👥・help-me

[simple shadow]

is hackviser a good website to learn stuff from

[woven anvil]

Be careful with sharing any information on the internet like that.
Watch out for scammers that will try to take advantage of your situation.

Look for local law enforcement to assist with this instead.

@vague swift
Same thing with you above.
Do not post information like that here.

[ember gale]

Is there “things” that I’m able to do on Xbox?

[civic mauve]

Define things

[ember gale]

Adding mods to games like Fortnite

[steady ledge]

No?

Fortnite never supported mods

And you can't download mods directly on the xbox

[vague swift]

hello guys

[sterile pewter]

Microsoft actually bans people who do that kind of thing. In fact, they will ban the console AND account responsible for it. Highly advise against it

[vague swift]

i need help where did i find the email id of marketting managers for the sponsorship mails for my college

[steady ledge]

use company websites, linkedIn, or their official contact email

[woven anvil]

what do you mean?

[glass lichen]

I was wondring if its possible to create a C2 server in python?

[fickle cedar]

What's c2 server?

[glass lichen]

Command and control server?

[fickle cedar]

I'm still learning python, I've passes the basics but don't know how to go forward

[glass lichen]

I also know c++ too, but I'm bit confused about the pros and cons of making a C2 in these languages so I'm taking opinions from peoples here

[chilly merlin]

Quick question, learned to how to generate public and private keys, but need help ssh into a platform, with user creds. Have to ssh from user1 to user2 through root..Using pwnbox bash terminal, Can anyone send a reference

[fickle cedar]

👌 ok

[glass lichen]

Are you a dev/hacker?

[fickle cedar]

I'd classify myself as a hacker

But i actually do cyber security

[glass lichen]

Hacker without programming knowledge is 50% hacker in my opinion..

[fickle cedar]

I guess but i have basic knowledge of programming. With that basic now and a little bit of ai, i think i can work

[glass lichen]

In what things you're specialized at?

[fickle cedar]

Mostly pen testing and bug bounty

[fickle cedar]

You?

[cedar sable]

hey guys anyone good with java? i need help with a uni freshmen project

[glass lichen]

Cryptography, osint, malware reverse engineering..

[glass lichen]

Oh great, nice to meet you

[fickle cedar]

That is awesome

Was gonna go into cryptography cause i would love to create my own encryption model

[fickle cedar]

You too

[glass lichen]

I dont recommend creating your own encryption model as even the top ones had been broken in the past

[blissful sonnet]

yes

[glass lichen]

Hey hello

Can you say how?

[blissful sonnet]

by writing code that has C2 functionality, whether that is a simple pty shell or a fully fledged GUI

then running it on a server

[glass lichen]

Wow? Intresting

[smoky sun]

Whatsup guys

Do you guys think that forensics ctfs are great for soc analysts?

Ive seen several soc jobs require you to solve ctfs before they can move forward with you

[blissful sonnet]

yes

[smoky sun]

Nice to hear my effort aint going to waste then

[smoky sun]

Should i mention on my cv that i solved ctfs on picoctf and that sort of stuff?

[blissful sonnet]

yes

[devout linden]

It helps. Do you have a homelab setup?
Any other IT exp?

[smoky sun]

I do have a homelab yea but no exp yet

Why? Im not gonna emphasize on it

[devout linden]

For a SOC analyst. Setting up a wazuh server can help project wise.
If you can make a blog it helps for them to be able to review (you can use linkedin too for this)

[smoky sun]

Till now i have a splunk server configured on a Ubuntu and a dc with an ad and a w11 workstation with a domain tied to the ad and all endpoints have a splunk forwarder installed to pass logs onto the splunk server

And I just played around with the logs and studied the event ids and stuff like that

Im documenting what im doing on github for now

[devout linden]

make sure you have this documented in some what.

here is what i did with my projects that stood out

[smoky sun]

Is that in a resume?

Yea makes sense, id just hint at it briefly then

[devout linden]

yes

i have a 3 page resume based on my exp.

[smoky sun]

Ah alright, i keep mine one page cause there isnt any exp and to save the recruiters time i guess

[devout linden]

yup but ive also been in IT for almost a decade so hard to smush it into one page

Not saying it cant be dont but moving from IT into cyber thats how i had to get into the field

nope.
Military, NOC, systems engineer Now in a SOC. Working on getting into redteam/pentesting

[crisp star]

Why don't you go to DFIR?

[devout linden]

Thank you very much! Ill hit you up to pick your brain and gain some advice too. My goal is to get out of the blue team side hopefully this year and into either redteam / pentest. I know they are not the same but I love the concept of OffSec

[devout linden]

It never fully interested me but ive not truly dove down into it enough as a subject to be well educated conversation wise.

[maiden scaffold]

What is the general opinion on ProtonDrive
Found a post from 4 years ago....but thats 4 years ago

[ember gale]

Thank you I didn’t know that

[reef garden]

Hae

I want to know how some ethical skills

[blissful sonnet]

https://tryhackme.com/hacktivities

[agile island]

Where do i put my business enquiries

[whole patio]

Some other server

[agile island]

like if i want srhoe to sponsor an event

[whole patio]

I have not checked, but doesnt his social media have contact infos?

[kindred axle]

anyone help me to get wifi password how

to get

[glass lichen]

What do you mean?

[hard steeple]

wifi password of what wifi

[devout linden]

#📩┃ticket

[short marsh]

Hey uh, does anyone know how to get someone’s info just from their account. I have a big problem and idk how to do any of this stuff. If you’re willing to help please dm me. It’s something I need to report

[glass lichen]

Which accounts? If you're in risk or emergency then better to contract the cybersecurity portals in your country

[tropic quarry]

Hey can someone help me hack some guy whos trying to get money from me ?

[devout linden]

Nope.
Read the #📜・rules we dont help with that

[tropic quarry]

Cant anyone help me out?

[steady ledge]

Drop it

[kindred axle]

my neighbour Wi-Fi

[glass lichen]

Thats a good opinion, BE ethical guys

[fluid gulch]

@kindred axle

[kindred axle]

okay i will try

[kindred axle]

yEAH

YEAH

YEAH

[uncut harness]

People really come here for stuff that can be found 404 errror

Hola lol

[glass lichen]

Hola hola

[uncut harness]

Gotta finsih up some modules on tryhackme in a bit

[glass lichen]

Ohh good

[uncut harness]

Under the new member guide section i started with the first link under red team

They have good stuff there take a look

[glass lichen]

Oh thanks, I'll have a look in that

[covert lion]

hi guys, which tire subscription helps me unlock remaining channels like ctf collaboration

[kindred axle]

HUH

[civic mauve]

@lost vapor 🫩

[silk sphinx]

Hi?

I'm a student who just recently passed 12th I just want views on which degree should I choose for better job offer and personal benefit too

[south haven]

hi can someone help get a job in hacking??

[kind zealot]

Engineering

[kind zealot]

apply to jobs

[crisp star]

https://tenor.com/view/job-job-application-jobless-gif-2757097081210871087

[rapid idol]

Hello! Does anyone know how to recover meta data from photos/videos? I would like to use the metadata for renaming my photos and videos for a project

[steady ledge]

Exiftool.

[dim flax]

Hi everyone, does any one know which FREE (like literally free) software is used for debugging like inspecting a programs main source code? (trying to learn malware analysis and low-level languages)

[rapid idol]

yeah ive used it, but it doesnt show some of the data. Are those indefinitely gone?

[steady ledge]

You could search image metadata extractors online

[steady ledge]

Ghidra and x64dbg are great free options, also check out radare2 and wireshark

[dim flax]

Thank you very much, I'l look up to it

[steady ledge]

yw, have a good one

[rapid idol]

Okay thank you!

[steady ledge]

yw, good day

[woven anvil]

@sharp dagger
Don't ask for unethical things here. Its very obvious what you are asking
Read our #📜・rules

[onyx timber]

Yoo I wanted to learn how to use scripts on games like Roblox but I’m on try me hack learning about banks

[steady ledge]

Bro what

stick to security learning, if you want roblox scripting, use roblox studio and learn Luau

[onyx timber]

Like far as scripts and executors etc

Not only Roblox just in general

[steady ledge]

For executors use codex or sum shi

with emulator

[steady ledge]

wym 😭

[onyx timber]

Like far as games using my computer and having more access than js the normal players

Like on gta I can have mods

[steady ledge]

Basically cheat?

[onyx timber]

Yea but don’t you need to learn scripts for that

[steady ledge]

You need

Or just compromise your computer

with sum random trojan

We (or atleast me) don't support game exploiting

If you got another question feel skibidi to ask ✌️

[crisp star]

Skibidi to ask

[onyx timber]

😂

[wicked viper]

One message removed from a suspended account.

[steady ledge]

Define help ✌️

[wicked viper]

One message removed from a suspended account.

[steady ledge]

what error are you getting during the install?

[wicked viper]

One message removed from a suspended account.

[steady ledge]

run lsblk to see if Fedora detects the pendrive

If it appears you just need to mount or format it (i think)

[wicked viper]

One message removed from a suspended account.

[steady ledge]

yw, anything else drop it ☝️

[fluid berry]

My pc exploded what do I do

[grave bridge]

can anyone guide me on how to configure kali nethunter on an android phone that is not officially listed on the kali linux offical website?

[whole patio]

exploded?

[whole patio]

That would be something you should take to the nethunter sections on https://forums.kali.org

[whole perch]

Is there anyone here familiar working with Caddy and/or Jellyfin within Docker? I'm having troubles securing my DuckDNS domain for both Jellyfin and Pi-Hole.
It's a long story of what I've tried to do, and right now I'm currently stuck.

[civic mauve]

Are Caddy, Jellyfin and Pi-hole all running in Docker containers?

[whole perch]

Yes, all separate containers.

Let me get the files.

I can't send it because it keeps getting deleted...

[whole perch]

Is it okay to DM it to you?

[civic mauve]

Sure

[torpid jungle]

lmao

[unborn ibex]

seems pretty clear to me

[woven anvil]

Read #📜・rules #1 please.

[glass lichen]

Nevermind

[woven anvil]

Just know for next time.
A lot of new people come here, and some of them can get frustrated if trolling is the answer they get.

[tawdry tartan]

people are saying that exam compass isnt good for sec+ but im too broke for the professor messer practice exams, what is the best free alternative

[void glacier]

Hello guys, I need help with generating realistic AI models from ugc products advertisements

[rare goblet]

Have you tried midjourney

[void glacier]

No I’ve not , I will check it out now , do you also know where I can generate Ai videos for suno songs ?

[rare goblet]

Are you new here

[void glacier]

Yes

[rare goblet]

Oh no wonder

[void glacier]

I’m too green?

[void glacier]

Please if you have any information that can help , I will be grateful

[rare goblet]

aisonggenerator.io

[void glacier]

Thanks

[slow saddle]

Hello guys I need help and dm me if you can help me... I think my instagram reel is modified by someone.. it's like someone willingly forcing there thought on me... Can you explain thank you... Please help...

I think one person doing it but I don't know can you explain

[glass lichen]

Can you please clarify what you mean?

[slow saddle]

I think the person someone i know

[torpid jungle]

Hello friends. There’s so many versions of ESP32 boards; anybody got any recs for a specific brand or model?

[glass lichen]

Mhm?

[orchid phoenix]

ok

hi

[glass lichen]

Hello!!

[inland ruin]

Does anyone have learning guide to hackrf portapack ?

There are lot of YT videos out there, but need something more than that

[steady ledge]

check the official hackrf docs, portapack firmware wikis (Havoc/Mayhem), and sum SDR resources

Way better than random youtube videos

[chilly merlin]

As a career shifter interested in diving into cybersecurity, can I have your opinion regarding my blue team certs list? (They are from our server: certs-and-career)

BLUE TEAM CYBERSECURITY

1. CompTIA A+
2. CompTIA Network+
3. CompTIA Security+
4. Google IT Support
5. Google Cybersecurity
6. Blue Team Level 1
7. CompTIA CySA+ Cybersecurity Analyst)
8. CyberDefenders CCD (Certified CyberDefender)
9. OSIR (OffSec Incident Responder)
10. Blue Team Level 2

[kind zealot]

I think this is good 😊

[chilly merlin]

Thank you so much! ❤️

[chilly merlin]

I added Google IT Support after the CompTIAs.. Is it okay or should I move it?

[unique heath]

Does someone know why my kali wont launch i installed it and it's just pitch black

[glass lichen]

Are you using dual boot?

[unique heath]

No i installed windows back and using vmware atm

[glass lichen]

Did you tried re-installing it?

[unique heath]

Doing that atm

[glass lichen]

Okay

[tardy girder]

I am going to buy a new device and confused between macbook pro with prochip or asus rog strix g14 , both with either 24 or 32 gb ram ! now i am confused regarding x86 and arm architecture what should i do?

[glass lichen]

What actually you want to know? Also if you need a quick understanding then you can search it in Google

[whole patio]

x64

several tools do not have an arm release

[kind zealot]

well if u want it look like from entry level to - advance level certificates then yeah u can move that but it does not matter that much

[solid urchin]

hi , i have taken the CPENT course and planning to take the CPENTv2 exam. is anyone has taken the exam and any suggestions or materials to share it with me to prepare.

[boreal bone]

Rog Strix G14 Would Be Great Instead of MacBook

[narrow sierra]

also, you could play games on the Rog, mac has no games kekw

[shell meadow]

Hey

[devout linden]

Hey whats up

[shell meadow]

Hey just cooln

[heavy mantle]

Hello guys quick question, do I keep doing Tryhackme, hackthebox and Picoctf simultaneously as a beginner? Currently half way through Google Cybersecurity Certificate. Thanks

[devout linden]

Focus a little more.

THM and Pico are solid to do together

HTB is a bit more advance and is more of a graduation from THM.

Id focus on the paths from THM more first and do some PICO CTFS to see how your skill sets have come along.

[agile island]

Hey guys i needed names for an esports event can yall help me

[devout linden]

do what?

[agile island]

suggest some names please

[devout linden]

For what? give a bit more details

[fluid gulch]

He wants names for an esports event

[devout linden]

ahhh. What sport i guess then?

[fluid gulch]

No idea, he just said esports

So I assume it’s gaming related, a gaming competition

[heavy mantle]

Alright sure thing.... Thanks

[agile island]

valorant dota cs2 etc

[shell meadow]

@devout linden need sum good suggestions

[devout linden]

🤷

[shell meadow]

@devout linden just any thing useful

I'm new

[pallid jolt]

what you need?

[devout linden]

Check out the #👥・new-member-guide for a good starging point

sorry i got you mixed up ith the other guys thing

[shell meadow]

Sum gud info

[devout linden]

like what

[narrow sierra]

"Gatik1234er's Esport event - for pro gamers" - There you go

[agile island]

Nahhh

its for my college

[narrow sierra]

"Gatik1234er's Esport event - for college"

[agile island]

bruhhhhhhhhhhhhh

[narrow sierra]

without context, thats the best I can do

got 2 bits of information, 1, its an Esport event and 2, its for college.
What games are being showcased would help a lot tbh

[agile island]

valorant

dota2

cs

bgmi

pubg

brawl stars

etc

[narrow sierra]

A LOT of games then - ok, Campus Clash Esports Fest
Nexus Arena: College Esports
GG Campus Cup
Campus Conquest
The Meta Cup
Respawn Royale
Inter-College Esports Open
Final Circle Collegiate
Level Up League
BattleVerse College Championship

[agile island]

mmmm

need more

wasnt approved by my seniors

[floral mortar]

I would like to participate in CTF event but I'm a novice at best
... 🙄 Any ideas for a guided experience of where to stay learning?

[narrow sierra]

Collegiate Esports Championship (CEC)

Inter-College Esports League (ICEL)

Campus Esports Invitational

National College Gaming Championship

College Esports Masters

University Gaming Open

Collegiate Arena Series

Campus Championship Series (CCS)

Inter-University Gaming Cup

College Esports Premier Series

[rare cradle]

need more advice to get at ctf

[chilly merlin]

Hello one and all

[orchid phoenix]

I'm trying to figure out how to get Remote Play Even though I don't have Windows 11 Pro I found out how to got it but I just can't run it

[crimson harness]

guys Im kinda broed to learn cyber security.hype me up

[chilly merlin]

Go take a cold shower 🚿 then come back

[crimson harness]

bruh just did

[crimson harness]

whr do u learn cyber sec?

[chilly merlin]

HTB

[green spire]

is the tryhackMe premium worth it?

[chilly merlin]

And THM

[crimson harness]

need to pay right?

[crimson harness]

how much is it?

[chilly merlin]

No 🙂‍↔️ Available to all here just must register

[crimson harness]

I registerd.wait is it free?

[chilly merlin]

Yes it's free there are options that are for free on there just go to the dashboard

[woven anvil]

There are some free rooms in #👥・new-member-guide.
But yes, they have a ton of free content.

[sacred oar]

i need a way to open an account in another country

[woven anvil]

Like, bypassing ToS?

[sacred oar]

The platform says my it does not support my location

[woven anvil]

So you are looking to get around a public platform's protections.
That is not what this server is for.
Read our #📜・rules and #👥・info

[whole patio]

Honestly - old CTFs.. either try them, or read up on writeups for them

[whole patio]

You weren't going to make it anyway

[crimson harness]

wym

why

[crimson harness]

so rude 😑

[whole patio]

you wanted to get hyped.. don't blame me for trying 😛

[final bough]

how do i recover my iphone 6 without the password? its an old ahh phone i forgot my password for

[whole patio]

Probably won't

[final bough]

wymmmmm probably wont

arent there plenty of exploits on the chipset for iphone 6's

[whole patio]

you are probably not going to - but if you think there are lots of ways, then a search engine surely should be able to help you out

[final bough]

is this or is this not the channel labeled #👥・help-me ? why bother replying something kinda useless like "you won't", why not actually reply WHY I won't etc

what the heck

[whole patio]

Because quite a lot of people ask how to get into smartphones they do not have a password to, and regardless of their story we usually assume they stole them

We can do the full routine though .. Have You Contacted Apple Support?

[final bough]

yeah, they said I have to have an iCloud account associated with the phone, but considering I used the phone when I was young in school I used a school account email that has since been deleted

[whole patio]

(After this is over the result will be "you are likely not be able to", btw)

So you are, if we ignore all "may be true, may not be true" variables essentially in the exact same situation, as someone who just stole an iphone 6

[final bough]

bruh, not really, I have key identifiable information that obviously can be tracked back to the purchase of the iphone 6 lmao

[whole patio]

Which apparently was not enough evidence to convince apple support to help you though

[final bough]

yeah, cuz they need an icloud account? not the debit card and charge/transaction history for the purchase of the iphone 6

I already explained that previously

[whole patio]

Just to be clear.. this is not really about whether anyone decides to help you - without apple support and without access to it there is really not a lot you can do. Celoebrite and equal solutions are not available to you, and that is pretty much where the story will end. This may be a cybersecurity oriented server, but there really is very little than can be done here

[final bough]

so should I take it into the apple store? not talk to support or?

[whole patio]

They are going to tell you that they no longer support the device. If it does not belong to an apple id you currently have access to, the story ends there as far as the store is concerned

[final bough]

💀 man they really dont want me getting into my phone wtf

[whole patio]

That's the deal with walled garden devices

[final bough]

mannnnn

[agile island]

It's not catchy

[woven anvil]

@plucky ferry
We don't assist with device/account recovery on this server.
Please do not advise people to use those tools for that purpose
Read our #👥・info and #📜・rules

[heavy forge]

How can I copy a google document whom I don’t have permission to copy?

[woven anvil]

Ask the owner for permission

[modern gazelle]

Thx

[steady ledge]

💔

[wheat ginkgo]

what's the best way to find used RAM

(I know I'm cooked beyond imagination)

[crisp star]

Off all things you could learn you decide to focus on doxing 😔

[woven anvil]

@modern gazelle
Don't ask for such things here.
Read our #📜・rules

[chilly merlin]

Hi everyone

Is there anyway on THM that's I can complete without having to pay?

I've moved to the next level and its asking me to pay 😭

[woven anvil]

#👥・new-member-guide has a bunch of free rooms

[versed brook]

I am wanting to go into cybersecurity as a profession. What school or course do you suggest?

[steady ledge]

Start with Security+ or a cybersecurity degree, also try labs on THM

Also you look like a fed

[versed brook]

I will look into that. That photo was taken when I was in car sales.

[versed brook]

Do you have any school recommendations?

[steady ledge]

if you want a degree check sum accredited state schools or WGU. If not, you can go the cert + "hands on lab" route instead

[versed brook]

Thanks for the recommendations I will change that photo so I dont look sus

[steady ledge]

yw and good to hear, have a great day ig ✌️

[polar field]

How do i

[plucky ferry]

this is probably the question of all time

[steady ledge]

indeed

[rapid idol]

What is the best way of automating organizing photos and videos besides the date and time naming convention (if there are any exif data)? Would ai be useful in identifiying events of the photos/videos?

[steady ledge]

besides date/gps, you can use ai (like Google photos or Photoprism) to group photos and videos by faces, objects, or events automatically ✌️

[rapid idol]

Okay great, thank you

[olive pecan]

hello! heard its best to get an IT role before getting into cyber, is that true?

[steady ledge]

Its not required but having IT experience helps a lot

networking and system administration make cybersecurity easier to break into

[olive pecan]

so it makes the transition easier in general

what if u had support experience instead? not really the same thing but still troubleshooting / ticket experience

[steady ledge]

Exactly

[woven anvil]

It is the beginning of the same.

To understand how breaking into active directory works, you should understand what it is, and how to set it up

Working Support/Helpdesk is understanding how people interact with this system.
If you go some steps further and set one up at home, then you can learn how to attack and defend it.

And that would be cybersecurity. Repeat with every concept in IT

More nuances, but thats kinda how the aspect of going from IT/Support -> Cyber works

[olive pecan]

does that hold true for iam as well? since thats more of permissioning in general is there a bit more leeway given? or should i still should go through that route due to possible overlapping areas id find on the job?

[woven anvil]

It all ends up being related in the end.
Even if "Active Directory Domain Services" is a set of services offered by windows servers, and IAM is the broad concept of "Identity Management" in general across multiple platforms, there is a lot of crossover of how one would implement a complete and secure IAM system in an environment where the primary method of computer authentication for domain actions is through a on-prem Active Directory server.

But that is just one, you could even ignore all that, grab an OIDC provider like keycloak or zitadel, or something like Authentik or Authelia, and just learn how these self-hostable providers work in general. You can host your own local environment, and like i said before, test attacking and defending it.

[olive pecan]

thank you!!!

[woven anvil]

And then use resources like Tryhackme + hackthebox to learn the tooling(as well as anywhere you can find information), and then use the tooling in your local test homelab

[maiden sparrow]

this dude

is not real

[next ginkgo]

hi guys, I am new to this community. I have some questions and I hope u guys can help me w that. First of all, do I need to fully know how to code and using framework for backend in order to understand the base more, cos I am currently learning backend.
Secondly, do i need to specialize in any kind of programming language for red teaming
Third, do i need to seriously learn reverse engineering since I found that section quite interesting

[steady ledge]

No need to master backend yet, python + bash is enough for red teaming, reverse engineering is optional but good if you like malware/exploit work

[versed brook]

Haha I am real.

[forest lichen]

aye can someone help me set up a tails linux usb

pls

[delicate crystal]

Just download Rufus with tails linux iso. then convert the file in Rufus into the stick

[brisk tree]

[long cosmos]

if you need to put multiple iso files on a single drive then use ventoy. I love that tool.

[solid peak]

i need some advice on where to look for entry level jobs in cybersecurity or IT, i understand that cybersecurity itself isn’t entry level work so im aiming for a helpdesk job but i cant find anyone who is hiring where i live. what do i do??

and i only have like 3 internships under my belt as well

[echo plover]

does anyone have any experience with minicom on parrot os? I'm trying to install a console program to access a router through a console port in my home lab and I came across minicom so I tried to install minicom on parrot os but I keep getting unable to locate package. I already ran update && upgrade but the package still wont install.

[echo plover]

well I figured this out. I just installed putty for linux instead which is propably a better application. I'm really sick of trying to use AI to figure stuff out it will give a bad response or hallucinate and get stuck on that solution all the time. but the important thing is I guess (the small win is) I figured out how to do what I needed to do.

[crude breach]

@woven anvil Hey bro! If u were to make a plan 0 to hero for red teaming, howd u approach it specifically?

[woven anvil]

@high aurora
That is not your infrastructure to touch.
Read our #📜・rules

[woven anvil]

Set aside some years, and pick anything in IT, and start learning it.

Use as many free resources as you can, and if you find interest in something, learn as much as you can about that.

[crude breach]

Rn ive done:
TCM Academy Helpdesj
THM presec

And im now halfway into cyber 101

[chilly merlin]

about that it wont let me see #🚩・offensive-security and some other channels if u know anything of it

[woven anvil]

Those give great summaries of the tools and concepts, but take what you learn from them, and try to expand to learn more about that thing.
Look into making a homelab so you can practice some things at home. Like spin up your own internal web server.

[crude breach]

I see

Do u think. Ishould be doing more?

[woven anvil]

When you chat in #💬・old-gen-chat more, you will get access to more channels.
#🤝・roles-info has more info.

[woven anvil]

Eventually, once you start having the itch to try some of the things you are learning, or to learn more about the subject.

The systems that are protected/attacked themselves are usually more complex than what a single room can fully explain. So "wanting to find more information" is key to actually fully understanding subjects, using official documentation.

[crude breach]

Ill do this boss

THM new rooms r so goox

Goox

Like the presec knes

But rn im on web hzckinf cyber 101

Learning js

Rooms are SO ass

[woven anvil]

Its less this, and more that there are many different types of learners.

For most people, having a simplified explanation of the end-goal of a subject before diving into deeper studying helps a lot. But if you take a single room as "all the knowledge", then you will be dissapointed, yes.

[crude breach]

Ahh i see but they jumble u into confudion

Like ive never done js

And they barely explain the vadics

[woven anvil]

But they do tell you about it 😉
If you did want to learn specific things, there are other ways to learn some things better. Like codedex or sololearning for programming.

You can also learn about some apache or nginx, and host your own web/javascript server at home

[crude breach]

Tbh i know python basics bu5 i struggle sm to do projects

Like ive completed cs50p

Tried making a c2 connection type thing to my VM

And i struggled even basics

Even tho ive even finished OOP

[woven anvil]

Well, not exactly the basics, right?

The concept of a C2 would involve understanding how OSes themselves work, not just understanding the bare minimum basics of a language.

[crude breach]

😭

@woven anvil when u approach a project

Say fkr example

"I wanna make a tool that automatically posts a tweet to twitter really fast" idk i made this up

How would u approach it

Say u only knew python fundamentals

[woven anvil]

It would also require web/HTTP fundamentals as well.
Twitter/X has an official API, where someone can sign up as a developer. They offer endpoints that people can use to create or manage posts. That would be the official way.

But that will be everything you do. Python would be a tool, but you still need to know the system that you want your tool to manage.

[cyan hound]

Hi guys can someone help me with DSA1024 attack ? I got like 1293 Sigs

[woven anvil]

wdym?

[toxic lynx]

hello can anybody help me get ride of a trojan on my pc, i installed a cracked game and it had a malware in it called (PowerShell/Agent.DXQ) and i cant find any real help online on how to get rid of it can somebody help me ?

[solid coral]

Hi everyone, I got RAT apps like Xworm but I can't make it work if I put it in another laptop , by the way I am a Cybersecurity technical engineering student we are working on a college project not anything illegal

As in the malware doesn't work

[woven anvil]

You might be able to clear it out with malwarebytes or something, but it may be worth it to backup and scan all your files, and reinstall the OS.

[woven anvil]

Why not ask your prof then?
Sounds very sketchy.

[solid coral]

I would and I honestly well because if you guys think its unethical then I really don't want to annoy you guys with it

[craggy basalt]

Please I want to learn cybersecurity.But I'm a beginner

[glass lichen]

YouTube, udemy courses

[unborn ibex]

#👥・new-member-guide

[craggy basalt]

Thank you

[cyan hound]

So like Dsa1024 is key something like rsa but another algorithm, i heard I can break that key with signatures don't know much about it

[woven anvil]

I know what DSA is.
Are you trying to break someone else's encryption?

[brazen flare]

What skills and devices do I need to earn money quickly, not offline businesses but online, legal or illegal does not matter, I am just asking you guys what those things are.

[devout linden]

Well we dont assist with illegal stuff here.

Quick money is something in cyber that requires skill sets. Maybe look at bug bounty programs HOWEVER the skill sets needed are pretty high but can be rewarding

[brazen flare]

So ok

[frail flax]

Uninstall the game and did you try any antivirus? Try malwarebytes, its quiet good

[stone field]

Hey does anyone know if there's a firmware update of Ghostesp so it works with the oled screen on a heltec v4? And if not, is there anything similar to ghost that would work well on the v4, besides meshtastic, and I'm still learning how to compile sketches for it with Arduino.

[steady ledge]

GhostESP itself hasn't been updated to officially support the Heltec V4 OLED yet

[stone field]

Do you have any recommendations for firmware that would work on it outside of meshtastic?

[steady ledge]

try MeshCore as an alternative to Meshtastic, it works on ESP32/LoRa boards like the Heltec V4

I use it

[ivory monolith]

Ik this is a super stupid question but I was wondering are there ways for people to bypass lockdown browsers and stuff like that I am trying to test a system for my school and see if people can somehow go around them and get away with cheating

[cyan hound]

I actually have only Public key i need the private key to sign the messages

[jagged quarry]

anyone knows about fortigate....??

Lik my hostel wifi is preventing me from playing valorant, ig they kept some filters to reduce bandwidth that is causing the issue
and im pretty sure my dumb warden has zero idea about it.....
so any ways to bypass it or somethin???

@everyone

[civic mauve]

Valorant is ass anyways

[jagged quarry]

I agree its just the friends I made there that matters
also almost all game servers are gettin blocked T_T

[civic mauve]

Do other games not work too?

[jagged quarry]

nope
none with server handshake requirements

same with instagram , lik it opens via app but not in website

[civic mauve]

Oh also you can’t do anything against that unless you want to get fined or worse

[jagged quarry]

uhmmm.... just casually spoke to warden he told he himself cant access facebook with a sad face lol

its university ppl ig T_T

[civic mauve]

Has he himself set it up?

[jagged quarry]

tech team of university mp

[jagged quarry]

it works with cloudfare warp tho, but you know too much packet lose

[civic mauve]

Yeah

[civic mauve]

Maybe talk to the tech team

[narrow sierra]

Anyone know whats going on with my mother in laws samsung A22 - it got stuck in a boot loop and went into recovery mode - turned it off and now it wont turn on at all, anyone got any ideas?

[flint lantern]

Just getting into red teaming, any tips?

[plucky ferry]

do pentesting first

[night orchid]

Please how to start?

[crimson flame]

Sometimes after a boot loop the battery fully drains, try leaving it charging for about 30 mins

[narrow sierra]

Thanks for the reply - yep doing that now - When I connected to my PC I could hear the notification it was connected then disconnected over and over!

its on a mains charger now

[fading magnet]

Hey Guys, I have work for anyone who is an expert in hacking and I would also like to pay accordingly.
If anyone is interested please reach out to me.

[narrow sierra]

This is an easy way to get scammed broski

[fading magnet]

If you guys have any doubts about getting scammed then we can get on a meeting and figure this out !

[narrow sierra]

Might want to check the rules here - https://discord.com/channels/990435451334688768/1182147223266537553
3 - No Unethical Activities or Discussions!
Under no circumstance will any user aid any other user in helping to perform illegal activities such as hacking anyone or anything without consent. Additionally, vigilantism against criminals is considered unethical behavior and will not be allowed in this server.

[fading magnet]

And after that it's up to you whether you'll take up the work or not !

[fluid gulch]

No

[cerulean swan]

Any one here good at using py Flask ?

[frail flax]

@lost vapor

[cinder tiger]

I’m a beginner in cybersecurity and currently learning backend development from first principles. Is learning frameworks mandatory for a career in cybersecurity? If yes, which frameworks should I focus on?

[lost vapor]

You will get scammed viciously and only yourself to blame for

[mental birch]

Hello everyone! It's a pleasure to join you guys. I'm new to Cybersecurity and has no background knowledge. However, I'm passionate about this topic and determined to be a brilliant mind in this game. In order to kick off my learning curve, I've been working on completing a certificate on Coursera "The Foundation of Cybersecurity" by Google. I came here for guidance and I'd welcome any pathway/structure/skeleton showing how I can go from the bottom to the top. Thank you all!

[kind zealot]

check out #👥・new-member-guide

[kind zealot]

i think he will help @fathom summit

[wind willow]

I am looking for a friend who is good at networking so we can learn together.

[kind zealot]

u need to find a friend who is bad at network hehe

[wind willow]

So we can grow together?

[wet shoal]

is VMware or VirtualBox better?

[placid wedge]

Parallels

[fluid depot]

Personally I'd recommend VMware for its features and performance. if you dont like broadcom though, then you should go for virtualbox.

depends on your usecase though

[crisp star]

Go for VMware if you have certain security measures in place under Windows 11.

[fluid depot]

hyperv is also a good choice, or the classic kvm/qemu stack on linux based systems ^^

[crisp star]

Stuff like Credential guard is going to kill performance on VirtualBox.

Also Broadcom has decent guest addition which HyperV lacks.

[fluid depot]

commercial, mac-only and limited to windows guests. eh.

[whole patio]

Saw way, way more people move away from vmware to virtualbox or qemu since broadcom acquired it

[fluid depot]

broadcom may suck but virtualbox is pain on another level. when i jumped ship i completely switched operating systems just for qemu.

[whole patio]

If you say so. Vmware always seemed way more error prone.. weird errors too.. like the recent "my cursor is giant", no wait "there is no cursor" or "oh it won't take keyboard entries, switch ps/2 to usb emulation"..

Cant recall any big virtualbox issues over the years

[cinder tiger]

@kind zealot I’m a beginner in cybersecurity and currently learning backend development from first principles. Is learning frameworks mandatory for a career in cybersecurity? If yes, which frameworks should I focus on?

[whole patio]

just start somewhere. The answer if something is mandatory will always be "it depends"

[cinder tiger]

i mean start from where i have no idea role of frameworks in cyber sec ,please guide me .

[whole patio]

Start where everyone here starts

#👥・new-member-guide

[cinder tiger]

so there is no specific frameworks right?

i will go with django or react

[whole patio]

the answer is always going to be "it depends"

[cinder tiger]

hm,get it

[wicked viper]

One message removed from a suspended account.

[steady ledge]

Sure, drop it

[wicked viper]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[steady ledge]

Hm

Sure

@wicked viper I seen the dm

Its normal that the installer doesn’t show the pendrive, you already booted from it so Fedora won’t list it as an installation target
For dual boot you need to install Fedora on your internal disk and make sure you have free space, if it says theres not enough space, you need to shrink the Windows partition first from "Windows Disk Management"

[placid wedge]

What do you use

[quartz oak]

Hey 👋

We built LeadKart, a simple CRM for companies to manage leads and track follow-ups.

How can I make it on a large scale?

[fluid depot]

qemu/kvm as im on arch.

[abstract schooner]

Hello everyone, I am new here, may you guys please assist in finding a legit online job I'm from South Africa

[whole patio]

This really isn't the server for finding jobs

[abstract schooner]

I know buddy... But I'm here to learn what you guys are doing here... I saw posts on Facebook about this chat.

[whole patio]

#👥・info #👥・new-member-guide

[marble shoal]

Hey, Im a cyber security student and im currently in my second year final semester. I feel a little lost, I need to find an intership in 16 weeks. I have not yet made a linkdin, I don't have any certificates or projects. Currently the only "experience" I have is CTF comps and other non releated development projects. My university had given us the opuritnity to get 2 certificates, CCNA student and red hat student crt (I missed both). My questions is what skills should I focus on to be able to atleast land an internship? and are there certificates that i should try and focus on getting

[kind zealot]

if u are broke get free certifications a few projects make a resume and portfolio website LinkedIn and start emailing and cold calling

[marble shoal]

Im broke

any recommendations on certs and projects?

[uncut harness]

Check out the new memeber guide section

[thorn heart]

I’ve been studying malware analysis extensively, but I still feel that much of my assessment process relies on inference rather than definitive evidence. When analyzing a sample, I often depend on indicators such as detection scores on platforms like VirusTotal (for example, 10/74), suspicious strings like registry key references, or simply contextual knowledge that the sample originated from a malicious source. However, these feel more like supporting signals than conclusive proof. I lack a strong sense of certainty, an “aha, this is definitively malicious because of specific technical behavior.” How can I develop the technical rigor and confidence needed to conclusively determine whether a sample is malicious, rather than relying on assumptions or indirect indicators? Tried watchign some youtube videos but still it all feels almost like guess work

[steady ledge]

stop relying on VT scores or context alone

ya should focus on static + dynamic analysis, map behaviors to "MITRE ATT&CK" also document everything and practice on known malware

seeing repruducible actions gives definitive evidence and builds confidence

[thorn heart]

Performing dynamic analysis is difficult though when I am working on samples because usually they just come as stub (the .exe file alone) so trying to detonate the asmple doesn't work.

[steady ledge]

for stubs, try unpacking first and use static analysis (ghidra) or monitor memory during execution in a debugger

Even packed malware can reveal behavior this way

✌️

[crisp star]

https://www.youtube.com/@MalwareAnalysisForHedgehogs
https://www.youtube.com/@sonianuj/videos
https://www.youtube.com/@InvokeReversing/videos
Check them out

[nimble pendant]

Hello sirs and sirettes, anyone's got experienced pentesting wisdom they'd be so inclined to share?
I am a cyber graduate trying to get into the field and looking for real world insights (common vulns, guides.. Anything really)

[open ingot]

Hello guys,my LinkedIn account was hacked now i can't even access it,pls anyone help me

[steady ledge]

Contact support

[worn lion]

does anyone have any good websites or videos to learn linux?

[steady ledge]

@open ingot Important, don't trust anyone on dm's if they ask for money or you suspect it is a scammer block them

[open ingot]

Ok cool

[crude breach]

U do offsec?

[steady ledge]

Maybe

[uneven junco]

Guys is anyone available to help me

So i need help knowing the owner of this TikTok “@bisbaiturpapbas”

[steady ledge]

Didn't you get already warned on #💬・old-gen-chat that it breaks the #📜・rules

[uneven junco]

I wont do it again

[steady ledge]

[crude breach]

Oh just a question

[haughty dawn]

if you have specific questions i can try to answer them

[haughty dawn]

look at job ads for the types of roles you want. see what certs and skills they ask for.

[marsh ermine]

Hello all,

I have a computer science project that will go towards my final grade. If you could please take less than two minutes to answer this questionnaire, it would be deeply appreciated.

This questionnaire requires you to know a little about what a honeypot system is and that's it. Your response is anonymous and your email is not shared.

The target audience is cybersecurity students & educators.
https://forms.gle/EaSpF8jXefQuJB6x5

[viral pumice]

Does anybody know how to make a website with a ai I'm tryna start a business and AI plays a big part

[worn lion]

wdym

[viral pumice]

I tryna start this business where I make a website for companies that don't have a website yet

Im**

@ember apex yh it's really good but I'm tryna see if anybody knows a ai website that can make it in a second for me

[worn lion]

well im gonna guess your building frontend only? id recommend these

Framer AI
TeleportHQ
or just good old chatgpt😅

or WIX AI is good too

its nice too

[viral pumice]

Okay I'm just gonna try all of you guys recommendations

[balmy granite]

Hey guys just to give you some contexts I recently installed docker but I think I got malware

Also there are more then one docker file if I paste it in the bot will think I’m spamming

DockerDesktop

docker-secrets-engine

docker

dockerfile_parse

dockerfile-parse

docke

douds dockertimpl

douds docker gateway
@lost vapor

[placid wedge]

Ohhh a linux user

I have 0 knowledge about linux

[glass lichen]

learn it

[placid wedge]

I have syllabus to cover

[glass lichen]

Brother you don't even have 20min a day? 😭

[placid wedge]

Absolutely not

[glass lichen]

Sad

linux is everywhere

[placid wedge]

My macos is a type of linux too

[glass lichen]

Definetly it is lol

So what's stopping you?

[placid wedge]

Collg , life

Imma head to college now

Then come back and straight to gym after lunch

[glass lichen]

I'd say you have to invest on a good time management

[placid wedge]

And then come back and assignment

[glass lichen]

See you brother

[placid wedge]

After that sleep

[glass lichen]

Good life

[placid wedge]

[placid wedge]

Finding a girl who could fix me

[glass lichen]

Naah bro that's risky investment

Fix yourself by own

[placid wedge]

I just found a group of goth girls in my colg

They have a whole insta page

[placid wedge]

I think I can lean to one of them

[glass lichen]

Okk try lol

[placid wedge]

Ok gtg

Cya

[haughty dawn]

macos is unix but not linux

[strange ivy]

Hello guys

I have a lab at uni of which I have discovered the ports of a links server 4.15 -5.8 port 6667 , what CVE can I use for it to complete the lab and get the flag

Ngl I did some research and found a few but none of them actually works

[haughty dawn]

"links server"?

6667 is (was?) usually irc

what actual service is running

[strange ivy]

Linux server yes , service not sure haven’t looked into that yet . There was also ssh but since no credentials are there so can’t access via ssh

[woven anvil]

Did you tell the prof that you aren't sure how to begin?

[haughty dawn]

think you may be confused. if a port is open there is a service running on it. that service is what you would be trying to exploit. what CVEs were you trying?

[strange ivy]

Not confused more so following the instructions, the lab’s instructions sheet states : scan the host , find CVE

[woven anvil]

But do you know what a CVE is?

[strange ivy]

Yh known exploitation to a specific system

[unborn ibex]

You would have to know what services are running on the open port and its version to see if there are any known vulnerabilities for you to exploit

[strange ivy]

Thank you , I’ll try that next

[woven anvil]

I guess what I am getting at, is I am doubting that this is a uni thing, and it sounds like you are attacking a random thing.

[unborn ibex]

Also like @haughty dawn said it would be helpful to know what CVEs you’ve already tried

[strange ivy]

Very obnoxious assumption , we all have to start somewhere

[woven anvil]

I just find it hard to believe they would drop someone in to find a CVE, without explaining what one is first.

Which CVE's have you tried?

[unborn ibex]

Considering people come in here constantly and ask for help with illegal things it’s not an unfounded assumption

[haughty dawn]

honestly if someone's just asking technical questions that aren't obviously for something unethical then i don't really feel the need to question them on it

[unborn ibex]

I agree, but I can understand why Jeevis might be more particular about it

[haughty dawn]

yeah i get it for staff, just not terribly worried about it myself

[rain ledge]

Whats up people new into this discord and im looking for information into raspberry pi or claude im very much new anybody has information i can learn more

[jolly tusk]

What’s the most secure iPhone app or chat for chatting that can’t be pulled in logs of the phone or wtv

[haughty dawn]

there's a ton of info out there for both. what specifically do you need help with?

[haughty dawn]

signal

[rain ledge]

I want to learn how to run the program and set it up for basics i do plan on in the future running a system based on it for like digital marketing , i looked in raspberry because its cheaper then the mini

[haughty dawn]

what program?

[jolly tusk]

Kk

[rain ledge]

Raspberry pi ( i might be saying things wrong ) very new but im looking to do the same of a claud bot with it but i read that raspberry is cheaper

[haughty dawn]

raspberry pi is a hardware device

[rain ledge]

So i can use that to run something similar to like a claud bot or i got things mixed up ?

[haughty dawn]

https://www.raspberrypi.com/news/turn-your-raspberry-pi-into-an-ai-agent-with-openclaw/

openclaw seems like a security and privacy nightmare

its marketplace is chockfull of malware

[rain ledge]

Yes thats what i was looking into , but i did see alot of it is hacked not secured i just read it happen to mexicos goverment

[wheat wadi]

Is there anybody that can help retrieve my PlayStation account that got hacked?

[crisp star]

Time to contact PS support

[wheat wadi]

Dang🤣

[civic mauve]

Other ways to retrieve the account are unethical and we don’t do unethical stuff here

[wheat wadi]

💔they told me its nothing they could do i was hoping for unethical

[civic mauve]

Welp

Wrong address bud

[wheat wadi]

Its all good thanks bud

[woven anvil]

Watch out for scammers telling you that they are able to do it.
#📢・announcement message

[wheat wadi]

See u a real one i appreciate it

[glass lichen]

I've got like 4 scam message request from here lol, I accept normal dms not THAT 😂

"We can hack Nasa" ~ average scammers

[woven anvil]

Wanna throw it in a #📩┃ticket?

[glass lichen]

Why not? Let's do that brother.. I'm coming

[hallow gale]

I update my kali to 2025.4 from 2025.3 but it , it's not showing the themes or whatever the change made ,looks like the old kali how do I apply ittt

[whole patio]

did you use full-upgrade ?

[deft grove]

Sorry guys anyone know about stayvallmember.com?

[placid wedge]

Isn't linux also based on unix?

[haughty dawn]

yes

[haughty dawn]

that is, linux was built to behave like unix, but it was written independently and is not unix

while macos descends from BSD and actually is certified unix

[opaque wyvern]

Hi. Wondering what the best firmware for a flipper zero is for 2026 t.i.a.

[trail harbor]

Guys us that possible to recover an old instagram account which is not active (do not have 2FA)

[slow epoch]

Hey guys i need some help/advice i know ive asked people this i just want to get some other opinions.

I want to know the Best way to learn Java specifically being able to look at a piece of code and know how to re write and fix it?

[slow epoch]

No sorry I don't know you

[haughty dawn]

there are a lot of tutorials online

but i gotta ask, why java?

[slow epoch]

Uni is making me learn java

[haughty dawn]

ah, same reason i learned it

are you not learning it from your classes then?

[nimble pendant]

Thanks, I've got two,

• what tools do you use for web apps? I'm using zap and found automated scanners aren't that worth it, but mb a paying one is?
• I suppose you have a metodology you apply too, mb there's some good guides on one I could take inspiration from?

[haughty dawn]

never done a lot of web app stuff, most of my work has focused on internal network attacks
ime though burp suite is pretty indispensable. portswigger has good free training on it
don't really have an established methodology i use for webapps

[nimble pendant]

oh internal network attacks that sounds interesting
thanks 🙂

[ruby bolt]

hello could anyone help me to understand few shot emotion detection using prompt tuning

[glass lichen]

You mean?

[kind zealot]

https://reportcontent.google.com/forms/rtbf

https://support.google.com/websearch/answer/9673730

it usually takes more than a month

make multiple requests from multiple emails

[glass lichen]

Im sorry I can't really help you with it but you should know that there could be some people from this server going to dm you and act as a "recovery guy" and most of them are just scam and will ask for money so be careful!!..

[restive field]

Hi,
I am a second year networks and cybersecurity student. I am looking for placements. I have a pre screen interview with a company for a data centre intern role. Any advice I can get

[frail flax]

Which country are you in? You can send a legal letter ( like letter before claim) , requesting Google to immediate remove your data, personal info. You need to chase them with this legal letter which is the first step before sending claim to the court. They/ respondent usually comply after such letter without delays.

[manic bobcat]

Hello guys i have questions where from i can learn of create(coding) exploit with search and analyze the system i will find vuln. in because i cant find tutorial of it and what language of programing you advice to use for ?

[limber vale]

Offering much if u can get in the kcse nce portal

[hallow gale]

Yes i done the process that kalis website said

[fast osprey]

Hello everyone. I kinda need help. I’ve been practicing nmap when I noticed that my laptop is not getting data from my local network. All of my other devices are able to access the internet except my laptop. I don’t know how to troubleshoot this.

[frail flax]

are you connected to the correct Wifi network?

[steady palm]

Is your laptop connected to the wifi

[fast osprey]

Yes. My laptop is connected to the network.

All of my personal devices are connected but only my laptop decided to not work.

[plucky ferry]

there are tools out there that do this already on github.com you can search in the search bar, if you want to make your own vulnerablity scanner or something then you can learn any coding language like C++ or C# or C or Python or Rust 😄

[frail flax]

did you check if you have an IP address?

[fast osprey]

I solved the issue!!!

Thank you so much for trying to help.

I used
netsh winsock reset
netsh int ip reset
ipconfig /release && /renew
ipconfig /flushdns
and then restarted my pc

Basically just threw everything at the wall hoping something stuck.

[frail flax]

sometimes it is the best way to solve it

[minor drum]

Hey guys) Just so you are aware: I have just been scammed by @Richard Cyber.

[kind zealot]

if he is from here raise a #📩┃ticket

[minor drum]

I have reported Fraud already, can also raise a ticket

[proper finch]

Hi guys a friends having an issue with his laptop. And is wondering what could the cause of the laptop starting up he can see the logo when it boots up but a little after it switches to a blank black screen. He's tried ctrl+shitf+wind and B. Nothing happening can someone help out and he's got an Acer Aspire 3 running on Intel

[harsh totem]

Hello. I'm a Computer Engineering student, and I was wondering if anyone had a copy of this book, "Practice of System and Network Administration, The: Volume 1: DevOps and other
Best Practices for Enterprise IT", and if they would be willing to share it. I'm preparing for a major capstone project, and my study materials are depending on just that textbook. Thanks.

[woven anvil]

They made this 1 button starting in windows 8 i think.
These are the steps that "Network Reset" does in the Windows menu.

[woven anvil]

Could try to boot from a live linux USB, and see if that is working. There could be an issue with the windows install, or graphics drivers.

[woven anvil]

This isn't a place to discuss piracy or trading of copyright materials. Read our #📜・rules

[gusty jewel]

how to recover macbook password can you please help me

[gusty jewel]

???

[harsh totem]

@woven anvil, I've reviewed your #rules. I appreciate your response, but I'd like to clarify my request. I'm not seeking pirated material or anything that breaches copyright laws. My intention is to borrow a textbook for independent research purposes, and this platform seems a viable option for such inquiries.

Under fair use provisions in copyright law, sharing copyrighted materials with students or researchers for non-commercial purposes is permissible. I'd like to borrow a copy of the textbook, ensuring it won't be shared further or used for commercial gain. I appreciate your understanding in this matter.

[woven anvil]

How would they get it to you?

[woven anvil]

You should be able to use the apple ID to login to the mac.
If you don't have access to the apple ID, then talk to apple support.

[gusty jewel]

I do but I don't have apple password

[woven anvil]

Is it yours?

[gusty jewel]

yas sure

please let me know? how to reset

[woven anvil]

If you want to borrow something, look for a local library or similar. If you are a student, ask to borrow from another student.
Asking to "borrow from discord" doesn't really make sense. Be careful of DMs about this, because people might see you as an easy target. Don't click on any suspicious links.

[woven anvil]

@gusty jewel
I have told you already, go through the official means of doing so.

Do not ask for help breaking into stuff that isn't yours.
Take some time to read our #📜・rules and #👥・info.

[harsh totem]

Understood. As an independent researcher, I've explored conventional routes aren't feasible for me right now. If someone in this community has a copy and is open to sharing, I'd appreciate it. I know how to handle DMs and verify safe sharing. Let's focus on the request 😊.

[full thistle]

Is it possible to ddos trough email

[frail flax]

You can check Google scholar for that book, or if you are student do you have access to a University library?

[harsh totem]

@frail flax Thanks for the suggestion! I'm aware Google Scholar is great for open access to journal-articles, but I'm looking for a specific textbook that's proven hard to find.
In my case, I'm an independent researcher, exploring various channels to access it. If anyone in the community has a copy or knows of a lead, I'd appreciate it🫡.

[frail flax]

I see you can order it online

[reef garden]

Can one explain to me how to crack WiFi password

[harsh totem]

@frail flax @woven anvil Acknowledged. I recognize the copyright constraints here and appreciate the heads-up from the mods. Since this is a restricted request, I’ll stop asking and pursue other channels. Thanks for the guidance. 🫡

[woven anvil]

Typically involves hosting a wireless network with an insecure older protocol like WEP to have done within a reasonable amount of time for learning purposes.

[reef garden]

Can you explain to me I'm a beginner

[woven hazel]

Hello everyone, I found an internal web app vulnerable to IDOR that lets me enumerate user IDs, and one of the responses leaked a JWT signed with RS256, the public key is exposed via a poorly configured .well-known endpoint, and the server also accepts the jku header

if I can control the jku value, would you go for key confusion / JWKS injection to escalate to admin, or look for a different chain?

I'm trying to see the cleanest way to turn this into full account takeover without dropping obvious payloads

[whole patio]

I think public keys are supposed to be exposed

[woven hazel]

Yes.. public keys being exposed is normal with RS256

the issue isn’t that the key is public, it’s that the server accepts a user-controlled jku

if it blindly fetches whatever URL i provide to verify the signature I could point it to my own JWKS, sign a forged token and get it accepted

[slow edge]

Well what I understand is that it is a misconfiguration chain attack, especially considering the following: An IDOR allows user enumeration, A JWT is exposed in the response, the .well-known endpoint exposes signing material, the server accepts and trust jku header dynamically.

From a security standpoint this is massive, but if this is a BB, then I feel like you should stop here.... but if you still are going for account takeover, then without dropping anything which will lead to illegal discussion, I can drop some public knowledge

• If the verifier accepts arbitrary jku values
• if the verifier fetches whatever JWKS is hosted there
• if the verifier uses the provided key to validate the token
  These are most common way which might break the trust boundary and might be used for further account takeover

Make sure you understand the structure of a valid token (IDOR might help here)
Try to see if you can influence which key the server trusts
Try to mess with claims

I mean this is all public and you might know it, but yes I cannot spill more detail

[slow edge]

Ya you know what you are doing.... just dive deep! Well idk the structure but I def think you got this

[woven hazel]

haha yeah, thats exactly how I’m looking at it.. more of a misconfig chain than a single bug

I will dig a bit deeper into how the verifier handles the jku and which keys it actually trusts before going any further

really appreciate the sanity check

[modern wagon]

I m currently 19 and gonna be 20 in three months,after the claude announcement of its AI, i m seriously stressed i want to be in Blue teaming but I m thinking that I just leave the Cyber security field to do something else(Business or anything) should I just switch or wait another year plss give me suggetions I m literally scared I m too scared to leave cause I have already wasted 2 years and have made very little progress and now when I became serious this claud thing happend I am at a Point where there is a cliff on one side and a volcano on the other side BTW I m just using claude as one example the main fear is "AI"

[proper robin]

i think youll be fine if you learn with passion and truly understand what you do

ok i have this thing

ctf challenge thing

i need to get the reference/status code of declassified docs

but when i open one i dont see the code anywhere

could it be in metadata? plain sight? i could honestly show you the prompt if you want me to

anyways dm me

if ur willing

to help

[whole patio]

Most people in the industry are not afraid

[modern wagon]

Thing is AI is already capable of developing website and thousands of People are getting lay off, I dont know if its just me or not but I m starting to notice this in this field only Elites of Elites will survive

[whole patio]

Yeah we get your fear - and I am telling you that most professionals do not share it. Don't fall for marketing

AI has no business model, anywhere, in sight. On the contrary it is burning capital faster than you could literally burn it. It is not sustainable, and more and more companies realize that is also is quite bad on average at what it does

But.. marketing buys the headlines

[naive terrace]

Yo guys, I need some help with bug bounty hunting and web application penetrating, I am a beginner.

[whole patio]

Ask the actual question

[naive terrace]

Literally everything

I know practically nothing

[whole patio]

Then start here #👥・new-member-guide

[naive terrace]

Thx

[modern wagon]

I don't understand what do u mean burning Capital faster? Isnt is supposed to reduce cost?

[whole patio]

Hell no ^.^

That is the marketing promise

[modern wagon]

Like AI is Doing much faster and with the besttttest quality Although expensive

[whole patio]

But it is stupidely expensive to run, which is why most people "rent" it, but at a much lower prize than it actually costs

[modern wagon]

But it has to be lower than an employee Salary right?like Company would prefer Ai rather than a human employee

Even though its expensive

[whole patio]

The idea is the same it has always been.. outspend the competition, make them fold their projects, become the only alternative, then raise price

[whole patio]

Not even close, no

[whole patio]

Have you ever owned a cat?

[modern wagon]

No

[whole patio]

If you had.. chances are some company would have sent you cat food for free

So your cat gets actually addicted to that brand

[modern wagon]

Ok.....

[whole patio]

Won't touch other stuff

That is what ai companies are doing right now

Stuff AI into everything you could possibly use

Doesnt matter if you want it.. and it doesnt matter that it is costly.. they want you to RELY on it...

AI replacing your job? Well it cant do it quite well, but that is okay, cause they AI service providers are dumping the service by a hugh discount.. their goal is not to make a profit, it is long term.. make people "not consider a career in that field" and make people "fire the people they need", cause now AI is here

But its just a scam.. AI companies are incredibly far away from a working business model.. they are burning through loans and venture capital and quite a lot of fraudulent transactions.. just to hold out just a little bit longer

The truth is .. no one is willing to pay for AI services what they actually cost.. and HELL NO what is needed to make a profit

[modern wagon]

Even if they provide best quality?

[whole patio]

they do not

none of them.. nowhere

you gotta learn to differentiate between marketing and news

[modern wagon]

Have u used claude opus-4

?

[whole patio]

on average AI are quite bad at what they do.. what you read about are the statistical outliers

and studies show its getting gradually worse overall.. which surprises no one, cause more and more current AI models are actually trained on the output of older AI models.. which were error prone to begin with. Last I heard about 30% of all output contains factual errors

It is becoming rather good at seeming good at what it does though.. that is what it is optimized for, after all

so managers, kids and gullible people cant differentiate both

[modern wagon]

wait the Ai is training itself from data isnt it?

[whole patio]

summer 2022 was the moment, where each day AI created more written content than was previously created by the whole of humanity

and it all had a percentage of being nonsense

like those stupid google ai answers, or news outlets who switched to AI content, etc

since then AI models are - for the most part.. trained on the error filled nonsense prior AI models produced

we let them urinate in the well of human knowledge for the lols

[empty roost]

Suggestion for beginner looking to get sec+ certification

[modern wagon]

Answer me do u agree that Software engineers roles are replaced by AI and many employees have been lay off

[whole patio]

I agree that many have been let off, and that the AI that replaced them does a much worse job at replacing them.

This is the phase of "free cat food" to make people depending on it.. it is not sustainable and can't go on

the usual promise is "Oh you know, this is a new technology and the next version will fix it"

But here is the secret.. those systems are running perfectly fine, they do exactly what they are supposed to do.. there is no error to fix.. that subpar output is all that the technology is capable of.. they have no concept of context.. or what is correct..

[harsh totem]

I agree. I did do a basic Google search and discovered some assets, but access was limited, perhaps due to fair use provisions and copyright laws. My initial query was for the complete material, which I understand might not be accessible. Thanks for your guidance and activity. Cheers 👋🏾.

[woven hazel]

Learn IT basics like networking, Windows/Linux and security fundamentals, study Security+ with books and videos and also practice labs with scenario-based quizzes

[modern wagon]

So u r saying my fear is useless and I m just overthinking?

[whole patio]

Pretty much

you are just falling for a scam here

like a lot of people do

That is why I said most "professionals" are not worried

Essentially everyone is just waiting for the hype bubble to burst

no more free cat food

[unborn ibex]

@whole patio very well explained 💯

[modern wagon]

My proffesor said that AI has replaced the l1 SOC roles it can already do Triage and make incident Based Reports and then I heard yesterday stock market crash News which made me more scared, Thanks for guiding me

[empty roost]

Thank you I’ll figure out the resources, just needed a direction

[woven hazel]

yw have a great journey

[whole patio]

it can do the 1st lvl soc analyst role.. if you are fine with your SIEM delivering undetermined output.. which every sane person will tell you "Get lost".. usually people want their security tools to have a determined output.

and SIEMs are a pretty good example for stuff you really dont need an AI for

[modern wagon]

The way you explained me helped me a lot now I can take a decision Thanks bro

[whole patio]

anytime

The truth with SIEM is.. most people don't care how they do

the vast majority are managed services.. and companies just pay them for compliance reasons

[unborn ibex]

I would say generally speaking most companies don’t actually care about their security posture, they just want to meet the minimum compliance requirements so they can be left alone

[whole patio]

I've talked to several clients who say they have a SIEM, and when I asked them if that company has ever contacted them to verify suspicious behavior.. anything at all.. the say "No, never"

[unborn ibex]

Which I think is really unfortunate 🙁

[whole patio]

Whether they lie in hammocks or doing their job.. doesn't matter to them

they just have to get that checkmark during their audit and thats all they care about.. if it is cheaper than the competition.. great

I know a really good pentester.. who once had an engagement at a client, where his own company also provided the SIEM

20 minutes in he had everything compromised.. told the client.. the client was .. curious.. told the pentester to be as loud on the network as he possibly can be

"Let all the alarm bells ring"

he did that for 2 days.. and the SIEM never so much as wrote an email or phoned in

No one really cares about SIEM performance

Or let me rephrase... there is definitely a market for low effort cheap managed SIEM services

[modern wagon]

Wow

[whole patio]

did you see one of the videos about the OpenAI - NVIDIA - Oracle trick?

[modern wagon]

Nooo

[whole patio]

TL:DR .. they loan each other money in turn with future money they do not have and cannot obtain.. but as they each promise each other, they each use that promise to say they will invest it.. its a circle jerk project to disguise that they ran out of money to burn

[modern wagon]

OoooHhhh......

[magic cipher]

i am starting roppers academy is it any good?

[wise verge]

Hello everyone I’m undergrad student in the field of cybersecurity and I’m little bit what to do where to start so anyone of you help me through out this I’m interested in penetration testing

[whole patio]

#👥・new-member-guide

[nocturne scroll]

Hello anyone can help me with how to install and use worm gpt

[weary spade]

dm me if you know anything about discord bots

[wicked viper]

One message removed from a suspended account.

[woven hazel]

Holy skidding

[unborn ibex]

#📜・rules

[wicked viper]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[clear lintel]

hello im from the netherlands and im searching for a data leak from a wifi provider called odido i cant find it the team that hacked it call themself the shinyhunters can someone help me?

[half summit]

heyyy

does anyone know about CVE-2024-21410 (NTLM Relay EoP, CVSS 9.8)?
ive been learning for a bit but i got stuck in how to research these types of topics.

[half summit]

or at least tell me how i can research

please :))

[half summit]

yeah but, how do you understand more about it? im new to this and it all seems confusing lol, what did you learn about it?

like what websites would explain replication? because i feel like all they say is what it is yk? my bad if its a stupid question

[half summit]

thank you so much man, i really needed some guidance, i appreciate it a lot!

[wheat dock]

DMs

Only for educational purposes

[dim flax]

yo chat, if AI has taken over most of the entry-level jobs in IT (specially junior developer) what is the best path way to become a senior developer with job experience?

[wintry spade]

Hello everyone. How my friend can log in on Instagram profile, they told that she is not with organisations rools. She didn't made any actions against Instagram rools
They request ID she sent 3 times and they answered thay they can't recognised her with her look right know
Is it hacking on yor opinion and what is hood steps for her to nring back that account or make mew
Thamks im advance

[slim hamlet]

any free resources to learn game hacking? no yt videos btw.. I really wanna go dive deep in it...

[torpid jungle]

AI hasn’t taken over most entry level jobs. At least, not as far as I can tell.

I’d say it’s kind of hard to level up your seniority any other way than working with other people and real systems, with technical, business and people challenges that force you to grow. So if you absolutely don’t want to or can’t find an entry level job, maybe try with a big open source project?

[dim flax]

Aight sure sure, I'l keep that in mind

[modern wagon]

i have purchased the vip+ subscription of letsdefend.io is it enough to get be a "job ready" if i like do it on regular basis

also can anyone suggest me 2-3 projects that can help me get an entry level job

[steady locust]

anybody into pentesting looking to mentor me?

[whole patio]

There really is no mentoring in this field.. part of the job includes the ability to do your own research into topics that are new to you

A small army of people want mentoring, no one wants to mentor

Curated learning environments, like those mentioned in #👥・new-member-guide is about as close as you get

[frosty needle]

Hey Owlsec, recently I started developing an AI Agent with openclaw
I'm having some trouble getting websearch access for it through my perplexity api. Are there any skilled Linux users out there who might be able to walk me through it?

[cunning minnow]

Hey everyone!
I’m actively exploring AppSec / Offsec roles
My thesis was on AI hallucinating malicious packages into CI/CD pipelines and found a Sev3 at the last company I interned for (I have a degree in electronics and cyber if that matters) so if your company is thinking about AI, security, and all things cyber, we should talk!

Here’s a cool version of me aka my portfolio (don’t ask me for the password it’s literally on the search bar🥷🏻)
https://portfoliosushmithareddy.work/

[woven hazel]

I might not know OpenClaw specifically, but if it’s a linux + API config issue I can probably help troubleshoot

Are you getting an auth error from Perplexity or is the agent just not calling the websearch endpoint correctly?

[frosty needle]

The issue is in the openclaw prompt. I can't seem to figure out how to get claw to run the code.

[hardy pulsar]

id guess someone would do it if you paid them

[woven hazel]

sounds more like a tool execution issue than the API itself, if Claw isn’t running the code, its usually because the tool isn’t properly registered, the prompt isn’t explicitly telling it to execute the tool or code execution isn’t enabled in the environment

I’d double check the tool config and make the instruction to run the code very explicit in the system prompt

@frosty needle

[frosty needle]

Thanks honestly I was thinking something similar. I'll check the tool configuration tomorrow. 👍🏾✌🏾🤟🏾👆🏾

[woven hazel]

✌️

[unique void]

Is anyone in here a beginner, and looking for a learning partner?

[sinful lark]

How do I bypass discord face ID verification

[woven hazel]

Join 10 serious political servers

Wait discord to classify you as an adult

And then enjoy whatever you want to do

[gritty oasis]

hi guys

I've been working on a starup from past three months , any suggestions for security and marketing

its a website btw

[light grail]

hey if anyone is willing to help there is this one person in roblox who found out my password and now i want to find his location and his password and log in his account and i want to get revenge from it

[urban fossil]

Good day everyone please can anyone help me with sky sorter license key.

[lost vapor]

we don't help with that, if you get scammed via dms it's on you
refer to #📜・rules and #📢・announcement message

[kind zealot]

what help?

[urban fossil]

Sky sorter license key?

[kind zealot]

yeah but how do u think i will help

[mystic egret]

does anyone knows how to search on the deepweb? my internet provider is hacked and they leaked millions of data and i wanna know if im a victim

[crimson harness]

Why do hackers use Linux instead of Windows

[crimson harness]

Bro 😭🙏

[molten hatch]

because many tools that hackers use, are not available on Windows

[woven hazel]

No need to search on the deepweb

use breach notification services like https://haveibeenpwned.com/, check if your ISP has published an official breach notice, monitor your email accounts for password reset attempts and enable MFA everywhere (especially email and banking)

[mystic egret]

thanks captain will do

[crimson harness]

Ohh

[plucky ferry]

just go on haveibeenpwned

[hollow aspen]

May I request help for htb

[woven hazel]

Sure drop it

[hollow aspen]

Wdym drop it

[crisp star]

Do you ask about a specific HTB box that is still active?

[hollow aspen]

Yes

[crisp star]

What's the box name?

[hollow aspen]

facts

Idk if im braindead or

Cuz like

I foudn some ssh keys

But i dont know how to use them

[woven hazel]

Bro 💔

[hollow aspen]

Wdym bro

[crisp star]

Since it's an active machine, we are not really allowed to post any write-ups publicly, but HTB server should have a channel where you can ask for a nudge.

It's an easy machine so it's probably something very simple

[hollow aspen]

Hmmm

[polar pond]

Remember tho just because something is easy to 100 people it could be hard to a different 100 ☕️👀

[near phoenix]

i need some help getting rid of a bios lock on an old laptop of mine, i have this old broken laptop and i put a bios password on the entire disk making it a full-on brick since i dont know the password anymore 😓 i did attempt all my past passwords/common-passwords i'd use but i wasnt able to unlock it, i dont mind fully wiping it (but due to it being fully locked down i cant boot anything)

[crisp star]

Yea probably on the more difficulty side

[polar pond]

If it was purely easy why is there yellow ☕️👀

[lost vapor]

bring the motherboard to the manufacture and confirm ownership

[near phoenix]

oof! ill probably just open it up and see if theres some worth in parts like RAM in there its kinda weak anyway and i feel not worth the hassle to get it unbricked 🙃

[hardy shale]

Hi everyone, I’m new to cybersecurity and I’d appreciate your perspective. I’ve been wondering whether AI might eventually replace many roles in cybersecurity and IT overall.

[woven hazel]

Welcome, i love your name

so

AI will definitely change a lot in cybersecurity like automating repetitive tasks like vulnerability scanning but it’s unlikely going to fully replace humans anytime soon

Analysts, threat hunters and incident responders still need intuition, context and creative problem solving that AI can’t replicate yet

[hardy shale]

But it's getting hard to break into SC, isn't it?

[crisp star]

It really depends what your role is going to be. I believe that AI will replace some redundant task that don't require much brain power.

[woven hazel]

Yeah, SC is definitely more competitive these days

[crisp star]

Roles like SOC 1 is probably going to be replaced by AI. So time to specialise in doing threat hunting and IR.

[hardy shale]

Have u got any certifications? I'D love to hear abt it

[woven hazel]

I’ve got Sec+, OSCP and recently CCSK

[hardy shale]

OSCP is EXPENSIVE ASF😭😭😭, I'm broke international student

[woven hazel]

haha i can relate, it destoyed my wallet but OSCP also opens lots of doors

[hardy shale]

So OSCP is worth it?

[woven hazel]

Totally depends on your goals

[hardy shale]

Like it opened new horizons

[woven hazel]

yea

[hardy shale]

Get it, thanks for helping me out

[crisp star]

I heard CPTS is much better when it comes to learning new stuff

but OSCP is recognized so...

[woven hazel]

But if you’re just starting out or broke you can get almost the same skills with free platforms like THM, HTB, and Web Security Academy

[hardy shale]

I’m doing HTB, but the problem is that I’m currently studying in Japan, and Japanese companies seem to only recognize OSCP...

[lost vapor]

you can get the CPTS

[hardy shale]

Keep it in mind💋

[lost vapor]

alternative to oscp, cheaper, should be a bit harder than oscp from what i've heard

[crisp star]

Or CRTO

I love CRTO cause you can use Cobalt Strike

[lost vapor]

they let you have a license for free?

[naive echo]

Bruh

[crisp star]

No. The provide you with a VM to the CS server.

[woven hazel]

yh, I get that

some regions are really OSCP-focused, especially in Japan

[crisp star]

You from Japan?

[woven hazel]

One approach is to keep doing HTB for hands-on skills and save up for OSCP later, that way, you’ll already have the practical experience and the cert just validates what you already know

[woven hazel]

Nope

[hardy shale]

Ukraine, but studing in Japan

[naive echo]

https://tenor.com/view/chief-blue-meanie-blue-meanies-yellow-submarine-the-beatles-wojak-gif-5154268277057155175

[crisp star]

I have the feeling that the majority of Japanese website are still built like in the 2000s

[woven hazel]

Real

[hardy shale]

You right man,Japanese technologies are far behind.

[naive echo]

It’s cos they culturally value information heavy design

[crisp star]

It was a pain to register on JAL website to buy tickets lol

I think the max password lenght that was allowed were 12 letters + digits.

[naive echo]

@woven hazel be like a cyber man in this joint

https://tenor.com/view/delete-cybermen-dw-doctorwho-exterminate-gif-4902419

[dim flax]

anyone here does does freelance? I wonder how freelance work? you find clients and apply yourself to them? or the clients finds you and ask for service?

[whole patio]

Ideally you first have clients who tell you that they would like to pay you as a freelancer, and build from there

It really helps to be recognized before

[craggy solstice]

Hey, someone who’s got Cysa+ would like to share some experience with me?

[bright sonnet]

Need some help with TryHackMe room

[atomic prism]

Hi

[lost vapor]

which one is it?

[bright sonnet]

I am doing the Owasp Juice Shop room, and in Task 7, DOM XSS based attack, when I perform it with iframe, I see the alert and therefore the attack itself is successful, but I don't see any flag on the page. Also, for some reason when I coppied the flag from the writeups, it still doesn't accept the flag and tells me it's wrong.

[lost vapor]

usually clients would ask for repair or recovery services, of course as the person doing the work you should know what things should be in your control when it comes to recovery
❌ instagram account recovery
never offer these, if they can't recover their instagram account then you cannot either in most cases, since the service offered is located in servers you do not have access to recovery is beyond the question
✅ local file recovery
it might be possible (if you're a digital forensic, or just having some basic recovery knowledge) to recover files that weren't fully overwritten by the system

kind of like that mindset

[bright sonnet]

As I understand, the flag was supposed to show up after the alert?

[lost vapor]

did you insert the payload in the iframe tag?

to check that you can F12 into inspect mode on the browser

and check on the iframe tag

[bright sonnet]

yes, because I got the alert on the screen. I used alert() method

<iframe src="javascript:alert('XSS')">

[woven hazel]

If you’re getting the alert, that means the XSS is triggering but in Juice Shop the flag usually appears in the scoreboard, not directly on the page

Also make sure you’re doing the payload exactly as the room expects

And yeah copying flags from writeups won’t work since they’re instance-specific

[narrow sierra]

should pin this tbh

[weary spade]

?

[remote gust]

is a macbook good at operation/cybersecurity like windows?

[woven hazel]

Yeah, a macbook is totally fine for cybersecurity, It’s unix-based so you get a solid terminal

Also compatible with VMs

[remote gust]

is it super undectable like a windows computer could be?

[woven hazel]

not really, no OS is “super undetectable” by default 😓

macOS and Windows both generate logs, network fingerprints and telemetry

[dim flax]

Uhh thanks but I mean about like side hustling digitally, like freelancing in upwork or fiverr as a web developer something like that, I just want to know if clients will approach you or you will approach them in the digital world of freelance, but the service you mentioned is a good business idea especially if you are running a physical store

[strange crown]

Hey guys what is entry level job in it and what do I need to get this job?

[kind zealot]

what job

[strange crown]

any job where I dont need experience and I can learn new things

[kind zealot]

clients usually don't approach u have to find them email or something but yeah they ca approach if you have marketed yourself correctly

[bright sonnet]

it works actually, this is the first flag that did not work

[bright sonnet]

Yes, I do that

[remote gust]

whats the best free vpn and browser for hacking and not getting caught on mac

[woven hazel]

Mullvad VPN its a great VPN

[remote gust]

is it. free

i dont think it is

[woven hazel]

Nope

[remote gust]

whats the best free one'

[woven hazel]

I used one named RiseUp long time ago

[lone shuttle]

I’ve used proton for a while now… it’s good but idk if they store logs…

[woven hazel]

If copying didn’t work (which is normal), make sure you’re grabbing the exact flag from your own scoreboard after triggering it

If it’s still not accepting it, try resetting the room or refreshing the instance just in case it is bugged

[remote gust]

which macos version should i download for proton

[bright sonnet]

I use Mullvad. I remember reading people got caught from Proton providing everything on the person when government agencies knocked. While with Mullvad, they also let authorities in, but they ACTUALLY had 0 logs, so nothing was found on some other case

[remote gust]

fr??

[bright sonnet]

yes

[lone shuttle]

Ye, Ik about Mullvad… they’re like homies

[bright sonnet]

just search online

[lone shuttle]

Its paid tho… I don’t think you’re interested in them paid ones

[remote gust]

yea

why cant we send images

bruh this is so limiting

without ability to send images

[bright sonnet]

If you gonna do some shady stuff, you better pay 5 euros per month than risk you ass for free soup

[lone shuttle]

Level up

[remote gust]

to which level/

[remote gust]

true

[bright sonnet]

You can also pay in crypto for Mullvad

[remote gust]

if i dont have 5 dollars dont think ima pay with crypto 😭😭

[bright sonnet]

Why do you need vpn? For enumerating sites? For watching netflix? etc ?