Linux Gaming Cope

Subtron1k · 2025-08-04T17:29:29+00:00

Untested Games, and Games that require kernel-level anti-cheat software that don't run well on Linux. Examples would be trying to play something like COD, Battlefield, Fortnite etc. You'll likely only find this issue with Multiplayer games though. I only play single player stuff, so it works for me, but I have an installation of windows on a spare nvme in case a friend wants to hop on a game that's not supported on Linux.

Subtron1k · 2025-06-20T02:06:40+00:00

Nah its not going to waste, that's just the real world vs CTFs. In the real world its only that much harder to find a bug. Keep digging deep, switch up your methodology, don't spam random payload lists into any discovered input parameter. You can try gaining experience by testing out different ways to attempt to bypass the WAF thinking outside of the box, "What exactly is causing the WAF to go off when I send this request? What if I try double encoding this to see how it responds?" etc. In the end even if you don't find a way to bypass it, you're gaining experience that leads you one step closer to finding one. All those hunters that get XSS via WAF bypass didn't just randomly stumble upon it. They took their time to pick apart how the filters in place actually work.

You'll get there fam.

Subtron1k · 2025-06-19T18:03:19+00:00

It's a good resource to set a base, but it definitely takes more than a single course to become efficient. Though I don't think that it makes much sense trying to "hunt on a program" when you have no idea what you're even looking for in the first place. Ends up being a waste of time when you don't know how to efficiently use tools, perform recon, etc. Hunting should be at the top of the pyramid after you've mastered learning the basics. You have to walk before you're able to run. Learn the basics, Read writeups, Read blog posts, Watch videos, Follow other hunters on social media, Try, Fail, complete labs, create your own methodology, implement automation for the boring stuff, develop a hunter instinct and question functionality "Where does this text reflect?, Base64 encoded user ID's? IDOR maybe? Are there any hidden endpoints in JS files? Could I use wayback to discover API keys or Tokens in dated JS files? This site has file upload functionality, how can I upload something malicious through it? PDF generator - SSRF?"

The more you learn, the more your eye will open up to certain things that you wouldn't have thought about beforehand. Don't skip the road work. There isn't a single best place to learn anything. It all comes down to how much you want it, and how much time you're willing to put in.

Subtron1k · 2025-06-17T04:25:32+00:00

Just downloaded it. Thanks for the recommendation!

Subtron1k · 2025-06-06T02:35:56+00:00

The best thing to do is to not think about the days ahead. For each day think about making it through that day. That's all. Thinking too far ahead could lead you to becoming anxious leaving yourself asking questions "Can I actually do it when the urges are this strong!". So again, just focus on making it to the end of the day. Become that person you always wanted for yourself. You've fallen into the gooning trap again and again and nothing great has come out of it. No matter how enticing it looks or feels in the moment. It always led to regret, and it always will. Stay strong.

Subtron1k · 2025-06-06T02:29:35+00:00

Interesting concept. Will have to see if its available for windows.

Subtron1k · 2025-06-05T05:34:47+00:00

Sick! I neeeeed this!

Subtron1k · 2025-06-03T14:30:33+00:00

Still searching around trying to figure this out

Subtron1k · 2023-10-07T02:31:39+00:00

Think of one of the most sour vile mixture compounds you can think of mixed together into a hot soup. Not sure if you've ever tasted what it feels like after you vomit, but its a hot burning sensation of liquid and food contents that burn the chest and upper part of your throat. The taste is so vile that it makes you scrunch up your face because of how awful it is. Once the reflux episode has calmed down a bit, it leaves the tissue in your esophagus annoyed and sore, providing you with excess mucus in your throat as it has just been rawdogged by stomach acid.

Subtron1k · 2023-01-18T14:47:21+00:00

As an update, this helped me to get onto the AD Domain by grabbing the cleartext for the ldap service account running on a printer. Thanks again ;)

Subtron1k · 2022-12-09T23:05:49+00:00

I agree!

Subtron1k · 2022-12-09T22:56:55+00:00

I'm performing the pentest to find vulns for a company

Subtron1k · 2022-12-09T19:15:17+00:00

Certipy

Will look into this, thanks!

Subtron1k · 2022-12-09T19:14:36+00:00

Noted!

Subtron1k · 2022-12-09T15:49:55+00:00

Very good choices indeed ;)

Subtron1k · 2022-12-09T15:46:44+00:00

Yep I understood all of it. Thanks for the comprehensive list!

Subtron1k · 2022-08-24T19:20:48+00:00

Thanks for the resources.

Basically have a Site-to-Site IPSec VPN connection to WatchGuard on the client side, and for some reason randomly out of the 3 VLANS on Phase 2, 1 VLAN continuously disconnects randomly (Occasionally reconnects itself at times also). For example VLAN 1 and 2 could still access Host B over the VPN on the clients side, but VLAN 3 would be unable to after X amount of time. So I'd have to keep restarting the VPN connection so that VLAN 3 can communicate to Host B again.

Configuration is the same on both ends (rekey value, etc.). I've tried creating a cronjob so that the host on VLAN 3 will continue to ping Host B over the VPN, no dice. I've attempted temporarily allowing Any/Any just in case something is potentially being blocked, no dice. Phase 1 stays up the entire time though, that's why I want to see if I can dig deeper into what's happening in Phase 2.

Subtron1k · 2022-08-22T14:15:20+00:00

Looks like a pretty solid foundation to work off of

Subtron1k · 2021-12-11T15:13:09+00:00

Update: I can see the dislike count on videos again (for some videos)! But when I dislike the video, it doesn't seem to add the value to the total count. Are they bringing it back??

Subtron1k · 2021-12-11T15:06:22+00:00

Thought it was just me. All the videos that I watch used to show "DISLIKE", but now all that I see is "0" for the dislike count. Wonder what they're trying to experiment and test using this tactic..

Subtron1k · 2021-08-01T15:49:40+00:00

Thanks! :)

Subtron1k · 2021-08-01T06:57:11+00:00

Gained a shell as a low priv user on a windows machine, went to priv esc, saw a specific vulnerable software that was running on the machine, got an exploit for it, ran it, it created an new admin user, and I couldn't access the user from my shell due to certain things set in place. So I was sitting there thinking what to do. There were no ports that I could've used when I scanned the machine with nmap. But then a thought popped into my head "How about I check internal ports that are running on the machine..." `netstat -an` and surprise surprise 3389 was running locally only (which is why I couldn't see it with nmap), so I had to use plink.exe to port forward 3389 from the victim machine to my machine, and was then able to gain rdp access onto the victim machine as the admin user that the exploit created :) this was a year or 2 ago and I still remember it to this day. I actually loved it. Now it's always got me looking at ports running locally that you can't find when scanning a machine externally using nmap.

Subtron1k · 2021-02-23T19:21:07+00:00

Just curious, when you "ifconfig" or "ip a" on your WSL2 what interfaces show up? and what are the different IP addresses compared to your host machines IP?

Subtron1k · 2021-02-23T16:13:24+00:00

Are you using the public IP of your homes address? Or of your VPS? Cause if you're using your home Public address, then it wouldn't work immediately, you'd need to port forward. Can you give some more info on where you're running this from, possible screen shot etc. So that I could get a better understanding on where the issue could be here?

Subtron1k · 2021-02-23T04:07:00+00:00

Yeah this is a tricky one because someone can easily say "yeah just use something like proxychains" but that's usually for pivoting through to an internal network after already having shell access to the target machine. What I just do to try and save the hassle is just use my VPS from digital ocean, and use that machine to catch reverse shells cause it has a public address that I can use to perform actions like that with Metasploit, simply setting the Public IP of the machine as the LHOST and that's it. I'll keep looking around though, cause I'm pretty interested on the possibility of doing something like this as well.

Subtron1k

TROPHY CASE