site-support

[ivory spruce]

Have you tried xfreerdp3 or Remmina?

[elfin depot]

do you want to try with my ovpn key?

[ivory spruce]

No need

I'l try using the Attackbox

[elfin depot]

attackbox is working. The ovpn does not

I want to know if its on my end or there is a change to this room

[ivory spruce]

Aahh.. you are after the OpenVPN.. have you tried EU-Regular-1 ?

[elfin depot]

the green button wasn't here before also its showing different ip

won't connect and it will be hell for me with 11% packet loss [eu.ovpn]

it shows streak needed here but I got to this room via hyperlink from another room so I didn't know that I need streak to unlock it.

would be nice to have verbose error instead of showing nothing when you clicked on join room

any updates for winadbasic room?

[ivory spruce]

You could put that in on #feedback-and-ideas

[elfin depot]

the old thm didn't gave me this much problems ngl

[ivory spruce]

Let me check using the Attackbox first so I know if it is isolated to OpenVPN only

[ivory spruce]

Is the target still up?

[elfin depot]

I reset it just now sorry

10.48.134.143 this is the new machine

[ivory spruce]

It seems the attached VM has an issue as it is not working even in the Attackbox

[elfin depot]

oh so that's why

is 10.48.149.102 your ip?

[ivory spruce]

Target IP you mean?

[elfin depot]

why does it shows that on my end?

[ivory spruce]

This is your tun0

[elfin depot]

no the target ip is this

this is my tun0

[ivory spruce]

Yes, this is the one I was trying earlier

[ivory spruce]

If you downloaded a new OpenVPN config, that would have changed

Still isn't working

[elfin depot]

I tried these all

let me retry with us-west-reg-1 and I'll let you know. I will be reseting the machine too

10.48.169.150 <-new winad machine ip

[ivory spruce]

I ran an nmap scan on the previous target and it says that ports are filtered

[elfin depot]

yea same on my end

[ivory spruce]

Suggest posting a bug on #1333993673381253162

[elfin depot]

might be an ovpn filtering issue

[elfin depot]

also this is pingable from the windows vm back then

that's why I ask if that was your ip or not

[ivory spruce]

No.. the box itself has the potential issue as it was the same response using the Attackbox

[upbeat quarry]

@elfin depot @ivory spruce
Check screenshot
I think the issue has to do with that new Asia-Pacific region, which seems to be under Beta

[elfin depot]

I was on US and then tried the apac one

[upbeat quarry]

a target IP with format 10.48.X.X means you are in Asia-Pacific (Mumbai) Server Region

[elfin depot]

and I dont think cloud availability is a problem since you can access the machine via the web-based split screen

[upbeat quarry]

please realize you will not be able to interact via THM VPN with target VMs deployed in Asia-Pacific, the Beta notification indicates

[elfin depot]

the problem is even when I'm using US (this is my default go to), the ovpn DOES NOT WORK

thank you for pointing that out, I clearly miss that but the problem still persist

[upbeat quarry]

please share the complete output of your VPN startup

[elfin depot]

2025-10-16 04:39:20 TUN/TAP device tun0 opened
2025-10-16 04:39:20 net_iface_mtu_set: mtu 1500 for tun0
2025-10-16 04:39:20 net_iface_up: set tun0 up
2025-10-16 04:39:20 net_addr_v4_add: 10.2.14.227/17 dev tun0
2025-10-16 04:39:20 net_route_v4_add: 10.10.0.0/16 via 10.2.0.1 dev [NULL] table 0 metric 1000
2025-10-16 04:39:20 net_route_v4_add: 10.101.0.0/16 via 10.2.0.1 dev [NULL] table 0 metric 1000
2025-10-16 04:39:20 net_route_v4_add: 10.103.0.0/16 via 10.2.0.1 dev [NULL] table 0 metric 1000
2025-10-16 04:39:20 net_route_v4_add: 10.201.0.0/17 via 10.2.0.1 dev [NULL] table 0 metric 1000
2025-10-16 04:39:20 Initialization Sequence Completed

[upbeat quarry]

thanks
does it stop there, or do you have more output appearing after a while?

[scenic torrent]

Gave +1 Rep to @elfin depot (current: #3216 - 1)

[elfin depot]

after reverting back and using us-west vpn the machine accept rdp connection now

[elfin depot]

tbh you are not helping much. thanks the community mentor for helping me

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1029)

[upbeat quarry]

out of curiosity, did you configure yourself something explicitly in your THM profile in connection with the Server Region?

[elfin depot]

idk i just tried connecting from other regions when this kind of shit happens. I already an hour deep debugging this, sorry for lashing out on you

I ran out of stuff to try that's why i asked around here. anyway, works already. lets end this talk

[viscid grotto]

any devops guys here had some doubts

[novel timber]

It seems like I'm not getting any points towards the League, just finished some room and it said that I earned 32 points, but in league I'm still at 0

[chrome whale]

#koth message

can I get help with this KOTH issue?

[onyx nexus]

I'm currently having issues with this box as well. I keep losing connection to it. I've tried for days and even regenerated my VPN file to a different location but still getting the same result

[blazing badger]

any help?

[rough drum]

hello what is wrong with CAPA: The Basics VM

it does not start

[rough drum]

i am also having issue with CAPA

[lunar hemlock]

i also have the same issue with the target VW since tree days.

VM is located in Europe (Ireland)

[rocky belfry]

how does tryhackme work in terms of free trial because i did the modules up intro to LAN but it is locked behind a premium does it reset daily

[plush bay]

there are free rooms and there are subscribed/premium rooms
you can do unlimited free rooms without any limit

though you can only launch the attackbox for 1 hour per day as a free user

but you can use your own kali linux vm with the openvpn forever and ever

[rocky belfry]

thanks

[scenic torrent]

Gave +1 Rep to @plush bay (current: #4 - 2246)

[plush bay]

no problem

[torpid jasper]

huh!!

[covert wind]

Has there been a change in the UI/UX regarding the Split View -> View in full screen window?

[molten stump]

it's stuck on "complete my first lesson" even if i already finished it

https://imgur.com/a/5Wz3eOr

[ember osprey]

Yes

[ember osprey]

Try to restart room progress

[ivory spruce]

Was this sorted?

[covert wind]

Can you post a link of the Change Log?

[limpid breach]

hello i wanted to ask when i try to pay for the monthly supscription it keep saying my card been declined and it has money on it ?

[ivory spruce]

You may need to check this with your bank if they are blocking payments. If they say they don't, do reach out to THM Support.

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Oct 17, 2025, 3:27 AM

[dense gate]

is there an issue with tryhackme atm??? i cant log in, im in a never ending loop of doing username and password then can see it goes to go 2FA but takes me back to enter username and password again. been doing that for a couple days now... any ideas other than the usual clear cache and cookies or turn it off and on again ????

[icy mica]

hi guys, im beginning playing in thm but i have a trouble, i connected via openvpn, i can access into 10.10.10.10 but i cant access into the target machines, how can i got this
i cant ping or do anything with the target machines

[tough aurora]

which room are you working on right now?

[icy mica]

tutorial, very basically

[tough aurora]

no, like the specific room name

[icy mica]

yeah the room is "tutorial"

[tough aurora]

what is the VM region you are using (you can check in manage accounts and scrolling down a little bit)

[icy mica]

i currently using eu regular 4

[tough aurora]

not the openvpn settings, like VM region

let me send a screenshot for an example

[icy mica]

it's asia pacific (mumbai)

[tough aurora]

ah, ok, so there are currently problems with that I believe

change it to someplace else than asia pacific

[icy mica]

let me trying to change into europe

[tough aurora]

make sure to restart the target machine afterwards!

[icy mica]

ye i got it

thanks for your incredible help!

[tough aurora]

no problem, have fun 🙂

[stuck sorrel]

guys, anyone has problem with split view? I see connecting to VM and then black screen

[wary moat]

yes, the same

[stuck sorrel]

cool 🙂

[molten stump]

already did and didnt solve it

[tulip rivet]

Yep, I have same issue with vulnerable machine, also when two machines deployed, one is terminated

[calm lynx]

After a correct login attempt, try Accessing the dashboard URL it worked for me every time I faced this issue

[small frigate]

Hey guys, my ID verification for one of the certs has been in this status for almost 48h, is it normal?? If I refresh the page the button changes to "Continue to ID verification"

[ivory spruce]

Is this a step before taking the exam (as I hasn't sat for any THM certs yet)?

[small frigate]

yup, you need to verify your identity as in = taking a picture of yourself + showing your ID + your full name (the name that'll be on the certificate)

i'll be taking the SAL1 exam but I presume that the PT1 works the same

[agile zephyr]

Is there a way to fully reset all my progress in all rooms/learning that I have done?

[viscid grotto]

i tried multiple time and when luck favored I was able to complete tasks

[onyx nexus]

ya having trouble with a few other rooms too. I think something is up

[tired chasm]

how can I get my attackbox to connect to the internet?

[upbeat quarry]

I suggest you check these THM resources:

• https://tryhackme.com/room/openvpn
• https://help.tryhackme.com/en/collections/3601905-getting-started-with-tryhackme

[ivory spruce]

Are you a subscriber? Internet access on the Attackbox is only available to subscribers.

[tired chasm]

I'm not

I saw the vpn thing but thats what I was wondering

[ivory spruce]

Unless you are referring to your local VM

[tired chasm]

nope

I assume some firewall will prevent me from scanning the target vm from my local machine

[ivory spruce]

The THM Attackbox is logically connected to the same network as the target or victim machines are.

If you intend to use your local machine, you need to use the THM OpenVPM server to connect to the same network where the victim or target machines are connected.

[ivory spruce]

In a way, yes, but the target machines are not really globally routable as these use RFC 1918 or internal / private IP addresses.

[tired chasm]

I see, thank you

I'll try to connect through openvpn :)

[forest ferry]

Am I missing something here? I am in the Kape room of SOC analyst level 1. Following along with the room I should be able to choose targets but there are none to select. Help would be appreciated thanks

[covert wind]

I have this Windows target machine as split view but I cannot copy and paste to it. It doesn't have the clipboard button either. What happened to the UI of the split view?

[ember osprey]

Try to press ctrl+shift+alt

[drifting fractal]

hey KGB

[drifting fractal]

I'm getting this error on the Plotted LMS room on port 9020

[static kelp]

hint working for anyone?

[ivory spruce]

For any specific room?

[static kelp]

nvm I'm done

[sacred whale]

I cannot connect anymore to openVPN.

[gloomy saffron]

i cannot go to the next step from verification process on SAL1

[gloomy saffron]

did anybody face this situation? In the my first attemp, i faced same problem

Can you help me? what can i do?

[pale verge]

What's the issue?

[gloomy saffron]

i sent picture of me and documents to onfido while verification process, after that, it is verifying... screen about 24 hours

[woeful shore]

I have a 10 days strike (It was a 81 days one) but it doesn't work.
Unable to connect and the status it's not showing from yesterday morning (top-right corner of the network diagram).
Some admin should take a look, it seem totally down AND it changed the IP: it was 10.200.8.101 (to me) and from yesterday is 10.200.71.101 AND it's changed in all the AD room I saved.
After all the setting up, it doesn't work.

[simple berry]

@ivory spruce hello, sorry for the ping, but can u assist me with something pls

[delicate parcel]

Ant information on the Active Directory Networks? Seems they are not on the same subnet again thmdc.tryhackme @ 10.200.70.101 but Attack box and premium vpn are 10.50.x.x can't ping and cant setup DNS

[twin dock]

Hey guys, i was trying to connect to the site's vpn , when i noticed i've downloaded the US-West ovpn file and couldn't connect, then realized that the room target machine was connected to US-East , but i wonder,,, if i had the same IP as the target machine in my linux, even the route tables were good (i think) why i couldn't connect to it ... like technically speaking , thank you!

[naive dust]

THM has been running like complete garbage for me lately...its getting ridiculous at this point. The whole site just refuses to do anything but completely freeze.

remnux: getting started

[bleak rune]

is this possible to changle the country? I've created my account from Malaysia but i'm from a different country. is it possible to change my country?

[ivory spruce]

#site-support message

[ivory spruce]

Can you provide additional info or screenshots so we can refer to THM Staff as the case may be? Creating a bug report in #1333993673381253162 would be helpful as well.

[ivory spruce]

What do you mean? Your tun0 will be the same as the target machine?

[ivory spruce]

If memory serves me correctly, there should be a different OpenVPN file for the networks which you can download upon joining the room.

[ivory spruce]

Just saw your message, is this a separate one from what Muiri asnwered in the other channel?

[simple berry]

No no it's the same, thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 881)

[ivory spruce]

What room or network are you trying to join? Also, do note that you'll need to rejoin networks after being in it for 7 days if I remember correctly.

[naive dust]

tried, wont let me post screenshots here...

[ivory spruce]

You'll need to verify your account before you can do so.

[west chasm]

@naive dust

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 18, 2025, 11:08 PM

[fossil osprey]

Trying to purchase a premium subscription, but my Mastercard continues to decline. My PayPal doesn't work either, and sends me an email stating, " Hello,

We were unable to charge your payment method for your TryHackMe premium subscription.

Please update your billing information to continue your subscription."

Any advice?

[ember osprey]

Reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Oct 19, 2025, 12:15 AM

[fossil osprey]

Gee, thanks.

[fossil osprey]

How long will a response take?

Nevermind.

[naive dust]

I fixed it. The issue was THM doesnt like safari

[delicate parcel]

you are correct there are different vpn files to download for different machines/networks, and i understand which is which. i had this issue maybe 2 weeks ago, Oct 3rd ticket #40086702, and it was resolved, this is on the THM side of things. And this is the same issue again, unable to ping the host from either attack box or the Premium subscription vpn. Ive been on THM for a couple years now, and lately things have not been working properly. Ive submitted another ticket today.

[toxic pecan]

I have a good question. I am working on the VM and have been experiencing this almost every time. Whatever the questions in the tasks tell me to do, the path or file is not there as suggested in the question. Can you please tell me what I'm doing wrong or if things changed but not updated?

[ivory spruce]

Which room and question are you working on?

[ember osprey]

Few days

[torpid jasper]

I'm currently in Platinum league in site top 10 was promote to next saphire league but

in top of the page tell top 7 move to next league ?
help me i'm in do or die position

[indigo cave]

Hi I'm having issue with the site, I'll randomly be logged out and when I try to log in again, after verifying my crendentials it will show in the url /two-factor and then again go back to the login page, this has been happening for a good amount of time now, can anyony help me out cause it's really annoying when I'm in the middle of a room

[woeful shore]

I was learning in the "Enumerating Active Directory" room - it's on the "Recommended Learning" for the "Junior Penetration Tester (PT1)".
I always use the Attack Box.
I started it on wednesday if I well remember and on fryday it changed the IPs (as well for the other related AD rooms "Lateral Movement and Pivoting", "Breaching Active Directory" - the actual IPs are now all like this 10.200.7x.xx when they were to me 10.200.26.101 for Breaching AD and 10.200.8.101 for Enumerating AD) .
I already tried to join another room and then re-join this one, but nothing.
Tried to reset the network various time, to refresh the page, to restart the browser, to clean my cache, anything doesn't work.
I'm beginning to think there is some problem with the entire THM infrastructure.

[woeful shore]

So it's not just me noting that in the last month THM went a bit on acid..

[indigo cave]

I recorded it happening again, here is a video for ti

[muted flume]

Hello, i have a question how can i see the points that i have ??

I mean the level points i am [0x8]

[lofty latch]

thm dashboard, scrolldown

[muted flume]

Thanks!!!

[scenic torrent]

Gave +1 Rep to @lofty latch (current: #388 - 19)

[pale verge]

#1333993673381253162

Good find

[high schooner]

Give a little more explanation. What were you expecting or what is the URL all about

[opal sand]

reported

[opal sand]

redirects to a non-existing room

[charred trail]

If I start/join a room while I have an active THM subscription, will it remain available after my subscription ends?

Will I be able to finish the room I started once my subscription ends?

[wet gust]

I assume not because it will be behind the paywall & you won't be able to access it any more.

But you do keep all your points and your streak - so don't stop just bacuase you have to take a break from paying. Keep learning.

[upbeat quarry]

after editing resolv-dnsmasq, do /etc/init.d/dnsmasq restart
this is assuming:

• network is in the state of Running
• you are using THM AttackBox
• you have a network adapter called breachad

[lyric spruce]

1. Network is in the state of Running
2. I am using THM AttackBox
3. Doesn't look like I have a networ kadapter called breachad

Also tried restart the dnsmasq but looks like the problem is I don't have the necessary network adapter 🫠

[upbeat quarry]

THM AttackBox is probably in a bad mood 🙃
hence, download the VPN file for Breaching AD from THM Profile > Manage Account , and run openvpn with it, that will give you breachad

[lyric spruce]

Tried that. Got an unknown error 😔

I'll give it another shot though

[upbeat quarry]

do killall openvpn

[delicate parcel]

not just you my friend

[delicate parcel]

Its broke, I submitted a ticket to THM yesterday. i had the similar issues 3 weeks ago submitted a ticket and it was fixed for a week maybe? before breaking again,

[orchid silo]

This room's VM needs work. It does not align with the Challenges. The events are all wrong. Please update this room!
https://tryhackme.com/room/windowseventlogs

[upbeat quarry]

I tried connecting to the network myself, but no luck
my feeling is that the room is not working at the moment
Indications something is moving:

• "Breaching Active Directory" is not listed under Networks any more, like it used to be, as per first screenshot
• under https://tryhackme.com/manage-account/access-open-vpn, there is now a v2 version for the VPN file, as per second screnshot, in addition to the previous one It looks a bit like the transition that another network room, Wreath, went through
  My impression: this room is being reworked, and I am not sure it is stable enough

[silver belfry]

Hi all, i am attempting to complete the enumerating ad room with my own windows machine as suggested for the credential injecting portion. i am having trouble accessing the enumerating ad network from my windows machine via openvpn connect. No problems with linux box via same config. i downloaded the <username>-enumerating_ad_v2.ovpn config. The contents are below, i added the 'dev-type tun' line and changed the 'dev enumad' to 'dev tun'. Neither works.

client
dev enumad
dev-type tun
proto tcp
sndbuf 0
rcvbuf 0
remote 34.252.0.145 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
data-ciphers AES-256-CBC
key-direction 1
verb 3

Any help is appreciated.

[sick heath]

Hello, when I registered at the website, I put my nickname on the full name but now my certificate shows my nickname. I changed it to my fullname on the "Manage Account" but my name on the cert did not change. Any way I can fix this?

[ember osprey]

Yes , reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Oct 20, 2025, 8:33 AM

[ivory spruce]

You need to use the Community edition of OpenVPN if you intend to use your Windows machine.

[wind wedge]

The machines will not start if you are on us-east. Unfortunately, one of the services went down with our cloud provider so you will be unable to start a machine if you are in this region. I will update once this is back up

[cinder oak]

are the in-room machines currently not working? or is it just me?

[wind wedge]

Yea, if you're on US region, swap and should be able to deploy

[cinder oak]

okay thank you @wind wedge <3

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #53 - 204)

[sick heath]

sounds good, thank you so much!

[scenic torrent]

Gave +1 Rep to @ember osprey (current: #1 - 5988)

[green gazelle]

Getting a login loop with mfa. Tried couple of browsers. Just me? I know lots going on in the tinterwebs right now but had seen this before in the site

[pale verge]

I'd wait a bit and try again, might be an issue with the servers

[woeful shore]

EU here: I think it's the whole THM system a bit under "refresh", because from the kali linux machine some ovpn conf works, some doesn't. The attackbox is useless (to me) at the moment.

[green gazelle]

Thanks both, I'll take a little break try back tomorrow

[silver belfry]

Yay! That worked! Thanks so much!

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 883)

[gloomy saffron]

onfido cannot verify me for taking sal1 about 2 days.

whats problem?

does anybody faced with this situation?

in my first attempt, after 3-4 hours conversation with support team, engineer solved the problem

but now, no reply from anybody

[wheat hedge]

Hi, this room https://tryhackme.com/room/breachingad is break now ?
I would like to join with VPN and my personnal kali vm. it's impossible to ping THMDC. I've try a lot of solution, I've the same issue.
Have you and Idea ?

[forest tulip]

Hi, i on SOC Level 1, try to do room "upload and conquer".

why i cant try it for free to complete the room ?

[viscid grotto]

https://tryhackme.com/room/introtoiac

Checkout Task 4 it is bugged

Every answer is incorrect every single time

[pale verge]

Works for me

try reloading the page

[pale verge]

THM business only scenario unfortunately

[peak axle]

Hi I appear to be experiencing issues with the THM site today as I cannot seem to spin up any machines or the attack box. Using my own connection doesn't seem to work either. Has anyone else experienced any issues?

[silent knot]

same here ! i can connect it just fine few hours ago , but when i want to start a machine now , it shows me error

[gaunt pier]

Hi
Need help with this

Seems like AWS is still slumbering

[peak axle]

@silent knot @gaunt pier Yes these are the issues that I am facing today which is a shame as I was on a streak and enjoying the labs.

[gaunt pier]

Reset one room and fill in the answers again

You wont miss the streak that way

[peak axle]

Thanks @Rydan will do.

[woeful shore]

Wait wait wait - let me understand: there are others rooms in that path (SOC Level 1) that are for business only? I can't understand why. Premium subscribers should have access to everything - otherwise it's just a lose of time.

[cloud trail]

I keep getting this when i tried to connect to the VM and Attackbox

tried different browsers and vpn and still getting the same thing

[tulip rivet]

Is this some error? Ai tells me that im exploitn the wrong IP, but I see that its the Target Machine IP

[weary sequoia]

anyone else having "Failed to connect to server" and "we are launching too many machines in your region right now?"

[pseudo echo]

Yep, machines also get terminated if they are able to start, probably still AWS issues

[pale verge]

Yeah you're right, it doesnt make sense

[weary sequoia]

didn't realize aws was having issues 😬

[pale verge]

Common issues atm, hopefully it gets resolved soon

[pale verge]

Have you tried it? if it's working the way you're doing it just ignore it

[tulip rivet]

Yes, it works, i have obtained the flag.txt

[pale verge]

Ah alright, must just be a glitch then

[distant cloak]

I have been getting the same today as well.

[tulip rivet]

Ok, thanks

[scenic torrent]

Gave +1 Rep to @pale verge (current: #389 - 19)

[faint lotus]

Is there a reason why I could not startup a sandbox this morning on thm

[pale verge]

AWS is having issues today

[faint lotus]

The great cloud maestro is having issues? Wow. Thanks for letting me know.

[pale verge]

No worries

[faint lotus]

Is the an estimate time for repair

Also I am a premium user I saw another feature on the website for connecting through OpenVPN. Is it worth it?

[distant cloak]

https://health.aws.amazon.com/health/status

[woeful shore]

It's what I was thinking yesterday, since it's been the first time seeing messages from aws during the vm startups.

[woeful shore]

It depends on which VM you try to use: to me, tried with the Kali machine, imported the ovpn files; some worked, some not. Probably the issue it's not on the entire infrastructure.

[faint lotus]

👍

[normal ore]

That yellow square was green two weeks ago. I always check every week or two to make sure I am getting green every day.

Somehow it changed. This is not acceptable.

[hard flare]

G’Day! Yes. This is happening to me. Tried different challenges, and received the same message.

[pale verge]

Still looks like AWS is having issues, hopefully it's sorted soon

[pale verge]

Contact support

[normal ore]

This IS support

LOL

[pale verge]

https://tryhackme.com/contact

[normal ore]

Sonny, you are only 0xB master and I don't think you work here. But you are in a site-support channel on discord telling users to use email instead of discord. So why does this channel exist? to tell users to email support?

Just wondering where you are getting this from?

[pale verge]

This channel is mostly for community support meaning most of the people who answer the questions here don't work for THM, therefore they're not gonna be able to resolve this for you

[normal ore]

@tawdry orbit @deep trellis

[covert wind]

It seems like I can't start both the Attackbox nor a target machine for a room. Are all the resources down at the moment?

[sharp veldt]

are machines still down?

[scenic void]

I was just about to ask that

I haven't been able to make progress because none of the machines start. Is it due to a problem with the machines or my configuration?

[visual sparrow]

hi guys do you have any problem about the machine today

[covert wind]

It seems like there is a huge global AWS outage from the news

[visual sparrow]

yesterday i have access to all machine but when i wake up all machine today says "Oh no, an error occurred while starting VM: We're launching too many machines in your region right now. Please try again later."

[scenic void]

Ohh so TryHackMe uses AWS?

[scenic void]

me too

[visual sparrow]

yea i heard the new aws got a problem today

i think THM use AWS

thats why all machine is broken today bruh

[sharp veldt]

EVERYONE USES AWS

[visual sparrow]

machine restored

[bleak flame]

Why my win streak is back to zero and no longer increased ?

[snow frigate]

Anyone else unable to start a VM

[strange grove]

yup, several people reported this issue all across this server

[scenic void]

Here, Look, I’m getting this error.

Oh no, an error occurred while starting VM: We're launching too many machines in your region right now. Please try again later.

[strange grove]

...but my streak, bruh

it's currently a streak of 1 but I need to keep it going

I'm just thinking of all the brag posts on r/tryhackme with their 500 day streaks etc

[snow frigate]

Yup same message

[strange grove]

😬 I had a vm for a second and then.... blank screen

[stiff shale]

hey guys i am having an issue with starting a machine when ever i click start machine
Oh no, an error occurred while starting VM: We're launching too many machines in your region right now. Please try again later.

[strange grove]

ctrl + F

[stiff shale]

but i have checked there is no other VM running

[scenic void]

Hahaha we’re all in the same boat, bro. Looks like it’s a THM issue with AWS.

[strange grove]

https://health.aws.amazon.com/health/status

Update: Oct 20 11:22 AM PDT
Our mitigations to resolve launch failures for new EC2 instances continue to progress and we are seeing increased launches of new EC2 instances and decreasing networking connectivity issues in the US-EAST-1 Region.

We are also experiencing significant improvements to Lambda invocation errors, especially when creating new execution environments (including for Lambda@Edge invocations).

We will provide an update by 12:00 PM PDT. (any second now actually)

[weary radish]

i think i frozen bloodhound by mistake

[stiff shale]

but i am not using aws machine i am trying CTF machine

[weary radish]

oh

[stiff shale]

thats from tryhackme ig

[strange grove]

I don't mean this to be disrespectful: if you can't find the numerous chats on this server alone mentioning this, maybe CTF/cyber is not for you. You need to break down the path in front of you instead of throwing your hands up

I tried to think of a way to say that for a while today already and that's the best I've got.

[stiff shale]

ohhh i got your point THM uses AWS for services

hahahaha

[weary radish]

im removing that image, it has my ip on that 😄

[lone marsh]

anyone have access to Vm ?

unable to access VMs

[weary radish]

i belive the post was made about maintance

[scenic void]

hahaha

[stiff shale]

thm should have informed its usrs

[weary radish]

last email i had was "You signed up to TryHackMe a while ago, but your journey hasn’t started yet. Don’t miss out on the chance to learn hands-on cybersecurity and grow your skills!"

well now i have nothing else to do, i guess ill look up cat photos

[strange grove]

this is the way

[weary radish]

even coursera is offline still lol

[strange grove]

now how are we going to learn six sigma?

[stiff shale]

check its working now guys

[strange grove]

I got something to flash up one time.

... ooooh maybe...maybe....?

I'm in

ah ok so my target vm is loading up so far, but the in-browser kali box is giving the same error. I think I should touch grass

AWS status post as of ~4m ago

Oct 20 12:15 PM PDT
We continue to observe recovery across all AWS services, and instance launches are succeeding across multiple Availability Zones in the US-EAST-1 Regions.

For Lambda, customers may face intermittent function errors for functions making network requests to other services or systems as we work to address residual network connectivity issues. To recover Lambda’s invocation errors, we slowed down the rate of SQS polling via Lambda Event Source Mappings. We are now increasing the rate of SQS polling as we experience more successful invocations and reduced function errors.

We will provide another update by 1:00 PM PDT.

[weary radish]

so 4:00pm est

at least i can see when this goes online lol

[scenic void]

Error’s still there?

im stuck

[strange grove]

...kinda?

[prisma crater]

Hey everyone, apologies if this has been raised already today but I have had this error since last night and cannot get my attackbox to work in any room. I've cleared browser history, logged out and back in and again to no avail.

[distant cloak]

Read back on this thread. Its been going on all day.

[solemn rock]

So uh. What happens to streaks in cases like these?

[visual sparrow]

it will be broken

[bleak flame]

@austere horizon and @torn citrus

[marble breach]

Done!

[weary radish]

whats up with bloodhound ce from vm, keeps crashing

[misty skiff]

Getting a completely blank, white page on /pricing and /soc-sim on my normal Firefox but I don't get that white page on LibreWolf (no extensions, etc.) and a new Firefox profile (no extensions, etc.).

I could just get my work done on either LibreWolf or the other Firefox profile, but I figured I would come in here and see if anyone has an answer.

For some brief context, I've already tried the website without any extensions but I was still getting the white page problem. Only creating a new Firefox profile or using LibreWolf has fixed the issue thus far.

On the bottom right of the blank white page I get on my normal Firefox, I still ironically have the website's chatbot and it's fully functional.

Please @ me in your response.

[jagged nexus]

Something is weird with this room of THM. https://tryhackme.com/room/owaspjuiceshop

I cannot read the content because the font color is the same as the background and it does not even tell you what you have write

[pale verge]

Change back to light mode

Dark mode messes up some rooms

[jagged nexus]

yeah that fixed everything thx

[scenic torrent]

Gave +1 Rep to @pale verge (current: #372 - 20)

[pale verge]

No worries

[rough drum]

hello

why dont the hint work

??

[spark hatch]

The ai bot tells u the hint, click it

[jade ferry]

There is no flag in the virtual machine in this room. https://tryhackme.com/room/looneytunes

[void vortex]

hi

[undone wigeon]

Hi there, can i get in touch with the support team ? I didn't found any email on the website...

[pale verge]

https://tryhackme.com/contact

[undone wigeon]

Thank you

[scenic torrent]

Gave +1 Rep to @pale verge (current: #360 - 21)

[sharp veldt]

Have you tried disabling the 'tracking protection' and trying again?

[opaque grove]

Hi are some networks still affected by the AWS outage? I can't get an interface connection on the Lateral Movement room (Part of AD series), but can only the Holo network. When I join the Lateral Movement room, the network does not report a status, even when clicking the Start button.

[golden hemlock]

Hi! Is anyone else having issues paying for TryHackMe? My checkout shows “Something went wrong, please try again later” before the payment form loads. Any fixes?

[median yarrow]

Hey all. I just lost my 128 days streak due to a work related travel. Can somebody help me with that?

[wind wedge]

Contact [e-mail]

We will be able to restore it

[median yarrow]

Thanks a lot

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #53 - 205)

[wet gust]

@wind wedge I did not lose mystreak but I had 62 acitivites yesterday & now it says I had zero & the green box that WAS there is gone.

[wind wedge]

We’re aware of this. If you put a ticket in as well we will pick it up for you to get it back to normal

[twin wedge]

two of the links here doesn't work - https://mitre-engenuity.org/ and https://mitre-engenuity.org/cybersecurity/center-for-threat-informed-defense/ and this was on this page for the SOC1 path of MITRE learning.

[severe zealot]

i've had premium for quite some time now.. is there a workaround when a VM freezes. for the last year i've just been terminating and relaunching.. but it takes away from investigations for the challenges.. is there a work around? I mean I have a VM i can just launch and do openVPN but for days where I just want to use the site's attackbox.. but this is getting pretty frustrating

[remote ravine]

Im trying to continue my path, but the page isn't loading up. The AI bot says there is currently a temporary cap, but what exactly does that mean? Is that maintenance, is that a general cap on progress for the week, etc? Justwondering when I can pick things back up

[viscid grotto]

try the last phase it has the same issues 🙂

[sour pagoda]

Anyone here in Beta Asia VM server who is experiencing zoomed out terminal like in this screenshot?

Even the Windows VM

[buoyant jackal]

Greetings, i need support.
I canceled my subscription and i keep getting daily emails "[Important] We couldn't charge your Card" .
on the website :
Status: Scheduled cancellation

Why is it taking so long to cancel the subscription ??

[rough drum]

why is hint not showing up

for me

[severe zealot]

I guess we don't have site-support

[ember bane]

In the Nessus room: https://tryhackme.com/room/rpnessusredux it's not accepting my answer for: What Apache HTTP Server Version is reported by Nessus?

I believe the answer should be 2.4.99

the answer space is ..__ so 2.4.99 fits in

"..__"

space dot space dot space space

[rough drum]

what is this

??

[raw parcel]

Well you tried to run a HTTP Request on an FTP server

[rough drum]

yes

[ivory spruce]

Have you tried sending an email to THM Support?

[west chasm]

@buoyant jackal

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Oct 22, 2025, 5:17 PM

[celest flicker]

hi. what is 'Weekly Mission!' about?

[silver belfry]

Hello, i am unable to find the Lateralmovementandpivoting ovpn file on the access page. Thanks!

[forest tulip]

how about upgrade to premium member ?

[upbeat quarry]

Please confirm you are a subscriber

[silver belfry]

I am a premium member. Not sure how to confirm otherwise. Would post a screenshot , but the '+' next to my chatbox is grey'd.

All i have is breachingad and enumerating_ad_v2 ovpn available. Last nite i also had hololive but i lost that this morning.

[pale verge]

Unfortunately premium doesn't allow access to that room

[pale verge]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[wheat hedge]

Hi, where is the problem with OPENVPN and AD ? It's a hell to use ....

I'll try to connect VPN with AD enum and the vpn execute fatal error :/

[silver belfry]

Windows or Linux? I just finished the room. I had problems connecting with windows and openvpn-connect. I had to use a community version of openvpn on windows. Hope this helps.

[upbeat quarry]

you first need to join the room before you can select and download the VPN file for that room

[upbeat quarry]

make sure to use the v2 VPN files

[silver belfry]

I appear to be joined. The "start" button is what is available.

[upbeat quarry]

so, OK then, or not?

[wheat hedge]

Kali Linux issue. Here's what I've tried so far:

1. Downloaded the OpenVPN config file (enumerating_ad_v2) from my account page after starting the room
2. Attempted to launch the VPN in my Kali VM → received an error and the connection keeps exiting
3. Configured DNS in Network Manager with the THMDC IP and updated /etc/resolv.conf with the nameserver
4. Restarted everything but still encountering the same problem

The error I'm getting is: "Error: problem with tun vs. tap setting"

[forest tulip]

understood.. thank you for the clarification.

[scenic torrent]

Gave +1 Rep to @pale verge (current: #352 - 22)

[silver belfry]

I am joined to the lateralmovementandpivoting room and still DO NOT have access to the ovpn file. I even tried leaving the room and rejoining.

[upbeat quarry]

I guess you cleared your browser cache and reloaded the web page, right?

[upbeat quarry]

I suggest you regenerate the VPN file and try again
check the new VPN file is different (you can compare the MD5 hashes for that)

[wheat hedge]

ok I'll try

it's the same issue

[upbeat quarry]

you are running only one instance of THM VPN, right?

[wheat hedge]

yes

[silver belfry]

Just tried and still no option to download the ovpn.

[upbeat quarry]

I find it strange that your VPN file for Breaching AD is not v2
about lateral movement, I suggest you leave the room, wait 2-3 minutes then join again: hopefully your VPN file appears after reloading the web page

[upbeat quarry]

sorry, but what do you mean with the screenshot?

[wheat hedge]

I've regenerate the enumerating_ad_v2 and download this file.
and them try to launch this VPN and I've an error with the VPN.

I've try in my kali linux or parrot or redhat it's the same issues...

[upbeat quarry]

the regenerated file was different, right?

[wheat hedge]

this is the last line of executing vpn

[wheat hedge]

yes is it

[upbeat quarry]

check screenshot: a user reported in the past for this room that changing enumad for tun did the trick, and I think their error was similar to yours
please provide feedback
and if it works, do not ask me later why 🙃

[wheat hedge]

Thanks, but why this problem? Can't THM fix this?

I spent part of the morning and my lunch hour looking for a solution before coming here to cry lol

[upbeat quarry]

my view:

• using THM VPN introduces a range of issues beyond THM control
• using THM AttackBox would be the preferred way, as all issues are under THM control

[silver belfry]

Leaving and rejoining didnt work. Still only have access to the 2 ovpn files. I also tried with the holo room since i had access to that yesterday but not today. Also didnt work.

[wet abyss]

Is there any issue with logging in for now? I can't seem to get to the 2FA part, it just redirects me again to the login page. I've tried a different browser with no luck.

[wraith saffron]

I am also having the same issue

[naive glen]

same issue. After login the 2FA-part is shortly loading, but then gets back to the normal login page

[torn island]

Same problem

[night tinsel]

Hey!
I paused my TryHackMe subscription for a month, and now that I want to use it again, I noticed my sub still shows as active — but I don’t have access to Premium anymore 😅
Could someone help me fix this or check what’s going on? Thanks a lot! 🙏

[summer python]

yo there is a way to put my tryhackme on french ?

[pale verge]

Don't think theres a way to do it that's built into THM so you'd probably have to use a broswer extention to do it for you

[pale verge]

Have you purchased another month?

[summer python]

no but like my site

not the vm

there is a lot of things to read but my english is kinda mid yk

[pale verge]

Yeah you need a broswer extention to translate it

[summer python]

oh alright alright ty

[pale verge]

No worries

[night tinsel]

According to my subscription page, my plan is still active and set to renew automatically on November 9th, 2025 — so I haven’t purchased another month because it looks like it’s already active.

[pale verge]

Ah alright, and you dont have access to premium features?

I'd contact them via https://tryhackme.com/contact

[night tinsel]

Alright, thanks!

[short pumice]

I have just contacted them about this, they say they are aware of this bug and trying to resolve it

As I said to them, I have tested with different browser, different devices, with VPN, custom DNS or not, no extensions, private navigation, changing networks... So probably their end

[naive glen]

thanks for the information

[scenic torrent]

Gave +1 Rep to @short pumice (current: #3230 - 1)

[naive glen]

I just tried it and now it works again🥳

[short pumice]

Great, I was starting to sweat for my streak

[upbeat quarry]

I do not know what is wrong
i have assumed so far you are using your own local VM A useful test would be for your to access the network using THM AttackBox
if you do make that test, make sure you have no other THM VPN instance running
please provide feedback when doing so

[river tide]

how can one get access to more soc simulator scenarios or threat hunting scenarios iam already a premiunm subscriber

[calm lynx]

here, just keep in mind that most of the scenarios are add-ons
https://tryhackme.com/threat-hunting-sim/scenarios
https://tryhackme.com/soc-sim/scenarios

[tame dagger]

My openvpn connection randomly stopped working no matter what server i'm on, Im pretty Kali savvy but this is really not making any sense.

Where do i go

[upbeat quarry]

I guess you regenerated the VPN file already, right?

[queen tangle]

I just purchased the annual premium and when I try to enter a premium room the page goes completely blank, even if I reload it I have to open another tab to exit there, any solution?

[near cove]

I just had this problem, try to open a new browser tab

And relaunch the website

Not just a refresh

It worked for me

With a new instance of edge

[queen tangle]

it worked

tyy

[vale viper]

Hi, I would like to remove my Google email ID from my THM account (as I have logged in via google) and create a new account. However, I want to transfer all the data from my current account to the new one. Could someone please assist me with this? It’s urgent.

[wind wedge]

It’s not possible to transfer progress to a new account. However if you contact [e-mail]

We can swap the email over

[vale viper]

Have sent an email to the one you mentioned.

[silver belfry]

Thats a great idea! I tried it from a thm attackbox. Results from attackbox is the same. Wierd i am only person with this issue.

[visual sparrow]

hello guys i have a problem can anybody solve ?

when i open my VM this message appear "Oh no, an error occurred while starting VM: You already have a machine running in this room. Terminate it before deploying another machine." I already check my previous machine if its open or not but all are closed 🙁

[opaque grove]

Hi, the Lateral Movement and Pivoting Room (Part of PenTest+ learning pathway) has been unusable for many days now. Every time I start the network and attack box, I can't ping the DC, and I don't have a lateralmovement network as I used to. Seems like it's been dead since the AWS outage. Can somebody please fix it? Thanks

[dire yew]

Hi, I'm unable to start any machines , keep getting Expired machine, and they asks me to subscribe now , it's not the attack machine so it's not about the free hour , it's the vulnerable machines , why is that?

[queen tangle]

Hey, I previously had a Discord account to which I linked my Tryhackme account, but I lost it and now I need to unlink it, could you help me?

[ember bane]

Im doing the exfilnode challenge and have completed 85% of it. The 2 questions remaining, are related to times, I am 100% sure my answers are correct, and I found a writeup online which has the answers which match mine, but the page says my answers are wrong. Has anyone encountered this?

[safe granite]

i can't access the target site on the creative room, i enter the ip address with the port and it redirects to creative.thm but the page never loads i get this message "Hmm. We\u2019re having trouble finding that site. We can\u2019t connect to the server at creative.thm." any advice? ping and nmap work fine and i also added the ip to etc/hosts

[steep topaz]

Can someone here assist me with a billing issue? I cancelled/deleted my account, but still got charged for a year. I can't login to cancel since the account no longer exists.

[opal pecan]

Can you email [e-mail], they should be able to sort it for you.

[opal pecan]

I’ll ask the room creator to check the room.

[ivory spruce]

Normally, you can ask a mod to do it for you, but if you lost your account, I'm not certain how that would look like. Do you know the discord name of that account at least?

[ivory spruce]

Have you checked if your premium subscription was activated? There are rare cases when it doesn't go through in real-time and you'll need to check with THM Support to sort it out.

[gloomy hatch]

Just wanted to report some typos that might throw some newer or more literal people off.

https://tryhackme.com/room/alerttriagewithsplunk?taskNo=2&sharerId=636b18751384c5004a241aab

The logs for this task are located in the Splunk index win-alert.<

"win-alert" should be "linux-alert" for this task.
Same thing down in Task 4, "web-alert"
Just confused me for a bit; otherwise great, great room.

[shell rapids]

Lateral movement and pivotong AD room. DC unreachable using Attackbox

Any solutions?

been experiencing this for a couple of days. I followed the setup correctly thanks

[visual sparrow]

thank you soo much sir

[scenic torrent]

Gave +1 Rep to @lofty latch (current: #354 - 22)

[old dome]

hi, i run kali linux on vmware , but sometimes it just freezes during use where i ccan't do any mouse/keyboard inputs, yet i'm able to see the background tasks running. anybnody knows why?

[ivory spruce]

How much disk size and RAM did you allocate to your guest? How much disk size and RAM does your host have?

[old dome]

i have 32gigs of ram, 300gb free space on host

[ivory spruce]

How about your kali VM?

[old dome]

9.2gb ram on linux, 100 gigs of free space allocated

[upbeat quarry]

Looks that issue has been fixed: #enumerating-ad message

[upbeat quarry]

I am really surprised that, after leaving/joining, you do not have a v2 VPN file for Breaching AD
when using THM AttackBox, can you check the directory which appears on the desktop as per screenshot, and the file inside, which is the v2 VPN file for that network: /root/Desktop/NetworkConfigs/breaching_ad_v2.ovpn

[harsh valve]

I want to buy the subscription but the problem is I am from India and I have no MASTERCARD or VISA that is needed for payment. Then how can I buy the subscription? Anyone help

[upbeat quarry]

are you using THM VPN or THM AttackBox?

[upbeat quarry]

can you share your /etc/hosts file please?
also, are you using THM VPN or THM AttackBox?

[upbeat quarry]

I suggest you leave the room and join again a few minutes later
if that does not work, please share ls -l /root/Desktop/NetworkConfigs in THM AttackBox

[fathom hinge]

its been more than 24 hrs when will #exploiting-ad lab will fuction Prply

[upbeat quarry]

are you using THM VPN or THM AttackBox?

[fathom hinge]

THM VPN(exploitad vpn)

even i tried wih attackbox

its same

[upbeat quarry]

do you have a v2 VPN file to download?

[fathom hinge]

yes

[upbeat quarry]

can you please share running that file with openvpn?

[fathom hinge]

yea done its same i cant connect with the lab

[upbeat quarry]

please share here that output

[fathom hinge]

https://ibb.co/67ZGdcTr

its look like its keep on trying next server to get connection
yesterday i got the connection but inside that i coudn't able get connect with any server
its like im getting 100% packet loss if i ping the listed server its like its not even alive

[upbeat quarry]

VPN connection not succesful (you want Initialization Sequence Completed towards the end)
I suggest you regenerate the VPN file After downloading it, make sure it is different from the previous one (you can just compare their MD5 hash with md5sum)
then run openvpn again, and share the output here
also, please verify your THM account with Discord using the link coming below, so you can upload screenshots to THM Discord (people do not trust external links 🙃 )

[west chasm]

@fathom hinge

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 25, 2025, 9:59 AM

[fathom hinge]

okay thanks idk its working now

[nimble oar]

It is so funny, echo want to help me but if i ask something i get: "I can't help you with this"

[remote crescent]

hey, im making a thm room but the task download wont go to the vm does anyone know the fix?

[old dome]

i need help!!!

i can't do any keyboard/mouse inputs ! im using vmware workstation, it always happens at random intervals and i have to restart my vm every single time!

[upbeat quarry]

you are creating a new THM room or you are going over the tasks of an existing THM room?

[remote crescent]

new thm room

[upbeat quarry]

please provide details about these background tasks

[old dome]

im able to see my cpu / memory fluctuate, the timer in the tryhackme victim machine is still running etc;

[upbeat quarry]

did you check the THM resource about creating a new room: https://help.tryhackme.com/en/collections/3665115-room-creation ?

[old dome]

but i am unable to register any inputs

[upbeat quarry]

could it be it is just that your VM is not capturing your keyboard and mouse inputs? hence, your VM is not really freezing, it is doing its business and ignoring your inputs?

[old dome]

maybe, but this happens at random intervals

it fixes itself upon a hard reboot

[remote crescent]

huh

[upbeat quarry]

I do not have recent experience with VMWare products, as I run my VMs on Virtualbox, but I am pretty sure the principle is the same: you have to give a signal at times to the hypervisor (VMWare, Virtualbox) that your mouse and keyborad inputs are meant for the VM and not for the host, and reverse that situation when needed
for instance, in Virtualbox, you switch the inputs from VM to host by pressing the right Control key (by default)
I am pretty sure that VMWare works the same way, and that the fact your problem happens at random intervals, possibly, is due to you pressing unknowingbly the key that detaches the inputs from the VM back to the host, hence giving the impression of the VM freezing
I would search the internet (google, chatGPT, etc.) about variations of something like "capturing keyboard inputs to VM using VMware"

[upbeat quarry]

meaning?

[remote crescent]

i did it was all ogood

[upbeat quarry]

i. e. problem solved?

[old dome]

@upbeat quarry i appreciate your time and help, thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1039)

[remote crescent]

sno

[upbeat quarry]

there is a channel in THM Discord dedicated to room creators
I suggest you gently ping a mod, like KGB or DKob, and ask them to assign you the role that will allow you to access that channel
other channels, like #site-support, do not have much about new rooms

[weary radish]

whats going on here lol?

[upbeat quarry]

this for me

[weary radish]

hmm ill try different region i guess, i tried rebooting and same result

got it working now

[wind wedge]

Which region was you in when it happened?

[gaunt swift]

Hey who should I reach out to about my subscription not being active?, I've created a ticket for this and it's been about 2 hours (not sure what the normal wait time is)

[wind wedge]

If you put a ticket in that’s fine. We don’t work weekends but should get round to it on monday and we can extend the time on the subscription

[uneven juniper]

Hi when I’m using start machine attack box after 10 min or more it it gets disconnected and says “failed to connect to server”, and then when I’m trying to reconnect it doesn’t work. Any solutions?

[frosty patio]

I am having issues with the text appearing in the attackbox. I was able to get that user name to appear, but when I get to the password nothing is appearing. I have cleared cache,used Chrome & Firefox. This is very frustrating

[stoic orchid]

hello guyd

I am looking for anyone with whom I can do the red team pathway with. Just like going through that together

[flint hawk]

Hi currently in the PenTest+ path in the Lateral Movement and Pivoting room. I ran into this issue when performing the command "nslookup thmdc.za.tryhackme.com 10.200.74.101" where it produced this ";; communications error to 10.200.74.101#53: timed out." I have restarted a couple times now and I even went to the different room with similar strcuture and I ran into the error. I am currently using attackbox. I can confirm that I was running the room perfectly fine last night

[ember osprey]

This is normal , password should be invisible

[ember osprey]

#red-teaming-path

[flint hawk]

Nvm it works now, I had to go put for a run and came back and jt loaded correctly

[uneven juniper]

If anyone can help it will be greatly appreciated:)

[hoary ember]

Hi all, in the exercise of room hashing basics, the resulted passwords created by hashcat are not accepted!!

It is room password cracking

[lofty latch]

Show me the task, the command you did.

type "/verify" and get your thm token in your "My account" page so you can send pictures. Also do it in #room-help

[upbeat quarry]

What is your browser?
Can you try again after disabling all browser extensions, clearing browser cache and reloading the web page?
Also, please start the VMs and provide feedback for these 2 roms, where the target VM should open on the right in Split View:

• https://tryhackme.com/room/windowsfundamentals1xbx
• https://tryhackme.com/room/windowsfundamentals1xbx
  for feedback, please provide screenshots For that, you first need to verify your THM account with Discord using the link coming below

[west chasm]

@uneven juniper

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 26, 2025, 9:02 AM

[junior agate]

whenever i try to open the go premium page the page does not load and i see is a blank white screen

i cleared my browser cache logged out and logged back in but this error persists ... any help?!

[pale verge]

Try this
https://tryhackme.com/why-subscribe

[junior agate]

still same problem ... the page loads and then in a sec goes blank

[pale verge]

That's weird, what browser are you using?

[junior agate]

firefox

[pale verge]

Try it in a private window

[junior agate]

does not work
i tried in chromium and it works perfectly ... thank you

but weird problem

[scenic torrent]

Gave +1 Rep to @pale verge (current: #336 - 24)

[pale verge]

That is very weird, must be something to do with firefox then

[junior agate]

yes most probably

[deep carbon]

is something wrong with the site that im getting this error? i even pressed the help button and typed in basically how to get the answer but i still get this error or w/e this is

[pale verge]

What room are you on?

[steady crow]

The rooms are buggy today or recently idk, but I tried practicing today, couldn't even do much because either the vpn or the room server side was lagging and I couldn't refresh, had to either reconnect vpn or terminate machine and start it again.

[earnest helm]

This has been happening to me too.

Not every time, though. Sometimes it's fine, sometimes it goes for a while before disconnecting, sometimes it disconnects pretty quickly.

[steady crow]

Yeah, I don't know where it comes from though

Maybe a staff should report that problem

[wind wedge]

I haven’t noticed any issues. What’s happening?

[fluid yarrow]

Is it possible to mute the notifications on the website? Such as when answering a question correctly?

[deep carbon]

sorry took a break cause i couldn't figure it out but im on Nmap: The basics

[steady crow]

Maybe the problem has been happening from recently, like when you launch a machine at some point it starts lagging, for example I logged in a shell from a room called Archangel, logged in as barry and the shell was lagging so much that I couldn't even type, then it fixes itself for 10 seconds and then breaks again, like that and the last time it broke it broke forever and i just gave up on the room, happens on many other rooms too, I don't know if it's a problem from me or the server side from the room or the vpn

[burnt gale]

If you mean the audio cues on answering the questions then yes.

https://tryhackme.com/manage-account/preferences

[robust summit]

idk if I'm supposed to be asking here but

why didn't I get the sapphire league badge?

[robust summit]

I became the 1st on the league about 40 minutes before it ended and stayed 1st, I kept track of leaderboard until the end

[steep trellis]

I have the same question about the bronze league badge..

[calm frost]

This league system why I m not in the diamond league

[onyx vector]

I have same issue i finished 4th in gold league and somehow I am still in gold hope they fix it

[glass palm]

yours fix ? my account also didnt get a badge i got the email but no badge

[strange glen]

@ember osprey
I came first in the Ruby league, but didn't receive my badge yet. Kindly let me know when will this be granted to me ?

Also, did other folks who landed first in their leagues face the same issue ?

[calm frost]

Yes yes everyone

[wind wedge]

We're aware of the league issues and are actively resolving this issue. I will provide an update once fixed

Thank you for your patience

[robust summit]

nope, I still don't have it

[robust summit]

I'm sorry to be the one bringing bad news but the matrix system doesn't update either, it haven't for a long time

[opaque grove]

Hi @upbeat quarry I did try leaving and joining several times, not successful. "ip a" doesn't show a latermalmovement interface either. Is this what you requested? Is this what you requested?

-rw-r--r-- 1 root root 0 Oct 27 09:17 latmov_ad_v2.ovpn
drwxr-xr-x 2 root root 4096 Oct 27 09:17 logs
-rw-r--r-- 1 root root 56 Oct 27 09:17 README.md

[glass palm]

Thank you

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #53 - 206)

[wind wedge]

I'll raise with the team

Is there a specific level in particular or just all of it?

[remote crescent]

i click downalod tasks but it doesnt go into the vm how to i make it go to the tryhackme vm?

[robust summit]

the entirety of the matrix stopped changing for like a month or so

[upbeat quarry]

thanks for that feedback
ls -l shows the latmov_ad_v2.ovpn file is empty (0 byte), and that explains why you do not get the interface for lateral movement network
I suggest you troubleshoot that situation by running tryconnectme
if that does not go nowhere, download the VPN file from your profile page (I suggest you regenerate it before downloading) and then run openvpn with that VPN file

[scenic torrent]

Gave +1 Rep to @opaque grove (current: #3234 - 1)

[opaque grove]

Hi @upbeat quarry , I am using the AttackBox, not my own machine. When running the tryconnectme wizard, what should I type here for the IP address?

"If you confirm that you are only using the AttackBox, press [Y], otherwise, the debugger will quit: y

Great! Let's continue...

In the network room, look at the network diagram and please provide an IP address being shown to you there.
Format should be X.X.X.X: "

[upbeat quarry]

check screenshot, which corresponds to my topology
in my case, I would provide 10.200.74.101, but it would work too if I would provide any other IP documented in the topology as they are all part of the 10.200.74.0/24 subnet, which is what matters here
I think that with v2, all users have the same IPs, in that case you would have the same IPs like me

[opaque grove]

OK thanks @upbeat quarry for your explanation. Here is the full output from the tryconnectme wizard:

"If you confirm that you are only using the AttackBox, press [Y], otherwise, the debugger will quit: y

Great! Let's continue...

In the network room, look at the network diagram and please provide an IP address being shown to you there.
Format should be X.X.X.X: 10.200.74.101

Trying to ping the VPN server at 10.200.74.250...

Mmm, it seems like I can't reach the VPN server of your network room.
We will have to debug that! Let me run some diagnostics....

Please specify the OVPN connection as listed in Task 1 of the network room: Lateralmovementandpivoting

L I don't seem to be able to find that VPN connection.
Please make sure that you have joined the room and that the network has started.
You can visit Profile -> Access -> Networks and use the dropdown to see if you have the Network VPN Server.
If you have joined the room and still don't see the VPN there, please contact support.
root@ip-10-10-63-26:~# "

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1040)

[upbeat quarry]

the OVPN connection to provide is latmov_ad_v2, as per screenshot
I know, it was not obvious, I stumbled on that too at the beginning 🙃

[opaque grove]

That's great @upbeat quarry . I have the lateralmovement network interface back 🙂 Thanks so much. I also now know how to resolve this using the tryconnectme wizard if I get this problem in the future. Thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1041)

[upbeat quarry]

the real check is to make sure you can ping the IP of the DC

[opaque grove]

Yep all good @upbeat quarry thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1042)

[lyric spruce]

Is the breaching active directory room still not working?

[upbeat quarry]

it is working
check the latest from here: #breaching-ad message

[lyric spruce]

Thank you so much!

[glass palm]

you guys badges got sort?

[earnest helm]

Hmm... My attack boxes have been freezing up on me this morning

I'm going to have to get to the bottom of this, because it's really slowing me down

[wind wedge]

Which country are you based in and have you tried swapping region?

[earnest helm]

I am based in the US. I have not tried that. I was not aware that was an option.

[wind wedge]

If you go to manage account. You will have the option to switch region. More will be coming soon

[earnest helm]

I'm using US East, which is very close to me.

[wind wedge]

Is it a specific room in particular causing it or just attackbox in general?

[earnest helm]

I haven't tried more than one room today. I was having general issues yesterday, though.

[rough drum]

why is hint not working guys??

when i click hint it does not allow me to click

[opaque grove]

Hi, THMWRK1 seems to be dead in the "Exploiting AD" room. I can ping all other hosts on that network, however THMWRK1 is not responding to pings or accepting SSH. This is for the first task in the room.

[uneven juniper]

I'm using firefox, no browser extensions, and I cleared my browsing cache

[upbeat quarry]

how about the 2 rooms I mentioned earlier?

[light epoch]

Hello, I was the top Bronze yesterday and I received an e-mail that I am promoted to Silver. Now I am In bronze again T_T, I don't understand.

[upbeat quarry]

that machine does not reply to ping
I suggest you nmap that IP to check whether port 22 is open

[rustic sigil]

I just got a response back as the same thing happened to me as well. They said its a known bug they are working on currently to address

[uneven juniper]

first link it got disconnected after 10 min, second was fine and didn't disconnect

[upbeat quarry]

do you have good network connectivity? what is the latency (in milliseconds) that you get you ping the google.com for instance?

[uneven juniper]

8.215 milliseconds (ms) on average

[upbeat quarry]

that is pretty good 🙃
what is your Server Region under Profile > Manage Account > Account Details?
do not confuse it with Access via OpenVPN though

[uneven juniper]

us east (N. Virgina) I'm in toronto canada XD

[upbeat quarry]

I do not know why it is not working for you
I suggest experimenting:

• instead of Firefox, try another browser like Chrome (without any extension)
• switch to another region, i. e. Europe That may not be optimal, but if it works it will certainly be better that what you are currently experimenting 🙃

[rough totem]

Is there a CSV template for bulk importing users?

[uneven juniper]

I tried firefox and safari both not working:(

is there any dns settings or anything I should change

[upbeat quarry]

nothing to change: if you can access the THM web page and start the target, all the rest is handled inside the browser (through something called Guacamole)
of course if you start playing with advanced configuration of the browser, things can certainly go wrong
also, if you have special applications filtering your traffic, like security checking what you are using, that may play a role
the strange thing is that it works for you for 10 minutes, and then it fails, which looks like a performance issue more than a configuration issue
on the subject of some security application controlling your browsing activities, are you connecting from work or home or a public place or what?

[lapis gull]

Website login does not seem to be working after creating a new account? 500 error from onboarding. I know it says to report on the website but there does not seem to be an option to report issues with the login page? In a room full of people having the same issue

[uneven juniper]

from home:(

[upbeat quarry]

what is your setup: Windows or Linux, a VM running on a hypervisor, etc.?

[uneven juniper]

i'm using the in browser start machine, and i'm on a macbook aair

[upbeat quarry]

have you tried changing the Region from US-East to Europe already?

[uneven juniper]

i'll try that and i'll let you know how it goes

thanks for your help:)))

[light epoch]

Thank’s a lot

[scenic torrent]

Gave +1 Rep to @rustic sigil (current: #3235 - 1)

[outer crater]

How do I report something wrong with a room?

[feral gulch]

hello there
is it normal to have a 500 error and an onboarding in error ?

https://tryhackme.com/500 after the onboarding I only a a redirection on this url

[feral gulch]

have you seen a solution ? I have the same problem

[brittle plinth]

As ive seen some context - is there an issue with internet connection in thm vm's? Can't do most of the rooms which have machnies to use

rn in Threat Intelligence Tools

[lapis gull]

Yes I found a workaround

Visit https://tryhackme.com/welcome and click to join the course, this stops the site from sending you to /onboarding and lets you join other courses

[feral gulch]

nice ! thanks a lot

[lapis gull]

:)

[upbeat quarry]

the target VMs are designed so that they do not have internet access

[upbeat quarry]

you can do that in #1333993673381253162 , taking into account the guidelines documented here: https://discord.com/channels/521382216299839518/1333994601157103626

[brittle plinth]

The thing is that this one opens in split view - net connection is necessary to to solve it

[upbeat quarry]

for which question do you need the internet?

[brittle plinth]

Task 5 - i do have to check email.eml found in machine via phistool

As well in the end of the task there's To solve the task, open the email using Thunderbird on the attached VM, analyse it and answer the questions below. - while im opening thunderbird the page is not loading 😛

Like i mean, it opens up the local .eml, but cant go to the phishtool via anything to check it out\

Ah okay i see what you mean, i dont have to use phishtool at all **** sorry i have to in last 2 questions

[upbeat quarry]

the room material explains phishtool, but you do not use it for answering the questions at the end of th task
about thunderbird, check screenshot: do you have something else?

[brittle plinth]

I do have it opend yeah, ive focused about PhisTool too much then

[hoary sinew]

hi i was going through the 2024 advent challenge section and in the shellcode challenge i wasn't able to paste the code into powershell

[upbeat quarry]

maybe Ctrl+Alt+Shift is what you need?

[hoary sinew]

i can try

its showing me the clipboard with a space to paste the text

[upbeat quarry]

yes, and I thought that would be what you needed for that pasting issue?

[upbeat quarry]

try Right-clicking into the powershell window, for pasting what you copied in the clipboard window

[hoary sinew]

tried that it didnt work

[upbeat quarry]

each time I have used that clipboard box, I have had to relearn how it works 🙃

[hoary sinew]

so if i put the code in that white area it can paste the code into powershell?

[upbeat quarry]

yes

[upbeat quarry]

maybe for pasting, if right-clicking does not work, select the lines from the clipboard box before right-clicking, or some variations of that

[hoary sinew]

isee

[upbeat quarry]

which room/task?

[hoary sinew]

advent 2024 task 14

the method actu;ally works

thank you

[plucky forge]

alright nvm i have no idea what has been going wrong for the last 15 minutes lol

[livid star]

I've been facing a problem in opening the hints for questions and its going on for 2 days whats the solution?

[orchid silo]

Man I don't know what's going on with ya'll service lately, but any time I need something like elk or splunk I have to wait 10 minutes between VM launches. And even then it can not work. You put in a ticket and get absolutely no response for over a week. I'm about to just switch to hack the box. I only have so much time to study and I'm spending 50% of my time trying to get VM's to cooperate. and as a premium customer I get no response from Help Desk?
ADD A FEATURE TO REPORT AN ISSUE DIRECTLY ON A ROOM
Last week I tried to do a room that required logs to load into wazuh. It failed 4 times. I was waiting 20 minutes after VM launch before even interacting with it and still nothing. It's also a room that is a requirement to get your SAL1 certification. SO not ideal.

[wind wedge]

Can you name the rooms these are happening to? Some do require 5 minutes due to the service needing to load.

I can also see that one of our members responded to you 2 days after you submitted the ticket and even asked if you still require support today

[orchid silo]

I've got no emails from you regarding the ticket

[orchid silo]

I have an email asking me to give my insights on "Pre-Security Path" as my insights will help us level up the experience for future learners

[wind wedge]

You must have used another email

[orchid silo]

Ahhh credit where credit is due. Came in today at 3AM US time. So apologies there. I'll gather the rooms

Rooms that had issues:
Endpoint Security Monitoring:

• Windows Event Logs
• Sysmon
• Monday Monitor
  All of these I could get the VM to launch, gave it plenty of time, 10+ minutes and logs either did not match the challenges or were missing completely

Security Information and Event Management:

• ItsyBitsy
  Logs missing completely

Monday Monitor was especially strange as it had a Wazuh alert for a rootkit installed on the date of the vm launch.

The rooms that have you download the logs as task files work flawlessly. Consistent approach.

[gaunt ivy]

Anyone been having issues with the leaderboard? I finished in 6th place yesterday in Sapphire, somehow still were in sapphire, then now at night I got moved to Ruby somehow. Did my 2 rooms to enter but it didn't register even after waiting for a good amount of time

[grave crow]

Yeah, I'm also having issues. I finished 2nd place yesterday in Gold. I was in 1st place after the promotion when competing in the new league, but right after I received an email saying “Welcome to the Platinum League,” I was somehow out of the league again. Now it just says “Solve 2 rooms and grab your Sapphire spot!” even though I’ve completed several rooms today - nothing is updating.

[rough drum]

guys why dont my hint appear when i press the hint button

[glass mural]

when you click on the hint then click on echo he will give you the hint

[proper panther]

same issue here...

[onyx vector]

Same here I think i grinded too hard the whole league system broke

[proper panther]

lol 😄

[opaque grove]

Hi @upbeat quarry , I requested the credentials from distributor but the SSH command just hangs. Here's some nmap outputs also showing 10.200.71.248 (THMWRK1), compared to other hosts in the network 10.200.72.201 (THMSERVER1):

root@ip-10-10-38-82:~# nmap 10.200.71.248 -p 22
Starting Nmap 7.80 ( https://nmap.org ) at 2025-10-28 09:56 GMT
mass_dns: warning: Unable to open /etc/resolv.conf. Try using --system-dns or specify valid servers with --dns-servers
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.13 seconds

root@ip-10-10-38-82:~# nmap 10.200.72.201 -F
Starting Nmap 7.80 ( https://nmap.org ) at 2025-10-28 09:57 GMT
mass_dns: warning: Unable to open /etc/resolv.conf. Try using --system-dns or specify valid servers with --dns-servers
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
Nmap scan report for 10.200.72.201
Host is up (0.0024s latency).
Not shown: 93 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
135/tcp open msrpc
139/tcp open netbios-ssn
443/tcp open https
445/tcp open microsoft-ds
3389/tcp open ms-wbt-server

Nmap done: 1 IP address (1 host up) scanned in 1.30 seconds
root@ip-10-10-38-82:~#

[upbeat quarry]

check my screenshot: I think there is an issue with the documenting of the IP for THMWRK1

• on the topology it says 10.200.71.248
• but it should be 10.200.72.248
• all these IPs should be in the 10.200.72.0/24
  hopefully it works for you that way, like it worked for me

[opaque grove]

Ah I see lol. I can connect to 10.200.72.248 over SSH. Thanks @upbeat quarry

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1047)

[rough drum]

did this setup change

[sharp mesa]

Will someone tell me what I should do, become a pentester or a social analyst? My coding skills are not good but I wanted to do something in life. Everyone in my class used to make fun of me saying that you will not do anything in life, that is what broke my confidence. I felt that I will not be able to do anything, someone please give me confidence or guide me please.

[naive dust]

why thm dosnt works ?

[wraith cargo]

Same

[winter quartz]

Anyone help me out please

[opaque grove]

Hi, no matter what I try SSH onto THMWRK1 in the Persisting AD room returns "permission denied", for all credentials retrieved from distributor.za.tryhackme.loc

[wind wedge]

What's the issue?

[naive dust]

the recent tab loaded forever , now it seems to be fine

[wind wedge]

Have you tried updating OVPN?

[south fog]

yo guys, has anyone ever had a bug (i guess) that if you start a machine and reload the page then the machine IP doesn't show up? if i press start machine again it says it's already been activated.

[signal abyss]

Idk if anyone can help me on here, this is a pretty ghetto way to have "support" for THM. Anyway windows powershell task 7 won't work. I have the hash but it doesn't complete the task. Unless there's multiple hashes and I'm finding the wrong one Idk what else I can do. Any help?

[topaz cliff]

Hello
I have an openvpn issue some one already got this one ?

• I have no tun0
• Other ovpn HTB/offsec works well only have the issue with THM
• HTB UDP work
• Various server -> same error
• added data-ciphers AES-256-CBC in the config file -> same error
• No 10.10.10.10 -> route in my local network ofc

[dire yew]

Since when only intermediate and advanced experienced leveled users can play koth, I'm SAGE and can't play ?! Who can ?

[upbeat quarry]

I have the same issue in Persisting AD: no access to THMWRK1 via ssh or rdp using the credentials from distributor.za.tryhackme.loc
I have reset the network 2-3 times
I am using THM AttackBox

[upbeat quarry]

I suggest you regenerate the VPN file and try again

[upbeat quarry]

make sure the window is wide enough for the complete hash to be displayed in the powershell terminal
otherwise, the hash is truncated
sign of that iirc: 2-3 dots appended after the hash

[signal abyss]

That was it. Thank you!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1048)

[grand moth]

Hello. I'm having an issue. Trying to do a practical example and the site needs access to my clipboard. I have tried everything I can think of clearing cookies, etc. Resetting permissions and hoping the website asks for access again (it hasn't), and now I even switched to my laptop and Linux but seems my firefox doesn't have the clipboard in permissions

[upbeat quarry]

maybe this helps: #room-help message

[grand moth]

It did not... my settings are both true. I'm trying to copy the IP address then take it to IP scanner but when I click on IP scanner it says I don't have permission and need to copy the IP address (Defensive Security Intro)

I could be dumb also, jury still out on that one.

[upbeat quarry]

what is the context: copy/paste data into THM AttackBox?

[grand moth]

No, it's the Simulating a SEIM, copy the IP address in first tab, go to second tab (IP Scanner). I copy the IP, click the second tab and get this, "Unauthorized Access
You need to copy the malicious IP before you can open this tab"

I have tried ctrl+c, right click copy, reseting permissions, clearning cookies and data, everything and still cannot get it to work

Restarted the room also

[upbeat quarry]

sorry, but you are working with the SOC simulator?

[grand moth]

Yes

[upbeat quarry]

check this: #soc-sim-help message

[grand moth]

Thank you. I got it working.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1050)

[viscid grotto]

is active directory basics machine down

tried 3 times and stil blue screen of death

[dire yew]

Why can't I play koth even so I'm SAGE ??

Anyone know why it can't be open ?

[upbeat quarry]

check this: #general message

[upbeat quarry]

I just got it working
my Server Region is currently Europe, if that helps

[viscid grotto]

let me try switching to europe

[viscid grotto]

thanks man it works in europe server

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1051)

[opaque grove]

Hi @upbeat quarry , I've tried again this morning and still not letting me get an SSH connection. Can this be reported as a room bug for investigation seeing as you get the same thing? here's the output when I nmap THMWRK1 and try to SSH onto it:

root@ip-10-10-16-136:~# nmap -n -Pn -p 22 THMWRK1.za.tryhackme.loc
Starting Nmap 7.80 ( https://nmap.org ) at 2025-10-29 09:57 GMT
Nmap scan report for THMWRK1.za.tryhackme.loc (10.200.73.248)
Host is up (0.0017s latency).

PORT STATE SERVICE
22/tcp open ssh

Nmap done: 1 IP address (1 host up) scanned in 0.10 seconds
root@ip-10-10-16-136:~# ssh za\[e-mail]
za\[e-mail]'s password:
Permission denied, please try again.
za\[e-mail]'s password:

[meager coral]

use ssh username@ipaddr

They will ask you for the access permission

Say yes

Then enter the password

[meager coral]

cause here you are recognized as a root user

[upbeat quarry]

I tried again this morning too, and same result as yesterday
I have documented my attempt here: #persisting-ad message
you can always report it under #1333993673381253162 using the guidelines for bug reporting here: https://discord.com/channels/521382216299839518/1333994601157103626
however, I never see too much THM staff interacting there, so you never know whether they are doing something about it

[upbeat quarry]

BTW, have you been able to configure DNS as per the instructions of Task 1
for me that failed, and I had to use /etc/hosts in order to associate an IP address with distributor.za.tryhackme.loc
I am curious how you managed that step

[opaque grove]

Yep @upbeat quarry I used /etc/hosts too, same IP for THMSERVER1 and distributor.. @meager coral neither approach worked thanks for the suggestions.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1052)

Gave +1 Rep to @meager coral (current: #3235 - 1)

[opaque grove]

@upbeat quarry I agree about the bug-report channel, it seems painfully slow to get a response.

[old dome]

how is tryhackme's attackbox vms so much faster than my kali linux vm enumeration wise?

i take 1 minute to enumerate through 4750 entries on gobuster 🙁

[wise estuary]

Guys, just a quick question. Is there any issue regarding the DNS of the "Breaching Active Directory" module?
I can't seem to connect the attack box to its DNS server, even though I follow its instructions.

[upbeat quarry]

if you cannot ping the DC IP that would be one explanation
first thing to check: do you have a breach network adapter?

[unborn jacinth]

Hello — I purchased the PT1 and need an official invoice/receipt in PDF format so my employer can reimburse me. How do i get it?

[stray mason]

idk but why its 424? maybe you could ask for the specific packet, this is so random

[twin perch]

hi, does the current cert discount + the premium members discount stack up when purchasing an exam voucher for SAL1?

[upbeat quarry]

FYI: I created the bug report (#1433133920299388970 message)
feel free to contribute and upvote, in the hope of getting more visibility on the issue , and hopefully a quick fix 🙃

[bleak ice]

anyone have issues with KOTH IPs not displaying?

[void marten]

For the past couple of days i am experiencing slow server while solving labs?

does anyone know the issue

[scenic void]

Hi anyone has this error ?? : NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.

[golden saffron]

Hi

[topaz cliff]

I did it like 10 time and tried to change the server -> same issues

[warped slate]

vm fullscreen is acting up since evening!! autopsy room

[analog jungle]

having the same issue too

[upbeat quarry]

If mulitiple VPN files and multiple VPN servers did not help, I do not know what to suggest
what is the OS you are running openvpn on?

[twin wedge]

Not sure what to do about this... Trying to start the machine and this comes up

[normal ore]

That definitely doesn't look like something that you did.

You still having it after trying it again? Does it only happen in one room?

[twin wedge]

Yes

Under SOC1 path, I'm now stuck at Yara and not able to finish it because of that

[normal ore]

i did that room. let me see if it starts for me

[twin wedge]

I restarted my browser and tried again. Now it works. WTF?

[normal ore]

Solar flares!

[twin wedge]

Grrrrr

[topaz cliff]

Yeah I'am not sure i run arch and got no issue with other VPN idk

It's crazy

[upbeat quarry]

some countries make it difficult to run UDP VPN, like Egypt or China Are you trying to connect from one of these countries?

[peak anvil]

wat

Starting your machine… please wait!
As a free user, you can only deploy 2 machines at a time (terminate the instance in undefined first). Subscribe to remove this limit.

"undefined" is literally an undefined object lmfao

clicking on it doesn't redirect me to anything, just wondering how I can terminate it if I can't go to the room.

[twin wedge]

and is this why it is so slow? Like tortoise pace slow?

[normal ore]

There's quite a long checklist that needs to be completed to answer that. You could use ping and traceroute to start troubleshooting it.

From there, you would load wireshark and capture traffic on your tun0 interface

Then correlate the packet sends and receives to see how long the data is processed on the server before returning a reply.

Or you may find that the slowness is on the network when it replies fast but it takes a while to get back to you.

[twin wedge]

Yeah restarting the browser after trying to answer questions is a pain. However when I restart it, it seems I've answered all my questions. It's weird.

I'm using Google Chrome

[jovial echo]

I'm having some issues this morning with the submission button not loading then resulting in the error message "An unknown error has occurred". Even for questions with no answers.
Sometimes it will work fine for the first couple of questions then the last 2 even though the answer is correct or there is no answer at all required will take a few tries to submit. My internet speed is the same as usual and had no issues yesterday, can anyone recommend any fixes or what to check? Thanks

[normal ore]

You can try in private mode so that the extensions aren't in the way or a different browser to be more definitive then.

you could try reinstalling chrome

[normal ore]

Try clearing your cache and cookies. If that doesn't work try a different browser and see if the problem follwos

[jovial echo]

thanks ill try that

[scenic torrent]

Gave +1 Rep to @normal ore (current: #81 - 123)

[twin wedge]

Thanks but I'll boot up to my linux SSD and see if the error happens again tomorrow. Linux system - Firefox. I'm on my Windows SSD.

[scenic torrent]

Gave +1 Rep to @normal ore (current: #80 - 124)

[muted eagle]

I had same issue. Still have. VMs don’t load in fullscreen view either. It’s server-side cause everything works good on my end. Internet speed test comes out to very fast

[jovial echo]

Yeah hopefully it goes away tomorrow, very annoying waiting a minute for easy questions to submit. I tried different browsers too same thing.

[muted eagle]

Hopefully tryhackme does something cause it does make it really annoying to have to wait on each question just to get an unknown error occurred message. Makes progressing through rooms really slow

I can’t even a join a room anymore

[covert wind]

I'm experiencing the same issue as well from my end

[jovial echo]

I'm sure it will be fine soon, maybe lots of people are using thr website today and it's a bit overloaded

[nova spruce]

yup, me too

[fossil island]

@deep trellis can i dm u ? or is it not allowed

or any available admin

[normal ore]

They are sleeping

[deft current]

Hello can someone help me with something?

I'm new and inexperienced so I don't know lot of things

[ivory spruce]

What is your concern? I'm no staff but I could probably point you to the right direction depending on what that is.

[ivory spruce]

Just drop your concern or request for assistance and someone who knows will surely chime in

[deft current]

Well , I can't say 😅 properly I don't know how

This problem was to know

Do any of u know to

Login into server ? Without getting jammed

I wanna book in a date and lots of agent use bots or hacker to exploit the page so I wanted to be first

Please help me 😭

[ivory spruce]

Book a date for what purpose exactly?

[deft current]

It's for my visa verification date for korean embassy nepal

Lots of people like agents and hackers attack the site so it either crash down or the slots are filled so 😅

I am a student so I have to be there for March intake

So can anyone help me

[ivory spruce]

Hmm.. TryHackMe is a learning platform.. so I don't think we can be of help to you. 😅

[deft current]

Oh but can u give me ideas ? How I can book slots faster than bots or agent or hackers 😅 please it will be valuable information for me

[ivory spruce]

Just make sure you are applying to the correct URL whichever agency you need to submit your requirements.

[ivory spruce]

They've put in that process to standardise it.

[deft current]

Well I have everything ready but when the site opens for date slots the site crash down or it's already filled

[ivory spruce]

You just have to keep checking for schedules then. It is what it is. Similar to when we were looking for slots to get US visa previously.

[deft current]

Ahh , thank u 😭

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 886)

[naive dust]

another day and THM has its issues

[stiff shale]

Why machines are not launching at tryhackme
Oh no, an error occurred while starting VM: PARSING_ERROR

does anybody having same issue ??

[upbeat quarry]

just started a couple of VMs in the past hour, with no issue
what happens when you just refresh the web page and start again?

[unborn schooner]

Hello, is there a solution to the full-screen issue on VMs?

[hushed vigil]

am i the only one that has issues submitting the answers into tryhackme challenge

[open otter]

I'm getting the same issues

[jovial echo]

nah its a lot of people

hopefully sorted tomorrow servers probably just busy

its kind of annoying but I found if its really not submitting you can reload the page while its submitting and when you get back its usually completed

[stiff shale]

refresh it and logout and login back

[naive dust]

nahhh , everyone

[hushed vigil]

didnt help sadly

[naive dust]

someone is doing a really hard job to prevent from us to learn cyber

[manic oriole]

Hi. In some rooms, I need to have my AttackBox on full-screen on a seperate tab in order to complete my tasks. Unfortunately, today, the VM doesn't seem to be loading up on full-screen at all and I even turned off uBlock Origin just in case. I'm currently using ungoogled chromium Version 137.0.7151.68 (Official Build, ungoogled-chromium) (64-bit).

[honest canyon]

I face the same issue

I hope they fix it soon

[wind wedge]

It's being looked into 🙂

[wise estuary]

Yes, in the attack box, the network adapter for the breachad is displayed in the ip a.

btw, I think it has been resolved. I can now ping the THMDC IP, thanks @upbeat quarry

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1055)

[wind wedge]

@manic oriole @coral charm The fullscreen is now fixed

[spark sorrel]

If tryhackme can't even fix a simple login issue for months, then i don't think it will be going to retain their customers for too long. Just like me i decided to switch on hackthebox after this bullshit website's login problem every time i try to login. They even locked me out.

I have zero hope with this wasted organisation and I don't care what excuse you're going to give. It's not the first time I myself faced this problem several times during these 6 months.

You guys told me to fill the details multiple time previously and it will then ask for two factor authentication but it's keep skipping 2FA and login fail

[balmy fossil]

In the John the ripper room the attackbox refuses to allow me to paste into it, forcing me to type all the paths by hand. I dont have this issue with any other attackbox, only this room

[honest canyon]

I appreciate your efforts thank you

[scenic torrent]

Gave +1 Rep to @wind wedge (current: #53 - 208)

[orchid silo]

I turned off echo assistant and site is running better 😆 less errors. Today I'm playing "how long to answer a question" while I wait for this weak vm to launch autopsy. 20 minutes to get the vm booted, autopsy opened and data ingested. These VM's need to be beefed up this is too slow. I know it costs more but there has to be a way to make this more time friendly.

[twin wedge]

Typing in an answer and this comes up. Really annoying after yesterday's issues.

[orchid silo]

I was getting that a lot the last couple days too. When I log in for the first time I get that as well at the dashboard

[twin wedge]

Yeah when i logged it says it failed to save my sound preferences. What sound preferences? I haven't even been there to change anything other than my profile stuff.

[orchid silo]

There's sound effects that can play when you answer questions or complete a room. You can turn it off, (and the echo ai assistant) from your preferences. I noticed the website behaving much better with that AI off

[twin wedge]

Lol someone broke TryHackMe

[orchid silo]

I had a VM that seemed like it was pwned. It didn't have any of the logs it was supposed to for the challenge and it had an active rootkit on it right at VM launch which had nothing to do with the challenge.

[twin wedge]

Weird

[orchid silo]

I was planning on taking SAL1 but with all the issues i've had on this path, I'm going to just finish the rooms and move to hack the box

Come back when they fix their shit haha

[twin wedge]

Yeah I was about to sign up for premium after my current one expires but now I'm having 2nd thoughts

[orchid silo]

Yeah I dunno. Might wait a bit. I'm sure they'll get it sorted. I'm sure recent AWS events didn't help. I wonder how they have the VM's set up in terms of what region they get deployed to. I'd like to see the option of being able to pick where to launch your VM for your challenge for latency. Also another pay tier with higher powered vm's. 4gb is not enough for some of these programs.

[twin wedge]

Yep I have a month on the current one as my friend bought it for me due to lack of funds and waiting for payday.

[dire yew]

Thx

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1056)

[topaz cliff]

No i'am from france and UDP vpn for HTB for example work well no issue on my computer. And also nmap give me an open port for the THM ip+port.

[upbeat quarry]

thanks for the feedback

• do you have the possibility of running THM VPN on another OS than arch, as a test for now?
• for VPN servers, have you tried using EU-Regular-1 or EU-Regular-2, which work for me at the moment?

[scenic torrent]

Gave +1 Rep to @topaz cliff (current: #3236 - 1)

[upbeat quarry]

2 more things

• please run THM VPN troubleshooting script from here: https://raw.githubusercontent.com/tryhackme/openvpn-troubleshooting/master/thm-troubleshoot
• check the obvious steps from THM VPN guide: https://help.tryhackme.com/en/articles/6496058-troubleshooting-openvpn-on-linux-and-mac

[violet vortex]

Hi. I keep getting this error message when working in the Active Directory room for task 4. This has been happening 2 days in a row.

[cosmic vigil]

Hi, I wanted to link my THM account to my discord
It says this token is already in use by another account

[orchid silo]

They don't monitor this channel closely in my experience. You can submit a ticket here: https://tryhackme.com/contact

[lament flame]

Okay I just got on and I'm trying to get to one of the rooms but all I'm getting is this. Every time I click the button I receive a new error. Reloading the page hasn't helped and reopening the browser hasn't helped. What's up?

[austere horizon]

It's self explanatory. The token was used on another Discord account.

[cosmic vigil]

Yeah i know
But a mod can unlink the THM account from the other discord account so i can link it to this account

Right?

[candid comet]

Happening here, also.

[muted stump]

THM has been barely usable for 2 days now

[muted eagle]

TryHackMe should issue an email to address these technical malfunctions, at least to all premium members because we are paying for a service after all. A service that has been misbehaving terribly the past couple of days. Rendering our subscription almost useless. My opinion

[muted stump]

100% agreed

[muted eagle]

It’s working a bit better for me today fingers crossed it stays this way

[drifting rune]

Quick questions. Lets say someone has yearly subscription that ends Janury 1st and buys SAL and PT1. Will the access to the website be prolonged by amount of months for each certificate thus making it until end of the June? Can user decide when they want to activate this 3 months of learning material and exam?

[austere horizon]

Yes.

[cosmic vigil]

ok, do i need to send you the token or what ?

[austere horizon]

Yes, do you also have the old discord account name?

[cosmic vigil]

Yes

[austere horizon]

DM me

[lavish aurora]

Can a person who help me

[quiet topaz]

hello, im in the room of Metasploit exploitation and im at the task 6 where you have to get a meterpreter session on the attackbox by launching a .elf payload on the target machine, the issue is, when i switch to the attack machine to access the meterpreter session, the target machine sort of reset, clear all my commands and it seems end the connection with the attack machine, can someone help me. Im thinkinf of using a VM as an attack machine so i dont quit the target machine on my browser

is this normal the target machine "reset" or idk

[tame nova]

.

[wind wedge]

What issues are you having?

It’s also difficult to email out about an issue if we don’t know what it is. Also not everyone will have the same issue. If you’re experiencing an issue then you can put in a ticket woth [e-mail]

[rigid mist]

Its bugged, I just completed it by manually logging into the RHOST and "cat /etc/shadow" to get the hash. I have heard that you can try to remote in via a VM but I have never done that and I don't know how@upbeat quarry

[quiet topaz]

i kinda fixed the issue, you just have to open 2 tabs, one for the attacker machine and one for the target, you leave the second on the target and you use the first for the attack

[rigid mist]

@quiet topaz I don't really follow. You are supposed to have two VMs running, the task is reversing an Internet TCP connection in to a target machine

that second "tab" is supposed to be the target you are hacking

[quiet topaz]

yeah i mean a hole second tab in your brower with the target open on the side view when you can dowload the payload and execute it, and the other tab with the attacker machine on the side view where you have to use the reverce tcp connection to gain access to that machine

not two side view tabs, but really two hole brower tabs on this same room

[rigid mist]

Ah okay, thanks for clarifying that, sorry for the confusion

[quiet topaz]

ur welcome

[young ibex]

can't pay with visa or debit card
:/

[rigid mist]

@quiet topaz Just redid the room. I can confirm that works Thank you!

[scenic torrent]

Gave +1 Rep to @quiet topaz (current: #2126 - 2)

[keen blaze]

Yo I'm new and would like to learn from anyone

And learn real world hacking

[lofty latch]

https://tryhackme.com/room/safezone

ANOTHER BROKEN ROOM -_-

I can reach every endpoint of this local port except the privesc part. So annoying. What a waste of frkn time.

https://tenor.com/view/rare-reeeeee-dank-meme-triggered-gif-24062717

REMOVE THESE ROOMS HOLY.

[bronze vale]

Did you login to the form or just try to go straight to /pentest.php?

[lofty latch]

Logged in

login.js shows the login creds

[spice light]

I can't copy and paste text from virtual machines on Windows (it works on Linux). mb anyone know how fix this?

[true frigate]

Can anyone tell me how long you have, after purchasing the certification, to actually start taking the test?
I want to take advantage of this 40% off sale but I am not ready to take it yet. I couldn’t find anything about this on the website.

[upbeat quarry]

for Windows use Ctrl+Alt+Shift

[spice light]

ty ❤️

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1058)

[spring terrace]

I got the PT1 and need to expense it to the company, but the Receipt is pretty lacking, would nice with an address for both THM and me?

[spring terrace]

1 year

[sudden slate]

Is anyone else having an issue where you can't connect to the Attack Box?

[analog jungle]

hi, i left the soc sim room and when i tried to resume it gave the following error:

Critical Error

RangeError: Invalid time valuePlease contact support mentioning the message above if the problem persists.
Take me home

[analog jungle]

same here

[white elbow]

i haven't been able to use the site at all

[covert wind]

I'm constantly getting this warning message and it keeps disconnecting and reconnecting. What is going on? @deep trellis

[native ferry]

anybody else getting this when trying to RDP in on the elevating movement lab? just keeps saying it conflicts with another session? and reconnect doesn't work

[marsh temple]

I need some help with my discord token. It’s linked to my old account which I no longer have access to because Authenticator deleted itself on my phone

[unique knot]

Anyone else currently getting the following when trying to start machines?

Just want to know if this is a me problem or not.

ctrl+f5 - fixed my own problem

[twin wedge]

This does not work for me on the attack box so I had to go back to the original file which works.

[deft gulch]

I am not able to use THM AttackBox. It is glitching and freezing since 15 mins ago.

I cannot even ssh to the target machines via ssh

[deep trellis]

Where are you located, and in your profile settings, what server are you connected to?

Under VM and VPN settings

[oblique lagoon]

In the room https://tryhackme.com/room/threatinteltools on task 6, the intended answer is no longer correct for "What is the listed domain of the IP address from the previous task?"

[sleek shuttle]

What does "an unknown error occured" supposed to mean? Is it just internet connection or an unknown error

[lime wasp]

gUYS I have a ryto wallet
i ts a cold wallet i need to hack into it/'
i dont know the tramsfer code

[shell rapids]

Is lab network still down?

I cant ping Dc even with attackbox lateral movement

room

[frigid dune]

Same here. Does anyone here has solved the issue?

[ivory spruce]

This is the official forums for TryHackMe as a learning platform.

Also, I don't think folks here would assist as we have no way of verifying whether it is for a legitimate purpose although it doesn't seem to be the case.

[hazy grove]

Heads up for whoever it may concern. The VM for Task 5 in the Virtualization and Containers room is broken. Users home dir doesn't load and room files are not on the system. Also if there is supposed to be a GUI on the box that is not loading either. Task 6 VM is fine.

[lofty latch]

Can you guys have a look on rooms that are broken? if creators won't fix them. remove them. Thanks. Lots of issues goes unnotice and creators aren't even in the server. #1333993673381253162

[scenic torrent]

Gave +1 Rep to @deep trellis (current: #129 - 73)

[lofty latch]

I understand it's not really a big deal but they should just be remove to avoid wasting time of users.

[fallow sable]

I need help with this room currently doing room billing and in the middle of doing the room i stopped getting a connection to the webpage
ive tried restarting the box, the vm, my browser cache nothing seems to work if anyone has any ideas lmk
i tried restarting the vpn too

[lofty latch]

can you verify ung account so you can send pictures

[karmic seal]

is the london bridge room broken? I am unable to visit the website? though I am getting the header 200 OK

Can anyone look up in this?

[lofty latch]

how about curl the whole body?

[karmic seal]

It is showing connected but still there is no body of the webpage.

[faint summit]

How do we claim a physical certificate for SAL1/PT1? I dont see any option after passing

[lofty latch]

don't think they are giving physical. Can't you just print them out

[faint summit]

What you'll receive

A physical certificate sent to you (optional)

https://tryhackme.com/certification/security-analyst-level-1/details

[lofty latch]

ohh. no idea then sorry

[karmic seal]

anyone looked into this? or should I try again after sometime

[marsh temple]

.

[ivory spruce]

Can you try running the command described here?

#site-support message

[ivory spruce]

@ember osprey Can you assist this guy please?

[ember osprey]

sure 🙂

[ember osprey]

Please DM me your token 🙂

[marsh temple]

Will do, thanks :)

[ember osprey]

Done