#site-support
1 messages · Page 33 of 1
openvpn application is almost completely unrelated to a virtual machine
Then why tf did it tell me download it?
You download the ovpnp profile so you can connect to the tryhackme network.
Yeah that's what I did
That's what a VPN does. It allows one host to be on the same network as other devices, due to the VPN connection.
It's not a virtual machine.
Crap
It can run on a virtual machine, just like it can on your mobile device, laptop, desktop or server, but it isn't a virtual machine.
Sooooo what the heck was the SSH that I found then???
Why were you scanning an IP address you didn't have permission to scan?
I DODNT KNOW
I SAID I THOUGHT IT WAS THE VIRTUAL MACHINE
Shit was CONFUSING
But wait what was that SSH that I found?
In the usernames for it
You can do without the caps. At this point, I'm going to recommend that you follow some basic ethical cybersecurity things, before you get your self in trouble.
- Don't scan things without permission; it some areas of the world, that constitutes a cyber attack and can have legal ramifications.
- Don't try to bruteforce random SSH ports you find open. This is also illegal in some areas, and lets say you got access to that machine via SSH: You've definitely illegally gained access to a system you don't have permission to access.
Ok I'm sorry I didn't know?
But can you tell me what were those SSH usernames that I found
They are just user names.
Okay
If you say it's a vulnerability, what's the impact of disclosure?
Probably nothing since you can't log in with the SSH it might be using a special key
hey im trying to run whois on attackbox anyone know why network is unreachable
Anyways how can I actually start hacking safe virtual machine
IIRC non-subscriber attackbox does not have internet access
oh okay so i run this on my own vm?
Okay I think it's a bug not a vulnerability
do you know what a bug is?
Yeah
you should be able to run it from any machine that has internet access. There are also web front-ends for whois and dig, as well
Please tell me what you think a bug is
okay thanks, it was weird on windows but ran fine on my kali linux machine
Wait it's an attacker box doesn't have internet access how can we safely hack into it???
A bug is a defect that results in unintended behavior. So is brute forcing a service that happens to have a pair of names you tried a bug?
#start-here Please go try some of these beginner rooms. At this point, either you are completely ignorant or trolling. Either way, this isn't productive.
i love this guy @visual minnow stop procrastinating and learn, not everyone in this server going to jail just dont scan random networks and only target IP's that the website gives
Ok
Huh?
i meant try hack me
sorry i was using that earlier i get them mixed
In the Nessus room, I did the scan but it came up with no results. Am I missing a step or something?
without actually subscribing to the rooms but just reading through them to get an idea of the stuff the challenge assumes you have experience with, it doesn't look that hard tbh, but it introduced me to new hacking concepts which i thought tp be very interesting but I'll do them on my own pace, not rush into it for the challenge. Particularly cool was the one were you look up a known hacker group, and then use their methods to frame them for your attack haha I saw this in a netflix series once where a kid hacked a company, but made it look like it was hacked from North Korea. Nobody suspected a thing if he didnt felt guilty and confessed, he would have gotten away with it.
Me on the other hand with my hacking/pen testing knowledge would make way too much noise and leave tracks everywhere probably, I really need to study up covering my tracks and not getting detected.
THM and similar training sites are ideal for that, you're allowed to make mistakes and fck up, no harm done, only thing hurt is your pride maybe 😄
that's one of the many things the red teaming path teaches you
Anyone else having issues /w SSH & FTP connections to THM vm's? All my connection attempts hang (across multiple rooms, and have restarted the vm's a few times) I check wireshark when im trying SSH, Im sending packets but getting no response. I've tried a device on my local network and it seems to be going through, but not through the OpenVPN connection... Its the same for FTP. HTTP does not seem to be having issues.. I have no host firewalls blocking anything...
Just curious if anyone else is having issues.. (im new here, so im not sure if this is the right channel...)
I believe that's just the theory in the first module 🥲 the real fun starts in the Initial Access Module
yes, I had the same issues using a VM, then I switched to kali on a raspberry pi and that fixed it, but the ARM architecture also gave problems, what works best is having a linux laptop with the tools installed and use that OR if you can handle the sluggishness of the attackbox, then just use the attackbox, never any connnection problems to ur target that way
Launching an attackbox now, didn't think of it before... I've been running kali in a VM so that might be a factor.. Thanks!
Gave +1 Rep to @sweet jolt
Hm 🤔 The Attackbox seems to exhibit the exact same behavior... I don't believe its isolated to one room... I suppose ill try another room and see if the issue persists..
If its on your vm, it could be your mtu.
'Sudo ip link set dev tun0 mtu 1200'
Try that command in a terminal, if you feel ssh hangs.
Even with an mtu of 1200 it still gives no response..
this might be a little unrelated to THM but someone please help me get rid of wifipumkin3 on my kali machine there is no uninstall in the folder but its annoying as crap and I do not know how to rid of it
you want me to ask it there?
Yes, this is for TryHackMe site support:)
alright thank you 🙂
Hello everyone,
I'm currently participating in a TryHackMe CTF and encountering an issue while trying to connect to a website on the virtual machine provided by TryHackMe. Unfortunately, none of the following troubleshooting steps have resolved the problem for me:
- Checked my internet connection, which is stable.
- Cleared browser cache and cookies.
- Disabled VPN and proxy.
- Temporarily disabled firewall and security software.
- Tried accessing the website using different browsers.
- Restarted the virtual machine provided by THM.
Despite these attempts, I am still receiving a "connection has timed out" error when trying to access the website from within the virtual machine using Firefox.
Any suggestions or insights would be greatly appreciated. Thank you in advance for your help!
@upbeat bloom ⬆️ see @heady crest message
this is my openvpn file
ah... update your openvpn or kali install to get the newest version of openvpn
you are quite a few versions behind
if that is not something you can do you would have to change data-ciphers to cipherin the config but that is the worst solution in this case
you are currently on openvpn 2.5.7.... newest released is 2.6.x something
sorry rcp but that assumes you run the 2.6.x series of openvpn and shivamkr is obviously running 2.5.7 from their log above
im updating it
nice... good luck and hope it works afterwards
Oh ok shadow. Gotcha!! I thought running that script in his machine will give him a clear idea of what was the issue.
it would in nearly all instances... this is just one of those super rare edge cases
Understood. Thanks!!
hello,
I have a problem with xfreerdp and any other rdp client (remmina also) it's keeps disconnecting every 120 sec
Did you run the script?
I have this issue with ssh and others :(
yeah tried
maybe regen the ovpn file now... after that it should probably work
Can’t seem to connect to the DNS server in the lateral and pivoting AD room. Anyone experienced this?
Have you added the THMDC to /etc/resolv.conf ?
Am using my kali on vm
That doesn't answer my question.
Have downloaded the vpn file, connected to it changed the settings in the network config
How do I do that?
sudo nano /etc/resolve.conf
Yes I just checked and I have it there as nameserver 10.200.78.101
As shown in my network diagram
Can you send a screenshot?
Here u go
Just confirming it's at the top, and what is not working for you exactly?
Am on task 4 in the lateral and pivoting room and can’t seem to ssh into thmjmp2
Have tried nslookup thmdc.za.tryhackme.con
I get recursion error
can't ssh errors pls?
Use -v in the ssh command.
Im trying Snort Challenge - live attacks. task #2 . when i set the rule with " drop tcp any any -> any any (sid: 1000005;) " and i run the snort command to get the flag " sudo snort -c /etc/snort/snort.conf -q -Q --daq afpacket -i eth0:eth1 -A full" the VM window crashes as soon as i run it. it keeps connecting and dissconnecting till i close the vm out and open a new one. i have done this 3 times and i cant get it too work.
https://tryhackme.com/room/blue#
in this room my namp scans tell me there is no response. But on the access site is tells me Im connected. pinging 10.10.10.10 shows no response either.. theres got to be something wrong with my openvpn right?
Blue is a Windows room, it doesn't respond to ping by default as a security measure.
Do what the error tells you to do.
I just went back to another snapshot of my kali vm. apparently I had one from last week so that solved it for me
very weird though, as it has always worked perfectly so far
?
What room are you doing?
Also, if you verify you are able to send screenshots, which could be helpful for troubleshooting 🙂
!docs verify
Thank you for your response! I'm currently working on the 'lazyAdmin' room. I apologize for not mentioning it earlier.
I will send screenshots shortly to help with troubleshooting. Please note that I'm not currently on the machine, so I will be using screenshots from Google to provide visual references. The screenshots will accurately represent the steps and settings I have encountered in the virtual machine.
Gave +1 Rep to @crystal marlin
I also want to mention that the issue occurs specifically after waiting for a long time when trying to enter websites like 'cyberchef.' It seems to result in a 'connection has timed out' error.
Best to send screenshots once you are on the machine, as otherwise I'm not too sure on what the issue exactly is
I understand your point. Unfortunately, I don't have access to the attackBox machine at the moment because I don't have a premium account, and I can only enter once a day. However, I can try to provide as much detailed information as possible based on my previous experiences and the available resources.
I mean, are you trying to connect to that website you showed in your screenshot from the attackbox?
As I'm a little unsure what that site would have to do with the lazyAdmin room?
But as a heads up, the attackbox has no internet connection on free user accounts
So you can only connect to machines within the THM network, from the attackbox
the website 'cyberchef' I mentioned is running on the AttackBox at 'localhost:port' and not accessible through an internet connection. I was trying to access it within the AttackBox environment itself.
lazyAdmin room requires the use of a PHP reverse shell website.
(The ‘cyberchef’ is an example for website because I can’t remember the name of rev shell website)
If you have the resources for a VM, you won't be limited by the one hour on the AttackBox
Okay, ye I can only advise you to show the screenshots once you are able to access the attackbox again.
Or as arth0s said, use your own VM connected to the THM VPN, and then show some screenshots on what the issue exactly is 🙂
Anyone know why i cant reach : http://ntlmauth.za.tryhackme.com.
I have the DNs working
but cant reach the site
for the breached Active directory room Task3
hi
i have that issue on VPN config
2023-05-19 21:10:44 CreateFile failed on tap-windows6 device: \.\Global{A668B707-8B90-4926-97DD-844DD7037F4A}.tap
2023-05-19 21:10:44 MANAGEMENT: Client disconnected
2023-05-19 21:10:44 All tap-windows6 adapters on this system are currently in use or disabled.
2023-05-19 21:10:44 Exiting due to fatal
All tap-windows6 adapters on this system are currently in use or disabled.
Anybody else having trouble loading images in some THM rooms?
I can't load images in the room "Blue" or the OWASP Juice shop room
Jumped from my vm to my bm (because im lazy and ther in different rooms of my house) but trying to connect now i get explicit-exit-notify 3 ...but it still connects ..alternativly i run the ts.sh and it connects fine ?? Is ther something im missing feel like somethings wrong there
Sat May 20 08:41:10 2023 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
Sat May 20 08:41:10 2023 ERROR: Failed to apply push options
Sat May 20 08:41:10 2023 Failed to open tun/tap interface
this error is stopping me from connecting to the openvpn
!vpnscript
Save and run this:-)
no where to save it or download it
Are you on your VM?
i tried making a VM but everytime i went to start it it said the machine was aborted
So where are you running the VPN from?
win
As your host?
yh
That's not a great idea.
There must be something you're doing wrong, or your system can't support VM's.
i would be every surprised if my pc cant run a vm
Verify your account, then jump in to #general and I can assist you,
I'd rather do that, than running the risk of you using your host to connect to the THM network
thank you
Thanks Arth. So, it's more like once you joined the room you'll continue able to access it as long as subscribed.
Gave +1 Rep to @dense bramble
learning bash; how would I use base64 without pipe?
like if i do $ base64 -d, then it newlines me, then i paste in a string and press enter, but it just makes a new line lmao
i can see all these tutorials online to do $ base64 -d | "string" but i cannot find anything explaining it without the pipe symbol haha
not sure what you mean?
is there a way to do base64 -d | askdfgjalfgkjdsflkgjlkj
without the |
like base64 -d
THEN i copy paste in alksdjflaskjdf
https://xyproblem.info/
What's your actual problem here?
Asking about your attempted solution rather than your actual problem
Why do you want to avoid using |?
just for learning purposes; is that the ONLY way to use base64?
i have a base64 encoded string
i found out linux has base64 command natively
intuitively my thought was "okay, so i guess i just do $base64 -d"
so i did it, and then i can't figure out how to actually input stuff in. i googled and found that everyone uses |
but what am i looking at if i JUST tpyed "$base64 -d"?
it didnt return an error
https://linux.die.net/man/1/base64
It reads a file or stdinput, in that case its reading from stdinput - what your typing into it
Base64 encode or decode FILE, or standard input, to standard output. -w, --wrap=COLS Wrap encoded lines after COLS character (default 76). Use 0 to disable ...
It's basically reading the input forever, because it doesn't actually know when the input stops thats why we directly pipe the input into it
oh i see. and how would i declare the end of the input
Cntrl+D
oh, okay thanks
Some advice about researching the issue, try to find out what the underlying / root cause is first, my thought process went along the lines of this
Using the base64 command -> Checkout the man page -> Reads stdinput or a file -> From stdinput, how does it know when to stop -> google "linux delcare end of input" -> Cntrl+D
yeah that makes sense. i appreciate it.
i cant launch the machine in a task, it keeps giving a blank white page..
anyone experienced this?
what room
linux fundamental 1
would like to attach screenshot, seems like no option to upload image here
it does show the bottom toolbar [power, terminate, extend..etc]
thats it. up there is blank white. tried all browsers
!docs verify
You need to verify to be able to attach images
can you try to click on the left icon (expand)
still same blank white page
oops hang on, got this in the title: about:blank#blocked
i think something on my side blocking
here we go
seems like antivirus related
since you tried multiple browsers and still the same
disabled my bitdefender, still the same
i have no problem with other room before, this is my first encounter
can you grab the link of the new window before it says :blocked
other room's attackbox work?
verified my account. hang on
after expanding it, only white page with te #blocked title
can you click the circle ! icon
what does it say
if you could open a private window that might work unless your antivirus is still blocking it in some how
alright, try to right click on the expand icon of the splitter and copy the link
make sure it starts with https, keep a copy of it and enter again
yea different rooms may have different attacked VMs
seems like only a js script to change window. that undefined token looks interesting
interesting
maybe a bug
weird..
done that few times.. i encountered this few days ago, thought it would be ok by now.
turn out still the same
Alright, that seems like a bigger issue maybe, cc @zealous yoke
maybe a staff can help here :)
incognito mode. still the same
could be a bug, staff will look into this hopefully
alrite.. ill just move to another room for now
Good luck! :D
Hi in the room: Threat Intelligence Tools has problem with the firefox on the machine?
I try to use the browser and it`s not working:|
target machines do not have an internet connection for security purposes
you should be able to solve the room with the things that are already on the target machine
ok so where is the cyberchef?
you can also copy text out of the target machine and use cyberchef on your host... but think there is an instance of cyberchef on the target machine you can launch
let shadow check
yeah just checked and it is not there.... might maybe be considered a bug.. reported it to staff
as well said ip might be weird to interact with outside of the target machine
ok I will ask in help, how I can report about the problem?
well link to the room in #room-bugs and explain that there is no local copy of cyberchef on the target machine when you think there should be
A lot of images are not loading for me on Try Hack Me rooms
I don't have this problem on any other websites
I think it's Imgur.
are you blocking imgur domains using an adblocker
For example, in the room "What the shell?", the 3rd task contains an <img> tag that links to https://i.imgur.com/rN7YkJJ.png, however it seems this image is broken
The image is being blocked,
Either you have something blocking it, or your ISP is.
Where is your VPN set?
Imgur doesn't work on some VPN's.
oh ok
weird I changed the VPN location now images load, so weird 😄
ig that IP was blacklisted from imgur
Hello, looking to purchase a year's membership for THM but I cannot see any prompt for student discount application. Can anyone help me please?
!docs student
hi, i am trying to submit the 19th flag in the capstone network, but the network reseted while in the middle of it and now in e-citizen i cant neither submit the proof of compromise nor cancel the submission, it throws a Python exception
Hi! I renewed my subscription on May 16, however, 2 days after when I logged in, my profile was no longer a premium member. Money was debited from my card. I created ticket and wrote an email but no response yet. I can provide the invoice too.
When did you e-mail?
Did you press “sign in with Google”
I am on the NMAP section. I downloaded OpenVPN connect and set it up for my intel chip based macbook and it shows connected to tryhackme server but I can't access any machines. There are no ping replies and I can't scan the machine either. Not sure what is wrong. I tried connecting to a machine from Hackthebox and it seems to connect just fine.
if you verify, you can post screenshots of the errors and we can help you torubleshoot
!docs verify
Not really tech support but I couldn't find a better place, I'd like to have the OSCP role if possible, I can send the certificate, here or where it's needed.
Thanks.
Hello I'm developing a little room for a assignment about metasploit and I uploaded a Windows 7 ova file but its been converting for atleast 12 hours and wont finish
Does anybody know what I'm doing wrong
Is Windows 7 on the conversion list/ specifications?
Its a Windows 7 professional edition ×64 and I uploaded the ova file but still can't use it because its still in the converting state when I check my materials
What’s the name of the file?
Windows7.ova it that what you ask?
I exported a copy from the virtual box and then I uploaded the exported file
Not sure where to ask this so here it is. Is there a discount on a 1 year premium subscription?
Yes, you pay $10,5 per month if you purchase Annually so total $126
Cewl on attackbox gives the following error:
Apparently this has been long fixed, installed version is behind.
If you look it up, it will tell you how to fix it
I have the same error btw. "Converting..." for many hours today. Ubuntu 20.04.
If you find a solution or if it finally finish converting please ping me i dont mind
@tribal mason The webpage at https://tryhackme.com/subscriptionsvoucher states that for a years sub the cost is $168.00. That's $14 a month. I'm currently paying $10 monthly until October when I'll have to pay $14 monthly.
Could I get some help with connecting my discord to my thm account? I switched accounts a while back but it appears my tryhackme is still connected to my old discord account (which I don't have access to anymore)
Well if that's what you're seeing then I'm being ripped off.
you'll need a mod for that.
You're not.
It costs more for a subscription using a voucher
Do you know if theres a good way to contact? I don't want to @ a specific person
If you see one on-line ask them.
Are either of you THM employees?
It seems you two are trying to prove me wrong instead of helping.
Thanks
Gave +1 Rep to @glad oyster
If you purchase a 12 month voucher it will cost what it will cost.
If you purchase a 12 month subscription.
You'll pay the price of 9 months
They don't need to email in this situation
There is no annual option on my end other than a voucher
👍 wasn't sure because it was related to payment
Hey Jason. How bout you help me get annual before I cancel.
Please don't be rude.
I'm a customer. Get that straight. If you don't understand that. Go learn customer service at McDonalds. I'm not kidding.
@solar finch We recently had a price increase which increased the monthly subscription from $10 to $14. You are currently paying the old prices, as you are aware.
If you were to pay $14 every month for 12 months, 14*12=168, hence the $168 you see on the website's voucher page.
Whereas, if you subscribe on the annual subscription, you are charged less.
Vouchers are a one-time purchase, subscriptions are a reoccurring payment. It is cheaper for the fact that it is reoccurring.
You are not being ripped off 🙂 Vouchers != Subscriptions.
You cannot purchase another subscription if you already have an active one. You first need to cancel your active subscription, wait for it to stop, and only then can you choose a new plan.
:mute: EpicDedd#0213 has been muted.
hello i completed a course today but i cannot seem to download the certificate
when i try downloading it says wait fetching file since morning
how long does it takes for the certificate to ready
?
have you tried refershing the page and clicking the download button for the cert again???
like ctrl + F5 refreshing
i have not tried the shortcut but i have refreshed the page manually
its doesn't work , tried downloading via mobile also not working
not much shadow can do then ¯_(ツ)_/¯
hello, i cannot finish the phishing room. I can load the page/VM but cannot add new profile just a spinning wheel.
Hey Guys and Gals, In the https://tryhackme.com/room/mitre room on Task 5 MITRE Engage,
Does anyone know how long the https://engage.mitre.org/ site has been down or the status of this service?
I was able to eventually find the information necessary to answer the questions by crawling around the WaybackMachine, but that was painful...
I'd like to peruse the Engaged Matrix Mitre website, but it looks like Engage was built on WordPress so you know...
sudo openvpn lateralmovementandpivoting.ovpn 2023-05-22 02:50:09 Attempting to establish TCP connection with [AF_INET]34.246.69.138:1194
2023-05-22 02:50:30 TCP: connect to [AF_INET]34.246.69.138:1194 failed: Connection refused
what's the problem?
Thanks for bringing it up. Not sure the room got updated or not. But I do think the hint is helping me. Cause all other questions can be answered by ChatGPT C&P
Gave +1 Rep to @tawdry cape
Hi everyone, i would like to know if there is any way to change the name on the certificate ? 
Once it's generated you cannot change it
haha oh damn ok
but if i change my name now, future certificates will still be linked to the first name i gave ?
No, they will be linked to your new name.
@eager fulcrum
thank you for your answers !
Did this get sorted?
Yes, Fontaene got it.
Ah cool, couldn't see anything
Lost count of the channels they posted in.
@normal sandal
Hay, let's get your VPN sorted.
alright so just a quick question
this is what my vpn spits out when I connect
There's no issue. It works just fine
But I'm just wondering why it doesn't have that sequence complete thing
I'm not sure what it is, but you're still connected.
It's fine now and working correctly.
just curious and wondering if anyone would know what exactly is going on
I know the ping one, it should send a ping every 5 seconds, if there is no reply > 120 seconds, it will restart the connection.
Or I think, anyway
hmm
Hello people, I am running Kali Linux on Windows10 subsystem WSL, I installed OpenVPN, but when I try to run it, I get this message on the terminal:
ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Can anyone help me with this issue?
WSL isn't good from a networking PoV.
You're better dual booting or VM'ing.
And I don't suggest dual booting often.
I see, thank you for your input, I better use a VM then, since I don't like either dual booting often.
Gave +1 Rep to @weary spindle
Might be the wrong channel, but is there something wrong with signups? trying to subscribe but keep getting hit with the following.
Addressing in DMs ^
Hi! I recently bought the annual subscription last Thursday and it has still not been activated. I have the invoice copy if needed. Can someone help me fix this?
You'll need to reach out to support.
@weary spindle I have sent out an email to support yesterday and opened a ticket with the bot last week. So I can just wait now?
Yes, if support are not too busy, you should receive an E-mail within 2-3 day(s)
Awesome thanks!
We’re currently increasing the wait time due to a massive increase in support queries. Sorry for the delay 🙂
hello! how can i have access to the aws room? I really hope i can have access to it but i'm not sure... thanks 🙂
You can't, it's for business plans only
#site-support - I bought education subscription, I paid for it and there is no contact from your end - I don't know if account for me is created, sales rep is not responding and I need it to perform my work - how do I proceed?
I emailed on 18th. I also emailed with my gmail since I though the original thm mail which was inbox.ru could get into spam
no
increased to how long , since i sent an email from a week a go and there was no reply , and my problem i don't know if it will be solvable or not
@sharp bison . I AM FINDING IT IMPOSSIBLE TO DOWNLOAD MY COMPLETED CERTIFICATE
Do you have an ad-blocker?
BUT DO YOU USE ANY EXTENSIONS ON BLOCKING ADS?
NO SIR
I'm not sure how opening an educational account works, but I'm sure someone will e-mail you.
If not you can reach out to support who will point you in the correct direction support@tryhackme.com
Which one are you trying to download?
Pre Security
YES COMPLETED ..
And when you click download, does it do anything?
Like, does it look like it's trying to do something?
IT SAYS FETCHING CERTIFICATE ...PLEASE WAIT BUT THAT IS THE MESSAGE I GET SINCE YESTERDAY
NOTHING IS DOWNLOADED
I can’t find any emails from your email address
because may be discord email is different from the one i subscribed on the website
i was writing another support email right now and i was about to send it until you pinged me
if you would like if i can send you my email in a pm , i would be thankful
Is my attack box not being connected to the internet a common issue?
-_-
Fair enough
I’m out of country and trying not to get rusty so I’m using the attack box lol
subscription problem
Don’t post email addresses here please
oh sorry
I think I see your email, I know why you haven't been responded to.
I'll get back to you today
hello guys
i need support from Jabba, i'm being sending emails to the support, i have new cell phone, i can't login to THM and i don't have the recovery code
please help @bronze vale
so how can you make your discord profile show your thm rank again? i got 0 idea when my profile stop showing my rank and re-verifying only update the stage of my subscription
it's the red teamer role that overrides everything else, so your rank won't show
i think i got that rank from one of the ticket event maybe?? but i think that should expired after some time right?
yeah, the event is long over but the role still applies, I have no idea if they plan to remove it
Hi
I have a subscription, I have been working on the redteam cap stone. I was kicked off about an hour ago, and even though I can the hosts are up on the site. My VPN have been regenerated and downloaded and shows up. I can't access anyof the hosts.
I keep getting "permission denied" message when I start my machine and use command ssh tryhackme@the virtual machine address and then the password "tryhackme" Can anyone help me because I'm not getting a response from tech support when I already paid my subscription for the year.
Did the room tell you to ssh into the machine?
if the only reason will let me to leave THM it is the copy from AttackBox to my device please fix it
yes
Are you using attack box?
it's for the linux fundamental part 3 section
there is any solution for copy and paste
yes it was working before and now its not working
are you copying the IP from this?
yes
Yeah, at the left of the screen there is ">", click it and you will see clipboard over there
which command are you using?
I already done part 1 and part 2 so I know I'm not doing anything wrong
I type the command in manaually type the command in and it's not working error message say permission denied
ssh tryhackme@MACHINE_IP ?
it doesn't workk
IDK it is from the room or from AttachBox it self
what exactly doesn't work
sometimes it works sometimes just keep doing nothing
you type in that box and can you paste it in the attackbox?
when I copy it doesn't show here
yes yes yes
I said that in my first message
this is not my first time doing this assignment that's why I know I'm not doing anything wron on my end
(to send attachments in this channel, you need to verify)
@tribal mason my profile is already verified and I still can't attach my screenshot.
You are not verified
Hey, @zealous yoke - any chance I could get some help with this? A couple people mentioned that you might be available
Hey there 👋 send me a DM and I'll be able to help out in about 10 minutes 🙂
ty!
@winged pasture you're wasting my time if you're not going to help fix the issue. I instructions you provided doesn't make sense because I have already verified my profile using my mobile number and I text from with the code. All this time wasted and you guys could have respond to my email I sent HOURS AGO!
Wrong heap but @tribal mason stop wasting their time i guess
I'm not wasting your time, I'm telling you to verify your website account to the discord account by DMing @sharp bison bot with !verify <token>. You can get your token from the website as It's specified in this tutorial page: https://help.tryhackme.com/en/articles/6495858-discord
Also, because this channel is mostly run by volunteers, no one is obligated to help you. Being rude will not help you solve your problem faster.
Calm down.
sup twin
hello guys, im new on tryhackme and i can connect my openVPN but i cant go to the ip given i don't know why can somebody help me ?
@tribal mason YOU ARE WASTING MY TIME! You attached an article that is NOT CLEAR that's telling ppl to go to "user list" when there's no such thing at the top. I had to figure these stupid instruction out myself just to verify my profile for a damn 2nd time. All of this just to send you a screenshot when you could just respond to my email.
:mute: Meeka#7040 has been muted.
You are being extremely rude. 0xheap is a member of the community, not THM staff nor a discord volunteer. The bot could be down and not verifying correctly, but this isn't the way to go about getting help.
If you emailed support, that's the best route to get official responses from THM; if you have questions about room tasks or security in general, the discord is a great place to ask.
Please recognize that (almost) everyone who participates in the discord is a member of the community volunteering their time and be respectful of that.
What room are you doing?
a private one, from my school
So then it might be best to ask for help from your instructors, since we can not help for private rooms unfortunately 🙂
yes sur i will, but i cant do the room OpenVPN introduction, this one is your right ?
This one https://tryhackme.com/room/openvpn ?
yeah
I can help you with that one, yes
You can, but you have to verify first in order to be able to send screenshots
ok im going to
!docs verify
so im on Mac OS and i want to connect THM with openVPN, so on openVPN i past my configuration file and im connected as you can see, but when i try to ping the ip address and i don't why
Did you download your config file from the access page first?
yes
You have to enter the full path and file name.
E.g. ~/Downloads/file.ovpn
Don’t use the GUI, use brew to install it onto the terminal
ok i will try thanks
I did
No, your configuration file
It should be something like ~/Downloads/your_name.ovpn
sorry,
Your tryhackme username is Mahmoud ?
yes
And did you download the configuration file from the access page?
then It should be located at ~/Downloads/mahmoud.a.ovpn
you can in my screen shot that I did what you mention
but still I can't
Uhh, any ideas?
change directory to where your config is, and rerun the script
every thing is in Download
That isn't what I recommended to do
Either use the full path to it, or don't run it with sudo, otherwise ~ won't be the kali home directory
ok, I will change it from the downloads directory
I changed the directory , and I try to run it and still not working
Did I say 'change directory' or 'modify permissions'?
juun meant cd into the directory
I am not understanding what you really need, I am trying to learn, so can you do that
this is where the file is and I went through readme file and did exactly the same what they mention
cd ~/Documents/THM/openvpn-troubleshooting-master/ and do ./thm-troubleshoot
Thank you it is working now
Gave +1 Rep to @tribal mason
appreciated your help
thanks to juun as well
I mean appreciated every body try to help
Morning guys , I emailed support last week for them to reset my 2FA with the info needed as it was asked from me however there’s no reply.
I sent a follow up email yesterday
I’m not sure when my request will be attended to
not really something i need to think about to get something right, but something technical. what do i do if im trying to enter ssh password, know its correct, but it still tells me its wrong?
i would send a picture but discord isnt giving me the option to do so
i have the same issue, even i'm paying suscription and not getting reply from THM
Same i couldn’t even try the new red team module so sad
the support team is not replying emails or helping :/
We have a longer delay on support replies currently during the event^
Sorry for the inconvenience
Thank you , waiting for you reply
Gave +1 Rep to @bronze vale
@eager fulcrum
:hammer: Molduga#1828 has been banned.
rootme room not working well its not showing the uploads file after uploading a rshell file
Can I have your target ip?
^
sorry but i left room and cleared every history in VM
Okay.
10.10.238.148
If you've terminated your machine, that won't work.
Hello, need some help with paiement i send many tickets and i haven't response, can you help me ?
Hey there, when was the last time you sent an email?
Please don’t spam tickets, it won’t help you get support any faster
1 week
hello there , is there any update you got on that matter ?
i know you guys are over whelmed , i know sending multiple tickets at the same time won't solve the problem , i am just trying not to let my case some how get cold and be forgotten
as i am now unfortunately the subscription stopped due to the problem with the payment , and currently i am halted and can't study and entering the new pricing .
thanks in advance and waiting for any update from you
Gave +1 Rep to @bronze vale
I have two problems, the first: my subscription could not be renewed, the second I paid with another card thinking that it was my card that had a problem, result: payment accepted, account debited, but subscription not activated. In addition, you change your rates (which I don't mind paying more given the work behind the platform) but I receive an email that says "price guaranteed until October" and finally I find myself paying the new price. to the subscription problem. Not cool... I'm waiting for a return from you, knowing that I've been waiting for a week now without news.
I understand that you’re upset, we are currently running an event hence the slow response time
ok i will be patient, i understand ur position too.
@bronze vale we will get at least half or 1 month free due to this lag in the help, i mean for the people we have problems with the 2FA and not getting response quickly?
Has anyone had luck installing parallel tools within a parrot OS virtual machine? Is this the right place to ask this and Is it OK that I already asked it in general chat? Thx!
Hello I'm trying to scan subdomains and dnsrecon isn't working, saying it needs netaddr even tough I just installed it, it's not the first time something like this happens to me in a VM, any idea why ?
Nvm I needed to export a pythonpath
Okay something is constantly reseting pythonpath without exiting the machine
So from what I can understand from you that there is a problem regarding the subscription system and it is affecting multiple and wide spread users , and the tech support team are trying to solve it ?
my VM been converting for 5 hours now, I tried reuploading and stuck at 0 for the second time :\
I'm currently in the room : OWASP Top 10 - 2021, task 8 "connect to the web application at http://MACHINE_IP:81/." shows the error message
"Error response
Error code: 405
Message:Method Not Allowed
Error code explanation: 405 - Specific method is invalid for this resource"
What am I missing? Is there a workaround?
I used this command to check if there was any service running on port 81 but there wasn't any: lsof -i tcp:81
I understand that you guys are running an event and I want to enter the event too but unfortunately I. Can’t
Due to 2FA not being reset yet
Please be patient with email replies
You need to start the machine in task 1.
Hi all, Can anybody help on below request.
I am trying to learn the Intro to Digital Forensics -> Practical Example of Digital Forensics under TryHackMe,
In this I am stuck and unable to find the address using GPS coordinates, I tried Milk St - but its not accepting the answer for below question:
Using exiftool or any similar tool, try to find where the kidnappers took the image they attached to their document. What is the name of the street?
I've answered you in a different channel.
It worked, Thank you @weary spindle 👍
Gave +1 Rep to @weary spindle
Hi, there is an ongoing issue with VM uploads. We are waiting for AWS to action our request. We will keep you updated 🙂
Alright, thank you :)
Gave +1 Rep to @glacial hound
Why is it impossible to contact anyone at THM for support? But you sure can fill out a form for SALES. janky
When did you email them?
to what email? plus i expect chat, if they want my money im going to need to actually be able to reach someone
- prices show up as GBP not USD, with no obvious way to fix it, and, no instructions on how to apply a student discount to the membership
i "Was" considering trying to get my company to get us a team membership for 14 pen tests, but im second guessing that about now
!docs student
As for the prices, they're based in the UK
That's a visual bug
not that its a HUGE deal but if im going to give my money, i would expect even the simplest of things to work appropriately
If you log in with an incognito window it will be the correct nomination.
If something so simple is a visual bug, what deeper bugs are in their content?
ok but, i really shouldnt have to do that
esp when a coworker, living in the same state as I, see's USD by default
It shouldn't change the price you pay, from my understanding.
No i get that, but again, something so simple, what REAL issues are under the hood?
And it's not impossible to contact support.
Their reply times right now are slow due to the event that is currently on.
Yea but if i have to email and wait, then I think i can find other places that want my money in exchange for good support. crazy i know right
You don't need to E-mail and wait to open a personal account.
It's just the procedure for Business/educational as they are different.
With different structures of support.
ok other issue, I signed up with my email but i have an EDU email, i dont want to create a whole new account
so whats your fix for that?
You can swap your E-mail.
ok but i dont want to SWAP, i dont check the EDU very often
Then you won't benefit from the student discount.
its mostly college spam about stupid events
ok, i guess ill shoulder surf my buddy on his THM, and ill get HTB and he can shoulder surf mine. problem solved
good way to discourage members, awesome business model
I've tried giving you solutions and stuff, but you're coming across to myself as rude, so I'll CC @bronze vale in this.
ill also tell work we want HTB not THM. this has been productive
im rude beacuse no one cares about quality support
Support cares.
THM care, hell, I care.
But if you're going to be rude to me, I'll be less inclined to try and help.
And I'm not even staff or a mod.
1 customer down, and a potential 14 user business membership out the door.
We do care about customers, very much so. Our business model is directed towards the community 🙂
I’m sorry that you haven’t been contacted yet. We are currently still implementing the sales functionality on our website.
If you have contacted support, you will be sent to me (which we are currently on a delay due to an influx of emails from the event).
If your country cannot be detected on the website, you will be defaulted to UK, which shows GBP prices, you will need to update your country through the API #site-support message
The Discord is community ran, although employees are active here, advice you received may be inaccurate due to in being from community volunteers.
Would you be able to explain what you mean by ‘open a chat’? If you’re referring to the site chat box, DM me your username and I’ll ask someone to get in contact with you via it
Oh they left
I was about to say.
Many apologies if the information from myself was incorrect.
Nope it’s fine, it was just to diffuse the situation
Funny that they refuse to use email to contact, like most business don’t use an email smh
There aren't many companies out there in the world that have instant support without waiting a few days, so I'm not sure why people keep acting like they're owed it
Fr
This user clearly came here to bash us; no help would have changed their mind ^^
Can’t win them all 🙂
im looking for coders, who's availible?
what do you need?
I need code for an e-commerce website and it's mobile app
do you have a corporate email and job posting for this?
It's a start up thats why i came on here.. i'm willing to pay the labour costs
Do you know when that event about the payment will end , and the support can manage to reply to the emails?
I have been waiting since the 11th of may which is the day of my subscription for this problem to solve .
My subscription ended since the system couldn't renew , and now entered the new pricing , of course I didn't resubscribe waiting for the support to reply first to see what happened , all these days are days lost for not studying .
At least , please if some one reply to me that I would be compensated for these lost days , and have the old pricing with the new added lost days
I also sent two emails to the support , also no reply , and I knew from here that support is having an event trying to solve a problem , and I have to wait for this to pass
If some one please would contact me ,at least that you are solving this problem , send my email , review my account see what is wrong , any thing , I would be appreciate it .
Waiting for a reply .
And thanks in advance
Sorry for the long message , I am just trying to find a solution with you and get to know more information from you
When did you last E-mail?
First email is 13th of may .
The second which is the last one , is on 22nd of may
I see.
I know the E-mail is going to be heavily backlogged due to the event, which won't even stop until June.
Don't send anymore in as you'll just push yourself back down the queue.
To the end of June ? Or to the first couple of days of June ?
Event ends 5th of June, you'll hear back before that.
Is there any thing on my end I have to do ?
That is actually what I want , to somebody guide me with the current situation we all having , whether I can't subscribe , or the support team having an event , on what to do .
Since it will be at least ten days without studying , can I subscribe with the new pricing and the support can some how retrieve the old pricing back plus the lost days in the future .
Or do I have to wait all these days and the support team will reply to me eventually and try to resolve it ?
I am very sorry for these kind of questions , but I am afraid that the problem will not be resolved and my problem shall get cold with all this I could not get my old pricing back
I don't think you'll get the old price back.
Please , any one from the official support team or official thm staff here reply to me to get my point straight and to know what I shall do
Please , if there is a possibility , you can DM me if you want or please ping me here , to elaborate more on the matter
Hey, I DM'd you.
Hello. I'm developing my first room for my capstone project for my cybersecurity program. I'm prepping vm's for upload, and I'm just hoping someone can help me figure out what they need to get RDP configured in such a way that when someone deploys my box, they can actually control it in the browser. Does anyone have experience with this?
This is all it says on the page - "Control your Machine In-browser
Let your users control your machine directly in their browser (this also removes any OpenVPN requirement). Email us the credentials (whether this be for SSH/RDP/VNC) and we will add this functionality for you."
Hey there, this is only available to users on our business/ educational plans
hello when i try to open the http://10.10.48.70:5000/ to access the webapplication in sqli lab , the page with given url doesnot load and i encounter with " This site can’t be reached 10.10.48.70 took too long to respond. " error on my browser. what 's the problem ?
Hi, I want to ask about the acceptable payment for purchasing vouchers.
Does TryHackMe accept bank transfer or invoice?
I want to purchase vouchers through a company(company in Japan) I work for.
I'm not sure if this is the best channel to ask, but if someone could help me out😢
The attackbox.
Is the only thing we can advise on, we cannot help get around VPN blocks.
I want to please follow up on my issue with the 2FA
I didn’t get an answer or a follow up email and I understand you guys running an event too but I just paid another month without using it.
It's still a #1092490706385383524
Hi! I want to please follow up regarding a ticket created a week ago about premium subscription not being activated. Is there any update/news regarding this?
Have you E-mailed?
yup, and Jabba helped me out. Thanks!
🙂
Red Team Capstone Challenge - .89 is no longer reachable from attackbox, after one hour
is VPN no worky?
I tried sudo apt-get purge --auto-remove openvpn and sudo apt install openvpn
VPN works fine on my end
2023-05-25 14:01:53 ERROR: Failed to apply push options
2023-05-25 14:01:53 Failed to open tun/tap interface
2023-05-25 14:01:53 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2023-05-25 14:01:53 Restart pause, 300 second(s)
^C2023-05-25 14:02:26 SIGINT[hard,init_instance] received, process exiting
Regular VPN?
openvpn
That's not what I meant.
Are you trying to connect to a regular server, or network?
also recently started getting the zsh error recently and forgot how to get it to go away
zsh: corrupt history file /home/kali/.zsh_history
and I believe VIP from my home computer using a linux vm
West Server
rm /home/kali/.zsh_history
one of the rooms
Have you tried changing server?
the Complete beginnger added the OWASP top 10 2021 so I wanted to finish that before completing the SOC path, and will try that now!
Switched to East Regular and same loop
I deleted and redownloaded the file a few times now
Can you post a pic of the output?
it worked after switching to west regular
Ah, that's good.
at work will do in a moment
You're in a work network?
well I work helpdesk from home, but Im using my personal
Can you do ip a s
Usually the terminal stays without the command line and I open a new terminal because it does not let me enter commands and I keep the openvpn terminal in a seperate tab
owasp_top10_2021_v1.2 and this machine not letting me get onto the main site. port 85 will load for a different task but not the main site
I think it just loaded after 5 minutes
Im assuming VIP server would run better lol
oh
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 08:00:27:50:4c:14 brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute eth0
valid_lft 72733sec preferred_lft 72733sec
inet6 fe80::a00:27ff:fe50:4c14/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
link/none
inet 10.2.47.176/17 scope global tun0
valid_lft forever preferred_lft forever
inet6 fe80::782:2e29:652b:f988/64 scope link stable-privacy
valid_lft forever preferred_lft forever
Hi
I got an issue I can't connect to machine
I tried all the ways to connect but I could not connect
hi guys i have a problem when i want to connect to openvpn to solve a machine on try hack me. here is the error please help
2023-05-26 00:18:51 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
IDK what is the problem but I cannot connect to this machine I tried all the possible ways (I tried another machine and it is worked perfectly )
https://tryhackme.com/room/opencti
are you on windows or linux?
did u try the tryhackme troubleshooter out?
hold up
!vpnscript
thank u
Gave +1 Rep to @glad oyster
how can i install a script ? Download the thm-troubleshoot script. Saving it to the same place as your OpenVPN configuration pack (~/Downloads by default) is advisable, but not essential.
and the script has to be in the same location as your ovpn file
what command line to use to install the script
curl https://raw.githubusercontent.com/tryhackme/openvpn-troubleshooting/master/thm-troubleshoot -o thmTroubleshoot.sh
then you can move the script whererer you want
as i already mentioned it HAS to be in the same location/folder as your ovpn file
then
chmod +x thmTroubleshoot.sh
sudo ./thmTroubleshoot.sh
and follow the instructions
basically always typing Y (yes)
sudo ./thmTroubleshoot.sh
yeah, this is how you named it if you actually copied this command
no i typed that by mistake
wym
can i send you a picture of the result
yea
does "Git Happens" room http suppose to not work? ("Host seems down")
do you mean the port 80?
I had restarted this OWASP Top Ten box 10 times and its still not working
works when I use the attackbox but not my vm.... hmmm
2023-05-25 20:20:58 Initialization Sequence Completed
2023-05-25 20:20:58 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 58
2023-05-25 20:20:58 Timers: ping 5, ping-restart 120
2023-05-25 20:20:58 Protocol options: explicit-exit-notify 3
2023-05-25 22:57:46 Authenticate/Decrypt packet error: packet HMAC authentication failed
maybe this is why the machine will not load or load extremely slow in my VM and only works with the attack box, I think I did not finish my update for the Kali distro
help i need help with this
error mounting xx/xx/x....
ntfs3 ntfs not configured in kernal
restarted my VM today and still room not loading without attack box
are you a subscriber? there were some resource issues with the room on free tier. spring app takes a long while to startup. you can access a working instance at 10.10.160.29
I am a free user. Instance at 10.10.160.29 works fine. I see web service
so far the room I have been working on OWASP TOP ten does not load in my VM only attackbox
so, the support still is not helping?
@shadow helm can you try tryhackme's openvpn troubleshooting script
will try soon
https://tryhackme.com/room/furthernmap
how the start practical machine here?
Done!
When the script prompts you to give it? It is asking for the path to your configuration file (username.ovpn). Easier to have the script and openvpn config file in the same directory 🙂
By clicking on the green "start machine" button in the 1st task
Gave +1 Rep to @glacial hound
Hi, did you google that error?
Helping with?
ahhhh thank you
Gave +1 Rep to @glacial hound
MTU not working with the value of 1500
its set to 1290
hey guys
i wanted to change my mac address on mac ventura and i used the command openssl rand -hex 6 | sed 's/(..)/\1:/g; s/.$//' and sudo ifconfig en0 ether <MAC address> to change it, but after trying to confirm it through ifconfig it is showing that it is changed but in normal wifi settings it is shouing the old mac address. so has it changed??
:(( 2 days...
oh.... oh noes that is bad
This is for site only support
Troubleshooter worked great!
hello, i have a problem with my openvpn
sudo openvpn ./tryhackme.ovpn
2023-05-27 09:01:42 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-05-27 09:01:42 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-05-27 09:01:42 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-05-27 09:01:42 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-05-27 09:01:42 DCO version: N/A
2023-05-27 09:01:42 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-05-27 09:01:42 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-05-27 09:01:42 UDPv4 link local: (not bound)
2023-05-27 09:01:42 UDPv4 link remote: [AF_INET]18.202.168.160:1194
^C2023-05-27 09:02:08 event_wait : Interrupted system call (fd=-1,code=4)
2023-05-27 09:02:08 SIGTERM received, sending exit notification to peer
^C2023-05-27 09:02:10 event_wait : Interrupted system call (fd=-1,code=4)
2023-05-27 09:02:10 SIGINT[hard,] received, process exiting
i have used the thm troubleshoot script too but it dont works
[-] Script is being run as a low-privileged user
Would you like to run this script with higher privileges automatically (Y/n)? y
[+] Re-running with root permissions
[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[-] Using outdated switch for ciper negotiations. Attempting to update...
[+] Successfully updated cipher switch! Please connect to the vpn using the following command:
sudo openvpn ./tryhackme.ovpn
can anyone help me please
I am having issues connecting via ssh to tryhackme. I have established openvpn and am able to ping the IP address but when I try to connect via ssh, it says permission denied (publickey). I have already set up the ssh keys as well so i am confused now how to solve this
It looks like there has been some issue with the cipher option, so after running the troubleshooting script, which stated it updated the cipher, did you try to run the openvpn config again?
What's the room you are doing?
the owasp top 10 2021
And which task? As at least in task 2 I do not see any mention that you are supposed to ssh into the target machine?
Okay, but I do not see any mention about ssh there either 😄 ?
i am using kali linux and i am not able to access the machine? my plan is to run a python code on the terminal?
sorry I am a beginner at this
Yes, you are supposed to find an exploit for that vulnerable web app, so to gain access to the target machine
Simply being able to ssh into the target machine would defeat the purpose of this task 🙂
2023-05-27 14:48:25 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2023-05-27 14:48:25 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2023-05-27 14:48:25 OpenVPN 2.6.4 aarch64-apple-darwin22.4.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD]
2023-05-27 14:48:25 library versions: OpenSSL 3.1.0 14 Mar 2023, LZO 2.10
2023-05-27 14:48:25 TCP/UDP: Preserving recently used remote address: [AF_INET]3.7.33.194:1194
2023-05-27 14:48:25 Socket Buffers: R=[786896->786896] S=[9216->9216]
2023-05-27 14:48:25 UDPv4 link local: (not bound)
2023-05-27 14:48:25 UDPv4 link remote: [AF_INET]3.7.33.194:1194
2023-05-27 14:48:25 TLS: Initial packet from [AF_INET]3.7.33.194:1194, sid=612f1c5a 2a059612
2023-05-27 14:48:25 VERIFY OK: depth=1, CN=ChangeMe
2023-05-27 14:48:25 VERIFY KU OK
2023-05-27 14:48:25 Validating certificate extended key usage
2023-05-27 14:48:25 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-05-27 14:48:25 VERIFY EKU OK
2023-05-27 14:48:25 VERIFY OK: depth=0, CN=server
2023-05-27 14:48:25 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-05-27 14:48:25 [server] Peer Connection Initiated with [AF_INET]3.7.33.194:1194
2023-05-27 14:48:25 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2023-05-27 14:48:25 TLS: tls_multi_process: initial untrusted session promoted to trusted
2023-05-27 14:48:26 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2023-05-27 14:48:26 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0
can anyone help me with this situation
i cannot connect to tryhackme
!vpnscript
Run that script, save it to the same directory as your ovpn script.
still not working
usage: sleep seconds
[+] Stable internet connection
usage: sleep seconds
[+] OpenVPN is installed
usage: sleep seconds
thm-troubleshoot: line 231: ip: command not found
[-] tun0 interface does not exist
usage: sleep seconds
Would you like the script to attempt a connection automatically (Y/n)? n
Please connect to the vpn using the following command:
tried y and n both options
Run them both together.
how
Start the VPN in one terminal, start the troubleshoot in a different one?
I am also having VPN problems, seems to be a TLS error.
2023-05-27 11:12:25 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194 2023-05-27 11:12:25 Socket Buffers: R=[212992->212992] S=[212992->212992] 2023-05-27 11:12:25 UDPv4 link local: (not bound) 2023-05-27 11:12:25 UDPv4 link remote: [AF_INET]18.202.168.160:1194 2023-05-27 11:13:25 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2023-05-27 11:13:25 TLS Error: TLS handshake failed 2023-05-27 11:13:25 SIGUSR1[soft,tls-error] received, process restarting 2023-05-27 11:13:25 Restart pause, 1 second(s)
Also, I can't redownload my VPN config, I get a 404
VPN-problems here today also:
2023-05-27 12:15:38 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2023-05-27 12:15:38 TLS Error: TLS handshake failed
It doesnt work with EU-3, but when changed to EU-2 it works!
!vpnscript
I tried that, the problem still persists
Changed to EU-Regular-2, that worked for me
Also worked for me, thanks
Hello, how can I do to verify this Discord account instead of another one which is already verified here?
You'll need to ask a nod, nicely.
Thank you.
Is there a <@&612305984752451594> available to unlink my old Discord account from the Token so that I can link this new account? I can send you a private message from my old account for verification.
Gave +1 Rep to @weary spindle
Changing to EU-Regular-2 worked for me too, thanks
hi guys! For some reason i can't launch a pickle rick machine. who knows why?
Linux Fundamentals Part 3, Processes
At QUESTION 4 : Locate the process that is running on the deployed instance (ip_address). What flag is given?
No process matching the answer.
The answer is supposed to be THM{PROCESSES} (according to a youtube tutorial).
However, my machine didn't have any processes that match the answer.
https://pastebin.com/u7MiDPrX lists all of the processes on the deployed machine.
I was connected to the correct IP, using SSH.
Good day,
I was wondering if the good people here could help me out with an issue that I have?
I have difficulties connecting to you via OpenVPN.
Tried reinstalling OpenVPN, and all possible error fixes on that end.
Connecting to other places works just fine, just not to your servers.
Tried running the troubleshooting script you guys have.
Everything works out, then it reaches
"MTU value failed at 1000, aborting MTU check". Red text. Then it says something went wrong and that I should ask around here for help.
How do I solve this issue?
Hello, I had to switch to EU2 as I couldn't connect to EU3 (from different computers and different ISP) as I usually do
@tardy vessel What happens if you do sudo openvpn config.ovpn
I fixed it dw
hi please help me
anyone is here from support team tryhackm
my account cannot login , because i lose 2 factor authentication app
hi plz
I think you have to email support for that
Hey, when did you send your email?
before 7hrs age maybe
That'll be why then, did you read the automated message that gets sent to you when you contact them?
Keep in mind that there's also an event going on at the moment so it might even be more delayed
hey does anyone have an idea why I can't change my avatar on tryhackme? Im getting the error "Select an image file to upload your avatar!" if I try to upload a jpg I also tried different file sizes
have you tried a png
that sloved it thank you👍
Gave +1 Rep to @plush bay
no problem
I can’t send photo in here
!docs verify
I’m using this command …. openvpn /home/kali/Desktop/iliketohack.ovpn
!vpnscript
Try run this and see what happens
Event not found
Huh?
Zsh: event not found: vpnscript
Check out the page that Jayy linked, the steps are in there
Have you bothered to go to the link and read the instructions there?
Done that’s for help it works now
So now when I need to connect is it just openvpn iliketohack.ovpn
correct
Hi All, I am trying to connect with rooms like Breaching AD & LateralMovementandPivoting. After few hours of troubleshooting I am here --
- I got the VPN for Lateral movement room running.
- Added DNS entry to the /etc/resolv.conf file . the command given on the page systemd-resolv does not seem to work.
I am including screenshsots of how the resolv.conf look like & the error I am getting. I'd appreciate if some one coud assist for a resolution.
Do I have to restart something ?
I have the OSCP exam in a few days and losing time on fixing VPN issues is not something I can afford at the moment. Can someone from THM staff advise on resolving this
this is the troubleshooting script output
they are asking me to reach out to Discord support , who and where should I be contacting 😦
Have you edited the hosts file?
Reading the forum posts related to the room I can say I am not the only who faced issue while connecting and a lot of people are spending more time on fixing the connectivity rather than learning stuff. While THM has good material overall, as far as networks are concerned, this needs an improvement. I would rather be switching to HTB or OffSec, unfortunately.
Hey Jayy, I am trying a lot of sulutions here . I 'll possibly add that too to the list. I noticed soemone in the forum mentioned that pings would work but not nslookup , adding to the hostfile might hep. thansk for pointing that out
But seemingly, either the networks are pretty faulty or lack of due support makes the student feel so. Can you advise me if possible, how can I contact THM staff ?
@bronze vale
Even after adding to the /etc/hosts file nslookup gives the same message
Is there any group for administrator so any of the only staff member may help ?
What's the output of the system resolve command?
I cannot get it rto run
COuld you pelase reply to my comments to I get a notification as I am looking at a lot of material right now and don't want your message to go unnoticed. Thanks.
@glad oyster it's not recognized, am I missing something ?
Hi, as I mentioned previous please tag me or use the 'reply' option so I get a notification. No it doesn't work.
I just don't want to have you waiting for a response from my end , I hope you understadn and I appreciate all the help you're extending at the moment.
@glad oyster
Sure what is the output of resolvectl and systemd resolve
install it!
That's why it's not working, because resolved isn't installed on your machine
@fallow raft
Yup so now run the command again
The one given in the room
resolvectl --interface lateralmovement --set-dns $THMDCIP --set-domain za.tryhackme.com
@fallow raft obviously replacing the IP
OK doing it.
So afaik technically the command on the room description is outdated, but if your taking OSCP your gonna have to learn to research when you get errors like the command not being recongised
Also I'm doing this from a plane about to take of so if I don't reply it's because I have no signal but that command should have sorted it
Thanks for all the help. I'll see to it if that works.
Gave +1 Rep to @glad oyster
--set-dns is not recognized and about the exam yeah we need to research if something doesn't work. But I was not looking forward to research about connectivity issues arising out of outdated documentation with THM VPN atm.
I'll see to it. have a safe flight.
yes
Did you get it working?
when i start the openvpn, then i get this
2023-05-28 07:53:13 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-05-28 07:53:13 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-05-28 07:53:13 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-05-28 07:53:13 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-05-28 07:53:13 DCO version: N/A
2023-05-28 07:53:13 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-05-28 07:53:13 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-05-28 07:53:13 UDPv4 link local: (not bound)
2023-05-28 07:53:13 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2023-05-28 07:54:13 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2023-05-28 07:54:13 TLS Error: TLS handshake failed
2023-05-28 07:54:13 SIGUSR1[soft,tls-error] received, process restarting
2023-05-28 07:54:13 Restart pause, 1 second(s)
2023-05-28 07:54:14 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-05-28 07:54:14 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-05-28 07:54:14 UDPv4 link local: (not bound)
2023-05-28 07:54:14 UDPv4 link remote: [AF_INET]18.202.168.160:1194
and if i start the trouble shoot i get this
[-] Script is being run as a low-privileged user
Would you like to run this script with higher privileges automatically (Y/n)? Y
[+] Re-running with root permissions
[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
-Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
-Switching servers, then regenerating your OpenVPN config
-Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting
still figuring out
edit your /etc/resolv.conf file, the IP of the DC which you will see in your network diagram has to be at the top like so
you can also add nameserver 1.1.1.1 to ensure you have internet access
If I open the VPN file it closes with fatal error
is that breaching AD?
yeah
for that one you need to edit the file and change the second line I think from dev breachad to dev tun
it really doesn't like the custom name for that network
Yeah I am going to try that out. But I believe this should be mentioned on the page ?
it's not on the page cause it seems to only be an issue on VMs, but it's come up a lot in #breaching-ad
Yeah I got one step ahead
tun0 is up
moving on to update the resolv.conf file
@dense bramble
let me know how it goes 🙂
🥹
awesome!
Thanks. Do I need to perform any other check ?
Gave +1 Rep to @dense bramble
you should be good to go now
I need to make a note of the instruction s
the one on the room task do not work at all. A generic question, is the room stable otherwise and I saw that resolve.conf would revert after each restarts
there's some issues with a deprecated tool in task 7, but I found a solution with some research, otherwise all the networks are stable, they'd just benefit from updated instructions to get connected
you can follow the same instructions for the other AD networks
yeah, I will. Much appreciate everyone who has come out to extend their support.
it's a good place to come to for advice and troubleshooting 🙂
Yeah man it's been few hours yesterday and today that I've been struggling to get some support. And finally it's seemngly OK now with the support I got. I'll take a short break and then put my brains on the actual room
THM shoudl definitely be putting htis stuff ont eh room istself will make life easier for a lot of people
that part can be frustrating, but the content in the network rooms is definitely worth it, lots of useful tools and techniques for AD
what should someone do if they get an error from a parser when testing for xxe?
@fallow raft glad you got it sorted, quick question - does systemd-resolve work?
!vpnscript
thanks^^
Gave +1 Rep to @glad oyster
Thanks for following up. So I had the breaching AD room work
Gave +1 Rep to @glad oyster
but not the Lateral movement as of now
with the exact same configuration
I just change the /etc/resolv.conf file to add the thmdc IP
Is it possible that the problem is at THM's end ? If I set the DC IP for LM&P room I get below error :
;; Got recursion not available from 10.200.48.101, trying next server Server: 192.168.242.2 Address: 192.168.242.2#53
After which it switches to the other entry.
I'm not sure, but is the systemd-resolve command still not recongised, just to double check?
No, but resolvectl is.
I am looking fo rthe right parameter name for --set-dns as set DNS is not recognized by resolvectl
👍
?
So I made an entry to the hosts file and finally some progress as I can see the ping response now. The room says I cannot doa n nslookup directly and need to go to the website for checking connectivity, et's see.
Room appearing connected as well.
Seesm liek I am close but the site to fetch creds is not loading up
cat /etc/resolv.conf
The network is on, right?
I'm connected, I can't do nslookup.
but I can connect to the website fine.
yeah the room says nslookup won't work
but we need to go to the creds site for fetching the credentials
I know.
I was informing you that it's not THM's end.
Ok I see that, thansk for confirming. I don't know what's missing here.
I added this host file entry as well
If all else fails.
You can leave the room for 10 min(s) then re-join, could give you a new subnet.
yeah, thanks.
hello, I cannot access the machine in the linux fundamentals 1 room:
I tried different browsers now and using my mobile data instead of my home network
@glad oyster @weary spindle
First of all thanks guys for all the time and energy you put into assisting me. I really appreciate it.
While I was trying a lot of stuff, still everythime I ran the resolvectl I cannot find the DNS associated with the interface that the VPN pack on lateral movement created. So I touchbased with the OffSec guys as well and maybe rephrased my queary a bit better to how to associate a DNS with a specific interface. Here's the results -->
sudo resolvectl dns <iface> <server> (make sure systemd-resolved is installed prior to doing so, and the associated service is enabled and running)
Giving this command finally at my end
sudo resolvectl dns lateralmovement 10.200.48.101
Now when I check the resolvectl output (the second screenshot) I can find the interface mapped correctly to the DNS server and the website pops right up. I still don't know what messed it up in the first go but putting n the details here in case someone faced the same issue in future.
Gave +1 Rep to @glad oyster
Hello i have a problem regarding ovpn file. First it wouldn't connect to vpn so i regenerated it in access page.and while trying to download it reloads to 404 page saying it was lost matrix..what should i do?
Im trying to disable 2FA on my account but when i click the "Yes, Im Sure!" button nothing happens. Ive tried safari and brave browsers.
im disabling so i can reenable with another app
I had a problem with a 404 page the other day. I refreshed the page and it loaded for me. are you downloading the ovpn file onto your host machine you are connecting from?
Hello , i have issues with login Two factor Authentication , because i lose the app to connect .
i send message to , support email . still didn't reply
about 24 hrs
@sharp zephyr At first it wouldn't connect from the linux .so i deleted the ovpn file and regenerated it on website, now while clicking download it goes to 404 page. And i can't download it
hmm. im going to try that and see what happens
@topaz jackal have you tried changing the VPN server (from the vpn server drop down near the regen. button) and then regenerating, then downloading?
and refresh the page before you do any of that
can anyone help me please