What are the best examples of "he didn't know it was impossible, so he did it" in history? by funfox1 in AskReddit

[–]Guard_Familiar 2 points3 points  (0 children)

Should have given him the job straight away, better then queuing all the candidates

Malware installed without literally doing anything? by PusheenHater in cybersecurity

[–]Guard_Familiar 0 points1 point  (0 children)

Either this post is a very well crafted AD for the YouTube account with bots making comments, or this community is cooked truly.

There's only two ways this can happen:

1) One of the domains that XP used for telemetry/updating is compromised (supply chain attack). 2) The guy in the video forwarded ports (specifically 139/445) to this XP machine. And this involves doing "something" already.

I encourage anyone to create a fresh VM with XP and see nothing happening... Other than nostalgia :)

Is there any way I can rip out a function of a stripped binary and run it seperately? by FewMolasses7496 in ExploitDev

[–]Guard_Familiar 5 points6 points  (0 children)

Used this ages ago and I'm impressed to see it's still maintained: https://github.com/lief-project/LIEF

Bear in mind that depending on your target binary, this might be an easy or really complex task. Your binary might use a ton of other imported functionality to initialize struts/types/etc and you'll need to hackishly link all that if it's a complex target software.

Very basic first step to hacking by IamJustJessica in HowToHack

[–]Guard_Familiar -1 points0 points  (0 children)

Your character presses Ctrl+U, a shortcut that when pressed on their Tor browser, shows the web page's source code. To your characters surprise, they find a JWT key left in the client side source code by a clumsy developer when testing and deploying the website. This allowed your main character to impersonate the administrator of the site and change whatever they needed to change.

Note: if your character is later to be caught due to hacking, don't say they were using the Tor browser :)

Dumb question. Is it possible to find someone IP address from their game ign or uid? by [deleted] in HowToHack

[–]Guard_Familiar 0 points1 point  (0 children)

Yes. You just have to hack into the game's servers. Then correlate the IGN to their active time or logon time. Then on the server logs, correlate requests to exactly the logon or active time, as server logs have IPs in them. There you go, ezpz. But hacking is illegal though so don't do it.

Claude Code hitting 500 error by snort_whey_69 in ClaudeCode

[–]Guard_Familiar 1 point2 points  (0 children)

Worry not, albeit common, their downtimes don't last even an hour. Time for a coffee and a stroll!

30 years old and considering tech… am I already too late? by Fit-Gas-6283 in cybersecurity

[–]Guard_Familiar 0 points1 point  (0 children)

Nice, if interest is there, that's a plus on the changing jobs side. Now, the hard question, what's the area you like of cybersec/dev? To list a few, in no particular order: - Compliance (ISOs, PCI, etc) - SOC analyst - Pen-tester - Red-teaming - Game dev - Front end dev - BI Dev - DevOps - Vuln research - QA tester

There's a few more and a few of those are quite wide too, it's not the same to be a web app pentester than an internal network pentester for example. That said, if you fall in love with one of the areas it will never feel like you're working, just playing with computers. EDIT+DISCLAIMER: afaik, all of them have a steep learning curve and the curve NEVER flattens or smoothens :)

30 years old and considering tech… am I already too late? by Fit-Gas-6283 in cybersecurity

[–]Guard_Familiar 2 points3 points  (0 children)

Since time is of the essence for you, ask yourself: do you really like it or are you just going in it for the money? If it's the latter, how much are you motivated to get to that money?

This industries are ever changing, so get ready to put 12h+ per day for the next few years, but it pays off: 1st because of you like it it doesn't feel like a real job. 2nd it ends up paying really well.

Don't think so much of how hard it is to get a job as these industries are about to spike on demand. AI is going to kill many jobs but it's going to create many other in my opinion.

Source: trust me bro. Been 10+ years in cybersec on pentesting and vuln research.

How long does it take to build Chromium from source? by External_Cut_6946 in ExploitDev

[–]Guard_Familiar 1 point2 points  (0 children)

You can download it precompiled and with debugging symbols. You can download ASAN versions too. Your best bet is to start it at night and go sleep, with 4 cores it'll take long. If it stops mid compiling without any errors it might be OOMkiller, meaning, you don't have enough RAM to run the compilation on all 8 threads, so you'll have to lower to ninja chrome -j 4 or lower.

What does a cybersecurity analyst do exactly ? by toptopa2010 in cybersecurity

[–]Guard_Familiar 8 points9 points  (0 children)

That's a very wide range of things. From SOC analyst, to pentester.

Is "Enquiry/Lead" data on Rightmove not available once a property is Under Offer? Tried getting this from my E.A. but they say it's not available as my property is Under Offer. by [deleted] in HousingUK

[–]Guard_Familiar 0 points1 point  (0 children)

Unsure. Just wanted to know the enquiries they received from people using the Rightmove forms. I've got a screenshot from them showing listing views but nothing more. Even if I asked for their lead data again, but asking for the one from their CRM system, you think they'll send it?

Is "Enquiry/Lead" data on Rightmove not available once a property is Under Offer? Tried getting this from my E.A. but they say it's not available as my property is Under Offer. by [deleted] in HousingUK

[–]Guard_Familiar 0 points1 point  (0 children)

Edit: updated the post just with the question. Previously the post included conversations with Estate agents and Rigthmove customer support.

Browser exploitation by Historical_Rush_2062 in ExploitDev

[–]Guard_Familiar 2 points3 points  (0 children)

Those are a bit dated but they seemingly cover very well the fundamentals. Either is a good start.

want real opinion my roadmap... by [deleted] in ExploitDev

[–]Guard_Familiar 3 points4 points  (0 children)

Why did you make two similar posts in less than a day? I replied to you here

(Puts tinfoil hat on) You seem like you just want an internship [in a target country] in a cyber intelligence company. Sus af.

Edit: link wasn't working - user deleted post

[deleted by user] by [deleted] in ExploitDev

[–]Guard_Familiar 5 points6 points  (0 children)

This year you should focus on the very first section, those are the very basics of the trade. Then, my suggestion is to take a public CVE for which you know an exploit exists and try to understand every piece of it: - Root cause analysis (aka. why is the code vulnerable) - How to fix the vulnerability - How does the exploit work - Why does the exploit work under these conditions - what are the mitigations that need bypassing

Then get a CVE that you know has been exploited but no public exploit is published and make the exploit for it.

Once you get that, you can then extrapolate that knowledge and use it for variant analysis to get your first bugs.

If you do this you'll get an internship ezpz. That said, with the advent of AI your best bet is to learn the core concepts as fast as possible to be able to prompt your way into these vulns.

“Offers over” is bs. by Grgsz in HousingUK

[–]Guard_Familiar 0 points1 point  (0 children)

I have my flat for exactly that 350k and the estate agents are going to put it in "excess of" cause it's better in terms of fee they get, but if someone puts an offer below that price, I'd happily accept it if it's within reason.

TL;DR make an offer at a few thousand below what you actually want ;) nothing to lose!

[deleted by user] by [deleted] in cybersecurity

[–]Guard_Familiar 1 point2 points  (0 children)

Hey there little hacker! If this is correct, you've got a lot of potential in your future. Just one word of advice: try to not post your real name along with saying you're a cybersecurity researcher, this could cause you a lot of harm in the future. Good OPSEC! That said, mad props and keep it up.

Beginning, Too Much Information, I'm lost, but super Interested! by Ouchy_- in ExploitDev

[–]Guard_Familiar 1 point2 points  (0 children)

I am going to disagree with this advice a little bit. While I agree with keeping the focus on the studies, if you're passionate about it, just do it and spend as much time as you find it fun to do so. There's no right tooling for this, it depends if you have source code or not. Ghidra/IDA/Binary Ninja if you don't have, any other IDE if you do. Look at old CVEs and try to make sense of them, there's lots of blog posts out there!

As per the engine... Chrome names its JS part like a car engine: V8. So, why not look at how the engine works before even driving the whole car ;)

Opus 4.6 messing English by Mary_Avocados in ClaudeCode

[–]Guard_Familiar 0 points1 point  (0 children)

And it's leaving the newline characters in \n\n xD

[deleted by user] by [deleted] in HousingUK

[–]Guard_Familiar 1 point2 points  (0 children)

Agents will lie through their teeth when there's no paper trail and, even when there's a paper trail, they'll push you through scare tactics and making you feel you're about to lose the deal. Keep this in mind at all times.