site-support

[light laurel]

try accessing 10.10.10.10

check if this is accessable

or else try downloading something if still problem then switch vpn

[quick kraken]

not working

how can i use another vpn?

[lilac imp]

not working

[quick kraken]

how can i combine another vpn with vm tryhackme

[light laurel]

https://tryhackme.com/access u can download another vpn from here

@quick kraken

or why not try with attackbox of thm , as cyborg is a small room u try it with attackbox as well

[light laurel]

click on your profile and then access

[weary spindle]

Box creator?

[north heron]

there's no such role

sorry

i didn't know

[quick kraken]

Attackbox, VM, works slower, and I can use AttackBox 1 time per hour, when I'll come home, I'll try another VPN, thanks 🙏🏿

[scenic torrent]

Gave +1 Rep to @light laurel (current: #2080 - 1)

[desert lava]

I'm trying to update my email to my academic email address, but that block is greyed out ... I presume because I use my google account to authenticate...
Is there a work around?

[cinder lotus]

does anyone know when i try to bruteforce an login page Ethically it gives me a wrong password

[desert lava]

I am trying to utilize the student discount on subscription

[weary spindle]

Youl need to contact supo

Support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 20, 2024, 1:57 AM

[weary spindle]

Which login page are you trying to break in to?

[ivory spruce]

To add on what Scrubz asked you, by "ethically", do you have explicit or documented permission from the confirmed site owner and other relevant stakeholders?

[pure rock]

Phishing Analysis Fundamentals -> Task 4 -> https://mediatemple.net/community/products/all/204643950/understanding-an-email-header
link not working

[weary spindle]

Forwarded to staff.

[weary spindle]

https://proton.me/blog/what-are-email-headers#:~:text=An email header is a,visible header at the top.

Here is an alternative

[pure rock]

The same task 4, 2nd question:
Once you find the email sender's IP address, where can you retrieve more information about the IP?

i tried to find on the internet info about any websites, didn't get anything in particular.
when i googled the answer for that it was http://www.arin.net; no idea how it is expected to get that answer.

[weary spindle]

You actually need to use the link you want access.

[weary spindle]

https://web.archive.org/web/20230323231252/https://mediatemple.net/community/products/all/204643950/understanding-an-email-header

You can use this link to see the old link.

[pure rock]

Ok, the last link has arin in it.

[weary spindle]

Which server?

Is there a other sever close you can try?

How are you connecting?

Can you add sudo?

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2277)

[desert lava]

Done. Thanks.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2279)

[hazy parcel]

why it doesn't show me the os

[weary spindle]

Does it give you the rest of the information okay?

[hazy parcel]

yes

but i need the os version, i belive its on the os

[weary spindle]

Strange, maybe retry, as it gave me the information.

You'd be correct.

[hazy parcel]

i think its a problem

or its normal

[weary spindle]

Attackbox or own VM?

[hazy parcel]

attackbox {kali}

[weary spindle]

Attackbox or Kali Web box?

(The attackbox isn't Kali)

[hazy parcel]

im using kali linux

[weary spindle]

Try the Attackbox, as it worked for me

[hazy parcel]

thx

[bright ridge]

i am able to view 10.10.10.10 and see my vpn/THM ip but unable to access machine. can anyone help me?

[weary spindle]

Which machine are you trying to access?

[weary spindle]

Are you still on the Kali web box?

[bright ridge]

no no sorry it was my fault actually. BTW thanks.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2280)

[marsh helm]

Hello. I have lost the access to my 2fa app and I have 2fa enabled in my account. How do I disable 2FA with help of THM support

[weary spindle]

You need to email Support.

[marsh helm]

I do not see an email id in the account. Is it possible if you can share please?

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 20, 2024, 2:27 PM

[marsh helm]

Thanks

[hazy parcel]

anybody help im trying over a hour , im at task4 Exploiting SMB , it does not work what is wrong with my line.

[weary spindle]

Look at your command.

It should be obvious.

[weary spindle]

Can you see it?

[hazy parcel]

no

[weary spindle]

//10.10.87.147/profiels

Can you see it now?

[surreal spire]

over an hour you say..

[hazy parcel]

tf? what is it

[weary spindle]

You've spelt profiles wrong.

[hazy parcel]

its time to get off

thx scrubz

[left geyser]

Hello,
have been trying to submit my write-up since yesterday, still same error. (invalid url)

[turbid plover]

Guys i have a question abt OpenVPN. So I'm connected on Kali Linux VM, I noticed when I type find my IP on browser it's still my IP. So how am I supposed to use this vpn?

[errant breach]

What's the URL you try to submit?

[left geyser]

https://medium.com/@MrHDK/cyberlens-5d39ea4ff23b

[weary spindle]

What do you need help with, exactly?

[turbid plover]

So I do OpenVPN username and it connects

But I can't type any commands in the terminal

[weary spindle]

Does the terminal say connection initlized?

[turbid plover]

Yes

[weary spindle]

Ok, just minimise that window.

[turbid plover]

Ok

Done

[weary spindle]

Now which room are you attempting to solve?

[errant breach]

just a guess: Is it because medium paywalls articles? no clue really

[turbid plover]

Windows privesc

[weary spindle]

Press the green start machine button.

[turbid plover]

Aight

Done

[weary spindle]

And you interact with the IP that appears

[turbid plover]

So connect to OpenVPN in terminal 1 then close terminal 1 and open terminal 2 and the connects to terminal 2 but not to the browser?

Like this is what I don't understand

[weary spindle]

Don't close it, minimise it.

If you close it, you close the connection.

[turbid plover]

Ok minimize terminal 1 and open terminal 2 , let's say I have to scan the victim machine

[weary spindle]

Yeah, you can use nmap for that

[turbid plover]

When I scan it from terminal 2 I am connected to the VPN and the victim sees the ip of thm?

[weary spindle]

Then it will allow it to be scanned as they're on the same network.

The VPN doesn't change your browsing control, it only allows the machines to talk to the other machines on the network

[turbid plover]

Aight thx, so after I connect to ovpn I always have the ip of ovpn on any terminal I use if I interact with the victim ip

Like for reverse shell I would use the ip of the vpn and i would see it on my terminal?

[weary spindle]

That IP is used to catch any reverse shells etc

It appears on the top right hand corner for me.

[turbid plover]

Yes I think I got it

Thx

[quick kraken]

working only us-west-regular-1

[white glen]

Does THM not accept Github links for writeup submissions?

[errant breach]

Yes, there's loads of them

I missed the "not". They are accepted.

[white glen]

I thought so as well, but I was getting a "this is not a valid URL" message when I was trying to upload one. Had to pivot to a tinyURL

[errant breach]

Unless something changed since they were all submitted and approved.

I just submitted mine without problems.

[white glen]

Hmm, must have been something with the URL itself then. Thanks for verifying!

[errant breach]

My URL is in #thm-community-media if you want to compare what might have been different

[white glen]

Yeah I think since mine had spaces in the name, it didn't like the %20s

[light laurel]

u mean u 're able to do stuff right ?

like nmap scans etc

[left geyser]

Same issue here, pelase if u know how to resolve it let me know

[white glen]

I wrapped mine in a tinyURL and submitted that way successfully

[surreal kelp]

are there known issues with booting windows machines in general? I can't seem to be able to control the windows machine, Guacamole Server Connection seems to be instable

[ivory spruce]

I haven't encounted issues booting / spinning up Windows targets in THM (though I only did a handful of them to date). Is there a specific room you are having an issue with?

[quick kraken]

pls someone can help me

[errant breach]

with?

have to be more specific

[quick kraken]

VPN Server working only US-West-Regular-1 but my ping becomes 350

Eu-1 not connect
Eu-2 Connected, but not ping 10.10.10.10, not working ip on ctf
Eu-3 not connect. infinite restarts

[errant breach]

I guess only THM staff could help you with that

[quick kraken]

ohhh, i see, i wrote on their mail, but their answer didn't helps me

i still waiting their next answer

[wild turret]

hie THM Team i am trying to run vpn on my main host kali linux os and it's not working ? help?

[quick kraken]

xd also such a problem

[ivory spruce]

Kali is not intended to be a daily driver so you might encounter issues later on.

However, how are you connecting to THM OpenVPN?

[ivory spruce]

When using EU-Reg-2, have you waited for ~2 to 3 minutes before you generated your OpenVPN config?

[whole creek]

ok, this is confusing, or i'm really stupid. Some of the rooms in THM, I can visit them without logging in. But if I'm logged in, it redirects me to the subscription page. (Like "Intro to Lan https://tryhackme.com/room/introtolan"). Are these rooms free or paid? I'm a complete beginner, learnt about THM recently.

[errant breach]

Here's a list of free rooms: https://tryhackme.com/r/resources/blog/free-offensive-security-training

"Intro to LAN" is not on it, so you'd need a subscription.

And that's despite that room showing up in the search as free and having Free Room. Anyone can deploy virtual machines in the room (without being subscribed)! at the bottom of the page. That's apparently out of date info.

So I was told.

[whole creek]

Hi! Thank you very much for this.

[scenic torrent]

Gave +1 Rep to @errant breach (current: #392 - 12)

[whole creek]

I saw one of my senior finished this room long ago. and he said he didn't pay for premium. Was this room ever free before ??

[errant breach]

I believe it was, yes.

[whole creek]

ok, that clarifies it. Thank you again.

[errant breach]

And they haven't updated the text since it was paywalled

Something I don't quite understand...

[whole creek]

yeah, there are a lot more like this.

[whole creek]

thanks for the list tho, i'm gonna stick to that.

[surreal kelp]

Windows Local Persistence https://tryhackme.com/r/room/windowslocalpersistence

[halcyon shell]

Hi Support. I can't access any room via openvpn. please help checking the log file. thank you.

[sick nexus]

Have you tried a different server?

[halcyon shell]

yes. i tired mutiple servers and different vpn and rooms e.g. exploitad , breachad , holo

[weary spindle]

Network vpn won't give you access to standard rooms.

[weary spindle]

Which country are you from?

[halcyon shell]

Hong Kong

normally i don't see this part on ifconfig :
"unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC)"

was running holo room and suddenly the connection lost and i tried reconnect then this happen

[weary spindle]

So it's an intermittent error?

[halcyon shell]

no idea. it just happen today

[weary spindle]

So yes.

Are you on a home network or other?

[halcyon shell]

home network

[weary spindle]

Which vpn do you normally connect to?

[halcyon shell]

wdym which vpn do i normally connect to?

personal vpn?

i can't use any openvpn file provided by tryhackme

[weary spindle]

No, openvpn server for TryHackMe.

[weary spindle]

You said this started today, which server did you use prior?

[halcyon shell]

only holo

INDIA server

[weary spindle]

Have you tried any of the VIP vpn's?

[halcyon shell]

no

[weary spindle]

Try EU-Vip-1

[halcyon shell]

seems working now. let me check the holo room again

is that any holo-vip vpn? or only the normal one?

[weary spindle]

Holo only has one VPN.

You can try using the cog button on the to leave for 15 min(s) and re enter with a new subnet, then ensuring your regenerating the configuration before downloading a new one.

[halcyon shell]

seems my room stuck.

where's the cog button? you mean let the room reset itself?

[weary spindle]

Nah.

Hit leave

[halcyon shell]

ok then i wait for 15mins to connect back

[weary spindle]

atleast 15.

Should place you on a subnet.

[halcyon shell]

thanks. will get back to you

[halcyon shell]

@weary spindle Same issue.

I connect to the holo-openvpn file but seems no connection to the server side

[weary spindle]

That page can be broken.

[halcyon shell]

I tried different physical desktop same issue happen

[weary spindle]

Do ip a

[halcyon shell]

I should be able to ping 10.200.108.33 (L-SRV01) and visit its sites but I couldn't process them right now

[halcyon shell]

i give up on using vpn. luckily still can use web kali for this room thank you for the support @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2284)

[brittle vapor]

Hello I have a question, does anyone know if a bug bounty learning path will be added to TryHackMe ?

[weary spindle]

Not at this moment, no.

[brittle vapor]

But could a learning path be added in the future ?

[weary spindle]

I mean, the majoroty of bug bounty is just owasp top 10, so who knows.

[brittle vapor]

okay no problem thanks

[wind wedge]

There is a web application path coming out

Which can be conidered somewhat as bug bounties

[autumn lynx]

With the current rooms being released, looks like a bug bounty path might be in the making... I'm not THM staff so I don't really know... But it sure looks that way 😎

Ahh nvm web app pentesting... Same thing tho 😉

[weary spindle]

I can't say what's in the making 😄

[crisp tinsel]

how accurate is the streak feature? I ask because I worked on rooms yesterday and i think i was at 12 or 13 days in a row. however, it has reset to 1 today. I think the issue has a lot to do with I'm in the US and days start and end at different times than THM...

[wind wedge]

Make sure no vpn is turned on and click this, it will take you the the dashboard and this should update your timezone https://tryhackme.com/api/user/update-timezone

Could be an incorrect timezone

[pine scarab]

hello some one can help me i can connect to vpn here is the log

"""

[autumn lynx]

Try using the us-west region, seen a lot of ppl having issues with OpenVPN lately

[pine scarab]

i change region for eu but dont work

here is the message

"""WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-05-21 13:32:00 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-21 13:32:00 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-05-21 13:32:00 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-21 13:32:00 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-05-21 13:32:00 DCO version: N/A
2024-05-21 13:32:00 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-05-21 13:32:00 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-05-21 13:32:00 Cannot load inline certificate file
2024-05-21 13:32:00 Exiting due to fatal error
"""

[autumn lynx]

Yea I know... Try using us-west though

Had some success helping others with this same problem using us-west ...

[pine scarab]

@autumn lynx is work thank so much

[scenic torrent]

Gave +1 Rep to @autumn lynx (current: #98 - 65)

[crisp tinsel]

thank you. who do i contact to get the streak back?

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #54 - 124)

[wind wedge]

You can email us at [e-mail]

[crisp tinsel]

thank you again!

[trim orbit]

I hope this is the right place to ask but every time I try and open any room I haven't done yet in the intro to cyber security room, I constantly get prompted to subscribe. I'm assuming its a free room so I'm a bit confused

[surreal spire]

its not free

[autumn lynx]

It could just be a premium room

[surreal spire]

first few are, but eventually for that path you need to subscribe

[trim orbit]

ohhh okay thanks for letting me know

[surreal spire]

it's worth it. i find the classes here are quite good. ive done stuff with this virtual machines i havent done in years 😛

[inner timber]

Hi guys. Can someone help with something pls?
Iam trying to connect to thm with openvpn. I already got my linux vm, i installed openvpn, i downloaded the machine configuration file, but when i try to do the command: "sudo openvpn /path/file-name.ovpn" i get a fatal error, because it couldnt load the inline certificate file
Idk what iam doing wrong. I watched a video on youtube and iam doing exactly what iam supposed to do, i think

[trim orbit]

Im thinking of getting it cause I'm going to be pursuing cyber security professionally anyways.

[surreal spire]

i run sudo openvpn from the folder tht contains the ovpn file

[inner timber]

Yah iam doing that, and i get the error... :/

[surreal spire]

but i recently added it to a script that specifies full path, still works

[hazy parcel]

can someone help me ?

im at task 4 of network services i cant get the info of the file

[surreal spire]

Try regenerating your openvpn configs

put filenames with spaces in " "

you've opened a file called "Working" in nano with that command

[hazy parcel]

i think its the right one but still

[autumn lynx]

Try using us-west region

[inner timber]

That worked!! Thanks a lot!

[scenic torrent]

Gave +1 Rep to @autumn lynx (current: #96 - 66)

[autumn lynx]

This should be in #room-help but you may have created a new file... What's the output when you run ls -la

[naive dust]

I keep getting error messages that I gave the wrong answer, but the answers are correct. Is this a known issue?

[crystal marlin]

Which room, task, and question you are doing?

[naive dust]

NVM, I was entering words not numbers.

[weary spindle]

Delete and get it again from smb

[polar hollow]

Hello,
I am new on TryHackMe.
I have completed the 'Network Fundamentals' module, all rooms are green.
There's nothing left open, but unfortunately, I haven't received my badge.
I would be very grateful if you could help me.
Thank you.

[turbid copper]

Hey so I lost access to my 2fa app but I still have the backup codes (which is how I was able to login) but now I want to disable it to put it on another auth. I went to settings but to disable it I need a 2fa code and my backup codes are not working. Can anyone help?

[sick nexus]

Does it give you an error?

[turbid copper]

it says the code is incorrect

[wind wedge]

You will need to email us at [e-mail]

[hasty cloud]

Task 7 of #exploitingad room. my attempt to use Rubeus tool failed with this error - [X] KRB-ERROR (16) : KDC_ERR_PADATA_TYPE_NOSUPP.

seems like a common issue here. anyone has a solution?

[surreal kelp]

I keep having a instable connection with the windows machine im on, linux works fine

[rotund steeple]

Just wanted you to know it is not only you, I'm dealing with same issue in only the burp suite basics room ( https://tryhackme.com/r/room/burpsuitebasics ) ; it's so laggy, i cant even complete it, unable to interact with answer boxes

Thanks for your comment, I was so confused by how bad the lag was I wondered if it was a site-wide issue but can confirm it's only that room

[scenic torrent]

Gave +1 Rep to @runic heart (current: #1385 - 2)

[spice nacelle]

attackbox is very slow

today

what i can do

[plush bay]

use your own local attack vm is an option
or wait for a while and see if it speeds up

[surreal spire]

https://www.virtualbox.org

[amber shell]

source room not working , ide room also

[modest fulcrum]

hii, im having some problems with thm machines, yesterday i started doing "fowsniff ctf" but the machine website cant be loaded even nmap scan is failed with 0 ports open, now i tried "source" room i still get same thing nmap scan with 0 port open, anyone have experienced with this? anyone knows fix or thm has some problems for now? also openvpn is configured

[modest fulcrum]

did you find solution?

[amber shell]

I think generally my network shit

But who knows?

[normal raven]

Hi when i terminate an attackbox, the machine is reset or not ?

[weary spindle]

Yes, it reverts back to the state it was blooted up in.

[normal raven]

Alright thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2290)

[worn wharf]

Thanks @autumn lynx for the help. I was having the same issue as @pine scarab connecting to the openvpen.

[scenic torrent]

Gave +1 Rep to @autumn lynx (current: #95 - 67)

[jaunty roost]

Have you noticed that the username and password are sent in clear text. What is the category of this security risk?

[ivory spruce]

Can you elaborate on what do you mean by "not working"?

Are you connected to THM OpenVPN when trying to access the machine / targets (unless you are using the Attackbox)?

[ivory spruce]

Have you tried doing a Google search on this? You should find a hint on what to look for. 😀

[sharp kraken]

hello, I'm facing an issue with my streak, on my dashboard, my streak near my profile is 170, and on the questions answered panel, it is 169, is it happening with anyone else.?

[errant breach]

afaik this is a known bug

[sharp kraken]

hmm... ok thank you

[scenic torrent]

Gave +1 Rep to @errant breach (current: #321 - 15)

[runic heart]

Yeah, I had that problem only using that rooom, is probably due to how the site is build and the use of gif videos that may take a lot of memory to load and play at the same time + burp suite is also using quite a lot of CPU

[errant breach]

That is so weird. Even on the tasks with lots of pictures I have no problems whatsoever, and that's on a crap machine with hundreds of tabs open in both Chrome and Firefox. Burp and VS Code are also open. Wonder what causes the different experience.

[runic heart]

now go on burp page

it has long gifs

that s the only noticeable difference

[errant breach]

I am on the burp page linked here

task 12 for example with the large animated gif

no difference here

[runic heart]

OS?

[errant breach]

Or task 14 with several

Win 10

[runic heart]

me and probably also the other guy were on Kali

if not I am left totally clueless to what might have cause that problem

[errant breach]

It's not as amazingly snappy as on my i7 desktop, but scrolls smoothly and far, far away from being unable to interact with it/complete tasks.

mystery

[runic heart]

fair

yeah is a total mystery then

[torpid patio]

Can any1 please help with VPN connection, I have this error:
VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe

[weary spindle]

Which server are you trying?

[thin heath]

How do I put the incorrect timezone back? lost a day in the streak in real time 😂

[weary spindle]

Wdym incorrect? lol

If you want to change your time zone, just use a vpn and log in.

Or E-mail support and ask them to reset it back.

[thin heath]

I was lurking the threads and I saw the way to fix the timezones, but since the TZ was originally on UK time and Im on US PT...I lost a whole day on my streak haha

its not a big deal really..

[weary spindle]

You'll probably be easier using support tbh.

[thin heath]

I see

email support and wait...or just answer another questions...hmmm decisions

[amber shell]

Yes

[weary spindle]

How much was your streak?

[weary spindle]

Which machine are you tyring to access?

[thin heath]

I was at 29. Today would have been 30 🥲

[weary spindle]

You can continue, ask support, and they will add it.

[thin heath]

Ok I’ll try it out. Thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2295)

[autumn lynx]

Try using a different region... I know the errors are not the same as the others but it could be the config file you've downloaded... I'd suggest using us-west ...

[tender basin]

just logged into my THM account showing different numbers in my skills matrix, is there anything I can do to make it go back to before?

[weary spindle]

Worse or better?

[tender basin]

worse 😦

im not sure of the exact numbers but I know I was in the 90s with linux and now its saying 45

[dawn token]

same

Before :

Now :

:/

[weary spindle]

They could have re-worked tags.

Which leads to this.

Remember, it's still in beta

[dawn token]

I see, thank you :)

[weary spindle]

Also new rooms get added too, which could make the number go down.

[dawn token]

I don't think it could go down that much just by having published 2-3 rooms x)

[weary spindle]

No, but tag changes and new rooms published would hit it quite a bit.

[tender basin]

is there a time line for when its out of beta?

[weary spindle]

Nah.

[burnt rivet]

o.m.g.

mine shrunk too. it used to look like a rat now it looks a distant NASA image from the outer universe

[tender basin]

a sad day..

[burnt rivet]

NASAs image of the day... on THM

[tender basin]

no skills matrix shrinking

[wind wedge]

Yes, it seems to have been updated I have asked for confirmation

[fiery owl]

guys I have a problem with my openvpn connection
when I try to connect it keeps connecting forever when I downloaded the troubleshoot sh script it said tun0 wasn't there

how do I fix it

I'm using pop os

[amber shell]

im connecting using openvpn, when i do nmap scan it will respond 0 ports open also there is a webserver on machine and it doesnt even loads when i enter on browser

My machine is linux pro max 14

[weary spindle]

Are you on the attackbox or vpn?

[amber shell]

vpn

Maybe vpn issue?

[weary spindle]

Is the vpn on?

[amber shell]

Yes

[weary spindle]

Can you confirm by doing ip a | grep "tun"

[amber shell]

$ ip a | grep "tun"
4: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.9.4.109/16 scope global tun0

[weary spindle]

And which machine are you tryign to access?

[amber shell]

You mean room

Source?

[weary spindle]

Yeah...

Is the room called "source" ?

[amber shell]

Yes

Bro thx for help @weary spindle

[weary spindle]

And how are you trying to connect?

[surreal spire]

Oh I though that was something I did, My Linux skill went from 65 to like 30

I'm like it definitely did not.

[tawdry orbit]

Hello, we're looking into this. 🙂

[modest fulcrum]

yo bro can you help me on that too, im having same experience he has

0 port open on scan result

and webserver isnt loading

i also connect with openvpn

pinging machine will give response

[crystal marlin]

What room are you doing?

[modest fulcrum]

"fowsniff ctf" "source" and "ide"

i tried these 3

and same thing

[ivory spruce]

How are you connecting to those machines or targets - OpenVPN or Attackbox?

Have you clicked on the green Start Machine button to spin up the targets?

[drowsy hound]

having troubles with my terminal in attack box. im on authentication bypass/logic flaw. I have written the curl code in and shows that the page source code is different but when i go to the website it hasn't changed. I don't understand i followed the instructions. if anyone could help me that would be great.

[weary spindle]

Which room are you doing?

[drowsy hound]

jr penetration tester > introduction to web hacking > authentication bypass

[weary spindle]

Did you do all the commands?

[drowsy hound]

yes. I did have to shut down the terminal at task 3 to go to a doctor appointment. would that have messed with everything for task 4?

[weary spindle]

I don't think so.

[drowsy hound]

okay ill try again from the start

[drowsy hound]

same thing changes in the terminal but not the website.

[modest fulcrum]

first i set vpn sudo openvpn name.ovpn
then click the green "start machine" button
after waiting 60 seconds, this ip 10.10.11.11 is shown
do nmap scan nmap -sCV --open -p- 10.10.11.11
and the scan result is "1 host (0 port open)"
also there is a webserver in port 80
going this website on browser http://10.10.11.11:80 is does nothing, browser says cant reach this page

[analog jungle]

hi, is anyone else feeling that the site is very slow? (my internet is fast 300mps> )

[weary spindle]

Go to http://10.10.10.10

[ivory spruce]

Doesn't seem to be slow on mine.

[ivory spruce]

What does the last few lines of the OpenVPN log say?

[analog jungle]

it's strange, when i ping thm the connection seems good

it got better now but i was struggling for an hour

[modest fulcrum]

alright i just tried doing all of this again today and it seems working now, but this was happened like for 3 days, i guess its somehow fixed?

thanks for responding

[tawdry orbit]

Hello, can you please recheck? 🙂

[weary spindle]

Mine is back to normal.

[dawn token]

Yes !! Thank :D

[scenic torrent]

Gave +1 Rep to @tawdry orbit (current: #16 - 444)

[tawdry orbit]

Awesome. 🥳

[primal silo]

https://tryhackme.com/r/room/introtooffensivesecurity?path=presecurity site doesn't load on my pc

Launcher is disabled in settings or current page does not match display conditions; this is the error in the console it gives me

Failed to load resource: the server responded with a status of 404 ()

[unkempt mortar]

guys can i do openvpn on ubuntu server on my laptop as a beginner?

[west chasm]

Connecting to OpenVPN on Linux and Mac

Article Link

https://help.tryhackme.com/en/articles/6496038-connecting-to-openvpn-on-linux-and-mac

May 24, 2024, 6:54 PM

[jovial wagon]

Hey guys. Is this normal:

[untold knoll]

Hello i am just getting started with hacking. Which learning path should i use? my goal is to just have fun and learn pen testing (i want a lot of labs)

[azure night]

Start with the basics Beginner rated and go from there. You can always go back and revisit areas you want to refresh, and explore new intros of tools as well

[ivory spruce]

What do you mean? 0xD is the highest level at the moment and you still earn points as you complete rooms.

[jovial wagon]

it still shows 0xD as the next rank. And also the points are on 20000+/20000

just wanted to know if that is normal

[ivory spruce]

You might want to take a test drive of the platform first:

#site-support message

You can then decide if you want to subscribe and complete the learning paths.

[ivory spruce]

Yep, it is.

[jovial wagon]

cool. Thanks

[vale jasper]

http://machine_ip/customers/signup can anyone connect to this? its for a task i'm on but I can't connect =/

[wind sage]

Nope.

[vale jasper]

okay, i'll just work on something else in the mean time. Thanks!

[timid talon]

You will have to start the machine attached to the task/room and change the machine_ip with the machines IP.

[vale jasper]

i see, it's saying I already have three open machines. Is there a way to see my open machines?

[timid talon]

Go to previous rooms you did to terminate them if you havent.

[vale jasper]

okay, thanks

[tawny river]

Event: Download denied
User:
User type: Initiator
Application name: brave.exe
Application path: C:\Program Files\BraveSoftware\Brave-Browser\Application
Component: Safe Browsing
Result description: Blocked
Type: Software that may cause harm
Name: HEUR:HackTool.Script.Inject.heur
Precision: Heuristic Analysis
Threat level: Medium
Object type: File
Object name: tasks?roomCode=windowsapi
Object path: https://tryhackme.com/api/v2/rooms
MD5 of an object: 5CD1E8EA01DF9420602ADB66A802CC2E
Reason: Expert analysis
Databases release date: 23/05/2024 8:12:00 PM

[tawny river]

First time getting this

is it a false positive

?

[ivory spruce]

#site-support message

[unkempt mortar]

do i need to make Port forwarding with openvpn server or not?

[ivory spruce]

There shouldn't be a need to do so. What issue are you having?

[unkempt mortar]

i just want to make sure, it's pain i don't want to do it

[thin heath]

Does THM support ever lurk these channels?

[bronze vale]

Yes

[thin heath]

Ok cool thanks!

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1245)

[ivory spruce]

Depending on your concern though, it would be best to drop the THM Support Team an email.

[thin heath]

I did, that’s why I was wondering if they checked the channel . And the answers are auto generated so can’t really explain what happened. I’ll just wait for the reply

[ivory spruce]

Oh.. THM Support don't work on weekends and if I remember correctly, the SLA on the response time is ~3 to 5 working days (I may be wrong though).

[thin heath]

Ah Yes that makes sense.

[tall flare]

hello i put Local Cache for an anwser to this question "Where is the very first place your computer would look to find the IP address of a domain?" it suppose to be right but it said Uh-oh! Your answer is incorrect

[ivory spruce]

Its not. If you read the task text, you'll find the answer there.

[weary spindle]

What makes you think it's right?

[errant breach]

It used to be what you entered, that's why it's in all the walkthroughs online. Then it was corrected without being transparent about it, as usual.

[weary spindle]

It's a community member created room...

[naive dust]

  .then(r => r.json())
  .then(vms =>
    vms.forEach(vm =>
      fetch('/api/vm/terminate', {
        method: 'POST',
        body: JSON.stringify({ code: vm.roomId }),
        headers: {
          'csrf-token': csrfToken,
          'Content-Type': 'application/json'
        }
      })
    )
  )```

Run this script in browser console

@iron idol

Yeah was reacting to a queston in General Scrubz xD

[weary spindle]

It's also in the hint section where they can get the answer.

[iron idol]

thanks

[scenic torrent]

Gave +1 Rep to @stiff barn (current: #173 - 37)

[iron idol]

although restarting the site works well too

[errant breach]

That's potentially an argument if corrections are made transparently in THM created rooms. Which they are not to my knowledge.

[weary spindle]

Not much of an argument, changes are addressed in the server in channels whenever people find them.

If THM implemented all the changes community members wanted they wouldn't have time to create new content.

[errant breach]

You misunderstood me. I wasn't talking about implementing changes in the first place but about being transparent when changes/corrections are made. The discord server where not even 1% of users are present and even less search the server history for every room they attempt, that's not transparency.

That paid-for rooms like Snort-Challenge1 have been blatantly wrong for >25 months despite paying subscribers reporting them several times over the years with zero feedback, that's an entirely different discussion.

[weary spindle]

Not one for this channel, #feedback-and-ideas please 🙂

[wind wedge]

Response will most likely be Tuesday or Wednesday as it’s a bank holiday on monday but it mainly depends on how many tickets we have

[slender latch]

yo

guys

[wind wedge]

Hey

[slender latch]

openvpn 6alal.ovpn
2024-05-25 13:52:36 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-05-25 13:52:36 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-25 13:52:36 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-05-25 13:52:36 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-25 13:52:36 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-05-25 13:52:36 DCO version: N/A
2024-05-25 13:52:36 OpenSSL: error:04800064:PEM routines::bad base64 decode:
2024-05-25 13:52:36 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-05-25 13:52:36 Cannot load inline certificate file
2024-05-25 13:52:36 Exiting due to fatal error

SOS

i cant login

[wind wedge]

Which server you on?

[slender latch]

EU 1

[wind wedge]

Regenerate and switch to EU 2

[slender latch]

bet

ok so its from eu 1 ?

cuz incase it happens to my frnds

[slender latch]

Worked thanks sm bro

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #54 - 125)

[thin heath]

No worries I completely understand. I just left details in an email for whenever yall get to it

[undone hazel]

Hello, the password reset part is not working, what should I do?

Hello, the password reset part is not working, what should I do?

[weary spindle]

If you're not getting an email you'll need to contact support.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 25, 2024, 5:29 PM

[undone hazel]

thank you

[dusky wing]

how can i disable the develop mode removing the button in the navbar?

[desert gull]

I have problems connecting via VPN, here are my Logs:

2024-05-26 15:04:47 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-05-26 15:04:47 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-26 15:04:47 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-05-26 15:04:47 OpenVPN 2.6.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-26 15:04:47 library versions: OpenSSL 3.0.10 1 Aug 2023, LZO 2.10
2024-05-26 15:04:47 DCO version: N/A
2024-05-26 15:04:47 OpenSSL: error:0480006C:PEM routines::no start line
2024-05-26 15:04:47 OpenSSL: error:0A080009:SSL routines::PEM lib
2024-05-26 15:04:47 Cannot load inline certificate file
2024-05-26 15:04:47 Exiting due to fatal error

I am using Kubuntu 23.10, OpenVPN 2.6.5 and OpenSSL 3.0.10

Fixed it, I had to swich VPN Server a bunch of times

[muted marsh]

Hello, I want to ask if the issuance of a certificate after completing the training is free or is it paid?

[wind wedge]

You need to complete all the rooms in the path to get the certificate. So you will need to have a subscription to the rooms then complete them before you can get the certificate

[muted marsh]

I have a paid subscription

i know i have to complete all the trainings

my question is whether this certificate is paid? 😀

[weary spindle]

Wdym?

Is it paid?

[muted marsh]

I don't know if it was paid. That's why I'm asking 🙂

[weary spindle]

It's paid as in, you need to pay for THM subscription to access the rooms on the path, as each path is not 100% free.

[muted marsh]

that's what i did. I have a paid subscription

[weary spindle]

Then you can access the rooms and get the cert.

[muted marsh]

Yes, I know this. But my question is whether the certificate must be paid separately from the paid subscription?

[weary spindle]

Oh!

Not at all.

The only the thing that is paid outside the subscription is the AWS path.

[muted marsh]

I understand. Thanks 👍 😀

[blazing spire]

Hello All, I need to report a room bug "httpindetail"

the very last task is not working "POST the username of thm and a password of letmein to /login"

can someone check it ?

[weary spindle]

More people are having an issue, I'll ping staff.

[short halo]

Yeah, I had a similar issue there aswell. Also the request area isn't updating when you add your parameters.

[blazing spire]

That makes 2 of us . Please check Scrubz . Thank you 🙂

[weary spindle]

I can't check, I can only let staff know.

[blazing spire]

ok

[short halo]

Where's the best place to report room bugs?

[weary spindle]

#room-bugs

[short halo]

ahh i see, missed it

[soft swift]

This is a general question about THM and AttackBox. Should I install the update? I didn't even think the machine was connected to the outside internet so I wasn't sure.

[errant breach]

The attack box is connected to the outside internet. Never installed the update, has never been a problem.

[soft swift]

Thank you!

[scenic torrent]

Gave +1 Rep to @errant breach (current: #245 - 21)

[calm wren]

I got the following error when i try to connect to the vpn:Fatal Error: Inline Certificate is invalid

I tried using different vpn servers and regenerating but it did not work. Any suggestion about how to solve it?

[nimble trench]

2024-05-26 19:59:10 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-26 19:59:10 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-05-26 19:59:10 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-26 19:59:10 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-05-26 19:59:10 DCO version: N/A
2024-05-26 19:59:10 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-05-26 19:59:10 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-05-26 19:59:10 Cannot load inline certificate file
2024-05-26 19:59:10 Exiting due to fatal error

Im having problems trying to connect to my openvpn

[somber gorge]

I can't connect to tryhackme's VPN on Kali Linux, as Fatal Error keeps appearing, how can I solve it?

[weary spindle]

Are you using sudo?

[weary spindle]

Only subscribers have an external network. 🙂

[ivory spruce]

Which THM OpenVPN server are you using?

[ivory spruce]

Which THM OpenVPN server are you using?

[somber gorge]

Yes

Do you think it could be because I have the Proxy installed?

[weary spindle]

Use proxy?

[somber gorge]

I have it installed

Do you think I should uninstall the Proxy and try to connect again?

[weary spindle]

Which proxy?

[calm wren]

I was trying all the Eu. But after trying more it got fixed

[edgy wigeon]

I think the thm website is slowing down my firefox

even selecting text is a pain

[errant breach]

In a specific room or everywhere?

[edgy wigeon]

Im doing aoc2023, I havent tried others

could it be due to using ublock origin

I see it is blocking domains in thousands

sometimes it goes up to 10k

[somber gorge]

I have proxychains installed

[weary spindle]

Thay could be an issue.

[somber gorge]

Do you think it would be good for me to reinstall Kali on my virtual machine again?

[topaz nacelle]

hi guys

I enroll in learning path pre-cybersecurity and in task 7 last question i encounter a problem that i can't find the login page, can someone help me with it pls

[weary spindle]

Which room?

[topaz nacelle]

it's HTTP in detail

[weary spindle]

Is this the post question?

[topaz nacelle]

yes, even if i do exactly like it asked, it shows me that cannot find the page

[weary spindle]

Known bug, staff have it in their list to fix.

Please just skip 🙂

[topaz nacelle]

😮

thank you very much

[sullen oriole]

proxychains Strict chain ... 127.0.0.1:9050 ... 10.200.113.31:445 <--denied
any idea?

[weary spindle]

Do you need proxy chains?

[soft swift]

Thank you!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2316)

[sullen oriole]

Need it to log in into SERV...

[pure rock]

Phishing Analysis Tools;
task 7: phising case 1.
Last question "What is the shortened URL? Defang the URL."
After i used cyberchef inside the machine for the task i got 19 urls, but the needed ones are
hxxps[://]t[.]co/yuxfZm8KPg?amp=3D=
or
hxxps[://]t[.]co/yuxfZm8KPg?amp=3D1

the answer is: hxxps[://]t[.]co/yuxfZm8KPg?amp==1

Why i didn't get that answer?

[dusky wing]

Hello!
how can i disable the develop mode removing the button in the navbar?

[crystal marlin]

https://tryhackme.com/develop-rooms

[fallow pulsar]

The network services rooms are set to private? Is that intentional?

[heady pine]

Hey, I'm trying to connect to the THM VPN using openvpn. I've followed every guide that I could find online and they all say the same thing and it isn't working. I keep getting a TLS error saying that key negotiation failed. I'm using openvpn-2.6.10 from the pacman package manager.

This is my log when trying to connect:

2024-05-28 00:36:11 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-28 00:36:11 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2024-05-28 00:36:11 OpenVPN 2.6.10 [git:makepkg/ba0f62fb950c56a0+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Mar 20 2024
2024-05-28 00:36:11 library versions: OpenSSL 3.2.1 30 Jan 2024, LZO 2.10
2024-05-28 00:36:11 DCO version: N/A
2024-05-28 00:36:11 TCP/UDP: Preserving recently used remote address: [AF_INET]52.4.198.155:1194
2024-05-28 00:36:11 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-28 00:36:11 UDPv4 link local: (not bound)
2024-05-28 00:36:11 UDPv4 link remote: [AF_INET]52.4.198.155:1194
2024-05-28 00:37:11 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-05-28 00:37:11 TLS Error: TLS handshake failed
2024-05-28 00:37:11 SIGUSR1[soft,tls-error] received, process restarting
2024-05-28 00:37:11 Restart pause, 1 second(s)
2024-05-28 00:37:12 TCP/UDP: Preserving recently used remote address: [AF_INET]52.4.198.155:1194
2024-05-28 00:37:12 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-28 00:37:12 UDPv4 link local: (not bound)
2024-05-28 00:37:12 UDPv4 link remote: [AF_INET]52.4.198.155:1194
^C2024-05-28 00:37:20 event_wait : Interrupted system call (fd=-1,code=4)
2024-05-28 00:37:20 SIGTERM received, sending exit notification to peer
2024-05-28 00:37:24 SIGTERM[soft,exit-with-notification] received, process exiting

and yes I'm running with sudo

[ivory spruce]

Rooms marked as private are either dated as determined by THM Staff, pending QA or Testing or those that were deemed by the creator as requiring an update or catered for certain users only.

[ivory spruce]

Which THM OpenVPN server are you trying to connect to?

[weary spindle]

They're not private.

They may be a subscription room now.

[main merlin]

Hey guys, i am a noob doing the wreath room on kali linux running via utm on a mac. After activating openvpn, tryhackme is still disconnected. Anyone could help? I tried all the troubleshooting that i found online. Thanks in advance 🙂

[weary spindle]

The access page or broken, ignore that

Are you using the wreath vpn?

[main merlin]

Yes

[main merlin]

Yes

[weary spindle]

Is your vpn file empty?

[main merlin]

No i check that

[main merlin]

In the task bar i see my new ip address after launching it but tryhackme says its not active

[weary spindle]

Which part is saying you're not active.

?*

[main merlin]

Top part where it says access

If i click on that it shows “disconnected”

And i couldnt continue with one exercise as it wasn’t giving me the complete results

[weary spindle]

That is broken ignore it.

[main merlin]

Oh ok. Can i send you a screenshot later to double check?

@main merlin
@.scrubz.

[main merlin]

Of the issue i was having?

[naive dust]

experiencing the same issue

[main merlin]

Dang

[main merlin]

Maybe there is no fix to it..

[naive dust]

shit how can we access it then?

[main merlin]

Maybe the attack box would be the only solution. But I would prefer to do it on my VM

[snow bobcat]

Hi, can anyone help me? I have 366 days streak today, but not get 365 days badges? Where I can send request. Thanks

[swift tendon]

Hello everyone! I am new here and i stumbled into a strange issue with the TryHackMe website.
In ALL of the rooms i try to complete that involve any website ON THE MACHINE ATTACKBOX the URLs simply take forever to load.
So out of the 1 hour i got i sit 30 minuetes in wait for a url to load for pentest.
I also tried the use OPENVPN to finish the rooms on my VM but to my anger that option too is blocked.
I need help i am way behind my class because od this and im desperate, please help me

[main merlin]

Same here with openvpn wreath network

[weary spindle]

Why is the vpn blocked?

[ivory spruce]

What he meant was the access page is broken, but you can still connect to THM OpenVPN.

[ivory spruce]

You could try dropping an email to THM Support

[west chasm]

@snow bobcat

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 28, 2024, 10:36 AM

[swift tendon]

@weary spindle @ivory spruce
The OPENVPN for me does not work, i even got a script from my lecturer to fix it and yet its still doesnt work.
I have to got to work now but as soon as im back ill upload both how the tryhackme site is slow and what errors i got while trying to connect with openvpn

I have already sent out an email for support on THM i hope they'll answer because im really angry at how this site treated me

[ivory spruce]

A few questions:

1. How are you connecting to THM OpenVPN?
2. What OS are you using?
3. Which country are you trying to connect from?
4. Is the connection you are using a home connection or managed by someone else?

[main merlin]

I have also sent a mail yesterday but heard nothing back yet. Let’s see!

[main merlin]

In my case:

1. With terminator
2. Kali Linux Via UTM
3. Luxembourg
4. Home Connection

[weary spindle]

Utmm

Utm?

[soft estuary]

Hello all, how could I expedite the response to my queries on THM portal? any email ID other than [e-mail] (regarding card details deletion and / or account deletion) for quick response

[weary spindle]

[e-mail] is the only way really.

[soft estuary]

okay, thanks

[weary spindle]

Don't email multiple times.

Just once and wait patiently

[soft estuary]

ok

[sage summit]

Hey, I'm trying to connect to the THM VPN using openvpn. I tried to connect first from Windows but it didn't work, even following the most common resolution guides and also regenerating the certificate, but nothing. I then tried to download it on my Kali Linux machine and it didn't work there too. When I try to connect it gives me the error (look at the last lines for the error):

Tue May 28 15:07:57 2024 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
Tue May 28 15:07:57 2024 OpenVPN 2.6.8 [git:v2.6.8/3b0d9489cc423da3] Windows [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on Nov 17 2023
Tue May 28 15:07:57 2024 Windows version 10.0 (Windows 10 or greater), amd64 executable
Tue May 28 15:07:57 2024 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
Tue May 28 15:07:57 2024 DCO version: 1.0.0
Tue May 28 15:07:57 2024 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25343
Tue May 28 15:07:57 2024 Need hold release from management interface, waiting...
Tue May 28 15:07:57 2024 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:58470
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'state on'
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'log on all'
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'echo on all'
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'bytecount 5'
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'state'
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'hold off'
Tue May 28 15:07:57 2024 MANAGEMENT: CMD 'hold release'
Tue May 28 15:07:57 2024 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
Tue May 28 15:07:57 2024 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue May 28 15:07:57 2024 UDPv4 link local: (not bound)
Tue May 28 15:07:57 2024 UDPv4 link remote: [AF_INET]18.202.168.160:1194

Tue May 28 15:07:58 2024 MANAGEMENT: >STATE:1716901678,AUTH,,,,,,
Tue May 28 15:07:58 2024 TLS: Initial packet from [AF_INET]18.202.168.160:1194, sid=3160291b 081412ab
Tue May 28 15:07:58 2024 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
Tue May 28 15:07:58 2024 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
Tue May 28 15:07:58 2024 TLS_ERROR: BIO read tls_read_plaintext error
Tue May 28 15:07:58 2024 TLS Error: TLS object -> incoming plaintext read error
Tue May 28 15:07:58 2024 TLS Error: TLS handshake failed```

Can anyone help me, please?

[heady pine]

US-East-Regular-1

i have also tried to connect to US-West-Regular-1 and I've redownloaded the configuration file for both servers

[swift tendon]

@ivory spruce i am unable to connect through OPENVPN i get an error on my VM
2 i am using a kali linux VM machine
3 Israel
4 home connection

I am running a script by MuirlandOracle that is supposetly resolving my issue, i would upload a screenshot but the server wont allow me

But that wont resolve any issue with the computer i still get an error message while i try to connect via openvpm
I have switched servers for all of the eu servers as well as tried to use attackbox but each comes with its own problems

Also redownloaded the files for each server seperatly multiple times

[main merlin]

Its a VM

[swift tendon]

Yeah

[swift tendon]

Ok i solved it, my classmate told me how to@main merlin
Now what you need is first to download the namefile for your openvpn
Then sudo openvpn [your name]
And as long as you didnt get an error youre good.
After that open a terminal and a THM page and press START MACHINE on THM (not start attackbox)
Then wait 2/3 minuetes and ping the IP adress THM gave you.
If theres a ping youre inside THM and can work with it.
Your browser is also in this so you can put IPs from THM to access in your browser
Worked for me GL fixing yours

[autumn lynx]

You could try downloading and using us-west region. That has seemed to help other user with connecting to OpenVPN. Whether it still works or is having issues also 🤷🏼‍♂️. But give it a shot

[main merlin]

Interesting! Thanks, will try this and get back to you

[scenic torrent]

Gave +1 Rep to @swift tendon (current: #2084 - 1)

[autumn lynx]

I would also try us-west region

[autumn lynx]

Also if you'd like to send screenshots you will need to verify first

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 28, 2024, 3:00 PM

[autumn lynx]

Can also just ping 10.10.10.10 and if you receive any packets then you are connected to THM network

[sage summit]

I don't want to believe it... it really worked! And I had stopped to try the only two European ones thinking they all had the same error at that point. A thousand thanks!

[scenic torrent]

Gave +1 Rep to @autumn lynx (current: #92 - 69)

[autumn lynx]

No problem

[autumn lynx]

#site-support message you can try this if you are still having issues connecting to OpenVPN

[heady pine]

i had already tried connecting to us west. and I redownloaded the config file for each server and did the change from cipher to data-ciphers

[autumn lynx]

Whats the error you get using us-west without editing data-ciphers..? From the output from above I do see errors but I also see sigterm...

If all else fails I guess you could always use an older version of OpenVPN before 2.5... probably not the recommended fix but it should work, I did this when OpenVPN updated a while back... @heady pine

[heady pine]

the sigterm was me pressing ctrl+c to stop the vpn

[autumn lynx]

Yea I know

That's why I asked what errors did you get without editing the config file of us-west ..

[heady pine]

i dont think I tested wothout editing the config for us-west, but every test I did resulted in the same TLS error after 60 seconds

[autumn lynx]

I would try us-west again without editing and see what errors you receive...

[heady pine]

ok. ill try it out when I can

[main merlin]

Do I have to install this even if I only have to use the wreath network vpn?

[autumn lynx]

Ahh with the network config files 🤷🏼‍♂️. I think using the attackbox would be able to connect to wreath network though.

[main merlin]

I know but I wanted to use terminal on kali linux. But i guess there’s no other solution so I might just do that

[autumn lynx]

Wonder if you could use us-west to connect to THM network then run attackbox and use attackbox as a jump box to connect to wreath 🤷🏼‍♂️. Haven't tried it but it might be possible.

[main merlin]

I get this when trying to open the config file:
sudo] password for kali:
2024-05-28 17:32:04 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

[autumn lynx]

You might be able to get it to work if you add BF-CBC to --data-ciphers and add the fallback option. Or another thing would be to revert to an older version of OpenVPN. Although idk if these are recommended but should fix the issue.

[main merlin]

Thx! I dmd you

[sage summit]

Sorry to ask again, I have started a virtual machine instance in a room but this machine is not connected to the internet in general. Is there any way to get me to send a file from the vm to my pc? PS. I am already connected to VPN and the ping between the two machines works.

[errant breach]

Target machines generally have no internet connection. There are ways to transfer files from them to your computer, but I don't know if that's within THM ToS

If you wanted to transfer a file to the THM attackbox, you'd use something like python3 -m http.server 8080 on the target and then wget server:8080/file on the THM attackbox

[sage summit]

I already tried it but there isn't python in the target machine

[errant breach]

Then SCP might make it happen

You could probably also copy&paste some C-code for a simple web server and compiile it on the target. If two machines are connected, it's almost impossible to stop you from exchanging files.
But if you had to go to such great lengths, it's probably not necessary to solve the room

[autumn lynx]

Is there python3? nvm I see that is what was suggested

[sage summit]

I can try, thanks

[scenic torrent]

Gave +1 Rep to @errant breach (current: #224 - 24)

[errant breach]

Out of curiosity: Which file do you want to look at?

[sage summit]

I would like to download a 1Gb digital forensic image from room/caseb4dm755

Otherwise for a text file I would have copied the text directly block by block at worst, as you suggested

[bronze vale]

We do not suggest that you take files from target machines. If they happen to cause damage to your machine, you are fully liable for the damages caused 🙂
Please make sure you are not helping users transfer TryHackMe educational material off the target machines.

We purposely make the files only available on the machines for your safety

[errant breach]

I pointed out that I do not know whether that's ok with THM ToS. Know I know the answer.

[sage summit]

Sorry, my bad for ask the question. It's just that the room is really interesting except that my professor had asked to rigorously use autopsy for the analysis of the image while the room has me create the image with FTK-imager and then also has it "analysed" with that

[errant breach]

Now you have a valid reason for not doing your homework

[sage summit]

Ahahahah of course that I have

[snow bobcat]

Done. Thx

[scenic torrent]

Gave +1 Rep to @west chasm (current: #176 - 36)

[heady pine]

@autumn lynx using US-West-Regular-1 with no modifications worked. Oddly enough, downloading the us-west config already included the data-ciphers tag, and now I can't remember exactly what modifications I made to it last time. I also saw an extra option in the us-west config called comp-lzo which had no effect when adding it to the us-east config

[fervent thistle]

how do i change it to usa?

[heady pine]

wdym

[forest matrix]

@white turtle

[white turtle]

I see，really appriaciate it

[white turtle]

hello guys ,here i met some problems: i wanna learn the lessons with my iPad,and when I logged in THM with the Ggoogle and switched the desktop site,then screen turnt into blank,is there some ways to fix it?

[weary spindle]

The website isn't really optimised for mobile devices.

[white turtle]

fine

actually i really you one day we can use an app LOL

[white turtle]

thanks for your response

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2325)

[muted hinge]

can someone help me with this error with connecting openvpn?
i cant send the image of it
Error message: Peer certificate verification failure

[weary spindle]

Which server are you using?

Which os and country?

[muted hinge]

I am now using windows - EU-Regular-3 - Czech Republic @weary spindle

I tried it on Kali linux and didnt works

[weary spindle]

Use number 2.

[muted hinge]

same error

[weary spindle]

Can you verify and screen?

If you're using Windows, can you use the communicaties OpenVPN please?

(Would not suggest hackin from your host.)

[muted hinge]

why

[muted hinge]

why?

[gloomy venture]

Hi, many task files fail to download in my system as my browser says the file is malicious. Is this expected?

[weary spindle]

Because you're placing your host computer on the THM vpn, although THM monitors all traffic, we can't (and won't) assure you that somebody won't try and mess with your system.

[weary spindle]

What are you downloading?

[weary spindle]

Remember many task files are malware, or mimic malware, and any hacking tools will be flagged also.

[muted hinge]

what vpn or proxy should i used

or is the safest

[gloomy venture]

Depends on the task. For instance, https://tryhackme.com/r/room/encryptioncrypto101 has rsa file in SSH Authentication task. This shows similar error

[gloomy venture]

No, I don't think I have been in any of such rooms until now

[weary spindle]

All the content you need to download will be safe to do so, just consider it false positive, if you're unsure.

Post in here/ping me and I can double check.

Ninja gives you signature so you can verify the file.

[weary spindle]

Your vm, for THM 🙂

[muted hinge]

kali?

[weary spindle]

Yeah

[muted hinge]

and what i should use for normal pentesting?

[gloomy venture]

Got it, Thanks! I didn't exactly understand the part where I can get signature. Can you please help me understand this so I can check from my end as well?

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2326)

[weary spindle]

Depends what you're pentesting, and if you written permission to do so.

But many use Kali in a vm.

[muted hinge]

but kali didnt masks your ip?

[weary spindle]

It doesn't no.

[muted hinge]

and what vpn is the best?

[weary spindle]

My bad, Ninja doesn't provide the signature for those rooms.

He does in a different room AFAIK.

[weary spindle]

Which ever suits your need as a user, this topic is for a different channe; (using a VPN and the openVPN won't work either)

[grizzled folio]

Hey guys im currently doing the introductory to network course. Im in the dig section. The question is where is the first place your computer would look to find the ip address of a domain. I type local cache. Then googled the answer to get local cache again but even when i copy and paste its incorrect. Does anyone know the answer?

[bronze vale]

#room-help

[stoic cargo]

Open vpn continusly giving me this error < SIGUSR1[soft,network-unreachable] received, process restarting , restart pause [..]sec > when I try to connect my local mechine with tryhack me. I'm using parrot os and Eu-VIP-1 openvpn configaration. Help me out of this.

[weary spindle]

Try eu 2

[stoic cargo]

Tried

But cann't connect

[weary spindle]

Which os and country?

@muted hinge Please no DM's without permission (Unless it's regaring another user and needs immediate attention)

[muted hinge]

it when you write i want to identify whats a problem. I think you want I send the screenshot of it

[weary spindle]

You can verify your account and post it in here. 🙂

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 29, 2024, 11:11 AM

[muted hinge]

okey

[stoic cargo]

parrot os and Bangladesh.

[ivory spruce]

Just to confirm, are you a subscriber?

[stoic cargo]

Yeah

[ivory spruce]

Are you using sudo when you run your OpenVPN command?

[stoic cargo]

Yes

[ivory spruce]

Although the error message you got says network unreachable, which shouldn't be the case.

[stoic cargo]

I'm using my mobile hostspot. It can be cause of this error.

[stoic cargo]

and also using breached network in my vm

[ivory spruce]

Oh.. if I remember it correctly, there should be a separate OpenVPN file for breaching AD

[stoic cargo]

Can you send the that link?

[stoic cargo]

should I switch NAT Network?

[ivory spruce]

It shouldn't be necessary. Have you joined the network?

[stoic cargo]

No

[ivory spruce]

You should join the network first, then click on your profile image, select access, in the screen, there should be a selection for machines and networks, select networks and you should be able to generate your OpenVPN config for it.

[stoic cargo]

I alredy generate openvpn configuration file 3-4 times also change server EU-VIP2 to VIP1. But Can't

[ivory spruce]

That is for the Machines

There should be a 'Networks' word right next to it.

[harsh coyote]

hi, how come i got the peer cert error when i connec tthe openvpn

[weary spindle]

Number of reasons,

which server are you tying?

[tepid bridge]

i am having issue with my attack box
in a room of AD enumeration but enumad interface is not showing

[weary spindle]

Please don't multi post in different channels, this is considered spam.

[tepid bridge]

ok

[static brook]

any ideas how to fix it

[errant breach]

Which of the >800 THM rooms are you talking about?

[broken bear]

also room questions should be asked in #room-help or #room-hints

It's just to keep things in places where you are more likely to get help

[harsh coyote]

tried few. EU, IND. i based in singapore

[hybrid portal]

Afternoon guys, I most often use my PC on a company owned network which blocks the use of OpenVPN. Does anyone have any advice for other options/circumvent this? I would use the in browser machine but it tends to run quite slowly

[weary spindle]

Attackbox is your only option.

Or ask the company to unblock port 1194

[hybrid portal]

Though that might be the case, thanks for the help

[short depot]

How can I view Certificates I have earned on THM?

[weary spindle]

Only by going the paths.

[jaunty roost]

Which stage of penetration testing involves using publicly available information? R:Information collection

[errant breach]

What is your question?

[weary spindle]

Osint, is the use of publicly available information.

[jaunty tapir]

hi, I'm having hard time connecting to openvpn with my kali machine in windows 11. this is the output after I run sudo openvpn <filename>:

sudo openvpn --config ||nigaroido||.ovpn
2024-05-30 12:44:59 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-05-30 12:44:59 WARNING: Compression for sending and receiving enabled. Compression has been used in the past to break encryption. Allowing compression allows attacks that break encryption. Using "--allow-compression yes" is strongly discouraged for common usage. See --compress in the manual page for more information 
2024-05-30 12:44:59 Note: --data-cipher-fallback with cipher 'BF-CBC' disables data channel offload.
2024-05-30 12:44:59 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-30 12:44:59 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-05-30 12:44:59 DCO version: N/A
2024-05-30 12:44:59 WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.7.
2024-05-30 12:44:59 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.240.194:1194
2024-05-30 12:44:59 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-30 12:44:59 UDPv4 link local: (not bound)
2024-05-30 12:44:59 UDPv4 link remote: [AF_INET]54.193.240.194:1194
2024-05-30 12:45:59 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-05-30 12:45:59 TLS Error: TLS handshake failed
2024-05-30 12:45:59 SIGUSR1[soft,tls-error] received, process restarting
2024-05-30 12:45:59 Restart pause, 1 second(s)
2024-05-30 12:46:00 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.240.194:1194
2024-05-30 12:46:00 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-30 12:46:00 UDPv4 link local: (not bound)
2024-05-30 12:46:00 UDPv4 link remote: [AF_INET]54.193.240.194:1194

this is my configuration file: config.bash

[naive dust]

i have the same error, still can’t find the answer for this question

[weary spindle]

Which server as this? (ignore the ping inroom help, this is the channel for VPN etc)

[autumn lynx]

You can try using the us-west region, that one seems to be working properly.

[autumn lynx]

^^

[jaunty tapir]

I fixed it

looked up the configuration file and saw that the <cert>[empty]</cert> cenrtification wasn't even there, so I tried some other locations and finally found the working one. Additionally I killed all the processes for openvpn, ensure you have only one when you do ps aux | grep openvpn

also ensure you first change location and then generate each time you download, otherwise the configurations will stay the same

[jaunty tapir]

funny part is that wherever I looked upon, I saw similar solution but only after digging into it, hence really understanding what causing the issue I was able to fix it.

[bitter berry]

idk why but it says that medium is an invalid url

[weary spindle]

try https://www.med... etc?

[bitter berry]

same

[errant breach]

When I submitted a write-up for Blizzard a couple of weeks ago somebody also ran into this problem. Don't know if they resolved it but it's not new. Github worked for me back then.

[vernal wigeon]

Is anyone expieriencing the site being unresponsive? Its barely taking up any memory and its the only page that keeps consistently crashing in my browser --please assume I checked/troubleshooted the obvious.

If you can @ me Id appreciate it

[vernal wigeon]

Could dark reader somehow be crashing the site/pages?

[boreal prism]

I am on the Linux Priv escalation room of pentest+ and the screen keeps freezing, none of my other windows in chrome have issues. I have to constantly exit the page and go back to tryhackme, anyone else have this issue? its never happened with any other room

[empty locust]

The same thing happened to me with the Linux Process Analysis room. Every 2 minutes, if I copied something to the clipboard, the tab would freeze and become unresponsive. The only solution was to exit and re-enter the page, as refreshing the page did not fix the problem.

[olive veldt]

Happening to me as well on multiple rooms now. Has made things take a lot longer to complete. The error code :Result_code_hung been doing labs most of the week and havent had this issue. =/

[ivory spruce]

It shouldn't be. Haven't had any issues with dark reader on since.

[boreal prism]

seems like they are having issues if multiple people are having the same issue today

[short panther]

I've been getting a ton of issues as well for OSI and a couple other rooms.

Exiting and re-entering the page has since stopped fixing it for me.

@olive veldt experiencing the same thing you are with the code_hung.

[vernal wigeon]

Thanks guys!

[vernal wigeon]

agreed

[tawny river]

Same here

[vernal wigeon]

I love THM but for some reason they deal with alot of issues 🤦🏻‍♂️

[naive dust]

Having same freezing problem with Linux Fundamentals room. Same problem in FF and Edge.

[arctic plank]

Why does my access page show "No connection" for OpenVPN but the VPN connected in the command line successfully ?

[ivory spruce]

Page is borked, so long as you can access 10.10.10.10, you should be good.

[arctic plank]

Aii bet. I just connected to US West to fix it lol

[burnt gale]

Hmm I thought I had an isolated issue when tryhackme tab started using a entire CPU core and pretty much crashing the tab.
but looks like others are also complaining on reddit.
Still looking for a way to reproduce but It happened twice

Also I don't think you had this much telemetry before but the telemetry from customer.io is making a little too many requests

and cpu spike to 100% happened again

[deft gulch]

I am trying to download my certificate after completing the Pre-Security Learning path but when I click on download it just shows fetching certificate, please wait message and then disappears. I am not able to download it at all.

[polar fossil]

I don't know, it's just me who has such a problem!
The room - "adventofcyber2023" works very terribly (slows down, freezes, reacts slowly, eats the ram resource)?
I did not notice this in the previous rooms of "Advent of Cyber".
Is this normal or is it being treated somehow?🤷‍♂️

[weary spindle]

Do you have an adblocker?

[visual remnant]

Hi guys, is it only me who experiences bad performance on TryHackMe? I had to reload page for 3 times in 20 minutes, it just freezes and I can't do anything, while the rest of the tabs in my browser and browser itself operate well

[visual remnant]

I have the same issue right now, but with burpsuite room, so maybe it's tryhackme who experiences some performance issues

[burnt beacon]

holaa, anyone knows how can i open a ticket ?

[ivory spruce]

You can drop an email to THM Support

[burnt beacon]

thankss

[west chasm]

@burnt beacon

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 31, 2024, 6:56 AM

[deft gulch]

I turned it off and still didn't work

[pliant heart]

I've had the same issue with the pages freezing in any room I've gone to. I've logged into THM in a VM using Firefox, on my own computer using regular Chrome, and in incognito mode. (All have duckduckgo extension)*

[karmic seal]

hey um my thm site keeps on crashing, I am running it on firefox and after 10 to 15mins it is crashing any idea why it is happening?

[weary spindle]

Certain room? (Burpsuite) or all rooms and website?

[karmic seal]

all rooms..

it is like site is crashing ..

[burnt gale]

basically pegs a CPU to 100% and crashes the tab. Likely rouge JS loop

haven't yet figured out what

[karmic seal]

yes kind off.. but rest other websites and applications are running fine

[burnt gale]

yeah all tabs being sandboxed helps there

shift+esc and sort by cpu usage you'll see your tab. Just end process and reload and I guess do that again in 10Minutes when it happens

[karmic seal]

its working now ... let me wait for some minutes ..

[burnt gale]

i don'thave the time to test it right now but you should probably also try it with all your extensions disabled just to make sure that it's not any extensions causing it.

[deft gulch]

Same problem

My firefox browser freezes for a while and can't use it at all

[visual remnant]

Same, in 20 minutes I had to reload the page for 3 times, I used Google and I didn't have any extensions

[karmic seal]

froze again

[karmic seal]

yup same

[burnt gale]

from my observation it happens when tab is left idle (switched to different tab) now once you click back on the tab it freezes pegging tab cpu usage at 100% (likely just a vcore)

[karmic seal]

so what should be done to prevent it

[burnt gale]

~~not sure i'm guessing

periodicallyClear() {
                to((()=>{
                    this.clear(),
                    this.loop && this.periodicallyClear()
                }
                ))
            }

this function might the one to blame an i'm seeing way too many calls to it in debugger but would take a bunch of time to actually debug~~

Might have found the culprit actually this time. It'll take some time for me to validate it

[karmic seal]

okayy

[wind wedge]

Hi all,

We’re aware of the issue and waiting for a fix. I’ll update here once I have an update

[burnt gale]

should be this

    function r(n) {
        return n <= 1 ? n : r(n - 1) + r(n - 2)
    }

which is called here

function l() {
        window.setTimeout(p, 500 * r(u)),
        u += 1
    }

anything above 40 as input to r(n) takes quite a while to compute

idk why window.setTimeout needed to be handled that way

@wind wedge ^

it's the tracking.g2crowd.com script so caused by 3rd party

lol didn't notice it but its trying to calculate nth fibonacci sequence?! (ooh i see it's trying to do exponential backoff )

problem is they're redoing a lot of calculations for the numbers instead of storing previously calculated fib numbers. which leads to way too many recursive calls

[burnt gale]

fixed it for myself. But i don't want to announce what to do here. cause it'll likely break some of their telemetry. Should wait for THM to actually make a temp fix until 3rd party vendor fixes it. Till then if you really want to the hints are above and it's a pretty easy step

[wind wedge]

Hi all,

The error should be fixed, please do hard refresh ctrl + F5

Let me know if there are any issues

[burnt gale]

yup script no longer being loaded. should fix the issue

[weary spindle]

You need to verify for a pic.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 31, 2024, 3:36 PM

[tall lodge]

okay one sec

[naive dust]

hello guys, i got a question
when i tried to start a machine in thm with openvpn (im using linux btw) i got this error

2024-05-31 10:31:09 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-05-31 10:31:09 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-31 10:31:09 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-05-31 10:31:09 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-31 10:31:09 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-05-31 10:31:09 DCO version: N/A
2024-05-31 10:31:09 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-05-31 10:31:09 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-05-31 10:31:09 Cannot load inline certificate file
2024-05-31 10:31:09 Exiting due to fatal error

pls help me fix it

[flint olive]

Hmm, boxes keep stopping and timing out after 1 hr, even if I extend the timer on them.

[runic heart]

so

cd into the folder where the vpn is located

do sudo openvpn filename.vpn

enter your password

after it is done close that terminal

if u control c it will close the openvpn

after you are done using it you can do kill openvpn

hope it works

[real bronze]

Can someone tell me how to access free rooms

[runic heart]

click on them?

[real bronze]

Every time I do I get redirect to the subscription page

[runic heart]

then those are paid rooms

[woven parcel]

I just need some advice

[weary spindle]

With what?

[woven parcel]

wrong channel, already posted on room-help 🙂

[errant breach]

The data on individual rooms that also shows up in the search is outdated. Rooms have since been made subscription only.

[errant breach]

Here's a list of actually free rooms: https://tryhackme.com/r/resources/blog/free-offensive-security-training

[autumn lynx]

Try using us-west region

[naive dust]

@runic heart thx man imma try it

[scenic torrent]

Gave +1 Rep to @runic heart (current: #632 - 6)

[naive dust]

Already tried but thx too

[runic heart]

np, let me know how it goes

[naive dust]

Here by "vpn" you meant my configuration File ?
Or the folder of the openvpn app?

Cuz the error occured when I ran openvpn myConfigFile.ovpn

I tried running the command inside the app directory but doesn't work either

[timid talon]

you will need sudo openvpn /path/to/file.ovpn

[vast fossil]

10.10.10.10 says i'm connected. the tryhackme site "Access Machines" is red, signifying I don't have access and I can't ping the target box. I've tried switching vpns. anyone else having trouble?

boo tryhackme booooo

[plush bay]

the access page is known to be broken for a lot of users.... they are working slowly on fixing it... if you can run curl 10.10.10.10/whoami you are connected

it will tell you your ip

if you still have problems connecting to machines when you can curl said ip shadow would point you towards the openvpn troubleshooting guide

[west chasm]

Troubleshooting OpenVPN on Linux and Mac

Article Link

https://help.tryhackme.com/en/articles/6496058-troubleshooting-openvpn-on-linux-and-mac

May 31, 2024, 11:39 PM

[vast fossil]

alright, thanks a lot

[scenic torrent]

Gave +1 Rep to @west chasm (current: #169 - 38)

[vast fossil]

thanks

[plush bay]

lul the bot got the reputation point

[vast fossil]

yeah, that sucks ;p

[green nymph]

bruh I lost my 19 day streak while doing it everyday

is there a way to like contact support for my streak back?

[errant breach]

You can write support an email and depending on circumstances they might reinstate your streak. Sometimes even if you missed a day.

[errant breach]

[e-mail]

[green nymph]

Thank you I am writing them a support currently 🙂

[scenic torrent]

Gave +1 Rep to @errant breach (current: #155 - 43)

[undone flare]

I have subscribed.
I'm trying to use /room/wreath, but I can't get the network settings.
Is it a known issue?
When I tried to download the VPN settings from the network tab on the "access" page, I got a whiteout while switching tabs.
Even if I start the dedicated Attackbox, wreath.ovpn on the desktop is an empty file.
I am connected to a general room VPN.

[ivory spruce]

I don't think there is a way to generate the certificate using the new design. You could try asking THM Support though.

[ivory spruce]

If you are generating an empty ovpn config file, you could try leaving the room for ~30 mins and re-join and re-generate your ovpn config file

[naive dust]

I have the path
What should I do next

[naive dust]

Update :
I tried chaging regions, after some attemps it worked but the new problem is that my ip network is different from the room's ip network so i can't practice

[weary spindle]

What do you mean?

You should have an Internet ip of 10.xxx.xxx.xxx which is fine.

The target machines and attackboxes are all 10.10.xxx.xxx

[naive dust]

i know
to test i tried the blue room

i tried to use nmap on the target machine

but it gives me an output like the target's not in my network

[naive dust]

.

here's my terminal output

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-01 04:50 EDT
Nmap scan report for 10.10.44.110
Host is up.
All 1000 scanned ports on 10.10.44.110 are in ignored states.
Not shown: 1000 filtered tcp ports (no-response)

Nmap done: 1 IP address (1 host up) scanned in 201.33 seconds

[wind wedge]

Unfortunately as off yet, there is no way to generate the new certificate

[ivory spruce]

What is your full nmap command?

[naive dust]

sorry i forgot to add it ^^'
here it is :
sudo nmap -Pn 10.10.44.110

[ivory spruce]

You are only scanning the top 1000 most popular ports

and the web service is running on a non-standard port

[naive dust]

that's what i was asked for in the 1st question of the room

[naive dust]

the https service is on the port 443

[ivory spruce]

I solved the room a few months back, but I'm pretty certain that's not the port you need.

[ivory spruce]

Which question?

[naive dust]

the first one

[naive dust]

i tried this room just to see if my vpn connexion works
but i still want your help on this one

[ivory spruce]

Ok, let's step back for a bit.

First, you wanted to see if your openvpn works, right?

[naive dust]

yep

[ivory spruce]

In your browser, go to http://10.10.10.10

[naive dust]

i tried that

im connected

[ivory spruce]

if it shows you your IP, you are successfully connected

[naive dust]

yes

[ivory spruce]

Next, you are working on blue.

[ivory spruce]

You used this command

[naive dust]

then i tried to scan the target ports

[ivory spruce]

By default, nmap only scans the top 1000 most popular ports

You need to supply another flag to instruct nmap to scan ports 0 to 65535

[naive dust]

hold on imma try

i tried this command
sudo nmap -p- 10.10.44.110
i got this output :

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-01 05:42 EDT
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.10 seconds

[ivory spruce]

By default, Windows boxes block ping requests, so try adding the -Pn flag as instructed.

[naive dust]

hold on ill try this

[naive dust]

if finally worked thx ❤️

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #13 - 568)

[naive dust]

thank y'all guys

[brittle parcel]

i wanna change my discord account

[weary spindle]

To a new account?

[weary spindle]

Can you dm the token and the THM account please.

[nocturne blaze]

Hi there, Just got premium subscription and got email receipt and went through on my billing method but my account does not yet reflect it

Please assist

[errant breach]

Tried clearing cache and cookies, then logging in again?

[nocturne blaze]

Yup

[weary spindle]

thm may be waiting for confirmation from your bank.

Shoot support an emailm

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 1, 2024, 4:14 PM

[nocturne blaze]

Will do. thanks.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2344)

[brittle parcel]

hello

i want to change my discord account

give roles to this dude

@slender latch

[weary spindle]

I already asked you to DM me your token the the THM profile.

[thin heath]

Checked the help center and didn’t find an answer but does thm keep account of hour many hours are logged? I know it does the 7 days but wondering if there is a total somewhere?

[wind wedge]

Only the 7 days. I can raise it as feedback when i’m back to have a total hours section. I know a lot that would like that

[weary spindle]

How would you count the hours though.

X hours spent on website
X hours of machines deployed

Or both?

[wind wedge]

I would imagine take the average hours out of the rooms/tasks as some room have an estimate time it will take to complete

[stable charm]

i cant use the attacker box for a while
the attack box got to much screen lags its not possible to use it
and no one answer me
i feel like i pay for free i swear

[ivory spruce]

Have you considered using your own VM? Also, from which area are you connecting from? How fast is your ISP?

[stable charm]

i'm from israel

but i'm subscriber for the attack box i got kali vm but its more comfortable to use this attackre box

i feel like i drop my money for free , and i got fast ethernet

[thin heath]

🫡

[naive dust]

Guys, I wanted to ask a question about the Takeover exploit

Can I or not

[ivory spruce]

Is this related to aTHM room?

[naive dust]

👍

[grim ruin]

Figured it out

[feral delta]

hi, in my THM account my ranks aren't increasing eventhough i have more points. so as above ss my points is 26k which is crossed the max point of level 13 which is 20k.
how can i resolve this issue? is it form my side or THM's?

[wind wedge]

That's intentional, level 13 is the highest rank

[feral delta]

understood, Thank you ❤️

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #54 - 128)

[keen anchor]

hey, I am a complete beginner here.
I started with the "pre security" path and as I progressed I noticed that some of the rooms in there are locked behind premium. So, I wanted to ask some queries about that:

1. Will I still get my certification for completing the free part of the module or will I need to purchase the premium and complete premium rooms as well for it ??
2. In the future, I am aiming to land an internship/ a role in offensive security. So, is the free content on the site enough to get me the practical knowledge required to get some entry level roles or internships in this field ??

[ivory spruce]

You will need a subscription for completing the learning paths.

It depends on the role you are applying for. Do note that THM is catered for beginners so you will need to build upon it further. It can get you started, but it will depend on you what you do with the knowledge you gain from it.

[half rock]

Hello

so i may or may not been using a random name as a 'full name' on the site

so when i downloaded my certificate i got that name instead of my actual one

and even when i changed it on my account after completing the certification it still didn't change

so i got something like this 😭

please help 😭

[languid pier]

Don’t think you can change it

It don’t really matter tho

[half rock]

it looks stupid 😭

[languid pier]

😂

[half rock]

LMFAO

[languid pier]

You’re lol now

[half rock]

well

i guess i'm lol

[ivory spruce]

What @languid pier said. It will reflect in your succeeding certificates though.

[half rock]

i changed my name to my actual one now

so if i finish another it should appear correctly right ?

[acoustic inlet]

I am connecting to the vpn i downloaded so i can access the rooms through sudo openvpn but no luck. Log: ```2024-06-02 15:19:08 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.129.195:1194
2024-06-02 15:19:08 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-02 15:19:08 UDPv4 link local: (not bound)
2024-06-02 15:19:08 UDPv4 link remote: [AF_INET]18.202.129.1:1194

[earnest salmon]

burp suite : the basics room , kinda laggy for me , can't type or even open a task , I'm using firefox , any idea how can i fix this lag ?

[acoustic inlet]

2024-06-02 15:19:07 TLS Error: TLS handshake failed

[ivory spruce]

That is correct.

[ivory spruce]

Which THM OpenVPN server are you connecting to?

[acoustic inlet]

EU Reg 1

[half rock]

alright thankss

[ivory spruce]

Try EU-Reg-2, wait ~2 to 3 minutes upon changing the VPN server before generating your OpenVPN config file.

[ivory spruce]

Are you using the Attackbox or your own attack VM (e.g., Ubuntu, Kali, Parrot, Arch, etc.)? Using your own VM and connecting via OpenVPN will help

[acoustic inlet]

Worked. Thank you.

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #13 - 570)

[earnest salmon]

tried another browser fixed the problem idk why firefox so bad on tryhackme

[errant breach]

There was an issue the other day with a script that slowed down browsers. They fixed it but might still be cached in your Firefox.

[runic heart]

it doesn't really matter and you can't change it unless you write an email to support

you can change your name in the profile section

[weary spindle]

What?

[runic heart]

you can't?

[weary spindle]

Nope.

Once they're generated that's it, you'd need to use photoshop

[runic heart]

im they are the only ones that I supposed could generate another one

https://tenor.com/view/nodding-soyjak-pissluffare-soy-gif-25061889

just as scrubz said

[tiny plaza]

hey

how can i get courses for free on TryHackMe

[ivory spruce]

What do you mean by courses?

There are free rooms that teach you concepts that you can join and complete without being subscribed.

#site-support message

[tiny plaza]

yes i meant rooms

[errant breach]

Here's a list of free rooms on thm: https://tryhackme.com/r/resources/blog/free-offensive-security-training

[tiny plaza]

im still new

Ty