site-support

[gleaming flume]

Well that room shows up as private for me as well so it's not an issue on your end. I can't check the others because I am not a sub. Idk if the making of them private was intentional or not, you would probably have to talk to the room creators to get answers about that.

[ivory spruce]

Can you share the links to these rooms? I remember toolsrus shouldn't be marked as private as there were posts or inquiries about those recently

[stone maple]

Hello i hope i get help here.
I tried to login in my account on an attackoxbrowser of wireshark because i needed the files for the tasks. It said false username or passwort. i tried 3 more times just to be sure but it wont work. Then i though hm whats wrong here because today in the morning not in the attack box the login worked. Thats why i logged out of my account and tried to login again. Same as in the Attackbox i cant login.
I remembered that i had 2 months ago an email to verify my acc so i got in with verifying my account and changed the passwort (however my "old" password worked there). Then i tried to login with the new passwort but still i cant login!?
Whats wrong?
The forgot password email doesnt work either so i think there could be something wrong with my email?
I really dont know what to do

[ivory spruce]

How are you trying to login to the Attackbox?

[stone maple]

@ivory spruce in the attackbox i opend firefox to login on tryhackme to download the needed files

[ivory spruce]

Got it. To confirm, are you a subscriber?

[stone maple]

yes

i tried to login over gmail automaticly but that created a new account. im very worried my acc is deleted now

[bronze vale]

Did you delete your account?

[stone maple]

ok update: i tried lgin with my username that works

but with my email it dont

[bronze vale]

Check that your email is correct 🙂

[stone maple]

changed it some days ago uff im sorry

[heady glacier]

Hi, is there a way to see when (date) you have completed a box? Can't seem to find it anywhere :/

[weary spindle]

iirc no.

[minor echo]

There seems to be a js code running to warn about deployed VMs expiring soon in the rooms but they're not getting updated if you extend the timer. Still giving a "machine expired" warning. No harm though, the machines keep working.

[dusky plover]

Hello, I have a question. Can I only use AttackBox as a VM or can I also use another application?

[valid inlet]

Hello, i am trying to connect openvpn using kali linux and im getting an error, anyone can help?
2024-01-15 08:47:46 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-01-15 08:47:46 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2024-01-15 08:47:46 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-01-15 08:47:46 library versions: OpenSSL 3.0.11 19 Sep 2023, LZO 2.10
2024-01-15 08:47:46 DCO version: N/A
2024-01-15 08:47:46 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-01-15 08:47:46 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-01-15 08:47:46 Cannot load inline certificate file
2024-01-15 08:47:46 Exiting due to fatal error
this is the error im getting

[pastel tinsel]

Please verify yourself to send a picture of the issues

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 15, 2024, 1:57 PM

[pastel tinsel]

what vpn server are you using (the one shown when downloading the config?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 15, 2024, 1:58 PM

[pastel tinsel]

bruh, discord bugging

[valid inlet]

Europe 3

[pastel tinsel]

can you try a different europe server?

[languid pier]

Attack box on its own you can use but you can also set up a VM and connect it to thm using openvpn

[west chasm]

Connecting to OpenVPN on Windows

Article Link

https://help.tryhackme.com/en/articles/6496034-connecting-to-openvpn-on-windows

Jan 15, 2024, 1:59 PM

[valid inlet]

okk

Well that was easy @pastel tinsel thanks

[scenic torrent]

Gave +1 Rep to @pastel tinsel (current: #7 - 782)

[pastel tinsel]

you're welcome

looks to be europe 3 not making the config properly

[valid inlet]

First time i try switching server but didn't let me generate, now all good thanks

[pastel tinsel]

has been reported to staff^

[valid inlet]

Okk thanks

[pastel tinsel]

you're welcome

[zinc steppe]

hello bro's

[weary spindle]

Hello sister

[green wedge]

Hi, trying to do labs in THM. The output is not coming as expected on attachbox

Doing Jr Pentester path, in the content discovery when I do curl on machine IP, the flag doesnt come up

Can anyone help?

[weary spindle]

Are you a free user?

[green wedge]

No

Just got premium yesterday

[weary spindle]

Can you verify and take a screenshot please

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 15, 2024, 4:52 PM

[weary spindle]

Now you can send pictures of the cli

[green wedge]

This is from content discovery task (headers) I am supposed to be seeing X-flag header

[weary spindle]

Wrong ip.

You're using the attackbox one.

You need to use the target 🙂

[green wedge]

So in the exercise it mentioned http://MACHINE_IP -v

[weary spindle]

You need to press the green start machine button

[green wedge]

That is what I am doing. It shows green address on the top

[weary spindle]

No,

This buttin here?

[green wedge]

Ahh got it. So sorry. picked it up after long

[weary spindle]

And IP will appear here, and the machine_ip will change to that

[green wedge]

Thank you for your help

[weary spindle]

Don't worry about it. 🙂

[rare ferry]

Hello all, I'm having difficulty understanding the difference between the Active Machine IP being displayed when you "Start machine" versus the AttackBox IP. I do understand these are two separate clients, but which of the two IP addresses am I targeting to complete the room challenge. I can open up Terminal in the activated Attackbox session, but do I then target the Attackbox IP or the "Active Machine Information" IP. These two IP addresses are always different.

I assume if I were to use OpenVPN access, instead of the AttackBox, the only option I would have is the "Active Machine" listed once you start it.

It is a bit confusing trying to complete Network Services 2 Task 3, since attempting to enumerate using Nmap on the Active Machine IP, results in an incorrect answer, vs using Nmap on the IP address of the AttackBox.

Any guidance would be appreciated. Thanks.

[weary spindle]

If the IP's were the same, you'd have IP conflicts when trying to do stuff.

They are two different IP's as effectively, they're two different computers.

Using the nmap on The active information IP VS the Attackbox will give different results as there is different services running on both.

Evectively if you use a VM, you're substituting the Attackbox IP (ENS5) with the tun0 the IP the VPN gives you, to communicate with the THM machines.

[rare ferry]

Thanks for the input Scrubz, so which do I target to complete the room challenge?

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1842)

[weary spindle]

The active information.

No problem, happy hacking.

[rare ferry]

Thanks for the confirmation

[languid ravine]

I am unable to download the ovpn config file for the room "Wreath". It downloads an empty file (0 B). Network is running, I have tried regenerating multiple times. All other network configuration files work fine. Anyone know how to fix this?

[humble merlin]

I'm having the same problem right now.

I think it might be a site issue.

[gleaming flume]

Try this #site-support message

[humble merlin]

Trying it rn

[humble merlin]

No luck. It's still just giving me an empty configuration file.

[kind birch]

I have a big problem with the room AD enumerating AD when I launch the room when I make an ip a I have the interface breachad and not enumad anyone to help me?

[marble breach]

:hammer: ayushmishra174k#0 has been banned.

[plucky prawn]

Different VPN file, imo

[agile jackal]

Not getting a stable connection with Target

Even ping is not working

[wintry light]

I have only used AttackBox for 30 minutes today but when trying to open it for another room it says I can only use it for 1 hour a day and won't let me open it again

[earnest beacon]

Hello 🙂 I have problem with "Breachingad" Network vpn connection. When i'am download *-breachingad.ovpn, this file is empty. Am I doing something wrong ?

[untold lake]

Hey, I'm trying to set up 2FA and it just gives me an error every time i try to load the QR code in the site.

Also is there a way to change the country that shows up on my profile as its incorrect?

[polar nebula]

I am connected to OpenVPN but when i try to ping to the machine ip i get nothing same goes for ssh what can i do to connect to machine?

[weary spindle]

Which machine?

[eager fulcrum]

It's one deployment a day, up to a maximum of one hour. Once it's terminated, you have to wait again.
I recommend creating your own Kali VM and using OpenVPN

[polar nebula]

Nmap

[polar nebula]

I did but I am unable to ssh to nmap active machine

[eager fulcrum]

That answer was for someone else.

You probably shouldn't be SSHing either unless you were told to.

The instructions tell you to nmap the machine, right?

Not ping or SSH.
For most machines on tryhackme, you will not be given access. You have to hack your way in.

[polar nebula]

Yes but can't I use nmap from my own PC?

[eager fulcrum]

Yes you can.

With OpenVPN, if you are connected correctly.

[polar nebula]

Yes I am connected to open vpn

[eager fulcrum]

Can you access http://10.10.10.10/ in your browser?

[polar nebula]

I am unable to access

[eager fulcrum]

That means you are not connected to the VPN

[polar nebula]

Wait let me try in my other pc

I am trying this through wsl so that might have brought problems

[eager fulcrum]

Yeah that won't work well.

WSL does networking weirdly especially with iptables

[polar nebula]

But why does it shows connected in OpenVPN access details?

Now I can ping to 10.10.10.10 but I am unable to open 10.10.10.10 in my browser

[eager fulcrum]

That's often wrong.

[eager fulcrum]

Think about how WSL works and how it's seperate from Windows

[polar nebula]

Well for ssh it says that host 10.10.xx.yy port 22: connection time out

[polar nebula]

Currently I am using Kali not in wsl

[eager fulcrum]

Why are you trying to SSH?

[polar nebula]

It says to deploy the VM so

[eager fulcrum]

That's only clicking deploy - it does not say to SSH in

[polar nebula]

okay i thought that it told to ssh

but still why am i unable to access 10.10.10.10 in my browser..

i can ping but i cannot access 10.10.10.10 in my browser

[untold lake]

Bumping

[weary spindle]

Can you try a different machine/network?

[untold lake]

I tried to open on my phone as well although I didn’t try to turn off the vpn let me try that

Nvm even with out the vpn and On my cell network it gives the same error

Anything else I should try?

Different browser didn’t work as well

[languid pier]

Go into your settings and go to connection

It should show if it’s connected

If it’s not connected you use the sudo openvpn file.ovpn

Make sure to cd where ever your ovpn file is too

[ivory spruce]

Or at least specify the absolute path in your openvpn command.

[languid pier]

That too

Either one

[smoky plank]

Hi friends

I’m new to thm

How you doing

[kind birch]

Hey , always with the same issue, when i launch attackbox enum AD I cant see enumad interface when i run ip a and i don’t know why , did i forget to do something to clear DNS config when i ended the previous room Breaching AD ?

[ivory spruce]

Suggest to post this in the #enumerating-ad channel to get more traction.

[ivory spruce]

Welcome to the platform!

[obsidian orchid]

hi, is the tryhackme's api public. I wanted to create a profile analyser project?

can I get documentation of that api?

[tight seal]

all i know of it is -> https://help.tryhackme.com/en/articles/6498330-enterprise-api

[bronze vale]

That is restricted to educational and business use only.
It requires you to have an API token

[bronze vale]

We do not provide external documentation for the TryHackMe API because it is intended to be used by TryHackMe services and employees 🙂

[untold lake]

i tried everything any1 has any idea on how to fix the 2fa setup on the site?

[weary spindle]

May need to seek help from support.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 16, 2024, 6:29 PM

[untold lake]

ok ty

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1848)

[dusty rivet]

Hi, I've opened a ticket on TryHackMe twice, without success. The problem is in the LinuxFundamentals2, task 2, deploying the SSH. The site tells you to type in "tryhackme" (without quotes) as the password, but everytime I try this, it fails and tells me to try again. I have opened a new ticket but it has yet to be resolved. I am here to find out if anyone has suggestions for me? Thx.

[gleaming flume]

Are you making sure to set the username for the login as well? ssh tryhackme@machine_ip

[dusty rivet]

Hi @gleaming flume , yes, I am!

[gleaming flume]

Are you on the attackbox or your own VM?

[dusty rivet]

@gleaming flume On the Attackbox.
It keeps telling me: "Permission denied, please try again." Until it finally says: "Permission denied (publickey,password)."
It almost feels as if the password really isn't "tryhackme" like the instructions say.

[gleaming flume]

The password is tryhackme for sure, what IP are you trying to SSH into though?

[dusty rivet]

The machine gives me an IP address of 10.10.244.219

I'm still logged into the machine too, if that helps

[gleaming flume]

And is that the attackbox IP or the victim IP? You should be hitting the "Start machine" button on task 2 and then using the IP on the red banner like in this screenshot

[dusty rivet]

Ok. Let me shutdown the virtual machine and start over and make sure I'm doing this like you say.

[gleaming flume]

I mean you don't have to do that since you need the attackbox as well, but alright

[dusty rivet]

So, do I need to "Start the Machine" (green button) before I do the "Attackbox" (in blue) at the top of the screen?

Okay, nevermind, it tells me directly to go to "Attackthebox" to start it. I think I did that before, but I'm doing it over

[gleaming flume]

Yeah you need to start both but it doesn't matter the order in which you start them

[dusty rivet]

Okay. It's booting up.

New machine, new IP address (10.10.180.134). I wish I could send a screenshot, but it's saying the same thing. The "ssh tryhackme@10.10.180.134" works and then asks me if I want to continue (yes/no), I type "yes" then it asks me the password.
One letter at a time (making sure no quotations or caps lock are on), I type tryhackme and hit "enter" and it tells me "permission denied, please try again."

[gleaming flume]

You can send screenshots if you verify

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 16, 2024, 9:46 PM

[gleaming flume]

Could you send a screenshot of your entire browser? Both the attackbox side and the tasks side (scrolled all the up to top on the task side would be nice)?

[dusty rivet]

Sure, let me go ahead and get my token added here

@gleaming flume

[gleaming flume]

You are trying to ssh into your own attackbox IP not the IP of a victim machine. You still need to hit the green "start Machine" button while keeping your attackbox open, this "start machine" button should give you an IP on a red and white banner on the top of the task page that you will ssh into/

[dusty rivet]

lol, alright. Well, the IP address on the red banner is different so that's likely the issue.
I feel stupid, but I can't believe that I'm the first person to screw this up

[gleaming flume]

Nah man, people confuse their own IP and the victim IP all the time don't worry about it

[dusty rivet]

Well, thanks! I will go ahead and respond to the ticket on the site and let them know it has been resolved. 😆

[plush bay]

@naive dust sooo you would use openvpn on your kali machine to connect to tryhackme to be able to attack all the target machines

[west chasm]

OpenVPN: General troubleshooting

Article Link

https://help.tryhackme.com/en/articles/6496029-openvpn-general-troubleshooting

Jan 16, 2024, 10:54 PM

[plush bay]

sorry ignore that bot message link as that is troubleshooting info....

Cries in the room link not being a command
https://tryhackme.com/room/openvpn @naive dust here is a room that will tell you how to connect

[naive dust]

but what is the reason of this error in metasploit!

[plush bay]

it can't create a meterpreter shell as the target machine does not have access to your computer as the ip you are sending the shell to is a local ip only accessable on your wifi and not on the tryhackme network

so you need to connect to the vpn and then set the lhost ip to your tun0 ip

[naive dust]

I will try, I will come back, thx.

[naive dust]

@plush bay

[plush bay]

which vpn server did you choose????

[naive dust]

I didnt chose any one

[plush bay]

https://tryhackme.com/access

what server does it say you have on there

[plush bay]

ah eu regular 3.... try changing that to eu regular 1 or 2

[naive dust]

I think it work @plush bay

[plush bay]

yuups it is working now

if you see the initialization sequence complete a few lines above the bottom it is working

[naive dust]

@plush bayOhh, he didnt work

[plush bay]

when you hit ctrl + c it will kill the vpn

your rhosts is wrong in those pictures

guess you figured that out

the rhosts should be the target machine ip

[plush bay]

what are you trying to do???

[naive dust]

Its not wrong

[naive dust]

I want to show you the windows IP!

[plush bay]

aaah this is not tryhackme related hacking at all....

can't really help then

[naive dust]

Is there a room here where I can talk about this? I'm really stuck! I have applied all the steps!

[plush bay]

maybe infosec general/ #infosec-general but that is assuming there will be talks about how to hack your local windows machines which shadow doubts in this case

[gloomy elk]

I unsure where to ask this but (hit enter by accident) I want to verify my account but think it's still linked to my old discord because the bot isn't responding correctly. The website says to ping @bronze vale though for assistance?

[gleaming flume]

Yeah I think a mod would have to unlink your old account for you. I would just ask one when you see them around in general or whatever or maybe one will see this message eventually and help you out

[naive dust]

Dear Team @west chasm ,

I hope this message finds you well. I wanted to bring to your attention an issue I've encountered while using TryHackMe with the new 5G internet in India.

Upon connecting to TryHackMe using the OpenVPN configuration file over 5G, I'm experiencing difficulties accessing the machines. However, when I switch back to a 4G connection, everything works seamlessly.

I've ruled out any issues with the OpenVPN configuration file, as it works perfectly on 4G. It seems to be specific to the 5G connection.

I wanted to reach out to see if there are any known compatibility issues with TryHackMe and 5G networks or if there are any specific configurations or adjustments that need to be made to ensure a stable connection over 5G.

Your assistance in resolving this matter is greatly appreciated. If there are any troubleshooting steps or additional information you require from my end, please don't hesitate to let me know.

Thank you for your time and support.

Best regards,

[ivory spruce]

Have you checked that this is not an ISP-specific issue? I mean have you checked it with other 5G providers?

[agile jackal]

I get the same issue with jio fider

[slate hedge]

Hi! How can I change my Discord Token and what is it used for?

[weary spindle]

You don't change it, you use it to link your thm account with discord.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 17, 2024, 9:19 AM

[slate hedge]

And how can I know if I've already linked them?

[weary spindle]

You'll have a role colour.

[whole dove]

Hello there, i have encountered the problem with the cipher not set when trying to connect to tryhackme via openvpn

The logs are next:
2024-01-18 10:48:10 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-01-18 10:48:10 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.

I am using OpenVPN 2.6.3

Already tried to add lines like:
cipher AES-256-CBC

but it was no solution

[slate hedge]

Ok thats' right, I've just verified my account. This token can be only validate one time? My fear is because I leaked it in a youtube video...

[weary spindle]

I hope you deleted the video.

But I doubt anyone will use it.

[weary spindle]

Which country and vpn.

?*

[whole dove]

Serbia, EU-Regular-3

[weary spindle]

Try eu reg 1 or 2.

[whole dove]

alright, i changed the server to regular 1 and it works

thanks

[slate hedge]

Thank you for helping me. It's not mine, so I'm talking with the owner of the video, and it's exposed for months. I know probably anyone will use it, but it could be changed?

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1849)

[nimble trench]

Can someone support me with connecting to the rooms?

It cannot be connect in anyway

[bronze vale]

Hi can you DM me a screenshot of the bot's response?

[gloomy elk]

Thank you responding, have tried sending DM but requires friend status

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1118)

[carmine grove]

GM. Can someone tell me why I lost all progress in the Burp Suite: The Basics room? Yesterday the room started showing it had not been started even though I completed it a couple of weeks ago.

[ivory spruce]

The Burp Suite Module was recently refreshed (sometime in Q4 2023 if I'm not mistaken) to align with the current version.

[carmine grove]

OK. Thanks.

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #22 - 334)

[orchid wharf]

I am attempting to go through Wreath. When I attempt to download the Wreath network VPN its empty. Can anyone point me in the right direction?

[ivory spruce]

#site-support message

[orchid wharf]

That didn't work, any other suggestions?

[ivory spruce]

I don't have any other ideas although it did work for others.

[orchid wharf]

I am wondering if its because it won't let me leave the room. Even when I attempt to leave the room and go back into it, it says I still have 8 days of access and says I am still connected to the room @west chasm any guidance?

[ivory spruce]

If you can't leave the room, you won't be assigned to a different subnet, which is the point of it.

Also, the one you are pinging is the bot and will not respond.

[gleaming flume]

Hmm, never seen someone not be able to leave a room before, are you sure you are hitting the "Leave" button and not just leaving the room page by closing the window or whatever

[orchid wharf]

@gleaming flume Yes.

I even look at the rooms that I have joined and its not listed there.

[gleaming flume]

Not sure then, never seen anyone have that issue so idk what to go off of here. Might have to talk to support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 17, 2024, 3:37 PM

[nimble trench]

guys I setup my Kali Machine on VMWare and I still not be able to connect to the room.

it kept replying with timeout

[tight seal]

your in the vpn ?

[nimble trench]

yes

I use OpenVPN

[tight seal]

and a ip a shows a tun0 nic ?

[nimble trench]

and I connectec to the VPN. The IP showed, but still unable to connect to the room in anyway

wait a second

[tight seal]

on kali i just open a term and do a openvpn thm.ovpn

[nimble trench]

there is a green IP showing next to my profile

it means that I'm connected to it right?

[tight seal]

in theory - THM thinks your connected , but your box may not know it's connected

[nimble trench]

OpenVPN sucks 🙂

or maybe I'm suck :))

[tight seal]

you should be able to ping 10.10.10.10 and your route should look similar to

10.10.0.0 10.14.0.1 255.255.0.0 UG 1000 0 0 tun0 10.14.0.0 0.0.0.0 255.255.128.0 U 0 0 0 tun0

you may not be on the 14 network (thats eu-1-vip i think)

[nimble trench]

febert can you stay for a while

you seem to have a deep dive into the problem

eu-1-vip?

[tight seal]

unless you want to hire me to start work in the next 15 mins - im not going anywhere lol

[nimble trench]

=))))))))))))))))))))))))))) damn

[grand perch]

I've been on the OpenVPN Support mailing list since like 2006.
99% of issues people ask for help with on there aren't OpenVPN issues at all, they're user network/route configurations.

I haven't been active on it in a few years.

[tight seal]

acctully - eu-2

[nimble trench]

So new OpenVPN really have some problems with the connect

OpenVPN Connect for client doesn't receive the file from THM

[grand perch]

If you are seeing that you are connected, but you are not able to reach systems over the VPN.
My guess would be that the routes for the VPN are missing.
If you don't sudo when you run openvpn, it cannot set routes for you, I see that pretty often.

[nimble trench]

which is weird

i sudoed

[grand perch]

Show if you will ip -c route

[nimble trench]

I mean, is it possible to use my Windows to connect through ovpn to thm? :))

I know it is not recommended but viable right?

[grand perch]

You want to run your tooling from in Windows?

[nimble trench]

=)))) no

[grand perch]

Then its a bad idea and will add layers of complexity on the networking side of things.

But all things are possible.

[nimble trench]

on THM page it said that if i can access 10.10.10.10 then I am connected to the network

[grand perch]

It just becomes a pivot you must do, like when you're attacking wreath network.

[tight seal]

acctully - WSL2 kali is acctully pretty good

[grand perch]

Yes, but that's still not running it in Windows, that's running it in docker 😛
(sort of)

[nimble trench]

bruh chippi cat keeps running in my head 💀

[weary spindle]

Networking is poor.

And everybody I've helped with all had the same issue with WSL and networking

[tight seal]

ya - windows has a death grip on the hardware i/o

[nimble trench]

is there a way to post an image here? =)))))))))))))))))))))

[grand perch]

WSL2 creates its own subnet, and then you must manage that subnet routing and network abstraction at the Windows layer.

[nimble trench]

which is quite complicating

[grand perch]

Can be if it isn't your full time job.
Which is why I suggest not trying to run the VPN from any system other than the one you plan to run your attack tools from.

[tight seal]

ive never had issues with kali and the opvn file from THM

[grand perch]

Now if you're just trying to obfuscate in general your connection.
You can absolutely run Psiphon, or Mullvad, or Proton, at the Windows layer, and the THM OpenVPN from you virtual system.

Tunnel in a tunnel isn't great, but it functions.

[nimble trench]

it keeps saying refused to connect 🙂

any ideas why

[tight seal]

try a new opvn file , switch zones

[nimble trench]

i switched to EU vip 2 as you suggested, which i have never used before

and this is what happened when I connect to my room, not to the network

[tight seal]

i think you need subscription to use the vips

[grand perch]

That's because, I imagine, you're running ovpn from inside your WSL2 Kali, NOT from Windows.

[nimble trench]

I subscribed

[tight seal]

no kali vm full

[grand perch]

Oh sorry, I thought that was still connected to WSL2 kali 😛

[nimble trench]

febert do you mind if I dm you personally?

[tight seal]

no i only said it was doable frpm wsl

[grand perch]

Yeah I run it from an Oracle VM, makes life super simple ,and I can use snapshots to manage rollback states.

[tight seal]

do you have a valid ip in tun0 and do you have valid routing ?

[nimble trench]

uhmmm...where can I check that? 🙂

[tight seal]

terminal

ip a

and route

[nimble trench]

I'm on windows now sorry 😦

VMWare is kinda slow so trying out on Win first

[tight seal]

ok then from cmd ipconfig /all and route print

[nimble trench]

ah shiet

[tight seal]

<--slow typing - cat has taken left hand offline

[nimble trench]

in OpenVPN win tun it said Media disconnected 🙂

meanwhile THM still recognized me as connected =)))

damn, this is weird

[tight seal]

refresh THM (hold shift hit f5)

[bronze vale]

Are you using OpenVPN connect @nimble trench

[west chasm]

Connecting to OpenVPN on Windows

Article Link

https://help.tryhackme.com/en/articles/6496034-connecting-to-openvpn-on-windows

Jan 17, 2024, 4:16 PM

[nimble trench]

no, it's OpenVPN GUI

[bronze vale]

Download it from the place on the article^

[nimble trench]

OpenVPN Connect does not accept files from THM. It keeps saying Unknown/unsupported

before I'm able to connect to THM through ovpn easily

then suddenly one day ovpn said unsupported

[tight seal]

? they are just simple text files - windows can be weird - could be a bad file - you can open in noptepad and see if it looks broken (but you would need to know what a good file looks lilke)

[nimble trench]

I will send you the log and the noti

unknown/unsupported options (pull)

this never happened to me in the past

it just happens about 1-2 months from now

when I try to delete the pull flag then it just suspended and not working anymore

[limpid nacelle]

@bronze vale

[bronze vale]

What country are you from

OpenVPN is blocked in Russia

We can’t help you connect unfortunately, however we do provide the AttackBox

[limpid nacelle]

But it had been working for a year before, it all started approximately after the new year

[west chasm]

The AttackBox explained

Article Link

https://help.tryhackme.com/en/articles/6721845-the-attackbox-explained

Jan 17, 2024, 4:26 PM

[nimble trench]

@tight seal it looks like it is because of the new version does not support those options 🙂

[limpid nacelle]

If openvpn was blocked, then why do i remain connected and THM website claims that im connected, providing me with the thm IP?

[tight seal]

they can allow the connection but block traffic

[limpid nacelle]

[tight seal]

china does the same thing - if its encrypted its blocked

[tight seal]

@bronze vale is a THM employee and he said to d/l from the link - he knows much more than i do so i would listen to him

[nimble trench]

it was from the link bruh 😦

[limpid nacelle]

okay if my country blocks all vpn

i think i know what to do

https://tenor.com/view/typing-computer-twitter-gif-12385391

[tight seal]

A yes their may be a way around it , B i wouldnt talk about that here as it would get flaged by admins (illegal activity) - as stated THM's official stance is to use the attack box

good luck

[limpid nacelle]

thanks man

[craggy python]

Hi guys, I need help with the question Using NVD, how many CVEs were published in July 2021? in vulnerabilities 101

I followed the search instructions but not one answer I put seems correct

[radiant dagger]

The 'Download My Configuration File' circle of doom is getting annoying. How many times does one have to leave a room and rejoin/regenerate.

[wintry hemlock]

i told you how to solve it BTW

[ivory spruce]

#room-help message

[wintry hemlock]

i can't update my Biography is think it's maybe a bug
@zealous yoke

[limpid nacelle]

bro my country blocks all vpns, even tor is blocked btw

🤦‍♀️ believe me i've tried every vpn out there

[wintry hemlock]

my country too

[proper rapids]

Any ideas how i can fix my compromised account?

On a nerd way.

Not just: contact support.

[wintry hemlock]

windscribe

[limpid nacelle]

blocked

the only vpns that had been working for me before new year and new sanctions and blocks were ivacy vpn, x vpn and psiphon

they dont work now, too

[bronze vale]

Please don’t discuss bypassing country restrictions here

[bronze vale]

What account

[proper rapids]

This. 💀

[bronze vale]

Discord or tryhackme?

[proper rapids]

Discord.

Im trying not be like the rest of the world but use linux.

[bronze vale]

I don’t know what you expect us to do 🙂

[proper rapids]

Parrot os specified.

[proper rapids]

Ideas. But i see. wrong server.

[wintry hemlock]

@bronze vale
can you help me, when i update Biography
dosn't update.

[bronze vale]

Contact support

Use 2FA, don’t click on links

[west chasm]

@wintry hemlock

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 17, 2024, 6:19 PM

[void obsidian]

the kali linux and attack box lagginh

[modest kindle]

so escape it

[limpid nacelle]

thanks champ

[scenic torrent]

Gave +1 Rep to @modest kindle (current: #1967 - 1)

[undone cypress]

Hi all, I'm working on a room that requires me to connect to a network using openVPN. I've followed the windows installation guide but can't connect. Is this a common problem? How do I resolve this

i'm seeing a text in the OpenVPN log that says a bad cipher for data channel is being used

[old mesa]

The instance of the MISP Room seems a bit broken

it just keeps spawning login prompts and makes navigating the site very tedious

[limpid nacelle]

nah it seems fine

[undone cypress]

sorted. I had openVPN connect installed when i needed to be using openVPN GUI

[barren wing]

Why can't I join the Wreath room? It just redirects me to https://tryhackme.com/r/rooms everytime I click on Join Room

[weary spindle]

Are you a sub and/or have a steak of > 7?

[barren wing]

no

[weary spindle]

Then you can't join wreath.

You need to be a sub, or have a streak of 7 or more if you're a free user.

[barren wing]

hm okay, I might consider subscribing, some of the rooms are really fun

[green basin]

is this just an open vpn thing or is it the machine launching on thm, for context im doing this room https://tryhackme.com/room/owaspjuiceshop and every machine i start has some issues with connection, it's stumped my progression as im unable to do basic things on the site

[crystal marlin]

What VPN server are you using?

[green basin]

us west

[crystal marlin]

Can you also show a screenshot of the output you received when connecting? So all the way above these "Network is unreachable" outputs?

[green basin]

uhh sure i'll look theres a lot.

[green basin]

when connecting to openvpn yeah?

[crystal marlin]

Yes

[crystal marlin]

What's the output of ip a?

[crystal marlin]

Do you also get these Network is unreachable errors when trying to visit http://10.10.10.10 ?

[crystal marlin]

Ye but I meant if you also get these openvpn output errors in your terminal when visiting that site?

[green basin]

nah

[crystal marlin]

Also, do you have any personal VPN running on your host machine?

[green basin]

nope

[crystal marlin]

Then I would try sudo ip link set dev tun0 mtu 1200 in a new terminal while being already connected to the VPN and see if anything changed/resolved it

[green basin]

alr but jsyk im p sure ive ran that command in the past not for this problem but

[crystal marlin]

Every restart of the VPN connection will set the mtu to the default value again

Unless you change your openvpn file that you downloaded

[green basin]

ah that worked

its been odd

works for like a bit and then doesnt work anymore

then i start a new machine and same thing

idk

but its working now we'll see what happens

[crystal marlin]

I guess it's because you might have restarted the VPN connection, which changes the mtu back to 1500 instead of 1200

[green basin]

thanks @crystal marlin

[scenic torrent]

Gave +1 Rep to @crystal marlin (current: #3 - 1809)

[green basin]

im not sure what that means but i'll save that command somewhere 😂

[noble star]

To all those having trouble connecting through openvpn windows
I tried the 15th aug2023 edition and worked and connected like a charm!
https://openvpn.net/community-downloads/

[jovial dirge]

I'm having an interesting experience in the "Linux Fundamentals 1" room.
Task4, question 2 asks: "What is the username of who you're logged in as on your deployed Linux machine?"
Accpeted Answer: "tryhackme" is the username from the photos, not from my deployed Linux machine.

I've a screenshot, but i'm unable to share it here.

In the same room, Task 5 Question 1 asks: "O:n the Linux machine that you deploy, how many folders are there?"
Accepted Answer: "4", which is the number shown in the example photos, not from my deployed Linux machine, which is 10.

Task 5 Question 2 asks: "Which directory contains a file?"
Accepted Answer: I haven't cracked this yet. The hint is "We've discussed about a certain command that can be used to list contents of directories".
Regardless of which directories I've discovered text files in on my Linux machine, none of them are accepted.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 18, 2024, 7:11 AM

[ivory spruce]

@jovial dirge You'll need to follow the instructions described here to post screenshots.

[polar fossil]

Two days ago, there was a problem with the VPN connection.
I can't figure out what this is about.
He writes that the "Initialization Sequence is Completed", but the IP address is not pinged.
I tried different configuration files just in case. Nothing helped.
Is it just me or is someone else suffering?
I connect via NAT, because the Internet is via a usb modem. I haven't seen any problems before.

[ivory spruce]

What machine or box are you trying to send a ping request to?

[polar fossil]

Room - learncyberin25days

I know that not all machines skip "icmp" requests, but nmap also ignores the simplest flags.

[stiff ginkgo]

anyone get the issue on occasion where a rooms progress just resets? sometimes a single question, sometimes a whole room on a path

[weary spindle]

You're in the wrong machine.

[weary spindle]

At the bottom, where it says "linuxfund"

Click that tab (attackbox)

[jovial dirge]

Me over here like, "Yep, checked everything I could think of, and looked in the known issues channel - none of this is mentioned. Look at all these issues I found!"
🤦‍♂️ 🤦‍♂️ 🤦‍♂️
Thank you, @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1856)

[glacial hound]

Hey, would you mind sharing some examples (with screenshots), please? Feel free to DM

[opal forum]

I need help with owasp juice shop task 3.I successfuly sid sql injection and got loggen on admin account

but there is not flag

than I checked writeups

On the writeups there were flags

[feral bear]

Hi, paid for a month subscription and paiement pending shows forever, is it normal ?

[ivory spruce]

No, it shouldn't take long.

Were you deducted the amount though?

[feral bear]

I don't know yet (bank delay) but received the email confirmation

[thorn hearth]

im having this same issue right now

it's stuck on payment pending

i got the email confirmation as well but i dont have premium

[thorn hearth]

I was. It says pending on my bank app but it did take away my available balance

i refreshed the page and it still says payment pending

[ivory spruce]

Drop an email to THM Support to have it sorted.

[thorn hearth]

what is the email?

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 18, 2024, 3:51 PM

[thorn hearth]

i opened a ticket on the website

[ivory spruce]

That can work as well.

[thorn hearth]

take my money already THM 😭

[ivory spruce]

Standard response time is at ~8 to 9 working days (as of two weeks ago) though so please be patient. Until it has passed, do not send a follow up so as not to push your ticket down the queue.

[thorn hearth]

understood

[median lake]

Hey. I'm having an issue with the Intro to Logs room (posting it here because I'm not sure if this qualifies as a room issue if the web form does not work). I am unable to answer Task 4 Question 3. It doesn't say "incorrect answer" or any sort of feedback. I tried refreshing the page (this kind of issue has happened with different rooms) but it just does not let me submit it.

[naive dust]

hey. i'm having some issue with enabling 2 factor auth. it's doen't generate the QR code and shows "Oops! Something Went worng". I've tried it multiple times but the same thing keeps happening.

[crisp osprey]

Hello guys I am facing an issue in room Active Directory

When I click the Breach AD part i redirect to another room

[gleaming flume]

Did you have a sub or a 7 day streak?

[weary spindle]

They're a sub.

[gleaming flume]

Oh yeah I forgot I could check roles for that, strange then

[tawdry orbit]

Looks like you're not logged in to your account on the resulting page showing Go Premium?

[crisp osprey]

But it is a free room

[crisp osprey]

Oops I don't see that sorry 😐

[tawdry orbit]

Yeah, although it does require a 7 day streak, as shown on the Hactivities page (see image posted earlier #site-support message)

[crisp osprey]

If I purchase a subscription will it shows same?

7 day streak needed?

[tawdry orbit]

With a subscription there is no 7-day streak requirement. 🙂

[crisp osprey]

Okay thank you

One last query

My country flag is not showing correct and I have done everything for it and I am not using any VPN etc

I have generated ticket 4 times but still it's showing wrong flag

[west chasm]

Changing your country's flag

Article Link

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

Jan 18, 2024, 7:28 PM

[tawdry orbit]

Check the link above. 🙏

[crisp osprey]

No use i already try it

I don't know it's showing UK flag and I am from India

[plush bay]

are you using a vpn to access tryhackme??

[crisp osprey]

Nooo

I clear my browser cookies then try a link of timezone but nothing working

[spark bison]

I have a question as I ran through things to troubleshoot this and it just didn't make any sense to me:

I went to: Learn/Paths/Web Fundamentals/Introduction to Hacking/Authentication Bypass/Task 7/Question 4 and followed the steps to encode the value there using base64. The answer I got back was 100% NOT the one needed to pass the question. I ended up having to dig around a little to find the correct response, which wasn't a big deal and worth the practice.

I took a screenshot of the response I got... This is just the second time I've had to do this and I don't know if it's because of the room being a few machine updates old or I just suck at this 🤣 🤣 🤣 .

Using OpenVPN for connection. I'll close and restart the service for new rooms before venturing into other solutions. I also killall the openvpn processes before starting the connection again and I have downloaded the thm_troubleshoot to make sure all works well.

[strange pond]

how to fix the problem of the command ssh no route to host when i try to deploy my own machine and use it for rooms

[plush bay]

https://tryhackme.com/room/openvpn

[strange pond]

i'm connected to openvpn

but still the problem

[ivory spruce]

Which room are you working on?

[strange pond]

linux fundamentals

[spark bison]

Are you getting the login error? Sometimes you have to restart OpenVPN

It happened to me before when I tried to do the SSH THM@Subnet

I just had to terminate the previous room's machines

And then restart OpenVPN from my VM

[strange pond]

yeah but i found out that i have to run openvpn by root and open another terminal tab to continue ssh so thanks anyway

[ivory spruce]

If I remember it correctly, you can only do so in parts 2 and 3. Do try to add -vv in your ssh command as it worked for me or at least give you an error you can research with.

[spark bison]

Oh yeah, I 100% do that

I run one window to launch the opnvpn, another one to check with the troubleshooter (I leave this one open so it's faster to launch the troubleshooter again in the folder with the config file) and then I have a third terminal open to handle everything

[strange pond]

okey thanks

[patent escarp]

any more issues with rooms randomly showing incomplete again? i had an issue with the NMAP room, it was fixed, now the same thing is happening to my Burp Suite: the basics room

[nimble trench]

guys, I have this noti after connecting to my Linux Fundamentals room through OpenVPN, EU-VIP-1

This is the default welcome page used to test the correct operation of the Apache2 server after installation on Ubuntu systems. It is based on the equivalent page on Debian, from which the Ubuntu Apache packaging is derived. If you can read this page, it means that the Apache HTTP server installed at this site is working properly. You should replace this file (located at /var/www/html/index.html) before continuing to operate your HTTP server.

If you are a normal user of this web site and don't know what this page is about, this probably means that the site is currently unavailable due to maintenance. If the problem persists, please contact the site's administrator.

:))))

[gleaming flume]

Which Linux Fundamental room is this?

I am assuming you are getting this from loading the IP into your browser? iirc room 1 for Linux Fundamentals just has a split screen view and the for other 2 you are supposed to SSH into them

[nimble trench]

ah yeah I missed it

sorry guys =)))

I ssh into it

but uhm i still cannot connect to my room through OpenVPN by copying the IP Address into my browsers 😦

hopefully it is because I'm sucks, not something else out there

[gleaming flume]

Not all rooms will be accessed via the browser

[nimble trench]

have you tried the Blue room?

that's what I'm working on and cannot be connect to via browsers

even Firefox

[gleaming flume]

I don't think that room has HTTP running either

[nimble trench]

damn

so how can I access it?

[gleaming flume]

You hack it

[nimble trench]

wait,

nmap or something else as well?

[gleaming flume]

Nmap is a good start yes

[nimble trench]

hack it by using nmap to recon and then

oh

i got the idea

[gleaming flume]

mhm

[nimble trench]

thanks Hiro

[gleaming flume]

np

[nimble trench]

so, not all rooms can be access through browsers =)))

it means I'm sucks =)))

[gleaming flume]

Nah, it can be confusing at first, but you understand it now. Its a learning process

[nimble trench]

thanks man

[scenic torrent]

Gave +1 Rep to @gleaming flume (current: #47 - 149)

[crisp osprey]

Hello

Does anyone have any idea how I can Stop this room ?

And 3 day access left ? Does it mean within 3 days I must have to solve this room otherwise I can't access it?

[light path]

Network rooms like this one requires a number of votes to restart the network.

[crisp osprey]

Means I am not working now what should I do?

[light path]

You’ll still have access to it if you have the necessary pwrmissions, you’ll just be kicked from the room. You can just rejoin then.

[crisp osprey]

Means for joining this I only need to start that vpn file and setup DNS config again that's it?

[naive dust]

Hello, I'm facing an issue with enabling 2 factor authentication. Can anyone please help me with this

[knotty storm]

and what exactly are you facing ?

[naive dust]

It's not generating the qr code

Instead it shows something went wrong

[knotty storm]

by any chance you are using any ad blocker or something?

[naive dust]

I've tried it multiple times

[naive dust]

I've tried it with disabling the ad blocker also

[knotty storm]

try clearing cache or else logout and login again ':0

[naive dust]

Done

[knotty storm]

bruh!

wait for someone else then 🫡 they might be able to assit you!

[naive dust]

Okay 👍🏻

[bronze vale]

For security and safety, please email support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 19, 2024, 10:39 AM

[naive dust]

👍🏻

[faint terrace]

https://lab_web_url.p.thmlabs.com/ gateway timeout.. How else can I get answers to Scenario Event task in MISP

[weary spindle]

You need to start the machine with the green button.

[faint terrace]

I did.

[weary spindle]

Not judging by that URL you didn't.

You might have started the attackbox

[faint terrace]

It said in the machine start instruction that I have to access the machine through the attack box.

[weary spindle]

Yeah. You have to access through the attackbox, you still need to start the the machine.

[west chasm]

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Jan 19, 2024, 1:05 PM

[faint terrace]

I did.

[weary spindle]

So you have a box with active machine information?

[faint terrace]

Yes

Ok, now I got in. Ask and it shall work...

[weary spindle]

About 5 min(s) later, sound slike the services didn't start right away, you need to let them boot up first.

[faint terrace]

Another question: do I have any chance of going through Nessus room without downloading Nessus to my own comuputer.

[weary spindle]

No.

You need Nessus to do the material.

[faint terrace]

Ok.

[amber iris]

problem with vpn connection

unable to connect

read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

showing this error

[ivory spruce]

Can you share a screenshot of the command and its result showing the error?

Also, what VPN server are you using?

[amber iris]

i am using EU vip 1 but also tried others

but still same

[vernal terrace]

Hello, Is there a way to update payment information on the site? I received a payment email from tryhackme.chargebee.com to pay an invoice, is this right?

[weary spindle]

Check the pinned posts, you will see the chargebee link to log inand change card details.

[vernal terrace]

thank you

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1859)

[tight seal]

this stuff bothers me - yes i'll put both in to see what works - but its a bad question the way its worded

[ivory spruce]

What room is this?

[tight seal]

https://tryhackme.com/room/linprivesc task3

should be worded which version of py2 or py3

[dapper orbit]

Burp has to be updated in Attack Box 🙂

[bronze vale]

Is there any problems with it? 🙂

[dapper orbit]

No just wanted to point it out since i just updated it in my VM and today i tried attack box

and i noticed it

[zealous yoke]

hey 🙂 yes:) I know there are recent updates for burp, however, it is currently at the version it is for a very specific reason

[dapper orbit]

Ah alright, thanks guys 🙂

[zealous yoke]

thanks for letting us know 🙂 alas, for now, you'll just have to dismiss the update (or update it if you wish), but yeah, certain tools such as burp, msf, etc I keep (as the attackbox maintainer) at a specific version for specific reasons. I could probably write a few paragraphs on why, but it's about testing & user experience basically

[scenic torrent]

Gave +1 Rep to @dapper orbit (current: #792 - 4)

[dapper orbit]

Keep up the great work 😉

[onyx swan]

Hello, I wanted to use openvpn to connect to thm and I successfully did that in my kali vm but now, how do I access the rooms or attack them?

[west chasm]

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Jan 19, 2024, 7:23 PM

[weary spindle]

have a look above.

(pretty much the same way you would on the attackbox)

[onyx swan]

So I would just type in the ip of the room into a browser?

[weary spindle]

Yes.

[onyx swan]

I did that but I just get a connection error

[weary spindle]

Can you go to http://10.10.10.10/

[onyx swan]

No

I find it strange since the thm website is showing no problems

[weary spindle]

Then you're not connected to the VPN.

Which server are you using?

[onyx swan]

Na East

But I tried the tutorial room and it works

[weary spindle]

Did you close the VPN?

[onyx swan]

No

[weary spindle]

Are you using firefox?

[onyx swan]

Yes

[weary spindle]

Is it defaulting to https ?

[onyx swan]

Yes and I change it to just http

[weary spindle]

Which room are you doing?

Can I have the target IP please?

[onyx swan]

Let me boot it up

10.10.111.153

[onyx swan]

Linux Priv Esc

[weary spindle]

That box doesn't have a web server

[onyx swan]

Oh I see

[weary spindle]

That's why you can't access a site.

[onyx swan]

My apologies, so then how do I attack it without the attack box on the thm website

[weary spindle]

Can you link the room? there is two Linex PriV and I don't want to mix up

[onyx swan]

Of course

https://tryhackme.com/room/linuxprivesc

[weary spindle]

Ok, this is a walkthrough room, just follow along with each task.

Task 1 is about connecting to the machine, which states to use SSH.

[onyx swan]

Wait I typed in the wrong link

It was https://tryhackme.com/room/linprivesc

I apologize

[weary spindle]

Same again,

Task 3 you start with ssh.

[onyx swan]

So in my Linux vm I just treat it like an attack box and I can use ssh to upload any files?

[weary spindle]

Yeah.

It's the exact same as the attackbox.

You just use your tun for any reverse shells etc

[onyx swan]

Ohh Tysm

[scenic torrent]

Gave 1 Rep to .scrubz. (current: #2 - 1863)

[weary spindle]

No problem, happy hacking

[onyx swan]

You as well 💪

[gleaming flume]

You hack the machine to get the flags. It sounds like that is a challenge room though and if you are new then you might want to start out with walkthrough rooms which give you step by instructions on what to do and don't just give you an IP and say "go for it" like the challenge room do.

[scenic torrent]

Gave +1 Rep to @gleaming flume (current: #47 - 150)

[gleaming flume]

Do you know anything about hacking? You would generally start with enumeration for a room like that, using tools like nmap. Again though if you are brand new you will likely find this quite challenging/ not know what to do

[strange pond]

about rooms, are they all accessed by the password tryhackme with ssh command

[zealous yoke]

No. TLDR:

1. Not all rooms will have you using SSH to access them (i.e. a webserver, RDP, etc)
2. You might need to SSH into a room, but if it's walkthrough, it will tell you the credentials for that machine in the room
3. There are challenges and such that you might need to SSH into. However, this is dependant on the room/challenge, and usually, figuring out/finding the credentials to do so is apart of the challenge 🙂

If you are doing a walkthrough room, the room will tell you how to connect to it and the necessary credentials. If it's a challenge, you're gonna have to figure it out 😄

[strange pond]

okey bro thanks

[amber iris]

hello i need some help

there is some problem with my openvpn file or something

by which I am unable to login via ssh to given ip

I've tried to change the vpn server but still not working

i can connect to the vpn but there is some problem

yesterday it is showing

read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

today it is showing Protocol options: explicit-exit-notify 3

does it have any problem with this Note: '--allow-compression' is not set to 'no', disabling data channel offload.

[ivory spruce]

Can you share the last few lines of the log when connecting to THM OpenVPN?

[south verge]

hi, i lost my phone and idk why google 2FA not sync with my new phone, i cant access tryhackme 😦

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 20, 2024, 11:27 AM

[weary spindle]

Need to contact support via email.

[amber iris]

it again started to show

read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

[tribal mason]

If you're in a VM, are you connected to a VPN from your host machine?

(You should disconnect your host in this case.)

[weary spindle]

That looks like a network issue on your side

[amber iris]

Do you know how to fix this

the vpn terminal displays
read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
when i try to connect to ssh

[weary spindle]

Do you have a VPN on your host?

[naive dust]

hello, i get an error, i can't fix it

my Vpn restarting in loop

[weary spindle]

Which server are you using?

[naive dust]

Eu regular 3

[weary spindle]

Have you tried to regenerate it?

[naive dust]

yes

[weary spindle]

@glacial hound

Ello

[weary spindle]

Gonz0 will be with you soon, if they're not busy.

[naive dust]

ok ty

[naive dust]

hey i just started using tryhackme website and i was doing some exercise

and then it said to click "open site"

and all but when i click

only white screen came on my left hand side of the screen

nth else

any idea what i am doing wrong

pls ping me if anyone knows how to solve it 😢

[eager notch]

Did anyone have any problems with their streak disappearing? mine now was over 100 and now it's 4 for no reason.

[amber iris]

yes

[weary spindle]

So you're running 2?

[amber iris]

no i turn offhost vpn while using thm

and the problem started after subscribing

before it was working fine

[ivory spruce]

You may drop an email to THM Support about it and they will have it sorted out.

[ivory spruce]

Are you now using the subscriber ovpn configuration?

[amber iris]

yes

[ivory spruce]

Can you provide the link to the room you are working on?

[amber iris]

oh sorry

[ivory spruce]

Are you using your host to connect to THM or you have a VM?

[amber iris]

vm

in virtualbox

[naive dust]

https://tryhackme.com/room/becomeahackeroa

task 2

not jut this

another one i tried same thing happened

maybe i am missing smth

or i am doing smth wrong

[amber iris]

website is working fine

in my computer

[naive dust]

maybe smths wrong with my pc

or browser

idk man m very clueless ;-;

[naive dust]

😭

ii cant send pic here either wth

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 20, 2024, 4:31 PM

[weary spindle]

you need to verify

[naive dust]

okk imma do that rlq

[amber iris]

which browser you are using

[naive dust]

chrome

okk now i send pic

[naive dust]

😭

[amber iris]

do you use any extensions

[naive dust]

yeaa i do

i have tampermonkey

[amber iris]

disable it and then try

[naive dust]

okk

[amber iris]

maybe it'll work

[ivory spruce]

In bridged or nat?

[amber iris]

nat

[naive dust]

nope didnt work

[ivory spruce]

Ooh.. can you try changing it into bridged?

[amber iris]

ok

[ivory spruce]

And try connecting to THM OpenVPN again and see if the connection issue you are having remains.

[ivory spruce]

This seems to be Chrome, can you try it in Firefox?

[amber iris]

the website detects vpn but i am unable to login via ssh

it shows error

now let me try

[naive dust]

will take time but imma try ig :(

[gleaming flume]

Could I DM you?

[naive dust]

anytime

[high tundra]

Are there any known isses with thm vpn?

[ivory spruce]

Not sure if it does require you to restart the VM if you are going to change your network config.

[naive dust]

Anyone have a problem on windows 11 with openvpn not connecting. I've looked at the logs and the only line I can see that indicates a problem is "bad cipher for data channel use".

THM says I'm connected but on open vpn always says timeout

[ivory spruce]

It is recommended that you use a VM when connecting to THM OpenVPN. However, what version of OpenVPN are you using?

[naive dust]

I just followed download instructions so v3 I believe

[ivory spruce]

#site-support message

[ivory spruce]

What issue or error are you having? Can you post a screenshot of it?

[amber iris]

still not working

nothing happens after this

[high tundra]

nvm, I just needed to wait

Thank you anyways @ivory spruce

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #22 - 345)

[weary spindle]

That's an MTU issue.

[naive dust]

Sorry I'm a beginner and just started, do I have to download a vm to use or how does it work?

[amber iris]

use virtualbox or vmware

[weary spindle]

Close that

sudo ip link set dev tun0 mtu 1200

Then re connect.

[amber iris]

Cannot find device "tun0"

[weary spindle]

You're not on the VPN?

[amber iris]

u said that type this and then reconnect

not working

[ivory spruce]

But is your THM OpenVPN not showing the read UDPv4 error you are having yesterday?

[ivory spruce]

When you typed the ip link set dev tun0 mtu 1200 command, are you connected to THM OpenVPN?

[amber iris]

in morning it was not showing the error but afternoon it started show and then now its not showing

[amber iris]

yes

[amber iris]

but ssh dont work in either case

[ivory spruce]

What box are you working on?

[amber iris]

https://tryhackme.com/room/linuxfundamentalspart3

[ivory spruce]

In yesterday's case, it won't really work as your connection to the VPN gets lost.

[amber iris]

maybe but currently it is not working

[ivory spruce]

Have you tried to reboot the target VM?

[amber iris]

yes it didnt show anything on the ssh window

[amber iris]

yes

even reinstalled openvpn

[ivory spruce]

Can you do ip a?

[amber iris]

idk why its not working its working just fine before subscribing

[ivory spruce]

https://youtu.be/3FNYvj2U0HM?si=H0ElJhf8crCJ8Fad

At 1 hour 46 minutes mark is the instruction for installing VMware or VirtualBox and after that is the Kali VM.

[amber iris]

hey but after setting mtu to 1200 without restarting vpn worked

thank you

[ivory spruce]

What scrubz was referring to earlier when he said re-connect was to re-connect to the target and not on the VPN.

[amber iris]

Thank you very much @weary spindle and @ivory spruce
you are the best

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1865)

[amber iris]

https://tenor.com/view/sad-eyes-obama-president-obama-cry-gif-17112377

[eager notch]

Okays thanks, I've done that to their feedback. Hope they get back to me. Last night no reply

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #22 - 346)

[ivory spruce]

That command set the packet size to 1200 making it smaller and easier to transport in a way.

[amber iris]

yes maximum transfer unit

anyways thanks a lot

can i change that mtu to 1200 permanently

[weary spindle]

Yes you can.

[amber iris]

it changes to 1500 every time i connect

[amber iris]

could you please tell me how

[weary spindle]

open your config file and add in tun-mtu 1200

[amber iris]

thanks again @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1866)

[weary spindle]

Anywhere between client and <ca>

[naive dust]

OMG 😭 thx @ivory spruce it worked in firefox

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #21 - 347)

[amber iris]

Its working

[weary spindle]

[naive dust]

Thank you so much @ivory spruce and @amber iris , vm works way better than windows I have no problems other than finding the path 😂

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #21 - 348)

[naive dust]

So once im finished how do I disconnect the vpn? And is it easy to set up when I run the vm again?

[ivory spruce]

To disconnect the VPN, either close the terminal where you ran OpenVPN or simply type Ctrl + C.

To connect to THM OpenVPN, simply type sudo openvpn /path/to/openvpn config file

[naive dust]

Thank you so much

[patent escarp]

what happend to the Burp Suite: Basics room in the Complete Beginner path? It reset to not being complete. I had this issue with the NMAP room, but that one was fixed. Anyone else having this issue?

[weary spindle]

The burp rooms were updated.

[tribal mason]

It's been updated. They sent you a mail about it.

[weary spindle]

So the new ones replaced the old ones.

[tribal mason]

It was a while ago i guess.

[patent escarp]

got it. i must have breezed over the email. thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1867)

[warped stump]

slight typo, that second image should show frame 9 not 8, this is in wireshark 101 room task 12 https traffic

[strange pond]

What optional argument can the ftp-anon.nse script take?

[gleaming flume]

Seems like google/nmap documentation could answer that pretty easily. Is this for a tryhackme room?

[spark bison]

@strange pond this might be silly, but I was seeing that then my MTU was set to 1500. I got the thm-troubleshoot script and ran it in the same folder as the ovpn config file. And the MTU was set differently. I also made sure I killall openvpn before trying to reconnect

[cunning musk]

hi guys, i bought tryhackme premium 2 days ago but after that the website being slower, it's now hard to open something in website
before i buy premium it's not like this.

[ivory spruce]

Are you using the premium VPN?

[cunning musk]

no, what is that?
i use openvpn for ctfs

[ivory spruce]

Are you referring to the website being slower or the VPN connection?

[cunning musk]

no, i don't use any vps for normal usage, i am talking about tryhackme.com

[ivory spruce]

If you're not using the VPN yet, then it should be on your ISP.

[cunning musk]

i have nice internet conection -_-
it's happen after i buy premium....

[ivory spruce]

Subscribing to THM provides you access to subscriber-only rooms and dedicated VPN servers. Other than those, I'm not certain how THM can control the speed at which their site is accessed or loads from the user / client side.

[cunning musk]

nevermind, any way thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #20 - 352)

[cunning musk]

i hope STAFFs will read this

[ivory spruce]

Aside from potential user / client side issues, I can only think of Cloudflare or your ISP off the top of my head.

[spark bison]

Not gonna lie... I started to notice this myself, even when I try to post room accomplishments to a social media network, not sure if this is because of a proxy or not... Could always do a Wireshark test or something to see what's going on and how long packets are taking to transfer vs. another website. Probably the best way to see if something is happening

[cunning musk]

i am not lying 🗿

and other websites wroking very well but not tryhackme and this is why i am asking for this -_-

[tribal mason]

Cyribro didn't mean you are lying

[spark bison]

I'm not accusing you of lying at all, I'm verifying that it happened to me too, however it was most noticeable when I ran too many machines open without terminating them. They close out after like 2 hours anyway

If you dig into rooms and just keep blasting through them, machines are left open

[frank swift]

Hi, I have a nodejs website, which serves static js, html, and css files to my url, and I use fetch() to send messages between client and server, such as one which I use to decrypt the website's local storage, but how can I make it so only my webstie can request the decryption using url/decrypt, I read somewhere that I am meant to use authentication and allow the proxying of the requests for authenticated users only. But I am unsure how to actually do this, as I would have to hold the authentication tokens on the client somewhere, which could be accessible to anyone, which would just allow them to use that token to request decryption as well. What is the best way to stop anything other than my website request or fetch from my server?

[ivory spruce]

This doesn't seem to be related to any THM content. It might be better to post this in the #infosec-general channel.

[clear raft]

Hey, can someone tell me how to access the Wireshark 101 files in AttackBox? I couldn't find the files in the room's directory.

[plucky flare]

link

[weary spindle]

They're not on the attackbox

[plucky flare]

we need a memes chan on the discord
media only
that'll be lit

[weary spindle]

nah, there is a reason there isn't one.

[weary spindle]

Do you need them still?

[plucky flare]

wich one

[weary spindle]

Wat

[weary spindle]

If you need them, ping me and I can start an updog server and let you download them.

[desert fulcrum]

Pleasse

I need help!!

I can't acess the vpn of the try hacking me

Even making the all steps

Iam having problems for connections

[weary spindle]

Which country are you in?

[weary spindle]

^

[desert fulcrum]

Angola

[desert fulcrum]

....

Somebody help plessse

[desert fulcrum]

Help me pleasse bro

[weary spindle]

Which server are you connecting to?

[desert fulcrum]

Iam susing openvpn

Using *

[weary spindle]

Yes, but which server did you download from https://www.tryhackme.com/access ?

[desert fulcrum]

What are you telling about witch server?

[weary spindle]

You can choose the server, which one did you use?

[desert fulcrum]

Oh ok eu regular-1

[weary spindle]

Which command did you use?

And which is the error code?

[desert fulcrum]

I use openvpn name.ovpn

[weary spindle]

did you include sudo?

[desert fulcrum]

Yeah

[weary spindle]

Ok.

You're going to need to verify and show me a screenshot.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 21, 2024, 7:17 PM

[desert fulcrum]

and it takes a long time to log into the vpn

[weary spindle]

without screenshots, I can't help with much.

[desert fulcrum]

Ok I will show

[weary spindle]

How're we getting on with the verification?

[desert fulcrum]

Yeah wait

Its here

[weary spindle]

You're not verified?

[desert fulcrum]

I send u a message in private

[weary spindle]

I didn't ask you to, I asked you to send it in here when you were verified.

I had a look.

You're not using sudo.

sudo openvpn file

[desert fulcrum]

yes

done

[desert fulcrum]

.....

[desert fulcrum]

Finishe bro now I verify my account

[weary spindle]

Looks like you're not using sudo

[desert fulcrum]

i use sudo su

i make root

i made*

[weary spindle]

Ah, overkill, but ok.

Can you choose Eu-reg-2

Delete the other one first.

[desert fulcrum]

ok

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 21, 2024, 7:42 PM

[weary spindle]

^ E-mail is above. 🙂

I'm not site staff, so don't disclose any account details please.

[desert fulcrum]

The sequence was complete but iam not connected wet

[weary spindle]

Ignore that page.

Can you go to http://10.10.10.10/ ?

In the browser with the VPN running on Kali

[desert fulcrum]

How can I do this ?

[weary spindle]

Open a new tab in the browser

[desert fulcrum]

Hate the vpn of Thm

[weary spindle]

The VPN is working fine.

Did you go to http://10.10.10.10 ?

[desert fulcrum]

thanks bro i resolved my problem

[vagrant bear]

idk where i should be putting this and i'm sure people who work at the site know, but the "Throwback" room is locked and displaying a 404 on some links. just wondering if that's ever coming back.

[weary spindle]

It's been removed, so probbaly not.

There are other great networks to do. 🙂

[vagrant bear]

yeah, no doubt. i wouldn't have known anything about it i just saw it on one of the "series" links. i finished all the instructional learning paths and don't have money to spend on the AWS rooms quite yet, so i was doing some of the practice rooms and series and saw that there was a link for the Throwback room that isn't functional.

[weary spindle]

Yeah, Throwback was also a seperate cost too

[vagrant bear]

ah, i gotcha

[west chasm]

The room review process

Article Link

https://help.tryhackme.com/en/articles/6495836-the-room-review-process

Jan 21, 2024, 10:23 PM

[bleak pawn]

Is Wreath down?
I cannot seem to join wreath

[clear raft]

yes, pls if you can help me.

@weary spindle
Also, I need to access the Memory Forensics room through the attack box, if you don't mind

[warped stump]

/root/Rooms/Wireshark101 @clear raft

[weary spindle]

Access?

[clear raft]

Not access, I mean how do I get room's files in the attack box? I'm already a subscriber

[errant ridge]

I cant seem to connect to the network of the room Enumerating Active Directory (https://tryhackme.com/room/adenumeration) using attackbox. Attackbox should start connected but cant ping the DC. If I run ifconfig I still see the breachad and lateralmovement connections from the previous room(s) but I dont understand how to go about this. Anyone has any advise?

[pastel tinsel]

can you try to leave beachad and lateral movement, and then turn off the attackbox for a few minutes

preferably 15 minutes, just so everything will regenerate

[errant ridge]

I brought down breachad and lateralmovement. Shutdown attackbox from terminal

I'll wait a good while and try again. Thanks!

(left the network itself running)

[pastel tinsel]

sounds good!

[errant ridge]

No luck, breachad/lateralmovement both are back. I checked and those networks aren't running anymore, and I also left those rooms.
Dropped them both again, then when i restart networking services it cant seem to bring up interface eth0.
If i check /etc/network/interfaces:

auto lo
auto eth0
iface eth0 inet dhcp

Never had any problems untill the room Enumerating Active Directory.
Anyone? 🙂

[amber iris]

Hey is there any difference between vip and regular vpn server

[weary spindle]

Faster vpn services.

[clear raft]

Hi, so I was wondering how to access Memory Forensics files through attack box : )

[weary spindle]

I could host them and you could download then, but it won't be until later.

[steep tartan]

Hello People, Iam doing TryHackMe's Active Directory Enumeration room but i wasnt able to connect the room's network vpn file and I am constantly getting this error (Error: problem with tun vs. tap setting). I even reconfigured the vpn file but it didn't help.

[clear raft]

Okay, if you can host them, I will be thankful. Also, please add volatility tools.

[weary spindle]

Anything else? 😂

[ivory spruce]

As you are a subscriber (Internet access from Attackbox is enabled), you can also login to your THM account on the Attackbox and download the files from there.

If you intend to work on your VM, you can host it using python http.server in the Attackbox and save it to your VM as the case maybe

[versed finch]

Hello. I'm trying to connect to Openvpn but I'm getting OpenSsl, TLS and Verify errors. Can you help me?

[ivory spruce]

What VPN server are you using? Also, what country are you connecting from?

[versed finch]

I am using Eu-Regular 3 and I'm connecting from Turkey.

[ivory spruce]

EU-Reg-3 has issues at the moment that the THM Support Team is looking into. Change to EU-Reg-1 or 2.

[versed finch]

VPN worked on other servers, but there was no change on tryhackme.

[ivory spruce]

What do you mean?

[clear raft]

thanks for your help

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #19 - 358)

[versed finch]

When I changed my VPN server, I did not receive an error, but when I entered tryhackme, it says no connection.

[clear raft]

thx

[versed finch]

Sorry, My english is bad

[ivory spruce]

When you changed your VPN server, did you download the ovpn configuration for that VPN server?

[versed finch]

Yes

[ivory spruce]

You need to wait ~3 minutes if I remember it correctly before downloading.

Can you also share a screenshot of the error you are having? You'll need to verify your account to do so.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 22, 2024, 1:35 PM

[weary spindle]

Link the rooms for me please.

[versed finch]

I get this error on the Eu-Reg-3 server

[ivory spruce]

Use a THM VPN server aside from EU-Reg-3, 1 or 2 would be good.

[versed finch]

I connected to VPN but it's not working

[elder fern]

not sure if this belongs here, but either the vpn is playing tricks or the machine "whyhackme" is one of the worst machines I've ever done due to how unstable it is.
really liked the concept though.

[ivory spruce]

What OpenVPN client are you using?

[versed finch]

2.6.8

[ivory spruce]

Read a feedback or two from users experiencing slowness on the box in the #1192905693565567117 channel.

[ivory spruce]

I was referring to the OpenVPN software or client that you have as I noticed you have a GUI.

[weary spindle]

@glacial hound

[versed finch]

what should ı do now

[ivory spruce]

Can you share a screenshot showing the OpenVPN client before you connect to the VPN?

It should show the software name, version, list of servers, etc.

[versed finch]

This version does not have GUI

[real vigil]

is the site slow for anyone else? don't know if it's a problem on my end or not

[steep tartan]

Me

[ivory spruce]

If it does not have a GUI, where did this come from?

[versed finch]

https://www.youtube.com/watch?v=996h-TwbUFc&t=1s

[ivory spruce]

Are you connected to THM OpenVPN at the moment? Can you visit 10.10.10.10 in your browser and share a screenshot of the result?

[clear raft]

here it is, https://tryhackme.com/room/memoryforensics

[ivory spruce]

It means you are now connected. Just ignore the previous screen showing you aren't connected. @versed finch

[versed finch]

thanks

[steep tartan]

Even for me the ad enumeration vpn config file is not working.

[weary spindle]

Are you doing it now?

Infact scratch that, I can't do it until Wednesday,

I need to save as much data as I can, and I hope my internet fill get fixed.

[clear raft]

np, take ur time i'll try another room. thx so much

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1870)

[worthy sundial]

Who should I contact to get some missing invoices?

[lone phoenix]

Howdy. I have a premium account and am trying to move on to the AWS content. However, it's asking me to buy a 3 month subscription. On my current subscription description it says "Access to all premium learning content" - is this not part of the premium content? Also, some of the modules have a "free" tag but seem to be behind this same payment gateway.