👥・help-me

[ocean flax]

Hi everyone, I’m trying to break into cybersecurity properly and could use some advice from people already in the field. I’ve done some real Microsoft 365 security work recently and now I’m figuring out my next steps but feel lost

I don’t know if anyone would be willing to give me some advice or tips

[bright sonnet]

Tried but did not help, still no flag triggered

[woven hazel]

If the alert fires but the challenge isn’t marked as solved in the scoreboard then it might not be the exact vector the room expects

some DOM XSS tasks require triggering it in a very specific context

[bright sonnet]

I am not really in the cyber field, rather IT, but I am gradually building knowledge to do pentesting one day, and offensive security in general. You wanna work on the Blue Team in SOC being like Security Analyst or?

[ocean flax]

Yeah man I’m leaning more towards the blue team side and cloud security or ai security which im still just experimenting with to see if it’s worth it fr

[bright sonnet]

I search more and got the flag. I understood what Juice Shop wanted. The correct payload is <iframe src="javascript:alert(xss)"> While I was trying ' around xss, it should be `

Thanks for the help @woven hazel

[woven hazel]

Yeah, with DOM XSS the exact context matters a lot

[woven hazel]

yw fam, Glad you figured out what Juice Shop was expecting

[bright sonnet]

I would suggest than focusing on THM and HTB Blue Team certification with HTB being the stronger and more indepth choice. But you can study on both platforms in in parallel

[ocean flax]

Appreciate that, I’ve actually been strengthening KQL and cloud security but I agree I probably need more structured blue team lab exposure. I’ll look into the HTB pathway properly. Have you found it helped you in interviews?

[bright sonnet]

I am still learning into my first certifications there. The IT job I am doing did not really relate to cyber, but for sure many concepts overlap so I would say these platforms are also great for general IT and OS / Networks / Web knowledge

I believe you will find rooms on KQL on those platforms

Currently I only hold CC from ISC2 and Google Cyber Security in terms of certifications. But I am supposed to take CJCA and CWES on HTB before August and PT1 on THM before December this year.

[ocean flax]

Appreciate that I agree there’s a lot of overlap between IT and cyber and I probably need more structured blue team exposure I’ve done hands-on defensive work in M365 already, but I want to formalise my foundations properly. I’ll look deeper into HTB’s pathway and see how it complements my KQL and cloud focus but how are you finding the studying aspect of it

Like sometimes I get really burnt out

[crisp star]

If you want to learn specifically KQL, you can have a look at https://academy.bluraven.io/

https://letsdefend.io/
And well that's the usual blue team material

[ocean flax]

This is golden thank you😭

[lone shuttle]

idk abt that man :((

[remote gust]

which is best vpn for backing

[plucky ferry]

mullvad

best vpn overall

[remote gust]

how about best free vpn

would that be proton?

[crisp star]

You don't need a VPN if you are hacking legally

[plucky ferry]

probably

[dim flax]

Got it, Thanks

Anyone got the feeling of wanting to program but dont wanna program? like you know how it's logic works but you want to understand it more deeply of how that logic thing works from within and within and within and so on

[bright sonnet]

Same, and I am quite often just lazy to progress...

[idle kelp]

bro theres no good vpn for free for illegal shit

[whole patio]

how exactly do you think free vpn services finance themselves here

[charred roost]

trying to get into cybersecurity pentesting, is tryhackme a good resource?

[unborn ibex]

Yes

[remote gust]

free users

[whole patio]

What - you believe they finance themselves by people who are not paying anything?

and by asking for "the best" free service.. as in I assume the best service and bandwidth.. what do you think they finance that with?

Honestly and 100% want you to think about that

You seriously dont think they keep records?

[woven anvil]

Data about the users becomes valuable.

[whole patio]

long, long ago we made jokes about how clever it would be for law enforcement to offer free vpn services and let the nefarious people come to them.. not a lot has changed since then

[compact spruce]

any good suggestion for a newbie into cybersec

[whole patio]

The usual advice is to start here #👥・new-member-guide

[compact spruce]

kk tnks

[remote gust]

good thinking

im js tryna get into com

[whole patio]

Unless you are trying to do something illegal, you don't need a VPN service

[chilly merlin]

💔💔

Can someone please please tell me cheap options for laptop/pc which support pytorch?

[whole patio]

https://www.geeksforgeeks.org/python/pytorch-system-requirements/#hardware-requirements-for-pytorch any that meets the requirements

[chilly merlin]

I'll check it out thankyou!

[remote gust]

what are the most important steps to protect privacy and address while hacking

[woven anvil]

Which type of "hacking"?

[remote gust]

like trapping

[woven anvil]

Ooooo like unethical stuff?

[remote gust]

yea

[whole patio]

https://tenor.com/view/don't-do-that-don't-stop-stop-it-john-oliver-gif-12256614430623181140

[woven anvil]

Let me point you at a great resource for that -------> #📜・rules

[remote gust]

goody 2 shoes

[remote gust]

i meant im just trying to stay undetected when im bug bounty hunting

[woven anvil]

Oh, if thats the case, then make sure you read our #👥・info as well.
I'll give you some time.

[sacred plume]

I need an cloud device to run 24*7 but i aint gonna pay any suggestions? Or a vps

Free ways

[plucky ferry]

there isnt any service like this out there apart from google cloud or azure servers

which dont give you full access

very limited with what you can do with them

[swift jay]

@sacred plume You can use Utho.com cloud service provider

[plucky ferry]

pretty sure they're not free lol

not sure why you suggested that

[haughty dawn]

yep, if a service is free, then you are the product

[whole patio]

Oracle terminated their free server pretty quick anyway, once you did not pay

[plucky ferry]

do you have root access and is the server accessible from the public internet?

[tidal geyser]

How do I find my old password on account I lost

[plucky ferry]

hm fair

[swift jay]

@plucky ferry Deploy your own compute using Proxmox

[whole patio]

Probably won't

[plucky ferry]

not in the cloud, not publicly accessible, not ideal

[whole patio]

They just told me that they stop providing it

[swift jay]

@plucky ferry One can deploy Proxmox in their Home Network and in given sepecific safety precautions can use it anywhere

[haughty dawn]

disagree a bit here though. "need" no, but i vpn most all my traffic so isp isn't tracking everything

[plucky ferry]

not ideal for cloud infrastructure or your home network

[haughty dawn]

what is "trapping"?

[whole patio]

So do I - but he asked especially "for hacking"

[swift jay]

@plucky ferry what's ideal then ??

@plucky ferry show me the torch

[plucky ferry]

for cloud infra

buying a cloud server

lol

[swift jay]

@plucky ferry THat cost you dummy

[whole patio]

Yeah it was one of those "always free" offers

[plucky ferry]

obviously, if you want HQ hardware and actual infra you can use, you gotta pay

nothing good is free

go get a job

[swift jay]

@sacred plume he said specifically he don't want to pay

[whole patio]

But whether they want/can/will doesn't change the situation

[plucky ferry]

and i have already given other options so did @turbid glacier

[swift jay]

@plucky ferry what i suggested was Real Life senario which he can actually deploy maintain and use for free

[plucky ferry]

read

read

[haughty dawn]

often good practice to keep it on anyway for that imo. even if you're doing something completely legal, it's still possible you might piss off a corp that goes after you. no reason to give them free ammo.

and if going into ethical offsec, it's good to build cognizance of opsec around your activities

but yeah i would not recommend using free vpns 99.9% of the time

[whole patio]

That is really not their situation as they described it

[sacred plume]

Thanks for your suggestion unlike some idiotics who knows how to make fun only

[haughty dawn]

good for illegal case and for legal case 🤷‍♂️ only time i'd say it's better to not use one is if all your exits are flagged and vpn detection changes target behavior

[woven anvil]

If one has an agreed upon scope, and needs to know what IPs the scans are coming from to ensure that things are getting testing properly, then you would not want a VPN.

If you are working for a company, then you might also not want information going through a third-party exit node provided by "some random company". There are many reasons to both use and not use VPN in the professional sense.

[haughty dawn]

undetected or unidentified?

[woven anvil]

Please search up what they are asking for in google to understand the intent, and believe me when I say that we should stop talking about it. It is a dead question in this context.

[whole patio]

I would say THEN you would use a VPN

[haughty dawn]

i'd agree with that in the case where IP whitelisting is needed, i had to do that for a sensitive test once. that message was more addressing bug bounty context where there's no existing relationship

[haughty dawn]

ah i didn't understand "trapping" in this context but get it now. scumbags 🙄

[tidal geyser]

Can I get a recommendation for a very strong vpn

[whole patio]

whats your budget

[haughty dawn]

mullvad pretty solid

[tidal geyser]

Can I get I on play store

[haughty dawn]

no idea

[woven anvil]

Trust me, I love VPNs and networking. 😛

[woven anvil]

@frozen girder
Read the #📜・rules

[brisk frost]

Waaaaaat?
There are.. RULES????

[remote gust]

both

[whole patio]

You really have not the slightest clue what you talk about, have you

[woven hazel]

💔

[bitter spade]

Can someone help me get more likes on my insta comment I need to win for giveaway

[uncut harness]

🛸 👽

[haughty dawn]

bro kinda wild that you just straight up said you want to do unethical things earlier

[toxic umbra]

need help getting acc back

[unborn ibex]

Contact the service for account recovery help we do not help with that here

[toxic umbra]

I've try that and haven't got my acc back

[unborn ibex]

That’s unfortunate but it doesn’t change the fact that we do not help with account recovery here.

[hushed oasis]

Hi, I am about to get kicked out of one program that gave me 9k in aid cz i had a missing monthly payment. I am looking for small projects.

I ship insanely fast without quality loss. Plz help.

I could send my portfolio if you could plz dm me

[unborn ibex]

#📜・rules there is also no self-promotion permitted in the server

[whole patio]

We especially do not deal in account recovery here, for obvious reasons.

Might get DMed by scammers now

[wind minnow]

Hey guys can anyone help me with a name of software I can use to track down my lost IOS phone

[whole patio]

Easy. You can't

Unless you have set up software beforehand

[wind minnow]

Then how do the pops track phone when they are stolen

[whole patio]

You mean police? They usually don't. If they do, it's not simply a tool.

[frank widget]

You can use "Find My" search for it on the iCloud and log in, it will show you last known location

Apple loves to know where its stuff is

[whole patio]

That's the part with "unless you've set it up beforehand". Won't do you any good though, if someone found it

[frank widget]

If it's off or reset, you're probs SOL

And yes, I mean, depending on where you are, law enforcement probably won't help any way so I completely agree that if it's stolen you probably won't get it back without buying it back

There was a whole thing in the US where some lady tracked her "lost" luggage to a shipping container at a port and the police still wouldn't let her get it, it just got shipped overseas

[whole patio]

Still surprised the stuff isn't inside some faraday bags

Apparently not necessary

[abstract pendant]

So just a quick question, im not that great with all this stuff but my mother is a little worried, and I feel a little bad I cant answer her question. I cant send images on here and I dont know if im allowed to do this but can I dm someone? Its about multiple WiFi names I dont really understand 😓😓

[woven hazel]

No need for images, you can drop the question here

Don't worry

[abstract pendant]

My bad if I sound a tad dumb by saying this, but my mother's saying she lives in a newbuild area, no other occupants in the house except 1 neighbour

She's seeing all these same wifi points?

And they all start with the same 'STL'

And shes just worrying if hes trying to get her to connect to something accidentally to do something malicious

Like I think it'd be a bit easier to send an image 😂😂

Bit confusing to say it like this

@woven hazel

She only lives near 1 other person

[woven hazel]

haha no worries, it makes sense

What she's seeing is probably just multiple access points from the same ISP/router brand, they usualy name SSIDs the same way in an area

[abstract pendant]

banksy
stlvep3a
stlvep3a (5 ghz)
stllf93r
stlmem7y
stl47a9j_ext
stllf93r (5 ghz)
stlfrmy7 5ghz
stlmem7y (5 ghz)

[whole patio]

Some devices can spawn a great number of SSID, wouldn't worry about it

[abstract pendant]

Banksy is her mobile data ))

[woven hazel]

as long as your mom connects to the one she knows and uses the correct password, she should be fine, nothing malicious in just seeing those names

[abstract pendant]

Okay, thank you so much

🙏🙏

[woven hazel]

yw, if you get worried about anything else drop it

[abstract pendant]

How would I like

Explain to her hes not trying to 'hack' her or anything?

Not sure if hack is the right word lmao

[torpid jungle]

I was looking into doing this with an ESP32, lol

[woven hazel]

You could tell her something like: “those Wifi names you see are just the default names from the ISP or router brand, seeing them doesn’t mean anyone is trying to access your network"

[abstract pendant]

Thanks, I really appreciate it

Thank god for the reel I came across about this server too 😂

[little anvil]

So i'm doing the beginner path on THM and i wanted to ask if it would make sense to do the Sec0 Cert. or if it would just be a waste of Money?

[haughty dawn]

it's brand new and intended for absolute beginners, so there's probably not much value in having it.

[slow edge]

Soc0 is a beginner cert, and the knowledge it gives can be taken from other free sources, so if you are in doubt then I would say do not pay it, look what content it gives and just google it and read it from alternative sources
But if you want a structured learning, which is fair because different people have different learning patterns, then sure pay the cert, it is worth if it can give you a push start 🫡

[haughty dawn]

how much does it cost?

[little anvil]

57€

[haughty dawn]

then yeah agree with @slow edge seems more about whether you want to pay for their training structure

the cert itself is unlikely to provide any value to you

[little anvil]

ok

tysm :)❤️

[next ginkgo]

Can someone help me with this please, I want to practice my AD hacking skills by setting up the lab with VM however since every single article or video all about setting up windows server 2019 along with window 10 which has been terminated by Microsoft, should I still follor them or not?

[little anvil]

what Cert. would you say would be a good one to start with?

[whole patio]

Follow them. Then later do it again and don't follow them

[haughty dawn]

2019 will be getting security updates til 2029, so it will still be in use in lots of places

[upper mantle]

hi

[next ginkgo]

What I am concerning at the moment is the window 10

[haughty dawn]

best way to choose certs is to look at job ads for the kind of roles you want and see what they're asking for

[whole patio]

Do it with win 10. Then again with win 11...

[haughty dawn]

or do both at once so you can see how they look different in AD

[little anvil]

so i'm not old enough to have a proper job... or do you mean i sould just look what people get in the sector of jobs that i want to do?

[haughty dawn]

bloodhound found me an active win7 box during a pentest last year lol

[whole patio]

You are asking whether a cert is "worth it". That depends. Checking which certs employers are looking for in your region is a good indicator

[haughty dawn]

if you want to get a cert to later put on your resume, then yeah look at jobs you think you might want to do, and see what certs they mention

[whole patio]

The one people usually look out for might be expansive

[haughty dawn]

if you just want to build skills in a particular subject, then training for certs isn't the only way to do that, and it's probably the most expensive

[little anvil]

i know 🙁

[little anvil]

so now im just doing the free paths on THM and having a look in the Kali (Pen-103?) course from offsec

my "dream" would be working in the red team area

[whole patio]

And their dream colleague would be a very experienced person with multiple indepth skills

[haughty dawn]

hadn't heard of pen-103 / KLCP before. might could be useful i guess but i definitely wouldn't pay for it

also remember that it's totally ok to just go off and explore whatever interests you independently from platforms like that

[little anvil]

im not payin 250€ for that...

[whole patio]

It's the default free "this is kali" course. Probably irrelevant to you

[haughty dawn]

you're a hacker, you don't have to follow the existing paths :)

[haughty dawn]

it's a pretty fun job

[haughty dawn]

tbh i kinda dislike how newbies all get pushed / gravitate to kali now

[little anvil]

i heard that and i like computers so thats why i wantet to do that and i like hacking

[haughty dawn]

blowing up your linux install trying to install janky tools is a great learning experience

[little anvil]

Why? would you say its "bad"?

[whole patio]

"Now"?

Kali is the industry standard

[little anvil]

im not that long in the bubble and leard about kali like 3 weeks ago so...

[haughty dawn]

i wouldn't say "bad" necessarily. but i think for many just starting out it can instill the wrong mindset

[whole patio]

You want to tie your identity to an operating system? Go ahead. You want a toolbox that just works. Go kali

[haughty dawn]

now vs when i was first coming up yeah

[whole patio]

Kali/backtrack is hardly new

[little anvil]

what skills should i learn first? you have any tipps?

[whole patio]

Networking and linux basics

[haughty dawn]

for specific applications yeah. i used disposable kali vms frequently for red teaming and pen tests, but pretty much no one i know uses it as a primary system

[little anvil]

im using windows 10 cause my cpu cant handle 11....

[whole patio]

And why would they

[little anvil]

but i like 10 more than 11

[haughty dawn]

great opportunity to try out linux then

[whole patio]

I mean, Kali as host os works fine, but it's not necessary. When I ran kali bare metal I still used kali VMs for everything

[little anvil]

what linux os should i use? so not kali? ubuntu?

[whole patio]

Really doesn't matter. Research, make your decision.

[haughty dawn]

that goes to my earlier point. newbies often get started and immediately hear they need to get kali to hack. they usually don't get the full context of how it's used professionally, or why it might not be the best thing to learn on.

[little anvil]

ok👍

[little anvil]

i think this is exactly me...

[whole patio]

I blame youtube ;}

[little anvil]

i havent watched a single youtube tutorial...

[haughty dawn]

for a daily driver common options are ubuntu and mint. there are a lot of distros to choose from though, you can look through options and see what sounds good

[little anvil]

i saw the #📜・certs-and-career and saw the first cert

the klcp

and i sounded nice....

[haughty dawn]

key thing to keep in mind is kali is just a pre-built toolbox. it can be super handy, but building mindset and fundamental knowledge is way more important than tools.

[little anvil]

ok. so networking and linux first.. then i just finish the THM path almost done with networking 🙂

thank you guys for your help ❤️

[haughty dawn]

no problem, feel free to ask here or ping me when you have more questions

[little anvil]

thank you 🫶

[little anvil]

can i send you a friend request?

[haughty dawn]

sure

[high roost]

anyone know the best way to make a terminal emulator?

im thinking of making my own, but im not sure what language to start it in

[little anvil]

what is an emulator?

[haughty dawn]

could try looking up open source ones and see what they use and how they're written

[high roost]

look up e-DexUI, thats a great example

its basically just a terminal that looks better

your using the normal terminal, but you add some good visuals and stuff for it

[little anvil]

ooooh

cool

[high roost]

literally all of them written in like Rust 😭

and they are all for something other then windows

[haughty dawn]

it's a fun flashy toy but not a real choice for actual use

[high roost]

yeah

im just trying to broaden my horizon a little

ive made a couple of cool tools and just want to expand my knowldedge

[haughty dawn]

i've heard cmder is good but never used it

if you just want the visuals then could probably write that and pipe commands to a real shell to handle them

[high roost]

thats what i was thinking

ive made a remote access tool before by just using a hidden powershell window to control the remote system

thinking i might just do the same thing and have a fancy GUI

[bleak charm]

hey so i dont know if this is unrelated but does anyone know of any non-kyc (identity verification etc) compliant crypto purchasing sites?

[wooden cloak]

anyone here good at phishing?

[high roost]

why?

[haughty dawn]

https://dontasktoask.com/

[torpid jungle]

Phishing is generally frowned upon here #📜・rules

[remote gust]

How can I hack u undetected

[storm kernel]

Hello guys
I'm kinda new here

[solid coral]

Hi guys , I just took my first certificate its Google Fundamentals of Cybersecurity, which one should I do next ?

[storm kernel]

Yeah

[haughty dawn]

welcome, check out #📜・rules and #👥・new-member-guide

[exotic wharf]

Built a hacking copilot tool that automates a lot of the boring recon/scanning work. It's open source and still pretty rough around the edges, but the goal is to make it actually useful for bug bounties and CTFs

Would appreciate any feedback — what features would actually make you use something like this?

https://github.com/Boa-AI-Public/Cobra-Lite

[torpid jungle]

My man, why do you want to impress a group of people with unwise hearts? Maybe you’d like to reconsider your goals?

[haughty dawn]

i get the appeal of doing things you're not supposed to, especially as a kid

but like, there's a difference between breaking rules and hurting people

[exotic wharf]

https://tenor.com/view/black-nerd-black-nerd-gif-26919340

[remote gust]

Awww helll naaa

[whole patio]

Nicely put ❤️

[woven anvil]

@thick wigeon
Please read our #👥・info and #📜・rules
This is not a place to self-promote a server.

[thick wigeon]

Nah I didnt told like I just asked any suggestion to protect the server from attacks like any plugins installations or configurations I just asked suggestion I didnt given any server details or stuff Sorry If I have conveyed it in a wrong manner

[woven anvil]

Are you here to learn how to do it yourself? or are just looking for someone to do it for you?

[whole patio]

The sheer number of people who advertise their "Hey I made a tool that can make AI do something that is relevant to your interest" lately is exhausting tbh

By default I assume those are vibe-coded slop machines, that pose more threat than help

[dim flax]

Hi chat, how to stay motivated to code and program even if you feel burned out already?

[whole patio]

No one is at the top of their game all the time, and we are not mere optimization functions with arms and legs. Feeling overwhelmed and having other priorities is a normal, healthy reaction to various things

[thick wigeon]

Im learning things from this to reach my goal Sorry if the message is like some personal help or something

[whole patio]

Take breaks.. do other stuff.. meet people.. use gnome as DE.. get some activity.. all part of it

[woven anvil]

If you want to have a security engine that can protect a gameserver, maybe look into making IPS rules for surricata, or crowdsec, or even fail2ban

[whole patio]

fail2ban should be default

[thick wigeon]

thanks for the info and sorry for asking personal help😅

[woven anvil]

Look into those, and find out what you actually want to use. If you have questions understanding how they work, you can ask about it. But the message made it seem you were looking for someone to do it for you, and this is a learning server. If its your server, then you gotta learn what is happening on it as well.

[thick wigeon]

Yea I just asked like any one would help me in giving suggestion no any other intention

[covert olive]

hello

quick question, what is a homelab?

I'm new to the tech space and hear alot about them

[whole patio]

You build stuff at home. In the context of cybersecurity it usually means hosting infrastructure to experiment on. Quite often those are virtual machines

"I want to test this new attack vector, or tool" so I spin up a virtual environment where this tool would work

Or during development of tools.. check if it works

[covert olive]

oh ok, so would it be something to start off learning cybersecurity with?

I have no idea where to start

[whole patio]

There are several possible starting points. Getting familiarity with virtual machines is not a bad starting point.

Most people who seem lost at the beginning, are just directed to #👥・new-member-guide which keeps them busy for a long while, learning along the way what they could and should be more focussed on

[covert olive]

alright, thanks for the help🙏

[whole patio]

anytime

[mellow geyser]

hey gusy

[lost vapor]

hello
chat's in here #💬・old-gen-chat

[bleak charm]

what is it bro?

[hexed tendon]

wanna learn metasploit any reliable sources for studying?
i kinda have to do arp spoofing and dns spoofing with it

[whole patio]

It has a rather extensive documentation

[hexed tendon]

i didnt get u

[whole patio]

Metasploit has documentation

I would suggest to look for it, and read it

[hexed tendon]

ah okok

thank you

[crude wraith]

I’m looking for guidance and learning resources on three areas:

How do you objectively decide whether a laptop or desktop is the better choice for someone?

How do you confidently recommend a specific laptop based on a person’s use case?

When repairing a device, how do you accurately identify and source the correct genuine replacement parts?

I’ve been hesitant for years to upgrade my own devices because technology evolves so quickly. I often work around limitations instead of replacing hardware. However, the field I want to pursue requires familiarity with a wide range of software and hardware environments (including Linux and other major platforms), and I want to improve my decision-making confidence.

I’d appreciate insights from those with experience, especially regarding what I might be overlooking in my thinking process.

[torpid jungle]

The first question has an easy answer: Do they need to do their computing from multiple locations? I travel from my house to my office, for example, and we don’t have assigned seating, so the only option for me is a laptop.

[crude wraith]

It makes a lot of sense why the first question is easy, much is appreciated! ❤️

[torpid jungle]

For the replacement parts, Google is your friend. You can sometimes find data sheets that have that info, and some brands have services where you can lookup part numbers.

Other than that, your best bet is to open up the device and look at the part labels 🤷🏽‍♂️

[crude wraith]

I could see where I was overthinking with this part, again, thank you so much ❤️

[whole patio]

The answer to all three questions is - Thinkpad

Every part has a replacement number and is readily available.. both original parts and offbrand parts.
Recommending a device.. well the question is what their use cases and requirements are.. the usual "I dunno.. everything? or for cyber, you know?" is those peoples problem.. they need to know what the device has to be capable of

[tall fulcrum]

yo what are the best programming languages to learn?

[hardy shale]

Hey guys, is anyone interested in enrolling in an OffSec certification? I’m considering forming a group (around 10 people) to split the full cost. Do you think that’s a good idea?

I'm talking abt this one https://www.offsec.com/products/learn-enterprise/ (not advertising so pls don't ban me)

[kind zealot]

every language has its own purpose

[tall fulcrum]

can u tell me pls

[hardy shale]

Well it depends on what are you into

[tall fulcrum]

i needa try learn a language that is good to hack computer

or make app

[hardy shale]

oh well, C, C++, Java or if you are a pervert u can try assembly

[tall fulcrum]

alr thanks bro

[long cosmos]

I know someone who codes in assembly. They are an interesting character to say the least

[crimson harness]

how to find the free courses in thm?

whats betterTHM or HTB

@whole patio could u pls help me in this situation?

[crimson harness]

umm anyone help

[chilly merlin]

what's crackin chief?

[crimson harness]

pls read above msgs

[chilly merlin]

just sign up for a free account and use whatever they let you. i like THM for beginners. HTB for more advanced after THM is easy for you.

[tidal ocean]

Hey, I want to learn hacking from basics to expert level, some sources suggested me to take subscription of hack the box and try hack me, i am bit confused between these two resources, can someone please tell me which is best and efficient way of learning to expert level

[crimson harness]

ohh hmm

[crimson harness]

are u going to spend money or not?

[crimson harness]

is it enough?

[chilly merlin]

not sure. i used the paid sub for both. i think it's worth it if you can afford it. but, regardless, something is better than nothing. use whatever resources you can ethically get your hands on.

[crimson harness]

hmm ...

[crimson harness]

so do u think thm worth the price?

[chilly merlin]

100%

yes

[crimson harness]

ohh

[chilly merlin]

because you get access to their learning pathways

[crimson harness]

so u improved alot?

[chilly merlin]

nothing is off limits

yes. i got into the top 1%

[crimson harness]

wym

check this

this is free

idk whther this entire course is fre

e

[chilly merlin]

thanks. but that looks sus af. lol i'll pass. thanks though bro

[crimson harness]

bro its not sus its called cisco acadamey

search on google

[chilly merlin]

k, thanks

[crimson harness]

what lol

[lost vapor]

When you share links share them directly rather than a redirect from google search

[crimson harness]

ok

[crimson harness]

do u know about cisco acadmy?

[tidal ocean]

I am

[crimson harness]

ohh nice.is the fluu course free?

[tidal ocean]

What's fluu course?

Did u mean full?

[crimson harness]

yes sry

[tidal ocean]

It's not free, some basics chapters are free to learn, but after that you need to pay

[crimson harness]

for the 70 hours ethical hacking course?

do i need to pay

[tidal ocean]

I m ready to pay but I cant pay at both the sites simultaneously, I want to pay only for one which teaches from scratch to expert,

[tidal ocean]

Yes

[crimson harness]

70 hours ethical hacking course?

but im already in intro cs ?

its free

[tidal ocean]

I don't know exactly the duration tho

[tidal ocean]

How

[crimson harness]

intro to cs?

[tidal ocean]

In the try hack me?

[crimson harness]

nooo cisco

[tidal ocean]

I didn't try it, wait lemme check

Could you share the link?

[crimson harness]

in the dashboard

scroll a littlebit

u can see alot of courses

I mean the ETHICAL HACKING course

[tidal ocean]

The one with 70h right?

[crimson harness]

yes

[tidal ocean]

So did u finish this course?

[crimson harness]

no is it free

[woven anvil]

@crimson harness
Is there a problem with just sharing the direct link to the resource instead of a google share?

[tidal ocean]

Yeah it is indeed, did u complete it?

[crimson harness]

The thing I like about thm is the virtual box

[tidal ocean]

Yeah that's what

[crimson harness]

thm is a monthly susbsricption right

[tidal ocean]

So what's your opinion tho, if you would made up mind for purchasing either thm or htb?

[crimson harness]

*subscription

[tidal ocean]

Annual is available too

[crimson harness]

bro my mom is afraid to purchase online stuff with her cc

[woven anvil]

Do both the free ones, then choose after

[tidal ocean]

Umm, if you would had to buy, what would you do

[crimson harness]

thats the only prob I have 😭

[woven anvil]

THM has hundreds of free rooms

[tidal ocean]

Already done mate

[crimson harness]

wym

[crimson harness]

does it conatin the virtual box

[tidal ocean]

If u had to buy a subscription of either of these try hack me or hack the box, which would you choose

[crimson harness]

thm ig

[tidal ocean]

So hack the box is average?

[crimson harness]

idk people say hack the box is not for beginners

super beginenrs

[woven anvil]

I would get a small PC to run a homelab to try the things i learned from those

[tidal ocean]

I heard they say that to try hack me

[crimson harness]

idk thm is really cool

ive never used htb

[tidal ocean]

Point, but not everyone can be you right?

[tidal ocean]

Okay mate appreciate your opinion

I*

[crimson harness]

😇

[bright spade]

Is there a way to locate a device using the imei?

[woven hazel]

Not really

at least not as a regular person. IMEI based tracking is something only mobile carriers and law enforcement can do

and even then it’s controlled and requires proper authorization

[bright spade]

thank you

how could you track a lost device?

[whole patio]

you don't

[elder folio]

Hey guys, I could use some help

I’ve been scammed recently for a lot of money so I decided to try this

About a year now, somebody seemed to have hacked my network and mobile devices. They apparently sent me some sort of gaming virus from off the dark web and malware that if I try to get rid of it might be able to replicate itself on my devices.

They seem to be pretty sophisticated

If anybody knows anybody with a good heart, and that is legit, please let me know

[nimble minnow]

Who no about flash coin or flash transfer that add to balance

[bright spade]

big sad, but thank you for clarifying

[whole patio]

Wipe the devices, install anew from installation mediums you got from different devices

[woven hazel]

If its a lost phone the best option is using official tools like "Find My" (Apple) or google’s Find My Device

[whole patio]

If people ask how to track via an IMEI I safely assume this is not an options

[obtuse star]

Who knows how to bypass paywalls on apps or certain paid platforms

[obtuse star]

iCloud.com

[woven hazel]

First of all we are not teaching you with bypassing paywalls

and second

why would you want to bypass one

[obtuse star]

Just learning

[woven hazel]

Even “just learning” can cross legal lines

Check out the #📜・rules before making a question fam

[nimble minnow]

Who can open lock binance my binance was lock

[potent heron]

Help me solve this. The ctf event ended but i still dont understand how this is encoded.

This is the given statement,

"Cover your tracks because the GenZ are waving

YXMVVMN9MEV2o1G=VNEXcM=7j3AwQTdf"

[woven hazel]

Looks like layered encoding

The = padding strongly suggests Base64 but wait

this string is malformed, the = only appears in the end

[potent heron]

Oh

[woven hazel]

It might be split Base64 segments

[ember arrow]

Guys I got a video Yall might want to see

Where do I post. Videos

[potent heron]

Split base64? I'l try decoding it in b64 seperately then?

[woven hazel]

@nimble minnow Don't trust any dms fam

[woven hazel]

If we isolate the clean-looking part

YXMVVMN9MEV2o1G=

[potent heron]

It reads unreadable values in b64

[woven hazel]

then VNEXcM= which also looks like base64

[woven hazel]

wait that’s actually a good sign

[potent heron]

I see

[woven hazel]

that usually means: It’s binary data (not meant to be human-readable yet) or it’s another encoding layer or it’s XOR’d / encrypted

it often means “keep going”

[nimble minnow]

@elder hemlock 23550$

@elder hemlock $23550

[potent heron]

I am new still so i did xor with a script ai gave but still didn't work. Kept leading nowhere

[woven hazel]

next thing you should do is check the raw hex output of the decoded bytes

ow

[potent heron]

Yea

😔

[whole patio]

btw @lucid parcel is probably scamming you - we tell people not to be so darn gullible in one of the recent annoucements

[woven hazel]

XOR usually comes later. First make sure the Base64 is decoded properly, then remove internal = signs and decode the whole string as one padded blob and then inspect the raw bytes in hex before trying anything like XOR

[whole patio]

Any channel - once you reach lvl 25

[potent heron]

Okay

[hollow steeple]

I’m in that try hack me thing and u guys might call me stupid but I’ve been stuck on task 4 of room one for ten minutes now trying and trying and I still don’t know what to put into the vm browser

[crude breach]

Why tf is subnetting and the whole concept so hard

[fluid sand]

it does get confusing, but thats when we just fall back to the bigger concepts and take another run at it, you got this, dont give up

[crude breach]

Is it really necessary for

Red teaming

[fluid sand]

thats ok to get stuck, try looking for some write ups to see whats out there

[fluid sand]

it will be a huge help.
i think everthing is a network in one way or another, even an isolated stand alone box has its own unique "network" within

[crude breach]

Do u have any good gesource for learning subnetting

Resource

Like ip address classes are so so hard to understand ngl

[fluid sand]

use cisco packet tracer, it is good fun, you can visualise the network and they also have some labs you can do

[frosty kindle]

I just finished an Information Technology Services post secondary course in school
Im planning to go back and take a Cybersecurity course
May I have some thoughts/opinion if its recommended?

[reef condor]

tryhackme and hackthebox are good options

[chilly merlin]

no. don't go into debt. just acquire hard skills via online platforms and homelab. my 2 cents

and network

with people in the community

that will get you the jobs

know your stuff on a practical level very well.

network here and maybe on linkedin if that's your jam. but don't become a shill. be strategic.

target your desired employers. don't cast a wide net

go all in

[orchid minnow]

please i need some help learning cyber security

can any body help me 😢

[chilly merlin]

#👥・new-member-guide

[orchid minnow]

thanks bro🫡

but can ask u a little question

[chilly merlin]

shoot. go for it

[orchid minnow]

between the red and blue team which is more u know like good in the accept of making money out of it just asking to know🤔

[chilly merlin]

cyber is not a field to make quick cash in. it's pretty much the opposite. most cyber pros are underpaid for what they do. if your heart is somewhere else, i recommend you follow that. if you love cyber, follow what interests you. that's my best advice.

[orchid minnow]

apart from the money accept which is the best to focus on better red or blue i mean ur own option of adive

[chilly merlin]

do you want to break in? or protect stuff?

cop or criminal? (neither is bad)

you'll know the answer. listen to that.

[orchid minnow]

kind of interested in the two though

yeah

[chilly merlin]

learn whichever one interests you the most first. for me, it was red team. then i learned blue after.

[royal mist]

So I’m studying for my comptia a+ with Mike meyers does anyone know if his practice questions are close to what I will be asked on the exam ?

[chilly merlin]

Meyers is great for content to study the material. however, for practice tests, use Jason Dion. he is more on target.

[royal mist]

Thank you

[chilly merlin]

Professor Messer is also a fantastic resource. but he sounds like a robot, so yeah. there's that, lol

[frosty kindle]

Sounds good thank u

[chilly merlin]

he has a youtube.

[frosty kindle]

Alright
Thank you so much

[royal mist]

I mean i need videos and practice test where I don’t need flash cards just where I can retake the practice test and know I’ll pass ya know

@chilly merlin

[chilly merlin]

Dion and Messer have both. Same with Meyers. Either via their websites or on Udemy, etc.

I recommend Dion's practice exams from udemy

but read the Meyers book or watch his videos

[royal mist]

Is that how you passed or ?

[chilly merlin]

i studied A+ and Net+ but only took the Sec+ exam. For that one, I used the Sybex book by Gibson, and Dion's Udemy exams.

but i reckon they're good for A+, etc. too

i passed sec+ btw

[crude wraith]

I looked into it and noticed how Lenovo continue to make their products repairable which is really good. Thank you for making this suggestion was a fun little thing to research into

[royal mist]

Question too let’s say I pass how easy is it to get a job ?

Like with just comptia a+ everywhere I see you need experience lol

[chilly merlin]

have valuable skills to offer. unfortunately, business are very selfish and will only hire you if you have hands on skills prior to employment. balance your theory knowledge with practical labs like THM or setting up stuff at home.

[royal mist]

Ahhh okay but as far as on resume how should it sound

[chilly merlin]

market yourself the best you can, honestly. don't stretch the truth. it will be sad at first, because you have a lot to learn. but just state what you know already and can do, and that's pretty much it. there's no resume rules. if you're heavier on homelab/study, list that first, then experience. that's my personal opinion. many probably disagree.

try to sell yourself on paper the best you can. a resume is just a ticket to an interview where you can impress someone

[royal mist]

Ahhh I like the way you put that

I lied to get into a technician job lol and I got it because I convinced them

But like not the technician I really wanna be lol

[chilly merlin]

good job. you did the right thing. all job hunting is is convincing. hopefully, honestly so you can fullfill the deal when you land it

but a lot of people fly by the seat of their pants

that's good too

whatever works and suites yourself. i like to play things straight. best of luck.

good employers let you learn on the job

they just need you to have enough to not screw anything up. be careful, ask questions, listen carefully. that's my best advice.

just remember, honesty is always the best policy.

if you can't say "yes" to something, say "no, but ..." then elaborate on how you can learn and are eager to do it their way.

[royal mist]

Thank you

[pliant nymph]

Hey does anyone here know about a tool or software or perhaps code, called dark poison

Someone?

[slow edge]

That is another zero 😆

[fallow whale]

oops

🤣

[astral grotto]

Hello

Can someone please help me
My 34H luncher is not rendering graphics

[woven anvil]

@fallen sand
Please read the #📜・rules and #👥・info.
Don't bring that stuff into here.

[slate pulsar]

How do i unlock the locked chats

[woven anvil]

#🤝・roles-info
Talk in the chats you do have access to

[slate pulsar]

Thanks

[hallow gale]

Does anyone know how to track location I don't need an exact location like I need around 1-2 km radius, if anyone know how too Please teach me I'm willing to learn

[whole patio]

No we are not helping you stalk people

[rigid flame]

I was using dev tools to remove a pop up ad in a website I tried to remove the css and all also tried to block script but it didn't work

[whole patio]

"Doesn't work" is not an error description.. give us details

[rigid flame]

When I couldn't find the script which is causing pop up so blocking wrong scripts was crashing the webpage

[floral vine]

Can anyone hack into a outlook email im being deadass bc i cant login

[rigid flame]

You can forget your password

[whole patio]

Contact microsoft support about it, we don't do account recovery here

Though you may or may not now get DMs from people trying to scam the gullible

[rigid flame]

How I can learn dev tools I didn't find proper resources on YouTube

[floral vine]

I did but I made a alt and its like 2 years ago and I forgot the logins and I accidentally perm deleted the notes for it man im so stupid

[whole patio]

if microsoft support isn't helping you, no one here can either

[floral vine]

Wait i got the security code but how can I put it in

[whole patio]

One would assume that microsoft has documentation about that

[floral vine]

Like I need help

[hazy remnant]

Help

[whole patio]

can we choose ourselves what you need help with, or do you have a preference?

For instance I was recently told that koala might explode during a forest fire

If that solves your problem

[sick breach]

is there a way to decode hash?

[whole patio]

sometimes, depends on the details

a hash is not an encoding, so technically it is not "decoded", it is cracked

[hazy remnant]

I need a hug

[sick breach]

could you tell how

how does hash works

[whole patio]

if you are serious, then there is not a lot I can do from a distance

[whole patio]

a hash is a reduction of information and usually a one-way process.
You can't reverse it.. but you can take lots of guesses to see if you find an input (password) that results in the same output (hash)

[sick breach]

how can you guess?

[whole patio]

that depends on the details.. what do you have there?

[sick breach]

may i dm?

[whole patio]

no need to, we can keep this here

also I have DMs deactivated

but thanks for asking

[sick breach]

i have a hashed script

want to decode it

[whole patio]

what is a "hashed script" here exactly? Usually you hash values

[sick breach]

can i just send it?

[whole patio]

No idea how long it is and if automod will intervene, but I guess you can try

[sick breach]

26dd5db9cb9f3b993aec27aa50c39ce80f191a5e749064942a9f9f7266e2d42d:7da52b7992845ffbb8c0d9f00ee76da431a5c3a7 SHA-256

[whole patio]

you can use various tools or websites to identify the specific type of hash here

they just check length and format, and see which one matches

[sick breach]

could you guide which websites

[whole patio]

hashid 26dd5db9cb9f3b993aec27aa50c39ce80f191a5e749064942a9f9f7266e2d42d:7da52b7992845ffbb8c0d9f00ee76da431a5c3a7
Analyzing '26dd5db9cb9f3b993aec27aa50c39ce80f191a5e749064942a9f9f7266e2d42d:7da52b7992845ffbb8c0d9f00ee76da431a5c3a7'
[+] SHA-256 
[+] RIPEMD-256 
[+] Haval-256 
[+] GOST R 34.11-94 
[+] GOST CryptoPro S-Box 
[+] SHA3-256 
[+] Skein-256 
[+] Skein-512(256) 

[sick breach]

whats this

[whole patio]

that is the command "hashid" with your hash - and the result

[sick breach]

[+] SHA-256
[+] RIPEMD-256
[+] Haval-256
[+] GOST R 34.11-94
[+] GOST CryptoPro S-Box
[+] SHA3-256
[+] Skein-256
[+] Skein-512(256)

so these are the guesses?

im sorry if i sound stupid, im new.

trying to learn

[whole patio]

these are the guesses by hashid

try

hashcat 26dd5db9cb9f3b993aec27aa50c39ce80f191a5e749064942a9f9f7266e2d42d:7da52b7992845ffbb8c0d9f00ee76da431a5c3a7 --show

too, for example

so the length and format matches several possible hash techniques

[sick breach]

im so lost… trying to use hashcat but lost in the website

[whole patio]

just copy the command I gave you

[sick breach]

where

hashcat? how

sorry man

[whole patio]

hashcat 26dd5db9cb9f3b993aec27aa50c39ce80f191a5e749064942a9f9f7266e2d42d:7da52b7992845ffbb8c0d9f00ee76da431a5c3a7 --show

that one

[sick breach]

im on the hashcat website google. It’s just showing me the page no where to copy paste it

[whole patio]

Sorry, I assume you already have some terminal where you can input the command

[sick breach]

my bad, should’ve told you

[whole patio]

it would look like that

[sick breach]

if i send you the hashed, could you check?

[queen galleon]

My labtop is not very good the ram is only 4 what can i learn

[whole patio]

really not going to - this can be a very lengthy process

[whole patio]

pretty much everything you want

[queen galleon]

Red team it neads labs

[whole patio]

I can take a quick look though

[queen galleon]

This let the labtob realy slow and not working

[sick breach]

$2y$10$5rLLEn1MfnByi/VS2vwcpO.3Tv5li3U4/de6eLMmDzu2L.N5N73rq

[sick breach]

thank you

[whole patio]

oh yeah, you are not going to make anything in terms of virtualisation with that

[whole patio]

that is not a recognized hash - the "/" part is weird

[queen galleon]

What i do then give me advice

[whole patio]

You could, and that is something you have to decide for yourself, either install all the tools you could need onto it - or wipe it and install a dedicated cybersecurity linux distribution on it

something we call a "bare metal" installation - without virtual machines involved

[limpid lodge]

probably wrong hash

[whole patio]

probably, yeah

[limpid lodge]

a hashed script ??

[sick breach]

like a hashed passwqord

[whole patio]

We call those "hashes" or "hash values"

[sick breach]

yes that

were u able to crack it?

[limpid lodge]

hahaha yea @whole patio did you crack that random bcrypt hash already ?

gosh you are slow

[whole patio]

the first hash you gave us is not trivially cracked, no

and the 2nd one, as I told you, is not a recognized hash value

[sick breach]

2c9140aadaa269a442e27d1605967b6

try this

[fickle goblet]

CRYPT_BLOWFISH - Blowfish hashing with a salt as follows: "$2a$", "$2x$" or "$2y$", a two digit cost parameter, "$", and 22 characters from the alphabet "./0-9A-Za-z". Using characters outside of this range in the salt will cause crypt() to return a zero-length string. The two digit cost parameter is the base-2 logarithm of the iteration count for the underlying Blowfish-based hashing algorithm and must be in range 04-31, values outside this range will cause crypt() to fail. "$2x$" hashes are potentially weak; "$2a$" hashes are compatible and mitigate this weakness. For new hashes, "$2y$" should be used.

https://www.php.net/manual/en/function.crypt.php

/ is perfectly valid in that Bcrypt hash

[whole patio]

where do you get those from?

[whole patio]

$2y$10$5rLLEn1MfnByi/VS2vwcpO.3Tv5li3U4/de6eLMmDzu2L.N5N73rq does not follow that convention though

[sick breach]

were u able to crack it?

[whole patio]

First, if you would be so kind, tell me where you got that from

[neat grotto]

Hy

[sick breach]

oine

online*

[limpid lodge]

[sick breach]

why

dehashed

[whole patio]

can you give me a link to where you got this hash from

[sick breach]

could u tell why

[whole patio]

Because I do not believe you

[sick breach]

why do you need to believe

im sorry but i dont understand

i just wanted the link to be decoded

[whole patio]

Oh I do not need to believe you, you are right. And you do not owe me an answer

I am also under no obligation to continue this

[sick breach]

bro

im just confused

[limpid lodge]

tbh i don't even know why you bother

[sick breach]

why do you want to believe

could it be any risk?

[whole patio]

Alright, so to wrap this up.. identify the hash.. I showed you two possible tools, there are also websites that can do it for you.. then choose any cracking tool to crack the hash with the infos you got

[swift pagoda]

Hey guys, wanna know what to master the most: networking, kali linux, python?

[crisp star]

It depends what you wanna do in the future. Some topics require a more in-depth understanding depending what you wanna do.
If you go to network security engineer, then you obviously need to know a lot more about networking.

[wet shoal]

How can i get a VMware account if i dont have a business email

like those xxx@___.com

like @company.com

does normal email work

oh you can mb

[woven hazel]

💔

[mystic egret]

how can i delete my data thats on the darkweb since my internet provider has been hacked and the hackers leaked it

[frail flax]

I am not sure if you can delete it. Change your passwords, phone number etc. If you have social media, change privacy settings

You can also check databases like Have I Been Pwned

[naive mason]

hi i am new here,as a noobie who’s interested in cybersecurity what os do i need to use

[north merlin]

go do some tryhackme first or something

[naive mason]

ok

[mystic egret]

yea i checked and im on there

[frail flax]

Then change all of the passwords you have, numbers, bank pin etc,. If you notice your details are going to be used somewhere, report it to the police

[mystic egret]

ight

[fiery crow]

i am trying to use seIfbot on discord but it keeps giving me curl error

[crisp star]

knowing the error would be great if you need help

[fiery crow]

my msg is getting deleted here

[eager belfry]

heyy i'm trying to do some projects to put on my resume for the moment i've done a port scanner in Go and a ssh brute force detection with splunk what else can i do and accessible for a beginner with a lot of knowledge on os network and some other stuff ?

[mystic egret]

be advised guys fake accounts here tryin to send requests

[whole patio]

daily

[lapis trail]

Is tryhackme usefull? Or am i wasting my time with it

[devout linden]

I think its useful.
People tend to move from THM to HTB

[whole patio]

It is more or less useful, depending on where you are currently in your life. It is cheap enough to be a nobrainer for most

[frail flax]

THM is very helpful for beginners, especially when it comes to networking, Linux fundamentals etc

[lapis trail]

Thanks guys!

[granite vale]

You can't unless you make them do it

[granite vale]

Stay on your own os you can try linux in a vm if you do really want it

[harsh pine]

my neighbour is using my wifi and i cannot change the password but i want to know how much he is using my internet and slow the network for only him.

[whole patio]

What options do you have on your router, and why is changing not an option?

[harsh pine]

i can change but for some reason i cant

[whole patio]

Doesn't tell us much about the technical situation

Usually wifi routers do not have a throttle option

[harsh pine]

i have full remote access to my router

[whole patio]

Happy to hear that, but I already assumed so

[harsh pine]

if i change password he'll get to know that and i dont want that
i want to make it slow while still being connected by him

[woven anvil]

Sounds sus

just change your password

[harsh pine]

how is that suspicious

[woven anvil]

Tracking what other people are doing?

[harsh pine]

i only gave him password in the first place

[woven anvil]

How is that not

[whole patio]

that is the part where we would need to know more about the technical capabilities of your router - usually they do not have an option to throttle on a userbasis - especially if there is no singular user account people use

[limpid lodge]

worst case scenario: just reset your router

[woven anvil]

If you want them to have less bandwidth, then maybe there is a QoS option to make your stuff faster

[harsh pine]

ok i dont wanna track
just slow the signal?

[woven anvil]

Traffic Shaping would be the name of bandwidth limiting

[whole patio]

But per device?

[woven anvil]

but it depends on the router. Home routers don't have a lot of features like Eris is saying

[woven anvil]

Depends. I think the Asus and netgear ones do

[harsh pine]

its Jio router

[woven anvil]

thats from your ISP?

[harsh pine]

isp?

[woven anvil]

Internet Service Provider

[harsh pine]

yea

[woven anvil]

I have read the manual. It does not have a way to do this. Only a way to block a device from access.

[harsh pine]

is netcut safe
i tried it once but i couldn't get to know how to use it properly

[woven anvil]

That will not do what you expect it to do

No idea if its safe, but you would need the device hosting netcut to be broadcasting the wifi. In your case, the ISP router is broadcasting the wifi

[harsh pine]

oh

[naive mason]

thx for responding,i am using kali linux currently,but i wanted to know if there is any other linux distribution thats better

[granite vale]

Whats that reason?

[harsh pine]

thiz

[granite vale]

I mean depends on you if you are happy with kali then why change

[whole patio]

Doesn't want the neighbor to know they are trying to nag them away

[harsh pine]

he may think im stingy

[granite vale]

The neighbor pressures you to not do it?

[woven anvil]

just move the router to the far side of the house

and put aluminum foil on your wall

[harsh pine]

damn

[woven anvil]

its silly, but it would technically work to reduce his signal and make it bad

[harsh pine]

yeah

[tired spruce]

Who is good with Facebook?

[whole patio]

Always ask the real question.. not for someone to ask

[woven anvil]

@rotund oyster
We don't assist with account or device recovery here. Please do not ask for that.

[rotund oyster]

Okay sry my bad

[fluid sand]

what do you mean?

i dont think this is the place to try and promote yourself or your pages, outside of here doing your own promo for your page is on you

[summer wave]

Alright thanks

[tacit fjord]

CWES or eWPTx
I want to take one of them but I am not sure. I am HTB lover but I want to know about eWPTx. As I know CWES is cheaper than eWPTx but I don't know about knowledge they will give me during preparation. I don't wanna take certs to take cert, I wanna learn new things so which one recommended?

[unborn ibex]

we do not help with that here #📜・rules

[tacit fjord]

read_rules.com

[zinc cedar]

I want to get into Cyber related fields but dont know where to start what should i read and study up on first to get a better understanding of this field.

[woven anvil]

@lapis badger
Read our #📜・rules and #👥・info.
Don't ask for unethical things here.

[karmic leaf]

cwes is better for "structured learning". If your goal is to learn more then cwes is generally better. eWPTx can be after cwes.

[tacit fjord]

What about CWEE should I take it after CWES

[swift lynx]

Well if you want actual skill growth and you already grind HTB…CWES will push your exploitation depth harder BUT
if you want a structured pentest workflow and stronger fundamentals eWPTx is safer imo. Up to you tho

[karmic leaf]

Mmm.. I dont know much about CWEE.

[tacit fjord]

Hmm okay

[tacit fjord]

I don't understand what yall talk about structured. I will have the same skills, yeah?

[swift lynx]

You’ll learn similar vulnerability types yes and structured means how you approach the test not just what bugs you exploit lol

[tacit fjord]

Hmm okay thy

[lapis badger]

Okay mb

[shell monolith]

Should i use ELK Stack or Wazuh as a SIEM for my little structure (managing 2 - 10 website logs)

[shell fiber]

Hey all, any advice on any roles in cyber that may be on the upcoming that I can tap into? I received my bachelors in CompSci, but I am interested on newer fields that can be great to get into

[turbid glacier]

just answered to your question in #💬・old-gen-chat 😉

[turbid glacier]

wazuh is elk based but if you want to integrate a proper edr at some point, you want elastic – not wazuh.
wazuh has no serious malware detection capabilities, which is also not what they aim for.
if you are into compliance scanning, it is wazuh what you want

[shell monolith]

Thanks you i'll go with ELK !!

[woven anvil]

Yeah, they serve different purposes

Some people use both

Security Onion i believe has both

[shell monolith]

Security Onion ? Is that good ? i googled it and it doesn't seem like it (I don't wan to be offensive)

[woven anvil]

Its a collaboration of tools built to work together, so you get your wazuh and network IPS and more in the same dashboard. Then a way to triage and manage incidents.

Its pretty cool, but its also a chonky boy that is more complex than just a SIEM by itself.

[whole patio]

Not a lot of people know that kali purple is actually not meant to be run as a single install - it is meant to be used as a "soc-in-the-box" setup with multiple installs

https://gitlab.com/kalilinux/kali-purple/documentation

[woven anvil]

Any security onions? Technically it would be one platform, but has the other tools in it. So while it does kinda double up on some tasks, it correlates actions between the different software.

Example, when a endpoint/host makes an HTTP request, it correlates it with the agent on the host, alongside what the IDS sees when its mirroring the WAN network

As its just elk in the back-end, it can ingest logs in that format which i guess solves for that.

But I do agree that having the logs going to different places with different formats makes it a nightmare

im just torn between locking in with graylog, or just doing elk

i kinda like graylog a lot

yeah. So elk gives me more control, graylog gives me a more finished solution to start from

[turbid glacier]

ye, go for elk. you'll be able to transfer knowledge back to graylog. but not vice versa

[woven anvil]

interesting to me as well, its just fitting in the time

[fiery crow]

i am trying to make a discord seIfbot and

its saying failed:library
"libcurl-impersonate.so.4" not found

[south sage]

Who’s aware of any other stronger tool than seeker

[whole patio]

"stronger" how?

cause making your case for getting better at stalking people might need some context

[woven anvil]

Please stop asking.
https://support.discord.com/hc/en-us/articles/115002192352-Automated-User-Accounts-Self-Bots

[south sage]

Research purposes

[woven anvil]

Anything else?

[rotund wasp]

can anyone help me with what are the different roles in cybersec i am just starting out

[woven anvil]

#📜・certs-and-career

[whole patio]

Lots

[woven anvil]

I just realized it doesn't have much in terms of job roles

https://tryhackme.com/room/careersincyber
Make an account on here, and this explains a lot of it.

[whole patio]

But you don't really need a roadmap about each and every sub-role. Start with the basics and rather soon you'll get an understanding that allows you to ask better questions

[rotund wasp]

can anyone suggest me good sources to start learning red teaming and stuff

[woven anvil]

TryHackMe + HackTheBox

#👥・new-member-guide

[whole patio]

#👥・new-member-guide start there

[smoky vector]

Udemy videos wont load for me

[crisp star]

Either change your browser, or check if you have some kind of browser extension installed that prevents the loading of scripts.

[whole patio]

you are not trying to watch them in a vmware vm, are you

[rotund wasp]

I am still at uni and all I've done so far are just web development projects and with this AI wave I am sure I am going to reach nowhere with just this web dev stuff, I've always liked how cybersecurity sounded and now I am trying to switch paths , plus I am done with web dev stuff. I don't know the first thing about cyber security, I am genuinely in need of help . I have just one more year to graduate I am COOKEd

[smoky vector]

I did it on floorp, helium, and chromium wouldnt work

[smoky vector]

nah

[whole patio]

look into entry level jobs then, jop postings, what qualification/certification they are looking for.. but the whole cybersecurity thing is not something you usually start out with.. its something you consider after you got prior experience

e.g. not entry level jobs

No idea where you live and what the job situation is there.. but especially people who come directly from academia are quite often not considered

[turbid glacier]

agree with this ☝️

[smoky vector]

nvm I figured it out, apparently I needed widevine

[crisp star]

Doesn't really make much sense. Since it should run with any browser

[iron grove]

Hello guys, I've created a keystroke logger that sends to my wanted webhook, Now It works perfectly fine with me and it even has logic that waits for the user to finish his sentence and then sends it, it's an all round logger that included everything there is with the support of an Artificial Intelligence I've created, Now when I tried putting this script my other laptop, It didn't work, Terminal was already used as an administrative, Any suggestions? (I don't know if it's the right channel to ask so if it isn't I'm sorry)

[plucky ferry]

add debug printouts at each point of the execution of the program

[iron grove]

lemme dm you the script

[plucky ferry]

and exceptions, so if there are errors for example in hooking the keyboard, then they are printed out so you can troubleshoot

[plucky ferry]

ok

[iron grove]

I've sent it.

[chrome moat]

Who can help me using Termux

[woven hazel]

What problem you got with it?

[chrome moat]

I don’t kno how to work it an what I can do wit I kno it’s capable of a lot

[tropic plank]

Im trying to get in cybersecurity and low level systems any suggestions on where to start

[woven hazel]

check #👥・new-member-guide Or search a specific roadmap

[tropic plank]

thank you

[woven hazel]

First learn fundamentals and linux basics, then start the practical work

[glossy marlin]

Anyone with an idea where I can proceed with my Cyber Security studies in Manchester , I have done 1&2

[kindred tapir]

is 0xc0000001 error fixable ? + I have some keys on my keyboard that freezed my pc very often (I think it's a hardware problem ) anyone who met the same problem if yes how did u fix it ?

[obtuse bough]

Any body here play hack the box?

I thought so. I’ve been working on this same machine for days… it’s my first machine where the answer isn’t public. I’ve been using Gemini to work through the machines, but it’s not really helpful on this one.

I’m showing your normal open ports, 80 and 22. Then 54321 is running minio camaleon cms on Ruby on Rails.

It’s got an admin login where I can create an account and features like upload a profile pic and search.

Go buster returned a directory, but I don’t see anything useful outside of the json architecture and I don’t see a way to exploit it.

SQL injection doesn’t seem to work. I’m stuck. The machine is named facts.

Any ideas?

There are people who cracked this in under an hour, and I’ve spent literal days on it.

[chilly merlin]

If someone fell victim to ransomware attack and had paid the ransom how would the attacker get the decryption key to them?

[frail flax]

After the attacker sees the payment come through, they send back a decryption key or a link to download a decryptor tool through that same channel. Sometimes it’s done through a private payment site, other times via email or chat, messenger mentioned above.

[spare kettle]

Hello mates

[chilly merlin]

That makes sense but surely the email is traceable?

[icy cedar]

hello.....need guidance...i am new in this feild.....anyone willing to help?

[proper cloak]

it usually happens on their panel

they host a panel with a dedicated like uuid or wtv

and u go and chat

[solar geyser]

I need to somehow get access to an email password to recover an Instagram account. If I can't do it myself, I'm willing to pay someone.

[south sage]

Anyone got any idea how to bypass the instagram authentication code (cause I lost mine) unable to get access to my acc

[hoary fjord]

Not sure if this should be in general chat... but I recently got a steam deck, looking at adding Emu deck any ideas of where to head for safe downloads of this? Please and thanks 😊

[pale junco]

Does anyone know anything about thinkcloudly's free splunk bootcamp?

I am seeing an insta add for it but don't know if its legit

[steel frigate]

most "hackers" with a social media presence or following will probably charge for that stuff - nothing is truly fully free

[pale junco]

It says its a 5 day bootcamp...not sure if im allowed to post an image of it

The add but if i can lmk

Would love to get some more experience with splunk but also don't wanna get scammed lol

[steel frigate]

Yea I mean digital bookcamps are risky but you can use fcc or THM or similar

[pale junco]

I am using THM rn, but was down to do this bootcamp as well if it was legit

Probably won't take the risk here

Thank you!

[steel frigate]

splunk isnt my forte tho tbh

[vivid thorn]

i find bootcamps are normally guilty of misdirections or unexpected pws, but i might be wrkng

[steel frigate]

this

[pale junco]

Sounds good, will avoid it in that case

Will stick to THM

[steel frigate]

you can sign up if you really want, but use a temp email provider and a fake login, just in case

I personally wouldn't though

[vivid thorn]

yes i agree

[pale junco]

All good, I think I'll skip it

Probably just get any splunk training from splunk itself

[steel frigate]

Best way to learn is from the source - also Stack Overflow is an oldie but a goodie

[pale junco]

Gotcha

[vivid thorn]

btw, i am looking for help on something. i am looking for a way to buy btc and transfer it to numerous proton wallets i own. what platform would you guys recommend i use to buy it for maximum priv & anonymity?

[steel frigate]

I mean, assuming legality, focus on a digital wallet that you do not have to sign up for

nope wallet or fast wallet (both on github)

[vivid thorn]

thank you

bc i know i can't buy btc natively on proton wallet since its just for holding/sending/receiving, and i don't trust the top page apps like robinhood and such

plus i would like it to be untraceable back to me

[steel frigate]

I mean, I can't help you with illegal or illicit activity, so there is a fine line with what your asking and what I can answer, if that makes sense

[vivid thorn]

i understand

[vivid thorn]

so i can purchase btc on these?

with my money?

[steel frigate]

Possibly.

[vivid thorn]

thank you

[icy cedar]

i want to learn in teamwork...i am new...like starting studying in group learning each topic and then discussing about it questioning....

[high roost]

whats up dude! what are you looking to learn?

[icy cedar]

i am new into this feild....passed my 2 semesters still lost....i want to get an outstamding knowledge and understanding of basics ....

[high roost]

there is alot to learn about cyber, which part are you particullarly interested in?

[icy cedar]

yea there is surely alot...but basic pillars like networking...linux...cyber threats....scripting....i want to learn them the best....so my foundation will be strong

[high roost]

honestly, i would start off with the basics...watch some youtube videos explaining how networks work and how they operate

as for Linux, and scripting, honestly just do some research and find what peaks your interest, then just jump into it. The best way to learn is to just do it

for cyber threats, i honestly cant help you there XD

[icy cedar]

i hve started networking....but i go too deep in the topic and get lost....

[high roost]

networks are indeed very tricky, i would just take a step back and look at the big picture

figure out what you know, and what you understand and look at it from a different angle

you can always ask anyone in here. This is a great community and people are always willing to lend a helping hand

[icy cedar]

i like computer networks .....and honestly i wonder how people are so helping here.....thank u so much

[high roost]

yeah man anytime!

[crude breach]

Question for everyone, as somebody who is an aspiring red teamer / ethical hacker, i have a few questions:

1. Do you think this roadmap is good?:

• Complete HTB Academy Networking, then HTB Academy Linux Fundamentals, then HTB Academy Windows Fundamentals.
• From there, I will purchase TryHackMe premium then complete THM presecurity & THM Cybersecurity 101.

2. My other question is, for networking do you think i should do the Comptia Network+/CCNA or HTB Academy networking fundamentals

[high roost]

1. thats a good path, but if you want a concrete path, i def recommend looking at #👥・new-member-guide message....

2. depends if you want to do networking as a career...if you want to do networking as a job, i would go with Comptia Network+/CCNA.....HOWEVER if you want a certification for it, and don't really want to do networking, HTB Network Fund. is good enough. Just remember employers would rather see the Comptia Network+/CCNA cert over a HTB cert. But ultimatly, choice is yours my friend

[crude breach]

For 2, i want to become good purely because of cybersec

Specifically red teaming

[slate pulsar]

can anybody help me level up

is illegal activetis forbidden in this server?

then i won't ask any questions even if it is only for educational purpeses

[woven anvil]

read the #📜・rules

[slate pulsar]

is anybody availbail to teach me coding bacis stuff and som about DW for edacutional purpeses its for school work

[woven anvil]

Ask the actual question here

[slate pulsar]

DW

Just for school work and educational purpeses

[whole patio]

Like hell I'd DM someone who just found out they are breaking the rules when they talk about illegal stuff in the open. We usually invite people to keep it in this channel so others can see whether someone spouts nonsense. Also what do you consider "right links to any website"?

[slate pulsar]

i have visited some sites then it just pups up som ramdom shit on it i am not expericenced

[unborn ibex]

you want somebody to teach you how to use google correctly?

[slate pulsar]

no tor borrowser

i know google

[whole patio]

The question makes no sense. "I talked to someone once who lied to me, who can teach me how to only talk to people who don't lie" is what you are asking - only with websites instead of people

If you want to be sure you only visit websites you want to visit - make a white list of websites you are allowed to see, and block everything else. Like parental control yourself. Apart from that live with the ambiguity

Explain it here

Take screenshots, make a #📩┃ticket

[wooden pebble]

But idk how

[whole patio]

Report him via the discord functions and to the server moderation

[wooden pebble]

He dosnt say anything to get banned and he has multiple accounts he is scripting what he’s saying so it’s not stopping him

Getting him banned

[whole patio]

Then there is not a lot you can do.

[wooden pebble]

I’ll figure it out bro wtv

[high roost]

ultimatly up to you man, Comptia looks better and usually looks good to employers, but if you want to do the HTB one, you can

[woven anvil]

Talk to discord support about it. Don't bring it into here.
Not just reporting the account, but open a ticket about it.
https://support.discord.com/hc/en-us/requests/new

[wooden pebble]

He told me to explain I didn’t want to bring it here😭

[woven anvil]

Coming here to ask people to DM you about it is bringing it here.
Do not do that.

[woven anvil]

Btw, that was an example of something you do not ask about here.
Read our #👥・info and #📜・rules

[slate pulsar]

yes i am sorry did not read the rules proparly

do i unlock chats if i pay sub

but the chanel is locked

?

[woven anvil]

#🤝・roles-info

[slate pulsar]

thanks

[chilly merlin]

Hi Everyone

Looking for someone to please assist me with my two websites

Appreciate it

[stoic heart]

Hi Everyone
i hope all are fine,i been lately obsessed with hacking
i need a mentor who could guide me and instruct me to learn hacking in a practical way
i mainly interested in practical works
Thank You

[topaz minnow]

You can checkout this
https://discord.com/channels/990435451334688768/1306084252437450763
https://discord.com/channels/990435451334688768/1352367106267545682

And for practical labs go to
Try hack me and Hack the box

This is a good starting point

[vernal cape]

Hey guys i need help if a website has a search bar

<i>xss</i>

So if i put html escaped code there it just vanish but when i try to do with html escaped with xss payload then it gives me 403 error what should i do so it will reflect xss or give syntax error

[weary flume]

Hi Everyone
I was wondering if you guys would help me understand more about WPA2 and WPA3 security systems and vulnerability

[crimson harness]

how to use kali linux while using windows

[frail flax]

Did you check THM? The pre security and network fundamentals rooms are worth checking out.

[placid wedge]

https://www.reddit.com/r/Indiangamers/s/nUIeQxIaDO

Maturity?

[shell monolith]

Is coolify + cloudflare + crowdsec + python script a good stack for a waas ? (May be adding better stack)

[plucky ferry]

setip a virtual machine using virtualbox or vmware

[whole patio]

Run it inside a virtual machine, all the cool people are doing it

[devout linden]

Virtual box.

you can do WSL but i dont recommend it

[wild leaf]

guys how useful is it to implement IndexNow to a website that has its sitemap already submitted to google search console already?

[crimson harness]

Yeah I saw the wsl

[crimson harness]

I don't know how to do it

[whole patio]

kali has detailed guides on how to do it on https://kali.org

just look for one to run kali inside virtualbox on whatever operating system you currently have

avoid videos and chatgpt, just follow the guide

[crimson harness]

what virtual box should I use

[crimson harness]

thers no deatiled guide

@whole patio I think wsl is easier

[worthy grail]

Please where can I get the best non-custody wallet for usdt ?

[whole patio]

You can do everything you want - I was just trying to narrow it down for you

Also there is no "which virtual box" - Virtualbox is a distinct tool

the umbrella term would be "hypervisor", for stuff like virtualbox, vmware, qemu, etc

[hybrid sky]

VM / Dualboot / wsl there is a build in tool for kali in windows store

[hybrid sky]

Oracle virtual box

[shy phoenix]

Does anyone know how long it takes someone to study and pass CREST Practitioner Security Analyst (CPSA)?

[devout linden]

We cant help with that here but also @chilly merlin said it perfectly

[elder nimbus]

we did all that but nothing could be done. support closed up their communication server on bonchat so there's no way of reaching them. the platform is still there but withdrawals are not being approved.

[woven anvil]

@solar geyser@elder nimbus
Read our #📜・rules and #👥・info

[woven anvil]

Talk to local law enforcement. Talking about it on discord just makes scammers see you as an easy target.
Watch out for suspicious DMs, and read our #📢・announcement message about it.

[elder nimbus]

Ok thanks.

thanks dude.. i'll be careful

[solar geyser]

O okok

[woven hazel]

It took 3 months of study to a friend of mine to pass CPSA

So i guess it'll be 2-5 months

[shy phoenix]

Ah okay thank you.

Was he working full time at the same time?

[woven hazel]

Yeah he was doing couple hours on weekdays and more focused prep on weekend

[frozen flicker]

anyone minding helping me learn python, we don't need to start from scratch

[woven anvil]

there are a ton of sites like codedex and sololearning and learnpython that are all great.

[frozen flicker]

tutor would be insane rho

[whole patio]

I see daily people asking for a tutor/mentor.. I have never seen someone finding one.

[frozen flicker]

I have found but he's pretty inactive

[crisp star]

You don't need a tutor

[frozen flicker]

it makes it easier lwk

[whole patio]

Unsure if that is true. True is though that there are way, way, way, way too many people looking for one ..

for free, of course

[crisp star]

If you know how to use google you don't need one.

[opal crypt]

Guys, is it worth getting Google certifications for "Security Operations Engineer" and "Security Engineer" or is it better to find something else?