site-support

[short jungle]

i am unable to connect to openvpn

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-06-02 19:33:11 TLS Error: TLS handshake failed

[ivory spruce]

Which THM OpenVPN server are you trying to connect to?

[terse geyser]

i need help
i can connect to openvpn i can ping 10.10.10.10 but still its showing not access in thm

[ivory spruce]

So long as you can connect to 10.10.10.10 and it shows you your tun0, you should be good. The access page is broken at the moment.

[terse geyser]

but i cant access the machine_ip:8088

lab 17 of owasp 2021

[terse geyser]

can you help me with that?

[ivory spruce]

Can you share the last few lines of your OpenVPN log? 5 to 6 lines should do.

[terse geyser]

2024-06-02 19:04:16 ROUTE_GATEWAY 192.168.212.109/255.255.255.0 IFACE=enx865b9a4116bb HWADDR=86:5b:9a:41:16:bb
2024-06-02 19:04:16 TUN/TAP device tun0 opened
2024-06-02 19:04:16 net_iface_mtu_set: mtu 1500 for tun0
2024-06-02 19:04:16 net_iface_up: set tun0 up
2024-06-02 19:04:16 net_addr_v4_add: 10.9.0.43/16 dev tun0
2024-06-02 19:04:16 net_route_v4_add: 10.10.0.0/16 via 10.9.0.1 dev [NULL] table 0 metric 1000
2024-06-02 19:04:16 Initialization Sequence Completed
2024-06-02 19:04:16 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 52, compression: 'stub'
2024-06-02 19:04:16 Timers: ping 5, ping-restart 120
2024-06-02 19:04:16 Protocol options: explicit-exit-notify 3

[ivory spruce]

Oh wait... did you click on the green Start Machine button attached or referred to the task you are working on?

[terse geyser]

nope

[ivory spruce]

Yes, this says you are connected.

[ivory spruce]

That's the issue then.

[terse geyser]

there isnt any

[ivory spruce]

Which room and task are you doing?

[terse geyser]

wait its in task 2

Thank you

its working now

Thank You @ivory spruce

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #13 - 573)

[short jungle]

REGULAR-IN

[ivory spruce]

Try the AU or EU-Reg-2 server and wait for ~2 to 3 minutes after changing your VPN server before generating your ovpn config file.

[short jungle]

let me check

[short jungle]

for AU openvpn says "initialization sequence completed" but i cannot ping thm machines and on the access page it says i am not connected

[ivory spruce]

The access page is broken.. Also, what specific THM machine are you trying to send a ping request to?

[jovial rampart]

I got some serious tribble with openvpn

[ivory spruce]

Can you describe the issue you are having?

[jovial rampart]

Sure, so sometime when I use openvpn I see "packet HMAC authentication failed" this error

Also my internet is fast

[ivory spruce]

Sharing a screenshot of it would enable me to assist you easier. Also what THM OpenVPN server are you using?

[jovial rampart]

sure

[jovial rampart]

i don't know exactly what server i am using

[ivory spruce]

Can you try to go to the Access page in THM and try to re-generate your ovpn config file?

[jovial rampart]

yes more then 4 times i delete the old file and download it again , but after some time the same issue started

[ivory spruce]

It (where you generated your config file) should show you which THM OpenVPN server you are connecing to.

[weary spindle]

https://www.tryhackme.com/r/access

[jovial rampart]

wait i will show you

[jovial rampart]

IN-Regular-1

[ivory spruce]

Can you try connecting to any THM VIP OpenVPN servers?

[jovial rampart]

no

[ivory spruce]

Well, its up to you. Being a subscriber, you can access VIP OpenVPN servers which offer better speeds than normal ones.

[jovial rampart]

can you guide me how i can use this ?

plz

[ivory spruce]

In the dropdown where you saw IN-Regular-1, there are other OpenVPN servers in the list that includes VIP servers. After selecting the VIP OpenVPN servers, you can generate you ovpn config file after waiting ~2 to 3 minutes.

[jovial rampart]

Okk i will definitely do that

[soft swift]

Room Upload Vulnerabilities - I am try to follow the instructions and install Gobuster. I am getting this error. Am I doing something wrong?

[errant breach]

First run apt update

[soft swift]

That worked but I'm still getting the same error. Do I need to "upgrade" the packages?

[errant breach]

Wait are you a thm subscriber?

[soft swift]

Yes

[errant breach]

Did you try if it's already installed? Room text mentions Kali but the attackbox is not Kali. I use ffuf so I don't remember. And I always mix up dirbuster with gobuster 😄

[errant breach]

That would only upgrade already installed packages.

[soft swift]

I ran this and it seems to be already installed, correct?

[errant breach]

Yes that's it

[soft swift]

So this may be a really dumb question but if I use THM and "start the machine" and start the "AttackBox" is that Linux or Windows?

[soft swift]

Thank you!

[scenic torrent]

Gave +1 Rep to @errant breach (current: #135 - 50)

[errant breach]

The attackbox is a custom Ubuntu linux. You can run lsb_release -a for details.

[soft swift]

Thank you.

[soft swift]

So one last question when I am reading through THM rooms and it says something like this. I am going to follow the Linux commands, correct?

[errant breach]

If you're using the attackbox in the browser: the Linux commands, yes.

[soft swift]

Thank you for your time and help!

[errant breach]

By the way you don't need to use sudo on the attackbox since you're automatically logged in as root user, the equivalent of Administrator on a Windows computer. As such you have full permissions to do anything.

[tidal spire]

hello need help subscribing to premium from india , subscription using card/paypal not working

[weary spindle]

Please don't multi post.

[tidal spire]

ok sure

[rich lantern]

Hello, i have an issue with thm server, i'm using openvpn, sometime i cant ping the server, and sometime i cant, does this happen to anyone else? Thanks

[crystal marlin]

What room and task you are doing where that happens?

[rich lantern]

https://tryhackme.com/r/room/agentsudoctf

i tried in my VM and it was not stable, now i have openvpn on my mac, and sometime i lost conection

[crystal marlin]

So it's not stable with your mac either?

[rich lantern]

no =/

[crystal marlin]

Can you verify to be able to send screenshots, and potentially show me some screens e.g. of what you mean exactly by losing connection, and/or how pinging is not working?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 3, 2024, 6:56 PM

[crystal marlin]

Also, it's best to stay with your VM, if it's some sort of linux machine, as troubleshooting might be easier there

[rich lantern]

ok, i will verify my ccount, and send you screenshot, thanks

@crystal marlin account verified, do you want screenshot by dm or here ?

[naive dust]

I think they want it here :p

[crystal marlin]

Uhm, where are you trying these pings from?

Looks like you tried from various places?

[rich lantern]

i have starlink, but i can use internet without issue, just my ping is not stable.

[crystal marlin]

Okay, I meant more like, are all these screenshots from your VM, because these seem to be all different kinds of terminals?

It would be best if we stick with your VM to troubleshoot, otherwise it's getting confusing

So in your VM, can you show me the output of running ip a

[rich lantern]

on my VM, linux dont show when connection is stuck (even with -w1 )

so the blank space is when i press enter because nothing happen

[naive dust]

And what if you do ping 10.10.10.10?

[rich lantern]

same behavior

[naive dust]

mhh interesting

What if you ping 8.8.8.8?

||Google ip||

[crystal marlin]

Can you provide me with the output I asked regarding running ip a please 🙂

[crystal marlin]

And you are only connected to the Tryhackme VPN within your VM, not on your host machine aswell?
And/or any other private VPN on your host machine?

[rich lantern]

i try both

and i dont use other VPN

[crystal marlin]

Well make sure the TryHackMe VPN is only running within your VM, not on your host machine as well

[rich lantern]

yes, when i test on my mac, i stop on VM and i suspend it

[crystal marlin]

Also always make sure you only have a tun0 interface when checking ip a and not any extra like tun1, tun2 etc.
If that's all set, try running sudo ip link set dev tun0 mtu 1200 while being connected to the TryHackMe VPN within your VM

After that, try to ping again to see if it improved

[rich lantern]

i have only tun0, command passed, and i have the same behavior:
64 bytes from 10.10.10.10: icmp_seq=177 ttl=63 time=48.0 ms 64 bytes from 10.10.10.10: icmp_seq=178 ttl=63 time=89.2 ms 64 bytes from 10.10.10.10: icmp_seq=179 ttl=63 time=219 ms

[crystal marlin]

What about to ping 8.8.8.8 as ACME mentioned?

[rich lantern]

no issue

[crystal marlin]

Did you pick a VPN on the https://tryhackme.com/r/access page that's the closed to your location?

[rich lantern]

yes , EU-Regular

[crystal marlin]

Okay one last thing, try sudo ip link set dev tun0 mtu 900
Then run ip a and show me a screenshot of that, then try to ping again

If that's also not helping, then I'm not too sure what might cause this, but most likely due to starlink somehow

[rich lantern]

and same behavior, ok i understand, thank you for your time !

[crystal marlin]

Sure not a problem, sorry we couldn't solve it

[tall scroll]

ChatGPT is your best friend😁

[hardy fox]

I'm having trouble with Burp Suite (Edit: The Basics) room - it barely works. I don't know if it's the gifs that take so much resources, but I've checked other rooms and they work fine, as always. My CPU is more than enough for handling websites, but in this room everything went laggy ah, I can't stand it

[timid jungle]

Hi, I am trying to finish Request Smuggling lab but when I start the machine I still got the response from the web app: Method Not Allowed. Is there any thing else I should run ? THe same error message I got when access the lab/machine via VPN

[weary spindle]

Error 405 is the wrong IP in use.

You need to start the machine with the green button, which is normally, but not always, in Task 1.

[timid jungle]

I started the machine and updated /etc/hosts with machine IP address

and still I have the same messsage

[weary spindle]

Can you give me the ip please?

[timid jungle]

one sec I'll try to do it one more time from scratch

@weary spindle 10.10.16.221

[weary spindle]

Can you share the room?

[timid jungle]

sure

@weary spindle how can I do this?

@weary spindle ok, it works fine - I notice where I made a mistake

sory for bothering 🙂

have a nice day!

(I thought that attacker's machine is the same machine with running app - RTFM ;))

[stuck lily]

Hi, not sure if this belongs here, I had redeemed a voucher about 2 weeks ago for a month, my subsription got cancelled ( not by my choice) and now I can¨t access premium rooms, even though I should have 2 weeks left of the premium, I tried sending a message on the site but it hasn't been answered in anyway.

[weary spindle]

I don't think you can cancel vouchers?

You'll need to wait for support to reply.

[stuck lily]

Okay, thanks, do you know the operating times of the support on the site? if not, no worries.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2353)

[naive dust]

I think it was maximum 7 days

But not sure

[weary spindle]

No, I think some of support aren't UK times as long as they work within 4 hours of 9-6 and the UK I could be wrong.

[wet pecan]

Heeeelp

I'm upto Windows priv esc. I'm on task 6 at the moment and the start was not good

I spent hours fixing python3 issues which was resolved after hours of research

[naive dust]

#room-help :p

[wet pecan]

i think it's technical issue

i used python3 instead of python3.9 to do SMB

and i keep getting this error message

[-] SMB2_CREATE: share/sam.hive,578,[Errno 13] Permission denied: 'share/sam.hive'

i will go to room help

[formal edge]

Hello, I am Marquise Prudence

I am doing SOC Level 1. I am stock at Phishing Analysis Fundamentals

Can someone help me, please?

[naive dust]

Just ask your question :)

[formal edge]

I tried to get the answer to this question, but to no avail.

In the above screenshots, what is the URI of the blocked image? Here is the question

Here is the other question, In the attached virtual machine, view the information in email2.txt and reconstruct the PDF using the base64 data. What is the text within the PDF?

[topaz shadow]

hi i am presently thinking to get a premuim but it shows the pricing in pounds but my currency is in rupees if I pay it with my credit card will it change the price to my local currency or will any problem occurs?

[haughty sphinx]

Guys my attackbox has become really slow. Even tried clearing history , updating browser. Still not working

[still knoll]

hello I am doing Insekube machine but only port 22 seems to be up

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-04 17:45 BST
Nmap scan report for ip-10-10-200-249.eu-west-2.compute.internal (10.10.200.249)
Host is up (0.038s latency).
Not shown: 999 closed tcp ports (reset)
PORT   STATE SERVICE
22/tcp open  ssh

Nmap done: 1 IP address (1 host up) scanned in 0.91 seconds

the machine is it broken ?

[weary spindle]

Did you try all ports?

[still knoll]

yeah I scanned with -p-

[weary spindle]

Port 80 should be open, how long is the machine up for?

[still knoll]

20 min ago

[weary spindle]

Is the machine still up?

[still knoll]

yep

[weary spindle]

Is the ip correct?

[still knoll]

I terminated that one

and using a new one : 10.10.204.60

this one spin it up like 10 min ago

[weary spindle]

I'll let staff know

[still knoll]

thanks !

[weary spindle]

its being looked in to

[still knoll]

any updates ?

[green nymph]

Yes it would change to rupees. It was in euros when I bought it and converted to usd when I bought it with my cc

[topaz shadow]

tq

[still knoll]

any updates @weary spindle still don't see the HTTP service ?

[weary spindle]

Not sure when staff will get a chance to address it

[hard quest]

Hello, could I relink my profile to discord?

[still knoll]

how long I should wait for that port to be set ?

[ivory spruce]

You'll have to politely ask a mod to do it for you when you spot one of them online.

[weary spindle]

Relink with a different account?

[hard quest]

yeah, I deleted the old account that's linked right now and made a new one

[weary spindle]

You mean Tryhackme account?

[hard quest]

yes

i think so

[weary spindle]

Yeah, your account is deleted. 🙂

[hard quest]

so is that an oopsie?

[weary spindle]

Nope. 🙂

Makes my job easier.

[hard quest]

okay perfect

and what are my next steps? im a little rusty

[weary spindle]

I've unlinked your account/

Just verify with your new one.

We use /verify now

[hard quest]

thank you!!!!

[quick scarab]

need help on a bug

[errant breach]

Ask.

[quick scarab]

am on the room intro to research, but when i am writting the answer, its telling me than the answer isnt good

[errant breach]

Most likely you got the wrong answer then.

[quick scarab]

i search myself and i looked on a walktrough cause i finished everything exept that one step

[errant breach]

Walkthroughs are not always right.

[desert fulcrum]

hey

i want help~

[versed vault]

I have a paid subscription with the site but it wont let me use my premium account

[errant breach]

If you open this while logged in to THM
https://tryhackme.com/r/manage-account/subscription

does it say Status Active?

[versed vault]

no its asking to subscribe but i already paid for the premium version. its suppose to be active

[errant breach]

Then contact support [e-mail]

Ideally with the email address you used to sign up and pay.

[versed vault]

thx Im waitin on a response

[errant breach]

@broken bear

[tall fog]

hello when i try to use openvpn, use the configuration file and try to connect it gives this error message why Wed Jun 5 12:07:06 2024 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
Wed Jun 5 12:07:06 2024 Sent fatal SSL alert: unknown CA
Wed Jun 5 12:07:06 2024 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
Wed Jun 5 12:07:06 2024 TLS_ERROR: BIO read tls_read_plaintext error
Wed Jun 5 12:07:06 2024 TLS Error: TLS object -> incoming plaintext read error
Wed Jun 5 12:07:06 2024 TLS Error: TLS handshake failed

[kindred stirrup]

2024-06-05 12:08:15 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2024-06-05 12:08:15 Exiting due to fatal error

Tried to connect via openvpn but I can't. the THM page tells me I'm connected though but I cannot nmap the target machine

[tall fog]

fixed mine by changing servers

[kindred stirrup]

tried but I stay connected on the other server

closed the terminal and restarted my system but still connected with openvpn

[weary spindle]

Which server are you trying to connect to?

[astral nexus]

If a Room has lots of files to download, is there an easy way to do that on an Attackbox? If I try to login to THM on the attackbox I've only got a couple of seconds to hit download before the screen resizes itself in a crazy hall-of-mirrors effect. alternatively I've tried downloading files on my machine and emailing them to myself to get on the attackbox, but I'm not wanting to download any files that might flag the virus scanner (on a work machine).

[weary spindle]

There is not no.

Which room are you doing?

[astral nexus]

Reversing ELF (which has a ton of files)

Thats cool, I was just curious if I was missing somethign obvious 😉

[weary spindle]

If you can link the room, I can host them on a server for you.

[astral nexus]

Thats very kind, thanks https://tryhackme.com/r/room/reverselfiles

[weary spindle]

If you open the firefox in the attackbox and visit http://10.11.5.163:9090

[astral nexus]

Brillant, thanks very much 🙂

[weary spindle]

Double check firefox let you download them, it might have blocked them.

[astral nexus]

I got all the files thanks

[weary spindle]

🙂 Np.

[kindred stirrup]

Thanks for the effort. I already made it to completely disconnect from all openvpn servers and establish a new connection which worked👍

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2358)

[soft swift]

If I start an AttackBox does that mean my computer is "siloed" from whatever I do in the AttackBox and I don't have to worry about viruses or anything bc it is walled off from my real computer, can't harm it and erases when I shut it down?

[weary spindle]

Yes.

Anything done in the attackbox stays there, then it resets on termination

[soft swift]

Thank you! Ok great! So I'm safe from harm as long as I terminate. Does that also apply to VM's I use on my computer outside of THM?

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2359)

[weary spindle]

With VM's there are minor risks with breakouts and stuff.

But nobody want to burn a 0day on a random.

[soft swift]

Understood! Thank you! I realize that was bit out of scope so I appreciate your imput!

[weary spindle]

No worries, its better to be safe than sorry.

I use multiple vms for different use case.

1 for hacking, 1 for malware analysis

[inner valve]

I have a question, I started not long time ago and I got the intro to cybersecurity completion cert with my nickname, I want it with my name but I cannot select it anymore I also tried to reset the room, is there a way to choose again?

[weary spindle]

No, you can't

Once they're generated that's them

Any changes will be made on future certs

[inner valve]

Oh okay, absolutely no way to do it?

[weary spindle]

Photoshop 😄

[inner valve]

official way* 😁

Thanks man

[vestal sequoia]

hi i joined discord to report a suspicious activity while learning in a room , while opening a port to trensfer a file from attack box to a windows server

[timber storm]

When dark theme?

[plush bay]

are you a subscriber???

[naive dust]

Hey Tryahackme

Hey I was checking the Threat Intelligence Tools room

The answers of the first section URLSCanio part is different from what the exact answers should be

As they already mentioned sites are dunamic and results may vary over time, the accepted answers I was checking in someone's writeup seems to be different from wha actual result of scanning the told website on urlscan.io.

[stoic dust]

how to connect to vpn everytime i do it it gives me this "2024-06-05 21:19:39 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-05 21:19:39 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-06-05 21:19:39 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-06-05 21:19:39 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-05 21:19:39 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-06-05 21:19:39 DCO version: N/A
2024-06-05 21:19:39 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-06-05 21:19:39 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-06-05 21:19:39 Cannot load inline certificate file
2024-06-05 21:19:39 Exiting due to fatal error"

[autumn lynx]

Try using the us-west region config file

[vestal sequoia]

Yes

[plush bay]

was the connection from a 10.x.x.x ip... if not then yeah there are scanners on the public internet and for subscribers the attackbox has an outward connection to the internet

[vestal sequoia]

No it was 162.x.x.x something like this , i contacted the support and i send to then a screenshot of the event

First request was 200 the other one with a payload was 403

It was in hex and tried to decod it and found not human readable (binary) i think

[errant breach]

If you had spent more time reading the text in the task than 3rd part write-ups...

[plush bay]

yeah public scanner then that just randomly hit your attackbox.... no major concern except needing to restart the attackbox or using another port

[vestal sequoia]

Ah i understand thanks for the answer

[waxen shoal]

hello, I was wondering if anyone has the same problem as me, when I click on "start machine" I wait 60 seconds for the IP to display after I test the ping normally I transmit the packets and receive them but after a few minutes nothing at all the machine is offline, do you have a solution?

[naive dust]

Good Morning,

When I try to connect via OpenVPN, connection fails. Log file shows the following:

⏎[Jun 6, 2024, 06:17:36] Client exception in transport_recv: crypto_alg: BF-CBC: bad cipher for data channel use
⏎[Jun 6, 2024, 06:17:36] Client terminated, restarting in 2000 ms...
⏎[Jun 6, 2024, 06:17:36] SetupClient: transmitting tun destroy request to /var/run/agent_ovpnconnect.sock

I have tried all EU profiles (regular and VIP): Same result. Tried VPN adaptive, TCP, and UDP protcols: Same result

Software: OpenVPN Connect v3.49 (build 4830)

Machine: M2 Pro w/ Sonoma v14.5

[ivory spruce]

How did you install OpenVPN - via brew?

[ivory spruce]

Which room is this?

[naive dust]

I downloaded it via the link supplied, which took me to the OpenVPN downloads for macOS

[ivory spruce]

#site-support message

[tough lily]

cant access internet on attack box

Carnage room

I have subscription

wait this is probably different from attack box, its machine specific to the carnage room, I still cant access internet on it, its very slow and takes 3s in every click, is there any solution to this?

[ruby rose]

Attack box is not working properly and restarting after 30 s or so.

[weary spindle]

Wdym by restarting?

[ruby rose]

It runs for 10-15 seconds and gets discomnectedctime and time again

Going on from last 5 hours +

I am send you the recording in dm

[weary spindle]

Please ask for permission before sending dm's.

It's in the rules you accepted.

[ruby rose]

Very sorry as the recording might consists of pi data didnt check/look through the rules. Will keep that in mind next time. Apology.

Have tried different device, networks for but the issue is same.

1. After opening the attack box it shows disconnected within 10-15 s
2. In the video you can see the attack box screen is reduced to a very small windows which is unusable to do anything.
   Hope this gets resolved. Thankyou.

[short olive]

Is it possible take lecture of tasks in pdf?

[weary spindle]

Depending on the room, this could touch on TryHackMes copyright.

[meager elm]

OpenVPN
A guide to connecting to our network using OpenVPN..... Can anyone help? its not connecting

[weary spindle]

Which server and os?

[meager elm]

Window 11

What you mean by server?... im a newby

[weary spindle]

You had to download a config to connect with.

Are you using the communities version of OpenVPN?

i would not suggest using your host as the device to hack from.

[ruby rose]

Can i get some help pls. Any ticket needs to be raised??

[meager elm]

Yes i already downlaoded the configure and i impute but same

Please what do you mean by using your host as the device to hack from.?

[errant breach]

It's not recommended to use your own computer for hacking thm targets, unless you're using virtual machines.

[meager elm]

Okay sir, do you mean I have to get on virtual machine before I use the vpn?

[errant breach]

You don't have to but it's recommended for security reasons.

[meager elm]

Okay sir, i have virtual machine virtualbox

[errant breach]

You don't have to call me a sir by the way.

[meager elm]

Okay thank you

[ruby rose]

is there any admin to help pls

[weary spindle]

Why do you need an admin? 🤔

[ruby rose]

my issue is still there. not able to work. not sure where i can seek help in a quick way

[weary spindle]

THM Admin and mods (although the admin are THM staff) they're not here for site support,

Can you verify and share what you're experiencing?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 6, 2024, 3:17 PM

[ruby rose]

yes verified. can i share my issue here

[weary spindle]

Yes

[ruby rose]

this is how the attack box appears. unable to do anything with such small window

[weary spindle]

Are you on mobile?

[ruby rose]

tried several browsers, devices, ips. Inetwork issue is same

no pc

[weary spindle]

What happened to your old account?

[weary spindle]

That's strange because it looks like you've opened virtualbox?

[naive dust]

i left because i lost the mail linked

[weary spindle]

Is the profile still in this server?

[naive dust]

not anymore

[weary spindle]

Can you DM me your token?

[naive dust]

sure

[ruby rose]

issue is same with both attack box and kali machine option

what can be done?

[weary spindle]

It's done

[weary spindle]

Can you give me the room link please?

[ruby rose]

yes sure

[naive dust]

thanks

[ruby rose]

https://tryhackme.com/r/room/introtologanalysis

is it this u asking

[weary spindle]

And you're starting an attaclkbox?

[ruby rose]

yes issue with both attackbox and kali vm option

[weary spindle]

Why are you opening both?

[ruby rose]

opening only one

checked with both

[weary spindle]

Ah, I see.

Oh wait

Are you opening Tryhackme in the attackbox?

[ruby rose]

yes in firefox trying to open tryhackme

inside attackbox

[weary spindle]

Yeah, it's not intended to do that...

That's why it isn't working.

Are you doing that to download the task materials?

[ruby rose]

yes right need that task material and a linux machine thats why

[weary spindle]

Yeah...

But did you read the task material?

[ruby rose]

yes.

[weary spindle]

So did you miss this part?

[red storm]

anyone knows why I cannot upload image to Discord?

[weary spindle]

You need to be verified.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 6, 2024, 3:47 PM

[red storm]

thank you !

[restive cosmos]

Hello im trying to connect to tryhackme openvpn but it seem that my openvpn 2.6 is not compatible with the old ovpn files that tryhackme is providing what should i do, thank in advance!

[weary spindle]

Which server are you trying to access?

[restive cosmos]

EU-Regular-1

[weary spindle]

Try number 2.

[restive cosmos]

still facing the same issue

2024-06-07 02:15:11 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2024-06-07 02:15:11 Note: Kernel support for ovpn-dco missing, disabling data channel offload.
2024-06-07 02:15:11 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-07 02:15:11 library versions: OpenSSL 3.0.10 1 Aug 2023, LZO 2.10
2024-06-07 02:15:11 DCO version: N/A
2024-06-07 02:15:11 TCP/UDP: Preserving recently used remote address: [AF_INET]54.76.30.11:1194
2024-06-07 02:15:11 Socket Buffers: R=[212992->425984] S=[212992->425984]
2024-06-07 02:15:11 UDPv4 link local: (not bound)
2024-06-07 02:15:11 UDPv4 link remote: [AF_INET]54.76.30.11:1194

[weary spindle]

Strange because it works for me an dI have 2.6

[restive cosmos]

yeah iv read that other people are facing this issue with v 2.6

iv solved the issue by running TryHackMe OpenVPN Troubleshooting Script

[naive dust]

So I got the flag on the Unified Kill Chain room though the flag is not getting accepted as the answer. Is there something wrong with the room or did I somehow get the wrong flag?

[errant breach]

Task 8 you mean?

[naive dust]

yes

[errant breach]

What's the flag you're trying with? You can put it between double pipe symbols for a ||spoiler||

[naive dust]

||Flag: THM{UKC_SCENARIO}||

[errant breach]

That's the correct flag. But starting with THM

Without the Flag: part

[naive dust]

thank you. I got so used to keeping ||Flag:|| apart of the answer

[kindred bloom]

Hello I am having issues with openvpn, i followed the troubleshooting guide and it told me to come to the discord and ask for help

[ivory spruce]

What issue are you having?

[kindred bloom]

The connection seems to go through and I get the Initializatoin Sequence Complete message but I cannot connect, the troubleshooter says [-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

[ivory spruce]

Can you try running the command described here - #site-support message - while connected to THM OpenVPN?

[kindred bloom]

I tried, still no success

[ivory spruce]

To which THM OpenVPN server are you connecting? And what OS are you using to connect?

[kindred bloom]

US-East-Regular-1

[kindred bloom]

Kali Linux Debian 12 x64

[ivory spruce]

Can you do ip a | grep 'tun' and share the result?

[kindred bloom]

It wont let me upload the image

[ivory spruce]

You'll need to verify your account to do so.

[west chasm]

@kindred bloom

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 6, 2024, 9:35 PM

[ivory spruce]

What happens when you run:

sudo ip link set dev tun0 mtu 1200

[kindred bloom]

Same as before

[ivory spruce]

Can you share a screenshot please?

And maybe try to connect to http://10.10.10.10 using your browser

[kindred bloom]

@ivory spruce

[ivory spruce]

You set it to 120 and not 1200?

[kindred bloom]

My bad, set it to 1200 and still no luck

[ivory spruce]

You do have your OpenVPN connection or session in another tab / terminal active?

[kindred bloom]

Yes

[kindred bloom]

Yes

[ivory spruce]

What OpenVPN version do you have running?

[kindred bloom]

2.6.9

[ivory spruce]

Is there any other connection you can test your connection on?

Do you have any other VPN connection running on your host?

[sleek prairie]

I can confirm, I had to check on discord to know what that means, I wondered if it was a limited trial coming to an end

[patent escarp]

I am having problems when starting a machine you get almost no time till expiration. I'll start a room and have like 2 mins to complete it

[rain gazelle]

hey guys, how do I share badges on tryhackme. I cant see any options there

[vague apex]

hello

https://tryhackme.com/r/room/h4cked

This is in the 11th question of ctf (Which command did the attacker execute to spawn a new TTY shell?)

as the answer ( ||python3 -c ‘import pty; pty.spawn(“/bin/bash”)’|| )
I'm entering this and when I press reply it says wrong, could you please check?

[weary spindle]

It's your quotation marks.

Switch them with "

[vague apex]

wait

[vague apex]

It didn't happen

[weary spindle]

||python3 -c 'import pty; pty.spawn("/bin/bash")'||

[vague apex]

python3 -c 'import pty; pty.spawn(/bin/bash)'

haha okay beo

bro

fix

[weary spindle]

If you see your quotation marks are different.

[rough quiver]

i can't get my openvpn working. i'm having the exact same issue as these people but nobody's replied to them on the openvpn forum: https://forums.openvpn.net/viewtopic.php?t=43546

anybody have any idea what the issue is?

[weary spindle]

What issue do you have? (I'm not clicking the link)

[rough quiver]

i'm connected to the vpn and 10.10.10.10 loads and says im connected, but the tryhackme access page says i'm not connected

[weary spindle]

The access page is broken, just ignore it 🙂

[rough quiver]

cool, thanks!

[split wadi]

Could you help me pls, with that
its in: Security Engineer
Network and System Security
Virtualization and Containers
kubernets room

may i ignore this certs

[meager elm]

Hello, I just start the machine virtual box but its requesting for username and password, please what do i do?

[weary spindle]

Is this on your host?

[meager elm]

in the virtual box, immediately i start the machine....

[weary spindle]

Please use #general

This chat is support for TryHackMe.

[celest moat]

Hi All! I cannot finish up the room because splunk enterprise license is expired. Am I writing to the right channel ?

[errant breach]

Which room?

[celest moat]

https://tryhackme.com/r/room/subscribe

[tiny mulch]

hey im doing a room rn the THM attackbox

and when i do su - root from johnny i type the password abc123 and it doesnt work

ikt says auth failure

nvm im a idiot

ls

[patent escarp]

I am having problems when starting a machine you get almost no time till expiration. I'll start a room and have like 2 mins to complete it. Can anybody help?

[ivory spruce]

Can you share a screenshot of it (for clarity)? You'll need to verify your account to do so.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 8, 2024, 6:12 AM

[ivory spruce]

@patent escarp ^

[acoustic crown]

Hello, it's been a long time since I've used this site. I wanted to repeat a few rooms for my certification exam, but in the room called Active Directory Basics, when I said Start Machine, it used to give only the ip address and the attackbox did not open automatically. But now the attackbox opens automatically, is this a new feature or is it only for this room? The problem basically is " when I click start machine, it automatically opens attackbox".

[weary spindle]

Does it open an attackbox, or a windows box?

[acoustic crown]

Ups I mean windows box

[weary spindle]

Yeah, that's fine.

If you want to RDP in to it, just minimise it.

[acoustic crown]

oh get it, is that new feature or smth?

[weary spindle]

I think it changed when the UI did.

[acoustic crown]

okey got it, thanks for clarification @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2370)

[willow trout]

hello can someone explain me how to change the mail on my account? because i finish my studies soon ( in middle of jully) and i don't want to loose my progression (the mail adress is an email from the campus ) i try but the box is in grey and no action is possible, thank so much for you're answer! 🙂

[weary spindle]

You'll need to E=mail support if you can't change the E-mail manually, you can do here.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 8, 2024, 3:57 PM

[willow trout]

thank you so much !

[scenic torrent]

Gave +1 Rep to @west chasm (current: #159 - 42)

[vague apex]

hello

how fix ?

[errant breach]

That happens regularly. If you open downloads in the browser you have an option to ignore it

If you don't trust the file, check it with virustotal.com.

[vague apex]

Not only do you trust it, but it doesn't exist 😄 Google doesn't allow downloading without any hassle.

[errant breach]

As I mentioned, you can ignore the warning and proceed to download.

Open downloads with ctrl + J

Next to the file there's a selector. Click on it and there's an option to download despite the warning.

[vague apex]

@errant breach thank you fix

[scenic torrent]

Gave +1 Rep to @errant breach (current: #82 - 78)

[wind wedge]

Did you sign up with google?

[worldly jacinth]

I'm facing a problem with my open vpn. I tried to fix it with a certificate error but it didn't work.

[ivory spruce]

To which THM OpenVPN server are you connecting to?

[worldly jacinth]

I tried different but the error is still the same.
Certificate error i checked version

[oblique trench]

I think I'm facing this issue rn, how do I verify it is this issue and fix it?

[ivory spruce]

Can you do ip a | grep 'tun' and share the result?

[oblique trench]

actually, I also have a question on NAT in virtualbox, if I have this tun interface in my vm and I have a reverse shell with my tun0 ip, will it reach my vm or just stop at host?

[ivory spruce]

Theoretically, it should. Can you do sudo ufw status?

[oblique trench]

hmm, I forgot I did this

[ivory spruce]

Either allow a certain port or disable it.

[oblique trench]

Yup, that fixed it, thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #13 - 574)

[warm talon]

Hallo
i just getstaretd but i keep get onnection refused

[ivory spruce]

How are you trying to connect?

[warm talon]

no i am connenting but every task i do i get connec

connection refused

[ivory spruce]

Are you using the Attackbox or your on VM? If it is the latter, have you connected to THM OpenVPN?

[white mango]

hello

access machines show red instead of green but in access it is green
Cant do nmap's on machines etc, tried multiple vpn packages

[wind wedge]

The access page isn't always accurate

Are you connected through openvpn?

[cunning kindle]

Hello Team, not able to download wreath's vpn, it just circling and seeing an error below
an unknown error has occurred.

[wind wedge]

Try leaving the network for 30 mins and then rejoin and try to redownload

[cunning kindle]

Network you meant leaving the room? Sure.

[wind wedge]

Yea, that should fix the error 🙂

[cunning kindle]

Sure thanks.

[kindred cove]

i have issue with connecting to my local server

[weary spindle]

Which server?

[kindred cove]

no like my local server on port 8080 it is asking for my local server password

[weary spindle]

Oh, I thought you were doing tryhackme.

[weary spindle]

Back to #general then 😅

We also won't know your username:password

[kindred cove]

lol

thanks for your help

[lilac bluff]

hi, i am a beginner here and need some help

[weary spindle]

With what?

[lilac bluff]

i am unable to understand task 7 mentioned in red team threat intel module, if someone can help, that will be appreciated

[weary spindle]

The static site?

[lilac bluff]

yeah

[weary spindle]

You use the APT 41 to choose what you'd use in each stage

[lilac bluff]

there are 7 steps in kill chain, however; static site only allows for 6

[weary spindle]

Yes, it doesn't ask for them all.

[lilac bluff]

what about the sequence?

[jade river]

I cant seem to copy/paste between a room and the inbrowser attackbox. is this common/fixable?

[jade river]

ty! no shortcutting then?

[weary spindle]

In Chrome you can open it in full screen and it will get access to your clipboard,

Firefox has blocked Copy/paste via javascript.

[white mango]

yessir

[white mango]

I also had an issue with wreath

and holo, but holo got sorted after I changed to my other network

[jade river]

uugh.. true for most chromium browsers?

[weary spindle]

I'm not sure about that.

[jade river]

oh and thanks points to @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2373)

[jade river]

where do I add feedback about a rooms content?

[weary spindle]

#feedback-and-ideas

Or depending on the room, maybe the path channel, as sometimes the creators are kicking about.

[jade river]

its for content discovery

[weary spindle]

I'm not sure which staff member done that room, do you think it's a bug? Or just positive/negative feedback?

[jade river]

no, just a minor improvement. I submitted it. the pipe in the curlexamle was highlighted which I think might be quite confusing for a new linux user

thanks @weary spindle 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2374)

[errant breach]

I vaguely remember there even was a user recently who tripped over that.

[jade river]

then my report seems justifed 🙂

[errant breach]

Found it #room-help message

[jade river]

hah!

[vestal sparrow]

Just wanted to check out if abundance of caution, every time I’m in a room that asks me to download files to use, my computer blocks it and tells me it contains a virus and I shouldn’t open it. Is this normal?

[bronze vale]

It’s likely just a false positive. Anti-virus usually check the domain and source code of the website when you download files, which can cause it to flag.

You can always air on the side if caution and download into a Virtual Machine if available 🙂

[jade river]

an automated scan found like 500 hits........ in the kali or parrot iso LMAO

[normal goblet]

I'm having issues trying to recover my account, somehow it isn't sending anything to hotmail

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 9, 2024, 4:43 PM

[weary spindle]

contact support please ^

[normal goblet]

Thank you so much!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2376)

[deft stone]

Hi, I'm having trouble connecting to the VPN. I've tried several servers and downloaded a new config file each time

Any advice 😄

[ivory spruce]

Which THM OpenVPN server are you trying to connect to? From which location are you connecting from?

[deft stone]

I've tried a few, but currently EU-Regular-4 from Norway

[ivory spruce]

Can you try EU-Reg-2? Then wait for ~2 to 3 minutes after switching your server before generating your OpenVPN config file?

[deft stone]

No luck :/

I do notice that the Internal Virtual IP Address is now 0.0.0.0/not connected

[wind wedge]

The acces page isn’t always accurate are you able to access 10.10.10.10?

[deft stone]

No I get a connection timeout error in openvpn when I try to connect

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 9, 2024, 7:43 PM

[wind wedge]

Can you verify and take a screenshot of the error

[wind wedge]

Ahh you’re using windows?

[vestal pebble]

hi guys what's the fastest way to transfer room task files to attack box

[wind wedge]

Which room?

[vestal pebble]

any room that gives files to download

[wind wedge]

The attackbox has a rooms directory that should have the files in there

[deft stone]

I'm on mac sonoma

[wind wedge]

Install openvpn with brew

The GUI doesn’t work well

There’s a guide on the access page

[vestal pebble]

would you know where it is?

[wind wedge]

‘cd Rooms’ on the attackbox

[vestal pebble]

where would i find the files for this task?

[wind wedge]

Ahh looks like that one isn’t added

[vestal pebble]

rip

is there a working site that's quick and easy for transfering file you guys use?

ah nvm it's a common wordlist anyways

[fair jay]

Room Affected - Vulnersity - https://tryhackme.com/r/room/vulnversity
Issue - Unable to access machine website
Tried Solutions - Have tried to access the website on both my vm as well as my attack box outside the vm , and yes i'm connected to openvpn , It was working fine yesterday

apparently @stone wren had the same issue but fixed it by specifying the port number the service was being ran on , How do i find that?

[wind wedge]

Did you scan the IP?

[weary spindle]

Not always, the older content isn't there.

[pliant marsh]

Hi all, I'm sure this is a common question, but I can't seem to get any data through Ping or Nmap commands for the CTF box, even tho the VPN seems to be connected. This seemed to be fine a few days ago so not sure what happened. I regenerated the key, killed any backgrounds, and restarted the OS. Before I really start messing with it, anyone have any suggestions?

[spark pier]

Hey I'm having issues connecting to the vpn on windows, any advice?

[ivory spruce]

What software or application are you using to connect? Also, just to confirm, are you aware on the implications of connecting your host to the THM network?

[ivory spruce]

Which box are you working on?

[spark pier]

I was using OpenVPN, what are the implications...?

[ivory spruce]

Other users could potentially access your system

THM has in place safeguards to prevent other users from doing so, but the risk is still there.

What specific OpenVPN software are you using - OpenVPN Connect?

[loud jolt]

Hi, I made a mistake in the RED TEAM Capstone network and the VPN Server needs a reset because I overwritten the /etc/passwd file.

[fair jay]

oh thanks revisiting the room after a while had to finish a couple of other rooms first must've missed it

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #52 - 132)

[ivory spruce]

I think you can vote once every hour

[weary spindle]

You'll need to tell us your subent too.

[tribal mason]

@eager adder You can change the VPN Region and regenerate to fix that issue

I don't remember which one was working but yeah, try all of them

[eager adder]

I completely forgot how to change this, I've did what the error has told me to do. Tried both separately and together and it still wont

I did AUS because that's closer to my geographical location

[weary spindle]

Use sudo

[eager adder]

Yeah it's still happening

[wind wedge]

Try regenerate and switch to EU-4

[eager adder]

Even if I'm in Oceania? Would that make it slow?

[wind wedge]

Ohh you're in oceania. Have you tried regenerating and downloading the file?

[eager adder]

Done it about 4 times

[wind wedge]

Try EU-4 and see if it makes a differnece

[granite obsidian]

HEY in rooms benign i cant connect to splunk
[2:19 PM]
http://10.10.126.111:8000/ i try this from the attack box but unable to connect

[eager adder]

Nah didn't

[karmic seal]

any idea what is the issue??

[weary spindle]

Is that meduim?

[karmic seal]

yes

it is 72 hrs right? I think I can submit one ??

[weary spindle]

I think it's the meduim link is bugged, staff are aware

[karmic seal]

ohh ok ok

[errant breach]

BTW do authors on medium get to decide whether or not to paywall their articles?

[karmic seal]

I thought you were talking about the room, my bad!!
and yes it is a medium room

[karmic seal]

maybe .. I don't know about that as I haven't been a member over medium..

[valid meteor]

Hello there, I changed my email to school email and accidentally joined their workspace. Is there any way to leave it?

[junior reef]

Hello.
My .ovpn file gives a Warning: Compression for receiving enabled.
What should I do?

[weary spindle]

nothing, it's fine.

[junior reef]

It is exiting due to fatal error.

[weary spindle]

that's a an unrelated reason.

[junior reef]

Okay, I am sending a screenshot here. Maybe someone in here will see the problem and help.
Thanks.

[weary spindle]

You need to verify

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 10, 2024, 5:27 PM

[junior reef]

Alright, let me try that.

[weary spindle]

Whchi server?

Did yo uuse sudo/

[junior reef]

AU Regular 1
Here, I didn't use sudo.

Using sudo

[weary spindle]

Can you gey another server close to you?

[late gull]

hi guys i can't connect my open vpn to hack the box
i am using open vpn on windows and imported the file into open vpn and connected it but it's not connecting to tryhackme
gives me OpenSSL error for certificate fail

[junior reef]

US-East-Regular-1 seems to work, thanks.

Is this related to here?
Unable to negotiate with 10.10.32.122 port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss

[late gull]

just saying certificate failed

i imported the config file

@junior reef it worked, i just changed the server to US-East_regular-1 instead of EU-Regular-1

[junior reef]

You're lucky I solved your problem while I was seeking help.

[weary spindle]

Yes, this could be intended, won't know for sure unless you name the room

[junior reef]

Linux PrivEsc Arena.

[broken bear]

hack the box or try hack me? if the htb vpn isn't working, you may be better off either asking int heir discord, or asking their support team

[late gull]

Fixed it, thank you so much for the support tho

[eager adder]

If I use US East Regular 1 and I'm based in the AUS server range is everything going to be slower?

And will the AUS server work eventually?

[livid gale]

Hi, I am trying to connect to a room but for some reason I can't even ping the machine's IP

I have regenerated the OVPN file and also changed the region once but the same issue persists, can I have some help with it !

[ivory spruce]

Which THM OpenVPN server are you connecting to? And can you share the last few lines of your OpenVPN log?

[ivory spruce]

Which room are you working on?

[errant breach]

Not all targets respond to pings.

[livid gale]

https://tryhackme.com/r/room/cyberlensp6 this is the room I am connecting to

[livid gale]

Now I am on EU-VIP-1

[ivory spruce]

That's the server I am using so it should be working now.

[livid gale]

Yes but it is also the issue that I am unable to scan it or do anything

[ivory spruce]

Windows targets do not usually respond to ping requests due to Windows firewall.

[ivory spruce]

What have you done thus far to enumerate the target?

[errant breach]

Cyberlens should respond to an nmap scan.

If it doesn't something else is going wrong.

[livid gale]

GET unix://[/var/run/agent_ovpnconnect.sock]/tun-destroy : 200 OK
/sbin/route delete -net 10.11.0.0 -netmask 255.255.0.0 10.11.5.209
delete net 10.11.0.0: gateway 10.11.5.209
/sbin/route delete -net 10.10.0.0 -netmask 255.255.0.0 10.11.0.1
delete net 10.10.0.0: gateway 10.11.0.1
/sbin/ifconfig utun6 down
MacDNSAction: FLAGS=ESF
<E2><8F><8E>[May 11, 2024, 14:27:21] EVENT: PAUSE sleep<E2><8F><8E>[May 11, 2024, 14:27:24] MacLifeCycle WAKEUP
<E2><8F><8E>[May 11, 2024, 14:27:25] MacLifeCycle ACTION pause=1 state=[net_up=1 iface=en0 sleep=0] prev=[net_up=1 iface=en0 sleep=1]
<E2><8F><8E>[May 11, 2024, 14:27:25] EVENT: RESUME <E2><8F><8E>[May 11, 2024, 14:27:25] EVENT: RECONNECTING <E2><8F><8E>[May 11, 2024, 14:27:25] EVENT: RESOLVE <E2><8F><8E>[May 11, 2024, 14:27:25] Contacting 34.253.19.14:1194 via UDP
<E2><8F><8E>[May 11, 2024, 14:27:25] EVENT: WAIT <E2><8F><8E>[May 11, 2024, 14:27:25] UnixCommandAgent: transmitting bypass route to /var/run/agent_ovpnconnect.sock
{
        "host" : "34.253.19.14",
        "ipv6" : false,
        "pid" : 842
}

<E2><8F><8E>[May 11, 2024, 14:27:25] Connecting to [34.253.19.14]:1194 (34.253.19.14) via UDPv4
<E2><8F><8E>[May 11, 2024, 14:27:25] EVENT: CONNECTING <E2><8F><8E>[May 11, 2024, 14:27:25] Tunnel Options:V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client
<E2><8F><8E>[May 11, 2024, 14:27:25] Peer Info:
IV_VER=3.6.7
IV_PLAT=mac

I can send you the log file if that helps

[livid gale]

I have tried to run nmap, ping, naabu and have tried to visit it via browser to see if there is a service running on 80 then would have responded but

I can't even reach the machine

[errant breach]

Sounds like a VPN issue then

[livid gale]

Yups, is this the correct place to raise the issue or is there some other way I can reach support ?

[errant breach]

Should be fine here. I'm not a mod though. I can't help you with troubleshooting VPN issues but somebody will, I'm sure.

[livid gale]

Sure thanks

[scenic torrent]

Gave +1 Rep to @errant breach (current: #70 - 89)

[naive dust]

guys everytime i open a python file it close automatic in 1 second what can i do????

[errant breach]

What do you mean by "open a python file"? With which software/command?

[naive dust]

i download it from github

like Johntheripper

[livid gale]

what are you opening it on ? an IDE or how ?

[errant breach]

That doesn't answer my question.

[naive dust]

i dont know

wait

[livid gale]

what do you mean "open a python file" ?

are you running it ?

[naive dust]

yea double click

[livid gale]

is Johntheripper the file you are trying to open via double clicking it ?

[naive dust]

bruh i cant send picutes here

[livid gale]

that isn't how you use it, you would have to use it via cli just use your terminal and do 'john --help'

[ivory spruce]

You should wait for ~2 to 3 mins before generating your OpenVPN config file.

[livid gale]

Will do now

[ivory spruce]

You'll need to verify your account to do so

[west chasm]

@naive dust

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 11, 2024, 7:41 AM

[ivory spruce]

That server should work as that is the one I am using.

[errant breach]

If you use the attackbox provided by THM you don't have to do these things manually. It comes with most of the tools you need. Maybe a good idea for an absolute beginner.

[livid gale]

I am still unable to connect

[plucky prawn]

still got error on connection to VPN
What wrong ???

2024-06-11 16:33:58 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-11 16:33:58 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-06-11 16:33:58 OpenVPN 2.6.10 x86_64-apple-darwin23.3.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD]
2024-06-11 16:33:58 library versions: OpenSSL 3.3.0 9 Apr 2024, LZO 2.10
2024-06-11 16:33:58 TCP/UDP: Preserving recently used remote address: [AF_INET]3.104.196.208:1194
2024-06-11 16:33:58 Socket Buffers: R=[786896->786896] S=[9216->9216]
2024-06-11 16:33:58 UDPv4 link local: (not bound)
2024-06-11 16:33:58 UDPv4 link remote: [AF_INET]3.104.196.208:1194
2024-06-11 16:33:59 TLS: Initial packet from [AF_INET]3.104.196.208:1194, sid=4ed3a79b c0c826cb
2024-06-11 16:33:59 VERIFY OK: depth=1, CN=ChangeMe
2024-06-11 16:33:59 VERIFY KU OK
2024-06-11 16:33:59 Validating certificate extended key usage
2024-06-11 16:33:59 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-06-11 16:33:59 VERIFY EKU OK
2024-06-11 16:33:59 VERIFY OK: depth=0, CN=server
2024-06-11 16:34:58 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-06-11 16:34:58 TLS Error: TLS handshake failed
2024-06-11 16:34:58 SIGUSR1[soft,tls-error] received, process restarting
2024-06-11 16:34:58 Restart pause, 1 second(s)

[plucky prawn]

Solving by
re-generate and download on EU-Regular-3

[dim cedar]

ı get this

[weary spindle]

Can you please use #general for this, as this is site support for TryHackMe

[harsh coyote]

is there a way to solve as the attacker boxes are slow to me

[tall vale]

I am having trouble connecting to TryHackMe over OpenVpn, I used the troublehsooting tool and it told me my connection was good. But still not indicating that in the Access page

[weary spindle]

Access page is broken, ignore it

can you get an ip when you browse to http://10.10.10.10

[tall vale]

Unable to connect to that url.

Update* i am successfully connected.

[weary spindle]

then you're good to go

[weary spindle]

you can enter dummy infor

[jade river]

is there a way to dettach the split screen machine into a seperate window?

[wind wedge]

There will be a minus and extend screen in bottom left of the attackbox

[jade river]

all it does for me is the close the split window

its alt text is also "exit split view"

[weary spindle]

#general message

Different UI, same buttons.

[jade river]

oh

[jade river]

so do you know if theres a way to do it?

[weary spindle]

Take a screenshot of the bottom of your attackbox?

But that message I linked has a screenshot

[weary spindle]

Diagonal arrows.

[jade river]

ooooooh

[jade river]

figured it would fullscreen the way a youtube vidoe does!! thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2388)

[weary spindle]

You'll also need to minimise the split screen

[jade river]

also didnt realize you linked to general. Im not using discord a lot.. thought you posted form genereal somehow lmao

rad

[weary spindle]

Nooo, you can right click messages and get a link, and paste it, when somebody clicks it it will take them to the message

[pastel ibex]

hi, I'm trying to do the devsecops cicdandroomsecurity and it just freezes after the tips

[oblique trench]

Whenever I use the Attackbox, it's always so laggy and unresponsive at times, is there any way I can improve this?

[grand mantle]

hey

i have a question

whn the game king of the hills stars, should we use vpn or we should start finding the open ports

and what metion is the ebst to do that

[weary spindle]

If you're using a vm, you'll need to connect to the VPN before you can find any ports.

You can connect to the van before the game even starts.

[grand mantle]

@weary spindle so if I use any type of vpn in my own vm its fine right?

[weary spindle]

No, you'll need to connected to the THM openvpn

[west chasm]

Q&A: Common questions after connecting to the VPN

Article Link

https://help.tryhackme.com/en/articles/8991559-q-a-common-questions-after-connecting-to-the-vpn

Jun 12, 2024, 6:34 AM

[wind wedge]

@eager adder Can you try the AU VPN again please when you get the chance

[eager adder]

Will try it tonight, us east regular 1 worked good

[wind wedge]

There were some issues with the AU server, which should now be fixed

[eager adder]

Oh awesome. Try remember the new tun0 ip address lol

Can I change it or is it always randomly assigned?

[wind wedge]

The tun0 IP?

No, you can't change it unfortunately

[eager adder]

Nah its still not connecting

[wind wedge]

Did you regenerate the config file for AU for 3 minutes?

[lavish hazel]

Is there a way to correct or report spelling mistakes in rooms ?

[north rover]

Heya, id like to ask if anyone is running the @west chasm bot on a personal discord server, and if so how did ya set it up?

[weary spindle]

#room-bugs

[weary spindle]

Nobody has the THM bot in their server, its only for this server.

AFAIK.

[north rover]

alrighty

[north rover]

but I would still like to add to a THM group, as it would allow us to verify users

i cloned it from https://github.com/tryhackmeltd/thm-discord-bot

is it up to date?

[weary spindle]

I don't think @bronze vale allows it to be added to servers.

[north rover]

oh okay then

thats a shame

[bronze vale]

Yes you can add it

But you need to setup the .env file yourself

Also that isn’t the TryHackMe bot

[west chasm]

TryHackMe's Github

Get the bot's GitHub link.

​

https://github.com/JabbaSec/tryhackme

TryHackMe Socials · Jun 12, 2024, 12:01 PM

[bronze vale]

Only the actual bot itself cannot be added to servers. Users can clone the bot’s code and set it up themself if they wish

[north rover]

oohh thanks a lot

[scenic torrent]

Gave +1 Rep to @west chasm (current: #157 - 43)

[north rover]

thats what i meant, i have my own hosting for it

[north rover]

i see there is a .env.example, so i'll manage

[bronze vale]

You will manually have to configure the database and anything else the bot needs, unfortunately we don’t provide setup help

[north rover]

understandable

thanks for the help!

[bronze vale]

Just a forewarning, that repository is no longer maintained because we are moving to a new code base and framework.

In the event that Discord.js updates and it breaks the code, the bot will no longer be updated.

[north rover]

any chance you keep the new version open source?

[bronze vale]

We have no plans of making it closed source at this time 🙂

[north rover]

great to know

[north rover]

thanks for the heads up

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1251)

[north rover]

also if yall would need help with the bot rewrite, feel free to contact me

i'd gladly help

[bronze vale]

No problem, if we need any help I’ll give you a shout!

[spark patrol]

Splunk: Setting up a SOC Lab
task 3
I type the gollowing into the browser; http://coffely:8000/
nothing happens, I have spent the last 3hours on this room and nothing work, is there a customer service number for try hack me?

[earnest salmon]

I'M connected using the openVPN but i can't access the site , my internet is good , and if i pinged the room ip the ping 60 is this a common problem and should i use the attack box

[errant breach]

Which site?

[velvet zenith]

guyss is it not possible to set custom timings in king of the hill

like is it not possible to increase the timings to 120 hours

[earnest salmon]

OWASP juice Shop

[errant breach]

What does "can't access" mean? What are you doing? What happens?

Important to use precise language when troubleshooting technical issues.

[ornate grove]

is there some kind of general network issue going on? I was in lateralmovement & pivoting room and all was going well, then suddenly the network stopped responding. Can't ping from attackbox to 10.200.71.101 at all anymore. "From 10.50.65.1 icmp_seq=161 Destination Host Unreachable"

I've stopped my attackbox and started the network again, then started attackbox again and still the same response

[earnest salmon]

My bad sorry, when i type the ip in my browser the web page keeps loading

[errant breach]

Try opening a new terminal and running this

sudo ip link set dev tun0 mtu 1200

[earnest salmon]

Worked! Thank you for your help
Can you explain what the problem was?

[scenic torrent]

Gave +1 Rep to @errant breach (current: #65 - 104)

[errant breach]

A too high MTU https://www.cloudflare.com/learning/network-layer/what-is-mtu/#:~:text=Fragmented packets are reassembled once,is the maximum MTU size.

[inner skiff]

Hello. I'm at the /creative room and i'm wondering if it should run out of the box or is manually adding the domain name in the hosts file expected?

[weary spindle]

I'm sure the room task gives you the answer?

[inner skiff]

Well. It's a challenge room. When I put in the ip to check the site somehow the DNS recognizes it but it doesn't point to the site. After editing the hosts file it does piont correctly

[weary spindle]

Then that's what you're supposed to do.

[inner skiff]

Unconventional but ok

[weary spindle]

It's not?

Why is it unconventional?

[inner skiff]

Usually customer facing web apps have the domain name sorted out. If you can't get to a site by typing in the company name you are losing customers. Although this is intentional and it is a test. It is like using an esolang to code your backend with, doable but nobody would do it

[weary spindle]

It's a challenge, the ip doesn't follow the redirect.

[inner skiff]

I guess I should expect challenges screwing with me more

[weary spindle]

Yeah...

It's a misconfiguration, and the description is Exploit a vulnerable web application and some misconfigurations to gain root privileges..

[inner skiff]

Dunno if it's a bug. But i guess it could stay that way

For fun

[weary spindle]

It's not a bug, it's intended. 🙂

[sweet thorn]

Hi all, I keep having issues with target boxes. One I couldn't read get a port output of, the other I can't RDP into. Followed all the steps as listed, googled, shut off personal VPN + adblockers. No idea why this is happening 😦

[errant breach]

On Linux? The machine you're connecting from I mean.

[sweet thorn]

Yup

[errant breach]

Try opening a new terminal and running this

sudo ip link set dev tun0 mtu 1200

While connected to the THM VPN

[sweet thorn]

Seems to work now, thanks mate!

[scenic torrent]

Gave +1 Rep to @errant breach (current: #65 - 108)

[errant breach]

You're welcome. You might have to repeat this at some point.

[sweet thorn]

Def gonna save this!

[muted hinge]

the burpsuite basic site is bugging

like i cant click on anything

[naive dust]

just a heads up that on task 5 of the ukc module **Defence **Evasion (MITRE Tactic TA0005) is spelled wrong

[ornate grove]

depends on where you're from...
"The difference between defence and defense is the spelling guidelines of British and American English.

• defence with a c is the correct spelling for British English.
• defense with an s is the correct spelling for American English"

assuming you were referring to "Defence"

[naive dust]

wow i didnt know

😂

[versed vault]

is there an issue or glitch in 'Red Team Recon; task 6', I feel as if I correctly answered the question and it's not being accepted for some reason. I found the author using the 'info' command.

[hot spindle]

There is an issue with the Wreath VPN file. When ever I try to download the VPN file it shows me an error that says.

An unexpected error has occurred.

And then don't let me download the VPN file.

Please help in this regard.

[worldly jacinth]

What this means

[fallen iris]

i also get this errror but it will fix a while after

itself

[worldly jacinth]

alright so do I have to wait or should I start my labs? will labs work this way?

@fallen iris

[ivory spruce]

Try to re-connect to THM OpenVPN?

[worldly jacinth]

na I just did it once and then i came here. I mean it is running since then at terminal

mean I should kill and run again?

alright!

Thank you!

Thank God connected

i was trying but had no idea what to try lol

see I tried to truble shoot i did the error was certificate and did it from google tho

but then when i solved it and then stucked into this i thouht maybe i have no idea so i came here

[ivory spruce]

Baidu seems to be China's search engine.

[rich relic]

hi i need help i just started using tryhack me im going into the rooms but i dont know how to start any of the apps , for example i cant get splunk to load up

[weary spindle]

You need to visit the ip

[west chasm]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Jun 13, 2024, 9:38 AM

[muted hinge]

can some help with bugging burpsuite basics course? @weary spindle

[weary spindle]

Is this the GIF issue?

Can you link the room?

[muted hinge]

https://tryhackme.com/r/room/burpsuitebasics, i cant type answears and when i move with DOWN key is will take 10 seconds to scroll

[weary spindle]

I think it's the gifs, however the page loads for me.

Is there a specific task open?

[muted hinge]

how do you mean?

[weary spindle]

Do you have a task open, like Task 4, 6 or 8 or something

[sand plinth]

Hi everyone. Apologies if this isn't the right channel. I'm currently developing a web-based virtualization platform using Django. I was wondering how you managed to integrate a VM view into the page. Which framework/library did you use? I tried noVNC, but it's not meeting my expectations :(

[muted hinge]

it lagging in full course

[weary spindle]

Sorry, TryHackMe don't give out information regarding the internal infra.

[sand plinth]

Ok understandable. Have a great day :)

[muted hinge]

@weary spindle where can i send screenshot of web?

[weary spindle]

You need to verify

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 13, 2024, 2:43 PM

[muted hinge]

i got verified

[errant breach]

Both staff and several mods have openly talked about this particular aspect before. Can't really hide it since it's accessible to any user.

[weary spindle]

I've tagged the maintainer of the attackbox with this exact question, and they said they won't give out details.

[weary spindle]

Which task is that?

[muted hinge]

and other courses working fine

[muted hinge]

this task is 8

[weary spindle]

This page words for me ok, there's no lag, or performance issues.

[errant breach]

Then policy changed on that, good to know

[weary spindle]

That's mostly always been policy, however I can't police what TryHackMe staff speak about, I can only refer members to what I've been told until the staff member let's me know otherwise.

[muted hinge]

what should couse the lagging?

[weary spindle]

Well, I can.

But won't.

[weary spindle]

Your network possibly, Like I said, I've been fine here and I have a slow connection.

[muted hinge]

i'v been on 2 networks and didnt wokrs

[weary spindle]

Could be your own machine then not loading the gifs or something,

[muted hinge]

okey

[weary spindle]

I really can't be sure as I can't replicate your connection to the room or your machine.

[silver grove]

I can't generate or download OVPN files for the Wreath Network.

[silver grove]

even the attackbox cannot connect to the machines in wreath. No tunnel listed for the VLAN

[silver grove]

any response to this?

[silver grove]

this ever get resolved?

[weary spindle]

For subscribers the wreath interface is tun0 on the attackbox

[silver grove]

i'm on the attackbox and i can't reach the wreath targets

[cunning kindle]

Have to wait 7 days again. Heard someone saying join the room again. So I remove myself from the room and have to wait again. Will inform here again.

[weary spindle]

Double check your vpn file in the config folder isn't empty

[silver grove]

what config file? i'm on the attackbox.

[weary spindle]

There is a directory on the desktop

[silver grove]

the file is empty

[weary spindle]

Then you need to leave the room with the options and join again in 15 mins

[livid urchin]

Hey guys, I had a machine running that became unresponsive and when I try to terminate it I get an error stating "Error terminating instances" The room I am in is "Relevant"

I am able to start and terminate machines in other rooms mind you

I have even restarted my VM That it is running in and it still persists

[ivory spruce]

By "unresponsive", how are you interacting with the machine and what are you using to do so?

[livid urchin]

I stopped getting responses from it, I couldn’t ping it, nmap wouldnt work, smbclient/smbmap weren’t either. I had previously used all those tools on the box but was going back to take notes. That wasn’t the real problem, the real problem is not being able to terminate the machine.

[short ferry]

CI/CD and Build Security is again crashed.

[ivory spruce]

Ahh. I think the ping request is due to Windows firewall on the target. On terminating the machine, I seem to recall to having that issue as well and ended up waiting for it to timeout. I even ran a command in the browser console to terminate the THM machines I have running, but that didn't work as well.

[livid urchin]

Yeah I just ended up leaving it and waiting for it to timeout, also tried the browser console commands and they didn’t work out. ¯_(ツ)_/¯

[livid urchin]

Thanks for responding either way!

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 579)

[tiny mulch]

hey im on junior pen and im exploring the site https://10-10-8-167.p.thmlabs.com/

how do i get to the href

"Links to different pages in HTML are written in anchor tags ( these are HTML elements that start with <a ), and the link that you'll be directed to is stored in the href attribute."

idk where to find this

found it nvm

[naive dust]

Good morning. Can anyone tell me how to establish a shell rollback using a tryhackme VPN on my Kali Linux using virtual box? I can only get the shell to revert when I use the tryhackme machine in the browser, but not at my location, I'm new to the platform and I wanted to know how I can answer this.

[ivory spruce]

You'll have to connect your kali VM to the THM network using THM OpenVPN.

https://help.tryhackme.com/en/articles/6496038-connecting-to-openvpn-on-linux-and-mac

[west chasm]

Connecting to OpenVPN on Windows

Article Link

https://help.tryhackme.com/en/articles/6496034-connecting-to-openvpn-on-windows

Jun 14, 2024, 3:41 AM

[naive dust]

I've already installed a VPN and I can access the network, but when it comes to getting the reverse shell, it doesn't work. I usually use ngrok, but still nothing.

[peak prawn]

hi guys

I am unable to get the target ip address in the nmap room'

task 14

practical

[ivory spruce]

Do you have another VPN running on your host?

[limpid locust]

hi
i cant connect using ovpn
can u help
i dont actually know the problem is
but my country started banning vpns.
can they be related
i try connect to different region servers but it still doesnt work

[ivory spruce]

From which country are you trying to connect from if you don't mind me asking?

[weary spindle]

Why ate you using ngrok?

[brazen patrol]

I just applied my student email and it was recognized but now when I click on subscribe the payment popup frame keeps loading forever and never loads... but it worked before I applied my student email, So how do I fix this...?

[weary spindle]

Cleared cache/cookies?

[brazen patrol]

tried it now... still loads forever

[wind wedge]

Can you try disabling extensions

[west chasm]

@brazen patrol

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 14, 2024, 8:07 AM

[wind wedge]

If you could also verify please and take a screenshot of your console

[brazen patrol]

disabled all extensions except one that I need working at all times (it just groups tabs and makes containers for each group)... and still didn't work

verified

this is what happens

just keeps loading forever

[wind wedge]

Strange, can you open up your console and show me the erros in there please

[brazen patrol]

Here

[wind wedge]

Which browser are you using and is it updated?

[brazen patrol]

Firefox 127.0

The popup used to work before I changed my email to the stduent email so I don't think it's a browser problem...

[brazen patrol]

This appeared after I clicked on subscribe...

[wind wedge]

Can you try from a different browser?

[brazen patrol]

same problem on chromium, still loads forever

[wind wedge]

Can you dm me your username and email please

[limpid locust]

Myanmar

[ivory spruce]

We can't assist you with bypassing government imposed restrictions. You do have the option of using the Attackbox though

[limpid locust]

attackbox is so heavy

it takes long to even load burpsuite

[weary spindle]

Sadly it's the only alternative.

[limpid locust]

i guess

[round copper]

Hello, if it helps somebody… can’t access machines through VPN because room don’t detect me online, access page says I’m connected… thm-troubleshooting script says everything OK (only adjust MTU)… but can’t start any machine using Firefox. Solved using Chromium with default settings.

[valid meteor]

Hello there, some images are broken for some reason, any idea why?

[errant breach]

That's a problem on your end. Works fine here. And it would be nice if you could name and ideally link a room you're having an issue with, so people trying to help you have it as easy as possible.

[naive dust]

Intro to Web Hacking badge is awarded without completing SQL Injection module in Jr Pentester path

[weary spindle]

Are the images imgur hosted, and is your country blocking it?

It'd upload vulnerabilities

It's*

[valid meteor]

It's the upload vulnerabilities room, but i'm having this issue with multiple rooms, some work fine and some doesn't.

[valid meteor]

Yes they are imgur hosted, let me check if my country is blocking it.

[valid meteor]

I found the issue, It's related to the Internet service provider in my country, it's blocking imgur for some reason.. Gonna try to find a way around it. Thanks for the help, I appreciate it.

[wide notch]

I can't open the Pickle Rick CTF website for some reason

10.10.60.101

[weary spindle]

Attackbox or virtual machine?

[wide notch]

Attackbox

[weary spindle]

Can you screenshot

[weary spindle]

Are you using https?

[wide notch]

Yeah

[weary spindle]

Use http 🙂

[wide notch]

Still nada

[weary spindle]

Can you screenshot the full window?

[weary spindle]

Can you add the address bar?

[weary spindle]

Are you using your host?

I thought you were in the attackbox?

[wide notch]

oh wait

right

it's attackbox only

whooops

Thanks😅

[weary spindle]

Yeah, all the machines are deployed in a 10.0.0.0 subnet, so you either need the attackbox to talk to it, or connect to the VPN (I'd suggest a VM for this)

[wide notch]

Aha alright, thanks❤️

[white wadi]

if you get a VM make sure to look at the openVPN room on the website, I didn't and got very confused when nothing worked

[cunning kindle]

Hi Team, can anyone assist? So I have again waited for 7 days and still facing same issue.

[cunning kindle]

No idea how but it worked Now. Thanks anyway. 🙂

[mint jacinth]

I'm having trouble buying a sub or a voucher. It keeps telling me that my bank has blocked the transaction, but when I called my bank they said that no transactions are occurring when I try to buy a sub or voucher.

[woeful hedge]

I would contact support.

[west chasm]

45-day streak 5% off swag

Article Link

https://help.tryhackme.com/en/articles/8831940-45-day-streak-5-off-swag

Jun 15, 2024, 2:59 AM

[woeful hedge]

Not that link

[e-mail]

[rancid mango]

if i buy a premium subscription, how do I cancel if I don't want to continue, will it keep charging me for following months?

[ivory spruce]

Depends on how you plan to subscribe - via voucher, monthly or annual.

If via voucher, you'll only be subscribed for the duration / validity of the voucher. It comes in 1, 3 and 6 months.

[rancid mango]

monthly probably

[ivory spruce]

if monthly, you'll be charged in advance and there is no refund. if annual, you'll be charged for the entire year, but you can claim a refund if you feel it is not for you.

[rancid mango]

do i have to cancel it at the end of the month or does my account go back to a free account automatically

[ivory spruce]

If you are a student, I remember you are eligible for a 20% discount. I may be wrong though so better confirm or check with THM Support.

[ivory spruce]

If monthly or annually, both are set to automatically renew

unless you cancel your subscription manually.

[rancid mango]

and where can i cancell it manually?

[ivory spruce]

You'll have a button in your access or profile page to do it.

[rancid mango]

ok thank you

[ivory spruce]

THM is a great platform for beginners. I suggest you take a test drive on the free rooms to check if THM matches your learning style. There should be a list of free rooms here. Let me see if I can find it.

[ivory spruce]

#878393611929129000 message

[hollow breach]

I can't connect to the machine via openvpn. I've already tried everything. Different wifi and lan networks. Different operating systems. Regenerated all servers. Changed network settings. I've already tried everything. I haven't been able to connect for two days. I ran the script and it didn't help either. The connection is green on the website.

[weary spindle]

Are you in Russia?

[hollow breach]

yes

[weary spindle]

Then it's probably that, Russia has started blocking vpns

[hollow breach]

No. The other one is working. vpnbook for example.

[dim cedar]

do you recommend bug bounty 2024

[ivory spruce]

If the government has banned VPNs, the only route we can suggest is using the Attackbox as folks here do not encourage bypassing government mandates.

[weary spindle]

because its unethical and illegal

[hollow breach]

Не запретило. Через vpnbook подключается. Any other vpn works.

[ivory spruce]

While that may be the case, it doesn't change the fact that the government has a mandate against it. THM's OpenVPN is running via UDP so the other VPNs that are working could be running via TCP (just my speculation though).

[hollow breach]

vpnbook was connected via udp and everything works. My connection is green on the tryhackme website.

[undone bay]

where can I contact billing support?

[west chasm]

@undone bay

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 15, 2024, 9:30 AM

[undone bay]

thanks @ivory spruce

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 580)

[vague apex]

hello It says $10.50 here but

My payment site says this, which is the real amount?

[ivory spruce]

It says in the first image that is it 10.50 / month, if you multiply it by 12, it should give you 126?

[vague apex]

haha I understand

I haven't seen /month

[hollow breach]

The session is established, but the machine does not ping

[ivory spruce]

Which room are you working on?

[hollow breach]

25 Days of Cyber Security

[hollow breach]

Doesn't work in the other room either

[hollow breach]

ping 10.10.10.10 doesn't work either

[ivory spruce]

Can you share the last few lines of your THM OpenVPN log?

[hollow breach]

2024-06-15 04:51:26 Preserving previous TUN/TAP instance: tun0
2024-06-15 04:51:26 Initialization Sequence Completed
2024-06-15 04:51:26 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 205, compression: 'stub'
2024-06-15 04:51:26 Timers: ping 5, ping-restart 120
2024-06-15 04:51:26 Protocol options: explicit-exit-notify 3

[ivory spruce]

Are you using a VPN on top of THM's?

[hollow breach]

no

[ivory spruce]

Do you keep the terminal where you ran your OpenVPN command open?

[hollow breach]

yes

[weary spindle]

ip a | grep "tun"

[hollow breach]

tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.9.191.173/16 scope global tun0

HackTheBox works

[weary spindle]

Different protocols used.