site-support

[stiff yarrow]

Thanks @crystal marlin

[scenic torrent]

Gave +1 Rep to @crystal marlin

[desert raft]

Hi guys

I've received a referral link from my friend

Got the voucher, but when I want to redeem it, it shows that it is invalid

[weary spindle]

are you entering the voucher in the correct place?

If you go to profile, then Subscribe select the use voucher option.

[desert raft]

I've tried that

still, voucher code is not valid

[weary spindle]

You may need to reach out to support in this case, which is a 6-8 day response time.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[desert raft]

Damn

that's quite a time, I guess I'll just buy it at regular price

I am on that ADHD hyperfixation stage and it would be a suicide to wait a week, lol

Is there a way to buy it, write a ticked and have the $5 deducted for the next month?

If I decide to continue subscription?

[weary spindle]

I can't say for certain, this would be in the domain for TryHackMe Staff to answer.

[desert raft]

:/

Aight

Thanks for your help!

[weary spindle]

Are you a student?

[desert raft]

Yeah

[weary spindle]

!docs student

[sharp bison]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/en/articles/6494960-student-discount

From TryHackMe with ❤!

[weary spindle]

🙂

[weary spindle]

You're eligible for the student discount.

[desert raft]

In case I finish my uni, can I later switch my e-mail?

so I don't bind the account to my school credentials*

[weary spindle]

Yeah.

You just log in to your profile and change it here

[desert raft]

Cool!
So in that regard, my [e-mail] e-mail would do the trick, yeah?

[weary spindle]

It should do.

[desert raft]

Awesome

I'll get you a beer sometime in a future :p

[desert raft]

nah, not working

[weary spindle]

You may need to reach out to support for that too, some E-mails don't work first time, and can be done manually by THM

[oblique inlet]

Hello , the THM vpn does not work on linux !!!

[weary spindle]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weary spindle]

Can you verify and provide screenshots please

[broken locust]

That's the problema, I have canceled VIP suscription several months ago, but I am still being charged through Paypal

[blissful prairie]

hi , anyone can help how to convert eu from usd

[weary spindle]

Can't you use google?

[stone panther]

lmao

[spice tangle]

Hello again, i have another question! I'm trying to exploit Telnet as the part "Exploiting Telnet" asks, but without any luck. So the command to type in the terminal should be "telnet [ip] [port]" so i type "telnet [ip]" and the for port i type "8012" because that's what a guy typed in a youtube video regarding this chapter on THM. I get the error message "telnet: Unable to connect to remote host: Connection refused". I am connected via OpenVPN to one of the VMs

[weary spindle]

Are you using the correct ip?

[spice tangle]

yes double checked it

[weary spindle]

Can I have the ip please?

[spice tangle]

Ofc 1 sec

10.8.160.4

[weary spindle]

Wrong IP. 🙂

That's your tun0

As in yours.

[broken bear]

#room-help if this doesn't solve it, please

[spice tangle]

Is that the room i ask these kind of questions?

[broken bear]

for room specific stuff, yes

[spice tangle]

Okey thanks

[broken bear]

if it's a brand new released room, there's a category for RECENT RELEASES HELP

[spice tangle]

Got it!

[broken locust]

Hello, please your kind help

[weary spindle]

You'll need to contact support.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[blissful raven]

In the recent TryHackMe Email survey, when asking how someone discovered THM, one Option is "TickTock" instead of TikTok. I think its not a major issue but just wanted to let you know 🙂

[chilly wind]

Best way to report typos?

[weary spindle]

#room-bugs l

[chilly wind]

thank

[scenic torrent]

Gave +1 Rep to @weary spindle

[sour comet]

guys, i used the !verify but doesnt seem like it did anything...

[stone panther]

DM the bot 🙂 @sour comet

[sour comet]

yeah, i did it with him

but have no response

[gritty oxide]

hello i wanted to know who i can contact to get back into my account. my username is unowkn1 with a itachi pfp

[naive dust]

is that tryhackme account

[inner parcel]

I cant reach za.tryhackme.com even though I have restarted the machine and configured correctly the DNS (im using attackbox)

[gritty oxide]

Yes

[inner parcel]

https://tryhackme.com/room/lateralmovementandpivoting

[naive dust]

idk man try password resetting

[naive dust]

maybe its about "/etc/hosts" ?

[inner parcel]

nah it's not

[naive dust]

its weird

[gritty oxide]

Tried it but never got a email

[naive dust]

did you tried contact to support of tryhackme ?

[inner parcel]

I think the machine need to be restarted

[naive dust]

oh ya

[inner parcel]

well it hould help a lot if someone just voted for restart

[gritty oxide]

What the email

I tried to text them off discord

[naive dust]

to tryhackme admins ?

[inner parcel]

someone...!

[gritty oxide]

Yes

[naive dust]

i dont have a idea man

[chilly pike]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[gritty oxide]

Thank you hopefully I can get back in

[scenic torrent]

Gave +1 Rep to @chilly pike

[final mantle]

Has anyone had difficulty establishing a remote connection through RDP using OpenVPN 3.4.1? I seem to be able to connect with 3.3.7 but not with 3.4.1. I get as far as entering the hostname and password, but then this error pops up:

Your remote desktop services session has ended, probably for one of the following reasons:

The administrator has ended the session.

An error occurred while the connection was being established.

A network problem occurred.

For help solving the problem, see "Remote Desktop" in Help and Support.

[arctic nebula]

hey i am facing error in openvpn while connecting

DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.

[ivory spruce]

Have you tried the troubleshooting script?

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[arctic nebula]

its asking path i dont know which path should i give

[ivory spruce]

The path where you saved the script

[arctic nebula]

check dm bro pls

[arctic nebula]

[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
-Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
-Switching servers, then regenerating your OpenVPN config
-Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting

again error bro

[weary spindle]

Which server are you using?

[arctic nebula]

i tried every server when i got error

[weary spindle]

Which country do you live on?

Are you on your home network?

[arctic nebula]

in

INDIA

yes bro home network

[woven kelp]

how to remove existing token

[weary spindle]

You'll need to contact a mod..

[weary spindle]

Can you verify and share screenshots please?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[wintry rampart]

hi im trying to continue the lessons but it keeps saying that i have reached the maximum of three rooms is there a link i can use to shut down these rooms?

[weary spindle]

https://tryhackme.com/api/vm/running

This link will show you which machines you're running.

[wintry rampart]

ty

[supple cairn]

Hello, I've had a ticket that's been open for two weeks be closed out due to it being "resolved". This is not true, I'm still encountering a bug where I am unable to access the "Lateral Movement and Pivoting Room". I have tried on multiple browsers, devices, cleared my cache, and confirmed it's accessible on another account. This confirms an issue with my account accessing the room. I am a premium subscriber.

Room: https://tryhackme.com/room/lateralmovementandpivoting

[weary spindle]

It won't be an account issue.

You'd need to tell us what you have tried, and what doesn't work for us to assist you better.

By us, I mean users of the DIscord, not official support from TryHackMe.

[supple cairn]

I've click "Join Room", confirmed it's in my "My Rooms" section of my profile as accessed, but also confirmed the "Join Room" button still appears and none of the content is accessible due to not "Joining the Room". I logged into my brothers account on my same browser and joined on his profile and it worked. Relogged back to mine and the problem still persists. I've tried on Chrome, Brave, Edge, and Safari. Tried in a VM and multiple OS distros, problem still persists. I'm unable to leave the room even though it shows I've joined it in my "My Rooms" tab.

[weary spindle]

Do you have a streak of > than 7?

[supple cairn]

Yes, I'm subscriber either way it should work.

[supple cairn]

Any idea what the issue might be?

[weary spindle]

Can you verify and take a screenshot?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[arctic nebula]

check dm bro

[boreal swallow]

I am on the advent of Cyber 2022 room, but the attackbox which I am using is very slow and the split screen view is also a problem.
I have connected the tryhackme server via openvpn.
But the I don't know how to download the file from the rooms. for example the Urgent.:eml file in the attackbox

I want to access those files from my system.

[weary spindle]

Check Linux fundamentals 2 or 3.

That will show you a way.

[weary spindle]

You're doing the steps right.

Now just take what you done in the room, and apply it to the attackbox

[boreal swallow]

i figured out that the openssh server was not installed in my vm, but then after starting the service.
i was able to connect to the ip but the password given is incorrect, as you can see in the figure given.

[weary spindle]

You can get the attackbox password from pressing the i

[boreal swallow]

Sir what is "i"

[weary spindle]

#general message

[boreal swallow]

okay but since i am not a subscriber i wont be able to deploy it.(i have already deployed it)

[distant citrus]

when you hover over the icon it says what it is, like you want to be a hacker? click on buttons and see what it does

[boreal swallow]

ok sir

[distant citrus]

not a sir

i know p5js, its fun

[boreal swallow]

i have connected it

[boreal swallow]

ok @distant citrus

[distant citrus]

isnt that the name you are going for?

[boreal swallow]

now, since that i connected, should i use a new tab to access it?

[boreal swallow]

idk what to say...

[boreal swallow]

how do I run other command after this, in new line

It is stuck over here

[boreal swallow]

It is getting feezed at this point, I am unable to proceed further

[boreal swallow]

https://superuser.com/questions/875646/terminal-hang-after-entering-login-ssh-password-on-server-did-i-just-got-hacked
this is what i am facing

[noble hare]

@boreal swallow where was the Linux fundamentals?

And what do they teach?

[boreal swallow]

What do you mean?

[boreal swallow]

I don't get you, i am trying to connect using my Linux system which ran into these issues

[noble hare]

I too want to learn the fundamentals of Linux

Where is it?

[boreal swallow]

https://tryhackme.com/room/linuxfundamentalspart1

[boreal swallow]

Anyone please help me with this.

[ivory spruce]

Is it the correct host or target IP?

[weary spindle]

sudo ip link set dev tun0 mtu 1200

Try that command whilst your vpn is running.

This will lower the maximum packet size.

[boreal swallow]

Yes, it is

[boreal swallow]

Ok I will give it a try

[boreal swallow]

it finally worked, thank you @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[boreal swallow]

should we also do the same for tun1 ?

[weary spindle]

...you shouldn't have a tun1.

That could also be giving you issues.

sudo killall openvpn

Then re connect once.

[boreal swallow]

ok

done

I don't know for some reason my vm getting crashed, even after doing ssh there are some glitches

@weary spindle any help with that

[jagged lava]

I text the support at the website 3 days ago, I have no idea if the recieve anything, do they have a ticket system?

[bronze vale]

We have a 7 day wait time

[violet echo]

Hi, I didn't get an invoice for July, how can I request one? - The message functionality on the website is useless.

[weary spindle]

You can request one from supprt, (check your spam)

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[prisma bloom]

Hello Sir , Sir I am not able to connect to the openssh from my kali linux vmware i have trying from last 45 minutes but not able to connect kindly help me out

@sharp bison

[weary spindle]

What are you connecting to?

[prisma bloom]

i have connected the ovpn file and connection is generated but the command ssh tryhackme@0.0.0.0 is not working

0.0.0.0 is just an example

like i am not able to connect the room address at my kali linux

can u help me out ???

[weary spindle]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weary spindle]

Cna you verify and shar esxreenshots please

[pearl horizon]

Hello I have similar issue

But can’t share screenshots I don’t think the server would let me

[dawn basin]

Hello, i'm trying to do the Wreath Module. I began a few weeks ago, but now i need to reset my openvpn configuration.
I tried to regenerate and download it. But i get a 0kb file Nameofthefile.ovpn . I tried to download it on my VM and on my local computer but i have the same file. (0 kb) Can someone help me please ?

[weary spindle]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weary spindle]

Please follow the link.

[weary spindle]

Can you regenerate it?

[brittle void]

Hi, i have a little bug i thinks. I do "Jr Penetration Tester" and i am in the chapter "content discovery" dans in task 2 i got a bug with le link, some one can halp me?

[weary spindle]

What's the bug?

[brittle void]

when a click on the link i can't find a page

[weary spindle]

Which link?

[brittle void]

yess

[weary spindle]

Vm or attackbox?

[brittle void]

i think vm but i'm not sure

it's in learn path

[weary spindle]

Are you using your own vm?

[pearl horizon]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[weary spindle]

Follow the link 🙂

[brittle void]

i use mine

[weary spindle]

!vpn

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[weary spindle]

Are you connected to the vpn?

[brittle void]

nop

I need to connect to a vpn to do the lesson?

[weary spindle]

If you're not using the attackbox, yes.

[brittle void]

oh, i use the attackbox because i start it in the task 1

[dawn basin]

Hello thanks for your help :
Same result unfortunately

[scenic torrent]

Gave +1 Rep to @weary spindle

[pearl horizon]

Thank you

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Are you also, on the VPN?

[pearl horizon]

This was what I meant earlier on @weary spindle

[pearl horizon]

Yes

It works perfectly on attack box but not on my machine. Same code btw

[weary spindle]

which room are you doing, sorry?

[weary spindle]

Is that IP correct?

I can't ping it.

[pearl horizon]

That’s was earlier

Let me restart

Linux priv escalation

Same issue

[weary spindle]

Can you share a screenshot?

No, thats working?

[bronze vale]

Aaah! Did you background the OpenVPN process?

It's supposed to get stuck there

Please don't use that word here 🙂

[rugged oar]

ty for the help

[pearl horizon]

Openvpn is running on background

Is that what you mean ?
I don’t really understand your statement

[weary spindle]

Leave it on the foreground

[bronze vale]

Backgrounding the process will stop it, open a new terminal window 🙂

[pearl horizon]

Ok

Thanks I’ll try that

[dawn basin]

Ca you help me please ?

[dawn basin]

After regenerate i still have a 0kb file

[weary spindle]

Whcih subnet are you on for wreath?

[dawn basin]

10.200.81.XX ?

[weary spindle]

Can you try leaving the room for 10 mins?

[dawn basin]

How ?

[weary spindle]

Press the cog on the top right

[dawn basin]

Oh sorry, i didnt know : Done

[weary spindle]

Wait 10 min(s) and re-join the room please 🙂

[wind glacier]

Has anyone had success with OpenVPN on a 10.10.x.x home network? The config file is automatically writing a /16 route when I connect

[weary spindle]

Your tun0 is 10.10.xxx.xxx ?

[wind glacier]

Yes, but so is my eth0 so I'm having issues loading any webpages in the labs and I obviously can't connect to the internet either.

[weary spindle]

Are you on the attackbox?

[wind glacier]

No, I'm using a parrotOS install on virtualbox. Sorry, I misspoke. My tun0 is 10.6.x.x but the route applied was 10.10.x.x via 10.6.0.1

[weary spindle]

Yeah, that's fine, which room are you doing?

[wind glacier]

I've had the issue with all the rooms. I can look the other way for not having internet access in the VM but when it takes upward of 30 seconds to load a webpage it becomes frustrating

[weary spindle]

The vpn doesn't have an impact on your browsing.

It just creates a tunnel.

[wind glacier]

I understand that but what would you suggest is the issue then? I can curl the webpage and it displays instantly but when I type it into the browser the status hangs on getting the googlefonts api

[weary spindle]

Can you verify and share a screenshot?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[wind glacier]

Sure, what exactly do you want in the screenshot

[weary spindle]

A picture. 🙂

[weary spindle]

sudo ip link set dev tun0 mtu 1200

Can you try that command in a temrinal please.

And then re-try the webpage please

[wind glacier]

Still the same

[weary spindle]

Can you do ip a s please

[weary spindle]

Why is your ENPOS 10.xxx ?

[wind glacier]

idk that was the DHCP assignment

[weary spindle]

It's a strange one at that.

[wind glacier]

Agreed but I just verified that I get the same subnet when I open my Kali VM. This is a clean install of the OVA from parrotsec so I haven't modified anything yet

[weary spindle]

Are you using virtualbox, sorry?

[wind glacier]

Yes

[weary spindle]

IS that within your own DHCP rules?

[wind glacier]

No, I'm using NAT

[naive dust]

whats about the box is asking me to update? when i clicked update, it asked me for a password

[weary spindle]

If it's a THM box, just ignore it.

[naive dust]

ye, the THM box, okay thank you

[scenic torrent]

Gave +1 Rep to @weary spindle

[pearl horizon]

I’m still getting same error

[weary spindle]

Can you do ip a s ?

[weary spindle]

sudo ip link set dev tun0 mtu 1200

Can you try that in a terminal, then re-try

[weary spindle]

You might need to look up how to get virtualbox to not do that

I'm not sure.

[pearl horizon]

It’s not virtual box

Hahaha

It works

😭😭😭

Thank you

[weary spindle]

That reply wasn;t for you.

[weary spindle]

MTU lowers the maximum packet size that is being sent.

[pearl horizon]

So the code I typed was to increase the packet size or?

[weary spindle]

decrease. 🙂

[pearl horizon]

Thank you 🙏

[wind glacier]

I'll look into it. Thanks for your help

[scenic torrent]

Gave +1 Rep to @weary spindle

[split lotus]

hi, what can i do if my Internal Virtual IP Address 10.8.. is different than my linux machine address 10.10.. and mask is 255.255.0.0 so they are not in the same subnet?

[zealous yoke]

Nothing. This is normal. The VPN server routes your 10.8 to the 10.10

[split lotus]

so why i cant connect with ssh "ssh: connect to host 10.8.161.102 port 22: Connection refused"?

[zealous yoke]

because you're trying to connect to a device (presumably yours) (10.8.161.102) and it looks like there isn't a SSH service running

you're not connecting to the vulnerable/target machines which resides on the 10.10.x.x

that is what you need to ssh into (if you're supposed to ssh that is)

all the machines deployed in a room reside on 10.10 anything outside of that is a device/client on the VPN

[split lotus]

okey, thanks 😄

[zealous yoke]

no problem 🙂

[dawn basin]

It works thank you very much

[scenic torrent]

Gave +1 Rep to @weary spindle

Gave +1 Rep to @weary spindle

[supple cairn]

Sorry for the late reply, been caught up with work. Here are the screenshots as requested. Again, I'm unable to join the "Lateral Movement and Pivoting Room". It shows up in my "My Rooms" tab as if I am enrolled, but when I enter the room itself I'm unable to proceed with the learning material.

[smoky coyote]

hello i am having a problem with doing the tryhackme openvpn with my kali linux i tried looking for help but i couldnt find any for my problem

2023-08-24 04:08:55 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-08-24 04:08:55 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-08-24 04:08:55 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-08-24 04:08:55 DCO version: N/A
2023-08-24 04:08:55 OpenSSL: error:0480006C:PEM routines::no start line
2023-08-24 04:08:55 OpenSSL: error:0A080009:SSL routines::PEM lib
2023-08-24 04:08:55 Cannot load inline certificate file
2023-08-24 04:08:55 Exiting due to fatal error ```

[weary spindle]

What syntax are you using to load the file?

Which country are you in?

Are you on your home network?

[smoky coyote]

im downloading it from my kali linux firefox

im in lebanon

yes i am on my home network

and im new to all of this trying to learn a new thing

[weary spindle]

Are you doing sudo openvpn file.ovpn ?

[smoky coyote]

ofv

ofc*

sudo openvpn IDK1211.ovpn

[weary spindle]

Which server are you using?

[smoky coyote]

eu

eu 3

[weary spindle]

Try Eu reg 1 🙂

[smoky coyote]

alright thanks man @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[smoky coyote]

well it worked thanks

[weary spindle]

Excellent, happy hacking.

[crimson oracle]

Title: Further Nmap

Setup: I connected using openVPN to the tryhackme server with the configuration file given. I used superuser privileges to set up the connection, which was successful. I have the openVPN session running to keep the connection active. Tryhackme identified me as "Connected" and both the IP on the website and the IP of the server I've connected to with OpenVPN are matching. I am able to ping the IP shown on the website

Issue: In Furhter Nmap room I've starting the active machine with IP of 10.10.1.56. This is where my problems start. Trying to enter the http://10.10.1.56 ends up with IIS Windows Server webpage instead of OpenVPN or Tryhackme page that indicates that I am able to reach to the machine. Pinging it does not work. Running any scan against it does not work either for I am unable to reach it. I am not sure exactly what I am doing wrong for I was trying to follow the instructions (maybe I botched that somewhere?)

Could it be that I am on a wrong subnet?

[weary spindle]

You can't ping a windows Machine.

The that loads up with the IP is intentional.

[crimson oracle]

so I am able to reach it? it just is a windows machine with default windows server page? damn.

[weary spindle]

Yeah, all you have do it answer the questions with nmap.

[crimson oracle]

gotcha. thanks

[waxen oyster]

Is the openvpn connection timeout issue somewhat common?

[weary spindle]

No?

[waxen oyster]

So I seem to have an issue with openvpn then, i already looked too make sure the openvpn profile had the data-ciphers entry but I am still getting this error.

[weary spindle]

Ah, you're on Windows?

[waxen oyster]

Yes sir i am right now. Currently a new build a few days old so no linux vm yet.

[weary spindle]

I wouldn't suggest placing your host on the THM network.

Although we're all friendly ethical hackers, there will still be a small % who'd maybe just mess around with you as a joke.

[waxen oyster]

Seems fair, I will just try to use the Attack Box for now then. Thank you

[royal bridge]

I have an old thm account linked to this discord account, how can I change the old token linked to this account for the new one?

[severe temple]

Is it possible to connect to the virtual machine using a VNC client? The browser is messing up badly on my mobile setup and I really want to use THM on the go. Tried connecting to it using the IP displayed on the client when setting up the machine but that times out every time
I am connected to the openVPN, so that's not the case

[lunar mulch]

what happen if i do ssh and then connect to ip without writing the tryhackme

i dont understand attackbox how do I know if I am connected when i use the machine in browser

[viscid solstice]

Hello there
I have 357 day streak but i dont have the badge yet ,🤔🤔

[lunar mulch]

you are expert

[bronze vale]

Don’t be rude, this is your second intervention from me today

[bronze vale]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

Is there like a "special" badge or certificate that users get when they finish all learning paths? 🙂

If not, I think that would be a nice little motivation for someone to complete them. 🙂

[bronze vale]

You get certificates after completing learning paths

[naive dust]

I know 😊

[rustic dove]

hello guys.I have completed 35 % of breaching active directory in tryhackme but now i can't join this room for complete all tasks, although i click 'join room' . who can help me?

[glacial hound]

Think they mean one that says they have completed ALL learning paths

[lunar mulch]

he is expert after 1 year

[azure rune]

is it possible to get the certificates with the realname insteat of the username?

[weary spindle]

Not after you have generated them.

[rustic dove]

???

[azure rune]

ok good to know, dont remembered that i had to choose 😄

[wind sundial]

I completed a certification last year but new content has been added. If I complete the new content, will my certification be updated to the current date?

[slim rain]

How do I change my location on my public profile? Apparently I’m at the other side of the world!

[lusty scroll]

I can't connect to OpenVPN for some reason

2023-08-25 19:53:34 Note: cipher 'BF-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-08-25 19:53:34 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-08-25 19:53:34 library versions: OpenSSL 3.0.10 1 Aug 2023, LZO 2.10
2023-08-25 19:53:34 DCO version: N/A
2023-08-25 19:53:34 OpenSSL: error:0480006C:PEM routines::no start line
2023-08-25 19:53:34 OpenSSL: error:0A080009:SSL routines::PEM lib
2023-08-25 19:53:34 Cannot load inline certificate file
2023-08-25 19:53:34 Exiting due to fatal error```

it's telling me to add BF-CBC to my file but it's not working even after adding those :

[plush bay]

what vpn server have you choosen and are using???

there has been some problems with one of the EU-reg vpn servers

[lusty scroll]

EU-Regular-3

[plush bay]

try changing vpn server... regenerating the config.. wait 3-5 mins and download the new one... and see if that fixes it

your local tryhackme vpn ip might change if you do this but that is still better then not being able to access anything

[lusty scroll]

Yes I tried Eu1

it's working thanks

[plush bay]

no problem

[prisma bloom]

i am not able to connect with the tryhackme machines at my kali linux

can anyone help me out

[gleaming flume]

Maybe you could verify your account and send a screenshot?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[tribal burrow]

what command you run and what is output

[prisma bloom]

firstly connected the vpn file of tryhackme with my kali

after that going wiith ssh step providing me difficulties

[tribal burrow]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[tribal burrow]

so you can post pics

[prisma bloom]

as you can see here it is showing the problem of not getting connected

permission is denied again n again , whyyy ???

[tribal burrow]

that ip is that some room or ?

[prisma bloom]

dvwa room

[tribal burrow]

link it here pls

[prisma bloom]

https://tryhackme.com/room/dvwa

[tribal burrow]

if you type that ip in browser do you get dvwa website?

[gleaming flume]

Yeah it doesn't look like you SSH into that machine at all, just deal with the website like ralexander87 said

[tribal burrow]

as i can say that is correct. no ssh into. just pure hacking

[prisma bloom]

nopesss.............

[tribal burrow]

is you THM vpn running ?

meanning are you connected to thm vpn

[prisma bloom]

yess

now it works...

i have tried earlier too but it was not working.......

[tribal burrow]

then you just start hacking

[prisma bloom]

thanks mate for your support and time

[tribal burrow]

happy hacking

[rancid vine]

Hi frens, I'm not sure if this is the best channel to post this. I'm new to infosec in general but I am a developer so I have a lot of computer experience. My personal computer is an M1 MBA, what is the best approach to getting access to kali to use tryhackme? Docker, UTM or VMWare Fusion?

[hot pivot]

Docker comes with some drawbacks, mainly networking related. I personally use Vbox and have used VMware in the past. In my experience, VMs are the most convenient solution. You have separate networking but are limited in performance as you share resources within your host OS. A good trade off if you have a decent system.

[desert raft]

Hi guys!
I am trying to access websites in ACME it support in content discovery module. They doesn's really seem to work.

I am subscribed to premium if it changes anything.

[weary spindle]

Did you start the correct machine?

[desert raft]

Yup, I've stared it with the green button

[weary spindle]

are you going to http://10.10.xxx.xxx/ ?

[winged matrix]

Hello, I'm having trouble accessing the website mentioned in the room using my own browser in the adjacent tab. Any idea why this might be happening? Could it be necessary to configure a proxy to access the site?

[weary spindle]

Are you on the VPN?

[winged matrix]

yeah i just used the openvpn from the THM

[weary spindle]

And are you going to http://10.10.xxx.xxx/ ?

[winged matrix]

yeah

[weary spindle]

What happens?

Can you verify and take screenshots?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[winged matrix]

i cannot send the sc here

[pastel tinsel]

follow the link that scrubz sent, it'll show you how to verify so you can send sc's here

[winged matrix]

okay got it, i am very new this space and learning cyber security from THM.

My actual problem is: i want to access the website in my new tab from the browser but i cannot access

[distant citrus]

you were using the AttackBox ?

[winged matrix]

No, i can access from there but i want to access the site in next tab of my browser

is this only accessible from attackbox?

[distant citrus]

i reported issues in General previously today

my streak remains at 53, i signed in, did Intro to Containerization task 3 and my streak did not change to 54.

• i tried shift + F5
• i refreshed the page numerous times
• i logged out/in again

[distant citrus]

i would try AttackBox. the VPN is # 1 problem people have

[plush bay]

you need to either use the attackbox or be connected to the vpn for most stuff on tryhackme

[winged matrix]

I used OpenVPN but using attackbox makes the screen split which i dont want. I can barely see the full information from attackbox's browser. I have seen some dude accessing the site in the diffferent tab.

[plush bay]

well you can exit split view mode for the attackbox and have it in its own tab so that is an option

but weird if even with the vpn it is failing

[distant citrus]

you can open the attackbox into a new browser window

look at the buttons on the bottom

[winged matrix]

Thanks for the help but what i want to say is that i have been using it the way you said but isn't it the time consuming for accessing the challenge site. copying the site and pasting it to the clipboard of Attackbox and again pasting it to the browser of attackbox. I just wanted to access directly from the same browser but on the next tab.

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

not much shadow can do now then ¯_(ツ)_/¯

maybe possibly the vpn script but not much else

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[winged matrix]

okay thank you @plush bay for the help. Appreciate your time and effort.

[plush bay]

no problem

[wide stirrup]

Hey guys, i am struggling with this issue please help

sudo openvpn Evimerow.ovpn 12.7s  Sat 26 Aug 2023 05:49:07 PM EDT
2023-08-26 17:49:37 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-08-26 17:49:37 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-08-26 17:49:37 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-08-26 17:49:37 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
2023-08-26 17:49:37 DCO version: N/A
2023-08-26 17:49:37 OpenSSL: error:0480006C:PEM routines::no start line
2023-08-26 17:49:37 OpenSSL: error:0A080009:SSL routines::PEM lib
2023-08-26 17:49:37 Cannot load inline certificate file
2023-08-26 17:49:37 Exiting due to fatal error

[broken bear]

Regenerate your ovpn profile, wait a few minutes, and re-download it

[wide stirrup]

I have done that, it still does't work

[weary spindle]

Which server are you using?

Which country are you in?

[weary spindle]

^ ?

[velvet lodge]

I am trying to play introduction to burpsuite room I have gone through on Task 13 when I try to browse http://my-machine-ip I get 405 I can’t see anything on Response from Target therefore not able to proceed

[weary spindle]

You're using the wrong ip.

[tiny robin]

hey guys
wifi is not working in parrot but adapter RTL8187 is dected

[pseudo zinc]

hey guys, in the data exfiltration room, task 6 it says:

In a typical real-world scenario, an attacker controls a web server in the cloud somewhere on the Internet. An agent or command is executed from a compromised machine to send the data outside the compromised machine's network over the Internet into the webserver. Then an attacker can log in to a web server to get the data, as shown in the following figure.

and then shows the following figure:

in the command prompt of the image, its written curl http://web.thm.com --data "file=<Content>". But doesn't that command send a GET request to web.thm.com? And shouldn't there be a -X POST in there?

[sour comet]

i'd say u'r right

[shy jungle]

curl defaults to a post request when you use the --data flag. add -v (verbose) to the command and you'll see that curl is making a post request

[pseudo zinc]

Oh alright, thanks!

[scenic torrent]

Gave +1 Rep to @shy jungle

[ornate gazelle]

I hit the 3 machine limit, but I don't know where all the machines are that I started. is there somewhere I can find a list of running machines? Or do I just have to wait for them to terminate by themselves? In one room I started a machine, and then a later task required another machine, so I started the second one. Now I don't see a way to terminate the first machine.

[weary spindle]

https://tryhackme.com/api/vm/running

Use this link. 🙂

[ornate gazelle]

cool, thanks for the link.

[scenic torrent]

Gave +1 Rep to @weary spindle

[mellow crow]

Hi,

Is there a way to change what is being displayed on the badge ?

I mean it displays my username but not my name.

I thought I might be missing a setting like "show name on badge" but couldn't find it 🙂

[weary spindle]

No, all badges show your username.

[plucky kraken]

I'm having issues signing in all of a sudden. It says email or password is incorrect. I click the link to change my password and I never get an reset password email. Can any site admin help? I've emailed THM directly and no response...

[weary spindle]

You'll need to wait for THM to reply.

[ember cave]

Big sad:

[wild bramble]

i have the same issue ^

[cosmic sleet]

503 Service Temporarily Unavailable

[pine flame]

I am having the same issue as well.

[compact mantle]

same

[hallow yoke]

same ^^^

[delicate vine]

i was just about to send out a ping to alert the admins of the issue

@sharp bear not sure who to reach out to but tryhackme.com is down

[tawdry orbit]

Hello hello, we are aware of the issue and looking into it. 🙂

[delicate vine]

kk

[hallow yoke]

👌

[delicate vine]

hope it comes back before my streak resets!

[tulip mountain]

Hi, please note that I am experiencing this from within Australia, tried from multiple devices and from various networks for the past two hours and all to noavail

am flagging this in the hope the access for Australia is restored so we don't lose our streaks

[bronze vale]

#announcements

[ruby parcel]

#site-support The website appears to be down.

[fierce haven]

Same!

[crisp osprey]

Ya website down

[dreamy pawn]

Same

[compact mantle]

will this cause a streak loss 😭

[rustic vine]

No just email their support and they can return your streak

[compact mantle]

[gray shell]

Any update when the website will be up again?

[smoky marten]

@upbeat vault Providing god tier information yet again 🙏

[stark needle]

i

hi

the site is down

[steel mortar]

we're waiting

i'm guessing it'll be up in a few minutes
Edit: it was not

[inner dune]

what to do now to feed the addiction?!

[naive dust]

small steps, it's now showing "503 Service Temporarily Unavailable" 🙂

[inner dune]

for me it's been alternating between the cloudflare page and the 503

life has no meaning now. i might have to resort to... going outside

[stark needle]

😴 😴 😴 😴 😴 😴 😴

[fierce zealot]

streaks dying, streaks dying everywhere........

[mild elk]

recovered👍

[upbeat vault]

[lunar mulch]

what are windows machine credentials

[pastel tinsel]

it should be told on the page

if not, please try and restart your machine

[lunar mulch]

i gonna restart it, was working but then become blank and password didnt work

oke now it work

[faint crane]

Is there any chance of getting my streak restored? I lost it because the site was down while I was studying.

[pastel tinsel]

if you email support they will reset it for you

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[faint crane]

Thanks

[spare tree]

how can i change my username on the site?

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Need to contact support, who will be busy, I'd expect around 6-9 day(s) [This is just a rough guess].

[spare tree]

It's okay, thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle

[naive dust]

Is the "Complete Beginner" learning path outdated?

I'm asking because It's not included in Learn > Learning Paths

[weary spindle]

It was supposed to be, but they reversed the decisison, and was turned off for A|B testing.

[naive dust]

I see 👍 Should I finish it? I'm still a noob

[weary spindle]

Of course! 😄

[magic sequoia]

Hi guys, I need some help, I am using the OpenVPN to connect to the TryHackMe network, after connecting I am able to access the machine through the terminal with many of the tools, but when I try access the web site running on the machine using curl or wget or ffuf, etc. It takes too much time to response and while using the browser the website is not at all accessible. I tried with all the VPN files available on TryHackMe and also tried downgrading the version of the OpenVPN but nothing works. Can some one please tell me any workaround

[weary spindle]

Can you do

1. Tell us which room you're currently doing

2. ip a s and count your tun*

[distant current]

Someone knows why servers in https://tryhackme.com/room/uploadvulns don't reachable? Nor with openvpn, nor from attackbox

[cerulean cosmos]

hey Im struggling with Wazuh Room, can't connect to the instance , VPN is okay and pinging...any help?

[weary spindle]

Did you add it to hosts?

[weary spindle]

How long ago did you boot the machine up?

[distant current]

Forgot, tnx, it helps

[cerulean cosmos]

it shows loading for more than 20 minutes, terminated and reconnected , no help at all

[weary spindle]

Can I have your ip please?

[cerulean cosmos]

10.17.59.97

[weary spindle]

not your tun0, your target. 🙂

[cerulean cosmos]

okay 10.10.28.76

[weary spindle]

It works for me.

Are you accessing http://10.10.28.76/ ?

[cerulean cosmos]

yes its not working "http://10.10.28.76/app/login?nextUrl=%2F" this url comes and buffering for a long tym

[weary spindle]

Can you do ip a s, and count the tun* ?

[pine yacht]

re ^^

[cerulean cosmos]

0,1, and 2 was there

[weary spindle]

Are you leaving your openvpn open?

[weary spindle]

!multivpn

[sharp bison]

TryHackMe

Learn how to look for duplicate instance of your OpenVPN connection.

• Step 1

Make sure you have setup your VPN connection correctly https://tryhackme.com/room/openvpn

• Step 2

Type ps aux | grep openvpn into your terminal and press enter

• Step 3

If there's more than one line (that don't start with "grep" or sudo), do the following steps

• Step 4

Type sudo killall openvpn into your terminal and press enter

• Step 5

Start the VPN with sudo openvpn <path-to-config>

From TryHackMe with ❤!

[weary spindle]

Follow the above steps. 🙂

[pine yacht]

but i need use openvpn on my pc or just install on my vm linux on virtual box ?

[weary spindle]

On your VM.

The VPN needs to be run in the enviorment you wish to use.

[pine yacht]

ok i do all steps

[cerulean cosmos]

Okay how to disconnect the multi vpn

[weary spindle]

sudo killall openvpn

[weary spindle]

You have the vpn running in Kali)

[pine yacht]

okk but why i can't use nmap and gobuster ? i have connection refused all time ?

[weary spindle]

Can you verify and take a screenshot please.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[magic sequoia]

Room: Internal
Tun Count: 1 (tun0)

[weary spindle]

OK, so you don't get a response from curl, have you done an nmap scan?

[weary spindle]

Yup that's connected

[pine yacht]

and when i open other terminal and i try nmap and gobuster i find nothing

[weary spindle]

Can you fo ip a s ?

[magic sequoia]

Yes, nmap works fine
Sometimes I do get curl response but it takes too long, sometimes I don't

[weary spindle]

Are you doing a room now?

[magic sequoia]

Yes

[weary spindle]

Ok, you're connected, what issue are you having exactly?

[weary spindle]

In a seperate terminal

sudo ip link set dev tun0 mtu 1200

[pine yacht]

i find nothing whereas normaly i need find port

[weary spindle]

whcih room are you doing?

Oh wait

[weary spindle]

That's the wrong IP

[weary spindle]

All target machines are 10.10.xxx.xxx

[glad oyster]

you are probably scanning your self

[pine yacht]

ha i see

my fault

yes

[magic sequoia]

Done, and now looks like it's working, I am able to access the web site in both browser as well as in curl

[pine yacht]

this is the good ip address ?

[weary spindle]

Use that IP.

[weary spindle]

Ah that's good.

MTU just downsized the packets sent.

[pine yacht]

ha thx its good ^^

i am so bad sorry xd

i have a question

when i disconnect my vm i need reupload file and use sudo openvpn "file" command ?

[cerulean cosmos]

@weary spindle still not working, buffering 10.10.186.87

[magic sequoia]

With this set, would I still be able to do faster nmap scans??

And thanks a lot for the help @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

doubtful.

[weary spindle]

Terminate and re-deploy

[weary spindle]

Yes, it will need to start running.

[magic sequoia]

Ok

[pine yacht]

we can close terminal who use opvpn ?

[cerulean cosmos]

Still not working : )

[weary spindle]

No, leave it open

[pine yacht]

okk

[cerulean cosmos]

dont know what to do? : (

[pine yacht]

but i see tutorial who explain we need copy the ip adress on url tools but me i have just a connection verified i don't have the server on maintenance

[weary spindle]

Yes, you miniseries that terminal, and open a new terminal

[pine yacht]

ok but why i don't have the good web site

[weary spindle]

I can't say for crtain, it works on mine.

@eager vapor

What's up?

[pine yacht]

hmm its ok i restart machine with other ip and its ok

[vale belfry]

Guy can i get some help with my vpn connection

[weary spindle]

Regenerate your cert.

[vale belfry]

I didnt get it

you mean download new vpn file ?

[vale belfry]

thanks man

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Did that work?

[vale belfry]

It did

work

[weary spindle]

🙂 excellent

[rough totem]

is there a way to add multiple members to a group at the same time?

[weary spindle]

No, you can only have 4.

Unless you're in a workspace.

[rough totem]

Thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[frozen star]

Hello, Yesterday I lost my days using tryhackme because the server it was out. How could I recover my sequencial days?

[tribal burrow]

you need to send email to THM from email that you are registered on THM with you username and amount of strikes you lost

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[plush bay]

strikes??? you mean streak right

[bright kindle]

My subscription is cancelled even after I’ve been charged from my credit card. Can anyone Advise please

[stone panther]

@bright kindle had a similar issue , I guess they didnt like the reason I gave lol 🙈

no but I would just cancel again, best to take a screenshot aswell

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Need to contact via E-mail.

Thanks.

[stoic flax]

I paid for a subscription but my premium was not activated. Tried to email and raise a ticket but no response. Any advice?

[weary spindle]

There is a slightly longer delay in responses.

[golden egret]

Hello ! I m thinking of using the workspace feature with a couple of friends from university and was wondering if i need to create a new account ( sign in with university/school email ) or can i just somehow use my already existing account

[weary spindle]

You can change your account to your educaitonal E-mail in your profile.

Not only will this place you all in the same workspace (same domain) you'll aso benifit from a student discount.

[golden egret]

oh thank you !

[vivid badge]

yo can yall tell which path is optimal for pentesting? its kinda confusing

[weary spindle]

Jr Pentest and/or red team path.

[vivid badge]

arent both of them intermediate?

or it is just the difficulty

i thought its like for intermediate people

[weary spindle]

They can be tricky.

but they're doable.

[vivid badge]

okay thanks!

[naive dust]

None of the vm machines launch from the rooms
is anyone else experiencing this?

[whole mirage]

Hi. Can I not use my own machine to do the OpenCTI room? I can't connect to the OpenCTI web server by doing so.

It does say 'via AttackBox', but I'm not sure if it means that it's only accessible via AttackBox

[bronze vale]

How long is left on the countdown?

[whole mirage]

22mins have passed

still not respodning

ok it literally just responded

i tried 1 min ago and nothing

dammit

thanks anyways

[bronze vale]

Haha, no problemo

[whole mirage]

Actually I have a question if you don't mind

my AttackBoxe and remote machines are incredibly slow. Is it normal?

I wouldn't mind if some rooms didn't force me to use remote machines (like the PhishTool machine in Threat Intelligence Tools room)

it was incredibly frustrating taking like 10 seconds for a mouse click to register

It probably is normal considering I live in ME (130-170ms ping) and general traffic, but it's bordering on unusable. Would be great to find some remedy

[naive dust]

@whole mirage I am having the same problem

[whole mirage]

Yeah you're better off running kali on virtualbox, that's what I'm doing.

[naive dust]

oh my god

did you connect to the box via openvpn?\

@whole mirage

[whole mirage]

Yeah

dm me if you want help setting it up

[bronze vale]

No, it sounds like a connection problem with what you descibred

[humble merlin]

Hey everyone, I've got a sort of "platform" question if this is the right place to put it. Not so much a technical support question, but more "what's the intended purpose?" question.

tl;dr: Going through Holo atm, not sure if the task list is a "last resort" option to learning how to do the intended path of compromise or if I should be following along with the task list.

Apologies if this question doesn't belong here!

I want to do this the intended way to learn as much as possible. But with my background in OSCP/HTB training, I'm inclined to bash my head against this for a little while before going to the task list to learn what I'm supposed to do. On the other hand, this feels structured in a way that I feel like I should be going through the task list first and foremost.

[whole mirage]

I think the platform is designed in such a way that it presents rudimentary information (at least in beginner rooms) for each section in a room and expects you to do further research on the topic/experiment with it in your own way. The task list is there for more of a 'I completed this' sense than a 'I now know this' sense. This was my experience with 20ish rooms in the SOC L1 path, which I assume is very easy compared to more advanced rooms, so I cannot comment on how task lists work there.

[humble merlin]

That makes a lot of sense. I have about 4-5 years of casual pentesting experience under my belt, so a lot of the things in some of the learning paths come very easily to me.

But I didn't wanna "cheat" here if that's not the point, ya know?

But I also didn't wanna just make it unnecessarily more difficult for me.

[whole mirage]

I've just had a look at the Holo room, and the task list seems straightfoward. Don't really know how you'd approach it without looking at what it's asking haha.

[humble merlin]

See, that's where I'm at LOL

[whole mirage]

You may get more out of it if you try to exploit the machine without looking at what is being asked first, and when you've hit a limit you can submit the flags you already know and continue on from there.

But yeah I wouldn't focus too much on it and just do the tasks.

[burnt kiln]

anyone knows why sqlmap is ignoring --suffix when using --os-shell

it's breaking the payload and stopping it from uploading files

[sonic cosmos]

@burnt kiln This is because the --os-shell option tells sqlmap to execute a shell command on the remote system, and the --suffix option is not relevant to this task.

[burnt kiln]

Seems like there's no easy way to get a shell on the mysql version I'm dealing with so sqlmap is trying to use the injection to drop a php file and run it through web requests, so suffix is relevant in this case since it's needed for the injection to work

seems like a dead end anyways, but still weird

[gleaming current]

Hi all. I'm trying to do the OWASP Juice Shop room using my Windows client. I have OpenVPN connected and on the THM webpage I can see my IP in the green box at the top indicating a connection. However, when I launch the instance I cannot open the webpage or ping the IP address. The troubleshooting guide says to give the instance at least 5 minutes to boot up, but its been 10 minutes now and still nothing. Any ideas?

[finite aurora]

Experienced same a while ago
Regenerated and downloaded the vpn file again
It worked for me somehow

[late condor]

Hi I completed this room https://tryhackme.com/room/sakura It shows all the tasks turned green the questions are not showing up and the room is not turned green as completed rooms do. It didn't seem to be completed but there is no task left to do. What should I do.

[late condor]

BTW I completed that room long ago ig

[naive dust]

Getting this error when trying to load a room

[knotty haven]

Hello, Should I ask my question regarding referral link issue here? Is it the right channel?
I've already opened a bug report on the site, but it's taking a long time to answer and some of my friends want to start using the site with my reference link. Has anybody experienced a similar issue?

[stoic flax]

Wondering if anyone has faced the same issue. My subscription wasn't activated so i raised a ticket. Today, support seems to have resolved the ticket, but the problem is still there. Does anyone know if it will activate after a certain amount of time?

[naive dust]

Room: https://tryhackme.com/room/webenumerationv2

Task 6: There are some virtual hosts running on this server. What are they?

After running gobuster vhost -u http://10.10.35.223 -w /usr/share/wordlists/SecLists/Discovery/DNS/subdomains-top1million-5000.txt

I get no results

What I tried:

restarting machine
adding webenum.thm to /etc/hosts
adding --append-domain webenum.thm to the gobuster command
updating SecLists
pinging machine

It turns out I was supposed to use gobuster vhost http://webenum.thm

instead of the machine IP
(Which is absolutely impossible to know if you're a beginner)

[plush bay]

good catch and good point

even the gobuster help page seems to indicate you wanna use the ip

[stone panther]

why is that?

do you know

[naive dust]

Nope

[plush bay]

if you could resend the above message in #room-bugs maybe someone will look at it and change it or add some note about it

[naive dust]

Anybody run into issues with Intro To Logs? The VM on there crashed during Task 5.

[whole mirage]

Is there a way to download files from machines? They're unusable to me and I'd like to download the task/working files to do the exercises on my own machine. I used SCP for ssh-able machines but ones that dont allow that have me stumped.

The snort room is hell because it's so laggy and is intense so I cannot deal with browser-based. I just might have to manually replicate the files.

[naive dust]

Does anyone know what "Missing anti-clickjacking X-Frame-Options header" is?

I've seen this pop up when using nikto numerous times now and I can't figure out how serious this vulnerability is

[rotund meadow]

why doesnt http://fakebank.com work, how am I supposed to finish the first room?

[plush bay]

you need to open it in the split view

[rotund meadow]

how do you do that?

[plush bay]

on the top of the page next to this there should be a show split view button

but normally it opens that by itself when you hit this button:

if the room is made to open in split view that is

[rotund meadow]

tnx a lot

[plush bay]

guess you got it working then

[pastel wyvern]

Hi good afternoon, I have try hack me on my school account and I try to transfer my work and my voucher to my personal account, by changing my email address and I lost my work and my voucher. What should I do to regain my voucher and my work?

I lost my work and voucher on my school account*

[dense creek]

anyone able to get their streak restored by THM?

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Support can do it.

[sleek wing]

If I have an active VIP subscription and I use the voucher for one year, will it extend my VIP subscription for another year?

[pastel tinsel]

You can't use a voucher while having a running subscription, you'll have to wait for it to run out before using it

[queen moss]

When I try to join any room it just keeps loading without joining, this problem started after the latest site maintenance. Any help?

[glacial hound]

Hey, you might need to clear your broswers cache

[languid helm]

try ctrl+F5

[queen moss]

It worked, thank you.

[scenic torrent]

Gave +1 Rep to @glacial hound

[drifting stag]

Why http://burp/cert doesn't work ? For download cacert.dr

[high stump]

127.0.0.1:8080

if set on 8080 (default)

[drifting stag]

Thank u

[scenic torrent]

Gave +1 Rep to @high stump

[swift torrent]

Referring to the technique from question 2, what mitigation method suggests using SMS messages as an alternative for its implementation?
if there any fix for this question will be welcome

[pearl horizon]

Good morning

I keep getting this error when I try to use metasploit to create a session

[weary spindle]

Which room are you doing?

[pearl horizon]

Steel mountain

[pearl horizon]

Is there a solution to this please

[short glade]

Hi. I'm unable to start a room (razorblack) bc it's "running" (but it's not). I'm not able to terminate it as well, because when I refresh the page it's "spawned" again.

I'm on VIP if that matters

[short glade]

Maybe someone left this file using metasploit on the same box. Try terminating a box and start it again, so you get connected to other instance

[pearl horizon]

I’ve done that a few times same error

[short glade]

sh*t

do you have to use metasploit?

if there's a metasploit module, there's a big chence there is a standalone exploit for the vulnerability

maybe try that

[sleek temple]

I am a premium user at public profile it shows premium user but still I am getting Go Premium button and my level is 9 at public profile it shows 9 but at dashboard it is 1

And I have completed 98% of Jr penetration tester pathway but now it is 0

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

Need to contact support

[sleek temple]

Okay

[pearl horizon]

There’s a stand-alone exploit for this particular exploit but I really wanted to complete the MS module for the experience

[brave anchor]

@pearl horizon I had this problem too, after restarting the machine, it was ok.

[pearl horizon]

Thank you

[scenic torrent]

Gave +1 Rep to @brave anchor

[vocal plume]

For some reason it won't let me run nmap in the network security room.

[weary spindle]

what error do you get?

[vocal plume]

Let me reopen the machine to check if I got an error

[vocal plume]

There was no error

Would you like for me to paste what's in the terminal right now?

[weary spindle]

Yes please.

[vocal plume]

Starting Nmap 7.60 ( https://nmap.org ) at 2023-09-01 15:38 BST
Failed to resolve "MACHINE_IP".
WARNING: No targets were specified, so 0 hosts scanned.
Nmap done: 0 IP addresses (0 hosts up) scanned in 0.14 seconds

[weary spindle]

You need to start the machine on Task 3

[vocal plume]

I am on task 3

[weary spindle]

Yes, you need to start the machine.

[weary spindle]

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Have a read over this link.

[vocal plume]

Oh...

My bad. I thought I started it already.

Thank you for the help.

[weary spindle]

You started the attackbox, it's a different machine. 🙂

[steel mortar]

my friend doesn't see his top percentage, from which rank on does it display?

do you need to be top 50% or something

[weary spindle]

What rank are they?

[steel mortar]

273430

[wind sundial]

bump

[ripe thicket]

openvpn not connecting. Yes, I am running opnvpn on adm mode (windows) and I'm using my config file downloaded from my THM profile.

I also regenerated new profile and downloaded the new one. Nothing

[crystal marlin]

Hey there, please don't ask the same question over multiple channels. Ask once in the appropriate channel and wait if someone gets back to you. 🙂

Thx

[trim heart]

yes thanks, i'm so sorry for that

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

No worries 👍

[bronze vale]

Download it from here https://openvpn.net/community-downloads/

[sleek temple]

It's more than 24 hrs i didn't receive any reply for the mail

[weary spindle]

Support is a wait time of 7-8 days

[bronze vale]

It’s the weekend, support is closed over the weekend

[sleek temple]

My premium is till 24 sept 7-8 days I will lose

[sleek temple]

Oh then fine

[weary spindle]

I'll need to remember this

[bronze vale]

New rules, they should be communicated soon enough

[waxen gazelle]

Hey, I am trying to open up a url to get my next thm code but ive waiting 10+ minutes and I continue to receive a error response 405. what do i do?
Its for this url enter the url: http://MACHINE_IP/robots.txt

[steel mortar]

so, do we get to know when the rank displays for users?

[weary spindle]

You're using the wrong machine

[waxen gazelle]

alright, I did just hit start attackbox and then went along from there after it built the machine

[weary spindle]

There is a green start machine button in the room, depending on the room, depends where it is.

Normally task 1.

[waxen gazelle]

ahh right, so dont use the start attackbox option if thats available. no worries, ill give it a try 🙂 thanks heaps!

[weary spindle]

No, you need both if you don't have a vm.

[weary spindle]

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

[waxen gazelle]

okay, thanks! appreciate your fast response

[edgy zodiac]

Hi Guys, need some support, regrading an issue I have been facing for a while now, I started learning active directory after covering the basics I tried to join the "Breaching AD" room, whenever I try to join, it redirects to "My Rooms" of my profile whithout letting me join the room. Any advice?

[weary spindle]

Are you a subscriber or have a streak more than 7?

[edgy zodiac]

not a subscriber, will try the 7 day streak, thanks for the info

[scenic torrent]

Gave +1 Rep to @weary spindle

[wicked cape]

Need help. I'm in the Network Services 2 room, attempting to use mysql schema dump, but after numerous attempts, i keep getting a "Erro: 10.10.187.25: Load Error - cannot load file -- active record/associations - has many associations" error when I know that I've plugged in the correct ip address.

[noble wedge]

I'm having the same issue

[plush bay]

¯_(ツ)_/¯

[noble wedge]

But the photo is a png

92kb

thats whats confusing me

A lot of people are having this issue appearently

[cursive fox]

my attack box is constantly disconnecting

would anyone know why / how to fix?

(I am currently connected to a VPN but it does the same thing when im not)

[whole hare]

Good afternoon, I'm having an issue connecting to the vpn. I can connect from my installed OS (Linux) using my OVPN key file just fine, but when I try to use the same key, that has always worked, in my kali VM, I get a error about ciphers missing. I'm using openvpn 2.5.5 successfully in host OS, while openvpn 2.6.3 in VM won't connect. Any advice on how to add the AES-256-CBC cipher on launch would be appreciated. I believe it has to do with --data-ciphers but I can't seem to make it work.

[viral linden]

alguem me ajuda na tarefa 1

[lusty swift]

https://tryhackme.com/forum/thread/64f0bc3e82f867f4ff1f215c

This guy posted a lot of spam on the forums

[bronze vale]

cc @zealous yoke

[autumn imp]

same pb , do you find something ?

[light path]

Try the TryHackMe VPN script

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[light path]

I believe it was updated to deal with that

[autumn imp]

i'm in openvpn 2.6.3 (update yesterday)

in openvpn config i have data-cipher aes-256-cbc

script give me > fatal I Error: In line Certificate is invalid

[light path]

Can you verify yourself

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[light path]

So you can send screenshots

[autumn imp]

oh ty ^^

ok i need loop XD, script propose change server, i try that and now it's good, before i just try to regenerate certifacte or change serveur but not regenerate on new server

that all good, ty for script 😁

[light path]

Glad to hear that it's all good now!

[honest mauve]

Hello, I had a trial active for THM Business and after the trial period ended my own personal subscription is now gone aswell even though there are 111 days left. Can someone take a look at this?

[weary spindle]

!support

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

You'll need to email.

[brave anchor]

Hi, what's the difference between VPN regular and VPN VIP (apart from the name)?

[honest mauve]

Done, thank you! I was hoping to get this fixed today but I guess I will have to wait for the week to start.

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Even then it's a 6-8 day wait AFAIK.

[weary spindle]

Less users on the vip in theory, its slightly faster.

[brave anchor]

Ok i will try tonight thanks

[honest mauve]

Jesus

[weary spindle]

Just how busy support are really.

[honest mauve]

Yeah and normally I would have no issue with that but when my paid subscription gets messed up... I am not that patient.

[weary spindle]

Unless someone from support catches this and DM's you to E-mail.

Not much you can do, right now.

[bronze vale]

Mhm, but if there's an issue we're not going to hold that against you.

E.g. if your subscription wasn't activated properly, we'll reinstate your subscription 🙂

[honest mauve]

Yeah, I have no doubts about that. All good, I just use the weekend to progress on THM and that is not possible now.

[bronze vale]

Sorry about that, support is not open over the weekend. This should be communicated via the chat service on the website.

[honest mauve]

Yeah, it is and I respect that.

[naive dust]

hello guys, I have an issue with openvpn, I cannot nmap from macOS when machine is started, shows the vpn is connected but im getting:
"Host seems down"

Also cannot open machine in web if the lab is website dummy, having servers not responding.

has anyone had similar issue or im missing something?

[light path]

Can you try to ping 10.10.10.10 ?

or run the VPN script

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[naive dust]

cannot run the script, its says for linux, and I have macOs, if unix base maybe also would work but havent tried

and ping is impossible, getting: Request timeout for icmp_sec ..

[weary spindle]

Are you using the CLI?

[naive dust]

nope, OpenVPN GUI

I use cli on my kali linux tho and it always works

[weary spindle]

Please use thc CLI, the gui is bugged.

[naive dust]

Oh okay, thank you will try! 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle

[serene fable]

can someone guide me where is the option of changing profile pic? I am uable to find it

[light path]

I think its in About You

[weary spindle]

That one.

[serene fable]

wait, what tab is it?

[weary spindle]

General.

[serene fable]

it isn't available for me

💀

letme switch browser

[weary spindle]

Really?

I know the pfp has been having issues...

[serene fable]

😂 I just noticed, my uBlock extention was blocking it

damn

[weary spindle]

Ah, there we go.

Lol

[boreal swallow]

https://tryhackme.com/room/introtologs | Task 6: The log file doesn't exist, I don't know what's the issue...

[naive dust]

Hey guys I laucnhed a Windows Machine and connected to it via RDP, but the windows machine does not have internet connections. What could be the issue?

Hi, I have a problem I reset my phone and my pc and unfortunately I did not think of the A2F to connect to tryhackme anyone know if there is a solution? :/

[pine sluice]

HI, I need assistance with syncing the right access machine for https://tryhackme.com/room/linuxsystemhardening can anyone help me please?

[gleaming flume]

I'd email support

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[gleaming flume]

Is this for a room? If so then #room-hints or #room-help. You should also give more information like what room and task this is from. If it is not from a room than maybe #infosec-general would be better for you. Its quite possible that the Windows machine is not meant to have internet access

[gleaming flume]

#room-hints or #room-help is probably better for that. Sadly I don't have a sub atm to be able to look at the room and help you further, but if you post in there with more information someone will eventually help you out

[pine sluice]

Thank you so much

[scenic torrent]

Gave +1 Rep to @gleaming flume

[noble hare]

Does someone know about grep?

I'm currently doing fundamentals of linux part-1

and I can't figure out one of the exercises

[gleaming flume]

There's grep used in Linux Fundamentals Part 1? Maybe I'm thinking of the wrong room, could you link the room and explain your issue in #room-hints or #room-help

[gleaming flume]

That, is your Kali box, not the machine from the room. On task three you need to hit the "Start Machine" button and that will launch the Machine in a split-screen view where you can interact and type in your commands

[noble hare]

let me see

@gleaming flume "GET THM{ACCESS} this one?

[gleaming flume]

Yes

[noble hare]

doesn't work

[gleaming flume]

The flag format is probably wrong, remove everything before the THM part

Also you probably shouldn't post flags in here without at least censoring them with these || on either side of the text and if you have more questions go back to #room-hints

[weary spindle]

That's the wrong machine.

[naive dust]

Yeah I was doing the Weaponization room from the Red Team Pathway, and the machine was the first Windows machine not the one deployed in the Practice Arena. I was trying to replicate what the room was teaching but it had network connectivity issues so I could not open any websites or do anything

[weary spindle]

Are you a free user?

[naive dust]

No, I have an active subscription

[weary spindle]

I know some machines won't have a outbound network.

[naive dust]

I managed to finish the room its not an issue, was just confused on why the first machine had no Network Connectivity

[naive dust]

Yeah i figured thats the case, but either way it was a good room filled with lots of new knowledge

[honest mauve]

Any chance, someone can look at this?

[sharp totem]

hey im in the wonderland challenge, https://tryhackme.com/room/wonderland i don't how to connect to the machine can somone help

i tried with telnet, ssh

[bronze vale]

You will receive a response when someone reaches your ticket ;)

[livid sapphire]

I have an old laptop. Should I change the operating system to Kali?

[weary spindle]

Vm or attackbox?

[sharp totem]

attackbox

i mean there is the ip adress of the machine that i have to attack but i don't know how to connect

Title
Wonderland
IP Address
10.10.24.177
Expires
54m 50s

[weary spindle]

It's a ctf, so you'll need to enumerate.

[pseudo olive]

Hello Guys

can anyone pls help solve this Threat Intelligence Tools Task 7,, I have been strugling with this for long hrs now I'll do appreciate any help

[frail nexus]

hi i have premium account and still wait 1minute for machine to deploy is that supposed to be like that?

[vivid falcon]

yup, same

start it from the start of the room and you'll not even notice it

[weary spindle]

Yes.

It will just be the initial start up, you'll notice the difference when things take slightly longer to start up.

[fluid tundra]

First time trying to not use buildin attack box and use vpn

Might need some help :

What i have done : sys update / changing server / Eu 1/2/3 vip 1/2 / checking dev tun / data-ciphers in .ovpn / openvpn update / checking similar problem on discord / runing troubleshoot thm script / systemctl start openvpn

[bronze vale]

You do not need the VPN script if you use the AttackBox

[fluid tundra]

Ik , i want to use a vm instead of the attackbox

[weary spindle]

You need to use the VPN.

!vpn

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[fluid tundra]

Ok sorry my english is quit bad and i probably didn't express well my problem.

I use a VM to try to connect to the network via Openvpn

and i'm getting this error

[weary spindle]

You need to use sudo

[fluid tundra]

Solved, i can't handle the cringe to tell why it wasn't working

[weary spindle]

Didn't use sudo?

[fluid tundra]

worst , didn't use correct path for .ovpn file

[weary spindle]

Ah!

[cerulean grove]

Can someone help me with the VPN?

[weary spindle]

What's up?

[cerulean grove]

I can't connect

I've also tryed to run the script from faq but it failed

[weary spindle]

Which server?

[cerulean grove]

Eu regular 1 and 3 if I'm remember well

Mtu value failed at 1000, aborting mtu check

[weary spindle]

Which country are you in?

Are you on your own home network.

[cerulean grove]

I'm running
sudo openvpn myname.vpn from the directory in which I had the file

Italy

(flag on my profile say German btw)

Vpn with others (like HTB) work with no problem if can help this info

[coral pagoda]

Hello i seem to be having an issue with the VPN file, how much of a potato am i being and how can i unpotato myself?

[hasty dew]

is the ovpn file in the root (/) directory of the machine?

[coral pagoda]

no downloads folder

i assumes perhaps wrongly that running the command from the downloads folder would preclude the need to quilify that in the command

i should really proof read before posting

[hasty dew]

you're trying to use a file that is in the root directory .. to use a file that is in ur current directory, either remove the / or use a ./ before the file name

[coral pagoda]

no change

[hasty dew]

show me

[hasty dew]

ls?

[coral pagoda]

i have tried switching server and regenerating the vpn file aswell

[coral pagoda]

derp me

CAPITOLS

[coral pagoda]

Thank you for leading me to my shame

[hasty dew]

happens to the best of us

start using Tab instead of typing the whole thing

[coral pagoda]

yes i really should

[tribal burrow]

you do not need ./ before name.ovpn

sudo openvpn TibiusKane.ovpn

[coral pagoda]

my first tries (without capitols) was with out the ./ . not shown in the image but thank you for the tip

[tribal burrow]

you also need to be with terminal in same directory where .ovpn file is

[coral pagoda]

i was 🙂 thanks

[nova whale]

Looks like the Add 1 hour button does not have any effect (on windows boxes?) - the timer says 55m remaining, but the box has gone offline.
https://tryhackme.com/room/windows10privesc

[tribal burrow]

when you add 1h, refresh the site

[nova whale]

Yep, did that - it indicated >1h remaining, and the box continued to function

[tribal burrow]

is that 1st time that you add 1h extra? i think you can do max of 3x time