👥・help-me

[whole patio]

not just "what I do myself"

In the end it's everybodies decision which host OS they use

[plucky ferry]

yh but yall recommend linux on dualboot or bare metal to beginners for no reason 🤣

[whole patio]

I actrively discourage dual boot

[plucky ferry]

well ive seen it enough

sure, or thinkpad as eris recommended, they can be upgraded if you know a bit about hardware

or a Framework Laptop

if you really like getting deep into hardware upgrades

[whole patio]

Would not be my recommendation - but I guess we laid our cases out.. either listen to the person who first asked for budget, and use case, hard requirements.. or that one guy who shouted "gaming laptop!"

[plucky ferry]

i just run a gaming laptop because i can play my games on it, run VMs with ease, reverse large binaries with ease, and never worry about it being slow

[plucky ferry]

ur too corporate like

ur asking questions an IT technician would ask while hes at work lol

[whole patio]

have not heard that one before

or.. questions a person would ask who gets that question regularly on a linux distro forum ^^

[plucky ferry]

dude has a 2k budget and wants to know what specs he needs for hacking

literally ANY computer for a 2k budget will do EVERYTHING you need

[plucky ferry]

perhaps he should have done his own research first then LOL

anywas its not my point

yh u dont need some supercomputer to do or learn hacking man

half of the biggest corporate hacks this past year was done by social engineering on the phone and then breaching a employee account, then compromising the cloud from there

[whole patio]

True.. with my recommendation Pebb still retains future options.. both what OS they want to use, or whether their hardware requirements turn out to be higher.. cause let me tell you.. I didnt know that when I dive deeper into forensic, I would really value my laptop with 3 internal hard drive slots

[plucky ferry]

basically just using a web browser

there is zero "hacking tool" that will require you to have like 64GB ram, a 5090, i9 CPU, etc, it just doesnt exist

though password crackers like hashcat will obviously benefit from higher spec'd PCs and the presence of a GPU

yes

sometimes

usually its a selected option if ur building one on a PC/Laptop configurator

but if you buy one from amazon or whatever, they will usually say in the title (NO OS) or (Windows 11 Home Preinstalled) whatever tf

you'll know after reading the advert

[whole patio]

that was my laptop
350ish

then I upgraded a bit

[visual axle]

for Packet tracer users, how can i set trunk mode on a switch without the connection to my isolated router with server and WLC connected to it without it being disconnected from the rest of the network?

[visual axle]

kali linux

[whole patio]

I have around 10 laptops with various operating systems.. kali linux among them

[plucky ferry]

thats just unnecessary lmfao

[visual axle]

must be nice to have cash

[whole patio]

people have various use cases

[whole patio]

most of them were bought over time, refurbished, really not that expensive

[visual axle]

Nice

[whole patio]

I do quite a lot of workshops, or need dedicated devices during presentations

as i said.. professional use

Situations, maybe, where your RGB illuminated gaming laptop would look out of place 😉

[plucky ferry]

i use my rgb illuminated gaming laptop for presentations

i get given stickers after them because people say i need to put stickers on my laptop

formality is boring, anyone who takes it too seriously shouldnt come to my presentations, and miss out on a high quality talk

also ur still talking here after like 12 minutes of nobody saying anything

let it go

[whole patio]

I have laptops with sticker, for stuff I do at my local hackspace, or during chaos events, sure.. but sometimes I need a dedicated "victim" machine that I either wipe the next day, or maybe I do the same presentation 3 times on a day and just pick up replacements laptops for each of them.
But for the majority of my clients I would not appear with a gaming rig

As I said.. ymmv

[plucky ferry]

meh, boring

[whole patio]

may sound boring to you, but my focus is on healthcare organisations.. and if I talk to the upper brass there, they still wear tie and shirt. Lets just be happy that among us we probably cover the potential spectrum of organisations

[short ruin]

Hello

[lost vapor]

hello, chat's in here #💬・old-gen-chat

[novel ice]

Please I need help with getting into cybersecurity... I have learnt background knowledge with thm... I need guidance

[whole patio]

we usually recommend #👥・new-member-guide #📜・certs-and-career and/or #💕・free-resources

depending on where you stand currently

[thorn charm]

Is there somewhere that has generalized information on the different x86 ABIs and what sort of instruction patterns are used to call functions in each, but isn't a redteaming shellcode guide or a super technical reference/manual? Something that doesn't assume a bunch of pre-existing knowledge about the specific instructions but general enough to be used along the lines of function detouring for executable modding or debugging thereof

asking regarding x86_32 because if not I will probably write it
and x86_64 because 1 trial by fire was enough for me

[warped shore]

How would I know who to message if I had a job for someone and how would I message them about it. Im new here

[woven hazel]

The x86 disassembly wikibook is probably the closest thing, it explains calling conventions and common patterns without being a hardcore reference
honestly theres not a great middle ground resource so writing one would probably be useful yhyh

[whole patio]

Probably not on this server, honestly. If you want to ask someone specific, then ask if you can DM them

[warped shore]

How would I know who to ask?

[whole patio]

If you don't have a specific person in mind, then this is most likely not the right server to look for someone. Several other infosec servers have sections about job listings though

[warped shore]

Is there specific server you know with job listings or services

[warped shore]

Yeah thats what I need bro

[whole patio]

It would kinda depend on what kind of job. Typically the ones that offer job-relevant certifications

[lone warren]

It also depends on the 'job' you are talking about.

If it's a full time position, or contract work, then maybe people want to hear about it. If you want to offer someone $300 to hack into someone's Instagram, then you might be sorely disappointed in the responses you get.

[thorn charm]

this definitely still helped a ton with a question I hadn't even thought to ask lol, big thanks

[whole patio]

sounds illegal

[warped shore]

Am I in the wrong place? 🤦🏻‍♂️😂

[whole patio]

have you taken the time to read the #📜・rules ?

very much so

[lone warren]

Create the logins legally then?

[steady palm]

Not happenin here. Read the #📜・rules please, as you have been asked to do.

[woven hazel]

Happy to help fam

[limpid musk]

Hi anyone here?

[whole patio]

dont ask for someone, ask for something

[limpid musk]

Hi

[delicate oyster]

Yeah of course

[delicate oyster]

Can you give one out 😊?

Yes sometimes

[whole patio]

@delicate oyster now dont make this weird, but.. I am commited not to be your friend, so please no friend requests

[delicate oyster]

Alr I'm cool mate 😊

You really sure you up for it ?

You have Kali already installed?

[fathom fog]

Guys I have query
Please someone who can answer me

Pls reply to my mssg

[whole patio]

Just ask you question

[torn fiber]

Please is there a server I can learn hacking from scratch I really need to learn

[whole patio]

this server seems fine for that - start here #👥・new-member-guide

[fathom fog]

The thing is since past 2 weeks or so
I don’t know how
But
How do I explain
(This was the start of it)
My brother plays Roblox using my mail and later I get a message saying my Roblox account gets accessed somewhere in Russia

After this it’s my epic games account
It’s getting accessed somewhere from Mexico

After this it’s my Ubisoft account it’s getting accessed
From somewhere of Australia
Idk why it’s like this

When I check passwords in my iPhone it
Says my password or mail has been compromised in an data leak

[fathom fog]

The wrong thing is most of the passwords I use is almost similar 🥲😓

[whole patio]

you have a full schedule ahead of you here, buddy

[fathom fog]

So I changed all the abv passwords and used 2 factor auth

[fathom fog]

Huh?

[whole patio]

cause you now have to contact each and every separate support service from each of those services

[fathom fog]

Oh my god

[whole patio]

most likely devices that held those credentials got compromised, so it might be a good idea to reset/reinstall those

that is why we use password managers and two-factor-authentification

[fathom fog]

And one more thing
I don’t even use Crunchyroll like I never installed it neither I logged in before but I get a mssg saying some login has happened in Mexico

[whole patio]

well if you have had an account there, thenyou are a user

[fathom fog]

How do I do that
But what I did
Was reset my passwords to new ones and enabled 2 fac auth

[whole patio]

so you can still log in?

[fathom fog]

I don’t remember having

[fathom fog]

In which

[whole patio]

if you can still log in, changed the credentials, make sure to end any currently logged in session - those support services may come in handy there

[whole patio]

dude YOU said you changed your password and enabled 2FA, how should I know where

[fathom fog]

I did that in
Epic games
Roblox
Ubisoft
Instagram also

[whole patio]

typically those are symptoms from some malware.. key generator, mods, cracked games.. and they steal session tokens and credentials

most likely discord, too

[fathom fog]

I never installed any crack or so
But I did once long back
Like around a month or two but deleted it

[whole patio]

this is the origin story of accounts, that get banned on discord 1-2 months later because they spammed some crypto scam

[fathom fog]

Oh damn

[whole patio]

oh yeah, people out there wait a while before they burn those compromised accounts

so as I said.. full day ahead of you, make sure your brother isn't using those accounts anymore.. and go to all the support pages

[fathom fog]

Ok will do

[whole patio]

I personally would also reset/reinstall all the devices

[fathom fog]

How should I reinstall a device?

[whole patio]

download the installation file, flash it onto an usb stick, and reinstall whatever operating system you want to have.. windows, linux, macOS, dunno what you have or want to have

[fathom fog]

See thing is as u told I checked those log in places and I logged out of those and some services say when u change the pass
All login session will be logged out

[whole patio]

That is something the support services will advice you upon. They cant do anything though if any of your devices is still compromised

up to you if you want to risk not doing it, and see if you got away this time

[fathom fog]

How do I know
If my device is compromised even now
Or my mail for that matter

[whole patio]

Just saying that "I personally" would do it

typically by running malware scanner, which might or might not be compromised already.

You really dont know for sure that you are NOT compromised.. you can download some malware scanners like malwarebyte antimalware and let them run a deep check

if they come up with nothing.. you "may" not be compromised.. if the problem persists, then that is an indicator of compromise.. might be a different device though

[novel field]

Hello
Hope ya all are doing well.
Just wanted to ask like do you know any online side hustle or anything online through which I can make actual money? Let's say minimum 25€ in two to four days?

[whole patio]

really not the server for such questions

[novel field]

Yup yup I know sorry

Just wanted an expert idea

If such thing is even possible

[whole patio]

Let me just say that a lot of people ask the same thing here, and no one ever found anything here.. the consensus is "you should look elsewhere, possibly outside of discord"

not even the regular scammers seem to bother to write

[reef radish]

Hi

[novel field]

Hehe fair enough
Btw is their a way to hack a router
Let's say I wanna configure my router settings
But I got no app for it or anything
The closest thing I found was entering the routers administrator name and password
But I don't know that, then how do I access it?

[whole patio]

if you dont know them, then this is likely not your device, and thus illegal

[fathom fog]

Ok thank you

[novel field]

It is mine
But it's like installed through the WiFi company and they arent cooperating

[whole patio]

so its a leasing device

part of a monthly contract

[novel field]

See here's the thing, the company gave me two routers, one router belongs to the company and if I ever cancel the subscription they are gonna come and take away their router. And then they have given me an extra router when I asked them to because the old router had slower Internet speed and to maximize it I bought a router from the company itself and that is not on a lease
It is completely mine

[whole patio]

if you bought it, then you should either be able to reset it to factory settings with a default password - or they have configured it and should be able to give you the password

either way.. this is upon your service provider, not some random internet people to help you to get potentially into devices that are not your own

[novel field]

Yeah I thought about reset but the only thing I was worried about is will it work after the reset

[whole patio]

Cant tell you that - it depends. First thing I would check is whether there is either a default password to the device, or one printed on the bottom

[novel field]

Yeah tried those too
Doesn't work
Aight g thanks for your info
Imma just drop it

[neat ravine]

Do you know what the router uses wpa2 etc?

[steady palm]

No one and we won't help with that here.Read the #📜・rules please@vernal gazelle

[twin skiff]

Am trying to learn how to use Kali Linux to manage and access my school wifi password. How can I do it?

[winged shell]

Guys is google cybersec cert good as a beginner?

[thorn charm]

If you are asking questions like that, I always say expanding your skills in the most interesting direction you can see is where you need to go. Too many beginners get caught up in the "best" thing to do next. The best thing is not getting burnt out forcing yourself to prioritize something because the internet said so. Stay learning instead

If you really need to know what certification will be good for a resume for you, I would try to network with people who work where you want to work and find out what certifications they care about. CompSci is too wide for a general answer imo

[whole patio]

leave your school wifi be

[steady palm]

Dont, leave your schools wifi alone

[whole patio]

Listen.. this whole wifi hacking thing may be something you just discovered for yourself.. but the world has known about it for a long time. Those videos are staged, almost none of it works in the real world.. its not like everyone just didn't think about it for the past 30 years..

That being said.. it would be illegal and get you in a lot of trouble

[limber ferry]

hello all can anyone guide me how to began with cyber security i know how to code but not have idea about this field and where to began with i am going to start my collage this year

[steady palm]

Hey man.Start here #👥・new-member-guide .This channel will get you going.

[limber ferry]

Oh I see thanks

[white raven]

Do we have to pay for somthing we learn here? like anything even logining to your own google account.

[whole patio]

there are several resources, some of them have free portions and paid portions

Typically it is not the material that is paid for, is the curation and ease of access. So if people look for handholding during their learning process, that is usually not for free

[steady palm]

No you dont.But the institutions we refer you to will charge you.

[white raven]

🫤

[worldly shard]

Charge how much

[whole patio]

It is, what it is.. you want someone to do work for you, they expect payment

but as I said .. the base documentation and info is pretty much freely available

[worldly shard]

I need help

Serious help

[whole patio]

But if you want someone to host vulnerable machines for you, give you feedback on your progress, and keep learning paths up to date.. well

[worldly shard]

Willing to meet in person about it too just want to talk

Please, i need help

[whole patio]

if you need help, ask

[woven hazel]

We heard it dude, what do you need

[worldly shard]

I need a second chance

I get it now

[woven hazel]

?

[worldly shard]

Everything I learned in the streets was a lie

It wasnt real

[woven hazel]

?

[worldly shard]

I want a second chance

[whole patio]

If you just want to chat, there is #💬・old-gen-chat for that.

this is the tech channel

[worldly shard]

My bad.

[whole patio]

and even if you were to ask for help here.. just spit it out

[sudden bloom]

Yooo chat. I just created an ai assisted ids system which can monitor network traffic and generate alert if suspicion found. But i am not able to figure out prevention for it.

[modern dome]

Hey guys, I’m new and i want help with my email

[woven hazel]

https://dontasktoask.com/

[modern dome]

So yeah , There is someone spamming my email. I’ve already blocked him, but the messages still haven’t stopped.

[white raven]

Where are these docs available?

[whole patio]

The internet, strewn across multiple websites, multiple projects, multiple blogs

getting all of this together and keeping it easily consumable and curated.. that is the paid part

[modern dome]

Is there anything i can do ?

[whole patio]

how specifically did you block them

[whole patio]

nmap for exampple is an open source tool, its documentation is freely available, covered in numerous articles, but if you still need someone to show to you how to use it.. well

[modern dome]

Well actually i muted him as I didn’t find the block option but im really pissed rn 🥲

[whole patio]

email does not have a "mute" function.. that is why I asked how specifically

[vale tiger]

Wasup guys this is my first time in here

I need to start learning about ethical hacking

[whole patio]

#👥・new-member-guide

[vale tiger]

Where should I start

[modern dome]

There is mute option available when you select the mail and click on the right 3 dots it kinda stop notifications

[whole patio]

that is not an email function.. that is whatever tool or service you are using

We cant see your screen and can't read your mind.. you have to tell us the specifics

[modern dome]

I have a SS how can i show you ? I can’t explain what you are saying

[whole patio]

You cant, need a way higher rank to post pictures

just use your words.. what email client or website are you using here

[modern dome]

Just tell me the way or a tool i can use to stop him or maybe scare him to stop i have found his information on intel base but didn’t get the live location

[whole patio]

this will turn out with you using gmail and not realizing that this is a service, isnt it

[modern dome]

Yeah

[whole patio]

https://www.google.com/search?q=gmail+how+to+block+email&oq=gmail+how+to+block there you go..

assisted googling is probably enough here

[visual axle]

hey just a question on which level is that

[whole patio]

25

or it used to be 25.. hold on

[visual axle]

thanks

let me know when you find it

[whole patio]

find what?

[visual axle]

you said the level changed and you were gonna check

[whole patio]

Oh, alright - hold on

[visual axle]

yeah

thank you

[whole patio]

#🤝・roles-info message

lvl 50 now

[visual axle]

they done nerfed it :heart

💔

[whole patio]

well it certainly made the chat easier to follow

Seems like a scam

[median sierra]

lol

[whole patio]

pinky promise?

[woven hazel]

It actually looks like one 💔

[whole patio]

wouldn't dream of engaging some weirdo who tries to ping 160.000 people with this nonsense

[lone kayak]

Good afternoon everyone

I'm new to hacking, and so I have a few questions
Please I'd love it if you can enlighten me 🙇🏽‍♂️

As a beginner in hacking, how much of programming do I need to know, and what are the basic programming language I should start with

[sturdy field]

details pls

[visual axle]

he got clipped

[somber orbit]

Python for scripting

JavaScript too

But I’d start with python

I think it largely depends what flavor of cyber you’re pursuing

[warped verge]

what librabry and how do we learn python specially for hacking

and where can we learn networking and os in depth for this

[west bison]

Any experienced bug hunter here ? I need assistance

[somber orbit]

“where crumbs lie, bugs follow” -R9X3M March 12, 2026

sorry

[kind zealot]

i literally wrote a paragraph but this guy

[somber orbit]

holy fuck

I would crash out

get that extension where it shows messages that get deleted

[whole patio]

There's really no "python, but only for hacking"

[kind zealot]

can u telll the name please

👉 👈

[warped verge]

and networking and os

[kind zealot]

thanku

elobrate

[lone kayak]

Thank you so much

[kind zealot]

@steady palm

[woven anvil]

@kind zealot @somber orbit @simple ledge
Check out the #📜・rules
No things that break Discord or Game ToS

[lone kayak]

Thank you so much

[steady palm]

Whats up?

[kind zealot]

how did u know it was for u

[woven anvil]

I got it

[steady palm]

Please stop doing this.My status is on do not disturb for a reason.

[kind zealot]

i didn't notice

[steady palm]

Check next time

[kind zealot]

🫡

[woven anvil]

What specific questions do you have about bug hunting? Theres a few people here, but it is easier if you ask the question instead of asking for a person.

[lone kayak]

I saw your previous message

[kind zealot]

got it got it

[undone slate]

Can you help me ?

[kind zealot]

depends if i know

[whole patio]

You want to speak to the darknet manager?

[crisp star]

The FBI is coming and knocking on your door soon.

[kind zealot]

well the shop next to my house sells literally everything i can give u his address u can come and shop

[subtle cape]

i got ubuntu like a hour ago im trying to install discord and it keeps on saying update failed how do i fix this??

[undone slate]

I stay a very far place not in America

[kind zealot]

easy if u installed first uninstall sudo apt remove discord
sudo snap install discord
i dont know the actual issue but this should fix it if not then we will see

type that in terminal

[subtle cape]

im using the app centre

[wise shuttle]

Hey, I am working on an assignment and my task in it is to exploit a vulnerable c program vulnerability being a buffer overflow, am almost done but I am facing an issue, when i use my payload on it it runs successfully but It dont launch a shell it exits before I actually launch the shell, Idk if someone would be able to help me with this issue and if u want more context lmk

[somber lynx]

Please can i get someone who can put me on how or where i can get into coding,i'm a beginner tho

[somber orbit]

Oh my bad

Forgot that app was against TOS

[woven hazel]

If the payload runs but the program exits it might be because the shellcode returns and the process terminates

Also check stack alignment, NX or if the shell spawns but closes instantly

More context would help

[wise shuttle]

Okay its a 64 bit program when i run it in gdb i get this
1094795585
process 106295 is executing new program: /usr/bin/dash
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
[Inferior 1 (process 106295) exited normally]
if i type run # or run $() after excuting the payload it does start a shell and it works fine i just figured that out
at this point i believe my shell code might be the problem that it is exiting but my issue is i am no expert, we learned nothing about this due to "legal and ethical issues" but it is still a part of our course work and i have been scouring the internet for the past week to get to this point so idk if i should keep it as it is or try and find a way to get a better shell code in my payload

[woven hazel]

I see now, if GDB shows it executing /usr/bin/dash then your shellcode is probably working, the program exiting usually just means the spawned shell isn’t staying attached to your input/output yk

Since run # or run $() keeps it interactive your payload might just need a proper TTY/stdio setup rather than different shellcode

[wise shuttle]

I can't share photoes here i just realised, so i did search for tty and how to do it earlier today but that was another roadblock, again we never learned about any of this and were thrown in the deep end so if you could help if you have any good source on how to do a setup for tty that would be great, i am still not sure what tty is even after the research ive done today

[woven hazel]

sre, a tty is basically the terminal interface that lets a shell interact with input/output, If a shell spawns without a proper tty it can exit immediately or behave weirdly

you could also look up “interactive shell vs non-interactive shell” and “pty/tty basics in linux”

Also check some writeups

[wise shuttle]

one last question that might sound silly, would the tty be a part of the payload?

[wise shuttle]

idk if my questions make sense

[woven hazel]

nah not a silly question at all, usually the tty isnt part of the payload itself
the payload just spawns the shell and the tty/pty handling is more about how the shell connects to your terminal yk

[woven hazel]

dw they do, this stuff is confusing at first

[true flame]

Been thinking, for android pentesting..android studio just abuses RAM? Is genymotion the next best option? Open to hear any

[wise shuttle]

it is mate and i cant lie, what you just told me is probably worth more than everything i learned in the module, thanks for the help, hopefully ill be able to sort it out now

[woven hazel]

no problem at all, glad it helped fam

[west bison]

Im good , wbt u?

[west bison]

The thing is , chatting in private is easy ….. still if u want to then okay … I recently started bug hunting , I know networking fundamentals and I am not finding any good resources out there …. Tried port swigger labs and completed access control labs …. But when I went to find bugs on real targets on hackerone …. It was a mess man 😭🤌🏻

So I need someone experienced to tell me what roadmap or structure should I follow to become experienced in bug hunting ….. i am curious to learn …. Recon is not my type cause I can’t scroll through endless ip pools and subdomains manually … breaking things if my thing , I know how to use burp …. So I want assistance

[boreal isle]

hello fam, new here just checking this out.

[woven hazel]

Ay gang, welcome in got any issues!?

[boreal isle]

Not at the moment, was just pointed this direction and wanted to check it out. I am studying for my A+ core 2 cert

What do you guys do here?

[woven hazel]

Check #👥・info

[shy siren]

Hiii guys i'm pretty bad for cybersecurity buuut i know networking i did some mini project with first packet tracer and now i'm using GNS3 i did a lot of stuff like static and dynamique routing ZPF and ACL, I used pfsense a little bit to set up rules and a captive portal but idk i realy like networking but i'm dumb like if you don't tell me to do something i can't do it by myself Sometimes I do things that make no sense because I don't follow the strict rules that have been imposed on me, Does anyone know of a way to develop my imagination for this kind of thing? In a fun way, because I'm a bit lazy, but at the same time I'd like to learn more about cybersecurity to

Ow damn this is lonnng asf m'y bad

Yeah m'y english is pretty bad to i hop you can understand

When i have an exam who just say (yeah do this do that) 20/20 easy but when i have to choose what is the best way to make it work yeah 10/20

[woven hazel]

a fun way to build imagination is doing ctfs, labs on thm and htb or even making your own mini networks and breaking them

[shy siren]

Wich one is free trial friendly ? I can pay but if i can lear as much as i can for free

[boreal isle]

copy that, good looking b

[shy siren]

Building m'y own network can be really fun tho i don't have any equipment but i can use a vm for m'y firewall and i just need to find an switch and maybe a router

[woven hazel]

THM has a solid free tier with tons of beginnerfriendly labs

[shy siren]

I'll try this !

[gentle tide]

Where is the best to build a PenTest’s Report?

[placid oak]

I need help with dump and pin

[somber orbit]

Create a local AI with no logging to do that for you automatically

he’s gone but I mean

you can make your job more efficient

And safe

but I guess he was trying to learn so that’s not the best idea my bad

don’t listen to me Anthropic hijacked my brain for a second

in my opinion you should try to automate all this stuff

do things that make your life easier and actually work

That’s how you adapt to not finding your job miserable all the time

[opal elk]

I feel sad ik this is not really for therapy but hopefully someone to talk to i dont want any trolls but like there is this girl I was talking to i messed up and I feel the weight on my chest im scared to say sorry and shes talking way lesser than she used to be im a fuck up but also im trying to pass a assignment but the Ai im using is being stupid I fucking hate the fact that chatgpt or grok or Claude aint working they always make me mad and always make me want to punch a hole in my house I feel empty I know why but its like I dont know why either it just pissing me off im super mad at the time and im stressed I want to pass my quarter with out punching a hole in my house or making my fists bleed

[visual axle]

not the best at this but i would try to apologize

i think it’ll help everything feel better

tell her how you feel and try to explain it was a mistake

[opaque ledge]

Hey im going into cybersec, what are the important things i should focus on learning, i want others opinions

[visual axle]

theres alot of areas, is there anything in specific?

[opaque ledge]

I was looking at cybersec architect

Not planning to go redteam

[visual axle]

hang on

so, you’ll want to learn about Networking and malware, as well as a bunch of other things like coding and Virtual machines. there’s a lot of guides on #👥・new-member-guide i believe, i’m still new and i don’t specialize this area, and i hope someone could be of better help

[vivid shuttle]

What books should I invest in for cybersecurity engineering?

[steady palm]

There are a few.When you chat and level up a bit, you can check out #💬・books-and-reading .

[vivid shuttle]

Thank you

[rigid meteor]

I need help .. when updating Python what should I not do

[valid badger]

@steady palm Do you have any advice for a call about your background with an employer?

[steady palm]

Yeah, would you like to ask here, or drop me a dm?

[valid badger]

I'll drop you a dm

[sacred wadi]

Hello, if an experienced individual were to host a CTF game for a college project made with python from scratch. How would you go about to achieve that?

[opal elk]

I cant im too scared I just hate myself I dont want to victimize myself I feel like im at fault like I should feel ridiculed forever

I just hate myself

[woven anvil]

Have you written your own software, and tried to exploit it?
If not, then it might be difficult to understand what it is you are looking for. Labs and stuff are great for getting practice and an understanding of the tools and mechanics, but if you don't understand how the programmers themselves come across those bugs in the real world, then it will be more difficult to find.

Look through open source software that have had recentish CVEs, and what they did to fix their issue. Try to imagine from a programmer's perspective how they came to their previous solution, why it was vulnerable, and how they fixed it.

Then try to make a small proof of concept project that tests that theory out. Find the bug in the software you made. See how it could effect other software, and what the requirements are that lead up to that bug in the software.

The more knowledge you have in how these things could be vulnerable in the first place, the easier it will be to find bugs in the real world.(Easier, not Easy)

[opaque ledge]

Thanks

[somber orbit]

He left but W advice

[iron onyx]

Hello I’ve recently completed the basics of python and with everything to learn. I’m feeling stuck. I don’t know what next to do. I wanna build apps, specifically web apps. Can anyone help me with the next steps

[kind zealot]

learn web developmet

[limpid lodge]

anyone working with splunk ( enterprise ) ?

[rain vigil]

hi guys

is anyone here

into AI Filmmaking?

[hazy garnet]

Hi guys. I'm looking for help. I am almost completing my bachelors in comp sci (final semester) and I'm looking forward to getting full time in cyber sec. I have acquired a solid foundation in networking and programming I'm thinking this will be a headstart for me into cyber sec and I need direction on the next steps to take to move faster and so I don't waste time on things I already know and things that won't actually be of help.

I'll be really grateful if someone can help me out.

[split moth]

Have an ip address to share These peple doing some bad shit. 173 189 134 143

[kind zealot]

Great, I will suggest getting comfortable with Linux and terminal and yeah checkout #👥・new-member-guide

[dim flax]

Hi chat, does anyone know any alternative apps for autocad which can be used in linux also? can sketch blueprints, and mindmaps stuff

[hazy garnet]

I think I have knowledge on that as well. I've been using Ubuntu for about 1 and a half years now.

[limpid lodge]

hey @shrewd sail

1. for future use #👥・help-me (so general is less spam)
2. there are virtual box ready kali images, (https://www.kali.org/docs/virtualization/install-virtualbox-guest-vm/)
3. that is the fun part about virtual machines! you can break them and it """doesn't really matter"""

https://tenor.com/view/am-ia-joke-to-you-laugh-stock-joker-i-kid-you-not-owl-gif-16641981

[shrewd sail]

sry

[shrewd sail]

what about dualbooting on bare metal

[limpid lodge]

Dual booting technically works BUT it’s riskier while you’re learning. If you mess up configs, partitions, or the bootloader on "bare metal", you can break your actual system and fixing it can be a pain... (i mean yea you will learn a lot but ... trust me not worth it in the beginning)

With a VM like VirtualBox everything is isolated. If you break something, get malware, or misconfigure things, you can just reset or restore the VM and your main system stays safe.

[shrewd sail]

i actually used it before evn triple booting i braked things and fixed them but now am getting into it searously and if a hacker or maware gets into that os am worried could it get into the other two os

[limpid lodge]

not really how it works. if you dual or triple boot, only the OS you booted into is actually running, so it can’t just jump into the others while they’re off

the bigger thing is that the running OS can still "see" the same disks/partitions. so if something had enough permissions it could mess with files on other partitions (if they’re accessible)
but it’s not like it automatically spreads into the other installed OSes.

that’s also why a lot of people just run kali in a VM when they’re learning. it’s more isolated and if something breaks or gets infected you can just reset the VM. 👍

[shrewd sail]

thank you so i have to just not give kali the access of other partitions instead of VMware cuz my laptop is potato

[limpid lodge]

you are welcome :)

[shrewd sail]

now i can mess up kali😈 and to keep my grub safe i make my other os deafult

[kind zealot]

yeah but there is more than os in #👥・new-member-guide

[snow creek]

helloo
i want to set up vulnhub machines & i want them to be isolated from the network
and i have tried to follow tutorials for that but they're all using windows as a host machine & i cant find any reliable ones for kali as the host :(
it all goes well until the dhcp set up part (im using internal networks btw)
so if anyone knows how to set up the dhcp please help :,) & thank u in advance

[whole patio]

pretty sure the lab guide on the vulnhub website does not require that you use windows - those are all hypervisor settings anway, it doesnt matter which host OS you use

[woven hazel]

what exactly are you trying to test with it?

Its not about tagging everything as illegal, its just that tools like that are commonly used for malware

Nothing personal

thats true yea, a lot of tools are neutral by themselves

but the reason people are cautious is because some tools are primarily associated with malware activity

[muted fiber]

Can someone help me in getting some knowledge about how to nuke a discord srvr there's one indian server which I joined unknowingly and the guys over there they all literally insulated me and were very rascist towards me

[whole patio]

If someone shows up, freshly registered account, asking about stuff that is either illegal or adjacent.. then experience shows that it will be, in almost all cases, nefarious intent. Nothing against you, just playing the odds here

[whole patio]

read the #📜・rules converning vigilantism and illegal activities

[whole patio]

obviously not #📜・rules

[somber orbit]

Breaking bootloader is the most common lowk and that wont hurt ur system only thing u gotta watch out for is partitions

Just installing an OS on a VM isn’t gonna teach u anything imo

I argue it’s better for beginners to actually install it on their pc dual boot and all to learn then when they’re like good at it and don’t need to go through all of that again they can use a VM

[weak wasp]

I would suggest the use of an empty hard drive with windows and whatever OS you're trying.

[somber orbit]

Pro tip NVIDIA graphics + Kali do NOT go together

[whole patio]

ymmv

[limpid lodge]

Yea but an unbootable system still means fixing partitions or reinstalling stuff.

That’s extra problems that have (in my opinion) nothing to do with learning cybersecurity. If the goal is security practice, a VM lets you break things safely and reset instantly.

but i get your point

[whole patio]

Dual boot should be avoided at all cost.. the only time I recommend it, is if your hardware just isn't able to handle even a single VM

[visual axle]

yall, im having a DHCP problem on packet tracer, i connected some PC's to a router which is connected to a switch, yet i have another system thats the same setup and its working but this one isnt. both systems have Access for the connection to the switch, anyone know whats up?

[whole patio]

are both systems working the same network?

[visual axle]

yes theyre connected to a main server area

[whole patio]

If they manage the same network.. well then one of them will assign IPs and the other one won't.. isnt that what you would want and expect?

[visual axle]

hang on

[somber orbit]

But when something breaks, and you have to actually get in there, look at logs, services, search up error codes, the whole 9 yards of troubleshooting all of that is valuable experience. And it’s all completely related to cybersecurity. If the goal is learning Linux, which is a fundamental tool for cyber you will use a LOT, there is no better way to learn then breaking the OS and fixing it back up again either intentionally or unintentionally.

Even if the goal is to practice malware and exploits, you can’t practice on Linux if you don’t know Linux you know? It’s like a prerequisite of using the tool, to get familiar with it

sorry for the ramble, don’t mean to argue I just really think suffering through it is the best way to learn

[visual axle]

let me send you the screenshot of the topology

[whole patio]

good luck

no image permissions here

[visual axle]

yeah

[whole patio]

thats the network plan

[visual axle]

yes correct

the circled area is where i’m having problems

[visual axle]

ok took a pause on that

trying to set up Virtualizatiln to use VMware

[wicked sable]

Hello guys 👋
I am doing one vanet simulation project to study the metrices value of AODV,DSDV,OLSR and DSR......using ns3 and sumo.....but I am facing an issue for dsr every time when I change the number of nodes, bandwidth or data packets size value....all the metrices value of dsr is zero
Need help with that

[snow bobcat]

Hello guys

Can somebody teach me technical hacking

[lost vapor]

#👥・new-member-guide

[snow bobcat]

I want to go team red

[lost vapor]

follow the guide step by step, it is self paced

[woven hazel]

If DSR metrics are all zero, it probably means routes aren’t being established

check that DSR is enabled, nodes are in range and traffic starts after routing

[icy dawn]

Yoo what benefits do i get when boosting this server.

[elder cairn]

Hello can some teach me hacking

[woven hazel]

Check out #👥・new-member-guide

[elder cairn]

i dont no why i can get pass task 3

[woven hazel]

What

[elder cairn]

abt find hidden page

[visual axle]

yooooooo

i want to kill the penguin, what is the funny command?

[elder cairn]

??

[visual axle]

linux

whats the command to kill the system

[elder cairn]

is the system not work or safe

[visual axle]

its VM

i just wanted to finally do it

so i could see it in action

[elder cairn]

okay

[visual axle]

so

what is it?

[woven hazel]

sudo poweroff or sudo shutdown now 💔

[visual axle]

they changed it?????????

[woven hazel]

or rm -rf /

[woven hazel]

how

[visual axle]

ok

bc i kept adding sudp

sudo

and it didnt work

[woven hazel]

🤷‍♂️

[candid aspen]

I'm new around here, I saw that the server itself suggests studying certain websites, should I do what they say or should I do something else?

[neat ravine]

Yea I would recommend hack the box and also hackthis site

I have written I script but it only works if the device is on the same network. Anyone know how to reach the device if it’s not on the same network

[candid aspen]

@neat ravine i am not the smartest guy, but i think you can see that on "nmap"

[neat ravine]

Huh

[candid aspen]

sorry, I thought your question was different; my English isn't the best.😭

[neat ravine]

Nah your all good

[candid aspen]

thanks, but you need to do a remote acess right?

[neat ravine]

Not quite I need to be able to send somone traffic who isn’t on the same network as me

[candid aspen]

Do you know which network he's on?

[neat ravine]

Yea the script works by me putting my ip into it and then them running it but I have tested it and it works but only if we are on the same network

Because if cause ips are from your network

[candid aspen]

hhuumm, a problem of ports denied?

[neat ravine]

Nah like way more basic then that basically do you know how a reverse shell works it’s a bit like that but I’m aware they use a vps to connect im wondering if I can without

It’s not a bad reverse shell tho don’t worry

[candid aspen]

everything that is learned is merely informative

right?? ahahahahahaha

[neat ravine]

Yea genuinely aswell literally just a troll thing

[candid aspen]

👍

i hope you can solve the problem

[orchid nova]

Hello I am new here and I am wondering the way of getting new knowledge on this app in cyber security part

[steady palm]

Hi new commers. Have a look at our #📰・news-channel . This channel will get you started.

[true briar]

Hello what do you think about the new MacBook Neo and in general about using MacOS for Cyberspace?

[whole patio]

I'd rather have a thinkpad

[true briar]

Why may I ask ?

[whole patio]

Linux support, upgradability, no arm architecture.. several suites/tools don't come with arm release candidates.. and I don't have to fricking learn a new keyboard and shortcuts that are different than the rest of the civilized world

Also ports..

[true briar]

Thats make sense

Thx

[echo kayak]

Hi

Anyone know how to make there own mobile os

Just asking

[whole patio]

You should always just ask the real question you want to ask.. not whether there is someone who could be asked

https://dontasktoask.com/

[twin seal]

hi im trying to solve a challenge basically in the challenge you have to bypass a chrome bots cp policy via a injection
you can upload files on the site which the bot reads but its csp policy wont let it execute js or anything and ive been trying to get past it
i have the source code and you canget the flag by like grepping it but for me to learn i gotta treat it like its
remote to learn anything lol
i did find a awya to do via a leak but i gotta find a working method in under 15 minutes

https://wetransfer.com/downloads/bd5e1e389dd8fe91c9d494e4accd33a120260313205012/fdf47c936bae017baa7536db1d58626420260313205041/8eddca

heres a link to the source code

if anyone can help me that would be so great

[rich estuary]

Am I able to switch my hat to grey? I like the idea more.

[woven hazel]

If you already have the source it might help to look closely at how the CSP is defined and what sinks the bot actually processes

sometimes the bypass isn’t running JS directly but abusing something the policy still allowz

[twin seal]

ill look and get back to ya

[twin seal]

im still stuck

[woven hazel]

If ya still stuck i’d slow down and look closely at the CSP directives in the source (like ``script-src, img-src, connect-src` etc)

evven if JS is blocked sometimes you can still trigger data exfiltration through allowed resources, also check how the bot loads the uploaded file

[twin seal]

ok bet

[vernal crater]

what happen to hacktricks?

[placid linden]

Hello, I’ve been studying cybersecurity at uni but I’m missing a laptop, I’ve been using an old MacBook to get notes in and I have a computer at home. I need some suggestions for a cheap but good laptop I can set vms on. Thank you so much

[twin seal]

pretty much any tseries thinkpad

or like a hp victus

[placid linden]

Thank you bro 👊🏽

[viral python]

People getting into my house electronics and they are able to talk through something help

[long moth]

I’m new to this server group looking for some direction

[visual axle]

question for the CompSci people here, can the pything app run other coding languages? i just remmeebered i had the python app installed and was currious about that

[visual axle]

#👥・new-member-guide feel free to ask anyone about experience or if you have a problem, there are lots of people with different expertise levels in a variety of areas ready to help you, if you ask at the right time of course

[long moth]

Ok thanks bro I know some basic stuff Linux tor but basically want to learn about ethical hacking

[visual axle]

yeah, as i said before theres tons of people that can help, theyll respond if your on or ask at the right time

[nocturne oar]

Hey everyone! I need help in ctf of n8n to find the flag inside it

Ports open are ssh/ http / 5678

I get id to enter as admin but i don't know how wrok with workflow to get the flag

[lucid mirage]

Hello, i'm new here, i'd like to learn ethical hacking.

[nocturne oar]

start learn networking and OS

[quiet carbon]

Hey guys. I'm in a career predicament. My current career is taking me into a direction where I don't want to go. I want to get into tech, the thing is I have no clear vision on where this could take me and I was thinking if someone here can help me out. I looked into the guide in the discord channel, kinda thinking of doing the purple route, sounds beneficial to have knowledge on protecting and also attacking but career wise I have no idea where to look and how it looks. My main goal right now is to get out of here ASAP and find my first tech job and learn about cyber security meanwhile. The only experience I have with tech is python programming(very minimal, not the best) and soldering stuff together like modding a GameCube or making a clock lol. I'd really appreciate the advice and thank you so much for reading me out.

[real juniper]

U want quick job for soc cert
And apply for job
Soc entry level jobs everywhere

[whole patio]

#👥・new-member-guide

[woven hazel]

if ya goal is to get into tech I'd focus first on something entrylevel like IT support, helpdesk or junior sysadmin

[sly torrent]

Hey guys, i got a question, do i need to know programming or code if i want to get into ethical hacking?

[woven hazel]

You dont need to be a strong programmer to start but knowing some basic coding helps

[topaz sorrel]

hey guys, i could use advice to get pass an admin lock on my company laptop. if possible after the unlock and putting me as the admin on windows i then can start downloading the proper software to hang with everyone.

[woven hazel]

I cant help with bypassing admin controls on a company laptop

iF you need specific tools the best move is to ask your IT team to install them ykyk

[whole patio]

Either it is not yours, then leave it be, or if the company handed it to you, to use, ask them

[twin seal]

i confirmed a secret-dependent CSS font oracle and CSS-gated lazy-iframe loading that can branch to /flag?secret=yes/no, but while a bot-side request proves the secret is consumed, i still lack durable readback for the full 32-hex value and likely need to pair the lazy-iframe selector with a multi-marker server-side channel (probably remote Redis allkeys-lru eviction) to recover it what do i do

[woven hazel]

If the oracle works the problem is probably leak bandwidth

try turning it into a charbychar or prefix oracle and recover the value incrementally by observing the bots requests effects instead of trying to leak the whole secret at once yk fam

[twin seal]

the issue witht that is it taked 2 hours

i only got 15 mins to solve it

[woven hazel]

I see

then

I’d focus on increasing bandwidth, leak multiple characters per request or group characters instead of testing them one by one way better

[twin seal]

alrighty

[woven hazel]

gl fam

[blazing hemlock]

can someone please just explain to me why x32dbg doesnt apply all of the patches i do?

[keen cedar]

Can anyone help me..I’m finally building my first log monitoring lab!..I thought about using splunk but it's paid and then i came to know about wazuh but I’m definitely confused by all the different tools out there.
If you were starting from scratch today to learn the basics, which tool would you pick? (My aim is to become a soc analyst)

[blazing hemlock]

i fill a space of memory with NOPs then i patch the file and afterwards it says X out of N patches applied where X is less than N, which should not be the case

[woven hazel]

patches are only applied in memory, if you don’t use “patch --> pply patches to file” (or save the patched binary) they won’t persist (i think)
make sure you’re patching the correct module//section

[blazing hemlock]

yeah i do, i save the patched file which i then open up and not all of the patches are applied

[blazing hemlock]

im sure im patching the correct section cause it does apply, the problem is that its not FULLY applying

[woven hazel]

dat can happen if some patches are in unloaded modules or rebased addresses ykyk, x32dbg only writes patches that map cleanly to the file on disk

[blazing hemlock]

so i guess i gotta find places where its the most reliable?

where i can get the max amount of addresses i can reliably patch

[woven hazel]

Yeah usually its more reliable to patch instructions inside the main modules .text section since those map directly to the file

patching stuff in dynamically loaded modules or relocated memory can be inconsistent when saving th

[blazing hemlock]

oh, i guess that might now make sense because i am patching a .00cfg section

it might be dynamically loaded or something

it was a read-only section

alright thanks a lot you cleared up the confusion

[woven hazel]

Yeah, that explains it read only or dynamically loaded sections like .00cfg often dont map directly to the file

[woven hazel]

yw fam always glad to help ✌️

[fervent basin]

Hi can someone help me, i'm doing reverse engineering on CTF and i'm having trouble on dynamic challenges. I know how to read code and doing static challenges, I use Ghidra on it and I usually poke the main function and clicking the functions that are pointing to another in Ghidra. On dynamic I know the basics of gdb but I don't know which one to poke from it, are there any specific methodology like step by step that I should do first when solving it or just straight poking it after analyzing it through the Ghidra?

[copper rose]

Hi what is that laptop giveaway thing can any one give detail I have no idea about it I was away for a month

@minor blade hi

[pseudo tinsel]

Hey i kinda have a specific problem I wanna solve, i basically don't know anything about compsci on even a normal level i can barely code html and I wanted to help a friend out by finding his account passwords especially his socials coz he forgot it and I just wanted to know how either directly get a lotta info about pwds ip add etc thru a free site /or what I should study to get proficient enough to do it myself?

[crisp star]

Forget all about that stuff. The only real option is to use the recovery feature that the official website offers.

[static venture]

hey guys

my laptop backlit is not turning off

[whole patio]

fully upgraded?

[static venture]

?

[whole patio]

Is Your System Fully Upgraded

[static venture]

yeah

latest its yk

every single key is working but the only is backlit not turning off i try to check if my key is broken but its working

[tribal hawk]

hey

is someone free

i neeg BIG HELP

[crisp star]

That would require you to ask a question.

[whole patio]

This isn't a service center where people are assigned to you.

Ask your question, and if someone feels like it, they may try to help you

Hope this isnt still about your vercel website

[hallow kernel]

Hold down fn button and press the backlit button

[tawny swift]

does anyone have any tips on learning internet security protocols?

[lost vapor]

https://www.netacad.com/courses/cybersecurity-essentials?courseLang=en-US

[west sparrow]

good evening from the PH everyone

I desperately need anyone's help. Is there any way to track the IP add or location of a dummy fb account?

[lost vapor]

as a simple citizen with no authority rights you cannot track a facebook's location
however police can pull that information

unless the facebook account directly provides you with the location by setting it on

moreover we don't allow services or help when it comes to tracking people whatsoever

[west sparrow]

I already reported it to the police sir. still no update

[lost vapor]

well, all that's left to do is sit and wait unfortunately

you can also report the facebook page itself to facebook themselves

[west sparrow]

we did that too sir

the system here in the PH sucks. if youre just a simple individual the help and justice will take such a long time

[whole patio]

And if you show up on a hacking server to ask the question you asked, you are just another number of the many people daily that show up and have sad stories to tell and try to make someone else break the law for them.

And we are not doing it

Although lately more people get DMs afterwards from scammers looking to target the gullible.. so watch out for those

[west sparrow]

im not asking for you to break the law sir. i was just sincerely asking for help. i dont mean for anyone to get upset

[whole patio]

You have to be aware that you are asking people to break the law.. I mean.. what did you think? That the info is freely available to anyone, and so anyone could stalk anyone all the time?

[west sparrow]

like is there anyway for anyone to help me or teach me how to track sir

[whole patio]

Leave it to the police

[west sparrow]

that is not my intention sir. sorry for the words i chose

[whole patio]

Go stalk someone else..

[west sparrow]

im not a stalker sir. im sorry po

[whole patio]

yeah you are

You want to be taught how to check the real world location of someone ... stalker

[west sparrow]

no im not

[whole patio]

You are, you just don't like being called out

and really.. we can drop the subject

The answer is No

[west sparrow]

im just trying to seek any help sir. thats all.
im a mother of 3 and recently someone threatened me. and now someone made an AI nude of my friend all bcoz i stand for my friend

Missy Dee you can search that in fb just to know im not trying to harm anyone.

[whole patio]

Sorry to hear that.. tell it to the police

Apart from that - every single one who shows up her and asks for help to stalk someone tells a sob story.. sometimes its their spouse being unfaithful, or their brother got abducted.. or someone threatening them.. in the end it doesn't matter.

You are not getting any help on this server trying to track someone down. None. Period.

This is not a debate and you dont need to argue. I am simply informing you of the fact

look at the bright side - we are also not helping that one person who might want to stalk you

[west sparrow]

im not tryint o debate you or anyone. i was just stating facts to what really happened

when you said you cant help at all, did i force you to?

instead i apologized

[whole patio]

I said "no one will help you here"

and you kept arguing your point

so if we are both clear about the situation now...

[west sparrow]

and i said ok

even apologized

[whole patio]

The thing is.. I do not believe a single word you say, so an apology is meaningless

[west sparrow]

but you keep insisting that i am a stalker

i didnt say anything that you gotta believe me

[whole patio]

Well you are.. you repeatedly asked with help on how to stalk someone.

You just didn't like the word, and had an explanation why it would be okay.. still a stalker if you want to be taught how to stalk

And we can stop this here, really

[west sparrow]

hahahahhahah

yeah

i only asked 1 time hahahahha

read it carefully tho

and you said no then i said ok

[whole patio]

alright buddy.. you keep this up as long as you need, alright? I'll be gone now

[west sparrow]

hahahhaha yeah yeah

[tribal hawk]

hey

am soorry to everyonee

it was first time

trying things on a real time website

so got idk bit lost

sorry for pissng yall offf

my baddd

@whole patio sorryy

[west sparrow]

im sorry also to everyone if I upset anyone. specially @whole patio

not my intention at all

i just saw a video in facebook and leads me here.

[tribal hawk]

ye same

[west sparrow]

im truly sorry

[tribal hawk]

i found a reel from insta saying owlsec is the most goated cyber sec community

[whole patio]

We are really not upset.

Just telling no - same reason, different story for both of you

[west sparrow]

im not gonna ask my stupid questions

[tribal hawk]

it was my first time

[west sparrow]

but im really sorry

[whole patio]

If it is cyber security you are looking for, then this is the place.

[tribal hawk]

it was just my first time and ive been doin thm for 2-3 months

[west sparrow]

yeah that would be great.

[tribal hawk]

and when i tried everthing i learned

[west sparrow]

my first time here

[tribal hawk]

nothign worked out

[whole patio]

start here #👥・new-member-guide

[tribal hawk]

so i jus wanted to know how yall doo ittt

[west sparrow]

thank you very much

[tribal hawk]

i didnt know it wasnt allowed to ask such things

my abd

[whole patio]

thm is an artifical environment, almost none of it works in the real world

[tribal hawk]

yee

i think tht realization kinda hit baddd

[west sparrow]

yeah me too.

[tribal hawk]

so thats why i kept on asking yall how it wokrs and stuff

[whole patio]

By knowing what you are doing, mostly

[west sparrow]

@tribal hawk here

[whole patio]

And this is why we keep saying cyber security is not an entry level field.. thm is a beginning, nothing else

[west sparrow]

now we know it sir

[whole patio]

mother of three calling me "sir", eh?

You see why we don't believe sob stories 😉

[west sparrow]

hahahahaha that's how PH address men

[whole patio]

You really wanna keep doing this? Alright then

[west sparrow]

i mean that is how im used to address people

you dont have to be aggressive

im not asking anyone to believe me. im just explaining

and with that im gonna stop

[whole patio]

Its this childish behavior to take someone telling you "no" personally more than anything, really..

You see, we get people like you all the time.. you may thing this is still a charade you have to keep up, but it really isn't

I, personally, blame chatgpt .. young people just forgot how to talk to real humans

[west sparrow]

huh? my god, what?

young people? hahahahaha thanks

[forest fractal]

is there a guide for someone who's just starting in linux??

[pseudo saddle]

tips fedora

[woven anvil]

Theres a few ways to get started, depending on what equipment you have available to you.

[woven anvil]

Can you change your profile picture.
#📜・rules #14

[forest fractal]

oh wait hold on

[forest fractal]

is this okay?

[woven anvil]

That wasn't meant for you, it was for @pseudo saddle

[forest fractal]

oh

[woven anvil]

I wanna know what you have available to learn with if you want to get into linux

[forest fractal]

i wanna try and explore the tools we're currently studying, we're currently studying Cybersecurity Essentials and Network Defense

and if u don't mind do u recommend dual booting?

[woven anvil]

I don't recommend dual booting for learning how to use an OS.
People will typically get annoyed that something "isn't the same as they are used to", and keep switching back to the OS that they are used to. Since rebooting to switch OSes is such a pain, it never gets learned.

Better ways would be:

• If you have a desktop + laptop(or multiple computers), having linux on one of them with Windows on the other so you always have a "good computer to go back to" if you have issues(or look up the issues to fix them)
• If you have 1 computer, you run a hypervisor to run virtual machines so you can run Linux inside of your Windows.

[whole patio]

Dual booting should be the last option, if your computer really can't handle a single VM

[woven anvil]

And if you are just looking to learn how to use linux, and not look into learning how linux works under the hood, then you are good with kali/debian/mint/whatever you want. They all have the linux kernel, and they all can install packages that are available for linux. Kali obviously makes it easy by having all the packages installed if that is what you prefer.

If you are looking to learn "what is linux, and how does one start from a commandline, and get graphics + apps", then something like an Arch linux would be good, as they have a great wiki + setup guide that helps answer questions about each part of the OS on the way. At the end of that, you will have more practice in things like formatting disks, installing packages, and changing configurations.

[forest fractal]

ok ok thank u so much guys

i'll be taking this into consideration thank u so much love yall

[woven anvil]

Here is a link to play around with if you want a link to something specific.
https://www.kali.org/docs/virtualization/install-virtualbox-guest-vm/
Look over the hypervisors like virtualbox/vmware, and see what you want to use. Hyper-v is also an option.

Virtualbox + vmware both have pre-made VMs ready to go, so a lot of people seem to like those on windows.

[forest fractal]

okay okay thank youuuu

[wicked sable]

Hello guys 👋
I am doing one vanet simulation project to study the metrices value of AODV,DSDV,OLSR and DSR......using ns3 and sumo.....but I am facing an issue for dsr every time when I change the number of nodes, bandwidth or data packets size value....all the metrices value of dsr is zero
Need help with that

[woven hazel]

If all dsr metrics are zero it usually means no routes are being established so no packets are bein delivered

[wicked sable]

@woven hazel but for AODV, DSDV and OLSR.....its working fine.......

[woven hazel]

if AODV, DSDV and OLSR work but dsr is always zero it likely means dsr isn't establishing routes in your scenario, check your DSR config and make sure traffic starts after route discovery can occur

[wicked sable]

@woven hazel How do I check for that???

@woven hazel okay let me check once then I'll get back to you with this

[woven hazel]

kk fam

[whole patio]

No #📜・rules

[ivory charm]

Guys I'm thinking of network/infra simulation guns for my uni
Any possibile topic suggestions

[candid aspen]

brrrooooo

[hazy trellis]

is it alright if i paste a referal link here for jamie ?? or will i get banned ??

[whole patio]

I wouldn't

[candid aspen]

don't allow different ports from each user to connect, private ports from any user

[hazy trellis]

thnx was just looking to make quick bucks

[wicked citrus]

yoo sorry, does anyone how to get SHEIN gift card or something

[whole patio]

I think they sell those

[frail flax]

Check it on their website, you can purchase it there

[granite vale]

Dont

[twin seal]

@woven hazel brorooodasfojds;osd;ojdsf it didnt work

im gonna cry

[dull lodge]

and does anyknow to by pass the i am not robot ?

[lost vapor]

depends on what it is most of the time these can't be bypassed

unless the website's logic allows it

[dull lodge]

website is not allowing to by pass , but is there another way , i got a way to use the extender by chrome , it is safe tho

[deft goblet]

ModMail Help Menu

Miscellaneous

My prefix is =. Use =help <command> for more information on a command.

permissions

Show your permissions or the member specified.

userinfo

Show some information about yourself or the member specified.

serverinfo

Get some information about this server.

Use the reactions to flip pages. (Page 6/8)

[woven hazel]

@twin seal

[twin seal]

yo

[woven hazel]

Waht hapen

[tawny swift]

do i need to learn internet security protocols if im trying to create malware on my computer?

[woven hazel]

If you’re learning security, its better to focus on understanding networking and security protocols in general

It will be useful for other learnin or shi

[twin seal]

nothng welrk

brain hurty

ow

[woven hazel]

breh

tell me where did it fail

or what do you need to know now

[twin seal]

it fails everywhere

if i try a injection

no go

if i ry to get it to leak

it takes to long

no matter how i go about it

[woven hazel]

If everythings failing and you only have 15 minutes it might be a sign the intended path is simpler

[twin seal]

I am not missing a small payload tweak the real problem is that I do not have a same visit end to end path each visit generates a new random 32 hex secret that expires in 60 seconds and the flag endpoint deletes it when accessed so once the visit ends the secret is gone and any delayed or multi visit readback is useless this means any approach where I try to learn part of the secret and refine it across visits cannot work what I actually need is either a same visit high bandwidth readback channel or a browser only way to construct the flag request using the secret during the same visit otherwise every approach will keep failing because the secret resets each time

i hate this

[twin seal]

maybe so but why cant i see the simple path broooooooooooo

[woven hazel]

damn now thats rough

[woven hazel]

if the secret resets every visit and expires in 60s multi‑step leaks won’t work,, you probably need a same‑visit exfil channel

or a way to make the browser itself hit /flag with the secret during that visit

[woeful nebula]

Halo

[brisk flare]

Hi, I need some advice for my professional portfolio. Currently trying to display my projects/competitions. This is how it currently looks: 1 Main image, underneath that is the project name, then a quick description of the project (needs to be updated to 2-3 sentences with a summary of the project - right now it's just taking what's inside the project. Will updated for better organization), below that I have some skills/tools used. Is it better that I categorize them in sections for "Tools" and "Skills" for a more organized look or is keeping them scrambled fine? I was thinking of creating a "filter" section where a user can filter for specific skills or tools then it would display all projects/competitions that match the criteria. Link to picture for reference.
https://imgur.com/x6y82H5

[visual axle]

how does someone set theVPN file on a VM

because im trying to have it connect but it wont

[woven hazel]

we cant give instructions to bypass Cloudflare that would be illegal, check out #📜・rules before asking shi

[tall horizon]

ok i appriciate your opinion am new on cyber seceurity and that is wy i was asking because it seems to be possible to bypass

[woven hazel]

no worries, asking questions is part of learning ✌️

[pale fulcrum]

Any ideas for personal portfolio website for cybersec freshers

[nocturne oar]

any help here :
AutoFlow Systems uses an AI-powered workflow automation platform to manage their internal operations. During a routine security assessment, you've been tasked with finding any exploitable weaknesses in their infrastructure and gaining root access to the underlying host.

[brisk flare]

I'm currently using Wix for mine and using some vibe coding to help generate my structure/layout. I've used WordPress before this and used their free templates, but I disliked the navigation it made on the portfolio side. I'm enjoying the vibe code side of things on Wix. Sadly WordPress doesn't offer it so I switched to wix for now

[brisk flare]

I've also heard doing the "Cloud Resume Challenge" can show off a lot of skills. There's walkthroughs on Youtube that guide you step by step. You setup everything yourself. It is time consuming and challenging. One day i'll do it, but i just dont have time right now

[woeful dove]

How can i get into cybersecurity
Can someone help me to get the latest 2026 roadmap

[visual axle]

forget a roadmap, just learn

[woven hazel]

Ay fam check out #👥・new-member-guide you got a basic roadmap there

[visual axle]

you’ll find out you need so much more than just a specific skill or skills, just be ready to learn a lot

[woeful dove]

Resource?

[visual axle]

#👥・new-member-guide start there and just keep staying curious and research

[brisk flare]

TryHackMe is a good start too. It's a gamified cyber learning platform to teach you some cyber skills. They have pathways and roadmaps you can start with until you figure out what you want to do

[carmine timber]

hey ive been trying to change my hp chromebook to a linux software so that i can use ollama ai and i turned on rw legacy with the mrchromebox tech. but when i plug in my ubuntu flash drive it still is not being detected by the chromebook when i go into that recovery/developer mode screen from esc refresh and power its telling me no valid image detected. I used rufus to flash the usb and i used the correct settings to my knowledge and it's still not working im using MBR Partition BIOS or UEFI Target file sys: largeFAT32 and 32 KB cluster, 0 Persistent partition size and 1 pass wtv that means

[sharp edge]

How do i enter the ctf channel

[past dock]

I need to get into some low level security cameras and pull video

[devout linden]

you would have to own these cameras and then just log in via the credentials/management portal

[past dock]

I do own but i dont know the credentials

And or shut down any movement sensors on them to get the sd

[whole patio]

You see how this story seems way more unlikely than you just trying to trick someone into enabling you to do something you shouldn't do?

[devout linden]

i dont feel comfortable even recommending the normal things i would on this one. Sounds sketchy

[whole patio]

Totally get you. I have a friend who very, VERY much would not like people disabling motion detection on her outside cameras for good reasons

But then again.. this here isn't our job.. there is no manager to speak to.. if you feel like someone is trying to box above their weight and sounds like they are trying to convince chatgpt.. call em out, as far as I am concernced. It also bolsters a culture of vigilance for illegal activities

[devout linden]

agreed

[plucky atlas]

I got a pentesting internship coming up and I am freaking out over imposter syndrome. What should I be brushing up on to dominate this interview and secure the internship?

[blissful egret]

hi can anybody help me??

[woven hazel]

Sure, drop your problem here

[blissful egret]

i need an AI for real time analysis and which can provide me answers during web cam tests

[wicked sable]

I checked everything but hard luck nothing happened

[whole patio]

So you need help using google on how to cheat on an exam

[fossil vigil]

What's the best beginner ctf on THM

[whole patio]

asking for the "best" in anything is always nonsensical or lacks context

Why not use the search function on thm and look for ctf, easy, popular ..

[fossil vigil]

Just trynna get other people's opinions ig

[whole patio]

that is the "lacking context" part.. you think "for beginner" is enough for others to know what that, in your case, means. It is not.

Also, what makes you think anyone here who has both enough experience for all the boxes on THM also still has the living memory to recall their names.

if looking up easy CTFs on a website with a search function to allow just that is too much for you.. maybe pentesting/security is not for you

If pentesting can be summed up at as "Find info that others try to hide from you", then "Finding infos that others want you to have" should be nailed down

Why not check some out and tell us..

[ivory yarrow]

Hello can someone help me root my phone

[soft vigil]

what phone is it?

[ivory yarrow]

Samsung s23 ultra

[tawny swift]

what exact model is it? some s23 ultra versions can’t be rooted. also rooting will wipe the phone and trip knox permanently.

[ivory yarrow]

I need to check i knwo it will wipe the pohone

[tawny swift]

ok, check the exact model. if the bootloader can be unlocked you can root it.

[ivory yarrow]

I DM to you

[tawny swift]

no dms please

if you need help, we can talk here.

[ivory yarrow]

Alright anyways ok let's start from basic i will probably find video on you tube so I will get back if I will have questions

[tulip sonnet]

can anybody help me?? With a PlayStation online problem

[crisp star]

That would require you to ask a question first.

[tawny swift]

could you ask the question?

[ivory yarrow]

Someone know what man in the middle mean

[lost vapor]

why?

oh you mean the attack vector

[ivory yarrow]

Fuckin coffee make me read shit

Yes

[lost vapor]

it basically means that something is standing between two machines forwarding traffic most of the time

forwarding traffic between eachother that is

[ivory yarrow]

Yea but can someone can use this trafic ?

[lost vapor]

the man in the middle usually has access to the traffic, and is the one forwarding it to the recipient

[ivory yarrow]

Alright I will dig further

[lost vapor]

there's a more vast meaning behind man in the middle but i am talking about it from the offensive perspective

[ivory yarrow]

Yea I know it's always better to work in team

And if u got team relay will be good choice

Shitt i hate myself

[fallen lake]

jo i got a question , anybody here got some darkweb knowledge need help setting up whonix and gemeral movement in dread.

its not

[tawny swift]

i can help you with the legal/privacy side of whonix and tor setup

but that’s it

[fallen lake]

sure

so whonix or tails on a flash ?

just tell me when u got time

[tawny swift]

depends what you want. tails on a usb is good if you want a clean system every time and no traces left on the computer. whonix is better for long-term use in a vm because it routes everything through tor automatically.

[ivory yarrow]

What's best system for android

I mean what's best to install on Samsung

If I want to be invisible

[crisp star]

If you want to be invisible, don't use a phone.

[tawny swift]

computer is better for that type of stuff

or a laptop is best, easy transport, best way not to use it at home so you won’t be tracked in case of illegal activity

[ivory yarrow]

I know but let's say there will be combination on block screen that will wipe it

Or make it look brick and then I can re load it

[crisp star]

If you want to remote delete your phone just use an iPhone.

Also I'm pretty sure it also exist for Android

https://www.samsung.com/ca/support/mobile-devices/find-your-lost-samsung-galaxy/

[ivory yarrow]

Not remote u have cases that u need to make it look brick or vipe

[crisp star]

I mean it does that?

Why do you want to make it look like it's bricked?

[ivory yarrow]

If police want to crack in

[crisp star]

lol they can crack it

[ivory yarrow]

The can't iPhone

[crisp star]

There are special hardware by law enforcement that can do that.

[ivory yarrow]

Yea I know that but

I won't buy uranium so

Just I need an multi toll

[tawny swift]

@ivory yarrow it’s easier for you just to get a good laptop and study the internet security protocols, and besides that never power it up or bring it home, as it can be tracked

https://youtube.com/watch?v=kQ7ArdxsAAw&is=FnoDen4nVEZ1-deo

watch this video and study it and you should be good, i mean you won’t learn everything but these are the basic essentials for beginners

[ivory yarrow]

Ok

[woven anvil]

This is a crazy 40 minute video where the dude just repeats encryption, assumes that remote exit nodes that you have no control over are secure, and talks about whatsapp being encrypted even though they are going through a lawsuit about Meta having access to the encrypted messages.

Easier way to be a ghost is to get off social media, and never post anything about yourself online.

[tawny swift]

as i said he doesn’t explain everything but he explains most of the thing beginners don’t know when i started out i watched this and it helped me a bit and i skipped the encrypted messaging part

[woven anvil]

Yeah, but what he is saying doesn't make sense.

If you put his stuff together, and use VPN + Whatsapp, then all you have done is told Meta that you are using a VPN. They just associate it with the rest of your data.

[tawny swift]

i know but he explains the basic low things: vpn, dns, tor, proxy, he dos explain stuff that is good to know when starting out

[opaque onyx]

hey there guys actually i need help in cybersec , i am kind of a newbie or intermediate idk , i have completed networking basics, solved ctfs on tryhackme done some certifications from cisco related to junior cybersecurity analyst carrer path thinking of doing bug bounty now but obiously finding bugs on ctf webpage and on real webpage is far different and hard so dunno what to do
plus confused on which domain should i study now and all
and the main question how to get a entry lvl job obiously they dont hire freshers in this field so needed some guidance and talk with a profeshnal who is right now working in cybersec can anyone help me

[woven anvil]

If what you want to do is find bugs made by programmers, then I would learn some programming next. You don't have to be a master programmer, but enough to make some proof of concepts, and to read other people's code.

Understanding why the developers implemented a feature a certain way, why it was vulnerable, and how they fixed it for past CVEs will help you understand how to look for more issues on your own.

[opaque onyx]

yep i can code actually i am a btech student so i am having that cooding and developmet background

[woven anvil]

If what you are asking about is finding a career, then Social networking seems to be key. Making yourself known, making your information known, and approaching companies that want your skills.

Cybersecurity events would be a great place to meet vendors and such for that purpose.

[brisk tree]

Damn another btech guy

[opaque onyx]

thanks that actually a needed response
but what skills are actually industry needed
like blueteamin red teaming soc analyst etc etc i know all that name
but what actually to do i dont know kind of stuck there

[opaque onyx]

yea 😄

[woven anvil]

The amount of foundations that you understand, which puts you in a position to learn more

[brisk tree]

I dropped out of btech after 4 months

[versed oriole]

Newbie here. Who wanna take me through the journey

[brisk tree]

Welcome to owlsec
#👥・new-member-guide

[opaque onyx]

i thought of doing smtg similar but what else can i do so still continuing lol 😂

[woven anvil]

So for example, someone who would be blueteaming would have to understand what a server is, how an application runs on the server, how that application connects to the outside world, what is used to prevent attacks, and what is used to log attacks that get past the defenses. What are your attack vectors that one could use to enter the environment.

Someone who is redteaming, they would have to know similar things, but more of a "How does this application actually work? How does the logging/protection systems work? How do i get around without being detected?"

But it all comes down to understanding each of the foundations of how that thing works, so you know how to manipulate it to do what you need to do.

[brisk tree]

Understandable

[versed oriole]

Thanks

[brisk tree]

Np

[opaque onyx]

thanks a lot sir
but like should i only focus on one domain like blueteaming or red , or sould i just learn explore more cybersec
i actually like ur suggestion of goint to cybersec events make connections and meet vendors like that i can also meet ppls and showcase someof my skills
but for making a good carrer in this field what domain should i choose

like i was thinking now i will study soc analyst path or bug bounty then threat hunting , malware developmet and analysis and smtg

but now that ai is growing and i heard clude new ai can find vulneribilities so was think should learn basic of ml and use of ai tools and integration so that like in future i can go for ai security engg or cloud sec engg smtg

[woven anvil]

Focus on the skills that those jobs learn, find out which careers use the skills that you enjoy, and then learn from the companies how they would like you to use your skills for that job position.

If you have some starting knowledge for networking/operating systems/programming, then start doing projects that use those things you learned, so you can start getting some personal experience with them.

Fool around with VMs, and set up your own little SIEM that is logging data from a linux VM or something. Try attacking that VM, and see how it appears in the logs.

[woven anvil]

And you should eventually understand how to use an LLM as a tool. But thats all it really is. It doesn't replace a person, and it is another application that needs to be checked for security issues.

[opaque onyx]

so if i am thinking of learning ml/llm and tools with my cybersecurity journey is a good decision right
thanks you actually helped

[woven anvil]

Yes, as long as you use it for a tool for stuff you already know, or as a summary for something you don't.

Make sure you don't try learning directly from an LLM, as its information can be incorrect(hallucination from not enough given parameters)

[gray linden]

uhm i have a problem with my pc i downloaded stuff on the web but i searched on procces explorer and i see my pc flooded with svchost apps is this normal?

[lost vapor]

svchost is a windows process

https://learn.microsoft.com/en-us/answers/questions/5627699/how-to-fix-high-network-usage-and-memory-leak-caus

[woven anvil]

svchost is the process that runs a lot of the built-in Services in windows.
Many applications use it, you have to show the "command line" column in the "Details" portion of Task manager to see what it is actually referring to

[gray linden]

yeah but like i know that viruses can disguise themselves as svchost, am i correct? I don't really know

[woven anvil]

They can also disguise themselves as explorer.exe

You won't always know by looking at the task manager

[odd gust]

https://youtube.com/shorts/WwYsV-0kYSc?is=aor-xCQlVp29Rbuc

[granite vale]

Its very basic knowledge,I think literal everyone here knows about those topics.

[granite vale]

Meta denies the claims. In a statement to Bloomberg, Meta spokesperson Andy Stone said: “Any claim that people's WhatsApp messages are not encrypted is categorically false and absurd. WhatsApp has been end-to-end encrypted using the Signal protocol for a decade. This lawsuit is a frivolous work of fiction.”

[tawny swift]

i didn’t know abt these things when i started out, that’s why i said it’s basic knowledge and you don’t need to watch the whole vid

i didn’t even fully know what a vpn was when i started out

[granite vale]

Well any person related or not related with cybersecurity knows what a vpn is and even skids know tor its very basic knowledge

[tawny swift]

yeah i understand

[granite vale]

Its a 40 minute video you can possibly consume better quality content on social media or even read about operational security

[ivory yarrow]

I use already VPN

And I think I understand this a little bit when I'm in home I make wi fi from phone with VPN

And my sim card is from other country

I think I need to start working on coding or something

If I want to make those things

[next bough]

Hey! I'm interested in getting into cybersecurity and I've seen a lot of different cybersec roadmaps online. Is it actually worth following a roadmap, or is it better to just focus on learning skills and certifications individually?

If a roadmap is useful, which one would you recommend for a beginner?

[whole patio]

That depends on what your starting position is, and what your specific goal ist. That being said - whatever works for you, really.

[next bough]

I know basic IT and basics of windows and linux. And some nmap.

[whole patio]

That would make you a beginner then. So what is your goal? Do you seek employment, just knowledge, do you have a time constraint that is relevant here?

[next bough]

Im trying to maybe get employed in the field. And I would say I have a lot of free time

@whole patio

[past dock]

They my dads he gad i girl over and he was using then to watch her change

[whole patio]

deadshot wrote something that might put a bit of perspective on it #1482326165329809489 message

But in the end its you that has to make a decision about their goal

[fringe ivy]

[whole patio]

At least as far as "Do I need those roadmaps really`goes

If you have no specific goal, then the answer is "who knows"

[sly meadow]

I don't know my goal, i wish to have a goal and mentor.

[whole patio]

You are not going to find someone to mentor you. But you can start here #👥・new-member-guide

[placid bloom]

guys which plan do you recommend i purchases for htb? the educational one? i saw a comment saying its free to learn but you might as well spend some money if you want faster result and no limitation

[whole patio]

If you are going to spend quite some time there, I'd suggest the silver one - unless you are a student, I think they have their own tier

[lost vapor]

i roll with the silver sub on the academy, seems to fit perfectly as each module can take a long time to finish

[desert wyvern]

hi

how are you men?

[median iris]

help me reminds me on help me help me videos vroo loll

[urban siren]

HYY

[carmine oracle]

Yoo

[fast elbow]

Not specifically looking for a mentor, more along some advice/guidelines for mobile hacking/pentest/security/development.

I've jumped around a lot but I would like to dive head first into mobile. If someone can recommend some resources or training platforms TIA.

P.S. feel free to ping I don't mind.

[dusty nacelle]

any Mechatronics in the building?

[bitter sundial]

Where do i start

[fathom summit]

#👥・new-member-guide

[brisk tree]

We actually don't promote anything illegal

Contact the facebook support

[fathom summit]

@inland ingot like vlastimir said, “contact support” this is not the place for that. Please review our #📜・rules

[brisk tree]

Finally someone got my name right
Not calling me vladimir

[fathom summit]

I sounded it out. 🤷‍♂️ 🤣

[alpine cloak]

hello

[brisk tree]

hahha

[visual axle]

so im in VC and i dont know whats going on for this module, i keep typing in the propper command but its not working the uestion is for the module Windows fundamentals:

Find the non-standard directory in the C drive. Submit the contents of the flag file saved in this directory.

wondering if anyone has insight on this

[sour sleet]

hello everyone i was wondering if anyone could help me review my writeup template and give me some honest feedback because sadly its one of those things we do not get taught at uni...

[hollow vigil]

Hey guys i was just wondering are THM SEC0 and SEC1 worth paying for?

[rich estuary]

Hey I was wondering why @onyx birch was quarintined for no reason.

[steady palm]

He broke server rules.

[waxen minnow]

I have a question - I am level 2 noob - but I feel like someone is running a phishing scam on FB marketplace either in my area or this is something new.

Just want to share my experience - it has happened twice in 2 days so far.

One person messages through FB claiming their spouse is very interested in the item im selling and ask me to text their husband to talk about pickup.

I find that fishy so I text through a VOIP number instead of my real number - then they respond ask about price and the couch and I just felt the vibe was off they asked for a pickup location - I dropped a pin at the leasing office of where I live.

Then they insisted on zelle-ing me like immediately and I said no I wanted cash - no $100's bills - they asked me to set up zelle or Venmo and sent a link I did not click it - then they send a screenshot of zelle saying they needed my email address to confirm the payment.

I said no that we would work out payment when they arrived, first time I ignored it - second time with different accounts , either I'm a lucky guy or some weird juju is going on - anyone experience the same thing or know what that is ?

P.S they stop responding when I refuse the email and insist on waiting to meet. - if this violates any rules I am sorry I will remove it immediately.

Thanks

[devout linden]

Basically they are trying to get your information (Social engineering) There are some scams setup that use these and then gain access to your accounts. Best thing to do is report them

[waxen minnow]

I did thanks

I just needed to know I wasnt crazy lol

[fickle heron]

Hi, I have an OA with Stripe for the Security Engineer New Grad role on Hackerrank, I was wondering if anyone has given it recently and what their experience has been.

[devout linden]

Read the #📜・rules please

[pure bramble]

Got it Bro

[placid bloom]

guys which one do i get htb subscription academy or lab? or are they the same?

[static kite]

Can i find the number by username in telegram. Or some other ways to find number

[devout linden]

depends on your lvl. If you are trying to learn more the academy can be better for learning pathways for their certs.

[devout linden]

Please read the #📜・rules This is an invasion of privacy

[kind zealot]

https://tenor.com/view/baby-reading-reading-stress-cant-read-i-cant-read-gif-25879469

[static kite]

Ok alright 👍

[slender terrace]

hey guys i had this question i share my wifi or network with 4 people and its a fast one to but now days it been acting weird like the network shuts of or it restartes and sometimes it shows that theres network like all the lights are up but no network

like the modem shuts of or restarts on random times

like is this normal or is it hacked

[sour sleet]

have you check the admin panel of your router to see if any other devices tried to connect to your wifi/ router?

[slender terrace]

well nope am check that right now

[sour sleet]

an if there is no web based admin panel set up a wire shark and check whats happening in your own network check for ips that you dont recognize

[slender terrace]

idk what you mean by admin panel but i have the site website and am check that but does this mean someone is trynna hope on my wifi

alr so no new devices just normal me and the 4 people stuffs but yeah

[stoic jolt]

Hi guys any tips to open a locked local user account (windows 11)

[sour sleet]

if possible does your router web page show you who tried to log in? like does it show failed login attemps?

[slender terrace]

no its like where i can see all the devices that are using and was on my network/wifi like previously connected and using right now

[sour sleet]

Yeah that only shows devices on your network, not really failed attempts or hacking. If there’s no unknown device, it might just be router/ISP issues, overheating, or firmware bugs. Check if your router page has logs, uptime, or event history to see if it’s actually rebooting or losing connection. Changing the Wi-Fi password wouldn’t hurt either.

just... dont forget to the t the people you share with

[slender terrace]

i mean its kind hot always cuz i leave it on so yeah maybe that to but yeah thx am change the password and tell them to but my wifi password is kinda good like its random letters numbers and symbols so i didnt change that but yeah am change it to

[sour sleet]

it’s not just about how strong the password is, it’s about who knows it. if one of your devices or one of your friends’ devices is compromised, the password strength won’t matter much if it’s already exposed. changing it is just a preventive step, not proof that anyone got compromised

[slender terrace]

ohh okay thank you

[sour sleet]

your welcome < 3

[modern otter]

Hello,
Hope everyone is doing well^^
Anyone knows if it's possible to find the ip adresse of a web server that isn't mine? If it is, how to do it?
Thanks in advance

[vestal lagoon]

Hello everyone

[fallen lake]

whats the best llama ?

[fallen lake]

hey

[sour sleet]

whats the palnned use case?
roubleshooting, hosting, or a CTF/lab
if its someone elses server then its a different story
if it’s a public domain/server and you have a legit reason, there are normal ways to look up its public IP through DNS

[modern otter]

Hi, I'll be completely transparent with you, it's a request from a friend of mine, and I don't know what he is planning to do with this information. However, I know he has no ill intentions at all, but that's it.

Do you need me to ask him?

[sour sleet]

id prefer that a lot

[modern otter]

yeah I understand, I'll ask him now

[fluid gulch]

No. We don’t hep you do that. Read #📜・rules

[fluid gulch]

Asking him doesn’t change the rules. You are not allowed to perform malicious activities here

[sour sleet]

oop i should probably read the rules my bad >///<

[fallen lake]

https://tenor.com/view/omni-man-breaking-it-down-omni-man-breaking-it-down-let-me-break-down-omni-man-gif-13756552621007848541

[rapid olive]

anyone preparing for SOC Analyst here?

[fallen lake]

Jo anyone good on profiling ?

[lost vapor]

we don't help with identifying people over here #📜・rules

[fallen lake]

hm

excuse me i might have said it wrong

Ight then anybody here good at networking im using kali and i need help with reserach tools

[whole patio]

Typically those tools have their own distinct documentation and communities you could ask - but really you should lose the habit of asking if someone is there you can ask, and just ask the real question right away

There even is a website about it https://dontasktoask.com/

[fallen lake]

thx i get ur point most docus are good yeah but isnt it good to ask someone with experience ?

[whole patio]

you are not asking anyone right now

and no it is not good - for the people you ask.. they are fed up with answering basic stuff you could have found yourself easily

Imagine you have an open source project and write great documentation.. only for some people to not give a flying f and go somewhere else to ask random people a question instead whether they can read the documentation for them.. or assist them using google.. to find the answer..

So either ask a question already, or not

[fallen lake]

ight so following the “read the docs first” philosophy.
Went through the Maltego documentation already. What I’m trying to figure out now is how people here actually use it beyond the basic transforms are you mostly sticking with the built-ins or integrating external OSINT sources and custom transforms for real recon?
Curious what the practical workflow looks like.

[modern otter]

oh ok mb

[mint mantle]

Guys at what learning point you should start hunting bounties or applying for internships?

I feel like it's not enough everytime i learn something

[whole patio]

Hard to tell.. of course it depends.. but one of the things I would suggest is "If people regularly ask you for help, cause they see you as an authority there"

might be friends and family, might be colleagues

[earnest mulch]

guys one question please cuz im doing research, i dont want hints or something else, I need to know if the pirate htb machine has some part of kerberoasitng (at least some part of it cuz i need it for an academic project base, etc.)

[ancient briar]

I need a job, man, or I'll die of hunger. Can anyone help with any remote job I can do

[whole patio]

As we keep telling people.. this is the wrong server to look for buck or jobs

And as we keep adding - no, I don't have a different server for you

[dusky pelican]

finally found my problem, was a Cap problem. The pcs bios couldnt find a bootable thing, so i had to cap the efi file it worked Thank god, no more boot options for me

caps*

oh btw sudo doesnt exist in grub right?

[whole patio]

its pre-authentification

there is no "su" to "do"

[dusky pelican]

damn

[hasty nest]

hi sir how can i create our personal AI agent using cloudbot/openclaw for automate the tasks in kali linux or free any one explian me plz

[young juniper]

Guys,

I have been assigned a Hack The Box challenge as part of the interview task. However, I am currently unable to access the target machine, as it shows “Server Unreachable.”

I have tried troubleshooting the issue by watching several tutorials and attempting multiple configurations, but the problem still persists. The deadline to complete this task is tomorrow at 12 PM, and at the moment the machine is still not accessible.

Could you please assist me in configuring the environment or help me resolve the connectivity issue? I would really appreciate your guidance.

[desert wyvern]

hi gng who have tips for studying

[whole patio]

a) what hardware do you have, and

b) that is a really bad idea

[whole patio]

HTB has its own discord server - probably better to ask there

[unreal sapphire]

Hello everyone,

I’m a computer science student in my final year and I’m starting my journey into cybersecurity. During my degree I’ve completed courses in
• Computer Networking (theory + lab)
• Information Security (theory + lab)
So I have a basic understanding of networking and security concepts. However, cybersecurity is a huge field and I sometimes feel overwhelmed by the different domains like red teaming, blue teaming, etc.
I’m particularly interested in the offensive side of security. I enjoy understanding how systems work and trying to break them, so I was thinking of starting with bug bounty hunting to build practical skills.
One challenge I’m facing is that platforms like Hack The Box and TryHackMe tend to lag a lot for me due to server distance, which makes the virtual labs difficult to use at times.
Given this situation, what learning path or resources would you recommend for someone with my background to start developing practical skills in offensive security? Are there alternative labs or approaches you would suggest?
I’d really appreciate any guidance from those experienced in the field.

Thank you and have a great day!

[young juniper]

Issue resolved

[lapis badger]

How do hackers hack wifi to wifi hacking mean first they attack one wifi and use other wifi to hack someones other wifi and then they got a target wifi and steal her pri photos,so my question is does it really possible?

Does wifi signal have power to deliver wifi signal sharing

[sturdy dragon]

Can you recommend a good ethical hacking book for a beginner

[lapis badger]

tbh I hate books but I got a link GitHub where you can learn easily and I learned from darkweb nvm my friend recommended me lol

[lapis badger]

https://github.com/Hack-with-Github/Free-Security-eBooks

[sturdy dragon]

Thanks alot

[past iron]

Hi not to be a bother but I just got scammed by someone but I have their phone number and username on TikTok is there anything I can do to at least get back at them

[tawny swift]

e-mail?

do you have their e mail i mean