#site-support | TryHackMe | Page 145

naive dust Feb 21, 2020, 9:43 PM

#

📎 unknown.png

deep trellis Feb 21, 2020, 9:43 PM

#

Terminate and re-deploy

naive dust Feb 21, 2020, 9:43 PM

#

tried that 3 times it disconnects me within minutes

#

maybe due to wifi?

barren birch Feb 21, 2020, 9:48 PM

#

Looks like the same problem I was having @deep trellis?

naive dust Feb 21, 2020, 9:54 PM

#

yeah tried terminating it a few times and im still getting the same issue

wise dagger Feb 22, 2020, 3:16 AM

#

Is the password correct?

#

Can you RDP into it?

deep trellis Feb 22, 2020, 11:11 AM

#

@naive dust Apologies for the late reply - is this still happening?

#

I can look into fixing this for you

naive dust Feb 22, 2020, 11:11 AM

#

yeah would be nice thanks

crystal osprey Feb 22, 2020, 10:13 PM

#

If it helps it would only happen to me when the box didn't get an IP

naive dust Feb 24, 2020, 12:56 PM

#

would u be able to fix the login? so i can login

patent arrow Feb 24, 2020, 1:49 PM

#

Hi, do the platform have some issues, because no matter which machine I deploying I can't ping anyone

#

I also downloaded the VPN file again

eager fulcrum Feb 24, 2020, 1:51 PM

#

Are you actually connected?

patent arrow Feb 24, 2020, 2:32 PM

#

Yes

rotund furnace Feb 24, 2020, 2:34 PM

#

@naive dust
-u "http://cmess.thm"

#

Btw i used ffuf i think its more simple and faster

patent arrow Feb 24, 2020, 2:37 PM

#

@eager fulcrum I have the message 'initalization sequence completed'

#

@eager fulcrum I have also a pro account

eager fulcrum Feb 24, 2020, 2:39 PM

#

Do you get dropouts or just... Nothing?

patent arrow Feb 24, 2020, 2:42 PM

#

📎 JPEG_20200224_154153.jpg

rotund furnace Feb 24, 2020, 3:17 PM

#

W8 a lilbit

barren birch Feb 24, 2020, 3:51 PM

#

@patent arrow use the command ps aux | grep "openvpn" and show us the output?

#

Or just do sudo killall openvpn and then open a new connection.

#

If that fails, maybe regenerate the config file, or speak to Skidy.

patent arrow Feb 24, 2020, 5:43 PM

#

Great thank, I could figure it out, couldn't ping the machines but I can access the 🤔

#

But thanks for your help

eager fulcrum Feb 24, 2020, 5:44 PM

#

Some machines have ping disabled @patent arrow

patent arrow Feb 24, 2020, 5:45 PM

#

But 3 machine, Hackpark, Alfred and another one this with the baseball as icon?

barren birch Feb 24, 2020, 5:55 PM

#

Not sure about Boiler CTF, but Hackpark and Alfred are both Windows boxes. If they have their default firewall turned on then you won't be able to ping them.

#

Try it with Cherryblossom @patent arrow (I know that one is ping-able).

#

Forget that -- I just pinged Boiler and it worked fine

#

Have you been assigned an IP on the network? If so, can you ping your own tunnel IP?

languid storm Feb 24, 2020, 6:36 PM

#

Is it normal for hashcat on the Kali VM to only get about 500 passwords into rockyou.txt before completely giving up?

#

Just the usual dictionary cache hit

eager fulcrum Feb 24, 2020, 6:40 PM

#

Weird

languid storm Feb 24, 2020, 6:41 PM

#

Hits it immediately, bypassing gets me about 200-500 passwords in before it gives up

eager fulcrum Feb 24, 2020, 6:41 PM

#

That's real funky

#

The THM kali 2020 machine?

languid storm Feb 24, 2020, 6:41 PM

#

Yeah

eager fulcrum Feb 24, 2020, 6:42 PM

#

I will give it a go

languid storm Feb 24, 2020, 6:42 PM

#

Tested with hashcat which was installed, checked updates, got errors that apparently were due to a version before the current on their site(?). Grabbed it directly from hashcat's page and ran that bin which runs just fine but has the same dictionary cache hit

eager fulcrum Feb 24, 2020, 6:42 PM

#

I'll grab a hash

languid storm Feb 24, 2020, 6:44 PM

#

https://github.com/hashcat/hashcat/issues/2154
Issue with the 2020 kali hashcat mentioned

GitHub

7zip Token length exception hashcat 5.1.0 · Issue #2154 · hashcat/...

hash.txt I have 7-zip file with encoded headers as well. Archive length is 1340195291 bytes 7z2hashcat64-1.3.exe generated hash length of 27514 bytes (attached) Running hashcat 5.1.0 gives (5.0.0 i...

eager fulcrum Feb 24, 2020, 6:44 PM

#

Nope my browser access is broken too

languid storm Feb 24, 2020, 6:44 PM

#

Grabbing their beta gets me past the error but then run into that dictionary cache haha

eager fulcrum Feb 24, 2020, 6:44 PM

#

I'd use John for zip related stuff

languid storm Feb 24, 2020, 6:45 PM

#

Was moving onto that next but figured I'd mention the issue

patent arrow Feb 24, 2020, 6:57 PM

#

@barren birch okay, thank you I will try it tomorrow

supple sonnet Feb 24, 2020, 11:17 PM

#

ew, parrot

languid storm Feb 24, 2020, 11:32 PM

#

Eh?

chrome badger Feb 25, 2020, 1:09 AM

#

Man, how the hell do you get into the .ssh directory to login as alice

barren birch Feb 25, 2020, 1:10 AM

#

I'm guessing that's for the Linux Basics room @chrome badger? If it's asking for help with a specific room, throw it over in #room-help and I'll give you a hand with it there?

chrome badger Feb 25, 2020, 1:13 AM

#

Ahh thank you much!

deep trellis Feb 25, 2020, 10:49 AM

#

Nope my browser access is broken too
@eager fulcrum What do you mean sorry?

#

What do I need to fix?

eager fulcrum Feb 25, 2020, 11:02 AM

#

Comes up with the login

deep trellis Feb 25, 2020, 1:42 PM

#

Does this keep happening?]

#

If you terminated and re-deploy?

#

Seems like its happening a lot, I need to look into why

sudden depot Feb 25, 2020, 7:09 PM

#

I have this difficulties to ping machines through my Kali as well as your online Kali machine

#

Is there any issues with ip addressing/routing ?

barren birch Feb 25, 2020, 7:10 PM

#

Online Kali machine should have worked no matter what. The most common problem with the VPN is that you've got the file open on more than one computer at once (thus trying to assign the same IP more than once)

#

Do us a favour, shutdown your Kali VM, then close OpenVPN on Windows?

sudden depot Feb 25, 2020, 7:11 PM

#

I have only one connecion for openvpn, but still no ping. the same issue with online kali

#

yes i did shutdown kali

#

restart openvpn but still the same thing

barren birch Feb 25, 2020, 7:11 PM

#

Online Kali is more interesting. Can you show me the output of ifconfig on the in-browser Kali?

eager fulcrum Feb 25, 2020, 7:13 PM

#

@sudden depot Some machines don't respond to pings.

barren birch Feb 25, 2020, 7:13 PM

#

That too ^^
Which machines have you been trying?

sudden depot Feb 25, 2020, 7:14 PM

#

HackPArk machine

barren birch Feb 25, 2020, 7:15 PM

#

Hackpark is Windows. I don't know if the firewall is on -- gimme a second

eager fulcrum Feb 25, 2020, 7:15 PM

#

Someone else was doing that and couldn't get a ping

barren birch Feb 25, 2020, 7:15 PM

#

Unless James knows

eager fulcrum Feb 25, 2020, 7:15 PM

#

So most likely it doesn't respond

#

Someone else was reporting that it didn't respond so I'm going to go out on a limb here and say it doesn't

barren birch Feb 25, 2020, 7:16 PM

#

You're probably right there. I'm also going to suggest that it probably takes about 5 minutes (at least) to boot up. You're a subscriber so it won't take that long, but it's likely a relatively substantial length of time

sudden depot Feb 25, 2020, 7:17 PM

#

📎 Screenshot_from_2020-02-25_19-13-47.png

#

Kali ip addr command result

eager fulcrum Feb 25, 2020, 7:17 PM

#

The machine doesn't respond to ICMP pings, so you won't get a ping

sudden depot Feb 25, 2020, 7:18 PM

#

all right, got the point. thanks guys

barren birch Feb 25, 2020, 7:19 PM

#

@sudden depot That's confirmed -- it definitely doesn't respond to pings

📎 unknown.png

novel crag Feb 26, 2020, 4:16 AM

#

I accidently left my own created team. Is there a way to get back in?

spare blaze Feb 26, 2020, 6:41 AM

#

Empty teams don't disband?

novel crag Feb 26, 2020, 8:20 AM

#

I tries to create a new team with the same name but it says "Your team name is already take."

deep trellis Feb 26, 2020, 11:48 AM

#

@novel crag PM me, I can get you back in

gray phoenix Feb 26, 2020, 4:14 PM

#

Hello, I deployed kali and was in already vulnerable vm room but my kali doesn't reach private ip address

barren birch Feb 26, 2020, 4:15 PM

#

This is the Subscriber online Kali @gray phoenix?

gray phoenix Feb 26, 2020, 4:15 PM

#

Yes, it is.

barren birch Feb 26, 2020, 4:16 PM

#

Huh, how strange. You shouldn't need the VPN to connect using the TryHackMe online Kali

#

Which vulnerable room is it?

gray phoenix Feb 26, 2020, 4:16 PM

#

Vulnversity

deep trellis Feb 26, 2020, 4:16 PM

#

You don't need to be connected OpenVPN if you're using our Kali VM 🙂

barren birch Feb 26, 2020, 4:17 PM

#

@gray phoenix If you run ifconfig on the Kali machine, does it show you an IP address in the 10.*.*.* range?

gray phoenix Feb 26, 2020, 4:17 PM

#

Yes i know @deep trellis but when i try to reach vulnuniversity ip address i get connection error (nmap, ping etc)

#

Kali IP address: 10.10.x.x

barren birch Feb 26, 2020, 4:17 PM

#

Also, could you screenshot that error? 🙂

gray phoenix Feb 26, 2020, 4:18 PM

#

Will send PM

barren birch Feb 26, 2020, 4:18 PM

#

Should be Ok here, but fair enough

gray phoenix Feb 26, 2020, 4:18 PM

#

No, I will send my IP address on dm 😄

barren birch Feb 26, 2020, 4:19 PM

#

Yeah, it should be safe here, but that's Ok 😄

#

So yeah, it's on the network. Hmm. Just booting vulnversity to see if I'm getting any errors with it

gray phoenix Feb 26, 2020, 4:20 PM

#

Oh okey

#

@barren birch i'm reach now

barren birch Feb 26, 2020, 4:21 PM

#

As in, it's working?

gray phoenix Feb 26, 2020, 4:21 PM

#

idk, i didn't anything 😄

#

📎 unknown.png

#

📎 unknown.png

barren birch Feb 26, 2020, 4:22 PM

#

Ah, yeah, they take a wee while to boot 🙂
That might have been it

#

The one I threw up took a minute or so to come online

gray phoenix Feb 26, 2020, 4:23 PM

#

Thank you for help, arigato

barren birch Feb 26, 2020, 4:23 PM

#

No problem 😄

viral lance Feb 26, 2020, 4:31 PM

#

Hey guys, is there a way to kill all active VPN i may have open? I keep having issues with disconnecting from the box. Ill have to reconnect every 30-90 seconds. or sometimes ill lose connection in the middle of the scan and have to reconnect to the VPN 2-3 times before it works again.

#

But the reason im asking about killing the connections is that no matter if I disconnect all my known VPN sessions, it will still show as im connected on the website VPN status

barren birch Feb 26, 2020, 4:32 PM

#

sudo killall openvpn

eager fulcrum Feb 26, 2020, 4:32 PM

#

-9

barren birch Feb 26, 2020, 4:33 PM

#

@viral lance also make sure that you're not connected on any other machines

eager fulcrum Feb 26, 2020, 4:33 PM

#

Also if you're connected from another device it won't help

#

Damn you beat me too it

viral lance Feb 26, 2020, 4:34 PM

#

yeah tahts the thing. I've used a few different boxes and im pretty sure I've terminated the vpn sessions on all of them. But ill give it another try, thanks

#

thats*

barren birch Feb 26, 2020, 4:34 PM

#

If you've only been doing it on VMs, just restart 'em all. That will do it

viral lance Feb 26, 2020, 9:36 PM

#

finally found and killed the rouge vpn connection. Thanks guys

slender adder Feb 27, 2020, 8:55 AM

#

hey everybody

#

when i try to use nmap

#

all port always filtered

#

how can i fixed this problem?

crude yew Feb 27, 2020, 8:56 AM

#

it depends from the machine your are scanning. Can you be more specific?

slender adder Feb 27, 2020, 8:56 AM

#

i'm using kali linux

#

and i also open VPN via .opvn file

crude yew Feb 27, 2020, 8:58 AM

#

yes, but which machine are you scanning? which room?

slender adder Feb 27, 2020, 8:58 AM

#

ctf 100

#

in stage 1

#

📎 unknown.png

#

all port are filtered

crude yew Feb 27, 2020, 9:02 AM

#

🤨

slender adder Feb 27, 2020, 9:03 AM

#

the command is nmap -Pn -v -T5 -p3000-3100 10.10.74.253

crude yew Feb 27, 2020, 9:03 AM

#

i've not tryed that room, so try asking in the rooms-help channel

#

maybe try without -T5. set it to 3

slender adder Feb 27, 2020, 9:07 AM

#

still filtered

#

😦

cedar agate Feb 27, 2020, 4:40 PM

#

Hello everyone

#

I'm having trouble with the RP:Nmap room (but I think it's more a bug than my fault)

eager fulcrum Feb 27, 2020, 4:41 PM

#

Ooh, curious

barren birch Feb 27, 2020, 4:41 PM

#

Probably better over in #site-bugs @cedar agate

cedar agate Feb 27, 2020, 4:41 PM

#

Yeah, but it may be a bug not related to TryHackMe (I'm not sure, that's why I'm checking with you guys)

barren birch Feb 27, 2020, 4:42 PM

#

Ah, cool 😄
Go for it

cedar agate Feb 27, 2020, 4:43 PM

#

I'm launching the final scan : nmap --script=vuln -vv <IP of the room>

#

Nevermind, I'm just way too impatient X)

#

The script seemed frozen at 98.52%
It reminded me of an old bug I had (see in #site-bugs )
But actually after 20 minutes it worked

#

Thanks for the help anyway

eager fulcrum Feb 27, 2020, 4:46 PM

#

Yeah it's very slow

mossy ermine Feb 27, 2020, 6:04 PM

#

@deep trellis Hey they timestamp is messed up for any room i try to run. it's starting at 7am ???

#

doesn't matter whether or not i am connected to vpn or not

#

i'm in the central time zone if that matters

eager fulcrum Feb 27, 2020, 6:07 PM

#

Yep, that's a known thing

#

it tries to pick it up from whatever you're accessing the page from but sometimes timezones break

mossy ermine Feb 27, 2020, 6:09 PM

#

k thnks as long as your aware

eager fulcrum Feb 27, 2020, 6:10 PM

#

There was discussion of it becoming a countdown instead but I don't think that was ever implemented

mossy ermine Feb 27, 2020, 6:11 PM

#

a countdown would be cool

eager fulcrum Feb 27, 2020, 11:50 PM

#

@prime spear

📎 unknown.png

#

#general

prime spear Feb 27, 2020, 11:50 PM

#

alright

#

sorry

turbid crystal Feb 28, 2020, 6:03 AM

#

I subscribed to tryhackme, the time for the machine to expires is about 7 hours I guess

#

but I'm working with the machine halfway then it shutdowns itself

#

why ?

#

about 45 minutes the machine will shutdown

#

have to deploy it again

steel rapids Feb 28, 2020, 6:30 AM

#

The machine should deploy for 1 hour at a time, with 1 hour extensions should you need them. I suspect that's a time issue, i.e. the site thinks you're in a different time zone than you are

turbid crystal Feb 28, 2020, 6:34 AM

#

📎 Screenshot_from_2020-02-28_13-33-18.png

#

this is before I add time

#

this is after

📎 after.png

steel rapids Feb 28, 2020, 6:34 AM

#

What time zone are you in?

turbid crystal Feb 28, 2020, 6:34 AM

#

+7 UTC

steel rapids Feb 28, 2020, 6:34 AM

#

And what does your VM report (if you're using the website in a VM)

turbid crystal Feb 28, 2020, 6:34 AM

#

it reports nothing

#

it just simply turn it off

steel rapids Feb 28, 2020, 6:35 AM

#

As in what time zone is your VM

turbid crystal Feb 28, 2020, 6:35 AM

#

and even though the vm turn off, I still have to press terminate on the website

#

in order to deploy it again

#

the time in VM is 6:35 AM now

steel rapids Feb 28, 2020, 6:36 AM

#

I'm not sure on this one, I'd get @deep trellis to look when he's free

turbid crystal Feb 28, 2020, 6:36 AM

#

nice to hear

#

thanks

#

it's very annoying for this case

#

I dont know if anyone has this issue before

#

for the linux machine

#

also the same thing

#

just to let you know

#

not only the vm running on website

copper mist Feb 28, 2020, 10:30 AM

#

@turbid crystal, it has been addressed before, I think @deep trellis mentioned using a countdown instead of timezones

turbid crystal Feb 28, 2020, 10:57 AM

#

using the count down ?

deep trellis Feb 28, 2020, 10:58 AM

#

yeah, I have a big push for THM which includes: countdown, rearrange tasks, publish time not create room time for new rooms, etc.

#

Can't push as of yet, as this new game mode isn't complete yet.

turbid crystal Feb 28, 2020, 11:06 AM

#

so.....this mode countdown hasn't completed yet right ?

barren birch Feb 28, 2020, 11:19 AM

#

Correct, @turbid crystal

turbid crystal Feb 28, 2020, 11:21 AM

#

@turbid crystal, it has been addressed before, I think @deep trellis mentioned using a countdown instead of timezones
this make me so confuse 😄

turbid crystal Feb 28, 2020, 11:42 AM

#

I hope that you can fix the issue asap

#

the idea for each path is nice

copper mist Feb 28, 2020, 11:43 AM

#

@turbid crystal, so instead of using timezones, your VM will terminate at 9:23:51, it will instead display your VM will terminate in 52 minutes - Example

turbid crystal Feb 28, 2020, 11:43 AM

#

but doing it halfway and then it shutdowns without permission is so turn me down

eager fulcrum Feb 28, 2020, 12:05 PM

#

@turbid crystal path?

#

There aren't path changes suggested

turbid crystal Feb 28, 2020, 4:17 PM

#

I mean learning path

copper mist Feb 28, 2020, 10:53 PM

#

Is anyone getting an SSL error? None of the site images are loading for me then refused connection. Tried 3 browsers

deep trellis Feb 28, 2020, 10:54 PM

#

Which page is this for Will?

copper mist Feb 28, 2020, 10:54 PM

#

Room pages - Currently on the Docker room

#

Getting errors from raw.ratelimited.me, I'm guessing image hosting for THM?

#

Other img src's are fine

deep trellis Feb 28, 2020, 11:02 PM

#

Weird hm

#

Can you link me the room plz?

copper mist Feb 28, 2020, 11:02 PM

#

https://tryhackme.com/room/runcescape

TryHackMe | runcescape

TryHackMe is an online platform for learning and teaching cyber security.

#

📎 unknown.png

#

@deep trellis It's their fault

📎 unknown.png

distant carbon Feb 28, 2020, 11:06 PM

#

Im trying to do the vulnversity room and the vpn keeps randomly disconnecting for some reason

#

will work for a few minutes then dc

#

then work again a few minutes later

barren birch Feb 28, 2020, 11:06 PM

#

The most common reason for that is having multiple instances open

#

Have you only used it in the one machine @distant carbon?

distant carbon Feb 28, 2020, 11:08 PM

#

yes let me check if they are still open ....

barren birch Feb 28, 2020, 11:08 PM

#

Yep. Try ps aux | grep openvpn if it's a Linux machine

distant carbon Feb 28, 2020, 11:08 PM

#

ok

#

yeah that was it pepehands

barren birch Feb 28, 2020, 11:10 PM

#

Perfect 😁

zealous yoke Feb 28, 2020, 11:14 PM

#

catches me out far more often then I'd like to admit lmao

deep trellis Feb 28, 2020, 11:24 PM

#

@copper mist Oh right, I'll take a look - thanks for letting me know

copper mist Feb 28, 2020, 11:33 PM

#

No worries, hopefully they're up soon. I think those images provide context

marsh hatch Feb 29, 2020, 3:19 AM

#

Is it normal that these machines are slow?

naive dust Feb 29, 2020, 3:21 AM

#

@marsh hatch it depends on the machine

naive dust Feb 29, 2020, 10:28 AM

#

@deep trellis Hi can I chat you up?

deep trellis Feb 29, 2020, 11:39 AM

#

Yeah sure

#

Unless its to-do with room help, then use the #room-help channel 🙂

long thistle Feb 29, 2020, 9:59 PM

#

I've having constant issues with connectivity to hackpark (both front end and reverse shell) and it loads very slowly. Is this a known issue or could this just be my side?

warm spear Feb 29, 2020, 10:26 PM

#

@copper mist that's sherlocks room, they use that image hosting and it broke

copper mist Feb 29, 2020, 10:31 PM

#

Yeah, it's still down which is annoying

warm spear Mar 1, 2020, 12:08 AM

#

dw

#

it has been down for months

#

🙂

#

skidy

copper mist Mar 1, 2020, 9:59 AM

#

Bummer

steel rapids Mar 1, 2020, 10:03 AM

#

Honestly, as soon as I find the original images I can fix it, but the room is still doable without them so it's not high on my list

#

Pepega fix would come first

copper mist Mar 1, 2020, 10:03 AM

#

Ah okay, how much context do the images provide?

steel rapids Mar 1, 2020, 10:04 AM

#

They were more of a visual aid for people that might not have used tmux before

#

So just showing different commands in different windows type thing

copper mist Mar 1, 2020, 10:05 AM

#

Okay, cheers 🙂

finite tinsel Mar 1, 2020, 12:39 PM

#

Didnt receive my badge yet cri

steel rapids Mar 1, 2020, 12:39 PM

#

@deep trellis

deep trellis Mar 1, 2020, 1:04 PM

#

You did:)

daring vessel Mar 1, 2020, 2:46 PM

#

Hey! I want to set up a VirtualBox with kali, but it doesn't even detect my tl-wn722n with atheros chip in install . Can someone help ?

zealous yoke Mar 1, 2020, 2:53 PM

#

You should be able to use "NAT" as the network adapter on Virtualbox for Kali @daring vessel !

daring vessel Mar 1, 2020, 2:53 PM

#

can I do airmon-ng with NAT enabled ?

zealous yoke Mar 1, 2020, 2:53 PM

#

Post-install, if you really want to "Bridge" to the adapter, you may be able to install firmware etc for the adapter

#

can I do airmon-ng with NAT enabled ?
@daring vessel Not with "NAT" but it'll get you through the install stage, to where you can probably find firmware for your adapter

#

and then change from "NAT" to "Bridged" where you should be able to use airmon 🙂

daring vessel Mar 1, 2020, 2:55 PM

#

oh, I see

zealous yoke Mar 1, 2020, 2:59 PM

#

I can't guarantee it'll work but this might be of use?
https://www.youtube.com/watch?v=BKQXcOH9zCE&feature=youtu.be

It's Kali 2020 with tl-wn722n 🙂

YouTube

Amine Tech

[Kali Linux 2020.1] How to enable Monitor Mode and Packet Injection...

Please Support Us via Paypal: http://bit.ly/30yiz2V
Subscribe for more : http://bit.ly/2JY73YL

This video will show you How To Finally Enable Monitor Mode and Packet Injection on TP-Link TL-WN722N v2/v3 on Kali Linux 2020.1 (Kernel 5...

▶ Play video

daring vessel Mar 1, 2020, 3:02 PM

#

ah, thanks, I'll give it a try

#

mine is V1

#

with the atheros

zealous yoke Mar 1, 2020, 3:05 PM

#

Atheros AR9721 chipset aye?

daring vessel Mar 1, 2020, 3:05 PM

#

yup

zealous yoke Mar 1, 2020, 3:06 PM

#

apparently that's supported by airmon, so yeah you might just have to google around for firmware - or Kali will pull them after you've launched into desktop etc

daring vessel Mar 1, 2020, 3:07 PM

#

ok, so after the install I'll unplug my ethernet cable, then switch to bridged ( with my wifi card in USB , as right now is pretty useless if it is NAT )and boot in linux right ?

zealous yoke Mar 1, 2020, 3:08 PM

#

eh NAT is only useless for airmon

daring vessel Mar 1, 2020, 3:08 PM

#

but, it can't be detected if I use it in NAT by linux , right ?

#

I mean, that's what I've been told and google couldn't answer me ......

zealous yoke Mar 1, 2020, 3:09 PM

#

but it'll get you through post-install where installing kernel updates etc might pull the firmware or you can find a git repo (usually the case) to use to install the firmware

daring vessel Mar 1, 2020, 3:09 PM

#

( detected as a model )

zealous yoke Mar 1, 2020, 3:09 PM

#

then after its picked up switching to bridged should be a-okay for airmon 🙂

daring vessel Mar 1, 2020, 3:09 PM

#

oh ok

steel rapids Mar 1, 2020, 3:09 PM

#

NAT will mimick an ethernet connection

daring vessel Mar 1, 2020, 3:10 PM

#

but can linux identify what card am I using ?

#

in NAT

zealous yoke Mar 1, 2020, 3:11 PM

#

when using NAT, Virtualbox makes a virtual network card that it gives to the VM

#

so It'd see the virtual network card provided by Virtualbox, but the VM wont identify it as what your actual physical network card is, if that makes sense?

daring vessel Mar 1, 2020, 3:13 PM

#

yeah, I understand

zealous yoke Mar 1, 2020, 3:15 PM

#

tl;dr use NAT to get through to install things like kernel-headers, etc and/or try to find a git repo of that specific card (although I do believe it's one of the better ones for Kali). Add your wireless adapter and use iwconfig to see if it's picked up etc

#

lsusb -t will let you see if it's picked up as a USB device

copper mist Mar 1, 2020, 3:16 PM

#

Openvpn .ovpn doesn't connect on mac cli, same file works when connecting with tunnelbrick... annoying

daring vessel Mar 1, 2020, 3:20 PM

#

📎 unknown.png

#

what should I go for ?

zealous yoke Mar 1, 2020, 3:23 PM

#

select the "Kali desktop environment" tickbox, but the rest looks okay - Perhaps checking the "Install tools by purpose" and both "Information gathering" and "Sniffing and spoofing" to ensure airmon gets installed in this context?

#

I haven't used the 2020 installer yet so that's a bit different 👀

daring vessel Mar 1, 2020, 3:24 PM

#

I've got everything from "install tools by purpose" to the down list checked

#

cuz that's how I remember kali

#

wasn't it Gnome?

#

like, the old kali linux ?

zealous yoke Mar 1, 2020, 3:26 PM

#

Oh yeah, it normally uses Gnome as far as I can remember

daring vessel Mar 1, 2020, 3:27 PM

#

well, I guess I'll try something new

daring vessel Mar 1, 2020, 4:47 PM

#

booting with bridged, im so excited

zealous yoke Mar 1, 2020, 6:46 PM

#

Sweet! I assume you managed to get it to work? 😄

eager fulcrum Mar 1, 2020, 8:02 PM

#

@daring vessel you have to forward the nic if you want to use aircrack

barren birch Mar 1, 2020, 8:04 PM

#

I seem to remember having to buy an external NIC with monitor mode as well, as my internal one didn't support it

#

That's often the easy option

eager fulcrum Mar 1, 2020, 8:09 PM

#

You need passthrough either way

#

I've passed through internal usb ones and external usb ones

#

Not tried pcie but it's possible

barren birch Mar 1, 2020, 8:09 PM

#

Yeah. That's why I'm adding it as an additional step 😄

vocal wasp Mar 2, 2020, 7:50 AM

#

What can be done to fix BeEF service?

📎 unknown.png

gray phoenix Mar 2, 2020, 7:28 PM

#

Does VPN low speed?

eager fulcrum Mar 2, 2020, 7:33 PM

#

@gray phoenix huh?

spare blaze Mar 2, 2020, 7:33 PM

#

What is the context? What VPN?

gray phoenix Mar 2, 2020, 7:43 PM

#

I'm getting connection error frequently. TryHackMe VPN :/

spare blaze Mar 2, 2020, 7:43 PM

#

What's the error?

gray phoenix Mar 2, 2020, 7:47 PM

#

Don't see any error but sessions dropping generally and I can't connect again in 1,2 minutes.

eager fulcrum Mar 2, 2020, 7:54 PM

#

Make sure you're not running any other connections to the VPN

#

like multiple sessions

gray phoenix Mar 2, 2020, 7:54 PM

#

I was in 16th session on meterpreter :D, I'm sure. I have one VPN connection

eager fulcrum Mar 2, 2020, 7:55 PM

#

Likely to just be your system then

#

If you're definitely only connected with one OpenVPN instance

#

and no one else is having issues

barren birch Mar 2, 2020, 7:57 PM

#

@gray phoenix you're a subscriber, yeah? Have you tried using the THM Kali machine?

gray phoenix Mar 2, 2020, 7:59 PM

#

Yes, I'm tried but don't like cause of resetting environment (it's so normal) problems

barren birch Mar 2, 2020, 8:00 PM

#

Yeah, it's a pain in the ass, I agree. Might be worth giving it another shot if the VPN is causing issues though

gray phoenix Mar 2, 2020, 8:01 PM

#

Maybe my country applying service based throttling idk.

mossy ermine Mar 4, 2020, 12:11 AM

#

Is the website down ... can't log into THM? @vapid dawn @deep trellis ??

deep trellis Mar 4, 2020, 12:11 AM

#

Website is up and running

mossy ermine Mar 4, 2020, 12:11 AM

#

k will try to clear cache then

naive dust Mar 4, 2020, 12:11 AM

#

Thm works fine to me

barren birch Mar 4, 2020, 12:12 AM

#

Ditto ^^

mossy ermine Mar 4, 2020, 12:12 AM

#

I'm in bad cache

crude yew Mar 4, 2020, 8:44 AM

#

hello everybody. i'm trying the new Learn Linux room, but i can't ssh the vm neither with putty nor with ssh from terminal.

#

this is the error from putty

📎 unknown.png

#

ok, solved with ssh, but putty doesn't work

barren birch Mar 4, 2020, 9:03 AM

#

When you say solved with SSH but not PuTTY, would that mean you have your VPN connected to two different machines @crude yew?

crude yew Mar 4, 2020, 9:03 AM

#

no, the same machine

#

ssh didn't work cause i mispelled the username

barren birch Mar 4, 2020, 9:04 AM

#

Aha, yeah, that'd do it.
It's interesting, given that PuTTY is just an SSH connection

#

My bet would be something to do with the VPN, frankly

crude yew Mar 4, 2020, 9:10 AM

#

i'll try later on a Windows VM or in a full vpn mode

barren birch Mar 4, 2020, 10:20 AM

#

*sigh* @deep trellis?

📎 unknown.png

#

Problem's back

naive dust Mar 4, 2020, 10:20 AM

#

What

#

paradox

barren birch Mar 4, 2020, 10:20 AM

#

Sorry mate, pinged the wrong person 😓

naive dust Mar 4, 2020, 10:20 AM

#

!boop @barren birch

barren birch Mar 4, 2020, 10:24 AM

#

Huh, no, that's a bug, not tech-support

naive dust Mar 4, 2020, 10:42 AM

#

I have a question, a group I joined on discord says the OSCP Path machines are no stable 🤔

#

??

#

Is this true and hope I won't encounter issues when I sign up

spare blaze Mar 4, 2020, 11:26 AM

#

If you mean THM's OSCP Path machines, then there is one that I know of, where you can't do a question

deep trellis Mar 4, 2020, 2:46 PM

#

@barren birch When does the problem occur? Are you deploy 2 of more machines that have in-browser functionality? What rooms are doing this?

eager fulcrum Mar 4, 2020, 2:49 PM

#

I'm interested now

barren birch Mar 4, 2020, 2:49 PM

#

Yep -- it's the two machines cause. It was when I was trying to troubleshoot the SSH thing in Pars' Linux room. Threw up the Kali VM, then tried to use the new Windows Base to test it with PuTTY when it became clear that CLI SSH worked but PuTTY didn't. Windows Base threw a fit, so I terminated it, and when I switched back into Kali it was asking for authentication.
So yeah, it was two Guacamole machines -- Kali VM and Windows Base.

eager fulcrum Mar 4, 2020, 2:49 PM

#

emotionally invested

naive dust Mar 4, 2020, 2:50 PM

#

^

deep trellis Mar 4, 2020, 2:50 PM

#

Yep -- it's the two machines cause. It was when I was trying to troubleshoot the SSH thing in Pars' Linux room. Threw up the Kali VM, then tried to use the new Windows Base to test it with PuTTY when it became clear that CLI SSH worked but PuTTY didn't. Windows Base threw a fit, so I terminated it, and when I switched back into Kali it was asking for authentication.
So yeah, it was two Guacamole machines -- Kali VM and Windows Base.
@barren birch Looking into it now:)

naive dust Mar 4, 2020, 2:50 PM

#

<3 @deep trellis

deep trellis Mar 4, 2020, 2:52 PM

#

@barren birch Out of interest, how quickly are you deploy both machines?

#

Like, the time between deploying Kali and Windows Base

barren birch Mar 4, 2020, 2:53 PM

#

My guess would would be a couple of minutes, but I can't remember exactly. I can try to replicate?

deep trellis Mar 4, 2020, 2:53 PM

#

yeah its weird, I'm trying to replicate the issue but can't

#

Thanks:)

naive dust Mar 4, 2020, 2:54 PM

#

No one even answered me 😤

#

Nevermind will figure something out

deep trellis Mar 4, 2020, 2:56 PM

#

Can you right click the "Access in browser" and inspect element, then see if both links are the same

barren birch Mar 4, 2020, 2:59 PM

#

Hmm. I'm struggling to replicate as well now.

#

Just trying that 👍

#

Yep, both links are identical

deep trellis Mar 4, 2020, 3:00 PM

#

Yeah its weird, hm

#

If it happens again, can you let me know if the links change

barren birch Mar 4, 2020, 3:01 PM

#

As in, change from what they are now, or are different to each other at the time?

deep trellis Mar 4, 2020, 3:02 PM

#

each other at the time

barren birch Mar 4, 2020, 3:02 PM

#

Yep, will do 👍

fleet sluice Mar 4, 2020, 3:21 PM

#

why my kali ip keeps changing?

#

isn't permanent for me?

barren birch Mar 4, 2020, 3:24 PM

#

No, it's not permanent @fleet sluice

naive dust Mar 4, 2020, 3:28 PM

#

Yeah every reset it changes

vapid dawn Mar 4, 2020, 3:50 PM

#

Hey @r073r#4990
Our OSCP machines are fairly stable - one or two have known issues but we're looking to get them fixed :))

barren birch Mar 4, 2020, 3:51 PM

#

In the mean time, could someone please pin an explanation for Hackpark and Alfred into #room-help?..

vapid dawn Mar 4, 2020, 3:53 PM

#

I'll edit a write up for those two boxes over the next 2 days

eager fulcrum Mar 4, 2020, 3:53 PM

#

Hackpark I haven't seen that many complaints

vapid dawn Mar 4, 2020, 3:53 PM

#

** edit the room

eager fulcrum Mar 4, 2020, 3:53 PM

#

Alfred's last step to get the root flag needs some investigation, I think it'd be cool to explain why you can't see the flag even though you're System

severe mason Mar 5, 2020, 12:39 AM

#

Hi, sorry if this has already been mentioned, I just subscribed to THM and deployed the web Kali machine, noticing that access via SSH and RDP are only secured via preset user/pass combo's, -

Are there any other mechanisms in place to stop anonymous users from using the same combination of credentials to remote into the machine and if not, are there any plans in the future to perhaps use something like SSH keys as an authentication mechanism instead?

(Sorry if this is the wrong channel for the question!)

Thanks,

zealous yoke Mar 5, 2020, 12:40 AM

#

The instance that you deploy i.e. the Kali machine - despite it being a public ip, it's assigned to you, and is non-persistent after termination @severe mason

barren birch Mar 5, 2020, 12:41 AM

#

It lasts for two hours max, and has a random public IP. Shouldn't matter hugely

zealous yoke Mar 5, 2020, 12:41 AM

#

so someone could log into it, they'd have to guess the IP, know the creds and well yeah :^

severe mason Mar 5, 2020, 12:41 AM

#

That is true but i'm assuming all the machine's are AWS based and therefore using ec2 IP ranges?

#

so it would be trivial to brute force

zealous yoke Mar 5, 2020, 12:42 AM

#

The Kali ones, specifically, yes

#

the vast-majority of the other rooms are all within the THM vpn network

severe mason Mar 5, 2020, 12:43 AM

#

No worries, CMNatic do you work with THM? sorry literally just joined the channel so don't know who's who!

eager fulcrum Mar 5, 2020, 12:43 AM

#

@severe mason You can immediately change your password when you log in

#

passwd

zealous yoke Mar 5, 2020, 12:44 AM

#

Nope! Just somewhat an avid-user 🙂 @severe mason

#

Welcome although! Are you enjoying THM so far?

severe mason Mar 5, 2020, 12:47 AM

#

Ah right! Just as a suggestion for any THM contributors that might see this, I think having an SSH key option made available would be a great addition to the platform; @zealous yoke absolutely! I've been using my own cloud Kali build since I signed up earlier today and didn't even realise there was a web version until about 20 minutes ago! just thought i'd pop in to see if there were any plans to add key based authentication, but the actual labs / rooms are really interesting so far

barren birch Mar 5, 2020, 12:48 AM

#

Don't think it's really an issue tbh @severe mason -- Admins might disagree though; up to Skidy, Ashu and Dark in the end

naive dust Mar 5, 2020, 12:49 AM

#

@severe mason #544951750801752079

barren birch Mar 5, 2020, 12:49 AM

#

Thanks for looking out for it though 😁
Glad you're enjoying as well.

naive dust Mar 5, 2020, 12:49 AM

#

For all suggestions

barren birch Mar 5, 2020, 12:49 AM

#

Well worth putting it into #544951750801752079 for sure

severe mason Mar 5, 2020, 12:50 AM

#

@barren birch True, think I've just been spoiled by AWS!

barren birch Mar 5, 2020, 12:50 AM

#

😁

zealous yoke Mar 5, 2020, 12:50 AM

#

Glad to hear you're enjoying it, it's a great platform. And that's something I'll consider at the very least! #544951750801752079 will be the best place. But for the future should you need any help re. rooms/challenges, #room-help is great! Its a bit slow sometimes, so stating your problem rather then "is anyone around..." usually ends up being more productive for all parties 🙂

severe mason Mar 5, 2020, 12:52 AM

#

Thanks all, i'll keep it in mind if I come across anything else, didn't expect such a rapid reply from so many people haha

all the best

barren birch Mar 5, 2020, 12:52 AM

#

It's a great community -- very helpful. Anything you stick in #room-help will get you help
Well worth doing the bot verify command as well @severe mason

zealous yoke Mar 5, 2020, 12:52 AM

#

all of the above :^^

eager fulcrum Mar 5, 2020, 12:54 AM

#

Get yourself a fancy role!

boreal cove Mar 5, 2020, 1:40 AM

#

in vulnversity, is the website to scan then tryhack web

#

trying to stay in scope

zealous yoke Mar 5, 2020, 1:42 AM

#

You'll be scanning the machine / IP that you deploy from the room @boreal cove you'll have to connect to the THM network to access it

#

You can confirm your connection / download your config here: https://tryhackme.com/access

TryHackMe | Login

TryHackMe is an online platform for learning and teaching cyber security.

#

like so:

📎 unknown.png

#

in my case, 10.10.173.116 would be my target (whilst connected to the THM network)

barren birch Mar 5, 2020, 1:44 AM

#

We're working on this in different channels, mate 😁

zealous yoke Mar 5, 2020, 1:44 AM

#

oh 😂

barren birch Mar 5, 2020, 1:44 AM

#

Also, someone needs to give you your Community Mentor already

naive dust Mar 5, 2020, 1:45 AM

#

!vpn

sharp bisonBOT Mar 5, 2020, 1:45 AM

#

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

eager fulcrum Mar 5, 2020, 1:45 AM

#

Community Mentor obtained @zealous yoke

barren birch Mar 5, 2020, 1:45 AM

#

There we go 😁

zealous yoke Mar 5, 2020, 1:45 AM

#

woah

eager fulcrum Mar 5, 2020, 1:46 AM

#

I forget I can do these as a mod

naive dust Mar 5, 2020, 1:46 AM

#

We love u @zealous yoke <3

zealous yoke Mar 5, 2020, 1:46 AM

#

I mean I wasn't aiming for it but thanks!

barren birch Mar 5, 2020, 1:46 AM

#

Hehe, not as good as the red, but Purple suits you more than the green

naive dust Mar 5, 2020, 1:46 AM

#

What is purple but a red tint

zealous yoke Mar 5, 2020, 1:46 AM

#

no u animewave

barren birch Mar 5, 2020, 1:46 AM

#

True. I want a colours overhaul anyway tbh

naive dust Mar 5, 2020, 1:47 AM

#

(note I'm not an artist and that's probably wrong but it sounded good at the moment)

zealous yoke Mar 5, 2020, 1:47 AM

#

my eyes agree

barren birch Mar 5, 2020, 1:47 AM

#

I've asked for it once. One of you mods stick it in the mods channel?

#

Complete colour overhaul?

boreal cove Mar 5, 2020, 2:14 AM

#

so i have the issue to be more clear is i can connect vpn and interact with the ip via my terminal but when i try to answer questions and interact with the tryhackme webpage i have to disconnect from the vpn

barren birch Mar 5, 2020, 2:23 AM

#

Huh.. That, shouldn't be happening

#

You're connected via OpenVPN with a downloaded config file, yes?

eager fulcrum Mar 5, 2020, 2:24 AM

#

Oh, I know what it could be

boreal cove Mar 5, 2020, 2:24 AM

#

yes

eager fulcrum Mar 5, 2020, 2:24 AM

#

If your network is the same subnets as the THM network

barren birch Mar 5, 2020, 2:24 AM

#

Ooh, yeah, that could do it

#

Can you show us the output of ifconfig @boreal cove?

#

Or ipconfig all if you're on windows

boreal cove Mar 5, 2020, 2:25 AM

#

sure

#

i just rebooted my vm

#

📎 unknown.png

eager fulcrum Mar 5, 2020, 2:29 AM

#

Weird, that shouldn't interfere with the VPN etc

boreal cove Mar 5, 2020, 2:30 AM

#

right??

#

if i disconnect form the vpn at the top of the os the THM Access page then says i am connected

eager fulcrum Mar 5, 2020, 2:30 AM

#

The access page isn't very reliable

#

It takes a while to update

#

even with refreshes

barren birch Mar 5, 2020, 2:31 AM

#

@boreal cove you wouldn't happen to be using Burpsuite would you?

boreal cove Mar 5, 2020, 2:31 AM

#

i am not currently

barren birch Mar 5, 2020, 2:31 AM

#

Have you recently?

boreal cove Mar 5, 2020, 2:31 AM

#

ill chec my proxy

barren birch Mar 5, 2020, 2:31 AM

#

Worth checking

boreal cove Mar 5, 2020, 2:38 AM

#

yup still no lov

barren birch Mar 5, 2020, 2:38 AM

#

Can you connect to any other websites?

boreal cove Mar 5, 2020, 2:39 AM

#

nope

barren birch Mar 5, 2020, 2:39 AM

#

Ok, try doing sudo killall openvpn

#

Then try going to another website

boreal cove Mar 5, 2020, 2:41 AM

#

that works

barren birch Mar 5, 2020, 2:41 AM

#

Definitely the VPN then. Huh.

#

Ok. Try once more, pull up a VPN connection and try it?

boreal cove Mar 5, 2020, 2:41 AM

#

yeah i couldnt resolve dns with it on

#

let me try

barren birch Mar 5, 2020, 2:42 AM

#

Oof. Yeah, they're only supposed to be intercepting traffic that's headed to the THM network -- your normal traffic shouldn't be being redirected into the THM network at all.

boreal cove Mar 5, 2020, 2:43 AM

#

no luck

barren birch Mar 5, 2020, 2:43 AM

#

Sounds like all of your traffic is getting sent into the TryHackMe network, which explains why you've not got any connection, because machines in there have no internet either.

boreal cove Mar 5, 2020, 2:43 AM

#

corret

barren birch Mar 5, 2020, 2:43 AM

#

Try one more thing for me, then I'll just pass it along to the admins to do some troubleshooting at the server end

#

Can you regenerate the config file and try that?

#

Kill the VPN connection first though

boreal cove Mar 5, 2020, 2:45 AM

#

so i killed von went to THM and hit the regenerate on the page

barren birch Mar 5, 2020, 2:45 AM

#

Yep, redownload the config file and connect with that?

boreal cove Mar 5, 2020, 2:49 AM

#

no love

barren birch Mar 5, 2020, 2:50 AM

#

Ok. Guessing Skidy and Ashu are likely both asleep, but I'll ping 'em anyway. They should be able to get it sorted out in the morning 😄
Benefits of having access to the logs

boreal cove Mar 5, 2020, 2:50 AM

#

📎 unknown.png

#

thanks

#

im logging off as well

barren birch Mar 5, 2020, 2:52 AM

#

@deep trellis -- got a VPN problem here. Seems to be routing all traffic, rather than just traffic directed into the THM network. It's working for accessing deployed machines, but with the VPN active we're not able to access anything else. Any chance you could take a look at it from the server end? IP is 10.8.25.231 🙂

boreal cove Mar 5, 2020, 2:53 AM

#

THNX

barren birch Mar 5, 2020, 2:54 AM

#

No Problem @boreal cove 😄
Oh, what's your username on TryHackMe by the way? That might be useful

vapid dawn Mar 5, 2020, 9:43 AM

#

ah that's weird

#

We've had that issues ages ago

#

and should already be fixed

#

Would you mind regenerating your OPENVPN config file and trying again ?

barren birch Mar 5, 2020, 10:22 AM

#

For @boreal cove, @vapid dawn. It's been regenerated once, which didn't work -- not sure if you're meaning that as a possible fix or as a "I've changed something, try again" 😄

eager fulcrum Mar 5, 2020, 12:27 PM

#

Check your vpn logs @sharp apex

#

Might be the VPN is disconnecting you

sharp apex Mar 5, 2020, 12:28 PM

#

it would say if it was

#

but it doesnt

#

i think its cos there are too many ppl on the server

eager fulcrum Mar 5, 2020, 12:28 PM

#

Blue doesn't have a bug that does that, just a few others

#

Nah

#

I'll go do blue right now

sharp apex Mar 5, 2020, 12:28 PM

#

cool

vapid dawn Mar 5, 2020, 1:14 PM

#

@boreal cove DM me later if it's still not working :))

rain nova Mar 5, 2020, 4:54 PM

#

hello guys I

#

I'm having problem with my room I disconnected my openvpn coz I can't connect to the room anymore and it's still saying I'm connected .

eager bronze Mar 5, 2020, 7:16 PM

#

Hello, I have a problem when I try to connect to the machine of the metasploit room
I connected successfully to the OpenVpn test ip to get the flag, but this one doesn't work for me...

leaden token Mar 5, 2020, 7:18 PM

#

You have to wait around 4-5 minutes (after deploying) for machine to boot fully so you can proceed with scans and exploitations

eager bronze Mar 5, 2020, 7:26 PM

#

Oh okay, I'll try it, thank you

eager bronze Mar 5, 2020, 7:53 PM

#

It still says Connection refused :/

leaden token Mar 5, 2020, 7:56 PM

#

what room is that exactly?

eager bronze Mar 5, 2020, 7:59 PM

#

This one:
https://tryhackme.com/room/rpmetasploit

TryHackMe | rpmetasploit

TryHackMe is an online platform for learning and teaching cyber security.

leaden token Mar 5, 2020, 8:03 PM

#

@eager bronze
Use -Pn flag for nmap scanning to get the results correctly

rain nova Mar 5, 2020, 8:03 PM

#

ever experience on if you run some searches on the room the room suddenly going down and up later on?

barren birch Mar 5, 2020, 8:04 PM

#

Sounds like your VPN connection is iffy @rain nova

#

Check you don't have more than one instance active

rain nova Mar 5, 2020, 8:08 PM

#

I only play 1 room at a time. maybe later I'll try it again.

barren birch Mar 5, 2020, 8:09 PM

#

No, your VPN connection, not the room

#

Are you using Linux?

eager bronze Mar 5, 2020, 8:11 PM

#

Uh.. I tried to access to the IP address with my webbrowser...
Thank you

barren birch Mar 5, 2020, 8:12 PM

#

Does it have a webserver @eager bronze?...

#

Possibly a silly question, but probably best to be sure

eager bronze Mar 5, 2020, 8:14 PM

#

It shows me this

📎 unknown.png

barren birch Mar 5, 2020, 8:14 PM

#

Have you scanned it first?

#

Not all machines will be running a webserver

#

If there's no webserver then you can't connect to it

leaden token Mar 5, 2020, 8:14 PM

#

There's no server

#

i scanned it with -Pn

barren birch Mar 5, 2020, 8:14 PM

#

I was about to say, I think that's Blue isn't it?

leaden token Mar 5, 2020, 8:15 PM

#

it's RP Metasploit

barren birch Mar 5, 2020, 8:15 PM

#

In which case, connecting with a web browser is not going to work...

eager bronze Mar 5, 2020, 8:15 PM

#

📎 unknown.png

leaden token Mar 5, 2020, 8:15 PM

#

scan all ports

#

-p-

barren birch Mar 5, 2020, 8:15 PM

#

It's using the Ice box @leaden token, yeah, no webserver

leaden token Mar 5, 2020, 8:15 PM

#

yeah

barren birch Mar 5, 2020, 8:15 PM

#

Also add -Pn -- that's a windows box, it's got a firewall @eager bronze

rain nova Mar 5, 2020, 8:15 PM

#

yes I'm using Linux @barren birch

leaden token Mar 5, 2020, 8:16 PM

#

he did, look at the screenshot

barren birch Mar 5, 2020, 8:16 PM

#

Oh, oops, sorry, didn't see that 😅

#

@rain nova can you use ps aux | grep openvpn in your terminal, screenshot the results, then show them here?

#

Just to see if you've got more than one VPN connection running

rain nova Mar 5, 2020, 8:18 PM

#

📎 unknown.png

#

yes there is so many

barren birch Mar 5, 2020, 8:18 PM

#

Um, yeah

#

That's your problem

rain nova Mar 5, 2020, 8:18 PM

#

oh ok , thanks! I'll kill them once I'm done with this thing I'm doing.

barren birch Mar 5, 2020, 8:18 PM

#

sudo killall openvpn && sudo openvpn <path-to-config-file>

#

Obviously replacing the last bit with wherever blnk961.ovpn is

rain nova Mar 5, 2020, 8:19 PM

#

thanks!

barren birch Mar 5, 2020, 8:19 PM

#

No problem 😄

eager bronze Mar 5, 2020, 8:25 PM

#

I think it's working now, thank you for your help :)

barren birch Mar 5, 2020, 8:27 PM

#

Np

leaden token Mar 5, 2020, 8:30 PM

#

Np

midnight tusk Mar 5, 2020, 10:05 PM

#

Hello. I am having issues connecting to a deployed machine through my browser. I have the openvpn gui connected to my account through the configuration file. But it tells me that the connection has timed out. I am a good computer person trying to learn more. Could someone help me?

barren birch Mar 5, 2020, 10:06 PM

#

What OS are you using @midnight tusk?

midnight tusk Mar 5, 2020, 10:06 PM

#

Windows 10

barren birch Mar 5, 2020, 10:07 PM

#

Will you be using a VM when you're working on challenges?

eager fulcrum Mar 5, 2020, 10:07 PM

#

@midnight tusk Connection timed out where? Are you sure the machine is running a web server?

barren birch Mar 5, 2020, 10:08 PM

#

Yeah, that's the other question. Where's the error? In your web browser, or in the OpenVPN logs?

midnight tusk Mar 5, 2020, 10:08 PM

#

The connection tells me through the chrome page when I try and go to the IP address, it tells me the connection timed out.

eager fulcrum Mar 5, 2020, 10:08 PM

#

I'd assume in the browser. What room are you trying to do?

barren birch Mar 5, 2020, 10:09 PM

#

Some challenges don't have webservers on them. Which room is it? ^

midnight tusk Mar 5, 2020, 10:09 PM

#

https://tryhackme.com/room/blue

TryHackMe | blue

TryHackMe is an online platform for learning and teaching cyber security.

barren birch Mar 5, 2020, 10:09 PM

#

Yeah

#

Blue doesn't have a webserver on it

#

Which makes it difficult to access in your browser 😄

midnight tusk Mar 5, 2020, 10:09 PM

#

How do I run it then?

#

lol

barren birch Mar 5, 2020, 10:10 PM

#

That's a walkthrough room -- are you following the instructions?

#

Given you've got an IP it should already be deployed, so that's it already running

#

You'll need to run a scan, then you'll be using the Metasploit framework to gain access via an exploit called EternalBlue (hence the name)

midnight tusk Mar 5, 2020, 10:11 PM

#

where do i find the instructions

barren birch Mar 5, 2020, 10:11 PM

#

📎 unknown.png

midnight tusk Mar 5, 2020, 10:12 PM

#

Where do I get EternalBlue?

#

Yes I see that part of it. I can't connect to it.

barren birch Mar 5, 2020, 10:13 PM

#

That's why I was asking about VMs earlier. You're going to really struggle on Windows. It is possible, but you need to know lots of software to install for yourself. Are you familiar with the concept of a virtual machine?

#

Or are you subscribed -- one or the other

midnight tusk Mar 5, 2020, 10:13 PM

#

Yes. I know VM's. I am on CyberPatriot at my school and I was trying to learn more about this.

barren birch Mar 5, 2020, 10:13 PM

#

That's the first set of instructions btw

📎 unknown.png

#

An nmap scan

midnight tusk Mar 5, 2020, 10:14 PM

#

i see that

barren birch Mar 5, 2020, 10:14 PM

#

Ok, I would suggest downloading the VM for Kali Linux

#

Gimme a second, I'll find a link

#

Think there are pre-made ones you can download, although I can't attest to how good they are. Most people do it from the ISO

#

Have you got VMWare or Virtual Box installed?

midnight tusk Mar 5, 2020, 10:15 PM

#

ok. I am going to try something else at the moment. Yes.

barren birch Mar 5, 2020, 10:15 PM

#

Which one?

midnight tusk Mar 5, 2020, 10:15 PM

#

Hyper-V?

barren birch Mar 5, 2020, 10:16 PM

#

https://www.shaileshjha.com/how-to-install-and-setup-kali-linux-in-hyper-v-in-windows-operating-system/

How to Install and Setup Kali Linux 2020.1 in Hyper-V on Windows Op...

In this blog post you will see how to install Kali Linux 2020 in Hyper-V on Windows 10

#

That looks like a decent article for setting it up in Hyper-V

midnight tusk Mar 5, 2020, 10:16 PM

#

Ok thanks!

barren birch Mar 5, 2020, 10:17 PM

#

Once you've done that, close the VPN connection on your Windows computer. Make sure that it's completely dead.

midnight tusk Mar 5, 2020, 10:17 PM

#

ok

barren birch Mar 5, 2020, 10:17 PM

#

Put the config file into the VM, then use sudo openvpn <path-to-config-file> to run it

#

(obviously replacing the path-to-config-file bit)

midnight tusk Mar 5, 2020, 10:17 PM

#

ok

#

Thanks!

barren birch Mar 5, 2020, 10:17 PM

#

That'll give you all the tools you need in terms of doing the rooms 😄

#

No problem! 😁

distant carbon Mar 5, 2020, 10:19 PM

#

Is the advantage of using Kali just that it comes with most of the tools pre installed?

eager fulcrum Mar 5, 2020, 10:19 PM

#

It's also not Windows

#

It's easier to get the tools for Linux

barren birch Mar 5, 2020, 10:19 PM

#

Linux is a lot more flexible than Windows @distant carbon

distant carbon Mar 5, 2020, 10:19 PM

#

Yeah, I'm just asking compared to other distros

barren birch Mar 5, 2020, 10:20 PM

#

You could technically do it with any distro -- so yeah, the main advantage of Kali is that it comes with many tools preinstalled, and the repo setup automatically to install more

eager fulcrum Mar 5, 2020, 10:20 PM

#

Kali is rolling too, debian testing would be similar

#

You just don't have the repos so it's more manual

barren birch Mar 5, 2020, 10:20 PM

#

There are also other pentesting distros as well, however

eager fulcrum Mar 5, 2020, 10:20 PM

#

Blackarch, parrot

barren birch Mar 5, 2020, 10:20 PM

#

^^

distant carbon Mar 5, 2020, 10:20 PM

#

Hmm ok

eager fulcrum Mar 5, 2020, 10:21 PM

#

Blackarch is only if you have a thing for arch tho

barren birch Mar 5, 2020, 10:21 PM

#

Yeah, let's not go near Blackarch...

#

Been meaning to set it up just for the fun of it, but in terms of a nice easy distro to get beginners started? Maybe not 😄

rotund spruce Mar 5, 2020, 10:23 PM

#

Yeah and there's loads of resources on Try Hack Me to learn some Linux commands if you're not familiar (search on Hacktivities) and the official https://kali.training ☺

Kali Linux Revealed | Mastering the Penetration Testing Distribution

Whether you're new to Kali or a seasoned security professional, the Kali Linux Revealed Book will turn you into a certified expert. Get training with us today!

formal tundra Mar 5, 2020, 10:56 PM

#

are the machines meant to be extremely slow? looking through joystick right now and getting very slow input/output

eager fulcrum Mar 5, 2020, 10:56 PM

#

Joystick yes.

#

Other machines, no

formal tundra Mar 5, 2020, 10:57 PM

#

ahh ok, why is it so slow?

eager fulcrum Mar 5, 2020, 10:57 PM

#

There's a lore reason for joystick

formal tundra Mar 5, 2020, 10:57 PM

#

ahh fair enough

eager fulcrum Mar 5, 2020, 10:57 PM

#

See if you can figure it out, it's mentioned in there

formal tundra Mar 5, 2020, 10:57 PM

#

ty for info, ill just do another box ^^ can't even run pspy on it! haha

gilded crypt Mar 5, 2020, 11:38 PM

#

how can i redeploy my room

eager fulcrum Mar 5, 2020, 11:39 PM

#

Terminate, click deploy again

#

@plush notch please don't DM people without asking. What's the issue?

gilded crypt Mar 6, 2020, 12:13 AM

#

It doesn't show deploy again

barren birch Mar 6, 2020, 12:14 AM

#

Refresh the page @gilded crypt

gilded crypt Mar 6, 2020, 12:16 AM

#

O 😅 thanks

rain nova Mar 6, 2020, 1:07 AM

#

is nikto really a slow tools ? as I'm using it to reveal Ektron CMS version and in midway I think my session just got expired.

#

📎 unknown.png

supple sonnet Mar 6, 2020, 1:07 AM

#

yes

#

Nikto is really slow

rain nova Mar 6, 2020, 1:08 AM

#

any recommended alternative tools to finish this task?

barren birch Mar 6, 2020, 1:11 AM

#

@rain nova That question is broken -- Nikto won't give you the answer anyway. DM me with the command you're using. If it looks like it should work, I'll give you the answer for it.

rain nova Mar 6, 2020, 1:12 AM

#

dm'd you

gilded crypt Mar 6, 2020, 1:17 AM

#

how can i copy text from the terminal and paste it outside for like flags? i tried ctrl+shift+c but that just does ^C and i cant right click on it. I can get it to copy inside the terminal but then when i try to paste it outside it doesn't work

rain nova Mar 6, 2020, 1:22 AM

#

ctrl + shit + c only works in terminal but in others normal ctrl + c / ctrl + v would work.

#

if you trying to copy from outside terminal like browser notes etc ctrl + c and ctr+ v but pasting it or copying it into terminal ctrl + shift + c for copy and ctrl + shift + v for paste.

eager fulcrum Mar 6, 2020, 1:27 AM

#

@gilded crypt some terminals also support control insert and shift insert

gilded crypt Mar 6, 2020, 1:37 AM

#

Thanks

warped marsh Mar 6, 2020, 2:39 PM

#

do you guys know any way downloading stuff with cmd or uploading with eternal blue exploit?

#

or uploading with sessions of shell

#

i cant get to work shell_to_meterpreter

eager fulcrum Mar 6, 2020, 2:45 PM

#

@warped marsh You can probably get Powershell and then download from that

#

Invoke Web Request or something

warped marsh Mar 6, 2020, 2:45 PM

#

okay

latent dune Mar 6, 2020, 4:32 PM

#

How can you copy content from a VM running in browser to copy&paste flags/hashes ?

#

never mind - i insta-canceled and request a refund

eager fulcrum Mar 6, 2020, 4:36 PM

#

@latent dune Just select and it'll copy to clipboard

#

At least for SSH based browser VMs

#

Not sure about the Kali VM

trail widget Mar 6, 2020, 7:59 PM

#

@deep trellis @vapid dawn Please can you reset my progress on the Cross-site Scripting room? Started it a while back but didn't get chance to finish it, and would like to start over.

#

I believe since it's a THM room, you need to do this for me?

vapid dawn Mar 6, 2020, 8:13 PM

#

ok will do @trail widget :))

trail widget Mar 6, 2020, 8:15 PM

#

Thank you v much @vapid dawn 🙂

vapid dawn Mar 6, 2020, 8:43 PM

#

should be resetted @trail widget

trail widget Mar 6, 2020, 8:44 PM

#

yep, all good now. Thank you!

boreal cove Mar 7, 2020, 12:54 AM

#

any admin on

barren birch Mar 7, 2020, 12:55 AM

#

Nope, Admins are away @boreal cove. Anything we can help you with?

#

Or is it that VPN thing?

boreal cove Mar 7, 2020, 12:56 AM

#

so i have downloaded openvpn to my host and it connected, but it still will not allow through the vm

#

does it matter about vm being bridged or nat

barren birch Mar 7, 2020, 12:56 AM

#

Is it working now in terms of letting you connect to both the internet and THM?

#

And yes, Bridged doesn't go through your host

boreal cove Mar 7, 2020, 12:57 AM

#

i asked about split tunnel being enabled on the admin side but got no response yet

#

yeah thats what i figured its on nat

barren birch Mar 7, 2020, 12:58 AM

#

Try opening the connection only inside the VM?

#

As in, kill it on the host and open it directly inside Guest

#

That might solve all the problems actually, because you can still connect to the wider world through host

boreal cove Mar 7, 2020, 1:00 AM

#

thats the way i have been trying.

eager fulcrum Mar 7, 2020, 1:00 AM

#

Personally, I'd 100% advise only connect from the VM

boreal cove Mar 7, 2020, 1:01 AM

#

im updating right now.. im in parrot and just killed anonsurf.

#

ill see if that helps... but i still connected. hmmm just never hit the internet. Im going to wireshark and see what it looks like

barren birch Mar 7, 2020, 1:04 AM

#

Good idea

boreal cove Mar 7, 2020, 1:21 AM

#

!! GOT IT !! lol

#

https://tenor.com/view/yes-sweet-hellyes-pumpit-gif-3532253

Tenor

sweet

▶ Play video

barren birch Mar 7, 2020, 1:21 AM

#

Yes!!

#

Nice one 😁

boreal cove Mar 7, 2020, 1:22 AM

#

ok now for everyone to know...

#

Network manager > Configure VPN> select
vpn name> Settings > > IP4 Settings > Routes > Check " Use this connection only for resources on its network" > ok > Save

barren birch Mar 7, 2020, 1:26 AM

#

Ah, so it was a problem with the host configuration settings?

boreal cove Mar 7, 2020, 1:26 AM

#

vm vpn

barren birch Mar 7, 2020, 1:27 AM

#

Huh. Most people would just use sudo openvpn <path-to-VPN>

#

But fair enough 😁

boreal cove Mar 7, 2020, 1:27 AM

#

yeah i tried that to

#

what a pain now i can go learn something lol

#

thanks for the help though!!

barren birch Mar 7, 2020, 1:27 AM

#

No problem!

eager fulcrum Mar 7, 2020, 2:21 AM

#

Ah so that's a parrot thing probably

barren birch Mar 7, 2020, 2:23 AM

#

That... could explain something

eager fulcrum Mar 7, 2020, 2:23 AM

#

Because it's through the gui @barren birch

#

Go to sleep

barren birch Mar 7, 2020, 2:24 AM

#

God only knows I need to go to sleep

#

But not yet

#

Could say the same for you though 😁

naive dust Mar 7, 2020, 2:24 AM

#

Go to sleep @barren birch and @eager fulcrum

#

It's 8pm for.me Its gotta be like 4am for y'all

barren birch Mar 7, 2020, 2:25 AM

#

Not that bad...

📎 unknown.png

naive dust Mar 7, 2020, 2:25 AM

#

Get to bed 😁

barren birch Mar 7, 2020, 2:25 AM

#

Yessir! 😄

#

Need to get this task done first

naive dust Mar 7, 2020, 2:26 AM

#

And your date format blinds my American eyes

barren birch Mar 7, 2020, 2:26 AM

#

But yeah, I need to sleep

#

Right, explain that one Pars 😁

#

How does it make sense to do month / day / year?

#

Medium, little, big?

naive dust Mar 7, 2020, 2:28 AM

#

Because it looks better

#

The days go alot higher than the months

barren birch Mar 7, 2020, 2:28 AM

#

But it makes no logical sense! 😆

naive dust Mar 7, 2020, 2:29 AM

#

Well

#

I see it like this

#

It's actually small to big

#

Because no one really cares about the year

#

And months are typically smaller than the date

#

Also

#

It just looks nicer 😁

barren birch Mar 7, 2020, 2:31 AM

#

To be honest, I can kinda get behind YY/MM/DD
That's one of the few things that just really confuse me in translation though

#

Are you saying it's purely aesthetic?..

fossil swallow Mar 7, 2020, 3:34 AM

#

Anyone know why the VPN keeps resetting?

barren birch Mar 7, 2020, 12:12 PM

#

More often than not it's because you've got more than one connection open at once @fossil swallow
Have you used it on more than one local machine?

drifting zinc Mar 7, 2020, 4:13 PM

#

I need tech support

#

It's something I can't figure out why my system is going crazy

barren birch Mar 7, 2020, 4:14 PM

#

What's up @drifting zinc?

drifting zinc Mar 7, 2020, 4:14 PM

#

Hey man

#

Are you up for help?

barren birch Mar 7, 2020, 4:14 PM

#

Can't promise I'll be any use, but I can try! Sure, hit me

drifting zinc Mar 7, 2020, 4:15 PM

#

Okay so I wiped my ssd and installed Debian based OS but when ever I try to retrieve system information it just power off

#

For eg 'neofetch' Os will try to retrieve system information but somehow my hardware is restricting it

eager fulcrum Mar 7, 2020, 4:16 PM

#

No logs?

drifting zinc Mar 7, 2020, 4:16 PM

#

Nope it just poweroff

#

Lemme check system log

barren birch Mar 7, 2020, 4:17 PM

#

Hmm, there might still be system logs floating around

#

Yep

#

Honestly, if it's a blank system, just reinstalling it would seem the easy option. Obviously harder if there's stuff on it

drifting zinc Mar 7, 2020, 4:17 PM

#

It's same with all os except windows

barren birch Mar 7, 2020, 4:19 PM

#

Hmm. Yeah, check the logs.

#

Wondering what on earth is causing that

drifting zinc Mar 7, 2020, 4:19 PM

#

Lol see this

#

📎 JPEG_20200307_214952.jpg

#

Weird isn't it

barren birch Mar 7, 2020, 4:20 PM

#

Different OSs obviously do things in different ways, which makes it likely to be a hardware thing, but I can't for the life of me think how that could be happening

drifting zinc Mar 7, 2020, 4:20 PM

#

It's probably my hardware

barren birch Mar 7, 2020, 4:20 PM

#

Have you tried using an OS that isn't on systemd?

drifting zinc Mar 7, 2020, 4:21 PM

#

nope

#

Well not on this system

barren birch Mar 7, 2020, 4:22 PM

#

Maybe give that a shot?

#

"Endpoint unregistered" -- I'd take a guess that the error might be something to do with not being able to find some hardware that it expects to find? As in, it's looking for hardware, but isn't able to recognise the stuff that's plugged in

drifting zinc Mar 7, 2020, 4:24 PM

#

wait

barren birch Mar 7, 2020, 4:25 PM

#

Hmm?

drifting zinc Mar 7, 2020, 4:26 PM

#

Sending a video

barren birch Mar 7, 2020, 4:26 PM

#

On Discord? You can do that?!

drifting zinc Mar 7, 2020, 4:29 PM

#

📎 video_20200307_215545.mp4

#

Can do

#

Lol

#

Oh wait, is that an image?

barren birch Mar 7, 2020, 4:30 PM

#

That is bizarre. What happens if you use uname?

#

No, it works. Huh. I did not know you could do that

drifting zinc Mar 7, 2020, 4:31 PM

#

dude uname just gives you Os info

#

It's not just neofetch

#

📎 JPEG_20200307_220148.jpg

#

I am just wondering why I can't retrieve system information like graphics and other stuff

#

I can't even do lscpu

barren birch Mar 7, 2020, 4:33 PM

#

🤦‍♂️
Yeah, so it does...
Sorry, not thinking 😁

drifting zinc Mar 7, 2020, 4:33 PM

#

it's probably cuz of graphic

kind frigate Mar 7, 2020, 4:33 PM

#

I am not able to load the website in kali linux

drifting zinc Mar 7, 2020, 4:33 PM

#

I can't do lspci

kind frigate Mar 7, 2020, 4:34 PM

#

I am using firefox

barren birch Mar 7, 2020, 4:34 PM

#

Almost definitely a hardware fault then @drifting zinc. Something is causing enough of an error that the whole lot just borks. Maybe try searching up the error code from the log?

#

Which website @kind frigate?

kind frigate Mar 7, 2020, 4:34 PM

#

@barren birch tryhackme

📎 JPEG_20200307_220437.jpg

#

It is constantly loading

barren birch Mar 7, 2020, 4:35 PM

#

Is this through a VPN?

kind frigate Mar 7, 2020, 4:35 PM

#

I am not able to download my config file

#

@barren birch nope

barren birch Mar 7, 2020, 4:35 PM

#

Ah. Hmm

#

Is that a VM?

#

And can you access any other websites?

kind frigate Mar 7, 2020, 4:36 PM

#

I have dual boot kali linux in my laptop

📎 JPEG_20200307_220605.jpg

#

I am able to access other websites

deep trellis Mar 7, 2020, 4:36 PM

#

@kind frigate So you can't download your OpenVPN cofig?

#

When you click download, it just hangs?

kind frigate Mar 7, 2020, 4:36 PM

#

Yess

#

I am not able to download

deep trellis Mar 7, 2020, 4:37 PM

#

try again please

#

Watching our logs

kind frigate Mar 7, 2020, 4:37 PM

#

And not getting any information in My Rooms

deep trellis Mar 7, 2020, 4:37 PM

#

ahhhh

#

ok

kind frigate Mar 7, 2020, 4:37 PM

#

📎 JPEG_20200307_220741.jpg

deep trellis Mar 7, 2020, 4:38 PM

#

Oh yeah, please try with a different browser

naive dust Mar 7, 2020, 4:38 PM

#

Maybe try a different browser

deep trellis Mar 7, 2020, 4:38 PM

#

Our obfuscation stuff might be breaking (we'll soon remove this)

kind frigate Mar 7, 2020, 4:38 PM

#

Okayy

#

I will use different one

deep trellis Mar 7, 2020, 4:38 PM

#

Thanks

kind frigate Mar 7, 2020, 4:38 PM

#

Thanks!

drifting zinc Mar 7, 2020, 4:40 PM

#

https://youtu.be/IVpOyKCNZYw

YouTube

Jim Feig

Linus Torvalds - Nvidia F_ck You!

Aalto Talk with Linus Torvalds - Nvidia F_ck You!

Full Length Video: http://www.youtube.com/watch?v=MShbP3OpASA

▶ Play video

#

No kidding, I found solution

#

It's nvidia

barren birch Mar 7, 2020, 4:41 PM

#

Why doesn't that surprise me?..

drifting zinc Mar 7, 2020, 4:41 PM

#

I see every single hardware information but just not Nvidia

#

It's common? Lol

barren birch Mar 7, 2020, 4:42 PM

#

Can you get the Nvidia drivers installed?

#

Yeah, graphics drivers are a pain in the rear end when it comes to Linux

drifting zinc Mar 7, 2020, 4:42 PM

#

Yeah it's really weird, I never experienced something like this before

#

Anyway, thanks for your time man

#

Appreciate it

barren birch Mar 7, 2020, 4:43 PM

#

No problem 😄

naive dust Mar 7, 2020, 4:58 PM

#

I am currently doning the room hackerNote. Is it normal that I have to wait 30 seconds for the server to respond on my API calls?

#

I already "rebooted" the server multiple times

deep trellis Mar 7, 2020, 5:07 PM

#

API calls on the machine?

#

@eager fulcrum Is your guy here I think

#

Unless its the platform

#

Then its me

eager fulcrum Mar 7, 2020, 5:13 PM

#

@naive dust 30s for eaah call?

#

Each

#

@naive dust ?

#

If you're killing the server with a brute force attack on passwords, API requests will take forever

#

Otherwise, 2-3s at the most even on non subscriber boxes

#

I've thoroughly tested it

naive dust Mar 7, 2020, 5:43 PM

#

Sorry for the late replays. Yes 30s for each call and I haven't hit the VM (or server) with any bruteforce attacks.

eager fulcrum Mar 7, 2020, 5:50 PM

#

That's unusual

#

There's only 1 API call that should take more than like 0.1s

hard basalt Mar 7, 2020, 5:57 PM

#

hey what is the best md5 hash crack tool

barren birch Mar 7, 2020, 5:58 PM

#

Hashcat

#

If anyone tells you John, they're lying

prisma nest Mar 7, 2020, 5:58 PM

#

where can i found some hint ?

eager fulcrum Mar 7, 2020, 5:58 PM

#

Unsalted? crackstation

#

@prisma nest #room-help

hard basalt Mar 7, 2020, 5:59 PM

#

ok thank you

eager fulcrum Mar 7, 2020, 5:59 PM

#

@hard basalt https://crackstation.net/

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Ra...

Crackstation is the most effective hash cracking service. We crack: MD5, SHA1, SHA2, WPA, and much more...

naive dust Mar 7, 2020, 6:18 PM

#

@barren birch john > hashcat

#

Lol

hard basalt Mar 7, 2020, 6:26 PM

#

where can i find a download of rockyou.txt

eager fulcrum Mar 7, 2020, 6:27 PM

#

By default in kali, or https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt

barren birch Mar 7, 2020, 6:36 PM

#

@naive dust 😡 😡

#

😁

#

Tbh, I really like hashcat, but there are definitely some things that John does better

hard basalt Mar 7, 2020, 6:43 PM

#

it is saying remote: Repository not found

eager fulcrum Mar 7, 2020, 6:43 PM

#

wget, don't git clone @hard basalt

#

if you're on kali (or porbably parrot) it has it though

hard basalt Mar 7, 2020, 6:44 PM

#

how do you use that command

#

on kali linux

eager fulcrum Mar 7, 2020, 6:44 PM

#

if you're on kali. The wordlist is in /usr/share/wordlists

#

you might have to unzip it

#

gunzip /usr/share/wordlists/rockyou.txt

hard basalt Mar 7, 2020, 6:46 PM

#

there is no file i am on a pi so that is problae the problem

eager fulcrum Mar 7, 2020, 6:47 PM

#

probably the minimal install then

hard basalt Mar 7, 2020, 6:47 PM

#

yea

eager fulcrum Mar 7, 2020, 6:47 PM

#

wget https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt

hard basalt Mar 7, 2020, 6:48 PM

#

i got it thank you so much

cold raft Mar 7, 2020, 9:48 PM

#

hey any help https://tryhackme.com/room/zthlinux to find the answer to 21. Been on it for like an hour and still stuck.

TryHackMe | zthlinux

TryHackMe is an online platform for learning and teaching cyber security.

eager fulcrum Mar 7, 2020, 9:50 PM

#

@cold raft #room-help

cold raft Mar 7, 2020, 9:50 PM

#

sorry

night juniper Mar 8, 2020, 5:47 PM

#

hello guys ,im connecting with openvpn but im getting this

#

Sun Mar 8 19:36:47 2020 ROUTE: default_gateway=UNDEF
Sun Mar 8 19:36:47 2020 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Sun Mar 8 19:36:47 2020 Exiting due to fatal error

#

anyone can help me ,also im using sudo

supple sonnet Mar 8, 2020, 5:47 PM

#

run an ifconfig

night juniper Mar 8, 2020, 5:48 PM

#

im get my local ip

supple sonnet Mar 8, 2020, 5:48 PM

#

or an ip addr and please paste the output

night juniper Mar 8, 2020, 5:48 PM

#

ok

#

o: flags=73<UP,LOOPBACK,RUNNING> mtu 1500
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0xfe<compat,link,site,host>
loop (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

wifi0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.103 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::5d28:6c01:dbfb:76d2 prefixlen 64 scopeid 0xfd<compat,link,site,host>
ether c0:38:96:8c:d0:6d (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

#

link/loopback 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope global dynamic
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host dynamic
valid_lft forever preferred_lft forever
2: wifi0: <BROADCAST,MULTICAST,UP> mtu 1500 group default qlen 1
link/ieee802.11 c0:38:96:8c:d0:6d
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic
valid_lft 74995sec preferred_lft 74995sec
inet6 fe80::5d28:6c01:dbfb:76d2/64 scope link dynamic
valid_lft forever preferred_lft forever
19: wifi1: <> mtu 1500 group default qlen 1
link/ieee802.11 c2:38:96:8c:d0:6d
inet 169.254.244.168/16 brd 169.254.255.255 scope global dynamic
valid_lft forever preferred_lft forever
inet6 fe80::68c9:9b55:17dc:f4a8/64 scope link dynamic
valid_lft forever preferred_lft forever
17: wifi2: <> mtu 1500 group default qlen 1
link/ieee802.11 c0:38:96:8c:d0:6d
inet 169.254.70.170/16 brd 169.254.255.255 scope global dynamic
valid_lft forever preferred_lft forever
inet6 fe80::493f:4116:9279:46aa/64 scope link dynamic
valid_lft forever preferred_lft forever

supple sonnet Mar 8, 2020, 5:51 PM

#

@deep trellis you had mentioned that there was a new OpenVPN server today, could this be part of the issue?

deep trellis Mar 8, 2020, 5:51 PM

#

@night juniper Send me your config

#

Ill test it

night juniper Mar 8, 2020, 5:51 PM

#

what config

deep trellis Mar 8, 2020, 5:52 PM

#

To see if its you or our server

#

OpenVPN config file:)

night juniper Mar 8, 2020, 5:52 PM

#

oh okay

#

wait

deep trellis Mar 8, 2020, 5:52 PM

#

Have you downloded it?

#

@supple sonnet Thanks for @'ing me, would have over seen this:)

supple sonnet Mar 8, 2020, 5:52 PM

#

np aniguns

night juniper Mar 8, 2020, 5:53 PM

#

lon ofc man

#

wait

#

here u go

supple sonnet Mar 8, 2020, 5:54 PM

#

for reference, next time DM it to Skidy if his dms are open lol

night juniper Mar 8, 2020, 5:54 PM

#

okay

rigid oxide Mar 8, 2020, 5:54 PM

#

You might want to remove the download link as well

naive dust Mar 8, 2020, 5:54 PM

#

Skidy loves us all

rigid oxide Mar 8, 2020, 5:54 PM

#

That way no one can connect as you

night juniper Mar 8, 2020, 5:54 PM

#

ok

rigid oxide Mar 8, 2020, 5:55 PM

#

(Just for your own safety)

night juniper Mar 8, 2020, 5:55 PM

#

im sendind dm now

deep trellis Mar 8, 2020, 5:56 PM

#

@night juniper Going to reply here

#

The OpenVPN config works fine on my end

#

No issues at all

#

https://unix.stackexchange.com/questions/501403/tun-module-loaded-but-openvpn-dev-net-tun-no-such-file-or-directory

Unix & Linux Stack Exchange

TUN Module Loaded but OpenVPN /dev/net/tun no such file or directory

lsmod -> tun 16587 0 - Live 0xbf0e1000

Openvpn error: Cannot open TUN/TAP dev /dev/net/tun no such file or directory

I tried creating a dummy directory but the error changes to Cannot open TUN/TA...

#

I can suggest perhaps looking at that

#

Sorry I couldn't help much further

night juniper Mar 8, 2020, 5:57 PM

#

okay thank you

supple sonnet Mar 8, 2020, 5:57 PM

#

also, what OS are you running? that might help for future troubleshooting needs

#

a uname -a or cat /etc/lsb_release can reveal that if you don't know the specifics

night juniper Mar 8, 2020, 5:58 PM

#

im running ubuntu linux file system on windows 10 , maybe to try on oficial linux os?

eager fulcrum Mar 8, 2020, 5:59 PM

#

Oh, WSL?

#

WSL won't work very well

supple sonnet Mar 8, 2020, 5:59 PM

#

yeah that'd be why

eager fulcrum Mar 8, 2020, 5:59 PM

#

Try a virtual machine, or TryHackMe's Kali VM

supple sonnet Mar 8, 2020, 5:59 PM

#

upvote

night juniper Mar 8, 2020, 6:00 PM

#

oh okay ty all

supple sonnet Mar 8, 2020, 6:01 PM

#

yeah so WSL works okay for general use, but it should never be a replacement

night juniper Mar 8, 2020, 6:03 PM

#

im so n00b

deep trellis Mar 8, 2020, 6:23 PM

#

https://tryhackme.com/room/kali

TryHackMe | Why Subscribe

TryHackMe is an online platform for learning and teaching cyber security.

limpid quiver Mar 8, 2020, 10:39 PM

#

Hello, I have connect to OpenVpn with my config file and deployed the VM for one of the free rooms. I then opened up a second tab on my browser and put in the VM's 10.... internal IP. But it won't connect to the machine. Sorry, I am a bit new to all of this.

zealous yoke Mar 8, 2020, 10:44 PM

#

Hey @limpid quiver, welcome! Have you waited up towards 5 minutes for the machine / instance to fully boot up? If you are expecting a web server, instances can take a couple of minutes to fully boot up.

On the other hand, they might not be running anything that you can navigate to by simply visiting the IP address - that may be apart of the challenge. Are you able to ping it from your device?

limpid quiver Mar 8, 2020, 10:46 PM

#

Okay, thank you makes perfect sense!

zealous yoke Mar 8, 2020, 10:47 PM

#

No worries! Hopefully that'll help you out. The Windows boxes are especially bad for this. The whole process of figuring out what instance is accessible on what part is enumeration 🙂

#

If the room type is a walkthrough, it should tell you, but a challenge will most likely not

velvet sigil Mar 9, 2020, 2:42 AM

#

Connection Error, is throwing me Out of the running machine and I have to start all room over... not cool at all 😦

#

Over Browser

barren birch Mar 9, 2020, 1:03 PM

#

That usually happens if there's more than one THM VPN connection open simultaneously @velvet sigil. Have you checked that?

eager fulcrum Mar 9, 2020, 1:04 PM

#

(VPN connection to tryhackme)

barren birch Mar 9, 2020, 1:04 PM

#

@toxic ivy yeah, you'll be fine leaving that image up then 😄

#

Having an external VPN shouldn't be messing with your connection, but it might also be worth trying without it.

toxic ivy Mar 9, 2020, 1:06 PM

#

sure bro..!!👍 .. will do

barren birch Mar 9, 2020, 1:06 PM

#

Can you ping your own IP? The one for TryHackMe?

toxic ivy Mar 9, 2020, 1:07 PM

#

yes

barren birch Mar 9, 2020, 1:10 PM

#

Ok. When did you sign up?

#

Was it today or early yesterday?

#

Actually, forget that. Just grabbed it from your screenshot 😄

#

Can you ping 10.9.0.1?

toxic ivy Mar 9, 2020, 1:17 PM

#

today i signed up

barren birch Mar 9, 2020, 1:18 PM

#

Yeah, I saw from your IP that you're on the new VPN server 🙂

#

Can you ping the gateway?

#

(10.9.0.1)

toxic ivy Mar 9, 2020, 1:18 PM

#

yeah

barren birch Mar 9, 2020, 1:19 PM

#

Ok, so you're definitely connected

#

Can you run ps aux | grep openvpn on your Kali machine?

#

Screenshot the output of that 😄

toxic ivy Mar 9, 2020, 1:20 PM

#

📎 2020.03.09-18.50.png

eager fulcrum Mar 9, 2020, 1:26 PM

#

There's your problem

barren birch Mar 9, 2020, 1:27 PM

#

??
Did I miss something?..

toxic ivy Mar 9, 2020, 1:30 PM

#

@eager fulcrum didnt get you.?

eager fulcrum Mar 9, 2020, 1:30 PM

#

@barren birch three dozen connections open

barren birch Mar 9, 2020, 1:30 PM

#

Oof

#

That... That would explain something...

#

@toxic ivy sudo killall openvpn

#

Then try sudo openvpn <path-to-config> once

#

Obviously replacing <path-to-config> with the location of the config file

toxic ivy Mar 9, 2020, 1:37 PM

#

even after killing all the openvpn process and regenrating new config file its still showing connected

barren birch Mar 9, 2020, 1:37 PM

#

Screenshot that?

toxic ivy Mar 9, 2020, 1:37 PM

#

and also this error.. ahh..!!

📎 2020.03.09-19.06.png

barren birch Mar 9, 2020, 1:38 PM

#

Um, maybe Google that one...

toxic ivy Mar 9, 2020, 1:38 PM

#

📎 2020.03.09-19.08.png

barren birch Mar 9, 2020, 1:39 PM

#

That's the grep process @toxic ivy -- not the actual openvpn process

naive dust Mar 9, 2020, 1:39 PM

#

When in doubt

zealous yoke Mar 9, 2020, 1:40 PM

#

ps aux it out?

naive dust Mar 9, 2020, 1:40 PM

#

ps -ef | grep openvpn | kill -9 $(awk '{print $2}')

toxic ivy Mar 9, 2020, 1:43 PM

#

Thank u guys so much.. killing all of them and restarting the vm and then regenerating the conf file solved the issue..!! 🙏

zealous yoke Mar 9, 2020, 1:46 PM

#

Sweet! Glad to hear it, wp @barren birch and @eager fulcrum

toxic ivy Mar 9, 2020, 1:52 PM

#

📎 2020.03.09-19.21.png

#

i am really new to this.. pls dont feel bad that i am asking too many doubts and problems

naive dust Mar 9, 2020, 1:52 PM

#

It's all good @toxic ivy

#