site-support

[weary spindle]

Htb uses tcp

Thm uses up (for normal) [tcp for networks]

[hollow breach]

how do I solve the problem? the connection is being established. Ping is not coming.

[flat lake]

I'm Not able to connect the vpn

[weary spindle]

What machine are you pinging?

English only please.

[errant breach]

Not all machines react to ping. Try nmap on one of the VMs in the network services room.
https://tryhackme.com/r/room/networkservices

[hollow breach]

I wrote above

[hollow breach]

I tried it on machines I've worked on before

[errant breach]

Maybe worth a try:
traceroute IP
with a machine that you know should answer to pings.

[hollow breach]

only the stars

[hollow breach]

On this machine

[errant breach]

Try ip route. Assuming openvpn would add a route if working correctly, can't verify right now.

[hollow breach]

10.9.0.0/16 dev tun0 proto kernel scope link src 10.9.191.173

[errant breach]

That's the entire output?

[hollow breach]

no

default via 10.0.2.2 dev eth0 proto dhcp src 10.0.2.15 metric 102
10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.2 metric 101
10.0.2.0/24 dev eth0 proto kernel scope link src 10.0.2.15 metric 102
10.9.0.0/16 dev tun0 proto kernel scope link src 10.9.191.173
10.10.0.0/16 via 10.9.0.1 dev tun0 metric 1000
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1
172.18.0.0/16 dev br-d51f296a00c5 proto kernel scope link src 172.18.0.1 linkdown
172.19.0.0/16 dev br-051034f95c1f proto kernel scope link src 172.19.0.1 linkdown

[errant breach]

I don't have access to my machine right now. Maybe someone can confirm if there's supposed to be only routes for 10.9.0.0/16 and 10.10.0.0/16 with the tun0 interface...

[white wadi]

Is crackstation down for anyone else?

[errant breach]

If I'm not mistaken that would mean everything not part of those subnets is sent to eth0, your local physical NIC. (Or docker0)

[errant breach]

Yes, for several days already.

[white wadi]

Damn, doing the https://tryhackme.com/r/room/owasptop102021 task 8 and trying to crack the hash with John is taking forever.
Guess I'll just go make a cuppa

[errant breach]

If you're supposed to look them up on crackstation I'd just Google them instead. They will show up in write ups.

And you're not cheating since you were supposed to look them up anyways.

[white wadi]

You don't think John will get there?

[errant breach]

Depends on how complex and long they are, idk.

[white wadi]

That's fair I'll look it up then

[errant breach]

Could take hours, days.

[white wadi]

Thanks for the headsup

[hollow breach]

It's the same on a separate linux computer, but there's no docker there either

[errant breach]

Someone recommended hashes.com, haven't used it personally.

[errant breach]

You see 10.x.x.x routes with tun0 on a separate computer? That's surprising.

[white wadi]

Haha when I cancelled John there was apparently an estimation of 8hours 50minutes

hashes.com worked perfectly for the purpose.
Thanks for the help

[hollow breach]

I meant that there is the same problem on a separate computer

[errant breach]

Maybe this:
ip route get IP
IP of any THM target machine that doesn't start with 10.9 or 10.10

Maybe I'm riding a dead horse here but no other idea

[hollow breach]

efault via 192.168.31.1 dev wlan0 proto dhcp src 192.168.31.16 metric 600
10.9.0.0/16 dev tun0 proto kernel scope link src 10.9.191.173
10.10.0.0/16 via 10.9.0.1 dev tun0 metric 1000
192.168.31.0/24 dev wlan0 proto kernel scope link src 192.168.31.16 metric 600

this is from another computer

[errant breach]

Yeah that's not helpful switching machines in the middle of troubleshooting

[hollow breach]

I don't know what to do anymore.

[errant breach]

I could check on my VM now and the routes are similar. I don't know how openvpn routing works, but that's probably not the problem then...

[hollow breach]

It seems to me that something is wrong on the part of tryhackme

[errant breach]

Ohh now j get that's the output from ip route. I thought it was the answer to #site-support message

[weary spindle]

Russia could be playing a part in this.

[weary spindle]

I used hashcat.

[white wadi]

Cool, I'll look into hashcat

[potent prairie]

Hello, friends. Setting up a Kali VM for the first time and having a bit of cognitive dissonance about which OS i'm supposed to be thinking in in order to get OpenVPN on THM working.

Host machine is Windows. VM is Kali. Do I need to download the windows GUI to the host machine of OpenVPN or do I need to sudo apt install openvpn? I assume all things THM-related should be in Linux from now on right?

[errant breach]

The latter

If it's not already installed. In any case you wanna have the VM updated for maximum security with sudo apt update && sudo apt upgrade -y

[white wadi]

Dont forget to download the file from the access site on THM

[potent prairie]

So the process freezes and never gives a Initialization Sequence Completed message, but in the topright of my screen I can see I have a VPN IP. And on THM it says I'm not connected. Is this all just lag?

[wind wedge]

The access page isn't always accurate. Are you able to access 10.10.10.10?

[potent prairie]

I just get a blank line. 10.10.10.10 is always running right?

[errant breach]

Access as in open it in the browser or ping it.

You're not supposed to ssh into random machines.

[white wadi]

also if you use ifconfig command you can check if you have a tun0 connection

If I've understood things correctly a tun0 connection means you're on the VPN

[potent prairie]

pinging seems to work

[white wadi]

what if you open a browser and try to type that ip into the url?

[potent prairie]

Appears to load for a long time, seemingly indefinitely.

[white wadi]

Yeah you're not connected to the VPN I'd assume

To what directory did you download the ovpn file from the access site? And what is the command you're using to launch openvpn?

[potent prairie]

path: /home/bmwallace94/Downloads/bmwallace94.ovpn
command: sudo openvpn /home/bmwallace94/Downloads/bmwallace94.ovpn

[errant breach]

Try opening a new terminal and running this

sudo ip link set dev tun0 mtu 1200

[potent prairie]

blank line

ifconfig returns though

[errant breach]

Blank line means it worked

Now try accessing a target machine again.

[weary spindle]

ip a | grep "tun"

[fallen iris]

are you getting the ip load problem in tryhackme

[ivory spruce]

What do you mean by IP load problem? Can you provide more details? Also, please do not post the same concern on multiple channels as it is considered spamming.

[hollow breach]

So I'm not the only one who has such a problem. Is something broken on the tryhackme side?

[fallen iris]

am not getting the response when i load the machine ip into the web browser

[ivory spruce]

What box are you working on?

[fallen iris]

open vpn ?

[ivory spruce]

What room the IP of which you can't access?

[fallen iris]

every room i used to access it wont let me access the site

[ivory spruce]

Can you access 10.10.10.10?

If not, can you share the last few lines of your THM OpenVPN log?

[ivory spruce]

I'm not certain about your case as the government has put a ban on VPNs.

[west chasm]

@fallen iris

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 16, 2024, 4:31 AM

[fallen iris]

0 metric 1000
2024-06-16 10:01:47 sitnl_send: rtnl: generic error (-17): File exists
2024-06-16 10:01:47 NOTE: Linux route add command failed because route exists
2024-06-16 10:01:47 Initialization Sequence Completed
2024-06-16 10:01:47 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 47, compression: 'lzo'
2024-06-16 10:01:47 Timers: ping 5, ping-restart 120
2024-06-16 10:01:47 Protocol options: explicit-exit-notify 3

[ivory spruce]

If you can verify your account to allow you to post screenshots in the discord, that would be great.

[ivory spruce]

What appears on your browser when you access http://10.10.10.10 ?

[fallen iris]

problem loading webpage

and when i nmap that ip it says host is down

[hollow breach]

No. Vpnbook works on the same protocol.

[ivory spruce]

Which THM OpenVPN server are you connected to?

[hollow breach]

I have the same problem.

[fallen iris]

india

[ivory spruce]

Can you try switching into another THM OpenVPN server?

[fallen iris]

ok can you recommend me some

[ivory spruce]

Try EU-Reg-2?

[fallen iris]

ok sir

[ivory spruce]

Wait for ~2 to 3 minutes after switching the THM OpenVPN server before generating your OpenVPN config file

[fallen iris]

it works

am able to see the load the ip into the browser

[ivory spruce]

If you can see your IP when you access 10.10.10.10, then you are good to go.

[hollow breach]

My colleague can connect. So it's not about blocking.

[hollow breach]

I wrote to support by e-mail yesterday. They still haven't answered.

[ivory spruce]

THM Support doesn't work on weekends and holidays.

[ivory spruce]

To which THM OpenVPN server are you connecting?

[hollow breach]

I've already tried it for everyone

[ivory spruce]

Try EU-Reg-2 and wait for ~2 to 3 minutes after switching servers before you generate your OpenVPN file.

[hollow breach]

How do I add a screenshot here?

[ivory spruce]

Also, which OS are you using to connect?

[ivory spruce]

You'll need to verify your account to be permitted to post screenshots / pictures.

[west chasm]

@hollow breach

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 16, 2024, 6:12 AM

[hollow breach]

Kali linux

The access page is green, and on the machine page it says not connected.

[hollow breach]

Have you heard about round-the-clock support?

[ivory spruce]

Yes. Why so?

[ivory spruce]

Can you try accessing 10.10.10.10. using your browser?

[hollow breach]

This is a large portal. We could do it 24/7.

[hollow breach]

no

[hollow breach]

We discussed all these issues yesterday

[ivory spruce]

I'm just a volunteer here so I don't have a say. In any case, THM already does the community a favor by hosting and providing a lot of content for both free users and subscribers.

[hollow breach]

I agree

[ivory spruce]

Having 24/7 support would entail additional costs and may not be practical given their business model. At the end of the day, THM has costs to shoulder and manage. However, feel free to post in the #feedback-and-ideas channel.

[hollow breach]

Hooray I fixed it

First I connected my vpn, then I started the server. Now everything is pinged.

[ivory spruce]

Do take note that Windows boxes do not respond to ping requests in general due to Windows firewall.

[sharp mist]

how can i reset all rooms ?

i didnt use tryhackme for some time so i forgot most stuff so im starting from the beggining but all the rooms are solved

[weary spindle]

You can only reset rooms one at a time, if you wish to reset all rooms, I'd suggest making a new account, or doing them individually.

[upper zodiac]

I have the same problem in https://tryhackme.com/r/room/subscribe. How to proceed?

[placid schooner]

Hey is there a issue with the wreath vpn configuration cuz ive been trying to download it for a week and i still cant

[ivory spruce]

What subnet are you on?

This is so others will be able to help you out. You can also try leaving the room, re-join it after 15 to 30 mins to hopefully be assigned to a working subnet, and generate your OpenVPN config file without issues.

[weary spindle]

Tryhackme are looking in to the splunk issue

[placid schooner]

i have no idea what the subnet is but i can get the other network vpns only the wreath network is the issue

[fathom depot]

guys

i keep getting this error

2024/06/17 03:56:48 [!] unable to connect to https://fakebank.com/: Get https://fakebank.com/: dial tcp 127.0.0.1:443: connect: connection refused

[errant breach]

Room, task, question?

[weary spindle]

Use http.

[ivory spruce]

I think you will be able to see that in the Wreath room upon joining it.

[untold harness]

https://tryhackme.com/r/room/authenticationbypass

TASK 4: This is not PHP code. This is Javascript. This is definitely not PHP. Might want to correct that.

[weary spindle]

#room-bugs

[quartz tangle]

can anyone help me with information on how to build a webcrawler
or to scrape a website using python

[weary spindle]

Answered you on another channel, please don't multi post.

[late sonnet]

I have a problem connecting to THM vpn and its about 1 week now can someone assist me?

[weary spindle]

Which OS and country?

[late sonnet]

Kali linux and country is kenya.

[weary spindle]

Which server are you tyring?

[late sonnet]

AU

AU regular 1

[weary spindle]

Try a different server?

[late sonnet]

It writes Failed due to fatal error in have tried three different servers

[weary spindle]

Do you use sudo?

[late sonnet]

Yes

[burnt gale]

A full log would help

[wicked crescent]

Hello guys, begginer here

I try to connect to the target machine in network services room via the attackbox and it doesnt work when i enter the password for the ssh connection

Can I get some help on it ?

[weary spindle]

Do you need to ssh in?

Does it tell you?

[wicked crescent]

yes

ping it, it responds but doesnt accept the password

I tried connecting with my kali too but I got an issue with creds : Permission denied (publickey)

[weary spindle]

Which task?

[weary spindle]

^

[wicked crescent]

3 - Enumerating SMB

[weary spindle]

Do you have the key?

[wicked crescent]

Using attack box, no but with my kali yes i have an ssh key

[weary spindle]

Are you declaring it in the command?

[wicked crescent]

tried with the i switch didnt work too

[weary spindle]

You might need the password and the id_rsa key

[wicked crescent]

i dont know why it doesnt work with the attackbox too though

[errant breach]

You said you weren't using the key on the attackbox.

If I understood you right.

[wicked crescent]

yes

I never used it before and it worked

[weary spindle]

Each ssh is different.

For the task, you're supposed to enumerate the smb, find the id_rsa and use it with the correct username to login to the SSH.

[e-mail] won't work

[wicked crescent]

aaaahhhhh

sorry i wanted to sped up things

i'll try, thanks for the explanation !

[errant breach]

Tends to result in the opposite on THM.

[wicked crescent]

yea xD

[exotic jacinth]

@wicked crescent Yes, you'll not have to use ssh in task 3. Later in task 4, you'll exploit the smb. There you'll be able to download the id_rsa for establishing an ssh connection with -i id_rsa file to login and CTF.

I'm in task 10 of the #network services room and Hydra is running. It runs since around 3 hours and has only checked 10600 passwords of the 14.344.398 passwords from the file. It would take a bit too long to crack it.
In the text it's written, that Hydra is very fast. Doesn't seem so.
What are your experiences with Hydra?
A FTP login has to be cracked.

[errant breach]

There is no THM room that expects you to Crack anything for more than a few minutes. You're doing something wrong.

[exotic jacinth]

OK, I guessed so. I stopped now the command.
Here's what I ran:
hydra -t 4 -l Mike -P /usr/share/wordlists/rockyou.txt -vV 10.10.2.223 ftp
Anything wrong with it? I just adjusted the given cmd to my target machine and user name.

[ivory spruce]

Have you tried using a small 'm' instead of a capitalised one (as Linux systems are case-sensitive)?

[exotic jacinth]

No, I didn't. Now it was found immediately with the fith occurance in the list. 👍

But I'll remove the "password" password from the list, to test the performance with a proper user name and longer search.
Thank's for the hint! I'm not used to, that the name is key sensitive (windows guy... 😁).
UDPATE: Hydra is not faster, by using a real existing user. No performance difference.

[weary spindle]

Should not take that long.

[weary spindle]

Juice Shop is exempt from this.

[weary spindle]

Unix usernames are all lowercase.

[urban parrot]

trying to complete the first offensive security room

and im inputing my account balance yet its saying that incorrect

oh wow

nevermind

[mental slate]

it is posible to adjust my name in learning path certs?

like just put my initials

once issued

[plush bay]

once it is issued it is locked in and there is 0 ways to change it

for other certs later you can change it by changing your full name on your profile from the manage account section

[mental slate]

So should I remake the path in another account in order to change the name?

[plush bay]

or use an image editor... but yeah that is basically your options.... it might change in the future but there is no granatues for that

[mental slate]

im not sharing the image, but the link to prove

thank you anyway, im remaking paths XD

[plush bay]

just another point to consider these are certs of completion meaning they say nothing about how you solved it... how long it took.. and similar stuffs

so they hold very little value for job hunting

[waxen fern]

Today, while working as a SOC Analyst Level 1, I encountered an issue when trying to open the VNC browser machine. The error message stated, "vnc.tryhackme.tech took longer to respond."

[dry swan]

hello, ive been trying to connect to the vpn through my wsl and it still can't connect... ive tried the thm troubleshooting script and it returns as below

[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
        -Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
        -Switching servers, then regenerating your OpenVPN config
        -Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting```
i tried to run the command sudo tunctl tun0 too but it didn't work...

i've used openvpn before but it never had problem, so i'm so confused

[brittle orbit]

I try to connect "linprivesc" room via ssh.
ping 10.10.214.9 works.
ssh is open
I run command "ssh karen@10.10.214.9".
but it gets stuck after: "debug1: SSH2_MSG_KEXINIT sent"
anyone know what I am messing up?

[gusty glen]

Hello, I'm having some issues with the OPENVPN. Is this the right place to ask for support? Thx

[weary spindle]

It is.

Which OS, server and where do you live?

[gusty glen]

I'm using a Kali in a UTM machine

[weary spindle]

Which server are you trying and where do you live?

[gusty glen]

I live in Spain, tried to use EU-VIP-1

live in Spain, tried to use EU-VIP-1

[gusty glen]

Seems all to work fine except when I try to enter the machine via SSH ... it does not accept the PSSWD.
ssh tryhackme@IP

WHat is the correct PSSWD?

[weary spindle]

Which machine are you trying to SSH in to?

[gusty glen]

I was trying to make the CTF for BIOHAZARD room, the IP I'm getting is: 10.10.228.127

[weary spindle]

That's a CTF room, so the username probably isn't tryhackme

[gusty glen]

And were can I check the correct username? Sorry first time using openvpn and I'm totally lost as you can see

[errant breach]

Finding that out is part of thr CTF challenge.

If you're even supposed to ssh in. Who knows?

[gusty glen]

No, sorry, my idea was to use OPEVPN instead of the WEB version to make the challenge. in WEB I already arrived to step 3, but I never can pass that part as it seems to be a "hidden" timeout and I'm getting kicked of.
So I thought that using my native Kali this would work faster.

[errant breach]

If anything the attackbox is quicker since it's physically in the same network and maybe even data center.
You're probably not doing the right thing.

[gusty glen]

I will check later again 😉 Thx

[scenic torrent]

Gave +1 Rep to @errant breach (current: #52 - 137)

[deep needle]

hello, please how do I bring back my Virtual Machine started to split view, I closed it for space and can't seem to find the option to maximize or bring it back up even though it's still running.

[weary spindle]

Go to the top and resume split screen

[weary spindle]

If you're doing Biohazard, and you know the connections, you'll have a guess on what the SSH Username is

[deep needle]

@weary spindle I've gone to the top of the screen, the site shows my room name, target machine info, room progress but no options to resume split screen

[weary spindle]

Which room?

[deep needle]

@weary spindle Linux strength training room

[weary spindle]

That may just be a room you connect to with ssh/FTP/http, so you may need an attackox or VM

[gusty glen]

I think I messed up myself. Could find out what I was doing wrong. Thanks for the help!!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2415)

[dire bridge]

I never had THM premium and completed these rooms, now they are behind a paywall. Did THM change which rooms are premium or do they shuffle them

[errant breach]

Previously free rooms were paywalled, yes.

[dire bridge]

sad

[solar saffron]

Hi guys, while using Google Chrome, I have a shared clipboard between the attacker box and my own system. However, this is not the case for Mozilla Firefox. Anyone has an idea how I can fix this issue?

[tribal mason]

Did you allow clipboard permissions?

[errant breach]

It doesn't work on Firefox in general. Nothing you can do.

[plush bay]

yes a few rooms got revamped and moved to premium.... if you would like you can report #feedback-and-ideas to make the linux fundamentals rooms free for everyone again

[solar saffron]

oh thats unfortunate 😦

[tribal mason]

Yeah

[plush bay]

they have good reasons why to avoid it

[solar saffron]

and I have good reasons not to use FF while doing THM now 🙂

[plush bay]

fair enoughs

though a lot of people just use their own kali linux vm instead of the attackbox and then this problem is near none existant

[weary spindle]

Via java script.

[lyric apex]

You are asked to test an application but are not given access to its source code - what testing process is this?

[weary spindle]

The answer is in the task materiel, but what do you think?

[lyric apex]

I answer Black-Blok but the site does not state the answer is correct

[weary spindle]

"Blok" ?

[lyric apex]

box

[weary spindle]

No hyphen

[plush bay]

it does not need you to specify the word box

[lyric apex]

thanks my mester

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2418)

[plush bay]

oh wait... guess that changed

it used to not need the word box after

[tribal mason]

Yeah i recall that too

Perhaps updated

[lyric apex]

It worked my brother, if you need me you can call me

[late sonnet]

Hello I mistakenly add a country which i am not staying and i want to change it can you help me out there???anyone

[late sonnet]

@weary spindle

[weary spindle]

Make sure no vpn is turned on and click this, it will take you the the dashboard and this should update your timezone https://tryhackme.com/api/user/update-timezone

[late sonnet]

Thank you it works 🙌🏾

[lyric apex]

Guys, which open source intelligence do you use to fetch data from an image? osint

[next perch]

How do I fix the “We are unable to authenticate your payment method.” when trying to buy subscription

[weary spindle]

Please contact support with the last 4 digits of your card used

[low eagle]

Hello Guys,

I have a problem while connecting to THM Labs using ovpn. I switched the server many times
What should I do?

[weary spindle]

Which server?

[low eagle]

EU-Regular-4

And not this server only btw, each server i choose makes the same thing

[weary spindle]

Which country and OS?

[low eagle]

Egypt, Kali Linux

[weary spindle]

Ah, Egypt blocks the VPN, you can;t use a VPN, you'll need to use the attackbox

[still prairie]

Hi, I completed the Fowsniff CTF but I received only 60 points. Shouldn't be 450 points?

[weary spindle]

The point system was changed, the 450 pointers would have been when it was first released

[still prairie]

thank you

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2424)

[vernal wigeon]

Regarding task 3, "The Metasploit DB," the command systemctl start postgresql isn't necessary because msfdb init automatically starts the database for you.

Have you considered hosting the write-ups on GitHub Pages to allow the community to contribute and improve them collaboratively?

[weary spindle]

most of the writeups are written by community members, so it's wherever they want host them.

[worldly goblet]

Hi TryHackMe Support Team,

I hope you're all having a fantastic day! I just wanted to drop a quick note to let you know that I couldn't find the Reunion island flag on your platform. However, a quick search on the internet reveals it's easily available out there!

Just a heads-up so you can add this exciting challenge to your list. Looking forward to seeing it on TryHackMe soon!

[weary spindle]

Which room is this for?

[worldly goblet]

it's not for a specific room but for the country flag of the account

[bronze vale]

#feedback-and-ideas

[weary spindle]

Oh I get you now!

[worldly goblet]

thanks

Do I need to send them an email for this request?

[weary spindle]

If you go to the channel Jabba linked it will send a contact form.

[worldly goblet]

ok thanks

[vernal wigeon]

Hmm. Do you think it might be beneficial to make this a requirement? It seems much more efficient to enable the community to make changes directly, rather than having to contact an individual for updates.

[weary spindle]

A requirement to writeups?

IMO no, because some members use their own websites etc to host write ups.

[vernal wigeon]

I think we may be talking about different things. I mean the rooms such as: room/metaspoiltexploitation

These rooms can be hosted on a collaborative platform for updates

[weary spindle]

You mean the actual virtual machines?

[vernal wigeon]

The content of the page, including the detailed instructions and example workflows for the room (Metasploit scanning), can be hosted on GitHub Pages. This allows for collaborative updates and maintenance by the community, ensuring the documentation stays current and accessible to all users.

[weary spindle]

Then no, IMO I don't think having the pages enabled to anybody can edit them.

The steps will be out dated at some point, and things change, however TryHackMe update/fix/edit if and when they can.

[vernal wigeon]

They can only be edited by the maintainers. Are you familiar with the concept of opensource?

[weary spindle]

That's... That's the point of my argument...

[vernal wigeon]

Im sayin I can create a PR suggesting a fix and then the maintainers can review and approve @weary spindle

[weary spindle]

I know exactly what you're saying.

[vernal wigeon]

👍🏻

[weary spindle]

The room is almost 3 years old.

If you feel like this is a good idea, use #feedback-and-ideas

I don't speak for TryHackMe, but if they were going to do something like that, I'm sure they would have done it by now.

[vernal wigeon]

Hosting the documentation on GitHub Pages fosters an open-source, collaborative environment, enabling a global community of experts and users to contribute. This approach ensures diverse perspectives, faster updates, and continuous improvement, as opposed to relying solely on an internal team, which may have limited resources and slower response times. This collective effort enhances the accuracy, relevance, and comprehensiveness of the documentation.

[wind wedge]

This will never happen and there are checks that are done to ensure content stays up-to-date

[vernal wigeon]

Could you provide a valid reason why this will never happen? I'm curious because open-source collaboration is a fundamental aspect of security, ensuring that content remains accurate and up-to-date through continuous community contributions and rigorous checks.

I'll wait.

[weary spindle]

Blackout is more than likely doing their job.

[vernal wigeon]

Like I said, I'll wait

[weary spindle]

It feels like you're demanding to know the reason why you're not getting what you expect to get?

Thm don't have to provide a reason, for doing something the way they would like.

[vernal wigeon]

I'm not demanding a reason; I'm simply inquiring to understand the rationale behind the decision. It feels like your comment is making unsolicited accusations, and I'm looking for a constructive discussion. Thank you but that will be all @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2426)

[tawdry orbit]

Are you asking for an alternative way to submit content findings? You can send your idea to: https://tryhackme.com/feedback

[vernal wigeon]

I'm just simply asking Blackout a question

[weary spindle]

Tim is the QA manager.

[errant breach]

The best checks in the world don't help if they frequently don't result in actions, like here

#room-bugs message

or here

#room-bugs message

here

#room-bugs message

or here

#room-bugs message

and five minute fixes like changing one four-letter word for a different one, if ever, take >1 month to be implemented (red team recon). In rooms people pay for that is. In addtion to providing free QA to a for-profit business.

[vernal wigeon]

+1 @errant breach

[wind wedge]

Although it can be considered fundamental aspect of cyber security. We have a dedicated team for this that do checks frequently. Especially if anything is missed we get reports and are raised. Anyway I could be wrong and you're more than welcome as to suggest it to #feedback-and-ideas as others have stated 🙂

[wind wedge]

I will look through these and get these raised

[vernal wigeon]

@wind wedge While having a dedicated team is valuable, open-source collaboration leverages the collective expertise and vigilance of a global community, often resulting in quicker identification and resolution of issues. This decentralized approach can enhance security and ensure more comprehensive updates. Suggesting feedback to a specific channel seems dismissive

[weary spindle]

It's not dismissive, it's how TryHackMe have dealt with bugs found in rooms.

[vernal wigeon]

LOL. And thats better, right? Ok. Job done Check

[weary spindle]

This conversation is no longer context for this channel. 🙂

Blackout have provided you with an answer on why it's done the way it's done, this channel is for support. 🙂

[vernal wigeon]

Like I said, check

🙂

[weary spindle]

There is no sense in carrying on this conversation.

I'm not TryHackMe staff, so arguing with me won't get you anywhere,

[vernal wigeon]

Im not the one carrying on the convo 🙂

Have a great day 🙂

[errant breach]

You're not thm staff yet you feel the need to include yourself into a conversation between THM staff and a user, needlessly defending the the former as if they paid you, while they're still writing an answer to the latter. Can't have it both ways.

[vernal wigeon]

+1

[weary spindle]

..What's your excuse?

[tawdry orbit]

Alright, this conversation has run its cause. Let's move on. Feedback link is available for your ideas on how to improve reporting content findings.

[errant breach]

That's only the ones easily findable through search because they contain 404. I don't know what the process is at THM but it's utterly broken in so many ways. Bug reports are more often than not outright ignored instead of at a minimum acknowledging them. I could compile a long list of reported but unfixed issues just from 2024.

And when paid rooms are completely broken for weeks, like currently with minikube certs or the splunk one, instead of showing basic courtesy to paying user by putting a note in the rooms "this is broken, sorry for the inconvenience, please come back later", user's time is being wasted. Because of course people first try to figure out what they might be doing wrong, they Google, search the subreddit and server, before eventually maybe asking here, or just moving on.

That's the absolute 101 of customer service that's lacking here: communicate! Proactively. If you inconvenience users, make it as little as possible.

I unsubbed for those reasons.

[vernal wigeon]

I couldn't agree more with your points. The lack of proactive communication and acknowledgment of issues, especially for paid rooms, is indeed frustrating and undermines the user experience. Your detailed observations highlight the critical need for better customer service and responsiveness. Thank you for articulating these concerns so well! I only hope the THM team is not dismissive per usual.

[scenic torrent]

Gave +1 Rep to @errant breach (current: #50 - 147)

[autumn iron]

Hello all, trying to connect to THM using VPN from my VM, unfortunately , I am getting an error TLS handshake failed. I ran the THM troubleshooting script and it says "not connected to internet". However, I am able to use firefox and ping websites. any help is appreciated 🙂

[plush bay]

try and see if any of the other vpn servers work

[autumn iron]

tried, no luck

[plush bay]

which vpn server are you on currently???

[autumn iron]

tried US-East/West-Regular-1

[plush bay]

hmmm

[errant breach]

Tried recreating the ovpn file and downloading it again?

[autumn iron]

yes

[glossy grove]

Hi everyone! How come we can't download file to be able to follow rooms properly ? It's the 3rd time it's happening to me and the first consequence is the waste of my time. I tried different methods and nothing.

I'm unable to download the required file for Brute force heroes room. I've already wasted an hour only to figure it out

Any help ?

[errant breach]

What happens if you download it?

[glossy grove]

It says : unable to connect

An error occurred during a connection to tryhackme-vm-upload.s3.eu-west-1.amazonaws.com.

[weary spindle]

Is your browser blocking it?

I just downloaded it fine.

[glossy grove]

Nope but let me check again

[weary spindle]

If you can't, I can send you it.

[glossy grove]

I removed all my browsers configurations and still nothing. Unbelievable

[torn musk]

Hi. I am connected to Wreath network VPN but the first machine 10.200.73.200 is not responding.

[quasi mango]

hii. so when i have started thm i can able to share room completion on my linkedin. but right now i just solved the new launched ios room, when i try to share it on linkedin it is showing cyber security training as an logo. why i can't able to share the original logo. or is it the default on for that room?

[rich relic]

hi can someone help me , it wont let me switch to the windows machine it just keeps opening on linux

[stable cloak]

hi

everyone

i am having issues using attackbox

can someone help me

[desert thistle]

Guys i lost my thm streak what to do

[sand peak]

is there room voice here to play ?

[ivory spruce]

Depending on how long your streak was, you can drop an email to THM Support and they should be able to restore it for you.

[west chasm]

@desert thistle

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 20, 2024, 6:00 AM

[ivory spruce]

What specific issue are you having? Also, are you a subscriber?

[ivory spruce]

Which machine doesn't allow you to do so?

[ivory spruce]

Have you tried voting for a reset?

[stable cloak]

i am enrolled in the jr.penetration tester path

and even if i follow

the instructions and how to perform task i can't do the same in attackbox

or linux

[unkempt oar]

Hi guys, i need help to answer the question below, no matter what is my input the system outputs wrong answer.

What will be your role as a Junior Security Analyst?

[ivory spruce]

Which specific one are you referring to?

[vague apex]

This happens when I register for a CTFE or when I press the button to see the IP address, black screen appears and I have to restart the site. What is the reason for this? It only happens on this site. How can I fix it?

(+ I use plugins like ublock, could it be because of that?)

[rich relic]

the Auditing and Monitoring room , you start wit the linux machine then have to switch to windows and i cant get it to switch

[leaden kiln]

So, Can anyone solve this rdp issue how to connect as it's not connecting via rdp

[weary spindle]

You on the vpn?

[leaden kiln]

Yep

[weary spindle]

use reminna.

[leaden kiln]

@weary spindle I was recently connected through rdp I can also able to access the Windows via rdp but it shutdown showing network disconnect due it's because of my net issue? You see I am connected via Hotspot my wifi is currently down.

[leaden kiln]

I also tried that but the same issue over there

[weary spindle]

Could be the hotpot isn't good enough

[leaden kiln]

Yea I think show

[worldly goblet]

Hello, I have a question. When you click on "View Profile" below your name, there is a description. How can you change it?

[worldly goblet]

ho sorry, thank !

[naive dust]

hey guys, im currently trying to SSH into the room, but getting an issue "Permission denied (publickey)" I've looked online and tried a few things, but im not exactly advanced with linux, (its my first time using it), I've noticed that when im trying to SSH, it doesnt even ask for a password, like it does with othersw in the tutorial im watching, is there something i am missing?

[weary spindle]

Which room?

[naive dust]

Intro to offensive security, the hacking fakebank one

this is the command i am attempting

ssh tryhackme@10.10.141.115

[weary spindle]

Which room are you doing?

[naive dust]

https://tryhackme.com/r/room/introtooffensivesecurity

[weary spindle]

You don't ssh in that room.

That's why it's not working

[naive dust]

oh right

Im having another issue then, i cant even access the fakebank link, i assumed that was because i hadnt SSHed

now i feel stupid lmfao been trying to figure this out for a little while

[dire ravine]

try rdesktop

best sol is you use windows RDP client along with using openvpn client of windows to connect vpn

[cinder imp]

Hey anyone here tried snort challenge the basic room i have some doubt if anyone could help

[tawdry orbit]

Hello, sorry to hear about this. Do you have a room example that is problematic?

[torn musk]

I was looking for solutions other than resetting. The problem was fixed after letting the time run out and starting the network again. Anyway I completed the room. Thank you 😁

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 588)

[modern olive]

why the onboadring wants your phone number

[agile zephyr]

Looking for where to report an issue with a room, not sure the best place to do it.

https://tryhackme.com/r/room/metasploitexploitation - Task 5

Hint states - The target is missing the MS17-010 patch. But NMAP OS scans come back with "No exact OS matches for host" and when running the MS17-010 scanner from msfconsole, you get the following "Host does NOT appear vulnerable."

Ignore that above, I fixed it how you fix 90% of computer problems, turn it off and turn it back on again. Terminated the box and rebooted it and it's now showing OS version and being vulnerable to MS17-010 exploit

[weary spindle]

Discord?

[hidden briar]

hello

I need help

[cyan mantle]

I've got the same problem lmao, thx for ur answer !

[scenic torrent]

Gave +1 Rep to @cursive pollen (current: #1400 - 2)

[weary spindle]

Shoot?

[hidden briar]

i have aa problem with ransomware

have u ever seen this extension . PARAHAT

[floral agate]

I am really annoyed by this text size variation

kindly do something about it difficult to read

Many rooms are having this issue idk if this is the issue related with site or within the rooms

[weary spindle]

Think it's super script.

[jade condor]

Hello, i'm having an issue in wazuh lab, i connect the vpn connect to the wazuh dashboard and get this issue

Error getting the authorization token

3002 - Request failed with status code 400

issue with API with wazuh manager ( config may have an issue)

[modern olive]

the website new account onboadring

[weary spindle]

You can leave the number out

or enter dummy info

[modern olive]

bruh

[dire ravine]

@tawdry orbit i am having issue related to Network VPN tried every possible troubleshoot.

i want to connect to breachingAD

[weary spindle]

Can you download the VPN file at all?

[dire ravine]

yeah i did

not able to connect

[weary spindle]

Follow the steps I have in the pinned posts of #breaching-ad

[dire ravine]

i have followed the steps the main issue i am facing is this.

[weary spindle]

You need to verify to post screenshots.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 21, 2024, 4:39 PM

[dire ravine]

2024-06-21 12:34:58 Initialization Sequence Completed
2024-06-21 12:34:58 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 0
2024-06-21 12:34:58 Timers: ping 5, ping-restart 120
2024-06-21 12:34:58 Protocol options: explicit-exit-notify 3

[weary spindle]

That's fine.

Just minimise it

[dire ravine]

okay but on access page it says i am not connected

[weary spindle]

That's broken, just ignore it 🙂

[dire ravine]

okay

now i am not able to ping DC then

followed the step no gain

may be its bricked state

???

[weary spindle]

Which subnet are you in?

[dire ravine]

the network is 10.200.27.101

[weary spindle]

Nah, everything is working.

Can you go to the link in Task 3/4?

[dire ravine]

Nope

[weary spindle]

did you follow the steps in the pinned posts in #breaching-ad ?

[dire ravine]

followed and revised again

─$ nslookup 10.200.27.101
;; communications error to 10.200.27.101#53: timed out
;; communications error to 10.200.27.101#53: timed out
;; communications error to 10.200.27.101#53: timed out
;; communications error to 10.10.10.10#53: timed out
** server can't find 101.27.200.10.in-addr.arpa: NXDOMAIN

`nslookup thmdc.za.tryhackme.com
;; communications error to 10.200.27.101#53: timed out
;; communications error to 10.200.27.101#53: timed out
;; communications error to 10.200.27.101#53: timed out
;; communications error to 10.10.10.10#53: timed out
Server: 192.168.1.1
Address: 192.168.1.1#53

** server can't find thmdc.za.tryhackme.com: NXDOMAIN`

[weary spindle]

It's still not using 10.200.27.101 as the nslook up

[dire ravine]

because i am not able to connect to it

[quick wasp]

Is there an issue with openvpn again? adding the data-ciphers line fix isn't working and I can't find anything different.

[weary spindle]

Which server?

[quick wasp]

US west vip 1

[weary spindle]

Try a new server

[quick wasp]

I tried regular west too, I'll try east.

[glacial geode]

Even though I solve questions on the site, my score does not increase. My account has a bug. Can you help me?

[weary spindle]

Some rooms don't grant points.

[quick wasp]

I redownloaded the config file and renamed it, that seemed to have worked.

[glacial geode]

No, it is one of the rooms that give points, but I solved 570 rooms today, I think the account got bugged because I solved too many.

[bronze vale]

What's your site username?

[glacial geode]

Dogu589

[tawdry orbit]

We're looking at a solution for this. Thank you for reporting. 🙂

[scenic torrent]

Gave +1 Rep to @pulsar sphinx (current: #2106 - 1)

[runic pendant]

Are changelogs for rooms a thing? I've found a flag that isn't an answer to anything, was hoping to review changelogs and see if it was the answer for an old task/question.

[scenic torrent]

Gave +1 Rep to @tawdry orbit (current: #16 - 455)

[halcyon swallow]

I'm using Firefox and every once in a while TryHackMe sites just freeze. Not to the point of 'Page Not Responding' but just earlier a confetti animation froze mid animation for about 5-10 seconds before finishing.

Does anyone know the reason for something like that?

[past dock]

I cant use firefox in either the attack box and virtual machine given in the Threat Intelligence Tools room so I cant use phishtool to check the emails

[ivory spruce]

Internet access in the Attackbox is restricted for subscribers only. You could use Thunderbird or view it in your attack machine or VM for the purpose.

[weary spindle]

That room is a standalone vm, and doesn't have internet connection at all.

[past dock]

The whole point of the exercise was to use phishtool though. I can use thunderbird fine but that's only a viewer nothing more. Luckily I was able to find hashes through properties of the file itself and I thought the attack box should have an Internet connection regardless since you get free 1 hour a day. I then tried to then transfer the email files across via python3 server from the vm to the attackbox vm then dump the files into phishtool which didn't work since there was no Internet connection lol.

[weary spindle]

No. We don't suggest taking files that could be harmful to your system, if something goes.wtkg it's not THM fault.

Also, it's good practice for sandboxing.

[past dock]

I didn't use my machine I used two vms that are from thm, the vm given in task 5 and then the attack box

[weary spindle]

Yeah, the task 5 machine doesn't have Internet because of the files.

[past dock]

Yeah makes sense

[abstract veldt]

Hei 👋 I'm trying to access the Red Teaming learning path machines, haven't done this in a while and maybe I made a mistake with the VPN connection or something. I'm on a Business Subscription and used EU-VIP-1 and 2 but I cannot access the machine from Weaponization Module (final task) and I can't find a separate vpn package that should be downloaded for this learning path 🤷‍♂️

[wind wedge]

If it’s a normal lab room the normal openvpn would be fine. Which room in the module are you doing?

[abstract veldt]

Weaponization, Task 9, machine: Win10Office2016-Installed ... I assumed EU-VIP-1 or 2 should've worked since there isn't anything separate but I can't seem to reach the machine.

[wind wedge]

Are you able to connect to 10.10.10.10

[abstract veldt]

Yep, I think the issue is with the machine itself, seems like that :8080 web server didn't start 😅 I was able to connect backwards from that machine to mine on port :80... I'll give it a restart, maybe that fixes the issue

[wind wedge]

Yea it’s possible you just got unlucky with a machine that don’t wanna connect 😄

[abstract veldt]

Could be, nevertheless thank you!

[wind wedge]

No problem, ping me if any issues 🙂

[raw ice]

is there a dark mode?

[weary spindle]

Not yet

Google dark reader

[raw ice]

il have to use force dark then lol

thats better

not the best looking

but itl do

[raw ice]

It has been 5 min

also question is your vpn just for general use or is there a spesific use case

[timid talon]

The VPN lets you connect to the THM network on which the target machines are based.

[raw ice]

I see

[halcyon swallow]

I am on the "Intro to Web Application Security" page. There is an animation in it. I tabbed out to check something and when I came back in the entire page is blank and it looks like this. The other windows I have in my browser refresh and appear to be working okay. I cannot however right click in the THM website and refreshing does nothing.

Okay, it has reloaded.

It's reloaded and I managed to answer one question correctly and begin typing the answer to the next question before it froze again.

I guess one thing that's worth noting is that I do have Ublock Origins installed. Does that interfere with the site?

[woeful hedge]

Disable it for the TryHackMe domain just to reduce potential interference. Then try again. Afaik, there's no ads on THM.

[jagged mortar]

hi hi. guys i getting restart pause error if i tryna connect the server with openvpn. how to fix it
is anyone there who know?

[ivory spruce]

Which THM OpenVPN server are you trying to connect to?

[jagged mortar]

which?

bro hahaha mow many are there

i have downloaded

and trying to connect it

i dont know which one

[ivory spruce]

In the access page, it should show to which server you are connecting to? THM has OpenVPN servers in IN, AU, EU, US, etc.

[jagged mortar]

aah i got it

just a min

i'll check it out

EU-Regular-3

[ivory spruce]

Try EU-Regular-2 or EU-Regular-4 and wait for ~2 to 3 minutes after switching the server before generating your OpenVPN config file.

[jagged mortar]

ok i'll try right now

ups

its working

@ivory spruce thank you dude you are the bestt

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 589)

[ivory spruce]

Glad I could help. I just lurk around here often and happen to read stuff. 😅

[jagged mortar]

hahaha 😄

[paper dome]

hi guys i got this problem and i tried a lot to solve it and i just end up in dead end , ERROR The requested URL could not be retrieved

[weary spindle]

Which url?

[paper dome]

with room

https://tryhackme.com/r/room/creative

and i've tried with another room and i got the same problem

and used another browser

[weary spindle]

Are you trying to access http://creative.thm ?

[paper dome]

yes

[weary spindle]

Did you add the IP to your hosts file?

[paper dome]

no

[weary spindle]

That's why, you need to add the ip in your hosts file, so it will use the URL instead of IP.

[paper dome]

alright thank u

[high root]

I have questions regarding certificates, say I earned one:

• can I generate both with my real name + username?
• are they accessible by any users on the platform or are they completely private?
• can we generate them more than once (say I had a typo in my name and want to re-generate my certificate with my proper name)?

Thanks in advance for the assistance!

[west chasm]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Jun 23, 2024, 5:57 PM

[weary spindle]

No, when a certificate has been generated. It can't be changed

[high root]

I see, can we generate both with real name and username?

[weary spindle]

Users can access the certificate if you give them the thm flag on the bottom right corner.

[weary spindle]

No, only one.

[high root]

gotcha, thanks, Scrubz

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2445)

[high root]

you're an amazing support ❤️

[ivory spruce]

This might be more suited in #room-bugs

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 592)

[naive dust]

My streak seems to have been reset but I have been active for the last 6 days?

[potent cairn]

how do i get my vm to connect to openvpn, it keeps saying tls handshake failed

[weary spindle]

Which country are you in?

Which server and os?

[potent cairn]

uk, eu vip 1, parrot os

[weary spindle]

Should work.

Are you using sudo?

[potent cairn]

yes

sudo openvpn /home/username/Downloads/ovpn file

[potent cairn]

nvm now it says tls key negotiation failed to occur in 60 seconds

[dry mountain]

Hello I have a small issue also with VPN. The connection seems to work well but the website doesn't show me that I'm connected. I have a container with the vpn and I can ping 10.10.10.10 on it but outside the container without the vpn I can't
I also have another issue : my attack with metasploit don't work. I always have a problem during the attack where things like shell can start even if I follow step by step a solution found on google. I don't know if the problem is related

[plush bay]

well sounds like the major problem is because of using the openvpn in a container instead of host system

[tawdry quail]

hello im trying to connect to the vpn but i never connects

[ivory spruce]

Which THM OpenVPN server are you connecting to?

[tawdry quail]

EU-regular 3

[ivory spruce]

Which THM OpenVPN server are you connecting to?

[dry mountain]

Mh I'll serach in that direction ty

[scenic torrent]

Gave +1 Rep to @plush bay (current: #4 - 1781)

[ivory spruce]

Try EU-Reg-2 or EU-Reg-4 and wait for ~ 2 to 3 mins before generating your OpenVPN config file.

[plush bay]

try using a virtual machine

[ivory spruce]

Have you answered at least one question in each of those days you were active?

[tawdry quail]

its connected thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 593)

[tawdry quail]

EU-regular 4

[naive dust]

I would have thought so, can't really remember what I did but the streak was there yesterday so I guess it thinks I didn't yesterday (23rd) but activity tracker says 28 events, so unless none of those were classed as questions I'm not sure what happened

[ivory spruce]

Hmm.. not sure if timezone does come into play here. You can also drop an email to THM Support to inquire about it.

They can restore your streak as well.

I'm just no certain if there is a limit to said requests.

[potent cairn]

eu vip 1

[scenic glacier]

Good evening, for the life of me I can't figure out why I can longer connect to the wreath network. I ran the bash script tool and it says "Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum " Anyone have any tips? I can connect to a machine but not to the Network Wreath

[ivory spruce]

Can you try connecting again? If it doesn't work, can you re-generate your OpenVPN config file?

[ivory spruce]

Have you tried joining it again?

[scenic glacier]

Sooooo many times all day long

[ivory spruce]

After generating the network, have you generated your OpenVPN config? I'm not sure if you can re-use the previous one as you might be assigned to a different subnet this time around.

[scenic glacier]

Yes I would hit regenerate, then download the new config file, still no luck

[ivory spruce]

Is the file empty or not?

[scenic glacier]

the vpn would say its connecting but the Open VPN Access Details connection shows not connected in red and I can't ping 10.10.10.10 or hit the machine

[sullen lava]

pretty sure I cancelled my subscription it just renewed again for a year how do I cancel this

[west chasm]

@sullen lava

Cancelling Your Subscription

Article Link

https://help.tryhackme.com/en/articles/7262866-cancelling-your-subscription

Jun 24, 2024, 7:08 AM

[steep pelican]

At everyone who had or have problems to connect. Make sure there is no other vpn running(!)

[dry mountain]

Actually when I go to the access page it's said that I'm connected and I have an IP, but on others page the button "access machine" is constantly red

[steep pelican]

"Access machine" is your Attack box IP .

If ur using ur own one that field still red.

[dry mountain]

oh ok, I guess my memories were wrong, thank you !

[steep pelican]

ur welcome ✌️

[earnest salmon]

Hello, I keep getting this pop up on Active Directory Basics , what should i do?

[weary spindle]

Did you go to the page?

[earnest salmon]

yes , and this the page , should I send an email or I can get help over the discord?

[weary spindle]

Yes please 🙂

[earnest salmon]

Ok , thank you.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2447)

[grizzled basin]

I'm toying with creating a room or two but have a question about VM creation. Your docs give limitations on supported OSs (e.g. Debian 8, Ubuntu 20.4 or less) because of AWS conversion limitations. However, the AWS support page (https://docs.aws.amazon.com/vm-import/latest/userguide/prerequisites.html#vmimport-operating-systems-linux) indicates that modern releases of OSs are supported by AWS now (I know they certainly were in the dark ages last time I tried a conversion a couple of years ago). So is this a case of your documentation hasn't caught up, or are there other limitations in play?

[tawdry orbit]

The AWS list is likely more up-to-date. What OS and version are you planning to upload?

[unborn jewel]

Hey i can't start the Bandit Challenge, do i have to be connected to the network first?

[weary spindle]

Read the task material, it will tell you how to start 🙂

[unborn jewel]

Thansk, actually i can't even download any VPN config for networks. The dropdown menu on the Acces page does not list any configs. Do you know something about this?

[steep pelican]

Is no server available?

[unborn jewel]

No, not on the networks tab. The machines tab show the regular vpn configs (eu-regular-1, ...)

[weary spindle]

You need to join the rooms before you can download the network vpn pack

If you're a free user you need a streak of > 7 to join it.

[unborn jewel]

I have premium access

And i joined the Bandit room

[grizzled basin]

I normally default to Debian 12 - I have nothing built yet. I suppose the best way is to try it and see 🙂

[unborn jewel]

I left the room and joined again. Now i can start the machines of Bandit but on the Access page there is still now available vpn config for the bandit network room.

[steep pelican]

And the dropdown for servers doesnt work?
Sorry for the questions but I dont wanna go in the wrong direction.

[unborn jewel]

Oh after reloading / waiting some time the config for bandit room is available.

May took some time 🙂 Thanks

[scenic glacier]

Hello for the life of me I can't figure out why I can longer connect to the wreath network. I ran the bash script tool and it says "Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum " Anyone have any tips? I can connect to a machine but not to the Network Wreath

[shadow shadow]

Hello

[slim wraith]

Hello, I'm currently working on the room "Ad enumeration" (https://tryhackme.com/r/room/adenumeration). Previously, I have completed the room "Breach AD". I can't connect using VPN (because I'm using a secure network), so I have to use AttackBox, but the issue is that the interface "enumad" does not appear when I launch attack box from the ad enumeration page, so I can't access to the network, setup the dns or anything. Rather to have "enumad" interface, I keep having "breachad" interface set up. What I had try to resolve this issue acutally: logout/login, change browser, reset network, restart attackbox, use Kali WebBased instead... Does anyone have an idea about what I can do to solve this issue ?

[brittle orbit]

Subject: Issues with TryHackMe OpenVPN Connection

Hi everyone,

I've been experiencing issues with my OpenVPN connection to TryHackMe. The VPN connects via UDP, but I often encounter slow and unstable connections. It takes a long time to establish SSH connections, and 19/20 times it gets stuck completely right away.

When I had similar issues with HackTheBox, switching from UDP to TCP solved the problem. Unfortunately, TryHackMe doesn't offer a TCP option. Has anyone else faced this problem? Any suggestions on how to improve the connection stability?

Thanks in advance for your help!

[ivory spruce]

Hmm...try ens5

[ivory spruce]

How are you connecting to THM OpenVPN?

[brittle orbit]

What exactly do u mean?
I "sudo openvpn xyz.ovpn"

[brittle orbit]

xyz.ovpn is the config filed downloaded from thm.

[brittle orbit]

Server is EU-Regular-2, tried different ones. Didnt change. Pinging works. THM says im connected.

[slim wraith]

Looks like it's not the right way

[brittle orbit]

Problem solved: someone suggested adding config "tun-mtu 1500 and mssfix 1400" to my .ovpn file and it works.

[weary spindle]

You'll have the breached for as long as you're in the room, they're all separate.

Open your Edu configuration and see if it'd empty

[naive dust]

hello

[slim wraith]

Yes I know, but I have completed Breach AD, so I’m not supposed to have this interface anymore right ? And also, since I have joined « enumeration AD » I’m supposed to have the new enumad interface ?

About Network Configuration on the Desktop of the attack box, it contains enumerationad .ovpn but if I try to force the launch by using sudo openvpn, it give me an error that says « cipher not specified »

[tiny plaza]

Guys where can i find CTFs?

[weary spindle]

On the website.

[north palm]

I am trying to start the network in the CI/CD and Build Security room. Current status is "Network state:Stopped". Clicking the Start button I get the error Uh-no! Failed to start the network.. Is there a known problem with this room? Tried with Chrome and FF but no difference.

[unborn jewel]

I had a similar problem in the bandit room. Try to Leave the Room via the Options button and join again.

[dire ravine]

Having problem in connecting with ADEnumeration network openvpn config file.

2024-06-25 08:51:06 OPTIONS IMPORT: --ifconfig/up options modified
2024-06-25 08:51:06 OPTIONS IMPORT: route options modified
2024-06-25 08:51:06 OPTIONS IMPORT: route-related options modified
2024-06-25 08:51:06 Using peer cipher 'AES-256-CBC'
2024-06-25 08:51:06 Error: problem with tun vs. tap setting
2024-06-25 08:51:06 Exiting due to fatal error

[north palm]

@unborn jewel That fixed it, thank you!

[scenic torrent]

Gave +1 Rep to @unborn jewel (current: #2111 - 1)

[stray plank]

2024-06-25 09:10:14 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-25 09:10:14 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-06-25 09:10:14 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-06-25 09:10:14 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-25 09:10:14 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-06-25 09:10:14 DCO version: N/A

I'm trying to use openvpn to connect but this error occured, can anyone help me?

[stiff orchid]

is that the last text shown in the terminal or is there more?

if you can see this line, you are connected

[steep pelican]

Last one

[rare spire]

I’m having an issue connecting to one of the TryHackMe VPN servers, preventing me from ssh’ing into the target box from my attack box. I can’t figure out how to fix it and TryHackMe support has been very sluggish at getting back to me. Halp.

I’m on the Nmap module, and every time I try to ssh into the target box, the connection times out.

I’ve changed the VPN server to southeastern US, and refresh this connection, then regenerated the OpenVPN key and downloaded it after. Nothing.

[steep pelican]

Did you try
"sudo openvpn newvpnfile.ovpn" ?

[rare spire]

I have not. I will give this a try. Thanks!

[scenic torrent]

Gave +1 Rep to @steep pelican (current: #858 - 4)

[languid pier]

is US-East 1 openvpn servers down because when i try to connect via openvpn my kali says the initialization sequence is completed, but tryhackme says I'm not. Also when i try to ping the built in machine for the Nmap room it only pings once and stops. Speaking of Nmap when i try to tcp syn scan the given machine it says the host is down. thanks

[steep pelican]

After connection have u tried to refresh the whole thm site?

[languid pier]

yeah

still says im not connected.

i reset the given machine

hopefully that works

if that doesnt i might have to reset my ovpn file

yeah that didnt work either

[steep pelican]

And or stop the process on your machine and reconnect.

[languid pier]

i did that once already. ill try again tho

[steep pelican]

Any other vpn runnin'?

[languid pier]

no

im at a loss tbh

[steep pelican]

If u r connected on your machine, can u ping 10.10.10.10 ?

[languid pier]

that stops too

pings once and stops

100% packet loss

[steep pelican]

U ve been done any changes on your network?

[languid pier]

no

[steep pelican]

I guess no

[languid pier]

it worked on friday lol

i was on vacation and havent used thm in a while

and just got on now this

its weird

[steep pelican]

A little yes. Just restart your vm ?

But if there is one ping for request and no response u could be right that the server is down.

[steep pelican]

How did you stop the process?

on your machine.

[languid pier]

when you mean stop the process as in stop ovpn from connecting?

or trying too

[steep pelican]

@languid pier sudo killall openvpn

[pseudo snow]

what is the average response time for tickets ?

[weary spindle]

Unknown right now, however they don't work weekends.

[pseudo snow]

i did the solution you suggested in adenumeration channel and it worked

[wind wedge]

Usually 1-2 days depending on ticket. As scrubz said if on a weekend it will take about 3-4 days

[tawdry needle]

Apparently we are waiting for it to get fixed...

[rare spire]

So I tried that command, and it’s not working

[ancient plinth]

i'm also having vpn issues
originally in my linux vm, it's giving a tls error
I've already searched through the pins, tried all of the solutions there to no avail
But i've went onto my pc, installed openvpn and it's just giving me a timeout, even when connecting to my phone's hotspot

is there something I'm missing or is my internet and hotspot simply just too slow?

the ovpn version is 2.6.7 but I did change what it did, but also the ovpn troubleshooting script just doesn't run and i must be missing something because it says its not found even after doing chmod on it

and also is eu-3 the closest to the uk or are any of the other ones closer?

[ancient plinth]

anyone? its been an hour now

[blazing carbon]

I am having issues accessing tryhackme using openvpn.
Following is the output of the code
2024-06-26 03:25:45 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-26 03:25:45 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-06-26 03:25:45 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-06-26 03:25:45 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-26 03:25:45 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-06-26 03:25:45 DCO version: N/A
2024-06-26 03:25:45 TCP/UDP: Preserving recently used remote address: [AF_INET]3.7.33.194:1194
2024-06-26 03:25:45 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-26 03:25:45 UDPv4 link local: (not bound)
2024-06-26 03:25:45 UDPv4 link remote: [AF_INET]3.7.33.194:1194
2024-06-26 03:26:45 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-06-26 03:26:45 TLS Error: TLS handshake failed
2024-06-26 03:26:45 SIGUSR1[soft,tls-error] received, process restarting

[high kindle]

Hello, I'm trying to access my old account that I've forgotten its password. I know my username and email but when I say I forget my password, I don't get any email on what to do. Can someone help, thank you.

[uncut sky]

Hey, I bought subscription for 1 month on 19th june and after that everything was good but today when I opened my tryhackme account, it asked me to buy subscription, even though I have already paid for subscription on 19th

[ivory spruce]

Do drop the THM Support email for this one as they will have visibility on this.

[west chasm]

@uncut sky

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 26, 2024, 8:54 AM

[ivory spruce]

Have you checked the spam folder?

[ivory spruce]

Which THM OpenVPN server are you connecting to?

[weary spindle]

Youll also need to contact support.

[ivory spruce]

Ugh.. do note that this is the forum and not the official THM Support channel. Thus, most folks here are volunteers although there are a couple of THM Staff (but not from their Support Team).

[ivory spruce]

Try EU-Reg-2 or EU-Reg-4 and wait for ~2 to 3 mins after switching THM OpenVPN server before generating your OpenVPN config file.

[ancient plinth]

Sorry i was just getting impatient but I’ll try those other servers after work

[blazing carbon]

Well I have tried EU-6 EU-1 and IN-1

[blazing carbon]

Ok

[raw ice]

Question : how do you change the taskbar on an attackbox

its doing my head in

[weary spindle]

Wdym?

[raw ice]

I want to move this

I know nothing is saved

but I need to move it

[random grove]

edit the panel and move it to the bottom if needed.

[torpid rain]

Hi guys. Having an issue with openvpn for Breaching AD network. Connecting trouhg CLI, getting IP but cannot pin 10.10.10.10. Regular VPN is working normally. I would really appreciate some guidance))

[weary spindle]

Do you have the VPN running?

[torpid rain]

Negative

[weary spindle]

Is it erroring?

[torpid rain]

Nope, no errors, getting "Initialization Sequence Completed
", receiving IP within THM range but still cannot ping 10.10.10.10. Tried to regenerate the cofig file several times.

Same result

[weary spindle]

Yeah. it's on a different box

[weary spindle]

Go to #breaching-ad and follow the pinned posts by me.

[torpid rain]

Tnx

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2454)

[languid pier]

I think I have the same problem except it’s the nmap room

It says the same sequence initialization complete but it say I’m not connected to the Machine

[glacial hound]

Where does it say you aren't connected to the machine? What is the room URL?

[languid pier]

Hold on

I’ll take a screenshot. And it’s the nmap room in the beginner path

[languid pier]

https://tryhackme.com/r/room/furthernmap

[glacial hound]

Ignore that, it isn't always accurate

[languid pier]

ah ok

only thing is. when i lauch the given machine and i try to ping it, it pings once and then stops

im guessing mabye its set up that way because you need to use nmap on it?

[glacial hound]

open a terminal in your vm and run curl 10.10.10.10/whoami
If that returns an ip like 10. xxx.xxx.xxx., then you are good

[languid pier]

is it supposed to be stuck?

[glacial hound]

What task are you doing? Some machines don't respond to ping, but those are generally windows

[glacial hound]

When you connect to the VPN, do you keep that terminal window open?

[languid pier]

task 14 practical and its question 4

[languid pier]

yeah

should i close it?

[glacial hound]

no no, keep it open

Ah I see, did you answer the first question yet? You know the answer based on what you said earlier

[languid pier]

no. i was saving that one to the end. now that i think about it i should have prolly did it

but like when i try to scan the givem machine it says "Host is down"

[glacial hound]

what is the IP?

[languid pier]

oh the curl came back

said failed to connect to port 80

well 10.10.10.10 port 80

[languid pier]

10.10.45.135

[glacial hound]

can you try nmap with 10.10.142.238

[languid pier]

What command should I do

[glacial hound]

nmap ip

[languid pier]

Oh Ight

Says “host seems down. If it is really up, but blocking our ping probes try -Pn

[glacial hound]

can you run ifconfig in your terminal and look for a tun0 ip

I think there is an issue with your VPN connection, I mangage to run an nmap scan with your target IP

[languid pier]

Found it. Which one do you want. The inet one?

[glacial hound]

the one with10.xxx..

[languid pier]

Well there’s two with those. One is named inet and the other is destination

Oh wait nvm I’m goofy

They both the same

The ip is

10.6.83.84

[glacial hound]

can you try the nmap scan again and add -Pn

[languid pier]

That one worked for some reason

There’s 3 open ports

That’s actually weird

[glacial hound]

there should be more than 3

can you run sudo ip link set dev tun0 mtu 1200 and then do the nmap scana gain?

[languid pier]

So now there’s 5. If scanned 995 filtered tcp ports with no response.

Should I also run -vv

To get more information

[glacial hound]

there are only 5

Looks like you're good to go

[languid pier]

Oh ayeee

Your the best gonzo

What was the actual problem tho.

Was my tun0 not right or something

[glacial hound]

That's your homework, go have a look what that command does 🙂

feel free to DM me if you have any questions

[languid pier]

Bet

[warped stump]

to use a kali vm, is there anything other than running openvpn with your config file that I have to do? I have an ip on my box but nothing on my access page. maybe I am doing something different but I couldda swore this was how I always accessed the labs

[timid talon]

Got an ip on http://10.10.10.10 ?

[warped stump]

10.6.74.24 but cant ping it or nothin

[timid talon]

Can't ping 10.10.10.10?

[warped stump]

if I open a browser in the vm I can load 10.10.10.10. but I used to be able to just use my pc for the browser stuff nd use my kali vm as a little attack box and everything was connected

it has to be something painfully obvious I just have been away for a few months lol

Should I be using a bridged connection or NAT for my VM?

[timid talon]

Are you running the VPN in the Kali vm?

[warped stump]

indeed

[timid talon]

From the VM you can ping 10.10.10.10 ? What do you mean use the pc for browser stuff?

[warped stump]

basically I would browse THM website and access the rooms on my hardware and use the kali vm to access whatever i needed to instead of the attackbox

and it was super ez and seamless

[timid talon]

Yes, should be possible. what's the issue?

Og ignore the acces page. It's broken. You seem to be connected to the network.

[warped stump]

intredasting

maybe I am misremembering the nature of how everything was connected

[warped stump]

Thank you!

[scenic torrent]

Gave +1 Rep to @timid talon (current: #112 - 59)

[woven carbon]

I'm having a problem starting this room, it never loads content
https://tryhackme.com/r/room/obfuscationprinciples

[ivory spruce]

What browser are you using? Browser plugins? Can you try it in incognito mode?

[woven carbon]

I tried it in incogontio and still the same, using Chrome latest version, win 11

I have many plugins on Chrome. Anyway, I just downloaded Firefox (first-time install) and tried to start the room but still same error (not loading). Any idea?

[forest flower]

have you tried flushing the dns cache?

[woven carbon]

I just tried, still the same.

[forest flower]

damn that sucks, what have you tried?

[woven carbon]

ipconfig /flushdns
restarted modem
I also tried different VPN locations

also changed dns to google, still the same

I think it's a restriction on my account privileges

[forest flower]

your THM account? why would that be?

[woven carbon]

Probably a bug. Someone said he heard about others complaining about the same issue before with other rooms

[forest flower]

that might very well be the case, if anything try seeing if it works on an other device if you haven't if it does it then, it can kinda be chalked up to a bug imo

[woven carbon]

Thank you for trying to help me. I appreciate it.

[scenic torrent]

Gave +1 Rep to @forest flower (current: #2114 - 1)

[forest flower]

always, sorry i couldnt be of much help, if its a bug i hope it gets resolved soon! good luck with all the other rooms and such!

[woven carbon]

Problem Resolved

• I tried to open the room from a different device with the same account and it worked just fine!
• I rechecked my PC and found out that my antivirus (Avast) blocking tryhackme requests and preventing me from starting the room (screenshot of alrets attached)
• I disabled Avast and the room worked just fine.
  Thank you @rare ore @forest flower @ivory spruce

[scenic torrent]

Gave +1 Rep to @rare ore (current: #858 - 4)

[forest flower]

ayy, that's great to hear! anti cheat can be quite pesky. Glad to see you can go on your way now! have fun!

[rare ore]

great stuff, glad you worked it out

[blazing carbon]

I did but still same error.

[ivory spruce]

Where are you connecting from?

[tender basin]

anyone else keep getting the error where machines are terminating?

[karmic raptor]

Are teams removed on Tryhackme? tried too join a room or find the room I joined

[weary spindle]

Teams? no.

Rooms can be made private, which room?

[karmic raptor]

Tried to find a studie group my class was in

[weary spindle]

On TryHackMe?

You may be part of a school.

[karmic raptor]

Was like 2 years ago. Wanted to find it on the page

[muted marsh]

Hello! I need help. I would like to know how I can permanently unsubscribe from my subscription. I noticed that it was automatically renewed and my bank card was automatically charged. I cancelled it, but it only says it's cancelled for one month. I contacted customer support yesterday, they saw my messages, but they haven't responded yet.

[weary spindle]

Support will get back to you ASAP, however they don't work weekends.

Should be 1-2 days, so if not today, possibly Mon/Tue

[muted marsh]

I wrote to them yesterday and it said active status. My message was seen status

[weary spindle]

Yes.

So either today, mon-Tue still falls in that window.

[worthy shore]

not so important q. if you dont mind why do u want to cancel it?its not good?

[muted marsh]

because I no longer want to continue training in this field

[muted marsh]

okay, thanks 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2458)

[opal condor]

i cannot open attackbox

[tall pendant]

are you getting any error?

[opal condor]

loading too slow

[tall pendant]

does it open at all?

[opal condor]

cannot

[tall pendant]

one sec imma try and launch if it works

yeah its working fine for me

[opal condor]

i still cannot open THM attackbox

[tall pendant]

is it stuck at a percentage or just nothing at all?

[weary spindle]

Is your clock set correctly?

[opal condor]

I set clock is automatically

[exotic stag]

Hey @west chasm Team, who would be the person in charge regarding B2B relations, cause I would love to get in touch with you guys regarding a coop (more or less) and because I hate writing mails and having a little conversation is way easier and faster I would love to know who to contact.
Regards,
Carina from bytes Coding

[weary spindle]

Hay, your get pointed towards the email for such matters I'm sure.

You would*

[wind wedge]

Hello, Feel free to DM if you feel it's easier 🙂

[exotic stag]

Well and now Ive taken the run towards discord and get redirected straight to mail...
Why am I even trying 😐

[weary spindle]

Blackout also replied to yoyn

[exotic stag]

Got it, im in touch with him, thanks for your support @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2460)

[misty badger]

I’ve never understood what the red outline/cracked screen means in the rooms with networks? Does this indicate progress on a network for the user?

[weary spindle]

Yeah, it means you've pwned it

[misty badger]

Makes sense! Wasn’t sure if it was broken or something. Thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2461)

[tawdry orbit]

The changing of each image in the Network diagram is tied to answering a certain question. The progress can be in the form of changing an off-screen to an on-screen, or to an "infected" on-screen (pwned the machine).

[misty badger]

Makes sense! Maybe it’s just me but the way the image looks with the red and lightning bolts/electricity has always made me think I need to reset the network or something

[tawdry orbit]

That's another way of looking at it for sure. 😄 The machine got "electrocuted"!

[misty badger]

I see it now!

[misty badger]

One other question on the CI CD room…what happens if I forgot my password to ‘mother’? I really should have done this room in one sitting… 🤦🏻‍♂️

[tawdry orbit]

Take good notes along the way. 🙂

[misty badger]

Yeah I had it all saved but wiped a bunch of folders from my Kali instance because my partition ran out of room. Really sloppy practice 🫣

[misty badger]

If there’s no way to reset password on mother I can do the exercises and maybe find the answers to just the flags in a write up somewhere…unless there’s another way to do it legit

[rocky rover]

Hi! How to change my month subscription to anual sub? Is only possible canceling?

[random grove]

you might need to cancel your current one, (wait until the end?) and apply for annual.

[fast veldt]

Hey, can I use thm rooms in my youtube video?

[ivory spruce]

To my understanding, yes you may. However, THM still retains ownership over the contents and all those good stuff, but suggest you still wait for official confirmation from THM.

You can try dropping them an email.

[west chasm]

@fast veldt

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 28, 2024, 5:54 AM

[fast veldt]

Yeah, I have mailed them

[severe obsidian]

hello can one complete a course without subscribing am failing to complete the intro to cyber sec they are asking me to subscribe that part of intro to offensive security

[weary spindle]

No, you need to subscribe to complete the paths

[severe obsidian]

Okay Thanks That what i needed to know so that i stop wasting much time in waiting for the attack box for one hour

[agile zephyr]

Anyone else getting lots of web pages hanging at the moment? Trying to complete "burpsuitbasics" room. Getting page not responding every couple of minutes, then it comes back for a few seconds and hangs again.

[languid pier]

welp. i thought it was over but turns out its not. I tried the command dr gonzo gave me and it fixed the nmap server scan for the first nmap room. Now im doing the network services room and when i scan the given machine it only comes up 2 open ports. ftp and http

those arent the right ports

[agile zephyr]

Literally every time I try to lauch the attack box it starts hanging the site.

[weary spindle]

Which machine is open?

[languid pier]

The enumerating SMB one

[weary spindle]

Can you take a screenshot?

[languid pier]

Oh what

The provided machine?

[weary spindle]

The Machine Access Box.

[languid pier]

Or the uh ports

Oh sure

[languid pier]

here scrubs

[weary spindle]

Nah, it's started the wrong machine.

[languid pier]

bruh

you serious

[weary spindle]

Look at the title.

[languid pier]

BRUH

lmao

[weary spindle]

Did you have that page opened tiled?

[languid pier]

how in the world did it do that

[languid pier]

what do you mean by tiled

[weary spindle]

When you started the machine, did you have the page full screen or small?

[languid pier]

small

is that why

[weary spindle]

Ah yeah..

Try terminating the machine and redeploying with the screen small

[languid pier]

ight let me try

its just annoying switching from kali to the tryhackme full screen

[weary spindle]

Now you see why I love having 5 monitors.

[languid pier]

ah

yes it worked

why does it do that?

[weary spindle]

I'm not sure, it's ony recently started happening.

[languid pier]

weird

[languid pier]

thank you scrubz

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2463)

[civic wren]

I am currently connected to OpenVPN on my linux machine but the site is saying that I am not

Can anyone help?

Also when I go to 10.10.10.10 it does say that I am......

[weary spindle]

ignore that page

[civic wren]

So how do I connect?

[weary spindle]

You're connected

[turbid rock]

cant ping any CTF boxes despite connected to VPN!! what is problem

[weary spindle]

Which machine are you pinging?

[turbid rock]

Mustacchio

not only this it didnt work in Anthem too.

tried different VPN region as well

[weary spindle]

Can you ping 10.10.10.10

[turbid rock]

look at screenshot in the browser

dont worry its working now

[fathom warren]

Hey I've got openvpn working and can connect to room, but when I run winget it connects to my python server, starts downloading revshell.exe but no data transfer occurs. The file is created but it's 0 bytes. I gave it time and eventually the process completed, no error, but the file is 0 bytes

[fathom warren]

Is this because I'm being lazy and didn't set up a virtual switch for my vm?

Writing web request
Writing request stream... (Number of bytes written: 0)

[high kindle]

I did, but they didn’t reply

[steep pelican]

U opened up a ticket?

[high kindle]

and how do I do that?

[wind wedge]

Contact [e-mail]

As we don’t work weekends, response time will mostly be monday/tuesday

[high kindle]

yeah I emailed them on 04/19/2023

[willow cloud]

stanci@stclinux:~/Downloads$ sudo su
root@stclinux:/home/stanci/Downloads# openvpn nbaandrew.ovpn
2024-06-29 00:53:09 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2024-06-29 00:53:09 OpenVPN 2.5.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 29 2023
2024-06-29 00:53:09 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2024-06-29 00:53:09 OpenSSL: error:0480006C:PEM routines::no start line
2024-06-29 00:53:09 OpenSSL: error:0A080009:SSL routines::PEM lib
2024-06-29 00:53:09 Cannot load inline certificate file
2024-06-29 00:53:09 Exiting due to fatal error
root@stclinux:/home/stanci/Downloads#

i'm getting this

while trying to connect

i've managed to fix it by downloading the US-West-Regular configuration file for anyone having the same issues

[dapper walrus]

any wonder why I got a 403 respond?

The image I was trying to download

https://tryhackme-images.s3.amazonaws.com/user-uploads/5ed5961c6276df568891c3ea/room-content/11d01963392078c1450300d2881f9160.png

[acoustic barn]

What is this going on @west chasm ??

[plush bay]

sounds like your kali instance don't have internet connection but dunno

[acoustic barn]

got sorted by itself, no idea, thanks shadow

[woven carbon]

Guys, how do you keep urselves motivated while studying?

[weary spindle]

That's connected.

Which room?

Is the Web page stuck loading?

Run sudo ip link set dev tun0 mtu 1200 in your terminal and then refresh while the VPN is running

Did you try the command above?

Please don't send DM's or Friend requests without asking, it's in the rules you've accepted.

(Unless it's about another user)

There's no need to be rude about it, I could have easily have warned you, instead of having a polite conversation about it.

All the helpers here are volounteers, somebody will help soon, but the VPN looks like it's working, so the connection error is on your end.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2464)

[thick phoenix]

Hello guys, sorry to bother you, i got a question about BURP and BURP rooms, i'm trying to do the tutorials but every time i activate the proxy i can't visit any web page anymore cause it take 10-15 minutes for the VM to load a web page... Do you have any ideas about why it's so slow ?

[thick phoenix]

ok nevermind :'3

it's just the forward button x)

[pallid acorn]

cant connect from kali to tryhackme vpn server, VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576

[shadow shadow]

@pallid acorn hey

[severe obsidian]

Hello so when done with this course do they send us like links to jobs because a friend that finished sometime back from here recommended me saying that after he finished he got them so i just want to know whether thats still a thing

[bitter thorn]

Hey I’ve been trying to use burp suite and the attack box is lagging so much and isn’t responding well. Any tips, it says burp needs a update but it won’t load a webpage while Im trying to for the burp repeater

[ivory spruce]

To which THM OpenVPN server are you connecting to?

[naive dust]

hello, how do you copy and paste between the VM and the website, im currently using a mac so would it affect it? i can never copy and pasty across those two pages

[halcyon swallow]

Where is the Write-up button? I've noticed a couple of questions are out of order in a room.

[ivory spruce]

Links to jobs? Or is your friend referring to the different careers in cyber security? THM does have a room for it.

[naive dust]

i couldnt find that exact settings as im just using the attack box, but ty for the help as i will be looking out for that bidrectional copying in the future when i start using a real VM

[weary spindle]

Writue up?

[compact dagger]

There is an issue at the RedTeam Capstone Network on subnet .89 even after multiple rests. there is no connectivity after using the corpUsername.ovpn file and WRK1 or WRK2. and here is output of my route command

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.50.87.0      0.0.0.0         255.255.255.0   U     0      0        0 tun0
10.200.89.0     10.50.87.1      255.255.255.0   UG    1000   0        0 tun0
12.100.1.0      0.0.0.0         255.255.255.0   U     0      0        0 tun1
172.32.5.21     1.mubc.chcg.chc 255.255.255.255 UGH   1000   0        0 tun1
172.32.5.22     1.mubc.chcg.chc 255.255.255.255 UGH   1000   0        0 tun1

[weary spindle]

What username/password are you using?

Are you using the Corp vpn, or the dedicated users vpn?

[compact dagger]

I have tried both none of them are giving me access to the WRK1 and WRK2 unlike before.
172.32.5.21 1.mubc.chcg.chc 255.255.255.255 UGH 1000 0 0 tun1
172.32.5.22 1.mubc.chcg.chc 255.255.255.255 UGH 1000 0 0 tun1
those public IPs in the route should be replaced with 10.200.x.21

[ivory spruce]

I suggest reaching out to THM Support for this type of issue.

[west chasm]

@rare ore

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 30, 2024, 12:28 PM

[fickle beacon]

There is a bug on the room 'Threat Intelligence Tools' task 6. The whois lookup is not working. I can't answer the question.

[ivory spruce]

Can you validate and share a screenshot?

[west chasm]

@fickle beacon

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 30, 2024, 12:32 PM

[compact dagger]

thanks for your help anyway it worked without changing anything. look the route now

──(root㉿kali)-[~]
└─# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.50.87.0      0.0.0.0         255.255.255.0   U     0      0        0 tun0
10.200.89.0     10.50.87.1      255.255.255.0   UG    1000   0        0 tun0
WRK1.corp.there 1.mubc.chcg.chc 255.255.255.255 UGH   1000   0        0 tun1
WRK2.corp.there 1.mubc.chcg.chc 255.255.255.255 UGH   1000   0        0 tun1    

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2466)

[fickle beacon]

I also tried the whois lookup on other sites. But still can't get the answer

[weary spindle]

Is that Talos?

[fickle beacon]

Yeah

[weary spindle]

Yeah, Talos is booked.

Use whois.domaintools

[fickle beacon]

I've tried that earlier. The name listed in different from the room answer.

[weary spindle]

Is this the customer one.

If so, it's not a bug, you're probably not catching the name.

[neon dome]

ive tried setting up openvpn but its not working. ive downloaded the config file and imported it, but i get this error:

[weary spindle]

Are you using Windows?