cyber-security-101-path

[hasty scroll]

I love the raccoon!!!

[brazen blade]

give me 5 minutes to start it up and get to where you are

[hasty scroll]

ok

[brazen blade]

please tell me again which Task and Question that is?

[hasty scroll]

task 4, question 2 is the one I am on right now

[brazen blade]

did you export the file?

[hasty scroll]

this is what I get when I do

[brazen blade]

yes

you can enter a name

and then hit save at the bottom right

[hasty scroll]

should append it with a jpeg?

[brazen blade]

not needed

[hasty scroll]

picture

sorry,

[brazen blade]

alright. Now open a terminal and use the command to get a md5 hash with the name of the file you just saved

[hasty scroll]

took me back to wireshark

ok

[brazen blade]

keep in mind that you need to be in the same folder as the image

[hasty scroll]

how do I do the hash command again?'

I just did hash and the file

[brazen blade]

what kind of hash are we looking for?

what variant

[hasty scroll]

md5

[brazen blade]

what is the exact command to get an md5 hash?

[hasty scroll]

let me look it up

[brazen blade]

basically we're looking up an md5 checksum

[hasty scroll]

hashfile is n't working

[brazen blade]

what are you entering exactly?

[hasty scroll]

I have tried several. hash picture MD5

hashfile

[brazen blade]

no no wait

take a step back

[hasty scroll]

with and without the dash in front of it

[brazen blade]

we're looking for the command that prints the md5 hash of a file

its a single command thats 6 characters long

[hasty scroll]

certutil -hashfile

[brazen blade]

I'm not sure if cryptography already came up or was before

but what you're looking for is hidden in here:

[brazen blade]

.

if you need more direct help, let me know and I'll just spoil the answer lmao

[hasty scroll]

now I am getting this

[brazen blade]

nono

drop certutil

ignore it

you're looking for a md5 checksum (the bold marked might be a command if combined together) + filename

Now I either gave you the hint you needed or completely threw you off the topic lmao

let me know which one it is so I can actually give you the command

[hasty scroll]

this is what I get

[brazen blade]

drop -hashfile as well

6 letter command

ok so its

||md5sum|| + filename

obv not the + but a space

try that

[hasty scroll]

That finally worked!!! I have never seen it done that way before. I am still new to this cybersecurity thing. I would have been at it for hours if not days and weeks. LOL

[brazen blade]

dw it will get explained in Cryptography in more detail

which should come after networking I believe

[hasty scroll]

I have definitel been redoing rooms with this new path. Doesn't hurt me to redo them

I take copious notes though, LOL

[brazen blade]

thats the way

I think I burned through 20 pages on notes for the network fundamentals alone

[hasty scroll]

Lol, that's good

They have crptography after this section

They should have crptography before networking, lol

[brazen blade]

yea. I mean I think its the only time you need anything cryptography related

but that knowledge may have not hurt beforehand

[hasty scroll]

definitely wouldn't have but I still can't find question 1

[brazen blade]

help me out please, which one is that?

[hasty scroll]

the question before that one you helped me with

same room

[brazen blade]

if you look for the string r4w, you get thrown onto package 33790

inside the html is the artist name

it should already be highlighted in blue if you searched the string

and as mentioned, its a bit more to the right inside <h3>

[hasty scroll]

I don't see anything

[brazen blade]

you can drag the window to the right

move that slider to the right a bit

or press on the > arrow at the right side

[brazen blade]

well thats too far

your answer is hidden somewhere inbetween

[hasty scroll]

all I see is a bunch of code and websites

[brazen blade]

if you press find again

it will take you to the exact line

on that, just go a bit to the right

[hasty scroll]

I was looking for a name not a friggen code word, lol

[brazen blade]

xd

[hasty scroll]

Not sure what to think of this question, lol

They could have worded it differently

[brazen blade]

I guess I should then prepare you and let you know that the second task wants you to find another artists name? 😄

[hasty scroll]

First you have to find the .txt file, lol

Not sure I am liking Wireshark, lol

[brazen blade]

it takes some getting used to

[hasty scroll]

when I hit the find button it goes between two different packet numbers

[brazen blade]

then what you were looking for is in multiple packets

depending on what you're looking for obviously

[brazen blade]

wait till you use metasploit

[hasty scroll]

I am ok with Metasploit, SO FAR, LOL

but I am not finding the txt file but I am looking in the html/text

section

I think I am done for awhile. I am not seeing the .txt file in either packet. I'll either get back on later or tomorrow for sure

Thanks for all your help!!!

[brazen blade]

Take a break! It's fine. The Wireshark room as a lot of input

I'm sure you'll get it tomorrow easily. If not, I might be here

otherwise someone else is

[nocturne crest]

I'm on the struggle bus. I working on Windows Command Line in cyber security 101. Task 4 What are the file’s contents in C:\Treasure\Hunt?

Could someone help? I just keep getting a access denied error.

[woeful jungle]

Can you provide a screenshot ?

You first need to go to C:\Treasure\Hunt directory || cd C:\Treasure\Hunt ||

Than use the || dir || command in it to list files

You can than read the file contents with || more || or || type || command

[nocturne crest]

Thank you you let me try.

I'm sorry idk what I'm doing wrong. If I type more I getting syntax of command line is incorrect

same thing with type

[woeful jungle]

What's your full command ?

[nocturne crest]

user@WINSRV2022-CORE C:\Treasure\Hunt>cc

sorry not the cc

user@WINSRV2022-CORE C:\Treasure\Hunt>

[woeful jungle]

now type || dir || . You should see files that're in that directory

[nocturne crest]

I'm sorry I got it

I'm a dumb ass. I was looking at the wrong thing. Completely user error. THANK YOU so much for your help.

[woeful jungle]

You're doing good , keep going 😉

[hasty scroll]

I am not sure what packet to be looking in. Wireshark: The Basics task 4

I have looked in the r4w packets, both of them and didn't see a thing

[woeful jungle]

File > Export Objects > HTTP > You will find an interesting .txt file there 😉

Press save to save it on your machine

[hasty scroll]

Which packet number?

[woeful jungle]

Press File in the upper left corner of the Wireshark app

You can sometimes export files from unencrypted pcap which were transmitted during communication

[hasty scroll]

it give me a bunch of objects but no text files really. I see wireshark.desktop

[woeful jungle]

There should be a plenty opf objects . Sort by filename, you're looking for .txt files or sort by Content Type, you're looking for text/plain files

[hasty scroll]

I don't see any text files

ads%3fclient=ca-pub-2309191948673629&random=1084443430285&lmt=1082467020&format=468x60_as&output=html&url=http%3A%2F%2Fwww.ethereal.com%2Fdownload

I see text/html. And then when I save it, it saves different things when I click on different lines.

[hasty scroll]

Thank you, that was more confusing than it should have been

now where do i find the expert info section?

Nvm, I found it

[hasty scroll]

Only three are displayed

Wireshark: the basics task 5

[woeful jungle]

Your filter isn't good

[hasty scroll]

I changed it slightly now I am not seeing anything

[woeful jungle]

Delete everything from the filter bar and apply the file just like in my screenshot

[hasty scroll]

I will do it again like that then I'll send what it gives me

Cause I did it that way but I couldn't find how many packets. The number at the bottom of the screen was wrong

[hasty scroll]

I don't see the number of packets

56820 was wrong

[woeful jungle]

Delete that frame.time filter

[hasty scroll]

58620

[woeful jungle]

and apply http filter

and see how many packets are displayed

The number you're looking is the total number of packets in the pcap file

[hasty scroll]

and where do I find the pcap file, lol

[woeful jungle]

You're already inspecting it 🙂 . Exercise.pcap

[hasty scroll]

well the answer is not 58620

1089

[woeful jungle]

that's right

[hasty scroll]

nope

yep, I had it in the wrong spot, lol

I am beginning to really not like Wireshark, lol

[woeful jungle]

You're doing good , keep going 😉

[hasty scroll]

I am almost done with the room

I have looked at this file before and now they want us to find how many artists there are and the names? Lol

I am not seeing anything but the first artist's name.

[woeful jungle]

search for || artist=2 || and || artist=3 || in the find bar

[hasty scroll]

won't do it

neither works

[woeful jungle]

Follow the http stream

for packet 33790

[hasty scroll]

Thank you for your help tonight

I really do appreciate it. I may repeat this room this weekend.

[noble sun]

cd To change Directory
dir To list the contents of the directory ( ls in linux )
type To display the contents of the file ( cat in linux )

[crimson silo]

How would you retrieve the items in the current directory with size greater than 100? [for the sake of this question, avoid the use of quotes (" or ') in your answer]
Get-ChildItem | Where-Object Length -gt 100

[quaint plover]

Youre missing something
Hint:

[woeful jungle]

What is Length of an object ? 🙂

It is its ? 🙂

[crimson silo]

property

[woeful jungle]

Yes

🙂

Just add it to your command

[crimson silo]

thank you @woeful jungle @quaint plover 😃

[olive fog]

Gave +1 Rep to @woeful jungle (current: #102 - 74)

[dark narwhal]

Are the laptop tickets and THM vouchers over already?

I am keep completing rooms and only getting CYBER Crusader and Streak freeze tickets 😄

[scarlet vine]

Same, i've done all the rooms and I didn't get anything other than these, I was hoping for a shirt but maybe next time 🥲

[gentle shoal]

How many prizes left?

[civic tartan]

infinite amount of Crusader Titles and streak freezes.

[gentle shoal]

What's a Crusader Title?

[civic tartan]

Cyber Crusader Title that will show on your profile or even here on discord (instead of your level), for aslong as the promotion campagne (4 nov)

[gentle shoal]

That's... Useless 😞

Also I got only 2 rooms left (not subscribed). Just gonna do it for fun now.

[woeful jungle]

Good luck , maybe you find something 😉

[green tree]

I'm doing the web application basic, but i don't get the flag for the POST command, it just says "user 2 is successfully updated", is there a problem?

[civic tartan]

i havent done it, but hint says to watch for case sensitivity, maybe not Country but country?

[green tree]

I did that (in the screenshot)

[civic tartan]

automatically changes to a capital C?

[green tree]

what do you mean, i changed if after looking at the hint

[civic tartan]

You have to click the save icon then proceed.

[green tree]

nope

[civic tartan]

I just got the flag that way. In your screenshot the country:US is not saved yet.

[stark jay]

thank you for help. The issue was with my eyes. I just used password as a username... I should probably wear glasses.

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 295)

[green tree]

Yes, i saved it but nothing change

[civic tartan]

when you click GO no flag shows? then refresh the room i suppose.

[green tree]

Still no flag

[civic tartan]

then refresh the room maybe. I can click Go 100x and the flags will show every time..

[green tree]

I try that...

nothing x)

Got it, it was supposed to be lower-case...

[brazen blade]

I believe API requests should always be lowercase, Might be something to keep in mind

[green tree]

i forgot to say thank you @civic tartan !

[olive fog]

Gave +1 Rep to @civic tartan (current: #32 - 254)

[merry tide]

Hey guys... I am stuck here...

What is the IP address of the host that sent packets larger than 15000 bytes?

Can anyone tell me

this is the filter I am using

tcpdump -r traffic.pcap 'ip[2:2] > 15000'

[sharp ferry]

Hey Darth, i used tcpdump -r traffic.pcap -n -vvv 'ip[2:2] > 15000' -c 1 | sort | uniq ( I am new, so not sure of the rules around helping etc)

Let me know if that solves it for you.

[merry tide]

thank you so much man... i will write it down in my notes...

[olive fog]

Gave +1 Rep to @sharp ferry (current: #2326 - 1)

[merry tide]

really helpful

[sharp ferry]

Helpful if it works :-), I am on the journey too!

[merry tide]

me too

all the best for your journey

[sharp ferry]

👍 Thanks, if I can help, let me know.

[merry tide]

sure thing

i will..

[hasty scroll]

Tcp: The basics. I am not getting anything back when I put a command in and was wondering why

or does it take a long time to get results

[green tree]

show the command please?

ah sorry

which task is it?

[hasty scroll]

Are you still there? I just saw this message

The command is in the screenshot

It's not a specific task. I'm just trying to get a response like the examples show.

[zealous lake]

Traffic needs to be generated for tcpdump to capture it

[inner falcon]

^ there is a pcap file saved in the machine named traffic.pcap
This is useful for answering some of the questions in the tasks.

[green tree]

Sorry I was already sleeping 😴😪

[lavish trellis]

if you do port 22 instead of port 53, you should get plenty of traffic, as that is the port used by the ssh connection to login to the target VM:

[gentle shoal]

In the Blue room, how do I confirm if the exploit has run correctly?

[green tree]

@gentle shoal for the Recon part?

[gentle shoal]

No, the Gain access part

I keep getting the Failed message.

I tried restarting the target machine too.

[green tree]

You should see the result in metasploit

if you don't have a reverse shell, it's a failure

[gentle shoal]

What could be the issue?
I got the "exploit completed but no session was created" message

[civic tartan]

Eternalblue is a very unstable exploit, it often takes a few tries before successful. Could you show screesnhots of the options that you set, just to make sure everything is set correctly.

[gentle shoal]

Um.... I got fed up with it and shutdown the VM

[gentle shoal]

I'll try later

[oak lark]

finally jus one remain

[woeful jungle]

Congarts 😉

[oak lark]

thanks sir, your great!

[olive fog]

Gave +1 Rep to @woeful jungle (current: #76 - 95)

[hasty scroll]

I'll try that, thank you

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 296)

[little spire]

In the Hydra room, it's showing 16 correct passwords for molly. This can't be right. Has anyone else encountered this?

[hasty scroll]

I am trying to get the ICMP traffic. I am typing it the way the example shows but it doesn't give me anything

Tcpdump: The Basics, task 3. Why is it not filtering out the ICMP traffic?

[lavish trellis]

are you generating ICMP traffic?

[hasty scroll]

Lol, good question! How would I know or how do I do that?

I am new to this cybersecurity thing

[lavish trellis]

ICMP traffic is generated typically with the ping command
so you could do ping from your attacking machine towards the target with ping <IP of target>
you stop the ping command with Ctrl-C

[hasty scroll]

How long would I ping for?

[lavish trellis]

you could do ping <IP of target> -c 5 to generate 5 ping, i. e. 10 ICMP messages if you prefer that instead of starting by default an infinite ping that you stop with Ctrl-C

[lavish trellis]

you would get that if you put the wrong path as parameter in the http-post-form part of the hydra command
I find the room material is a bit confusing
you get the right path by looking in the Network tab of the developer tool, or by intercepting a login attempt with Burp

[little spire]

Ah. I see now. It is a bit confusing. Thanks!

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 297)

[lavish trellis]

FYI: here is what I get when I do that ping command with my instance
I like to use the -n option with tcpdump: I get the IP address, intead of a domain name

[hasty scroll]

When I ping it, it still won't give me anything in the target box

it just resets the terminal

I have tried starting the tcpdump before I ping it and it still doesn't give me anything

[lavish trellis]

before you showed this screenshot for your tcpdump command, which was different from what you just post here:

[hasty scroll]

basically it just goes back to the prompt and the tcpdump command doesn't show

when I try to run the command again, it just listens

should I be putting the name of the file in there/

in the command

[lavish trellis]

what is that 10.100.1.28 IP address?
there should be only 2 IP addresses involved here as there are only 2 machines involved

[hasty scroll]

did I just post that? or is that an old one? Because that is not the IP address of either box

I see it now. I don't know where that came from. That is on the target box

Should I close it out and open another target box?

I figured it out. It was the wrong command that I was using

[dense hatch]

I am trying to complete task 4 of the tcpdump basics room. I tried tcpdump -r traffic.pcap greater 15000. The results look correct to a newbie like me, but the site does not like the IP address 192.168.124.137. Any tips would be helpful. Thanks!

[lavish trellis]

the question is about the source IP

[dense hatch]

ok... can I get a bit more info? this question has thrown me thru a loop.

I got it.

Thank you

[lavish trellis]

your screenshot shows traffic between 2 devices:

• one that sent traffic
• one that received traffic
  the direction of the traffic is noted by tcpdump with the > character
  this means that the device before the > character is the source of the traffic and the device after the > character is the destination of the traffic
  back to the wording of the question: What is the IP address of the host that sent packets larger than 15000 bytes? From these words, you should understand that THM are after the device that originated the traffic, i. e. the source
  Final thought: consider using the -n option with your tcpdump command, so that IP addresses are not resolved into names; without the -n option you will not see the IP addresses properly

[dense hatch]

Thank you!

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 299)

[pearl sky]

help me

[woeful jungle]

What's your command ?

[pearl sky]

nvm my command was also right i was just writing the wrong output

this was it

[woeful jungle]

Ok 😉

[gentle shoal]

Do I have to change the value of LHOST too? I kept it in default.

[rapid jacinth]

lhost it's your attacker machine ip

[cursive dew]

https://tryhackme.com/r/room/cryptographybasics typo in task 6

23%6 = 5 because 25 divided by 6 is 3, with a remainder of 5, i.e., 23 = 3 × 6 + 5

25 should be 23

[brazen blade]

huh? are u sure 25/6 is 3? xD

[cursive dew]

Meant to say mod not divided by

[brazen blade]

ah nvm

I see the typo u mean

[cursive dew]

The line was copied from the room and it should be 23%6 = 5 because 23 mod 6 is 3

[gentle shoal]

Ok. Got it

[reef compass]

Finally done with the path. I would say around 75% of the course-load I had little experience with prior. It is a really beefy path with a lot of good information. I really enjoyed the tools and appreciated that there were hands-on exercises.

[random egret]

Anyone giving their premium vouchers?

[green tree]

Guys, i would have a question about CAPA task-4, i don't understand this question

[left lion]

Doesn't nmap by default run a tcp scan? I assume -sT flag is just for more clear specification or do I have my understanding mixed up

[tepid lance]

By default, nmap runs a syn scan (-sS), -sT completes a full TCP connection

[left lion]

ah ok that makes more sense. Ok so then lemme rephrase the question since it really stems from if there is ever a need to specify the flag for what is already default in this case being a syn scan

[tepid lance]

Well, if you don't specify a flag, it will fall back to a TCP scan (-sT)

it gives you more granular control over the behavior, and a variety of other things that you might want to adjust when it comes to running scripts with nmap, and what not

[left lion]

im a lil confused cause didnt you say that the default was a syn scan?

[tepid lance]

yes by default it is, but a syn scan requires admin privileges, so if it doesn't have that then it will fall back to a TCP scan

but if you specify a syn scan with -sS it will simply fail

[left lion]

oh ok so if your not under elevated perms it will default to a tcp scan?

[tepid lance]

that's right

[left lion]

very interesting. I was like I swear I heard tcp being default, but didnt realize how the permissions affect it.

[tepid lance]

yeah, you can observe it with wireshark

just nmap 8.8.8.8 or something with an unprivileged account and see if you are setting up full tcp connections or just responding with rst when the server rplies synack

[tepid lance]

-sS

[left lion]

ye im doing the nmap room rn in the new path and it shows the connections in wireshark

[left lion]

oh i see

[tepid lance]

that was just me running nmap 8.8.8.8 as an admin account, no -sS specifier

[left lion]

yea cause of the rst

[tepid lance]

right

[left lion]

makes sense

[tepid lance]

if I was not an admin, it'd complete the handshake

and if you write a scanner to do a syn scan and forget to send rst, then you've made a slowloris tool lol

[left lion]

yea so a normal tcp scan rather than a syn scan. I suppose that is another way to determine if you are on a account that has elevated privilages or not but obviously there are more straight forward ways

[tepid lance]

nevermind on this, I was mistaken, that'd not be slowloris. that'd be sending partial http requests

[tepid lance]

yeah, I mean the reason it needs it is a good way to check, too. It will try to access your adapter and will be denied

so you could just use that to check as well, on a code-level

[left lion]

makes sense

[tepid lance]

https://linux.die.net/man/7/capabilities#:~:text=listen to multicasts.-,CAP_NET_RAW,-*
https://linux.die.net/man/2/socket#:~:text=input system call.-,SOCK_RAW,-Provides raw network

Here's the links to the man pages for the linux capability and syscall that's used to do a syn scan, if you ever wanted to implement that idea yourself. Have a good one =)

[left lion]

tyty

[fallen marsh]

active directory is really annoying

[oak lark]

finally finished all 🙂

[woeful jungle]

Congrats 🥳

[hasty scroll]

Hashing Basics task 2. Why is it not giving me the file like the example shows?

[wicked otter]

cat show you the content which is letter T, see next to user@ip-10

[dire violet]

Good morning, i get 7 days streak, but i've some doubts about how it works. Let me explane better... when it is activated, will it have to be 7 days in a row or can it be 7 days in different periods? for example one day today, and the next day if it happens next week etc etc until reaching the threshold of 7? I hope I explained myself well

[hasty scroll]

it didn't show me anything for some reason but I did the hexdump command and it worked

Hashing the basics. I use the answer I found online and it says it's wrong, I don't get it

[wicked otter]

the question refer to hashcat mode which you will find on https://hashcat.net/wiki/doku.php?id=example_hashes

[wicked otter]

also on your own screenshot you can see letter T next to word user@

[noble sinew]

Hi guys, Im currently on pre security after having completed intro to cyber security. I was going to do complete beginner before moving to jr penetration tester however now I see a new cyber security 101 path.

Where would this fit in?

[woeful jungle]

Cyber 101 is like an upgraded and more up-to-date version of complete beginner

Go with Cyber 101

[noble sinew]

so is complete beginner essentially a waste of time after these 3 starter paths

[woeful jungle]

It's still worth checking out , but I would recommend you to go with Cyber 101 first as its more beginner friendly and more up-to-date

[lavish trellis]

I am pretty sure you cannot split a 7-day freeze
in addition, my understanding is that if, during your 7-day streak freeze. you start answering questions, your freeze terminates, as per this message from Scrubz: #site-support message
you have this document from THM on streak freeze: https://help.tryhackme.com/en/articles/7843540-streak-freeze#h_30ee9f6488

[cursive dew]

how do i stop getting streak freeze and discord role tickets

[dire violet]

Thanks 👍🏼

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 300)

[young heath]

you can't because there's nothing else left to win

[cursive dew]

:(

have they confirmed that all the prizes were won already?

[young heath]

no they won't confirm it. They want people to participate still

[cursive dew]

guess i'll finish the path to inflate my rank

i'll probably hit top 5k when i'm done lol

[young heath]

that's great! keep it up 🙂

[cursive dew]

https://i.imgur.com/0mS1GZQ.png who else has had a tickets page like this for the past 10 rooms?

[gloomy sundial]

✋🏼all room two tickets, haven’t got the final one for any except 1st row. Finished all the rooms

[stone pelican]

Did anyone get a prize besides streak freezes? I have 2 of every single one of them, yet I keep getting streak freezes. I also uploaded a video, and nothing. I feel 😪

[green tree]

Same same

[magic arch]

🥲

[cursive dew]

has anyone posted their prizes yet?

[hasty scroll]

Metasploit: Exploitation room task 3. Why is it asking me to run as non root user when the example shows it as root user?

[vague zealot]

Just use sudo

[oak lark]

thanks dear, what about u?

[olive fog]

Gave +1 Rep to @woeful jungle (current: #69 - 114)

[rugged minnow]

Hello guys, im stuck on a easy room on Hashing at this question

[woeful jungle]

use || hashes.com ||

[rugged minnow]

I crack it alone on my kali but still not working

[woeful jungle]

Type || hashcat --show ||

[rugged minnow]

it works wtf

why the hell i find another password with John the ripper 😫

[woeful jungle]

|| hashcat --show || is used to display cracked password after running a hash cracking session.

[dusk valley]

https://tryhackme.com/r/room/socfundamentals
What is the way i should format the answer on task 3, 1uestion 1: Alert triage and reporting is the responsibility of?

Soc analyst level * is not accepted but i cant imagine one of the other roles.

[woeful jungle]

SOC Analyst (Level *)

Replace * with the actual level

[dusk valley]

Did that but it does not accept my answer...

[woeful jungle]

What is your full answer

[dusk valley]

Had to use the ( ) ... sill me

[woeful jungle]

Yes , you need to use () 🙂 .

Maybe your answer is right but formatting is incorrect

[dusk valley]

For some reason i've kept missing that option. Solved 🙂 Thanks!

[olive fog]

Gave +1 Rep to @woeful jungle (current: #64 - 122)

[woeful jungle]

I'm also going through Cyber101 . You were faster than me , congrats 🥳

[latent birch]

Do we have to clear all to get gifts ?

[woeful jungle]

No, you only need to collect 3 same tickets to claim the prize

[latent birch]

Thank you

[woeful jungle]

More rooms you complete the higher the chances to win something 🙂

[latent birch]

Yeah but i have not enough time to clear 😦

[oak lark]

ahah u r ahead of us 10 years lol

[coarse jasper]

how can i connect ti rdp ?

[woeful jungle]

You can use Remmina or xfreerdp

[coarse jasper]

u know man i love u, thank u so much

[olive fog]

Gave +1 Rep to @woeful jungle (current: #62 - 128)

[woeful jungle]

Love you too , bro 🙂

[rugged minnow]

IM STUCK STEPBRO

i don't know why maybe the syntax ?

[woeful jungle]

|| Az"[A-Z]" ||

Use using different font for " double-quotes

[tawdry gull]

||cAz"[A-Z]"||

[rugged minnow]

it works

but..

[woeful jungle]

You were using different font for ""

[hasty scroll]

anybody on to help?

[lavish trellis]

let's just start 🙃

[hasty scroll]

Lol, I just finished the room and can't remember what I needed help with now but I was able to figure it out. Thank you though, I just saw this. Not sure why my notifcations are quiet on me.

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 305)

[hasty scroll]

In the Blue room, everytime a click on something this pop up keeps coming up

[violet orchid]

do not press anything they're investigating

do not allow anything nor click any of the links

[lavish trellis]

I have just had the same experience with the new room Whiterose

[violet orchid]

@hasty scroll

[hasty scroll]

Thank you

[olive fog]

Gave +1 Rep to @violet orchid (current: #640 - 7)

[hasty scroll]

I did once by mistake

[lavish trellis]

more than once for me

[hasty scroll]

Hopefully it's nothing and an easy fix

[lavish trellis]

just closed browser clearing cookies and logged back in: no more pop-up for me on Whiterose

[lavish trellis]

check this in case you're not following #site-support: #site-support message

[hasty scroll]

ok thank you

[merry tide]

laptop stock over?

😦

??????

[tawdry gull]

wow so crazy how I completed 100% of the cyber sec 101 path and have gotten all of the tickets x2 from the start and like last 20 rooms all I got was streak freezes...

I was hoping to get a tshirt but oh well 🙃

[woeful jungle]

Well , Advent of Cyber is just one month away 🙂

[tawdry gull]

right

and they didn't review my video that I uploaded to yt and submitted on like day 2 yet

[spiral trail]

I'm gonna assume you're not the only one that submitted a video. Patience would be a good thing. ^_^

[tawdry gull]

I mean it has been more than a week but yeah probably

[compact solar]

I have completed some rooms, if I buy premium now will I get tickets for those completed rooms also??

[woeful jungle]

I think that you can't obtain tickets twice , once you complete the room that's it.

[compact solar]

No I'm asking, for premium users we get 2 tickets n for free users only 1 right for every room, so my question if I buy now will I get that extra ticket for completed rooms

[woeful jungle]

Well I'm premium user and I can confirm that I get 2 tickets , so I think you should also get 2

[hot cedar]

Finally finished whole path it was fun!

[woeful jungle]

Congrats 🥳

[brazen kestrel]

Hey how long did it take you to finish the path? I just finished the pre security one and moving to cs101 tomorrow.

[civic tartan]

No. You will only get 2 tickets for uncompleted rooms you complete after subscribing.

[brazen blade]

would a voucher

of 10$ help ya out?

its pound actually, so a 10pound voucher of any use to you?

[indigo garden]

Does anyone know if this pathway will stay free after the event? I will definitely not have enough time to complete before the ticket event closes but would like to

[woeful jungle]

Path will stay

[indigo garden]

Thank you:)

[calm solstice]

"-" lol the same and still have only 3 rooms to complete :"))))) sadness!

[woeful jungle]

I wish you luck into winning something 🙂

[tawdry gull]

Idk I ws doing it since the beginning of the prizes so like a week

[tawdry gull]

Probably yeah

[errant sparrow]

Networking Core Protocols, I don't think this is supposed to be hard but the instructions said use telnet to get the flag.html file but it keeps telling me bad request

like ?

[lavish trellis]

you need to issue 2 commands after getting the prompt back from telnet:

• Get: you've got that one
• host something: you seem to be missing that one
  For the details, check back Task 8 of Networking Concepts: https://tryhackme.com/r/room/networkingconcepts

[errant sparrow]

yeah in that room you use GET, press enter, and then use host, but it just immediately returns bad request for me here and closes the connection before I can specify host

[tulip linden]

Because it's not GET /flag.html

[errant sparrow]

okay yeah apparently because it's case sensitive lol thanks😓 😩

[rapid jacinth]

is there any one who did gobuster?

[woeful jungle]

Yes, do you have any issues ?

[void prairie]

In Intro to SQL I'd be interested to know if there's a recommended one liner to extract the answer on the last question of the penultimate task, since the two items have nothing in common to group and concatenate by. The only solution I could see was to create a new boolean column for items with an amount not ending in 0, and then group by that, but I feel I might have misunderstood something.

[rapid jacinth]

ty, already solved, but it was pretty time consuming at first

[lavish trellis]

this is how I did: #subs-room-help message

[void prairie]

OK, thank you. Interesting. I was getting errors if I missed out the GROUP BY clause but maybe there was something else wrong. Cheers!

[olive fog]

Gave +1 Rep to @lavish trellis (current: #29 - 306)

[hollow olive]

Some help Cyber Security Advanced Roadmap

Give Recourses

[noble sinew]

when are the tickets over and done witg

[tulip linden]

4th Nov.

[tepid lance]

in the webhacking room, if you find the flag by accessing the /admin page with SSRF, is there a place to redeem that flag anywhere? Or is it just yours to hang on your wall in your room?

[civic tartan]

Above your bed preferably.

[tepid lance]

Say I won't

[errant sparrow]

Monikerlink room, it says if I have an authentication error to check i've entered the IPs of the target and attacker right, but I can't tell what's wrong about it

[tepid lance]

I don't think you were meant to change the smtp server IP

and then sender email you set as an IP, but it's not supposed to be

that's supposed to be an email address

[errant sparrow]

no, it said to put the attackbox IP there, and the server was MAILSERVER before I changed it which it said to do

[noble sinew]

so do they need to be done today, or do we have tomorrow at it too?

[woeful jungle]

You have timer in the blog post

https://tryhackme.com/r/resources/blog/new-cyber-security-101-path?utm_source=linkedin&utm_medium=social&utm_campaign=cybersecurity101

[shy rose]

after completing multiple rooms, i'm getting repeated tickets of 1D, 7D streak freeze or cyber badge

[red pilot]

Coming from JS Essentials.
So when I find obfuscated JS code in a browser it doesn't immediately mean that's it's from a bad actor?

[woeful jungle]

No . It is usually used to speed up the page loading time and make it faster. Minification/obfuscation also make job harder for bad actors because the code is harder to read .

[red pilot]

But your 2nd sentence, isn't this a kind of invalid point. This would just be security by obscurity.

[woeful jungle]

It is if it is used as only protective measure, it's meant by just an add-on to other security features . Also there are more robust ways of obfuscation than those presented in the task .

[red pilot]

Thanks for explaining.
At least I now know that minification and obfuscation is kind of the same thing and when I see obfuscated code, it doesn't necessarily mean that's it's a bad actor.

[woeful jungle]

No, it doesn't 🙂

[twin egret]

Network concepts task 7 what flag did you get

[woeful jungle]

Which problem do you encounter ?

[twin egret]

It ok now i got it

[broken furnace]

i got a swag shop voucher. how i do redeem it?

[woeful jungle]

You should receive it on your email

[broken furnace]

alright, thanks. I'll wait a moment then

[warm glacier]

Can I gift a month Premium Membership to a friend?

I won from Cyber Security 101 Pathway.

[civic tartan]

Ive been told that its possible.

[warm glacier]

Thanks. Do I need to forward that email to a friend or is there something else?

[olive fog]

Gave +1 Rep to @civic tartan (current: #32 - 264)

[civic tartan]

I think if you click the button in the email you will receive a voucher code on your THM account.

[warm glacier]

I received a LInk. Not a voucher.

[civic tartan]

in the email theres a green Get voucher code! button right?

[warm glacier]

Yes I have got it.

Thanks

Did you participate? @civic tartan

[civic tartan]

🤷‍♂️

[warm glacier]

They did not mention expiry date does it mean that It never expire. @civic tartan

[warm glacier]

What has gone wrong? did you email them?

Is it laptop or DEFCON33 Ticket? @civic tartan

[civic tartan]

That I dont know.

[civic tartan]

DefCon Ticket.

[warm glacier]

Sweet.

[warm glacier]

I hope you get it.

[warm glacier]

Are you a working professional or student? and Are you in UK?

[civic tartan]

both! 😄

[warm glacier]

Nice

[warm glacier]

Cool

[warm glacier]

I am nearly finish so I will send you once I achieve CERT.

[ionic swan]

Is the result been announced?

[oak lark]

hey guys, how can i get voucher prize?

[woeful jungle]

If you've received 3 same tickets, hover over them and click "Redeem Prize" 🙂

[oak lark]

i did but nothing hppena

[woeful jungle]

You should receive an email 🙂

[brazen blade]

When did you get the last ticket for the voucher?

[oak lark]

i didnt

[oak lark]

nuh mate not last, its just $

[brazen blade]

wdym?

You said you got a voucher prize

and im asking you when you got the last ticket for it

[oak lark]

mate, from the beginning of event, i got $15 or kinda like this

[short radish]

i might be dumb but how do i use rdp for the ad task in the winad room?

[woeful jungle]

Use remmina ( Application > Internet > Remmina on AttackBox ) or xfreerdp

[short radish]

thanks <3

[eager reef]

hello

[woeful jungle]

Hello, welcome 🙂

[eager reef]

How can I get verified?

[woeful jungle]

Follow these steps 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[eager reef]

I searched for settings on the tryhackme site in my profile but couldn't find it

[eager reef]

Thanks

[olive fog]

Gave +1 Rep to @woeful jungle (current: #35 - 232)

[eager reef]

@woeful jungle bro thanks

[woeful jungle]

Anytime bro 🙂

[eager reef]

Sorry for disturbing your time😔

[woeful jungle]

We're here to help , feel free to reach out , whenever you need 🙂

[eager reef]

Okay bro, that's great

[plain oxide]

hi

[twilit lodge]

Hi

[quartz igloo]

Hi

[woeful jungle]

Hi , Welcome 😉

[quartz igloo]

Thank you! I'm trying to figure out how to get the subscriber role. Kindly point me in the right direction

[woeful jungle]

You need to be a subscriber 🙂

https://tryhackme.com/why-subscribe

[quartz igloo]

I am a sub 😄

Ah. I got it. Came across an article named "Discord: How do I verify my TryHackMe account?"

I got it from here!

[woeful jungle]

And you need to verify your account

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

🙂

[quartz igloo]

Thanks! ❤️

[woeful jungle]

Anytime , mr. Trump 🙂

[quartz igloo]

😏 Orange 4 eva!

lmao. even my account color is orange

[north tiger]

I completed some room cyber security 101 but I cannt clamin the ticket. How to get the ticket?

[woeful jungle]

The event is over 😦

It ended on November 4th

[north tiger]

oh sorry, I updated late. thanks so much

[woeful jungle]

Advent of Cyber is coming soon , don't be disappointed 🙂

[north tiger]

[mortal temple]

[lofty pond]

Hi, don't know if anyone knows this. I am on last task of sqlmap room. I can see data in all fields of the db, but the password data is all \n\n\n\n....it's not even a hash that I could try to crack. How do I get this password? Please and thanks for your help

[woeful jungle]

What's your command ?

[lofty pond]

Sqlmap -u 'the-url-i-got-from-headers' -D ai -T user --dump --level=5

I can see data from all other columns of this table except the password

[woeful jungle]

Try with || --dump-all ||

[lofty pond]

Tried dump all as well....it's still \n\n

KGB vi sprashivute Ruskin?

I learnt a bit of Russian back in the day

Loved it

I am also happy that I can type the whole sqlmap command on my phone....I already shutdown my laptop and thought let's ask around on discord...I m new to all this

[woeful jungle]

What is your URL path ?

[lofty pond]

Http://SQL.../ai/login/includes...user...password

I think url is not the issue as I can see the rest of table data..

[woeful jungle]

This seems wrong

[lofty pond]

I forgot the exact url as I shutdown my laptop and I m just on my phone

[woeful jungle]

It should be something like || sqlmap -u "http://<machine-IP>/ai/includes/user_login?email=test&password=test" -D ai -T user --dump -level=5 ||

[lofty pond]

Oh yeah....ok I will try again and report back if any issues...thanks a lot Chief

[woeful jungle]

Try it and give us an update boss 🙂

[unborn estuary]

Hello guys, what happened with those users who won a DEF CON tickets ? from CyberSecurity10`

[hollow inlet]

Anyone want to swap codes for a swag £20 baseball cap and a thm t shirt with thm premium coupon?

[oak lark]

guys i ddint get code of 20 euro swag? how can i get it?

[woeful jungle]

You should receive it on your email 🙂 .

[oak lark]

im not 😦

what should i do?

[woeful jungle]

Try to contact support || [e-mail] ||

[oak lark]

thanks sir, big salute

[olive fog]

Gave +1 Rep to @woeful jungle (current: #24 - 365)

[nova isle]

More like Cybersecurity 1-0-DONE! 😄 👍 Really enjoyed this one.

[woeful jungle]

Congrats bro 🥳 , you're doing great , keep going 🙂 .

[lofty pond]

Hello, i am learning the REMnux VM to analyse the malicious files. When simulating a fake network, the task uses attack-box to open a fake page. But all other commands/actions are done inside the REMnux VM. So why are we using attack-box to open the fake site? thank you

[woeful jungle]

We're using AttackBox to simulate a network traffic from different user 😄

[lofty pond]

Thanks Chief. Sometimes i can't get to the simple things. Much appreciated

[olive fog]

Gave +1 Rep to @woeful jungle (current: #21 - 422)

[zenith herald]

Ok so I'm on the Metasploit: Exploitation room
I've tried using eternal blue but it keeps telling me The target is not vulnerable.

[civic tartan]

Which task?

[zenith herald]

Task 5

[civic tartan]

Did you terminate the machine for task 2 and start the target machine for task 5?

[zenith herald]

Yeah it's a different machine

[zenith herald]

Isn't task 2 just scanning?

[civic tartan]

Just checking because the message about target not being vulnerable often happens when the wrong machine is still active.

[zenith herald]

I'm using the VPN

[sour goblet]

It requires SMBv1 to be enabled, if it's patched or disabled it won't work, you can run a SMB version scanner to check it

Also it must run on vulnerable OS version, and to see if it's vulnerable do nmap -p445 --script smb-vuln-ms17-010 <target_ip>

[zenith herald]

Says windows 6.1

[sour goblet]

It may have already recieved MS17-010 patch so it renders it immune but it should be vulnerable

If unpatched

[zenith herald]

Wait do you mean the target system not the attack box?

[civic tartan]

Yes. New target machine for task 5.

[zenith herald]

ok

Terminated it and started a new target machine

[civic tartan]

The one in task5?

[sour goblet]

Does your LHOST and LPORT match with your network setup?

[zenith herald]

ok

I'm in

[zenith herald]

So I found the Hash for user Pirate
But it won't accept my answer

[tulip linden]

Did you get correct hash?

[zenith herald]

I'm I supposed to include pirate: in the answer?

[zenith herald]

It says pirate then a long string

[tulip linden]

Paste it here.

[tulip linden]

Ok, you're giving toooo much info.

One of them, is the NTLM hash, I'll allow you to research it 😉

[prime socket]

is it normal to have this long of a machine time?

it's from the wireshark room

[woeful jungle]

First time that i see this 😄

[prime socket]

the machine isn't working properly and lagging here and there

and giving outrageously long times like this

[woeful jungle]

Try to terminate and start it again 😄

[prime socket]

did

same thing

[woeful jungle]

Which room ?

[prime socket]

Wireshark-TheBasics_PROD_v0.6

can you try running the machine and see if it works on for you

maybe something is wrong on their end

[woeful jungle]

Works fine for me 😦 . Try to restart your browser 🙂

[woeful jungle]

Works fine for me 😦

[prime socket]

i tried a different browser and the tryhackme website isn't even loading

although it opens on chrome

[woeful jungle]

Both work fine for me 😦

[woeful jungle]

Try to access my machine it works

|| https://vnc.tryhackme.tech/index.html?host=proxy-4.tryhackme.tech&password=TryHackMe!&proxyIP=10.10.165.63&resize=remote ||

Does it work buddy 🙂 ?

[prime socket]

its loading

[woeful jungle]

Works fine on my side 😦

[prime socket]

yeah this one is working a lot faster than mine

thanks buddy

i'll use this one to complete this room then report the issue to support

[woeful jungle]

Glad to hear that , enjoy the room buddy 😄

[zenith herald]

I'm on the Active Directory Basics room
It's telling me to remote desktop into the windows machine
How do I do that?

[sour goblet]

What task is it?

[zenith herald]

Task 4

Ok never mind I figured it out
https://medium.com/@laupeiip/how-to-rdp-into-a-tryhackme-windows-machine-with-your-kali-vm-f637cf7422d1

[pulsar bloom]

phew done with wireshark room

next tcpdump

https://tenor.com/view/virgo-dance-florence-winters-shuffle-archives-gif-12096569760353435252

[woeful jungle]

Great job , keep going 🙂

[stray stream]

Out of curiosity, are there any certs people plan to take after finishing this path? Like ceh or any CompTIA ones?

[woeful jungle]

Check out this path if you're interested in Comptia certs 😄

https://tryhackme.com/r/path/outline/pentestplus

[stray stream]

I was planning on taking all the paths (or at least as much as I can during this holiday break), trying to make a break into the security field, I have a lot of IT experiences, just not specifically security

And it seems like I need to get pass the hr recruiters

[woeful jungle]

Good luck on your journey 😄

[stray stream]

Thanks 🙂

[golden mantle]

it is not haha

[torpid yoke]

||Hey, I'm struggling with answering the OS version of the Windows VM. Using systteminfo cmd spits out; OS Version: 10.0.20348 N/A Build 20348. It doesn't accept my answer. Tips?||

[woeful jungle]

Could you provide a room link 😄 ?

[torpid yoke]

https://tryhackme.com/r/room/windowscommandline

Task 2

[woeful jungle]

Could you provide a screenshot of what you're doing on VM 🙂 ?

[torpid yoke]

||I figured it out. The answer format gave it away. It wasn't the same from "systeminfo" compared to "ver". The OS Version from "ver" is what was required. Sorry for the confusion!||

[woeful jungle]

Glad to hear that , great job , keep going buddy 😄

[sacred orchid]

I haven't done the pre-security path, is it bad if I do the Cyber Security 101 path before ?

because i don't feel like I need to do it

Idk if the pre-security path contain knowledge that I should not miss

[woeful jungle]

Yes , you can jump straight to Cyber 101 , they're both beginner friendly 😄

[sacred orchid]

ok thanks

[verbal wolf]

Hi

[woeful jungle]

Hi , welcome 😄

[tropic sorrel]

Hi, can someone help me with this question ? "What flag did you get when you viewed the page?" Networking Concepts module "task 7" Telnet.

[torpid yoke]

What exactly do you need help with?

[tropic sorrel]

I wasn't able to get the flag earlier, but I have it now. I just forgot to type the command: Host: telnet.thm

[torpid yoke]

Gotchu, glad you got it sorted. Good luck moving forward 😄

[woeful jungle]

Could you provide a screenshot 🙂 ?

[tropic sorrel]

Thanks.

[olive fog]

Gave +1 Rep to @wooden rock (current: #2486 - 1)

[tropic sorrel]

Hi KGB, I managed to fix the problem. I realized I forgot to type the Host: telnet.thm command earlier.

[torpid yoke]

GET / HTTP/.1.1 made a lot more sense to me personally a bit further down the line, as I understood what the "/" after GET actually did in practice. You should be just around the corner if you keep going 👍

[woeful jungle]

Oh , sorry my bad . Glad to hear that , keep going buddy 🙂

[tropic sorrel]

Thank you ♥️

[torpid yoke]

This really made me grasp what I was doing in practice 😄

[torpid yoke]

https://tryhackme.com/r/room/networkingsecureprotocols
Task 8, how are you expected to search for the answer to the task in Wireshark? I had to manually browse for it and it wasn't a very pleasant experience lol 😅

[woeful jungle]

Right click on a packet and follow a stream 🙂

[torpid yoke]

||The packet in question was like number 360~ are you expected to manually look for it or are there better options?||

[woeful jungle]

Any HTTP packet 🙂

[torpid yoke]

Like this?

[woeful jungle]

Yes 🙂

[torpid yoke]

This leaves me with the following, and none of those have the flag

[woeful jungle]

There're multiple streams probably , click on packet 366 as Task suggests and follow its stream 🙂

[torpid yoke]

The task is; One of the packets contains login credentials. What password did the user submit?
I manually browsed for it. My question is if there is a better way without manually looking for it?

I hope that make sense 😄

[woeful jungle]

You can follow streams instead of inspecting packet by packet , but there will probably be multiple streams so you will still need to invest some time 😄 . You can also perform wildcard searches for common patterns that you're looking for ( For example : frame contains "username" which will check if the string username is present in any of the frames - of course traffic needs to be decrypted beforehand ) 😄

[torpid yoke]

Would this be correct?

[woeful jungle]

Yes , it would , but this looks exactly for string pass , for example string password wouldn't be catched by that 🙂

[torpid yoke]

So how come there is nothing in the result list?

[woeful jungle]

Try with frame matches ".*pass.*"

Delete all present filters before that and exit packet stream search

[torpid yoke]

Same, nothing.

I also tried frame contains

[woeful jungle]

Try with http contains "pass"

or http contains ".*pass.*"

[torpid yoke]

||Thanks. Worked with http2 contains "pass"||

[torpid yoke]

Thank you ! 😄

[olive fog]

Gave +1 Rep to @woeful jungle (current: #7 - 1247)

[torpid yoke]

good evening fellas, I'm new to Cyber Security 101 and want to warn you, that I 'll have a huge amount of question in spe don´t be too hard to me 😉

[woeful jungle]

Welcome , feel free to ask anything 😄

[torpid yoke]

how can I enable the modules that I solved before to answer the questions in the end of each module again ?

[woeful jungle]

🙂 ?

You want to restart the room 🙂 ?

[torpid yoke]

I don't know whether it's resart but i want to be able to answer the question again ..

[woeful jungle]

I can tell you how to restart the room ( erase your progress and make all questions in that room unanswered again ) 🙂 .

[torpid yoke]

Thank you, I just saw the opportunity the erase the progress

[olive fog]

Gave +1 Rep to @woeful jungle (current: #6 - 1354)

[woeful jungle]

Click on Options > Reset progress 🙂

[inland crow]

Guys, I can't msfdb init for setting up the postgresql service because i'm root user. Any ideas ?
Room: https://tryhackme.com/r/room/metasploitexploitation

[woeful jungle]

You don't need to do that on AttackBox 🙂

It's already initialized 🙂

[inland crow]

Oh yeah, you're right. Thanks

[torpid yoke]

||Am I not correct saying the name and detected version is lighttpd 1.4.74?||

.

[tulip linden]

Which room are you on?

[torpid yoke]

https://tryhackme.com/r/room/nmap Task 4

[torpid yoke]

Tried copy-paste and typing it out manually

[tulip linden]

Strange, it's the right answer.

lighttpd 1.4.74

Try that one, copy/paste it

[torpid yoke]

Eh.. I did a refresh of the page, works now 🥲

[tulip linden]

[torpid yoke]

I got it on Stream if you want it as a bug, if not I'll just move on

[inland crow]

Is there a way I could've found this instead of taking the hint? Nmap -sV [target-ip] doesn't really show exact service versions

[woeful jungle]

add -sC also

[inland crow]

yes you are but look at the format

[inland crow]

Yeah, that gives much more info, thanks!

[olive fog]

Gave +1 Rep to @woeful jungle (current: #5 - 1404)

[tulip linden]

Have a look in to the vuln script with nmap 😉

Metasploit also checks.

[torpid yoke]

All good after an F5. Had to re watch my stream just to be sure. It was a fun little situation 😅

[sacred orchid]

On average, how long does it take a person to complete this path ?

[woeful jungle]

Maybe a month 🙂

[sacred orchid]

ok

[torpid yoke]

What should I be able to after finishing introduction and cyber-security-101 paths ? Is that the point considering certifications or would it be to earlier at that moment ? Thanks in advance

[woeful jungle]

I think it would be too early to pursue certs 🙂 . If you're blue teamer continue with SOC1 and SOC2 paths , if you're red teamer go with Jr. Pentester path 🙂

[torpid yoke]

Whta do you think about solving all paths, makes that sense ?

[woeful jungle]

Yes , but read them slowly and with understanding and don't mix paths 🙂 . Do one path at a time .

[torpid yoke]

in average, how much time it could take to ssolve all paths ?

[woeful jungle]

Don't worry about time , it's important to grasp the knowledge 🙂

Time depends from person to person

[coarse loom]

Hi, in Windows and AD Fundamentals-> Active directory basics: task 4 , How do i connect to Phillip account with RDP ?

[woeful jungle]

You can Remmina or xfreerdp 🙂

[coarse loom]

Ok thank you, but why did this path did not taught me about that earlier ? Does i was supposed to guess and research on internet by myself ?

[olive fog]

Gave +1 Rep to @woeful jungle (current: #5 - 1467)

[coarse loom]

And how can i do that on the THM windows machine ?

[woeful jungle]

You're right , it isn't taught in the pathway beforehand which is a problem 😦 . You aren't supposed to run it on Windows machine , you're supposed to run it on your machine/AttackBox in order to connect to Windows machine . If you're using Windows OS , you can use Windows Remote Connection app to connect via RDP protocol .

[coarse loom]

Yes ok finally i had used RPD on the THM Windows machine by myself and it worked fine. It was simple as that.

[woeful jungle]

Great job buddy 🙂 , keep up the good work 🙂

[coarse loom]

Thanks👍

[inland crow]

Anyone else do way longer over the metasploit rooms than any other previous ones? even though the blue room was pretty simple

[woeful jungle]

Yeah , it should take longer . Metasploit is a big topic 🙂

[umbral socket]

Oh yea, it took me longer. Pretty awesome room though. That tool rocks

[steady relic]

Bought annual subscription to finish this path, along with participating AoC. Did learnt a lot more than I expected, guess I'm still a beginner...

[woeful jungle]

Congrats 🙂 🥳 , great job . Keep up the good work buddy 😄

[coarse loom]

Hi, does anyone know if try hack me attackbox in some rooms have kali Linux automatically on it when we open the attackbox ?

[woeful jungle]

You can learn more about Kali Machine here 😄

https://tryhackme.com/r/room/kali

[solemn wyvern]

Loving the THM platform. Keeping me out of trouble these days.

[quasi bridge]

Same, been grinding this path for 6 hours and took mad notes

[woeful jungle]

@solemn wyvern @quasi bridge Great job guys , keep up the good work 🙂

[solemn wyvern]

Appreciate that! Done with the Pre Security path, giving this one a try. I like it.

[solemn wyvern]

https://tenor.com/view/fist-bump-anime-secret-kirito-eugeo-gif-27160656

[woeful jungle]

You're doing really great , congrats 🙂 🚀

[smoky timber]

Is it possible to get a job if someone finish cyber security 101 ?

[woeful jungle]

No , cyber101 will only teach you cyber security fundamentals 🙂

[inland crow]

Guys I've tried editing the payload value username from admin to guest and then pasting this JWT string into the POST request for /flag. Everything feels like im doing the right thing but I get the message saying it's not right.

[woeful jungle]

Which task and which question 🙂 ?

[inland crow]

https://tryhackme.com/r/room/owasptop102021
Task 20: Data Integrity Failures

So they explain a JWT cookie has a header.payload.signature format, i've only edited the header, tried numerous sites, also made sure to keep it HS256.

Also tried setting alg to none and user to admin like they do in the explaination.

[woeful jungle]

You need to add trailing dot . at the end of JWT

[inland crow]

Ohh that makes sense

Like an empty signature?

[woeful jungle]

Yeah , . is mandatory even if the alg is set to none 🙂

[inland crow]

Thanks

[quasi bridge]

This grind is insane, I spend 6 hours only to get 2 modules done😐

[umbral socket]

Welcome to the club!!

[woeful jungle]

Great job , keep going , it takes time to grasp all of those concepts 🙂

[errant fossil]

Is there any role in cybersecurity that has a mix of red and blue team activities? I kind of love both offensive and defensive 🙂

[woeful jungle]

Yes , purple team 🙂

[coarse loom]

On tryhackme the Metasploit rooms it is said to be easy and to last like 30 minutes. But it can take few hours to do and understand... Does that mean that other rooms who are labeled as "hard" will be extremely complicated and long to do or just that it require background knowledge that would make it hard for a beginner with no background knowledge ?

[woeful jungle]

Don't pay attention to room difficulty and time , it depends from person to person . You're doing a great job just keep going 🙂

[coarse loom]

Yeah ok but room difficulty should still mean something in general. Does it's because mostly of background knowledge ? Do you have finish one whole path on try hack me ?

[woeful jungle]

Yes , I have 🙂 . Just anything that you do in life , first time you're doing it , it is going to be hard. After you grasp these concepts and re-read the room a few times it will become easy and 2nd nature to you 😄

[coarse loom]

yes i know, what is the path you did ? And i see there is too much information to remember. I'm forced to find a way to search easily and quickly for any information because it is impossible to remember everything there is too much. Just to command line sometime in metasploit it is too long and complicated to remember. In hacking there is just too much information to grasp it can be soo hard.

[woeful jungle]

Of course it is hard , it should be 🙂 . That's the point 🙂 . If it wasn't hard and everybody do it , it won't be interesting 😄

[rain elbow]

take notes of the concepts and even literally the commands you enter - when trying to use them again [attempt] to do them by memory, if they don't work then look them up in notes. after just a few times(or even once) you'll remember the commands. repetition, repetition, repetition...

[cloud fossil]

I'm having some trouble with the Gobuster room. I followed the instructions to edit and save resolved.conf, used the systemctl restart command, and confirmed that the changes to resolved.conf saved. However, every time I attempt to run gobuster I get the following error: "Error: error on running gobuster: unable to connect to http://www.offensivetools.thm/: Get "http://www.offensivetools.thm/": dial tcp: lookup www.offensivetools.thm on 127.0.0.53:53: no such host"

Is anyone else experiencing this? I am doing this room as a refresher and am starting to question my sanity.

[feral rivet]

go to /etc/hosts and type the ip and the hostname there

[cloud fossil]

Thanks you kind sir/madame

[cloud fossil]

Thank you kind sir/madame

[olive fog]

Gave +1 Rep to @feral rivet (current: #2555 - 1)

[coarse loom]

Hi, in the room "sql fundamentals" , i needed to instal mysql because the machine did not recognise the command mysql, but now that i installed it, i do the command mysql and when i enter the password it says: ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)

what does that mean and how does i fix that ?

ok i think i found, it's because i was on the attackbox but now i tried on the target machine and it work fine

[feral rivet]

Hey! So, I'm in the REMnux: Getting Started room and this is more of a question to understand what's actually happening using iNetSim

In Task 4, we configured to set the DNS as our attackbox's ip

then we tried to download files to the attackbox from that ip to emulate the malware behavior right?

Where are these files stored in the first place that it's retrieving from?

[tulip linden]

The machine you boot up.

[feral rivet]

so the payloads that it was downloading was from the machine that was hosting the REMnux Vm?

[tulip linden]

Yes. 🙂

[feral rivet]

Thank you!

[olive fog]

Gave +1 Rep to @tulip linden (current: #1 - 3204)

[torpid yoke]

hey guys, your the same problem ?

[woeful jungle]

Try to add domain to /etc/hosts 🙂

[torpid yoke]

okay

I can't fix it

[woeful jungle]

Provide a screemshot of /etc/hosts

[torpid yoke]

look

[woeful jungle]

Delete domain from there and add it below with the correct IP

[torpid yoke]

I went to modify the domain in /etc/systemd/resolver.conf

[woeful jungle]

You need to add it to hosts file also

[torpid yoke]

ok

[steady roost]

Which section should i do next, exploitation basics, cryptography or web hacking

im thinking itd probably be better to learn more about cryptography before the other sections

[woeful jungle]

Yeah , you can go with crypto 🙂 but you won't make a mistake whichever you choose 🙂

[tough scaffold]

Hello

[woeful jungle]

Hello , welcome 🙂

[quasi bridge]

Finally finished the path

[woeful jungle]

Congrats , great job buddy 🙂 🔥 🚀 . Keep up the good work .

[jovial dirge]

I am determined to finish this path and continue onto the Pentester path. I am finishing up the Active Directory section. It's hard to stay motivated sometimes when I dont have a buddy to work with, like a workout partner to keep you accountable, but I guess thats what the discords for 🤷‍♂️

[woeful jungle]

It is , we're all one team here 😄 . But I think you need discipline ( consistency ) instead of motivation . Doing something despite how bandly you don't want to do it 😄

[jovial dirge]

that's fair, motivation can only get you so far

[woeful jungle]

But discipline is what will win in the long run , this field is a marathon not a sprint 🙂 .

[jovial dirge]

I will keep updated here to keep myself accountable! Hopefully I can finish the track by the end of the month, a great start to the year

[woeful jungle]

Keep up the good work , if you ever need any help and feel stuck , feel free to reach out here 😄

[quasi bridge]

I got a small gc where we just grind on thm, all seriousness

[jovial dirge]

I’d love to join if skill level isn’t too much of a concern!

[quasi bridge]

Not to much skill level but you need to be consistent

[jovial dirge]

sounds good, let me know how I can join!

[jovial dirge]

finished up the AD module 🙌

command line should be fun

[woeful jungle]

Congrats 🥳 , keep up the good work 😄

[sick crystal]

It’s pretty good 👍

[forest quest]

Hi, anyone else having Issiues in the Gobuster room? Where the Target domain isnt reachable even if the DNS is configured Properly? Or am I doing sth wrong?

[woeful jungle]

Try to add domain to /etc/hosts 🙂

[forest quest]

ok, will do 😄

[forest quest]

That worked ty

[olive fog]

Gave +1 Rep to @woeful jungle (current: #4 - 1986)

[umbral obsidian]

I have a question about Wireshark Basics room, specifically task number 4, how can I extract .txt file from the image ?

[woeful jungle]

Right click on JPEG > Export packet bytes 🙂

[umbral obsidian]

I’m already done with it, now I need to extract .txt from image. How I can do that ?

[woeful jungle]

This is still wireshark basics ?

[umbral obsidian]

Yes, task number 4

[woeful jungle]

Click on File > Export object > HTTP > note.txt , that's the file you're insterested in 🙂 . Even the task says .txt file 🙂 . This from your screenshot is an image 🙂 .

[umbral obsidian]

I tried to find the encoded file in the capture, now it’s clear, thanks

[olive fog]

Gave +1 Rep to @woeful jungle (current: #4 - 1994)

[coarse loom]

Hi, i do the basic pentesting lab and when i try gobuster it always says Error: unknown shorthand flag: 'u' in -u . I wrote this command: gobuster -w /Desktop/Tools/wordlists/dirbuster/directory-list-2.3-medium.txt -u http://10.10.237.188/ , why it doesn't work with me ? I looked at many video on youtube but couldn't find the problem.

[feral rivet]

Is this the Gobuster: The basics room, if so then you should try to add the ip to /etc/hosts

and then see if the site is pingable

if the site is pingable and the command is still not working, try to put the url in quotes like this "http://10.10.237.188"

[coarse loom]

ok but it's the Basic pentesting lab CTF in the challenge rooms. And finally i just used the same command as shown in the course and it seem to work.

thanks still

[coarse loom]

i just finished the room challenge(Basic pentesting) and there was many problem like few command that didn't worked even when i did the same exact thing as the ones shown in the walkthrough. One time when i used ssh2john , it says "command not found" . many time things where not working like they should. I think Try Hack Me machine are full of problems/bugs... It prevent me from just focusing on doing the job like i should. It's just bad for learning when the right things don't even work.

Not all machines but just sometimes i mean.

[woeful jungle]

You should be able to run ssh2john from john's directory

[coarse loom]

Ok but, in rooms, challenges, does it happen often bugs or anythings that make command not work or that make things not happen like they should ?

[woeful jungle]

You can report bugs in https://discord.com/channels/521382216299839518/748285185803419668

[torpid yoke]

hi!

I'm doing channel on reverse shell, and i'm stuck I can't fix

[woeful jungle]

You're not supposed to run that command there 🙂

[torpid yoke]

where is my mistake

[woeful jungle]

That command should be run in the vulnerable app provided in the task 🙂

[torpid yoke]

how to do this target it connect on my host ?

[woeful jungle]

You have URL provided in the Task material 🙂

[torpid yoke]

there are 3 urls

[woeful jungle]

For question 1 used the 2nd one running on port 8081 🙂

[torpid yoke]

look

[woeful jungle]

Yeah , 2nd URL , enter that into the browser , the one with port 8081 specified 🙂

[torpid yoke]

yes I did it

always nothing

my brain smoke, I think, I need a break

[woeful jungle]

Can you provide a screenshot

[true wren]

I've tried to brute force by using dir

Is your given URL of the attack machine or the target machine?

https://hackertarget.com/gobuster-tutorial/ Here's the resource link that might come in handy for you too

[rapid breach]

why i can't see the start the virtual machine button?

[woeful jungle]

You don't need it for this room 🙂

Go to Task 1 and press green Start machine button 😄

[rapid breach]

i also thought so but then i checked the other rooms. the button that was normally there seems to be missing in all the rooms i have checked. is this normal?

[woeful jungle]

Yes , AttackBox isn't needed for this room so the button isn't present 🙂

[rapid breach]

thanks for fast response

[rapid breach]

i keep getting this notification, is there smt i can do to fix it?

[woeful jungle]

Seems like a problem with your Internet connection but it can also be problem on THM side 😦

[novel lintel]

Hi guys, I'm a little stuck in a task, maybe you have an advice for me. I'm currrently working on Metasploit: Exploitation and got a Meterpreter shell and trying to hashdump the shadow file via the meterpreter shell but keep getting a ruby error ( Failed to open file: /etc/security/opasswd: core_channel_open: Operation failed: ). I don't know how to handle that.

[woeful jungle]

Can you provide a screenshot 🙂 ?

[novel lintel]

Hi, surprisingly I cannot as it just worked when I just tried again 🙂 Thanks for offering your help anyway!

[olive fog]

Gave +1 Rep to @woeful jungle (current: #3 - 2126)

[coarse loom]

Hi, in Linux Privilege Escalation, why do we need to find any process that we can run as root user, like what’s the point with that ? I think i did not understood that.

When we do a shell/ reverse shell on target machine…

It’s about this thing « SUID »

[woeful jungle]

It allows an unprivileged/oridnary user to execute a program with root privileges 🙂

[coarse loom]

Yes but i still don’t see the sense. It seems to be any process like if it’s not important which one. How does running any process make me root ? Or does it’s only to use some process that we need because they do something useful ?

[leaden roost]

quick question, should i also study the defensive modules on this path if i want to get into pentesting?

[woeful jungle]

Why not 🙂 ? You need to know how the "other side" is thinking 🙂

[leaden roost]

didn’t thought about that 😂 you are right thanks

[tulip linden]

A common route to get in to pentesting/red teaming is via blue.

[oblique kayak]

Hi! I’m experiencing an issue with the "Gobuster: The Basics" lab. The mentioned domains, such as example.thm and offensivetools.thm, cannot be scanned. The error I receive is:
Unable to validate base domain: example.thm (lookup example.thm on 127.0.0.53:53: no such host).
I have followed all the instructions from Task 2 on the AttackBox and even restarted lab and I am still stuck with it. What is wrong with it?

[woeful jungle]

Try to add domain www.offensivetools.thm to /etc/hosts

[oblique kayak]

It somehow works, but not as it should. There are no results for gobuster scan, so there is no answer to task question. Ty for try.

[olive fog]

Gave +1 Rep to @woeful jungle (current: #3 - 2182)

[woeful jungle]

Can you provide a screenshot 🙂 ?

[rain elbow]

If I remember right, I added both the www.offensivetools.com, and offensivetools.thm to hosts file make this work. I ended up scanning both so I don’t remember which worked for the questions, I also had to let it run for a bit too, the answers aren’t at the beginning of the wordlists - away from notes at the moment, but I hope that helps

[oblique kayak]

I found a solution. It just flag "-r"(this flag configures a custom DNS server to use for resolving) with target IP. And it works even without changing /etc/hosts file. Well spent 4 hours

[rain elbow]

nice, those little tangents always being good thing in the end I think

[coarse loom]

Hi, is there a way to know the total amount of people in this channel ?

[woeful jungle]

🙂

[coarse loom]

ok thanks and i mean only in this group "cybersecurity101"

[woeful jungle]

I am not sure about that 😦

[sick onyx]

/r/room/blue is not working for me

[woeful jungle]

How ?

[sick onyx]

after running the exploit and trying to convert the shell to a meterpreter shell, it never converts to a meterpreter shell

I retried the entire room 2 times

[woeful jungle]

bacground the shell and use sessions -u 1 cmd

[sick onyx]

I get this

wait now it worked

[woeful jungle]

Use different port , seems like 4433 is already used on your side

[steady roost]

for hashing basics task 6, hashcat is telling me the status is cracked but i dont understand where in this output the cracked hash info would be?

https://gyazo.com/8e2d4f9adcf0fd9b088fe95ef95153f4

[woeful jungle]

You can see results after : 🙂

<hash>:<result>

Or use hashcat --show

[steady roost]

sorry im not a bright guy, thank you i love you bro

[olive fog]

Gave +1 Rep to @woeful jungle (current: #2 - 2424)

[woeful jungle]

Don't say that , you're doing great 😄 . Keep up the good work 🙂

[steady roost]

i think i was getting confused because i was expecting a thm type keyword rather than plain numbers lol

[woeful jungle]

Yeah you're right it looks a bit unusual 😄

[raw pelican]

Does anyone in here use a live boot version of kali? it seems most like vms. Is there a readon why?

[woeful jungle]

It's a sandboxed environment , it safer if you catch some malicious thing and if it crashes you will still be able to use your main host OS 🙂

[raw pelican]

makes sense. Thanks!

[olive fog]

Gave +1 Rep to @woeful jungle (current: #2 - 2440)

[raw pelican]

Is anyone else using the helpful hackers video walk through?

[urban sand]

Just got two more sections to go 😮‍💨

Think I’m gonna double back on the path I’m really starting to see just how important the fundamental skills are vs just learning a ton of tools

[woeful jungle]

Congrats , great job 🙂 🚀 . Keep up the good work 🙂

[steady roost]

for john the ripper basics task 5, im trying to crack this nthash but im getting a "no password hashes loaded" error
https://gyazo.com/1af8dfaf872db904eed4090f623b69f6

when i try to check how to fix this its telling me to mess with the /etc/shadow file but that must be wrong because i cant use sudo on the thm machine? i feel like maybe its a syntax error but john isnt giving me any other info other than "no password hashes loaded"
https://gyazo.com/7eba68aaf49d802ae390c1edc65048fa

[woeful jungle]

set --format=nt

[steady roost]

your genes have a higher market value than mine, thank you bro

[olive fog]

Gave +1 Rep to @woeful jungle (current: #2 - 2482)

[woeful jungle]

You're right it is NTLM hash but john has certain naming scheme that we need to respect 😄

[sick onyx]

in r/room/gobusterthebasics it seems like the dns is not working. I set it up according to the tutorial in the room (I changed and uncommented the DNS value in /etc/systemd/resolved.conf and executed sudo systemctl restart systemd-resolved afterwards). When I try to ping offensivetools.thm I get Name or service not known

do I need to change the nameserver value in /etc/resolv.conf? they do not tell me to do that in the room

[woeful jungle]

Try to add domain to /etc/hosts

[sick onyx]

that seems to work, thanks

[rapid breach]

i am here at the same room. i couldn't get what is going wrong

[rapid breach]

should i directly write on the last line DNS=.....

[woeful jungle]

Add domain to /etc/hosts

[rapid breach]

i am still getting the same error :/