hashcat -m 1800 -a 0 kawai.hash /usr/share/wordlists/rockyou.txt
#site-support
thorny stone
plush apex
plush apex
$6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02
salt : aReallyHardSalt
round;5
thorny stone
gunzip -d /usr/share/wordlists/rockyou.txt.gz && echo '$6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02' > kawai.hash && hashcat -m 1800 -a 0 kawai.hash /usr/share/wordlists/rockyou.txt
plush apex
will this give me the answer
thorny stone
just run it
plush apex
thorny stone
ok I guess WSL kali doesn't have rockyou
last olive
WSL Kali?
thorny stone
wget https://raw.githubusercontent.com/praetorian-code/Hob0Rules/master/wordlists/rockyou.txt.gz && gunzip -d rockyou.txt.gz
blazing depot
you check there is rockyou.txt.gz in /usr/share/wordlists?
last olive
+1
plush apex
last olive
Goddamn, what a great speed.
thorny stone
echo '$6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02' > kawai.hash && hashcat -m 1800 -a 0 kawai.hash rockyou.txt
plush apex
blazing depot
remove ] at the end
thorny stone
I dont remember adding ]
blazing depot
:))
plush apex
last olive
Too dark to see.
thorny stone
echo '$6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02' > kawai.hash && hashcat -m 1800 -a 0 kawai.hash rockyou.txt --force yolo
plush apex
that is the basic colour of kali
last olive
That was my brightness level, nvm.
plush apex
blazing depot
append -n in echo to remove trailling new line
plush apex
the wt now
thorny stone
someone else be tech support
blazing depot
echo -n '$6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02' > kawai.hash && hashcat -m 1800 -a 0 kawai.hash rockyou.txt --force
plush apex
thorny stone
something is wrong with the hash
blazing depot
the hash missing "." at the end
thorny stone
you're not being very kawaii with us here
blazing depot
facepalm
thorny stone
you need to watch some ippsec kawai
thorny stone
what
plush apex
..............................?
thorny stone
what does wt mean
I assume it means what
you need to learn networking concepts and basic programming stuff
last olive
Zayotic is done with being tech support?
plush apex
mannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
i just wanted to do 2 questions man
ah ik
thorny stone
xD
plush apex
give me the answer then
thorny stone
I didn't do it
last olive
!rules
sharp bisonBOT
2. No personal drama or drama from any other discord community is allowed to be brought into this discord. This is a space for gaming and hanging out, keep it that way.
3. No excessive self promotion. Linking to another discord server is strictly prohibited, just don't turn it into advertising. For any self-promotion please reach out to an administrator first.
4. Keep it civil. If action is necessary in a dispute or any other sort of disruption on this discord punishment will be doled out evenly both to the individual(s) who started the issue and to those who reacted inappropriately in their response.
5. No cheating is allowed whatsoever within this discord. Any cheating (other than specifically within a developmental environment where it has been preapproved by staff) will result in an immediate and permanent ban.
6. Severe racism is not tolerated and will result in a permanent ban.
7. Administrators reserve the right to modify the rules at any time and extend them accordingly to cover infractions which may not be currently included in these rules.```kawaii language starting to show
last olive
Been there
plush apex
thorny stone
just wait, cracking a sha512 has never been instant
thorny stone
It appears no gpu as well ๐
@plush apex cracking is not really skill based its money based so don't dwell on this
thorny stone
depends on the password, depends on the speed
thin dove
Usually I set it and forget it, so open a new Kali window and move to the next one while that one is going, or start another room if you don't want to continue that room until that one is cracked
zenith obsidian
can u guys make this a room lol https://www.vulnhub.com/entry/tr0ll-3,340/
thorny stone
delete that @plush apex
plush apex
?
thorny stone
you're exposing a solution to a challenge
plush apex
where
thorny stone
the screenshot
plush apex
actually i wanted to know where is the answer
thorny stone
its right after the hash
plush apex
where
thorny stone
how old are you
thorny stone
no you not
plush apex
so where the answer tho
thorny stone
its appears after the hash has been outputted like hash: password
plush apex
cough cough
@everyone thanks for the help everyone finally bested tht room
ps not bested maybe
zenith obsidian
kali on windows store ๐ฌ
naive dust
@zenith obsidian I actually installed that
Just to see what it was like
Legit none of the tools came preinstalled
zenith obsidian
yea thats why i uninstalled it ๐ :
naive dust
Like
Why even put kali on there if you're not gonna have the one reason people use kali
zenith obsidian
eh ease of access
u can easily download the tools
if you add kali's sources and apt get them
naive dust
Yea but there are already automated tools on github that do just that
zenith obsidian
what
u add the source and do apt-get update apt-get upgrade
i think thatseasy enought ๐
naive dust
If you're using another debian based distro there are tools that install kali tools effortlessly
last olive
For example, katoolin.
civic ruin
<@&568449888682246145> I need an assistance with my account please
rigid oxide
@civic ruin you might need @deep trellis if it's a site issue
civic ruin
Thanks @rigid oxide
tardy pier
Problem with https://tryhackme.com/room/xss machines. They work for like 10 minutes and then just refuse the connection. Tried with three different machines.
tardy pier
Port 80 goes from open state to filtered.
deep trellis
Hey there
Hmm, let me look I into this
It shouldnt do, but I will test it and get back to you tonight?
tardy pier
ty
deep trellis
What's your username on site too?
tardy pier
joona
deep trellis
Ah awesome :)
golden thunder
Hey, Can somebody provide some more information on learning paths? i did read the info provided on that page but wondering if somebody can provide be a bit more insights. Are those learning path are video training? special rooms? just a blog? one on one's? or something else ?
zenith obsidian
@golden thunder google is ur friend
vapid dawn
@golden thunder the idea behind a learning path is that it's a a comprehensive guide to learn about a particular topic in security - the learning path is usually composed of multiple rooms where each room can have resources including practical content(VMs/other files) with supporting content that helps someone understand the theory behind the topic as well ๐
golden thunder
@vapid dawn thanks alot!! i am thinking of subscribing, so wanted to know what exactly is available. Thanks alot, really helped!
last olive
Ah, so many enemies ahead.
naive dust
Did you see the chat logs been darkstar and I yesterday @deep trellis
deep trellis
On this channel?
naive dust
Its darkstars box
deep trellis
This one is guided, but has some challenges along the way
deep trellis
Points, points and more points
deep trellis
Ooo, I could do a weekend where there is double points.
naive dust
NUUUUU
naive dust
that would be absolutely devastating
fossil dust
THAT WOULD BE AWESOME
naive dust
On top players who dont have that many points to gain @deep trellis
last olive
Time of release?
naive dust
I propose
naive dust
Double points for a specific box
fossil dust
like a random box?
naive dust
Fair for everyone
naive dust
Oh dear lord
deep trellis
6PM GMT is the release time
fossil dust
๐ค
last olive
Ffs, doomed.
last olive
For you
fossil dust
indeed
ancient halo
Nani
deep trellis
^?
vapid dawn
@golden thunder perfect! Let me know if you have any more questions :)
golden thunder
@last olive ha ha ha - Don't worry i am just a noob. Can't complete with you ๐คฃ
last olive
@golden thunder I'm newbie too.
@deep trellis Something like like 5-6 hours before 6PM GMT but it depends on you.
Whatever fits with you.
deep trellis
Next week I will release it earlier.
last olive
Sure
lofty shell
ANYONE solved vulnversity last question ?
thorny stone
whats the question
white python
i think linux privs
lofty shell
Become root and get the last flag (/root/root.txt)
thorny stone
well do it?
lofty shell
how to do it ?
thorny stone
It explains what you should be looking for
rigid oxide
Gotta investigate a little bit for that. Since you are already familiar with the part which involves SUID look up what that's actually doing
Then try a couple of more obvious google searches related to hacking with what you've found. You'll find something that starts with the letters GTF
The goal is to abuse something to perform a privesc to a root shell, keep that in mind
If you need any further hints, let us know
Just dont be afraid to bang your head on it for a bit and fail a few times, that's what hacking is all about anyhow
lofty shell
thanks Darkstar
rigid oxide
@lofty shell yup!
golden thunder
hey can somebody helpme? whenever i have a reverse shell from any linux box (tryhackme or vulnhub) and i am tyring to edit and text file using nano or vi the arrow keys produce these strange characters and i can't navigation through the file. any ideas ?
golden thunder
@vapid dawn thanks!! already tried all those solutions but no luck ๐ฉ
even "escape" key produce those weired characters
only keys that work are a-z and 1-9
thorny stone
Did you do stty foreground?
golden thunder
nope, didn't try that
is that like when i have the upding shell using python -c 'import pty; pty.spawn("/bin/bash")' just run stty fg ?
golden thunder
thanks mate!! will try that. I rooted sputnik yesterday and was facing that issue. I will try this today!!
thorny stone
Doesn't hurt to do export TERM=linux as well
golden thunder
Oh okay. I tried export TERM=xterm and export TERM=screen but no luck
last olive
!rank Shikra
sharp bisonBOT
From TryHackMe Official API!
last olive
@golden thunder You're working hard.
golden thunder
@last olive ๐ Just trying mate!!
last olive
I'm too.
golden thunder
trying to transition my professional careers into cyber security/red teaming!!
last olive
Ah, I thought you were a student. What you do now? Programmer?
Wow, graphic artist. @golden thunder
golden thunder
strange right ?? i know
last olive
Not strange, so crash...
golden thunder
but i love IT and cyber security. Recently got my CCNA and Linux+ preparing fro Pentest+
last olive
CCNA, nice.
When you get free can you show some of your work on graphic design? @golden thunder
golden thunder
Sure!! will DM you
golden thunder
@thorny stone CTRL-Z stty raw -echo && fg works like a magic!! thanks alot!
carmine pasture
Did you guys fix the *10. ip problem?
deep trellis
Monday it will be fixed.
rigid oxide
^^
deep trellis
It's going to be migrated to 10.10..
carmine pasture
Alright cool
alpine ledge
Hi there. I'm a Protonmail user, and whenever I receive TryHackMe emails, I get a warning message saying it may have been spoofed. Might wanna look into it.
rigid oxide
We might have to check the domain spf settings since protonmail is likely performing a reverse lookup of the records
deep trellis
SPF should be ok
hmmm
Feel like we're at a disadvantage having the word tryhackme as the domain aha
DKIM and SPF
Hmmm
rigid oxide
^haha, you're not wrong regarding the name
golden thunder
is it possible to change a username afterwards ?
rigid oxide
Not at the current moment
naive dust
hey, i installed burp suite set up the proxy with chrome, added the certificate as well and its saying that the certificate is invalid, can some 1 please help
naive dust
yes
marsh plinth
Have you updated chrome to latest version? I use firefox as well
Or did you get it working?
deep trellis
I think jc fixed it by using FF
topaz trench
no, not really
mossy sentinel
thanks i want to organise events for my collage here
mossy sentinel
okay thanks
rigid oxide
Yeah, most of the machines are free
tawny epoch
hey
i connected to openvpn and deployed the machine
but i cant ping it or scan it using nmap
any thoughts what coludve gone wrong?
btw it was working pretty fine 3 days when i last used it
tawny epoch
its on ignite room
topaz trench
what's your nickname on thm?
topaz trench
oh, that's your first machine?
tawny epoch
yep
rigid oxide
Try verifying on the access page that you're connected @tawny epoch
topaz trench
^
rigid oxide
you might need to reboot that box, it can take a moment to come up
tawny epoch
you mean the vm?
tawny epoch
ok
Host seems down. If it is really up, but blocking our ping probes
and this is the message i keep getting from nmap
topaz trench
ppl: vms
htb: machines
thm: boxes
docker: images
hotel: trivago
rigid oxide
@tawny epoch try another room to see if you can reach a different box like Blue
@tawny epoch if need be, I also have a downloadable option for Ignite
topaz trench
nani
pale ridge
I'm having trouble on getting the DOS attack name on RP: Nmap, could anyone help me?
snow oriole
did the entire scan finish? mine took a while ๐
pale ridge
Uhhhh, I think it didn't, but I supposed it just was waiting for input
I'll wait, thanks
snow oriole
just be patient, should pop up
pale ridge
It sure took time, finally returned what I needed. Thank you MrSeth
snow oriole
^^
wet shard
Hey @lament needle I have a question on the Pentest quizz
wet shard
@naive dust nvm I got it! Thanks anyway
lament needle
@wet shard great
lavish marten
hi.. am i allowed to ask questions about specific rooms here and how to do something ?
rigid oxide
Go for it
rigid oxide
Haha I'm glad you like it
lavish marten
first time i ever used metasploit so it's really nice for beginners just giving small hints
rigid oxide
Once you've done that box, you should try RP: Nmap
The primer series, both red and blue, are meant to help peeps start out strong
lavish marten
for sure...
OMG i just figured out my issue on my own.... dear god i just spent an hour trying to figure out what type of hash to use in hashcat... lol smh..
rigid oxide
I do that all the time ยฏ_(ใ)_/ยฏ
lavish marten
right... ok that feels good........
naive dust
We all do it
lavish marten
lol thats good to know... hahah
lavish marten
thanks for the blue box DarkStar... i just completed it... very good intro....
naive dust
@lavish marten it worked for you?
lavish marten
yes
naive dust
Blue has quite the history of failing
rigid oxide
:<
lavish marten
it was failing a few times... the metasploit module i could not get to work for probably half an hour, i kept getting this error about the LHOST being wrong or something
naive dust
Oh then that's not blues fault surprisingly
lavish marten
about the 127.0.0.1 wasnt setup correctly or something
eventually i restarted and then it randomly worked, i have no idea what i did differently
oh i see....
naive dust
It might be
Honestly blue has a different problem for every person
Its quite remarkable really
lavish marten
weird... there was 1 thing i remember it saying it might error out for the meterpreter so i got worried before doing that step, but it worked the first time... ok glad it worked OK then lol
naive dust
You can put down the issue you had in your writeup of blue
You are making one right? @lavish marten
lavish marten
in writeups?
naive dust
Ye skidy will approve it for u when ur done
rigid oxide
I think Pars is laying on the sarcasm thick
naive dust
Good night my dear friend
rigid oxide
peace duder
deep trellis
If anyone had any issues with downloading their OpenVPN config file, I have rectified the issue.
wet shard
Hi @deep trellis ! How are you doing? Some of my badges haven't been activated, I think I qualify for Mr.Robot (I finished the room, probably before the badge existed) and supporter as I was among the first paid users :p
prisma sparrow
For the simple ctf's third task, what is the CVE. I've tried searching for CVE's for apache, OpenSSH and vsftpd 3.0.3 that I come up with when I nmap but nothing seems to stick. What's the CVE?
frank harbor
There is something to be found on the webserver.
Use Dirb, dirSearch, gobuster or Dirbuster to fuzz the webserver and checkout your findings.
rigid oxide
@prisma sparrow let me know later if you're still stuck, I can give you more pointers
lavish marten
does anyone know how to get a list of all the rooms? i see there are 71 total rooms on the main page and when i go to hacktivities, it only shows a maximum of 4 pages with 10 on each page, which would be 40 total
rigid oxide
Top right, there's a checkbox for at least free rooms
Skidy might need to add a paid only selection as well
lavish marten
yes i saw the free one, i wanted to tell which ones were paid, ah i see...
naive dust
Hello there :)
lavish marten
cuz for the subscription, i cant tell what u get included as well thats why i ask
lavish marten
do you guys ever run full port scans for some of these boxes? i was checking the top 1500 ports for the ultratech box because one of the questions asked what other non standard port is being used, but only 3 ports came up as open and none of them were the right answer, now im running a full port scan but i feel like it is going to take like an hour lol
vestal vigil
lavish marten
i mean i guess, i dk why it didnt show up in the top 1500, i assume it is a random "non standard" port, you think i should try to open it to like the top 20k ports or something instead?
i just didnt want to waste time and do the top 10k and then nothing showed up then keep making it bigger
rigid oxide
I always scan all ports unless I'm in a hurry
It's common in industry for people to hide things on high ports
lavish marten
interesting..... ok i see...
rigid oxide
Nessus defaults to only common ports but I always force all ports to find extra loot
lavish marten
right... yeah that makes sense i didnt think of that
frank harbor
Bummer....I tried to upload an VM, but it's based on debian9. Any thought on when debian9 also is supported?
deep trellis
Heya, I don't think it is! It will be shorty (end of September)
Debian 6.0.0-6.0.8, 7.0.0-7.8.0, 8.0.0 are all supported
Nothing is stopping you uploading it and trying tho! :)
frank harbor
@deep trellis already tried it, gave me an error.
deep trellis
Oh right, I am still looking into my other solution ๐
Hopefully soon there wont be a problem with having VMs uploaded and converted.
frank harbor
I hope so. I'm almost done building another one and it's a really fun challenge. But its also based on debian9.
deep trellis
Yeah my next big task is to try and fix the conversion on differnet OS's
Soon.. soon!
deep trellis
@lavish marten I've updated our pagination
Pagination updated. Let me know your thoughts!
^^ Tells you the max pages and I increased the pages you can click on too
lavish marten
nice that looks good ๐ @deep trellis
lavish marten
does anyone know, do you need to do the pro version of burp to intercept traffic that isnt a normal http port (not 80 or 443?), i saw there is a config change in the proxy settings, but do u need to regenerate the certificate in your browser? i saw burp needs to restart to regen the cert, but settings arent saved in community version
leaden peak
Hey. Trying to connect to a room but having some trouble
rigid oxide
Which room in particular?
leaden peak
Blue Room
trying this again now
Says im connected and all
But cant get into the room
naive dust
what a shocker
last olive
Yup, most of the users had problem with that machine.
leaden peak
Ohhh...
last olive
It's not, I've tried almost 10 times but my exploit always fails.
rigid oxide
๐
rigid oxide
Renamed this chat to reflect more accurately the purpose
rugged elbow
Not quite tech support but is there a way to change my username on the THM? I have my old handle on there? ๐ค
last olive
It's still in progress afaik.
prime fox
This is a stupid question, but do you need to download hashcat? lol
frank harbor
Not if you're using a pentest OS like Kali or ParrotSec
If you do need to download it, there is a github where you can download hashcat:
https://github.com/hashcat
prime fox
Ok, thanks ๐
patent arrow
Hi, can anyone help me with the Linux challenge on flag16? Task 4 #6?
naive dust
Hi, I am currently stuck on this instruction. First time im doing this... (var_8h is 99 i think)
andl $0x64, var_8h
spiral otter
@naive dust hey, can you provide some more information about what you're trying to do? Which room are you having issues in?
snow oriole
i think it's the BoF room
last olive
It's x86-64 I guess.
naive dust
yeah sorry it is the introduction to x86-64 room.
vapid dawn
Hey @naive dust feel free to DM me :))
frank harbor
@deep trellis Any idea on when VMs with Debian9 OS can be uploaded? I have 2 very nice CTF-like machines waiting, but can't due to the kernel/OS restriction.
deep trellis
You can downgrade the kernel to make it work
As a short term fix
Otherwise, I will to make this all automatic
Would love to see your CTF too ๐
frank harbor
cool....I'll try and downgrade the kernel
deep trellis
Anh kernel from 7.0.0-7.8.0, 8.0.0
frank harbor
k
indigo lantern
Hey, how does the points and charts works?, I get the y Axis is points and x is Questions and hovering reveals points, but why are the point scores different for everyone for the same question , is it a time based on when you compete the last flag? , Thanks ๐
rigid oxide
Generally speaking, points are higher for the first person to answer a question. They go down slightly for each subsequent answer with a small amount of wiggle. The wiggle is new, I think Ben added that to reflect the number of attempts per question with points being slightly reduced per attempt
indigo lantern
Ah! ,curiosity of how it worked and why there were vast differences :D, Thanks for the reply , not too fussed about my lack of points ha-ha
sharp mirage
๐ค Is there a point guide somewhere on the site? If not, there should be.
rigid oxide
I'll work with Ben and Ashu on adding that, it should probably be on the FAQ
indigo lantern
yeah 1st place i checked ha-ha
fossil dust
ex-1st place cough cough
wet shard
Hi o/! Would you by any chance keep the .ova files sent to create rooms? I might have deleted UltraTech's VM ^^'
deep trellis
Erm, I think I can revert the process and get the VM as an ova, but its a process I have not really looked into
rigid oxide
^Oh this is gonna be the fun kind of weird
frank harbor
there is an error in a question of VulnOS2 (question 5)
rigid oxide
@frank harbor can you dm me the error?
indigo lantern
gonna sound like a thicko, but how do you copy and paste from the vnc Kali room to local machine?, typing these flag is killoing me ๐
deep trellis
Are there options on the left hand side? The VNC settings
Also, you can always log into your account on the Kali Machine
indigo lantern
ah cool, cant seem to copy out the terminal window, weird must be me
ah just got what your were saying, i assumed that the kali vm internet cap would be disabled
deep trellis
Nah ๐
warm spear
Hey, I'm having problems with THM - most of the boxes don't respond to RCE stuff (they leave me hanging... forever, even when I copy walkthroughs code ๐ฆ ). Do you think using the Kali box will give me better results? (on a vip server btw)
indigo lantern
Hey, I'm on Q2 of filter evasion , I can get the pop up hello but not receiving the flag code?,,
using the following
removed----------------
any idea's?
indigo lantern
tried another method, please ignore
naive dust
i cant download the vpn
when i download the file its just blank
@deep trellis
i need help
deep trellis
Blank or does it have an error message?
@naive dust Thank you for reporting, my backup today caused my API process not to restart properly.
I have fixed the problem, go ahead and "Regenerate" your configuration file, then try re-downloading
Let me know if it works
naive dust
Ok thanks!
empty rose
hello!
I would like to change my account username
could anyone guide me to that? ๐
frank harbor
lol....need to be more precise ๐
empty rose
sorry XD
frank harbor
THM account I don't know. No change option available.
empty rose
yeah I saw, that's why I was hoping an admin could help me out :3
but thanks dude <#
โค
frank harbor
np love back ๐
fossil dust
Name change coming soon iirc
torpid urchin
@fossil dust boop
supple sonnet
@fossil dust boop
naive dust
How do i upload a machine to TryHackMe?
deep trellis
Yes, there is a room competition coming up too :)
Win up to $200 for making a room with a virtual machine that teaches a subject of your choice
naive dust
ooooo
deep trellis
I'll release more details about it tomorrow :)
naive dust
looking forward to it ๐
fossil dust
NO BOOPING @supple sonnet @torpid urchin
supple sonnet
honkhonk
fossil dust
hankhank
strong mantle
@fossil dust boop
torpid urchin
@fossil dust boop
fossil dust
NU BOOPING
strong mantle
Boop
summer cove
I just subscribed for the kali vm and Its so slow
deep trellis
@summer cove really? I have had no issues with the machine, are you using the browser or RDPing into the machine? What country you in?
What's your internet speeds?
deep trellis
Reduce it to like 16?
summer cove
its still so laggy
deep trellis
Hm, thats really strange as I have not had any issues before. How laggy in ms would you say?
summer cove
Everything loads like a old fashioned tv
deep trellis
How are you accessing it? RDP?
summer cove
Like pixel line by line, never had any issues before remote desktoping into machines
yeah RDP
deep trellis
Try in browser
summer cove
yeah its a little bit better just still laggy, I guess its got to be expected in a way
Ive just never had issues with remote desktoping into machines
rigid oxide
@summer cove On a different note, I've added your subscriber tag on the discord
summer cove
thankyou
rigid oxide
yup!
naive dust
Boop
fossil dust
NO BOOPING
naive dust
Booping
fossil dust
NO
naive dust
boop
naive dust
BOOOOP
strong mantle
BOOOOP
topaz veldt
I was wondering if I could get some help. Iโm trying to configure Firefox to use with burp. I have setup the proxy as stated in the โLearn Burp Suiteโ room. But I canโt get https traffic or websites to view. I have configured Firefox with the 127.0.0.1 proxy information. But I still canโt get to the DVMC page or any page. Any assistance would be helpful.
rigid oxide
Check out that link and use the extension 'FoxyProxy'
Also, don't forget to make sure intercept is turned on
topaz veldt
this is the error I am getting.
naive dust
Your burp proxy is on
topaz veldt
I under the impression that the burp proxy has to be on to intercep the traffic from Firefox? Or am I thinking about this the wrong way?
supple sonnet
So the way it works
URL Requested -> Burp -> Web server
Web Server -> Browser
But in Repeater it can go
URL Requested -> Burp -> Web server
-> Web Server -> Burp
naive dust
Confirm cert
fair dock
View all University teams on the platform! You can search by University, username or team name. Teams will be getting ready for the hackback event this October!
deep trellis
Eyy
fair dock
The link to the hackbak page takes you to the old hackback i am trying to figure out how to make a team ๐
chrome cipher
Hi, I just deployed the Kali machine, but I have no idea what the username and password are
fair dock
nope it goes to https://tryhackme.com/hackback/
deep trellis
https://tryhackme.com/hackback2 goes to hackback
fair dock
as long as you understand my point lol, on teams it says look out for the hackback event and when you click on it, it takes you to the old one
fair dock
๐ the difference is no number 2
fair dock
Oh i did it through the profile page
chrome cipher
@deep trellis yes, thanks!
deep trellis
Its a problem that I am currently fixing ๐
I am not at home, so wont be fixed until Monday evening - it should work full time for you now.
chrome cipher
No worries, I am happy that it's working after the restart
deep trellis
It should work full time now, its just on the first ever start
Let me know your thoughts too ๐
chrome cipher
I will ๐
final laurel
Hello
deep trellis
Hey, terminate the machine and restart it for that Kali box
Just seen the error message appear on my other monitor if you're the same user on the site
final laurel
I m new here, I just deploy my own Kali and unable to login
What username and password should I use for kail?
deep trellis
Yeah, terminate it - then re-deploy it and you shouldn't have that problem
Did that work @final laurel
deep trellis
Awesome! ๐
final laurel
๐
deep trellis
I just fixed that problem so it shouldn't happen again.
chrome cipher
@deep trellis is the Kali machine running all the time after we deploy it? does it save its state?
deep trellis
If you check there is an expiry time
So when that time is gone, it gets terminated
Just keep extending it
and it shouldn't die
chrome cipher
thanks
dapper imp
Hey does any one have any recommendations on a opensource netflow like tool that can take a span port and provide reports and top talkers?
rigid oxide
OSSIM
I'm a bit biased for this since I use it daily but I'm a big fan of it
@dapper imp
naive dust
hey, i completed the mr robot room, got the flags. however its bugged out, its duplicated each of the tasks
deep trellis
Can you leave the room and rejoin it
deep trellis
Oo, I will look into this, thanks for reporting :)
naive dust
alri, no worries
it also deleted my flag1 entry too (it was right) if thats of any use to you
deep trellis
@naive dust it shouldn't be displaying two?
Just checked and it looks ok hm
Is this in the mrrobot room?
quaint seal
ok, i'm getting invalid login on the kali room vm no matter what I put in there. what is supposed to go in the login box there?
can't find instructions for the new browser based access on the page or via email
naive dust
Ye in mr robot room I tried it across 3 machines and same across all three @deep trellis
deep trellis
@quaint seal try terminating the machine and redeploy it
Did you have any other machine deployed when you tried?
@naive dust I will look into it, think I know the problem
naive dust
Alri thank you
deep trellis
@naive dust That was a weird bug - its been fixed now aha ๐
naive dust
Ah good ty
naive dust
if i pay for sub by debit card and cancel it, ill still have premium for a month right
rigid oxide
Yessir
Once the initial payment goes through it'll keep for that month. It just won't renew
If it causes any issues, just let us know and we can remedy that
naive dust
okay thank you
quaint seal
@deep trellis i tried terminating kali vm, leaving room, re-joining room, and re-deploying. same issue. also had the same problem in another room (investigating windows). I did have other rooms deployed at the same time (as I assume would often be the case for having the kali vm deployed)
deep trellis
@quaint seal I will investigate ๐
Wait 1 sec
When I tell you to deploy
Can you?
So I can see the error
quaint seal
sure, i'll get it pulled up
quaint seal
starting machine now
quaint seal
and my thm<-->discord identity is now revealed ๐
deep trellis
All log usernames are anonymous
So I can just see what functions are being called
And the requests X user is making
I can link them if I reallllly wanted to, but its a hassle
quaint seal
you took all the joy of my osint joke and ruined it with your real-world infosec
๐
deep trellis
My Bayd
quaint seal
aaaand, the kali vm just deployed and i have in-browser access for the first time in several days
quaint seal
last night when I posted it was still happening
deep trellis
Oh r.i.p
quaint seal
I did see your message as I was researchign whether this was known
(from your fix a few days ago)
deep trellis
Do me a favour?
Keep kali alive, can you deploy the Investigating Windows room
Have 2 VMs shown in the browser
deep trellis
Nice nice
quaint seal
yep, working on IW room now as well
deep trellis
1 sec, how quickly did you deploy the Kali room and IW room?
Like deploy one after another
Did you have access to 1 but not the other?
quaint seal
just now or yesterday and this past week?
deep trellis
Yesterday
quaint seal
no, i couldn't get to anything that deployed in-browser access within the last week
no matter delay b/w launches, leaving room, rejoining room, etc.
deep trellis
Is this the first time you're seeing it?
quaint seal
no, it was working about a week ago
deep trellis
Okay, if there are any other problems let me know ๐
quaint seal
and stopped sometime after that and now it's working again as of now for me
deep trellis
If it plays up again, lemme know ๐
quaint seal
will do, thanks for your time
deep trellis
No worries ๐
quaint seal
@deep trellis kali vm ran out of time and shut down. just restarted it and it's giving me the login prompt again
quaint seal
yep
deep trellis
Did you have another machine running/deployed?
quaint seal
i did, i had Ignite room going
deep trellis
Any others?
quaint seal
I don't believe so, just that one
deep trellis
can you try redeploy?
quaint seal
sure, one sec
i did shut down and re-deploy earlier after it happened and still had the same problem the second time around
ok, terminated. about to deploy again
deep trellis
Wait
quaint seal
waiting
deep trellis
When that happens in future, can you also please let me know the URL from the large in browser button
It just messed up for me too
So I can investigate
quaint seal
the link that the access in browser button points to?
deep trellis
yeah, when it happens again can you click on it
And copy/paste the URL
Only if it breaks
quaint seal
yes, i can do that
deep trellis
thankjs
quaint seal
ok, deploying kali room vm again
deep trellis
did the IP of the kali box say "undefined"?
quaint seal
there was some url param that was == to undefined, but i don't remember what it was
quaint seal
that's what it was
deep trellis
Breaks the whole thing
quaint seal
token=undefined
deep trellis
Oay thats why
Ill add some safety measure in to stop it
Thanks for letting me know.
steel bobcat
Anyone have problem with the powershell room? Tried to access with room using RDP but end up the following error.
while the browser mode takes forever to load
Tried to restart the machine but no luck
Thanks in advance ^^
Oh yea, this is my RDP version
False alarm, Just got the shell......lol
quaint seal
@deep trellis fyi, having kali room vm issues again just now. refreshed the webpage and getting the login prompt now (even though token param is there and populated)
quaint seal
yes, but not one that yields an in-browser remote session
deep trellis
How long has Kali been alive before it died?
quaint seal
i've extended it a few times, so maybe 2 hours?
deep trellis
Hmm, I wonder if the token is just dying after 2 hours.
I will code something in that can help fix the issue
Like a "Re-login button"
quaint seal
or if a user is already hitting the "add 1 hour" button, perhaps that could add more time to the token as well
quaint seal
gotcha, just thinking about the UX
that way the user doesn't have to "add 1 hour" and then click a separate "re-login" button
deep trellis
Yeah, thinking of a solution hm
Did the Kali linux die when you did anything specific?
Was it when you refreshed the page?
Like as soon as you refreshed it asked for a login?
quaint seal
yep, exactly
quaint seal
yes, that is correct
and even if i click the "access in browser" button now, it opens a new tab that still prompts for login creds
quaint seal
nods
deep trellis
Oh wait
Where you using the Kali machine?
Because tokens expire after 60 minutes of inactivity
quaint seal
yes, i was defintely actively in it
had typed something in teh console of a meterpreter shell running in the kali vm within the prior 30 secs
deep trellis
Yeah I think the tokens expire after 60-120 minutes
Now thats a larger problem than I had anticipated
quaint seal
maybe most people don't take as long as me to figure things out, so they don't need the kali vm as long at a time ๐
deep trellis
Aha, nah I am glad you said because it can be a pain when it just expires.
Is everything you have the same?
Kali still up?
quaint seal
nope, just killed it
quaint seal
if nothing else, repetition has been shown to increase retention. restarting and doing it all over again may help me better remember what i'm learning ๐ </silver_lining>
deep trellis
That is very true
I am not sure how to increase the token time
Thats the only thing
Other than a crappy button that says "Login"
quaint seal
well, sometimes a sub-optimal solution is better than no solution
quaint seal
i am atm but no big deal
quaint seal
quaint seal
deep trellis
lol sorry
quaint seal
๐
deep trellis
Hopefully my solution fixed long-term Kali sessions now
I can give you a token manually if you want?
So you can replace it yourself
and get your sesh back
quaint seal
no no, it's fine. i'm terminating and will re-deploy
deep trellis
thanks!
quaint seal
thanks for the offer though
deep trellis
Wont happen again now hopefully
@summer cove sorry! Your LinuxCTF box will have also been disconnected - SSH into it manually.
summer cove
what?
deep trellis
Youre in the LinuxCTF room?
summer cove
yeah
deep trellis
Your session in the room might have been killed
summer cove
nah its good
deep trellis
awesome ๐
deep trellis
Fabbbbbbb
deep trellis
Yeah sure
summer cove
kinda stuck again
summer cove
Will it make a diffirence being on the VPN and connecting to the Kali machine
summer cove
yeah
deep trellis
So you can use the Kali machine from anywhere with an internet connection
summer cove
but last time I used it, it was laggy as hell
deep trellis
Oh really?
It shouldn't be hm
I can increase the resources of the box
Last time I used it, it was fine
summer cove
Yeah still is laggy
its like a old fashioned tv
like loads pixel by pixel
line by line
deep trellis
๐
deep trellis
What do you mena?
summer cove
well vmplayer
dosent work
I tried vbox and it gave me a driver error
never had issues with vmplayer on centos
but on ubuntu it has issues
supple sonnet
Skidy, any reason a Windows 10 OVA would fail converting? Failed around 38~%. Tried uploading twice at two different times, just in case it borked for some reason. Once Saturday night, once Sunday.
Created in VMWare, had no issues re-importing it.
Also, I'm willing to make a couple boxes for part of the educational portion, I've got a few ideas in mind ๐ you can DM me if you're interested.
quiet spindle
Any recommendation of best room for absolute beginners?
vapid dawn
Hey @supple sonnet did you follow the box requirements on tryhackme.com/upload ?
Our backend is very specific with what versions of Windows it accepts
And yeah sure @deep trellis and I will DM you :))
@quiet spindle DM me and I'll suggest you some rooms :))
supple sonnet
Hmm, I may be missing it, but I'm not seeing anything on exact version specifications:
quiet spindle
@vapid dawnok bro
supple sonnet
ty โค
note: you can toss me a PM whenever :D. it's about 3am here right now, but I'll respond whenever I get a chance.
supple sonnet
๐
Building in Virtualbox, ensuring disk partitioning scheme is set to mbr not gpt was the trick ๐
warm spear
Hey, is it possible yet to change the email on my tryhackme account? The email I'm using doesn't exist anymore (I no longer own the domain) ๐ฆ
rigid oxide
@deep trellis this would be a you question
devout relic
Yall im trying to subscribe but it wont do it for me
deep trellis
Hi @devout relic
devout relic
hey
deep trellis
What happens?
devout relic
so I put my card number in and hit submit
but nothing happens
I really want to try this
deep trellis
Can you check your browsers console for me please?
devout relic
what do u want to see
deep trellis
Are there any errors?
drifting zinc
ctrl + shift + i
devout relic
ohh the inspect lol
drifting zinc
yeah lol
deep trellis
Have that open and try to subscribe
devout relic
okie
devout relic
oh
deep trellis
Sorry about this too
deep trellis
Yeah thats fine ๐
drifting zinc
your card
deep trellis
So your card got declined, but it didn't show you an error?
drifting zinc
happens all the time with mine lol
deep trellis
Sorry bud x
drifting zinc
use visa card
devout relic
um ok
steel rapids
devout relic
okie dokie
left otter
Will tryhackme support debian 10 soon on uploading virtual machines?
rigid oxide
We will! Were a little bit limited currently by AWS uploads and subsequent kernel support but we plan on supporting it :)
left otter
Thank you for the answer DarkStar ๐
white wagon
hushed urchin
rip everything
last olive
^^
naive dust
Is the site dow/VERY slow or is it me
deep trellis
Yes, our event is killing our webserver
woeful stone
Can't seem to deploy the 'Ignite' room
deep trellis
@rigid oxide
woeful stone
Press deploy "Please wait" and then nothing
woeful stone
just clicked