site-support

[vital lichen]

yes i do

[upbeat quarry]

can you ping the IP of the DC?

[vital lichen]

➜ ~ cat /etc/resolv.conf

This file was automatically generated by WSL. To stop automatic generation of this file, add the following entry to /etc/wsl.conf:

[network]

generateResolvConf = false

nameserver 10.200.27.101 (THMDC IP)
nameserver 10.255.255.254
search redacted.com
➜ ~

[upbeat quarry]

WSL is known to cause trouble with THM VPN
you should consider using THM AttackBox or running a VM on your host outside of WSL

[upbeat quarry]

here is the reference about WSL (it is pinned to this channel): #site-support message

[vital lichen]

Alright thank you

i was going to take my pt1 exam today however i encountered an error i already reached out to support around 4PM UK time concerning it
and i hadn't verified before however earlier last month i tried to take the exam but the verification system was not working due to some session error so i just left it since then after i confirmed it was back up

[upbeat quarry]

I am sure other users than me can help you better about PT1
just these 2 pieces of info though:

• you may have better responses if you post under #pt1 (browsing through older messages would be very useful too)
• I am not too optimistic you will hear from THM quickly as they do not work during WE

[covert valley]

Thx @upbeat quarry

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 595)

[vital lichen]

Thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 596)

[honest lynx]

rooms task websites are not working
any fix?

[upbeat quarry]

which room, which task, which website?

[distant knot]

Thanks! Now it works.

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 853)

[soft elk]

How does the repair streak work? I completed a room but still on day 1 ?

[ember osprey]

Try to reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 25, 2025, 10:11 PM

[ember osprey]

Also system may get buggy around midgnight sometimes

[buoyant plume]

sudo openvpn ~/Desktop/Lightandqrk.ovpn
[sudo] password for kali:
2025-07-25 19:01:34 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2025-07-25 19:01:34 Note: Kernel support for ovpn-dco missing, disabling data channel offload.
2025-07-25 19:01:34 OpenVPN 2.6.14 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-07-25 19:01:34 library versions: OpenSSL 3.5.0 8 Apr 2025, LZO 2.10
2025-07-25 19:01:34 DCO version: N/A
2025-07-25 19:01:34 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2025-07-25 19:01:34 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-07-25 19:01:34 UDPv4 link local: (not bound)
2025-07-25 19:01:34 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2025-07-25 19:01:34 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)
2025-07-25 19:01:36 read UDPv4 [ECONNREFUSED]: Connection refused (fd=3,code=111)
can any one help me about it? I am using vm too

[covert valley]

Maybe try to change the vpn region ? Temporarily

[buoyant plume]

At first I was on EU 3, then I switched to EU 1. Are you suggesting I try the WEST server?

[warped flax]

or maybe regenerate the vpn file idk vpn issues are anoying and usually i get it fixed via doing something again

[buoyant plume]

ı will try it first

[covert valley]

Maybe there is a small issue rn with the EU ? Don't know

[warped flax]

ive had the same issue above with htb academy 90% of the time i needed a new file for some reason

[buoyant plume]

2025-07-25 19:06:44 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-07-25 19:06:44 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-07-25 19:06:44 OpenVPN 2.6.14 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-07-25 19:06:44 library versions: OpenSSL 3.5.0 8 Apr 2025, LZO 2.10
2025-07-25 19:06:44 DCO version: N/A
2025-07-25 19:06:44 TCP/UDP: Preserving recently used remote address: [AF_INET]3.254.253.220:1194
2025-07-25 19:06:44 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-07-25 19:06:44 UDPv4 link local: (not bound)
2025-07-25 19:06:44 UDPv4 link remote: [AF_INET]3.254.253.220:1194
2025-07-25 19:06:44 TLS: Initial packet from [AF_INET]3.254.253.220:1194, sid=f4b6edf9 3413ffea
2025-07-25 19:06:44 VERIFY OK: depth=1, CN=ChangeMe
2025-07-25 19:06:44 VERIFY KU OK
2025-07-25 19:06:44 Validating certificate extended key usage
2025-07-25 19:06:44 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2025-07-25 19:06:44 VERIFY EKU OK
2025-07-25 19:06:44 VERIFY OK: depth=0, CN=server
2025-07-25 19:06:44 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
2025-07-25 19:06:44 [server] Peer Connection Initiated with [AF_INET]3.254.253.220:1194
2025-07-25 19:06:44 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2025-07-25 19:06:44 TLS: tls_multi_process: initial untrusted session promoted to trusted
2025-07-25 19:06:45 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2025-07-25 19:06:46 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route 10.101.0.0 255.255.0.0,route 10.103.0.0 255.255.0.0,route 10.201.0.0 255.255.128.0,route-metric 1000,route-gateway 10.21.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.21.233.254 255.255.0.0,peer-id 60'
2025-07-25 19:06:46 OPTIONS IMPORT: --ifconfig/up options modified
2025-07-25 19:06:46 OPTIONS IMPORT: route options modified
2025-07-25 19:06:46 OPTIONS IMPORT: route-related options modified
2025-07-25 19:06:46 Using peer cipher 'AES-256-CBC'
2025-07-25 19:06:46 net_route_v4_best_gw query: dst 0.0.0.0
2025-07-25 19:06:46 net_route_v4_best_gw result: via 10.0.2.2 dev eth0
2025-07-25 19:06:46 ROUTE_GATEWAY 10.0.2.2/255.255.255.0 IFACE=eth0 HWADDR=08:00:27:d1:f8:5d
2025-07-25 19:06:46 TUN/TAP device tun0 opened
2025-07-25 19:06:46 net_iface_mtu_set: mtu 1500 for tun0
2025-07-25 19:06:46 net_iface_up: set tun0 up
2025-07-25 19:06:46 net_addr_v4_add: 10.21.233.254/16 dev tun0
2025-07-25 19:06:46 net_route_v4_add: 10.10.0.0/16 via 10.21.0.1 dev [NULL] table 0 metric 1000
2025-07-25 19:06:46 net_route_v4_add: 10.101.0.0/16 via 10.21.0.1 dev [NULL] table 0 metric 1000
2025-07-25 19:06:46 net_route_v4_add: 10.103.0.0/16 via 10.21.0.1 dev [NULL] table 0 metric 1000
2025-07-25 19:06:46 net_route_v4_add: 10.201.0.0/17 via 10.21.0.1 dev [NULL] table 0 metric 1000
2025-07-25 19:06:46 Initialization Sequence Completed
2025-07-25 19:06:46 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 60
2025-07-25 19:06:46 Timers: ping 5, ping-restart 120
2025-07-25 19:06:46 Protocol options: explicit-exit-notify 3

is it okey?

[covert valley]

Looks good yes, just try a box

[warped flax]

yes ctrlz it then do bg

or just make a new terminal

you can also try by pinging the box to make sure it is working properly

[buoyant plume]

so ı can connect to ssh server in my machine right?

yes

[warped flax]

yeah

[buoyant plume]

ty so much

[warped flax]

np was a team effort

[covert valley]

np

[plush bay]

yeah this looks okay
now try
curl 10.10.10.10/whoami
if that returns an ip address you are able to access target machines on tryhackme

[gloomy sail]

Has anyone experienced issues where after an hr or so in a room and can no longer connect/ping to the target?

[rapid sable]

The attackboxes are being shut down automatically after 2 hours, if the time is not being extended. Not sure how it is with the target machines specific to the rooms though

[ivory spruce]

If a non-subscriber, the target is only up for an hour and you need to extend. It is 2 hours for a subscriber.

[rapid sable]

ouh, I missed that info

[rapid sable]

thanks for the info

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #11 - 855)

[covert fox]

sudo openvpn --config Gervis00.ovpn --daemon
[sudo] password di kali:

┌──(kali㉿kali)-[~/Scaricati]
└─$ ping 10.10.10.10
PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
^C
--- 10.10.10.10 ping statistics ---
10 packets transmitted, 0 received, 100% packet loss, time 9205ms

can someone help me?

[ember osprey]

Can you please verify and upload a screenshot , follow instrcutions from the link below 🙂 ? Also if you don't mind me asking , where are you from and which VPN server are you using ?

[covert fox]

OpenVPN Access Details

VPN Server Name
EU-Regular-3

Internal Virtual IP Address
10.21.198.209

Server status
Online

Connection
Connected

but why the ping don't work

[ember osprey]

Can you access it through your browser ?

[covert fox]

yes

[ember osprey]

Can you see your ip reflected ?

[covert fox]

why here i'm logged: https://tryhackme.com/access

but: ┌──(kali㉿kali)-[~/Scaricati]
└─$ ping 10.10.10.10
PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
^C
--- 10.10.10.10 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2027ms

and other: ┌──(kali㉿kali)-[~/Scaricati]
└─$ ping 10.10.181.150
PING 10.10.181.150 (10.10.181.150) 56(84) bytes of data.
^C
--- 10.10.181.150 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2046ms

[ember osprey]

run ping command with sudo

[dire ravine]

I have an issue in exam PT1

Where can i find support ?

[ember osprey]

Try in the #pt1 channel but the best option is to email THM support directly on the email address below but be aware that they don't work on weekends

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 26, 2025, 10:41 AM

[dire ravine]

Thanks

[ashen ibex]

Hi there

I'm trying to connect to the VPN using OpenVPN on my Windows laptop, but it fails with this error

this is the error

I'm using the EU-VIP-2 server, have regenerated the ovpn file too

[upbeat quarry]

you are not using WSL, right?

[ashen ibex]

nope, using the openvpn app client on windows directly

i need this for the windows fundamentals room, so tryna use the rdc app on my laptop without needing a vm or using attackbox (it takes lesser time this way that's why)

[upbeat quarry]

for Windows, you are using the community edition: https://openvpn.net/community-downloads/ ?

[ashen ibex]

I got the client from this msi - https://openvpn.net/client/

[upbeat quarry]

that may be the issue
check this pinned message: #site-support message

[ashen ibex]

i see, will try thanks

[upbeat quarry]

also, be conscious of what you are doing by connecting your Windows host to THM VPN, as it will be exposed to other THM users who may want to poke at it in a dangerous way

[ashen ibex]

oh is it

is it still fine to use it to connect the remote desktop?

that's all i'll be doing

rest i will be using my vm

[upbeat quarry]

in order to use RDP you will need to connect to THM VPN also, therefore you will have the same issue

[ashen ibex]

yeah that's why i was trying to connect

[upbeat quarry]

that is the recommended option
do not have sensitive stuff on your VM, and if something goes wrong you can delete that VM and start again

[ashen ibex]

ok sure ty

[spare flower]

Hey my THM WINFUN1.1 keeps connecting and then giving a connection error? Then after 15 seconds it reconnects but then directly gives the same error again. My internet is stable is really quick (350mbps download) so that shouldn't be a problem? All suggestions are more than welcome!
Thank you for your time!

[polar surge]

Has anyone else ever had issues with using the quote ' " key in the linux terminal and have a fix? Making it very hard for me to use the echo command etc. rn...

[upbeat quarry]

what do you need to do?
with echo, you may be better off with singe-quotes as there will be no interpretation by the shell of the characters inside the quotes (e. g. if there is a $ character it will not be interpreted as a shell variable)

[polar surge]

I mean like when I press the ' key on my keyboard nothing happens not even a dead key waiting for another input, I ran this command to check the keyboard layout and that looks fine but still can't get a single quote in the terminal

[upbeat quarry]

in a terminal of THM AttackBox, you get the single-quote output to the command line by pressing the key for that character followed by pressing the space key
same recipe for double-quotes
at least, that is how it works for me

[polar surge]

Thanks this worked for me too

[upbeat quarry]

sounds like something not stable, hence I would just terminate the target and restart it
alternative: use RDP from an attacking machine, but if the target is not stable, I would expect the RDP connection to be unstable too

[polar surge]

Never really encountered a program where I had to do quote + space before, usually just do quote + any key and it works across most programs

[naive dust]

why the config vpn file dosnt works on wsl but with openvpn on windows it does ?

[ember osprey]

Don't use WSL for THM . A lot of users reported connection problems with it . Install a proper VM if possible 🙂

[naive dust]

i had used it for past 6 months was alright

ok

now it works

[gloomy sail]

👍🏽

[rapid sable]

did you read the answer to me for non-subs?

[gloomy sail]

👍🏽

[edgy spear]

Hello wsh won this ctf

Honeynet??

[lament drift]

hello i am currently in the soc1 roadpath doing summit room and the machine wont run

[ember osprey]

How ?

[lament drift]

i start the machine and it wont do anythnig else

[ember osprey]

Click on the link provided in the task

[lament drift]

ok let me try thanks

[spark thorn]

if i cancel my sub do i lose my premium or i keep it and the next year i wont pay

[ember osprey]

You will have your premium benefits until the paid period expires thus until Jun 6th 2026 in your case 🙂

[spark thorn]

Ok ok ty

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5703)

[boreal lagoon]

Hello i have à problem with my access to premium adventage, they debited my monthly subscription on july 17 and i dont have access to the premium, anyone know who do i have to send message to ?

[ember osprey]

You will need to contact support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 27, 2025, 11:24 AM

[boreal lagoon]

Okay thank you

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5704)

[random ocean]

Hey everyone, about 20 minutes now I am losing connectivity with the windows remote machine from Windows Privilege Escalation room. The Linux attacker's machine is ok, anyone has any similar problem?

[shadow pond]

Hey, I have a 34 day streak but did not get the 30 day badge, is that normal? One of those days, a streak freeze was used

[ember osprey]

You should get it , try to email support on email address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 27, 2025, 1:43 PM

[gray orchid]

I am unable to download any of the room task files - it seems to be account related as it happens on multiple rooms and different devices. I have tried to clear my history, enabled popups, changed computers, changed browsers to no avail...anyone have any ideas?

[upbeat quarry]

maybe disable browser extensions

[drifting rune]

The website has a bug where it is impossible to redo and read material once a path is completed. Let's say there is Jr Pentester path completed and user goes to race conditions room. When user presses on section the confetti congratulation activates. Anyone knows how to disable that without reseting progress in the room?

I mean permanently. I know I can do it with browser dev tools but only once.

[silk thorn]

Hey every time I input my bill address it says "invalid zip/postal code" I've tried different zip codes but it doesn't work.

And I verified that I'm inputting everything correctly.

[ember osprey]

For payment related issues reach out to support directly on the email address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 28, 2025, 1:55 AM

[fading willow]

I'm on the Wireshark basics room, but the virtual machine won't let me perform the Traffic Sniffing. It says couldn't run /usr/bin/dumpcap in child process: permission denied. How do i get past this. I need to know the packets to move on

[ember osprey]

You aren't supposed to perform the live packet capture , you're supposed to inspect the pre-recorded pcap file 🙂 . That machine doesn't even have Internet access

[alpine needle]

i've completed all the room and now I want to review some basics, and every time I click on a room I get this message,
it's getting a bit annoying, it's slowing me down in my revision.

[upbeat quarry]

Looks like you are not alone: #site-support message
Maybe worth a post under #1333993673381253162 so more users can add their experience and upvote the issue with

[alpine needle]

done👍 thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 602)

[trim elm]

I’m having an issue with the Summit room on TryHackMe — the machine is not starting for me. I've tried multiple times, but it still doesn't work. Could you please help me resolve this?

[ember osprey]

Machine shouldn't start in the split-view , click on the link provided in the task to access the lab 🙂

[ember osprey]

Seems like a lot of users are reporting this , I will forward it to staff members 🙂

[alpine needle]

cool 🙂 thx

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5708)

[fluid plinth]

hello,
I am new on tryhackme and I was asking myself a question:
why can’t I see the maximum points on challenges when I have completed all the missions?

thankss

[upbeat quarry]

this may help: https://help.tryhackme.com/en/articles/6563910-points-explained

[fluid plinth]

thank you very much for your response, it helped me a lot!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 603)

[torpid jasper]

when ticket promotion event open?

[wind wedge]

There is none atm

[torpid jasper]

@wind wedge actually you replied my email in morning
for give streak freeze thankks for that .
is possible to get another one freeze day after tomorrow if time not enough to revise pre security path . its help me to revise without pressure about streak

[woeful galleon]

I have weird errors interacting with the attackbox and some of the windows host computers.

In the attackbox seemingly my CTRL only works if i toogle it manually via the clipboard. there I can pick it with my mouse together with other keys but then its always on or off. pain in the ass to always toogle it manually.

with the windows host pc-s that I run in split view the problem is a weird cursor. If i take a screenshot of it, it looks good:

however, what i see on my screen from outside (taken via phone) is just useless as i dont see what exactly i click.

Maybe the issue with the attackbox and the windows target systems are having the same root cause?
help pls

[upbeat quarry]

inside THM Attackbox, Ctrl-C, Ctrl-V, Ctrl-X work OK However, be aware that some applications, like in the terminal windows, work with Crtl-Shift-C (etc.) for copying to clipboard, as Ctrl-C is used to kill a process (check for the shortcut keys in the menus)
if you want to transfer from your windows host to Attackbox, you use the clipboard box available as per the GIF here: #general message
about the cursor issue, I am not sure: please confirm you are not using a mobile or a tablet to access THM rooms

[woeful galleon]

1. control button does not work at all, unless I pick it from the 'clipboard menu' in the middle of the split screen. No other way it detects me pressing ctrl! I know i need to use shift in terminal along with it.
2. i use mint and firefox.

[upbeat quarry]

about issue 1, I have not encountered that myself Maybe this older message would help: #room-help message I have not used that tweak as there are some security considerations
about issue 2: cannot help any further (I guess reloading does not help, right?)

[oblique trench]

Hello, I'm doing the Lookup room and lookup.thm is not resolving, is this intended?

[upbeat quarry]

edit /etc/hosts with the IP for lookup.thm

[oblique trench]

what's the IP for lookup.thm

[upbeat quarry]

the one that you get 1 minute after pressing the Start button

[oblique trench]

thanks that fixed it but I'm kinda confused how that works

[upbeat quarry]

lookup.thm cannot be resolved by your DNS service, hence you work around that by editing /etc/hosts which gets looked up before DNS kcks in

[oblique trench]

when I go to the IP directly, it redirects to lookup.thm but if I resolve lookup.thm to the IP it works?

[upbeat quarry]

yes, it will work as per #site-support message

[oblique trench]

I think I'm still missing something on how /etc/hosts work, it doesn't just replace the domain with the IP?

so going to the IP directly is different from using /etc/hosts with a domain host to go to that IP?

[upbeat quarry]

by going to the IP and encountering lookup.thm, the OS realizes it needs some translation and knows that it will find that under /etc/hosts
please note that this mechanism is subject to some configuration (like everything in linux), hence check documentation for nsswitch.conf , but the default configuration is as per previous messages

[oblique trench]

alright I'll look into it more, thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 604)

[halcyon bobcat]

uhh i am doing exploitation part of cybersecurity 101, i cant copy the PoC code into attackbox

[upbeat quarry]

are you using the clipboard box, as per #general message?

[halcyon bobcat]

thank you so much dawg i am so dumb i didnt see the gif they added in room

[halcyon bobcat]

how do i do this rep thing? reply to you with "thanks"

[upbeat quarry]

I think, but it does not really matter There are rules about that like some cool down between thanks, etc. 🙃

[scenic torrent]

Gave +1 Rep to @halcyon bobcat (current: #3054 - 1)

[upbeat quarry]

@halcyon bobcat so funny, somehow I gave you a point of reputation 🤣

[halcyon bobcat]

lol, anyways thanks for the help

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 605)

[distant tundra]

Hlo please help me i had purchased tryhackme subscription on 10 july 2025 for 3368 on something summer discount it was yearly subscription but yesterday 3368 again debited from my account

[ember osprey]

For payment related issues reach out directly to support on the email address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 28, 2025, 4:15 PM

[distant tundra]

I had mailed to them

Will i get response tomorrow

As my money was debited twice i am worried

[magic pond]

@west chasm I am attempting to start my PT1 exam and reach an error page for verifcation: "Your verification has expired" I have cleared cookies and restarted my VM. Can you help?

[ember osprey]

It can take up to a week to get a response

[ember osprey]

Try to ask in #pt1 channel and send an email with that screenshot on the address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 28, 2025, 4:24 PM

[lost parcel]

how did you solve the issue

i'm not able to access wazuh, tried multiple times

[distant tundra]

Listen to my issue

On 10 july i buy subscription there are 3 transaction on 10 july 2025 two was pf debited 3368 and another 3386 but than on 10 july i got credited back 3368 but on 25 july 2025 again 3368 debited

[upbeat quarry]

are you using THM AttackBox or THM VPN with your own local attacking VM?

[ember osprey]

I told you already , Discord users are volunteers only we don't work for THM . For payment related issue reach out to the official support channel

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 28, 2025, 4:42 PM

[distant tundra]

Okk

[lost parcel]

nvm it worked, used attackbox

[main panther]

I have problem with Linux PrivEsc room im using openvpn and the target machine doesn't work open vpn is connected everything works but in this room i cant even ping it

[upbeat quarry]

can you ping 10.10.10.10?

[main panther]

yes

[upbeat quarry]

what is the IP of your target VM for Linux PrivEsc?

[main panther]

other rooms worked before restarting vm and now after i restared it worked xD but ty for help

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 606)

[woeful galleon]

I have permissons to use CTRL outside the attackbox, on other parts of tryhackme website with no problem. So it should be specific to the attackbox part and not on my base firefox part. In the attackbox i cannot use it anywhere by pressing any CTRL button, so tinkering with the firefox there would not help me too much.
that cursor error may seem like not a big deal but it makes navigation terrible on those windows system. Any other part: ubuntu virtual machine from tryhackme for example work fine with CTRL

[brittle ermine]

Anyone had this problem before? Im trying to do the room super secret tip and the http server is closed no matter how many times I restart the machine. I know it shouldnt be like that because I was on it yesterday

I know it isnt my vpn cuz I can ping the machine and see ssh still open

[upbeat quarry]

I have just started that target VM, and for me there is a http server running, but on a different port than 80

[brittle ermine]

Thanks for checking it out. It wont connect for me on the alternate port

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 607)

[brittle ermine]

Maybe I change my vpn file

The nmap scan says its there but closed

[upbeat quarry]

I am using THM AttackBox
you may have the MTU issue
try this: ip link set dev tun0 mtu 1200

[grim needle]

I’m not receiving a password reset link to my email. I’ve checked the junk folder.

[brittle ermine]

Yeah this is weird. Its not working in the attack box either.

If the attack box wont connect I have to assume this is something I can't fix lol. Sad. I wanted to finish this one today

[upbeat quarry]

and you waited for the 5 minutes it suggested in order for the target to load fully, right?

[brittle ermine]

yeah

oh no way

maybe im being impatient or something was being slow

it just loaded lmao

[upbeat quarry]

after how much time?

[brittle ermine]

about 12-13 minutes

[upbeat quarry]

noted
I am just restarting that target VM, and after 6 minutes the http port is not open yet

[upbeat quarry]

earlier, I had started it, and done other business, so I did not monitor the bootup time

[brittle ermine]

Got it. Appriciate the help. Yeah thats the longest ive seen one take to start. Of course I assume its just broken

[wise basalt]

does anyone know how to fix openvpn, i have tried everything and can never connect

[upbeat quarry]

maybe not, I have a feeling that lately THM machines are slower, and I have been thinking that this may be some optimization on THM infrastructure (meaning optimizing costs 🙃 ) No way to substantiate that assumption anyway

[upbeat quarry]

this time, 10 minutes to have nmap reporting the http port is up

[brittle ermine]

Yeah thats brutal. I honestly have no idea about the infra but Im sure something is going on. Never seen it take that long. Either way Im sure theyll figure it out

[upbeat quarry]

can you share a screenshot of the output of your openvpn command?

[upbeat quarry]

do you get the output to stop?
and do you get the Initialization Sequence Completed towards the end?

[wise basalt]

what do you mean output to stop, and yes squence complete does show

[upbeat quarry]

Initialization Sequence Completed means your VPN has started ok
to confirm it is OK, check you can ping 10.10.10.10
if you can ping OK, you are OK with THM VPN

[wise basalt]

what the hell ive been trying for so long and it randomly worked today i didnt change a single thing. Thank you for helping tho

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 608)

[wise basalt]

its like when you cant find something and u ask ur mom and she finds it exactly where you looked lol

[stable torrent]

how long does it usually take THM support to get back to you

[agile forge]

THM support took about a day to get back to me and referred me here.

[stable torrent]

oh ok

[ember osprey]

It can take up to a week

[stable torrent]

oh alright thanks 🙂 just your usual not being able to access email to reset password

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5713)

[ember osprey]

I'm sorry to hear that but only support can help you with account/payment issues 😦 . They will reach out to you asap .

[cinder salmon]

HI could I get some help to set up the vpn connection?

This is the message that I get

2025-07-28 17:09:06 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-07-28 17:09:06 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-07-28 17:09:06 OpenVPN 2.6.14 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-07-28 17:09:06 library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
2025-07-28 17:09:06 DCO version: N/A
2025-07-28 17:09:06 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2025-07-28 17:09:06 OpenSSL: error:0A080009:SSL routines::PEM lib:
2025-07-28 17:09:06 Cannot load inline certificate file
2025-07-28 17:09:06 Exiting due to fatal error

I'm running Linux, OpenVPN version 2.6.14

[agile shard]

I'm having some connectivity issues with the AttackBox, the AttackBox becomes unresponsive for a few minutes and then works just fine again. 🤔 Not the first time this happens around this time of the day. System updates running maybe?

[ember osprey]

Delete your old vpn files , try eu 3 or 4 server , wait a few minutes , download a new file and try again

[ember osprey]

It may be . AttackBox performance also depends a bit on THM's CSP , it may also be something on their side

[cinder salmon]

Weird, but it worked

Thanks!

[fresh elbow]

I can't connect my openvpn

[ember osprey]

What's the exact issue ? Can you provide some shots ?

[zealous nymph]

@fresh elbow Can You Explain the Issue ?

[winged hazel]

@ember osprey a while back you shared a url to see all active machines, can you share it again?

Oo found your original msg #subs-room-help message

Link to see running machines: https://tryhackme.com/api/vm/running

[ember osprey]

https://tryhackme.com/api/vm/running

[lament drift]

hello why doesnt tunderbird work for me in soc path threat intelligence tools room

[bronze vale]

@upbeat quarry Please censor answers 🙈

[ember osprey]

How ? What's the exact issue 🙂 ?

[wicked walrus]

Anyone from THM here? i got a question about the amount that was charged on my subscription.

[ember osprey]

For payment issues reach out to support directly on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 29, 2025, 11:05 AM

[wicked walrus]

Ok thank you.

[cinder salmon]

The access page shows my connection as not connected, but I'm able to access 10.10.10.10

Am I connected or not?

I also seem to get an ip when I run curl 10.10.10.10/whoami

Running linux

Is the ip that i get from curl 10.10.10.10/whoami the one I should use for setting as LHOST for exploits that create a reverse shell?

[knotty plank]

I believe 10.10.10.10 is to test whether you have a connection to the vpn. It is not the ip of the target machine.
You should use the ip of the target machine for any exploits.

LHOST is the ip of the attacker machine, RHOST the ip of the target machine.

Are you on the AttackBox or your local machine?

[ember osprey]

Access page is broken - ignore it 🙂 . If you access 10.10.10.10 and see your ip reflected your vpn connection is working fine 🙂

[zenith falcon]

if i bought an exam voucher, but have no time to complete and exam, is there a way to reschedule/refund an exam voucher?

[cinder salmon]

Thank you

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5721)

[cinder salmon]

I'm on my local machine

[ember osprey]

Probably , try to reach out to support on the email below and explain your situation 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 29, 2025, 1:55 PM

[cinder salmon]

I see various interfaces when I'm connected to the vpn with my local machine. Which one should I use as my LHOST?

[knotty plank]

It should start with 10.
and is most likely under the line containing tun0

[cinder salmon]

Okay! Ty

[brisk bough]

does anyone know the solution

also how do i know which EU is best for me? (there's 4)

I fixed it

[cinder salmon]

I can't click the start machine button :/

It's greyed out

[knotty plank]

room? screenshot? maybe it is already started? does it show an ip at the top of the page?

[cinder salmon]

nvm, sorry!

[torpid jasper]

i dont have permission to join vc for study

[ember osprey]

You will have to verify first , follow instructions from the link below to learn how to do so 🙂

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 29, 2025, 6:07 PM

[wicked kindle]

Hello I am experiencing an issue where I cannot resume my subscription and I get the error "User is missing subscription details " please help

[tepid sorrel]

hello all
im having a problem when starting my PT1 exam
on the id verification section i get redirected to page with this error >

Your session has expired
The SDK token provided in this verification process has expired. Please go back and try again.

EDIT:
anyone had this error too ??

[upbeat quarry]

check #pt1 where some users have reported the same issue
also #sal1

[tepid sorrel]

will do thanks

[wicked kindle]

@ember osprey

[ember osprey]

Only support can help you with payment related issues , you can reach to them on the email address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 29, 2025, 9:58 PM

[exotic bane]

Ticket Message:

Hi, I'm working on the Intro to SSRF (Premium room), and the target machine doesn't seem to be working properly. I’ve started the machine twice, waited over 30 minutes, and I’m only getting the default “Welcome to nginx!” page at http://10-10-187-17.p.thmlabs.com. No login or registration page loads. I also scanned with nmap — only ports 22, 80, and 9999 are open, and there’s no app running on port 9999 either.

Could someone check if the target instance is misconfigured or down?

Thanks!

[winged hazel]

Hi, I just checked that machine and it is working just fine for me

[wicked kindle]

I emailed them almost 2 days ago and got no reply

[ember osprey]

It can take up to a week please be patient

[wicked kindle]

If there is no reply after a week is there a way to raise the issue further?

[stark swift]

Hi guys , the room remnux getting started keeps on crashing for me . I attempted to try to get it to work but to no avail . I just tried another room right now and it works fine

[haughty pulsar]

My attackbox is crashing constantly and target machines

[karmic seal]

"The requested connection does not exist. Please check the connection name and try again."
I guess the VM is crashing.

[knotty plank]

My target and attack are also crashing today more than usually

[haughty pulsar]

Yeah, i have now stable but when i started no crashes but today happend more than ever and i think servers has bad day or something😁

[ornate matrix]

I've been getting 405 code issues for about an hour now on attackbox

[umbral flax]

Hey Folks, I just did the S3 room on the AWS path .
But whatever i do I cannot terminate the EC2 Instances, have tried through AWS CLI, attackbox, AS well as resetting the env in TryHackMe. Keep getting Permission errors (AWS) or "Something went wrong" (THM)
Just dont want to leave instances running, will these terminate or can THM staff terminate them for me?

[wise ember]

Hi, it's the exam labs PT1 is going under maintenance? when it will be available?

[torpid jasper]

@naive dust

[naive dust]

yes

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 30, 2025, 11:25 AM

[torpid jasper]

follow this intruction

[exotic bane]

fwiw, i am currently able to access: https://10-10-145-150.p.thmlabs.com/customers/login in the ssrf room ...

[ember osprey]

Try to ask in #pt1 channel 🙂

[wise ember]

Alright thank you

[shut sluice]

Hi, i got my certificate, but i was have "." as name, is it possible to like regen it from the website ?

[ember osprey]

Yeah reach out to support on the email below and explain your situation 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 30, 2025, 4:57 PM

[shut sluice]

😢

[shut sluice]

done, thank you ❤️

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5728)

[frozen fossil]

heyy is there anyy issue with the vpn,am unable to connect

[upbeat quarry]

please provide screenshot with your VPN command and output

[frozen fossil]

thanks for the response,i tried reconnecting and restarted the system and it worked

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 614)

[shut sluice]

btw, should i put all my names ? like Name1 Name2 LastName ?

[ember osprey]

Specify the name that you actaully want to put on the certificate in the email that you will send to staff members

[shut sluice]

ok ok

ty

[gloomy sail]

Hello, I started working in the Ledger lab and when I am attempting to enumerate shares have been receiving this error "NetBIOSTimeout on target : The NETBIOS connection with the remote connection.py:174 host timed out" . Any suggestions or explanations on why this is coming up

[rancid socket]

guys I have a problem

When I try to access a link with Brup's own browser, it searches forever and does not access the site. What could be the reason?

[ember osprey]

Disable Interceptor in Burp

[rancid socket]

thankss

[kind bear]

hey guys, this has been happening for a couple days now, on different rooms with different target machines, i turn the machine on and no matter how long i wait, when i try to access the ip on my browser it just spends a really long time loading the page and showing "Transferring data from 10.10.206.141" but i if i close the connection it loads the html and on burpsuite browser after a long time it actually loads the page, im currently on LDAP injection and had the problem also with SSTI injection room, i am connected with open vpn but even the 10.10.10.10 page takes a while to load, however if i launch the attack box everything works perfectly fine in it, this started happening after a couple days of me having linux on dual boot and trying to fix things on that but i doubt that has any effect but just a thing that lines up that i thought i should add

Also to add, I even generated a new config file and it didn't change anything

[upbeat quarry]

for Windows, you are using the community edition: https://openvpn.net/community-downloads/ ?

[kind bear]

i had to use a vpn for that page to load cuz my country is silly lol, but yes im pretty sure thats the ones im using, i just use it from the system tray, i also had the problem on linux with the CLI tool

[upbeat quarry]

if your country makes things difficult for VPNs, I am not sure you will be able to have a good experience connecting to THM infrastructure
however the description you made may point at an issue with MTU, hence try this: ip link set dev tun0 mtu 1200

[kind bear]

i have used it fine for the last year even with the VPN but ill try that rn

[upbeat quarry]

not sure how to do that on Windows though...

[upbeat quarry]

the thing with countries banning VPNs is that at times it looks more like disturbing VPNs than banning them outright
I have experienced that situation while interacting in THM Discord with users from these countries, and more than once they have reported that it worked fine till x days ago Also, sometimes, they would say it works at some place but not elsewhere

[kind bear]

found a work around lol, i turned on warp, turned on open vpn, turned off warp and now it works perfectly 👍 doesn't make sense but who cares lol

[brittle tundra]

I'm trying to start the VM in the room Windows Fundementals 3, however it keeps prompting "APACHE TRyHACKME REMOTE", when you press login it just says it was invalid login

[fast musk]

site being updated? Getting a 500

[tough aurora]

whihc page?

[ember osprey]

They will fix your cert

[shut sluice]

Yep it’s good, already talking with the support.
Thank you !

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5733)

[fierce berry]

Hello I have an issue regarding voucher payment. I am using the same revolut card I used to pay monthly but it is getting declined.

[tough aurora]

only thm support staff can help you with billing problems

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 31, 2025, 8:51 AM

[tough aurora]

email to the address above ^

[fierce berry]

thx

[tough aurora]

no problem 🙂

[rotund ridge]

Hello,
I think we have a problem in the "Race Conditions" room, in task 5. I followed the exercise instructions, but the account balance never changes after the POST requests. Therefore, I can't complete the exercise. Could you check if there's a problem with the exercise or if the problem is me? 🥲

[tough aurora]

are you using the attackbox?

[rotund ridge]

Yes

[tough aurora]

how many requests are you sending at a time?

[rotund ridge]

Today I only tested one request to confirm if the problem persisted. But I've already tried 5, 10, and 15 times as well.

[tough aurora]

try restarting the target vm, start with 6 requests, make sure everything is set correctly

[rotund ridge]

OK, I will do that

[tough aurora]

if that doesn't work, I will test it out 🙂

[spice monolith]

hello, in one of the beginner classes, in a video the narrator said it would be wise to learn about The FIND command in linux. how can i access that room or whatever it is?

[tough aurora]

there probably isn't a room on the find command, but the linux fundamentals rooms probably teach them, check linux fundamentals 1 room

[spice monolith]

from that linux fundamentals rooms i got this link. https://tryhackme.com/room/thefindcommand but the content is private

[tough aurora]

yeah, check out the linux fundamentals room

the first one

[tough aurora]

this one, check this room out:
https://tryhackme.com/room/linuxfundamentalspart1

[spice monolith]

i did that room

that is where i got the link from

[tough aurora]

then it should teach the find command

[spice monolith]

nevermind thank you

[tough aurora]

no problem 🙂

[spice monolith]

i sent a message

[tough aurora]

to whom?

may I ask?

[shut sluice]

Hi !
am i the only one to have a "500" when i check my certificates ?
like when i watch for others, it's working.

(maybe it's bcs i've requested to regen my cert, so it's doing weird stuff for the moment)

[tough aurora]

I think it is a bug in the site

[rotund ridge]

I've re-tested, but I'm getting the same results. If you could run a test to verify that everything is working as it should, I'd be grateful.

[tough aurora]

seems like a bug:

[tough aurora]

sure 🙂

[fast musk]

I am getting one while logging in, on the dashboard

still 500

[shut sluice]

hmm

[spice monolith]

No idea. Who ever answers on the contact us button

[tough aurora]

oh, I see, did you ask about the private room or smth?

because if the room is private, THM can't do anything about it

[spice monolith]

Can't really remember what I asked. Got some things to do right now. But if it's been made private, it is a bit odd that in linux fundamentals you have a link to go and learn about the find command. I would be ok if i didn't acquire a premium account. Maybe it was removed for some reasons. But since the learning is so nicely done here. I would love to learn it instead of going blindly around the internet.

Of course i can go on chat gpt and ask for what i need

A command to get something... But that is not learning

[ripe berry]

why does it say 95% even though i complete all tasks and their questions?

[upbeat quarry]

as a workaround, search the internet for walkthroughs, either written or video
for example, this video is the companion video for the room by DarkSec, who used to be part of THM: https://www.youtube.com/watch?v=UeMxWW6Yqdo

[ember osprey]

Try to restart the room progress

and try again

[spice monolith]

Yes yes. But from my 2 weeks of learning, I've found i work better if i first try and do the whole room and after that i watch the video.

More than this, i am more easily distracted if i only watch the video

Thanks for the video nonetheless

[vocal iron]

Hello, I am still still still waiting 🫠

Room submitted in the end of January... I was planning to organize some CTFs on the platform with my non-profit association but it will be difficult if we'll have to wait nearly a whole year...

[ember osprey]

It may take up to a year 🙁

[vocal iron]

A year ??? Damn... We take only 4 to 5 months to organize a whole CTF
It won't be possible to organize it on THM with these conditions...

[fast musk]

anyone still suffering from 500?

[ember osprey]

I can add you to creator's channel if you want , maybe you can get more info there

[ember osprey]

Works ok for me

[vocal iron]

Yess please

[odd crane]

Hi the Openvpn network isnt working for me

When I run the config file it runs as usual but im unable to access any ips of the rooms im solving

I tried regenerating and even using different regions

[scenic torrent]

➕ Gave the role Creators-Lounge to yessir123

[ember osprey]

Try to access
https://tryhackme.com/

[ember osprey]

Here you go , you maybe able to get more info in #creators-lounge 🙂

[ember osprey]

Can you access http://10.10.10.10/ ?

[odd crane]

I figured it out already seems like there was some problem with the ovpn file

thank you

[ornate matrix]

can anyone help me? My attackboxes dontt seem to mount properly after I purchased the premium

[upbeat quarry]

the popup windows with a mount error message can be discarded They do not impact the functionality

[ornate matrix]

whenever I enter any line of code on terminal, I get the 405 eroor

[upbeat quarry]

are you using THM AttackBox? can you share a screenshot?

[ornate matrix]

Yes, THM Attackbox, sharing screenshot now

[woeful galleon]

https://tryhackme.com/room/flarevmarsenaloftools

I cannot reach the FlareVM... neither with rdp.

[upbeat quarry]

what is the room?
make sure you target the right IP, and not the IP of your AttackBox (in which case you will get a 405 response code)

[ornate matrix]

content discovery
What would be the right IP? I thought it's asking for Atackbox IP

[upbeat quarry]

that would be the IP of the target VM that you start in Task 1 After 60 seconds, you get a IP address under the red Target Machine Information heading, as per screenshot (target machine still loading in my screenshot)

[upbeat quarry]

you can discard that by clicking OK No impact There may be a second popup window similar to that one

[upbeat quarry]

no issue for me as per screenshot
maybe terminate and start again?

[ornate matrix]

I'm dumb, thanks that worked. I got confused and was just opening my attackbox instead of starting the machine from task 1

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 616)

[woeful galleon]

i did. i tried yesterday for like 5x times. same. restarting pc etcetc

[upbeat quarry]

do you have extensions in your browser? I suggest you disable them
however, if you have the same behaviour with rdp, then the issue is not about extension
I think I saw another message in Discord with that error, I'll look around
for the moment, I can propose this idea: use the machine I have just started as per screenshot If you say OK, I will keep it up for at least 1 hour (if you need more time, come back to this conversation)

[woeful galleon]

", I can propose this idea: use the machine I have just started as per screenshot If you say OK, I will keep it up for at least 1 hour (if you need more time, come back to this conversation)"

Sorry, what machine? where can i find?

[upbeat quarry]

#site-support message
IP is 10.10.134.162

[woeful galleon]

and how can i use that? terminate old and?

or with rdp?

[upbeat quarry]

terminate yours that does not work and use mine by connecting with RDP, as per screenshot from room material

[woeful galleon]

i cannot connect to it either.... i tried pinging it, but nothing

[upbeat quarry]

ping works, but you have to be connected to THM VPN
or use THM AttackBox like I do

[woeful galleon]

okay it works now in my browser, some of my plugins blocked the site.

thanks!

[upbeat quarry]

I'll terminate my instance then

[twin marlin]

I'm having trouble connecting to my OPVN, It has worked every single day for the past week but now I get an issue where it cant negotiate TSL. I have verified the routes and that my firewall isnt blocking the connection. Any ideas?

[ivory spruce]

Can you share the error message you are having (using a screenshot)? Also, from which geographic location are you connecting from?

[west chasm]

@twin marlin

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 31, 2025, 7:02 PM

[twin marlin]

I am connecting to US-West-Regular-1, I just reran the command and have no errors however there's no data passing through the tunnel.

[upbeat quarry]

can you ping 10.10.10.10?
and which country are you connecting from?

[twin marlin]

I cannot ping 10.10.10.10, USA

[upbeat quarry]

have you done some modifications to the VPN config file after downloading it from THM? I noticed in your screenshot that the MTU has a value of 1110, which is unusual
BTW, I did a test with a VPN config file from US-West-Regular-1 like you used: the first attempt failed (openvpn command got stuck), so I regenerated the VPN file and the second attempt succeeded Maybe consider that option?

[twin marlin]

I've generated multiple new profiles and have event attempted US EAST, I found something online showing a modified MTU value could be the problem so in the current config in the screenshot I sent the MTU is modified. I can regenerate a new one without it modified and show but it displays the same result, its just weird because it was working completely fine yesterday. Maybe I just rebuild a VM and try from ground 0

[upbeat quarry]

about the MTU: sometimes that is an issue, but consider that scenario only if ping 10.10.10.10 succceed but you have issues with browsing for instance (actually transferring bigger traffic than just some small ICMP packets) Hence I would not modify the MTU at the moment
rebuilding your VM is a bit extreme I think, knowing that THM VPN is prone to frequent issues
I think the way forward for you is to cycle through different VPN servers till you can ping 10.10.10.10 You may end up temporaly with a server far away (EU,IN,AU), but that would validate your access to THM infrastructre and your VM

[upbeat quarry]

also, when cycling through VPN servers, but failing, consider regenerating the VPN file

[twin marlin]

I have generated multiple VPN files across multiple different servers and 2 seperate accounts, I have also upgrade and installed and uninstalled openvpn.

[upbeat quarry]

what is your OS?

[twin marlin]

Most recent Kali 25.2

[upbeat quarry]

maybe the latest Kali is the issue then, and building something which is not the latest is the way
referring to your previous VPN connections, that were succesful, were they with the same configuration and the same VM?
BTW, I am not a big fan of the latest everything: this is my Kali

Linux kali 6.11.2-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.11.2-1kali1 (2024-10-15) x86_64 GNU/Linux

[twin marlin]

Gotcha, yeah I'll prob load up a basic Ubuntu instance to see if OS is a problem, all my previous connections are on this box with no prior issues which is why I am confused lol. I haven't changed anything personally but clearly something went wrong

[upbeat quarry]

weird, indeed
it looks to me like you are experienced with these things
I just know that THM VPN is often weird, and you have to be the one more stubborn
BTW, here is my THM VPN through US-West-Reg1 (not that it is very useful though)

[upbeat quarry]

one more thought: do not have multiple THM VPN sessions simulaneously, and that includes not having a VPN session on your local VM and one via THM AttackBox

[twin marlin]

Yeah I killed all openvpn connections on my desktop as well as the VM prior to testing unfortunately it didn't fix it haha I appreciate all the ideas THM free versions always been unstable

[upbeat quarry]

VPN for subs also had issues, and you had to swtich to non-subs 🙃
#1349307729671487499 message
#site-support message

[coarse dock]

getting trouble to get the url :/

[twin marlin]

Lovely 😅

[upbeat quarry]

as you like funny things: I interacted yesterday with another user that found a weird way to solve their VPN issue: #site-support message

[naive dust]

Logs Fundamentals room,

[upbeat quarry]

Press the reconnect button?
Refresh the page?
Restart the target VM?
For me, the target VM loaded after 3-4 minutes

[naive dust]

Tried them all and same issue :)) Even tried the attack the box machine just to check (it worked)

[upbeat quarry]

do you get an IP for the target VM that you could use with RDP?

[naive dust]

yes, let me try this

[ivory spruce]

When you switch to another THM OpenVPN server, you should wait for ~2 to 3 mins before generating your OpenVPN config file.

[winged hazel]

is there a way to mute echo permanently? I don't want to keep doing "snooze for this room"

[fast musk]

I am still getting a 500 error while accessing any page of try hack me, can anyone guide me what to do? It is happening since yesterday

[gaunt leaf]

I'm having trouble getting OpenVPN started. I've installed OpenVPN and downloaded my config file, but sudo openvpn ~/Downloads/CalendulaAsteraceae.ovpn hangs when I try to run it. The last output before it stalls is 2025-07-31 23:31:40 Protocol options: explicit-exit-notify 3. Same result if I copy the config file and change the extension to .conf. What might be causing this, or what are the next debugging steps I should take?

(I'm on a 2017 MacBook Pro.)

[ember osprey]

There's no currently

[viscid axle]

can we get that added to the emoji's? It happens alot, would be nice to emote with it.

[chrome elm]

When I try to do the check in for PT1 I get this error from onfido (Your verification is expired)
Is there a way to restart the check in process?

[ember osprey]

Try to ask in #pt1 channel also , try sending an email on the address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 1, 2025, 8:05 AM

[chrome elm]

I opened a ticket yesterday, directly from the home page. Should I send an email to [e-mail] or I might wait until the ticket is closed?
Thank you

[scenic torrent]

Gave +1 Rep to @west chasm (current: #58 - 175)

[tough aurora]

I think you can send an email and wait

[chrome elm]

Thanks
Nevermind I checked now and the ticket system automatically sends the ticket to [e-mail] 😬

[tough aurora]

ahhh, makes sense

[thorn vessel]

any THM support available ? I created a ticket and still no response

[tough aurora]

what did you ask about?

and how long has it been since you sent a ticket?

[thorn vessel]

something related to voucher, and it was 2 days ago

[lofty marlin]

Why has the AttackBox started crashing so often?

[boreal sleet]

Is there anyway to get the site for SOC Level 1>Cyber Defence Frameworks>Summit to work? Doesn't matter the browser i use or how long i wait i always get 504

[ember osprey]

That means that the machine isn't up yet , refresh the page with f5 after a few minutes

[boreal sleet]

"Does not matter how long i wait"

I have tried on different networks, different bowsers, cache cleared, dns flush and still get 504

[ember osprey]

It works on my side

[ember osprey]

It can take up to a week

[boreal sleet]

ok ty

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5740)

[ember osprey]

You're using AttackBox or ?

[median wedge]

guys i wanna start learning ethical hacking am new and i don't know what to do i just downloded linux

[upbeat quarry]

you there?
I have just started that target, as a test, and it works for me
I am curious if you can access it: https://10-201-30-4.reverse-proxy-us-east-1.tryhackme.com/

[upbeat quarry]

you may want to have a look at the roadmap: https://tryhackme.com/hacktivities?tab=roadmap
then move quickly through what you already know, as a refresher and way to familiarize yourself with THM environment, and drill down on what is new

[ember osprey]

You can check out free path for beginning 🙂
https://tryhackme.com/resources/blog/free_path

[upbeat rover]

when will this start working?

[ember osprey]

Try to refresh the page

[upbeat rover]

okay, thank you! also, I can't see the free roadmap in the learning section, was that removed?

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5743)

[ember osprey]

It is temporary removed but you can refer to this resource 🙂
https://tryhackme.com/resources/blog/free_path

[upbeat rover]

thanks a lot!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5744)

[timber glen]

I'm not trying to come across as entitled here, but as a premium user I genuinely don't understand how this is happening

[ember osprey]

Try to refresh the page

[hasty copper]

sry i was blind 😄

[shrewd jacinth]

I visited the thm website, it said something about re-verifying my email and had a link. Opening my inboxes showed nothing new from THM and re-opening the THM website removed the popup.

I guess the website just trusts me lol

[tawdry orbit]

Hello, is this still an issue for you?

[ember osprey]

Is everything ok now 🙂 ?

[boreal sleet]

This worked, thank you!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 621)

[open lantern]

yesterday I was working on a room (mr robot) and I was using my VPN, was working fine. Today I can connect to the VPN, but not to the target box. Has anyone ever seen that before? I spent a half hour respawning target boxes because I thought the target was not starting up right, and it turns out the box is there, I just can't see it through the VPN... ideas?

[steel aspen]

HI, i was checking out and older room named "Bulletproof Penguin"
https://tryhackme.com/room/bppenguin

The room is scored via a binary named get-flags that references/runs a python program /opt/checker/checker.py
The problem is that the scoring depends on a lambda server with the hostname m0mxzvy8s2.execute-api.eu-west-1.amazonaws.com
That lamda server is no longer reachable - at least because it can not resolve.
Its a cool room even if it is dated. It would be nice for the scoring to still work.
Cheers,
-nonattribution

[ember osprey]

I will forward it to staff members 🙂

[ember osprey]

Try to change VPN server and download a new VPN file

[static valve]

yo i dmed yo something check it out please

[ember osprey]

Will do

[marble breach]

:hammer: alexvaldoo330459#0 has been banned.

[ember osprey]

Thanks for reporing he has been removed from the community

[scenic torrent]

Gave +1 Rep to @static valve (current: #3066 - 1)

[jolly lagoon]

HEY site is not working without vpn , i think that it got somethingn in my region (IN)

please see this issue

[sick epoch]

Hello, THM,
Currently stuck at the room 'ItsyBitsy'. Having trouble on connecting with the VM. The message i get continuously after starting the ELK VM - 'Kibana server is not ready yet'. This is consistently happening and i am waiting around 5 to 10 mins to let the services in VM start, but no luck. I have regenerated my VPN file and restarted all my connections. Can the team check and resolve the issue.?
Thanks in advance.

[ember osprey]

It can take up to a 20min for Kibana to fully startup

[sick epoch]

Ok. let me check that again. Thanks.

[sick epoch]

Now its working. Thanks for the input.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5745)

[karmic flicker]

Site not displaying when i connect, just a blank white screen

[upbeat quarry]

which site?
please provide screenshot

[karmic flicker]

It just shows as a white screen, the help centre button is there tho

I can access other websites

just the basic tryhackme[.]com

[upbeat quarry]

for troubleshooting:

• consider disabling (some) browser extensions
• consider putting tryhackme.com on the allow-liste of your antivirus
  also, if you have a VPN (I do not mean THM VPN), like NordVPN, ProtonVPN, it would be usefull to check whether you can connect to tryhackme.com when that VPN is on (that would allow to isolate the issue to a particular network)
  also, I guess you did tons of refreshing of that page, right?

[karmic flicker]

Yes refreshed quite a bit, cleared cache etc.

No browser extensions to disable

No VPN and Im using a VM of Kali so no antivirus. Weirdly the site works on the host machine, just not the VM. All other sites work fine with the VM

[upbeat quarry]

if the site works on the host but not the Kali VM, I wonder whether you configured something on the firewall of your Kali VM

[karmic flicker]

Its a fairly clean install so there shldnt be anything set up to block it, but will have a look.

Tbf i can just use my host machine to access the site and use the VM to do the practical stuff

so got a workaround for time being anyways

[upbeat quarry]

understood
however, if you get to the root cause of the issue, I would like to ask you to share it here, so we can learn from your experience
thanks in advance

[karmic flicker]

No worries - also for the firewall question there is nothing btw

[upbeat quarry]

I wonder whether you can map tryhackme.com from your Kali VM: nmap -Pn tryhackme.com

[ember osprey]

Are you using a translator ?

[karmic flicker]

Nah, everything is in english. I tested it in chromium on the VM and it works. So something is up with my firefox 🫠

If i find root cause ill share but def not something on your guys end

[karmic flicker]

Had to upgrade my firefox, dont think it was compatible with some of the site content

[digital citrus]

Im having an issue with the OpenVPN connection,I can connect fine and ping/curl 10.10.10.10 but any box i start is unresonsive. Tried restarting everything, new boxes, different VPN configs, different devices, same issue, It looks like they are being assinged but are unreachable from the VPN for some reason. any tips?

[unreal kraken]

Unable to make payment since 2 days I am trying while selecting card or PayPal it is not loading

[upbeat quarry]

thanks for that update

[upbeat quarry]

this may apply to your case: #site-support message

[jolly idol]

Hi, anyone experiences lack of enumad interface when trying to complete enumerating AD room? anything i can do besides writing to support?

[upbeat quarry]

on THM AttackBox?

[jolly idol]

yes'

[upbeat quarry]

that is a bug
download th VPN file for that network from your access page and run openvpn with it
if that fails regenerate the VPN file
if that fails, leave the room with the options button and join a few minutes later (5-15 minutes maybe)
also:

• make sure the network is running
• start the THM AttackBox after the network has been running

[jolly idol]

Thanks for help. Here is what i did and it worked:
On AttackBox there is NetworkConfigs dir on Desktop. There are all network ovpn files so I could access it directly without additional downloads.

Running ovpn adenumeration.ovpn throws this error:
Error: problem with tun vs. tap setting
Exiting due to fatal error

Quick fix is to replace this header in file:
dev enumad
with
dev tun

running ovpn now creates new tun0 interface and network is accessible.

Hope this might help someone if they are looking for quick workaround

[upbeat quarry]

thanks for the trick

[scenic torrent]

Gave +1 Rep to @jolly idol (current: #3066 - 1)

[smoky eagle]

Hi, I'm on the "intro to LAN" section, there is some interactive task to do, but I can't see any button to start machine, I'm on premium and connected to the VPN and I can start virtual machine in OpenVPN guide, but in the "intro to LAN" section I still can't see any button

[ember osprey]

Go to task 1 and press green View Site button 🙂

[smoky eagle]

okey, I got the problem, I didn't know how to interact with this task to see those scissors xd thanks 🙂

[autumn fox]

Are there currently any known openvpn issues?
Wireshark shows TCP Retansmissions and TCP Dup Ack.

I cannot reach the endpoint http://wekor.thm/it-next/ in the room wekorra over the VPN.
It is reachable using the attack box.

[coarse glade]

Guys, I have observed some of the rooms in THM take incorrect answers as correct one and flag the right ones as incorrect. Did anyone of you notice it or have encountered this yet?

[upbeat quarry]

just checked with my instance for that room, and I can reach wekor.thm
I guess you added that domain to your /etc/hosts on your local VM, the one through THM VPN, right?

[autumn fox]

I can also reach wekor.thm but not wekor.thm/it-next
I am using the THM VPN on a VM.

The same endpoint is reachable via the Attack Box.
Seems to be a network issue as I see lots of retransmissions in wireshark.

[upbeat quarry]

strange: I can reach the endpoint on my Kali VM

[upbeat quarry]

try this: #site-support message

[autumn fox]

Will try

[digital citrus]

Didnt work, tried to restart after too. I can ping 10.10.10.10 and my Virutal IP, but its literally just the box that wont get pinged or scanned. I have no clue why.

[upbeat quarry]

which box for example?

[open lantern]

Thank you. This worked. I should have done it on my own but there's only one server on the east coast and I didn't want to use the west coast. But it seems to be fine. Thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5747)

[digital citrus]

mr.robot box, but i have tried multiple and its happening to them all.

[upbeat quarry]

have you got the option to use THM AttackBox? and check whether you can reach that box from there?

[open lantern]

I was having the exact same problem... Disconnect from your VPN, DELETE the ovpn file, then go choose a different VPN server, regenerate the VPN file, download it and then connect using the new ovpen file.

[digital citrus]

works fine in Attackbox

[digital citrus]

I tried this but ill try it again. Thanks

[open lantern]

maybe try restarting your VM after deleting the original ovpn and using the new one

[autumn fox]

That fixed it

[open lantern]

I had the same problem all day yesterday (connected to VPN, could see 10.10.10.10 but could not ping the Mr Robot box) Following the instructions I just gave, it worked for me

[upbeat quarry]

do you remember if the IP for the target VM had a format like 10.10.X.X (or possibly 10.11.X.X) or was it like 10.201.X.X?

[open lantern]

The orginal VPN connection was giving me 10.10.. the new one is giving me 10.201..

[digital citrus]

tired that and it didnt work for me, what config file did you use? and the one im having issue with is a 10.201.x.x

[open lantern]

the one I'm working on now is at 10.201.36.123

[upbeat quarry]

I have a feeling something has changed in THM infrastructure, moving into 10.201.X.X, and that seems to cause issue
another user earlier had similar problem (works on AttackBox, not on THM VPN)
you can watch his headache as he encountered this while streaming on Twitch: #room-help message

[digital citrus]

it works fine in attackbox so ill do it through there for now ig lol, i just hate the attackbox ngl

[open lantern]

I'm connecting to the US West VIP i think, 54.193.147.96

[digital citrus]

thats the one i just tried too smh

this shi just hates me

[open lantern]

yeah, that sucks. I don't like the attack box either. friggin slow and doesn't have all the tools

[open lantern]

I saw a post last night that said they changed something in the VPN infrastructure that was supposed to make VPNs faster. I asked if that could be why I couldn't connect to my target anymore but didn't get a response

[little ivy]

Somehow I have an issue deploying the https://tryhackme.com/room/maldoc machine. (IP: 10.10.33.175)

[digital citrus]

I wonder if thats it becasuse everything was working completely fine for me 2 days ago, and now its like I cant do anythign

[open lantern]

either that or its big coincidence

[ember osprey]

Sometimes some servers go temporary down ( ex: for maintenance purposes ) . Try to return to East US in a few days 🙂

[mossy walrus]

Im having this same issue atm: able to access 10.10.10.10 but not any of the machine I start.

[upbeat quarry]

does not work for me either (IP: 10.201.2.117)
I'll try again, but it have a feeling there are mulitiple issues in THM infrastructure preventing to access target VMs

[upbeat quarry]

second attempt: different instance, and waiting longer, but failing to connect to the target again
my conclusion: issue in THM infrastructure
worth reporting it under #1333993673381253162

[upbeat quarry]

which machines have you tried?

[mossy walrus]

Basic Pentesting and Ice. Both of them were assigned 10.201.X.X addresses and the problem manifested itself the same way both times.

Just tried accessing Bolt though & everything seemed to work fine

[upbeat quarry]

thanks for your input
what is the format for Bolt: 10.10.X.X or 10.201.X.X
also, working fine with Bolt now is through THM VPN?

[scenic torrent]

Gave +1 Rep to @mossy walrus (current: #3067 - 1)

[surreal jewel]

10.10.X.X

[mossy walrus]

Bolt was a 10.201.X.X. It is now working fine through THM VPN, I never touched AttackBox so far

[upbeat quarry]

if you are still facing the issue, there is a workaround:

• from THM AttackBox or your own local VM (like Kali) connected through THM VPN
• start a VNC session, for instance using remmina
• in remmina enter the IP as X.X.X.X:1
• when prompted for the password, enter the one provided by THM, i. e. malware (no prompting for the username)
  Check screenshot example using THM AttackBox

[dull yacht]

Hi, I am trying to use Openvpn through wsl in mirrored mode, is there anyway i could do so?

[upbeat quarry]

if you mean to use THM VPN with WSL, it is known to cause issues, and you should avoid it

[dull yacht]

like i cant curl to 10.10.10.10 through wsl too

[dull yacht]

so ig i cant fully retire my vms

[upbeat quarry]

not sure about the context: you used to use hypervisors like VirtualBox or VMWare? For THM, if you do not use a local VM running on a hypervisor, you can use the in-browser attacking machines provided by THM (there are 2 flavours for subscribers: Ubuntu and Kali)

[dull yacht]

wait there are multiple flavours?

Am i missing something?

[dull yacht]

Honestly i have a VM-kali sitting around taking shit ton of space shifting to wsl kinda eases stuffs for me it works on the hypervisor but allows me to integrate a few stuff on my windows machine

[dull yacht]

yes i use the attackbox but i have the default machine

that is kali ig

i never knew we had ubuntu access too

[upbeat quarry]

default is the Ubuntu flavour, commonly known as THM AttackBox It displays as recommended as per my screenshot

[dull yacht]

i was also told by someone i can download tools on the attackbox but i could never figure that out either

[dull yacht]

ohhh

[upbeat quarry]

I have a feeling they are restricting updating and upgrading of these attacking machines (I guess to avoid paying traffic through their AWS cloud infrastructure)

[dull yacht]

but it gets difficult to do stego on attackbox hence i shifted to VMs

[dull yacht]

ohh

[upbeat quarry]

also, the Ubuntu flavour is the one recommended because it contains all the tools you are expected to use to solve THM rooms (in particular the walkthroughs)

[dull yacht]

difficult for challenges tbh

[upbeat quarry]

yes, and also no persistence

[dull yacht]

i have had issues performing stego based things in various red team challenges is there any good workaround you can suggest

[upbeat quarry]

no, sorry I am not stego-friendly 🙃

[dull yacht]

ohh what domain you focusing on?

[upbeat quarry]

actually, I am not too much in challenges, more doing the walkthroughs

[dull yacht]

i was more on the walkthrough too but i started facing issues in practical scenarios

[knotty plank]

which challenges specifically?

[dull yacht]

like chocolate factory for example you gotta do some stego in it

[knotty plank]

Check out my standard stego enum script:
https://pastebin.com/iKbgS7mN
Obviously don't blindly run this, but look over it or paste it into ChatGPT to verify it is not malicious.
You might need to run this with sudo.
It is supposed to work on the AttackBox. It installs all necessary tools automatically, e.g. binwalk which I believe is by default broken on the AttackBox.

This should be enough for most stego challenges.

You just scroll through all_output.txt when it is finished or paste the output into an AI assistant.

[dull yacht]

thank you i shall look into it

[dull yacht]

i was looking into the script, and well there are so some tools that dont work well in the attackbox like binwalk

[knotty plank]

Yeah the script fixes that

[dull yacht]

ohh thats really amazing thank youu!!

[scenic torrent]

Gave +1 Rep to @knotty plank (current: #181 - 51)

[knotty plank]

These 3 lines are needed to fix binwalk:

sudo apt-get remove --purge python3-capstone capstone
sudo pip3 uninstall capstone --yes
sudo pip3 install capstone==4.0.2

The script runs them

[dull yacht]

ohhh

thank youu

[knotty plank]

you're welcome mate

[vague latch]

where do I ask basic questions like if I run a command on my attackbox but it doesn't appear to be able to talk to the thm site in question?

room help? maybe I just answered my own question 😉

[wind wedge]

Here’s fine if it’s to do with the attackbox

[vague latch]

I started in the room-help channel - thanks anyway! maybe if we don't get it fixed there I'll come back 🙂

[ember osprey]

Wdym exactly ? Can you provide some shots please 🙂 ?

[modest depot]

Whats going on the site? attackbox dont work and the deployed target machine too.

[vague latch]

attackbox and target machine didn't seem to be able to work as expected with the ffuf command. my attackbox timed out and I re-initialized it and it worked as expected

not sure what happened but it sort of resolved itself

a little more detail... when I started the room and got down to the task that involved ffuf, the command that was intended to be copied into the attack box didn't recognize the targe machine IP. even if I explicitly put the target machine IP in the command it wouldn't work properly. It only worked properly when the attackbox was re-initialized and somehow that populated that IP of the target machine in the text that was intended to be copied over to the attackbox... that may sound confusing but that was the sequence of events.

[modest depot]

for me, when i activated the target system it reveals me the original dns of the server

and after when i wanted to get on the site i get 502 error, of course the target one

[vague latch]

some of these instructions aren't great... I'm re-reading and trying to follow them but they aren't generating the intended output. In the latest instance, in the authentication bypass room: https://tryhackme.com/room/authenticationbypass

it talks about looking at PHP code (where is the code and how do we look at it) and it mentions a $_REQUEST variable. That's awesome, but I have no idea how to find that based on the instructions.

It also mentions using a Blue button. I really want to use the blue button, but I have no idea where it is:
"This walkthrough will require running both of the below Curl Requests on the AttackBox which can be opened by using the Blue Button Above."

That said, I believe I have access and have the attackbox opened in a side window, but the mention of the Blue Button is confusing.

[digital citrus]

did you get it fixed?

or is it something with THM servers?

[steel aspen]

thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5748)

[digital citrus]

is there anywhere to submit an official ticket? my vpn is still not working, tried like 4 different config files. the VPN connects, i can see 10.10.10.10 ping my ip as well. But i can’t get any box working unless im using the attack box

has to be something with THM servers, HTB i’m having no issue at all on either device.

[solar bear]

Same problem here. I'm going with the attack box, for now. It works fine with the machines. Maybe it's a server problem.

[ember osprey]

If you can access 10.10.10.10 everything is fine with your connection , can you see your IP reflected on the 10.10.10.10 page ?

[digital citrus]

yes

[ember osprey]

Also where are you guys from and which server are you using ? @digital citrus @solar bear

[digital citrus]

its just the box that I cannot ping or access the webpage. I tried multiple boxes

I tried East and West

[ember osprey]

Which box ?

[digital citrus]

Mr robot, UltraTech, Overpass and Smol

im guessing its them all though its the only 4 I tested

[digital citrus]

Yeah attackbox is working for me as well, But i would rather use the vpn lol

[solar bear]

Me too XD.

[solar bear]

I'm from Brasil. I tried to use US EAST regular 1 and I am using EU regular 1 now

[digital citrus]

its weird forsure, ive never had this happen like this. Usually a restart or 2 fixes it

[ember osprey]

US EAST 1 and EU 1 and 2 are temporary down

Use EU regular 3 or 4

Until they come back up

[solar bear]

Such a bad luck. I'll try it out, thanks

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5749)

[ember osprey]

Sometimes some servers go temporary down ( ex: for maintenance purposes ) . Try to return to East US in a few days 🙂

[digital citrus]

lol it worked thank you

I tried the East, West and EU 1 and 2 lmfao

[solar bear]

Yep, worked for me. Thanks @ember osprey

[solar bear]

You tried everything, lol

[digital citrus]

is there a status page that shows what config files are down?

[sharp cobalt]

Hi, I lost my streak, and it said that i have until the end of the day to complete a room, and when I completed the room I didn't get my streak back, it just shows a streak of one day

Is this the right place to ask this?

[ivory spruce]

You can drop an email to THM Support to have it restored.

[west chasm]

@sharp cobalt

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 3, 2025, 4:02 AM

[sharp cobalt]

ok thank you

[ember osprey]

Currently no

[hollow fjord]

Hi idk if this is the right tab to ask but I am currently in the "Careers in Cyber" room under "Presecurity" course and the questions in this room is not posted as actual questions and whenever I attempt to put an answer to each, it doesn't accept anything.

For example, under the last tab "Quiz" after doing the quiz and submitting the result "Security Analyst", it gives back an error message: Your answer is incorrect. Please ensure it follows the answer format represented by underscores, check for typos, and try again.

Ok, nvm, I have just read the same question and answer in #soc-sim-help . Each one doesn't need an answer.

[ember osprey]

It's a temporary bug on THM side, just click on the answer box 🙂 . It doesn't actually require an answer 🙂

[little ivy]

thanks ❤️

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 624)

[modest depot]

https://tryhackme.com/room/orminjection i've got a problem with this room, it doesnt show up a attackbox button, and when i wanna startup the target machine it givin me a original amazon dns @ember osprey could you help me?

[wind wedge]

You don't need the attackbox, once the VM is deployed, you go to the link that's in the task

[modest depot]

so its like, this is for the outside work? not in the local server via attackbox?

[wind wedge]

Not all rooms require you to connect to an address. Some rooms we have set up on static sites

[modest depot]

oh thats new for me but really thanks for explanation

[real moth]

Is there a way I can open a ticket or anything?

[ember osprey]

You can send an email on the address below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 3, 2025, 1:09 PM

[ember osprey]

Like Blackout said you don't necessarily needed it in that room but AttackBox isn't tied to a room , you can start it in any other room where it is available and use it for that room 🙂

[quasi iris]

Hey! I'm having issues with TryHackMe VPN.
OpenVPN shows Initialization Sequence Completed, and tun0 is up.
But the TryHackMe site still says “Not connected”.
I also tried switching to other VPN servers, but the result is the same.

Screenshot attached — any idea why it's not detecting the connection?

[deft quartz]

I think it doesnt matter what the thm site says

If your machine can reach 10.10.10.10 you are connected to the netwoek

[smoky eagle]

Hi, I can't login by ssh to machine, It's written to use "tryhackme" as login and as a password but then error "permission denied" occures

[upbeat quarry]

which room?

[smoky eagle]

nevermind, It works now ;

😉

I write IP and username in reverse order

• wrote

[ember osprey]

Can you access 10.10.10.10 ?

[safe pike]

I have the same problem and I can open 10.10.10.10

The "Not Connected" in tryhackme a bug or something?

[upbeat quarry]

it is a bug indeed

[winged elm]

Hi, I have a 30 day streak on THM but don't have the 3 day streak badge? I have all other streak badges up to 30 though.

[ember osprey]

Yes access page is broken

[ember osprey]

You should get it automatically , i got mine yesterday / day before yesterday . If you didn't try to email the support on the address below if you really need that badge 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 3, 2025, 4:26 PM

[winged elm]

Was it a badge that was just recently added?

[safe pike]

Also weird things happen telnet, ssh does not connect nmap give weird results

[ember osprey]

it was added a day or two ago 🙂

[plush bay]

oh huh

apparently shadow got the 3 day streak badge but eeeeeeh

[surreal spire]

$ ping 10.201.70.246
PING 10.201.70.246 (10.201.70.246) 56(84) bytes of data.
^C
--- 10.201.70.246 ping statistics ---
9 packets transmitted, 0 received, 100% packet loss, time 8170ms

└─$ ping 10.201.62.95
PING 10.201.62.95 (10.201.62.95) 56(84) bytes of data.
^C
--- 10.201.62.95 ping statistics ---
23 packets transmitted, 0 received, 100% packet loss, time 22513ms

└─$ ping 10.10.10.10
PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
64 bytes from 10.10.10.10: icmp_seq=1 ttl=61 time=92.7 ms
64 bytes from 10.10.10.10: icmp_seq=2 ttl=61 time=92.3 ms
^C
--- 10.10.10.10 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1003ms
rtt min/avg/max/mdev = 92.309/92.480/92.652/0.171 ms

Seems be to common issue of 10.6.x.x IP's not being able to send any packets to 10.201.x.x ranges

Oddly enough, I've checked the 'Access' page and I'm definitely connected and have an IP. But the page does not reflect this

Regenerated my config, rebooting

still 100% packetloss, fresh reboot and config

That was US East 1, figured id try same location as machine

[upbeat quarry]

Maybe not best: check this #site-support message

[surreal spire]

Trying EU 4 now

That seems to have made things worse. Now i can't even ping 10.10.10.10

config does not appear to connect

2025-08-03 18:13:49 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-08-03 18:13:49 TLS Error: TLS handshake failed
2025-08-03 18:13:49 SIGUSR1[soft,tls-error] received, process restarting

ok, it connected now ... still can't ping 10.10.10.10 but the page responds

[upbeat quarry]

regenerate, download and try again
make sure the regenerated VPN file is different, for instance by doing an MD5 of older and newer, and comparing

[surreal spire]

still 100% packetloss to room machine

[upbeat quarry]

which IP for that room?

[surreal spire]

the keys appear the same but the 52.x IP changes. i saw that. also the VPN IP I'm issued has changed

10.2 now, was 10.6 before

room 10.201.62.95

[upbeat quarry]

I am connected to EU-reg-4 too

[surreal spire]

this all started within the last 48 hours or so, i do THM pretty regularly

[safe pike]

Apparantly quite some prople is having the same problem

[upbeat quarry]

and I can ping that IP

[surreal spire]

(Top 1%) 🙂

[upbeat quarry]

I checked your Twich stream yesterday, and I saw your struggle. indeed

[safe pike]

Precisely. before today I did not face such issues

[surreal spire]

https://www.twitch.tv/videos/2529135721

[upbeat quarry]

normally, in my experience till today, if you could ping 10.10.10.10 you were good, except possibly for the MTU issue

[surreal spire]

I could ping 10.10 on US East

Cant on EU 4

still 100% packetloss everywhere else thou

[upbeat quarry]

then regenerate, do the MD5 to compare and rerun openvpn
make sure at all times you do not have multiple VPN instances running

[surreal spire]

i tried sudo kill openvpn, but that didn't appear to work, wouldn't reconnect until reboot

[upbeat quarry]

sudo killall openvpn I think

[dreamy merlin]

hello, anyone knows the answer to this question please? Run the exploit. By default it will test with the "select version()" command, what result does this give you? I have this answer: 5.7.29-oubuntuo.18.04.1. It looks like this answer is incorrect.

[upbeat quarry]

also, when you stop a VPN instance, use Ctlr-C, and not Ctrl-Z because Ctrl-Z backgrounds the openvpn process, instead of killing/exiting it

[surreal spire]

i did that, also this time i restarted service

worked

on EU 3

[upbeat quarry]

meaning ping 10.10.10.10. works, right?

[surreal spire]

finally

$ ping 10.10.10.10
PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
64 bytes from 10.10.10.10: icmp_seq=1 ttl=63 time=100 ms
^C
--- 10.10.10.10 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 100.348/100.348/100.348/0.000 ms

┌──(kali㉿kali)-[~]
└─$ ping 10.201.62.95
PING 10.201.62.95 (10.201.62.95) 56(84) bytes of data.
64 bytes from 10.201.62.95: icmp_seq=1 ttl=61 time=175 ms
64 bytes from 10.201.62.95: icmp_seq=2 ttl=61 time=162 ms
^C
--- 10.201.62.95 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 161.681/168.421/175.162/6.740 ms

i meant restarting worked without reboot

but also, works in general now 😛

https://twitch.tv/VTSTech_

[upbeat quarry]

so, is there some clarity as to why today and not yesterday?

[upbeat quarry]

you still facing VPN issues right now?

[safe pike]

No vpn connects can access 10.10.10.10

But weired things happen when I try to access or scan anything

[upbeat quarry]

we can check a few things together
is there a particular target you want to reach? if it is a Windows machine, you can assume it will not respond to pings

[safe pike]

Okay I will explain a little more

I am trying to do a room named island orchestration

There should be a website I should be able to access at the ip but does not open

I can ping it. But does not open in any browser. The ports and services that are supposed to be open are closed it says only one port is open tcp 22 and nothing else

[upbeat quarry]

I have started an instance for that room, and indeed I only see port 22 open at the moment, but maybe I have to wait a bit more as the room introduction wants to wait for 4 to 5 minutes

[safe pike]

Ohh so umm I just had to wait?

[upbeat quarry]

but I have already waited for 5+ minutes

[safe pike]

Yeah I was also about to say that

Weird things happening. I also did not get the 3 day streak while I am at day 12, although I don't care much.

[upbeat quarry]

check this #site-support message

[upbeat quarry]

here is the explanation, although the messages go back to eary July: #web-application-pentesting-path message
hence, looks like this particular room is broken

[safe pike]

Ohh lord I spent all day with that

Thank you anyways

[upbeat quarry]

this is certainly one area where THM can improve a lot, i. e. with some kind of dashboard identifying areas of functionality not working, like rooms, VPN servers, web pages with status, etc.

[lapis dragon]

can't connect to the AD network

[upbeat quarry]

which network is that?

[lapis dragon]

JR-AD-Pentester-v01

IN

[upbeat quarry]

best if you could share a room link

[lapis dragon]

https://tryhackme.com/room/adbasicenumeration

it doesn't connect to the attack box either

[upbeat quarry]

did you start the AttackBox after the network was up and running?

[lapis dragon]

yes

[upbeat quarry]

my network instance is up and running, now waiting for my AttackBox
I have played very little with that room, but I got the VPN to work
they have introduced a recent command to troubleshoot VPN: tryconnectme, or something similar

[lapis dragon]

yes this will work if the vpn was connected but the VPN itself isn't connecting soo no point of this maybe

[upbeat quarry]

I have the same issues it seems:

• no interface for that network
• when I run openvpn on Jr-Pentester-AD-v01.ovpn found under /root/Desktop/NetworkConfigs, the openvpn command does not complete
  so, the traditional solution is to go to your access page, regenerate the VPN file for this particular network, download it (use copy/paste) to your THM AttackBox and run openvpn with it

[lapis dragon]

finger crossed if this works thanks !

[upbeat quarry]

just done that for myself, and it works

[ivory spruce]

@ember osprey

[lapis dragon]

didn't worked for me

worked workedd yayy!

[upbeat quarry]

why it worked when before it did not work?

[lapis dragon]

dumb me ! machine was stopped and i was regenerating vpn config while it was stopped xD

[upbeat quarry]

thanks for that update, have fun

[scenic torrent]

Gave +1 Rep to @lapis dragon (current: #3067 - 1)

[brisk mauve]

Hey everyone,

The TryHackMe VPN initializes just fine and I receive an IP address when I connect. I’ve confirmed my connection using curl http://10.10.10.10/whoami, which returns the expected IP, so the VPN is definitely working.

However, I can’t reach any of the target machines or servers on the TryHackMe network. I’ve tried multiple target IPs and different servers, but the same problem persists.

Also, my connection doesn’t show up on the TryHackMe Access page, even though I am connected.

For comparison, my Hack The Box VPN works perfectly fine on the same system, so I’m pretty sure this is a TryHackMe-specific issue.

Has anyone run into this or have any suggestions on how to fix it?

Thanks!

[upbeat quarry]

usually, when you can contact 10.10.10.10for pinging/browsing/nmapping, your VPN is good
which VPN server are you using?
which target VM can you not reach
also: the access page does not work for the connection status

[tacit bay]

Hi, I can't connect to the VPN anymore, I think this started after I changed my name. I tried regenerating the vpn file and used the trouble shooting script which told me to come here

[upbeat quarry]

can you screenshot your VPN startup sequence?
for that you will have to verify with Discord, using the link coming below

[west chasm]

@tacit bay

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 3, 2025, 8:16 PM

[upbeat quarry]

thanks
you should switch to a different VPN server, which one are you currently using?
FYI: I am currently connected using EU-Reg-3

[scenic torrent]

Gave +1 Rep to @tacit bay (current: #3067 - 1)

[upbeat quarry]

sorry, I am using EU-Reg-4 at the moment

[tacit bay]

@upbeat quarry Im using us west-reg-1 ill try switching

@upbeat quarry I switched to Us-east-reg-1 and it looks like its working now thanks, but on the site it says not connected

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 626)

[brisk mauve]

I use the USA east vpn server. And I connect no problem and get an ip addresss. But any room I try I can no longer contact the target machines no matter the room. It worked perfectly before. I can get screenshots when I get home

[upbeat quarry]

the access page is broken, do not look at the connection status as it is not reliable

[tacit bay]

@upbeat quarry ok, actually I still can't reach the machine, I started the machine when i first asked about the vpn so it should be up, it's the roundcubecve202549113 room if that makes a difference

[upbeat quarry]

I'll check that room, but be aware that not all target VMs respond to pings
better try nmap: nmap -Pn <IP>

[upbeat quarry]

and your VPN is still running, right?
can you screenshot ping 10.10.10.10

[tacit bay]

@upbeat quarry yes, I tried another random room and couldn't connect either

[upbeat quarry]

I started an instance for that room, and it worked for me using THM VPN EU-Reg-4

[upbeat quarry]

can you try for the moment with EU-Reg-4?

[upbeat quarry]

make sure you have only ONE THM VPN instance running at any time:

• use sudo killall openvpn to kill all VPN instances
• you can verify all your openvpn processes with ps aux | grep openvpn: that should return empty after you used sudo killall openvpn
• do not have THM AttackBox runing simultaneously to THM VPN
• avoid terminating VPN sessions with Ctrl-Z, as that puts the openvpn process in background; use Ctrl-C instead as that kills the process

[tacit bay]

@upbeat quarry ok it works on eu-reg-4

[upbeat quarry]

so cool

[upbeat quarry]

BTW, before moving to a different VPN server, when your first attempt fails, you can try to regenerate the VPN file using the regenerate button Just wait 2-3 minutes before you download the new file after regenerating Then check the new VPN file is different You can do that for instance by running md5sum on both older and new files:

• if the MD5 hash are the same, no point trying
• if the MD5 hashes are different, then it is worth trying a new VPN connection with the newer VPN file
  you can make several attempts at regenerating
  if regeneration fails, cycle through different VPN servers
  in my experience, if ping 10.10.10.10 works with a VPN connection, you are good
  you may run into a MTU issue however beyond that ping verification (check this message to correct the MTU issue: #site-support message) BTW, earlier, the openvpn troubleshooting script that you ran flagged that MTU issue then

[trail stirrup]

Is Internal Virtual IP address supposed to be blank (on https://tryhackme.com/access)

Also, is there no US East VIP VPN? 🙁

[merry mauve]

the web VM is not opening properly, instead of showing the console / screen, it shows a page that says APACHE TRYHACKME REMOTE, and has a Login button, clicking the button spawns an alert (within the iframe) that says "Invalid Login", i've tried terminating and restarting but that always happens

[ember osprey]

Yeah that page is broken. Us east is temporary down try using the us west server instead

[ember osprey]

Use us west , east seems to be down for some reason

[ember osprey]

That room is broken . It has been reported to staff , should be fixed soon

[merry mauve]

getting a different error now
The requested connection does not exist. Please check the connection name and try again.

[fluid vapor]

How do I make the machines open in US-West so I can access them?

Cause my VM is now on US-West, but the target machines still open on US-East

[merry mauve]

apparently when my browser tries to access https://688f...-qukn.guacaworker.tryhackme.com/us-east-1/api/tokens it returns {message:"Permission denied.",type:"INVALID_CREDENTIALS",....} But i'm logged in
that last subdomain is the same as logged-in-hint; may it be because of the us east server being down?

[rough tide]

why dont my openvpn dont connect anymore

[fluid vapor]

are you US-East? if so, read above

[rough tide]

EU

i uninstalled openvpn,

in hope to reinstall

[fluid vapor]

huh

oh it may be that new law

[rough tide]

and now when i sudo apt install openvpn it gives me

Err:1 http://http.kali.org/kali kali-rolling/main amd64 openvpn amd64 2.6.13-1
404 Not Found [IP: x 80]
Error: Failed to fetch http://http.kali.org/kali/pool/main/o/openvpn/openvpn_2.6.13-1_amd64.deb 404 Not Found [IP: xxx 80]
Error: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

openvpn_2.6.13-1_amd64.deb

file is missing

when i open ther kali link it says

[fluid vapor]

huh... no idea personally sorry, I'll leave that to someone who knows better

[rough tide]

i think the openvpn_2.6.13-1_amd64.deb file just got

idk

[fluid vapor]

they're on .14 now

[fluid vapor]

http://http.kali.org/kali/pool/main/o/openvpn/

idk how to then install it from there

but you can find the .14 files there

[rough tide]

omg tysm

ill try sum

[fluid vapor]

no problem!

[rough tide]

bruhhhhµ

[brisk mauve]

Update:

It really looks like the VPN connection itself is working fine — I can confirm with the curl command and I get an assigned IP. However, when I scan the target IPs for any room, all the ports appear to be in an ignored state. This happens no matter which room I try.

I know for a fact that the Dreaming room’s target responded to pings before because I completed about half of it previously. So I’m certain the targets should be active and reachable.

Why is it that every room’s target isn’t booting up or responding properly? Is this a known issue right now?

I’ve attached screenshots showing the port scan results and my VPN connection details.

Thanks again for any help!
The west server still had the same issue for me.

I’m trying to add pics but it won’t let me

[molten plume]

I'm having trouble joining the Wreath room. Even when I click the green 'Join' button, I can't enter the room. Can anyone help me??

[primal kraken]

any way to force targetmachines to US-west while the Us-east server is down?

[ember osprey]

If you're not a premium user you need to have at least a 7-day streak to access wreath network

[ember osprey]

Change VPN-server to US-WEST

and download a new file for it

[primal kraken]

Ya my bad, for some reason I thought the target machine location mattered, thanks for the quick response

[fluid vapor]

I did this, but I'm still getting US-East target machines that I can't access?

Nvm they randomly started working...

[stray nimbus]

Guys i am stucked on Blue task 5

I cannot migrate process trying from yesterday

[graceful crow]

Mon Aug 4 14:21:25 2025 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 4 14:21:25 2025 TLS Error: TLS handshake failed anyone knowhow to fix this issue i unable to connect to thm VPN

[upbeat quarry]

I usually try to migrate to powershell.exe

[upbeat quarry]

what is your VPN server?
please provide screenshot of full output for openvpn startup
for screenshots, first verify with Discord using the link coming below

[west chasm]

@graceful crow

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 4, 2025, 6:38 AM

[upbeat quarry]

you need to verify with Discord before you can upload screenshots
please do so using the link coming below

[west chasm]

@brisk mauve

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 4, 2025, 6:39 AM

[upbeat quarry]

do this as sudo, as you need root privileges for installation

[upbeat quarry]

please provide context for what you are trying to do

[marsh turret]

And please guide how can i send the screenshot here

[graceful crow]

here is the output

[marsh turret]

can i reach out to this account

[west chasm]

@marsh turret

How to Verify as a Student Without a Student Email

Article Link

https://help.tryhackme.com/en/articles/10617468-how-to-verify-as-a-student-without-a-student-email

Aug 4, 2025, 6:50 AM

[upbeat quarry]

check ^

[upbeat quarry]

thank you for your feedback, but which VPN server is that?
BTW, best not to upload screenshots including the certificate part of your VPN file (that will not matter for now, as you will have to get another one anyway for your VPN connection to work)

[scenic torrent]

Gave +1 Rep to @graceful crow (current: #3067 - 1)

[graceful crow]

Iam using OpenVPN 2.6.14, is that u mean the VPN server ?

[upbeat quarry]

no I mean which THM VPN server, from where you downloaded your VPN file, as some of them have trouble

[marsh turret]

i did verify now what

how can i attach the screenshot

[marsh turret]

hey

[upbeat quarry]

use the + button, as per first screenshot
also, best to ask your room-specific questions under #room-help
also, you may want to search Discord, as per second screenshot, as lots of users have enquired before

[graceful crow]

iam using the Jr-Pentester-AD-v01-BH....

[upbeat quarry]

ok, that explains
this room, right: https://tryhackme.com/room/adbasicenumeration ?

[graceful crow]

https://tryhackme.com/room/adauthenticatedenumeration -> Should be this

[graceful crow]

This working fine... i tried just now

[graceful crow]

but this unable to connect.. due to using the diffrent set of vpn file

[upbeat quarry]

make sure you run only one THM VPN instance at any time (and that includes not runing THM AttackBox if you are using your local VM throught THM VPN)
so if you are doing https://tryhackme.com/room/adauthenticatedenumeration, use the Jr-Pentester-AD-v01-BH profile from the acess page under Networks
and make sure, that the other profile called Jr-Pentester-AD-v01that you would have used for https://tryhackme.com/room/adbasicenumeration is no longer in use
one quick way to start from a clean sheet is to kill all your VPN instances with sudo killall openvpn
also, do not use Ctrl-Z after running our openvpn command as that would background it (and I am not suresudo killall openvpn would kill a background process for openvpn

[upbeat quarry]

if you are sure you have the right profile running for that network room (and no other one), follow the instructions under Troubleshooting Connectivity Issues from task 1
I had to follow similar procedure yesterday for https://tryhackme.com/room/adbasicenumeration, and it worked well for me then
forget above, as these troubleshooting steps appear to apply to THM Attackbox only

@graceful crow not sure if you are left with any pending VPN issue now 🙃

[graceful crow]

thx i was able to connected it by restart the VM and kill all the running instance of openvpn and regenearte the openvpn file

[prisma echo]

Can someone from Tryhackme team tell me,
I got a free voucher for PT1 during that giveaway and I am planning to take the exam this Saturday
If i fail will I get a free retry attempt or I will have to purchase it?

[loud crystal]

can i update my mail id?

[dull crystal]

Hi, when I see that I have to enter the Machine IP, I have to enter the IP of the Tryhackme VM. When I enter it, they tell me that the password is wrong. I'm a bit lost.

[upbeat quarry]

maybe this helps: https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine
otherwise, please provide more context, like which THM room you are doing

[dull crystal]

Pre Security
Linux Fundamentals
Linux Fundamentals Part 3
i am a room

AttackBox

[upbeat quarry]

have you started the target VM, as per the guide I indicated earlier and the screenshot below?

[dull crystal]

yes

[dull crystal]

i take which IP on machine_IP

[upbeat quarry]

this means you nknow have an IP and creds to ssh into, as per screenshot

[upbeat quarry]

you use the IP of the task VM which is the target VM
you run your ssh command on your attacking machine, which typically is THM AttackBox, that you start in parallel by pressing Start AttackBox button as per screenshot
THM AttackBox needs about 2 minutes to load and appears in split-view on the right

[dull crystal]

ok understood, thx very munch

i do refresh

[upbeat quarry]

I think it is useful to spend some time on (too) easy rooms so you get familiar with THM environment and do not get confused when doing more advanced contents

[dull crystal]

ok i will stop speedrun XD, i will take my time

[strange kelp]

Okay so the last few days I've had issues connecting via openvpn from my terminal to the tryhackme VM;
I've restarted and re-enabled ssh
I've turned off VPN
I've tried EU-VIP1 and EU-VIP2 (regenerating and re-downloading the .opvn file when I switched for the first time)
I've made sure to start the machine everytime generating a machine_ip
I've terminated and re-started machines several times

Whatever I do I always get connect to host xx.xx.xxx.xx port 22 Connection refused

Pretty sure I've done everything right

Didnt have any issues last week

[obtuse crag]

I am trying to login evey time i logging it kicks me out and i have to login again even then i cant see questions

I am not from Australia i have seen some changes in the website after trying and trying for 30 min i could complete one question which was remaining yesterday last conclusion one and the room completion celebration has changed it showed me some thing like week streak one and thats is it i was logged out again ! Could someone help me out ?

No questions are shown i dont know what to do any help

[upbeat quarry]

please provide screenshot of your openvpn output
for that you will have to verify with Discord using the link coming below

[west chasm]

@strange kelp

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 4, 2025, 12:57 PM

[upbeat quarry]

consider disabling (all) your browser extensions maybe
try to start from a "naked" browser

[upbeat quarry]

thanks, looks good
please provide screenshot of ping 10.10.10.10and browser connected to http://10.10.10.10/whoami

[scenic torrent]

Gave +1 Rep to @strange kelp (current: #3067 - 1)

[strange kelp]

Okay so when I used the credentials from the Attackbox it allowed me to connect

Now it works no issues

But it didnt work an hour ago

Anyhow thanks for the speedy reply @upbeat quarry I think im good for now

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #15 - 628)

[upbeat quarry]

that ssh session to a public IP does not require THM VPN, as it is a public IP
so I think the issue would have been about something else, in my opinion
anyway, happy THM

[strange kelp]

I see, well if I encounter any issues ill ask again

[buoyant fjord]

Would anyone know why this pops up when starting a new machine within a Room? I have no other option to start an AttackBox either.

When pressing login, it results in an error as well.

[upbeat quarry]

pleaes provide the link to that room

[buoyant fjord]

https://tryhackme.com/room/linuxfundamentalspart1

[obtuse crag]

I have tried 4 different browsers
Fire fox
Brave
Vivaldi
And garuda browser same issue in all

[upbeat quarry]

I do not experience that behaviour on my side I am using Mozilla Firefox inside Windows 10 What is your environment?
In any event, I would do refresh to see wheter that solves the issue of the popup

[buoyant fjord]

That interesting, I can try to sign out and see. But on other pages, it seems ok, just this one does not pop up. I've refreshed, but maybe ill try again later.

[upbeat quarry]

and about the button to start the AttackBox, I think there is no such button as the target VM appears on the right in split screen, and you can enter your commands directly
however, you can anyway start the AttackBox from any other room where the button is available, and it will appear also in your Linux Fumdamentals 1 environment, from where you will be able to ssh (the creds would be tryhackme:tryhackme) using the IP displayed under the red heading Target Machine Information

[upbeat quarry]

and no extensions, right?
BTW, why do you mention that you are not from Australia?

[normal mirage]

Hi all, I'm facing an issue with the [Summit] Room under Cyber Defence Framework. I run the Machine as instructed, wait until the IP is shown before clicking the link to the Lab, but I keep getting 504 Gateway Time-Out.

[upbeat quarry]

mabye do not click the link, but do copy/paste of the link text

[buoyant fjord]

@upbeat quarry interestingly enough, I don't have any option to start AttackBox besides on the tutorial right now. Not sure what's up with it right now.

[normal mirage]

Unfortunately, same result.

[upbeat quarry]

you can launch it from this room: https://tryhackme.com/room/kali
use the one from Task 1: it is the recommended one, with all the tools that you need (it is a Ubuntu-based machine)

[upbeat quarry]

can you access my instance: https://10-201-53-139.reverse-proxy-us-east-1.tryhackme.com ?

[normal mirage]

let me try, the machine is still loading

[upbeat quarry]

while waiting, please share the link to your instance, so I can try to access it from my side

[normal mirage]

I think I've accessed your instance.

[upbeat quarry]

well, you are the one to know, as there is no link in your screenshot
please provide the link for your instance so I can try from my side

[normal mirage]

Sorry, hold on, still new to this. Trying to figure out how to get the instance link similar to the one you sent.

[ember osprey]

It isn't up yet , it can take up to 20min for that machine to fully boot up 🙂

[upbeat quarry]

thanks for the heads-up but, I got my instance for Summit up and running in a matter of less than 5 minutes

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5755)

[ember osprey]

Probably a temporary problem on the side of thm / their csp . Try again in a few minutes 🙂

[buoyant fjord]

Ahh okay, I'll login later and try this lesson again. Thanks @ember osprey

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5756)

[obtuse crag]

There age restrictions scene going on there tbh i worte the same msg in general and they sent me here so i just copy paste the same message

[obtuse crag]

Btw it is fixed right now I don’t know how and why but it is

Thanks for the help

[upbeat quarry]

understood, new to me, the world is changing all the time 🙃

[upbeat quarry]

great, temporary problem somewhere I guess
happy THM

[obtuse crag]

Are you mod ?

[obtuse crag]

Hmm yes i completed todays room so that is it

[upbeat quarry]

no, KGB (active above) is
you can see mods by the blue shield icon next to their name

[obtuse crag]

Okay btw thanks again bye

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #14 - 629)

[normal mirage]

Still can't figure it out. The only one I can find is the IP which is 3.235.21.229

[upbeat quarry]

sorry, probably some misunderstanding
the link I gave you to access (and it worked you siad) was provided in the room material for my instance of Summit room, as per screenshot
now, you must have similar link for your own instance, that you could not reach, and I would like to make a test and try to reach myself, so we can compare

[normal mirage]

Ahh, okay, let me try again. The start machine for this room is saying its at capacity, will have to wait for a couple of minutes.

[upbeat quarry]

new to me: could you please screenshot that at capacity notification, as I am curious about this

[normal mirage]

Here you go.

[upbeat quarry]

thanks
I think a simple refresh will discard that message (I am not sure it means genuinely a capacity issue, but who knows?)

[scenic torrent]

Gave +1 Rep to @normal mirage (current: #3067 - 1)