site-support

[tough aurora]

I don't believe these terminations are related to time

oddly enough, I don't really get any terminations

I might have jinxed myself, got instance terminated just now 🤣

[obtuse jacinth]

Thank you, but it's true for me that there are a lot of forced terminations during this time.
Just now, an instance that had only been running for 15 minutes was terminated. It's the second time today.

https://help.tryhackme.com/en/articles/6498318-instance-termination

It said to email them if it happens frequently, so I'll follow that.

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #80 - 109)

[tough aurora]

yeah, it might be that a lot of people are currently doing tryhackme at this time (maybe), but in my opinion (just my opinion), I don't think tryhackme terminates machines on purpose because it is midnight or very early morning or very late night UTC time

[vernal gust]

Hello! I have a friend that tries to join the server and says he is banned. He never been here. He just created his discord account only to join this server but he can't and I don't know why. He tried to connect using a VPN also but still didn't work. Waiting for a response, thank you!!

[chilly island]

in the past people twisted my words and used that "twisted words they did twist" against me
This is a tactic that can be used against righteous individuals legally and can have severe to extreme consequences ( this isn't a joke )
The action of "twisting words" or altering factual data in speech, is something I refer to as Fallacy
( this isn't a direct attack to you or anyone, I have nothing against you )

That said last time I used THM under windows, the OpenVPN working wasn't outputted in the website as "working"
the only way for you to verify the connection was through other means to make sure the explicit connection is on !
This issue had always been there for at least one year or two, my forensic data can attest to that
Although I might not be able to provide you the exact date time I first tested the OpenVPN ( years ago and the connection was working but the website didn't display anything worthy confirming my connection )
I always forgot to report this issue exclusive to windows, but that shows the lack of testing on your side through the years not being able to fix this

[ember osprey]

Yeah , searching by tags is supported and works pretty good imo . I use it on daily basis 🙂

[tough aurora]

it is? I never knew...

[tough aurora]

KGB or Scrubz, could you help this person (they've been waiting for a while, soo)

[tough aurora]

how do you search for tags?

[ember osprey]

Just type what you're looking for in the search bar 🙂

[hallow heart]

You know what.. I think it works if you don't also apply a sort order

I just checked again

[ember osprey]

Can your friend send me his token in dm ?

[hallow heart]

Well, not really tags but fairly close

Thanks KGB

[tough aurora]

huh, it does work, but not exactly Linux machine vs Windows machine

I would like to see that search parameter

[hallow heart]

I submitted a feature request on the site feedback form earlier

[weary spindle]

Can you DM me their user id?

[weary spindle]

If they've never joined, the user id would provide a more accurate output if they've been banned or not.

If they've never joined the server, they'd not have verified.

[ember osprey]

Thanks for the info 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 3787)

[vernal gust]

Yes

[weary spindle]

Thanks. 🙂

[scenic torrent]

Gave +1 Rep to @vernal gust (current: #2905 - 1)

[vernal gust]

Me too

[cloud adder]

Morning, i need help. Ive whitelisted the payment for my oremium account with my bank but the payment still wont process. And THM is taking realy long to get back to me. Any advice?

[tough aurora]

the THM team is very busy, so it can take up to a week for them to respond, and only they can help you with payment issues, so you, sadly, just have to wait 😦

[cloud adder]

Damn ok thats sucks...Well ill just keep grinding the free stuff then. Thanks for the response man

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #79 - 111)

[tough aurora]

no problem 🙂

[gilded skiff]

I am an active member for couple of weeks now on thm. Have a couple of quetions to the structure of the webpage:

1. is every room assigned to a learning path?
2. how to get an overview over every single learning path available?

[ember osprey]

1. no
2. https://tryhackme.com/paths

[tough aurora]

not every room is assigned to a learning path, and I don't believe there is an overview for every single learning path (if you mean that like an overview after learning everything in the path), but there are challenges related to them

[tough aurora]

ooh, short, concise, gets to the point 🙂

[gilded skiff]

so there are 14 paths in total on thm then?

[tough aurora]

yes, but two of them require you to have the business plan (not the normal subscription) or the cloud license (the business plan is for a group of people with the same business plan, the cloud license gives a few months, as I believe, of access to the 2 paths: Defending Azure, Attacking and Defending AWS

[gilded skiff]

I see and then there are challenges and rooms which stand on their own without being part of a path

[tough aurora]

yup

but, as you learn, you should be able to complete those challenges (but it takes some time)

[gilded skiff]

I like the webpage but sometimes I fel it could be a little bit overwhelming in terms of structure

whats the differncde between modules and sections? a series of sections make up a path, each section contains multiple rooms

[tough aurora]

you will get used to it 🙂

[tough aurora]

sections are part of rooms, and there are multiple sections in a room. a module is a group of rooms that are connected in someway. for example, in one module, it can contain some rooms where you learn, and at the end, there may be some challenge rooms you solve from what you learned (just an example, many more)

[gilded skiff]

I see

[cloud adder]

Well they helped me the same day! Awsome service my payment just cleared now

[tough aurora]

niceee 🙂

[gilded skiff]

so looking at this link I cant find the "offensive pentesting" path that is referenced at some other place on the webpage, why ist that

[tough aurora]

let me give you a new link, one sec

[tough aurora]

this will give all the learning paths:
https://tryhackme.com/hacktivities?tab=paths

[gilded skiff]

ty

[tough aurora]

no problem 🙂

[distant thistle]

Hi, I'm facing a problem from few days.
The problem is, I answered the questions but the dashboard show up "0 Question" and I also noticed that there is no points add for the newly answered questions.

[tough aurora]

what rooms did you complete?

[distant thistle]

Now, I'm practicing in "Advent of Cyber 3 (2021)".

[tough aurora]

so, for every question you answer, you don't get any points or +1 question in the dashboard?

[distant thistle]

Yes.

[tough aurora]

if you are answer questions where you just click a button, that might not add up to points

[distant thistle]

Okay, then I'll try another room.

[tough aurora]

so, for some questions, you just have to click complete to complete the question

have you been answering questions that require an answer?

[distant thistle]

Yes. This problem is happening from few days.

[tough aurora]

Scrubz, KGB, you guys have any idea?

[ember osprey]

what's the issue 🙂 ?

[tough aurora]

MD Sazzad Hossen said that he has beens solving questions for a few days, but his points are not increasing, and the number of questions he answers (that shows in the dashboard) does not increase either

[quasi prism]

Hi, I am doing the subdomain enumeration process in the Jr Penetration Tester course.
I can't find the target IP in Task 6.
How do I fix this? I can't find the red target machine information box..

[tough aurora]

there should be a start target machine button in the task or in one of the previous tasks

when that starts, near the top of the page, the ip should show up a minute after

[quasi prism]

Okay, I'll check it again 🙂
Thank you for your answer !

[tough aurora]

no problem 🙂

[ember osprey]

It should be fixed now if you're refering to weekly leagues 🙂

[tough aurora]

not weekly leagues, like the whole site. they cannot get any points at all

[ember osprey]

Maybe they're doing some older rooms that don't give points anymore

[tough aurora]

could be

[tough aurora]

but it's not just points

it is also the number of questions they answered in the dashboard

[ember osprey]

Maybe they could try to reach out to support then , mods can't help with that 😦

[tough aurora]

try email the tryhackme support team

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 29, 2025, 1:07 PM

[unique smelt]

I’m unable to pay for the Premium subscription (₹499.80/month) using my SBI Global International Debit Card despite multiple attempts. The platform only supports card payments, and I receive a ‘payment could not be completed’ error. Can anyone suggest a solution?

[sour beacon]

ay can someone help me with this

i triedall the ips in defesive security inro andit all says invalid ip entered

[weary spindle]

Which room?

[weary spindle]

Please contact [e-mail]

[sour beacon]

defensive security intro

[unique smelt]

I am facing an issue with subscribing to the TryHackMe Premium plan (₹499.80/month) using my SBI Global International Debit Card. Despite multiple attempts on May 29, 2025, at around 04:14 PM BST, I receive the error “Your payment could not be completed at this time.” With only card payments available, I raised a ticket, but the support team has not responded properly or provided a solution. Can you assist with alternative payment options or escalate this for a prompt resolution?

[weary spindle]

I have already asked you to email support...

[weary spindle]

One of the Ip's is correct.

[unique smelt]

support is not helping im facing this issue for past 2 days i tried by rising a ticket still i couldnt get a proper response ... help me please

[sour beacon]

they all say invalid ip entered

[weary spindle]

Support will answer when they can, I'm sorry but account and billing is only dealt with via E-mail.

[weary spindle]

Wrong ip?

[sour beacon]

i cpied and pasted from the list\

[weary spindle]

Type manually.

[unique smelt]

alright i will try once again

[weary spindle]

Don't, just wait

If you email again, it will push your email back down the list.

[unique smelt]

so what should i do now?

[weary spindle]

Wait

[unique smelt]

alright

[sour beacon]

still says invalid ip entered

[weary spindle]

Link the room please.

[sour beacon]

https://tryhackme.com/room/defensivesecurityintro

oh nvm it showed the wromg ips

[timid harbor]

Hi! I need to update my token on Discord for my new TryHackMe account

Hopefully this is the right place

[weary spindle]

Please DM me your old token.

[timid harbor]

I will try, I might've deleted my old account. trying to password reset now

[weary spindle]

Your old THM account?

Just DM your username then.

[weary spindle]

You're unlinked.

[timid harbor]

Okay, thank you, should I do a regular /verify then? or should I still DM you

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 3789)

[weary spindle]

Just verify as normal.

[timid harbor]

Thank you! 🙂

[urban arch]

Guy i have a problem with my vpn it says 2025-05-29 11:19:08 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2025-05-29 11:19:08 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

[weary spindle]

Which server are you using, and which country are you in?

[stray hull]

i have a problem with the vpn ive already tried diffrent servers. i am able to connect to try hack me and ping 10.10.10.10 and this site also shows me a VPN IP but i cant reach any of the machines and the access page says not connected

[ember osprey]

if you can access 10.10.10.10 everything is good , access page is broken on site 🙂

[stray hull]

but i cant reach the ip adresses of the vms in the room either

[weary spindle]

Can you do ip a | grep "tun"

[stray hull]

yes

[weary spindle]

Is there an output?

[stray hull]

2: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500
inet 10.8.138.15/16 scope global tun0

[weary spindle]

Ok, now which Vm are you trying to access?

[stray hull]

trying to reach the one i started in the nmap room

[weary spindle]

how are you trying to access it?

[stray hull]

i tried ping traceroute and nmap

[weary spindle]

Did nmap work?

[stray hull]

nothing did

[weary spindle]

What error did Nmap give?

[stray hull]

Note: Host seems down. If it is really up, but blocking our ping probes

but it shouldnt be

and tracroute stops after 10.10.10.10

[weary spindle]

Ok, but what if it is?

What are you going to do now?

[stray hull]

that i dont know (:

[weary spindle]

Ok, welcome to Cyber security, where you may have to google and research, alot.

[stray hull]

i looked at a walkthrough and they did it the same with a diffrent result

[weary spindle]

You should start with gooling this

Note: Host seems down. If it is really up, but blocking our ping probes

[stray hull]

ok thank you tho ill look into it

[pale hare]

so whtats a discord token?

[brave lynx]

A discord token is a token that allows someone to login to a discord account with just the token and bypass email, password, username, and 2fa. When logging in with a discord token it does not notify the user of the account.

[fluid vapor]

Intro to IR and IM is listed in the free roadmap for security analysts, but is a premium room when I try to access it?

[weary spindle]

Where is the roadmap?

[fluid vapor]

https://tryhackme.com/hacktivities

[weary spindle]

Yeah, that's a roadmap, it's not free, just a standard roadmap for THM content

[fluid vapor]

Please look again, theres a premium and free tracks, intro to ir and im is under free

[ember osprey]

You can use it to verify on Discord . You can find it by clicking on your profile image > Manage account settings 🙂

[fluid vapor]

trying to follow free track and complete everything over the summer before starting on the premium track, hence why I'm confused

[sharp oar]

hi,
I'm trying to use Kali Linux as a CLI-only VM (on Windows, with OpenVPN on my host). I can connect from Kali to labs no problem.
But I'm totally stuck on getting reverse connections or Meterpreter sessions back to my Kali instance.
Anyone here dealt with this setup before? Any tips on getting that reverse connection working? Much appreciated!"

[arctic urchin]

Hello, I’m currently in the Active Directory Basics room. My issue is I don’t know how to rdp from the admin user to phillip. Is there a room that goes over how to rdp from the two machines given?

[urban arch]

in server ,Saudi Arabia

[urban arch]

same

[ember osprey]

You can use remmina on AttackBox to connect via rdp as phillip

[arctic urchin]

What’s that?

Oh sorry it’s a program on attackbox

[ember osprey]

It is a tool used to connect via rdp protocol 🙂 . It has a GUI , you can also xfreerdp if you prefer CLI interface .

[arctic urchin]

Thank you

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5056)

[ember osprey]

delete old file > change vpn server > wait a few minutes > download new vpn file

[robust thistle]

Hello, i paid 1 year sub but paused for 1 month now when i try to resume my learning its say that i need to buy premium again but in my account the end date is next year.

[ember osprey]

For payment related issues reach out to support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 30, 2025, 3:17 AM

[naive dust]

im having quite the same problem with vpn on and even inside the attackbox, it cant reach the room target vm

[naive dust]

.

my problem is specificaly the room "Hammer"

[ember osprey]

delete old file > change vpn server > wait a few minutes > download new vpn file

[naive dust]

mmm but is it weird that even the thm attackbox has problem connecting to the target vm

shouldnt they be on the same network?

[ember osprey]

Can you provide a screenshot of what's going on ?

[naive dust]

sure

im trying to reach via ping. I think it may be the port

[ember osprey]

Use http instead of https

[naive dust]

tried it

too

my bad it was the port

solved with nmap

thank you KGB

[trim nova]

i need help

[weary spindle]

With?

[trim nova]

openvpn

I am unable to access my machine directly through the browser.

[tough aurora]

it looks like you are connected to vpn

[tough aurora]

which room are you currently doing?

[weary spindle]

Which machine are you trying to access?

[trim nova]

blue

[weary spindle]

Does it have a web server on port 80?

[trim nova]

no i guess how to doo ?

[tough aurora]

you can use nmap to scan for ports

[tough aurora]

this room helps on how to do nmap:
https://tryhackme.com/room/nmap

[trim nova]

ok

[elder cloud]

when i try to proceed to the SAL1 exam it says Your session has expired
The SDK token provided in this verification process has expired. Please go back and try again.

the voucher is ending tomorrow

why is this?

[weary spindle]

Please don't post in multiple channels.

[elder cloud]

my apologies

[weary spindle]

They will already know the problem.

[elder cloud]

alright bro

[weary spindle]

No worries sister.

[frigid ore]

Heyy, I need a little help. Can you help me?

I need to contact the tryhackme team. Should I write to the support email?

[weary spindle]

Yes.

[e-mail]

[frigid ore]

Hey, I have a little idea. Should I send it to that email as well, or is there anyone here who is authorized?

[frigid ore]

thankss

[solid flare]

Hello. I am having issues getting room machine working for SOC Level 1 -> Security Information and Event Management -> Investigating with ELK 101

Seems to be issues with Elastic loading modules. Is room borked? (seems to be issues with VM...)

(sorry, also posed question in room-help channel... not sure which is best to ask question)

[umbral sigil]

Hello

I am looking for some help

working on splunk lab room

splunk in linux with configuring forwarder

I configured everything an I see this

May 30 18:10:05 coffely badr[1112]: {"level":"warn","ts":1748628605.5345387,"caller":"eventbus/labeling_handler.go:205","msg":"labeler: operator failed","error":"error parsing regexp: invalid or unsupported Perl syntax: (?<"}

Could anyone help?

[full lintel]

Hello, my subscription has been paused for 1 month but I can't manage to reactivate it. Does anyone know how to do this?

I have the annual subscription until November

[ember osprey]

For subscription related issues reach out to support directly on the emaill below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 30, 2025, 11:41 PM

[delicate sleet]

I'm looking for some assistance with RDP/Remmina. I have a working VPN connection from my Kali VM but trying to connect to the room I'm working on via Remmina doesn't work. I get errors regardless of connecting through Remmina GUI or trying to use xfreerdp3. If anyone has run across a similar issue or has some troubleshooting suggestions, I would appreciate it.

[ember osprey]

Which room ? Can you provide some screenshots of remmina settings please 🙂 ?

[delicate sleet]

Technically, any room so far. Currently I'm working on Windows Local Persistence, however I had similar issues attempting to connect to Windows Privilege Escalation as well. This screen shot didn't show it, but my VM has a working VPN IP that I can view at 10.10.10.10 as well.

[ember osprey]

Machine in that room should be accessible in a split view mode

[delicate sleet]

Yes, it is. I'm trying to learn RDP and troubleshooting for remote connections since this room says it is also accessible via RDP. Does having split view open prevent my VM from connecting?

[ember osprey]

It may be , try to close spilt view window while trying to connect over rdp

[delicate sleet]

Unfortunately, that did not work and the current step says "Log in to the machine via RDP using thmuser3 and execute C:\flags\flag3.exe to retrieve your flag." so I'm at a point where split-view is no longer relevant, I think.

[ember osprey]

Change username in remmina settings to thmuser3 then , also check if the password is correct

[delicate sleet]

Yeah, verified password and tried that username. Also deleted and attempted to start over with a new Remmina connection. Same results.

Switched to the AttackBox to try and getting a different error. Maybe I need to spend more time learning RDP... When I select OK on the RDP authentication credentials window, there is no change.

[ember osprey]

Try to use evil-winrm

[delicate sleet]

I was able to get the Administrator account to work via the AttackBox and Remmina. evil-winrm did not work from the AttackBox or my VM with thmuser3, however it did work from the attack box with the Administrator user name

[umbral sigil]

Hello guys, yesterday I asked about help with splunk lab room

I still didn't find a solution

could anybody help?

[umbral sigil]

this was my issue with splun lab room after configuring forwarder and pyttuing syslog

putting*

[magic thorn]

I am really having trouble launching the SOC Simulator. It just freezes at some point.. Any help?

[fierce river]

Attack box running pretty slow atm ?

[ember osprey]

Can you provide a shot ?

[ember osprey]

@wind wedge

[ember osprey]

Works ok for me 😦 . Try to terminate your current instance and start a new one .

[fierce river]

cheers, been lazy, firing up kali

[steel rose]

Hello,

I seem to have lost all the progress on my account as well as my prenium.

I created my account a few years ago and on January 2nd I bought the prenium for 1 year.

I should point out that my account is based on a gmail address and that I used to log in exclusively by e-mail/password.

Today my finger slipped and I clicked on the Google token connection. Once connected, I was horribly surprised to discover that my account had been reset. No more progress and no more prenium.

If I log in again with mail/password, I get an empty account...

It seems that logging in with the Google token has overwritten the data in my email/password account.

Is it possible to rollback the account? I can give the proof of purchase of the prenium on the account.

Thanks in advance.

[west chasm]

@steel rose

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 31, 2025, 11:34 AM

[austere horizon]

You have to email them.

[steel rose]

thank you

[weary spindle]

You still around?

[steel rose]

Yes I just send the email

[weary spindle]

What is your THM username?

[steel rose]

I don't remember exactly, but maybe titideslicornes

[weary spindle]

It's also case sensitive.

[elder cloud]

Guys

[weary spindle]

Hello.

[elder cloud]

In my third section of the exam today “the simulation” didn’t work

It brought me to another site

[weary spindle]

You'll need to contact support about that.

They won't be working today, or tomorrow, so I don't know when they will answer.

[e-mail]

[elder cloud]

I did send a ticket tho my exam time is out and its supposed to show my results

Will i lose my progress in the first two sections?

[weary spindle]

🤷

[umbral sigil]

I have an impression that I cant

I am trying to, but is not working

[ember osprey]

You need to verify first , follow instructions from the link below

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 31, 2025, 3:41 PM

[umbral sigil]

I put the screen

[ember osprey]

What's the issue here 🙂 ?

[sudden harbor]

How can I have rich presence on discord of TryHackMe?

@weary spindle

[ember osprey]

Wdym by that ?

[sudden harbor]

discord rich presence of TryHackMe

[ember osprey]

What does that mean ?

[weary spindle]

Members use a thing called PreMid

[austere horizon]

https://discord.com/developers/docs/rich-presence/overview

[umbral sigil]

I cannot see logs from syslog - "error parsing regex".

[round compass]

Trying to download the Jr-Pentest openvpn config file and I am getting an error: An unknown error has occured. I tried regnerating the file but same thing

[ember osprey]

Try to leave the room and rejoin after few minutes , then try to download the file again

[round compass]

Thanks, that fixed it

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5068)

[civic tendon]

is there I way I can change the billing card and redo the charge?

[ember osprey]

Try to reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 1, 2025, 2:16 AM

[random turret]

Hello everyone, I'm trying to login via google but it doesn't work for whatever reason, when I click on auth with google it only refresh the page and that it

[ember osprey]

Try to reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 1, 2025, 2:50 AM

[random turret]

will do thx

[naive dust]

Wondering if we can ssh into the room machine when the user/pwd isn't provided? A lot of the older rooms say SSH isn't necessary but the latency is killing me even with a subscription

[ember osprey]

You can if you exploit the machine beforehand / obtain the credentials

[naive dust]

damn, figured there'd be a default or smth

[umbral sigil]

Can anybody help?

[tough aurora]

which question are you trying to answer?

[umbral sigil]

Splunk Lab --> Configuring Forwarder in Linux

[tough aurora]

@crystal marlin in the room Develpy, I cannot ping + nmap the target machine (it is not a windows machine 🙂 )

[tough aurora]

one sec

[tough aurora]

wait, which room is it? there are a lot of rooms about splunk

[umbral sigil]

Splunk Lab

Splunk: Setting up a SOC Lab

[tough aurora]

let me check 🙂

[tough aurora]

are you trying to answer question 1, 2, or 3

[umbral sigil]

Task six, questions 2 and 3

[tough aurora]

so, run the command ./splunk adduser analyst (as said in question 2)

[tough aurora]

then check splunk logs to see how many logs were added

[umbral sigil]

I tried to do it like you say, I did also adduser analyst in linux itself (syslog is for linux, right?) and in both cases I can see only what I wrote in logs in Splunk: May 30 18:10:05 coffely badr[1112]: {"level":"warn","ts":1748628605.5345387,"caller":"eventbus/labeling_handler.go:205","msg":"labeler: operator failed","error":"error parsing regexp: invalid or unsupported Perl syntax: (?<"}

[tough aurora]

so, you did the ./splunk adduser analyst command and went to the splunk logs and that's what you got?

[umbral sigil]

I didn't get to splunk logs, but after paprsing syslogs is all what I see (every "inject" is with invalid Perl syntax"). According to lesson I should see normal logs, dont I?

[tough aurora]

don't check syslogs, check splunk

[umbral sigil]

Ok, I will try again, but it takes a wile for setting up everything

[umbral sigil]

Command error: 'adduser' is not a valid command. Did you mean the 'add' command?

[tough aurora]

after doing:
./splunk adduser analyst?

[umbral sigil]

yup

[tough aurora]

maybe try:
./splunk add user analyst

[umbral sigil]

Asks me for password, role...

What is more where does it go? I mean in lesson I have to put into splunk syslogs and I should see them. I say that there is problem in parsing....

[tough aurora]

I don't think that part matters, just try typing anything

[umbral sigil]

./splunk add user analyst -password kalikali -role analyst
WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details.
Error creating user. role="analyst" does not exist

I think it matters

[tough aurora]

hmm, I'm not sure, I never did this room, Scrubz, any idea?

[arctic ice]

Is there a way to change account email address on the site ?

[tough aurora]

you have to email the tryhackme team, although they will not respond until tomorrow 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 1, 2025, 8:30 AM

[tough aurora]

is there a problem with the spacejam KOTH machine? it seems like for every space jam machine, you cannot ping it, etc. (I believe even after restarting it)

[eternal osprey]

@tough aurora You're right, the Space Jam machine isn't working anymore.

[tough aurora]

hmm, I hope it gets fixed (but it was probably the easiest one)

[eternal osprey]

even with several resets, the machine does not respond

[eternal osprey]

you saw, @dense copper has no creativity for his profile picture, he takes that of others lol

[tough aurora]

yeah, he took your very unique and cool gif

[oak kiln]

I cannot select other network vpns, is that a bug :D?

[tough aurora]

apparently you have to join the network inside the rooms to select other network vpns

and, I heard a lot about you from Tyler Ramsbey 🙂

[oak kiln]

thank you 😅

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #76 - 115)

[tough aurora]

no problem 🙂

[oak kiln]

oh, I joined :D, still no available vpn file for the netwrk 😅

[tough aurora]

huh, which room is it?

[oak kiln]

the current release https://tryhackme.com/room/adbadsuccessor

[tough aurora]

I'm getting this bug 🤣

oh, nvmd, got it working

[tough aurora]

hmm I can see it:

[tough aurora]

huh, this is very weird

[oak kiln]

yup 😅

[ember osprey]

Try to leave the room and rejoin after few minutes 🙂

[oak kiln]

I m in a weird state with this room. I was able to get HOLO for selection by leaving and joining the room. But For AD: BadSuccessor I cannot even leave the room. I get the error 'user REDACTED is not in a network instance for room REDACTED'

[crystal marlin]

Should be working again 🙌

[ember osprey]

Try to start network before leaving

[umbral sigil]

still in the same spot, someone?

[oak kiln]

yup that did it
starting the network allowed me to leave the room. After rejoining and then starting the network I was able to select the vpn connection for the network 😅

[tough aurora]

@crystal marlin the walkthrough room Psycho Break also does not respond to ping + nmap (it is a linux machine)!

[crystal marlin]

Should also be working again now, thx 👍

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #75 - 119)

[tough aurora]

thank you!!

[scenic torrent]

Gave +1 Rep to @crystal marlin (current: #5 - 1887)

[rain lake]

Hey guys I have just started Splunk201 and have got no idea whats going on. I opened their Virtual machine but don't know how to open Splunk inside that machine? Can someone help, I am new sorry if I sound stupid lol. Thanks in advance

[ember osprey]

Copy the ip of the machine in the browser , you need to be conmected to thm network , you may also need to specify a port

[strange scroll]

For the past hours every machine i start just randomly restarts every few minutes

[indigo pilot]

gives this error after 30sec-1min into loading .ovpn file

[weary spindle]

Which OS?

[indigo pilot]

windows

[weary spindle]

Are you using the Communities GUI app?

[indigo pilot]

no

[weary spindle]

You'll need to use that version of the app, for the VPN to work.

(Not that I would suggest you use your host device on a network full of hackers)

[indigo pilot]

wdym by this

and whats the communities gui app

[weary spindle]

Google Openvpn communities edition

[indigo pilot]

why do i need to use that

and wdym by hosting device?

@weary spindle while connecting

[weary spindle]

Your host pc.

Which server are you using and country?

[tacit mirage]

? This is in English?

Does the site not recognise British English? "Centre" is the only thing that is spelt different than in American English

[ember osprey]

Try center

[tacit mirage]

That did work, yes, that's not really my point though. The answer is clearly in English, it shouldn't have registered as "not English" just because I didn't use the American spelling

[nova whale]

There are 2 rooms I've completed (but no longer have access, as they're paid) but the respective badges weren't awarded - where can I open a support ticket?

[weary spindle]

Which two rooms?

[eternal osprey]

On Koth, there are 2 machines that no longer works. Space Jame and Lion

[nova whale]

/eviction and /filepathtraversal

[eager seal]

what do i do after this

[ember osprey]

Click on yes

[eager seal]

the result

[ember osprey]

You have multiple connections active

[eager seal]

how do i disconnect them

?

[eager seal]

@ember osprey

[summer mountain]

can anyone help me Fix OpenVPN Connection Error please? I can connect it but when I copy the IP into broswer it's not working

[urban arch]

same

[drifting turtle]

is anyone able to help me with account recovery

[ember osprey]

Well just close the previous session

[ember osprey]

THM account ?

[ember osprey]

Can you provide a screenshot of your issue please 🙂 ?

[eager seal]

i did that but the same thing pops up

[eager seal]

can you give me a shroutcut to close it manually

the terminate button doesn't show on some

[vagrant socket]

What websites do you usually use to read articles about network security, which publish articles about the latest technology?

I would like to publish some articles

[eager seal]

anyone have a shortcut method to terminate machines if the automatic one doesnt show

[tough aurora]

yes, but there is a specific answer to the question, and the site currently does not detect different spellings of english (like center)

[tough aurora]

you don't have a terminate button?

[eager seal]

correct

[tough aurora]

could you send a screenshot?

[tough aurora]

ahh, you don't have a terminate button because that is an activity in tryhackme. you can click the - button on the bottom left to close it 🙂

or at least hide it

[eager seal]

but then what do i do abt this message

[tough aurora]

wait, which machine are you trying to connect to?

which room are you currently doing?

[eager seal]

windows fundamentals 1

[tough aurora]

ahh, ok, so if you go to the room, there should be a split screen view of the machine, right?

[eager seal]

yessir

[tough aurora]

you have to close that by clicking the - button 🙂

then you should be able to connect hopefully 🙂

[eager seal]

ill try and let yk

[tough aurora]

wait, are you trying to rdp using the machine in the room?

[eager seal]

yes

[tough aurora]

ahh, you don't have to do that, basically what you are trying to do is connected the target machine to itself 🙂

so, if you have the splitscreen, you should just use that 🙂

[eager seal]

i dont know what you mean

[tough aurora]

so, basically, this is what you are saying to the computer

"ok computer, connect to this ip, which is your ip, which means that I want you to connect to yourself"

but you don't have to connect the computer to itself, you just have to use the computer

so, you don't have to rdp

[eager seal]

ohh

here look

[tough aurora]

that is only if you are using your own computer or virtual machine to connect to the machine in tryhackme

however, because you are using split screen and not using your own computer/vm, you don't have to rdp 🙂

[eager seal]

thank you

sorry for taking long to respond i had to stim

[tough aurora]

no problem 🙂

[fickle plume]

How much time it takes to get voucher after payment is done??

[tough aurora]

what do you mean? could you explain your situation more?

[fickle plume]

i paid for 2 vouchers and money was deducted from my card. But I still have not received any email or anything on my dashboard.

[tough aurora]

try emailing tryhackme

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 2, 2025, 6:51 AM

[remote spear]

Hello, although this might not be a major issue or an urgent matter, I’d still like to bring it to your attention: I noticed that my activity streak was broken on June 1st, even though I logged into TryHackMe and actively engaged in learning activities that day.

While the streak itself isn’t the main reason I use the platform, I’ve been putting effort into maintaining it as part of my learning habit. I was surprised to see it reset today, especially since I clearly remember being active on June 1st.

If possible, could you kindly look into this and see whether the streak can be restored?

[tough aurora]

email the tryhackme team about your situation 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 2, 2025, 8:49 AM

[remote spear]

Got it, thanks!

[tough aurora]

no problem 🙂

[civic tendon]

what exactly does pausing for a month do to the subscription?

still waiting on an email response about billing the wrong card, but I also wonder, what's the current price/discounts?

[tough aurora]

you can look at pricing here:
https://tryhackme.com/pricing
the only discount I know of is the student discount

[tardy vessel]

Hello Team, having issues with search bar.

[naive dust]

Me too, get 500 error when using the search bar as well as when clicking on the modules tab.

[civic tendon]

yeah was getting that, but it looks like it locked in the student discount rate, dont knwo if it changes

[weary spindle]

There is only student disount for annual accounts, pause just simply pauses the subscription.

[civic tendon]

so it will actually postpone the subscription for a month?

was only visible on the cancel screen

I acutally want to rebill on a different cc, but I dont think I can without canceling which will probably cancel the student discount too

[weary spindle]

How long ago did you pay?

[civic tendon]

yesterday

[weary spindle]

Probably get a refund on the card, then, as it's within 7 day(s), providing it's an annual payment, however I'm not support, so wait for their answer.

It's key to point out I'm not THM staff, so don't say somebody told you in the Discord server this would happen. 😄

[paper chasm]

500 error?
https://tryhackme.com/hacktivities?tab=modules

[civic tendon]

thanks anyways, I'll wait

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 3798)

[next patrol]

Impossible to do any research

[tepid ember]

I am locked from looking ahead in modules now. How can I unlock this? I would look ahead to compare certain parts mentioned in modules or see if it’s a room I’m interested in

[weary spindle]

Where are you experiencing this?

[torpid heart]

When i try to do challenges it just gives me a screen with 500 eror. Can anyone please help.

[zenith wyvern]

Is there an issue with the modules look up functionality? I am getting Error 500 under the modules. However, I can search by room with no issues.

[wheat fog]

Took the SAL1 cert exam the other day. I answered all 80 multiple choice questions before going back and checking my work. I never got to hit the submit button before the timer ended. Didn’t get credit for that portion of the exam. 😞

[torn siren]

I just tried to access my challenges too and I am getting the same error

[ember osprey]

@torn siren @zenith wyvern @torpid heart I've forwarded message to staff memebers , should be fixed asap 🙂

[torpid heart]

thanks!!!

[zenith wyvern]

Awesome!

[smoky kelp]

why support team take so long to answer i have paid premium and shows that they take the money on my bank account but i did't get my premium until now i have opened a ticket

[tawny lark]

same for me

[torn siren]

I managed to access on my VM, but it says I completed 0 challenges, anyway something is wrong haha

[tough aurora]

yup, same for me, but luckily, staff have been informed 🙂

[tawny lark]

for me, i got 500 code

[smoky kelp]

same

@bronze vale need help with my problem my ticket 17 hr ago until now 😢

and no answer

[bronze vale]

Support is closed over the weekend, which means they have a backlog of tickets to catch up on Mondays, please be pateint they will get to your ticket 🙂

[smoky kelp]

oh no problem thank you by the way

[scenic torrent]

Gave +1 Rep to @bronze vale (current: #6 - 1613)

[bronze vale]

We've identified the 500 error problem and are resolving it 🙂 thank you everyone for reporting it

[austere horizon]

https://tenor.com/view/spectral-sentinels-savior-atlas-wars-atlas-gif-25971871

[tough aurora]

BTW, after going to the 500 page, it goes on an infinite loop on the 404 page

wait, it stops at some point

no, wait, it keeps going

[frosty abyss]

Got that too.

[kindred flame]

Seeing the same 404/not-found loop.

[proud estuary]

Same here

[royal fulcrum]

Same

[frosty abyss]

THM: That's your challenge: You got 3 minutes to fix that. 🙂

[karmic glen]

Whatps happening to the tryhackme site? I keep getting 404'd

[final shell]

Hi there, I am unable to login my account. It is showing 404 page not found again and again!!!

[karmic glen]

Alright, I am not the only one experiencing the 404 issue

[royal fulcrum]

Seems that Tryhackme has been hacked

[tough aurora]

not necessarily hacked, maybe just a bug

[pearl wagon]

yeah I was wondering if I was the only one

it's like in a loop

from 404 to not-found

[royal fulcrum]

I was just (bad) joking 😅

[pearl wagon]

how is everyone doing though

[vagrant summit]

Me too

[karmic glen]

Is THM aware of this?

[tough aurora]

yup

[karmic glen]

Did they mention this in their accouncements?

[clear tapir]

Huhuhuhu my learning streak!!

[lofty sequoia]

thank god it just wasn't me
I joined the discord rn just to find out lol

[scenic torrent]

Gave +1 Rep to @pearl wagon (current: #2914 - 1)

[proud estuary]

the 404 error appears to be fixed now

[lofty sequoia]

yup

[royal fulcrum]

not really, no loop anymore but I still have the 500 error when I try to reach the challenge page

[ember osprey]

@torn siren @zenith wyvern @torpid heart Should be working now 🙂

[torn siren]

I'm still getting it 😦

[light nymph]

same

Sorted for me now

[tough aurora]

yup, works for me now

[light nymph]

Thanks team

[royal fulcrum]

works for me too, thanks!

[torn siren]

all good!

[hot pulsar]

ah everyone has the 500 on search?

[high sparrow]

hey, im sorry maybe this is dumb, but i see some people on reddit posting prices as 3.60/month for annual subscription and something like 5 dollars for a month. How is this possible? I even have student discount and its not as low, any help?

[tough aurora]

probably just a bug, but it is not that low and cannot be that low 🙂

[high sparrow]

i have seen tons of people posting about this on reddit

i also thought maybe a bug, but i have seen it over 20 times by now

[tough aurora]

yeah, you cannot get these low prices even with the student discount

that's just too low as well

[high sparrow]

so why would people keep posting about it ?

[tough aurora]

because it is odd and shouldn't be happening

it isn't real though

like, the posts and what they screenshot are real

but the price is not that low

[high sparrow]

oh, ok thanks

[tough aurora]

no problem 🙂

[hard flare]

Hey everyone!
I need support to understand how to use my streak freeze for 5 days without loosing my 391-day sreak, and taking a break.
When I hover over my streak, it shows I have 9 streak freezes available.

[tough aurora]

how can you have 9 streak freezes? you can only have one at a time?

this is what it says on the help.tryhackme website:

Scrubz, is it possible to have more than one streak freeze?

[hard flare]

Hello again!

I need to understand why I receveid a message "number 15 on the board ... Welcome to Diamond League" at 8:50 PM GTM -3, and just 1 minute later I received a message "you ended up in 30 place, and thus you’ve been moved to Sapphire League".

[dawn goblet]

Hello everyone! Im having an issue connecting to thm machines for some reason... I've connected to openvpn, i pinged google and also 10.10.10.10, got an answer. However, when im pinging my machine address, there isnt an answer, as well as the ssh connection doesnt work. It just tries to connect until timeout, without a result. What's the matter? Im on linux currently

[tough aurora]

try emailing tryhackme

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 2, 2025, 6:31 PM

[tough aurora]

but again, how do you have 9 streak freezes? I am genuinely confused

[hard flare]

Thank you.

[scenic torrent]

Gave +1 Rep to @west chasm (current: #61 - 149)

[hard flare]

I appreciate you investing your time to help me. However, as I shared in private, I do have this streak freeze balance on my account.

[tough aurora]

I’m just confused how. I’m not accusing you of anything, I am genuinely curious how you can get multiple streak freezes because I thought you could only get one

is it through events where you can get multiple streak freezes?

[tough aurora]

If you do have 9 streak freezes, I’d assume you could not lose your streak, but I could be wrong

[hard flare]

I simply do not know how to explain. What I need and have already sent an email is to understand how to use it.

[hard flare]

Thank you again for interacting!

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #72 - 124)

[boreal inlet]

Hello, I am facing a problem with the virtual machine of Linux fundamentals 2 room. I am not getting the correct machine, i dont find the directories or files i need for completing the task questions

[vagrant summit]

I see locked task in rooms, till yesterday the task was all open and i can jump to any task as per my convenience !!! anyone facing this ?

[mighty bloom]

Hello guys, in the AD basic enumeration room, i can't see the ip address of the target if i write "route".i'm using the tryhackme attackbox what problem could be?

[weary spindle]

Locked tasks?

[austere horizon]

Yeah, THM added locked tasks.

[austere horizon]

You'll have to do them one by one and unlock them by order.

[weary spindle]

Ah good.

[vale gorge]

Is there a way to track how many hours I’ve done in rooms? I’m using some of this for CPEs

[dawn goblet]

Hello everyone! Im having an issue connecting to thm machines for some reason... I've connected to openvpn, i pinged google and also 10.10.10.10, got an answer. However, when im pinging my machine address, there isnt an answer, as well as the ssh connection doesnt work. It just tries to connect until timeout, without a result. What's the matter? Im on linux currently. I've waited long enough to be assured that the machine has booted, and is running.

[dawn goblet]

I also already tried to regenerate the openvpn config, doesnt help

[vagrant summit]

Once you finishes the room you will received certificate mentioned overall time took to complete that room, i am doing same for my CISM certification CPEs

[vale gorge]

Ahh okay. It’s per room. Thanks!

[smoky kelp]

is the site support online? i have ticket since 28 hr and there is no respon

[ember osprey]

It is probably one streak freeze that will last up to 9 days 🙂

[ember osprey]

It can take up to a week to get a response + support team don't work on weekends

[oblique roost]

Are you using a virtual machine to connect to openvpn?

[ember osprey]

Which machine , which room ?

[ember osprey]

Try to leave thr room and rejoin , then start the machine again

[ember osprey]

You probably have one 9 day streak freeze. This means that you can skip up to 9 days in one go . Be aware that if you skip for example 4 days and then continue , the whole 9 day freeze will be gone 🙂

[fallen kelp]

I logged on today for my usually 2hrs of learning and suddenly do not have an active subscription. I have not cancelled said subscription since I started nearly a year ago. Upon further checking I found an email from 39minutes ago saying: Your subscription has ended
Hey there,

We're sorry to see you go. We hope you enjoyed using our service. Remember, you can come back any time you like.

Subscription summary
GBP Monthly £12.00

Cancellation date
03-Jun-2025

Cancellation reason
Non Compliant Customer

[austere horizon]

You'll have to email the support team for any payment-related issues. 🙂

[west chasm]

@fallen kelp

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 2, 2025, 11:46 PM

[fallen kelp]

@austere horizon thank you

[scenic torrent]

Gave +1 Rep to @austere horizon (current: #54 - 172)

[smoky kelp]

The issue that problem is critical i payed the subscription but i didn't resvied the subscription and I have masage on my bank account that they take the money with website name try hack me 🤔 i used my visa 🫤

[ember osprey]

Only support can help you with payment related issues , you will need to wait for them to reply

[smoky kelp]

Of course, I hope they answer as soon as possible.

[ember osprey]

They will but be aware that it may take up to a week for them to respond 🙂

[ember osprey]

No 😦 .

[ember osprey]

Can you provide some screenshots of your issue 🙂 ?

[vale gorge]

Thanks. Is there a place to request enhancements for the site?

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5082)

[eager seal]

is there a way to go and back track the ones that werent properly terminated

[ember osprey]

You can suggest it . Follow instructions from #feedback-and-ideas channel 🙂

[ember osprey]

You can check the list of all of your currently running machines by visting this link
https://tryhackme.com/api/vm/running

[ember osprey]

You have no active vms running

[eager seal]

bet

[formal fern]

Been getting this error the past 2 days when trying to use OpenVPN

2025-06-02 22:47:02 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-06-02 22:47:02 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.

is there known issues with OpenVPN 2.6.13?

[ember osprey]

delete old file > change vpn server > wait a few minutes > download new vpn file

[formal fern]

same issue still

[tough aurora]

ahhh, ok, I was just very curious how you could have a streak freeze of 9, got it know 🙂

[naive dust]

Hi All, I'm trying to start the network for ADBadsuccessor but keep getting the error "An error occured while trying to deploy the network, please try again later" has anyone any suggestions? I've tried from two different devices/browsers

[tough aurora]

try leaving the room and coming back 15 minutes later

[naive dust]

Okay, will try that, thanks for the tip!

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #72 - 125)

[tough aurora]

no problem 🙂

[grave belfry]

Hello, I am in the tempest room and the machine keeps booting me. it is taking me awhile but everything else seems fine. Anything I can do about it?

[tough aurora]

can you send a screenshot?

[grave belfry]

i am not sure what to send it just links me to that article that says that sometimes the bot terminates your machine

[grave belfry]

sorry for the emote and the ping. I also just got frustrated and closed the window cause this is like the fourth time while i am trying to get through the room

[tough aurora]

no, it's ok 🙂

[hard flare]

🌟🌷🌟🌷🌟 Thanks a lot for explaining!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5085)

[naive dust]

Unfortunately that doesn't seem to have worked. I've sent an email to support, hopefully it gets sorted soon

[tough aurora]

it could take up to a week, but I hope it gets sorted out quickly!

[naive dust]

fingers crossed!

[grave belfry]

ok i tried again and the room terminated again i took picture this time though

[tough aurora]

how many times has this happened?

[grave belfry]

4 or 5

[tough aurora]

in what time span (2 hours, 3 hours, etc.)

[grave belfry]

the last two time i connected tn it took about 3 minutes and it terminated

[tough aurora]

oof, you should probably email tryhackme

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 3, 2025, 7:29 AM

[maiden path]

Hey I have a strange connection issue. So I am establishing a connection over openvpn to my kali maschine. in the top right corner of my screen I can see my dedicated THM IP address. pinging 10.10.10.10 is possible and I receive a connection. opening the ip in the browser tho gives me the successful connected screen but without showing my IP. from here I connect to a box and visit the website hosted by the maschine. That works just in some cases. for example I am connecting to the hammer room box on one of the paths I found. but when I try to access the file under that path the connection times out

I alreadt reset everything. got a new cert, updated openvpn, redurced mtu

I already got that bug once before but when I connected yesterday (same cert and settings) all worked fine

Oh I still have further information: On the thm website it says I am not connected when clicking on 'access machines'. following the links and going to 'access via openvpn' it is showing a connection with green symbols and ip addresses.

sorry for the many messages. If you want me to provide screenshots or further information pls reach out to me

[elder jewel]

Are you on IPv6?

[maiden path]

how do I check that? ifconfig is showing ipv4 and ipv6 addresses for tun0

[weary spindle]

This would seem like a connection issue on your end

[atomic pilot]

hello guys i just subscibed to sal 1 certificate and i coudlnt find the path start can anybody help me please

[ember osprey]

You're looking for this ?
https://tryhackme.com/path/outline/soclevel1

[atomic pilot]

is this the sal 1 pathway course ?

[ember osprey]

yeah

[weary spindle]

Please don't post your question across multiple channels, it's spam and rude.

[atomic pilot]

sorry

[atomic pilot]

i paid the subscription with an instructor where can i find this person or how do i contact him

[maiden path]

Any idea what could cause such issues? Since I already googled and the only value answers were to reduce the mtu and also run the thm-openvpn-script which checks the network and suggests some solutions (which I did) I am kinda running into a dead end road

[weary spindle]

This could be purely network based.

Try accesing the same URL from the Attackbox

[copper fern]

Are you connected to any other VPN on your base workstation? Have you tried generating a new VPN config file from the website?

[maiden path]

works just fine

[maiden path]

I am not connected to any other vpn (ran the kill openvpn command before). yes I genereted a new config file and also switched to the subscribed server

[weary spindle]

Then yeah, this just shows that is something on your network, or host.

[wispy oriole]

I have a payment issue. I am in Kenya i am unable to subscribe the premium. Please help

[maiden path]

Okay thanks

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 3803)

[ember osprey]

For payment related issues reach out to support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 3, 2025, 9:21 AM

[oblique roost]

Is your Kali machine virtual or is it your OS?

[maiden path]

My OS

[lament radish]

If I pay for a month
I get a certification
Then stop the subscribtion
Do still have my certification that I can share to other ?

[wheat fog]

Yes

[weary spindle]

The certification isn't subscription bound.

You'll pay the price for the exam, pass and then you have it for three years.

[oblique roost]

Yeh I thought so, so you want to install Kali as a virtual machine using VirtualBox or something similar. The VPN isn't tunneling correctly back to you. If you install a VM and run OpenVPN from within that, that should solve your problem. Let me know how it goes!

[lament radish]

Why 3 years ?

I talk about the jr pénétration tester

[weary spindle]

Renewal date.

Pt1 or Jr pentester path?

[lament radish]

Yes

The path certificat

I think its a good way to start ?

[weary spindle]

It's not a bad one.

[lament radish]

What level are you ? @weary spindle

[weary spindle]

Wdym level?

[tough aurora]

they could mean THM level (although that doesn't necessarily show how skilled a person is at hacking)

[weary spindle]

They could also mean what level do I think I am in relation to hacking outside of TryHackMe.

Not strictly limited to THM, which is why I've asked them to elaborate.

[tough aurora]

could be

[tough aurora]

yeah, just possibly suggesting

not saying it is what they were talking about, just a possibility

[lament radish]

Like I am level 8 hacker or smth

[weary spindle]

I am 0xE

[sage axle]

Im trying to subscribe to the premium version, i got an email offering stacking the annual and student discounts but its not doing so at checkout, ive already verified student status what can i do?

[ember osprey]

For payment related issue reach out directly to support on the email below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 3, 2025, 3:15 PM

[urban arch]

guys plz i need help when i try to open the ip in my browser it say unable to connect even when i'm connected to the vpn and i can ping the ip and use nmap and gobuster and it gave me a result

[sage axle]

Thanks!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5094)

[ember osprey]

Can you provide a shot ?

[urban arch]

yes

i cant send any shot why ? can i send it in ur dm?

[ember osprey]

You'll have to verify first , follow instuctions from the link below 🙂

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 3, 2025, 3:18 PM

[maiden path]

Thanks for that hint but I am not just using kali for pentesting but also as a day to day operating system. Do you know if the error persists throughout all linux distros?

[scenic torrent]

Gave +1 Rep to @oblique roost (current: #2915 - 1)

[urban arch]

i didnt fine my token where ti find it

[ember osprey]

Click on your profile image > manage account settings > it should be near the bottom of the page

[urban arch]

nothing there can we join a room and i share my screen for u ?

[oblique roost]

Sorry if I'm misunderstanding you, but I mean to run a Kali VM from within your Kali OS, separating the two systems. As the OpenVPN we receive is intended for THM use only, it isn't useful for other operations. It will tunnel your outgoing address, but it won't tunnel your incoming address when connecting to a THM VM. As far as I'm aware it isn't an error with the linux distro, but it's a condition of the VPN.

[ember osprey]

It must be there

[urban arch]

it looks like that

[ember osprey]

use http instead of https

[karmic glen]

Need some VPN support. I am currently working on the redteamacapstone. Anytime my time expires, I restart the room but can't connect, so i disconnect and reconnect the VPNs required to complete the course. When I connect with the redteamcapstone VPN, it says I am connected but when using the second one to access the internal network, I get the following

[urban arch]

every time i write it http when i press enter it turn back to https

[ember osprey]

Which room , maybe server is running on non standard port

[karmic glen]

We can't paste images?

[ember osprey]

Leave the room > wait 15min > rejoin

[karmic glen]

Why is this a workaround?

[ember osprey]

You'll have to verify first , follow instructions from the link below

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 3, 2025, 4:05 PM

[karmic glen]

I've done that and I'have to wait over an hour

The wait time is never consisistent. a

[urban arch]

Vulnversity

[karmic glen]

Ok, my account is updated and verified

[granite fossil]

I am having issues with the network core protocol session. I am scanning with wireshark for login credentials to get the THM pass. But when i submit the pass it doesn't fit entirely

can anyone elaborate on that if there's a bypass?

[ember osprey]

What's your answer ?

[delicate sleet]

Not sure if this is a room or site issue. I can't get the windows machine in Windows Local Persistence room to transfer my .exe payload from my Kali box. I'm using Kali VM, with VPN connection. I've got the THM IP and verified my connection through 10.10.10.10. The target machine can reach my Kali machine, and my python server shows 200 for the GET request, but on the Windows machine, it just hangs. I used wget from PS and curl from cmd with the same result.

[plush bay]

could be windows defender kicking in

could also technically be the missing output flag for curl

also have you tried using certutil just for even more sanity checks???

[delicate sleet]

I tried to disable defender, but was unsuccessful. I appreciate the certutil suggestion. That at least got something to transfer, however the payload is empty or corrupted, so I still can't use it.

[plush bay]

hmmmm

[novel wave]

Hello,

I have my password for my account, however I have a new phone and don’t have TryHackMe on my Authenticator Application and do not see where I can utilize my recovery code.

Thanks in advance for any help!

[ember osprey]

For account related support reach out to support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 3, 2025, 6:34 PM

[novel wave]

Fair enough! Was hoping I could use my recovery code easily enough.

Thank you!

[delicate sleet]

Maybe it's something on my side. I used the room's attack box and it transferred without issue.

[plush bay]

yeah probably firewall or anti virus somewhere in the chain from your host that is not from the attackbox

[delicate sleet]

That's an hour+ of my time I wont get back 💀

[plush bay]

well rip

[rugged haven]

Hello why i can’t join the rooms?

Anyone?

[austere horizon]

What rooms?

[rugged haven]

Anyroom

Taking room

[sturdy tinsel]

hello

Hello everyone! 👋

My name is [YourName] and I'm 16 years old. I'm really passionate about cybersecurity and ethical hacking, and I've decided to fully dedicate myself to learning and growing in this field.

I may be just starting out, but I’m serious about this journey. I’m committed to learning step by step, following the rules, and becoming someone who uses hacking skills ethically and responsibly.

I truly admire the knowledge and experience many of you have here, and I’d be grateful for any advice, support, or guidance you can share.

Thank you for welcoming beginners like me, and I hope to contribute positively to this amazing community. 🙏

Let’s hack ethically and learn together! 💻🔒

my name is alpha 0.2

[uneven wadi]

???

[potent cairn]

Website keeps telling me to buy a subscription even though I have one

[austere horizon]

Did you try logging out and in again?

[potent cairn]

yes

[austere horizon]

When you go to your profile do you see the premium user banner?

[potent cairn]

no

[austere horizon]

Then you're not a subscriber as far as the website knows.

[potent cairn]

what do i do then

[austere horizon]

Pay for the subscription because it seems like you don't have one.

[plush bay]

@bronze vale ⬆️ bot bugg

[potent cairn]

I have a subscription, literally paid it on 12th may

[austere horizon]

Oh, then email support ASAP.

[plush bay]

contact support over email at [e-mail]

[potent cairn]

ok

[plush bay]

or wait is the bot down for maintance

[austere horizon]

Yes. Might take up to 24 hours.

~20 hours as of now.

[smoky kelp]

"Worst support I've ever seen. My ticket is three days old and still no answer."

[plush bay]

they have about 1-2 people going through all support emails and very often state that response can take up to 7 working days

[smoky kelp]

they should add more people to the support that's really bad haveing 2 or 3 people to the support 😦

[bronze vale]

Hm?

[austere horizon]

I think Shadow did not know that the bot was busy.

[bronze vale]

It should be done by now

[austere horizon]

Oh. I thought you mentioned 24 hours.

[bronze vale]

It had to sync everyone’s certs over so it had a large queue

[austere horizon]

Still a bit buggy here.

[bronze vale]

It’s likely crashed I’ll take a look in a minute

Unfortunately there’s a few things I can’t account for in testing

[austere horizon]

Yeah, understandable.

[hasty sapphire]

Hello everyone goodevening, I'm in the EU, anything other than EU-Regular 3 is showing me as not connected in the access page, even though all the config files I tried (made them regenerate a bunch of times) give me the "Initialization process complete" message
Even though it shows me as connected, I still can't ping a machine I'm going through (it has been running for a while so its not a fresh-machine-booting problem) or ping/load https 10,10,10,10
The thm-troubleshoot tool I found in a similar reddit thread shows me pic rel

it doesn't let me upload pics

[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[-] More than one connection running
Would you like the script to attempt to fix this (Y/n)? y
[+] Killed duplicate processes
[+] Connecting....
[+] Connection Process completed successfully!
[+] Confirming connectivity
[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

[ember osprey]

delete old file > change vpn server > wait a few minutes > download new vpn file

[deft quartz]

My name is [yourname]

[lament radish]

Is path certificat is worth something ?

Can I put it on my resume and people will be like ok this guy know some

[ember osprey]

This is just a certificate of completion . It doesn't have any job market worth . Real certifications like #sal1 and #pt1 are another story 🙂

[ember osprey]

Any please pay attention to your language 😄

[lament radish]

Sorry

"real" certification is not cheap

[ember osprey]

Yeah , that's one of the aspects why it holds some value . Real certifications are proctored , well strucutred ( sometimes even practical ) , timed exams . Usually they're paid also paid exams 🙂

[lament radish]

Idk maybe just get the subscribtion

I also study so

No need to do a real certification

[rustic crown]

My subscription has recently expired, like to ask why the account still shows the subscription as active. ( i subscribe using voucher)

[ember osprey]

For subscription related issues reach out to support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 4, 2025, 9:03 AM

[rustic crown]

I have already sent the email yesterday but haven’t received a reply yet. May I ask how long I should expect to wait?

[tough aurora]

up to a week

[ember osprey]

It may take up to a week

[rustic crown]

noted with thanks

[surreal crescent]

When will the crontab on the deployed instance (10.10.216.243) run? pls i need help on this

[ember osprey]

Which room ? Can you provide a screenshot of what you're trying to do ?

[civic tendon]

3-4 days support still hadn't emailed back

[ember osprey]

It can take up to a week + they don't work on weekends

[civic tendon]

it said I could I can only change billing in under a week

[ember osprey]

Only support can help you with payment related issues , you'll have to wait for them to reply 😦

[frail adder]

I have a question. As I have some issues, I wonder if the bigger the screen, the better the connection it needs for using machines. (I have limited internet but I can download things over 1mbps. I share my hotspot over 2 devices - one for windows and one for mac. In my mac, I can use machines very well, but not in windows - I can't use it at all and sometime I got 500 internal errors)

Or it's my windows laptop issues?

[ivory spruce]

If its 500 internal errors, it is an issue on the server side. Would you remember which rooms are those?

[frank cloud]

I just got an email saying with my student discount and the sale going on I’ll get 40% off but it only applies the current sale the 25%

It’s not doing a 40% off

[weary spindle]

They shouldn't stack.

It's part of the terms with the student discount.

[frank cloud]

I got an email

“Hi conner122007,

Great news: you can save 25% on your TryHackMe subscription with annual billing!

And there's more: students get an additional 20% discount on annual plans - increasing your total savings up to 40%. 😎”

An additional 20% increasing savings up to 40%

Is what it says

[weary spindle]

Ah, TryHackMe changing things yet again.

You'll need to speak to [e-mail]

[frank cloud]

Dang it you think I’ll be able to get that 40% off

[weary spindle]

🤷

[robust mural]

hey
is it me or the web site has some difficulties?
(sorry for the message on the other salon)

[vestal juniper]

Hi, my student email address will be expiring soon and I do not want my tryhackme progress to go along with it. I have already changed the email address from the "Manage Account" page. I wanted to confirm if this will be enough, and will be able to login from this new email address that I have provided?

[vestal juniper]

yeah it is taking some time to load, initally it is just white screen

[weary spindle]

That will be enough, it may ask you to confirm your email.

[vestal juniper]

Yeah just got that email, Thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 3808)

[finite solstice]

hie

[swift mantle]

I have the same issue. Additionally I can't view my Earned Badges.

[vast yew]

why the site is so slow right now I cant complete anything and cant submit answers :/

[ebon relic]

yes the site is very slow currently.

[coarse gale]

Scale it bro

[olive aurora]

yo guys is the site lagging now?

ah yeah

well for me i cant even access machines

https://tryhackme.com/room/flip

this one doesnt work, and im connected

using openvpn

[atomic nest]

im also having tons of issues

[bleak wave]

same, website is laggy

[placid island]

yea same

both phone and computer

[hard ore]

having similar problems as what was described above

[bleak wave]

little disruption

[elder agate]

yeah site's been acting weird today

[soft elk]

oh nice to see this thread. I was thinking my conenction was bad, now I see I am not alone

[celest crane]

Same problem in Spain as of now with the website

[urban shard]

site lagging and every ctf room can`t get ssh work 😄

[soft elk]

vamos tio @celest crane que me cuentas

[pallid rover]

funky site

[urban shard]

it`s time go sleep 😉

[bleak wave]

it's part of internet, some time website is slow. Take time for you, go running outside 😉

[olive aurora]

for me the attack box works

openvpn doesnt

[earnest dove]

hello is it normal that when i do smth in the website the website becames white ?

[wanton tree]

Can someone help me, I reactivated my registration and I am unable to access the study paths, it says to reactivate the registration

[urban arch]

guys i have a problem i turned blue room but it failed when i tried to exploit it ,anyone help me plz

[smoky kelp]

when the support will open my i have ticket since 4 days until now and i didn't get my Subscription and the site took my money 😦

@crystal marlin i wish if you can you help me

[earnest dove]

hello is it normal that when i do smth in the website the website becames white ? pls

[wanton tree]

me too

[earnest dove]

oh im not the only one then xD

[crystal marlin]

There might be some delay for support tickets at the moment, but support will definitely get back to you to solve that. Please wait a bit more until they get back to you.

[earnest dove]

can you help me pls

[crystal marlin]

There might be some performance issues at the moment that we are aware of. There isn't much I can do for you at the moment, so might be best to check again tomorrow if it doesn't improve until then.

[earnest dove]

thank you hoping tomorrow it's on

[scenic torrent]

Gave +1 Rep to @crystal marlin (current: #5 - 1888)

[smoky kelp]

I appreciate your support man thank you so much 🙏

[scenic torrent]

Gave +1 Rep to @crystal marlin (current: #5 - 1889)

[pale lark]

Hi, the virtual machine (Windows 10) scale/font size is too small, I cannot see properly

I am in this room : https://tryhackme.com/room/winadbasics

If I make the text bigger the UI becomes cluttered because the icons stay small

and "Make everything bigger" in Settings -> Display is unavailable

[austere horizon]

The scale/font should be the default one.

Which means the one everyone has by default on their PC.

[pale lark]

It doesn't for me though

In the previous room it was fine but in this one no

Okay it works now, I made it full screen and then closed the tab

Weird but ok

[bronze mortar]

Opening the VM on a new tab is usually better

[pale lark]

Why?

[bronze mortar]

At least you get to see everything on the screen more clearly and sometimes it feels like the lag reduces when it's on a new tab

[pale lark]

I see thanks for the tip

[ember osprey]

It may take up to a week for a support to reply

[mental kestrel]

Anyone have their subscription canceled for the reason of non compliant customer?

[smoky kelp]

Should I wait or can I do another subscription
What do recommend

[ember osprey]

I would suggest you to wait for their response

[smoky kelp]

Thank you. I appreciate your help; I will take your advice. 🙏

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5107)

[ember osprey]

For subscription related issues reach out to support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 4, 2025, 11:07 PM

[mental kestrel]

Thank you

[misty lodge]

Hello ,someone can help me? I'm subbed to the site for more then a year ,suddenly got email my sub ended reason is “non compliant user“ ..😢

[ember osprey]

For payment/subscription related issues reach out directly to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 5, 2025, 2:45 AM

[misty lodge]

Thanks

@ember osprey thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5109)

[silk thorn]

Hi for some reason I haven't been able to access port 80 on any room

I can access other ports tho

This has been happening for a while or different operating systems(bare metal) and vbox's currently on kali

also on differnt networks(wifi)

[ember osprey]

Maybe your firewall is configured to block such connections . Try to use attackbox if possible and see what happens

[silk thorn]

I turned it off fully

I know its a bad dissension but i needed tryhakme 💀

btw for some reason attack box is really laggy

[silk thorn]

tanks it worked

thanks*

could you help me fix it one day please

not it doesn't work on attack box now -_-

nvm i had to refresh times :)

[shut torrent]

hi, i'm unable to look the target box with tryhackme/tryhackme. i've tried terminating and starting it over but same result. any suggestions before i give up for the night.

[tough aurora]

could you explain your situation more?

[shut torrent]

on the linux strength training and i am unable to access the target machine

title of the room is LST Room V2 VM

so ssh tryhackme@10.10.255.62 and password tryhackme

that is 225 not 255

debug1: Next authentication method: password tryhackme@10.10.225.62's password: debug1: Authentications that can continue: publickey,password Permission denied, please try again. tryhackme@10.10.225.62's password:

[tough aurora]

I will get back to you as soon as possible (20 mins)

[shut torrent]

thank you donutmaster

[frozen schooner]

I have a friend in India who is sponsoring premium sub for me but I am from Nepal. Will there be any problem or breach of ToS?

[shut torrent]

that is nice of them discort

[agile bay]

Any idea why the port 80 on the first server of Holo is closed rn? is it intended or someone messing around? I use to be able to see the website and everything...

anyway going to reset it

[tough aurora]

Probably not 🙂

[tough aurora]

it might not be open at all

is it supposed to be open?

[agile bay]

it was open earlier like its the intended way (LFI and all)

[tough aurora]

let me check 🙂

[tough aurora]

are you connected to the network?

[frozen schooner]

Thank yu kind sir!

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #64 - 143)

[tough aurora]

no problem 🙂

[tough aurora]

you aren't supposed to ssh into the machine using the user tryhackme

[agile bay]

yeah the vpn and I was able to interact with it and all

[tough aurora]

did you set the vpn to the AD vpn?

[agile bay]

I can still ping the server but only port 22 is open rn

no the holo one

[tough aurora]

yeah, I meant the network vpn for the holo one 🙂

this one, right?:

[agile bay]

yep

I can ping it and nmap

but for some reason the port 80 is now closed, I think it could be someone messing with it

[tough aurora]

which ip are you using?

or, which computer, sry

[agile bay]

L-SRV01 (10.200.107.33)

[tough aurora]

hmmm, someone could be messing with it, did you click reset in the thm room?

[agile bay]

yeah twice now

[tough aurora]

hmm, odd

maybe one of the mods could help you, because I don't know how to help 😦

[agile bay]

yeah I was shook lolo

maybe you can reset?

[tough aurora]

no, I'm connected to another network

in the same room

we aren't all connected in the same network I believe

[agile bay]

yeah there's multiple one, no worries thanks anyway:)

[tough aurora]

yeah, sry 😦

[wary hatch]

currently there is 25% off on yearly subs and i also linked my university info so can i also claim extra 20% disc?

[tough aurora]

I believe so

I think you then get 40% discount

[wary hatch]

i tried but it only showing 25%

default

not student discount

[tough aurora]

you'll need to speak to [e-mail]

[wary hatch]

@tough auroraok thanks

[scenic torrent]

Gave +1 Rep to @tough aurora (current: #63 - 144)

[tough aurora]

no problem 🙂

[spark cliff]

Hi

🆗

[timid lodge]

Hi

I can't change email on site

[tough aurora]

email tryhackme

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 5, 2025, 7:15 AM

[weary spindle]

Do you use a Google email?

[naive dust]

Hey! I'm trying to subscribe to Premium yearly but it tells me "Sorry, taxamo is facing technical issues at the moment. Please try after some time."

I have the 25% discount for another day and I don't want to lose it

Can someone please help me?

[tough aurora]

try emailing tryhackme

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jun 5, 2025, 10:41 AM

[naive dust]

Ok thank you

[sullen rose]

have the same problem, think is the site web

[naive dust]

Oh thanks

[tough aurora]

no problem 🙂

[visual elm]

Yeah, same taxamo issue here

[bronze mortar]

Seems it's a general problem

[austere horizon]

Is the website having performance issues?

Absolutely nothing is loading for me.

[wraith swallow]

damn tryhackme bugs

[wraith swallow]

same

[bronze mortar]

Not loading for me either

[tardy peak]

same for me

[polar spear]

Is Site is Down Nothing is Loading?

[royal fulcrum]

me too, blank page, now I'm logged out, and can't login anymore wtf?

[tardy peak]

Maybe too many people learning at the same time lol

[polar spear]

Lol

[warm geyser]

yup

[austere horizon]

#general message

[lament radish]

Is the site bug or its just me ?

No ok its bug

[lament radish]

Yep sorry

[misty sigil]

Is there something going on, on THM? I can't login on multiple browsers

[bronze vale]

TryHackMe Site Problems

Hey everyone,

We are investigating the problems with the website and apologise for the inconvenience.

[misty sigil]

ah, thanks for the update!

[loud flower]

Hi, we are aware of the problems with the site. The team is working on the fix, thank you all for patience!

[high lotus]

https://tenor.com/view/donkey-kong-mine-cart-ride-dispair-diddy-kong-gif-22844465

[indigo cave]

I hope the issue can be resolved quickly

[bitter gate]

https://tenor.com/view/gjirlfriend-gif-14457952604098199169

[magic pond]

https://tenor.com/view/futurama-fix-it-gif-16110085637413004018

[delicate venture]

Site is UP

[fierce trail]

i want voucher

bc The site has two days commenting

[delicate venture]

Site is Down

[austere horizon]

Sit has been down for some time now.
#site-support message

[tough aurora]

oddly enough, the vm I launched is still working 🤣

[lavish oak]

Site works on chromium based browsers, but not firefox (in my case)

[maiden lodge]

Tryhackme seems to have a server/side problem. 500. Cant login.