no problemo
#site-support
stone roost
terse scaffold
my vpn is not working i guess
i mean ninja the mod is saying that probably i am having issues with vpn so ask help here
zealous yoke
Are you able to view your internal IP on https://tryhackme.com/access here? @terse scaffold if so, can you ping yourself?
Don't post your IP here, but just say if you're able to ping it etc
eager fulcrum
What are you connecting from? @terse scaffold
eager fulcrum
No, I mean OS
terse scaffold
manjaro
eager fulcrum
ps aux | grep openvpn and paste a screenshot in here?
terse scaffold
root 7035 0.0 0.0 15048 6440 pts/0 T 22:42 0:00 sudo openvpn Downloads/Bloodthirsty.ovpn
root 7036 0.0 0.0 18268 9944 pts/0 T 22:42 0:00 openvpn Downloads/Bloodthirsty.ovpn
root 7294 0.0 0.0 15012 6528 pts/1 S+ 22:53 0:00 sudo openvpn Downloads/Bloodthirsty.ovpn
root 7296 0.0 0.0 18268 9888 pts/1 S+ 22:53 0:00 openvpn Downloads/Bloodthirsty.ovpn
rootuser 8593 0.0 0.0 6288 2280 pts/2 S+ 23:48 0:00 grep --colour=auto openvpn
You can only have one connection with a profile to an OpenVPN server
terse scaffold
i have multiple as you said to connect to the other room to try
terse scaffold
okay...
i am sorry i m noob
what do i have to do and what should i not do in future
zealous yoke
Easiest would be a restart imho
eager fulcrum
You should only run sudo openvpn <yourprofile> once
zealous yoke
but in the future, just keeping one connection open will connect you to the THM network sufficiently π
eager fulcrum
What I personally do is use a terminal tab
terse scaffold
if i restart my pc i have to connect again right with that command?
eager fulcrum
Change the title to VPN, and then don't background it or anything
steel rapids
pkill openvpn
zealous yoke
I run it in a terminal and send it to its own workspace
but all as effective as eachother π
steel rapids
that should kill all openvpn processes
terse scaffold
wait a minute. how do i have multiple sessions? Every time i restart my pc i have to do sudo openvpn myprofile right?
zealous yoke
Yes, though only once.
You can connect to an instance that you deploy across the rooms with a single connection π
terse scaffold
okay π
eager fulcrum
One openvpn instance will put you on the THM network
zealous yoke
it's not a new connection per room, but rather one connection to the network itself - where you can deploy to your hearts content
terse scaffold
Thanks a lot for your support all of you π π
zealous yoke
:^ enjoy the content
terse scaffold
will do !!!
zealous yoke
There's always #room-help should you need it ^^
terse scaffold
Okay π
slow void
Hi guys, im having some problems with Openvpn, when im connected to the network and all seems okey, i copy and paste the Ip address of the room but nothing happens there
eager fulcrum
@slow void Paste into where?
slow void
In the video about how to use OpenVPN when im connected to the network i have to copy and paste in a new tab
eager fulcrum
Video?
slow void
the ip address
slow void
Oh okey okey, I had no idea about that because it wasn't mentioned in the video on the website
barren birch
What room are you working on @slow void?
eager fulcrum
What video? @slow void
slow void
can i send the link? @eager fulcrum
eager fulcrum
yes?
barren birch
I'll just check now, but chances are that room is not running a webserver
slow void
i mean, i never before use that website so i want to learn how to deploy a machine and working in rooms
barren birch
Copying the URL into your web browser only works if there's a webserver running on the machine
sharp bisonBOT
TryHackMe
barren birch
I stand corrected. That's the DVWA room. It does have a webserver
Yeah, you're definitely best trying that room first though π
eager fulcrum
@slow void What OS are you connecting from?
slow void
Windows
eager fulcrum
Going to advise you now, you'll have a better time with a Kali VM
slow void
Yeah i have 1
slow void
Should I do something different if I connect from the VM?
barren birch
Have you killed the connection in windows @slow void?
Make sure that it's definitely closed, then download the config file inside Kali
eager fulcrum
kali VM on your machine or on THM? @slow void
barren birch
use sudo openvpn <path-to-config> to run it
Unless you're using the online one, in which case you don't need that ^^
eager fulcrum
afk rn, can't help much more
slow void
@barren birch so i have to kill all the connection in windows and use the command in Kali VM?
barren birch
Yeah
Make sure that there is only one connection active at once though
99 times out of 100 that's the problem if there's an openvpn problem
eager fulcrum
@slow void thm kali or your kali?
slow void
mykali
eager fulcrum
You should be fine with openvpn then as long as you don't start multiple connections
slow void
All right guys thank you very much, I'll let you know with something if I have a problem
fleet sluice
website is down for development?When will it be again live?
naive dust
Thm didn't go down
deep trellis
So it went down for a sec
naive dust
It's always up
fleet sluice
yaa
naive dust
In my heart
fleet sluice
working
naive dust
Lol
supple sonnet
skidy you ruined five nine!
fleet sluice
Why kali access in browser is too slow eventhough i'm having 5 MB/s of bandwidth?
naive dust
"panic(cpu 2 caller 0xffffff7f894a8aae): watchdog timeout: no checkins from watchdogd in 183 seconds (2450 totalcheckins since monitoring last enabled), shutdown in progress"
any idea about this problem in my macbook2015
Uh
get this shutdown problems recently
eager fulcrum
naive dust
Is your macos Yosemite? @naive dust
Catalina
O oki
Then I got nothing except for that thread
eager fulcrum
People seem to be getting it on Catalina tho
naive dust
Yeah
Even if it's not a MacBook
weird =="
So it's probably an OS
I've had this 5 times in a week
Maybe a factory reset if possible
If nothing else works
Nah, I think because of the latest update.
Does MacOS let you downgrade?
IDK.
I want to switch to Linux but I am not courage enough to install that in Macbook2015
In macOS from Mojave, SIP gonna stop user do stupid things.
@naive dust I will wait the fix update
lethal marsh
anyone have any issues with OpenVas returning no results
terse scaffold
hey
after i do sudo openvpn username.ovpn
i cannot use that terminal anymore. so can i close that terminal or if i do ctrl+z is it okay?
fleet sluice
anybody facing issue with room creation?
i cannot add any question or save the task
deep trellis
i cannot add any question or save the task
@fleet sluice manage -> Assign a task first (https://tryhackme.com/assign-tasks)
fleet sluice
@fleet sluice manage -> Assign a task first (https://tryhackme.com/assign-tasks)
@deep trellis worked thanks bro
deep trellis
I've updated the UI to make that more clear, when be made live tonight.
fleet sluice
can i include screenshots in room creation with mentioning source?
eager fulcrum
You can put pictures, but do be careful about plagiarism @fleet sluice
We will check.
naive dust
None of this copyright violations
fleet sluice
The image i wanna to include is from another site.I will mention the source explicitly
eager fulcrum
Credit the sources etc
naive dust
Please just use copyright free images @fleet sluice
I recommend https://pixabay.com/
It's just easier
eager fulcrum
Lemme grab a doc for you
Unsplash is good too
There's notes, make sure your box fits all of those requirements
fleet sluice
bros i'm creating a room for my college juniors.For trial i'm creating for nmap.In that i'm including nmap cheatsheet from a site.I had also mentioned the source
eager fulcrum
Maybe just link it instead
naive dust
Yeah
eager fulcrum
Also, RP: Nmap is good
naive dust
You can make a VM to hammer down the point if you want to
But if you upload it to THM make sure you follow the guidelines
fleet sluice
Also, RP: Nmap is good
@eager fulcrum yeah bro..but my faculties wanted to first what are all switches available and explain its functions.Then evaluate the studs
eager fulcrum
man page also works
fleet sluice
Thats why creating as per my faculty requirements
eager fulcrum
fleet sluice
check out this bros...lemme know if any violations!!
@eager fulcrum @naive dust @deep trellis
eager fulcrum
@fleet sluice I'm a room reviewer. Submit it for release and I can take a look.
fleet sluice
ok bro
@fleet sluice I'm a room reviewer. Submit it for release and I can take a look.
@eager fulcrum
eager fulcrum
That's if you want it to be made public
There's no review process if you want to use it internally for your school/org @fleet sluice
fleet sluice
That's if you want it to be made public
@eager fulcrum i want to use rooms only for my college juniors
eager fulcrum
Yeah so you don't need anyone to review it
fleet sluice
ok bro
barren birch
@fleet sluice Seeing as you've got the option, why not also use that to test them as well? Add a few questions and you'll be able to give it an interactive element. You could even throw in one the THM virtual machines and get them to scan it.
Obviously that's just a suggestion -- by all means feel free to ignore it π
Just seems like a waste to use a THM room purely to impart information when you have so many more advanced options available π
sand belfry
Hey guys
The machine time says 1m instead of 1hr
Dunno if bug or no but just wanted to make sure
leaden token
did it turn off after 1 minute?
vapid dawn
@sand belfry does it still show the same when you reload the page?
pulsar pagoda
1 minute speed challenges - now on THM
fleet sluice
@fleet sluice Seeing as you've got the option, why not also use that to test them as well? Add a few questions and you'll be able to give it an interactive element. You could even throw in one the THM virtual machines and get them to scan it.
Obviously that's just a suggestion -- by all means feel free to ignore it π
Just seems like a waste to use a THM room purely to impart information when you have so many more advanced options available π
@barren birch yes bro..i planned like that bro .Just to confirm if there any violations in my room.
thank you so much for your care bro
acoustic inlet
Anyone know why when I press CTRL + Z on the terminal it just closes msfconsole and does not background my session?
Using Ubuntu 18.04
junior jay
Hey guys. I discovered the platform today and I'm trying to do the "vulnversity" tasks but I don't know what the "box" is
Could someone help me?
I'm already using the vpn
eager fulcrum
@junior jay there's a deploy button somewhere
Click that, and it deploys an AWS VM on the TryHackMe network, and will show the IP like in the screenshot a lil way up
junior jay
Found it! Thank you very much
fleet sluice
nikto for toolrus didnot showing CMS
barren birch
That's broken @fleet sluice
DM me the command you used. If it looks right, I'll give you the answer
naive dust
Why don't you install Nessus in online Kali linux
First time run takes long time to use
I believe that's because it's configuring and installing all necessary things @naive dust
Don't quote me on that though
nova gyro
Is dirbuster installed on the deployable 2020 Kali machine
Because it doesn't want to worj
jolly pasture
I am having a problem with vulnversity, unable to scan it visit webpage and when i ping i get icmp redirect
eager fulcrum
@jolly pasture you connected to the vpn?
jolly pasture
Ye I've connected. Anyways it's working now, I've disconnected and reconnected it a few times and it eventually worked.
eager fulcrum
@jolly pasture they take a lil while to deploy
jolly pasture
It said vip was faster π
south steppe
Hello, new to the site and wondered before signing up is there a cost?
eager fulcrum
Most content is free, there's subscriber (paid) content and it gives you higher spec VMs so they deploy faster. Also you get access to a Kali virtualmachine in your browser or by RDP @south steppe
south steppe
Ah nice, thanks.
eager fulcrum
!vpn @inner basin
sharp bisonBOT
TryHackMe
inner basin
Hey guys I am learning nmap scanning Do I have to perform these scan on tryhackme.com site.
naive dust
metasploit not working ?any fix ?
next apex
@naive dust what error are you getting? :o
do try giving it an update and see where that leaves you
naive dust
exploit completed no session created
next apex
oh, that just means the exploit didnβt work, try fumbling with the settings if you think that exploit is a sure thing!
if not keep looking :)
next apex
@naive dust what exploit?
naive dust
php
next apex
your metasploit is being run locally, correct?
naive dust
/exploit/multi/handler+payload/php
next apex
iβm not sure what youβre doing π
supple sonnet
more verbosity!
next apex
^ that should help for sure
set verbose true
do that and run to see if you get more insight on why the exploit didnβt hit you back with a reverse shell
next apex
what did it say?
naive dust
anyon3 can help with this as metasplkoit is not working/Challenge time! What date was the file fileUpload.php
is my last topic on the room
eager fulcrum
dapper lichen
Need some help with python3
I can't make it print raw bytes just like they are received
naive dust
@dapper lichen that's how python represents hexadecimal bytes that it can't print out as a string
dapper lichen
And there is no simple way to print bytes in hex?
naive dust
That is printing bytes in hex
dapper lichen
but is like "encoding"some of them
dapper lichen
Yep that is working thanks!
unique flume
Is it possible to setup virtualbox kali VM network to be able to connect to the internet, see vpn connection on the host and get reverse shell?
Bridge -> VM does not see hosts VPN connections (maybe some additional settings needed?)
NATs -> cant get reverse shell
other options seems not relevant
I can run vpn connection in VM but then I cant access target private ip with host
crystal osprey
I just solved this issue myself. Run kali in NAT and then install the openvpn on the kali
you should get get 2 ips to use
just make sure the listen ip is your openvpn ip
unique flume
makes sense, thanks!
eager fulcrum
@unique flume I'd imagine if you wanted both with VPN in host, NAT one adapter and bridge the VPN adapter. But best way is VPN from kali
stone roost
Yeah true
If you want vpn access from the host. Then just install openvpn from the host and bridge the network for kali
lucid zodiac
Hi there. I'm currently thinking about going premium at TrykHackMe. It says that I could get 20% off if I'm a student. Which I am. But I don't see where I could claim this discount. Could you help me? Thanks in advance
jolly pasture
Hackpark is gone down
leaden token
Hi there. I'm currently thinking about going premium at TrykHackMe. It says that I could get 20% off if I'm a student. Which I am. But I don't see where I could claim this discount. Could you help me? Thanks in advance
@lucid zodiac message hello@tryhackme.com with your thm username with your student email to get the discount
jolly pasture
Hey guys it's kinda hard to complete a room when it keeps going down
leaden token
wdym goes down? you can extend time on the box
jolly pasture
I mean it loses connection even when i have time left
help
acoustic inlet
Would it be a good idea to remove dual-booted ubuntu and dual boot kali linux instead? I want to use it for daily use like browsing and for hacking.
eager fulcrum
Kali isn't designed for daily use really
With non root by default it's a lil better but it's still an unstable release of debian
steep grove
This the right place to get a premium issue worked out?
deep trellis
Yes
8 hours open nice
@vocal wasp @vapid dawn I think there is a bug with the expire
@vocal wasp Whats your timezone?
vocal wasp
@deep trellis PST
also having vpn connections issues with the intro to x86-64 machine. unable to connect without having the ssh shell hang
restarting my openvpn connection is the only way of fixing it
but dies in 1 min. Only enough time to sftp the files to complete the room
vapid dawn
@vocal wasp can you DM me the timezone and room youre working on :))
and is that as soon as you launch the room or only after you add one hour?
vocal wasp
after you after you launch the room
@vapid dawn
adding an hour just makes it 9 hourss
vocal wasp
firefox
steep grove
Additional, anyway to re-link to a different try hack me account? π
deep trellis
What do you mean?
steep grove
Link from one TryHackMe (NaphalSec) to other ( Naphal) with the TryHackMe bot
eager fulcrum
Discord and TryHackMe aren't permanently linked at the moment, if that's what you mean @steep grove
If you mean you have two tryhackme accounts, those are stuck seperate
deep trellis
Just use your new token Naphal:)
steep grove
Ah, when I used it again it just said my rank was already updated. If itβs working then perfect, Thanks!
ornate zealot
hey, My college is blocking openvpn. is there any workaround?
for the tryhackme.com
deep trellis
Use the in browser Kali machine
hey, My college is blocking openvpn. is there any workaround?
@ornate zealot https://tryhackme.com/room/kali
ornate zealot
Actually I have not tested platform enough to subscribe.
crystal osprey
What I did, and I'm not saying do it, is that I routed my traffic through a SSH connection to bypass my high schools proxy
vocal wasp
even the kali machine is bugged
deep trellis
ah, I think its your timezone.
vocal wasp
UTC?
deep trellis
@vapid dawn was on the timezone horror
eager fulcrum
Poor ashu
deep trellis
But seems it has shed its ugly face again (the bug, not ashu)
eager fulcrum
Glad you clarified that
crystal osprey
haha
vocal wasp
anything I can do other that quit my subscription?
deep trellis
3 options, I can help diagnose and fix the issue here and now (if you have a spare 15 mins to help me), or you wait for @vapid dawn to fix (24-48 hours fix) or you can unsub π¦ .
eager fulcrum
Ooh we summoned ashu
vapid dawn
@vocal wasp you mentioned that the issue was in your timezone in DMs
I'll help you fix the other issue ofc but I'll have to get back to you with this over the next 24 hours if that's okay :))
fiery pebble
anyone else here trying to finish up the room 'blue'? Been running the msf exploit like 20 times now, usually it takes about 5 times before it is able to get me a shell. I havent had any luck since I first started today. Just wondering if I am the only one? I can DM if spoilers are banned on here.
rigid oxide
Is the exploit just failing a lot?
You can also download the machine if it's being really stubborn, I have a link to that box for download on my personal website
fiery pebble
oh ok, lol I tried to fix it by subscribing for 6 months... guess throwing money at my problems aint working haha
rigid oxide
I mean we appreciate the subscription lol
But yeah, if you have any issues just ask π
Have you tried killing the box and restarting it? It takes about 5 minutes to launch
fiery pebble
ive done it once, I will try again and leave it alone for 5 minutes before trying again
rigid oxide
Have you watched my video on the room on how it can be kinda touchy?
Also, try updating your Kali box
Older versions of metasploit aren't the most stable for that exploit
rigid oxide
In case you want to try the local copy you can get it from here: https://darkstar7471.com/resources.html
I know that somewhat defeats the purpose but sometimes that exploit is super touchy for folks, I'm not entirely sure why or if it's specifically and internet issue
Actually, have you run it off the sub kali machine?
fiery pebble
Thank you for the help, I updated Kali last week, it was working just fine before, I was just revisiting to finish up on the flags section. I'll download the vm if all else fails. Yall are awesome.
WSL? I have not run it from there.
rigid oxide
Hey we're happy to help β€οΈ
Oh be careful about WSL, that can be reaaaaaaal weird about exploits/nmap
supple sonnet
and anything that requires a raw socket
eager fulcrum
Lmao someone tried to call me out for recommending against it
fiery pebble
I'll try anything
naive dust
You should really use a Kali VM
supple sonnet
WSL should not be used as a replacement for Linux right now, there's huge issues w/ Memory and networking capabilities, it's pretty good about most things, just not anything that requires direct hardware access. Microsoft isn't putting a hole in the HAL for WSL. Iirc thats why with WSL2.0 its moving to more of a virtual machine approach opposed to a "kernel" running alongside Windows
fiery pebble
I run kali in Vbox.
eager fulcrum
That works
supple sonnet
with all that said, you can find resources on WSL2.0 here:
https://docs.microsoft.com/en-us/windows/wsl/wsl2-install
fiery pebble
downloaded the VM gonna try it that way.
whole tusk
I have a question. I just started today after getting OpenVPN configured...easy! I was running a virtual room but i didn't see any command line or GUI. Am I suppose to use my own Linux VM?
patent tiger
eager fulcrum
@whole tusk a limited number of rooms have browser control. Most of the time you need another machine. TryHackMe have browser based kali if you're a subscriber, or you can create your own VM on your machine
If you use your own VM, it's best to run the VPN connection from that VM rather than the host
whole tusk
@eager fulcrum So basically I need to run it on my VM (I have Kali) instead of my Windows. Got it, I'll download it on there. Night!
eager fulcrum
Web rooms etc can normally be done from Windows
Normally establishing what's running is one of the first steps
vocal wasp
@fiery pebble for blue have you tried changing LPORT to 8080 instead of 4444 to help prevent the kernel level exploit from crashing the target machine?
@patent tiger did you configure you browser to capture web traffic
Or is burpsuite open but the listener within burpsuite is closed?
fiery pebble
@fiery pebble for blue have you tried changing LPORT to 8080 instead of 4444 to help prevent the kernel level exploit from crashing the target machine?
@vocal wasp Thank you!!! and I ended up using the VM, I should retry that tomorrow! thats a great tip, thank the lord for THM lol learning something new everyday
eternal vigil
barren birch
@eternal vigil what's up?
whole tusk
Just getting back @eager fulcrum I saw you posted Windows can run from Windows, but I didn't have any luck. Will try out with VM VPN instead
eager fulcrum
Windows can run from windows? What? @whole tusk
steep grove
Is there supposed to be an additional log in here? I have tried the creds given, my THM creds and restarted the box multiple times. SSH is working however! ( For Kali VIP VM )
deep trellis
That's a big, it's coming back oof
@eager fulcrum nooooooo
Not this bug
Ah token undefined.
In your browser
I need to check its not undefined before sending to the client, and then requesting tokens again.
Is there supposed to be an additional log in here? I have tried the creds given, my THM creds and restarted the box multiple times. SSH is working however! ( For Kali VIP VM )
@steep grove For now, would you mind terminating and re-deploying the machine. Its a really weird usecase for this to occur.
I will take a deeper look into it over the weekend.
steep grove
Can do! @deep trellis
Am I good using it via ssh still after redeploy?
steep grove
Perfect, thanks!
twilit blade
using my own Kali and SSH in to the basic Linux room, going over some stuff again. Everything keeps locking up and i have to keep terminating and redeploying the machine.
dapper lichen
Its possible to migrate from a php meterpreter to a windows meterpreter?
eager void
is anyone having any issues with openVPN right now? have been tryigng to set it up for the first time today and once i connect via the config file im getting no internet connection at all not even to the deployed machine. I tried it in my Kali VM as well as my arch machine and both are no dice. Just wondering if im missing something here. My VPN config for HTB works though so im kinda stuck as to what the issue could be
also have tried regenerating a new config file as well
deep trellis
Hi there
What do you mean?
Deploy a machine in that room
Can you please tell me if you can connect to it
Or is your OpenVPN client not connecting at all?
eager void
so Once i deploy my machine and all i launch openvpn to my .OVPN file that i downloaded from site and it will "Connect" and it shows connected on the site under access but when when i ping the box i get no response and i cannot reach out to the internet at all say if i wanted to google a vulnerability or a tool or something everything is just hung. it happens in my Kali VM and my Arch machine
also once i disconnect VPN and refresh the connection verification on tryhackme it will never say i disconnected
eager fulcrum
Some machines don't respond to pings so that's worth remembering. Are you VPNing from arch or kali?
The access page takes forever to update too
@eager void
eager void
tried in both arch and kali after reboot and a killall openvpn just to make sure there was not an existing connection but even so once i connect to the vpn i cannot reach out to internet whatsoever
considering the .OVPN file for HTB worked i tried to refresh the config file but even with the new one still the same issue
eager fulcrum
That's weird. Tried a reboot on both? @eager void
eager void
so @deep trellis I could connect to that Box's web page im not sure if its something on my end but i could connect to that but no other internet connection whatsiever
@eager fulcrum Yeah tried reboot on VM and Host
naive dust
@pliant swift https://tryhackme.com/ doesn't eork
In the browser
Are you sure?
It works just fine for me
barren birch
It's up for me too. The curl thing will be the https redirection
naive dust
Yeah
pliant swift
It loads forever
pliant swift
No. it loads and therefore I am not able to login
round sphinx
thm work for me but vm not a all
pliant swift
On the login page it loads again forever and when it is loading I am not able to click into the input vields
I have 20 Mbps download
naive dust
@round sphinx what do you mean it doesn't work in a VM
eager fulcrum
It's up for me
naive dust
Everything works fine for me
eager fulcrum
Not in a vm, I think deploying VMs they mean?
eager fulcrum
Everything works in crhome here
round sphinx
i have deployed a metasploit machine
and got some time out when run
maybe bcauz im not subscriber ?
eager fulcrum
Huh? @round sphinx
round sphinx
eager fulcrum
That's not related to being a subscriber
round sphinx
kk, say that cause subscriber have "better" vm
eager fulcrum
Timeout normally means your session is broken
Doing it again and again won't fix it
round sphinx
eager fulcrum
Sounds like your VPN is broken
eager fulcrum
It'll be your connection to the server at some point
deep trellis
@round sphinx are you connected?
It loads forever
@pliant swift Check again?
Loading slow, or loading forever?
round sphinx
Not actually
dawn hatch
Is there any chance I could sub for a month using paypal ?
eager fulcrum
Fees are too high to justify it iirc
round sphinx
@deep trellis here im on
deep trellis
Is there any chance I could sub for a month using paypal ?
@dawn hatch Sorry no:(
@deep trellis here im on
@round sphinx yoyo
So you cant connect at all?
steel rapids
Imma guess PayPal fees are too high?
naive dust
Yeah
deep trellis
PayPal fees are really annoying
naive dust
Perhaps you could make a PayPal 1 month sub more expensive to cover the fee @deep trellis
deep trellis
Yeah I guess, I could do
I think more people will complain about that though
"Why is 1 month more expensive, I could just do ...."
barren birch
That's on them though. People are asking for it -- and the solution is to make it more expensive
deep trellis
That's on them though. People are asking for it -- and the solution is to make it more expensive
@barren birch Yeah hm, I might think about adding it
eager fulcrum
As long as you have a note about paypal fees
languid storm
Also got your VPN running?
winter nimbus
No just uninstalled it to make sure
languid storm
Uninstalled your VPN?
languid storm
Sorry, do you have your OpenVPN connection to THM going?
You'll also need to specify the user you want to make your SSH connection with
barren birch
Have you looked at the write-up @winter nimbus?
I've covered the SSH connection in it as well
barren birch
Ah. That helps π
languid storm
Woohoo lol
naive dust
Remember back in the day when there wasn't a writeup @barren birch
barren birch
That I do. It's been so... peaceful π
soft abyss
Thanks
how can i get the name of the cookie used for authentication?
I tried whole the ways
barren birch
That's more a question for #room-help. Hop on over there and I'll give you a hand π
soft abyss
of course
whole tusk
Windows can run from windows? What? @whole tusk
@eager fulcrum Disregard please, I was tired!
naive dust
@naive dust whats the error
cant open the file
i'm on vmware
you can try providing a full path
the file is on my desktop tho, how to do it i'm noob
wait its on your desktop
ur just in your regular home directory
cd Desktop
then try the command again
thanks
capital D
also you left your home user directory
cd ~/Desktop
just run that
oh your root user mb
cd /home/alex/Desktop
there
that worked but still cant open the file
make sure the file is in your desktop
ls
is it there
thanks a lot worked!!
you connected?
neat
naive dust
Does anyone know how I can use openVPN on Mac? They say that I need some vpn page
barren birch
Much easier to do it from inside a VM @naive dust
You'll likely want to use a Kali VM for working anyway
naive dust
My apple device struggles with VMs. I'll have to get my old windows out again... Does try hack me use a lot of memory?
naive dust
no. If I where I would use the web. I see what your getting at though.
barren birch
Yeah, that's often the easiest way if you're having trouble with the VPN, or running VMs is difficult for whatever reason
barren birch
No problem π
glossy maple
severe furnace
Hi, Im getting Connection Error on deploying the THM Kali 2020 version
red locust
hey so i clicked on a paid room and i can't access itt cause of the why subscribe redirect page but the tasks got added to my incompleted tasks tab, is there a way to clear those or leave the room?
eager fulcrum
I asked for a fix for this a while back @deep trellis
deep trellis
Can someone add it to bugs so I remember:) easy fix, will get it done tomorrow
barren birch
Roles get added by mods or admins. If you're wanting to upgrade your level, use !verify again
fleet sluice
ok sir
Hi, Im getting Connection Error on deploying the THM Kali 2020 version
@severe furnace it will take around 2-5 minutes sir..
severe furnace
@fleet sluice I waited for more sir.. anyways I will try again later
barren birch
@severe furnace could you please screenshot the error?
I find it highly unlikely that it's to do with the boot times, given there's literally a countdown timer on that box...
sick shard
Getting this whenever I do any sort of multi-request thing on a thm box, like directory bruteforce or authentication bruteforce. Think it's on my end or...?
zealous yoke
do you have a stable connection to anything else outside when not connected to the THM network I.e. pinging google for a couple of minutes? @sick shard that looks like either a unreliable connection on client (your) side or an issue with the openvpn server. Are you a new sign up by any chance?
As in do you get assigned the IP Address 10.9.. when trying to connect to THM?
zealous yoke
Mhh yeah okay, if youβre 10.10 Iβd assume it isnβt serverside. IIRC although it says error, it isnβt critical and is more of a warning, surprising how you get that when only running anything thatβs multiple tasks I.e. dir busting - hence the ask if your connection is stable π
sick shard
Ah I see
zealous yoke
Are you on WiFi by any chance?
sick shard
i am
zealous yoke
Ah okay, that could play a big part in it - will be interesting to see how your ping tests against say google are. See if thereβs any big differences in responses
From what I remember you should be okay, that error is more related to networking traffic attempting to βescapeβ openvpn I.e. latency and thatβs where killswitches come into play. But as itβs THM and nothing sensitive you should be okay to ignore them (thereβs a specific flag you can provide to ignore them but I canβt remember) anyone whose more familiar with THM back-end please feel free to correct / affirm me π
sick shard
Thank you
fleet sluice
@fleet sluice I waited for more sir.. anyways I will try again later
@severe furnace is your problem solved sir?
nova crescent
Hello guys , for some reason i can't connect to any of the machines but it says its connected ..
nova crescent
Hello guys , for some reason i can't connect to any of the machines but it says its connected ..
@nova crescent problem solved
jolly pasture
I can't ping hackpark
barren birch
That would be because HackPark is a Windows machine @jolly pasture.
i.e. it's got the default Windows firewall, which blocks incoming ICMP (ping) requests
jolly pasture
I could ping it earlier, Then it stopped working and i can't do anything with it.
I reset it a few times but still nothing
severe furnace
@severe furnace is your problem solved sir?
@fleet sluice Yes sir
naive dust
strange. i cant connect anymore. i open a new VM and generated new key still doesn't work.
That's because it's in your desktop @naive dust
cd /home/alex/Desktop && sudo openvpn Daywalker.ovpn
ls
Is it there
seems to be working now. so wierd lol
Also btw ur root user you don't need to use sudo
Ok then
ah thanks
zenith falcon
and this one stays stuck idk why ?
Does this mean that i'm conacted to the server ?
barren birch
Theoretically
Can you try ps aux | grep openvpn and screenshot the output @zenith falcon?
zenith falcon
@barren birch here is it
barren birch
Yeah, you seem to have multiple sessions open. That tends to get the VPN really confused
Try sudo killall openvpn
Then connect again
Also, @steel rapids -- what's the ETA on the lovely Bot command to impart that help automatically?
zenith falcon
@barren birch i did what you asked and it's stuck at the same place where i showed you in the firs place
barren birch
Yeah, that looks good, but if there's more than one session open it's still not going to be happy
To ps aux?
zenith falcon
yea exactly
barren birch
Weird
Close your terminals, reopen, do sudo killall openvpn
Then try connecting
For whatever reason it's trying to open two at once
zenith falcon
should i keep using sudo ?
barren birch
Yeah. You're not logged in as root, so you'll need to
zenith falcon
let me try somthing and i'll show you what i got
now it's shoqing for me pushing request ?
barren birch
Hmm?
barren birch
Ok. What does ifconfig show you?
zenith falcon
in the network Information it shows that i'm conacted but when i try to conect to a specific machine it takes too long and after that it shows up for me that conectoin timed out
i don't have that command
barren birch
Ok, so that's working fine
zenith falcon
yea
zenith falcon
well this the first time i'm trying tryhackme and i think it only for zthlinux
zenith falcon
when jhon hammond released his youtube vid if i remember
zenith falcon
Hello
zenith falcon
which machine should i give a try ?
barren birch
Why burst in then π
zenith falcon
yea take your time
barren birch
Eh, I'm biased. Try Cherryblossom
barren birch
He's biased too
zenith falcon
Thanks dude it's just i wanted to get fimiliar with linux that's all
naive dust
I am a completely biased source @barren birch
barren birch
Wait a second. @naive dust -- he's already doing zthlinux
It's your box that ain't working!
naive dust
Ok
eager fulcrum
lmao
naive dust
I have read
naive dust
And it's only open on tun0 so network wise you should be good on connection now
zenith falcon
xD i thought he was talking about my choice xD
zenith falcon
@barren birch you're talking about what ?
barren birch
Yep. That's a good recommendation.
Your connection should be good
naive dust
First rule of IT turn it off and on again
barren birch
Aye, terminate the zthlinux box. Start it up, wait five minutes. If you still can't access it, give us a shout π
eager fulcrum
Also the site seems to be in pain rn
naive dust
No prob my good sir
eager fulcrum
If anyone else is having issues, I'm interested
zenith falcon
just to know guys that this problem is occuring only on tryhackme
eager fulcrum
??
zenith falcon
but for overthewire is working fine
naive dust
The sites going through some growing pains @zenith falcon
That's probably why
Also overthewire doesn't require a vpn
barren birch
However, the site itself shouldn't be influencing the VPN server or the virtual machines
zenith falcon
not talkinga bout a vpn but for the SSH comand ?
barren birch
Still, something is definitely up just now
naive dust
Oh I C
eager fulcrum
you need to be connected to the VPN to ssh @zenith falcon
naive dust
Yeah just reset and pray π
naive dust
@eager fulcrum yeah he knows were going through it
zenith falcon
Yea i know that james
okay i'll give it a try tommorow
i think i'm head now to my bed xDD
naive dust
Well then ni ni
zenith falcon
Thnks for you too guys
another question guys where is the differance between someone using kalli and someone using a based arch linux distrubtion ?
before i go to sleep xD
naive dust
Do you mean an arch Linux Pentesting is like blackarch @zenith falcon
zenith falcon
Nope manjaro
naive dust
Oh
Kali comes preloaded with just about every tool you could ever need
It saves alot of hassle installing things
zenith falcon
but still i can do those things using manjaro ?
naive dust
Mhm
Shows my profile
Replace with any username you need
You can search for specific creators rooms aswell
https://tryhackme.com/hacktivities#Darkstar
zenith falcon
ah okay thanks a lot bro i really appercaite that from you
naive dust
No prob
whole tusk
Deploy a machine in that room
@deep trellis I am able to deploy the room, but I don't actually see it. VPN works fine.
whole tusk
I have deployed the room but I don't see it. I'm new so I'm not sure how it works.
eager fulcrum
Just below the chart, there's a box with a red border
That gives you the IP address of the virtual machine that you have deployed
whole tusk
I see that IP
signal fossil
hey, i am trying to solve the 25daysofchristmas challenges, and when i deplody day13 accumulate, i cant ping it, even after 15mins
so i kinda cant use nmap on it aswell :/
rigid oxide
Yes but I don't tell you what switches you should be using in that task.
steel rapids
nmap by default pings the machine first to see if it's alive. You can make it so a machine doesn't respond to these pings. Have a look at what nmap switch allows you to get past this.
west minnow
hello guys Δ± cant opening configuration file Δ± try everything can you guys help me ?
the command line is
sudo apt install openvpn && sudo openvpn /path-to-file/file-name.ovpn &
leaden token
yes it is supposed to be like that
sharp bisonBOT
TryHackMe
leaden token
try this
west minnow
leaden token
now try to connect
leaden token
Regenerate your file here and download again;
Also try putting it in some other directory
west minnow
still same Δ± try already regenerate file
Δ± have been working on this 1.5 hours Δ± am going crazy
steel rapids
Is that where your conf file is? Does root have read perms for that file?
west minnow
how can Δ± give perms that file
leaden token
go to file's directory and type
sudo chmod 777 {filename}
that gives full permissions to read, write and execute file
west minnow
not work
leaden token
are you using ubuntu?
west minnow
yes
leaden token
it's better to get a Kali/Parrot Virtual Machine or use Kali room on the website because ubuntu is not suitable for hacking/pentesting
barren birch
I mean, to be fair, you could add in the Kali repositories to Ubuntu, but it is definitely better to get a specific "space" to do it in
steel rapids
Ubuntu can be used, you just have to set everything up yourself
They are both Debian based after all
brave agate
Hello, i tried searching through the messages here already, and I've seen it has been asked other times, but I couldn't resolve my issue. When I first access a vm in a room, I don't have any issue. Once they terminate once, and I try to redeploy them, I get a login page which says "REMOTE TRYHACKME". Tried RDP credentials, ssh credentials, my own thm credentials but nothing seems to work. This happens on my own kali vm and on normal challenge rooms. Any suggestions?
barren birch
@deep trellis -- got a problem again ^^
steel rapids
I doubt he'll be up yet
barren birch
@brave agate that's something the admins need to sort. It's a bug in the backend
leaden token
bruh we out of vpn
barren birch
Uh, yeah, fair point @steel rapids
west minnow
is this a problem with the website ?
barren birch
He'll see it later
brave agate
@barren birch Thanks! Good to know.
leaden token
i'll try to find the solution somehow
the website is infinitely loading too
after showing the content it still shows loading bar
west minnow
so the problem is not me
west minnow
oh thanks
its not problem it happens anybody
can you give a information when it is fixed ?
leaden token
sure
west minnow
okay Δ± am trying now
still same
Δ± download other configurate file and gave the permission already
any options ? ? ?
west minnow
okay thanks again
naive dust
Im new to the site and confused at how I can access the VM. Ive downloaded the VPN and started it and am online according to the website. I have attempted using SSH through putty to connect but upon a request for my user it gives me no supported authenitication methonds sent server
Ive also attempted using RDP but that did not work either
Im at a loss as of how im meant to connect and user the VM at this point
barren birch
@naive dust what OS are you using, and what room is it.
Guessing Windows and Learn Linux
naive dust
Im on windows 10 yep
Sadly I do not have a linux machine and havent set up a linux vm but I assume it should still work to study on win10
Also the room is the RP: Nmap
Was not sure where to start from
barren birch
Uh, that machine is unlikely to let you SSH into it. RP: Nmap is about scanning.
naive dust
Hmmm alright how would I be able to continue the task xD
barren birch
It's a tutorial, so follow the questions. The VM you deployed is the target for your nmap scanning.
barren birch
Given you're using Windows you'll need to either find Nmap from somewhere (guessing there probably is a .exe for it), or use a VM
naive dust
oooooooooooohhh
zenith falcon
okay so i have no process is going on and i still can't connect
barren birch
You're in luck. There is a Windows version. Although realistically you will be better using a VM in the long run regardless.
leaden token
okay so i have no process is going on and i still can't connect
try again
barren birch
@zenith falcon have you tried regenerating the config?
There have been a lot of VPN errors recently actually.
naive dust
Oh so if i set up a normal linux VM I should be fine then ?
leaden token
yes @naive dust, but better a Kali VM or Parrot
rich cairn
Operation not permitted
at the end of your logs, tried running it as sudo ? @zenith falcon
@naive dust you can go on kali website and download the premade VM for it
barren birch
@naive dust theoretically. If you're using a VM you'd be as well going straight for parrot or Kali
naive dust
Oh should I go for kali and not just say ubuntu ?
leaden token
definitely
barren birch
That said, the premade VM is, uh, Sketchy. Often better just getting the ISO
rich cairn
yeah, kali's got every tool you'll need to use in boxes
zenith falcon
i'll try to regenret the config @barren birch
@rich cairn i'll try to do that
barren birch
@naive dust You COULD use Ubuntu, but then you'd need to set it up for yourself.
Kali comes with the repo preinstalled.
naive dust
Hmmm, Alright thankyou! This cleared up alot haha
Ill take a look into the kali vm π
zenith falcon
Guys how do i know that i'm connected ?
leaden token
Guys how do i know that i'm connected ?
@zenith falcon it'll say 'Sequence complete'
leaden token
zenith falcon
@barren birch not after 08 but before like friday if i remember
barren birch
Eh, if that doesn't work try pinging 10.8.0.1 too.
zenith falcon
@zenith falcon it'll say 'Sequence complete'
@leaden token and does it stay stuck or it only shows that and give you the hand to your terminal
barren birch
Or just screenshot what happens if you do sudo ifconfig
rich cairn
you're not running openvpn tho @zenith falcon
barren birch
Did you Ctrl + C the VPN process by any mischance?
rich cairn
probably why you don't have the tunnel interface
zenith falcon
Wait i didn't get what you both talking about ?
rich cairn
is openvpn running ?
rich cairn
yeah but did you try running with sudo ?
zenith falcon
yea already did
rich cairn
same error ?
zenith falcon
no differance
barren birch
And you regenerated the config, yes?
rich cairn
reboot your machine
barren birch
Also, that's a permission error. You sure running as sudo doesn't make a difference?
Admittedly, it would usually tell you before letting you execute.
Yeah, the site is not very accurate for that.
zenith falcon
first time that i excuted the command it didn't tell me anything
barren birch
That is also unusual. It should give you a long stream of information, then basically just hang after a success message.
Try doing the last step of this?
!multivpn
sharp bisonBOT
TryHackMe
barren birch
Can't be bothered typing it out on a phone. Thank you so much @spare blaze β€οΈ
zenith falcon
it should show this ?
barren birch
Already said that π
eager fulcrum
Looks like it's working
zenith falcon
Leave the terminal open, and open another one.
@barren birch ofc i'll do that
zenith falcon
look
rich cairn
try pinging 10.8.0.1
zenith falcon
for 8 it's working
rich cairn
yeah that's because your IP address is 10.8.28.11
barren birch
Well, at least it's working.
rich cairn
yup
zenith falcon
So you signed up before the 8th
@barren birch i've said that xD idk if you noticed or not
barren birch
Yep, apparently missed that π
Fair enough though.
If you deploy a target VM and give it a few minutes, that should work now π€
zenith falcon
using SSH ?
barren birch
Depends on the machine. Some have it enabled, some don't
Probably easiest to just ping it.
Use zthlinux or Cherryblossom. I know those will accept pings.
zenith falcon
zthlinux i think it accpets ssh
barren birch
It does, but checking to see if you have a connection available before trying might be beneficial.
zenith falcon
okay i've oinged the ip address of the machine it's not working
barren birch
Give it a couple of minutes to load.
Remember it's literally like booting up your own computer.
barren birch
Exact same sequence, just virtually.
zenith falcon
it's working know
barren birch
Lovely π
zenith falcon
Thanks bro
barren birch
Np
zenith falcon
Well that's amazing i've finished the zthlinux room finally
barren birch
π
zenith falcon
@barren birch bro do you have linkedin ?
barren birch
Mhm. Not under my opsec though
zenith falcon
ah okay
fallow gate
hello. dont know if this is the right please to ask. Does anyone know the specs for the subscription kali vm on tryhackme?
barren birch
Should be written in the room, aren't they?
eager fulcrum
Yea but you can't access the page unless you're subscribed
barren birch
You should still be able to see the room
eager fulcrum
Couple cores on a xeon, 8GB ram, no GPU
fallow gate
i see. thank you very much!
reef ginkgo
I'm not able to ping the target machines. I've tried pinging on the kali vm too.
zealous yoke
Have you allowed a couple of minutes for the target machines to boot up? @reef ginkgo a good estimate is a couple of minutes
It's as if you were turning on your PC. Target machines running more intense apps will take longer to deploy - especially Windows boxes!
zealous yoke
And you can't ping even from the Kali VM?
zealous yoke
Worth remembering that Windows boxes by default don't respond to pings. What rooms are you trying? π
zealous yoke
Ah okay! That'll be it
Yeah, try a linux room and you should be all good
I think there's a tiny portion of the Windows boxes that respond to ICMP π
reef ginkgo
okay, thank you
zealous yoke
No worries! The Kali VM is already connected to the network, so you won't need to connect via VPN. But if you were to use your own VM, you'd need to connect via VPN - which can be done here: https://tryhackme.com/access
eager fulcrum
@vapid scroll Subdomain or what?
Remember, we can't help you with the coursework rooms @vapid scroll
round sphinx
TryHackMe bot is down !
eager fulcrum
@round sphinx Discord died, bot came back when discord did
round sphinx
covid came online π
dusk haven
with root permissiom its not working
barren birch
Try it without the backgrounding.
dusk haven
but while i give cmd without root permission its connected but after deploying rooms ip isnt working..i dont understand the problem. this problem i faced on my laptop but on my mobile everything work well
eager fulcrum
@dusk haven "operation not permitted" and it exits
Hmm, without sudo you get told you're not allowed to do something
That implies, as everything says, you need to use sudo
barren birch
That's a sudo problem. We had that earlier.
Use sudo and it will work
Also, are you also connected on your mobile?
dusk haven
right now i have not connect on my mobile
sharp bisonBOT
TryHackMe
barren birch
Try that
dusk haven
ah great 
thanks
eager fulcrum
@shut acorn You're going to need to provide a lot more context
What machine, are you VPN'd, how are you trying to connect?
shut acorn
Attempting to access this room and I accessed the network doing as it asked in the room?
https://tryhackme.com/room/25daysofchristmas#