So did you hear about the... Did I hear about what? Most expensive baseball card ever in the history of baseball cards that was just bought. Was it, um, Mookie Betts? No. It was a Mint Conditioned Rookie Mickey Mantle card. Ooh, Mickey Mantle, huh? 12.6 mil. Seems excessive. A little bit. I mean, I would have paid 10, 5 maybe? I'm not surprised it's a Yankee. You know what the highest Red Sox card is of all time? Mookie Betts. It was 2.6 mil. The Red Sox card? He started on the Red Sox. I know, but what? It's worth so much because he became a Yankee. And you guys buy, everyone.  It's The Corvette. I'm Babe Ruth. You can follow us on Instagram, Twitter for more juicy content. Thanks to Patreon for those who don't subscribe. And like button.  You played before black people could play. That's not impressive. That's just my two cents. What? He was in the league before black people were allowed in the league. That's a major asterisk. That's a major asterisk? Asterisk! Why can't I say this word? Asterisk.  So there's like an asterisk next to my family? No, this is athletics. Oh. Sorry. We're talking about athletics. Got it. Until the sport of baseball was only white people. Got it. So all sports didn't matter until they had all races in them. No, all records were kind of mean anything. What about the Japanese? They didn't start playing until like the 70s. So what about them? Did it matter before they played? Yeah. It did matter before they played. No. That's very anti-Japanese. I know. I'm American. Yeah. I don't think there's been a lot of Samoans playing as of yet. So do the records really matter until they get in there? Nope. Only black people. Only black people. That's my two cents. Anyways, today we got a new trailer that just came out. What is it? What is it? It's called Monaco. Oh my darling. I've been around long enough to know what that could mean and I'm not going to say. What do you mean? No. I don't know. No. Really? I don't get it. I feel bad thinking about it because it's just inevitable. I feel bad for her. What is it? Lewinsky. Oh, what about her? Oh, wow. What about her? Do you remember who she was? Yeah.  Right. Yeah. Monaco, oh my darling. Yeah, what about her? There's a joke in there. I don't get your joke.  I mean, how does that orgasm? What are you doing? Never mind. I don't like your joke.  I heard she gives good glob, glob 9000. Anyways, this is... Sorry, Monaco. This actually has a toast in it. Who? Rajkumar. Hey! And our future toast, Radhika Apte. Radhika Apte, the greatest actress in Indian cinema currently. Really? Of her generation, sure. Where do you cut the generational line off? That age gap. In terms of... Yeah, what age gap? She's probably what, 35, 36-ish? Yeah. So where do you cut it off? 39 to 21. Oh, okay. I put in that generation, she is the best actress in my opinion. All right. How do you have it? I like her a lot. Obviously, you've got others like Deboos and other legends. But no. It's Radhika Apte. All right. There you go. Anyways, that was just me licking the boots for my future toast. She wears good boots. Gucci. Are they made for walking? Anyways, Monaco, oh my darling. Rick really thinks that's funny. I don't know what this one's about, but it's a Netflix film. With Rajkumar and Radhika Apte. So I bet the acting is going to be good. Just a wee bit. Probably. Here we go. It's a good bet. But I have something to say to you. I'm a very small child. I don't even have to say my name. Angola. Angola? Sounds exotic. Morning, Mr. Jayan. No, it's not. Thank you. Hey. It's tea. It's air-conditioned. Coby also doesn't tell the backstory so perfectly. How do you feel about leaving the story? You are the prince of Angola. Scoundrel. I'm not going to drink tea with you. What do you think? You're talented. Not talented. Your story is good. So is it about a writer? I don't know. I don't understand. Angola. The prince of Angola has a lot more to him than his story. This is a teaser, by the way. It wasn't a full-on trailer. I have no idea what that's about based on the trailer or what the relationships are between people. It looked interesting. It almost sounded like he was pitching a story a little bit, almost, right? Or at least telling something about himself. I think it's supposed to be the word while.  Interesting. Didn't get any of that from the trailer. In the poster, Rajkumar was holding a robot and that was on the desk behind Radhika. Yeah, no clue. Comedy crime drama. Vasan Bala. He didn't direct 83, right? No, he didn't. He was just part of it. That could be your con, that's right. I remember him directing that. Yeah, it's interesting. The acting looked totally fine. I just have zero clue what this is. No idea. What is going on. Maybe we're just idiots. It wouldn't be the first time that we just completely... No, and it's like sometimes there's movies, trailers that you're like, I have no idea what that's about, but I want to see it because it looks really interesting. This one just left me with, I have no idea what that's about, and I'm not sold on why I should see it as of yet. Other than I will see anything that those two actors are in. I don't even need to see a teaser to know I would see something starring them. It has a robot opening a bottle. It has somebody putting something in a glass of chai. And saying it's not poison, which is very suspicious. And then what was she hacking up there with her cleaver? It looked like a statue almost, didn't it? Yeah, it looked like she was hacking up a cleaver. That robot is right there on the desk that he was holding in that poster on. He called him a maracho, which was funny. Don't drink alone.   Yeah, statue of a tiger. Statue of a tiger that she's chopping up. Yeah. I don't know. Monica, oh my darling. Just say, what do you think of yourself? That you are talented? Oh, it's something about a story. That's why it leads me to believe like it's almost like a, you know, how they've done these stories of like a author tells the story of a murder and then tries to pull off the murder, right? Right. Or tells like, I mean, if you haven't seen Secret Window, I'm not going to give anything away about it. Have you seen Secret Window? No. That's one of the better Johnny Depp movies out there. Yeah. Yeah, I haven't seen it. It's a good one. If you haven't seen Secret Window, go watch Secret Window. It's a good Johnny film. I think it came out early 2000s as well. But anyways, yeah, it looked interesting. I'm interested specifically for our Dost Rajkumar and our future Dost Radhika Opte. But other than that, I just have, not that it didn't look good. It was just I have no clue like of the story. Cool. Yeah. I like them. That's my main interest right now. Yeah. Like if nobody was familiar with them, I don't know why anybody would feel like they want to go see that. Yeah. Maybe. I know Radhika Opte can come talk to us and explain what the movie's about. Radhika Opte. Radhika Opte. I'm seeing what the comments are saying here. It's just talking about Rajkumar and Radhika. Because who doesn't love them? Especially if you like acting. Who doesn't love Radhika Opte? Yeah. Just hearing that they're in something together is exciting. The way Radhika says bye-bye. Totally. I totally thought that was funny as well. I don't even know that we... Anyways, you guys can let us know what you thought about the teaser. Obviously, maybe it's just because it was a teaser and it was very vague.  Only English speakers. I know you guys are also English speakers. But also, Khuma was also in this, but did you recognize her in terms of... Do you think you've seen her before? The other actress in this? No. I think... That doesn't mean we haven't obviously. Part of that was because I was trying to figure out what was going on so badly. Ah, we have seen her. So she was in Gang, she was also in Badlapur. Ah. I thought you looked a little from it. Gangubai. Singer. So yeah, we have seen her a few times. So anyways, obviously I will look forward to the trailer of this. And if any of you guys know what's going on, you can let us know. Yeah. Not spoiling anything, but just... What's it about? If there's something I missed, you guys can let us know. Let us know what you thought about the trailer down below.


Plants are awesome. Look at where we are. We just dove in and fleshed out the glorious world of green plants. And we took this branch in particular, the land plants, and really expanded it. It's like we pushed a button and it expanded it out to show us all the different kinds of critters within there. Please know, of course, that we can expand out any branch. We could take the ferns and go beep and expand it out all the different kinds of ferns and how they're related to each other and what characteristics define the different branches. If we're going to look at fungi, we're going to stick over here in this branch. Now, we already kind of checked out the slime molds. They're pretty much phenomenal, but we're just going to focus in on the fungi. Now, we labeled land plants as multicellular. Not all fungi are multicellular. Yeast are a very important fungus to humans that are single-celled fungi. So they are technically protists. They're fungal protists, but they get included into this fungus group. So let's take a look at all fungus, a characteristic of all fungi except for single-celled fungi, which is that really, fungi are made of branches. Now, I can't forget that I can't draw on this, but they're made of tubes called hyphae, H-Y-P-H-A-E. And even the mushroom, like the part that you see, the mushroom isn't the bulk of the critter. The mushroom is its reproductive structure. And most of the time, the critter will stay underground, and it's just a net of tubes underground. The net of hyphae that are underground is called a mycelium. And that, like, crazy net, dude, the biggest one that they found was, let me see, 37 acres. It was one fungus, and it had a net of tubes in the earth that was 37 acres big, and that was one critter.  Let's make babies. And so it will push up its little fruiting bodies, which are the mushrooms that you are familiar with, the mushrooms are what you eat, and the mushrooms are what produce the spores, or the ability to make new fungi. So it's counterintuitive that the fruiting body is not the entire bulk of the organism itself. Most of the organism is actually underground. Now, we're going to look at some really cool examples of fungi because, I mean, I can't talk about any of this stuff without talking about holy cool factor. They're amazing.


upon Dr. S.D. Vaishnavi, managing director of Shankaraya's Academy, the sculptor of Academy and a navigator of this flagship to present this special address. Good evening everybody. Respected dignitaries, dear candidates, students and Shankaraya's Academy family. Let me take this opportunity to congratulate all the successful candidates on their well-deserved success. A special note of thanks must be mentioned for the family members who had been a very great support throughout their journey. Shankaraya's Academy is glad that we could also play a facilitating role in your inspiring journey. You may have written, got inspired from the success stories in the past and the time has come now when people read yours and get inspired. The journey from getting inspired to inspiring others will always be full of obstacles but will eventually lead you to glory and you are on the part of glory. We wish all the successful candidates a glorious career and successful services. You are the future of the country. Your actions will play a big role in determining the future of the country. We are indeed grateful to the illustrious bureaucrats who, despite their commitments and schedule, took time over for mentoring and assessing our students. Your valuable inputs and guidance have helped many aspirants improve upon their performances. The results stand a testimony to your invaluable contributions. Thanks to everybody. This is a momentous occasion for us when started as a dream to help the students in their civil services journey. Shankaraya's Academy today has transformed into one of the most trusted and respected mentors for aspirants dreaming to ace the coveted civil services exam. This journey has been nothing short of the spectacular. Shankar started his journey from coaching a small group of students in a rented house. Today, as we enter into the 15th year, we are able to offer the best of the infrastructure and pedagogy to the students. What we are today is because the trust is reposed on us by thousands of students in their families. Furthering to their trust, which aspirants have on us, we wish to introduce now about our Shankar Memorial Educational and Charitable Trust. This trust, as Shankar wished, will seek to identify and provide assistance to the deserving candidates from socially and economically deprived sections of the society. This is a small token of our commitment to the cause that no student should be deprived the help to nurture and be served her dreams. I wish to quote, success isn't always about greatness. It's about consistency. Consistent hard work shows us the path to success. Greatness will eventually be a byproduct of consistency. Finally, let me take this opportunity to appreciate the extraordinary efforts of the faculty team and their numbers of Shankar's Academy family in uniting to fulfill the vision and helping achieve consistency in producing better results. I welcome you all and thank you all. Thank you ma'am. We all know the story of a king and a spider. The king who was defeated six times in the battle was forced to hide in the cave. He took inspiration from a spider who also failed several times to weave a cobweb. The spider did not lose hope and continued with great determination and care to make the web. Inspired and determined, the king went for the battle again armed with a new strategy. He defeated his enemies. So ladies and gentlemen, the heart of today's function is to felicitate the successful candidate of UPSC civil service and Indian Forest Service Examination 2018 who also like spider persevered to reach this height. I invite Ms Santoshi to call out the successful candidates. Thank you Ashna. Good evening ladies and gentlemen. So the time has come to call upon the candidates who have made his proud this year and who are the reason for our gathering today. I request Mr. Muthuram Lingam to step forward to felicitate the students who have successfully cleared the Indian Forest Service Examination. Mr. Tirukural R. Rank 8. Mr. Prashantomar R. Rank 25. Mr. Ravi Shankar Sharma N. Rank 37. Mr. Ganesh U. R. Rank 39. Mr. Pashu Kuleti Monika Kishore R. Rank 41. Mr. Kanakunala Anil Kumar R. Rank 46. Mr. Jagdish R. Rank 64. Mr. Vivek R. Rank 65. Mr. Balamurgani P. Rank 74. Mr. Ravun Meena R. Rank 82. Mr. Varun Dalia R. Rank 86. I would request the audience to give a round of applause for the successful candidates. Thank you sir. Thank you sir. I now call upon Ms. Mani Meghalay to felicitate those students who have cleared both the examination UPSC civil services as well as Indian Forest Service. Ms. Lakshmi N. I.F.S. Rank 50 and Civil Services Rank 45. Mr. Abdul Shahid Civil Services Rank 57 and Forest Service Rank 45. Mr. Ashwin Chandru Civil Services Rank 327 and I.F.S. Rank 17. Ms. Svetam K. Sughadan Civil Services Rank 461 and Forest Service Rank 34. Mr. Chiranjit P. J. Civil Services Rank 313 and I.F.S. Rank 36. Mr. Hitesh Kumar Meena Civil Services Rank 417 and I.F.S. Rank 54. The following candidates have cleared the UPSC civil services examination. Rank 17. Mr. Ravun Sharunappa Sankul Sankanu. Mr. Rishabh Rank 23. I request Mr. Rishabh's parents to step forward to take it on his behalf. Ms. Sri Lakshmi Rank 29. Ms. Renjina Meri Varghese Rank 49. Mr. Akash S. Rank 78. Mr. Abhishek V. Rank 79. I request Mr. Ravi Khan Tupadhyay to felicitate the students. I request Dr. M. Ravi to felicitate the following students. Mr. Jishnu J. Raju Rank 132. Ms. Deepana Vishweshwari V. Rank 117. Mr. Alok Kumar Rank 135. Mr. Phommi Pratap Shivakishore Rank 153. Ms. Sheya Gupta Rank 194. Mr. Rohan Jagdish Rank 224. Ms. Subashini E. Rank 229. Mr. Vishnu Raj Rank 234. Mr. Kaushik HR Rank 240. Mr. Vivek HV Rank 257. Mr. Prashant Nagar Rank 267. Mr. Anand Prakash Meena Rank 269. Thank you, sir. Now, I call upon Mr. Atul Anand to present the Felicitation Award. Mr. Rishi Raghav Rank 281. S. Rank 258. Ms. Chitra T. Rank 296. Ms. Shilpa A. B. Rank 298. Mr. Suraj Ben K. R. Rank 321. Mr. Abhishek Oswal Rank 369. Mr. Mohammed Sajat Rank 390. I request Abhishek Oswal's mother to take the award on his behalf. Ms. Divya Chandran Rank 397. Ms. Alarmail Mangaiti Rank 408. Sri Banyasuresh Rank 410. Ms. Sri Banyasuresh Rank 4. Mr. Anup Bijli Rank 435. Thank you, sir. Now, Mr. S. Ramakrishnan. Mr. Ashut Kumar R. Rank 438. Abhishek S. Rank 44. Sir Manjunath Andreshekar R. Rank 514. Take the following students. Rank 485 for the students who have... Mr. Venkesh M. Rank 534. Mr. Sainton Ghosh Rank 539. Mr. Jagan, please give a huge round of applause for them. Mr. Rajendra Prasad Rank 590. I request Ms. Maheshwami Ma'am to best state him. Successful in this year's examinations. I call upon Kanakalaka Anil Kumar who has secured Orondale Rank 46 in Indian Forest Service. Thank you. Now, Mr. Mohammed Abdul Shahid. He has been successful in both the Indian Forest Service examinations and the Forest Service examinations. He has secured Orondale Rank 57 in Indian Forest Service and Orondale Rank 45... Orondale Rank 45 in Indian Forest Service and 57 in Civil Service examinations. And finally, I call upon Kumi Pratap Sivakishon who has secured Orondale Rank 153 in Civil Service examinations. Thank you.


let's go ahead and call the meeting to order roll call um Alder Ackley here um Alder Dean here Alder person Heidemann is excused and Alder person Felde is excused Alder Salazar I'm here we can all stand for the Pledge of Allegiance I pledge allegiance to the light of the United States of America and to the Republic for which it stands my nation under God indivisible with the liberty and justice of all great let's give agenda item number four since we all really know each other um agenda item number five approval approval of minutes for the january 10 2024 meeting looking for a motion second great any discussion all those in favor please say aye any opposed chair votes aye motion carries that's okay agenda item number six just in time ro number 90 23 24 by police chief Christopher demigowski pursuant to section 50 dash or 30 dash 50 of the municipal code submitting a quarterly report showing the benchmark measurements of the police department for the period commencing october 1 of 2023 and ending december 31st of 2023 good afternoon hi so you have to report in front of you the highlights are as follows part one crime there was a decrease in part one crime for the year today in comparison to the same period last year 856 to 888 crimes against persons less flat 177 this year 176 the year before and there was a decrease in crimes against property 679 in 2023 verse 712 in 2022 traffic accidents for the year 2023 around slightly 1390 versus 1418 in 2022 and then a decrease in involuntary commitments again 110 to 138 um i would also um just point out a couple things traffic accidents our our goal has really been over the last 10 years to try to keep them under 1500 historically um they've been as high as 2500 um and about 1900 when i first got here so although um aggressive driving and um people not paying attention distracted driving are i think problems everywhere um we're we're still doing okay as far as the accident rate i think we'd like to have them lower and i would say if um i'm going to tell you this we're not able to get anywhere close to the kind of deployments around that that we would like to do um yes matt i think matt would remember in 2010 1112 we did a whole lot of um deployments around traffic using our our ddax approach so um talked about that before it's essentially where we identify hot spots in the city both crime-wise and traffic-wise and later them over each other and um deploy people to those areas so that we can affect all um we still do a lot of that but nowhere near um the amount that we would like just because we don't have the unobligated time so that's always a goal to keep doing that the fact that involuntary commitments are are down somewhat significantly shows that we're making some progress there we hope that keep having success with both the co-responder program and with some of the changes that the county is making that that hopefully that will free up sometimes so we can do some more of um deployments around traffic um and then the crime stuff i would just point out that um some of the numbers there are are breathtaking to some degree if i can use that term um if we look at some of these numbers um prior to 2010 um burglaries were in uh 300s sometimes 420 i think in like 2007 so to have 65 of them is quite an accomplishment our thefts were over 2000 prior to 2010 this year they're at 585 so really the same thing motor vehicle thefts we had a really good year 19 this past year again if you look back and but there are 60 70 those were the kind of numbers that we saw in the early 2000s in shabuigan and when you look at all the other communities it's it's quite the opposite so you've seen in most most city really um large increases in motor vehicle thefts a lot of it tied to the ignition issues kias and andis and that but but still for for what we're seeing um and of these i didn't look at these 19 but i would bet you it's the same thing probably 15 of them are people left their keys in the car or a friend or a family member is the one taking it so in the year prior in 2022 we had nine 29 motor vehicle thefts 27 of those were people leaving their keys in the car or a friend or family member stealing that car so um yeah of course i know like accepted is that somewhat too a little bit better a better educating the public is that someone doing it i think it's a combination of things some of it um i think is um i don't really see this changes in some of the crime that's going on you see more white color crime going on now but i think a lot of it is the awareness that we've tried to create working with neighborhood organizations pushing stuff out in social media and then the yeah the efforts that we made around locking your cars and and those programs that we put in in place so we still see spikes so i haven't checked in in the office yet but i can see from my ring notifications that we had um two or three um entries to autos on the near north side last night and i know last week we had a couple maybe one one on the west end of the city but the county had a couple okay but when we're seeing those we're seeing two or three and then we're responding and getting people in the right areas quick enough that that it's stopping where in 2010 we would get 20 30 um so so it's a combination of things i think recognizing patterns quicker and citizens doing their part better and that's even i need some wood to knock on here but even the package that a lot of communities are seeing we're not seeing them to that level we have some most of ours are happening like in apartments where they have a common area where they're getting dumped and somebody else in here the apartment is stealing up we're not having the significant what i would call porch pirate issue that that a lot of communities are having and there ain't much that we can do about that again really just bad business practices in my view if you think about when we were all kids you couldn't get a package from ups without answering or in signing for it otherwise you got that that note that you missed it now it's just all dumped out there where it's free for the taken so also it's like there's not a lot of places where you can go pick up packages like the ups storefronts of clothes so like if you had now if you get a package through you because you just get it like that you can't there's nowhere to pick it up yeah i think amazon arrangements so you can make arrangements with ups and amazon you can arrange to be only on a specific day so that helps but also with ups you're allowed to tell them please put it on my you know backboards or by my garage or whatever you want them to do yeah i think i saw an advertisement last week that amazon's trying to set up some places in chavoid or you can have it delivered there yeah that'll be nice yeah that's right so amazon pickup locker sometimes they're stopping when depending when you get in the box oh gosh i guess you know the only other thing that i would add because we don't talk about it much i know we shared it a couple times but really the issues at the border are affecting us us here in the amount of fentanyl and methamphetamine that gets across the border and we've had some very major cases essentially where chavoigan is the hub that it's coming into directly from mexico and then getting distributed to other communities in northeast wisconsin so we've done some very good work around that the department received an award last year at the international associations of chiefs of police conference for criminal investigations based on a case that we have related to that and i shared with i think the city administrator and the department heads that two weeks ago we had a case where we recovered 3000 fentanyl pills so wow it's out there and there's a lot of it but generally i think we're doing a pretty good job you know i noticed something on the drive down to visit family in texas and on the drive there i noticed a lot of billboards of fentanyl strips in missouri and in illinois sort of big billboards of saying you know tested here's the local government yeah like here's here's the free strips tested and i was like oh that i've never seen that and they were like all along the highway coming coming up here and going down there so that's quite interesting so something i had noticed i was like hmm that's weird you're talking about the invalidary commitments and how has that um the right along with the uh the mental health experts how has that worked out is it is it is it positive negative visit been good that's kind of my baby going really well they have two shifts one co-responder starts at 10 a.m and goes to 6 p.m and rides with a pretty much a first shift officer and then a second shift officer takes the next person from 6 p.m until 2 a.m and it's going really well in fact i just met with the program coordinator at 3 o'clock um that my officers really like it um because a lot officers even you know that's their office they prefer to ride alone generally sure and they get a ride a lot a lot of ride logs um and so it's a bit of an inconvenience they don't complain at all it's serving the community very very well um the goal of the program really is to reduce the impact on the health care system and um reduce involuntary commitments people you know have bad days and sometimes say stupid stuff and that doesn't mean that they want to kill themselves they need to be left the way in the hospital and so it's going really well on both ends it's really been an exciting time it's wonderful for a follow-up on that is there so we that's money supported through it's ARPA funds the city and I put funds towards how long do we have funding for that program so the end of 2025 do we have a plan for after that or I know I'm asking a question should that be my our job well I think the plan is is to really gather data here so that's that's part of it there's certain data that both us and elevate have to collect and provide to the county so that we can evaluate it um and then I think it's it's determining what value it does bring and if it's going to be continued when it should really be in place do we need do we need them 16 hours a day do we need them 24 hours a day can we get by with 10 hours a day what does the data really show to make it and um for the metrics of like I guess the measurement of what is successful is that something that the county has said or is that something we're setting or we all set it together we did okay prior to starting it okay got it yep and then we provided for for our metrics we provided at least it's either a year or two years cal pulled and provided that kind of as a baseline before it started and do we feel that it's um the metrics will read well I hope so okay that's a hard question to answer yeah okay any other questions okay um I need to am I looking for hold on one second do I I'm sorry do we need to do anything I make a motion to approve and file second great any other discussion all right all those in favor please say aye hi any opposed right chair votes aye great thank you okay agenda item number nine ro number 91 23 24 by fire chief pursuant to section 24 495 of the municipal code submitting a quarterly report of benchmark measurements for the fire department for the period commencing october 1 of 23 and ending december 31st of 2023 thank you chair so everybody has to report um so uh if there's any questions I just want to point out some highlights uh we were down our total call volume for the year of 23 was down only because if you recall in 22 we had that storm that that came through and I mean we ran over 100 call that was like 130 or so calls that that one day alone so we're about a hundred and change lower so it all plays and we're still increasing it's still on the trend uh we're increasing up about 15 but we're down for last year that makes sense uh fire calls uh so we are still under 90 which is good um you know we're hitting the fire prevention program quite hard so I think it's doing some good but we shall see how this year it turns out the fire inspection is something that to note and be proud of is it's actually down uh which is great because the more we do the inspections the more they're maintaining and correcting violations so in essence the calls or the inspections go down so we hope that trend will continue so you should see a decrease in the number of reinspection so that's good uh training hours uh continues to increase our vector solution program that we implemented is doing great uh for us tracking wise and it's allowing us to really truly track how our training hours are so we're already over 17,000 uh training hours uh the total of last year from the previous year which is great so be glad to answer any questions yeah it's going um on the non-compliance install smoke alarms so like you had 56 so so in other words there were you installed like 79 so that's more so the multiple units in a home or yeah so we the 79 are the number that we installed okay we found 56 not necessarily tied to that 79 56 non-compliance okay so yes ultimately what we're trying to do is bring everybody up to the safe safe so like one on first floor one on the second floor so yeah okay we're very limited again when we go into apartments we can't go into personal apartments right sure we could just do common areas but businesses the same thing we try to keep them up to comply or if we go if you call for a residence we'll go assist so that's really where that is and when you mean residence you're home because someone can call you to oh yeah yeah if you um obviously we're encouraging spoke launch right so we want them out there so um if an elderly person or even if you couldn't reach something and you couldn't you didn't have a drill on that we can help you install it or even if you didn't have one we bring one and install it for you it's wonderful service yeah yeah any other questions make a motion to uh through the file second great any other discussion all those in favor please say aye aye and you pose share both side motion carries all right agenda item number eight ro number 89 23 24 the city clerk submitting various license applications recommend and granting the licenses contingent on clerk approval of the premises description it may have already happened but I was but as soon as they approve it it should be good and this is for the um just the two that are on here the community and the sea yeah they're both the same place so it's really yeah great um all those in favor please say aye aye any opposed share one side motion carries all right our next uh meeting date will be on February 14th 2024 we'll be giving each other's valentines a motion to adjourn second great all those in favor please say aye meeting is adjourned at 449


Hi everyone, Joe for jazby's casebreaks.com doing quick five high-end team random number block randomizer for the following teams right here, Pelicans, Grizzlies, Knicks, Wizards, and Pistons, which helps sell out Panini one-and-one Picker Team three coming up in a separate video. That's how it works if you're not familiar with number blocks. Big thanks to these folks here for getting in there, the numbers right there. Let's roll it. Let's randomize it three times. Nice and easy. That's two and three. After three times we've got Hans down to Corey, two-and-one three times for the numbers. One, two, and three. After three times we've got eight down to three. All right, Hans with eight, Kevin with two, Lizzie out Chen with six, Corey with zero, so any and all redemptions for those teams down there. Gary with five, Sean with seven, Hans you'll get live one-of-ones. Robert with four, Luke with nine, and Corey with three. We're going to order these by number right here, and coming up in a separate video will be the break itself, jaspyscasebrakes.com. Bye.


2024 is coming. Here's what's going to happen. Ah, it's that lovely time of the year when we all make predictions about what will happen next year. I feel good about these. Let's dive right in to my top five predictions for 2024. Number five, quantum computing finally starts being actually useful in some industries like drug discovery, genome sequencing, cartography, meteorology, maybe material science. This has been coming for decades, I know, but lots of smart folks feel like the momentum is finally reaching usefulness. Coming into number four, generative AI becomes boring. 2023 was the year of fear and awe of large language models. 2024 will be the year of accepting their limitations and getting used to using them for things they actually do. Up to number three, cyber resilience becomes the buzzword emphasizing not just security, but contingency plans. Every company professes to take cyber security seriously these days, so the next step is to show you're prepared to weather any future attacks. Sliding into number two, the beginning of the end of passwords as passkey gains momentum. Now, 2023 was about implementing passkey in the infrastructure, your browsers, your operating systems. 2024 is going to be about big services supporting it, educating the public about it, and making it common. At number one, mixed reality and augmented reality in the workplace. Apple is entering the mixed reality space, bringing with it all the attention that Apple brings when it enters a space, and all the people who've been using it from Metta and others will finally have people listen to them about what it's good for. All right, those are my gambles. Those are my predictions. What are yours? Make your predictions in the comments and we'll check back right here, in a year. If you want more great tech news and information, subscribe to our channel, youtube.com slash daily tech news show, or get our podcast at dailytechnewshow.com. And if you get a little value out of what we do, support us at patreon.com slash dtns. I'll see you there.


Good morning everyone. This is JSA TV and JSA podcast We are reporting live from the floor of ITW 2022 Spectacular years their 15th anniversary. We're here to celebrate and we've got some big news breaking I am here with a good friend of mine the CEO of Invulter Bruce Lerman Bruce. Welcome to JSA TV. Wow Thank you very much. Well, thanks for having me today We are so honored so excited And you have been already on the scene if you will doing two panels back-to-back just yesterday on sustainability important topic of course also an author of our greener data book Can you tell us a little bit of insight some key takeaways from those panel discussions? I think I think the biggest thing was the Momentum that this is built and I think you know Thank you for all that you've done to take a leadership position in this thing You know, we've seen you know the large hyper scale organizations meta Amazon Google you know those along with lots of companies our sizes, you know really get on board and Want to take this this leadership position and drive this forward and I think the Excitement was really building yesterday You could tell it in the panel discussion and the the conversation I had afterward. It was just you know amazing how You know, maybe we got a little bit of a slow start on greenhouse gases But you can really tell that It's picking up steam. So thank you. No, yes And it's so exciting we we launched the book greener data on Earth Day And it was amazing too because a couple days later. I mason's came out with their climate accord This is this is what's that what the entire industry is doing right now together collectively Really excited about this. Can you tell our viewers and listeners for the podcasters? What is what what was in the inspiration behind the chapter you inked for greener data? Yeah, sure. I you know for me, it's all about responsibility and leadership and When you know something needs to be fixed and you talk about wanting to fix something But you don't do anything about it that that's not really responsibility and leadership. So I think we all have That Opportunity for us to step forward and do it. I mean I can tell you that personally I do what I can Individually but also as a CEO of a company. It's my responsibility to drive you know the things that we can do to be more sustainable going forward and You know again, I think it's just all of our responsibility to take that leadership position Yeah, well said well said a great point to you made yesterday on our panel as well And and I couldn't I couldn't agree more another notable subject matter That you are an expert on is cyber security Of course more critical than ever as a leader in the space. Can you tell tell us how in Volta is keeping enterprises a little bit more protected? Yeah, I think we have some really great partnerships in the industry with some of the leaders But but you're right. I mean the the opportunity right now. It couldn't be greater We're seeing mostly our enterprise clients being attacked at a level that we've never seen before and You know ransomware and and those attacks and and you know, we really have to be Help our clients make sure that they're out in the front and leveraging the best technology possible to protect their enterprise Because it doesn't matter what industry you're in everybody believes that their industry is the most important and that they Need to be up 24 by 7 and that's absolutely the truth You know, it doesn't matter if you're manufacturing widgets or you're a health care organization or you're a financial services company They all have the requirement to be up all the time And so having you know a ransomware attack take you down for a day or more is just unacceptable in today's market You can't you can't work your business that way It can't and we are under sort of a digital warfare right now with cyber security being at such a height And also, we should know you are a leader of course in edge and hybrid cloud Tell us more about what Involta does to increase your offerings Yeah, you know, it's really interesting right now and in the time we're in Our our enterprise clients like like everyone else are really having a hard time finding employees And so when they look to say how do we implement these projects and a lot of these projects been put on hold for? You know months or years through the COVID pandemic Now they're saying, okay We're we're green lighting all these projects and we can't find anybody to do it So it's really created a great opportunity for us to help these organizations Achieve their goals and to build out the systems and processes. They need to continue to grow their business You know as it relates to edge It's it's an interesting time in the market because Kind of over the last 20 years or so everything has been built to centralize data storage data systems And now, you know, they're they're saying that over the next 20 years It's going to be a focus on decentralizing all that taking that out to the edge taking out where do the consumers are and so 5g and internet of things and all these areas are creating a real opportunity to change kind of the way we think about Compute storage and in our systems and so it's a pretty exciting time to think that you know We're really on the front end of you know, a new 20-year cycle We're re-routing our communications pattern so crazy. All right. Well, where can our viewers go to learn more? You should go to involta.com. I am VOLTA.com. Thank you. You heard it guys involta.com Bruce, thank you so much for joining us and being such a great part a leader in the movement for greener data greener data guys and Thank you viewers for tuning in to JSA TV and JSA podcast as always think green and happy networking


My name is Alexandra Hinecker and I am the Director of Sustainability Initiatives at Carnegie Mellon University. As part of my role linking students, faculty, and staff across the campus to sustainability efforts, I heard from them that the most important thing was to be able to be connected to different parts of the university to which they usually didn't have access. And the natural place to go for that sort of information was libraries. And when I talked to libraries, I learned about their efforts to connect research throughout the university, very much in line with what I heard that students, faculty, and staff wanted from what our work, from the work that we were doing. So I immediately thought it would be great to partner with them to both help different parts of the university connect to each other and lift up the great work that everyone is doing on sustainability at CMU. As part of our efforts through the sustainability initiative to understand what professors are doing in their research, in their teaching activities, and in their practice, we're working with people throughout the seven colleges to ensure that it's uploaded to elements and that we can identify the links between what they're doing and the sustainable development goals so that both internal partners like students and staff who are interested in learning about research from different parts of the university and external funding partners have easier access to information about what CMU community members are doing for sustainability. One thing I've heard consistently from students, faculty, staff, and external partners that I work with here in Pittsburgh, across the country and around the world is that they want to know what our CMU community is doing on the range of 17 sustainable development goals that cover everything from poverty and hunger to good health and well-being, peaceful justice and strong institutions, reducing inequalities, and of course climate action. There's so much great work going on across CMU, but it's hard to pull out all of that information and share it with all of these different people who are interested in collaboration. Elements is a way for people to quickly access information about what people are doing so that they can learn more, they can partner on research activities, they can identify funding opportunities, and they can help contribute to finding solutions to some of the world's greatest challenges that are outlined in the 17 sustainable development goals.


Hello everyone, my name is John Hammond and this is another try hack me video because I know a lot of you guys have been Loving that lately, and I want to get back at it. So let's dive in. I'll hop over to my Computer screen here so you guys can follow along and I'm gonna be tackling that blue machine from try hack me It's kind of an easy one. It's got a lot of users and it's really really well known It's kind of a good staple of try hack me the description is deploy and hack into a Windows machine leveraging common Misconfiguration issues, so let's go check this out It has a nice. I like this like default Windows XP banner. I love that and We can go take a look what this machine is. Is it showcasing the eternal blue exploit or MS? 17 010 010 however you want to say that Now is the exploit that kind of pseudo got released from the NSA with the shadow brokers thing and eventually kind of made for that Whole want to cry ransomware, so it's a big deal Breaks into a whole lot of Windows machines with some SMB v1 stuff and misconfiguration will essentially just grant you system access if you can point it at the machine and SMP is open then you can go ahead and roll through it. So anyway, let's dive into it This machine was created by dark star. He's one of the admins and over there at try hack me cool guy And the sequel to this machine. Oh, I want to tackle that is the ice That's another rendition of this sort of thing that I definitely want to make a video on it as well So anyway, let's join this room and we can go ahead and deploy the machine so we can go ahead and access it I'll hit that big green button to deploy and let's go ahead and create Just a folder for us to work and I'll dive into my terminal here So move into the try hack me directory. I will pseudo open VPN Our VPN key so we can go ahead and connect to that try hack me network and then reach the machine I'm using terminator. That's how I'm splitting my screen and I'll move the VPN way up to the top there Let's make a directory for us to work in I'll call it blue. Just name the box And I will get started with the read me because I think that's a good thing to do You can kind of take notes of what everything that you're working on. I Like to include my name and the date just because hey, this is good note keeping for myself And then we can go ahead and get started. So what is asked of us? We have the machine here the IP address. So I'll include that in our Notes and let's go ahead and make sure we can access it. I don't know if we can maybe it's not up yet or Because it's windows. Maybe ping is turned off We can give a little bit more time or we can just go take a look at what these challenges for us are This says scan the machine if you're unsure how to tackle this I'd recommend checking out the room for the red path and map You can totally take a hint here Again, the whole idea is to learn try hack me super duper friendly in that regard that they'll willingly give you write-ups right away Even if you haven't solved the machine you're just all about learning this thing and That's what we're here to do. So let's go back to it. See what we're working on Scan the machine. It suggested using nmap and I'll do that as well Maybe we're not getting any pings just back yet. So anyway, let's make an nmap directory Let's go ahead and nmap. I'll use tack sc tack sv enumerate versions I also want to output this to an nmap format because I think that's good to have our notes And we still have our IP address and our clipboard so I can just go ahead and paste that in I'm getting a lot of youtube notifications over here. It might be down or it's just not seeing pings So let's add tack pn in there to kind of disregard those and just scan it anyway Maybe the machine's just still not up, but I'll see if our ping is coming back Still not oh, there we go. There we go. Now he's back Okay, I guess we don't need that tack pn regardless. That's a good quick and easy one to just say nmap I don't care about your ping. Just go ahead and hammer the thing scan it It's asking us To just scan the machine. Okay, so we can mark that as complete because we are running our nmap scan It says how many ports are open with the port number under one thousand. So nmap will go ahead and scan kind of the Most common a thousand ports. I think it is. I don't know if it goes all the way up to a thousand But anyway, we'll see what results we get from nmap once that scan is done We can go ahead and work with it It says what is this machine vulnerable to enter in the form of ms. Blah blah blah example of that. Okay, so Uh, I will just discuss here for a little bit of learning I added an extra one there msf Excuse me ms. I'm not talking about metasploit here smb server This knowledge base ms 17 zero one zero critical is about eternal blue So this affects a lot of windows machines and it will immediately give you critical remote code execution So kind of a big deal Um, we can see where to track it down within metasploit And the try hack me room is really really good about actually giving you that information Again, try hack me is all about kind of guiding you and making sure that you learn. So that's a big plus Okay, now our nmap scan has returned. We see some information here. We have These and 445 isn't even showing right now Kind of an odd ball Maybe we should get a little bit more of that. Anyway, we can take a look at what we have here We are still seeing some smb os discovery So we've got windows 7 professional service pack one looks like the computer name is john pc That might be a username potentially we could totally take advantage of that If that is in fact a username And all these rpc ports you may or may not kind of consider those real If what you're working through it, you don't need those entirely But 135 for ms rpc and 139 are pretty common between net bios and you'll see that a lot on windows machines and with smb running and open Okay, that's second nmap scan returned for us I just wanted to do that one more time because I wasn't seeing 445 open and it looks like we also have 3389 So Joe's just kind of me knowing. Hey, this machine is all about smb and internal blue So it looks like we could use 135 139 445 and 3389. It's asking for under a thousand As the answer there. So it looks like we only want those three ports. So let's go ahead and submit that Number three and try to hack me. We'll tell me sweet. That's the correct answer What i'm gonna do again, just for my note keeping is just kind of save this and slap it into our read me. Let's just say Some code block here. We'll just include that And we could say what is this machine vulnerable to so answer in the form of all of these things And what I want to show you if you don't already know is that nmap can do some crazy cool things with its scripting engine So you can use tack tack script and you can also specify what kind of script you want to run from that So you can use smb and smb with a prefix with a kind of an asterisk or a wild card here We'll run everything that could use as a script under that smb family So let me go ahead and fire that off and I think I could track down Like nse scripts. There we go. Yeah, so there are tons of these over in user share nmap in my case scripts all about vnc all about tftp all about ftp tons and tons of nmap scripting engine scripts that you can go ahead and check out and see what they're really doing Let's look for those that have smb in the name So it'll look through all of these different things 17 0 1 0 is hopefully what it will trigger on But let's take a look at what that script actually is and what it's doing. So we'll fire that up in sublime text looks like this is Some cool cool stuff And if you want to do more research on the nmap scripting engine you absolutely could Just quick google search us to know what that sort of thing is and it'll explain. Hey, this is one of the coolest things that nmap can do What is all of it? You can obviously write your own you can grab some others But you'll typically want to activate it with tack tack script if you want to use a specific script And I ran a few of those with tack sc which is why you were able to see those results from the smb host discovery or the smb Security mode etc. It's at a runtime It didn't go for anything that might have been Intrusive or might do actual vulnerability scanning. So that's why when we're looking with smb as a prefix We'll also scan for that smb volm Just there we could use that as well. We could have used smb hyphen volm star and then we might be able to get more specific stuff tailored to those results We could simply run what we or what i'm kind of guiding you to the answer here that it is vulnerable to ms 17 010 or eternal blue So okay that nmap scan is taking way too long Um, so we could drill down to use a specific one if we wanted to just kind of being certain that Hey, this is what we're going to be working with. Um, we could run nmap tack tack script equals that guy On our ip address. You can see i've been hey trying to check the status of that one And it was just taking longer and longer and longer. So we could let that go Um, let's grab this syntax because we know that that's going to be the correct answer for What our try hack me room will be looking for so we can go ahead and submit that Perfect and now we can move on to task two which says gain access exploit the machine and gain a foothold It's a start metasploit. So we can go ahead and do that with msf console And it looks like our quick nmap scan had ran just fine So it is vulnerable to our ms 17 010 vulnerability remote code execution and smb version 1 And it is clearly vulnerable with severe high risk critical remote code execution vulnerability We can go ahead and abuse this because we do have Metasploit with a module has that intact. Um, let's go ahead and clear that terminal out And we'll wait to see if that big one finds any other vulnerabilities for us But msf needs to go ahead and spin up its own database and some web account stuff or whatever the things that it does I tend to just kind of whack enter every time it needs to do that and just like please give me my prompt And it will start the metasploit framework console. So we can say yep. Yeah, we did that fantastic And it says find the exploitation code. We will run against the machine What is the full path of that code? So we need to find the metasploit module that can go ahead and exploit this vulnerability ms 17 010 or eternal blue So we could do is we could literally search for ms 17 010 Or you could search for eternal blue if you don't happen to have that kind of knowledge based tag memorized And there are a lot of options here We have some auxiliary scanners that will simply verify. Hey, is this going to be vulnerable to that? And we could if we could use that if we wanted to um, if you check out the options for what this has It should just kind of ask for the our host. That's really the only one that's kind of necessary So I will go ahead and say, yeah, let's set our our host to I'll go grab the ip address here Spit that in there hit run and then our our plan our auxiliary scanner will work through and says hey That is pretty likely vulnerable to that. Anyway, that's just scanning it kind of the same thing that nmap did I think you can safely scan For ms 17 010 vulnerabilities that are actually beating up the machine because Using the exploit for eternal blue can sometimes over and over again Cause a blue screen and kind of knock the box over. So anyway, we had scanned for eternal blue We had searched for it. So we could potentially find some exploit that will work here We could just simply use kind of the most common one exploit windows smb ms 17 010 eternal blue and that is kind of the one that is Okay, average ranking I do tend to see the ps exec rendition of it that I think is the one that uses named pipes And a little is a little bit more stable and reliable But anyway, let's go ahead and fire off this one because I think that's what it's asking for We can go ahead and submit that And yeah, that's all we need So let's go ahead and use that module We can check out the options to see what we need to supply Looks like our host is the only one that is still a required parameter that doesn't have a setting The r port is required, but that is by default 4 4 5 where smb server matches message block typically listens on And it will go ahead and verify the architecture and target etc etc Anyway, we will need to go ahead and set that our host, but that is what this next question is asking for It wants it in all caps so we can go ahead and submit it And let's set that our hosts which I have in my history Let's hit run or exploit that will go ahead and fire this off It will check it, determine that it is vulnerable and it will kind of spam along Send the exploit Let's go ahead and hit completed. Yep, we did successfully run the exploit And so to confirm the exploit has ran correctly. You might need to press enter for the DOS or DOS shell to appear and we can background that Okay, so looking back at our exploit now We do have kind of this win notification here and that we successfully were able to exploit it And we do have a command shell open on the target on the box. You can see I'm in that c windows system 32 directory I do have cmd.exe DOS Execution and I can enter commands and do things on that target machine So I could kind of jump around a little bit type in who am I looks like I am the nt authority system So we have full control over this machine just from that single exploit And now we could see what else we wanted to do It's a good idea at this point to try and escalate our shell or upgrade our shell Because we have just regular cmd.exe We're a little limited in what metasploit could actually allow us to do Because if we were to be using the meterpreter shell, we could upload and download files We could run some post exploitation tools or scripts or other metasploit modules So that's something that we really want to do so we can background as they said with control z And that might actually depending on your shell background the entire metasploit program So what I tend to like to do is just enter the command background And now that will read Okay, that's something that we're actually going to background Let me get back to that session and show you that one more time interacting with session one Okay, so background is not normally a command that cmd.exe would understand typically in the windows world But because we're running within metasploit metasploit will see that and understand it and okay Oh, you do want to background and go back to your regular msf prompt So now we could run something like shell to meterpreter to actually upgrade and escalate our shell So if you wanted to you could literally just run or use shell to meterpreter And try hack me goes through a little bit of a good explanation as to what you could be doing with that here in the in their tasks That's over an escalate section here I've already filled a little bit of this out because I needed to Restart some recording because the box a little bit unstable The free version makes this a little bit hard to do on try hack me And I know obviously the eternal blue exploit itself might damage the machine a little bit That's going to hurt So we could be using that post multi-managed shell to meterpreter module And that is what metasploits going to recommend for us when we try and use Shell to meterpreter, but just to make a little bit easy on typing there We don't need to include that entire path of metasploit knows that's so common It'll go ahead and use that for us. So it puts us immediately in that module context Now the thing that we need to actually specify when we're working here is the session option because it needs to know What session are you actually going to end up using what special are you what session are going to use that is right now Regular shell cmb to the xc that we want to upgrade to meterpreter So we could set our session to any of the sessions that we have active right now In our case, we'll want to use the id just that number one here for that is our first shell that's open So I could say set session to one and then we could go ahead and hit run I also learned another cool trick you could use session tack you and I will go ahead and upgrade that with the session id If we hit enter on that Excuse me sessions. I don't know why I do that all the time. It'll go ahead and automatically figure out Okay, this is what you're trying to do with the multi-managed shell to meterpreter session And it will go ahead and start the reverse tcp handler It'll wait to go ahead and catch that and start a new exploit for you And then you'll eventually have the meterpreter callback Uh, hopefully right we could check out sessions and right now. We don't have anything called back just yet We could try and interact with our session number one Who am I Okay, and that's still alive thankfully so we can background that And it looks like okay now it's finally coming along and that sessions tack you worked for us just as well Or we could very well have just hit run or exploit from within the con context of our exploit Uh post multi-managed shell to meterpreter Anyway, now we can go check out our sessions because you see it opened session number two Which is running meterpreter So we could sessions tack I to interact with number two and now you can see I am inside a meterpreter prompt I can get uid which is kind of their equivalent to the who am I command you can see we are still Anti-authority system awesome. So we could say yep, we ran all that Entered the session there ran it We might needed to we might have needed to Re-exploit the machine if things kind of fell apart which it did in my case. So I know this one is a little bit sensitive and kind of broken Verify that we've escalated anti-authority system. You can run get system to confirm this. So let's go ahead and do that Get system will kind of by default try a couple different avenues and routes to Determine or find some way to get the anti-authority system account Maybe do some uac bypass or other things or pipe impersonation In our case, we already were anti-authority system. So we wouldn't need to run that but again confirm So feel free to open a doc shell via the command shell and run who am I so we could do that Shell will let you in to a small command prompt here, which you can hit Who am I and then you could control c to break out of that and it'll terminate that channel and throw you back into your interpreter session So say that's done list all the processes running the ps command Just because we are system doesn't mean our process is find a process toward the bottom that is running as anti-authority system And write down the process id in the far left column. Okay, so just some learning just some kind of understanding with what metaspoid and interpreters doing If I run ps you can see the process listing here the parent or excuse me the pit the process id and the ppid the parent process id The name that's running the session architecture user, etc And where that's running from So if you wanted to if it were kind of an unstable connection or you wanted to move to something else You could use the migrate command migrates pretty awesome because you could migrate into another process Your interpreter session in memory could move and pull into something else If you want to use tack n that'll let you specify a better one At least enter it by the name rather than just the process id because sometimes running ps and trying to track it down can be a little annoying So I like to migrate to the capital n win log on dot exe. That's normally a safe bet That's always running and still has some pretty crazy privileges, etc so Once that's going we can say that that is completed. Oh, and there's actually asking us to migrate with migrate process id fantastic Note that that may or may not work migrating processes sometimes can be tough But it looks like ours ran successfully. So perfect. All right. Now we can do some interesting things We can go ahead and crack some information Dump the non-default user's password and crack it within our elevated interpreter shell run the command hash dump And that will dump all the passwords of the users on the machine as long as we have the correct privileges to do So so we could go ahead and run a hash dump And you can see that there is another user john in here j on And we did see that earlier when we were looking at some of our nmap scan results So looks like that is the answer there. What is the name of that user? Copy this password hash to a file and research how to crack it. What is the cracked password? Okay And we have his hash here. So I might Actually, just see if I can crack that with something online just to make a quick easy one the crack station I think can handle Some ntlm stuff. So let's go ahead and paste that in I am not a robot and it doesn't know what it is. So let me remove just that preceding section because that might be The empty sting. Okay. Yeah, so alq fna 22 is apparently his password great We can go ahead and submit that And we should probably be documenting everything that we've been doing but hey Hey john's password And that is with no h in john's name. Okay So now that we've got that cracking section done. We want to find flags. There are three flags planted on this machine Uh flag one. Okay. It doesn't really give us any information. Um Check out the hints. Can you see it? I don't know what that means Oh might be actually referring to the c drive because if we check out our current working director We are in c windows system 32, but if we move all the way back to c You can check out the directory listing and we do have a flag one dot text file there Okay, so we could cat that out flag one dot text And flag is access the machine. Okay. Fantastic. It looks like it just wanted us to submit the Inside part in between the curly braces. So let's submit that And then flag two Arata windows really doesn't like the location of this flag and can occasionally delete it and might be necessary in some case Determinate to restore the machine. Oh jeez and rerun the exploit to find this flag. This is relatively rare. However, it can happen Okay, I wrote this I wish I wrote down where I kept my password. Luckily, it's still stored here in windows Okay, so this might be stored in the sam configuration, right? So, um Windows sam Location we could google that that is kind of the path that has all of the Hashes that are stored for usernames and for users and on the system It's in c windows system 32 config. So we can see if that exists see Windows system 32 Config i'm using forward slash is here. So I don't have to use a w w or excuse me the double Backslash escape because you need to in that we're working in ruby. So you need to supply two backslashes If you actually end up using a backslash dir let's see what we got. Oh, there's a flag two file here. Fantastic Nope, it's not really there Wait, did I type that right flag two flag two dot text There we go sam database elevated access cool Thank goodness. Then when I did this originally that flag was not there and I was like, how am I going to show this in a video? So cool that one's good And flag three. Okay, so let me showcase something that I actually kind of wanted to um in this video for this section because interpreter has something awesome called search where you can search for files here And if you don't know how to use it, you can use search tack h You can search inside a directory recursively or for a specific pattern You typically use tack f and you can use the wild card or the asterisk to glob things By default, I think it starts Either from where you are or from where you're going but and more it can do the entire file system So we'll search for things that start with flag right or flag dot text And since I have a number in there, we could use flag Asterisk dot text maybe so let's do that. Let's use search tack f flag star dot text And maybe this will track down where we found that flag one and that flag two and it could tell us where flag three is So this might take a little bit of time I'm going to let this run and we'll see if it actually gets new results Or if it's going to use from our current directory or not It probably has to cache like just about everything. So maybe this will take some time Okay, so it looks like it found those flags there It found flag one right where we found it earlier looks like it also found flag two right where we were And it found flag three in the documents of that john user So we probably could track that down if we did our own enumeration Manually looking for seeing hey, what's in this user's directory? What stuff does I have etc etc? But there is flag three So we could go ahead and try and cat that out and I'll just show you that quick Issue where we are not going to be able to find that file because we're using backslashes So we'll need to specify two backslashes in order to escape them and actually be able to read that out So flag admin documents can be valuable. We can go ahead and grab that paste it in here And with that we have completed everything in the room and it says congratulations. We did it You completed that run. So that's that You could also and I found this kind of interesting earlier when my flag two didn't spawn for me when I did this originally I would search and I tried to look for things that didn't have that dot txt extension And eventually I was able to find something that was an lnk file or like a shortcut And that was pretty cool because looking at that specific file It would actually tell me hey, this is the path. This is the location for that flag number two So even without using that search function and flag two not spawning when I did this originally then I could still know Okay, that's where that flag location actually is without looking at the hint without I don't know looking at write ups, etc Etc. So I hope those are some good nuggets. I hope those are some good tidbits for you Once this returns, I'll show you that technique Okay, there we go. Now we got our results back. We saw the flag one text itself two three text itself, etc But we were able to find these lnk files Which are acting like small shortcuts for us So this flag this file did stay intact when I Previously did this and that flag two file hadn't spawned for me So what I had done and I'll show you this is just simply cat this out and type this out Again, if I copy and paste I need to throw in these escaped backslashes Use a pair of them here and now you'll see a lot of nonsense, right? Because a lot of this isn't printable characters It's kind of like a compiled binary not a compiled file, right? But it's using some raw bytes that aren't printable and we could see oh this is the current path Windows system 32 config flag two dot text and that is where that would actually be stored Even if that flag hadn't spawned so kind of cool good trick I hope that search tack f syntax can be handy for you inside interpreter And maybe you hadn't heard of that before I hope that's uh what we're doing here what we're learning for this video So that's that that is the blue machine from try hack me Sorry for kind of the bumps in the video editing on this I I needed to redo this a little bit of time and then someone started like mowing their lawn outside And it was just awful. I rage quit a little bit But thank you guys for watching I really recommend if you're playing a ctf or you're doing some cheesy pen test video game Not a video game Just a hack quest competition a king of the hill event I don't know what you're doing But if you see a windows machine if it looks kind of old if it has got if it's got 445 open if smb is open listening Maybe it's smb v1. It's worth the try check that Auxiliary script determine if it's vulnerable and then fire away for a tunnel blue It's a quick and easy win and that's pretty awesome. So thank you guys so much for watching I really hope you enjoyed this video if you did please do press that like button if you didn't like the video I don't know what to say All right. Thank you guys. I appreciate it Like comment subscribe the youtube algorithm thing. See you on discord twitter facebook linkedin instagram all those Internet things. Bye. I love you. I'll see you in the next video


What's up everyone? It's your girl Kenzie here from Leighton Sports Cards and I'm ripping a personal for Justin S We've got a 2022 Leaf Ultimate Draft football hobby a 2022 Panini mosaic choice baseball and a 2022 Panini revolution WMBA hobby box All right best of luck as always Justin Appreciate all your support every Sunday. Let's see what we can get you here Start with the ultimate draft First up we have leadership of George Carol Aptis 20 out of 50 50 there They've got Ricky Otto of Vilas Jones jr. Cago beers on that one Got 13 out of 75 a Michael Meyer mayor. Let's see Michael Myers Mayor though 13 is 75 17 of 35 Ricky Otto a Zemir whites 35 Nice one here for you Justin ultimate signatures 23 of 50. How about a Kenny pick it?  I can call him that because he's actually wearing two gloves in that picture local choice next Silver Nathan of Aldi Got Joey Gallo mosaic our choice exclusives a Jesse winker for the Mariners and A hunter green rookie rents They've got mosaic rookies of Curtis Terry for the twins and a Bryson stomp for the Phillies first auto up we have a Peyton Henry catcher for the Marlins and Last hits of the box another one here for you Justin. How about an O'Neill cruise rookie auto? There you go hitting some nice Pittsburgh cards here man jealous first to pick it now the cruise very nice. All right, WMBA time Good luck Galactic, I don't know if we pulled one yet. Good luck zoo Turner Mitchell you have an auto already out of 99. Oh, nope Brittany Griner She did sign out of yesterday a one-year one-year deal with the Mercury. So she will be back Yeah, Eric. I'm a big dealer fan. John Cole Jones on the supernova He's granted her a alright Whitcombe Carrington Cooper Dykes. We've got a Aguimique on the Astro and Vortex. Oh Can't read that name Augustus She's been been out and been home for for a while Atkins Verbelle we have a out of 50 a cubic rookie auto of Emily angstler For the fever nice rookie auto there The one is 30 out of 50 For the fever Carrington on the groove and supernova Becky Hammond. Nice Becky Hammond there Yeah, yeah, you did Eric I don't think he's our next franchise quarterback, but he's better than Rudolph and Travis. Yes, we're not sure Stevens on the astra and rookie revolution of Burton Jackson Jones super you've got out of 149 a Brittany Sykes on the impact This one there Rookie revolution of Ray Burrell We're out of Stuart. I'm so hyped to see her play with I and Eskia this upcoming year. What's up, James? Wallace Sykes. We've got supernova Diana Terrasi. She's also coming back. It'll be her I think they said 19th season in the WNBA. Yeah, and then we've got shockwave of Jewel Lloyd Erin and Griner both going back to the mercury Hammond Gray Eggbow, we've got a Ogimike on the fractal and Liz Cambridge vortex slacks back here had a die cut to end it up And the cloud we've got Lexie Brown on the astro and die cut liftoff of Candace Parker Love it. She's going back to Vegas too a lot of Crazy stuff going on in the offseason WNBA Love to see it super excited for the upcoming season that will do it for you Justin. Congrats again. Thanks so much for your support As always we'll get these right out to you