site-support

[haughty bough]

what just happend ?

why they go to 0 ?

after ther reached to 50

[fast sage]

Thank you, now I know what part of my notes I need to look at 🙂

[scenic torrent]

Gave +1 Rep to @ivory spruce

[slender coral]

help, I can't set up OpenVPN. When I try connect an error appears:peer certificate verefication failure

[fast sage]

https://help.tryhackme.com/en/articles/6496058-troubleshooting-openvpn-on-linux-and-mac

I remember when I tried it, I think I got something similar and had to switch the server I was connecting to because the automatic file generated had an error in it

[weary spindle]

Which server?

Which os?

[slender coral]

Configuration file from TryHackMe, Windows 10

[weary spindle]

Did you download the community downlaf for openvpn

Did you get your config from https://www.tryhackme.com/access ?

[slender coral]

Yes

[weary spindle]

Whihc config did you download?

[slender coral]

From the site try hack

[weary spindle]

There is multiple to choose from.

[slender coral]

I click download my configuration file, vpn server eu-reular-3

[weary spindle]

That helps 🙂

Eu reg 3 is broken, can you try 1 or 2?

[slender coral]

I try 1 and 2 and I get error

But I can do it again

[weary spindle]

Which openvpn client you using?

[slender coral]

Free?

[weary spindle]

https://openvpn.net/community-downloads/

This one?

[slender coral]

No

Version 3.....

[weary spindle]

Try that one 🙂

[slender coral]

Ok

[slender coral]

Version 2.6.3?

[weary spindle]

Yeah

[slender coral]

Ok

[slender coral]

Thanks Thanks thanks 👍👍👍

[scenic torrent]

Gave +1 Rep to @weary spindle

[visual shard]

is there a limit on number of friends that we can add ?

[zinc gull]

did i verfy my account ? how do i know?

,, i did /verify <token> .. this message appears Unknown Integration

[flint summit]

Hi, I need to speak to a THM Staff privately please. Il found something surprising on one of chall

[zinc gull]

@glacial hound

[glacial hound]

You will see this on your profile once you have verified

[glacial hound]

Are you using the token from your THM profile?

[zinc gull]

it will take time?

yes

[glacial hound]

@bronze vale Hey Jabs, you around? Might be an issue with the bot

[bronze vale]

@zinc gull are you on PC

[west chasm]

Pong!

API Latency

107ms

Client Ping

284ms

Dec 26, 2023, 3:02 PM

[zinc gull]

i did copy paste for the token

yes PC

[bronze vale]

CTRL+R

Did it let you verify @zinc gull ?

[zinc gull]

no still

[bronze vale]

DM me a screenshot and your token please

[flint summit]

@glacial hound or another THM staff member, would you be available ?

[zinc gull]

when i DM someone , this happens <Your message could not be delivered. This is usually because you don't share a server with the recipient or the recipient is only accepting direct messages from friends. You can see the full list of reasons here: https://support.discord.com/hc/en-us/articles/360060145013 >

[glacial hound]

Hi, what do you mean by "something surprising"? Which challenge are you referring to?

You can DM me if you want 🙂

[strong scroll]

Hello. I was just wondering if anyone has any idea how long it takes for a room to be evaluated. I know there's a long queue, but any estimate? I'm going on 8 months now, so mostly just curious. Thank you ☺️

[plush bay]

for new daily driving of linux shadow recommends the following:
linux mint
pop os
ubuntu

in that order....

for hacking distros to use in a virtual machine for stuff like tryhackme and other ctfs:
kali linux ( which is the industry standard for this )
parrot os ( made by the hack the box people or at least heavily supported by them )
black arch ( if you wanna use something based on the arch linux distro... though it can get tricky )

[bronze vale]

enable mutual server dms

Reason for unlinking?

[winged locust]

Thank you so much for putting so much effort in answering my question. Really appreciated. Thanks a lot

[scenic torrent]

Gave +1 Rep to @plush bay

[bronze vale]

Mhm

[shadow crater]

Howdy - perhaps I missed something but I have the Premium Annual subscription which states that I can " Enroll in all learning paths". I tried accessing the Attacking and Defending AWS path and its saying I need to pay for an add-on of over $400 USD for 3 months. Is this correct?

[zinc gull]

verified 🙂

[hot charm]

Hi everyone,
Do I still need to put my mtu value to 1200 when connecting to the vpn ?

[zinc gull]

still i can't connect to the machine using openvpn

@glacial hound

[shadow crater]

Cool - is there a list of what the Premium & Business rooms are? In my account, there is no distinction which led to my confusion...

[gleaming flume]

Go to the search tab and you can filter by free, sub only, and business only rooms

[shadow crater]

Hmm...okay @gleaming flume and trust me when I'm not trying to be pedantic but...my subscription level is premium. The search field doesn't even mention premium. When I search for business , I only see one room. When I search for subscription, I see the AWS rooms and when I click on them, I get prompted for the additional fee menu.

[weary spindle]

Premuim == subscription.

[shadow crater]

So if Premimum == Subscription, why is Subscription prompting me for additional costs which is apparently Business?

[weary spindle]

Because it's not exclusive to business users anymore, and is a separate subscription price (like throwback) due to the cost of the path.

[shadow crater]

And as a customer...how I am I supposed to ascertain that from my purchase? Again, not trying to be difficult but I'm getting a vibe that I should have somehow known this already...hence my confusion.

[weary spindle]

It's only very recently been changed, and THM haven't had time to put out the announcement on Discord, it can be found here though https://x.com/realtryhackme/status/1739671941663924523?s=46&t=aFtH5ZqLKvg2fQtYtY2lUw

[shadow crater]

Sigh. Well, this was announced AFTER my purchase. Its not a big deal (since the price was inexpensive) but annoying...I'm a CISO auditing plans for my team (we are solely AWS and currently using SANs, Offsec, etc.) so was excited to see this but I guess not. lol Okay, thanks for the clarification.

[scenic torrent]

Gave +1 Rep to @weary spindle

[shadow crater]

Oh...the announcement was like two hours ago. lol wow EDIT: To clarify it == announcement of additional $400 add-in cost to premium subscription

[dusk venture]

Hello everyone, it’s been a moment since I didn’t connect to my thm account and now it doesn’t recognize my ids and password. I even try to change them but not working. I contacted the support so many times but no one is able to respond

[pale citrus]

Hello, I purchased Premium 4 days ago, but it never went through on the website. I submitted a ticket and it hasn’t been picked up yet. Just wondering if support usually takes this long or it’s just because of the holidays, and if I will receive my 4 days or however long it takes compensation because the payment already went through on my end.

[solar jewel]

Someone should help me solve this problem I've been having all this while. My Kali is not connecting with tryhackme 🥺

[weary spindle]

U on the vpn?

Is the username correct?

[waxen isle]

Hello, im in the MISP room and the lab: https://lab_web_url.p.thmlabs.com/ is timing out and not loading at all. any info?

[weary spindle]

You need to start the task, normally in task 1.

[waxen isle]

ok, so i went through tasks 1 and 2 both had no questions just verification of completion. Green checks on both. Is there another prompt im missing?

[weary spindle]

Can you link the room?

[waxen isle]

https://tryhackme.com/room/misp

[weary spindle]

Yeah, task 3.

Press the start machine button

[waxen isle]

im in attack box now

[waxen isle]

ahh its loading now, maybe the site was down idk

[gleaming flume]

Oh crap, wrong response, sorry to whoever I pinged, but yeah get level 0xC for red lol

[still phoenix]

Hello, I'm a student, I would like to subscribe for premium, for 1 month. How do I get the student discount?

[west chasm]

Student Discount

Article Link

https://help.tryhackme.com/en/articles/6494960-student-discount

Dec 26, 2023, 6:31 PM

[weary spindle]

Check the above link please. 🙂

[still phoenix]

Thanks a lot.

[blazing minnow]

hey, I have a problem with the VPN (I tried to regenerate my file but it's not working anyway) I'm using Kali linux in WSL 2, and I get that message :

2023-12-26 19:42:22 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
2023-12-26 19:42:22 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2023-12-26 19:42:22 TLS_ERROR: BIO read tls_read_plaintext error
2023-12-26 19:42:22 TLS Error: TLS object -> incoming plaintext read error
2023-12-26 19:42:22 TLS Error: TLS handshake failed
2023-12-26 19:42:22 SIGUSR1[soft,tls-error] received, process restarting

[plush bay]

are you on the eu regular 3 vpn server??? if yes try another vpn server

[tight seal]

not at 0X5 (click your name) - do more rooms , go up in rank and discord will catch up (sometimes takes overnight)

[blazing minnow]

Yup

[plush bay]

it signifies the following number is in hexadecimal

no problem

[tight seal]

i would suggest a new opvn file - i just tried on my wsl 2 and im not having any issues (wind 10) 2023-12-26 13:58:04 TUN/TAP device tun0 opened 2023-12-26 13:58:04 net_iface_mtu_set: mtu 1500 for tun0 2023-12-26 13:58:04 net_iface_up: set tun0 up

i havent seen an 0X0A 0r 0B , but im guessing thats next after 09

lots of c and d's

im trying to figure out the relationship of "points" to , rooms? questions? .. doesn't seem like a 1:1 correlation

[weary spindle]

Challenge rooms offer 30 pts per question that need an input, blood points for new CTF's.

Info/walkthrough are 8 pts a question, no blood points.

Some rooms offer no points at all.

[plush bay]

some rare challenge rooms rewards more then 30 points a question

[weary spindle]

Yup, xmas is over, so I've removed my xmas pfp 😄

[plush bay]

see for example the alice in wonderland series or the year of the animal series

[weary spindle]

Back to my preferred pfp

[plush bay]

shadow changing their pf back after 13th day yule

or if they feel like it right after the new years

[tight seal]

does it say what each room is worth somewhere or is it a before/after thing (looking at points) because i've seen # of people who have joined the room but nothing about the points

[plush bay]

for the special rooms there is a green box with +number for how many extra points said question gives

[tight seal]

TY

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

no problem

[solar jewel]

Yes🥺 sorry for the late reply

[weary spindle]

It's ok.

You can't be around 24/7.

Lol

[solar jewel]

Actually 😊

@weary spindle the username is correct

[weary spindle]

The the only thing we could possibly to was change your MTU, but we can't do that until you're having the issue again

[solar jewel]

This is not the first time I've been having this issue.

https://tryhackme.com/room/linuxstrengthtraining

This is the room I'm currently working on

[weary spindle]

sudo ip link set dev tun0 mtu 1200

Try that in a new terminal.

With the VPN on

[solar jewel]

Ok I'll do that RN

[weary spindle]

Ghost ping?

[solar jewel]

@weary spindle Permission denied

[weary spindle]

Do you have the VPN running and entering the correct password?

[solar jewel]

Yes

[weary spindle]

Can you run ip a | grep "tun"

[solar jewel]

Ok

@weary spindle here

[weary spindle]

Strange how the previous command isn't working

[solar jewel]

What should I do now?

[onyx terrace]

@bronze vale Hi there, I am trying to verify my THM account with discord using this article: https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account. However, the TryHackMe bot always displays a 'The application did not respond'. The article told me to ping you in the server, so could you please help me fix this problem?

[bronze vale]

oh that's new

one second

[onyx terrace]

Here is a screenshot:

[bronze vale]

dw I can view it from here

[onyx terrace]

ok

[bronze vale]

try now

[onyx terrace]

It works now. Thank you very much

[slim shadow]

If you are using WSL it could be because of this

[solar jewel]

@slim shadow pls what's WSL?

[ivory spruce]

Windows Subsystem for Linux

Is that what you have?

[pine stratus]

Hey fam. Is there anyway to change your name on any of the badges for sharing purposes? Thanks!

[narrow heath]

basicly running a Linux layer (terminal) on top of your Windows environment. Pretty useful for a lot of reasons 🙂

[weary spindle]

And terrible for networking

[vale musk]

The form used to set 'Occupation Details' account information in my THM profile seems bugged.. I fill in every required field, click Save Changes and it will say 'businessEmail is required.' every time. Then it even resets the Company Name and Job Title fields even though I had those filled in too.

[naive dust]

still no premium on my account, i bought premium on a 24 december. annoying af

[eager fulcrum]

Email [e-mail]
Support isn't provided via the discord so unfortunately no one here can help you.

[naive dust]

okay, thanks. email sent!

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[wintry ferry]

Is it possible to disable internet access for the attack box

[ivory spruce]

You can choose not to use the internet? Or do you have a task or room you're working on where you do not want internet access (though it is available for subscribers only)?

[onyx swan]

Hello, I was trying to use openvpn to connect to tryhackme but the process keeps freezing at “Protocol options: explicit-exit-notify 3” I searched it up online but I haven’t found any solutions and I was wondering if anyone else has the same issue?

[bronze vale]

Send a screenshot of your full output?

[west chasm]

@onyx swan

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 27, 2023, 3:44 PM

[onyx swan]

I’m on my phone so I can’t currently but let me try from my pc

the channel wont let me but let me paste it here

[bronze vale]

Mhm you need to verify your account^

[onyx swan]

I watched many tutorials as I am not that familiar with discord but I cannot seem to find the verify button anywhere on my settings

[weary spindle]

Type /verify in the text box

[onyx swan]

Thank you so much

this is it

[bronze vale]

It looks like you manually exited the process?

[onyx swan]

I did, but earlier it froze

[bronze vale]

Once you have typed the connection command, you just leave it

Open a new terminal window

It hangs ("freezes") because that is the connection staying open

[onyx swan]

I see, but when I go to tryhackme it doesn’t say I’m connected

[bronze vale]

Instead of backgrounding it will just stay in the terminal. Then, when you're done, just CTRL+C in the terminal to close the connection

[bronze vale]

Ignore the access page, type curl 10.10.10.10/whoami into your terminal, if you see an IP address you're connected

[onyx swan]

ok, I will try this, Tysm

It worked, thank you again for all your help

[candid heron]

I have a question about friends on THM. I no longer see one of my friends in the list but they still see me. I tried adding them back as a friend but I get a message Uh-oh! Friend request already sent. They don't have an email to accept my friend request so I'm not sure what to do.

Is there a way to see them in my friends list again?

[golden star]

Having an issue with walking an application in jr pen tester and I start the attack box wait 2 min then try using url given to me and it keeps saying 504 gateway timeout

[blazing mural]

Having an issue with account I paid for premium was double charged and still don’t have premium it’s asking me to subscribe I submitted a ticket a day ago and still nothing? Any help?

[gleaming flume]

We can't help here, your ticket is the right way to go and you're just going to have to wait for a response from them. It may take up to 7-9 business days because they are busy this time of year

[long flower]

Is there something I shouldn't do when using the machines? I've had to restart them several times now because either kali or the other machine will shit the bed and i restarted both of them a half hour ago. I know I shouldn't let one run out because even if I restart it the other won't connect to it and i still have problems even when i extend the timer. This is on question 22 of OWASO top 10 2021 and i dont know if the listeners or burpsuite are crashing the machines

[weary spindle]

Don't open the link in the attackbox.

Open it in your host, if you want to use attackbox just use the ip

[odd bear]

Hello. I earned the Cyber Event badge, and beforehand, I changed both my full name, and even my username, to match my real name so its visible on the badge. However, whenever I try to share the badge, and its thumbnail pops up, my previous (original) username is only visible. But clicking the thumbnail, it changes to my name. Any mod able to fix this? Thanks! (tried the support chat on the site, but didnt get anywhere)

[lost slate]

Hi, I'm not able to connect to the machine in "Windows Fundamentals 1", I get a connection error. Is anyone else having the same issue?

[wicked pilot]

What kind of error??

[lost slate]

"The tryHackMe remote server is not currently reachable. Please check your network and try again."

There are no issues with my network 🙂

I am not using RDP but the webinterface

Just tried to shut it down and start it back up again, didnt help

[wicked pilot]

Screenshot?

[lost slate]

hm, trying to figure out how to upload a picture 🙂

[wicked pilot]

Maybe u need to verify your thm account on discord if u haven't already

[lost slate]

Ah, no I have not, I'll hav a look into that, thanks

[wicked pilot]

There is a token in your thm account
Go to profile of the thm u will find it out

[wicked pilot]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[lost slate]

just verified it

tnx

[wicked pilot]

Do u have attackbox open in 2 places ?

[weary spindle]

Two different windows won't give that error.

[lost slate]

No, not that I am aware of at least. I just started my computer and havent been on any attack box since yesterday, and that was a Linux one

[lost slate]

forgot to use reply to 🙂

I'll shut it down an try in a few hours again

thanks!

[wicked pilot]

Not exactly that solution but why don't u use your own machine with openvpn?

[snow oracle]

hello, I am doing Windows- Lateral Movement and Pivoting-Abusing User Behaviour . I cannot get the credentials at http://distributor.za.tryhackme.com/creds_t2 to start the task. The network state is running and started. openvpn is on. Had no issues connected with the network until now. Cant connect to server...

[weary spindle]

If it's not on the list, no.

[brave current]

hello guys, I resumed my premium subscription, i was debited 1 week ago and i still dont have premium on my account; the support isnt answering

do you guys have an idea ?

[ivory spruce]

The THM Support Team's standard response time is at ~8 to 9 working days at the moment, but it should go down as the AoC event is almost over.

[brave current]

okay, thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce

[ivory spruce]

Also, please do not send a follow up until the said duration has passed as it will push your ticket down the queue.

[brave current]

okay 😉

[still swallow]

Hi everyone. Please I need help. I'm getting frustrated.

I am having issues connecting with openvpn to the THM network. I have tried so many things but it still does not work.

This is a screenshot of my running the THM openvpn script and the openvpn command. The key error is TLS key negotiation failed to occur within 60 seconds. I have regenerated and downloaded multiple configuration files. I have also changed servers several times. I have sent an email to the support team. Nothing seems to help.

What can I do please? Anyone faced similar challenge?

[ivory spruce]

What VPN server did you use when connecting here?

[still swallow]

I primarily use EU Regular 1. I'm from Nigeria

But I've tried all the others as well. Still the same

Anyone please?

[crystal marlin]

It could be that the country or the location you are in is blocking VPNs

[still swallow]

I doubt that. I am sure Nigerians are here that have been able to connect successfully.

Any Nigerian here can validate this please

[crystal marlin]

Well it doesn't have to be the country, maybe it's the location itself, e.g. if you are living in a student hostel, they might block the UDP port 1194

[still swallow]

Doesn't apply in my case.

[crystal marlin]

Ok, but that's the most likely case there, that something is blocking that port, given the VPN output you provided

[still swallow]

Hmmm. So what can be done?

[crystal marlin]

I would try to contact the ISP asking them about it

[polar copper]

Hi, according to your screenshot, it seems that your mtu is set to a value that is causing a problem, if you reduce the mtu value, i think it will work

try these steps :

• Open the OpenVPN configuration file with a text editor
  sudo nano /path/to/your/file.ovpn
• Add tun-mtu 900 to the end of the file, just before the </tls-auth> tag and save (ctrl+X)

[naive dust]

I trying in Maldoc room but when i use show split view, I always receive a white screen.

[still swallow]

Thanks for the help. I've tried this but it doesn't work still

[scenic torrent]

Gave +1 Rep to @polar copper

[west chasm]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Dec 28, 2023, 1:41 PM

[naive dust]

I trying in Maldoc room but when i use show split view, I always receive a white screen.

Can anyone help me use this feature, pls ?

[vale musk]

Is the error about MTU gone now, or changed? 'Doesnt work still' does not give us a lot of information to work with 😉

[still swallow]

Ok let me run the script again

I just ran the script again. MTU value is still failing at 1000

[tawdry vortex]

Have you ever successfully connected and this has just started? Looking at your screenshot, I saw the THM script above it and wondered why you were running that, or if you had previously connected and had that as part of a room

is that a troubleshooting script?

[ivory spruce]

In order for this to work, he has to be able to establish a successful VPN connection which doesn't seem to be the case here.

[still swallow]

So, the story to this is that I have faced this issue before and sent an email to support. That was how I even came across the vpn script cos I had to do extensive research to know how to solve the issue. But few days ago, I was able to successfully connect and I thought everything was fine. However, I was scared to disconnect the connection because I didn't want to jinx it. Unfortunately, I had to shut my system down and when I tried connecting again today, the issue started. I ran the VPN script intentionally because I knew that would be one of the steps that would be suggested.

I'm leaning towards @crystal marlin's theory of port blocking by the ISP because I usually try connecting to the network when I am on office network. So, maybe such connections are blocked. And the only time it has worked for me was when I was at home, using my home network. What makes this puzzling now is that I disconnected from the office network to my own mobile hotspot, but the issue still persisted. I might have to wait till I get home to try my home network again, but I am worried that it may still be the same.

[still swallow]

Update: So I just tried it on my home network and it works. To think this was the issue is so annoying. Funny enough, the mobile hotspot works also. Thanks everyone who contributed to helping solve this.

[tight seal]

vpn and any connection that uses encryption needs all clocks synced - WSL stops the clock when going to sleep - some other vms will also

and isp's shouldn't block any vpn connection - well at least in the states , dont know the laws everywhere

[sinful wyvern]

Is there a way to change my subscription from the monthly to the yearly?

[fathom flame]

The command above is made up of the following parts:

gobuster is the terminal command to start Gobuster
dir uses directory and file enumeration mod
--url http://www.onlineshop.thm/ sets the target website
-w /usr/share/wordlists/dirbuster/directory-list.txt specifies the word list to use
In the terminal on the lower right, run the command shown above. This command should let you discover the hidden page(s) in an automated manner.

Screenshot of the terminal that appears on the lower part of the static site

If you made it this far, congratulations, you have just discovered the hidden page using two different approaches!

Answer the questions below
What is the name of the hidden web page you discovered?
Answer format: *****

I'm having lots of trouble with this one

[dusky lantern]

In SMB room, Even though I follow the instructions on the website, I am unable to access the server. Pressing the Enter key also does not grant me access. No matter what I try, it keeps saying 'failed'. Pls help

[ivory spruce]

You'll have to cancel your monthly subscription, wait for it to expire and subscribe to the annual plan.

[sinful wyvern]

oh thank you

good 2 kno

[fathom flame]

Can someone answer my question I have written about

[fathom flame]

This

[dusky lantern]

ok i solved it. I had to go to the profiles section.

[floral mason]

I am trying to purchase THM for my business. Is there anyone who can help? Our card keeps getting declined. Flagged purchases. is there a way we can purchase via invoice?

[manic crane]

Can I change the country flag on my profile somehow?

[clever tusk]

Hi, im stuck on the Network Security task 3, where it should give ip i just get MACHINE_IP and i cant progress

[weary spindle]

Did you start the machine?

[clever tusk]

yes

[weary spindle]

With the Green Start machine button?

Start the AttackBox by clicking on the blue “Start AttackBox” button at the top right of the room. Start the attached machine by clicking on the green “Start Machine” button at the top right of this task. It usually takes a minute or two to load fully. Once they are both ready, you should use the AttackBox, which uses the right half of your screen by default.

[clever tusk]

I will give it a new try and let u know. thank you

Failed to resolve "MACHINE_IP"

The IP address of the target is MACHINE_IP

it does not give me a IP adress

[weary spindle]

the machine on task 3?

[clever tusk]

yeah

[celest marten]

hello, just start a machine, i downloaded my open vpn file, when i tried to run it , i got an error

sudo openvpn filename.ovpn 
2023-12-28 19:08:30 ERROR: Endtag </cert> missing
2023-12-28 19:08:30 Exiting due to fatal error

seems like the system is not generating the openvpn file as it should

seems like the problem is with Europe server 3

[weary spindle]

eu reg 3 is broken

[celest marten]

i just joined the community, soi didnt know 🙂
i changed the server and it s working now

[weary spindle]

It's ok! no worries, hope you enjoy yout time and learn lots.

[ivory birch]

hello?

[cerulean tide]

hey imworking on linux fundamentals, but ran out of attackbox time, so i installed kali through vmware and now im struggling to connect using ssh, it keeps saying refused at port 22, can anyone help?

[tribal mason]

Are you connected to the TryHackMe VPN?

[tribal mason]

Hi. What's up?

[cerulean tide]

Yeah I was connected through openvpn

It’s just running on my desktop though not through kali on VMware

Do I need a set up a vpn on kali as well?

[broken bear]

I prefer to run VPNs on my VMs instead of the host

You can do either, my anecdotal experience is that it causes fewer DNS problems on the whole

[sand horizon]

hello dudes and dudettes, can someone tell how long my room can stay on review?

[cerulean tide]

do you think you could explain that to me if at all possible

like do i open firefox on kali and download ovpn inside?

[cerulean tide]

im not sure how to do it, i tried through the terminal but i dont think it worked

[tribal mason]

https://tryhackme.com/room/openvpn

[tribal mason]

It might take some time, can't be certain

[cerulean tide]

sudo openvpn /Downloads/dusk172.ovpn
Options error: In [CMD-LINE]:1: Error opening configuration file: /Downloads/dusk172.ovpn
Use --help for more information.

[weary spindle]

You're not in the directory of the file.

[cerulean tide]

i used find and then pasted it in

[tribal mason]

Also don't forget to disconnect from your host. It usually causes issues if you connect from both your host and VM

[cerulean tide]

do i do cd downloads

[weary spindle]

Stick ~/ infront of Downloads

[cerulean tide]

oh okay thank you

im sorry ive never done any of this before

┌──(kali㉿kali)-[~]
└─$ ssh kali@10.10..
ssh: connect to host 10.10.. port 22: Connection refused

[weary spindle]

Which Linux Fundementals are you doing?

[cerulean tide]

2

[weary spindle]

Are you on the VPN now?

[cerulean tide]

i got the verification thing

by looking up the machine ip and it worked

[weary spindle]

Might need to reboot the target machine and re open

[cerulean tide]

is the target the terminal or the machine in thm

ive done both multiple times

i tried using sudo ssh and the password and it gave me this

The authenticity of host '10.10.188.246 (10.10.188.246)' can't be established.
ED25519 key fingerprint is SHA256:mk1Nmry9W4sNYrq9asFTSPfijDPUb0ZoOt4yG/Nw2bY.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

[tight seal]

you will get that message the first time you connect to a machine - say yes

[cerulean tide]

okay

[cerulean tide]

will the password be kali or tryhackme?

i think it was kali now its just loading ig

itll probably just give me the same port 22 error

[tight seal]

no idea , what room (url)

[cerulean tide]

https://tryhackme.com/room/linuxfundamentalspart2#

kali@10.10.188.246's password:
Connection closed by 10.10.188.246 port 22

[tight seal]

For example: ssh tryhackme@MACHINE_IP . Replacing the IP address with the IP address for your Linux target machine. Once executed, we will then be asked to trust the host and then provide a password for the "tryhackme" account, which is also "tryhackme".

[cerulean tide]

i entered that ip (the thm machines ip) and since im running kali with a vpn i used kali for the password

and it threw me the port 22 again

[tight seal]

`─# ssh tryhackme@10.10.188.246
The authenticity of host '10.10.188.246 (10.10.188.246)' can't be established.
ED25519 key fingerprint is SHA256:mk1Nmry9W4sNYrq9asFTSPfijDPUb0ZoOt4yG/Nw2bY.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.10.188.246' (ED25519) to the list of known hosts.
tryhackme@10.10.188.246's password:
Welcome to Ubuntu 20.04.2 LTS (GNU/Linux 5.4.0-1047-aws x86_64)

`

[cerulean tide]

┌──(kali㉿kali)-[~]
└─$ sudo ssh kali@10.10.188.246
kali@10.10.188.246's password:
Connection closed by 10.10.188.246 port 22

this is just what i keep getting

[tight seal]

A , why are you trying to log in as kali and B what password are you useing ?

[cerulean tide]

well the user is kali since im not using attackbox so i figured it was what i was supposed to use

ill try with tryhackme sorry

[cerulean tide]

I figured it didnt apply, since i wasnt using attackbox

that worked, tysm srry for the time

[crimson river]

Hi everyone 🙂 I have a question regarding a learning path (jr. penetration tester). Some time (6-7 months) ago I've finished the burp suite module, but now the site says that I haven't. Is it normal behaviour or something broken?

I'd like to ask to mark these modules completed for me. Could you help with that please?

P.S: I've just verified my discord profile with a token. Hope it'll help.

[ivory spruce]

The burp module has been refreshed and relaunched, thus the reason those are marked as not completed.

[crimson river]

Got it! Thank you 🙂

[tight seal]

hmm when ? i just did a bunch of burp stuff a few days back

[gleaming flume]

It was months ago at this point that it was updated

Unless there is some new update that I missed

[tight seal]

ah ok - noticed older version of burp in some rooms and thought thats what you ment

of course im not using the attack box so it may be the ver on that and it's messing with my head lol

mainly things like "click this tab " ya that tab was removed and the function is now in this menu , etc

[wild depot]

For the challenge with PHP and RFI causing RCE are we expected to host the file somewhere

[tight seal]

room?

[wild depot]

wait a minute this is the wrong channel for room help

[tawdry vortex]

you can actually see in the name of the room.. the one which is linked in the beginner path is still the old one and has the word "old" at the end of the room name.

[tawdry vortex]

you only need the kali password at the following times: a) the initial login to your Kali box b) whenever you need to run as root or su - which likely includes when you are launching the OpenVPN client. After that, whenever you are connected to the VPN and accessing any THM resource (ssh, RDP, etc) you will using the credentials for the machine you are attempting to connect TO (given in the room) not the one you are already on.

[cerulean tide]

Ty 🙏

[scenic torrent]

Gave +1 Rep to @tawdry vortex

[quaint pulsar]

Hey I'm trying to connect to the OpenVpn but its not allowing me

[tawdry vortex]

Has it worked for you before, or trying new? I've been hearing reports that eur 3 is having issues and that by switching to another endpoint it's worked for folks.. Have you tried that yet?

[quaint pulsar]

I'm new to it and I haven't tried switching yet but thanks for the info i'll see if it works.

[scenic torrent]

Gave +1 Rep to @tawdry vortex

[tawdry vortex]

let us know if you are successfully.. hoping thats a start

[quaint pulsar]

After my 7th attempt on different servers im encountered with the Connection Timeout error.

[tawdry vortex]

yeah theres more going on there then just the endpoint.. maybe filtering on the vpn connection from your home (?) network?

[ivory spruce]

#site-support message

[somber dirge]

Try download a new configuration file. If this fails, make sure you have the most up to date version of OpenVPN. Otherwise, contact us ([e-mail]) or see our docs for more information.

[weary spindle]

Which country do you live in?

[hot valley]

wreath room is free ?

[weary spindle]

Yes, however you need a steak of > 7.

[hot valley]

I have a streak, Still not able to download the VPN file

[narrow arch]

Hi, I've won a Swag Shop voucher on aoc. Can I use it at any time or does it have an expiry date?

[celest marten]

hello, please how can we change country in our profile?

[fast sage]

Hey so I have a VM running on our home server, with OpenVPN connected. I am going through advent of cyber 2022, but I have the problem too with other rooms. Basically whenever it is asking for the attacker IP I can't figure out which one it is because neither the eth0 and the IP from the VPN work. The one from the VPN (tun0) is a 10.xxxxxx, the one from the homelab is 192.xxxxx (dont count the x's, just an indication). Day 9 of advent of cyber says that I need to use eth0, which is the 192, but it also says that it should be a 10.xxxx IP. Neither work. Does anyone insight into this?

[ivory spruce]

What was the task? If it will require the target machine to connect back to you, then it should be tun0.

[fast sage]

Yep, connect back. But I tried both and both don't work which is where part of my confusion is coming from. Figured it might be because of my server settings, so I'll see if I can work it out with my brother with the knowledge that it should be tun0. Thx 😅

[scenic torrent]

Gave +1 Rep to @ivory spruce

[ivory spruce]

Have you setup your listener and have the target use the said port?

[frank cobalt]

Hi, not sure if it's an issue on my end but the VPN for EU-Regular-3 did not work for me (It was selected by default) . When I changed to EU-Regular-1 it worked.
EDIT: I also regenerated my config each time when switching VPN server

[flint hatch]

hello i am doing Walking An Application Room and in task 3 " view page source "
while going through i saw the framework , https://static-labs.tryhackme.cloud/sites/thm-web-framework and went inside got the zip file etc etc but i also found in documentation about the /thm-framework-login so i took it and logged in the acme it support site using the default user and password, and i got a flag THM{CHANGE_DEFAULT_CREDENTIALS} , but there was no spot for it so probably the write-up who did this room forgot to put a question and a task for it it's a good thing to look at if you're starting as a beginner so i though i write it here so maybe you guys add it to the room ( will be better for new comers)

[upbeat wind]

There will be on another room a need for it, if I remember.

If you're doing the web fundamentals path, and you're digging enough, you'll have flags for that on another room. As they use the same website.

[prisma frigate]

Hey guys, I'm trying to upload a room in TryHackMe but it isn't happening, what should I do?

[bitter cove]

HI everyone . How can I find the support .When I visit the aws learn path IAM Principals room , and I generated the aws cloud environment I found I cannot get the password. The ak sk and password always show 'undefined' . And I reseted the env again and again it cannot resolve the issue. And I created the support ticket Ticket ID#17621 but no one deal with it. Is there anyone can help me ? Thanks.

[flint hatch]

all good just wanted to let them know incase they wanted to add it in this room

[flint summit]

Hi @foggy rover can I DM you for informations about one of your rooms?

[weary spindle]

Many staff is on annual leave, so it might be delayed.

[flint summit]

no problem, I can wait. Thank you for your message 😉

[scenic torrent]

Gave +1 Rep to @weary spindle

[ivory spruce]

The THM Support standard response time is at ~8 to 9 working days at the moment, but it should go down soon following the AoC event completion. When did you submit your ticket?

[manic flower]

Hi everyone, I have a problem with "Wreath" room. when i click the join button, it redirect me to my rooms page, someone had the same problem ?

[weary spindle]

Are you a sub or have a streak > 7?

[manic flower]

i'm not subscribed, but if i'm not wrong is not required, is a free room

[weary spindle]

It's a free room for users with a streak of > 7.

[manic flower]

I hadn't noticed it. thank you so much Scrubz !

[weary spindle]

No worries, staff are going to implement a page that will let you know at some point.

[bitter cove]

2 hours ago .

[scenic torrent]

Gave +1 Rep to @bitter cove

[spiral vector]

anyone else having issues starting attack box?

just in last 30 mins

[cinder rose]

i cant connect openvpn it is disconnecting with tls error handshake failed

[knotty storm]

by any chance are you using EU3?

[cinder rose]

no

eu2

[knotty storm]

hmm then lets wait for someone else :0

[weary spindle]

Which country are you in?

Which OS?

Host/VM?

[knotty storm]

pls dont say wsl

[cinder rose]

vm

kali linux

turkey

i had issues in past but they are gone instantly

[weary spindle]

Is your time correct?

[cinder rose]

yes

[knotty storm]

https://github.com/tryhackme/openvpn-troubleshooting you can try this if you want to..

[cinder rose]

im trying eu 1

[cinder rose]

still continues

[tacit laurel]

I tried to connect with openVPN to diffrent regions and with new .OVPN files but i keep getting error:

EU-regular-1, US-West-Regular-1, AU-regalar-1:, US-EAST-Regular-1 , IN-Regular-1 and EU-Regular-3: cannot connect because of following error(s): Error calling protect() method on socket: 30 times

EU-regular-2 : unsupported options present in configuration

[gleaming flume]

Can you show the entire output not just one random line? (For any server that is not eu-3)

[tacit laurel]

⏎[Dec 29, 2023, 20:35:48] Transport Error: socket_protect error (UDP)
⏎[Dec 29, 2023, 20:35:48] Client terminated, restarting in 2000 ms...
⏎[Dec 29, 2023, 20:35:50] EVENT: RECONNECTING ⏎[Dec 29, 2023, 20:35:50] EVENT: RESOLVE ⏎[Dec 29, 2023, 20:35:50] Contacting 18.202.168.160:1194 via UDP
⏎[Dec 29, 2023, 20:35:50] EVENT: WAIT ⏎[Dec 29, 2023, 20:35:50] WinCommandAgent: transmitting bypass route to 18.202.168.160
{
"host" : "18.202.168.160",
"ipv6" : false
}

⏎[Dec 29, 2023, 20:35:50] Transport Error: socket_protect error (UDP)
⏎[Dec 29, 2023, 20:35:50] Client terminated, restarting in 2000 ms...
⏎[Dec 29, 2023, 20:35:52] EVENT: CONNECTION_TIMEOUT SOCKET_PROTECT_ERROR : 30
CONNECTION_TIMEOUT : 1
N_RECONNECT : 29
⏎[Dec 29, 2023, 20:35:52] EVENT: DISCONNECTED ⏎

[weary spindle]

What command are you using?

[tacit laurel]

im on windows, this is the log

[weary spindle]

Are you using the Communities Download version?

https://openvpn.net/community-downloads/

[tacit laurel]

im using https://openvpn.net/client/client-connect-vpn-for-windows/

the connect v3

[weary spindle]

Use the one I linked

[tacit laurel]

thanks now it works, on the website that link is linked so its a bit weird that that one doesn't work

[tall bobcat]

just did some work in a very slow web-based room machine. Left for lunch. Now I see "REMOTE TRYHACKME" and a prompt for username and password. The user and pass provided for RDP don't work. How do I get back into this machine?

[weary spindle]

Reboot.

[woeful pine]

AOC provided swag discount code does not seem to work, any ideas?

[glacial oxide]

hey guys I got a weird question
My TryHackMe Subcriptions just expired yesterday but it's still in Active for no reason. bruh

[flint hatch]

cannot connect to opnvpn using my vm

[languid pier]

It shouldn’t work anymore because it says the payment amount is 0

[glacial oxide]

idk cause in Vietnam now is 30/12

and it's would be expired in yesterday

but it's still on Active

LMFAO

And I can access to the premium room as usual lmfao

[languid pier]

Interesting

[glacial oxide]

damn xd

is it a bug bruh?

[tight seal]

THM based in Netherlands (i think , Europe for cretin) so it's not tomorrow for them yet.

[glacial oxide]

bruh

oof

[quick blade]

hello, who can I contact when it comes to breachingad network? I connected using .ovpn file and added DNS entry in network manager?

[gleaming flume]

I would try explaining your issue in #breaching-ad

[median lake]

Is there any way to browse all free tier rooms? I'm looking to go through more THM content before I decide to purchase.

[gleaming flume]

You can filter by free rooms on the search page https://tryhackme.com/hacktivities?tab=search&page=1&free=free&order=most-popular&difficulty=all&type=all

[ivory spruce]

There's also an organized list in github -

https://github.com/winterrdog/tryhackme-free-rooms

[gleaming flume]

Oh that's cool. I have never seen that before

[distant citrus]

i am new at using openvpn with THM (normally use the attackbox)

• have the openvpn file on my VM
• have the openvpn connection running in VM
• have run sudo nano /etc/hosts and put the Start Machine IP address (already have my local host IP shown in /access page)

my issue is after i run nmap and see what ports are open i can't get to the page in the browser. Firefox in the VM, no foxyproxy or burp suite running. (i can access other websites no issue for that)

10.10.182.4 with port 80 is open but my VM browser can't connect. have any ideas what's wrong?

[ivory spruce]

What was your entry for the target in your /etc/hosts file?

[distant citrus]

for the THM IP i entered 10.10.182.4 with label remote host

[ivory spruce]

Do you have foxyproxy turned on? Sometimes web pages do not load on my browser even if Burp Intercept isn't turned on.

[distant citrus]

this VM does not have foxyproxy

my internal Virtual IP matches the /access one

ill just go back to using attackbox. too many people have issues with this openvpn

[zealous yoke]

Hey:) so I can see that machine (the 10.10.182.4) is running elastic. This notoriously takes a fair few minutes to fully boot up - I say around 5-10. I've been able to access the IP from my end - can you access it now?

Also, could you share the URL to the room that you're trying to do?

[distant citrus]

hi Ben, i will restart the openvpn in terminal and see if it works (i had issue in other room yesterday too)

[zealous yoke]

cool thanks:) once you restart the openvpn, see if you can access 10.10.10.10 in your browser or via curl http://10.10.10.10/whoami. This is a good way of checking that the VPN has successfully connected

[distant citrus]

i did the http://10.10.10.10/whoami in browser, shows my internal IP as shown on /access

[zealous yoke]

Okay cool that is promising 🙂

are you able to access 10.10.182.4?

[distant citrus]

i'll try again ...

it hangs, even when i add :80

this Start Machine has been running for 30 min

[zealous yoke]

It sounds like you need the MTU fix

[distant citrus]

i dont know what that is

[zealous yoke]

I'll see if I can find the snippet to try. I cna't remember it off the top of my head

sudo ip link set dev tun0 mtu 1200

[distant citrus]

ok, i'll type that ...

[zealous yoke]

run that in a terminal while your openvpn is running and see if the page loads for you

[distant citrus]

ok, i pasted the code in other tab.

and i see Elastic show up! it worked! 🎉

thank you Ben

will i have to do this on other VMs that have same issue

[zealous yoke]

Okay awesome:) so you'll need to run that everytime you connect to the VPN. You could script it so that say it starts the vpn & does that snippet.

I believe there's a way to modify your openvpn client to set the MTU in the config, but I can't recall that either I'm afraid - I'll let you know if I find the way that's possible

[zealous yoke]

You will need to do it everytime you connect to the VPN - so only once once when you connect, and don't need to when doing other rooms in the sasme session ,etc:)

[distant citrus]

i added the commands you gave to my notes. as i have notes for the steps . thank you

[zealous yoke]

anytime 🙂

[distant citrus]

❣️

[zealous yoke]

@distant citrus Can I DM you real quick if you have a few minutes, please? 🙂

[distant citrus]

yes

[zealous yoke]

ty

[quaint pulsar]

I live in Jamaica , sorry I didn't get time to check my discord.

[bitter cove]

Hey guys . When I visit the Attacking and Defending AWS  learn path and generated the aws cloud environment ,I found I cannot get the password. The ak sk and password always show 'undefined' . And I reseted the env again and again but it cannot resolve the issue. I created the support ticket Ticket ID#17621 but no one deal with it.
I spent $375 to learn the path for 3 month but I cannot visit the lab and the support ticket  no one responded. It was a very bad experience.

[ivory spruce]

As mentioned yesterday, THM Support standard response time is at ~8 to 9 working days at the moment. Where your lab time is already running but cannot access the environment, THM Support will ensure that you will be able to get back those days so long as the issue is on their side.

[ivory spruce]

Are you trying to connect to THM OpenVPN using your Windows host?

[distant citrus]

hope this helps others , all thanks to @zealous yoke
(i can make edits if something is wrong)

[scenic torrent]

Gave +1 Rep to @zealous yoke

[distant citrus]

add 'step 1' etc ?

i would assume that is given/ understood

[zealous yoke]

cool nice graphic 🙂 I've shared the whole adding the tun-mtu to the config in the Discord and gonna see how it goes over time. The only thing I'd say is re. Step #5. You only need to add the MACHINE_IP to your hosts file if you need to access/interact with it via a domain such as websitename.thm.

I don't immediately see the reason why a user would need to add remote host THM and local host VM to their hosts file outside of say accessing say a webserver that is looking for the example of websitename.thm 🙂

[bitter cove]

Thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce

[wise gale]

if i am a paying member for the site (individual user) and get sent a 1 month subsubscription will this just extend the month I have to renew in?

[honest phoenix]

Hello Site-support, I submitted a ticket, but it didn't give me an area to provide details on my ticket, so I thought I'd provide it here.

I did my THM daily yesterday and completed it by around 10am. Today I caught a flight and received the usual email in the afternoon telling me to come back before my streak was broken. I logged in around 9:15pm and it said I'd used my free streak freeze to avoid losing my streak! But it shouldn't have, as it was only 9:15pm or so. It said I had "38 days", but the 38 was in orange.

Then I completed a question and it went back to green, but jumped all the way up to 40 days. So it jumped from 38 to 40. I counted in my profile, and I've only been on the website for 39 days. So something in my account is weird.

I'd hate to lose the streak freeze for no reason, if someone can look into it? 🙏 Note that, while it's back to grean, the note saying I have an available streak freeze is gone. So it appears to have used my streak freeze, and gone back to green, all within a 2 hour period before my day expired.

Edit: I realized that the time zone on my laptop was initially wrong when I signed in. I dual boot and I'm concerned that booting ito linux and then back into windows set the local time zone on the tablet to something other than my current time zone. I'm PST (West Coast USA), and as I write this, it's still only 11:30pm. Thanks again!

[prisma frigate]

Hey @west chasm I'm trying to create a room, but it always directs me to the 500 error page, can you please solve this issue?

[cinder rose]

my eu regular 2 server works in windows but not working in kali

it gives tls error

oh i tried it in ssh now it works

now it is works on kali too

weird

it gives errors again in kali

[ivory spruce]

Can you post a screenshot of the error? You'll need to verify your account to do so though.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 30, 2023, 10:08 AM

[ivory spruce]

If and when it happens, you can drop an email to THM Support to restore your streak back.

[ivory spruce]

What is your subscription plan - annually or monthly?

[ivory spruce]

Are you using a VPN on your host? Also, how is your internet connection speed?

[cinder rose]

it is a vm

but has a ip seperately from host

it is actually a vds

[cinder rose]

it is from a datacenter so it is very fast

around 400 mbps

the kali is not inside of windows

it is on a server has esxi os which is in datacenter

vmware esxi*

[ivory spruce]

Are you still connecting to EU-Reg-2 VPN Server?

[gentle wren]

I have lost access to my authenticator app and am not able to login to THM site to do my daily activities. I have mailed the support team twice no response from any personnel. I want to get this issue sorted out quickly. Can someone help me?

[weary spindle]

When did you email?

Support is going through a longer process, 7-9 days is response time.

[gentle wren]

The first I emailed was 4 days ago and then 2 days back I emailed once again to ask about the status of my problem.

[weary spindle]

Yeah, all you're doing is pushing yourself back down the list, please wait until they reply. 🙂

Someone may see your message in and ping you, but don't sent another email until they reply.

[naive dust]

Hello There, How can I change the country on my profile it displays incorrect details

[weary spindle]

https://tryhackme.com/api/user/update-timezone

This link will take you to the dashboard and fix it, just turn off any vpn

[naive dust]

It redirects me to dashboard itself

changed

thanks

[agile grove]

Weponsiations very unclear on how you create a windows machine and linux at the same time, can someone help me out

[humble portal]

Has anyone had any issues with premium lately? I just paid for my subscription and I saw that tryhackme withdrew the money from my bank, however I do no have access to premium. Is this normal?

[wise gale]

annual

[solar tusk]

Is anyone having trouble opening the machines on tryhackme? Rooms that have a machine never load access to it.

[humble portal]

annual

[prisma frigate]

Hey I just uploaded my first CTF room, can anyone tell me how much time does TryHackMe take to review it & make it public?

[weary spindle]

The QA team will get to it. 🙂

[bronze wagon]

Hi,I have a problem, two months ago I registered on the site through a friend's ref.link and subscribed.My friend got $5, but I still haven't.Help please

[ivory spruce]

You'll have to drop an email to THM Support for it.

[ivory spruce]

Are you connected to THM OpenVPN when attempting to access those machines?

[ivory spruce]

Your subscription should have reflected a few minutes after payment. Please drop an email to THM Support.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 30, 2023, 10:03 PM

[ivory spruce]

You'll need to be patient though as THM Support standard response time is at ~8 to 9 working days. Also, do not send a follow up email within the said timeframe as you'll push yourself down the queue.

[ivory spruce]

I'm not certain if you will be able to key-in a voucher code considering that you have a valid or active subscription.

[weary spindle]

You can't use a voucher if you're subbed.

[ivory spruce]

There, thanks @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[quaint pulsar]

Yes

[scenic torrent]

Gave +1 Rep to @ivory spruce

[ivory spruce]

Nah, just helping out to fellow learners where I can.

[ivory spruce]

Its not really recommended to connect your Windows host to the THM OpenVPN.

However, should you choose to do so, you'll need to use the Windows installer from here - https://openvpn.net/community-downloads/

[quaint pulsar]

thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce

[real shale]

@ivory spruce Hello can anyone assist me with this error code. I cannot get the SITEMAP.XML to open up on Task #4 on Content Discovery room. https://share.icloud.com/photos/0e3vSYDONo1Mx_3SvhZG_KKBw

[bronze vale]

Can you verify please @real shale
Sharing icloud links is dodgy

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 31, 2023, 1:11 AM

[tawdry vortex]

I like the idea here, but the information on the hosts file is going to confuse people.. a) you don't need it unless you're working on a specific room that needs unique hosts. often because it's running multiple services.. Many (most) times you can just get by with the IP address, so its adding an extra step AND you have to do it every single time you start a new VM for a room.. it's not a specific need to use the OVPN connection.
b) more importantly, you understand what you meant by "remote host THM" and "local host VM" to be a singular hostname or FQDN.. However, the example you've given uses spaces which are a separator of multiple hostnames. "remote host THM" is actually 3 hosts... "remote" "host" and "THM".. same goes for "local host VM". if they tried to connect to "local host VM" as a singular string, it won't work.. that's 3 hosts "local" "host" and "THM" (which is now duplicated on your remote host entry).. I would revise this to make it much clearer, or I'd remove it altogether and make it its own optional portion with more clarity of how/why to use it and that it's helpful, but not required to make the OpenVPn connection

[real shale]

ok, im trying to figure out how to share the screenshot. I thought I already verified, sorry.

[tight seal]

leave it Microsoft - the links to compare the different versions of win 10 now only compare win 10 to 11 https://tryhackme.com/room/windowsfundamentals1xbx

[real shale]

@bronze vale I'm now verified

How do I share the screenshot insted of the link? I am on a Macbook.

@bronze vale Nevermind I guess I couldn't do it at first because I wasn't verified.

[bronze vale]

You haven't deployed the machine

[west chasm]

@real shale

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Dec 31, 2023, 1:36 AM

[real shale]

I have it open now

@bronze vale

@bronze vale After opening a new attackbox, I am still getting the same error prompt.

@torn citrus Can you assist me with this issue

[bronze vale]

no that is the attackbox

Did you read the article?

[real shale]

Are you saying that what I have open is not an attackbox?

[bronze vale]

AttackBox - Machine you use to Attack
Victim Machine - Machine you are Attacking

[real shale]

I scanned over it. I am about to read the whole thing

[ivory spruce]

Were you able to make it work?

[naive dust]

I have a question about my premium subscription, can i post it here publicly or someone from support will dm me?

[weary spindle]

Er, can you ask in here without revealing any account information?

[young dock]

hello there guys, I'm having trouble accessing the network in the Breaching Active Directory room using the atack box. Has someone had the same problem?

[young dock]

that ain't it chief

[distant citrus]

my post was just about reposting my image and not related to your query

[young dock]

No worries, I already solved it, thanks

[scenic torrent]

Gave +1 Rep to @distant citrus

[tight seal]

i like this thing - i thought it was going to be clickable at one point

[spice oxide]

Maybe its just the boxes I tried today, or my network, but today my connections have been flaky when connecting to the machines. Nothing else on my network seems affected. Its as though everything is fine for a minute and the next minute I am getting connection timeouts. On again off again -- is it just me?

[weary spindle]

Use the Thunderbird client, I think the task tells you this.

There is no internet on the machine for the E-mail, as it could be malicious, sandboxing rules apply, there is an option to open in Thunderbird.

[distant citrus]

nevermind i will just use writeups

another issue i have is when i try to access Talos Intel on my host machine i get blocked due to my VPN. For the most part of these questions i did answered questions just by looking at the .eml file

[exotic dove]

THM support email didn't answer for 4 days, I wanted to refund my subscribtuion as I am currently not using it but no one is answering

[weary spindle]

Due to AoC replies are 8-9 day(s) currently, and they don't work weekends, and probably won't be working tomorrow.

[exotic dove]

is the only way for a quick answer to get a quick refund is the email? no other faster ways?

[weary spindle]

Accounts and refunds can only be discussed via E-mail.

[exotic dove]

okay thank you for the help

[tired rain]

I cannot SSH into the virtual machine. It just hangs after the ssh command and times out?

┌──(parallels㉿kali-gnu-linux-2023)-[~]
└─$ ssh james@10.10.59.145
ssh: connect to host 10.10.59.145 port 22: Connection timed out

┌──(parallels㉿kali-gnu-linux-2023)-[~]
└─$ ssh james@10.10.102.108
Connection closed by 10.10.102.108 port 22

Server is pinging, can access the site, ssh connection is required for the room. Regenerated and changed openVPN server locations. Only one OpenVPN instance running. Any tips?

[naive dust]

yes, i have a premium subscription but can't access the AWS attack/defense content and the subscription says i can access all premium content
Why stay subscribed?
Access to all premium learning content
Get your own browser-based Kali Machine
Enroll in all learning paths
Private OpenVPN servers
Start machines faster

[weary spindle]

Aws path is an extra payment to access

[quaint pulsar]

No but thanks I'll leave it the way it is for now.

[scenic torrent]

Gave +1 Rep to @ivory spruce

[ivory spruce]

Is your subscription annual or monthly? If the former, so long as you send them an email within 7 days of your renewal, it will be refunded to you even if they respond to you at a later time.

[ivory spruce]

Are you connected to THM OpenVPN? If yes, can you try adding the switch -vv in your ssh command?

Also, what room is this box attached to?

[green basin]

just a compliment to the way the rooms are structured 👍

[naive dust]

Are ranks updated in Discord at the end of the month OR are they updated when you level up on THM?

I am no longer a harry wizard

[gleaming flume]

I believe they update once a day, but you can force it to update by reverifying with the bot

[naive dust]

Does THM offer, or plan to offer, a progress chart? Something to view how much time you've put in and where, on what days, what you've accomplished, etcetera....?

[bronze vale]

Why are you being rude?

[ivory spruce]

I'm not sure if this is already available in the Education or Business Plan, but you can add it in #feedback-and-ideas

[green basin]

Hey, I'm currently out of time on my web attack box and so i decided to try to use OpenVPN, I believe the connection is successful as you can see in the pictures but, as you can also see in the pictures my ssh command isn't working. I'm currently on this room https://tryhackme.com/room/linuxfundamentalspart2

If any additional info would help please let me know

I do have 2 tabs open in my terminal, in the first one I ran the command sudo openvpn <filename> to make the OpenVPN connection, then in my second tab is where I attempted to make the ssh connection

[mild goblet]

Please 🙏 someone help

I have been stuck in my Basic Pentesting Room question 3 which requires me to find the directories.

Issue is, the gobuster is given an error flag for -u http://...... Which was supposed to be a flag for URL.

Please what else can be used to parse a URL to the gobuster command...

Please help

[gilded sparrow]

How long do i have to be a member of this dicord to upload a picture?

[empty ember]

you gotta verify

[gritty skiff]

Hi there, I just completed 31 days streak but haven't received the 30 Day streak badge.

[gilded sparrow]

Already gave them my phone# what else do they wat from me?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 1, 2024, 10:27 AM

[green basin]

@gilded sparrow^

[empty ember]

just the usual things e.g. your soul xD just kidding, have a look at that article 😉 i think its just /verify

[gilded sparrow]

Thanks man
on it

[scenic torrent]

Gave +1 Rep to @empty ember

[tired rain]

Thanks I just waited an hour and it worked - other users seemed to be experiencing similar issues.

[scenic torrent]

Gave +1 Rep to @ivory spruce

[mild goblet]

Verify

Wow....that was super fast

Verified asap

My baby steps....I am a passionate learner from day ZERO

Okay....please can someone help me out with the -u flag error in am facing with gobuster pleasesss

[mild goblet]

This ....please

[wicked pilot]

Send full cmd u r using?

[exotic dove]

it's the latter but I did send them the email within the 7 days if I am not mistaken, thank you for the reply :)

[scenic torrent]

Gave +1 Rep to @ivory spruce

[ivory spruce]

If its monthly, I don't think you will be refunded as it was in their refund policy (https://help.tryhackme.com/en/articles/8282427-refund-policy). You might want to click on cancel on your subscription if you do not wish to continue with it.

[exotic dove]

Sad to hear :(

Thanks for the heads up

[ivory spruce]

Can you try adding -vv in your ssh command?

[surreal panther]

I am trying that

Debug 2 we sent a password packet
..
Connexion closed by 10.10. Port 22

My problem is that
Ssh
It stucks at system information as of Mon jan ..

I tried several times and i need help

[pliant orbit]

pls be more specific

[surreal panther]

Ok

I am successfully connected on vpn

The problem is with ssh

When i try to connect to THM@ip

It does require a password i write that

And it stuck at system information

I cant do anything else

[ivory spruce]

If it requires a password, did you supply one?

[surreal panther]

Yes

tryhackme

[ivory spruce]

Can you send a screenshot of where you are getting stuck?

[surreal panther]

Ok I will send it to you in private because i cant send on this server

[ivory spruce]

You need to verify your account to be able to post screenshots

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 1, 2024, 1:20 PM

[surreal panther]

Ok

[ivory spruce]

Follow the instructions above @surreal panther

[surreal panther]

Ok ill do

Check inbox

[surreal panther]

Done

[surreal panther]

Thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce

[surreal panther]

What do I need to do in this case

[fickle ivy]

What module are you working on currently?

in what room are you meeting the problem?

[surreal panther]

Room linux 3

I will try with different rooms

[pastel tinsel]

Seems like you're logged in

Try and write something

[fickle ivy]

try to write "ls" when you are logged in.

[surreal panther]

It doesnt write anything

[fickle ivy]

if it replies, then you are inide.

[pastel tinsel]

Ctrl+c

[fickle ivy]

or that ye.

[pastel tinsel]

Or ctrl+z and try to login again

[surreal panther]

Ctrl+D to log out

Everything else doesn't work for me

[fickle ivy]

let me try myself, i'll let you know by then.

[surreal panther]

Ok thanks

[scenic torrent]

Gave +1 Rep to @fickle ivy

[fickle ivy]

it works fine for me.

[surreal panther]

I think either my pc or my connection
Maybe that's my problem nothing to do with the THM

😢

[fickle ivy]

after deploying the machine by pressing the green button (and make sure that you have openvpn activated as well / or using attackbox ), and then ssh to tryhackme@IP (not the vpn IP, but the machine IP you got by pressing the green button. ) and then write the password in the text.

Afterwards, you just have to be patient and let the machine do its job basically.

when you're inside, you will be able to see "tryhackme@linux3" as your name.

[surreal panther]

I am unable to get "tryhackme@linux3"

I did everything else

Correctly

I think it's about my machine
I will try to close everything and keep only terminal

[wicked pilot]

Ok dm me if u r still facing the problem

[solemn crypt]

I got Bad gateway with I start File inclusion room
https://tryhackme.com/room/fileinc

[surreal panther]

Check inbox

[weary spindle]

You're using the wrong ip

[naive dust]

hi my open vpn is not working please help me

[wicked pilot]

Send more details

[naive dust]

it dose not conncet

[weary spindle]

Error?

Os?

Country?

[naive dust]

i am in sri lanka

os windows 10

[wicked pilot]

Why not ???🤣

Share any errors u r facing?

[naive dust]

error: connection failed to estabilsh within given time

[solemn crypt]

Actually I connect to correct ip but it need to to run server

[naive dust]

how can i fix it?

what server i need to connect?

?

[wicked pilot]

Dm me

[surreal panther]

Finally it did work

[surreal panther]

Thanks Tahir
And everyone who tried to help

[scenic torrent]

Gave +1 Rep to @wicked pilot

[wicked pilot]

So what was going wrong before?

[surreal panther]

I did nothing special after making sure 22 is open
I just was quitting and trying again

Wasting lots of times with ssh

Hope they can do something about it

[wicked pilot]

Sometimes sh** happens 😃

[surreal panther]

I could solve it on linux 2

But not on Linux 3

I don't know if I need to quit and redoit again and again until it works

[wicked pilot]

Well just do it tomorrow on attackbox....it would save your time and frustration

[tight seal]

anyone know if there is a way to fix a cert that i screwed up on and has a mispelling of my name?

[surreal panther]

It's only 1 hour i prefer to put it on a better room that doesn't have ssh access

[surreal panther]

Cert from where ?

[weary spindle]

You can't change the name after it's been generated.

[surreal panther]

I think you need to email their support

[weary spindle]

You'll need to leave it as it is, or use photoshop.

[tight seal]

ya thats what i thought - not a big deal

[surreal panther]

The ssh isn't working good
I wasted hours on it

In the end same problem

I just skip rooms ?

[weary spindle]

CTRL + C that.

sudo ip link set dev tun0 mtu 1200

Do that with your VPN active, and then re-try the SSH connection.

[surreal panther]

Ok thanks
I am trying

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Strange...

ip a | grep "tun" for me please.

You're logging in at least.

I can see that.

[weary spindle]

Yikes!

sudo killall openvpn -9

Then re-connect once

[surreal panther]

Almost there

Still blocked

[weary spindle]

Can you confirm you only have one tun?

[weary spindle]

Do the ip a command again please.

[weary spindle]

sudo killall openvpn -9 again please.

and wait 30 seconds.

Then ip a again please.

[surreal panther]

Ok

[weary spindle]

Ok, now try re-connecting.

[surreal panther]

Ok

[weary spindle]

CTRL and C

sudo ip link set dev tun0 mtu 1200 again for me please (closing the VPn will have reset it back to 1500)

[surreal panther]

Ok

[surreal panther]

It did work

[weary spindle]

There we go!

[surreal panther]

Thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Happy hacking

[young sierra]

https://tryhackme.com/room/ccpentesting

hay this one ehhh

[vale musk]

whats the recommended way to rdp into machines from the attackbox?

[frank cobalt]

I've been using 'remmina' which comes with the attackbox

[vale musk]

Ah, thanks, did not find that one

[scenic torrent]

Gave +1 Rep to @frank cobalt

[shy blaze]

Hello. I just get a message saying that my account is at risk of being cancelled because my credit card expired. It´s amazing to see that I already paid the full year but you can cancel my account. Any solution that is not to add a new credit card?

[gleaming flume]

For any payment/account related issues you would have to email support. [e-mail]

[tawdry vortex]

you can also use xfreerdp xfreerdp /dynamic-resolution +clipboard /cert:ignore /v:<TARGET_IP> /u:<USER> /p:<PASS>

[tawdry vortex]

It's a little wonky to get to it. You first have to go to <your profile icon> -> profile (or any other choice). Now, when you click on your profile icon, there is a choice of "view profile" that shows you some information. Not finer details like total time spent, but the days you did something and how many things you did.
You can use that URL ../p/<userid> to see anyone's profile

[gaunt valve]

Hey guys, im having trouble login into my account. Anybody else having the same issue as me? I did a password reset, cleared cache, cookies and used a different browser and I still get an error message saying that my login credentials are incorrect

[weary spindle]

Are you sure they're correct?

[gaunt valve]

Of course

Otherwise, I wouldnt have done the password reset in the first place

[weary spindle]

Well, I don't want to point it out. but that erroe message looks pretty specific.

And I didn't mention strictly just the password.

[gaunt valve]

If everything is correct then why do I keep on getting the message ?

[weary spindle]

..Because they're wrong? 🙃

[weary spindle]

Are you on the VPN?

[green basin]

yes

[weary spindle]

Can you do

ip a | grep "tun" please.

[green basin]

yes

but that should be in this picture i just sent right?

[weary spindle]

It will confirm or deny if you have multiple open.

Not deny, but let us know.

[bronze vale]

Looks like the mtu fix

[weary spindle]

Yeah

[bronze vale]

sudo ip link set dev tun0 mtu 1200

With the VPN running

[green basin]

TYTYTY

thanks @weary spindle @bronze vale

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

+rep @bronze vale

[scenic torrent]

Gave +1 Rep to @bronze vale

[green basin]

perfect

[fringe bridge]

Um, so I few days ago I had this problem in Room Linux Fundamental Part 3, Task 5, Question 4. The problem occurred to be that no matter how I ran ps aux or even ps aux | grep thm I can't find the flag AT ALL. Then I asked people in the discord server, and I somehow managed to pass this room (since the answer was shown in the video). Recently, I recommend this website to my friend, and he also stucked on the exact same question, facing exact same issue. This time we tried ps aux | grep -i thm the method I did to pass the room, but it failed. Since the problem involved more than myself, also I can't help him figure it out, I am thinking maybe something wrong happened to the virtual machine of that. Can someone look at it and please inform me if there is an issue for this problem.

[plush bay]

you were running the command on the right machine??? the target machine and not the attackbox??? right

[fringe bridge]

yes

both of us

after ssh tryhackme@machineip (getting in the target machine), then check ps aux

[tacit oyster]

Hi, i had a reoccurring payment on and I wanted to cancel and refund the amount since I haven’t had time for tryhackme. Is there a way I can refund the money?

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 2, 2024, 12:38 AM

[plush bay]

only way is by email this email address

[tacit oyster]

Thank you 🙂

I found a refund ticket via the website. Is it worth using that?

[plush bay]

from the chat bubble thingy??? yeah that should also work...

though would still recommend the email route for this

[tacit oyster]

Thank you!

[tawdry vortex]

typing them in? Copy/paste/autofill from password manager (the correct answer. smile)

[stone rain]

Why do some rooms require "joining" them? Why is that design necessary, technically? Are you supposed to "leave" the room when your done? Or do you get booted out eventually by some cleanup routine?

[ivory spruce]

I'm not certain on the joining part, but there are rooms that require or force you to leave the room (mostly networks) to free up resources.

[stone rain]

Thanks, @ivory spruce It makes sense for the rooms with networks.

[scenic torrent]

Gave +1 Rep to @ivory spruce

[wooden cipher]

Would it be possible to have my workspace affiliation removed? I was automatically placed into my old colleges one, but I want to start a new one for my new university.

[weary spindle]

Change your email to your new academic for your account.

[wooden cipher]

gotcha, thank you. and would I as a student be able to start a new workplace or would I need faculty to do so?

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

If its a new workspace you'll do it.

(Assuming there isn't anyone already at your uni on THM with their email)

[silent barn]

Does anyone know how to change your subscription from monthly to annually?

[ivory spruce]

You'll have to manually cancel your subscription and once it stops attempting to automatically renew, you can choose to subscribe annually.

[hallow sparrow]

Cannot create a room. I’m getting a 500 error.

[shy blaze]

Hello, I always have problems when I try to ssh in the tryhackme account when I deploy the virtual machine. ALWAYS asking me for the password and always failing...
A-L-W-A-Y-S. So far, my personal experience in Try Hack Me is really bad... I see no reasons to continue in this platform...

[weary spindle]

1. Not all rooms have tryhackme:tryhackme as SSH credentials.

Which room are you doing?

Are you on a VM, or the attackbox?

[shy blaze]

I'm in Network Services > Task 3

I think I´m in one that does not have the ssh...

[weary spindle]

Yeah. if it doesn't have SSH, you can't SSH in to it.

[shy blaze]

How do I know if the machine has ssh or not?

[wicked pilot]

If ssh commands are working then it's there 🤷

[weary spindle]

If it's there though, it doesn't mean it's going to be used.

[wicked pilot]

My bad 😔

[weary spindle]

You'll get the credentials in the task material.

or

You'll enumerate credentials in the room if it's a challenge room.

[shy blaze]

Sometimes I try to ssh and doesn´t work and after a lot of trial and error works...

[wicked pilot]

Can u describe more ?

[shy blaze]

For example, right now is asking me for the OS version, but this is what I get when I run enum4linux:
[E] Can't get OS info with smbclient

[+] Got OS info for 10.10.194.76 from srvinfo:
Cannot connect to server. Error was NT_STATUS_UNSUCCESSFUL

[weary spindle]

Is that IP correct?

works for me?

Are you in the attackbox or your own VM?

[shy blaze]

In some lessons (I don´t remember whichones), they ask me to enter in the tryhackme account. Sometimes I find myself trying all different machines, Kali or AttackWhatEver, using the diffenret IP I see, at the top in green and the IP provided in the area Active Machine Information, that is the same when I click the "i" in the deployed machine

[shy blaze]

How can I get the OS info when I only get error messages?

[robust isle]

Is anyone else having issues with AttackBox stability? Mine just randomly died

[weary spindle]

I'm trying to help you, but you keep ignoring my questions, which is rude.

[shy blaze]

I wrote that I've been using all the IPs I see in the website

[robust isle]

In basically all cases you have 2 machines: the attacker (the AttackBox or your own personal machine with the VPN running) and the target (that's the one that shows up under 'Active Machine Information'). If you're trying to get an OS version it's almost definitely asking you to run the scan from the AttackBox against the target box

[weary spindle]

Yeah, but one of the more important questions I asked was, where you're attacking from.

[shy blaze]

Kali, because after a lot of trial and error, is the best solution for me

I don´t know if kali here is with AttackBox or other thing

[rose cairn]

Hi there,
I am filling my resume and i would like to add my "Profile badge ID" in my resume which is created thanks to Word. How can I insert this badge in my Word resume ?

Thanks,
Regards

[weary spindle]

It won't be dynamic, but you could screenshot it and insert it as a png?

[robust isle]

I'd recommend directly downloading the statically-generated version to get it in the highest resolution possible

[weary spindle]

I'd suggest not doing it all, and all just inserting a link if the interviewer would like to check.

[rose cairn]

it is a solution which i thought about but i want to know if there's anotehr solution 😉

[rose cairn]

It was my second idea 🙂

[robust isle]

Fair suggestion, embedded images don't usually come off super professionally

re: the direct download, the static image HTML snippet contains the link to the PNG (it's an amazonaws.com link), that's what you should use if you really want to add the image

[rose cairn]

better to add an hypertext link i suppose

to redirect to my public profile

[robust isle]

I wouldn't bother making it a link, just the plain URL would be best since there's a very good chance it's going to be printed out and viewed on paper

Also since this is dragging on to less site-related discussion, this would probably be better discussed in #cyber-and-careers

[rose cairn]

thanks i move there 😉

[scenic torrent]

Gave +1 Rep to @robust isle

[hollow fossil]

is it me or is progress on rooms completed being reset every once in a while?

[shy blaze]

I use Kali. I don´t know if it´s using AttackBox or a VM. Your system can be confusing, because I see two different IPs for my deployed machine.

[robust isle]

You should have 2 completely different deployed machines, one will be Kali and give you a split-screen when you use the 'launch AttackBox' button, the other will usually not give you a GUI and be a range of target OSs

[weary spindle]

If you're using an OS you're hosting, you'll need to be in the VPN.

[weary spindle]

Atackbox isn't Kali.

There is a seperate web Kali box.

[robust isle]

OH this is running Ubuntu, my bad, I don't know why I assumed it was Kali

[shy blaze]

I always use the split-screen. I don´t host any other OS.

[shy blaze]

No worries

[main pebble]

hi i have probleme with my acount password

i ahev change my acount email and i cant access

[plush bay]

well the best we can do is point you towards the support email address

[main pebble]

ok thanks

[west chasm]

@main pebble

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 2, 2024, 4:25 PM

[dark plaza]

hi guys .. i just subscribed to thm but it wasn't activated

[plush bay]

see message with email above your message... send email there... wait up to 7 work days... good luck

[dark plaza]

ok cool thanks

[scenic torrent]

Gave +1 Rep to @plush bay

[tawdry vortex]

If you are doing split screen, then the machine on the right will be the AttackBox (i.e the box you are attacking from). This could literally be the "Attack Box" that you launched, or if you have a subscription, a THM Kali VM. Whenever something refers to an Attack Box, that's what it means.. That IP will be at the top of the page, and it will also show within the VM itself in the top right by the network activity.

Showing the dropdown of the 2 choices for subscribers.. if you are doing the free version, you can't pick Kali.

If a task has a deployable machine, you will it in the task module. .There may be more than one as you progress through. You will terminate the first one and move on to the next one if that's the case:

That machine will show at the top of the page also, and will actually hover there as you scroll down, whereas the Attack Box info won't.

So this case, my attacking host is 10.10.166.240 and my target is 10.10.22.255 (see both screen shots).
Not every room will require an attack box. Not every room will have a deployable machine.

[bright mulch]

Task 3 Practical Example of defesive security (Q What is the flag that you obtained by following along? So the IP address is from china the answer isnt china i dont quit understand

[shy blaze]

Thank you for the explanation @tawdry vortex also thanks to @robust isle and @weary spindle for your help.
Tomorrow I will continue and try to find what I'm doing wrong.

[scenic torrent]

Gave +1 Rep to @tawdry vortex

[wispy creek]

Can I make a writeup for new room Dodge or I have to wait for some time like 2 or 3 days?

[ebon storm]

im trying to connect to ovpn through kali but im getting this error

https://gyazo.com/a85ce7cb39bf7d74f67407b2ef6f2756

?

[gleaming flume]

Have you tried to change VPN servers?

[solar grotto]

Hi, i completed a side quest the 27/12 and i still dont have the badge, is that normal ?

[gleaming flume]

iirc the badge for that room works a little different as they are awarded manually by the staff in waves. Not sure when the last time they went through and awarded them was though

[night marsh]

i cant connect to openvpn even on the website, it says that servers are online but i am not connected and my ip is 0.0.0.0

[gleaming flume]

What is the output when you run openvpn?

[night marsh]

i dont run it through kali or anyhting like that

it is literally

the website

[gleaming flume]

?

You have to either run openvpn on your machine (VM or host) or use THM's browser based machine to connect to the network. If you are not running the VPN your access page probably just says 0.0.0.0 by default

[night marsh]

i use the websites attack box

[gleaming flume]

Then you don't need to worry about openvpn at all

[night marsh]

oh

[gleaming flume]

The attackbox is already on the network so no VPN is needed to access the machines

You are good to go

[gaunt walrus]

Hello! My AWS Path is giving me "undefined" instead of Access Key, Secret Access Key, and Default Console Password.

Any help would be appreciated

[green basin]

is there a darkmode

[weary spindle]

Soon™️

People use darkreader right now.

[median burrow]

Hello, the server crashed while performing a task, how can I get it back up?

[weary spindle]

Which server?

[median burrow]

here in this room

[median burrow]

https://tryhackme.com/room/windows10privesc?#

[spring dune]

I have the same issue

tried with "sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn", but no luck

[weary spindle]

Which server are you using?

[spring dune]

EU-Reglular-1-3

but the error from above I only get with 3

[weary spindle]

3 is broken.

[spring dune]

with 1 I got "ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)"

ah ok, good to know, then I will try 1 and 2 again maybe

[spring dune]

ok, looks like its something with the kali container in kasm, although I did the suggested changes to Docker Run Config Override for privileged and /dev/net/tun, it is not working, guess I need to investigate further

[ivory spruce]

You will have to terminate the target machine and start it again if it happens.

[median burrow]

yes, thank you, I solved the problem this way

[scenic torrent]

Gave +1 Rep to @ivory spruce

[spring dune]

thanks!

[gilded mirage]

Hello, by any chace is it possible to subscribe with other currencies than GBP ?

[gleaming flume]

I payed in USD just fine, I think it converts to your local currency, but don't quote me on that

[green basin]

thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[naive dust]

Hello,
I uploaded a VM but the RAM is 1GB and i need 2GB. What can I do?

[plush bay]

ask for enterance into creators lounge channel and hope you can get the resources bumped by tryhackme staff in there... or figure out how to lower the requirements for your vm

[naive dust]

what is the name of the channel?

[tight seal]

out of curiosity : whats the process for creating a room ? just make a vm box with xyz flaw and write up a lesson & quiz ?

[plush bay]

creators lounge....

[naive dust]

create an ova in vbox, upload the ova and then create a room. Then create tasks (i.e., questions) based on stuff existing in the VM

[plush bay]

make vulnerable vm on version of operating systems supported by aws and tryhackme... make ova file.. upload.... wait for it to convert... make tasks texts and questions... make a writeup... submit the room for review... wait

[tight seal]

TY

[scenic torrent]

Gave +1 Rep to @plush bay

[naive dust]

There is no such channel. Can you please help me to find it?

[gleaming flume]

You need to ask permission to access it as shadow has already said. It is not just open to everyone like most of the other channels here

[naive dust]

How can I ask and who?

[gleaming flume]

You'd need to talk a mod iirc, you can probably just ask one when you see them hanging around in #general or whatever.

[naive dust]

Thanks I will give a try. I asked in the general room

[vocal orchid]

I've been using Ubuntu for WSL2 and cloned John the Ripper from Github but I can't seem to access zip2john. I also can't type just "john" to use the tool, I have to use "john-the-ripper". Is there a room or guide that I can follow to get all this working correctly?

I would use the AttackBox but I can't import files into it, AFAIK.

[plush bay]

file names and path variable

[plush bay]

well there are a few ways to get files onto the attackbox.... one is copy and paste which should work just fine for normal hashes.... another is using python web server and wget.... yet another is ssh via scp or sftp

[digital jetty]

Hi everyone, I have a huge problem on the platform about a paiement that still being request even if I ended it, can anyone help me ?

[ivory spruce]

Are you referring to the autorenewal of payment?

[digital jetty]

Hi,

It’s been now 3 days since I delete the subscription, but I keep receive a paiement on my bank account. For once, I’m glad I do not have the money on my account

[ivory spruce]

Is your subscription monthly or annual? If its the latter, so long as you send an email that you wish to cancel your subscription within 7 days of the renewal, you will be refunded the amount even if THM Support replies to you at a later date. However, if it is monthly, it will no longer be refunded per THM Refund Policy.

[boreal imp]

Hello! For some reasons I can only connect to VPN using old OpenVPN config file for VIP server(I currently don't have active subscription), while I am unable to connect to the Regular server on freshly generated configs. Not sure if it's related but the old config for the VIP server was generated before changed username.

[weary spindle]

Are you a subscriber?

[boreal imp]

Like stated earlier I don't have valid subscription at the moment.

[weary spindle]

You shouldn't be able to to connect to the VPN for subsciber, the vpn have been changed, are you sure it's only the VIP?

[boreal imp]

I get adress from pool 10.11.X.X/16, THM access page seems not picking up the specified address I am getting from ones available to me.

[weary spindle]

That page can be bugged,

Can you send a screenshot of the VPN pack you're trying to use?

[boreal imp]

You mean screenshot of of the pack from webpage like that? When I try to connect to it, it fails to connect over and over again.

Console log

[weary spindle]

Eu reg 3 is broken.

[boreal imp]

Okay, tested Regular 1 seems connection managed to get established. About the old VIP config I have mentioned it was leading to server under IP 34.253.19.14.

[wicked pilot]

Why they don't have a dark mode on thm ??? Or are they doing something currently on that ....?

Dark mode needed

Light would kill me 😭

[glacial hound]

You can use a browser extension for now, but we are working on Darkmode 🙂

[wicked pilot]

I searched few extensions but doesn't seem trustworthy so .... Would b waiting from u guys

[glacial hound]

Dark reader should be fine

[frosty zealot]

Hi There,can anyone help me? I received a discount code,but when entering the code it displays that i should enter a valid discount code...

[digital jetty]

It was annual

[ivory spruce]

Please drop an email to THM Support and they will sort it out for you. Do take note of the ~8 to 9 working days response time though.

[frosty zealot]

Will do thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #25 - 307)

[weary spindle]

Where are you entering the code?

[frosty zealot]

received a swag voucher and at the checkout when i enter the code it displays the enter a valid discount code.

[noble cave]

Hi. I`m from Ukraine, but my account is british, how can i change it?

[gleaming flume]

Make sure all of your VPN's are turned off and then go to this link https://tryhackme.com/api/user/update-timezone. It will just redirect you to the dashboard, but it should change your account country based on your IP

If you are from Ukraine, but not physically there now, then you might be able to trick the API by running a VPN from Ukraine and then going to the link

[noble cave]

Yeeee it worked! Thank you. Nah, im in Ukraine now, but btw i never used any vpns on my study machine, so idk why it thought im british, but now everything`s fine, thx!

[scenic torrent]

Gave +1 Rep to @gleaming flume (current: #51 - 126)

[gleaming flume]

That's strange, but I'm glad you got it fixed now

[tight seal]

im in the usa and i find the eu vip vpn better than the east coast usa one *shrug

[naive quartz]

Has anyone ever purchase a subscription but it not activate on their account?

[tribal burrow]

try regenerate file ?

try change server and regenerate

or select new one and then select back

[weary spindle]

Can't change server for Wreath

[valid meteor]

Is there something wrong with the website?

Seems like I only have this issue on firefox.

[tribal burrow]

got any plugis actived that might block things

[valid meteor]

Had dark reader extension, but still have the same problem even after deactivating it.

Works fine when logged out, once logged in it gets scrambled for some reason.

[tribal burrow]

try to clear all cookies and so ?

[valid meteor]

Tried, doesn't work