site-support

[ember osprey]

You're not in the same dir as file

Use cd / to go to base dir

File should be there, use ls -la to confirm

[cosmic zephyr]

Or am I in the wrong machine or something?

[ember osprey]

Which room are you in ?

[cosmic zephyr]

Linux fundamentals part 3

[ember osprey]

Seems like you're still using machine from Linux fundamentals part 2 room 🙂

[cosmic zephyr]

Ah yes

Thankyou

[ember osprey]

Terminate that machine and start one in Linux fundamentals part 3 room

[cosmic zephyr]

I guessed it

Hahaha

Yes, thank you

I will try

[hot carbon]

Hi, is it just me or the msfconsole works veery slow in attackbox. it launches fine but when i try "search" or use a module it freezes for 2-3min, really annoying. system resources seem to be topped up too, so is the only solution to connect via openvpn using my own machine?

[ember osprey]

Yes but you can also try to use searchsploit it's faster 🙂

[hot carbon]

yes, ive noticed searchsploit seems to work fine, thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 2986)

[unreal sable]

Hello, I'm new to TryHackme and I'd like to know how to connect my machine, because I can't do anything if I don't have a connection? I'm on Windows

[ember osprey]

You can learn how to connect your machine on the link below 🙂
https://tryhackme.com/room/openvpn

[unreal sable]

I've already done it but it doesn't work

[ember osprey]

Try to use community edition of OpenVPN if you're on Windows

https://openvpn.net/community-downloads/

[naive dust]

Hello, i'm doing the box called Thompson. ||I will try to do a reverse shell without using msvenom but i'm stuck at this. I have a WebShell the cmd.jsp give it by kali and it still work but i can't find a reverse shell in .jsp then upgrading it to .war nothing works... can you help to do this please ? ||

[elder jetty]

im having issues with this room https://tryhackme.com/room/remnuxgettingstarted not loading

any suggestions?

[lost lynx]

#room-help

[ivory spruce]

Might be more suited for #room-help

In any case, did a quick Google search and found this - || https://github.com/ivan-sincek/java-reverse-tcp ||. You can try the .jar payload if it would work.

[upbeat igloo]

Hello! I am new to TryHackMe, in room OSASP Top10 I found I couldn't access the webApp in the Challenge. Can any nice friend help me with this?

[ember osprey]

How ? What's the problem 🙂 ?

[upbeat igloo]

I am trying to upload a screenshot but seems like discord doesnt like it lol

[ember osprey]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

You will have to verify first 🙂

[ember osprey]

Can you provide a room link 🙂 ?

[upbeat igloo]

https://tryhackme.com/room/owasptop102021

[ember osprey]

Go to Task 2 and press green Start machine button to start the machine . machine_ip placeholder will change to actual ip after few minutes 🙂

[upbeat igloo]

Thank you! That worked

Oh and how do I copy paste between the VM and my computer? I found the keyboards are bit different and normal command c/v doesn't work as I think.

[ember osprey]

@upbeat igloo You can use clipboard 🙂
https://cdn.discordapp.com/attachments/521771811768107008/1313628477307617401/clipboard.gif?ex=67a13edb&is=679fed5b&hm=e2aa0702207e5d5b6c9452adc6d086ec3bbf3e66dfa1d44360346516141f0dea&

[upbeat igloo]

wow thank you!

[tall prairie]

I am connected to openvpn but still the website for this challenge is taking too long to open

[ember osprey]

Try to run this cmd sudo ip link set dev tun0 mtu 1200

[tall prairie]

Thanks! It worked.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3007)

[light token]

can anyone help me , i'm trying to connect to openvpn of tryhackme but it doesn't work idk , i noticed that the file on kali is red and has a lock in it , how can i get it into normal ?

[weary spindle]

Delete the file and re-download.

[light token]

i did and it's still the same

[weary spindle]

Could just be it isn't linked to an app/tool

[light token]

how is that ?

[grand island]

how do I change the country in my thm profile i cant seem to find it in the manage account section

[ember osprey]

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

Check this article 🙂

[grand island]

Thanks!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3015)

[unreal sable]

it doesn't work

[naive dust]

guys i have a vmware machine how do i run the ssh on it so i can solve the lap with out limits

[weary spindle]

You need to connect to the VPN.

[naive dust]

is there one here ?

any recommendations

[weary spindle]

https://www.tryhackme.com/r/access

[naive dust]

how do i set it up

[west chasm]

Q&A: Common questions after connecting to the VPN

Article Link

https://help.tryhackme.com/en/articles/8991559-q-a-common-questions-after-connecting-to-the-vpn

Feb 9, 2025, 1:09 PM

[naive dust]

what should i do after downloading the file

open it with vmware

or what

[weary spindle]

https://tryhackme.com/room/openvpn

[naive dust]

trying to connect

i have tried 2 server files

[weary spindle]

What os is in Vmware?

[naive dust]

🐧🐧

[naive dust]

Linux

Kali

[weary spindle]

Then run the vpn in that os

Not WIndows.

[vocal iron]

Hello, I submitted a room many days ago.
I'm waiting for it to be published, do someone know how long does it takes ?
Or do I have to do something ?

[weary spindle]

There is a queue of rooms, you'll just need to wait patiently I'm afraid

[vocal iron]

Oh okey, thanks 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3377)

[north summit]

hello, i've just finished a the cyber security 101 learning path certification, i'd like to know if i can change the pseudo on it ?

[ember osprey]

I don't think you can change name once cert is generated 😦

[north summit]

oh

bc i got my pseudo on it and not my name

[ember osprey]

I don't think it's possible . You may be try to reach out to support but I don't know if they can do anything 😦

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 9, 2025, 3:07 PM

[north summit]

ok thank you i'll try to reach out to them

[weary spindle]

They can't.

[marble breach]

Done!

[proud valley]

I completed the Trooper room but it only showing that 50% of the room is completed. what can I do to resolved this?

[ember osprey]

Try to leave the room and re-join

[proud valley]

Ive tried that for like 2 weeks or so. Ive even went on to complete other courses

[ember osprey]

Try to report it in #site-bugs then 😦

[proud valley]

I just did, I just got the hang of navigating the discord.

[coral grail]

im getting NaN% when uploading a VM in the materials page

what do i do? I have encountered this before but i guess it automatically got resolved

[weary spindle]

I think this is a visual bug,

Cc @zealous yoke

[coral grail]

Now im seeing 'Problem converting VM'

[lyric kite]

This URL needs update

Not bad but I was going there and it send me to not found

I mean I know where to find it

but still I thought it's worth mentioning

[torn tartan]

i'm in Persisting Active Directory, Task 2, trying to run mimikatz.exe as Administrator as per the instructions and after executing the command to run the exe, it just hangs, any thoughts on a solution other than resetting the room?

[green tree]

My friend when he keeps trying to use openvpn on tryhackme on parrot os full install he gets ping 128 instead of sequence completeled it ain't working for him

[upbeat quarry]

please upload screenshot of VPN startup output
use link coming below so you can verify with Discord before

[deft furnace]

what the heck

@green tree what are you doing here lmao

[west chasm]

@green tree

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 9, 2025, 10:04 PM

[deft furnace]

it's me btw @upbeat quarry

[sterile whale]

I need help with issue in tryhackme discord

[upbeat quarry]

can you upload screenshot as per msg: #site-support message ?

[deft furnace]

ok

screenshotofwhat?

@upbeat quarry

[upbeat quarry]

upload screenshot of VPN startup output, as I understand you are the one having an issue?

[deft furnace]

yea, so I ping it or what

oh

nvm

ok wait a sec

@upbeat quarry

I can' send pictures

@upbeat quarry are your dms open?

[upbeat quarry]

use this link to verify with Discord, then you can upload screenshots, hence no need for DMs:
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[deft furnace]

@upbeat quarry here

did you mean this?

[sterile whale]

vpn work well

what is the problem?

[deft furnace]

yea IK, and when I connect to the website, it keeps loading an infinite ammount of time

[upbeat quarry]

cannot see a screenshot 🙃

[deft furnace]

yea cause I deleted it

wait

[upbeat quarry]

please share a screenshot similar to mine so we can compare what goes wrong on your side

[deft furnace]

it had my ip the screenshot

wait

[upbeat quarry]

what is the issue?

[deft furnace]

does it need to looks the same?

cause here is what mine looks like

[upbeat quarry]

that message is meant for another user, having a different problem (mimikatz in other room), hence please ignore that 🙃

[deft furnace]

oh

nvm, here is what it shows

so the vpn is working but the page won't load

[upbeat quarry]

what is that .xcf format? can you just not upload a .jpg ?

[deft furnace]

you frensh?

[deft furnace]

I did

[deft furnace]

png one

[upbeat quarry]

our message crossed each other , no sweat 🙃

[upbeat quarry]

no

[deft furnace]

ok cause I saw some frensh in your terminal

so

how can I solve it?

[upbeat quarry]

the line I underlined in your screenshot shows that you are connected to THM VPN

[deft furnace]

yea but it doesn't work

[upbeat quarry]

can you ping 10.10.10.10 ?

[deft furnace]

see

[upbeat quarry]

first, can you ping 10.10.10.10?

[deft furnace]

it says PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.

but nothing anymore

it show as a non finished task

as if the computer was still doing something

[sterile whale]

change the server

[deft furnace]

like it doesn't give me the permission to write

[upbeat quarry]

can you ping anything at all, like 8.8.8.8?

[torn wren]

the tun0 mtu 1500 is too high, and packets are fragmenting - thats why room html pages are failing

[upbeat quarry]

for a ping? 84 bytes of data?

[deft furnace]

PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=116 time=39.2 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=116 time=26.9 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=116 time=27.8 ms 64 bytes from 8.8.8.8: icmp_seq=4 ttl=116 time=27.7 ms 64 bytes from 8.8.8.8: icmp_seq=5 ttl=116 time=27.6 ms 64 bytes from 8.8.8.8: icmp_seq=6 ttl=116 time=26.9 ms 64 bytes from 8.8.8.8: icmp_seq=7 ttl=116 time=28.0 ms 64 bytes from 8.8.8.8: icmp_seq=8 ttl=116 time=27.1 ms

well yea it workes

[torn wren]

thats not on the VPN network

[deft furnace]

he told me 8.8.8.8?

[sterile whale]

ping 10.10.10.10

[deft furnace]

I already pinged 10.10.10.10 and it givees me this

[upbeat quarry]

check answer before: #site-support message

[deft furnace]

and nothing

[torn wren]

ifconfig or ip addr or ip a output?

[deft furnace]

it's ip a for me

[upbeat quarry]

do you have more output coming in your VPN start up after what you showed, like it is restarting maybe?

[deft furnace]

you want the output?

[deft furnace]

I redo the command?

[upbeat quarry]

I want to know if your VPN is stable: if you have more output, maybe your VPN is unstable and restarting?

[upbeat quarry]

no, have you kept the terminal open after the VPN finished initializing?

[deft furnace]

when trying to open the website? yes

[sterile whale]

this tab should be always run

colse it when finish

[torn wren]

VPN interface is on tun3 and not tun0

[naive dust]

It looks like you may have multiple VPNs open perhaps? Looking at that output it says trying to set up tun3

[deft furnace]

wait lemme see

[sterile whale]

sudo killall openvpn ?

[torn wren]

this,..

[deft furnace]

in fact there is tun3, but how lol

if so,how do I delete it

[upbeat quarry]

when you killed previous VPNs instances, did you do Ctrl-Z or Ctrl-C?

[deft furnace]

I didn't kill nothing

[torn wren]

it sounds like they're just pressing X

[sterile whale]

use this and consider open only one vpn session

[deft furnace]

yes

[upbeat quarry]

but you restarted your VPN, right?

[torn wren]

and leave it open, put it in the background

[deft furnace]

yes

[upbeat quarry]

how?

[deft furnace]

I kioled now all

I now only have lo and wlp3s0

[deft furnace]

am I not supposed to do it

?

[upbeat quarry]

good, start from this clean sheet, and then show ip a | grep tun

[deft furnace]

you want me to show my ip a output?

[sterile whale]

you can see running process by using ps aux | grep openvpn

[upbeat quarry]

after you redid the VPN start up sequence

[deft furnace]

her is what I got

fernando 152819 0.0 0.0 6332 2180 pts/10 S+ 23:46 0:00 grep --color=auto openvpn
fernando is a fake name I use lol

[deft furnace]

wait I;m still a beginner, what you mean "after you redid VPN start up sequence"

[naive dust]

That's fine, that's the command you just ran.

Do the sudo openvpn <your_config_file> again (just once)

Then leave that cmd window open, then try pinging 10.10.10.10 again
EDIT: In a new cmd window

[deft furnace]

ok

FINALLY

I get responses from the ping

now let's see if it's working

YEAAAAAAAAAA

Thank you guys a lot, it's been a day and a half that I was stuck in it😭 🙏

[upbeat quarry]

check this THM document for future issues with VPN: https://help.tryhackme.com/en/articles/6496058-troubleshooting-openvpn-on-linux-and-mac

[deft furnace]

so I got the problem becauuse I use to kill the machine and vpn using the "closing" X button?

[upbeat quarry]

very likely

[deft furnace]

how am I suposed to close it then?

[naive dust]

Use Ctrl+C To cancel (most) comands in the terminal

[deft furnace]

ok thank you

[naive dust]

Ctrl+X also works for some, Ctrl+D if that doesn't work. Depends on the app

[deft furnace]

I can finally play ctf again, thank you guys

[torn wren]

yes, you had multiple instances of the openvpn running. you can check ip a to confirm you should only have a tun0

[naive dust]

Bonus tip: Ctrl+L to clear the screen (even works in metasploit)

[sterile whale]

in terminal there are process running either in foreground (as you see in terminal) or background (you don't see directly), read more about jobs, fg, bg, ps

[deft furnace]

what?

oh you want me to read about those?

[sterile whale]

yes

[upbeat quarry]

useful to pick up some experience with these commands, in your journey, but you can carry on with what you know

[deft furnace]

I'll surelly take a look at them

[naive dust]

https://tryhackme.com/room/introtoshells
https://tryhackme.com/room/shellsoverview

These 2 rooms go deeper into shells + what they are and what they're for. Deffo worth reading up on because you will run into this kinda stuff on almost every CTF you do. They explain a few of those concepts (jobs,fb,bg) iirc.

But if you start doing those rooms and it all looks like gibberish then you might wanna do some of the Linux fundamentals beforehand.

[deft furnace]

I just finished networking and ome subnetting course

and now I am currently following the free walkthought of tryhackme

so do I need to finish it before reading that?

[naive dust]

It's entirely up to you : ) Those are just 2 rooms I recommend before diving too deep into any CTFs. I'm pretty sure they are part of the standard pathways so you'll likely do them if you're following along with one of those

If you're unfamiliar with shells / working within the terminal anyway

[deft furnace]

oh okay, if they are in the default path why not, and why not doing them even outside that path

[deft furnace]

shell is the terminal right

and a question, reverse shell exploit mean taking control of the computer of the target without hijm knwing

[naive dust]

Kinda, but not just that. Those rooms will explain more 🙂

Reverse shell ins't an exploit perse, it's more something an exploint may allow you to achieve.

Reverse shell just means the victim connects back to you, instead of you connecting to them.

[deft furnace]

oooooh

[deft furnace]

those talks about reverse shell?

[naive dust]

Yes and more

[sterile whale]

discover interesting linux world

[deft furnace]

oooh they are premium, I have free account

np

I get the ressources from somewhere else

[deft furnace]

the name of a course?

[naive dust]

You could start here? Idk if this is premium only sorry 😛 https://tryhackme.com/room/linuxfundamentalspart1

[deft furnace]

it's free and I already did it

[sterile whale]

just a min

only part1 free

[deft furnace]

Social Engineering is the term used to describe any cyberattack where a human (rather than a computer) is the target; for this reason, it is sometimes referred to as "People Hacking". For example, if an attacker wishes to obtain a victim's password, they could attempt to guess or brute-force the password — or they could simply ask you.

"ASK YOU"

lmao what

[torn tartan]

i figured it out, go into the win32 folder instead of the x64 and use that mimikatz

[fair basin]

Does anyone know if it's possible to regenerate the certificate when you received one? When I created my tryhackme account i did not include it in the first place

[torn wren]

As far as I’ve seen it is not possible. The only possibility would be to contact support, but even then I think I’ve heard it’s not really an option

[fair basin]

Okay, thanks. I think I will try that

[ember osprey]

I don't think it is 😦

[ember osprey]

Can you provide a screenshot 🙂 ?

[ember osprey]

You can report it in #site-bugs channel 🙂

[hushed pivot]

Hello, Who can I reach out with regards to Buying a Voucher exchange rate inquiry?

[ember osprey]

Try to reach out to support on the mail below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 10, 2025, 4:36 AM

[hushed pivot]

Thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3045)

[idle nacelle]

@ember osprey I am still looking for streaks

[ember osprey]

Staff doesn't work on weekends. It's Monday today so expect an answer in the next few days 🙂

[idle nacelle]

[weary spindle]

They can't change it.

[coral grail]

When im trying to upload a VM im getting "Problem conveting VM". Can someone help with this please?

[ember osprey]

I think it's a temporary bug , it was already repirted a few times recently 😦

[coral grail]

Im setting a CTF for educational purposes with a nearing deadline. Do you have any idea when will it be resolved?

[upbeat quarry]

you can do that, but then you will have the x86 version of mimikatz instead of the x64 version (maybe that does not matter here though), as per screenshot

[ember osprey]

Sorry but i don't know when 😦 . Try to report it in #site-bugs .

[coral grail]

alright thanks!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3052)

[naive dust]

guys i am currently solvin a hashing task and it tells me to use john the ripper where can i find that

[ember osprey]

Just type john in terminal 🙂

[empty ember]

it comes with kali

[naive dust]

is it operating after just typing that

the prog

[weary spindle]

No, you need to give it a hash/file and a wordlist with a rule.

[empty ember]

here is a tutorial for john, covers almost everything https://www.freecodecamp.org/news/crack-passwords-using-john-the-ripper-pentesting-tutorial/

[ember osprey]

john <hash-file> --wordlist=<wordlist>

You maybe also need to specify a format if john can't detect it automatically

[empty ember]

when not sure about the hashing type, you can use https://hashes.com/en/tools/hash_identifier or locally with https://github.com/blackploit/hash-identifier

[naive dust]

who do i upload the task file hash.txt to my website machine

it tells me to download a file but it is downloading at my pc not the vm

[weary spindle]

Which machine are you refering to?

[naive dust]

THM

[weary spindle]

You're using the Attackbox?

[naive dust]

yes

[weary spindle]

Then you'll need to copy and paste.

[naive dust]

the thing is when i am trying to do hashing command it tells me to write the path of the hash file

[weary spindle]

Yes

You need to create a new file on the Attackbox and put the hash in there.

A good way to do this is

echo -n "THEHASHHERE" > hash.txt

Swap ou tthe "THEHASHHERE for the actual hash

And keep in the " "

[naive dust]

how to get the wordlists

[weary spindle]

locate rockyou.txt

It's already on the Attackbox, I can't remember where.

[naive dust]

why it did not appear when tried the find command

[weary spindle]

What did try?

find rockyou.txt ?

[naive dust]

no it worked thx

[empty ember]

they are usually in /usr/share/wordlists/

[worthy shoal]

i think the site is bugged since they updated the answer submit, it just won't let me submit this. the room is windows privilege escalation task 7

when i try to type _ it just auto removes aswell

for the flag

[ember osprey]

Try to report it in #site-bugs 😦

[safe gale]

Need Help ASAP, someone is messing with my VM, im using the split screen function and someone has somehow accessed it

Is this a known bug

?

[heavy sluice]

hello, i can not activate my student discount for the subscription, any ideas on why or how to do it?

[ember osprey]

Try to reach out to support on the mail below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 10, 2025, 3:12 PM

[heavy sluice]

thank you

[weary spindle]

Are you buying monthly or annual?

[torn tartan]

It didn’t matter. Worked as intended once I used the other version

[torn tartan]

I didn’t take one. I ended up trying the open the one in the win32 folder. Worked fine

[ember osprey]

Oh , even better 🙂 , keep up the good work 🙂

[umbral hamlet]

hello, i'm trying to renew my premium subscription which is paused at the moment but when i press the "subscribe now" button from the /subscription page it takes me to the /why-subscribe page with a "resume subscription" button that loops back to the /subscription page

[torn tartan]

Ha thank you. These rooms are awesome. I’m new to cybersecurity, interested in penetesting

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3059)

[misty girder]

hello i need some help

[weary spindle]

Then let us know, how we may be able to help.

[misty girder]

i want to start the network but getting some error i'll send you the ss

[weary spindle]

Please verify your account and send in here.

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 10, 2025, 3:41 PM

[misty girder]

done

see

how can i solve this @weary spindle

[weary spindle]

Leave the room with options and rejoin in 15 mins

[misty girder]

ok

done thanks man

[dreamy robin]

hello i just paid the premium month subscription but still no access to premium feature what should i do ? i emailed the support but still no repsond i paid 2 days ago for a renew

[ember osprey]

Only support can help you with payment related issues 😦

[dreamy robin]

damn

i already contacted them but no respond

for 2 days

[ember osprey]

It was weekend , they don't work on weekends .

[dreamy robin]

ohhh i didn't know

so from monday to friday

[ember osprey]

Yes , they will reach out to you as soon as they can 🙂

[dreamy robin]

alright thankss

[fresh kiln]

I cannot access this link, I tried different web browsers but no luck. https://10-10-202-62.p.thmlabs.com/.

[ember osprey]

Press F5 to refresh the page 🙂

Works fine for me

[fresh kiln]

I tried every way 🙂

504 Gateway Time-out
nginx/1.14.0 (Ubuntu)

[ember osprey]

Refresh the page

It won't update automatically

[fresh kiln]

It worked for you but not for me.

I just found the problem. When I click on the link, it doesn't work. It works with copy and paste 🙂 @ember osprey thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3061)

[ember osprey]

Glad to hear that it works now 🙂

[steady basin]

Try writing the whole flag and then manually adding an _ where needed:

THM{HAHAGETPWNED} ==> THM{HAHA_GET_PWNED}

do it manually

[worthy shoal]

I did but it removed the _ automatically everytime i added it. The whole reason why i got the error was because i was apparently logged out but it said i was logged in, so after i refreshed the site THE SECOND TIME(eventhough i did that before posting here) i was just randomly logged out and could not log back in for 5 minutes even with the correct login details.

[steady basin]

probably some rate limitting error

^^ for the error with not letting you log in

[digital wyvern]

Hi there,
I dont know if I am on the right channel. But I can not join a room. I click on the join button and it doesn't work

[sterile whale]

how to filter rooms to show only blue team?

[last plank]

Is anyone else noticing the "questions answered this week" chart is refreshing every second? Started noticing this after the Safer Internet Day Sale banner...

[ember osprey]

How 🙂 ?

[ember osprey]

Yeah me too 🙂

[ember osprey]

Check out SOC paths 🙂
https://tryhackme.com/path/outline/soclevel1
https://tryhackme.com/path/outline/soclevel2

[grand island]

huh i thought i was buggin

[ember osprey]

Nah , many users reported the same 🙂

[grand island]

I dont see the safer internet day sale now did they remove it?

[ember osprey]

Shouldn't be , it should be active for two more days 🙂 . Maybe you clicked x on the banner 🙂

[grand island]

where can i see it?

[grand island]

could it be cause i'm subscribed?

[ember osprey]

You should still see it at the top of your home page

[lament fern]

Maybe a dumb question, but I remember there use to be something called "series" on THM and they were like a collection of rooms you would do in order, but I can't seem to find them. Did THM get rid of them?

[ember osprey]

Yes , they're gone 😦

[ember osprey]

Go to your sub page it should be still visible there 🙂
https://tryhackme.com/manage-account/subscription

[grand island]

hmmm nope

maybe cuz im using a voucher?

[torn wren]

Might only be for non-sub and Monthly sub.

[ember osprey]

Well yeah it may be that 😦

[grand island]

😦

[ember osprey]

Maybe you can try to reach out to support if you're interested

[cinder coral]

I thinkg the new approach to that are Learning Paths

[spare bison]

splunk 201 poison ivy question still broken, i wonder if u can modify your request w burp to input the correct answer lol

i miss the old one where it was just underscores and no text limit

[cloud blaze]

hi where can i find my streak freeze count?

[spare bison]

hover over ur current streak, you'll be able to see how long your streak freeze lasts for

[naive dust]

i have been unable to solve this task bc jtr and hash identifier is not installed an d it is not installing

[tepid arrow]

i got TLS handshake error with the following message. OpenVPN version is 2.6.12 on kali linux

2025-02-11 02:22:45 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-02-11 02:22:45 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.

if further detail needed , i could provide

[ember osprey]

Delete your old vpn file , change vpn server and download a new vpn file 🙂

[tepid arrow]

fail ,the same error occurred

[ember osprey]

Are you running the command with sudo

[tepid arrow]

no

[ember osprey]

Run openvpn command with sudo

[tepid arrow]

can i have a private chat with you bro

[ember osprey]

Try to download and run troubleshooting script
https://github.com/tryhackme/openvpn-troubleshooting

[tepid arrow]

[+] Re-running with root permissions
[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
-Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
-Switching servers, then regenerating your OpenVPN config
-Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting
3 methods mentioned above i have tried but failed

[ember osprey]

Which servers have you tried ?

[tepid arrow]

EU regular 3 EU-VIP1 EU-VIP2

[ember osprey]

You must delete your old file before changing the server and wait 5min after changing the server and downloading a new file

Are you a premium user ?

[tepid arrow]

yes

[ember osprey]

Try with us east server

[tepid arrow]

problem persists

[ember osprey]

Try with eu 4 regular

[tepid arrow]

problem solved. the tls blocked was caused by GFW

[tepid arrow]

VPN rules should be added to the configuration to bypass the GFW

[ember osprey]

So everything is ok now 🙂 ?

[tepid arrow]

yes thanks bro

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3081)

[unborn elk]

Hi there. I hava a problem with my subscription. My automatic payment with my saved card details isn't accepted and it's due two days. I have tried with multiple cards but nothing is working? Is anything wrong?

Is there an ongoing update on the payments or something because there isn't a problem with my bank(s)

[ember osprey]

You will need to contact support for the payment related issues . You can reach out to them on the mail below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 11, 2025, 9:10 AM

[unborn elk]

Thank you

[digital wyvern]

Can you Join this room? https://tryhackme.com/room/adenumeration . I can not. I click on the join button and nothing happens. I want to subscribe. But I won't do it until it is fixed

[ember osprey]

Are you a premium user ?

[digital wyvern]

No. But I don't get any messages.

[ember osprey]

Then you will need to have at least a current streak of 7 days to join that room

[digital wyvern]

OK

Thank you becasue I did not what to do. Since there is no error

[ember osprey]

Just complete at least one task per day for 7 days and you will be good to go to join this room 🙂

[empty gate]

I have seven day streak freeze also I done some question yesterday but today streak is reseted to zero.. Why?

[true sorrel]

have you got it fixed yet brother..?

[spare bison]

didnt try yet

[true sorrel]

i'm stuck at it too

old answer format was better

[ember osprey]

You can ask staff to restore your streak

[brazen patrol]

Hello, I can't login...

OS: arch linux
browser: librewolf-bin (from AUR)
browser console logs: the txt file

I click the log in button after the site loads and enter my creds and nothing happens.
Yes I tried to disable all browser extensions except for "Simple Tabs Groups" and "KDE integration".
Yes I did log in before on this browser and did challenge using it no problem.

oh forgot the browser version... it's 135.0-1

[naive dust]

that task should go as a ssh or root as i am

[opaque wasp]

would love to know how does the leaderboard ranking work, some have less rooms more points some have more rooms less points and high ranked, some have a lot of rooms with less points and are high rank

[ember osprey]

Each walkthrough question answered - 8 points
Each CTF question answered - 30 points
First bloods - 80 points
Different rooms carry different number of points

[opaque wasp]

thank you

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3090)

[weary spindle]

To branch on from this.

If it's the monthly leaderboard, only challenge rooms released within the month give 100%

Any challenge rooms released > 30 days only aware 25% of the points.

[opaque wasp]

yep thats what i was wondering, thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3381)

[vague hemlock]

hi,can anyone help me ? i want to buy throwback lab,but i see that's a private room? how can i buy??

[ember osprey]

I think it isn't available anymore 😦

[stray canyon]

Is there a plan to offer CISSP training with a similar certification upon completion on the website?

[brazen patrol]

Anything on this?

[brazen patrol]

Nvm, I tried now and it worked... I don't know how or why but if it works it works!

[mild zealot]

Is there no way to enter a business name and address for the billing? It seems to just automatically use the information of the credit card for the invoice right?

[elfin wharf]

hi, if I had 8 day streak freeze equipped, and I missed one day would the streak freeze update to 7 day or just altogether get zero/disappear????

[ember osprey]

It would go to 0

[cerulean oracle]

why is cyber defense path not in the roadmap between soc 1 and soc 2?

[compact fjord]

VirusTotal has deemed crackstation as malicious. 2/96 security vendors flagged this URL as malicious. I was getting "your connection is not private" error!! Any thoughts?

[regal summit]

Hey, thanks for helping out in this channel. I'm premium but my room machines have not been working recently - I click the "Start Machine" in the task and it starts the machine but no split screen comes up. I try "Start Attack Box" at the top but it makes and connects me to a different machine. So I have the Task Machine I should be on running as well as a different Attack Box, but the Task one isn't visible. Am I missing something simple? https://tryhackme.com/room/itsybitsy

[snow horizon]

Cyber Security 101-Offensive Security Tooling-Shells Overview won't bring up the tasks. I have completed the whole path other than it.

[ember osprey]

Make sure to use https:// protocol

[ember osprey]

Try to turn anti-virus temporary if you use some from of anti-virus software 🙂 .

[ember osprey]

That's normal behavior. You wouldn't usually be able to access target machines in split-screen view . They're meant to be attacked and exploited using AttackBox/your machine 🙂 . Target machines in split view are available in some rare cases , such as in example rooms to show off the concepts or in rooms related to forensics/blue teaming 🙂 .

[ember osprey]

That path is a bit outdated . SOC1 and 2 are like upgraded and more up to date versions of that path 🙂

[cerulean oracle]

ah i see. I only asked because its difficulty is ranked as intermediate whereas soc 1 is easy and soc 2 is hard, so i figured it was only natural that it would fit in between

As it currently stands in terms of what seems to be considered up to date, the pen tester roadmap has a much more streamlined road before it gets to the hard path then

[heady wadi]

Yes your streak freeze is supposed to go to 7, I tried putting in a ticket for this same issue and it was closed as resolved since the only options for addressing the streak did not have an option for the freeze counter acting up. I guess the only option is to keep track yourself and put in a ticket whenever you need your streak restored as this seems to be the only option right now. They have a lot going on so maybe they will get to it eventually when they have the time.

[tough cape]

hey guys, having problems joining the servers with real people

how do i get into this group? instread of getting asked questions about my knowledge and to complete tasks to join. aserver,

[ember osprey]

#general

[elfin wharf]

ok so it's a bug ig, not a feature lol

[heady wadi]

Bugs are my favorite feature

but yeah just put in a ticket

[plain fulcrum]

Hi does anyone know why I can connect with open VPN, and can see the "Connect" page at 10.10.10.10. But when looking at the access page I see virtual IP 0.0.0.0 Not connected.

does anyone know a fix for this?

[compact fjord]

ok

[ember osprey]

There's a problem with the website , you're good 🙂

[plain fulcrum]

Ok, thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3114)

[compact fjord]

Its almost the date on the certificate is invalid

[compact fjord]

Its almost acting like the certifiacte is out of date!!!

[torn wren]

https://crackstation.net?

[compact fjord]

yeah

[ember osprey]

You're using attackbox or ?

[torn wren]

view the certificate, who issued it

[compact fjord]

I used attackbox and then tried it on my main browser

[torn wren]

should be let's Encrypt with a pub key: 057427b12b6fd594a7f52a18a0c0e86399212e63e5aa0eb76f444307b97c1798

[ember osprey]

This address ?
https://crackstation.net/

[torn wren]

try clearing cache, because I have a valid cert valid until may,12 2025

[ember osprey]

Can you please verify and provide a screenshot ?
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[compact fjord]

Now its working!!! I wonder what happened!!!

[ember osprey]

Maybe you accidentally used http instead of https

[torn wren]

you might have spelled it wrong and was going to a typosquat. or browser had a cert cached

[compact fjord]

I clicked the link in the room. but I did clear cookies earlier. I did copy and paste when making the request.

[ember osprey]

Well all it matters is that it works now 🙂

[torn wren]

which room?

[compact fjord]

I did full scan and check all of security and everything looks good on that

[compact fjord]

Authentication Bypass room. Task 5 cookie tampering

[compact fjord]

Its so strange!!! Hummm!!!

[torn wren]

yea, i see its correct in the Hint - this must be where you followed from? anyways, its working now. good opsec checking it when you got the certificate flag

[compact fjord]

I think maybe at one point of time, I made the request from Google on the attackbox and Google asked me to accept cookies then I rejected cookies. Then I tried to clear cookies to get the your connection is not private error to go away. It still didn't work but now without anymore changes, its fixed!!! But yeah!!! VirusTotal seems to say its malicious. I don't think anyone has any issues with it. But its now working..

[ember osprey]

It may be a false positive , feel free to use crackstation 🙂

[compact fjord]

Yeah!!! False positives happen alot.

[true sorrel]

the issue is fixed. try now

[spare bison]

funny enough my sub ended, so ill just wait next time if i have the money for it, i was just redoing soc1 stuff to see how much i can do without hints

Thanks for letting me know though

[cursive pollen]

hi all, is there any admins about?

[weary spindle]

I'm a mod, if that helps.

[naive dust]

If i need to click on the hint button in a challenge etc, will it lower the points i recieve?

[weary spindle]

No. 🙂

[half needle]

Still, network issues are not solved for room 'breachingad' I'm trying to connect but somehow unable to ping.
refer CLI output as below.

---

oot@ip-10-10-88-77:~# nslookup thmdc.za.tryhackme.com
Server: 127.0.0.53
Address: 127.0.0.53#53

** server can't find thmdc.za.tryhackme.com: NXDOMAIN

root@ip-10-10-88-77:~# ping thmdc.za.tryhackme.com
ping: thmdc.za.tryhackme.com: Name or service not known
root@ip-10-10-88-77:~# sed -i '1s|^|nameserver $THMDCIP\n|' /etc/resolv-dnsmasq
root@ip-10-10-88-77:~#

[ember osprey]

Try to add that subdomain along with base domain to /etc/hosts

[half needle]

what will be the ip

[ember osprey]

It will be target machine ip

[half needle]

i'm in AttackBox

[weary spindle]

Do you have a breachad interface when you do ip a?

[half needle]

not showing the ip on portal

[weary spindle]

Which portal?

[half needle]

https://tryhackme.com/room/breachingad

[weary spindle]

Do you have a THMDC at the top?

[half needle]

FYI

root@ip-10-10-88-77:~# cat /etc/hosts
127.0.0.1 localhost
127.0.0.1 vnc.tryhackme.tech
127.0.1.1 tryhackme.lan tryhackme

The following lines are desirable for IPv6 capable hosts

::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
root@ip-10-10-88-77:~#

[weary spindle]

I didn't ask about that.

Go back to the task room.

[weary spindle]

Also in your terminal can you do the command

ip a | grep "breachad"

[half needle]

oot@ip-10-10-88-77:~#
root@ip-10-10-88-77:~# ip a | grep "breachad"
8: breachad: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.50.18.13/26 scope global breachad
root@ip-10-10-88-77:~#

[weary spindle]

Ok, now do you have a THMDC IP?

You'll get that when you open the room link on the network diagram

[half needle]

with this configuration, I'm trying to access the website which is mentioned. but somehow it's not getting access.
refer to CLI output.

root@ip-10-10-88-77:~# cat /etc/hosts
127.0.0.1 localhost
127.0.0.1 vnc.tryhackme.tech
127.0.1.1 tryhackme.lan tryhackme
10.200.20.101 thmdc.za.tryhackme.com

The following lines are desirable for IPv6 capable hosts

::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
root@ip-10-10-88-77:~# curl http://ntlmauth.za.tryhackme.com.
curl: (6) Could not resolve host: ntlmauth.za.tryhackme.com.

[weary spindle]

Yeah, ignore the hosts file.

Remove that edit.

[half needle]

ok

[weary spindle]

Now
Have you done the sed command?

sed -i '1s|^|nameserver $THMDCIP\n|' /etc/resolv-dnsmasq

[half needle]

root@ip-10-10-88-77:~# cat /etc/hosts
127.0.0.1 localhost
127.0.0.1 vnc.tryhackme.tech
127.0.1.1 tryhackme.lan tryhackme

The following lines are desirable for IPv6 capable hosts

::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
root@ip-10-10-88-77:~# curl http://ntlmauth.za.tryhackme.com.
curl: (6) Could not resolve host: ntlmauth.za.tryhackme.com.
root@ip-10-10-88-77:~# sed -i '1s|^|nameserver $THMDCIP\n|' /etc/resolv-dnsmasq
root@ip-10-10-88-77:~#
root@ip-10-10-88-77:~#

[weary spindle]

You need to actually populate the stuff.

so it will be nameserver 10.200.20.101

Or you can do this manually by sudo nano /etc/resolv.conf

[half needle]

do i need to add 10.200.20.101 in /etc/resolv.conf ??

[weary spindle]

nameserver 10.200.201.101

If that;s your THMDC.

[half needle]

root@ip-10-10-88-77:~# cat /etc/resolv-dnsmasq
nameserver $THMDCIP
nameserver $THMDCIP
nameserver $THMDCIP
nameserver 169.254.169.253
nameserver 10.200.20.101
root@ip-10-10-88-77:~# curl http://ntlmauth.za.tryhackme.com
curl: (6) Could not resolve host: ntlmauth.za.tryhackme.com
root@ip-10-10-88-77:~#

[weary spindle]

Stop curling it.

Read the task material.

nslookup za.tryhackme.com

Name server needs to go on top.

Check out the post in #breaching-ad it should be pinned.

[half needle]

Thanks now it works. for AttackBox instruction it tells to 'nslookup thmdc.za.tryhackme.com' which causes all confusion

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #1 - 3385)

[weary spindle]

That's how you check if you're connected to the DC.

[errant jolt]

Hi everyone, i think there is an error in the masterchef basics:

What is the URL encoded value of https://tryhackme.com/r/careers?

the answer is : https://tryhackme.com/r/careers

but i think https%3A%2F%2Ftryhackme%2Ecom%2Fr%2Fcareers is better

[ember osprey]

Yes , you're correct 🙂

That's bug on the THM side

[errant jolt]

alright 🙂

[ionic flint]

Yo guys! 👋

I’m trying to get into website hacking (pentesting) and was wondering if anyone knows a good YouTube course for it. Looking for something practical, not just theory, and preferably beginner-friendly but still useful.

[ember osprey]

This path is a good choice for you then 🙂
https://tryhackme.com/path/outline/webapppentesting
Maybe freeCodeCamp on YT has something for you also 🙂

[tiny ledge]

am i the only one who has problems with the vm?

[ember osprey]

Are you a premium user 🙂 ?

[tiny ledge]

no, i am not

[ember osprey]

In that case AttackBox doesn't have internet access . Use https://who.is/ on your machine with your browser 🙂 .

[tiny ledge]

thanks, i will try it out now

[tiny ledge]

worked just as fine, thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3132)

[sudden lark]

is there any channel where we can raise a ticket for certain problem?

[ember osprey]

What's the problem 🙂 ?

[sudden lark]

I am having problem buying annual subscription and the support team of THM is worst they response so late and didn't even help me out just sent a message "
Hey there,

Apologies for the delay!

Please can you retry payment now and let me know if the issue persists!

Kind regards,"

I retried and same issue still persists

its so annoying they aren't even helping me out 😭

[ember osprey]

Only support can help you out with payment related issues 😦 . Try to reach out again .

[sudden lark]

and the main problem is that after 8 hours the 25% discount wont be available anymore

[sudden lark]

I tried contacting them. The response team is not interactive at all. The main problem is time is running out and i may not be able to get discount after few hours..

[ember osprey]

Sorry to hear that but only they can help you with payment problems 😦

[sudden lark]

thank you for assistance i was just looking for someone incase there is any staff which can help me out here

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3134)

[weary spindle]

They're not the worst, they're just busy with E-mails.

[sudden lark]

@weary spindle I mean waiting for hours and all you get is "please retry" isn't helpful at all. And I don't want this to be a controversial topic but there are organisations which too gets multiple email and still reply a meaningful message within few hours or even minutes.

[abstract pulsar]

Hello, can I receive a certificate that includes the name of the educational institution?

[ember osprey]

Certificate uses your Full name from the site 🙂

[abstract pulsar]

Is there no way to get it for the institution

[ember osprey]

Well you can put that institution name as your Full name

[abstract pulsar]

And will it be possible to print it?

[abstract pulsar]

Really

[ember osprey]

It is possible to print the certificate

[abstract pulsar]

Thanks for the idea. I'll find out later if this works.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3135)

[abstract pulsar]

Thanks

[lilac halo]

Guys, have a little problem here i've finished the OWASP Top 10 - 2021 and it's stuck at 50% completion

[ember osprey]

Try to leave the room and re-join

If the problem persists report it in #site-bugs

[lilac halo]

All right thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3136)

[wet dome]

Hey everyone, so I am trying to make a payment to subscribe but the payment is not processing. Paypal is also not showing in the payment options. I have already raised a ticket but no response yet from THM team.

[ember osprey]

Only support can help you with payment issues you will have to wait for them to respond 🙂

[wet dome]

Gotcha, I will wait then.

[stone current]

Yeah, same problem here, nothing happens when I click on the button to switch my monthly subscription to the annual one with the discount. I hope they will extend the offer for people having the issue

[sudden lark]

Yea man let's hope it comes out that way

[supple ibex]

Hello. Every time I try and launch start attack box it says free users can only use attach box for 1 hour a day when I’ve only used it for 10 mins

[ember osprey]

Once you start it per day you can't restart it again . Free users can only launch it once per day .

[supple ibex]

Dang, now I have to wait an entire day to complete this assignment

Is there a work around @ember osprey

[ember osprey]

Use your own machine via VPN connection 🙂

[supple ibex]

I have access to VM’s on a website called cyber.org

Would that work.

[ember osprey]

No you need to connect with your VM to THM network

[supple ibex]

Okay

Do you know how I could open the vm in the next task instead of terminating it

[ember osprey]

You can learn how to connect your machine to THM network on the link below 🙂
https://tryhackme.com/room/openvpn

[supple ibex]

Right now I’m on the second task in offensive Penn

And was on the first going to the second and at first it day u have 2 vms open

[elder sinew]

Hello there, It's been about two days since I paid for the premium subscription of THM. Suddenly, I lost my premium membership. It's been barely two days. I want to issue a support ticket, but apparently, my other support ticket regarding another issue has yet to be picked up. So, I can't create a ticket about this issue until the other ticket gets picked up. Any help?

[ember osprey]

Only support can help you with payment/sub. issues 😦 . You will need to contact them directly via email .

[elder sinew]

ohh i see, can we reach out to them using this mail [e-mail]?

[ember osprey]

Yes 🙂

[elder sinew]

Alright thanks mate

[torn wren]

Once you open the attackbox for the day, immediately expand it to full screen. This puts it in its own browser tab so you can leave it open while you traverse through the tasks and open/close task specific VM’s. This way you can maximize your hour of attackbox time. Otherwise you’ll need to learn to host a local virtual machine which has its own challenges but there are many walkthroughs for this on YouTube etc.

[unkempt trail]

Hey folks. I finished the Web Application Pentesting path and when I generated my Certificate it gave me the option of using my hacker name or my real name. I put my real name in there and it still generated using my hacker name. Is there a way to reset it? I had plans to add the Certificate to my resume.

[final bone]

Hi, i have a problem regarding my subscription, i already cancelled my subscription last 2 month but today it suddenly charged me

[torn wren]

Afaik, it can’t be regenerated. But selecting the name is a new feature so try writing and email to support about it

[unkempt trail]

Ok will do thank you. Though maybe if it's new I should just keep it as it is? Do you think the name really matters in this case?

[scenic torrent]

Gave +1 Rep to @torn wren (current: #84 - 90)

[torn wren]

[e-mail]

[torn wren]

I guess it’s up to you. It’s only a certificate not a certification so I think it’s more about having completed it. If you want to keep you name and hacker name separate then I guess it could be a problem to use it

[unkempt trail]

Hmm I'll sleep on it then thank you Ronin.

[ember osprey]

I think that cert will use your full name from the website but once it is generated it can't be changed 😦

[unkempt trail]

Thing is I actually put my full name in though like it had me write it 😭

It's all good

[prisma echo]

Please restore the old answer bar,
instead of focusing on learning, now I have to waste my time on asnwer formatting, cant copy paste, if one character is out place, i have to waste minutes to put it properly,
Please switch back

[stark lance]

Hi, I'm trying to access the Shells overview room, but no task is displayed is it normal?

[ember osprey]

Do you have some anti-virus software

[stark lance]

Yes

I'll try to disable it then

[ember osprey]

Yes , it may be blocking the content 🙂

[stark lance]

Thank you that worked

[ember osprey]

Yeah it is a false positive just make sure to turn your AV on again once you finish the room 🙂

[stark lance]

Of course thank you again!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3156)

[verbal solar]

Hey im doing the room breaching AD cant access the following link the hostnames and DNS are well resolved though tryna do a LDAP pass back attack
http://printer.za.tryhackme.com/settings.aspx

[weary spindle]

Which subnet are you in?

[verbal solar]

Hey i did resolve it thank you for the prompt response

[weary plank]

i cant connect to openvpn,give me some advise please

[ember osprey]

What's the problem 🙂 ?

[weary plank]

i cant talk about it clearly,i just tried many vpn servers but i cant connect

[ember osprey]

How , what's happening 🙂 ?

[weary plank]

are you robots?

[ember osprey]

No , should be real

[weary plank]

openvpn is down for me,almost all openvpn servers

[ember osprey]

Can you plase verify and provide screenshot of what's going on 🙂 ?
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[weary plank]

but how can i show screenshot for you?

[ember osprey]

You will need to verify first , follow instructions from the link above

[weary plank]

ok thanks

[obsidian dragon]

hello

my windows fundamentals 3 room wont load the VM

[ember osprey]

How 🙂 ?

[obsidian dragon]

i mean it loads but the screen is black

it wont show the windows

[ember osprey]

Do you have browser extensions or ad-blockers ?

[obsidian dragon]

i do have ublock...but on rooms 1 2 it worked fine

ok after 2 restart it worked

thx

[burnt tangle]

Oh no, an error occurred while starting VM: PARSING_ERROR

Any idea anyone?

[ember osprey]

Try to refresh the web page 🙂

[burnt tangle]

Godsend as always, cheers KGB

[ember osprey]

Does it work ?

[weary spindle]

#room-bugs please.

[obsidian dragon]

sry

[weary spindle]

It's okay. 😄

[burnt tangle]

Yes sir!

[spare vessel]

Hello guys im having trouble connecting to the VPN, ERROR : TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

[ember osprey]

Delete the old file , change server to some other server , wait 5min , generate and download a new file 🙂

[spare vessel]

will try it

[ember osprey]

Try it and give us an update , wait few minutes after generating file before downloading

[frigid zinc]

I found the key that I believe is correct but the site doesn't accept the answer, I've looked in several places and following the steps this is the only one I've found, in fact I've done the error check and it didn't say there was any error.

[ember osprey]

No , it isn't flag meant for this room 😦

It's a flag for another room

[frigid zinc]

what do i do now?

[ember osprey]

Find the correct flag 🙂

There should be a link to framework page in page source

[frigid zinc]

Ok, thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3177)

[ember osprey]

@frigid zinc Any update 🙂 ?

[frigid zinc]

Yes! I found, thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3178)

[ember osprey]

Congrats , great job 🙂 🚀

[spare vessel]

now im gettin another error: cannot load inline certificate file

[ember osprey]

What's the problem ?

[spare vessel]

i edited the message with the error

i can't upload screenshots

[ember osprey]

You need to verify to upload screenshots . Follow instructions from the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[ember osprey]

If you're on Windows use VPN community
https://openvpn.net/community-downloads/

[spare vessel]

I've done that

[ember osprey]

Which server are you using ?

[spare vessel]

EU2

[ember osprey]

Try to use delete that file and use EU3 or 4

[obtuse sorrel]

Hey so Im trying to buy the premium in THM but it just doesnt go thorugh It just stays in the subscription page

[main ingot]

hello i have a problem in Shells Overview room. it wont let me do tasks even though i am subscribed

[wintry wyvern]

Hey
I have a problem with VM it’s show me black nothing to see I can see IP and I terminated it and refresh the web

When I press to view in full screen didn’t work with me VM didn’t work

[upbeat quarry]

which is room is that?

[nimble cedar]

should I be using machines VPN or networs VPN for windosprivledgeesc room ?

[upbeat quarry]

machines VPN

[nimble cedar]

Alright I guess im not loosing my mind then. Still not working from my side on WSL. Idk whats going on

[plush bay]

yeah windows subsystem for linux is well known for handling networking stack badly for openvpn making it near unusable for tryhackmes openvpn hacking

get a full fledged vm like with virtualbox or vmware instead

[nimble cedar]

will do. yeah I am able to network with the machines but I cant complete the exploit. sounds good I was lost

[echo current]

I'm having the same issue in osquery:the basics 😦

[upbeat quarry]

screenshot shows what I have when I start osquery
can you post similar screenshot of what you have
please use link coming below to verify with Discord so that you can upload screenshots

[west chasm]

@echo current

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 13, 2025, 11:01 PM

[proven stream]

Hey, i was trying with the SMOL room today. While i enter the url to add smol site to/etc/roots it's not responding. anyone facing the same issue, or am i going wrong somewhere. pls help!

[upbeat quarry]

you mean /etc/hosts, right?

[proven stream]

oh yeah! exactly, srry my bad

[echo current]

is working for me now, thanks!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #16 - 573)

[plush bay]

what happened with verifying and screenshot???

[proven stream]

just now realized i forgot to verify, lol😂

[plush bay]

show the /etc/hosts file of the attackbox please

[plush bay]

yeah you need to add a line in that file under tryhackme.lan
with this contents
10.10.43.36 smol.thm

[proven stream]

oh shit! ya; didnt realize that!
Thankyou so much! 😁

[plush bay]

no problem

enjoy the rest of the challenge

[drifting rune]

I have a problem with edge on fedora and website login. Anyone had similar issue?
Credentials are entered, captcha verified but when log in button is pressed this is what I see.

also there are tons of errors in webbrowser console

[indigo fractal]

Is there a way we can see what and how many Vm's are running for my account. Got this error " You can deploy only maximum of 3 machines at a time"

[drifting rune]

One is ungoogled chrome and the second one with more errors is edge browser (both are stock clean without addons). The same system, I have no idea what is happening here. Press images to open in full for details.

Sigh, probably some linux shenanigans as edge on windows works ok :/

[ember osprey]

You will need to contact support on the email below for payment related issues 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 14, 2025, 1:48 AM

[ember osprey]

Yes , go to this link 🙂
https://tryhackme.com/api/vm/running

[ember osprey]

What's the problem ?

[weary plank]

i tried all server

@ember osprey

[ember osprey]

Are you from 🇨🇳 maybe ?

[weary plank]

it can be used two days ago and i changed nothing

yea

[ember osprey]

Users reported VPN connection problems from 🇨🇳 , i think that there's some blocking of vpn traffic on their side 😦 . Your only option may be THM attackbox

[weary plank]

do you have a point time that chinese users can use VPN connection

[ember osprey]

I don't think so

[weary plank]

do you work in thm? does any explain for chinese users? just vpn traffic what i can get?

[gloomy delta]

Can someone help me with this....

[ember osprey]

Your only option may be to use AttackBox on THM 😦

[gloomy delta]

My current plan is 374rs one I dunno what's the other 499rs one

[ember osprey]

You will need to contact support for payment related issues , you can do so on the email below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 14, 2025, 2:26 AM

[gloomy delta]

Thnx

[worthy flare]

I want to manage my subscription but when I go to the subscription tab within my profile, nothing shows up. Just a blank page... even after reloading my webpage. Any fix for this?

[ember osprey]

Can you try to use different browser ?

[worthy flare]

I just tried through safari and still same issue. I tried through chrome beforehand

[ember osprey]

Maybe some temporary problem on THM side try again in few minutes

[worthy flare]

alright will do

[vocal bronze]

Hello, May i know how does the monthly ranking system work on the site

My obv. guess was points acquired during the month but i check the board, i saw people with less points ranked above me.

[ember osprey]

Only CTFs are counted , walkthrough rooms aren't counted for monthly leaderboard 🙂

[vocal bronze]

so it show all points acquired on the board but it place the ranks according to ctfs points only ?

[ember osprey]

No , monthly board should show only points aquiered that month , only crfs are counted in that number

[vocal bronze]

yeah, my problem is people with less points ranked above me

[ember osprey]

Try to refresh the page

[vocal bronze]

How is that possible

[ember osprey]

What ? I can't see anything here

[vocal bronze]

first is points second number is rooms

this is a screenshot of the leader board

[peak sequoia]

That means you're probably looking at the monthly leaderboard then?

[vocal bronze]

i am

[vocal bronze]

.

that was my problem

[ember osprey]

Site probably bugged and still shows global points , refresh the page and select monthly again

[vocal bronze]

after some playing i got it working

[ember osprey]

Yeah it can get stuck sometimes 🙂

[vocal bronze]

it show true ranking either way though

[vocal bronze]

thank you !

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3189)

[vocal bronze]

just to mkae sure it only count ctfs right ?

[ember osprey]

Yes , only challenge rooms

[zinc tartan]

https://tryhackme.com/room/preparation room is lagging (do not respond for couple sec after each interaction) and machine is not working

[still sequoia]

Hi @bitter osprey were you able to solve the cookie issue? I am stuck too, no cookie received. @ember osprey ? Thanks

[ember osprey]

What's the problem 🙂 ?

[dawn moon]

hi guys

im trying to play the red team capstone but for some reason i cant download the vpn for the network anyhelp or idea why ?

[ember osprey]

Are you a premium user ?

[dawn moon]

i am

[ember osprey]

You need to join/start network before going to download a file

[dawn moon]

i did but i cant start the network i get failed to start the network + There is no options when i try to download the networks vpn

[ember osprey]

Let me check to see if it works on my side , maybe there is some temporary problem with the network

[dawn moon]

Thanks bro

[ember osprey]

I will be back in a min or two with an update 🙂

[dawn moon]

ofc take your time bro

[ember osprey]

Nope , doesn't work for me either 😦

[still sequoia]

Hi @ember osprey , in Session Management room task 6 after creating a regular student and logging in i should normally receive a cookie in order to proceed I wanted to paste a screenshot but i cannot drag nor see any + next to the text box.

[ember osprey]

You will need to verify to upload screenshots , follow instructions from the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[still sequoia]

thanks for your help, sorry new to Discord, here is the screenshot

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3195)

[ember osprey]

Try to refresh the page , press F5

[still sequoia]

done that and also tried another machine, another Attack Box

[ember osprey]

Can you provide me with a room link 🙂 ?

[still sequoia]

sure how can i do that?

[ember osprey]

Yes

[still sequoia]

how do i send you a room link?

[ember osprey]

Just paste it here 🙂

[still sequoia]

https://tryhackme.com/room/sessionmanagement

[ember osprey]

Ok I will start the machine now to see what's going on 🙂

[still sequoia]

thanks!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3197)

[ember osprey]

Task 6 ?

[still sequoia]

yep

[torpid monolith]

guys, what should I do if my attackbox keeps lagging and it's not working even after I restart it?

[ember osprey]

AttackBox can get slow sometimes , it has pretty limited resources , there's nothing much you can do about it 🙂

[torpid monolith]

😢

[ember osprey]

Machine started i will give you an update in a minute 🙂

[ember osprey]

Click on Local Storage tab 🙂

[still sequoia]

Thank you for your help, i was looking in the wrong storage container, it's OK now.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #2 - 3198)

[ember osprey]

Keep up the good work 🙂 🚀

[grim axle]

need some help @kgb . I'm working in the "CAPA the basics" room but the VM is not coming up, it's been like that for over an hour now.

@ember osprey

@ember osprey could use some help here

[ember osprey]

Do you have any browser extensions / ad-blockers ?

[grim axle]

no i dont, i havent encountered this issue before

[ember osprey]

Can you try to use different browser ?

[paper meadow]

I am having the same problem right now. Using Chrome.

[ember osprey]

Do you have extensions / ad-blockers ?

[unborn elk]

Are there any problems with the VM's in general. Because I am trying to load up the Registry Explorer in the Unattended room in DFIR but it's never starting. It's stuck forever in the starting process?

[paper meadow]

I am using adblocker but it's usually not an issue when launching VMs. But it works for me now, so all good for the time being

[ember osprey]

Ok , glad to hear that 🙂 . Enjoy the room 🙂

[brazen thistle]

hi at the room activerecon the machine does not work, I try pinging it and I get no reply I even restarted the machine. my network configuration is not the problem (even tested with the attack box), any ideas why?

[ember osprey]

Can you provide some screenshots ?

[brazen thistle]

with what

empty console after ping?

[ember osprey]

Yes

[ember osprey]

Are you connected via VPN to THM network ? Can you access http://10.10.10.10/ ?

[brazen thistle]

yeah

[weary spindle]

There's a reason you can't ping this.

[torn wren]

traceroute 10.10.201.120

but first double check you've the right target IP address for the machine

[last kindle]

Hello i can't log to my openvpn bruh

[weary spindle]

"log in" ?

[last kindle]

i make sudo openvpn shell.ovpn

and why i show you

i can' send a picture

💀

[naive dust]

Whats the output youre getting from command when trying to connecto ovpn? @fresh lichen

[brazen thistle]

after multiple start/stop machines it worked, in that room there was also a problem at some point port 21 was not open and I should've been, after another restart it worked, def some network/configuration problems

[last kindle]

┌──(kali㉿kali)-[~]
└─$ sudo openvpn Desktop/SheII.ovpn
[sudo] password for kali:
2025-02-14 12:55:04 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-02-14 12:55:04 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-02-14 12:55:04 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-02-14 12:55:04 library versions: OpenSSL 3.4.0 22 Oct 2024, LZO 2.10
2025-02-14 12:55:04 DCO version: N/A
2025-02-14 12:55:04 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2025-02-14 12:55:04 OpenSSL: error:0A080009:SSL routines::PEM lib:
2025-02-14 12:55:04 Cannot load inline certificate file
2025-02-14 12:55:04 Exiting due to fatal error

bruh

[fresh lichen]

Vpn connection is establishing successfully but when i performing cmds in the attack machine I was unable upload the script from my machine to attack machine

[naive dust]

want load my machine

wont*

[fresh lichen]

It was stuck in download only

[fresh lichen]

Output of the openvpn

[weary spindle]

Get another shell and see if it's been transfered

[fresh lichen]

I have tried that also no use

I'm thinking something is wrong with openvpn because when I tried free openvpn thm servers they are successfully establishing connection in the machine but in thm website it's showing not connected only vip servers are showing connected in thm

[weary spindle]

Is the python server open?

[fresh lichen]

Yes it's open

[weary spindle]

Can you show a screenshot?

[torn wren]

sometimes that happens, i just spun it up and it worked first try.

[weary spindle]

Your server has crashed.

[fresh lichen]

It is python server issue it's the mtu packet size issue previously it's was 1500 I have change it to 1200 now it's working fine

[drifting otter]

hey i need help

[weary spindle]

With? 😄

[drifting otter]

i can't change my email

do you know how to change it

[plush bay]

contact support using the support email

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 14, 2025, 7:04 PM

[knotty stone]

How do I also write a BIO like this on my page?

[ember osprey]

Click on your profile picture > manage account settings . There should be an option to add description there 🙂

[knotty stone]

?

[ember osprey]

Biography

[knotty stone]

ok thank you

[swift estuary]

HAPPY VALENTINE EVERYONE. ESPECIALLY THE LADIES. I knows it's just another day for us Guys 🤣

[hexed ridge]

hello i just finished Pre Security path and want to print the cert for it but it uses my user name NOT my real name how can i change it? my other cert's have my real name?

[ember osprey]

Once the cert. is generated it can't be changed 😦

[hexed ridge]

o dang

[ember osprey]

Thanks , happy Valentino to you too 🤣

[scenic torrent]

Gave +1 Rep to @swift estuary (current: #2674 - 1)

[timid osprey]

Hey all, i've been using the VPN to connect to rooms for months now and suddenly all my scans keep getting block and can't communicate with the room for like 5 minutes

Has there been some kind of change recently regarding rate limits or something?

[ivory spruce]

From which location are you connecting from if you don't mind?

[torn wren]

There shouldn’t be, but sometimes I need to cycle the vpn config or server.

[timid osprey]

AU, however I haven't had any issues in the past

[ivory spruce]

Also, have you tried to disconnect and re-connect to make sure it isn't an isolated case?

[ivory spruce]

Ah.. there shouldn't be issues then

[timid osprey]

Rebooted and full-upgrade

ill get a new config and see if that helps, thanks for the suggestion

[torn spindle]

I'm blind

[burnt marsh]

Why the leaderboard says "You are rank #26", but #26 in the list is some other account?

[ember osprey]

You probably have the same number of points

[ember osprey]

Try to report it in #site-bugs 🙂

[swift estuary]

Technology isn't perfect sometimes. I made Level 0xA but still has me at 0x9 🤣

Does anyone get gifts, prizes, or discounts for being on the Leaderboard? I mean is there a viable reason to be on it or just for status symbol?

[ember osprey]

Status symbol 🤣

You can get a badge if you're top on monthy leaderboard 🙂

[devout flare]

Only if we got another badge like that for each country #1

[swift estuary]

I already have 14 badge's? Is one more really going to look any better? There just badges?

🤣

[ember osprey]

I think that only #1 on global monthly lb gets a badge 🙂

[ember osprey]

Well , yeah 🤣

[devout flare]

Yeahh

[swift estuary]

Yea, #1 global is that Ryan M guy...

[ember osprey]

You also have global monthly leaderboard 🙂

[swift estuary]

I haven't even checked the leaderboard because I know I'm not on it at 0xA so still got a ways to go. But I'm not worried about it really. It is nice it gives people a goal to shoot for but just isn't my thing.

[weary spindle]

Rank != level

[swift estuary]

Either way, I know I'm not there yet.

Also I mean THM doesn't even have my Level right in here which is what got this whole convo going in the first place. Some something wrong in the wires somewhere 🤣

It's right on my profile though.

[weary spindle]

You mean the discord?

If so, you just need to manually verify, you're 0xA after all

[swift estuary]

It's ok Scrubz, I ain't that worried about it. I'm sure it will evenually catch up.

[night bough]

hi why my vpn is not connected

[weary spindle]

It's connected.

Ignore the access page, it's wrong.

[night bough]

ok thanks

you are the goat

[weary spindle]

Just minise the VPN terminal, don't close it

[night bough]

ok why dont close

[weary spindle]

Cause it will close the tunnel if you do.

[limber coyote]

noob question but if im using openvpn and i connects successfully can i open another terminal and run nmap scans on there to the target machine? when i try to do so it says the hsot is down.

[weary spindle]

Which machine are you doing?

[limber coyote]

Basic Pentesting

https://tryhackme.com/room/basicpentestingjt

[weary spindle]

Did you close the VPN tunnel?

[limber coyote]

no

[weary spindle]

What is the target IP?

[limber coyote]

10.10.125.124

running 10.10.125.124 gives this output : Starting Nmap 7.95 ( https://nmap.org ) at 2025-02-15 10:16 EST
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.05 seconds

[weary spindle]

I don't think you're connected to the VPN properly.

Which OS

[limber coyote]

arch linux

[weary spindle]

In a new window can you do

ip a | grep "tun"

[limber coyote]

'''youdi ~ ip a | grep "tun"
4: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.2.13.9/17 scope global tun0
5: tun1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.2.13.9/17 scope global tun1
6: tun2: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.6.10.121/17 scope global tun2
7: tun3: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.6.10.121/17 scope global tun3
8: tun4: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.6.10.121/17 scope global tun4'''

[weary spindle]

Yeah

You have too many tunnels open.

sudo killall openvpn -9

Then re-connect.

[limber coyote]

yeah that fixed it

thank you so much!

[ashen ravine]

I am on a 47day streak and yesterday i had to use my streak freeze
So my question is when will i get the next streak freeze? It should be a recurring thing that if you have to use your streak freeze once, so, maybe after X number of days, you will get one more again.

[weary spindle]

During an event, or the next badge.

[strong crag]

how can i remove my billing address??

[ember osprey]

Click on your profile picture on THM website > Manage account > Subscriptions

[strong crag]

there is only a subscription button, I want to pay with a different card and I need to specify a different address.

[ember osprey]

Click on manage payment details > Add New

[strong crag]

this only card, not billing

[ember osprey]

If you're having some payment related issues you will need to contact support on the mail below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Feb 15, 2025, 4:22 PM

[final elbow]

Hello, I am working on this Enumeration & Brute Force "Easy" room. I have added my ip address to the /etc/hosts file, associated with enum.thm. So at the bottom of the file I have the following line: 10.10.228.36 enum.thm I can ping enum.thm and it responds of course. However, I get the Error code: 405 when I attempt to access http://enum.thm/labs/verbose_login/ . I have searched and see others with the same issue but I don't see how they resolved it.

[ember osprey]

You probably added wrong IP

Make sure to add target machine IP and not AttackBox IP

[final elbow]

that woud be the issue... I will go back and check the target machine IP...

I didn't notice the difference between my AttackBox and the Target Machine. Evidently I need to start both.

[ember osprey]

You can start target machine by click green Start machine button in Task 1

[final elbow]

Got it. Thank you. Totally whiffed on that part.

[rustic mulch]

In one of your rooms you talk about JA3... JA3 is now superseeded by JA4.. Can you please update it?
https://blog.virustotal.com/2024/10/unveiling-hidden-connections-ja4-client.html

[ember osprey]

Try to report it in #site-bugs 🙂

[rustic mulch]

Ok will do 🙂 Thank you

[rustic moat]

hello everyone, I have been trying to attach my VB/ Kali to the THM but the VPN will not connect (tried to add an attachment but can't)

[ember osprey]

You will have to verify to upload images . You can see how to do so on the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[rustic moat]

ok thank be back soon

[ember osprey]

Don't terminate openVPN client

You need to keep it running

[rustic moat]

ok I will reopen

[ember osprey]

Open it and keep it running in a separate terminal

[rustic moat]

ok done

here is what I got in return

[ember osprey]

Open up new terminal and run this cmd sudo ip link set dev tun0 mtu 1200

[ember osprey]

Without cmd i made a typo

sudo ip link set dev tun0 mtu 1200

[rustic moat]

┌──(kali㉿kali)-[~]
└─$ sudo ip link set dev tun0 mtu 1200
[sudo] password for kali:
Cannot find device "tun0"

[ember osprey]

Try to change VPN server and download new file

[ember osprey]

Maybe target machine timed out by this point . Try to restart it

[weary spindle]

That doesn't look connected.

TLS handshake failed.

[rustic moat]

this is a new machine and I started the ssh as soon as I got the ip. My concern is that on the tarket machine has a lot of errors in in it. *

resarted again tarket and ssh

I am going to redownload the file and try again

[final elbow]

Regarding the Enumeration & Brute Force, Task #3. We use a Python script that uses the functions.php from: http://enum.thm/labs/verbose_login/ and my question is: how do we know that function is there in order to exploit? Is this just given for now but later we will learn how to find this type of information?

[rustic moat]

can I move forward with this, for the VPN access?

[upbeat quarry]

you can enter yes
typical initial session with ssh

[rustic moat]

no I am in!!!🎉

Thankyou ROOM!!!