site-support

[upbeat quarry]

I have had a few issues in the past with VPN for networks giving 500 (in particular for Wreath network), but never for regular machines
have you tried with different VPN servers?

[terse trail]

I can’t ping the target. Haven’t tried nmap though

[upbeat quarry]

not all target VMs respond to ping, in particular Windows machines
if ping does not respond, be sure to use nmap like this: nmap -Pn <IP>

[errant mica]

I tried a different regular server and it worked, went back to the original one and it also worked, however, I cannot download the wreath network one which is the one I need

[upbeat quarry]

if you are not a subscriber, you need a 7-day streak for any THM network

[molten flame]

Is this https://tryhackme.com/r/room/trywinme finished? and when it did finish @uneven mortar

[bold estuary]

I am trying to connect to an attack box in the Authentication Bypass room. It just connecting without continuing and it show a failed to connect to server. When I try to terminate the attack box it say error terminating attack box. I do not see the attack box selection box in the room. I am subscriber as well

[errant mica]

I am currently at a 9 day streak

[upbeat quarry]

I suggest you use the Options to leave the network
then join back a few minutes later
try to download the VPN file again

[errant mica]

I will give that a try and let you know if it doesn't work

[upbeat quarry]

yes it is finished, about 1 month ago
there is another event ongoing if you want, check here: #1305926862114914325

[upbeat quarry]

several users have reported issues terminating machines
check if the info from this previous message helps: #site-support message

[bold estuary]

I tried the steps but it did not work. I am not able to terminate the attack box. it is not connecting to the server for the attack box.

[stark marsh]

hey y'all. Having issues connecting to open vpn on tryhackme

Mon Dec 2 09:58:24 2024 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). OpenVPN ignores --cipher for cipher negotiations.

Any advice? I have been researching, and some people say to install OpenVPN 2.4?

[upbeat quarry]

so Ctrl+F5 does not help either?

[weary spindle]

Which server are you using?

[stark marsh]

I imported the profile that tryhackme made for my username

[weary spindle]

Yes, but THM offer many different servers sush as Eu reg 1-4, Eu vip 1-2

[weary spindle]

Are you in US?

[bold estuary]

No it does not. It just goes back to what it was doing. When I try to join any room it automatically goes split screen with a THM AttackBox showing connecting and then fails by stating failed to connect to server. When i try to terminate it says errors terminating instances

[stark marsh]

yup

lol I switched to us-west-regular-1 and it seems to have worked

[upbeat quarry]

go to this URL, which lists your machines currently running: https://tryhackme.com/api/vm/running
is THM AttackBox listed there?

[weary spindle]

That was my next suggesting.

[stark marsh]

thank you

[molten flame]

sad i didn't know about it till now

[bold estuary]

Yes it does I can add what text is showing if that will help

[upbeat quarry]

thanks but not needed
then, my last shot: go to this URL: https://tryhackme.com/r/room/kali
I expect you will see your AttackBox running (or half-running)
try to terminate it from there
if that fails, see if you can use the Options button to leave the room: I hope that this step will be allowed and will kill the attackbox

[scenic torrent]

Gave +1 Rep to @bold estuary (current: #2397 - 1)

[bold estuary]

First thank you for your help and assistance. When I clicked on the link It is showing there. I tried joining and then leaving the room and it did nothing. It is showing an expiration time of 0m 0s. When I try adding time it says you have been running this machine for too long. When I tried starting another one it acts like it will start running but then states that another instance is running and to terminate that instance. When I try to do that it does the same thing as before.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #24 - 397)

[upbeat quarry]

well, I am sorry, but I have run out of ideas
I suggest you turn to THM:

• you have the option on any THM web page to use the THM "bubble" on the bottom right corner Sometimes it is just a bot, sometimes you have THM staff interacting with you
• otherwise, send an email to THM support at the address coming in the message below
  like I said, several users have reported issues of the same kind, so I expect the solution will have to come from THM

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 2, 2024, 3:47 PM

[bold estuary]

Thank you again for your help. I will do that

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #24 - 398)

[naive dust]

FYI: Getting OpenVPN working on MacOS was a pain in the buttocks. I recommend to just use Tunneblick instead to save yourself from a headache.

[weary spindle]

For MacOs you should install brew then install openvpn via brew.

[molten flame]

how did you know about that link? subdirectory enumeration on the website?

[upbeat quarry]

I did a screenshot of this message from Scrubz in my notes: #site-support message

[cunning nacelle]

Is the anything I can do if a machine doesn't terminate completely? It seems to be terminated because I can't reach it anymore, but the site still shows me the "Target Machine Information" with no time left and that blocks me from starting the new machine.

[upbeat quarry]

several users have reported the same issue
I have not seen people reporting a solution
one trick maybe though if you are using THM VPN: check this message #site-bugs message
if that helps, please provide feedback here
otherwise, I think your only option it to turn to THM via the support bubble on each THM web page or via the email address coming in the message below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 2, 2024, 4:35 PM

[cunning nacelle]

Thanks! VPN won't solve it, as I cannot start the target machine.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #24 - 399)

[upbeat quarry]

I am pretty sure it is stuck in THM infrastructure, and that only THM can get it unstuck, no matter what you do on your side
Just a gut feeling though

[brave owl]

Hello everyone, I have a question!
My account is not premium, and I want to solve a task that requires a machine. If I use another account to get an additional free hour and then submit the answers on my main account, would that be considered cheating?

Thank you for your advice!

[strange anchor]

what raffle ticket in advnet of cyber 2024 ? and how 🤔 to collect

[ember osprey]

You automatically get them when you solve the question but you can't see them , they're on the back-end 🙂

[stark marsh]

I haven't even used the Attackbox today, and when I click it, it tells me about only using it for 1 hour per day unless subscribed 😭 trying to do the side quest @weary spindle

[weary spindle]

Did you boot or up at all today?

[stark marsh]

I clicked Start Attackbox but it never loaded. So I clicked it again and got the message

I'm currently on the OpenVPN

[weary spindle]

Then I dunno what to tell you, I'm not staff. 😦

[stark marsh]

oh my bad. Anyone I can speak with? I haven't even been able to start Day 2

I also really wanted to get the keycard from day 1

[weary spindle]

Do you need the attackbox?

One way around it is to subscribe.

[stark marsh]

I thought the keycard was in the attackbox, no?

[spare pecan]

@weary spindle sorry ping

Hello, I hope you're doing well. I'm having trouble accessing my Junior Pentester certificate on TryHackMe. Could you please help me resolve this issue? Thank you

[weary spindle]

What do you mean?

[spare pecan]

I can't redeem my certificate on the TryHackMe website.

[weary spindle]

Is it 100%?

[spare pecan]

yes

[weary spindle]

Do you have an ad-blocker on?

[spare pecan]

no

[weary spindle]

Do you get an error?

[spare pecan]

Yes, I am. Give me a second to send a screenshot; I'm looking for the room.

I can't send messages here. Can I talk to you in private?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 2, 2024, 5:48 PM

[weary spindle]

^ that can help you verify to share media

[spare pecan]

I managed to download it now. It wasn't working before.

[weary spindle]

Ah, ok

[spare pecan]

thanks ❤️

[timber charm]

Can't login with Google for some reason. Getting Uh-oh! Something went wrong, please try again later.

[modest flume]

I'm just trying to do the day 1 advent for 2024 and I'm using the video but he copies a link to put in the browser and I don't have that link! It also doesn't show the username and pw to log in as the attacker? I'm assuming. is my page missing the link? Or do you have to do them only on the day they come out?

[modest flume]

I couldn't get my machine to start up for several tries. I'm assuming it's just busy at the moment.

[amber prairie]

can someone help I can't get my kali box to close and I would like to continue my rooms

[errant mica]

I left the room, waited over an hour, re-logged into the site and re-joined the room, I am still getting 500 error when trying to download the wreath vpn file

[burnt tangle]

cant do the windows local persistence room because something odds happening with terminating the machine instance i had open last night

anyone got any workarounds / fixes?

[burnt tangle]

still cooking me

i might just have to come back to this and do a different room or something

[scenic torrent]

Gave +1 Rep to @errant mica (current: #2401 - 1)

[upbeat quarry]

thanks for the feedback
I have just checked for me, and I can download the VPN
check the screenshot: my network instance is 10.200.73.X
what is yours?

[upbeat quarry]

hey, jemuzu1, about this issue, several users have reported similar problem
the bad news is that I have not seen messages with a solution to this
if you search Discord for terminate or terminating, you will see for yourself
you can check in #site-bugs in case somebody reports progress
I would suggest you report your problem to THM with an email at [e-mail], so that THM staff takes care of this (THM Discord is a just forum of users like your and me)

[burnt tangle]

Yeah thanks, ive just done that, hopefully we get something back soon

[upbeat quarry]

THM has support on weekdays during office hours (UK time)

[burnt tangle]

aw, think ill just play the finals and firm it tonight then

[upbeat quarry]

the finals? what does that mean?

[burnt tangle]

the game, its super fun

[tranquil iron]

im doing day 2 of aoc but i can't terminate a machine

[upbeat quarry]

check this, from #site-bugs : #site-bugs message

[tranquil iron]

it's stuck at 0m 0s. Error message: "Error terminating instances"

[burnt tangle]

thanks a lot!!!

[tranquil iron]

mb I didn't scroll

[upbeat quarry]

several users have reported similar problem
check this message as an example: #site-support message
for the latest update, check this: #site-bugs message
bottom line: you have to wait for THM staff to fix this

[tranquil iron]

thanks 🫡

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #23 - 403)

[tranquil iron]

I guess we are all crashing the machines

[upbeat quarry]

as far as I can see, it started a bit before the WE, i. e. before the launch of AoC

[tranquil iron]

Ooh I thought It would be because of AoC

[upbeat quarry]

actually, the first instance that I personally saw reported was on Saturday, here: #room-bugs message

[tranquil iron]

At least other machines work

[upbeat quarry]

but you will be limited to the number of THM machines you can launch simultaneously
normally it is 3, but if you have 1 or 2 or 3 VMs stuck, refusing to terminate, you are left with 2 or 1 or 0 machine you can launch 🙃

[tranquil iron]

That's new for me, I just do 1 at a time lol

Why do u need that many?

[upbeat quarry]

if you use THM AttackBox that is one for a start
then you have a target VM
and if you want to check something on another VM, for instance, you come to 3
and mind you, if someone has the AttackBox stuck, and has issue with THM VPN, then they have no access to any machine 🙃

[tranquil iron]

I see

[idle crane]

Why haven't the monthly leaderboards reset for December? My company uses the workspace leaderboard for internal tracking/competition and it really messes with things when they don't reset. Is there a new schedule for those resets to take place a week after the new month or something?

[velvet prairie]

Monthly points in Leaderboards yet again not reset 🧐

[undone cloud]

so if i am not experienced enought i cant verify? :c

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 2, 2024, 8:33 PM

[upbeat quarry]

check the link above to verify (nothing to do with experience)

[undone cloud]

oh sry my bad

im already 2tired

sry

[signal ferry]

can i stack the 25% off discount, AOC promo code and the student discount for the annual subscription

[weary spindle]

It worked for Black Friday, so maybe

[signal ferry]

how much longer is the 25% discount going to be available for

[weary spindle]

End of Dec.

[carmine wolf]

Yo, i’m using kali vm in virtualbox+ openvpn to get access to the rooms. What’s the best way to handle vpn settings? Log in to THM inside VM and get configuration file there or set up guest additions and send file from a host?

[upbeat quarry]

you have to run openvpn <VPN_config_file> in the machine where you are going to issue the commands targetting THM VMs
typically, you have a kali VM running in a hypervisor, and you open a terminal in Kali where you issue your openvpn command

[livid verge]

you can use a shared usb-stick that you unplug when not in use for better isolation of VM/Host @carmine wolf

[upbeat quarry]

I would like to learn about this, if you do not mind
what do you store on that USB?

[livid verge]

Well everything copy from your host (like file downloads)

I wouldn’t sign into anything inside my vm

[upbeat quarry]

you mean, you do not want to have creds in your VM because your VM could get compromised?

[livid verge]

Yes, if you want to dive into malware analysis later , you don’t want to have an infostealer stealing your data

[upbeat quarry]

ok, so referring back to the practical case of blue shirt, you do not want to login into THM from your VM
thank you for that heads up

[scenic torrent]

Gave +1 Rep to @livid verge (current: #1191 - 3)

[livid verge]

@upbeat quarry exactly, you only ever copy flags that you found, and an one-directional clipboard shouldn’t be a problem (even omnidirectional should be fine for most use cases)

[ivory sedge]

Hey I still can’t terminate my room

I waited over 12 hours

It’s still up

Console script also dosent work

It’s just standing there

Menacingly

[upbeat quarry]

known issue: #site-bugs message
you have to wait for THM to fix it

[carmine wolf]

Thanks

[scenic torrent]

Gave +1 Rep to @livid verge (current: #962 - 4)

[livid verge]

No worries

[ivory sedge]

…..

So I bought premium to be fucked

Lmao fair enough. Rip my dream adventure of cyber

[upbeat quarry]

this issue seems to affect more and more users, so I expect THM will fix it fast

[tulip burrow]

Hi guys, Im on day one of the advent of cyber. when I enter the ip into firefox, it has an error code of 405

[upbeat quarry]

make sure you do not enter the IP of the AttackBox instead

[tulip burrow]

still not sure what to do

[upbeat quarry]

have you pressed the green Start Machine button that gets greyed out when you have, in the Connecting to the Machine section?

[tulip burrow]

ah i think i started the wrong machine

thanks

[left pollen]

Would this be the right channel to address streak? It says I missed the 26th but my streak kept up until today? Even though I have completed questions today. Could that have been when it counted twice in one day?

[plain iris]

Is anyone else having the Error terminating instances issue? It shows my machine from last night expired, but its also hanging at 0m 0s....Can't start a new machine until this one is terminated. Any advice? @tulip burrow @upbeat quarry My green button is also grey.

[autumn nest]

Hello everyone, I had this working 2 days ago without any problem but now openvpn for exploitingad room says VPN is connected, I have the interface up exploitad I added the server (DC) to DNS and I see it in etc/resolve.conf but im unable to ping anything I just ran the tryhackme trouble shoot and :
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

I also tried downloading a new openvpn config this is a debian (kali) box
Just wondering if I must be doing something simple wrong

[ivory spruce]

Did you lose your streak?

[left pollen]

yes I did

[ivory sedge]

can someone start an advent of cyber d2 machine

i cant because my think is stuck

pls fix mr Skidy

[plain iris]

I still can't terminate machine. Error terminating instances

1. Browser refreshed, cleared history/cache
2. Tried Chrome, Mozilla, and Brave
3. Didn't work in new VM.
4. Machine start/terminate buttons worked fine in all rooms. Only AOC2024 is having issues.

@ivory sedge twinsies

[fringe sandal]

Any ideas on why I might be getting "failed" when trying to download downlaods.zip file in Kali VM on Day 1 AOC challenge? It works in AttackBox, but not in my VM. I am connected and cant get to site to convert the YT URL to MP3.

[upbeat wraith]

I need a help support

[ember osprey]

Try to reach them at || [e-mail] || 🙂

[ivory spruce]

You can drop them an email and request that they restore it. It might take time to hear back as they can get quite swamped with tickets especially during AoC time.

[west chasm]

@left pollen

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 3, 2024, 4:07 AM

[ivory spruce]

It was mentioned in the announcement that you might need to try a couple of times or after a few minutes due to demand. I'll try to find that and will link when I get the chance.

[last latch]

how do i remove the credit card from tryhack me account , so it doesnt auto renew membership ?

[ember osprey]

You can just cancel your membership 🙂 . Your premium access will remain until your paid period expires 😄

[last latch]

thank you, didnt think of that

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #11 - 729)

[ember osprey]

If you still want to remove your card go to Account Settings on THM web site > Subscription > Manage Payment Details > Click on your card > Remove payment method 😄

[sullen depot]

Just so we don't clog the gen chat, and because other people might be able to help

If you can ping the target then the VM is working

[prisma echo]

When i connect via openvpn the website never load, i only get the title on the browser tab.
even after adding to etc/hosts this issue remains

this forces me to use attack box

how do i solve this

i changed VMs, downloaded the openvpn file multiples times with different servers, but still same issue. This has been happening for a while now

[sullen depot]

What do you see?

Is it just a blank page?

[prisma echo]

I can ping, scan, do everything with the target via terminal

but browers just get stuck on loading, (there in no proxy)
i only see webiste title in browser tab

yes blank page

[sullen depot]

Yeah you posted all that before lol

[prisma echo]

with page title on tab

[sullen depot]

Is burp suite open?

I just like to check yk

[prisma echo]

nope, no proxies

i even tried with proxies just to see,

doenst work in any case

it used to be fine before

[sullen depot]

Is it open though

[prisma echo]

what

any additional setting that i should try? anyone?

[sullen depot]

Is burpsuite open

[weary spindle]

VM?

sudo ip link set dev tun0 mtu 1200

Run this command in terminal, then refresh the website

[prisma echo]

did try this but didnt work.
i am not making this up

[shadow lake]

I’m reposting this message in the correct channel:

Hello, I'm new to the server. I started the "Basic Static Analysis" room yesterday, but I can no longer access the provided virtual machine. The machine has expired ("Expires: 0m 0s"), which is perfectly normal. However, what's not normal is that when I try to terminate it (using the "Terminate" button), it doesn't work and displays: "error terminating instances."

This is very problematic because I am paying for a TryHackMe subscription. I'm essentially paying for a service I can't access, which is quite frustrating. Thank you in advance for your help.

[ember osprey]

Check out this article 🙂

https://www.reddit.com/r/tryhackme/comments/oa9ylg/room_machines_are_not_terminating_successfully/

[shadow lake]

Thank you for your message. I’ve read the entire article, and I don’t see any solution except the one involving the POST request. I’m not going to use that solution because I’m not an expert in IT, and I saw TryHackMe as a simple way to learn cybersecurity. Clearly, that’s not the case.

This problem has been around for several years, so I’m surprised it still hasn’t been resolved. Is there a TryHackMe support service I can contact?

[ember osprey]

Yes , you can contact them at || [e-mail] || 😄

[shadow lake]

In that case, I’ll just have to look into how to get a refund for my subscription. It’s shameful on their part not to address the issues faced by their subscribers.

[pallid haven]

cant start vm machine

saying "we're temporarily at capacity"

[ember osprey]

Refresh the page and try again in a few minutes 🙂

[pallid haven]

ok

[weary spindle]

This code is on our pins for this channel

[ember osprey]

Oh , sorry , my bad then 😦

[burnt tangle]

Loads of people having the issue unfortunately

[cunning nacelle]

Is there any official statement from THM what is going on?

[naive dust]

No, it's most likely due to the amount of people doing the AoC, you can check the following reddit link: https://www.reddit.com/r/tryhackme/comments/oa9ylg/room_machines_are_not_terminating_successfully/

[cunning nacelle]

Thanks, but that post is from 3 years ago and the script is unfortunately not working. It would be great to have an official channel where THM communicates what is going on right now

[scenic torrent]

Gave +1 Rep to @thin bear (current: #345 - 16)

[weary spindle]

Does anybody have a room machine stuck open right now?

[cunning nacelle]

Yes, the "AOC2024_Day1_Legit_Youtube2mp3_Converter"

[weary spindle]

Can you DM me please.

[cunning nacelle]

sure

[upbeat quarry]

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

[burnt tangle]

ive got mine too, im in windows local persistence if you want it

lmk ill slide it in your dm

[weary spindle]

Cna you DM me?

[burnt tangle]

Ofc

[upbeat quarry]

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

[upbeat quarry]

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

[tranquil iron]

Thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 413)

[upbeat quarry]

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

[tranquil iron]

I just checked the machine like 15 min ago and it was still stuck, so I'll reach out

[burnt tangle]

i can see a "terminate" request being sent by POST to the terminate part of the API which is being 403 forbidden

[upbeat quarry]

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

check this: #site-support message
I suggest you reply to this message from Scrubz in case you're still stuck

[viral mica]

good day fam, anyone with ccst cybersecurity exam dums please share

[weary spindle]

I'm sure this would invalidate the exam, the ToS and is straight out unethical.

[viral mica]

noted thank you

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3049)

[wind wedge]

Hi All

The support queue will be delayed quite a bit with response times going up. Due to AoC and it being the holiday season we might take a while to get back but we are working through it and will get to you as soon as we can

Please do not put in multiple requests/tickets otherwise these will cause even more delays within our response times and will get closed out as duplicate tickets

Please note we are NOT a live chat and do not work weekends

[wheat moth]

I submitted my room to THM for review but I don't know how they will contact me?

[weary spindle]

You'll be contacted when they review it

Either on Discord or Email

[snow cedar]

hey! Many many thanks it looks like finally it has been resolved - it somehow got fixed - yesterday emailed support but wasn't much of help. Anyway thanks!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 414)

[errant mica]

Mine is 10.200.105.200

[upbeat quarry]

each time you leave and join, you get assigned to a different network
I suggest you do that process several times, hopefully landing on 10.200.73.X, and hopefully being able then to download the VPN config
final resource: THM support available by email at the link coming below, but be mindful of this: #site-support message

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 3, 2024, 1:35 PM

[vernal charm]

well, hi guys
I paused my subscription on 30th of November due to college overly taking my time schedule, and I realised that now I am free. Is there anyway to renew my subscription instead of waiting until Dec 30th? I tried clicking cancel my subscirption button and it tells me "Your subscription is currently paused."

[eager crest]

Hooray !!! 🎉 it works again

24h later :/

[sand flower]

for the vulnerability capstone it asks for I service I don't see open even when I scan all the ports. Additionally there is just an http and ssh port open on the machine and when I visit the websit being hosted it doesnt look right, can someone please tell me if this is what the machine is supposed to look like. Thanks

[west edge]

having this issue every time I launch attached machines to tasks (only attackbox machines, not local websites).

Translation of screenshots

1. CONNECTION
   Connected to Guacamole. Waiting for a response..

2)CONNECTION ERROR
The connection was closed because the server took a long time to respond. This happens when there are problems accessing the network due to a weak wireless signal or low data transfer rates. Please check your network connection and try again.
Reconnecting after 13 seconds...
► Reconnect

[ember osprey]

There's name of the service right in front of you 😄

[sand flower]

lol thanks, brain fart

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #11 - 764)

Gave +1 Rep to @upbeat quarry (current: #22 - 415)

[west edge]

After some connection errors I am getting this console. Is it error, or is what supposed to be?

[upbeat quarry]

having some delay with Guacamole is something that happens to me too That would be the first issue 1) CONNECTION
about the second issue 2)CONNECTION ERROR, I encounter that, I think, when I have more than one VM through Guacamole and that I switch from one to the other (for instance, I would have Linux Fundamentals 1 and THM AttackBox open in Split View) But that disappears and gets stable after a few seconds
your situation seems different, as you have only one VM with Guacamole, but the error message points at possible network issue: to troubleshoot that case, I would try to connect through another network (for instance, you could make a test using a hotspot set up with your mobile)
also:

• you seem to say you have that issue "every time": can you confirm you have that every time on "Linux Fundamentals 1" and "Windows Fundamentals 1"
• have you had this issue starting recently?
• have you had this issue on specific target VMs?
• have you had this issue on many target VMs?

[errant mica]

I left the room and re-joined again, this time I got 10.200.85.x and I can download the config, Thank you so much for your help

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 416)

[west edge]

sorry for late reply, I started to have this issue since last week. I had exact the same error in this room: https://tryhackme.com/r/room/metasploitexploitation, task 6. I did not text anywhere about this, I thought there are some issues only in this room (metasploit). However today I had same error in https://tryhackme.com/r/room/linprivesc. I think you are right, there are some delays in Guacamole, after some tries it is managing to connect. But I have another question. Are you getting GUI or only Console interface when connecting to Guacamole?

[small stirrup]

it is only me that cant open machines?

Parsing error

[mellow bluff]

hello does anyone has the email of a sales rep or someone in sales , i m trying to get in touch with someone to no response , the chatbot doesn t work either

[upbeat quarry]

thanks for the feedback
I have experienced slower machines, especially THM Attackbox, since yesterday, and that may due to the start of the Advent of Cyber event However, I have noted that since the end of last week (this is my personal observation), there have been problems reported across many VMs, with people not being able to terminate some VMs for hours So, somehow, there has been a context of problem with VMs for the past few days, and it is not obvious to me if your issue is linked to that situation or not
About your GUI/Console question:
THM starts target VMs in several different ways:

• some are just started with no new window appearing, and you interact with them remotely via their IP, like nmap <IP> or ssh user@<IP> or other tools Nothing to do with Guacamole there
• some target VMs accessed via Guacamole open as a console, starting in SplitScreen mode: that is the case for Linux Fundamentals 1 (https://tryhackme.com/r/room/linuxfundamentalspart1) Check first screenshot
• some target VMs accessed via Guacamole open as a GUI, starting in SplitScreen mode: that is the case for THM AttackBox and other target VMs, for instance, Windows Fundamentals 1 (https://tryhackme.com/r/room/windowsfundamentals1xbx) Check second screenshot
  Note also that you can have several windows open through Guacamole in the same SplitScreen view when you start THM AttackBox in addition to another VM I have illustrated that situation in the 3rd screenshot
  Finally, the 4th screenshot is worth exploring to control the SplitScreen mode

[scenic torrent]

Gave +1 Rep to @west edge (current: #2408 - 1)

[upbeat quarry]

is that for all machines?
I would start with Ctrl-F5 to get rid of that Parsing error

[small stirrup]

worked

thx

[mellow bluff]

any idea @upbeat quarry ? @bronze vale srry for the ping

[upbeat quarry]

I do not have an email for Sales
the only resource I know is [e-mail]

[west edge]

got it, thank you bro for your help!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 418)

[vernal charm]

I sent an email to [e-mail] and no one replied. so what now? @weary spindle

[weary spindle]

Wait patiently

[vernal charm]

oke

[weary spindle]

#site-support message

[left pollen]

thank you for the suggestion @ivory spruce as I understand there may be a delay due to Advent underway.

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 720)

[low void]

hi

[ember osprey]

Welcome 🙂

[jolly condor]

Hi got 2024-12-03 12:14:04 Authenticate/Decrypt packet error: packet HMAC authentication failed this error while trying to run sudo openvpn
any fixes?

[weary spindle]

Screenshot?

[jolly condor]

did Ctrl+C after the error

[stone quartz]

i need help the website isnt' loading to let me subscribe so I can continue my learning #site-support

[weary spindle]

Do you have an adblocked?

[stone quartz]

No i dont believe soi let me check

[spiral prism]

Same here

[weary spindle]

Which country?

[spiral prism]

Because of Advent of Cyber 2024 make VPN issue?

[weary spindle]

Which country are you in?

[spiral prism]

I using Australia and India.

[low void]

هلا

[weary spindle]

We'd appreciate if you spoke in English only.

[stone quartz]

still not working

[weary spindle]

Cleared cache/cookies?

[stone quartz]

wasn't working on my mbile phone either

did not fix the issue

[lucid isle]

I’ve just gotta say that tryhackme’s email support isn’t the best, I’ve tried letting them know that it’s impossible for me to upgrade to an annual subscription and showed them screenshots proving this, yet they’re still telling me to upgrade on my end and I can still take advantage of the Black Friday deal

Idk how many ways I can say “it’s not possible for me to upgrade, there’s no option to do so on my account”

Also for whatever reason my initial email to them created a duplicate ticket? So now I can’t view the “initial ticket” straight through the THM site. Very odd

[bright badger]

In Wireshark: The basics; in Task 4 it asks me to to "export packet bytes" by right-clicking a jpeg section after i looked at packet 12. But i dont get the correct options. I have no option that says export anything.
This only happens if I use the attackbox in the task. If i use wireshark on my PC it shows up like it should. Did i mess something up or why is this?
If anyone can help i would appreciate it. 🙂

[warped edge]

do I have to choose machine or network to connect via openvpn?

[plush bay]

machine for everything that is not a network room like wreath or holo

[warped edge]

oh ok, so for AoC machine it is

[maiden relic]

where is the dedicated advent of cyber channel here in discord?

i found it #1312113121040535656

[lucid isle]

https://discord.com/channels/521382216299839518/1305926862114914325

[plush bay]

yeah machines for aoc

[glass dune]

just an FYI, EU-Regular-4 vpn server is not allowing you to download the openvpn config file (just spins and then returns a 'can't download error'). EU-Regular-1 is working fine

[urban tangle]

i thought i was losing my mind....the access page says 'not connected' but i am connected

[upbeat quarry]

the access page is broken, i. e. not reliable
if you can ping 10.10.10.10, you are connected

[median plover]

can i buy an annual sub (with black fiday discount) with my normal monthly payment valid until 13.12?

[warped edge]

I had the exact opposite, site said I was connected while I wasn't

[weary spindle]

You can't use the discount for monthly payments, only annual.

[median plover]

yes, but i cant buy annual with promo code till my monthly is in use, or can I?

there is only 2 days left of promo code, can I buy it on the same account having my sub till 13.12?

[lucid isle]

Can I please get help on how to switch my account to the annual subscription? I would love to take advantage of the 35% off, but my account doesn't give me any option to switch my subscription type in my account settings

[median plover]

same thing here

[weary spindle]

During the black friday sale, there was an option to do it, I don't know how to do it for the AoC2024 event

[coarse rivet]

broken image link on https://tryhackme.com/r/room/adventuretime

[last latch]

There is only 'edit payment method' but no option to Remove payment method

[ashen gust]

Hi, I need your help with an issue. I can’t access my account because my student email has been deactivated after graduation. How can I regain access to my account?

[weary spindle]

You can log in with your username.

[weary spindle]

You may need to reachout to support.

[ashen gust]

I know my username, but I forgot my password. When I tried to reset it, I realized that my email address is no longer active. I had purchased a subscription before and I have the receipt. Would it help me regain access to my account?

[weary spindle]

You'll need to contact support.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 3, 2024, 8:48 PM

[weary spindle]

#room-bugs

[ashen gust]

Thank you, I will contact you

[scenic torrent]

Gave +1 Rep to @west chasm (current: #81 - 91)

[upbeat quarry]

I have used THM AttackBox, where I could right-click in the JPEG section of packet 39765 (that is the packet referred to in the comments of packet 12) and then select Export Packet Bytes (check the first 2 screenshots)
that is the same behaviour on my local Kali VM (check third screenshot)
so, somehow, I did not cross the same issue as you did

[vernal charm]

Excuse me and I don't want to be annoying, but will this take longer than a day? @weary spindle

[weary spindle]

Yes.

[eager cloud]

Are anyone else having issues with extremely slow connectivity from the attack box to external services?
Seems to use an awful long time connecting to different sites like for example "stackpath.bootstrapcdn.com" in the image

I had the same issues yesterday with the attack box on the task for first day of advent, tried to restart attack box not realizing that i, as a free pleb, only get 1 a day

That was when accessing github

Also not sure if this should be in site-support or room-help

[vernal charm]

[weary spindle]

#site-support message

[analog cipher]

Same here. External content access is blocked which makes the page sooooo slow 😦

[upbeat quarry]

can you access the internet from THM AttackBox?
if you are not a subscriber, THM AttackBox doe not have internet access

[eager cloud]

Ahhh, maybe that is it, currently looking like this ahaha

Thanks @upbeat quarry

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 420)

[worthy vector]

silly question to ask, but i cant use ctrl v into my attack box anymore. would anyone know the cause or reason

[upbeat quarry]

you use the clipboard box, as per the GIF

[visual berry]

Agree. Same problem.

[granite tree]

Anyone having issues with downloading VPN configuration file? It seems to time out with 504 for me.

[upbeat quarry]

I would suggest you switch to another VPN server if one fails
check this recent message that may help: #site-support message

[granite tree]

Thanks @upbeat quarry, I got it working on another one. 👍

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 424)

[novel coral]

Hello

[nimble dagger]

Who do I talk to about login issues. I have checked my login info multiple times and I keep getting a message saying my info is wrong. I've tried with my username and email address and I even changed my password.

[ember osprey]

Welcome 😄

[ember osprey]

Try to get in touch with support || [e-mail] || 🙂

[naive dust]

Hi I am trying to connect to the Tryhackme network using openvpn3 on a VM with Parrot Security OS 6.2 and the log is showing as continously connecting

It just hangs there. I downloaded ovpn config files for both West & East and same behavior

the command I used was openvpn3 session-start --config ./Downloads/[myconfigfile].ovpn

And this is after I imported the configuration file, I tried it both as a persistent and non persistent import.

I also tried openvpn2 but the same thing. I'll try openvpn but I think I have to remove openvpn3 as its not letting me download

okay so now I can connect with sudo openvpn /path/to/my.ovpn

I swear it didn't work before lol

okay so I did curl 10.10.10.10/whoami and I get a internal network ip address the same one shown under my tun0 adapter but on the Access page of my tryhackme session it's not showing the Internal Virtual IP Address no matter how many times I hit Refresh

even though I'm pretty sure Im connected.

[ember osprey]

You can ignore that , seems to be a temporary bug with this 😄

[naive dust]

okay good. Challenges are showing so yay

thanks

[ember osprey]

Enjoy challenges 😄

[forest crest]

i've been trying to buy the premium version but somehow my card keeps declining

can anyone please tgell me an alternative

[ember osprey]

I think that you'll need to get in touch with support for payment issues 🙂 || [e-mail] || 😄

[forest crest]

okay i'll do that thank you

[jolly condor]

Using India

Hi got 2024-12-03 12:14:04 Authenticate/Decrypt packet error: packet HMAC authentication failed this error while trying to run sudo openvpn
any fixes?

[ivory spruce]

Did you add your OpenVPN config file in the command?

[jolly condor]

yeah

[jolly condor]

here's the ss

[ivory spruce]

It should get fixed once you reconnect.

Have you tried? Or did the issue persist?

[vocal dune]

Hi all, I started my first day today, loaded up the machine and started the attackbox and spent a few minutes getting to know my way around. Then I had to go get dinner on so I shut down both machines but now when I try to start the attack box it says I am out of time.
Is it possible to stop and resume the free 1 hour session (and I did something wrong like not confirming my choice or something), or is this just not possible?
Thanks.

[ember osprey]

If you aren't a subscriber you can only run AttackBox for an hour a day . Alternatively you can use your own machine via VPN 😄

[vocal dune]

Thanks, I'm not a subscriber (which is why I terminated the VM - so it wouldn't count down) but that appears to have not worked.

Is it an hour from when you start it, regardless if you shut it down or not? If so, Ill check out the VM option. Cheers.

Got the VPN connected, seems to work fine 🙂

[ember osprey]

Glad to hear that , enjoy hacking 😄

[vocal dune]

Cheers. My AV didn't like somg.mp3...not surprising really! I'll fire up a VM just to keep everything separate.

[small terrace]

Face same problem from yesterday suddenly
My terminal is showing that I am connected but on tryhackme website it's show not connected

[ember osprey]

It's a temporary bug on website 😄 . If you can access 10.10.10.10 you're good 😄

[small terrace]

Facing same problem bro

[small terrace]

Thanks let me check

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #9 - 813)

[small terrace]

Thanks @ember osprey YOU solved my problem

[ember osprey]

Glad to hear that buddy , enjoy hacking 🙂

[arctic cargo]

my machine randomly crashes on me and then it says i cant get another because im not a subscriber. anyway to fix this w/o subbing?

[upbeat quarry]

you can connect using THM VPN, which is free
for that, you need to use a local attacking machine
the typical setup involves installing a hypervisor like VirtualBox or VMWare on your local host and then a Virtual Machine with Kali Linux to start your VPN connection from

[weary spindle]

No, you need to be a sub to spawn more than one Attackbox

[muted light]

Hey! I'm in the Wireshark: Packet Operations room and I'm using the provided Linux VM. It's very slow and affects my productivity becuse I have a small screen and a normal one. I wonder if I can have the exercise.pcapng file so I can use it on my local PC?

[ember osprey]

Try to use machine in full screen mode 🙂

[muted light]

that helped a lot. Thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #9 - 816)

[foggy grotto]

HI guys, Since Sunday, Free VM is so long to launch that i have no time left to make the CTF :o(. is it due to under dimensionned Servers. I must admit i'm not familiar with VPN to connect to THM VMs. any solution?

[ember osprey]

Check out this article 😄

https://tryhackme.com/r/room/openvpn

[raw sky]

please, i am trying to do https://tryhackme.com/r/room/expose room. I launched target machine, connected with vpn from my linux, but the connection doesnt work - i cant even ping the IP of target machine from my linux. Is there an internal problem, or something wrong is on my side? I tried to reconnect vpn, tried multiple target machines, but didnt help. It worked yesterday

Also, my target machines have IP 10.103.x.x instead of 10.10.x.x .. its just due to many launched target machines because of advent?

[lusty dune]

Hi all, anyone having issues with connecting to practical VMs via the THM VPN? When pinging a machine I seem to get 100% packet loss? 😄

Using a Kali VM. I can access 10.10.10.10 and my VPN seems to be working fine? Thanks!

[upbeat quarry]

done a quick test to confirm the issue:

• I can nmap my instance of Expose using THM AttackBox
• I cannot do it using THM VPN
  check screenshot

[raw sky]

I turned on and off few more target machines and when i got one with 10.10.x.x IP, it worked from THM VPN and also from attackbox. But ofc, it can be just coincidence. Anyway, machines with 10.100.x.x IP didnt work for me from VPN.

[upbeat quarry]

which target VM are you trying to connect to?
please note that some target VM do not respond to ping (typically, Windows machines)
check if you can do nmap -Pn <IP>

[main lagoon]

hey guys tryhackme manager i got a 500 error in your site. please fix it. it is inside a room i can tell you. when i am trying to download a pcap file i am getting this error and if i can get reward for finding this bug then i am waiting for you reply. @west chasm @marble breach @crystal marlin @deep trellis @sharp urchin

[upbeat quarry]

just done it with a second instance of Expose, and it worked (target IP was 10.10.128.21 this time)
I did not regenerate my VPN config file
so maybe some intermittent problem?

[upbeat quarry]

are you going to reward me if I am answering to your message? 🤣

[main lagoon]

thats a million dollar bug you know

[lusty dune]

Trying to connect to the Advent of Cyber Day 3 machine.

Nmap scan results show that the host is up, but all the scanned ports are in ignored states?

[upbeat quarry]

wait a little bit, that machine with Elastic can be slow to become available

[lusty dune]

Ah okay thank you 😄

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 425)

[naive dust]

Hey guys does anyone know what happened to Active Directory module of the Red Teaming path
the computers arent there anymore
like the option to turn the network on is not there

[raw sky]

I think its problem with target machines with IP 10.10x.x.x (second number 100+). If the second number is 10, it works. But ofc, thats just my thinking, reality can be totally different

[upbeat quarry]

check the screenshot
maybe I was lucky, but I got the target VM for Day3 up and running fairly quickly I have been using THM VPN
[I am a subscriber, so I may have faster machines than non-subs]
If it takes too long for you, I suggest you restart the target VM

[west pier]

Hi Team, I'm having an issue with completing the room OWASP Top 10 - 2021, can't download the task files from Task #9. When clicking on the button I get the 500 Bugs page. It blocks me from completing the room at the moment.

[upbeat quarry]

Task 21, right?
same issue for me
I suggest you report this under #room-bugs

[lusty dune]

Ah restarting the machine seems to have worked

Thanks for your help!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 426)

[naive dust]

@upbeat quarry do you know what happened to Active Directory module of the Red Teaming path
the computers arent there anymore
like the option to turn the network on is not there

[ember osprey]

Works fine for me 🙂

[naive dust]

but how come it is not showing for me

I dont get it

[ember osprey]

Which room 🙂 ?

Could you provide a link 😄 ?

[naive dust]

Breaching Active Directory

[ember osprey]

You need a 7 day streak for it 😉

[upbeat quarry]

I have been checking right now, and I could not believe it but you are right: I have checked Breaching AD, and the netwok topology is gone
I have left and joined back, but no help
this is something to report to #room-bugs

[naive dust]

I am a subscriber and also I have an 11 day streak

[west pier]

That's right, thanks Shy1

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 427)

[ember osprey]

Yup you're right , same for me 😄

[naive dust]

okay thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 428)

[naive dust]

will

do

[ember osprey]

Seems like a bug 🙂

[naive dust]

yeap I reported it

[upbeat quarry]

thank you for doing this

[scenic torrent]

Gave +1 Rep to @tribal furnace (current: #730 - 6)

[glad brook]

Hello! I recently completed the DevSecOps learning path. I would like to download the certificate but there is no download button, apparently.
I had a premium subscription when I completed the path, but now it's expired.

[upbeat quarry]

I have had an issue with downloading a certificate in the past, and I solved it by switching to another browser (from Firefox to Chrome)
not sure if no longer being a sub makes things more difficult

[vapid echo]

https://i.imgur.com/YEyX56l.png

Why does it say I'm connected but I can't finish the simple "Type the ip into firefox" beginner thing.

I was trying to do a harder one but my Kali VM was not working so I decided to try a super simple one to see what's wrong.

The site says I'm not connected, but the 10.10.10.10 ip says I am.

I can't even ping the Target Machine, yet I can ping the 10.10.10.10

So clearly I'm connected in some fashion.

[ember osprey]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[crystal marlin]

Hey 🙂 I don't know if it would be eligible for a reward, but if you could elaborate further, that would be great 🙂

[ember osprey]

You can verify to upload images 🙂

[ember osprey]

Yes you're perfectly connected 😄

[vapid echo]

but following the guide it's not connecting to the Target IP?

[ember osprey]

Which room ? What are you trying to do 🙂 ?

[vapid echo]

https://tryhackme.com/r/room/tutorial

This one. If I am connected I should simply be able to type the IP into Firefox on my VM and it would work. But it's not.

[main lagoon]

so i was going to do a ctf room and i joined the room. there i needed to download a task file which was a pcap file so i tried to download it but it is saying the server error 500 and i don't know why i got this error but it seems that it is a server side error then it could be something weird cause of 500 return code i got. i thought i can be dangerous for your site so i mentioned you guys...
let me know if you wanna know the room name where i got this error.

[ember osprey]

Can you access || http://10.10.10.10 || 😄

?

[vapid echo]

Yes. It says I'm connected

[ember osprey]

There should be flag there 🙂

[vapid echo]

||flag{connection_verified}||

Tjat

[ember osprey]

Yes 😄

[vapid echo]

That's what i see

[ember osprey]

That's the flag for tutorial room 😄

[vapid echo]

But why is it asking me to paste the test machines IP? Not the 10.10.10.10 IP?

[ember osprey]

What happens when you try to connect to that IP 🙂 ?

[vapid echo]

Says it can't connect

[ember osprey]

Could you provide a screenshot please 🙂 ?

[crystal marlin]

Yes please share the room URL with me

If it's a private room, feel free to DM

[ember osprey]

Use http:// not https:// 😉

[main lagoon]

will i get any reward like am happy with one month subscription. i am trying to learn but i dont have much money to spend on thm...
it will be very good i you can give me gift as subscription of thm please. i am giving you that room name sir in you dm.

[half kelp]

hey im kinda 100% completed this basic course but there is no download button for certificate

and i checked every room and its all doneski

Congratulations! You have completed this path. Click on the download button to get your certificate. You can share it to prove your education. ""

[vapid echo]

Still unable to connect

[ember osprey]

screenshot 🙂

[ember osprey]

Which room ?

[vapid echo]

The Tutorial one

[ember osprey]

Are you sure that the 2nd octet is 101 and not 10 🙂 ? Could you send a ss of machine info 🙂 ?

[wraith aurora]

is your openvpn connected?

[vapid echo]

All the tutorial says is copy this. and paste it into firefox on your VM.

[ember osprey]

Copy || http://10.101.229.69/ || to your broswer bar

[wraith aurora]

is ip is 10.6. class

maybe he's on a different server than the target

[blazing geyser]

Hi everyone, i was trying to connect to tryhackme with openvpn, but the opnevpn file is empty, i attempted to download it multiple times. What could be the reason?

[ember osprey]

Try to re-generate the file 🙂

[wraith aurora]

i'm getting tls handshake timeout when i try to connect 😭

[blazing geyser]

it worked, i attempted to regenerated multiple times, thanks ahahah

[glad brook]

Thanks @upbeat quarry! Unfortunately no button in Chrome too...
I am thinking it's beacuse I am no longer a premium user and that was a premium path

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 429)

[vapid echo]

once again no connection

[ember osprey]

Does it work now 😉 ?

[ember osprey]

Maybe your router/ISP/firewall is restricting http:// connection . Could you try to use AttackBox 🙂 ?

[naive dust]

I can't seem to find the network network diagram on any room?

[vapid echo]

I've used the attackbox too much today sadly.

[ember osprey]

There seems to be a bug with this 😦

A lot of people reported same

[naive dust]

Ah man

[upbeat quarry]

I am not sure
check this message which has just arrived, which looks like an issue similar to yours: #site-support message
I suggest you contact support by email: [e-mail]
take into account that support is pretty busy, as per this pinned message: #site-support message

[vapid echo]

I restarted the thing... it works now. I HAVE NO IDEA WHY THAT SPECIFIC INSTANCE DIDNT WORK.

@wraith aurora you might have been right about wrong server somehow. BUT WHYYYYY. lol

[ember osprey]

Glad to hear that 😄

[wraith aurora]

yeppi

[livid verge]

This keeps happening to me

[wraith aurora]

my attackbox also crashed randomly VNC closed

[ember osprey]

Congestion on THM side probably 😦

[wraith aurora]

2024-12-04 08:07:35 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,comp-lzo no,route-gateway 10.9.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.9.4.87 255.255.0.0,peer-id 487'
2024-12-04 08:07:35 OPTIONS IMPORT: --ifconfig/up options modified
2024-12-04 08:07:35 OPTIONS IMPORT: route options modified
2024-12-04 08:07:35 OPTIONS IMPORT: route-related options modified
2024-12-04 08:07:35 Using peer cipher 'AES-256-CBC'
2024-12-04 08:07:35 net_route_v4_best_gw query: dst 0.0.0.0
2024-12-04 08:07:35 net_route_v4_best_gw result: via 192.168.79.2 dev eth0
2024-12-04 08:07:35 ROUTE_GATEWAY 192.168.79.2/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:b6:e1:9f
2024-12-04 08:07:35 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2024-12-04 08:07:35 Exiting due to fatal error

bruh openvpn is giving me headaches

[vapid echo]

What could have caused this? Any idea?

[upbeat quarry]

what is your new IP? is that a different format now, like 10.10.X.X, instead of 10.101.X.X?

[vapid echo]

The new IP of the target pc was a 10.10 now yes

[wraith aurora]

it happens sometimes the app is confused and needs reassurance :<

just like us

he wants to know he is still loved

[upbeat quarry]

thanks
I think you had an issue because your initial IP did not follow the 10.10.X.X format
another user doing the Expose room reported the same situation: #site-support message

[scenic torrent]

Gave +1 Rep to @vapid echo (current: #2424 - 1)

[vapid echo]

So it is just a bug? not user error?

[wraith aurora]

most likely

[upbeat quarry]

not user-related for me, bug on THM I suspect

[wraith aurora]

if you reconfigure the vpn thing the ip class gets changed so that s a thing

[upbeat quarry]

also, that "bug" is not a bug if you use THM AttackBox, only if you use THM VPN (like you did I believe)
at least, that is what I experienced when dealing with the Expose room

[upbeat quarry]

are you doing this as root or with sudo?

[wraith aurora]

my bad i had 2 vpns open sorry

didnt observe

[vapid echo]

That makes sense, but realistically I want to practice with my VM and not their provided attack box.

[wraith aurora]

But right now im on 10.9 with my cliend and CAN ping 10.10 machines

i cant upload ss's

[ember osprey]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[wraith aurora]

oh

that s a thing

[upbeat quarry]

understood
if that situation reoccurs, I guess the troubleshooting step is to restart the target VM till it gives you a 10.10.x.x IP

[ember osprey]

You will need to verify for images 😄

[wraith aurora]

yeppi

interesting situation

but it happens, 🤷‍♂️

[upbeat quarry]

you have every reason to be satisfied there, or?

[wraith aurora]

i was just sayin that he couldnt access 10.101 being on 10.10

but i can access 10.10 being on 10.9

[glad brook]

Found a workaround, until THM fixes the site:
cc @snake_neo
https://tryhackme.com/api/v2/certificates?name=<name of path lowercase no spaces>&type=pathway&createIfNotExists=false

e.g.:

https://tryhackme.com/api/v2/certificates?name=presecurity&type=pathway&createIfNotExists=false

[upbeat quarry]

thank you for the feedback, and congrats on being inventive 🙃

[scenic torrent]

Gave +1 Rep to @glad brook (current: #2425 - 1)

[wraith aurora]

any ideas why the target is crashing sometimes?

[upbeat quarry]

have you checked the work-around that dguerri just found for your problem: #site-support message

[half kelp]

Its okay its not too important

But thankz

[upbeat quarry]

I think that box should respond to ping
you can try nmap -Pn <IP> or restart the target VM
BTW, for room-related help, please use this channel: #room-help instead

[zealous tiger]

Hey there. Which email address can I use to reach support on TryHack me ?

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 4, 2024, 1:35 PM

[upbeat quarry]

use ^
but also take this into account: #site-support message

[zealous tiger]

Thank you and this is well noted.

[jolly condor]

Is anyone able to connect to https://LAB_WEB_URL.p.thmlabs.com?

Have been trying since yesterday and the website just refuses to open even after constant reloading

(This is the Day 2 task 8)

[upbeat quarry]

I would expect LAB_WEB_URL gets converted into an IP address 1 minute after you press the Start Machine button?

[jolly condor]

that's fine but it just keeps loading

[jolly condor]

I don't think you need the Attack Machine for this

[upbeat quarry]

like I said, press the Start Machine button:

• before pressing the button: first screenshot: https://LAB_WEB_URL.p.thmlabs.com
• 1 minute after pressing the button: second screenshot: https://10-10-214-60.p.thmlabs.com

[upbeat quarry]

you do need an attacking machine:

• either THM AttackBox
• or your own attacking machine (like Kali) through THM VPN

[jolly condor]

got the url but still not getting past the 502 Bad Gateway

Omg it worked

@upbeat quarry thanks a lot🫶

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 430)

[shut coyote]

hello everyone , i just finished the Web Application Pentesting learning path and now when im trying to get the certification from the website i dont see the "download" button... maybe somone can help me ?

[upbeat quarry]

there is currently an issue with that functionality
but check this message from daguerri who found a work-around you can use for the timebeing: #site-support message

[shut coyote]

thank you !

[stark marsh]

Good morning all. In the Day 3 event, my Elastic was not showing the same results as the instructions when I applied the filters. I was getting about 2-4 less results and could not find the message with the shell script. Any thoughts?

[naive dust]

gtg yall

ill leave yall with this cutie

https://tenor.com/view/bunny-in-the-snow-peacful-bunny-gif-cute-bunny-bunny-gif-4884303926153606966

sorry

wrong chat

XD

[umbral heart]

Is there any place where I can talk to a human instead of the messaging bot regarding support?

[livid verge]

write an email

[onyx terrace]

Hey there. I just finished the 'Jr Penetration Tester' learning path and I want to download the certificate, but I cannot find the download button. Is there someone that can help with this issue?

Here is what my screen looks like

[weary spindle]

#room-bugs

[weary spindle]

The live chat E-mails the team, there is also the support email

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 4, 2024, 4:20 PM

[umbral heart]

Thank you! 🙏

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3060)

[weary spindle]

Which path?

[real kettle]

Hello,
I have problem using openvpn.

[weary spindle]

What is your problem?

[real kettle]

I can’t connect and the message that I get is compression for receiving enabled …

[weary spindle]

Can you verify and share a screenshot?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 4, 2024, 6:35 PM

[bronze escarp]

Hello. I have a issue with echo when trying it to use in AOC room. It responds always the same even after i restart it: For the next tasks, you'll need to tackle without me! You got this! To keep interacting with me, please check any room in the Jr Penetration Tester Path.

[weary spindle]

Are you trying to echo in to a /etc/hosts ?

[bronze escarp]

No i mean AI echo 😄

[real kettle]

I just verify

[weary spindle]

Which server is this?

[weary spindle]

And which country are you in?

[real kettle]

I am in france

[weary spindle]

Which server did you choose?

[real kettle]

the server is EU-regular-1

I tried EU-regular-4 and it works

thanks

[stark marsh]

anyone?

nvm, someone else had the same issue in https://discord.com/channels/521382216299839518/1305926862114914325 🥲

[bronze escarp]

Issue with echo. Any ideas?

[whole sleet]

Is anyone experiencing a bug when it comes to downloading certificates? I'm missing the download button, can't download my certificates.
Tried relogging and cookies are disabled. (Yes, I have 100% progress)

[radiant slate]

anyone around here can help me with business accesss? cant get a answer from the website

[weary spindle]

Do you have a representative from the business side?

[radiant slate]

i dont , i want to purchase 6 licenses

[weary spindle]

You'll need to E-mail the busienss side then

[radiant slate]

Will do!

i wanted to complete this before the end of the day . but will try email and see if i get a answer fast

thanks 😄

[weary spindle]

You won't get this sort of help over Discord 😄

[radiant slate]

i took a chance lol

maybe a sale rep was roaming around in the dark

[weary spindle]

They would still point you to their E-mail inbox.

[whole sleet]

? Any solution to the certificate bug?

[river carbon]

how can i get a token to verify myself...?

[weary spindle]

I already answered you 😅

[onyx terrace]

I'm also having that bug

[marble breach]

Done!

[weary spindle]

Ta'

Ctrl and F5.

[limber narwhal]

Hello, I have a question - why do I have only one day streak, but I've been active for the last five days? In the Yearly Activity tab on my profile, I have green squares for each of the past five days and I am pretty sure I hit streak day yesterday as well.

[hardy vigil]

Hey everyone,

I'm trying to connect to the server using OpenVPN, but the connection isn't showing up on the web. However, the connection is visible in Kali. After that, when I downloaded a new file from the web, it turned out to be a blank file. I've tried this 2 or 3 times. I need help fixing this issue.

Thanks!

[weary spindle]

Which file are you downloading, is you rbrowser potentially blocking it?

[craggy lance]

Im having issues with openvpn as well. It wont connect - was working fine yesterday

[hardy vigil]

Vpn file

[hardy vigil]

No

Same issue with me

[weary spindle]

Which one, there is like 8

[hardy vigil]

EU-regular 1

[hollow fossil]

Got the same issue as sunny

EU-Regular 1 TLS handshake fails with sudo openvpn

just in case redownloaded the vpn file, but no result

[dawn citrus]

when are the monthly stats being reset? it's already 12/4 and they are still staying from last month?

[naive dust]

Hi Guys, Looking for some assistance. I'm fairly new to the game and I'm currently trying to connect my VM Kali to TryHackMe. Openvpn is running but it keeps stopping at Protocol options: explicit-exit-notify 3 and not showing that it is connected. I've done some research and the config file has the data-cipher in it and still not working. Any suggestions on what to do? And the conf file is AU-Regular-1

Openvpn version is 2.6.12

[lofty blade]

Hello everyone, in this room https://tryhackme.com/r/room/introtoshells, when I deploy the windows machine, I cant use the linux machine, and vice versa. Is anyone able to use both at the same time?

[fallen spade]

is day 3 misbehaving for anyone? I keep getting search errors

[teal star]

is anyone's openvpn connection working? I can't even connect

[naive dust]

Negatory for me, Not sure if it's my VM or if It's TryHackMe,

[teal star]

I think it is THM

[gilded smelt]

My discord token is in use by my old account, can i revoke it and use it on this account somehow?

[deep trellis]

Hi @onyx terrace, @whole sleet,
The bug where the cert download button wasn't showing has been fixed - you should be able to download your certs now

[half lava]

I am able to connect to the vpn and ping 10.10.10.10/whoami, but it's not letting me access target machines

[umbral osprey]

Anyone find if they use OpenVPN from a Kali VM there's significant packet loss, but running it on my host machines (either Ubuntu or Windows) and route only a specific virtual network in VMware through OpenVPN on the host it is fine

Using Ubuntu and Arch in a VM I'm not seeing the same kind of packet loss

Oh... looking at the config, the transport is udp

Anyone know if THM supports tcp for transport?

[teal star]

I can't even connect still

[fleet lintel]

This is an advent of cyber question. I'm having trouble with getting the frosty pines site to load at all. It infinity loads and won't let me use the login. Even though I have pinged it using the command the instructions said to. Anyone else have the same issue, or am i doing something wrong?

[ember osprey]

IF you are using AttackBox and you aren't premium user it doesn't have Internet access so it can have problem loading some material required for the site 😦

[fleet lintel]

gotcha, thanks. I'll just try again when Im allowed more VM time

[untold bramble]

I have internet access but continuing with the link for day one cyber question /rawgithub…… link is not working

[naive dust]

im a free user and that also happened to me, i think you just need to have premium

[ember osprey]

You can use your own machine alternatively , you don't need to have premium 😄

[naive dust]

yes, but in context of using the attackbox you would need premium

[ember osprey]

Yup , you're right 🙂

[acoustic mirage]

Is it possible to change my account region?

[ember osprey]

Check this article 🙂

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

[acoustic mirage]

It worked! Appreciate it man 🙏🏻❤️

[ember osprey]

Glad to hear that buddy 🙂 . Happy hacking 🙂

[whole sleet]

Thanks for fixing the cert bug ❤️

[shadow star]

что вы не помогает то

комьюнити

[half kelp]

hey guys when i go to https://tryhackme.com/r/room/tutorial the whole webpage goes blank for me

i tried different browsers

problem persists

[ember osprey]

Works fine for me but a lot of users reported the same issue 😦 . Try to disable browser extensions if you have any .

[half kelp]

okay will do

thanks kgb

and also big thanks for resolving the certificate issue yday

that did the tricks

nope nvm the only room that doesnt work is the tutorial one

literally only one

[arctic cargo]

Linux fundamentals part 1. Terminal in machine keeps repeating everything I type. I can't reset it due to this and if I close it I lose my machine for the day. How do I fix this.

[ember osprey]

Press Ctrl+C to terminate the command

[weary spindle]

Does the machine have a gui or terminal?

[arctic cargo]

@ember osprey That worked. Now how do I get back out of folder 2 to continue?

[ember osprey]

Could you provide a ss of what's going on ?

[arctic cargo]

It won't let me.

It just says the username then folder 2. I don't know how to exit folder 2 from terminal. I was viewing files.

CD worked.

[ember osprey]

You need to verify first 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[nova stump]

Running into the same issue here :/

[dawn vortex]

did someone kill the vnc vms?

[main bronze]

Can I ask that someone help me with the blank VM screen for Advent Day 4 Challenge please?

Also can't connect to the VM remotely.

[dawn vortex]

@main bronze i had to terminate current vm and start it again

[main bronze]

I have done that last night and today multiple times.

The problem persists.

No access to windows powershell by spinning up the VM.

[boreal nest]

Hey guys, I am new here. I had purchased 3 vouchers and 1 of them is left. but I cant seem to find it. where can I see my voucher codes?

[lofty edge]

Hello, The room Fowsniff CTF doesnt have any pastbin. there is an error and it was deleted

[ember osprey]

https://web.archive.org/web/20210413165313/https://pastebin.com/NrAqVeeX

I managed to find a Wayback link 😄

[ember osprey]

Try to contact support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 5, 2024, 11:49 AM

[boreal nest]

I have just sent a message via support option in site. Thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #9 - 878)

[boreal nest]

Cool bot

[onyx terrace]

I see it now. Thanks

[scenic torrent]

Gave +1 Rep to @deep trellis (current: #141 - 53)

[abstract hinge]

Hello here! I've been trying to to start VM in task 4 to no avail. Turned off all browser extensions, terminated and restarted many times, tried a different browser, all not working. the machine starts up blank and I am unable to enter full screen or do anything with it

[weary spindle]

Did you get an email?

[vernal charm]

2 days since I sent a support ticket.
Just give us a specific time so if there's no response in the next few days I can move on temporarily to another learning source @weary spindle

[weary spindle]

I'm not staff, and delays will be slightly longer due to the event

[vernal charm]

Then how do I get in contact with staff, aside from the support email?

[weary spindle]

What is your query?

[vernal charm]

.

@weary spindle

[weary spindle]

This can only be dealt with via email,.staff won't deal with it over discord.

[vernal charm]

Let's hope staff quit the holiday soon then

[weary spindle]

They're not holiday soon, they're really busy with support emails.

#site-support message

[vernal charm]

Understandable

[hushed bolt]

Hi where can I contact support for payment

[ember osprey]

Here 😄

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 5, 2024, 1:15 PM

[hushed bolt]

thank you

[boreal nest]

For the purchase I had. Over a year back. But cant find it

[crystal compass]

trying to do OWASP Top 10 - 2021 but have issue with OpenVPN setup

2024-12-04 21:32:24 ******* WARNING *******: '--auth none' was specified. This means no authentication will be performed on received packets, meaning you CANNOT trust that the data received by the remote side have NOT been manipulated. PLEASE DO RECONSIDER THIS SETTING!
2024-12-04 21:32:24 ******* WARNING *******: All encryption and authentication features disabled -- All data will be tunnelled as clear text and will not be protected against man-in-the-middle changes. PLEASE DO RECONSIDER THIS CONFIGURATION!
2024-12-04 21:32:24 RESOLVE: Cannot resolve host address: vpn.example.com:1196 (Name or service not known)
2024-12-04 21:32:24 TUN/TAP device tun3 opened
2024-12-04 21:32:24 RESOLVE: Cannot resolve host address: vpn.example.com:1196 (Name or service not known)
2024-12-04 21:32:24 Could not determine IPv4/IPv6 protocol
2024-12-04 21:32:24 SIGUSR1[soft,Could not determine IPv4/IPv6 protocol] received, process restarting
2024-12-04 21:32:25 ******* WARNING *******: '--cipher none' was specified. This means NO encryption will be performed and tunnelled data WILL be transmitted in clear text over the network! PLEASE DO RECONSIDER THIS SETTING!

[royal rose]

Remove --auth none and --cipher none and try specifying the protocol with proto udp4

[crystal compass]

where are these

[royal rose]

In configuration

If you're running VPN from command line you can remove them and specify secure options

[crystal compass]

i dont specify them in cmd

they dont exist in cofig

[royal rose]

Is your hostname correct? Try pinging it

[crystal compass]

which hostname

i just do sudo openvpn ~/Downloads/stampap1997.ovpn

which host to use?

i am planning to install proton

[cinder veldt]

hello, i have problems with the vm's in the last few days - first on the capstone challenge with the tools like hydra, john, hashcat. Some tools are installed and then after the restart they are not like someone else has access to them in the same time and it's removing some stuff or changing the pass.Example: i try the credentials with hydra and it's not finding them but then i scan it second time and they are showing, it's the same with connecting to machines, i use the right creds for the rdp in capstone and it won't connect. Sometimes the machine freezes and sometimes they are unreachable. The example is showed in the video.

[lofty edge]

Waooouw thank you 👌🏿👌🏿👌🏿👌🏿

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #9 - 883)

[cinder veldt]

and one more example with capsone's rdp, the credentials are the same like the one used for vpn, and if you watch the walktrough you will see that the others don't have that kind of problems.

[upbeat quarry]

my understanding is that the machines in THM networks, like the Red Team Capstone Challenge, are shared among several users, so you should to consider the possibility that somebody else is messing with the same targets

[cinder veldt]

Yes, but for how much i know, nobody should be on the same network subnet like the other member and if they do, it's prohibited to change or to mess with the configuration of vm's. It's not capture the flag so that is why im asking for help from you guys here so someone can do something about it so me and the others can learn and complete the tasks without this kind of problems

We are not subscribers so the other can ddos our machines or make it impossible to finish the tasks, thm has rules.

[crystal compass]

i got this

2024-12-05 16:35:52 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-12-05 16:35:52 library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
2024-12-05 16:35:52 DCO version: N/A
2024-12-05 16:35:52 TCP/UDP: Preserving recently used remote address: [AF_INET]103.125.235.18:80
2024-12-05 16:35:52 UDPv4 link local: (not bound)
2024-12-05 16:35:52 UDPv4 link remote: [AF_INET]103.125.235.18:80
2024-12-05 16:35:53 [node-jp-11.protonvpn.net] Peer Connection Initiated with [AF_INET]103.125.235.18:80
2024-12-05 16:35:54 AUTH: Received control message: AUTH_FAILED
2024-12-05 16:35:54 SIGTERM[soft,auth-failure] received, process exiting

while i have entered correct credentials

in protonvpn_creds.txt

[cinder veldt]

is that a capsone challenge?

aha i see, protonvpn, then its not

[crystal compass]

whats capsone

yes

[cinder veldt]

why do you need that?

[crystal compass]

to connect to OpenVPN

[cinder veldt]

for the thm?

[crystal compass]

this server is thm

[cinder veldt]

you don't need the protonvpn, just install the openvpn and then download the configuration file from you account on thm

[crystal compass]

yes then it needs protonvpn

[cinder veldt]

then use openvpn ______(downloadedfile).ovpn

[crystal compass]

couldnt do with just config file

yes

it requires some creds

i have used them

and it shows wrong creds

[cinder veldt]

yes it requires them but if you download it from you thm account you dont need to do anything, just use openvpn filename.ovpn and it will work.

[weary spindle]

What is this for?

[crystal compass]

it printed some errors

[crystal compass]

owasp

[weary spindle]

Why do you need ProtonVPN?

[crystal compass]

because thats what chatgpt showed me

there were errors from openvpn

[cinder veldt]

Hello Scrubz, could you please check the videos and my description of problems with thm for the last few days. Just scroll up, it's there.

[weary spindle]

Don't rely on ChatGPT for fixing those errors, it's giving you the wrong information.

[weary spindle]

Di dyou try reseting the network?

[cinder veldt]

yes, 3 or 4 times.

[weary spindle]

Are you using the correct password?

[cinder veldt]

yes, and because nothing was working i have checked the walktrough on youtube and they are the same like mine.

[weary spindle]

Did you try a different set of creds?

[cinder veldt]

i have tried creds from laura and mohammed

[weary spindle]

Did you fix the VPN?

[crystal compass]

oh i need IKEv2

[weary spindle]

For what? 😅

[crystal compass]

not real username and passw

2024-12-05 16:49:26 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-12-05 16:49:26 library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
2024-12-05 16:49:26 DCO version: N/A
Enter Auth Username: 8ZNt34JFrQiCoU9j
Enter Auth Password: ••••••••••••••••••••••••••••••••
2024-12-05 16:49:33 TCP/UDP: Preserving recently used remote address: [AF_INET]138.199.22.102:1194
2024-12-05 16:49:33 UDPv4 link local: (not bound)
2024-12-05 16:49:33 UDPv4 link remote: [AF_INET]138.199.22.102:1194
2024-12-05 16:49:34 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-12-05 16:49:34 [node-jp-16.protonvpn.net] Peer Connection Initiated with [AF_INET]138.199.22.102:1194
2024-12-05 16:49:36 NOTE: setsockopt TCP_NODELAY=1 failed
2024-12-05 16:49:36 TUN/TAP device tun5 opened
2024-12-05 16:49:36 net_iface_mtu_set: mtu 1500 for tun5
2024-12-05 16:49:36 net_iface_up: set tun5 up
2024-12-05 16:49:36 net_addr_v4_add: 10.96.0.57/16 dev tun5
2024-12-05 16:49:36 Initialization Sequence Completed

now its ok or not?

[weary spindle]

It's ok.

[cinder veldt]

for the vpn access they are ok, but not for rdp and smtp (i've used evolution etc)

[weary spindle]

Have you made any changes to the VPN, at all?

[crystal compass]

what about now? curl 10.10.10.10/whoami?

[broken vector]

hi

[weary spindle]

Did you get a response?

[crystal compass]

no

[weary spindle]

Oh wait,

I see the problem.

[cinder veldt]

what do you mean by changes? to the others the vpn is not required for the rdp, i have also tried to scan the vpn network with nmap to find the other machines but nothing, they are behind the firewall. And the smtp server it's on the same network like the first stage task machines.

[weary spindle]

ip a | grep "tun"

[weary spindle]

I'd have a look at the VPN script, see if you can change something.

[crystal compass]

11: tun0: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 500
13: tun1: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 500
17: tun2: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 500
82: tun3: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 500
89: tun4: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 500
96: tun6: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 500
100: tun5: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
    inet 10.96.0.57/16 scope global tun5

[weary spindle]

😅 wow.

[weary spindle]

sudo killall openvpn -9

[crystal compass]

ok did it

[weary spindle]

ip a | grep "tun"

[brave owl]

is answering the questions from watching videos in the advent count as cheating

[weary spindle]

Are you learning something?

[cinder veldt]

yes you should get banned right now

hahahah

[crystal compass]

nothing

then do again

and got

[weary spindle]

Ok, now connect to the VPN.

[brave owl]

yes i was doing day 3 and the 1 hour attack box expired and i was about to answer the questions

[crystal compass]

101: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500 inet 10.96.0.44/16 scope global tun0

[weary spindle]

There we go.

You're connected.

Just minimize this terminal.

Your issue was you had too many OpenVPN tunnels open.

[crystal compass]

yes but i must connected to tryhackme

[cinder veldt]

well, you will feel better if you find the answer by yourself. 😄 but that is why you have the walktrough when you are stuck with something so you can find out how its done, it's a learning platform, dont worry!

[weary spindle]

You are connected now.

[crystal compass]

it shows not connected in tryhackme

[weary spindle]

The access page is broken. 🙂

Ignore it.

You just used a command that confirmed you've connected successfully.

[brave owl]

I know how to do it but the machine expired unfortunately

[crystal compass]

wdym?

what about curl 10.10.10.10/whoami

[weary spindle]

Did you have that command and get a response?

[crystal compass]

no

[weary spindle]

Did you close the vpn?

[crystal compass]

no

is open in cmd

[weary spindle]

Are you using Windows?

[crystal compass]

no

ubuntu 24.04

[weary spindle]

Open your browser and go to http://10.10.10.10/

[crystal compass]

it's loading
doesn't open

[weary spindle]

Do you have a personal VPN on.

[crystal compass]

??????

protonVPN

[weary spindle]

Turn it off 😅

[crystal compass]

what

[weary spindle]

If you double up the VPN, it won't work.

[crystal compass]

that's where i connected previously

[weary spindle]

As the traffic sent is encrypted

[crystal compass]

thats the only vpn i have

[weary spindle]

#site-support message

[crystal compass]

I can't connect

What you sent

😛

[weary spindle]

Then you're doing something wrong.

You don't need ProtoVPN.

Which country are you in?

[crystal compass]

greece

i dont need proton

why???

[weary spindle]

Some countries block openvpn

[crystal compass]

what should i do now

my country doesn't

[weary spindle]

Have you turned off Proto VPN

[distant frigate]

help plz :), i am running kali linux in virtual box

[crystal compass]

it says Initialization Sequence Completed

[weary spindle]

Can you verify and share a screenshot please

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 5, 2024, 3:29 PM

[crystal compass]

now i have vpn and wifi

verify?

[weary spindle]

Yes, to send screenshots

[crystal compass]

Of what

[weary spindle]

The trouble you're facing...

[crystal compass]

cant send image

😛

[weary spindle]

Yes...

Because you need to verify...

[crystal compass]

ok got the token

[weary spindle]

Where did get the VPN file from?

[crystal compass]

protonvpn

[weary spindle]

Yeah.. That's why.

You need to get it from THM.

https://www.tryhackme.com/r/access

[crystal compass]

ok from there it doesnt work

[weary spindle]

Which server?

[crystal compass]

Thm

[weary spindle]

Which server?

[crystal compass]

Don't get you sorry

[weary spindle]

There is a list of servers to download.

Which one did you download?

[crystal compass]

Europe

[weary spindle]

...Which one?

[crystal compass]

EU -Regular -1

[weary spindle]

Try 3.

[crystal compass]

lol so easy

😛

[pallid moss]

hey. I have an issue. The attackbox on web gives me this error "An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.". I tried to ssh and ping from my vm but it doesn't work.

[crystal compass]

Deploy the machine and go to http://MACHINE_IP - Login with the username noot and the password test1234.

i entered THM IP and cant go there

[weary spindle]

Is it an ip, or MACHINE_IP

[crystal compass]

yes

i got
Apache2 Default Page

[weary spindle]

sounds like you need to find the login page then.

[crystal compass]

how?

[hollow sequoia]

im having connection issues too, cant seem to connect to any deployed machines whilst using openvpn. Using the attackbox works though.

[crystal compass]

yes

me too

did you use EU-Regular-3?

[hollow sequoia]

i cant seem to connect to any targets that have an ip adress similar to 10.103.111.111 or 10.104.111.111 but i can connect to deployed machines that start with ip address such as 10.10.111.111 etc

any workaround ? apart from using attackbox lol

[hollow sequoia]

im on vip 1

[crystal compass]

i have used OpenVPN

not AttackBox

and it says PARSING_ERROR

when trying to connect

now it started

good

now it doenst tell MACHINE_IP It says http://10.10.125.123`

yeahhhhhh

[lament radish]

Hello

I may have a strange probleme

my openvpn kali is connected and 10.10.10.10 works nicely

but pinging the server don't works 🤓

but with the attack box this is working

if someone know why 🤷‍♂️

[ember osprey]

Some machines don't respond to pings 🙂

[hollow sequoia]

yeh current issue i found too, if your machine starts with 10.101 , 10.102, 10.103 etc openvpn doesnt work.

[lament radish]

Yes this can happed but i thinks the Day 5 of advent cyber 2024 does nan ?

[lament radish]

hum ok weird

[hollow sequoia]

restarting the machine till the ip's second value is not three digits works aha

octet*

[lament radish]

i try it 👌

[little spear]

Hey guys, im currently doing a CTF called Cmess. I am connected to the vpn, but my box just wont respond to my ping or nmap scan. When I'm watching walkthroughs they are able to ping it. I dont know what is wrong can anyone help me?

[weary spindle]

if anybody has an issue with the machine having having triple digits in the second subnet. ping me. (PIC FOR EXAMPLE)

[little spear]

@weary spindle

meee

[hollow sequoia]

yes i had the issue too.

[weary spindle]

Can you do route -n

And give me the third ip

[weary spindle]

Do you still have it?

[hollow sequoia]

Yeh, want my route table ?

[weary spindle]

Just the 10.xxx.xxxx.xxx ones.

Don't give me anything else.

[hollow sequoia]

10.10.0.0 10.11.0.1 255.255.0.0 UG 1000 0 0 tun0

10.11.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0

terrible format sorry

[weary spindle]

sudo ip route add 10.103.0.0/16 via 10.11.0.1

[hollow sequoia]

need to do this every time i run openvpn config file? or can i add this to the file?

[weary spindle]

AFAIK it will always be there, however THM are working on adding them.

[hollow sequoia]

okay cool

thanks for the help

i presume i would need to run this again if the subnet is different to 103?

[quaint bronze]

Having that issue as well - should we be able to ping the target IP in the 10.103 space?

I had tried adjusting the routing table earlier when I noticed there was nothing pointing to that subnet - I've also just tried your suggestion above for 10.103.0.0/16 but I am still unable to connect to the target

[weary spindle]

Yes.

[weary spindle]

Is your machine ip 10.103 and is your Tun0 10.11 ?

[quaint bronze]

My tun is 10.6

10.6.0.0 0.0.0.0 255.255.128.0 U 0 0 0 tun0
10.10.0.0 10.6.0.1 255.255.0.0 UG 1000 0 0 tun0
10.103.0.0 10.6.0.1 255.255.0.0 UG 0 0 0 tun0
Tun0 is 10.6.30.96

traceroute shows first hop to 10.103 going to 10.6 .. but then nothing

What's also odd, maybe, if I go to my Access page, it doesn't show my VPN connected (but it is, and I can ping the 10.10.10.10 IP just fine)

Am I using the wrong thing (Machine vs Network)?

[weary spindle]

sudo ip route add 10.103.0.0/16 via 10.6.0.1

[weary spindle]

For you.

[quaint bronze]

Yeah, I did that - that route is in my table

third line from above

[weary spindle]

And you can't access the machine?

[quaint bronze]

No

I just tried switching to US-West (which is different so I added route add 10.103.0.0/16 via 10.13.0.1 instead)

but same problem

can ping 10.10.10.10 - but cannot reach target

[maiden relic]

Is there a way to report/track training in a way the satisfies CPE requirements?

[weary spindle]

What is the ip of your target machine?

[quaint bronze]

Huh, interesting, with that new VPN the Access page shows 'connected'

Target is 10.103.15.78

it is still live - I can reach it from the browser attack box

[quaint bronze]

PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
64 bytes from 10.10.10.10: icmp_seq=1 ttl=61 time=200 ms
64 bytes from 10.10.10.10: icmp_seq=2 ttl=61 time=199 ms
64 bytes from 10.10.10.10: icmp_seq=3 ttl=61 time=199 ms
64 bytes from 10.10.10.10: icmp_seq=4 ttl=61 time=199 ms
^C
--- 10.10.10.10 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3002ms

PING 10.103.15.78 (10.103.15.78) 56(84) bytes of data.
^C
--- 10.103.15.78 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4078ms

10.1.0.0 10.13.0.1 255.255.0.0 UG 1000 0 0 tun0
10.10.0.0 10.13.0.1 255.255.0.0 UG 1000 0 0 tun0
10.13.0.0 0.0.0.0 255.255.128.0 U 0 0 0 tun0
10.103.0.0 10.13.0.1 255.255.0.0 UG 0 0 0 tun0

traceroute to 10.10.10.10 (10.10.10.10), 30 hops max, 60 byte packets
1 10.13.0.1 64.149 ms 64.135 ms 64.135 ms
2 * * *
3 * * *
4 10.10.10.10 203.430 ms 201.712 ms 201.774 ms

traceroute to 10.103.15.78 (10.103.15.78), 30 hops max, 60 byte packets
1 10.13.0.1 63.776 ms 63.762 ms 63.758 ms
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *

I don't know. I guess I'm just going to give up for now. For what it's worth, I've never had issues with it in the past - nor have I had to add routes. I simply connected and everything worked.

[weary spindle]

Yeah. AoC has made AWS provision other subnets. 😄

[devout flare]

I cannot access the target using VM (Same happened before downloading file in sidequest but I could visit the site but the file won't start to download)

[weary spindle]

Wdym?

[devout flare]

It kept loading when I tried to download the file ||pcap one|| (yesterday tho) and today I cannot access the IP in main quest

[weary spindle]

Is it 10.103?

[devout flare]

10.10.10.133

[sweet bolt]

I was gonna report something, but it looks like everyone already has. Looks like for some reason provisioning for both Attackbox and Task VM's was happening on subnets (like 10.100.0.0 or 10.103.0.0) inaccessible from VPN clients. I've refreshed a few Task VM's and it seems like it stopped.

[quaint bronze]

Figured I'd try again.. generated a new vpn config file, waited the time then downloaded. When I connect, I see the route being added for me now 🙂 so that's good, but I still can't reach the target

net_route_v4_add: 10.103.0.0/16 via 10.6.0.1 dev [NULL] table 0 metric 1000

terminated and created a new target (which is now 10.10) and I can reach that one 👍

[weary spindle]

Can you try refreshing your VPN file and re-downlaoding?

[sweet bolt]

sure, give me a min

VPN file regenerated and connected.

my VPN IP has stayed consistent on the 10.6.0.0 subnet

starting another Task VM and it seems like they are back to consistently being provisioned on the 10.10.0.0 subnet and I can SSH to it without issue

[gusty dome]

hello i'm unbale to connect to THM with openvpn config

[weary spindle]

try a different server

[sage surge]

Hi guys, I hope I'm not asking the same question as the others, but I've been having a problem with VPN for days now. I mainly use Kali with WSL2 and was able to reach all my rooms before. Since December I can't reach the sites anymore. I can ping them but they take ages to load and eventually I crash. But if I start an attackbox, I can access the content. I have also tried to start my config file with openvpn with Windows 10, but that doesn't work either. I have tried various configuration files (including the regular ones, even though I am a subscriber) and I can still ping but cannot access the pages.

The same applies to the .zip of the side quest. I simply can't download it, but if I just call up the IP address, I can see the contents of the server, but I can't download it. What could be the reason for this?

[gusty dome]

thanks it worked after changing server to us

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3068)

[halcyon pulsar]

Hi Team !
I'm the only one who is not able to have access to the VM on : https://tryhackme.com/r/room/linuxfundamentalspart1
Split screen is working but I'm not able to access to the shell prompt

[weary spindle]

Do you see a GUI or CMD?