site-support

[outer drift]

https://pastebin.com/piG78Ve0

[sick bough]

Hi I have a problem connecting to openvpn anyhelp ?

[outer drift]

have you run the troubleshooting script?

https://raw.githubusercontent.com/tryhackme/openvpn-troubleshooting/master/thm-troubleshoot

@sick bough

sry forgot to ping

[modest spoke]

Anyone having problems trying to get into internet while using VPN connection?

┌──(kali㉿kali)-[~/Documents]
└─$ sudo ./thm-troubleshoot


         _____           _   _            _    __  __
        |_   _| __ _   _| | | | __ _  ___| | _|  \/  | ___
          | || '__| | | | |_| |/ _` |/ __| |/ / |\/| |/ _ \
          | || |  | |_| |  _  | (_| | (__|   <| |  | |  __/
          |_||_|   \__, |_| |_|\__,_|\___|_|\_\_|  |_|\___|
                   |___/
                                                                            
Looks like you're running Kali  @MuirlandOracle                             


[-] You are not connected to the internet
[-] Exiting

[slender sluice]

I am having trouble with the advancedsqlinjection page. The box is booting up but I cannot NMAP or connect to any of the webpages. This is with attackbox and with using the vpn.

[unique blade]

Hi, can someone give me a hand, please? I've been searching in the chat to follow on similar issues but i did not find yet a solution. I'm running a kali linux machine. It has always been working fine with THM openvpn but i haven't used it for a while. I updated everything and so on and downloaded the new 'premium' vpn files. They don't quite work? I can't reach the VMs:

I started downloading the EU one as it's closer to me but then a friend said the US works better, so switched to it but same issue.

[unique blade]

I actually just ran it few minutes ago because of my issue right above. It ran well but it didn't help as it ended in 'contact someone in discord' 🙂

[molten void]

I am unable to reach KoH boxes using premium VPN. I have no routes for 10.10 only 10.80. Is this a known bug or am I doing somethign wrong?

I have no issue at all getting to normal attack machines just KoH not able to reach :/

[ornate niche]

Hello, I answered some questions in a room right now and the activity chart doesn't show them. I refreshed the page, cleared cache, closed and reopened the browser, changed to pc version (im on my phone). I did get the usual banner saying my streak increased, but it's not reflected in the chart... Does anyone have the same issue or a fix?

[molten void]

I see some others with same problem in here, old VPN work but new configs dont. Anyone able to provide what the old ovpn server is or is it same on old configs?

[slender sluice]

Same thing happened with me, answered all the questions and it didn't show up on the activity nor the League points.

[lunar orbit]

Hi I have submited my form for the mission #4 a few days ago but I don't see the tickets reflected in my account https://x.com/tryhackme/status/1998511782999077317

[candid relic]

@ember osprey

[quiet lance]

Hi , I am working on Section SOC Level 1 Phishing Analysis Phishing Analysis . I dont see any email files to analyze in the VM ,restarted thrice but dint see any email files to anlyze for section 5 and 6

[snow star]

hey is the shells overview room in the security 101 path working for you guys ? i tried multiple times on different days and different browsers, it's the only room that dones't load any content for me

[ember osprey]

🙂 ?

[ember osprey]

There should be a folder on Desktop with files . Are you sure you are using provided vm and not the attackbox

[ember osprey]

Try to disable your av software temporarily. Some solutions flag some content on that page

[frail path]

Anyone know how to contact support.

[ember osprey]

On the email below 🙂

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 16, 2025, 4:31 AM

[dawn hedge]

Any staff here to help?

[sick bough]

It didn’t work that’s why I came here

[halcyon orbit]

I cant ping the machine on KOTH

Why?

I am connected to my VPN

[ember osprey]

Regarding ?

[ember osprey]

Depends which machine . Some machines are broken unfortunately 🙁

[dawn hedge]

regarding thm aoc tickets

[ember osprey]

Send an email on the address below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 16, 2025, 7:45 AM

[dawn hedge]

okay

[fervent dagger]

CAPA: The Basics room has frozen 3 times in a row when starting (US East -- Virginia) -- what to do?

[gusty python]

Does your streak get frozen automatically during Christmas, or do you need to do rooms (or lose freezes) during holidays to keep it?

[placid stream]

On the Exploiting Active Directory room, i cannot access web site http://distributor.za.tryhackme.loc/creds .

[upbeat quarry]

are you using THM VPN or THM AttackBox?

[placid stream]

I use THM AttackBox

[upbeat quarry]

can you ping the IP of the DC?

I do not use DMs, hence please post information here
I suggest you verify your THM account with Discord using the link coming below

[west chasm]

@humble igloo

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 16, 2025, 10:09 AM

[placid stream]

i can ping to the THMCHILDDC

[upbeat quarry]

I checked the logs you DM'd to me, and it looks like there are multiple routes to 192.168.128.1 Possibly, this is due to running multiple instances of THM VPNs
make sure you have only one instance
you can do sudo killall openvpn to kill all VPN instances and start again
also make sure you do not use Ctrl+Z for killing a running VPN instance, but instead Ctrl+C

[upbeat quarry]

please share the output of that ping command

[placid stream]

root@ip-10-49-84-31:~# ping distributor.za.tryhackme.loc
PING distributor.za.tryhackme.loc (10.200.63.201) 56(84) bytes of data

[upbeat quarry]

thanks, but I meant the output of your ping command to the IP of THMCHILDDC
also, have you completed the instructions for DNS as per Task 1?

[scenic torrent]

Gave +1 Rep to @placid stream (current: #3436 - 1)

[placid stream]

root@ip-10-49-84-31:~# ping 10.200.72.101
PING 10.200.72.101 (10.200.72.101) 56(84) bytes of data.
64 bytes from 10.200.72.101: icmp_seq=1 ttl=127 time=121 ms
64 bytes from 10.200.72.101: icmp_seq=2 ttl=127 time=121 ms
64 bytes from 10.200.72.101: icmp_seq=3 ttl=127 time=121 ms

I have completed on Task1.

[upbeat quarry]

do sudo /etc/init.d/dnsmasq restart

[potent hatch]

Can anyone here help me with a technical issue from thm?

[upbeat quarry]

please provide (much) more details

[potent hatch]

Okay i’m in room Content Discovery which is a http based room, when I connect the vpn and try to look up the url which is provided to me the server does not respond

Specifically in task 4

[upbeat quarry]

can you ping 192.168.128.1 ?

[potent hatch]

Packets are not being received

[foggy spindle]

Hi guys! The THM troubleshoot tool sent me here... xD i have set up an Ubuntu 25 VM via UTM on macOS. everything is fine except the connection over openvpn. i can ping my internal virtual IP address though

[potent hatch]

Can it be that the vpn ip address is outdated?

Should I download vpn files more frequently from thm?

[upbeat quarry]

indeed, check the 2 latest Pinned Messages

[potent hatch]

?

[upbeat quarry]

#site-support message

[upbeat quarry]

can you ping 192.168.128.1 ?

[potent hatch]

thank yoouuu!!!!!!

i'm given the correct address

[foggy spindle]

yes, that works

[upbeat quarry]

then that is probably enough to confirm you are connected to THM VPN, unless you find something is not working

[foggy spindle]

mh, well i can access the AoC room with splunk.... so seems fine for now... dunno.... something seems off xD thank you for your time!

[hard fog]

im doing Breaching Active Directory im not able to ping thhdc ip using attackbox

[upbeat quarry]

I suggest you troubleshoot using the tryconnectme command

[hard fog]

didnt work

[west chasm]

@hard fog

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 16, 2025, 11:13 AM

[upbeat quarry]

please share screenshot of the tryconnectme output
in order to upload screenshots, please follow the instructions from the message just above

[placid stream]

Thank you

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1147)

[upbeat quarry]

thanks
instead of breachingad, refer to the OVPN connection as breaching_ad_v2

[scenic torrent]

Gave +1 Rep to @hard fog (current: #3436 - 1)

[hard fog]

still didnt work

[upbeat quarry]

have you started the network? the way to confirm that is if you can see a Network up time on the right below the network topology

[hard fog]

it showing as 9 days

[upbeat quarry]

this is what I see
please share similar screenshot

[upbeat quarry]

something wrong
does the network topology picture update after you do a hard refresh (Ctrl+F5 usually)?

[hard fog]

no

[upbeat quarry]

I suggest you use the Options button to leave the room, and then join again (best to wait 2-3 minutes)
also: maybe too much but terminate THM AttackBox, and start it again after you have joined the room again

[hard fog]

i have tried this too but it didnt work

[upbeat quarry]

please share ip a and ip route

[upbeat quarry]

something else: I have started the network for me, and this is what I get
you will notice there is much more info on my diagram than on yours
one direction to troubleshoot this is to wait longer between leaving the room and joining again (after you join again, refresh the page)

[wet pulsar]

i cant start my machine as it says i already have another 1 in the same room. however, there is no terminate buttom, like that sidebar that shows ur machine, its ip, and the terminate, that sidebar isnt even there

i need the ip to do some ssh stuff

linux fundamentals part 3

[upbeat quarry]

look at the top, there should be a red header called Target Machine Information with a button to terminate a running instance

[wet pulsar]

yea

that is the thing i cant find

its not there

im doing it on a kali-linux virtual machine

1st times its happened

[upbeat quarry]

I suggest you disable all your browser extensions, delete browser cache and reload the web page

[wet pulsar]

i tried shutting down and opening the machine twice

ok wtf

i tried that before

now it worked

thank u much

[upbeat quarry]

thanks, no route to 10.200.70.x, hence no way to reach the network
also, no breachad interface it seems
let's try to see if you can have the same network topology as mine (as per this #site-support message` ) by leaving long the room long enough

[scenic torrent]

Gave +1 Rep to @hard fog (current: #2230 - 2)

[hard fog]

ill try to do it after one hour

[upbeat quarry]

another thing you can try if to change Region under Manage Account
you seem to be in Asia Pacific, maybe consider Europe or US
for myself, I have just switched from Europe to Asia to check if that works

[hard fog]

changed the region to us it still didnt work

[upbeat quarry]

I have just tried connecting using Asia Pacific and that did not work (and that was very slow, as I am in Europe)
I had to use another trick:

• from Manage Account, download to your host the VPN file, version 2, for Breaching Active Directory
• transfer it to THM AttackBox and run openvpn with it (before that, kill all VPN connections with killall openvpn)
• make sure you are consistent with the Regions, i. e. make sure you have the same Region for the VPN file and THM AttackBox (no inter-region connectiviy in THM infrastructue normally)

[upbeat quarry]

regenerate the VPN file before downloading 🙃

[hard fog]

Thank you I’ll try it

[leaden kindle]

i have an issue which is when i try using openvpn it keeps assigning me 192.168.x.x IP but the machine 10.x.x.x so how to fix

[upbeat quarry]

that is correct behaviour
I suggest you check the 2 latest Pinned Messages

[leaden kindle]

i did but still can't access the machine so is that normal?

[upbeat quarry]

make sure the VPN server region matches your target VM region in the Access page settings

[upbeat quarry]

and what machine are you trying to connect to?

[spice horizon]

Hello, I'm trying to follow along with the Moniker Link room, and the Windows host CVE-2024-21413--badr shuts down a couple minutes after spinning up. Is this the right place to get help for this?

Link to room: https://tryhackme.com/room/monikerlink

[leaden kindle]

it's side quest 1 machine

[young notch]

nvm its working now, ty

[winter solstice]

Hi bro

Can you please delete?
It looks like a spoiler to me 😅

[young notch]

deleted, sorry!!

[broken cipher]

is anyone else experincing connection issue with the Advance SQL Injection room? Ive resetted the machine several times, even the attack amchine but still cant connect. Sometimes it even terminates itself 2-3min after loading in

[winter solstice]

No worries, thanks

[scenic torrent]

Gave +1 Rep to @young notch (current: #818 - 8)

[hoary sinew]

I am have trouble with microsoft sentinel for the AOC challenge , basically the incidents are not showing up and to fix it I was told to enable and disable the rules in the analytics tab and when I selected all of the rules the disable button is not showing up

[upbeat quarry]

I do not know about that machine, the link is https://tryhackme.com/room/sq1-aoc2025-FzPnrt2SAu, right?
I think it has some unusual port open, but at least you should be able to ping it
can you ping that machine or not?

[vague wedge]

what are the instructions for the practices challenges? there isnt any kind of explanation or introduction

[agile badger]

I ran out of attackbox time and I am trying to complete the AoC challenges, but the openvpn setup is not working. I am connected to the VPN, but I cant hit 10.10.10.10 or any of the challenges. I have tried regenerating and running the thm-troubleshoot bash script with no luck

[cunning cloud]

Hi ! Sorry to bother you but i can't acces to the splunk instance from the Log Analysis with SIEM room, here's the link : https://10-66-137-143.reverse-proxy.cell-prod-us-east-1c.vm.tryhackme.com

I've tried with multiple browers, with and whithout the vpn and even with the Attack Box but i didn't suceed at all, i always reach i 502 Bad Gateway error

[winter solstice]

Hi
There is a change in the way of testing. Please check the pins, the guides are there

[tall vale]

I am experiencing some really frustrating captcha requirements at the login screen

I am having to do countless captchas that end in failures

Is anyone else experiencing this and how did you get past it?

[next stag]

Is it me or is the site (super) slow since ~2 mins ago?

[hybrid galleon]

The same

[slate token]

same

[potent tulip]

Not just you I can't even load a page anymore

[slate token]

getting 500 errors

[potent tulip]

Same

[slate token]

well here goes my streak ..

[potent tulip]

They should have it fixed soon hopefully

[hybrid galleon]

I was playing some CTF untill the machine crashed and I got kicked out before submitting the last flag 🥲

[potent tulip]

[slate token]

[cold quail]

I'm I the only one who can't log in? I need to save my streak 😭

[slate token]

i am at 150

if i loose it i will cry

[cold quail]

ooh noo, Not even the link works:(

[slate token]

call the admins lmao

[wraith hollow]

response code 500.....

[lament flame]

Are the hamsters on lunch break right now? I'm having no end of problems trying to navigate the site, 500 errors among them

[slate token]

mine is back

just save the streak

try reload

[glad rock]

I have the same problem, did you manage to solve it?

I have tried this room in mulitple days. The host seems down always

[broken cipher]

No I ended up emailing support and they said they will have the issue resolved soon

[glad rock]

Ah nice, thanks

[scenic torrent]

Gave +1 Rep to @broken cipher (current: #3443 - 1)

[glad rock]

In that case I'll wait a bit and work on the other rooms in the meantime

[broken cipher]

No worries, hope they figure it out soon enough. I want to get it finished lol

[glad rock]

yeah same

[north finch]

why is Student Discount not working?

[ember osprey]

For subscription related issues , reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 17, 2025, 8:15 AM

[main niche]

Hello ! I can’t manage to install OpenVPN on Kali Linux Purple. Can someone help me, please?

I’m using virtualbox for kali

[upbeat quarry]

I suggest you check the 2 latest Pinned Messages and this free room https://tryhackme.com/room/openvpn

[cunning cloud]

Does anyone know how i can deal with that ?
I'm stuck at the task 4 because of it

[upbeat quarry]

how long are you waiting after starting the target VM?

[cunning cloud]

something between 8 and 15 minutes

and the introduction ask me to wait for 4-5min for the splunk instance to launch

So that's why i don't understand where is the problem if it comes from me

[upbeat quarry]

can you share an active link to the Splunk instance, so I can check from my side?

[cunning cloud]

sure : https://10-64-181-111.reverse-proxy.cell-prod-us-east-1a.vm.tryhackme.com

tell me if you manage to reach it

[upbeat quarry]

I cannot reach it either
can you reach my instance: https://10-81-156-111.reverse-proxy.cell-prod-eu-west-1b.vm.tryhackme.com/en-GB/app/launcher/home
It got up and running within 3-4 minutes, but that may be because I am a subscriber

[cunning cloud]

I'm a subscriber too, and yes i can reach your instance

[upbeat quarry]

suggestions:

• using THM VPN or THM AttackBox, navigate to the "naked" IP address of the instance In the case of my instance that would be 10.81.156.111 Also, try that with the IP of your instance and share the result (I am curious 🙃 )
• switch VM Region under Manage Account
  BTW, my Region is currently Europe, what is yours?

[cunning cloud]

i actually use : US East (N. Virginia)
I will try with another one

[cunning cloud]

I'm not sure of what you mean by "navigate to the ip" but i tried to reach https://10.64.181.111 under the attackbox and it didn't succeed, with and without vpn. I also tried outside of the attack box and it's always the same 502 error.
I also tried with the initial link.

And for the VPN i'm not sure of the procedure to switch the region... do you have a tips ? When i try with the tryhackme.com/access under the Network pannel, the VPN Server Name is blank and i have no option to select one in particular

[upbeat quarry]

do http, not https, i. e. in your case: http://10.64.181.111: that is what I meant with the "naked" IP, in contrast to the URL ( https://10-81-156-111.reverse-proxy.cell-prod-eu-west-1b.vm.tryhackme.com/en-GB/app/launcher/home ) based off that IP
make sure at all times that you are consistent and you stick to only 1 Region (target VM, THM AttackBox, THM VPN)
I propose we solve the issue with THM AttackBox, if that fails we move to THM VPN
let's make this plan:

• switch Region to Europe, so you have the same region as mine
• launch a new THM AttackBox, so it is running in Europe Region
• using FF from THM AttackBox and browse to my instance, i. e. http://10.81.156.111 (not https)
• if that works, start your own instance running in Europe and do http://<IP of your instance running in Europe>

[cunning cloud]

i'm okay with switching region but i'm not sure of how to do it, can you give me the details ? Mine is automaticaly selected and i can't find a button to change it

[cunning cloud]

Do you want to switch to mp ? To avoid flooding this channel ?

[upbeat quarry]

check screenshot
link for Manage account is: https://tryhackme.com/manage-account/access
there are 3 Regions, I am currently using Europe

[upbeat quarry]

I prefer we remain here: more people can jump in, and this can be used later for other users 🙃

[cunning cloud]

Good idea, you're right

[cunning cloud]

I'm now in Europe (Ireland), with a new AttackBox, in FF i tried : http://10.81.156.111
With it i've reached your splunk instance
Now i will try the same but with my own instance

It works, and i can even access it outside of the AttackBox. If I understand correctly, the problem was caused by the region ?

[upbeat quarry]

I do not know what caused the problem I see the switching of regions as a tool to work around a problem Some weeks ago, all these reverse-proxy links had an issue that required fixing by THM, but sometimes also some users report a one-off issue
However, I would not be surprised if the issue you face happens only with the US-East Region, as I could not reach your reverse-proxy link at the beginning of our conversation Confirming that would require more testing (hammering the system by starting serveral instance in a row, etc.), but I am not going to do that for now 🙃
Bottom line: whatever works is a win, however for performance reason (like reponse time), you may want, now or later, to modify your Region setting to whatever works best for you

[cunning cloud]

I see. In any case, thank you for your advice and especially for your time!
Have a nice day.

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1148)

[humble igloo]

I'd already noticed an error with several VPNs by then and fixed it. With the VPN enabled, the machine simply won't ping, and nothing helps. For some reason, I think it's because I'm in Russia. Roskomnadzor It's gradually blocking more and more resources, and I think one of the servers might have been affected. Changing the VPN region didn't help.

[pliant haven]

Hi team,
I’ve completed Advent of Cyber 2025 – Day 10, but the raffle ticket hasn’t been credited yet.
The room shows as completed.

Username: h4ck3r0ps
Thanks!

[uneven seal]

👋

[slim blade]

Hi. Does anybody have error an the site? I have the error. The page refresh non stop, every second.

[misty sigil]

Anyone had issues with the VPN inside the AoC Side Quest: Hoppers Origins. It was working fine but now completely gone - totally inaccessible.

[lunar talon]

Sorry this is site support and I am currently having issues in trying to get TryhackMe SIEM to work.

It for the SOC L1 alert Triage challenge. I have disabled pop-ups and made sure I was on the right server

[ember osprey]

English please 🙂

[winter jungle]

I'm having the same problem. I'm also from Russia and I can't connect, but I show up as connected on the website. I can't ping 10.10.10.10. If you managed to solve the problem, please let me know.

[lavish fox]

Yes, actually I have same problem with error 500

[lofty torrent]

When I try to answer a question it says "an unknown error has occurred"

[ember osprey]

Russia blocks some VPNs , that's a problem out of THM's reach unforunately 🙁

[ember osprey]

Try to refresh the page or to relog

[ember osprey]

It should be working fine now

[lavish fox]

I am having a problem when I log in to tryhackme.
After logging in, the site redirects me to https://tryhackme.com/500 and an infinite redirect loop starts.
The only way to stop the loop is not reload the page and manually navigate to other pages like:
"Https://tryhackme.com/dashboard"
However, if I reload the page again, the infinite loop starts again 🥲

[oblique roost]

Is anyone having trouble logging in? If i use my mobile i can log in, but on the computer it sends me in a loop so i can't get to two-factor authentication and it asks me to login again

[slim blade]

Also with my Web Browser. All same is happenig.

[upbeat quarry]

that is unfortunate
some users in the past seemed to experience a disruption of VPNs in their country, rather than a full blocking, i. e. one day it will not work, but a few days later it would
the solution to that problem if you want to access THM is to use THM AttackBox, and that is best suited if you are a subscriber
another solution is to have ressources in the cloud (like a VPS) that you can access to start THM VPN from there

[nocturne sun]

i have the error 500 problem, i need to log in for my Streak. Can someone help?

[halcyon abyss]

Hello, having no problem logging in, but as soon as I get to the dashboard, it goes into an infinite loop, repeatedly bringing up a "500" something went wrong page. No VPN, nothing special, just plain ol' Internet. As a test, I also dropped off my WiFi on my iPad and attempted access via my mobile providers network, and I get the same results. This seems to be happening on any room page I try to access after logging in. Have also tried using "In Private" browser tab to no avail.

[cinder veldt]

there is no HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist or ROOT\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store

there is first, but as you can see its nothing in there

[ancient crane]

I thought that was by design no? I also didn't have those

[cinder veldt]

what design, look at the walktrough and ask echo, they will show you or tell you to find that path that you can, so how can we finish our tasks like that, then in the first task, try to filter dates, and maybe one filter will work like "between" exact date is not etc.

[ancient monolith]

Which room is this?

[cinder veldt]

day 16 Forensics - Registry Furensics

[ancient monolith]

Which question are you trying to answer?

[wheat zephyr]

hey, i need some help regarding hopper's origin
if anybody can help. I am not asking for any hint. I just want to confirm something if you can dm me regarding that? becuase i am doing team up to solve the room then i found out one priv is not enabled in my machine which is enabled in my friend's. i dont know why?

[cinder veldt]

What is the full path where the user launched the application (found in question 1) from?

[ancient monolith]

I see what you mean. The Key that the table refers to that we think would have that information, is not there

I had not done this one yet, just attempting it out of curiosity

Did you watch the video?

[cinder veldt]

you can't find all the info in the first step and then if you look for the locations HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist or ROOT\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store there is not info there...

and that is in the video, you can ask echo too and it will no be no results....so the room is broken...

[lavish warren]

I'm under the impression that someone has sabotaged the intended path for Server1 on Hopper's Origins. Can someone please verify?

[ancient monolith]

Found it. Check Echo or the walkthrough video again. read carefully. it tells you where it is.

[cinder veldt]

look at my video, i did the same

[ancient monolith]

Which Hive are you looking in? 🙂

[cinder veldt]

software

[ancient monolith]

Software is a key, not a hive

actually, I'm sorry. I lied lol.

You're right, it is a hive. however, just double check which hive you need for this

[cinder veldt]

i did, in the video they did not switch to other

[ancient monolith]

I'm watching the walkthrough video right now. timestamp 14:45 begins talking about question 2 and it tells the correct hive. just trying to poin you in the right direction without blatantly giving it away 🙂

[cinder veldt]

https://tenor.com/view/south-park-kenny-dancing-gif-8070040414541525781

[silver gate]

I can't join any room what's the problem

[calm lynx]

He's facing this problem, if anyone could help

[silver gate]

#site-support

[cinder veldt]

start the target machine

[calm lynx]

he is having issues in joining the room, the machine would start afterwards, no?

[cinder veldt]

no, you must click on stat machine

look on your video, machine status is in red

[nocturne sun]

i cant contact the support because i get website code 500, can someone help? and i need my strike back

[calm lynx]

solved, thanks

[scenic torrent]

Gave +1 Rep to @cinder veldt (current: #898 - 7)

[cinder veldt]

this too, i have used only software hive, that was the problem

[buoyant laurel]

Has anyone else been having an issue with the Advanced SQL Injection room? Seems like the machine is not reachable, even from the provided attack box

[cinder veldt]

record a video

so that we can see what could be the problem

[buoyant laurel]

Just seems generally unreachable ☹️

[buoyant laurel]

I'll try again in a few days... had the same thing a couple days ago and wanted to try again a couple days later

[hoary sinew]

bro i just did the room and i cant answer question two becaues of the missing folders

[wheat zephyr]

#site-support hi, i just rest the hopper's origin but still i have the same problem with priv. Anyone can help???
😭

[ancient monolith]

See my comments above. they aren't missing. you have to look in the right place 🙂

[harsh parcel]

Wasent just me lol

[dry elbow]

I was a knob and exited split screen view, is there a way I can get it back or do i need to terminate and then start the attack box again?

[dry elbow]

There is a blue button at the top of the screen that opens split screen again (mah bad)

[sand viper]

I was doing the Advent of Cyber challenge for today and suddenly everything stopped working on THM but all the rest of my access to the internet works fine. I killed the attack box thinking that was it but using the VPN isn't allowing me access to anything either.

I ran the script and got the following:
Looks like you're running Kali @MuirlandOracle

[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] MTU value failed at 1000, aborting MTU check
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

I'm not sure I get why it says the tun0 IP is in the correct range. I would have expected a 10.X but I get a 192.168.195.XXX

I can successfully establish VPNs with other platforms like Hack The Box...

[wintry current]

Can anybody help me where should i go to verify my acc. or i'm already verified

[winter solstice]

The same issue happened for me. Pins can guide you

[winter solstice]

#bot-commands

[dawn fable]

Hi, I am gonna forward my issue here

can't access, help

https://tenor.com/view/kevin-hart-help-me-gif-18351511120546678838

https://tenor.com/view/minigame-madness-minigame-madness-mm-fall-guys-gif-17711378555537729669

[simple iris]

I was doing the Advent of Cyber challenge yesterday and suddenly everything stopped working, I kept getting an alert saying unauthorized access, even when I attempted to terminate my attack box, but all the rest of my access to the internet worked fine.

[tribal elm]

I cannot load webpages about upload vulnerabilities room

[slim blade]

Any new news about error 500?

[stone oasis]

Someone seriously needs to review the NetworkMiner room

its so janky, the case file pcaps and questions dont align, which i had to confirm through a walkthrough from 2 years ago

heres the walkthrough for reference

https://medium.com/@huglertomgaw/tryhackme-networkminer-ab7849eca0f0

[quasi lynx]

Any news about the error 500

[slim blade]

The Site works again. Thanks to God.

[coral hazel]

Can anyone help me regarding vpn connection. why there's two vpn config file? one for machine and another for Network?

[humble igloo]

I have a dedicated server in Estonia, so I'll try to route traffic through it later. Thanks for help!

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1149)

[naive dust]

I don't believe you can get the discount if you already have an existing subscription, I would suggest contacting [e-mail] as they can assist more

[chilly torrent]

#site-support hi where to check my subscription, I believe I have subscribed annually , but I cannot run the attack box so when I checked my subscription it shows that I need to re-subscribe.
the issue is that I cannot recall when exactly I subscribed and I cannot find the invoice , but I am unsure was after August.

[naive dust]

https://tryhackme.com/manage-account/subscription

[chilly torrent]

it was on Aug 31 2025

[chilly torrent]

it shows that I need to subscribe again ?

[naive dust]

then you likely did not subscribe annually, but if you believe you subscribed annually I would suggest contacting [e-mail] to confirm

especially since the subscription is cancelled not just monthly

[chilly torrent]

will I paid 123 USD on 31/08/2025 , so at that the time there were only annual or monthly sub !

[weary spindle]

Please reach out to support via email, you won't get help on the Discord.

[chilly torrent]

thank you all

[grave steppe]

guys, how am I supposed to do the practical part of the shells overview room? https://tryhackme.com/room/shellsoverview
until now, I've just followed the normal tryhackme presecurity path.
do I just have to learn command injection and unrestricted file upload first?

[naive dust]

you have to use all you have learnt in the previous tasks
also #room-help

[grave steppe]

oh, my bad

[naive dust]

no worries

[hybrid obsidian]

Hello , i have an issue with the VPN , when i'm connected to it and i try to access the IP on Internet to verify that i'm connected it don't work and i have some issues with receiving connection from a target machine when i'm doing reverse shell , what is the issue with THM VPN cause i'm not the only one complaining about the vpn not working ?

[trail bobcat]

anybody can help me?

[naive dust]

an MTU failure means there is an issue with your VPN

which country are you connecting from?

also #site-support message

[vague wedge]

how do i find rooms in discord? im new at discord and need to find the today room

[foggy spindle]

so i am connected via vpn on a kali vm. pinging target machine works. but loading the web app takes ages... why is this?!

i am in germany and selected the ireland server for vpn connection

[nocturne widget]

Can anyone help me?
I think I’m having trouble connecting to machines through the browser (machines that are intended to be accessed via a web interface), but when I check the connection to the machine itself, everything looks OK.

[foggy spindle]

so same problem`?

[nocturne widget]

yes

[foggy spindle]

wonder if the attack box works.... but then again, why does the vpn work and the web app does not?!

nmap says the target machine is up and port is open :x

[foggy spindle]

ok, i deleted cookies for the site and enabled connections to insecure websites in the browser settings. seems to work for now

[fair matrix]

Hello everyone,
I would like to ask for clarification, as I noticed that over the past week I have completed several rooms but did not receive any points.
Is this expected behavior?
Normally, points are awarded for each completed room.

Waiting for your kind reply

[naive dust]

1. go to https://tryhackme.com/dashboard and scroll down slightly until the Your Stats section on the right hand side the crosshair icon is your points
2. go to your profile and check if the rooms are at the bottom if they are not you may not be 100% completing each room

[sour chasm]

Hey everyone. How long does the grace period last for?

[naive dust]

grace period?

[sour chasm]

Yes so basicly i subscribed for a month and didnt cancel the sub(now i did but its bugged im still premium even tough i still didnt pay for the new moth) and it says im in a grace period

I want to switch to anually thats why i didnt pay

[naive dust]

contact [e-mail] for payment/subscription related support

[sour chasm]

Thank you

[glass badge]

Am I the only one getting this issue? Whenever I do split screen things on the site left click is treated as right click. It's happened on two different physical machines for me today. One Ubuntu machine and one Arch machine. Only happens when that Split Screen is shown. I can't do some things because they don't give out RDP creds for everything. I'm running Firefox on both

Never mind! It was the Agent Switcher treating the site as mobile! 😄

[naive dust]

@austere horizon

[verbal sonnet]

👋

[quaint tapir]

Is there an issue with the VPN in TryHackMe? I cannot seem to open Attack Box

[vocal epoch]

Hi all, not sure if this is the right place to post, I am trying to connect to the target machine for Day 2 of the Advent Calender. When I try to SSH in, it keeps saying "Permission denied (publickey)"

I am not sure if I am entering the right username (I think I am? but I'm not sure how to check). Does anyone know what I am doing wrong?

[dawn torrent]

I was just trying to setup the VPN for the first time and I can connect to the VPN server but I can't reach anything else.

I just ran the thm-troubleshoot script that's pinned and got the following

[ember osprey]

Check out #start-here resource 🙂

[ember osprey]

Open up new terminal and run this cmd
sudo ip link set dev tun0 mtu 1200
@trail bobcat

[dawn torrent]

I still get the MTU value failed error

[real atlas]

@dawn torrent Please slow down. Further spam will result in a short timeout.

@dawn torrent Please slow down. Further spam will result in a short timeout.

[amber cave]

^Getting the same issue, except my tun0 is fine

[solar python]

iv got a problem with the gpg agent in one of the aoc rooms, wondering if anyone could help me fix it. dont wanna say too many details here in case i got in trouble leaking answers

[naive dust]

1. sudo ip link set dev tun0 mssfix 1160 (aprox. 40 bytes lower than your MTU)
2. use OpenVPNs mtu-test and adjust each value accordingly
3. sudo ip link set dev tun0 fragment 1200 (equal to your mtu value, only use fragmenting as a last resort) or you can just open your VPN file with nano and ensure tun-mtu = 1200, fragment = 1200, mssfix = 1160
4. what country are you connecting from as countries such as Egypt and Russia can disallow VPNs for some users

[full hedge]

Hi THM Support, trust everyone is good, quick question I’m unable to complete the Network, layer 3 (OSI Model )module as the last question won’t allow me to enter the IP address, how can I get that resolved please 😊

[strong loom]

Hello Support Team THM !
1 ) my kinda stucked , in "What is Networking?" " Deploy the interactive lab using the "View Site" button and spoof your MAC address to access the site. What is the flag?" when i write an adress it automaticly add some "_" ex : 04:9E:44:99:A3:12 gives Mac{04:_9E:44:99:_A3:_12} . May you help me ?
2) I can't change the language ( in french ) ? How manage that ?

[analog topaz]

Hi @austere horizon I need help with unlinking my token please

[austere horizon]

Done

[analog topaz]

Thank you

[scenic torrent]

Gave +1 Rep to @austere horizon (current: #25 - 423)

[civic mountain]

is firefox still a problem with copy/paste into target machine? any workaround?

[naive dust]

there is no workaround to fix this unfortunately

[weary spindle]

Wrong. 😄

[weary spindle]

Open the machine in full screen view, this will by pass the JS copy/paste.

[main niche]

Would a French version of tryhackme be possible?

[weary spindle]

Probably not, as THM are UK, and I don't think they're doing translations

[light kayak]

My attack machine doesn't seem to be connected to the internet so it isn't able to run the script in the latest AoC

What should I do? This isn't the first time it has happened

[civic mountain]

i think it doesn't work either way, split or full screen view on firefox

[obtuse cairn]

Hi guys, sorry but I'm facing some issues with the advent of cyber day 10, in fact the Azurae clients doesn't show any incidents and also it doesn't allow me to disable and reenable the rules.... someone has the same problem?

[zealous nymph]

@obtuse cairn Try These Steps To Resolve The Problem :-

Fully terminate the lab and restart it (not just refresh).
Wait 10–15 minutes after the lab starts for Azure to sync.
Try opening the lab in an incognito/private window.
If you’re using a VPN, disable it or switch regions.

[vague wedge]

I am using the brave browser on linux and cannot see most of the content on the aoc nor does the continue learning button work

[naive dust]

it doesn't due to Firefox in-built protections and how they work alongside embedded iframes

best options would be RDP, OpenVPN or Brave

[solid laurel]

Hello, I finished my SOC 1 path, and when I click View Certificate nothing happens.

it goes to this page https://tryhackme.com/not-found

[ember osprey]

Try not to use Brave . It blocks some js required for sites functionality sometimes

[placid stream]

On the Exploiting Active Directory room task 7, I cannot run mimikatz.exe on THMSERVER2

[pale gale]

Hello! I have a question about THM Workspaces. (https://tryhackme.com/workspace)

There is a group of us from various places, (Discord, YouTube, etc) and we would like to use THM Workspace as a team so we can work together and enjoy THM better.

Creating the Workspace is easy, but is it possible to add members without an email invite? Also, how do we set an admin?

Is any of this possible or do we need a business account?

Many Thanks!

[obtuse cairn]

Thanks but I think the main problem is that I don't have any start button on it, no machine nothing, I just have some temporary access passwords with mail and nothing else..

[scenic torrent]

Gave +1 Rep to @zealous nymph (current: #328 - 27)

[lofty forum]

Hello, I'm not able to access my account.

Not receiving password reset email or magic link.

Are there any support rep here to help?

[hybrid sparrow]

At which channel should I post meme in? I wanted to do the linkedin task with discord

[hoary sinew]

anybody know how to solve this ?

I been trying for a while now , i tried reversing the order of the algorithms but i keep getting encrypted text

[deep marsh]

any1 can assist? everything works fine from attackbox

[deep marsh]

edited also the hosts file , still not working. Installed dnsmasq cuz it wasnt there, restarted vm, restarted service still not working

[night agate]

i have been having trouble connecting to Try hack me through open-VPN on my kali VM here is the error I have been getting any help is appreciated and thx in advance.

Context:

1. Here are the version of my tools : OpenSSL 3.5.4 30 Sep 2025, LZO 2.10 ,OpenVPN 2.7_rc3
2. I have tried to change the file multiple times , changed the Protocol, configured and used network manager, followed many tutorials online but no use.
3. ERROR:

2025-12-19 17:03:26 OpenVPN 2.7_rc3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-12-19 17:03:26 library versions: OpenSSL 3.5.4 30 Sep 2025, LZO 2.10
2025-12-19 17:03:26 DCO version: 6.16.8+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.16.8-1kali1 (2025-09-24)
2025-12-19 17:03:26 TCP/UDP: Preserving recently used remote address: [AF_INET]13.216.15.166:1194
2025-12-19 17:03:26 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-19 17:03:26 UDPv4 link local: (not bound)
2025-12-19 17:03:26 UDPv4 link remote: [AF_INET]13.216.15.166:1194
2025-12-19 17:04:27 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-12-19 17:04:27 TLS Error: TLS handshake failed

[ember osprey]

Run cmd prompt as admin

[ember osprey]

You can reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 20, 2025, 3:55 AM

[naive dust]

#1440378727682015443

[naive dust]

are you decoding the text in the input by default or the actual image hosted here?

[naive dust]

since you have already tried most fixes:

1. add disable-dco to the .ovpn (put it right under client so its easy to remove if it doesn't solve the issue)
2. you are on a RC build of OpenVPN, I would suggest downgrading to 2.6.x (stable)
3. change your THM VPN Region at https://tryhackme.com/manage-account/access

[naive dust]

specific room/task and what are you actually trying to do?

[naive dust]

[e-mail]

[naive dust]

1. workspaces are generally used for businesses so using an email invite is required but if you don't wish to share your "real" email you can use DuckDuckGo's email proxy service https://duckduckgo.com/email/
2. by default the user who creates the workspace is an Admin and can then add admins when using "Add teammates"

also I think you might be limited to how many teammates you can have without a subscription but not 100% sure

[pale gale]

Great answer! Very helpful! Thank you for answering me and giving me a solution around the email issue.

[zealous nymph]

if u are a non-premium user u have only 1hr per day access to attackbox

[scenic torrent]

Gave +1 Rep to @void nebula (current: #644 - 11)

[deep marsh]

Gobuster dns exercise, im using VM and cant find any subdomain of the attacked IP

[deep marsh]

The reply above the one you replied to are the screenshots of the task

[naive dust]

1. sudo nano /etc/dnsmasq.d/thm.conf -> add address=/offensivetools.thm/10.80.174.138
2. sudo systemctl restart dnsmasq
3. gobuster dns --domain offensivetools.thm -w /usr/share/dnsrecon/dnsrecon/data/subdomains-top1mil-5000.txt --no-error
4. each time you need to do this for a room just overwrite the thm.conf like echo "address=/example.thm/IP.IP.IP.IP" | sudo tee /etc/dnsmasq.d/thm.conf

the issue comes from the fact the AttackBox already has its internal DNS configured, your local doesn't, you don't want to use --resolver to resolve a rooms machine

gobuster ignores local DNS when defining the --resolver flag

[deep marsh]

im getting a no parse error

[deep marsh]

still no change, shouldnt i add something in resolv.conf?

[pliant shore]

Hi everyone,
Hope yall doing great!
I’m trying to solve the room “Breaching Active Directory”
https://tryhackme.com/room/breachingad

However, I’m not able to join the room. Every time I click Join Room, it just shows loading and then shows Join Room again.

Can anyone help me out?

[half aurora]

Hey, I want to confirm that I started my cyber journey just a few months ago, and I think that I'm kind of forgetting some concept, so I decided to journal my learning in the form of blog post, so if I use the images and screenshot/gif in the rooms for my reference in the blog post, for revision. Obviously I won't share the tasks or the answers of the room/module, just the learning material and concept.
And i'm a subscriber as well.

[naive dust]

ah because its internal DNS its so annoying
double check you have dnsmasq sudo ss -lntu | grep :53
you would then have to change your resolv.conf to 127.0.0.1 which is dnsmasq then restart dnsmasq again
then you could run a dig forum.offensivetools.thm to confirm the DNS works correctly

• you could technically do it with systemd-resolved but it would be a bit more messy
  I would honestly just suggest using the AttackBox for rooms that have addresses like that due to how annoying it is

[deep marsh]

yeah i know it will be a lot easier but ive been on Attack box for half of the Cybersec101 and due to that everytime its new machine it got annoying. The other thing is that i wanted to experiment and learn also linux (kali), some small stuff also matter for example some of the commands are changed in the new versions so when i move one day to a linux machine i will lose a lot of time to re learn all commands

i will test that method you wrote later today cuz i moved on from it, lost like good couple of hours to try fixing the dns stuff

[naive dust]

yeah it can get quite messy and irritating very quickly, best of luck to you though

and peoples machines/networks function differently with DNS

[deep marsh]

Thank you

[scenic torrent]

Gave +1 Rep to @void nebula (current: #553 - 13)

[naive dust]

make sure you always keep a backup of either the system itself or any file you change as well since DNS really can get messy very quickly when you're testing

[deep marsh]

yeah i have a snapshot of a clean machine

[zealous nymph]

what to do after dns messed up and i have no backup

[naive dust]

throw the computer out of your window

then plug a potato into your monitor

[zealous nymph]

what to do next because i have done that

with my kali

reinstalling the kali doesnot work

[naive dust]

you now have super elite ultra opsec because you dont have a computer at all anymore

[zealous nymph]

i am using kali in virtual machine

[zealous nymph]

this not happen with my main win, it is happened with my kali in virtual machine

[zealous nymph]

i tried everything suggested by chatgpt but nothing works

[naive dust]

wait...

are you serious?

[zealous nymph]

yup

[naive dust]

please say no 🙏

[zealous nymph]

yes

i am serious

i am using attackbox because my kali is done

for every lab

[naive dust]

well I mean it depends on what you did

but its not all that difficult to manually fix

[zealous nymph]

everything

[zealous nymph]

also tried manually fix but nothing works

[naive dust]

what is actually wrong with it, if there is genuinely an issue?

[zealous nymph]

whenever i boot my kali like my whole day goes in fixing that but nothing fixes

[zealous nymph]

chatgpt says it is a dns issue

[naive dust]

im not sure what the issue is, I would need more information

chatgpt is likely wrong but who knows maybe its right 🤷‍♂️

[zealous nymph]

okk

[weary spindle]

What's up?

[zealous nymph]

yeah

[weary spindle]

Are you having issues accessing THM labs on your VM?

[night agate]

I am having trouble connecting to Try hack me through open-VPN on my kali VM here is the error I have been getting any help is appreciated and thx in advance.

Context:
Here are the version of my tools : OpenSSL 3.5.4 30 Sep 2025, LZO 2.10 ,OpenVPN 2.7_rc3
I have tried to change the file multiple times , changed the Protocol, configured and used network manager, followed many tutorials online but no use.
ERROR:

2025-12-19 17:03:26 OpenVPN 2.7_rc3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-12-19 17:03:26 library versions: OpenSSL 3.5.4 30 Sep 2025, LZO 2.10
2025-12-19 17:03:26 DCO version: 6.16.8+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.16.8-1kali1 (2025-09-24)
2025-12-19 17:03:26 TCP/UDP: Preserving recently used remote address: [AF_INET]13.216.15.166:1194
2025-12-19 17:03:26 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-19 17:03:26 UDPv4 link local: (not bound)
2025-12-19 17:03:26 UDPv4 link remote: [AF_INET]13.216.15.166:1194
2025-12-19 17:04:27 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-12-19 17:04:27 TLS Error: TLS handshake failed

[weary spindle]

Country?

[night agate]

Egypt

[weary spindle]

You can't use the VPN, sorry.

You'll need to use the Attackbox.

[night agate]

thx for the help anyway 🙂

[naive dust]

@night agate did not even think you were from Egypt when you first sent your issue

• while it may not always fix the issue, connecting to WARP and then using the THM OpenVPN can fix the issue of Egyptian ISPs blocking such traffic
• I would however still suggest the fixes in this messages reply as you should do them no matter what

[night agate]

ok thx a lot bro will try them all

[weary spindle]

Wow, very ethical...

Let's not advise users on how to bypass government restrictions.

[weary spindle]

It's not a good idea to use a VPN to use a VPN, as it could encrypt the infomation you send and make it useless.

[night agate]

I just need to finish the AoC challenge man I will not use it for much any ways so if works good if not no bigi

[naive dust]

Egypt does not explicitly prohibit VPN usage, nor does it specifically ban OpenVPN, WireGuard, WARP, or platforms such as TryHackMe. there is no published Egyptian law that criminalizes the use of VPN software. the connectivity issues users experience (specifically in Egypt) are due to ISP-level traffic interference and protocol filtering, not judicial injunctions or platform bans

lets educate ourselves all together before claiming someone is advising someone on how to commit crimes :)

[naive dust]

VPN chaining is a standard networking technique, encryption layers are independent and do not just immeaditely invalidate each other, while it may introduce MTU and routing troubles; it works reliably and is commonly used

[weary spindle]

Egypt closed the VPN use for seveval years now.

[naive dust]

that change is not judicial.

the law (in Egypt) states the bypassing to access blocked or prohibited content is illegal, not the usage itself

[weary spindle]

So would bypassing a government block on a protocol not count as bypassing?

[naive dust]

to access blocked or prohibited content is illegal

please read my messages :)

once again as stated it is ISP-level traffic interference not government level

[weary spindle]

You can argue all you want.

At the end of the day, the server does not assist users on bypassing blocked VPN. 😄

Especially for Egypt.

[naive dust]

I am not the server nor am I associated with TryHackMe

[weary spindle]

You're in the server...

[naive dust]

then the moderation team may remove my messages if they see them unfit

[weary spindle]

You've also accepted the rules to be here. 😄

[naive dust]

I dont wish to argue, I am simply stating that what I advised that user on is most certainly not illegal

[weary spindle]

Thats your issue though.

I didn't say it was illegal.

[naive dust]

...

it is not a government restriction :)

[weary spindle]

Wow, very ethical...
Edit
Forward
More
[17:20]Saturday, 20 December 2025 17:20

Illegal != Ethical

[naive dust]

"bypass government restrictions" most certainly is related

[weary spindle]

If you're going to be a dick about something, be right.

[naive dust]

I am not trying to be a dick in any way, I tried to assist a user on bypassing unethical ISP-level traffic interference and you stated I was assisting him in bypassing government restrictions which is not true; I am quite saddened if you truly believe that something like that is unethical

https://www.wipo.int/wipolex/en/legislation/details/19959 if you wish to educate yourself you are free to do so, I will not argue further since you do not seem to understand the difference between ISP overreach and judicial enforcement

[weary spindle]

There you go, being a dick again...

Enjoy! 😄

[naive dust]

please enjoy as well. I am truly sorry for how I spoke, I did not mean to come across as rude or disrespectful; I simply got quite frustrated and let it show due to how I feel about topics of censorship, I hope you have a good rest of your day or night Scrubz.

[silver mountain]

Where is the admin , I have a problem; my subscription fee is being deducted even though I have already cancelled automatic payments, any help please

[heady forge]

hey could a mod help me update my thm discord token to link it to this account?

[west chasm]

@silver mountain

Refund Policy

Article Link

https://help.tryhackme.com/en/articles/8282427-refund-policy

Dec 20, 2025, 10:41 PM

[naive dust]

^

[tight wren]

hi guys, even though i bought the business subscription for myself to access the soc simulators, its not letting me actually partake in the scenarios? i can only assign the scenario to users in my team, but how do i actually get to do the scenario myself?

[loud cargo]

Assign a seat to yourself, being an admin of your org is not enough to grant you the premium subscription

[ember osprey]

Dm me your token please

[tight wren]

Got it, thank you

[scenic torrent]

Gave +1 Rep to @loud cargo (current: #3454 - 1)

[ember osprey]

For subscription related problems reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 21, 2025, 4:03 AM

[blissful mango]

Hi, I have question regarding Tryhackme AOC 2025, I have published meme about advent on my Linkedin by following instructions from the link, provided all necessary tags and link in post, but didn't received additional tickets, please advise what I missed to obtain additional ticket ? 🙂

[naive dust]

1. ensure you have submitted to the google forms https://docs.google.com/forms/d/e/1FAIpQLSckZ2oKR2n_ReBsJrC0REv68v8WDrHucYSOmZucVSEffHRYBA/viewform
2. it may take some time for the THM team to reach your form and to assign your account the tickets

[blissful mango]

I did it twice 🙁

[naive dust]

how recently did you do so?

[blissful mango]

2 days ago

[naive dust]

it may take some time for the THM team to process everyones requests

[blissful mango]

in the same day it has been announced, now I did it 3 time for the form

[unkempt sinew]

Hey. I'm currently developing a room now. I uploaded my files in the upload page and referenced them in a task in the room. But when I try to solve the room and try to download the file I get an XML output in a new page that has the title of Access Denied. What could be the issue here? It seems like TryHackMe backend is denying your access to the S3 bucket where the file is stored because the IAM user (tryhackme) doesn’t have permissions to list or access that bucket.

Additional info, this room is not public yet, I tried solving it via private using a share link. Do I need to submit it first before trying it out?

[brittle portal]

Hey, I'm currently trying to RDP into a Windows machine in the firewall fundamentals room.
I've only had issues with windows machines, and only within the past week or so.
I received a "BIO_do_handshake failure" and a "errconnect_tls_failed" error.

What I've tried:

• verified VPN connectivity as per the steps on THMs troubleshooting page
• verified port 3389 is open on windows target with an nmap scan
• adding flag /tls:seclevel:0 (no change)
• adding flag /sec:rdp (connecttion immediately terminated by peer)
• restarting target VM
• restarting VPN
• regenerating my VPN file
• full update and reboot

In this room, this isn't a big deal. But because it's happened in multiple rooms now and the Browser VM experience in windows machines has been terrible, I'd like to resolve this for machines later on.

[placid stream]

Exploiting Active Directory Room on task 7, I follow instruction but i cannot request Kerberos ticket-granting ticket.

I think DC a problem. Can someone reset it?

[pliant shore]

Hii guys could u help ?

[wind wedge]

Please be patient and don’t spam the form. It’s not an instant process. Tickets will be added before the draw is done. As long as you submitted the form our team will get back to you

[wind wedge]

You need a 7 day streak to join if you don’t have a subscription

[snow plank]

Hello. any channel suggest for my payment issue while purchasing premium?

[ember osprey]

Reach out to support on the email below

[west chasm]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 21, 2025, 11:29 AM

[placid stream]

I think there's a problem with the domain controller. Can anyone help me?

[crimson spoke]

[slow laurel]

I cannot access the THM network with Open VPN anymore

Even when I put the target IP in the browser in the attackbock, I cannot access the web pages

[woeful mountain]

Hello, if I am on monthly subscription and I click on "switch to annual" will I be billed instantly or taken to payment summary/ confirmation page instead. As I want to check if I am eligible for student discount or any ongoing sale before paying.

[naive dust]

it will bring up a payment summary on the same page, to my knowledge discounts dont apply when switching to annual with an already existing subscriptions (like AOC2025 30% off) but I am unsure about student discounts; best bet to confirm with [e-mail]

[wind wedge]

You'll be billed instantly and you can't stack student subs

[green ivy]

Hi support, the side https://tryhackme.com/paths crash constantly on my devices with different browser. I tried cookies reset, waiting, refreshing a.s.o .

[reef merlin]

question

how can i verify my account

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 21, 2025, 8:25 PM

[viscid igloo]

Having the same issue

[hoary sinew]

The image

[woeful mountain]

Oh, so it won't also auto apply the ongoing sale like AOC2025 right?

[wind wedge]

If you have student discount then no

[woeful mountain]

I didn't buy the monthly subscription using student discount, but filled the student details a few days back.

[strong sun]

I am having trouble with day 16 Forensics - Registry Furensics. I have tried three times to start the VM, start working, and then as soon as I load a hive, the VM shuts down.

[winged fiber]

Hey all, new here. I'm trying to connect a Linux VM on Proxmox to OpenVPN. When I run openvpn on the .ovpn file regenerated and downloaded from the Access page, the tunnel seems to create, however the Access page shows that it is not connected. When I run the thm-troubleshoot script, it returns [-] tunIP is not in the expected range and [!] The TryHackMe VPN should assign you a 192.168.x.x address. I let the script attempt to fix things, but no success. Help would be greatly appreciated 🙂

[scenic torrent]

Gave +1 Rep to @winged fiber (current: #3457 - 1)

[ivory spruce]

To my knowledge, that Access Page is yet to be fixed. Have you tried to access any target after you connected via OpenVPN?

[loud cargo]

Anyone else having issues with accessing the AWS and Azure lab env?

[scenic torrent]

Gave +1 Rep to @loud cargo (current: #2243 - 2)

[boreal wren]

How can I unlock koth

[placid stream]

I have a problem on Task4 with AD: Authenticated Enumeration room cannot access the BloodHound-CE, Sometime i can access but it show password expire.

[oblique roost]

Hi, I haven't been able to log in to my THM account for a week or so - how can I contact support please? I can't view the contact page without being logged in first!

[queen elm]

Anyone had any issues with running the simulator i try to start phishing unfolding and it just never loads up

[obtuse kindle]

Hi, during my exam i had some kind of bug. I could not access VM as it was still booting up. When VM looked like accessible when I tried to click something on desktop it was rebooting again. Any solutions?

[rose gull]

Hi, I was about to purchase a promotion for an annual subscription where I would get 5 extra months, but during the payment process it wasn't indicated that I would receive this. Is this promotion still valid?

[late viper]

Hey, I have a problem with one room from the cloud license. Whenever Im trying to "deploy lab" in the https://tryhackme.com/room/kqlkustobasicqueries I am getting redirected to the https://tryhackme.com/500, and the lab is not being deployed.

[winged fiber]

I'm not able to ping 192.168.128.1

[burnt tapir]

Hey all, my team recently got an org subscription to THM which we are really excited for. I currently have an account with THM, is there a way I can link my account (and progress) to my org account?

[next stag]

A special "CONGRATS THM" for today's AoC room (c2 with RITA): not only were there some super sexy backgrounds to fetch but also the displayed methods and tools are very pertinent and quite helping on the very daunting network analysis task. Cheers y'all ❤️

[warped trail]

I’m facing a really frustrating issue with the TryHackMe AttackBox and wanted to check if it’s just me or a common problem.

The AttackBox feels extremely laggy. As soon as I try to open Firefox or Burp Suite, the whole box starts hanging. Sometimes Firefox doesn’t even fully open, and Burp becomes almost unusable.

Even the terminal behaves weirdly — after running 1–2 commands, the third command doesn’t even type properly. This happens even when no heavy task is running in the background. At times, I keep only the terminal open, and still it becomes unresponsive.

My internet connection is stable, and I’m not running anything else heavy on my system.

Is this a known AttackBox performance issue?

Any settings or optimizations I can try?

[sudden obsidian]

👋

[sudden obsidian]

👋

[lone ether]

Need technical assistance

[upbeat quarry]

maybe switching VM Region (under Manage Account) helps

[ivory spruce]

Suggest dropping an email inquiry to THM Support

[west chasm]

@burnt tapir

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 23, 2025, 12:48 AM

[ivory spruce]

Can you provide more details?

[ivory spruce]

It is imputed in the computation. If you compare the monthly subscription multiplied by 12 vs the annual subscription, you will see the difference.

[west chasm]

@oblique roost

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 23, 2025, 12:50 AM

[ivory spruce]

Is the issue still on-going?

[mossy orchid]

Hello i have been banned can someone help me get unbanned and explain why it happend

[half wing]

Hello there. Is it possible to have help. It seems that I have not been credited the ticker for advent calendar for one daily quest . Can someone help me please ?

[naive dust]

1. contact [e-mail]
2. you should have received an email regarding the ban iirc

[mossy orchid]

Already did. But they said that the support can be slow bcs of christmas

[naive dust]

my response is the same unfortunately, support can be slow because of Christmas

[marble minnow]

👋

[loud hull]

I was trying do the side quest 1 great disappearing act . On opening target machine ip in browser it shows the connection has timed out. Can anyone guide what issue is this?

Yesterday it was working fine🤔

[naive dust]

no hints are allowed for any side quest but can you post a screenshot of the issue so I can see if its technical or you will have to figure it out on your own?

[west chasm]

@loud hull

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 23, 2025, 11:32 AM

[naive dust]

for posting screenshots ^

[lone ether]

I am trying to get into SQ3.
With openvpn, i can ping the machine, can telnet it on 21337, can get header via curl, but cant enter the damn website to put the password and continue the machine...
Tried everything already

[lone ether]

Already tried using different browsers, redownloaded VPN file, restarter the machine

[loud hull]

the machine in The Great Disappearing Act room is not loading for me.
It responds to ping, but the web page keeps timing out. I tried multiple resets and also tested using the AttackBox, but the issue is still there.

It says the connection has timed out. Server is taking too long to respond etc

[loud hull]

Oh ok

[naive dust]

perhaps you should run an nmap scan

[prisma sparrow]

not able to access machine started through Advanced SQL Injection room in attackbox
mods pls

[naive dust]

machine is unresponsive iirc
https://discord.com/channels/521382216299839518/1452296977839685642

[prisma sparrow]

thanks man 🙂

any fix for it though?

[naive dust]

not yet but has been reported to THM as far as I know

[loud hull]

Nmap scan report for great disappearing act side quest room .. targetmachine: Host is up. All 1000 scanned TCP ports are filtered (no-response). No open or closed ports were detected during service/version detection (-sV).

[naive dust]

you can either do a full port scan or scan common web ports
if you need an nmap refresher: https://tryhackme.com/room/furthernmap

[lone ether]

I finally got it working...
needed to

ip link set dev tun0 mtu 1400

[silver mountain]

Where is the support? I have a ticket that has been pending for 4 days without a response. What kind of failed support is this?

[naive dust]

support will take some time as we are right at Christmas currently 🤷‍♂️

[silver mountain]

Will this affect my refund request? I was charged money and I canceled automatic payments. The payment was made on the 20 and today is the 23.

[naive dust]

dependant on a lot of factors, im unsure how long it will take for support to reach out

[silver mountain]

Let them take their time, but I have proof that I have cancelled automatic payments, and the emails prove it. Until now, I have not used any room, nor have I opened the site, and everything is supposed to be refunded to me!!

[naive dust]

than it likely will be, you may just have to wait as it is currently very close Christmas

[silver mountain]

😣

[ancient plinth]

Am I the only one that has issues with the flareVM instances? I’m onto the FlareVM room but it’s still consistently not responding and it’s the only one to crash on me

It’s this room and another one prior, but it runs sluggish and eventually crashes

It’s froze on me again now

The rooms I’ve had it run like this is CAPA: the basics and FlareVM: Arsenal of tools

[rancid valve]

i cant access premium page, gives 500 error

[halcyon glen]

hello team

my account is banned i don't know what's the region behind that if anything is violated is that happen by mistake please unblock my account. email:- [e-mail]

[dusty trail]

Hi guys, how are you??
I have an old account I have many cetification from tryhackme i konw user account but not sure about email and not remember pass.
on my email i have many emails from tryhackme.
how i can reset my account.

[ivory spruce]

Suggest you drop an email to THM Support

[west chasm]

@halcyon glen

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Dec 23, 2025, 6:15 PM

[ivory spruce]

^

[halcyon glen]

I'll already sent a mail to support team but couldn't not response yet.

[dusty trail]

and me as you

[dusty trail]

thank you

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 899)

[warped slate]

I've recieved only 2 tickets instead of 3 for the AoC week 5 mission..... How to reach out? Should I drop a mail to the support??

[jolly depot]

It's Christmas time, so probably they'll get to it around early-january

[upbeat rover]

the malware analysis room, attackbox is too slow and not loading properly (my network connection is alright) and I restarted it around 3 times, still the same lagginess/unresponsiveness/or even if it boots up it's soo slow and laggy

[hollow ravine]

I have my THM discord token tied to an older discord I no longer have access to.

Can I regenerate a new discord token for my THM account or have it removed from my older account so that I can use it on my new discord? Thanks.

[naive dust]

Yey you can talk to chat support and ask for generate new token

And wait for agent to reply

[hollow ravine]

Thanks, I will send an email since chat bot path does not ask me to create a ticket.

[proud rain]

Hello, im working on a room Jr Penetration Texter/ Introduction to web hacking > Subdomain Enumeration task 2 : In opening the https://crt.sh/ I keep hitting a bad Gateway Error 502. Sometimes ill get in and the make the search and get the error again

[wheat zephyr]

Just a quick question—are there any known issues with Advent ticket counting?

So far, I’ve completed 23 rooms, finished 1 side quest, and also submitted a meme post. Based on this, I believe I should have a total of 27 tickets. However, my account is currently showing only 26.

I just wanted to check if anyone else is experiencing something similar or if there’s anything I might be missing.

Thanks in advance for the help!

[warped slate]

Same ....1 ticket less ....

[trim wind]

I’m running into an issue with the NMAP room. When I click “Start Machine,” the target VM doesn’t show up like it normally does. I only see the title “Further Nmap—badr” and its IP, but no actual machine screen.

When I click “Start AttackBox,” a separate screen opens, but it’s just the regular THM AttackBox with a completely different IP, not the “Further Nmap—badr” machine I’m supposed to scan.

In other rooms, the target box and the AttackBox are separate like usual, but in these NMAP rooms (like “Nmap the Basics” or “Nmap: An In-Depth Look”), which aren’t official THM-created rooms, I keep running into this problem and can’t complete the tasks.

I’m a premium member, so I don’t think this is a free-user limitation. Any idea what I should do to fix this?

[neon sun]

Any way of getting access to the simulators without being a business ?

[hoary sinew]

I cant seem to get into the bucketmaster account in the day 23 challenge

its saying that i got incorrect client token ID

[clear tusk]

How do I upload images as a downloadable file?

[quartz kettle]

RE: AoC 2025 - Day 23 - AWS Security - S3cret Santa => I have not been able to run the last command of Task 5: Grabbing a file from S3. I've tried CTRL+C to be back to the prompt but can't type anything in. I've started over and terminated the VM, everything that I can think of but still end up not being to type this last command to copy to 'cloud_password.txt'. Please up. I don't want to take the answer from the video vs. getting it myself.

[ivory spruce]

If you verify your account, you should be able to do so.

[west chasm]

@clear tusk

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 24, 2025, 3:08 AM

[ivory spruce]

If I remember correctly, it is in the pipeline to make it available to non-business users / subscribers.

[ivory spruce]

You can have it disassociated or removed from your old discord if you ask one of the mods nicely.

[clear tusk]

Sorry I should’ve been more specific. I meant upload images as a downloadable file when I’m making a tryhackme room, because whenever I try to uploading it as a downloadable file, I keep getting XML and AWS s3 errors when I download the image during testing

If that makes sense

[ivory spruce]

Aahh.. maybe if you verify your account and ask a mod, you can access the room creators channel so you can post your question there.

[clear tusk]

Oh oh thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 900)

[clear tusk]

Sorry, i'm pretty bad at navigating discord. Could you link me to the room creators channel? i can't seem to find it thanks

[scenic torrent]

Gave +1 Rep to @ivory spruce (current: #12 - 901)

[ivory spruce]

Is this something you can help with @austere horizon please?

[eager adder]

My VPN isn't connecting again properly, I type sudo openvpn filename.ovpn and it says Sequence Complete but when I go to the /access apge it says status not connected

[lofty forum]

I've sent ticket to tryhackme 6 days ago about issue with my account and no one is responding.

What are the other options for me to reach out to tryhackme?

[loud hull]

In Mission 5 (Meme It or Lose It), we were supposed to receive 3 tickets, but I only received 2. How can this be reported or resolved?

[serene hound]

i have a problem with the 'advanced sql Injection' room the machine doesn't seem to be working at all i tried the attack box and on my own machine using the vpn it didn't work either way

[sonic siren]

Hi, I have a question regarding certificate names.
My certificate still shows my email as the name. I’ve already updated my profile name, but it hasn’t changed on the certificate. Is it possible to regenerate or update it?
Thanks

[dire pasture]

.

#site-support

Hello,

I hope you’re doing well. I noticed that my TryHackMe account has been disabled and I’m not sure why. Could you please let me know the reason and if there’s anything I can do to restore it?
Username: MR.Fri

[rain sable]

Help

https://tryhackme.com/room/advancedsqlinjection
IP is not working even ping is not working I try using both VPN and tryhackme attack box
still same issue

[glad drum]

hi i am facing this error "Uh-oh! The answer you provided may not be in English. Please review it and try again."

[upbeat bloom]

FYI, not sure if it is me but the data exfiltration detection room VM keeps shutting down and seems to be having issues. I saw one person with similar issues. https://tryhackme.com/room/dataexfildetection

[jolly depot]

Then it seems the answer is wrong

[jolly depot]

It's christmas time and there's probably a lot of tickets - they'll look into it dw

[naive dust]

hi, i have a question about advent of cyber i have two accounts on tryhackme and i only did the warm up room on my first account and i did every challenge on the other account (except the last challenge obviously) i was just wondering if it breaks the rules of advent of cyber or not!

[winged fiber]

Could anyone suggest any resources other than the Troubleshooting OpenVPN on Linux and Mac docs for resolving a VPN connection issue? I'm trying to connect my Kali VM on Proxmox to the VPN, but I can't ping 192.168.128.1, even though it appears in the terminal that the VPN connection is successful

[jolly depot]

It seems like unless you're botting the AoC you should be fine - ToS doesn't say anything about it
https://tryhackme.com/legal/terms-of-use

[stable dove]

Hello, I'd like to ask a question. How can I put in my profile that I have certification?

[jolly depot]

Like a role?

[stable dove]

Yep

[naive dust]

thank you!!

[scenic torrent]

Gave +1 Rep to @jolly depot (current: #98 - 97)

[jolly depot]

First of all verify yourself with /verify - and overall check out #start-here
Then, open a ticket or in some way message mods on the server. I think ticket would be better, but you'd have to ask Dkob about it

[stable dove]

Alright, thanks for the help

[scenic torrent]

Gave +1 Rep to @jolly depot (current: #98 - 98)

[spice lodge]

So i completed all 24 aoc challenges + 1 side quest and 3 social media missions (which total 8 tickets), doing the math (24 days + 1 side quest + 8 social media tickets = 33 total), however I only have 32 so somewhere down the line one of my rooms didn't get counted, anyway i could get it fixed

[naive dust]

How do I do the social media missions? I did the full 24 and missing tickets

[frank current]

same...

[naive dust]

I did the meme on social media tag you guys and used hash tags

On isntagram

[regal sun]

Hey guys I already posted this in the bug-report channel but also wanted to mention this here because I feel like it's something that needs to be fixed ASAP:
I noticed that after completing AoC 2025, the "Generate certificate" button creates a brand new certificate each time I click it, no matter if I've already generated one. So now, my profile shows that I have 3 different AoC 2025 certificates, each with different certificate IDs.
If anyone can verify that this issue also occurs for them that'd be great, and please up-vote my thread in the bug-report channel if that's the case. Also please don't abuse this and generate 10000 certificates lol.

[loud tundra]

there s a problem with day 19 attack box: nmap and any command that might use the internet doesnt work 🙁

[tawdry orbit]

Thank you for reporting. We're going to fix it. 🎄

[scenic torrent]

Gave +1 Rep to @regal sun (current: #3460 - 1)

[winged fiber]

I tried generating new .ovpn files and connecting on Linux and MacOS, and while the connections appear successful on the client, I can't ping 192.168.128.1

[naive dust]

How do i earn the tickets for social media after doing the meme and tag? Anyone @tawdry orbit

[supple shuttle]

hey guys i have completed advent of cyber but still am unable to see any certitificate or etc in my account why

?

ok ok problem solved got it

[clear jewel]

I am once again asking if anyone knows why Linkedin login only works on some browsers in some conditions

[final tartan]

guys i kinda need help
can i have a kali vm instead of attack box ?
using open vpn ? (1 hour time limit )

[elder vector]

If you pay yes 🙂 Kali online is only available to premium subscribers.

[final tartan]

i have a kali vm

do i have to pay

?

kali vm installed vm ware

[elder vector]

Nope if you have a virtualbox/VMware then that is fine you can use for the majority of the rooms, some rooms can be buggy though I will prewarn you. The OpenVPN room will get you up and running with your own VM connecting to tryhackme vpn 🙂 https://tryhackme.com/room/openvpn

[final tartan]

yeah it works in open vpn room
but in rooms that have attacker machine and target machine
i think i am connected as the target machine

i want to be as the attacker machine

[elder vector]

I mean like there was like 5/6 rooms I couldn't get to work whilst on my Kali VM. I was forced to use my Attackbox for? What room we talking about?

[final tartan]

day 8 aoc 25

[elder vector]

i think one worked for me in Kali, its the one with the calender right

[minor totem]

my aoc network config doesnt connect my own machine

[final tartan]

yep

Unable to connect

An error occurred during a connection to target machine ip .

The site could be temporarily unavailable or too busy. Try again in a few moments.
If you are unable to load any pages, check your computer’s network connection.
If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the web.

this opened for me in firefox browser in kali vm

[elder vector]

2 seconds ill just try and launch

[final tartan]

ok

[minor totem]

┌──(kali㉿kali)-[~/Downloads]
└─$ sudo openvpn akshat4165-aoc_bsides_2025.ovpn
2025-12-25 01:21:13 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-12-25 01:21:13 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-12-25 01:21:13 OpenVPN 2.6.15 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-12-25 01:21:13 library versions: OpenSSL 3.5.2 5 Aug 2025, LZO 2.10
2025-12-25 01:21:13 DCO version: N/A
2025-12-25 01:21:13 TCP/UDP: Preserving recently used remote address: [AF_INET]52.51.63.159:1194
2025-12-25 01:21:13 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-25 01:21:13 UDPv4 link local: (not bound)
2025-12-25 01:21:13 UDPv4 link remote: [AF_INET]52.51.63.159:1194
2025-12-25 01:22:13 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-12-25 01:22:13 TLS Error: TLS handshake failed
2025-12-25 01:22:13 SIGUSR1[soft,tls-error] received, process restarting
2025-12-25 01:22:13 Restart pause, 1 second(s)
2025-12-25 01:22:14 TCP/UDP: Preserving recently used remote address: [AF_INET]52.51.63.159:1194
2025-12-25 01:22:14 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-25 01:22:14 UDPv4 link local: (not bound)
2025-12-25 01:22:14 UDPv4 link remote: [AF_INET]52.51.63.159:1194

[final tartan]

u have ur connection nat type ?

[elder vector]

yeah I remember this room

[minor totem]

me?

[elder vector]

click the click the change from https to http 😉

[final tartan]

yes

[minor totem]

yes its NAT

Normal vpn connects well but aoc isnt connecting

[jolly depot]

Alr, seems like it actually isn't
https://help.tryhackme.com/en/articles/8537472-advent-of-cyber-2025-terms-and-condition

[elder vector]

Did you get it working ?

[final tartan]

sadly no

i tried both

http

and https

[elder vector]

🙁 I am sorry maybe reboot the target machine

im up and running with just changing to http

[final tartan]

so u just changed the link

no setting ?

[minor totem]

help me please

[naive dust]

"Users should only enter the event once, using one account" T-T does the prep one give a raffle anyway?

[elder vector]

no changing anything just double click the link in firefox, it should then allow to enter http instead of https that is all i did

[final tartan]

ok thx , i will try again

[jolly depot]

Nope

[naive dust]

yay!

thank you

[minor totem]

└─$ openvpn akshat4165-aoc_bsides_2025.ovpn
2025-12-25 01:33:06 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-12-25 01:33:06 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-12-25 01:33:06 OpenVPN 2.6.15 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-12-25 01:33:06 library versions: OpenSSL 3.5.2 5 Aug 2025, LZO 2.10
2025-12-25 01:33:06 DCO version: N/A
2025-12-25 01:33:06 TCP/UDP: Preserving recently used remote address: [AF_INET]52.51.63.159:1194
2025-12-25 01:33:06 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-25 01:33:06 UDPv4 link local: (not bound)
2025-12-25 01:33:06 UDPv4 link remote: [AF_INET]52.51.63.159:1194
2025-12-25 01:34:06 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-12-25 01:34:06 TLS Error: TLS handshake failed
2025-12-25 01:34:06 SIGUSR1[soft,tls-error] received, process restarting
2025-12-25 01:34:06 Restart pause, 1 second(s)
2025-12-25 01:34:07 TCP/UDP: Preserving recently used remote address: [AF_INET]52.51.63.159:1194
2025-12-25 01:34:07 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-25 01:34:07 UDPv4 link local: (not bound)
2025-12-25 01:34:07 UDPv4 link remote: [AF_INET]52.51.63.159:1194

[minor totem]

tried like 1000 times still the issue persists

[jolly depot]

Run it as sudo

[jolly depot]

You're welcome - also don't forget to verify #start-here

[minor totem]

Doesn’t work

[jolly depot]

Run it with sudo and show us the whole result

[minor totem]

Worked

Thanks

How do i connect my discord account with the discord token?

[naive dust]

Done!

[jolly depot]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account~

[jolly depot]

Nice, congrats and welcome to the community

[pine kraken]

What's the password for the AttackBox for the Ubuntu user?

It just got logged me out and now asks for a password.

I'm doing AoC, day 23.

[glad drum]

hello any body here from tech team ?

[jolly depot]

On AttackBox you're mostly root so try to log in with creds root:root

[pine kraken]

ok wait so, the box we're given to work on isn't really attackbox, but just like the attackbox? I'm working on the Day23 room of the AoC, and it just asked me to log in (provide password) while working on it.

[glad drum]

I am currently working on a TryHackMe room and facing an issue while submitting an answer. The platform shows the following error message:

“Uh-oh! The answer you provided may not be in English. Please review it and try again.”

The answer I am submitting is a hexadecimal hash:
fb364762a3c102b2db932069c0e6b78e738d4066

I have already tried multiple approaches, including:

Submitting the value in THM{ } flag format

Verifying the answer multiple times

Reviewing the question instructions carefully

[scenic stream]

cant connect to machine sq1 ( asia )

but can ssh to other machine

[jolly depot]

You mean the machine that you're attacking prompted you for the password?

[jolly depot]

What room? Also #room-help

[jolly depot]

Did you find key that unlocks SQ 1?

[scenic stream]

Yes i am solving flag 2 then suddenly i cant connect to it anymore I feel like its ISP are there any workaround?

[jolly depot]

Try to access port 21337 and see if it didn't lock you out

[scenic stream]

tried all ports can't connect to any web tried also other challenges

but i can ssh

[jolly depot]

try to log in with root:root. Also check for presense of .ssh folder

And why do you need to ssh into AttackBox? This sounds like an XY problem to me and maybe there's a better way to solve it?

[jolly depot]

Maybe restart the machine?

[scenic stream]

restarted already by many times

[jolly depot]

Other machines work fine?

[scenic stream]

Nope i cant connect when its a web chall the page won't load this is to all web challenge

cant even curl but i can ping there is a response

[jolly depot]

You're using your machine?

Is .ssh on attackbox or your machine. And is the machine connected to THMs VPN

By XY problem I mean

There's a problem X, and you think Y will help - Y doesn't work so you ask for help to make Y work. But not the real problem X
https://en.wikipedia.org/wiki/XY_problem

.ssh should be on attackbox. Also try to ping it to check if it's up

I feel like X is either

"I want to transfer some files from AttackBox to my VM"
"I wanna use AttackBox to solve THM, but it works too slow for me"

You have a Kali VM right?

[jolly depot]

So I was right about XY problem - but to the solution for X

AttackBox is meant for only in-browser usage. it's made, so you can access the platform and learn when you can't/don't know/don't want to set up your own machine

But some of us prefer to work on our setups - that's where we have all our tools, notes, everything is configured just as we feel the most comfortable and it runs much smoother than THMs solution. And that's where OpenVPN comes in handy. This solution makes it possible to connect your setup, to TryHackMe's network and access all the machines as if we were using attackbox

In your case it'd be the best to get a hypervisor like VMware or Virtualbox and set up your own virtual machine in it. Preferably, with an operating system like Kali linux or Parrot OS This way, you have most of the tools from the AttackBox, it'll work smoother than THMs and will be much more customizable to your needs

If you (for some reason) can't get a VM, Kali's WSL (Windows subsystem for linux) will partially do the job too

[scenic torrent]

Gave +1 Rep to @jolly depot (current: #97 - 99)

[jolly depot]

You're welcome

[pine kraken]

Not that I'm attacking, I'm working in (using the terminal blah blah). Anyways, forget it, I have done the room now.

[scenic stream]

Yes

[scenic stream]

i can connect to it again bruh

[cunning olive]

i can't add the p

[inner valley]

Hey.. Im in the https://tryhackme.com/room/iamprincipals room.. and the task says I need to Generate Environment from "Cloud Details" .. but Cloud Details does not give me any option to generate this environment.. can anyone help??

[azure river]

Hi Admins, I’m facing an issue connecting to the Advanced SQL Injection room "https://tryhackme.com/room/advancedsqlinjection". I’ve deployed the room twice and also redeployed the AttackBox twice, but I’m still unable to ping the target machine. I have screenshots for reference and would appreciate your help in checking this. Thank you.

[jolly depot]

Then this actually might be an isp issue

[worldly plaza]

Hey Team,
I'm doing day 10 of AoC and all the passwords are coming up incorrect to the Azure Portal

[pliant jackal]

Same with me

[brisk sail]

no logs data in Microsoft Sentinel tried 2 different accounts aoc 10

[ember osprey]

Try to expand timeframe

[azure river]

I think all the mods and admin are on holiday so no resolution to the issue

[stark jacinth]

use -Pn for nmap, but the web part of it still doesn't work...

[deft perch]

👋

[verbal sonnet]

👋

[marble minnow]

👋

[cosmic coral]

Uh Hey guys I set up my own VM and i thought that was like the free way to get by the hour limit or did i do something wrong

[tidal otter]

Hi i have an issue that my account (WanHecho) has been banned and im not able to do anything, i didnt do anything that violate your terms, please help me and feedback me as fast as possible that why did u banned me and how i can solve it

[lunar elk]

no its the good ways ! just need to download your vpn config

[jolly depot]

it's a good way - now just download a VPN config file and connect to it via openvpn command

[jolly depot]

In that message there should be an email for ban appeals - if you don't recall it just message support

They're on holidays now, but they'll get to your ticket once they come back

[cosmic coral]

I down load the VPN config file from under "Machines?" If it's that i tried that also thank yall both for the response

[scenic torrent]

Gave +1 Rep to @jolly depot (current: #95 - 103)

[jolly depot]

Yeah, exatcly that one

[cosmic coral]

I had already tried this i did "Open terminal from file" then i ran "sudo open (name of file)" But it tells me i need like a subscription to use this type of VM

[jolly depot]

Huh? Which room?
Also, you need to use sudo openvpn command

[cosmic coral]

Yeah sorry that's what i meant i used

[cosmic coral]

AI in security

[jolly depot]

So, first questions to establish what we work with

Do you have your own VM that runs kali? And did you download the config file from
https://tryhackme.com/manage-account/access

[cosmic coral]

Yes I run Kali linux on virtule box and that's the same place i got the config from

[jolly depot]

Alr open a new terminal and connect to open vpn using the command we've mentioned above

[cosmic coral]

K

[cosmic coral]

Then what?

[jolly depot]

Start the machine in the task and go to the address provided in the task

[cosmic coral]

Task is in the same AI room?

[jolly depot]

Yeah, you start the machine with a big green button

[cosmic coral]

Gotcha

[cosmic coral]

Should i do this in the VM or off

[jolly depot]

Doesn't matter where you click but - but you have to access the IP from a VM

[cosmic coral]

I don't think it's going to work still loading so im guessing it might time out

Yeah it just timed out

[jolly depot]

Do you access it via https or http

[cosmic coral]

The task has the I.P under http

[jolly depot]

Yeah, and you're supposed to visit it to solve the task

[cosmic coral]

Yeah but every time i visit it it's just timing out

[jolly depot]

Are you connected to the VPN and started the machine? Also, try to add :80 at the end of the url

[cosmic coral]

We connected to the VPN via sudo openvpn (name) right?

[jolly depot]

Yup. Did the VPN connect successfully?

[cosmic coral]

Yeah it did at first it said connected but now it says not connected so i'll try it again

[jolly depot]

Alr

[cosmic coral]

Okay it's connected again

[cosmic coral]

It looks like it's just going to Time out again

[jolly depot]

Can you share me here the machine's IP rq? Imma check it on my VM

[cosmic coral]

Share it here or a PM

10.66.150.186

[jolly depot]

Alr, you're on which server? Asia, US or Europe?

[cosmic coral]

US

[jolly depot]

Alr, I'm on europe so can't really connect there myself

Try to visit http://10.66.150.186:80

Remove the trailing slash and add :80 to the end

[cosmic coral]

Gotcha

[cosmic coral]

It just looks like it's gunna time out again

Yeah timed out

[jolly depot]

Can you verify and join the VC? I feel like I'm missing some details here but I'm not quite sure which one

[west chasm]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 25, 2025, 11:55 PM

[cosmic coral]

Sure

[cosmic coral]

Uh which VC

[cosmic coral]

Lemme get my mic connected

[naive dust]

no response as of yet, machine is unresponsive; the issue has been raised with support via email as well. you can also upvote and send a message in the #1333993673381253162 made for the issue so its pushed back up to the top https://discord.com/channels/521382216299839518/1452296977839685642. the issue may take some time to resolve unfortunately as it is Christmas

[azure river]

Thank you for raising the bug 👍

[scenic torrent]

Gave +1 Rep to @void nebula (current: #305 - 31)

[solemn blade]

Can someone please hack into my ipad so i can open in pls ill pay them in my currency i will pay RM15

[naive dust]

Apple ID/iCloud: https://iforgot.apple.com
other lockouts: contact Apple Support Malaysia or visit an authorised Apple service provider

[solemn blade]

Alright thank you

[scenic torrent]

Gave +1 Rep to @void nebula (current: #302 - 32)

[solemn blade]

I give up💔

[solemn blade]

To be honest im considering throwing my ipad away even though its still good as new,,

[jovial axle]

Just me or it shows public IP same as private IP on attackbox? I was looking to move some file from attackbox to my machine.

[naive dust]

there are no longer public IPs for targets or the AttackBox, they just never updated the UI

[waxen fjord]

Hello! I connect to the rooms through my own VM with openvpn. I download the "Premium Config file"
Basically I don't understand why it gives a US file when I'm from EU..

I find it very slow, but maybe this is the "normal" time.

For example, there was SOCmas room 8 where you have to talk to AiAgent, I send him a prompt. It takes about 6-7 minutes for a response to come back. This really slows down progress.

[naive dust]

you can switch your VM region via https://tryhackme.com/manage-account/access

[waxen fjord]

Oh my god, is it that simple? 🤣

[near oxide]

There is an issue in the room Session Management Task 6, logging into the given site isnt giving the funtionality as mentioned in the room

[naive dust]

you will also need to redownload the config file

[waxen fjord]

How long is normal in this example? I send a message to King Malhare AI Assistant in ROOM 8, it takes about 30sec-1min to respond.

it is ok? or slow?

[naive dust]

most AIs in rooms are about that slow, fairly normal

[waxen fjord]

oke ! thank you ! now the new EU config is much better

[frosty jungle]

@west chasm Why my account have been banned what should I do with this problem????

[naive dust]

contact [e-mail]

[potent hatch]

hey guys I need help, I'm in room Subdomain enumeration and I need to use ffuf on the very last task on the attack box and I have to include the -fs tag which makes my ffuf go slower on the provided 151k wordlist, shouldn't this be fast?

[frosty jungle]

nearly 2 weeks no see any response

[naive dust]

support is slow due to it being the Christmas holidays unfortunately

[potent hatch]

Happy holidays!!!

[naive dust]

it is normal to be slower when using the -fs operator, you can increase threads from the default of 40 using the -t operator and set your -timeout to 2

[potent hatch]

Very well than, let me see

is there any importance on the location of the tags hirarchy wise?

still the same 🙁

[naive dust]

position does not matter unfortunately when using -fs it can be incredibly slow due to it being a more extensive check

[brave estuary]

Ladies and gentlemen, I would like to ask for help with this problem: for a long time I have been trying to figure out why there is no ping on the 192.168.128.1 IP. I installed openvpn-troubleshooting to understand what is wrong. He gave me this error: "MTU value failed at 1000,aborting MTU check; something went wrong -- please ask for further assistance in the TryHackMe Disscord server, subreddit,or forum. I use the Europe (Ireland) region because, in theory, this region is closest to me. Also, for additional information: I use Wi-Fi, kali linux. I would be glad if someone could help me with this problem.

[brave estuary]

In the config, I added the following parameters: tun-mtu 1200, mssfix 1160, and I gradually reduced these values to 740/700, but it didn't help

[naive dust]

Good morning I still need help with missing tickets from Advent I did the social media but haven’t received the tickets any suggestion? @west chasm

[lethal anvil]

AOC day 15 issue: Splunk license is expired @west chasm

[devout flare]

Quick question: in a company’s custom THM room, do they get access to command history or just task completion?

[arctic geyser]

Hi staff,
I wanna link another THM account to my Discord account..

please help

[marsh magnet]

@lone gull What server are you currently trying to connect to?

[lone gull]

US East (N. Virginia)

[marsh magnet]

We using a VM?

[lone gull]

yes

[marsh magnet]

VBox or VMWare?

[lone gull]

VMWare

[marsh magnet]

Not running another other VPN services?

[lone gull]

Nope

[marsh magnet]

sudo killall openvpn

Run this inb a terminal for me

[lone gull]

done

[marsh magnet]

then initialize the VPN config file

sudo openvpn vpnfile.ovpn

[fading rivet]

how come my ssh that im trying to use intsead of paying subscripotion wpont show username or password?

[marsh magnet]

Not all machines support SSH.

[fading rivet]

it only shows ssh option in docker intro room

[lone gull]

Ok. Did it. Gonna try to connect to a random machine again

[marsh magnet]

Nah

ping 192.168.128.1

Try that

if a 10.x.x.x IP returns

it's worked

if not

I have a fix

[fading rivet]

UserName:
N/a
Password:
N/a
Protocol:
ssh

[marsh magnet]

As I said, not all machines support SSH, some need to be scanned first or connected to via a different service

Unless it specifies SSH details, try an NMAP scan

[lone gull]

still can't access the machines

[marsh magnet]

sudo ip link set dev tun0 mtu 1200 run this in a new terminal

keep the old one open

[lone gull]

ok, done

[marsh magnet]

try it again

[marsh magnet]

That's better

wrong IP

but try a room now

[marsh magnet]

Try connecting to http://10.10.10.10/whoami

[lone gull]

trying to access the machine from the sq1

[lone gull]

not working either :/

[marsh magnet]

Hmmmm

try running the troubleshoot script again

[lone gull]

same thing

[marsh magnet]

That's odd

Go and delete your initial VPN config

go back to the site and regenerate one that is on a different server but wait 5 minutes before downloading

[lone gull]

ok

Ok, just dit it all. Still not working :/

I'm gonna try different solutions later, or even open a ticket. Thanks for the help anyway @marsh magnet 🙂

[scenic torrent]

Gave +1 Rep to @marsh magnet (current: #36 - 315)

[marsh magnet]

Your welcome 🙂

[old elm]

wtf?? i can't fix it right?

[scenic torrent]

Gave +1 Rep to @old elm (current: #3472 - 1)

[marsh magnet]

You need to report it as a #1333993673381253162

Or email support

[old elm]

ok, thanks @marsh magnet

[scenic torrent]

Gave +1 Rep to @marsh magnet (current: #36 - 316)

[molten phoenix]

Hello everyone,
I had finished AoC challenges and earned all 24 tickets, but still there 16 Tickets.
How can I earn them?

[safe pebble]

I am using a macbook pro. Do you know if I can change the size of my attack box display?

[jolly depot]

You can open it in a new tab

[naive dust]

you can resize it by dragging or you can go fullscreen using the fullscreen arrows or by visiting: https://tryhackme.com/fullscreen-vms/

[safe pebble]

hmm, i was using elasticsearch in firefox and somehow the layout of the browser was off... it looked different than the last time when i used the attackbox couple months ago...

[naive dust]

there are slight UI changes that occur over time, if not there may be some scaling on your Firefox that makes it appear off

[quick depot]

i have the same issue , did u solve it ?

[sweet wraith]

me too

[lone gull]

Tried to connect again. Turns out I needed to update and upgrade my distro and OpenVPN. Now it's working

[naive dust]

as stated by wide this issue needs to be raised in #1333993673381253162 and/or emailed to [e-mail]; room issues are currently pending as many staff are on holidays so please be patient

[late locust]

Hello,

I am having a problem with aoc bsides openvpn, not able to connect to it, any solutions?

[naive dust]

verify to send a screenshot of the specific issue (or you can just copy-paste)

[west chasm]

@late locust

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 27, 2025, 6:22 AM

[late locust]

2025-12-27 11:49:18 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts. 
2025-12-27 11:49:18 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers. E.g. --data-ciphers AES-256-CBC:BF-CBC
2025-12-27 11:49:18 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-12-27 11:49:18 OpenVPN 2.7_rc4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-12-27 11:49:18 library versions: OpenSSL 3.5.4 30 Sep 2025, LZO 2.10
2025-12-27 11:49:18 DCO version: N/A
2025-12-27 11:49:18 TCP/UDP: Preserving recently used remote address: [AF_INET]34.252.217.25:1194
2025-12-27 11:49:18 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-27 11:49:18 UDPv4 link local: (not bound)
2025-12-27 11:49:18 UDPv4 link remote: [AF_INET]34.252.217.25:1194
2025-12-27 11:50:18 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-12-27 11:50:18 TLS Error: TLS handshake failed

[naive dust]

what country are you connecting from?

[late locust]

India

[naive dust]

1. go through common fixes such ensuring the protocol used is UDP (THMs default) and regenerating the .ovpn
2. add disable-dco directly underneath client in your .ovpn file
3. you are on a RC build of OpenVPN, I would suggest downgrading to 2.6.x (stable)
4. change your TryHackMe VM region https://tryhackme.com/manage-account/access

[late locust]

Ok, I'll try

[warped jungle]

question - only rooms that provide user & password can be SSH'd in correct?
the attackbox is awfully slow....

[naive dust]

for most rooms your options are the AttackBox or connecting your own machine via OpenVPN

[warped jungle]

sorry let me rephrase - can i only connect my own machine via OpenVPN to the rooms that provide user & password?

[naive dust]

ah my apologies. you can connect no matter what using your .ovpn config generated at https://tryhackme.com/manage-account/access

https://help.tryhackme.com/en/collections/3664918-openvpn-guide
https://tryhackme.com/room/openvpn

[warped jungle]

@naive dust oh thats awesome, thanks for the help 🙏

[scenic torrent]

Gave +1 Rep to @void nebula (current: #227 - 45)

[naive dust]

no worries at all, enjoy

[late locust]

None of them helped, still the same issue.

[naive dust]

try the official troubleshooter first https://github.com/tryhackme/openvpn-troubleshooting

[late locust]

There is no option to select the region, I tried regenrating the config but it doesn't work.

                                                                                                                                                                     
Looks like you're running Kali                                          @MuirlandOracle                                                                              


[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[Warning!] Connection process is taking longer than expected to complete
[-] Failed to connect
Failure to connect to the VPN can usually be solved by one of the following options:
        -Regenerating your OpenVPN config on the TryHackMe access page (https://tryhackme.com/access)
        -Switching servers, then regenerating your OpenVPN config
        -Checking your system time. If your system time is incorrect then this can cause issues with the authentication process
If none of these methods work, please ask for further assistance in the TryHackMe Discord server, subreddit or forums.
[-] Exiting

[naive dust]

I would first suggest downgrading to the stable build of OpenVPN if you haven't already

• ensure tun0 is loaded sudo modprobe tun
• run the connection with verbose logs sudo openvpn aoc_bsides_2025.ovpn --verb 6
• if verbose logs cant point you to the issue I would suggest using Cloudflare WARP (if allowed in your country) underneath OVPN to rule out firewall and networking related issues

[late locust]

• downgraded to OpenVPN 2.6.3 (done already)
• tun0 is loaded
• verbose logs saying

2025-12-27 13:11:33 us=525863 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-12-27 13:11:33 us=525901 library versions: OpenSSL 3.5.4 30 Sep 2025, LZO 2.10
2025-12-27 13:11:33 us=525954 DCO version: N/A
2025-12-27 13:11:33 us=528960 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2025-12-27 13:11:33 us=529073 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2025-12-27 13:11:33 us=529310 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
2025-12-27 13:11:33 us=529382 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2025-12-27 13:11:33 us=529467 TCP/UDP: Preserving recently used remote address: [AF_INET]34.252.217.25:1194
2025-12-27 13:11:33 us=529534 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-12-27 13:11:33 us=529578 UDPv4 link local: (not bound)
2025-12-27 13:11:33 us=529615 UDPv4 link remote: [AF_INET]34.252.217.25:1194
2025-12-27 13:11:33 us=529702 UDPv4 WRITE [86] to [AF_INET]34.252.217.25:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
2025-12-27 13:11:35 us=678925 UDPv4 WRITE [86] to [AF_INET]34.252.217.25:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2 ] [ ] pid=0 DATA len=0
2025-12-27 13:11:39 us=977016 UDPv4 WRITE [86] to [AF_INET]34.252.217.25:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #3 ] [ ] pid=0 DATA len=0
2025-12-27 13:12:33 us=220275 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2025-12-27 13:12:33 us=220377 TLS Error: TLS handshake failed
2025-12-27 13:12:33 us=220714 TCP/UDP: Closing socket

[naive dust]

1. nc -vu 34.252.217.25 1194 if that fails your connection is being blocked either by a firewall, ISP, or other network restrictions
2. add disable-dco to the config if not already (if it did not fix the issue, remove it)
3. change your VM region in https://tryhackme.com/manage-account/access then go back and regenerate the config

[late locust]

$ nc -vu 34.252.217.25 1194
ec2-34-252-217-25.eu-west-1.compute.amazonaws.com [34.252.217.25] 1194 (openvpn) open

tried changing to europe region and regenerated the config waited 5 mins to download and downloaded it. But still same. Not fixed.

[radiant rock]

#site-support message - I have the same problem like the one reported by @azure river - I can't even ping target machine. I tried many times through vpn and attack box and problem still occurs. I tried after 5, 10, 15 minutes since target machine started and still can't connect to target machine.

[naive dust]

1. you have unsupported ciphers; under client add the following lines disable-dco, data-ciphers AES-256-GCM, data-ciphers-fallback AES-256-GCM
2. bit stupid but ensure your system time is synced sudo timedatectl set-ntp true
3. run with maximum verbosity --verb 9
4. try running WARP underneath if you have not done already

[late locust]

Already did all these steps. Yesterday without changing anything it worked and didn't do any updates in my kali. But getting like this now. For one of my friend yesterday it didn't work today it's working for him.

[naive dust]

unfortunately while not incredibly common there can be instability, I would suggest giving it some time possibly a full day and trying again if none of these troubleshooting steps have helped as we have essentially ruled out most issues on your network

[brave estuary]

If you fix the problem, can you tell me how you fixed it? I'm having the same problem (

[naive dust]

unfortunately the machine is unresponsive, an email has already been sent to support but you can also send a message in the bug report
(https://discord.com/channels/521382216299839518/1452296977839685642) to push it up to the top. room issues may take some time to fix due to it being the holidays currently

[sly spoke]

Hello @west chasm, I'm Adarsh Kumar (THM profile: spyd3), I have completed all the 25 rooms (including the prep track) of Advent of Cyber 2025, but on my profile only 17 rooms are counted as completed, all the rest of the rooms are shown in the uncompleted list in 'saved rooms' tab even if there are 100% completed. I think there is a sync issue, can you please fix this. After adding all the rooms I have completed, my profile is should be expected to show '36 rooms completed' but it is showing only '29 rooms completed',

please fix this

[karmic seal]

I am getting the public IP address. 192.168.x.x after connecting to the vpn. And I am not able to access the machines.

Any idea how to fix this?

[upbeat quarry]

everything good
10.10.10.10 is a thing of the past: check the 2 latest Pinned Messages

[karmic seal]

oh thanks

[scenic torrent]

Gave +1 Rep to @upbeat quarry (current: #8 - 1152)

[tardy cape]

Hi Guys

Need support

Aoc - Day 15

Splunk while logging its showing lincense has expired

[naive dust]

ongoing issue, staff have been made aware
https://discord.com/channels/521382216299839518/1453873210675171408

[tardy cape]

Any soultion ?

[naive dust]

unfortunately not, TryHackMe will resolve the issue in some manner over the coming weeks, it may take some time due to it being the holidays currently

[tardy cape]

Okay noted

[zealous nymph]

@austere horizon @torn citrus @cold owl This Person is Promoting CryptoCurrency

[cold owl]

:hammer: al4ghxtt#0 has been banned.

[cold owl]

[BAN] User left the discord server.

[lyric thorn]

i am not able to connect my openvpn with my virtual machine, it is always showing AUTH_FAILED, any ideas how to fix this?

[zealous nymph]

@lyric thorn Can u Provide a Screenshot ?

[lyric thorn]

yup

[lyric thorn]

not able to paste the ss

idk why

[zealous nymph]

First Verify Your Account, Then u can paste Screenshot - https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[lyric thorn]

got it

[zealous nymph]

wait......

[zealous nymph]

AUTH_Failed most commonly means Wrong username or password

[jolly depot]

Where did you download this vpn config from?

[lyric thorn]

tryhackme

machines

[lyric thorn]

i am pretty sure it is the same

[lyric thorn]

before it use to give error of user-auth-path inline, so i edited and deleted the <user-auth-path>.../<user-auth-path> portion and ran it

[lyric thorn]

then it gave me this error

[drowsy locust]

"Hello, I'm [generalgoril41], participating in the '[AI in Security - old sAInt nick]' event. In the 'AI Showcase' section, which consists of 4 stages, I noticed that one of the flags, the final flag [THM{AI_MANIA}], has a vision power that can be used before completing all stages. I believe this will prevent the event from being played fairly. I kindly request that you share your progress to mitigate this bug. Thank you!"

[jolly depot]

You definitely shouldn't be prompted to log in

[arctic geyser]

someone help i accidently left hoppers origin after getting invite

[tiny ledge]

attackbox is nonresponsive

[lyric thorn]

what do you mean?

[tiny ledge]

i open terminal, excecute a pluma command, it runs and when i maximize the pluma window it just does not responds

[jolly depot]

TryHackMe's VPN doesn't require passing any sort of credentials

[lone gull]

After trying everything I knew, I just did
1 - sudo apt update && sudo apt upgrade
2 - sudo apt install openvpn

[tiny ledge]

is it because of my internet?

[lone gull]

reboot the system and then try again