[ttbr0]

That's really kind thanks for the proposal ttbr0 ! I've seen your post before going to bed and during the night I thought about a program. When I'm performing malware analysis, sometimes the malware also has other files such as .dll with it in the same folder so I need to upload them manually on VT too, one by one, and sometimes it takes time when there are like 20 files.

So I thought about the following tool :
- You put your VT API key in the program
- you select the files you want to analyze, it will firstly perform a md5 hash and upload the hash
- for each hash already known you'll see the result (how many AV detected it as malicious), green if 0/70, red if some AV flagged it
- for unknown hashes, the tool will propose you to upload the files

Maybe it already exists but that could be something interesting to make to learn new things.

---

EDIT : not even surprised that it already exists https://github.com/VirusTotal/vt-cli 😂

yeah it would definitely be a thing thats either standalone (like the tool you linked) or integrated into other programs like pestudio for triaging. it would be a good way to learn how to use a web api. you can also expand your tool to do more analysis on executable files so you can learn about them too like pe file formats and knowing what indicators to look for (again see pestudio).

[Bastille]

yeah it would definitely be a thing thats either standalone (like the tool you linked) or integrated into other programs like pestudio for triaging. it would be a good way to learn how to use a web api. you can also expand your tool to do more analysis on executable files so you can learn about them too like pe file formats and knowing what indicators to look for (again see pestudio).

I'll definitely explore these things, thanks for the advice !

[Tyr]

Would be cool to get a team going on HTB or something of that nature with the HF prefix. Nice work on the thread design as usual and thanks for the hard work you put into this.

[Bastille]

Would be cool to get a team going on HTB or something of that nature with the HF prefix. Nice work on the thread design as usual and thanks for the hard work you put into this.

Thanks buddy ! I think you're right, I'm mainly on THM but I definitely wouldn't be against exploring HTB

Feel free to share your progress / achievments here when you want

---

Today I've completed :

- 2 SOC analyst cases on letsdefend, but I do not agree with one of them, especially an answer
- I started 1 tryhackme room about DLL hijacking: https://tryhackme.com/r/room/dllhijacking but I wasn't able to finish, I was doing something else in parallel and the virtual machine was available only for 1 hour as I have a free acount

- I've made a hacking tutorial thread : https://hackforums.net/showthread.php?tid=6288583 not as HQ as other I've made but I'm in a rush to get the award I only have few days left before the 90th day, and to be honest I've been kinda disappointed regarding how few replies I've got for HQ hacking tutorials thread threads I've made previously, doesn't seem worth it to spend too much time on HQ threads unfortunately

EDIT : after that I studied on Linux too, I wanted to understand the differences between standard (.deb / .rpm / .aur) and non-standard (snpa, appimage, flatpak) packages. This year I plan to follow the LFS (Linux From Scratch) documentation, I think that will be an important achievment to improve my Linux knowledge

[plops]

Thanks for making this.
I have done a lot of reading an small applications here and there. Still on my python adventure.

I started thm yesterday and completed Ohsint and agent sudo. Agent sudo was pretty frustrating but the first time i ever actually did a full 'hacking' thing. It was exciting and cant wait to do another one.

I will lose an hour of sleep tonight but i will at least start a module this evening.

I want to be able to contribute a couple of my own tutorials when i get there.

[RootRXXT]

im only on HTB, but would like to be apart of a team, if you have a slot open, please dm me and I will join up!

[Bastille]

im only on HTB, but would like to be apart of a team, if you have a slot open, please dm me and I will join up!

Hello, there is no team or things like that for the moment, the objective of the thread is to share your daily progress, you can share what room you've completed on HTB so people could discuss about it with you.

Thanks for making this.
I have done a lot of reading an small applications here and there. Still on my python adventure.

I started thm yesterday and completed Ohsint and agent sudo. Agent sudo was pretty frustrating but the first time i ever actually did a full 'hacking' thing. It was exciting and cant wait to do another one.

I will lose an hour of sleep tonight but i will at least start a module this evening.

I want to be able to contribute a couple of my own tutorials when i get there.

Python is definitely the programming language to go with, I discussed with another member about it and I need to devote more time to it. Even if I'm into cybersecurity, programming is my weak point.

Haha, but don't worry, you're right. Even doing 1 hour per day is good, the most important thing is constancy. Many people will rush for few days, then left for few weeks, you'll forgot most of the things.

I would be glad to see your tutorials, any kind of tutorial is useful, from beginners to advanced :)

---

Daily hacking :

Letsdefend : Streak 8 days ❤️‍🔥
Completed SOC227 - Microsoft SharePoint Server Elevation of Privilege (Possible CVE-2023-29357)

Tryhackme : Streak 6 days ❤️‍🔥
Almost finished the room I've started yesterday about DLL Hijacking (medium room), but I think I missed something because I wasn't able to complete the room. Will take a look at it tomorrow, I was limited to 1 hour because of the free account, there is a currently a 25% discount for subscription, that would be something like less than 8€ per month, seriously thinking about it ...

[Bastille]

Just completed :

- 1 SOC case on letsdefend.io : SOC326 - Impersonating Domain MX Record Change Detected
It was quite interesting but didn't encounter difficulties

- 1 room on tryhackme.com : https://tryhackme.com/r/room/investigatingwindows
I had to help myself 2 times with a writeup, I'm definitely not comfortable on investigating Windows computers through the built-in tools (powershell, event viewer, ...). But I really enjoyed this room and I've learned many things

We can see that Windows Exploitation is my weak point compared to others on the graph :


I'll definitely spend more time on this, I also need to get familiar with EventID, Powershell, and so on, as I want to work as a SOC analyst.

---

Current streaks
Tryhackme : 7❤️‍🔥
Letsdefend : 9❤️‍🔥

[captn_nemo]

I started my journey on THM today. I did a lot on HackTheBox, let's see what I can do here.

[Bastille]

I started my journey on THM today. I did a lot on HackTheBox, let's see what I can do here.

Nice to see that you join us ! I'm not familiar with HTB, but I've heard that it's usually harder than THM, is it true ? If so, THM will not be a big deal for you I guess :p

Feel free to share any room you complete, it's always a good opportunity for other members to learn more things and complete the same rooms

[brandowservices]

This is good , i am very interested in joining and following the procedure, exactly as outlined.

[captn_nemo]

Nice to see that you join us ! I'm not familiar with HTB, but I've heard that it's usually harder than THM, is it true ? If so, THM will not be a big deal for you I guess :p

Feel free to share any room you complete, it's always a good opportunity for other members to learn more things and complete the same rooms

First User Flag done.
I can't make a comparison at the moment, I haven't seen enough. The Expose Box was easier on the one hand, but also a bit more confusing for me because it was very far away from the real world. I think HackTheBox is simply more real so far. But let's wait and see what happens over the next few days.

[Bastille]

This is good , i am very interested in joining and following the procedure, exactly as outlined.

Feel free to share your progresses, what are you into ? Hacking ? Programming ? Something else ?

First User Flag done.
I can't make a comparison at the moment, I haven't seen enough. The Expose Box was easier on the one hand, but also a bit more confusing for me because it was very far away from the real world. I think HackTheBox is simply more real so far. But let's wait and see what happens over the next few days.

Oh I know what you mean. I'll do as much as I can this year on tryhackme and give a try in 2026 to HackTheBox

First User Flag ? Is this a room ? Feel free to share the link of the rooms so other members can take a look at it too :)

[captn_nemo]

Feel free to share your progresses, what are you into ? Hacking ? Programming ? Something else ?


Oh I know what you mean. I'll do as much as I can this year on tryhackme and give a try in 2026 to HackTheBox

First User Flag ? Is this a room ? Feel free to share the link of the rooms so other members can take a look at it too :)

I got the User Flag and Root Flag in the Expose Box. They may be called rooms at THM.

Spoiler (Click to View)As I said, the user flag was simple, a bit of SQLi here and a bit of LFI there. The root flag was also relatively simple.
I think THM's tutorials are definitely better and more detailed, I haven't seen anything like that at HTB. I will definitely continue later (another day has already begun here).

[Bastille]

Just completed :

- 1 SOC case on letsdefend.io : SOC101 - Phishing Mail Detected
Nothing really difficult, just a malicious email with a malicious URL a user clicked on. Nothing interesting to say. However I'm thinking to upgrading to the premium version as I'm limited to 15 SOC cases per month with the free version, but it's expensive (at least 16€ per month), there was a discount during the new year (50% off) but didn't take it ... Hope they will do one more discount


- 1 room on tryhackme.com : https://tryhackme.com/r/room/blueprint
Yesterday I said that my weak point was windows hacking / investigation, so I decided to complete a room based on Windows Exploitation. It was not easy for me, I had to help myself with a writeup but I discovered many tools such as :
- enum4linux (SMB)
- a nmap script for SMB (smb-enum-users, with others such as smb-enum-shares and smb-protocols)

In order to keep myself organized and easily find tools I've already used I use bookmarks on Firefox :


After that, I had to exploit few files in C:\Windows\System32\config\ called :

• SAM > store information about users, such as username and password
  


• SECURITY > store information related to the system security and registry, it's used with SAM to decrypt the hashed passwords (you don't get the clear password, you just get the hash)
  


• SYSTEM > store information about users privileges, authorizations and other things
  

I then used samdump2 to retrieve the hash, and then crackstation to crack the hash.

I think I'll continue with the rooms based on Windows, I should also continue with SAM exploits such as Pass-the-hash methods and so on. This will be done tomorrow

Letsdefend : Streak 10 days ❤️‍🔥
Tryhackme : Streak 8 days ❤️‍🔥