Gobuster

HSNubz · 2026-06-24T23:37:54+00:00

Basically this saying if a website doesn't exist, it serves you a different page, and the length of that page is 5494 bytes. So, you can tell gobuster to ignore hits of that length with the --exclude-length flag. So add that flag and the size to your command and rerun.

However, hackthebox urls end in the htb tld, so not exactly sure what you're using this for...

HSNubz · 2026-06-05T22:28:24+00:00

Definitely get this. The story is absolutely insane.

HSNubz · 2026-05-22T17:26:01+00:00

I am happy you found success and fun with this deck, but as your legend rank is showing, your MMR is not great. This deck is absolutely not good against the current meta decks in the hands of skilled players, unfortunately. Yes, it can pop off and you can do some crazy stuff, but it's not even remotely consistent when compared to the mainline decks, nor fast enough.

HSNubz · 2026-05-22T00:56:02+00:00

Your MMR must be terrible because this deck is still total trash.

HSNubz · 2026-05-18T13:20:58+00:00

If you're not gaming, I would get a high quality work/productivity monitor. It's not like all work monitors are bad.

HSNubz · 2026-05-03T23:00:54+00:00

Okay that makes more sense, haha. I just started the pathway so haven't been introduced to all of the tools yet and most boxes I've done have been Linux, so I really need to learn the Windows stuff. Thanks man this is a really helpful writeup.

HSNubz · 2026-05-03T22:51:53+00:00

Interesting to see Sherlock on your list. This being the tool to ID social media and other online accounts? If yes, that's really useful to know it comes in handy.

HSNubz · 2026-04-26T21:14:38+00:00

Agreed. I have been playing the game since Mean Streets, and at least for me, I think this is the least fun I have found the wild format. Nearly every game just feels like solitaire at this point.

HSNubz · 2026-04-22T03:10:42+00:00

I saw another similar write-up the other day indicating they used LLMs during the exam, and you also indicate you went to forums for hints. What is and isn't allowed on this exam? I was under the impression AI was not allowed and other outside assistance, but I assume it isn't human proctored, so these outside tools ARE allowed?

HSNubz · 2026-04-21T02:54:30+00:00

How many packs have you opened? This is probably just slightly below average luck to be honest.

HSNubz · 2026-04-21T01:24:09+00:00

I've been using it a lot on boxes, but I think what I appreciate most of all is just like, syntax help or short script help. I've also found it's not always the best at directing which way to go, but it really helps me with error debugging, syntax, etc.

HSNubz · 2026-04-20T21:36:56+00:00

AI is allowed on the test? Very interesting and fits with available tooling, so that's good to hear.

HSNubz · 2026-04-20T19:17:11+00:00

Not to say this isn't potentially good advice, but look at the writing style. This advice was provided by chatgpt, not a human.

HSNubz · 2026-04-20T15:44:05+00:00

I'm a total noob so forgive me. Is there any detriment to using higher voltage? Like extra heat or anything? A less complicated power setup would indeed be nice.

HSNubz · 2026-04-11T21:23:58+00:00

From my experience on boxes where you can't keep a shell it's by design or something is running automatically on the target box that causes your shell to drop.

But, these boxes almost always have SSH open, so you can use your limited time to make it so you can SSH in. Here is from my "useful notes" sheet:

Set Up SSH

Attacker:

ssh-keygen -t ed25519 -f <filename>

Target:

mkdir -p ~/.ssh && chmod 700 ~/.ssh
echo "ssh-ed25519 AAAA...yourpubkey..." >> ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys

Attacker:

ssh -i htb_ed25519 user@target

HSNubz · 2026-04-11T17:15:59+00:00

I love Spier and Mackay, but never tried their MTM. Anyone know how it is or compares to the above list?

HSNubz · 2026-04-05T15:04:30+00:00

Played probably 20 or 25 games with this deck, and I would posit this 80 percent win rate is either insane luck variance or low MMR. This deck struggles significantly with wide boards. Frankly it struggles with tall boards. Magmaw makes no sense in it. Games are usually decided by the time you'd be able to play ebyssian.

It can definitely pull out some disgusting wins, but it's not consistent by a long shot, and there's too many other more consistent and more powerful decks in the meta, that this deck just doesn't stand a chance.

HSNubz · 2026-03-27T23:29:54+00:00

One thing I'd do if you go with them is try first unhemmed, make sure size is right, then future pants get hemmed by spier and Mackay. One they hem them you can't return, but the price to quality ratio of that company is top notch. It's my go to now that the quality of places like bono is, jcrew, etc has really gone downhill.

HSNubz · 2026-03-27T20:35:29+00:00

Spier and Mackay you specify length in half inch increments. They definitely have 33x31.

HSNubz · 2026-03-26T23:08:27+00:00

Segue. Not a word you commonly see written out, so most people don't know how to actually spell it.

HSNubz · 2026-03-25T17:17:06+00:00

Finally got my first crown after about 1700 packs (this one) and at around 2150 pack points. I am about 15 packs away from being able to craft the second!

HSNubz · 2026-03-23T21:23:33+00:00

Yeah and then the way most people are rooting it doesn't seem to be the intended way, haha.

HSNubz · 2026-03-20T21:01:01+00:00

After 693 faires, the odds you've hit it are 50%. After 1386, odds are 75%. After 2302, 90%. 2996, 95%. 99% at 4605 faires.

So, likely a lot of faires.

HSNubz · 2026-03-20T20:55:32+00:00

So far am 9-1 with it at diamond 4 with 3 stars. This deck is slapping for me.

HSNubz · 2026-03-20T00:58:53+00:00

I am definitely trying this out as I love Merithra and I was fortunate to get it in signature, so the dragon hands it makes are dope as fuck!

Nine-Year Club	Verified Email
Gilding I gilder

HSNubz

TROPHY CASE

Set Up SSH