👥・help-me

[shell moat]

I know i should do both but which one would be a good starting point

[woven anvil]

Knowledge of the foundations of Tech would probably help you the most

People who miss out on that don't make it too far

[shell moat]

I have literacy in IT done 2nd level for 4 years

I want to upscale toward DFIR

[inland scarab]

Do you think its my GPU?

Cuz My CPU is powerfull enough

[shell moat]

I have a degree in comp and complete comp A+ currently doing sec+

[uneven wedge]

that being said, if i took an I.T course before cybersecurity i should be okay?

[woven anvil]

THM and HTB seem to both have rooms for DFIR.
It seems that learning blue-team stuff overall will get you exposed to DFIR.
Someone posted this before.
https://cyberdefenders.org/blue-team-labs/

[shell moat]

Dayum @woven anvil working OT in this B 🤣
Much love man real G💚💚

[woven anvil]

Nice. I have an expired A+ ^_^"

[shell moat]

Haha A+ didn’t really help me much just did that for the job prospect

[woven anvil]

Would you be comfortable setting up an entire environment for 3-10 people from scratch yourself?

[uneven wedge]

yes, i have done labs to re-image computers for a school

and set up the hardware as well

[woven anvil]

A+ only showed me how outdated the A+ questions were.
I learned more by just fooling around on homelabs

[woven anvil]

The Servers + Networking would be also important.
Setting up a router + switch + APs with vLANs so servers are separate with just the required firewall rules for workstations to talk to them.

And being able to effectively use at least 1 hypervisor

If you have all that, then you have a nice foot into already learning security.

[torpid jungle]

Hello! What's this about a hypervisor? That's something I've never dabbled into.

[uneven wedge]

yes! i they had taught us how to configure switches & routers and do active directory as well as how to use PFsense

and virtual machines as well.

[woven anvil]

Its the official term for the software that runs Virtual Machines.
So Type 1 hypervisors would be Software that has entire control over the hardware, like KVM/Xen/Hyper-V/ESXi
Type 2 hypervisors run from within your OS. So this would be like Virtualbox, VMWare, Paralells, stuff like that

Type 2 are usually slower, but you can use the computer at the same time

where Type 1 doesn't have a GUI in the console, and are usually accessed from a web interface from another computer instead.

[woven anvil]

Then as long as you actually get some homelab practice on that, you should be on your way to be able to "Spin something up", then "Learn how to Protect/Attack it".

If your Hypervisor supports snapshots, then you can fix your mistakes faster, and imo you get to learn faster because of it.

That is also the skillset that Helpdesk usually looks for, so you can also most likely start looking for a job in that field while you continue studying for cybersec

[uneven wedge]

thank you, i really appreciate this, do you have any recommendations as to where i can learn how to protect & attack?

[torpid jungle]

Nice, nice, nice. Thanks a lot for explaining. What can type 1 hypervisors virtualize? Is it just for OS instances? Or is it a bit like unikernels, where you can basically run a program on "bare metal" with no userland, etc?

[woven anvil]

TryHackMe gives great introductions to a lot of the tools and concepts, so just going through the free rooms to find the things you want to focus on first (that look interesting from their summaries + questions), and then look up official documentation about that tool or written blogs about those concepts.

HackTheBox gives great practice rooms to be able go get started in a guided way using the tools.

Then, remember to practice whatever you learn about outside of wherever you learned it(This is where the VMs come into play), to make sure it actually makes sense.

If something doesn't make sense, you can ask about it, but there is also a chance that there is a more fundamental thing to focus on and understand.

For example, if you don't understand how packets flow on a network in many different situations, then you could be essentially barred from understanding why a server is giving a certain response rather than the one you expect. For this, instead of banging your head against the wall for 2 weeks, take a step back, and make sure you understand and can replicate the environment that you are working in. Maybe its a reverse proxy you are talking to, and not actually the web server, and so the packet flow is different than you expect.

In this case, what is a reverse proxy, how does it play into a network, can you make one to see how it works?

[woven anvil]

Type 1 usually just has direct hardware access, so less emulation is happening. They both virtualize the same things though.

The business use case for them is a server cluster running a company infrastructure may be on Type 1 hypervisors, like ESXi or Hyper-v, while the Developers have Virtualbox or VMWare Workstation Pro to be able to test their binaries on a non-company machine(so they don't accidentally blow up their machine, or they can do test installs for dependencies)

[torpid jungle]

Got it, makes sense. Thanks so much for all that detail. So basically, running hypervisors is a skill, because that's how we can setup test targets?

[woven anvil]

Its a skill the same way using discord is a skill.
And there is a lot to learn about them as well. You can be proficient at using them, but don't understand any of the "behind the scenes" stuff.
Or maybe you could be an expert at setting them up, and maintaining/fixing them, but you aren't good at making the VMs as fast, or setting up your snapshots or whatever.

And each hypervisor is different too. Some are amazing at getting Virtualbox to work great, while some can set up and manage 50 proxmox servers all running together so that if one dies, everything stays running.

Proxmox being an OS that runs KVM/Qemu(Type 1) on top of Debian, and is very popular for home labs because of its open license.

[torpid jungle]

Nice, virtualization is an entire rabbit hole. Gotta get into that. Thanks!!

Got some space in my closet where a rack fits exactly, and I've been eyeing it for a while, lol.

[woven anvil]

I have a 4 node supermicro 2u server sitting beside me with no rack for it

[torpid jungle]

Sheesh, lol. Hope the noise isn't unbearable.

[woven anvil]

It is. Thats why it isn't on.
4 servers in a 2u space is loud.

128GB RAM each >.>

DDR3, but still

[torpid jungle]

So you're currently rich, is what you're telling me.

[woven anvil]

nope, got it on kijiji

got lucky

[torpid jungle]

Haha nice. Can't beat luck.

[dawn geyser]

Guys help.me on networking

[torpid jungle]

Like with people? Or machines?

[dawn geyser]

Machines

[woven anvil]

Whats the question?

[dawn geyser]

Overall am pretty new in networking am just trying to learn it

I think it would be help full when I get job or something

Or like freelancing and stuff

[torpid jungle]

Well, I doubt you can get a freelance job as a network engineer. What aspect of networking are you most interested in?

[woven anvil]

It is super useful in any IT field, because it rarely changes, and everything uses it.

Even a programmer benefits from learning Networking

[dawn geyser]

I don't know where to start

[woven anvil]

What do you already know?

[dawn geyser]

I am full stack dev also getting into pentesting

Pentesting looks fun so am trying to learn it

[torpid jungle]

Are you interested in network programming? Or on running networks? Because those are related skills but different enough that they are separate learning paths.

[woven anvil]

Do you know any Devops?

[hidden warren]

Hi

[kind zealot]

Welcome

[dawn geyser]

No am just getting into pentest for about week or so

[woven anvil]

Devops is more like "coordinating AWS/GCP/Azure to automatically control infrastructure, like compute machines, networks and so on"

[dawn geyser]

Ohh

[woven anvil]

In networking, the biggest things are the OSI layers, and the common services on a network.

But applying it to something you already know about is easier than learning fresh

[hidden warren]

Guys I found a virus on my pc and microsoft defender found it out when I ran a full scan although I removed it is there a chance there are more of em?

[dawn geyser]

It could be

[hidden warren]

What should i do?

[dawn geyser]

Look any unknown apps in ur pc

Dig ur files and stuff

If u find any like unknown apps or files

[hidden warren]

That's literally impossible

[dawn geyser]

Try to delete them if they won't get deleted

[hidden warren]

Like there are tons of them

[dawn geyser]

Virus is still in ur pc

[hidden warren]

Oh yh my antivirus got corrupted and I can't delete it 💀

[dawn geyser]

Gg

U gotta force delete it

[hidden warren]

How to

[dawn geyser]

Just look it up on yt

[hidden warren]

I tried it

Alt

Alr

[dawn geyser]

Do know like online tutor or something

[woven anvil]

It is for sure not.

[dawn geyser]

I am learning pentest on hack the box and try hack me those are some quality

Should I do like ccna

[woven anvil]

Online tutor, i don't know about. I like Cisco's Packet Tracer for testing network setups, and the topics on networking in tryhackme is a pretty good introduction to start looking up more information from.
But eventually grew out of Packet Tracer, and started testing things with opnsense/pfsense in a VM.

[woven anvil]

In terms of using certs for learning, I personally think its better to learn the skill first, then go for the cert, but there are smarter people than me who disagree, so i can't argue with them.

[dawn geyser]

So I should like try learning it myself and when I get some sort of skill I should go for cert

[woven anvil]

In terms of a "end-goal", if you can go through an entire pfsense/opnsense router without any additional packages, and understand each thing and how to set it up, then you are good to start going for CCNA, and practice switching + cisco-specific commandline

[dawn geyser]

Seems simple enough

[torpid jungle]

My humble opinion is that it’s a little bit of both. I had the immense privilege of having CCNA as a subject in uni, but the concepts never really clicked until I started actually working on networks. But I wouldn’t have known where to start, if I hadn’t taken the CCNA.

[dawn geyser]

I just need one good friend who can guide me

[woven anvil]

Someone who hosts a lot of minecraft servers will have an ok understanding of networking after some time. There are many ways to learn the skills, and i don't like that certs kind of make it a financial thing.

[dawn geyser]

I mean spending money on thing u can try and learn on ur own is dumb

[torpid jungle]

That is a great point, actually. Computer nerdery should never be behind a paywall.

[woven anvil]

The money you pay is for the structure itself.

Which makes sense, someone had to put the work in, vs the internet where all the information is there, but learning how to parse through it is overwhelming.

but yeah

paywall for free info is dumb

[dawn geyser]

Jeevis can u be my mentor

U seem like really cool person

[woven anvil]

I do not have the time, but I can answer questions if I know the answer to them.

[woven anvil]

#🌐・iot-and-networking message
That might be a bunch of useful terms to look up.

[dawn geyser]

Got it

[thorny iron]

Any ideas?

[woven anvil]

I didn't like the direction Kasm was going with their containers.
Also, you could easily host it at home, and hide your IP with an exit node at a VPS provider.

I honestly couldn't think of anything i would do with a Zima product. I wanted one, but couldn't think of a project for it.
Maybe it can run graylog, and you can use it to learn about log collection and usage?

[fluid depot]

lmao

[silk oyster]

gimme know what method do u use

[neon timber]

Lol

[silk oyster]

what?

[neon timber]

Wtf is this?

[torn osprey]

have you checked if DHCP is actually failing

[brisk tree]

Hello

[woven anvil]

@silk oyster
Do not post links and ask people to attack them
Read our #👥・info and #📜・rules

[silk oyster]

oh sr

[whole patio]

Not really, no. It is tide to your rank on the server.
Level 10 - links to images
Level 25 - Post images

[sharp briar]

Hi

I have an issue

[whole patio]

Write whole sentences ^^

[sharp briar]

Even tho i have deactivate the account… hackers can still use it??

Please help urgently

Socmed account

[sly canopy]

I need help in Python

[hybrid cradle]

Go on

[sharp briar]

Its social media account

Does that answer ur question noww

Ok

So uhm… whos going to help me

[whole patio]

The support of whatever social media service provider offers

[sharp briar]

What ??

[whole patio]

Go ask the support of your social media platform..

not us

[sharp briar]

Ok thabj you

[kind zealot]

Eloborate

[shell moat]

Lmao............... Can we have a petition when anyone joins this group they have to agree to a message stating that any help/advice they require should not end with your question with i need help but explain as much as you can what is it you need help with @lost vapor

[lost vapor]

man i wish it was that simple sometimes honestly

but unfortunately patience is key with those people around

also link them one of these
https://dontasktoask.com/

[kind zealot]

There are people like me who don't know what they need
I am always confused

[lost vapor]

@sly canopy

[shell moat]

i feel bad for the people who are genuinely helping out here having to deal with BS 🙁

[lost vapor]

ngl i'd start linking them to one of these and unless they're reading them i ain't helping😂

[sly canopy]

I'm really interested in programming using Python but I haven't had the opportunity to meet people who would help build me up

[lost vapor]

people don't build you up to it, that's the thing you do on your own

you elevate off of people's directions

[sly canopy]

I need these directions

[lost vapor]

https://www.learnpython.org/

[sly canopy]

Thank you for helping

[lost vapor]

yw, next time do ask question that point towards your destination and make them more understandable

if you get into a situation where you have to ask and then ask again following the same topic then there's probably something you could have shortened out

and got your answer quicker

[shell moat]

can i ask you what type of cybersec field are you in? just curious

[lost vapor]

i'm in the unemployed field currently doing 10 sets of fafo's a day

but i am pursuing purple teaming

[sly canopy]

Okay

[shell moat]

Ohh well tbh im in the same position but im trying to get into DFIR

but im lowkey bad at coding

is python a major part of the field or can you get by just know a few things here and there?

aka do you need to be an expert in python

[lost vapor]

python takes a good chunk of it, i'd say knowing the overall language is helpful for small managable tasks
such as reorganizing sets of data, etc

you don't need to be an expert though

i've heard of a red teamer for a cloud organization that doesn't even know how to program in python

it's all about connections with this field istg

[shell moat]

omg thats a relief bruh python is a nightmare

[shell moat]

whaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa?

[lost vapor]

yeah they exist somehow

meanwhile i'm over here knowing half the sh they don't know

getting helpdesk job offers only

☠️

[shell moat]

I hope to get into SOC junior role to help me grow there but my experience lies mainly within Level 2 support roles

im not even getting helpdesk roles

i got declined for like 25 of the m

🙁 UK scenes is sooo mad rn

im was hoping getting a cert that would help secure a job but looks like i just need experience then instead of a cert

[idle sequoia]

guys CF made an update recently ? got some issues to intercept traffic via Charles proxy, im getting 100% 403 challenge

[whole patio]

people dont read stuff when they join, at all. They look for the "banner go away" button and thats it

On another server we thought about collection everyone in a newbie ball-pit until they did something that was hidden in the onboarding guidelines, which had them actually read it

Another server has roles to click, and hidden in the onboarding text it tells you not to select a particular role.. otherwise a bot assigns them a decay pool role (essentially muting them) they cannot deselect.
You can do that, if you are not committed to growing a server by all means

[nova oracle]

Guys i need something that's like chat gpt but without restrictions I can't deal with these restrictions at all. Can someone help

[fluid depot]

what restrictions

[nova oracle]

For pictures and then questions and similar stuff

[fluid depot]

huh?

[nova oracle]

I'm a student and sometimes i also experiment with it but these stupid restrictions it becomes impossible to do anything and if you're wondering nothing illegal going on lol

[fluid depot]

uh-huh

[zenith otter]

Freedomgpt

[whole patio]

they are asking whether you want to circumvent restrictions on topics. Or on monthley requests, I guess

[zenith otter]

Idk how good it is nowadays

Oh

Like amount of message restrictions?

[whole patio]

We dont know what their problem is

[nova oracle]

Like no restrictions at all so that it listens to me and gets straight to point

[zenith otter]

Urr

Smth like host ur own AI model or smth

Idk

[fluid depot]

i can only think of like... one or two reasons restrictions are gonna kick in with images

[nova oracle]

If that's possible then that will be better but chat gpts version

[nova oracle]

What? at first i thought i can bypass some restrictions by having multiple accounts but now i think even that's impossible

[whole patio]

Maybe go to #🤖・ai-automation and scroll to your hearts content what other people wrote

[nova oracle]

Oh okay thanks didn't see the option

[hidden warren]

It seems the files got partially deleted

[brisk tree]

[prime ravine]

Hi I'm new here
Can i ask abt job in this chat or is there separate chat for that

[clever gale]

Go ahead

[sly shadow]

Grok

[whole patio]

Feel free to ask, if this is you looking for a job though, the answer is going to be that this is the wrong server

[sly shadow]

Then you are

Not doing basic stuff

If something is not illegal

Then grok will do that

Nsfw is not basic

But she isn't

[sly shadow]

.

Yup

I don't but

If they asked for legal, we advise them legal

#💕・free-resources

[clever gale]

Get started with some basic courses on YouTube

[lusty hearth]

i wanted to use it to learn to make a basic python cracker but sh wasnt allowed

[sly shadow]

Nice name

[clever gale]

Python cracker ??

[lusty hearth]

ty

[lusty hearth]

i just want to learn bro

[sly shadow]

✌🏻🥀

[clever gale]

Haha

[sly shadow]

There are two meanings

[lusty hearth]

what is wrong

[clever gale]

@lusty hearth @frosty gyro this ain't a place to chat , go here and chat #💬・old-gen-chat

[lusty hearth]

i wasnt chatting these guys started talking to me

[clever gale]

You better stay on topic

[lusty hearth]

so venice is like the go to ai?

[lusty hearth]

goofy ahh 😭

thank you for telling me to stay on topic mr grave I will never make this mistake again

[chilly merlin]

Gimme COFFEE

[clever gale]

You better not

[lusty hearth]

an apology without change is just a manipulation

[clever gale]

I think I need to get someone in here

[fervent crystal]

Hey how I can learn cyber security

For a very beginning

Thanks bro 👍😊

Hmm bro

Yaa bro

I tried it 😭😭

But I got bored

Haha 😅😅😅

I just copy repo and just use it as a nerd 🤓🤓

Haha 😅😅

[prime ravine]

Thanks and I'm not here to ask for job

I want to know abt the IAM role in cybersecurity
Like whats the future and all

[clever gale]

Get the fundamentals done

Like learn linux , basic networking etc

[whole patio]

Grok still has a weirdly biased initialization prompt though.. might as well ask deepseek about taiwan

[sly shadow]

Like? If something is legal grok will do it

Tell me something it won't and that is legal

Oh no, why grok (an ai who can only talk) make a physical thing without having limbs and a physical body

[whole patio]

I'm not talking about "won't", I am talking about "biased answers"

[sly shadow]

Every ai is biased

I mean the official models like gemini, grok, deepseek etc

😟

[whole patio]

Not everyone is as weirdly biased.. so that the guy behind it had to make his own wikipedia-variant to have "something" as source

[sly shadow]

Why are we even debating XD, the of questioner disappeared

[whole patio]

I am not debating, I am giving context to an answer

[torpid jungle]

Yeah, I’ve received a few emails like this.

[versed sail]

check out:
#👥・new-member-guide
#👥・help-me
#💕・free-resources
#📜・certs-and-career

Programming:
Python, Ruby, Go (sololearn, codedex, freecodecamp)
JS, PHP, ASPX, SQL (portswigger)
C, C++, Assembly, Rust (pwn college)
Learn what you need, when you need it.

Networking: Try NetAcad (THM + HTB Academy also help)
OS: Windows (PowerShell) & Linux (Bash)
After basics: TryHackMe, HackTheBox, and similar platforms
Most important: Build the right mindset 🙂

E-Books to start with:
Cybersecurity-focused books:
https://security-books.notion.site/

🚫 Please remember: We strictly prohibit any unethical or harmful activities. Let’s maintain a safe, respectful, and responsible learning environment. 💛 #📜・rules

[soft cairn]

@torpid jungle can u please check the dm first, so i dont bug people here

[fresh pier]

Hello guys 👋

[cedar vessel]

I reverse engineered a python exe, and got to the point where I got the marshalled bytecode. Is there a way to rebuild the exe off that bytecode?

[fresh pier]

Can someone explain to me SSL/TLS?

And it's importance

[simple vine]

have you read the wikipedia page on the topic yet? start there and ask more specifically about the parts you're still confused on if you want good answers

[torpid jungle]

Your deployment strategy really depends a lot on your needs. I’m not sure which database you’re using, because you didn’t mention that, but you did say that you’re using NestJS, and this is what their docs say about deployment: https://docs.nestjs.com/deployment

You have a lot of options, from doing it bare metal and setting up systemd services for each component on a single machine, doing it on multiple machines, doing it on a cloud service, doing it with Docker, or even using fancy orchestration tools like Kubernetes.

So first you’ve gotta assess your costs, how much you think you will need to scale, etc.

[simple vine]

this sounds like you wonder about the importance of ssl/tls to something specific. for as vaguely as you're asking, the answer is something like "web security good, bad people changing web traffic between source and destination bad", which doesn't seem all that useful to hear?

[soft cairn]

PostgreSQL

but i can go to something else, im flexible here
since im still in testing and the refactor wouldnt be as big

i mostly want to know what db is best for what im asking for
and do i do a single DB with data and images, or do i use a DB with data and image metadata and a different one for actual images and the have a service call it based on metadata

[torpid jungle]

Usually what you do is you do is you don’t store binary blobs that big in the DB, but Postgres can do some really crazy shit, lol.

Normally, you save the metadata in the DB, you store the files elsewhere and record the path along with the metadata. But you’ve gotta be reeeally careful with how you secure that. Or, if you’re in the cloud, you could just use a storage product like AWS S3 or Cloudflare R2, etc.

[fresh pier]

Mb for asking vaguely, the thing is some friends were talking about the league outage, and I tried to see what could be the problem that led to it, so I found out that it was an expired SSL certificate. I found it funny at first but couldn't get why they haven't update it since I only have few info about SSL/TLS.

[simple vine]

ooh, "why does an expired ssl cert cause a video game outage" is an EXTREMELY good question!

well good as in it has an interesting answer at least -- are you familiar with the basic concept of chain of trust? or certificate authorities? (it's fine if not, just figuring out where to start)

[fresh pier]

Beside the outage, the main role of TLS is encrypting the data between the client side and server side am I right?

Correct me if I'm wrong

[soft cairn]

@torpid jungle
well about that, the data really doesnt have to be that "secure" as in, its literally all public images that are exposed to the site anyway (you dont need to be logged in to use the site)so its for anyone to access, so its not really that much of a privacy concern if thats what you were aiming at, imagine you are a vendor offering coffee and your 15 images are of coffee XD
i talked with GPT a bit and both AWS S3 and Cloudflare R2 were mentioned
im down for something like that but im afraid of the monthly costs being too high, idk

Thats why im kinda fine with the DB holding a path and metadata, and the images being stored somewhere else

What if we dont really focus on that specific thing that much, because thats literally the last thing im gonna implement after doing a few more things in the app

What would be nice and price friendly when it comes to serving the FE and BE, and the DB (whatever format, currently postgresql) so i can have a preproduction version live, so i can test stuff there

and then later we link up and sync up the whole IMAGES thing

[simple vine]

you're right that encryption matters, but for "why does certificate expiry break stuff", we're thinking specifically about what changes when a cert goes from in-date to out-of-date

[fresh pier]

I'm not familiar with it, I might but idk 😶

[fresh pier]

Yeah you're right

[humble pine]

Guys Where can i start learning cyber

[torpid jungle]

Cheapest in platform cost: a VPS. But it’s very maintenance intensive and it requires a lot of sysadmin knowledge to keep it stable, secure, etc. And all of that adds to indirect costs.

Other than that, probably a cloud provider like AWS, Azure, etc.

The most expensive are probably cloud resellers like Vercel, etc.

[simple vine]

funny story i actually came across a broken SSL cert earlier this morning -- ESR's web hosting is set up wrong and he can't fix it, so the https version of https://www.catb.org/esr/faqs/smart-questions.html hits a certificate error. in most browsers the error page will let you examin the cert, see who it was signed by and what domains it's good for, see what the error is (in this case someone forgot to put catb.org on the list of domains), etc. "what's wrong with this cert" is easy enough to diagnose in the browser, and easy enough to work around by removing the s from the https in the url if you want to. but if the url is hardcoded in a game, you won't be able to easily change to non-https. and that's good; the game authors don't want you trusting random websites that claim to be the game servers!

if you click the little padlock in the url bar in your browser, follow the padlock icons or words about "secure" through the menu, follow that to something like "certificate is valid", your browser will probably show you the cert for any site you're on.

[soft cairn]

ok so i dont want to annoy you with the same question over and over again
lets make it "final" and imma go yolo for now
What is best for FE what for BE and what for DB, then imma roll with it

and to be honest im not that concerned with the cost, im not looking at a sum of all hosting to be like 10€ a month
im fine even if it goes up to 100€ a month, because the goal is for the app to be free for about a year or two, with a notice in advance that after that vendors will pay a yearly fee (20 30€) to have access, and then that will cover up the hosting costs (even if they go up later)

im just optimistic about success with it, and if not, hey i dump the app, take the loss and move on

not that im rolling in money or something but its a project im doing and i can afford to pay 100€ a month by skipping a few coffees a week and not going out enjoying life as much XD

[fresh pier]

I tried using the link without s and it worked

[simple vine]

um you might wanna check your browser settings and make sure you're strict on ssl errors then, silently accepting a cert for a domain it's not signed for is concerning i literally can't read, the link WITHOUT the s should work because it's not even checking for valid certs

link with the s = "please check whether this site is real". link without the s: "i don't care who published it, let's just see what's there". to vastly oversimplify, it's a hard problem for your pc or game console to know whether the site that claims it's a certain thing "really is" or not. we get around this by trusting a handful of certificate authorities (root CAs) and then having those CAs sign intermediate certs, which in turn sign individual certs, etc.

[fresh pier]

At first it said it was insecure and just proceeded

[torpid jungle]

There really is no best here. I’d encourage you to look at what your skills are currently, how much time and effort you’re willing to invest in learning to admin your deployment, simulate what would happen if you ever had to migrate off your deployment strategy, and decide based on that.

Managing deployments is a whole job position called Platform Engineering, so if you REALLY want to outsource the entirety of it and don’t mind paying really high costs, then your best bet is a cloud reseller. Otherwise, you’re going to have to learn to different degrees.

[simple vine]

so if we accept that we're using certs to verify that someone trustworthy trusts someone else who trusts someone else who did their due diligence to make sure it's the real domain -- you can probably think of some bad things that'd happen if League just casually trusted any old host claiming to be the League servers. so it's only gonna connect if it can use the existing infrastructure to make sure the site has a valid certificate. and part of certificate validity is that you don't want the certs to last forever, because if a cert lasted forever, a threat actor could get ahold of a copy and then pretend to be the legit site forever, and that's bad. Therefore they expire sometimes, to limit possible damage that could be done with them. usually we set up automation to replace certs before they expire, but if someone messes up on the backend, you can fail to get a new cert in place before the timer runs out on the old one and the world reaches a date on which everybody has pinky promised not to respect the old cert any more.

[soft cairn]

i know, but would you be kind giving me a recommendation of your own, just for me to know in what direction im heading
based on your personal experience

thats my final now
and im done bugging you ❤️

[kind zealot]

Chat i accidently left my laptop at friend's house
I can't tell my friend the password of my laptop

Is there any i can get the remote access
If he Just turns it on

I need to get some work done

[simple vine]

you should just go get the laptop; you can set up remote access easily while you have physical access in case this happens again.

also if your disk is unencrypted, your friend can read your entire filesystem just by having physical access, fwiw

[kind zealot]

That's cheating

[fresh pier]

Oh I can see clearly now the problem riot had

[kind zealot]

Isn't there any way to get it now 👉🏼👈🏼

[simple vine]

yep, if you're running league on a pc and also run wireshark during the outage, you could almost certainly look at the exact broken cert and answer questions like "at what minute of what day did it expire"

[torpid jungle]

All I can share is my personal experience: I went from managing a VPS myself (pain in the ass), to managing AWS deployments, to working in places where deployments are taken care of for me. Current place I work at we have an entire team dedicated to making our life simple, and I can create new services with a single click, deploy from GitHub PRs, etc.

I really can’t recommend a specific path because I don’t know what the situation looks like at your company, what your skill set is, if you have a team of people who can help you, etc.

The final recommendation I can make is that you read the DevOps Handbook. Any more than that and I’d have to charge you 😝

[simple vine]

idk, you're the one leaving your laptop lying around -- can you go get it?

[kind zealot]

Mid night 🥺

[fresh pier]

I don't play league hahaha, but my friends were all talking about the outage they've had

[simple vine]

then probably best to get it in the morning, though if your friend is awake to turn it on for you, they might not mind you dropping by.

[kind zealot]

Can you help me hack it 👉🏼👈🏼 that would be helpful

[simple vine]

breaking into the system is not the best solution for the scenario you've described, and your reluctance to solve the alleged problem the easy way suggests you're trying to circumvent server rules.

[soft cairn]

well i would pay for a more precise answer 😛

imma look into it, your info was quite helpful tho
tysm ❤️

[kind zealot]

That's not true 😭

[simple vine]

if it's genuinely your own device and you plan to make a habit of leaving it at other peoples' houses when you want access, your best bet is to install some form of remote desktop or vpn while you have physical access, then connect to it using the credentials that you configured when setting it up.

however, the tradeoff to doing that is that it allows you and anyone who gets ahold of your credentials to remotely access the system. It's usually best to just be responsible for the physical security of your devices and not leave them lying around.

[kind zealot]

Isn't there any bug or something for windows 10 or anything else
For educational purposes 😁

[hard steeple]

vercel is not just a cloud reseller

and is the best in the market

for serverless architected servers

oops

nodes i mean

[hard steeple]

madly wrong, costs differ, a lot and easy of seup

he said he doesnt care about cost that much, so just rredirect to something easy to set up

@soft cairn

whats the project more specifically

[soft cairn]

can i DM you
so i dont paste the whole thing here to clog up the chat, and then we can continue the convo here or in private, i dont care where

[hard steeple]

sure

[torpid jungle]

Serverless can go kick rocks

[hard steeple]

??

serverless good as shit

what u on

a bit more expensive but really easy scaling

literally automatic

uptime good asf

amazing advantage f free plans

and really difficult to pwn

[kind zealot]

Guy's like i have an old account i forgot my password i lost contact info to which it was connected
Is there anyone who can get it back???

[hard steeple]

if im hosting something ill be using serverless most of the time so others dont hacvk it

[simple vine]

what additional information do you think someone would need to know in order to answer this? do you think you can get a good answer without indicating what kind of account it is? (genuinely curious about what you're imagining that the rest of us know)

in general, the password reset flow is usually your best bet; there'll be enough info about where the reset was sent to jog your memory about which email went with the account, and then you attempt password reset on your own old email to retrieve the reset for whatever account it was.

[sly shadow]

What happened to the general chat?

[simple vine]

it's locked temporarily

[void isle]

Guys how does one download files sent by someone on google drive but the owner has barred access to dowloading printing editing basically how does one bypass this security limitations

[kind zealot]

It's a email and i don't have.
Number i lost the sim on which i could receive otp to do forget password

[kind zealot]

It couldn't handle the cringe

[sly shadow]

😂

[kind zealot]

Like to access the email without password 😔

[kind zealot]

#📜・rules not allowed though

But screen shot
Screen record
If blocked use another phone simple

[simple vine]

i think someone could give you better answers if they knew what kind of account you were trying to recover, because then they might know details about how a particular vendor handles lost account verification, but that's just me.

[warped crescent]

https://media.discordapp.net/attachments/1003738740616872088/1025554918276341840/caption-4.gif

[dense pelican]

Hey so I'm trying to learn Linux and it's commands any tips?

[twilit pine]

Hello everyone that’s right now is a really help me.

If got a friend that’s into Crypto‘s he has a wallet that got hacked he recived a message where I must pay 5k to a wallet address so he got access to his wallet from the hacker. The wallet provider freezed his account and heals lost 4k atm

Then he got a email from the hacker with threadings etc.

Is there a way to find out where the person lives or can track back where the attack came from?

Sorry for my English btw

Also he contacted local police

[simple vine]

anything you do by clicking with a mouse, look for a command line way to do it instead.

[simple vine]

what does rule 3 say about vigilantism?

[twilit pine]

That’s a no? The only thing I want is to help him

[dense pelican]

That sounds really simple

Thank you

[simple vine]

yep it sounds simple at first but you will learn about a lot of new utilities for it. having LLMs read man pages on your behalf can be surprisingly effective as a starting point if you're overwhelmed by the quantity of information

also get comfortable with vi and/or nano, one or the other will be the default text editor for most times a command opens a file for you

you'll meet a lot of opportunities to customize your system, but if you're trying to build generic linux skills, hold off on doing really elaborate personal configs for awhile.

[twilit pine]

Yeha I understand that

[dense pelican]

Does it work any different from Command line on windows and such? (I'm familiar with some of it's commands)

[twilit pine]

Yeha I hope that too

[simple vine]

the slashes go the objectively/correct/direction, and everything is case sensitive (iirc windows is weird about sometimes ignoring case)

but if you're familiar with the basic pattern of command -flags --flags arguments arguments kind of thing, same concept

[dense pelican]

Okay that's cool

[simple vine]

also man man will tell you how to use the built-in manual pages =)

[dense pelican]

Gotcha

[cedar vessel]

I reverse engineered a python exe, and got to the point where I got the marshalled bytecode. Is there a way to rebuild the exe off that bytecode?

[simple vine]

i haven't done it myself, but from skimming some guides, it looks like you decompile to python source then rebuild the executable from there

[dense pelican]

I will definitely have to work on basics but all this is 100% helpful

[simple vine]

there's an old talk you might like -- Discovering Python by David Beazley (it's on youtube). first half is explaining why the heck anyone would ever do what he did, but second half includes reimplementing unix utilities to get a working system. watch where he's appalled vs impressed, and what he builds to solve various problems, to calibrate expectations around what software utilities are essential for getting anything done and what tasks it's most important to do with them =)

[cedar vessel]

Ok I’ll try that

[simple vine]

i'm seeing pydc and pyinstaller recommended but ymmv; definitely search it up yourself though

[fluid ferry]

hi guys, i got few questions
i just finished learning python and want to move to django next
any idea where i should start from
oh and what should i do to get permission to chat in computer science section?

[simple vine]

decide what you want to build and then just start building it, with django -- the more like a newspaper your project is, the better django will suit it.

[unreal zealot]

Sup

[fluid ferry]

do i directly jump into making project without knowing any fundamentals of backends and django? and newspaper like project as in?

[clever gale]

fundamentals are imp

[fluid ferry]

are there any youtube vids, books or pdfs and such you would suggest?

[clever gale]

bro code

[wary ginkgo]

Hello elone

I'm new here actually need someone put me through

@simple vine hello are u a girl

[simple vine]

well step through django's tutorial first, but i assume you know more than nothing about it because you've determined it's the framework you want to learn

[clever gale]

hi , checkout #👥・new-member-guide

hope it helps

[simple vine]

is that.... relevant to anything we're doing here?

[torpid jungle]

Maybe she feels safer talking to other women?

Just venturing a guess, but I don't know, so I'll shut up, lol.

[clever gale]

hmm might be

[simple vine]

yeah, and it's a question i couldn't answer in good faith even if i wanted to without further context, as "girl" could mean "female human" or "female child" and i am not a child 🤣

[halcyon tiger]

Hey 👋 Guys, I'm new here

[clever gale]

helloo , checkout #👥・new-member-guide will help you

[clever gale]

maybe just try replying her politely

[twin cove]

Hey yall. I want to start programming. I have zero knowledge. what would u recommend me to start studying?

i know i should start from the basics but what would the basics be?

[clever gale]

if you want to learn programming specifically for cybersec start with python or C

[twin cove]

yeah, cybersec

[clever gale]

python is easy to understand for beginners but i recommend C as it help you learn other languages better

like the syntax of many languages , you wont find difficult if you start with C

[twin cove]

Alright

I'll start with C then

[clever gale]

on you

all the best

[twin cove]

Cheers bro

[lofty canopy]

how can i run nmap on networks like i wanna practice it but i dont wanna harm anyone or like be in trouble

[simple vine]

so when you look through an nmap tutorial you'll see a host specified, by domain or ip -- make sure you only put the domain or ip of hosts you're allowed to scan in that argument

[lofty canopy]

are you talking bout ports?

[simple vine]

https://nmap.org/book/man-target-specification.html i'm talking about targets

[lofty canopy]

ohh

[naive bone]

Hello

[winged pike]

With courses less people can continue

Just DO something, really

[simple vine]

this. if you identify a small task, attempt to complete the small task, get stuck, and ask for help well, folks are around to help get you un-stuck. the best way to ask for help and get good answers is shaped like "here's what i'm trying to accomplish, here's what i did, here's why i thought the thing i tried would work, here's what happened instead when i tried it"

note that there's a "here's how i tried to fix it myself" element to a really good question -- if you've already searched the error, or already read the wiki page on a topic, or whatever, then a) saying so shows that you're someone willing to put some effort in and b) you will probably ask your question more clearly

[winged pike]

most appreciates mate)

just by nowhere, suppose there is a problem( maybe a lab i struggle) and a exact solution for this, is it better to spend hours or follow the given path?

Very well

[simple vine]

depends on what your goal is. if you want to complete the lab in a timely manner, follow the given path. if you want to use the lab as a jumping off point to explore the concepts it discusses, wandering around learning other stuff in a search for the answer will give you more benefit.

[winged pike]

wanna learn building, build something smaller, dont just watch construction workers to explain its logic etc.

[hard steeple]

without construction workers explaining the logic and you understanding

the physics

you will not be able to build anything "small".

[winged pike]

It was just an out topic example

[hard steeple]

then be giving relevant ones if you stand by your point.

[simple vine]

so if i want to write a sentence in chinese, i can google "how to write a sentence in chinese" and then find an example that has a sentence and copy it down, and then technically i will have ticked the "write a sentence in chinese" box. if i want to understand the general skill of writing sentences in Chinese, I would need to look up what rules govern correct sentence construction, and then notice places where the rules don't seem to apply cleanly, and then ask an expert why about the specific things I don't understand.

[winged pike]

experiencing yourself is best, at least in coding

[simple vine]

writing in a language you don't know yet is the example you chose for us to discuss problem solving, and it's a good example, because it highlights some of the tradeoffs that @winged pike is contemplating as well.

[hard steeple]

this is pointless

yall are wasting your time

[simple vine]

do you know which particular video would be best for a specific individual to start with? or are there other questions they'll need to consider to choose the right video to benefit them?

[simple vine]

sounds like we're all wasting our time together =)

[hard steeple]

bahahhaa

[hard steeple]

cs50 for python

approved by harvard

theres no best though

theres never any overly best material or whatever

[winged pike]

If you dont know go learn, i am sayin if you want to deep down

[hard steeple]

everyone requires something different.

[winged pike]

Sorry im multitasking

Yes

[hard steeple]

aits pointless either way.

[winged pike]

Ues

Y

I admit that it was my un fulfilled statement that i said you have to build, i had to include if you have some start

Yes ur comp right

Yes

Also i am starting to develop the given fundamental scripts in Black Hat Python book, if someone is into that hmu!)

Wanna check your work out

General

Good start

I started with C, was a bad idea

[simple vine]

the metaphor of learning a language is actually useful here as well, because it's a reminder to try reading other peoples' code as well as writing your own

[winged pike]

this the hard part

this and the code i wrote yesterday

[willow grove]

Hey guys!!(:

[sullen meteor]

Hey

[azure finch]

heyo

[cunning ibex]

what do yall think about keeping memory integrity off in windows 11?

[azure finch]

prob smth to ask in #💬・old-gen-chat

[cunning ibex]

okay bet

[zealous juniper]

Guys how I can send or receive messages in I2p (what is the website where I can message)

[whole patio]

I2p is still a thing? TIL

[zealous juniper]

Is it too old

@everyone

How I can be secure in I2p

[hard steeple]

build your own website

theres no specific website for i2p messaging.

[hard steeple]

less security.. i mean, you do you

[neon mural]

Does anyone know how to get rid of a Bitcoin miner that some European bots placed into my cloud server without nuking my server

[simple vine]

best bet will be setting up a clean install and migrating only the stuff you want to keep

[neon mural]

God .. not another database rollback 😭

[neon mural]

😞 if that's what it takes, then okay.. I'll take your advice.

Thank you!

[twin cove]

Maybe I do but i don't want to lol I want to start with C although it seems to be harder. I've read about harvard's cs50 it seems good

[deep topaz]

It's great.

The CS50 I mean

[twin cove]

why?

[lunar marten]

help me

[simple vine]

with what?

[woven anvil]

I started with Visual Basic 6.0
C was a breath of fresh air

[lunar marten]

i want to star learning

[torpid jungle]

Same!!

[simple vine]

the first thing to learn is how to ask questions that get you useful answers. a good question will include information about what problem you're trying to solve, what you've tried so far in solving it, and what went wrong.

[lunar marten]

can we chat privately

[haughty barn]

started with c++ written by hand on paper (balkan highschool )

[simple vine]

we're chatting right here, and onlookers might also be able to learn from the conversation. what benefit are you expecting you'd get from privacy?

[lunar marten]

okay how can i ask questions

[simple vine]

that's the 3rd question you've asked in here in the past few minutes, so i think you already know?

you can say what problem you're trying to solve and what you've tried so far, that'd be a good start

[lunar marten]

i am trying to get to know more about Cybersec

[simple vine]

ok, and what have you tried so far? have you tried reading the resources in #👥・new-member-guide yet ?

[plucky crystal]

I got a question about a cord

[lunar marten]

yh i have

[simple vine]

excellent! have you tried to apply what you learned to tasks relevant to your goals?

[simple vine]

this would be the right place if you wanted to ask it

[solemn apex]

RIP. 😭

[lime cloud]

Kefas I hyt5

[lime cairn]

Any1 that can help with a "not working mic" after a bios update?

[wheat ginkgo]

Yeah

I fixed it btw so no worries haha

[neon mural]

lmao I love this server

[celest wedge]

What is the best out of box security and antivirus recommended these days?

[simple vine]

try reinstalling its drivers

[solemn apex]

Why?

[winged pike]

How comes

[winged pike]

Was hard for me

Or i was noob

[regal lichen]

One message removed from a suspended account.

[unborn ibex]

It was probably just booting straight from the USB but when you remove it, it can no longer find the boot source (because it’s on the USB that’s not inserted)

Have you tried re-inserting the USB to see if it’ll boot?

[regal lichen]

One message removed from a suspended account.

One message removed from a suspended account.

[unborn ibex]

So you are able to see that the contents of that USB are gone?

[regal lichen]

One message removed from a suspended account.

One message removed from a suspended account.

[unborn ibex]

Hmmm it’s possible the file was corrupted somehow when you removed the USB or for some reason you’re BIOS is just not actually reading the USB

Do you have a separate system that you can use to see the contents of the USB

[simple vine]

on whatever computer you burned the usb, check the usb to see if the files on it have changed from what you put onto it before

[regal lichen]

One message removed from a suspended account.

[simple vine]

what tool did you use to format the usb? i'm wondering if someone thought it'd be clever to add a setting with the side effect of breaking it after a single boot (oh, and did you try to set up a persistent partition on your parrot usb stick? if something went wrong there, it could have tried to write to the persistent space and accidentally overwritten something important for booting)

[regal lichen]

One message removed from a suspended account.

[simple vine]

that's a profoundly weird way to go about making a bootable usb stick? i wouldn't be too shocked if someone told me you're the first person to ever try doing it in exactly this way. the normal way to solve "i wanna run parrot from this 128GB usb stick" would be pointing rufus or w/e at the 128GB stick and setting up a persistent partition on it.

would you be able to try that, or are there other factors forcing you to do the 2-disk version?

[pseudo bane]

@simple vine Hello 👋
Hello gang hop every body have a great night or day or what ever 🥳

[simple vine]

(-> #💬・old-gen-chat )

[past dagger]

Hey, I’m brand new to coding and all that. I’ve got an iPhone but I’m trying to really learn this stuff — coding, hacking (ethical), just understanding how things work so I can protect myself. What kind of computer should I get, and where would you recommend starting? Appreciate any help.

I used ChatGPT to make it sound better im ngl

[woven anvil]

The consensus is to get any cheap computer that you can learn on, and once you understand what subjects you actually want to focus on, then you can look for more dedicated hardware for that thing.

[simple vine]

if budget is a constraint, i'd recommend picking up a cheap secondhand laptop (thinkpads in particular tend to be surplussed with a lot of life left in them) and figuring out how to run linux on it

the experience of figuring out how to get an OS running on your own hardware will expose you to a lot of concepts that are relevant to security later in your education as well

[fallen summit]

this might be a silly question but what level of certification should i be at before looking for jobs. thx

im doing the google cybersecurity certificate cause i was told thats a good one to start with and my goal is the security plus cert

[whole patio]

The parrotOS discord has a daily reminder "not" to use rufus, cause it breaks the usb medium again and again. BalenaEtcher is the way to go

[whole patio]

whatever certification organisations in your region are looking for

[willow grove]

Hey!

[vagrant berry]

Hey im about to graduate with a bachelors in cs & math and I want a career in security, not too picky about the role (soc analysis, qa testing, research, etc). Does anyone have any advice for a specific role and/or certifications I should pursue? Preferably a job that is still hiring

[mighty axle]

I know there are courses online for cybersecurity like tryhackme or shit like that, but is there anywhere I can learn hands on with other people? Learning by myself is kinda boring

[sand tundra]

team CTFs, but it's good to have studied a bit beforehand. TryHackMe and HTB are really really good resources. PicoCTF as well.

[kind zealot]

You already have a tech background that's great

My advice would be
To do Google cybersecurity course its free
To see how things work in cybersecurity
After that choose a path and master it

[fluid wind]

I'm literally in the same boat. After you do what @kind zealot said:

Look into getting your SEC+ and NET+ if you truly want good work.

It increases your chances for jobs that can give you security clearance as well. Also look into small companies. I've gotten a lot more replies from smaller companies. They are more likely to hire. If you want help or more tips, dm me.

Again, I just graduated too so I totally get the feeling. This market is tough, but it is truly a numbers and networking game!

[fluid wind]

Also, the main one cert that would help you overall get any sec job is that security+ cert. I would purchase it while you still get your student discount with your email.

I got 40% off with my email!

[whole patio]

Even when people plan to do it cooperative, they end up doing their own stuff in their own speed anyway

[mighty axle]

True

[fluid wind]

tryhackme with music is fun

[signal nacelle]

I am new here

Need guidelines

[elfin dirge]

#👥・help-me Hi, I’m new here.

I’ve been self studying for the sec + for a year or so but I keep losing motivation along the way. Then I have to restart the process everytime to refresh my mind.

Has anyone ever been in the same boat? How did you overcome that decline in motivation?

[whole patio]

that would be either #👥・new-member-guide or #📜・rules

[brisk tree]

Hey, I'm planning to start my career in cybersecurity and am looking to buy a laptop. Should I go with an Asus or a Framework?

[whole patio]

some ASUS models are known for horrible linux support, thinkpads are the safe and sound choice usually, but if you research whether the model you want to choose has known issue, you'll be fine

[brisk tree]

I was planning flow z13

[uncut scarab]

I thought MacBook Air m4 or MacBook Pro m5 was good

[sand tundra]

I have several really nice computers, but I use my shitty $300 HP laptop from best buy running fedora more than anything else. You don't need anything crazy.

[uncut scarab]

I think z13 flow is not compatible with XG mobile

[brisk tree]

Like currently I have asus zenbook
But i prefer to keep it for my university only and files

So im planning to buy another laptop

[uncut scarab]

Am also planning to buy a laptop for cybersecurity but confused which one to buy, I have thinkpad old model. I use it for basic storage and browsing.

I need a laptop for university masters

[edgy marten]

Thinkpads are great, you could just upgrade to an X carbon or upgrade to a Lenovo with GPU NVIDIA GeForce RTX

[kind zealot]

What have you been doing for a year

[full delta]

How difficult is it for someone who has only used Splunk to get started on a homelab for Wazuh, ELK Stack and Microsoft Sentinel

[low lava]

Hey everyone, I was dual booting kali linux in my laptop and i can't find myself to fix this issue
Unable to install GRUB in dummy Executing grub-install-dummy failed
This is a fatal error
I am using Rufus btw

[whole patio]

Redo from start, don't use rufus to flash the install medium - use balenaetcher (if you really want to dual boot, many people regret it)

[kind zealot]

Did once easy

[low lava]

Then what do you suggest? I kinda have limited access to internet so was thinking dual boot

[kind zealot]

Virtual box

Run another os in a virtual box
Try oracle virtual box

[low lava]

I am kinda new to this , will i be able to use the vm without internet connection?

[fluid depot]

its a computer running on your computer

yes

[low lava]

Ok will try now

[kind zealot]

Yes

[low lava]

Any resource which would guide me through the installation?? Vm

[kind zealot]

YouTube how to install
(OS NAME) , on Oracle virtual box

[low lava]

Ah okay

[fringe yew]

Anybody that needs paid capcut oleas I got debited , all my money is in capcut for subscription now for one month

Anybody that wants to buy please

[sand nexus]

Hello everyone 🤠!
I am new to cyber security just got to know about this server can someone guide me with some good free resources like I went through the ...for beginner section in the server but I was not able to understand the HTB and things.pls help and guide me.

[brisk tree]

#📜・certs-and-career
#👥・new-member-guide

[buoyant kite]

Framework laptop that's the stuff for cybersecurity PC, but the price.....

[buoyant kite]

Rufus is not the problem because i use it for do the same things and i have no problem with my dual boot win and kali linux

[simple wyvern]

Do you guys think cybersecurity bootcamps are worth it? This specific bootcamp keeps popping out on my IG feed for Network Penetration Testing and it cost 30 dollars for a month of tutoring.

[elfin dirge]

I’ve been working full time while trying to incorporate self studying in between.

[kind zealot]

That's nice have you checked security plus notes they will be helpful

https://github.com/wilsonvs/CompTIA-Security-SY0-701/blob/main/All in One.md?hl=en-US

And setup a home lab

[frozen solstice]

gm

[deep yoke]

is following the resources of roadmap.sh cybersecurity a good start? where do i begin and what to aim for?

[elfin dirge]

Thank you. I will check it out

[low lava]

Ya , but wasn't sure what was the issue so I mentioned it thanks tho

Hey everyone, had a doubt when I used Wireshark to capture packets i only see protocols like tcp and tlsv1 why not http , I am using it in a vm environment

[warm citrus]

hey is there someone who can help me with boats

[torpid jungle]

Because you’ll only see HTTP if the destination is using plain HTTP. Almost everything these days is HTTPS (TLS)

[kind zealot]

Because you’ll only see HTTP if the destination is using plain HTTP. Almost everything these days is HTTPS (TLS)

[kind zealot]

https://tenor.com/view/stroke-faster-gif-7274294906861637603

[empty fern]

hey guys
for a laptop setup
can you recommend me accessories i should buy?

[torpid jungle]

Oh no, am I talking twice now?

[low lava]

Ah okay but i want to filter the ones with http , so I just added (.sslkeys )the path in my Brower and Wireshark

Thanks @kind zealot @torpid jungle

[kind zealot]

My brain got accidentally connected with yours

[kind zealot]

You have to visit a website which uses http to see http traffic in wireshark

[mighty oar]

Can't i learn Tryhackme on my phone?

I didn't have access to my laptop now

[whole patio]

Always choose a VM if at all possible

[timid hawk]

if it's with windows be careful , win is always bad terms with other os

[low lava]

Thanks for inputs everyone i installed it in vm ware @whole patio @timid hawk

[low lava]

U can't run the vm's on phone , I think so basically no

[winter flame]

Hey everyone! I just bought the eJPT voucher and I'm starting my prep for it. Any pointers? I'm new to this field and cybersecurity in general.

[soft tulip]

hello i just join this server and now i am confused where to start both offensive and defensive

someone plz help me out

[frank widget]

#👥・new-member-guide

[thorn marsh]

Am looking for a website or tool that can give u ur phones info user and more by using IMEI OF UR phone

[full citrus]

I'm gonna learn hacking before that now I'm learning java for programming knowledge

Can someone suggest me some tutorials

[astral egret]

Could anyone here help me with a quick way to setup automations? something like N8N or similar? it's for a trading challenge that i'm on.

[simple vine]

definitely an extra charger or two, one to travel when you travel and one for each spot you like to sit down and work at home.

depending on what ports your laptop has vs what ports you need, you may want a dock or dongle.

if you're using it in public a lot, you may want one of those screen protectors that limits the viewing angle.

If the built-in keyboard sucks you'll want an external keyboard, same with the mouse.

Depending on the laptop and your favorite headphones, you may need an adapter to make them play nicely together (usbc to aux)

[empty fern]

okayy thanks!

[brazen flare]

I'm new to programming and IT

What should I learn first?

[simple vine]

a cron job is the quickest and easiest if you're polling a data source, but if you already have a preferred tool, you should just use that

[simple vine]

you should decide what you wanna do, and then look at the public work that others share where they're doing it too (get a feel for what they tend to know), then read up on the parts that interest you most and try to find excuses to apply what you learn

or just -> #👥・new-member-guide

[gloomy sleet]

hey guys i need help with some school project. I don't even know where to start but i do have a home lab to work with which is kali...
Perform a keylogger attack on a targeted virtual machine. Proof that that attack was successful. Document the attack and the results.

Note:

Document all your steps and make sure that everything you do is recorded.

Rubric: Milestone 1

Rubric Numbers

Criteria

Marks

1.1

Attack was successful.

5

1.2

The attack can be demonstrated live during presentations.

5

1.3

Keystrokes entered randomly is captured.

5

1.4

All the steps are documented.

5

1.5

Screenshots are present.

1

1.6

4

[astral egret]

what's a cron job. I'm pulling data from public sources

[simple vine]

your best place to start for doing that in the way your instructor wants will be to review the lecture materials from when they explained keyloggers

[brazen flare]

Yup

[simple vine]

https://googlethatforyou.com?q=what is a cron job but more seriously it's like you tell a linux system "hey every so-many days/minutes/hours/whatever i want you to run this script" and then it does

[toxic sundial]

Cron job is a scheduler

[compact marten]

Hello i just turned 18 and im really excited to try my hand into cyber feild but im a total noob i dont know anything can anyone suggest me how do i start

[brisk tree]

#👥・new-member-guide

[astral egret]

Aah, okay. thanks. now it makes sense

[compact marten]

Ok thanks bro/sis

[astral egret]

Could you take out 5 minutes to give me a quick run-down ? I'll try building this tonight

[simple vine]

write a small script that does the thing you need done, and then ask literally any search engine or ai how to run a script on a cron job

[ocean gale]

@astral egret try CrewAi fast and n8n look alike

[gloomy sleet]

The lecturer didnt give any materials in regards of keylogging and i've searched most of the methods require python

[astral egret]

Thanks, I have a direction to go with.

[brisk tree]

Bro

[terse quiver]

@hallow bramble
I have gui windows 10 in browser, and I have my linux in vm , I have some emails and logs on the windows system that I want in my linux so I can analyse

[hallow bramble]

ah if they are on different networks and the browser machine is isolated from the internet you can't share directly

[kind zealot]

Are the logs downloadable??

If no then rip

[terse quiver]

But the thing is , the browser window is too small , I can't read anything on the browser so I need it in my system

[terse quiver]

Yes it's a downloaded file

[kind zealot]

I suppose there is a option in browser to zoom

[terse quiver]

But I can't ping ssh nc anything system

[terse quiver]

I'm new on blue team labs

I can't see it

I also can't share image cause of my lvl

🥲

[terse quiver]

Also I just can't go through the whole log file zoomed in when I'm learning

[kind zealot]

Can you try to elaborate a few things
In browser what u have
Cloud vm a whole os

Web based os by some course

Can u install anything on it?

@terse quiver

[terse quiver]

Amm it's a new popup window , where I can access the gui windows os , so ig it's os

I tried but installation didn't work

I tried python3 and php service but didn't work

[kind zealot]

So the problem is you can't them properly right

Can u share your screen on Vc

[terse quiver]

Ya sure give me a min

[kind zealot]

You can Just zoom though

[terse quiver]

Long msg

[terse quiver]

To read log files I can't keep zooming and scroll all over the screen

[kind zealot]

Check linkdin
Job roles and match with your skills
CYBERSECURITY jobs.
Google
Chat gpt

Tell it what skills you have you will get it

[terse quiver]

Amm tbh it depends where you are from .

[crisp star]

No need to be scared. You probably end up switching to other cybersecurity fields anyway.

Either choose between pentesting / red teaming, blue teaming or simply just security engineer

[kind zealot]

What sounds cool or interesting
Attacking a system
Documenting how a attack a went what did we do after that

Defending

[kind zealot]

You can though btw hop in call

[terse quiver]

From my pov I was stuck in the same situation but I got clarity after I started studying topics in depth, like I used to like networking but when I went in depth I hate it so you can try studying

[terse quiver]

Omw

My system is slow please dm

I'm also a beginner, but reality is things take time

[tribal prism]

hello guys i just wanna know i have worked on some projects and i have them in my resume and i wanted to know that are these project good and can i get a paid internship as per my skills based on my projects and i have build every project from scratch so i have the knowledge aboout what i have done
so please review these

[terse quiver]

@kind zealot which room for call?

[kind zealot]

Like either you can zoon
Or download them and check them wherever you like

As your system is slow

Check what type of logs they are
Ask chat gpt for a tool to analyse which will help to analyse
Or see the tool in current browser gui

If lost again come here

[restive vault]

Hello I need help I have exam tomorrow I don't prepret I need some can get my teacher pdf of the exam it's my last exam I need to get good mark 🚨🚨

[terse quiver]

yes its ok to try and feel confused.

[restive vault]

🤣🤣🤣 I am cooked let me try

[kind zealot]

https://discord.gg/8D3h8CTf8

[kind zealot]

@terse quiver

[terse quiver]

yes

im over the voice

sharing now

have a look

[tribal prism]

can you guys help me with thisss T_T

[astral egret]

It's not the right chat for this Archit. But I read what you wrote and it seems like you could easily get an internship if you knew where to look. do you want something?

[tribal prism]

yess i want internship then..tell me how can i get

[astral egret]

use Linkedin

[tribal prism]

ik that..fine ill figure out something

[shell moat]

Lads how easy is it to access an instagram account with 2FA with a session token

Asking to prevent attacks in my account

Not malicious intent

And does revoking session token completely kill them off the system?

[terse quiver]

https://blueteamlabs.online/home/investigation/bec-ky-d75e02a0dd

@kind zealot

[mighty oar]

Okay
Thanks

[spare knoll]

Hello, I am trying to get internship in cybersecurity so I need help with the projects ideas which can help me stand out any leads are appreciated.
Thanks

[winged pike]

Not easy, not

A legit ST maybe

[terse quiver]

I tried some days ago and it's not easy

[kind zealot]

@terse quiver can u come back

[terse quiver]

Omw

[violet prairie]

Anyone have exact roadmap with free resources for ethical hacking?
I want help

[graceful hatch]

@kind zealot Can you help me learn how to get an account back from an app called ZEPETO? some other hacker phished it from a link they set up to be official. None of my credentials was entered but somehow they got the account.

[devout jetty]

He guys I just need one help can anyone know about i2p what is i2p 🥲🥲🥲🥲

[whole patio]

so when you had read the wikipedia entry, what remained unclear?

[devout jetty]

I didn't read anything from anywhere about i2p if you know please tell me

[strange oxide]

Anyone here willing to help someone in dying need of food and shelter? Please

[whole patio]

............. the wikipedia page...?

[devout jetty]

I didn't

[whole patio]

I did not ask if you had read it - I tell you to read it

you need someone to come over and open the wikipedia page for you?

[devout jetty]

Oh sorry about misunderstanding

Now I am going to read

[graceful hatch]

Anybody know how to hack an account from a App? Not by phishing but just to get an account back that's been compromised.

[whole patio]

No #📜・rules No. 3

[graceful hatch]

@whole patio How is it without consent when the account belongs to me and I'm trying to get it back? I've been done the support, no help. Now what?

[kind zealot]

Connect to support

[whole patio]

Its not your account. It is the service providers account

[graceful hatch]

@kind zealot From the App itself? yeah I've tried hey keep denying due to policy but won't take the account down for some reason.

@whole patio Okay? But I had my email attached to it and an unauthorized user phished it from me. The "service provider" won't offer it back due to policy but it's unjust.

@whole patio These are supposed to be questions to better understand why and how it's unethical when people do it with IG or X or whatever other social platforms to get their account back from other hackers. I thought this wad a "help me" tab?

[kind zealot]

Do Forgot password

[whole patio]

If any rando could come here and tell us some random account was his even though the service provider is stubborn and won't let him log in, so please hack it, kkthxbyee - we would enable stalkers and criminals without prejudice.

This is not your account, and non one here has any legal ground to hack the service provider on your behalf.

What you are asking is about the same as if you asked me to break into a bank, cause they have your money, and I shouldn't worry cause you only want your own money, no ones elses.

[velvet sierra]

any reported issues with azure remote desktop /connecting via "windows app" ?

[graceful hatch]

@whole patio I'm not asking you or anyone to do it on my behalf. I'm asking for guidance.

[whole patio]

and I am telling you that according to the #📜・rules we are not going to discuss this

Its really not rocket science, champ

[graceful hatch]

@whole patio Alr cool

[compact pier]

what is a good forum to teach about GSM, LTE and radio packet manipulations like wireshark but for radio waves?

[kind zealot]

Don't waste energy on him homie

[lone helm]

Good day, all.
Where can i learn about Device tracking mastery program?

[compact pier]

you can start with understanding how IPs work and how you can try and track IP locations and you can expand from there

[solemn stream]

hi guys

can anyone teach me inline functions or macro functions in C++?

[dreamy island]

Please excuse if this is a not achievable but just thought I would ask.

Need a cscs card in my name but im under radar, no current valid id or address etc. Can this be done? I had a cscs card but expired years ago, ideally need a black or gold cscs card. UK based cscs is construction based card that allows you onsite. My friend has a job available onsite painting in london which would be beneficial to me but to get a cscs i would have to pop my head above the parapit which i could do without.

[bitter ore]

To get access to being able to type in certs do i need to reach chat a certain amount to be able to do so? Keep getting the done reading? And it takes me back to general

[bitter ore]

Would look more into the domains you're trying to get the internship in. I initially started with CCDC. I started from basics like learning Linux, networking, and expanded from there

Homelabs are nice and can give you an idea of how things work. Tryhackme is nice for covering some foundation as well.

[whole patio]

need to get at least to lvl 1 - so chat a bit in #💬・old-gen-chat

We are not helping you for obvious reasons - read the room.. also the #📜・rules

[bitter ore]

appreciate it

[steady rain]

hey i am a AI and data engineering student but i only can use python and i barely understand OOP but i want to learn more languages but i lack the guidance or professional to tell me where and how should i proceed and with which language, any help would be appreciated.

[torpid jungle]

What are your goals?

[rugged thorn]

Language depends on what are you aiming to do and also for language learning, you can use coddy.tech

[chilly merlin]

Anybody have info on any books on hacking for windows?

[steady rain]

i am really interested in genAi and creating automations using agentic frameworks but with N8N available i dont see the need / real value chasing that path since it feels like anyone can do that all i look for in a job description when i apply for jobs is if someone wants domain specific chatbot or an ai assistant or just llm evaluation but i am also into machine learning i love to see the limits of neural networks whether its prediction model, segmentation model or object detection/classification but when it gets tough i just end up in a plateau and i think that's because i dont understand the loss functions enough. I believe that is all i can tell you (IK i haven't figured out which way to go yet) perhaps you can help me?

[steady rain]

tbh i dont know but maybe machine leaning if it still holds value after the rise of AI and thanks for the website

and there was a typo in my mesasge

sorry

[rugged thorn]

For machine learning and AI, go for python

You can also learn C for understanding of computers, operating systems etc.

Although this is up to you

[steady rain]

okay thank you for your advice , but is C too hard no? or is it just a misconception?

[keen ridge]

Hello guys, can someone please share a free pdf editing tool or website?

[rugged thorn]

C++ is harder then C, take C as the father of most language, like JS, C++

[simple vine]

too hard for what? C is relatively straightforward to write, but easy to make mistakes with.

[rugged thorn]

Also for the website, the free would be enough, if you wanna go to paid plans, then up to you

[rugged thorn]

True

[rugged thorn]

There was a website for that, I forgot the name, sorry

[steady rain]

i see i was too scared to ever touch C

[keen ridge]

Yh i know there’s a website but I don’t remember either lol

[simple vine]

you can use gimp, inkscape, or xournal if you don't mind installing FOSS tools

[rugged thorn]

Nah trust C is way easier, if you actually give it time and understand the fundamentals

And basics

[simple vine]

it's fine to touch it, just don't use it in safety-critical applications unless you really know what you're doing =)

[steady rain]

alright thanks'

[rugged thorn]

My pleasure, you can also make your own notes for better understanding, notion, obsidian etc, at least that's what I do

[steady rain]

can i ask what you professionals think of job market for newbies to enter?

[steady rain]

okay i use obsidian yeah

[rugged thorn]

I'm not a professional so......

[rugged thorn]

Same, it's more good tbh

[steady rain]

okayy

[rugged thorn]

Imma student like you, I'm learning python rn

[steady rain]

i see so you mind me asking if you know any other languages? or you are just starting in software engineering now?

[light jackal]

Depends on the field, you could be a person looking to work in application development, or be a part of the security team or one of the many other things

[rugged thorn]

I'm doing Artificial Intelligence operations, which include DevOps, SysOps and CCS, I was learning C before, I already know HTML, CSS but my aunt saId (she is a Blockchain devloper) to learn python first, so here I am

[steady rain]

lets say my background is in machine learning and AI/llms does these things still hold value? or in next couple of years?

[rugged thorn]

Oh trust me they do

[steady rain]

okay. cool

[light jackal]

Yeah, there are 2 sides in broad, you be a part of the llm or some model dev that is focused on a specific goal or you could develop apps that use ai like rag systems, agentic workflows and stuff.

[steady rain]

i just feel like with the AI everywhere it's easier than ever so anyone can do anything

[steady rain]

see these areas are too easy to get into and anyone can do it with the help of ai

[light jackal]

Well it is happening, you can see that with the number of issues being raised in popular packages

The security vulnerabilities

[rugged thorn]

I mean ai is still developing rapidly everyday, but we do need Ai engineers, etc to do stuff, make new models etc

[steady rain]

yeah this part i am assuming the cyber security demand will be higher than ever

[light jackal]

Yeah, I've been looking at it from last year and damn, node and python packages are going on fire now

[steady rain]

true but maybe i am saying this out of ignorance but still my point stands those areas are easy to get into

[light jackal]

I agree, but I think it's good to get a feel of those stuff since it's a value add for now atleast

For someone in his field

[steady rain]

wdym by fire here like higher packgages or bad packages? and if higher then in cybersecurity do they use python?

[static sky]

any one knows how to get a linux virtual machine

[static sky]

for free

[feral lintel]

virtual box

[light jackal]

People are finding vulnerabilities that existed for a long time. Basically no one until now had the time to look that far but with ai, automation, it's easier

[steady rain]

that's me that is why i am worried that's why i am here to look for places to expand my skills in

[light jackal]

Yeah, run it in VMware or something

Or just spin up a docker container if it's for small thing

[static sky]

like i need a server to host a fishing site

[feral lintel]

for educational purposes, amirite?

[static sky]

ok

[static sky]

yes ofc

[light jackal]

Right

[steady rain]

so ig cybersecurity it is 😅

alongside my machine learning and AI ofcourse

[light jackal]

Ig everyone will have to have some level of cyber security knowledge since it's going to be very common

[static sky]

is it possible to ethically hack a website and place ads on the website?

[feral lintel]

you're treading in murky waters here buddy

[static sky]

how? i am lost

[feral lintel]

adding the word "ethically" and "educational" does not make it any better. we weren't born yesterday you know

[static sky]

what am i doing wrong

[torpid jungle]

So how would you connect that to learning a new language?

[carmine jolt]

any open source pdf file free for beginner friendly but fundamentally solid?

please.

[steady rain]

because i am scared that just following that path might be not valuable enough or easy to get into since those are areas are easy to get into so i just want to increase my value by learning something that might be of greater value and would make it easier for me to get a a job in next 6 months (I AM OPEN TO SUGGESTIONS)

[carmine jolt]

ok

[torpid jungle]

Got it. So maybe you’ll get the most value out of learning a language that gets a lot of use in your domain, like for example R, or Scala or even Julia.

[steady rain]

thanks that is the answer i was looking for, but also someone recommended C and said it is pretty straightforward to learn so in comparison how hard are those languages to learn? just asking so i can prepare my mentality towards it and plus what is the best way to start and where?

[winged pike]

guys, is it possible to run SOC L1 job and collage (not a hard one) at the same time?

ppl say it is hella busy

[simple vine]

to break this down, are you saying you're scared it might not be easy? because most technical tasks with monetary value in the job market are some degree of not-easy. if you do only easy things in preparation for a job, you'll be qualified for fewer lucrative jobs than if you do hard things?

[frank widget]

I was able to get a role in my college's SOC, look into it it's pretty nice

[simple vine]

how much flexibility does the college give you about how many credits per term etc? if you're clear on the drop dates and pick your start time right, you should be able to get a feel for how much school you can do on top of the job and then balance your courseload accordingly

[winged pike]

yeah im 2nd year and have a bit monitoring skill then said why not

[simple vine]

if you're in a program where you have to take a specific 16 credits per term becaues they're only offered once a year or some nonsense, it might not be practical though

[winged pike]

it takes max 2 days to be prepared for a final exam in my collage, most of them are less than 1

[simple vine]

if the grading is mostly finals then that's great, but if the grading demands attendance and group project homework you could get in trouble from overcommitting

[frank widget]

I had to pivot from the college call center to get to the SOC but it was a blast I would try it if you can and are on site

[winged pike]

we don't have that type of stuff

[winged pike]

yes there is attendance limit

[winged pike]

really? i have try my chance frr

[simple vine]

can you find some other students currently doing the job and ask how it is to balance with classes?

[frank widget]

Definitely do, I hope you find something!

[simple vine]

tbh if you can make it work you probably should; student jobs can be great for making the right industry connections for good jobs straight out of school

[frank widget]

Since it is at college it works with your classes and such too v nice

[winged pike]

idk if it is only in my country but there is few collage stds who get a role but ill try to find

[winged pike]

absolutely, collage is an hour away from my place

[steady rain]

no what i mean by that is the fiels that am studying/interested in (machine learning, genAI/llms) are easy fields for anyone to get into so i am scared that these might not hold values soon since the newbies can get into it pretty easily and i am aware of the fact that brining value in the job market comes with some degree of hardships and that is why i am here to look for advices and decide what should i study alongside what i already am studying. i hope you understand.

[winged pike]

thank yall for help tho i appreciate it

[simple vine]

oh yeah, that makes sense! job market can be a little disconnected from reality, definitely worth keeping an eye on the postings for the kinds of jobs you'd like and seeing what they're actually claiming they're looking for

[jovial sedge]

So uh

I found the bug

Sp yeah

Can someone help

Its probably jist gonna reenter

Just

[normal hollow]

Hello guys. I’m new here. I just finished my bsc in cyber security. I wanna settle in on penetesting . Can anyone help me with any course or recommend course for me .

Also what tools can I use

Does any one know how to jack break chat gpt

[sage spire]

Why jack break it, could just use ollama if you got a decent amount of ram

[chilly merlin]

Hello fellas... Also new here, I need serious help from y'all, and I jus got admitted for cybsec this year...

[normal hollow]

Oh okay thanks. And it does what a jail broken ai does right?

[sage spire]

Yeah, there's tutorials online on how to set one up

[jovial sedge]

Can someone help me with somethimg

Please

[normal hollow]

Ok thanks

[jovial sedge]

Go yo vc

To

[woven anvil]

What do you need?

[torpid jungle]

Well, in comparison to C, they’re easier in the sense that you don’t have to worry about memory management. They might be harder in that the languages have more modern features and they have a different paradigm entirely (C is Structured, the ones I recommended are a mixture of paradigms like Functional, OO, etc), but you already know Python so that’s probably not an obstacle.

[steady rain]

alrighty thanks

[jovial sedge]

Vc pls

I cant enter safe mode on my android

[copper spade]

Good day everyone, please am new to discord and a new bie in cyber security. please i need guidance and direction on where and how to start learning thanks

[carmine jolt]

hey do i need to work on my typing?

i have like hold on

wpm
72
acc
96%
test type
time 30
english 1k

[torpid jungle]

I think the only jobs where WPM matters is like being a typist, transcribing dialogue and stuff, haha. At least, throughout my career, the only time I’ve done typing practice was because I felt limited by my habits when I adopted Vim as my editor.

So maybe gauge it by yourself; see if you feel comfortable with your speed or if it’s limiting you.

[brisk tree]

#👥・new-member-guide

#💬・certs

[tight chasm]

hey guys i got a job offer but im not sure if its real its not for tech/IT but i just wanna know cuz it pays decent (nothing unbeliveable) and i could use the money for college

[woven anvil]

Seriously though, no piracy talk here.
#📜・rules

[spark shard]

oh mbmb

i deleted it dw :p

[safe sorrel]

Good morning guys
Please do was directs cheer to ask my question

I’m not sure if it classifies as acceptable on the server but I’ll say it anyways

I want to read requests made by an app on my iPhone, so I used mitmproxy from my Linux to my phone as a proxy and I downloaded the mitmproxy certificates

But the app didn’t allow requests on untrusted ssl certificates, so I found out I’ll hand to implement ssl pinning using Frida to make the request readable from mitmproxy

So I’m not sure how to do that without a MacBook cause the Frida docs said it required Xcode. Or is there another way to achieve this

Again I don’t know if this is acceptable on the server so if it is not just ignore the question thank you

[honest wasp]

Should i get a thinkpad and build home lab or get a really good pc i want to run lot of docker and spin multiple vms

[whole patio]

Entirely up to you

Could also get a really good thinkpad 😉

I personally would get a cheap thinkpad and some rather small home lab server, as I consider the learning curve better.. also you can later upgrade or replace based upon more specific needs

[idle prairie]

hey i just wanna know that is tryHackMe really enough to get completely into the full depths of cybersec?

[whole patio]

Its both a wide-spread and developing field - nothing is going to give you a "completely and full depth"

[idle prairie]

so should i just start with it and learn the premium rooms from other free resources on th web but that again would not give me any ceritificates

[whole patio]

Free certifications are not valued anyway

Maybe lower your expectations a bit, when it comes to platforms

Just start somewhere, you'll get a better understanding of what you get, and what not, anyway

[simple vine]

examining how an app on your own device handles your data is... probably fine actually? some people use workarounds to run xcode on windows or linux, but frankly those might be against xcode's terms

wow yep, apple-branded product stipluation in https://www.apple.com/legal/sla/docs/xcode.pdf means that we cannot discuss running xcode on anything other than a mac! maybe a friend or family member has one you could borrow, or a school or library has one you could use? there are also services to rent osx systems in the cloud i think

[safe sorrel]

Oh, classic apple

Thank you I appreciate it

[bright mauve]

can anyone tell me or explain fully from where i start my hacking journey

[whole patio]

#👥・new-member-guide

[carmine jolt]

Hey so i get distracted a lot but also kinda learn very much about it how do i keep going the goal? Or maybe better results

[whole patio]

That's very individual. I like to focus on my notes a lot, make them clear, usable, pretty.. gives me feelings of accomplishments, when I get distracted

[drowsy rover]

i like to keep motivated talking to my partner. but yeah it's like too subjective

[glass fern]

Something that has helped with my adhd which might help you too: set smaller and more realistic goals. Smaller and consistent effort goes a longer way than occasional bursts of great effort. Also, once you build the momentum, it's easier to keep going than if you had set a higher goal from the start. Finally keep track of your progress in any way that you prefer; seeing how far we've come always helps.

[carmine jolt]

https://tenor.com/view/job-job-application-jobless-gif-2757097081210871087

[tardy girder]

someone suggest me some top notch books or anyother resources to learn networking?

[granite saddle]

Is tryhackme.com a good way to start learning cybersecurity?

[granite saddle]

Is tryhackme.com a good way to start learning cybersecurity?

[drowsy rover]

it is

[copper perch]

Is AI a threat ?

[carmine jolt]

It can be

It can’t be

We need new logics

Obviously.

[dapper aurora]

Guys i wanted to ask like I have an SDE-1 interview in offline mode at amazon so can someone guide me what and how should i prepare(interview is on 23rd Jan)

[kind zealot]

Yes

[kind zealot]

To what?

[kind zealot]

Cisco packet tracker
Network plus professor messor

[granite saddle]

After the fundamentals of cybersecurity, should I use tryhackme for pentesting too??

[charred tusk]

Hello everyone I just wanted to know apart from using andro rat with limited android version is there another rat or spyware available using Kali Linux because I am trying to think of the perfect free source apk that bypass Google play protect. I know converting apk to custom loader language like Go, Rust or c++ but I am caught in webs

[ornate fable]

Hi everyone, I need guidance from the pro ones. I have done networking, basics of cybersec also I have done Jr pentester on THM. I am regularly playing CTFs but I am only able to solve 2-3 flags. Also if I do any machine I get stuck for long time. I need guidance to become better. Plz help 🥲🥲

[kind zealot]

Yes u can do it they have a red team road map

[kind zealot]

Read books

[ornate fable]

Any books that you would recommend??

[void mantle]

Hi MS

Any Ideas on how to integrate JS and Py in penetration testing.

[granite saddle]

Thanks for the help!

[charred tusk]

I need help 😞 please

[kind zealot]

Hacking:the art of exploitation by jhon Erikson

And read the walk through and documentation properly

[charred tusk]

Thank you very much but I there an available rat that bypass this threat I mentioned

[kind zealot]

#📜・rules

[kind zealot]

So py is used to automate boring and repeated stuff
And js is used to see how frontend talks with backend

[copper perch]

Like can the whole process be automated with minimal human involvement... "One man companies ". What will be engineers for. ... Surplus etcc

[past pendant]

Would anyone be able to help me with something. I'm happy to pay

[drowsy rover]

to jobs, definitely. but it’s not a threat. it’s more like a trade-off. manual labour would be turned to automation and labourers would be expected to switch skills and migrate to cope up with ai engineering and agentic ai oriented management

[void mantle]

Is there any nuance to it, in the sense of having python over reach into areas of Java speciality cos I've seen some good use of Python as pseudo-java

[kind zealot]

Yeah that's correct ai will not replace completely

[kind zealot]

Can you elaborate on what you are trying to do

[latent plaza]

yes and no

[kind zealot]

You will most likely get scammed

[latent plaza]

it feels more like a tool

[kind zealot]

Yeah

[latent plaza]

but one too easy to obtain and too dangerous to have

[latent plaza]

loveee your pfp i love vinland saga

[kind zealot]

Me too homie

https://tenor.com/view/cat-kitten-handshake-deal-agree-gif-7134721403924803840

[latent plaza]

https://tenor.com/view/chiikawa-christmas-xmas-cute-hachiware-gif-12823019999236196223

bro..

[kind zealot]

You need level 10 for gif perms

[latent plaza]

dude not even emojis

[void mantle]

For example is it possible in let's say in Django projects where developers push python into being Java oriented

[kind zealot]

https://tenor.com/view/chiikawa-christmas-xmas-cute-hachiware-gif-12823019999236196223

[kind zealot]

Keep talking you will get it soon

[latent plaza]

YEAHH

[latent plaza]

i talk in gifs loll

what do i focus on first before turning to cybersecurity,?and what makes someone stand out when it comes to jobs and stuff or just generally in the cybersecurity or computer science community overall like what makes ppl think "wow this guy is good"

[kind zealot]

Yeah django code can be written very Java style but it’s still backend python doing backend work.

[kind zealot]

Yeah django code can be written very Java style but it’s still backend python doing backend work.

[kind zealot]

Like basic understanding of everything
networking and cloud
Now a days people in cloud security stand out
As u are just starting why don't you checkout
#👥・new-member-guide

[latent plaza]

do i stilneed to learn the windows fandancntumwentals if i dont use windows

[latent plaza]

also thankss

[void mantle]

Oh I see Thanks 👍

[kind zealot]

Yeah you do cause other people use it

[latent plaza]

tch....

[burnt ridge]

try finding a roadmap to follow on roadmap.sh and use w3schools to learn everything you need, of course youtube and whatnot has plenty of tutorials and guides as well

[shy osprey]

I wouldn't reccomend w3scools. Very outdated information. Fine if you're starting to touch things but mozzilla web docs is vastly better.

I would get a handle on HTML/CSS/JS and then move into a framework like Astro or Svelte that pre-fetches data. Working in VDOMS with React and Vue is insanity for a beginner.

[summer yoke]

can someone help me make a discord server ( i cant pay)

[shy osprey]

There's templates online you can copy. It doesn't cost anything to make a server from your sidebar fam.

[summer yoke]

ok ty

[shy osprey]

If you need help finding templates just holler. You'll load them up and edit them.

[forest oracle]

hello guys good day am new here

anybody here?

[shy osprey]

hi

[forest oracle]

good day w47NUT

[shy osprey]

Salutations o/

[forest oracle]

oh okay sorry about i just wanted to feel welcomed first

[exotic sun]

Hello guys! I have been experimenting with making cyber-security videos using SBCs and microcontrollers. I want to know how can I make them better and also seek to have conversations with people up for any possible collaborations. Please let me know. Thank you.

[forest oracle]

okay the thing is i want to be a hacker but i don't know where to start from i really need it thank you...

[hushed island]

What does being a hacker mean to you??

[sand nexus]

Guys should I install Mr.Holmes in root? Like I am beginner can someone tell

[zinc cargo]

Me to I'm new here

[hushed island]

You should read all the installation requirements and notes before you install it

[forest oracle]

Being a hacker to me is about problem solving and pushing boundaries. It’s not just about breaking into systems; it’s about understanding how things work at a deep level and finding creative ways to make them do what you want, whether it’s improving security, automating tasks, or just testing the limits of technology. It’s about curiosity and exploration but also responsibility using that knowledge to make things better or expose flaws so they can be fixed. and i can also use it to make earn which is the most important part sorry am replying a bit late....

.....

[woeful bone]

i just setted up a VM in VMworkstation pro with kali linux for a scool project but as soonest i tab into the VM my Mouse courser dissapears.... someone got a idea hof i can fix it?

[simple vine]

you're answering your own question -- follow your curiosity and explore.

[sacred plume]

can anyone help me bypass this
https://api.luarmor.net/files/v4/loaders/24e8cf30a21a49dc9f91b2856f04cd5a

i need that code locked behind it

[surreal raven]

Yes

[crisp star]

That does not sound very ethical to me.

There is a good reason why the API endpoint prevents you to access the resources.

[sacred plume]

uhm there`s lua code which i need cauz the code runs somthing i need but isn't compatible with my software to make it compatible i need that i asked the owner but he refuses to make it compatible

[crisp star]

If he says no, it's a no.

[simple vine]

you can look around for whether the author has chosen to share the files publicly elsewhere, but if he strictly refuses to share it to you, we won't help you violate that consent

[sacred plume]

its alr

[whole patio]

Most of the times the audio makes the difference.. but YMMV

[whole patio]

shut down the VM, change the hardware compatibility to 17.5+ and start it back up again

[languid gate]

I wanna become as secure as I can be online with my devices. I have a laptop and a Samsung Galaxy S22

What's the best steps to take to ensure privacy and security

[whole patio]

have you taken a look into #🫵🏽・opsec-and-tradecraft already?

[languid gate]

Oh i didn't see that. Not yet

[languid gate]

What should I look in thre 4?