site-support

[weary spindle]

@violet wing has around 1026

[languid badge]

Hello, I have 48 UP series and I wanted to treat myself by benefiting from the reduction on the shop. I realize that the reduction is not active!?

[weary spindle]

48 UP series?

[languid badge]

The hacking streak

45 séries like 5% off swag

[weary spindle]

Ah.

You need to contact support via E-mail for your code. 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 30, 2024, 1:14 PM

[languid badge]

Ha ok 😅. Many thanks my friend

[naive dust]

@thin tartan What are you experiencing?
Can't you connect?
Or the IP just doesnt show in the top bar of the THM website?

[gritty garnet]

hello i ask about subscribe i pay but nothing happened

[ivory spruce]

Sorry, did you mean you paid for a subscription, but it was not activated?

Did you payment went through the bank successfully?

[prisma mason]

Howdy - AWS path, STS Credentials Lab - cannot create user in console or cloudshell. Get the error not authorized to perform: iam:CreateUser on resource: arn:aws:iam::<account>:user/padawan because no identity-based policy allows the iam:CreateUser action

[hazy relic]

Any know how to fix the connection timeout issues with openVPN? I'm on windows and trying to connect to us east.

[west chasm]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Jan 31, 2024, 3:20 AM

[bronze vale]

Are you using the OpenVPN Connect GUI?

[nova fossil]

you can help me? i can send a print in yours dm?

[hazy relic]

yeah i think so, i installed the one that try hack me links you too. im on my mac now it connects but isnt stable and the ip times out 😦

[bronze vale]

Are you using brew on your mac?

[hazy relic]

no

[bronze vale]

You need to use homebrew to connect on your mac

[hazy relic]

do you happen to have the link to that?

the instuctions i used just gave me the download to open vpn

[bronze vale]

https://tryhackme.com/access

Click OpenVPN config

[hazy relic]

not sure if im looking at the right place, i dont see it going off that page

[bronze vale]

Scroll down to the two cards one will say “OpenVPN configuration”

Click it, then select MacOS from the screen, and follow the steps :)

[hazy relic]

thank you!

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1135)

[hazy relic]

hmm those steps dont seem to work either, im wonderinf if open vpn is blocked...

[spring marsh]

hey gang, could I get some help with openvpn? whenever I get it started, it sits here indefinitely and never finishes installation. Research lead me nowhere!

im on kali btw

[plucky flare]

that means it is connected and u dont need to do anything else

just open a new tab

and start

the work

[spring marsh]

then you just ssh tryhackme@ip right?

[plucky flare]

no

u are already connected to it

start an nmap on target on another tab

[ivory spruce]

Is the connection you are using managed by someone else like a school or office or the one you have at home? If it is the latter, what country are you connecting from?

[ivory spruce]

This depends on what room you are working on as not all rooms have VMs you are supposed to SSH into.

[hazy relic]

it isnt actually, im just having issues connecting on two diff comps with two diff OS. Installing went correctly on both. I think I lose connection from my mac anyways.
With my mac it connects successfully, then after a minute or two it says connected again and the stop watch starts at 0. Like for example The highest its gone has been 0:02, but then it'll show "connected" and its back at 0:00. It keeps flashing connected over and over again but I have yet to see any message showing it's been disconnected...

[mild goblet]

Hello 👋 Family, please where do I locate the POSITION ( payload position )

Room: OWASP juice shop

I am eyes 👀 gazing on my burb suite and I can't find

[glacial hound]

Hey, in the Intruder tab. https://portswigger.net/burp/documentation/desktop/tools/intruder/configure-attack/positions don't hesitate to go to google if you can't find something in a tool 🙂

[mild goblet]

Okay. Thanks for the heads up...

[sudden gate]

i have a question

how to change the bio under your profile?

[weary spindle]

On discord?

Or Thm?

[sudden gate]

im not finding it

[sudden gate]

im there

but im not seeing it?

like changing it without putting occupation details

[weary spindle]

Not sure, nobody can see them anyway, so you can fill it with pretty much anything.

[sudden gate]

is there anyone else i can ask if they know how?

but the Bio is allready there without me enetering an occupation

[weary spindle]

I don't think you can right now.

I don't know if it's intended.

[sudden gate]

i just put my occupation details

Thanks

[pastel tinsel]

if you just write in the biography it should show

oh nvm, you'll need the details, didn't see 😄

[naive dust]

hello i the room metasploit : exploitation task6 Msfvenom: "Get a meterpreter session on the target machine." i have error " Handler failed to bin to MyIP:PORT..." i don't understand..

I've been on the problem for 2 hours...

[weary spindle]

You got a firewall?

[naive dust]

i used attackthebox

I even cheated by watching a video of the solution by performing the same commands but I still got nothing

[weary spindle]

Did you even copy the IP?

[naive dust]

yes

I am 100% sure I entered the correct IP

[weary spindle]

Just to confirm.

You copied the IP you used from a video?

[naive dust]

no, no from my room on tryhackme in live

[weary spindle]

You said you watched a video and used the same commands.

I'm just making sure you didn't use the IP

[naive dust]

yeah, it's not that beginner's mistake lol

go chat vocal 2min please ?

for share my screen

[weary spindle]

I can't.

I'm making dinner, and you need to be veriffied.

[naive dust]

ok no problem

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 31, 2024, 4:57 PM

[naive dust]

i am verify

[errant ridge]

Are you using the ip of the right interface?

[prisma mason]

Asking again.

[gleaming flume]

Wish I could help but I haven't done that path and don't have access to it so there isn't much I can do for ya. Really think they should add a support channel for the AWS path in this server though, now that it is not just for business users

[icy osprey]

@naive dust : problem is always here ? Please be careful on your typo 😉 ! I had same error

[naive dust]

Yes sure 100%

[naive dust]

The typo is sure 100%

[weary spindle]

You many not get alot of help with this, many of us don't have access to the path.

[tawdry vortex]

Check your metasploit options and make sure both your RHOSTS/RPORT and LHOST/LPORT are accurate. Make sure the port you selected for LPORT isn't already in use by something else. (e.g. if you used thag guide and put your python on 9000, but then didn't close that webserver, then you can't use 9000 in metasploit. It'll default to 4444, but still something to look at.

[somber fractal]

good evening everyone! i hope youre all well, i am having some issues on the site relating to connecting to the virtual machines, is this the correct room to chat in?

[weary spindle]

This one.

Are you using OpenVPN?

[somber fractal]

no, through attackbox on the site through chrome

[weary spindle]

What are you recieving an error with?

[somber fractal]

i have done the room before and didnt finsih it so i am going back through it, i seem to have had the answers before after running the nmap commands trying to find open ports. i have even gone through a video walkthrough copying what they are doing but i still dont have the same resules or even directory names, which makes me think even though its says im conencted, im not!

[silk owl]

hello i have a prob with connect to openvpn file

[ivory spruce]

What is the exact issue you are having?

[ivory spruce]

Can you share a link to the room you are doing? And the command you are running?

[silk owl]

cannot connect bcz of the following errors:

lost connection to server 1 times

@ivory spruce

[ivory spruce]

1. How are you connecting to OpenVPN - GUI or CLI?

2. What OS are you using?

3. Is this a home connection you are using? Or one that is managed by others e.g., in a school or library?

[silk owl]

gui windows home network

@ivory spruce

[ivory spruce]

Is it your host? It is not recommended to connect to the THM network using your host. However, if you prefer to do so, are you using the Community version of OpenVPN?

[silk owl]

yeah the community version

and my host

[ivory spruce]

The one from here - https://openvpn.net/community-downloads/ ?

[silk owl]

ty

[ivory spruce]

Did you manage to make it work?

[indigo wave]

It appears updated versions of Open VPN are having some issues with some coding? in the GUI..

directives? Ehh.. I have been trying to toy with this for a while now.

[supple obsidian]

Any moderator who can help remove my discord token?

[somber fractal]

https://tryhackme.com/room/networkservices task 6, command was nmap -vv <ip address of VM> i was following a walkthrough video and theirs returned a port but mine didnt. also on another video, we had to find the folder scripts where in however, my directories didnt have these options.

[summer crag]

I'm currently on the Jr Pen Testing room, and I've been stuck on this section for about 30 minutes because it just does not seem to work.

It either non-stop loads or 504 Gateway errors, I have the premium version etc

I've tried restarting my browser, PC, using Igcognito mode, a different browser (currently running chrome but tried firefox)

Anyone else have an issue with this?

Room in question: https://tryhackme.com/room/walkinganapplication

[glacial hound]

Hey, can you try with https://10-10-112-182.p.thmlabs.com/

[summer crag]

yes that worked!

[glacial hound]

During your troubleshooting steps, did you reboot your task VM? Sometimes that does the trick 🙂

[summer crag]

I did, I have been trying to fix this for about 30 minutes, I restarted the box, I switched to Kali Linux (to see if that would work), new browsers, only thing that worked was that new link

[glacial hound]

hmmm that's strange, I will leave my VM running for now so you can get through the room. Are there any other errors, for example, in your browser's developer tools, when trying to access the website?

[summer crag]

No need to keep yours running! I have moved onto a different room currently, hoping it will fix in a few days when I try it next. thanks though!

I will check quickly, 2 seconds

Nothing noticable from what I can see, although I am not really a professional at this

all it says is

504 Gateway Time-out
nginx/1.14.0 (Ubuntu)

[glacial hound]

On Firefox, you can access your browsers dev tools by right-clicking your mouse -> inspect

You can then check for errors in the console and network tab. Network tab can be a good way to understand how requests and responses are made 🙂
In your case, 504 is a server error, so I thought a reboot would do the trick.

[weary spindle]

Sorry. Are you trying to access the pthmlabs on attackbox?

[summer crag]

yeah I see the 504 error, is there anything within the error which would give me a reason for why its not working?

[glacial hound]

In this instance, not much else, but the methodology can come in handy for troubleshooting (even outside TryHackMe)

[summer crag]

Alright, Well for now I'll just ignore it and hope it fixes itself next time i study it haha. thank you for the help!

[glacial hound]

Anytime, enjoy your day!

[summer crag]

you too!

[burnt folio]

Does anyone knows how I can reset my 2FA in TryHackMe?

[weary spindle]

Contact support. 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 1, 2024, 2:52 PM

[burnt folio]

Thanks! I'll try that 😃

[scenic torrent]

Gave +1 Rep to @west chasm (current: #285 - 16)

[bronze vale]

Did you save the codes when you setup your 2fa?

[burnt folio]

Yes, if you mean the recoverycodes

[naive dust]

leteral movement network just doesnt work no matter what I do, cant ping the DC IP

i tried regenerating the .ovpn config file

im using kali

Im wasting like 20 minutes a day each time I want to connect to a THM network, someone should really look into it.

[weary spindle]

Issue seems like it's only you?

[naive dust]

I see, so you pay for a service, you open up a manual, you do every single step exactly how it is in the manual, it doesn't work but the issue is you

Thanks a lot

[weary spindle]

Well think of it this way.

How many people are complining about it?

[naive dust]

I understand that you are in the mood to argue, but that's not what you got the Mentor role did you?

Please let's not waste our time here, your argument is completely irrelevant.

Someone let me know once the issue is solved please I'd like to finish the room, Thanks

[weary spindle]

How about you tell me what's not working?

Have you added the nameserver to your /etc/resolve ?

[naive dust]

yep first I added the DCIP as additional DNS IP in the IPv4 section in Network manager (this always worked), and restarted network manager

now I tried adding the DCIP at the top of all nameservers in resolv.conf

i tried regenerating the ovpn file, and restarting my kali multiple times

[weary spindle]

Have you tried reseting the network?

[naive dust]

Not enough votes, that's the only hope now.

[weary spindle]

You can add one every 30/60 mins.

Or you can leave the room with the cog for 30 mins and get placed in a new subnet when you re-join

[naive dust]

It works after sixth restart of my kali, didn't change anything about how I connect to the network. Theres just bugs that need to be fixed, not the user's fault

50 minutes wasted today

[bronze vale]

You can use them to login and disable 2FA

[somber fractal]

hi guys, does anyone know how to deal with a very slow attackbox? it takes minutes for a ping to show on a netcat capture ? painful to use!

[glacial hound]

Hey Rixon, have you tried leaving the Network room for at least 30 minutes, and then re-joining it? This should put you on a new subnet, and hopefully resolve those networking issues.

Could you share your DCs IP address so we can look into that subnet? Thanks 🙂

[scenic torrent]

Gave +1 Rep to @haughty dagger (current: #684 - 5)

[naive dust]

Hey the DCs IP is 10.200.51.101

It works perfectly now even tho I didn't change any settings, I just waited and kept restarting my kali.

There's a chance the problem is my Kali and not the network

[glacial hound]

All good, the trick could come in handy if you ever encounter other issues.

[worldly mural]

Hey All

i am having a trouble using openvpn

i tired running the script but no luck

[weary spindle]

Hi, can you tell me which OS and country you reside in?

[worldly mural]

kali in VM Fusion and currently in Canada

@weary spindle i ran the script suggested by THM and it gives error

[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

[weary spindle]

Is the VPN restarting?

[worldly mural]

not sure

[weary spindle]

Well, what does the output say?

[worldly mural]

024-02-01 14:01:30 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-02-01 14:01:30 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2024-02-01 14:01:30 OpenVPN 2.6.7 aarch64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-02-01 14:01:30 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-01 14:01:30 DCO version: N/A
2024-02-01 14:01:30 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.147.96:1194
2024-02-01 14:01:30 Socket Buffers: R=[212992->212992] S=[212992->212992]

2024-02-01 14:01:30 UDPv4 link local: (not bound)
2024-02-01 14:01:30 UDPv4 link remote: [AF_INET]54.193.147.96:1194
2024-02-01 14:01:30 TLS: Initial packet from [AF_INET]54.193.147.96:1194, sid=bb15217b c00235d1
2024-02-01 14:01:30 VERIFY OK: depth=1, CN=ChangeMe
2024-02-01 14:01:30 VERIFY KU OK
2024-02-01 14:01:30 Validating certificate extended key usage
2024-02-01 14:01:30 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-02-01 14:01:30 VERIFY EKU OK
2024-02-01 14:01:30 VERIFY OK: depth=0, CN=server
2024-02-01 14:01:30 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
2024-02-01 14:01:30 [server] Peer Connection Initiated with [AF_INET]54.193.147.96:1194
2024-02-01 14:01:30 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2024-02-01 14:01:30 TLS: tls_multi_process: initial untrusted session promoted to trusted
2024-02-01 14:01:31 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2024-02-01 14:01:31 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route 10.1.0.0 255.255.0.0,route-metric 1000,route-gateway 10.13.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.13.45.122 255.255.128.0,peer-id 6'
2024-02-01 14:01:31 OPTIONS IMPORT: --ifconfig/up options modified
2024-02-01 14:01:31 OPTIONS IMPORT: route options modified
2024-02-01 14:01:31 OPTIONS IMPORT: route-related options modified
2024-02-01 14:01:31 Using peer cipher 'AES-256-CBC'

2024-02-01 14:01:31 net_route_v4_best_gw query: dst 0.0.0.0
2024-02-01 14:01:31 net_route_v4_best_gw result: via 192.168.11.2 dev eth0
2024-02-01 14:01:31 ROUTE_GATEWAY 192.168.11.2/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:9c:2b:bc
2024-02-01 14:01:31 TUN/TAP device tun1 opened
2024-02-01 14:01:31 net_iface_mtu_set: mtu 1500 for tun1
2024-02-01 14:01:31 net_iface_up: set tun1 up
2024-02-01 14:01:31 net_addr_v4_add: 10.13.45.122/17 dev tun1
2024-02-01 14:01:31 net_route_v4_add: 10.10.0.0/16 via 10.13.0.1 dev [NULL] table 0 metric 1000
2024-02-01 14:01:32 net_route_v4_add: 10.1.0.0/16 via 10.13.0.1 dev [NULL] table 0 metric 1000
2024-02-01 14:01:32 Initialization Sequence Completed
2024-02-01 14:01:32 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 6
2024-02-01 14:01:32 Timers: ping 5, ping-restart 120
2024-02-01 14:01:32 Protocol options: explicit-exit-notify 3

[weary spindle]

That's connected

[worldly mural]

it should be but the website doesn't showing connected status

[weary spindle]

It's bugged, ignore it

[worldly mural]

okay and what about macOS, any idea?

gui just wait for connection and then asks me to retry connection

[worldly mural]

finally it started, i was not able to ping the lab IP for some time

[tepid badge]

Hi together,

I have found an unusual behavior in Room "Upload Vulnerabilities" (https://tryhackme.com/room/uploadvulns). If I request demo.uploadvulns.thm I am forwarded to youtube.com

Here the cat and wget command output:

"""
root@ip-10-10-36-94:~# cat /etc/hosts
127.0.0.1 localhost
127.0.1.1 tryhackme.lan tryhackme

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
10.10.47.142 overwrite.uploadvulns.thm shell.uploadvulns.thm java.uploadvulns.thm annex.uploadvulns.thm magic.uploadvulns.thm jewel.uploadvulns.thm demo.uploadvulns.thm

root@ip-10-10-36-94:~# wget http://demo.uploadvulns.thm -vv
--2024-02-01 20:49:07-- http://demo.uploadvulns.thm/
Resolving demo.uploadvulns.thm (demo.uploadvulns.thm)... 10.10.47.142
Connecting to demo.uploadvulns.thm (demo.uploadvulns.thm)|10.10.47.142|:80... connected.
HTTP request sent, awaiting response... 302 FOUND
Location: https://www.youtube.com/watch?v=dQw4w9WgXcQ [following]
--2024-02-01 20:49:07-- https://www.youtube.com/watch?v=dQw4w9WgXcQ
Resolving www.youtube.com (www.youtube.com)... 74.125.193.93, 74.125.193.91, 209.85.203.190, ...
Connecting to www.youtube.com (www.youtube.com)|74.125.193.93|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: \u2018index.html\u2019

index.html [ <=> ] 616.98K 1.19MB/s in 0.5s

2024-02-01 20:49:08 (1.19 MB/s) - \u2018index.html\u2019 saved [631789]
"""

Have anyone an idea what's wrong??

The YouTube link directs to the following song: Rick Astley - Never Gonna Give You Up

Is there any connection between Tryhackme and Rick Astley... 🙂

[gleaming flume]

Is this for a thm room? If so which one?

[frank swift]

i got it working somehow

[plush bay]

https://forum.hackthebox.com/t/evil-winrm-error-on-connection-to-host/257342/7

here is a helpful guide if you have errors with evil-winrm

[spiral vector]

Hello i am having an issue with wreath. I am using the attackbox and it is not reachable can anyone check the network?

[plush bay]

which subnet

[spiral vector]

the foothold server says it's at 10.200.87.200

the documentation says it should be reachable from the attackbox

it doesnt ping or respond to a portscan with -Pn appended either

[plush bay]

hmmm

[spiral vector]

im going to let the network time out and try again later i will repost if the issue persists

[plush bay]

or hit the reset button

once every hour/half hour

[indigo wave]

Super dumb question but it has been a while since I have been on. You can connect via website with AttackBox with subscription or using OpenVPN and use your own machine. Do you need openvpn or a virtual box with the attackbox or can you use your home computer outside a virtual box?

[plush bay]

you can use your own computer with the vpn but be weary as you are then connecting your main pc to a network full of hackers.... still rare that they target someones attack machine but it has happened before

[indigo wave]

Thank you so very much! I truly appreciate it!

[scenic torrent]

Gave +1 Rep to @plush bay (current: #4 - 1619)

[plush bay]

recommended setup is the attackbox or your own kali or parrot os vm

[indigo wave]

The OpenVPN has updated and doesn’t appear to like the gui

[plush bay]

well yeah

generally people connect using the command line openvpn command

[indigo wave]

AttackBox being inside the browser or something else completely?

[plush bay]

yeah attackbox being the browser vm that tryhackme provides to use to attack the target machines

[indigo wave]

But even within their AttackBox browser it is best to do within a virtual box? And use OpenVPN? Sorry.. now I am going in circles. It is the end of the day. Erm…if you use the AttackBox in the browser of home/main computer be wary

I have been fighting with OpenVPN for a day. Getting different errors and now it just keeps timing out. So I am uninstalling it to start fresh.

[gleaming flume]

If you are using the attackbox you don't use your own VM and OpenVPN, it's an either or situation

[indigo wave]

Thank you so much! This made perfect sense. Thank you! I was being a dumb bunny!

[scenic torrent]

Gave +1 Rep to @gleaming flume (current: #46 - 157)

[indigo wave]

Thank you!!

[plush bay]

nah if you use the attackbox in the browser it is completely fine...

[indigo wave]

Thank you so much! I am so sorry for going around in circles with you. But I am truly grateful for your time and help!

[scenic torrent]

Gave +1 Rep to @plush bay (current: #4 - 1620)

[plush bay]

no problem... shadow helps out when they can

[hard cliff]

Yeoo im new here and i wanna learn how to hack

[dull leaf]

can someone reset the wreath network? someone seems to have closed port 10000 for the exploit on the first machine...

[spiral vector]

@dull leaf im getting the same thing, are you getting any response from it at all? i'm not

[dull leaf]

no. the rce cve wouldn’t connect and nmap scan showed closed port on 10000. odd.

[weary spindle]

You'll need to tell us which subnet you're in

[dull leaf]

We got enough votes to reset, and it's working fine now

[cosmic kernel]

I am having difficulty with the hydra attackbot launching

[hard frigate]

Am I the only one affected by maaaaaajor lags on the website ? Been literally waiting for a minute to just load the AWS learning path and this only happens with TryHackMe specifically

[weary spindle]

Do you have access to the AWS path?

[hard frigate]

Yes, bought it monday

Even now it's still laggy and I've been waiting for my AWS environment to reset for the VPC - Attack and Defense room for quite a while now

[hard frigate]

Yeah... I'm not certain that AWS takes more than an hour to create a few VPCs so something is definitely off

[spiral vector]

So the attackbox is not connected to the wreath network as advertised and the site will not download the network vpn config to an internal address can anyone please advise
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9001 qdisc mq state UP group default qlen 1000
link/ether 02:11:c9:4b:95:3b brd ff:ff:ff:ff:ff:ff
inet 10.10.71.XXX/16 brd 10.10.255.255 scope global dynamic ens5
valid_lft 3194sec preferred_lft 3194sec
inet6 fe80::11:c9ff:fe4b:953b/64 scope link
valid_lft forever preferred_lft forever
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:49:45:00:36 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
inet6 fe80::42:49ff:fe45:36/64 scope link
valid_lft forever preferred_lft forever
5: veth138266f@if4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
link/ether 6e:02:e2:bb:96:24 brd ff:ff:ff:ff:ff:ff link-netnsid 1
inet6 fe80::6c02:e2ff:febb:9624/64 scope link
valid_lft forever preferred_lft forever
7: vethd801038@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
link/ether ae:e4:92:9d:15:64 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 fe80::ace4:92ff:fe9d:1564/64 scope link
valid_lft forever preferred_lft forever

[ivory spruce]

If you are connecting from the Attackbox, that should be the ens5 interface. Have you tried to vote for a network reset?

[weary spindle]

This depends on the user being a subsciber or not.

If the user is a subscriber it will tun0 on the attackbox.

[weary spindle]

Are you a subscriber?

[ivory spruce]

Thanks for clarifying.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1911)

[hard frigate]

Any news on the AWS environments ? Mine is still resetting and I have no possible actions to stop / try to reset it again or anything of the sort. For info, this is supposed to be the account 905418062754

[spiral vector]

I am

[weary spindle]

Start the Attackbox from inside wreath room?

[spiral vector]

Yea I did that because for other AD rooms you have to as well

what i might try this evening when i get home is download the .ovpn and copy the contents over to the attackbox for POC, otherwise i'll just do it from my home box

i just like to pick at rooms while at work

just thought i should bring it to someone's attention that it's misconfigured

[weary spindle]

SOme room shave strange VPN packs, you could always cat it and see if it's blank.

As Tun0 worked for me on the attackbox.

[spiral vector]

yea there is vpn config on the desktop and it is blank. odd.

[weary spindle]

You'll need to leave the room (with the cog) and rejoin later

[spiral vector]

👍

[naive dust]

Hey guys any idea when will the Lateral movement network be available again? The config file can't be downloaded right now so I'm assuming someone is working on it?

[weary spindle]

Not quite.

[naive dust]

Works again 👍

[halcyon pulsar]

Hello, I'm having a weird issue with the Wreath network, when downloading the config file for it, the file is empty (0 bytes). I'm a free user with 8-day streak.

[weary spindle]

Leave the room for 30 min(s) with the cog. (top right)

[halcyon pulsar]

Okay, done, thanks for the help!

[safe adder]

Hey guys, whenever i click join room in the wreath it redirects me to /rooms/ without signing me up in wreath

[weary spindle]

Are you a sub, or have a streak > 7?

[quick vapor]

I'm working on the Windows PrivEsc room at: https://tryhackme.com/room/windows10privesc and it's not letting me terminate the machine. I reload the page after hitting terminate and it's active again. I tried going to another room and activating/terminating a machine and have no issues. Just this single room having an issue. I also can't ping it from my machine anymore.

[ivory spruce]

You won't be able to ping it due to Windows firewall.

[quick vapor]

Okay, I still cannot terminate the machine on tryhackme.

[ivory spruce]

#site-support message

[safe adder]

not a sub any my streak is 2

[weary spindle]

That's why

[feral bobcat]

how do i link my token to the discord?

[tribal burrow]

you did. you are verified

[feral bobcat]

I have a different account now, and need to relink it

[tribal burrow]

ah... you need to ask some mod/admin to unlink the old one so you can use new

[mild steppe]

Hello I'm having issue while connection to Exploiting Active Directory room. Used both methods as using OpenVPN and Attack Box. Not able to share screenshots here as it's only showing "Use Apps" options . Please guide me how to insert Screenshots for better understanding of issue

[gleaming flume]

You have to verify to send screenshots

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 3, 2024, 4:20 AM

[errant basin]

ftp: Can't connect to `ip add': No route to host

[tribal burrow]

more info is needed. did you connect to VPN and is ok? is that room? and what you doing. and so on...

[errant basin]

yeah vpn is connected but the error is open port ftp is not connect i get this error no route to host?

[tribal burrow]

when connected to vpn, can you do in another terminal: ping -c 3 10.10.10.10 and have 0% packet lost as in result?

and what you try to have that. room or what so?

[hardy creek]

hello i am facing a problem, The attack box is too slow to use. and the there is a system massage popup when i try to use Brup suite syaying: there is a few space left. Please fix the problem i want to finish Brup suite room

[tribal burrow]

@eager fulcrum

[eager fulcrum]

Contact Roblox support. We do not do account hacking here.

[ivory spruce]

Have you tried to use a VM with adequate resources and connect it via THM OpenVPN?

[mellow sorrel]

hello I have a problem with THM machines. When I connect to the the machine with OpenVPN and try to open the page on web browser it doesn't load . Any solutions ?

[weary spindle]

Can you go to http://10.10.10.10/ ?

[mellow sorrel]

yeah the 10.10.10.10 works fine but when I try to connect to the machine IP it doesnt load

[weary spindle]

Which machine?

[mellow sorrel]

both Burpsuite the basics and OWASP top 10-2021 rooms

[weary spindle]

Do you have a machine open now?

[mellow sorrel]

yes owasp_top10_2021_v1.2
IP Address
10.10.80.35

[weary spindle]

You're on a VM, yes?

[mellow sorrel]

yes I use Kali linux on VM

[weary spindle]

Can you run sudo ip link set dev tun0 mtu 1200 in a seperate terminal please (with the VPN open)

Can you also confirm you have one tunnel open with ip a | grep "tun"

[mellow sorrel]

┌──(thmkali㉿kali)-[~/Desktop]
└─$ ip a | grep "tun"
4: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1200 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.9.119.186/16 scope global tun0

[weary spindle]

Ok, run the first command.

[mellow sorrel]

I did

[weary spindle]

Did the webpage connect?

[mellow sorrel]

ok thanks a lot it worked 🙏

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1916)

[weary spindle]

Excellent!

If it does that again, you know what to do, or you can edit you VPN pack to have it by default.

[mellow sorrel]

yeah sure thank you very much

[wraith hollow]

hey im new here and im trying to connect to tryhackme site via openvpn and its showes that im connected but all the assignments wont update there ip i mean the access machins wont change even if im connected to the attackbox idk if its related to this message but if somebody can help me i will really appreciate 2024-02-03 13:17:41 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 121, compression: 'lzo'
2024-02-03 13:17:41 Timers: ping 5, ping-restart 120
2024-02-03 13:17:41 Protocol options: explicit-exit-notify 3

[gleaming flume]

Could you send a screenshot of the full openvpn output? You'd need to verify your account to send images

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 3, 2024, 6:35 PM

[hexed pewter]

Hello! Im trying to buy the monthly premium subscription but I can't already called my bank and such and there are no problems on their end

[gleaming flume]

If you are sure the issue is not on your end then I'd talk to support via email, they are the only ones that can help with payment related issues

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 3, 2024, 6:39 PM

[hexed pewter]

thank you!

[wraith hollow]

or all of it from the begining?

[gleaming flume]

That is enough and it looks to be a working output, can you go to 10.10.10.10 in your browser? If a site loads there and gives you a flag then you should be good to go. The site can be bit buggy when it comes to displaying you as connected/giving you the IP of your connection which could be causing you confusion, but if you can load 10.10.10.10 then that doesn't matter.

[wraith hollow]

i get the flag and even in the access menu it writes "connected" how ever still i cant connect for the labs

its just wont change...

[gleaming flume]

That is for the victim machines, your VM that you use openvpn on and the machines that you interact with are two separate things. Is there a green 'Start Machine' button on one of the tasks in the room you are in? You should hit that button then the machine_ip will populate with the ip of the victim machine.

[wraith hollow]

great thank you very much 🙂

[kind birch]

HI! my attack box for exploit AD can't resolve za.tryhackme.loc whereas I set the DNS as usual. I've tried to leave and join back the room but nothing changes. I also tried to flush dns but didn't work. What should i do? Does anyone had already faced this issue ?

[unique igloo]

Hi, I'm new here and I'm trying to connect to the tryhackme site through openvpn and I'm getting this error

2024-02-03 16:08:21 Data channel: 'AES-256-CBC' encryption, authentication
'SHA512', peer ID: 198, compression: 'stub'
2024-02-03 16:08:21 Timers: ping 5, ping-reset 120

how can I solve that

[gleaming flume]

Can you send a screenshot of the entire command line output for openvpn? You'll need to verify to send images

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 3, 2024, 9:18 PM

[astral sierra]

Hey guys, I am currently trying to connect to the VPN (Australian server). I am not sure if I should tunnel with Windows directly or tunnel with Kali in WSL2, I would rather Windows, because Burp Suite's UI. I am currently getting the client exception: "BF-CBC: bad cipher for data channel use"

[astral sierra]

At the moment, I am just using the Attack Boxes, but they are a bit laggy for Australians.

[light river]

Very, but I've found they're more reliable in what they do. I've used a VPN to access through a VM and even then there are some issues with compatibility.

[zealous yoke]

We generally don't recommend using WSL2 to connect to the VPN as the networking is a bit funky. Run the VPN from within the host that you are using (I.e. the Windows host - not WSL2 in your case, or in a VM, run it on that machine).

However, it looks like that error *might *not be related. Can you try the above (i.e. running the VPN on windows using an install from the OpenVPN community edition client (https://openvpn.net/community-downloads/), and try connecting again? See if you can access 10.10.10.10/whoami either in your browser or via curl on Windows

[zealous yoke]

Hey, can you do the following on the AttackBox please:

1. run ip addr in the terminal.
2. Look for an interface that has a similar name to the network that you're trying. If it exists, then double-check that your /etc/resolv.conf & /etc/hosts are correct. If it doesn't exist, can you share the subnet that you're on in the map in the room and the URL to the room that you're trying please. Otherwise, share the IP address of a machine that you see on that map/graphic.

If you're not sure, send a screenshot of all of the above (especially the output of step #1!!) (you'll need to verify your discord account to post pics here, or you can upload them to say imgur)

[astral sierra]

Seems I had the wrong client. It is working now.

[zealous yoke]

great:) glad to hear

[astral sierra]

The one that was being linked from the access machines menu might not be correct?

[zealous yoke]

but yes just as a PSA, the networking on WSL2 with the VPN can be weird. It depends on what you do, but I know this is especially noticeable with things like reverse shells

[zealous yoke]

Perhaps. Is this the https://tryhackme.com/access page? or somewhere else?

[astral sierra]

The show connections options menu.

In the Windows tab.

[zealous yoke]

Ahh I think I see where you mean. Here?

yup gotcha

okay looks like that's outdated. I'll submit a ticket re. this 🙂

[plucky flare]

0day streak

[zealous yoke]

yup lol

the most i'll ever have is 5 days because I try and not do THM things on say the weekends, because it's my full-time job during the week 😄

[plucky flare]

xdd

probly also because ur the teacher not the student like us

[zealous yoke]

I think the highest streak I've had is 8

[tribal burrow]

you can send email to support to get your strikes back 🙂

[zealous yoke]

Aye. That and I do a lot of work on THM that doesn't involve answering questions on the site.

Plus, as with any job, it's healthy to have a work/life balance. Like I said, THM is my full-time job during the week. While I love it, i also have other things to do on the weekend 😄

[plucky flare]

nice

same

[plucky flare]

i love ur rooms btw

tey are the best
clear stand out

[zealous yoke]

thanks!:)

[narrow tulip]

@normal vale can you take a look at this

https://openvpn.net/faq/tls-error-tls-key-negotiation-failed-to-occur-within-60-seconds-check-your-network-connectivity/

[normal vale]

could be a router thing?

[narrow tulip]

like what?

[normal vale]

A NAT gateway on the server's network does not have a port forward rule for TCP/UDP 1194 to the internal address of the OpenVPN server machine.

[narrow tulip]

i see but I've never had a problem like this before

I just deleted kali and reinstalled it

How do I redirect?

[ivory spruce]

You could also set it to bridged mode (the network settings for your VM).

[narrow tulip]

set to NAT

[ivory spruce]

#site-support message

[scenic torrent]

Gave 1 Rep to inf0s3cw4nn4b3 (current: #18 - 381)

[ivory spruce]

I don't think this is THM-related so this may be better posted in #general or #infosec-general . Also, I don't think you'll get folks to simply click on a link posted by someone they don't even know?

Please don't spam in multiple channels as well.

[fresh bear]

i tried as sudo

[tribal mason]

@fresh bear You might consider re-downloading the config file

[fresh bear]

okay

[weary spindle]

Is it in the.directorh you're calling?

Or in Downloads?

[fresh bear]

idk i did now sudo su cd /etc/openvpn

i tried re-downloading and again same problem

[weary spindle]

Can you ls?

[tribal mason]

Exit from root, go to your Downloads directory with cd ~/Downloads
Then sudo openvpn config.ovpn

[weary spindle]

It also won't like the brackets.

[weary spindle]

Your vpn file isn't in that directory.

[fresh bear]

itsd in downloads

[weary spindle]

Your cli pwd isn't.

[fresh bear]

huh

[weary spindle]

Ls

[weary spindle]

Just use the one without brackets.

Or use the one with brackets but the file inside quotes

[fresh bear]

and end with that

after much text

[weary spindle]

Look 3 or 4 lines up.

[tribal mason]

If it says Initialization Sequence completed

You're ready to go

[weary spindle]

That's fine.

[fresh bear]

whats the 10's up is that ips

[weary spindle]

Mjnimize the terminal file.

[fresh bear]

huh

[weary spindle]

Minimise it and leave it running

[fresh bear]

oh ytes

ty

im connected

🙂

now to use it in my terminal i do ssh tryhackme@ip of machine?

[weary spindle]

If its ssh enabled, yes.

[fresh bear]

whats password

it ask for tryhackme@machine ip password

[wind wedge]

Which room are you doing?

[fresh bear]

Basic Pentesting

It said i can use openvpn and thsat

whats password

[wind wedge]

You have to brute force it

[fresh bear]

how

i did ssh tryhackme@ ip and it says tryhackme@ip password i need put in password

[wind wedge]

The room doesn't give you a tryhackme uername

[fresh bear]

huh

username

[wind wedge]

You have to hack it to get the username and password, it's a challenge room

[fresh bear]

but how do i get to the ssh so i can start

[wind wedge]

I would recommend doing some walkthrough rooms, such as linux basics, nmap module, hydra before doing this room

[fresh bear]

oh okay

[wind wedge]

Basic Pentesting is a challenge room, it is asking you to attack the machine, it doesn't ask you to login with ssh with username tryhackme

[fresh bear]

ohhhhhhhhhhhh okay ty

[ebon compass]

i keep trying to connect using openvpn to tryhackme but it keeps giving me this error openvpn TLS negotion failed any one know whats the probem?

[weary spindle]

Which server and country are in?

[ebon compass]

iam in turkey and trying to connect to eu-regular 1

[weary spindle]

I think Openvpn is banned in your country.

[ebon compass]

i have used it before to connect to hackthebox machines and it worked

[weary spindle]

Different protocols used.

UDP might be blocked, which is what THM uses.

[ebon compass]

can i connect to it if iam connected to a VPN ?

US or something

[weary spindle]

My only suggestion is to use the attackbox

[ebon compass]

Iam not a subsciber yet, so i only have 1 hour daily

but thanks for your ehlp

help*

[weary spindle]

That doesn't change my suggestion.

[weary spindle]

Can you repeat that again please?

[thorn chasm]

Good Morning
Is there an issue with the site? I connect with openvpn like I always have and get the 'initialization sequence complete' like I always have.
In the room I'm working in 'Access Machines' stays red as if Im disconnec no matter how many times I refresh and I can't access the machines.
My terminal says my tun0 adapter is connected and the site Access Page says Im connected. But no matter how many times I try or regenerate an openvpn file - it won't ACTUALLY connect me - just says I'm connected.

Is this a thing anyone else is dealing with or just me??

[weary spindle]

That page is broken.

[thorn chasm]

The access page or the room page that says im disconned??

[old mesa]

Is there something specific required to make remote connections to windows machines work? Only getting a blackscreen after it initializes and briefly loads the login background

[weary spindle]

How are you connecting?

[weary spindle]

The access page

[old mesa]

Room machine, split view

Not RDPing, just link in browser

[weary spindle]

Can you screenshot?

[old mesa]

tried it with FF and Chrome

[old mesa]

What exactly? The page is black
There's really not much to see 😅

[weary spindle]

Well, a user is getting a white screen.

[old mesa]

Not for me 😛

[weary spindle]

What happens if you open full screen?

[old mesa]

Just says please wait for group policy client, loads picture for a sec, then blackscreen

this is full screen

I always pop the split view link into another window

[weary spindle]

Can you link the room?

[old mesa]

Core Windows Processes

https://tryhackme.com/room/btwindowsinternals

[weary spindle]

Have you tried to RDP in?

[weary spindle]

Do you still have the machine open?

[old mesa]

Not yet, but I'm looking at it now

[old mesa]

Yes

[weary spindle]

Can you DM me the URL/

This is my machine

[old mesa]

Strange

I did try chrome because sometimes things don't work on FF

[weary spindle]

I have a black screen with yours. Can you terminate and re-deploy if RDP doesn't work?

[old mesa]

I just redeployed, hopefully it works then

[plucky flare]

how do they ban it? like a country firewall or kind of

[weary spindle]

Ban what?

[plucky flare]

oops i was way up on the conv i think

didnt notice

[plucky flare]

lol i tought this was last message on updated chat

[weary spindle]

Oh.

governments can put in restrictions on the internet.

[plucky flare]

the whole of it?

like using the authoritative servers or smthing

[weary spindle]

Egypt is one of the biggest ones, they once blocked the full country from accessign the internet, now they just restrict the use of VPN's

[plucky flare]

ohh

wow

[weary spindle]

But this isn't the channel, or the server to discuss it

[thorn chasm]

So then that would mean there's something also wrong with openvpn - it says initialization sequence complete each time. So the site AND my local openvpn are wrong and there's nothing wrong with the machine I'm trying to connect to?? I don't understand

[plucky flare]

ok

Thanks for info @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1919)

[weary spindle]

Can you take a screenshot of what you're trying to do?

[plucky flare]

i start like u

[weary spindle]

Thanks, I like me too.

[old mesa]

Hm, worked this time - should have just tried turning it off and on again, sorry 😄

[weary spindle]

No worries!

you did the right thing imo

[weary spindle]

This is the broken webpage

[thorn chasm]

I'm not trying to do anything different, is the thing. It's the same routine as a 100 times before

[thorn chasm]

ok, I saw your reply too late

so what does it mean? I'm not really connected, I can't connect .. what do I do?

[weary spindle]

Can you show me the output of your VPN config?

[thorn chasm]

I can't get that to turn green as it usually does, nor connect to a machine

[weary spindle]

That gets the information from the page I linked.

So that is broken too.

[thorn chasm]

ok

the issue is getting narrowed down lol

So what can I do about it? none of my openvpn files are working

[weary spindle]

You're connected.

4 lines up from the bottom.

Can you visit http://10.10.10.10/ ?

[thorn chasm]

yes, I see that, but at the same time I see the red Access Machine chip I also see this ->

[weary spindle]

You can either;

a) visit the webpage I linked http://10.10.10.10

b) curl 10.10.10.10/whoami

c) ip a | grep "tun"

[thorn chasm]

so one says Im connected, the other - that feeds from it - says something different, openvpn says Im connected but I can't connect

[weary spindle]

What are you trying to connect to?

[thorn chasm]

The django room was the initial problem room but the same happens to the others I've tried

[weary spindle]

Have you done the steps above?

[thorn chasm]

flag{connection_verified}
yea

I'm going to try a different room again

[weary spindle]

Yeah, you're connected.

[thorn chasm]

yea, I've just gone into one of the OWASP top ten rooms and it connected right up ..
So the 'Intro to Django' machine is def down. There's at least one more too but I can't remember which one I tried right off

There's def something going on over there and what it is isn't exactly clear - I'm connected to the machine and can access it but the top banner still says I'm not connected while Access Page says I am - I'd have thought, and you confirmed, that they were connected to one another

[weary spindle]

Do you have a target IP?

[thorn chasm]

But that's a them problem, not a me problem since I am connected
Thanks for the help @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1921)

[thorn chasm]

In the Django room? yea, it was giving me an IP but I couldn't connect to the machine

[weary spindle]

Is it still active?

[thorn chasm]

no

do you want the IP

??

[weary spindle]

If you've terminated it will be useless.

[thorn chasm]

I think it's still saved as en env variable if you want it

[thorn chasm]

It's terminated

I can try again though if it will help debug a problem

give me a moment to start it again

It's starting up now. It's the Django CTF box in the Intro to Django room (unit 5)

so here's the IP of the new instance. I noticed it's forcing me to use HTTPS for this box
10.10.169.238

[weary spindle]

Are you trying to visit http://10.10.169.238 ?

[thorn chasm]

yup

can't

[weary spindle]

That's why.

I suggest you enumerate THM boxes with nmap first.

[thorn chasm]

yea, I know this. It's forcing me to use HTTPS and still won't connect

[weary spindle]

Port 80 is closed.

So you won't be able to connect to it using http or https

[fresh bear]

hi

why doesnt it work

[thorn chasm]

I get that, HTTPS is 443
I feel stupid, like I missed something
Is this box down?

[weary spindle]

You're going to have to give me alot of context.

[fresh bear]

what u mean

[thorn chasm]

He means your question is super, super vague

[weary spindle]

Port 443 is also closed.

[fresh bear]

i did verify and put my troken and it said usesr not ound

worked now

[weary spindle]

You're verified?

[fresh bear]

yes it worked noew

[weary spindle]

It was working beforE?

[fresh bear]

no i couldnt rank it said first my token not working and smth and i tried again and it said user not found but it worked now

i got rank 0x3 i was 2

[weary spindle]

The box is working fine.

You need to enumerate more.

[weary spindle]

There is a web server running on the box, that is working.

[thorn chasm]

I'm giving it a full scan now. I was stupid and was thinking 'just connect normally' - I misjudged what type of room it was

[languid pier]

Yo how did you make your terminal green

[plush bay]

depends on what terminal emulator you use but should be easy to set default text colour

[languid pier]

Hm I wonder if that works on Kali

Hacker green is what I call it

[plush bay]

yeah it does but not the same way as on windows

think kali uses gnome terminal

which would mean
edit -> profiles -> unamed -> colours

[languid pier]

Thanks

[naive dust]

Hi guys !
Actually i am studying in web fundamentals room but when i use attacker box and connect successfully i can't open connect with the website using the ip address of the machine. Anybody has the same problem?

[ivory spruce]

Can you share a screenshot of the issue you are having? Are you certain that the website running in the target VM is running on port 80 (http)?

You'll need to verify your account to post screenshots

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 5, 2024, 4:21 AM

[naive dust]

20 hours ago it was working , i will try to reboot my machine

[ivory spruce]

So you haven't restarted your target since?

[naive dust]

I never do , im on kali linux

the site yes , the machine not

[outer raft]

hi
i cant connect adenumeration with openvpn file
my error this: 2024-02-05 10:47:43 OPTIONS IMPORT: --ifconfig/up options modified
2024-02-05 10:47:43 OPTIONS IMPORT: route options modified
2024-02-05 10:47:43 OPTIONS IMPORT: route-related options modified
2024-02-05 10:47:43 Using peer cipher 'AES-256-CBC'
2024-02-05 10:47:43 Error: problem with tun vs. tap setting
2024-02-05 10:47:43 Exiting due to fatal error

[eager fulcrum]

@dense creek yes quite normal, this happens to anything internet facing.
Please don't post IP addresses stc especially ones that have malware on them

[ivory spruce]

Have you tried to reach out to THM Support? This seems to be a concern they would be the best resource to resolve or address.

[dusk vale]

yeah I did already 👌

[ivory spruce]

Just wait for them to reply. I'm not certain what the current response time is, but if you happen to send them another email before they respond, it will push your ticket down the queue.

[dusk vale]

I see, tysm

[bronze vale]

No you can’t. You have to delete and recreate your account

[fresh bear]

Hey

Idk which things on tryhackme i can use ssh on

[weary spindle]

If you're supposed to use ssh, you'll either get;

A) SSH credentials
B) hints to ssh credentials

[round cairn]

when i try to connect to the OpenVPN im getting this error:
Core exception: connect error: mbed TLS: cert certificate is undefined
help?🥲

[hard frigate]

Hello, any news on the AWS cloud environment ? Three days later and I still cannot access the environment, no answer through tickets too 😕

Basically stuck at resetting stage, I can connect to the account but i don't have the iam permissions to do anything on it

[stoic shell]

Hi, Is there any open thread discussion on a OpenVPN connection issue?
https://tryhackme.com/room/openvpn
Error Message: Connection Failed. Peer Certificate Verification Failure

[wind wedge]

Have you tried to regenerate your VPN?

[stoic shell]

yes

i tried with different servers and the same server I am getting different errors
Error1: Peer Certificate Verification Failure
Error2: Unsupported Options in configuration file

i have a challenge to complete as part of an assignment and this is blocking my work , any help would be great

[weary spindle]

Use the OpenVPN communities GUI app if you're in windows.

[fresh bear]

hey

picklerick is open ssh but when i try ssh into it i get permission denied (publickey)

[weary spindle]

You don't use SSH for that room.

[fresh bear]

but it has open ssh

what rooms do thats easy

[weary spindle]

just because it's open, doesn't mean it's in use.

[fresh bear]

:0

ur smart

wow

[weary spindle]

Eu reg 3?

[stoic shell]

i guess some certificate related issue in the configuration file generated with EU reg3 vpn server

is there a way we can override this certification check ?

[tribal mason]

You can try changing region and regenerating it

There's a known issue with the EU Reg 3

[stoic shell]

ok

[glacial hound]

SSH is available on many machines (even in the real world), but that doesn't mean you can connect with it, especially with the same default credentials. Imagine if every machine on the internet using SSH had the same credentials; it's wouldn't be very secure. SSH is used so that you can connect to a machine remotely, so this is something a company would want to secure as much as possible.

Some of our rooms taught you how to use SSH to connect to a specific VM we use to teach you a concept (for example, Linux fundamentals rooms), but if every single task VM on THM allowed you to connect to them via SSH with default credentials, then there wouldn't be much learning done.

A lot of the time (in Offensive security), the goal is to get a shell (initial access) on the target VM and to get that shell, you need to "hack" something (like a web server). Maybe down the line, during the challenge, you will find valid SSH credentials for a user and can use them, but you will need to work to find them; it's all part of the learning experience.

I think there is this misconception that you need to use SSH to connect to a room or machine to access the content.

Hope that makes sense 🙂

[fresh bear]

ohh ty:)

[tribal mason]

Thanks for the explanation Gonzo! I think a lot of users misunderstand the concept after solving a room that gives out the SSH credentials (:

[fresh bear]

Gonzo how did you become staff? do you know the owner?

[glacial hound]

Yes, I know, we are working on some ways to explain these things better 🙂 When I started using THM, I had very limited knowledge, didn't know anything about VMs, SSH, etc... So I know how crucial it is to understand these concepts.

[fresh bear]

cool

[tribal mason]

This is worth a pin, btw

[glacial hound]

I didn't know the owners, I sent my CV and the interviews went really well, and here I am !

[fresh bear]

wait is it a work

[weary spindle]

I tried for THM, failed,

Will try again soon enough.

[fresh bear]

or i mean job like is it a job and not a type of hobby or something in that type

[tribal mason]

Helping out people on discord isn't a paid job. I don't know what Gonzo is working as but yeah, they also might not want to provide information about it

[glacial hound]

For me? It's a job now, but I was a THM user before, and still use it to learn today 🙂

[half prairie]

hi

[fresh bear]

cool when did you start

[half prairie]

i have a question

[glacial hound]

But as Heap said, helping on Discord is voluntary 🙂

[fresh bear]

i see u did early

o since mars 5 2021 u started and still learn there

is it so much paths there?

[glacial hound]

Using THM since 2020 I think, and working here since August 2022

[weary spindle]

What's up?

[half prairie]

how to find out password of wifi my.... (people who lives opposite my house)

?

[tribal mason]

It'd be nice to see you here as a Staff Member (:

[glacial hound]

Quite a few lengthy paths, but also a lot of challenge rooms. I'm close to 250 rooms done, out of almost 800, so still a lot to do

[weary spindle]

Thank you!

It would 😉

[scenic torrent]

Gave +1 Rep to @tribal mason (current: #28 - 268)

[fresh bear]

woah

what did he do to get rep

[tribal mason]

This is a channel that is related to TryHackMe website support

[fresh bear]

i dont think he wants to know their password in a good way

[tribal mason]

Well, I wasn't meant to get a rep but that was a compliment

[fresh bear]

yes

[glacial hound]

You can knock on their door, and kindly ask them if you can have their password and if they are okay with you using their wifi 🙂

[half prairie]

thanks bro you are the best

how didnt i understood?

[stoic shell]

Hi, I changed to EU reg2 and it worked using OpenVPN GUI

thank u

[tribal mason]

You're welcome, happy hacking

[fresh bear]

hi

can u say some rooms i can do that i can use ssh in

[weary spindle]

Linux Fundemental 2 + 3.

[fresh bear]

i mean some that gives me more xp and like abit harder

[weary spindle]

Search SSH on the search

[fresh bear]

oki

would yall recommend kali linux or ubuntu to do tryhackme and use terminal for nmap and that

[tribal mason]

Well, not so much difference. But i'd go with kali if it's the only purpose

[plush bay]

kali linux in a vm is the easiest if you don't wanna manually install tools all the time... ubuntu will teach you more about how linux works over time though

[fresh bear]

oh okay ty

[plush bay]

no problems

[winged peak]

Hi. is the Holo network inaccessible for everyone? it says the room isn't public yet, I faced these type of issue first so dont know what to do.

[plush bay]

are you on a student plan???
are you on a business plan???
are you subscribed on the site(does not apply if the above part is true)????

[winged peak]

I am subscribed.

[plush bay]

then it should work

[plush bay]

you sure you are not on any student or business plan and just a normal subscribed user????

will throw a report up on the bug tracker anyways but lets see

[winged peak]

I am a normal subscribed user and can access every other subscribed room except this network

[plush bay]

yeah sent a report

hopefully they can fix it... it works for shadow but that is not useful right now

[winged peak]

what do you mean by "shadow"

[plush bay]

oh sorry about the confusion..... shadow is shadow... a person that refers to themselves in third person

[old geyser]

Any reason why "free rooms" are redirecting people to https://tryhackme.com/why-subscribe and not allowing access? Is there any workaround? I have a subscription, but am trying to help someone.

[plush bay]

[plush bay]

which rooms specifically???

[old geyser]

Windows Fundamentals 1, Linux Fundamentals 2, and Linux Fundamentals 3. Completely random though.

[plush bay]

ah yeah someone reported simmilar issues late yesterday.... sent another report

[wanton canyon]

I am also having this issue when I try to enter into Windows Fundamentals 1

[modern plover]

when i tried to log onto the same rooms it worked fine for me. Very weird

[fresh bear]

hieieiei

can i ssh in task3 linux fundamentals

[weary spindle]

The first room? No.

2 and 3. Yes

[fresh bear]

oki tyyyyyy

[fresh bear]

how do i get more colors its only purple and green

[plush bay]

edit -> preferences -> profiles -> untitled -> colours

[fresh bear]

where do i do that

[plush bay]

the terminal window does not have a list of options at the top???

[fresh bear]

i have prefrecned at file

[plush bay]

ah then it is under file

sorry about that

[fresh bear]

but i dont have profile

or text color

[plush bay]

headdesk

[fresh bear]

huh

[plush bay]

https://xkcd.com/627/

xkcd: Tech Support Cheat Sheet

'Hey Megan, it's your father. How do I print out a flowchart?'

kinda tongue in cheek with this but it really helps

[fresh bear]

huh

have to get kali again i ruined terminal colors in zshrc

[fresh bear]

can someone help me

why do i only have blue and type green color in terminal no matter what i type i dont get like purple when its a avaiable command

[weary spindle]

This channel is for TryHackMe site related issues, please use #general to keep this channel clear for such questions. 🙂

[fresh bear]

but i want more colors can u help me?

[weary spindle]

Please refer to the above message 🙂

[fresh bear]

i did but can you still help me

[flat leaf]

im unable to access the website https://LAB_WEB_URL.p.thmlabs.com ......it shows 504 gateway-time out in jr pentester path course /......please help me

[gleaming flume]

You need to start the machine with the green Start Machine button

[flat leaf]

i tried already, still working

[flat leaf]

stiil no tworking

[gleaming flume]

Well you then need to wait for the link to change and click the new link . Have you done this?

[flat leaf]

yes

[gleaming flume]

Could you send a screenshot? You'll need to verify to do so

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 6, 2024, 2:55 AM

[flat leaf]

i dont know how to send screenshot ? please

[gleaming flume]

The link I sent above shows you how to verify your tryhackme account which will then allow you to send a screenshot in this discord channel

[royal canyon]

im unable to access the website https://lab_web_url.p.thmlabs.com/ ......it shows 504 gateway-time out in jr pentester path course from yesterday / ....please help me

[gleaming flume]

You need to start the machine with the green "Start Machine" button and then the link will update and you will load that new link

[royal canyon]

Where can I find green "Start Machine" button

[gleaming flume]

It will be on one of the task pages, I'm not sure exactly where as I don't know what room you are doing

[royal canyon]

This one right

[gleaming flume]

No, that is for the attackbox, there will be a green button for the victim machines.

[royal canyon]

ok

got it

It's working Thank you

[sharp fox]

Hey guys

I am having trouble to connect openvpn

I installed configuration file from profile > access part, and opened my VM ( Kali LInux ) , and run the command on the terminal "sudo openvpn myusername.ovpn " , and I get below error

lol did not know that I can't add photos

I got this kinda errors "2024-02-06 03:30:24 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2024-02-06 03:30:24 TLS_ERROR: BIO read tls_read_plaintext error
2024-02-06 03:30:24 TLS Error: TLS object -> incoming plaintext read error
2024-02-06 03:30:24 TLS Error: TLS handshake failed
2024-02-06 03:30:24 SIGUSR1[soft,tls-error] received, process restarting
2024-02-06 03:30:24 Restart pause, 16 second(s)
e^C2024-02-06 03:30:40 SIGINT[hard,init_instance] received, process exiting
"

[tribal mason]

Which region is the VPN in?

[sharp fox]

EU-regular 3

[tribal mason]

Changing and re-generating it should fix the problem

[weary spindle]

Not for eu reg 3.

[sharp fox]

yeah, i just fixed changing to EU regular 1

[glossy rivet]

Is it possible to ssh into the AttackBox or Kali linux instances via the VPN ?

[weary spindle]

Yes

[glossy rivet]

basically I add the pub part of a key I have to the authorized keys to the non root user and ssh that way right?

[weary spindle]

No.

You open up the i in the Attackbox and take the password and ssh in.

[glossy rivet]

there is a password? I did not know

😅

[weary spindle]

#general message

[glossy rivet]

Got It Thanks

OMG All this time I had to suffer the slowness of my net because I wanted to keep notes on my machine and swapping tabs or using the split screen was not helping.

[fresh bear]

so im at Agent Sudo and to get a file i need to finish i and anotherthing i need to ssh into the agent user that i cracked the name and password of but when i do ssh james@ip it ask for password i take in right but get permission denied (publickey)

[fresh bear]

helpp meeee

[grizzled folio]

Hey guys im on the first lesson of intro to offensive security. Ive done the task and answered the question correctly but the section still remains uncomplete. Is this a bug or am i missing something? Any advice would be greatly appreciated

[tribal mason]

Can you try refreshing the page with CTRL + F5?

[grizzled folio]

I just tried it and the task still remains uncomplete

I got it. It was the section that requires no answering. You have to click on the no answer for it to count as no answer. Lol sorry for alil waste there

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 6, 2024, 11:39 AM

[tribal mason]

Is it one of the network rooms?

[weary spindle]

That's what I suspected 😄

[tribal mason]

Nvm.

[grizzled folio]

Lol

[livid gale]

Hi, I am trying to connect to the redstone capstone challenge but for some reason the vpn won't connect

I have regenerated the ovpn file twice but the result is still the same

[weary spindle]

Do you get a error?

Which country?

[livid gale]

Yups I get

```  and am from India

[feral hemlock]

Hi

Some days when I connect to tryhackme servers with the script it fails at the MTU test.

The OpenVPN connection will work but I won't be able to access tryhackme vms.

Am I doing something wrong or tryhackme is?

[weary spindle]

Do you have any other VPN's running?

[weary spindle]

Which country are you in?

[livid gale]

nops

just this one

[weary spindle]

Can you leave the room with the cog for 15-20 mins?

[feral hemlock]

Russia

[livid gale]

Cog ?

[weary spindle]

Russia may be blocking your access to the VPN.

[weary spindle]

Top right/

[feral hemlock]

The vpn works

But I won't be able to access vms

[livid gale]

left the room

[weary spindle]

So if it's failing at the MTU test what isn't working exactly?

[weary spindle]

This should put you in a subnet, when you re-join the room in 15-20 mins, regen your vpn file first, then download (I suggest deleting the others)

[livid gale]

Thanks will try and let you know how that goes

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1926)

[weary spindle]

Wait/

Hang on

I'm so dumb.

[weary spindle]

You still there?

[livid gale]

yups I am

[feral hemlock]

I came here to get an answer 😅

This doesn't happen every day. Yesterday everything was fine

[weary spindle]

Can you re-enter the room, download your vpn and connect?

[weary spindle]

I don't know what you're having an issue connecting to?

[livid gale]

let me try

[feral hemlock]

To the VM for the file upload vulnerability room

[weary spindle]

Can you ping it?

[feral hemlock]

The ping doesn't go through either

[weary spindle]

Can you visit http://10.10.10.10/ ?

[livid gale]

I get the same error again and isn't connecting

I can send a screenshot but I think it isn't allowed on this channel

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 6, 2024, 12:57 PM

[tribal mason]

You need to verify in order to send images

[feral hemlock]

No I can't.

[weary spindle]

What is the VPN output?

[livid gale]

got it

[feral hemlock]

Failed to connect

[feral hemlock]

.

[tribal mason]

That's not enough

[weary spindle]

Have you re-connected?

[livid gale]

I did but still having the same issue

[weary spindle]

Ok, Can you copy and paste the last 4 lines of the output?

[livid gale]

2024-02-06 07:54:32 net_route_v4_add: 10.200.116.0/24 via 10.50.113.1 dev [NULL] table 0 metric 1000
2024-02-06 07:54:32 Initialization Sequence Completed
2024-02-06 07:54:32 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 0
2024-02-06 07:54:32 Timers: ping 5, ping-restart 120

[weary spindle]

You're connected 🙂

3 lines up from the bottom,

Can you confirm an output in a new terminal window with the following command?

ip a | grep "capstone"

[livid gale]

ah ok sorry I think it is working

thanks for the help 🙂

[weary spindle]

No problem!

Have fun attacking my favourite network!

[livid gale]

Thank you 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1927)

[weary spindle]

Just one word fo advice, when you register with the ssh.

Write down all the details and save them, you won't be able to reset your own password.

[livid gale]

ah ok I will, thanks for the heads up

[livid gale]

I think there is some issue with my OVPN file. Even tho I have an IP address I can't seem to regester on the SSH server

nor can reach any of the machines that have been exposed

[weary spindle]

Can you screenshot in #red-team-capstone-challenge

Cc @tawdry orbit

[livid gale]

I have verified so can screenshot anywhere

what do you need me to screenshot !

Shall I DM you the screenshots tho ?

[weary spindle]

Nah, #red-team-capstone-challenge is fine

[gaunt prism]

Not sure if I am in the right channel but Could anyone help me with this issue:. The file breachingad that is generated when I try to download the openvpn configuration file for network is empty!

[delicate vine]

is there a url where i can remove payment details?

[weary spindle]

Check the pinned posts of this channel.

Should he chargebee

[delicate vine]

hmmm keeps declining bank says they arent seeing the transactions thought removing the old details which i cant seem to do to add the new would fix but it didnt

[frosty jay]

how to turn them off?

[delicate vine]

Go to the rooms you were doing and click terminate instance on the tab that had you click start instance

[frosty jay]

thx

[frail lily]

#pentest-plus-path message
not sure where to report wrong answers

[tawdry vortex]

Additionally, you can use the script in the pinned message for this channel to find all of the open VMs and close them for you, in case you don't remember which ones had been launched.
#site-support message

[frosty jay]

I terminated them but thats cool thanks ❤️

[scenic torrent]

Gave +1 Rep to @tawdry vortex (current: #273 - 17)

[naive dust]

do u need a openvpn to participate in koth if so where do i get the key?

[green basin]

does tryhackme ever reset your rooms? i swear i did this one but its saying i havent

[gleaming flume]

Only when there are updates to rooms

[green basin]

oh

[calm light]

I need some help

I wont let me like go into the room

I open the vpn but then its not letting me it, password not working

[ivory spruce]

1. Are you connected to THM OpenVPN?

2. What room are you working on? Can you a provide a link to it?

[ivory spruce]

Which room are you pertaining to?

[calm light]

yea I am trying to connect to the THM openvpn, I installed and like did it all but when I ssh then try to connect to it

it just says error

[green basin]

burpsuitebasics

[calm light]

for the password

how can I send the room link?

[ivory spruce]

It was refreshed last Q4 2023 to align with the current Burp version.

[green basin]

question

how do you just know that 😂

[ivory spruce]

It was mentioned in the THM newsletter / email.

[green basin]

ah, well thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #18 - 393)

[ivory spruce]

Just copy the URL of the room?

[calm light]

oh ok

https://tryhackme.com/room/operatingsystemsecurity

[ivory spruce]

Are you referring to the VM / target in Task 3? Have you clicked on the green Start Machine button?

[calm light]

yea I have started the machine and tried to enter the ip into my Linux terminal

should It take a long time for it to show anything

wai

twai

maybe

it keep on saying permission denied

when I try to type the tryhackme password in

[ivory spruce]

The password for each target will be different.

In that room, you are supposed to use sammie:dragon to login to the target VM.

[dusk aurora]

anybody help me with secretsdump in attacktivedirectory room?

never mind i got it

jesus christ impacket is such a mess on my linux, how can i clean this up?

[crisp osprey]

Not able to connect this AD room

Someone help

Connected Network VPN of exploiting Ad and also set my network configuration but still not connected

[crisp osprey]

???

[ivory spruce]

by network configuration, you meant the DNS?

[crisp osprey]

Yup I add the Domain ip of that room it's working yesterday but today not working

[ivory spruce]

so DNS is down?

[stray radish]

can i get a 3-4 days streak freeze as im going to have my internet problems for some days?

[ivory spruce]

streak freezes are earned once reaching a certain number of streaks or if there are promotions similar to when the Security Engineer learning path was launched.

You can, however, request THM Support to restore your streak by dropping them an email.

[stray radish]

will u get a streak freeze after reaching for 30 day goal?

[stray radish]

thanks

[ivory spruce]

Yes, but I think that is a 1-day streak freeze only.

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #18 - 395)

[stray radish]

👍

[stuck sorrel]

hi, is this normal?

Next Rank - Level13 36333/20000 Points

[weary spindle]

Yes. 🙂

[stuck sorrel]

will I ever reach the next rank?

[weary spindle]

Right now, you are the max rank. 🙂

[stuck sorrel]

ahaa

[golden hinge]

struggling to connect to vpn.

info:

Browser firefox
system linux
room network services 2

I have downloaded the openvpn configure pack, i have installed via sudo command open vpn, i have sudo openvpn the configure pack.

the access page says i have a connection,.

I can access 10.10.10.10

i click start room active machine information pops up, but i cannot get the access machines to show I am connected at all. am i on a wild goose chase here and that doesnt matter?

i also have sudo killall openvpn

curl 10.10.10.10/whoami and it returns an active ip address that matches the access page, but not the "active machine information" page on the THM box.

[glad oyster]

you are connected if you can access 10.10.10.10

how are you trying to access the room?

[weary spindle]

Your VPN/VM and Active Machine Information are two different machines.

[weary spindle]

The Acces Machines page is also currently broken, there is a fix coming soon™️

[golden hinge]

So should be good?

[weary spindle]

If you get a reply from curl 10101010/whoami you'll be fine

[golden hinge]

sounds good. guess the videos i was watching doing terminal things with open vpn were pre bug

thanks for the help jay and scrubz

[celest gate]

Hi. I created a new discord account as I'd like to keep this one focused on dev work. Could staff or a mod please help to revoke the discord token from this account when they have a moment, so I can verify on the new one? Thanks

[thorn sandal]

I just encountered an error with openvpn config for Enumeration Active Directory / adenumeration stating "Error: problem with tun vs. tap setting". Comparing a previous working config with the faulty one states that is was missing "dev-type tun". By adding "dev-type tun" the error were fixed. The faulty config was a newly regenerated.

[muted dock]

how can you see how much time do you have before you lose your streak?

[main estuary]

Hi, the download button for the wreath openvpn file doesnt work for me, it keeps just loading and then says there was an issue

[jaunty zephyr]

hello

i have been facing a technical issues where i'm trying to accessing some free course like intro to linux fundemntals part 2 and 3 also intro to lan and wireshark the basics as well

and it tells me that i need a premium subscribtion

while my friends who have a normal account not premium can access these course

[cloud wolf]

Hey, thanks. I've been searching for a while, especially for the Red Team Capstone Challenge (though strangely it worked very well for the machine part). Anyway, this version of OpenVPN for RTCapstone works on Windows 🥳

[scenic torrent]

Gave +1 Rep to @noble star (current: #1989 - 1)

[weary spindle]

hi there, staff are are currently implementing improvements and adjusting access to our rooms. As part of this process, some rooms are transitioning to free access, while others will be available exclusively to subscribers.
You can find up-to-date recommendations of beginner free rooms here: https://tryhackme.com/r/resources/blog/free-offensive-security-training

[main estuary]

I cant download the ovpn config for wreath or holo, im a subscriber

[runic meteor]

Hello, can someone give me hand to connect to AD network with my kali VM.

[misty dove]

Hi everyone. I found an error in room Linux Fundamentals, Task 7. The answers in these two are wrong, the operators are mixed up. It should be > for replacing, and >> for appending. Am i right?

Oh wait, I can't upload a pic 😦

Anyway, Linux Fundamentals, Task 7, 2nd and 3rd answers...

[ivory spruce]

You'll need to verify your account to do so.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 7, 2024, 11:45 PM

[ivory spruce]

Which AD network? Have you downloaded the ovpn pack for the said network? Also, do you have a streak of at least 7 days if a non-subscriber?

[ivory spruce]

This might be answer tolerance, I'll have to check mine later.

[bronze vale]

Refresh

[naive dust]

idk what happened but my openvpn is fucked up

when I try connecting to it normally like I used to do 50 times a day nothing would happened like the script run but on the top of my screen no ip showing and on the site it says that I wasn't connected

I tried downloading the .ovpn again but the site is giving me a empty file I don't know why

idk what to do

I don't think I did something bad with my pc

ok well when I change the server it's working like the file is not empty so idk if it's tryhackme that has his server down

the US-West-VIP-1 also is empty

[little bloom]

I am also having difficulties with the networking on the Attack Box. The ExploitAD and EnumAD interfaces are not showing up, even after a network reset + over 12 hours with several attack boxes:

The network config on the desktop seems to show the ovpn file as empty - not sure if that has something to do with this:

root@ip-10-10-227-122:~/Desktop/NetworkConfigs# ls -lathr
total 12K
-rw-r--r-- 1 root root 0 Feb 7 06:43 exploitingad.ovpn

[ivory spruce]

If it gives you an empty file, simply try to regenerate the ovpn configuration file.

[ivory spruce]

Ignore this 'Not Connected' status here and at the top right portion of the screen. It currently has an issue that THM Staff is already looking into.

[naive dust]

I tried regenerating it

And I couldn’t do a simple nmap scan or go to 10.10.10.10 so I know even it didn’t showed up it wasn’t working

Using a other server worked tho so I’ve been able to finish my room

Just some servers are down idk why

[naive dust]

hey so i just watched a walktrhrough and they knew the ftp pasword somehow without even doing any recon exept nmap, anything im missing?

[ivory spruce]

Depending on the box, the ftp service may be allowing anonymous logins - ftp:ftp, anonymous:anonymous, etc. You can do a search on the default passwords for anonymous logins.

[naive dust]

OH OKAY

sry caps

[ivory spruce]

#site-support message

[little bloom]

Thanks, although this seems to talk about if I'm using my own VPN (if I do that the vpn file generates just fine).? The issue I'm having relates to the Attack Box. Apologies if I'm missing something obvious here

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #18 - 400)

[ivory spruce]

Aahh.. apologies I got confused with other concerns. 😅

If you are using the Attackbox, there shouldn't be a need for you to download the ovpn configuration file.

There should be an instruction in the Exploiting AD room on how to set your DNS.

[little bloom]

There is instructions, but because the interface isn't showing up, they are no longer working. Additionally, I can see that the DC IP is unreachable (even with network resets etc). This all worked 2 days ago but it seems something has changed now. I have raised a bug request an hour ago but perhaps there's a way to use another Attack Box location etc?

[weary spindle]

Attackbox loca won't change.

Location

[hallow meadow]

Is it correct there is no nice way to link certificates externally or allow someone from the outside to verify it?
(The link "tryhackme-certificates.s3-eu-west-1.amazonaws.com..." is not great to share)

[weary spindle]

You can save them. 🙂

If it needs to be "verified" you can go to https://www.tryhackme.com/CODE

Replace CODE with whatever flag is in the bottom right hand corner of the certificate.

[hallow meadow]

Thanks 🙂
However, I just get 404's trying with URLs like that :/ Does it work for you?

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 1936)

[errant dagger]

Hi! I'm trying to connect to TryHackMe using OpenVPN, but it's not working out.
Can you help me?
I've already tried thm-troubleshoot. : https://github.com/tryhackme/openvpn-troubleshooting
It shows "Happy Hacking!" with no issues, but the website still shows a red indicator.
What should I do?
I'm using Windows as my host OS and I'm running Kali Linux on Virtual Box.

┌──(kali㉿kali)-[~/tryhackme]
└─$ ./thm-troubleshoot 


         _____           _   _            _    __  __
        |_   _| __ _   _| | | | __ _  ___| | _|  \/  | ___
          | || '__| | | | |_| |/ _` |/ __| |/ / |\/| |/ _ \
          | || |  | |_| |  _  | (_| | (__|   <| |  | |  __/
          |_||_|   \__, |_| |_|\__,_|\___|_|\_\_|  |_|\___|
                   |___/

Looks like you're running Kali                                          @MuirlandOracle


[-] Script is being run as a low-privileged user
Would you like to run this script with higher privileges automatically (Y/n)? Y
[sudo] password for kali: 
[+] Re-running with root permissions
[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[+] MTU value OK
[+] Connectivity checks completed!
[+] You are connected to the TryHackMe Network
Your TryHackMe IP address is: 10.8.32.250

Happy Hacking!

[weary spindle]

The access page is broken

[errant dagger]

This page ... https://tryhackme.com/room/blog

[weary spindle]

If you have the VPN running,

visit http://10.10.10.10/

[errant dagger]

Can't visit so I am confusing...

[ivory spruce]

You can visit 10.10.10.10 or the blog room?

[proud yew]

Hi team, just wanted to report if the ovpn from wreath room is not working? I always get a 0B ovpn file

Still don't work. I'll try again tomorrow.

[ivory spruce]

It hasn't been 15 minutes since?

[proud yew]

I think the redirect of the download button is the problem as it redirects me to a blank page?

I'll try my luck tomorrow haha

[ivory spruce]

The reason for leaving and re-joining the room after 15 to 30 minutes is for you to be assigned to another subnet.

[proud yew]

alright got it. is there a way to unjoin on a room?

[tribal mason]

You can leave the room with the gear icon at the top-right of the page

[proud yew]

thanks bro!

[upbeat bronze]

can someone help me with site issues ?

[tribal mason]

What's the issue?

[upbeat bronze]

Streak

[tribal mason]

Streak what

[upbeat bronze]

I dont know but i just enter my profile and my streaks are gone

[tribal mason]

You can e-mail to request your streaks back

[west chasm]

Student Discount

Article Link

https://help.tryhackme.com/en/articles/6494960-student-discount

Feb 8, 2024, 2:26 PM

[tribal mason]

Ok. Not this

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 8, 2024, 2:26 PM

[tribal mason]

There you go

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 8, 2024, 2:26 PM

[upbeat bronze]

I dont know really

Can u just dm me the email , because i cant see the email

[tribal mason]

[e-mail]

[upbeat bronze]

Thank you brother

@tribal mason done , what should i do now ?

[tribal mason]

Wait 😄

[upbeat bronze]

[golden hinge]

Room: Active Reconnaissance
OS: Linux
Using VPN

following up here, am also having issues with port 21, as you can see from the screen shot, the second call to port 80 called with out issue, just 21 is failing.

Report 1: ⁠site-support⁠ and didnt see a response.
Report 2: ⁠site-bugs⁠

Going to copy and paste this to site support as well to get more eyes on this as this channel seems to get less eyes likely.

[tribal mason]

For issues you have in a specific room, you post it in #room-help. For TryHackMe site general issues, you use this channel.

21 is the FTP port. So try using an FTP client.

[weary spindle]

Incorrect.

The room instructions state to use Netcat.

The FTP was closed when they attempted.

[tribal mason]

I see, my bad

[hard frigate]

Hello, sorry to be that guy but is there any way to contact support directly for AWS ?
I've been unable to use AWS Cloud Environments for almost a week now, and I'm pretty certain that the only thing there's to do is to reset the environment manually for it to work again, so I'm not sure why it takes so much time to atleast have more information than just "forwarding to the appropriate team" in a whole week. One week in the 3 month period is literally almost 30 bucks, I still have plenty of time to finish it but nevertheless that's still something

[glad oyster]

cc @tawdry orbit

[restive goblet]

Hey guys I am having issues connecting with ovpn on my kali linux vm. It says "connected" on the Access page but when I go to load a room up, at the top the "Access Machine" is red and it says I am not connected. I have tried downloading the openvpn file multiple times and setting it to different locations but nothing seems to work.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 8, 2024, 8:41 PM

[wind wedge]

Can you verify and send a screenshot

[weary spindle]

The access machine screen is broken

[restive goblet]

Just verified.