site-support

[misty lodge]

wanted to report , that since the yin-yang machine (like about this date) machines in try hack me getting close on me ,saying it terminated ,attackbox & machines

i dont know why this bug , its very annoying working on a machine and need to do it all over again

[wary spruce]

I got question regarding subscription. Earlier because THM didnt have subscription catered to my country, so I was paying USA rate. Recently I learned that they finally have THM in my country. So not only i can pay in local currency, its cheaper. How do I transfer?

[ivory spruce]

Can you share the link to the room?

[misty lodge]

actually its good that you asked that cause its the same room , im doing side quest 5 now and having the same issue i had with yin and yang which is side quest 2
https://tryhackme.com/r/room/adventofcyber24sidequest

[odd quiver]

I think i should wait. AOC Terms and conditions page AOC 2024 terms and conditions page says they will be contacted by email within 7 days of being drawn.

[radiant drift]

anyone from support team??

[ember osprey]

Yeah but the drawing was yesterday 🙂

[ivory spruce]

This discord is the official THM forums although there are THM Support guys here. The prescribed and/or recommended way of reaching out to THM Support would be via email

[west chasm]

@radiant drift

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 7, 2025, 10:04 AM

[scarlet heart]

I am one of the lucky winners of AOC. I did win a 3 month subscription, but already being subscribed would I have to cancel my subscription and then add my 3 month winners subscription?

[ember osprey]

You can wait for your sub tonexpire and use the voucher then 🙂 . As far as I know vouchers don't expire 🙂

[scarlet heart]

So I would have to cancel my sub and then attach the 3 month sub.

[ember osprey]

You can cancel , wait for until it expires and then use the voucher 🙂 .

[scarlet heart]

Thanks I will do that.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1860)

[misty lodge]

of course im talking about machines that terminated before the time ends

[radiant drift]

I have already sent the email

[coarse matrix]

Hello there, any support staffs online?

I have a couple of questions.

#1. I have a personal subbed account and my school is asking me to create another one for school use. The school account has 1 year sub as well. Can I merge both accounts into one?

#2. How do I get verified here?

[hoary stratus]

Hello all!
Somehow, I have only 19 days streak, even though my yearly activity is all green for at least last 40 days. Can somebody take a look at it, and tell me what day I missed?

[weary spindle]

You can't merge them, they'll be standalone accounts.

To get verified,.you follow this link

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 7, 2025, 11:03 AM

[heady epoch]

I'm wanting to subscribe to an annual subscription with the 25% new year discount and was wondering if i could further apply the 20% student discount after on top of the 25%?

[dull yacht]

Heyy, can anybody help, i am getting this error on my openvpn

2025-01-07 05:41:04 Authenticate/Decrypt packet error: packet HMAC authentication failed
2025-01-07 05:59:06 Authenticate/Decrypt packet error: packet HMAC authentication failed

using openvpn 2.6.12

[weary spindle]

It worked last year, so probably.

[ember osprey]

Try to change the server and re-generate the file 🙂

[dull yacht]

okayy

[ember osprey]

Try few servers and wait 2-3min after you download the file 🙂

[dull yacht]

got itt

thanks @ember osprey

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1864)

[proven turret]

AoC2024 Day 16 Azure worked for me today, so I guess it is fixed now.

[rugged narwhal]

Working for me too, thanks for the reply!

[scenic torrent]

Gave +1 Rep to @proven turret (current: #2572 - 1)

[pastel holly]

still seeing the same error message when trying to subscribe to New Years flash sale. No response from support yet, anyone else seeing this?

[ember osprey]

Only support can help you with payment related issues 😦

[pastel holly]

Support doesn't monitor this Discord, right?

[ember osprey]

They do sometimes , but you will need to contact them over email 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 7, 2025, 2:08 PM

[visual cobalt]

Hey I have terminated all of my VM's however when trying to start a new one I get an error that I still have my VM's turned on. I tried pasting a command I found on Reddit to terminate the VM's using the API however the CSRF Token is not found. Does anyone have an updated version for that command ?
Thanks in advance

[ember osprey]

Try to restart your browser 🙂

[visual cobalt]

Nope not working

[ember osprey]

Try to go to some rooms you did earlier today and see if everything is closed 🙂

[visual cobalt]

Well I found that the unattended room was spawning multiple VM's (i terminated at least 4 tabs spawning after each other was closed). Thanks for the insight.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1869)

[normal raven]

Hey in my dashboard they are telling me i got the First Five badge, but when i go in my badges i have nothing ?

[ember osprey]

Yeah , seems like a lot of users are reporting that same issue 😦

[delicate lantern]

Hello guys, so what situation with Advent of Cyber 2024 results? I mean, will there winner list or something? January 6th gone

[weary spindle]

All winners were E-mailed.

[delicate lantern]

I got it

😦

[modest apex]

I recieved through aoc rewards a discount coupon from merch? do i redeem it at check out or do I have to do it someplace else?

[weary spindle]

In the checkout of the swag shop.

[golden pelican]

Hello, everyone, been trying to connect via openvpn, but no matter how many times i regenerate config, it is always returns the same error: "tls handshake failed", then tries to restart, but nothing new happens, what to do? I cant paste photos directly, so there is imgur: https://imgur.com/a/KROqXTM

[weary spindle]

Which country are you in?

[golden pelican]

Russia

[weary spindle]

That may be the reason, Russia have started blocking VPN's.

[golden pelican]

Thats bad, is there anything, that i can do?

[weary spindle]

Use the attackbox is your only option I'm afraid.

[golden pelican]

Oh, ok, still big thanks for the help, have a good day!!!

[woven rampart]

Is the wreath room down

[upbeat quarry]

no, it is not, but first: can you confirm you are a subscriber or have a 7-day streak as these are the conditions to join any network room

[steep steeple]

can someone help me get to the lookup.thm site

[dull cradle]

Edit the /etc/hosts file and add the IP and domain i.e. IP lookup.thm

[steep steeple]

it keeps saying "Hmm. Werehaving trouble finding that site."

@dull cradle im using their own attack box

[dull cradle]

You can still edit the /etc/hosts file.

[dull cradle]

echo "<IP> lookup.thm" >> /etc/hosts

[steep steeple]

thank you so much

[coarse matrix]

thank you so much !

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3217)

[woven rampart]

I'm a subscriber

[upbeat quarry]

then I guess you downloaded the VPN config file specific to Wreath and made sure the network is in the state of Running
if you cannot ping the Wreath IP:

• regenerate the VPN config file, and wait 2-3 minutes before downloading again
• if that fails again, use the Options button to leave and join back (allow possibly 15 minutes to join again): you will be allocated a different network instance so you can repeat the VPN procedure for that next instance
• you may have to do the above multiple times

[golden laurel]

hello i don't know if im in the right room but i have a problem that when i turn on attack box form a ctf for example Friday overtime i cannot lookup anything in google its just nonstop loading

i had this problem on other websites too don't know what to do im using brave browser

windows 11

[ember osprey]

Do you have proxy enabled or are you using Burp ? Maybe Burp Interceptor is on 🙂 .

[golden laurel]

no i haven't even intsalled burp on brave and i tried to turn off brave shield still nothing

[hazy bridge]

@west chasm hello I'm having issues with the VM on Active Directory Basics, the machine opens but shuts down unexpectedly while I am still working. Also powershell in one instance did not allow me to type in lower case, only managed to do that by keeping the caps on and using shift to type lower case. Upper case was ok. This one problem I managed to solve after reseting the web browser.
FYI I am using windows edge on windows 11 up to date.

[marble thunder]

having same issue guys

in same room

im using firefox from linux, dont think the platform is involved here

update: instead of closing and restarting a new VM i waited about 10 minutes and it reconnected finally... but the issue still happened 4 times in the past 30 minutes

[ivory spruce]

The one you tagged here is a bot, and thus will not respond.

[ivory spruce]

Is this the browser from the Attackbox or your own attack machine?

[golden laurel]

attackbox but nvm it loaded the page i needed to finish the room

[hazy bridge]

Ohh thank you, so what do I do know to finish the task? Maybe a different browser?

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 742)

[marble thunder]

just for reference, for me was the browser of my own machine. Managed to finish the room anyway

[idle adder]

I am attempting to verify my account, but having issues, what is the best way of getting support?

[ember osprey]

Check out this article 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[idle adder]

Have done the steps on there without any success and pinged jabba but no response

[ember osprey]

What's the problem 🙂 ? What happens when you use /verify <your-token> ?

[idle adder]

says its in use elsewhere

[ivory spruce]

Do you perhaps have another account you could have used it on?

[weary spindle]

Can you DM me your token?

[ivory spruce]

Are you using your host to connect to the THM network?

[snow vigil]

Hey If I get accepted for student discount will it work together with the new year code?

[wind veldt]

excuse, i see THM has premiun yearly, i can't subscribe it because region,how can i solve this problem,(I don't have vpn)

[viscid viper]

what is zip in try hack me premium

[ember osprey]

Which zip 🙂 ?

[ember osprey]

Try to reach out to support 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 8, 2025, 1:20 PM

[wind veldt]

ok, thank

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1892)

[viscid viper]

in billing address

what is zip in billing address

[snow vigil]

Your city's postal code

[silk thorn]

im having problems with openvpn file

[ember osprey]

Try to change server and re-generate a file 🙂

[silk thorn]

i did

all of them 😭

well eu since their the closet

[upbeat quarry]

allow 2-3 minutes before regenerating and downloading
if the VPN files are the same before and after regenerating, you know you did not wait long enough
to make sure the files are different, make a hash of them (for intance with md5sum command)
if you are a subscriber, give priority to the VIP VPN servers, as they seem to be more stable in my experience

[silk thorn]

kk

[oblique turtle]

I'm having trouble with my VPN file, tried to regenerate the file and change server :

2025-01-08 15:05:41 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2025-01-08 15:05:41 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-01-08 15:05:41 OpenVPN 2.5.11 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 17 2024
2025-01-08 15:05:41 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2025-01-08 15:05:41 OpenSSL: error:0480006C:PEM routines::no start line
2025-01-08 15:05:41 OpenSSL: error:0A080009:SSL routines::PEM lib
2025-01-08 15:05:41 Cannot load inline certificate file
2025-01-08 15:05:41 Exiting due to fatal error

[upbeat quarry]

#site-support message
#site-support message

[oblique turtle]

same hash even after waiting 10 minutes

changed server, allat

[upbeat quarry]

can you try EU-Regular-4
I have just used it now, and it worked for me

[oblique turtle]

it just worked now

thanks :)

[upbeat quarry]

which VPN server?

[oblique turtle]

eu 4

[weary spindle]

Which country are you in?

[oblique turtle]

france

[white plover]

Guys, I can ping the ip address given in the room. But I can't access the web.

[weary spindle]

We need more context.

What room are you doing?

[white plover]

The sticker shop

Nmap also worked it shows 2 ports open 22 and 8080.

I also tried etc/hosts. Still not working

[weary spindle]

And what are you entering in the address bar?

[white plover]

The ip address, but after putting it in the hosts file I'm entering the domain

[weary spindle]

So you're just trying http://10.10.10.10/ ?

[white plover]

Actually, I tried all the ways lol. 10.10.10.10, 10.10.10.10:8080, http://shop.thm/, and with the port as well.

None working

[weary spindle]

http://10.10.10.10:8080/flag.txt ?

[white plover]

Yeah did that as well

[weary spindle]

Can you screenshot?

[white plover]

The browser?

[weary spindle]

Of the webpage when you try to access it.

[white plover]

Well, it just says the connection timed out

[weary spindle]

Have you tried to change your MTU?

[white plover]

Nope

[rain osprey]

hello, I have a technical issue with the attack box sometimes. When I put my mouse on the left side of the window to use the menu, sometimes it appears sometimes not. Someone knows why please ?

[white plover]

Should I?

[weary spindle]

sudo ip link set dev tun0 mtu 1200

[brisk osprey]

Hey! Im sorry if im going against any rules in this channel but Ive been having trouble purchasing the premium in india. It says the bank issuer denied the payment but when i contacted my bank, there is no such denial through my debit card. I submitted a ticket five days ago, it hasnt been responded with. Can anyone please help?

[ember osprey]

Try to contact support for payment related issues 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 8, 2025, 3:02 PM

[brisk osprey]

I have done that and i am waiting for a response since a lot of days. Any other way around?

[ember osprey]

Not realy 😦 . Only they can help you with paymemt related issues .

[dry rover]

Has anyone had a problem with academic account that university has deleted email account? I used to login with Google's OAuth, unfortunately
I finished the course and I'm going to enroll in the master's degree, I'm waiting to enroll, but because I stopped being a student even for a short period, it was deleted

[cerulean moth]

Is the admin site from expose practice room supposed to have a not working login? I've tried a test login and nothing happens.

[ember osprey]

Which room ?

[cerulean moth]

expose

[cerulean moth]

expose

[ember osprey]

Yeah , it should work 🙂

[jovial axle]

https://tryhackme.com/r/room/virtualizationandcontainers

in this when running minikube start , it says command not found

[ember osprey]

Are you sure that you're using the right machine ? Task 5 and Task 6 have different machines 🙂

[jovial axle]

Oh :/ The start machine button is disabled for task 6. I guess I need to terminate first machine.
Thanks @ember osprey

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1898)

[ember osprey]

Yes , terminate machine from Task 5 first , refresh the page and then start machine from Task 6 🙂

[cerulean moth]

Well it's not. Did you try it? Where to report it?

[ember osprey]

Report what 🙂 ? Form is vulnerable , you need to exploit a vulnerability to bypass it 😉

[cerulean moth]

The form is not working, when you enter the credentials and click to log in nothing happens the login button is not functioning

[ember osprey]

Try to inspect request flow in Burp 🙂

[cerulean moth]

I did nothing is happening

[ember osprey]

You need to enable Proxy beforehand

[cerulean moth]

You mean in the browser? It's enabeled I can capture other traffic.

[ember osprey]

Can you provide a screenshot ?

[fervent halo]

https://tryhackme.com/r/room/breachingad
i'm getting problem while configuring DNS in the ATTACKBOX in above lab, some body can help ?

run the same comand as per instructions for DNS configuration

[ember osprey]

Maybe try to also add domains to /etc/hosts

[fervent halo]

okay let me try

[weary spindle]

Do you have the breached interface?

[fervent halo]

yeah

checked I can see the interface with name breachad:

[weary spindle]

check the #breaching-ad pinned posts.

[fervent halo]

okie

[honest pine]

My paused Premium subscription was reactivated without consent on Jan 5th, but can’t access Premium rooms. My account says it’s active, yet it prompts me to subscribe again. THM Username DroidBot

Emailed support—no response.

[weary spindle]

When did you E-mail?

[honest pine]

2 days ago

[weary spindle]

Ah, yeah.

Support will be very busy, and will take slightly longer to reply.

[honest pine]

How can I send screenshots

DM?

[weary spindle]

No thank you, this is a support related issue, so you'll need to wait for Support to reply.

[honest pine]

so there is no channel for support?

[weary spindle]

Account/billing are only done via E-mail.

[honest pine]

coz I didn't resume my sub. It got activated automatically, the site says its active when I go to the accounts section, but when I go to any room it prompts me to get premium

and though I can't access anything I am still being charged for it

[weary spindle]

I'm sorry, but there is nothing we can do here.

You will need to wait for support to reply to your e-mail.

[honest pine]

does THM typically provide an extension as compensation for the time lost due to such issues?

[weary spindle]

I can't say.

[honest pine]

ok

[cerulean moth]

Here is the screenshot of the attempt.

[ember osprey]

Click Continue

[cerulean moth]

Really?? I mean I already told I did and it doesn't do anything

[ember osprey]

What's your URL ?

[cerulean moth]

Http://ipofthevm:1337/admin

[ember osprey]

That doesn't seem like a URL where form should be , try to perform directory enumeration again

[cerulean moth]

And what should go after the ip and the port? I enumerated with gobuster and fuff. I'm afk right now but soon I'll get to the pc.

[cerulean moth]

http://10.10.234.219:1337/admin here you try it, none of the wordlists found anything new

http://10.10.234.219:1337

[hazy bridge]

Yes, it’s been working with all other rooms ctf’s etc… only this room is giving me issues

[upbeat quarry]

are you having this issue while using the target VM in Split View, like in screenshot

[hazy bridge]

Yes 👍🏻 @upbeat quarry

[upbeat quarry]

in parallel to the Split View instance, are you also trying to RDP (from THM AttackBox or your own local VM) to the target VM?

[muted quiver]

Hi someone can help me. I did the payment to hire TryHackMe so, how can I make sure that I got try to hack me?

[hazy bridge]

I was using attackbox from thm

[ember osprey]

Which wordlist are you suing ? There should be an additional admin page 🙂

[idle hare]

Guys my openvpn file isn't working, it's giving an HMAC authentication failed error, any idea what's happening?

[ember osprey]

Delete your file , change VPN server , re-generate a new file and try to use the new file 🙂

[sullen junco]

Hi guys can anyone give me a hint on this room https://tryhackme.com/r/room/baselineanomalies and Task 3? I have read it 10 times and try to figure out why the answer is wrong. I have tried all combos after many hours reading and searching.......

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 🙂

[idle hare]

not helping

still the same issue

[ember osprey]

Try to run this cmd sudo ip link set dev tun0 mtu 1200

[idle hare]

it works, thanks, but can you tell me what exactly was the issue and how this resolves it?

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1914)

[ember osprey]

MTU issue , we set MTU to 1200 bytes 🙂

[idle hare]

Mtu?

[ember osprey]

Maximum Transmission Unit 😄 , how big is each packet 😄

[idle hare]

Ohh, so i assume that the packets size were exceeding its limits?

[ember osprey]

Yeah , probably 😄

[idle hare]

Thanks bud 😄

[ember osprey]

Anytime 🙂

[junior zenith]

Some of the texts in DarkMode isn't visible properly (text-dark on darkmode)

PS: I'm unable to attach the screenshot here
@west chasm

[ember osprey]

Hi , you have to verify in order to upload images 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[junior zenith]

On it

[cerulean moth]

I tried couple of them from the attack machine, like directory-list-2.3-medium.txt directory-list.txt directories.jbrofuzz...

[junior zenith]

Thanks for the help.

Regarding the issue, this is i found yesterday while trying dark mode.. i noticed in few more rooms too. Happens in darkmode only

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1917)

[junior zenith]

Is this happening to anyone else?

[ember osprey]

Try to use big.txt wordlist

[ember osprey]

Thanks for noticing this , seems like there's a problem with this room and dark mode . You can report it in https://discord.com/channels/521382216299839518/748285185803419668 channel 😄 .

[scenic torrent]

Gave +1 Rep to @junior zenith (current: #2576 - 1)

[cerulean moth]

Found it 😁 , thanks for the tip

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 1918)

[ember osprey]

Congrats , +rep @cerulean moth for not giving up 🙂

[scenic torrent]

Gave +1 Rep to @cerulean moth (current: #2576 - 1)

[untold sleet]

i can not connect with openvpn

[weary spindle]

Which server and OS are you using?

And which country are you in?

[untold sleet]

in regular and i using linuz

-linux

india

[untold sleet]

me device is connected but site showing not connected

[weary spindle]

Can you curl 10.10.10.10/whoami ?

[untold sleet]

ya

[weary spindle]

Then you're fine.

Ignoe the access page

[untold sleet]

ok

[ocean crater]

How can I know how my ranking is after knowing my score? https://tryhackme.com/api/v2/rooms/scoreboard?roomCode=adventofcyber2024&limit=100 (if there even are blood points or score modifiers on AoC)

[ember osprey]

No blood points for main quest as far as I know 🙂

[weary spindle]

Unless staff tell you, you don't.

They don't give out public information on using the API.

Ranking for the Advent of Cyber 2024 room isn't really great, everyone will have the same number of points.

[ocean crater]

Yeah, but can you find out the max you can get with blood points and the amount you would have gotten if you didn't get any blood points?

[ocean crater]

Alright, thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3223)

[radiant drift]

Will shipping charges be deducted from the gift card or we have to pay separately

[radiant drift]

@west chasm

[ember osprey]

That's a bot 🙂

[radiant drift]

Any staff member

[radiant drift]

Don't know the relevant person that's why referring like this

[weary spindle]

Shipping charges are not reducted from the item.

[radiant drift]

If there's money left in the card then still ..

[weary spindle]

It still isn't applied to shipping.

[radiant drift]

Are you the member of thm

[weary spindle]

No, I'm just a community moderator.

[radiant drift]

Any other way to use the card

[weary spindle]

Just for swag in the shop.

[radiant drift]

Other than buying

[oblique turtle]

I have a problem when trying to access machine, my VPN is working correctly (i can access 10.10.10.10 AND ping the machine i'm trying to access at 10.10.111.96), but i can't access it with firefox at 10.10.111.96:8888

[ember osprey]

Which room ? Can you provide a screenshot 🙂 ?

[oblique turtle]

OWASP TOP 10, can i post screenshot here ?

[weary spindle]

That port isn't open.

[oblique turtle]

To see this in action go to http://10.10.111.96:8888 and try to register a

[ember osprey]

Yes , of course . You will have to verify first 🙂

[oblique turtle]

oh okok

[ember osprey]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[ember osprey]

Check out the link above 🙂

[weary spindle]

Are you supposed to use port 8888?

[ember osprey]

Which task ?

[oblique turtle]

I guess so, task 7 is the last task that provided me a link, i'm trying to do task 11

[weary spindle]

Can you post the URL link of the room?

[oblique turtle]

https://tryhackme.com/r/room/owasptop10

[weary spindle]

Did you terminate the box from Task 5 and start the one in Task 7?

Which server/OS/country ?

[oblique turtle]

lemme check

[weary spindle]

The machine is called this.

Use Eu-Reg-3 inside Kali.

[oblique turtle]

wasn't the same title, thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3224)

[oblique turtle]

https://tenor.com/view/elhadj-monkey-rio-de-janeiro-riodejaneiro-singe-gif-10861247354169364583

[weary spindle]

cause it works.

[oblique turtle]

ça m'a fait la même, j'ai juste attendu 10-15 minutes j'ai gambergé, je change de région (eu4) puis je regénère, je check avec md5sum si le hash entre les deux fichiers est le même (si différent alors il est bien regénéré) et après je relance avec openvpn

[fluid lantern]

I got a issue with the machines, when ever i start them up they just turn darkblue...

[ember osprey]

Are you running openvpn command with sudo ? Which OS ? Are you using WSL maybe 🙂 ?

[weary spindle]

@naive dust please, we use English in this server.

[fluid lantern]

how do i get roles?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 9, 2025, 2:04 PM

[weary spindle]

@fluid lantern ^

[fluid lantern]

❤️

any help for this issue?

[ember osprey]

Which OS are you inside of VM or on host machine 🙂 ?

[fluid lantern]

yea vpn isnt working either rn

[weary spindle]

@opal pecan

[ember osprey]

Where are you running VPN ?

So , on VM only ?

Try to run this cmd sudo ip link set dev tun0 mtu 1200

I mean you aren't running VPN on both VM and host machine at the same time

🙂 ?

Yeah , that's how it should be , can you provide some screenshots of what's going on 🙂 ?

[weary spindle]

What PC are you running the VM in?

[ember osprey]

Can you try to delete that file , change server to EU-4 for example , click re-generate and download a new file

[weary spindle]

Maybe the work network is blocking the VPN connection?

If it's not you PC, we generally don't give advice on work arounds as we don't know your orgs policy.

See my point above.

[ember osprey]

Can you try to use AttackBox if that's the case 🙂 ?

[weary spindle]

The VPN is free, it's not a paid addon.

We don't know that for certain. 🙂

You pay a subscription for different benefits, such as unlimited time on the attackbox, network rooms and some paid for content.

If you're blocked from using the VPN on your work computer, I'm sorry. there is nothing we can suggest to help get the VPN to work.

[open berry]

I am in the new baselines and anomalies room and when I am running in the attackbox, if I attempt to go to the site for elastic I get an error that the attackbox browser does not meet the security requirements. ANyone seen this yet, or know how to fix that issue?

[ember osprey]

Try to access site in your own broswer , you don't need VPN for this room 🙂

[open berry]

same exact error.

we are fully updated too, so it shouldn't be an update issue

[ember osprey]

Works fine for me , can you provide some screenshots of what's going on 🙂 ?

[open berry]

I'd love to, but apparently I cannot in this chat...

I log in, the system spins, shows me a generic dashboard with the error on the right side of the screen that states "Your browser does not meet the security requirements for Kibana."

exact same process when I run on a local machine, not in attack box, etc.

I have baselinesv1.3 running as well (start machine button for me)

I should correct... I don't log in... I am never presented with a login... I go to https://10-10-18-7.p.thmlabs.com/, it loads elastic and then gives me the generic dashboard with the above error

[lethal bay]

my machine are not working

when i start it it don't appear on the screen

[open berry]

I will just try again on my personal machine via VPN tonight and see if it works.

was just curios if there was a setting I was missing

[lethal bay]

i am not a premium member also

but still the rooms machine should work

[ember osprey]

Some machines are not accessible in split screen view 🙂

[ember osprey]

You have to verify in order to upload images 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[open berry]

guess I will do that again... Did prior at least once, but why not again 🙂

this is the error

like I said, I will try again on my personal machine tonight... I just found it strange that within attackbox I also got this message since I would have assumed that the attackbox was configured to complete a room

[ember osprey]

Yeah , it is strange indeed 🙂

[humble sleet]

I need a help, I can't access any webpages of the rooms when I connect to my mobile data through mobile hotspot. But I access them when I connected to a WIFI in my institute.

[weary spindle]

Your mobile hotspot may not be giving the needed connection for the web pages.

[void cypress]

Hello

[ember osprey]

Hello , welcome 🙂

[void cypress]

I have won the headphone from advent of cyber but the shipment for my country is not available ?

@ember osprey

[ember osprey]

I think that you will need to contact support directly for that 🙂 . You can contact them on email below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 9, 2025, 4:27 PM

[opal pecan]

Hey, Is this for one of the Linux or Windows Fundamentals rooms? We have had some issues recently with these rooms but just for some people. Apologies about this. I'll DM you now a and get your THM username.

[desert veldt]

In the Nmap Basic Port Scans room on task 5, the ports in the answer are not open/seen on nmap. Who do I reach out about this?

[ember osprey]

Try to ask here https://discord.com/channels/521382216299839518/522158539129618453 🙂

[knotty oxide]

Hey Guys, in the Gobuster The basics room, whatever I do the www.offensivetools.thm service is "not known"

I did the config in task2

Does somebody knows why?

[ember osprey]

Add domain to /etc/hosts 🙂

[knotty oxide]

Seems to work !

thanks !!!!!

[ember osprey]

Glad to hear that, keep up the good work 🙂

[umbral dawn]

i can't download the openvpn config it give me an empty file due to a 403 forbiden while downloading it 😭

😭 😭 😭

HTTP/1.1 403 Forbidden
Access-Control-Allow-Origin: https://tryhackme.com
Access-Control-Allow-Methods: HEAD, GET, PUT, POST, DELETE
Access-Control-Expose-Headers: ETag
Access-Control-Allow-Credentials: true
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 8JMA91EHFZRTE94C
x-amz-id-2: 2qgrRBpiKoRbJmWeJCJQL6gzlXhN8IVVIU1ORbGQO4JePNj8dEF32sFEXi93515KG13/CpqzaJk=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Thu, 09 Jan 2025 20:30:38 GMT
Server: AmazonS3

[robust hatch]

guys why does the support take sooooooooooooooo long to respond? it's very annoying

[weary spindle]

Support are very busy.

[umbral dawn]

well i figured it out i just did it manually

[drifting yoke]

For everyone having trouble with OpenVPN und connecting to a Server: After hours and hours of troubleshooting today , the solution was to put the .ovpn file on the Desktop. I downloaded the file multiple times, sometimes it was just empty, sometimes it had the necessary data. And I tried to put all rights on the file, reloaded the file etc, put it in a TryHackMe folder in /kali/home, left it in the Downloads folder and so on. Nothing worked. In the end, the problem got solved by simply putting the file on the desktop. Don´t know why but I am really happy that it finally worked and maybe I can save someone in the future from these struggles

[umbral dawn]

It could all be just a graphical issue ?

[muted quiver]

Buddies how to solve the stopping if my screen shows me when I'm starting a Linux machine: Room progress (4%) "it keeps stopping, don't continue" help!!!

[vast crow]

I've been running into the same issue in the gobuster room. Adding the domian to /etc/hosts seems to work when using gobuster to do directory enumeration. However, when the room asks to use gobuster for dns enumeration this path forward doesn't seem to work. Using the -r flag to specify the IP address of the resolver seems to work for me. Hope this helps if anyone else finds themselves in this situation.

[worn spear]

Does TryHackMe offer discounted subscription vouchers for people in Pakistan? I recently received an offer and want to verify its authenticity. I am attaching message of the offer for reference.

"Tryhackme Premium Vouchers
Price Updates✅
1 month 7 USD
3 month 16 USD
1 year  40 USD

✅Payment Method.
🔥 Any bank account or easy paisa
🔥Binance, any crypto (BTC,LTC, USDT or any)
🔥💥💥Special Discount Available for Pakistani "

[neat kernel]

Hey, I dunno where to write a site bug, so I'll leave it here.
Phishing Analysis Tools room, task 8.
Question: What Windows process was flagged as Potentially Bad Traffic?
I looked through all the report from any.run, but found no answer. After looking at walkthrough I found that in my case there was no answer. I had "Potentially Bad Traffic" place, but there was no process nor pid written.

[tardy cargo]

#site-bugs 🙂

I’m sure it will be fine here

But maybe more help would be there

Not sure I’m new here

[autumn knot]

Is the holo network down? I can not start it. It says "Uh-no Failed to start the network"

[ivory spruce]

@bronze vale

[weary spindle]

This would be for #room-bugs

[upbeat quarry]

press the Options button to leave, and then join back (best probably to wait 15 minutes)
you will be assigned to another instance of the network
that trick just worked for me now

[autumn knot]

Thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #19 - 493)

[sand crane]

Is it recomended to have VPN when using the machine on tryhackme?

[ember osprey]

Yes , you need to use VPN to be able to access THM machine from your own machine 🙂

[livid breach]

Hello, I have a problem when I try to connect to the VPN via the OpenVPN app. I can't connect, and it shows me the error code:
"Fri Jan 10 10:56:06 2025 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 10 10:56:06 2025 TLS Error: TLS handshake failed"
https://cdn.discordapp.com/attachments/1315733790798254155/1327197802664558593/78.PNG?ex=678230c6&is=6780df46&hm=9a12a4a14a2ad0ce90db7cc2bfa6a2976d388bcff77867dbc183b3764587c73f&

I have already tried on Windows, Linux with different connections, with different PCs, and with all the European servers.

[idle hare]

ffuf -w usernames_gmail.com.txt:W -u http://enum.thm/labs/verbose_login/functions.php -H "Host: enum.thm" -H "User-Agent: Mozilla/5.0 (X11; Linux aarch64; rv:102.0) Gecko/20100101 Firefox/102.0" -H "Accept: application/json, text/javascript, */*; q=0.01" -H "Accept-Language: en-US,en;q=0.5" -H "Accept-Encoding: gzip, deflate" -H "Content-Type: application/x-www-form-urlencoded; charset=UTF-8" -H "X-Requested-With: XMLHttpRequest" -H "Origin: http://enum.thm" -H "Connection: close" -H "Referer: http://enum.thm/labs/verbose_login/" -d "username=W&password=password&function=login" -X POST -t 100 -ic

uhh guys for some reason its not even sending any request

[weary spindle]

do you have enum.thm in your hosts file?

[upbeat quarry]

what happened yesterday after this: #room-help message ?

[livid breach]

Nothing more, still the same error message.

[upbeat quarry]

that was with EU-Regular-4 right?
did you regenerate the VPN file when you got the error again?

[void cypress]

hello

shy

KGB do you remember me , i contacted them with that mail you gave me but no respose

[rose cliff]

Hi, can ask how can I change THM country's flag?

[ember osprey]

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

Check out this article 🙂

[ember osprey]

It can take a few days for staff to respond

[rose cliff]

Hmm, I click http://tryhackme.com/api/user/update-timezone but nothing happened. My current flag is Singapore, but I am from Malaysia

[ember osprey]

Follow instructions from the link above

[rose cliff]

Ok it worked now, hahaha Thanks

Have to refresh multiple times

[ember osprey]

Yeah , sometimes it can take a few tries 🙂

[livid breach]

I tested with 1, 2, 3, and 4, and it’s the same. Yes, I regenerated the VPN files at least 8 times.

[upbeat quarry]

are you available to make a few tests now, in parallel with me?
if yes, in advance of that, please verify with Discord using the link below so you can share screenshots

[west chasm]

@livid breach

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 10, 2025, 10:56 AM

[bronze vale]

Hey there,

TryHackMe offers regional pricing.

Do not purchase from unofficial TryHackMe sellers. These are often fraud and will result in your account being banned permanently.

Furthermore, TryHackMe does not offer crypto as a payment method. That is not an official TryHackMe post

[signal apex]

Hey guys, I have an issue with the openvpn connection. Quick explanation what's happening:

I've downloaded the config file for EU-Regular-1. I've tried to connect using the sudo openvpn filename.ovpn but I got this error:
2025-01-10 06:40:07 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)

Then I've changed the config to TCP and got this error:

2025-01-10 06:37:42 SIGUSR1[connection failed(soft),connection-failed] received, process restarting
2025-01-10 06:37:42 Restart pause, 1 second(s)```

I'm running this on a Kali Linux machine in VirtualBox. My network interface is set to bridged and I have access to the Internet. The IP address also looks correct.

I've read somewhere on the internet that this may be caused by a misconfigured firewall but it would be weird, since I was able to connect without any issues around a year ago.
During this time I've lost my old config file and virtual machine, so I just download the new config file and tried to run it.
Switching servers and regenerating the .ovpn file also doesn't help.

[ember osprey]

Try to change server to EU-4 🙂

adn re-generate the file

[signal apex]

I tried changing servers to EU-3 earlier and now to EU-4
Both returned the same error code

[ember osprey]

Please wait 3-5min after generating the file before using it 🙂

[signal apex]

Oh, alright

[signal apex]

Hey again, so I've tried all of the EU servers and waited at least 5 minutes before using each file.
All of the servers returned the same error.

Do you have an idea what may be causing this?

[ember osprey]

Try to run this cmd sudo ip link set dev tun0 mtu 1200

[upbeat quarry]

can you ping the IP addresses of the VPN server(s)?
also, TCP will not work with THM VPN, only UDP

[signal apex]

Where "tun0" is the name of the interface, right?

[ember osprey]

Yes 🙂

Don't run multiple VPNs

[signal apex]

Yes, I can ping it

[ember osprey]

Can you access http://10.10.10.10/ 🙂 ?

[signal apex]

No, I can just ping the server from the config file

I'm still unable to connect

After running the command you provided me with

[ember osprey]

Even after mtu command ?

[signal apex]

Yeah, I'm still getting the same error

[ember osprey]

Can you check your firewall/router settings maybe they're blocking VPN connection . Also , if you don't mind asking , are you maybe from 🇷🇺 or 🇪🇬

[signal apex]

I'm from Poland, so close by but not quite
For the firewall/router, I'll let you know in a few minutes

[ember osprey]

I asked about the country because those seem to block VPN traffic

[signal apex]

Yeah, all good. But I don't think it's because of the country, since it used to work a year ago

[ember osprey]

No , Poland should be good 🙂 . Are you running inside a VM or on host machine ?

[signal apex]

Inside a Kali VM on VirtualBox. Network interface is set to "Bridged"

[ember osprey]

You're running VPN just inside your Kali machine ?

[signal apex]

Yes, if you are talking about the "sudo openvpn filename.ovpn" command

I don't have any other VPNs running on my machine

[ember osprey]

You don't run VPN on your host OS ?

[signal apex]

That's correct, I don't

[ember osprey]

Have you tried EU-Regular 4 server maybe ? Just to make sure , first delete your old file > change server > click re-generate > wait a few minutes , download and use a new file

[signal apex]

Yes, that's exactly what I did when you first told me to. Then tried running the file after the mtu command

[ember osprey]

You should run mtu command in another terminal while VPN is running , is that what you did 🙂 ?

[signal apex]

I did now. Still the same error

Should this command have an output or anything like that?

[ember osprey]

Can you provide a screenshot of what's going 🙂 ?

[signal apex]

I don't think I can upload a picture here

[ember osprey]

You will have to verify to upload images 😄

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[ember osprey]

😭 Can you try with some US server

[signal apex]

I'll try both East-1 and West-1 and let you know afterwards

[ember osprey]

Give it a go . Also try to access http://10.10.10.10/

[signal apex]

Well... results as expected. Still doesn't work

I found this but I don't really know that to make of it
https://askubuntu.com/questions/413705/openvpn-connection-refused-code-111

[ember osprey]

Sorry but I have no idea what else can we try 😦 . Can you try to change your network , maybe your ISP is blocking vpn in some way

[upbeat quarry]

can you check with nmap that UDP port 1194 is open, as per screenshot? Command is :
nmap -sU -p 1194 <IP address of VPN server>
I suggest you repeat that for all 4 EU-Regular VPN servers

[signal apex]

I can try but it would be weird. I haven't touched my network configuration in 3 years or so

[signal apex]

Alright, just to make sure
This is the VPN server, right?
18.202.168.160?

[upbeat quarry]

yes, but is that the IP for a EU-Regular VPN server?
If possible, I would prefer you use those, i. e.:

eu-regular-2.ovpn:remote 54.76.30.11 1194
eu-regular-3.ovpn:remote 3.254.253.220 1194
eu-regular-4bis.ovpn:remote 52.16.156.56 1194

At this moment I do not have EU-Regular-1.ovpn: VPN config file is empty

[signal apex]

That's the IP from the config file download for the EU-Regular-4 server

Let me change it to what you provided

[signal apex]

Okay, now I got a different error

Also, I can see the open port now

[upbeat quarry]

how about UDP port 1194 on IP 18.202.168.160?

[signal apex]

It was indeed closed

[upbeat quarry]

at least that is a clear explanation 🙃

[signal apex]

Yeah... why did my config include this address though?

Now that I think about it the address in the config never really changed, despite switching servers

[upbeat quarry]

really? I am puzzled

[signal apex]

Yes

But I've been waiting at least 5 minutes before downloading the file again

[upbeat quarry]

maybe refresh the VPN access page with Ctrl-F5?

[signal apex]

I'll generate the file again and let you know

[upbeat quarry]

a tip: when downloading a new VPN config file, check the MD5 hash of that new file and the previous to make sure they are different
command to check MD5: md5sum <filename>

[signal apex]

Didn't think about that, thanks

Give me 5 minutes

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #19 - 494)

[signal apex]

Alright, I think the issue is clear now
Here are the sums from 3 servers

When I refresh the website, the server always switches to EU-3, despite being set to a different one before doing so

And even is I regenerate the config file, the file stays the same, despite the currently chosen server on the website

[upbeat quarry]

and I guess the IP for the 3 identical VPN servers is 18.202.168.160, right?

[signal apex]

Exactly

[upbeat quarry]

we have gathered some results:

• they explain why it does not work
• they indicate weird behaviour by the VPN servers
• they do not show to me a way towards a solution
• my conclusion: something wrong with THM VPN
  Maybe logout/login would be a useful attempt, but I am not too optimistic

[signal apex]

I tried doing that in the beginning, I'll try once more now.

Maybe something is wrong with my account since nobody besides me has reported a similar problem

[upbeat quarry]

@weary spindle
could you please help solve a VPN problem that user @signal apex is confronted with:

• they are connectnig from Poland
• they are a free subscriber
• whichever EU-Regular VPN config file they download comes with an IP address of 18.202.168.160, which is out of the scope with the IP addresses I get
  See above for the history of the troubleshooting along with KGB
  Thanks in advance for your help

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3227)

[upbeat quarry]

in addition:

• that IP address of 18.202.168.160 has UDP port 1194 closed

[signal apex]

@upbeat quarry thank you for your time man. Hopefully, someone will solve this soon 🙏

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #19 - 495)

[signal apex]

@ember osprey thank you as well, for all the help in the beginning

[upbeat quarry]

stay put: @weary spindle , who is a Moderator and a Community Mentor on THM Discord, seems to have some behind-the-scene information on THM VPN
If he is available, I am sure he will come to the rescue

[weary spindle]

Give me one moment

So to clarify you have a machine IP 18.202?

And this a normal VPN? (Non network)

[upbeat quarry]

normal VPN, but 18.202.168.160 is the UDP IP contained in all EU-Regular VPN config files (at this moment only 3 provide non-empty contents)

@signal apex : please interact directly with Scrubz so I do not screw up the reporting 🙃

[signal apex]

I will, you were just faster this time 😂

[weary spindle]

I'm on my mobile I can only push routes with the 10.xxx

I'll need to get my laptop, download a VPN pack and see what it what.

You don't have a personal VPN running?

@cold fog are you around?

[signal apex]

That's correct, I'm not using any other VPNs in the host or in the machine

[signal apex]

The main issue is explained here.

Despite my efforts, each time I try to regenerate a new config file, it's exactly the same.
I'm relogging, refreshing the website, changing browsers and servers.
Nothing works

[livid breach]

Now yes, I am available.

[weary spindle]

which one?

[signal apex]

I've tried regenerating the file for each of the EU servers.
I assume that the IP address should change, depending on the server. But after checking manually and with md5sum, it's the same file

[weary spindle]

So they all give you an 18.xxx.xxx.xxx ip?

[signal apex]

No only 18.xxx.xxx.xxx but the exact same address - 18.202.168.160

[signal apex]

I've also checked this IP with nmap. The 1194 port is closed

[weary spindle]

Can you do you ip a

[upbeat quarry]

please wait while Kaladin is troubleshooting their VPN problem with Scrubz
it may well be the outcome of that problem will provide a fix to your own VPN issue
while waiting, can you check the IP you have in the VPN config files you downloaded before, like Kaladin reported earlier in this message: #site-support message

[cold fog]

Hey, saw your message, need something?

[weary spindle]

Can you use Eu-Reg-4

[signal apex]

I've tried generating the file for each of the servers

I can choose them on the THM website, but the downloaded file stays the same

[weary spindle]

Just an issue with a VPN, I've got the wrong end of the stick, IT thought the vpn was giving someone a 18.xxx.xxx.xxx adress as tun0, but this isn't the case, it's the remote address inside the config

[cold fog]

Okay, so all good or need me still?

[weary spindle]

I don't think so. sorry for disturbing 😄

[signal apex]

Also, when I refresh the website it always shows the EU-REG-3 server as the chosen one, despite me changing it beforehand

[weary spindle]

Can you remove all configs, then press Ctrl and F5?

[cold fog]

No worries! Not a lot of people that I respond to when summoned but you did earn that privilege 😂

[weary spindle]

I promise not to abuse it.

Whilst you're though, the breached network status checker is no longer working?

[signal apex]

If you mean from my machine, I did that.

I'm removing the old file after each try and downloading a new one

[weary spindle]

Are you pressing Ctrl and F5 before downlaoding a new one.

[signal apex]

Yes. But then it changes back to the EU-3 server

[cold fog]

Yes, the website where is ships the details is down. I am looking into it and should get it back up and running this weekend

[cold fog]

Back online. I see a number of the network servers have called back already

[weary spindle]

Yup, I can see it too 😄

This should help with the new vpn update Ben has in place in the attackbox

[cold fog]

Pop me a DM if it goes back offline

[weary spindle]

No problemo!

[signal apex]

@weary spindle Did you figure out what may be causing this problem?

[weary spindle]

Not yet, had to get off the train

[signal apex]

All good, I just wanted to check if you already forgot about me 😆

I'll wait

[upbeat quarry]

while waiting, just a thought: when you download your VPN config file, do you use the browser of your VM or the browser of your host?
personally, I use the browser of my host, just because my VM is slow (I have a low-spec PC) and I do not like the slow browser that comes with it, and then I copy paste into my VM
just to come to this point: would it be worth trying to download the VPN files using your host browser, as an additional way of getting this thing to work?

[signal apex]

I'm using the browser of my VM

Won't hurt to try though

[signal apex]

Didn't help sadly

Good idea tho, thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #19 - 496)

[signal apex]

It still generates the same file, with the 18.xxx address

[vagrant zodiac]

Hey, I just wanted to mention that I have an issue with the vpn config file, too. It either downloads with a single line (success:false) or empty

[ember osprey]

Try to re-generate it 🙂

[vagrant zodiac]

Tried multiple times already, didn't change the issue

[upbeat quarry]

I suggest you cycle through different VPN servers:

• download the VPN file and see it it works
• if not, use the regenerate button, and download againg after 1-2 minute
• make sue the regenerated file is different from the previous one (check the MD5 hashes with md5sum to make sure they are different
• if that all fails, move to a different VPN server and repeat

[ember osprey]

Have you tried to change the server ?

[vagrant zodiac]

That too, yes

[upbeat quarry]

you never got any "meaningful" VPN config file?

[vagrant zodiac]

no, the first few ones were all sucess:false and after 3 or 4 attempts, they all downloaded empty

[upbeat quarry]

I got several times today good VPN files for EU-Regular-2, 3 and 4 (not 1: empty file)
can you confirm you tried EU-Regular-2, 3 and 4?

[vagrant zodiac]

I am trying them all right now, they all download empty

Idk if that's progress but one came back again with "sucess":false 😄

[upbeat quarry]

and when you regenerate, can you confirm you wait 1-2 minute before downloading again?

[vagrant zodiac]

Ok I will wait this time before i check, then update here!

it's amazing that you guys are immediately in the loop helping 🙂

That did the trick, file looks ok I'll try to connect!

[upbeat quarry]

can you post here the IP address you have in these VPN config files, as per screenshot? Thanks

[scenic torrent]

Gave +1 Rep to @vagrant zodiac (current: #2578 - 1)

[vagrant zodiac]

Sorry for the small delay

I cannot paste the screenshot here, does this have to do with some permissions maybe? I just joined. Anyway the IP is: 54.76.30.11 1194

[ember osprey]

You will have to verify to upload images 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[upbeat quarry]

Thanks, I guess that was EU-Regular-2 VPN server, right?

[scenic torrent]

Gave +1 Rep to @vagrant zodiac (current: #1693 - 2)

[vagrant zodiac]

Correct

Does not successfully connect tho from my Kali VM, stuck in a loop

[upbeat quarry]

does it restart all the time?
can you post screenshot?
also, from which country are you connecting?

[vagrant zodiac]

Do I need to redact anything in screenshot? I am trying to connect from Germany

[upbeat quarry]

possibly, consider whether you have customized your prompt with name/personal info, etc. that you do not want to share
personally, using a plain vanilla Kali environment, I have posted many screenshots of the openvpn startup output

[vagrant zodiac]

yeah i checked there should be nothing in it, give me second please!

it says the tls handshake fails, I don't know why.

[signal apex]

Does it look like this by any chance?:

TLS Error: TLS handshake failed```

[weary spindle]

Is your network fine for this, usually indicated an error.

[signal apex]

It's not happening for me, I wanted to add to the convo between Shy1 and Scraq

I fixed this error by setting the network interface to "bridged" in my VM

[signal apex]

But this is still happening

Or I didn't nevermind, now that I check the screeshot
But at least it returned a proper error code

[weary spindle]

Are you on your home network and home device?

(Sorry if this if covered before, I'm playing catch up)

[signal apex]

Yes, it's home network

[signal apex]

But I think the reason for this issue is this

Looks like the generated config file is wrong and I'm unable to generate a new one

[weary spindle]

Can you DM me your config?

Just copy and paste it all

[vagrant zodiac]

Here you can see what happens in the Kali VM

[weary spindle]

Which server is this?

Is the good old Doctor around?

@umbral tulip

If you are, @signal apex can't download a new VPN pack, when they try to regenerate their VPN pack, it loads then re-downloads the previos file.

[vagrant zodiac]

This is EU 2

[upbeat quarry]

Scraq is using EU-Regular-2: 54.76.30.11:1194

[upbeat quarry]

as you are subscriber, please consider the EU-VIP servers: that is the ones I usually use, and I find them reliable for me

[vagrant zodiac]

Oh that's great to know! I will have to step away from the PC in a bit will I will defintely try this out tomorrow 🙂 was wondering VIP might mean something like troubleshooting for the team at first 😄

Thanks for everybody helping so far!

[dusky spire]

Task 14 wants an answer that is one digit longer than the one I'm given after solving the problem, the solution is given with an * at the end but the site asks that it's not included in the answer, but the only way it would add up is if there is something at the end and the solution only shows one valid answer.

MAL: Malware Introductory task 14

[ember osprey]

I sent you message in https://discord.com/channels/521382216299839518/522158539129618453 🙂

[marble elm]

hi

[ember osprey]

Hi , welcome 😄

[scenic flume]

Hi ! I started the AttackBox and I got this error:

"Unable to mount 41 MB Volume"

"No .Filesystem or .Encryted interface on D-Bus object"

(I'm a verified Discord user, but I can't upload screenshots here.)

I restarted the AttackBox , but the problem persists.

[rustic moat]

ok, I am the one with the password problems, https://files.oaiusercontent.com/file-EnKFNai2M5scuKJLUhLNrc?se=2025-01-10T19%3A06%3A10Z&sp=r&sv=2024-08-04&sr=b&rscc=max-age%3D299%2C immutable%2C private&rscd=attachment%3B filename%3Dimage.png&sig=%2BNOnXqppYheVbLdUk4BMrFAi3x%2BcjOVzxwb6gKDdqGQ%3D

can anyong help, please?

[cunning fossil]

Not just you, I'm getting it too now. Unless there's something on that volume which you need for the room you're working on you can probably just ignore it. Quick poke around seems to suggest everything is working fine otherwise.

[rustic moat]

what room are you in?

[scenic flume]

Thank you!

[scenic torrent]

Gave +1 Rep to @cunning fossil (current: #1030 - 4)

[scenic flume]

Networking Concepts, but this problem is global, not just in this room.

[rustic moat]

so just keep on going..... Grrrr lol

[weary spindle]

You're not verified with the THM bot.

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 10, 2025, 8:35 PM

[scenic flume]

Thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3231)

[scenic flume]

Thanks to you, now I'm!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3232)

[weary spindle]

Now you can drop images.

[maiden geode]

just curious if there was an easier way for me to find the CTF rooms on the site without typing it in everytime

[dull cradle]

Bookmark the search maybe? Add whatever filters you want. 🤷‍♂️
https://tryhackme.com/r/hacktivities/search?page=1&roomType=challenge

[maiden geode]

appreciate it

👍

[clear zodiac]

I was regenerating the VPN configuration file and downloading it, but it is being saved with empty file

[upbeat quarry]

wait 2-3 minutes before downlooading after regenerating
if that does not help, move to another VPN server, and repeat the procedure

[tardy cargo]

On https://tryhackme.com/r/room/pythonbasics im on task 7 Loops, and I got the flag: THM{LOOPS_WHILE_FOR} , but the flag says its incorrect when I enter it in, please help... ;-;

[ember osprey]

It's L00PS not LOOPS , refresh the page and copy this ||THM{L00PS_WHILE_FOR}|| 🙂

[ember osprey]

Try to change the server also , when you click re-generate wait a few minutes before downloading the file 🙂

[vapid laurel]

Issue with VM

Just booted it up

[ember osprey]

Have you tried to restart the instance ?

[vapid laurel]

Nop, doing that right now

[ember osprey]

Give it a go , maybe this was some temporary problem , tbh i never encountered this 😄

[vapid laurel]

Seems like a recurring problem.

Not sure what exactly this is impacting but probably shouldn't be showing up as a error.

[ember osprey]

This definitely shouldn't happen but tbh I have no clue what's going on I never encountered this 😄 . Is AttackBox functioning normally 🙂 ?

[peak sequoia]

I've encountered a few mounting issues during machine running as well the last day or so.

[vapid laurel]

Appears so

What's the email to contact tryhackme's bug reporting?

[ember osprey]

You can also report problem here https://discord.com/channels/521382216299839518/559443389058252800 🙂 . If you want to use email , here it is below 😄 .

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 11, 2025, 4:12 AM

[upbeat quarry]

same experience yesterday and today, but the same conclusion as here: #site-support message, i. e. no impact it seems

[stuck drum]

hi

[ember osprey]

Hi , welcome 🙂

[vague apex]

https://tryhackme.com/r/room/steelmountain

Did I buy a shell? I'm in my meterpreter shell, but I can't get the user.txt flag, I can't go to any directory, what's going on?

[ember osprey]

Can you provide a screenshot 🙂 ?

[ember osprey]

Looks like it's working fine

[vague apex]

C:\Users\bill\Desktop
There is no problem in working but I can only run it once.

For example, I think there is a flag in that directory, how can I get it?

[ember osprey]

You can list contents of directory with dir command

[vague apex]

dir C:\Users\bill\Desktop ?

[ember osprey]

No , just dir if you're already in that directory

[vague apex]

I'm in this directory

[ember osprey]

cd C:\Users\bill\Desktop

then run dir

[vague apex]

stdapi_fs_chdir gives an error both times

[ember osprey]

cd C:\Users\bill

[ember osprey]

cd C:\Users\bill\

[vague apex]

I have experienced problems like this a few times, I logged into the system, but there was no flag where the flag should be 😄 I think problems like this were written on my machine.

[ember osprey]

cd "C:\Users\bill\"

[ember osprey]

cd ../../../../../../../

[ember osprey]

cd Desktop

Then dir

[vague apex]

how user.txt look? type ?

[ember osprey]

You can use cat also

[vague apex]

fix

[ember osprey]

Is everything ok now 🙂 ?

[vague apex]

yep

[ember osprey]

Glad to hear that , keep up the good work

[vale patio]

Hello, I have taken the 1-year subscription but still not able to access the premium content, anyone please can help

[ember osprey]

Try to contact support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 11, 2025, 11:31 AM

[ember osprey]

Also for room related questions , it's maybe better to ask in https://discord.com/channels/521382216299839518/522158539129618453 channel 😄

[vague apex]

Like my previous questions, I thought it was something about the room.

. @ember osprey

[ember osprey]

Yeah but this channel is more about site/payment support and connection problems , you will find more people solving room problems in https://discord.com/channels/521382216299839518/522158539129618453 channel 😄

[vague apex]

okey

[clever basin]

Hi I wanted to know I won 10dollars thanks to the advent of cyber and I would like to know if I could exchange it for 1 month of tryhackme premium or even 2 weeks?

[ember osprey]

I don't think that prizes can be exchanged for something else 🙂

[clever basin]

Too bad I can't use the coupon

[ember osprey]

Why ?

[clever basin]

Well, I don't have a bank account or a paypal account.

That's why I wanted a tryhackme premium, it would have helped me a lot more.

And it's also the most interesting lot, I think.

[ember osprey]

Well , I don't think that prizes can be exchanged 😦

[clever basin]

Yes, I understand.
But do I have the right to give my prize to anyone?

As I'm not going to use it, it would be a pity if it died in my mail, can I give it away?

[ember osprey]

I think that you can give away you prize but consult with staff first 🙂

[clever basin]

Ah I thought you were at staff

Should I send a PM to the staff?

[ember osprey]

Yeah , this is the mail 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 11, 2025, 1:08 PM

[clever basin]

Thanks

[zealous yoke]

Hi all,

I'm aware of the AttackBox sometimes displaying a error popup containing either:
"Unable to mount volume" or "Unable to mount 41MB Volume"

I'm working on a fix but it is safe to dismiss/close 🙂
Thanks

[grim briar]

Hi. I am trying to download the vpn config file and just keep getting a new window with trouble finding that site. I'm attempting it on a kali vm

[ember osprey]

Try to change server and re-generate a file 🙂

[grim briar]

Same result

[ember osprey]

Try to restart your browser

[grim briar]

restarted browser and cleared history and data still the same

[ember osprey]

Strange , I tried it now and it works fine 😦

Can you try on different browser ?

[grim briar]

I'll have to download one real quick its a new kali VM

[upbeat quarry]

you can try to download using the browser of your host

[grim briar]

thanks worked first try on host

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #19 - 498)

[grim briar]

Thanks as well for the suggests to try @ember osprey

[ember osprey]

Glad to hear that it works now , keep up the good work 😄

[velvet prairie]

KGB you are amazing dude !! You keep it up...

[ember osprey]

Thank you 🙂

[scenic torrent]

Gave +1 Rep to @velvet prairie (current: #1276 - 3)

[pastel cloud]

Hey, is it normal that i have connected to the VPN and appear connected in one place but not in the one that gives access to the machines? https://imgur.com/a/92iCwyG

[ember osprey]

Yes , those features are a bit buggy 🙂 . If you can access http://10.10.10.10/ you should be good 🙂

[remote night]

IIam having a problem connecting to the network via openvpn it gives me an error that the TLS handshake failed, Does anyboby have the same problem recently?

I regenerated the config file multiple time and every time a new error comes up

[ember osprey]

Try to change the server and re-generate a file , wait 2-3 min before downloading a new file 🙂 . I would suggest you to try with EU-4 if you're from Europe. Also make sure you're running command with sudo 🙂

[remote night]

Iam in Egypt rn so what server would be closer to my location? and would the location might be a problem

[ivory spruce]

If I recall correctly, Egypt may be blocking VPN connections, thus the error you are having.

[remote night]

yes i read something like that online, so what would be the solution to that

[ivory spruce]

The only option available would be the use of the Attackbox.

[remote night]

Ok thanks for help

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 743)

[drifting otter]

i am on breaching active directory module
and i can't join the room

i'm just stuck

can anyonw help??

[ember osprey]

Are you a premium user ?

[drifting otter]

no

[ember osprey]

Do you have a 7-day streak ?

[drifting otter]

no 😦

[ember osprey]

Then you will need to build at least a 7-day streak to access that room 🙂

[drifting otter]

but it is showing
streak required : 0

thank you tho i'll try after maintaing 7 days streak

[drifting otter]

lmao in my acc it's showing 0
nvm thank you tho

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 2003)

[ember osprey]

Just do at least one task each day in the next 7 days and you will be able to access it 🙂

[naive dust]

hi i have a problem for connect openvpn

[ember osprey]

Delete that file , try to change server and download a new file , wait 2-3min after re-generating before downloading

[naive dust]

thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 2004)

[ember osprey]

Does it work now 🙂 ?

[naive dust]

yes

[nocturne temple]

im going to lose my marbles

and when i actually try to define it using --dev, it gets stuck at this:

"2025-01-12 14:38:44 DEPRECATION: No tls-client or tls-server option in configuration detected. OpenVPN 2.7 will remove the functionality to run a VPN without TLS. See the examples section in the manual page for examples of a similar quick setup with peer-fingerprint.
2025-01-12 14:38:44 OpenVPN 2.6.12 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-01-12 14:38:44 library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10
2025-01-12 14:38:44 DCO version: N/A
2025-01-12 14:38:44 ******* WARNING *******: '--cipher none' was specified. This means NO encryption will be performed and tunnelled data WILL be transmitted in clear text over the network! PLEASE DO RECONSIDER THIS SETTING!
2025-01-12 14:38:44 ******* WARNING *******: '--auth none' was specified. This means no authentication will be performed on received packets, meaning you CANNOT trust that the data received by the remote side have NOT been manipulated. PLEASE DO RECONSIDER THIS SETTING!
2025-01-12 14:38:44 ******* WARNING *******: All encryption and authentication features disabled -- All data will be tunnelled as clear text and will not be protected against man-in-the-middle changes. PLEASE DO RECONSIDER THIS CONFIGURATION!
2025-01-12 14:38:44 TUN/TAP device tun0 opened
2025-01-12 14:38:44 Could not determine IPv4/IPv6 protocol. Using AF_INET
2025-01-12 14:38:44 UDPv4 link local (bound): [AF_INET][undef]:1194
2025-01-12 14:38:44 UDPv4 link remote: [AF_UNSPEC]
"

wait i got openvpn from homebrew

ig its outdated

lemme try upgrading it

[ember osprey]

we had same problem earlier today and we fixed it this way 🙂

#site-support message

[nocturne temple]

err

2025-01-12 14:47:30 Authenticate/Decrypt packet error: packet HMAC authentication failed
2025-01-12 14:47:51 Authenticate/Decrypt packet error: packet HMAC authentication failed

i did the reinstall

2025-01-12 14:48:16 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #28 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

wait nvm i can see the 10.10.10.10 page

[ember osprey]

You're connected then 🙂

[nocturne temple]

cool what do i do now?

with that

[ember osprey]

Your VPN connection is working fine if you can access http://10.10.10.10/ no additional steps needed 🙂

[nocturne temple]

i got that, what can i do with the openvpn connection tho

like run vms on it?

[ember osprey]

You can now access THM machines 🙂

[nocturne temple]

oh like i can run them locally??

[ember osprey]

No , you can access them over that connection 🙂

[nocturne temple]

ah okay

so the ip given

i can access it on a seperate website

gotcha

[ember osprey]

Yes , if they have web server running 🙂

[nocturne temple]

so i can see the ip running on the attackbox in the thm website, when i use the ip out of the website its not connecting

[ember osprey]

AttackBox isn't the vulnerable machine , it doesn't have web server running on it 🙂

[nocturne temple]

as so i cant use the ip for attackboxes? gotcha

[ember osprey]

Well , they aren't meant to be accessed in that way 🙂

[jagged quiver]

Error establishing a database connection in Blog room. Is this expected?

https://tryhackme.com/r/room/blog

$ curl $ip
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <title>Database Error</title>

</head>
<body>
        <h1>Error establishing a database connection</h1>
</body>
</html>

Ah, it's been a while. Has it ever been fixed?

[nocturne temple]

ah i see

[robust hatch]

13 days and i still haven’t heard from the support, definitely the worst experience i’ve had on any online educational platform. Wont considering subscribing again.

[upbeat quarry]

I did not experience the same problem, using THM AttackBox
referring to this #site-support message, I could fuzz || http://blog/admin || with gobuster, but not with ffuf but I did not investigate why

[proud jackal]

maybe https://discord.com/channels/521382216299839518/559443389058252800 ?

[arctic finch]

anyone else getting 404 errors when trying to access rooms?

[river jay]

Hi, is it possible to extend the attack box beyond 2 hrs?

[arctic finch]

if you have a premium memebrship you can

[river jay]

Yes I have

No 404

[arctic finch]

or you can vpn into the room with a kali vm or something

[ember osprey]

Maybe your URL is wrong if you're getting 404's 🙂

[arctic finch]

then just extend the attack timer, but you have to be less than 1hr left

I was literally in a room and now that disappeared

https://tryhackme.com/r/room/windowsfundamentals2x0x

this one

[river jay]

Yes, but I am trying the attackbox, and it keeps expiring while I am documenting .

They are making some changes probably

[arctic finch]

nvm I guess i got logged out

[river jay]

It's mentioned on the notification...that's probably the reason it's unavailable... please try 24hrs later.

[river jay]

Any clue about the extension?

[arctic finch]

I've had my attack box up for more than 2 hours before, just have to keep extending it. If it's not letting you extend I would say verify your membership or that you are logged in

[river jay]

Yes, I did, but where is the extension button for the ABox? I did extend the VMs but can't find the same for ABox

[arctic finch]

what room are you working on that the documentation is takign so long?

[weary spindle]

The Windows machine launched with Windows Fundementals 2 isn't an attackbox.

You can VPN in to it with the VPN connection.

[arctic finch]

yeah I know that. I wasn't using the attack box in that room

[river jay]

😅

[arctic finch]

@river jay, you can extend it in the split screen view by clicking the + at the bottom of the screen

I don't think you will see it if you have it full screened in another window

[river jay]

Nono, it's a separate problem, we are discussing 2 different issues

It's windows incident surface

Iam delving deep in cmdlets

That's why it's taking time

[arctic finch]

nice, I am planning to hit that room next but it said i had to finish WF2 as a prereq

[river jay]

It's was good 2days ago

I did finish that

[arctic finch]

it wont let me post a screen shot, but did what I say make sense?

[west chasm]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 12, 2025, 4:33 PM

[weary spindle]

You need to verify to post screenshots

[arctic finch]

oh ok

thanks

@river jay this is the button to extend

@river jay sent you a friend request so we don't have to stay in here to chat

[river jay]

Thank you, I was thinking it will be on the dash like VMs....thanks man

[scenic torrent]

Gave +1 Rep to @arctic finch (current: #2584 - 1)

[weary spindle]

@fluid pelican we don't provide help for external ctfs

[fluid pelican]

Oh, okey, srry, forgot that

[drifting rune]

Hi in File inclusion room when I try to enter the path to ../etc/passwd in answer field I get Unauthorized error in the pop up. Is that normal?

Also the answer for that LFI Lab1 seems to be incorrect

[strange meadow]

I have an issue with the VPN; I'm trying to connect, but it won't work. It keeps loading, but there's no connection

[plush bay]

so you started the vpn in a terminal
then open another terminal window
run curl 10.10.10.10/whoami
if that gives you an ip you are connected
if not try the suggestions from the link in the bot message below this

[west chasm]

Troubleshooting OpenVPN on Linux and Mac

Article Link

https://help.tryhackme.com/en/articles/6496058-troubleshooting-openvpn-on-linux-and-mac

Jan 12, 2025, 11:34 PM

[plush bay]

just leave

if you can't accept new people learning and have to demean them as script kiddies you do not belong here

[bronze vale]

Hey livinglayer8, do you mind if I DM?

[plush bay]

sorry for making it worse jabba

[bronze vale]

Much appreciated 😄

[plush bay]

why should we respect you if you do not respect us???

respect is generally a 2 way street

fair shadows way of typing is generally so casual it sounds unprofessional

you just should communicate with jabba

as jabba is a staff member of tryhackme

also calling people script kiddies and then saying it is not an insult when the most common defintion is this:

The more immature but unfortunately often just as dangerous exploiter of security lapses on the Internet. The typical script kiddy uses existing and frequently well known and easy-to-find techniques and programs or scripts to search for and exploit weaknesses in other computers on the Internet—often randomly and with little regard or perhaps even understanding of the potentially harmful consequences.

does sound like an insult

doubt it

might be and if that makes the admins and moderators work worse shadow is sorry but you know

your message stating it would be a pr problem is definitely an escalation of trying to hurt the platform

treating 10:s of users as kids and thinking they therefor deserve no respect is a personal problem that leads to being disregarded

any and all black hat users that get discovered by asking any question related to black hat activities gets banned on the spot

jabba can easily confirm that

anyways sorry if shadow seemed disrespectful

but dragging a site down because they recommend a social media that you don't have to use sounds bad

even though the nsa claims they are spying on american citizens

quite sure it is a private business with no stock options sooooo we can't know that

[marble breach]

:mute: shadow_absorber#0 has been muted.

[bronze vale]

I have 🙂

You might need to go to Message Requests and approve it:)

[naive vortex]

Hi, it has been a while since I've used the platform, but it looks like a few things have changed.

I'm having serious latency when going through rooms. I've cleared relevant cache, and no other tabs in my browser have issues. This has been ongoing for a few days.

[ember osprey]

Sometimes machines can get slow during the periods of high usage / congestion

[tacit nacelle]

can anybody please help me?

I'm not able to access the TRYHACKME website at all.

I tried to ping tryhackme.com, it shows all packets lost.
even tried: netcat to check connectivity with tryhackme on port 443. it did not succeed.

when I try to access the website, it loads and doesn't open anything.
all other sites are working across all my browsers, its just with tryhackme

[naive vortex]

@ember osprey I understand the machines being slow, but it's also the room pages. For example, when I've done an exercise and click back to the page, it takes a good 45-60 seconds before i can begin typing in a form.

[ember osprey]

I don't know about that , works fine on my side 😦

[tacit nacelle]

is there any server-side error?
is it working for others or is the site down?

[ember osprey]

Works fine for me 😦

[tacit nacelle]

alright, its fixed.

looks like, it didn't work only on my network. I changed it and now it works.

[ember osprey]

Glad to hear that , enjoy on THM today 😄

[naive dust]

is anybody expiriencing problems with runing machines?

[ember osprey]

Works ok for me

[naive dust]

connecting to server for me

[ember osprey]

Try to reach out to support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 13, 2025, 7:39 AM

[ember osprey]

Which room ? Can you provide a screenshot ?

[naive dust]

Windows Privilege Escalation

wait a min i restarted the machine trying to see if that works

[scenic torrent]

Gave +1 Rep to @west chasm (current: #77 - 104)

[naive dust]

worked

thanks @ember osprey

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 2039)

[ember osprey]

Sometimes it can take a few days for a support to respond

Try to send it again, only support can help you with payment/sub problems 😦

I would suggest you to try to reach them over the e-mail

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #4 - 2040)

[gloomy delta]

My attack box keeps disconnecting and i need to start a new attack box every 10 mins why is that

[gloomy delta]

yes i am experience problems with machines they keep disconnecting

[austere charm]

my percentage has stoped showing anyone know how to fix that ?

[ember osprey]

Which percentage 🙂 ?

[austere charm]

like top x%

[ember osprey]

That feature is no longer there I think 😦

[austere charm]

i thought soo too but i just saw a post on linkedin for someone who just reached top 1%

the post is a week old though

i havent seen mine in a while

i was top 14% last time i checked and i have kept my streak since i could have fallen this much behind without me noticing

i think so at least

i hate finals man

[ember osprey]

Yeah I also haven't seen it in a while , I think it's gone for good 😦

[river gust]

hey, is it just me or the attackboxes are really terribly slow?

[austere charm]

use your own vm attackbox

[austere charm]

sad

[river gust]

i do have premium, and i clicked on start attack box button in a room

[ember osprey]

Seems like not just you , lot of people reported the same for today . Probably temporary problem on THM side 😦

[river gust]

oh i see

[austere charm]

its a goog opurtinity to look into that i havent used premuime yet( i am broke af) but my local attackbox works great

[ember osprey]

Works fine for me also but quite a few users reported problems this morning 😦

[river gust]

sorry im rather new to thm but what do you mean by a local attackbox? are the attackbox disk images available?

[austere charm]

damn i am very out of touch i just want be done with this semseter asap

[ember osprey]

I don't think they are 😦

[austere charm]

as far as i know no there isnt but kali linux have everything you need and alot more

just figure out if you want do dual boot or use it in a vm

and then download the iso and follow some simple steps

[river gust]

oh ok so you meant a kali vm on your pc ...got it. i do have it set up myself... ive been using it for thm because atatckboxes were never a good experience for me

[austere charm]

you go man

[river gust]

i was confused when you said local "attackbox" lol

[austere charm]

i am sorry English isnt my first language

but same here but thats becuase of my internet though

terriple isp

[river gust]

same here... no worries

[austere charm]

[naive dust]

thanks

[scenic torrent]

Gave +1 Rep to @gloomy delta (current: #2587 - 1)

[lament jay]

Hello,
Can't connect to my account with my 2FA.
Someone have the same issue ?

[mint yew]

@wind wedge 👋🏻, streak pls? 👀

[tardy sonnet]

I wish the rooms were built to use the Attackboxes... I am having such a horrible experience using Attackbox

[weary spindle]

You'll need to contract support

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 13, 2025, 2:37 PM

[naive dust]

I received an email about booking a meeting to provide feedback to TryHackMe. Just want to double check if that's legit

[weary spindle]

It will be yeah, they ready out to members 🙂

[quick urchin]

Hello did the Wreath Network recently have changes?

[weary spindle]

Do you have an issue with the interface on the attackbox?

[quick urchin]

Not really, I am getting something different than what the walk through is looking for.

[edgy shard]

i tried to connect openvpn in parrot os (which is running in vmware)

but im getting this error

Authenticate/Decrypt packet error: packet HMAC authentication failed
Authenticate/Decrypt packet error: packet HMAC authentication failed

and i tried to run https://github.com/tryhackme/openvpn-troubleshooting and it showed im connected and gave me the ipaddress but it didnt match up with the one in tutorial room in thm

i also tried runnin the command(sudo openvpn file.ovpn) again but im getting the same authenticate/decrypt error

[quick urchin]

I just left the room to reset all my progress to try and get a new "instance". When I am trying to enumerate the x.x.x.150 machine I was getting "Git Lab" and not Gitstack.

[weary spindle]

Are you a subscriber using the attackbox?

[weary spindle]

Which server and country?

[quick urchin]

No I was using my openvpn-wreath should I be using the attackbox?

[weary spindle]

Either is fine, but I only know a fix for Attackbox that isn't leaving the room for min(s)

What issue are you having?

[quick urchin]

After I use sshuttle to create my first pivot and I try to head to the webpage, I get the Git Lab login and not a error page.

[weary spindle]

Ah, the answer to this may already be answered in #wreath-network

I haven't completed it, and can't help sadly.

[quick urchin]

This is exactly what I was looking for, a dump,but couldn't find myself. Thank you.

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3247)

[edgy shard]

india

in-regular-1

i tried downloading eu region configuration file and im still gettin the same error

[hollow burrow]

Funny question, how do you unverify a Discord account

I've switched accounts and this is now my main academic account, I verified with a personal account and I can't have two accounts with the same token by the looks

[ember osprey]

I think that you'll need to contact admin/mod for that 😄

[hollow burrow]

[hollow burrow]

More of a stupid question now; do I just ping them or is there some ticket system in here?

I've never asked for help before fortunately

[ember osprey]

They're monitoring this channel , somebody will probably reply to you soon 🙂

[hollow burrow]

Roger 🫡

[dull yacht]

Hello, i want to download a configuration file for THM networks but i cannot find any server options how should i proceed any help?

[true cave]

hey i have a captured wifi hand shake and im new to this shi after many efforts i cracked got the wifi handshake but i cant crack it with aircrack or hash cat dictoinary attacks (rockyou word list used ) what do i do now and how do i dig out more out of that .cap file + my pixie dust isnt working through airgeddon it just shows same pin trying again and again please help

[weary spindle]

Wi-Fi hacking is for our advanced channels.

[west chasm]

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Jan 13, 2025, 4:47 PM

[true cave]

ohh sorry mate can you help me tho

[weary spindle]

No, I don't know what you're doing, and I can't verify it's not legal.

[dull yacht]

Hello, could i get help with this?

[weary spindle]

Wdy, server options?

[dull yacht]

.

[weary spindle]

Have you joined the network rooms?

You can't download a file for them if you're not in them.

[true cave]

ahh alright , i could have shown you my local network info which btw my family uses for regular stuff so for that i cnt prove myself but thanks tho for sounding rude atleast lol

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3248)

[weary spindle]

🙂

Being rude would put a bad spin on this,

We have Wi-Fi hacking in the advanced channels as you'd be susprised how many members want to join so they can hack a neighbours wifi

[true cave]

ya well my neighbours arent that IT leaned and we do visit each others like everyday and there isnt much personal space in asain households so pretty much anyone here fs around with each others personal devices , wouldnt be tough to get someones wifi under my hands

and i was just pulling your leg mate dont mind me ❤️

i just wanted to know if pixie dust attacks are outdated or not

and im a noob at wiresharking

[dull yacht]

Ohhh

Understood thank you

Could you suggest me any network rooms i can join

[weary spindle]

I'd start with either wreath (walkthrough) or #breaching-ad

Or complete the red team path and then do the #red-team-capstone-challenge

[dull yacht]

Thank you 😊

[hollow burrow]

@weary spindle Hello! Apologies for the ping, I was advised to wait for a response but it appears to have been overposted now;

Is there anything you or the mod team could do about the above? I would like to move my "verification" to a different Discord if possible

[weary spindle]

You're not verified on this account, is it a different account you wish the token from?

[hollow burrow]

Yes. I would like to verify this account, which is now my new one; my old account will be getting deleted soon

The account is @mellow storm

[weary spindle]

Can you DM me your token. 🙂

[hollow burrow]

Yep! Gotcha

[signal meadow]

My VPN configuration file won't download, is there any fix for this?

[ember osprey]

Have you tried to change the server

[signal meadow]

Oh it worked, thanks

[signal meadow]

Now my VPN seems to be working but curl 10.10.10.10/whoami just times out

And I cannot access it from browser

[weary spindle]

You have one tunnel?

[signal meadow]

How to check that?

[weary spindle]

IP A

[signal meadow]

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:0e:96:4f brd ff:ff:ff:ff:ff:ff
    inet 192.168.111.128/24 brd 192.168.111.255 scope global dynamic noprefixroute eth0
       valid_lft 1501sec preferred_lft 1501sec
    inet6 fe80::20c:29ff:fe0e:964f/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

[weary spindle]

You're not connected

[sage sparrow]

Hey GuysnGals, anyone know if thm uses tun or tap in their openvpn profiles?

[weary spindle]

Tun

[weary spindle]

If your config is asking for it, make sure the file isn't blank.

[sage sparrow]

ok churs, I'll have a look into that with vscode, ooi why would the profile be blank from the site? surely that defeats the object?

[signal meadow]

Ah well I'm getting this when starting vpn

2025-01-13 20:00:33 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-01-13 20:00:33 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-01-13 20:00:33 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]

but I doubt this has anything to do with it?