[Phizo]

EDIT:
So, I’ve had quite a lot of offers, three of which seemed worthwhile. One PM’d me twice and then dropped off after my second reply (hasn't responded for a while despite being online/active), another hit me up on XMPP but haven’t heard anything since, the other being on-site and the only one I’ve taken up: Sui Generis (cheers Tyler).

Due to this, I may just spin something up of my own off-site (while still being a part of Sui Generis).
PM me if you meet the requirements. I’d appreciate it if you don’t PM me otherwise, as I do not want my time wasted. A degree in Computer Science or equivalent would be much preferred. If you cheated your way through university, and therefore cannot prove yourself; again, please don’t waste my time.

---

Please note this is not about bragging; I'm seriously looking for some cool individuals to hang with.
Also note that I'm not necessarily suggesting that I'm forming the crew and inviting others in. I'm either looking for an existing crew or forming one.

As can be observed on my profile, I've been here since February '09. I've seen a lot of groups/crews but nothing of immediate interest. I haven't frequented these forums in quite some time due to the lack of intriguing content. However, I'll be on to scout for anything of interest for the next couple weeks to see if there's anything interesting to reply to and to check for responses to this thread; for the past couple years or so, mostly I come online just to answer others' enquiries through random threads and received PMs.

Requirements

1. No skids.
   
2. Proficiency in at least one area per person related to hacking (but preferably several areas each) with a continued curiosity/development in general.
   
3. A degree in Computer Science or equivalent would be much preferred.
   

My own experience and knowledge can be observed in my threads and posts. However, I will demonstrate some of my experience below.

Introduction
I have a degree in computer science (among others) and have since been working as a security consultant/penetration tester. I majored in digital systems security and finished with a distinction. I was also invited/added to an honours society for being (anywhere) within the top 15% of computer science studies in the state. I have a fair amount of programming and general computer science and security experience.

From a testing standpoint, I have decent experience with web-apps, web services (e.g., APIs), mobile-apps, internal/external infrastructures, wireless, VoIP (e.g., RTP/SIP/H.323 attacks, VLAN hopping, eavesdropping, spoofing, etc.), cloud and virtualisation, social engineering, source code review, etc. Also more specialised testing such as reverse engineering, cryptanalysis and general cryptography/cryptanalysis knowledge, (zero-day) exploit development (of various layers), red-teaming, etc. Note that this is not an exhaustive list.

Examples of programming experience
Within the past few years, I have demonstrated fluency in the following programming languages:

1. Assembly (x86/x86-64)
   
2. C
   
3. C++
   
4. Java
   
5. Fortran
   
6. Lisp
   
7. Prolog
   
8. Haskell
   
9. Ruby
   
10. Python
    
11. PHP
    
12. JavaScript
    
13. XML (including XQuery and XPath)
    
14. HTML
    
15. CSS
    

Note that this is not exhaustive; I have worked in many other languages. This is simply what I've worked with during the past few years. I have been programming for a very long time.

I am also very familiar with the following programming paradigms:

1. Imperative
   
2. Object-oriented
   
3. Declarative: functional and logic
   
4. Literate
   

I have no problem proving that I am fluent in any of the above (or otherwise).
I'm pedantic when it comes to the quality of code and have worked on plenty of complex projects - hacking/security-related and otherwise.

I will mention a few projects, challenges, etc., I've involved myself in to demonstrate knowledge/experience.

• Currently working through set 5/8 of Matasano's cryptography challenges (now NCC Group). Let me know if you want to see some code.
  
• GNU/Linux rootkit (see below for more info). Let me know if you want to see some code.
  
• Participate in modern binary exploitation labs/challenges such as RPISEC MBE, STS, OTW, etc.
  
• Developed a PHP shell back in 2011 which bypassed Suhosin-protected environments among other (unique) features (and was better than Fuhosin).
  

To give an idea regarding the rootkit: it is a highly-dynamic GNU/Linux user-land (ring 3) LD_PRELOAD rootkit written in C (at its core) in the sense that the code will modify itself at both compile-time and run-time (one example being that it will determine hooks and correlating shared objects, macros, etc., and populate its arrays at run-time). It is not publicly available, as it includes functionality not typically found in public rootkits. In addition to the aforementioned, disclosable features include anti-detection/forensics/debugging via reverse engineering of the Linux dynamic linker (ld.so) and developing a patch for it, hiding relevant memory mappings from /proc/pid/maps, hooking libdl.so functions (most importantly dlsym() to hide the addresses of the interposed symbols by returning the address of the “real” symbols), file/user/process-hiding via shared library function hooking/interposition (primarily libc.so - the C library as a shared object), PAM hooks for /bin/su local privilege escalation (to root; uid=0) and to self-authenticate SSH connections as root (via port-knocking over a random set of ports under a user-defined login name correlating with PAM hooks), on-the-fly creation and destruction of hidden LXC container environments, etc. The general anti-detection will fool even smart sysadmins and typical detections tools such as rkhunter/chrootkit/etc.

Note that this is not a fork of Jynx2/Azazel/Umbreon or otherwise, as they're, quite frankly, are awful and the developer's know nothing about C.
I know the developers. They're admittedly not good at working at such a low-level and programming in general (at least at the time). Sue me.

I am also developing a fully-weaponised Linux C2 / post-exploitation agent (Listeners, Stagers, Modules, etc.), as there are already many dedicated to Windows (however, I'll incorporate functionality to allow for Windows targets down the track). It will be, as it's name suggests (redacted), very focused on being weaponised while efficiently evading IPS/IDS/AV/etc., incorporating malware-evasive techniques, and tunnelling connections and transactions non-suspiciously in a seemingly-legitimate fashion. It will have some neat features such as in-memory ELF binary execution to prevent touching disk and other types of way of executing native code (perhaps equivalent things to process hollowing and doppleganging on Windows). It has an adjustable beacon interval, which can also be randomised each time to seem like requests are even more legitimate, for each target among other things, so infected clients will check the C2 server every so often for tasks in the queue commanded via HTTP or DNS (typically - to look legit; however, other protocols also exist). TLS for end-to-end encryption so NIDSs and such won’t flag packets based on the payload or strange TCP/IP streams in general; e.g., the aggregated payload data of sequenced packets and/or unusual data in the headers of each individually or aggregated [signifying data like magic bytes or configuration of TCP flags to distinguish C2 related traffic from the rest]. It’ll be pretty dynamic. For instance, the colour scheme (and theme in general), among other settings, can be overloaded with a YAML config file. Also modules/payloads are grouped and ranked according to things like cleverness, portability, etc. They're listed in an ASCII-drawn table noting those attributes. Just a few things. Not going over everything.

PHP Code


<?php 
...
drwxr-xr-x  5 phizo  staff  160  4 Feb 10:09 Clever
drwxr-xr-x  4 phizo  staff  128  4 Feb 10:09 Common
drwxr-xr-x  3 phizo  staff   96  4 Feb 10:09 Common (Easily Identified)
drwxr-xr-x  4 phizo  staff  128  4 Feb 10:09 Less Common
... 


I may even mix this and the rootkit to develop a more powerful C2 where itself and the rootkit are either entirely codependent or, more likely, independent with a compatibility layer in the rootkit that provides an interface (abstracting Local IPC) with which it (the rootkit) and the C2 can interact to combine functionality both automatically (dynamically event-driven and such) as well as in response to defined commands issued through the rootkit's interface to further aid in fulfilling each others' individual purposes (which have a strong overlap on a subset of their given functions).

Both are well into development; I'm not just rambling. In any case, if there are any decent individuals out there, give me a shout.

EDIT: I actually got a PM because someone was interested in the fact I'm acquainted with Prolog. I thought I may as well quote this set theory math challenge I did in Prolog a while back (also incorporated asymptotic computational complexity theory and other math).

2 ez tbh imo etc et al. :\

I decided to solve it mostly using first-order predicate calculus, computationally in Prolog, which I did follow up with some handwork.



Here is an illustration of the program that computes all solutions in P([0, 5]), where P is a function which maps a given set into a powerset (the set of all subsets):

PHP Code


<?php 
| ?- [n0sya].                            
compiling /private/tmp/n0sya.pl for byte code...
/private/tmp/n0sya.pl compiled, 21 lines read - 3838 bytes written, 6 ms

(1 ms) yes
| ?- make_list(0, 5, L), maplist(go, L). 

Reduced powerset: [[0],[]]
Number of subsets: 2

Reduced powerset: [[0,1],[1],[],[0]]
Number of subsets: 4

Reduced powerset: [[1,2],[2],[],[1],[0],[0,1]]
Number of subsets: 6

Reduced powerset: [[2,3],[3],[],[2],[1],[1,2],[0,3],[0],[0,1]]
Number of subsets: 9

Reduced powerset: [[3,4],[4],[],[3],[2],[2,3],[1,4],[1],[1,2],[0,3,4],[0,4],[0],[0,3],[0,1,4],[0,1]]
Number of subsets: 15

Reduced powerset: [[4,5],[5],[],[4],[3],[3,4],[2,5],[2],[2,3],[1,4,5],[1,5],[1],[1,4],[1,2,5],[1,2],[0,4,5],[0,5],[0],[0,4],[0,3],[0,3,4],[0,1,4,5],[0,1,5],[0,1],[0,1,4]]
Number of subsets: 25 


It can solve for:

• [0, 10] in ~7ms.
  
• [0, 15] in ~179ms
  
• [0, 20] in ~6 seconds
  
• [0, 21] in ~12 seconds
  
• [0, 22] in ~24 seconds
  
• [0, 24] in ~1.9 minutes
  
• [0, 25] in ~3.47 minutes
  
• [0, 26] in ~6.8 minutes
  

As you may notice, an increment in set cardinality causes an increase in computational time by a factor of ~2.09 on average, which can be represented functionally by t(f(n+k)) = t(f(n)) 2.09^k, where t is a function that measures computational time and f = go (my top-level Prolog predicate).

That is, the running time is O(2^n) (exponential with a linear exponent), which is fairly inefficient. Note that Prolog (and logic programming in general) is not concerned with runtime efficiency: the declarative paradigm promotes theorem-proving, and consequently program correctness, to programmers and proof procedures, which are often computationally expensive.

As it is such a computationally complex problem, I cannot practically compute the solution for the set [0, 31], as it will take t(f(31)) ~ t(f(26)) 2.09^5 = ~4.5 hours.
So, I will compute the rest of the solution by hand. :)

Allow P to represent the powerset and f = go (my top-level Prolog predicate). I analyse f with the intent of finding a pattern such that I can conceptually derive solutions for any x in f(x).

I worked backwards in order to determine a pattern and define the necessary base conditions. I layed out f(x) = y such that 0 <= x <= 11.
Quite clearly, f is akin to the Fibonacci function, but with a seperate rule for odd numbers in its domain.

1. n is even => f(n) = f(n-1) + f(n-2)
   
2. n is odd   => f(n) = f(n-1) + f(n-3) + f(n-4)
   

Code

f(0) = 2 = f(-1) + f(-1)
f(1) = 4 = f(0) + f(-1) + (f-1)

f(2) = 6 = f(1) + f(0)
f(3) = 9 = f(2) + f(0) + f(-1)

f(4) = 15 = f(3) + f(2)
f(5) = 25 = f(4) + f(2) + f(1)

f(6) = 40 = f(5) + f(4)
f(7) = 64 = f(6) + f(4) + f(3)

f(8) = 104 = f(7) + f(6)
f(9) = 169 = f(8) + f(6) + f(5)

f(10) = 273 = f(9) + f(8)
f(11) = 441 = f(10) + f(8) + f(7)

These are the base cases I subsequently defined:

Code

P({}) = {{}}
f(-1) = 1 = |P({})|

The time has come. What is f(31)? A Husaid would never fugg know a thing of this. :/ jaz0r 🤭

Code

f(31) = f(30) + f(28) + f(27)
       = [f(29) + f(28)] + [f(27) + f(26)] + [f(26) + f(24) + f(23)]
       = [f(29) + f(28)] + [f(27) + 602070] + [602070 + 229970 + 142129]
       = [f(29) + f(28)] + [974169 + 602070] + 974169
       = [f(29) + 1576239] + 1576239 + 974169
       = [[f(28) + f(26) + f(25)] + 1576239] + 1576239 + 974169
       = [[1576239 + 602070 + 372100] + 1576239] + 1576239 + 974169
       = 6677056

Hence, f(31) = 6677056. That'll be $10. Cheers and thanks.

[Mad76e.]

Requirements
No skids, proficiency in at least one area per person (but preferably several areas each) relating to hacking, and a continued curiosity/development in this field. My own experience and knowledge can be observed in my threads and posts. However, I will demonstrate some of my experience below.

.....

Im sorry.. No skids That wont be happening in HF. Those guys that did everything by themselves, programming their own tools etc and hacked the planet are long gone by now, or just not interested to participate in groups. Most of them banned since long due to have been a pain in Omnis hiney. The majority of the guys in HF uses tools who in various ways are written by others, Its simply stupid to re-invent the wheel over and over. If youre looking for specialists you are in the wrong forum. This forum is full with know-hows, skids, plebs, wannabies and researchers in various degrees. Some are here for the money, some are here for friends, and some to start to learn. HF is "preschool of hacking" not the actual "high school of hacking.

There are no idea to post deep analysis of hacking or do tutorials down to packet level in the analysis because no one will appreciate them, or even comment on them because they dont understand it. It has been done before you know..

Some of us have certs, some have not, but a common rule is that we dont brag about em. I can guarantee that no group in HF will treat you fair if you posts things like this.

Look around in this SF perhaps you find a thread youre interested in

[Phizo]

Im sorry..  No skids That wont be happening in HF.  Those guys that did everything by themselves, programming their own tools etc and hacked the planet are long gone by now, or just not interested to participate in groups. Most of them banned since long due to have been a pain in Omnis hiney. The majority of the guys in HF uses tools who in various ways are written by others, Its simply stupid to re-invent the wheel over and over. If youre looking for specialists you are in the wrong forum. This forum is full with know-hows, skids, plebs, wannabies and researchers in various degrees. Some are here for the money, some are here for friends, and some to start to learn. HF is "preschool of hacking" not the actual "high school of hacking.

There are no idea to post deep analysis of hacking or do tutorials down to packet level in the analysis because no one will appreciate them, or even comment on them because they dont understand it. It has been done before you know..

Some of us have certs, some have not, but a common rule is that we dont brag about em. I can guarantee that no group in HF will treat you fair if you posts things like this.

Look around in this SF perhaps you find a thread youre interested in

I've been here since the beginning of 2009; according to your profile, you've been here for a little over a month. Yet you're filling me in on the obvious fact that this forum is full of skids. Obviously, I'm quite aware of that, presumably far more than you. I was in root from the beginning, I knew several people from HTP and was even part of a spin-off group lead by SF. You seem to presume after all these years I was never part of the scene or even this forum. I've watched this forum progress since 2009; and yes, I agree, it's terrible now. It peaked in quality around 2013. This is the #1 skid community. I don't entirely expect an ideal response to be generated from this thread, but it is at least worth a try. Why would I bother browsing the sub-forum where skids are declaring invitations to their lame groups? That is counter-productive. I have a much higher probability of either receiving a decent response from non-skids or receive no worthwhile response at all posting this thread. Chasing skiddie groups via the sub-forum is a waste of my time. As long as it's not a waste of my time, nothing is lost. This is undoubtedly the best way. "I can guarantee that no group on HF will treat you fair if you post things like this." So, I should just ask to join a group without presenting knowledge and experience? Moreover, I mentioned at the beginning this is not about bragging but to not waste the time of myself and anyone else who is not a skid (and believe it or not, there exists a minority of people who are not skids - I've met a few over time). You're not making much sense. Nevertheless, thanks for your input.

[imaretard]

This thread is a joke right?

To give an idea regarding the rootkit: it is a highly-dynamic GNU/Linux user-land (ring 3) LD_PRELOAD rootkit written in C (at its core) in the sense that the code will modify itself at both compile-time and run-time (one example being that it will determine hooks and correlating shared objects, macros, etc., and populate its arrays at run-time). It is not publicly available, as it includes functionality not typically found in public rootkits. In addition to the aforementioned, disclosable features include anti-detection/forensics/debugging via reverse engineering of the Linux dynamic linker (ld.so) and developing a patch for it, hiding relevant memory mappings from /proc/pid/maps, hooking libdl.so functions (most importantly dlsym() to hide the addresses of the interposed symbols by returning the address of the “real” symbols), file/user/process-hiding via shared library function hooking/interposition (primarily libc.so - the C library as a shared object), PAM hooks for /bin/su local privilege escalation (to root; uid=0) and to self-authenticate SSH connections as root (via port-knocking over a random set of ports under a user-defined login name correlating with PAM hooks), on-the-fly creation and destruction of hidden LXC container environments, etc. The general anti-detection will fool even smart sysadmins and typical detections tools such as rkhunter/chrootkit/etc.

Wow! You're so cool, you can sit and develop trivial rootkit software based on an open-source'd kernel. You're brilliant my man. Have you ever considered manipulating the VAD in such a way that you can map kernel memory into ring3 processes ? Therefore effectively hiding your data in memory ? hiding relevant memory mappings from /proc/pid/maps

Assembly (x86/x86-64)
C
C++
Java
Fortran
Lisp
Prolog
Haskell
Ruby
Python
PHP
JavaScript
XML (including XQuery and XPath)
HTML
CSS

You don't know assembly.
I doubt you're any proficient in C++.
You're probably decent at C.
The others are just byproducts of understanding the foundation of classes.

I am also developing a fully-weaponised Linux C2 / post-exploitation agent (Listeners, Stagers, Modules, etc.), as there are already many dedicated to Windows (however, I'll incorporate functionality to allow for Windows targets down the track). It will be, as it's name suggests (redacted), very focused on being weaponised while efficiently evading IPS/IDS/AV/etc., incorporating malware-evasive techniques, and tunnelling connections and transactions non-suspiciously in a seemingly-legitimate fashion. It will have some neat features such as in-memory ELF binary execution to prevent touching disk and other types of way of executing native code (perhaps equivalent things to process hollowing and doppleganging on Windows). It has an adjustable beacon interval, which can also be randomised each time to seem like requests are even more legitimate, for each target among other things, so infected clients will check the C2 server every so often for tasks in the queue commanded via HTTP or DNS (typically - to look legit; however, other protocols also exist). TLS for end-to-end encryption so NIDSs and such won’t flag packets based on the payload or strange TCP/IP streams in general; e.g., the aggregated payload data of sequenced packets and/or unusual data in the headers of each individually or aggregated [signifying data like magic bytes or configuration of TCP flags to distinguish C2 related traffic from the rest]. It’ll be pretty dynamic. For instance, the colour scheme (and theme in general), among other settings, can be overloaded with a YAML config file. Also modules/payloads are grouped and ranked according to things like cleverness, portability, etc. They're listed in an ASCII-drawn table noting those attributes. Just a few things. Not going over everything.

Sounds like shit. Most linux malware target IoT. These systems have well defined interfaces that allow you to control the device  I.E : NETLINK_CONNECTOR without ring0 interference.

Dynamically forking ELF isn't new. As long as you adhere to ELF, fix relocations (alternatively write position independent code), and use ptrace properly then your only issue is allocating memory for the process which can be handled by using an available codecave, or alternatively allocating memory through the kernel.

Terrible idea to use a plaintext C2, researchers will forfeit your C2 pretty quick.

via reverse engineering of the Linux dynamic linker (ld.so) and developing a patch for it, hiding relevant memory mappings from /proc/pid/maps, hooking libdl.so functions (most importantly dlsym() to hide the addresses of the interposed symbols by returning the address of the “real” symbols), file/user/process-hiding via shared library function hooking/interposition (primarily libc.so - the C library as a shared object)

The issue with this is that other malware competing don't rely on any dynamic linker. Your rootkit would be ineffective.

this all all coming from a windows user, and a windows developer.

I have a much higher probability of either receiving a decent response from non-skids or receive no worthwhile response at all posting this thread.
zero.

Tip: The best way to hide memory is through the VAD. No shitty hooks.
Writing a rootkit module for IoT devices is infeasible.

#1 You have to support numerous kernel versions
#2 Some devices may not have built in module commands for loading/unloading which requires writing your own
#3 Some IoT devices are outdated and therefore have minimal memory usage for everything.

VAD description:

Virtual memory is contained in something called a page which has a standard size of 4KB

• Allocate non-paged readable writable executable kernel memory for your data.
  
• Attach to the given process you'd like to hide the memory for.
  
• Read the process CR3 which contains the base of the paging structure hierarchy and PCD/PWT flags
  
• Walk the page-map level 4, page-directory pointer table, page directory table and page table to find page table entry
  
• Because the x86/x64 hardware solves page misses by walking CR3 we know the structure is fixed for all OS
  These data structures have flags for if they are present (paged in), read/writable, usermode accessible, have write through, cache disabled, accessed, dirty, page size, and execute disabled
  
• So set the usermode accessible flag for them mentioned above
  

TLB and paging lookups are refreshed and managed by the hardware. Therefore the OS is independent, this can be applied to Windows, Linux, Mac-OS, etc. Though "VAD" might not exist in Linux operating systems, the concept still applies. In linux you'd be looking for the virtual memory areas or VMA.

Linux stores a program's memory within the processes memory descriptor. Within this descriptor you will find numerous virtual memory areas, and their associated page tables. Each VMA has a contiguous range of mapped addresses. Each memory segment within a process corresponds to a single VMA. VMAs are represented as linked lists in the mmap field.

When you enumerate a processes memory space through /proc/{pid}/maps the kernel will simply access these linked lists and print each, one by one. When a kernel wants to search for a specific memory area within a specific VA it will search through the mm_rb field located in the memory descriptor of the process:http://lxr.linux.no/linux+v2.6.28.1/include/linux/mm_types.h#L175

With my design implementation you will be hidden from all instances of enumerating the memory descriptor.

EDIT: @omniscient I believe there's a mybb parsing bug with bb codes, above shown in the URL.

[repl0it]

Are you either a grayhat blackhat whitehat

[mrpizzahut]

It appears you know enough to start your own crew.

[cobaltstrike]

Within the past few years, I have demonstrated fluency in the following programming languages:

Assembly (x86/x86-64)
C
C++
Java
Fortran
Lisp
Prolog
Haskell
Ruby
Python
PHP
JavaScript
XML (including XQuery and XPath)
HTML
CSS

Over the last year, I have demonstrated fluency in none of these languages, but perhaps you are willing to hang out where I talk about dongs and other subjects, some of them may be relevant to security.

[Phizo]

Don’t mind “imaretard.” There’s a reason why his account is closed and has -17 rep currently. He’s just randomly trashing and talking out his ass to troll random people. His rants are attributed to outdated threads, which he is aware of while bumping them (but won’t bump the newer ones due to knowing he’s spouting lies as trolls do to compensate for the fact the content is beyond him), a lack of understanding of what I’m talking about, and adhominems.

[Natas]

Some times skids are the most fun to hang out with.

[Phizo]

Are you either a grayhat blackhat whitehat

I have quite a few hats. :~)

It appears you know enough to start your own crew.

Indeed. I did say in my threads, perhaps more implicitly rather than explicitly, that I’m open to also forming a group.

Over the last year, I have demonstrated fluency in none of these languages, but perhaps you are willing to hang out where I talk about dongs and other subjects, some of them may be relevant to security.

That’s okay. I don’t expect fluency in a bunch of languages. I’m just interested in some cool people who aren’t retarded.

I also host a Discord group with friends of many years where we discuss a large variety of topics, including security. This is unrelated to the group siggestion, as they’re not currently interested in forming a group.

---

Some times skids are the most fun to hang out with.

True, but not to form a serious group with.

[Natas]

You could always let one or two in and let them grow and shine.
Js every one gots to start out from some where I remember the 2013 days when I was most active we had a HF group chat.
It was bad ass it was like a team of bad asses lol we had some people kinda dumb but some of them were fun af and its cool teaching people man you can bond with your friend like no other teaching them somthing.

[Phizo]

You could always let one or two in and let them grow and shine.
Js every one gots to start out from some where I remember the 2013 days when I was most active we had a HF group chat.
It was bad ass it was like a team of bad asses lol we had some people kinda dumb but some of them were fun af and its cool teaching people man you can bond with your friend like no other teaching them somthing.

You’re not wrong, and yeah 2013 was definitely the golden-year. Everything was at its peak then. I miss those days. Especially being part of root@hf and all that surrounded it. Shame Starfall left the scene. I was his first friend on HF when he first joined. A great friendship filled with lots of enjoyable times. Also the couple other people around that crowd. Some were over-glorified and actually didn’t know shit, though. There was truly perhaps only 3-4 people max who were actually decent (though others didn’t know that).

As for teaching people, I get asked for advice on a nearly-daily basis on a wide-range of topics (many Computer Science related topics, various mathematics, (quantum) physics/mechanics, neuroscience/pharmacology/biology, psychology, philosophy, etc.) even without having an active group (aside from my Discord pals). People from all sorts of places who’ve met me over the years mostly would just used me as a Google. I’m kind of over it now as of the past year (almost) and only do it for good friends now, as I’m often very verbose. Some appreciate that; some interpret it as arrogance, unfortunately.

[cobaltstrike]

I have quite a few hats. :~)


Indeed. I did say in my threads, perhaps more implicitly rather than explicitly, that I’m open to also forming a group.


That’s okay. I don’t expect fluency in a bunch of languages. I’m just interested in some cool people who aren’t retarded.

I also host a Discord group with friends of many years where we discuss a large variety of topics, including security. This is unrelated to the group siggestion, as they’re not currently interested in forming a group.

---

True, but not to form a serious group with.

shoot over the invite in PMs

[Last_viking]

Afaik project insecurity LTD is worth taking part

[Cooligan]

Im sorry..  No skids That wont be happening in HF.  Those guys that did everything by themselves, programming their own tools etc and hacked the planet are long gone by now, or just not interested to participate in groups. Most of them banned since long due to have been a pain in Omnis hiney. The majority of the guys in HF uses tools who in various ways are written by others, Its simply stupid to re-invent the wheel over and over. If youre looking for specialists you are in the wrong forum. This forum is full with know-hows, skids, plebs, wannabies and researchers in various degrees. Some are here for the money, some are here for friends, and some to start to learn. HF is "preschool of hacking" not the actual "high school of hacking.

There are no idea to post deep analysis of hacking or do tutorials down to packet level in the analysis because no one will appreciate them, or even comment on them because they dont understand it. It has been done before you know..

Some of us have certs, some have not, but a common rule is that we dont brag about em. I can guarantee that no group in HF will treat you fair if you posts things like this.

Look around in this SF perhaps you find a thread youre interested in

Oh shit, hey Mad!

Haven't seen you in quite some time now, hope all is well for you my man.

I remember all of your wifi hacking books and whatnot too. :p