checkmate

[dry cloak]

🥳

Please be mindful as a general guideline to not ask for/provide hints in the first 72 hours after a challenge is released. This also covers streaming. 🙏
Ignoring this rule will result in being muted until the hint embargo has been lifted.

During the 72 hours after a challenge is released, you will receive 50% more regular points per question!

Examples:

1. Scoring 80 points (30 regular points + 50 blood points): becomes 45 + 50 = 95 points
2. Scoring 30 points (30 regular points): becomes 45 points

[grizzled salmon]

darn shadow can't do this yet because they helped test it

[elder knot]

At Level 3 rn. Fun Challenge so far

[icy ermine]

♟️

[heavy kraken]

Oh wait am I late to the party? Since when are you a room tester?

[grizzled salmon]

since about when tim started the room tester thing on discord

shadow is one of very few of the first batch that are still around and test rooms on the user testing level

[neon oak]

That was interesting, haven't done any bruteforcing in a while on THM! Level 4 was my favorite.

[elder knot]

Very fun room and nice for learning!

[forest musk]

Effect of ai assistance

[warm willow]

break from AI, let's try some passwords now

[rigid hemlock]

hmm I probably overthink the 3rd one as I used all possible combinations that make 11letter password 😄

[elder knot]

The first 2 were super easy. Third one not so much.

[warm willow]

you can generate password list from the info on social profile

[green torrent]

have u managed to get over level 3

[elder knot]

Yes I finished it yesterday.

[elder knot]

.

[green torrent]

same

did anyone used hydra?

[twin dove]

for level 3 is there any syntax no hint given in THM room like small, caps, special characters just use marco info.

[heavy kraken]

Very easy and fun room!

Third one takes less than a minute - the website already hints at what tool to use.

[eternal cliff]

can i get a small hint for task nr 5 ?

[heavy kraken]

The room already gives you a hint on the website.

[green torrent]

just finished also

[tight reef]

for the level 3 , email or username for the social is marco or the nickname from the jobs , idk if i'm using the correct username

[wooden isle]

You won't get any tips or clues until after 72 hours. Keep trying. This is how you truly learn. No one will give you clues in the wild.

[green torrent]

u can ask the AI

i had the same problem, just dont over complicate ur self

[knotty bluff]

Not a fan of the last task with the company name, pretty sure something better could have been chosen imo.

[keen dune]

Losing my mind on level 3🤯

[green torrent]

samme

[rigid hemlock]

done ❤️

[nova cradle]

Really fun challenge after a long time. Finally Got my hands dirty with password brute force 🕟

[deft hatch]

Struck with Level 2

[wooden isle]

No way!

[deft hatch]

[wooden isle]

It's all in front of you. You don't need any fancy tools. Just your eyes, patience, and trial and error.

[willow gazelle]

wow level 3 is messing me up

[pseudo mountain]

[late helm]

might take a bit longer 🫡

[rigid hemlock]

You can limit as you know how many sign password got 😄

[late helm]

jep.. guess what.. thats exactly what i did xD the wordlist generation might need some finetuning though since most cases wont probably happen

[rigid hemlock]

Also capital doesn't matter. My list was 1300 records and hit on 400

[late helm]

on last one, found the hints, generated list.. lets wait 😉

[rigid hemlock]

Last one was actually the one I've just "lets guess" and it worked xD

[late helm]

🥳

well on the social there are clear hints what the password has to look like

[rigid hemlock]

Yes that's why I didn't use any brute on last one .gj mate!

[dire igloo]

Checkmate! Mr. Bianchi. GG!

[dire igloo]

grats

[tight reef]

how ? i can't just ask what is the username lol it say idk

[green torrent]

you can ask if it is Marco or marco or smth else lol

[tight reef]

I'm sorry, I do not know the answer. Is there something else you would like to ask? that's how the AI respond ahhaha

[tight reef]

Did It , the 4 and 5 was easy af , the level 3 pain

[pine steeple]

I am struggling on level 2 🙁 I might be looking for the password in the wrong place… i tried so many lists and none of the matching passwords work 🥺 am I wrong to assume i should be doing the same for level 2 as i did on level 1? 🤔

[slow prairie]

||rockyou||

[silent dune]

Check the rooms in tryhackme about wordlist making, password attacks, cewl, cupp tool, etc it might help

[pine steeple]

If that is the list then I have tried it but no password matches 🙁

[slow prairie]

Yeah rockyou can work, but the room is kinda guiding you more toward enumeration and gathering info from the company portal. If you look carefully at the jobs page, you’ll notice some repeated company keywords and one of them is reused as the password.

[pine steeple]

Ok, I will try that then, I am pretty new to this so I have to learn how to think about how to guess some of these things and spot the patterns. Thanks for the tip!

[misty sundial]

how to find that room

[pine steeple]

The link is the chat description

https://tryhackme.com/room/checkmate?utm_source=discord&utm_medium=social&utm_campaign=checkmate

[willow herald]

do I use his name or nickname for the social sign in?

[keen dune]

Agree!
Level 3 defiantly the hardest

[inland timber]

Thats the fun part- gotta try em all - how would u hack your GF's Insta

[willow herald]

Thanks! I'll remember that, and just keep hitting it until it shatters! Then I'll throw a party using the pieces as confetti 😆 😉.

[red sinew]

Gave +1 Rep to @inland timber (current: #190 - 59)

[inland timber]

The hero we all need - never deserve😂

[willow herald]

Says the literal Grandmaster 👀😂 I’m just a professional button-clicker!

[inland timber]

Dont let those fancy titles get in your head- it should just say time served cause that's truly what it represents

[willow herald]

Still, it's impressive

[rigid mauve]

Level 3 was hard yet impressive for me.But let me say one thing, Marco's password policy is insane!!

[misty sundial]

i'm done

[tall drum]

oh my days bro i was stuck at L2 and i got the pass, i was just typing marco as macro

for litterally almost 2 hrs

[tall drum]

can sombody give me a hint for level 3

🥹

[inland timber]

u ever hear of the tool:Cupp??

[tall drum]

nope, never

i'm gonna look into it though, thanks

is it in the attackbox ?

[inland timber]

sorry, u have reached your hint quota for the day -please insert more coins...

[tall drum]

that's enough thnx man 🥹

[icy ermine]

No but you can easily install it with ||sudo apt install cupp|| 🙂

Should be pre-installed on Kali though

[rigid hemlock]

Don't drink and hack xD?

[tall drum]

yup i switched to kali, thanks

[red sinew]

Gave +1 Rep to @icy ermine (current: #1 - 6197)

[tall drum]

still can't get the correct pair of credentials though

[tired sluice]

For Task 3 ?

[tall drum]

yeah

[tired sluice]

https://github.com/Mebus/cupp

[tall drum]

i used that made a dictionnary for passwords

but what about username

[tired sluice]

Just a Small hint: it is very basic

[tall drum]

😭

[tired sluice]

It's right on the page and it is only one word , that's all I can say

[tall drum]

alright thanks i'm gonna try again

thank u

[tired sluice]

Good Luck Dude

[tall drum]

thnx man

[inland timber]

i know you only wanted a hint but fyi, walkthru already posted on YT;)

[rigid hemlock]

This guy fb is just straight forward in terms of logins:D lucky that he was first with booking that

[tall drum]

could you send me the link

[inland timber]

i was hoping you were gonna use your own google-fu, finding things and troubleshooting efficiently - that's the skill, that's the job

[tall drum]

I would've tried something but It's 2 am and Im about to go to bed 🙂‍↔️

Maybey tom

[inland timber]

good - plan - rest up, room's not going anywhere - you will thank yourself;)

[red sinew]

Gave +1 Rep to @tall drum (current: #370 - 26)

[tall drum]

this challenge cannot be easy 🥹

[inland timber]

none of it is if you've never seen it before

[tall drum]

yeah gonna try again tmr

[tall drum]

true, alright goodnight

🚗

[tired sluice]

No, it's wordlist generator which uses user information

[edgy rain]

Hi

[white summit]

hello

[pine steeple]

I was going to use that but I thought you neeed python3 for it and the vm on thm is not python3

Lol i have just realised that i should be able to install python 3 on the vm 🫣

[tall drum]

That was way easier than i thought

[tired sluice]

You mean the attack Box ?

[pine steeple]

Yes

[winged void]

can anyone give a hinty vinty for level 4? at this point i have assumed marco is italian and tried everything 💀

[rigid hemlock]

Vin diesel would approve 🙂

[winged void]

oml thats the best response i could get

[rigid hemlock]

🙂

[inland timber]

fyi, there is a full on writeup vid - search youtube