site-support

[barren heath]

Easy to use and setup

[broken bear]

if it's running in docker, it's not a vm, it's a container

[shell rapids]

Hi,

Why am I still have premium access when the expiration date says dec 2 2023?? I have premium access I can start machine a premium box and I have receive an email from THM that says something like this "Paypal: renewal failed" something like that

I have canceled my subscription before dec 2 2023 21:XX "[Important] We couldn't charge your Paypal Express Checkout" <- email header

[weary spindle]

If payment fails its usually expiry date + 3 days.

Because it will try and resolve it.

If it doesn't after 3rd day, it cancels.

[meager monolith]

the solution to this was just setting a ssh with the target machine,

[strange vale]

Hahaha yeah I mean that is definitely a way to do it. Probably a lot more work for just one room than just using the browser but honestly it's a good learning experience. Glad you figured out a solution.

[brave anchor]

Hello is there a way to open the attack box directly in a new tab ?

[weary spindle]

Yup

#general message

[noble echo]

Hello,
I tried contacting the support team, but I haven't had any response,
My subscription got auto renewed,
Kindly help.

[weary spindle]

Support are busy, if you contacted within 7 days you'll be fine.

[noble echo]

Do I need a stripe account for refunds?

[weary spindle]

you'll get refunded on how which method you paid.

[noble echo]

Thank you 😃

[brave anchor]

To do this you first have to open and then send it to a new tab, i want to start it directly in the new tab

[weary spindle]

Then no, there isn't currently a process, this would make good #feedback-and-ideas

[brave anchor]

Ok thanks for your reply

[empty ember]

average answer time is 7 days atm?

uhm

[weary spindle]

7-9 excluding weekends.

[empty ember]

then i can wait a lil longer

[humble rune]

Hi i'm having an issue
in the Advent of Cyber 2023 room in the day 2 task, i'm asked to use the attack box to finish the room
but when i actually open it, for the ip 127.0.0.1:8888/lab the VM don't open me nothing
how can i fix this?

[weary spindle]

You have a split screen machine instead of the attaclbox

[humble rune]

thanks for the help

[scenic torrent]

Gave +1 Rep to @weary spindle

[unborn roost]

hello, i've recently wrote a new tool to create and run your own "attackbox" locally or remotely and i'm testing this with "day 3 of advent of cyber" - if you would like to give a try https://github.com/hckops/hckctl let me know if you have any feedback 😄

you need to edit the config with something similar to

network:
  vpn:
  - name: thm
    path: <YOUR_PATH>/thm_eu_regular_1.ovpn

and this is the machine i'm currently using

hckctl box parrot-sec --network-vpn thm

[crystal marlin]

Can you access http://10.10.10.10 from the machine that is connected to our VPN?

[ivory spruce]

If you can't reach 10.10.10.10, you have an issue with connecting to the THM OpenVPN. Can you send the last few line of the logs (when connecting to OpenVPN)?

[crystal marlin]

Then it might be best to /verify with the token found in your public profile here https://tryhackme.com/r/manage-account/account-details and send a screenshot of your openvpn output

[exotic python]

I have a question, I'm already a tryhackme subscriber, can I use the new discount code AOC2023 or is it only for new subscribers?

[unborn roost]

was this question for me? yes anyway

[ivory spruce]

When will your current subscription expire?

[exotic python]

expired yesterday 😂

[ivory spruce]

You can make use of the code until 7th December and can be used by existing and new subscribers so long as their renewal coincides with the validity period.

You'll have to wait until the 6th or 7th before you try though

[exotic python]

thx

[scenic torrent]

Gave +1 Rep to @ivory spruce

Gave +1 Rep to @rare flume

[alpine breach]

It was one of the metasploit rooms in the complete beginner path. Seems to die very frequently for me. Nothing else has before maybe it’s just metasploit

[desert perch]

Attack Box keeps saying I had 3 or more attack boxes, even though I terminated them all.

Then when I go to the next room, there's a 2000 second wait time?

[restive flume]

have you tried CNTL + F5

[desert perch]

Trying it now.

Looks like it worked, thanks.

[restive flume]

no problem!

just a note F5 refreshes from cache and CNTL + F5 deletes the file from cache and contacts the server

[desert perch]

Will keep in mind.

[rare flume]

more or less it is always better than gui

[scenic torrent]

Gave +1 Rep to @rare flume

[rare flume]

Ha @short mortar

[desert perch]

thanks (since my original thanks didn't give rep)

[scenic torrent]

Gave +1 Rep to @restive flume

[restive flume]

No problem but don't worry about the rep thing. I just help out for fun.

[dull sedge]

Hey all, I'm not sure if this should be in site support or room help but I've joined the Wreath room but when I go to download the Wreath network VPN file for it it just spins loading and never downloads. I've tried multiple browsers, multiple PC's, even my phone. Normal VPN file downloads just fine. Any help would be appreciated.

[rare flume]

Zut terminal bari poxaren command line ei grel, 10 tari Windows user em exel

[bronze vale]

Hey, this is an English only discord server :)

[rare flume]

Sorry, we're just really happy when we find enthusiasts of the same nationality. 🇦🇲

[empty ember]

got a bit of a stupid question, but can badges vanish off the profile??

i think ive "lost" at least 2 of them

[weary spindle]

Whhich 2?

[empty ember]

linux priv esc and windows priv esc

oh nvm, stupid me

didnt see there are multiple privesc rooms, only had an eye on the one in the jr path ^^

[vast pier]

I'm not good with Discord, so sorry if this was already reported
there's an issue with room Malbuster, Task 2
at the question : "Based on VirusTotal detection, what is the malware signature of malbuster_2 according to Avira?"
I'm pretty sure the Avira signature changed since the question was created
The current signature for Avira in virus total is now : HEUR/AGEN.1306860 which does'nt work

[thorny prism]

Hi, I'm having an issue can anybody help me?

[weary spindle]

What's the issue...

We need context.

[reef flicker]

Just noticed my day3 Task9 has been unchecked. I completed it and submitted the correct answer yesterday ???

[weary spindle]

Are you sure?

[reef flicker]

Yeah

[spring mango]

Hello Everyone, I think tryhackme is down in my region I am getting a 524 response from cloudflare. Is there anything going on currently? I have had a few people in the area try and they get the same.

[weary spindle]

Yes, staff are working on it

[thorny prism]

I can access any of the thm pages from my VM, on my computer works normally but through my Kali doesn't connect, keep loading and after a time got cloudfare error

[thorny prism]

Exactly the same

[reef flicker]

I can't even start attack box to complete this now. "Non-subscribed user can only deploy the free AttackBox for 1 hour a day. Subscribe for unlimited access."

I did not use up all of my 1 hour for the day

[weary spindle]

Did you open up an attackbox then close it?

[reef flicker]

yes I did to complete todays task

[weary spindle]

Then when you boot up at the instance, and close it, it still goes on for 60 min(s)

So you can either

Sub

Use a VM

Wait until tomorrow.

[reef flicker]

Does it matter if I do the task late?

[weary spindle]

Not at all

(except for the daily prizes)

[reef flicker]

Whats that?

[weary spindle]

Just a daily prize draw, you should be fine if you finish before 4PM GMT.

[reef flicker]

But I cant get qualified for the day 3 now right?

[weary spindle]

You can, I'm sure.

[reef flicker]

I dont understand. A day has already passed right? How long after the day can you still be eligible

[weary spindle]

Day 4 has just started.

[reef flicker]

https://www.reddit.com/r/tryhackme/comments/r99m08/why_are_tasks_for_advent_of_cyber_not_being/ also looks like someone also faced this before.

[reef flicker]

So I cant qualify for the daily prize for day 3 right

[weary spindle]

Nah, you'll be fine though.

Still other chances.

[reef flicker]

cool

[torn vessel]

Thought I'd try my luck and go for a hit or miss. Anyone in the staff able to confirm general time window for when business trials are started? We had a chat last week with the GAE and was supposed to start today, but no contact after last tuesday whatsoever. Also emailed the representative earlier today with whom we had a talk with, but no response thus far.
Technically no rush, but we kind of had planned a team meeting for reviewing the platform, so would be great if the platform itself would also be available during that time.

[weary spindle]

Just wait patienly for the E-mail. 🙂

[torn vessel]

Been doing that for a while now, but it is what it is. 🙂

[weary spindle]

Staff will see it in here, if they have time to reply in here, they will.

[wheat tartan]

hi, Hey everyone! Do you happen to know how to fix this issue after you are successfully connected to OpenVPN to TryHackMe? When I type http://MACHINE_IP I don't see a website. Also my Access server status and connection have a green checkmark. When I go to vulnversity and click on the rooms IP and try to open it within my browser, it shows this.
This site can’t be reached.
In nmap i see this port 80 is open
and when i put 10.10.10.10 i have acces to page

[torn vessel]

Start the VM connected to the room, and machine_ip will change to the IP you need to access

[wheat tartan]

how ? I didn't understand

I launch the room machine before launching the VPN?

info : i'm using openvpn in kali linux

[weary spindle]

Is port 80 open?

[wheat tartan]

yes

the port is good all is good

[torn vessel]

Are you visiting http://10.10.10.10/ or http://machine_ip/ ?

[idle latch]

hi, everyone! i started my vm, see my ip but i cant see the appropriate window of my vm. how to fix it?

[weary spindle]

I'd check again.

[wheat tartan]

http://10.10.10.10/ is running but http://machine_ip/ not running i'm trying a lot of room same problem

[weary spindle]

machineip isn't an ip.

[torn vessel]

http://machine_ip/ is just a reference to visit the IP of the machine which is connected to the room. E.g., the Virtual Machine you need to attack

[weary spindle]

You need to start the machine in task 1.

[wheat tartan]

i'm used to it working but here the machine http://machine_ip/ only waits and doesn't execute

for all rooms

[weary spindle]

Do you press that green button?

[wheat tartan]

yes i'm told you when i put in kali 10.10.10.10 he working

but if i put http://machine_ip/ for any rooms just waitings and don't see the page

[weary spindle]

Are you using 10.10.xxx.xxx or MachineIP ?

[torn vessel]

It is not a valid URL, you need to visit the IP of active machine

[wheat tartan]

10.10.10.10 is one of methods to test if he work openvpn

[weary spindle]

Yes.

[wheat tartan]

yes when i visit the IP of active machine not workings

[weary spindle]

But you're not reading the advice we're telling you.

[wheat tartan]

yes this ip adress don't work for me

[torn vessel]

If you follow the tasks of vulnversity, you find that the web server is not on the usual port

[weary spindle]

Nmap it, and pay attention.

[wheat tartan]

i precise the port 80 for rooms mr.robot

[torn vessel]

6th question of task 2

[wheat tartan]

i have problem in all rooms

not only this rooms

like rooms mr.robots is port 80

not working

the machine ip page does not give an error but just loads endlessly and never opens

[keen karma]

Hi, is the site down?

[reef flicker]

Ahh. I did not click the last "completed" button where it asks you to check the other rooms.

1. Why is "completed" written on it if it is not completed?
2. It is just colored boundary but fills up green when pressed. Thats the opposite of how generally button ui works
3. Why is it necessary for the task to be completed.
   Bad design imo

[torn vessel]

As @weary spindle said, run port scan against the target machine with nmap, and pay attention. Use the info you find to answer to questions in order.

[wheat tartan]

ok I will give you the dashboard:
openvpn work, ping ip vpn work
ip machine attack started
nmap i see this port 80 is open
but htpp://ip_machine:80/ not work

[weary spindle]

What's your ip?

[wheat tartan]

vpn or machine ?

[weary spindle]

Machine.

[torn vessel]

I repeat what I already said, read the instructions of the said vulnversity room you had issues with. Web server is not on the usual port.

[wheat tartan]

10.10.45.70

[wheat tartan]

10.10.45.70

[agile jackal]

My open vpn connection doesn't work properly

[weary spindle]

Works for me.

[wheat tartan]

for me not 😦 i don't uderstand

[weary spindle]

sudo ip link set dev tun0 mtu 1200 Can you try that command for me please,in a different terminal with your VPN on

[wheat tartan]

yes that is work 🙂

you are my man Scrubz

[weary spindle]

Ah, it was your packet size.

And the confusion was you're not doing Vulnersity,

[wheat tartan]

i told you problem for all rooms not just this 🙂

so thanks have nice evening

[weary spindle]

Happy hacking.

[storm moat]

I’m asking myself that, too. The site isn’t loading on different browsers. It eventually loads to a “timeout” with an error via Cloudflare on prod-load-balancer.tryhackme.com.

[wise zenith]

Where should I run the /verify command to link my discord?

or does it even matter?

[weary spindle]

In here is fine

[wise zenith]

no worries, thank you

[civic hawk]

Hi, I'm on day3 AOC-2023 room, when I start the machine and AttackBox, I can't access to it, I get this error message after initialising Attackbox bar : The connection has timed out
An error occurred during a connection to vnc.tryhackme.tech.
I retried many times and it's always the same error, can you help me to access it pls ?

[stiff rivet]

I'm getting the same thing @civic hawk

[stray nimbus]

Im having this problem as well, cant access tryhackme

[spark wharf]

i keep getting timeout when trying to setup the vpn

but the website says i'm connected

i can only do like 1 a day even if it only takes me 5-10 min bc even if i only take 5 min on the attackbox or if i close it before it even loads,i reach my hour for the day

[naive dust]

we checking for issues on our end, but suspect it's a regional issue with external providers. We are talking with our providers to investigate the root cause. Apologies for the inconvenience cc @civic hawk @stiff rivet

[stiff rivet]

thank you McSkidy!

[unreal sage]

just confused which carrer path to follow , earlier i was doing google cybersecurity professional course

[stiff rivet]

we're gonna save christmas don't worry

[stray nimbus]

Oh okay, thank you!

[scenic torrent]

Gave +1 Rep to @slender plume

[stiff rivet]

im in australia if that helps

[unreal sage]

guys just i need guidence

[stiff rivet]

try in general

this channel for site issues

[spark wharf]

why does my vpn profile have a different ip name than the website? is that the issue? i'm just so lost on how to set up this VPN as my windows doesn't have the right click run as admin or the import file options, they're just through the app

[stray nimbus]

And im in central america if that helps

[gloomy parcel]

what do i do with a discord token?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 4, 2023, 6:46 PM

[weary spindle]

Read the link I sent you. 🙂

[icy wraith]

Hi, i have some troubles to acces tryhackme

[weary spindle]

Known problem, staff are looking in to it.

[icy wraith]

oh ok, thanks!

[storm moat]

Thanks for the info!

[scenic torrent]

Gave +1 Rep to @slender plume

[spring mango]

Just a quick drop here. Following up on the site being down for us, is there a timeline or anything of when we will be able to access it again?

[weary spindle]

Staff are aware

[sand junco]

Site down on my end

[kindred cosmos]

Trying to setup OpenVPN for the first time and after typing in yes. I try typing in the password tryhackme. It won't work. What is the password to connect?

[round compass]

Is there an issue with THM, I am getting a CloudFlare Timeout error when trying to access the Dashboard. Located in USA East coast. AT&T Fiber network

[raw cipher]

@round compass yes, the team is aware of it and working with the vendor to get it back up.

[round compass]

Okay thanks, will check again in a few hours.

[eager fulcrum]

There's not a password to connect. Can you verify with the bot and then send a screenshot to show us what you mean please?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 4, 2023, 7:21 PM

[eager fulcrum]

Ignore if the website says you're connected as that's unreliable. Can you screenshot the output of your openvpn command please?

[spark wharf]

i am using the app, and just pressing connect

[eager fulcrum]

It was broken on Windows for a while, I think it still is.

I recommend creating a Kali VM and connecting from that directly

[weary spindle]

You need to use the communities one

[spark wharf]

ah interesting i will try to download that one. i just followed the website instructions

[eager fulcrum]

Kali VM better though, no NAT issues

[weary spindle]

Safer

[eager fulcrum]

And no installing hacking tools on Windows

Which is no fun

[spark wharf]

i have kali vm but if it's just a website i sometimes just want to pull it up without starting opening the virtualbox

[spark wharf]

this site for the communities one? https://openvpn.net/community-downloads/

yeah cuz the website says i'm connected but i cannot open the webpage regardless so it's not connected

[weary spindle]

Yeah, but I'd go with what James said and use a VM.

[tough lava]

I had the same issue yesterday, using the Kali VM solved it

[spark wharf]

got it

[eager fulcrum]

There's also http://10.10.10.10 for checking your connection

[spark wharf]

yeah it wasn't working on that page

[kindred cosmos]

So I am connected to OpenVPN but when trying to connect to the room it asks for a password and it doesn't accept tryhackme

I'm in todays Advent room.

wait.. not sure but it may work now...

[green lantern]

greetings!
help pls, ive been unable to access THM since early morning, getting an error code 524, prod-load-balancer.tryhackme.com host error. please advise...

[kindred cosmos]

It still doesn't work.

I'm using a Kali in VM

[icy wraith]

know problem

[weary spindle]

Which room are you trying to SSH in to?

[spark wharf]

they said AoC specifically day 4

[weary spindle]

I was double checking.

You don't ssh in to the machine.

[kindred cosmos]

Today's Advent? I am reflecting on this. Maybe I don't have to in order to do the room?

[weary spindle]

That's why you can't SSH in.

[spark wharf]

to connect to the vpn?

https://tryhackme.com/access

[weary spindle]

They're connected.

If they weren't connected, the machine wouldn't be asking for a password.

[spark wharf]

got it

[weary spindle]

All you have to do for AoC 2023 Task 4 is use Cewl, Ffuf and the browser.

No ssh.

[kindred cosmos]

Okay. Must I use the Attack box? I am trying to understand the logistics of when and why to use ssh. Like for today's room am I able to complete using my kali VM and just being connected to OpenVPN?

[spark wharf]

to connect to the webpage yes you have to use the attack box or vpn

[weary spindle]

No, when you start the machine with the green button, you'll get an ip in the active machine information.

[kindred cosmos]

Okay.

[random river]

Is this still an issue with the site? It was an issue at least 3 hours ago and I see a lot of people being to access the site, but im still getting this..

[spark wharf]

i've found mearly opening it even if you press shutdown right away uses the hour

[spark wharf]

known issue

[random river]

so basically just wait it out?

[weary spindle]

Yes.

Nothing else you can do.

[random river]

fair enough...thx!

[green lantern]

understood, thanks

[ashen scroll]

Is the tryhackme site down? I've been trying to get in since morning but its not loading

[spark wharf]

yes known issue

[raw cipher]

@ashen scroll Yes, the team is aware of it and working with the vendor to get it back up and running.

[ashen scroll]

Okay! Thank you!

[iron hinge]

If you use a VPN, I changed to Georgia and successfully logged in. FL was unable to connect.

[west marlin]

i was doing the advent with the attackbox but wfuzz is not filtering my results, dunno know why ...... it even says it filtered them (filtered is 1 less then total) does anyone has any idea why ?

[eager fulcrum]

Usually you gotta hack your way in and you won't be provided with SSH access

[kindred cosmos]

@eager fulcrum I think I understand it now! Thank you for your help earlier. I was able to complete the room. It was a fun one.

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[storm moat]

Same issue here. It’s still happening. I did see in the chat earlier that THM is aware of it.

[zealous yoke]

We checking for issues on our end, but suspect it's a regional issue with external providers. We are talking with our providers to investigate the root cause. Apologies for the inconvenience

cc @storm moat @ashen scroll

[swift valley]

This worked Thanks!

[scenic torrent]

Gave +1 Rep to @iron hinge

[keen karma]

This worked for me

Thanks

[ashen scroll]

No worries.. i hope it gets resolved. its still down on my end. i dont have a VPN to change regions either. Im just stressed about losing my streak..

[weary spindle]

It can be restarted

[iron hinge]

I use ProtonVPN & there's some free access, may help
https://protonvpn.com/

[tall jacinth]

Same problem on both work and home connection but not on mobile network
Cloudflare seems to have a lot of ongoing maintenance in various region

[ashen scroll]

oh

[ashen scroll]

what can be restarted?

[keen karma]

opera gx vpn works

it's free

[tall jacinth]

Just solved for me, server seems back to work

[weary spindle]

Your streak

It can be reset back to what it was.

[honest phoenix]

Sorry to cross post, but I noticed an issue with one of the rooms. I posted it in #subs-room-help. Hopefully the staff see the message.

[ashen scroll]

ohh i see..

the website is back up for me! yay!

[earnest wedge]

Back up for me also! 🙂

[keen karma]

same here 🙂

[wintry light]

Down in NZ still, cloudflare landing page, prod-load-balancer.tryhackme.com host error

Edit: still down in NZ, tested via two ISP and devices. UTC 2244

[raw cipher]

tryhackme site back up and working

[stone trench]

hey, could someone help me with xrdp

[mortal steppe]

keep getting timeout errors for vnc.tryhackme.tech when loading up the attackbox
is that a known issue currently?

[lavish flower]

Hello everyone. I've been trying to work through the holo room, and have been encountering a significant issue with ovpn.
The original ovpn config file that I had been using stopped working when I came back a few days later to work on the lab. So, I went to the access page to regenerate it. The problem now is that the regenerated ovpn files are only 2KB (compared to the 8KB they should be), and they do not work.
I have tried waiting for the network to shut down and restart, I have tried leaving and rejoining the room, and nothing has managed to fix this issue with generating a working OVPN file. Has anyone else experienced this issue?

The 2KB files it generates only show one certificate and one static key. The overall file is 65 lines of code whereas the 8KB files that it should be generating have, as you say, 2 certs, a private key, static key, and ~178 lines of code

This is the error it throws trying to run the 2KB ovpn file:

2023-12-04 17:57:11 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-12-04 17:57:11 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-12-04 17:57:11 library versions: OpenSSL 3.0.10 1 Aug 2023, LZO 2.10
2023-12-04 17:57:11 DCO version: N/A
2023-12-04 17:57:11 OpenSSL: error:0480006C:PEM routines::no start line
2023-12-04 17:57:11 OpenSSL: error:0A080009:SSL routines::PEM lib
2023-12-04 17:57:11 Cannot load inline certificate file
2023-12-04 17:57:11 Exiting due to fatal error

[storm moat]

THM is finally working on my end.

[warm prairie]

Iam not sure Iam in the right room but, I have an issue, Iam doin the breaching AD room, and when I try to password spray its just not working, Error:

equests.exceptions.ConnectionError: HTTPConnectionPool(host='ntlmauth.za.tryhackme.com', port=80): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f805ddc4b38>: Failed to establish a new connection: [Errno -2] Name or service not known',))

[ivory rover]

hi i have a connectione rror timedout to openvpn

[ivory spruce]

Free users can only the attackbox for an hour each day. However, another option would be to use your own kali VM.

No, it will still eat away at the one hour attackbox use limit.

[ivory rover]

and tryhackme shoaw me that iam connected and its ok for the status

[random river]

@zealous yoke @storm moat THM working on my end now as well...woohoo!

[proper monolith]

all the vpns keep timing out for me too

[storm moat]

🙌

[terse lark]

hmm can't start an AttackBox as a free user even though I've only had one open for like 8 minutes today. Complaining about the 1 hour limit

[wintry light]

Still down in NZ, two different ISPs and devices

[pine ether]

guys I can't access the site through web and mobile idk what's going on

[left comet]

Hi, sorry to bother, but I was trying to complete day 4 AOC but it kept saying that the link wasn't working, so I tried to reopen the attackbot hoping that would help but it says I need to pay for it and I can not open a VPN because I am completing the challenges on a Chromebook. Any advice?

[pine ether]

error code 524?

[ivory spruce]

Can't reach the site as well. Might have to wait until this is resolved. From previous messages, this seems to be a regional thing.

[ivory spruce]

Which link are you referring to? Have you checked if you can access the main THM site? Free users can only use the Attackbox for an hour a day, you can either wait until it becomes available again, or you can setup a kali VM (which has no restriction on the number of hours).

[left comet]

http://MACHINE_IP/login.php

[ivory spruce]

Have you clicked on the green Start Machine button attached to the task?

[left comet]

I have, but nothing happens

It shows the message at the top, but thats it.

[ivory spruce]

You have to wait for 3 to 5 minutes depending if its a Windows box for it to completely spin up.

[left comet]

It says for me to access the machine, I either need the attackbox(which I do not have access to unless I pay) or I use a vpn(which I cant access because I am on a Chromebook).

[left comet]

I'll wait and see what happens.

@ivory spruce nothing has happened so I am going to try and watch the video to see if I can either figure out how to access the machine or understand how to get to the answers.

[ivory spruce]

Did an IP address not appear after waiting for a couple of minutes?

[left comet]

No, so I’m watching the video that was posted to see if I can figure out how to access it or find the answers.

Good news, after watching the key parts of the video. I learned how to use CeWL and assuming that the timer that keeps telling me I can’t start an attack box ends tomorrow(since it will be 24 hours) I will try to start the challenge then. And the video taught me how to find the answers so I can answer the questions. Thank you for your time.

[stiff ginkgo]

still no access from NZ. sadpanda

[scenic needle]

good day, i can't access the site and it gives a timeout: prod-load-balancer.tryhackme.com host error from cloudflare, is it an outage on certain regions or is it just me?

[stiff ginkgo]

certain regions bud

[scenic needle]

sad >_<

[ivory spruce]

Same here from where I'm from.

[wintry light]

There's dozens of us, dozens

[scenic needle]

are the site admins aware of this issue?

[stiff ginkgo]

yarr. they think it might be something with cloudflare itself despite what the error page is claiming

my money is on something dumb with aws, cert issue or something

note if you really cant wait, Tor Browser works fine

[wintry light]

Yea, pretty much any form of VPN will get you in, as long as it lands you somewhere outside Oceania

[scenic needle]

outside oceania and sea

[wintry light]

Yes

[ivory spruce]

Yes, they are. However, this seems to be a Cloudflare thing.

[tawdry orbit]

The issue seems to be regional in nature, but we're still investigating it. 🙂

[scenic needle]

i see, there won't be a problem if we used vpn or tor for the time being?

[tawdry orbit]

VPN should be a good temporary mitigation. 🙂

[scenic needle]

okay, thank you

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[golden breach]

Hello, does anyone know why my machine on KOTH keeps timing out? I am using the openvpn and I have tried regening it as well. Everytime I run an nmap scan or gobuster scan it times out. This also goes with trying to brute force with hydra or even trying to connect to SMB it doesnt even work to well. When I stop all these tasks and I ping the machine after a while I get ping requests back. I can also access the machine on port 80 so not sure what the problem is. Can anyone help?

[rough totem]

Hi, I cant connect to Machine for Wireshark: Traffic Analysis room. For the last 10-12 hours it's reading "vnc.tryhackme.tech took too long to respond". Any Plan B for this? Appreciate your response. Thanks

[blissful jacinth]

Hello, My openVPN connects, I get an IP but I cannot ping the machines. How to resolve this issue? I generated new config and used that. Still cannot ping!

[lament hornet]

Nz seems to be back up and running finally

[scenic needle]

and looks like SEA can now access as well

[lament hornet]

Must be running through the same infrastructure I’d assume then

[ivory spruce]

Yes! Thanks for the update

[scenic torrent]

Gave +1 Rep to @scenic needle

[pearl pendant]

Try changing the server maybe ?

[vagrant pollen]

Hi guys, I can't seem to join Enumerating Active Directory Room, is it a premium exercise room? It Keeps showing to the room's I'm in whenever I click joined room. I thought it was a room limit so I deleted those that I've finished. Thanks in advance

[west chasm]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Dec 5, 2023, 6:08 AM

[vital karma]

Is it just me or the VM's timer is not what it supposed to mean?
I thought as a free user I have collective 1hr per day to use it. But it seems once I run it no matter how much time is left, I can't run it again.
I use the VM for today's advent task and it had 36mins left, but now I cannot run it again for some reason. I had made sure I had terminated the VM when I stopped doing the task, so technically I should have 26mins in the VM for the day. But I don't?
Am I not understanding how it works? Thank you.

[ivory spruce]

The Attackbox you mean? Is it not possible to use a kali VM instead?

[vital karma]

Sorry. Yes, Attackbox.

[ivory spruce]

Do you have a streak of at least 7 days?

[vagrant pollen]

No cause I was looking for AD exercises and realize THM has them, just wanting to brush up on windows haha. Is it a requirement 💀

[ivory spruce]

#general message

[soft folio]

Hello, I don’t have access to my 2FA and can’t login in to my account. I emailed support no reply it’s already been 2 days . Can someone please help?

[vagrant pollen]

Damn HAHA, that's an L on me I guess

[vital karma]

When I try to use Kali VM it says You need to subscribe to start this machine

And when I try to start Attackbox Uh-oh! Non-subscribed user can only deploy the free AttackBox for 1 hour a day. Subscribe for unlimited access.

[ivory spruce]

I mean connect to the THM network via OpenVPN in your kali?

[vital karma]

But I am sure I did not use up 1hr today

[vital karma]

oh you mean start the machine and connect it locally?

[ivory spruce]

THM Support response time is at ~8 to 9 working days as they are very busy especially with the AoC event.

[vital karma]

I haven't thought of that, will try that. thank you.

[vital karma]

Although the question still stands, if I haven't used up my daily quota of 1hr why can't I start it again?

[ivory spruce]

You'll have to drop an email to THM Support directly for this one.

[ivory spruce]

1. What room are you working on?
2. Have you left the terminal you connected to THM OpenVPN and worked in another terminal?
3. Not all machines respond to ping requests (especially Windows boxes due to Windows firewall).

[vapid plover]

I can't generate "wreath" network vpn file. Could someone confirm that they can't either or is it just me?

[ivory spruce]

Suggest to ask this in the #wreath-network channel to get feedback from other users.

[vapid plover]

I did't realize there was channel for it 😅 it seems Im not the only one...Thank you!

[vital karma]

Thank you my friend. I connected via OpenVPN and was able to finish the Advent task swiftly!

[scenic torrent]

Gave +1 Rep to @ivory spruce

[ivory spruce]

Glad I could help

[rocky lava]

It looks like if i close AtеackBox I cannot reuse it again 😦

And why VPN profile is not working?
2023-12-05 02:24:58 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2023-12-05 02:24:58 Exiting due to fatal error

[ivory spruce]

What VPN server are you using?

[open verge]

I'm having trouble connecting to the OpenVPN server (54.193.240.194 1194). It used to work last week, but now it just hanges. While OpenVPN is attempting to connect, the tryhackme.com website briefly shows that I am connected, but then OpenVPN just times out.

Also, why the heck does AttackBox gives you Ruby 2.5.1. That is an ancient version of Ruby that was released five years ago and reached End-of-Life two years ago, meaning it's no longer receiving security patches or any patches. You're giving users a potentially unpatched/insecure version of Ruby. Even Debian stable gives you Ruby 3.1.

[weary spindle]

I think it may have something to do with functionality of older rooms, the update may break a high number of the older content.

Cc @zealous yoke

[open verge]

This is for Advent of Cyber 2023, which I believe is not an older room.

[ivory spruce]

The Attackbox is using a single base image if I'm not mistaken.

[weary spindle]

No, but the same attackbox is spawned everywhere.

[open verge]

What if you created a second AttackBox for newer rooms? Maybe that would be better than using the same image for both older and newer rooms.

[rocky lava]

EU-Regular-1

[weary spindle]

I've pinged the staff member who maintains the attackbox, they can give you a more accurate answer on both questions than I.

[open verge]

That does not explain why you must use an older version of Ruby? Is there a specific tool that requires <= 2.5.1? I am pretty sure I could recommend an alternative tool, or even write one for you (I develop open source security tools in Ruby, btw).

[weary spindle]

But I do suspect it's for older content support, as for having two images?

Possibly more work/higher costs/ and ensuring the correct image boots up for the correct room.

We are also not staff members, but volunteers.

[open verge]

If you don't keep versions up to date, more people will decide to stop paying, which means less money every year. It pays to invest in your infrastructure.

[weary spindle]

Tbh.

You're the first person I've seen comment on it.

[open verge]

OK I won't argue with volunteers about the AttackBox versions. That seems to be someone else's choice/responsibility.

[weary spindle]

... I did try telling you that and I pinged the staff member who manages the AB...

As it's currently 08:19

They will reply when they can. 🙂

[open verge]

👍

[ivory rover]

its still on this error for me

[zealous yoke]

Hey 🙂 so the AttackBox has a lot of moving parts, a lot of different tools that require all sorts of dependencies and a large variety of environments. Updating a/b/c can and has broken x/y/z before. I try my best to maximise compatibility for our older catalogue of content as well as our newer. This may involve running things in containers, or having multiple versions, or for example, maintaining a current version although it isn't the latest. For example, IIRC, there's three different glib versions for this reason, as well as not to mention python2, 3.6, 3.8 and 3.11 which has it's own headaches

I do understand that is a considerably old version of Ruby, but, to be honest, outside of patches, there hasn't really been a reason to update it so far. Updates for dependencies and tooling are not done lightly because of the wider impact it can have and the testing that needs to be done. A great example of this is when I migrated the AttackBox from Metasploit 5 to Metasploit 6. There was weeks of things behind the scenes that surrounded it.

Regarding security concerns, the AttackBox is on a public network, so it is prompted to not store sensitive files, etc

If you have any suggestions or feedback for the AttackBox, send an email to [e-mail] and it will filter through to me 🙂

cc @weary spindle

[open verge]

With all due respect, this sounds like an excuse for not doing the work of upgrading the Ruby version, which would allow for newer versions of various Ruby tools. I will send an email.

[zealous yoke]

It's not an excuse, I have said that there hasn't been a reason to upgrade Ruby so far. If a content engineer develops a room that uses a tool that requires a certain version of a dependency (i.e. ruby, python), then it will be made compatible on the AttackBox (be it installing or updating that dependency).

So far, I haven't received any requests internally to upgrade Ruby on the AttackBox. I'm not against it, same with any dependency. If it's needed and won't affect other things then sure. I only support and maintain what is on the AttackBox, i.e. if a user wants to use an alternative tool to what is already provided, it is on them to make the environment compatible. But yes, please send and email and we can continue there 🙂

[open verge]

Please explain to me specifically what is blocking you from upgrading the Ruby version from 2.5.1? Is it a specific tool in question which is holding it back? Is it a base distro version issue? Have you even tried upgrading the Ruby version? Do you have any basic tests to ensure various tools work with newer versions (ex: running thetool --help and checking the exit stauts)?

Well, you are now officially receiving a request to upgrade the Ruby version on AttackBox. You can't continue using an ancient version of Ruby. It will eventually be removed from Debian/Ubuntu's package repositories. It will obviously not compile against openssl-3.0, and probably will have troubles with newer versions of glibc, gcc, etc. New software versions eventually get released, and people have to upgrade. This is just the natural progression of things. Continuing to cling to Ruby version 2.5.1 (which is five years old) for fear of breaking something, is a losing strategy that might come back to bite you.

[ivory rover]

please

[weary spindle]

Which country are you in?

[ivory rover]

FR

[stiff pebble]

Started a session and attack box for aoc challenge 4 - completed within 10 minutes but now I'm getting an error saying I can't spin up any more attack boxes as my 1 hour limit has been used

[weary spindle]

You can only boot up an attackbox once per day, and then for 60 min(s) as a free user.

[weary spindle]

I don't want to assume, so I'm going to say.. France?

[ivory rover]

yes

[zealous yoke]

Please explain to me specifically what is blocking you from upgrading the Ruby version from 2.5.1?
I don't have any specific examples to hand without checking. I am just saying that I haven't had any requests internally to update it.

Is it a base distro version issue
This does play a large part of things which can be a whole entire discussion itself

Do you have any basic tests to ensure various tools work with newer versions (ex: running thetool --help and checking the exit stauts)?
Yes, there are checks and tests when tooling has either been installed or upgraded. That includes it, but there are additional checks, for example, tooling often changes argument/syntaxing, or the tool might work differently now compared to how it used to - that needs to be checked too.

Well, you are now officially receiving a request to upgrade the Ruby version on AttackBox.
This needs to be done via the appropriate channel which is [e-mail]

New software versions eventually get released, and people have to upgrade. This is just the natural progression of things
Yes indeed, which is what we do, but it's involved. I used that Metasploit version as an example. Upgrading from MSF5 -> MSF6 while it was a very easy upgrade on the AttackBox itself, it required updating content on our site which goes through it's own processes, etc

Continuing to cling to Ruby version 2.5.1 (which is five years old) for fear of breaking something, is a losing strategy that might come back to bite you
I'll expand this and say that we don't cling onto things. It's all about pacing and bandwidth. The Metasploit example is great, Burp Suite is another. Burp Suite changed it's UI which meant a whole module had to be re-written. This takes time, lots of collaboration with other departments and business matters that are above me

I'm maybe misunderstanding, but it seems you think that I just don't want to action it. It's not that, i'm trying to explain that there're a lot of knock-on effects and considerations that need to be discussed. Be it Ruby, Python, Burp Suite, Metasploit, etc

[stiff pebble]

So once a single challenge is complete, that's it then?

[weary spindle]

Well, yes and no,

You can terminate target machines and leave the attackbox running.

[stiff pebble]

Can tell I've not really used the platform! I was able to connect briefly to another challenge then it cut out so that's probably the reason (attack box not running or I've closed the wrong window)

To counter this, I did setup the VPN and can ping challenges (like aoc-Day 3) however, the browser doesn't load on my local machine

[open verge]

I don't have any specific examples to hand without checking. I am just saying that I haven't had any requests internally to update it.
If you do not have any specify reasons why Ruby cannot be upgraded to 2.5.1, and you have not even tried, than that kind of sounds like a fear or hesitation to upgrade things. This is common when dealing with critical legacy software/systems.

Yes, there are checks and tests when tooling has either been installed or upgraded. That includes it, but there are additional checks, for example, tooling often changes argument/syntaxing, or the tool might work differently now compared to how it used to - that needs to be checked too.
Well have you tried upgrading Ruby to 3.x and seeing what breaks?

This needs to be done via the appropriate channel which is [e-mail]
Like I said before, I am doing this now.

I'll expand this and say that we don't cling onto things. It's all about pacing and bandwidth. The Metasploit example is great, Burp Suite is another. Burp Suite changed it's UI which meant a whole module had to be re-written. This takes time, lots of collaboration with other departments and business matters that are above me
Than why haven't you updated to Ruby 3.x yet?

I'm maybe misunderstanding, but it seems you think that I just don't want to action it. It's not that, i'm trying to explain that there're a lot of knock-on effects and considerations that need to be discussed. Be it Ruby, Python, Burp Suite, Metasploit, etc
Then please explain the exact specific blocking issues preventing you from doing it? So far you haven't been able to do so, just giving generic concerns. Have you even tried to upgrade the Ruby version? What broke?

[zealous yoke]

hesitation to upgrade things. This is common when dealing with critical legacy software/systems.
Hesitation yes because of all of the above

Well have you tried upgrading Ruby to 3.1.x and seeing what breaks?
I haven't, no, but the AttackBox is just one of my responsibilities at TryHackMe. I'm very busy with other work, so it's not as easy as just marking some time to test how a dependency upgrade can impact over 600+ rooms

Than why haven't you updated to Ruby 3.x yet?
see above

[open verge]

Hesitation yes because of all of the above
The best remedy to hesitation is the scientific method. Try it, test whether something breaks, repeat. Aka "just try it".

I haven't, no, but the AttackBox is just one of my responsibilities at TryHackMe. I'm very busy with other work, so it's not as easy as just marking some time to test how a dependency upgrade can impact over 600+ rooms
Try it! Test it! See what actually breaks. Or you might get replaced by someone else who is willing to try and push things forward.

[weary spindle]

Now you're just being rude.

[open verge]

No, I am being frank. I am a maintainer of many popular Open Source projects. I speak from experience.

[zealous yoke]

I've explained my perspective, I'm not going to keep on discussing this as I have other things to do. Please send in your suggestions via email, and I will review and consider them

[hallow sparrow]

Getting a 500 error when uploading a downloadable file based room

[ivory rover]

. yes

[weary spindle]

Do you have a VPN config downloaded, or does it error when you try to download it?

[ivory rover]

i have downloaded openvpn without error

and i desactivate my vpns

[weary spindle]

What command are you using?

Screenshots will help also you can verify by going to the following link.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 5, 2023, 12:09 PM

[ivory rover]

i cant connect me to openvpn

[weary spindle]

Are you using the CLI or GUI?

[hallow sparrow]

Hope that someone will help with this

[ivory rover]

the one who you get when you click on download ion the tryhackme explanation

[weary spindle]

sudo openvpn /path/tp/file.ovpn ?

[ivory rover]

i'm on win

[weary spindle]

Are you trying to upload a virtual machine?

[weary spindle]

Ah!

Ok.

That changes things.

[hallow sparrow]

No just a simple file. Btw I didn’t even got to upload it. It asks for title, description, duration and the room icon

[weary spindle]

https://openvpn.net/community-downloads/

Did you sownload this gui app?

[hallow sparrow]

And when i submit it goes to 500 error pagw

[ivory rover]

no i have installed the "connect"

[weary spindle]

Ok, please install the one I linked.

[ivory rover]

already started haha

same errror

[weary spindle]

Which server are you using?

[ivory rover]

now all server are off

• not connected bit status ok

[weary spindle]

All servers aren't off.

[ivory rover]

can i send you a screenshot please?

[weary spindle]

you can verify and send it here

[ivory rover]

heu how i verify? i dont find any thing on how to verify please

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 5, 2023, 12:21 PM

[ivory rover]

i have forget to check command ahha

all free server look like this

[bronze vale]

What projects? :)

[open verge]

bundler-audit (over 10 million downloads), digest-crc (over a 100 million downloads), ruby-install, chruby, ruby-nmap, ronin. There's more on my GitHub profile which I linked to in my Discord bio.

[weary spindle]

That just means you're not connected

But it can be bugged

[stark iris]

I also have a problem connecting to a server via OpenVPN, from both, Linux and Windows.

[weary spindle]

Which server?

[bronze vale]

This is cool, ty

[scenic torrent]

Gave +1 Rep to @open verge

[weary spindle]

Are you usin g the communities download one?

[stark iris]

Any server I try to connect respond with same error message.

[ivory spruce]

What VPN Server are you using - EU-Reg-3?

[weary spindle]

https://openvpn.net/community-downloads/

[stiff pebble]

I had this exact issue with EU-Reg-3. Swapped to 2 and regenerated my ovpn config for it to connect

[stark iris]

That one I use

[stark iris]

How can I check that using OpenVPN GUI?

[stark iris]

I'll try

[ivory rover]

ok but openvpn say me that i am not connected too so what i must do to connect me?

please

[weary spindle]

Are you using Windows, yes/

[ivory rover]

yes

[weary spindle]

And you downloaded and used the client above?

[ivory rover]

i have downloaded but client dont show window

[stark iris]

Yeey

So, EU 3 doesn't work

[weary spindle]

Nope.

[stark iris]

Thanks!

[scenic torrent]

Gave +1 Rep to @stiff pebble

[ivory rover]

if i launch CLI and after i launch the connect, its same errror

[weary spindle]

you don't use the CLI for windows, you use the GUI

[ivory rover]

ok

and i use it if there is no window?

[silk niche]

Hey there guys. I am unable to connect to openvpn from my virtual box. I have been a dual boot user so I have no idea what is wrong with my kali linux VM. Can someone please help me

[weary spindle]

Are you using Kali on your host, or a VM?

[ivory rover]

i have this

[tawdry orbit]

Can you please check again without VPN if it works now? 🙏

[jovial echo]

I am trying to use openvpn to connect to a AOC room but I keep getting this error when trying to use openvpn.

what should I do?

I have regenerated the config file like the openvpn room said to do

[crystal marlin]

Are you running the command with sudo?

[jovial echo]

ah

apologies, I did that last night and remembered to use sudo, not sure why I didnt remember tonight

thanks

[marble breach]

:hammer: jessicaisbrokelmao#0 has been banned.

[stiff ibex]

is nmap taking ages for anyone else?

[ivory rover]

polease

[jovial vessel]

any staff who can help me?

No one?

[jovial vessel]

any help?

[crystal marlin]

Depends on what you need?

[jovial vessel]

I need an answer fro my ticket..i paid an annual plan 1 week ago and still my sub is not activate

i send mails, ticket

0 support

can i know whats the problem?

[crystal marlin]

How long ago did you send the email?
Support is super flooded due to AoC, but they will definitely get back to you as soon as they can 🙂

[jovial vessel]

30/11

yes guys okay i can understant it but we paid 100$ to wait 1 month to continue learning??

if tryhackme cant handle it, then inform the users not to subscribe for this month

[crystal marlin]

I do not know what might have happened that your sub didn't get activated, usually that goes flawless.
And I'm sure it won't be a month until support gets back to you.

While I understand your frustration about that situation, I would still ask you to please give it a bit more time, support will get back to you and sort it out.

[gray delta]

Hi, I've tried to message you - Did it get filtered into Message Requests?

[ivory rover]

please

[cursive ermine]

Hi, i'm on advent day 5, i pressed 'start machine'

nothing happened

the machine is not starting

[weary spindle]

Staff are aware.

[hallow sparrow]

Try refreshing the page

[spring tiger]

I am recieving this error when trying to connect to the vpn. VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576

sudo openvpn ~/Downloads/sk4r3kr0w.ovpn
2023-12-05 11:08:57 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-12-05 11:08:57 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-12-05 11:08:57 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-12-05 11:08:57 library versions: OpenSSL 3.0.11 19 Sep 2023, LZO 2.10
2023-12-05 11:08:57 DCO version: N/A
2023-12-05 11:08:57 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2023-12-05 11:08:57 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-12-05 11:08:57 UDPv4 link local: (not bound)
2023-12-05 11:08:57 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2023-12-05 11:08:57 TLS: Initial packet from [AF_INET]18.202.168.160:1194, sid=3aa86bd6 2bc78774
2023-12-05 11:08:58 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
2023-12-05 11:08:58 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2023-12-05 11:08:58 TLS_ERROR: BIO read tls_read_plaintext error
2023-12-05 11:08:58 TLS Error: TLS object -> incoming plaintext read error
2023-12-05 11:08:58 TLS Error: TLS handshake failed
2023-12-05 11:08:58 SIGUSR1[soft,tls-error] received, process restarting
2023-12-05 11:08:58 Restart pause, 1 second(s)

[gleaming flume]

What VPN server?

[spring tiger]

THM

[gleaming flume]

I meant which one of these did you select when downloading the VPN?

[spring tiger]

I never got any options.

[gleaming flume]

You didn't download a configuration file from the tryhackme access page? The file that should be your_username.ovpn?

[spring tiger]

no, I clicked

and downloaded my ovpn file

I changed to US west, downloaded a new file and now it works

[gleaming flume]

Yeah, I didn't know downloading that way was possible, but it probably gave you a config for EU-3 which is broken atm, that server keeps throwing out certificate errors

[spring tiger]

not sure why it kept giving me a EU file but I think that is what it was

I have been using THM for 2 years and havent changed that setting.

[mystic imp]

can somebody help me ?

[ivory rover]

still locked

[grand pelican]

Good afternoon! I messaged early last week about my premium membership not being activated and I was told that it would be 24 hours before it's active. They payment cleared via my bank. I submitted a support ticket to no avail.

[mystic imp]

i need a supporter pls

[candid copper]

need help for vpn

[weary spindle]

more context man, you know the drill 😄

[cursive ermine]

https://www.youtube.com/watch?v=RMXpIukjyHw&pp=ygUVdmlydHVhbCBib3ggdHJ5aGFja21l

tutorial for virtualbox openvpn. maybe there's something here that can help you

[candid copper]

alright, so I just downloaded a new config file starring my region In and now it's not connecting to the vpn instead exiting with a fatal error

[weary spindle]

Are you using sudo?

[candid copper]

yes

[weary spindle]

Can you send a screenshot?

[candid copper]

It's working again

thanks

[weary spindle]

Did you use sudo? 😛

[long cloak]

i bought the monthly subscription, how can i change to annualy subscription with aoc coupon?

[weary spindle]

You can't, you need to cancel, wait for it to expire.

I don't think you will have time

[obsidian orchid]

What do i do

[candid copper]

i have been trying with and without sudo

it suddenly started working

[obsidian orchid]

I used sudo openvpn config.ovpn after the restart message everything ust keeps on repeating

[candid copper]

thanks too

[scenic torrent]

Gave +1 Rep to @cursive ermine

[weary spindle]

Which server are you using?

[candid copper]

+1 rep @weary spindle

oh? it used to work

ty @weary spindle

:0

[weary spindle]

kek

[long cloak]

ooh, thank you @weary spindle , if i cancel i will lose the 14$?

[scenic torrent]

Gave +1 Rep to @weary spindle

[obsidian orchid]

I didn;t chose any server ,

[weary spindle]

No, it won't cancel, it will just stop the auto renew.

The code ends in 2 days

[obsidian orchid]

I will try again choosing server

[weary spindle]

https://www.tryhackme.com/access

[weary spindle]

Which country are you in?

[obsidian orchid]

india

[long cloak]

thanks..

[weary spindle]

Then choose IN reg 1 or EU reg 1 or 2.

[obsidian orchid]

IN reg 1 didnt work EU reg 1 worked thanks

[weary spindle]

Exc

Excellent

[misty pulsar]

Hey guys for some reason i can't connect to EU-Regular-3... I can to the other 2 servers from EU, but I'm allways getting disconnected and then the connection is established again. Neither 1 second... the marker is always like on 0:00

Can anyone help me?

In EU-Regular-3 they said that my certificate is invalid...

[weary spindle]

It's borked.

[misty pulsar]

I regenerate one config file, and still gets the same behaviour

maybe reinstalling openvpn would fix it?

[weary spindle]

No

Eu-Reg-3 is broken,

[misty pulsar]

oh!! ok, ok! Now I get it xD

Thanks, it makes sense

And the other 2 EU servers... any idea why keeps disconnecting and establishing new connections?

I do not have any other VPN connected

[weary spindle]

Which OS?

[misty pulsar]

MAC

OS

[weary spindle]

Did you install brew then run it that way?

[misty pulsar]

i used the tryhackme openvpn connect download on access machines

[weary spindle]

Nah, for MacOs you need to use brew

#site-support message

[misty pulsar]

Oh ok, i followed the tab for MAC i thought it should work like that. I'm going to try with brew then. Thank you @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[tribal reef]

Hello guys, I'm having some troubles opening a VPN Connection:
Options error: Unrecognized option or missing or extra parameter(s) in TheSpecia.ovpn:15: data-ciphers (2.4.7)
I've already tried the fixes suggested by some users in this channel like updating version (This is the last one), adding some lines to the .ovpn file
Nothing is working

[weary spindle]

Which OS are you using?

[full bobcat]

Hello guys! I purchased the premium, I even received the confirmation email, but my account still does not have the premium enabled. The message "Payment Pending" stays in an eternal loop. What can I do in this case?

[tribal reef]

I'm running the WSL2, Linux: 5.15.90.1-microsoft-standard-WSL2

[full bobcat]

Can anybody help me with this?

[crystal marlin]

Have you emailed support already?
That's the only way to resolve it.

But bear in mind that it might take them a little bit to get back to you, due to the sheer amount of support requests due to Advent of Cyber 🙂

[full bobcat]

@crystal marlin Thank you! I'll wait a couple of hours and email support if necessary. Ty!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[zealous yoke]

Ah hey 🙂 Looks like it got caught in message requests. Sorry, I have an absolute tonne of them as of recent with AoC. I'll respond to you there 🙂

[ivory rover]

please how i connect to my openvpn?

[ivory rover]

ahahah i dont click ahah

[marble breach]

Done!

[ivory rover]

its bugged ahha

[knotty storm]

simply type sudo openvpn <fname> in your terminal

[ivory rover]

im in win10

[knotty storm]

then use the gui..

[ivory rover]

before i had this, now i dont have any window

@knotty storm

[knotty storm]

check this..

[ivory rover]

i have installed this

[knotty storm]

then delete that and install the above mentioned

[ivory rover]

the first is the link who you redirect me

[ivory rover]

@knotty storm?

[jovial crest]

hey, i have problem with OpenVPN, tried everything that is on youtube, and cant find helpon google

[naive dust]

Does anyone know how I can disconnect for the OVPN on my VM?

[naive dust]

What paroblem?

[jovial crest]

2023-12-05 16:56:16 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-12-05 16:56:16 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.

[naive dust]

do you have a firewall up?

[jovial crest]

client
dev tun
proto udp
sndbuf 524288
rcvbuf 524288
remote 54.76.30.11 1194
resolv-retry infinite
nobind
explicit-exit-notify 3
persist-key
persist-tun
remote-cert-tls server
auth SHA512
data-ciphers AES-256-CBC
key-direction 1
verb 3
reneg-sec 0
<ca>
this is my .ovpn

i am using kali linux on virtualbox

[naive dust]

try turning off your firewall if you have one up

did you download you config file?

[knotty storm]

are you using EU3?

[jovial crest]

tried every EU, same thing

[cerulean crystal]

Hello guys. I switched to my student mail and verified it on tryhackme but when I try to subscribe there's no discount in the price. Any fix?

[knotty storm]

are you trying to use the vpn on windows?

[weary spindle]

Contact support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 5, 2023, 10:05 PM

[jovial crest]

now, i tried shield vpn but didnt change anything

i use bridged connection on my virtual box

[knotty storm]

same I did but didn't got this error hmm 🤔

[jovial crest]

it is said that new versions of openvpn have this problem

can i install openVPN 2.4.7 somehow?

[knotty storm]

from their website..

[jovial crest]

tired it but command make, and make install doesnt work

[knotty storm]

if that's the case scrubz might be able to help you with this you around scrubz?

[jovial crest]

no idea what that is :/

Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 36, compression: 'stub'
2023-12-05 17:14:47 Timers: ping 5, ping-restart 120

it looks like it connects and stops immediatelly

and this is status

openvpn.service - OpenVPN service
Loaded: loaded (/lib/systemd/system/openvpn.service; disabled; preset: disabled)
Active: active (exited) since Tue 2023-12-05 17:16:28 EST; 1s ago

Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.

im adding it to my .ovpn file and it doesn/t help

can someone send me working .ovpn file?

[gleaming flume]

Which vpn server is this?

[jovial crest]

EU-Regular 1

[gleaming flume]

hmm, I am assuming you tried regenerating and redownloading the config file?

[jovial crest]

yes

[gleaming flume]

What openvpn version are you using?

[jovial crest]

OpenVPN 2.6.7 x86_64-pc-linux-gnu

[ivory rover]

@knotty storm please

[gleaming flume]

hmm, that should be fine, I haven't see this issue on other servers besides the EU-3, have you perhaps tried one of the US servers?

[jovial crest]

exactly same thing :/

[jovial crest]

do you use the same version ofopenvpn?

[tribal reef]

Has nobody ever tried running it with a WSL?

[random meteor]

Hello, how do I use my terminal after establishing a connection using ovpn without having to terminate it?

[random meteor]

Like when I use the 'sudo openvpn /path/to/file.ovpn' command the terminal will have this
2023-12-06 01:24:51 VERIFY EKU OK
2023-12-06 01:24:51 VERIFY OK: depth=0, CN=server
2023-12-06 01:24:51 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-12-06 01:24:51 [server] Peer Connection Initiated with [AF_INET]3.7.33.194:1194
2023-12-06 01:24:51 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2023-12-06 01:24:51 TLS: tls_multi_process: initial untrusted session promoted to trusted
2023-12-06 01:24:53 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2023-12-06 01:24:53 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,route-gateway 10.17.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.17.101.133 255.255.128.0,peer-id 32'
2023-12-06 01:24:53 OPTIONS IMPORT: --ifconfig/up options modified
2023-12-06 01:24:53 OPTIONS IMPORT: route options modified
2023-12-06 01:24:53 OPTIONS IMPORT: route-related options modified
2023-12-06 01:24:53 Using peer cipher 'AES-256-CBC'
2023-12-06 01:24:53 net_route_v4_best_gw query: dst 0.0.0.0
2023-12-06 01:24:53 net_route_v4_best_gw result: via 192.168.52.2 dev eth0
2023-12-06 01:24:53 ROUTE_GATEWAY 192.168.52.2/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:6a:6c:85
2023-12-06 01:24:53 TUN/TAP device tun0 opened
2023-12-06 01:24:53 net_iface_mtu_set: mtu 1500 for tun0
2023-12-06 01:24:53 net_iface_up: set tun0 up
2023-12-06 01:24:54 net_addr_v4_add: 10.17.101.133/17 dev tun0
2023-12-06 01:24:54 net_route_v4_add: 10.10.0.0/16 via 10.17.0.1 dev [NULL] table 0 metric 1000
2023-12-06 01:24:54 Initialization Sequence Completed
2023-12-06 01:24:54 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 32, compression: 'lzo'
2023-12-06 01:24:54 Timers: ping 5, ping-restart 120
2023-12-06 01:24:54 Protocol options: explicit-exit-notify 3

[random meteor]

But no prompt for entering any other commands, what should I do?

[gleaming flume]

Sorry I was afk for a while, I use 2.6.3, but your version should work fine. What country are you in?

[gleaming flume]

What VPN server is this?

[random meteor]

IN-Regular-1

[gleaming flume]

Have you tried changing servers and then regenerating and redownloading the config file?

[random meteor]

The server is not the problem, I have successfully connected to THM network but once it connects I can't enter any other commands after cos the prompt doesn't appear anymore unless I press ctrl+C which terminates my connection...

[gleaming flume]

You need to keep that running and open a new terminal window / tab to run commands.

Sorry I thought you were having issues getting the VPN to work, I should have read more carefully

[random meteor]

It's okay thanks for the help

[proper stag]

How do i get eJPT added to my profile?

[gleaming flume]

Ask a mod nicely when you see one around, all the cert roles are added manually

[proper stag]

thanks!

[scenic torrent]

Gave +1 Rep to @gleaming flume

[naive dust]

Anyone know how to safely disconnect from OpenVPN?

[gleaming flume]

Ctrl + C?

[bitter aurora]

I have same problem with every vpn, but when i use eu-vip-1 or 2 it connect. try it.

[terse lark]

having the same problem for 2 days in a row now. After having opened and closed an AttackBox 2 times, it now says that my 1 hour is full even though I hadn't used even half of the time. Genuinely considering just trying out hackthebox academy instead since this site reeally doesn't want to let me do any tasks

[gleaming flume]

What problem are you having exactly?

[bitter aurora]

Same as Jarek Balcerzak, something with --cipher is not set when try every vpn server etc. But eu-vip servers connect every time. ehh, im new here i should write to him.

[gleaming flume]

Strange, seems like a fair amount of people have been having issues like that. I know EU-3 is not working atm, but all of the others should not give such errors

Not sure what the issue is tbh

[ivory rover]

you too cannot connect o openvpn?

[bitter aurora]

only with eu-vip-1 or 2. so my problem is solved, but it looks like rest of servers gives errors --cipher not set ...

[gleaming flume]

What is your full openvpn output when using another server?

One of the ones that doesn't work (that is not EU-3)

[ivory rover]

Wed Dec 6 02:27:33 2023 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Dec 6 02:27:33 2023 TLS Error: TLS handshake failedi have this. how i solve this please?

[bitter aurora]

one moment i start vm and see what error is it.

[gleaming flume]

Can you share the entire output as well?

[bitter aurora]

sorry i have that problem 2 weeks ago now it looks like i connect to eu2 server, but still it starts with _ openvpn Downloads/eu2.ovpn
[sudo] password for kali:
Sorry, try again.
[sudo] password for kali:
2023-12-05 20:31:50 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-12-05 20:31:50 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-12-05 20:31:50 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-12-05 20:31:50 library versions: OpenSSL 3.0.11 19 Sep 2023, LZO 2.10
2023-12-05 20:31:50 DCO version: N/A
2023-12-05 20:31:50 TCP/UDP: Preserving recently used remote address: [AF_INET]63.35.110.70:1194
2023-12-05 20:31:50 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-12-05 20:31:50 UDPv4 link local: (not bound)
2023-12-05 20:31:50 UDPv4 link remote: [AF_INET]63.35.110.70:1194
2023-12-05 20:31:50 TLS: Initial packet from [AF_INET]63.35.110.70:1194, sid=a1604d12 4735be84
2023-12-05 20:31:51 VERIFY OK: depth=1, CN=ChangeMe
2023-12-05 20:31:51 VERIFY KU OK
2023-12-05 20:31:51 Validating certificate extended key usage
2023-12-05 20:31:51 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-12-05 20:31:51 VERIFY EKU OK
2023-12-05 20:31:51 VERIFY OK: depth=0, CN=server
2023-12-05 20:31:51 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
2023-12-05 20:31:51 [server] Peer Connection Initiated with [AF_INET]63.35.110.70:1194
2023-12-05 20:31:51 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2

2023-12-05 20:31:51 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2023-12-05 20:31:51 TLS: tls_multi_process: initial untrusted session promoted to trusted
2023-12-05 20:31:52 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2023-12-05 20:31:52 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,route-gateway 10.14.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.14.63.72 255.255.128.0,peer-id 0'
2023-12-05 20:31:52 OPTIONS IMPORT: --ifconfig/up options modified
2023-12-05 20:31:52 OPTIONS IMPORT: route options modified
2023-12-05 20:31:52 OPTIONS IMPORT: route-related options modified
2023-12-05 20:31:52 Using peer cipher 'AES-256-CBC'
2023-12-05 20:31:52 net_route_v4_best_gw query: dst 0.0.0.0
2023-12-05 20:31:52 net_route_v4_best_gw result: via 192.168.0.1 dev eth0
2023-12-05 20:31:52 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=08:00:27:cb:7e:f5
2023-12-05 20:31:52 TUN/TAP device tun0 opened
2023-12-05 20:31:52 net_iface_mtu_set: mtu 1500 for tun0
2023-12-05 20:31:52 net_iface_up: set tun0 up
2023-12-05 20:31:52 net_addr_v4_add: 10.14.63.72/17 dev tun0
2023-12-05 20:31:52 net_route_v4_add: 10.10.0.0/16 via 10.14.0.1 dev [NULL] table 0 metric 1000
2023-12-05 20:31:52 Initialization Sequence Completed
2023-12-05 20:31:52 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 0
2023-12-05 20:31:52 Timers: ping 5, ping-restart 120
2023-12-05 20:31:52 Protocol options: explicit-exit-notify 3

So now it looks like eu2 is ok for me.

[gleaming flume]

Yeah that looks fine now

[bitter aurora]

Yes, and note about cipher not set is still but it set ip and connect. I dont know why it somtimes not work. but for me everything is ok for now thanks.

[gleaming flume]

Yeah the cipher is not set manually with --cipher and it won't use an old cipher, but it is able to auto-negotiate to use AES-256-CBC and make a connection which is what it should do. Still not sure on what your original issue was though, but I guess it doesn't matter much now as long as it working for ya.

[ivory rover]

Wed Dec 6 02:37:48 2023 SIGUSR1[soft,tls-error] received, process restarting
Wed Dec 6 02:37:48 2023 MANAGEMENT: >STATE:1701826668,RECONNECTING,tls-error,,,,,
Wed Dec 6 02:37:48 2023 Restart pause, 256 second(s)
Wed Dec 6 02:42:04 2023 TCP/UDP: Preserving recently used remote address: [AF_INET]54.76.30.11:1194
Wed Dec 6 02:42:04 2023 Socket Buffers: R=[65536->524288] S=[65536->524288]
Wed Dec 6 02:42:04 2023 UDPv4 link local: (not bound)
Wed Dec 6 02:42:04 2023 UDPv4 link remote: [AF_INET]54.76.30.11:1194
Wed Dec 6 02:42:04 2023 MANAGEMENT: >STATE:1701826924,WAIT,,,,,,
Wed Dec 6 02:42:04 2023 MANAGEMENT: >STATE:1701826924,AUTH,,,,,,
Wed Dec 6 02:42:04 2023 TLS: Initial packet from [AF_INET]54.76.30.11:1194, sid=c1c36afb bd474524
Wed Dec 6 02:42:04 2023 VERIFY OK: depth=1, CN=ChangeMe
Wed Dec 6 02:42:04 2023 VERIFY KU OK
Wed Dec 6 02:42:04 2023 Validating certificate extended key usage
Wed Dec 6 02:42:04 2023 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Dec 6 02:42:04 2023 VERIFY EKU OK
Wed Dec 6 02:42:04 2023 VERIFY OK: depth=0, CN=server
Wed Dec 6 02:43:05 2023 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Dec 6 02:43:05 2023 TLS Error: TLS handshake failed

[gleaming flume]

And this is what server?

[bitter aurora]

that's my fault, i should reply Jarek B and rest people with problems that eu-vip servers working for me when other not but it was 3 weeks ago ang looks like eu2 for example now work.

*and

[ivory rover]

EU1 i think

[gleaming flume]

Yeah I tested all of the free servers myself and all but EU-3 is working so any issues should be client side

[gleaming flume]

What country are you in?

[ivory rover]

ho im connected just by redoawnloading the file

[ivory rover]

fr

[gleaming flume]

Yeah certain countries block VPN's / UDP traffic and it could cause issues for you. Though if you are NA/EU you should be fine

[ivory rover]

and after this how me im connected, i must do what ?

[crude agate]

I have been away for awhile. I am trying to login but it keeps asking me for a code from my authentication application. I have not set up the authentication application. Help me login

[gleaming flume]

If you do get connected then you just leave the tab how it is and make a new tab to start hacking or whatever you want to do. Don't think you are properly connected right now though

[gleaming flume]

You'd probably need to talk to email support for that

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 6, 2023, 2:01 AM

[crude agate]

I send a message 2 days ago

[gleaming flume]

Support is really busy this time of year, I think response time is like 8-9 days right now

[ivory rover]

i dont understand, im connected, i go in the learn room that i want to do and after i must do what?

[gleaming flume]

Each room will be different, if you are doing a walkthrough room it will tell you what to do, challenges rooms just give you an IP and you have to hack the box. If you tell me which room specifically you are trying to do I may be able to provide more specific instructions

[ivory rover]

you dont understand me. how i enter on the hacker's machine

becuse i think its not the machine wich we navugate on tryhackme rooms ahah

[gleaming flume]

The hacker's machine? Like the machine you send attacks from? You're right that I am not quite understanding what you are trying to do

[ivory rover]

Like the machine you send attacks from => yes

[gleaming flume]

The machine you would attack from can be one of two: the attackbox which is a browser based machine from tryhackme or your VM running OpenVPN to connect to the network.

[bitter aurora]

Select room, next click start machine red button wait for ip and do what room is for.

[gleaming flume]

The machines you launch how Bimbol explained are the machines that you attack or the victim machines (most of the time)

[ivory rover]

ho its to me to create my own VM?

[gleaming flume]

Yes, or you can use the attackbox

[ivory rover]

but for example in this question it say me what is the content of file what i dont create so how i do this if its me who create my own VM?

[ivory rover]

attackbox is only 1h /d ahah

[bitter aurora]

download VMwareplayer, or Virtualbox and Kali i think is the best choice.

[gleaming flume]

You would connect to it in some way, I think for that room you ssh in iirc? From your own VM

[ivory rover]

and the file? its not me and its not the OS too

[ivory rover]

so i create my own VM, in this VM i ssh this?

[gleaming flume]

mhm, you make your own VM and then use the credentials provided to ssh into that VM you launched within the room. On the Vm you ssh into should be all the files you need to complete that room/task

Task 2 of that room should give a guide of how to SSH into, as for how to make the VM there are plently of guide on google/youtube to help you out

[ivory rover]

ha ok

i understand now

before you said that, i thinked that it show me how to connect to ssh

so i understand now thanks a lot

[gleaming flume]

Np, happy to help

[ivory rover]

so now good night i need to sleep

[gleaming flume]

Haha, goodnight

[bitter aurora]

https://www.kali.org/get-kali/#kali-virtual-machines here's Kali for download i think it 'sbetter then attackbox in browser.

[ivory rover]

i do a thing i dont must?

[patent patio]

Can I use Oracle VM VirtualBox instead of OpenVPN?

[gleaming flume]

Those are two completely different things. Virtual Box is a virtualization software program and OpenVPN is a VPN program. You would need them both to connect to tryhackme

[gleaming flume]

That IP is just an example iirc, you would actually connect to the VM that you launch within the room

[patent patio]

got it. Thank you, Hiro. I feel stupid for not realizing that... oops.

[naive dust]

On Kali, does not work

[gleaming flume]

It works on my Kali? I mean you can just like close the tab tbh, but Ctrl + C should work perfectly

[naive dust]

Yea you're right I was being dumb lol

[night turtle]

hello guys

I want to access the tryhackme user via ssh, but I get Permission denied.
Username: tryhackme
Password: tryhackme

Is there a problem or am I making a mistake while typing the password?

ignore pls ı solved thank u

[slender sluice]

how do I link my thm account?

[worldly grove]

im using my own kali vmware, is there a passlist that I can download for use on THM rooms?

Specifically Hydra is what i'm doing atm.

[bitter aurora]

2 passlist i have used was rockyou.txt and someone i dont renember /usr/share/wordlists/ you should find some but they always give also a link if its needed in the room. hydra and john the ripper or something like that shoudl do the job if you have gpu hashcat is also useful i dont try it for now. sometimes dirb or gobuster but its not for password as i know... im not sure.

[worldly grove]

Appreciate you man, I actually looked into the wordlists folder right after i sent those.

[bitter aurora]

what exacly you want to do. in accout settings you have social media twitter,instageram etc, you can find your id badge and put on website can be interactive with rank/rooms completed/badges or static image.

[slender sluice]

Verifying, I got it. Thanks!

[scenic torrent]

Gave +1 Rep to @bitter aurora

[bitter aurora]

its enought? or you still searching ? you only needs it filename it easy to find.

[worldly grove]

i finished the room no worries. 😄

[jovial ingot]

anyone know how to best contact support? i raised a ticket but haven heard anything back from them

[weary spindle]

When did you email?

[jovial ingot]

I raised the ticket and messaged them on the 1st of December at 12:01am haha

[ivory spruce]

THM Support standard response time is at ~8 to 9 working days at the moment as they are very busy with the AoC event.

[jovial ingot]

Hmmm okay thankyou do you know if this will impact my refund request ticket

[ivory spruce]

Are you on annual subscription?

[jovial ingot]

I paid for the year yes

[ivory spruce]

#site-support message

[jovial ingot]

Ahh awesome thankyou

[jovial crest]

i have exact same message, How did you fix it?

[ivory spruce]

The log shows that he was able to establish an OpenVPN connection.

Have you tried to connect to 10.10.10.10 to verify if you are already connected?

[jovial crest]

yes, cant ping it

[ivory spruce]

Have you tried it in your browser? Can you share the last 3 to 5 lines of the log when you connect to OpenVPN?

[jovial crest]

ok, i run my older Kali version with openvpn 2.6.0 and it worked

i will clone it and update opevpn to 2.6.7 and see if it will still work

[jovial crest]

ok, it works on kali 2022.3... and yesterday when i installed it on newest Kali it didnt

[severe flower]

Hi, anyone else having a problem with connection to the Guacamole server in the day 5 challenge? I tried to restart the VM, but it didnt work. Also I dont have an option to use "Remote Desktop", because my version of OS (Windows 11 Home) doesnt support it. Any ideas? 🙂

[ivory rover]

it say that we need to connect to the ip in the red banner, and the ip in the red banner is the one who ends by 65

[zealous yoke]

As Hiro said, this is an example. You will need to deploy the machine and connect to the IP that is displayed in the red card for you. Not the one in the screenshot. The screenshot is just showing where the IP address will be displayed 🙂

[ivory rover]

it was just a little bugged haha

i have finished linux2

[ivory rover]

after the words "for example" there is a command with the ip, its the good ip

just my VM who is a little laggy

[bitter aurora]

I dont fix command is ok sudo openvpn /path/downloaded.file. try use eu2 server if you dont have acces to eu-vip. if you still have problem i can search my emails where thm support try to help my. But they only say things like "be sure that only one openvpn is vorking etc" and explain how to kill processes if there is more then one...

[frail marten]

Can any of the admins help me out??

[ivory spruce]

Can you state your concern? Do note that Mods are not THM Staff, so you may have to direct your concern to THM Support depending on what that is.

Edit: see Scrubz comment

[weary spindle]

Diacord admins are THM staff.

[ivory spruce]

Oohh.. let me update that then. Thanks.

[finite estuary]

How do you change it to "United States" in your profile if there is no option?

In subscription say: "Want to pay in dollars? Change your country to "United States" on your profile." but in profile, country does't exist

[frail marten]

So normally I buy a monthly subscription using my personal mail but now I bought it using my student email and I got the bill too. But this is not reflected in my tryhackme account for some reason. It's already been 2 days. Can you please help me with this??

[ivory spruce]

You'll have to drop the THM Support email for this. Please be patient though as the standard response time is about 8 to 9 days as they are quite busy with the AoC event.

[frail marten]

I did that but got a bot response

[ivory spruce]

You can change it into in the US if you are currently residing there.

#site-support message

[warm sphinx]

#site-support

Hello, I want to report a problem comnnecting to openVPN, I have downloaded the gui app on windows and tried different c
Versions of the config file ... what could be the problem ?

[weary spindle]

N00R

Have you downloaded the community one?

https://openvpn.net/community-downloads/

[warm sphinx]

No i havent .. i will try it ... is it different that the one suggested in the openVPN room?

[weary spindle]

Yes

[warm sphinx]

I will try it ty, even on my other pc I have the one suggested in the room and it is working ...

[quick gyro]

Strange question ... is support chat even working now as response time shows Within week and I have not got any response about my submited ticket for 2 days

[weary spindle]

Current response time is 7-9 days (excluding weekends)

[scenic torrent]

Gave +1 Rep to @ivory spruce

[quick gyro]

daaamn, thats long :/ Thx for reply tho

[maiden stone]

Hello! I need some help. I made payment for my December subscription, unfortunately My THM account is still showing "Go Premium". I made another payment today, and wont believe the "Payment Pending" confirmation has been in a loop for the last 5 hours...and still my account is saying "Go Premuim". Come on! 2 payment! Is there a problem with the payment processing at THM?

[gleaming flume]

You would have to talk to email support for anything regarding payment.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 6, 2023, 3:18 PM

[sand plinth]

Hey, can I have someone's username if he never did a single room + his account is old and inactive?

[maiden stone]

I did 4 days ago, no response! Someone suggested I try message on Discord, response is much faster

[knotty storm]

the staff is busy a bit busy with the AOC they will get back to you!

[knotty storm]

@maiden stone

[weary spindle]

Sadly no, tryhackme have a zero deletion policy.

[sand plinth]

Oh.. It's okay, thanks anyways 🫡

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

I tried too! Haha

[sand plinth]

Yeah, just checked, someone "stole" your name too 💀

[weary spindle]

Maybe if become friends with Skidy... 🤔

[wooden fern]

Hi all, I have a random (and probably dumb) question and apologies if this has been asked before.
Does anyone know why in some labs I am unable to type the backslash '\' symbol?
Some machines it works, currently trying to do day5 of AOC but i'm stuck just entering the commands

[weary spindle]

Are you mac?

[wooden fern]

No Windows but for my keyboard i have to hold the right 'alt' key if that helps any

[jovial vessel]

Guys how much i should wait to activate my sub ? 1 year?

thats the support for your users?

[meager forge]

Any body knows when the list of daily winners will be announced for advent of cyber

I guess it was to be announced today

[bitter aurora]

Yesterday someone have a similar, problem you can use virtual keyboard on windows it easy to run . but best way to use thm is VM+kali. i use attackbox ony if i dont have a choice.

[wooden fern]

Ah I see, many thanks!

Strangely enough it works when I used my laptop which has a dedicated backslash key. So it must not like the alt key maybe?
I'll just use the virtual keyboard.

[scenic torrent]

Gave +1 Rep to @bitter aurora

[tepid galleon]

purchased the premium on the 4th Dec 2023, however it is still not activated till this day

[gleaming flume]

For issues with payment/subscriptions you will probably have to deal with email support, I don't think anyone here will be able to help you.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 6, 2023, 5:26 PM

[tepid galleon]

Alright thanks Hiro, I actually reached out to them too but they have yet to get back to me for the past 2 days. Even submitted a ticket as well but still on hold

[gleaming flume]

Yeah unfortunately they are pretty busy this time of year and I think the response time is around 7-9 business days atm

[tepid galleon]

Aw man, that’s a bummer.
Anyways thanks Hiro, you’ve been of great help

[gleaming flume]

np

[jade hearth]

same thing happened to me at friday, but haven't got response yet. I hope it gets solved quickly because i'm on vacation this and next week and would have a lot of time to learn! lol

[misty lake]

is there a (quick) way to copy files onto the attackbox?

[heavy basalt]

python3 -m http.server

[visual shard]

is there a limit on no. of friends that we can add ?

[crisp tinsel]

why is my vpn connection so slow 😂

[weary spindle]

You're on windows?

[crisp tinsel]

mac

[fluid cloud]

which room is the room id 'kali'

[silent frigate]

When I try to access machine ip address in attackbox its shows unable to connect in attackbox browser. What is the issue here?

[broken locust]

Hi, I sent an e-mail back on Sep-27, but still no reply. I am very dissapointed on your service. This is the worst platform and service I've ever faced!!

[young jacinth]

hey, is there a good way to copy a room's task files over to the attackbox if they're not already provided in the rooms folder on the attackbox? haven't figured this out

I know I could use wget with the download url but this room didn't have a specific url when I clicked download (one of the AoC side quest ones)

[faint elk]

hi all was wondering if someone could help me out i tried downloading the holo network vpn after having some troubles trying to connect i noticed within the ovpn file there is nothing in there just a blank ovpn file was wondering if anyone has come across this and if they have any tips to get past this cheers!

[ivory spruce]

Have you tried to send a follow-up email since? THM Support is very busy at the moment due to AoC and standard response time is at ~8 to 9 working days.

[ivory spruce]

Have you tried to leave the network, re-join after an hour or so and regenerate the ovpn file again? This is not certain but I've seen folks do it and resolve their issue.

[faint elk]

I have indeed, it actually been an ongoing issue for the past 3 days thankyou for the reply

[faint elk]

I have indeed, it actually been an ongoing issue for the past 3 days thankyou for the reply

[pseudo holly]

My rank doesn't seem to be going up even though I've apparently reached the necessary score.

Actually it shows correct here so it's only on the site

[ivory spruce]

Have you tried to press Ctrl + F5 while in your browser?

[full bobcat]

Hi guys, I signed up for premium 36 hours ago. I received the payment receipt, the amount was credited to my credit card, but I still see the "go premium" message on my dashboard. I sent an email to support and haven't heard back yet. Any solution?

[gleaming flume]

You are like the third person I have seen have this issue lately, strange. Support via email is the only way to go though, no one here can help with payment/subscription related issues

[full bobcat]

Thanks @gleaming flume , I'll try to contact support again, or just wait. Anyway, thanks!

[scenic torrent]

Gave +1 Rep to @gleaming flume

[solid oak]

Same here. I have been waiting for over a week for a response from support. I get that things take time and issues crop up. I work in the field, I get it. But my issue is that money was removed from my account with no services rendered and this seems to not be an isolated case.

It's probably a somewhat difficult position to hire and train for, given the nature of the business. I don't blame them for the extended wait.

[gleaming flume]

Yeah the wait can't be helped that much, but it is a bit concerning that I have seen now like 4 people with the same issue in this chat within the past few days. Hope they get it sorted out soon

[weak pelican]

Anyone to help me

I think I am stuck on the Jr Pentester Path precisely on the Walking the website room

[ivory rover]

please someone can help me to know which are the login and password for the command injection in owasp room please?

because ssh tryhackme@ip dont work

[ivory spruce]

Can you link the room please?

[ivory rover]

https://tryhackme.com/room/owasptop102021

@ivory spruce

[ivory rover]

because we need to be in the machine to see the webroot directory no?

[ivory spruce]

Have you tried the credential in Task4?

[ivory rover]

its only for the website

i have already try to ssh this ip

[ivory spruce]

If you are working on command injection, that has to be done via the application.

[ivory rover]

but how i know the strange file?

i'm idiot, using the command injection hahaha

its logic

[ivory spruce]

Is there no fields in the web page you can use to insert or inject commands to be interpreted by the OS?

[ivory rover]

What is the user's shell set as? i dont understand this because im french

[ivory rover]

there is a part to inject yes

thanks

[pseudo holly]

Still the same

[magic spade]

Hello I have a payment issue , I raise a ticket and no one replay can someone help from support team

[ivory spruce]

#site-support message

[ivory spruce]

Well, so long as it is reflected here, then that means it is updated in the backend. You'll probably just have to wait until it is reflected in the web page.

[edgy cloak]

guys, there's something that is going on in the VMs? cause been lagged out like all day long

[ivory spruce]

Are you referring to the Attackbox or a room in particular?

[edgy cloak]

the attackbox in general

[ivory spruce]

There are folks who do point out that they experience lags in it, but others are using it just fine.

I have used the Attackbox myself a couple of times and there are times I experience lags, but other times, I haven't. I suggest using your own VM for the best experience (if your resource permits).

[edgy cloak]

idk if there are some routing problems... cause im from latam so, maybe is that

or the high caudal of requests

[edgy cloak]

ill try it, ty

[scenic torrent]

Gave +1 Rep to @ivory spruce

[jovial vessel]

0 support

I wait for 8 days and still ignore me

But they took my money asap

I paid for a sub, it didn’t activate

And now I wait when the support decide to activate my sub

But the took my money

1 ticket . 5 mails , 1 support chat
I can’t reach them

[cursive ermine]

hi i have a question pls. so i installed a vm on my laptop coz i always run out of attackbox time. (not a subscriber). i did it perfectly the first time the other day. now i'm launching my vm, and i clicked 'start machine' on tryhackme website...

when i open the terminal on my vm... do i have to install openvpn again?

[jovial vessel]

This will be your situation …

Not even in progress from 30/11

[ivory spruce]

It usually activates as soon as payment is made, but it seems a couple of folks are experiencing the same issue.

[jovial vessel]

The transaction is made , I confirm it with my bank

Waiting 8 days now

[ivory spruce]

How often have you sent them an email? After sending one, you might have to wait for ~8 to 9 working days for THM Support to get back to you as they are quite busy at this time due to the AoC event.

Also, please do not send follow up emails within the said time (~ 8 to 9 working days) as it will push your ticket down the queue.

[jovial vessel]

My brother if they are busy and the don’t have support then they should disable subs if they can’t handle it

If we need to loose 1 month trying to communicate with support for our already paid sub…

[ivory spruce]

I think they will make good of your subscription soon, including the time that you haven't had your subscription activated.

[gleaming flume]

Well now that I see your message we can move here @cursive ermine can you share the whole OpenVPN output?

[cursive ermine]

Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2023-12-06 23:50:54 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2023-12-06 23:50:54 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]

[gleaming flume]

There is more than that though right? Or is that really it

[still ice]

client dev tun proto udp sndbuf 0 rcvbuf 0 remote 54.193.147.96 1194 resolv-retry infinite nobind explicit-exit-notify 3 persist-key persist-tun remote-cert-tls server auth SHA512 cipher AES-256-CBC key-direction 1 verb 3 reneg-sec 0

this failes for me

[cursive ermine]

2023-12-06 23:50:54 library versions: OpenSSL 3.0.11 19 Sep 2023, LZO 2.10
2023-12-06 23:50:54 DCO version: N/A
2023-12-06 23:50:54 TCP/UDP: Preserving recently used remote address: [AF_INET]52.4.198.155:1194
2023-12-06 23:50:54 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-12-06 23:50:54 UDPv4 link local: (not bound)
2023-12-06 23:50:54 UDPv4 link remote: [AF_INET]52.4.198.155:1194
2023-12-06 23:50:54 TLS: Initial packet from [AF_INET]52.4.198.155:1194, sid=68d4988b 3eabdff9
2023-12-06 23:50:55 VERIFY OK: depth=1, CN=ChangeMe
2023-12-06 23:50:55 VERIFY KU OK
2023-12-06 23:50:55 Validating certificate extended key usage
2023-12-06 23:50:55 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-12-06 23:50:55 VERIFY EKU OK
2023-12-06 23:50:55 VERIFY OK: depth=0, CN=server
2023-12-06 23:50:55 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
2023-12-06 23:50:55 [server] Peer Connection Initiated with [AF_INET]52.4.198.155:1194
2023-12-06 23:50:55 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2023-12-06 23:50:55 TLS: tls_multi_process: initial untrusted session promoted to trusted
2023-12-06 23:50:56 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

2023-12-06 23:50:56 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,route-gateway 10.6.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.6.120.190 255.255.128.0,peer-id 88'
2023-12-06 23:50:56 OPTIONS IMPORT: --ifconfig/up options modified
2023-12-06 23:50:56 OPTIONS IMPORT: route options modified
2023-12-06 23:50:56 OPTIONS IMPORT: route-related options modified
2023-12-06 23:50:56 Using peer cipher 'AES-256-CBC'
2023-12-06 23:50:56 net_route_v4_best_gw query: dst 0.0.0.0
2023-12-06 23:50:56 net_route_v4_best_gw result: via 10.0.2.2 dev eth0
2023-12-06 23:50:56 ROUTE_GATEWAY 10.0.2.2/255.255.255.0 IFACE=eth0 HWADDR=08:00:27:cb:7e:f5
2023-12-06 23:50:56 TUN/TAP device tun1 opened
2023-12-06 23:50:56 net_iface_mtu_set: mtu 1500 for tun1
2023-12-06 23:50:56 net_iface_up: set tun1 up
2023-12-06 23:50:56 net_addr_v4_add: 10.6.120.190/17 dev tun1
2023-12-06 23:50:56 net_route_v4_add: 10.10.0.0/16 via 10.6.0.1 dev [NULL] table 0 metric 1000
2023-12-06 23:50:56 sitnl_send: rtnl: generic error (-17): File exists
2023-12-06 23:50:56 NOTE: Linux route add command failed because route exists
2023-12-06 23:50:56 Initialization Sequence Completed
2023-12-06 23:50:56 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 88
2023-12-06 23:50:56 Timers: ping 5, ping-restart 120
2023-12-06 23:50:56 Protocol options: explicit-exit-notify 3

[gleaming flume]

That is a working connection

[ivory spruce]

The last few lines indicate that you are connected. Have you checked if you can reach 10.10.10.10 in your browser?

[ivory spruce]

What is the exact error message you get?

[cursive ermine]

When i try to put in the active machine ip address in the browser it doesn't go there. just keeps loading

[gleaming flume]

Which room is this?

[cursive ermine]

and then after a while, "the connection has timed out"

Linux fundamentals 2

[gleaming flume]

Is the machine up now? If so what is the IP?

[cursive ermine]

10.10.8.153

[ivory spruce]

Can you try running the command described here in your terminal and try again?

#site-support message

[gleaming flume]

Well I also don't think that room is running http/https is it?

Hmm guess it is, I get an apache page for the IP so I guess it should at least load something for you if it is working

[gleaming flume]

You are keeping the terminal window open the whole time right?

[cursive ermine]

i closed it a couple times...

so when i open the terminal, do i have to run sudo openvpn always?

[gleaming flume]

You run the command and then keep that tab open and you can open a new tab/window to run commands in. If you close the openvpn tab you close the connection

As long as the tab/window stays open, so does the connection

[cursive ermine]

got it. so i went to the openvpn room... and still after 'start machine' i copy the ip address.. and the browser is just loading..

but if i try to go to google or try hackme website, the site opens fast.

[gleaming flume]

hmm, it is still not working right then

[cursive ermine]

just finished. still same problem... the ip address is just loading in the browser...

[gleaming flume]

What does your access page say? Does it say you are connected

[cursive ermine]

yes, connected with green check

[still ice]

which room is it. there might not be a web server there

you might have to ssh in

[cursive ermine]

i went to the openvpn room itself...

[gleaming flume]

There is a http service for the openvpn room which he said he was on

And what is that IP? For OpenVPN room

[cursive ermine]

it's like the step-by-step guide to connect... and told me to click on the ip address..

10.10.87.244

[gleaming flume]

Yeah strange, it loads just fine for me

If you run ip a what do you get?

[still ice]

ok that does have an http server

[cursive ermine]

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 08:00:27:cb:7e:f5 brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute eth0
valid_lft 78936sec preferred_lft 78936sec
inet6 fe80::ea5e:338b:e720:d2c7/64 scope link noprefixroute
valid_lft forever preferred_lft forever
15: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1200 qdisc fq_codel state UNKNOWN group default qlen 500
link/none
inet 10.6.120.190/17 scope global tun0
valid_lft forever preferred_lft forever
17: tun1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
link/none
inet 10.6.120.190/17 scope global tun1
valid_lft forever preferred_lft forever
inet6 fe80::46:d1e0:c10a:bc2/64 scope link stable-privacy proto kernel_ll
valid_lft forever preferred_lft forever

[gleaming flume]

hmm, two tun's? Do you have two VPNs running?

try running sudo killall openvpn and then starting the vpn up again like normal

[cursive ermine]

only 1 terminal open

[gleaming flume]

Try it anyways, because that is a strange output

[solid oak]

I know it's frustrating, I'm dealing with the same thing (tried twice and got charged twice lol) but if there's one thing I can promise you, it's that they'll make it right and take care of you when they get around to it. I used to pay yearly and my old boss stuck a business license on my account, then removed it and it didn't restore my subscription, but they refunded me for the difference. I wasn't surprised that it happened either, it was such an edge case lol

[cursive ermine]

ip a result:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 08:00:27:cb:7e:f5 brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute eth0
valid_lft 86333sec preferred_lft 86333sec
inet6 fe80::ea5e:338b:e720:d2c7/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
link/none
inet 10.6.120.190/17 scope global tun0
valid_lft forever preferred_lft forever
inet6 fe80::fe26:ccf1:42d4:3261/64 scope link stable-privacy proto kernel_ll
valid_lft forever preferred_lft forever

[gleaming flume]

Looks better, does the site load now?

[cursive ermine]

connected!!

omggggg

[gleaming flume]

Woo!

[cursive ermine]

thank you so muchhhh

[gleaming flume]

np

[cursive ermine]

sorry.. last question for today... if i wanna switch room, do i have to terminate machine and start a new one? or i can keep the same on running in a different room?

[gleaming flume]

You can keep it running, but there isn't any reason to, and after launching three machines it won't allow you to launch more until you terminate some

They auto terminate after like an hour as well

[ivory spruce]

Two hours for subscribers.

[cursive ermine]

ok thanks again. appreciate your help and patience.

[gleaming flume]

Ah yeah forgot it was different

[still ice]

I created an alias to killall OpenVPN just for this reason

[gleaming flume]

It is certainly a helpful command

[still ice]

ps aux | grep openvpn

[wanton garden]

Does the coupon auto apply to automatic renewal subscriptions?

[ivory spruce]

It was, but that was valid only until Black Friday.

[wanton garden]

It looks like it doesn't from what I can gather. How can I take advantage of the coupon code if my automatic renewal kicked in? I've only participated in the AOC challenges and not premium stuff since it renewed.

I've tried emailing support on the 4th, but I havent heard back 😩

[ivory spruce]

When did it renew? Per THM ToS, you can only request for a refund within 7 days since your renewal, but then again, the coupon is only valid until today.

[wanton garden]

on the 4th

[ivory spruce]

They are quite busy due to the AoC event. Thus, the standard response time is ~8 to 9 working days.

[wanton garden]

yikes

does the refund process automatically or is that another 8-10 days?

[ivory spruce]

I'm not certain on the SOP for it, better wait for THM Support. As you've already dropped them an email requesting for refund (as I understand it), it will be processed even if THM Support responds to you at a later time.

[wanton garden]

Well, it was more of an email requesting to apply the code to my already paid resub if possible.

[ivory spruce]

This I'm not certain of.

[wanton garden]

I appreciate your information. Hopefully someone from THM staff can reach out to me through here and possibly help with this. Thank you for your time.

[ivory spruce]

Sure thing.

[candid monolith]

Where can we see the rooms we joined? Can't seem to figure it out lol

[knotty storm]

Profile -> My Rooms

[candid monolith]

Thank you! Didn't even bother to check the profile tab, woops

[scenic torrent]

Gave +1 Rep to @knotty storm

[knotty storm]

xD np

[lunar crag]

Hello
I have a question regarding openVPN

Usually it is used to connect an attack machine you own to the tryhackme network right?

Is there any security implications if instead of connecting a Kali Linux VM to the VPN, I connect my host machine?

Since the VM is connected to the internet using an internal virtual network

[ivory spruce]

Other users who may have not-so-good intentions can access your host and do something malicious. Although users who have done the same in the past have been banned.

[tribal mason]

Don't use bridged mode and you would be fine I'm assuming

Even if they compromise your VM, they can't pivot to other devices on the same network