👥・help-me

[crisp star]

Very hard to grasp what kind of help you need.
Especially since we don't even know if we are talking about a local problem or issue from your ISP.

[molten eagle]

This is what i got from support

[hazy scaffold]

Hi guys, im super new! Is there a roadmap I can follow? I want to get started on the basics of cybersecurity, get some certifications over summers. Any help is appreciated<33

[fluid gulch]

#👥・new-member-guide

[agile halo]

You can also check out roadmap.sh, it has a good layout for cybersecurity and other IT roles. :>

[jagged wyvern]

Hi guys, I'm new here and I need a guide line

[fluid gulch]

#👥・new-member-guide

[tawdry vine]

Okay

I do

[crisp star]

#📜・rules
Also that Daniel dude will probably scam you.

[edgy crow]

You cool if I dm you?

Need to show some screenshots on why I’m confused

[crisp star]

You can DM me. But depending what it is about I might ignore you

[jagged wyvern]

How can I track stolen phones? 🙏

[prime plover]

nop

#📜・rules

[tawdry vine]

What?

[fluid gulch]

no

[jagged wyvern]

Oh sorry, it's against the rules

[granite vale]

You cant

[fresh pelican]

Good evening everyone

[jagged wyvern]

Okay, I'm very sorry
I'm new to the game

I don't know anything about hacking

[fresh pelican]

I need help unlocking or recovering data's from an iPhone which is disabled

[prime plover]

#📜・rules

[prime plover]

@tawdry vine nop

[sand yoke]

Hi guy im new here and I really want to get into the game

[weary marten]

Hi, I'm eager to learn more about scripting my own scripts, I have basic knowledge of python c and java . Where can I start any lead or roadmap please

[prime plover]

hi both of you 🙌

#📜・rules
#💕・free-resources
#👥・new-member-guide

happy learning ! 😄

[vague notch]

Hey, I am Zohaib.
I want to learn Red Teaming, I already have intermediate level knowledge

[fresh axle]

Hi! Im looking to reinstall a regular android OS system on my device & PREVENT from installing malicious programs. Also if i reinstalled regular OS & they have my logins- cant they just do it again?
What can I do to lock them out of my device
I've been looking through Termux but need help.

[calm robin]

hey guys i have kali linux virtualbox set up how do i practice password cracking and wifi hacking

[graceful pasture]

for password cracking look into cryptography

its mostly just decrypting passwords

or cracking hashes

[calm robin]

thank you 🙏

[main plume]

I’ve been tryna make an Auto Dialer for calling leads but getting the logic of an actual auto dialer were it skips voice mails and junk to get you to your client is kinda hard to do

Who knows how to get the logic of a working auto dialer

[arctic token]

Has someone here how to fix error on linux

[graceful pasture]

which error

[arctic token]

Tried to install hcxdumptool its keep showing error

[twin adder]

hey so i’ve got a question is their anyone willing to try and help me get my roblox account back i got hacked a while ago and was just wondering cs i jus found yalls server on instagram and they said this is where the hackers hang out so i was wondering of anyone knew a way to help me 🫩🥲

[modest smelt]

lol i say it also on instagram i got my wallet hacked on fomo...

[arctic token]

How do you crack such complex/unique password with rockyou

[polar fable]

Best certifications to get a cyber job? Currently working on Security + while enrolled a trade specific school for cybersecurity, wondering what the best certifications are

[polar fable]

Research nmap for scanning ports on networks also

[jolly grail]

Does anyone know how to find primary trade lines for your credit report ? Like a paid off car loan ?

[daring breach]

Dual boot seems like the best option ngl, I appreciate you.

[runic herald]

I have (for someone) dumb question, i bought used macbook m2 on ebay (its assigned too business profile, but thats not the matter especialy... because mdm enroll was bypased...) and im curious right now because in past (two years ago) i was a victim of a well structured troll group, they hijacked my main network. I've got plenty of issues with isp because of that. And of course all of my devices was infected... They had a lot fun making a donkey from my person... But lets get to the end, right now im aware if shit hits the fan, and yesterday Ollama was repeating questions, some apps before install had blank spaces (text was white like theme) so im asking, it is possible to crack M2 Pro security? By infected network? I'm using VPN all websites are going thru https etc...

[empty fern]

hey guys, need some recommendations for my final year projects i’m a data science student but i have like a week to build it i want it to be ML or it would be perfect if it is something with neural networks but i really needs some good ideas cause my mind ain’t working on it, any advice is welcome:) thanks

[glad crescent]

Hey guys I wanna learn hacking but doesn't really know anything about hacking so how should I start and what should be the move starting from now ,so could anyone kindly suggest me a game plan?

[oblique hollow]

#👥・new-member-guide

[glad crescent]

Thanks man

[silk oyster]

Good evening
Am new here and I was learning in a website hack the box suddenly I can't find the website again and what is the best course for me to start from because am bit confused

[frail flax]

@slow edge @lost vapor

[lost vapor]

@dreamy shadowsorry but we don't help tracking people over here

[dreamy shadow]

?

[lost vapor]

#📜・rules

[dreamy shadow]

It’s not on other people it would’ve been on me

I gotchu tho

[crude leaf]

Does anyone know why on iphone my apps will run in the background if I don't set timer on them?

I have been into apple store and things like that

They don't actually do anything

[chilly merlin]

I need help please

Someone’s got my ip address

From me logging into their ps5 account on my pc(we was trading accounts) and after I logged in my WiFi speed dropped from 100 and gone down to 30

What should I do

[slim frost]

Try to restart everything

[chilly merlin]

My router?

[slim frost]

Yeah mostly that

[chilly merlin]

Ok thanks but what can they do with my ip

Anything serious?

[crystal roost]

I’m wondering what options you guys can recommend to protect your API key inside your app code? I read you can host the api key somewhere outside the code. How easy it is to get the api key from apps?

[slim frost]

Yeah they can scan for port's that are weak if you dont have a secure network and monitor you

[chilly merlin]

But by resetting my router it will be ok?

[slim frost]

They may loose the access for some minutes.....but they can still find the vunalabilities and still execute there plan so a good and secure connection matters 😉

[chilly merlin]

The person who hacked me said he’s going to crash my WiFi and going to make it laggy

[graceful pasture]

unplugging your router for like 10min should give it a new ip
most people get dynamic ip from their ISP's

[chilly merlin]

What if they get my port

What do I do

[strong magnet]

Pls I need new, am a beginner and I want to learn about ethical hacking, and I need a mentor to guide me through

[graceful pasture]

I dont think they have that
And a router unplug is still the best action

[chilly merlin]

Ok thanks

[chilly merlin]

Ok thanks

[graceful pasture]

#👥・new-member-guide

[chilly merlin]

I’ve turned my router off and using mobile data but it connected me back on WiFi but there was no WiFi and said to use mobile data again but connected me back to WiFi so I just turned my WiFi off on my phone now

[covert cape]

Hello all I am locked out of my old Snapchat due to being a complete idiot and forgetting to update my phone number I do not have my old mobile sim and cannot access my old snap any tips and advice on what to do

[graceful pasture]

Contact support or make a new account, if u cant recover it with email(idk if thats a option)

[covert cape]

Need to try and somehow bypass the OTP, tried emailing snap they wasn’t trying to play ball with me

[light niche]

How can I build a software that can act like ninjaone ? Please who can put me through ?

[graceful pasture]

We dont hack social media accounts here, so no need in asking that

[covert cape]

Ok fair enough

[graceful pasture]

Its against the #📜・rules
And snap TOS

[covert cape]

TOS??

[graceful pasture]

Terms of service

[covert cape]

Oh ok

Apologies

[chilly merlin]

I’ve turned my router off and using mobile data but it connected me back on WiFi but there was no WiFi and said to use mobile data again but connected me back to WiFi so I just turned my WiFi off on my phone now?

[covert cape]

I have another question in regards to IMEI number

[craggy sentinel]

Same with me I wish I can see anyone who will offer me the knowledge and give me guidelines too though Currently I am learning Networking

[graceful pasture]

I think u should be fine after plugging it back in

[light niche]

How can I build a software that can act like ninjaone ?

Please

[copper magnet]

Hii

[covert cape]

So I got stopped and searched 2 years ago for smoking a spliff, long story short the officer took a photo of the screen where you enter that code to get your IMEI number, what does a IMEI number expose

Is my privacy breached or not

[craggy sentinel]

Please too this IMEI what does it does, I heard it is used for tracking lost phone

[covert cape]

Yes I know it’s used to verify if a device is stolen and apparently can track location of device but do they have access to my calls and texts

Im not Pablo Escobar lol but just would like to keep the right of my privacy

@graceful pasture

[copper magnet]

How to upgrade level

[graceful pasture]

Uuh often they can use the imei to get a court order to figure out what sims have been used on the phone and pull historical location data and more after they get that
But unlikely unless u did something very criminal

[graceful pasture]

By chatting, each mesaage counts towards the next level

[copper magnet]

Okk

I understand

[copper magnet]

I send you friend request

I want to learn more about cyber security

I currently a fresher just experiencing this field

Want to make career in it

[graceful pasture]

Its hard, u would need to make a endpoint manager (backend) and figure out how to enroll devices into your RMM so u can manage them, if u want to implement zero trust i would recomend looking into storing some info in the tpm chip

[graceful pasture]

#👥・new-member-guide
#💕・free-resources
#👥・info

[covert cape]

Thank you for your knowledge 🫡

[copper magnet]

How to make labs like Htb

Ctf

[graceful pasture]

But u could do a lot without an imei like tracking if someone is on their phone or not using side channel attacks

And also what device type they are using

[copper magnet]

.

Help bro I got a project

[graceful pasture]

U want to make your own vulnerable vm to practice on?

[copper magnet]

No I want to host on a AWS

So any one can join through this

[graceful pasture]

That doesnt really answer my question tho
Like you want to host a vulnerable vm for you/people to practice on?

[copper magnet]

Yess brrooo

Bro how many Certification do u have in this field @graceful pasture

[graceful pasture]

U start by choosing what os the vulnerable machine should be, example for this could be windows 10 for enternal blue attacks using metasploit
Then you make it vulnerable to a specific thing, in this example a old windows 10 version that lacks the security update for eternal blue
Then you would have the save a snapshot and use that as the default image
Then on your platform u give each user x amount of time to retrieve a flag from a file on that machines user

[copper magnet]

How much experienced in this field

[graceful pasture]

A few

[light niche]

Would react and node js work best for it ?

[copper magnet]

Bro how about OSCP @graceful pasture

[graceful pasture]

For frontend yeah, everything else no, and u would to probably need cors and some other packages from npm aswell on the frontend

[graceful pasture]

I dont have OSCP, im a bit new to red team, my highest certificate in red team is eJPT

[copper magnet]

I recently got passed my CCNA certification

[graceful pasture]

GG, how long did you study for it?

[copper magnet]

I think starting my career in Network then switch to Cyber Security after 1 year experience

[copper magnet]

3 months

I am from India

[graceful pasture]

Thats actually a good plan since networks is a giant part of cyber security, maybe u could specialize in network related cybersec

[copper magnet]

@graceful pasture I was preparing for my OSCP certification

[copper magnet]

Yeh I thought so

[copper magnet]

My target is dec 2026

[cinder canopy]

how dose ATM jacking works

[prime plover]

by not doing it actually

[cinder canopy]

cool

[near merlin]

how can i get my ig follower increase and veiws too

[polar fable]

Make better content

[mellow burrow]

Hi everyone, I've just found this group and am happy to be here. Does anyone know of some good YouTubers or other people to gain skills from (gray swan and the like)? I'd like to improve my skills in this area TIA

[pine sand]

@everyone hello guys i recently got my tiktok account stolen and i have no access to it anymore i contacted the support team but no result i want to know if there is anyway to bann and delete my account keep in mind i have no access to my account no email no phone number i just wanna delete it thanks in advance

[prime plover]

nop

sadly we cant it's illegal you should report again to a different police station

#📜・rules

[fluid gulch]

No

[slate comet]

working on same ....try paydaysocial

[oblique hollow]

set up first active directory, so far i got 1 main vm for domain controller & 1 for reg user workstation connected to domain, i got a few users (employees) and 2 admins with basic file sharing. what do yall recommend i work on before vulnerabilities/security to get more used to ad

[round jolt]

i got something which works for me , i can help you out if you want

[crisp star]

I recommend that you use GOAD if you wnna learn on-prem AD testing
https://github.com/Orange-Cyberdefense/GOAD

AD is a massive topic

It get even worse when you dive in hybrid setup between on-prem and Entra ID

[orchid hatch]

Good evening everyone. Apologies for such a noob question but as a beginner. How would or what would be the first step into getting into hacking. Have always had a passion for it just never knew the right direction.

[deep topaz]

I would start with understanding Linux and command line work. Understand file structure and basic linux commands. There is a great book by MOTW call "Linux Basics for Hackers" It's probably the best start point. If you're cash strapped, most of the big names on YT have a Linux Basics. David Bombal. NetworkChuck. FreeCodeCamp. HackerSploit. You should check out #👥・new-member-guide

[oblique hollow]

goal is to eventually have mine like goad

haven’t tried using it yet tho i just read about it & saw the diagrams

[dense elk]

Good afternoon everyone... I'd like assistance with something

[neat ravine]

Does anyone know how to disable file transfer from usbs and if not how to just not allow files to be downloaded via usb on a laptop

[marble turret]

There is some error showing in Hackthebox website when I am trying to open "intro to networking" course

[carmine oracle]

@dense elk not allowed in server you will get timed out so stay safe man

[dense elk]

Yeah I was told

[tardy coral]

Are the books really that worth it bro? If so I would definitely invest.

Also is the book Extreme privacy by bazzell worth investing in if anyone knows?
thank you all for taking the time to read this

[deep topaz]

I have networking and linux for hackers from the same guy. I went front to back reading both of them (linux fist) and I came out the other end well informed. I think it's totally worth it if you can spare the cash. I learn best with books though. You may be different. The books, at worse, are a great reference to have on your shelf if you forget something.

[tardy coral]

Yoooo thank you so much I really appreciate you!!!
With both the books out of 10 how well informed were you after reading? Would definitely invest in them as i do have the cash to spare

[deep topaz]

If you're just being introduced to Networking and Linux, You'll come out the back side well informed on the basics.

In Linux for hackers, he talks you through a VM set up and you run Kali and you go through some base line tools and commands that do very well for someone just entering the game. Plus gives you the "targets" of you scans so you stay out of trouble.

[tardy coral]

Thank you so much 🙏, appreciate your time very much !!

[vapid coyote]

hello guys, i need help. long story short i was a cybersec enthusiast who lost his way. i taught myself for about 2 months and then quit because of an unfortunate circumstance and now im back a whole year later and i have 0 idea how to jump back in. im not a complete noob but im also not even a proper beginner and i dont even now where the industry stands now with all the AI bs and stuff... also i really need to start making money in at least half a year (a.k.a i can dedicate half a year to intense learning) so please can someone give me a few useful advice?

[oblique hollow]

call ur bank 😭

[worldly bane]

Can anyone help me get a good remote job?

[flint ravine]

I need help with my facebook account i csntlog in and my first email is lost

[tall osprey]

Hey everyone newbie here

[fluid gulch]

Contact support. We don’t help you with this

[fluid gulch]

#👥・new-member-guide

[fluid gulch]

Wrong server to ask

No

Contact support

[prime plover]

can anybody help me read the #📜・rules

and tell me where is the illegal activities part please

[tall osprey]

@fluid gulch thank you

[worldly bane]

Would you recommend me a server that would help

[fluid gulch]

No.

Go google, we can’t help you with this

[dense cedar]

Hi everyone, does anyone have an api I can use to scrape info off of accounts either IG, FB, Tiktok, etc.

Willing to pay with proof it works

[prime plover]

i will not deal with that either you read the #📜・rules

or i will do a report about it on my side

no read the #📜・rules

ANYBODY asking for illegal stuff here will get sanctionned we dont have to tell you to read #📜・rules 20 000 times a day thank you

[lost vapor]

@flat bluffso nice to have you come over here for the millionth time and act as if we haven't warned you like 3 times about these inquiries
if you ain't reading the rules, it'll only get worse from here on out #📜・rules

[normal juniper]

Hello

[prime plover]

for ?

look at the message up here

in big caps

[graceful pasture]

@normal juniper

[normal juniper]

I can't understand

[graceful pasture]

https://cdn.discordapp.com/attachments/1012079751445352518/1397635972996399305/GifMeme_23072025201506.gif

[prime plover]

ANYBODY asking for illegal stuff here will get sanctionned we dont have to tell you to read #📜・rules 20 000 times a day thank you

[graceful pasture]

thats the simple way to say it

[normal juniper]

Ohh what am asking for is Illegal

Or I quite can't understand

[grave blaze]

hey so i'm new to this server, i'm in college rn and i want to get into cybersecurity and hacking n all maybe even as a professional in the near future so i just wanted to ask where should i start like what should be the roadmap to become a hacker i have knowledge abt computer networking and linux to some extent so basically yeah i'm a complete beginner i've been thinking abt this if i should ask this in here or not but i finally decided to just ask

[woven anvil]

It depends on how strong your networking and linux skills are.
Hacking is just taking computer fundamentals, like networking, programming, hardware, and changing it to do what it wasn't intended to do.
So understanding the basics of them is key, and having a good understanding of at least one of them will help a lot with hacking concepts in general.
There is the #👥・new-member-guide which has a bunch of links to TryHackMe + HackTheBox, both of which are great platforms for giving a summary of the information that you are going to be trying to learn. They are however not the only resources, and once you have an idea of what you enjoy/like learning about, we can maybe point you in a better direction.

[grave blaze]

so basically i should just first get a feel of it from thm and htb and then i can come back here to get some advice if i got that right

[woven anvil]

With me not knowing what you already know, yes.

[grave blaze]

you can say i'm a complete beginner like i've used linux so i'm familiar with shell commands and that yk environment and ik very basic abt networking apart from that idk anything

hacking has been my interest since the beginning so i finally decided to start getting into it instead of just thinking abt it

[woven anvil]

If you want something to research and look into that will help with learning, and will let you use local hardware at home to do it, then look into hypervisors.
Hyper-v exists for windows, and so does virtualbox/vmware.
Linux, you have options like using Proxmox to turn a computer into a dedicated "VM Server"(Does not run a gui, you access it from a website), or just using straight KVM/Qemu with virt-manager on any linux distribution.

These will let you run virtual computers, that you can then use to test/practice what you learn about.

[grave blaze]

yeah got it i've heard abt hypervisors i used arch for a month or so

that was one hell of an experience

[normal juniper]

Thanks

[woven anvil]

Tell me about it. I used to use windows. Now that was bad.

My computer would randomly reboot for updates, randomly have issues with slowdowns or crashing with no logs to tell me what happened, start shouting onedrive stuff at me, and didn't let me move my taskbar around in windows 11. Now that is a nightmare.

[sand swallow]

Hi everyone I'm from Kenya Nairobi,I'm new here very polite person .I wanna learn about online staff ,cyber security I would like to make apps and make a living out of online thankyou.

[grave blaze]

i get it bro i totally get it i'm using windows rn and i also have mac i use that mainly most of the time windows is just for gaming n stuff

[woven anvil]

Feel free to check out our beginner resources in #👥・new-member-guide

[woven anvil]

Yeah, its sad to me that MacOS is nicer to use than windows right now. I still won't use it though 😛

[sand swallow]

@sand swallow @woven anvil 🙏🙏🙏🙏🙏

[normal juniper]

https://tenor.com/view/sixseven-six-seven-six-seve-67-gif-14143337669032958349

https://tenor.com/view/cat-kitty-kitten-angry-mad-gif-16754054616247640902

[grave blaze]

sure i just can't imagine myself shifting to linux like full time my main os i just cannot

it'll be a disaster

[woven anvil]

The trick is to have one of each, so you can compare fairly, instead of just trying to force it.

I ran a linux laptop + windows desktop for a long time.

[grave blaze]

i have arch as vm in my windows i just don't use it idk why

[woven anvil]

VMs feel choppier with graphics because they use an emulated graphics a lot of the time. There are small things to do to improve it slightly(or even ways to make it fully usable, like GPU passthrough), but it won't feel the same as using it on its own hardware without a specific setup.

You could even have an old or tiny PC at a TV be a "Media computer", and use linux on that, and use it for some light gaming and web browser

Or again, the proxmox "this is a computer that makes and runs VMs", on a dedicated machine

[grave blaze]

i was thinking of installing it on my ssd i have a ssd which i don't use

[grave blaze]

i just think vm is ok for like just getting a feel of linux n all but yeah i agree with you it feels very laggy and slow

[woven anvil]

Dual booting is annoying, because if you ever have issues, you will most likely just default to Windows every time, and then get no linux practice.

And rebooting to change is annoying to do

[grave blaze]

yeah that's gonna be annoying we'll see

ykw i'm gonna start the new member guide (red path ofc) complete that and then i'll ask what to do

at least i have a starting point now

[fierce oriole]

Hi everyone I'm from Nigeria,I'm new here very polite person .I wanna learn about online staff ,cyber security I would like to make apps and make a living out of online thankyou.

[pale vine]

Im doing a course of cybersecurity for my students in university. At the moment Im struggling with exercises that would be hard to solve if they try to use AI, any ideas?

[knotty belfry]

Hey everyone am new here. I wanna learn about cyber security. Where do i begin.

[graceful pasture]

#👥・new-member-guide

[fluid gulch]

#👥・new-member-guide

[fluid gulch]

Wdym

[covert hazel]

Can anyone help me with bug bounty? I tried using burb suit to capture requests, but the problem is I still dont get what I should be looking for. I tried searching, but I still dont get it. Any help? Thx

[granite vale]

Then dont shift to linux

[stone rune]

How to fix the urlib 13 problem

[clever trout]

How do I get into the child support system and delete my case?

[inland mango]

I was using a bloatware free version of windows lol

[strange ocean]

!rank Blackhat

[cerulean schooner]

That role is not whitelisted.

[slow dawn]

Hello

[graceful pasture]

hi

[lost vapor]

#📜・rules

[edgy crow]

Hey! you work in SOC right?

[graceful pasture]

no, im a security engineer

but i do very varied tasks

[edgy crow]

Darn. Can I still get your opinon on something?

[graceful pasture]

sure

might work with it

[edgy crow]

you alright if i DM you this github project im building. Its a little bit of a read and I know receiving links in a discord like this is strange so i dont mind dming photos of it I just want some opinons

[graceful pasture]

sure, but opinions on what exactly

[agile cosmos]

Hi there,
I know this is a hacking server....
Can I get help with anything related to server management?

[graceful pasture]

sure, i can help with that

[edgy crow]

Im building this to be more hireable I want to work in SOC and im documenting everything and lab that was made for me by a friend in the industry. As an outside member I was wondering if you could look over it and think through it like I was applying to work for you

[graceful pasture]

sure sounds fun, u can send the link in dm's as you offered

[agile cosmos]

Aight thx
Am just looking for a measurement against server nuke.....
Like is there a bot that can detect a channel deletion and stop it from happening

[graceful pasture]

like discord server managment?
servers usually dont get nuked that easily, youd have to have someone with perms to delete a channel to either go rouge or get phished/hacked
rarely happens, but if it gets reported and discord takes it down i belive you'd have to make a ticket

or someone hack into a bot that has perms to delete channels

[agile cosmos]

Yea something like that....
So my question is... Is there a bot or a tool that can detect it b4 happening and will stop it from happening

😭

[scenic agate]

Hello guys ! I am a beginner in Cybersecurity and I want to be reverse engineer , I know some programming languages like python and C I also have tried to hack a network by airmong tool and it was amazing , I have kali linux but my main OS is mint right now , the question is how I can start in reverse engineering to be professional , actually I have some intrests in PWN too 😅 I want something like roadmap and the resources

[graceful pasture]

im not an expert in reverse engineering, but id say look into learning some ghidra and get a little asm understanding

[scenic agate]

from youtube or where?

[dawn socket]

Ghidra is awesome for forensics too!

[graceful pasture]

ghidra is a free tool, id say find a program you use, like obsidian (if you use that) and reverse engineer the program, see what it does
u can also practice it on picoCTF and crackmes.one (from what i remember)

gdb pairs well with it, thats usually what i use with it, tho im not very experienced with reverse engineering

[scenic agate]

aaaahh okay , I'll take a look

[scenic agate]

do you know someone who expert in it?

[graceful pasture]

i would ask in #💬・old-gen-chat
and ask them to come to #👥・help-me

[final jolt]

Hey can someone help with something? It's about a site

[graceful pasture]

sure, what is it

what do you mean with "it's wishes a person"

[final jolt]

The site isn't in English and stuff currently

[graceful pasture]

still tho, what does the site do?

[final jolt]

@graceful pasture any idea?

[graceful pasture]

im not sure of what youre asking, so no, no ideas just yet

[final jolt]

I mean basically make a copy of a website

That I can alter

[graceful pasture]

well copy the frontend should be easy, but backend isnt possible, you would havet to make that yourself

unless they have they backend public somewhere

like github

[final jolt]

It's mainly comestic stuff no apis or databases

[final jolt]

I Checked there is isn't

[final jolt]

Could do you it or show me?

To copy the frontend

[graceful pasture]

wget --mirror \
     --convert-links \
     --adjust-extension \
     --page-requisites \
     --no-parent \
     https://example.com

[final jolt]

How i run these commands on mobile?

[graceful pasture]

on mobile??
depends on what you use as your phone
androids have termux

[final jolt]

I have termux

[final jolt]

Will i be able to edit the html files?

[graceful pasture]

that command downloads it

nano or any text editor should be able to edit it

[daring bronze]

Is there any devs

[graceful pasture]

i am

[daring bronze]

Check dm

[graceful pasture]

I dont think hacking insta ever is ethical

[fluid fern]

Please community I need your help I need to access my WhatsApp on a phone that was stolen........ I don't have access to the phone number again..... Can I do this??

[graceful pasture]

Contact support, we dont do hacking of social media and messaging platforms, if your phone is stolen file a report with the police

[wet apex]

Guys I think I clicked on a malicious link is it ok of I post it for experts to analyze whether I got hacked or something?

Like analyze the link somehow. Thankfullyni did not see the notification that something was downloaded and I was using a vpn when I clicked on the link and I exited it immediately upon realizing it could be malicious

[chilly merlin]

I want to learn how to get good at computers who can help

[void fog]

Put the link on virus total to see if malicious if not

[graceful pasture]

Like pc hardware or general IT?

[chilly merlin]

Nothing ever works normally.

[wet apex]

That is what I did and I just want to know whether something got downloaded pr it tried to get my ip address cus if something got downloaded it would be a problem

[chilly merlin]

For every

Security

It

[wet apex]

It said the link was malicious

[chilly merlin]

General know how

[graceful pasture]

#👥・new-member-guide
That should cover security

IT is very large impossible to cover all of it

[void fog]

I don't think you got hacked or something only some details of you ip address where you live

[chilly merlin]

Are links safe to click

[graceful pasture]

(And its your general location not address, like country + city, and anything downloaded would be in downloads folder)

[wet apex]

Thx for the feedback. I was concerned that at like an advanced level of hacking the hacker can download something and I might not even see the notification. But I used a vpn so hopefully that helps

[void fog]

Yeah I have done these links many times they can't hack you they just grab your Location me personally I don't care

[graceful pasture]

Well they can grab cookies sometimes

Like rce via javascript

[void fog]

No problem

[heady owl]

VPNs can get bypassed, even a dark ai can write scripts for that.

You're probably okay though.

[graceful pasture]

Well scary URI's exist, eg
ms-calculator://
Imagine seeing "This site wants to open calculator" no uri exists for cmd ofc

[void fog]

To see if you have a virus or not in your computer press win + R and type MRT

[void fog]

Didn't understand

[prime plover]

who's illegal here

[regal maple]

How can I hack Facebook account

[graceful pasture]

Websites can trigger registered URI schemes, they can launch steam, vscode, word, calculator, etc, no URI scheme exists for cmd, and i ironically said would be scary if an unknown site wants to open calculator when you visit it

[void fog]

Yeah I would be scary

[graceful pasture]

Ask and they shall come ^^^

[zealous finch]

Does anyone knows about any silent rmm

[graceful pasture]

What u mean by silent?

[graceful pasture]

#📜・rules
We dont do that here

[regal maple]

Okay

[proper cloak]

meow

[molten bluff]

hello guys

[carmine oracle]

Hey

[molten bluff]

how are you

[carmine oracle]

I’m cool u

Welcome to owlsec

[molten bluff]

thanks

[lethal verge]

Correct me if I am wrong, but is that not just a rat?

[chilly merlin]

???

What’s a rat

[oblique hollow]

remote access trojan

like they can control ur pc

[lethal verge]

I had not heard of tools like AnyDesk, or ScreenConnect refered to as RMMs which is why I was confused

But to clarify and correct by first statement to Steadyracks, RMMs can be used like a RAT if an attacker abuses it for unauthorized remote controll, but it is not automatically a RAT.

RATs are malicious by design whereas RMMs are admin tools by design.

TL:DR Some RMM use can function like RATs if abused

[woeful kestrel]

Hey how is everyone tonight?

I really need some help understanding a few things of anyone is free and has a few minutes to talk? I would really appreciate it 🙏 thank you in advance and I hope everyone is having a great evening

[trail inlet]

Hey everyone, I’m John. Currently transitioning from hospitality into cybersecurity. Enrolled in SAIT’s Cybersecurity Analyst program starting September 2026 and studying for Security+ in the meantime.
On the hands-on side I’ve built a homelab running Ubuntu Server with Pi-hole, Nextcloud, Plex and Tailscale. Recently completed a WireGuard VPN travel router on a Raspberry Pi 4 running OpenWrt. Just got access to a WatchGuard Firebox M470, Nomadix AG 5900 and Aruba 2540 managed switch to lab with.
I have the theoretical side covered with the Sybex Security+ study guide and Wiley test bank. Looking for guidance on what hands-on labs to prioritize that complement Security+ domains and help build real skills for an entry level cybersecurity role.
Any advice appreciated thanks!

[cerulean goblet]

hello john

[fair goblet]

hello everyone, before i explain things, would i get help if i want to access my Instagram account and by pass their shitty security screen, asking me to use a device i had logged in from?....cuz god help me i tried every single device i had and i'm just locked out at this point.....( i logged in from my phone but then deleted the app since i didn't want to doom scroll on it)

[meager coyote]

Okay Vela I can help you

[meager coyote]

Okay I'll guide you

[meager coyote]

Hi John, welcome—sounds like you’ve already built a really solid foundation.

Since you’re working toward Security+ and an entry-level cyber role, I’d focus your hands-on labs around the core domains while keeping them practical and repeatable:

1. Networking & Traffic Analysis (Security+ Domain: Network Security)
   Use Wireshark and tcpdump in your homelab to capture and analyze traffic. Practice identifying normal vs suspicious patterns (DNS tunneling, port scans, unusual outbound traffic). You can simulate attacks with tools like Nmap.

2. Vulnerability Management
   Set up a scanner like OpenVAS or Nessus Essentials and run scans against your lab machines. Go beyond scanning—practice interpreting results and actually remediating vulnerabilities.

3. SIEM & Log Analysis
   Deploy something like Splunk Free or ELK Stack. Forward logs from your Ubuntu server, firewall, and endpoints. Create simple alerts (e.g., failed login attempts, port scans). This is huge for entry-level SOC roles.

4. Identity & Access Management (IAM)
   Build a small directory environment (LDAP or Windows AD if possible). Practice least privilege, user roles, MFA concepts, and account auditing.
   .

Finally, document everything—GitHub or a simple blog. Being able to explain what you built, why, and what you learned is just as important as the lab itself.

You’re definitely on the right track—just focus on depth over breadth and tie each lab back to a real-world scenario.

Inbox me

[crisp star]

wtf is that ChatGPT response.

[inland hollow]

Help me become hacker

[meager coyote]

Okay I'll guide you

[tacit pecan]

Hey guys

[frozen pagoda]

Sec plus is really theoretical... You should be fine with the sybex guide it's really not that hard of an exam

[frozen pagoda]

Sussy pfp

[inland hollow]

@meager coyote Cool lets start then....

[meager coyote]

@inland hollow inbox me

[dawn socket]

@covert delta

Networking

https://m.youtube.com/watch?v=fQbBPa0ADvs&pp=0gcJCdUBo7VqN5tD

---

informatin security assurance

1. Introduction to Information Assurance and Security — The foundation topic: what cybersecurity is, what “security” means, and the main goals of protecting systems and data.
   Subtopics: confidentiality, integrity, availability (CIA), authenticity, accountability, security terminology, threats, attacks, assets, security strategy, scope of computer security, and standards.

2. Threat Intelligence and Threat Hunting Concepts — Focuses on what can go wrong, who causes it, and how defenders look for signs of malicious activity before or during an attack.
   Subtopics: threats, vulnerabilities, risk, attacks, threat agents, threat actor types, APTs, TTPs, MITRE ATT&CK, threat hunting, indicators of compromise (IoC), indicators of attack (IoA), passive vs active attacks, attack surfaces, and ways to prevent or handle threats.

3. Network and Web Security Concepts — Covers how communication over networks and the web is protected.
   Subtopics: internet security protocols and standards, MIME, S/MIME, S/MIME content types and functions, DKIM, SSL/TLS, TLS sessions and connections, TLS handshake, HTTPS, IPsec, Kerberos, and certificate authority (CA) concepts.

4. Classical Encryption Techniques — Introduces old-style ciphers so beginners can understand the basic logic behind encryption before modern algorithms.
   Subtopics: encryption vs cryptography, symmetric cryptography overview, substitution ciphers, transposition ciphers, Atbash, Polybius cipher, Caesar cipher, Scytale, Enigma, monoalphabetic substitution, multialphabet substitution, rail fence cipher, brute force, and frequency-based attacks on classical ciphers.

5. Block Cipher Encryption Techniques — Moves into modern symmetric encryption, especially how block ciphers are structured and used.
   Subtopics: stream cipher vs block cipher, cryptography basics, block cipher structure, Feistel structure, block size, key size, number of rounds, round function, DES, Triple DES, AES, and other block ciphers such as Twofish, IDEA, and Serpent.

6. Public Key Cryptography — Explains asymmetric encryption, where different keys are used for encryption and decryption, mainly to solve the key-sharing problem.
   Subtopics: limits of symmetric key distribution, public key and private key, one-way functions, public-key encryption structure, RSA, authenticity of public keys, and real uses of PKC such as SSL and secure key exchange.

7. Digital Signature and Hash Function — Covers how to prove a message really came from someone and was not altered.
   Subtopics: digital signature meaning and purpose, origin authentication, integrity, non-repudiation, signature process, signature requirements, hash functions, and signature algorithms such as DSA, RSA, and ECDSA.

8. User Authentication — Focuses on how systems verify identity before giving access.
   Subtopics: digital identity, digital authentication, identification and authentication requirements, password-based authentication, token-based authentication, biometrics, remote user authentication, multifactor authentication, assurance levels, and attacks such as replay, eavesdropping, Trojan horse, host attacks, and denial of service against authentication systems.

@covert delta

[real juniper]

I’m testing a Next.js application behind a strict WAF. I’ve found a parameter that is being reflected inside the self.__next_f.push hydration stream.

What I’ve achieved so far:
*WAF Bypass: Standard payloads (../, <script>, etc.) trigger a 403. However, I found that using certain path normalization tricks (like ./././) or full URLs bypasses the WAF and reaches the application, resulting in a 404.
*Reflection Point: My input lands in a urlParts array and a PAGE object inside the hydration blob.
*RUM Interaction: The application has an active Real User Monitoring (RUM) agent. My "malicious" URL parameters are being scraped and sent in POST requests to the RUM endpoint.
*The Struggle (The "Wall"):
*Escaping: The server is JSON-escaping my quotes. If I send %22, it reflects as " inside the __next_f.push string. This is preventing a clean breakout to inject new JSON keys.
*Normalization Confusion: When I use slashes or dots, the server-side logic splits my input into the urlParts array.

Input: ?param=part1/part2 -> Log: "urlParts":["part1","part2"]
.

My Questions:
1.Does anyone know a bypass for the __next_f.push hydration stream when the server is escaping double quotes? Is there a "secret" character (like a specific Unicode variant or a null byte) that Next.js's JSON.parse or hydration logic handles differently than the WAF?

2.Has anyone successfully used the RUM agent's scraping as a Blind XSS vector? Since the agent scrapes the URL and the page's LCP (Largest Contentful Paint) elements, can we poison the RUM report?

3.Is there a way to force a 200 OK response to reflect the urlParts array, or is that behavior usually restricted to the "Not Found" handler in Next.js?

4.Current Lead: I’m looking into whether I can use Unicode Normalization (Normalization Form C/D) to trick the WAF into seeing a safe string while the Next.js router sees a traversal or a quote.

Any ideas would be appreciated!

[dawn socket]

9. Governance and Risk Management — Covers the management and policy side of cybersecurity inside organisations.
   Subtopics: cybersecurity governance, NIST Cybersecurity Framework, strategic alignment, cybersecurity policies, ISO 27002 guidance, regulatory requirements, governance models, assignment of responsibility, and components of risk management.

@covert delta

Why is my stuff getting deleted

10. Incident Response — Teaches what an organisation should do when a security incident or breach happens.

[hallow kindle]

Read rules

[dawn socket]

Subtopics: incident vs breach, incident response basics, incident response plan,

why incident response matters, organisational roles and communication,

IR frameworks such as NIST and SANS, privacy incident response, privacy breaches, response scenarios, and lessons from real incidents.

@covert delta

Ok now it works

[hallow kindle]

Now if you meant actually and not account then check #👥・new-member-guide

[dawn socket]

It’s against the #📜・rules here for that

[stoic robin]

I'm sorry

[hallow kindle]

All good just make sure to read the rules and maybe peak at the new member guide. Maybe get into something more ethical:D

[real juniper]

help me guys i am stuck

[covert delta]

woah thanks a lot man, really appreciate all that help, i'll make sure to do my best ❤️

[tacit pecan]

u think so✌️

[main ledge]

Hello, I'm a beginner in cybersecurity and i want to get a remote or work from home job but I don't know what to do

[lyric ermine]

Hey new to OwlSec.. only did a semester in college for Information Technology and Computer Science.. honestly learned more on my own with my computer then college 🤦🏻‍♀️ Anyway right now I’m really trying to build my own black phone.. any suggestions? Also.. thinking about getting a throwaway laptop (thinkpad)
Please, let me know of any tips or recommendations! Nothing basic I really want my projects to take time and thought and when finished Make me proud 🙏🏼🙌🏼

[vast umbra]

Yo guys can someone explain with a few examples on how people make and run those insta followers selling things
Like how does the bot work and where the accounts r stored n stuff like that

[subtle kraken]

Guys I'm currently looking for a cyber security or IT support job.... Remote will be better😁

[vast umbra]

U can give it a kill switch which when used disables all features connecting ur phone to the cloud and also add a radio receiver thingy cuz yk u wont need network for it(but make it manual so u can turn it off whenever u want)

[indigo cedar]

Good question and solid income I’m guessing

[vast umbra]

Yeah the income might be solid but i wanna know how that shyt works

Like this one server i joined does this stuff and gives it out for invites but idk how it works
Ik that its a bot doing everything but how do u put so many accs in it and make it do the stuff it does

[ebon mason]

Its a bot net bro instagram bot net

[vast umbra]

Ty
I dont rlly understand but i’ll search it up

[indigo cedar]

I’m thinking some auto gen reg pw and usr in doc1, then code in doc2 main: (take new gen from doc1 and register with host IP/ domain/ create account) (in account created: follow variable-usr) Variable usr = wtv customer puts in notes at payment

[vast umbra]

But then it cant automatically go n follow

[indigo cedar]

Or a bot net wtv that is

[vast umbra]

It turned out to be a bunch of bots bieng controled from one device or sm

[indigo cedar]

Oh interesting

[ebon mason]

Yeah they make instagram accounts in mass and make them follow you through a directory

[vast umbra]

Ohh

Must have taken alot of time

To make the accounts

[indigo cedar]

Can’t u write code to make the account?

[vast umbra]

But how do they control the accounts like dont they need a base for those accounts to work on like alot pf tabs or sm

[ebon mason]

Its been around for a long time its probably completely automated now where you can just generate accounts

[vast umbra]

Need different usernames for every account and also need to save em

[vast umbra]

Oohh

[indigo cedar]

Do u know how code works?

[vast umbra]

We could use a changing integer or sm so yea ig

[vast umbra]

Ehh kinda

[indigo cedar]

Me too, idk if my brainstorm was unclear but the doc1 could generate usr and pass on loop for ev

[vast umbra]

Yep

But the pass can be the same ig

[indigo cedar]

Yeah

[vast umbra]

Unless insta detects it n gets all of em banned

[indigo cedar]

Mmmm then it would probably be banning the ip or cookies so then it’s just a network config fix

[ebon mason]

Well you gotta rotate a lot of information constantly and have it verified by the same system constantly so yeah

[indigo cedar]

Wdym?

[vast umbra]

Not the same patterns for every account

[ebon mason]

They gotta be unique not all from like the same shack

[vast umbra]

U could make up a few variables and it randomly selects one to do like
Liking a few reels and searching up bs

[cursive acorn]

Hey guys I'm new here would really wanna learn to be a hacker. Can anyone help out ?

[vast umbra]

I dont think it works like that

[indigo cedar]

Follow along

[vast umbra]

U need to know what u wanna do if i’m not wrong

[ebon mason]

Yes look at #👥・new-member-guide

[cursive acorn]

Alright thanks a lot

[indigo cedar]

Or learn the basics first to figure out what all is possible

[vast umbra]

Btw is it a good thing to start ts when ur like 10 or sm
Just for the sake of it n fun

[oak bone]

I’m new. I know a bit but I honestly wanna know new cleaner ways to lag on specific games

[indigo cedar]

Also basics help with processing and solving

[indigo cedar]

Yes! As early as possible, I wish I had started at 10

[vast umbra]

I wish all this was inbuilt in me

[oak bone]

I started at 13 using crosh on a school computer for peoples grades made 600 before I was in trouble 😭

[vast umbra]

Am 14 rn and js sitting in my room doing nthin

🥲

[indigo cedar]

That’s a great conversation starter to impress a tech firm exec

[oak bone]

You think? I have always wanted to try for it. I know a bit but I dont think no anything useful. Mainly just stuff for games or to help my collage grades rn 😭😭😭

[indigo cedar]

Get to work! Heckn so many command lines to learn

[vast umbra]

Same

Btw @ebon mason u said the insta stuff has prob automated stuff so like yk any

I wanna try on a alt

[indigo cedar]

Yes! If you can learn from your mistakes -figure of opsec and how to do everything without getting caught- then sell As to college kids you can make probably 1k per A you put in. x4? Classes a sem x20 kids x2 semesters ??? 160k a year 🤩

[oak bone]

That’s very true. I might could try it. Mainly all I have done recently though is the clumsy lag I have just improved it to be 50 times more efficient with arci and stuff connected. I got it where even I can do it and play on the same device

[indigo cedar]

What’s arci

[oak bone]

Acri is like half vpn half custom network like makes your own private server that you can operate more “freely” on while technically on a whole different network

[indigo cedar]

Ooh sounds cool I’ll check it out

[oak bone]

Definitely. It’s helpful when in a lot of stuff

[indigo cedar]

Like what?

[vast umbra]

Guys i gtg
I’ll prob be back later

Byee

👋

[oak bone]

Well mainly #1 is tracking if you do wild things. But for me it’s to not get ip banned on games and to help me lag or dupe

I could teach you to use arci even if you ever needed it’s super simple but confusing at first

[oak bone]

Bye have fun 🙂

[oak bone]

My bad it’s arcai not arci

[indigo cedar]

That’d be good

And what’s lag and dupe?

[indigo cedar]

I’m trying to get to lv5 to vc what lv are you

[oak bone]

For games lol. I have quite a bit of free time and get bored. Lag is where you lag out the game to kill them in an extremely unfair way. and dupe is where you lag the game where you literally duplicate items in game

I’m level 1 😭

[indigo cedar]

You can be lv5 in a day easy

What games do you play

[silver raft]

i need to find mediafire premuim account 1tb storage where i can bought it

[lost vapor]

what kind of help

[prime plover]

contact microsoft

[oak bone]

Dayz. Call of duty. Fallout. 7 days. Roblox. A lot tbh

[indigo cedar]

what software/os are you on

[coarse badge]

hey is there a way you can use all shopify apps for free

[fluid gulch]

No.

[lapis salmon]

I need help making a ai control my tablet

I wanna make Jarvis

[pallid locust]

Anyone with great KDE configuration? Specifically for Kwin (X11). Or any suggestions for the taskbar rice?

[lapis salmon]

Yes just hack others acc

[ripe kiln]

It's really recommendable to learn networking while learning python?????

[lapis salmon]

Yes

[ripe kiln]

Cool

[lapis salmon]

“recommendable.” It’s one of the smartest combos you can learn

[ripe kiln]

Tnx man

[lapis salmon]

Real-world power Python becomes way more useful when you understand how computers talk to each other (networks) You can build tools that actually do things not just scripts

[woven anvil]

There is no legal/ethical way without paying microsoft.

[woven anvil]

Please do not recommend this, and read our #📜・rules

[lapis salmon]

Sorry

[neat ravine]

Hello everyone does anyone know where I should report device related crimes in the uk. Software was installed on my personal device and stuff and it’s a very long story but they are trying to do it again as I bypassed it last time and I have finally had enough I have screenshots photos of everything aswell as letters from admins to staff basically admitting to it

[woven anvil]

Go to your local authorities.

[neat ravine]

Like file an online police report?

[woven anvil]

Like walk into your local police station, and let them know what happens, and start a report. They can possibly help redirect you to other sources as well to help.

Don't accept help from discord or random online chats either, because someone could see you in a vulnerable position, and try to take advantage of it in DMs.

[neat ravine]

Alr thank you

[lethal verge]

100% yes

You can learn to make python scripts for network related things

Check out python for blackhat hackers

[ripe kiln]

Where can I find this thing you said, man?

[lethal verge]

Its a book

[ripe kiln]

Alright, ima check that , tnx

[dusky spear]

Can anyone provide me best short networking playlist ?

[frozen pagoda]

https://m.youtube.com/playlist?list=PLIFyRwBY_4bRLmKfP1KnZA6rZbRHtxmXi

[dusky spear]

I want to start bug Bounty for learning so it is good for it ?

[frozen pagoda]

It's good for basic learning

[dusky spear]

Ok

[frozen pagoda]

It's like saying. Oh give me a diet plan and then expecting to become a world class body builder in 24 hours

There's a lot more to it to qualify for a bug bounty

[dusky spear]

Yes I know but the first step is networking right

[frozen pagoda]

Yes

I'd recommend playing a data centre game on console

You'll learn heaps in a fun way

[cursive breach]

Hello

I am new to the server and I just wanted to ask about how to actually "bully a bully online" as srhoe always says. I know that the best thing is to ignore them and I have done so for the past months, but its just hard for me to ket go of this, i have tried OSINT but the discord username hasnt really helped me. What should I do ? is there any way to contact srhoe ?

[sage vessel]

What's his user

[trail musk]

Hey there! I'm trying to pentest an Android app, but it only has Google login via Firebase. However, for the same company, their website had Google login, but for security it was only client-side verification......so no Firebase was used. It would just send an email ID which was interceptable, and then the server would log me in. So I was trying to find if a similar vulnerability exists in the firebase login setup.

please ping me if responding

[brisk tree]

Let me ping a goat

@woven anvil

[trail musk]

thanks

[woven anvil]

Which app?

[trail musk]

its a local app particularly from my knowns in edtech space and i thought of helping him find another bug (the first one was that website login exploit)

[woven anvil]

If you talk to your friend, ask if they are verifying the ID tokens properly with the back-end(the firebase server).
It works by the client getting an signed token from firebase, and then the server verifying the signed token. So checking to see if that is done right would be a great thing to audit.

[trail musk]

well actually he didnt code it, he had hired an offshore freelancer

so thats why i thought of helping out

also he is not my friend but we know each other

[woven anvil]

Well, someone must have the code, and someone must be fixing these things after the fact. So whoever is doing that 🙂

[trail musk]

alr i'll let him know about that

[trail musk]

so if the ids are being verified with the backend there shouldnt be any workarounds right?

[mossy birch]

Hey can someone help ne

[woven anvil]

I recommend looking into firebase works, and common ways to screw up the setup. Those are going to be the biggest attack vectors on it, besides stealing the session cookies, which you can do a few things about as well.

[graceful pasture]

poor jeevis, bro has been tech support all day

[graceful pasture]

with what?

[summer vector]

I wanna be able to predict wheel of fortune numbers from 1 to 18 plus 🏆 in pseudo randomness. Help 😁

[trail musk]

okay thanks alot!

[lost vapor]

we aren't here to do these stuff, the subject is not related to the server + it is likely to get you in trouble
best just consult with a trusted adult/whoever can handle it legally

[lost vapor]

predictions are a myth, there's no pattern to recognize in here otherwise people would get dumb rich
and the only reason other people are getting rich while telling you that there is is because people keep on buying their fake sell outs allowing them to build and sit on a throne of lies

[old horizon]

Or they do control the algorithm

Everything is rigged bro

From people in power

To less average folks

[lost vapor]

@trail muskseems like sensitive information disclosure

[trail musk]

in the message which was automatically deleted?

[lost vapor]

yes

referring to that

[trail musk]

oh

but i needed help

[lost vapor]

in what?

[trail musk]

regarding pentesting

[lost vapor]

well if the webapp has a bug bounty program you can report it as sensitive information disclosure

this can also lead to a breach of data

[trail musk]

i believe i had censored the sensitive stuff

[lost vapor]

it's pretty harmful stuff if the company is trusted to keep their user data safe

i know you have

[trail musk]

it doesnt have an official bounty program

[lost vapor]

that's what i'm saying though i am speaking about the generic idea

[trail musk]

oh i see

so the message was alright right?

[lost vapor]

when you login as the user, is the data available anywhere?

the data that you receive as the response

because said data belongs to the user you are logged into

[trail musk]

but thats a dummy account

[lost vapor]

if it isn't available anywhere in the app itself (not even in the profile settings) then it's information disclosure

oh then in that case there's nothing of value in that

the app is acting exactly as it is supposed

[trail musk]

sorry i read it wrong

yeah the data being exposed is not revealed anywhere else on the app

[lost vapor]

then you can report it as it's sensitive information exposure
best practice would be to not let the end user have that data fetched even at the login stage

[trail musk]

yup i have already reported that

but i wanted to see what else is vuln in the login workflow

maybe you could help me with that

[lost vapor]

well this would just be an analysis that i'd get nothing for

so even if i were to find it, out of logic i wouldn't share it with you if it's valuable

[trail musk]

uhm

i see

maybe atleast you could share the message which got deleted

:)

@lost vapor

[modern lake]

i needa find someone’s address of their number

[trail musk]

any particular reason?

[crisp star]

#📜・rules

[modern lake]

my bad

[trail musk]

hey, can i ask you for a small favor

[crisp star]

This better not be something about hacking someone

[graceful pasture]

i wake up to like 7 dm's asking me to hack this and that

[trail musk]

absolutely not

i just wanted to resend the message which accidently got flagged and deleted as a repetitive message by the server bot

okay ig i will have to rewrite it myself :(

hi, so i am trying to pentest login flow of an android app and here are the requests made (i have censored sensitive info though they were revealed completely in the actual requests, also reported them):
Request 1 — Mobile Number Submission

POST /erp/api/admin/loginOTP HTTP/1.1
Content-Type: application/json
Host: [TARGET-HOST]
User-Agent: okhttp/3.14.9
 
{"mobile":"83*****246"}

Response 1

HTTP/1.1 200 OK
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Set-Cookie: PHPSESSID=[REDACTED]; Max-Age=7200; path=/; HttpOnly
Upgrade: h2,h2c
Content-Type: application/json
 
{
  "status": 1,
  "msg": "Success",
  "data": {
    "userid": "8",
    "mobile": "83*****246",
    "email": "[REDACTED]",
    "firstname": "[REDACTED]",
    "lastname": ""
  }
}

---

Request 2 — OTP Verification (entered wrong otp just to see the response)

POST /erp/api/admin/loginVerificationOTP HTTP/1.1
Content-Type: application/json
Host: [TARGET-HOST]
User-Agent: okhttp/3.14.9
 
{
  "mobile": "83*****246",
  "otp": "****",
  "token": "[FCM-TOKEN]",
  "type": "2"
}

Response 2

HTTP/1.1 200 OK
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Set-Cookie: PHPSESSID=[REDACTED]; Max-Age=7200; path=/; HttpOnly
Content-Type: application/json
 
{
  "status": 0,
  "msg": "OTP does not match. 3 OTP attempts remaining."
}

i needed help in finding out whether there are some bugs/vuln which can be reported inorder to prevent malicious activities

please ping me if responding!

[cedar blaze]

try playing with token little bit more

[trail musk]

as in?

[cedar blaze]

idk how to put it into words that won't cause trouble

just... play with token a little - that's what I would do

[trail musk]

oh, maybe you could elaborate in dms (only if thats not against the rules)

[trail musk]

i see, but only if i had an idea what you meant by that 😭

[round jolt]

The API returns personally identifiable information (PII) before authentication

[young jetty]

Uhm

[cedar blaze]

added you

[elder trellis]

1. No Rate Limiting on Mobile Submission

Spam /erp/api/admin/loginOTP with same mobile → infinite OTPs generated
Test: Script 100+ POSTs in 1min, check server load/DB spam
2. Info Leak on Mobile Submit (IDOR-ish)

Response dumps userid: "8", email, name before OTP verify
Enumerate all users: POST mobiles like 83XXXXXXX, collect UIDs/emails
Python POC:
python

import requests
for i in range(100000000,100001000):
r = requests.post("https://[TARGET-HOST]/erp/api/admin/loginOTP",
json={"mobile":f"83{i}"})
if r.json()["status"] == 1:
print(f"Valid: {r.json()['data']}")
3. OTP Bruteforce (3 attempts shown)

Only 3 tries before lockout? Test if it resets after time/delays
Common 4-digit OTP → 10k possibilities, script parallel workers
Burp Intruder: §1234§ with clusters
4. Session Before Auth

PHPSESSID set on mobile submit, before OTP verify
Test session reuse across attempts
5. FCM Token Exposure

App leaks FCM token in every verify attempt
No validation apparent

[round jolt]

Before OTP verification the response should be minimal:

{
"status": 1,
"msg": "OTP sent"
}

No user metadata should be returned until authentication succeeds.

[trail musk]

oh i seee

[round jolt]

its a serious vul

im glad you showed it here

[cedar blaze]

^^

[round jolt]

we can enumerate all info from there if left unchecked

[trail musk]

well it does have server side rate limiting

[elder trellis]

Ohkk

[trail musk]

damn are you fr?

[cedar blaze]

it is yes

[trail musk]

alr

[round jolt]

also , dont expose the number of tries left

just say
"invalid otp"

it lowkey gives a safe check feature for exploit

[trail musk]

but even if its revealed it cant be brute forced right?

[trail musk]

i see

[round jolt]

it can be

even i dont know much

but im sure it can be

[trail musk]

can you please elaborate

[trail musk]

wait...what???

how

in 4 tries

[round jolt]

there are so many things out there yk , even more in the making
you can never be too safe

[trail musk]

damnn

[round jolt]

if with the skills we can run it offline

without sending the check files

and an infinite no. of tries can be made

if you put an element as 3 , we can change it

if its not present you cant

[round jolt]

text me in dms

[trail musk]

alrr

[round jolt]

i'll send you a detailed text

[safe plaza]

Hello

I've been using kali linux as my hacking vm for the past 6 years when i started hacking but i thinks its time to delete windows 10 and use a daily driver and i choosed arch so before i set it up as my os i wanna ask the guys who have experience init and whats the downside and advantages

[shy robin]

Can you teach me how to hack

[steady palm]

You can start here #👥・new-member-guide

[blazing idol]

Idk much but, in Infinix laptop drivers shut down as soon as you'll reach the GRUB window also, don't change BIOS settings otherwise pc gone.

[graceful pasture]

which room/lab is this?

[gilded lark]

Someone has hacked my instagram account iam getting mad i have used mutifactor auth but still my account goes hacked what is do i have her phone no.s and email I'd that he has changed

[midnight crater]

just be patient with the insta support if you have proof that its your account you are good

[gilded lark]

Yes I have proofs

[digital solstice]

Yes
Wait on support

[elfin obsidian]

Hi

[graceful pasture]

hello there

[elfin obsidian]

So can you help me to remove something on a page of a streaming website

[halcyon basin]

Hello guys

I need a little help here

[lost vapor]

#📜・rules #👥・info

[lost vapor]

what do you need?

[halcyon basin]

@lost vapor is it possible to track a phone by Gmail please

[crystal grotto]

Possibly not to sure

[halcyon basin]

Is there anyway

Else

[lost vapor]

why

[toxic flint]

Guys how can we access 403 forbidden sites?

[halcyon basin]

@lost vapor I need to track my friend phone ,with some encrypted documents which was stolen by a suspected theft

[lost vapor]

https://myaccount.google.com/intro/find-your-phone?hl=en-US

[toxic flint]

Can someone help me

[lost vapor]

why do you need to

[halcyon basin]

@lost vapor @lost vapor I tried this already

[lost vapor]

well nothing else to do unfortuntely

[toxic flint]

To see what’s inside that page id
Bypass paying subscription

[lost vapor]

report to police

[lost vapor]

not here #📜・rules

[toxic flint]

No it not that serious

Its a web page my friend build it now i want to show him the vulnerabilities on his site

If there is a way to access it

[ornate parcel]

Hello, guys, i am new here, i need help with bypassing FTP of my girlfriends phone

[frail flax]

[lost vapor]

firstly, ftp is a service provided through a program forwarded via port on the network
i am pretty sure your girlfriend doesn't know how to set that up let alone use an ftp server

but let's cast aside that fact, the other fact is you want to hack your girlfriend

if you feel the need to do that to her, leave her immediately

she does not deserve that level of mistrust

[ornate parcel]

its not a matter of trust, dude. this is her old phone

[naive peak]

Is there a way to install another OS on a phone wich locked the bootloader ?

[graceful pasture]

no, there isnt

[honest mango]

Hello

Can someone help me

[serene portal]

Is the thm link in the new member guide paid?

[graceful pasture]

no it is not, but some parts of thm is paid

[serene portal]

Yh cuz I noticed when I used it
So can someone else help me with a free roadmap they used please

[graceful pasture]

just do the free parts of thm that will be your roadmap

[serene portal]

Sorry for disturbing
But won’t that just make it feel like half knowledge btw

[pastel island]

Hi everyone! I am new here.

[graceful pasture]

the free parts are quite good i would say

[pastel island]

I have a question... How can I hack a locked android and iphone device with Kali Linux? I need help

[serene portal]

Ok thx I’ll do that

[serene portal]

This isn’t a black hat community buddy what are your plans after learning that?

[graceful pasture]

#📜・rules thats not something we help with

[pastel island]

@serene portal I work with police force.. CID unit. Just want to use it to help crack a case. Am a white hat hacker... I don't do malicious hacking.

@graceful pasture ok sharp

[graceful pasture]

then you should ask your co-workers, solving a police case isnt really something that discord users should have insight in

[serene portal]

Legbere na us your papa wan Dey lie for 😹

[serene portal]

A police case should be confidential

[pastel island]

Just needed help not sharing a case file. Thanks for your response @serene portal @graceful pasture

[serene portal]

You na legbere bro 😹

[steady palm]

English only server please

[serene portal]

I know but he get what I mean sorry

[graceful pasture]

ye i know, but we cant verify if youre going to use that info unethically even if you swear you dont or work somewhere where you should have access to that info, good luck

[serene portal]

It’s still English btw

[steady palm]

Realy, what English is this?

[serene portal]

It’s just pidgin English,Nigerian version

[steady palm]

Ah ok, let's just stick to regular English thanks

[serene portal]

Ok

[steady palm]

Many thanks

[pastel island]

Make me understand what you mean by that cus I can't comprehend. Thanks.

[serene portal]

lol it’s kinda like a slang

[serene portal]

Like a funny insult

Just break up already bro

You could try talking to her bro

[steady palm]

I've warned you already stop asking please.

[devout gorge]

I want to avoid lawsuit breaking up without evidence

[modern meteor]

Warn result:

Reason: stop asking for illegal acts
Moderator: @steady palm

Warned:

newton01868 [1495521360951115847]

[serene portal]

If you hack then you go to jail lol

[pastel island]

@serene portal ok

[hollow root]

Somebody help coz i wanna try out animation on phone

[dusky grove]

You from the state ?

[jade hawk]

Somebody help me, anywhere I can leanr SOC from beginner to advanced level

[edgy geyser]

I am wondering where I should start?

[oblique hollow]

#👥・new-member-guide

[oblique hollow]

i think tryhackme and htb got some good soc rooms

should be a soc analyst path on thm too

[jade hawk]

Alright thanks

[tribal spruce]

Hello what’s the best proxy to use for dating site..

[oblique hollow]

u joined the server just for that? 😂

[tribal spruce]

Haha crazy right

I joined to make some funds

[oblique hollow]

#📜・rules

[tribal spruce]

Ok

[stiff hound]

Am new here guy's, am I welcomed 😄

[twin siren]

Oops 🤐

Hi, Where can I create just a landing page website?

[woven anvil]

It very much is

[tribal spruce]

Use wix

[twin siren]

Is it a coding website?

[indigo cedar]

What’s wiz

[jade hawk]

Can anyone help me with the TCM Security Courses free

[pale bison]

Hm

How can I make money.....?

[indigo cedar]

Same

[tribal spruce]

Here to work as a ring and team..

[indigo cedar]

What’s that

[pale bison]

How

[pale bison]

....?

Can someone answer....?

[tribal spruce]

I’m bit confused why this group is set up, got the link 🔗 from IG about doing unethical hacks, but haven’t seen any play to spike that post

[indigo cedar]

Fr like help mfs exploit 😭🙄

[devout pike]

I’m trying to get into red teaming can somebody tell me the basics and put me in the right direction? I’m asking for a friend lol

[oblique hollow]

he tryn use a proxy for a dating site to make money 😂

[lethal verge]

You should start here #👥・new-member-guide

[lethal verge]

Well, we keep it ethical here (for obvious reasons), but we do guide folks the right direction to learn real exploits

[devout pike]

Or Should I start practici on Lennox first?

[fluid gulch]

#👥・new-member-guide

[devout pike]

Thanks echo 💪🏽

[lethal verge]

I am sure you meant Linux not Lennox, as Lennox is a HVAC supplier, but yeah of course you want to start with the fundamentals.

• Windows
• Linux
• Networking
• Basic Scripting

#👥・new-member-guide has a bunch good places to start at

There is also this github that has nearly 400 THM rooms that are free and are categorized for you

[indigo cedar]

I saw something else that was Lennox for comps not Linux

I don’t remember what it was tho

[oblique hollow]

kinda stuck on my active directory rn, i got the domain controller setup & another vm connected for privilege escalation etc. not sure what vulnerabilities/security or what else to add

[opal summit]

Guys is it possible to download kali linux via termux on android phone

[marble turret]

indeed

everything is possible

[cedar bolt]

Hey guys new here

[carmine oracle]

Welcome Here

[hasty prism]

Hey guys I'm in cybersecurity major and for the past 2 years I have been taken only foundational subjects I want to lean into something more specialized in cybersecurity like reverse engineering in my free time is it a good Idea and if so what basics do I need and where do I start ?

[oak oracle]

Hello come chat here #💬・old-gen-chat

[desert agate]

Hello

I'm new here

I have a account with Aaron's with a good leasing power. I need help to go by it. The account belongs to someone in the states who is willingly to work with me

[neon tinsel]

Please who knows a method I can use to create a lot of gmail accounts?

[devout pike]

Thanks 🙏 bro I’m new to this

[graceful pasture]

no thats against the #📜・rules

[chilly merlin]

yooo

[keen flower]

Hello guys am new here and already feel like am in the right zone to learn new things 👍

[chilly merlin]

can someone help me enable oem unlocing on my pixel 9 i forgot the password to it (it runs graphane btw)

[keen flower]

Hi guys I just started learning backend testing Please can anyone teach me how to create SMTP mailer and also give advice on best tools to use

[violet needle]

Hello, I have this same problem on my pixel 9

pls lmk if u find a solution

[chilly merlin]

gng

[chilly merlin]

aight random stranger

[keen flower]

Hi guys I just started learning backend testing Please can anyone teach me how to create SMTP mailer and also give advice on best tools to use 🙏

[oblique hollow]

??

[silent wigeon]

i used diskmgmt to clear my usb drive but whenever i try to delete the volume and reallocate the space/format it, it shows an error saying the system cannot find the file specified, i suspect my usb just died but idk, when i see the newly made volume it says RAW next to the drive

[young parcel]

Hi guys, is there anyone here experienced enough to guide me on whether getting the Security+ is really necessary, especially if you have a degree? Also can you combine discounts eg Get a discount via completing the Google CyberSecurity Course along with purchasing a voucher from a discounted partner?

[deep topaz]

It depends on where you want to work. There are some places that require that as a minimum entry.

Your best bet is to research the requirements of the job you're looking to get e.g. job posting.

[marble turret]

Hey are you into Exploit development?

[deep topaz]

I study hardware exploit but I'm no master coder

[marble turret]

What is hardware exploit

What do you do in that role

[deep topaz]

exploit dev, like original POC, I'm not great at

[marble turret]

Do you know Computer architecture, C, assembly?

[deep topaz]

I find mess with hardware in ways they weren't originally meant to be used. No, I some of the physical access stuff and then hand off to people far smarter than I on interpretation

[marble turret]

Do you know Computer architecture, C, assembly?

[deep topaz]

I'll be doing X86 at the end of the year but sadly I can't help with that

[marble turret]

Sensei i asked about Computer architecture, C, assembly 😭

[deep topaz]

X86 is assembly

[oblique hollow]

[flint sinew]

sup goeys

[carmine oracle]

Yoo

[clear island]

hey iam new to this could some one help me whit gmx i forgott my passcode and i cant restet it

[prime plover]

No we cant here is everything we dont do #📜・rules

[clear island]

thx sorry for asking

[prime plover]

you are welcome

however

maybe try to contact the support

on gmx and they will answer you

[clear island]

thx for the help

[prime plover]

if you need further help on more legal and technical thing ask here we will be glad to answer you ^^

[clear island]

❤️

[neat spade]

Hey guys I'm new here, and in honesty I love the concept of being a hacker and would love to be able to access sites at will
What sort of learning do I begin with please
Or if anyone is kind enough to want to teach me hacking of any sort or any field I'd appreciate that too
I'm opened to asking me questions too as to help narrow down what's good for me

[graceful pasture]

#👥・new-member-guide is kind of a self help guide, look at that first, then id gladly help you with any follow up questions

[fluid gulch]

#👥・new-member-guide

[hearty coral]

Hiii guys I have a question I am a beginner and I just finished learning html and css in the last 2 weeks now I want to learn Python and then Javascript
For python what is the best way to learn it or can u guys recommend a YouTuber who is beginner friendly

[steady palm]

Start building stuff, start with a simple Python game or app, ask AI to give you some ideas then start building

[cedar blaze]

that's great advice, my first project was an automated windows tool lol basically cleaning up temp files, cache, etc

^ this one is also good because you can expand on it more

[steady palm]

Awsome idea!😎

[cedar blaze]

you would basically learn some of the fundamentals such writing/deleting a file, path sourcing, if/else, fallbacks, loops *and error handling

thanks hotshot

[cursive condor]

yall got any good tools for kali linux

[blissful arch]

Nmap, metasploit

Wireshark

[cursive condor]

already have them theyre good

[tardy stream]

hello:/

[leaden mango]

Hey

I am a beginner

[prime plover]

can list all 900+ of them

[leaden mango]

Could u help with resources where to start

[prime plover]

#👥・new-member-guide

[leaden mango]

Where can I get bug bounty tutorial guide

[cursive condor]

tell me sum good ones

[cursive condor]

this my list rn

harvester
zphisher
DoxBeanV1
DoxBeanV2
spiderfoot
Nmap
john the ripper
WIRESHARK
Metasploit
sqlmap
SET

[prime plover]

SET is not that good
DoxBean i dont even know it

[cursive condor]

ok

could you sum to it

btw kinda new to kali linux but ik sum commands

[prime plover]

nice #👥・new-member-guide will be what to look for in this case 🙂

[cursive condor]

nice

but still coud preaty pls give me sum tools

[elfin sandal]

Funny question but i'd like to know how you guys prepare to study or what methods yall use and how effective it is working for you

[scenic agate]

I completed the first module in pre-security path in THM BUT the next module is premium and need a subscription , I thought it is free , is there another path that totally free for beginners?

[graceful pasture]

writing stuff down often helps me remember stuff
and i try to imagine im going to teach someone that topic and go through how i would teach them it, then act like that im getting taught the topic/subject and and ask questions, often fills the holes without you teaching some guy incorrect stuff and i get to fill the gaps in my knowlegde
hope it makes sense, wrote this in a hurry

[graceful pasture]

its probably just that module, try the next/different room/module

[scenic agate]

that module is Networking and I need it , also I wanted to complete the whole path to get the certification

[graceful pasture]

you dont get the certification from 100%'ing it, you have to buy a exam voucher and pass the exam to get the cert

[elfin sandal]

Do you know professor messer?

Or are not interested in the networking field

[prime plover]

you have 900+ go on thm and learn them lmao

that's why i gave you the new member guides

[cursive condor]

ok

[scenic agate]

uuuah okay I did'nt know that

[scenic agate]

nope

[elfin sandal]

Ok thanks, i know all about that what you said, it is pretty damn effective and time efficient

[prime plover]

i'll drop some template using templater on obsidian for you guys if wanted

[elfin sandal]

He has a whole playlist about some stuff you want to do

[prime plover]

that can help you write stuff down

[elfin sandal]

@scenic agate

[prime plover]

and put them in beautiful order

[scenic agate]

it's a youtube channel? or a website ?

[elfin sandal]

Youtube channel

[scenic agate]

okay I'll take a look

thanks

[elfin sandal]

What is it?

[prime plover]

templater is a template creator for markdown file used in obsidian

it makes you writing more easy you just type the stuff you want and you have a md popping up

[vivid kite]

I just completed Offensive Security Intro room on TryHackMe! Hack your first website (legally in a safe environment) and experience an ethical hacker's job. https://tryhackme.com/room/offensivesecurityintrokKx12l39

[graceful pasture]

we dont do that here, sorry its against the #📜・rules

[vivid kite]

Ohhh okay, can I be enlightened on what stuff that goes around here ?

I'm interested in hacking actually but I don't really know how to go about it

[prime plover]

ethical hacking learning

[languid yew]

what else

[vivid kite]

well I just hope to learn more.
I'm actually in anything that has to do with hacking, most especially the financial aspect!🤤

[prime plover]

that's all

sharing too

and that's all

[prime plover]

if it's your only motive you will actually not get far because there is a lot and a lot more than money

[queen garnet]

Yesterday when i was playing minecraft i fell for a scam that involved me typing in my mc user, email, and verification code on a discord server and that made him get access to my entire microsoft account + minecraft account and he changed my email, password, 2FA ect.

Does anyone know what i can do about this and how to get my account back. As far as i know there isn’t much i can do since microsoft support rarely ever helps from what i have heard and i wanted to know if i could like kind of hack my account back or something.
I will appreciate any kind of help and i can tell you further informations

[prime plover]

contact microsoft support

[languid yew]

please whats more than money?

[prime plover]

the knowledge and skill you can acquire

it's not only about money

[queen garnet]

Alright i will try doing that, but from what ive heard is that in 99% of the cases microsoft doesnt do anything about it since they get paid the same regardless of their service

[prime plover]

GDPR

[languid yew]

knowledege and skill without money is suffering bro

[prime plover]

nop

it's a weapon

[languid yew]

Weapon to do what?

[heady geyser]

Hey everyone, I hope you’re all doing well. I have a quick question and hope I’m not bothering or interrupting anyone. I’m trying to build a wordlist and want to include 9Ghz data in it. Could someone please guide me on how to do this or share the relevant information?

[prime plover]

and how do you plan to make money if you dont have skills and knowledge

[prime plover]

nop sorry

#📜・rules

[prime plover]

have the knowledge of 1% of people on earth

if you build skill and knowledge that's how you create a weapon and using that weapon for the good of everyone is how you make money

but you dont only do money at that point

you bring knowledge and inspiration

[heady geyser]

Lain you guide me in any derict ion or something please

[queen garnet]

okayy are you sure that it will help me or make my case sound more serious or something cuz its the first time ive heard about GDPR and i have done some research right now on that but idk what to do with it

[prime plover]

i cant because leaked data cannot be used for ethical thing

[prime plover]

it's your digital right

think of it as human right

[heady geyser]

OK free legal way to creat wordlist

???

[vivid kite]

Then what are you teaching us ?
Yeah I need the knowledge because it's the weapon to whatever I wanna do.

[queen garnet]

Alright i understand

[prime plover]

there is not actually

[heady geyser]

Are you a bot?

[prime plover]

no

i am a staff member

[heady geyser]

👍 OK cool was just checking

[prime plover]

i mean looking at my bio could give you hints

[prime plover]

ethical hacking

that's all

[torpid jungle]

Ahahah.

“How can I rob a bank and escape?”

“Not legal.”

“Okay, how can I escape legally and freely?”

[cedar blaze]

in germany it's legal to escape

🤣

human instinct they call it if im not mistaken

[prime plover]

yeah somewhat i think of that

x)

[vivid kite]

Then how do we get started Boss?

[graceful pasture]

#👥・new-member-guide

[prime plover]

#👥・new-member-guide

#💕・free-resources

[eternal scarab]

I need codes to hack wifis 😂

[graceful pasture]

What?
U mean tools or scrips? We dont do that here #📜・rules

[eternal scarab]

My bad

[kindred quarry]

Anyone have any experience with hardening of sharepoint or common vunarabilities?

[graceful pasture]

Work with it daily 😭

Well not daily

Each work day

What about it?

[kindred quarry]

Got a sharepoint server i know nothing about, just got tasked with basic hardening. I have hardened the windows OS part, but i have no experience with sharepoint 😅

[graceful pasture]

Keep it ethical tho

[kindred quarry]

Its just basic hardening i need help with

[graceful pasture]

Was going to predict it, all good

[kindred quarry]

any tips or trick u have?

[graceful pasture]

Sharepoint is a bit hard to harden against cve's like only one i know of is disable the web parts, so if anyone uploads html with embeded js it wont run when opened, i got other tips like least privilegde and mfa, but i assume u dont want that

[kindred quarry]

So harden OS and disabeling web is basicly all i can do?

main goal is to shrink the attack surface before pen testing next week

[gritty shell]

Hey guys, I'm wondering what kinds of use-cases there are for OSINT for a normal person? Like, if I'm not using it for a job, what kinds of things can I use OSINT for? I think I want to learn a bit of it. Maybe not full-on studying for it, but just getting into it a bit. I find it interesting.

[flint goblet]

Hello guys, I need help with some questions about cybersecurity field and excuse me if my questions reflect some unawareness, I'm entering this field without a programming background so i have learnt C++ as my first programming language, should i study networking now? or OOP, data structure and algorithms. and some another languages like JavaScript with HTML and CSS. or this fundamentals will coexist in cybersecurity certificates already? what should I actually study thoroughly before starting anything related to cybersecurity? Thank you in advance.

[graceful pasture]

sharepoint is quite niche for vulnerabilities, i recommend maybe asking an LLM, i said what i know atleast

[fresh sigil]

Someone has my pictures & has been threatening me alot these days as i gave him my old pc. Please how can i crash the pc or infect it to disable.

[torpid jungle]

Your best bet is to go to the police.

[torpid jungle]

I think the only legitimate use cases are to verify people’s identities when you’re about to enter a commercial relationship with them.

Like when you’re trying to buy something off of strangers online, or when you’re going to hire someone, etc.

Other than that, a normal person probably doesn’t have any use for it.

[fresh sigil]

The guy doesn't stay in the same state with me tho

[candid iris]

HEllo guys, I need license key for FL studio pls, ask can't afford any at the moment 🙏

[torpid jungle]

Then you’re out of options, sorry.

[pliant dagger]

when you're looking at a new target,what's your mental checklist before you even touch a tool

[clever ferry]

Hello

[kindred jungle]

Guys I want to be a cyber security expert and I'm still a beginner I know nothing about cyber security so where should I start some people's say I should start with networking the other say I should just start with Kali Linux or Ubuntu

Also I know HTML CSS and python

[mossy solstice]

Good afternoon can someone help me get a ssn for myself it’s hard for me to join affiliate programs without one and I’m not a citizen of America

[mossy solstice]

Start
With try hack me online with a computer

[kindred jungle]

Ok cool thanks

[vast grail]

Can someone help or teach me how to hack my neighbors WiFi?

[crude wraith]

I do apologize if this seems like its not really careers related but I can't help but wonder...

If you were to restart your brain and learn programming again

what language would you recommend to start learning from?

By programming language I really mean something that can help kickstart someone career into programming or general IT.

Personally trying to learn to go from general IT to cloud infrastructure

[mortal sleet]

Hello guys,I'm new here also need you guys help I'm into cyber security

[final wolf]

i need help in this ci/cd project anybody down to help please message

[soft stump]

Switched OS from Ubuntu to fedora KDE on my notebook now I have issues when trying to stream a show. I experience lags when starting and application sometimes, can someone help?

[teal rover]

what do you need help with?

[graceful pasture]

my recomendation is maybe debug this with an LLM they are good at giving you the correct drivers, usually that's been the issue for me 100% of the time

[mortal sleet]

For now I'm not with my laptop but I need a site which can teach me how to do cyber security and I have try hack me but It boring in answering questions

[graceful pasture]

picoCTF is less theoretical, but you kinda need to know a little to get the flags

[mortal sleet]

Okay thanks bro

[prime plover]

Police

[tiny fossil]

That's call extortion. You need to go to the police.

[burnt marlin]

Hey guys can anyone recommend a legit discord community focused on freelancing and how to make money online?

[tiny fossil]

Hey, what do you need exaclty?

[tiny fossil]

No

[tiny fossil]

Mental checklist is different based on the target, and is also a personal approach. People likes Passive Recon, then Active Recon.

[spring ocean]

guys what do you say about studying about web exploitation from 'The Web application: hackers handbook', it it worth studying from it in 2026, if not which one do you guys suggest as the best resource to study web exploitation

[torpid jungle]

I’d start with a Lisp or with Ruby

[soft stump]

It really was a driver issue, it used the wrong antenna in my notebook. I fixed it with an LLM, thanks again for the help

[graceful pasture]

youre welcome?
happy that you fixed it

[crude wraith]

Thank you!

[granite vale]

Whats your hardware specifications?

[granite vale]

Contact law enforcement immediately

[desert agate]

??

[granite burrow]

hello I'm new here and dont know much about hacking but i want to learn starting from my proxy which is beter decodo or 9proxy and how do i set it up?

[light horizon]

Hello im new here i study blue side i need help building projes tools to use etc and be better soc analyst

[scarlet parrot]

Hey y'all, please I need some guidance, I've been learning Python for some time now and I need help with applying it for some cybersecurity (Hacking) for me to be able to know how to scan vulnerabilities and solve then also, know how to break into them.
Please if anyone can guide me I'll appreciate

[tawny swift]

start with scripting stuff, like port scanning working with requests and parsing data