site-support

[weary spindle]

You can edit your config

Just add tun-mtu 1200

[lyric bramble]

can you guide him how to

[weary spindle]

I just did...

[rare tundra]

I need help with openvpn, I am not able to connect to it
I tried almost every server but no luck

[harsh tusk]

Good afternoon, in Linux Privilege Escalation, task 10 PATH won’t open the target vm. All other vms in the other tasks work fine.

[dreamy vigil]

I'm on the same case, since 20min It works

[thick hazel]

I can't send photos on this. Please does anyone have an explanation ?

[cedar basin]

I've never had that issue..

what does downdetector say?

[thick hazel]

am trying to use the configuration file with openvpn to connect to tryhackme network on ubuntu wsl 20.04 but i get an "Error opening configuration file : "path to the file i want to open". Please does anyone have a solution to this problem?

[spiral tartan]

I think you need wsl-vpnkit ignore

[spiral tartan]

Is your network mirrored?

where is the file located and what are you typing?

[ivory spruce]

You'll need to verify your account to be able to upload images in this discord server.

[thick steeple]

Hi, I get a UDP connection error when trying to connect to EU VIP servers... I am able to connect to EU Regular 2. My subscription is still active. - Anyone else got simallar issues?

[west chasm]

@thick hazel

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 16, 2024, 7:07 PM

[fleet pine]

Are there any known issues with EU-VIP-2 openvpn access

[ivory spruce]

What is the exact error you are getting?

[thick steeple]

@ivory spruce read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)

[ivory spruce]

After switching servers, did you wait for ~2 to 3 mins before generating your OpenVPN config file?

[ivory spruce]

Can you verify your account and post a screenshot of it?

[fleet pine]

oh it seems I'm not the only one. I'm getting this error right now:

2024-08-16 23:09:02 TCP/UDP: Preserving recently used remote address: [AF_INET]63.35.110.70:1194
2024-08-16 23:09:02 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-08-16 23:09:02 UDPv4 link local: (not bound)
2024-08-16 23:09:02 UDPv4 link remote: [AF_INET]63.35.110.70:1194
2024-08-16 23:09:03 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)

[ivory spruce]

@thick steeple

[thick steeple]

@ivory spruce I will try and verify my account.. Though @fleet pine posted a simillar output

[spiral tartan]

I can't connect either :/

[fleet pine]

Yep I have not changed openvpn settings in quite a while

[scenic torrent]

Gave +1 Rep to @west chasm (current: #120 - 59)

[thick hazel]

ok thanks

[spiral tartan]

2024-08-16 15:15:09 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2024-08-16 15:15:09 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-08-16 15:15:09 library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10
2024-08-16 15:15:09 DCO version: N/A
2024-08-16 15:15:09 TCP/UDP: Preserving recently used remote address: [AF_INET]3.254.253.220:1194
2024-08-16 15:15:09 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-08-16 15:15:09 UDPv4 link local: (not bound)
2024-08-16 15:15:09 UDPv4 link remote: [AF_INET]3.254.253.220:1194

[thick steeple]

@ivory spruce

[plush bay]

yeah seeing that too

reported up stream

hopefully fixed soonish

[weary sinew]

Awesome

Thank you

[plush bay]

oh was talking about the above vpn issue... for the red team capstone thingy dunno

[weary sinew]

No worries. 🙂

[thick hazel]

am assuming i need that fallback for it to work, i will try to find the config file and change it

[plush bay]

nope you do not

[thick hazel]

oh... ok

[plush bay]

big chance this is relevant to the vpn server issue the others is seeing too

[spiral tartan]

try:
sudo openvpn “./drogon69.ovpn”

[thick hazel]

different error, it relates to data-ciphers

[spiral tartan]

Now it works. This could be related to the server side issues at the moment. Wait for them to sort it out. I can ping you as soon as I know they’re fixed if you’d like

[plush bay]

if you run openvpn --version what does it say???

[thick hazel]

2.4.12

[plush bay]

wow you are using an old version.... well yeah for that version you need the cipher part in the ovpn file

[spiral tartan]

Oh

Did you not do apt get upgrade and update

[plush bay]

you need the cipher part for anything below 2.5

[thick hazel]

tried updating. doesn't ubuntu 20.04 support it?

[thick hazel]

did that.

[plush bay]

wow you are even on an old ubuntu version

that version of ubuntu only has a single year more of support for those not paying for extended support

try and upgrade to ubuntu 24.04

but be sure to try and backup important data if you are gonna do that

[thick hazel]

am upgrading to kali usb boot midnight but just wanted to solve some challenges before. i was trying to connect using windows openvpn but that too wasn't working.

[plush bay]

yeah the vpn servers is also having issues so you might be hitting 2 issues at the same time

i.e welp that sucks

[thick hazel]

so to clarify, the ubuntu 20.04 dosen't support the new openvpn?

[plush bay]

yuups

that was released in 2020-04 i.e in april of 2020

newest ubuntu version that is lts released in 2024-04 also known as april this year

[thick hazel]

oh ok so the apps are made for the latest ubuntu versions, no backward compatibility I suppose.

[plush bay]

yeah you get 2 years of some package updates on ubuntu lts then you get security updates only

if shadow recalls their release model correctly

[plush bay]

technically you can install the newer packages but your chance of breaking your entire system goes through the roof if you do

[thick hazel]

what's shadow?

[spiral tartan]

it's them lol

[plush bay]

ello ello... shadow is shadow... they refer to themselves in third person

[spiral tartan]

could do this https://www.kali.org/docs/wsl/wsl-preparations/#quick-method

[thick hazel]

i think there is a higher likelihood i run into problems using wsl.

[spiral tartan]

Yeah, do what you feel comfortable using 🙂

[cyan swan]

openvpn is not working for mew I am using premium of thm also

[thick hazel]

just use the attackbox

[cyan swan]

when this issue will be resolved ?? any suggestions

[plush bay]

no eta posted yet ¯_(ツ)_/¯

[thick hazel]

are kali users having similar issues?

[plush bay]

not the same issue with openvpn version but the openvpn server for tryhackme being down yes

[cyan swan]

I am using kali

this openvpn issue is very frustating !!! ..

so you are facing same issues guys??

[spiral tartan]

read here #site-support message

[plush bay]

yuup shadow is

❯ sudo openvpn shadowabsorber.ovpn
[sudo] password for sam_tunder:
2024-08-16 21:17:03 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-08-16 21:17:03 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-08-16 21:17:03 OpenVPN 2.6.12 [git:makepkg/038a94bae57a446c+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 18 2024
2024-08-16 21:17:03 library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
2024-08-16 21:17:03 DCO version: N/A
2024-08-16 21:17:03 TCP/UDP: Preserving recently used remote address: [AF_INET]34.253.19.14:1194
2024-08-16 21:17:03 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-08-16 21:17:03 UDPv4 link local: (not bound)
2024-08-16 21:17:03 UDPv4 link remote: [AF_INET]34.253.19.14:1194
2024-08-16 21:17:04 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)
2024-08-16 21:17:05 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)
2024-08-16 21:17:09 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)
2024-08-16 21:17:17 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)
^C2024-08-16 21:17:22 event_wait : Interrupted system call (fd=-1,code=4)
2024-08-16 21:17:22 SIGTERM received, sending exit notification to peer
2024-08-16 21:17:25 SIGTERM[soft,exit-with-notification] received, process exiting

this is how it looked for shadow about an hour ago

it is a server side issue so we can no fix ourselves

[cyan swan]

ok

thanks for your response

[thick hazel]

does this affect the attackbox?

[plush bay]

¯_(ツ)_/¯

not checked

[thick hazel]

apart from openvpn are there any other apps one can use to connect to the tryhackme's vpn?

[spiral tartan]

no

[thick hazel]

why?

[spiral tartan]

openvpn is their only vpn protocol

[thick karma]

guess it wouldn't be fixed as soon?

lol, its working 😄

[thick hazel]

what os?

[thick karma]

vpn

[spiral tartan]

Doesn't matter

[wanton sandal]

hi. forgot to cancel my subscription. Can I get refund by any chance?

[bronze vale]

You will need to contact [e-mail]

[wanton sandal]

ty

[errant gorge]

having a hard time connecting to my vpn for some reason

[ivory spruce]

EU OpenVPN server?

[naive dust]

EU > US see

[graceful copper]

Do the AWS rooms contribute to the leaderboard points?

[bronze vale]

No it does not 🙂

[errant gorge]

all dese htb folks... can't get no support/help wit the vpn... tsk tsk

[weary spindle]

This isn't HTB.

[errant gorge]

my fault thm... lil brother... lol

grammer police ass..

Sat Aug 17 09:46:28 2024 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Aug 17 09:46:28 2024 TLS Error: TLS handshake failed

[weary spindle]

Its not grammar police...

HTB == Hack The Box
THM == Try Hack Me

Two different platforms.

[errant gorge]

it's the same thing one thing is trying to push u further... stop it

try an help yes? why was my vpn working earlier yesterday, then stop...

[weary spindle]

I'd need more information in order to help you, without you being rude about it.

[errant gorge]

i'm not tryna respond to rudeness either... i got so many profiles loaded... i gotta load the vpn then connect to the server

i got 4 profiles loaded

eu to us... and they not loading for some reason

so i cant complete my lessons

[weary spindle]

Which OS?
Which server are you trying to connect to?
Are you using a personal VPN?
Have you tried to regen the VPN that works last?
Which country do you live in?

[errant gorge]

win 10 home. no personal vpn i tried to regen which is why i have 4 profiles now. and fo some reason i'm getting errors

it's pissing me off reading the lines and i can't decipher

i'm supposed to be able to do this

[weary spindle]

Are you using the communities edition of OpenVPN?

[errant gorge]

can't post snipits in here

[weary spindle]

I would not suggest putting your host OS on the network.

[errant gorge]

open vpn

[weary spindle]

Yes, the Communities or Connect?

There's two.

[errant gorge]

lemme check

the openvpn gui 11.50.0.0/2.6.12

i'm missing something, but don't know what

[weary spindle]

https://openvpn.net/community-downloads/

Use this one.

[errant gorge]

like i said, the same settings worked just yesterday. but today.. yikes

yeah i done unistalled, redownloaded from that page... but i'll keep trying. thx doe

and then when i get something close i can connect tryhackme@Insertiphere and then i get the password command and it won't let me type after that

just frustating... i guess i'll have to figure it out... but since i fucked up my streak i guess i'm not mad no mo.... but what changed... tried to dl the updates.. no bueno

[weary spindle]

Password feedback will be disabled.

[errant gorge]

can't continue my lessons... i'll figure it out.. but i'm not the only one wit da problem

[weary spindle]

Which country do you live in?

[fallow lagoon]

glad to know i'm not the only one suffering issues with the vpn, US MTU value faled at 100, aborting TU Check, Cannot load inlince certificate file, exiting due to fatal error

[weary spindle]

#site-support message

[fallow lagoon]

kali, US East, yes between US East and Us West VIP, US

and OpenVPN

issue started last night, figurd i'd give it some time but still can't connect. and my attack box is having similar issues

[timber cedar]

CI/CD Build Security room task 6 broken? I’ve tried like five times and reset the network once (on 46). And I never get the callback. I copied the code from the task, and I triple checked my IP. It doesn’t even hit my webserver, the pipeline just gets stuck.
Other feedback: for task 5, why suggest a script that only runs with a specific, relatively old python version? That’s kind of annoying and besides the point of the room.
Also, using the AttackBox doesn’t work: #subs-room-help message

[fallow lagoon]

i stand corrrected my attackbox is working

[rancid venture]

How do I join the KOTH discord voice channel? I'm playing some KOTH games today and would like to join it, but it appears to be locked?

[muted mica]

The Burpsuite Basics room keeps freezing on me. All the other rooms are fine just this one doesn't work. I've tried different devices and different OSs but nothing works

[weary spindle]

You need to verify your account

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 17, 2024, 6:30 PM

[split swallow]

i need help

i had an old .ovpn file when i try to connect with it i am stuck at the 2024-08-17 14:06:51 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2024-08-17 14:06:51 VERIFY EKU OK 2024-08-17 14:06:51 VERIFY OK: depth=0, CN=server step and can't connect. now i created a new .ovpn file and connected with it successfully. but in both cases when i visit the /access page on tryhackme the connection status is "Not Connected" with no internal virtual IP Address. and when solving the mkingdom room their is a place where i submit a php file for reverse shell when i submit it and try to visit the file in the browser to open the reverse shell i got the following error in the browser "WARNING: Failed to daemonise. This is quite common and not fatal. Connection refused (111)". and the reverse shell never opens

and now the vpn is giving
2024-08-17 14:28:17 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 89, compression: 'lzo'
2024-08-17 14:28:17 Timers: ping 5, ping-restart 120
2024-08-17 14:28:17 Protocol options: explicit-exit-notify 3
2024-08-17 14:28:34 Authenticate/Decrypt packet error: packet HMAC authentication failed

in the terminal

[timber cedar]

No wonder I did’t get the callback… 😐 When I logged into Jenkins in the next task, I discovered that the access token for GitLab is expired, so the pipeline can’t access the repository and never runs. Please fix this so I can finish the room!

[ivory spruce]

The access page is broken so ignore it for now. So long as you can reach 10.10.10.10 using your browser, you should be good to go.

[split swallow]

Okay thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 650)

[rancid venture]

👍 Thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2635)

[ivory spruce]

Try to re-connect and see if the last line in the log goes away. If not, do a Google search on it as I seem to remember seeing it previously.

[split swallow]

I did and got help in #room-help and the problem is solved

I had a firewall issue blocking everything

[cyan swan]

my openvpn is not working even today

can someone please help me

[split swallow]

I'll try

What is happening?

Any error displayed when trying to connect?

[cyan swan]

i messaged you

[rancid venture]

My account is verified with email and phone number and I have my discord token. I still can't access the KOTH voice channel, as it's locked, and in the koth text channel I don't have permission to write. What else do I need to do? Thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2636)

[unique thunder]

When using an attackbox on Android none of my keyboard input is passed through the machine. Also, at a time when the on screen keyboard would usually appear, such as when trying to type into powershell, no keyboard appears. Anyone ever had a similar issue?

I'm on holiday at the moment so only have tablet access for a few days

[weary spindle]

You need to verify your account..

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 17, 2024, 8:21 PM

[errant gorge]

another day can't get no support from the community. i'll wait til monday to call i guess

[wind wedge]

Hey, All users in discord are voluntary, what issue are you facing?

[errant gorge]

can't connect to my vpn on thm

i was just connected yesterday

i've downloaded many profiles

my fault thm... lil brother... lol
grammer police ass..
Sat Aug 17 09:46:28 2024 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Aug 17 09:46:28 2024 TLS Error: TLS handshake failed

nm

i'm baaaack!

so sry it's connected

[wind wedge]

No problem, glad it’s resolved 🙂

[restive knoll]

Could I make a small site suggestion (QoL one)?

[ivory spruce]

You can post any suggestions in #feedback-and-ideas

[weary sinew]

Looking for some help with the Red Team Capstone Challenge. The network has been reset and when I go to authenticate and verify my email, I keep getting messages saying there's an issue . Please see the following.

There was an issue with email access, the most likely cause is a network reset. Please stand by....
Creating email user
ssh: connect to host 10.xxx.xxx.11 port 22: Connection timed out
Something went wrong with user creation

Repopulating mailbox. Please stand by.....
[Errno 110] Connection timed out
Error: unable to send email

Your email has been recreated. Please wait 2 minutes then try to access your inbox again. If you still encounter issues, please contact support on Discord.```

This is preventing me from logging into the email address.

[restive knoll]

thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 651)

[patent seal]

I tried it so much and tried with reinstalling the kali machine but it does not fix can anyone know

Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

Note: '--allow-compression' is not set to 'no', disabling data channel offload.

[vale basin]

which command you use to run openvpn?

[patent seal]

Openvpn and the file name downloaded from the tryhackme

[weary spindle]

Did you add sudo?

[tidal barn]

did u add sudo

[patent seal]

Yes

[tidal barn]

i actually had that problem until i reinstalled openvpn completely

[patent seal]

How to do it

Command for doing it

[tidal barn]

sudo apt-get purge openvpn

@patent seal

then sudo apt-get update and reinstall it

regenerate ur config js in case

and then try again

[patent seal]

How can I reinstall the open vpn

I removed it and done the apt get update

@tidal barn

[tidal barn]

sudo apt install openvpn or openvpn3 ion rmmbr

[patent seal]

No sane error

How can I upload the pic

2024-08-18 05:53:20 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

2024-08-18 05:53:20 Note: '--allow-compression' is not set to 'no', disabling data channel offload.

[west chasm]

@patent seal

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 18, 2024, 9:56 AM

[keen scroll]

Verify THM account to share media

[patent seal]

Ok

2024-08-18 05:53:20 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

2024-08-18 05:53:20 Note: '--allow-compression' is not set to 'no', disabling data channel offload.

This is the error

I was showing in open vpn

[ivory spruce]

How about the last 5 to 10 lines of the OpenVPN log?

[keen scroll]

Try with sudo openvpn ronikarmahapatra.ovpn

[tidal barn]

ur not using sudo btw

[patent seal]

2024-08-18 06:03:53 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

[ivory spruce]

This one shows you are connected.

Try to access 10.10.10.10 using your browser, and if you see your tun0 IP, you're good to go.

[patent seal]

yes

[tidal barn]

✅

[patent seal]

Great thanks a lot

no i am not connected

[tidal barn]

haha

how come

[tidal barn]

you are connected

do u read the tasks at all?

[patent seal]

yes

at last it is not showing the connection is succesfull

i need to connect to the openvpn and i can acces the ip of the target ip address but it is showing

not found

[keen scroll]

Check the URL in the address bar, it's incorrect. Open the link again, it takes time to launch the room's machine.

@patent seal ^

[timid talon]

You seem to be connected based on the terminal output.

Type the actual IP not just machine_ip

http://10.10.138.209

[patent seal]

it's not working

[timid talon]

Wdym? You are accessing the webpage..

[patent seal]

right

i got it

[ivory spruce]

The question indicates the username and password to use.

[patent seal]

Yes I got confused, thank you a lot for your help guys

[placid badger]

I am a beginner and have a problem when i download the openvpn file and run it in terminal everything works fine 10.10.10.10 also shows successful connection but tryhackme website is not showing any signs of connection access machine button is also red and not connecting after refreshing any suggestions please

[weary spindle]

How are you connecting?

[placid badger]

With openvpn file

[weary spindle]

Which OS?
Which country?
Which server?

[placid badger]

Using Kali linux and i am from india but tried all the vpn files

[weary spindle]

Which command are you using?

[placid badger]

Sudo openvpn file.ovpn

i have this warning 2024-08-18 07:46:29 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-08-18 07:46:29 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-08-18 07:46:29 Note: '--allow-compression' is not set to 'no', disabling data channel offload.

[weary spindle]

Try removing all previous vpn files.

Going to Eu Reg 3, hit regenerate, then download a new one and try

[placid badger]

okay

[placid badger]

Thanks man it worked

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2638)

[weary spindle]

Happy hacking.

[cyan swan]

@split swallow Thanks for helping me !!
my issue is resolved

[scenic torrent]

Gave +1 Rep to @split swallow (current: #2184 - 1)

[split swallow]

Anytime

[vivid falcon]

Not sure if this is the correct spot for reporting a lab bug. Anyhow, I am on the last section in "walkinganapplicaiton" and I have found the flag, but when inputting it, it fails to acknowledge it resulting, sorry that is not correct.

[weary spindle]

It's not a bug, you've found a different flag.

[vivid falcon]

more then 1 flag exists in that section?

Am I allowed to post the flag?

I am on the Dev Tools - Network section.

ill just keep poking around.

ahhh found it. thanks for the hint.

these are tricky

my next question... is there an easier way to go to the next lab, or do you need to go to learn, find the course, open the course, and resume? is there an option within the lab you finished?

[timid talon]

On dashboard there's a "menu" with recent rooms and one with learning path which shows the next room in the path.

[worthy eagle]

can any1 confirm that exploitingad vpn network isnt working for them

[vivid falcon]

my vpn is working. - Windows 11.

[worthy eagle]

it isnt even connecting on the attackbox in the room and i regenerated the .ovpn file and still cant connect on my own vpn

for that network though

my us-east one works its this that doesnt

oh i cant upload screenshot

https://tryhackme.com/r/room/exploitingad the vpn network required for this

ive done tasks in this before without issue

[ivory spruce]

You'll need to verify your account to do so.

[west chasm]

@worthy eagle

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 18, 2024, 6:35 PM

[worthy eagle]

okay i can do that, can you confirm the vpn network exploitingad.ovpn connects for you though please

[errant gorge]

trying to connect thru shell.. but when it asks for my password, when i type try to type it in, it won't let me. and if i press enter it says password denied...

[timid talon]

When using ssh (and often in other cases) the password you are typing is not shown in the screen, but you are typing it. Make sure you type it correctly, then press enter.

[errant gorge]

ah ok

[ivory spruce]

Haven't done the room yet personally, but have seen folks being able to connect to it.

[vivid falcon]

How do you add other badges to your name of certs that you've done?

[ivory spruce]

I would imagine you'll have to contact a mod and verify or provide proof of your certification.

[karmic seal]

My tryhackme website is getting freezes after being on few mins. Can anyone help me please?

[zinc plover]

2024-08-19 15:25:15 TLS Error: TLS handshake failed
2024-08-19 15:25:15 SIGUSR1[soft,tls-error] received, process restarting
2024-08-19 15:25:15 Restart pause, 256 second(s)

I get TLS handshake failed when I connect to the vpn

@west chasm

[karmic seal]

Try changing to other vpn locations

[zinc plover]

[sudo] kali 的密码：
2024-08-19 15:35:23 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-08-19 15:35:23 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2024-08-19 15:35:23 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-08-19 15:35:23 library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10
2024-08-19 15:35:23 DCO version: N/A
2024-08-19 15:35:23 TCP/UDP: Preserving recently used remote address: [AF_INET]3.254.253.220:1194
2024-08-19 15:35:23 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-08-19 15:35:23 UDPv4 link local: (not bound)
2024-08-19 15:35:23 UDPv4 link remote: [AF_INET]3.254.253.220:1194
2024-08-19 15:36:23 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-08-19 15:36:23 TLS Error: TLS handshake failed
2024-08-19 15:36:23 SIGUSR1[soft,tls-error] received, process restarting
2024-08-19 15:36:23 Restart pause, 1 second(s)
2024-08-19 15:36:24 TCP/UDP: Preserving recently used remote address: [AF_INET]3.254.253.220:1194
2024-08-19 15:36:24 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-08-19 15:36:24 UDPv4 link local: (not bound)
2024-08-19 15:36:24 UDPv4 link remote: [AF_INET]3.254.253.220:1194

Still unable to connect

[karmic seal]

you are using wifi or mobile data?

[zinc plover]

wifi

[karmic seal]

maybe network is slow .. or it is unreachable ..

or you might have connected to another vpn.

[keen scroll]

Or maybe some network firewalls from the Chinese govt.?

[zinc plover]

It might be that ， I can connect in another city before

T_T

[keen scroll]

Is the THM Attackbox too not working?

[zinc plover]

Very laggy

[cedar glacier]

Hello, i want to subscribe to the premium plan as a student. I was wondering if i can have a student email to get the discount as well as a personal email to route the emails through? can i have two on my profile in any way or can i swap to personal email after i have the discount?

[whole dove]

Why is burpsuite module so heavy on my PC? My ram usage literally jumps for 5GB while CPU is on 100% whenever i open burpsuite module

[ivory spruce]

To my recollection, you'll need to subscribe first and the student discount will be applied later on. For more details, I suggest you drop an email to THM Support.

[west chasm]

@cedar glacier

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 19, 2024, 8:39 AM

[naive dust]

@hollow cosmos can you verify and send a screenshot of your tryhackme page?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 19, 2024, 9:04 AM

[hollow cosmos]

I'm not able share the screenshot here. FYI, I'm new to this platform.

[naive dust]

Yeah that's why you need to verify first

[naive dust]

Follow the steps in this link :)

[hollow cosmos]

Got it

[naive dust]

So if you open task one, you see a green button

"start machine"

[hollow cosmos]

Got it. Thank you 🙂

[scenic torrent]

Gave +1 Rep to @stiff barn (current: #78 - 86)

[naive dust]

hey guys im new

[cyan swan]

hi

@naive dust

[naive dust]

Hi New, i'm Deditio

ohh hi

guys

But this is not the intros channel lol

oh

didnt see that sorry

Lets move to general

lol

ok

[steady cypress]

Hello THM team,

I'm not able to login to my THM account after some issue with the recent subscription issues, I've reset the pwd and received an email but when trying to login, with following error " Uh-oh! Your email or password is incorrect", how do I go about getting someone to assist?

[naive dust]

You could email support

[west chasm]

Student Discount

Article Link

https://help.tryhackme.com/en/articles/6494960-student-discount

Aug 19, 2024, 10:04 AM

[naive dust]

Shoot

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 19, 2024, 10:04 AM

[naive dust]

The last one :)

[steady cypress]

@naive dust thank you

[scenic torrent]

Gave +1 Rep to @stiff barn (current: #77 - 87)

[naive dust]

You're welcome

[placid badger]

the access page is showing a successful connection but the

the room is not showing the connection in access machine

[naive dust]

Nah that access machines thing is broken

Dont worry about it

[placid badger]

okay

[marble tree]

Hello, I'm having some trouble with Task 4 in the Windows Event Logs room. The question is referencing "Example 8", but the task only has 3 examples. Am I missing something here?

[compact heron]

Is there a way to reset the AttackBox? I have certain interfaces not loading up at all for some reason

as in VPNs

I tried terminating and starting again

[flint token]

Hello, the PtH academy module targets are not spawning..been waiting for almost 20 mins for them to spawn. Any help? Thanks

[weary spindle]

Which academy?

[flint token]

Hack the Box Academy - Pass the Hash module

[weary spindle]

Ok, can you ask in Hack The Box's server?

[flint token]

-.-' shoot wrong server..sorry about that

[naive dust]

[mental panther]

I am connected to the open vpn EU-Regular-1 server but after start machine and try to access machine its dont work its just ping but not work Advent of Cyber 1 [2019]

[weary spindle]

Does nmap give you results?

[mental panther]

111/tcp open rpcbind 2-4 (RPC #100000)

only

[weary spindle]

So nothing for port 80?

[mental panther]

https://prnt.sc/utsj6CGLw0it

[mental panther]

http running on 3000

[mental panther]

yes

[weary spindle]

Did you add the port to your ip?

[mental panther]

https://prnt.sc/5mrQqZj3Uvww

[weary spindle]

If you wish to send a screenshot, please verify.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 19, 2024, 3:39 PM

[mental panther]

https://prnt.sc/0QKWN_A29qbh

https://prnt.sc/T6lM-KxSMMo_

[weary spindle]

I don't click random links, please veirfy if you wish to share screenshots.

[mental panther]

I tried to upload a screenshot but i has no permissions

[weary spindle]

Yes, you need to verify, use the link above.

[mental panther]

now its work

idk why its was stuck and not work

thanks you

[desert jetty]

hi can anyone pls help me with trouble to connect to gitlab in room CI/CD and Build Security

[weary spindle]

Please stop posting the same message accross multiple channels, it's spam.

[fierce bluff]

Hi, today I completed room advent of cyber 2023 and when I try to download certificate I get new tab "about:blank" Same issue on different computer.
For test I tried download certificate from AOC2022 and I am getting XML file blah blah....<Code>AccessDenied</Code>
AOC2021 and 2020 option for certificates missing...I am glad I have a backup of it, but it's not great...It would be great to have site like Badges but for certificates

[autumn spear]

this is a screenshot link? 😭
Never seen it before but it seems safe on scans

[autumn spear]

I mean the certification program kind of works, decently, not that bad… Could you perhaps take a screenshot of the issue?

[plush narwhal]

i am not able to connect to OpenVPN , i tried using different servers, but no luck , at first I thought its because of the UNI wifi (maybe they changed the configuration or something , idk).
i am getting something like this

Mon Aug 19 23:18:38 2024 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
.
.
.
.
Mon Aug 19 23:18:39 2024 MANAGEMENT: >STATE:1724089719,WAIT,,,,,,

and after some time this error shows:

Mon Aug 19 23:23:43 2024 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 19 23:23:43 2024 TLS Error: TLS handshake failed

[fierce bluff]

First screenshot is AOC2022, second AOC2023

[autumn spear]

is the wifi sending incomplete packets? In other words is the connection stable?

[autumn spear]

I get the about:blank page too, but it loads it

[autumn spear]

Tried printing other certifications? Do they cause the same error?

[fierce bluff]

Pathway certificate is ok

[autumn spear]

I mean there is some sort of missing privileges that are restricting you to access that page. Perhaps wait till someone answers here or send a request to the tryhackme support webpage ig.

[fierce bluff]

I bypass it. Now i get my certificate but still it would be better to just click on download 😄

[autumn spear]

interesting to say the least. 😭 🙏

[fierce bluff]

There is the way how I got it. I visit the pathway and read the Network output from Dev Tools.
I get: https://tryhackme.com/certificate/generate?certType=pathway&certAch=introtocyber
Rewrote it to:
https://tryhackme.com/certificate/generate?certType=room&certAch=adventofcyber2023
get: {"success":true,"url":"https://tryhackme-certificates.s3-eu-west-1.amazonaws.com/THM-EXAMPLE" }
and then replace the ID of certificate in THM-Example:
https://tryhackme-certificates.s3-eu-west-1.amazonaws.com/THM-EXAMPLE.png

[autumn spear]

wait wth

thats a vulnerability ☠️

IDOR

you can print all certs if so 😭

[fierce bluff]

It's not, because the certificate exist....right? I did not tried it to non existing certificate. I think that it would not work.

[autumn spear]

Uh well someone would try it by then

Try to do it on another cert ethically

and then report it to thm staff

if it does work on other certs..

or other parameters/variables/objects

[fierce bluff]

Of course it's not working. It would be really dumb mistake.
Output: {"success":false,"message":"You have not earned this certificate yet."}

[autumn spear]

Yeah alright well i mean a chance is a chance, you dont always know 🙏

sometimes the smallest misconfigurations could cause the biggest breaches.

[fierce bluff]

Well... I did the same thing that the "Download Certificate" button does. The only thing I needed to figure out was the certificate ID, which I did, and then I just had to fill it into the URL. All certificates have the same URL, just each one has a different ID. Unfortunately, the certificate download process on webpage is somehow broken.

[autumn spear]

atleast theres a debugger for it now 😭 🙏

[ember swift]

I see several posts here regarding the BreachingAD network, dating back to 6+ months ago. I'm using the Attackbox and launching it from the BreachingAD page (as specified). The interface that is supposed to be on that box "breachad" is not present, to be fair in some labs in the past I remember seeing this interface up when checking or the "lateralmovement". Either way.

Did anyone find the proper room to get the proper launch conditions for that interface in particular, another room that launches the same one, or find config changes/workarounds other than connecting to OpenVPN on another box?

[lethal lantern]

Having the same problem with BreachingAD network

[ember swift]

Womp womp. 🪦

[smoky crane]

does anyone how to fix it?

using kali linux in mobile

[glad oyster]

Is your phone rooted

[smoky crane]

no

I already guessed it happened bcz phn isn't rooted but is there any solution to this

[glad oyster]

Not without rooting it I'm afraid

[smoky crane]

praise be to god, I actually found a solution

😀

[glacial rampart]

Hello everyone,

I'm using a virtual machine to run Kali Linux along with the VPN from TryHackMe, but the problem is that the THM machine is much faster when executing commands.

I've adjusted the RAM, VRAM, and other settings, but it's still slow. Can you help me with this?

[glad oyster]

oh? How did you manage to do it?

[novel spear]

DevSecOps>Container Security>Intro to Docker

Task 5 > A Showcase of Docker Compose > The images are wrongly placed

[broken bear]

this is much more likely to be seen by someone who could do something about it in #feedback-and-ideas

[smoky crane]

I installed open vpn in my phone not in vm and that worked!

[worn dune]

what is the i

what is the answer of this question in SOC1.

V

Correct Answer
What groups have used spear-phishing in their campaigns? (format: group1,group2)

how to find the answer of specific question? I can't find the right answer of some questions.

[ivory spruce]

This isn't a THM-related issue. Suggest you use the #general or #infosec-general channels.

In any case, does your host have adequate resources to run the VM (cores, RAM, storage)?

[minor gull]

Hi, when I try to download the OpenVPN configuration pack for Windows (10), it keeps failing to download. Any idea what might be going wrong?

[ivory spruce]

Have you downloaded a VM image for kali (or any other distro)? You can connect to OpenVPN via Windows, but it isn't recommended.

[minor gull]

Like this (https://www.kali.org/get-kali/#kali-virtual-machines )? And then get the OpenVPN config pack for Linux, within the VM?

[stable drift]

Hi, I was trying to download the openvpn configuration file from the site that was linked in a room my class has us do but every time i try to download the file, an error pops up on the top right corner. It simply states "An unknown error has occurred"

(https://tryhackme.com/r/access)

Well this is a classic, it starts working as soon as you try to contact support

[ivory spruce]

Yes

[minor gull]

Thanks.

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 657)

[glad oyster]

Ahh I see, that makes sense - well GJ! I was wrong

[vast socket]

can someone help? i can access 10.10.10.10 but i cant access my machine started from room i tried pinging, the pinging works fine i get reply from the machine

[naive dust]

Okay so how are you trying to access it?

[vast socket]

via browser i have connected open vpn

i am on OWASP top 10 room.

[naive dust]

Okay and did you do an nmap scan first?

So are you sure you are on the right port?

[vast socket]

machine_ip:8888 but i cant access i placed with ip address

[naive dust]

Sure its port 8888?

And not 80

or 8000

or 8080

[vast socket]

yes

its 8888 on site

[naive dust]

Can you try 80, 8000 and 8080?

Just making sure

[vast socket]

okay

yeah same

unable to connect

[naive dust]

do you have the room link?

[vast socket]

also in the access page it shows internal ip as 0000 is it okay?

https://tryhackme.com/r/room/owasptop10

task 7

[naive dust]

You can reach 10.10.10.10 right?

[vast socket]

yes

[naive dust]

Try terminating the machine you deployed and start it again

[vast socket]

yeah but displaying IP on 10.10.10.10 takes time

[naive dust]

You mean curl 10.10.10.10/whoami?

[vast socket]

i mean by browser

[naive dust]

Oh

No problem I guess

[vast socket]

the command displays ip

[naive dust]

And here it says an IP?

Try terminating the machine and starting it again

[vast socket]

yes i terminated

lemme try again

although i tried it 2 times already

[naive dust]

Tag me when its done :)

[vast socket]

sure

[naive dust]

You starting this one?

The one that's grey at mine

Should be green for you

Uh @bronze vale

They are muted

lmao

[bronze vale]

Weird

-unmute 578562161459200001

[scenic torrent]

🔊 Unmuted anasvhora

[vast socket]

thanks

i tried reaching to a new machine

[naive dust]

Yess

[vast socket]

its same not loading

[naive dust]

And you started it here?

[vast socket]

i dont get it what you mean?

i clicked the link it has a web prectical

so

[naive dust]

You need to start the machine in the task

So the button I had in the screenshot

[vast socket]

yes i started the machine and got ip instead of "machine_ip"

[naive dust]

Mmm

So you started the machine in task7. Right?

[vast socket]

10.10.35.107:8888

yes

[naive dust]

Dayum strange

Still cant access it?

[vast socket]

yes

[naive dust]

So you are trying http://10.10.35.107:8888

[vast socket]

i am on my laptop VM parrot os

[naive dust]

@bronze vale sorry for bothering again, but they are muted again?

[bronze vale]

They need to stop saying “yes”
Over and over lol

-unmute 578562161459200001

[scenic torrent]

🔊 Unmuted anasvhora

[vast socket]

okay noted!

[naive dust]

So I think its against TOS if I try to access your machine

So I cant do that

mmm

Pretty strange

[vast socket]

└──╼ $sudo ping 10.10.35.107
PING 10.10.35.107 (10.10.35.107) 56(84) bytes of data.
64 bytes from 10.10.35.107: icmp_seq=1 ttl=61 time=544 ms
64 bytes from 10.10.35.107: icmp_seq=2 ttl=61 time=566 ms
64 bytes from 10.10.35.107: icmp_seq=3 ttl=61 time=669 ms
64 bytes from 10.10.35.107: icmp_seq=4 ttl=61 time=569 ms
^C
--- 10.10.35.107 ping statistics ---
5 packets transmitted, 4 received, 20% packet loss, time 4001ms
rtt min/avg/max/mdev = 543.718/587.020/669.088/48.393 ms

this is the ping log so the machine is up correct?

[naive dust]

thats ALOT of delay

[vast socket]

because i changed server in fixning it i was connected it Indian server beofre

[naive dust]

Which are you connected to right now?

[vast socket]

Au

[naive dust]

Mmm

Try an EU one

[vast socket]

same ping

4003ms

[naive dust]

Gosh

Still can't access the page?

[vast socket]

ill try IN one, y, Cant access page

[errant gorge]

been stuck on linux pt2 for almost a week. kinda crazy trying to log into the ssh. i use the ssh tryhackme@ip of my terminal up top, enter password tryhackme, cuz they say in the lesson that's the password, i get denied about 3 times then kicked. then i use the ssh tryhack@ip they use in the lesson and it says no route to host. just kinda defeated at this point

[vast socket]

sudo ping 10.10.35.107
PING 10.10.35.107 (10.10.35.107) 56(84) bytes of data.
64 bytes from 10.10.35.107: icmp_seq=1 ttl=60 time=411 ms
64 bytes from 10.10.35.107: icmp_seq=2 ttl=60 time=181 ms
64 bytes from 10.10.35.107: icmp_seq=3 ttl=60 time=159 ms
64 bytes from 10.10.35.107: icmp_seq=4 ttl=60 time=284 ms
^C
--- 10.10.35.107 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt min/avg/max/mdev = 158.548/258.745/410.936/99.882 ms

IN

[naive dust]

Still much latency

Cant access it yet?

[vast socket]

damn

finally

loaded

[naive dust]

Nice

I guess it's the latency

[vast socket]

oh okay

[naive dust]

But at least it works now

Happy hacking

[vast socket]

yup thanks for helping

[naive dust]

Okay so

What's the room link?

[errant gorge]

where do i find that. still new. i'm on the lesson the gets me used to using ssh for the first time

[naive dust]

Just copy the URL from your browser

[errant gorge]

https://tryhackme.com/r/room/linuxfundamentalspart2

log into the vpn, then click on attack the box, get everything loaded. ip at the top, click on terminal

then i do the ssh@ip@top

i type yes, get to the password

type tryhackme

get permission denied

[naive dust]

Right, so can you ping the IP?

ping $ip

[errant gorge]

one sec

[naive dust]

And if so, can you tell me the exact command you are using to SSH?

[errant gorge]

got disconnected from the machine but it's connecting again

ssh tryhackme@

and then the ip up top of my machine

[naive dust]

That's the problem

Look

You need to start the machine here

See the "start machine" button?

At mine its grey

[errant gorge]

yea

[naive dust]

Okay at yours its probably green?

If so, click it

[errant gorge]

it's loading now.

[naive dust]

Alright

so you'll need to use `ssh tryhackme@^thatIP^

[errant gorge]

ah i see now. target ip address

[naive dust]

Yepp

[errant gorge]

ty! that worked. finally!

[naive dust]

Happy hacking :)

[vast socket]

i lost connection again?? is there any other way to fix this?

the avg ping per 64kbps is something about 200-400ms

[errant gorge]

last weekend i had probs with the vpn. i just had to wait it out :\

[vast socket]

ah! okay

i'll try reconnecting

[errant gorge]

yeah i ended up making like 6 more profiles to get the vpn to work and after some time just my original one worked again. so i realized prob no matter what i did at that time, had to wait it out.

[naive dust]

Rebooting your VM

Or getting a faster internet connection :/

[vast socket]

well on my host i get around 300mbps

[naive dust]

Thats not bad

How much ping are you getting?

https://www.speedtest.net

[vast socket]

199

[naive dust]

That's not very good

Are you on Wifi?

Maybe you could try cable?

[vast socket]

i use 5GHZ wifi from my phone but something's wrong with my host machine i guess

[naive dust]

Possibly

[vast socket]

usually i get around 300mbps currently its not even 3mbps

ill try rebooting my laptop and start VM and all again

will ping if i get the same issue

thanks for the help dude!

[naive dust]

Yeah so that's the problem

[naive dust]

Youre welcome

[vast socket]

got ping down to 38-40 and download speed around 120mbps.. still not loading in VM

ill try terminating VM

still cant access page

@naive dust can i access this page from windows?

if i connect to VPN?

[naive dust]

Theoretically yes

But I wouldnt do that

[vast socket]

oh okay

not gonna try than

[naive dust]

You could try, but I'm not a fan of connecting to a network full of hackers, on the host pc

lmao

[vast socket]

lol true

i cant get it whats the problem now

should i change server to IN -> AU -> EU -> IN again ?

[naive dust]

Would be strange

You could try and make a new VM

[vast socket]

just did that

sorry you mean NEW VM install parrot in VM again?

[naive dust]

Yeah why not

Or just use the attackbox

[vast socket]

qouta for a day

1hr

finished

[naive dust]

Oh wait

Maybe you can change your adapter

From for example bridged to NAT

Or just switch a bit

See if it has any impact

[vast socket]

it was NAT i switched to bridge i got 100+ mbps after changing it to bridge

[naive dust]

Ahh

[vast socket]

http://10.10.10.10/ on this do you get your IP instantly?

[naive dust]

Yep, normally yes

I'm not able to access any machine with VPN right now

But yes

[vast socket]

my ip not showing in 10.10.10.10

[naive dust]

You could do curl 10.10.10.10/whoami

In your terminal

[vast socket]

yeah

got ip

[naive dust]

Is that fast?

[vast socket]

yup

instant

[naive dust]

Mmm

[vast socket]

lemme try another machine

[naive dust]

You could try this:

sudo ip link set mtu 1200 dev tun0```

Not sure if that makes any difference

[vast socket]

i tried opening another machine

[naive dust]

Alright

[vast socket]

i mean of task 5 which i completed erlier

it loads instantly

[naive dust]

ohh like that

[vast socket]

not a second delay

[naive dust]

thats pretty strange

I have no idea what could be the issue then...

[vast socket]

i'll try starting task 7 machine again

[naive dust]

And its pretty quiet in here right now, so not much other people to assist

[vast socket]

where are you from? i mean its not night there right i am not disturbing your sleep right?

[naive dust]

Oh no

Its 1 PM for me

or in real times

13:00

[vast socket]

1PM

[naive dust]

Yeah PM

Always confused with that

[vast socket]

great

well got task 7 loaded again

wth

[naive dust]

Mmm

[cedar glacier]

OSINT

[naive dust]

Yeah do that

OH you are finding the whole EU

Can tell my country too, Netherlands

And now, good luck finding me between 18m people

And if you find me, we'll drink a beer together

[sick nexus]

i mean 18m is significantly smaller than 8b

[tidal cave]

fairly new user, studying and prep for CySa+003. ran into an issue with logging in. my login and pw werent accepted and the forgot password link/email isnt coming through, tried resetting it but I'm using my student email with wgu to get the discount and im wondering if that could be the issue. couldnt find a page for contacting support. any thoughts?

[west chasm]

45-day streak 5% off swag

Article Link

https://help.tryhackme.com/en/articles/8831940-45-day-streak-5-off-swag

Aug 20, 2024, 12:21 PM

[timid talon]

[e-mail]

[tidal cave]

thank you, appreciate it

[scenic torrent]

Gave +1 Rep to @timid talon (current: #40 - 190)

[floral cloak]

im having issues connecting with my vpn. It connects on my vm, but it says disconnected on the site. I tried generating and downloading a new vpn to connect to but that didnt work either still says disconnected on the site

[timid talon]

can you curl 10.10.10.10/whoami and get an IP?

[floral cloak]

let me try

nah

im gonna try resetting my vm and try again

[timid talon]

Just know that the acces page on THM is broken so it might say disconnected eventho you are connected. If you can ping 10.10.10.10 or even better curl 10.10.10.10/whoami and you get an IP, you are connected fine.

[floral cloak]

ok yea it worked

[steel tiger]

Hello, I'm trying to do the "Blog" tryhackme challenge but I'm unable to access the hosted site "blog.thm" but I am able to access it with the ip-address. This happens on both AttackBox and the VPN connection

and since the CSS is hosted on the "blog.thm" website it doesn't load CSS either

[opal belfry]

hi

i am working in Maintaining Your System: Automation page

i am working in Maintaining Your System: Automation page : Learn the Linux Fundamentals Part 3

When will the crontab on the deployed instance (10.10.118.100) run?

i am stuck

i run crontab -e

[timid talon]

alright. Then you can find it at the bottom of th file.

[opal belfry]

m h dom mon dow command

@reboot /var/opt/processes.sh

i dont see any cron command inside

[timid talon]

just think a bit out of the box.

[opal belfry]

does it mean 'never ' ?

i answer never, it's not right

[timid talon]

No

its at a specific moment.

[opal belfry]

Question Hint

Take a look at the position and the value within the appropriate column

[timid talon]

hmm seems like the hint is confusing

[opal belfry]

in the example : i saw below 0 */12 * * * cp -R /home/cmnatic/Documents /var/backups/

[timid talon]

You got the answer right here.

[opal belfry]

@reboot

thank you Grustopher

thank you

[opal belfry]

thank you

[scenic torrent]

Gave +1 Rep to @timid talon (current: #40 - 191)

[steel tiger]

?

[naive dust]

Fair, still not easy

[naive dust]

FYI its /socials email

[naive dust]

Did you add it in the hosts file?

/etc/hosts

[steel tiger]

no

[naive dust]

then you need to do that :)

add IP-address blog.thm to /etc/hosts

[steel tiger]

aaah

thank you

[naive dust]

You're welcome :)

[final nexus]

hey guys i can connect the vpn but thm doesn't detect this

what should i do

[naive dust]

Hi, what do you mean doesn't detect?

Does it still show: not connected

At the top of the website?

[final nexus]

yea

[naive dust]

Oh that's broken

Don't worry about that

[final nexus]

but target ip adress not pinging

[naive dust]

Is the target windows?

Pinging is disabled for windows machines

By default*

[final nexus]

idk its retro ctf room

[naive dust]

Can you ping 10.10.10.10?

[final nexus]

yes

[naive dust]

Then your target is windows

Time for some enumerating!

[final nexus]

oh okay there is no explanation that the retro ctf room is windows

That's why i m confused

[naive dust]

ahh

if you do nmap with some OS discovery youll find out

[final nexus]

okayy

thanks

[naive dust]

You're welcome :)

[jaunty totem]

I can't ping Fowsniff CTF

[weary spindle]

Can you nmap it?

[jaunty totem]

yes all good

[weary spindle]

Did you have to use -Pn?

[jaunty totem]

Yes

All good its finished thx @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2647)

[vague raft]

Hi guys can someone help me with openvpn it just won't connect

[weary spindle]

Which OS, country and server are you trying?

[vague raft]

Linux Purple with Europe1

[weary spindle]

Go to Eu-3, Regen and download.

[vague raft]

ok

still not

[weary spindle]

which country?

[barren rain]

Hello!!

It's Been A Long Time, I'm Back Again To TryHackMe, But Having Issue With VPN, I'm Connected With OpenVPN, Got IP & Can Ping Machine, But thm/access Didn't Showing That I'm Connected!

[weary spindle]

This page is broken.

[candid grove]

When i try to launch in browser vm from the START MACHINE green button. even the time for launching is completed but no vm iis launched in split view. I have to click start attack box this i Am shown different ip as shown in the pic below which means its the ip of the vm lauched by START ATTACK BOX.my question is what is happening to the vM launched by START MACHINE GREEN BUTTON.Hoping a swift reply .REGARDS

[plush bay]

the target machines don't always have a split screen view included and are meant to be attacked from the attackbox or your own virtual machine

hence why a lot of time you run nmap from your attack machine against the target machine started by the green start machine button

[candid grove]

I can't attach the pic here but red banner is showing different ip and machine which is launched by START ATTACK BOX HAS DIFFERENT U MEAN WHEN I WANT TO ATTACK FROM MY COMPUTER I HAVE TO USE RED BANNER IP?

[weary spindle]

Please don't shout at Shadow, she is helping you, she doesn't have to.

[candid grove]

r u ok man who is shouting i m asking a question

i m new thats y i have to ask

[weary spindle]

Yes, Shadow told you why you're having an issue

[tall scroll]

Although that your new, still show respect, you don't have to use all caps

[candid grove]

wow whats this whats wrong with using all caps ru guys kids com on

[weary spindle]

It's considered shouting, and rude.

[candid grove]

wow thats fantastic

[timid talon]

For attaching images you have to verify (see link). Clicking the green Start Machine button starts the target machine and the IP will show in the red banner. This machine is what you will be attacking. To attack you can either use the Attackbox or your own (virtual) machine.

[west chasm]

@candid grove

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 20, 2024, 6:21 PM

[candid grove]

Got it thanx man here people r offended by capital letters

[weary spindle]

Nobody Is, it's just rude.

[round kraken]

I'm surprised by how edgy ppl are in here. but also not. I'm assuming that's a young "hacker" mindset.

[hasty lark]

can I see a list of VMs i have running? i have my attack box up but when i move to the next room it had a machine to start and I could not excede 3 vms. can I see what is running and select to end those VMs or do I have to wait for them to time out?

[round kraken]

that happened to me too. i had to manually go through the room i had been in and terminate the machine at the top of the page, not just the open vm window.

[weary spindle]

Yeah two secs.

[round kraken]

it seems like some of the room are p difficult. is it the norm, if I'm a newbie, to use walkthroughs? some of the answers i have literally no idea how i would ever had guessed some of this stuff...

[weary spindle]

https://tryhackme.com/api/vm/running

[hasty lark]

thanks

[weary spindle]

This link will show you in JSON format which rooms you have a machine open in.

[round kraken]

oh right. that was helpful. i forgot about that.

[hoary mason]

Is there anyway to transfer my subscription to a different account? Just recovered my old one and wanted to transfer my subsciption to that one instead.

[weary spindle]

No, there isn't.

[hasty lark]

Thank, I was able to find what room I left them in and shut them down so I can keep going. My ADD is getting the best of me with all the rooms and notifications of new rooms to go explore

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2652)

[versed gazelle]

whats the difference between the VIP and regular for the vpn anyone know (in tryhackme)

[weary spindle]

Users and speed.

[versed gazelle]

thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 2653)

[uneven rivet]

Hello, I do have trouble connecting with my vpn. I already switched servers and redownloaded configuration files. Despite Connection status is connected and I get an internal virtual ip address shown, I can't access target ips. The sites do load endlessly. Can anybody help?

[versed gazelle]

did you run the file on terminal

maybe try differ vpn

[uneven rivet]

you mean the correct vpn file with openvpn? Yes, used with root permissions

[versed gazelle]

could just be slow

sudo openvpn file_name

[uneven rivet]

Yesterday it worked after a few tries. Ok I'll do it. Attack box would still work but is slow

Thank you

[versed gazelle]

@uneven rivet thats weird yea retry you can check by going to tutorial room it could just be the room your working on and forced to use the attack box dont close the terminal that is running sudo openvpn file_name

[timid talon]

are you sure theres something running on port 80?

[timid talon]

if you verify (see link) you can clarify your issue with screenshots.

[west chasm]

@uneven rivet

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 20, 2024, 9:28 PM

[indigo flame]

hello guys, i'm trying to access to this room https://tryhackme.com/r/room/persistingad but the AttackBox don't have the interface persistad and i can't ping the THMROOTDC

[lone kernel]

hi guys can anyone please let me know how does the streak thing work depending on the time of the first question answered for starting a streak?

[timid talon]

I believe it counts/resets from 00:00 local time.

[naive dust]

Mmm. Resets midnight yeah

[lone kernel]

i had no questions answered today and i started studying and yet streak hasnt budged

[naive dust]

budged?

[lone kernel]

i mean no increment

[naive dust]

So if you answer a question, your streak increases

[lone kernel]

i did answer yes

[naive dust]

Sure your streak didn't increase?

[lone kernel]

yes fully

[naive dust]

Would be strange

Very strange

Didn't you answer a question today just after midnight?

[lone kernel]

my streak shows 9

[naive dust]

Okay that's pretty strange

[lone kernel]

yep i did

[naive dust]

And didn't it increase then?

[lone kernel]

nope

it increased yester i hoped it would today but idk the time confuses me

i did lose my streak twice now cuz confused 😭

[naive dust]

Because of that?

[lone kernel]

yeah

[naive dust]

Mmm maybe emailing support is an option

They can explain surely better

[lone kernel]

okay will do thanks

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 21, 2024, 9:09 AM

[vague raft]

openvpn dosen't work even though I download the ovpn file for europe 1 and open it with the command sudo open filename(I use the actual filename).ovpn but then it tells me stuff about no kernel support and so so I regeneratet the file and got it for europe 2 and did the command again but same thing.

[weary spindle]

Use Eu-Reg-3

Regen first.

[vague raft]

done that too

I've went through every single europe file

[naive dust]

Okay so what did you exactly do?

You downloaded it. Then you have gone in the directory where the file is.

[vague raft]

Download the config file then opening it and then getting an error message

[naive dust]

Then you do sudo openvpn filename.ovpn

[vague raft]

yup

in the downloads folder

[naive dust]

Alright, can you share the error?

[vague raft]

k

might take some time since I need to start linux first

should I share the error log?

[naive dust]

Yes please

Or just a screenshot of the output of the command

But to send screenshots you'll have to verify your discord account first

[west chasm]

@vague raft

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 21, 2024, 9:42 AM

[vague raft]

ok

2024-08-21 11:42:14 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2024-08-21 11:42:14 Note: Kernel support for ovpn-dco missing, disabling data channel offload.
2024-08-21 11:42:14 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-08-21 11:42:14 library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10
2024-08-21 11:42:14 DCO version: N/A
2024-08-21 11:42:14 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2024-08-21 11:42:14 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-08-21 11:42:14 UDPv4 link local: (not bound)
2024-08-21 11:42:14 UDPv4 link remote: [AF_INET]18.202.168.160:1194

here

[weary spindle]

openvpn --version | head -n 1

[keen scroll]

2.6.12?

[vague raft]

?

[naive dust]

Wat is your openvpn version

[vague raft]

2.6.12

[weary spindle]

cat your config.

Or send it to me.

[vague raft]

openvpns config?

[weary spindle]

Yes

[vague raft]

ok

dosen't that like have sensitive infos or smth

[naive dust]

That's why Scrubz said, send it to me ;)

He means, in dm

[vague raft]

k

well I somehow need to make it 8k characters shorter

[naive dust]

Oopsie

Send it in multiple messages

[weary spindle]

Or just upload the file?

[naive dust]

Even better

[vague raft]

dun

btw does the openvpn thing work differently based on the os

[vague raft]

It still won't work

[naive dust]

On which OS are you?

[vague raft]

kali purple

[timid talon]

Can you share screenshot of the output?

[vague raft]

here

[timid talon]

You keep getting the same errors?

[vague raft]

yup

well I fixed one file but just up to the part where TCP handshake fails

I dunno how to fix that

[scenic mica]

try diffrent servers
i had rhe same error in us west and au and in but it suddenly worked in eu

[vast socket]

hey there @naive dust i am still having problems accessing the machines

i can access machine_ip/myprofile instantly but cant access machine_ip/

[naive dust]

Gosh

You were the one with the latency, right?

[vast socket]

yes but the latency is low now

[naive dust]

Tbh I don't know what I should think of, now

[vast socket]

am.. okay

the attack box works fine but already finished today's hour

[weary spindle]

Do you have a white screen load?

[vast socket]

am yes

not sure it just keeps loadingnot showing white screen

[weary spindle]

MTU not fix it?

[vast socket]

idk

oh that mtu command

no it didnt

[weary spindle]

How do you connect to the internet?

[vast socket]

using 5g internet via hotspot to my laptop on 5GZ band and on host to VM is NAT network

[weary spindle]

Could be the issue iwht the hotspot + 5G, shouldn't, but could be,

[vast socket]

also the "sudo ping machine_ip" works fine

i am getting responses instantly

PING 10.10.197.68 (10.10.197.68) 56(84) bytes of data.
64 bytes from 10.10.197.68: icmp_seq=1 ttl=60 time=173 ms
64 bytes from 10.10.197.68: icmp_seq=2 ttl=60 time=164 ms
64 bytes from 10.10.197.68: icmp_seq=3 ttl=60 time=240 ms
64 bytes from 10.10.197.68: icmp_seq=4 ttl=60 time=198 ms
^C
--- 10.10.197.68 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3010ms
rtt min/avg/max/mdev = 164.443/193.865/239.944/29.281 ms

the ping is always between 170 - 250ms

[weary spindle]

Which link are you trying to open?

[vast socket]

10.10.197.68 - machine IP

https://tryhackme.com/r/room/owasptop10 - link to the tasks i am on task 29

[weary spindle]

Are you entering the ports too?

[vast socket]

nope

i mean only the once mentioned on site

like if the room has machine_ip:8888 or something than only i add port else no

[vague raft]

I'll try that

[vague raft]

Crazy

US is givin me a different error

But still not connected

nope nothing is connecting

smb pls help

[barren summit]

Is open VPN is working? Or is it only for my not working ?

[barren summit]

@weary spindle Is open VPN is working? Or is it only for my not working ?

[weary spindle]

I'm connected ok.

Which;

Country
Server
OS

[barren summit]

Country: India
Server: IN-Regular-1
OS: Kali Linux

[weary spindle]

Try Eu-Reg-3 > Regenerate it first.

[barren summit]

oki I'll try

no luck

i'm able to ping the vpn server but in access page It shows Not Connected !!

[weary spindle]

That page is broken, ignore it.

[vague raft]

Wait whut

So that means in theory I could be conneted but the site says no

[weary spindle]

Yes.

[vague raft]

Oh

Oh no

So

I need to go through every installation again to see if it works lol

[barren summit]

dame

i got you @weary spindle but i can't able to ping a machine

[weary spindle]

Which machine?

[vague raft]

Omg it works

Yay

[vague raft]

Try reconfiguring and redownloading

worked for me

[weary spindle]

Now you need to minize the terminal, don't close it.

[vague raft]

Well I switched off the entire vm and closed the terminal but if I want to reconnect I just need to open the file again right?

[weary spindle]

If you're going to shut down. I'd use [Ctrl and C] in the terminal window.

1. Open VPN file with sudo openvpn /path/to/file/filename.ovpn

2. Make sure your VPN says Connection Initilized.

3. You can use ip a | grep "tun" to confirm you have only tun0 open and see your ip,

4. Ignore this page, it's currently broken.

[keen scroll]

3. You can use ip a | curl "tun" ...
   It's grep

[vague raft]

thx

[rustic radish]

network services room task 4 (exploiting smb) when i try to use smbclient it shows "the "syslog" option is deprecated" anyone knows how to fix?

[autumn spear]

its prolly cause you failed to login (which would show downwards as a failed login attempt as of wrong credentials), or you cant access the smb share due to your current privileges.

[rustic radish]

its deffinetly not that

when i checked on the yt video ive made the same syntax as they did

and it worked for them but not for me

[autumn spear]

I mean i think im positive on the second part, i had a svc-admin account trying to access ADMIN$ share and it said the same error, but when i accessed a backup smb share it worked. Because the svc-admin (the account i accessed had privileges to access the backup smb share and not the ADMIN$ smb share)

[timid talon]

Could you verify (see link) and then share a screenshot to help identify the problem.

[west chasm]

@rustic radish

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 21, 2024, 6:53 PM

[timid talon]

It's supposed to be an anonymous login.

[rustic radish]

yep

[timid talon]

Are the IPs you censored the same?

[autumn spear]

Yes thats literally the same concept, you cant access the smb share especially such highly privileged smb share with an anonymous login.

You have to be inside of an account with a privilege that could access that smb share.

[rustic radish]

no

the first one is my machine ip the second one is my target ip

[stiff reef]

hello i cant paste images? here?

[autumn spear]

try finding a way to escalate your privileges

[rustic radish]

verify urself ./verify

[autumn spear]

Yes, verify first

[timid talon]

What's under this outcome?

[rustic radish]

i used help

[stiff reef]

./verify

????????????

[autumn spear]

Try -L and show all the files in the smbclient, afterwards try each smb share alone, if one happens to work, it should have a credential disclosure or a flag.

[west chasm]

@stiff reef

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 21, 2024, 6:58 PM

[autumn spear]

without the dot

[rustic radish]

without the dot

[autumn spear]

yes without mb auto sh 😭

[stiff reef]

verified

[timid talon]

Make the -u to a -U