randomthoughtsandspeach

[randomthoughtsandspeach]

[randomthoughtsandspeach]

I was expecting anything but not Bard

[randomthoughtsandspeach]

I realised I did not treat the cod fandom to one of my shitposts yet.

This idea was the result of a conversation on male lactation.

RedBubble

#I'm sorry #I was so focused on the single red letter that I entirely missed the whole ass Child hanging off ghost's tit #I sat there trying to figure out what shirtless ghost was supposed to be providing and then I saw the Child

[randomthoughtsandspeach]

Soap, but in Situations with those scottish tweets you know which ones

“English, MacTavish” intensifies

[randomthoughtsandspeach]

Alright fine if everyone else is gonna do it

If this gets 2k notes by February 1st, I'll practice my instrument every day.

[randomthoughtsandspeach]

patas

[randomthoughtsandspeach]

A a

#Alec rambles in the tags bc I wanna whisper #but I've had a crush on one of my friends for a good chunk of a year now #and all I have to say. #is the longer this goes on the more I understand why victorian dudes went nuts over a bit of ankle #or whatever period those dudes were from. I get it #my crush wears hoodies/long sleeves every time I see him so whenever he has his sleeves pulled up I'm like Hello. #I am Looking 👀👀 #respectfully of course but AUGH #innit funny what people find attractive about other people?

[randomthoughtsandspeach]

is google insane or did it forget about the legal right to ablocking lol. are they trying to challenge the EU? bc they're not going to win that one. europe doesnt think this shit is cute

ive been flicking settings and programs on and off and updating drivers and shit trying to get youtube to load faster but it's being artificially throttled by google bc im using firefox

like. did they forget what antitrust suits are

[randomthoughtsandspeach]

Here's uBlock Origin's official guide to bypassing youtube's anti-adblock popups, updated weekly. Please share widely. Don't reward google for their predatory anti-consumer bullshit

To summarize: 1. Get uBlock Origin and make sure it's updated to the latest version. 2. Click on the gear icon to get to the dashboard, go to "Filter lists", and make sure that "uBlock filters - Quick fixes" is up to date

Repeat those steps any time you get another popup (google and uBlock are having an arms race right now so it might stop working at any moment), and if you have any more problems, read the reddit thread for troubleshooting advice

[randomthoughtsandspeach]

btw guys, ublock and youtube have been in an arms race for the past few weeks so circulating filter lists is pretty useless since youtube gets wise to each one in a matter of days. what you should actually do is remove all your custom filters related to youtube and then force update your filter list whenever you see the anti-adblock pop up again

[randomthoughtsandspeach]

"kill them with kindness" WRONG. chess dimension ⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜⬛ ⬜ ⬛ ⬜⬛ ⬜⬛

#isn't this yugioh #(no I've never seen/read it)

[randomthoughtsandspeach]

HC that a majority of the 141 are huge nerds and Price never knows what anyone is talking about

(I ran out of steam halfway through sketching this but I thought it was funny and wanted to share regardless)

[randomthoughtsandspeach]

Fanvid Rec List #1

Ah, fanvids, my most beloved and underappreciated medium. Fanvids are video edits often done to music (though not all fanvids are music videos). They take an absurdly long time to make. If you check out any of the vids on this list, be sure to comment to give some appreciation to these great vidders!

General warning that fanvids often include flashing lights in their transitions, so take caution if that is an issue for you.

Fresh Blood: Vamp Willow & Tara by brunerousse 

Fandom: Buffy The Vampire Slayer

Song or concept: Constructed reality in which vampire Willow sires vampire Tara.

Rec: This is THE constructed reality to me. It really opened my eyes to that as an option. It’s got evil gay vampires and some great visual parallels using footage from a couple shows other than Buffy to create the AU!

Sibling Rivalry by brihana25 ( @brihana25 )

Fandom:Stargate SG1 

Song or concept: “Oh No!” from Veggie Tales, humor

Rec: This is a seminal work to me. It’s one of if not the first fanvid I ever saw. I loved it when I first saw it, was one of the things I always thought of regarding fanvids, and now I make my own vids and hold this one partially responsible for that. It’s hilarious and delightful. I was just rewatching it with a big goofy grin on my face. I finally started watching SG-1 recently (I saw this vid like a decade ago the first time), and I’ve consistently referred to the sarcophagi as “scrabble tables”. I also get absurdly excited when I spot a clip in the show that was used in this vid.

Will Scarlet | F*cking Awesome ♛ by Maria M.

Fandom: Once Upon A Time In Wonderland

Song or concept: “Fucking Awesome/Thrift Shop”, humor 

Rec: This is a fun vid and the thing that got me to watch Once in Wonderland, which is now one of my favorite shows. 

[AVATAR] Katara // River by Force Captain Tilly

Fandom: Avatar the Last Airbender

Song or concept: “Like A River”

Rec: A brilliant character study of Katara, her ferocity and kindness and passion. The transitions in the vid are excellent as one scene’s bending flows into the next fluidly.

Jonathan Strange & Mr Norrell || I’m Dark Matter by KnittinGirl

Fandom: Jonathan Strange & Mr. Norrell

Song or concept: “I’m Dark Matter”

Rec: This vid is grand, magnificent, and cascading. The use of short cuts and beautiful visuals creates a sweeping sense of grandness and magic in an uncontrolled storm. Beautiful video.

Buffy and Faith (BTVS) - We Must Be Killers - HD Version  by JESS9191

Fandom: Buffy The Vampire Slayer

Song or concept: “We Must Be Killers”

Rec: This video is a brilliant study of Buffy and Faith’s relationship and parallels. “You kill me? You become me.” A stunning video in its visuals with a smattering of dialogue from the show punctuating its every point. The clips are well cut to perfect move from one to the other.

Angel the Series | Rescue Me by 1SnoWhiteQueen1

Fandom: Angel The Series

Song or concept: “Rescue Me”

Rec: Now there’s a vid that will make me want to laugh and cry. A focus on the relationship between the early Angel Investigations crew; Angel, Cordelia, Wesley, and Gunn. It so perfectly demonstrates how much this team loved and cared for each other and how their relationship still fell apart as time went on and circumstances and hurt came between them. This covers the whole team, but I associate the song/vid most strongly with Wesley and Gunn. It’s a song I think of when I think of them.

Buffyverse but it’s a heist movie by SlayerVid

Fandom: Buffy The Vampire Slayer, Angel The Series

Song or concept: “A Good Song Never Dies”, humor, heist, constructed reality

Rec:This is exactly what it says on the tin, and it’s GLORIOUS. Grab your balaclava and your climbing gear and get ready to crawl through the vents because it’s heist time, baby! Absolutely excellent and perfect and hilarious.

Rockstar - a Buffy video by Jasmin

Fandom: Buffy The Vampire Slayer

Song or concept: “Rockstar”, humor

Rec: An absolutely hilarious video; I couldn’t stop giggling the whole time I was rewatching this. It lines up video to lyrics in the most literal way possible. We all just wanna be big rock stars!

Addicted To You by AurumCalendula

Fandom: Synetic Theater’s Phantom of the Opera

Song or concept: “Toxic” by Anthony Willis

Rec: I was delighted to find a vid for Synetic’s Phantom. It uses the visuals well as they flow eerily together with the slow instrumental version of “Toxic”.

Way Down We Go || A Zuko tribute  by The Stranger Artist

Fandom: Avatar the Last Airbender

Song or concept: “Way Down We Go”

Rec: An excellent character study for Zuko. The clips sync up beautifully with the beats of the song. The video is full of movement, and the transitions are quite good.

Whedonverse Women - So What  by Stefanie (valamd)

Fandom: Buffy The Vampire Slayer, Angel The Series, Dollhouse, Firefly

Song or concept: “So What”

Rec: A vid full of movement and quick transitions and ladies (+Clyde) being badasses. What is not to love? 

Believer - Sense8 by absolute_maximus

Fandom: Sense8

Song or concept: “Believer”

Rec: Man, rewatching this made me want to rewatch Sense8. An epic video with every clip fitting perfectly with the beat. I think of this vid every time I hear this song. This perfectly captures the show.

Come Together by Rosemarycat5

Fandom: Good Omens (season 1)

Song or concept: “Come Together” by Gary Clark Jr.

Rec: Fuck it, this is one of my own fanvids. Sue me. This is the fanvid I made that I am currently most proud of. It was so fun to make.

-

If you have any fanvid recs or want to share your own, reblog this and add or make a new post and tag me so I can watch them!

[randomthoughtsandspeach]

“In my dreams I am kissing your mouth and you’re whispering ‘where have you been?’ I say, ‘I’ve been lost but I’m here now. You’re the only person who has ever been able to find me.’”

— Sue Zhao

[randomthoughtsandspeach]

#his laugh #I love listening to him laugh #but also his hair #I really just want to run my fingers through his hair sometimes #augh

[randomthoughtsandspeach]

Well since you all asked nicely...

Time you all learn how to get into being a hacker~!

Advance warning this will be a long post and as of typing this idk if tumblr has char limits so might need to continue in reblogs?

Right, so. You may be asking "How do I get into hacking?" and find yourself here because of it.

The answer is you just did it. Right there. By clicking that keep reading link you have just entered the world of hacking, because curiosity is everything. The innate urge to learn more, to know more, that is what hacking comes down to. You do more than just using a system, you question it. Ask yourself, what does the system do when i input these characters? How does it take my input and translate it into the function? Where does it store information in what way?

Have you ever tried inputting unexpected text into a field? For example, say a website asks for a particular input like your name, but instead you start putting in numbers or unexpected unicode. That right there is, by definition, the poking around that hacking uses. You're experimenting with unexpected use-cases. Often times if you try this, you may end up finding interesting results. In my example here, say instead of your name, you put ../../../../etc/passwd into the field. Suddenly when you hit enter, you get hit with a result of a bunch of names and data. That is a hack. The database to control the storage of your name instead received a command to back out of that database, and go into the etc folder to retrieve the passwd folder, which houses user data from that system. This, of course, assumes the system is running Linux, but it is an example. All hacking is, is poking around in ways the original programmer couldn't expect to find interesting results and broaden your access into things you shouldn't have.

Now, this is all well and good, but what if you want an actual way to learn this in person? Well the good news is there are plenty of legal avenues to get into hacking and broaden your experience! Personally I use HackTheBox for my CTFs through their labs. That means they run a thing called Capture The Flag, where they give you a single IP and you have to explore that system to find two different flag files to win. They also have competitive CTFs I have yet to try, but I do have a competitive tournament coming up next month for it. Then they also have the academy to teach you more via both hands-on methods and reading work. If you know next to nothing and want to get started in a safe learning environment, you can try out their academy or my next resource. TryHackMe! This website is more learning focused, and I have been taught a lot of what I know through it! It has free lessons along with premium ones for a subscription, so just know that only a selection of what you can learn here is free, but I do recommend them if you do feel like paying for that extra bit, as I would say what I learned from it was worth it and they focus on both offensive hacking, which I do, as well as the blue side for defensive hacking and even things like digital forensics if you're interested in that!

HackThisSite. No really, hack it! This website is a legal playground to try out scenarios from the unlikely to the realistic in varying difficulties to put your skills to the test!

There's many, many more resources to look into as well, those are just the first few off the top of my head. Beyond this, I'd say constantly stay up to date in cybersecurity news and read up on new large scale attacks, as the entire industry is a constant arms race with exciting twists to learn about! Beyond that there is no one right way to go about hacking, and there's never a stupid idea to it either!

Now, all this is well and good, but what about a real case example? Well luckily for you all I happen to have a machine up and running to show off a case example of a CTF in action. Today i'll be showing you the "Lame" box from HackTheBox, the first machine they ever published, now retired. I can access it thanks to VIP.

First thing's first, I'm using a laptop that I stripped of Windows 11 in favor of Linux, and specifically Kali Linux being the exact distro. If you're wanting to get into hacking at the VERY least use a VM with linux, but i beg of you dont use windows. You're asking for trouble both in terms of lack of tools and in terms of vulnerability. You're putting a VERY large target on your back by using Windows because of how vulnerable it is. Kali Linux is a nice option as it comes pre-built with tools, but if you want something more user friendly you can go for Parrot OS.

Once the OpenVPN connection is active and we have the Lame machine up and running, it gives us an IP and nothing more. The first thing you will want to do when this is the case is to use a tool called Nmap to scan that IP for active TCP ports. This shows you what open, and sometimes closed, connections that machine is running, along with information about them. I usually use the command with these particular flags. nmap -sV -Pn -p- (ip)

It will output the ports we want to see, dont worry about how much text there is, we're focusing on just a small segment saying port numbers and a description of them

Now that's interesting, looks like this is running Samba SMBD on ports 139 and 445, and thanks to a google search I know this is a vulnerable version. We'll take the quick route and just use a tool called Metasploit. In a typical run metasploit wont have what you need, but for the sake of time and post length, i'll just boot that up by running "msfconsole" and running a search for our exploit. On finding the one I need I select the payload.

Next up, we need to equip the options for it, setting who our target is and where to send the information back to, in this case my VPN's IP.

Once that's done, you simply say "run" and it will go! And what do you know, i'm in the system as a root user, aka full administrative privileges with access to both the user and root flag! In a typical CTF there are many more steps including usually getting into the user first, then exploiting into root. I, however, took the shorter route this time.

(The flags change every run so you cant just copy paste them from my run.)

And that's that, machine conquered! We did it! Of course, in the real world of hacking there are many more steps, and it can even take multiple days to get everything you need from a target in a stealthy manner. The faster you move, the louder you are.

Now you know the basics though! Get out there and learn, google will be your friend and its never wrong to ask questions. My DMs are open if you have more to ask or just wanna talk hacking! :3

Legal, illegal, who cares im not a cop, have fun and stay curious~!

#save

[randomthoughtsandspeach]

Are you alright, honey? You've barely put your blorbo in situations

#no I'm not