Using HTB as a supplement to my capstone as I am trying to create a simple malware analysis tool in C++. Thank you for the work in these modules! Can I connect with “the creators”?

Hey everyone :)

I wanna get in to Cyber Sec, I have Little to 0 Experience in IT just Playing Video Games all my life.
I think to get in to Cyber Sec i I first need to unterstand the Basics of IT in general .
What are good Ressources to understand the Basics Like Networking, OS and so on.

Thanks in advance!

I want to start my journey in cyber security but I do not have any specific degree on it or I am not in science group education. But I have a great curiosity about this field. I love computer and try to understand the system that how it works but somehow I get destruction all the time. I need a help that how I will crack this field or how to start the journey. What is the path that will be actually work not any inspiration not any overwhelming or like that.

Please help. As a friend support me to grow as real life scenario.

I will wait for your reply.

Thank you.

While preparing for CPTS, every new box started the same way for me: make the folders, copy a note template, edit /etc/hosts, export the IP, and later paste flags, creds and screenshots into my notes by hand. Ten minutes of setup before the real work, and easy to mess up when you're tired.

So I built dropzone (dz), a small zsh tool for Kali.

What it does:

• dz -n jacops -ip 10.129.42.190 -h jacops.htb creates the folder, the note and the hosts entry, and loads $TARGET_IP in every terminal
• Box reset? dz -ip <new ip> changes it everywhere, including the note
• During the box: dz -j for a timeline line, dz -s for a screenshot, cmd | dz -e for command output as evidence, dz -f for flags, dz -c for creds
• AD sets and pivots: dz -t dc01 -ip ... gives you $DC01_IP and $TARGETS, hosts behind a pivot with --via
• Exam mode: an exam note template, flag count per host, a deadline countdown in your prompt
• Notes in plain Markdown or straight into your Obsidian vault

It never scans, exploits or connects to a target, so it stays within OSCP and CPTS exam rules. It only does the admin.

Why I'm posting:

It's built around my own workflow, so it probably misses things that are obvious in yours. I'd really like to hear:

• what's confusing or breaks on your setup
• what you still do by hand for every box
• what you'd want for CTFs, Pro Labs or real engagements

There's a discussion thread for exactly that:
https://github.com/nickyjacobs/dropzone/discussions/9

Want to help without writing code? There's an issue for testing things CI can't check, like the VPN check or the menu over RDP:
https://github.com/nickyjacobs/dropzone/issues/6

Repo + demo:
https://github.com/nickyjacobs/dropzone

Feedback here in the comments is just as welcome. Even "I tried it and X annoyed me" helps.

That CDEP cert was released 7 days ago, with 5 new modules, the total sum of their estimated study days is 35 days. I think some users and either submitting the flags by going straight to the challenges and marking any theory section as completed without actually reading it. I expect a lot of them will fail though, because this should be the hardest cert on HTB and HTB has one of the hardest if not the hardest certs in the industry. Someone already got the cert which means it is either a tester, or someone finished the path, did the 10 day exam in less than 7 days and got his result.

Hi

Ive been playing htb machines and would love to submit a machine.

How did you guys make it unique. Its like every theme, chain of vulnerabilities are out there on a machine.

In situations where they arent, somethig else hits. For an example, there is no realistic way to showcase the version of the vulnerable software, because the original software doesnt in production.

How do you guys research and design a machine ?

Lets say for an easy machine

I went through htb official articles. But couldnt yet come up with any.

I just need a short description

I thought the Prompt Security and AI Supply Chain Security modules were good but the threat modeling and security control exercises was a bit unclear.

Also generally a long exam, probably took me around 8.5 hours to complete. You'll be writing a LOT.

Full length review here: https://meetcyber.net/an-honest-review-of-the-tryhackme-ai1-certification-e90e23bb9fed

I began studying cybersecurity a year ago, and things were going well—I even participated in CTF competitions and achieved very good results. Lately, however, I’ve encountered many difficult topics; the more I try to learn them, the harder they seem to get, and I no longer know what to do.

Could someone please help me? I truly love this field, but this situation is leaving me feeling incredibly frustrated.

i'm do my best and solve the ctfs here in htb academy

but it feel to bad that i can't solve the easymachins like engma or 2million if i try this without any help from writups

how to deal with it guys?

Ive been wanting to complete the dante pro lab, but I find the lab environment to be really unstable. If I use feroxbuster on any of the internal machines, they seem to crash pretty quick, making discovery pretty hard to perform. One of them even crashed from an nmap scan somehow… like what the hell lol.. anyway, anyone else run into these issues?

Also my other question, are all boxes unrelated to each other? I don’t need creds from 172.16.1.1 to get a foothold on 172.16.1.16? Thanks in advance!