👥・help-me

[plain star]

thats exactly what Im trying to do..

[woven anvil]

Do you play any games that have a self-host gameserver element?

[whole patio]

yeah, someone maintain bomberclone server software already!

[sterile hatch]

THIS, is the problem, and its not hard hardware one, look, the capslock is blinking and the screen is black, i switched to initrams, then when i tried to boot in i got this: efi stub: loaded initrd from linux_efi_initrd_media_guid device path
efi stub: measured initrd data into pcr 9
SO what happened here? Gentoo musl/hardened base system installed
Custom compiled Gentoo kernel (6.12.58)
Kernel definitely running (checked with file and hash)
EFI partition working properly
GRUB pointing correctly to kernel and initramfs
Initramfs exists and loads
PREEMPT_DYNAMIC already disabled
NVMe, ext4, block layer, devtmpfs all working properly --- whats the problem? i tried dracut before, No further kernel messages appear
Dracut does not start
Init / shell / panic does not appear

This means that the kernel:
does not reach the "late init" phase
does not reach full console initialization
does not reach root mount

🙂

bro, a cybersecurity guy needs to be specialist in every field, in programming, in linux etc, \ im a pentester too

[limber marten]

Hi good morning house I am new here and willingly to start my cybersecurity/ehtical hacking journey please I need ma’am

[plain star]

im a cse student... I ve been focusing on only academics lately.. and when I try too do something more then that I just cant and feel stuck.. Ive interest in hacking or cyber security stuff... also have ml ai etc.. but again I tried to practice those and I lost focus againnn

[sterile hatch]

register on tryhackme and start the basics of everything to learn the concept, then start HTB academy, do machines, focus on 80% practice, 20% theory, then do writeups, certs like bscp, tcm security, htb certs, and you can get a job

[woven anvil]

Blinking caps lock seems to happen on a kernel panic, so the rest of the behavior lines up then.
Have you tried posting your kernel params to the gentoo forums yet to see if anyone might recommend something different? Immediately from a search, I am seeing people have the issue with missing FB_EFI and FB_SIMPLE from their kernel

[woven anvil]

Its true, but this is a server for people learning, so most people here are still learning one or a couple fields.

[limber marten]

Thanks very much for you response
What is HTB academy?

[sterile hatch]

search up for hackthebox

[woven anvil]

There is links for it in #👥・new-member-guide

[limber marten]

Thanks 👍

[sterile hatch]

everyone can be a cybersec specialist or smth but to be a good one is like 1%, depends on how smart you are, how analytical, you can think outside the box or not, how introvert you are, depends on your personality too. this field is for nerds who rot in front of their computers all day long

I wish you success

[woven anvil]

nerds who rot in front of their computers all day long
I feel called out

[limber marten]

😆

[sterile hatch]

then its for you my friend

[limber marten]

Yeah sounds interesting

[woven anvil]

Unfortunately, I am just a sysadmin for now

[sterile hatch]

im installing gentoo in the last 2 days with 4 hours of sleep

im ticking but im still aware and cant stop

i need to finnish it

[whole patio]

Honestly no one is a specialist in every field

[sterile hatch]

its a problem

[whole patio]

And truthfully.. the majority of tasks in the majority of situations can be done by on the job trained monkeys

[sterile hatch]

Its a problem, all my hacker friends are great specialists who are interested in everything and know a lot.

[woven anvil]

Most importantly, they know what they don't know.

Their limits, and what they need to learn to get better.

[whole patio]

And even they will tell you that they have holes in what they know about stuff, and know people that know more than them

If you are an intrinsically motivated person who wants to know how things work, great.. but even then you will stop at some point digging deeper

[sterile hatch]

of course, I don't know why you say that 🙂

[sterile hatch]

me? never

i will build my own kernel after i find this problem out and yes i will suck more than a month

[whole patio]

Because you said one would need to be an expert in every field, and that is just not true. It perpetuates an image that people will not reach, and should not strife towards

[plain star]

super honestly the hacking part🙂🙂
Im just trying to do SMTHINGG.. as for today i started cs study I dont know yet wht i would do with it.. as just now I checked THM I saw I already had an account their and had checked what it was about.. maybe after tht I lost focus and forgot about it.. as for web development by self learning-no.. nothing at all.. but in this sem I have a course based on this.. same goes for languages.. I just know the basics of few.. c,c++, pythone, java, dart as they were paarts of different semesters..

Im not truely skilled in any of em

[woven anvil]

You play minecraft?

[plain star]

nope... I was thinking abt it though.. I saw some of the streams clips an all.. but never tried it

broo... nothingg... I dont even know wht are those yettt... I mean I do know abt some of them.. heard of em.. but not enough..

[sterile hatch]

A hacker needs to really understand how computers, systems and networks work, and think onmachine level, which need deep knowledge. Linux knowledge for a hacker is not just knowing how to use Debian or Kali, or learning vulnerabilities and how the web works on PortSwigger. It goes more deeper than this. A real expert also know malware development, can write his own tools, knows what Nmap can not do, and can build those things from head without looking it up.

[woven anvil]

Find a game that you enjoy that has a server component like minecraft that you can host.
Then look into getting that working.
Then look into getting that working better.
Then look into using python + streamlit to make a little "admin tool" for the server.

Find something that you already enjoy, and use the things that you want to learn on the thing you enjoy. It will make it easier to learn it.

[woven anvil]

Gotta walk before you can run though

Using linux is a step towards understanding linux

[whole patio]

Thanks for the clarification.. but even those that lack some of the fields indepth are doing fine. I suck at ICS/SCADA security, .. does that disqualify me? Or people who are in this field since DOS, BNC connected IPX networks.. and say "I don't care about docker"... do they disqualify?

You Do Not Need to be an expert at everything..

There's a reason sooner or later you'll have a network of people who are "more of an expert" in a field you are comfortable with, and who you can call upon. You are not going to be superman of infosec

Get amazingly good in a single field, the rest will follow

[sterile hatch]

“But people stop at the point where they have a Linux system and try to use it; they’re not even interested in how it actually works, and they don’t even try installing or building a higher-level system. And they still want to be professionals like this. Pentesting roadmaps don’t teach this either, they only teach the surface level, like knowing the tools and libraries.”

[whole patio]

I still say the majority of tasks in the majority of situations can be done by on the job trained monkeys

[woven anvil]

I know people working in IT who stopped before learning vLANs + Firewalls.

[sterile hatch]

its about wanting more knowledge, if you stuck its not a problem, but i think you need to be still an expert

[whole patio]

"an expert" is totally fine.
"An expert in everything" is just delusional

People call me with specific questions, cause I am the guy they think of with that problem. They don't ring me for everything 😉

[sterile hatch]

in everything means in computer networking, operating systems, web, ad, malware dev, programming, its not that big bro

i can be a devops specialist now easily

but im still grinding to be a pentester

[whole patio]

My rule of thumb.. if there are entire job classes that center around a specific field, then I am doing fine merely having working knowledge.. I'm not going to replace someone, who's entire career is based on a single specific field

Oh, I have an example

[sterile hatch]

Sorry, but I can’t identify with your shallow way of thinking. I’ve wanted to be a pentester since I was 12 years old, and I can’t let go of the need to understand how things work. I take everything apart, I didn’t just start this path recently, and I was surrounded by real engineers who had already competed in European competitions back in 2019, they have incredible knowledge and not just knowing and understanding things on the surface, they told me the same, Continuous development, learn more and understand more, This field is not like learning a level and then quitting.

[whole patio]

at the ccc conferences there is a regular "hacker jeopardy" quiz show.. and no one, not a single one, aced every category .. "Could" I have learned arm cpu instruction set commands at some point? Sure.. would that have been a regular requirement? Hell naw

[woven anvil]

How dare you not learn PowerPC

[whole patio]

Maybe take a small step back, and look around you.. this is a discord server with a mix of people of different skillsets and levels of knowledge. We are in the #👥・help-me channel, where part of the help is encouraging and building self-esteem of new people.

So when you come here and say "You essentially need to be every superhero combined" then that is the opposite of helping people get and stay motivated. There may be people here who are great with hardware, or know a specific framework in- and out.. and all I wanted it to make clear that you are not speaking for everyone here with that artifically pumped up image of where people need to aim for

You can still get a job in cybersecurity at a SIEM company, that has next to no real expectations from you.. it might even give you time and stability to actually pursue interests in the meantime

[sterile hatch]

To be good in this field isn't about being motivated. If you need soft words to motivate you to work in this field, then it's not for you. I don't know a single person in this field who needs motivation. They take apart systems themselves because they love it, and they never lose interest. Cybersecurity has become very popular, with many people wanting to work in it for money. However, this approach will only attract poor-quality professionals.

[whole patio]

And we still need those poor-quality professionals for the majority of tasks, honestly

[sterile hatch]

You can still get a job and work in this field without knowing about firewalls or wanting to be great. But, you know, you'll have an idea of what your worth will be.

[sterile hatch]

yeah maybe, but you know, ai is developing

[whole patio]

And we "also" need to motivate those people, cause if they can't get a regular job, and their living conditions deteriorate, we might just encounter them again at the other end of cybersecurity

[limber marten]

I sent you a friend request you seems kind and well knowledgeable person

[candid lotus]

Hey guys, I have some questions.
I am under 18.
How much USD should I charge for:

Openly modifiying my foss bot to their liking.

Heavy customisation such as changing entire structures and stuff.

A basic tailwind css website for them to use to monitor bots (idk why they asked for this, its dumb.) 2-3 Maintenance checks

and around 20 to 40 hours of work.

[lost vapor]

seems like a full time job rather than a commission

i think you should ask for a respectful salary at this point

[candid lotus]

😭😭

its a one off thing

their maintainer fucked their last bot up

and its code is obfuscated

so I'll have to make a entirely new one

[lost vapor]

did you ask him how much he paid his last programmer?

though he can basically lie about it

[candid lotus]

probably some script kiddy

it has em dashes in the comments

bro probably asked ai to code it 🙏

how much should I ask? AI's telling me around 250 bucks and go to 200 if youre feeling generous

but im thinking its a lot 🤔

[lost vapor]

i think it's reasonable

[candid lotus]

i see...

[lost vapor]

if you know best practice and you're confident in your code structures it's good

[candid lotus]

yeah im confident, so 250 it is?

[lost vapor]

yes

[candid lotus]

and what should be my last offer?

like cant go below ts

[lost vapor]

like if they refuse?

[candid lotus]

yeah

like "thats too much"

[icy solstice]

Hey guys, I have a noob question. I was wondering how does gobuster work on websites that are on a cloud server. If I would search for the website through gobuster, will it show me the whole cloud directory list or the directories that are on the website only? My brother has a web i wanted to check on but I am scared to accidentally scan for the whole cloud server.

[lost vapor]

you can charge 200 if they do, but don't go below for your work

[candid lotus]

thanks!!

[lost vapor]

when you scan for web directories you essentially interact only with the cloud server that the website is hosted on
unless these directories point to different servers that are representing them though i doubt it's the case

you would only be interacting with the website's server

but do figure out to who'm it belongs to before you scan

[woven anvil]

Is it a VPS? or some "web hosting" thing

"web hosting" services usually put multiple websites on the same server

[lost vapor]

in which case it can be problematic if you scan them, even if you have permission directly from your brother

[whole patio]

Remember to offer a service contract afterwards for a small monthly amount, volunatrily of course

[icy solstice]

Yeah that was my concern, he is using both VPS and webhosting

[candid lotus]

how do i make the contract legally binding from other country

[whole patio]

I'm not a lawyer, just give them the choice to opt in.. so you stay on their radar for something like "up to 2 hrs per month of service"

[midnight swan]

anyone heared about valorant servers vulnerability ?

doing ddos attacks on it , causing packetlosses .

[tardy girder]

Hey, guys. Does anyone have experience with privilege escalation in Linux? I'm stuck. I've found a machine with “Sudo version 1.8.31,” but it's not vulnerable to CVE-2025-32463. 🧑‍🍳

[woven anvil]

thats not exactly how that works. What do you want to know?

[midnight swan]

i want to know how it works

[whole patio]

You "found" it?

[woven anvil]

A DDoS attack spams packets at a host until that host is no longer able to respond.

[midnight swan]

yeah ik that , but what kind of attack is it then?

[whole patio]

So you want us to tell you how to do it

[woven anvil]

If someone is DDoSing their servers, then its just someone "found a way to spam them with packets without getting blocked/tripping DDoS protection"

There isn't really much to understand, its very basic

[midnight swan]

not exactly , i just want to know how its working on a server like thier servers

[whole patio]

There are no local or self-hosted servers, so you asking us "how it works to ddos a valorant server" has a very, very slim corridor of possible motivation

[woven anvil]

It may not even be effecting their server. It could be effecting their ISP.

[icy solstice]

he is using Vercel, so i guess it means I can not use the gobuster on this because it will touch more stuff then just that one specific website i want, am i right?

[woven anvil]

Vercel is just a framework, and has nothing to do with how it is being hosted.

Oh, nvm

im wrong

[midnight swan]

Maybe , but its affecting every one playing at the time , from saudi arabia , uae , jordan etc

[whole patio]

doesn't matter, cause the infrastructure you are "attacking" would still be the one of the service provider

[woven anvil]

vercel is that auto-deployment thing that web devs use when they don't know how to use linux, right?

[whole patio]

no idea

[tardy girder]

I'm doing an audit. I'm about to report the intrusion, but seeing how they manage the vhosts, I suspect it could be escalated.

[whole patio]

you spent way too much time talking to chatbots, if you think "I am actually doing an audit" would fly here

oh sorry, thought you are the other new guy

still.. if that is a question you have to ask, I am doubtful about anyone tasking you with a vulnerability assessment

[woven anvil]

You are the intrusion.
You mean report the vulnerabilities?

[tardy girder]

I figured it might cause some confusion around here. It's not the first time I've worked with this particular client. I don't work with servers 🙃 , it's not my specialty, but in this case it came up. And I've tried all the usual things, I thought that maybe there were people with more experience who use other techniques that I'm not aware of, but out of sheer curiosity to see if I was on the right track. I'm not looking for the right way to exploit it, I don't care. The report is what it is.

I find it anecdotal that the community always reacts this way. I rarely use servers because people take it badly. “YOU SHOULD KNOW HOW TO DO THAT,” so why the hell is there a channel to talk about “help”? I always end up in channels where the questions are nonsense.

[crisp star]

If you can read the CVE you posted, you know it's not affecting the sudo version you target

[tardy girder]

Oh, damn, wait. I just fell. I made a mistake thinking about how it works. I've already seen what happens with that particular fault. The "-r" thing.

[dull gorge]

thnx

[whole patio]

“YOU SHOULD KNOW HOW TO DO THAT,” so why the hell is there a channel to talk about “help”?

Dont take this out of context - you should know this IF you are by definition a professional, e.g. someone who claims that this is part of a client engagement.

Unfortunately people come here with false claims, stuff they think works because it works with chatgpt, to get help doing nefarious stuff they shouldn't do and also don't understand

So... when we tell people "your story does not hold water, why don't you know this already if you claim to be a professional?" its different than pearl clutchingly asking why the channel is named "help me" if no one wants to help

[steady saddle]

nope

you were correct

[steady saddle]

not necessarily

it has serverless architecture

so fuzzing will stay the same

[slate grove]

Hey so I am dual booted with Parrot Os and windows 11....since the last bios update I have been facing issues of parrot getting crashed after 10-15 minutes of usage....first the wifi card drops... internet gone...then goes the screen keyboard with caps lock light blinking continuously.. everything dead.. laptop is Asus tuf15..rtx 3050

[deep topaz]

Linux Kernel Panic?

[whole patio]

asus tuf are well known for terrible linux support

If you want to invest time into troubleshooting, you are going to have to look at log files at the time of the crash

[slate grove]

Firstly it was acpi problem... now it's something else in journalctl

[high raft]

how can i run .exe file in linux

[sick night]

I need help. I'm new and know nothing about hacking. Recently my Gmail has been getting flooded w spam emails. Can someone please help me?

[whole patio]

What is the underlying situation here, like.. what is it you try to achieve?

[whole patio]

Help with what? Spam is natural now

[high raft]

i need to run mal...

and test

[whole patio]

That is what labs are for, like FlareVM for example

you dont "run them" in linux for that purpose

[high raft]

do you think anydesk is better

[whole patio]

"better than what"?

[high raft]

than you will tell me

[sick night]

Its going to my primary folder and it's about 100 spam email at one time. From all over the world in other3 pplz names

[whole patio]

I told you, exploding malware in a controlled environment is done in labs, usually VMs, FlareVM for example

[high raft]

i don't like VM even users

[whole patio]

I am happy that you encountered the phenomenon of "spam" this late in your life, but it is nothing you can "fix" or "solve"

[whole patio]

Doesn't really matter whether you like it, or not

[high raft]

report

[high raft]

matters me

[sick night]

I have been is this the only thing I can do?

[whole patio]

Oh well, then dont use VMs .. or use them later, when you realize that this is how it works

[crisp star]

That's the dumbest thing I read in a while. You use a sandbox / VM when you work with malwares.

[whole patio]

As a general rule - computers dont care a lot about whether you like how they work

[woven anvil]

Yes, but also consider Email to be legacy. The only "fix" is paid email spam filters, which don't really always do the best job either.

[echo patio]

Hey guys

[vivid steeple]

hi

[echo patio]

I have an account with all details but I've forgotten the key and I'm about to withdraw I'm unable to

How can I get pass this

[vivid steeple]

according to the #📜・rules we cant help you with hacking, especially since we cant verify whether this is an unethical act or not.

[echo patio]

It's my account

😩

[whole patio]

In that case contact the support of whatever service provider that is

[echo patio]

How bro

[whole patio]

How should I know? You have not told us anything about "where" you have that account

go and ask them

wherever you have that account - they have a support section

the hell I will

You are missing the core message here

Go There

[crisp star]

Oh NOOOO

That's a scam website

[whole patio]

saw the trust score? 😉

[crisp star]

Domain created 10 days ago tells me already enough

[woven anvil]

@echo patio
I had to delete the link, as it is a scam service.

[echo patio]

Thanks for letting me know

[inner hawk]

Hey guys I have a question about a website that took 3.5k from me any one here know how to maybe override the system to get my money back
Thanks

[whole patio]

We are not helping with this #📜・rules

[weary lake]

Hey guys can someone help me find a dupe in a game and help me learn coding and deving and scripting?

im willing to pay if needed

Please pm if you are interrested

or willing to help

[unborn ibex]

what do you mean by "dupe"

[flat prawn]

Duplicate I’m assuming

[chilly merlin]

sick! When i finish with them, do i go forward with things like scripting, red/blue teaming, and vulnerabilities and exploits?

[flat prawn]

Is hackerai.co legit?

https://hackerai.co/

[deep topaz]

Whatever direction you like. It depends on whether you're trying to work in the field or just have fun with a new hobby

[deep topaz]

Wat up my man.
I don't have an answer for you or nothing.
Just saying hey.

[flat prawn]

https://tenor.com/view/predator-arnold-schwarzenegger-hand-shake-arms-gif-3468629

My brother

[flat prawn]

I watched this YouTube video geared towards pentesters at then end the guy recommended this ai saying you can ask it whatever even let’s say more so unethical questions with full detailed answers and I didn’t know if it was legit it logs out interactions or what yk

[deep topaz]

Dunno, but if you figure it out let me know

[flat prawn]

I got you man

[unborn ibex]

damn sounds like a trap to me but I'm naturally pretty suspicious

[flat prawn]

I put the link lol if you want to see I’m reading through it rn

[unborn ibex]

yeah i'll give it a look over

[errant cosmos]

hey guys can someone explain to me what a threat model is

[weary lake]

guys can someone help me find or make a dupe in a voxel game the more people the better

Pm me please

[dusk matrix]

hey guys can someone teach me how to hack or like white hat?

[fluid depot]

#👥・new-member-guide

[crystal mulch]

If you want something done well, do it yourself

[strange crown]

Hey guys i need help with iphone. I dont remember Icloud password and when i want to restart password I don't get anything on mail. I want to log out but I cant because I need password does somebody can give me tips or is there any email to iPhone support?

[dusk matrix]

thanks but it didnt help much

[whole patio]

Contact apple support about it

[whole patio]

It is helpful, you just have to invest the time and effort

[dusk matrix]

okay

[ocean geode]

if you want add me, I'll teach you the ropes

[dusk matrix]

okay

[whole patio]

and maybe don't trust accounts that just joined the server

[dusk matrix]

okay

[strange crown]

On official site they want me to log in but I cant because of password. Its just loop where they send me code on mail that don't work

[ocean geode]

ah yes I will hack a random person I don't know

be real

[whole patio]

Still apple support is where you should direct the problem at

[whole patio]

Like that's unheard of ^.^

[ocean geode]

your dragging it cuh

[whole patio]

also, no need to hack anyone, just scamming them

Either way.. I would be suspicious of new accounts that just joined the server and try to lure newbies away from the main chats

[woven anvil]

Please be careful of scammers who will try to promise information hidden in DMs or off platform.

Most knowledge or questions can be asked openly here instead. This ensures no "funny business" is happening.

[ocean geode]

literally sent 2 links of hack the box and tryhackme

[dusk matrix]

yes he is not trying anything

[whole patio]

they got sent to #👥・new-member-guide which already has THM/HTB links..

[ocean geode]

and then i told them to dm me back when they have done a few lessons for personal teaching rather then the slop on #👥・new-member-guide

[woven anvil]

On which subjects?

Something that the rest of us can't know about?

[ocean geode]

stop dragging it

[whole patio]

listen.. to you as someone who just joined this warning may seem personal.. to people already on this server for a while this is just general advice, born from past experience

[ocean geode]

stop talking about this, this is a helpme channel for crying out loud

smh

[whole patio]

When I joined, posts like "Who can help me contact someone from this server, I sent them money and now they are ghosting me" was a daily occurance

[ocean geode]

because there are bad people out here yes, i am a black hat too but i don't come into servers like this to cause trouble

[crisp star]

black hat lol

[whole patio]

Gosh so glad to hear that..
Seriously though, to me you are a random nameless account that just joined, and I warn people to let those lure them away from the main chat

Decide for yourself how much that bothers you, I dont really care

[ocean geode]

mhmhm

[ocean geode]

🤷

[crisp star]

Sometime I really wonder, what do people expect when they wanna learn "hacking".

[ocean geode]

wdym

[crisp star]

Their motivation

[whole patio]

"Here is a link with resources"

2 minutes later "That didnt help"

[ocean geode]

but the link with resources can be daunting for newcomers

[crisp star]

Sure if you start from absolute 0 without any fundamental.

[ocean geode]

anyways

chill

[crisp star]

That's why Cyber Security is considered to be already a specialization that requires to have some knowledge about networking and programming

[ocean geode]

but they didnt want to learn cyber security they specifically said "hacking" or ethical hacking cant remember which

either way

[hearty oar]

I need some people to talk with
Ive made a software
I just need people to come share their opinions about my cyber software in the launch video of my software

[woven anvil]

Are we talking about the skillset required for a profession in the IT subfield of Cyber Security? Or running scripts?

[distant gulch]

kinda the same

[ocean geode]

different

[woven anvil]

Explain the difference.

[distant gulch]

[woven anvil]

Do you have a github to your software?

[hearty oar]

Yss

Im launching it

Ill upload it on GitHub
Rn its private repo

Ive demos and screenshots

[distant gulch]

let see please

[ocean geode]

okay here's what gemini said

Hacking vs Ethical Hacking: Check Key Differences and ...Hacking involves gaining unauthorized access to systems, often with malicious intent (black-hat), while ethical hacking (white-hat hacking) uses the same techniques but with explicit permission from the owner to find and fix security vulnerabilities, making it legal and beneficial for defense. The key difference lies in authorization and intent: hacking is criminal and harmful, whereas ethical hacking is authorized, legal, and aims to improve security.

[woven anvil]

If you want, you can post the github link in #👥・github-and-projects for discussion, as long as it doesn't have any unethical portions or parts that break ToS of other software.

[fluid depot]

explain the difference
"here's what ai said"

[hearty oar]

Its a cyber security software for network forensics 🫆

[ocean geode]

wrong i said here's what gemini said

[woven anvil]

I asked you to explain the difference, not the LLM.

So are you saying that you are attempting to help people with illegal/criminal/harmful activities?

[distant gulch]

he doesnt even know what hes argueing about

[hearty oar]

Do you want to talk on vc? I'll share inages and briefly explain the software

[distant gulch]

yes please do

[woven anvil]

lmk how it goes, and if we should talk to Sudo about it if you can please.

[ocean geode]

no i didn't say that, you are putting words in my mouth

[hearty oar]

Which vc.?

[crisp star]

I think you need to lvl up a bit before you can join and talk in VC.

[distant gulch]

general

[hearty oar]

Ok

[woven anvil]

Literally from your post.

hacking is criminal and harmful, whereas ethical hacking is authorized, legal, and aims to improve security.

[distant gulch]

fr ?

i really want to see what hes working on

[crisp star]

I think blue names can't join VC

[hearty oar]

I don't have permission to join general

[crisp star]

Yea just need to talk for a bit before you get the role.

Think it's only 1 lvl

[distant gulch]

ok just interact in the chat for a while and you'll level up

[hearty oar]

Oh great

It's done ✅

[crisp star]

Okay now you should be able to join

[distant gulch]

ok join

[ocean geode]

hacking is percieved as overall dangerous, as there are more black hat hackers then white hat hackers, therefore the generalization of hacking is often seen as bad

[distant gulch]

ok

[fluid depot]

thanks gemini, but maybe let the human go

[woven anvil]

We are going to stop talking about this now.
Please don't ask people to DM you for learning lessons.

[ocean geode]

i wasnt even talking to you

[fluid depot]

wait nevermind you made a spelling mistake carry on

[ocean geode]

.

[distant gulch]

jeevis the software is dope everyone needs to be on this

[woven anvil]

Code License?

[distant gulch]

he's showing a preview have not seen the full thing yet

[woven anvil]

If its a business promotion, then best if it can all be put into a ticket for Sudo/Cy to review.

[distant gulch]

alright i'll let him know

[woven anvil]

I am interested when the github shows up

[weary lake]

Guys can someonehelp me find or make a dupe for free please pm if youre nice enough to help

[woven anvil]

dupe?

[distant gulch]

[hearty oar]

How was this thing

[steady saddle]

what

not always

[steady saddle]

uhh sure

[hearty oar]

Join vc general

[ocean geode]

they wanted an example

[vagrant cloak]

If I have no experience in coding and cybersecurity and want to get into the defensive side of cybersecurity how should I start. Right now I’m watching python full course for beginners by programming with Mosh

[woven anvil]

#👥・new-member-guide
Ideally, you want to start looking into Virtualization, networking + OS management. Maybe a helpdesk role as you grow that into more "defending"

[small perch]

Is there a channel on here that is best for resume critiquing/feedback? or is there none on here? I just edited my resume and looking for some feedback on it

[indigo sluice]

Hello everyone! Sorry for sending this in here but I will make it short. If anyone knows a remote job opportunity please let me know as I am looking for options. I am a full stack developer transitioning into cybersecurity. Sorry for disturbing 💙 KTBFFH

[woven anvil]

@small perch @indigo sluice
This isn't really the best place for that.

[faint geyser]

you need https://discord.com/channels/990435451334688768/1070121989479596086 this chat if you can't communicate with someone irl

[woven anvil]

@sharp moss Do not ask for unethical stuff here.
#📜・rules

[sharp moss]

My bad

[small perch]

Okay thank you!

[whole patio]

And there is always the compliance side of infosec, too

[indigo sluice]

Thank you I will try my best to find a better way! Wish me luck

[edgy girder]

https://tenor.com/view/fixing-cuff-boss-hot-man-man-looking-good-man-in-suit-gif-14491385609047115364

"i am a black hat too"

[ocean geode]

this is not related to help-me

[edgy girder]

just thought it was funny the way you said that, dont read too much into it

[ocean geode]

ok kid

[edgy girder]

i must be the oldest kid i know

[tawny mason]

Hey guys I'm New here!

[stiff dock]

Hey guys ✌🏽

Can somebody help me? I am new and idk how this works

[sterile hatch]

i found a guy who solved my dumb problem ,if you want to see it: https://forums.gentoo.org/viewtopic-p-8876527.html#8876527 -- check the 2 last reply -- it was stupid right?

[whole patio]

Help you with what?

[sterile hatch]

what do you mean about "this"

[woven anvil]

Reading this makes me really want to spin up gentoo

maybe ill do it this weekend

[whole patio]

Object permanence strikes again

[rain knot]

it’ll get ya every time, you’re not careful!

[rain knot]

how long it take you to get it up and configured fully, usually?

[sterile hatch]

not just gentoo, musl based with custom hardened kernel, gentoo with pentoo overlay + DWM

justlikeme

0 documentation on this stack on internet

[stiff dock]

Sorry i mean how this server works 😅😅

[whole patio]

it's just a discord server like any other. Maybe start here #👥・new-member-guide

[stiff dock]

Thank you G 🙏🏽

[floral imp]

I'm trying to put debian 13 on bare metal with an iso on a usb any tips?

[tight cargo]

what do you need help with? to create the bootable usb use rufus

[azure coral]

Hi there! Just wanted to send out good vibes!

[flat prawn]

Thanks bro

[tender cypress]

is there a windows based tool or program to get names of people based off their user names from social media or gaming for testing purposes ?

[tight cargo]

i mean there isnt an executable that runs the databases to get someones real name from a username like monkeyd*ck700 but you can always try through https://osintframework.com

||hope you are using this ethically ||

[tender cypress]

yes i am using ethically

[wicked stratus]

how does hvnc work? is it just creating a hidden desktop then doing typical rat behaviour for that desktop.

[brave kernel]

I’m struggling with python, can some one help me find a python, c, or c++ for dummies

[mental helm]

Hvnc clones browser profiles for stealth operation in most cases. Google detects that a profile has been cloned and prompts you to "verify it's you" But other services like banks e.t.c work pretty much well .Some Hvncs offer full system wide control. The main issue here is getting a reliable hvnc module.

[crisp star]

Yea that money is gone

[keen perch]

Oh wow

[karmic kindle]

star my repo if you like this friends

[slow edge]

Why is this in Help me?

@karmic kindle Sorry bud but we avoid promotion so don't do it here, also if you want to show your github projects then we have #👥・github-and-projects and do not promote it, just let it be there! No need to tell people to star it. Thanks for understanding

[spark walrus]

Guys do u have any stegnography image questions from previous ctfs?
I kinda need them for practice purpose 🙂

[errant tulip]

i wanna hack into my own website. how would i do so. suhtting it down

[kind zealot]

Turn off your laptop
If it's on a server shut down the server

You might get scammed again
By someone who will promise you to get that money back

. that money is gone

[errant tulip]

u cannot get bitcoin back if already processed

[analog flax]

Hi, can anyone help with comptia account?

[whole patio]

help you like what?

[analog flax]

can i dm?

[whole patio]

No, I don't do DM

if its not something you can say out in the open, maybe this is the wrong server

[analog flax]

nope its just about account info, should I add contact infos in my profile or its not important for exams?

[whole patio]

I don't know, but if you plan to get a certification that actually names you, then it would be a good idea to actually include it in the profile. Else they might suspect that people are doing the exam on behalf of different people

[analog flax]

ok thank you 🙂

[modest moss]

hello everyone please does anyone has the link to the free hacking class on bigo live?

[weary lake]

Looking for someone to help me make a dupe in a game

[true briar]

Hey guys, which browser do you prefer for everyday use?

[whole patio]

Several, but Librewolf is the go to browser for me

[woven anvil]

You mean cheating in a game?
#📜・rules #6

[woven anvil]

multiple, best tool for that job

some things load better with chrome, but firefox gives you better access to block malicious scripts from running

[weary lake]

oke

[true briar]

Okay thanks that was very helpful

[woven anvil]

I use brave because it has PWA, so i can make my own "chrome apps"

not that i think its particularly better for privacy or anything

Web is in such a trash state. PWA should be the default >.>

that defaults each "site/app" as its own session that can't talk to another app's session

but nope, instead we get more AI + ADs

Well, it is until its not.
Hitting a RAM wall now with Datacenters, means that all the apps that just "eat RAM for no reason" are going to be a problem now.

and since Windows is 1 big app that eats RAM for no reason....

The Small/medium business world is glued to windows >.<

i too use linux primarily

Disney decided to stay unix-like, and went linux with redhat stuff

freeIPA works great

its just not as "dumb-easy" as AD

but also doesn't have the same dumb issues AD has

has other issues, but not the same ones

it itself is the auth + certificate authority. Not the policies. Ansible/salt/puppet would be for policies.

Oh, and freeipa(or whatever the paid one is called) also does sudo management

which is huge

right, because you can hire some nerd from bestbuy geeksquad to run an AD.

But thats how you end up with half-broken stuff, and insecure settings anyways

or even "things set up properly, but are just bad tech", like Roaming Profiles, or Redirected Folders.

only the management. 99% of staff i come across can't stand Teams + Onedrive/sharepoint, and would rather go back to SMB shares and use any other chat program, even FB chat.

It is possible. But nobody wants to go through all the settings to figure out what they do except for a rare few of us.

so its either "default with some changes" or "grabs whatever that locked down policy is from that regulatory body"

Or , sometimes i see really jank things

oh snap, thats what it is called.
I started to implement a red forest for a company, before they had a pentest, and the security company said not to do those, just keep it all as 1

Yeah, it wasn't implemented yet, we were still planning the hardening model.

how important is wsus nowadays?

It feels like anything that microsoft hasn't provided a cloud version of, is just going to be falling away, and not really receiving much updates outside security.
You can mostly manage updates fully through powershell + registry, and its unlikely that pulling updates over HTTPS is going to have security issues(As long as you enforce the update location to be official servers). So I can't see them making an "Azure WSUS" or "Copilot WSUS" or whatever their naming is now.

But even like WDS feels outdated and barely kept alive.

In NA, there was a huge push to the cloud. Now there is a lot of "regret". Some got stuck.

Other's haven't felt the "regret" hard enough yet

There is no "pure 1 environment best for every case"

on-prem + cloud are just tools

private data on-prem

public data maybe in cloud

Secure entry and exit points to private data

The problem i see there with that, is after they are done paying 30-50$/user/month, they don't want to pay for server licenses or hardware

especially if running like 8VMs or something, and you decide to go Datacenter + 3 servers or something

and start getting into clustering

$20k licenses later, you get 0 support from microsoft if you can't figure it out

gee, what a good business

Btw, yes, i did stay on the phone with microsoft for 6 hours to be told i can go help myself with an issue I had with a cluster >.>

what are we all giving them money for?

to make bad stuff and not care?

https://tenor.com/view/fantasticmrfox-destruction-destroyer-angry-freakout-gif-3526670

motw was 10 years?

i thought we had that in 7

yeah, they recently had it pop up now, and actually used it more

but

end of the day

doesn't replace a package manager + secure repositories

which is what microsoft ended up doing anyways with the windows store

From my understanding (I don't do linux workstations yet, but its something im planning on learning), if a linux machine's folders that a user has write access to is mounted without execute, then the user would not be able to download a file and just run it in the first place.

avoiding the entire situation alltogether

i mean "users can't override it" if the FS is mounted noexec

or if they extract from a .zip, which would keep its flag

Did you have a question btw?

Feel free to ask away

We should take this to DMs so we stop bogging down the channel 🙂

[undone jackal]

Any other better alternatives for vs code ?

[clever gale]

look for other ide's online

[undone jackal]

No suggestions here bru ?

[clever gale]

i use visual studio 2022, idk other but yea visual studio is good

[undone jackal]

Thank you mate

[undone jackal]

You’re into cyber sec and malware stuff ?

[clever gale]

yea im a beginner too , learning and exploring things

[undone jackal]

Great , I’m too

[clever gale]

do you mind if we talk on DM?

[undone jackal]

Will that be a problem if I slide into your dms ?

🥂

[clever gale]

oh no 😅 totally fine

[undone jackal]

Thank you

[true briar]

So I got a problem when I start burpsuite the gui doesn't load

[rain knot]

https://tenor.com/view/java-dev-clown-programming-programm-gif-20280193

It’s why we can’t have nice things

[vivid steeple]

I tried MITM attack the other day within my home network via bettercap but after enabling ARP spoofing, bettercap reports that it couldn't find the spoof targets although they were obviously active in the network. Does this have to do with my router or bettercap itself?
Thanks in advance!

[hybrid onyx]

Hi, i need an app to stop background running apps for my android device. I prefer F-Droid

[flat prawn]

@shadow fractal

[true briar]

@desert viper how old is this person maybe you find him on facebook

[shadow fractal]

Whats up

[flat prawn]

Above me

Blackmail and asking about finding someone

I always feel bad for those people

[vivid steeple]

well, that's not the case.

[fathom summit]

@desert viper we don’t help with that stuff here. Please review the #📜・rules # 3!

[steady saddle]

malware mentioned

i’m spammed in

[steady saddle]

with your router often

or wait, share more specifics

[steady saddle]

hard coded mac addresses or ignoring mac changes avoids mitm

[steady saddle]

it could be wrong networking set up if it’s a virtual machine

if you haven’t changed network settings in virtualbox / vmware it’s not gonna work

[supple trellis]

is their a way to install(dualboot) a linux distro without accesing the BIOS?

[steady saddle]

no

[fluid depot]

no, but virtual machines/WSL exist.

question is, why do you want to avoid bios

[supple trellis]

previous owner set a pasword on it, but he forgot it

so i cant acces it

[fluid depot]

so use any of the standard methods of removing a bios password. googling will take you miles

[supple trellis]

ah, i did google, not enough aparntly haha

[supple trellis]

the CMOS battery method doesnt work cus its not really accesible so...

[fluid depot]

nobody's stopping you from grabbing a screwdriver

[supple trellis]

yea i opend up my laptop but the motherboard is deeper down

[steady saddle]

it never is

literally unscrew more then

it’s not that hard

[supple trellis]

okay ill try

[hardy pulsar]

Has any1 got a a good app on android that can block apps etc

For my own personal use

[jagged bramble]

Search on apps store something like "app blocker" or something more specific, I only use "No Scroll" for preventing my brain from melting for now

[hardy pulsar]

Ive searched for some they are either paid or just a bit weird to navigate

[odd elk]

Hi how can I know something is a scam or no because I’m buying from a vendor and I pay for product and delivery and now he trying to make me pay again the same amount for custom to release my package that’s what they saying

[lean sierra]

Have you tried the mods of that particular apps?

[kindred narwhal]

Sharing email lists for services targeting any website or app. Inbox gets 100.0 ratio due to MX record validation.

[covert vigil]

#👥・help-me im starting out im cybersecurity and getting a new laptop which one should I get?

[flat prawn]

Thinkpad

[quiet wedge]

This is what I’m getting: Lenovo Gen 13 ThinkPad X1 Carbon Aura Edition AI with Intel Ultra 7 268V Processor, 14" 2.8K 2880x1800 OLED Non-Touch 400 nits 120Hz Display,| 32GB RAM+2TB SSD|, FHD RGB/IR Cam, Wi-Fi 7, Win 11 Pro

On Amazon.

[quiet wedge]

This a good thinkpad? @flat prawn

[flat prawn]

That isn’t bad bro

[quiet wedge]

Yeah. It’s only $2k.

[flat prawn]

my laptop was 300 😂

[quiet wedge]

What laptop you got?

[flat prawn]

Lenovo yoga lol

[quiet wedge]

Is it good?

[flat prawn]

I mean it’s worked for me

[quiet wedge]

If you don’t mind me asking what kind of work do you do? I’m still learning and a compete beginner here.

[flat prawn]

dm me

[quiet wedge]

I have more questions.

[raw adder]

bros, can I recover my fb if I forgot the email nd password?

[flat prawn]

just seems like you trying to log into someone’s account using their email and password ngl, but if you aren’t lying and you know your username and your phone number then boom

[raw adder]

nah bro i dont have time for tht crap it's my own I'd but I know my name but there is nothing in tht account like email and phone no. I don't know how tht happened

my english is not good 🙃

[flat prawn]

you don’t know how it happened? Huh

[raw adder]

bro i was 17 years old when it happened

[flat prawn]

why you trying to get it from way back when you confusing me man

[raw adder]

and it's a 10 year old account

[flat prawn]

💀

[raw adder]

how I can prove

[raw adder]

I didn't get help from anywhere I give my id proof to someone for tht account

and it can be an reason for learning hacking

[raw adder]

I have some cringe post on tht account nd want to see if my gf sent me any massage 🤣🤣🤣

[flat prawn]

It’s ten years ago how would your current gf send it a message

[raw adder]

I don't have any current gf nd tht was the only account where I was to much active and at this time I don't have any ss media accounts

I know it's confusing

bro i can pay if you can help

[flat prawn]

bro

[raw adder]

yes

I can't send any ss here

[flat prawn]

Don’t send me no request bro

[raw adder]

sry

[flat prawn]

Give me a minute

[raw adder]

oky

bro its you?

[quiet wedge]

?

[steady palm]

Won't receive that help here.Contact the relevant support platform and refer to our #📜・rules

[worthy wren]

Hi

[sterile hatch]

mine was 100.... (t480)

with 32 gb ram, 1 tb nvme ssd

[worthy wren]

Hi

[sterile hatch]

and yeah its fast... 4 sec boot on artix runit i3wm -- i can play ctfs fast

[sterile hatch]

hi

[vernal olive]

Hello everyone

[coarse dock]

Hello

[flat prawn]

Wassup

[clever gale]

Hey, how are you?

[flat prawn]

Wassup graves ngl sleepy bro

[clever gale]

Ahh real shiii man

[hoary gust]

Need some help message me

[whole patio]

Just ask

[glossy dagger]

Umm... I am new to this... And I want to know where I can learn more about it? Resources? Methods? I use kali Linux. I have done the networking stuff and some basics of everything but don't know how to advance...

[whole patio]

#👥・new-member-guide

[glossy dagger]

So it would be helpful if any of you can just guide me a little

[hoary gust]

What can I do to get into my email got a new phone and I can't log into anything

[whole patio]

Is the phone pre-owned by someone else?

[crisp star]

Use your credentials that you used when creating the e-mail?

[hoary gust]

Its asking for a 2step code f to be sent but I dont have the same number

N yes bought the phone from someone

[crisp star]

Well that's going to be a problem then

Better get your money back if the phone is already registered.

Or demand a factory reset at least

Else I guess the phone was stolen

[whole patio]

Cause it was

[hoary gust]

The phone has been reset the phone is fine.

[whole patio]

So your mail is asking you for a 2FA token you no longer have access to

[hoary gust]

Yes

[whole patio]

Well either your mail service asked you to generate and save some recovery keys just for that case, or you are going to have to contact that email providers support about your problem and hope they can and want to reset it. But 2FA is meant to not be easy to circumvent

[hoary gust]

Yeah . Thanks yall just has a bunch of military documents pictures. School docs its crazy.

[undone jackal]

On my system , whenever I try to open something its opening in my task manager but it’s taking too much time to load on my actual screen and sometime it doesn’t load at all but stays in task manager… should I change OS ?

[whole patio]

That is entirely your own decision

[viscid burrow]

I'm not sure if this against this servers rules (im pretty sure its not after quickly brushing thru them) but my microsoft/Xbox account has had its data collected with the password and email changed. microsoft support is useless and will 100% of the time tell me to change my password. if anyone is willing or wanting to help please DM me and I can provide more information (The email its currently hooked to. original email. original password etc)
thanks

[whole patio]

No one is going to hack into a microsoft account for you, and microsoft support is exactly where you should go and pester them

[viscid burrow]

got it 👍

[undone jackal]

Is there any alternatives, I’ve tried few but none seems working

[whole patio]

"not working" is not an error description, and from what you told us - we don't know what the problem is

Likely something you did, knowingly or unknowlingly, and I really don't want to go through the "I did not do anything" and "Oh yeah I forgot that" routine

The decision is yours

[undone jackal]

It all started from steam , I downloaded something from steam , ran it afterwards…. Im getting this issue

[whole patio]

Something someone sent you via the steam messenger?

[covert vigil]

Thank you!!

[covert vigil]

Thank you!!

[stark blade]

Hello everyone, I am new to security and I really want to become a hacker, please help me give me a guide, what should I do and where should I start

[whole patio]

start here #👥・new-member-guide

[stark blade]

Thank you

[stark blade]

I am also studying software engineering, can you help me with that part so that I can become a good developer

[whole patio]

Why ask me? There is a whole server that can reply to a well phrased question 😉

[stark blade]

Sorry

[whole patio]

Word of advice - make it easy for people to reply, tell them exactly what it is you are looking for

[stark blade]

Am looking for developer of full stuck

[whole patio]

Don't Tell Me 😄

[stark blade]

At website development

Website development and security

[whole patio]

Not quite sure what you are hoping here.. we don't know which continent or country or city you are in, and for sure no one here is going to be able to pinpoint it more exactly than apple already does

Probably going to end up in a radio-blocking wallet as soon as you ask around there

[fathom summit]

@wispy notch we don’t help with tracking phones here as we do not know your true intentions and if you are being honest. This is a cs/eh learning discord! Stay on topic please #📜・rules

[hardy pulsar]

I dont think they had any tbh

[undone jackal]

No

[undone jackal]

Nahh mate thanks , ill figure it somehow .. thank you

[jagged bramble]

Question about reverse shell.

Is it possible to use the same port to more than one target connect to? And still control simultaneous targets

[chilly merlin]

https://imgur.com/a/9rIE3if Hello, Windows won't let me connect to the desktop.

[whole patio]

May I ask what the specific use case would be?

[jagged bramble]

I was talking with a friend and he showed me a github repo with a code "RAM Cleaner", but with an revshells.com payload, the payload pointed to an server and one specific port.

Then I've though how the server manages many connections if more than 1 person execute that script

Cool, I thought of some project related to that

[fierce dove]

I need an advice from someone that has been through this case. I am about to finish highschool, currently eJPT certified and aiming for more certifications and to work in cybersecurity industry. I am practicing daily, working and building a portofolio. There is no separate college for cybersecurity here where i live only a CS and cybersecurity masters, 5 years in total. Should i still take a degree or as soon as i finish high school apply for an entry level job and start working? Will this affect me in the future? Affect advancing to higher positions? In these 5 years i can gain a lot of experience

[whole patio]

Which country are we talking about?

[fierce dove]

Romania

i am planning to work in another country though, not here

[whole patio]

Some countries put a ridiculous emphasize on a master degree, others don't care at all - is the country you plan to work in already determined?

[fierce dove]

yes

Germany most likely

best option

[whole patio]

Employers in germany do not care about academic degrees at all

YMMV in the public sector

[fierce dove]

i believe that wasting 5 years in college that would teach me almost nothing would be a stupid decision but as you said, some countried emphasize on a master degree

i would rather work and gain experience than spend 5 years in college

[whole patio]

You would be hard pressed to find a person in german cybersecurity with a master degree, it would be considered a total waste of time

[amber rivet]

Hey, do you guys know any good software that connects a Windows PC and a Kali machine to share the keyboard and mouse between the two devices? I tried Deskflow, but it’s very laggy.

[fierce dove]

understood, appreciate that

i am just a little bit concerned

a college won't teach what certifications do and just grinding on THM or hack the box

[whole patio]

Having relevant certifictations or having personal connections would get you into the interview stage. There language skill and knowing what you are doing is the only relevant part

Well, depending on what job specifically you are looking for of course

[stark blade]

Hello everyone, please help me, I want to become a web developer, where should I start?

[fierce dove]

i am more concerned of how people make the difference between someone with a degree and someone without

[whole patio]

Most people don't go to university in germany, some sort of vocational career paths are the norm. They really don't care as much about academia as other parts of the world do. They are very practical.. you can do the job? Then you get the job.

[fierce dove]

that's what i am saying, practical knowledge is much better than having a degree.. most people that graduate don't even know what they do

especially CS graduates

so i passed my eJPT exam and i am aiming for PNPT, CRTP and OSCP. Is that a good path?

someone also suggested CPTS

[whole patio]

Most of the times job listings ask for "OSCP or equivalent", which depending on who gets to read the application may include PNPT or eJPT. I've never seen CRPT or CPTS in a job listing

Prior job experience would go a long way though

[fierce dove]

does hands on practice like THM labs count?

[whole patio]

really not

The eJPT would be way more relevant

[fierce dove]

i meant as in THM labs including certifications

[whole patio]

Having worked the job before just shows that at least someone out there vouches for your expertise

[fierce dove]

indeed

[whole patio]

THM/HTB have this .. taint.. that everyone and their dog and pony has them

and usually people dont care a lot about whether it are the paid for certs of those platforms

btw I dont mean to say that you would have to have worked as a pentester before.. but general job experience, preferably in IT-adjacent fields, would count in your favor, too.. in a nutshell, people want to see that you dont need a whole lot of handholding

especially since pentesting would not be an entry level field, usually.. so if this is the first real job you aim for.. well then you have to be convincing during the interview stage

[fierce dove]

understood

any further advices?

[whole patio]

Make a plan B 😉

you are ALWAYS going to be in a better position, if you are not desperate for a job

[fierce dove]

a plan B

hmm

this will be hard to be honest

[fierce dove]

not really desperate, i just want the opinion of other people and make a plan overall

[whole patio]

My choice of words may have been ambivalent - I mean a plan B like "well 4 people told me I am too young or inexperienced to be considered for a pentesting position.. how about working an IT job for a few years instead, get better at the language, perhaps, get more self-esteem, comfortable with the culture, etc

dont make this a make or break decision, if it does not need to be

[fierce dove]

right, i mean in this case won't really need a plan B since not long ago i have started working as an intern in an IT startup

[woven anvil]

One thing to consider for college

its not just for learning

its also for social networking and building connections with like-minded people

creating study teams to figure things together outside the syllabus

[fierce dove]

guess i haven't thought about that part

[woven anvil]

And businesses who specifically want people out of school tend to scope at schools

[fierce dove]

i will think about it and make a decision soon

overall thanks for the advices

[uneven heath]

Hello I'm new here ...

[whole patio]

hello "new here"

[uneven heath]

U new here too ? @whole patio

[whole patio]

let's not dwell on that ^^

[uneven heath]

Sure sure

So i texted cuz i was trying to learn ethical hacking as I'm very interested in that stuff

But idk where to go ...

[fierce dove]

#👥・new-member-guide should help

[uneven heath]

Thank you @fierce dove

[woven anvil]

@peak geyser

[woven anvil]

@peak geyser
I meant here

[sterile hatch]

worst choice for a beginner sorry

youre running large cracks or what

true

intel chips...

[analog musk]

i was silenced.

[sterile hatch]

i see

dont press enter after every word

xd

[analog musk]

every

word

[sterile hatch]

i would recommend t14 gen 5 or gen 2

im using t480 and its still enough

but they know

[sterile hatch]

ryzen version too

[whole patio]

Doesn't really matter which one.. unless one would have specific requirements

[silent depot]

Hi guys I've got a question and need some help so I brought an acount from someone changed all the info and stuff to secure it but try log on now and its been swapped to a new email I dont have access to does anyone know how to get into an email so I can get my acc back?

[chilly merlin]

its mainly both a new hobby, and so that I can learn to protect me and my friends from dangers, theres a lot of crazy people who are hackers so :<

[whole patio]

May I ask where the account is hosted?

[silent depot]

Whoever took it changed it to a yahoo email and its connected to ea Microsoft and Sony

[whole patio]

so an ea games account

[silent depot]

Yeah

[whole patio]

You are not in a good position here

[woven anvil]

If you are buying accounts from someone, then it is a scam.

[whole patio]

technically, there is nothing you can do. Legally, you can sue them, but the transaction was a violation of EA terms and services to begin with, so... nothing really to be gained here.. could try to get your money back though claiming they committed fraud

[woven anvil]

You can try to report it to the provider and hope they get banned, but noone can assist here. You may also get banned.

[silent depot]

I've emailed whoever has it now and I hope they get back to me and we can resolve it but if not ill speek to who I brought it from and say I either want a refund or a new acount

[whole patio]

You most likely got scammed, so I wouldn't hold my breath here

[flat prawn]

https://tenor.com/view/damn-bro-you-got-the-whole-squad-laughing-you-got-the-whole-call-center-laughing-call-center-indian-gif-25440258

[calm kindle]

Hello..."sir's".pls I may use some help . I have HP laptop running on 64 win. I had try all I know technically to resolve my mouse pad and pointer problem..... dancing like Tom and Jerry. Pressing keys without touching anything on my laptop. I had clean and restart my laptop 16times in a role. It will work fine for a while then start malfunctioning again. I thought some one hack into my laptop and control my laptop but I doubt after trying shift control esc. Pls what I might be doing wrong or simply being a tech moron. HELP ! THIS PROBLEM IS ANNOYING.

[sand swallow]

Im back again

@whole patio im back

[whole patio]

https://tenor.com/view/monkey-talking-on-the-phone-gif-9299946233689426

[deep topaz]

https://tenor.com/view/britney-spears-x-factor-fox-new-phone-who-dis-gif-14666995

[warped crow]

Hey, I'm new here. I'm trying to hack Archetype from the starting point on Hack the Box. I can't do it :D.
impacket-mssqlclient ARCHETYPE/sql_svc:M3g4c0rp123@10.129.44.119 -windows-auth
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies

[*] Encryption required, switching to TLS
[-] [Errno 104] Connection reset by peer
I'm running this command, but nothing happens. After a while, it stops itself. I searched YouTube but couldn't find anything. Grok wasn't much help either :/.

[woven anvil]

Is it a touchscreen perhaps?

[pearl stratus]

Hi yall I’m brand spanking new here. I’m battling cancer atm and figured with all the free time I have I’d dive into this and learn so i can be prepared once im done with treatment 🙏🏽. If anyone has tips or can give me direction I would much appreciate it!

[flat prawn]

Sorry to hear about the unfortunate news, https://discord.com/channels/990435451334688768/1306084252437450763

[woven anvil]

I know a few people who have gone through that, I am sorry to hear about it.
One thing that they have talked about is the brain fog from treatment, so I think it would make sense to set realistic expectations, and to not be angry with yourself if you end up forgetting some of the things, and need to re-review everything during treatment or afterwards.

Also keep in mind that this is stuff that can take years to learn anyways.

I would personally grab a topic that interests you the most, and stick through it, to try and learn it as best as possible to set a foundation in it. This will make it easier to recall later on, and will also help you transition to the other topics.

Some of the more broad topics to start on would be:

• Networking
• Hardware
• Operating Systems
• Application Development/Programming

Once you know more which one of those specifically interest you, we can point you in a more specific direction for learning and practicing that core subject.

[pearl stratus]

Thank you so much for this 🙏🏽! I’ll definitely dig into those topics this week.

[ornate verge]

Hi, I'm new here

I would love to learn I'm a beginner

[pearl stratus]

Are there any resources anyone recommends for those topics ?

[woven anvil]

Tryhackme that kaizen linked to in #👥・new-member-guide is a great website for getting an overview/summary of a ton of stuff. So if you aren't sure where to start, try there, and just keep going through the rooms.

[woven anvil]

Similar advise for you. Start with tryhackme from the #👥・new-member-guide , and let us know which rooms you enjoyed.

And which subjects you have more questions on

[ornate verge]

Okay thanks I'm working on it , and I bookmarked it, someone recommended it to me before but I didn't take it seriously

I'll be glad to learn and develop myself and skills

Thanks

[woven anvil]

Its great for the summary/overview, but there is for sure more advanced resources depending on which core subjects you want to get into

[ornate verge]

Advanced are paid right?

Or are there like free resources?

[summer rivet]

Does anyone know how to fix a PSU on a PlayStation slim?

[ornate verge]

Videos or PDFs ?

[thin mural]

ifixit does: https://www.ifixit.com/Guide/PlayStation+5+Slim+Power+Supply+Replacement/168012

[summer rivet]

I don't have the 30$ :/

And it's for the ps4

[ornate verge]

But honestly, it doesn't matter now though, lemme learn the basics first using try hack me, before choosing a specialty

[woven anvil]

There is tons of free information on the internet. The only things you have to pay for is hardware so you can homelab and test things at home

Some things are nice to pay for, especially once you get going. like Certs

but i wouldn't start with that

[thin mural]

Ah well ... I'm sure they have PS4 articles too. But to fix, you need tools and such. It would probably cost at least $30 for stuff like bits, soldering iron etc.

[whole patio]

if a psu is broken, you really dont want to mess with it "fixing" it, you replace it

[woven anvil]

find out what you actually enjoy

[ornate verge]

Can a laptop do the homelab ?

I have a Thinkpad 450

[whole patio]

Depending on its specs, sure

how many threads and how much ram?

[woven anvil]

https://www.ifixit.com/Guide/PlayStation+4+Slim+Power+Supply+Replacement/103362

guide is still a guide

[ornate verge]

Lenovo T450

[ornate verge]

Ram is 8gb

But I don't know what threads are

[woven anvil]

The RAM is a little low.
Is the laptop used for anything else?

[whole patio]

8 gb is about the minium

[whole patio]

how many cores does the cpu have

[woven anvil]

If it is your primary computer

[thin mural]

f*** cancer, and good luck with your studies

[ornate verge]

No, I wanted to use it for plc programming but not currently using it

[woven anvil]

then i would just look at vmware/virtualbox/hyper-v

[summer rivet]

I know how to take it apart but one of the things are burnt and fried on there how do I fix it without buying a new one

[woven anvil]

If its an extra machine, start with installing Arch on it

you will learn a lot

After you install it, wipe it and do it a few more times

[whole patio]

you don't, especially if you don't know what and how

[woven anvil]

then turn it into a lab

[ornate verge]

Arch, how do I do that?

[whole patio]

a fried PSU gets replaced

[ornate verge]

Is there a guide on it please

[woven anvil]

You would need more specialty with soldering, and knowledge on dealing with high voltage equipment.

with capacitors that will put you in a hospital

at best

[woven anvil]

https://wiki.archlinux.org/title/Installation_guide

They have a great wiki

For a ton of information about linux

[dim plaza]

Follow the docs or use archinstall if ur lazy

[whole patio]

and if the faulty psu in an indicator of other hardware problems, then this thing may go up in flames

[thin mural]

obligatory 1.21 jigawattz

[woven anvil]

not yet

Soon™

[thin mural]

That hair style is a choice

[ornate verge]

But I'm scared lol, I'm coming from windows, won't it affect anything?

[whole patio]

sure will

[woven anvil]

It will entirely wipe the laptop you are installing it on.
You can revert that by using a USB + ISO to install Windows back onto it.

Which is why it is important that this be an extra/second computer

and not your main

Your main, you can come ask us questions, or have the wiki open

[whole patio]

you know which of these t450 cpu you have?

[calm kindle]

@woven anvil oh I haven't cross check that. But the tourch screen works fine.

[summer rivet]

was already electrocuted by it

[woven anvil]

Whenever i've seen that, its been from "ghost touches" from a touchscreen

even though it works

it just decides to work when you don't touch it

you can know for sure by disabling it in device manager while its happening

if it stops immediately, then its your digitizer in the touchscreen

[calm kindle]

Oh gotcha...what do you think i should do ? Sell the laptop ? Lol

[whole patio]

nevermind, they all have 2 cores and 4 threads

[woven anvil]

if it is that, then your options are replace the screen, or just disable the touchscreen

[whole patio]

this is not something I would comfortably call a "laptop that can function as a lab"

[woven anvil]

great starter linux machine though 😉

and containers would work

[whole patio]

no, and calm down

[woven anvil]

@civic lagoon
We do not do unethical activities.
#📜・rules

[civic lagoon]

Ohhhh ok sorry just kidding

[thin mural]

uh huh

we believe you

[civic lagoon]

Ya jt was a joke

[calm kindle]

I swear down .....@woven anvil you re the best. Thanks I ll try that and revert. Appreciate your swift help

[woven anvil]

Keep them out.
#📜・rules #1

[ornate verge]

Lemme check I don't know actually

[whole patio]

doesnt matter, they are all the same when it comes to threads

[ornate verge]

Okay

[whole patio]

I checked in the meantime

[ornate verge]

If I want to use Arch install how do I do that

[whole patio]

See.. a VM "takes" some of the 4 threads your CPU uses away from the operating system.. and your 4 are not a lot to begin with to run the host operating system

[whole patio]

arch has installation guides.. all the linux distros have.. but it would replace your current operating system.. windows most likely

I guess you can install a single VM and use it to do THM/HTB challenges

the default kali image takes 2 GB and 2 threads

[sweet tangle]

Hello

Im new

[thin mural]

Running Kali on 2gb/2th was very sluggish for me?

[ornate verge]

Which is better kali or Arch?

[flat prawn]

Kali

[thin mural]

They're just different

[whole patio]

it runs fine with a machine that does not struggle to run VMs

[sweet tangle]

Hi, I need help. I'm new here and I need help figuring out how to generate income with my basic-intermediate cybersecurity knowledge right now. I'm broke ://

[whole patio]

you are on the entirely wrong server for that

people ask that all the time here, and they get the same answer

[thin mural]

Then I am not sure, maybe Windows 11 is just bloated. I recently swapped to Mint, so I'm going to try VMs with this and see if things are better.

[whole patio]

nothing "bloated" about it, but if your host OS really wants 4 threads.. and you take 2 of them away.. then the host gets sluggish.. and that means tools that run on it are also going to suffer

its technically possible to run a kali VM on the t450.. its just not going to be great

[thin mural]

Oh, I was speaking about my machine, and my experience so far.

[ornate verge]

I'm on the Arch Linux download

[thin mural]

it is a i5-8250U CPU @ 1.60GHz × 4

[whole patio]

yikes

[ornate verge]

I wish I can send image

There are so many iso here

There's one with .sig

.torrent

[thin mural]

i5-8250U CPU @ 1.60GHz × 4, a 4-core, 8-thread mobile processor from the 8th Generation (Kaby Lake R) launched in Q3 2017, featuring a 1.6 GHz base clock, 3.4 GHz turbo

[ornate verge]

Which one should I get

[whole patio]

no one unless you have read the documentation for it

[ornate verge]

And theres normal .iso

[whole patio]

you realize that this is going to nuke your current operating system, right? And arch is not recommended for beginners

[ornate verge]

Which is recommended for beginners?

[whole patio]

beginner friendly linux distros would be mint.. fedora.. ubuntu

[flat prawn]

Neither learn the basics

[ornate verge]

I'm confused to be honest

I finished downloading Arch iso

[whole patio]

and has kaizen says.. don't do this on a whmp, make informed decisions based on necessity

[flat prawn]

https://tenor.com/view/facepalm-really-stressed-mad-angry-gif-16109475

[ornate verge]

Okay, I should stick to windows for now

And learn with try hack me right?

[flat prawn]

yes

Personally

Eris probably best at helping beginners tho

[ornate verge]

Okay, thanks

I'm on it, will continue later in the morning and learn more

I'll keep the distro for Arch

When I need it after learning the basics I'll just use that and update, instead of downloading again

For now learn the basics

[flat prawn]

Kali > Arch for beginners

[whole patio]

kali is also what those sites are going to expect or provide

[ornate verge]

So both are a necessity

[whole patio]

neither one is

kali is just easier

[flat prawn]

true

[ornate verge]

Okay

[drifting chasm]

Does anyone know the steps for beginners ethical hacking help pls

[flat prawn]

https://discord.com/channels/990435451334688768/1306084252437450763

[drifting chasm]

Thanks

[plucky merlin]

Hi everyone

[haughty dawn]

hi @plucky merlin

[languid meteor]

Hi everyone, I am new here i know a few things but what I need help with the right now is factory resetting an old macbook pro and they do not rember their password nor have their old apple ID access. Any resources are appreciated.

[flat prawn]

@deep topaz aren’t you more familiar with Mac ?

I’ll let you take it from here then my man

[deep topaz]

If you don't have a back up drive you can factory reset it. The method changes slightly based on which model you have. The Silicon Macs are a bit different than the ole skool intel ones.

[deep topaz]

We'll see if we get a reply.

[languid meteor]

Thank you!

[languid meteor]

Thank you, its 2008 so its intel. They were telling me they are looking for a particular file so I didn't want to completely factory reset it. I will as a last resort.

[deep topaz]

If you need to get into a MacBook without any recovery capability you need to get to contact Apple Support. #📜・rules

[languid meteor]

Got it, Thanks for your input!

[woven anvil]

@thorn tide
Don't ask for unethical stuff here.
#📜・rules

[thorn tide]

Oh ...is there another chat for that or is it not allowed ?

[woven anvil]

Unethical stuff is not allowed on this server.

[thin mural]

If it’s your phone , contact Apple support. If it isn’t your phone, then yeah, no bueno

[woven anvil]

Without the pin, you can sign in with the apple ID

obviously, as the account holder

[thorn tide]

Well I do know how to redo the firmware, but I wanted to somehow get in find out who's phone is it

[thin mural]

Nope, not happening

[thorn tide]

I found it on the road

[thin mural]

To find an iPhone owner, first check the lock screen's Medical ID via "Emergency," ask Siri "Whose phone is this?", or use the "Find My" app if the owner enabled Lost Mode to display a message; if these fail, turn it in to the police or the place you found it (store, school) so the owner can retrace steps.

[timid shell]

Hello respected people

I am working on something

[dry prism]

my pc told me that i have smth called HackTool:Win32/Injector!rfn
i told the window defender to remove it, am i safe now?

[dry prism]

i also ran quick scan again and it says no threats found

[thin mural]

No idea , I am not familiar, would be googling it same as you. Lots of malware has persistence stuffs though, so keep a close eye.

[haughty dawn]

why are you typing like this?

[woven anvil]

@timid shell
No asking for unethical stuff here.
#📜・rules

[crisp star]

What's the file path?

This better not be something like Cheat Engine

[river glade]

Do anyone know How to code a Android keylogger and it stores log into local storage.
Dm me

[dry prism]

wdym file path

idk wat it is

[crisp star]

When Microsoft quarantines a file you can view the alert for more detail

[dry prism]

ok

[crisp star]

I would be very concerned if the file was found somewhere inside the temp folder

[dry prism]

they told me i can either

remove or restore the file

they say affect files are
file: C:\Users\AppData\Local\Google\Chrome\User Data\Profile 2\File System\006\p\00\00000001

@crisp star

i ran full scan

and they said no threat detected

is that valid or false

[crisp star]

That's a very strange location for the file to be here

[dry prism]

@crisp star

should i

uh

factory reset the pc

[crisp star]

In my opinion I would do that

[dry prism]

hm

but i tried all types of scan

they say its ok

is that false positivity

[crisp star]

Malwares can evade detection

[dry prism]

and i also remove the files dectected

[crisp star]

I hope there is no AV exclusion

[dry prism]

ok so its time to factory reset (again)

[crisp star]

Did you check if any exclusions were created?

[dry prism]

what is that?

[crisp star]

You can create file / folder exclusion so MS Defender doesn't scan it

[dry prism]

i never create anything like that

[crisp star]

Malwares can create that for you

[dry prism]

dang

where can i find it

how check it

[crisp star]

Somewhere inside the defender settings

https://tenor.com/view/google-exists-google-search-it-geekboy-geekboy-cz-gif-25933207

[dry prism]

there are nothing inside the exculsion page

@crisp star

[crisp star]

Well that's good at least

50/50 chance you are fine I guess

[dry prism]

how do i know if things went wrong?

[crisp star]

Lots of things you could check. That ranges from running processes, scheduled task, AutoRun, Registry settings, active network connections

[dry prism]

like if i play game and its crashes or lags more than normal?

[dry prism]

i dont know any of these

hm

[crisp star]

That's why factory reset is always recommended

[dry prism]

if the pc performance is normal, is it safe?

@crisp star

[crisp star]

Depends what kind of malware it would be

[dry prism]

its uhh

HackTool:Win32/Injector!rfn

[crisp star]

What did you even do right before the alert?

[dry prism]

like before it told me that i have a threat?

i tried to dowload sonic and all star racing transformed for free

(it didnt work)

@crisp star

am i cooked chat

[crisp star]

Hmm then it would not be suprised if the gamecrack triggered defender

[dry prism]

wait what

so its

super dangerous?

?

[crisp star]

It depends from where you downloaded it, and if the site has a good reputation. But pirated game is something I would stay far away.

[dry prism]

what can i do other than factory reset

[crisp star]

Pray that nothing else happend

[dry prism]

ok fuck

i just googled

and the site is not

reliable

[glass hull]

Hey guys does anyone have a version of linux that its easy to use and i can use some part of windows like excel,powerpoint and word? i need it for college

[dry prism]

@crisp star

how do i check if my pc still has malware

[crisp star]

#👥・help-me message

[dry prism]

ok

[dry prism]

is the best solution still factory reset?

@crisp star

and what to prepare for a factory reset?

[little storm]

https://www.linuxmint.com/

[chilly merlin]

Hi

Need help

Instagram account disabled 😭

Can anyone recover it

[coral dock]

help me shop for single kayak rack / crossbar mount for the top of my cadillac cts

so i can travel with my kayak strapped to the top of my car

I assume hack you, but i dont really mess with email shit so i wouldnt 100% know

[fluid depot]

i don't think anyone here is part of instagram support. go ask them.

[ashen steeple]

people already say we don't do that here, just stop