#site-support

1 messages · Page 33 of 1

visual minnow
#

I think your not understanding it

broken bear
#

openvpn application is almost completely unrelated to a virtual machine

visual minnow
#

Then why tf did it tell me download it?

broken bear
#

You download the ovpnp profile so you can connect to the tryhackme network.

visual minnow
#

Yeah that's what I did

broken bear
#

That's what a VPN does. It allows one host to be on the same network as other devices, due to the VPN connection.

#

It's not a virtual machine.

visual minnow
#

Crap

broken bear
#

It can run on a virtual machine, just like it can on your mobile device, laptop, desktop or server, but it isn't a virtual machine.

visual minnow
#

Sooooo what the heck was the SSH that I found then???

broken bear
#

Why were you scanning an IP address you didn't have permission to scan?

visual minnow
#

I DODNT KNOW

#

I SAID I THOUGHT IT WAS THE VIRTUAL MACHINE

#

Shit was CONFUSING

#

But wait what was that SSH that I found?

#

In the usernames for it

broken bear
#

You can do without the caps. At this point, I'm going to recommend that you follow some basic ethical cybersecurity things, before you get your self in trouble.

  1. Don't scan things without permission; it some areas of the world, that constitutes a cyber attack and can have legal ramifications.
  2. Don't try to bruteforce random SSH ports you find open. This is also illegal in some areas, and lets say you got access to that machine via SSH: You've definitely illegally gained access to a system you don't have permission to access.
visual minnow
#

Ok I'm sorry I didn't know?

#

But can you tell me what were those SSH usernames that I found

broken bear
#

They are just user names.

visual minnow
#

Okay

broken bear
#

If you say it's a vulnerability, what's the impact of disclosure?

visual minnow
#

Probably nothing since you can't log in with the SSH it might be using a special key

fallen prairie
#

hey im trying to run whois on attackbox anyone know why network is unreachable

visual minnow
#

Anyways how can I actually start hacking safe virtual machine

broken bear
fallen prairie
visual minnow
#

Okay I think it's a bug not a vulnerability

broken bear
visual minnow
#

Yeah

broken bear
broken bear
visual minnow
#

Any flaw in the system

#

In a*

fallen prairie
#

okay thanks, it was weird on windows but ran fine on my kali linux machine

visual minnow
#

Wait it's an attacker box doesn't have internet access how can we safely hack into it???

broken bear
broken bear
fallen prairie
#

i love this guy @visual minnow stop procrastinating and learn, not everyone in this server going to jail just dont scan random networks and only target IP's that the website gives

visual minnow
#

Ok

bronze vale
#

Huh?

fallen prairie
#

sorry i was using that earlier i get them mixed

limpid mountain
#

In the Nessus room, I did the scan but it came up with no results. Am I missing a step or something?

sweet jolt
#

without actually subscribing to the rooms but just reading through them to get an idea of the stuff the challenge assumes you have experience with, it doesn't look that hard tbh, but it introduced me to new hacking concepts which i thought tp be very interesting but I'll do them on my own pace, not rush into it for the challenge. Particularly cool was the one were you look up a known hacker group, and then use their methods to frame them for your attack haha I saw this in a netflix series once where a kid hacked a company, but made it look like it was hacked from North Korea. Nobody suspected a thing if he didnt felt guilty and confessed, he would have gotten away with it.

#

Me on the other hand with my hacking/pen testing knowledge would make way too much noise and leave tracks everywhere probably, I really need to study up covering my tracks and not getting detected.

#

THM and similar training sites are ideal for that, you're allowed to make mistakes and fck up, no harm done, only thing hurt is your pride maybe 😄

dense bramble
undone anvil
#

Anyone else having issues /w SSH & FTP connections to THM vm's? All my connection attempts hang (across multiple rooms, and have restarted the vm's a few times) I check wireshark when im trying SSH, Im sending packets but getting no response. I've tried a device on my local network and it seems to be going through, but not through the OpenVPN connection... Its the same for FTP. HTTP does not seem to be having issues.. I have no host firewalls blocking anything...

Just curious if anyone else is having issues.. (im new here, so im not sure if this is the right channel...)

dense bramble
sweet jolt
undone anvil
scenic torrentBOT
#

Gave +1 Rep to @sweet jolt

undone anvil
#

Hm 🤔 The Attackbox seems to exhibit the exact same behavior... I don't believe its isolated to one room... I suppose ill try another room and see if the issue persists..

weary spindle
#

'Sudo ip link set dev tun0 mtu 1200'

Try that command in a terminal, if you feel ssh hangs.

undone anvil
crystal trail
#

this might be a little unrelated to THM but someone please help me get rid of wifipumkin3 on my kali machine there is no uninstall in the folder but its annoying as crap and I do not know how to rid of it

crystal trail
bronze vale
#

Yes, this is for TryHackMe site support:)

crystal trail
#

alright thank you 🙂

jagged prawn
#

Hello everyone,

I'm currently participating in a TryHackMe CTF and encountering an issue while trying to connect to a website on the virtual machine provided by TryHackMe. Unfortunately, none of the following troubleshooting steps have resolved the problem for me:

  1. Checked my internet connection, which is stable.
  2. Cleared browser cache and cookies.
  3. Disabled VPN and proxy.
  4. Temporarily disabled firewall and security software.
  5. Tried accessing the website using different browsers.
  6. Restarted the virtual machine provided by THM.

Despite these attempts, I am still receiving a "connection has timed out" error when trying to access the website from within the virtual machine using Firefox.

Any suggestions or insights would be greatly appreciated. Thank you in advance for your help!

outer charm
plush bay
#

@upbeat bloom ⬆️ see @heady crest message

outer charm
#

this is my openvpn file

outer charm
#

im doing this on kali linux

#

can anyone help?

plush bay
#

you are quite a few versions behind

#

if that is not something you can do you would have to change data-ciphers to cipherin the config but that is the worst solution in this case

#

you are currently on openvpn 2.5.7.... newest released is 2.6.x something

winter solstice
#

!vpnscript

sharp bisonBOT
plush bay
outer charm
#

im updating it

plush bay
winter solstice
plush bay
winter solstice
#

Understood. Thanks!!

outer charm
#

updated it

#

but

#

still getting error

tropic gale
#

hello,
I have a problem with xfreerdp and any other rdp client (remmina also) it's keeps disconnecting every 120 sec

winter solstice
tropic gale
#

I have this issue with ssh and others :(

outer charm
#

yeah tried

plush bay
warm spindle
#

Can’t seem to connect to the DNS server in the lateral and pivoting AD room. Anyone experienced this?

weary spindle
#

Have you added the THMDC to /etc/resolv.conf ?

warm spindle
#

Am using my kali on vm

weary spindle
#

That doesn't answer my question.

warm spindle
#

Have downloaded the vpn file, connected to it changed the settings in the network config

warm spindle
weary spindle
warm spindle
#

Yes I just checked and I have it there as nameserver 10.200.78.101

#

As shown in my network diagram

weary spindle
#

Can you send a screenshot?

warm spindle
#

Here u go

weary spindle
#

Just confirming it's at the top, and what is not working for you exactly?

warm spindle
#

Am on task 4 in the lateral and pivoting room and can’t seem to ssh into thmjmp2

#

Have tried nslookup thmdc.za.tryhackme.con

#

I get recursion error

exotic dove
#

can't ssh errors pls?

weary spindle
#

Use -v in the ssh command.

warm spindle
#

All going good now

#

Thanks

lavish garnet
#

Im trying Snort Challenge - live attacks. task #2 . when i set the rule with " drop tcp any any -> any any (sid: 1000005;) " and i run the snort command to get the flag " sudo snort -c /etc/snort/snort.conf -q -Q --daq afpacket -i eth0:eth1 -A full" the VM window crashes as soon as i run it. it keeps connecting and dissconnecting till i close the vm out and open a new one. i have done this 3 times and i cant get it too work.

dense shore
#

https://tryhackme.com/room/blue#

in this room my namp scans tell me there is no response. But on the access site is tells me Im connected. pinging 10.10.10.10 shows no response either.. theres got to be something wrong with my openvpn right?

weary spindle
#

Do what the error tells you to do.

dense shore
#

I just went back to another snapshot of my kali vm. apparently I had one from last week so that solved it for me

#

very weird though, as it has always worked perfectly so far

crystal marlin
# jagged prawn ?

What room are you doing?
Also, if you verify you are able to send screenshots, which could be helpful for troubleshooting 🙂

#

!docs verify

sharp bisonBOT
jagged prawn
# crystal marlin What room are you doing? Also, if you verify you are able to send screenshots, w...

Thank you for your response! I'm currently working on the 'lazyAdmin' room. I apologize for not mentioning it earlier.

I will send screenshots shortly to help with troubleshooting. Please note that I'm not currently on the machine, so I will be using screenshots from Google to provide visual references. The screenshots will accurately represent the steps and settings I have encountered in the virtual machine.

scenic torrentBOT
#

Gave +1 Rep to @crystal marlin

jagged prawn
#

I also want to mention that the issue occurs specifically after waiting for a long time when trying to enter websites like 'cyberchef.' It seems to result in a 'connection has timed out' error.

crystal marlin
# jagged prawn

Best to send screenshots once you are on the machine, as otherwise I'm not too sure on what the issue exactly is

jagged prawn
crystal marlin
#

But as a heads up, the attackbox has no internet connection on free user accounts

#

So you can only connect to machines within the THM network, from the attackbox

jagged prawn
#

lazyAdmin room requires the use of a PHP reverse shell website.

#

(The ‘cyberchef’ is an example for website because I can’t remember the name of rev shell website)

dense bramble
crystal marlin
loud pilot
#

Anyone know why i cant reach : http://ntlmauth.za.tryhackme.com.

#

I have the DNs working

#

but cant reach the site

#

for the breached Active directory room Task3

limber wing
#

hi

#

i have that issue on VPN config

#

2023-05-19 21:10:44 CreateFile failed on tap-windows6 device: \.\Global{A668B707-8B90-4926-97DD-844DD7037F4A}.tap
2023-05-19 21:10:44 MANAGEMENT: Client disconnected
2023-05-19 21:10:44 All tap-windows6 adapters on this system are currently in use or disabled.
2023-05-19 21:10:44 Exiting due to fatal

#

All tap-windows6 adapters on this system are currently in use or disabled.

glacial lion
#

Anybody else having trouble loading images in some THM rooms?

#

I can't load images in the room "Blue" or the OWASP Juice shop room

bold quiver
#

Jumped from my vm to my bm (because im lazy and ther in different rooms of my house) but trying to connect now i get explicit-exit-notify 3 ...but it still connects ..alternativly i run the ts.sh and it connects fine ?? Is ther something im missing feel like somethings wrong there

halcyon crescent
#

Sat May 20 08:41:10 2023 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
Sat May 20 08:41:10 2023 ERROR: Failed to apply push options
Sat May 20 08:41:10 2023 Failed to open tun/tap interface

#

this error is stopping me from connecting to the openvpn

sharp bisonBOT
weary spindle
#

Save and run this:-)

halcyon crescent
#

no where to save it or download it

weary spindle
#

Are you on your VM?

halcyon crescent
#

i tried making a VM but everytime i went to start it it said the machine was aborted

weary spindle
#

So where are you running the VPN from?

halcyon crescent
#

win

weary spindle
#

As your host?

halcyon crescent
#

yh

weary spindle
#

That's not a great idea.

halcyon crescent
#

then what?

#

downloaded virtual box to make a vm and i keep getting that error

weary spindle
#

There must be something you're doing wrong, or your system can't support VM's.

halcyon crescent
#

i would be every surprised if my pc cant run a vm

weary spindle
#

Then it must be something you're doing.

#

!docs verify

sharp bisonBOT
weary spindle
#

Verify your account, then jump in to #general and I can assist you,

#

I'd rather do that, than running the risk of you using your host to connect to the THM network

halcyon crescent
#

thank you

subtle coral
#

Thanks Arth. So, it's more like once you joined the room you'll continue able to access it as long as subscribed.

scenic torrentBOT
#

Gave +1 Rep to @dense bramble

twin bough
#

learning bash; how would I use base64 without pipe?

#

like if i do $ base64 -d, then it newlines me, then i paste in a string and press enter, but it just makes a new line lmao

#

i can see all these tutorials online to do $ base64 -d | "string" but i cannot find anything explaining it without the pipe symbol haha

glad oyster
twin bough
#

is there a way to do base64 -d | askdfgjalfgkjdsflkgjlkj

#

without the |

#

like base64 -d
THEN i copy paste in alksdjflaskjdf

glad oyster
#

Why do you want to avoid using |?

twin bough
#

just for learning purposes; is that the ONLY way to use base64?

#

i have a base64 encoded string

#

i found out linux has base64 command natively

#

intuitively my thought was "okay, so i guess i just do $base64 -d"

#

so i did it, and then i can't figure out how to actually input stuff in. i googled and found that everyone uses |

#

but what am i looking at if i JUST tpyed "$base64 -d"?

#

it didnt return an error

glad oyster
#

https://linux.die.net/man/1/base64
It reads a file or stdinput, in that case its reading from stdinput - what your typing into it

twin bough
#

so... is pressing "enter" not inputting it?

glad oyster
#

It's basically reading the input forever, because it doesn't actually know when the input stops thats why we directly pipe the input into it

twin bough
#

oh i see. and how would i declare the end of the input

glad oyster
#

Cntrl+D

twin bough
#

fuck, thanks

#

it's hard to google this when i dont really know what the issue was

glad oyster
#

For next time, ask in #general - this channel is for THM related issues.

twin bough
#

oh, okay thanks

glad oyster
#

Some advice about researching the issue, try to find out what the underlying / root cause is first, my thought process went along the lines of this

Using the base64 command -> Checkout the man page -> Reads stdinput or a file -> From stdinput, how does it know when to stop -> google "linux delcare end of input" -> Cntrl+D

twin bough
#

yeah that makes sense. i appreciate it.

magic crow
#

i cant launch the machine in a task, it keeps giving a blank white page..

anyone experienced this?

exotic dove
#

what room

magic crow
#

linux fundamental 1

#

would like to attach screenshot, seems like no option to upload image here

#

it does show the bottom toolbar [power, terminate, extend..etc]

thats it. up there is blank white. tried all browsers

sharp bisonBOT
exotic dove
#

You need to verify to be able to attach images

exotic dove
magic crow
#

oops hang on, got this in the title: about:blank#blocked

#

i think something on my side blocking

exotic dove
#

here we go

#

seems like antivirus related

#

since you tried multiple browsers and still the same

magic crow
#

i have no problem with other room before, this is my first encounter

exotic dove
#

can you grab the link of the new window before it says :blocked

#

other room's attackbox work?

magic crow
#

verified my account. hang on

magic crow
exotic dove
#

can you click the circle ! icon

#

what does it say

#

if you could open a private window that might work unless your antivirus is still blocking it in some how

magic crow
#

other rooms seems fine

exotic dove
#

alright, try to right click on the expand icon of the splitter and copy the link
make sure it starts with https, keep a copy of it and enter again

#

yea different rooms may have different attacked VMs

magic crow
exotic dove
#

interesting

magic crow
#

maybe a bug

exotic dove
#

works for me :\

magic crow
#

weird..

exotic dove
#

try to close the machine and start again

#

terminate*

magic crow
# exotic dove terminate*

done that few times.. i encountered this few days ago, thought it would be ok by now.

turn out still the same

exotic dove
#

Alright, that seems like a bigger issue maybe, cc @zealous yoke

#

maybe a staff can help here :)

magic crow
#

incognito mode. still the same

exotic dove
#

could be a bug, staff will look into this hopefully

magic crow
exotic dove
#

Good luck! :D

marble cobalt
#

Hi in the room: Threat Intelligence Tools has problem with the firefox on the machine?
I try to use the browser and it`s not working:|

plush bay
# marble cobalt

target machines do not have an internet connection for security purposes

#

you should be able to solve the room with the things that are already on the target machine

marble cobalt
plush bay
#

you can also copy text out of the target machine and use cyberchef on your host... but think there is an instance of cyberchef on the target machine you can launch

#

let shadow check

marble cobalt
#

if you said it`s on the mchine:|

plush bay
#

yeah just checked and it is not there.... might maybe be considered a bug.. reported it to staff

#

as well said ip might be weird to interact with outside of the target machine

marble cobalt
plush bay
glacial lion
#

A lot of images are not loading for me on Try Hack Me rooms

#

I don't have this problem on any other websites

weary spindle
#

I think it's Imgur.

plush bay
glacial lion
#

For example, in the room "What the shell?", the 3rd task contains an <img> tag that links to https://i.imgur.com/rN7YkJJ.png, however it seems this image is broken

weary spindle
#

The image is being blocked,

#

Either you have something blocking it, or your ISP is.

glacial lion
#

oh lol it was my VPN

#

thanks xdd

#

but why is my VPN blocking images D: so strange

weary spindle
#

Where is your VPN set?

glacial lion
#

I have surfshark

#

but maybe I should just setup my own

weary spindle
#

Imgur doesn't work on some VPN's.

glacial lion
#

oh ok

#

weird I changed the VPN location now images load, so weird 😄

#

ig that IP was blacklisted from imgur

lapis hazel
#

Hello, looking to purchase a year's membership for THM but I cannot see any prompt for student discount application. Can anyone help me please?

bronze vale
#

!docs student

sharp bisonBOT
turbid obsidian
#

hi, i am trying to submit the 19th flag in the capstone network, but the network reseted while in the middle of it and now in e-citizen i cant neither submit the proof of compromise nor cancel the submission, it throws a Python exception

gray compass
#

Hi! I renewed my subscription on May 16, however, 2 days after when I logged in, my profile was no longer a premium member. Money was debited from my card. I created ticket and wrote an email but no response yet. I can provide the invoice too.

bronze vale
sharp bisonBOT
#
TryHackMe
That topic does not exist!

Use !docs to list all of the available topics.

amber cipher
#

I am on the NMAP section. I downloaded OpenVPN connect and set it up for my intel chip based macbook and it shows connected to tryhackme server but I can't access any machines. There are no ping replies and I can't scan the machine either. Not sure what is wrong. I tried connecting to a machine from Hackthebox and it seems to connect just fine.

broken bear
#

if you verify, you can post screenshots of the errors and we can help you torubleshoot

#

!docs verify

sharp bisonBOT
elder fern
#

Not really tech support but I couldn't find a better place, I'd like to have the OSCP role if possible, I can send the certificate, here or where it's needed.
Thanks.

quasi tinsel
#

Hello I'm developing a little room for a assignment about metasploit and I uploaded a Windows 7 ova file but its been converting for atleast 12 hours and wont finish

#

Does anybody know what I'm doing wrong

bronze vale
quasi tinsel
#

Its a Windows 7 professional edition ×64 and I uploaded the ova file but still can't use it because its still in the converting state when I check my materials

bronze vale
#

What’s the name of the file?

quasi tinsel
#

Windows7.ova it that what you ask?

#

I exported a copy from the virtual box and then I uploaded the exported file

solar finch
#

Not sure where to ask this so here it is. Is there a discount on a 1 year premium subscription?

tribal mason
naive dust
#

Cewl on attackbox gives the following error:

#

Apparently this has been long fixed, installed version is behind.

dense bramble
quiet fox
quasi tinsel
#

If you find a solution or if it finally finish converting please ping me i dont mindtipsfedora

solar finch
#

@tribal mason The webpage at https://tryhackme.com/subscriptionsvoucher states that for a years sub the cost is $168.00. That's $14 a month. I'm currently paying $10 monthly until October when I'll have to pay $14 monthly.

gaunt lake
#

Could I get some help with connecting my discord to my thm account? I switched accounts a while back but it appears my tryhackme is still connected to my old discord account (which I don't have access to anymore)

solar finch
#

Well if that's what you're seeing then I'm being ripped off.

weary spindle
weary spindle
gaunt lake
weary spindle
solar finch
#

Are either of you THM employees?

weary spindle
#

No.

#

THM Employees names are blue.

solar finch
#

It seems you two are trying to prove me wrong instead of helping.

weary spindle
#

I am helping.

#

A voucher is more expensive than a sub,

glad oyster
#

Hey @solar finch if you have any issues I'd contact support 🙂

#

!email

sharp bisonBOT
scenic torrentBOT
#

Gave +1 Rep to @glad oyster

weary spindle
#

If you purchase a 12 month voucher it will cost what it will cost.

If you purchase a 12 month subscription.

You'll pay the price of 9 months

bronze vale
solar finch
#

There is no annual option on my end other than a voucher

glad oyster
solar finch
#

Hey Jason. How bout you help me get annual before I cancel.

bronze vale
#

Please don't be rude.

solar finch
#

I'm a customer. Get that straight. If you don't understand that. Go learn customer service at McDonalds. I'm not kidding.

bronze vale
#

@solar finch We recently had a price increase which increased the monthly subscription from $10 to $14. You are currently paying the old prices, as you are aware.

If you were to pay $14 every month for 12 months, 14*12=168, hence the $168 you see on the website's voucher page.

Whereas, if you subscribe on the annual subscription, you are charged less.
Vouchers are a one-time purchase, subscriptions are a reoccurring payment. It is cheaper for the fact that it is reoccurring.

You are not being ripped off 🙂 Vouchers != Subscriptions.

You cannot purchase another subscription if you already have an active one. You first need to cancel your active subscription, wait for it to stop, and only then can you choose a new plan.

marble breachBOT
#

:mute: EpicDedd#0213 has been muted.

naive dust
#

hello i completed a course today but i cannot seem to download the certificate

#

when i try downloading it says wait fetching file since morning

#

how long does it takes for the certificate to ready

#

?

plush bay
#

have you tried refershing the page and clicking the download button for the cert again???

#

like ctrl + F5 refreshing

naive dust
#

i have not tried the shortcut but i have refreshed the page manually

#

its doesn't work , tried downloading via mobile also not working

plush bay
#

not much shadow can do then ¯_(ツ)_/¯

orchid axle
#

hello, i cannot finish the phishing room. I can load the page/VM but cannot add new profile just a spinning wheel.

gray oasis
#

Hey Guys and Gals, In the https://tryhackme.com/room/mitre room on Task 5 MITRE Engage,
Does anyone know how long the https://engage.mitre.org/ site has been down or the status of this service?
I was able to eventually find the information necessary to answer the questions by crawling around the WaybackMachine, but that was painful...
I'd like to peruse the Engaged Matrix Mitre website, but it looks like Engage was built on WordPress so you know...

open smelt
#

sudo openvpn lateralmovementandpivoting.ovpn 2023-05-22 02:50:09 Attempting to establish TCP connection with [AF_INET]34.246.69.138:1194
2023-05-22 02:50:30 TCP: connect to [AF_INET]34.246.69.138:1194 failed: Connection refused

#

what's the problem?

subtle coral
#

Thanks for bringing it up. Not sure the room got updated or not. But I do think the hint is helping me. Cause all other questions can be answered by ChatGPT C&P

scenic torrentBOT
#

Gave +1 Rep to @tawdry cape

elder prawn
#

Hi everyone, i would like to know if there is any way to change the name on the certificate ? coolguy

glad oyster
#

Once it's generated you cannot change it

elder prawn
elder prawn
weary spindle
#

No, they will be linked to your new name.

pastel tinsel
#

@eager fulcrum

elder prawn
#

thank you for your answers !

eager fulcrum
weary spindle
eager fulcrum
#

Ah cool, couldn't see anything

weary spindle
#

Lost count of the channels they posted in.

#

@normal sandal

Hay, let's get your VPN sorted.

naive dust
#

alright so just a quick question

this is what my vpn spits out when I connect

#

There's no issue. It works just fine

But I'm just wondering why it doesn't have that sequence complete thing

weary spindle
#

I'm not sure what it is, but you're still connected.

normal sandal
naive dust
#

just curious and wondering if anyone would know what exactly is going on

weary spindle
#

Or I think, anyway

naive dust
#

hmm

lunar holly
#

Hello people, I am running Kali Linux on Windows10 subsystem WSL, I installed OpenVPN, but when I try to run it, I get this message on the terminal:

ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)

Can anyone help me with this issue?

weary spindle
#

WSL isn't good from a networking PoV.

#

You're better dual booting or VM'ing.

#

And I don't suggest dual booting often.

lunar holly
scenic torrentBOT
#

Gave +1 Rep to @weary spindle

leaden shale
#

Might be the wrong channel, but is there something wrong with signups? trying to subscribe but keep getting hit with the following.

zealous yoke
#

Addressing in DMs ^

balmy dune
#

Hi! I recently bought the annual subscription last Thursday and it has still not been activated. I have the invoice copy if needed. Can someone help me fix this?

sharp bisonBOT
weary spindle
#

You'll need to reach out to support.

balmy dune
#

@weary spindle I have sent out an email to support yesterday and opened a ticket with the bot last week. So I can just wait now?

weary spindle
#

Yes, if support are not too busy, you should receive an E-mail within 2-3 day(s)

balmy dune
#

Awesome thanks!

bronze vale
viral schooner
#

hello! how can i have access to the aws room? I really hope i can have access to it but i'm not sure... thanks 🙂

dense bramble
viral schooner
#

noooooooo

#

sadge...

#

thanks 🙂

neat crow
#

#site-support - I bought education subscription, I paid for it and there is no contact from your end - I don't know if account for me is created, sales rep is not responding and I need it to perform my work - how do I proceed?

gray compass
gray compass
zinc trail
naive dust
#

@sharp bison . I AM FINDING IT IMPOSSIBLE TO DOWNLOAD MY COMPLETED CERTIFICATE

weary spindle
naive dust
#

NO I AM USING FIREFOX

#

I TRIED DOWNLOADING VIA MY IPHONE

weary spindle
#

BUT DO YOU USE ANY EXTENSIONS ON BLOCKING ADS?

naive dust
#

NO SIR

weary spindle
weary spindle
naive dust
#

Pre Security

weary spindle
#

Have you done the full path?

#

I know there was one or two rooms bugged.

naive dust
#

YES COMPLETED ..

weary spindle
#

And when you click download, does it do anything?

Like, does it look like it's trying to do something?

naive dust
#

IT SAYS FETCHING CERTIFICATE ...PLEASE WAIT BUT THAT IS THE MESSAGE I GET SINCE YESTERDAY

#

NOTHING IS DOWNLOADED

bronze vale
zinc trail
#

i was writing another support email right now and i was about to send it until you pinged me

#

if you would like if i can send you my email in a pm , i would be thankful

cursive dust
#

Is my attack box not being connected to the internet a common issue?

glad oyster
#

Are you a subscriber?

#

Only subs have internet access

cursive dust
#

-_-

#

Fair enough

#

I’m out of country and trying not to get rusty so I’m using the attack box lol

gray compass
#

subscription problem

bronze vale
#

Don’t post email addresses here please

gray compass
#

oh sorry

bronze vale
indigo flame
#

hello guys

#

i need support from Jabba, i'm being sending emails to the support, i have new cell phone, i can't login to THM and i don't have the recovery code

#

please help @bronze vale

uneven wind
#

so how can you make your discord profile show your thm rank again? i got 0 idea when my profile stop showing my rank and re-verifying only update the stage of my subscription

dense bramble
uneven wind
#

i think i got that rank from one of the ticket event maybe?? but i think that should expired after some time right?

dense bramble
ocean maple
#

Hi

#

I have a subscription, I have been working on the redteam cap stone. I was kicked off about an hour ago, and even though I can the hosts are up on the site. My VPN have been regenerated and downloaded and shows up. I can't access anyof the hosts.

signal whale
#

I keep getting "permission denied" message when I start my machine and use command ssh tryhackme@the virtual machine address and then the password "tryhackme" Can anyone help me because I'm not getting a response from tech support when I already paid my subscription for the year.

tribal mason
green ingot
#

if the only reason will let me to leave THM it is the copy from AttackBox to my device please fix it

signal whale
#

yes

tribal mason
signal whale
#

it's for the linux fundamental part 3 section

green ingot
#

there is any solution for copy and paste

signal whale
#

yes it was working before and now its not working

tribal mason
signal whale
#

yes

tribal mason
tribal mason
signal whale
#

I already done part 1 and part 2 so I know I'm not doing anything wrong

#

I type the command in manaually type the command in and it's not working error message say permission denied

green ingot
#

IDK it is from the room or from AttachBox it self

green ingot
#

I know

#

it doesn't work

#

I tried to turn it off and on many times

tribal mason
#

what exactly doesn't work

green ingot
#

sometimes it works sometimes just keep doing nothing

tribal mason
#

you type in that box and can you paste it in the attackbox?

green ingot
#

when I copy it doesn't show here

signal whale
#

yes yes yes

#

I said that in my first message

#

this is not my first time doing this assignment that's why I know I'm not doing anything wron on my end

tribal mason
#

can you show me a screenshot?

#

!docs verify

sharp bisonBOT
tribal mason
#

(to send attachments in this channel, you need to verify)

signal whale
#

@tribal mason my profile is already verified and I still can't attach my screenshot.

gaunt lake
zealous yoke
gaunt lake
#

ty!

signal whale
#

@winged pasture you're wasting my time if you're not going to help fix the issue. I instructions you provided doesn't make sense because I have already verified my profile using my mobile number and I text from with the code. All this time wasted and you guys could have respond to my email I sent HOURS AGO!

winged pasture
tribal mason
# signal whale <@365334221105004544> you're wasting my time if you're not going to help fix the...

I'm not wasting your time, I'm telling you to verify your website account to the discord account by DMing @sharp bison bot with !verify <token>. You can get your token from the website as It's specified in this tutorial page: https://help.tryhackme.com/en/articles/6495858-discord

Also, because this channel is mostly run by volunteers, no one is obligated to help you. Being rude will not help you solve your problem faster.

long axle
#

hello guys, im new on tryhackme and i can connect my openVPN but i cant go to the ip given i don't know why can somebody help me ?

signal whale
#

@tribal mason YOU ARE WASTING MY TIME! You attached an article that is NOT CLEAR that's telling ppl to go to "user list" when there's no such thing at the top. I had to figure these stupid instruction out myself just to verify my profile for a damn 2nd time. All of this just to send you a screenshot when you could just respond to my email.

marble breachBOT
#

:mute: Meeka#7040 has been muted.

broken bear
# signal whale <@961992583805018122> YOU ARE WASTING MY TIME! You attached an article that is N...

You are being extremely rude. 0xheap is a member of the community, not THM staff nor a discord volunteer. The bot could be down and not verifying correctly, but this isn't the way to go about getting help.

If you emailed support, that's the best route to get official responses from THM; if you have questions about room tasks or security in general, the discord is a great place to ask.

Please recognize that (almost) everyone who participates in the discord is a member of the community volunteering their time and be respectful of that.

long axle
#

a private one, from my school

crystal marlin
long axle
#

yes sur i will, but i cant do the room OpenVPN introduction, this one is your right ?

crystal marlin
long axle
#

yeah

crystal marlin
#

I can help you with that one, yes

long axle
#

ohhh thanks ❤️

#

ok so

#

can i post a screenshot here ?

crystal marlin
long axle
#

ok im going to

crystal marlin
#

!docs verify

sharp bisonBOT
vast prairie
#

hi

#

I am trying to connect to the Openvpn

#

and I have the following error

long axle
#

so im on Mac OS and i want to connect THM with openVPN, so on openVPN i past my configuration file and im connected as you can see, but when i try to ping the ip address and i don't why

crystal marlin
vast prairie
#

yes

bronze vale
bronze vale
long axle
#

ok i will try thanks

bronze vale
#

No, your configuration file

tribal mason
#

It should be something like ~/Downloads/your_name.ovpn

vast prairie
tribal mason
#

Your tryhackme username is Mahmoud ?

vast prairie
#

yes

tribal mason
#

And did you download the configuration file from the access page?

vast prairie
#

mahmoud.a

#

yes

tribal mason
#

then It should be located at ~/Downloads/mahmoud.a.ovpn

vast prairie
vast prairie
#

but still I can't

tribal mason
#

Uhh, any ideas?

broken bear
# vast prairie

change directory to where your config is, and rerun the script

vast prairie
broken bear
crystal marlin
# vast prairie

Either use the full path to it, or don't run it with sudo, otherwise ~ won't be the kali home directory

vast prairie
#

ok, I will change it from the downloads directory

long axle
# long axle

nvm i fixed it, thanks everybody for your help

vast prairie
broken bear
tribal mason
#

juun meant cd into the directory

vast prairie
#

this is where the file is and I went through readme file and did exactly the same what they mention

tribal mason
#

cd ~/Documents/THM/openvpn-troubleshooting-master/ and do ./thm-troubleshoot

scenic torrentBOT
#

Gave +1 Rep to @tribal mason

vast prairie
#

appreciated your help

tribal mason
#

thanks to juun as well

vast prairie
#

I mean appreciated every body try to help

sterile tulip
#

Morning guys , I emailed support last week for them to reset my 2FA with the info needed as it was asked from me however there’s no reply.

#

I sent a follow up email yesterday

#

I’m not sure when my request will be attended to

violet sapphire
#

not really something i need to think about to get something right, but something technical. what do i do if im trying to enter ssh password, know its correct, but it still tells me its wrong?

#

i would send a picture but discord isnt giving me the option to do so

indigo flame
sterile tulip
indigo flame
#

the support team is not replying emails or helping :/

bronze vale
zinc trail
scenic torrentBOT
#

Gave +1 Rep to @bronze vale

pastel tinsel
#

@eager fulcrum

marble breachBOT
#

:hammer: Molduga#1828 has been banned.

haughty moth
#

rootme room not working well its not showing the uploads file after uploading a rshell file

weary spindle
#

Can I have your target ip?

haughty moth
haughty moth
#

10.10.238.148

weary spindle
#

If you've terminated your machine, that won't work.

naive dust
#

Hello, need some help with paiement i send many tickets and i haven't response, can you help me ?

glad oyster
bronze vale
zinc trail
# bronze vale I think I see your email, I know why you haven't been responded to. I'll get bac...

hello there , is there any update you got on that matter ?

i know you guys are over whelmed , i know sending multiple tickets at the same time won't solve the problem , i am just trying not to let my case some how get cold and be forgotten

as i am now unfortunately the subscription stopped due to the problem with the payment , and currently i am halted and can't study and entering the new pricing .

thanks in advance and waiting for any update from you

scenic torrentBOT
#

Gave +1 Rep to @bronze vale

naive dust
# bronze vale Please don’t spam tickets, it won’t help you get support any faster

I have two problems, the first: my subscription could not be renewed, the second I paid with another card thinking that it was my card that had a problem, result: payment accepted, account debited, but subscription not activated. In addition, you change your rates (which I don't mind paying more given the work behind the platform) but I receive an email that says "price guaranteed until October" and finally I find myself paying the new price. to the subscription problem. Not cool... I'm waiting for a return from you, knowing that I've been waiting for a week now without news.

bronze vale
#

I understand that you’re upset, we are currently running an event hence the slow response time

naive dust
indigo flame
#

@bronze vale we will get at least half or 1 month free due to this lag in the help, i mean for the people we have problems with the 2FA and not getting response quickly?

sharp zephyr
#

Has anyone had luck installing parallel tools within a parrot OS virtual machine? Is this the right place to ask this and Is it OK that I already asked it in general chat? Thx!

tacit spade
#

Hello I'm trying to scan subdomains and dnsrecon isn't working, saying it needs netaddr even tough I just installed it, it's not the first time something like this happens to me in a VM, any idea why ?

#

Nvm I needed to export a pythonpath

tacit spade
#

Okay something is constantly reseting pythonpath without exiting the machine

zinc trail
exotic dove
#

my VM been converting for 5 hours now, I tried reuploading and stuck at 0 for the second time :\

unborn forge
#

I'm currently in the room : OWASP Top 10 - 2021, task 8 "connect to the web application at http://MACHINE_IP:81/." shows the error message
"Error response
Error code: 405
Message:Method Not Allowed
Error code explanation: 405 - Specific method is invalid for this resource"

What am I missing? Is there a workaround?
I used this command to check if there was any service running on port 81 but there wasn't any: lsof -i tcp:81

sterile tulip
#

Due to 2FA not being reset yet

weary spindle
#

Please be patient with email replies

weary spindle
sonic cave
#

Hi all, Can anybody help on below request.
I am trying to learn the Intro to Digital Forensics -> Practical Example of Digital Forensics under TryHackMe,

In this I am stuck and unable to find the address using GPS coordinates, I tried Milk St - but its not accepting the answer for below question:

Using exiftool or any similar tool, try to find where the kidnappers took the image they attached to their document. What is the name of the street?

weary spindle
sonic cave
#

It worked, Thank you @weary spindle 👍

scenic torrentBOT
#

Gave +1 Rep to @weary spindle

glacial hound
scenic torrentBOT
#

Gave +1 Rep to @glacial hound

mint socket
#

Why is it impossible to contact anyone at THM for support? But you sure can fill out a form for SALES. janky

mint socket
#

to what email? plus i expect chat, if they want my money im going to need to actually be able to reach someone

#
  1. prices show up as GBP not USD, with no obvious way to fix it, and, no instructions on how to apply a student discount to the membership
#

i "Was" considering trying to get my company to get us a team membership for 14 pen tests, but im second guessing that about now

dense bramble
#

!docs student

sharp bisonBOT
dense bramble
#

As for the prices, they're based in the UK

mint socket
#

well a coworker logged in and he see's USD

#

soooo there's that

weary spindle
#

That's a visual bug

mint socket
#

not that its a HUGE deal but if im going to give my money, i would expect even the simplest of things to work appropriately

weary spindle
#

If you log in with an incognito window it will be the correct nomination.

mint socket
#

If something so simple is a visual bug, what deeper bugs are in their content?

#

ok but, i really shouldnt have to do that

#

esp when a coworker, living in the same state as I, see's USD by default

weary spindle
#

It shouldn't change the price you pay, from my understanding.

mint socket
#

No i get that, but again, something so simple, what REAL issues are under the hood?

weary spindle
#

And it's not impossible to contact support.

#

Their reply times right now are slow due to the event that is currently on.

mint socket
#

Yea but if i have to email and wait, then I think i can find other places that want my money in exchange for good support. crazy i know right

weary spindle
#

You don't need to E-mail and wait to open a personal account.

#

It's just the procedure for Business/educational as they are different.

#

With different structures of support.

mint socket
#

ok other issue, I signed up with my email but i have an EDU email, i dont want to create a whole new account

#

so whats your fix for that?

weary spindle
#

You can swap your E-mail.

mint socket
#

ok but i dont want to SWAP, i dont check the EDU very often

weary spindle
#

Then you won't benefit from the student discount.

mint socket
#

its mostly college spam about stupid events

#

ok, i guess ill shoulder surf my buddy on his THM, and ill get HTB and he can shoulder surf mine. problem solved

#

good way to discourage members, awesome business model

weary spindle
#

I've tried giving you solutions and stuff, but you're coming across to myself as rude, so I'll CC @bronze vale in this.

mint socket
#

ill also tell work we want HTB not THM. this has been productive

#

im rude beacuse no one cares about quality support

weary spindle
#

Support cares.

#

THM care, hell, I care.

#

But if you're going to be rude to me, I'll be less inclined to try and help.

#

And I'm not even staff or a mod.

mint socket
#

1 customer down, and a potential 14 user business membership out the door.

bronze vale
# mint socket im rude beacuse no one cares about quality support

We do care about customers, very much so. Our business model is directed towards the community 🙂

I’m sorry that you haven’t been contacted yet. We are currently still implementing the sales functionality on our website.

If you have contacted support, you will be sent to me (which we are currently on a delay due to an influx of emails from the event).

If your country cannot be detected on the website, you will be defaulted to UK, which shows GBP prices, you will need to update your country through the API #site-support message

The Discord is community ran, although employees are active here, advice you received may be inaccurate due to in being from community volunteers.

#

Would you be able to explain what you mean by ‘open a chat’? If you’re referring to the site chat box, DM me your username and I’ll ask someone to get in contact with you via it

#

Oh they left

weary spindle
#

I was about to say.

Many apologies if the information from myself was incorrect.

bronze vale
#

Nope it’s fine, it was just to diffuse the situation

#

Funny that they refuse to use email to contact, like most business don’t use an email smh

dense bramble
#

There aren't many companies out there in the world that have instant support without waiting a few days, so I'm not sure why people keep acting like they're owed it

bronze vale
#

Fr

glacial hound
#

This user clearly came here to bash us; no help would have changed their mind ^^

bronze vale
#

Can’t win them all 🙂

untold lake
#

im looking for coders, who's availible?

broken bear
untold lake
#

I need code for an e-commerce website and it's mobile app

broken bear
untold lake
#

It's a start up thats why i came on here.. i'm willing to pay the labour costs

zinc trail
#

Do you know when that event about the payment will end , and the support can manage to reply to the emails?

I have been waiting since the 11th of may which is the day of my subscription for this problem to solve .

My subscription ended since the system couldn't renew , and now entered the new pricing , of course I didn't resubscribe waiting for the support to reply first to see what happened , all these days are days lost for not studying .

At least , please if some one reply to me that I would be compensated for these lost days , and have the old pricing with the new added lost days

I also sent two emails to the support , also no reply , and I knew from here that support is having an event trying to solve a problem , and I have to wait for this to pass

If some one please would contact me ,at least that you are solving this problem , send my email , review my account see what is wrong , any thing , I would be appreciate it .

Waiting for a reply .

And thanks in advance

Sorry for the long message , I am just trying to find a solution with you and get to know more information from you

zinc trail
weary spindle
#

I see.

I know the E-mail is going to be heavily backlogged due to the event, which won't even stop until June.

Don't send anymore in as you'll just push yourself back down the queue.

zinc trail
weary spindle
#

Event ends 5th of June, you'll hear back before that.

zinc trail
# weary spindle Event ends 5th of June, you'll hear back before that.

Is there any thing on my end I have to do ?

That is actually what I want , to somebody guide me with the current situation we all having , whether I can't subscribe , or the support team having an event , on what to do .

Since it will be at least ten days without studying , can I subscribe with the new pricing and the support can some how retrieve the old pricing back plus the lost days in the future .

Or do I have to wait all these days and the support team will reply to me eventually and try to resolve it ?

I am very sorry for these kind of questions , but I am afraid that the problem will not be resolved and my problem shall get cold with all this I could not get my old pricing back

weary spindle
#

I don't think you'll get the old price back.

zinc trail
#

Please , any one from the official support team or official thm staff here reply to me to get my point straight and to know what I shall do

Please , if there is a possibility , you can DM me if you want or please ping me here , to elaborate more on the matter

naive dust
#

Hello. I'm developing my first room for my capstone project for my cybersecurity program. I'm prepping vm's for upload, and I'm just hoping someone can help me figure out what they need to get RDP configured in such a way that when someone deploys my box, they can actually control it in the browser. Does anyone have experience with this?

#

This is all it says on the page - "Control your Machine In-browser
Let your users control your machine directly in their browser (this also removes any OpenVPN requirement). Email us the credentials (whether this be for SSH/RDP/VNC) and we will add this functionality for you."

bronze vale
chilly falcon
#

hello when i try to open the http://10.10.48.70:5000/ to access the webapplication in sqli lab , the page with given url doesnot load and i encounter with " This site can’t be reached 10.10.48.70 took too long to respond. " error on my browser. what 's the problem ?

neat flax
#

Hi, I want to ask about the acceptable payment for purchasing vouchers.
Does TryHackMe accept bank transfer or invoice?
I want to purchase vouchers through a company(company in Japan) I work for.
I'm not sure if this is the best channel to ask, but if someone could help me out😢

formal shore
#

how to use try hack me in china

#

openvpn doesn't work

#

Is there any other way?

weary spindle
#

The attackbox.

Is the only thing we can advise on, we cannot help get around VPN blocks.

sterile tulip
#

I didn’t get an answer or a follow up email and I understand you guys running an event too but I just paid another month without using it.

weary spindle
balmy dune
#

Hi! I want to please follow up regarding a ticket created a week ago about premium subscription not being activated. Is there any update/news regarding this?

balmy dune
#

yup, and Jabba helped me out. Thanks!

weary spindle
#

🙂

crystal flame
#

Red Team Capstone Challenge - .89 is no longer reachable from attackbox, after one hour

shadow helm
#

is VPN no worky?

#

I tried sudo apt-get purge --auto-remove openvpn and sudo apt install openvpn

weary spindle
#

VPN works fine on my end

shadow helm
#

2023-05-25 14:01:53 ERROR: Failed to apply push options
2023-05-25 14:01:53 Failed to open tun/tap interface
2023-05-25 14:01:53 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2023-05-25 14:01:53 Restart pause, 300 second(s)
^C2023-05-25 14:02:26 SIGINT[hard,init_instance] received, process exiting

shadow helm
#

openvpn

weary spindle
#

That's not what I meant.

#

Are you trying to connect to a regular server, or network?

shadow helm
#

also recently started getting the zsh error recently and forgot how to get it to go away

#

zsh: corrupt history file /home/kali/.zsh_history

#

and I believe VIP from my home computer using a linux vm

#

West Server

weary spindle
#

rm /home/kali/.zsh_history

shadow helm
#

one of the rooms

weary spindle
#

Have you tried changing server?

shadow helm
#

the Complete beginnger added the OWASP top 10 2021 so I wanted to finish that before completing the SOC path, and will try that now!

#

Switched to East Regular and same loop

#

I deleted and redownloaded the file a few times now

weary spindle
#

Can you post a pic of the output?

shadow helm
#

it worked after switching to west regular

weary spindle
#

Ah, that's good.

shadow helm
#

at work will do in a moment

weary spindle
#

You're in a work network?

shadow helm
#

well I work helpdesk from home, but Im using my personal

shadow helm
weary spindle
#

Can you do ip a s

shadow helm
#

Usually the terminal stays without the command line and I open a new terminal because it does not let me enter commands and I keep the openvpn terminal in a seperate tab

#

owasp_top10_2021_v1.2 and this machine not letting me get onto the main site. port 85 will load for a different task but not the main site

#

I think it just loaded after 5 minutes

#

Im assuming VIP server would run better lol

shadow helm
#

oh

#

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 08:00:27:50:4c:14 brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute eth0
valid_lft 72733sec preferred_lft 72733sec
inet6 fe80::a00:27ff:fe50:4c14/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
link/none
inet 10.2.47.176/17 scope global tun0
valid_lft forever preferred_lft forever
inet6 fe80::782:2e29:652b:f988/64 scope link stable-privacy
valid_lft forever preferred_lft forever

green ingot
#

Hi

#

I got an issue I can't connect to machine

#

I tried all the ways to connect but I could not connect

north hare
#

hi guys i have a problem when i want to connect to openvpn to solve a machine on try hack me. here is the error please help
2023-05-26 00:18:51 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.

green ingot
#

IDK what is the problem but I cannot connect to this machine I tried all the possible ways (I tried another machine and it is worked perfectly )
https://tryhackme.com/room/opencti

elder spindle
north hare
#

linux bro

#

ive been trying to fix this for 24 hours now

#

ive tried everything

elder spindle
#

did u try the tryhackme troubleshooter out?

north hare
#

what is that ?

#

no i didnt

elder spindle
#

hold up

glad oyster
#

!vpnscript

sharp bisonBOT
elder spindle
scenic torrentBOT
#

Gave +1 Rep to @glad oyster

elder spindle
#

yeah this is what i meant

#

make sure to run it as sudo

north hare
#

how can i install a script ? Download the thm-troubleshoot script. Saving it to the same place as your OpenVPN configuration pack (~/Downloads by default) is advisable, but not essential.

elder spindle
#

and the script has to be in the same location as your ovpn file

north hare
#

what command line to use to install the script

elder spindle
#

curl https://raw.githubusercontent.com/tryhackme/openvpn-troubleshooting/master/thm-troubleshoot -o thmTroubleshoot.sh

#

then you can move the script whererer you want

#

as i already mentioned it HAS to be in the same location/folder as your ovpn file

#

then

#

chmod +x thmTroubleshoot.sh

#

sudo ./thmTroubleshoot.sh

#

and follow the instructions

#

basically always typing Y (yes)

north hare
#

brother if this works then you have basically saved my life

#

just give me a second

elder spindle
#

i hope it does

#

always worked for me

north hare
#

sudo ./thmTroubleshoot.sh

elder spindle
north hare
#

no i typed that by mistake

elder spindle
#

wym

north hare
#

can i send you a picture of the result

elder spindle
#

yea

glad coyote
#

does "Git Happens" room http suppose to not work? ("Host seems down")

elder spindle
#

do you mean the port 80?

shadow helm
#

I had restarted this OWASP Top Ten box 10 times and its still not working

#

works when I use the attackbox but not my vm.... hmmm

shadow helm
#

2023-05-25 20:20:58 Initialization Sequence Completed
2023-05-25 20:20:58 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 58
2023-05-25 20:20:58 Timers: ping 5, ping-restart 120
2023-05-25 20:20:58 Protocol options: explicit-exit-notify 3
2023-05-25 22:57:46 Authenticate/Decrypt packet error: packet HMAC authentication failed

#

maybe this is why the machine will not load or load extremely slow in my VM and only works with the attack box, I think I did not finish my update for the Kali distro

gritty verge
#

help i need help with this

#

error mounting xx/xx/x....

#

ntfs3 ntfs not configured in kernal

ashen dome
#

The same

#

@dense harness Could you check the room please?

shadow helm
#

restarted my VM today and still room not loading without attack box

dense harness
ashen dome
shadow helm
indigo flame
#

so, the support still is not helping?

tribal mason
#

@shadow helm can you try tryhackme's openvpn troubleshooting script

sharp bisonBOT
north hare
#

what is the problem and how to fix it ?

#

MTU value failed at 1000, aborting MTU check

minor badge
marble breachBOT
#

Done!

shadow helm
#

im getting the path to config wrong for openvpn

#

/etc/openvpn?

glacial hound
glacial hound
scenic torrentBOT
#

Gave +1 Rep to @glacial hound

glacial hound
glacial hound
scenic torrentBOT
#

Gave +1 Rep to @glacial hound

shadow helm
#

its set to 1290

shadow helm
#

halp

#

should I asjust the MTU to 1500 maybe thats why its so slow and not loading

fallen bough
#

hey guys

#

i wanted to change my mac address on mac ventura and i used the command openssl rand -hex 6 | sed 's/(..)/\1:/g; s/.$//' and sudo ifconfig en0 ether <MAC address> to change it, but after trying to confirm it through ifconfig it is showing that it is changed but in normal wifi settings it is shouing the old mac address. so has it changed??

slim shadow
#

:(( 2 days...

plush bay
#

oh.... oh noes that is bad

outer flax
#

hello , i need help as i cannot connect to ovpn

#

please help

bronze vale
shadow helm
#

Troubleshooter worked great!

fresh coral
#

hello, i have a problem with my openvpn

sudo openvpn ./tryhackme.ovpn

2023-05-27 09:01:42 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-05-27 09:01:42 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-05-27 09:01:42 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-05-27 09:01:42 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-05-27 09:01:42 DCO version: N/A
2023-05-27 09:01:42 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-05-27 09:01:42 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-05-27 09:01:42 UDPv4 link local: (not bound)
2023-05-27 09:01:42 UDPv4 link remote: [AF_INET]18.202.168.160:1194
^C2023-05-27 09:02:08 event_wait : Interrupted system call (fd=-1,code=4)
2023-05-27 09:02:08 SIGTERM received, sending exit notification to peer
^C2023-05-27 09:02:10 event_wait : Interrupted system call (fd=-1,code=4)
2023-05-27 09:02:10 SIGINT[hard,] received, process exiting

#

i have used the thm troubleshoot script too but it dont works
[-] Script is being run as a low-privileged user
Would you like to run this script with higher privileges automatically (Y/n)? y
[+] Re-running with root permissions
[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[-] Using outdated switch for ciper negotiations. Attempting to update...
[+] Successfully updated cipher switch! Please connect to the vpn using the following command:
sudo openvpn ./tryhackme.ovpn

#

can anyone help me please

young cloud
#

I am having issues connecting via ssh to tryhackme. I have established openvpn and am able to ping the IP address but when I try to connect via ssh, it says permission denied (publickey). I have already set up the ssh keys as well so i am confused now how to solve this

crystal marlin
crystal marlin
young cloud
#

the owasp top 10 2021

crystal marlin
young cloud
#

Task 15 Vulnerable and Outdated Components - Lab

#

this one

crystal marlin
young cloud
#

i am using kali linux and i am not able to access the machine? my plan is to run a python code on the terminal?

#

sorry I am a beginner at this

crystal marlin
#

Simply being able to ssh into the target machine would defeat the purpose of this task 🙂

young cloud
#

understood

#

let me find another way then thanks

outer flax
#

2023-05-27 14:48:25 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2023-05-27 14:48:25 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2023-05-27 14:48:25 OpenVPN 2.6.4 aarch64-apple-darwin22.4.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD]
2023-05-27 14:48:25 library versions: OpenSSL 3.1.0 14 Mar 2023, LZO 2.10
2023-05-27 14:48:25 TCP/UDP: Preserving recently used remote address: [AF_INET]3.7.33.194:1194
2023-05-27 14:48:25 Socket Buffers: R=[786896->786896] S=[9216->9216]
2023-05-27 14:48:25 UDPv4 link local: (not bound)
2023-05-27 14:48:25 UDPv4 link remote: [AF_INET]3.7.33.194:1194
2023-05-27 14:48:25 TLS: Initial packet from [AF_INET]3.7.33.194:1194, sid=612f1c5a 2a059612
2023-05-27 14:48:25 VERIFY OK: depth=1, CN=ChangeMe
2023-05-27 14:48:25 VERIFY KU OK
2023-05-27 14:48:25 Validating certificate extended key usage
2023-05-27 14:48:25 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-05-27 14:48:25 VERIFY EKU OK
2023-05-27 14:48:25 VERIFY OK: depth=0, CN=server
2023-05-27 14:48:25 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-05-27 14:48:25 [server] Peer Connection Initiated with [AF_INET]3.7.33.194:1194
2023-05-27 14:48:25 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2023-05-27 14:48:25 TLS: tls_multi_process: initial untrusted session promoted to trusted
2023-05-27 14:48:26 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2023-05-27 14:48:26 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0

#

can anyone help me with this situation

#

i cannot connect to tryhackme

sharp bisonBOT
weary spindle
#

Run that script, save it to the same directory as your ovpn script.

outer flax
#

still not working

#

usage: sleep seconds
[+] Stable internet connection
usage: sleep seconds
[+] OpenVPN is installed
usage: sleep seconds
thm-troubleshoot: line 231: ip: command not found
[-] tun0 interface does not exist
usage: sleep seconds
Would you like the script to attempt a connection automatically (Y/n)? n

Please connect to the vpn using the following command:

#

tried y and n both options

weary spindle
#

Run them both together.

outer flax
#

how

weary spindle
#

Start the VPN in one terminal, start the troubleshoot in a different one?

tidal shuttle
#

I am also having VPN problems, seems to be a TLS error.
2023-05-27 11:12:25 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194 2023-05-27 11:12:25 Socket Buffers: R=[212992->212992] S=[212992->212992] 2023-05-27 11:12:25 UDPv4 link local: (not bound) 2023-05-27 11:12:25 UDPv4 link remote: [AF_INET]18.202.168.160:1194 2023-05-27 11:13:25 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2023-05-27 11:13:25 TLS Error: TLS handshake failed 2023-05-27 11:13:25 SIGUSR1[soft,tls-error] received, process restarting 2023-05-27 11:13:25 Restart pause, 1 second(s)

#

Also, I can't redownload my VPN config, I get a 404

old idol
#

VPN-problems here today also:
2023-05-27 12:15:38 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2023-05-27 12:15:38 TLS Error: TLS handshake failed

It doesnt work with EU-3, but when changed to EU-2 it works!

weary spindle
#

!vpnscript

sharp bisonBOT
tidal shuttle
#

I tried that, the problem still persists

old idol
#

Changed to EU-Regular-2, that worked for me

tidal shuttle
#

Also worked for me, thanks

brisk carbon
#

Hello, how can I do to verify this Discord account instead of another one which is already verified here?

weary spindle
brisk carbon
# weary spindle You'll need to ask a nod, nicely.

Thank you.

Is there a <@&612305984752451594> available to unlink my old Discord account from the Token so that I can link this new account? I can send you a private message from my old account for verification.

scenic torrentBOT
#

Gave +1 Rep to @weary spindle

wise blade
#

Changing to EU-Regular-2 worked for me too, thanks

potent arch
#

hi guys! For some reason i can't launch a pickle rick machine. who knows why?

naive dust
#

Linux Fundamentals Part 3, Processes
At QUESTION 4 : Locate the process that is running on the deployed instance (ip_address). What flag is given?

No process matching the answer.
The answer is supposed to be THM{PROCESSES} (according to a youtube tutorial).
However, my machine didn't have any processes that match the answer.

https://pastebin.com/u7MiDPrX lists all of the processes on the deployed machine.
I was connected to the correct IP, using SSH.

bronze vale
floral plinth
#

Good day,
I was wondering if the good people here could help me out with an issue that I have?

I have difficulties connecting to you via OpenVPN.
Tried reinstalling OpenVPN, and all possible error fixes on that end.
Connecting to other places works just fine, just not to your servers.

Tried running the troubleshooting script you guys have.
Everything works out, then it reaches
"MTU value failed at 1000, aborting MTU check". Red text. Then it says something went wrong and that I should ask around here for help.

How do I solve this issue?

onyx solstice
#

Hello, I had to switch to EU2 as I couldn't connect to EU3 (from different computers and different ISP) as I usually do

glad oyster
#

@tardy vessel What happens if you do sudo openvpn config.ovpn

tardy vessel
#

I fixed it dw

proud vector
#

hi please help me

#

anyone is here from support team tryhackm

#

my account cannot login , because i lose 2 factor authentication app

#

hi plz

dense bramble
#

!email

sharp bisonBOT
proud vector
#

they cannot answer me

#

i sent message to email , please answer

glad oyster
#

Hey, when did you send your email?

proud vector
#

before 7hrs age maybe

glad oyster
#

That'll be why then, did you read the automated message that gets sent to you when you contact them?

#

Keep in mind that there's also an event going on at the moment so it might even be more delayed

elfin lotus
#

hey does anyone have an idea why I can't change my avatar on tryhackme? Im getting the error "Select an image file to upload your avatar!" if I try to upload a jpg I also tried different file sizes

elfin lotus
scenic torrentBOT
#

Gave +1 Rep to @plush bay

plush bay
#

no problem

willow patio
#

I can’t send photo in here

broken bear
sharp bisonBOT
willow patio
#

I’m using this command …. openvpn /home/kali/Desktop/iliketohack.ovpn

glad oyster
#

!vpnscript

sharp bisonBOT
glad oyster
#

Try run this and see what happens

willow patio
#

Event not found

glad oyster
#

Huh?

willow patio
#

Zsh: event not found: vpnscript

ionic parrot
#

Check out the page that Jayy linked, the steps are in there

glad oyster
#

Have you bothered to go to the link and read the instructions there?

willow patio
#

Done that’s for help it works now

#

So now when I need to connect is it just openvpn iliketohack.ovpn

glad oyster
#

correct

fallow raft
#

Hi All, I am trying to connect with rooms like Breaching AD & LateralMovementandPivoting. After few hours of troubleshooting I am here --

  1. I got the VPN for Lateral movement room running.
  2. Added DNS entry to the /etc/resolv.conf file . the command given on the page systemd-resolv does not seem to work.

I am including screenshsots of how the resolv.conf look like & the error I am getting. I'd appreciate if some one coud assist for a resolution.

#

Do I have to restart something ?

#

I have the OSCP exam in a few days and losing time on fixing VPN issues is not something I can afford at the moment. Can someone from THM staff advise on resolving this

#

this is the troubleshooting script output

#

they are asking me to reach out to Discord support , who and where should I be contacting 😦

glad oyster
#

Have you edited the hosts file?

fallow raft
#

Reading the forum posts related to the room I can say I am not the only who faced issue while connecting and a lot of people are spending more time on fixing the connectivity rather than learning stuff. While THM has good material overall, as far as networks are concerned, this needs an improvement. I would rather be switching to HTB or OffSec, unfortunately.

fallow raft
# glad oyster ~~Have you edited the hosts file?~~

Hey Jayy, I am trying a lot of sulutions here . I 'll possibly add that too to the list. I noticed soemone in the forum mentioned that pings would work but not nslookup , adding to the hostfile might hep. thansk for pointing that out

#

But seemingly, either the networks are pretty faulty or lack of due support makes the student feel so. Can you advise me if possible, how can I contact THM staff ?

glad oyster
#

@bronze vale

fallow raft
#

Even after adding to the /etc/hosts file nslookup gives the same message

#

Is there any group for administrator so any of the only staff member may help ?

glad oyster
#

What's the output of the system resolve command?

fallow raft
#

COuld you pelase reply to my comments to I get a notification as I am looking at a lot of material right now and don't want your message to go unnoticed. Thanks.

#

@glad oyster it's not recognized, am I missing something ?

glad oyster
#

Replace it with resolvectl

#

Did that work?

#

@fallow raft

fallow raft
#

Hi, as I mentioned previous please tag me or use the 'reply' option so I get a notification. No it doesn't work.

#

I just don't want to have you waiting for a response from my end , I hope you understadn and I appreciate all the help you're extending at the moment.

#

@glad oyster

glad oyster
glad oyster
#

install it!

#

That's why it's not working, because resolved isn't installed on your machine

#

@fallow raft

fallow raft
#

you mean resolvectl ?

#

@glad oyster

glad oyster
#

resolvectl is the command you use to manage it

#

sudo apt install systemd-resolved

fallow raft
#

@glad oyster

glad oyster
#

Yup so now run the command again

#

The one given in the room

#

resolvectl --interface lateralmovement --set-dns $THMDCIP --set-domain za.tryhackme.com

#

@fallow raft obviously replacing the IP

glad oyster
#

So afaik technically the command on the room description is outdated, but if your taking OSCP your gonna have to learn to research when you get errors like the command not being recongised

Also I'm doing this from a plane about to take of so if I don't reply it's because I have no signal but that command should have sorted it

fallow raft
scenic torrentBOT
#

Gave +1 Rep to @glad oyster

fallow raft
#

I'll see to it. have a safe flight.

dense bramble
fresh coral
#

when i start the openvpn, then i get this

2023-05-28 07:53:13 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-05-28 07:53:13 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-05-28 07:53:13 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-05-28 07:53:13 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-05-28 07:53:13 DCO version: N/A
2023-05-28 07:53:13 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-05-28 07:53:13 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-05-28 07:53:13 UDPv4 link local: (not bound)
2023-05-28 07:53:13 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2023-05-28 07:54:13 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2023-05-28 07:54:13 TLS Error: TLS handshake failed
2023-05-28 07:54:13 SIGUSR1[soft,tls-error] received, process restarting
2023-05-28 07:54:13 Restart pause, 1 second(s)
2023-05-28 07:54:14 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-05-28 07:54:14 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-05-28 07:54:14 UDPv4 link local: (not bound)
2023-05-28 07:54:14 UDPv4 link remote: [AF_INET]18.202.168.160:1194

#

and if i start the trouble shoot i get this

[-] Script is being run as a low-privileged user
Would you like to run this script with higher privileges automatically (Y/n)? Y
[+] Re-running with root permissions
[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
-Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
-Switching servers, then regenerating your OpenVPN config
-Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting

fallow raft
dense bramble
#

you can also add nameserver 1.1.1.1 to ensure you have internet access

fallow raft
dense bramble
fallow raft
#

yeah

dense bramble
#

for that one you need to edit the file and change the second line I think from dev breachad to dev tun

#

it really doesn't like the custom name for that network

fallow raft
#

Yeah I am going to try that out. But I believe this should be mentioned on the page ?

dense bramble
#

it's not on the page cause it seems to only be an issue on VMs, but it's come up a lot in #breaching-ad

fallow raft
#

Yeah I got one step ahead

#

tun0 is up

#

moving on to update the resolv.conf file

#

@dense bramble

dense bramble
fallow raft
dense bramble
fallow raft
scenic torrentBOT
#

Gave +1 Rep to @dense bramble

dense bramble
fallow raft
#

I need to make a note of the instruction s

#

the one on the room task do not work at all. A generic question, is the room stable otherwise and I saw that resolve.conf would revert after each restarts

dense bramble
#

you can follow the same instructions for the other AD networks

fallow raft
#

yeah, I will. Much appreciate everyone who has come out to extend their support.

dense bramble
#

it's a good place to come to for advice and troubleshooting 🙂

fallow raft
#

Yeah man it's been few hours yesterday and today that I've been struggling to get some support. And finally it's seemngly OK now with the support I got. I'll take a short break and then put my brains on the actual room

#

THM shoudl definitely be putting htis stuff ont eh room istself will make life easier for a lot of people

dense bramble
#

that part can be frustrating, but the content in the network rooms is definitely worth it, lots of useful tools and techniques for AD

cunning siren
#

what should someone do if they get an error from a parser when testing for xxe?

glad oyster
#

@fallow raft glad you got it sorted, quick question - does systemd-resolve work?

frank quiver
#

!vpn-script

#

!help

#

!vpn-troubleshoot

glad oyster
#

!vpnscript

sharp bisonBOT
frank quiver
scenic torrentBOT
#

Gave +1 Rep to @glad oyster

fallow raft
scenic torrentBOT
#

Gave +1 Rep to @glad oyster

fallow raft
#

but not the Lateral movement as of now

#

with the exact same configuration

#

I just change the /etc/resolv.conf file to add the thmdc IP

#

Is it possible that the problem is at THM's end ? If I set the DC IP for LM&P room I get below error :
;; Got recursion not available from 10.200.48.101, trying next server Server: 192.168.242.2 Address: 192.168.242.2#53

After which it switches to the other entry.

glad oyster
#

I'm not sure, but is the systemd-resolve command still not recongised, just to double check?

fallow raft
#

I am looking fo rthe right parameter name for --set-dns as set DNS is not recognized by resolvectl

glad oyster
#

👍

fallow raft
#

?

fallow raft
# glad oyster 👍

So I made an entry to the hosts file and finally some progress as I can see the ping response now. The room says I cannot doa n nslookup directly and need to go to the website for checking connectivity, et's see.

#

Room appearing connected as well.

#

Seesm liek I am close but the site to fetch creds is not loading up

weary spindle
#

cat /etc/resolv.conf

fallow raft
weary spindle
#

The network is on, right?

fallow raft
#

Oh you mean on the portal

#

le tme see

fallow raft
weary spindle
#

I'm connected, I can't do nslookup.

but I can connect to the website fine.

fallow raft
#

yeah the room says nslookup won't work

#

but we need to go to the creds site for fetching the credentials

weary spindle
#

I know.

I was informing you that it's not THM's end.

fallow raft
#

Ok I see that, thansk for confirming. I don't know what's missing here.
I added this host file entry as well

weary spindle
#

If all else fails.

You can leave the room for 10 min(s) then re-join, could give you a new subnet.

fallow raft
#

yeah, thanks.

primal fjord
#

hello, I cannot access the machine in the linux fundamentals 1 room:

#

I tried different browsers now and using my mobile data instead of my home network

fallow raft
#

@glad oyster @weary spindle

First of all thanks guys for all the time and energy you put into assisting me. I really appreciate it.

While I was trying a lot of stuff, still everythime I ran the resolvectl I cannot find the DNS associated with the interface that the VPN pack on lateral movement created. So I touchbased with the OffSec guys as well and maybe rephrased my queary a bit better to how to associate a DNS with a specific interface. Here's the results -->
sudo resolvectl dns <iface> <server> (make sure systemd-resolved is installed prior to doing so, and the associated service is enabled and running)

Giving this command finally at my end
sudo resolvectl dns lateralmovement 10.200.48.101

Now when I check the resolvectl output (the second screenshot) I can find the interface mapped correctly to the DNS server and the website pops right up. I still don't know what messed it up in the first go but putting n the details here in case someone faced the same issue in future.

scenic torrentBOT
#

Gave +1 Rep to @glad oyster

topaz jackal
#

Hello i have a problem regarding ovpn file. First it wouldn't connect to vpn so i regenerated it in access page.and while trying to download it reloads to 404 page saying it was lost matrix..what should i do?

sharp zephyr
#

Im trying to disable 2FA on my account but when i click the "Yes, Im Sure!" button nothing happens. Ive tried safari and brave browsers.

#

im disabling so i can reenable with another app

sharp zephyr
proud vector
#

Hello , i have issues with login Two factor Authentication , because i lose the app to connect .

#

i send message to , support email . still didn't reply

#

about 24 hrs

topaz jackal
#

@sharp zephyr At first it wouldn't connect from the linux .so i deleted the ovpn file and regenerated it on website, now while clicking download it goes to 404 page. And i can't download it

sharp zephyr
#

hmm. im going to try that and see what happens

#

@topaz jackal have you tried changing the VPN server (from the vpn server drop down near the regen. button) and then regenerating, then downloading?

#

and refresh the page before you do any of that