👥・help-me

[peak onyx]

Btw you said emulator should work right?

[royal valley]

I would do as nurse said and root a spare phone

[peak onyx]

Okay thank you!

[royal valley]

You could try an emulator if you wanted as I thought it would work the same, but maybe its better to use actual hardware.

[royal valley]

Also looking at portswigger official docs will help

There is a section in the docs specifically for testing mobile applications

[peak onyx]

I guess I will try the emulator first because I dont think have a phone to root rn

[peak onyx]

I will check it out

[royal valley]

/burp/documentation/desktop/mobile

thats where it is

on portswigger

Always check docs 😄

[peak onyx]

But most of the docs I have seen online it should work from what I did

[royal valley]

Follow the portswigger doc

Just start with emulator and push the burp cert to system store and follow the portswigger docs

I think that will work

[peak onyx]

Yeah I see in docs it says the root is required and the emulator can be used

It should work

[royal valley]

RTFM

Respectfully

😆

[royal valley]

If you are going to continue down the road of pentesting you really should get a some rooted/jailbroken phones and tablets etc

[peak onyx]

Really? I didnt need it untill now, is it required for something else aswell?

[royal valley]

If you are doing app pentesting its def useful at least one rooted android phone or something

I would say its essential to have a rooted android device. 😄

[peak onyx]

Alright i will look into it

[haughty sable]

Hello, I was wondering if anyone could point me in the direction of some beginner cybersec projects or ways to gain experience for building my resume

For context, im a first year Computer Science student with no professional work experience yet, so I’m trying to build my skills to help me land internships or some entry level opportunities.
I’m currently studying for the Comptia Security+ and so far I mainly have a few simple Python CLI projects and some homelabbing experience I have documented on github.

Any advice, resources, or project ideas would be greatly appreciated. Thanks!

[royal valley]

I would talk with your uni and see if you can get into the student work program or something in their it/soc department. I personally would get something like CCNA before the security plus or maybe even a basic a+ so it makes it easier to get those entry level help desk internships.

A+ CCNA Sec+ would probably be the optimal path honestly in my opinion.

Especially since you are a first year. You have plenty of time and depending on where you attend the certs are heavily discounted while in uni

An important thing to remember is cybersecurity jobs are normally not entry level jobs. So working in help desk or other stuff will give you a strong baseline

That being said it's not impossible to go straight to a soc

[haughty sable]

thank you i'll definitely look into this. This path seems to make much more sense than what I was going to do

Should I be working or building anything else while I study for those certs, or should I mainly just focus on getting them one at a time?

You mentioned building IT skills, so maybe some projects along those lines?
I am pretty big on practical learning lol

[royal valley]

You can do other stuff just don't get too scattered. Study and find some practical projects to build that shows an example of what you studied.

Create different home lab projects, see if there are any companies in your area that get rid of e waste and try to repair some laptops to give to students in need .

Be creative there are many different ways to document your learning

When you have a decent grasp on basics of IT you can even look for places to volunteer to teach people or solve issues. Be careful and don't break people's things 😂. Troubleshoot printers, update drivers, change out PSU/ram etc whatever you have gotten competent/comfortable with.

You may have other ideas and that's great just kinda think about it and ask your instructors as well.

[haughty sable]

Yeah I guess my thought process was too one dimensional about building skills lol

I appreciate the help, I was all over the place. I'll look into everything you've mentioned.

[astral current]

Yo guys

Can u see the Spotify followers somehow if they’re hidden?

[royal valley]

You usually cant see hidden things ......because hidden, but anything is possible

[astral current]

Possible like how

[royal valley]

Sory that is far as I go see #📜・rules 😄

[astral current]

Can y help me out with that

[royal valley]

If its against the rules nobody can help you pal sorry.

[astral current]

Ohh is it

[royal valley]

.....

I linked you the rules so you can read them 😄

[astral current]

Aight

[steady maple]

guys i want to start cybersec can you please guide me from basic

[royal valley]

#👥・new-member-guide #📜・rules #💕・free-resources here are some things to check out 😁.

Welcome to the server:👋 🤠

[fading wren]

Haha hi baby owls.

[ember cobalt]

sick ass display name foo

ooh nvm i thought it was "skidnapper"

probs a more witty choice

how's business?

[celest crescent]

Guys I want to learn hacking please guide me

[ember cobalt]

#👥・new-member-guide #💕・free-resources

there you go. guided.

[lost vapor]

no, we're not doing that #📜・rules

[formal rampart]

anyone who knows practical labs for android penetration testing

[brisk spoke]

can someone explain how dose a basic wifi attack works and what the minimum setup required?

[prime plover]

External wifi card with a secondary mode wordlist and a lot of luck

[urban barn]

i keep seeing these videos pop up on my social media of people making these custom boxes with antennas for "war driving" can someone explain what they are doing. are they just driving around collecting peoples wifi names?

[potent ether]

I’m trying to install something I keep getting this error message

A referral was returned from the server.

[pale hull]

Well pretty much yeah, wardriving is mainly driving around detecting and mapping wireless networks/APs. usually collecting stuff like ssid signal strength, encryption type, channels, sometimes GPS coords etc

[brisk spoke]

It's always about luck at the end isn't it ?

[slate palm]

Yo guys , I need help to bypass my AI ethics to develop a program for my flipper and I’m trying to develop a jammer app for educational purposes but it doesn’t seem to accept my request

I’m using cursor

[lost vapor]

that's because owning a jamming device/app is illegal in most countries

and most likely in your country as well

[slate palm]

Makes sense

But is there a way to bypass the AI?

[lost vapor]

it's called jailbreak and you will have to do research regarding that

as every ai is different

[slate palm]

Okay , could you give me a resource for that?

If you have one

[lost vapor]

i have no resources for jailbreaks

[slate palm]

Okay

[leaden oak]

hey guys can someone help me out pls

[proper cloak]

https://cdn.discordapp.com/attachments/1110792603030540288/1490703345034334339/attachment-4.gif

[carmine oracle]

Hmm on what bd welcome to owlsec

[grave root]

hey I need help

I recently downloaded tor in pendrive

how to scroll dark site

[leaden oak]

thanks

[grave root]

hey can u help me

in tor

[leaden oak]

bro im just like you i dont anything

[grave root]

me to

[leaden oak]

ask for big people

[grave root]

yep let me try

[leaden oak]

i have send to you friend res

[grave root]

ohh I received

[grave root]

thanks man

[leaden oak]

accept mate

[craggy mason]

Don't do anything stupid on there or find for something stupid (obviously illegal)

[crisp star]

You can scroll using the mouse wheel.

[royal valley]

And using dark theme

[urban barn]

This might be a dumb question. Idk if I’ll even word it correctly but when you scan a wireless network in a business for example and your run something like nmap to scan devices for access I’ve noticed there always a good amount of security. If you were to scan a network that was hardwired through say an Ethernet port in the wall. Do they usually have the same level of security as a wireless network? Or is the fact that it’s all hardwired in the building a sense of security in itself. I didnt know if the fact that you need to get inside the building and access the Ethernet port was a big part of the security and if you were able to do that than you’d have an easier time getting access to the network. I know it’s different in every situation but I was just curious.

[royal valley]

Its time for you to take a step back and start from the basics of networking. Also do not probe networks without permission.....and without experience/knowledge. Do whatever you want on your own network 🙂

In most places it is illegal to do any enumeration or anything other than basic agreed upon use cases aka browsing streaming or whatever without explicit permission and rules of engagement.

[urban barn]

Oh yes I know I still have a lottttt to learn lol and no I have no intention of messing with anybodys network. I just happen to be learning about it right now and i was just checking out some gear and one of them was for plugging into ethernet to scan the LAN and for some reason that question just came into my head.

[royal valley]

Start at the basics and move from there #👥・new-member-guide . Check out free content from portswigger Cisco Google thm etc lots of #💕・free-resources out there

[ember cobalt]

WEP or WPA?

[ember cobalt]

tor works by .onion sites. all the addresses are in long strings like hashes which aren't very human readable.

if you do a google search you'll find some .onion directories. you can start there.

use caution.

[ember cobalt]

network security operates on both the wired and wireless levels. yes, ususally there's more security on the wireless side since it can be accessed from outside the premise.

most of the network security resides on the network equipment themselves. intrusion and enumeration attempts can be caught on both wired and wireless. most wired security controls will also effect wireless traffic. wireless securiy controls don't effect the wired network so much.

i also would like to point out that if we always ask question and expect answers, we don't learn the critical skill of researching. this is a non-negotiable skill if you want to grow in cybersecurity.

AI made this stupid easy.

[royal valley]

skill of research aaaaaaandddd critical thinking aaaaaaandddd curiosity 🙂

A tip for anyone scrolling by is go to coursera and take the course learning how to learn. Learning is a skill and an important one in the field of cybersecurity.

[broken moat]

Hi there, im Blaq, a student of TCM Academy and ive been trying to gain root with metasploit on kioptrix level 1. both victim and attacker machine are all same network. reading from similar ip address. but each time i try to exploit all i get is "IP:139 - Trying return address 0xbffffdfc...
[*] IP:139 - Trying return address 0xbffffcfc... in a loop with no results. i need assistance please

[wet apex]

hey guys how do you add the 75Hard role?

[graceful pasture]

I think its by reacting to #📢・announcement message

And the mods will give you the role, takes time, a lot of people, and a lot of reactions

If not, then idk, staff can correct me here

[royal valley]

Yeah you just react to the owls post about it there from what i saw i think you right

[fading wren]

I’m at the wrong table and triads are threatening to stab me if I don’t take the risk and steal from the one who prints my money.

[ember cobalt]

react to the post. it states that in the post. read it!

[ember cobalt]

larper extrordinaire

[brisk spoke]

I guess WPA since it's the standard

[royal valley]

@crisp ember https://www.nist.gov/itl/applied-cybersecurity/nice/resources/online-learning-content

[main birch]

Which mod is on rn

[ember cobalt]

capture handshakes, run rainbow tables against the captured password hash. this only works against personal WPA, not enterprise.

[ember cobalt]

i recently got a PR merged in their MacOS CIS

is this appropriate for this channel?

full stack vibe coder wanting to architect critical infra? v intredasting...

[royal valley]

Read the #📜・rules no solicitation/self promotion

[main birch]

No self pro mos allowed

[valid nimbus]

ok so i know no self promos, but what if someone specifically ask for help on something?

[ember cobalt]

help != self promotion

[digital solstice]

What's that?

[main birch]

Giving extra info about like what skill level you’re at, etc is fine bc it adds context to whatever question you’re asking

At least that’s my understanding

[vague egret]

yo everyone
Most people only learn how to use technology.
I’m trying to understand how it actually works beneath the surface.

I’m currently looking to connect with serious builders, researchers, engineers, and technically experienced people involved in areas such as:

• Artificial Intelligence & LLM architecture
• Prompt engineering & context engineering
• AI security, red teaming & adversarial research
• Prompt injection, memory poisoning & RAG security
• Model behavior analysis & jailbreak research
• Reverse engineering & software internals
• Cybersecurity, attack/defense methodologies & pentesting
• System architecture & modern infrastructure

I’m not interested in recycled tutorials, surface-level hype, or “copy/paste experts.”
I’m interested in fundamentals, systems thinking, deep technical understanding, and the reasoning behind how things actually operate.

My goal is to learn from people who genuinely know their craft — individuals willing to share insight, challenge perspectives, recommend valuable resources, or help break down complex concepts at a deeper level.

If you’re experienced in these spaces, building interesting things, conducting research, or part of communities focused on real technical growth and high-level discussions, feel free to reach out or point me in the right direction.

Always open to learning from serious minds. 👨‍💻

[ember cobalt]

HTB COAE academy path

[steady palm]

That would be this whole community.We are all here to learn and grow

[tepid vale]

Hii

Can anyone share me the link to the latest cracked version of burpsuit pro For windows

[steady palm]

Nope, we dont share those here.

Check the #📜・rules

[royal valley]

Idk if you would even use it anyway but still..... illegal :p. Use the free one

[gaunt eagle]

Hello

I want to learn soc and wants to get the job
any help???

[fast night]

So guys i have this question that i could not figure it out

Soc people ,how to make sure what u are invistigating is a real TP ,like ofc u saw weird behaviours that it is hard to know if it is smart attacker or a dumb user/tool behavior even after reading every log of that user ,so do u have something that help u out in these situation

[upper loom]

Hey guys wassup. Im new to bug bounty hunting, I have worked a bit and done some machines in HTB but I want to partner with someone so maybe they can help me to get better or maybe we can learn together idk. Is anyone interested here or do you know a channel that I can find someone.

[crisp star]

Okay where should I start...
For phishing alert it's pretty easy to find out if it's a TP or not. So I skip this one.

Now, let me introduce you to the world of XDRs. If you use XDR as a security solution, it is up to this software to detect suspicious activity.

Compared to SIEMS who just collect all logs, you have to build detections around of these logs.

In an XDR you don't have to read a lot of logs. But a lot of these detections from an XDR are black box. So you never know what the trigger is.

Also some XDR detections don't provide a lot of information and you have to dig deeper. I'm looking at you Microsoft

[wet apex]

Hey guys, I am pretty new to discord so how do I know whether or not I was given a certain role like Hard75?

[fast night]

Click ur profile and see if u have it

Btw u have it

[devout linden]

Also some alerting in SIEMS need tuning and adjusting to gather the correct connector data.

[wet apex]

Thanks man. Now I am just trying to look for anything related to Hard75 in my profile

[crisp star]

An XDR is behavioural driven most of the time. So if any application is accessing something like a password from a browser it's going to trigger an alarm. Doesn't matter which process it was or from where the process is being executed.

You can do this with a SIEM. But you need to build the detection and tune it.

[fast night]

Mm ok man thanks ,that is helpful

[crisp star]

Pick your poison. Either let an XDR handle it, where you are restricted in modifying the detection, or pick a SIEM and build everything on your own.

Also a SIEM can get very expensive depending how much logs it has to collect and process

[fast night]

Well i am trying to devlope my invistigation skills for now before depending on xdr ,so yeah ,ig i will try first the seim and if i got stuck will try other options

[devout linden]

This is going to sound weird but try learning how to read windows event logs and see how they corralate to the issue youre having. Example program tries to print but failes. Look in the windows event logs and see if you can track it down. Youll understand a good bit after a LOT of googling what each process/driver/regestry mentioned is and that will show you how to tie in the different sectors in winows event viewer. Thats almost like tying SIEM, XDR together. IDK what @crisp star thinks of that but that helped a ton before i was in the SOC. Now after that you need to move the idea from printers and hw issues to understaning the behaviors/triggers there

[fast night]

Yeah i heard that alot ngl ,ig i should focuse deeply on that

[crisp star]

Tbf as long you understand the detection logic and also the alert, it's ez to investigate.

[devout linden]

SOC is not jsut a TP, FP wolrd. Its having to understand OS, user behavior, the ecosystems that you live in (each company is different), the users (hr, tech, admin assistant, students, etc) how will they use this system and what is the baseline of normal. What programs are allowed, what schedules do the people have, How does web traffic work, what are the company SOPs, how do threatactors think, how does mitre and killchain play into this... and the list keeps going on.
TBH alot just want TP,FP and button pushing vs actuall operations executors that want to understand why and how to keep things safe

[crisp star]

Except you get an alert related to NTLM authentication in Defender XDR. That's where every SOC analyst fail 😌

[devout linden]

not the NTLM auth

[crisp star]

NTLM relay attack

[lost vapor]

#👥・new-member-guide

[real cypress]

hello, need some help here i my browser session got stolen and i quickly reset my passwords and deleted all the browser cookies

would i need to reset my pc?

[hard moat]

I am new here can someone enlighten me please

[drifting flame]

Hello I'm new here guys

[gaunt eagle]

Thanks brother

[lost vapor]

#👥・new-member-guide

[fathom laurel]

depends. did you run a full system scan? if there’s malware that did the token theft then you got to reset to a clean state

otherwise you don’t need to

[granite bough]

I’m new here. Does anyone know any free emailosint that I can use to remember my old password?

[wet apex]

Hey guys. I was told I have the 75Hard role but I am new to discord so where can I see that?

[devout linden]

click your profile picture and see what roles you have in here

We dont help with that here read the #📜・rules

[vivid yoke]

yo guys i have a question

if i bought a game of epic games i have accessiblity on it but since i bought it the lock that would be on a rented game would be removed

so the question is could i transfer or copy the files to my friends pc so he could have the game

[royal valley]

🩴

[granite vale]

You would need to log in on that pc too

[graceful pasture]

No way

That pfp

Reminds me of @proper cloak wanting to make a startup

[proper cloak]

that was a joke

butterfly started

[real cypress]

yoo i thought my session was only thing stolen but this account suddenly logged me out and suddenly started sending those mr beast scams to my friends, also it said a user logged into my acc from london fortunately i got my account back and changed all my passwords

so am i cooked chat?

[gilded birch]

Hey guya

Whats that challange?

I didn't understand

[solid cove]

Nahhh

[real cypress]

i am doing a full scan, any solutions on what i should do next?

[ocean relic]

you should first identify how your session cookie was stolen, they usually get stolen with a phishing link, when you know logging into a a fake site, it can also happen from a malicious browser extension, not common but not unlikely sessions token theft via public Wi-Fi man in the middle attack. "resetting passwords and deleting cookies is enough && REMEMBER TO STOP DOWNLOADING CRACK SOFTWARES, MODS FOR GAMES, OR WHATEVER WTF YOU ARE DOWNLOADING NEED TO STOP'"

[royal valley]

Change all your passwords enable two factor authentication. Do this from an unaffected device.

[real cypress]

i had 2fa already enabled

and yes i did download some mods recently like a week ago

[ocean relic]

downloading crack shit, the easies way sell your souls guys

[royal valley]

Unplug the affected device from the Internet. Do a full reset. Scan materials that you would like to return to your device in a sandbox. Do not restore from backup

Do not use sketchy stuff on a device that has personal information or accounts

Or at least use a VM that is secured

[ocean relic]

some of the shit can spread on the the local network

[royal valley]

Separate your personal information from any possible infection as best you can.

[royal valley]

Research mod online or look at code yourself. Determine if that was vector off attack

[real cypress]

i am running mrt rn it detected two infected files

[vivid yoke]

so many that it would need the login with the epic acc

[royal valley]

Also think of anytime you may have entered your information recently or maybe a friend knows your password or you use same password on multiple accounts

[real cypress]

ohk thanks for the help

[ocean relic]

@sai try being more careful next time some things tend to be more malicious

[solid cove]

Yooo, someone point me to a free resource to learn RE

[real cypress]

they also tried to change my roblox password i think i might be genuinely cooked

[ocean relic]

you said tried but did they was able to do it??

i recommend you to update your password and use a new strong password

[real cypress]

nope

[ocean relic]

FLARE Learning Hub
https://www.mandiant[.]com/resources/flare-online-training-hub

Reverse Engineering for Everyone
https://github[.]com/mytechnotalent/Reverse-Engineering

Z0FCourse
https://github[.]com/0xZ0F/Z0FCourse_Reverse_Engineering

Corelan Research Team
https://www.corelan[.]be/index.php/articles/

[real cypress]

i did and either somehow they got my gmail password cause both dc and roblox was on that

also insta too

[ocean relic]

pwn.college
https://pwn[.]college
PicoCTF
https://picoctf[.]org
pwnable.kr
https://pwnable[.]kr
Crackmes.one
https://crackmes[.]one
Ghidra
https://ghidra-sre[.]org
IDA Free
https://hex-rays[.]com/ida-free
x64dbg
https://x64dbg[.]com
REMnux
https://remnux[.]org

[ocean relic]

Radare2
https://rada[.]re/n
Reverse Engineering for Beginners (book)
https://beginners[.]re
Reversing Bits Cheatsheets
https://github[.]com/reversinghub/reversing-bits-cheatsheets
Anuj Soni (YouTube)
https://youtube[.]com/@AnujSoni
John Hammond (YouTube)

[ocean relic]

https://youtube[.]com/c/JohnHammond010
OALabs (YouTube)
https://youtube[.]com/c/OALabs
LiveOverflow (YouTube)
https://youtube[.]com/c/LiveOverflow
Awesome-Reversing (curated list)
https://github[.]com/tylerha97/awesome-reversing
Reverse Engineering Stack Exchange
https://reverseengineering.stackexchange[.]com

[royal valley]

you could have just linked to the place recommending all that

Don't spam the chat

If it's your personal list then throw it in a GitHub throwaway account or something 😂 to post it.

[ocean relic]

someone of this people move fast because they use automation to test credentials, try calling google and see if they give access to your account again also put 2fa

[night creek]

@ocean relic like your work 🤗

[ocean relic]

i really should do that i just be kinda busy must of the time

[real cypress]

yep so cooked my minecraft also gone

[ocean relic]

thanks man it means a lot bro

[ocean relic]

alright think and relax just analyze where else in your personal life do you use the same password and try to change it before they do any personal of things

[royal valley]

Burn it all change everything 😂

[ocean relic]

well good way to put it we all know he gonna recycle the same password for a few years again

[solid cove]

Bro really gave me everything he knows regarding RE on the internet...
Thanks man, great help!!

[jovial scarab]

Let me cook rq

[royal valley]

Put those in #👥・github-and-projects thanks doesn't belong here :p

[jovial scarab]

Whatever u say boss i got u

I dont got perm to text there

[cedar canyon]

Hii

[ocean relic]

I should've been here contributing to the community seven years ago but that I just been here doing me watching and studying

well I think I have something approved to myself so I'm here to help you all

[royal valley]

Nobody do anything with this 😆

[cedar canyon]

Okkk I'll see something useful and I'll try creating one

[ocean relic]

later guys join

[forest quail]

Does anyone know where to submit the documentations for the challenge (75 hard:road to defcon)

Been workingon how to start and now idk where to submit all of it tomorrow onwards

[main birch]

You submit in #1507843213011058819 , more specific rules on the submission is in #💬・chat-75days . The threads haven’t opened up yet though so you can’t submit yet

[forest quail]

Thanks miss!

[main birch]

Bro is fine lol

[forest quail]

Didn't see you were a girl and been calling you bro since morning😅
It feels strange to call a girl bro

[main birch]

Idk to me it’s gender neutral, but I get some people are weird about it

[forest quail]

Gender neutral as in?
Sorry i don't get much about these internet stuff consider me living under a rock

[main birch]

All good lol. Gender neutral means like it can be used for men or women or anything in between

Bro has transcended

[forest quail]

Ohhhhk
So you mean casual frnds is the meaning for bro

[main birch]

Yeah exactly!

You get it

[forest quail]

Thanks for the new info bro

[forest quail]

I get stuff fast 😁

You enrolled for 75 hard?

[main birch]

Oh yeah Fs. I’ve been meaning to get my CCNA for years, figured this was the perfect opportunity

[forest quail]

Damn i was also thinking of starting to learn i'll start it with this challenge lol
Best of luck then
Cya later

[royal valley]

Don't go there people 😆

[prisma peak]

I'm lost here, don't even know what everyone here's talking about

[royal valley]

Thats ok one step at a time

[royal valley]

#👥・new-member-guide

[fringe mural]

I think all the mods are asleep😭

[fervent stump]

Dissonance is def sleeping

Yorji isnt

[royal valley]

Yeah thats fine for later

[fervent stump]

@midnight osprey he sent one here as well

Oh we actually got 2 here

[midnight osprey]

yeah i got them out

[plush phoenix]

hello all! I had a question if anyone minds?

[midnight osprey]

Whats up?

[plush phoenix]

I got a googlepixel from a storage locker I purchased and can't get past the googl FYP lock is that something anyone can help me with? or is that something against any rules?

I've tried everything I know how to do. Like trying to reprogram it with a bootloader etc but nothings worked

[midnight osprey]

Unfortunately not, its against the rules :((

You may have to contact google or the person you got it from..

[plush phoenix]

Oh ok my bad don't want to break any just didn't know if it was

since it's sorta a gray area cause I got it legally but its someone elses account type-a thing

I was mainly hoping for help reprogramming cause I thought that could not have to access anybodys accounts so I thought I'd ask but I understand either way lol

[royal valley]

<.< you are screwed unless you have the owner of the phone to fix it

[plush phoenix]

dang was hoping since they have programs that can do it, something would be possible but oh well lol

it's cause it's newer isn't it?

cause I have the dr. fone wondershare program to remove them but it doesn't do the google pixels

[midnight osprey]

Those are kinda bs ngl...

[plush phoenix]

it actually worked for me for what I bought it for so I wasn't dissapointed, it did take a few attempts but at least it meant I didn't waste money lol

maybe thats just me trying to see the silver lining though

[midnight osprey]

for recovery sure, but theres def better tools

Breaking into phones.. not so much..

[plush phoenix]

yeah I didn't know that at the time hind sight is 20-20 I guess

[midnight osprey]

But yeah, you go to is contact the original owner/person u got phone from, or contact google and se eif they can help

[plush phoenix]

I might try google cause when you get one of those storage units they don't give out peoples information that owned it so idk who it belonged to

unrelated note does anyone know a good site to get keys for a hp pavillion laptop? I'm missing a few XD

[royal valley]

like.....keyboard keys? 😆

[plush phoenix]

yes XD

[royal valley]

Buy a donor off ebay for a couple bucks

[plush phoenix]

I didnt think of that thanks!

[modern brook]

Guys I recently got a Flipper Zero any idea on what to do with it

im new to cybersecurity

[main birch]

Install dif firmware first of all. But more than anything just play around and see how it works. There are plenty of guides online :)

[royal valley]

Welcome #👥・new-member-guide https://www.nist.gov/itl/applied-cybersecurity/nice/resources/online-learning-content

[iron bridge]

i completed networking basics from cisco now what should i study next for pentesting /bug bounty
i was thinking to follow nahamsec's github and first complete these and then jump to burp suite and start learning single vulnerabilities and practising them
or should i do htb path or thm path as thm now revamped its jr pentesting path

thanks to @woven anvil for recommending the cisco networking basics course it was good

[hot galleon]

DNS enumeration would be a good next step, then HTTP basics + Burp Suite, and after that practicing single web vulnerabilities one by one.

[olive bear]

hello all, I was curious as to if there is an index or database of lessons discussed on the server. I'm coming with a question about Android Auto in a car but don't want to ask if its stupid or has been talked about before.

[devout linden]

We dont bypass the paywalls here. Gotta stay ethical and within the #📜・rules

[primal plover]

Absolutely not trying to bypass anything. It's just that the 'marketing' of this training claims that it's free and yet I've paid for several subs already lol

[devout linden]

ahh gotcha. THM does that with the Premium stuff sadly

[primal plover]

Is it something you went through? Worth it?

already a full stack. Just trying to lvl up in OwlSec and Hack Smarter.

[devout linden]

The Premium isint bad. Worth it in different aspects. Im doing HTB Academy for the CPTS instead of the PT1 path with THM.
To each their own

[primal plover]

I think I like HTB better anyways. Going to go that route. Thanks for the help.

[real cypress]

so i reset my whole pc installed new windows enabled 2fa on everything changed passwords, should be good right?

[oblique hollow]

my degree comes with exam vouchers for

CompTIA A+
• CompTIA Network+
• CompTIA Security+
• CompTIA Project+
• CompTIA CySA+
• CompTIA PenTest+
• CompTIA Data+
• Linux Essentials (LPI)
• SSCP
• CCSP (Managing Cloud Security course)
• ITIL Foundation

is that most of the certs i’ll need in the future?

[royal valley]

That's a wonderful list of vouchers. Should get you a decent amount into your career and then you can have your work pay for the others as you gain skills and knowledge 😂.

[royal valley]

To answer your question directly, it depends on you. There are other certs that may or may not be useful for you to have as you progress in your career.

[thorn totem]

Yo wsg

[royal valley]

Heller

[thorn totem]

Anyone need help?

[devout linden]

make sure that your offerings for help are within the #📜・rules

[royal valley]

Also I would only help people here don't go to DMs it's better for everyone 🙂

[grand linden]

Hello guys I just needed some help with a game of Roblox I had my old acc hacked a while back and my mail and number was removed I tried to reach support but they always tell me to enter a mail to send a verification code that never comes to me I was stupid and due to a phishing link how to recover that acc does anyone have any idea ?

[craggy mason]

Well we won't help you here
#📜・rules

[grand linden]

?

[grand linden]

Sorry I didn't get it??

[craggy mason]

We won't help you recover the account since we do not know and cannot verify that it actually is your account

[grand linden]

Oh the acc name my irl gov certificate name is same

I have old mails in that acc

I can share u mails on that acc

[craggy mason]

don't share any personal information on discord or online to someone you don't know
Like your emails, name etc

[grand linden]

Yea have not done so far

[grand linden]

Ok

[devout linden]

Contact the vendor support. If they cant help move on. Our #📜・rules say that we cant help you out

[grand linden]

I see ok np

Thankyou guys

Btw

If I want to work on making an llm an agent how to get on it

I had recently come across a webcourse i attended for it but it was for advanced lvl coders

[devout linden]

Understand how machine learning works. And then start deving after that. Its a ton to learn/build with the right data set

[grand linden]

I see okay well I am still new to coding I would to learn more thankss

[devout linden]

Dont post this again plz. We cant help with this

Read our #📜・rules

[manic plinth]

Sure

But what am i supposed to do how can i enter my bios now😭

[wind pulsar]

What's the issue?

[manic plinth]

Dm??

[slim hazel]

I made a cybersecurity roadmap focused on fundamentals (Linux → Networking → OS internals → scripting → security fundamentals → web security/labs). I’m not trying to learn everything at once — I’ll only move to the next topic after becoming comfortable with the current one. Does this seem like a good approach, or am I trying to cover too many things before web security? Any suggestions on what to change or prioritize?

[manic plinth]

Can anyone help me with smth

If yall down dm?

[lost vapor]

well bypassing us is not a good idea either

you will get scammed and nobody will help you with that for free

[manic plinth]

Yk what im talkin ab😭😭

Im stuck in it😭

[lost vapor]

well you're on your own g

[slim hazel]

Any idea on this guys

[trim oar]

What's popping men

@manic plinth xūp Dude

Really wanna ɓuy new laptop on Amazon ɓt the promo code ain't coping

😭😭😭😭😭

[lethal mulch]

.

[hot galleon]

1. Network Fundamentals first, the OSI model and basic protocols.
2. Security Fundamentals.
3. Linux OS then scripting.
4. Move to web security after you understand how web servers and HTTP work.

[slim hazel]

can i cover all these structured wise through thm pre security path and then cybersecurity 101

[hot galleon]

In my opinion, HTB's material is more understandable.

[slim hazel]

but i don t have enough money to invest in that if its free then i can go for it HTB has any structured path or not can you suggest me

[hot galleon]

you have free modules, all fundamentals are free

use chatGPT too.

[slim hazel]

do HTB have any structured material and can you suggest me modules by modules roadmap

[hot galleon]

they have "Paths" as a structured material. Create an account there, you will like the platform.

[glossy wedge]

“Hi, I wanted to ask you about something related to mobile money security. An agent gave someone cash after receiving what looked like a real withdrawal message for 20 million, but later it turned out the transaction was fake. I’m trying to understand how scams like that work technically — fake SMS, spoofing, reversals, or other methods. Since you know a lot about cybersecurity/hacking topics, could you explain how this kind of fraud usually happens?

[visual knot]

What can I do?
Someone is trying to access my apple account, the email from Apple provided the phone number they wanted the security code to be sent to but I canceled the request. Can I do anything to scare them off? And is this okay to post here? Please advise. Thankyou.

[maiden wigeon]

Hi guys, I just finished building a custom automation script using the Grok AI API. Its working really well for handling[quick code analysis/OSINT lookups/automation workflows]. i need a few people to test it out and get some feedback. If you wants to see how it works, drop me a DM and a small fee is added to cover development costs.

[crisp star]

Do not give them the security code. If you already get a security code, your password is probably compromised, so you better change it.
Hope your Pc is not infected

[visual knot]

I didnt i canceled it but I was worried theyd keep trying. I was dm'd by a few people who are willing to help but I cant afford it. But will just shut down any accounts I feel might be compromised. Thankyou all for your advise and offers.

[crisp star]

Dude don't fall for scams via DMs.

[golden bloom]

Hello everyone, on my widnows 11 laptop I installed a second SSD and formatted it with NTFS. When I download a big game (150gb) on it, all of the suddon the SSD disconnected and I checked and it basically switched alone from NTFS to RAW. Which is really annoying because if I want to reformat it, it deletes everything on that disk and now I need to redownload 150gb. Does someone know why this happened. I checked the health status of that SSD using CrystalDiskInfo and it says good. And it is sitting at 45°C.

I have evn tried it formatting it to EXT4 and doing a dualboot with linux but after one day, the same problem appears which breaks ths linux OS.

[marble smelt]

Bad SSD connection, Fake or dying SSD, power delivery issue, SSD overheating internally

either one of those

probably bad SSD connection

could be:
loose M.2 seating
bad M.2 adapter/caddy
thermal expansion causing disconnects
faulty SATA flex cable (if SATA SSD)
motherboard slot issue

[golden bloom]

Oh ok I'll see that later one. Thank you

[gilded summit]

Any sites to get past patreon paywalls?

[royal valley]

Please see the #📜・rules thank you. The answer for this would be no. Pay for the content or find an alternative that does not cost.

[rain knot]

Something for nothing should always be suspicious coming from the standpoint of a business

[fallen hull]

please i need help, do any one have latest phoenix arizona utility bill in digital pdf

[royal valley]

Ummm talk to your utilities department(s) / service provider 😂

[solid cove]

Does anyone here know how to do Reverse Engineerringg!!!!!

[cyan mango]

does anyone know whats a good laptop for ethical hacking?

[main birch]

Any laptop will do as long as it has decent specs

[main birch]

Completely anecdotally the dell xps 9520 is a good option

A bunch of people ik got it and it has decent compute, you can virtualize pretty well

[cyan mango]

can we chat priv i need help to check my specs if they're good enough

[main birch]

Nah it’d be the blind leading the blind lowkey 😭

Good luck tho

[cyan mango]

oh

[wind pulsar]

Get any decent ThinkPad if you want something budget friendly

[wind pulsar]

Yeap ,what's up?

[wind pulsar]

"Anyone wanna dox themselves"

[solid cove]

I wanted Book suggestion on Reverse Engineering

[wind pulsar]

reversing: secrets of reverse engineering Eldad Eilam

[tawdry zephyr]

Hey bros my server firewall configraturion get broken how to configure it

[main birch]

Talk nicely to it

[tawdry zephyr]

Sorry now plese any one can help me

[royal valley]

First what is the firewall and how did it break.

[tawdry zephyr]

Bro you did not know about firewall

[proper tulip]

how broken is it? can u access something?

[proper tulip]

dude

he's asking genuine ques so he can help you lol

he gotta ask what's the issue before helping you solve

[tawdry zephyr]

Oh soory bro soory pelse forgive me

[royal valley]

There are different firewalls bro 😂

[tawdry zephyr]

Yeah I know bro iam not that tech guy I will give you info can you be my friend

[royal valley]

I will help you here I don't do DMs

[tawdry zephyr]

Ok bro

Host based firewall and waf

[royal valley]

There are many offerings for both of those things I need some specifics. As well as specifically why it broke to begin with.

[tawdry zephyr]

Bro thank you for helping me my dad is telling that he can configure that and he telling you thank you for helping me

[royal valley]

Alrighty then. Have a good one.

[tawdry zephyr]

Again thank you 😊

[native fog]

Is I advisable for me to change my network settings on kali Linux

[royal valley]

You can do whatever you want it's your machine. Just make sure you understand what you are changing

[native fog]

Thanks

[proper tulip]

depends on what you are changing and you are aware of the changes so you dont put yourself in trouble in the future, but viceversa you learn by breaking things so feel free to tweak anything

goodluck

[native fog]

https://tenor.com/view/sweating-nervous-wreck-gif-12986085083782148824

[native fog]

thanks anyway 🙂

[main birch]

Just remember: it’s always recoverable with a clean install lol

That just steals your time and local data

[proper tulip]

yeh

[proper tulip]

didnt tried to make to sweat bro

😂

[noble moon]

When I lunched my PC a window appeared for a split second. I'm panicking. Did I get hacked? Please help.
I did a full scan with Microsoft defender and Malewarebytes and they found nothing. There's ni suspicious CPU usage and no unknown running applications. What should I do??

[main birch]

You should be fine, that happens sometimes on startup when CMD flashes onscreen

Windows moment

[proper tulip]

not a serious issue but good to check the logs if it shows anything suspicious, use an ai chatbot to find the severity

[noble moon]

Any recommendations?

[proper tulip]

but its more of a usual window behavior so nothing to worry about much but try to look up if you curious

[proper tulip]

for chatbots?

[noble moon]

Yes

[proper tulip]

you can use any but if i were in your place i'd use either claude or copilot

[noble moon]

Thx

[proper tulip]

no worries

ask them how to find logs and copy/paste the log descriptions to the chatbots of some of the recent logs

you can use event viewer or if you want detailed logs you can use sysmon, but you have to set it up so a little lengthy but worthy to learn along the way @noble moon

[noble moon]

I'm suspecting a file that might me the malware. I want to delete it and delete anything related to it. Any other files it might have downloaded and everything. I have an App that do this but it's paid and my subscription has ended. Is there any similar free apps? Or can I do it manually?

[proper tulip]

do you suspect your system to be vulnerable? or did you installed any suspicious file or something?

[noble moon]

Yes I downloaded a mod for a game and I think it might be the problem

I deleted the files. But I'm not sure if there's anything related left on my device

[proper tulip]

might be the thing

delete the exe and check task manager and event manager and end its task

[grizzled crypt]

Quick question.If wanted to major in cybersecurity between a diploma in Computer Science and a diploma in cybersecurity.Which is the best to do??

[noble moon]

Everything seems good

[proper tulip]

go for computer science

learn coding languages too

cybersec can be done along with it and you'd do fine

[noble moon]

I think I'm safe for now. I'll check again with another anti-virus. Thank you for helping

[grizzled crypt]

Okay.Thank you

[proper tulip]

but still

check the addendum or course delivery for the diploma

if they have coding langs in cybersec go for that

[proper tulip]

dont install extra antiviruses

[noble moon]

Why?

[proper tulip]

windows defender is good enough to protect you

[noble moon]

Oh

[proper tulip]

third party antiviruses are not safe

go with default windows

[noble moon]

I have windows 10. Does it affect anything?

[proper tulip]

it wont

[grizzled crypt]

Thanks for the advice👍🏾

[proper tulip]

just set it up for the highest security and you'll be good

[noble moon]

What about MalwareBytes?

[proper tulip]

thats what i use

[noble moon]

Some1 recommended that for me

[proper tulip]

they are trusted but still a thirdparrty

i personally avoid third party

[main birch]

I would really recommend CS as well. Cybersecurity is only good if you really understand the systems and code

[proper tulip]

rest is your choice if you wanna use an external av its your choice

[noble moon]

Ok done. Malwarebytes was set as the default. I will change it back to windows defender

[proper tulip]

just uninstall Mb

and install a uninstaller like revo uninstaller or similar

[noble moon]

Ok

[proper tulip]

they look out every sort of file attached for you

easy for you to delete stuff

[noble moon]

Link?

[proper tulip]

lemme

[noble moon]

https://www.revouninstaller.com/
That one?

[proper tulip]

https://www.revouninstaller.com/start-freeware-download/

use this

direct install on this lin

[noble moon]

Thx

[proper tulip]

no worries

[proper tulip]

yes knowledge of related stuff is very necessary, specially coding languages if you aim for red teaming or pentesting

[main birch]

Yeah I’m in a cybersec degree rn where they go surface level into a bunch of different things, but never deep enough. That’s why I yap about cybersecurity shouldn’t be a college degree

You need the underlying knowledge to defend something. Just learning about an SQL injection will do nothing if you don’t know how a database works

[proper tulip]

yeah real

they dont know how to organize a cybersec degree

they should start with operating systems then internals then networks and then should should to injection and toolmapping

but they skip the most part assuminng we know everything

[main birch]

The issue with my degree is that we have a really robust program for network and systems administration. So they just took that and added a couple cyber classes. Most of my degree has been networking and systems, but nothing about cloud, pentesting, digital forensics, RE, etc

[proper tulip]

ohh

[marble bear]

Does the ps5 need to be jailbroken to browse it's directories?

[royal valley]

You are back at it again 😂

[marble bear]

Seems like you might have an answer

[distant trout]

i need help.

can someone give me like some general steps of hacking the boxes? (i do htb)

cause i get really confused when the instrcutions are gone. i tried the s11 box (for example)

all it wanted at the start was the flag. so from the lessons i did, i connected it with open vpn and the basic config

then i used curl to get all the code and also visited the site, scanned using nmap and found the ports. used -sC -sV too for maybe some detailed information.

AND AFTER THAT. I WAS LOST.

like i didnt know what to do or where to begin stuff with.

the first problem i ran into was the source code was all weird. (like it was all in a horizontal line)

i also tried using 'grep' on source code to find 'flag'

but nothing.

like am not asking for a solution but what are the general steps i need to keep in mind or follow?

not just for this but like for any box or whatever this stuff is called.
spent 45 mins looking around and my head is heavy T_T

help

[pallid saddle]

If it's a web based box, you should probably add the hostname (usually (box name).htb), then do some fuzzing such as gobuster dir -u http://box.htb -w /usr/share/wordlists/dirbuster/(pick some txt) and gobuster vhost -u http://box.htb -w /usr/share/seclists/Discovery/DNS/(some subdomain txt) --append-domain

If there are particular interesting ports open like SMB, check service version. If it's a windows 7 or xp machine for example, you may want to check if eternalblue works.

It's also helpful to get the firefox extension that tells you what web technologies are used such as php version, etc. There may be CVEs associated with these.

If you indeed find a CVE that applies, you may be able to find proof of concept code on github.

It sort of depends on the box itself what the workflow would be. Some are way more straightforward such as Local File Inclusion, SQLi, weak credentials, etc. Once you gain an initial foothold, you may want to extract ssh credentials (sometimes in /home/username/.ssh) and crack the private key with john/hashcat). You also will want to priv escalate. You can get a sense of the vectors possible with sudo -l, ss (then port forward via ssh -L), linpeas or winpeas, etc.

[hollow sky]

Thank you @digital solstice
You helped me 🥂

[wind pulsar]

Got that figured out? I could walk you through it

[pallid saddle]

@distant trout if you send me the link to the particular box I can try it myself and explain my process

If by s11 you mean "Reactor" (the first for season 11), I did that one in about 40 ish minutes after it released. It was pretty straightforward if you look at what Wappalyzer (the firefox extension I mentioned earlier) says

[warm wren]

Im convinced im unhelpable but i'll give it one more shot. I have been doing security for about a year and have been stuck on the same thing forever. I have not gained a single skill since that thing. 3 people i have met in security discords say they dont know what do to either to help me. The worst part i dont even know what the thing is that i am stuck on. please dm or reach out if you think you can help me

[royal valley]

Sounds like you need to spend more efffort on documenting your progress/methods of study. You need more data to figure out why exactly you are stagnating.

[novel rampart]

hi can someone help me how do i hack into someones instagram ?

or just like tell how to or what app or website do i use?

[main birch]

That’s illegal, please read the #📜・rules . We don’t assist with such activities

[novel rampart]

on tiktok yall said here they gon help me

[main birch]

Womp womp

Not to hack into someone else’s instragram

If you want to learn how to hack that’s different

[novel rampart]

bruh im tryna get my ig back

bc sum indain hacked it

indian*

[main birch]

Contact ig support

There’s nothing you can do about it

[novel rampart]

https://vm.tiktok.com/ZNRntttF2/

yall yall would help

[novel rampart]

they aint helping mee thoo

[proper tulip]

it doesnt say help in illegal activities

[main birch]

Literally in the video he says not to join and be acting a fool…

[novel rampart]

arent hacking is illegal in it self?

[main birch]

No

It depends on the situation

Especially if it’s in a learning environment

[proper tulip]

no

[main birch]

If you want to learn how to hack, I suggest you check out #👥・new-member-guide

[novel rampart]

kay

[polar mauve]

hey I have an unique situation that I could use some new perspective on if anybody is willing to help.

[royal valley]

Just say what you need help with and make sure it's not against the #📜・rules 😂

[polar mauve]

it's my windows, it saying I need to activate it but I've already activated it.

[royal valley]

Contact windows customer support 🙂

[polar mauve]

tried that, they didn't give me a response

[royal valley]

Well try again call em up.

If you are having issues with your copy of windows they will assist you. This isn't a very unique situation for them at all.

[polar mauve]

ight\

[pale crest]

Hello everyone, I am new to this platform. Can someone teach me how to hack?

[oak oracle]

Come chat here #💬・chat

[onyx sedge]

Hello guys, I'm a newbie here can anyone teach me the basics ?

[fathom summit]

Hello 👋 welcome. Most members start here #👥・new-member-guide

[royal valley]

@pale crest @onyx sedge https://www.nist.gov/itl/applied-cybersecurity/nice/resources/online-learning-content here are some free and low cost resources along with the #👥・new-member-guide that just got posted

Come back here anytime with specific questions 😄

[sacred nacelle]

Hey anyone got any good foss vpns

[wind pulsar]

slmgr /ato

Try running that command

[pliant thicket]

Is IT technician high school useful for starting in cyber without expierience? I have 2 international internships in IT not connected to cybersecurity, should I put them on cv?

[verbal pilot]

Yeah, if you are not occupied by other things, you can start the Internship, nothing is useless in the cyber world

[fallow remnant]

Yes because in a company that doesnt need that much cyber monitoring you can work IT Support and Analyst

[devout linden]

We dont help with thins like this read our #📜・rules

[noble moon]

I'm trying to delete MalwareBytes but it's still in my device and it's still on as the defuse anti-virus. I tried using Revo uninstaller but that didn't work.

Can anyone help?

[devout linden]

We wont be able to help as the ones that try to RDP or have you download anyting will prob scam you. Did you reboot after you had revo remove it?

[noble moon]

No

Should i?

[devout linden]

try and see if its gone

[noble moon]

So you have any good Uninstaller app?

[devout linden]

Revo is solid and should work along side with the malwarebytes uninstaller

[bold herald]

I found BCU recently, seems to be a good alternative: https://github.com/Klocman/Bulk-Crap-Uninstaller

Very useful in environments with licensing restrictions (like using on corporate devices in a small company if you're part of the IT team and some employee "accidentally" installed Roblox in their corp laptop)

I'm using both on my personal desktop, just sharing if it helps someone

[jagged aspen]

No

[forest quail]

I logged into replit browser (on tab) yesterday i tried creating a repl like typing the code on my own and stuff but i couldn't find how to do it (had to use github codespace later)
Does anyone know where to create a new repl?
Also which is better "codespace vs replit"?
Pls lmk

[restive scroll]

Any tips on how to find if I have a rat on my pc since my pc jas been lagging alot more lately

[wind pulsar]

Check your traffic

[devout linden]

Windows event viewer

[main birch]

Ngl I’m 99% sure there’s a YouTube video on this…

Or like docs from replit

https://docs.replit.com/build/use-the-docs

[proper tulip]

all good buddy

[forest quail]

Thanks

[raven geyser]

Hi guys , I recently passed my ccna with flying colours. However I am struggling to find a company that will take me on due to my experience. I am very passionate about networking & want to land my first position as a NOC / junior network engineer / network engineer. I am in the Uk and need some guidance. I have recently been building my portfolio and documenting a little project on eve-ng. Some guidance would be nice. Thanks guys

[covert delta]

go to the website and look for the create repl button.. um or maybe a bug + symbol?? choose a template and boom start it ig, hit create repl and it throws u to the browser IDE

if u are in the replit ui, they must have it there as +New in the sidebar or something

[forest quail]

Nope not there at all they changed the ui and now i can't find it

[covert delta]

give me an ss

[covert delta]

create something new...

left sidebar..

[forest quail]

Doesn't work
Just refreshes my page

[covert delta]

tis a bug mate

imo

if a hard refresh doesn't work, try the direct url

@forest quail try not using brave asw

[forest quail]

Restarted the site many times even cleared cache of browser still not working guess i'll try removing filters today

[forest quail]

Why?
I tried on chrome still same issue

[forest quail]

Tried typing the url and got to home screen again😮‍💨

[covert delta]

Uhhh

Idk then 😭

Try asking claude maybe

[forest quail]

Lol i asked gemini it suggested me to just use codespace instead
Nvm though i found vs code web version to run on my browser seems good just gotta figure out the repository stuff

[fathom summit]

@broken fox No, we do not help with that. Read the #📜・rules and #📢・announcement message

[grand phoenix]

Hey guys can someone guide me or give me some roadmap for the defensive

and kindly those paid course sellers don't come in my dm i am a broke guy seeking for some help

[main birch]

roadmap.sh is a good place to start, I struggled with it at first because it’s kind of vague but it’ll set you on the right path

Also there’s one in #👥・new-member-guide

[grand phoenix]

its like currently i am doing bachelors in cyber security but like i know how to use some tools but i still don't know the working mechanisms and also with linux i got arch but when got some error i can't do a thing and need help from AI so any idea what i should do like where to start from ?

[main birch]

Start reading stuff. Hack the box is also great for learning practical stuff

Also if you’re learning I would strongly suggest to not rely on AI

The struggle sucks but it’s necessary

[grand phoenix]

thats where i got stuck like i want to study and learn but don't know what to read

where to get resources from what to do

and if i tried to do some boxes then i always got stuck and ended up with writeups

[main birch]

Ok so I think the biggest thing for you is to just start somewhere and persist through challenges. You’re not gonna know everything but pick resources from the #👥・new-member-guide , look on Reddit for a good textbook, and if you don’t vibe with it pick another

You learn through failure

[grand phoenix]

mainly i am litrally lost and dk what to do like i have curosity and urge to learn but don't know where to start from what to do like when i tried something then i feel like another is also imp and got to another and like that kinda in loop

[main birch]

Exactly you gotta choose something and commit to it

[grand phoenix]

like everything seems imp and got confused what to do

and main problem is i ended up forgetting the learned things like i did solved the labs from portswigger sql and now i am blank like what to do i mean when i jump on another topic i got blank about the first one

is there any way or idea to get the rid of it ?

[main birch]

Commit to something lol

And don’t be afraid of failing over and over again

[distant trout]

Yes it was reactor only

I decided to try some other rooms (old ones) and before that do the "Basic Toolset" skill path

Thanks so much for replying man

[wheat ginkgo]

guys I'm doing a little personal project trying to connect to a old chinese access point that I had (I opened it and soldered a UART to usb port so I could connect it to my pc)

but the problem is

that it doesn't let me in (I don't have the login credentials)

[scarlet temple]

Can someone suggest me some good cybersecurity projects that should I work on

[abstract schooner]

Alright, 👍. So how does one get YouTube premium but for free. Asking for a friend🤔

[distant trout]

dont they like give out offers for 1-3 months free? '

[abstract schooner]

My friend already used his 1-3 month

[distant trout]

do u have google one? like the subscription?

[abstract schooner]

He does

[distant trout]

google one gives u free youtube premium

that's how i am using

[abstract schooner]

[strong robin]

hey guys is there anyone here who can help me bypass the Google authentication thing after doing a factory reset to my old phone I forgot the Gmail I used and I didn't have a recovery gmail

[distant trout]

or u can downloaded those MODs but it's always a bit risky

[abstract schooner]

High risk high rewards

[distant trout]

https://tenor.com/view/okay-sounds-good-jim-halpert-the-office-good-point-gif-15818320620194911396

[royal valley]

No #📜・rules

[fringe river]

How can remove frp in my phone

[astral current]

Has anyone watched the big lez show

[past skiff]

My friend got leaked on tiktok can somebody get that off tiktok

[frank widget]

Report it to tiktok

[steady palm]

Nope, report to the platform please

[past skiff]

alr

[royal valley]

The best thing to do is report and move on with your life

[fossil ferry]

any suggestions for ai chat claude code vs deepseek api which is best??

[royal valley]

Locally hosted if you can 😂 . It depends on your criteria but I currently use Claude(please don't vibe code 😔). Different LLM are better for certain things.

[fossil ferry]

Not rich enough for local hosting

[proper tulip]

you can host for free too

[fair trellis]

Hey guys 👋,
Can anyone tell me what doing the Junior Cyber Security path on HTB is like?

And this is basic right? So, why it isn't mentioned in #👥・new-member-guide ?

Just a question no arguements though...

[delicate dove]

How to set up a vpn or proxy to get onto onion browser

[minor blade]

You don’t really need a VPN or proxy to access onion sites — just download and use Tor Browser, connect, and open the .onion link.

https://www.torproject.org

[delicate dove]

Will I get tracked tho

[minor blade]

I mean it’s designed to make tracking much harder by hiding his IP through multiple relays. But nothing online is 100% anonymous logging into personal accounts, downloading random files, or using sketchy extensions can still expose you.

You might have to ask someone more experienced then I am.

My apologies.

@prime plover can give you a nodge in the right direction.

[delicate dove]

I use Kali Linux on a VM so if my machine gets hacked I can restart it and thank you sm

[prime plover]

for tor connection you dont need any vpn

and either way using a vpn over a vpn will make things worse

i recommend you to use it as is out of the box with tor installed and that's all

and another thing use I2P more relieable and secured

😄

[royal valley]

There is always a layer of trust for the exit nodes. For example the NSA owns a bunch of tor exit nodes. Also there is always some trust involved and if an individual has enough knowledge and resources they will find you eventually. You can only obfuscate.

[prime plover]

and if you really want to get off the "DarkNet" stuff out of your personal computer make a USB stick using Tails it's an OS that is used by news reporter they use it to go on tor and share information from inside a censored country

so china afghanistan ect ect

and to avoid getting exposed just dont download something from there nor go on sketchy thing

you'll be good to go

[royal valley]

If you want to get deep into this kinda thing I suggest you read hitchhikers guide by anonymous planet and take some notes. There is all kinds of things that can be used to track you. If you live in the united states just know you can be tracked much easier.

Anyways if you arent doing illegal stuff and just wanna explore use a disposable vm like lain was saying. Use a new instance for each project you wanna do.

Then again all this should be judged based upon your threat model.

Essentially the basics of it is you have different online identities and they never mix with each other. There is alot to consider. Everything about a device can be tracked and devices next to other devices leave a trace. For example if you are trying to track someone irl you look for identifiers like fingerprints, birthmarks, tatoos etc. You also try and find where they frequent, where they have been, see where they are going. Then there is just random passerbys that might be able to id you. For the last example one digital variant of that is something like BLE(bluetooth low energy). It can essential be like a a passerby just noticing you as going about the day. It is how airtags work.

[minor blade]

Thank you guys so much for always being helpful ❤️

[royal valley]

Another useful book is Extreme Privacy: What It Takes to Disappear by Michael Bazzell it really shows the amount of effort that goes into trying to remain anonymous and/or keep your privacy(different things). I would say the only way to actually achieve 100% online security is to not go online at all 😆 . You can do well enough though.

[prime plover]

i got your back

https://cdn.discordapp.com/attachments/1012079751445352518/1501017194484600984/owlsec_intro.gif

[royal valley]

Also one last thing. Sometimes connecting to a vpn first then from there connecting to tor has merit. For example ISPs dont like when people use tor and they do things such as throttle tor traffic. If you dont trust your isp as much as your vpn provider etc. It doesnt improve anonymity it just shifts who you trust. Tor to vpn is the worst option overall dont ever connect to tor then vpn ha. It essentially defeats the whole purpose of tor and is worse than just a vpn.

Uhhh thats all I can think to offer have fun and stay safe.

[smoky sun]

guys i need some help with this cause im confused

which cert should i go for, cdsa and then start mass applying to soc jobs while still working for that msp, or do i go for ccna and stay a little longer in that msp?

[flat thorn]

U can apply for the jobs u already have sec+

[smoky sun]

im working already but its mostly IT

so im trying to get into something thats more in depth with security

[royal valley]

Keep working and upskilling and apply for jobs get CCNA is valuable even in soc . Stay there for a bit and see if they will pay for the CCNA cert.

[smoky sun]

so you'd say ccna then cdsa then apply for soc jobs?

[royal valley]

Just ccna it will give you some general networking knowledge. And as you are doing that no harm in applying for soc jobs. I would stay MSP for a bit to gain some general it and customer relations experience imo.

[smoky sun]

but damn man i hate speaking to clients lol

[royal valley]

You can even pivot to an mssp

Managed Security Service Provider

[smoky sun]

if thats the case then i'd speedrun ccna tbh cause i wanna get into the fun cyber stuff

[royal valley]

Cyber is a lot of paperwork and dealing with people just fyi

[smoky sun]

how long would you suggest i stay in an msp?

[smoky sun]

true, but your more respected there

[royal valley]

Nah regular it deserves respect as well.

Idk if clients respect cyber people more 😂.

It's all it to most people.

[smoky sun]

some of them be arrogant and ignorant for no reason tbh

atleast in a security enviornment id be dealing with less clients and smarter people i guess

[royal valley]

[smoky sun]

what xd

[royal valley]

Sorry to burst your bubble. You will still deal with headaches from people at any job 😂.

[smoky sun]

damn

no escape then

[royal valley]

I would say to stay at MSP as long as you don't need an immediate raise until you learn all you can there and then move on. Depends on your specific plans though. Don't hop jobs to fast though as employers consider that a red flag.

[smoky sun]

how long would you suggest i stay in an msp?

[royal valley]

That depends on your plans. I usually try to stick with a specific employer for at least a year.

Unless I need to get out for whatever reason it's not a hard rule 😂

[smoky sun]

hmm, yeaa to be honest i want to get out of there quickly, cause i fear getting stuck in IT

but yea you'd say i go for ccna, then apply for soc jobs as well, correct

i dont know if i'd have sufficient soc skills though, would i? or would i have to supplement with something else before applying?

[royal valley]

Don't be scared of getting stuck in IT. Just apply until you get into cyber 😂.

[royal valley]

I know people who got a soc job with just sec+ so it's possible, but don't think it's the norm. Just network as you work at the msp until you get in.

[flat thorn]

THe best moment to look for a job is when u are already employed.

[royal valley]

Do projects in your lab familiarize yourself with the various things used in a soc. SIEM, IDS, IPS, etc etc. Build a soc in your own home network whatever. Just get some reps in 😂.

[smoky sun]

network as in networking with people or IT networking xD

[smoky sun]

true true

[royal valley]

Both, but I was talking about people 😂

[smoky sun]

xD

alright thanks for your time man

[royal valley]

No problem

Good luck, just keep gaining knowledge. It's necessary to be successful 😁

[smoky sun]

it is indeed

[abstract schooner]

So help desk is the play?

[royal valley]

Its a good option to start for sure. Dont let that stop you from applying to other stuff. If you are capable and have done some networking with people you can go straight to cyber possibly.

Just dont let that be your only plan. Get any job and start pivoting until you get to where you wanna be.

[abstract schooner]

What about CS grad with 0 Cyber experience but but mostly swe exp

👉 👈

[royal valley]

You could look around at software security engineer stuff or you could go work as an ISP installer and work your way to NOC and then SOC.....or you can go help desk.....

My point is there are many paths just find one that works for you and pivot as you go 😄

[abstract schooner]

very wise

Lowkey thought help desk was the only way or system admin with certs

[chrome moat]

How do you get on the dark web can someone teach me

[royal valley]

scroll up a bit

[chrome moat]

To what point

[royal valley]

#👥・help-me message

[flat thorn]

I was a software engineer

And studying all the hack stuff I was able to move into cybersec

[clear wolf]

does anyone know about tails, its a OS that is supposedly the most secure to browse through onion links bc it routes all internet traffic through Tor, so i was wondering if It was a necessity or just good measures ?

[royal valley]

Depends on your threat model, but sure you can tails on a USB drive.

It's probably best to do so honestly

[abstract schooner]

This might be a stupid question, but do you guys actually use VPN 24/7? I mean I only use it if I wanna switch my algorithm to Indonesia sometimes

[clear wolf]

see I could use tails and buy a USB but I was thinking of just using a VNP and Windows but at the same time its risky

[royal valley]

Depends on your use case. If you are just trying to change your cdn to get different regional content in Indonesia or wherever. I always have mine on.

[royal valley]

Please see an earlier conversation #👥・help-me message

Definitely recommend reading up a bit before you decide to venture off.

[mint merlin]

Guys, I’m someone who wishes to become a web application pentester.

And maybe in future someday i could become part of red team.

My question is:
Do yall have any advice for me?
And do yall recommend anything:
books
youtube channels that I can learn from.
Something else.

I would appreciate it.

[royal valley]

https://portswigger.net/web-security give this a go

Also scrol through the help channel and check out other stuff people have provided

[wind pulsar]

Always have mine on .

[mint merlin]

I also have premium subscription on Tryhackme, yesterday I finished pre-security I’ll start with cybersecurity now

[wind pulsar]

Get Tor ... pick some good bridges
Don't use tor and a VPN at the same time.

I don't think surfing the DW is illegal,but what you do over there might be .

[severe karma]

will HTB academy pentester path make me hacker?

[lost vapor]

yes

it'll give you the foundation for it

[severe karma]

I heard it gives knowledge equivalent to taking Offsec's OSCP labs but idk how true that is

If I the whole course would I be maybe 80%~ ish of the way to taking the OSCP?

[mint merlin]

What about the tryhackme full roadmap

[lost vapor]

that as well

[lost vapor]

it is true, i also heard that the cpts (htb's cert) is harder than oscp to a degree

but, more affordable

so i'd rather work towards having that

[mint merlin]

What do you advice and recommend me to do in my journey to be successful and have a higher potential to become a web app pentester and future part of red team

[lost vapor]

i'd recommend working with what you have, so if it's tryhackme, work with that

but if you have hackthebox, work with it as well

i would personally route to htb whenever i need knowledge regarding cybersec because i have a membership there

[mint merlin]

I have that and I also bought couple of books, I’m trying to do as much as I can

[mint merlin]

I’m thinking to build my foundation in tryhack me and then go HTB and then do rooms or smth

[lost vapor]

makes sense

do that then

[mint merlin]

Thank you dissonance

[swift wadi]

Where do I learn?

[devout linden]

The #👥・new-member-guide is a great starting point

[swift wadi]

Thanks

[shy turtle]

Hi do anybody no a good and free humanizer cuz I need to do something with it I'm lazy to write a finish an assignment and I'm dead locked in for Thursday cuz I've been busy doing other stuff like writing scripts with python cuz it was more interesting so of anynody know a good humanizer please share 😅

[steady palm]

Please read our #📜・rules very carefully, we don't deal in vigilantism here. Also, while you are timed out please change your bio or you will be quarantined.

[sand gust]

Start hunting on vdp's immediately and watch lostsec on YouTube

Oh and use this

Its rly good give it a try its made by nahemsec

https://www.hackinghub.io/

I'd say learn all the server side bugs on portswigger academy ( cuz u don't wanna fuck up on accident on a real target ) and do some hackinghub labs to give u a motivational boost when u solve a lab and actually learn non outdated stuff ( everything there comes from a real bug bounty write-up so you can do what the pros do ) and go crazy with learning client side bugs on real targs ( vdps ) and maybe even find a valid bug to report and brag about online

That's my opinion tho have fun bruh

[mint merlin]

What is vdp? Can you pls explain it?

[graceful pasture]

unpaid bug bounties basically

[sand gust]

Bigger scopes and less competition might I add

Usually

[sand gust]

Trapnatized put me on to this like a year ago

[mint merlin]

Ahaaa okay okay

I’m at work now if I’m home I’ll look the the YouTube channel you sent and the link you sent

Thank you very much

@sand gust

[sand gust]

Type shi

[pseudo ibex]

hey everyone, I just got started in cyber security and I am taking the junior pen expert course in HTB....thing is I am getting tired of only the theoreticals, is there any where I can start practicals from the start instead?

[severe karma]

You could probably do easy HTB boxes alongside doing the course

[pseudo ibex]

Oh I'll check those out, thanks.

[round root]

hi

[old horizon]

Welcome

[placid jasper]

hey guys, how would i get started for getting into cloud security? I'm a college student atm studying computer science, and I want to head into this field - I'd love any pointers you all have!

[severe karma]

I'm not too sure about getting started in cloudsec as I don't have much experience in it, but both the AZ-900 and AWS CCP are good beginner level certifications that give a good overall introduction to cloud & cloud security and usually take 2 - 4 weeks~ to study for and pass

I'm personally going to take the CCP as AWS naming conventions can be confusing

[placid jasper]

is the training for these certifications free? currently, I'm on a pretty limited budget so I'd prefer not to spend any money on learning .. also, what entry roles do you think would be better to get into for cloud sec?

[severe karma]

I'm not too sure about entry level roles, I assume that most entry level IT roles would be okay as you can then pivot into cloudsec later on. AZ-900 has free training via MS Learn and the AWS CCP has free resources although they aren't as readily available as the guided learning provided through MS Learn

[placid jasper]

right right, thank you so much!

[past skiff]

hi i am a father and want to place spyware on his new pc butt i dont't know how to code and i dont't want to spend any money can somebody help me

[crisp star]

If you are a father then just install something like a parental control software

[past skiff]

its on a pc and and he wants linux on his pc i dont know what that is tho?

[vapid holly]

Question, does anyone have any opinions on OT security and how you would get started in it? Seems under staffed and it's something I'm looking forward to.

[primal plover]

I am having such a hard time with my laptop getting super hot and the fan wants to constantly run. I thought I fixed this several times but it keeps happening. Especially when I'm working on THM and HTB projects (as well as other projects I shant disclose here). Any suggestions?

I mean, I do have 8 others but this one is my favorite. 🙁

[fluid sand]

I suppose what are your specs and what are your background processes when running it?

[flat thorn]

OT u can find this in HTB some starter things

[primal plover]

I'm sure I just need to build a better computer lol

[vapid holly]

@flat thorn thanks

[fluid sand]

i hear you on that, I am the same way with my stuff, I need more has ended with me buying an old dell server lol

[primal plover]

Yeah. I'm working reconfiguring my entire setup all the way from my ISP to my machines.

be back in a bit. Have to run some updates.

[fluid sand]

catch you later

[scarlet steppe]

get a used computer with certain specs

[forest quail]

Anyone knows what might be the reason someone sees https://discord.com/channels/990435451334688768/1508342420348080249 channel as #no access?

[brisk tree]

Those are private channels
Can't be viewed by regular members

[forest quail]

Chat is pvt? I was just talking to you there

A frnd of mine joined the server few minutes ago and said they can't access the https://discord.com/channels/990435451334688768/1508342420348080249 channel

[brisk tree]

Well that's weird
Send ss in dms

[forest quail]

Yeah lemme ask them for

[compact phoenix]

someone here who has done the LogForge sherlock on HTB willing to give me a hand for the last question i cant answer? (i can't find the name of the "attack type" it wants)

[gaunt perch]

Hii everyone can anybody help me

[mortal rampart]

How can I help you?

[proper tulip]

who are you tracking?

i am asking who you gonna track

[radiant ibex]

What's good y'all

[proper tulip]

this is not the chat

[chrome crag]

Hello everyone I'm new here.

[proper tulip]

#💬・chat

[compact gale]

Hey I’m learning python and I’m really stumped on 2 questions I was hoping someone might be willing to help?

[sage depot]

How do i get opsec

Sudo apt install opsec?

[proper tulip]

yeah ask

[paper topaz]

Am using my own lab for more experience. Want to attack my windows 10 using metasploit in Kali Linux with serve-side exploit but fails and the output show no session was created. I have done lot of research a whole month in almost every site, but got no solution. Have learn through HACK THE BOX, but more of the note is explaining on the client-side attack. Kindly anyone to accord me where necessary

[proper tulip]

did you execute the payload

on your windows

and lookup for session

use the active sessions

[granite vale]

No son

[dapper grove]

Assume a system where data is fully decoupled from its physical storage — the data only 'exists' when a valid, time-bounded, cryptographically signed lease is presented to a control plane. Outside that window, the storage layer sees only mathematically inert, indistinguishable noise. The lease is verified on every read. If the lease is revoked mid-read, the read immediately fails. The system supports offline operation via pre-issued leases with TTL enforcement. The control plane and edge agents communicate via signed, nonce-protected API calls. The audit log is hash-chained and immutable.

Based on your expertise:

1. What are the most plausible attack vectors against such a system?
2. How would you attempt to exfiltrate or reconstruct data from the storage layer without a valid lease?
3. If you had full root access to the storage server but no control plane credentials, what steps would you take to attempt to read the data?
4. What hidden assumptions or design flaws would you look for in the lease issuance or revocation protocol?
5. How would you attempt to bypass the lease verification at the edge — either by spoofing the control plane, exploiting the lease cache, or compromising the agent's key material?

[marble bear]

How do you lock a port, and what's the reason behind doing so?

[prime drift]

Hello guys can anyone help locate a lost phone here?

[royal valley]

If you didn't enable find my phone on your device then you may be out of luck

[royal valley]

I'll assume you had an llm write this and not read it all 😂. At least put some effort and try somethings and say what did or did not work. Also we can't really go to in depth about this kinda thing because we don't know if you are doing something legal or illegal.

[dapper grove]

Yes I did took help from LLM to structure this message but Fun fact am actually talking about a system that I built its not a random question to test anyone's skills

my main goal using LLM was hiding my IP and core-invention

[royal valley]

If you actually took the time to write it I apologize, but unless you can point to a ctf on htb or thm etc we can't do much for you. Most I can suggest is look at the documentation and any previous pocs.

Well llm or not I can't tell if you are doing something ethical or not . I would look for someone local in cyber and try to make friends or something. Maybe start a club.

[dapper grove]

I am actually finding the attack vectors what I ight have left while designing the system I am good at system design but not at hacking part and Since am working on my own startup I don't even have time to waste to hack any existing systems which I already know are mostly broken

[royal valley]

It might be a good idea to bring someone on board that can do those things if you are able. You never want to put something on the market without validating it. You could also make it foss and build a community around it.

[dapper grove]

am sorry but, what's foss ?

[royal valley]

Free open source software

[compact gale]

I’m trying to computes and displays the discriminate for quadratic equations can anyone help

In python

[jovial hollow]

hello ,i am new here i came from insta post from srhoe video and came here curious if anyone can teach me how to hack instagram accounts , i had bad experience with some people who were online bullies and have sensetive info. i would appreciate if there is road map for me to catchup on what i need , instruments and specific skills for this cuz the ai i asked don't give or educate on this and i couldn't find videos regarding this .
thanks for reading 🕊️

[royal valley]

No we don't do unethical things here. Report to Instagram and move on .

[distant trout]

i need help.

i am trying to open htb inside one of those boxes (so that i can connect to attackboxes using openvpn from the inside)

now the problem is when connecting to a VPN server. I don't exactly know what server to use cause in the boxes the vpn access says: US starting point. but the machines that I can run in htb is US East or US West

i tried connecting one of the us machines but I am getting "Host unreachable" whenever I try to ping it to see if it/s connected.

theres no trouble in connecting openvpn (it's showing connected on both ends)

but the problem is idk what machine to use where

[royal valley]

When you start a machine it should give you the information needed to access it via openvpn

[royal valley]

Make sure you are connecting to starting point VPN

Unless you are on starting point boxes

[distant trout]

yeah i read all.

i connected using openvpn in one of the terminal

i also made sure that the pwnbox was US and inside that i needed to download vpn specified to US

the problem is the starting point machines and the original machine

[jovial hollow]

i see , ok thanks . i will try to learn the ethical one from here ✌️

[distant trout]

i started with Starting point machines (US Startingpoint 2)

it did not connect.

then I went to Machines (it did not work either)

[royal valley]

Starting point VPN is for starting point machines

[distant trout]

i understood the problem.

i was downloading the vpn for UDP and i needed for tcp

i tried with tcp and the connection was success.

why did UDP not worked?

like why was it giving error when i pinged?

[narrow osprey]

Anyone ?? How do i create a ticket to report someone

[royal valley]

Uhhh thats super vague just look for support for whatever you are talking about and go from there.

[narrow osprey]

Uhhhh someone take lots of money from me and didnt provide the service and has ghosted me

And has multiple accounts on this server cus they keep getting banned for scamming but i didnt know that until I already sent them 70 buckss

😎

[spare ore]

i feel like i need to start learning kali linux, but i dont want to commit my laptop to an os that im unfamiliar with, does anyone have any tips or guides for kali for a complete beginner?

[royal valley]

You should learn and dont use service from random internet strangers

[royal valley]

If you have a decent laptop you can run it in a vm 😄

[spare ore]

i have quite a good laptop but i still have no clue where to start lol

[royal valley]

#👥・new-member-guide

You can start there

[spare ore]

perfect thank you

i didnt even notice the linux stuff

[mental helm]

who uses adaptix c2 for red teaming

[royal valley]

Contact your phone manufacturer support, your service provider, and check find my phone and file a report with police.

[spice isle]

Hello people
I'm new to the community and eager to learn about cyber security. I have done some homework if anyone can help me figure out if it will be the right path to it... So I want to learn CHFI and CEH however I'm confused between Ec council and comptia for my certification. I really want to work in this profile maybe in few years down the line.

[oak oracle]

Welcome! And we hangout #💬・chat come and say Hi

[prisma quartz]

Hey guys. Question: If you are performing bug bounties or vulnerbility disclosure programs, would you use a vpn? I'm currently using a VM with NAT but I'm concerned about leakage even if it is ethical. From what I understand, it can look suspicious. Any suggestions? I'm rather new to VPDs and Bug bounties.

[prime plover]

nop because some security mesures can stop you from doing something on a VPN but use proxy a good residential proxy provider is floppy data

with a proxychains hop

[prisma quartz]

Yeah I forgot about that...so I suppose proxies are all we can do when doing VPDs/Bug bounties. Some ROEs don't go over proxies so its hard to determine whether you are in the clear or not.

Thank you

Is there a way set a non rotating / static IP for floppydata proxies?

[vivid wraith]

Guys Firefox or Brave?

[prisma quartz]

I've been using Brave for the past year and I love it. Once you disable all the crypto stuff it does well.

[vivid wraith]

But how to allow brave to access my Google account

Like how to log any application in brave by Google.

I can't cz it's not allowed main...

[prime plover]

yes you can if you take only one residential ip you can do stuff but i recommend rotation because of some safety mesures that can ban

[prime plover]

Firefox

[prisma quartz]

I don't have an issue logging into any services. you may have an option enabled that clears all logged in accounts upon closing the browser.

[jovial pawn]

Plz cast your 10 votes for me
To win this award

[spice isle]

Roger that

[royal valley]

Change your password and enable 2fa, talk to Google support. These are some things you can do if you are concerned.

[prime plover]

@jovial pawnhmm hmm

the link is a no no

context

[clear mist]

ejpt exam question

i have to crack this , but i cant for 30 min and onky 5 hours left

[prime plover]

it's not that hard for real

crack it that's the only way

i delete the message because dont share that kind of info

[clear mist]

can you help me with cracking it , cause i used hashcat and its running for more than 15 min

[prime plover]

you have other software other than hashcat

[clear mist]

ok

i didnt knew that

[prime plover]

@royal valley real link

not bs

[prime plover]

no self promotion still

make a #📩┃ticket first to talk about it please

[royal valley]

Yeah but no self promo 😂 . Imagine walking up to a stranger and telling them to vote for you. That's what it is like to join a server and ask that 😂.

[prime plover]

right

[proper tulip]

yo where is the flag?

cant find the 32 hex characters

[royal valley]

It's on the root home directory

[proper tulip]

im on home

/home

[robust marsh]

Room t directory

[robust marsh]

Root

[royal valley]

Google where is root home directory

[robust marsh]

Go to root directory cd / there will be the thing

I guess

[royal valley]

Not saying that to be mean

[royal valley]

Googling is an important cybersecurity skill 😂

[proper tulip]

yeah its fine

[proper tulip]

[robust marsh]

There is the root

[robust marsh]

Why don't you use cli

[royal valley]

Brother get in dah terminal

[royal valley]

Real

😂

[proper tulip]

uhm

wait

[royal valley]

You should hardly ever be looking at a gui

[robust marsh]

I this thing terminal is the only option fast and furious

Gui sucks for ctf things

[royal valley]

Gui for stuff like ghidra or blood hound etc.

[royal valley]

Most of the time you should be in terminal

[robust marsh]

Cd root

ls -l

There should be the file with 32 hex

[proper tulip]

i dont see

[robust marsh]

Do cd /root

I mean go to the root directory then ls -l

[proper tulip]

does the same

get me into home

[robust marsh]

Wt

[proper tulip]

yeah

[robust marsh]

Root directory is not home

[royal valley]

/ root then ls

[proper tulip]

what

[royal valley]

Flag is named flag.txt cat the flag

[proper tulip]

i did cd /rot

[robust marsh]

We can find the flag i think using find

[robust marsh]

Then do ls -l

Flag txt prob hidden in there

[robust marsh]

Or ls -al

[royal valley]

You aren't in the meow box brother 😂

[proper tulip]

i am

lol

im a root user rn

u want me to exit superuser?

[fallow remnant]

Did you scan for open ports?

[robust marsh]

For what bruh

[fallow remnant]

What you tryna do tho I got no idea

[proper tulip]

its my first module bro

why would i

[royal valley]

Do telnet -l root and the box ip

[fallow remnant]

Are you completing a CTF or no?

[robust marsh]

Htb challenge i think

[fallow remnant]

Ah ok

I got no idea abt that

I only ve tried THM

[robust marsh]

All are same thing find the flag.txt

[fallow remnant]

Yh just got no idea what the challenge is.

[royal valley]

You find it :p

[proper tulip]

ugh

[robust marsh]

did you find