Forum Widgets
Recent Discussions
AI Foundations: Retrieval Augmented Generation (RAG) Lab
Within step 6, the instruction says after creating the Knowledge base "My Intellectual Property" folder, xto change the chuck size to 65 however a Warn is displayed saying, "Please add both embedding model and LLM in the setting>Model provider fist. then set them in the "set default models'. After selecting the Ok button, I try to add vai the Set default model but then see this... "The default embedding model for each newly created knowledge base. If you cannot find an embedding model from the dropdown, check if you are using RAGFlow slim edition (which does not include embedding models) or check https://ragflow.io/docs/dev/supported_models to see if your model provider supports this model." Not sure how to address/resolve, any assistance will be helpful. Thank you, TonyAI Foundations: Retrieval Augmented Generation (RAG) Lab
Within step 6, the instruction says after creating the Knowledge base "My Intellectual Property" folder, xto change the chuck size to 65 however a Warn is displayed saying, "Please add both embedding model and LLM in the setting>Model provider fist. then set them in the "set default models'. After selecting the Ok button, I try to add vai the Set default model but then see this... "The default embedding model for each newly created knowledge base. If you cannot find an embedding model from the dropdown, check if you are using RAGFlow slim edition (which does not include embedding models) or check https://ragflow.io/docs/dev/supported_models to see if your model provider supports this model." Not sure how to address/resolve, any assistance will be helpful. Thank you, Tony
Threat Research: Dependency Confusion exercise 8
Humble Pie is not updating after 60 seconds it is stuck in the version 1.0.0 my packages have been created my setup.py seems to be working fine But I am never getting an answer in listening, never getting the connection and build.log is NEVER updating to latest version why is this not working... I really need to have this lab finished for my work.
OT Threat Actors - CyberAv3ngers
Hi, I’m stuck at Q6 “During the defacement campaign of Unitronics, the threat actor exploited internet-facing PLCs and HMIs. What MITRE ATTEMPT&CK tactic does this fall under?” it seems obvious to me but wasn’t working and none of the “Initial Access Techniques” worked. Thanks for any help...
FIN7 Threat Hunting with Splunk: Execution Analysis
Hello everyone, I am stuck at the following task : "Which IP address and port does the encrypted payload communicate with? (Format ip:port)" I think I found the right function (babymetal) as I could answer the previous question : "What key is used to decode the embedded shellcode?" But where do I go from there ? I thought about doing dynamic analysis, but I have no tools to do so. Quite frankly I am lost Thanks for your helpCWE-565: Reliance on Cookies Without Validation and Integrity CheckingOpens in a new tab
I was working on this excercise CWE-565: Reliance on Cookies Without Validation and Integrity CheckingOpens in a new tain find the Flaw: Java – Software and Data Integrity Failures Theory lab even after selecting the correct vuln name and the code lines, it is showing as incorrect line selected, please assist me on this code Find the Flaw: Java – Software and Data Integrity Failures (AIG Refresh) Theory lab Select the line numbers containing the vulnerable code, then select the correct CWE identifier for the vulnerability. Incorrect Reset selection Selected lines: ?? Select a Vulnerability Select a VulnerabilityCWE-276: Incorrect Default PermissionsCWE-565: Reliance on Cookies without Validation and Integrity CheckingCWE-502: Deserialization of Untrusted Data CWE-915: Improperly Controlled Modification of Dynamically-Determined Object AttributesCWE-829: Inclusion of Functionality from Untrusted Control Sphere CWE-280: Improper Handling of Insufficient Permissions or PrivilegesCWE-353: Missing Support for Integrity Check CWE-494: Download of Code Without Integrity Check @WebServlet("/checkout") public class CheckoutServlet extends HttpServlet { @Override protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {HttpSession session = req.getSession(false); Long userId = (Long) session.getAttribute("userId"); User user = userService.findById(userId); if (user == null) { resp.sendError(HttpServletResponse.SC_NOT_FOUND,"User not found"); return;} Basket basket = basketService.findByUserId(userId); if (basket == null || basket.getItems().isEmpty()) { resp.sendError(HttpServletResponse.SC_BAD_REQUEST, "Basket is empty"); return;} double totalCost = 0; for (Item item : basket.getItems()) { totalCost += (item.getCost() * item.getQuantity()); } Cookie[] cookies = req.getCookies(); double discount = 0; if (cookies != null) { for (Cookie cookie : cookies) { if (cookie.getName().equals("applyDiscount")) { try{ discount = Double.parseDouble(cookie.getValue()); } catch(NumberFormatException e){ resp.sendError(HttpServletResponse.SC_BAD_REQUEST, "Invalid discount"); return;} break;} } } totalCost -= (totalCost * (discount / 100)); resp.setContentType("application/json"); resp.getWriter().write("{\"totalCost\":" + totalCost + "}"); } }
Struggling to find the IT email on Simulations: BarterTown Delivery
During the last few days, I’ve been stuck on this lab, and I’m not sure what I’m missing. The lab asks us to use OSINT tools and techniques to gather intelligence about individuals to target within the organization, with the goal of testing the awareness of BarterTown’s IT staff and eventually gaining a foothold in the internal network. I’ve been using the information provided by the lab as a starting point for my reconnaissance. The website gives us several employees and their email addresses, but none of them are identified as IT staff. I also found the DNS SOA contact (hostmaster.bartertown.bitnet), but that appears to be a standard administrative DNS alias rather than an actual employee. The mail server does not seem to allow useful anonymous user enumeration, and the other reconnaissance results have not revealed the missing user. Has anyone completed this lab and can give me a hint about where/how the missing target information is supposed to be discovered?
Elastic Data Ingest: Demonstrate Your Skills Q9
I have found the answers to all the other questions including 10 but I don't quite understand what Q9 is asking for when it says "Shortly after this file was created, two temp files were also created. What is the last 6 characters in the name of these temp files?" . I have found the files created after q8 answer see below but as far as I can see no combination of the perfstringbackup.tmp file is being accepted (have tried including the file extension and not) . Any guidance on what the question is actually looking for here ?
If your question has been answered, help others by clicking:
