site-support

[left nova]

smthing broke my streak i need any help from the support

[west chasm]

@left nova

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 10, 2025, 7:32 AM

[ember osprey]

You can ask staff to restore your streak send an email to the address above 🙂

[true island]

Hi guys.
Nowdays, I can't check network state properly.
IPs of last nodes can't be shown. (https://imgur.com/a/TTSiPxJ)
What should i do? (room: https://tryhackme.com/room/persistingad)

[delicate marsh]

THM{CHANGE_DEFAULT_CREDENTIALS} normaly have to be the answer

[upbeat quarry]

not a solution, but a workaround:

• I have the same issue, as per first screenshot
• click on Show Split View that appears after pressing Start AttackBox button, and you get a better view as per screenshot with all IPs visisble
  workaround not great if you are not a subscriber though as your usage of THM AttackBox is once per day for a maximum of one hour

[high merlin]

India, IN-1

[ember osprey]

Try to change it to US-WEST and download a new VPN file

[knotty storm]

is there some sort of bug going on the thm because I haven't completed the web application Pentesting path and when I am trying to enroll in it I am getting the message that path is completed share the certificate 🙂

[high merlin]

same error for US-WEST VIP and EU-VIP

[ember osprey]

Yeah it seems to be I've forwarded it to staff

[ember osprey]

Provide some shots of OpenVPN terminal please

[scarlet magnet]

yo, i am in this room rn https://tryhackme.com/room/windowseventlogs. there is an issue with logs, cant see early events that i need to answer questions

[knotty storm]

okay

[upbeat quarry]

is it the same issue as reported as a bug here?: https://discord.com/channels/521382216299839518/1414965790347890838
if possible, please consider adding some screenshots so there is a bit more documentation of the problem

[remote zenith]

Hello,
Sorry for disturbing but I have a PB on moniker link (CVE-2024-21413) i make the poc its ok but before i need to run responder but seems have a problem think its me but dont sure

cat: /etc/resolv.conf: No such file or directory
Traceback (most recent call last):
File "/usr/local/bin/responder", line 58, in <module>
settings.Config.populate(options)
File "/opt/Responder/settings.py", line 306, in populate
Message = "%s\nCurrent environment is:\nNetwork Config:\n%s\nDNS Settings:\n%s\nRouting info:\n%s\n\n"%(utils.HTTPCurrentDate(), NetworkCard.decode('latin-1'),DNS.decode('latin-1'),RoutingInfo.decode('latin-1'))
AttributeError: 'tuple' object has no attribute 'decode'

[upbeat quarry]

run systemctl start systemd-resolved, then responder will start OK

[remote zenith]

perfect thanks a lot !

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 790)

[near beacon]

Hi, just renewed my subscription and it's not allowing me to access networking essentials rooms?

[ember osprey]

Do you receive some error or ?

[near beacon]

It takes me to this

The premium page

With the list of subscriptions

[zealous nymph]

@near beacon Wait Some Time To Update TryHackMe About Your Subscription, It Updates Automatically

[near beacon]

Ok, do you know how long that takes at all?

[high merlin]

Pls check DM

[ember osprey]

Reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 10, 2025, 3:37 PM

[near beacon]

Ok thank you I will

[dire cedar]

Hi, I was invited by my education institute to create a TryHackMe account, which includes a few months of premium membership. I already have a personal TryHackMe account under my own email. Is there a way to link my student email to my main account to redeem the premium? If not, would it be possible to transfer my progress from the student account to my personal account later on?

[ember osprey]

Reach out to support on the email below , they'll figure something out probably 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 10, 2025, 5:39 PM

[severe zealot]

are the servers a little laggy today?

[upbeat quarry]

what is your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)

[severe zealot]

I tried switching and its still down for me.. its a bummer when im in a middle of solving a challenge and connection just drops

[upbeat quarry]

I find "Europe (Ireland)" more stable for me, and I have seen similar feedback from some other users
however, I have a feeling this is not a permanent situation
also, very subjective: I get THM AttackBox failing on me from time to time, difficult to say whether that happens less than on "US-East (Virginia)"

[severe zealot]

I ended up just restarting and starting all over from what I can remember.. its just difficult sometimes lol.. thanks for your help.. are you US based using Ireland server?

[upbeat quarry]

no, I am in Western-Europe, but while interacting with other users, I wanted to experiment and compare, so I have selected "US-East" several times, and I found that, again subjectively, I was worse off than with "Europe (Ireland)"
also, I found it was more often THM AttackBox dying on me, than a target VM

[naive dust]

Anyone know if you can add people on THM website ? Also can you gift subscriptions?

[ember osprey]

You should have an add friend option below skill matrix

[naive dust]

I see, thank you.

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5932)

[naive dust]

Do you know if you can gift subs?

[frigid moss]

you are able to buy subscription vouchers for others to use iirc

[austere horizon]

This feature will be removed soon and replaced fully with the following system that's already implemented.

[austere horizon]

Yes, through vouchers.

IIRC, they have been recently disabled. So I doubt it's still a thing.

[nimble grove]

every time I try to ssh into a box my vpn starts throwing this error

2025-09-10 18:32:02 Initialization Sequence Completed
2025-09-10 18:32:02 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 8
2025-09-10 18:32:02 Timers: ping 5, ping-restart 120
2025-09-10 18:32:02 Protocol options: explicit-exit-notify 3
2025-09-10 20:18:05 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:05 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:06 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:07 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:10 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:16 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:22 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:22 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:23 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-10 20:18:25 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

[viscid grotto]

Is the SYSMON Room machine down

[tall lodge]

How in rhe world do you copy text in to the attack box

[naive dust]

Hm okay

[upbeat quarry]

check GIF

[upbeat quarry]

not for me right now, as per screenshot
does it fail for you repeatedly?

[upbeat quarry]

can you ping 10.10.10.10?
initial troubleshooting would be to regenerate VPN file and/or cycle through different THM VPN servers

[tall lodge]

But if I want that text to print in the terminal?

[true island]

I'm sorry too late. Thank you so much. 🙂

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 792)

[upbeat quarry]

to paste text in a terminal window, do Ctrl-Shift+V
I guess you can paste also with right-clicking or through the menus of the terminal window, but you will have to check

[grand shadow]

I am unable to join "Breaching Directory" room. as if join button is not working

[upbeat quarry]

unless you are a subscriber, you need a 7-day streak as per screenshot

[grand shadow]

ah- okay. thanks.

[tall lodge]

Alr I tried the right clicking and it didn’t work but the other tip worked great thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 793)

[naive dust]

Where is hack2win winners announcement, or every one just got that they didn't won this time ? 🤣

[upbeat quarry]

check this: #1410191476201095178 message
also, in #1410191476201095178 , look for other messages by oddly.specific for additional details

[tepid fable]

The remote desktop server is currently unreachable. If the problem persists, please notify your system administrator, or check your system logs. Anyone else getting this

[gilded skiff]

the way one has to copy intermediate stuff into virtual machines on the page is really annoying guys

it requires a lot of extra clicks and steps

[upbeat quarry]

you can skip the clipboard box
check this: https://teamupdraft.com/documentation/updraftcentral/faqs/how-do-i-set-clipboard-permissions-for-different-browsers/
there are security aspects you should research though so you understand what you are doing

[gilded skiff]

thanks

where can I complain about a certain room?

(premium)

[sullen heath]

hey so I need help

[west chasm]

@gilded skiff

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 11, 2025, 2:38 PM

[upbeat quarry]

contact THM support which works by email (see address above)

[tepid fable]

Not only in the Redline room does it take 30 minutes for these programs to load, but then 5 minutes after the server crashes and becomes unreachable.

how to fix this?

[upbeat quarry]

maybe this message from Blackout (THM Staff) is the way : #site-support message

[tepid fable]

I'll try ^^

[tepid fable]

RDP into room and fixed issue

[violet vector]

Would the moderators please ban ninja072_4 . They contribute nothing to the discussion and are a spammer.

[loud gorge]

Guys, I’m having an issue with the website. When I run the Privilege Escalation: Kernel Exploits machine, I keep getting prompted with {paste}, and then I can’t type or do anything on TryHackMe unless I close the machine attached to the section. Does anyone have any thoughts?

[upbeat quarry]

is the paste prompt a popup window like this screenshot?

[loud gorge]

yes

[upbeat quarry]

here is a better screenshot: I wanted to reproduce the problem that I have had so many times, and the irony of course is that I could not right now 🙃, till that second screenshot
I just get that paste popup away by clicking anywhere else in the environment of THM Attackbox, I have never had to terminate anything so far
I have googled a bit some time ago about how to solve it, and it appears to be a bug with FireFox and Guacamole (found at this link: https://lists.apache.org/thread/hrqwd37c185h7k4603t247xyd98w8kf6)
personally, I use Firefox, and I just live with it
are you using Firefox too? if so, maybe switch to another browser

[loud gorge]

so its a firefox thing thanks for the help

but i don't think i could live with it because in my case even if i click anywhere it disappear for a second and if i hover anywhere on the website or the machine i get the prompt back

thank you for the advise i will try another browser

[silver tendon]

nice finding. +rep

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 796)

[naive coyote]

hello please i have a problem on my connection vpn ,this is the problem :
[sudo] Mot de passe de cheikina :
2025-09-11 18:29:55 Note: --data-ciphers-fallback with cipher 'BF-CBC' disables data channel offload.
2025-09-11 18:29:55 OpenVPN 2.6.14 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-09-11 18:29:55 library versions: OpenSSL 3.5.2 5 Aug 2025, LZO 2.10
2025-09-11 18:29:55 DCO version: N/A
2025-09-11 18:29:55 OpenSSL: error:05800074:x509 certificate routines::key values mismatch:
2025-09-11 18:29:55 Cannot load private key file [[INLINE]]
2025-09-11 18:29:55 Error: private key password verification failed
2025-09-11 18:29:55 Exiting due to fatal error

[severe zealot]

once again - my vm is frozen.

There has got to be a better solution to these situations.. especially if im spending a lot of time on a challenge

[upbeat quarry]

gently ping Blackout (THM Staff) as per this: #site-support message
Blackout seems to be online right now

[severe zealot]

thanks, will keep @wind wedge on my reference list. I ended up just terminating and starting back up. There should be an option to take a snapshot or something idk. but there needs to be a better solutions especially for those medium to hard challenges where it takes a bit to even enumerate.

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #52 - 199)

[upbeat quarry]

I suggest you regenerate the VPN and try again
otherwise, cycle through different VPN server(s), hence using different VPN files

[dapper river]

whats up my subscription seems to be paused how to unapuse it

also i have noticed for the months that has been paused that payments were still taken anyone mind explaing how that works and what paused actually means?

[ivory spruce]

Suggest you drop an email to THM Support for the official responses. In theory, you shouldn't be charged if it is on-pause, but again, not sure how that works for monthly subscriptions.

[west chasm]

@dapper river

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 11, 2025, 9:27 PM

[dapper river]

Ty I will speak with them

[ember osprey]

Which server are you using ?

[nimble grove]

Will try though honestly I have done that before.

[nimble grove]

New VPN same issue
2025-09-11 19:24:49 Initialization Sequence Completed
2025-09-11 19:24:49 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 105, compression: 'lzo'
2025-09-11 19:24:49 Timers: ping 5, ping-restart 120
2025-09-11 19:24:49 Protocol options: explicit-exit-notify 3
2025-09-11 19:28:51 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:28:51 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:28:52 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:28:54 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:28:58 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:29:06 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

[nimble grove]

Ping works just fine

ping -vv 10.10.10.10
ping: sock4.fd: 3 (socktype: SOCK_DGRAM), sock6.fd: 4 (socktype: SOCK_DGRAM), hints.ai_family: AF_UNSPEC
ping: ai->ai_family: AF_INET, ai->ai_canonname: '10.10.10.10'
PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
64 bytes from 10.10.10.10: icmp_seq=1 ttl=61 time=295 ms
64 bytes from 10.10.10.10: icmp_seq=2 ttl=61 time=306 ms
64 bytes from 10.10.10.10: icmp_seq=3 ttl=61 time=313 ms
64 bytes from 10.10.10.10: icmp_seq=4 ttl=61 time=291 ms
64 bytes from 10.10.10.10: icmp_seq=5 ttl=61 time=312 ms
64 bytes from 10.10.10.10: icmp_seq=6 ttl=61 time=305 ms
64 bytes from 10.10.10.10: icmp_seq=7 ttl=61 time=310 ms
64 bytes from 10.10.10.10: icmp_seq=8 ttl=61 time=289 ms
64 bytes from 10.10.10.10: icmp_seq=9 ttl=61 time=308 ms
64 bytes from 10.10.10.10: icmp_seq=10 ttl=61 time=302 ms
64 bytes from 10.10.10.10: icmp_seq=11 ttl=61 time=301 ms

Third VPN same thing ping works to 10.10.10.10
That as soon as I try ssh it throws the error

2025-09-11 19:34:02 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 15, compression: 'lzo'
2025-09-11 19:34:02 Timers: ping 5, ping-restart 120
2025-09-11 19:34:02 Protocol options: explicit-exit-notify 3
2025-09-11 19:34:08 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:34:08 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:34:09 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:34:10 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:34:14 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:34:20 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

Differnet VPN same issue

2025-09-11 19:36:08 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 24, compression: 'lzo'
2025-09-11 19:36:08 Timers: ping 5, ping-restart 120
2025-09-11 19:36:08 Protocol options: explicit-exit-notify 3
2025-09-11 19:36:21 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:36:22 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:36:23 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)
2025-09-11 19:36:25 read UDPv4 [ENETUNREACH]: Network is unreachable (fd=3,code=101)

So far have tried in this order
US-West-VIP-1
EU-VIP-1
EU-VIP-2
US-West-Regular-1

[ivory spruce]

From the last few lines, it seems your VPN connection breaks..

Have you tried to reconnect using the same THM OpenVPN server or you switched to another as soon as it happens?

[nimble grove]

can expand on what you are requesting me to try?

[upbeat quarry]

• which country are you connecting from?
• what is your OS?
• are you using WSL?
• can you try using a different network before starting openvpn? for instance, some users set up a hotspot throught their smartphone just for troubleshooting, that way your traffic (partially) goes through a different infrastructure
• can you try using a different computer?
• have you ever been able to connect to THM VPN at all in the past?
• what is your environment: home, school/college/university, work, public?
• are there security applications/equipement set up somewhere that would disrupt your VPN (on your computer, on your router, on your LAN, etc.)
• are you using third-party services like Warp (Cloudflare)?
  the above are just ideas from interacting with other users, but maybe we need to think crazy and consider anything silly that you could activate or deactivate and just make it work

[cobalt depot]

anyone else over the last month or so getting rooms and machines just closing on them for no reason?

it keep happening whre im in the middle of the room and the machine will just close, getting really frustratiing

[upbeat quarry]

what is your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)

[cobalt depot]

europe ireland, which makes sense as im in the uk

its strange, for the first 8 months i had no problems, but in the last few more and more its happening daily

and it doesn't seem to be on my end

[noble rivet]

Is there a problem with soc simulator?

Can't access the Triage Alert page. Normal browsing and incognito browsing behavior are the same

[upbeat wraith]

I just want to point out one thing, in https://tryhackme.com/room/networkingconcepts room, In table in TCP/IP model looks little wrong. By looking at table it feels like TCP/IP model Application Layer is Application Layer from OSI model and Transport Layer is mix of Presentation Layer, Session Layer and Transport Layer all together. But it should be Application Layer is consist of Application Layer, Presentation Layer and Session Layer.

look in the images. Light and Dark background both. 2 different browsers also.

[tiny sable]

@west chasm
Hey pls do you guy have an active discount code ?

[ember osprey]

There's a student discount for annual plan

[misty sigil]

I am constantly losing connection to VM machines, is there something going on or it my end?

[tiny sable]

Thanks for your response, I know
But I'm asking for monthly plan , pls is there any now?

[upbeat quarry]

often people assigned to US-East with problems have a better experience when switching to Europe
hence, in your case, I am not sure you will be better off
nothing wrong with trying though

[upbeat quarry]

check your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)
and switch to the alternate choice
several users on US-East had a better experience after switching to Europe, no guarantee though

[misty sigil]

I am in the UK so I already use Ireland. It just seems way more unstable today, not sure. I'm doing a lot with Windows VM's and they just seem so dodgy

[upbeat quarry]

too bad, just like Theo-Magnus here #site-support message
maybe you want to take up the offer of Blackout (THM staff) here: #site-support message
Blackout seems to be online right now on Discord

[misty sigil]

Hmmm yah, I am mostly just seeing if anything it up but I have also had the machines fail me a lot more recently just like Theo-Magnus. Windows worse than the Linux machines. I'm still able to get the work done but it's slowing me down having to restart VM's all the time.

[neat glacier]

whenever i try to use target machine for tasks and try to access the target IP website it doesn’t open

is there a fix to it?

[upbeat quarry]

for which room is this? please realize that not all target VM have an open port for a web site

[neat glacier]

Splunk incident handling

Can i take a picture and send it in your dms?

[upbeat quarry]

no need for DM
if you want to share a picture, you can do it in this channel, but you first need to verify your THM account with Discord using the instructions coming below

[west chasm]

@neat glacier

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 12, 2025, 2:48 PM

[neat glacier]

okay

Oh i have my account verified

[upbeat quarry]

just saw that now, sorry 🙃

[neat glacier]

here

[upbeat quarry]

are you using THM AttackBox? otherwise you would first start THM VPN, right?

[neat glacier]

oh so that is the problem

i wasnt using the vpn

[neat glacier]

no wonder in past when i was on OpenVPN i could use these

let me try opening the site in attack box

I have issues with OpenVPN configuration

[karmic thunder]

@west chasm where can i request the eJPT role ? cheers 🙂

[weary spindle]

That's a bot.

[viscid grotto]

has anyone had issues with splunk machine

i connect to the server with no issues but after 10-15minutes the machine goes down and 502 error pops upd

[jovial axle]

Is the room search option completely gone now?

There's learn -> walkthroughs
Practice -> Challenges

[odd lodge]

Hey, I hosted a CTF and I am facing some problems. Can anyone help me fix it

[upbeat quarry]

the challenge rooms (and other stuff) are under Practice now, as per screenshot, while the walkthrough rooms (and other stuff) are under Learn

[silver tendon]

You can also use the magnifying glass located in top right of a page, near your avatar.

[upbeat quarry]

thanks, even better

[scenic torrent]

Gave +1 Rep to @silver tendon (current: #667 - 10)

[jovial axle]

never actually clicked that lol

[jovial axle]

Thanks

[scenic torrent]

Gave +1 Rep to @silver tendon (current: #610 - 11)

[upbeat quarry]

make sure you select the right VPN server
for instance, in my case, I am connected to EU-VIP-2 and the access page shows I am connected if I select EU-VIP-2 under Machines as per first screenshot
if I select another VPN server, say EU-Regular-1, the access page shows I am not connected, as per second screenshot

[ivory spruce]

So long as you can reach 10.10.10.10 using your browser, you should be good to go.

[radiant osprey]

While I appreciate getting a streak freeze for having a 30 day streak (I had one before, unused), I don't think I deserve 30 streak freezes for reaching that 30 day streak ;). Not that I'm complaining, but this looks like (hopefully) a bug in the site rendering logic; or a bug in the streak freeze system.

Hmm, unless that's from the hack2win event. Which also seems a lot of streek freezes for a single event/raffle (and I did not have a notification highlighting I won streak freezes)

[austere horizon]

Could you check your mails?

[radiant osprey]

Only one I have for the hack2win event is a $10 voucher (went through my spam and trash, in case it somehow snuck in there on accident)

[austere horizon]

I have forwarded this for check, thanks. 🙂

[radiant osprey]

Doing a quick search here on Discord for "streak freeze", seems like others are reporting getting 30 or 50 streak freezes as well. (all in the last few days/weeks)

[foggy granite]

is only me or is the search function for the rooms not available unless you use the address bar?? its the only option not in the dropdown menus, i am sure it has been like this for a few days too

[chrome kettle]

my vm machines on thm stuck every time. And i cannot connect through ssh from my local machines too. Access is denied. What to do now?

[foggy granite]

so your attack box freezes up and when you ssh in to box you cannot connect?

are you using VPN on VM??

[foggy granite]

did you get this fixed??

[nimble grove]

which country are you connecting from?
USA

what is your OS?
Kali

are you using WSL?
No

can you try using a different network before starting openvpn?
Yes

for instance, some users set up a hotspot throught their smartphone just for troubleshooting, that way your traffic (partially) goes through a different infrastructurecan you try using a different computer?
Yes

have you ever been able to connect to THM VPN at all in the past?
I connect just fine the issue is that when I try to SSH into a host the VPN disconects

what is your environment: home, school/college/university, work, public?
Home mostly

are there security applications/equipement set up somewhere that would disrupt your VPN (on your computer, on your router, on your LAN, etc.)are you using third-party services like Warp (Cloudflare)?
No

the above are just ideas from interacting with other users, but maybe we need to think crazy and consider anything silly that you could activate or deactivate and just make it work
**Lets go to the Crazy Ideas please. **

[upbeat quarry]

thank you for that feedback

after googling a bit, it looks like it is worth investigating the MTU issue: please run THM troubleshooting script after you have the VPN working (script is here: https://github.com/tryhackme/openvpn-troubleshooting) and provide screenshot

if that fails, let's move on the stubborn way:

• what is you host OS?
• what is your hypervisor SW?
• about Kali:
  • have you done some customization after installing it I am not talking things like destop wallpaper, more in the area of networking and security
  • on Kali, are you using a wireless interface to connect to the VPN?
  • what is your version of Kali?
  • could you do a test with a fresh install of Kali and see the result for your ssh attempts?

[scenic torrent]

Gave +1 Rep to @nimble grove (current: #3157 - 1)

[naive dust]

I've changed browser from Mozilla to edge just to see if it was my browser error, but it's still the same. 6 times now, this has showed up. In windows fundamentals 1. Just in the beginning.

[upbeat quarry]

can you provide more context, like which THM room is this for?

[naive dust]

Windows fundamentals 1. Just in the beginning.

[upbeat quarry]

thanks
what is your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)

[scenic torrent]

Gave +1 Rep to @autumn folio (current: #1567 - 3)

[naive dust]

One sec sir.

[naive dust]

Server region: Europe Ireland.

[upbeat quarry]

thanks
I was hoping you had the other setting (US-East) as usually switching to Europe (Ireland) helps
however, I also have Europe (Ireland), and I seem to experience a similar problem with Windows Fundamentals 1 as per screenshot (I am using Firefox)
so, actually, you could try to switch to US-East: if that works, you win (but like I said several users have had a worse experience compared to Europe (Ireland) )
beyond that, maybe try later and move to another room in the meantime?

[upbeat quarry]

workaround: RDP into the target VM from a Linux box (like THM Attackbox) using a RDP client like remmina
It has just worked for me

[naive dust]

I will try that immediately sir! Thank you for the help.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 803)

[naive dust]

Thank you again. @upbeat quarry Just to give you more rep.

[upbeat quarry]

no worries, Discord algorithm is taking care of that 🙃

[naive dust]

You deserve more, Sensei!

@upbeat quarry Did you receive this as well?

[upbeat quarry]

yes, just click cancel
also, come back here if you have trouble with resolution after maximizing remmina window

[naive dust]

Yes sir. Thank you, sensei.

[naive dust]

Thank you.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 804)

[upbeat quarry]

FYI: just restarted Windows Fundamentals 1, and it came clean (hence no need for remmina)
so, something intermittent bugging that room probably

[naive dust]

Ahh, ok. I will try to restart that as well.

[leaden torrent]

Guys, can someone tell me how I can buy a subscription to TryHackMe because it's throwing various errors. What is the solution? Anyone can guide

[viscid grotto]

did you enable international transaction for your card

[leaden torrent]

Yes but still I can't able to transfer

[viscid grotto]

raise a ticket with thm

I had a similar issue where the team had to enable from the server side

[leaden torrent]

Can you send me the link where to raise the issue

[viscid grotto]

look for this in the website

in the messages tab choose create a new ticket option

[leaden torrent]

Ohhk this I did they told my card is blocked by bank but before that I try multiple times it was showing limit exceeded

[viscid grotto]

did you contact the bank

I tried with multiple cards before getting the premium

[floral yacht]

Hi guys...
Please, someone can tell me how to find challenges on the new UI of the platform ???

Thanks in advance.

[inland surge]

its under practice

[floral yacht]

Thanks.
I found it.

[scenic torrent]

Gave +1 Rep to @inland surge (current: #337 - 23)

[nova saffron]

One specific page won’t load and I can’t finish my room. I think it’s because a VM is trying to load

[ember osprey]

Which page ?

[ember osprey]

Reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 13, 2025, 1:14 PM

[nova saffron]

Remnux: Getting started.

[ember osprey]

What's the exact issue ?

[nova saffron]

Everytime I try to load the page it freezes. All of the other web pages and rooms work perfectly. I think it’s trying to load a VM

Can’t complete the final two questions 😩

ChatGPT says the VM is embedded

[inland surge]

it loaded for me. the remnux machine and the attackbox

[nova saffron]

I think it’s to do with my actual account. I’ve tried on my phone and my computer

[limber dock]

I just finished the SOC level 1 path, it is showing completed with a green checkmark but I haven't received any confirmation that it is done or a certificate of completion. Is there something I'm missing?

[wind wedge]

When you enter the path on the right side you will be able to download the certificate

[limber dock]

found it, thanks!

[nova ridge]

Hi,

I'm encountering an issue when trying to validate the last flag of Task 5 in the "Error Handling" challenge in the OWASP Juice Shop room.

I followed the instructions and used a Poison Null Byte (%00) in the URL to bypass the 403 error and retrieve the correct flag, which is:

9c297196ecf8890bc1e900cf3aeba8c9f9880a

However, when I submit this response, I get the following error message:

"Uh-oh! The answer you provided may not be in English. Please review it and try again."

I copied and pasted the flag exactly as shown in the interface, so I'm unsure why it's not being validated.

Could you please let me know what might be causing the issue, or if there's a specific format I need to follow for the platform to recognize the answer?

Thank you in advance for your help!

[harsh shale]

The server always crash pls fix

The virtualbox victim machine always dying

[upbeat quarry]

try to switch Server Region from US-East to Europe, it has helped several users

[harsh shale]

i haven't try that thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 812)

[harsh shale]

i'll go change

THANKS ITS WORKING NOW

[cloud cove]

any particular reason "Access" got removed from the Profile Icon drop down? It was very convenient to have it there instead of now buried under 'Manage Account'

[chrome kettle]

No. I use vm kali linux

[ivory spruce]

I'm guessing this is to avoid confusion as it has yet to be fixed. I may be wrong though.

[ivory spruce]

Haven't done that room yet, but are you certain that it is the correct flag?

[upbeat quarry]

letting you know I am having the same miserable experience like you had with that paste popup window, as it won't get away when I click elsewhere like before
right now this affects "Windows Fundamentals 1", one of these rooms which open in Split View
the previous cases I had to deal with affected THM AttackBox, where clicking anywhere would make that paste popup disappear
so I think I am discovering that, in some circumstances, that issue is really painful, hence maybe my turn to switch from Firefox to Chrome or another browser 🙃

[wraith plover]

I am writing to inquire about issues that occurred when using attack machines.When I connect to the target machine's server via the attack machine using a web browser, I get an the follow error:'Unknown host'(Chromium),'We can't connect to the server at lookup.thm.'(Firefox)

Also, when I use nmap, I get the following error:'Nmap:mass_dns: warning: Unable to open /etc/resolv.conf. Try using --system-dns or specify valid servers with --dns-servers','Nmap:mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers'.

This occurred while I was studying in the "Lookup"Challenge room and "SQL Injection Lab" Walkthrough room.To be accessible from a attack machine's web browser,I want to Modify the '/etc/resolv.conf' file.But, it seems I can't edit it because I don't have the permissions.

I'd appreciate it if you could tell me what to do.

[upbeat quarry]

for that Lookup room, you have to edit your /etc/hosts file so there is a mapping between the IP of the target VM and lookup.thm
as to the warning messages for nmap, I just add the -n option to avoid DNS resolution

[wraith plover]

That was helpful. I'll give it a try. Thank you for your reply.

[viral inlet]

I would like to apply for that
Can you tell me the procedures

[finite flame]

I am trying to run responder on monikerlink room attacking machine but i get an error says cat : /etc/resolv.conf : no such file or directory

[ember osprey]

More info on the link below 🙂
https://help.tryhackme.com/en/articles/6494960-student-discount

[odd lodge]

Can someone help me understand why this error occurs?

Room link https://tryhackme.com/jr/cybervigilante1

I created this room and it’s private right now but one person wasn’t able to access it.

He created a new account to access it but still it failed.

Some other users are able to start the machine and do it without any issue.

[misty lodge]

i cant connect to open vpn ,please help
ive downloaded the file from the site and drag dropped it into openvpn
easy as that but not working

connection timeout

help?

nevermind it works

[solid comet]

btw I need always say ip route del default in my Kali VM because OpenVPN always force default route into VPN and in THM side there's no Internet provided, so THM website gets dead if not delete the default route manually

[odd lodge]

Hey, does anyone know any solution to my problem?

[foggy granite]

https://tryhackme.com/hacktivities/search this page is not in the ui but is the search for rooms not challenges, can somebody please fix this?? the page is still there just not linked in the drop-down menu since update

[wind wedge]

That's intentional but it's been raised about the functionality of it

Hi All,

From the 22-26 September, there will be limited support due to the THM retreat. We will not be as active with support during this week. We will still be responding but it might take a bit longer to get back to you.

Support will be back to normal hours from the 29th September

[foggy granite]

today is 14th September??

[wind wedge]

Yea I just realised. That's what I get for staying up trying to watch the fight this morning 😅

[foggy granite]

playing as hard as you work??

@wind wedge i just don't understand why this functionality would be taken away?? i use it alot, especially when i can not afford the months payment, helps me search all the room i can do and keep my 1140 day streak going

[wind wedge]

Yea, I think the team was testing something. Not sure why but I hope they revert it back too as I use it a lot too

[foggy granite]

also make sure you get some rest buddy 👍

are they not on your profile??

i am able to click my badges on my profile and then have the three option to share

have to tried your public profile??

[cedar crater]

What's up guys? This is for the room developers. One of https://tryhackme.com/room/fileandhashthreatintel room's question is not valid anymore.

[nimble grove]

└─$ sudo ./thm-troubleshoot


         _____           _   _            _    __  __
        |_   _| __ _   _| | | | __ _  ___| | _|  \/  | ___                                                          
          | || '__| | | | |_| |/ _` |/ __| |/ / |\/| |/ _ \                                                         
          | || |  | |_| |  _  | (_| | (__|   <| |  | |  __/                                                         
          |_||_|   \__, |_| |_|\__,_|\___|_|\_\_|  |_|\___|                                                         
                   |___/                                                                                            
                                                                                                                    
Looks like you're running Kali                                          @MuirlandOracle                             


[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

[nimble grove]

if that fails, let's move on the stubborn way:

    what is you host OS?
***pop!_os**

what is your hypervisor SW?about Kali:
***Virtual Box***

    have you done some customization after installing it I am not talking things like destop wallpaper, more in the area of networking and security
***No upgrades or changes pretty much fresh bare install***

on Kali, are you using a wireless interface to connect to the VPN?
***Ethernet Cable/Hard lined***

what is your version of Kali?
***NAME="Kali GNU/Linux"***
***VERSION_ID="2025.3"***
***VERSION="2025.3"***

could you do a test with a fresh install of Kali and see the result for your ssh attempts?

**Yes I could.***

[reef granite]

Hello i want to ask why i can not press the Join room of this room. Does it has any prequisite

[ivory spruce]

If I remember correctly, you'll need to be a subscriber or at least a streak of 7 days.

[upbeat quarry]

thanks for the feedback
seeing the MTU failing at 1000, here is a past message from Shadow

[scenic torrent]

Gave +1 Rep to @nimble grove (current: #2078 - 2)

[upbeat quarry]

well noted: your environment is Kali on VirtualBox on Pop!_OS
moving on further:

• about isolating the issue to the computer vs. the network, now that we have seen the result of THM troubleshooting script and considering the past message from Shadow, could you do a test and connect to THM VPN using a different computer but the same network?
• another test: could you try THM VPN directly from PopOS, instead of Kali? normally you would not do that, as that is exposing your host to all THM VPN users, but if you have no services running (i. e. no open ports), I think the risk is worth taking (change your Kali password from the default kali thought first)
• about trying another network, for instance using a Hotspot via your smartphone, and referring to your message here #site-support message, it is not clear to me whether you have performed that test already, and what the result is Could you please clarify?

[tame mantle]

I have to ask my question here because, once again, your support/ticketing system is deplorable.
I've never seen anything so poorly done. The category selection is really poor; not half of the categories are relevant, and some don't even offer to create a ticket. At the end, we find ourselves stuck in a chat with a robot.
Why not let us enter our question and then redirect us to the relevant category based on that?
We don't even have the option to enter text.

Concrete example this morning: I have no way to get my OpenVPN file "exploiting ad" which is always 0 bytes. The chat doesn't offer any relevant categories. I end up in the "report a bug" category with a form that's adapted for bug bounty.

So how can I solve this problem and have a working OpenVPN file? (I've already tried regenerating it several times)

[upbeat quarry]

regenerate the VPN file
if that fails, leave the room via the Options button, and join back after a few minutes You should land on a different network instance, with different IPs If you have the same network config, you did not wait long enough and should do the leave/join again
regenerate the VPN file after rejoining (maybe not nessary, but why not?)
you should be good

[exotic atlas]

Does cancelling my THM yearly sub immediately remove access?

or is it until the date I paid for

the page makes it seem like I immediately loose all access

[upbeat quarry]

check screenshot, which comes from this THM resource: https://help.tryhackme.com/en/articles/7262866-cancelling-your-subscription

[exotic atlas]

ty

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 819)

[tame mantle]

Thank you for your answer but i’ve already try that a des time without any result

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 820)

[upbeat quarry]

do you get an interface called exploitad after running openvpn? that should appear listed under ip a (or ifconfig)

[tame mantle]

You don't seem to understand the problem
I can't use this file cause it is empty every time i download it, I know how to use, configure and check my openvpn setting. The problem here is that the file that i get is not usable 'cause it is empty

[upbeat quarry]

so far, I have seen that 0-byte VPN file gets solved by leaving/joining multiple times, allowing enough time between so that you get different network instances/IP addresses
if that fails for you, I cannot think of something else but this: start THM Attackbox and check under /root/Desktop/NetworkConfigs if exploitingad.ovpn is better (same routine of leave/join with enough time if it is 0-byte)

[weary spindle]

There is a script to pull it.

You'll need to ask @zealous yoke for the steps, as I no longer have access to the channel to get the steps.

[upbeat quarry]

will do, thanks for jumping in

[scenic torrent]

Gave +1 Rep to @weary spindle (current: #2 - 3918)

[jovial veldt]

Yo!

[jade ferry]

Why is this network configuration not present on my page?

#site-support

https://tryhackme.com/room/adbadsuccessor

[amber verge]

Where can I find documentation on creating rooms? Also, are there any logs for my uploaded VMs that I can access? I only get a very generic "Oh no, an error occurred while starting VM: Try again later. " when trying to launch my latest VM, which should be almost identical to a VM that works perfectly on TryHackMe

[stable linden]

Yo, is there anyone from customer support in this room? I'm sick of this at this point. I've been trying to cancel my membership for years, and i've been charged $125 every damn year. Sending emails to support for them to always come back with automated garbage like "do you still need help"

What the hell.

[upbeat quarry]

check this THM resource: https://help.tryhackme.com/en/collections/3665114-tryhackme-for-users

[amber verge]

Thank you! I have seen that before, and there is very little documentation (basically nothing) there on how to actually create a VM and debug errors. Is there anywhere with more info?

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 827)

[upbeat quarry]

one of the links provides more details maybe: https://help.tryhackme.com/en/articles/8979423-building-a-successful-community-room-with-outc4s7
otherwise, I suggest you gently ping a mod, like KGB, and ask them to get the role to access to the Discord channel for room creators, hoping that it the place where people would share their experience and solutions

[wise anchor]

can anyone tell me why cant I see the wreath room on THM?
it was available a few days ago

[upbeat quarry]

#room-help message

[wise anchor]

thanks

[wind wedge]

When did you put in your ticket?

[stable linden]

I've contacted support at least once for the last 3 years. They reply with the same thing

[wind wedge]

dm your email

[amber verge]

Thanks! I must have missed that page before, but it doesn't answer all of my questions, but perhaps if @ember osprey (is that the one?) could add me to the room creators channel I could find more answers. Thank again!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 829)

Gave +1 Rep to @ember osprey (current: #1 - 5940)

[scenic torrent]

➕ Gave the role Creators-Lounge to andreaslonn

[ember osprey]

@amber verge Here you go 🙂

#creators-lounge

[amber verge]

Thank you!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5941)

[bleak flame]

Hi @bronze vale
I paid the normal price. Could you please ask for the text to be changed to avoid any confusion?

[wind wedge]

Discounts don’t stack. The article is still correct

[bleak flame]

How do you explain the 37.5% from subscription page?

[wind wedge]

The regular annual plan is already 25% cheaper than paying month by month. The student discount is then 20% off that annual price. When you combine these, the effective saving compared to paying monthly works out to about 37.5%. This is why the subscription page says “up to 37.5%” It’s showing the total saving students make against the standard monthly cost.

If you send your username I can double check to see if you are on the student discount

[desert stream]

@deep trellis since I can't reply to your direct message to me for whatever reason, I'll move the conversation here.

Why did it take you this long, after all that back and forth with multiple pings and replies, to hand over the support email address?

[desert stream]

Only leads me to believe you're not taking any of this seriously. You've reacted to me like someone who's bashed you in Discord for your decisions but all I have asked, time and time again, was for contact details.

[frosty patio]

I am having A very difficult time with this program. I am currently working with A VM but I am not able to get the search to type, I only had A dinging sound, as if there is an error. I try restarting and the VM isn't reloading all the way.. FRUSTRATING!!!

[fringe glacier]

Hii guys i have a question

is there a way to change emails in thm

I wanna move the acc to my personal acc cuz rn im using my students acc

[desert stream]

@deep trellis By the way, you sent something in lounge that I can't see. Not sure if you knew that roles are sometimes related to access to certain channels in Discord but they are and it's made it impossible to see what you said. Can you please repost it somewhere where it can be actually read by the person you tagged.

[spark sorrel]

See this guy he joined THM some 20 days ago and within these days he completed more than 350+ rooms, which isn't possible in any way!! He gained 3500+ points within a day by copy pasting the answers from write-ups. People like us who're giving their time daily for months will lost faith in THM's scoring system. These extensive activity users should be banned. Otherwise THM's will never gain reputation like HTB and Other platforms.

[urban agate]

I tried running the Smol challenge (and the other challenges) with OpenVPN, but it didn’t work. I already opened 10.10.10.10 and ran curl 10.10.10.10/whoami, and I got an IP address. Then, when I tried to open the target machine’s IP , it says server not found. I’ve made sure there’s no external VPN. I also ran sudo ip link set dev tun0 mtu 1200. I also switched between VPN servers (I chose AU, since it’s geographically closest to my country) and repeatedly regenerated and tried again, but it still didn’t work. None of the methods I tried worked, so I’m asking for help.

[supple shuttle]

tryhackme launch his ai name echo

but i don't know from where we can see that

cause when i click try it already goes to that room which i have already done

so ?

[obtuse wren]

In the same boat as you rn. It connects to 10.10.10.10 fine and curl 10.10.10.10/whoami works and displays my IP address correctly but for some reason it says I'm not connected on the access page.

[spark sorrel]

Give a try to attackbox!! They always work. This happens with me alot of times so in those cases i use attackbox. Don't change vpn frequently.

[spark sorrel]

It's an enhanced version of previous echo AI. It is only available on rooms which need extra help and are hard to understand for beginners.

Not every room provides echo because some rooms are easy to understand

[urban agate]

won't it be laggy if using an attackbox? i use linux mint btw, i dont encounter any trouble when i accessed via windows tho

[spark sorrel]

Yeah, attackboxes are laggy most of the time, but it's manageable. Only use for those rooms which shows problems like it's happening with you currently. Some rooms specifically demand attackbox because attackboxes are pre-configured so you as a beginner don't have to configure.

[urban agate]

yeah but i guess imma wait for the other answer also, i feel like ill prioritize being on linux mint cause it is smoother, and faster😔😌😌

[spark sorrel]

as you wish

[upbeat quarry]

about the correct status on the access page, check this: #site-support message

[obtuse wren]

I cycled through all of them and it still says I'm not connected... I'm unable to connect to any machines as well.

[upbeat quarry]

what is the output of your openvpn command?
do you get Initialization Sequence Completed towards the end?

[obtuse wren]

Yep

[upbeat quarry]

which country are you connecting from?

[upbeat quarry]

can you provide screenshot of your openvpn output?
for that you have to verify your THM account with Discord, using the instructions in the link coming below

[west chasm]

@obtuse wren

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 16, 2025, 8:19 AM

[upbeat quarry]

checking I understand this correctly:

• using Windows, you can run openvpn using THM VPN file and access the smol challenge (I guess you can do nmap against the IP of the target VM)
• using mint, you can run openvpn using THM VPN file, but then you cannot access access/nmap the smol challenge?

[urban agate]

using mint, not only smol challenge btw but the other challenges aswell

[upbeat quarry]

can you screenshot running THM troubleshooting script from here: https://github.com/tryhackme/openvpn-troubleshooting

[upbeat quarry]

you run the troubleshooting script while THM VPN is running, right?

[urban agate]

yes

[upbeat quarry]

yes, saw that, sorry 🙃

[upbeat quarry]

i have an instance of smol running at 10.10.237.54
what happens if you nmap that IP through THM VPN then?

[upbeat quarry]

for comparison, this is what I get from Kali VM connected to THM VPN (EU-VIP-2)

[stray mason]

how can i send media

[fierce river]

anyway to hide echo fully?

[wind wedge]

Not yet, but will be soon

[supple shuttle]

ok

[fierce river]

Reported small text 9 months ago and was told

"We appreciate your report and want to let you know that we are aware of this bug and are actively working on resolving it."

anyone know if they are any closer to fixing?

[west chasm]

@stray mason

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 16, 2025, 12:07 PM

[upbeat quarry]

follow instructions from link above this message

[weary spindle]

Maybe, maybe not.

[violet vector]

If a hint in a room is wrong should I ask about it here or in Support> room-help ?
Which is better Support> room-help or subs-room-help ?

[weary spindle]

room bugs if you think it'swrong3

[violet vector]

Well, I'd like to confirm with someone else that it's wrong before I say it's a bug. As capable as I am, building computers for fun, running websites, many things I'm studying here are things I'm studying for the first time. So which of the places I listed would be the best to discuss it?

[weary spindle]

Here.

[violet vector]

I believe I have discovered an incorrect hint in https://tryhackme.com/room/hashingbasics
Task 2, Question 2.
The question is "What is the output size in bytes of the MD5 hash function?"
The answer is: 16
Both of those are correct, the hint
"Count the number of hexadecimal digits and divide by two."
is incorrect. A md5 hash is typically returned as 32 alphanumeric characters representing 16 hexadecimal values. The hint tells me to take 16 hexadecimal values and divide by 2 giving me 8. This would mean the answer to the question "What is the output size in bytes of the MD5 hash function?" would be 8 but it is not, it is 16.
I believe this to be a bug in the hint for this room. May I report it at https://discord.com/channels/521382216299839518/1333993673381253162 ?

[weary spindle]

Md5 hash is 128 bits.

which is 16 bytes.

When displayed as a hex string, it's 32 hex, each byte is shown by 2.

[vast estuary]

32 hex /2 = 16 bytes

[violet vector]

Each hex is a pair of alphanumeric characters representing the numbers 0-15, so therefore it would be 16 hex.

[weary spindle]

Is it though?

5d41402abc4b2a76b9719d911017c592

5d 41 40 2a bc 4b 2a 76 b9 71 9d 91 10 17 c5 92

5d = 01011101 = 93

[weary spindle]

It's not alphanumeric, it's hexidecimal.

[violet vector]

This statement is incorrect. Each character in a hexadecimal string is a hexidecimal value.

[violet vector]

I was incorrect here, "A string of 32 hexadecimal values represents 16 bytes.
Each hexadecimal digit represents 4 bits, and 2 hexadecimal digits together represent 8 bits, which is equal to 1 byte. Therefore, a 32-character hexadecimal string contains 16"
My apologies for wasting everyone's time.

Thank you @vast estuary , @weary spindle .

[scenic torrent]

Gave +1 Rep to @vast estuary (current: #776 - 8)

Gave +1 Rep to @weary spindle (current: #2 - 3919)

[weary spindle]

You didn't waste time, you thought the room material was wrong, and you learnt something.

[urban agate]

its all good tho..

but could you visit smol.thm? is it some kind of bug from the site or im lacking on sum knowledge

[weary spindle]

Did you add it to the hosts?

[upbeat quarry]

to access smol.thm you need to update /etc/hosts on your attacking machine:
echo 10.201.103.103 >> /etc/hosts

[upbeat quarry]

is that nmap targetting the IP for Smol? I just have 2 ports: 22 and 80

[weary spindle]

10.201 looks like a network IP.

[upbeat quarry]

10.201.X.X is the newer format for VMs hosted on US-East (Virginia) while VMs on Europe (Ireland) have 10.10.X.X

[weary spindle]

Seems I have some catching up to do, haha

[weary spindle]

-sVC -p 80

[urban agate]

ah yes, i already add it and it works, what if THM doesn't provide a domain name and only gives the IP? What should be added to /etc/hosts/ besides the IP address?

[upbeat quarry]

not much actually, just this first screenshot
your choice gets reflected for each VM and AttackBox that you deploy, as per other 2 screenshots

[weary spindle]

If they don't provide, it's either

a) not in use
b) you need to find it yourself.

[urban agate]

hmmm okay, because, im tryna nmap the ip using T4 and it takes forever. so im wondering is it because i cannot reach the ip or the nmap really takes that long

[upbeat quarry]

going back to your earlier message here (#site-support message), what was the issue, as it seemed to affect other machines than Smol?
also, what VPN Server are you using right now?

[urban agate]

seemed like the site or ovpn be down or smth, for rn it is all working, not like it used to. i really appreciate the help

[stray mason]

thank u sm

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 837)

[heady sphinx]

hey is something up with the vpn today i can hardly finish any ctfs gobuster keeps timing out and sites are struggling to loads:(

[upbeat quarry]

what is your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)

[heady sphinx]

Europe

[upbeat quarry]

for some users Europe worked better than US-East
so, I do not know how to improve you experience
maybe cycle through different VPN servers (check the latency with ping each time you switch to another one)
what is your current VPN server BTW? and are you a subscriber?

[heady sphinx]

yeah im a subscriber and im using europe 1 atm tried europe 4 but it was worse :/ ill keep trying

[upbeat quarry]

I used EU-VIP-2 earlier today, but not for heavy traffic (like lengthy enumeration), and it was OK

[heady sphinx]

yeah ive just moved to 2 actually now that you say it and my gobuster went through aha

no large lists today

thanks for the assist

[quaint quiver]

Am I sending this in the right room?

Room: networking core protocols
Task 7: POP3: Receiving Email
Question 1 - correct answer is coming back as "unauthorized"....
Not sure what to do here?

[upbeat quarry]

if you entered the command with copy/paste, try manually?

[quaint quiver]

Unfortunately I did enter manually (on a laptop, so always afraid copy/paste will catch unnecessary extras)

[upbeat quarry]

reload?
try copy/paste then 🙃
and what is the correct answer? Please avoid spoiling, hence provide it inside double pipes like this || secret ||

[quaint quiver]

OK
The correct answer is ||Dovecot||, I think

[upbeat quarry]

that is what I had accepted as the correct answer indeed

[quaint quiver]

lol.... apparently the site logged me out but was still letting me interact..... -.- sorry for the interruption

and thank you!!!

[forest ferry]

Hey Everyone I am currently in "Incidnt hanlding with splunk" room with the vm spun up. I can connect to splunk though when I try to search anything nothing comes up.

[upbeat quarry]

just tried, and I get the same results as per the GIF in the room material

[drowsy spade]

How did you send image sir?

I am not able to

I wanna know something about tryhackme website. But don't in which one channel should I ask

[neat kernel]

Hello, I have problem with Tempest room. Wherever I click mouse left or right button, frame with "Paste" pops up and I cannot do anything. Have no problem like this in any other room, resetting my PC did not help.
Strange issue
Edit:
It only happens with started machine. Without everything is allright. Ill check other rooms with machines like this.

[upbeat quarry]

what is your browser?

[neat kernel]

Firefox

I never had any problem like this

[upbeat quarry]

check these:

• #room-help message
• workaround: #1415947189368393812 message

[neat kernel]

Thank you for your helpo

😄

[spark thorn]

sapphire league lag

i normaly got 380 points or more

i do this for my first room

and then this today for my second room

[upbeat quarry]

cycle through different VPN servers
I used EU-VIP-2 earlier today, and this user here seemed to experience a better connection after switching too: #site-support message

[tepid fable]

If I won % off an exam during the raffle, how do I claim it?

[naive dust]

hi all
is it no longer available to subscribe monthly to the site? i couldnt find anywhere a link for my life

[rain osprey]

Hi, i would like to report the premium room Expose for not working properly

hidden endpoints are hanging and i cant make progress because server won't respond.

[frosty patio]

I keep having issues with the machines and echo. When I try to type, I get a ding sound and not text appears. Also, the same thing happens when I try to get help form Echo. I honestly have spent more time getting help with things than actually working the course. Maybe this is the nature of the course? Thanks everyone

[desert stream]

@deep trellis Ping to request a repost of the last message sent to me in the lounge channel you removed access to. Thanks.

[scenic torrent]

Gave +1 Rep to @deep trellis (current: #134 - 70)

[upbeat quarry]

do you have the issue of a paste popup window appearing in these circumstances?
does the problem appear only with rooms opening in Split View, with the target window on the right? examples of such a room is Windows Fundamentals 1 (https://tryhackme.com/room/windowsfundamentals1xbx)

[royal quarry]

Hey does anyone else have the issue of Obfuscation Principles being a blank page?

[upbeat quarry]

the page with the room material or the right-window with the target VM?
both working for me
target VM needed 3 minutes to get stable

[royal quarry]

The room content, its just a white screen for me

Every other room works normally

[upbeat quarry]

could be your antivirus not happy with dangerous code it sees in the text of the room
worth trying disabling it, just for that room/page

[royal quarry]

Ill try that

Its not the entire page, just the learning content is white

I can see the title and the thm overlay

[upbeat quarry]

I would do deletion of browser cache then refreshing
if disabling antivirus does not help, consider disabling browser extensions
what is your browser?

[royal quarry]

Google, also not have any extensions. AV isnt the cause

Ill try cookies and else its just GG

Cache*

[upbeat quarry]

fwiw, I use FF

[royal quarry]

Firefox also showing nothing

Ill just do it last hoping it magically fixes itself

[upbeat quarry]

FF cool with me
I thought antivirus then extension was the best best, but if that does not help, then must be something else (router, other security application, etc.)

[vocal marsh]

i have this issue. For exemple i have it in the task 29 of advent of cyber 2024. Can't type anything in the shell cause of this "paste" pop up spam in the split view. Parrot security - Firefox. (not a big deal here, i can use a ssh connexion)

[upbeat quarry]

that paste popup is indeed a nuisance
for me, it is related to Firefox (check this: #site-support message):

• I experience it in Firefox on Windows
• but i do not experience it in Firefox ESR on Kali Linux
  it is great if you have a workaround for remote access like ssh (or rdp, vnc, etc.)
  another workaround is to use the "View in Full screen" control (as per #1415947189368393812 message)
  otherwise, you always have the option of switching to another browser I have experimented with Chrome on Windows, and I do not have the issue there 🙃

[vocal marsh]

Ok, thanks for clarifications and tips!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #13 - 841)

[sullen oriole]

The error is still happening and there's no way of connecting to the machine.

[misty sigil]

I am working on Threat Emulation under SOC Level 2. The Windows VM's for these exercises just keep shutting down. Specifically in the Atomic Bird Goes Purple exercises. It's a pain having to spin up the VM's a bunch of times.

[vocal marsh]

My vm keeps shutting down too, maybe a global issue?

[misty sigil]

It's been really dodgy the last few weeks, super laggy machines and disconnecting? Just here to report it

[wanton sonnet]

Wait, can we change the name on the path completion certs we are awarded? When I update my profile name they don't seem to reflect that. If we can't then how about a warning that this is permanent?

[ember osprey]

Yes but you will need to reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 17, 2025, 12:15 PM

[stray nimbus]

guys, zeek VM is very slow

room zeekbro

[neat glacier]

oh

[delicate marsh]

this new Echo ia bot is amazing !!! nice job hard workers

[steady pier]

Been facing connection issues with the target machines recently. I'll find the sites aren't responding etc, so send a ping request and it will timeout. But then after a bit of time it will respond again. Bit intermittent

[serene fable]

when i go to the summary of a lab in soc-sim it gives me a white plain page

[sullen oriole]

Why do I get this error and can't access my machine?

2025-09-17 13:26:30 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

[tacit jay]

Are there any promo codes at this moment? I did most of the free rooms and ready to progress and go with a path. Thank and excited to join the community here!

[cosmic thistle]

Hey, I was wondering about the skill matrix - it shows rooms as 0% for that I have already completed. I even tried resetting one and redoing it, but it still shows up under "Incomplete rooms" with 0%. Is this a known issue?

[rich wadi]

Hi,
The Monday Monitor challenge credentials keep throwing "Invalid username or password. Please try again.", even when copy/pasting both credentials. Is this a known issue?

I think you are able to submit a ticket through Echo, which I did. I just dont think it really submitted it. Or at least no email has been sent.

Will post the latter in #echo-feedback as well. Edit: Or not

[hoary shell]

Yes I have this same issue and I have it on windows hardening and active directory hardening. If you go fullscreen it helps or connect using remmina. But remmina gets disconnected constantly.

[indigo wave]

So… to opt out of the data minning of users.. we have to delete our account? Can we get a refund for yearly subscription for unused months?

[dire yew]

When u create a room and try to make it public , how much time thm need to review before publish it ?

[scarlet magnet]

there is no events that i need to answer the questions in wazuh walkthrough room

[ivory spruce]

It could be as long as ~1 year the last I heard. Its been months since though..

[ivory spruce]

The THM Refund Policy states that you can only claim refunds for annual subscriptions if you request it within 7 days upon renewal or initial subscription.

[ivory spruce]

THM might offer discounts or promos around Black Friday and during the Advent of Cyber event (around December)

[upbeat quarry]

is it the same as this: #1407666181778833490 message ?
last message in that bug report seems to provide a solution

[weary spindle]

Have you filtered the correct date?

[scarlet magnet]

yeah, idk what was the problem, just restarted the machine and its work

[ember osprey]

Sometimes around a year even , if it approved of course

[clear lava]

Hi guys I've encountered a problem with the windows fundamentals room. Whenever I load up the VM the 'paste' box keeps coming up every time I left click. I was wondering if anyone has had similar issues and knows any fixes? I've tried restarting the box but problem keeps happening 🙄🙄

[steady pier]

How do I know what is the best server to use for my OpenVPN?
It mentions using the server that is geographically closer, does this mean all EU servers will be the same. Also VIP or Regular? As currently my connection through VIP 2 keeps dropping

[upbeat quarry]

check this: #site-support message

[dire yew]

Why this much ?! Even if it's a simple room ?

[ember osprey]

Queue is pretty long

[candid hatch]

Hello

[forest ferry]

I am still getting this issue. No results come up ever. Was I supposed to upload the logs somewhere?

I entered the next room "Investigating with splunk" and got no logs as well. What am I not doing? I boot it up, connect to the IP address through browser and look for logs. Nothing

[dire yew]

Aha , thx

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5951)

[ember osprey]

Try to select option All time not All time(real-time)

[shadow rivet]

which room on discord i have to go for support for account?

[forest ferry]

What was the link to find out which rooms you have running vm to shutfown them down?

Thanks @ember osprey Fixed the issue. I knew it was something real stupid like that. appreciate it

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5952)

[upbeat quarry]

https://tryhackme.com/api/vm/running

[steep ether]

Hi! I’m having an issue with the Vulnerabilities 101 room, where it asks how many CVE’s were published in NVD July 2021. I’m putting in 1585, which is the correct answer and it keeps saying it is incorrect

[upbeat quarry]

how many filters are you using?
check this: #room-help message

[steep ether]

Just one, published date, from 1st to the 31st

[steep ether]

Awww shoot right got it now … thanks @upbeat quarry 🙂

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #12 - 856)

[brittle summit]

I canot get a tunnel connection in either my Hyper-V Kali VM or my Windows 11 Desktop. I prefer the Kali option if I can get it working. In Kali, i am typing sudo openvpn --config <ovpn> Any help will be appreciated. Does my Kali VM need to be on the same network as my host? The two machines can ping each other

[upbeat quarry]

what matters is for Kali to be able to ping the VPN server
can you share your openvpn output?

[brittle summit]

Never mind... got it to work. Needed to regenerate the ovpn file I guess

[worldly plaza]

Hi Team,

Is is possible to see if i have any Streak Freezes available on my account?

[silver tendon]

Click the flame icon, top left of most webpages, near your avatar. I believe some members have a snowflake, not sure how (maybe stackable freezes from Hack2win event?)

[harsh shale]

Please fix your server :<

[tacit lantern]

.

[lament lion]

The VM won't show up in the Pickle Rick room. I've tried leaving and rejoining the room, closing the whole tab and then reopening it, turning off the VM and then turning it back on, and even trying a different web browser. Nothing's worked.

[undone sierra]

can someone tell me whats wrong? I am trying out the BReaching AD network. I am able to connect via the VPN for the network, have configured the DNS too. ping <DC_IP> nslookup za.tryhack.com <THMDC_IP> and nslookup tryhackme.com all work. but I am not able to access the link in the third task for password spraying: http://ntlmauth.za.tryhackme.com/

[lament elk]

What if I purchase 2 premium membership one after another in the same tryhackme account, will second membership in queue or what will happed?

[upbeat quarry]

are you using THM VPN or THM AttackBox?

[upbeat quarry]

maybe it works now? worth clearing browser cache and reloading page too
VM OK for me at this moment

[tough aurora]

I don't believe you can

and there would be no reason to

[lament elk]

Okay

[upbeat quarry]

Hi
VM for "Sysinternals` is not working for me, and other users: #subs-room-help message
Is it working for you?
link for the room: https://tryhackme.com/room/btsysinternalssg

[wind wedge]

I'll look into it

Hi All,

Friendly Reminder:

From the 22-26 September, there will be limited support due to the THM retreat. We will not be as active with support during this week. We will still be responding but it might take a bit longer to get back to you.

Support will be back to normal hours from the 29th September

[zenith zinc]

When I open the attackbox in a room, I have a 'paste' popup box opening on the tab in my browser. It pops up every time I click and it only happens when I have the attackbox opened. I tried searching online but I can't seem to find anything related to it. Is there a way to fix this?

[autumn bone]

Hi @zenith zinc i am not an admin or anything but i am intrigued.
Would you mind sharing a screenshot.
I am currently on Tryhackme aswell

[zenith zinc]

I can't seem to share a screenshot here

[autumn bone]

Test

Hmm seems to be working for me, I used Win+Shift+S and CTRL+V to paste

[zenith zinc]

Yeah it doesn't let me paste stuff here

[west chasm]

@zenith zinc

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 19, 2025, 12:12 PM

[upbeat quarry]

follow the instructions in the message above, then you can upload screenshots

[upbeat quarry]

check this: #site-support message
I find it is less a nuisance on THM AttackBox than on target VMs (in particular Windows)

[zenith zinc]

Thanks for the links! Probably will workaround by using another browser then

[viscid grotto]

@shy1 is Unattended machine down?

the registry explorer just wont start event after 10mins

[undone sierra]

I was on my own machine, connected via the special network .ovpn file.
I was finally able to get it to work, had to manually enter the entries in the /etc/hosts though.

Though I don't think I should have had to add those entries manually. Don't know for sure, could be wrong in this regard...

[upbeat quarry]

Unattended works for me, as per screenshot

[upbeat quarry]

is your own machine Kali? in which case you should just have to do what Task 1 asked to do, as per screenshot

[upbeat quarry]

... but Registry Explorer won't start for me either

[viscid grotto]

thats the issue also it the machine becomes slow opening autopsy and cmd at once

[upbeat quarry]

I can imagine that
I seem to have the beginning of Registry Explorer appearing (wihout using Autopsy), and that is so slow I do not think you can work with it

[viscid grotto]

how time did it take to open

It took me 20mins to open

but I spammed so 3 reg view opened and I had to restart the machine

[upbeat quarry]

about the same: 15-20 mins

[viscid grotto]

amen to that

[upbeat quarry]

do you have an IP in the format 10.201.X.X, like mine is 10.201.106.225
or is the format 10.10.X.X?

[viscid grotto]

10.201 format

[upbeat quarry]

which means your VM is hosted in Server Region US-East, like for me now
next time you restart, switch to Europe (Ireland) to see if if helps
I have interacted with users who got better experience with that trick (for other rooms)

[viscid grotto]

oh ok

let me change the config file for my openVPN too

[upbeat quarry]

the OpenVPN server will matter only if you RDP, right?

[viscid grotto]

dont know clearly

[upbeat quarry]

check screenshot :

• Server Region in red: region where THM VMs (target VM, Attackbox VMs) are hosted
• OpenVPN in green: location of THM VPN servers that you connect to to establish a VPN tunnel
  for Unattended, if you do not RDP into the target VM, everything happens in-browser via Guacamole, and you do not set up a VPN connection, hence the settings under the green rectangle will not matter, but the settings under the red rectangle may and are worth tweaking (2 choices: US-East and Europe)

[upbeat quarry]

after switching to Europe (Ireland), Explorer Registry opens after 20 minutes of VM start and is as slow as before on US-East

[silver tendon]

I tried the same as you both, Registry Explorer took 10 minutes to appear despite showing almost 0% CPU usage in Task Manager. I increased priority to increase efficiency. Was able to get to answer task 3 a). VM is using Ireland VPN.

[upbeat quarry]

thanks for that feedback, useful and creative

[scenic torrent]

Gave +1 Rep to @silver tendon (current: #487 - 14)

[silver tendon]

You deserve a lot of credit for your efforts as well 😉 +rep

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #12 - 858)

[vale basalt]

I'm having a problem with the 'Upload Vulnerabilities' room on TryHackMe. I correctly configured the /etc/hosts file and reached Task 7, but now I can no longer access the machine. I have restarted both my virtual machine and the TryHackMe room multiple times, each time updating the /etc/hosts file, but nothing has worked. Are there any known issues with this room? I've also tried using the AttackBox, but it didn't work....I also tried a different browser, but it didn't work either.

[upbeat quarry]

maybe you have the same issue as reported here:

• #1414933047941267466 message
• #1414530336737460345 message
  if so, in my experience, try again a bit later

[vale basalt]

I think so. It started late last night and it's still happening today. I'll wait. Thanks.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #12 - 859)

[buoyant plaza]

Is anyone here?

[halcyon pulsar]

how do i apply the 3 month vouicher for my subscription

where

[wind wedge]

You have to go into manage account > subscription > redeem voucher

[merry lake]

hey really stupid question how can I link my discord account to tryhackme so i also get a cool role depicting my "level" or something peek

[west chasm]

@merry lake

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 19, 2025, 6:12 PM

[upbeat quarry]

follow the instructions from the message just above, and your THM level will be reflected in the way you appear in Discord

[merry lake]

thank you!

[halcyon pulsar]

no such a thing as redeem voucheer

[wind wedge]

Ahh you’re already subscribed

You can’t redeem when your subscription is active

[halcyon pulsar]

so gotta cancel?

[lament lion]

I tried to load it again just now, but it didn't work.

[upbeat quarry]

no issue for me: VM started and can be nmapped, as per first screenshot

• have you started THM VMs before?
• can you start this one: https://tryhackme.com/room/kenobi
• what is your browser?
• can you do a test without any browser extensions active?
• when you press the green Start Machine button for Pickle Rick, do you get 2 popup windows as a result, as per second screenshot?

[lament lion]

• I think so. I'm not sure.
• Yeah, I'll let you know when I get to it. Shouldn't be too many hours of you waiting.
• Safari (tried on Chrome first)
• I don't have any extensions in Safari.
• Nothing, nothing at all.

[upbeat quarry]

if you joined THM recently, check this: #site-support message, so you can get familiar with THM environment

[tribal imp]

hello, i need help if someone is available. i think my path got messed up or something because i did the 3 linux fundementals rooms, 3 windows fundementals rooms, and it stuck me in active directory basics where its trying to get me to do a bunch of things it didnt teach yet, like remote desktop. its not holding my hand, which is fine, but the directions arent clear because i dont know how to do the things its saying to do.

i am at task 4, where it wants me to remote into phillip's desktop. im curious if i missed a module somewhere? ive been just going with where THM has been directing me. i could just be really bad at this and cannot find what phillips PC is called in the ADU & C window.

[ivory spruce]

Suggest you verify your account to post screenshots as folks won't simply click on stuff shared by random folks from the internet.

[west chasm]

@dusty oracle

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 19, 2025, 11:04 PM

[ivory spruce]

Are you using the Attackbox for doing the tasks or are you using your kali VM?

Also, if you can verify your account do share a screenshot of where you are stuck, folks might be able to help.

[ivory spruce]

@tribal imp

[tribal imp]

under task 2 it had a button that says start machine. thats all ive done outside of everything up to the point it wants me to get into phillip's remote desktop. it hasnt said anything about starting the attackbox yet, and seems really vague which is why i think i seem to have missed some integral lessons somewhere.

this is the section. im not sure what else i can screenshot. and i am now verified, thanks for the link 👍

i wasnt sure whether to post this here or in room-help, because i dont know if i missed a different module that leads me into lessons on using VMs or not.

[tribal imp]

i see youtube has a lot of walkthroughs on this part, but i really want to learn this via the platform so i can do it on my own

[tribal imp]

ok, i finally figured it out using echo. i feel like the massive leap between windows fundamentals 3 and AD basics is pretty intense lol

[glass knoll]

Hey! Been trying to connect to the sysinternals room attached machine since yesterday...is there anyone who could help me out on this?

[stone ingot]

Hello, Im having problems when logging in in Wazuh with the credentials provided, I just started the Monday Monitor room

[ivory spruce]

What is the specific issue you are having?

[ivory spruce]

There are times when you'll need to do your own research to complement THM materials. Good job in figuring it out.

[glass knoll]

the machine attached to the task just wont work when i try to open it...It just shows a blank screen..

[west frigate]

can anyone help me to setup dns for exploiting AD, i ran sed -i '1s|^|nameserver 10.200.83.101\n|' /etc/resolv-dnsmasq , 10.200.83.101 is the IP of THMCHILDDC, THMDC not there in network diagram, I am not able to do nslookup thmdc.za.tryhackme.loc

[upbeat quarry]

you are not alone: #subs-room-help message

[glass knoll]

Hmm i guess we can't do anything but just wait..

[upbeat quarry]

do /etc/init.d/dnsmasq restart, then you can do nslookup

[foggy glade]

@austere horizon Hi, would it be possible to send you message on private?
I need help,

[austere horizon]

Yes

[viscid grotto]

I am getting auto loggeded out of my account

any reason?

also it takes a lot of time for the site to load

[dawn herald]

I did to. Looks like the site is having some issues.

[eternal raven]

same its happening to me too

[pearl tapir]

Same

[viscid grotto]

@austere horizon @ember osprey @upbeat quarry please do look into it or any other mods or staff

[upbeat quarry]

nothing wrong on my side, still logged in, but I had no running VMs

[viscid grotto]

I got logged out thrice and one was while I was doing a challenge

the fun part is the machine was running in another tab while I got logged out

[upbeat quarry]

that is usual: when you log out, the running VMs in THM infrastructure are not terminated

[viscid grotto]

I was even able to search in the registry editor 🙂

[undone sierra]

Yes, it's my own machine. A Kali VM. And i already did the steps as given in task 1.

Like i said earlier, I got positive and expected response from the ping THMDC_IP , from nslookup za.tryhackme.com THMDC_IP and from nslookup tryhackme.com

[upbeat quarry]

if you did the steps of task 1, you should not have to edit /etc/hosts
can you confirm you finished the steps of task 1 with sudo systemctl restart NetworkManager ?
also, please provide cat /etc/resolv.conf

[drifting ore]

I´m subscirbed to the annual plan, but i want to cancel the subscription so it does not get renewed automatically every year.
As far as i red for the monthly subscription plan, i will still have acess until the end of the annual plan (if it is also the case for the annual plan), but this screenshot (see above) confuses me, will i have it until the end or not?
Does the screenshot maybe refer to the end of the annual plan?

[upbeat quarry]

check screenshot from this THM resource: https://help.tryhackme.com/en/articles/7262866-cancelling-your-subscription

[faint lotus]

Hi, I have a question about one of the rooms I am having issues with a paste box populating the VM and will not let me work on the box. Can someone tell me where I can get help?

[upbeat quarry]

check this: #site-support message

[faint lotus]

thank you

[drifting ore]

Edit: No question anymore,did it, thank you for all help : )

[cyan kraken]

Hi, I’m trying to use my own VM to access TryHackMe rooms, but I keep being prompted to enter a password. It’s supposedly “tryhackme,” but I get: Permission denied, please try again. When I ping the IP, it works fine.

[drifting ore]

is it all small caps,maybe the the T is in caps?

[cyan kraken]

I can’t see the password when I type it, but it’s definitely all lowercase. Also, the SSH command is ssh tryhackme@IP, right? I also tried ssh username@IP, but both fail at the password.

[lament lion]

I looked through all those articles, and it looks like my issue is happening to my account as a whole and not just on one device. I can't load machines anywhere.

I got the OpenVPN configuration, I set it up, tried the Kenobi room and followed those instructions, and the machine still won't load.

[empty moon]

is it possible to restore a 107 thm streak? lost mine today

[naive lodge]

Yesterday my premium subscription was automatically renewed. Which I was not intended to... How can I get money back?

I just tried to send an email, but it says mail was not delivered [e-mail]

Can a moderator help me ?

[naive lodge]

I can't even send mails for my request

Anyone help

[wide swallow]

Site seems offline, cant even login

[tough aurora]

seems like you sent a unicode character in a disallowed header

[ivory spruce]

Yes, you may drop an email to THM Support to request for it.

[west chasm]

@empty moon

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 21, 2025, 6:59 AM

[ivory spruce]

Tried it just now and it is working for me.

[ivory spruce]

Can you re-send your email and ensure that you type the characters instead of copying and pasting it from your earlier email?

From the error message, it says it has unicode characters.

[ivory spruce]

How are you accessing the machine?

[naive lodge]

No i just typed and sent

using my mobile

2 times ,,, but same

[sudden rapids]

Hello

[sudden rapids]

What do you need help with?

[sudden rapids]

I can help if you don't mind. I have professional skills in support concerning TryHackMe.

[naive lodge]

I just wanna refund a monthly subscription, but i can't send mails as I mentioned above

[sudden rapids]

I would like to offer my assistance and demonstrate the process for future reference.

[west frigate]

okay, Thanks...

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 873)

[tough aurora]

try using another machine to try sending the email

[undone sierra]

@upbeat quarry
`
sudo systemctl restart NetworkManager

ping 10.200.4.101
PING 10.200.4.101 (10.200.4.101) 56(84) bytes of data.
64 bytes from 10.200.4.101: icmp_seq=1 ttl=127 time=587 ms
64 bytes from 10.200.4.101: icmp_seq=2 ttl=127 time=260 ms
64 bytes from 10.200.4.101: icmp_seq=3 ttl=127 time=271 ms
^C
--- 10.200.4.101 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2019ms
rtt min/avg/max/mdev = 259.758/372.559/587.234/151.863 ms

---

nslookup za.tryhackme.com 10.200.4.101
Server: 10.200.4.101
Address: 10.200.4.101#53

Name: za.tryhackme.com
Address: 10.200.4.101

nslookup tryhackme.com
Server: 8.8.8.8
Address: 8.8.8.8#53

Non-authoritative answer:
Name: tryhackme.com
Address: 172.66.164.239
Name: tryhackme.com
Address: 104.20.29.66
Name: tryhackme.com
Address: 2606:4700:10::ac42:a4ef
Name: tryhackme.com
Address: 2606:4700:10::6814:1d42

cat /etc/resolv.conf

Generated by NetworkManager

search hgu_lan
nameserver 8.8.8.8
nameserver 10.200.4.101
nameserver 205.254.187.4

NOTE: the libc resolver may not support more than 3 nameservers.

The nameservers listed below may not be recognized.

nameserver 103.56.229.130
`

`curl -v http://ntlmauth.za.tryhackme.com

• Could not resolve host: ntlmauth.za.tryhackme.com
• shutting down connection #0
  curl: (6) Could not resolve host: ntlmauth.za.tryhackme.com
  `

(would have attached a screenshot, but for some reason, can't)

[west chasm]

@undone sierra

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 21, 2025, 10:05 AM

[undone sierra]

even tried changing the order of the THMDC_IP and public DNS, but didn't work

[upbeat quarry]

follow the instructions from the message above, then you can upload screenshots

[undone sierra]

ok thnx

[upbeat quarry]

~~ check this: #room-help message ~~
EDIT: irrelevant, as this is for THM AttackBox

[nova hedge]

Yo yall install linux on straight on yall computer?

[tough aurora]

I installed kali linux through VM

[nova hedge]

On vm?

I have kali on vm now

But im make decisions between keeping window( IT EATS 4GB OF RAM WHEN I TURN IT ON) vs install linuz (dual boot)

[old garnet]

Can anyone help me with this problem I am unable to do ssh login it keeps timings out I am in virtual box vm with bridged adapter with openvpn

[old garnet]

Anyone

[upbeat quarry]

everything looks OK
seen similar situation before, hence:

• backup /etc/resolv.conf just in case, then delete it
• run again sudo systemctl restart NetworkManager: that will re-create /etc/resolv.conf
  hopefully nslookup works again
  otherwise, come back here for one more idea (not sure it works, maybe) 🙃

[old garnet]

Anyone knows how solve

[upbeat quarry]

can you ping 10.10.10.10?

[old garnet]

Yes

[upbeat quarry]

which room are you doing?

[undone sierra]

just tried. same result as last time 🙃

[old garnet]

Hashing Basics

[upbeat quarry]

hence, same /etc/resolv.conf as here: #site-support message ?

[undone sierra]

yeah

[cyan kraken]

does that solve this too?

[undone sierra]

check the room. there must be special username and password

[upbeat quarry]

another user unblocked the situation before by resetting the interface in the hypervisor (like Virtualbox), something like disable/enable

[old garnet]

Anyone solution for me bro@upbeat quarry

[undone sierra]

hmm, could try that... disabling/enabling the network interface... will look into that

thanks for support so far @upbeat quarry

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 874)

[old garnet]

Anyone how to solve this issue

[upbeat quarry]

can you nmap the target IP for that room: nmap <IP>
please provide screenshot

[undone sierra]

try configuring and using NatNetwork

[old garnet]

Ok

[cyan kraken]

i checked and there's none only the target ip, the name of the room is Creative

[upbeat quarry]

that is a challenge room, right? you are supposed to hack your way into the target, right? hence you will not get creds for the target, you have to find that yourself

[azure comet]

can anyone help me ?

[old garnet]

└─$ nmap 10.10.60.112
Starting Nmap 7.95 ( https://nmap.org ) at 2025-09-21 06:33 EDT
Nmap scan report for 10.10.60.112
Host is up (0.48s latency).
Not shown: 999 closed tcp ports (reset)
PORT STATE SERVICE
22/tcp open ssh

Nmap done: 1 IP address (1 host up) scanned in 9.13 seconds @upbeat quarry i am unable to send photo

[west chasm]

@old garnet

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 21, 2025, 10:39 AM

[upbeat quarry]

follow the instructions in the message above, then you can send screenshots

[old garnet]

but from the output ssh is open right so what is the problem?

[upbeat quarry]

run THM troubleshooting script available here, and provide screenshot: https://github.com/tryhackme/openvpn-troubleshooting

[old garnet]

ok

[upbeat quarry]

maybe?

[old garnet]

thank you so much @upbeat quarry after running the script its working

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 875)

[upbeat quarry]

did the script change the MTU value?

[old garnet]

yes

[old garnet]

it changed to 1260 from 1500

[coral abyss]

guys, i wanna learn writing python script for automation like submit request and fetch the sessionId and stuff. I want to write this script for solving Hammer room. Do you have any advice or recommend resource?
Can you guys suggest me some famous libs like request or something that i can research more?
Thanks very much for your help!!!

[azure comet]

ive got this xss payload :<script src="http://10.17.49.96/xss.js"></script> but im not receiving any connection .
@upbeat quarry

[upbeat quarry]

which room is that?

[azure comet]

its the new room

[upbeat quarry]

Sequence room?

[azure comet]

ye

[upbeat quarry]

I have not done that room
also, check this: #1418651119818903612 message

[azure comet]

i think the room is not the problem the vpn is

[upbeat quarry]

can you ping 10.10.10.10 ?

[azure comet]

yes

[upbeat quarry]

I suggest you run THM troubleshooting script from here: https://github.com/tryhackme/openvpn-troubleshooting
please provide screenshot of output

[upbeat quarry]

THM VPN seems healthy, I would troubleshoot other area

[foggy minnow]

I dont know if this is the right room for this but: I won at the tshirt raffle but i cant redeem the code :/ Is this a known issue?

[ember osprey]

Reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 21, 2025, 12:16 PM

[flint solar]

Hi I have been trying to connect to the following machine 10.10.236.6 in the SQL injection lab with OpenVPN connected but I cant seem to connect the lab machine , even though I am able to connect to here 10.10.10.10, can anybody help, thanks !

[halcyon pulsar]

yo guys just a quick question. am i allowed to use ai such chatgpt or deepseek to help me do the report writing for the sal1 cert

[upbeat quarry]

no idea, maybe a question for #sal1
other directions:

• search Discord
• ask THM support via email below but be aware of this pinned post: #site-support message

[west chasm]

@halcyon pulsar

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 21, 2025, 5:42 PM

[lament lion]

I just go into a room and click Start Machine, and if I'm asked to use the OpenVPN config, then I use it. Regardless, my machine doesn't start.

[upbeat quarry]

Instead of Kenobi, let's concentrate on "Linux Fundamentals Part 1": https://tryhackme.com/room/linuxfundamentalspart1:

• on Task 3, press the down arrow (screenshot 1)
• press green Start Machine button (screenshot 2)
• you should get a brown popup then a green popup window as per screenshot 3 & 4, and a new window opens in Split View on the right
• after a while, the right pane populates with a black screen, while the left part shows at the top a red header, with the Target Machine Information
  Could you please execute these steps and provide screenshots of what you experience?

[ember osprey]

can you provide some shots please 🙂 ?

[ember osprey]

Try to ask in #sal1 channel 🙂

[marsh karma]

Hello Guys im not able to google login to my account kindly help me out

[fluid aspen]

Hey guys, I'm trying to connect to the 'Jr-Pentester-AD-v01-BH' Active Directory network, but I'm getting a "TLS Error: TLS handshake failed" error. I can connect to the regular VPN just fine, but not the network-specific one. I've tried using the AttackBox and the tryconnectme command, followed all the steps, but it's not working. I also reset the room's network, and it's still the same. Any ideas what could be wrong?

Same logs from AttackBox and openvpn virtual machine:

2025-09-22 05:17:44 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2025-09-22 05:17:44 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2025-09-22 05:17:44 TCP/UDP: Preserving recently used remote address: [AF_INET]99.80.138.209:1194
2025-09-22 05:17:44 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-09-22 05:17:44 UDPv4 link local: (not bound)
2025-09-22 05:17:44 UDPv4 link remote: [AF_INET]99.80.138.209:1194
2025-09-22 05:18:43 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-09-22 05:18:43 TLS Error: TLS handshake failed
2025-09-22 05:18:43 SIGUSR1[soft,tls-error] received, process restarting

[tough hull]

I am getting issues with the VM for SOC Level 1 Endpoint Security Monitoring. I already tried clearing cache, disabling VPN, etc. The issue is once the VM boots and is done loading it proceeds to a blank screen. Any help would be greatly appreciated so I do not lose my streak!

[cloud adder]

Guys i have been struggling with this question for day and i am convinced its a bug. The attached question has too many spaces required for the correct answer. I verified this through a walkthrough and industry experts. What is the crunch command to generate a list containing THM@% and output to a file named tryhackme.txt? Answer : crunch 5 5 -t THM^ -o tryhackme.txt and this is marked wrong. Also see the walkthrough where this answer is accepted https://www.youtube.com/watch?v=tnoNjZnPlDw&t=1311shttps://www.youtube.com/watch?v=tnoNjZnPlDw&t=1311s timestamp : 20:09 Please advise?

This is for the Password Attacks room in the red Teaming Path

@uneven mortar

crunch 5 5 -t 'THM@%' -o tryhackme.txt also doesnt work

[upbeat quarry]

in that YT video, the crunch argument to filter for THM@% (i. e. 5 characters) has only 4 characters, hence it is wrong

[cloud adder]

if you notice on the right hand side of the Youtube video the answer was marked correct answer

[upbeat quarry]

you have experienced it yourself, and I can confirm: that answer is wrong
the error is more like a typo like I said: the video creator, while talking, did not concentrate enough, and typed 4 characters instead of 5
BTW, I have watched that YoutTuber several times, and I find the contents good, so I am leaning towards typo mistake (I am an expert at typos myself... 🙃 )
I suggest you apply the explanations from the author, and you will find the answer yourself
also, lots of users stumble on this, hence you can search Discord, and possibly use this past message: #room-help message

[cloud adder]

Have you gotten the answer for that question?

[upbeat quarry]

yes, but I prefer you find it yourself
if you need a shortcut, you will find lots of writeups and other videos out there
alternative: step back to refresh your mind, when you come back the solution may appear very clear

[cloud adder]

Ive been on this question for almost 2 weeks... The writeups are all wrong as ive tried the answers

[cloud adder]

Please show that you have done the question. You can even blot out the answer..

[cloud adder]

crunch 5 5 -t 'THM@%' -o tryhackme.txt also marked wrong btw

but if i use this command in kali it works\

[upbeat quarry]

this video shows the answer: https://www.youtube.com/watch?v=SyXl_Amvxw8

[cloud adder]

crunch 5 5 -t "THM^^" -o tryhackme.txt is accepted

[upbeat quarry]

because it is the right answer: 5 characters, not the 4 from the first video

[cloud adder]

Then why was the answer accepted as can be seen clearly on the vdeo?

[cloud adder]

Given they could have updated it...

anyways thanks for your time in assisting me i appreciate it

[upbeat quarry]

hypothesis

• THM have changed the validator over time, so maybe you could do some hacks before with the Developer tools
• also, there used to be a time where THM had tolerance (like accepting 4 characters instead of 5) before validating an answer, and that may have changed over time

[cloud adder]

👍

[proper panther]

Has anyone else issues with the points in the weekly leagues? I have finished two rooms but still got 0 points...

[analog bison]

hello, im trying to connect to the openvpn on my vmware kali linux, but i am unable to get it connected, no matter what the internal ip is not showing on the website, any help is appreciated

[deft quartz]

do you receive any error?

[analog bison]

nope

[deft quartz]

can you send a screenshot of your connection to the vpn?

[analog bison]

on the website or the vm?

[deft quartz]

the vm

[analog bison]

i believe its that top right corner?

[deft quartz]

it looks like you are connected succesfully due to the little icon next to your IP

[deft quartz]

what room are you doing?

[analog bison]

this is my THM

[deft quartz]

can you ping 10.10.10.10 from the vm?

[deft quartz]

well, you are connected succesfully

the indicator of the website seems to be broken

[analog bison]

when i try to connect to the target ip address

how do i connect to the room

[deft quartz]

can you ping your target IP?

[analog bison]

no i cannot

[deft quartz]

what room are you doing?

[analog bison]

Ice

[deft quartz]

Im launching the machine to see if it works for me

can you nmap the machine?

did you start your target machine

[analog bison]

i did start it

this is what im getting

[deft quartz]

i seem to get results

it took a little while tho

can you try with this command? nmap -sS -p- TARGET_IP

[deft quartz]

Maybe try restarting the machine

the target machine

[analog bison]

this is the new target machine

[deft quartz]

oh then i really dont know

[upbeat quarry]

that is a module, with 9 rooms
which room is the issue?

[upbeat quarry]

I have not used the tryconnectme command very much, but I have used the old method before, that seemed to work:

• regenerate and download the VPN file from your access page, then run openvpn (maybe you need to do killall openvpn before)
• if that fails, use the Options button to leave the room, and leave a few minutes later It used to be that you would be assigned to a different network instance, but not for this newer network
• best also to avoid running multiple THM VPN instances (and that includes the instance(s) coming with THM AtackBox)

[restive light]

Hii everybody, I'm new into cybersecurity and TryHackMe so I eventually apologise if this is not the right section to ask. I'm stuck into "Windows fundamentals 2" onto "Pre Security" Module. The Windows virtual machine on the platform does not start and I can't continue the room. I tried to re-start it multiple time and switch to another browser as well but nothing works. Does anybody know to fix please?

[upbeat quarry]

what have you done to start the machine?

[upbeat quarry]

I get this after about 2 minutes

[upbeat quarry]

if you are new to THM, check this: #site-support message

[restive light]

I simply started it like you have done but in my case a black background is shown

[upbeat quarry]

disable all browser extensions, delete browser cache then reload (Ctrl-F5)

[restive light]

It works now, thank you very much!

[solemn gyro]

hello everybody!
I'm facing an issue with the machine deployment not uploading the full volume of logs.
I tried in different browsers - the same issue for the following rooms:
Windows Event Logs, Windows Logging for SOC, Linux logging for SOC

THM bot doesn't give any support.
What can I do in such situation?

[west chasm]

@solemn gyro

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 22, 2025, 11:26 AM

[upbeat quarry]

can you provide screenshots? for that, you first have to follow the instructions as per the messagee just above

[solemn gyro]

unfortunately I cannot upload screenshots, but sometimes it says:
Unable to mount 78 MB Volume

Error mounting/dev/loop 10 at/media/root/disk: can't read superblock on/dev/loop 10

[deft quartz]

im pretty sure you can just ignore those notifications

[upbeat quarry]

do as per this message: #site-support message
then you can upload screenshots

[solemn gyro]

thanks

#site-support hello!
I'm facing an issue with the machine deployment not uploading the full volume of logs. And due to this I cannot answer the Room's questions.
I tried in different browsers - the same issue for the following rooms:
Windows Event Logs, Windows Logging for SOC, Linux logging for SOC.

Sometimes I receive the following message:
Unable to mount 78 MB Volume

Error mounting/dev/loop 10 at/media/root/disk: can't read superblock on/dev/loop 10

[upbeat quarry]

this message has no impact on the room functionality, you can ignore it like T1MOO said here: #site-support message

[solemn gyro]

but I have no full logs and I cannot answer the questions

[upbeat quarry]

please provide screenshots showing that situation

[upbeat quarry]

for instance, "Linux Logging for SOC" is one of the rooms you mentioned
check my screenshot: it shows for Task 2 the log THM are referring to is present

[upbeat quarry]

please read this message: #site-support message

[solemn gyro]

there is nothing in history.log

for example

[upbeat quarry]

where in the room material they talk about history.log?

[upbeat quarry]

explain please using words

[solemn gyro]

to answer theQ "According to the VM's package manager logs,
which version of unzip was installed on the system?" I want to use grep unzip /var/log/apt/history.log but the history.log is empty

[deft quartz]

are you using the attackbox or the other machine

to look for the file

you can use the splitscreen machine "linux logging for soc"

i dont think you need the attackbox

[solemn gyro]

ubuntu machine doesn't work

[upbeat quarry]

read the section called "Generic System Logs" at the beginning of Task 4: they point to the right log (i. e. not history.log)

[solemn gyro]

ok, I'll read and show it later.
Now, what can u say about the Room Windows Event Logs:
The Q is:
What is the Event ID for the earliest recorded event?

The answer format is 5 symbols

[upbeat quarry]

I went through that issue the other days with another user
you can check the conversation between these 2 posts:

• START: #room-help message
• END: #room-help message

[solemn gyro]

the first and the last events have 4 symbol answer format

[upbeat quarry]

did you read my answer here: #site-support message
screenshot is the conclusion of that conversation

[upbeat quarry]

words maybe? 🙃

[solemn gyro]

yes, pop-up windows "insert".
and I have issues with the following Rooms:
Windows Event Logs, Windows Logging for SOC, Linux logging for SOC

[upbeat quarry]

that popup is indeed a nuisance
check my view here: #site-support message
quick solution: switch from Firefox to another browser like Chrome

[solemn gyro]

I tried in different browsers - same result

[upbeat quarry]

disable all extensions, delete browser cache then reload the page (with Ctrl+F5)

[solemn gyro]

dpkg.log is empty

[upbeat quarry]

you are on THM AttackBox, not on the target VM

[solemn gyro]

I cannot type anything on the target VM

[solemn gyro]

i'll try. thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 879)

[upbeat quarry]

workaround: click on "View in full screen" control, that will open the~~ left~~ right half-window into a new tab

[solemn gyro]

I know it, thanks, but it doesn't solve the problem

[upbeat quarry]

what is your browser BTW?

[solemn gyro]

Firefox, Chrome, Edge

[normal escarp]

Is there a server overload today or something? Why is VM running at 1fps and site keeps crashing?

This too

[slate vapor]

Hello guys. when i try to click on the "start machine" button the machine starts to boot up in split view. But when its done the split view is just empty. any reasons for this?

[upbeat quarry]

which room is that?

[slate vapor]

have been in a few rooms im currently in Moniker Link (CVE-2024-21413)

[upbeat quarry]

if you waited long enough (Moniker Link asks for about 5 minutes?), disable all browser extensions, delete browser cache and reload (Ctrl+F5)
BTW, what is your browser?

[slate vapor]

google chrome, now it started, but it is quite inregular behaviour.

[upbeat quarry]

Windows VM, like for Moniker Link, are a bit heavier on resources, hence slower

[slate vapor]

okay, have had the same issue in john the ripper room aswell

[upbeat quarry]

what is your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)

[slate vapor]

Europe (Ireland)

[upbeat quarry]

good, no reason to switch to the other one (which sometimes is worse 🙃 )

[upbeat quarry]

so, Google Chrome, no browser extensions, right?

[slate vapor]

oh right i have some extensions, sorry. I vill try to turn them off.

[slate vapor]

seems to work. also the waiting time might be the issue in this situation. thanks for you help! 🙂

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 881)

[analog forge]

I just used a 3 month voucher here so do I need to cancel the subscription when I see it still says it will deduct money next month

i can upload my picture

[weary spindle]

If you wish to use the voucher, yes, you need to cancel the money subsription, then use the code.

[analog forge]

thanks guy

I have a problem with the package renewal when I haven't canceled the monthly subscription but accidentally entered the 3-month voucher of hacktowin, I can't cancel the subscription but now it has an error and lost the voucher, what should I do?

[somber reef]

Hey everyone,
I'm having an issue with the Summit challenge room. When I open the email for sample 5 "outgoing_connections.log" attachment, it doesn't load and stays blank for some time (screenshot 1), and after a minute or so opens an HTML code that says that there's a 504 error (screenshot 2). The same happens when I submit a new Sigma rule.
Could anyone help me with this?

[woven parcel]

Hello,
Am I the only one having trouble with virtual machines?
I cannot load VMs in sysinternals and windows event log modules

[upbeat quarry]

Sysinternals is broken: #site-support message
What is the link for the other room?

[woven parcel]

https://tryhackme.com/room/windowseventlogs

[upbeat quarry]

for that room, it worked for me yesterday, as per this message here: #site-support message
but right now, I am starting the target VM again, I get this screen after 10 minutes and that is not right
maybe you want to formally report this to THM Support (THM Discord is just users like you and me) using the email coming below

[west chasm]

@woven parcel

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 22, 2025, 3:53 PM

[sweet storm]

how the fk I add CSS to THM iframe badge? their stupid developer did not center it .so when i add that iframe thm-badge div goes to left side .

have you fixed this?

[wintry perch]

How does one get the student discount?

[austere horizon]

Student email.

[wintry perch]

Okay, how do i know if the discount is applied?

[shadow vessel]

Is there any bug with the site?
Its automatically typing itself in vm

www.tryhackme.com/room/linuxshells

[upbeat quarry]

that is because of that nasty paste popup
check this: #site-support message

[shadow vessel]

Its right clicking itself when i launch the vm

[shadow vessel]

Aah so its a known issue with browser, okay, thankyou only way to bypass this is by goin full screen on the vm

[upbeat quarry]

switching to another browser, like Chrome, helps too I have tested that myself, and other users seem to have accepted that suggestion, but today I interacted with one user who seemed to experience the issue with other browsers (Chrome, Edge) too
so, if you switch to another browser, please provide feedback here, positive or negative, telling about your new browser, so we know for the future
thanks in advance 🙃

[scenic torrent]

Gave +1 Rep to @shadow vessel (current: #3174 - 1)

[robust owl]

Keep running into the paywall after completing one learning room. Even if the learning/answers only take me 15 minutes. Help?

[forest ferry]

I completed the SOC simulator for introduction to phishing and I am met with a blank screen with the URL https://tryhackme.com/soc-sim/summary/68d1d342fccf42bdb32e2ced

Refreshing doesn't net any results nor restarting the SOC simulator.

[ember osprey]

check out free path

https://tryhackme.com/resources/blog/free_path

[lament lion]

Sorry for the late reply (again!). School's been keeping me busy.

Yes, I've followed your instructions, and my machine ran exactly as you had predicted. I didn't get the shots of the popups from your screenshots, but they showed up.

[rancid vine]

Hi friends, I'm trying to run Kali on a VM on my network that I SSH into from my macbook. I was trying to forward my traffic from my macbook through SSH using a socks proxy but I couldn't get it to work with openvpn. Does anyone know if this is possible at all?

I basically want to visit the THM rooms/sites from my macbook but use my kali instance for any tools that I might need.

[tough hull]

Task 4 - File and Disk Utils

[fluid aspen]

Thx Shy, gonna try.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 885)

[final pier]

i am not sure if this a tryhackme or a firefox bug but everytime i try to do something on the tryhackme website i get the firefox paste security thing appear getting in the way preventing me from typing

[wheat hedge]

Hi, i have succed sal1 and i receive a badge to credly. But my email to credly is not my email tryhackme. It's possible to change this ?
Bets regard.

[upbeat quarry]

that is a bug with Firefox
check this: #site-support message

[upbeat quarry]

please tell me: Task 4 for which room in the module?

[upbeat quarry]

thanks for that feedback
your screenshot shows the target VM for "Linux Fundamentals 1" is loading, with the right-pane window open, but not yet at the final stage (black screen as per my screenshots earlier)
that means that your account does allow you to start machines, it is a matter of realizing how to interact with these machines
at this point, we need to synchronize and see if we agree with that conclusion Please provide your feedback on this questions before we move further 🙃
so, 2 directions to follow at this stage:

• either your target VM did not finish loading and did not end with the black pane on the right, and that requires further troubleshooting (maybe issue with browser, browser extensions, antivirus, etc.)
• or you did end up with the black pane on the right and you can enter commands as per the room material
  I will go with the second option, and suggest you do the following as tests:
• start the target VM for Windows Fundamentals 1 (https://tryhackme.com/room/windowsfundamentals1xbx): it behaves just like Linux Fundamentals 1, but it is a bit slower, it is a GUI loading and it is blue instead of black
• start the the target VM for Linux Fundamentals 2 (https://tryhackme.com/room/linuxfundamentalspart2): for that one, unlike Linux Fundamentals 1, there is no window opening on the right, you have to interact with the target using ssh as per instructions of Task 2, and for that you either use THM AttackBox or THM VPN and your own attacking machine (like a Kali VM) This is going to be a new experience for you I guess, hence please use the resources mentioned earlier (#site-support message)

[scenic torrent]

Gave +1 Rep to @lament lion (current: #3174 - 1)

[final pier]

thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 886)

[mystic anchor]

Hi! I'm having problems opening the VM in the Moniker Link room (I also had problems with the John the Ripper one, but finally it worked)
The VM opens but the screen is black. Yesterday I got it to properly load for a couple of seconds, but then it "died" again.
I've tried Firefox and Brave browsers, without anything that could be blocking it.
Are there any other recommendations to make it work? Thanks!

[upbeat quarry]

I suggest you disable all browser extensions, clear browser cache and reload

[mystic anchor]

I've just installed Brave brand new 😅 The only extension I added was BitWarden. Is it known to interfere?

[upbeat quarry]

I do not have experience for that, I would experiment with disabling and see how it goes
another option maybe is to install a browser that you never use, let's say maybe Chrome, that would come with all the defaults, and see how if it behaves better

[mystic anchor]

That's why I installed Brave from scratch, to check with a clean browser based in Chromium. But let me try Chrome

[upbeat quarry]

make sure to wait long enough
I think that for Moniker link THM asks you to wait for 5 minutes
maybe a tip: when switching browser, no need to terminate the target VM, it will remain running in THM infrastructure even if you log out of THM and shutdown your computer 🙃 (it will naturally die after 1 or 2 hours, depending if you are a subscriber - I think)

[ivory spruce]

Do drop an email to THM Support. You'll be asked to verify your identity before catering to your request.

[west chasm]

@wheat hedge

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 23, 2025, 8:46 AM

[mystic anchor]

Thanks for the tips!
I did wait like 10 mins every time. I didn't terminate the VM, and it just loaded blank each time on each new browser.
Now I cleaned everything and I'm trying with Chrome, which I've just installed new.

[misty sigil]

Trying to start the machine in https://tryhackme.com/room/advancedstaticanalysis

[upbeat quarry]

maybe something temporary, as it works for me?

[viscid grotto]

SOC Simulator is there a bug?

When I submit my 4th report it freezes

then I have to start from first

also the analyst VM is not working

[viscid grotto]

hey did it get resolved

[misty sigil]

I think I've found another issue with this room, I did manage to get into the Windows VM going (so so laggy). The HelloWorld binary appears to be different than the one in the exercise so I don't get the correct results when using Ghidra on it?

Different hashes?

[tough hull]

SOC Level 1 > Endpoint Security and Monitoring > Sysinternals > Task 4 - File and Disk Utilities.

[upbeat quarry]

thanks
I cannot start the VM for that room, can you?

[scenic torrent]

Gave +1 Rep to @tough hull (current: #3175 - 1)

[visual elbow]

Hello,
Is it normal that my windows machine won't boot ? (on the web)
It says "Connecting to remote machine" and then I have a black screen (only the part of the screeen for the machine)

[upbeat quarry]

going back to your first message, if I understand correctly, your issue is not about a particular task (like Task 4 - File and Disk Utilities), but starting the target VM as such, right?
if so, we are in the same boat, and several users have had the same experience
check this: #site-support message

[visual elbow]

(linux machine works)

[upbeat quarry]

that may be transitory
for which room do you experience that?
also:

• check the room text, they may tell you you have to wait x minutes
• if the target opens in Split View on the right, there may be a timer (bottom left of the half-pane) counting down the time left before the target is ready

[tough hull]

Now I sit and explore other learning paths until the 29th...

[visual elbow]

Thank you for your response :
For Windows Fundamentals 2

• They say 3 minutes but waiting for more, rebooted and retried : same problem
• yep saw this but didn't help, nothing changed

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #11 - 887)

[upbeat quarry]

I am sorry, but you are not alone: search for sysinternals in Discord, and you will see how many users feel the same

[upbeat quarry]

"Windows Fundamentals 2" opens good for me, as per screenshot
I suggest you disable all browser extensions, clear browser cache and reload the web page
also, in parallel, can you start this other room, "Windows Fundamentals 1" (https://tryhackme.com/room/windowsfundamentals1xbx), so we see if the issue is room-specific?

[misty sigil]

The machine in https://tryhackme.com/room/advancedstaticanalysis just won't boot up

[upbeat quarry]

can you try with RDP?

[misty sigil]

From Attackbox?

[visual elbow]

Okk, that's weird. Already diid this but it didn't work.
I'll try with windows 1, it worked when I finished it (not today), but i'll try now

[upbeat quarry]

yes, using tool like remmina (GUI tool) or xfreerdp (CLI tool)
also, room starts good for me, as per screenshot
maybe consider:

• clearing browser cache
• disabling all browser extensions
• using browser in incognito/private mode
• updating browser
• testing with another browser

[misty sigil]

It boots up in Remmina through AttackBox fine

[upbeat quarry]

the fact it works for me and not you is not a proof of anything, just an impression (like you said: weird thing)
I'll look forward to your feedback 🙃

[misty sigil]

I'm just using regular up to date Chrome

[upbeat quarry]

you have extensions enabled maybe?

[visual elbow]

What browser do you use ?

[final bridge]

Hey! I need some help with the openvpn. Already ran the thm-troubleshoot script and did the recommendations and still no connection

[misty sigil]

I use none with Chrome

[upbeat quarry]

Firefox most of the time
but it has issues too, especially with rooms where the Windows target opens on the right, and for that there is a workaround but the solution is to switch to another browser like Chrome as per this: #site-support message
hence, nothing is perfect 🙃

[upbeat quarry]

thank you for the video
what is the status on browser cache and incognito mode?
I guess you tried to start that target VMs several times, right?
also, what is your Server Region, under Profile > Manage Account > Account Details (I am not talking about Access via OpenVPN)
if we find no other way to progress, I think we will have to settle with the RDP alternative

[scenic torrent]

Gave +1 Rep to @misty sigil (current: #1574 - 3)

[upbeat quarry]

consider regenerating the VPN file and cycle through different VPN servers

[misty sigil]

browser cache and cookies deleted, restarted machine many times, my server region is Ireland

[upbeat quarry]

Ireland is just like me, I would not change it

[visual elbow]

ok well i'll try another day, tried on chrome and it is not working neither tried other solutions, not working, I 'll do something else

[misty sigil]

I really feel like these Windows VM's need looked at, I just get this blank screen, they time out all the time and lag a lot. It's hard to work with and I don't know what else I can do on my end

[upbeat quarry]

you did the test with "Windows Fundamentals 1"?

[visual elbow]

yep not working neither

[tough hull]

100% windows VMs

[upbeat quarry]

I would say the issues come up when the VMs are supposed to come up in Split-View on the right
as long as there are workarounds for remote access like RDP, I can live
BTW, Discord is just a community of THM users, like you and me In case you want to report these valid points to THM, you should contact THM support at the email address below
But consider this pinned message too: #site-support message

[west chasm]

@misty sigil

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Sep 23, 2025, 1:12 PM

[tough hull]

Someone hack the THM servers and reboot the windows VM machines!

JK don't do that

[misty sigil]

I'm going to email in

These Windows VM's are just crushing progress for me

[final bridge]

done it already and tried 2 other servers now, still nothing

[upbeat quarry]

what is your OS?

[final bridge]

kali

[upbeat quarry]

you are not using WSL, right?

[final bridge]

nop

[west chasm]

@final bridge

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Sep 23, 2025, 1:31 PM

[upbeat quarry]

please provide screenshot of your openvpn output, but before you have to follow the instructions from the message just above so you can upload files

[final bridge]

ok

[viscid grotto]

@upbeat quarry is Tempest room down

3rd time 🙂

[misty sigil]

Is that a Windows VM by any chance?

[upbeat quarry]

I am pretty sure it is...

[upbeat quarry]

I'll check, but please be aware I am just a user like you, so we are just sharing experience in this space 🙃
back in 2-3 minutes

[misty sigil]

Yeah I'm pretty sure something is going on here