#site-support
1 messages ยท Page 147 of 1
I am trying to connect to the 25 days of christmas task and it simply says "http://*machine ip here":3000
I could only assume that the machine ip is the ip I am provided at the tryhackme.com/access
?
Yeah
Oh my I just realised that
Also bear in mind that it takes a lil while for machines to deploy
Especially the backend for these, they take a while to get going
Agree ^
So if it just goes like that give him a bit too easy
Also, when connecting to OpenVPN using terminal after it says intialization sequence complete just leave terminal open correct?
too easy
thanks for the help I will let you know if I get stuck again haha atleast I am learning
ยฏ_(ใ)_/ยฏ
"too easy"?
Just what us aussies sometimes say when we get given instructions haha
Cheers mate
mhm so after waiting about 5 minutes it still does not seem to let me connect?
oh dw
just taking forever to load thanks for the help ๐


Hey in there
i huv a small question ?
when i click on a room and it redirect me to the "why subscribe" page it means that the room isn't free ?
just wondering ?
Yes
okay thanks
Hi guys, I realized that this machine is unreachable (https://tryhackme.com/room/ctf)
TryHackMe is an online platform for learning and teaching cyber security.
I can't get a connection
You're connected to the VPN, have deployed the machine, etc?
Yes
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
I tried to deploy another machine
And I could access the other machine
(sorry about my poor english)
I'll check the machine now, but it should be working
Do us a favour, type ps aux | grep openvpn into your terminal and screenshot the result?
It looks like you've got more than one connection open
Which usually breaks the whole lot
you have 2 processes running?
I terminate the other
But can make it act really weird
You have 2 OpenVPN connections
From that image you sent
You need to terminate one
When I boot my machine I always connect to the vpn
!multivpn
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
Only 1 time
I love that command so much
It can be a bit funny sometimes
:/
However. In this case (despite there being two open), it actually is something with the machine
It's operating as intended
But it's not pingable
Try doing nmap -Pn <machine-ip>
No problem. That's what we're here for ๐
๐
Is the bot dead?
What giveaway? @barren birch
Where's that lool
Announcements
rip the bot
Haha!
is the site down?
yes
ok
under maintenance
Mhm
Should be back soon but not yet
A nice "maintenance page" would be nice, next time, just a constructive feedback
Should be back soon but not yet
@eager fulcrum No problem, Thanks for the heads up
I mean it was meant to be 25mins ago
There was one earlier - however due to the maintenance they're doing its essentially not possible to have a maintenance page lmao
Patience and Skidy will pull through
it's always DNS
There was one earlier - however due to the maintenance they're doing its essentially not possible to have a maintenance page lmao
@zealous yoke I do not fully agree with your statement though. It is possible to setup a maintenance page, most of the time, depending of what exactly the work is/was
but I do not want to get too much into technical stuff
Oh yeah - most of the time - but they're moving everything to load balancers so you've gotta take everything down at somepoint. Unless you point the domain to just an apache splash page saying "we're down brb" ๐
for instance... a load balancer
Eh, it's still better than <html>down for maintance</html> which I have done on several occations
Back to Plan B, I guess.... watch Offsec new material and videos
If you need support, feel free to speak here! @narrow charm
Just starting this so pretty new and its probably something ive screwed up but, im connected through open vpn and started a machine, but when i try to connect to the Ip it wont connect
Hu
Good morning!! Hey @warm needle, are you still having problems accessing the VM? Remember - just because you can't navigate to it via your browser on the default HTTP port 80, doesn't mean the box is broken. This is where you have to enumerate! Are you able to ping the IP Address?
Cant get any machine to work , tried with different rooms nothing cant even ping it (i was able to connect earlier)
root@kali:~/thm# ping 10.10.66.41 --boxes ip
PING 10.10.66.41 (10.10.66.41) 56(84) bytes of data.
^C
--- 10.10.66.41 ping statistics ---
188 packets transmitted, 0 received, 100% packet loss, time 970ms
root@kali:~/thm# ping 10.10.66.41
PING 10.10.66.41 (10.10.66.41) 56(84) bytes of data.
^C
--- 10.10.66.41 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms
root@kali:~/thm# nmap -sC -sV -oN test.txt 10.10.66.41
Starting Nmap 7.70 ( https://nmap.org ) at 2020-03-18 09:28 EDT
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.66 seconds
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
i believe so it does say im connected
yeah so OpenVPN has issues if you connect with the same cert
alr thanks
But if you connect from 2 devices, you get similar issues
do we have issues again?
@naive dust Context?
can't connect via VPN
not even Guacamole.... server kicked me out
And ...
so... either way, I can't ssh or connect to a lab machine
Your network is not reachable, I do not understand how that can be on my end
No, that's not what network unreachable means
No.
I can't connect to tryhackme via openvpn
I read the output from your VPN command
and Guacamole kicked me out
It says network unreachable. It's not our end
Network unreachable is 99% a config problem
sigh... you are not being really helpful, let me restart my VM anyway
I know what network unreachable means
I'm just saying it's not us
and I am saying it is
Prove it.
I sent you the errors
It works for me, I just redeployed and reconnected
Yes.
You did
And it points to your end
and I am telling you everything works on my end except tryhackme
how is that I can connect to PWK and HTB and not tryhackme?
that sounds on your end not mine
I do not have any custom route tables or something
Do you have multiple vpn connections running? That sometimes can be the issue here
!multivpn
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
What James is pointing out is that given that we aren't having widespread reports that no one can connect to our vpn, it's highly unlikely to be on our end
Do you have multiple vpn connections running? That sometimes can be the issue here
@rigid oxide I do and I always connect that way. I have my software VPN always running on physical machine and never had any issue with HTB or PWK
Strange
Let me turn my software VPN off
@rigid oxide Also network unreachable is a config issue, not an issue for us
I just restarted my VM
Yeah @eager fulcrum I know
Give it a try as well directly on the VM
The vpn's for pwk, htb, and thm all work the same (with the exception of pwk using a login) so there shouldn't be any weirdness there
well, I turned my software VPN off and now it works
so that sounds like an issue from your side
Alright.
I should NOT have to turn my VPN off for tryhackme to work
Depends
I do not feel comfortable doing that and never had
Does your VPN use 10.x.x.x internally?
and I've used it that way since I subscirbed for about a week
You're correct in that statement, that's rather odd that it's not allowing you to connect through it that way
I can close all my laptop programs and just run my VM with tryhackme VPN, but I should not have to do that
I'll give it a try with my vpn later today to see if layering is causing any issues there
I love the site but recently, i got the bad taste on my mouth that everytime I report an issue, it is on my end, when is not
I think there was a misunderstanding there
You should be more receptive when people complain
Give it a moment to look at what James saw from his end, typically that's an issue with the client-side. I believe the misunderstanding was specifically in the layered nature which you're using to connect, something which we don't see as often
so let me do this... I will use it without my software VPN for a while, then I will turn off. But the fact is, my VM is fine, never had that issue and tryhackme VPN just died on me and my internet is rock solid here
The majority of issues encountered in this chat have been encountered before, hence the preconception on our end
I will do that for few hours, then turn my software VPN on for few more hours
No harm meant, we're just relatively used to uses that haven't had experience with OpenVPN which isn't the case for you of course
Thanks
I'm guessing there's a routing issue either via the hosting or something else strange
It's more of a niche issue which is just a set of bugs were going to encounter more and more. I'll give this a try later on my end as well
not trying to be rude, like I said, I love the site, but I am trying to study here and not able to, messes up my whole day
!multivpn
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
Very much understandable haha
Do you mind if I ask which country you're vpn-ing into when the issue happened? I know this is likely not the root cause here, just looking to replicate as well as I can on my end
can I PM you?
yeah go for it
one sec
I have to add folks for dms as I have them otherwise blocked by default
anyone know how i can get the student discount for the subscription?
@prime epoch Are you a UK student or a different country?
uk
So you should have an ac.uk email right? @prime epoch
If that's your primary email, it's automatic
eh i knew this was coming
Otherwise, not 100% on how you get it. @deep trellis
ive had a request in for months with my college to give us student email addresses
kk
@rigid oxide Thanks for your time, highly appreciate it
You're welcome, thank you for your time with breaking down what's going on there with us
@naive dust ๐ค
Hello, I'm new user here, but I have big issue with connection to your resources
its very very slow
is it the kali VM?
you don't have to connect to VPN from your main system if you are using website's kali
and also VM is running very slow in browser and also via rdp
the VM's running fine - something's off with the image transfer, though
3 seconds per frame.. :D
its hard for me to do anything
i also have a problem with the site. i did the what the mutivpn bot said and still cant connect to the server
It was earlier today as well, and it ran fine
@deep trellis is the guac server ok?
@deep trellis is the guac server ok?
@eager fulcrum I think so?
since I closed it
@latent fable yes plz
also via rdp are problems
it's initing
i managed to fix the vpn issue but i have an active machine running and cant access it in the browser (part of the vulversity room)
@fleet wagon not all machines run webservers
When you say "access" what exactly do you mean?
unable to connect
You're gonna have to be a little more specific than that, @fleet wagon :) What are you doing? What's the response?
oh.. do you have to install a virtual machine?
sorry im new to Vms dunno how this all works
@deep trellis @eager fulcrum Yeah, browser kali is still slow for me.
@warm needle what are you trying to do?
i can ping this server, but I can't get thru web brtowser
Does the server you connect to have a website service running?
and i can ping it
right, so it's an endpoint
... endpoint?
@eager fulcrum im trying to connect to the vulnuniversity vm through the browser
host, computer, call it what you will
but it wont let me connect
And is it running a web server?
I see what's happening here
yeap
You're assuming that if you can ping it, then it must have a website. That's not the case
@warm needle are you expecting to see a control box appear so you can use it in the browser?
Also, it does, but it's on a non-standard port.
Your browser performs HTTP requests. A webserver responds to them with content. If there's not a web server, the browser can't connect
A web server is a service that listens for HTTP requests on a port and responds to them
You need to get the right port too
granted it even has such a service running
uh no, im not even sure what exactly im supposed to be doing lol, in the open vpn room it showed i can connect to the vm room or whatever through the browser using the given IP
Normally it's port 80, so you don't need to specify
but is there something i need to isntall?
@latent fable sorry I don't get you, if I can ping this server with small latency, why I can't connect to the website?
because it's not a website
There's something fundamental you're not understanding
oh thank i got it
You've got to enumerate (scan) it first
but it probably needs to be more clear
@fleet wagon nope, it's a thing that you'll learn
@latent fable in task I have information that it is web application
Mhm
That doesn't mean that it's a standard web application
It's running on an unusual port
Wait one second
Perhaps do the nmap room first? :)
How many people are asking the same question here
Sounds like at least 2
Because OWASP should be on port 80
its on port :xxx3
and it is, on your vm i can reach this website but very very slowly
I have problem in OWASP Juice Shop
I have problem in OWASP Juice Shop
@ripe grove Have you scanned it?
this is like looks my kali vm
yeah, the kali vm connection is bonked
Because those are having problems rn
yes
via rdp is the same situation
yeah, the problem is the connection itself, not the browser or the VM
@deep trellis -- having lots of problems with In-Browser Kali here
Apparently it's no longer deathly slow
But, uh, that ^^
the problem is not your internet, but i suspect the server guys' internet
tryhackme has become very popular recently. Yesterday they had to install a load balancer for the website!
oh, ok so it should be temporary issue
yeah
with vpn the same situation?
on vpn i'm still getting disconnect
tha's why i'm concerned ๐
becasue all ways are not working for me properly
!multivpn
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
You tried this?
Any labs on window priv-escalation?
yeah, the kali vm connection is bonked
@latent fable ah right, bonked how?
Just super slow?
I'll give it a go
ty
Yeah, it's slow. But the VM is fast enough. It's unable to render the screen if text is moving until the text becomes still
Ah the guac server was ded?
How does that affect the RDP connections?
does grabbing the screen take lower priority?
I'm going to go ahead and guess its essentially streaming through the application. Its a .... Java... application
the magical curse word.
What's in java btw?
Its the guacamole server stuff
Its easy to upgrade this one, I have it low resources
It's all C
So can scale vertically for the moment
With a tiny amount of java
With a tiny amount of java
@eager fulcrum The way its implemented uses Java
Like how I've configured it
Using an OpenSource project on top
For all the connections to sync with THM (auth)
Yay java
yeet java?
No, yeet can't be used sarcastically
What is java but C# with a bad hair day
don't forget the IBusinessFactoryFactory habits
Hi
trying to work on hackpark, but not able to open the site at all.
I've killed the VM, start again with different IP, nothing.
I also killed the VPN connection, connect again, and still no luck
Hackpark is known to be unstable
Can you scan it?
The best course of action seems to honestly be to reset
Bearing in mind that you can't ping it?
Urgh. So bright
I do not want to ping it
I want the site up and running to check the HTML code
Hackpark is known to be unstable
@naive dust may I know why is that?
Aye, but if you've not scanned it, how are you meant to know if the server is up...
It's just a problem with the room
A bit frustrated here because every time I try to work on an exercise, something is down, broken or does not function properly
Or indeed, which port its on
Windows machines are not the best
Another day in IT, @naive dust. Another day in IT
question, are the VMs shared?
No
no, this is not "another day" in IT (being in IT 20 years).... the site seems very unstable recently, honestly
ok... so... to get some progress here, what do you guys suggest?
yeah, sometimes that happens to systems
ok... so... to get some progress here, what do you guys suggest?
I would suggest scanning it to see if the server is working...
we grew really fast in a recent week, you know
It's honestly just that some of the machines in paths are unstable @naive dust
I would suggest scanning it to see if the server is working...
@barren birch well, certainly is not working, I want it up and running
If you pick a random room odds are it's gonna work fine
How on earth are you meant to know that if you haven't scanned it?
It could be on port 32456...
Just because there is a http server running, doesn't mean that it's on port 80
How on earth are you meant to know that if you haven't scanned it?
@barren birch sir... is down
There's a reason enumeration is important
Ok, so you have scanned it. Lovely. Is there a server on port 80
You know? never mind
lol
@naive dust the best option is to reset until it works honestly
@naive dust Thanks. That's a more plausible option than "scan it again"
scan it for what? Is not up, Jesus
Oracle is just trying to help, we ask that in the future you be kinder when asking for help @naive dust
is that last 48hrs people here seem to be rude when we ask for help
I understand your frustrated
I am trying to be polite but answers and help are 180 degrees different than the main issue
But these aren't bugs specific to you and the best advice we can give is to reset as there is no fix
If the machine is down, honestly, scan it again won't fix the main issue
Oracle thought you hadn't scanned it and assumed there was a web server
It was just a miscommunication
At no point did you say that you had scanned it. Easy to assume that you feel into exactly the same trap as everyone else, and figured it wasn't working because nmap couldn't see it ๐คทโโ๏ธ
but if the main exercise is about port 80 with hydra, and I am saying the webpage is down, how scan it will help?
Communication is wicked hard
@naive dust we don't have every task memorized
We were responding with common advice
I assure you Oracle really was just trying to help
this morning's scan
Getting angry will not make us solve your problem faster
Ok, my bad... I apologize, I understand people of all level of expertise ask questions here
But Yes, I scanned it and webpage does not come up after resetting it 3 times
Thank you, know that we are trying to help you
Let me reset it one more time, if not, I guess is dinner time... but the thing is, being so unstable does not help in terms of productivity, you know, busy life, exams scheduled, etc
I get it, if hackpack doesn't work after the next reset, take a break and try a different room
Sounds like a plan
does anyone know if there is an actual build for kali linux that would work on an amd chip cause i cant find one that works
Amd
@ripe grove had the same thing, i just ended up restarting the host pc
<@&568449888682246145> what's going on with the Kali VM guys. is so darn slow. It literally moves in frames
laughs in self hosted
@open adder I have my own VM too, but why should i crack a password on mine to use the resources when i can use the mighty cloud
tru
it's that i don't have a spare graphics card to add it to my vm and nor i want to install the tools on my main OS
@stone roost I use my windows pc to ssh root@<your Kali IP> seems to be alot quicker
mine is also really slow
hack park is a windows machine and therefore doesn't respond to ping
scan it with nmap with -Pn flag to make sure it's running
everything response to ping
no. trust me, i know for a fact that windows machines don't
oh, i know what you mean, but hackpark has a ping filter so it doesn't
no problem
Nah, people with the same colour as me are designated community mentors
Admin is red or blue
but not this blue
Dark blue
I think that was looked into before
Why do you want static addresses?
So that everytime you boot/reboot a machine it's the same IP
But it's not that much of a feature imo
so lazy.. :D
Connection refused when trying to SSH to a box even when thats part if the task,
does it say what port it's on?
Yeah
i know @rain tendon i have my own kali
is that port open?
but i use the cloud one for a different task
what happens if you try to telnet to it? Does it still refuse?
hey i was doing a room yesterday, the machine has obviously expired but it doesn't give me an option to get it back?
ive tried reloading page, relogging
there's on deploy button in any of the tabs?
nope
which room?
oh wait
i found it
didn't realise i had to open up the first list of tasks again lol
and yet you said nope before checking..! :D
i thought u meant like the outer tabs
fair enough, i'm just teasing anyway ;)
ty anyway ๐
no problem
@deep trellis (sorry for ping but I think it's one for you) what's the best way about getting an account on THM deleted? I signed up way back with my Uni email but I'd be surprised if I've even completed a room.
I'd like to apply the student discount on the actual profile I use
email us from that email, I'll delete it for you:)
would you want the hello@tryhackme.com one?
support@ ๐
gimme a sec. I'll try
ok
You're a subscriber, right?
yes
just checking :)
maybe my session is hanged up somewhere
done that
sweet :)
Hello, I need help with open vpn
what's your question?
!vpn
@versed sentinel
My vpn keeps saying check network connection
Are you connected to the internet
Yes
Has it ever worked before
I just got it today
Maybe Abit of a long shot but is there a chance your network blocks openvpn
I know that's happened to a few of our college students
how would i check that?
You can try connecting from a different place like your home or public businesses
But if your connected at a university there is a non zero chance openvpn may just be blocked
im at my home
Is the internet shared in any way?
what do you mean? lol
Do other people use your internet
like is it an apartment where you get internet from the landlord
Yes, other people do use my internet but my ISP is specturm
i don't live in an apartment
Do you have a vps per chance @versed sentinel
vps?
sorry I don't know much lol
virtual private server ;)
Ohhhhh
A remote computer that you control @versed sentinel
theyโre pretty cheap
No I do not
and it's a lot of fun to have a box you can just remote into
^^^
could you guys hop in a call?
how would I get one? like do I need it?
You probably don't need it as it's probably not the config file
you don't need one, but you also don't need a home
For other purposes though it's handy
lamooooo
@latent fable well now hold on ๐๐๐
Lmao*
seriously, though. Having a bunch of VMs all laid out on a network is wonderful
๐
I didn't have access to anything like that before my current workplace, and I'm not going back
do you control the server? Like can you ssh/rdp into it?
Yes
Is it at your home
Yes
well then. nevermind.. :D
Then test it there it will help confirm if it really is your internet blocking the vpn
It can't hurt to try
I ssh into my kali linux rasberry pi all the time
Mhm
and its not at my home
raspies are also great
how would I use it?
basically, yeah
ohhhhh
there are instructions for linux on the vpn page thingy
!vpn
^^^^^
that's the one
thank you
Did it work?
im installing now
right right~
itโs soooo slow
well, it is a raspi
Verified?
yea
What do you mean
On the website it said click here to get verified
That's for your email
Same error?
Yup
Then this may be some weird bug
You should try posting the error screenshot in #site-bugs
Okay
Thank you
I figured out how to get it to work
I have to use my data hotspot on my phone connect to my laptop and install/run openvpn on there and then get on my PC
So your network was blocking it
Yea? I donโt know why
255.255.255.0
Yeah
I have no idea then to whatโs going on
For some reason your network blocks openvpn
and when I installed openvpn on my raspbi it just crashes when I run it
Aww
how could I change it so it doesnโt block it, I have full access to my wifi network
like admin login to everything
and if itโs wrong iโll just use drillbit on kali to get the password
at this point it sounds like magic, but i'm sure there's an explaination somewhere
could it be an issue with the ISP?
Possibly
That's the only think I'm thinking of @latent fable
I'm not that versed with VPN stuff
If it's blocked on your network you might want to contact your ISP @versed sentinel
Are you the primary account holder?
Yes
Tell them to fix their shit Give them a nice call
Then I suppose so, because other than that we at thm can't really do anything else
They might have had a legitimate reason to block it for stupid general consumers
I use spectrum as my ISP and they don't block it for me @latent fable
I canโt even think of a reason to block it
oh
Since he uses spectrum as well I doubt it just comes pre blicked
yeah
So you really should give them a call and see if they're doing anything
Okay will do
I know that some malware uses VPNs to facilitate communications, @versed sentinel, but yeah, it's probably not that
Good luck and godspeed with customer support
Lol
oh god, not customer support
Customer support sucks but like they say โ Customers are always right โ
Lol
customer: hey I have this coupon but it's expired can I still use it
not customer:No it's expired
customer: but the customer is always right let me use the coupon!
not customer: no
Lmao
Honestly, you can't blame CS for being a bunch of dicks sometimes given the shit they have to put up with
no problem, my dude
Any time :)
Hi admins, can someone tell me whether I can run hashcat on the THM Kali machine?
You can @severe furnace
Thanks
@severe furnace You will need to use --force as there's no GPU
is it actually feasible to do that for the rooms? I'm not super versed in hash cracking
Yes @eager fulcrum Im planning to use it like that
@latent fable Yes, other than some very old rooms. Guidance is hash cracking should be under 5mins and I personally test on my laptop and the THM kali machine as well as my desktop with GPU
Very well :)
I'm having issues connecting to the network. When trying to run theopenvpn with my configuration file, I get error message:
"Thu Mar 19 22:47:52 2020 OpenSSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
Thu Mar 19 22:47:52 2020 Cannot load private key file [[INLINE]]
Thu Mar 19 22:47:52 2020 Error: private key password verification failed
Thu Mar 19 22:47:52 2020 Exiting due to fatal error"
Anything you can do to help?
Have you tried regenerating the config file?
Yes
hmm
I'm running a clean install of Kali on Debian with a virtual machine
is the vm on your local computer?
yes
!multivpn
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
Do that
oh, there's a thing for that already
wait, that was not what I thought it was, but yeah, do that~
Didn't work
are you connecting the VM or your main computer?
VM
have you tried the computer?
no
Ah, right.
nat works fine lol
Oracle
Sounds like the certificate isn't properly valid
VM box mananger
@stone roost VM from the HOST with NAT is iffy
Agreed with James on that one ^^
Always better to connect inside the VM
Saves a world of hassle
nat is dum. I dun liek.
The error is defo a problem with the certificate tho
But it does sound like a dodgy cert
yeah, but why would it do that?
@narrow mesa How many times have you regenerated and redownloaded?
Mhm
openssl has buggered somewhere during generation
@zealous yoke Or validation
So no clue?
it seems a little confusing. A SSH key shouldn't depend on external factors, so why would it fail?
This sounds above our pay grade to me
At least mine. I may know a bit about all that stuff, but in the end, I'm just a programmer :p
Have you heard about something aboput this before?
No
huh
Might be worth calling Skidy?
Could it be my VM?
Reckon that's a backend problem
Naw, sounds like it's the authentication in your VPN key
It connected though -else the key couldn't have failed-, it shouldn't be your VM
I'm having issues connecting to the network. When trying to run theopenvpn with my configuration file, I get error message:
"Thu Mar 19 22:47:52 2020 OpenSSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
Thu Mar 19 22:47:52 2020 Cannot load private key file [[INLINE]]
Thu Mar 19 22:47:52 2020 Error: private key password verification failed
Thu Mar 19 22:47:52 2020 Exiting due to fatal error"
Anything you can do to help?
@narrow mesa @deep trellis, any ideas?
Config has been regenerated three times
and the VM reinstalled
It's server-side
yh sure
Thanks guys for pinging me too:) Sometimes miss these
inb4 this was all an elaborate scam to get Dappner's private key
How long does it take for a deployed room to populate? I am running on Kali VM and OpenVPN is connected, am joined to room but I didn't see a room populate.
What do you mean, populate @whole tusk?
Hey @barren birch I saw some YouTube videos where someone on tryhackme woud see a VM after entering a room. Something visual.
Ah, that's only for very specific machines
I apologize for my ignorance, but I'm not sure how this works.
That's only like, 2 rooms
That isn't one of them
OH!
Actually it might be 3
I had no idea.
Are you a subscriber @whole tusk?
I am not, I am only using free rooms for now.
Thank you @barren birch .
Connect up to the VPN with that, then scan the IP the website gave you ๐
No problem!
Let me go to Terminal. I am connected with VPN.
๐
By scan, do you mean nmap?
Yep
That's it @barren birch ? I all I need to do is scan the IP and I answer the questions based off that? In other words, that is the normal procedure for using TryHackMe?
Uh, kinda
No there's a lot more
Every room is teaching something different
So in one particular room, yeah, that's all you need to do
In the room you're in you'll need to see which ports are open
Connect to one of them
The webserver
Exploit a Local File Inclusion vulnerability
Then access the machine in another way
I will leave the rest for you to figure out ๐
Thank you!
But yeah, the nmap scan is just the very beginning
I'll start here for now.
Think of these machines as being like real life, in a sense. You know that these ones will be vulnerable, but they are full machines, with lots of different types of exploit
Let me get some snacks and I'll start digging. Take care for now!
Happy Hacking!
hi cannot access the machine website
@idle zodiac did you make sure it actually has a webserver running
I would need guidelines too on how to solve a box
What must someone put in mind to get started
is it a walkthrough box?
if yes, then it contains enough guidance to solve it. additionally you can look at the write-ups which can help you solve
Hi all, i cannot ssh on a machine deployed in the room commonlinuxprivesec (link https://tryhackme.com/room/commonlinuxprivesc)
TryHackMe is an online platform for learning and teaching cyber security.
I'm trying from a kali linux machine on vmware, the openvpn with configuration files is connected
i can ping the ip address 10.10.25.34 which supposedly should be the ip address of the machine
the ssh just gives me a connection timed out
anybody has some piece of advice?
Are you connecting on the right port? I haven't done that one yet, but it's on my list
i don't know @latent fable, in the room it doesn't specify a port so i guessed it was by default the 22
which #task is it? I'll have a look
task 4, first question
The very beginning "Let's start to ssh in the machine"
Maybe it does work only if i deploy the kali machine on the tryhackme.com itself?
and doesn't from a different kali vmware machine?
You need either that, or to be connected on openvpn
i'm connected through openvpn on the kalivmware machine
no,
you deploy a machine using the 'deploy' button and then you are supposed to ssh into it
from your VM
Yes @leaden token, that's what i did. i deployed the machine inside the room commonlinuxprivesec
then you are given with ip
then took the ip it gave me (in this case 10.10.24.35)
sss username@ip
and all it gives is a connection timed out
did you ping from inside that vm?
it does ping 10.10.25.34
technically you don't need to give the username
it's the same even if i user3@10.10.25.34
yeah
are you sure that ssh port is 22
it is
try scaninng it
okay
i checked on the /etc/ssh/sshd_config files
it's 22
and on the room it doesn't specify anything different
try redeploying and wait ~3 minutes
i had the same error yesterday's night
sounds like a broken deployment, yes
oh
you're not on some wicked crazy network/ISP, right?
before you redeploy
could you try from the kali vm on the website?
you mean i deploy a kali on the website and try to ssh from there?
yeah
I won't need the openvpn in that case, right?
ok wait a sec
i need to drink, i gotta stay hydrated
drink guys, you gotta stay hydrated
public service message
it's deploying
and stay home too!
pretend to drink corona beer if you're not of legal drinking age
other countries too
nice!
what sort of network are you on?
private one, home one?
hm
frace isn't one of those totalitarian places that locks consumer things down
so it must be a configuration issue with the openvpn thing
maybe i should try to connect at my own machine? to give it a try?
like trying to open a ssh server?
instead of the VM on the phyiscal machine? Try
i don't know how to that in windows
ssh in cmd
i wanted to connect from my vmware kali to my windows
yeah but i don't know how to open the serve
r
in windows
to the site's machine
to the target machine, yes
did you run openvpn inside kali or on the physical machine?
inside kali yes, and it wasn't able to connect
on the windows physical of course not
i forgot
but i have to set the openvpn on windows
!vpn
!multivpn
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
this ^
those, yes
ps aux |grep openvpn does indeed show me three lines of openvpn, but killall openvpn says no process found
repeating ps aux | grep etc. after that shows me the very same three lines
(two of tmux, one of grep)
You could try killing their processes by their PID
killem all. We wanna try from the host
root@kali:~# ps aux | grep openvpn
root 2648 0.0 0.0 6144 960 pts/3 S+ 05:52 0:00 grep openvpn
root@kali:~# killall openvpn
openvpn: no process found
root@kali:~# kill 2648
bash: kill: (2648) - No such process
alright
yeah
ok, openvpn connected, tryhackme/access told me everything's up and running, ssh from the host don't want to connect
and the kali vm on the thm website can still connect?
ugh, i closed it
:D
yes kali website connects
can your physical computer ping the target machine?
hmmm
great support
really
great support
@idle zodiac
I'm just procrastinating from work, really :p
@latent fable thank you for the support
i'll try, but i've just downloaded
if he reconnect it will create multiples connections
Type ps aux | grep openvpn into your terminal and press enter
If there's more than one line (and the second doesn't have "grep" in it), do the following steps
Type killall openvpn into your terminal and press enter
Start the VPN with sudo openvpn <path-to-config>
oh, wait, the physical machine was windows, right?
well, you get the point. Kill them off, start with new config :p
let's try
I'm in from the host machine!
now i'll kill it and try from the kalivmware to do the same
exactly!
one thing though
Can i interact
Like
I've got the tryhackme room opened in windows right?
And the openvpn opened in kalivmware
yeah?
