#site-support

1 messages · Page 26 of 1

eager solstice
#

When I try to connect to thm (from Kali or Parrot VM), I get the following error, indicating that client and server cannot negotiate AES-256-CBC (the openvpn version is 2.6). However, when trying to connect to htb it works with the same algorithm. Anyone has an idea, what I am doing wrong?

2023-03-30 20:59:48 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2023-03-30 20:59:48 ERROR: Failed to apply push options
2023-03-30 20:59:48 Failed to open tun/tap interface

When trying to connect to htb, I get a connection:
2023-03-30 21:38:10 Data Channel: using negotiated cipher 'AES-256-CBC'
2023-03-30 21:38:10 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2023-03-30 21:38:10 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2023-03-30 21:38:10 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2023-03-30 21:38:10 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2023-03-30 21:38:10 Initialization Sequence Completed

plush bay
#

!vpnscript

sharp bisonBOT
plush bay
#

if you run that and make sure you only have the tryhackme ovpn file in said folder it will fix this error

#

technically the error message tells you exactly what is going wrong because of a variable in the ovpn file using an outdated syntax

#

@eager solstice ⬆️

eager solstice
#

OK, thank you. I think I understand the problem

tardy bay
#

anybody knows how to fix this and make it look normal?

#

I need it like this

bronze vale
#

@tardy bay is that your Kali machine or the TryHackMe Kali?

bronze vale
tardy bay
#

my bad

eager solstice
plush bay
eager solstice
#

The script did not work because it could not verify that openvpn is installed on my machine. When I ran the relevant command manually, however, I got positive reply. But thank you for your help, it set me up on the right track 🙂

plush bay
eager solstice
#

I tried Kali and Parrot, the script failed on both 😦

plush bay
#

did you forget to make the script executable???

eager solstice
#

I followed the steps in the readme, and the file even started executing. But after checking for internet connection I got the error that openvpn would not be installed

plush bay
#

ah maybe you ran it without giving it sudo permission then

eager solstice
#

I try to recreate the error

plush bay
#

just wanna know why the script failed as if it does that often it means we should fix it

eager solstice
#

Ok.. I'm an idiot.. I didn't pay attention and downloaded it with http headers. I just fixed that and now everything works perfectly fine. Sorry for wasting your time

plush bay
#

oh no problem... glad we could figure it out

uneven summit
#

hey @tribal mason

tribal mason
#

@uneven summit try this troubleshooting script mate

#

!vpnscript

sharp bisonBOT
uneven summit
#

okok ty

#

tun0 interface does not exist

#

is one of the things i got back

plush bay
#

well it should spit out a working tun0 if you ask it to launch the vpn

uneven summit
#

failed to connect

#

i switched servers, regenerated, added data-ciphers, chmod etc

plush bay
#

!docs verify

sharp bisonBOT
bronze vale
plush bay
#

then post a screenshot of the output you get when running sudo openvpn blah.ovpn

uneven summit
#

yeah

#

ok one sec

#
2023-03-30 18:25:23 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-03-30 18:25:23 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2023-03-30 18:25:23 OpenVPN 2.6.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-03-30 18:25:23 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-03-30 18:25:23 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-03-30 18:25:23 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-03-30 18:25:23 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.240.194:1194
2023-03-30 18:25:23 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-03-30 18:25:23 UDPv4 link local: (not bound)
2023-03-30 18:25:23 UDPv4 link remote: [AF_INET]54.193.240.194:1194
^C2023-03-30 18:25:26 event_wait : Interrupted system call (fd=-1,code=4)
2023-03-30 18:25:26 SIGTERM received, sending exit notification to peer
2023-03-30 18:25:29 SIGTERM[soft,exit-with-notification] received, process exiting```
bronze vale
#

You're not waiting for it to connect

#

You're killing the connection manually

uneven summit
#

ok ill wait longer

#

yeah still not working

bronze vale
#

What's the output?

uneven summit
#
2023-03-30 18:52:15 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-03-30 18:52:15 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2023-03-30 18:52:15 OpenVPN 2.6.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-03-30 18:52:15 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-03-30 18:52:15 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-03-30 18:52:15 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-03-30 18:52:15 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.240.194:1194
2023-03-30 18:52:15 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-03-30 18:52:15 UDPv4 link local: (not bound)
2023-03-30 18:52:15 UDPv4 link remote: [AF_INET]54.193.240.194:1194
2023-03-30 18:53:15 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2023-03-30 18:53:15 TLS Error: TLS handshake failed
2023-03-30 18:53:15 SIGUSR1[soft,tls-error] received, process restarting
2023-03-30 18:53:15 Restart pause, 1 second(s)
2023-03-30 18:53:16 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-03-30 18:53:16 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-03-30 18:53:16 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.240.194:1194
2023-03-30 18:53:16 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-03-30 18:53:16 UDPv4 link local: (not bound)
2023-03-30 18:53:16 UDPv4 link remote: [AF_INET]54.193.240.194:1194```
bronze vale
#

What country are you from?

uneven summit
#

US

bronze vale
uneven summit
#

no its my private network

#

im on a VM

#

ive never had an issue before tho

bronze vale
#

Are you blocking port UDP 1194 on your VM?

uneven summit
#

works fine on my laptop same config

#

no

bronze vale
#

Did you check? It's not uncommon that it is blocked

uneven summit
#

one sec

#

how can i check taht

#

unfortunatley i gotta run, ill try again later, thank you for helping me @bronze vale !!!

scenic torrentBOT
#

Gave +1 Rep to @bronze vale

naive dust
#

hey im having issues connecting to the vpn

#

OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.

#

im located in the USA, on my own home network

light path
#

How should I follow up an email from THM support?

weary spindle
light path
#

5 days ago

weary spindle
#

Maybe wait couple of more days.

#

Rule of thumb is usually > 7.

bronze vale
broken bear
sharp bisonBOT
real phoenix
#

umm wtf happened to the attackbox page that let you see its timer and go fullscreen

weary spindle
#

Are you referring to my-machine?

If so, it was removed.

You can boot up an attackbox in multiple rooms.

real phoenix
#

sometimes i need to log into thm on the attackbox to get task files and it automatically opens the panel and freaks out and makes the viewport real small 😦

#

my-machine was also good for having 2 separate browser windows over 2 monitors. so you can see the room and also fullscreen the attackbox on the other screen

weary spindle
#

You extend the Attackbox to full screen.

exotic dove
#

How can I upload a docker challenge on THM? I can only see VM and Downloadable file options

#

Should I like create a VM with a script inside that runs my docker file?

zealous yoke
exotic dove
#

Alright thank you a lot ⚡

viral schooner
#

hello everyone ! i have got a problem with my connection to openvpn. It worked well then it stopped working.... can you help me plz? thanks !

#

it s automatically connecting in https and i guess it s wrong

dusty moss
#

Hi @zealous yoke , do you know how many I am in the list for room validation? I succeeded in submit my room with 5.4.0-139 kernel 😉

light path
fiery flame
#

There is problem in payment system in tryhackme!
Tryhackme couldn't automatically charge from my card for 3 month. Bu I have enough money for 1 month. I recently did it manually bu as a result tryhackme charge from me 8.5$ not 8$. I think I paid 13 hours late that is reason maybe

#

I don't check my email often, I know that after 13 hour. Is it possible that tryhackme charge for extra missing time?

bronze vale
light path
scenic torrentBOT
#

Gave +1 Rep to @bronze vale

elfin ridge
#

do the voucher expire if not used in a week or two. I have two friends having issues redeeming

weary spindle
paper sable
#

Hello there @runic wave 👋 please DM me regarding your room submission. I was unable to sent you a message, so I am reaching out here.

odd crescent
#

Hi, Complete Beginner learning path doesn't appear on my account. What should I do?

weary spindle
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

severe falcon
#

Anyone that knows why this doesn't work?

weary spindle
severe falcon
#

Network exploitation basics and then network services

weary spindle
weary spindle
severe falcon
#

yea but also wait

weary spindle
#

The part of the command is important..

severe falcon
#

no one is working

#

or im still missing something

weary spindle
#

Can you take a screenshot of the Target information for me please?

severe falcon
#

you mean this right?

weary spindle
#

Look at the ip you're using.

#

And look at the IP in the information.

#

You're using the incorrect IP.

severe falcon
#

oh wtf

#

im sorry my bad

real onyx
#

Hey! Having some issues with paying for my subscription, can someone dm me?

weary spindle
#

What issues are you having?

#

(I'm not staff, please don't DM)

real onyx
#

It just wouldnt go through, but now it randomly did

bitter pewter
#

hi when i start machine and connect with openvpn i can ping and scan machine but i cannot access it

#

and i know that port is active i tried with attack box and it works

tropic gale
#

hello, just to know why my streak ended ?

bitter pewter
#

on mail

tropic gale
#

where to do it ?

#

okay

#

tyx

bitter pewter
#

🙂

tropic gale
#

What e-mail adress 😂

bitter pewter
#

sec

tropic gale
#

oki

bitter pewter
tropic gale
#

merci

#

thx*

exotic dove
unreal fractal
#

Hello guys I'm from Egypt and I'm trying to connect Wreath Network via openvpn but I always receive a connection timeout message. What can I do ?

weary spindle
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

weary spindle
exotic dove
#

What's the best linux distro image for room creation and docker?

karmic glen
#

Does anyone know what happened to the breachad VPN server? it is not longer available.

versed hull
#

Hey what happened with the payments ? I can not buy the license any more

#

Your card was declined. Please try a different card.

#

I get this message everytime, no matter which card I'm using

coral salmon
#

I can’t connect THM to my discord account

#

Because I had connected it earlier then disconnected

#

So whenever I reconnect I get that my token is in use by another user

cosmic vapor
#

hi guys i have problem in openvpn can anyone help me please?

also i have tried sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn
which it didnt work

#

2023-04-01 04:24:55 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-04-01 04:24:55 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-04-01 04:24:55 OpenVPN 2.6.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-04-01 04:24:55 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-04-01 04:24:55 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-04-01 04:24:55 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-04-01 04:24:55 TCP/UDP: Preserving recently used remote address: [AF_INET]54.76.30.11:1194
2023-04-01 04:24:55 Socket Buffers: R=[212992->425984] S=[212992->425984]
2023-04-01 04:24:55 UDPv4 link local: (not bound)
2023-04-01 04:24:55 UDPv4 link remote: [AF_INET]54.76.30.11:1194
2023-04-01 04:24:55 TLS: Initial packet from [AF_INET]54.76.30.11:1194, sid=24bd6364 fbd5da83
2023-04-01 04:24:55 VERIFY OK: depth=1, CN=ChangeMe
2023-04-01 04:24:55 VERIFY KU OK
2023-04-01 04:24:55 Validating certificate extended key usage
2023-04-01 04:24:55 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-04-01 04:24:55 VERIFY EKU OK

#

2023-04-01 04:24:55 VERIFY OK: depth=0, CN=server
2023-04-01 04:24:55 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-04-01 04:24:55 [server] Peer Connection Initiated with [AF_INET]54.76.30.11:1194
2023-04-01 04:24:55 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2023-04-01 04:24:55 TLS: tls_multi_process: initial untrusted session promoted to trusted
2023-04-01 04:24:56 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2023-04-01 04:24:56 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,comp-lzo no,route-gateway 10.9.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.9.19.64 255.255.0.0,peer-id 56'
2023-04-01 04:24:56 OPTIONS IMPORT: timers and/or timeouts modified
2023-04-01 04:24:56 OPTIONS IMPORT: compression parms modified
2023-04-01 04:24:56 OPTIONS IMPORT: --ifconfig/up options modified
2023-04-01 04:24:56 OPTIONS IMPORT: route options modified
2023-04-01 04:24:56 OPTIONS IMPORT: route-related options modified
2023-04-01 04:24:56 OPTIONS IMPORT: peer-id set
2023-04-01 04:24:56 Using peer cipher 'AES-256-CBC'
2023-04-01 04:24:56 net_route_v4_best_gw query: dst 0.0.0.0
2023-04-01 04:24:56 net_route_v4_best_gw result: via 192.168.1.1 dev eth0
2023-04-01 04:24:56 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:f3:df:41
2023-04-01 04:24:56 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2023-04-01 04:24:56 Exiting due to fatal error

#

i am using version OpenVPN 2.6.0 x86_64-pc-linux-gnu

sharp bisonBOT
weary spindle
#

Will help. 🙂

eternal forum
#

my nessus new scan is grey out

#

what could be the reason

versed dagger
#

hi. i connected using OpenVPN. when I test in Tutorial room, firefox can't load the Test Machine IP.

tribal mason
#

!vpnscript

sharp bisonBOT
versed dagger
#

after this chmod +x <path-to-script>

#

thm-troubleshoot changed color

#

but i can't run the code...

sudo thm-troubleshoot
sudo: thm-troubleshoot: command not found

pastel tinsel
#

You're trying to run a command when you just type it without no path, and when you add the path you're running the file

versed dagger
#

so that means i should entered

sudo openvpn ./name.ovpn

weary spindle
#

No.

versed dagger
#

thank you @tribal mason and @pastel tinsel

scenic torrentBOT
#

Gave +1 Rep to @tribal mason

versed dagger
# weary spindle No.

sudo openvpn ./name.ovpn -- this worked

i entered sudo openvpn name.ovpn before

#

inside Downloads folder

tribal mason
weary spindle
#

~/Downloads

#

Is a shortcut.

versed dagger
#

got it. thank you so much

little ocean
#

hey @weary spindle , bro i lost my password for my main account , tried to login using gmail but he made me an another account .. when i asked for a password reset . i got a password reset for the new account .. is there anything i can do

weary spindle
#

!email

sharp bisonBOT
weary spindle
#

I'm not staff.

little ocean
#

i did , they didnt respond

little ocean
#

should i send another email ?

analog shuttle
#

I think I've asked this before but not sure if it has been resolved yet,
can we VNC into the kali linux machine? or is it only available for the attack box?

#

attack box worked for me, but cant manage to do it with kali

weary spindle
glacial hound
little ocean
little ocean
glacial hound
#

You shouldn't be able to have the same email on two accounts, are you 100% sure that you used your gmail for the first account?

weary spindle
#

^

little ocean
glacial hound
little ocean
#

and the new one is alawneh m

glacial hound
glacial hound
#

Yup

light finch
#

Can anyone please help with this. I still haven't been able to get a proper VPN config file to work for a network room I purchased.
Its nearly half way through to expiration date and I never was able to get a connection?

cosmic vapor
weary spindle
#

It won't be holo if they purchased it.

#

It will be Throwback.

tribal mason
#

whoops

#

I totally mixed up

zealous pelican
#

Hi any way to fix the nmap scan speed... on vpn and from attack box if you scan all ports it goes forever and every time I do status eta is further away even on T5 scans. Some multi hours

weary spindle
#

Well, I mean.

65k will take a time.

zealous pelican
#

Yes but from attack box which is on same infrastructure so no network lag. Still 2+ hours

weary spindle
#

Personally, I've never had trouble with speed.

zealous pelican
#

Been doing my scans from attack box to save on network delay but it is going crazy atm

#

Last two week can just do basic scans

naive dust
#

Not able to login on phone, but I think I am able to login on the computer

weary spindle
#

That error code looks pretty specific.

weary spindle
naive dust
#

Which box, I am sure I have verified the captcha test

weary spindle
#

The captcha box.

naive dust
#

Has happened multiple times NotLikeThis now I have to get up from my bed in order to use computer to login

analog shuttle
#

that happened to me a few times on my computer as well, I think it worked after i cleared my cookies

exotic dove
#

How should my OVA be to be uploaded to THM? should it have autologin? should it have an automatic service run on system boot? I couldn't find any tutorials on that sadly

plush bay
#

!docs room-creation

sharp bisonBOT
plush bay
#

@exotic dove ⬆️ should cover the basics

exotic dove
# plush bay <@209720683809210368> ⬆️ should cover the basics

Thank you :) however, sadly this doesn't help in my issue, I've already check it out and I have passed all that, it's just about the actual OVA that I am uploading, how should it be for my challenge to be up and active

I've already created a dockerfile and downloaded the image on my OVA and made it run automatically on startup, currently the OVA loads up with SSH login should I made it auto login?

scenic torrentBOT
#

Gave +1 Rep to @plush bay

plush bay
#

uuum... dunno

dense bramble
exotic dove
#

Thank you @dense bramble, I was looking for rooms creators to ask, you just mentioned that to me

#

Hello@zealous yoke 🖐️ can you add me to Creators-Lounge, I have few questions to ask about room creation

echo sonnet
#

Hey✌️ is there a way to change my country from the User Profile?

plush bay
#

@echo sonnet see this message that this is a reply to for how to update the country on the user profile page

scenic torrentBOT
#

Gave +1 Rep to @plush bay

weary spindle
#

@zealous yoke

Hay. they've spammed this in multiple channels.

deep cradle
#

There seems to be a problem with the "LocalPotato" room (https://tryhackme.com/room/localpotato). The VM won't launch in split view. I've also tried connecting to the VM and using xfreerdp to connect to the credentials available in Task 1 but it suggests that the password has expired.

#

[09:55:11:311] [3148049:3148050] [WARN][com.freerdp.crypto] - Certificate verification failure 'self-signed certificate (18)' at stack position 0
[09:55:11:311] [3148049:3148050] [WARN][com.freerdp.crypto] - CN = LP
[09:55:12:814] [3148049:3148050] [WARN][com.freerdp.core.nla] - SPNEGO received NTSTATUS: STATUS_PASSWORD_EXPIRED [0xC0000071] from server
[09:55:12:814] [3148049:3148050] [ERROR][com.freerdp.core] - nla_recv_pdu:freerdp_set_last_error_ex ERRCONNECT_PASSWORD_EXPIRED [0x0002000E]
[09:55:12:814] [3148049:3148050] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[09:55:12:814] [3148049:3148050] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1

weary spindle
deep cradle
#

Will give that a go @weary spindle - give me a sec

#

Looks like the same issue with the password being expired... I guess that would perhaps also explain why the Split View doesn't work too?!

weary spindle
deep cradle
#

Yes - it says it is loading but do you get a desktop?

#

After waiting for the machine to fire up on my end it says it can't connect....

weary spindle
#

Nah, it fails everytime.

deep cradle
#

Ok - so perhaps this is something that the room creator has to fix? If so how does one log this correctly?

weary spindle
#

It's a THM room, I've posted in a channel they will see, however a good place to post this sort of stuff is #room-bugs

deep cradle
#

Ok - I'll post in there - thanks @weary spindle appreciate your help confirming it wasn't just an issue on my end 👍

scenic torrentBOT
#

Gave +1 Rep to @weary spindle

fiery flame
#

Hi everyone! Who is master of linux?!
I really need help
I installed terminator then I uninstall gnome-terminal, but after that when I right click on mouse "Open in terminal" option is disappeared. I need that option but I don't want to install gnome-terminal again because gnome-terminal doesn't support split view. Is there any possible way?

sonic aurora
#

sorry

deep cradle
#

Looks like you will need to manually add the action to open in terminator to the context menus

fiery flame
#

Because I can not find file managers action for kali

deep cradle
#

@fiery flame - File Managers Action and Nautilus look like third-party add-ons so you would need to install them. I'm afraid I have no experience of making these sorts of modifications. I just use the standard terminal on my kali

fiery flame
#

I think there is no file managers action for kali

deep cradle
#

Have you ever used something like tmux? If you want a "richer" terminal experience in gnome-terminal then I'd say this might help

#

but it depends what you are after...

#

There is a good room on TryHackMe about tmux though.... let me dig out the link

fiery flame
scenic torrentBOT
#

Gave +1 Rep to @deep cradle

deep cradle
#

I enjoyed this room... and it means a single terminal window can be made a lot more powerful... in which case gnome-terminal might be enough.... good luck with it anyways! 🙂

fiery flame
#

Thank you bro

crimson crown
#

Hi i am trying to open http://MACHINE_IP/robots.txt on attack box but it is continuously giving page not found error

weary spindle
crimson crown
#

yes same url mentioned in the content

weary spindle
#

you need to start the machine in the task.

crimson crown
#

I did that clicked on start machine and then came back and tried using the http://MACHINE_IP/robots.txt still same

weary spindle
#

did you wait a minute?

crimson crown
#

yes i did again still same

#

we are having trouble finding that site

weary spindle
#

Which room are you doing?

#

Do you see a box like that?

crimson crown
#

content discovery yes on top i can see the active machine

weary spindle
#

Ok.

replace machine_ip with the IP that is in that box.

crimson crown
#

ohhhh.......how stupid of me

#

thank u

weary spindle
#

No, it's ok.

Really, that page should have changed and reflected that.

#

Can you refresh the page with Ctrl and F5?

crimson crown
crimson crown
weary spindle
#

Are you on the VPN, or attackbox?

crimson crown
#

attackbox

weary spindle
#

I wonder if its because free users dont get an external network.

#

Try visitng that page in your host machine.

crimson crown
#

okkay i guess so bcoz till was premium never faced such issues

#

will be back as premium soon ....waitying for paycheck ......ha aha ha aha

cosmic vapor
#

hi my vpn still not working how to fix it?

#

please can anyone help me?

#

if anyone active please send me

plush bay
#

!vpnscript

sharp bisonBOT
plush bay
#

@cosmic vapor ⬆️ start with trying to use this script to see if it detects anything

exotic dove
#

from any mods

scenic torrentBOT
#

➕ Gave the role Creators-Lounge to AyhamAlali#0001

naive dust
#

i can't download the openvpn file

#

i see '404 an error occured'

plush bay
plush bay
#

the access page 404:s????

naive dust
#

i can't install the openvon file

plush bay
#

because if not you can change the vpn server or hit the regen button to make it try to work

naive dust
#

but how can i do that

#

i can't access to vpn page

plush bay
#

on the access page... not the get-config page

#

they are different

naive dust
plush bay
naive dust
#

okok

#

i try that

#

yeah

#

it's work

#

thanks

plush bay
#

no problem

#

glad shadow could make it work for you

nova ibex
#

hi guys, this is maybe a long shot, but i'm on the room holo, trying to use wfuzz to find the "cmd" comand in one of the parts of the room after ? the problem is in this room for some reason when i use wfuzz in whatever part of the room i get 200 or 302 status, so everything give me an positive response, i check already some walkthroughs until where i'm in case i was doing something wrong, but i can not find the problem

naive dust
#

@plush bay

#

ho i can't upload image

naive dust
nova ibex
naive dust
#

see

#

i c'ant access to vpn

forest ridge
dense bramble
sharp bisonBOT
dense bramble
#

Download and run this

naive dust
#

how i use it ?

#

what is the config path ?

plush bay
#

/path/to/yourusername.ovpn

#

assuming you stored it in your downloads folder that would be /home/kali/Download/Myrmidons.ovpn

naive dust
plush bay
#

or just place that script in the same folder as the ovpn file and run it again and it should work

plush bay
#

you need both files for it to work though

naive dust
#

it's work

tardy bay
#

hello

cosmic vapor
# naive dust

I did try it before it only connect me to tun0 and when next time i want to open i have to do all this process all over again

tardy bay
#

why can't I download anything (retro room)

#

and that button doesn't even work

#

it's very clunky

nova ibex
#

as a hint you do not need to download nothing

#

on that room

wind wing
#

how can i fix openvpn connectivity?

nova ibex
wind wing
#

alr ty

weary spindle
halcyon ridge
#

i think there is a problem in https://tryhackme.com/room/investigatingwithelk101
In task 4 where you have to acces the site, it does not work for me, i get 504 Gateway timed out when i try to acces the site via the Attackbox.

I have just checked a Youtube video up to this point, and it works fine on their end so i think something might have gone bonkers, i have tried 2 attackboxes and 2 machines (as in terminated and relaunched)

halcyon ridge
cursive crescent
#

Evening. I recently got a laptop to get back into THM but when I try to connect with OVPN it's not connecting. It's just repeating the same things you see there

#

Any assistance?

sharp bisonBOT
cursive crescent
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

robust verge
#

Hey guys, I have a problem with connection timeout on attackbox (subscribed) the ssh doesn't work it just timeouts and pings just leave me with blank space it doesn't seem to do anything

#

ls or any regular non connection based seem to work fine

weary spindle
robust verge
#

So I'm on nmap part of the begginers

#

I'm trying to ping address 10.10.248.30 (idk if important)

#

The ping doesn't go through other than showing 56 bytes of data

weary spindle
#

I don't think you need to ssh in to that machine.

robust verge
#

Fine yes

weary spindle
#

You just need to use nmap?

robust verge
#

But I tried ash

#

Yes

#

It doesn't launch

#

It says nmap launching and then stuck on a single like

weary spindle
#

What's your target IP?

robust verge
#

Line*

#

10.10.248.30

#

I ping google and the ping never ends for example

#

If I don't ctrl c it and interrupt it doesn't end

#

And shows results after interruption. Anything other than pinging google doesn't seem to work

weary spindle
#

Can you verify and take a screenshot?

#

!docs verify

sharp bisonBOT
robust verge
#

Sure

#

I'll also try to restart the attackbox again but idk

halcyon ridge
robust verge
#

Mb I'm new

#

Sure

#

Ssh stops me at one line and says connection timeout

weary spindle
#

SSH won't work, because it's not supposed to

robust verge
#

Hmm

#

Nmap?

weary spindle
#

Yes.

robust verge
#

Ok wait

#

I restarted it again it works

#

Mb

#

I think it was just bugging out for a bit there

#

Alright new problem so I have a task to see how many ports are open out of 5000 scanned ports. I use nmap -p1-5000 -sS 10.10.248.30 -vv -Pn and I execute it but it doesn't show open ports at all. It shows no response which means all 5000 are considered open or filtered but I can't respond with 5000 I think it should show me open ports between 1-9.

robust verge
#

Oh okay ty

#

@broken bear nmap room from begginers path

dusty moss
#

@crystal marlin Hey ! I succeeded in submitting my room with the good kernel 😉 do you know when my room will be evaluated?

crystal marlin
scenic torrentBOT
#

Gave +1 Rep to @crystal marlin

plush bay
severe falcon
#

anyone?

weary spindle
#

Is is-rsa in that directory?

idle burrow
#

im trying to connect to a room (SOURCE)
i am connected with the THM VPN

#

when i go to access the website via its ip

#

it just says its unable to connect

#

and that it has a problem loading the page

weary spindle
#

Is the room called source?

idle burrow
#

yes

queen girder
#

Hi everyone, I have a question about windows privilege escalation attack vector: Unquoted Service Path. It is:
My context is the ExampleService has bin path like: c:\myprograms\A subfolder\Bsubfolder\service.exe.
When I add a reverse shell as A.exe to myprograms\A.exe, it works normally, BUT
I want to poc this problem in another way (just because I meet other case transfer shell is not so easily). I built a local .exe file from bat using iexpress, this will output the cmd whoami to c:\users\public\whoami.txt.
I can run this file directly, but move it to c:\myprograms\A.exe then restart the service, it doesn't work.
My notice is if I replace service.exe by my exe file it's also work, but not for the case I move it to c:\myprograms\A.exe
If anyone has any idea, pls help me. Thanks!

main fjord
#

hi can one of the admins help me?
i cant verify my new discord account my old one got deleted.

mellow matrix
#

hello, i need help with tryhackme im new to the platform and i have a free account, ive been trying to ping to google or open any website thats on the room im supposed to access but it doesnt work, i get connection timed out, and ping fails, I have no clue whats the issue, at first i had openvpn running and was trying to ping inside attackbox but i realized im supposed to use one of those so i terminated openvpn and reopened the attackbox and tried to ping again but nothing shows up.

light path
mellow matrix
#

oh i see, thank you

hot ivy
#

Hey, thanks a lot for your support, I could successfully install it, make challenges and host it in localhost,
but yeah,
I have to host it online, which I am not sure how to do that, I tried on vercel it didn't work
any other suggestions where I could host,
for free if possible
else a cheap and better platform?

scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
#

if you sign up to this, then wait some hours - to a day, you'll be able to get some digital ocean credits to have a machine running for free for some months

hot ivy
hot ivy
#

it isn't mentioned in the website right, like the payment will be refunded

pastel tinsel
hot ivy
#

oh

zealous yoke
#

yup usually it's a verification "charge" that costs like 1p and is refunded/cancelled after 24/48 hours

glad oyster
#

Huh, they didn't require any card for the github student pack when I signed up

pastel tinsel
#

digital ocean does

weary spindle
pastel tinsel
glad oyster
#

At least, me and scrubz didnt have to

pastel tinsel
#

hmmm

glad oyster
#

They might have changed it now 🤷‍♂️

weary spindle
#

I didn't have one for DO either.

#

They used my student account to verify

pastel tinsel
#

maybe the student account wasn't active when they tried to set up DO

spark spoke
#

i need help

#

kinda my first time RDP

#

connected to thm vpn and rdp with my room's ip but still cant connect

glad oyster
#

How long have you waited?

bronze vale
#

What room?

supple ore
#

Hi there. I seem to not be able to upload pictures anymore to the THM server. It happens both for the app and browser. Not sure why. Have the active subscription, and haven't changed anything in the acct to need to replace my discord token. Anyone else having issues posting pictures?

weary spindle
#

You're not verified.

#

That's why you can't do it.

supple ore
#

@weary spindle

weary spindle
#

And that's why your embed won't show ^.^

#

Did you have an old Discord account?

supple ore
#

It's the littlest things that hurt 🤦‍♀️

#

Uh, maybe 3 years for discord, but THM only since December

weary spindle
#

Did you ever verify another account?

supple ore
#

Hmmm. Poo. I may have done that.

#

I'll start looking there. Many thanks @weary spindle ! 🫡

scenic torrentBOT
#

Gave +1 Rep to @weary spindle

weary spindle
#

You might need to ask a mod to delink your old Discord account.

supple ore
#

👍👍

analog wagon
#

Greetings everyone! This is my very first time trying THM and I am extremely excited! I have just entered the room attempting to attack my first box - following the tutorial - and received this message below:

#

ERROR RESPONSE: Error Code 405. Message: Method Not Allowed

#

Can someone out there please help so I begin my attack?

weary spindle
#

You're aiming at the wrong machine.

#

have you started the machine in task one?

analog wagon
#

Hmm

#

hold on

#

I inserted the IP addy

#

hit enter but received this message

#

there were also a few things that did not show up as seen in

#

the tutorial video

glad oyster
#

!docs verify

sharp bisonBOT
glad oyster
#

Could you verify and post some screenshots?

analog wagon
#

Ok, let me try that

analog wagon
#

Sorry for the lengthy delay. I had to make a trip outside

barren silo
#

Hi guys, I'm currently stuck on a bug the Hydra room on task 2... I'm following the video and I'm doing the same thing as shown in it, but when I try to go to the website by clinking the link nothing happens, I tried to reload the page 3 to 4 times and it's still not working sadly... I tried to terminate the machine and then again reloading another one but nothings works, can somebody help me please ?

analog wagon
#

This is what I am getting when I paste the IP address into the URL

zealous yoke
analog wagon
#

That's the one I used the one on the left and pasted it on the right. Now, it keeps saying "connecting" but nothing is happening.

#

I'm going to log out of TryHackMe and log back in

#

start all over

silver flax
#

Does anyone know if you can use Kali Linux on your cell phone?

exotic dove
#

Try to search for Termux kali linux

marsh acorn
#

Hi, when I tried to download a configuration file from access it tells me that the page is lost in the matrix

#

changed multiple servers and still gave me the same result

limber raft
#

Greetings Support. I am doing a Lab on Splunk:Basic Task : Can anyone tell me how to access splunk? I do not see it anywhere or instructions to access it.

#

@ tech-support

fiery flame
#

a few month ago tryhackme community said that my government blocking openvpn server then I gave up to connect vpn. But I contacted with my government they said they are not blocking openvpn server nor udp. I can connect openvpn with TCP but not udp.
Can someone know what happening by this output?

#

Attackbox has freezing slowing problem. I want to vpn but I am in trouble

pastel tinsel
#

!vpnscript

sharp bisonBOT
fiery flame
#

But didn't work

pastel tinsel
#

what's the output?

pastel tinsel
#

that's now the output of the script

fiery flame
pastel tinsel
#

ye

fiery flame
#

I can't recall but it didn't work

pastel tinsel
#

please show

fiery flame
#

Here it is

#

Nothing happened then

pastel tinsel
#

what if you wait a bit, is the vpn still running?

pastel tinsel
#

can you give a screenshot of what it says now

fiery flame
#

Last 3 line
2023-04-04 16:55:28 UDPv4 link local: (not bound)
2023-04-04 16:55:28 UDPv4 link remote: [AF_INET]34.253.19.14:1194
2023-04-04 16:55:28 TLS: Initial packet from [AF_INET]34.253.19.14:1194, sid=6f8b401d 2d58227f

pastel tinsel
#

can you send a screenshot of the top of your config, everything before the certificate please

fiery flame
#

I searched from you tube they are connecting through Hotspotshield vpn but for me it is expensive

pastel tinsel
#

yeah, just a screenshot

cobalt perch
#

For some reason THM thinks I'm from Switzerland lol

#

and I dont see any option to edit that?

pastel tinsel
fiery flame
pastel tinsel
bronze vale
#

@fiery flame Does it connect on your host machine? (I’m assuming you’re using a VM)

cobalt perch
#

@fiery flame Did you try a different VPN server from this list?

pastel tinsel
bronze vale
# fiery flame Nope I don't have VM

Alright, there’s a chance that OpenVPN can’t communicate on port 1194 (which is the default port)

From what I can see, your country doesn’t block OpenVPN connections of any sort, but it is common for Eastern countries to block UDP VPN connections

fiery flame
#

Mmm

bronze vale
#

I’d recommend editing your local firewall to allow UDP 1194 connections (incoming and outgoing)

#

If the issue persists, contact your internet service provider and ask them if they block any ports or services on your router

fiery flame
scenic torrentBOT
#

Gave +1 Rep to @bronze vale

bronze vale
#

Another way to check is to try connecting to the OpenVPN service on another device

fiery flame
#

Thank you for hope🙂

bronze vale
#

So did you connect successfully?

fiery flame
#

Setting mtu to 1000 or 1200 didn't help me

bronze vale
#

You can’t set your tunnel size because the tunnel hasn’t opened

willow cloud
#

hey there , ip from machine wont ping and wont show me any connection

weary spindle
willow cloud
weary spindle
#

Are you on the attackbox or VM?

willow cloud
#

im on the vm

weary spindle
#

Are you on the VPN?

willow cloud
#

yes

#

should i regenerate my ovpn

#

?

weary spindle
#

Look at your VPN script.

weary spindle
willow cloud
#

just double refreshed and there's nothing wrong i guess

#

ill regenerate my vpn configuration

weary spindle
#

No

#

Look at your VPN script output.

willow cloud
#

then?

weary spindle
weary spindle
willow cloud
#

how so

sharp bisonBOT
weary spindle
#

Save and run the above script as .sh

willow cloud
#

this is new

#

😯

weary spindle
#

You have the cipher error.

willow cloud
#

oh yeah

#

it worked, thank you @weary spindle !

scenic torrentBOT
#

Gave +1 Rep to @weary spindle

willow cloud
#

why nmap says its down but rustscan and ping say are online and rustscan found open prots

#

ports

weary spindle
#

There is a note, in nmap.

willow cloud
#

the one i should try pn right

#

?

weary spindle
#

Yes.

fair patio
#

My attackbox that I’m using through the website keeps disconnecting me every couple of minutes, it’s when I’m using Firefox. Can anyone help?

grand prairie
#

Hello, its concerning my account information, is this the correct chanel to comment ?

pastel tinsel
grand prairie
#

@pastel tinsel I need help to change my name on the certificate, cos I put an fictitious name and didn't know I can get certificates. 🤦🤦🤦🤦

pastel tinsel
grand prairie
#

@pastel tinsel my heart just broke 💔 🤣😂 you know any good program which makes it look like original?

autumn hawk
#

and the wreath machine is buggued

#

i cant even ping it

#

im connected to the vpn

#

someone can do something ?

weary spindle
#

Are you connected to the Wreath VPN?

autumn hawk
#

y

weary spindle
#

Can you verify and show your script.

#

!docs verify

sharp bisonBOT
hasty spoke
#

Hey folks! I am a bit confused. I am trying the first assignment in the Intro to offensive security right now, and using openvpn, which seems to be connected correctly, i can't see to open the fakebank.com site, the way the person shows in the video. Instead it just opens a page telling me fakebank.com is not for sale xD

hasty spoke
#

?

#

Don't what?

weary spindle
#

Fakebank.com is a real website, anything you do, you will be attacking a real webite

#

Please use the splitscreen machine for that room.

hasty spoke
#

i won't and wasn't planning on doing so

autumn hawk
#

scrubz

hasty spoke
#

i would prefer using my own virtual machine tho, cuz its free without limitations

autumn hawk
#

it doesnt work i got the right vpn

hasty spoke
#

there is a 1 hour limit on the vm in the website no?

weary spindle
#

That machine has the wordlist needed too

#

This is a room, I suggest you use the split screen machine.

hasty spoke
#

again, i would only have 1 hour no?

weary spindle
#

you won't need longer than an hour.

#

and I don't think so for that room.

hasty spoke
#

i get that, but in the long run, won't that limit me?

weary spindle
#

As it's not an attackbox.

#

I thought you used a VM anyway?

weary spindle
hasty spoke
#

correct, and i have setup the openvpn already

#

but appearantly there are assignments where you can't utilize your own vm then?

#

i am just trying to understand this

weary spindle
#

There is like 1%.

hasty spoke
#

thanks 🙂

weary spindle
#

This room is one of them, as the fakebank.com is used as a localhost.

#

so it's not the real www.fakebank.com

autumn hawk
#

cypher error

weary spindle
#

So you're not connected.

#

You need run this script, save it as .sh and run whilst you're trying to connect.

#

!vpnscript

sharp bisonBOT
autumn hawk
#

wtf this is so unprofessional

#

have a vpn who doesnt work, need to install another script to make the first one worked

weary spindle
#

It's not the fault of THM.

#

It's OpenVPN.

#

It depends on the version you have installed on your system.

autumn hawk
#

ok it doesnt work

#

the script told me top ask help here

hasty spoke
#

are there boxes you can attempt to hack besides the courses?

autumn hawk
#

so i want one thing

#

a refund

weary spindle
#

Like I said.

autumn hawk
#

i paid only for wreath tot rain my pnpt certification

weary spindle
#

Verify and show me, for th ebest help.

autumn hawk
#

i just bought it 1 hour ago

weary spindle
#

Wreath is a free room.

autumn hawk
#

want a refund now

#

7 streak day

weary spindle
#

!email

sharp bisonBOT
autumn hawk
#

dont have time

weary spindle
#

Please, Email support, who will be more than happy to assist you,

#

I am not staff.

hasty spoke
#

or is tryhackme just courses based

autumn hawk
#

there is no staff member connected ?

weary spindle
hasty spoke
#

i cant find rooms anywhere

weary spindle
weary spindle
hasty spoke
#

i am there

autumn hawk
#

thats really a joke

weary spindle
#

It's not.

hasty spoke
#

i dont see anything room related in the learn page

weary spindle
#

Or you can search for rooms, using keywords.

hasty spoke
#

aah gotcha thx

#

still really confusing to me how i can add 1 hour to the vm in the website for free when if i click on go premium it says max is 1 hour a day

weary spindle
weary spindle
hasty spoke
#

i know

#

but the pricing page says you can only have a max of 1 hour a day with free plan

#

and i can actually add 1 hour it seems to work

weary spindle
#

Yes, that's for the attackbox.

#

The target machines are different.

hasty spoke
#

oo whats a attackbox opposed to a vm?

weary spindle
#

They're isn't a limit on them.

#

An Attackbox is a custom Ubuntu box.

hasty spoke
#

oo but for that i would use my own kali linux right? cuz i already setup openvpn

weary spindle
#

No, you don't need OpenVPN because it's already on their network.

hasty spoke
#

yea but i dont want to pay xD

weary spindle
#

You don't have to. 🙂

#

75-80% of content is free.

#

I use a VM, I don't use the attackbox.

hasty spoke
#

and i suppose attackbox would be if someone doesnt have a vm with for example kali themselves right?

#

thanks for clearing up the info! 😄

weary spindle
#

Yes, perhaps someone might not have the resources to be able to create a VM on their host system.

autumn hawk
#

im tired of this bullshit

#

@cold fog

#

@zealous dune

#

@wispy chasm

#

Someone can help a simple problem without me being in the obligation to write a mail ?

weary spindle
hasty spoke
#

i dont think youre gonna get a refund with that 12 year old behaviour thats most likely violating the rules lmao

weary spindle
#

I've explained that refunds only happen via E-mail.

autumn hawk
#

i will make my refund demand via email in few minutes yes, i just check for quick help before

#

thats clearly a joke for a big plateform like that to have a poor support effiency

#

htb are way better on this point of view

#

you are the only ones with "openvpn problem" never had that with other

weary spindle
autumn hawk
#

thats ok doesnt care

#

normally staff member should be present to help this kind of thing but no one is making that

bronze vale
#

Hey there @autumn hawk

Please avoid being rude to community members.

autumn hawk
#

i have an exam tomorow for pnpt i was paying for that room specifically, such problem like that is not normal

bronze vale
#

I'm sorry to hear that you are distressed:(
There's two ways we can proceed; I can help you with your OpenVPN problem, or you will have to email so that I can refund you (due to data protection, I cannot discuss payment details or provide refunds from Discord)

autumn hawk
#

we can try openvpn if it doesnt work then i will email

bronze vale
#

Okay cool 🙂
Jump into my DMs and provide some details on what you're having some trouble with

scenic torrentBOT
#

Gave +1 Rep to @fiery flame

topaz pumice
#

Hello, I am having trouble connecting to the Set and Osiris boxes in the Windcorp series. They are both unreachable. I have tried redownloading my vpn file, and changing my vpn server. I have also waited 30+ minutes for Set to start up, and 10 minutes for Osiris to startup. I have no issues connecting with any other boxes, including boxes (Ra and Ra2) in the same series. I checked if they use a separate network vpn file, but they do not... not sure what else to do

#

they are unreachable through ping, the webpages in 80/443 do not resolve, and nmap -Pn show the ports (any port that is confirmed up in the writeups) are filtered instead of open

weary spindle
#

Did you add anything to your host file for Ra?

topaz pumice
#

yeah I still have the IP and the domain names in my hosts file, resolv.conf is just 8.8.8.8 though

fluid cape
#

Hi, is it just me or everyone is facing issues in openvpn while connecting to a network on tryhackme like breachingad ?

weary spindle
sharp bisonBOT
stray gorge
#

is it worth hacking with kali in a virtual machine?

topaz pumice
#

this good?

plush bay
plush bay
stray gorge
plush bay
#

well normally the virtual machine uses the host machines network card in a virtual mode

stray gorge
plush bay
stray gorge
#

but i can't use advanced tools like wifite or whatever its called

plush bay
#

normal useage makes the virtual machine not use your local area network but its own just using your host card to reach the wider internet... one of the other modes you can set the network card usage into makes it have access to the local area network too

stray gorge
stray gorge
plush bay
#

¯_(ツ)_/¯

#

rarely mess with those settings so dunno

#

also this is for tryhackme tech support which means you should not need it to have LAN access

stray gorge
hot ivy
#

@pastel tinsel
Thanks a lot for your support
I could finally host the CTF, on GCP

scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

topaz pumice
hot ivy
#

Can I share my CTF here, so interested people will register...?

silver flax
#

If i use VPN in my computer, i need to use in my VM

#

?

#

I cant connect my VPN in the VM

naive dust
#

Hello I have a question i cannot install openvpn on my kali linux machine

#

@plush bay

#

@stray gorge

plush bay
#

gonna let someone else handle that while shadow sleep as they need to be up early tomorrow... sorry a.k.a

warped pivot
#

hello, i am working in the holo room and I am connected via VPN in my Kali VM. The VPN connection is insanely slow but I can access other websites fine from Kali so I do not believe that it is my Internet connection. The thm-troubleshoot script says that the Internet connection is stable but ther are errors

[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? 
[+] Connecting....
[+] Connection Process completed successfully!
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum
junior drum
#

I am unable to subscribe, why is that? The Subscribe button doesn't do anything

warped pivot
dense vapor
dense vapor
weary spindle
dense vapor
weary spindle
#

Is the instance still up?

dense vapor
weary spindle
#

Is the machine still on?

dense vapor
weary spindle
#

Is your up correct?

Can you take a picture of the active target information?

dense vapor
#

yes

weary spindle
#

You're using the wrong IP.

#

That's why the password isn't working.

dense vapor
#

if not this then what is the correct machine IP address

weary spindle
spring hill
#

Hello, I have a problem.
I use Kali linux, connect to vpn by OpenVPN. After connecting, my IP is: 10.4.x.x but IP Machine on THM is 10.10.x.x
I can not ping from my Kali linux to machine THM.
Could you help me, please? @plush bay

chilly pike
spring hill
#

OK sir

#

¯_(ツ)_/¯

zealous yoke
spring hill
#

Ohh, thank you

hollow prawn
#

openvpn as not cnnecting

#

ERROR: Failed to apply push options
2023-04-05 16:34:32 Failed to open tun/tap interface
2023-04-05 16:34:32 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2023-04-05 16:34:32 Restart pause, 1 second(s)
2023-04-05 16:34:33 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-04-05 16:34:33 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authenti

#

can any one help me on this?

sharp bisonBOT
weary spindle
#

Save the above code as .sh and run it, whilst your VPN is trying to connect, (also place them in the same directory)

hollow prawn
#

ok

scenic torrentBOT
#

Gave +1 Rep to @weary spindle

magic seal
#

I can't connect with OpenVPN.

weary spindle
sharp bisonBOT
weary spindle
#

Save that as .sh and and run it whilst your vpn is trying to connect.

merry snow
#

Hi, who can help me regarding payment? My subscription payment failed yesterday as bank blocked the transaction. I want to pay again today but not able to find out way to manually pay.

weary spindle
#

!email

sharp bisonBOT
merry snow
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

weary spindle
magic seal
weary spindle
magic seal
weary spindle
#

That's not running, that's just assigning it as am executable.

#

./Troubleshooting.sh

magic seal
#

thanks its running

magic seal
weary spindle
#

Can you nano abdells.ovpn

#

And take a screenshot

magic seal
weary spindle
#

Are you on your own network?

magic seal
#

I fixed it

magic seal
weary spindle
#

Yeah, most school/orgs etc wil normally block this sort of thing,

magic seal
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

remote stratus
#

Hello Support Team, I have an issue with Holo network. I'm in VPN using holo open vpn key - but I cannot ping 10.200.95.33

severe vector
#

Hi, I have been waiting to reset my password (no reset emails received) for almost a month now, contacted the support email address over 4 times. I have a subscription so it's quite frustrating for me to be losing out on it. Could you let me know what to do?

remote stratus
#

└─# ping 10.200.95.33
PING 10.200.95.33 (10.200.95.33) 56(84) bytes of data.
From 10.50.74.1 icmp_seq=1 Destination Host Unreachable
From 10.50.74.1 icmp_seq=2 Destination Host Unreachable
From 10.50.74.1 icmp_seq=3 Destination Host Unreachable
From 10.50.74.1 icmp_seq=4 Destination Host Unreachable
From 10.50.74.1 icmp_seq=5 Destination Host Unreachable
From 10.50.74.1 icmp_seq=6 Destination Host Unreachable
From 10.50.74.1 icmp_seq=7 Destination Host Unreachable
From 10.50.74.1 icmp_seq=8 Destination Host Unreachable
From 10.50.74.1 icmp_seq=10 Destination Host Unreachable
^C
--- 10.200.95.33 ping statistics ---
12 packets transmitted, 0 received, +9 errors, 100% packet loss, time 11178ms
pipe 4

#

I have tried generating a new holo openvpn key

#

still the same issue - just happened 30 minutes ago - scratching my head - do you have any idea?

#

I can ping the gateway 10.50.74.1 OK

frigid grotto
#

is the website down? I get status error message:There was a problem, please try again later

sudden oasis
#

Same, website not working for me

bronze vale
#

Hey there,

We are aware the website is down, we’re working to bring it back up.

Sorry for the inconvenience

frigid grotto
#

no worries, just wanted to check if its only me

sudden oasis
#

No worries, thanks for ACKnowledging (sorry dumb joke lol)

elder glacier
#

Just for formality,

I had a problem with my authentication app.
I've already spoken to Jabba and forwarded an email to hello@tryhackme.com.
I am waiting.

User: NBXCVI

plush bay
scenic torrentBOT
#

Gave +1 Rep to @plush bay

smoky summit
#

Hi guys
need help with Room Snort
when I try to enter in terminal sudo ./traffic-generator.sh the response is "command not found"
any hints?

smoky summit
#

solved

soft nymph
soft nymph
weary spindle
#

The room is private.

#

Only people who have previously been in the room, before it was made private can view the room.

soft nymph
# weary spindle Only people who have previously been in the room, before it was made private can...

hmm that i know, i have seen it before and my question is wrong actually sorry, the only thing that i wanted to know is that, does room like this go under maintenance for change ? cause i lost many good rooms that i accessed before and made a list of but can't access now with my new account , is it that we would get the room back after certain time ? cause it helps sometimes to use THM rooms as reference apart from taking notes, so yea thefindcommand room was great, i learned the use of find mainly from here

weary spindle
plush bay
#

yeah agree that this specific room for the find command is super useful and sad to see it marked as private but it is not up to shadow if it remains that way or not

#

unless some people can help shadow build a new find command room

soft nymph
stoic tulip
#

Hi, I've just subscribed to the premium THM service (the one that says there's no setup needed) as when I tried to download the OpenVPN configuration file I got a 404 error.

I'm trying to ping a THM machine in AttackBox with my own Kali but am getting 100% packet loss.

Any help would be appreciated

weary spindle
stoic tulip
#

So I eventually managed to do that and I received a .ovpn file that's currently on my own personal desktop (meaning not on the Kali's desktop). What next?

#

My Kali is a VM

weary spindle
#

You need to move the file to your vm.

plush bay
#

unless you wanna open a shared folder into your kali vm our out to your host from the kali vm

stoic tulip
#

I'll try moving the file over to Kali
I thought the whole point of premium was that I didn't have to go through all this and everything would be done via the brower?

#

*Browser

plush bay
#

oh if you got a subscriber or premium you can use the attackbox for nearly everything

#

also known as the zero setup thingy

stoic tulip
#

I do have premium, so do I still need to go through this whole thing?
As mentioned, I can't ping the machine that I launched in AttackBox from my Kali at present

glacial hound
glacial hound
#

The article I shared should help clarify the differences

stoic tulip
#

So it says here that I may alternatively use the VPN if I'm not a premium user (which I am)
"Alternatively, you can connect to our VPN for as long as you need with a free subscription."

#

I just don't really understand what are the steps I need to do and why

#

Sorry if this is a bit much, I'm just really lost here

plush bay
#

hit green start machine button....
hit blue start attack box button
in the split view that opens up attack the ip in the red box that poped up after clicking the green start machine button

#

if you never wanna mess with your own vm and the vpn

dense bramble
#

If you're using the AttackBox, you don't need to do anything, just start the AttackBox and you're ready to tackle THM rooms. Tasks will have machines attached to them that you also need to start. Those will be your target machines that you will hack from your attacking machine - the AttackBox.

#

I am a premium user, but I prefer to use the VPN and my own Kali VM

stoic tulip
#

I hit the green button and a machine launched (it says AttackBox at the top)
There was no blue button
The IP in the red box is the IP I've been saying that I'm unable to ping

plush bay
#

this is the blue start attackbox button

#

this is the green start target machine button

#

a very few rooms launch their own split view without the attackbox to help sandbox things or keep it simple.... even though shadow finds it confusing sometimes

stoic tulip
#

There is no blue button

plush bay
#

if you just hit the green one it will pop up this box in all rooms

stoic tulip
#

I can minimize split view and then it just shows me "Show split view"

plush bay
#

ah yeah that is then a room which has its own special machine

dense bramble
#

Linux Fundamentals perhaps?

stoic tulip
#

This seems to be the opposite of "no setup required" haha

plush bay
#

?????

#

hit 2 start machine buttons... wait 2-3 mins..... do thingy.... done and terminate the machines

broken bear
plush bay
#

but agree the time those machines take to start could be considered setup time

#

and also guess it could be a lot better explained

stoic tulip
#

Does AttackBox = start the machine in your broswer and use your own Kali environment to interact with it without anything else done?

dense bramble
#

it's either the AttackBox OR your own Kali

halcyon ridge
glacial hound
#

The goal isn't for you to use your VM to interact with the Attackbox, its either you use your own VM OR the attackbox, to interact with other VMs attached to tasks.

stoic tulip
#

I've just terminated the machine. I have a .ovpn file downloaded on my personal desktop (not a VM).
I have a red "Access Machines" button at the top of the page, a blue "Start AttackBox" button, and a green "Start Machine"

glacial hound
#

Attackbox = a VM you can deploy via your web browser to complete tasks/rooms (no need to connectvia open VPN, generally no need to download tools)

plush bay
#

might help

stoic tulip
plush bay
#

!vpn

sharp bisonBOT
dense bramble
plush bay
#

then if you wanna learn how to use your own kali machine to hack the target machines

stoic tulip
#

Do I need to use OpenVPN no matter what my subscription tier is to interact with the machines?

plush bay
#

these 2 room links should help you understand how to access the target machines and why you would use the attackbox vs not

glacial hound
#

Yes

halcyon ridge
stoic tulip
scenic torrentBOT
#

Gave +1 Rep to @glacial hound

plush bay
stoic tulip
#

So now that I have the .ovpn file on my desktop, I need ot move it to my own Kali first?

glacial hound
#

Try to think of it this way, how can your VM interact with a VM on the THM network? Even if you're a subscriber, there still needs to be a way to get your machine on the same network

halcyon ridge
#

i would recommend the !vpn room to learn how to set up the VPN connection @stoic tulip

#

!vpn

sharp bisonBOT
glacial hound
#

Just like I can't interact with your pc which is connected to your WiFi, since its a private network. I would need a way into your network if I wanted my PC to interact with yours

stoic tulip
#

I've restarted the machine.
In my Kali I used sudo openvpn <FILENAME> and it eventually says "Initialization Sequence Complete"
I opened a new terminal and I still can't ping the THM machine

halcyon ridge
#

you will not be able to ping the machine from your own kali (i am 80% sure)

stoic tulip
#

???

halcyon ridge
#

i am pretty sure the VM machine will not respong to ICMP (ping) messages

stoic tulip
#

Wasn't that the whole point of using the ovpn conf file in my own Kali?

plush bay
#

windows target machines don't respond to ping....

stoic tulip
#

It's Linux

plush bay
#

and yes this is kinda stupid and causes a lot of confusion

dense bramble
#

which room are you doing?

stoic tulip
#

I'm seriously lost

plush bay
#

hence all the questions which room you are doing

stoic tulip
plush bay
#

because some of them will only be interactable from your split view

halcyon ridge
#

it sounds like this room is a bit too advanced, i would recommend starting with something easier

plush bay
#

huh... the basic pentesting room responds to ping last shadow checked

halcyon ridge
#

ofcourse many of the things are written in the hints for what to do, but i would recomend some other rooms to maybe see why or how things are done 🙂 for example the short module: https://tryhackme.com/module/introduction-to-offensive-pentesting

stoic tulip
#

Thanks, but I'm just trying to connect to the room

stoic tulip
plush bay
#

how you not got a headache yet is past shadow but yeah agree that you should maybe start with something else

plush bay
#

!vpnscript

sharp bisonBOT
plush bay
#

download that onto your kali vm and run it in the same folder as the .ovpn file and it will tell you any connection errors

#

one of the possiblities is that you are killing the vpn by closing or hitting ctrl + c on the terminal window

#

but can't say that is it for sure

dense bramble
#

the machine does respond to ping, yeah, I just checked

stoic tulip
#

I've opened a new terminal window, haven't closed the one running the VPN

stoic tulip
plush bay
cyan cargo
#

I'm having trouble connecting to the IP in the Burp Suite module. It keeps timing out when I attempt to connect to it.

plush bay
#

obviously not your fault and just problematic

plush bay
cyan cargo
plush bay
#

well if you leave intercept on you won't reach the website before you forward the request or turn intercept off

cyan cargo
#

Alright thank you.

glacial hound
#

@stoic tulip As most people already mentioned, you should try an easier room so you can understand the different ways you will be interacting with material on THM. if you have some free time tomorrow I'd be happy to walk you through this via voice chat.

plush bay
#

no problem

plush bay
#

+rep @glacial hound

scenic torrentBOT
#

Gave +1 Rep to @glacial hound

coral cape
#

Hi THM team, could you please check if the overpass https://tryhackme.com/room/overpass room needs an update? I think you can't get the root flag with the intended way if you use the attack box. The last step requires you to open a webserver on port 80 on the attack box, but this port is already in use by python -m websockify 80 localhost:5901 -D which s used to host the attack box session. So I think only solvable via VPN from your own VM currently

stoic tulip
# glacial hound <@300220196612866048> As most people already mentioned, you should try an easie...

Much appreciated, but I don't see how getting stuck on a troubleshooting issue has anything to do with the room itself as I can't even access it.
This just seems to be misunderstanding how THM works as a whole, and has no correlation to my attempts hacking the room (or lack thereof)
It'd be appreciated if you could help me resolve the issues I've been facing tomorrow (if you're willing that is)

#

Again - it's very much appreciated, I just need to complete this room in particular

plush bay
glacial hound
scenic torrentBOT
#

Gave +1 Rep to @glacial hound

coral cape
scenic torrentBOT
#

Gave +1 Rep to @plush bay

plush bay
coral cape
plush bay
#

no problem

karmic crown
#

Hey folks, how's it going? I hope you guys is doing well, look... quick question...Does anyone notice that some machines it's going been terminated when we are in of them? like when I got the shell...it pass some minutes, the machine it's terminated, and I need to restart again

#

Archangel and ColddBox: Easy --- it's an example of this issue that I got today and yesterday

wooden veldt
#

Hi question about Wreath, right now its broken and needs a reset but whenever I was able to run through I couldnt use sshuttle and had to use ssh local port forwards and rdp to work up to task 34. Is there something inherently wrong with this weeks iteration or am I doing something wrong?

grave raft
#

Hi, I'm trying to use the OpenVpn in kali linux on a VMWare VM but I just get this error when I open the VPN configuration file: 2023-04-06 02:48:36 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2023-04-06 02:48:36 ERROR: Failed to apply push options
2023-04-06 02:48:36 Failed to open tun/tap interface
2023-04-06 02:48:36 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2023-04-06 02:48:36 Restart pause, 64 second(s)

weary spindle
grave raft
weary spindle
grave raft
weary spindle
weary spindle
sharp bisonBOT
weary spindle
#

Also, go to the link, copy the code, save the code as .sh

And run it whilst you're trying to connect.

grave raft
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

grave raft
weary spindle
grave raft
weary spindle
#

Are you running both scripts at the same time?

grave raft
weary spindle
grave raft
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

weary spindle
spark spoke
#

hi need some help

#

my room doesn't seem to be working

#

im connected to the vpn

#

and i've launched my room with the ip but i cant ping ping the room's ip