site-support

[meager badger]

seems working now

[dull tinsel]

There are still some issues @meager badger It says me braechad interface no such device

[haughty juniper]

anyone else still with vpn issues? keeps reconnecting every 2 minutes, no connection to the targets, has worked flawlessly the weeks before.

[ember osprey]

Try to change server and re-generate the file

[haughty juniper]

i tried that multiple times, tried all servers, rebooted the laptop, nothing worked. even reinstalled openvpn. have seen a few vpn related issues yesterday and we all believed it is THM related, but not 100% sure.

[ember osprey]

Try to run this cmd sudo ip link set dev tun0 mtu 1200

[haughty juniper]

done that too. did all the troubleshooting steps i found on THM and on the web

logs arent really helpful either. https://hastebin.org/ctnvnqdhps.bash

same every 2 minutes

[weary spindle]

That seems like an error on your side.

[haughty juniper]

i wish i could pin it down. it has worked flawlessly weeks before christmas. after coming back, i have these weird 2 min reconnect issues.

[primal pawn]

Yesterday there were some issues with AttackBox machines, today I can start my machine just fine with no errors. However, my split-screen is still blue so even though the machine has started I can't do anything with it. I tried clearing my cache and even using a different browser to no avail. The issue is in "Linux Fundamentals 1" room.

Someone suggested to use the AttackBox on full-screen but clicking on the appropriate button does nothing either

[ember osprey]

Try to disable browser extensions or ad-blockers

[primal pawn]

Still nothing

[weary spindle]

If you full screen it, can I see the link?

[primal pawn]

Clicking "View in full screen" does absolutely nothing

[weary spindle]

No new tabs open?

[primal pawn]

None at all, tried in different browsers as well

[weary spindle]

https://tryhackme.com/api/vm/running

Do you have an output if you visit this link?

[primal pawn]

Yes, there is

Is it wise to share that here?

[weary spindle]

Yes. 🙂

[primal pawn]

[
  {
    "roomId": "linuxfundamentalspart1",
    "expires": "2025-01-01T12:53:43.891Z",
    "created": "2025-01-01T10:53:45.096Z",
    "internalIP": "10.10.165.77",
    "instanceId": "i-0f02981d6019c3c9d",
    "title": "linuxfundpart1v2",
    "timeInSeconds": 7028.072,
    "remote": {
      "active": true,
      "bootTime": 1,
      "privateIp": "10.10.165.77",
      "remoteUrl": "https:///#/client/undefined?token=",
      "protocol": "ssh"
    },
    "waitTime": null
  }
]```

I can see that the remoteUrl is probably not what it should be

[marsh helm]

I have lost access to the 2FA app and the backup codes are also not working. How can I contact the support team for getting back the access to my account?

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 1, 2025, 10:59 AM

[marsh helm]

Thank you

[weary spindle]

So it's looking like when you're assigned a token something is malforming, so it isn't working.

Linux 1

[primal pawn]

This worked

[haughty juniper]

i solved it by moving from OpenVPN to Tunnelblick on Mac. that may be worth adding to the troubleshooting steps or installation steps on THM. who would i contact for that?

[weary spindle]

Yeah, that's my machine.

[primal pawn]

Is there any way a staff could take a look at this on my end? I also tried on other devices and it seems to be related to my account (?)

[weary spindle]

Oh you're mac.

Yeah, mac isn't great for the vpn sometimes.

[weary spindle]

I'm about to ping them now, however it won't be looked at today, I think.

[primal pawn]

It's fine, as long as they take a look into it soon. It's new years haha

[haughty juniper]

seems like it - can't and won't spend more time figuring out what the issue is or was. tunnelblick also seems a bit more verbose in log outputs and options. we should maybe think about adding that as an option for mac users. thanks Scrubz.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3180)

[split hill]

Yep. Worked fine before. Same issue as you have.

[haughty juniper]

are you on a mac as well?

[split hill]

Nop, linux

[haughty juniper]

done all the troubleshooting steps from THM? cant speak for linux. lots of people said its a ME issue but i havn't changed anything. since you experience similar issues, we may not be the only ones especially since we're on a different OS.

are the logs on linux more verbose? i couldn't see any errors or warnings why the reconnects happen.

[weary spindle]

When using Mac, did you install brew, then install Openvpn?

[split hill]

Ping timeout.

[haughty juniper]

i did not use brew. as vpn setups are finicky on mac, i used the mac-specific guidance from THM which linked the installer from openvpn.net

[weary spindle]

There is post in here that says to use brew to install it and run

[split hill]

Inactivity timeout (--ping-restart), restarting

[haughty juniper]

it worked for 4 weeks since i joined THM and never had a single issue. i don't understand why the functionality would suddenly change

[split hill]

Are you connecting to EU servers?

[haughty juniper]

i quite literally tried ALL servers.

same issue

[split hill]

Oh, ok.

[haughty juniper]

i see this in the pinned messages now. have not tested it, (and probably won't as tunnelblick works now). but it would be worth adding such guidance and troubleshooting steps to the official website. not everyone is joining discord and scraping through pinned messages

especially since the official mac-related installation process on THM tells you to install the GUI version

thats was my original post, you see the exact same issue?

[haughty juniper]

have you re-generated the vpn files? (also wait a few minutes before downloading them, as suggested)

[split hill]

No, and i don't see much point - it connects to server and works until reconnects.

Maybe some keepalive mechanism for clients (ping) on vpn servers is failing. Would explain different vpn client working for you

[haughty juniper]

then its different. mine was connected to the vpn, but i could not connect to the 10.* ip space, including the 10.10.10.10/whoami or the target boxes.

[split hill]

Oh, ok. Im having 50% packet loss to 10.10.10.10 it just stops for a while every few minutes

[haughty juniper]

did you try different vpn endpoints

[split hill]

Trying now

Huh, us west1 works for me it seems. Maybe eu2 doesnt like me anymore 😄

[upbeat quarry]

happy 2025 hacking to you too!
I'll be in and out of Discord today
what I meant was a continuation of last time: maybe setup netcat on my instance of THM AttackBox and you start the revshell on your instance of target VM

[cerulean moth]

Sure we can try out will it work.
What's your ip

[upbeat quarry]

I'll start up target and AB now

[cerulean moth]

Ok I'm ready the target ip is 10.10.212.236 for the hosts file

[cerulean moth]

Actually I don't think you even need it

[dense tiger]

I got issues logging in try hack me

[upbeat quarry]

no we don't, it was just an alternative scenario to try to troubleshoot the previous session
do you have another idea in mind?

[weary spindle]

That's a browser issue

[dense tiger]

Can you help me fix it

[weary spindle]

Use a different browser?

[dense tiger]

can't i fix the same browser?

[cerulean moth]

Well we haven't tried this one yet, but no I don't know why the shell doesn't connect

[upbeat quarry]

that is the fundamental issue we have
are you using THM AttackBox for the moment?

[cerulean moth]

No but I could if you think it's better that way

[upbeat quarry]

it would be better, because that way you do not have the unknowns of possible firewall and other obstacles between the target VM with the reverse shell and your listener

[cerulean moth]

I have tried using the AB before but it didn't work that way either, I meant for trying out your idea to connect to your listener

[vagrant sky]

Hi!
Small bug with the text on the button to view recap: it has 2025 instead of 2024 🙈

[upbeat quarry]

OK, let's go with that scenario with my listener
for my listener, I will set it up on my instance of THM AttackBox, no need for yours
hence:

• IP of my AttackBox : 10.10.52.111:
• port for my listener: 9001
• hence: edit your reverse shell with that IP and that port
• check first you can ping my IP from your box (I will see your ping in my tcpdump session)
• after we have confirmed the ping works, upload your reverse shell to your instance of annex.uploadvulns.thm and trigger the call back by clicking on the .php5 file under privacy
• let's see what happens

[dense tiger]

Still issue with chromium & firefox

[cerulean moth]

Ok I pinged you

[upbeat quarry]

I saw you if the third octed of your IP is 209, right?

[cerulean moth]

Did it connect?

[upbeat quarry]

yes, yes, yes

[cerulean moth]

Huh weird, but at least it's working. Do you know what the problem is?

[upbeat quarry]

I do not know what the issue is at this stage
one thing we have achieved is that your reverse shell is good
the next step is to edit your reverse shell to a listener on your box
I would suggest for that that you use THM AttackBox as the next step, rather than your own local VM: using THM AttackBox everything occurs using THM infrastructure (same with my instance of AttackBox), which mimimizes unknowns

[cerulean moth]

I'm trying on the attack box but this happens

[upbeat quarry]

and you have edited the instance of /etc/hosts on THM AttackBox?

this is my /etc/hosts on my instance of THM Attackbox

[cerulean moth]

Great news, it's working now

[upbeat quarry]

just a thought: are you using WSL for your local VM?

[meager badger]

yes , i also dont see the interface inside the attack box but it worked for me in my own VM, now i am facing issue in downloading the wreath VPN file

[cerulean moth]

No I'm just using Ubuntu

[upbeat quarry]

Ubuntu on a hypervisor (VirtualBox/ VM Ware) running on Windows?

[cerulean moth]

No just Ubuntu as my OS

[upbeat quarry]

and so you run the VPN directly on that Ubuntu instance, right?

[cerulean moth]

No that was from the AB

[meager badger]

can someone help me in this , i am getting 500 while downloading the VPN file for wreath network

[upbeat quarry]

I am not sure I understand it all, it may just be a question of using the right terms to identify the right components
in THM environment:

• you have a target VM (sometimes also called a task VM) that is the target that you want to "hack". In your case, that target VM had IP 10.10.212.236 That target VM is not THM AttackBox or AB
• in order to attack the target VM, you need an attacking machine:
  • you can use an instance provided by THM, called THM AttackBox (or AB), the default one being a Ubuntu box (the other flavour, available only for THM subscribers is a Kali machine)
  • or you can set up your own attacking machine (typically Kali) on your local computer, and you can reach the target/task VM after launching THM VPN You setup THM VPN typically by running openvpn <VPN_config_file> on your local attacking machine
    So far today, we have been able to get the reverse shells using THM AttackBox:
• the first time: using my instance of THM AttackBox
• the second time using your instance of THM AttackBox
  Are we on the same page with the above?

[primal pawn]

Has this been looked into yet?

I am still facing the same issue

[cerulean moth]

Yes that's right but when I reported the issue it didn't work from my pc or the THM AttackBox

[weary spindle]

Not yet.

And like I said, it probably won't.

For today anyway.

[upbeat quarry]

so, now that it works usingTHM AttackBox, the next step is to get it to work on your PC if I understand correctly, and that involves running THM VPN on your local attacking machine

[cerulean moth]

Or I could just finish it with the AttackBox

[upbeat quarry]

indeed, you could finish with THM AttackBox
I would suggest however, that at some stage later, you try to get reverse shells to work with local attacking machine
BTW, personally, I usually work with THM AttackBox, as I have a low-spec PC
in case you want to share other weird things, I'll be around along with the rest of THM Discord community 🙃

[cerulean moth]

I sometimes use my pc and sometimes the AB. Sure, thanks for your help with the issue.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #20 - 462)

[upbeat quarry]

I suggest:

• you use the Options button to leave and join back
• download the VPN config file again
• possibly regenerate the VPN config file (make sure it is different from the previous one, for instance by comparing the respective MD5 hashes)
  you may have to repeat the process multiple times in order to land on an instance of Wreath network that will work for you

[weary spindle]

We are not hackers for hire.

[paper umbra]

@weary spindle I know, but Without money, no one will help me, because no one has the time and willingness...

[boreal lichen]

Thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1731)

[tame haven]

does anyone know which learning paths the malware analysis modules are a part of..? i was not able to track it

[opal pecan]

Hey, so the VM in the Linux fundamentals 1 room, is powering on but is not displaying in split screen mode for you. Vm and split screens in other rooms are fine and it’s just this room you see the issue?

[primal pawn]

Hello, yes precisely I managed to boot up other machines

[opal pecan]

And you know the vm is powered on in the room as you can connect to it via vpn or Attackbox?

[primal pawn]

Either, this issue is just in LF1

[opal pecan]

Hmm, strange. So then it seems like something about the remoting of the display for split screen just for this vm.

[upbeat quarry]

if you allow me to enquire: and just for that user?

[ember osprey]

This one 🙂

https://tryhackme.com/r/path/outline/soclevel2

[opal pecan]

Maybe, doing some testing myself but not aware of other reports yet.

[primal pawn]

I am not assigned a token so probably beyond that

[west edge]

stupid question, but interesting for me. Why they changed 0xD GOD to 0xD LEGEND does anyone now?

[weary spindle]

It was changed for religious reasons. 🙂

[west edge]

as religious person, support this decision👍

[upbeat quarry]

another user (ar3alcoo1kat) in #room-help has just reported similar issue: #room-help message (along with screenshot here: #room-help message)

• same behaviour in Linux Fundamentals 1 and Windows Fundamentals 1: empty/blank pane on the right of the split-screen
• the user posted the output of https://tryhackme.com/api/vm/running for Linux Fundamentals 1 here: #room-help message

[merry furnace]

Hello All. One question: is there any option to transfer my THM progress from one Google account to another Google account ?

[weary spindle]

No, sorry

[tame tartan]

hello there, when i connect openvpn on windows to test something if i ready to connect to THM network. openvpn when i import to it .ovpn configuration file it asks for credentials like username and password. What should i do?

[indigo pagoda]

Hello help needed pls the monthly leaderboard isn't changing would like someone's help since our workplace does competition often

[novel snow]

having an issue with the room Linux Fundamentals Part 1. I was able to reach a terminal prompt in the machine about a week ago, but now when I start that machine again, no terminal. What I have tried

• clear room progress, then leave, and rejoin.
• clear browser history (everything all the time)
• restart computer

After doing all that, still no terminal prompt appears. Thanks in advance!

[ivory spruce]

What software are you using to connect to THM network via OpenVPN?

[misty nacelle]

Hey I had a problem where i couldn't find the certificates for some learning paths I have already finished, I couldn't find them in my profile where certificates resides, and I can't download them from the learning path that I finished since my subscription has ended, do I need to renew my subscription to get these certificates ?

[paper gust]

Hi

[ivory spruce]

I'm afraid you'll need to, but do drop an email to THM Support to be certain.

[tame tartan]

windows

i have a problem in linux as a VM so i test windows to see is the problem still or not

[ember osprey]

Try to use OpenVPN communities 🙂

[ember osprey]

Hi , welcome 🙂

[tame tartan]

bro i used it before and the problem still the same

[ember osprey]

https://openvpn.net/community-downloads/

You used this ?

[tame tartan]

in kali, when i execute command 'openvpn name.ovpn' it givesme errors

[ember osprey]

Which errors ?

[tame tartan]

i cannot send screenshot here can i message you in DM?

[ember osprey]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

You will need to verify first 🙂

[tame tartan]

OK

[tame tartan]

i think we are good right now

[ember osprey]

Yes , you're verified now 🙂

[tame tartan]

send screenshot of the error here?

[ember osprey]

Yes 🙂

[ember osprey]

Delete that file , change server , click regenerate , download and use new VPN file

[tame tartan]

try this before

and the problem still the same

[ember osprey]

Try to run this command sudo ip link set dev tun0 mtu 1200

[tame tartan]

i use all servers

[tame tartan]

can't find device tun0

this is the output

[ivory spruce]

This is because you have yet to setup a connection to THM OpenVPN servers

[ivory spruce]

From which location are you connecting from? Also, when generating the OpenVPN config file, did you wait for ~2 to 3 minutes upon switching OpenVPN servers?

[tame tartan]

Yeah

It asks for certificate and client key

In the past, it connects easily and take no time

[ivory spruce]

From which location are you connecting from?

[tame tartan]

EU-Regular-1

You mean my real location?

[ivory spruce]

I meant the geographic location where you are initiating the connection from.

[tame tartan]

Germany

[ivory spruce]

Got it. What connection are you using then - home, personal, public library / school, etc.?

[tame tartan]

My Home network

[ivory spruce]

Can you try EU-Reg-3 or EU-Reg-4?

[tame tartan]

How long should i wait ?

[ivory spruce]

Upon switching servers, wait for ~2 to 3 minutes before generating your OpenVPN config file.

[tame tartan]

Okay i will

Can i ask for a something in this issue also? @ivory spruce

[tame tartan]

same error message

[ivory spruce]

Yes?

[ivory spruce]

What is the exact command are you using to connect?

[tame tartan]

Thank you it works!!

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 735)

[split stream]

i am using openvpn but when i try to scan the machine using nmap, after a few ports being scanned, it gives me the error "Increasing send delay for 10.10.54.38(target machine) from 5 to 10 due to 49 out of 163 dropped probes since last increase." this goes on until it gives up on the port. this does not happen when im on the attackbox. what is going wrong? how can i fix this?

[ember osprey]

What's your full command 🙂 ?

[split stream]

nmap -A -p- ip -vv

Ive tried using -T4 but just doesnt work

[ember osprey]

Try without -vv flag , maybe it's outputting debugging info

[split stream]

Ive tried, still didnt work

[ember osprey]

Try to run this command sudo ip link set dev tun0 mtu 1200

[split stream]

Cant find device

[ember osprey]

Then something is wrong with your VPN connection , try to regenerate the file

[split stream]

I can connect to the 10.10.10.10 webpage though

ive tried switching servers too, but im getting the same results for every nmap scan

[upbeat quarry]

is your VPN connection stable?
Please show a screenshot with the full output of your openvpn command
In order to post screenshots, you will have to verify with Discord first using the link coming below

[eager karma]

Hi I lost my streak, and it reset to zero, but I had streak protection for 8 days, could someone please help me get it back, I was 10 days away from a full year badge

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 2, 2025, 8:43 AM

[upbeat quarry]

maybe this helps:
https://help.tryhackme.com/en/articles/6596150-how-do-streaks-work

[eager karma]

I submitted a ticket

[tranquil shale]

Just now I subscribed to the premium plan using my credit card. Thinking there was an error with the transaction, I subscribed again. However, the payment has been deducted twice. My is upgraded to premium. Any mods please help resolve this issue

[upbeat quarry]

be mindful of this: #site-support message
hence, make sure you keep doing tasks as per the document from above

[eager karma]

yup, will do

[west chasm]

@tranquil shale

Code of Conduct

Article Link

https://help.tryhackme.com/en/articles/8218772-code-of-conduct

Jan 2, 2025, 9:07 AM

[upbeat quarry]

use [e-mail] because of this: #site-support message
please discard the bot response (about Code of Conduct): I got it wrong there My apologies

hopefully a moderator will be kind enough to delete this bot command I issued by mistake:
#site-support message
my apologies for the inconvenience

[chilly sparrow]

hi

[ember osprey]

Hi , welcome 😄

[split stream]

hey! thanks for the response! i regenerated the config file and its working now!

[west edge]

Can someone help me, I am getting ERR_CONNECTION_RESET error while opening split-view target machine in Day 15 Winter advent 2024. This problem occurring on random websites I visit. Websites like 2ip.ru, webasha.com, veepn.com and others. I tried many things to fix it.
Mannualy changed DNS to cloudfare
Flushed DNS/browser caches
Turned off browser extensions
Tried to reset browser
Tried different browsers
Turned off antivirus/firewall
checked /etc/hosts, there is no filter to these websites
Ping/tracert these websites, they are reachable
I did these thing but none of them helped

these command also not helped: netsh winsock reset
netsh int ip reset

When I turn on vpn, all thses websites and THM working

Did someone had this problem?

Forget to mention, when I want to load same websites on my phone connected to same wifi, they are working

[upbeat quarry]

maybe there are error messages under DevTools > Console that you will be able to google

[naive dust]

Can ask if I stay in Singapore, whch VPN server is recommended to connect?

[ember osprey]

Try with AU or US based one 🙂

[naive dust]

Ok thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1739)

[novel snow]

adding to what I have tried: different browser, still nothing but a blank screen in the machine on the Linux Fundamentals Part 1 room 😐

[ember osprey]

Try to disable ad-blocker or browser extensions if you're using some 🙂

[novel snow]

restarting the machine now...

[ember osprey]

Fingers crossed 🙂 🤞

[novel snow]

well, let me restart the browser with ad-block disabled...

[ember osprey]

Give it a go , let's hope it works 🙂

[novel snow]

10 seconds...

[ember osprey]

Fingers crossed 🙂 🤞

[novel snow]

blank screen

[ember osprey]

😭 😭 😭 😭 😭

[novel snow]

okay, going scorched earth nuclear here...gonna clear cache, reset room progress, log out, reboot pc. brb!!

[ember osprey]

Have you tried different browser maybe ?

[novel snow]

did that first thing this morning - well, after overnight didn't fix it

after all that, started machine to another blank screen just now. only other steps I can think of at this point are to release and renew IPv4 lease on this PC, or delete and recreate my THM account

[ember osprey]

That probable won't help 😦

Do you have an AV ?

[novel snow]

yeah

[ember osprey]

Try to disable it temporary

[novel snow]

no change with AV turned off, trying with both AV and FW off....

[ember osprey]

😭 . I'm running out of ideas

[novel snow]

i still have one - account kill and recreate

[ember osprey]

That probably won't help 😦

[weary spindle]

This is a known issue

[novel snow]

Imma try something else - gonna try a different room's machine

[weary spindle]

That will probably work, as they're independent of each other.

[novel snow]

okay so it's a room issue and not a Shane issue. that's good to know

[topaz kestrel]

Is there a difference between "start AttachBox" and "start Machine"? I tend to click both on each task that requires a machine

[novel snow]

okay success in room Linux Incident Surface, so room is the issue. Thanks KGB and Scrubz for the help!!

[ember osprey]

Yes 🙂

Machine is the machine you want to "attack" , you use AttackBox to "attack" it 🙂

[topaz kestrel]

So start the machine first, and then attack it?

[ember osprey]

Yes 🙂

[dense tiger]

i wanted to know why burpsuite remove spider and some other options from new version?

[naive dust]

hello, when I am in the attack box terminal the terminal asks me for a password

[ember osprey]

For what ? What are you trying to do 🙂 ?

[naive dust]

use telnet

[ember osprey]

Maybe it asks for telnet password of the machine you're attacking 🙂

[naive dust]

but i d'ont have the password

[ember osprey]

Which room ?

[naive dust]

Networking Concepts

[ember osprey]

Can you provide screenshot 🙂 ?

[naive dust]

i can't send a screen i don't have the permission

[ember osprey]

You will need to verify first 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[ember osprey]

Specify port 🙂

[robust hatch]

i subscribed and i got the invoice email yet my email is not permium yet. what should i do

[ember osprey]

You need to connect to web server so connect to port 80 🙂

[naive dust]

after ip ?

[ember osprey]

Yes 🙂

[naive dust]

okay thanksss!!

[ember osprey]

Try to reach out to support 🙂

[robust hatch]

how can i do this?

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 2, 2025, 5:47 PM

[ember osprey]

On the email above 🙂

[sand moss]

hey, the password "dragon" does not connect to me to user sammie@the-machine-ip-address in Operating System Security.

[sand moss]

solved. got frustrated and left the page open for 20 minutes while I went away, it was a site bug... showed me sammie@MACHINE_IP instead of the actual machine IP that I need to connect to. so I tried to connect to the machine IP of the machine I was in....

[upbeat quarry]

not a site bug I would say: in THM text, MACHINE_IP is a place holder that gets converted to a real IP after the target/task VM has started, typically 1 minute after pressing the green Start Machine button
you will go through that process in any room where you start target/task VMs

[crude summit]

Hello, all the machines I'm trying doesn't load or load but doesn't render, any help? 😦

[upbeat quarry]

I can offer a work-around, not a solution
for this particular one, use the RDP service, typically with remmina (GUI) or xfreerdp (CLI) from THM AttackBox or your local VM
for other target VMs, you may have ssh access, like in Linux Fundamentals 1 ( ssh credentials are tryhackme:tryhackme for that one)

[crude summit]

oh okay

gonna try the xfreerdp one

[upbeat quarry]

if you use your own local VM, like Kali, to launch xfreerdp or remmina, you will have to start THM VPN first
if you use THM AttackBox, no need for THM VPN

[crude summit]

Ok I'm in, thanks 😄

[half lava]

Hello, I am trying to do the Wreath room which is part of the networks category, however I am unable to get the wreath network configuration to download as every time I press download configuration file or regenerate it takes me to the 500 something went wrong page

[west chasm]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Jan 2, 2025, 10:58 PM

[marble breach]

Pong!

API Latency

113ms

Client Latency

440ms

Jan 2, 2025, 10:59 PM

[velvet sand]

Hi. I just wanted to make yall aware of something. I normally visit the site through google (its just faster). This evening i typed try hack me into the google search and hit enter, the first result said "tryhackme" so i clicked on it, but it took me to a completley different site. I went back and checked and sure enough, the first result said it was tryhackme.com but it was linked to a different site/company. I have a screenshot of it but i guess i don't have permission to upload a photo. I just wanted to make site admin aware in case there was any action they wanted to take.

Feel free to DM if you need any more info or want me to send the screenshot.

[naive dust]

I’ve had non stop lag with the website from just at the event started and I’m still struggling to do one room

[ivory spruce]

You'll need to verify your account to be able to post screenshots.

[blissful stirrup]

One message removed from a suspended account.

[ember osprey]

Try to contact staff directly 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 3, 2025, 3:47 AM

[blissful stirrup]

One message removed from a suspended account.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1746)

[nocturne sand]

I need help signing into my account.

I'm locked out of my account.

[proper surge]

Hello team,

I see that network is not resetting in
Red Teaming > Compromising Active Directory > Persisting Active Directory
(There is already 10/5 network reset requests, but it is not resetting)

Also can not download configuration file for this room in "Access via OpenVPN" page (it works only for other rooms).
I am getting 500 error.
Hope support team is fixing this.

Thank you.

[ivory spruce]

Has the forgot password option not worked?

[ivory spruce]

Have you tried 'pausing' your subscription if possible? THM doesn't normally refund charges made for monthly subscriptions as part of their refund policy.

[upbeat quarry]

consider using the Options button to leave and join back again: you will be assigned to a different network instance, hopefully not affected by that resetting issue

[upbeat quarry]

this may help: #site-support message

[viscid viper]

how to get student offer

[west chasm]

@viscid viper

Student Discount

Article Link

https://help.tryhackme.com/en/articles/6494960-student-discount

Jan 3, 2025, 9:10 AM

[upbeat quarry]

see above

[nocturne sand]

I have 2 factor authentication enabled. I used recovery codes to sign in. I used all of my recovery codes.

[robust hatch]

Why isn’t the support replying on the email? How can i contact them on discord

[ember osprey]

It can take a few days for a support to reply , they will , just be patient 🙂

[robust hatch]

‘Few days’ omg

[ember osprey]

Yeah because of holidays 🙂

[weary spindle]

When did you E-mail?

[robust hatch]

9:30 pacific time.

Yesterday

[weary spindle]

Today?

[robust hatch]

Nope

Yesterday

2 January

[weary spindle]

Yeah, Support can take anywhere betweem 5-9 day(s) right now, they also don't work weekends.

[robust hatch]

😦

[weary spindle]

Sorry for the inconvenience, however due to the event, E-mails have risen, just wait patiently, don't E-mail again.

Just wondering, is this account or billing related?

[robust hatch]

I had an account with my main gmail email and i changed the email to my university email to get the discount. After i paid the bill i got the invoice mail (it was sent to my gmail mail idk how!) and i still have the “go premium” in my account. I made an account with the gmail that i received the invoice mail on and still the same.

[weary spindle]

Ah, ok, yeah, this an E-mail issue, sorry

[robust hatch]

Np

[split ibex]

Hello, I am curious about the "Access to networks" in the 7 day streak, what are networks exactly ?

[pearl veldt]

It's challenges with multiple hosts so you practice pivoting and scanning full networks, etc I think

https://tryhackme.com/r/hacktivities/search?page=1&kind=networks

[split ibex]

Oh ok thanks

It does seem weird to lock some behind a streak which is relatively easy to lose, especially during holiday season

[weary spindle]

After 7 they're unlocked.

[split ibex]

Yeah but it would make more sense for it to be a one-time unlock the first time you reach a streak of 7 in my mind, or locked behind a certain level on the website. It would be frustrating to lose the ability to join the room if you skip only 2 days. Especially for paid users.

I'm not denying that there are plenty of other rooms available to build back a streak and that if you're already committed to network you would most likely be in a streak already, but it still feels odd

[weary spindle]

Subscribers don't need the streak.

[split ibex]

Alright, thanks

[robust hatch]

@weary spindle can i ask for a refund anyway?

[weary spindle]

https://help.tryhackme.com/en/articles/8282427-refund-policy

You need to contact support. 😄

[haughty juniper]

is there any way to find out whether a submitted write-up is rejected, and for what reason? i submitted an extensive write-up to a room that did not have one yet on THM, but have not yet received feedback

[weary spindle]

I'm not sure if you get feedback on rejection, which room was it?

[haughty juniper]

Hammer (https://tryhackme.com/r/room/hammer)

[weary spindle]

Ah, it's a THM room, the E-mail be missed, or no write-ups are being accepted, as there is non linked.

[haughty juniper]

yea, was already a bit odd that no write-ups existed yet

any particular reason write-ups are generally not accepted in rooms like this? i enjoy writing, and i still published it elsewhere, but a quick hint like 'This room does not accept write-ups' or straight up deactivate the functionality would be a good user experience

[weary spindle]

As it's credited to both THM and @kind knot I'm not sure who would get the E-mail regarding the writeup, there usually is a note stating if writeup aren't requested, it could simple be this E-mail was missed, or they're on holiday, when did yousend it?

[haughty juniper]

thanks scrubz. sometime around christmas iirc. might as well just be holiday and people being off. i was just missing a feedback channel back towards me as the submitter, as it's currently out in the void with no way for me to figure out what happened with it. will just keep waiting and if its not being published, thats fine as well 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3190)

[kind knot]

Hi @haughty juniper can you please share your username?

[sacred talon]

Hello

I have a problem with the linux machine in tryhackme

[weary spindle]

Is the machine not starting?

[sacred talon]

It starts but doesn't show anything

Want a picture?

Oh i can't

It may be my fault though

[weary spindle]

You need to verify

[sacred talon]

The first time i used linux machine in the website i didnt close it i closed the linux machine that i was in

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 3, 2025, 3:46 PM

[opal pecan]

The team made some changes. Would you be able to test again and see if you still have the issue?

[digital dove]

the tryhackme website doesn't work in incognito mode

[weary spindle]

What doesn't work?

I've logged in with private browsing in Firefox.

[digital dove]

i get an infinite reloading of the 2fa page

then a 500

[knotty marlin]

yeah same here

getting also 429 status. Tried changing Browsers, incognito, clearing cache, stoping extensions. Just can't get past login/2fa

[weary spindle]

I'll ping staff. 🙂

[edgy oxide]

hi , if i found a bug on the website where to inform about it?

[weary spindle]

What is the bug? 🙂

[edgy oxide]

code 500

that is high sevirity in QA

[weary spindle]

I've already pinged staff.

[edgy oxide]

i make a video also

oh ok

[shell cosmos]

me 2 cant pass 2fa

[knotty marlin]

Thnx ❤️

[edgy oxide]

but if we fill the form it be a profetional report

[winged idol]

Same situation.

[distant citrus]

during AoC logging into THM i was having issues, i have my password manager fill in the username and password, check not a robot, then the 2FA page would load but would go back to login page and keep refreshing.

i tried logging in in private browser and had no issue. but the issue is back again for me using Brave

• deleted browser history
• updated my browser

wondering if others have this issue or what to do.

i had no issue yesterday

[weary spindle]

It's an ongoing and rising issue atm

[distant citrus]

ahh okay

is VPN location a factor? i just changed where i was before loggin in

[weary spindle]

I've pinged staff, hopefulyl be fixed soon

[weary spindle]

I don't think so.

[distant citrus]

thanks Scrubz

[serene pilot]

same issue here, looks like it's already being worked on!

[distant citrus]

changed VPN location just for testing and i still have the issue

[serene pilot]

same

[novel snow]

Sure

[distant citrus]

the page Network tab is crazy busy, is someone DDoS the site

[novel snow]

Yes it worked. Thank you!

[scenic torrent]

Gave +1 Rep to @opal pecan (current: #687 - 7)

[errant jolt]

yeah everyone, i'm new here, i need help:
i'm in the Cyber Security 101->Exploitation Basics->Metasploit: Exploitation room and when i try to do
msfdb init my shell tells to run as a non-root user. I've tried many things such as update, upgrade, and change user, but still doesn't work

If someone knows why, don't hesitate 🙂
if my english is bad ask me to explain

[distant citrus]

did you use sudo su ?

[errant jolt]

i didn't, in the machine i'm already root user

[distant citrus]

ah okay.
you tried terminating the machine and starting again?

[errant jolt]

yeah, it's 3 days now 😭

[weary spindle]

The attackbox already has it initialised

[errant jolt]

oh

[ember osprey]

You don't need to do that on AttackBox

Db is already initalized

[errant jolt]

Okay thanks i didn't even check the status my bad

thanks i'll try it 🙂

[distant citrus]

(really annoyed by the constant page refreshes, was hoping to continue hacking, guess i have to wait)

[serene pilot]

is there an ETA on the fix?

[distant citrus]

+1

[weary spindle]

Non yet.

[serene pilot]

d'accord

(ok)

[distant citrus]

i tried in private browser and still does the constant refresh

[naive dust]

I'm glad I'm not the only one with that problem. I thought I got banned or something lmao

[distant citrus]

agree that it is nice knowing others face same issue

[leaden stream]

You got the infinite refresh too ?

[distant citrus]

yes

[leaden stream]

Hope they will fix that soon

[honest pasture]

Yes, same issue here.. in-private/incognito does not work either.

[distant citrus]

the good news is that THM knows about it

[quaint bobcat]

Hello - yes, I have been having the exact same issue as well
Good to know that others are experiencing the same

[quaint bobcat]

Ok that's great - hopefully it gets resolved soon

[naive dust]

Someone please tell me what’s going on

Tried the website on different devices

[crimson falcon]

having the same problem its refreshing endlessly

[naive dust]

Thanks everyone

[bronze vale]

Hey everyone,

We are aware of the infinite loading bug and are investigating.

Sorry for the inconvenience while we resolve this problem

[sick river]

Hey, does anyone have a problem with login to THM ?

I see that everyone have same problem. I hope its gonna be solved quickly.

[lean drum]

i emailed about my thicket but no reply yet "#42453: Payment issue "

[serene pilot]

Will support provide any updates on this?

[serene pilot]

Thanks, Jabba - any chance you could give us an ETA, pelase?

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1400)

[serene pilot]

im able to login!

[sick river]

me too.
thanks for fixing problem.
happy hacking

[weary spindle]

Should be fixed now everyone.

[distant citrus]

I'M IN!!

🎉 thank you staff @ THM

im happy now

[naive dust]

Omg is it finally up

[leaden stream]

Thx

[naive dust]

🏃‍♀️

[quaint bobcat]

Awesome - thank you so much!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3195)

[eternal rose]

Anyone noticing the FireEye links always links to Google Mandiant? It's been happening for the last 3 modules of the SoC Level 1 pathway. I just tried to look at the list of current APTs and it takes me to this link: https://cloud.google.com/security/mandiant

I also tried looking through the resources but then its mostly just "get the Google credentials" instead of actual resources.

Unsure if THM has to update the links or ...

[velvet prairie]

Hi, there seems to be a bad/unfortunate format color on:

https://tryhackme.com/r/room/commonlinuxprivesc
Task 5

Darkmode problem ?

Not sure if there is bug report room so i am pasting here...not really a bug as much as issues with visibility

[upbeat quarry]

you can document possible room bugs in #room-bugs and possible site bugs in #site-bugs

[velvet prairie]

hmm ok thank you will do

[lament hemlock]

+1 same issue

[worthy fjord]

@ember osprey Pointed out that you can use the -r <ip address> to your command. It worked for me.

[ember osprey]

@worthy fjord @umbral sigil Yes , adding -r flag can help . It tells our command which DNS server to use 🙂 . Thanks for adding that @worthy fjord 😄

[scenic torrent]

Gave +1 Rep to @worthy fjord (current: #2553 - 1)

[tranquil shale]

Hi, I have filed a ticket 2 days ago. I haven't received any responses yet. It's a bit urgent.
username - Nul1Ptr

[full barn]

i've completed the AOC event before 31 Dec 2024 , tho i verified my acct today , am i eligible for the prizes? i see nothing in the profile.. how can i confirm this issue?

[ember osprey]

Yes you will 🙂

[devout patrol]

cannot find the wreath vpn download on my access page, i am in subscription at current, and i already tried logging out again. Is the room wreath down for maintenance right now?

[ember osprey]

Have you joined the room and started network beforehand ?

[devout patrol]

i did joined before but never start it , and i decided to give it a go today

[ember osprey]

Try to start it

[devout patrol]

cannot start the network either

Because i remember when i tried the ad lab like 2 months ago, i can see other vpn files available for download before, but right now, there 's just the ad enumeration vpn available for downloading, that 's weird

My subscription end in 2025 july, i just check, which should have no problem accessing the room

Oh wait, i can restart the network now, just leave the room and enter it again and it all goes well, thanks for your helping

[ember osprey]

Does it work now 🙂 ?

[drifting fractal]

is anyone else having issues with openvpn connection? mine keeps dropping, i have even downloaded a new config file but still the same issue plus my internet connection is reliable

[ember osprey]

Try to change server

[burnt tangle]

ok this is a bit hilarious but

there are too many people signed into the windows account so therefore i cant do the room lol

i thought this room was meant for 5 people? or does windows physically only allow 3 people to access the same computer

(also the room is enumerating AD)

[sleek schooner]

If there is somebody from THM staff who is responsible for the security of the website, DM me please. I found a P1 vulnerability

[ivory spruce]

@bronze vale

[ivory spruce]

Please be patient as THM Staff doesn't work on weekends. If you try to submit another ticket, your ticket will end up at the back of the queue.

[bronze vale]

Yes please DM me

[sleek schooner]

Did it, in case you didn't notice 😅

[wary spruce]

I got question regarding subscription. Earlier because THM didnt have subscription catered to my country, so I was paying USA rate. Recently I learned that they finally have THM in my country. So not only i can pay in local currency, its cheaper. How do I transfer?

[neon forge]

Website dead in europe

[crude sedge]

^

Doesn't work for me either, based in Europe too

[weary spindle]

Not for everybody.

It's fine for me, however I've pinged staff.

[autumn sparrow]

Down here also. 500 error

[naive dust]

here we go again... 😦

[upbeat quarry]

same for me

[misty lodge]

mine loading slow ,and sometimes not loading at all

but now got 500

[weary spindle]

Staff are aware. 🙂

Sorry for the inconvenience.

[naive dust]

let's just wait and let them cook

[agile shadow]

I get this error? Uh-"oh! You can only be in 2 scheduled games." although im not in any scheduled games?

[upbeat quarry]

I have just been able to log back in
I am in Europe

[tranquil shale]

Okay cool!

[lean drum]

Hello tryhackme support.
Any updates on this or a email reply woud be nice.
Thank you.

[ember osprey]

I don't think they work on weekends 😦

[glacial leaf]

Hey anyone can help, I am encountering an issue while trying to download the VPN for the Wreath Network. When attempting to download the VPN file, I receive a "500 Something went wrong!" error.

[upbeat quarry]

this may help: #site-support message

[glacial leaf]

Thanks!! I will try that. when I use the AttackBox (as part of my premium subscription) to connect to the Wreath Network, I am unable to ping the target IP address. I also tried running an Nmap scan, but all ports are showing as filtered.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #20 - 480)

[glacial leaf]

@upbeat quarry Can I use AttackBox for same ?

[tawny fern]

Hello guys, I am trying to download config file for OpenVPN from THM but it download only empty .ovpn file. Am I doing something wrong?

[ember osprey]

Try to change server and re-generate file 🙂

[tawny fern]

Nevermind.. I just did it and it works. thanks anyway!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1789)

[tawny fern]

But from 4 options only one works 😄

[upbeat quarry]

you can use THM AttackBox
normally, you would not need to download the VPN config file, but there is usually a problem, hence:

• in THM AttackBox, do ip a
• you need to have a network interface called tun0 with an IP address like 10.50.X.X
• if you do not have that interface with the right IP format, download the VPN config file specific to the Wreath network from the Access Page and run that file with sudo openvpn <VPN_config_file>
• if everything is fine, you should be able to ping the Wreath machine(s)
• if you cannot:
  • regenerate the config file and rerun openvpn
  • if regenerating produces a 500 error, use the Options button to leave/join, possbily multiple times

[distant citrus]

i'm having issues with the openvpn

• https://tryhackme.com/r/access
• regenerated the VPN server file, moved to my Kali and to the folder i want it in (twice now)
• deleted any alias i was using for running openvpn for clearity
• ran sudo openvpn file.ovpn in same directory as .ovpn
• the openvpn shows that the handshake does not happen and there is timeouts
• i have launched the machine and tried to get to the website

-- update
generated a new VPN server file, moved it to kali but left it on desktop and the page now shows a connection ✅ , i have the flag. weird i have connection while the openvpn shows the same stuff

[upbeat quarry]

EU-VIP-1 works for me at the moment (I have just regenerated the VPN config file as a test)
maybe worth checking for you

[harsh fiber]

Hi everyone, I'm having trouble accessing a TryHackMe machine. Here's the issue:

The machine is started, and I can ping its IP and run nmap successfully.
However, when I try to access the website (via browser or Postman), it just hangs with no response.
DNS settings are managed by NetworkManager, and I've tried restarting it and switching to public DNS servers like 8.8.8.8, but no luck.
Does anyone know what might be causing this or how to troubleshoot further? Thanks in advance!"

[distant citrus]

i have mine working now

[upbeat quarry]

I have put a downvote emoji for multiposting 😠

[harsh fiber]

Sorry Im new

[upbeat quarry]

I have answered to you here #room-help message

[distant citrus]

i made a silly mistake and is why i had issues. funny and embarrassing 🤡

[vague apex]

hi
Even though I'm connected to thm VPN, it doesn't recognize me, so Meterpreter doesn't work?

[weary spindle]

Have you set LHOST?

[vague apex]

yea

[weary spindle]

It's failing, that's not meterpreter recognising you.

[vague apex]

what

[weary spindle]

The exploit is failing.

[vague apex]

why

[weary spindle]

I have no idea.

[vague apex]

When I look at the blog and YouTube videos that have updated the room, we are at the same step, but I cannot log in.

[weary spindle]

Which room?

[vague apex]

https://tryhackme.com/r/room/toolsrus

[weary spindle]

That's an old room, the content may be out of date, as MSF has been updated alot since that room.

[near ravine]

how do i unlock the voice channel 🙂

[weary spindle]

You need to verify your Tryhackme profile with your Discord account.

[vague apex]

I know you need to verify your thm api.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 5, 2025, 3:25 PM

[near ravine]

ok slay

[vague apex]

So we need to proceed from the current source

[weary spindle]

I've started the room up.

[weary spindle]

I got a shell.

[vague apex]

lol

[vague apex]

How did you fill these?

[vague apex]

1 min.

[unborn siren]

bro

[weary spindle]

Uh, do you know what that line does?

[unborn siren]

bro seeing this line means your connected successfully

[weary spindle]

No it doesn't.

[unborn siren]

i am stupid so sorry

[weary spindle]

You're thinking of this line

[weary spindle]

I never said you were stupid, I just said it doesn't mean you're connected.

[unborn siren]

sorry bro

[vague apex]

Is it possible for scrubz to break the shell because I am not connected to VPN because the group I am a member of does not recognize me?

[unborn siren]

i meant i made mistake and thanks for correcting

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3199)

[weary spindle]

This page can be broken, you're VPN states you're connected.

[vague apex]

😊

[unborn siren]

can you ping the room ?

[weary spindle]

set LPORT 1234

[vague apex]

kyok according to the answer because I did what you said

[unborn siren]

you have connectivity ?

[vague apex]

yep

[weary spindle]

Your ports are missmatching.

Your RPORT is 1234
LPORT is 5000

[vague apex]

already report 1234

[unborn siren]

so what is the problem ?

[unborn siren]

what is running on 1234 ?

[vague apex]

lport what should I do?

[weary spindle]

They need to match.

So either 1234 or 5000

[unborn siren]

you can set it to anything (if your using msfconsole)

[vague apex]

I call it tomcat

[weary spindle]

Use 1234

[unborn siren]

why ?

[weary spindle]

set lport 1234
set rport 1234

[unborn siren]

bro using wrong rport can cause issue

[digital dove]

Hello,
I'm trying to download Ovpn file for Wreath but I experience a 500 response code
Any solution ?
Thanks

[unborn siren]

talk to me

[weary spindle]

You're getting closer.

[vague apex]

Is there something overlooked?

[upbeat quarry]

this may help: #site-support message

[weary spindle]

Try my ip.

10.10.66.134

[unborn siren]

bro it is site support

[unborn siren]

https://tryhackme.com/r/access

[upbeat quarry]

that reference links to a previous message
this is not a reference to the Site-Support channel

[vague apex]

What did you share @weary spindle

[weary spindle]

The same room. my IP.

[vague apex]

payload

no noo
what is your payload

[unborn siren]

okay

[digital dove]

I'm using this link, but not working

[unborn siren]

what are you getting ?

[digital dove]

HTTP 500

[unborn siren]

are you using any vpn or anything ?

[vague apex]

With which command did you learn this?

[unborn siren]

proxies ?

[weary spindle]

Leave wreath for 15 min(s) and re-join the room, then re-download the VPN

[unborn siren]

🫡

[weary spindle]

search tomcat_mgr_upload

[unborn siren]

bro your literally telling him steps

[digital dove]

No

[weary spindle]

Yes, I am.

Their steps are correct, but it's not working.

[unborn siren]

bro what ? how can it be ?

[vague apex]

So what is your msfconsole version?
my
└─# msfconsole -v
Framework Version: 6.4.5-dev

[unborn siren]

are you satisfied with scrubz solution or should i continue ?

[weary spindle]

6.4.38

[unborn siren]

bro i got the same version it is latest

[vague apex]

Is there any update needed?

[unborn siren]

no it is latest version

[vague apex]

So where is the problem?

[unborn siren]

think things again in a calm mind

like what your doing and what is your goal

how can you achieve it

it will show you what your mistaking with

[vague apex]

My login information is correct

[unborn siren]

can you not show password ?

[vague apex]

huh?

How will that happen?

[unborn siren]

it is against rule

like blurring passwords

[digital dove]

It's not working for the moment, but i keep trying

[weary spindle]

I will clean up after this, please don't mini mod.

[unborn siren]

so should i help ?

[unborn siren]

bro i am trying to help not mini mod

[unborn siren]

use msfconsole -q for quick startups

[weary spindle]

I don't like the quick startup.

[unborn siren]

banner ?

you can get banner with banner command

[vague apex]

I'll turn it on again and try it for a second. pls

It isn't happening

[weary spindle]

Interesring

Can you please use the attackbox?

[digital dove]

it's working for Holo but not Wreath

[vague apex]

I will try it and it will work, but what could be the problem with my machine?

[weary spindle]

Not a problem,, per se.

Just not working

[unborn siren]

what is wreath btw

[weary spindle]

No, quick start disabled some components and parts of the database

[unborn siren]

okay

[unborn siren]

thanks for the tip

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3200)

[digital dove]

https://tryhackme.com/r/room/wreath

[unborn siren]

okay

[unborn siren]

go to task 2

[vague apex]

@weary spindle

I bought the flag, Atac is on Xbox, why did I have such a problem on my machine?

version ?

thm vpn >?

[tidal cipher]

https://tryhackme.com/r/room/metasploitexploitation Task 5 Question:What is the content of the flag.txt file?

I have used the enternalblue exploit and were able to create an shell but i am to dumb to search / find the flag . The Hint is:" You can use Meterpreter's "search" command." but the sessions help menue is telling me " session #3 is not a Meterprewter shell." what am i doing wrong ?

[weary spindle]

Possibly both.

[unborn siren]

yep

[weary spindle]

Are you in a meterpreter shell. or did you move to shell?

[unborn siren]

good question

[tidal cipher]

i just run the exploit and the shell opened

i have no clue how to get the meterpreter shell

[unborn siren]

can you ls ?

[tidal cipher]

no

[unborn siren]

i know how to

[digital dove]

It's working, thanks for you help

[scenic torrent]

Gave +1 Rep to @unborn siren (current: #2560 - 1)

[weary spindle]

Set the payload to meterpreter.

[unborn siren]

okay wait

until you get something

or run commands like ls or help

can you show screenshot ?

[unborn siren]

Welcome, i am glad to help you !

@weary spindle dude i helped someone 😀

[weary spindle]

Excellent!

[unborn siren]

see, i am helpful 🙂

[vague apex]

good day to all of you 🙂

[tidal cipher]

i would love to but it seems i am not able to post pictures here

[unborn siren]

you can bro

[tidal cipher]

i have tested it on my own discord server and there it is possible but i can not post the picture here... do i need a specific role for that ?

[weary spindle]

Yes, you need to verify your account

[unborn siren]

ig you have to be verified

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 5, 2025, 4:16 PM

[unborn siren]

see man i am helping 😇

@weary spindle bro calm down and ignore i can help him too ig so let me so relax and mod general chat 🙂

[unborn siren]

finally !

[unborn siren]

can you reconnect ?

[weary spindle]

This is not a meterpreter shell.

[unborn siren]

yep idk what is it

[weary spindle]

It's a Windows CMD prompt.

[unborn siren]

oh

[brisk jetty]

Hello! I'm having issues with DNS resolution in the AD Lab. I'm using a Kali Linux VM in VirtualBox.

1. Network connectivity works fine - I can ping the DC (10.200.145.101)
2. Port 53 is open (verified with nc)
3. DNS config is correct in resolv.conf with DC as primary DNS
4. VPN is working correctly (breachad interface with IP 10.50.142.7)

When I try nslookup tryhackme.com 10.200.145.101, it fails with timeout. tcpdump shows the DC is responding with ServFail.

I've already:

• Configured DNS through NetworkManager
• Put DC's DNS as first entry
• Restarted NetworkManager
• Used the network reset button
• Tried different DNS clients (dig, nslookup)

According to the lab instructions, the DC should be able to resolve tryhackme.com, but it's not working. Could someone help check if there's an issue with the DC's DNS service?

[tidal cipher]

yes and i was just able to use dir but find and findstr are not working

[unborn siren]

switch to powershell

@weary spindle bro help them i gotta go i am gonna do a thm room and then relax and see you tomorrow

[weary spindle]

sudo nano /etc/reolv.conf

Add the IP as a nameserver

[unborn siren]

ok guys bye see you tomorrow ! 🙂

[brisk jetty]

┌──(root㉿kali)-[~]
└─# cat /etc/resolv.conf

Generated by NetworkManager

nameserver 10.200.145.101
nameserver 1.1.1.1

[weary spindle]

And it still doesn't work?

Can you paste the URL here for the room?

[brisk jetty]

No, it still doesn't work. Same timeout error when trying nslookup tryhackme.com 10.200.145.101
Here's the room URL: https://tryhackme.com/room/breachingad
Thanks!!!!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3201)

[weary spindle]

Ah, ok.

http://ntlmauth.za.tryhackme.com/

Can you reach that website?

[brisk jetty]

I can't! 😦

[weary spindle]

Is network state running, restarting or stopped?

[brisk jetty]

It's running!

[velvet prairie]

anyone else expiriencing lag i think its my vpn...

box vm just freezes when i am within file in console

[upbeat quarry]

if you're still stuck:

• remove /etc/resolv.conf after doing a backup of it
• restart NetworkManager with sudo systemctl restart NetworkManager (that is assuming you had it configured correctly earlier, with 10.200.145.101, as per your message #site-support message )
• you should have a fresh /etc/resolv.conf
  hopefully you can now browse to http://ntlmauth.za.tryhackmeme.com

[zenith cosmos]

´hi can anyone tell me why the openvpn doesnt work anymore for me = i downloaded the file yesterday again but still the same issue

[ember osprey]

Try to run cmd with sudo 🙂

[zenith cosmos]

ok i test it

[midnight loom]

How often do tickets gets answered or replied to?

[zenith cosmos]

1 moment

[ember osprey]

Few days usually , I don't think staff work on weekends 🙂

[midnight loom]

@ember osprey If I have had a ticket in for a week is that abnormal?

[ember osprey]

You should get your answer soon 🙂

It is because of holidays 😄

[bronze kernel]

hello everyone, i was following the free road map for learning on the website.

Then i tought to go premium to make sure i had the virtual machine connected, to complete some questions.

the problem now is that i can't see the free roadmap anymore, i just see the premium roadmap.

Any chance to get back to the path i was following?

[ornate patio]

hello! Im unable to connect to the openvpn. Although i have sudo openvpn'd the file but still the site shows im not connected. Ive tried pinging 10.10.10.10 and also followed the steps of basic troubleshooting. WELP!

[midnight loom]

@ornate patio does it have any cipher errors i had that issue as well opn my kali box

[ember osprey]

Try to change server and re-generate the file 🙂

[ember osprey]

This is the only roadmap available 🙂

https://tryhackme.com/r/hacktivities/

[ornate patio]

shows this : Authenticate/Decrypt packet error: packet HMAC authentication failed

[ornate patio]

did

used to work perfectly before idk what happened.

[zenith cosmos]

dont work

[ember osprey]

Try to change server and re-generate file 🙂

[zenith cosmos]

i tried yesterday this steps

[bronze kernel]

im sure i had the freeone right before going premium 😦

I guess this premium version should be even better, or am i loosing some fundamentals?

[ember osprey]

There's no free/premium roadmap 🙂 . Each path contains rooms that are free and premium rooms 🙂

[bronze kernel]

right ❤️ thanks

[ember osprey]

Maybe you want to access some path or 🙂 ?

[ember osprey]

Try to run troubleshooting script

https://github.com/tryhackme/openvpn-troubleshooting

[ornate patio]

it works!!! thank you! Eu VIP worked!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1798)

[zenith cosmos]

ty i will try it

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1799)

[midnight loom]

I miss my premium, once fixed never ending it lol

[bronze kernel]

nothing specific, basically with no upgrade to premium there was a second roadmap, showing only the free rooms, and i was following that try to get all of them flagged.

but if u say that all the room i already made, are in the path u just linked, it mean i simply have more room to be flagged now.. so i guess ill just keep going xD

[midnight loom]

@bronze kernel I'm doing the same thing picking a path a marking one's I didn't complete

[ember osprey]

You can see a list of free rooms in the 1st link and list of the premium rooms in the 2nd link 🙂 . There're around 1000 rooms in total on THM 🙂

https://tryhackme.com/r/hacktivities/search?page=1&contentSubType=free

https://tryhackme.com/r/hacktivities/search?page=1&contentSubType=subscription

[cyan locust]

Im with the AD laboratory, I have correctly connected to the vpn: breachad, but when I configure the DNS server for the breachad interface things just go off

any help?

It doesn't even reach to host, when it has default DNS settings it does reach

[ember osprey]

Have you added domains to /etc/hosts ?

[cyan locust]

yea

upon that, I configured the DNS server to be the DC

everything goes well until I set the dns server to be the DC

but I need that DNS server for doing the lab

[zenith cosmos]

tried but still the same issue

[ember osprey]

What script tells you 🙂 ?

[ember osprey]

Run it with sudo

[ember osprey]

sudo openvpn <file>

[zenith cosmos]

no difference

the output is the samew

[cyan locust]

redownload the .opvn file

[zenith cosmos]

where i can open a ticket

[cyan locust]

and do sudo ./thm-troubleshoot

[ember osprey]

Try to change server to one from this message #site-support message

[zenith cosmos]

yes ty

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1800)

[zenith cosmos]

VIP worked

[ember osprey]

Glad to hear that , enjoy 😄

[zenith cosmos]

how i can give u a Rep?

[ember osprey]

You already did , thank you 😄

[scenic torrent]

Gave +1 Rep to @zenith cosmos (current: #2560 - 1)

[zenith cosmos]

oh okay fine 😄

[cyan locust]

is there any support that i can text to / open a ticket?

[zenith cosmos]

can anyone tell me how i can get the color scheme kali dark back? i updated yesterday my kali but the kali standars schemes are left..

[ember osprey]

Yes , you can reach it on this email 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 5, 2025, 6:43 PM

[cyan locust]

thanks

[ember osprey]

Go to Personalization/Display settings 🙂

[topaz forge]

hello, im having issues getting my 12 month voucher to work, i got a code but apparently it isnt valid? do the voucher codes expire after a week of being issued? any information would be appreciated

[ember osprey]

AoC code or 🙂 ?

[topaz forge]

AoC code? i won it from a giveaway on X

[ember osprey]

Try to reach out to support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 5, 2025, 7:55 PM

[topaz forge]

thank you @ KGB

[verbal lake]

Hola pueden recomendarme alguna herramienta que no sea fuff y gobuster mas efectiva?

[ashen rune]

I'm stuck on this question: What type of server holds all the records for a domain?

Nevermind, I just can't spell 🤦‍♂️

[lean drum]

emailed them 3 time this past week no solution. i previously changed my account email under which i had my 1st year subscription made.
So I got a subscription that auto renewed, and i forgot it auto renews, but guess what, i also paid a new subscription. basically i paid 2 subscriptions but 1 is under a email i that i previously changed .

Payment issue
Profile image for Bubbles
Profile image for BigFawn
Profile image for Blackout
Submitted • 1w ago
We’ll pick this up soon

Ticket ID
#42453

[weary spindle]

Just wait patiently please.

[zenith cosmos]

no they are delted from the gui after the update nor there are not available as a option in the drop down menu

[quick parcel]

i need help with winodws logs room cant login into the rdp

[upbeat quarry]

you are using THM AttackBox? If not, make sure you start THM VPN on your local attacking machine

[quick parcel]

Yes I was .. was I not supposed to do taht

[upbeat quarry]

just fine there
what is your issue with RDP? Are you using remmina?

[quick parcel]

Yes after it gives me a screen xdrp

asking me for a pw

[upbeat quarry]

when you said the windows logs room, do you mean the Windows Event Logs room?

[quick parcel]

YES

sorry

https://tryhackme.com/r/room/windowseventlogs

[upbeat quarry]

here is what I did with remmina on THM AttackBox: go through the 3 screenshots
on the third screenshot, I have highlighted the 2 controls that allow you to resize the window open with RDP
[I am sorry, but I have to go now 🙃 ]

[quick parcel]

awesome thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #20 - 484)

[quick parcel]

where do i get the server address ? ifconfig?

[marble breach]

URL Scan Report

Report for https://tryhackme.com/r/hacktivities/search?page=1&contentSubType=free

Malicious?

false

[placid ice]

Whoops, was just testing out the app. Didn't realize that would pop up 😄

[tight seal]

is there a 'business sales contact' for TryHackMe ? i sent both an email and website chat the past week with no response - figured new years holiday etc ...

[humble bison]

On the Cyber Kill Chain room, "Reconnaissance" section

[ember osprey]

You can report it in https://discord.com/channels/521382216299839518/748285185803419668 🙂

[dense tiger]

what do i do now?

[autumn kettle]

Do tryhackme rooms have internet access? I am waiting for one of the rooms to do something which requires internet access but I am wondering if there is any sense waiting for it or if I should try other things

[boreal lichen]

Why is it that my Firefox stays loading while using burp suite ?

[ember osprey]

Turn off Interceptor in Burp 🙂

[boreal lichen]

I’m dead. 😵 Thanks hahahaha

[hasty heron]

where can I purchase someone else a THM subscription?

[ember osprey]

There should be an option Gift subscription at top of the page near your profile icon 🙂

[hasty heron]

Got it, ty

[steel cape]

hello

i had made my account using google. But I want to change my email to my college email

is there any way

[ember osprey]

Try to reach out to support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 6, 2025, 7:02 AM

[lean drum]

Hello all,
is tryhack down or experiencing issues ?

[ember osprey]

Works fine for me 🙂

[lean drum]

support works ?

[ember osprey]

They should be working today 🙂

[upbeat quarry]

hopefully you found out that pressing the green Start Machine produces the IP address for the target machine (typically after 60 s, but longer is usual for Windows machines)
and that is the address that you would enter in remmina like I did

[cyan raven]

Anyone know of a guide on using an VM for offsite use? Example: Blue room
The author provides the VM, but no instructions on setting it up.
I got it running but I cannot run tests on the Windows VM. I'm using a Kali VM on my system.
I have OpenVPN working in Kali. I've tried setting my network adapter to Host and NAT and no dice.
Update: Will attempt RDP later today

[lean drum]

Does the support team ever answer any requestss ?????????

[ember osprey]

It can take a few days to respond

[lean drum]

in my case wrote to them over a week ago when i paid the subscription and still no reply.

[weary spindle]

Set the machines in the same subnet, you won't need the VPN or anything.

[ember osprey]

Today , follow THM social media and Discord announcments 😄

[ember osprey]

@weary spindle

[vague apex]

https://tryhackme.com/r/room/brains

flag.txt

/home/ubuntu/flag.txt
It should be in place but I think it's the wrong room.

I know how to open an attackbox and follow the same steps to get a flag, but what happens? I don't have to do this

meterpreter shell

[ionic lance]

hello, i have a premium subscribtion which is active since 26th of December but the site dont let me to access premium rooms. i Contacted support on 26th of December but i got no response. should i send a mail again? what should i do?

would canceling subscribtion and re-activating it debug it?

[weary spindle]

Probably not.

You'll meet mail support again.

However they are going to be busy.

[vague apex]

@weary spindle
Why is this happening bro? I experienced something like this yesterday.

[weary spindle]

Is the flag in the place you specified?

[vague apex]

That's what the people who solve it say

[rugged narwhal]

I'm trying to finish the AoC room and I've been getting a 500 error on Day 16 Azure for several days when trying to get the lab credentials.

[cerulean moth]

If I upgrade to annual subscription instead of monthly can I cancel anytime?

[rugged narwhal]

no I don't think so, it's buying a year in advance

[weary spindle]

https://help.tryhackme.com/en/articles/8282427-refund-policy

Here is the refund policy.

[shell cradle]

Hello, I have monthly subscription, it told me I have 3 open machines (then I can't open another) I only count 1 open. I can't find both others open.

[summer matrix]

when will the winners of advent of cyber be announced??

[ember osprey]

Today, follow THM social media and Discord channel 😄

[ember osprey]

You need to terminate machines in rooms that you completed previously today 🙂 . Machines don't shut down automatically

[shell cradle]

I know that, I opened one room today, there are not machines in other rooms

[ember osprey]

You can see list of running machines here 😄

https://tryhackme.com/api/vm/running

[shell cradle]

the first open is that: ssh://10-10-41-254.p.thmlabs.com:22; the another one is a remote try hack me connection. Can't close it

[cerulean moth]

Isn't the attack machine in the hammer room supposed to open a site when you enter the machine ip in the browser?

Got it

[ember osprey]

It is , why 🙂 ?

[cerulean moth]

It's okay I got to the site.

[livid hull]

I have the same issue 😦

[ember osprey]

Glad to hear that , keep up the good work 😄

[ember osprey]

Seems like a problem on THM side 😄

[west chasm]

@hearty urchin

Changing your country's flag

Article Link

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

Jan 6, 2025, 3:01 PM

[ocean crater]

for related message #general message

[real wraith]

Hi everyone. It's a bit unreleated but has anyone faced issues with buying/upgrading to the yearly subscription? I am using the Indian account and had bought the monthly subscription last month. But now, on the same card, the payment was getting failed. I used more than 10 cards, none of them worked.
Then finally my sister's Canadian debit card worked.

[rugged narwhal]

Ok thanks. In the Advent of Cyber channel people are talking about the same problem

[scenic torrent]

Gave +1 Rep to @livid hull (current: #2565 - 1)

[prime stone]

Hi!
Guys, i am new here.
I need your advise about Path and Hub.
Which is more fundamental and more completely?

[ember osprey]

This part is great for beginning 🙂

https://tryhackme.com/r/path/outline/presecurity

[ember osprey]

Seems like a problem is on THM side 😦

[prime stone]

Thanks, but question is a bit another
i mean:

https://tryhackme.com/r/careers/penetration-tester
or
https://tryhackme.com/r/hacktivities

for example)

[ember osprey]

Do you have any prior experience in cyber-security 🙂 ?

[prime stone]

a bit)
i completed Pre Security and Cyber Security 101

[turbid path]

This isn't so much related to tryhackme but for some reason my VMs network connectivity stopped working. I'm using virt-manager and I just use the default NAT network and I can't figure out the issue.

[weary spindle]

Please use #general 🙂

[turbid path]

oh ok, I wasn't sure since usually those are for general chats, not support. Thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3206)

[weary spindle]

This channel is for support on TryHackMe. 🙂

[last shore]

Anyone having login trouble to the site itself? Thanks!

[ember osprey]

Works fine for me 🙂

[hearty urchin]

Hello
I am from India but the region next to my name is showing united kingdom

[ember osprey]

Check out this article to see how to change your flag 😄

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

[hearty urchin]

thankss it works

🎉

[ember osprey]

Glad to hear that , enjoy 😄

[tepid ocean]

Hey, I don't seem to manage to open the attack box on Soc Level1/CyberSecurity frameworks/Summit

[ember osprey]

Press green Start machine button in Task 🙂

[tepid ocean]

Yup that starts the machine but doesnt deploy the attack box

[ember osprey]

You don't need it for this challenge 🙂

[tepid ocean]

Alright sweet, thanks for helping 👍

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1839)

[burnt tangle]

currently in the exploiting AD room, for some reason my credentials to get into the first account that was given by the distributor link have stopped working.

is it possible that someone's reset my password to troll me?

theres not really any other way my credentials would've changed

yeah im p sure someone changed my creds :/

#roughday

[misty lodge]

explanations about this badges ? (i dont see them in my earned badge , and i joined a long time ago to thm)

[ember osprey]

Try to reach out to support to see what's going on with it 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 6, 2025, 5:44 PM

[misty lodge]

thanks i sent them

[hearty urchin]

😊😊

[misty lodge]

by the way , isnt today is the day of declaring the prizes and winners of advert of cyber? where can i see it

[ember osprey]

Winners were emailed , check your email to see if you won anything 😄

[misty lodge]

lol , ): i dont

[ember osprey]

Sad to hear that 😦 , but don't worry there will probably new events soon 🙂

[misty lodge]

😄 yay

idc cause i learned so much from the event

was fun

[ember osprey]

Me too , that was the point 🙂 . You're doing great , keep up the good work , it will pay off definitely 😄

[rose cliff]

Is there any support here? I need help to unlink my token from my old discord account.

[weary spindle]

Please DM me your token and Discord username it's attached to.

[brisk jetty]

Hey! Just noticed something - while the DC's DNS (10.200.145.101) successfully resolves all the internal *.za.tryhackme.com domains, it fails only with tryhackme.com.

The debugging instructions suggest this might be a problem, but since the DC is resolving the AD domain names fine, I'm wondering if this is actually expected behavior?

┌──(root㉿kali)-[/home/kali]
└─# nslookup ntlmauth.za.tryhackme.com 10.200.145.101
Server: 10.200.145.101
Address: 10.200.145.101#53

Name: ntlmauth.za.tryhackme.com
Address: 10.200.145.201

┌──(root㉿kali)-[/home/kali]
└─# nslookup pxeboot.za.tryhackme.com 10.200.145.101
Server: 10.200.145.101
Address: 10.200.145.101#53

Name: pxeboot.za.tryhackme.com
Address: 10.200.145.201

┌──(root㉿kali)-[/home/kali]
└─# nslookup tryhackme.com 10.200.145.101
;; communications error to 10.200.145.101#53: timed out
;; communications error to 10.200.145.101#53: timed out
;; communications error to 10.200.145.101#53: timed out
;; no servers could be reached

[brisk jetty]

Hey! Just noticed something - while the DC's DNS (10.200.145.101) successfully resolves all the internal *.za.tryhackme.com domains, it fails only with tryhackme.com.

The debugging instructions suggest this might be a problem, but since the DC is resolving the AD domain names fine, I'm wondering if this is actually expected behavior?

┌──(root㉿kali)-[/home/kali]
└─# nslookup ntlmauth.za.tryhackme.com 10.200.145.101
Server: 10.200.145.101
Address: 10.200.145.101#53

Name: ntlmauth.za.tryhackme.com
Address: 10.200.145.201

┌──(root㉿kali)-[/home/kali]
└─# nslookup pxeboot.za.tryhackme.com 10.200.145.101
Server: 10.200.145.101
Address: 10.200.145.101#53

Name: pxeboot.za.tryhackme.com
Address: 10.200.145.201

┌──(root㉿kali)-[/home/kali]
└─# nslookup tryhackme.com 10.200.145.101
;; communications error to 10.200.145.101#53: timed out
;; communications error to 10.200.145.101#53: timed out
;; communications error to 10.200.145.101#53: timed out
;; no servers could be reached

[weary spindle]

You don't need to reach with nslookup

Just access the URL in task 3 or 4.

[simple maple]

When will winners of Advent of Cyber be announced ?

[ember osprey]

They already are 🙂 , check out your email 😄

[simple maple]

Ok thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #5 - 1844)

[solemn patrol]

Hello! Quick question: when working on the AD networks, is there a way we can keep our place to pause overnight and continue on the second day? I keep trying to get through it in one session, but I CANNOT-I can only do about half of the steps/tasks! Then the next day, the network has reset or my connection has been closed and I keep having to start totally over with a new set of initial creds. I'm SO frustrated I had to take a break. Specifically talking about the Exploiting AD network at the moment.

[simple maple]

@ember osprey I didn't receive any email from tryhackme

[ember osprey]

Then you probably haven't won anything this time 😦

[idle nacelle]

We don't have permission write message in #1305926862114914325 ??

[ember osprey]

Yeah , channel seems to be closed 😦

[idle nacelle]

@ember osprey Did you won bigger prize in AOC

[ember osprey]

I haven't won anything this time 😉

[simple maple]

Oh ok . Thank you anyways

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1846)

[idle nacelle]

hahaha, THM published as everyone is winner 🙂

[ember osprey]

I don't remember that 🙂

[idle nacelle]

I mean "All 2,232 winners" hahaha

[ember osprey]

Yeah but there were more than 140.000 users in the event 😄

Only 2232 of them are winners 🙂

[idle nacelle]

Yeah, get it! Wish we both get e-mails 😋

[ember osprey]

There will probably be some other event soon 😄 . Better luck next time to both of us 😄

[idle nacelle]

True! But I really enjoyed. It was my first session

[patent gazelle]

Is there anyone who wins any prize of the Advent of Cyber 2024???
We will love to hear from you.

[plucky fern]

Hello,

i'm a little confused.

From prize raffle terms and conditions
"5. Prize Claim
Winners will be drawn on January 6th, 2025.

All winners will be contacted via the email registered with TryHackMe, and within 7 days of being drawn."

So, does that mean that theoretically you could still receive an email on 13th january?

[weary spindle]

No, all email were sent today

[soft carbon]

Is OpenVPN still working fine?

Connected but i'm not...

[plucky fern]

hmm ok thanks. Guess the terms and conditions are a little bit misleading

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3208)

[soft carbon]

nvm working fine now for some reason xD

[weary spindle]

Winners will be contacted today, then within 7 days another email will be sent to clean prize.

[haughty juniper]

shared via dm

[white glade]

Hello, I am currently trying to complete the MISP room for the SOC Level 1 path and keep having two problems. One is that my tryhackme tab will crash repeatedly. The other is that the machine only ever returns a 502 error message when I try to access it through my browser. I am not using the attack box and access the site through a vm. I not having any problems with other rooms and have never had an issue like this before. Any suggestions would be appreciated. Thank you

[upbeat quarry]

502 or 504 error?

[upbeat quarry]

when the target VM has finished loading, look at the text for Task 3:

• screenshot 1: browsing literally to the URL displayed in the text, i. e. https://10-10-66-155.p.thmlabs.com/ will open the MISP login page
• screenshot 2: but browsing to https://lab_web_url.p.thmlabs.com/, which is the link under the text https://10-10-66-155.p.thmlabs.com/ , will produce a 504 error
  The screenshots come from THM AttackBox, but same behaviour using THM VPN with my local Kali

you may also just browse to the IP of the target VM (it gets redirected to http://10.10.66.155/users/login)

[viral parcel]

I really hoped and prayed for a 3 month subscription voucher. It was what I dreamed of day and night. I'm somewhat heart broken but regardless, congratulations to everyone who got an email. Shout out to who ever won the DEFCON ticket. It's all love at the end of the day.

@ember osprey What were you hoping to win, I'm curious?

[harsh bear]

hey guys, I have purchased a subscription but it is reedemed to an account I never use (google sign-in account I created ages ago) but I have a lot of progress on my school account so I don't want to use it on a 0 level account. I can prove I own the both accounts, is it possible that I can change the account I bought the subscription for? on the purchase it never indicated me where it would go to... I would appreciate if someone helped me on this matter. thank you in advance

[fierce river]

Hopefully someone can help? I'm trying to update to yearly from monthly although the option is not present.

Emailed support who advised: "You can upgrade from monthly to yearly under manage account > subscription > upgrade" although this option is not present, doing some internet lurking I think it's because I've got a student discount and support need to do something on their end, but support keep just telling me to check back to "account > subscription > upgrade" and that i don't need student discount atm with the current 25% off code, but i can't use that if i can't get to the update page.

anyone worth poking here for help?

[ivory spruce]

Have you tried contacting THM Support ([e-mail])?

[harsh bear]

I have after your message, now waiting for the answer. thanks for the help!

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 741)

[ivory spruce]

Please be patient as it may take time as I would imagine there would be a few AOC related tickets still being resolved.

Submitting a new ticket while your existing one is open might result in your ticket being pushed behind the queue

[civic lark]

hello
where should i get informed advent cyber 2024 winner?
I saw notice they're annonce by 01.06

[bronze vale]

Hey,

Emails were only sent out to winners. There will be no announcement -> #1305926862114914325

[civic lark]

oh ok I got it thanks

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1410)

[ember osprey]

Nothing 🙂 . I just enjoyed AoC 😄

[ember osprey]

If you can access http://10.10.10.10/ , everything is fine 🙂

[trim ravine]

is there a referral program? i found one via a google search but it 404'd

[ember osprey]

There's a discount on annual subscription currently if you're looking for that 🙂 ?

[trim ravine]

no i mean, i just signed up for a month and one of my classmates wants to get into this too

is there a referral system for him given im now a subscriber

[ember osprey]

I think that this promotion isn't active anymore 😦

[trim ravine]

no worries, thank you

[rare widget]

hello, I won this grid backpack according to the mail i recieved, but it doesn't deliver to my location... should I contact someone about it

[gleaming basin]

So my country tag shows as UK but I’m not from UK
Can it be changed?

[ember osprey]

Check out this article 😄

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

[gleaming basin]

Done
Thanks!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1854)

[rose cliff]

Is support here?😂

I need help to unlink my THM token

[odd quiver]

I haven't received my email for the AOC winners yet. I'm afraid that if i don't act in time my reward will get cancelled.

[ember osprey]

If you haven't received the email , you haven't won anything 😦

[odd quiver]

But i have completed all the challenge in time and didn't act suspicious 😔

[weary spindle]

That doesn't mean you've automatically won a prize.

[ivory spruce]

You'll have to politely ask a mod to do it for you when you chance upon one. 🙂

[rose cliff]

Hi @weary spindle Can I ask politely of your kind assistance to help me unlink THM token from my old Discord account?

[weary spindle]

Your account is unlinked. 🙂

[rose cliff]

Thanks a lot for your effort in helping me 🙏

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3209)