zenith obsidian Mar 16, 2019, 2:11 PM

#

ill try that

deep trellis Mar 16, 2019, 2:12 PM

#

Awesome, PickleRick once deployed works for sure

#

I've just tried and have had no problems with webappsec

zenith obsidian Mar 16, 2019, 2:13 PM

#

ok just updated it ill try connecting to rick

#

📎 unknown.png

#

samething

#

ill try a new config file

deep trellis Mar 16, 2019, 2:16 PM

#

Try disconnecting and reconnecting

zenith obsidian Mar 16, 2019, 2:16 PM

#

i did

deep trellis Mar 16, 2019, 2:16 PM

#

Yeah regenerate your OpenVPN file too

zenith obsidian Mar 16, 2019, 2:17 PM

#

i did that too

#

still nothing

#

is it because my normal home ip is on a 10...* address?

#

10.0.0.*

deep trellis Mar 16, 2019, 2:19 PM

#

Ohhh, our routing table routes all 10. traffic

zenith obsidian Mar 16, 2019, 2:19 PM

#

yea i read that

deep trellis Mar 16, 2019, 2:19 PM

#

Do route -a

#

See yours routes

#

Which takes properties

zenith obsidian Mar 16, 2019, 2:20 PM

#

while connected to openvpn?

deep trellis Mar 16, 2019, 2:20 PM

#

Yeah

zenith obsidian Mar 16, 2019, 2:20 PM

#

ok

deep trellis Mar 16, 2019, 2:20 PM

#

Im just about to pop out to the shops

zenith obsidian Mar 16, 2019, 2:20 PM

#

whats route -a

deep trellis Mar 16, 2019, 2:20 PM

#

I'll help you diagnose it moreater

#

Is that ok?

zenith obsidian Mar 16, 2019, 2:20 PM

#

route -a did nothing

#

📎 unknown.png

#

i just did route and got that

#

oh the metric

timid tangle Mar 16, 2019, 2:25 PM

#

hey @zenith obsidian, what's the issue? You can't connect to your machine?

zenith obsidian Mar 16, 2019, 2:26 PM

#

fixed it

#

thanks @deep trellis

timid tangle Mar 16, 2019, 2:26 PM

#

Cool

zenith obsidian Mar 16, 2019, 2:30 PM

#

well

#

webappsec still isnt working for me

#

but all the others are

deep trellis Mar 16, 2019, 2:32 PM

#

Oh, PickleRick works for you??

zenith obsidian Mar 16, 2019, 2:33 PM

#

yes

deep trellis Mar 16, 2019, 2:34 PM

#

Hmm I look into that later

#

Sorry man

zenith obsidian Mar 16, 2019, 3:09 PM

#

ugh im so close

#

i have the first two ingredients for picklerick

deep trellis Mar 16, 2019, 3:13 PM

#

Eyyy :)

zenith obsidian Mar 16, 2019, 3:16 PM

#

im lost tho for the last one

#

im probably overthinking

#

nvrmind webappsec works now

deep trellis Mar 16, 2019, 3:39 PM

#

Oh rihht

#

It does sometimes takes a minute to boot

wet shard Mar 19, 2019, 2:20 PM

#

I'm working on a VM :D, I might bother you about configurations soon 😃

deep trellis Mar 19, 2019, 5:19 PM

#

yyyayyyy!

#

Thats awesome man!

#

Looking forward to trying it out

naive dust Mar 22, 2019, 1:34 PM

#

has anyone done Mr Robot ?

#

I’m not able to get a reverse shell

copper mist Mar 22, 2019, 1:37 PM

#

I have, what Reverse Shell are you using?

#

Use:
http://pentestmonkey.net/tools/web-shells/php-reverse-shell with nc -v -n -l -p {port}

#

Works vv nicely

naive dust Mar 22, 2019, 1:39 PM

#

yea i’m using that only

#

but what am I supposed to change in it ?

copper mist Mar 22, 2019, 1:39 PM

#

The host and port number

naive dust Mar 22, 2019, 1:42 PM

#

~ nc -lnvp 4444,
If the machine ip (box) is 192.168.1.3 then
$ip = ‘192.168.1.3’
$port = ‘4444’ ?

copper mist Mar 22, 2019, 1:43 PM

#

Try a different port

naive dust Mar 22, 2019, 1:43 PM

#

1234 ?

copper mist Mar 22, 2019, 1:43 PM

#

1234 or 3344 I think

naive dust Mar 22, 2019, 2:06 PM

#

it isn’t working :(( @copper mist

copper mist Mar 22, 2019, 2:10 PM

#

Will try to help more when I'm at my laptop

naive dust Mar 22, 2019, 2:10 PM

#

alright

deep trellis Mar 22, 2019, 2:11 PM

#

What isn't working for you guys?

#

The Mr Robot

copper mist Mar 22, 2019, 2:11 PM

#

Not working for Sudo

naive dust Mar 22, 2019, 2:11 PM

#

I’m trying to get a reverse shell

copper mist Mar 22, 2019, 2:12 PM

#

That method should work

thorn badger Mar 22, 2019, 2:12 PM

#

@naive dust you have to put your local machine ip address here

#

Today i completed this room

naive dust Mar 22, 2019, 2:14 PM

#

My local machine ip is 192.168.1.1
The Box ip is 192.168.1.3

thorn badger Mar 22, 2019, 2:15 PM

#

Put the 192.168.1.1 in the php shell

deep trellis Mar 22, 2019, 2:15 PM

#

No no no

#

Your ip isn't 192.*

#

It should be a 10.

thorn badger Mar 22, 2019, 2:16 PM

#

Your ip will be in 10...*

naive dust Mar 22, 2019, 2:16 PM

#

I’m running the Vulnhub machine locally because my wifi is down @deep trellis

deep trellis Mar 22, 2019, 2:16 PM

#

Ah ok

naive dust Mar 22, 2019, 2:16 PM

#

Because of some construction work going on

deep trellis Mar 22, 2019, 2:16 PM

#

The Mr Robot room is free to use BTW

#

Okie np

naive dust Mar 22, 2019, 2:19 PM

#

$ip = ‘192.168.1.1’
$port = 4444

nc -v -n -l -p 4444

#

When i visit /wp-content/themes/twentytwelve/404.php it isn’t working

thorn badger Mar 22, 2019, 2:22 PM

#

@naive dust listen try
Ip-address/wp-admin/theme-editor.php?file=404.php

Try this bcoz it's worked for me

Nd try
nc -l your-local-machine-ip 4444

#

May be it will work

#

Try nd let me know

naive dust Mar 22, 2019, 2:30 PM

#

Finally

#

it worked

#

Thanks a lot everyone.

thorn badger Mar 22, 2019, 2:37 PM

#

@naive dust 🤘

naive dust Mar 22, 2019, 2:39 PM

#

now just Privesc is left

livid aurora Mar 22, 2019, 2:41 PM

#

For Linux CTF there doesn't seem to be a command called flag11

deep trellis Mar 22, 2019, 2:43 PM

#

Look at your alias'

livid aurora Mar 22, 2019, 2:48 PM

#

alice@ip-10-0-0-207:~$ alias
alias alert='notify-send --urgency=low -i "$([ $? = 0 ] && echo terminal || echo error)" "$(history|tail -n1|sed -e '''s/^\s*[0-9]+\s*//;s/[;&|]\s*alert$//''')"'
alias egrep='egrep --color=auto'
alias fgrep='fgrep --color=auto'
alias grep='grep --color=auto'
alias l='ls -CF'
alias la='ls -A'
alias ll='ls -alF'
alias ls='ls --color=auto'

deep trellis Mar 22, 2019, 2:48 PM

#

Try switching accounts

livid aurora Mar 22, 2019, 2:48 PM

#

I've just been told to log in as Alice

#

Who should I switch to?

deep trellis Mar 22, 2019, 2:49 PM

#

You need to look around the file system

#

See what you can get

#

Clues

#

Or if you're stuck move on

#

and come back to it

livid aurora Mar 22, 2019, 2:59 PM

#

lol got it

#

I switched accounts too early

wet shard Mar 22, 2019, 3:58 PM

#

Hello! Is it possible to re-upload a VM if I want to update it? Also I was wondering if I could try my own questions without getting the points, on the room? Thanks!

deep trellis Mar 22, 2019, 3:59 PM

#

Hey, you can re-upload but you will have to delete your question (one with the material attached) and recreate it

#

I can update it manually if need be

#

So yes, if you want to re-upload it, let me know and I will change it for you 😃

#

Oh and you can't do your own room without scoring any points.

#

And its awesome you're making a room!

wet shard Mar 22, 2019, 4:13 PM

#

Oh thanks, I will let you know when it's uploaded 😄

deep trellis Mar 22, 2019, 4:35 PM

#

No problem man 😃

naive dust Mar 22, 2019, 5:50 PM

#

Privesc is a pain!!!

wet shard Mar 22, 2019, 6:04 PM

#

Hi 😄

naive dust Mar 22, 2019, 7:06 PM

#

hi

deep trellis Mar 22, 2019, 7:06 PM

#

Hey all

#

How're we all?

naive dust Mar 22, 2019, 7:43 PM

#

trying to get familiar with privilege escalation techniques but failing

deep trellis Mar 22, 2019, 7:45 PM

#

Hmm

#

Its something we can explore adding

rigid oxide Mar 22, 2019, 8:26 PM

#

If you haven't already seen them, I suggest watching some of the video on IppSec's channel

#

He does HackTheBox walkthroughs and they have really good content going from entry to priv esc

deep trellis Mar 22, 2019, 8:35 PM

#

Oh yeah

#

I've seen his videos

#

They're pretty cool

thorn badger Mar 23, 2019, 3:41 PM

#

Why is it failed?

📎 JPEG_20190323_211049.jpg

dense ivy Mar 23, 2019, 10:39 PM

#

@thorn badger "Connection Timed Out" would lead me to believe either the IP you entered is incorrect (typo?), the system you're targeting is blocking access to port 445 or there is no service on your target running on 445

#

Port 445 is ‘SMB over IP’. SMB stands for ‘Server Message Blocks’. Server Message Block in modern language is also known as Common Internet File System. The system operates as an application-layer network protocol primarily used for offering shared access to files, printers, serial ports, and other sorts of communications between nodes on a network.

Maybe it's not a Windows box, or maybe SMB is disabled?

thorn badger Mar 24, 2019, 10:55 AM

#

@dense ivy it's the blue challenge on tryhackme . It have open smb service and it is windows system

thorn badger Mar 24, 2019, 12:36 PM

#

Now what's the issue with metasploit?

rigid oxide Mar 24, 2019, 3:18 PM

#

Also, if you want to play with that smbv1 issue there is a nice write up on blue ;D

wet shard Mar 28, 2019, 3:45 PM

#

Oh I just noticed this announcement "If you make a room for others to use on the site, you will get a TryHackMe site award, t-shirt and sticker." - does this mean I'm eligible for a t-shirt and a sticker :D?

deep trellis Mar 28, 2019, 3:46 PM

#

@wet shard yes

wet shard Mar 28, 2019, 3:47 PM

#

Yaay! I love goodies! How does it works, do I need to send you my address or something? (I don't remember if I gave it on the site or not)

rigid oxide Mar 28, 2019, 6:30 PM

#

You can send that, your credit card number, and those wacky three numbers on that back to me for that shirt ;D

#

@wet shard

woeful stone Mar 28, 2019, 6:34 PM

#

📎 download_1.jpeg

#

@rigid oxide irl

rigid oxide Mar 28, 2019, 6:36 PM

#

Wait, how'd you find that picture of me online?

woeful stone Mar 28, 2019, 6:36 PM

#

The power of OSINT

rigid oxide Mar 28, 2019, 6:41 PM

#

OOOF

#

@woeful stone was there a particular linux enumeration script that you liked for bookface? I'm trying to make sure the write-up I'm doing is beginner friendly and LinEnum didn't grab what the versioning information that is necessary for escalation in this case

#

Also making sure I don't have any non-sequiturs within the write up lol

woeful stone Mar 28, 2019, 7:07 PM

#

Nope, I follow a priv esc checklist :) check sudo, check SUIDs, check world writeable files and then finally check the kernel version

#

After a while you start to spot SUID binaries which are out of place and remember kernel/program versions which are vulnerable

rigid oxide Mar 28, 2019, 7:11 PM

#

Makes sense, I think I need to personally get better at following a good priv esc checklist and that'll probably help out. I'll add a blurb in the write up regarding checking for those items prior to the online check regarding the item that has the vulnerability. Thanks much!! 😄

woeful stone Mar 28, 2019, 7:12 PM

#

https://failingsilently.wordpress.com/2017/08/07/privesc/ can't really go wrong with this one :)

Failing Silently

operationxen

CTF Privilege Escalation Checklist

Useful Privilege Escalation techniques for CTF Wargames

rigid oxide Mar 28, 2019, 7:12 PM

#

brb pinning that in my browser lol

rigid oxide Mar 28, 2019, 8:27 PM

#

@woeful stone ran that binary check and it worked like a charm! Thanks again!

neat ether Mar 30, 2019, 9:48 AM

#

I wonder if anyone would point out the right direction for solving level 2 hash #3 of this room https://tryhackme.com/room/crackthehash. I am not quite sure how to work out the format of this hash.

Hash: $6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02.

Salt: aReallyHardSalt

Rounds: 5

TryHackMe | crackthehash.

TryHackMe is a platform for learning and teaching cyber security.

woeful stone Mar 30, 2019, 5:43 PM

#

@neat ether $6$ signifies sha512crypt 😃

pallid remnant Mar 31, 2019, 4:44 PM

#

I found this wiki pretty helpful

#

https://hashcat.net/wiki/doku.php?id=example_hashes

#

for the hashes

timber yacht Apr 4, 2019, 4:00 AM

#

Hey, noob question, I am attempting the basic pentesting room and i have connected my openvpn and deployed my vm, but it would seem that my vpn is connected on a 10.8.0.0/16 interface, but my vm is on 10.0.0.4? Shouldn't I be on the same network as it or am I misunderstanding something?

rigid oxide Apr 4, 2019, 4:08 AM

#

You are actually! The entire 10.0.0.0/8 subnet is the network

#

Good question though!

#

try pinging your box

timber yacht Apr 4, 2019, 4:22 AM

#

No response

rigid oxide Apr 4, 2019, 4:33 AM

#

Is the VPN connecting properly? This can take a few minutes sometimes

#

Also, try running an nmap with the -Pn flag set, see if it maps

#

that box in particular might not allow pinging

#

Also, Skidy will likely be up in few hours and can help too

#

He'll be able to check it from the admin end

timber yacht Apr 4, 2019, 4:35 AM

#

The VPN seems to be properly connected, but to a different network segment from the vm. I'm not sure if that's how it's supposed to be? Should I change the net mask of my tunnel adapter

rigid oxide Apr 4, 2019, 4:36 AM

#

No, don't change any of the VPN settings from the defaults. This is a split tunnel and the config file does all the work for you on that end

#

The netmask will be inherited on the tun0 interface right after connecting

#

Try a different room, I know blue will respond to pings. I'll ping Skidy too and he can have a look from his end

#

@deep trellis

#

One way or another we'll get ya all sorted out

timber yacht Apr 4, 2019, 4:39 AM

#

hey thanks!

rigid oxide Apr 4, 2019, 4:39 AM

#

No problem at all! VPNs can be finicky beasts sometimes

timber yacht Apr 4, 2019, 4:39 AM

#

do i need to download a vpn config file for the other room?

rigid oxide Apr 4, 2019, 4:40 AM

#

nah, it'll just be your master one for the site

timber yacht Apr 4, 2019, 4:40 AM

#

okay

rigid oxide Apr 4, 2019, 4:40 AM

#

It may be worthwhile attempting a redownload of that file to replace the old one

#

Are you running it on Windows or Linux?

timber yacht Apr 4, 2019, 4:40 AM

#

linux

#

parrot

rigid oxide Apr 4, 2019, 4:41 AM

#

Gotcha gotcha, are you connecting via the cli one-liner?

timber yacht Apr 4, 2019, 4:41 AM

#

yep just openvpn ./maibes.ovpn &

rigid oxide Apr 4, 2019, 4:42 AM

#

Try just this in a terminal: openvpn --config /path/to/config

#

and leave that running

timber yacht Apr 4, 2019, 4:42 AM

#

okay

rigid oxide Apr 4, 2019, 4:42 AM

#

bg'ing it can be problematic sometimes and doesn't always work with the 30 minute time out on the vpn for inactivity

#

I suggest running that in a tmux pane, I usually remote into my box and just pull it up in a tab and kill the vpn when I'm done

timber yacht Apr 4, 2019, 4:49 AM

#

my tun1 ip is 10.8.1.130 - 255.255.0.0 and my vm ip is 10.0.0.102, does that seem right?

rigid oxide Apr 4, 2019, 4:49 AM

#

yup yup

timber yacht Apr 4, 2019, 4:49 AM

#

okay\

rigid oxide Apr 4, 2019, 4:50 AM

#

that's fairly standard, just keep in mind you can also only have one device connected at a time for the vpn

timber yacht Apr 4, 2019, 4:50 AM

#

just to be clear, the challenge is on the deployed vm right?

rigid oxide Apr 4, 2019, 4:50 AM

#

shouldn't matter with only having the parrot box connected in this context but good to note

#

yessir

timber yacht Apr 4, 2019, 4:51 AM

#

so i have to go through a default gateway to reach the vm?

rigid oxide Apr 4, 2019, 4:51 AM

#

yeah, the vpn should configure the split tunnel aspect of it automatically

#

if that is misbehaving, spin up a live boot of kali and try that for now

timber yacht Apr 4, 2019, 4:51 AM

#

oh, i have to look up how that works

#

okay

rigid oxide Apr 4, 2019, 4:52 AM

#

that way you'll at least be able to have some fun and work on the parrot box on the side

timber yacht Apr 4, 2019, 4:52 AM

#

ill give it a shot thanks

rigid oxide Apr 4, 2019, 4:52 AM

#

yup yup, ping me if that doesn't work

timber yacht Apr 4, 2019, 4:52 AM

#

kay!

#

oh yay

#

i changed the default adapter settings from the parrot os vm image defaults, rebooted, and now it works

#

(im running it in vmware workstation) - thanks for your help!

rigid oxide Apr 4, 2019, 1:29 PM

#

No problem at all! I'm glad it working!!

onyx merlin Apr 4, 2019, 3:35 PM

#

$2y$12$Dwt1BZj6pcyc3Dy1FWZ5ieeUznr71EeNkJkUlypTsgbX1H68wsRom Anyone got any tips for solving this one. All i know is bcrypt. I don't know if im using hashcat wrong.

rigid oxide Apr 4, 2019, 3:47 PM

#

I'll give you the hint that it isn't bcrypt

#

(The hint is somewhat misleading on that for how to actually crack it)

onyx merlin Apr 4, 2019, 4:24 PM

#

I also keep getting this. Will this affect my chances I can use --force but I feel like that just aimlessly does stuff and then closes without any result.

📎 1f4166153978eb9a2173178893d5047f.png

onyx merlin Apr 4, 2019, 4:41 PM

#

Anyone know how to make my VM use my GPU because 26days to go through the whole of rockyou.txt would take me a bit.

rigid oxide Apr 4, 2019, 4:50 PM

#

Remind of this later and I can try to find the doc on setting up the gpu drivers for that. If you increase the gpu memory of the vm it might help in the mean time

wet shard Apr 5, 2019, 3:30 PM

#

Good evening! I think this is more of a question for @deep trellis , I'm writing content for an offensive security training session for devs and offsec enthusiasts, do you think TryHackMe could be used in this context ? Is there a way to create some kind of room "directory" with only the rooms for a specific session for instance ?

deep trellis Apr 5, 2019, 4:14 PM

#

Yes, that's actually coming very soon :)

#

Like "Web" or "Forensics" etc .

#

And we will have "Paths"

#

Paths are a chronological rooms to complete

wet shard Apr 5, 2019, 4:51 PM

#

Oh I see https://tryhackme.com/paths/ ! Cool!

TryHackMe | Paths

TryHackMe is a platform for learning and teaching cyber security.

deep trellis Apr 6, 2019, 12:03 PM

#

https://tryhackme.com/paths

TryHackMe | Paths

TryHackMe is a platform for learning and teaching cyber security.

#

You found that quick 😃

#

Its still in development

wet shard Apr 6, 2019, 12:46 PM

#

Haha yep I noticed, I didn't touch anything on the page, don't want to break the site 😄

deep trellis Apr 6, 2019, 7:21 PM

#

Aha 😉

#

Its not functional yet

onyx merlin Apr 8, 2019, 7:48 PM

#

When doing the fowsniff room I'm using the pop3 login msf module. I understand that the user im looking for would be siena but I wanted to try going through them all but after the 3rd attempt it stops giving me error messages which I'm assuming means the server blocks the attempts anyone know how to get around this?

#

I understand I could do it manually but I thought for future uses I would ask.

deep trellis Apr 8, 2019, 11:07 PM

#

@onyx merlin I will answer this tomorrow :)

deep trellis Apr 13, 2019, 9:37 PM

#

@inland vessel Talk about your OpenVPN issue here

inland vessel Apr 13, 2019, 9:43 PM

#

First I watched your video, then I ran this sudo apt install openvpn

deep trellis Apr 13, 2019, 9:44 PM

#

Okay yeah

inland vessel Apr 13, 2019, 9:44 PM

#

I always seem to take something this is so simple and over complicate it lol

deep trellis Apr 13, 2019, 9:44 PM

#

Yeah no worries man 😃

#

did you do:

sudo openvpn "your file"

inland vessel Apr 13, 2019, 9:47 PM

#

command not found... LOL.... Let me try it over from the start.

deep trellis Apr 13, 2019, 9:47 PM

#

Ah yeah, its probably not installed properly

#

Or installed as root

#

sudo apt-get install openvpn

#

Run that

inland vessel Apr 13, 2019, 9:49 PM

#

Shoot... Now its worse. I think when I installed brew I messed something up

deep trellis Apr 13, 2019, 9:50 PM

#

sudo brew install openvpn

inland vessel Apr 13, 2019, 9:50 PM

#

Error: Running Homebrew as root is extremely dangerous and no longer supported.
As Homebrew does not drop privileges on installation you would be giving all
build scripts full access to your system.

deep trellis Apr 13, 2019, 9:51 PM

#

run is as a normal user

inland vessel Apr 13, 2019, 9:52 PM

#

IT seems to be installed "Warning: openvpn 2.4.6 is already installed and up-to-date
To reinstall 2.4.6, run brew reinstall openvpn"

deep trellis Apr 13, 2019, 10:25 PM

#

Hmmm

#

Okay, so if you;'re running the openvpn command and its not finding it, its probably not in your path

#

@inland vessel

#

https://apple.stackexchange.com/questions/203115/installed-openvpn-with-brew-but-it-doesnt-appear-to-be-installed-correctly

Ask Different

Installed openvpn with brew but it doesn't appear to be installed ...

I installed openvpn with brew. The installation went fine, no errors or missing dependencies. But now when I try to run it:

users-MBP:~ user$ brew install openvpn
Warning: openvpn-2.3.7 already

#

Follow that, it should add your openvpn client to your systems path (basically, it will tell your system/terminal where to look for that program name)

inland vessel Apr 13, 2019, 10:37 PM

#

Thank you!!!! I will give it a shot once I get back. I have to go run some errands.

deep trellis Apr 13, 2019, 10:44 PM

#

No problemo!

inland vessel Apr 14, 2019, 12:49 AM

#

After following the steps on the page you shared, I was still not able to get it to work. I went with another recommendation on that page. https://tunnelblick.net/index.html

Tunnelblick | Free open source OpenVPN VPN client server software ...

Tunnelblick | Free open source OpenVPN VPN client server software for macOS

#

It seems like its just a GUI for OpenVPN.

#

You have an experience with Tunnelblick

#

It shows I am connected now. It seems to be working using Tunnelblick... Thank you for sending me to that page.

deep trellis Apr 14, 2019, 11:27 AM

#

Oh nice, its awesome you got it working 😃

inland vessel Apr 14, 2019, 7:18 PM

#

👍🏻

dusky plinth Apr 15, 2019, 7:13 PM

#

I have completed all the questions for Basic Pen-testing but I’m still at 91% completed @deep trellis

deep trellis Apr 15, 2019, 7:14 PM

#

Oh really?

#

Can you please screen shot it?

#

Whats your username?

dusky plinth Apr 15, 2019, 7:19 PM

#

username: stayofftheweed

#

📎 Screen_Shot_2019-04-15_at_12.18.40_PM.png

deep trellis Apr 15, 2019, 7:20 PM

#

You have not completed question 4

#

Oh, thats odd.

onyx merlin Apr 15, 2019, 7:20 PM

#

...

deep trellis Apr 15, 2019, 7:20 PM

#

My DB says you have not completed this question

dusky plinth Apr 15, 2019, 7:20 PM

#

🤦🏽‍♂️

deep trellis Apr 15, 2019, 7:21 PM

#

Thats a really weird bug

#

Rod, I have just tested it and it works. This is really weird. Mind logging out of the site, then back in?

dusky plinth Apr 15, 2019, 7:25 PM

#

Ok the issue was on my end. I didnt know that I had to physically "click" on the completed tab for it to register. All good now

deep trellis Apr 15, 2019, 7:25 PM

#

Ah, yeah, Ill make that more clear in the future.

dusky plinth Apr 15, 2019, 7:26 PM

#

no worries

deep trellis Apr 15, 2019, 7:26 PM

#

@dusky plinth Does it take a long time to register for you?

#

Like when you click it, it lags 2-3 seconds before telling you

dusky plinth Apr 15, 2019, 7:26 PM

#

mhhh there is a slight delay I wanna say

#

~1 second lag

#

~

deep trellis Apr 15, 2019, 7:27 PM

#

Oh wait, Chrome makes it lag badly. Firefox doesn't

#

Weird.

dusky plinth Apr 15, 2019, 7:34 PM

#

im using Firefox on Kali vm

deep trellis Apr 16, 2019, 3:41 PM

#

Ah okay, thanks 😃

naive dust Apr 16, 2019, 6:05 PM

#

@rigid oxide teach me to setup the drivers :)
https://i.imgur.com/ciEa6Xj.png

Imgur

rigid oxide Apr 16, 2019, 6:08 PM

#

Thank you for the reminder xD I'll see if I can find that article quick

#

Btw you can force hashcat to run anyways by adding the --force switch

naive dust Apr 16, 2019, 6:08 PM

#

Yup

#

However it's very slow I am not sure if it's due to having old graphics card or the drivers

#

Like it took it 10mins to get 2040 combinations

#

GTX 960M

rigid oxide Apr 16, 2019, 6:09 PM

#

So the trick is getting linux compatible drivers for the gpu and making sure to pass it through correctly, it's a little iffy

#

that's not too bad for a gpu, shouldn't be uber slow

naive dust Apr 16, 2019, 6:10 PM

#

Lool https://i.imgur.com/ZIfQEnQ.png

Imgur

rigid oxide Apr 16, 2019, 6:10 PM

#

yeaaaaah, desktop cards are a lot better than m cards

#

https://www.secjuice.com/how-to-build-a-cracking-rig/

Secjuice Infosec Writers Guild

How To Build A Hash Cracking Rig

In this article security researcher Sebastian Bicchi teaches us how to build a low-cost, but high quality cracking rig by repurposing a hardware crypto mining rig.

#

This isn't what I was looking for but it's a nice start, I'll see what I can do on more details

naive dust Apr 16, 2019, 6:11 PM

#

Thank you kindly 😃

rigid oxide Apr 16, 2019, 6:11 PM

#

yup yup!

naive dust Apr 16, 2019, 7:10 PM

#

https://tryhackme.com/room/rpnmap
How about if I want to scan every port?
#12

Can someone tell me the answer I would just do -p 0-65535

TryHackMe | rpnmap

TryHackMe is a platform for learning and teaching cyber security.

woeful stone Apr 16, 2019, 7:10 PM

#

-p- is shorthand 😃

naive dust Apr 16, 2019, 7:10 PM

#

🤦 couldn't find it anywhere thank you 😃

agile bobcat Apr 17, 2019, 2:18 AM

#

@deep trellis Hello, I was wondering if there was a way I could change my username on the site. Thanks

deep trellis Apr 17, 2019, 5:08 AM

#

At this moment in time, it's not possible to change your username.

zenith obsidian Apr 22, 2019, 11:35 PM

#

ok im trying ultratech
cant believe im stuck on task3
i must be overthinking

#

can i get some help or some guidance 😂

#

idk if anyone remembers me i was quix

zenith obsidian Apr 23, 2019, 12:07 AM

#

i think i may might of found it

#

i was forgetting to look at the source

zenith obsidian Apr 23, 2019, 1:12 AM

#

do i need to get a shell for the last part of ultratech?

#

or am i really overthinking

rigid oxide Apr 23, 2019, 1:27 AM

#

I haven't completed it quite yet but @wet shard might be able to help since he made it

zenith obsidian Apr 23, 2019, 1:28 AM

#

what part are you on

#

and i might be on the right track but i feel like its overcomplicating it

#

i could be of assistance to you 😄

rigid oxide Apr 23, 2019, 1:28 AM

#

I don't want to give spoilers, I'm at the point where I'm examining part of the api

#

just haven't bothered yet lol

zenith obsidian Apr 23, 2019, 1:29 AM

#

oh ok

#

yea that was weird

rigid oxide Apr 23, 2019, 1:29 AM

#

yup yup xD

zenith obsidian Apr 23, 2019, 1:29 AM

#

the power of the source is within you

#

😂

rigid oxide Apr 23, 2019, 1:29 AM

#

If you do any of the rooms I made I can definitely help with that lol

zenith obsidian Apr 23, 2019, 1:30 AM

#

what rooms did you make

rigid oxide Apr 23, 2019, 1:30 AM

#

Blue, VulnOS, RP Nmap, RP Nessus, and Car Hacking. At least those are the released ones

#

I highly suggest doing blue if you haven't yet, I've geared it heavily to being well guided

zenith obsidian Apr 23, 2019, 1:34 AM

#

oh i was going to do blue next

#

oh u made all the new ones

#

aweet

#

most*

rigid oxide Apr 23, 2019, 1:35 AM

#

Keep in mind with that one there's an official write up linked on that room that should help out

zenith obsidian Apr 23, 2019, 1:35 AM

#

isnt it beginner?

#

oh the one im on?

rigid oxide Apr 23, 2019, 1:35 AM

#

yup, the write up is more to give a 'nudge' (blue that is)

zenith obsidian Apr 23, 2019, 1:35 AM

#

oh ill be ok 😄

#

i hope

rigid oxide Apr 23, 2019, 1:35 AM

#

Nah, Ultratech is medium

zenith obsidian Apr 23, 2019, 1:35 AM

#

https://tenor.com/view/late-late-show-james-corden-fingers-crossed-wish-gif-12171764

Tenor

Fingers crossed

▶ Play video

#

i mean blue

rigid oxide Apr 23, 2019, 1:36 AM

#

oh yeah lol, that one is beginner xD

zenith obsidian Apr 23, 2019, 1:40 AM

#

well @wet shard i summon you

#

im sooo stuck

#

https://tenor.com/view/angry-anger-pixar-inside-out-aaah-gif-5628546

Tenor

zenith obsidian Apr 23, 2019, 2:19 AM

#

wtf

#

and now ssh works

#

https://tenor.com/view/rage-gif-4514235

Tenor

angry

▶ Play video

#

yea im quiting till @wet shard is back

rigid oxide Apr 23, 2019, 2:45 AM

#

He's probably asleep at the moment, I'm sure he'll get back to you in the morning since you know, he's been pinged four times and probably doesn't need to be pinged more lol

deep trellis Apr 23, 2019, 5:23 PM

#

@zenith obsidian @wet shard Can you help brute?

zenith obsidian Apr 23, 2019, 7:18 PM

#

@deep trellis i just got home from school

#

im stuck on the final part of Ultratech

deep trellis Apr 23, 2019, 8:15 PM

#

Hmm, when @wet shard comes on, he should be able to help you

zenith obsidian Apr 23, 2019, 9:33 PM

#

wtf im doing basicpentesting and when im hydra ssh

#

📎 unknown.png

deep trellis Apr 23, 2019, 10:15 PM

#

Hmmm

#

If lp1 doesn't answer tomorrow I'll figure it out brute and help ua

zenith obsidian Apr 23, 2019, 10:17 PM

#

ok

#

this one was different

#

but ok,

wet shard Apr 24, 2019, 11:02 AM

#

Hey ! @zenith obsidian

#

Sorry, I'm not at home atm 😄

#

I'll dm you

#

There's no bruteforce needed though 😄

#

I'll add more questions to make it more user friendly as soon as I'm back home (in 5 days)

zenith obsidian Apr 24, 2019, 11:32 AM

#

Oh the bruteforcing was for a different machine

wet shard Apr 24, 2019, 11:35 AM

#

Ooh okay :D!

onyx merlin Apr 24, 2019, 5:13 PM

#

Does anyone know if VMware Workstation allows for USB devices I'm trying to connect a WiFi Adapter to my Kali Machine and whenever I do ifconfig the wlan0 won't show up any one have any guidance. I know that VirtualBox has an easy method so I might migrate over to that.

deep trellis Apr 24, 2019, 5:28 PM

#

Hmm

onyx merlin Apr 24, 2019, 5:28 PM

#

I just think I'm being dumb. But honestly this UI to me isn't intuitive

deep trellis Apr 24, 2019, 5:28 PM

#

If VirtualBox has the option, VMWare will

onyx merlin Apr 24, 2019, 5:40 PM

#

Well I added a network adapter that set to bridge to my adapter but in ifconfig it gets displayed as another eth instead of wlan and doing netdiscover finds nothing leading me to believe that it hasn't worked

deep trellis Apr 24, 2019, 5:40 PM

#

hmm

#

I amnot 100% sure sorry

#

Maybe someone with more experience can help

onyx merlin Apr 24, 2019, 5:43 PM

#

Why is it so hard to find decent understandble documentation for these issues its either complete tech jargon. Google just brings me to a terrible online forum that says just go into the settings and click it well what if its not there oh no further support yipee. All the youtube videos seem to want me to download this thing called compat wireless. All the links I click seem to be dead however so I can't download it.

deep trellis Apr 24, 2019, 5:45 PM

#

I would say is it a driver issue, but if you cant find anything about the device even on the VM, seems like its something deeper

onyx merlin Apr 24, 2019, 5:47 PM

#

Might be in business found a video that uses my exact wifi adapter

onyx merlin Apr 24, 2019, 10:59 PM

#

Hours later and I broke everything 🤣

rigid oxide Apr 24, 2019, 11:07 PM

#

^that's about how my experiences with drivers goes with wifi on vms

onyx merlin Apr 24, 2019, 11:07 PM

#

My kali no longer displays the desktop picture or any icons 👍

rigid oxide Apr 24, 2019, 11:08 PM

#

rip

onyx merlin Apr 24, 2019, 11:08 PM

#

Its a blessing in disguise because now I can switch to VBox instead of VMware because honestly the USB option seems great

rigid oxide Apr 24, 2019, 11:09 PM

#

I'm a vmware shop guy but VBox is what I prefer for doing THM work

onyx merlin Apr 24, 2019, 11:09 PM

#

Probably could do the same in VMWare but I'm too dumb and VBox seems to have more online resources and guides

rigid oxide Apr 24, 2019, 11:09 PM

#

since it's supported well on this site and it's easier to just use what everyone else is using for that

#

yeah

#

VMware is nice with the server setting, that's what I prefer on that end but VBox is nice on client side

onyx merlin Apr 24, 2019, 11:10 PM

#

Yeah I tried doing an ethical hacking course while using VMWare while the instructor used VBox my experience was horrific.

rigid oxide Apr 24, 2019, 11:11 PM

#

^that's one trick I've always found, always match what your instructor is using

#

and if it's on windows, use windows

onyx merlin Apr 24, 2019, 11:11 PM

#

but I wanted to be a cool linux man....

rigid oxide Apr 24, 2019, 11:12 PM

#

I remote into my box and just use pure linux that way, but I'm also fully willing to suffer my consequences of shit breaking and having to resort to my windows based backup

onyx merlin Apr 24, 2019, 11:13 PM

#

All I want is to see my glorious wifi adapter in action monitoring and packet injecting my sweet home network.

#

I don't want to turn this channel into my own personal tech support but anyone know why I can't sign into youtube it redirects me to /oops without any info even though I'm signed into my gmail.

#

Now that was certainly weird I clicked sign in got redirected clicked sign in and then after like 10 iterations boom it worked

rigid oxide Apr 24, 2019, 11:19 PM

#

hmm

onyx merlin Apr 24, 2019, 11:20 PM

#

I don't know either if I have 2FA do I need a password for youtube because I know there is an option??

rigid oxide Apr 24, 2019, 11:21 PM

#

Since YouTube is part of Google it has MFA

#

via your gmail

onyx merlin Apr 24, 2019, 11:22 PM

#

Yeah probably just some weird bug would be cool if I could replicate it still persisted after I cleared cookies. Just weird that it worked after clicking it so many times.

zenith obsidian Apr 25, 2019, 7:06 PM

#

am i just using the wrong wordlist for Basic Pentesting

#

cause i cant seem to get the ssh pass

wet shard Apr 25, 2019, 7:40 PM

#

Hi again :D, the password is in ||rockyou||

zenith obsidian Apr 26, 2019, 3:05 AM

#

lol i was using it earlier but i didnt think it would have to take aslong 😄

onyx merlin Apr 28, 2019, 10:30 PM

#

Anyone know of any tools that can be used for Weebly sites like WPScan for wordpress?

slender breach Apr 29, 2019, 7:36 AM

#

ultratech really slow for me

wet shard Apr 29, 2019, 9:10 AM

#

@slender breach Hi! Which operation(s) are/is slow on UltraTech?

patent arrow Apr 29, 2019, 1:17 PM

#

If i need Support for CTF im right Here?

rigid oxide Apr 29, 2019, 1:20 PM

#

@patent arrow whatcha need help with?

patent arrow Apr 29, 2019, 2:32 PM

#

With the CapterTheFlag Task 2

#

I extract the File an in there is a File with a hash, i tried to decrypt with base64 Decoder

rigid oxide Apr 29, 2019, 2:33 PM

#

lemme ping @little yarrow

little yarrow Apr 29, 2019, 2:36 PM

#

@patent arrow try not to discuss sensitive things in public 😁

Also you can DM me whatever issue you are having

patent arrow Apr 29, 2019, 2:45 PM

#

Ok, sorry about that 😅

slender breach Apr 30, 2019, 1:19 PM

#

Car hacking 101 scoreboard gone

rigid oxide Apr 30, 2019, 1:44 PM

#

That's intentional, it's a simple room since it's only one question

onyx merlin May 2, 2019, 8:43 PM

#

For the learning Burp room I followed step 1 and added the certificate but now I get this error on every site I try to load

📎 unknown.png

#

All good got it apparently you can't use Java 11 so had to downgrade

half quartz May 3, 2019, 10:02 AM

#

Can I ask an hint on one challenge of crackthehash?

wet shard May 3, 2019, 10:33 AM

#

@half quartz yup! I'll DM you

night tendon May 4, 2019, 12:33 AM

#

hi, someone can help me with ultratech room?

rigid oxide May 4, 2019, 12:33 AM

#

That'd be @wet shard 's room

night tendon May 4, 2019, 12:34 AM

#

Ok, I'll talk him

acoustic inlet May 4, 2019, 7:34 PM

#

https://linux.is-ne.at/yEbPWt

yEbPWt.png

sxcu.net free ShareX uploader

#

I cannot crack this for some reason.

#

Any help?

#

Nvm, got it.

deep trellis May 4, 2019, 7:38 PM

#

Awesome, what was the issue?

acoustic inlet May 4, 2019, 7:45 PM

#

@deep trellis

gaunt vessel May 4, 2019, 11:59 PM

#

Hi all, I am trying https://tryhackme.com/room/crackthehash one of the challenges is to decrypt this: `
Hash: $6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02.

Salt: aReallyHardSalt

Rounds: 5 So far I have found out its using sha512crypt and I am using the RockYou list and using hashcat with the command./hashcat64.bin -O -m 1800 -a 0 hash ../rockyou.txtthe hash I am decrypting is$6$rounds=5$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02.`. Any hints would be apprecated !

TryHackMe | crackthehash

TryHackMe is a platform for learning and teaching cyber security.

deep trellis May 5, 2019, 10:54 AM

#

@rigid oxide might be the best person to answer this one

gaunt vessel May 5, 2019, 11:25 AM

#

@deep trellis figured it out with help from @opaque cape

deep trellis May 5, 2019, 11:25 AM

#

Ah awesome

gaunt vessel May 5, 2019, 11:26 AM

#

You have to miss out $rounds=5$

#

. Which I don't understand

late kayak May 5, 2019, 6:05 PM

#

Hey guys! Trying my first Tryhackme machine - the 'basic pentesting'. I can ping, scan the machine etc, but I can't open up the link (by typing in th eip) in my browser.. any ideas on to why? Its just loading, and ive tried resetting the machine and even buying vip 😃

deep trellis May 5, 2019, 6:05 PM

#

Hey, thats awesome to hear

#

Are you connected to our network using OpenVPN client?

late kayak May 5, 2019, 6:06 PM

#

Yes i'm connected and have successfully scanned the services of the target machine (with nmap). It says port 80 is open, but I cant access it on port 80 from the browser

deep trellis May 5, 2019, 6:06 PM

#

What does the website say when you open it in your browser?

late kayak May 5, 2019, 6:06 PM

#

nothing - its just loading forever

deep trellis May 5, 2019, 6:07 PM

#

Can you try another browser?

late kayak May 5, 2019, 6:07 PM

#

2sec

deep trellis May 5, 2019, 6:11 PM

#

Work?

late kayak May 5, 2019, 6:12 PM

#

yeah. I had burpsuite on with intercept - which is why it wasnt loading... thank you!

deep trellis May 5, 2019, 6:13 PM

#

Ah okay, thats awesome!

#

Any questions please let me know

late kayak May 5, 2019, 6:13 PM

#

Will do! Thanks 😃

golden flare May 6, 2019, 10:17 AM

#

hi i wnt to knw how do i knw that my room is in competition ? and its current position?

deep trellis May 6, 2019, 10:53 AM

#

Hey Whiteheart,

We will make all final decisions on the competition on Wednesday.

You room has been entered though.

golden flare May 6, 2019, 10:56 AM

#

ty

golden flare May 8, 2019, 5:25 AM

#

Hi @deep trellis when the results will be announced ?

golden flare May 8, 2019, 9:26 AM

#

??

rigid oxide May 8, 2019, 2:29 PM

#

I'm sure he'll announce it later, I believe it was 6 in the morning at the time of that first message for him haha

little yarrow May 8, 2019, 2:44 PM

#

Yeah timezones sucks

rigid oxide May 8, 2019, 6:39 PM

#

I'll take third for making a sadistic room lmao, JoyStick was a very fun one to design overall

#

@deep trellis thanks much!!

#

(I'll release a write-up and author's notes this weekend since it's been rooted)

pulsar sundial May 10, 2019, 6:42 PM

#

The "CaptureTheFlag" room, task 1, is confusing me. The hint mentions a command for finding strings but i've no clue what it means, is it refering to a commonly used program?

naive dust May 10, 2019, 6:52 PM

#

Ea

#

Yea

#

strings <file>

#

Extracts strings from files

#

@pulsar sundial

pulsar sundial May 11, 2019, 9:59 AM

#

in what program?

little yarrow May 11, 2019, 10:31 AM

#

You are provided a file and you have to look for the flag in that file

strings is a command on Linux system which print out all the human readable strings from any given file

#

So you have to use that command to print out string from a given file in the task

#

@pulsar sundial

pulsar sundial May 11, 2019, 11:16 AM

#

cheers x

pulsar sundial May 11, 2019, 11:51 AM

#

yeah okay, once I knew about the 'strings' command was very straight forward, cheers

little yarrow May 11, 2019, 2:12 PM

#

Yeah

pulsar sundial May 11, 2019, 2:57 PM

#

is there a writeup for crackthehash yet? Stuck on Level 2 Q3

naive dust May 11, 2019, 8:44 PM

#

The new room isn't accepting the pass?

#

Am I just being an idiot

deep trellis May 11, 2019, 8:44 PM

#

Private message me and I will see if you;re getting it right

#

Oh wait, message @vapid dawn - Just seen he is online

pulsar sundial May 11, 2019, 8:46 PM

#

I'm having the same password problem - am I the issue or am I missing something?

deep trellis May 11, 2019, 8:46 PM

#

@vapid dawn can you fix?

vapid dawn May 11, 2019, 8:48 PM

#

yep just checking now

#

know what the issue is - just trying to fix it now!

pulsar sundial May 11, 2019, 9:03 PM

#

Thanks :D

naive dust May 11, 2019, 9:04 PM

#

Thank you!

vapid dawn May 11, 2019, 9:13 PM

#

@pulsar sundial @naive dust it should work now

#

try with the user tryhackme instead of ubuntu

naive dust May 11, 2019, 9:14 PM

#

Thank you!!

#

It works

vapid dawn May 11, 2019, 9:15 PM

#

drop a message if anything else 😃

pulsar sundial May 11, 2019, 9:15 PM

#

I still can't get in, doing tryhackme@IP with password 'reismyfavl33t'

vapid dawn May 11, 2019, 9:16 PM

#

try terminate your machine

pulsar sundial May 11, 2019, 9:16 PM

#

actually wait

vapid dawn May 11, 2019, 9:16 PM

#

and deploy it again

pulsar sundial May 11, 2019, 9:16 PM

#

yeah i just thought of that

#

probably a good shout

split junco May 11, 2019, 9:16 PM

#

redeploy your server

vapid dawn May 11, 2019, 9:16 PM

#

yeah we updated the image it used so you need to redeploy

pulsar sundial May 11, 2019, 9:16 PM

#

yeah makes sense

#

Perfect, cheers!

naive dust May 11, 2019, 10:23 PM

#

can I ask a question for crackme2

vapid dawn May 11, 2019, 10:24 PM

#

yeah sure

forest karma May 11, 2019, 11:15 PM

#

For the tryhack me classess, what do you do if you are a complete begginner and there are exersises that you do not know how to do?
Sometimes there are writeups
but no one answer the chat

deep trellis May 11, 2019, 11:15 PM

#

Try HackMe classes?

#

Sorry confused

forest karma May 11, 2019, 11:15 PM

#

yes

naive dust May 11, 2019, 11:16 PM

#

I think he means rooms

forest karma May 11, 2019, 11:16 PM

#

yes

deep trellis May 11, 2019, 11:16 PM

#

Oh right, you just join the room to get going

forest karma May 11, 2019, 11:16 PM

#

Room=Class 🤔

naive dust May 11, 2019, 11:17 PM

#

If you have any questions about what to do you should ask them here @forest karma

forest karma May 11, 2019, 11:17 PM

#

ok

#

cool

#

the chat sometimes works if anyone is online

pulsar sundial May 14, 2019, 5:51 PM

#

Can anyone recommend me the best VM for osx??

acoustic inlet May 14, 2019, 5:51 PM

#

What do you mean?

acoustic hinge May 14, 2019, 5:51 PM

#

VMware

#

@pulsar sundial

acoustic inlet May 14, 2019, 5:51 PM

#

Oh

#

Yea

#

VMware

pulsar sundial May 14, 2019, 5:52 PM

#

yeah thought so, cheers lads

naive dust May 14, 2019, 5:54 PM

#

i have tied

#

so hard

#

but i guess there is a connection isssue

#

it has been 8 + hours

#

can someone save me

pulsar sundial May 14, 2019, 5:55 PM

#

?

#

whats ur issue?

#

open vpn?

naive dust May 14, 2019, 5:56 PM

#

idk

#

i downloaded

#

the config file and all

#

fired up the basic pentest box

#

and enum4linux or smbclient not working

#

worked for everyone to who i asked for help

pulsar sundial May 14, 2019, 5:56 PM

#

what do you mean by 'not working'

naive dust May 14, 2019, 5:56 PM

#

it is just showing a weird error

pulsar sundial May 14, 2019, 5:57 PM

#

can we see it?

naive dust May 14, 2019, 5:57 PM

#

📎 9.png

pulsar sundial May 14, 2019, 5:57 PM

#

where did you get that IP?

naive dust May 14, 2019, 5:57 PM

#

from the site only

pulsar sundial May 14, 2019, 5:57 PM

#

the ones I get from the room usually look like 10.0.0.X

naive dust May 14, 2019, 5:58 PM

#

when i deploy the machine

#

guys who got such ips also didnot have problem

#

it worked fine for them

pulsar sundial May 14, 2019, 5:58 PM

#

does it respond to pings?

naive dust May 14, 2019, 5:58 PM

#

yes

#

it has been responding to oings

pulsar sundial May 14, 2019, 5:59 PM

#

are you running a VM?

naive dust May 14, 2019, 5:59 PM

#

*pings

#

no hard dual booted kali

pulsar sundial May 14, 2019, 5:59 PM

#

ok so you're running the openVPN connection on the same machine

#

hmmmmm

naive dust May 14, 2019, 5:59 PM

#

yes

pulsar sundial May 14, 2019, 6:00 PM

#

not sure mate, wish I could do more to help, I'll check out the room myself just now

naive dust May 14, 2019, 6:00 PM

#

its working for everyone

#

literally everyone

naive dust May 14, 2019, 6:17 PM

#

hi

#

it worked

#

i changed my network

#

to a mobile 4g network

#

and it worked like a charm

#

it was my IP vendor's firewall

pulsar sundial May 14, 2019, 6:18 PM

#

huh thats weird

#

aaaah damn

naive dust May 14, 2019, 6:18 PM

#

fucking vendors

pulsar sundial May 14, 2019, 6:18 PM

#

well glad you got it sorted bro :D

naive dust May 14, 2019, 6:18 PM

#

9 hours man

#

thanks a lot bro

#

now i can sleep

#

😃

pulsar sundial May 14, 2019, 6:19 PM

#

omgosh I think im getting the same error as you LOL

#

let me switch to my 4g

#

worked for me too lol, glad you suffered through it so I didnt have to xx

rigid oxide May 14, 2019, 6:32 PM

#

I'm glad you were able to get that figured out at least!

naive dust May 14, 2019, 6:34 PM

#

Haha

#

So finally we got the fix xD

#

It's okay, we are here to share.

#

I am just glad the suffering has ended after 9 hours.

#

Now can sleep like a little puppy

#

And not give a damn

#

🐶

#

And you are glad, I suffered. Lol, what world is it now lmao ? XD

pulsar sundial May 14, 2019, 6:37 PM

#

you suffered so i didnt have to, a cyber security Jesus

naive dust May 14, 2019, 6:49 PM

#

Lmao xD

deep trellis May 14, 2019, 7:21 PM

#

Glad to see you fixed it @naive dust

pulsar sundial May 14, 2019, 7:37 PM

#

the "rank" on my profile, out of how many people is that out of?

rigid oxide May 14, 2019, 7:39 PM

#

See the dashboard

#

It will state how many people are on the site

pulsar sundial May 14, 2019, 7:39 PM

#

ooh yeah, cheers x

#

forgot this page exists lol

naive dust May 14, 2019, 7:54 PM

#

Rank 15

#

Not that horrible

#

I shall improve it

#

What do the levels mean?

deep trellis May 14, 2019, 8:00 PM

#

Its the rank you get when you get points on the site

naive dust May 14, 2019, 8:00 PM

#

It says I get privileges but I notice no differences

deep trellis May 14, 2019, 8:01 PM

#

What level are you?

naive dust May 14, 2019, 8:03 PM

#

8

deep trellis May 14, 2019, 8:03 PM

#

I will be releasing an email about levels this weekend

#

If you have not already noticed, there are a few extra things you can do...

#

You just have to find them

naive dust May 14, 2019, 8:04 PM

#

Ooooo

#

Fun

deep trellis May 14, 2019, 8:04 PM

#

Yeah, Ill make it more obvious this weekend when I send an email to everyone about it

rigid oxide May 15, 2019, 4:36 AM

#

Use this instead: https://www.vmware.com/products/workstation-player.html

VMware

Workstation Player : Run a Second, Isolated Operating System on a ...

VMware Workstation Player allows you to run a second, isolated operating system on a single PC.

#

I'm a VMware shop guy myself anyhow, this is a free single VM (at a time) program that'll be easy to work with

#

@novel rivet

naive dust May 15, 2019, 4:40 AM

#

@deep trellis Thank you sir 😃

novel rivet May 15, 2019, 4:41 AM

#

ok thank you im going to bed now will work on this when i get up. thank you @rigid oxide

rigid oxide May 15, 2019, 4:41 AM

#

No problem! Let me know tomorrow if you need more help!

novel rivet May 15, 2019, 4:42 AM

#

ok just to clarify use that link provided to download virtual box?

rigid oxide May 15, 2019, 4:42 AM

#

I'm having you use 'VMware Player' instead

#

Better Mac support

novel rivet May 15, 2019, 4:43 AM

#

ok thnx wioo message latwe

rigid oxide May 15, 2019, 4:43 AM

#

sounds good (I think) haha

novel rivet May 15, 2019, 4:43 AM

#

sorry will message later so tired lol

rigid oxide May 15, 2019, 4:44 AM

#

sounds good xD

pulsar sundial May 15, 2019, 12:22 PM

#

for the "joystick" room, how hard should i be reading into the title?

novel rivet May 15, 2019, 1:21 PM

#

Hi @rigid oxide I've tried downloading VMware player but it said couldn't find an application to open it. Very frustrating at the moment just wanting to get on some hactivities 😭

naive dust May 15, 2019, 1:48 PM

#

https://youtu.be/lEvM-No4eQo

YouTube

ProgrammingKnowledge

How to Install VirtualBox on Mac OS X

For Mac OS X hosts, Oracle VirtualBox ships in a disk image ( dmg ) file. Perform the following steps: Double-click on that file to have its contents mounted...

▶ Play video

#

Use this to install Virtual Box my friend

#

Don't be scared to use Google ;)

#

@novel rivet Good luck !

novel rivet May 15, 2019, 1:52 PM

#

Hi thats what I did and it still came up as not finding an application to support it 😦

#

ill try again

naive dust May 15, 2019, 1:53 PM

#

Follow the video. You are on Mac OS X right ?

novel rivet May 15, 2019, 1:55 PM

#

hi im on MacOS mojave

#

still follow the video?

naive dust May 15, 2019, 1:57 PM

#

Yes. I think, not harm in trying. I don't have much experience with Mac OS Mojave

#

But still.

#

Let me check.

novel rivet May 15, 2019, 1:58 PM

#

ok thank you ill try again quickly here

naive dust May 15, 2019, 2:02 PM

#

:)

novel rivet May 15, 2019, 2:18 PM

#

okay found out why it didn't download i found out from this link: http://osxdaily.com/2018/12/31/install-run-virtualbox-macos-install-kernel-fails/

OS X Daily

Paul Horowitz

How to Install VirtualBox in MacOS Mojave if Installation Fails or...

If you have attempted to install VirtualBox in macOS Mojave you may have noticed the installation sometimes fails with a generic “The installation failed” error message. Then, when tryi…

#

next question if any help. what should i really do now since the guide on tryhackme says download OpenVPN. what would be my next step? sorry if that sounds like a dumb question I'm quite new to all of this so just trying to learn

#

do i need to do something with my config file(like download)?

last olive May 15, 2019, 2:21 PM

#

$sudo apt install openvpn
$openvpn your_config.ovpn
--snip--
Initialization Complete

Then click on deploy, you'll see the IP of the room and you're good to go.

novel rivet May 15, 2019, 2:22 PM

#

put that into terminal?

last olive May 15, 2019, 2:22 PM

#

Yup

novel rivet May 15, 2019, 2:22 PM

#

okay thank you

last olive May 15, 2019, 2:23 PM

#

There's a good YouTube video on config setup, have a look.

little yarrow May 15, 2019, 3:39 PM

#

Isn't that supposed to be for Linux machine?

#

Or does those commands workon mac OS also ?

novel rivet May 15, 2019, 3:41 PM

#

not sure. I'm still having trouble with terminal not accepting my account or apple ID password. Not really sure what to do from here.

last olive May 15, 2019, 4:10 PM

#

You already booted Kali on Vbox, right?

novel rivet May 15, 2019, 4:43 PM

#

no i have not. don't know how to do that tbh.

pulsar sundial May 15, 2019, 5:22 PM

#

On mac, pretty sure you can use brew to install openvpn

novel rivet May 15, 2019, 6:17 PM

#

@pulsar sundial would that be the reason terminal won't accept my password? I have downloaded VirtualBox

#

Tbh an HP brand laptop tomorrow with windows 10 on it. Its cheap and just use it for all my projects and will be probably easier to download everything I need.

pulsar sundial May 16, 2019, 3:05 PM

#

Can anyone give me a pointer for 'crackthehash' level 2 question 3?

vapid dawn May 17, 2019, 12:29 PM

#

DMed you @pulsar sundial 😃

steel bobcat May 18, 2019, 1:19 PM

#

Hello there, it appear that the given is not in 10.x.x.x. (my tun0 showing 10.x.x.x).

📎 Screenshot_10.png

#

Challenge: https://tryhackme.com/room/basicpentesting

TryHackMe | basicpentesting

TryHackMe is a platform for learning and teaching cyber security.

#

with 34.x.x.x, the SMB (port 445 or 139) are filtered. Is this a bug?

little yarrow May 18, 2019, 1:31 PM

#

The tun0 will be your VPN ip

#

And the 34 one is you machine ip the one you deployed

#

They will be different

#

Also maybe try to first ping the machine

#

And then run nmap just on those ports

steel bobcat May 18, 2019, 1:34 PM

#

Hi @little yarrow thanks for the reply. The ping on 34.x.x.x is successful. However, the SMB ports (required by the challenge) are filtered.

📎 Screenshot_2.png

#

funny thing is i thought both ports are suppose to be unavailable and i try exploiting the port 8080 using struts2_rest_xstream but end up empty session.

#

Yup, i confirmed that the deployed 34.x.x.x machine is public ip. Can be access without VPN.

#

The IP details

📎 Screenshot_3.png

little yarrow May 18, 2019, 2:07 PM

#

Have you tried to terminate and re deploy it ?

steel bobcat May 18, 2019, 2:07 PM

#

yes, a couple of time. Still getting a public IP

naive dust May 18, 2019, 10:36 PM

#

Mk im stumped

#

I don't know the answer to lord of the root task 2 question 2

#

I rooted the box but I cannot figure out what the answer to this question is

slender breach May 19, 2019, 6:58 AM

#

@deep trellis

#

i've seen multiple people getting public ip's for that machine

restive spear May 19, 2019, 8:50 AM

#

I did too @steel bobcat but the port did not appear to be filtered

#

have you tried nmap -sC -sV -oA ?

deep trellis May 19, 2019, 12:14 PM

#

Ah, I have contact @vapid dawn to update that room to be private ips 😃

#

Should be fixed soon

#

😃

#

Thanks for reporting

steel bobcat May 19, 2019, 3:13 PM

#

@restive spear Now i realized that I'm using my VM for the task but my VPN is activated on my host computer instead. Yup, the SMB port are open, my bad 😦

#

@deep trellis you are welcome 😃

rigid oxide May 19, 2019, 3:45 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 3:45 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

rigid oxide May 19, 2019, 3:45 PM

#

@last olive fantastic work!!

last olive May 19, 2019, 3:54 PM

#

This reminds me that I have to complete some rooms, lol.

rigid oxide May 19, 2019, 3:54 PM

#

same haha

deep trellis May 19, 2019, 4:07 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 4:07 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

deep trellis May 19, 2019, 4:07 PM

#

Thats awesome

rigid oxide May 19, 2019, 4:07 PM

#

@last olive did a fantastic job on it!

deep trellis May 19, 2019, 4:08 PM

#

Can we make Box Bot's Avatar TryHackMe's?

rigid oxide May 19, 2019, 4:08 PM

#

yup yup if you want

#

Just send me the asset you want me to use

#

If you wanna make a site mascot, I can always change the asset to that as well

last olive May 19, 2019, 4:13 PM

#

It couldn't be possible if @naive dust and @rigid oxide didn't helped me.

golden flare May 19, 2019, 4:13 PM

#

ok so here is a target !leaderboard

#

just few days to go ....and my hibernation will end

#

😈

rigid oxide May 19, 2019, 4:15 PM

#

o.o

slender breach May 19, 2019, 5:37 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 5:37 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

slender breach May 19, 2019, 5:37 PM

#

ouch

#

that response time

#

leaderboard

#

!leaderboard

sharp bisonBOT May 19, 2019, 5:38 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

slender breach May 19, 2019, 5:38 PM

#

3 seconds

rigid oxide May 19, 2019, 5:41 PM

#

It's parsing

#

Good ol' python lol

slender breach May 19, 2019, 5:41 PM

#

parsing shouldn't take that long

#

!twiter

#

!twitter

sharp bisonBOT May 19, 2019, 5:42 PM

#

https://twitter.com/realtryhackme

TryHackMe (@RealTryHackMe)

Learn Cyber Security Easily, without downloading anything, from the cloud. Discord: https://discord.gg/zGdzUad

Tweets

273

Followers

756

rigid oxide May 19, 2019, 5:42 PM

#

I believe that one is also partially due to the api response time

naive dust May 19, 2019, 5:51 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 5:51 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

naive dust May 19, 2019, 5:52 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 5:52 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

naive dust May 19, 2019, 5:52 PM

#

Seems fine to me

slender breach May 19, 2019, 5:55 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 5:55 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

slender breach May 19, 2019, 5:55 PM

#

3 seconds

naive dust May 19, 2019, 6:00 PM

#

Its not that big a deal?

deep trellis May 19, 2019, 6:00 PM

#

!leaderboard

sharp bisonBOT May 19, 2019, 6:01 PM

#

LeaderBoard Of TryHackMe!

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

deep trellis May 19, 2019, 6:01 PM

#

Thats pretty good tbh

#

!rank ben

naive dust May 19, 2019, 6:01 PM

#

Thats not done yet

deep trellis May 19, 2019, 6:01 PM

#

O right

naive dust May 19, 2019, 6:06 PM

#

Am I doing rank or is robin? @rigid oxide

rigid oxide May 19, 2019, 6:10 PM

#

Take a look at the test server, he got it all done

#

It's actually done, Robin finished it pretty quickly

naive dust May 19, 2019, 6:14 PM

#

Oh ok then

naive dust May 19, 2019, 6:52 PM

#

Ok lord of the root is infuriating me

#

I cant figure out how it wants me to answer "how do you discover hidden ports"

#

I know how to discover hidden ports i did discover hidden ports I solved the bloody box

#

But every answer I give it rejects

#

@rigid oxide I'll take that hint pls

rigid oxide May 19, 2019, 6:57 PM

#

task 2 question 2?

naive dust May 19, 2019, 6:57 PM

#

Yep

rigid oxide May 19, 2019, 6:57 PM

#

1 sec

naive dust May 19, 2019, 6:57 PM

#

The only thing thats preventing me from getting all green

rigid oxide May 19, 2019, 6:58 PM

#

"port kn******"

naive dust May 19, 2019, 6:58 PM

#

Oh

rigid oxide May 19, 2019, 6:58 PM

#

poop, it's removing the extract *s

#

yeah

#

it's a simple one that's just pure terms

naive dust May 19, 2019, 6:59 PM

#

All green

#

Finally

#

Thank you @rigid oxide

rigid oxide May 19, 2019, 7:00 PM

#

nice and yup!

unborn shard May 21, 2019, 4:49 PM

#

hi im trying to kali linux into virtualbox at the beginning when i select type do i select linux or other?

naive dust May 21, 2019, 4:50 PM

#

Did you extract the file?

#

The .7z one you downloaded

unborn shard May 21, 2019, 4:50 PM

#

yes i believe so.

#

not sure maybe?

naive dust May 21, 2019, 4:51 PM

#

Did you?

#

Is there a folder with the extracted files

#

If you didnt

#

And you dont have 7zip installed

#

Download and install 7zip

#

Then right click the .7z file

#

Hover over the 7-zip

#

And click extract files

unborn shard May 21, 2019, 4:52 PM

#

ok ill do that

#

ok thats done

#

should i still select linux on type then 32bit under version?

naive dust May 21, 2019, 5:22 PM

#

If you extracted it

#

@unborn shard isnt there a .ova file inside

unborn shard May 21, 2019, 5:29 PM

#

ive extracted it but dont see a .ova file

naive dust May 21, 2019, 5:29 PM

#

What files do you see?

#

A screenshot would work aswell

unborn shard May 21, 2019, 5:36 PM

#

📎 Capture.PNG

#

did i download and install the right one there was a Download 7-Zip 19.00 (2019-02-21) for Windows: or
Download 7-Zip 16.04 (2016-10-04) for Windows:

#

i did the first

naive dust May 21, 2019, 5:46 PM

#

You clicked install now?

unborn shard May 21, 2019, 5:46 PM

#

yes

naive dust May 21, 2019, 5:46 PM

#

Ok

#

Go back to your downloads

#

And extract the Kali 7z file

#

You should just be able to right click

#

Hover over 7z

#

And click extract files

#

Tis the simplest way

unborn shard May 21, 2019, 5:48 PM

#

📎 Capture.PNG

#

thats what i get when i hover over it

naive dust May 21, 2019, 5:49 PM

#

Oh ok

#

So there is an ova file

#

Ok

#

You see that kali

#

Orange box

unborn shard May 21, 2019, 5:50 PM

#

yes

naive dust May 21, 2019, 5:50 PM

#

Double click it

#

It should just open up in vbox

unborn shard May 21, 2019, 5:51 PM

#

📎 Capture.PNG

#

thats what happened is that correct?

naive dust May 21, 2019, 5:52 PM

#

Yep

#

Click import

#

And your good

unborn shard May 21, 2019, 5:53 PM

#

ok thanks its trying to start importing now

#

so i should be able to open vb andeverything just be done right? i can start using termininal?

naive dust May 21, 2019, 5:54 PM

#

Mhm

unborn shard May 21, 2019, 5:55 PM

#

perfect thank you

unborn shard May 21, 2019, 6:11 PM

#

i failed to start it

#

📎 Capture.PNG

naive dust May 21, 2019, 6:20 PM

#

Oh

#

Do you have virtualization enabled in ur bios

unborn shard May 21, 2019, 6:23 PM

#

ill have to check just a second

novel rivet May 21, 2019, 6:34 PM

#

I'm on my mac now but im in BIOS and don't have the visualisation support option

#

virtualisation*

#

📎 virtue20190521_193420.jpg

#

i think i read that windows 7 doesn't support it and maybe i need to download hyper-v?

naive dust May 21, 2019, 6:47 PM

#

Windows 7 supports virtualization

#

It depends if your cpu does

novel rivet May 21, 2019, 6:50 PM

#

should i try to download or what do you think next?

#

sorry the hyper v?

#

shoot i just read hyper v isn't supported on windows 7.

unborn shard May 21, 2019, 7:13 PM

#

actually not sure now lol, sorry

naive dust May 21, 2019, 7:13 PM

#

You can research your cpu and find out if it supports virtualization @unborn shard

novel rivet May 21, 2019, 7:24 PM

#

i just checked it doesn't support it smh

novel rivet May 21, 2019, 9:03 PM

#

any suggestions?

naive dust May 21, 2019, 9:16 PM

#

https://tryhackme.com/room/kali

TryHackMe | kali

TryHackMe is a platform for learning and teaching cyber security.

#

Is an option

deep trellis May 21, 2019, 9:38 PM

#

You can even use your browser to connect to kali

#

Control Kali with your browser

white python May 22, 2019, 2:58 AM

#

any1 i can ask for the wirshark challenge by Ben

rigid oxide May 22, 2019, 3:31 AM

#

That'd be Skidy question I believe

white python May 22, 2019, 3:44 AM

#

thanks man

unborn shard May 22, 2019, 10:40 AM

#

@naive dust Ive used that link you provided and I have access now should i just use terminal from my windows button?

unborn shard May 22, 2019, 10:57 AM

#

nevermind im not that far yet. But since ive im tryhackme's kali machine i can just open terminial on my computer and start on bandit now correct?

naive dust May 22, 2019, 11:52 AM

#

If you've got a terminal then go nuts

unborn shard May 22, 2019, 11:56 AM

#

ok perfect so since im usingt the kali machine does my temrinial just assume im running on kali linux? just a typical question here

#

only reason i ask is because opn bandit it said to bring up a list of commands i need to type man<comman> and my terminal didnt recognize it

#

📎 Capture.PNG

#

so it made me wonder if im doing it right before i dive deep into this bandit stuff

naive dust May 22, 2019, 12:04 PM

#

What

#

No

#

That's the windows command prompt

#

Not the linux terminal

#

You have to ssh or rdp into the kali machine

#

@unborn shard

unborn shard May 22, 2019, 12:14 PM

#

oh 😦

#

is there instructions on how to do that?

little dragon May 22, 2019, 12:15 PM

#

🤔

naive dust May 22, 2019, 12:15 PM

#

Yes

unborn shard May 22, 2019, 12:15 PM

#

lol @little dragon im a beginner lol

little dragon May 22, 2019, 12:15 PM

#

I can see that.

naive dust May 22, 2019, 12:15 PM

#

https://www.putty.org/

#

An ssh client for windows^

little dragon May 22, 2019, 12:16 PM

#

One must understand basic linux usage .

naive dust May 22, 2019, 12:17 PM

#

Yea @little dragon

little dragon May 22, 2019, 12:17 PM

#

Ssh is your friend

naive dust May 22, 2019, 12:17 PM

#

Once he gets set up

#

Hes gonna do bandit overthewire

#

@unborn shard download that

unborn shard May 22, 2019, 12:19 PM

#

ok downloading putty now. thanks

#

📎 Capture.PNG

#

done now

naive dust May 22, 2019, 12:24 PM

#

Ok

#

So it gors

#

<username>@host in the hostname box

#

So they give you credentials

#

And once you hit ok

#

They ask for a password

#

Enter it then ur good

unborn shard May 22, 2019, 12:26 PM

#

type username or pick one?

#

and ok

naive dust May 22, 2019, 12:34 PM

#

Yes

#

They give you a username on the page @unborn shard

unborn shard May 22, 2019, 12:36 PM

#

ugh that didnt work and now im getting this when i try to open it

#

📎 Capture.PNG

#

got it back up

#

gonna try again

naive dust May 22, 2019, 12:38 PM

#

Why are you running the installer again?

steel bobcat May 22, 2019, 12:38 PM

#

is working

📎 Screenshot_2.png

naive dust May 22, 2019, 12:39 PM

#

Ye it works

#

Hes just getting everything set up

unborn shard May 22, 2019, 12:39 PM

#

📎 Capture.PNG

#

thats what it said when i hit ok

naive dust May 22, 2019, 12:39 PM

#

What did you put in hostname?

unborn shard May 22, 2019, 12:40 PM

#

<username>@host

naive dust May 22, 2019, 12:40 PM

#

No

steel bobcat May 22, 2019, 12:40 PM

#

bandit.labs.overthewire.org

#

the hostname

naive dust May 22, 2019, 12:40 PM

#

Your supposed to replace username with your username

#

And host with the actual host

little dragon May 22, 2019, 12:40 PM

#

bandit0

unborn shard May 22, 2019, 12:41 PM

#

you mean my tryhackme username?

naive dust May 22, 2019, 12:41 PM

#

Overthewire is not affiliated with try hack me

#

If you want to directly connect to bandit

unborn shard May 22, 2019, 12:41 PM

#

so how do i find my username?

naive dust May 22, 2019, 12:42 PM

#

If you just want

#

To connect to bandit

#

https://overthewire.org/wargames/bandit/bandit0.html

#

Use those creds

steel bobcat May 22, 2019, 12:42 PM

#

Oops, my bad

naive dust May 22, 2019, 12:42 PM

#

If you want to connect to your kali machine first

#

Then use the creds tryhackme gives you

#

In this case user: root pass: toor

unborn shard May 22, 2019, 12:45 PM

#

okay ill just go with bandit first but how do i find my username bandit has given me the host which is bandit.labs.overthewire.org and a port number

#

so it would be <username>@bandit.labs.overthewire.org

steel bobcat May 22, 2019, 12:45 PM

#

nope

#

just bandit.labs.overthewire.org

#

username is not require for overtherwire

unborn shard May 22, 2019, 12:46 PM

#

ah ok ill try that quickly.

naive dust May 22, 2019, 12:46 PM

#

Yes it is

#

In this case

#

bandit0 is the username

unborn shard May 22, 2019, 12:47 PM

#

📎 Capture.PNG

#

it came with this now

steel bobcat May 22, 2019, 12:47 PM

#

click yes

#

is ssh fingerprint

#

you will be directed to user and pass

naive dust May 22, 2019, 12:48 PM

#

^

steel bobcat May 22, 2019, 12:48 PM

#

user: bandit0
pass: bandit0

naive dust May 22, 2019, 12:48 PM

#

And then you're good to go

steel bobcat May 22, 2019, 12:48 PM

#

and find the flag

unborn shard May 22, 2019, 12:50 PM

#

it says login as:

#

and thats it

#

should i just put user: bandit0

steel bobcat May 22, 2019, 12:50 PM

#

yes

#

just put bandit0 as the username

unborn shard May 22, 2019, 12:51 PM

#

access denied on password

steel bobcat May 22, 2019, 12:51 PM

#

your password?

#

what have you put in

unborn shard May 22, 2019, 12:51 PM

#

yes i put bandit0

#

📎 Capture.PNG

#

now ive lost conmnection says inactive

steel bobcat May 22, 2019, 12:52 PM

#

i see the problem

#

login as: bandit0

#

not login as: user: bandit0

little dragon May 22, 2019, 12:52 PM

#

You have to change port 2220

#

If your using default it will fail

steel bobcat May 22, 2019, 12:53 PM

#

https://overthewire.org/wargames/bandit/bandit0.html

#

read the instruction

little dragon May 22, 2019, 12:53 PM

#

Change your port

unborn shard May 22, 2019, 12:54 PM

#

got it

#

📎 Capture.PNG

steel bobcat May 22, 2019, 12:54 PM

#

Great

little dragon May 22, 2019, 12:54 PM

#

Woohoo

unborn shard May 22, 2019, 12:54 PM

#

lol finally thanks for being patient

steel bobcat May 22, 2019, 12:54 PM

#

You can move to level 1 now

#

https://overthewire.org/wargames/bandit/bandit1.html

unborn shard May 22, 2019, 12:55 PM

#

okay perfect quick question.

#

for tryhackme since i have a kali machine would i just put in the ip address theyve given me? and what port number would i put? and for username and password should i use my tryhackme usernme and password? just so when i done with bandit i know how to login without bugging you guys

somber lotus May 22, 2019, 12:59 PM

#

huh?

steel bobcat May 22, 2019, 12:59 PM

#

I can't confirm with you since the room only available for subscriber.

unborn shard May 22, 2019, 1:00 PM

#

ok thank you

sleek eagle May 23, 2019, 1:59 PM

#

guys I connect to the VPN successfully but can't connect to any machine, please help

rigid oxide May 23, 2019, 2:13 PM

#

Try a different room. If it's basic pentesting, that one has had a public ip for a bit and is misbehaving

sleek eagle May 23, 2019, 2:43 PM

#

Alright let me check

sleek eagle May 23, 2019, 4:16 PM

#

other machines don't work either

#

I also tried an open source (older) version of openvpn

#

that doesn't have an effect

wet shard May 23, 2019, 5:10 PM

#

Any openvpn error when logging ?

scenic iron May 23, 2019, 5:11 PM

#

Try sudo openvpn

sleek eagle May 24, 2019, 1:30 AM

#

@wet shard not anymore and still not working

#

@scenic iron I did this in all my tries obviously

#

also tried different openvpn versions

little dragon May 24, 2019, 1:31 AM

#

Did you verify your Vpn IP?

sleek eagle May 24, 2019, 1:32 AM

#

how would I do that

little dragon May 24, 2019, 1:32 AM

#

ifconfig

#

In a terminal

sleek eagle May 24, 2019, 1:33 AM

#

it says running under tun0

little dragon May 24, 2019, 1:33 AM

#

Right, what up did you get?

#

Ip*

sleek eagle May 24, 2019, 1:33 AM

#

10.8.3.101

little dragon May 24, 2019, 1:34 AM

#

What is the box IP from the room?

sleek eagle May 24, 2019, 1:35 AM

#

I'd have to re-deploy just a moment

#

10.0.0.104

little dragon May 24, 2019, 1:35 AM

#

Just try to ping it first. Deploy the box and give it about a min to boot up.

sleek eagle May 24, 2019, 1:35 AM

#

alright 60 seconds

little dragon May 24, 2019, 1:35 AM

#

Just see if you get a ping response

#

Or run a quick nmap scan ping or try a scan without ping.

sleek eagle May 24, 2019, 1:36 AM

#

ping doesn't work

little dragon May 24, 2019, 1:37 AM

#

What distro are you using as the attack machine?

sleek eagle May 24, 2019, 1:37 AM

#

Ubuntu

#

0 hosts up no ping scan

#

maybe I'll try this on windows to see if it connects

#

so I could at least pinpoint the cause

#

Huh, works on windows

#

must be something with openvpn

#

where did you get yours from?

little dragon May 24, 2019, 1:47 AM

#

I run kali linux on a raspberry pi

sleek eagle May 24, 2019, 1:47 AM

#

oh

#

well my openvpn is acting weird on ubuntu then

#

downloaded from package manager

#

I also built a different version from source

#

neither work

little dragon May 24, 2019, 1:55 AM

#

https://tryhackme.com/room/kali

TryHackMe | kali

TryHackMe is a platform for learning and teaching cyber security.

#

You could go that route.

sleek eagle May 24, 2019, 1:57 AM

#

first of all I need to subscribe and secondly if I could get the VPN working I wouldn't need that would I

#

maybe I'll install kali though

little dragon May 24, 2019, 1:58 AM

#

Okay, no need to be rude. Just trying to give you options.

#

Installing kali would be better.

sleek eagle May 24, 2019, 1:58 AM

#

yeah I think I'll install Kali since the whole point of me using linux is for pentesting and stfuff

#

sorry if I came out rude, it's just my culture, very straightforward

little dragon May 24, 2019, 1:59 AM

#

Also ParrotOS is a great pentesting distribution.

sleek eagle May 24, 2019, 2:00 AM

#

Isn't Kali like industry standard?

little dragon May 24, 2019, 2:00 AM

#

But kali has tons of support

sleek eagle May 24, 2019, 2:00 AM

#

yeah that's what I expected

deep trellis May 24, 2019, 5:25 AM

#

@little dragon Thanks for giving support 😃

#site-support

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1 Rank: 1

Username: DarkStar7471 Rank: 2

Username: captain_say_w00t Rank: 3

Username: SuitGuy Rank: 4

Username: captainjazzz Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5

Username: lp1
Rank: 1

Username: DarkStar7471
Rank: 2

Username: captain_say_w00t
Rank: 3

Username: SuitGuy
Rank: 4

Username: captainjazzz
Rank: 5