site-support

[unreal oracle]

there has been a spinning green icon in the upper right for about a mminute...

[exotic dove]

have you ever downloaded that certificate before?

[unreal oracle]

ive never downloaded any certs that i remember

[exotic dove]

Alright then, as SpeedyGX just confirmed above that old (already) generated certs are good to be download but certs that need to be generated are bugged, so that's probably why your certs are not being able to generate as that generate process is bugged

[unreal oracle]

ok

[fierce bluff]

Okay, thank you for information 🙂

[scenic torrent]

Gave +1 Rep to @exotic dove

[exotic dove]

Hopefully very soon they will be able to fix it

[exotic dove]

You're welcome :)

[unreal oracle]

ok thanks again

[exotic dove]

You're welcome :)

[storm sun]

Im trying to do the tutorial but it says i have to subscribe to use the attackbox for more than an hour, i am 100% certain though, that i have not used it for an hour yet. I have started it 2 times to try and do a room but i had no clue how to connect, (going on firefox to that ip did nothing) and after that it said i couldnt start the box

[cyan pike]

So I'm working through the 'auth bypass' section and suddenly all the URLs for the Acme IT Support Website were updated to show: http://MACHINE_IP/customers/signup as opposed to actually having the target IP in the URL. I searched around to see what I should swap that out with, but I've had no luck. Any thoughts?

[cyan pike]

It isn't clear whether your first hour is the only full hour you get or not. Generally though, it is a paid service. I found the $90 to be well worth it.

[storm sun]

huh

[dense bramble]

Best to spin up your own virtual machine and connect with OpenVPN, no time limits there

[storm sun]

oh

ye i have a VM but idk how the openvpn thing works but ill look into it

[dense bramble]

!vpn

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[dense bramble]

This room should help

[outer violet]

Uh... idk if anyone wants to help but I am having some issues with my watch dogs: legion game

It randomly turns off and lags a lot

[dense bramble]

This channel is for technical issues with TryHackMe...

[outer violet]

Oh okay

[bronze vale]

Its not generally a paid service:)

[hard narwhal]

Hi guys, can some1 help me with VPN connection? i try all the writeups and i cant connect any EU server, i have openvpn 2.6.1 i change cipher to data-ciphers but it reurns[ If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.]

[winter solstice]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[winter solstice]

Try this script it resolves your issue

[hard narwhal]

I have it already it return[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? Y
[+] Connecting....
[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
-Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
-Switching servers, then regenerating your OpenVPN config
-Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting

The response change in each VPN server, for example this is from EU-VIP1 but in EU-Regular1 response to run sudo openvpn file.ovpn

[winter solstice]

Hmm. Did you tried switching servers?

[hard narwhal]

Yes, i try all servers on EU

[pastel tinsel]

may I ask where you're from mdkp?

[hard narwhal]

Regulars(1,2,3) and VIPs (1,2)

Spain

[pastel tinsel]

some countries are blocking openvpn

okay, then that's not the problem

[hard narwhal]

Som1 know were i can ask for get my mony back?

[pastel tinsel]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[hard narwhal]

Ty mate

[weary spindle]

Did you try running the config whilst trying to connect to the VPN?

[tiny charm]

Hi, I'm trying to download a certificate for one of the learning paths I completed. It is just spinning with "fetching certificate" when I try and download. It's been about an hour and i refreshed the page a couple times. Does it take a bit of time?

[weary spindle]

No, it's usually instant, do you have an ad blocker?

[tiny charm]

Yeah, just disabled it to try again, same issue. I did put in my real name to generate it when it originally popped up.

[weary spindle]

You can't generate a new certificate, if that's what your trying to do.

[tiny charm]

nah not new, when i clicked on it after finishing, it asked if i wanted to use my real name or profile id.. so i put my real name and filled out the box. then clicked generate.

[weary spindle]

Which path?

[tiny charm]

Comptia pentest+

[weary spindle]

That path has vulnersity in it, which is causing a bug at the moment.

Even though you have finished the room it's still coming incomplete on the path.

[tiny charm]

even though path progress says 100%? ok

[plush bay]

yeah probablyt

[weary spindle]

Open Application-based vulnerabilities

you should see vulnersity like this

[tiny charm]

Green Checkmarks on all of them listed.

can't paste here but there's a checkmark

[bronze vale]

It won't always show the checkmark, but if you can't download the certificate then it's the same bug:)

[tiny charm]

ok is there a fix or workaround I can do or just wait for your end

no rush btw.

was just curious

[plush bay]

probably the wait until fix is the only option currently

[tiny charm]

ok well thank you for the information. I'll check back every now and again to see if it's fixed.

[exotic dove]

You need to verify your account to paste images

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[subtle wadi]

I cant access the acme it webpage, im on authentication bypass and i get this everytime i try to enter the website on the machine

''hmm we are having trouble finding that website''

I cant even run the fuff command cause the website isn't available

[grand perch]

Did you create a host file entry?

If you're trying to reach it by name instead of IP that will be a requirement, I don't recall if this is one of the rooms where it outlines that you must use hosts file.

[subtle wadi]

A host file entry? Not sure, i just started the VM on tryhackme, then tried to enter that website through their VM

[grand perch]

Can you link me to the room, I'll have a look if this is one that recommends that. I know I did Acme IT recently, but I don't recall the specifics.

[subtle wadi]

here it is, https://tryhackme.com/room/authenticationbypass

[weary spindle]

Attackbox or vm?

[subtle wadi]

I used their attackbox

[grand perch]

Ah no, Acme is one that uses IP in the notes.

[subtle wadi]

How do i fix it? Im still a bit a bit lost at the moment

do i need to ssh?

[grand perch]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[grand perch]

If you want to show us a screenshot of what's happening you have to do the above.

That would help us to understand why you're getting a 404.
Make sure you're searching http:// instead of https:// etc.

Sometimes its just needing a second set of eyes.

[subtle wadi]

Will do it

[glad zinc]

Hello, I had a question about annual plans. If you subscribe with an annual plan now does the price increase effect the length of the plan anyway or are you only effected by price increase after year lapses.

[grand perch]

Oh just realized we're in techsupport lol @subtle wadi we should probably move over to room-help 😉

[subtle wadi]

my bad haha, will move over there

[naive dust]

Evening

I have this weird issue where the room Vulnversity won't be 100% complete, even when all tasked are completed and answered.

Anyone had similar issues?

[exotic dove]

#1092490706385383524

[naive dust]

Awesome, thanks!

[exotic dove]

You're welcome :)

[weary spindle]

@crystal marlin can sort you put buddy.

Out*

Not at all, I've pinged them, they'll be along, sooner or later.

[crystal marlin]

You can DM me

No, that's most likely your DMs are off 😄

[grand perch]

I'm kind of surprised none of the DM security messages in this chat have been pinned yet from people looking to verify.

[hybrid kettle]

I'm having a weird networking/routing problem with openvpn that I haven't had before. My vps is connected to THM with openvpn but I can't reach the box

My ip in the vpn is like 10.13.x.x. ping -I tun0 10.13.0.1 works but ping -I tun0 10.10.x.x (box ip) doesn't work

[dense bramble]

what room are you doing?

[hybrid kettle]

I'm trying the one called Fowsniff CTF. But yesterday I had a similar problem and was able to resolve it (I was doing Attacktive Directory). What happened then was evil-winrm couldn't reach the box because it wasn't using the tun0 interface created by openvpn, but sudo ip route add <box ip> via <my vpn ip> dev tun0 fixed it

And ping -I tun0 <box ip> did work, but today it doesn't which is confusing. I've also rebooted since

[dense bramble]

I'm just asking because if it's a Windows box, which it seems to be, it doesn't respond to ping by default

[hybrid kettle]

Oh shit

lol

It must have been luck that the Attacktive Directory box did respond to pings

[dense bramble]

strange that it did honestly, but as long as it works, you should be able to scan the box just fine with the -Pn option

[hybrid kettle]

alright I'm able to reach it now. Not responding to pings was throwing me off but I also had to use ip route add again. I was trying ip route add 10.10.0.0/16 ... dev tun0 instead of just the box ip figuring it should work the same but apparently not

[spare topaz]

did. resolved. thanks !

[scenic torrent]

Gave +1 Rep to @winter solstice

[grand perch]

So you're aware, there are a TON of network appliances that also ignore ICMP Echo (ping) by default. Lots of opportunity to have it either dropped/blocked/filtered.

Ping, from a networking perspective, is a terrible way to know if something is connected or not 🙂

[glad zinc]

Does the price increase deprecate the value of an annual subscription bought before price increase. Are we buying time like 12 months access with an annual subscription or did we just buy a prepaid gift card and after October more fee will be deducted from your account. What is the change that takes affect in October?

Existing subscribers

To thank you for your loyalty as a TryHackMe subscriber, your subscription price will remain the same until the 1st of October, 2023 after which your subscription price will increase to £12 / $14 per month). For annual users, this will increase from £72 / $96 to £108 / $126 (£6 / $8 to £9 / $10.50 per month), and this change will not affect you until October.

[dim wigeon]

Hi people. The room https://tryhackme.com/room/vulnversity be present a problem for me.
Same the end this room, stay with status not completed.
There is any possibility of the room to be with bug?

[ivory spruce]

It is a #1092490706385383524 and this is already being looked into by THM Staff.

What do you mean deprecate? The price increase is supposed to take effect this May 7th, but if you have an existing annual subscription that will expire beyond the said date, they will let you keep the subscription at the rate before the price increase takes effect until October 1st.

I think the question should be coming from those that have an annual subscription that will expire beyond October 1st (e.g., those thay took the AOC promo last December, etc.), how will they be charged? Will it be a separate billing?

[dense bramble]

As far as I've understood from the chatter here, If it expires beyond October 1st, it will renew at the new price, if it expires before that, it will renew at the old price.

[dense bramble]

plus there won't be any extra charges if you have an active annual subscription when October comes

[ivory spruce]

Does this mean there will be additional charges for the months of October and November? How will that be reflected?

[dense bramble]

not if you have an active annual subscription

If you have a monthly subscription, you would simply be charged at the new price whenever it renews in October. If you have an annual subscription and it renews in let's say November, it just renews at the new price, that's all.

[ivory spruce]

Got it. Thanks!

[half coral]

Hi, any idea when the Disable 2FA bug will be fixed, I didn’t complete set up on my app so dont have the account link, but my THM account says that 2FA is enabled. I want to disable and re-enable again to have the account added to my auth app.

[wise wave]

Hey! I have completed my Vulnversity room and the whole path of CompTia Pentest+ and still I am seeing that Vulnversity is incompleted. I have tried to reset my progress twice to complete the room but still it's showing the same thing. I can't download my certificate due to that. Can anyone please help me?

[half coral]

I am having this issues as well.

[wise wave]

So it's a general bug i guess

[zealous yoke]

Hi there 👋 yup we're aware of this bug and are working on a fix #1092490706385383524 message

@wise wave @half coral ^^

[wise wave]

Okay! No worries! Will wait for that 😁

[spare grotto]

hi

i have this issue when i try to subscribe monthly premium, Note that the card is effective and works in other sites:
Your card issuer bank has declined this payment.Please contact your bank for support.

[weary spindle]

I mean, that's pretty specific...

[weary spindle]

Contact you banks please. 🙂

[naive dust]

hi, can someone help me with creating workspaces in tryhackme?? ty

[weary spindle]

What do you need help with?

[dim wigeon]

I don't permission to report bug

[weary spindle]

Only mod/staff can write in that channel, they're letting you know it's already there.

[jagged cape]

👋

I'm a student who is keen on enrolling in the Attacking and Defending AWS course. However, it appears that this path is currently only available to businesses. Are there any plans to make it accessible to the general public?

Let me know if this isn't the right channel.

Thanks.

[weary spindle]

https://resources.tryhackme.com/attacking-and-defending-aws

[jagged cape]

Yeah, I was redirected to that page too. I guess for individuals like myself, all we need is to submit our information.

[weary spindle]

Look at the very bottom

Can I access this an as individual?

[jagged cape]

👍

[weary spindle]

I'd imagine if they do release it to the general public, it would be like Throwback, and would require a separate subscription/payment to enter the path.

[jagged cape]

Yeah 😦

oh well...thanks man!

[ember fractal]

Hello, I have this problem with the Vulnversity room, where it says I have it 95% complete, but when I open it, it says it is 100% complete. I know I can just reset the progress and do it again, but I'd like to first try a less drastic measure.

[weary spindle]

This is a known issue, #1092490706385383524

[half coral]

Thank you!

[scenic torrent]

Gave +1 Rep to @zealous yoke

[polar bay]

I accidently pressed generate with real name on certificate is there a way to change it to my username?

beside photoshop lmao

[dense bramble]

no, once a certificate is generated, that's it, photoshop would really be your only option

[polar bay]

okay cool

[plush bay]

yeah there is gimp..... or ink scape if you change it to a svg

[trim pawn]

uh.. is the Vulnversity room bugged? I just finished it while doing the CompTIA Pentest+ learning path but it's not marking it as completed; I tried resetting the room already

[woven totem]

Hi All, is anyone else getting a payment issue when adding a subscription? I'm getting a message to contact my bank/CC but when I do they mention that there is no charge there for them to approve/let through? (Trying to make sure that I'm subscribed before the pricing update--and excited to unlock all the paid rooms! 🙂 )

[weary spindle]

Which country are you in?

[woven totem]

USA

[weary spindle]

Yes, this is a #1092490706385383524 to the team, and they're working on it.

[trim pawn]

Thank youuu~

[scenic torrent]

Gave +1 Rep to @weary spindle

[prime oar]

im struggling with the last q on the flag.txt

does anyone know where to go for this?

[magic river]

Also getting the exact same message 😅

[weary spindle]

Which room?

[spare grotto]

how to disconnect from tryhackme openvpn

[plush bay]

on linux either hit ctrl + C in the terminal window where openvpn is running
or sudo killall openvpn

[spare grotto]

thanks

[plush bay]

no problem

[stiff nimbus]

man just as with the 5/4 problem i am currently doing work its before 7pm my time and the work I am doing is not tracking on my activity window dont get why this keeps happening .. very strange

and while doing the work right now i get an email to return and not lose my streak.. i dont get whats going on

[thorny stream]

Me too. Drives me nuts.... hours of wasted time.

[coral hinge]

#site-support 2FA is not disabled... How can I disabled this feature ..... When I click on the disabled but it's not responding.

[dense bramble]

It's a bug unfortunately, but staff is aware and working on it #1092490706385383524

[coral hinge]

@dense bramble please do something asap ...

[dense bramble]

I'm not staff, they're working on it

[obsidian steeple]

my old account that was connected to this discord is no longer the one I utilize on THM. I even went as far as deleting it, but I cannot link my new account to my discord with the verify bot. Any chance someone can clear my token from my old account so i can verify the new?

[mossy prairie]

Hi its there any other there getting 404 on "https://tryhackme.com/my-machine"
?

[reef geyser]

Hello please I need a little help I just started my cyber security journey and I'm having a challenge with offensive security
What do you need to access a web application?

[jovial sparrow]

Hi, if I want to stop subscription for the next month do I 'cancel subscription' this month or the next?
I mean, if I cancel it rn, would it immediately stop the subscription and refund or will it change from next month?

[glad oyster]

Yup, this doesn't exist any more

[glad oyster]

Think about what software your using to access tryhackme

[mossy prairie]

its there a new link ?

[glad oyster]

If you cancel it right now you will continue to be subscribed unt the end of the month

[glad oyster]

Not sure

[mossy prairie]

https://tryhackme.com/room/kali
this room using the link 🙂

[glad oyster]

Yeah not sure why it hasn't been updated yet, I reported it weeks ago

[mossy prairie]

okay 🙂 we will see then 🙂

[quartz ridge]

Hi, I'm not able to get onto a linux machine. It just loads forever...

[quaint flare]

In Vulniversity, I am missing 5%, but I have completed the room. Every answer is correct. Because of this, my pentest+ learning path is 99%complete, when I have completed it

[pastel tinsel]

#1092490706385383524

[spare grotto]

hi

[exotic dove]

Hello :) how can we help you?

[quartz ridge]

I have problems with the machines. They load but do not get over 83%

[exotic dove]

what machine is specific? what browser are you using?

[quartz ridge]

I tried different machines, all of them do not load. I use firefox

[ivory spruce]

Are you referring to the Attackbox?

[quartz ridge]

idk what i did but it works now

[livid zenith]

Is there anyone who has had issues with macOS OpenVPN Client? It says I am connected, even THM recognizes me as connected, however, I still can not reach any machines.
Even ping times out.
Using OpenVPN Connect | Version 3.4.2 (4547)

Server: EU Regular 2 (same thing is happening with 1)
Logs are empty in the OpenVPN Connect Client

[elfin hamlet]

Does anyone have problems with not getting reverse shells with openvpn? I get them in attackbox, and can ping and connect to the target, but for all machines lately I am not able to get reverse shells in my own virtual machines. Just tried like 4-5 rooms where it is just uploading a reverse shell to the server or just eternalblue, but it wont' get me a shell

[bronze vale]

Use the terminal, not the GUI

[livid zenith]

Guessing the client from homebrew? Since the OpenVPN Connect application doesn't come with a CLI tool to connect like the usual openvpn linux application.

[bronze vale]

Yes

[livid zenith]

dang, it works, thanks!

[scenic torrent]

Gave +1 Rep to @bronze vale

[magic cobalt]

hello I have an issue with the path " comptia pentest+"

it says that it is not finished but it is

[dense bramble]

It's a bug, they're working on it #1092490706385383524

[magic cobalt]

thank you 🙂

[dense bramble]

You're welcome 🙂

[nova whale]

Bit old news, but streaks seem to be based on UTC, not local TZ (from peeking at the JS that drives the streak-counter in the header).
I've seen a situation where the counter on /dashboard (based on local TZ) reports a day with 0 answers (and >1 the following day), without losing my streak (pre-freeze-feature, of course).

[exotic dove]

Oh yes, I have discovered something related but from visuals not code
see my message here #site-bugs message
It's annoying tbh

[mild thorn]

I can't download my vpn file

It redirects do https://tryhackme.com/404

[exotic dove]

what server location are you using?

[mild thorn]

I'm downloading from the access machines button

europe 2

[exotic dove]

did you try any other server?

[mild thorn]

ok just switching and putting it back worked

sorry

[exotic dove]

You're welcome :)

[broken torrent]

hello i have a problem

[tribal burrow]

what is it ?

[broken torrent]

hello, I've been working on CompTIA PenTest+ together for a long time and I finally finished it, but when we want to get the certificate it gets stuck at 99%. And when making the vulnerability module, the ip address of the machine was not directed to the site, so it remained only in that part, so the answers in the tutorial were uploaded.

that is, it shows the comptia certificate /99, when I look at the unfinished module, it shows 100/100.

what can we do about it

[tribal burrow]

it's a bug that thm is on fixing it

[broken torrent]

does everyone have this problem

will it be fixed soon

[tribal burrow]

some ppl do yes. idk when will be fixed. prob asap

[broken torrent]

thanks bro

[tribal burrow]

check the #1092490706385383524 might be there

[subtle pelican]

Just wondering how I can get my certificate for completing the offensive Pentesting learning path. Because I got 100% on it and it gives me the celebration when I click it but it says I don’t qualify or something when I try download it. Plz help

[ivory spruce]

It must be due to the issue in the Vulnversity room. This has been submitted in #1092490706385383524 and THM Staff is looking into it.

[naive dust]

I am new to this resource, I have a problem with payment. I have two working cards - Turkish and American, both do not work, maybe someone has a solution?

[exotic dove]

Did you contact you bank? maybe they have a reason for that. You can also try PayPal if that works for you

@naive dust

[naive dust]

strange that the payment does not work on this resource, maybe if the payment solution in another way?

[naive dust]

yes

[exotic dove]

did your bank tell you that the problem from the recipient?

[naive dust]

He said that they have no problems, and my card was not detected restrictions. they said to contact the support site where I try to buy

I can pay on other services and make transfers, but for some reason I can't pay on this service

[exotic dove]

Alright, sounds like more of a technical issue, you probably need to contact THM using their support email [e-mail]

[naive dust]

ok thx

[exotic dove]

You're welcome :)

[weary spindle]

They'll just be sent to their bank.

It's a bank issue.

[unkempt pecan]

Hello folks

[weary spindle]

Good afternoon.

This channel is more for THM related support.

Please use #cyber-and-careers

Or #general

[exotic dove]

My bad I sent them here, didn't know where else to go

[exotic dove]

good to know about this

[tough copper]

Hi. What should I do to be able to attach an image to a post?

[weary spindle]

Verify

!dovs verify

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weary spindle]

Use the above link. 🙂

[tough copper]

Thanks.

[fair patio]

http://10.10.90.230/playground.php?file=http://10.10.170.135:8000/cmd.txt does anyone know why im getting a syntax error from this?

[exotic dove]

send screenshot maybe

[exotic dove]

what's the payload?

also #room-help

[fair patio]

oh aorry ill go there

sorry*

[latent basin]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[fiery dragon]

I need help getting access to a business account that was recently purchased and setup. I have tried the chat box and email, no responses.

[weary spindle]

When did you E-mail?

[fiery dragon]

Earlier this morning.

We can log in, just still prompting to "purchase for business"

[weary spindle]

Please wait 3 days from Support to reply back, unless they're busy.

Somebody will E-mail you back.

That is the only advice I can give, unless support see this, and choose to answer.

[bronze vale]

Haven’t you been signed a customer success manager?

If you didn’t use self server, please contact the person you were in contact with when you made the purchase

[fiery dragon]

We have not, and we did use the self server.

[heavy basalt]

Hey, what is the default amount of ram that a tryhackme server gets? a vm

[weary spindle]

Virtual machine?

[heavy basalt]

Yes. 🙂

[weary spindle]

512mb for non subs.

1Gb for subs.

[heavy basalt]

Amazing 🙂 Thanks

[bright blade]

Hi

[weary spindle]

Hello.

[bright blade]

I can't remove my 2FA to renew it

I accidentally formatted my phone and lost all my data, including 2FA codes on google auth

[weary spindle]

This is a known issue to the team.

There is no fix right now.

[bright blade]

Okay. Thanks. Can you let me know when fix is out?

[weary spindle]

You can track known bugs and their fixes here.

#1092490706385383524

[bright blade]

Alright. Thanks

[polar bay]

Does anyknow why I get this error when connecting to the task6 day1 in advent of cyber 2019:

[weary spindle]

I think that task is broken, you'll need to skip it.

[polar bay]

Cool

[polar bay]

Do the others work?

[weary spindle]

Yes.

[polar bay]

I moved on to the next task; I am getting a timed out error

[weary spindle]

best thing you could do.

[polar bay]

Sorry for the confusion but I moved on to the next task and am now getting a timed out errorr

[marsh patrol]

I am trying to connect with OpenVPN (using Windows) to an attached VM. The access page shows that I'm connected, and I can ping it, but I can't open it in my browser. Is this possible to accomplish on Windows?

[weary spindle]

Is Windows your host?

[marsh patrol]

Yes.

[weary spindle]

I would suggest against that.

[marsh patrol]

Why?

[weary spindle]

Your exposing your host machine to the THM network.

It's a security threat.

[marsh patrol]

So then even if I use a VM, do I have to disable the shared clipboard and stuff like that?

[weary spindle]

No.

[lone quail]

Hey guys and girls!
Anyone got this error message in OVPN
I'm trying to add the "BreachingAD" VPN and fails with below error.
I have no issue connecting with the regular VPN connection
please reply or ping as I might not be on this screen

[dense bramble]

Try editing the file and changing dev breachad to dev tun

[lone quail]

Its fixed Thxx

Thx @dense bramble

[scenic torrent]

Gave +1 Rep to @dense bramble

[dense bramble]

You're welcome 🙂

[gentle token]

Is there anyone I can speak with, regarding some vouchers?

[ivory spruce]

Have you tried http instead of https? I completed this a week or so ago and was able to make it work.

[placid portal]

Is there a way to get the .pcap files from the vm on wireshark: traffic analysis room (without spending 3 hours doctoring something)

the vm does not have web access in certain cases, and I want to get the pcap locally

[maiden condor]

Hello

I Have No Complete Beginner Room

Help Me

[weary spindle]

I'm not staff, but I may be able to answer

[ivory spruce]

You can use wget (setup a python webserver in the target and wget from local), nc or ssh (if you have ssh credentials)

[placid portal]

no module installed

for python 3 httpwebserver

ssh pubkey denied

this is actually super annoying, why don't they just allow u to download the .pcap from the task

ill try nc

sry that python module is present, i made a typo

trying it

[ivory spruce]

Have you checked SimpleHTTPServer in python 2?

[placid portal]

yeah it's working, i made a typo, thanks!

[scenic torrent]

Gave +1 Rep to @ivory spruce

[lavish jay]

hey all, I am struggling to install netcat on my LINUX VM i keep getting "E: package "netcat" has no installation candidate" Ive been smacking my head on google and all i can find is for UBUNTU or they want me to edit my sources list which i did and i still get the error. Weirdly though on my root it is there, will i can type nc -lvpn (port) it doesnt do anything and is in limbo

any help to get it to work for the Relevant room?

[ivory spruce]

What is your exact command when installing netcat? Also, when you setup a listener, the port number should come right after the p flag.. like nc -lvnp (port)..

[lavish jay]

so i have my root user and then my name when i do my name it is sudo apt install netcat

wjen i am in root its is just apt install netcat

[ivory spruce]

Have you tried nc?

sudo apt install nc

[lavish jay]

yeah i still get "E: package "netcat" has no installation candidate

but i can use NC commands they jsut dont do anything

im trying to listen on port 1234 for my reverse shell

[ivory spruce]

Though nc usually comes pre-installed in most distros

[lavish jay]

so i type nc -lvnp 1234 and it jsut goes to a command line with nothing i have to ctrl c out of it

[ivory spruce]

Have you tried sudo apt update?

[lavish jay]

yeah i have buit it doesnt fix the error

[ivory spruce]

Have you checked that your reverse shell is working fine?

[lavish jay]

i wish i could show a photo of what i am encountering

it seems written up properly

[ivory spruce]

You could, but you need to verify first

[lavish jay]

how can i test if i cant actually listen tot eh port thn

[ivory spruce]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[ivory spruce]

After verifying your account, you would be able to post a screenshot here

[lavish jay]

that is all i get

it shoudl say listening or something like that

ive been strugglign witht his room and literally following someone word for word till i got into this netcat issue

[ivory spruce]

Have you tried adding the -v flag?

[ivory spruce]

It seems that nc is installed on your machine, otherwise, you will be prompted or asked if you want to have it installed.

[lavish jay]

i deleted the VM and gonna create a new one and try the room again and see what happens

[untold fulcrum]

So...I might've corrupted my Kali VM 😅

Earlier today, to start with the Odin Project, I setup a normal Ubuntu VM for using with that and it worked fine.

Just now, I started up the save state of my Kali VM to continue with TryHackMe, but it completely froze as I tried to install Google Chrome from the command line. Sending the shutdown signal wasn't working, so I pressed the option to completely power it off.

Now it's only booting to this screen.

[broken bear]

Looks like something corrupted the boot loader. Please use #infosec-general for convenience, as this channel is more for VPN related problems.

[rapid sage]

do THM openvpn certificates from /access page expire if I download a new one or do old ones work after downloading new one?

since it seems like in the access page I'm connected but when I start the machine from https://tryhackme.com/room/openvpn I can't access the page

[weary spindle]

Haven't tried to access from an old one.

I usually delete then regen

[rapid sage]

I tried with a new one as well, same problem occurred

[weary spindle]

Which error do you get?

[rapid sage]

just this

[weary spindle]

Are you sure there is a webserver at the ip?

What about the vpn configuration output?

[rapid sage]

I'm pretty sure, (I had once completed the room alrd but trying to see if I have all working, hence I'm doing it again)

[rapid sage]

config output?

[weary spindle]

When you connected to the vpn on the CLI.

[rapid sage]

What should I be looking for in there?

Hmmm, something like this? ```
2023-05-09 03:30:42 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2023-05-09 03:30:42 ERROR: Failed to apply push options

[rapid sage]

yep... that had something to do with it and is now fixed! Thank you 😄

[tribal dragon]

Is there any way to contact THM regarding my streak rather than the Reset Streak option in the website?

My initial request got answered late so I’m now 10 days behind on my streak, which doesn’t seem to be getting sorted as it’s a continuous knock on effect of my requests regarding the same issue putting my streak further behind what it should be.

[crisp orbit]

Hello together,

Cannot connect to the VPN servers using OpenVPN. I've tried every solution that I found starting from the script in GitHub (thm-troubleshooting) to changing cipher AES-256-CBC line in your .ovpn config with data-ciphers AES-256-CBC and etc.

[weary spindle]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[weary spindle]

IIRC, support no longer add on the streak you obtain whilst you're waiting for the streak to be reset, I could be wrong, but I'm sure I seen that said.

[crisp orbit]

I've tried already this script, but without success

[weary spindle]

Have you tried to regen it again?

[crisp orbit]

Yep. Tried to regen and different servers as well

[ivory spruce]

What is the error you are having?

[weary spindle]

You might need to do the change manually.

nano filename.ovpn

Then change cipher to data-ciphers

[crisp orbit]

I guess the same as most of us. The "cipher" error

[crisp orbit]

It is already correct in the config file

[crisp orbit]

It is data-ciphers

[tribal dragon]

Ah really? I won’t bother trying to maintain a streak anymore then, as I seemed to have missed a day by doing some at 0600 then another the next day at 0900 so it reset my streak, due to the 24hr being based around when you last did it (I think that’s how it works).

[weary spindle]

Can you verify and take a screenshot please.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weak flower]

someone is having some problem connecting in openvpn?

I have openvpn version 2.6.1

[bronze vale]

There isn’t an error

[weak flower]

is only warnings right? but i can't connect either

[bronze vale]

It can’t connect to the server, that’s a different issue

[pastel tinsel]

try and regen your vpn file, it says your "certificate are not yet valid"

[weak flower]

ohh i see

[spare laurel]

!openvpn

hold on

[pastel tinsel]

the script won't help

[spare laurel]

oh

[bronze vale]

Does this occur often?

[weak flower]

I already do that

[pastel tinsel]

it have occured after the updates of the servers

[bronze vale]

Weird

[pastel tinsel]

change to a different server and try again

[weak flower]

same ahah

but i'll try again

[crisp orbit]

I've got the same issue

[bronze vale]

Speaking to the devs

Can someone dm me their OpenVPN file please

[pastel tinsel]

what vpn server are you trying to connect to?

[crisp orbit]

EU-VIP-2

[crisp orbit]

I will send you

[weak flower]

i tried eu-regular-1 eu-vip-1 and eu-vip-2

[weak flower]

sent

[crisp orbit]

I've tried most of the servers. Always the same error

[weak flower]

yep

at first i update openvpn and yet nothing, then the file and changing servers don't change nothing to me

[bronze vale]

cc @weak flower @crisp orbit @exotic dove
Have messaged the devs, I've tried your configs and they do work on my end, but I'm still going to enquire.

Make sure your system time is correctly set too (including daylight savings if that is an option).

[exotic dove]

Oh I messaged you my vpn for testing, it's working for me already :D

@rotund sluice The new room link is not working #retired-rooms message

[rotund sluice]

Lemme take a look

Fixed, we changed the link to a prettier one 🙂

Thanks for reporting!

[exotic dove]

Glad to help :)

[icy hamlet]

Is there a disconnect timeout for the machine connections, I would think there would be! But the timeout is very quick. By the time am back from reading the stuff its already out.

[exotic dove]

which machines? AttackBox you mean?

or like SSH service on room machines

[icy hamlet]

The attackbox

[exotic dove]

I don't think they have a connection timeout

they stay for like 1 hour

then you can extend or terminate

see https://help.tryhackme.com/en/articles/6721845-the-attackbox-explained for more info if you like

[icy hamlet]

It previously used to be in minutes or so, now its down to seconds

[icy hamlet]

Will look at this, thnx

[exotic dove]

They might be laggy if that's what you mean, but I don't recall they have a connection timeout but they have an expiration time (~2h)

You're welcome :)

[glad zinc]

I am also having issues connecting to VPN. Both US east and VIP West. Refreshed my files and everything.

[exotic dove]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[exotic dove]

try this script

[tender hamlet]

My Nessus login won't open when I go to https://localhost:8834/#/scans/folders/my-scans . It keeps saying unable to connect not matter what I try. What am I doing wrong?

[dense bramble]

did you start the nessus service first?

[tender hamlet]

Okay, Im going to show I'm a newb. How do you do that?

[dense bramble]

no worries, we've all been newbs - you can start it with this command sudo /bin/systemctl start nessusd.service

[tender hamlet]

So you have to start the service in a terminal before you try to navigate to the url. Correct?

[dense bramble]

yes, you can stop it after by just changing start to stop in the command

[tender hamlet]

I new it would be something easy but I just didn't know what. Thank you for your help!!

[dense bramble]

you're welcome 🙂

[exotic dove]

+rep @dense bramble you deserve it :)

[scenic torrent]

Gave +1 Rep to @dense bramble

[dense bramble]

aww, that's nice 😊

[exotic dove]

[broken torrent]

Even though I have completed the vulnersity section, it shows as incomplete for you too?

[dense bramble]

It's a known bug, they're working on it #1092490706385383524

[devout trail]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[naive dust]

200 EPRT command successful. Consider using EPSV.
550 Failed to open file.

any help?

[weary spindle]

More information required?

[winter solstice]

FTP?

[real verge]

I’m having issues with my connecting, can’t connect any box via ssh, or transfer file by any means. I have tried diff file transfers approach but none work. I have also changed diff vpn zones still same issues. Please I need help

I moved to the AD Wreath network, still having same issues can’t transfer tool to the victim’s machine please help

[bronze vale]

Card declined or unable to make payments?
Please email [e-mail] and provide the last4 digits on your card, date that you tried to make a payment (DD/MM/YYYY) and full name that is on the card:)

[naive dust]

hi i'm having trouble to keep reaching the target machine or enumerating anything on it because it is super slow, wether i am on my kali with openVPN or on the attackbox. How can i fix it (if the issue is coming from me)?

[heavy basalt]

Hello, I am curently stuck on [attachment]. Reset Upload seems to be doing nothing. Any suggestions?

[weary spindle]

Can you try using a different VPN server?

[pastel tinsel]

ctrl + f5

it's a refresh bug

[heavy basalt]

:/ Doesn't work. Even when creating private window and logging in there the issue still persists.

[pastel tinsel]

hmmmmmm

[glad oyster]

What are you uploading?

[heavy basalt]

A VM.

[glad oyster]

How big?

[heavy basalt]

4 gb

But I canceled it like 1 hour ago.

[glad oyster]

cc @zealous yoke

[heavy basalt]

Aha wiping all tryhackme data and then clicking the button did the job.

[tropic gale]

Hello guys

can someone help me ?

https://tryhackme.com/forum/thread/6457e4c6922351024e6444d0

[plush bay]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[plush bay]

@tropic gale ⬆️ start by running that script to check for common problems

[tropic gale]

already did

[plush bay]

sounds like it could be the MTU messing it up

[tropic gale]

(and added it to PATH 😂 )

[tropic gale]

whut is dis ?

[plush bay]

max transfer unit

[tropic gale]

mmm

how to change it ?

[plush bay]

see this message in this channel: #site-support message

[tropic gale]

Still not working :[

[plush bay]

welp then the issue is somewhere else

do you have multiple vpns running????

[tropic gale]

nope

[plush bay]

if you run ip address show there is only 1 tun device right???

[tropic gale]

yea

[plush bay]

well blame your internet connection or isp maybe

[tropic gale]

oki :\

[spare laurel]

wait what's the prob

[spare laurel]

Are u Using ur TryHackMe IP or Public IP?

[faint sequoia]

think you have to run the script in the same directory where you vpn file is

[spare laurel]

yes true

[tropic gale]

did it bro

[tropic gale]

Thm IP

[spare laurel]

so what is the error when u do wget ?

[fickle rivet]

I need help with billing. I purchased a year subscription in November but it is set to renew this month? That doesn't seem correct to me.

[dense bramble]

You would have to email support for that

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[exotic dove]

@zinc wharf

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[tropic gale]

just "Not found"

i fixed that with the port number

switched from 7777 to 80 and it worked perfectly 👌

firewall ?

bruh

[spare laurel]

It depends on what ur trying to do

[tropic gale]

dl pretty big exploit

[spare laurel]

if hosting a Web Server on Http port and service is expecting to connect to the default 80 for http then that's why

[tropic gale]

but if I do 00.000.00.0:port it shoud dono problem nah ?

[broken torrent]

OMG bro

[tropic gale]

What ?

OMG what ?

😂

[broken torrent]

I can't get more than 5

guess what country i live in

[tropic gale]

bro

fr ?

[broken torrent]

DOWNLOAD Mbps
3.69
Ping 92 ms

No turkey 😅

[tropic gale]

bruuuhh

[tropic gale]

fr = for real ?

but oklm

[broken torrent]

Don t understand

We are racing with mbps Zimbabwe bro

[tropic gale]

no problem

[tropic gale]

what is this ?

[broken torrent]

Our internet speed is at the same speed as African countries.

..

[real verge]

I’m having issues transferring file to my target machine. I can ping and get rev shell on the target but can’t ssh or transfer file to it. Please help

Screenshots:

https://ibb.co/yfvG46X

I attached screenshot of the THM-troubleshooting

[ocean maple]

I have completed the Vulnversity room but it still shows as incomplete, it also means I can't claim my certificate.

[chilly pike]

its a known bug, THM is aware

#1092490706385383524 message

[tepid drum]

Trying to work through Protocols & Servers 2 and it seems like whenever I try and SSH anything I just start getting 2023-05-10 03:05:29 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101) in my Open VPN terminal

Just lines and lines of that

[weary spindle]

Vm?

[tepid drum]

Yeah, just a kali in Oracle virtualbox

[weary spindle]

Does it have an Internet connection?

[tepid drum]

Could connect to youtube in my VM

[tepid drum]

Access says I'm connected

Can connect to Bastion through another room

[tepid drum]

Seems like my VM just doesn't like SSH

[weary spindle]

ip a s

How many tun* do you have?

[real verge]

Please I need help !

[broken torrent]

İ have that same problem

[exotic dove]

try this command sudo ip link set dev tun0 mtu 1200 then try ssh again

[exotic dove]

They're working on it :) #1092490706385383524

[exotic dove]

you can also verify to send screenshots directly

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[real verge]

Hello @exotic dove thanks for the reply, ssh is not the only problem I’m facing. The troubleshooting script indicates that I have a connection problem. Please look at pic link I posted as I can’t share image here (don’t know why the add button is inactive).

[scenic torrent]

Gave +1 Rep to @exotic dove

[real verge]

[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

I get this from the troubleshooting script

[exotic dove]

The script might have failed due to MTU check, try to run the script after setting the MTU manually above, see if that fixes the issue

also see #site-support message for image attachment

[real verge]

I did ran it again after setting what you asked me to do

[exotic dove]

okay, does it fix the ssh though? regardless of the script error

another solution would be to try this command sudo ip link set dev tun0 mtu 1200 and see if the vpn works

[pastel tinsel]

the script sometimes fails regarding to this, you'll have to manually set the mtu to something around 1200 and it'll usually fix the problem, use the command as Ayham just sent, while your VPN is running

if this doesn't work, then please provide a screenshot of running the vpn normally without the troubleshooting script so we can see what errors the script might give you

[real verge]

I’m on it I will keep you guys updated. Thanks

@pastel tinsel @exotic dove the transfers are going now. Thanks guys

[scenic torrent]

Gave +1 Rep to @pastel tinsel

[pastel tinsel]

+rep @exotic dove

[scenic torrent]

Gave +1 Rep to @exotic dove

[exotic dove]

Glad to help :)

[exotic dove]

oh thank you

[scenic torrent]

Gave +1 Rep to @pastel tinsel

[exotic dove]

that's rep spam haha

[solar finch]

Aye I completed the Web Fundamentals path about a week ago. I have the cert to prove it. However it looks like the OWASP Top 10 room got completely replaced and now my Web Fundamentals path is shown as incomplete. Is there any permanent achievement for Web Fundamentals that remains online?

[naive dust]

I did but it seems to work better the first minutes then about 20min later it is the same I can't reach the target IP (can't even ping it).
I run the troubleshootting script everything is ok on this side

[weary spindle]

It was replaced with newer content.

[polar iris]

Hello, I am having a hard time getting any real response to my refund tickets. I purchased a month of VIP on the 1st, thinking that it would give me access to the AWS content, only to find out that the VIP tier alone does not get me access. I'm fine with that, but I don't think it's a stretch to ask for a refund, especially since I haven't used the subscription for anything else since I bought it.

I opened a ticket back on the 1st, but it was closed on the 3rd with a response stating what I already know. I've got another one open, but after it said they should get back to me in an hour, now it says they won't be back until tomorrow. I would appreciate any help I can get.

[meager harness]

Hi, idk if its a good channel but please dont ban me XD
So i want to install a crack software but i dont want to harm my pc so i want to install it on a virtualbox windows 10. Is it possible that viruses will infect my main OS? I would like to add that I want to use internet on my virtual machine.

[weary spindle]

@broken bear

[weary spindle]

Support will get in contact when they do, its usually 3 days.

[polar iris]

That would work, if they wait sufficiently for me to respond and not just close it out with an "answer". I will wait again, 10 bucks anyway not really a big deal, just the principle of it.

If anyone who manages the web UI sees this, I would recommend making it VERY clear that the AWS rooms require a business subscription. The info is there but it's not in any way obvious until you try to click into one of the rooms

[broken bear]

I strongly recommend you don't pirate software, as cracked software often contains hidden malicious files

and it's theft

[meager harness]

oh so i will try to find something similar but legal

[broken bear]

Buying the software usually works well.

[lavish cloud]

Anyone know default password of Attackbox ?

[meager harness]

Yes i know but i think that 299$ for topaz video enhancer is a little bit too much

[broken bear]

well, if you don't pay for it, it's theft. There is no "similar to cracked software but legal"

[glad oyster]

Seems pretty clear to me

[polar iris]

Like I said, it's there but it's one of the last sentences in the text. That needs to be stated up front or highlighted, bold or something.

[glad oyster]

Why? Its in the prerequisites which you should read anyway

#feedback-and-ideas you can ask here though, direct feedback

[polar iris]

I'm sorry, I don't always read every line of everything, my own shortcoming I guess. I should at least be able to get a refund for a mistake, if not no big deal.

[glad oyster]

Sure, you should be able to get a refund

[weary spindle]

Tbf.

It's in the prerequisites section

[honest socket]

Trying to access https://LAB_WEB_URL.p.thmlabs.com in THM vm but keep getting 504 Gateway Timeout

Any ideas?

[bronze vale]

You haven’t pressed “start machine”

[honest socket]

I have. Still doesn't work. Was at my uni library and it was working perfectly yesterday. Try today at home and it's not working.

[bronze vale]

LAB_WEB_URL will be replaced with the IP address of the machine when it’s started

[honest socket]

Seen a post saying to replace LAB_WEB_URL with machine ip. Tried this, and still get 504 Gateway Time-out.

[bronze vale]

Send the IP address?

[honest socket]

I ended up just using my local vm instead

Thanks

[bronze vale]

I'm confused

Task machines are for completing tasks to get the answers:) How are you going to complete the room?

[honest socket]

Going to use openvpn on my kali vm

[trim pawn]

Ngl this question bugs me. RPC is the authentication model, the protocol its actually using to communicate is TCP or UDP, or am I mistaken in the terminology?

[weary spindle]

Remote Procedure Calls is used to communicate.

IIRC because the client and server could be two completely different systems, and they could represent data in different ways

[glad oyster]

There are many different networking protocols, RPC is one of them

[trim pawn]

Bingo, I misread the documentation, my bad lmao

[glad oyster]

It runs on top of TCP

[trim pawn]

TCP/UDP is only used for the inital connection

[glad oyster]

https://www.ibm.com/docs/en/aix/7.1?topic=concepts-remote-procedure-call

RPC presumes the existence of a low-level transport protocol, such as Transmission Control Protocol/Internet Protocol (TCP/IP) or User Datagram Protocol (UDP), for carrying the message data between communicating programs.

Encapsulation

[trim pawn]

It's finally clicking in my brain but if you don't mind me asking for clarification, when referring to sever-client models we are automatically assuming its in the session layer, right

[broken torrent]

What was the command that showed in which formats the payload can be output

[kindred violet]

Hi Team,

I'm having issues fetching my certificates. Can anyone help me?

[ivory spruce]

Does this certificate include Vulnersity in it?

[hushed pivot]

Hi, I wanted to add a friend but it says friends list is in maximum. will this be updated soon or I need to remove?

[crimson wedge]

Hello, https://tryhackme.com/room/opencti when starting the webserver machine the port 8080 is not open.

[sinful warren]

have a question. when using the VR machines they are very slow and delayed. is there something simple im missing to fix this? thank you very much

[coral crow]

the virtual machines are slower on some specific things but shouldn’t be extremely slow, it’s is causing a big trouble on the site then I’d suggest using your own virtual machine, if you’re saying you already have your own virtual machine then perhaps try the one on the site for tryhackme related tasks Incase your computer simply cannot handle running a VM

I’d personally suggest just getting an old laptop and installing kali or parrot on it

[sinful warren]

Ok. It's super slow. Like click or press a key then it reacts after 3-4 seconds. I can try to set up a vm on my pc. Just wish I knew why the vm on the site was so painfully slow. Thanks!

[naive dust]

anyone to help with this issue in the support team ?

[coral crow]

connection related most likely, I haven’t had buttons be slow but all nmap scans are extremely long on the sites VM as to compared to my VM

[naive dust]

hi

[pastel tinsel]

Hello, are you using VPN or attackbox?

[naive dust]

vpn

[pastel tinsel]

can you verify your profile and send a screenshot of when you connect to the VPN

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[naive dust]

here it is @pastel tinsel

[pastel tinsel]

What about your VPN?

[naive dust]

I am also connected to vpn

??

[pastel tinsel]

can you show that?

[mild rampart]

Hi there 👋
I have a little problem on my dashboard.
The vulnversity room appear as not finished but she’s completed.
Is there anything to do?
Thanks 🙏

[pastel tinsel]

#1092490706385383524

[trim stream]

hi everyone! I am new here and I need help with OpenVpn, it does not work. I tried a lot of things and spent tons of time. Please help ❤️

[weak flower]

I think that's general, because I've got the same problem and other people report that too

[exotic dove]

@trim stream @weak flower Have you tried the vpn troubleshooting script?

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[weak flower]

yes and still nothing

even in windows does the same

[exotic dove]

does it not give you an IP on THM or does the vpn give an error in terminal?

Also can you try another VPN server
try to reconnect to your router and run the vpn again
does the vpn troubleshoot script give any error?

[weak flower]

already did with vip and normal servers

in windows does the same like @trim stream show later and never can connect

but yesterday they said my configuration file worked in their machine

[exotic dove]

try this command openvpn --mktun --dev tun0

the script says tun0 doesn't exist which might be openvpn service not working properly

[exotic dove]

try with sudo

[weak flower]

oh i forgot that haha

[exotic dove]

It happens ;) let's hope it works tho

[weak flower]

now tun0 exists but failed in mtu

[exotic dove]

alright try sudo ip link set dev tun0 mtu 1500

then rerun script
if doesn't work try sudo ip link set dev tun0 mtu 1200

[weak flower]

i've tried but nothing still

[exotic dove]

try to run the vpn server, nvm about the script

see if the vpn works

[weak flower]

okok

the same problem with cipher

[exotic dove]

does it not connect to THM tho? does it say connected?
https://tryhackme.com/access

[weak flower]

no unfortunately

[exotic dove]

can you update openvpn to 2.6.2? maybe that helps

[weak flower]

it says that i'm in the latest version (2.6.1-1), how can I force the update?

[exotic dove]

btw, did you run the vpnscript with ovpn file in the same directoy?

[weak flower]

yes

[exotic dove]

might need to sudo apt update

[weak flower]

how can I resolve this?

[pastel tinsel]

the cipher is not a problem, it's just a warning pop up, due to openVPN changing their setup from cipher to data-ciphers

[exotic dove]

yea I am testing on my end I got the same warning and the vpn works

might be worth leaving it for a minute or so @weak flower

let it run the vpn

[pearl pendant]

VPN configuration file is not downloading for windows , it is showing “error uh-oh , this page has been lost in matrix “ . Can anyone tell solution ?

[weak flower]

it's supposed to change to cipher?

[pastel tinsel]

please change vpn server and regenerate the config

[pastel tinsel]

no, it's just how openvpn works that has changed and therefore giving the warning

[pearl pendant]

Same error

[weak flower]

ohh okok

[pastel tinsel]

how long have you waited after regenerated the config?

[pastel tinsel]

can you send a screenshot of when running the vpn normally and then waiting a bit?

[pearl pendant]

It worked , thanks !

[scenic torrent]

Gave +1 Rep to @pastel tinsel

[pastel tinsel]

you're welcome

[pastel tinsel]

when did you generate this script?

[weak flower]

the config file was yesterday, i've been trying all day long haha

[bronze vale]

https://openvpn.net/faq/tls-error-tls-key-negotiation-failed-to-occur-within-60-seconds-check-your-network-connectivity/

[exotic dove]

I think you can identify if it's a router issue by connecting to your mobile hotspot and run the vpn, that should theoretically work, if it does then it's from your touter otherwise it's from your machine

[weak flower]

I'm gonna need to try later, I'm workin in a soc so probably the firewall have some rules blocking ovpn

[exotic dove]

that's most likely the reason :)

[weak flower]

hope so hehe

thanks for all the help, later I say if i could use the vpn

[exotic dove]

You're welcome :)

[pastel tinsel]

That is the reason, company setups tend to block VPNs

[weak flower]

[weak flower]

yep, i'm gonna need to talk to make an exception hahaha

[pastel tinsel]

Yeah, talk to your supervisor

[weak flower]

the strange part is one of my colleagues can connect to the vpn in the soc so I don't know if it is just the network

[pastel tinsel]

It's better to talk to your colleagues about it than us 😅

[weak flower]

yeah it's better hahah

[merry plume]

Currently having an issue with netcat working when doing the pickle rick CTF, watching the john hammond wakthrough i've done his exact syntax apart from using his ip for the reverse shell in which i used my tun0. The command works for him and im doing it in the exact same way

my ufw firewall is entirely disabled and I've reinstalled netcat and to my surprise nothing has worked.

I have made a netcat listener prior to executing the command but the issue is that I do not get listening 0.0.0.0 etc it simply just says

└─$ nc -lvnp 4444
listening on [any] 4444 ...

then does absolutely nothing. Any help would be appreciated.

[pastel tinsel]

Any also means 0.0.0.0 the reason why it says 0.0.0.0 is because it's searching for all ips there is

[merry plume]

Ah well I try to run the reverse shell and I never get any response , I had same issue with upload vulns module

[pastel tinsel]

Are you connected to the VPN or using the attackbox?

[merry plume]

I'm connected via openvpn

[pastel tinsel]

Have you changed the reverse shell to your ip

[merry plume]

Yes I've copied what john hammond did in his walkthrough and changed the ip of his reverse shell to be my tun0 ip

[pastel tinsel]

Hmmm, can you verify your profile and send a screenshot of your setup?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[merry plume]

I cant on this discord atm as I have an account verified

this is just logged in on my other discord

let me login to my other account if you need or i can dm you the screenshots

[pastel tinsel]

Please keep it in here cause i ain't online the next hour or so

[merry plume]

Sure let me login hold on

[coral crow]

Alright let me grab it for you

webpage doesnt endlessly load like how it should, just instantly goes back to a blank command console

nothing in netcat, stays the exact same

[bronze vale]

Are you using WSL?

[coral crow]

nope

installed the OS onto an old laptop

[bronze vale]

Are you connected to the VPN service?

[coral crow]

Yep.

[bronze vale]

Send a screenshot of the output, please

[coral crow]

I can access the site + ping it for a connectin an a reply

Output of the openvpn?

[bronze vale]

yes

[bronze vale]

You're accessing the website through the public domain, not the private one

You shouldn't really be using .p.thmlabs unless told to, some challenges don't work that way

[coral crow]

gotcha

[bronze vale]

Have you tried a different reverse shell?

[coral crow]

I havent but I had a similar issue when attempting to do a different one on the upload vulnerabilities module

I'd try it myself and it wouldn't work so I figured i'd watch a video as I must be doing something wrong an I do as they show and they get a netcat response although I dont

Theres another way of doing the CTF without rev shell which I'll probably do but I am very confused on why it doesn't work haha

[bold flicker]

Can anyone tell me why VPN(adenumeratinon.ovpn) is not connected?

Attempting to establish TCP connection with [AF_INET]3.248.169.226:1194 [nonblock]

[dense bramble]

Not without more details, verify and send screenshots of your vpn output

[bold flicker]

Always stuck here

[dense bramble]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[bold flicker]

screenshots is here

I using the regenerated configuration file

and the port is open

I think I know the reason. the tcp port is not working

[pastel tinsel]

you have not connected yet

update your openvpn

[kindred violet]

I'll need to check, but it's “cyber introduction “ and “pre-security”

[bold flicker]

My openvpn is the latest version.

[pastel tinsel]

For some reason it runs 2.5.7, shows in your first screenshot

[ivory spruce]

I just checked and its not included in both. I remember seeing some folks not being able to generate their certificates as well.

[bold flicker]

Yes, so I upgraded the latest version of openvpn, but the same problem still exists. Sorry, I didn't make myself clear just now.

[sleek nova]

At the top of your .ovpn file try change the "cipher" line to: data-ciphers AES-256-CBC

[dense bramble]

it's a long shot, but what does this running this script say?

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[eternal bay]

anybody know why a learning path shows incomplete even though I have completed all the rooms in the learning path?

[weary spindle]

There a bug having an effect on not counting properly.

#1092490706385383524

[weak flower]

it's a #1092490706385383524

[weary spindle]

Vulnersity is a common one for everybody.

[eternal bay]

yelp thats the one that is showing complete

[weary spindle]

Team will issue a fix soon, it's happened before.

[bronze vale]

That issue was resolved^
Their VPN config is still connecting.

@bold flicker Does the issue still exist?

[bold flicker]

Solved now, this is the right way @bronze vale

[bronze vale]

That shouldn't work

Your OpenVPN file is telling you that the data-ciphers has already been set

[bold flicker]

I modified this.

[uncut gyro]

Hey I can't seem to upgrade to a premium subscription for some reason—every time I click the link it crashes the popup. Have tried on desktop on three different browsers (Edge/Firefox/Opera) with everything allowed/enabled; tried on my iPhone through Safari—exact same weird glitch failure and ergo still unable to subscribe/upgrade. Any ideas?

[spare sphinx]

Hey the VPN page isnt working or something

It redirects me to a 404

[novel kindle]

hi team

is tech team available here

i need help with streak pls?

?

[weary spindle]

Did you lose your streak?

[fallow kayak]

I think you can try now, it seems there was some issue happening

[limber needle]

I can’t get my vpn working. I’ve been trying for weeks, browsing this channel looking for tips. I’ve tried some of them already, like regenerating my VPN file, updating OpenVPN, modifying the icon.config file to say data-cypher, nothing has worked

[weary spindle]

Are you using a VM?

[limber needle]

I am not, running Kali on an old thinkpad.

[weary spindle]

How are you connecting?

Can you show a screnshot?

[limber needle]

I use the thm vpn script thing

Is that thing looking for the ovpn file in a certain folder (eg /Downloads) or is it looking for it in the same folder the script is running from? Because I have them both in the same folder (/usr/bin)

[weary spindle]

It should matter where it is.

Which command are you using to run it?

[limber needle]

I made a menu bar icon to auto run it when clicked (percussive maintenance)

It worked fine for a long time, had zero issues.

[weary spindle]

the cipher should be data-ciphers

Not data-cypher

[limber needle]

Omfg 🤦‍♀️

Thank you

[weary spindle]

🙂

Happy hacking.

[limber needle]

https://tenor.com/view/dug-cone-shame-sad-up-gif-21986026

[honest mauve]

Hello everyone, I am trying to connect to the Red-Team Capstone network but I am having no luck. I already tried the troubleshooting script, which shows only this error message.

[weary spindle]

Can you show and output to your VPN scipt?

[limber needle]

It’s working again 😄

Whenever the tunnel breaks, it’s IP disappears from the menu, so I use the hammer on the Ethernet port for percussive maintenance

[honest mauve]

Some issue with the cipher

[weary spindle]

Can you nano the file?

[limber needle]

Scroll up and read my thing, you have the same issue

Gotta change your ovpn file to say “data-ciphers” not “cipher”

[limber needle]

This

[honest mauve]

It is like that

[weary spindle]

Try regenerating your VPN file.

[honest mauve]

Done that two times already.

They say third times a charm though.

Hang on

Nope, still the same cipher error.

[zealous yoke]

From the error it looks like your OpenVPN adaptor is somewhat stuck. I would probably suggest restarting the machine and trying to run the vpn again - make sure you only run the VPN once!

[honest mauve]

Rebooted three times

Doing it a fourth time right now

[zealous yoke]

Ah mhhm, would you be able to send your VPN profile over to me in a DM, please?

[honest mauve]

sure thing

[glad oyster]

ps -aux | grep vpn

[zealous yoke]

Resolved. Kali being Kali. TY for your help @weary spindle @glad oyster @limber needle

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

+rep @glad oyster

[scenic torrent]

Gave +1 Rep to @glad oyster

[brave heath]

I got an email the other day about payment failing for my THM subscription. The metadata reads:
from: TryHackMe [e-mail] via email.chargebee.com
to: [my email]
date: [yesterday]
subject: [External] [Important] We couldn't charge your Card
mailed-by: email.chargebee.com
signed-by: email.chargebee.com
security: Standard encryption (TLS) Learn more

Is this legit?? I figured it was, but I'd rather double-check.

[frank quiver]

!vpn

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[frank quiver]

!troubleshoot

[faint sequoia]

I mean you can just log in on thm to check right?

[frank quiver]

Hello guys. I got an error while running the vpn troubleshoot script. Can someone please help me ?

[weary spindle]

sudo ip link set dev tun0 mtu 1200

[faint sequoia]

are you running it in the same directory as your vpn file?

[weary spindle]

Try that command and then run the troubleshoot

[weary spindle]

Yes.

[frank quiver]

Did it, but the exact same result

[worthy elbow]

Hi, i need some help, I bought premium to be able to play the new network, but i found out that i need 7day streak to be able to play it. So can you please help me and give me 7 days only to be able to play, or can you atleast refund me my bucks, because i only paid to play this network

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Ask support for a refund if you want one, or try and work up a 5 day streak

[plush bay]

*7 day streak

[weary spindle]

Thanks Shadow.

[worthy elbow]

Thank you very much

Both of you

[wet hound]

I currently have the monthly sub, from before the announcement of the price increase. If I cancel and renew it for an annual subscription, will I pay the new increased price?

[plush bay]

yes but even if you cancel you will have the time until it would expire without having to pay anything

[wet hound]

☹️

[plush bay]

i.e say your next payment would be in september... if you cancel your subscription now you will not renew it in september but you will keep having sub content until then

[trim stream]

I tried "sudo ip link set dev tun0 mtu 1200", but still have this problem.
P.S: added some more screenshots. Plz help ❤️

[fair vine]

I'm doing Wonderland (https://tryhackme.com/room/wonderland) right now but connection isn't stable to the machine, known issue or should I try restarting my VPN?

[plush bay]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[plush bay]

start there

[silver hamlet]

Hi Mate, try sudo killall openvpn, then sudo systemctl start openvpn, then sudo ip link set dev tun0 mtu1200

[tulip widget]

Were do I go for questions about THM subscription

[dense canopy]

hello

is there any issue in goldeneye???

cause whenever I'm trying to brute force the pop3 its stop responding

[soft condor]

I don't have rooms to make 7 days streak to start "Red Team Capstone Challenge". I already did all possible rooms.

[elfin badger]

I had my progress for the OSWAP top 10 room reset on me

had the room completed but now it's showing as incomplete

[dense bramble]

you can reset some rooms

[dense bramble]

it's a brand new room, the old one still exists

[elfin badger]

Ohhhh

ty

[vivid aspen]

hello, I was going to buy a premium subscription, but the site does not accept any of my cards (including virtual cards) and gives a "contact your bank" warning. When I called my bank they said that they did not receive any cancellation process. how can i fix this problem?

[dense bramble]

check the pinned messages

[zenith estuary]

unsure if this is the place to be or not; having issues with the attack box, I'm getting an error 405 when trying to look at the web page I'm supposed to look at

I found the problem, I was being dumb and didnt start the machine properly just jumped into the attack box from the button

[trail fractal]

Guys, I'm running some commands on my vm and keeps coming up with 'Connection Closed by foreign host'. I have the commands all correct and just restarted my pc. I cant answer the questions without running the command.

[fading fulcrum]

my linux vm for some reason is stuck on 2.4.4 openvpn... ive tried removing, installing, upgrading, nothing seems to get it to 2.5+ in order to use the .ovpn file needed to run some rooms...

Edit, FIX: Anyone else having this issue, run " lsb_release -a " in linux, and make sure you're not running an old ubuntu version like i was lol.. I guess I downloaded the wrong one. to upgrade your verison, type " sudo do-release-upgrade "

[weary spindle]

You've done every room?

[weary spindle]

Check the pinned posts.

[vale flower]

EDIT: Pinned post, emailed [e-mail] I'm trying to make payment for my THM subscription but the payment prompt says my card issuer has declined payment, the issue is that the payment doesn't even show up in their system so nothing is reaching them, can any staff help out?

[bronze vale]

If you have emailed, I will respond via email^

[vale flower]

It does suck tho :(

I have emailed :)

I use THM to study for work, so this is a bummer to say the least

[fathom matrix]

When I try to buy a subscription with a credit card, there is a problem and it wants me to talk to my bank, but there is no problem with the bank, I tried 3 different cards.

[weary spindle]

Check the pinned post please.

[fathom matrix]

thanx man

[lime needle]

Hello Guys I'm facing this issue can someone help me on this I can start the meterpreter session

[naive dust]

Make sure your options and target IP address are set correctly

also, if i remember correctly you might need to run it a few times

i got it on the 3rd try

[lime needle]

okey thanks for your quick response

[naive dust]

sorry bout that

[indigo void]

Solved

Hello!
I've ran into a problem. I am using a Win10 host machine to run VirtualBox (Kali distro downloaded form Offensive Security).
I am using the default network settings, and I am unable to catch reverse shell.

I've tried using the default php reverse shell supplied in Kali by default, downloading the php script online, even using a generator to generate the script and nothing seems to be working. I've tried 2 different rooms (LazyAdmin and RootMe).

To catch the shell I'am using this command:
'nc -lnvp 8888' (I've tried multiple ports i.e. 1234, 12345, 9999).

I've verified that I am using the correct IP address for the shell call several times. Running the net cat command, and going to the IP:Port from my browser, I've confirmed, that Net Cat is in fact working.

Firewall is also not blocking this connection (Default Kali setings).

Could you please help me out with this? Everything else works on the machine. I am just unable to catch a reverse shell. I've narrowed it down to a networking issue / VPN issue.

Thanks a lot. I've been banging my head against the wall for days now.

[glacial hound]

Hi, where are you connecting to the VPN from? Your Host or VM? Also please share screenshots, it will help us.

[indigo void]

Conclusion:
Use the tun0 IP address from ifconfig instead of the eth0. I can not believe I am this retarded. Gotta learn somehow I guess.

[weary spindle]

Ghost ping?

[naive dust]

Hi, my friend bought some vouchers but most of them are not redeemable. Who to contact?

[weary spindle]

Where are you entering them?

[trim stream]

hello, as you advised, I did all your steps, but I get the same error " MTU value failed at 1000, aborting MTU check "

[pastel tinsel]

run the vpn normally when you use the ip link set dev tun command

so have the vpn running while you do the command 😄

[silver hamlet]

Do it one by one as mentioned: Step 1 - sudo killall openvpn. Step 2 - sudo systemctl start openvpn. Step 3 - sudo openvpn 'vpnfile'!!! Do not run troubleshooter 🙂

[trim stream]

I'm sorry, I'm using google translator to communicate with you, I didn't quite understand what you said before. Let me try now

[trim stream]

nope(((

[pastel tinsel]

When was the last time you regenerated your VPN?

[trim stream]

1 hour ago

[pastel tinsel]

Okay, how much did you wait before downloading it, after you regenerated it?

And which server?

[trim stream]

more than 10 sec, after I pressed to "Regenerate" button, I am using eu-vip-2

[silver hamlet]

And you are living in EU?

[trim stream]

no, I am from Central Asia, but I think EU is best option, isn't?

[pastel tinsel]

Please wait more than 10 seconds

[silver hamlet]

try downloading Au vpn

[trim stream]

ok, let me try

[pastel tinsel]

Regen before downloading, there could be an old configuration laying on that VPN server still

[trim stream]

So I tried to switch Au-regular all steps which I did:

1. Regen file, waited more than 10 sec and then downloaded
2. tried to run with sudo openvpn <path_to_file> did not work ( screenshot 1)
3. tried to run script, got same error " MTU value failed at 1000, aborting MTU check " (screenshot 2)
4. typed sudo killall openvpn and sudo systemctl start openvpn
5. tried Step 3: sudo openvpn <path_to_file> did not work ( screenshot 3)

[tribal burrow]

if MTU is issue. check this or search for similar
https://discordapp.com/channels/521382216299839518/521771811768107008/1106291645823074344

[tender hamlet]

I reported a tryhackme site bug 3 days ago in the chat box but the chat box shows I reported it only 1 day ago. Nobody has responded to my problem. Should I wait for a response or can I post the problem here?

[tribal burrow]

there might be due to lot's of email and so. when it come to them you will get some update

[trim stream]

I have already tried it, but sudo openvpn gave me same TLS error that above, while script keep saying " MTU value failed at 1000, aborting MTU check "

[tender hamlet]

Thank you

[scenic torrent]

Gave +1 Rep to @tribal burrow

[tribal burrow]

did you try set mtu by you self ?

if you do ip a what it says is value for mtu ?

[tribal burrow]

try to set it to 1500

[plush tangle]

is this uh, normal-

The website wasn't submitting my flag so I refreshed

[tribal burrow]

not so much. but it can happen rarely. just refresh site

[zealous yoke]

We're aware of problems at the moment

[trim stream]

not helped

[trim stream]

someone please)

[tribal burrow]

strange

[trim stream]

the most interesting thig that I used to use my mobile internet with hotspot and it worked, but now I moved to another country and nothing works

btw openvpn is not blocked here

[tribal burrow]

oh. there might be issues due to country

some with more knowledge of that will reply to you

[trim stream]

ok, thank you a lot

[scenic torrent]

Gave +1 Rep to @tribal burrow

[wind badge]

Hey, I was looking at getting THM premium with a student discount - problem is I only have £10 in my account and the first month costs £12 followed by £7.20 the month after. Is there a way I can somehow get the subscription fee dropped down to regular student discount straight away?

[weary spindle]

That'd for the annual plan I'm sure.

[wind badge]

Sorry what do you mean?

[weary spindle]

Did you select monthly plan?

Or annual?

[wind badge]

Monthly

[weary spindle]

Are you sure?

Monthly normal is £12.

[wind badge]

The price got upped

[weary spindle]

Yes.

That is the new price.

[wind badge]

For your first month, you will pay $14 (£12), and for the second month, you will pay a reduced price of $8.4 (£7.20).
After that, your payments will return to normal, and you will start paying the discounted monthly subscription of $11.20 (£9.60).

But I only have £10 in my account at the minute so I was just wondering if there was a way to get the student price straight away

[weary spindle]

That looks like an annual plan.

[weary spindle]

Do you have a student email?

[wind badge]

Yeah

[weary spindle]

Are you signed up to THM with it?

[wind badge]

No but I can have it changed. Problem is that even with the student discount - I have enough to pay for the membership at discount rate just not enough for the first month

[weary spindle]

If you change it, it should reflect the new price.

I don't think there much more than can be done?

[sterile tulip]

I can't login to THM without my 2FA

how do i reset that please