+ exam objectives are kinda easy, and it feels like i know them (i know like 70% of them) and i haven't even started it, are they really that easy or am i delusional?

i got professer messer ebooks and it feels like

i know it all

for some reason

which one should i start off with? security+ or network+?

[shadow fractal]

Both are fine

If ur planning on getting them both

It doesnt change much

[slow sky]

idk im thinking of ccna instead of network+

[shadow fractal]

On the sequence for them

Comptia usually is recommended to go A+ / Net+ / Sec+

But thats suggestive

[slow sky]

should i get a+ even?

is it even worth it

[shadow fractal]

Nah

[slow sky]

im kinda broke

[shadow fractal]

If you have the basics

And work exp

Atleast a year

[slow sky]

im telling you i know most network+ stuff 😭

[slow sky]

im still a first year student

[shadow fractal]

If its easier for you to get Net+

Go for it

And even if you get atleast 1 cert

[slow sky]

but should i go for ccna instead?

[shadow fractal]

Thats a plus

[slow sky]

or network+ is good enough

which one sounds cooler

[shadow fractal]

Lmaoooo

Its not about cert being cool

Its about what contents it has xddd

Lmaooioo

[slow sky]

its basically the same but ccna has more labs in packet tracer 😭

[shadow fractal]

More hands on practice

I would go for CCNA

[slow sky]

okay okay

[shadow fractal]

Others might disagree ofc

[slow sky]

so where do i start security+ or network or ccna

blue team btw

[shadow fractal]

Ur looking in to blue team?

[slow sky]

yes

i mean red team stuff is extremely extremely fun

but yk blue team is more job secure and stuff

boring stuff

💔

[shadow fractal]

Trying to find the page for you

Sec

Cant find it

In short

Aim for Sec+

then look in to BTL1

As long as you get either in to blue or red team

It will be fine

All you just need is to put in the work

There will always be a need for specialists

[slow sky]

so skip network?

or do it after sec

[shadow fractal]

I mean its optional

Go for those 2 and if you want and can you can take network

Just dont forget the fact that the certs dont grant you a job role

Experience and hands on shi helps you a lot

Certs just prove you have some knowledge in that area

[slow sky]

yes i am aware of this im just getting them to get rid of them

ill work in a help desk or whatever after

or work on projects

but what projects can i do about blue team 😭

[shadow fractal]

Solid plan man

I mean you can do smth with IDS or IPS on github

Security Onion

[slow sky]

its more aura farming to get certs and i didnt even graduate

[shadow fractal]

Etc etc

I started from IT specialist myself

So its wtv

Thats was enough to move in to a diff field

[slow sky]

college degree isnt that good right?

[shadow fractal]

Its a piece of paper, either college or uni

Same shi

[slow sky]

from what i heared its almost useless or whatever

for a cv

[shadow fractal]

Yup

If you have it

Good

Dont drop out

But in the long run

Practical shi > theory

[slow sky]

nono im not dropping out my parents would kick my ass if i do

[shadow fractal]

Good

Xddd

Keep it pushing

Hop on THM or HTB

Do some CTFs

Build projects

Build portfolio

[slow sky]

isnt ctf red team?

[shadow fractal]

Get certs in the mean time

Dont rush

[shadow fractal]

Still you get to understand shit more

Having both sides aint bad

There is for blue team as well

For example take HTB sherlocks

[slow sky]

okay listen i rn know python, linux, kali, almost most network basics, most security basics too

[shadow fractal]

Yeah, basics are good, but how much do you have practical exp?

[slow sky]

welllllll

[shadow fractal]

No judging

Ofc

I am not expecting you to be a 20+ year veteran in this field or smth

[slow sky]

i worked with unc's law firm for some time and i increased his profits and saved him weeks of work in like 3 hours😭

thats my only experince i guess

[shadow fractal]

Better then nothing ofc

But again

If you have time and some smol extra money for subs

Get on HTB and THM

or*

there is free variants

But they are limited

[slow sky]

htb or thm which one do you think

[slow sky]

its fine i got like 32$ in my bank account rn

im practically a millioniare

[shadow fractal]

Thm more beginner friendly

Htb is for pain

[whole patio]

I replied to them

It was actually - you just don't realize that

[slow sky]

i love pain it kills me mentally

its awesome

[outer flame]

do you guys think ai will replace cybersecurity

[woven anvil]

AI is a tool that will help security researchers, not replace them.
Like programming.

What it will hopefully do in the future is replace mundane tasks, but it still needs a human to:

• Write the integration with the AI/LLM(What data to send and how to send it)
• Understand the scope of what needs to be done, and how to do it
• Check the output(If you are putting your name on a product or service, and have any self-worth)
• Be able to update and change with new threat vectors

On top of that, the mass amount of people who are "making software" using AI, are opening a whole world of security holes that will need Cybersecurity researchers and defenders to understand and protect

AI is also a "mid" cybersecurity specialist, as a huge part of the roles is usually thinking outside the box. AI is very much one to think inside the box of it's learning materials.

@long cape
Please don't spam the chat.

[slow sky]

@shadow fractal can you text me

dms

if you're available

[whole patio]

Study after study has shown the same result - using AI during learning/studying and in school leads to consistently worse knowledge retention. It is an amazingly expensive way to make sure people learn less and less

The sheer number of times people show up and proclaim they "even used chatgpt" to troubleshoot a problem, that is already solved plain and clear in the actual documentation, is mindboggling

[coarse dock]

Hello

[placid trellis]

Hello

[wheat ether]

Hey, I'm complete beginner can anyone help me?

[spiral notch]

what with?

[wheat ether]

With hacking/ cybersecurity?
I know nothing at all.

[spiral notch]

#👥・new-member-guide

[wheat ether]

Thank you so much!

[dreamy grotto]

Does anyone know an easy way to set up EDR for linux beside wazuh and openedr,

I am using splunk as SIEM

[sacred belfry]

I'm a beginner in cyber security, trying to find guide lines.
I WILL BE GREATFUL, IF YOU CAN HELP ME.
THANK YOU.

[smoky igloo]

Hii guy I'm new to this hacking I've been learning for the past one week i don't have to create a wordlist for a particular target I'm using my network to attack can someone teach me how to create a wordlist please.

[wet gate]

essentially yes

[tepid shoal]

Point me in the right direction as a beginner!

[night kindle]

Hey guys ....I need a little help with some'

[wet gate]

what

[wet gate]

#👥・new-member-guide

[spiral lantern]

hi guys i was trying to trade with the help of ai (chatgpt) and now i am stuck with my capital in the market can anyone help me

[night kindle]

My Plasma screen is set on "key lock" and I don't know what to do

Tried using the remote ,it ain't working

[wet gate]

You should be able to hold the power and volume down buttons down for a few seconds to enter the factory reset settings. Then hit volume up to select reset

[night kindle]

My screen only has one button bro,that's where I am getting confused

It's Hisense

[spiral lantern]

?

[slow edge]

This is a cybersecurity server, not a trading server. I don't think you would find more people answering to that

[spiral notch]

maybe don’t trade with chatgpt

it’s such a bad ai

for trading

it’s gonna lose you all your money

before yku know it

there’s no good trading ai, even the ones they advertise on social media’s

the only way is to make your own

[spiral lantern]

whats the best way to earn

[slow edge]

Have a skill --> Use it somewhere
I guess they call it job these days

[smoky igloo]

Yeah

[whole patio]

Not "Yeah"...

They were asking WHAT you were trying to brute force

We Can Not Read Your Mind

[spiral lantern]

yo guys do u know bout pitch and can anyone tell me id its safe here to learn

if*

[whole patio]

I dont know if you never heard the word "pitch" but it can mean different things in different contexts. Maybe elaborate?

[jaunty verge]

tryhackme vpn is not working for me, I tried changing the place to every possible place and yet its not working

[whole patio]

THM has its own discord server, maybe ask there instead

[jaunty verge]

oh right

ty

[smoky igloo]

Sorry bruh wifi

I'm trying brute force wifi

[whole patio]

"Wifi hacking" on youtube is essentially staged to work, in the real world - if the password is not in the list, then you are not going to find it.

Standards evolved way out of easy exploitability here

I consider wifi hacking basically a waste of time

[nocturne breach]

hello

can i get technical help

[smoky igloo]

Isn't that important for networking bro!?

[whole patio]

just ask

[nocturne breach]

im trying to install bashfuscator

[whole patio]

not really, no.. it is mainly a point of fascination for kids and young adults, but real world relevance is near zero

[nocturne breach]

it requires python 3.6 but i cant install it

[smoky igloo]

So what are essential things as a beginner needs to learn

[whole patio]

#👥・new-member-guide #💕・free-resources #🛠️resources-tools

[whole patio]

looking at the github, it seems the project has been abandoned long ago.. and it does not rquire 3.6, it requires 3.6+ .. whats the actual problem?

[nocturne breach]

ah my bad

[twin seal]

Linux and network

[nocturne breach]

for some reason i thought 3.10 < 3.6

[nocturne breach]

when installing using setup.py, i dont get the final binary

[smoky igloo]

Thanks 😊

[nocturne breach]

although no sensible error in the output

[whole patio]

If you say there is no error and no useful log file entry.. and the project has been abandoned for about 7 years now, there is precious little anyone here can do about it

[nocturne breach]

im trying to send the log but it deletes my message for some reason

[final rampart]

Hello is there a way to access those free sources without logging in linkedin?

[whole patio]

the whole channel lists free resources.. not just that one post

[final rampart]

Yes but the linkedin ones are good as well

So logging in is the only way, yes?

[whole patio]

Or ignoring that post

or dive into sock puppet accounts 😉

[final rampart]

Alrighty champ thanks

[slow edge]

Ya bot issue

[fringe raft]

is virtualbox available in kali linux os. I have plans on removing windows.

[slow edge]

Yes

[slow edge]

https://www.kali.org/docs/virtualization/install-virtualbox-host/

[spiral notch]

yes

it’s available everywhere

macos windows and linux

[fringe raft]

thank you guys much love

[slow edge]

MF I was on caffeine and I saw your user as a bot, I was like how is that possible

[fringe raft]

bot will take over the world

[slow edge]

I wish

[fringe raft]

i dont wish for that

i choose cyber sec cause it will be the least thing that ai done replacing.

[slow edge]

AI can do cybersec

[fringe raft]

job market in my place is getting raplced by ai

[slow edge]

but ya not the way you think, but def AI can

[fringe raft]

Ye but its not as good as how people do it

ai has policies.

[fringe raft]

Ye iknow. literally tried hacking stuff using those CMD ai and it failed. cant even do nmap right.

[slow edge]

Complicated! Like there are AIs out there which can do better than humans, but you still need someone to implement the working of that AI! But ya I got your point

[fringe raft]

Yes sir. aight thanks for yall help. if u see a bot talking thats me.

[whole patio]

No one said it is

Well.. some say

[slow edge]

Depending on various factors, if it is a CTF challenge then brute force can be a option, but in real world scenario it is very difficult until and unless they are using a weak password which already is in the wordlist you choose or their cred was easy to write from the info on their blog or other platforms.

I would generally keep brute force as the last very last option if it is a real world thing

[whole patio]

I also assume we are talking about different things, when we say "Brute forcing"... I guess what they mean is a dictionary attacke with a thicker dictionary book, bordering on including "everything"

[slow edge]

If you be smart, you can bypass that. It requires throwing your each request with modified User-Agent, IP, and other client side attributes! But in general, yes they will time you out

[whole patio]

If you dont know what you are doing - yes.
If you do know what you are doing, mostly, yes, at least against web services

[winter marsh]

My daughter got scammed for $9k Wells Fargo scam

[shadow fractal]

Reach out to local authorities, we cant help in this case

[winter marsh]

👍🏾

Thanks again

[hasty phoenix]

Hi iam looking at getting into pentesting was wondering any courses that are decent with the exam also thanks in advance

[whole patio]

#👥・new-member-guide #💕・free-resources #📜・certs-and-career

[hasty phoenix]

Thanks

[spiral notch]

exams which are worth your time are only industry graded certificates

yo get a digital piece of paper with an identifier

proves its validity

[sharp thorn]

Guys if you recommend a programming language that helps any cyber security enthusiast.
In future he won't regret for learning about that stuff.
Any of one or three ?

[wet gate]

Python and C

learning Powershell and Bash would probably be helpful too

[mighty matrix]

how do you find peoples IP addresses?

[wet gate]

no

they are languages

[wet gate]

ip logger or sniffing

[woven anvil]

The correct term you are thinking is "Shell Environments".
Powershell, Bash and Python can all act as shell environments.

[mighty matrix]

sniffing? how do I sniff?

[wet gate]

well if you call someone or connect with them on a Peer to Peer type network, you could sniff their IP through network traffic

but it wont always work

[mighty matrix]

so would dming them while on wireshark work?

[wet gate]

no

[mighty matrix]

oh

[wet gate]

discords communications go through their platform

most online social medias will do that

and arent p2p

[woven anvil]

A shell is a program that lets you interact with the operating system by typing commands.

[proper raven]

so im trying to write a debian image to a raspberry pi 3b+.
I used dd to write it to the sd card, and when i power the pi on the activity light doesn’t come on.
i assume it’s something with how im writing it, i put in a card from a pi 2 i have and the activity light came on

[proper raven]

well i found rpi imager, didn’t let me use my debian iso for some reason but it had an option to install without a desktop which works fine for now.
if anyone knows the solution to writing my own image using the command line let me know, id like to figure that out.

[carmine halo]

Guys, I am a complete nube. Please tell me, is it possible to install and run Linux Kali 2025.3, on MacOs, M4 chip via VMware Fusion 13.5.2? Really appreciate any advice.

[grand finch]

Hello I need help well my Ig account always gets restricted or blocked does anyone have an advice on how to stop the restriction coz I have changed my phone to a new one dozens of times created a new profile and still end up getting banned from instagram. So any suggestions will do please

[errant furnace]

heya

[whole patio]

Its not one of the officially supported hypervisor. UTM or virtualbox are recommended

[whole patio]

You using a vpn?

[carmine halo]

What would you recommend? I only have this M4 MacBook and I need full monitor mode + packet injection using AR9271 USB Wi-Fi adapter.

[whole patio]

Never used a Macbook, and I consider wifi hacking a waste of time, but from my understandung both recommended hypervisors are capable of usb passthrough

[viscid crane]

Savannah?

[carmine halo]

Sequoia

[viscid crane]

Damn

Thought we were in same town

[carmine halo]

No, bro, we are on different continents

[viscid crane]

Lol I'm in Africa

You must be America

[carmine halo]

Ukraine

[viscid crane]

Just playing in America

Oh nice ! I have a friend who lives there

Shes cool af

Anyhow

[carmine halo]

Can you tell me if this set up is gonna work, cause I’m new to this, might be just wasting my time.

[kind void]

hello ineed to get two certfication ? to get hire what ican get ? one for deffinsive and one for offinsive ? what ican get ? security + and oscp or what ? cysa + and cpts or what ....

[whole patio]

Your best bet would be to check which certs potential employers are looking for in your region. OSCP+ is likely to be among them

[kind void]

what is the two ?

[kind void]

yes oscp isee has much aura

[whole patio]

#📜・certs-and-career Maybe this can give you pointers above and beyond what randoms recommend.

[kind void]

the problme isee oscp in real world with edr and AV cant do any thing its just basic of Penetrion taster ? i learn oscp and i prefer to ger OSEP be good in compains real world ---> isee oscp have a lot of aura and all jobs requer oscp ? why

[whole patio]

oscp is a starting cert, yeah

mostly for compliance reasons, I would say

[dire bone]

after completing Jr Penetration Tester will i be able to find some small bug bountys??

[whole patio]

but.. industry standard is industry standard - it is, what it is

[kind void]

the problme my level is good in offnsive i learn most of red certfcation just ineed to get some certfation to improve my skills

[whole patio]

Learning for the skills is an entirely different road trip than learning for employers HR department and getting to the interview stage. Sad as it is, unless you are well connected, you are going to need the starter certs that people are looking for, or get sorted out looking for employment

YMMV of course

[kind void]

yes this what isee so i join to bugbounty program hahah to get some moeny and start earn certfication but bug bounty its one of the most criyzy thing ever made hahah duplicate bro informative make me decide to get job batter then this tarige he dont undertadnd the bug this problme

i will get all cerfication of the world and sitting in the top this what iwent hahah

[whole patio]

Having too much certifications without prior documented job experience may actually end up being more of a problem than an assett

[dire bone]

hey guyyssss

[dire bone]

???

which course can be best to start my bug bounty journey?

[kind void]

yes iknow hahhah but this just hope and achviment ineed to do

[whole patio]

on a meta level.. companies do not need nor want to pay highly experienced pentesters, if they cannot monetize their employment at all. Most pentests stem from compliance requirements, and those clients have no inherent interest in findings per se

its a phase to go through, so to speak

[kind void]

bro know the company you see in the title of the job jr penetraion taster and whene you see the request see somathing alse you need to know cloud and have oscp ...

[whole patio]

get that documented experience under your belt, rise up either internally or get other companies interested in you

[kind void]

bro bug bounty after learn the coures you will face duplicate and infomative the couse give you only knowlge you need to read writup more

[dire bone]

i cant afford any certifications right now my country currency is very weak......i need to earn first and only i can pay for cert.....what would be best for me going for bug bounties or finding internships?

[kind void]

bro where the same face the same problme

[spiral notch]

no certificate

wj guarantee you

a bug find

[dire bone]

so going for bugs would be best choice?

rather than looking for someone to hire me

[crisp star]

How much experience do you have in IT? More specific in programming.

[spiral notch]

i never said that

i’m just saying no certain will guarantee you a bug find

[dire bone]

im just starting my career...... ive completed some linux basics and networking basics....now im studying the web vulnerabilities and using burp suite from port swigger...... and thinking to get premium of tryhackme and start the Jr Penetration Tester path

so what i heard is i need certs to get internships.......and i got no money to pay for cert exams

[whole patio]

The problem is, there are legions of people in your position.. ambition and motivation, but their documented experience is based on free resources.. you are not going to be able to compete with them.. so (expensive) certs are the number one gatekeeping metric that is used by pretty much the whole world right now

maybe, just maybe, accept that this is not an entry level field, and getting an employment some other way.. help desk, tech support, junior system administration.. that will either pay for your certs or allow you to pay for them yourself, is the way most people eventually choose

[crisp star]

In my opinion, I would not bother with bug bounty. You will only suffer.

[whole patio]

"bug bounty" really seems not to be worth the time in the beginning

[crisp star]

Maybe get a job that's easy to get in just to earn money and work your way up if that's an option.

[whole patio]

It sounds appealing but, though I've never tried to earn from it, the same sentiment is echoed all too often

[crisp star]

Would be great if you live in a country that has an apprenticeship program. But as far as I know only a few countries have that system.

[whole patio]

and even those typically dont do apprenticeship in infosec/cybersec

[dire bone]

if i study the Penetration Tester path of tryhackme all the way upto redteaming........will that cert of proof that i completed the course help me in getting entry level positions?

[whole patio]

This just isnt a field you are supposed or expected to start with

[whole patio]

Probably not

[crisp star]

Yea cyber is already a specialisation

[whole patio]

You can get that for about 170ish USD right now .. which is just too cheap for orgs to care about.
They dont want to be flooded with applications.. they want the industry standard.. so they do not have to sift through thousands of people with, most likely, severely lacking foundational experience, who don't know how work environments work, have no real world experience in implementations, standards, protocols.. who simply grew up on lab environments with next to no real world relevance

To you its "too darn expensive"
For the people looking to employ it is a blessing, so they only get applications from people who, apparently, have some experience cause prior jobs allowed them the investments

[dire bone]

🥲

[whole patio]

I've known people who work in IT for 10+ years and say they are not ready for pentesting.. cause there is still so much more to learn.. those have a good chance to end up in cybersecurity at some point.

young adults who want to thrill and excitement and the money that the job promises.. more often than not, do not

[dire bone]

if only i can get non paid internships with it......i can show experience to get a paid job

whats the chance of getting non paid?

[whole patio]

nonsensical question

[woven anvil]

0

They don't want to deal with the potential of someone touching stuff who doesn't know what they are doing

[whole patio]

Again - people do not want to sift through the legion of people worldwide in the exact same situation

[woven anvil]

In most companies, not just Cyber/IT, they won't have volunteers, and insurance won't cover volunteer workers.

Companies may offer a position for you to sit and learn if they already see promise in you

[whole patio]

that is the "well connected" part

[woven anvil]

But that promise comes in a "Do you have a good work history, have you communicated yourself well"

[whole patio]

If you find someone who wants YOU to succeed, and is in a position to make it happen, that goes a long way

[dire bone]

okay thanks.....for now ill ignore future and just keep on learning more then

[whole patio]

no clue

All I can say is that I see oh so many people trying to get started in the field.. but I never hear from them again

[woven anvil]

Some people get ripped off, do it all the way they think it should be done, and end up with nothing but wasted time.

[dire bone]

you will be hearing from me.....i wont give up

😆 😭

[whole patio]

Ah, the naruto speech 😛

[kind void]

me if i living in good country ihave bene 3 years before work as redteam in meta bro my contery is noob but ineed to wine this the one soltion ihave

[woven anvil]

Not about giving up.
Its about walking a different path to get there.
Look at it from a "Learning IT" perspective first, then branch off into cyber.

You will understand more

[dire bone]

yeaa ill try to find a way through

[whole patio]

I was talking with quite a few pentesters a while ago.. and as it turns out.. all of them, every single one, had anything but a straight career path into the field

[dire bone]

whats your age and which job are you doing right now?

[whole patio]

I'm probably older than you, and infosec consultant

[dire bone]

im just 18

😆

[whole patio]

then I am older than you

[dire bone]

okay

[crisp star]

I got my job in cyber sec when I was 25.
I did something completly different at first.

Got higher education so I have a degree in sysadmin + OSCP + internship for IT stuff before getting my first real cybersec job.

[dire bone]

wow

[whole patio]

and 25 is still rather young for the field

[crisp star]

Yea especially when you think it's cybersecurity where most people have years of experience for non-cybersec stuff

[whole patio]

not the same thing, no

[dire bone]

should i buy premium for tryhackme or is there any other sites which will help me get the basics?

i need to pay there also no?

[whole patio]

you pay for the convenience and infrastructure.. if you can do without there are other sites out there like vulnhub, that let you host the machines on your own hardware

[woven anvil]

tryhackme has a ton of free rooms

hundreds of them

Giving support back to them for using their platform is preferred, especially when they offer so much free content.

HackTheBox, same thing, but more intermediate

But again, they will start you on just learning basic IT concepts

Networking, OSes

server management

[chilly merlin]

you can build your own version with a raspberry pi and some extra modules

[dire bone]

and how do i learn things like report writing and others

[woven anvil]

Setting up a lab at home, and doing it yourself.

looking at example reports, and seeing how much you can automate with python and the tools you have learned

[whole patio]

Reading other reports, and many certifications have sections on that

[woven anvil]

There are so many things to learn before learning writing reports

like writing technical documentation

[whole patio]

Its a step many struggle with, that thought technical knowledge was all they needed

[woven anvil]

"How do I make a document that explains a process/procedure"

[whole patio]

And that complies with ISO standards ^^

[crisp star]

Ad you have to write the report so the C suite can understand it

[dire bone]

i tried some rooms and couldnt solve......even in port swigger labs i will be like WTF to do in this lab and look for solutions and after i solve it ill forget what i did after i check 6-7 other labs

i just dont know what im doing

[whole patio]

I dont like labs..

they are so darn artifical

[dire bone]

do i need some theoretical knoledge or what?

how do i know what i will be doing

😭

[crisp star]

Guess what? I was sitting in school 3-4 years where they teach you the basics.

Before I even bothered with cyber security

[whole patio]

work a job with responsibility, and you will develop the necessary skills to assess what you are capable of, what not, and how to handle stuff you can't handle

The number one reasons you won't get or hold a job is - how much handholding you need. If you produce more work for others than you are able to do yourself, then you are out the door

[spiral notch]

don’t buy premium anywhere

you can get all the info for free

it’s just more convrniently placed and feeds on people’s laziness

rather save the money for certs which will matter way more and affect your resume

[whole patio]

Honestly.. just life experience.. any work experience..

[dire bone]

okay

[spiral notch]

yeah build your own

you’ll learn something that way and it’ll be up to

90% cheaper

[grand finch]

Yes even proxy but not working

[whole patio]

then that is the reason

[void brook]

Context: I'm doing a Information Security Course without pre req of Operating system and netwroking at university. Though I'm inclined toward cybersecurity but unfortunately this is the situation right now.
What I need help with: A project idea for this that will give me understanding and learning in this phase.

[whole patio]

Project idea for someone that has no prereqs at all?

A bit.. broad

[lunar void]

Then you will also need a father like him

Of you want to be like Elliot

He was just like that because of him

In some way

Did you watched the show?

[radiant stone]

Lmk if this works for you. https://youtu.be/uji8ZRBd2tw?si=eGX-g-HGQm68dYh2

[chilly merlin]

Maybe your .exe isn’t building because Command Prompt isn’t in the same folder as your .py file. open CMD, type dir to check if the file is there and if not use cd to move to the correct folder. Then run: pyinstaller --onefile yourfile.py. Or just use the full file path in the command

[wet gate]

probably

or you’re not going into the “dist” folder that is created after it finishes compiling

which in pyinstallers case, is where it drops the final exe file

[whole patio]

"[...] cause their frustration tolerance is basically null"

[brisk frost]

Agreed

[mint merlin]

Can someone help me, I can’t text in general chat idk why

[wet gate]

create #📩┃ticket

[spiral notch]

what flags do you use

.??

learn about how to usepyinstaller first then

[mint merlin]

I don’t even have access to it man idk why

[hearty aurora]

how does one check if a website is legitimate or not given that the directory does look right but the ssl certificate is from a different CA

[haughty zenith]

Paste the URL in virustotal

[lucid cove]

Wasup guys

[wet gate]

from the domain name

[hearty aurora]

thanks for the help

[spiral notch]

vt is a joke and super easy to bypass

[rain knot]

yeah, it’s important to have more than one source, in addition to controlled sandboxes to detonate and observe. URLs are kinda low quality indicators

[spiral notch]

++

[sterile falcon]

Good evening sir, please I need help on how to track a lost phone using it's imel number pls, I have the imel number with me 🙏🙏

[rain knot]

IMEI, no L friend

[rain knot]

and you’re probably gonna have to actually still take that L, because we’re not gonna be helping with that here

[lapis shell]

Hi I'm using mimo app to learn coding is it good for beginners like me or there are other apps better than that because I kind of find it interesting in mimo I'm about to do my second project there

[rain knot]

if it’s working for you, keep going!

[void brook]

went for network traffic analyzet. Its university I can do nothing about it 😭 They are making us do the 7th semester course in 3rd

[final girder]

i wanted to learn bug hunting where should i start

[whole patio]

any prior experience so far?

[wet gate]

learn how to use burp suite and how that works

along with learning about web application vulnerabilities

[frank imp]

Heyy everyone...

I just cloned TCM security's DeWalt pimpmykali...and I was just getting started with the tool..

But after sometime it asked me to restart which I did...and now my kali isn't loading on

Can anyone help me!
Thank you

[whole patio]

TCM has it's own discord server

[frank imp]

Fair enough

[jolly oxide]

Hey anyone down to take a look at my script im having an issue w/ ?

[wet gate]

ok

[jolly oxide]

https://github.com/d-velopr/p0nderBot

[jolly oxide]

Thanks

[wet gate]

what’s the actual error

[jolly oxide]

lines 170-196

[jolly oxide]

I cannot bypass that bot detection , the card option gets toggled

[wet gate]

what’s the error there you get when you try and run it

[jolly oxide]

There is no error , the script thinks it has no error but if you watch the bots process you'll see every command gets executed except the second to last command ( Clicking the card option) i got it to click it but the bot detection happens and it automatically unclicks the option ruining my whole script

[wet gate]

in that case then cant help you

you need to figure that out alone

[jolly oxide]

Alr well thanks anyways

[spiral notch]

do not expect to hack your neighbours wifi

with the flipper zero

hacking wifis is the thing beginners go to first and whilst it’s possible it’s very unlikely in a real world scenario

the only thing yku can really do is bruteforce

which will take hundreds of years

for a weak pass

[fathom summit]

@livid vapor #📜・rules

[livid vapor]

Is for checking rats

Sry

[mossy ibex]

I need help I think I got a spam email can anyone help me verify that it's a threatening mail sent to me

[inland bronze]

Can anyone help me change my waec results online

[whole patio]

Not possible and illegal, so no
#📜・rules

[tiny vapor]

Yeah dm me the schools website and contact number

I’ll ask them to change it for you

On your behalf

[chilly merlin]

Just don't click it?

[night tide]

[craggy tide]

sybau

[rancid solar]

i need a gamedev

thats gonna work with me

high potential

1000+ players in the first month

[mighty wyvern]

So I am a total beginner, taking courses on Coursera and working through beginner rooms of thm. There is a small IT firm in my town that I know the owners of personally. When I get just a little further in my path I’m planning to ask to do some work for them to gain hands on experience. My end goal is to be in pen testing/eh but what would be some good, helpful things I could offer them that would legitimately help me learn as well?

Thanks!

[spiral notch]

we dont do hiring here

this is a cybersecurity and hacking server

[sterile hatch]

Coursera is okay for basics, but cybersecurity is 80% practice, 20% theory. Focus on hands-on: THM, HTB, VulnLab, PortSwigger, pwn.college, picoCTF, OverTheWire, ImmersiveLabs. Build home labs: Windows/Linux, AD, vulnerable VMs, scripting, networking. Use Cisco Packet Tracer, learn OSI, routing, VLANs. ETC... Study networks from university PDFs. Learn systems deeply — run Arch/Gentoo, rice ,customize, even kernel-level to understand internals.
At the local IT firm, offer practical tasks: basic vuln scanning, hardening checklists, asset inventory, backup testing, documentation.
Certs later: PNPT, CPTS, BSCP. Write writeups and track projects

[spiral notch]

this looks

so chatgpt'ed

tt_annoyed

[sterile hatch]

it is cuz my english is bad, i just summarized it and gave it to chatgpt, but these are my own thoughts. i have been doing it for the past 6 years. some ppl cant write and structure something well you know

can someone help me to setup musl based Pentoo linux with dwm and hardened kernel + glibc chroot/containers?

[glossy venture]

I'm having problem creating LinkedIn account, have messaged the support but no response.
Can someone help me create a LinkedIn account?

[drowsy jay]

What is the issue when trying to create the account?

[glossy venture]

It just won't work, even after trying the captcha security verification i see stuffs like "captcha security code missing".... been trying to about 3 weeks now same shit

[sterile hatch]

i have problems too on linkedin but with that automatized security check, its just loading, cant even sign in to my acc

[pure meteor]

Can we track phone using phone number? My Uncle lost his phone and he doesn't know mail password

Using IMEI number or something like that ?

So if I ask the Cell Phone number provider they can help ?

[glossy venture]

Almost same shit with mine, but I receive emails
I don't know if I have an account or not

[pure meteor]

@wet gate

Ok

[viscid sentinel]

I think problem is with browser , change the browser

[glossy venture]

Ooh I thought the same thing... I've changed browsers even downloaded the LinkedIn app

Same shit

[spiral notch]

could be blocking ur ip

[viscid sentinel]

ok, my problem was with login page of chatgpt
i changed to edge

[sterile hatch]

true, the account is banned maybe

mine too

just make another one or send a message to support

i gave up on this thing

[glossy venture]

I tried creating another one with a different email same thing

[sterile hatch]

ohhh

on another device?

change your ip

[glossy venture]

How could it be banned, haven't even completed creating the account

[glossy venture]

Yh

Even had my friends try, same shit

Can someone help me create an account pls?

[empty pond]

Im new and want to learn got a great iq man just flood with information about coding and I think I can pick it up just looking for a real community

[sterile hatch]

iq is not everything, you should know this with your iq

next question

[sterile hatch]

your friends tried on your network or on your account?

[glossy venture]

Not on my network, but with my email

I thought my network was the issue and maybe my ip was banned but when they tried same thing

[sterile hatch]

i think when you tried to create an account on your ip this problem is just infected your account and thats why your friends had the same shi

change your ip first on your network, clear cache and try again

your friends has their own account?

[glossy venture]

Ooh no

They don't

[sterile hatch]

your country is banned on linkedin?

russia, china, kazakhstan are banned

[glossy venture]

Nope, already checked that

[sterile hatch]

so lets summarize it, you cant use it on another device, cant create one on your own network, with another device too on the same network, another network with the same account what you tried before on your own. whats more?

[glossy venture]

That's pretty much everything

[glossy venture]

Just accepted your request, can't text atm discord saying some shit like my account has limited access... but I will text once it's lifted

[mighty wyvern]

Awesome, thank you! I’m definitely planning to focus more on practical stuff once I’m past the very foundational stuff but I don’t wanna stop something partially done lol.

[night quail]

Hey guys

I’m now getting started and I want to build a tunnel for first project

[river zealot]

Hey everyone! 👋
Is anyone here familiar with MIPS assembly? I need a bit of help with a simple program for a university assignment.
If someone has experience and a bit of time, I’d really appreciate it

[river zealot]

I’m actually looking for someone who can write the code for me. It’s a small and simple MIPS program, and I’ll provide all the requirements.

[alpine ore]

Can anyone guide me if i want to learn using tools and to know about particular tools why and for what purpose they are been used is there any llm like chat gpt which i can use it for learning and implementing the ideas and learning new new tools

I want to make a partical script of a hypervisor keylogger to show the internal working of it can anyone help me through it if someone have the script or github link regarding that

[empty pond]

Ik just saying I’m capable without wheels

[river zealot]

😭

[empty pond]

No bragging or nun I not use to chat but I’m in a he right place

[late kiln]

Anybody ever took an exam with that proctored software?

[glossy venture]

@sterile hatch i can't message you in dm, discord keeps restricting my account

Code took too long, so it's invalid

[sterile hatch]

its 6 number

[steady stone]

I forget my Tecno spark 7 pattern how can I restart it?

[sterile hatch]

its 6 number bro, you wrote something wrong.

[glossy venture]

You mind doing it again?

Sorry I'm stressing you

[sterile hatch]

we can, i have time

youre not stressing me, im watching sri lanka vlogs rn so i have time xddd

[glossy venture]

Alright, you can just send the code in the dm... I will see it but I can't reply to it

[radiant stone]

@pallid wyvern

[woven anvil]

Whats the code for?

[latent drum]

Paying someone to be my mentor while I do my THM premium!

[autumn geyser]

i had a question about the "New members guide" , the guide is it just a guide to kinda learn it or does it actually certify you? also is the order you go matter?

so the better option to try to land some sort of job afterwards would be to follow the "certs-roadmap guide"?

[whole patio]

those are not mutually exclusive

[sterile hatch]

i just made an account for him via tempmail. nothing illegal or scam

[mighty nymph]

should i focus rn on python only (can't code as of now)
or do some THM on side
and what focus should i have as a beginner rather than the usual academic concepts

[whole patio]

Don't overthink this, you will see where one or the other needs more love

[autumn geyser]

i think thats my current problem just because i feel like i could be getting ahead of myself or am going to miss something crucial+

[errant oyster]

Hi everyone - Looking for high‑level guidance from people with IR / opsec experience.
I’m a non‑technical single parent dealing with what appears to be a multi‑year targeted campaign (started around 2022) involving:
– Repeated account takeovers and SIM/number issues across multiple phones.
– Evidence of social engineering at providers (passwords changed shortly after I reset them, new sessions/devices I don’t control).
– Multiple online personas and a few in‑person contacts that were clearly coordinated, plus links to my kids’ devices/accounts.
I’m not asking anyone to hack back or do anything illegal. I’m trying to:

1. Understand realistic attacker models here (single operator vs small group, typical motives).
2. Sanity‑check my containment strategy (new devices/IDs keep getting burned).
3. Learn what technical artefacts I should focus on preserving so that, if I ever get real legal/forensics help, it’s actually useful.
   I’m in NYC, local police have refused to even take a report and told me to “hire a PI,” so I’m stuck. If anyone can point me to:
   – Concrete opsec/practical steps when the attacker keeps re‑entering after full rebuilds.
   – What logs/backups/metadata are highest value to preserve in a long‑term case like this.
   – Any good write‑ups/case studies of similar long‑duration, hybrid social‑engineering + technical campaigns.
   Happy to share more detail privately with a vetted mod if needed, but trying to keep identifiable info out of public channels. I truly appreciate any and all help

[silk breach]

I can help you learn python

that must be tough. Wish you all the best . I wish I could help...
try the main channel

[spiral notch]

first of all factory reset every device and change DHCP lease in router (change ip) so that if they’re trying to track you on the internet by ip, it’s changed (make sure to do it in the correct order of factory resetting all th devices first to get rid of malware and secondly unplugging, waiting, and plugging the router back in (regarding malware, some malware might survive factory resets so the safest is always to entirely reinstall from usb) once you do that, that already gets rid of any virus that. nightie been granting them control over some part. secondly, scrap the old accounts. there’s no way to defend against them taking advantage of any dumb employees, and even if you change all credentials, those systems and companies often log any changes of email bars or password changes and so on to the point where they’ll still be able to trace back to your old alias, so scrap that and start on a completely new page. new email, new media’s, new whatever else you wanna use. and lastly change your phone number obviously, get everything entirely new. minimize where you’d use your name, post a picture you’ve posted before, or alias

never cross reference aliases or names so that whatever profile they have of you before, to not allow them to find it again.

[woven anvil]

@frozen delta What is the video you posted? It doesn't look like is has anything to do with here.

[spiral notch]

about preserving any artefacts to get a case against them, rarely will law enforcement ever wanna deal with something like this. only way to get them caught considering they sit behind vpns and other types of services that anonymise them, is to have a court rule out a subpoena and force those services to reveal any info they have (which still might not be enough)

[glacial dust]

help please need to learn how to search location from phone number please

i would google it but lol

[spiral notch]

#📜・rules

[errant oyster]

Hey - thanks for the info. This is the second reinfection I did all of the above in August, I left no stone unturned. Chatgbt was my best friend and somehow “they” got back in. It’s alarming, disturbing, violating and beyond concerning I have 2 kids which is obviously my biggest concern. I don’t have anything financial to take so that’s not the case but identity is worth more and whoever has all that info so I can only assume bc of the identity factor they’re able to get back in somehow by proving identity bc they have EVERYTHING

[spiral notch]

and what did chatgpt tell you to do

feel free to share in dms but chatgpt is very unreliable

ais in general are mad inaccurate

[errant oyster]

Exactly what I did with pretty much starting from scratch but they hacked that too

[spiral notch]

then you missed a spot

[errant oyster]

They walked me through every step just from even starting on the journey and helped me come to conclusion I was cloned, mirrored, hacked etc. pulled data, read the data. I salvaged what I could but it was intercepted so many times

[spiral notch]

you didn’t end up starting from scratch

[errant oyster]

I believe someone had physical access to my phone, through my kids Roblox or when I went back to work in September they were in the WiFi from the first time

[spiral notch]

what system

or well

what phone

is it

[errant oyster]

I have iPhone 16 pro

At the time I had iPhone 15 pro but I changed number and got new phone

Brand new routers extenders, factory reset every device, deleted every account. Created new emails when I was in another state from someone else’s device no where near mine, brought my car to get sweeped, got new accounts and factory reset uconnect

[errant oyster]

I couldn’t agree more they walked me in circles a lot but gave me the start. I must say I have zero background knowledge of tech but have learned “a lot” (for me) on this journey and it’s fascinating (disturbing too) but I wanted to learn to try and prevent this from happening again but here I am.

It’s def a social engineering scheme so much more to it but it’s exhausting. I can’t even get into my personal email- I went with Proton. They over took that and my Authenticator which had everything - my poor son is devastated over his Roblox and epic account but what I can do at this point

I’m a newbie to discord as well. Not too familiar on how to use it.

And also how to “vet” the people sending me messages

[weary iris]

Yessh

[mighty wyvern]

I’m not an expert myself but I am learning and I would say just pick one platform to start and it will help guide you through the very very basic stuff. I did a couple Coursera classes (free) and pretty much helped me figure out what I needed to learn on tryhackme and hackthebox and those have been making huge improvements in my knowledge. Whatever you decide, just do everything it tells you to do and don’t try to skip around, it all makes sense at some point lol

[autumn geyser]

i do appreciate the help with that i was going to start probably tomorrow, today was just pretty much looking around what would be the "route"

[bold rock]

Hey guys I'm currently in high school (grade 12) and I'm debating on whether I should do a cyber operator role in the military for 7 years (Canadian Armed Forces) or do a sysadmin diploma and a post diploma degree for networking and some certs and projects (security+, linux, cloud) and go down the path of working in helpdesk --> sysadmin etc.

The thing with the military is they pay for your college (degree or diploma in cybersecurity i think) and give you a salary while you learn, then you do the military standard tests and serve as a cyber operator and you get paid (not 100% sure how it works). I'm kind of leaning towards the military path and I like the benefits it gives and I don't really mind the lifestyle changes but I'm just not entirely sure which one will be more beneficial long-term. I've heard stories of people leave a cyber position in the military and get 6 figure jobs right away, but I've also heard others saying it's not realistic and who came back and went into help desk.

[spiral notch]

7 years is a LOT

you might end up being better by jumping place to place earning experience

because by the time you’ll have 7 years of experience moving in different positions and working at different companies you’d be close to being a senior and could deffo apply for a variety of positions paying up to 200k (may be pretty off, idk the canadian market)

if you’re going enjoy and want to not just chase money and career but also satisfaction, and working in the military in cyber ops is ur dream, then go for it

[old fox]

But i don’t think it’s a mandate to be there for 7 years as a cyber operator you could also get better opportunities inside CAF that will pay higher and even they will help you with studies more and more you don’t need to be stuck at one position only.

[neat thorn]

So I am trying to reverse engineer an encryption program currently. Most stuff is obfuscated. All the dlls are compressed. I was able to decompress them and I believe de-obfuscate them. But I couldn’t make it past anything else and just feel lost. Was wondering if someone could maybe help me out with what the next steps should be

[neat thorn]

Sounds good. I will do that when I get back on my pc

Was kinda looking for someone to just help guide/mentor me through it honestly haha but didn’t want to spam up chats

Definitely would agree. I will upload it tomorrow and see what happens

It’s just for kn5 files for a game

It basically locks the file so that it can’t be modified. Still use able in game based of a third party launcher call content manager that uses custom shader patches and what not

It’s for assetto corsa

Don’t know if this falls under ethical or not

It seems to be just a c++ program. It’s been reversed by a few other people but no one wants to share haha. A group of people have a server based one that is a paid service but in the last two days(since launch), its only worked for about 3-4 hours

A group of people made their own decryption tool. Made it a server based thing where their exe uploads the kn5 file zipped up. Decrypts it and sends it back into your folder. They have had nothing but trouble for the last 48 hours of keeping this thing working

[whole patio]

That is all the info we need. Thanks.

Just ask.. if you can't be bothered to tell us what you need help "with", then no one knows whether he or she can even help in this case

Or you could always just use the search function

I'm just trying to get you to ask an actual question, instead of believing this is some help desk and the next available genius will be with you in a second

Question first, person after

Well if you have the time to sit around and wait, feel free to do so until the next person tells you the same thing

You have a really hard time grasping the concept of the help channel.

People ask questions, and whoever thinks they can help, will help - you are just wasting your own time here if you don't tell us what specifically you need help with

"help with a few things", "very minor" .. tells us nothing

But I'm not your real mom.. do what you want

[crisp star]

Then get someone on Fiverr and pay for the work they do. Or just ask now if you only need an explanation...

[mighty nymph]

Thank you, i am juss following a youtube playlist from brocode

[woven anvil]

Sololearning + Codedex are great for learning python

[kind void]

if your bug hunter ---- give me word about ---> bugcrowd ---> just to see if im correct what isee and what ithink

dont tell me just good do you do hunte there and get some bounty or no or duplicate like this becouse there s problme ineed to confame and bug hunter tell the same ?

do you stille there do hunting ?

bro go try know and tell me what the problme you will face

ineed to be the best for all thing blue red all what ican do ineed to devlopeng self in exploit devlopment and revers engnring what ican do ? give me all certfication and couress and road map ican achive this and where ican learn the lang..

[kind void]

?

[orchid galleon]

Good evening to everyone,please 🥺 i need ur help 🙏.🤧

[radiant stone]

Where's up

Gdi

What's up

[mighty nymph]

Thank you for your response

[fickle sand]

I really need some tools for work... Any volunteer pls😩😩😩...

I live in, 🇬🇭🇬🇭

[tiny vapor]

Tools for work

[tiny vapor]

A hammer? An excavator? A spatula? Be more specific

[fickle sand]

A computer.... I mean à sharp machine

[slow edge]

Sharp physically?

[slow edge]

jkjk! I don't know if anyone hear does that thing sir 🤝 also stay safe with DMs offering something, might be scammers!
But if you are looking for a computer, then look at system with low budget and good specs, such as thinkpads, and save money for them!

[karmic siren]

Im looking for a cyber security expert willing to do some basic tests on a Web app I'm building for a client.
Looking to see how secure I'm building things for my client....
Looking for testing, passes , fails, suggestions and code optimizations... I don't wanna go on fivrr or anything for some basic tests...
Let me know

[fluid sand]

not sure this falls within the #📜・rules, i am not saying your claim is not legit, but got to keep within the rules this end

[karmic siren]

Oh snap. If this is against the rules then please forgive me and ignore it

[fluid sand]

no stress, and as mentioned in the message above your first one, stay safe with DMs offering something, might be scammers

[spiral notch]

so you want an expert

to pentest your website

for free

[karmic siren]

Not for free .. nothing is free

[keen ocean]

hi everyone.

[spiral notch]

hmm

[keen ocean]

can someone help me..

[spiral notch]

with?

[keen ocean]

I think I've been infected wit lumma stealer.

[spiral notch]

LMAO

[keen ocean]

and idk how to get rid of it.

[spiral notch]

why lumma in particular

[spiral notch]

just factory reset

and you’ll be fine

[keen ocean]

I have important stuff.

is it possible if I backup?

[spiral notch]

nope

factory reset always more or less safest method

some malware survive factory resets

but doubt that’s ur case

[keen ocean]

the stuff

[spiral notch]

?

[keen ocean]

ye

[spiral notch]

ye what

english

[slow edge]

He means can he backup important stuff

[spiral notch]

then he can say that

“how do i save my stuff”

anyways just out the files

put

in a usb stick

[keen ocean]

am not fluent in English

so mb

[keen ocean]

oki

[spiral notch]

or upload yo line

onkine*

online

[keen ocean]

how exactly?

[slow edge]

cloud services

[keen ocean]

alr

thx

[spiral notch]

google drive

likewise

limewire *

or anything else

[opaque lake]

A book for introducing cybersecurity?

[fluid sand]

there are so many areas to go into, get the fundamentals down, windows, linux, networking, and go that way, check out #📜・certs-and-career #💕・free-resources

[grand lance]

Hi chat

[slow edge]

#💬・old-gen-chat

[slow edge]

https://security-books.notion.site/
This has some free books

[glacial dust]

thx lol my bad

[opaque lake]

thank you

[honest cobalt]

Hello

[rare crane]

Hello, anyone know where can I find knowledge about c/o sint etc? Any channel here for it?

[spiral notch]

#🕵・intel-and-investigation

[rare crane]

Thanks

[spiral notch]

🪷

[grand lance]

Chat

[molten lynx]

Could someone please analyze the User Experience of my website?

[ember mulch]

hi does anyone know a good steganography tool to use for seeing hidden data in an image im tryna do a class project and need help

[slow edge]

Steghide is good (from OpenStego)
And QuickStego is also good

[karmic leaf]

Stegsolve, StegOnline, and what zero said.

[rich vigil]

Can anyone help me??

[fallen umbra]

Good morning, I just bought a computer, but I can't activate virtualization due to bios having admin password, is there a way to bypass it on my hp laptop ? 😭😭😭 I need help can't do a thing without bios access or is there a way to activate virtualization without accessing the bios ?

[slow edge]

Help you with what?

[slow edge]

Reset CMOS battery

[fallen umbra]

How to do that ? I checked that possibility yesterday and I was told it's not really possible on recent laptops but I didn't try, would you mind explaining the process step by step 😅

[slow edge]

Idk what laptop you have so can’t say that
But that’s the only way to bypass it

[whole patio]

CMOS reset usually does not work anymore on newer laptop models, some devices need components manually replaced. But that is something you have to check for yourself with the exact make and model of that laptop @rich vigil

this "could" go as far as replacing the motherboard in some cases

If you stole it, you are out of luck. If you bought it and they told people beforehand that the bios is locked, you are out of luck. If you bought it legit you may be able to return it .. once I convinced them to give me the admin password

[sand cedar]

Hey guys. I'm having a problem with Metasploit. Fresh install of it followed instructions on the offical website. When I enter (locate metasploit) to find the directory it only shows this (/usr/share/icons/Papirus/16x16/apps/metasploit-framework.svg) in a few different ways but the location part from what ive seen should show the typical (/usr/share/metasploit-framework). When directly searching for this it shows no directory can be found. I've reinstalled it and everything is updated. Couldn't find the answer online.

Should also mention one fix was disabling the firewall which i tried to no avail

[fallen umbra]

So my only possibility is to return the computer?

[hasty vault]

Can I start hacking without a pc

Cus my pc got spoiled and I can’t fix it

I have an iPhone

Is it okay to start up

[whole patio]

I don't know, that is why I suggested to look up the bios reset methods for that exact make and model. Was it sold to you with the comment that bios is locked?

[whole patio]

Not really, no

[fallen umbra]

Or is there a way to activate virtualization without accessing the bios ... I installed VMware but it needs virtualization

[fallen umbra]

No they didn't tell me though I told the seller I'd use it for my cyber security curricular in uni and will use virtualization

[whole patio]

Then complain to the seller, ask them to provide the password or you are going to return it

[hasty vault]

I want to learn ethical hacking

[woven anvil]

I would just return it. Sounds like the seller is incompetent.

[hasty vault]

Can you help me out please

Are there any other channels you hang out for beginners

[fallen umbra]

We are in Cameroon sir 😭 .... Most of the sellers aren't even tech enthusiasts

[fallen umbra]

My laptop is a HP ZBook 15u G3

[whole patio]

I'm not going to do assisted googling here.. ^^

[sand cedar]

Hey guys. I'm having a problem with Metasploit. Fresh install of it followed instructions on the offical website. When I enter (locate metasploit) to find the directory it only shows this (/usr/share/icons/Papirus/16x16/apps/metasploit-framework.svg) in a few different ways but the location part from what ive seen should show the typical (/usr/share/metasploit-framework). When directly searching for this it shows no directory can be found. I've reinstalled it and everything is updated. Couldn't find the answer online tried a few fixes like disabled firewall, reinstall, checking the path.

[crisp star]

On what system did you install Metasploit?

[spiral notch]

yeah pretty sure

it’s possible in some

[hazy trellis]

I'm dumb and I need to get started in tech industry as an intern or any sde job type I dunno where to start plz somebody help me and thnx in advance I really dunno what to do

[spiral notch]

#👥・new-member-guide

[hollow lance]

kvts working overtime

[hazy trellis]

@spiral notch thank you very much my angel 😇 I'll try and follow it

[hollow lance]

my angel

cough

cough

.

[hazy trellis]

I M sorry if I came of weird

[hollow lance]

nah

idk bro

[hazy trellis]

But srsly thnx

Slight question I just follow those links and learn from those resources then I come back to u right ?

It seems I may have offended my benefactor

[sand cedar]

Laptop on Linux

Linux Mint currently

[visual dawn]

Hey friends and angels, what is the best way to install QEMU on windows 10? On forums people keep mentioning different GUIs and ways to install it. The KVM (extensions?) is supposed to be a must but only works with linux - ill switch to linux as soon as I am comfortable with it and want to work on projects inside a VM first.

[steady stone]

Can I get the cord to bypass my Tecno spark 7 C pattern?

[karmic leaf]

man if you are locked out the best move is to hit up Tecno support or a proper service place because they can unlock it safely without messing up your phone. A lot of stuff you find online can damage it or even be shady so I would stick with the official route even if it takes a little longer. 😄

[karmic leaf]

on Windows the simplest way is to grab the official QEMU build and follow a basic setup guide then spin up a small VM to get a feel for it. You do not need to stress about KVM yet since that boost only kicks in on Linux so once you move over you can make use of it. For now just focus on learning how QEMU works maybe try a lightweight Linux image in it so you get comfortable before fully switching Oke? 😄

[potent elk]

guys my mentor is telling me to learn C as my first coding language for cybersec is it good or I should change?

[karmic leaf]

if your mentor suggested C it is actually a solid pick for cyber because it teaches you how things work under the hood which really helps later. It can feel tough at first but if you stick with it you will understand memory and systems stuff that a lot of security work relies on. You can always learn something easier alongside it like Python but C as a first language is not a bad call at all. 😄

[karmic leaf]

HAHA

[lunar peak]

Hey guys I know there was an update where entering a repository didn’t require cd first

Anyone know the apt install for that

Ah whatever

[whole patio]

thats a configurable zsh function, may be ohmyzsh

[potent light]

Guys sup

[halcyon crypt]

Good morning beautiful creatures

[gloomy wyvern]

Hello, anyone here knows how can I find the iso file of security onion version 2.3? Can't find it anywhere!

Or if someone has the iso file if you don't mind to share it with me!

[uneven eagle]

https://github.com/Security-Onion-Solutions/securityonion/tree/2.3/main

[karmic leaf]

They are probably talking about a tool like autojump or zoxide which lets you jump into folders without typing cd first. On Ubuntu or Debian you can install it with apt install autojump or apt install zoxide and once it is set up in your shell you can just type part of a directory name and jump straight there.

[slow edge]

Hello, I am new here! Can anyone guide me through?
Jk

So basically I have setup lot of linux distros, I once tried Arch but never used it. Right now I am planning to get one Arch for my personal hacking use (learning)

I know there are some people here who have a good experience with Arch, so I just wanted to inquiery about.

• About the tools I require, as for now I use a variety of tools, and I know default Arch installation lacks those tools. So is there any simple way to get those (like a common git repo of commonly used tools, then I can add my own if needed)
• I have also heard blackarch having tools, but I want to avoid blackarch because it has some bad reviews (correct me if I am wrong)

So any good advice on setting up Arch? Also add few opsec advice (not too high opsec, just simple ones) so I can apply opsec on-installation with Arch!

Thanks

[karmic leaf]

You can install Arch normally then build your toolset using pacman and the AUR which lets you grab most legitimate security testing utilities without relying on big bundled repos and focus on learning how each tool works rather than dumping hundreds at once and for basic safety keep your system updated use separate users avoid running tools as root unless required use a VPN or lab network instead of your real one and always test in isolated environments like VMs so you learn without risking your main system or anyone elses data. 😄

[dusky pelican]

Experience with Linux first time..great ngl.. Installed alot of repositories

[fluid sand]

#📜・rules

[halcyon crypt]

@dusky pelican did you checksum anything you downloaded

[halcyon crypt]

@karmic leaf when you are using the term arch or we referencing the base arch distro or the black arch distro

[karmic leaf]

I meant plain Arch with its normal repositories and the AUR, not BlackArch. You start with stock Arch then add only the tools you actually need, which keeps things cleaner and helps you understand what you are install. 😄

[gloomy wyvern]

This is the source code it's not the same as installation iso, officially is removed everywhere I thought if someone has it via mirror link or if they can share it with me if they have it from when they have downloaded it.

[craggy tide]

guys how do i get "girlfriend" i tried installing it through pacman but it doesnt work

i also tried yay but it also doesnt have it

what do i do

[fluid sand]

cheese, make a cheese offering😅 no guarantee it will be accepted, but cheese is the way to go🤣

[gloomy wyvern]

This is 2.4

It requires a lot of pc resources

That's why I'm asking for 2.3

[narrow jasper]

can anyone help me find out if my ISP is scamming me ? i tried using tracert but nothing useful, and wireshark is all over the place i don't even know what to look for. SYN ACK packets look fine and from the home devices normally, i don't know what else to check

[gloomy wyvern]

I wanted to start few vms, one Kali one this and one windows.

.

I don't understand what the f they were thinking about when they removed other similar versions but required less resources🤦🏻‍♂️ the move they did was mandatory hardware upgrade if one wants to use security onion for labs or other way.

[halcyon crypt]

so story time.. a while ago my Insurance Company who definitely wasnt Erie Insurance had "security issues". They stated they notified everyone that they planned to bill customers for 2 month due to the incident

fast forward to me calling my back twice now to issue stop payments cause these MF still trying to charge me to months at what

[gloomy wyvern]

Sue

[halcyon crypt]

cant sue because i technically owe the money

[gloomy wyvern]

2.3 but if you're thinking about getting on their official links it's impossible they removed them all together.

[dim plume]

Does anyone know how to create a jammer?

[halcyon crypt]

their initial double bill overdrafted our account and caused unforseen problems so everymonth i call in have them hold the auto pay and make my own for the month plus a little to catch up

@dim plume google of youtube

[gloomy wyvern]

Any of it would be good

How can I get them?

Is it working for you

For me the link is stuck on loading

This site can’t be reached
The webpage at https://web.archive.org/web/20250402232333/https://download.securityonion.net/file/securityonion/securityonion-2.3.300-20240401.iso might be temporarily down or it may have moved permanently to a new web address.
ERR_CONNECTION_ABORTED

I will maybe it will work on pc cuz I'm trying from my phone

Yeah it worked thanks

It's downloading

Just wanted to test the link

[karmic mantle]

heyy

i want to learn hacking

how do i start with it? can you guys help me with that

[whole patio]

Thats a way to break your installation, if you mix repos that are incompatible.. for instance different distro repos

[fluid sand]

venvs are your friend here

[dusky pelican]

Not installing different repos at once.. rather once for zorin. I wouldn't install Kali Linux repos on here

[whole patio]

For mixing repositories?

[whole patio]

great

[fluid sand]

my bad i did not read properly lol

[dusky pelican]

Tho I would try it on a vm

So thanks for the idea

Means much

Tho there's those I forgot what it was but installed them anyways

I remember platform tools, nmap, ocs-url, Wireshark,hydra

Are these okay?

@whole patio

[whole patio]

I don't know

[dusky pelican]

oh, no worries!! all good

[spiral notch]

what’s the question?

[dusky pelican]

i was just curiois if i installed different repositories. If hydra,wireshark,nmap are kali or any other destribution

[spiral notch]

what

that doesn’t make sense

hydra nmap and wireshark are in other distros

not only kali

[dusky pelican]

oh, so its debian?

well for debian

if i can use it for debian it should run fine

or ubuntu

[spiral notch]

you can use it

for every

[dusky pelican]

sorry ubuntu

[spiral notch]

linux distro

you can use these tools for any linux distro

[dusky pelican]

Alright thanks. Sorry for the confusion lmao

Alright, then il see what else i can install on here.. Other than those distros..

I mean repositories

i was actually planning on installin ggaruda(arch based linux) but opt out for zorin

[spiral notch]

repositories is a bit of something different

a correct question that would mean the same is

[dusky pelican]

sorry?

[spiral notch]

“do tools like nmap, wireshark, bla bla bla work on any linux distro or just kali?”

[dusky pelican]

yes, thats basically what i asked.

[spiral notch]

repositories is something a bit different yeah

[dusky pelican]

Eris told me it causes system instabilities

[spiral notch]

nws!

[spiral notch]

coolio !

[dusky pelican]

if its kalis stuff im installing on zorin

[spiral notch]

well

nmap wireshark and so on

is not kali stuff

they’re independent tools

[dusky pelican]

yeah, much to learn ig

[spiral notch]

we all do ☺️

[whole patio]

think if repos as "the back room" of a store.. ubuntu has all the stuff it can install from their own resources out of their own repos (back rooms).
Several stores may have identical items.. some stores get their items from the same vendor (debian-based.. arch-based, etc..

dont mix the backrooms of different stores

You can, and will, end up where one tool requires a software in version larger than 2 .. and at the same time another tool requires the same software in a version smaller than 2.. and then you got a problem, and a system that tells you "You know? I'm too old for this shit"

installing from a distros repository is based on the premise, that the distro controls what is installed

that being said

[dusky pelican]

oh i see, okay

okay i understand them a bit better now

not fully but to a degree

[whole patio]

You CAN install software from outside repositories.. if you know what you are doing, and set up "virtual environments" or build from source code, thats fine too

[dusky pelican]

nvm i get it, alr thanks lmao

[whole patio]

just stick to your distros repository and you are fine.

[dusky pelican]

oh yea i did that yesterday when i tried RDP with Xfreerdp n Remmina.. But im just getting a broken pipe error

Trying to connect to windows device..
to the virtual machine ofc..

gosh, im becoming terrible at speaking all a sudden but alr

[whole patio]

thats not what virtual environments in this context means

[dusky pelican]

virtualbox?

oracle?

[whole patio]

no

[dusky pelican]

oh

[whole patio]

https://docs.python.org/3/library/venv.html

think of this like a little sandbox where you can mess around with water and mud (tools) that does not really affect the GREAT CONSENSUS of your operating system

virtualbox on the other hand lets you use entire operating systems without affecting your host OS

[dusky pelican]

Oh.. Still confusing but makes sense. makes me think of windows sandbox.

the other one works, runs. i can put in whatever the hell i want. and even put malware, viruses and the host machine is still oaky

okay*

[dusky pelican]

oh so i can install any tool and messs up how much i want basicall?

basically*

right......

imma watch a vid on this

[woven anvil]

It has 0 isolation from your computer

Where windows sandbox runs everything in a container

keep that in mind

So if you "Delete the C:\ drive" with a python venv, you will delete your C: drive

or however people manage to screw up their computer

[vital heron]

Folks , need a help, How technical is GRC , If I'm a PT student, sort of a PT + forensics , GRC umm well kinda new except that ik csf,sp800,27001 , I've to apply for a job role and have to choose between GRC and infosec

[whole patio]

GRC and infosec can be the same field - GRC is not techical at all.. many non-techies work in that field

[vital heron]

So it won't involve me sitting in front of a pc auditing or pentesting

Right? If so then I'll go for the infosec role ig , I'm in right audits can be done via lynis or a nessus scanner?

[idle umbra]

To any and everyone that transitioned into CySec without having a degree necessarily: was there any project you did that you felt helped you stand out. I know its such a drab question, but I want to strengthen up my resume with some guidance from a real person as opposed to a LLM. Any help would be very much appreciated. thank you!

[whole patio]

It can still involve auditing, but not typically pentesting, no. You would audit documentation and guidelines 😉

[rain knot]

this is an excellent tag line

[vital heron]

Tysm man, my theory is most applicants won't go into grc and if I'm a good grc basics i could get in maybe
I'm a final year btw

[rain knot]

choose something you can be heavily involved in that’s right about or slightly beyond your capability right now

[whole patio]

there are lots of people who go the GRC route, just many come from non-tech fields

[rain knot]

work together with the co-collaborators and show that you are really good at working on a team with clear goals, deadlines and vision

[whole patio]

data protection officers, quality system managers, .. the occiasional techies

[dusky pelican]

oh lmao, naw ive seen people clear out their hard drives with the operating system on.. Or managed to gain privs to do so..

Or if someones willing to clear their c Drive

wouldnt understand why but alr

[whole patio]

"Because chatgpt told me to run this command", mostly

[arctic girder]

cisco packet tracer or gns3

[dusky pelican]

lmao literally

[rain knot]

or a nice walk outside with a tasty beverage?

[woven anvil]

It doesn't actually work all the way.
Personal files will be deleted, but even SYSTEM can't get rid of the windows folder

the registry on the other hand, can be deleted on a running system. It just kind of freezes up.

[dusky pelican]

yeah but ive seen some deleting it until a point where it just freezes, doesnt allow for fixes. Nor does it function fully

some stuff work but others dont

recovery is not in the same section atleast... but thats besides everything discussed

different partition

[dusky pelican]

worse idea, registry allows functionalities and has keys that keeps it functioning, Even responsible for the ui..

but application registries thats fine

[wraith belfry]

Hey guys, I’m thinking about applying for my first help desk jobs and I would like any tips, tricks or advice anyone can offer on the subject…