#site-support | TryHackMe | Page 144

sleek otter Dec 30, 2019, 1:55 PM

#

I assumed ping was allowed on most boxes

#

You're right.. 🙂

#

Nmap worked, I thought I read somewhere that pinging the box was the way to see if it was deployed.

stone roost Dec 30, 2019, 1:56 PM

#

not sure, i usually don't make assumptions about a box being up or down simply based on ICMP

sleek otter Dec 30, 2019, 1:57 PM

#

Me neither I assumed tryhackme's boxes were all ICMP enabled 🙂

stone roost Dec 30, 2019, 1:58 PM

#

yeah, i don't know exactly how they work, i just go straight to nmap after i'm connected to the vpn

#

if you have powershell on your box you can try test-netconnection

warm spear Dec 30, 2019, 3:12 PM

#

No, there is no rule about having any indication that a box is "up" other than the tryhackme deployed room. You can block ping requests, nmap, or any port scanning if you want 🙂

#

The room Retro, for example, has a firewall which blocks ICMP packets 😄

stone roost Dec 30, 2019, 3:18 PM

#

@warm spear thank you for your confirmation

warm spear Dec 30, 2019, 3:19 PM

#

My general rule is: "deploy room, connect to vpn. go and make a nice cup of tea, or watch a youtube video. then straight to nmap"

stone roost Dec 30, 2019, 3:34 PM

#

+1, i do something similar

rigid oxide Dec 30, 2019, 3:54 PM

#

@foggy blaze We should have it, I'll confirm with Skidy. He's the main manager of that email

deep trellis Dec 30, 2019, 6:07 PM

#

If you are a subscriber, I might (by default) make all VM's boot with loads more resources.

#

So it boots up quicker

naive dust Dec 30, 2019, 6:15 PM

#

@mossy ermine I had the same struggle a couple weeks ago. Wqs able to get it working with VMWare. Made a meme: Friendship ended with virtual box. Now VMWare is my best friend.

hushed bear Dec 30, 2019, 7:00 PM

#

how do i delete my account?

#

is it even possible?

deep trellis Dec 30, 2019, 7:00 PM

#

@hushed bear Yeah we can - hello@tryhackme.com

#

Email there

hushed bear Dec 30, 2019, 7:00 PM

#

thanks

deep trellis Dec 30, 2019, 7:00 PM

#

Can I ask why you want your account deleted?

hushed bear Dec 30, 2019, 7:01 PM

#

i thought it was a simple ctf site now i see there are rooms and some weird things i dont think is for me

deep trellis Dec 30, 2019, 7:01 PM

#

A room is a virtual space where you complete tasks

#

So it is CTF's

#

And walkthroughs

#

You do it on the platform

#

If you want I can run you through it?

hushed bear Dec 30, 2019, 7:01 PM

#

no im fine

deep trellis Dec 30, 2019, 7:02 PM

#

okay, then email away

mossy ermine Dec 31, 2019, 2:23 AM

#

anyone familiar with olleydb?

#

if so how the heck do you look at hidden files... you have to open olleydb inside itself and it is in the .wine folder

#

ubuntu 18.04 by the default you have to press ctrl + h to view hidden files but that doesnt work in olley

mossy ermine Dec 31, 2019, 3:02 AM

#

or if the tool is not used anymore let me know and ill skip it

stone roost Jan 1, 2020, 4:03 PM

#

@mossy ermine haven't heard of it :c

barren trail Jan 2, 2020, 8:01 AM

#

Can anyone recommend a more suitable Kali setup. I'm currently running Kali on a Oracle VirtualBox VM but when using the likes of Hashcat, the VM can't see my GPU so it's taking a lot of hours to crack a hash. From what I've read you can't use the host GPU on an Oracle VirtualBox, can anyone recommend a better setup so that Kali can use the GPU. Many thanks in advance.

stone roost Jan 2, 2020, 8:09 AM

#

@barren trail vmware? Or hyperV?

barren trail Jan 2, 2020, 8:13 AM

#

Ok @stone roost I'll have a look at those options, thanks.

stone roost Jan 2, 2020, 8:14 AM

#

I personally use what you are using and the box from the subscription

#

As far as i can see you can use gpu inside virtual box

barren trail Jan 2, 2020, 8:17 AM

#

Yeah, generally the VirtualBox I'm using is fine and I'm not having many issues with it, but this basic hash I'm trying to crack with Hashcat has been running for over 9 hours.

stone roost Jan 2, 2020, 8:17 AM

#

I'll give it a go when i get home

barren trail Jan 2, 2020, 8:17 AM

#

Oh? When I tried to set it up it couldn't see it.

stone roost Jan 2, 2020, 8:17 AM

#

Yeah. However I'll be back in like 12 h

#

I was just reading on Google tbf

barren trail Jan 2, 2020, 8:18 AM

#

Thanks @stone roost , appreciate the help.

stone roost Jan 2, 2020, 8:18 AM

#

No problem

#

Let me know if you managed to sort it out

eager fulcrum Jan 2, 2020, 8:31 AM

#

@stone roost @barren trail You can't do GPU passthru unless you have a spare GPU. My advice would be grab the windows version of hashcat and run it from powershell.

This is what I personally do.

#

If you wanted to use the host's GPU in kali, it'd be a lot of hassle and work. You should be able to copy/paste hashes to and from the VM

#

And also possibly set up file sharing

barren trail Jan 2, 2020, 10:39 AM

#

Thanks for the help @eager fulcrum I'll look into that too

stone roost Jan 2, 2020, 12:07 PM

#

@eager fulcrum Oh, i didn't know that :c. Thank you for letting me know

warm spear Jan 2, 2020, 6:03 PM

#

Nice name

deep trellis Jan 2, 2020, 6:08 PM

#

@clever zealot

#

Did you request an email change?

halcyon sundial Jan 2, 2020, 6:15 PM

#

@warm spear pure coincidence bro I swear. My initial is B and I liked it

clever zealot Jan 2, 2020, 6:15 PM

#

@deep trellis sure did!

barren trail Jan 2, 2020, 9:22 PM

#

Thanks for the help earlier @stone roost and @eager fulcrum I managed to use Hashcat in Powershell and it reduced the time massively. Thanks!

stone roost Jan 2, 2020, 9:27 PM

#

no problem @barren trail glad you managed to get it in the end, mind sharing the guide with me too?

#

i got a spare gpu i could possibly use for this rather than my main one

eager fulcrum Jan 2, 2020, 9:45 PM

#

@stone roost it's literally just 'install hashcat on the host OS'

stone roost Jan 2, 2020, 9:54 PM

#

@eager fulcrum lol, really? thanks, haha!

eager fulcrum Jan 2, 2020, 10:10 PM

#

@stone roost Yeah, GPU pass through is painful often

stone roost Jan 2, 2020, 10:10 PM

#

@eager fulcrum should i look into a usb plug and play for a graphics card?

eager fulcrum Jan 2, 2020, 10:10 PM

#

No

#

Not very possible

stone roost Jan 2, 2020, 10:11 PM

#

i got 2 of them that just gather dust

#

like 2GB and 1GB ram

eager fulcrum Jan 2, 2020, 10:14 PM

#

Doesn't mean they're decent perf

#

But yeah. There's windows hashcat builds. Just install that on windows and use powershell

vagrant crypt Jan 4, 2020, 11:28 PM

#

I dunno if its the machine or something else going on, but Retro is running terribly.

eager fulcrum Jan 4, 2020, 11:29 PM

#

Slow? @vagrant crypt

vagrant crypt Jan 4, 2020, 11:29 PM

#

Unbearably slow, yes

#

I am (in theory) a few steps away from root, but the thing takes 20 minutes to do a single thing

#

jesus, now its bugged

eager fulcrum Jan 4, 2020, 11:35 PM

#

It's pretty slow yeah

#

Known thing with GUI machines

vagrant crypt Jan 4, 2020, 11:35 PM

#

yea so im not sure if im doing the exploit incorrectly or if something just isnt loading correctly

eager fulcrum Jan 4, 2020, 11:36 PM

#

There's something you need to fix, and it's an intended issue. At least fairly sure.

vagrant crypt Jan 4, 2020, 11:36 PM

#

i think im doing it

#

yea as far as im aware, im doing it right, but it isnt working. or its being slow so things arent processing correctly. I'm not sure

#

yea no idea. screw it i guess

deep trellis Jan 5, 2020, 9:34 AM

#

I will give retro more resources

deep trellis Jan 5, 2020, 9:57 AM

#

I gave Retro loads of resources - should boot up quickly and not lag

vagrant crypt Jan 5, 2020, 6:36 PM

#

thanks @deep trellis ill check it out later today

uncut hound Jan 5, 2020, 10:46 PM

#

Any way I can change the capitalisation of my name on the platform?

deep trellis Jan 5, 2020, 10:48 PM

#

Username?

#

Nah sorry

#

Username changes coming 2020

uncut hound Jan 5, 2020, 10:50 PM

#

Yeah only the capital to lower case

#

but it's all good 🙂

last olive Jan 6, 2020, 1:57 PM

#

Anyone who have made any learning path, I'd like to ask something.

novel shard Jan 6, 2020, 2:07 PM

#

by made you mean completed it 100%?

rigid oxide Jan 6, 2020, 2:15 PM

#

Do you mean like created a path? The primer path was built by me

last olive Jan 6, 2020, 2:17 PM

#

Created one.

#

Mind if I DM you? @rigid oxide

rigid oxide Jan 6, 2020, 2:18 PM

#

Go for it, I'm at work right now so it might be a bit before I can reply

#

Lemme make sure I have you added on discord so you can DM me

last olive Jan 6, 2020, 2:18 PM

#

No problem just want to know the workflow won't be much long.

jagged crown Jan 6, 2020, 3:51 PM

#

Hello everyone I m having a problem with ssh connection for day 20 in cyber advent as I ssh as SAM user so after one minut I m not able to do anything ... have to restart openvpn and reconnect and after one minute the same...

leaden token Jan 7, 2020, 3:59 PM

#

@jagged crown I think i already answered you a while ago. Did you specify the port the SSH is running on?

novel shard Jan 7, 2020, 4:29 PM

#

@rigid oxide I have a question regarding the monthly leaderboard, but I guess it's better to talk about this in DMs if that's okay

ornate comet Jan 7, 2020, 9:10 PM

#

Is PayPal payments down for maintenance?

deep trellis Jan 7, 2020, 11:19 PM

#

No why?

#

@ornate comet

eager fulcrum Jan 7, 2020, 11:20 PM

#

Definitely missing on the gift page

📎 unknown.png

deep trellis Jan 7, 2020, 11:20 PM

#

On that purchase page, you can only pay with debit/credit

#

If you want a subscription for yourself

#

You can pay on your profile page

eager fulcrum Jan 7, 2020, 11:21 PM

#

I can't check that then

deep trellis Jan 7, 2020, 11:28 PM

#

I think it is working

#

Just tested it hm

ornate comet Jan 7, 2020, 11:42 PM

#

Ok so trying to pay, I get this.

📎 Screenshot_20200107-184158_Firefox.jpg

ornate comet Jan 8, 2020, 12:01 AM

#

📎 Screenshot_20200107-190139_Firefox.jpg

#

That's the PayPal I'm clicking, and it's on both mobile and desktop

lime path Jan 8, 2020, 6:17 AM

#

I'm doing a redhat linux enterprise course and, I don't understand this completely like, I feel as if it's an error https://gyazo.com/1c2f6917a1c1f6840bfd458d0ed272c5

Gyazo

last olive Jan 8, 2020, 10:05 AM

#

What you mean? @lime path

lime path Jan 8, 2020, 10:08 AM

#

all good now

last olive Jan 8, 2020, 10:11 AM

#

Curious enough, what was it? @lime path

lime path Jan 8, 2020, 10:12 AM

#

the file extensions where displaying incorrectly. I'm doing a redhat enterprise linux course.

#

displaying as a music file instead of what it should actually be showing.

last olive Jan 8, 2020, 10:23 AM

#

Oh

ornate comet Jan 8, 2020, 1:00 PM

#

So, playing around with it, it appears to be somehow related to the student discount being applied. Normal email would send me back to the paypal page perfectly fine.

stiff coral Jan 8, 2020, 1:46 PM

#

Hi guys, I have an account but not under my student email, how is it possible for me to get the student discount as ready to start my subscription again

#

I just paid for it again, if you could hit me up before i finish work ill be able to tell my account and change it for next month please

uncut hound Jan 8, 2020, 1:54 PM

#

Email hello@tryhackme.com with your student email and they’ll be able to help you out

stiff coral Jan 8, 2020, 1:54 PM

#

I shall do that now thank you

deep trellis Jan 8, 2020, 1:54 PM

#

@ornate comet This is interesting, I will investigate, thanks for letting me know!

ornate comet Jan 8, 2020, 1:55 PM

#

no worries 🙂 glad I could help @deep trellis

deep trellis Jan 8, 2020, 2:05 PM

#

Really weird, just tested it out and it seems to work fine

#

Ill keep an eye on the logs incase it happens again so I can better identify the error

stiff coral Jan 8, 2020, 2:18 PM

#

Trying to open the kali machine getting an message

#

REMOTE TRYHACKME

#

With login and password

deep trellis Jan 8, 2020, 2:27 PM

#

Can you try terminating it and re-deploying it?

stiff coral Jan 8, 2020, 2:28 PM

#

I have lol

#

Now im at a blue screen with Xorg on it

#

but kaliroot is not the password

deep trellis Jan 8, 2020, 2:28 PM

#

can you print screen please?

stiff coral Jan 8, 2020, 2:29 PM

#

Im at work an the print screen not working

deep trellis Jan 8, 2020, 2:30 PM

#

Login with kali and root

stiff coral Jan 8, 2020, 2:30 PM

#

the middle one

deep trellis Jan 8, 2020, 2:30 PM

#

Or the RDP details shown in the Kali room

#

@ornate comet helped test and diagnose the PayPal bug - its now fixed.

ornate comet Jan 8, 2020, 2:37 PM

#

thank you very much for the support!

deep trellis Jan 8, 2020, 2:37 PM

#

@stiff coral Have you managed to fix the in-browser machine problem?

stiff coral Jan 8, 2020, 2:52 PM

#

Been approved to use my own kali XD

novel shard Jan 8, 2020, 2:54 PM

#

@deep trellis Can I DM you? I have a question regarding a reward

deep trellis Jan 8, 2020, 2:54 PM

#

Yeah sure

stiff coral Jan 8, 2020, 4:02 PM

#

One last thing!!!! i think most of the problems because im at work

#

I used the heartbleed vm and it works online, but trying to use a SQL vm and it has the 10.10 network which is not online right? and my vpn is not working (maybe because of where i am)

#

Is there anyway to make the machines online as some seems to be online anyways 😄

novel shard Jan 8, 2020, 4:15 PM

#

I think the only option for your case would be the Kali VM provided by THM

#

but you have to subscribe for that

#

and you can access it via browser

hoary raft Jan 10, 2020, 1:30 PM

#

Hey guys, I'm new to TryHackMe and I am unsure about the policies of writing blog posts about premium challenges. Is this allowed?

steel rapids Jan 10, 2020, 1:31 PM

#

Go for it

#

General rule of thumb is to wait a few weeks from release date

hoary raft Jan 10, 2020, 1:33 PM

#

Ahh okay, cheers for the information

naive dust Jan 10, 2020, 2:24 PM

#

@stiff coral what's up?

stiff coral Jan 10, 2020, 2:24 PM

#

Done!

#

SUDO lol fml

naive dust Jan 10, 2020, 2:24 PM

#

lol

stiff coral Jan 10, 2020, 2:24 PM

#

thank you mate

naive dust Jan 10, 2020, 2:24 PM

#

Np

fresh stone Jan 12, 2020, 11:43 AM

#

hi ! cannot connect to rdp host on retro room
@everyone

eager fulcrum Jan 12, 2020, 11:44 AM

#

Stop.

#

This is from a mod, stop spamming every channel with that message. It goes in #room-help, without the everyone tag @fresh stone

languid storm Jan 12, 2020, 5:44 PM

#

Anyone have experience utilizing airgeddon with the Alfa awus036ach?
I'm running Parrot (Security) and have been bashing my head against google trying to get it to run happily. Both airmon-ng start on the adapter and setting monitor mode inside airgeddon results in the process hanging and after a little while the entire OS freezes up

#

Side note: I can put it in monitor mode manually via ifconfig & iwconfig

eager fulcrum Jan 12, 2020, 5:52 PM

#

Maybe check kill first then monitor?

languid storm Jan 12, 2020, 5:53 PM

#

Have tried that as well, all that runs is wpa_supplicant and NetworkManager. Killing both has same results as leaving them running

#

Killing one at a time and testing also has same results

#

Checked if it was due to it disliking multiple wlan adapters so I took all but the Alfa down, still hanging

uncut hound Jan 12, 2020, 5:55 PM

#

I think I’ve seen this before due to parrot. I’ve heard it sometimes has issues

languid storm Jan 12, 2020, 5:55 PM

#

Sad day, here's to hoping someone found a resolution and sees this then 😅

uncut hound Jan 12, 2020, 5:58 PM

#

Maybe, I’d say maybe attempt another os just to check if it resolves or not.m

languid storm Jan 12, 2020, 5:59 PM

#

Yeah, I'll spin up my kali box and give it a try. Was just hoping I could get it working on Parrot since I like it a bit more

uncut hound Jan 12, 2020, 6:02 PM

#

That’s fair enough. It is a nice os

naive dust Jan 12, 2020, 6:06 PM

#

Someone knows if there is a restriction for language to write the writeups ?

uncut hound Jan 12, 2020, 6:23 PM

#

From what I gather it can be any language just ensure it is specified in title when submitting

#

English is obviously preferred but other languages can’t hurt

naive dust Jan 12, 2020, 7:26 PM

#

Oky doky

snow aurora Jan 12, 2020, 10:27 PM

#

hello

#

anyone here ? that can help me with something ?

eager fulcrum Jan 12, 2020, 10:28 PM

#

You gotta ask the question otherwise we don't know if we can help or not.

snow aurora Jan 12, 2020, 10:32 PM

#

haha sorry yea my bad. So basically when I deploy a box on the website and run openvpn, my connection is pretty bad. when I run nmap on a box I usually get this reply tarting Nmap 7.80 ( https://nmap.org ) at 2020-01-12 22:30 GMT
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.01 seconds

Nmap: the Network Mapper - Free Security Scanner

Nmap Free Security Scanner, Port Scanner, & Network Exploration Tool. Download open source software for Linux, Windows, UNIX, FreeBSD, etc.

steel rapids Jan 12, 2020, 10:32 PM

#

Which box

#

Some boxes block pings

snow aurora Jan 12, 2020, 10:32 PM

#

in this instance, Blue

steel rapids Jan 12, 2020, 10:32 PM

#

How long did you wait between deploying and nmapping?

snow aurora Jan 12, 2020, 10:34 PM

#

like a minute or two, but even now for example. It has been deployed for longer but no matter how long I leave it it always does that

uncut hound Jan 12, 2020, 10:36 PM

#

May I recommend trying it with -Pn

#

Also what commands are you putting into the nmap command?

snow aurora Jan 12, 2020, 10:45 PM

#

#sudo -A -p- -T4 -Pn -target

#

takes ages

uncut hound Jan 12, 2020, 10:46 PM

#

I’d say try without -T4

steel rapids Jan 12, 2020, 10:46 PM

#

drop -p- as well

#

at least until you know it's working

uncut hound Jan 12, 2020, 10:46 PM

#

Ngl -A is even overkill on blue

steel rapids Jan 12, 2020, 10:46 PM

#

-v might help as well

uncut hound Jan 12, 2020, 10:46 PM

#

I’d say do a bare bones scan just nmap ip

snow aurora Jan 12, 2020, 10:49 PM

#

yea I mean of course at first I tried a normal scan. same result. All scans give me the same result really. I've done this box before on HTB, its just on Tryhackme I have to do this one because of the Path. I

#

whatever flags I set its always the same result

steel rapids Jan 12, 2020, 10:50 PM

#

Different box, same name

#

THM Blue =/= HTB Blue

snow aurora Jan 12, 2020, 10:52 PM

#

I know but the concept and exploits are identical

#

both based on eternalblue

#

I'll try a different box and see what it says, maybe its just an issue with that box

uncut hound Jan 12, 2020, 11:37 PM

#

Lol I don’t think there’s a single box on thm that’s the same as htb

rigid oxide Jan 12, 2020, 11:40 PM

#

Blue unfortunately has the same name and exploit as Blue on HTB. Ironically, it was developed when I had no knowledge of that box and it was just a situational irony that this happened lol

#

Otherwise there are no boxes that are the same between the two platforms, we're really picky about that since we really respect and love HTB

snow aurora Jan 12, 2020, 11:41 PM

#

oh okay

rigid oxide Jan 12, 2020, 11:41 PM

#

I say that having done some box dev for HTB as well lol

eager fulcrum Jan 12, 2020, 11:47 PM

#

@uncut hound there is one that was on htb before. Node I think

rigid oxide Jan 12, 2020, 11:50 PM

#

Yeah you're correct now that I think of it

#

That one was submitted here from it's creator following the end of it's exclusivity period on HTB

uncut hound Jan 12, 2020, 11:57 PM

#

Oh I see

#

If that’s the case get felamos to release chaos on here!

#

Still to this day one of my favourite boxes on htb

rigid oxide Jan 12, 2020, 11:59 PM

#

I can certainly ask him to, I'd love too see that on here with a proper walkthrough variant of the machine similar to Ice

uncut hound Jan 12, 2020, 11:59 PM

#

Please do I love that machine so much

rigid oxide Jan 13, 2020, 12:00 AM

#

@drifting zinc whatcha think?

drifting zinc Jan 13, 2020, 12:51 AM

#

sure, its retired on HTB

rigid oxide Jan 13, 2020, 2:55 AM

#

Heck yeah

uncut hound Jan 13, 2020, 3:02 AM

#

Ok so I'm now so hyped

#

can't wait to redo it

novel shard Jan 13, 2020, 4:25 PM

#

Can somebody explain to me how the point system works? I find it very confusing

young bison Jan 14, 2020, 12:57 AM

#

Hello, my openvpn keeps tossing me this error after a few minutes: [server] Inactivity timeout (--ping-restart), restarting. Not sure what to do

#

Main issue is it kicks my connections every few minutes when it restarts and reinitializes a connection

eager fulcrum Jan 14, 2020, 1:09 AM

#

Check you're not logged in elsewhere, restart the system and try again @young bison

young bison Jan 14, 2020, 1:09 AM

#

Will do!

rigid oxide Jan 14, 2020, 1:11 AM

#

@eager fulcrum good call on that!

eager fulcrum Jan 14, 2020, 1:11 AM

#

I had that issue

#

The thing is, all the issues happen to me so I have fixes for so many of them

young bison Jan 14, 2020, 1:12 AM

#

LOL it's what makes you a good mod xD

rigid oxide Jan 14, 2020, 1:12 AM

#

^^

young bison Jan 14, 2020, 1:18 AM

#

Worked like a charm. Thank you all! Really been enjoying the site

eager fulcrum Jan 14, 2020, 1:25 AM

#

❤️

spare blaze Jan 15, 2020, 10:09 AM

#

First time using the kali room, everytime I login and get prompted with the Initial Setup panel, arriving at the end, the machine doesn't answer anymore even after several minutes, is it normal? I chose English then French keyboard.

#

Both happening with the web and my RDP client.

deep trellis Jan 15, 2020, 10:29 AM

#

@spare blaze what do you mean?

#

So it just freezes after 2 minutes?

spare blaze Jan 15, 2020, 10:31 AM

#

Yep

deep trellis Jan 15, 2020, 10:32 AM

#

I'll look into this in the next 30 minutes

#

Thanks for reporting:)

spare blaze Jan 15, 2020, 10:36 AM

#

No problem, keep me updated!

deep trellis Jan 15, 2020, 11:18 AM

#

@spare blaze

#

Its really weird, I am having no problems

#

Can you terminate and re-deploy

#

Then can you DM me the machines IP

spare blaze Jan 15, 2020, 11:19 AM

#

Will do!

oak basalt Jan 15, 2020, 2:57 PM

#

@spare blaze @deep trellis this exact thing is happening to me too, also first time using the kali vm and I've tried terminating and re-deploying numerous times

eager fulcrum Jan 15, 2020, 3:01 PM

#

Interesting

deep trellis Jan 15, 2020, 6:35 PM

#

@oak basalt @spare blaze Can you both check again please?

spare blaze Jan 15, 2020, 6:45 PM

#

Will do

#

I do still get the freeze :(

deep trellis Jan 15, 2020, 6:57 PM

#

Is it still up?

#

When it freezes, can you Dm the details

#

So I can take a look

naive dust Jan 17, 2020, 6:31 PM

#

how i get a role ?

eager fulcrum Jan 17, 2020, 6:37 PM

#

@naive dust check your DMs from the bot

#

It's the !verify command

#

With your discord token from your TM profile, sent as a DM to the bot.

naive dust Jan 17, 2020, 6:55 PM

#

ok checking ...thanks @eager fulcrum

deep trellis Jan 17, 2020, 10:29 PM

#

Yeah:)

last olive Jan 18, 2020, 8:22 AM

#

While creating a room, I have like a lot of written material and I'm having issues in formatting them like I'm not...like used to that stuff, anyone can give me a hand on this? Or does THM have a feature of making a room with collaboration?

#

I can create the materials and they can add it up on my behalf😅

deep trellis Jan 18, 2020, 10:39 AM

#

We don't support collaborative room creations 😦

#

What do you mean issues formatting? Can I have an example?

last olive Jan 18, 2020, 10:51 AM

#

Like I want to add full walkthrough of how to exploit the binary itself and I want to add the walkthrough for both 32 bit as well 64 bit

#

So, the full walkthrough requires the attachment of disassembly and other stuff, that's why I'm having a problem.

#

So, I have other option which is...I can add a link to my YT video on how I am doing it and link to GitHub repo that has notes?

#

Please let me know people, since I'm doing it for you guys so it solely depends on how you want it to be.

deep trellis Jan 18, 2020, 10:55 AM

#

Having a YouTube video would be awesome

#

That would make your life easier too 🙂

#

Saves you writing so much material

last olive Jan 18, 2020, 11:57 AM

#

True that

#

Then, YouTube video with GitHub notes attachment

azure kernel Jan 19, 2020, 11:13 PM

#

How can I add my cert roles?

uncut hound Jan 19, 2020, 11:13 PM

#

I'd say contact one of the admins @azure kernel

upper merlin Jan 20, 2020, 11:07 PM

#

hello

vapid dawn Jan 20, 2020, 11:33 PM

#

you can always just paste your notes onto the room @last olive ?

last olive Jan 21, 2020, 2:14 AM

#

@vapid dawn Working on it.

leaden token Jan 21, 2020, 11:45 AM

#

https://github.com/21y4d/nmapAutomator

Did anyone use this tool? How is it?

GitHub

21y4d/nmapAutomator

A script that you can run in the background! Contribute to 21y4d/nmapAutomator development by creating an account on GitHub.

steel rapids Jan 21, 2020, 11:48 AM

#

Sounds like https://github.com/Tib3rius/AutoRecon to me

GitHub

Tib3rius/AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services. - Tib3rius/AutoRecon

naive dust Jan 21, 2020, 9:45 PM

#

It’s supposed there will be a room delivery on Thursday ?

rigid oxide Jan 21, 2020, 10:25 PM

#

*Friday 😄

naive dust Jan 21, 2020, 10:55 PM

#


Every Friday at 8pm (GMT), we will release a challenge room.
Every Tuesday at 8pm (GMT), we will release a walkthrough room. ```

naive dust Jan 21, 2020, 11:13 PM

#

Both rooms will be delivered on Friday ?

vapid dawn Jan 21, 2020, 11:32 PM

#

yeah - for now we're planning to release rooms every Friday

#

This is confirmed

#

Through the next few months, we'll be releasing rooms on Tuesday as well :))

naive dust Jan 21, 2020, 11:35 PM

#

Thanks @vapid dawn

naive dust Jan 22, 2020, 1:19 PM

#

THM has twice the room releases because THM is twice as good

daring vessel Jan 23, 2020, 10:44 AM

#

Hello guys. I don't see any networks in linux, but my wifi adapter is listed in lsusb. Im in a Virtual Box. Any advice?

novel shard Jan 23, 2020, 2:32 PM

#

If u want to use the bulit-in wireless adapter from your laptop, I'm afraid that's not possible

#

you have to get an external wireless adapter and connect it through USB

#

and attach that usb device to your VM

leaden token Jan 23, 2020, 4:24 PM

#

Did you check that VM has a permission to use your adapter?

eager fulcrum Jan 23, 2020, 5:08 PM

#

@novel shard @leaden token the usb wifi adapter is passed through with usb passthru, just isn't picking up any networks

#

I was helping with this earlier

leaden token Jan 23, 2020, 5:09 PM

#

ohh i see

#

I've never had such a problem 🤔

eager fulcrum Jan 23, 2020, 5:14 PM

#

Yeah neither

mossy ermine Jan 24, 2020, 7:10 PM

#

your network time server is off.

#

📎 timestamp.png

#

not sure what timezone you are trying for

deep trellis Jan 24, 2020, 7:11 PM

#

Weird, it uses the timezone your PC is in

#

What time zone are you in?

mossy ermine Jan 24, 2020, 7:11 PM

#

central

#

texas

deep trellis Jan 24, 2020, 7:11 PM

#

Weird, Ill take a look when I can

mossy ermine Jan 24, 2020, 7:11 PM

#

thnks

languid storm Jan 24, 2020, 7:28 PM

#

Oh it does? My time zone has never matched the boxes lol

#

Well, to my knowledge

mossy ermine Jan 24, 2020, 7:30 PM

#

what does the time zone do when your not connected through vpn?

#

i just realize i wasnt connected to the network

languid storm Jan 24, 2020, 7:30 PM

#

Oh I suppose I usually don’t turn my vpn on until after deploying

eager fulcrum Jan 24, 2020, 7:52 PM

#

The timezone is handled clientside

amber radish Jan 24, 2020, 10:13 PM

#

i need help getting RDP to work i have no idea where to start in the seance of what program i need to install to connect

eager fulcrum Jan 24, 2020, 10:15 PM

#

Something like remimma from Linux

amber radish Jan 24, 2020, 10:17 PM

#

so it cant be a windows box app to get in?

#

wouldnt a VNC program allow me to RDP in? on windows because all the RDP apps i find are like ones where u need to install them on both computers lol

#

nvm i found it!

tardy rune Jan 25, 2020, 12:26 AM

#

I am wanting to get a subscription and am wondering how to get the student discount?

eager fulcrum Jan 25, 2020, 12:31 AM

#

@tardy rune if you didn't sign up with a UK academic email then it's not automatic.

#

I think you might be able to talk to Skidy about it

deep trellis Jan 25, 2020, 1:05 AM

#

@tardy rune hiya, have you signed up with your student email as James said??

tardy rune Jan 25, 2020, 2:31 AM

#

@deep trellis I did not, I used my gmail account on signup, I am a student in the US

steel rapids Jan 25, 2020, 9:59 AM

#

@tardy rune send an email to hello@tryhackme.com with your thm name and student email (if you have one)

tardy rune Jan 25, 2020, 9:59 AM

#

@steel rapids Thank you

last olive Jan 25, 2020, 2:55 PM

#

We can have multiple deploy for multiple task for a room, right?

uncut hound Jan 25, 2020, 3:49 PM

#

Yeah @last olive

deep trellis Jan 25, 2020, 3:49 PM

#

One machine can be deployed per room

uncut hound Jan 25, 2020, 3:49 PM

#

O

#

Really?

deep trellis Jan 25, 2020, 3:49 PM

#

But you can attach multiple VMs in a room

#

Yeah, if you deploy whilst a machine is running in the room, it will say "Only one instance allowed"

uncut hound Jan 25, 2020, 3:50 PM

#

Ah ok that makes sense

last olive Jan 25, 2020, 3:57 PM

#

One instance make sense!

#

So, yep multiple binaries on different ports.

naive dust Jan 25, 2020, 5:48 PM

#

hi hi -- how can i see which machines are currently running for a room?

#

slash which machines i have running, in general

#

^ nvm. it didn't show up on one page load, for some reason, but reloading fixed it...

sterile crane Jan 25, 2020, 5:51 PM

#

Is Ninja Skills box not working? I haven't been able to deploy for a couple day now

deep trellis Jan 25, 2020, 5:52 PM

#

What happens when you try to deploy?

#

It should deploy

#

@naive dust The only way to know is if you're in the room and deployed

naive dust Jan 25, 2020, 6:06 PM

#

skidy ily

deep trellis Jan 25, 2020, 6:06 PM

#

No dashboard that says "you have instances deployed in ..."

#

"I love you moo"

twilit flower Jan 25, 2020, 6:06 PM

#

m00

naive dust Jan 25, 2020, 6:06 PM

#

the bull is here

deep trellis Jan 25, 2020, 6:06 PM

#

upvote

sterile crane Jan 25, 2020, 6:08 PM

#

@deep trellis it kept saying an error, but I tried to reconnect about 10 times and it finally worked lol

deep trellis Jan 25, 2020, 6:09 PM

#

What said error?

#

The inbrowser console?

#

Did you try connect via ssh?

#

Also next time can you screenshot it?

eager fulcrum Jan 25, 2020, 9:30 PM

#

Anyone know if I can disable kali 2019.4 trying to reopen the programs after a reboot?

supple sonnet Jan 25, 2020, 10:41 PM

#

I don't think that's just a Kali 2019.4 thing

#

2019.3 did it for me as well

eager fulcrum Jan 25, 2020, 10:42 PM

#

I feel like I found a way to turn it off in 2019.3

heavy vine Jan 26, 2020, 2:30 PM

#

I'm trying to do the subscription but it says my card is declined even though I have plenty on it =/ any idea why that is? I verified my account already and selected the right country

eager fulcrum Jan 26, 2020, 2:31 PM

#

Correct billing details?

heavy vine Jan 26, 2020, 2:32 PM

#

It only allows me to put in card number/exp/CVC and I have checked that multiple times. Is there a place where I put in my address or?

leaden token Jan 26, 2020, 2:41 PM

#

I don’t think you need address for that

#

Card number/Expire date/CVC should be enough

heavy vine Jan 26, 2020, 2:42 PM

#

Yeah it's weird because I've double and triple checked but it's still declining. I emailed tryhackme since I need to get the student thing sorted out, so hopefully I can get some insight on why this is happening. I appreciate everyone's help!

steel rapids Jan 26, 2020, 2:42 PM

#

It might sound stupid but maybe your bank is rejecting it?

leaden token Jan 26, 2020, 2:43 PM

#

Got the same thought

heavy vine Jan 26, 2020, 2:43 PM

#

That actually doesn't sound stupid, I'll see if that is the case

barren birch Jan 26, 2020, 2:43 PM

#

Definitely worth checking with your bank to see if the request has actually been received.

heavy vine Jan 26, 2020, 2:43 PM

#

Shame I used to work in retail and didn't even think of that lmao

#

Thank you ❤️

deep trellis Jan 26, 2020, 3:11 PM

#

@heavy vine Hiya

#

Are you still having issues?

#

Ah, I think I can see why you're having issues - DM me or email hello@tryhackme.com (if you havn't already)

languid storm Jan 26, 2020, 5:50 PM

#

I'm assuming updating our deployed kali machine won't persist between deployments? Unless they're setup to be per subbed user

languid storm Jan 26, 2020, 6:11 PM

#

@deep trellis Trying to verify my student email (just because the banner keeps yelling at me) but not getting the email, in the Inbox or junk. Am I able to send an email from my student email to verify manually somehow or any other option?

deep trellis Jan 26, 2020, 6:31 PM

#

@vapid dawn Some emails are still not going through? Had this on other occations too.

vapid dawn Jan 26, 2020, 6:32 PM

#

will take a look at this in a few :))

deep trellis Jan 26, 2020, 6:32 PM

#

@languid storm I think there is a problem with how we're sending emails, some ppl get them, others don't. Thanks for reporting 🙂

languid storm Jan 26, 2020, 6:33 PM

#

👌

vapid dawn Jan 26, 2020, 7:18 PM

#

@languid storm when exactly did you trigger your email?

languid storm Jan 26, 2020, 7:38 PM

#

Unsure on exact times but about 14.5 hours ago then again about 1.5 hours ago

crisp hound Jan 26, 2020, 11:44 PM

#

is it possible to change your username?

deep trellis Jan 27, 2020, 12:29 AM

#

@crisp hound not at this moment in time, sorry

naive dust Jan 27, 2020, 2:24 AM

#

Wow thats lame

hazy shell Jan 27, 2020, 9:32 AM

#

hai

steel rapids Jan 27, 2020, 12:08 PM

#

@hazy shell 👋

hazy shell Jan 27, 2020, 12:08 PM

#

😄

deep trellis Jan 27, 2020, 12:12 PM

#

Username changes coming this year tho

leaden token Jan 27, 2020, 12:19 PM

#

What happens when I create a room in the 'Manage rooms' tab? Is it going to be public?

deep trellis Jan 27, 2020, 1:58 PM

#

No, by default it's private

#

Then you choose to make it public and it goes into review (reviewed by a member of staff)

#

You making a room :O

leaden token Jan 27, 2020, 2:09 PM

#

Ye

#

Okay, thanks for info

#

The room isn't a big deal tbh, just some beginner level guide

deep trellis Jan 27, 2020, 2:24 PM

#

That's great and we love to see that:)

bold folio Jan 27, 2020, 10:14 PM

#

hey I think I'm having issues with openvpn. Just walking through Vulniversity room nmap and gobuster keep dying... a lot. I've noticed this issue with HTB attempts as well.

Everything is up to date as far as I know. Maybe there is something I need to adjust I'm not aware of?

naive dust Jan 27, 2020, 10:31 PM

#

It can take up to 5 minutes for the room to be fully set up

bold folio Jan 27, 2020, 10:39 PM

#

right, this would be happening after a while. Should I just reconnect open vpn/ reset the box?

#

by the way... this is a lot more fun than HTB for me right now... My kid got into it Sunday as well, had to send him away lol

#

well.. to his room with his laptop 👍

deep trellis Jan 27, 2020, 10:45 PM

#

@bold folio Thats amazing

#

Thanks for the kind words too

#

Yeah if you could wait a bit before attempting to connect

#

When you deploy a machine it takes a minute to boot/configure.

mossy ermine Jan 28, 2020, 12:36 AM

#

@deep trellis @rigid oxide is there a possibility of changing my subscription date to the 4 or 5th of the month each month?

rigid oxide Jan 28, 2020, 12:37 AM

#

Yeah we can likely do that, Skidy can probably help you once he's back in the world of the living haha

mossy ermine Jan 28, 2020, 12:38 AM

#

haha thnks @me i set my phone to always notify me if you need anything from me

civic ruin Jan 28, 2020, 2:10 AM

#

I am also having issues with Openvpn but with a slightly different approach.
It keeps dropping even though the VPN is still connected.
Does anyone have a solution for this.
Even pinging the box is impossible until connection is established again.
Error = ‘event wait: Interrupted system call’

OpenVPN version 2.4.7.1

Any solution will be really helpful as it is slowing me down.

rigid oxide Jan 28, 2020, 4:39 AM

#

Try rebooting Kali and make sure you only have one vpn connection to the site open at once

#

Also make sure it's in it's own terminal tab of course

last olive Jan 28, 2020, 5:03 AM

#

Can I add multiple docker service to a room?

deep trellis Jan 28, 2020, 10:48 AM

#

@mossy ermine email us and we can change the date for you

#

@last olive If you create different docker containers, you can put it on VM 🙂

#

Or make several VM's with a few docker containers on them

last olive Jan 28, 2020, 11:24 AM

#

I'll make Vm, better than hefty work

crude yew Jan 28, 2020, 2:45 PM

#

hi everybody. i'm trying to use kali room, but it keeps freezing on the initial setup.

deep trellis Jan 28, 2020, 2:45 PM

#

What language are you selecting?

#

I think there is a reported problem with that

#

@vapid dawn is setting up a new Kali machine

crude yew Jan 28, 2020, 2:49 PM

#

Italian, but that's ok. i'll try with the default

unique rover Jan 29, 2020, 7:05 AM

#

Hello. I have been trying to root Dailybungle , which I got credentials via Sqli cant login. is it supposed behaviour? or is something wrong.

eager fulcrum Jan 29, 2020, 9:14 AM

#

@unique rover did you do any password cracking?

unique rover Jan 29, 2020, 9:27 AM

#

@ yes, sure I did, got the cleartext password and verified it in the question. but same cred doesnt log me in in joomla admin login,

eager fulcrum Jan 29, 2020, 9:28 AM

#

This is a #room-help. I'd help but I have somewhere to be in 10mins

unique rover Jan 29, 2020, 9:54 AM

#

@eager fulcrum Thank you!

#

@eager fulcrum I've got it solved. I had to redeploy the vm. Maybe sqlmap messed something up. Thank you alot.

eager fulcrum Jan 29, 2020, 10:05 AM

#

Weird, ok

#

Good to hear though

unique rover Jan 29, 2020, 10:05 AM

#

Yes, appreciate.

autumn matrix Jan 29, 2020, 9:22 PM

#

Hi, may not be the correct place to ask, but I was trying to sign up for a month to try out the learning paths, but my card isn't working for the month by month trial, and paypal is limited to 3/6/12 months? I wanted to see if this is right for me, but don't want to pay for 3 months if it's not

eager fulcrum Jan 29, 2020, 9:51 PM

#

@deep trellis

deep trellis Jan 29, 2020, 9:52 PM

#

Sorry due to the PayPal fees, we only have 3/6 and 12 months available via PayPal

autumn matrix Jan 29, 2020, 9:55 PM

#

Copy, thank you

hazy shell Jan 30, 2020, 5:37 PM

#

hiya

#

I'm having really bad connectivity today

harsh thunder Jan 30, 2020, 6:03 PM

#

Hey Guys!

#

https://tryhackme.com/room/attacktivedirectory

TryHackMe | attacktivedirectory

TryHackMe is a platform for learning and teaching cyber security.

#

Deployment is failing

#

Hitting deploy, and nothing is happening. Tried refreshing after a while.. Was due to go live in 7 minutes!

#

any issues deploying?

#

@deep trellis any advice buddy?

#

https://tryhackme.com/room/attacktivedirectory is at fault

TryHackMe | attacktivedirectory

TryHackMe is a platform for learning and teaching cyber security.

eager fulcrum Jan 30, 2020, 7:06 PM

#

Oh, people have been having issues with that lately @harsh thunder

languid storm Jan 30, 2020, 7:14 PM

#

Just dropping another message @vapid dawn that attempting to verify email still isn't getting to my Inbox or Junk. I'm happy to send an email from my edu address to verify myself

vapid dawn Jan 30, 2020, 7:14 PM

#

ah okay weird

#

have you had another other problems with emails(e.g. when you sign up/reset your password)

languid storm Jan 30, 2020, 7:15 PM

#

Originally signed up with a non-edu email, then later updated it to the edu email. Hadn't had any issues whatsoever with my .edu email personally with getting emails

#

I suppose to my knowledge, nobody has told me they sent me something that I didn't get though 🙂

harsh thunder Jan 30, 2020, 7:21 PM

#

@eager fulcrum so It's not my fault, good to hear!

hazy shell Jan 31, 2020, 8:31 AM

#

i'm guessing Attackive Directory is fubar

#

📎 unknown.png

#

https://tryhackme.com/room/attacktivedirectory

TryHackMe | attacktivedirectory

TryHackMe is a platform for learning and teaching cyber security.

#

the deploy feature doesn't seem to work

vapid dawn Jan 31, 2020, 9:05 AM

#

^ there's a known issue with the room

#

I think the creator is currently trying to fix it

deep trellis Jan 31, 2020, 12:41 PM

#

I made the room private until its fixed 🙂

hazy shell Jan 31, 2020, 1:52 PM

#

thanks dude

supple sonnet Jan 31, 2020, 4:34 PM

#

Will work on the fix for it today after I'm done with work ❤️ thanks for your patience

plucky heron Feb 1, 2020, 4:30 PM

#

just wanted to say that picking the UK keyboard layout during the kali setup seems to freeze the box

deep trellis Feb 1, 2020, 4:33 PM

#

Yeah, just been reported, I will update the box and re-release it during the week

plucky heron Feb 1, 2020, 4:39 PM

#

thanks!

deep trellis Feb 1, 2020, 5:34 PM

#

No worries! 🙂

icy hill Feb 1, 2020, 8:20 PM

#

Anyone know how to

📎 JPEG_20200201_151331.jpg

#

How to move that free space to the filesystem partition 8

eager fulcrum Feb 1, 2020, 8:20 PM

#

you'll need to move the other partitions

icy hill Feb 1, 2020, 8:21 PM

#

That's an active Linux boot tho

#

The first one is my extra storage for windows boot

fleet sluice Feb 2, 2020, 10:57 AM

#

I cannot avail my student discount...My college domain is @sonatech.ac.in and @webportal.sonatech.ac.in

eager fulcrum Feb 2, 2020, 10:58 AM

#

@fleet sluice It's only automatic for UK academic addresses

fleet sluice Feb 2, 2020, 3:45 PM

#

@eager fulcrum so can't i avail student discount?? 😦

deep trellis Feb 2, 2020, 3:49 PM

#

@fleet sluice

#

I will add .ac.in to the student discount list

#

Visit THM tomorrow, and it will automatically update your student discount on your proifle

fleet sluice Feb 2, 2020, 3:51 PM

#

tqsm 🙏

deep trellis Feb 2, 2020, 3:51 PM

#

Are you subscribed already?

#

If so, I will need to update your payment amount manually

#

Otherwise yeah just wait till tomorrow 🙂

fleet sluice Feb 2, 2020, 5:08 PM

#

@deep trellis no no today only i registered for THM

#

i will wait ..Thanks

unique rover Feb 3, 2020, 5:14 AM

#

Hello everyone. I have a problem in the OSCP path Challange Corp. I have done all steps necessary. Decoded the encoded password. But still cant get login as Administrator.

#

📎 unknown.png

#

It says "The password for this account has expired.", have anyone encountered problem like this?\

prime spear Feb 3, 2020, 7:56 AM

#

So I have a vulnversity machine deployed that I can't even ping after I attempted to get a proper shell working with python

prime spear Feb 3, 2020, 8:11 AM

#

wait no it doesn't crash but it does freeze for random amounts of time average 73% packet loss

eager fulcrum Feb 3, 2020, 10:07 AM

#

@unique rover yes. You need to set a new one

#

@prime spear your vpn sounds broken

autumn matrix Feb 3, 2020, 1:50 PM

#

Hey all, attempting to connect to the DVWA while going through the Burpsuite room, but I cannot seem to connect, even though it says the box is up, I'm able to connect to any other site

bold wave Feb 3, 2020, 1:53 PM

#

having a bit of bother getting hackpark online

deep trellis Feb 3, 2020, 3:14 PM

#

@bold wave Are you subscribed?

#

Subscribers machines boot quicker qith more resources.

#

If you are not subscribed, it wont load as quickly.

severe furnace Feb 3, 2020, 8:14 PM

#

Hi, I need some help with Nessus room. I installed Nessus on Windows, but when I run a Web Application scan on the host, its returning no results. Anyone who faced this issue/can help with it?

naive dust Feb 3, 2020, 8:37 PM

#

Are you connected to the VPN?

#

Does it say you are connected here: https://tryhackme.com/access

TryHackMe | Login

TryHackMe is a platform for learning and teaching cyber security.

severe furnace Feb 3, 2020, 10:16 PM

#

Yes I am

mild jungle Feb 4, 2020, 12:07 AM

#

Try using a Kali VM, either hosting one locally, or accessing s virtual one by subscribing to THM

#

https://www.tenable.com/blog/getting-started-with-nessus-on-kali-linux

Tenable®

Getting Started with Nessus on Kali Linux

Kali Linux, a Linux distribution designed specifically for penetration testing, comes prepackaged with many pen test tools.

naive dust Feb 4, 2020, 12:19 AM

#

Yeah, using Windows as a hacking platform is.... less than ideal

unique rover Feb 4, 2020, 4:44 AM

#

@eager fulcrum Thank you.

harsh thunder Feb 4, 2020, 7:55 AM

#

Guessing attacktivedirectory is still not working?

copper mist Feb 4, 2020, 11:27 AM

#

How do you delete an account? I don't know if I'm being blind but I can't see anything relating to deletion

warm spear Feb 4, 2020, 12:09 PM

#

You can't, email support directly hello@tryhackme.com

#

i dont think there is a way in the settings of accounts atm

#

but obviously you can - thm is gdpr compliant

naive dust Feb 4, 2020, 2:48 PM

#

They just use voodoo magic for parts of the site. Its why its so difficult to implement a darkmode/name changing/accounf deletion

#

:P

severe furnace Feb 4, 2020, 5:20 PM

#

@mild jungle does the virtual one by THM have enough space for Nessus? It says minimum space recommended is 30 GB

#

I had installed Nessus on Ubuntu, but I started running out of space because of it, so I switched to Windows

glossy cairn Feb 4, 2020, 5:22 PM

#

is it just me or does the vpn connection seem very unstable ?

eager fulcrum Feb 4, 2020, 5:23 PM

#

@glossy cairn probably just you. Check you only have 1 instance running

glossy cairn Feb 4, 2020, 5:24 PM

#

@eager fulcrum i do 🙂

eager fulcrum Feb 4, 2020, 5:24 PM

#

2 systems with the same profile will cause issues

#

Make sure.

glossy cairn Feb 4, 2020, 5:27 PM

#

@eager fulcrum will regenerating the conf file cause any existing connections to disconnect ?

eager fulcrum Feb 4, 2020, 5:27 PM

#

Not 100%

glossy cairn Feb 4, 2020, 5:27 PM

#

cuz after doing so and closing my vm it still states Connected

eager fulcrum Feb 4, 2020, 5:28 PM

#

The thm gui thing is hit or miss

#

Takes a while

glossy cairn Feb 4, 2020, 5:28 PM

#

aight

eager fulcrum Feb 4, 2020, 5:29 PM

#

Do you get any errors in the console for your VM?

#

Where you're running the vpn

glossy cairn Feb 4, 2020, 5:32 PM

#

not currently, but a little while a go it kept sending PUSH REQUEST and then after the connection was established it kept restarting after a while

eager fulcrum Feb 4, 2020, 5:32 PM

#

Yeah I think that's normally when you have two connections running

glossy cairn Feb 4, 2020, 5:33 PM

#

hmm weird

#

well for now it seems stable

#

now its not ..

#

Tue Feb 4 12:40:44 2020 TLS: new session incoming connection from [AF_INET]18.202.129.195:1194 Tue Feb 4 12:40:44 2020 TLS: new session incoming connection from [AF_INET]18.202.129.195:1194 Tue Feb 4 12:40:46 2020 VERIFY OK: depth=1, CN=ChangeMe Tue Feb 4 12:40:46 2020 VERIFY KU OK Tue Feb 4 12:40:46 2020 Validating certificate extended key usage Tue Feb 4 12:40:46 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Tue Feb 4 12:40:46 2020 VERIFY EKU OK Tue Feb 4 12:40:46 2020 VERIFY OK: depth=0, CN=server Tue Feb 4 12:40:46 2020 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1 Tue Feb 4 12:40:46 2020 TLS: tls_multi_process: untrusted session promoted to semi-trusted Tue Feb 4 12:40:46 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

#

Tue Feb 4 12:42:52 2020 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Tue Feb 4 12:42:57 2020 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Tue Feb 4 12:43:02 2020 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Tue Feb 4 12:43:07 2020 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

zealous yoke Feb 4, 2020, 7:43 PM

#

If material has been "successfully converted", how can I add it to my room? To e.g. deploy an instance?

#

I can't find anything in the room settings that makes reference to it

humble vortex Feb 4, 2020, 7:43 PM

#

can anyone help me im struggling to deploy my machine ?

#

both on my laptop and PC i have made sure that my openvpn is connected with the config file imported and i deploy my machine but the box doesn't open even after waiting for 10 minutes

zealous yoke Feb 4, 2020, 7:46 PM

#

nvm at what I said, figured it out

#

@humble vortex if you go to https://tryhackme.com/access on the device you're trying to connect from, do you see anything like "Connect [tick]" and your "Internal Virtual IP address"?

TryHackMe | Login

TryHackMe is a platform for learning and teaching cyber security.

#

remember to only connect to the TryHackMe network on one device at a time! This always catches me out 🙂

humble vortex Feb 4, 2020, 7:48 PM

#

📎 unknown.png

#

yeah i am connected yet when i go to deploy a vm the only options i have are terminate and add 1 hour but i cant see the vm on the web page

zealous yoke Feb 4, 2020, 7:50 PM

#

So you see something like this?

📎 unknown.png

humble vortex Feb 4, 2020, 7:50 PM

#

yeah thats all i see

zealous yoke Feb 4, 2020, 7:50 PM

#

If so, try pinging the IP address

#

depending upon the challenge, you may not be able to access it just by going to the IP address on your browser

#

E.g. a web server might be running on port 8080 and not port 80 (which is the default your browser would try and connect too)

#

That's where you have to enumerate and figure out what is running and where 🙂

humble vortex Feb 4, 2020, 7:51 PM

#

the ping worked

zealous yoke Feb 4, 2020, 7:52 PM

#

Sweet!

#

So the instance has definitely deployed okay, and you can connect to it fine

#

Now you just need to enumerate it and figure out what's running on it 🙂 (nmap!)

#

The Nmap primer room is super-useful in getting used to the syntax of Nmap https://tryhackme.com/room/rpnmap if you're unfamiliar

TryHackMe | rpnmap

TryHackMe is a platform for learning and teaching cyber security.

humble vortex Feb 4, 2020, 7:54 PM

#

is it meant to deploy a box like in the linux challenges?

zealous yoke Feb 4, 2020, 7:54 PM

#

not necessarily, it depends on the challenge. Out of curiosity, what room / challenge are you trying?

humble vortex Feb 4, 2020, 7:55 PM

#

im currently on the RP: Nmap one now

#

and its doing the same thing

zealous yoke Feb 4, 2020, 7:55 PM

#

If it has an "Deploy" button, generally speaking it will launch some sort of VM, it might take a couple of minutes for it to fully launch although.

humble vortex Feb 4, 2020, 7:56 PM

#

📎 unknown.png

#

is that meant to deploy a terminal or do i access it by putting the ip in a browser

zealous yoke Feb 4, 2020, 7:56 PM

#

and you get no useful output from Nmap when trying to use it?

#

Oh!

#

No, you have to put that IP into whatever you're using e.g. Kali

humble vortex Feb 4, 2020, 7:57 PM

#

Oh thank you i got used to the linux challenge format

zealous yoke Feb 4, 2020, 7:57 PM

#

so on kali nmap <options> 10.10.57.187

#

etc

humble vortex Feb 4, 2020, 7:58 PM

#

and thought that was the way the vm was meant towork

zealous yoke Feb 4, 2020, 7:58 PM

#

Ah gotcha!

humble vortex Feb 4, 2020, 7:58 PM

#

thank you 🙂

zealous yoke Feb 4, 2020, 7:58 PM

#

you're more then welcome, glad it's all sorted 🙂

deep trellis Feb 4, 2020, 8:04 PM

#

@humble vortex Whatsup?

glossy cairn Feb 4, 2020, 10:35 PM

#

any admin able to help me regarding some technical problems

#

@deep trellis @rigid oxide anyone of you available :)?

#

getting this error Tue Feb 4 17:45:30 2020 /sbin/ip addr add dev tun1 10.8.21.103/16 broadcast 10.8.255.255 Tue Feb 4 17:45:30 2020 /sbin/ip route add 10.10.0.0/16 metric 1000 via 10.8.0.1 RTNETLINK answers: File exists Tue Feb 4 17:45:30 2020 ERROR: Linux route add command failed: external program exited with error status: 2

rigid oxide Feb 4, 2020, 10:49 PM

#

Oh you have multiple instances of the vpn open

#

You can only have one instance of the connection open

steel rapids Feb 4, 2020, 10:49 PM

#

sudo pkill openvpn

rigid oxide Feb 4, 2020, 10:49 PM

#

Essentially your system is complaining that it's already connected and that the route already exists, just might have gone inactive if you haven't done anything in 30+ minutes

glossy cairn Feb 4, 2020, 10:50 PM

#

aight

#

pkill openvpn will fix that?

#

or do you need to kill any old session from your end

#

?

steel rapids Feb 4, 2020, 10:51 PM

#

Should kill all instances of ovpn

#

Then you start a new one as normal

#

You could also find the process id using ps -aux and then kill <id>

glossy cairn Feb 4, 2020, 10:51 PM

#

yea did that before

#

ps -aux | grep openvpn

#

killed that

#

restarted vm

rigid oxide Feb 4, 2020, 10:53 PM

#

might need a full system restart

#

I recommend using tmux and running the vpn in a tmux tab

glossy cairn Feb 4, 2020, 10:55 PM

#

yeah doing that 🙂

#

like now, i have deployed kenobi @ 10.10.248.252

#

now its not responding to pings anymore

#

timed out

#

now it is

#

weird

#

do the boxes usually flap in their connection ?

rigid oxide Feb 4, 2020, 10:58 PM

#

Nah they shouldn't

#

that's odd

glossy cairn Feb 4, 2020, 10:59 PM

#

yeah

#

happens to me all the time

#

on all boxes

#

:/

#

thought it was vpn

#

but it appears stable Tue Feb 4 17:55:55 2020 Preserving previous TUN/TAP instance: tun0 Tue Feb 4 17:55:55 2020 Initialization Sequence Completed

#

times out all the time, and then it comes back

#

@rigid oxide Do you know what the problem might be... :)?

rigid oxide Feb 4, 2020, 11:05 PM

#

Maybe your internet? Check to make sure it's stable

glossy cairn Feb 4, 2020, 11:07 PM

#

it's table 🙂

rigid oxide Feb 4, 2020, 11:09 PM

#

hmm

#

You only have one device connected, right?

glossy cairn Feb 4, 2020, 11:10 PM

#

yup

#

killed my vm now and powering it up again

rigid oxide Feb 4, 2020, 11:10 PM

#

I'm not quite sure what's going on there

glossy cairn Feb 4, 2020, 11:10 PM

#

weird :/

rigid oxide Feb 4, 2020, 11:10 PM

#

Don't forget, the boxes will take a minute or two to boot

glossy cairn Feb 4, 2020, 11:10 PM

#

yeh but it has been up for a while, and still keeps doing this

fleet sluice Feb 4, 2020, 11:12 PM

#

@deep trellis cannot avail student discount

deep trellis Feb 4, 2020, 11:22 PM

#

@fleet sluice ?

#

DM me, I added your .ac extension, you should have it if you're using your student email

torn citrus Feb 5, 2020, 2:35 AM

#

Having a strange issue, the bruteforce attack on a specific themed box is taking a very long time. I re-deployed, any suggestions?

📎 unknown.png

#

@deep trellis

deep trellis Feb 5, 2020, 2:39 AM

#

yo

torn citrus Feb 5, 2020, 2:39 AM

#

Sorry for the ping, not sure how to handle these issues.

deep trellis Feb 5, 2020, 2:39 AM

#

Yeah no worries

#

Is this Hydra on the machines service?

torn citrus Feb 5, 2020, 2:40 AM

#

wpscan

#

I don't want to give it away

#

I'm sure you saw lol

deep trellis Feb 5, 2020, 2:40 AM

#

Yeah I gotcha

#

aha

torn citrus Feb 5, 2020, 2:41 AM

#

📎 unknown.png

#

Now 14 hours

deep trellis Feb 5, 2020, 2:41 AM

#

Oof.

torn citrus Feb 5, 2020, 2:41 AM

#

Yeah so odd

deep trellis Feb 5, 2020, 2:41 AM

#

Only 1716 passwds too

torn citrus Feb 5, 2020, 2:41 AM

#

the pages load fine

#

lmao

#

At this rate I'll be press "Add 1 hour" for a week

deep trellis Feb 5, 2020, 2:41 AM

#

omfg lol

torn citrus Feb 5, 2020, 2:41 AM

#

🤣

deep trellis Feb 5, 2020, 2:42 AM

#

If you subscribe you can use a Kali machine (on the same network, so remove the OpenVPN requirment) which will speed itup.

However you shouldn't need to, not sure why its taking so long. This week I am adding a new OpenVPN server to the network

#

So spread the load

#

Perhaps that will help

torn citrus Feb 5, 2020, 2:42 AM

#

Understood, I will absolutely be subscribing.

deep trellis Feb 5, 2020, 2:42 AM

#

I can't suggest much other than that I'm afraid soz my dude

torn citrus Feb 5, 2020, 2:42 AM

#

So I look forward to that

deep trellis Feb 5, 2020, 2:42 AM

#

Ey cool, cool

torn citrus Feb 5, 2020, 2:43 AM

#

It's okay 😦 I'll just see if it loads 🙂

deep trellis Feb 5, 2020, 2:44 AM

#

Yeah, by this weekend there will be another OpenVPN server, Ill move you over to the fresh one

#

And perhaps you can re-test?

torn citrus Feb 5, 2020, 2:44 AM

#

For sure, I appreciate it.

deep trellis Feb 5, 2020, 2:44 AM

#

Or see if it makes a difference?

#

Yeah no worries

#

Happy Hacking 😉

torn citrus Feb 5, 2020, 2:44 AM

#

I can try to regen the VPN and see if that helps

deep trellis Feb 5, 2020, 2:44 AM

#

^ it wont

#

Wouldn't waste you time doing that

torn citrus Feb 5, 2020, 2:44 AM

#

Okay, I wont

#

haha

deep trellis Feb 5, 2020, 2:44 AM

#

Dont want your scan to break

torn citrus Feb 5, 2020, 2:45 AM

#

I already ended it

#

Since the time limit on the VM's

deep trellis Feb 5, 2020, 2:45 AM

#

lol, want me to extend your machine by 10 hours?

#

So you can leave it over night?

#

lol

torn citrus Feb 5, 2020, 2:45 AM

#

haha, sure!

deep trellis Feb 5, 2020, 2:45 AM

#

What the IP?

#

Noice

#

Refresh your page

torn citrus Feb 5, 2020, 2:46 AM

#

Got it! Thanks again!

deep trellis Feb 5, 2020, 2:47 AM

#

Was a crappy solution, but will do for now

torn citrus Feb 5, 2020, 2:47 AM

#

It is what it is 😉

#

I'll get it

#

I love it so far

deep trellis Feb 5, 2020, 2:47 AM

#

Eyy, thats really great to here

#

This year we have lots coming

#

Networks (coming in march), recruitment, mentorship programs, videos + 10 other stuff I'll keep private for now

#

So stay tuned

torn citrus Feb 5, 2020, 2:48 AM

#

I will absolutely be staying tuned, expect a subscription soon ❤️ 🙂

late atlas Feb 5, 2020, 12:17 PM

#

Anyone connected to the VPN that can check if a box is up for me? Been a good ~15 mins and not seeing anything on it..

deep trellis Feb 5, 2020, 12:17 PM

#

yeah sre

late atlas Feb 5, 2020, 12:18 PM

#

Cool cool, DMing

zealous yoke Feb 5, 2020, 8:00 PM

#

Are we able to remove "Materials" that we have uploaded? I've got a VM up there that isn't necessary any more ... seems like a waste to just keep it stored there. Unless I'm missing something?

eager fulcrum Feb 5, 2020, 8:02 PM

#

Not yet but I think it's been requested

zealous yoke Feb 5, 2020, 8:02 PM

#

Ah coolio, cheers @eager fulcrum

eager fulcrum Feb 5, 2020, 8:02 PM

#

I have a couple versions from WiFi hacking that I want to delete

steel rapids Feb 5, 2020, 8:11 PM

#

Skidy might be able to help with that

zealous yoke Feb 5, 2020, 9:08 PM

#

It's okay, it's not at all urgent! The OVA was something shy of just over 2GB IIRC, just thought y'know - storage costs and all

steel rapids Feb 5, 2020, 9:09 PM

#

I think there ended up being 5 copies of my next room's VM on the back end, something like 25-100GB

#

yikes

zealous yoke Feb 5, 2020, 9:23 PM

#

wowzers ahaha

#

and there's me being all conservative

steel rapids Feb 5, 2020, 9:23 PM

#

cloning it was easier than making a 5 minute change and uploading for 2 hours kek

zealous yoke Feb 5, 2020, 9:26 PM

#

cloning the room or cloning the material? O.o

steel rapids Feb 5, 2020, 9:26 PM

#

material

barren birch Feb 5, 2020, 10:51 PM

#

I am so glad it's not just me that's got a bunch of outdated VMs up. Being able to delete them will be a gift.

coral citrus Feb 6, 2020, 12:24 AM

#

Hey guys

#

I just signed up on TryHackMe

#

I don't know anything about cyber security but i do have some experience coding

#

Do you guys have any tips for a beginner like me?

naive dust Feb 6, 2020, 2:20 AM

#

Do walkthrough rooms

#

Take notes

#

Eventually you'll kind of have your own personal wiki of commands/tools/resources etc.

#

I at least do

#

No way I could remember all the stuff

#

feel free to DM me if you want other advice @coral citrus

coral citrus Feb 6, 2020, 2:45 AM

#

I really appreciate the help!

mossy ermine Feb 6, 2020, 4:23 AM

#

📎 2020-02-05.png

#

📎 2020-02-05_1.png

#

it looks like your room completion list on your dashboard isnt calculating the completion correctly

#

@deep trellis @rigid oxide

rigid oxide Feb 6, 2020, 4:26 AM

#

hmm

#

that's not good

mossy ermine Feb 6, 2020, 4:27 AM

#

not sure but i know you just updated that room

#

earlier today i also had to re-complete a question in that room that had already been answered ... but it didnt change anything

rigid oxide Feb 6, 2020, 4:35 AM

#

hmmm @deep trellis might have to take a peeksie here

harsh thunder Feb 6, 2020, 4:47 AM

#

Hey guys, anyone fixed the Attactive room yet?

rigid oxide Feb 6, 2020, 3:51 PM

#

Should be done soon! I know Spooky was working really hard on that last ngiht

upper steppe Feb 6, 2020, 7:43 PM

#

any admin here rn ?

naive dust Feb 6, 2020, 8:06 PM

#

Just post your issue

deep trellis Feb 6, 2020, 8:37 PM

#

@mossy ermine So Kaliroom is 100% complete, but on your dashboard its just showing as 50% complete

mossy ermine Feb 6, 2020, 8:42 PM

#

it was yesterday let me check again

#

it is currently not showing but i posted proof yesterday @deep trellis

#

if the room progress was expandable i could see all rooms but currently it only shows three at a time

#

or a scroll bar

#

it looks like it ranks by percentage of completion so it should be showing as my second is 48 % and kali was showing at 50%

deep trellis Feb 6, 2020, 8:57 PM

#

Weird, I'lll check it out

molten bolt Feb 7, 2020, 7:18 PM

#

Hi there - question, is the connection to the rooms more stable when becoming a subscriber?

deep trellis Feb 7, 2020, 8:05 PM

#

@molten bolt Machines will deploy with more resources, so in theory yes. But it should be stable when deploying as a non-subscriber too.

naive dust Feb 7, 2020, 11:38 PM

#

Ok discord,
How would i decode/ decompile a file like this
http://72.2.249.206:39021/Mozi.a

warm spear Feb 8, 2020, 12:12 AM

#

uhhhh

#

hexeditor?

#

text editor?

#

strings?

#

ngl but there is no way on this planet i am even attempting to download that file to see how it's possible to do it

#

if it's just a normal file, strings, hexeditor, open it in radare2 maybe, binwalk

steel rapids Feb 8, 2020, 12:14 AM

#

big monkaS energy

supple sonnet Feb 8, 2020, 12:14 AM

#

bliss POGGERS

naive dust Feb 8, 2020, 12:52 AM

#

PepeHands_B3 Just inspect it in a vm if you're so scared
I opened it in notepad++ and it was all garbled as if it was a exe file idk bruuuuuuuuuuh

barren birch Feb 8, 2020, 12:58 AM

#

or you could inspect it in a vm so that you're not scared, using the tools that @warm spear suggested. Remember that this environment is primarily for sharing knowledge and learning. This channel, specifically, is for "VPN and other technical questions related to TryHackMe". It's not to get people to solve your problems for you, and I say that in the kindest sense possible. Take it as a learning opportunity, by all means ask for help (probably over in #thm-community-media, but a mod or admin would be better confirming that) -- you'll find that it's a very supportive community -- but please don't ask the community to just outright do it for you.

naive dust Feb 8, 2020, 12:58 AM

#

monkaW I want to do it but idk how,

barren birch Feb 8, 2020, 12:59 AM

#

In terms of expanding on that advice, for the record, I would suggest looking at it with strings in a Linux VM. See if there's anything that stands out as being particularly abnormal. Failing that you're probably going to have to decompile it with radare2.

#

Like @warm spear, I don't fancy downloading it myself to take a look at it, but I would use file on it first, as you say it looks like an exe file, but you're not sure

#

file will give you an idea of what kind of file it actually is. If that fails you could use hexeditor to take a look at the magic number manually, which might also help

naive dust Feb 8, 2020, 1:02 AM

#

pepoG I see, thanks for giving me your insight

steel rapids Feb 8, 2020, 1:02 AM

#

It's a botnet

barren birch Feb 8, 2020, 1:02 AM

#

Or that...

steel rapids Feb 8, 2020, 1:02 AM

#

Specifically for routers

barren birch Feb 8, 2020, 1:03 AM

#

So it is: https://blog.netlab.360.com/mozi-another-botnet-using-dht/
Thanks @steel rapids

360 Netlab Blog - Network Security Research Lab at 360

Mozi, Another Botnet Using DHT

Mozi Botnet relies on the DHT protocol to build a P2P network, and uses ECDSA384 and the xor algorithm to ensure the integrity and security of its components and P2P network. The sample spreads via Telnet with weak passwords and some known exploits

steel rapids Feb 8, 2020, 1:04 AM

#

Never underestimate the power of google

barren birch Feb 8, 2020, 1:04 AM

#

I have no idea how you're so awake at 0100.
Yeah, Googling it should probably be the first step before breaking out the decompilation tools...

steel rapids Feb 8, 2020, 1:06 AM

#

Because I woke up at 7pm kekw

warm spear Feb 8, 2020, 1:06 AM

#

Lmao I'm glad I didn't open that file then 😂😂😂

barren birch Feb 8, 2020, 1:06 AM

#

That would be it smh

warm spear Feb 8, 2020, 1:06 AM

#

but thanks for the virus, might come in handy

barren birch Feb 8, 2020, 1:07 AM

#

Stroke of luck that

eager fulcrum Feb 8, 2020, 1:54 AM

#

@naive dust please don't post viruses lol

barren birch Feb 8, 2020, 1:56 AM

#

Can't believe this is actually necessary, but might be an idea to explicitly put that in the rules...
@rigid oxide?

steel rapids Feb 8, 2020, 1:56 AM

#

tbh I think it's a given

eager fulcrum Feb 8, 2020, 1:56 AM

#

I think my request was more from a user than a moderator but you'd be surprised. Assumptions are different for different people

barren birch Feb 8, 2020, 1:57 AM

#

I thought it was a given too...

eager fulcrum Feb 8, 2020, 1:57 AM

#

I think we also need a rule about blackhat activities etc too

barren birch Feb 8, 2020, 1:58 AM

#

Wasn't that added a little while ago?

eager fulcrum Feb 8, 2020, 1:58 AM

#

I'd say Malware comes under that one under many jurisdictions

#

It's a little complicated

barren birch Feb 8, 2020, 1:59 AM

#

I would agree with that analysis, which is part of why I can't believe it's apparently necessary to explicitly state it 😄
Just an idea though.

eager fulcrum Feb 8, 2020, 2:00 AM

#

Maybe an addition to the rule. See what dark says I guess

rigid oxide Feb 8, 2020, 2:21 AM

#

all done

naive dust Feb 8, 2020, 2:49 AM

#

monkaW the fuck

rigid oxide Feb 8, 2020, 2:54 AM

#

Haha the discord/community on the whole is one of the major two things I manage

#

I have that and I'm the content director administrator for the site

#

Hence the quick rule introduction

warm spear Feb 8, 2020, 2:57 AM

#

I like how most of the recent rules could fall under "don't be a script kiddy" but that sounds too harsh on people just starting out

rigid oxide Feb 8, 2020, 3:03 AM

#

Skidy's are welcomed here 😉

barren birch Feb 8, 2020, 3:16 AM

#

Uh, is that what Skidy stands for?..

naive dust Feb 8, 2020, 3:16 AM

#

scriptkid=skid=skidy

barren birch Feb 8, 2020, 3:17 AM

#

Yeah, I see that now, I just didn't make the connection between that and our great and glorious leader 😁

mossy ermine Feb 9, 2020, 7:19 PM

#

test - why can't I get the tech support messages to un-bold?

#

oh nvrmind

deep trellis Feb 9, 2020, 9:54 PM

#

Yea - Script Kiddie skidy

#

!skidy

sharp bisonBOT Feb 9, 2020, 9:55 PM

#

Skidy

:slight_smile:

leaden token Feb 12, 2020, 2:32 PM

#

!dark

sharp bisonBOT Feb 12, 2020, 2:32 PM

#

DarkStar7471

YUME IS A PRINCESS!

copper mist Feb 13, 2020, 1:47 PM

#

Wondering how to make rooms and content, what would be a good starting point? Any tips appreciated :)

barren birch Feb 13, 2020, 2:01 PM

#

What kind of thing are you looking to do @copper mist?

eager fulcrum Feb 13, 2020, 2:17 PM

#

@copper mist Really find a topic you are interested in, and learn. Detail how you learned that topic, and you have a room

barren birch Feb 13, 2020, 6:19 PM

#

Right, can someone explain this, once and for all:

📎 unknown.png

#

Kali subscriber machine, access in browser. What, the heck, are the creds

eager fulcrum Feb 13, 2020, 6:20 PM

#

Ah yeah, it's hit or miss with it working. I remember there was a fix

#

It should automatically auth?

deep trellis Feb 13, 2020, 6:20 PM

#

Ah @barren birch no creds

#

Terminate & redeploy

eager fulcrum Feb 13, 2020, 6:20 PM

#

The new or old kali machine?

barren birch Feb 13, 2020, 6:20 PM

#

Huh, that's a bug then @deep trellis. This literally happens with every machine I deploy that has browser access -- always has.

deep trellis Feb 13, 2020, 6:20 PM

#

Oh really?

#

on sec

#

let me fix that for you

#

Whats your THM username?

barren birch Feb 13, 2020, 6:21 PM

#

I usually just skip it and log in a different way. I just can't be bothered booting my laptop just now and I took a bad screenshot earlier...

#

MuirlandOracle

#

Thanks 😁

deep trellis Feb 13, 2020, 6:23 PM

#

Try now

barren birch Feb 13, 2020, 6:23 PM

#

Just redeployed 👍

#

I'll let you know if it lets me straight in

#

Yep, that's done it @deep trellis , thanks!

vocal wasp Feb 14, 2020, 3:59 AM

#

Why does it take more than 1 ctrl+c to clear the line in linux?

maiden pike Feb 14, 2020, 11:21 AM

#

How does one get the OSCP basge on their profile 🙂 sorry if its not for this channel

deep trellis Feb 14, 2020, 12:04 PM

#

@maiden pike No badge, but I could make one for the pathway

maiden pike Feb 14, 2020, 12:40 PM

#

Ahhh nice yeah that would be cool

pallid niche Feb 14, 2020, 8:19 PM

#

Could someone help trouble shoot this issue I am having with scp. I am trying to scp a file FROM my VM to my Mac machine. I'm using the command scp [MY_USER]@192.168.1.1:/root/opt/file.txt . however I am getting a permission denied. With Kali not removing root user, i'm guesing I can't type root@ip. I should note, I did open up port 22 so I should be able to pull files~

eager fulcrum Feb 14, 2020, 8:20 PM

#

Are you sure your user can read that file?

#

/root/ might not be readable

eager fulcrum Feb 14, 2020, 9:31 PM

#

I can't get this metasploit module to work

#

I copied it into the correct location, and when I select it it doesn't actually select

warm spear Feb 15, 2020, 2:03 AM

#

is it possible to copy something from ur local machine to Kali browser? Cause I can't get it to work

eager fulcrum Feb 15, 2020, 11:14 AM

#

@warm spear internet is broken on kali machine for now

deep trellis Feb 15, 2020, 1:07 PM

#

Not broken, I stopped it for a few days

#

Trialing something

weak beacon Feb 15, 2020, 2:21 PM

#

Hi all, I'm trying to create a room to use for some recruitment challenges. I've seen some other rooms that have an initial task walking people through connecting to the VPN. Is that a resource I can use or do you need to write this?

#

Also, I've seen in these other rooms a box above the chart and underneath the description which can offer logos and terms of service etc. How can I put this in? e.g the pwcbsides room.

steel rapids Feb 15, 2020, 2:27 PM

#

You could link to https://tryhackme.com/room/openvpn

TryHackMe | openvpn

TryHackMe is an online platform for learning and teaching cyber security.

deep trellis Feb 15, 2020, 2:27 PM

#

@weak beacon email us : hello@tryhackme.com - some rooms (if you're the owner) allow you to generate detailed reports about a candidates progress (talent assessment platform)

#

We can also brand the room etc..

weak beacon Feb 15, 2020, 2:28 PM

#

@steel rapids thanks. @deep trellis I will definitely send you an email about this as that sounds just what I'm after.

steel rapids Feb 15, 2020, 2:29 PM

#

np

weak beacon Feb 15, 2020, 2:37 PM

#

I have emailed. Thanks for that.

deep trellis Feb 15, 2020, 2:42 PM

#

Just seen, someone will respond (most likely me) in the next few hours - thanks :)

eager fulcrum Feb 15, 2020, 5:16 PM

#

@lost lantern So what's happening/not happening?

lost lantern Feb 15, 2020, 5:19 PM

#

Hey, so basically I finished Task 1 and Task 2, working on Task 3 now. I am connected via the VPN and every time I try to Deploy the room, nothing happens, it just shows http://prntscr.com/r2sbwi

Lightshot

Screenshot

Captured with Lightshot

eager fulcrum Feb 15, 2020, 5:19 PM

#

That's uh. Pretty weird

#

Have you tried refreshing the page?

lost lantern Feb 15, 2020, 5:24 PM

#

Haha yeah I did

#

Any ideas you have in mind?

eager fulcrum Feb 15, 2020, 5:26 PM

#

@uncut hound It worked for you, right?

#

@lost lantern I'm explicitly prohibited by Tobi from joining the room, so there's a limited amount that I can do to help

#

@deep trellis might be able to take a look

uncut hound Feb 15, 2020, 5:28 PM

#

Worked for me

#

have revisited this room every other day to update my report so can confirm it works

eager fulcrum Feb 15, 2020, 5:29 PM

#

So it's an issue just for you, so I think one of the admins might be able to check out the AWS instance for you

uncut hound Feb 15, 2020, 5:29 PM

#

Skidy won't be back for a wee bit as he's has been out today

drowsy rover Feb 15, 2020, 5:29 PM

#

I'm having the same issue

uncut hound Feb 15, 2020, 5:29 PM

#

oh interesting

#

lemme boot a vm and check

eager fulcrum Feb 15, 2020, 5:30 PM

#

Cheers, dude

uncut hound Feb 15, 2020, 5:33 PM

#

📎 working.PNG

#

No issues here

eager fulcrum Feb 15, 2020, 5:34 PM

#

Weird...

lost lantern Feb 15, 2020, 5:34 PM

#

Let me try again

drowsy rover Feb 15, 2020, 5:35 PM

#

did you deploy the Kali one or the CW?

uncut hound Feb 15, 2020, 5:35 PM

#

cw

#

Ensure you click deploy and leave it for a couple minutes, also make sure you are connected to ovpn the entire time

lost lantern Feb 15, 2020, 5:38 PM

#

Once you click on "Deploy" (http://prntscr.com/r2sjmo), after a few minutes and with a refresh, I'm supposed to see a kali screen?

Lightshot

Screenshot

Captured with Lightshot

uncut hound Feb 15, 2020, 5:38 PM

#

Which room are you in?

#

If that's the cw one you won't see a kali vm

lost lantern Feb 15, 2020, 5:38 PM

#

CW one

uncut hound Feb 15, 2020, 5:38 PM

#

You have to go onto the kali vm room

#

or use a local version of kali

lost lantern Feb 15, 2020, 5:41 PM

#

Where did you get the "10.10.229.104" IP from?

drowsy rover Feb 15, 2020, 5:47 PM

#

^^

lost lantern Feb 15, 2020, 5:50 PM

#

It worked

#

Where did you get the "10.10.229.104" IP from?
@lost lantern Still have this question though

eager fulcrum Feb 15, 2020, 5:50 PM

#

📎 unknown.png

lost lantern Feb 15, 2020, 5:51 PM

#

Perfect

#

Thanks

#

You've been a great help

eager fulcrum Feb 15, 2020, 5:53 PM

#

If it doesn't show up, that's an issue

paper briar Feb 15, 2020, 8:39 PM

#

When i want to connect to the ip with remote connect I need login

deep trellis Feb 15, 2020, 8:40 PM

#

@drowsy rover Did you manage to boot and get an IP?

#

@lost lantern even*

lost lantern Feb 16, 2020, 2:08 PM

#

Yes it worked properly

deep trellis Feb 16, 2020, 2:27 PM

#

Do you know what the problem was?

lost lantern Feb 16, 2020, 2:38 PM

#

Actually I was just deploying the wrong way. Make sure you are connected via OpenVPN and once you go to Access page it shows that you are connected. Then go and Deploy the Kali Linux Room, and use the IP Address that appears to you when you Deploy the CW room. It should show you the frozen yogurt company's website.

spark timber Feb 16, 2020, 2:53 PM

#

Hi, im having an issue with my kali VM. I've set-up kali on VirtualBox and I have both the openvpn running on my kali vm and my actual PC however when trying to access the VM launched on the room it times out 80% of the time. Sometimes the connection will go through however sometimes it'll just time out. Any advice?

deep trellis Feb 16, 2020, 2:54 PM

#

On the Kali machine you do not need your OpenVPN connection running

#

You can only have ONE openvpn connection at a time

#

Getting disconected every 2 minutes? Only 1 OpenVPN connection is allowed.

#

Hope that helps

spark timber Feb 16, 2020, 2:55 PM

#

So I should only have the openVPN connection on my main PC and not my VM?

deep trellis Feb 16, 2020, 2:55 PM

#

Only one one machine, but the Kali (deployed from THM), you dont need an OpenVPN connection

spark timber Feb 16, 2020, 2:56 PM

#

Ok, so i've only got my openVPN connection running on my PC and NOT on my VM however im still getting timed out

#

My connection to google and that is all fine on my VM but I cannot connect to the room

deep trellis Feb 16, 2020, 3:02 PM

#

It depends on how you've configured your VM (network wise).

#

To ensure its not us, disconnect from everything, deploy JUST from your main PC (not a VM)

#

And see if you can access a machine

#

https://tryhackme.com/room/openvpn

TryHackMe | openvpn

TryHackMe is an online platform for learning and teaching cyber security.

spark timber Feb 16, 2020, 3:12 PM

#

My Openvpn doesn't have the import option

deep trellis Feb 16, 2020, 3:13 PM

#

what do you mean?

steel rapids Feb 16, 2020, 3:14 PM

#

@spark timber what's your host OS?

spark timber Feb 16, 2020, 3:14 PM

#

win 10

steel rapids Feb 16, 2020, 3:14 PM

#

Are you looking down here?

📎 unknown.png

spark timber Feb 16, 2020, 3:14 PM

#

im re-installing just in-case i've got an outdated version if thats an issue

#

Yes I am

steel rapids Feb 16, 2020, 3:14 PM

#

Okay, yeah reinstall

spark timber Feb 16, 2020, 3:23 PM

#

Ok so i've reinstalled and i've got it all set-up and the connect seems fine on my host PC. However, still getting timeouts on my VM. I've set the network up with NAT on my VM and I am ONLY running ONE openVPN connection and thats on my host (just to clarify)

#

The timeouts don't seem as long however with the change but still getting them

eager fulcrum Feb 16, 2020, 3:28 PM

#

@spark timber VPN from the VM, it'll give you a LOT less hassle

spark timber Feb 16, 2020, 3:28 PM

#

ok

steel rapids Feb 16, 2020, 3:29 PM

#

ovpn should already be installed on kali iirc

spark timber Feb 16, 2020, 3:29 PM

#

Yes it is

#

I've got it running on my VM, i'll see if I still get timeouts

steel rapids Feb 16, 2020, 3:30 PM

#

so you just need to download your connection pack and sudo openvpn <username>.ovpn

#

Ah

#

Okie

spark timber Feb 16, 2020, 3:31 PM

#

Yep im still getting timeouts

#

It works fine for like 2mins once I set-up the VPN connection however after 2mins it just timesout

#

https://puu.sh/FbfJo/dfe43ebd07.png

#

this is when it cuts out

#

and timesout

#

at 31:05

#

Also, I have STOPPED both my VPN connection on my VM & on my host PC however it still states im connected to tryhackme : https://puu.sh/FbfOl/c83d7aab36.png

#

(no openVPN processes running on windows via Taskmanager[host PC])

rotund spruce Feb 16, 2020, 3:42 PM

#

Are you running the VPN on both the host and the VM simultaneously? That will cause connectivity problems.

Also the connection status doesn't update right away

spark timber Feb 16, 2020, 3:42 PM

#

I am not no

#

At this point im not running the openVPN connection on either the host or VM

rotund spruce Feb 16, 2020, 3:43 PM

#

That's ok. that would be a rather silly thing to do 😛

spark timber Feb 16, 2020, 3:43 PM

#

but on my VM im still able to access the room

eager fulcrum Feb 16, 2020, 3:43 PM

#

@spark timber the THM connection panel isn't 100%

#

I think you're probably running the VPN in the background unless it's a public IP VM

spark timber Feb 16, 2020, 3:44 PM

#

I've gone through task manager on my host PC and there is no openvpn task running

#

and i've closed the terminal for the vpn connection on my VM

steel rapids Feb 16, 2020, 3:44 PM

#

Might be on the VM

#

Even if you close the terminal sometimes it can stick

rotund spruce Feb 16, 2020, 3:46 PM

#

Reboot your host machine and regenerate your connection pack then connect only from the VM

spark timber Feb 16, 2020, 3:46 PM

#

ok

crude ledge Feb 16, 2020, 4:37 PM

#

Hi there. I'm a new user and couldn't find my answer on the website. Is there an option to create a room and limit who has access to it (via a password or some other means)? Goal is to have a private challenge hosted.

rigid oxide Feb 16, 2020, 4:37 PM

#

Mhmm

#

New rooms are private by default

#

You can change the room password and give it out to only those who you want to have access to it

crude ledge Feb 16, 2020, 4:38 PM

#

You can change the room password and give it out to only those who you want to have access to it
@rigid oxide Thank you so much

rigid oxide Feb 16, 2020, 4:38 PM

#

You're welcome! ❤️

warm spear Feb 16, 2020, 10:47 PM

#

Not on Kali, but:

#

➜ sudo apt install john
[sudo] password for bee: 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
john is already the newest version (1.9.0-Jumbo-1-0kali3).
0 upgraded, 0 newly installed, 0 to remove and 114 not upgraded.

~ took 3s 
➜ john
zsh: command not found: john

#

Even on Bash 😦 Any ideas?

#

bee@bee-pc:~$ john
bash: john: command not found

eager fulcrum Feb 16, 2020, 10:49 PM

#

That's an oof

warm spear Feb 16, 2020, 10:50 PM

#

ok i found the actual binary of where john is

eager fulcrum Feb 16, 2020, 10:50 PM

#

Is it just not correctly loading the path?

warm spear Feb 16, 2020, 10:50 PM

#

whats it called to make linux know where john is

#

ohhh

#

path

eager fulcrum Feb 16, 2020, 10:50 PM

#

yee

warm spear Feb 16, 2020, 10:50 PM

#

ok thanks

eager fulcrum Feb 16, 2020, 10:50 PM

#

Same as windows

soft kindle Feb 18, 2020, 11:15 AM

#

<@&568449888682246145> I m not able to pay with my card (it has 19 numbers) and paypal lets me pay only for 3 months. i want to start with one month.

deep trellis Feb 18, 2020, 11:16 AM

#

Hi Dark

#

Can you email hello@tryhackme.com

soft kindle Feb 18, 2020, 11:16 AM

#

I ll do just now, thx

deep trellis Feb 18, 2020, 11:16 AM

#

Thanks

soft kindle Feb 18, 2020, 11:20 AM

#

@deep trellis email sent, thanks again. hope for an answer

maiden pike Feb 18, 2020, 11:22 AM

#

hey, i been having connectivity issues with the VPN for a couple days. it just seems to disconnect every like 30 seconds.

deep trellis Feb 18, 2020, 11:23 AM

#

Sounds like you have 2 VPN connections running

maiden pike Feb 18, 2020, 11:23 AM

#

i kill the openVPN connection (ctrl+c) and then reconnect again and its fine for another 30 seconds

#

do you think if i regen the vpn config file it will sort it?

#

yeah think your right

📎 unknown.png

#

who is this stranger hahahaha

deep trellis Feb 18, 2020, 11:24 AM

#

Ah looks you're running it in the background

maiden pike Feb 18, 2020, 11:24 AM

#

bloody thing ill kill it, thanks Skidy!

finite tinsel Feb 18, 2020, 12:17 PM

#

Restarted vm, regenerated openvpn file, my connection is excellent, i’m connected with openvpn. However, when i deploy the machine i cant access the ip

#

Any help?

#

Btw the room is: Vulnversity

deep trellis Feb 18, 2020, 12:20 PM

#

Weird, very weird indeedy

#

Can you ping it?

finite tinsel Feb 18, 2020, 12:20 PM

#

Yea i did, and it was successful

deep trellis Feb 18, 2020, 12:20 PM

#

It might take a few minutes to configure

finite tinsel Feb 18, 2020, 12:21 PM

#

I guess its just with vulnversity because i just tried accessing another box and it worked

#

Maybe tho i waited

deep trellis Feb 18, 2020, 12:22 PM

#

<your machine IP>:3333/

eager fulcrum Feb 18, 2020, 12:22 PM

#

@deep trellis the card thing is an issue with Stripe, they only accept 16 digit cards

#

I posted a link in general

deep trellis Feb 18, 2020, 12:23 PM

#

The web server is on port 3333

#

@eager fulcrum Thanks 🙂

eager fulcrum Feb 18, 2020, 12:23 PM

#

Kinda sucks but no ETA on a fix

finite tinsel Feb 18, 2020, 12:25 PM

#

Well, that worked thanks😅

deep trellis Feb 18, 2020, 12:26 PM

#

Yeah, Stripe are good have their limitations

wise dagger Feb 19, 2020, 2:35 AM

#

Yeah, my credit card didn't work with Stripe altough it's standard 16 credit card

#

Had to use another card

naive dust Feb 19, 2020, 2:34 PM

#

is there a way to change University in a created Team ? I mean other than uk universities, Mexico University for example.

eager fulcrum Feb 19, 2020, 2:38 PM

#

UK only for now

eager fulcrum Feb 19, 2020, 4:53 PM

#

Are you sure it's running a web server that you'd be able to connect to with your browser?

naive dust Feb 19, 2020, 4:53 PM

#

hey, so i'm running on elementary OS and i came across your website today. so i installe dopenvpn, and i'ms tarting it with my config file. in the access panel on the website it says i'm connected, and it's serving me a internal ip address

#

and it just worked

#

oke wtf

#

ty !!

eager fulcrum Feb 19, 2020, 4:54 PM

#

If it's connecting to a VM, they take a while to deploy

naive dust Feb 19, 2020, 4:55 PM

#

oh oke, i see

#

thank you

eager fulcrum Feb 19, 2020, 5:00 PM

#

Not always but sometimes

naive dust Feb 19, 2020, 8:22 PM

#

📎 unknown.png

#

Can anyone help out with this error?

#

Wfuzz runs normally for about 5 seconds then spits out this and stops working

#

wfuzz -w subdomains-top1million-5000.txt -u "cmess.thm" -H "Host: FUZZ.cmess.thm"

#

is what im running

naive dust Feb 21, 2020, 9:41 PM

#

anyone help why when i try log into the kali machine i get invalid login?

barren birch Feb 21, 2020, 9:42 PM

#

Can you send a screenshot @naive dust?