👥・help-me

[whole patio]

honestly the best advice is actually two advices

[lofty canopy]

okay?

i am really curious bout it

[whole patio]

a) Just start somewhere.. don't make a plan to shortcut through it, it will not work for you
b) Find a way to sustain yourself apart from cybersecurity, give yourself time and opportunity to do it right

Further down the line, when you are intermediate and think about getting an actual job in cybersecurity... find a niche that you become ridiculously good at.. like make it really weird how good you are in this particular skill.. become the person people think of, when this topic comes up

[lofty canopy]

if i told you what are the things ik will you suggest me things?

[whole patio]

There are people here better equipped to do that

[lofty canopy]

i will just write it anyone will help me anyways

everyone is good with suggesting and helping

[crisp star]

Become a SOC analyst

[lofty canopy]

reasons?

[whole patio]

https://tenor.com/view/wolf-of-wall-street-jordan-belfort-leonardo-di-caprio-one-of-us-jonah-hill-gif-5441859

[lofty canopy]

baised

[modern marten]

I'm considering taking the google cyber security certificate but there're alots of opinions about it some say it's good n some say it's trash (i'm a CS study still in yr 1 with no exp in the cyber security field yet)
would you recommend it or not n should i start studying for Security+ or something else instead.

[winged pike]

It is trash

[modern marten]

n why is that

[winged pike]

It is decent for entry

But theres better choices

Like thm

Mb it isnt trashy

Just decent

[carmine jolt]

How to show them the window is opened

But also you stepped on a net also so they can put my folder back

Can teachers and people tell me how?

[silent pebble]

looking for a group who is either studying pentest+/PJPT and who want to study together, chat or practice with machines etc.

[tall yoke]

Hi im kinda new to this i recently have got beamed on roblox for a game that had about 350$ worth of in game items so i saw srhoe on ig and i could get teached how to hack and stuff

[junior granite]

hello

[woven anvil]

Welcome to our server.
Please read our #👥・info and #📜・rules.
There will be no teaching how to attack services like roblox, as that is someone else's property.
We do have some starter materials in #👥・new-member-guide

[visual basin]

How do I port scan a wifi getting past firewall?

I do have consent

[woven anvil]

This question does not make much sense.
Saying "I have consent" will not get people to tell you how to do unethical things.

[visual basin]

Nooo I’m trying in on myself I’m sorry if it came off that way I’ve been trying for over a year

To port scan my wifi but nothing works

I’m sorry if it came off like I’m doing something bad

[burnt osprey]

is subnetting and calculating subnets necessary for pentesting or red teaming???

[visual basin]

😔 sorry

[woven anvil]

understanding, and being able to grab some paper and do it on the fly is a huge benefit. There are online calculators, but all you do is push what you need to learn further down the line, as "routes" and "Firewalls/ACLs" will rely on the understanding of how subnets work.

[burnt osprey]

what resource shall i use for subnetting?

i can barely grasp the concept and purpose of subnetting

tbh

[visual basin]

So I’m guessing I can’t get help on this

[woven anvil]

Its just a way to split up and assign networks at a very large scale.

Think about it in the context of an office of 1000 people.

If you make 1 /22 subnet that is 1022 IPs big and throw everyone on it, then it will work very slowly with the amount of machines working on a single broadcast domain (so if 1 computer broadcasts a packet, everyone sees it).

Now, we can break that up into more managable ~250 devices, which is a /24 network.

A good way to look at this, is that a /22 network, is as big as 4x/24 networks.

If we put IPs on this example, 192.168.0.0/22 would be the same size as the following all put together:

• 192.168.0.0/24
• 192.168.1.0/24
• 192.168.2.0/24
• 192.168.3.0/24

This means that at the head of the network(the main router), if I wanted to make a firewall rule that allows all the networks to access the internet, instead of making 4 individual rules so that I have one for each network, I can just say allow 192.168.0.0/22 to the internet, and it includes all of those networks.

[burnt osprey]

😭

thats much easier to grasp

thank u so much dude

wait

192.168.0.0/24
192.168.1.0/24
192.168.2.0/24
192.168.3.0/24
I do not get how this works

because the cidr notation is like

wait so its 255.255.255.0 right?

[woven anvil]

correct

[burnt osprey]

so theres 254 hosts available

[woven anvil]

correct

[burnt osprey]

idk how we get from this amount of hosts to them 4 ip addresses

[woven anvil]

192.168.0.0/24 is 254 "usable" IP addresses.
This is 2^(32-24) which gives you 256.
Then you have 1 IP address marked as a "definition", and one that is used for the "broadcast".
This is how it gets down to 254.

If we take this same logic, and apply it to a /22
192.168.0.0/22 is 2^(32-22) which gives us 1024.
We apply the same logic to the IPs, removing 2 from it for the definition and broadcast, which gives us 1022 IPs.

If we ignore the definition + broadcast, then 256x4=1024.

This is the math way.

The visual way is to open a subnet calculator, put in a 192.168.0.0/22 network, and you will see that it gives you the available IP range that goes from 192.168.0.1 -> 192.168.3.254.

[burnt osprey]

this heled me understand it better

thank u so much

also

I have a question, if private ips are supposed to identify a host in a LAN what is the point of a MAC address???

[woven anvil]

MAC operates on Layer 2. So thinking of that 1000 computers, you can't just plug all those into the router. So you have switches to give you the extra ports you need.
These switches operate and do their work all on Layer 2 with MAC addresses. Adding an IP layer allows you to continue the communication past the switches, and to the router. The router does not need to know what MAC the computer was, just that the packet is coming from that IP, and going to another IP.

So it lets us build out infrastructure in layers, where we can test each individual layer, and more easily scale it up large, and find issues, especially across different hardware vendors/manufacturers.

This also lets us run protocols that aren't TCP/IP across the same hardware, which was more important in the past, but is still probably important in specialized environments.

[burnt osprey]

so if it reaches the router of the destination IP how would the end device receieve the packert

oh wait

arp>

?

[woven anvil]

NAT

[burnt osprey]

I havent learnt this yet

i do have a brief of what nat is

however i do not know the indepth process of how at works

of converting the public ip to the private ip, well ik it has a cache or some sort of table

[quaint skiff]

can anyone help idk why is their a group of hackers attacking my server on fivem i know nobody might care but im just trying to get my server up and running to have fun with a growing a community an everytime i get the chance to turn the server online for my city on the game they boot me offline.

[burnt osprey]

whats ur discord server

[woven anvil]

If you look at a proper Firewall Rule, some of the information you end up requiring is:

• Source Address
• Source Port
• Destination Address
• Destination Port

NAT(Network Address Translation) will "translate" one of those values before sending it out.

The common types of this would be Source NAT (Although, i think Cisco calls it something different) and Destination NAT(Port Forward).

In a Source NAT, when you send a packet out of your network, your router first replaces the "Source Address" with it's own public IP. This makes it so that the server that you are talking to knows where to send the packet back to. Once the packet comes back, the router will put the real IP back, so the packet will reach the right device in your network.

In a Port Forward, you change the Destination Address. You normally do this when you are hosting a server, like a website or gameserver. This is so when people go to your public IP (Which will result in your router), your router knows to forward that to the specific device inside your house. When the packet goes back out, the destination IP is put back again, so that the computer that the packet is going to knows it came from your public IP.

There is also Port Translation, which is the name of a type of Port Forward, where you also change the Destination Port. This can be useful of the thing you are hosting is not on the port you want the public to be able to access.

[woven anvil]

There is nothing anyone here can do.
Contact the provider's support for assistance.

[gaunt mica]

Can anyone help me unlock my old galaxy note 10+ that was password locked? A former employer of mine leaked and hacked my old email account

Or Any recommendations on recovering my old gmail account? I had to get a new phone number so I can’t complete the two by factor authentication

[woven anvil]

@gaunt mica
We don't assist with account/device recovery here.
Please contact google, and watch out for scammers who may be DMing you about this now.

[gaunt mica]

Okay thank you!

[acoustic shuttle]

Does anyone use flipper zero to check vulnerability

I'm new to scripts really just a hobby to learn as I go

[torpid jungle]

You can't "port scan" your Wi-Fi, so maybe that's the problem with your approach? But that's the last I'll say, in case you're thinking of doing something unethical.

[whole patio]

Not really, no

[keen atlas]

Looking for ideas / second opinions on a locked-down XiOne (Xfinity Flex) box
I’ve been poking at an XiOne (Xfinity Flex) box purely for reverse-engineering / learning purposes and I’m pretty much at the “this thing is sealed” stage, but I want to sanity-check if I’m missing anything obvious or if anyone has seen similar boxes cracked before.
What I know about the device:
• Xfinity Flex (XiOne), FCC ID: NKR-XIONEWN
• ISP-managed IPTV box
• Likely Linux + RDK stack
• Secure boot, signed firmware, OTA only
• Recovery mode exists (WPS at boot) but still signed / locked
What I’ve tried so far:
UART / serial
• Found test pads, confirmed multiple GNDs
• Found two pads sitting ~3.30 V
• Probed with USB-TTL (RX + GND only, no power injected)
• Tried 115200 / 230400 / 460800 / 921600 / 1500000
• One pad outputs consistent characters at multiple baud rates, but nothing decodes to readable ASCII or Linux boot logs
• Feels like encrypted/proprietary debug or gated UART, not a normal console
Network / MITM
• Bridged the box through a Raspberry Pi
• Captured traffic with tcpdump (DNS + HTTPS)
• ~20k packets over ~30 min
• Everything important is encrypted
• No firmware URLs, no plaintext APIs, nothing useful
• Almost certainly TLS + cert pinning
Firmware hunting
• Checked FCC docs, public repos, usual leak spots
• No firmware images, no kernel strings, nothing usable
CVE research
• No CVEs tied directly to this SKU
• Without firmware/kernel version info, CVE matching is basically blind guessing
Bottom line so far
• No shell
• No bootloader
• No kernel logs
• No firmware dump
• No writable access anywhere
From what I can tell, this is a properly locked ISP appliance, not an Android TV box that forgot to disable debug.
At this point, the only paths that seem remotely viable:
• eMMC extraction
• Early-boot UART capture (if timing/auth is a thing)
• Leaked firmware
• Known RDK exploit affecting whatever version this runs
• Fault injection / voltage glitching (probably overkill)
If anyone has:
• Seen XiOne/Flex/X1 boxes cracked before
• Experience with RDK internals on Comcast devices
• Ideas for non-obvious access vectors
• Thoughts on that “consistent but unreadable” UART output
I’d love to hear it. I’m assuming this thing is sealed unless proven otherwise, but figured I’d ask before shelving it.

[strong wren]

Hey guys , Im Currently doing my masters in cybersecurity , Can someone help me figure out some capstone project idea related to cybersecurity domain

[restive rover]

here’s an article i found with a few examples, hoped it helped 😊

[restive rover]

https://honors.uic.edu/academics/capstone-project/capstone-project-samples/

[strong wren]

Thank you @restive rover will check it out

[restive rover]

ofc noprob

[strong wren]

@restive rover can you help me find something related to cybersecurity

I actually had the idea to create a cyber range , but i have no clue on how to get started with it

[tired cape]

@strong wren what are you going to do with a disassembler?

Why exactly does it have to be a project with capstone, any goals you need to achieve?

[strong wren]

So the end of the capstone is solve any real life existing scenario or problem related to cybersecurity

[strong wren]

hmmm , i might just create some labs

basically to complete my masters , i have to submit two capstone projects ;🙂

[tired cape]

I see

[strong wren]

yepp

[tired cape]

I mean in the field of malware analysis it's often handle to emulate pieces of code of a binary that are hard to analyse because of obfuscation techniques, or simply just because its faster

Think of decryption routines

You could write an emulator for some instruction set

It is some work however, but I suppose since you are doing a masters it should be alright

[strong wren]

okay cool , I ll have a look into it , thanks a lot

if you come up any other idea or anyone gets any idea which can help me pls let me know

[restive rover]

https://networksimulationtools.com/cybersecurity-capstone-ideas/ this is what i found

[strong wren]

Cool bruh thank you will check it out

[sharp osprey]

hey guys whatsup

can anyone pls recommend resources to me for c++?

[kind zealot]

YouTube free code camp

[kind zealot]

.

[midnight plank]

Any book recommendations for cybersecurity
Im a beginner and just my first gaming laptop & im interested in cybersecurity

[bronze nexus]

What field of cybersec are you most interested in?

[brisk tree]

#📜・certs-and-career
#👥・new-member-guide
#🛠️resources-tools

[midnight plank]

Honestly idk
Im goin to the airforce for cybersecurity so I want to be prepared

[midnight plank]

Thanks ill check it out

[bronze nexus]

Well, figure that out first 🙂

[midnight plank]

Lmaoo I just want to know the basics
Im already aware of the basics of kali and comptia A+

[brisk tree]

For books

Here you mate
https://security-books.notion.site/

[midnight plank]

Thanks broski

[brisk tree]

Np mate

[brisk tree]

All the best
You can start with the tryhackme

It's friendly and easy

[hushed island]

If you’re doing that why not just join Space Force?

[midnight plank]

Gotta score higher

But ill ask my recruiter if thats the case

[tardy coral]

Hey im new to everything in general here. Do you guys think you can recommend me ways to get comfortable with linux? I have a laptop with mint on it and ive been using LabEx (linuxlearningjourney.com) and its honestly been a great help but im curious if there are any better ways out there. (I wanted to learn it so i can play overthewire and because i have a great liking towards this whole field) thank you all so much for taking the time to read this. (Is it worth it upgrading memberships on hackthebox??)

[pastel quiver]

Issue. New to forum, asking for guidance on where to seek assistance within this community.

Situation. A friend of mine was part (victim?!) of the recent (5 Jan 26 announced) Ledger data breach. I am broadly capable but novice in the cyber security/ethical hacking space.

Task. Hoping to find support/advice to help understand how to; find the breached data and set monitoring to ID/warn if my friend/their investment company is being discussed/targeted.

Any advice would be much appreciated! TVM

[pastel quiver]

CONFIRMED DATA FIELDS:
Full names
Postal/residential addresses
Email addresses
Telephone numbers
Order details:
Order number
Product purchased (confirms Ledger hardware wallet ownership)
Purchase date
Price paid

[bronze canyon]

Just a question

I saw a guy use a keybind shortcut to switch between two different dotfiles like in gui

does anyone know about that?

[real juniper]

I’m a beginner bug bounty hunter and actively practicing on HackerOne / Bugcrowd.
My short-term goal is to earn my first $100 bounty and learn proper methodology this week.

I already work with tools like httpx, gau, nuclei, Burp Suite, and I’m focusing on recon, exposed endpoints, and misconfigurations.

If any mentor or experienced hunter is willing to guide me on what to focus on or review my approach, I’d really appreciate it.

I’m consistent, serious about learning, and happy to share progress.
Thanks 🙏

[mighty sable]

listen to jason haddix if you havent already

[plain nacelle]

hello guys any good course for full linux + ?

[kind zealot]

Linux+

?

Over the wire

[plain nacelle]

I mean like full course video playlist

[winged pike]

Does anybody know

How to use tiktok in arch?

Not for me

[torpid jungle]

Does the website not work? I’m genuinely asking because I don’t use TikTok

[winged pike]

It does

Bu for further uses you need to have the app

[winged pike]

Me neither

[torpid jungle]

Then they probably have some mechanism to validate where requests are coming from. Maybe it can be broken, but why go through all that effort? lol

[winged pike]

My friends want to do ctf solvings in tiktok

[gentle bronze]

Hello guys

I need help

[winged pike]

Their host id linux

[gentle bronze]

I need someone to teach me how to hack a instagram

[subtle beacon]

that statement doesnt seem suspicious at all

[winged pike]

https://tenor.com/view/i-guess-bro-gif-12146675677296761392

[torpid onyx]

help anyone

[subtle beacon]

where could i get resources for security for a nodejs/react app!?

[torpid jungle]

TikTok is running a CTF? lol.

[torpid jungle]

Take a look at OWASP

[winged pike]

noo

theyll open a live

[subtle beacon]

thanks for the pointer kind stranger ily

[winged pike]

here tiktok is famous so

[torpid jungle]

No problem 🫶🏽

[gentle bronze]

Bro wtf is this

[crisp star]

You think that's ethical?

[gentle bronze]

I am not a ethical hacker

[torpid onyx]

Wow

[limpid pecan]

Xd bro don,t waste your time on such things.

[subtle beacon]

🤯

[limpid pecan]

Be a ethical hacker do hacking for privacy and security and to stole someone account

Thats unethical to stole insta

[subtle beacon]

bro got ragebaited by someone now he wanna get them banned 😭

[subtle beacon]

is there really any reason not to use nestjs for my backend except its kinda bloated thats all i could gather from searching on google

[crimson ether]

hi guys. I am new here and had some questions. Starting to learn cybersecurity, need some help to understand where to start and from what to start

[haughty pelican]

Anyone has a 0day account?

[woven anvil]

@gentle bronze
Please make sure to go through our #👥・info and #📜・rules
This is an ethical CyberSecurity server. Don't ask for unethical things here.

[sly basin]

Start learning Kali

[woven anvil]

Before networking?

[sly basin]

After

[woven anvil]

What do you mean by this

[whole patio]

There is no "Learning Kali", there never was

[woven anvil]

Can learn linux + the tools that come on kali. But you can do that with or without kali.

• Networking
• Hardware
• Operating Systems
• Applications(Programming)

[whole patio]

Its just linux.. and some tools, that you could install anywhere else. And you don't need to learn about all of the tools.. "learn the craft, not the tool"

[woven anvil]

What do you mean by this.

[sly basin]

The craft will be done through tools

No?

[whole patio]

The tools mean nothing, if you do not know what you are doing, how you are doing it and what you are doing it to. Also tools change all the time, and there are usually numerous alternatives that do about the same

[woven anvil]

Not understanding the infrastructure that the tools run on means you are blindly memorizing + copy/pasting things.
This means that there is no ability to "think outside the box", because you won't know what or where the box is.

[whole patio]

Do not start with the tools

[sly basin]

I see

[woven anvil]

And in Cybersec especially, if someone thought about it, then its not new.
So you are pushed to constantly think outside the box.

[sly basin]

Well I know a little programming and some basic cybersecurity concepts, OS and networking, what advice would you give me? What should I learn next?

[whole patio]

I would still point you to #👥・new-member-guide

[woven anvil]

Everyone has a different view on that.

My personal preference is to start homelabbing, and spin up all different types of servers/setups/networks/whatever.
Learn OS lifecycle management.
Learn OS Config/Policy management/enforcement
Learn Advanced Networking like your own VPN + Exit nodes, or BGP
Learn advanced programming concepts, like how a language truly works based off their official documentation,
Learn advanced hardware concepts, like how a language compiles down into assembly, and runs on a CPU, and how a CPU is even built in the first place.

Cybersec is taking each of those fields, and being able to find common misconfiguration issues, either done by the programmer, or the network administrator, or even in the design of the spec itself, and then being able to protect against it, understand proper documentation + reporting of these things, and how the legalities and "Scoping" works.

That being said, the resources in new member guide as Eris said will help you start understanding the concepts if you aren't sure what the heck im talking about above.

[sly basin]

I never looked at it this way, thank you for this.

[woven anvil]

This is also why a lot of people who work in the industry will say it takes years to even get started, because you essentially have to learn what IT people learn, to understand "What is the correct way to configure an SSH server", so that you can also practice and understand "What are the wrong ways to configure an SSH server, why are they wrong, and how does it open up my surface of attack."

vs just learning a tool that attacks an SSH server. If the server is still slightly misconfigured, but not enough for the tool to work, then you are just stuck, and don't know why.

or if its a complex network

[sly basin]

Got it, thanks

[north fog]

Can someone help me with a CTF?

It's been 4 hrs and I'm still stuck on a 50 point pwn challenge

[whole patio]

Whatever you decide to do, if unsure - make it something that gives you more opportunities.. home labbing is fantastic

[whole patio]

What CTF is that

[north fog]

KnightCTF

[whole patio]

As a general rule no one in cybersecurity is going to help you in a live CTF.

Those are meant to test what you are capable of, not how many people you asked

The usual advice still applies though.. don't get stuck in rabbit holes.. if in doubt, enumerate more

[north fog]

I see

Btw

How do I enumerate?

It's my first live ctf

[tender cypress]

Can anyone recommend a good online course to get into cybersecurity?

[near mirage]

Yooo

Any high educated users wanna help me on a certain topic/ task ig. I would enjoy the help

[kind zealot]

#👥・new-member-guide
Google cybersecurity course

[kind zealot]

Eloborate 👀

[brazen bane]

yo

[near mirage]

Ight so long story short. Somebody hacked into my social and changed my email and phone so I got no way of getting back in ts been like over a month now n I contacted AND emailed their support and they don't do shit

What do I do?

[brazen bane]

anyone free to help me..?

[whole patio]

Just ask the chat

[whole patio]

If whatever service providers support is not going to help you, then neither is anyone here

[tender cypress]

Thank you

[hard steeple]

yeah sure!!

[near mirage]

Why Is that though? It's not that they won't help me it's that they won't respond like they literally don't do shit

[whole patio]

There are two answers to your question

1st
Because if the support isn't going to help you, then you are in the same situation as some random stalker who wants access to any account he wishes, and is looking for people to do that for him. Stalkers lie and regularly tell us some sob story.

2nd
It would be highly illegal - this is not legally "your" account, it is the account of that social media service.. and you are asking us to attack their infrastructure to obtain it.
This is like me asking you if you would be so kind to break into a bank, cause I have, or at least used to have, a bank account there and don't worry.. I only want you to take "my" money, not other peoples money.. I have no proof how much money that would be, but just believe me.

As discord logs and monitors everything we say and do here, its just not smart to ask and to agree

or, TL:DR - its against the #📜・rules

[near mirage]

Ian say nothing bout attacking or yall doing anything for me just for advice and answers

But yes I totally understand the legal and weird side of things

I'm jw if my shit gone forever

[whole patio]

Oh, okay, my bad then
The advice is "contact their support about it"

[near mirage]

Had 5 years of memories on thst acc

[near mirage]

Tragic

[whole patio]

we get similar requests about once per hour.. so the answer tends to be "efficient" 😉

[bold rock]

Anyone taken comptia a+ I'm doing my test tomorrow

[white grail]

What should I do after finishing the Google Cybersecurity course on Coursera? I want to focus on penetration testing and in the red team. Should I get an EJPT or other certification, improve to program and scripts, or do something related to THM or HTB?

[whole patio]

Entirely up to you, all of those are covered in either #👥・new-member-guide or #📜・certs-and-career

[woven anvil]

@cunning meteor
We don't discuss that here, especially as >90% of the stuff there is scams.
Do not ask for this in our server please.
#👥・info
#📜・rules

[wheat igloo]

i need help about cloning a website

[white grail]

Okay, thanks, I'll keep that in mind. It's just that I don't really know how to start, it's quite overwhelming.

[whole patio]

It is

Thats why we have those links 😉

[blissful frigate]

Anyone who knows reverse engineering?

[fluid depot]

https://dontasktoask.com/

[crude wraith]

How do you know what part of cyber security is interesting to you as a person before going out and committing to a specific team?

I see red team, blue team, but ... not even sure what I like...

[knotty zinc]

Best Ai for generating code?

The only thing im really worried about is if the chat gets laggy after you send too many messages

[whole patio]

If you are unsure, you may need more fundamental knowledge about it and are not locked in into one of them anyway

[crude wraith]

Thank you @turbid glacier and @whole patio will do more research into fundamentals... this really helps ❤️

[cobalt mural]

What do i do to self host ai that can search the web for me?

[wide sky]

How can I start my hacking journey ?

[chilly merlin]

#👥・new-member-guide

[drowsy plume]

jailbreak prompt 🙂?

[mortal sigil]

Is there a platform to get more experience with linux outside of tryhackme?

I could, but I’m still inexperienced with it and wasn’t sure if there’s any other platforms that helps you learn how to use it

Thanks

[visual moon]

Hey 👋 guys how are you all doing ?

[chilly merlin]

download vmware or virtualbox and follow the instructions on how to burn a linux flavor disk on there and test it out in a secure machine

i wanna os swap windows for kali linux but idkkkk, is kali even good

[kindred parrot]

Is ZeroTier or TailScale better?

[kindred parrot]

Just install in a vm and test

[chilly merlin]

thats what i was thinking

[long cosmos]

Ubuntu is most or one of most stable - used as server os

They have more drivers for random obscure devices also

[kindred parrot]

I use fedora

[long cosmos]

Anything with rolling software updates like arch or fedora has more up to date stuff. Debian based stuff is extremely stable but slower moving(updates in waves)

[long cosmos]

It’s Debian, so really stable

Based on Debian I should say*

[chilly merlin]

i figured what i would do is os swap for windows for kali to user for everyday tasks, then install my usual virtualbox to burn tails to use for all the special stuff i had

[chilly merlin]

^

[long cosmos]

Cool. Tails is best used on a thumb drive though

Cause it can be accessed from any computer as long as you remember you’re encryption password

[chilly merlin]

yeah that makes sense, just didnt wanna have to dual boot or hot swap through the bootloader

[long cosmos]

And it can be immediately unplugged to shut ssystem down without harm

[chilly merlin]

makes sense

[long cosmos]

Would recommend using vm to get used to Kali to start

Or any Linux distribution

[chilly merlin]

right

[long cosmos]

Just be careful when doing an actual dual boot cause windows loves to steal your boot loader

So you have to unmount or unplug the windows drive before installing the os

That’s the easiest way/most straightforward

[karmic shale]

Hey beginner here - I'm struggling with enumeration. Any tips to get better - where should I start?

[long cosmos]

Networking, pen testing , and digital forensics channels prolly have more knowledgeable people on. Also check out the “new member guide” channel

[mortal sigil]

Thank you

[chilly merlin]

Yup

[torpid jungle]

I maintained an Arch server for a while. Never again, lol.

[woven anvil]

I haven't used tailscale, but its going to be "wireguard vs zerotier" essentially.
If you want to self-host the admin interface(and therefor, unlimited devices), Zerotier has "some" options, but Netbird feels much nicer than headscale imo for a wireguard implementation.

[wet zealot]

do you know any good digital forensics channels? If so, how'd u find them?

[long cosmos]

not off the top of my head

lookup how to use wireshark, you should only do stuff on your own network btw (illegal otherwise)

[woven anvil]

CachyOS is coming out with a server distro

[long cosmos]

may be a bit much to start idk.

[long cosmos]

will have to take a look

[woven anvil]

@cobalt terrace
Don't ask for unethical things here.
Read our #👥・info and #📜・rules

[torpid jungle]

Looks cool! I’d never heard of that distro. I can see it’s got an optimized kernel, but they also claim stability, so does that mean it’s not rolling release?

[woven anvil]

I don't know what they will do with the server distro, but their current distro is rolling release.
Their claim of stability is from:

• Optimizations in the kernel + compile flags for applications in the repos
• Pushing tools like Octopi + paru that attempt prevent things like incomplete updates
• Giving users GUI buttons to fix common pacman/repo issues.

So take it with a grain of salt, as it is still arch. More details on their kernel changes can be found here
https://wiki.cachyos.org/features/kernel/

[whole patio]

I saw this on the arch discord, never looked at cachyOS again

[woven anvil]

Having used it, it for sure doesn't feel that way at all

[whole patio]

My SO has/had it installed, and the system broke twice already

[woven anvil]

What broke?

And was there a "fix" for it?

[long cosmos]

You guys have any good cli only distros that fit on 1.44mb floppy disks?

Preferably bash

[whole patio]

Wasn't my system, I don't know

[long cosmos]

I’m just using dos rn

[woven anvil]

how much RAM on the system?

[long cosmos]

Don’t like it. Very much

630kb

Kolibri doesn’t work

So I’m just thinking a cli would be better instead

[whole patio]

fli4l is still a thing

[woven anvil]

Ok, because I do support a few friends that have switched to linux, so I like to know when things happen.
I won't say it never breaks. For sure have had a few audio things and what not. But it has been easier to support remotely than anything *buntu based.

[narrow quarry]

im an investigative journalist and has been scouting out prime cases in my region... this has become quite hard since digital info is soo hard to find nowadays( maybe coz of my skill level) i practice basic paint but can't seem to push more where do I start

[kind zealot]

It looks like you don't know where to find
Try learning google Dorking/OSINT

[narrow quarry]

exactly my problem dunno where to start looking im effectively blind... will do but google dorling gets u only too far

i can't exactly tell u what I need but my use case is kinda "different"

[manic plinth]

guys

who can help me with forensics flag

dm me

[woven anvil]

A CTF?

[manic plinth]

kinda

but not fully

[woven anvil]

Also, don't spam across channels please

[manic plinth]

sorry

but thats the final flag i need to get for my assignment

i did 132 flags across 2 weeks

im a beginer and im really stuck at it for few days

so just seeking guidance

[woven anvil]

We typically don't help with flags here, as they are suppose to be a show of your ability to perform, not your ability to ask others.
But common advice i've seen is don't fall down a rabbit hole, take a step back, and if there is anything that you are unsure of, look it up and better your understanding of it.

[manic plinth]

yeah i have a file

jpg and thats blank

and ive got instructions about it

and then i gotta decode but thats eating me up

so was wandering and asking for help

[surreal raven]

Sure

[thorny ember]

hey, i got hacked recently on discord and instagram and im pretty sure roblox, they sent crypto scam messages to everyone i know and on my story too, even on discord they sent it to everyone and im really scared they go for something else. i changed the passwords and i logged out of google on my pc and i dont know what to do..

[manic plinth]

dm??

[woven anvil]

back up your data, and reinstall/reset the OS of devices you use to access those services.

[thorny ember]

so i reinstall w11?

[woven anvil]

I don't know what devices you have.
If you have an iPhone, make sure it is up to date.
If you have an android, go through your installed and running apps to make sure there is nothing weird there.
On your computer, you can use something like Malwarebytes to scan, but if you find anything on any of the devices, you can wipe.
Make sure you reset the password for the account from a known clean device before the wipe (so reset the google password before resetting an android phone), and make sure to go through all your account settings to:

• Enable 2FA
• Ensure any recovery phone numbers only match the ones you are expecting
• Ensure any recovery emails only match the ones you are expecting
• Check previous login sessions, and see if you can "sign them out"

[thorny ember]

alright thank you so much! ill install malwarebytes asap

[woven anvil]

Backup things you care about, and make sure to scan them multiple times with multiple scanners if you are putting them back onto any device.
Anything that is "kinda sketch" like a crack or anything, just throw away and don't touch.

[cerulean peak]

Hey I just want to confirm something....
Is it okay in these times if I use AI for making projects for my resume. I mean planning all the features file structure data flow APIs, authentication to use etc. but writing code part should I use AI for it?
If yes how much and in which way should I use AI.

[thorny ember]

i scanned my whole pc (180k files) and there were 5 resolved files and another 6 unresolved items

with bitdefender

Update it’s a black screen now and I can’t do anything @woven anvil I closed my pc and it didn’t do anything it’s the loading cursor and a black screen on 2 monitors….

[woven anvil]

keep it off then, and you are going to have to recover your stuff if you need any of it with a live linux USB, or you can just ignore it and reinstall the OS if you don't need your files.

[thorny ember]

Alright I left the house I’m grabbing a love Linux usb right now

[torn oak]

Excuse me, can some one help me, im stuck on this tryhackme
What is the name of the service that lists Systems Internals as the manufacturer?
Isn't it Sysinternals, but it can only hold 10 letter. Any idea?

[ocean gale]

try PsShutdown

[torn oak]

Dude Thanks

[rich herald]

Can anyone help me with other links I can deploy my full stack web app without being suspended .. render and vercel ain’t helping

[white grail]

Is it possible to work in cybersecurity while studying for a FP in Spain (I think it's equivalent to a community college) and being self-taught while doing that?

[sullen cargo]

i really need help decrypting something

this is what chat gpt told me:

I can’t actually decrypt this as-is. What you posted looks like encrypted or hashed data, but decryption is impossible without the method and key that were used.

Here’s why ⤵️

What this looks like
• Long hex strings → commonly ciphertext, hashes, or keys
• Base64-looking parts (e.g. gZhP2-Sf1GsQtSEBDSbA)
• Colon-separated segments → often salt : hash or iv : ciphertext
• Special characters (^ % * & ?) → suggests password-based encryption or hashing

please dm me if you think you can help

[crisp star]

Need more context.
What kind of file format is it?
Is it CTF related?

[sullen cargo]

dm me

[slim hamlet]

gyus is there any way i can reset my amazon lenovo thinkpad? ig it is locked.... it keeps showing me chromeos

[rose inlet]

So, my provider doesn't have a public IP for each user on the network. If I look for the public IP, it's the provider's public IP. If I get it, it won't reach my terminal; it will reach the internet provider's central office, and they won't know which Wi-Fi network is receiving that information or which one to send. Therefore, the best solution would be to find a free, anonymous web server, you understand?

[slim hamlet]

🙂 nahh

[rose inlet]

@slim hamlet I don't have a public IP address, which server can I use to host some programs?

[iron bridge]

like what u wanna host ?

[slim hamlet]

ya what u wanna host?

[iron bridge]

[rose inlet]

Can I speak?

[iron bridge]

[rose inlet]

It would be a RAT for laboratory testing.

[whole patio]

I don't think there are "amazon lenovo" thinkpads. Find the exact make and model of your device, look for guides there

[slim hamlet]

i mean it was provided by amazon and it is locked.. by the IT admin

[whole patio]

Well then either accept it, or ask the admin to unlock it. We don't help with likely stolen devices.

[slim hamlet]

sure

[rose inlet]

[iron bridge]

[rose inlet]

six seven

Are there any Brazilians here?

[iron bridge]

well u can buy a server for some bucks they have all ports open

[white grail]

Is better to do first the eJPT or the Security plus? Or train with THM

[rose inlet]

He and Cadbury? How much would it be? Would CasaOS be a good option?

[whole patio]

Any VPS and see which images they allow you to install

No use asking here - take a look at providers

[rose inlet]

Could I leak some data to you guys, or is that not allowed here?

[whole patio]

#📜・rules see for yourself

[rose inlet]

It's always good to ask.

[whole patio]

If you still have to ask after reading the rules, assume its not allowed

[rose inlet]

For me, as a Brazilian, are you able to understand me perfectly?

[whole patio]

Dunno

[golden marten]

Guys, how can I join locked Voice Channels? All of them are locked :((

[whole patio]

I don't know what you wanted to say, but I can understand what the words you chat mean

[whole patio]

Ask about 5 or 6 times in #💬・old-gen-chat

[rose inlet]

For me, learning English doesn't make much sense because it becomes meaningless in programming. in my opinion

[golden marten]

Let me search, thank u sir

[whole patio]

If you say so. Kinda not belongs in #👥・help-me though

[distant coral]

hello

[rose inlet]

@whole patio Thanks!

[distant coral]

anybody can help me bypass persona kyc for outlier.ai

am currently using vcam to spoof

[whole patio]

No #📜・rules

[devout linden]

Check out the https://discord.com/channels/990435451334688768/1182147223266537553 thats not allowed

[rose inlet]

Do you know of a website that transfers and withdraws money via Pix?

no account verification

?

[chilly merlin]

hey guys, i need your help, someone stole my gaming account on which i spent 8+ years. i did had the account protection codes but last night i try to login back using that code but since i used that code now i no longer change the phone number attached to it, i have to wait 7days but after 6-7 hours thief again changed the email adress usning phone number.

[devout linden]

https://discord.com/channels/990435451334688768/1182147223266537553
DOes this fall under illegal activity?

[devout linden]

Report it to the platform nothing we can do to help here

[whole patio]

Contact the support of whatever game this is

[rose inlet]

It would be KYC.

[rose inlet]

sorry

And in my country, they are very strict about these things.

[chilly merlin]

they are idiots, i email them but they keep repeating contact us in-game only. but every time i contact them in-game they ignour me and end the ticket without varifying anything they didn't even ask a single question from me

[devout linden]

same with mine but thats avoiding laws/regulations and thats not allowed here

[whole patio]

Still their support is the place to go to

[devout linden]

Keep sending emails thats all we can advise at this point

[chilly merlin]

i do have the phone number which thief is using,

[devout linden]

again send this to the support team there

[whole patio]

great, still a case for the support

Is the core message here coming across?

[rose inlet]

Can someone recommend a vulnerability automation tool for vulnerability testing websites?

[shell pier]

zap

pretty user friendly

[rose inlet]

Github url?

[shell pier]

https://www.zaproxy.org/download/

[whole patio]

Zaproxy, it's already in all the cool repos

[golden marten]

OpenVAS, Zaproxy, Nessus (free)?

[frail warren]

i need your help, i'm just drowning in an ocean 😭

[white grail]

Is it possible to work in cybersecurity while studying for a vocational qualification in Spain (I think it's equivalent to a community college) and being self-taught while doing that?

[brisk tree]

Yes it is

Just give little time everyday

Rest i believe @steady palm is more experienced

[steady palm]

100% Agree

[final ingot]

hey yall, i need help i want to track my older sisters activities but im not sure how to becuase she has ran away with her boyfriend and i just want to keep track or sum of her thats all.

[brisk tree]

#📜・rules
We don't do that

That's illegal

[foggy wave]

can anybody tech me how to hack and that stuff

[whole relic]

how was your experience using OpenVAS ?

[foggy wave]

pls

[whole relic]

look at the #👥・new-member-guide

[foggy wave]

thanks

[golden marten]

I'm not to good with OpenVAS to give a valuable opinion, but based on my experience, it can find many vulnerabilities and attack vector, but u need to need to customize it to extract the most value. It has lots of tutorial online, EZ to setup, can run it while u testing manually to save time, so I think it's powerful and worth a try

[whole relic]

thanks for you're opinion

[whole patio]

you had to know that is a "hard pass", right?

[iron bridge]

it would be 4-5$ ig , idk about casaOS

[burnt osprey]

Rate my routine, as somebody who is completely new to even using computers on my journey to become a read teamer:

Phase 1: Basics & Essentials
[1] Learning Computer Architecture & How it works / [STATUS=DONE]
[2] Learn Networking (Via THM Premium Presecurity) / [STATUS=DONE]
[3] Complete Cybersecurity 101 & Learn Python / [STATUS=NOT DONE]
[4] Move onto JR Pen tester & Set up my virtual lab / [STATUS=NOT DONE]

Appreciate if you could add or make this better, as i am really dedicated lol

[broken fossil]

Hey I need help

[crimson harness]

Guys is it possible to change apps time by changing phones time

[whole patio]

depends

[whole patio]

One would assume that you you would ask a question then

[crimson harness]

Ohh

[crimson harness]

Is there any way to find the IP of an website

[broken fossil]

Yah

[whole patio]

Of course, its public

[crimson harness]

The real IP?

[whole patio]

Thats like asking whether you can see the nose of a person in front of you

[crimson harness]

Hmm so how find that nose because I'm blind

Lol

[whole patio]

first of all, there is no "real IP" to a website, there are IPs and address translations and CDNs so that you can find the IP that a wbsite is accessible to you - right where you are

ping domain.tld is showing you that

[crimson harness]

Ohh so I can't see whr the website from?

[whole patio]

What makes you think there is a "where from"?

if you ping the kali repository URL, you get lots of IPs, depending where in the world you are pinging it from, and they are all real

[crimson harness]

Sry bro I'm not advanced like u 😭

[whole patio]

you can triangulate the geopgraphic location of a server by its ip by pinging it from all over the world, too - if that is what you mean .. can probably tell the nation, maybe region

"real ip" is so 1990

[crimson harness]

Yeah the website is hosted in cloduflare

[whole patio]

Really dont know where this concept of "real ip" is even coming from.. would you think there is a "real ip" to the google search engine?

[woven anvil]

@magic token
Please read our #👥・info and #📜・rules
No piracy discussion here.

[unborn ibex]

Can you send a snippet of what you’re trying to inject

If you post it here more people can help

[barren obsidian]

i cant post, i dont have image permission

[unborn ibex]

Just copy paste it into the chat

[whole patio]

well you are not trying to inject an image, do you

[barren obsidian]

im not sir

[whole patio]

so post the string

[barren obsidian]

how can i obtain image perms?

so i can post the screenshot here

[whole patio]

raise rank to level 25

couple of months maybe

[unborn ibex]

Just copy paste the string of code

[barren obsidian]

can i dm it to you?

okay

[unborn ibex]

No just type out the sql code that you are attempting to inject into the website

Well this isn’t sql so that’s probably your issue

[whole patio]

also you are trying to inject into a real website

[unborn ibex]

This is just a string of randomness

[barren obsidian]

im pretty new at sql injection, can i have some tips?

[barren obsidian]

im trying to bypass it using a hackbar

[unborn ibex]

Wait hold on is this a real website or what is this for

[whole patio]

It is a real website

https://diversityplus.com/

[barren obsidian]

yup

[unborn ibex]

Dude we don’t help people with stuff like this

[spice gull]

com kids always trying to do something unethical lol

[unborn ibex]

You know sometimes I think I’m just too optimistic that somebody is actually looking for help with ethical skills.

[barren obsidian]

im sorry, i was just learning.

[whole patio]

stop lying already, its pathetic enough as it is

[unborn ibex]

You don’t learn on real websites unless you like the government arresting you

[barren obsidian]

oh

where can i learn such these stuff without getting arrested?

[unborn ibex]

#👥・new-member-guide check this for resources. I recommend something like TryHackMe or HackTheBox

[barren obsidian]

thank you

sir

[unborn ibex]

And stop doing shady stuff

[whole patio]

By now I don't really care what peoples ambition might be.. unless I know them quite well or personally, the answers stay the same

[unborn ibex]

I like helping though it just seems like most people want help doing unethical stuff. Makes me sad 😔

[whole patio]

I do, too.. part of me just assumes that there are not more people with nefarious intents, its just that those who can't get it done are the ones that cry for help from an adult the most

in a way it is beautiful 😉

[unborn ibex]

Yeah that’s totally fair. Also I think tons of people think it’d be so cool to hack something but don’t actually have enough patience or desire to learn so they just run here to get someone to do it for them.

[whole patio]

That's certainly how it is

Oh well 🙂 The next lost roblox account is probably just around the corner 😉

[brazen bane]

Can you help me

I want to know what is mac address

[whole patio]

What have you found out so far on your own?

[brazen bane]

Actually today I was in clg.. i saw our new wifi router

I asked my Class mate when they will give us id pass to connect to it

He said it's going to be a long wait.. i asked why not take it from our sen. He said the wifi work on Mac adress principle one device only

[whole patio]

Thanks for the background info, but what have your found out so far about what a MAC address is?

[brazen bane]

@whole patio I know that every device have ip adress which interny use to diffentiate devices. Some like that

[crisp star]

[whole patio]

Did you never enter "mac address" and "wikipedia" into a search engine?

[brazen bane]

Nope

Okay mb

[whole patio]

alright.. well mac address are actually voodoo based rune magic with santeria origins

[brazen bane]

Nice I didn't even understand a word

Like mac adress is permanent type of id or digits given to a device

[whole patio]

well you didn't before, so there is that

[brazen bane]

Ip can change but not mac

[whole patio]

mac is not supposed to change, yes

[brazen bane]

But it can change

[whole patio]

Maybe

or "it depends"

[brazen bane]

Software or hardware

[whole patio]

if your house number is an ip address, then your houses geolocation is the MAC address.. yes.. you "can" pick up the house and move it.. but it is not meant to be done

and unless you know what you are doing, people broke their system fidgeting with hardware IDs like mac addresses

[unborn light]

Finished the hack the box , the free part and really focused on cyber security if I want to get deeper into it should I just pay for the subscription

[crisp star]

If people could use google that would be great

[whole patio]

My favorite stories are the ones of people that got banned by some kernel level anticheat online game software.. changed their hardware IDs with some tool they found online, and now their whole system is "New number, who dis?"

[brazen bane]

So I mean what the significance. Is it use to identify device is it meant to secreate. How it is diffent form ip. Why not ip treated as mac. If there is limitations in ip then why not upgrade it. Why to create whole new system

[whole patio]

cause the assumption is that the same mac address means its the same device.. so your router recognizes you and gives you the same IP it usually does for example

also you can say new, unknown mac addresses that they should go pound sand, no internet for them.. which is your situation

[brazen bane]

Ip adress is given by wiFi ! I thiught every device have their own

Well that's explain how vpn works ig

[whole patio]

and how does the wifi router nows whether a device is the same device as the one yesterday?

has nothing to do with vpn whatsoever

[brazen bane]

Brake brake..

One doubt ..ip exclusively unique for each device

Right?

[whole patio]

certainly not

IPs are assigned.. nothing says they have to be assigned one way and not a different way

[brazen bane]

Ip is dependent on..? Hardware or isp or what..?!

[whole patio]

whoever assings the IP

You can assign your own IP to a network interface.. or let some service do it for you

remember when I said IPs are like house numbers? If you move to a different city you do not keep your IP

[crisp star]

Let us just ignore that private and public IP exist

[brazen bane]

Oh.. i have phone x. To explore web or internet I need ip. I can get ip from a service Like sim or wifi or can generated my own

[whole patio]

feel free to tell them

[mental vine]

Anyone knows the vulnerability which was used in the Sony hack, 2014

[brazen bane]

Thanks ig..

[crisp star]

Google says none

[mental vine]

Thanks

[whole patio]

Pretty sure it was mainly social engineering, there was a darknet diaries episode about it a while ago

[haughty dawn]

@whole patio MACs can't be used to reliably identify a device. it's easy to spoof, and most OSes now have wifi mac randomization as a built-in feature for privacy

[whole patio]

I know.. but I don' think that this would have helped the OP understand the difference

they can be spoofed, but they are not supposed to - you have the vendor part, you have router assigning addresses based upon them, etc..

[kind zealot]

https://tenor.com/view/rust-cohle-true-detective-gif-16789583124365199963

[whole patio]

still, quite often - same MAC is interpreted as "my old buddy device XY, here, take your usual suite"

[rough kayak]

How to start hacking as a 14 yr

[whole patio]

we collected some starting resources #👥・new-member-guide and here #🛠️resources-tools
You may or may not lack the solid foundation in IT though

Alas, this is not a field that can get easier just because one is new to it

[keen atlas]

Bumping this

[haughty dawn]

doing things you're not supposed to is fun though :)

[haughty dawn]

definitely still common, but a security flaw unless there are other controls in place

[haughty dawn]

i started around that age. the resources Eris pointed you to are great. main thing at that age is really dive in and learn how computers work

[woven anvil]

It sounds like a DRM controlled device, and it sounds like bypassing its security would be breaking your terms with the ISP.

[torpid jungle]

More or less. In a cell network your carrier assigns the IP to you, and I’m pretty sure you can’t change that even if you wanted to (I don’t understand the specifics because in telecom engineering you have abstractions like “subscriber” and “base station,” etc, which are not present in Internet networks).

In your WiFi network, most devices just receive an IP assigned to them from a DHCP server, which is a special role in the network that handles this automatic IP management, to make it seem magical for users. Or you could self-assign an IP, but then you also have to configure your interface to have all the settings you need to establish proper routing, etc, in your network (and you run the risk of colliding with an already assigned IP).

[torpid jungle]

Also, to clarify further, the DHCP server is usually running in your ISP-provided gateway. So it’s not like an actual machine, but just software running on the router along with all the other stuff needed to run a LAN.

And DHCP usually only works in LANs. Your gateway receives another IP from your ISP through other protocols (usually PPPOE).

[rough kayak]

Thanks man

[crimson obsidian]

hello, i am looking to make a small external storage/ server
i remember in my CEH course our teacher talked a bit on mini server and having back up. using the info on disk 1+ info on disk two = info on disk 3.
in my imagination i am think to make D 1 & 2 1tb each SSd and D3 an HDD
is this even fesible? can someone discuss it more please or show where to search for more info

[burnt osprey]

Ur amazing

[whole patio]

Do you mean a RAID setup?

[woven anvil]

A bunch of ISPs do normal DHCP for home WAN connections too.

[woven anvil]

If it is, then RAID makes for a terrible backup.

[crimson obsidian]

no

[woven anvil]

What type of data is going to be stored on it? File level? or Block-level?

[frail nexus]

Hello all

[crimson obsidian]

mainly normal media like old vids and pics, its going to stay offline and in my house so no need for any major security procedures

we have two laptops and around 4 phones, and almost everything is full now.

someone suggested just a normal esternal storage, i plug it and dump everything on, then store it in the drawer

[woven anvil]

So your understanding of the suggestion is to move things off of the laptops and phones to make more room, and store it offline separately for security?

[crimson obsidian]

yes but not for security

just for the sake of storage

[woven anvil]

So, I will say that you have been lied to from the start.

That is not a backup.
If the data exists in 1 spot, then there is no backup. That is just where the data is.

Any single piece of media can fail. So important things I want to keep, i would not trust to that process.

[crimson obsidian]

but i was seeking something for easy backup in case of a disk goes bad suddenly

[woven anvil]

So your mini-server idea, you would want to break it down into what is important.

• How do you conveniently get data to your server, so its not a "chore you forgot to do" in the future?
• If 1 disk in the server dies, how much redundancy do you want, so it can tolerate the failure and keep running?
• If the server itself catches fire or anything, how are you assuring yourself that the data can be restored?

[crimson obsidian]

here what my undertanging from my class is:
disk 1 value 1
disk 2 value 0
disk 3 value = D1 + D2 = 1
lets say disk 1 went bad, i can know the stored value from the other two => d1 value = D3 value - D2 value = 1

this way instead of needind a 1 tb to back a 1tb device

[woven anvil]

What you are explaining right now is called RAID.

This is used for redundancy to keep a server running, and is not the same as a backup.

[crimson obsidian]

maybe 1 tb will back up 2 tb total

[haughty dawn]

this is raid with a parity disk

[crimson obsidian]

ouhhh ok

[woven anvil]

The key difference is if you make a mistake, you can't revert to a previous point in time
and if the host has a major malfunction, all the disks inside are at risk.

[crimson obsidian]

i learned about the idea 2 years ago so my memory is not clear

[haughty dawn]

search on backups vs redundancy

[whole patio]

RAID is not a way to double your storage, it probably reduces the available storage space

[crimson obsidian]

perfect, thank you

[woven anvil]

i mean, RAID0 can increase your storage.

At the risk of "if 1 disk dies, you lose everything".
Usually not preferred.

[crimson obsidian]

i aint doubling any storage with magic, its just like instead needing 50% to back up data, i would need around 33% of it to keep it backed up

[woven anvil]

but yeah, RAID almost always gives you reduced storage than the sum of all the disks

[crimson obsidian]

everything i am talking about is local so no need for fancy stuff since its personal use

[woven anvil]

Everything im talking about is local too

[crimson obsidian]

yeah precisly

[woven anvil]

including having your "backups" be a separate device/computer than the device that has the primary data.

[crimson obsidian]

i will try to draw an illustration of my imagination

[haughty dawn]

i think you'll save yourself a lot of time if you look up raid levels and backups vs redundancy first

[crimson obsidian]

i cant share the screenshot >: [

[crimson obsidian]

it worked

what i wanted was the raid 5

striping with parity

[woven anvil]

Now look up all the reasons why RAID5 is not recommended.

[crimson obsidian]

🥲

@woven anvil @haughty dawn thank you both for the great help

[woven anvil]

@civic grove
Don't ask for help with unethical activity here.
Please read our #👥・info and #📜・rules

[vapid pawn]

hi i am a desktop support engineer and have 2yr exp and i want to switch in IAM role. i am not a coding guy can anyone here advise what's the best option for me?

[teal sigil]

Hello this is my first day trying to learn cybersec but i didn't find any good public learning source any tips plz

[lapis badger]

In termux I want to install an Kde plasma with not apps like Firefox and libre office but I am stuck on Termux11 and any other local desktop viewer, --shm-helper error is actually a PRoot and Android 15 compatibility issue

[versed fjord]

hey

[unborn ibex]

#👥・new-member-guide

[unborn ibex]

Maybe start with python and powershell

[torpid jungle]

Wow, for real? I didn’t know that, thanks for sharing that! Is there like authenticated DHCP or something?

[simple vine]

look at job postings for the kind of role you want. tailor your resume to emphasize the skills you already have, and look for opportunities to build the skills you still need in side projects. look for opportunities to apply for a transfer within your own organization or see if you can get a referral from a colleague or friend for roles at other orgs, if you can.

[woven anvil]

Some of them will bind it to the MAC address of the onsite hardware(ISP Router)

[torpid jungle]

Ah, that makes sense.

[woven anvil]

but others don't care after the modem connection

[torpid jungle]

Yeah, that seems really insecure, lol.

[woven anvil]

My ISP does a weird "PPPoE Passthrough", so i technically can have multiple WAN IPs without extra cost at home.

[woven anvil]

insecure as in one could interact maliciously with that DHCP server?

[torpid jungle]

As in, what’s stopping anyone from just plugging random hardware in and getting a free uplink, lol?

[torpid jungle]

ISPs do a lot of weird shit that the IETF would find questionable.

[woven anvil]

Usually the modem communication that is paired to the other side, which you normally can't change out.

But if we assumed that they ran it via ethernet or fiber and give you just that to work with, then you are still at the mercy of how they have it physically hook up and routed on the other side.

If someone hasn't paid for service, it may not be plugged in at the street box(where they would need a tech to go plug it in), or they may be blocking traffic for whatever port that the line is plugged into.

If we make it a smaller scale, and we think about a building with tenants, and one doesn't pay, then I am disabling the port on the switch/router that is connected to their physical line. At that point, it doesn't matter what hardware they plug into their side, they won't get anything.

[woven anvil]

Another thing is the pool size of the DHCP.
Most of the time, it will only allow 1 IP on the network. This confuses people a lot if they go to switch out their routers, and the new one isn't getting DHCP. Its because the old one still has the lease.

I say most of the time, because im sitting here with 2 IPs

[torpid jungle]

Now it seems obvious, can’t believe I didn’t think of that 🤦🏽‍♂️😂

[glass maple]

Is anyone have good experience in Client-Side Manipulation or Frontend Debugging. ? I am in need of ur help

[woven anvil]

You are better off asking the question instead

[vocal frost]

Do you download nmap through Kali Linux or your own OS?

[glass maple]

web game challenge. The final boss feels intentionally hard, and I believe the solution involves understanding and modifying the client-side source code (frontend logic).

I’m trying to learn how and where to change the code safely so I can defeat the final boss and get the flag. If anyone can explain the approach or teach me how to analyze this kind of client-side logic, I’d really appreciate it

[haughty dawn]

what?

[haughty dawn]

right click > inspect or F12 to bring up browser console

[woven anvil]

We don't assist with CTF, as they are suppose to show your ability to find the answer.

Unless you mean game hacking. If so, please refer to #📜・rules #6

[glass maple]

yes i understand but i cant really get like high damage or speed or health , i only got to change the names

[magic token]

Mb twin

[glass maple]

ahh its not allowed ?

in a CTF context, no — modifying the client-side code is not considered “hacking” in the unethical or illegal sense, as long as you stay within the rules of the challenge. this what it said for this reffernce i wanted some aide

[woven anvil]

In a CTF context, if you don't understand what is going on, back up and go back to basics/fundamentals.

Or start with HTB

[vocal frost]

I need some help. Is there any ip changer when running Linux?

[glass maple]

yes i wanna learn it from basics , as i found only about changing text , but incase of a game to change its health or damage , i couldnt find after days of searching .

[woven anvil]

So it doesn't sound like you signed up for an official Capture The Flag.
It sounds like you are just trying to hack a game.

[woven anvil]

In what context

[glass maple]

i am signed in as a team in passetonhack fr

i can show proof if needed.

[woven anvil]

Again, if it really is a CTF, then it is possibly too difficult, and there are things you should learn about first before it will actually make sense.

A CTF isn't for a beginner learning, its for someone who has started to understand some knowledge to be able to practice what they already understand.

Us doing the CTF for you is pointless, because it won't teach you anything about the CTF. Just how to "get more HP in a game".

We do not help people complete CTFs here.

[vocal frost]

If I would like to test on to something that I am not able to trace the ip using ip tracer

[vocal frost]

I am trying to get into my other laptop but I can still trace my ip address

[glass maple]

yes indeed its a diffcult level this one , i have found 9 FLAGS in total , so this is something which bothering me for days . so i wanted help to learn or some to guide or teach. I know some can find it , but it will be pointless if i didnt learn it

[shadow pilot]

I got parrot OS on a thumbdrive, whats the best laptop option for it? Also i know its debian based, could i be alright playing basic games on it like schedule 1 or terraria or is that stupid

[simple vine]

whatever laptop you have lying around will be fine, as long as it's got decent linux support.

and nothing wrong with gaming on a debian flavor; find the right steam compatibility layers and you can play practically anything that the hardware supports

[shadow pilot]

Bet okay

[winged roost]

anyone trying to teach me about ports or kali linux im new LOL if so i would be happy dm

[long cosmos]

Are you trying to stop yourself from being traced?

Are you trying to not be traced within a network?

[haughty dawn]

if you have questions about them you can ask them here

[sharp osprey]

thanks!

[lyric salmon]

I want Comptia Security+ ppts, can anyone provide

[tall flower]

Hey, I competed Pre-Security, Cybersecurity 101, Half Jr Penetration Tester on Tryhackme. Can someone guide me? Like What to do next? Or How to move away from beginner phase

[zenith bison]

i have a pc and i am very new to all this, but i love making music and been look for fl studio and cant find it... any help

[untold owl]

I have questions for those who work as an ethical hacker or cybersecurity. Is entry lvl is rare? Like you just get into cybersecurity and start working or you need experience in IT (I’m 15 and I have starting to work down the networking and how website works)

I’m worried about future since I heard IT people are mostly unemployed or jobless?

And i don’t wanna be unemployed or a bum.

[whole relic]

apt install nmap run this command, it'll install nmap but if you're system isn't debian based i guess you have to get it from the official website

[whole relic]

there are great alternatives out there like LMMS (i'm using it currently) and cakewalk by bandlab and some others

[whole patio]

Dont worry about it, if you are 15 - do not assume that cybersecurity is going to be an entry level field anyway. People dont "start" there suddenly.

As for the job prospect, its difficult everywhere, but saying they are jobless is just marketing claims from companies that desperately want to sell their AI solution that no one wants to buy

[untold owl]

Where should I start from then? If I want a job. I know projects and what have you done is important but they also want experience too.

[whole patio]

well, get experience then. Most people work in IT before

[vital raptor]

how hard is switching from service based to any decent cybersec?

[gaunt oar]

Hello who can help me get pass all the sports cappers pay wall n get there picks ?

[fluid depot]

read #📜・rules .

[untold owl]

So what. When I’m in enough age. Should I start with IT support?

[whole patio]

I am not telling you what to do, YMMV, it is entirely up to you. All I'm saying is that cybersecurity is not an entry level field, and people expect yout to be more experienced

As well you should be, to be honest.. all those CTFs and boxes tell you pretty much nothing about real world conditions

[whole patio]

For example - quite a lot of pentesters I spoke to have had anything but a straight career path, some had a strong technical background, some less so - some are just well-versed it particular fields like finance or health.. I've spoken to people who worked for over 10 years in IT, and those had an interest in cybersecurity and pentesting, but freely admitted that they still dont know enough to go that route

[untold owl]

I understand

[untold owl]

I also don’t mind working as IT support first since I care more about living comfortably and simple life. But ethical hacking specifically because I wanna keep my hunger for problem solving and thinking skill alive since it’s all what ethical hacking is about

[whole patio]

Also a lot of reading, waiting and frustration 😉

But yeah

[untold owl]

I don’t mind because in the end that’s what I like

[hard steeple]

sure! anything more specific u wanted to learkn?

regarding those topics

[neon mural]

How do people usually read .so files (native library) and reverse engineer it?

[sacred nacelle]

hey yall just downloaded GOS on my pixel what are the best places to download music from is it worth just using youtube to mp3

[narrow sierra]

Would you rather stream music instead?

[thorn plover]

hi everyone , am new here i need some help

[whole relic]

wait no don't install LMMS it kept crashing on my PC for some reason when i installed pipewire

[ocean gale]

#👥・new-member-guide

[surreal raven]

With@thorn plover?

[white grail]

After all this time, they still don't know enough? That scares me a bit

[whole patio]

To be fair some admins just do the same thing for 10 years and never touched linux with a 10 foot pole..

[white grail]

Are certifications good for learning and gaining experience? Some people say they're not that useful.

[whole patio]

Certifications are mainly for getting past HR

Many courses that offer up a certification afterwards are really good. But whether or not you pay for the exam and pass it, is another story

[hallow bramble]

.

I'm on a website (authorized pt). I can create an object that has an image among its various attributes.
There is unrestricted file upload. I can upload whatever I want as long as I have the right magic bytes at the beginning of the file.
If I upload an .html file with xss, then right-click and open the file, the .html file opens on the website, and of course the xss triggers.
But I'd like to trigger XSS immediately when it tries to render the image.
I don't have control over the filename or the path, only the format.
It loads in a simple <img src>. No onerror.
What would you do?

[chilly merlin]

Delete my computer

[rancid flame]

Hey friends I'm currently doing bs cyber security and I'm In my third semester.I was hoping to get some guidance.Was hoping I could focus on as much ethical hacking as possible and gain some skills

[last sapphire]

I need some help with my insta acc guys🥀🥀🥀

[whole patio]

contact insta support, that is all we are going to tell you #📜・rules

[last sapphire]

It doesn't work😕. Like i cant reset my password no matter how much i try

I love that account 😭😭😭

I dont wanna lose itt

[whole patio]

Contact instagram support about it

[last sapphire]

How do i do that? 🤡

[tribal field]

You contact support

[brisk tree]

#📜・certs-and-career
#👥・new-member-guide

[last sapphire]

Yeaaa truuu

[tribal field]

@steady palm scammer alert

Your bio says otherwise

[brisk tree]

We can't help
It's illegal
Read #📜・rules

[last sapphire]

Oh okay okay. Im sorrryi should read the rules

[brisk tree]

Hmm

[steady palm]

?

[whole patio]

Take comfort that we wouldn't help your arch nemesis, who claims that this is their account they "lost access to", either

[last sapphire]

Not interesting enough to have arch enemies

[whole patio]

Give it time

[desert plover]

Hi, ive lost all my msg on insta gram and cant log in

[whole patio]

click this #👥・help-me message

[brisk tree]

We don't work in instagram support

[narrow sierra]

[brisk tree]

That's a cute dog btw

[narrow sierra]

thank you, his name is Eddie 🙂

[brisk tree]

[brisk tree]

Damn Eddie sounds like a great guy

I have 3 pomerians

[narrow sierra]

3! wow! braver than me!

[brisk tree]

Well I bought 2

[narrow sierra]

ruhroh, i think i know where this is going

[brisk tree]

I saved the third one
From one family who kept that dog outside only

Even in rain

So as dog lover

[narrow sierra]

Oh oh

[brisk tree]

I took her

[narrow sierra]

who TF does that

leave out in the rain i mean

im glad you did take her, you saved her!

[brisk tree]

Yh she is cute
Her name is zara

[brisk tree]

Fr

I want to start a dog foundation tbh
International one

Like i love dogs

[torpid jungle]

Nice

[narrow sierra]

Thats awesome!

[brisk tree]

Yup

[narrow sierra]

Cute name!

[brisk tree]

My dogs name are

Snow
Jackie
Zara

[narrow sierra]

Soo cute, please tell me Snow has a white coat!

[brisk tree]

Yup she does

[narrow sierra]

hahahaha amazing

[brisk tree]

All my pomerians are white

[narrow sierra]

ooooof, nightmare in the wet seasons keeping them clean! lol

[brisk tree]

Fr

Now I don't give them a bath

Cuz of cold

[narrow sierra]

yeah ofcourse, Eddie's white bits go black, so get a cloth out and make him look somewhat presentable..

[brisk tree]

You know my biggest problem is

Chasing them

[narrow sierra]

😂

[brisk tree]

Like once I left gate opened
Jackie ran

I was running back

[narrow sierra]

Classic Jackie

[brisk tree]

Yup

[narrow sierra]

I imagine all good lmao

[brisk tree]

Well I stay fit cuz of them

[narrow sierra]

Hahaha good point!

[brisk tree]

Like running
Chaos

[brisk tree]

You know Jackie is only male
And idk what problem he has with me

[narrow sierra]

Amazing - I've never walked more in my life than since owning a doglet

[brisk tree]

Like he will ignore the garden

And pee in my room

[narrow sierra]

Ahhhh, maybe a teritory kind of thing maybe?

[brisk tree]

I once left the backdoor opened

Like atleast he will go out

But nah

[brisk tree]

Seriously

My room only

He ripped my hoodie into pieces

[narrow sierra]

avoid the outside and pee in owners room, mission easier

[narrow sierra]

RIP hoodie

[narrow sierra]

I'm starting to think he actually has an issue with you lmao

[brisk tree]

He probably does

[brisk tree]

Like tf is this

I lost my shoes

I lost my hoodie

I lost my laptop charger

[narrow sierra]

you tried losing his things?

tit for tat as they say

[brisk tree]

No
I feed him

I give him water

Pick his shit

[narrow sierra]

He's the owner now, sorry to say

[brisk tree]

Check the dm

[brisk tree]

Snow and zara are females
Now I give each of them each bone equally
But Jackie
Gives his bone to snow or zara

[narrow sierra]

Wow, Jackie is very complex

[brisk tree]

He is flirting tbh
According to me

[brisk tree]

I have one benefit of jackie
I take that mf to walk
Girls come calling him cute

And girls give me their insta

[stark blade]

Hello everyone, please help me with the next book to help me make malware from beginner level

[fair basalt]

Anyone know how I can make a vpn to my network if I suffer of cgnat curse? For the life of me I cant get my isp to give me a static v4 but I need to access my homelab from other networks.

[narrow sierra]

Sounds like there on benefit from his chaos

[ocean gale]

try with duckdns and wireguard

[fair basalt]

ill have to see if my router has dyndns support, thanks for the suggestion

[wary pawn]

Is there someone to help me.... I'm doing some work and cross check things

If yes, plz dm me

[split cipher]

Good day everyone 👋👋

[woven anvil]

Do you have IPv6?

[fair basalt]

nah, isp won't give me one. Just a dynamic ipv4

[woven anvil]

Are you trying to host a VPN at home? or just connect to a remote resource?

[winged roost]

Could someone explain to me how a proxy works and what a reverse proxy is

[woven anvil]

A proxy is a single point in which all traffic must pass to get to the other side.

Typically in a business use case, you would sit an HTTP/HTTPS proxy at the head of your network, and force everyone to use it (by blocking 80/443 outbound on the router for everything except your proxy)

[winged roost]

What does it do tho

[woven anvil]

This allows a company to run security products against the proxy to protect the machines behind it

But the technology allows you to use it to essentially "bounce your HTTP connections" onto another server before it goes to the internet(or wherever you are going)

[fair basalt]

connecting outwards out of my home network works fine (minus inbound connections because my ip address can't be found because of cgnat)
That's exactly my problem thats hindering my connection from another network to mine. But i'll try using dyndns as l3luelce mentioned, as I see its supported on my router

[winged roost]

Ok got it

Thanks

[woven anvil]

dynamic DNS will not help with CG-NAT.

If you are trying to Port Forward, or make something available from home behind a CG-NAT, your only option is to have a remote point that people go to instead, and have that send the traffic via VPN or proxy to your server.

[woven anvil]

Back to this.
Reverse Proxy

It is the opposite. Instead of being meant for connections going out to the general internet, it is meant for connections coming in from the general internet.

So lets say you have 5 web servers. Instead of having 5 separate IPs for them, you could have 1 IP that goes to your reverse proxy, and then your reverse proxy sends the traffic to those web servers.

Companies can then again run security tools on that reverse proxy to help protect their servers.

[winged roost]

Ok but why do people use it I know there can be many reasons but you keep saying companies

[torpid jungle]

Because sometimes (often, in the corpo world) the process handling HTTP requests is not the same process for the API server or whatever.

[woven anvil]

Individuals use it, but just on a smaller scale.

If you host a website at home, you can't get multiple IPs from your ISP. So you would use a reverse proxy to be able to host multiple websites. This also lets you use free already-existing tools like fail2ban and crowdsec to protect your stuff.

People typically don't use regular proxies at home, unless they want to avoid using a VPN for a specific situation.

[winged roost]

Ok got it

Thanks for explaining that

[fair basalt]

I saw someoen saying a solution to it could be tailscale. not sure how it works but i'd have to look into it

[woven anvil]

If it is just 1 other person that you are interacting with, and they are fine with a VPN (Like you want to play a LAN game together), then a VPN could work.
Tailscale is a wireguard implementation that is not self-hostable. You can sign up for a free account for a limited amount of devices, and it will do the job of "they can connect to your VPN IP, and it will work through CG-NAT".
Obviously, this is different than giving the general public access to a port. This may be preferred if its a more private thing, like a gameserver that only you 2 want to play on.

Headscale is a self-hosted implementation of Tailscale. I hated it, but you would get "unlimited devices" at the cost of having to host it yourself.

There are a couple others like this though.
Zerotier is another "has a free account", but you can also self-host.
So does Netbird.

Hamachi would be the famous one, but i would avoid it

[fair basalt]

i def dont wanna expose it to the internet like that. I host a shit ton of things on my server like password manager and file server which is why I want it on a vpn only. I'll look into headscale then

I still think it's so stupid how my isp wont give me a static v4 or at least a v6 when my shit is fully v6 compatible

[woven anvil]

If you do want to self-host, the best way imo is to get a cheap VPS, and go with Netbird, or just do wireguard yourself.

Wireguard + Zerotier both work on a principal that it coordinates connections between devices, instead of everyone connecting back to the VPN server like OpenVPN/IPSec does usually.

So the cheap VPS shouldn't(unless you can't get a connection) touch any of your data, that should just be between you and your friend

and don't touch the "easy-wg" container everyone uses.

.>

i hate that container

[fair basalt]

not sure what zerotier does, but wireguard is the exact reason why I asked if I can bypass cgnat. I'm 99% I configured it right but it failed at the handshake every time cause of cgnat

[woven anvil]

Zerotier does a similar thing to wireguard, but is a completely different spec/implementation made by a different company.
Its worth testing out if Wireguard is having issues.

[fair basalt]

ahhh I see. I'll check it out over the weekend see if something works, thanks

[rancid flame]

Thanks

[winged roost]

Is Linux commands hard to learn and how long do you guys think it would take to be able to run a good attack on a sever or network (pentesting”)

[whole patio]

impossible to say

depends on you

[winged roost]

Gotcha

[jade coral]

hello everyone i wanna ask can a iphone 15 pro be jailbreaked without a computer ?

[lapis pebble]

The short answer is: No, a full “real” jailbreak of an iPhone 15 Pro is currently not possible without a computer and in many cases not even with one.

[jade coral]

so i need a computer right ?

[runic wing]

it's beginning I start learning cyber security nice to see you people:

I start learning with Google 🙂

I hope I get answers and guides

[lapis pebble]

Yes, if you have an iPhone 15 Pro, it is best to stay on the lowest iOS version possible and wait for news from the official jailbreak community (like the Palera1n or Dopamine teams). Avoid any site that asks you to pay or download unrelated apps to "unlock" your jailbreak. Just take a look on youtube for some summaries 🙂

[jade coral]

alright but i wanna ask so i need to connect my iphone with a cable to my computer for the jailbreak to work right ?

it doesnt work on bluetooth or anything like that

?

[lapis pebble]

Normally yes, but this can change depending on when a new iOS is released.

[lapis pebble]

I am not aware of any Bluetooth version.

[jade coral]

okay but if i say that i connected my iphone to my computer with a cable or without and installed the jailbreak tools on my computer and finished the steps and everything will that make my iphone jailbreaked or i need to open my iphone and there will be a app and i open it and click jailbreak or something like that ?

[lapis pebble]

Yes, that's roughly what the apps used to be called: Dopamine or, even earlier, Unc0ver.
But I don't know what it's like with iOS 17 or 18; I have no experience with that.

[mossy ravine]

In settings you can see, I think

[jade coral]

so i need to click jailbreak from my iphone to be jailbreaked ?

[idle umbra]

With no means to interrupt the current conversation, I am relatively new to pen testing but am enjoying the grind and challenge of it all. A friend of mine has given me permission to pentest his website. It's hosted on shopify. I'm curious if anyone has experience with pentesting shopify and has any resources they could share. I know I can look all this stuff up on my phone, but I am trying to make a concerted effort to expose my noobness and participate in the community.

[lapis pebble]

Yes, you should open the jailbreak app and click to jailbreak. But I don't know what the current situation is. Take a look on youtube for latest Versions

[proud jasper]

Hey guys sorry to ask, but i was trying to figure out how to make a burner email. i need to sign up for something but it looks super sketch

[kind zealot]

Temp mail

[whole patio]

you can search for "24h mail" on google and hope that whatever service this is will accept it

[jade coral]

okay so whats the benefit of the computer ?

[snow raptor]

Hi can anyone help me out

[lapis pebble]

You need it to transfer the specific jailbreak application

[whole patio]

Impossible to say yet

[snow raptor]

Okay

[whole patio]

You realize that you have to actually ask a question first, right?

[jade coral]

oh so thats the only thing about the computer and the jailbreak is just from the iphone?

[whole patio]

You did read all the other things that were said, right?

[jade coral]

yeah im just confused my bad

[chilly merlin]

Guys I downloaded Nobara Linux and got to upload and everything didnt like it so I went to BIOS, saw the tab UEFI Boot Order and thought if I put OS Boot manager first with windows selected it would go back to windows but it didnt so I went tried to going back to Nobara and now it doesn’t boot up neither the rescue one

[wanton grove]

so i got a macbook from a friend 4 years back and i had though i made me the admin when i deleted his profile and stuff off and my icloud was the main on the account well recently is was stolen so i did the delete all info all thing and now its asking for the original admin and he died 2 years ago is there a way to get it unlocked rn the screen says "support.apple.com/mac/startup" and shows a file with a question mark

[frigid bluff]

Guys when i want to offense android devices or google accounts what should i learn?

[whole patio]

How precisely did you install nobara?

[whole patio]

Probably not

[chilly merlin]

Unsure tbh, it booted up displayed showed messed with some cosmetic settings that’s as far as I went

[whole patio]

"Unsure" is not enough

[wanton grove]

is there anyway to be able to use it all?

[chilly merlin]

Is there a way to check? First time doing this

[whole patio]

Maybe someone else wants to chime in, I lost interest the moment you couldn't recollect what you just did

[crisp star]

Oh boi I think you deleted the Windows Boot

[ripe aspen]

guys is anyone here working in cybersecurity field ?

[whole patio]

Is there a followup question to that?

[lapis pebble]

maybe yes. Have you a specific question?

[ripe aspen]

Yes please

@lapis pebble My whole career is as a full-stack developer, and I’m 25 years old. Ever since I was a kid, I’ve been passionate about cybersecurity. Is it too late for me now to switch? What do you think?

[lapis pebble]

No its never to late 🙏 i worked 10 years as system engineer / devops and now for 3 years straight into cybersecurity. Much new things but keep going and do the exams 🙂 #📜・certs-and-career

[turbid glacier]

actually it is rather rare to get hired into security roles without any prior experience in corporate IT. so you are just about the right age to slowly transition 👍

[lapis pebble]

In my experience, work experience, and especially practical experience, is what counts most. You're more likely to get a job if you have that. A university degree only makes it easier to "get in."

[ripe aspen]

@lapis pebble Bro, is your company looking for someone who is interested in an internship? 😅

Im gonna graduate next year actually

Im doing masters in engineering and computer science

I worked as freelancer

Like i sad only in developing

[lapis pebble]

😅 i dont think so. Next Month i switch to a new company directly into a Soc lvl2-3. But I now also have Comptia Security+ and CySa+ certifications. If you're a full-stack developer, do you have a GitHub account? Create a LinkedIn profile and post a few projects. That makes a good impression.

[lapis pebble]

Do you want more Red Team or Blue Team?

[ripe aspen]

Yeah yeah i do have GitHub and linked in and currently working on projects now

[ripe aspen]

Well both but red more to be honest 😅

[lapis pebble]

So yes more development is needed there. I would recommend that you work your way through the paths on TryHackMe (or Hackthebox) and learn something along the way. At the same time, you could look into developing any topic-related projects that you can then showcase. Getting hired as a penetration tester without a certificate or professional experience is very difficult. Maybe in Blue Team, soc lvl 1 or you work as a developer on security software. 🤔

[ripe aspen]

i already have an account in both TryHackMe - Hackthebox

[burnt osprey]

Is network + and tryhackme presec enough for networking ? (my goal is to become a pentester/red teamer)

I really hate the networking loophole

[burnt osprey]

i want to learn not for jobs but just in general btw

[polar siren]

GuyIve beeen making a database on docker for a school but they are stupid enough to not know how to lunch it properly so i need a database thats ez to work on and frees

[modest flicker]

Good day everyone

I am sorry about the way I behaved yesterday

Yeah I need help please

[fallow maple]

What help do you need ?

[woven anvil]

Make sure that your questions are ethical and follow our #👥・info and #📜・rules

[burnt prism]

How can I make my identity disappear

[stiff cedar]

Pls help me

Who understands arm64, how to learn it bro

[frosty kindle]

What are some entry level cybersecurity jobs I should be looking for and is it possible to land those with no certifications and just home labs?

[compact silo]

what IDE can you recommend using C# performing or creating a web?

[fluid wind]

depends. Companies will likely hire you on a discount with no certs if you're ok with that.

SOC Analyst 1 is usually a good place to start.

[woven anvil]

@vital prawn
Don't ask for account recovery stuff here.
#👥・info #📜・rules

[vital prawn]

Pls where can I ask such questions? I’m just a beginner here

[woven anvil]

We do not assist with account/device recovery on this server.

contact the service provider

they are the only ones who can help you

[wind tusk]

Please someone should help me with a way I can get us number for calling and text and register Whatsapp on my Android

I have tried some apps but it didn't work

[woven anvil]

Get a US-based SIM card, and live in the US?

or get a registered business number

[wind tusk]

I'm not in the US

That's the only problem

[fluid wind]

Move to the U.S then twin

[sullen cargo]

can anyone help me brute force in iphone se 1 from 2016. im trying to help my brother recover his old files, but having trouble developing a python code to brtue force it without running into some kind of error, or error code. let me know if anyone can help!:)

[whole patio]

Can you elaborate on the question a bit more?

[whole patio]

There is no brute forcing phones, those videos are staged

I think around android 4 that was implemented

[sullen cargo]

or help me find the id

ohh got it

[whole patio]

#📜・rules Read them carefully

[crisp ibex]

sorry

[quick rock]

I am a cybersecurity university student, currently in my third year. Till now I was just exploring and you can say I am an intermediate in every field (forensics, soc, rev engineering, network security). I have done tryhackme, htb, letsdefend. I feel like I kind of wasted my time, and I want to move towards DevSecOps as my permanent field. I love coding and I am sure I can handle stuff.

I have one year and i want to go all in. How can I start for devsecops, like platforms etc, and how can I do full practical work.

[heavy rampart]

hi guys i have a question can my iphone be hacked if i plugged it with a cable to my pc and my pc was hacked from someone/has virus/has malware?

[jaunty sonnet]

It depends I guess
On the type of malware

Because not all are transferable but some can be

[stiff cedar]

How to create an ai agent where u have several personas and they just debate each other.. but theres also a judge that can fact check etc etc

[whole patio]

So nothing at all to do with ARM64, gotcha. Maybe take this to #🤖・ai-automation

[stiff cedar]

Yea thats problem solved

[whole patio]

also, AI does not fact check, at all

not even if it tells you it would

[stiff cedar]

Maybe I shouldn't use the word fact check, yk ai sometimes can get things wrong even if u just tell smt in the previous message, so i meant just to make sure the ai doesnt forget like the context or the framework

[whole patio]

you cant

they do not remember at all - they try to trick you by adding parts of the previous interaction to your prompt, but this does not scale and leads to even worse results quickly

if you speak to an LLM for weeks and ask it "how are you today?" the prompt it works on is "how are you" and parts of the previous interactions

there is no persistence anywhere

AI are optimized to fool people into believing they are something, that they are not

[stiff cedar]

U mean theres no prolonged memory right? Except the one that can be set manually in settings

[whole patio]

Last I heard it is regularly something like 10-20 interactions

everything before that - unless it was repeated in the last 10-20 interactions, is gone

[stiff cedar]

Yes i think u are right

My problem is jsut within a single chat, sometimes i already told the context but it still goes out of the context, AND I NEED TO CALL IT OUT MANUALLY

[whole patio]

that is working as designed then

[stiff cedar]

Everytime i called out their bluff , they always like "u caught me or smt like that"

[whole patio]

you have the wrong expectation

[stiff cedar]

Yes

My idea is to make like an agent thats tasked to "fact check" their answer based on the framework ivegiven

[whole patio]

Good luck with it

[stiff cedar]

Cuz soemtimes its hard when u are entering a new topic

[whole patio]

Well, you are trying to do something that is not meant to be done. This really is something you should continue in #🤖・ai-automation now

[stiff cedar]

Ok i thought u gonna help

[whole patio]

Not with anything people want

Im not a chatbot, so I can tell you no

[whole patio]

I can tell you this much though.. there really is no fact checking here. If we would know the facts, we would not have used an LLM in the first place, we would have a database of answers - and we tried that for ages, and as it turned out that becomes very limited and up for debate.

[keen umbra]

Yeah it can , given the content

[whole patio]

In theory, yes. In practice it is somewhat highly unlikely - but that is what "Is it possible .." questions lead to

[sly shadow]

Can anyone tell me how to unlock bootloader in mi without a pc?

[whole patio]

note sure it can be done, if you mean MI smartphones.. that has always been a pain with various websites, dead links, outdated tools and lots and lots of waiting times.. almost as if they dont want you to

I vaguely remember that at some point I had to hunt for windows executables that were no longer available as downloads on the official website

and then looking for the correct "version" of those executables

[narrow sierra]

the way back machine might help...