#site-support

1 messages · Page 152 of 1

celest sapphire
#

@naive dust did the other tasks that don't show up require some kind of input or were they plain buttons to submit?

naive dust
#

@celest sapphire i think you might be on to something, the only two tasks that gave me points were the only ones that required input

celest sapphire
#

yeah, only they give points

#

the "check" ones don't

naive dust
leaden token
#

try loggin in with email

#

not username

naive dust
#

even when i use email , the system still say incorrect :*( and now i has been lock in five minute

#

After 1 minute, I was able to access it again, thank you very much admin

unkempt ermine
#

Im currently new and working on the linuxctf room in the begginer path, im stuck on a file transfer question if anyone could lend a hand, would be much appreciated

noble umbra
#

How can I connect to THM OVPN when I use Torghost? I tried to connect but I got permission denied. It seems openvpn can't use the ports because of Torghost. Can you please advise?

supple sonnet
#

you're running the VPN with sudo or as root?

shut hill
rigid oxide
#

@deep trellis do we have the credentials for this room/box available? We could provide those on the task information

deep trellis
#

Yes:)

shut hill
#

can anybody help me on this

deep trellis
#

Does the in-browser stuff not work?

shut hill
#

yes but not persistent

rigid oxide
#

Our VMs don't support persistence between boots

deep trellis
#

The task includes the RDP credentials

shut hill
#

yes , but its not

#

what task for this BOX ?

deep trellis
#

To RDP into the machine are as follows.

Username: Administrator
Password: TryH@ckM3!

rigid oxide
#

Can you please clarify upon what you want from this? You want to be able to use the Windows VM as a workstation that saves to your profile?

#

I ask as both this and the Kali VM we provide reset every reboot back to their standard image

deep trellis
#

Actually thats probably a better question ^

rigid oxide
#

Just wanna make sure I'm addressing your question correctly

shut hill
barren birch
#

I seem to remember getting a similar error from Retro when using rdesktop

#

Give Remmina a try?

shut hill
#

k i will

rigid oxide
#

you can install remmina (if you don't have it already) with this command

#

sudo apt-get install remmina

shut hill
#

k

#

Worked , thanks Team @barren birch @deep trellis @rigid oxide

rigid oxide
#

Glad that worked ❤️

ashen ravine
#

hi all

#

i am trying to log into the site from my vm, and it says that my account has been locked out for 5 mins

#

i am giving my correct id and password, still not working. tried this for 2 days , on different browsers

latent fable
#

@ashen ravine Do you mean your tryhackme account on the website? If so, have you tried resetting your password?

ashen ravine
#

i did, it works now somehow, i can log into my account from my main machine, but on my vm i was getting error like timed out and csrf attempt blocked

latent fable
#

are you proxying your vms' traffic through burp or similar? Sounds like something isn't working completely right

noble umbra
#

you're running the VPN with sudo or as root?
@supple sonnet sudo

ashen ravine
#

@latent fable everything was turned off, i don't know why that happened. didn't had any extensions enabled on that site. then i restarted my browser, and it was working fine

latent fable
#

good ol' tech support 101.

#

turning it off and on again

supple comet
#

Hello!

#

I have little problem with openvpn connection. I get:

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

all the time

worn raptor
#

Hey guys i have a problem with the vpn connection

#

can't connect to CA inline certificate

eager fulcrum
#

@worn raptor @supple comet Try regenerating your config

worn raptor
#

Tried that

#

tried changing server

#

faced same problems

supple comet
#

@worn raptor did you downloaded again your openvpn config file?

#

It worked for me~

worn raptor
#

Yeah sure

quartz yacht
#

Hi,
I have logged out of the virtual kali machine. Now I cannot log in through the browser.
I have deployed a new instance(2020) and is presented with a login screen "REMOTE TRYHACKME".
However none of the documented passwords or default kali passwords work.
How do I log back into the machine?

deep trellis
#

You need to terminate and redeploy

#

CAn I ask what you did for that to happen? did that show when it booted straight away?

quartz yacht
#

I shut down the machine from inside the kali menu. Because I wanted to test if the machine had persistent storage.
The login screen was presented to me when the machine was ready.
I have just terminated and redeploy.
Again the first thing that happens is that I am presented with the login screen "REMOTE TRYHACKME"

eager fulcrum
#

The machine doesn't have persistent storage

deep trellis
#

You need to terminate and then re-deploy

quartz yacht
#

@deep trellis that is what i just did

#
  1. I shut down the machine from inside the kali menu.
  2. ask for help
  3. teminate redeploy
  4. same issue
deep trellis
#

Dont do it from inside the machine:)

#

Can you terminate in the browser?

quartz yacht
#

@eager fulcrum thank you for the clarification 🙂

#

That is what i did when you asked me to terminate

#

I have just terminated and deploy again. Still did not resolve the issue. Is hello@tryhackme.com the appropriate place to "submit" a support ticket?

deep trellis
#

Yeah email there please:)

#

Are you a new user?

quartz yacht
#

Great thank you :)
Yes I signed up and subscribed yesterday.

deep trellis
#

Awesome:)

#

I will get this looked into

quartz yacht
#

@deep trellis thank you I have send a mail with more details.

deep trellis
#

thank you

stone roost
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

dim depot
#

hello guys i have a problem with metasploit

#

i tried a hacktivity named ice

#

here it is my notes from this

#

hactivity

#

and my metasploit problem is this :

#

ArgumentError wrong number of arguments (given 4 expected 5)

eager fulcrum
#

@noble umbra not really a tech support question, it's asking for the distribution more specifically.

noble umbra
#

Deleted, Sorry.. Thanks @eager fulcrum

regal axle
#

Hey all, I subscribed last night and this morning when I went in to poke around I'm not seeing that I'm subscribed any longer

eager fulcrum
#

@deep trellis

regal axle
deep trellis
#

I even have the email that says I've subscribed.
@regal axle Emailed you, I know why this occured - isn't an issue.

regal axle
#

Thanks!

#

speedy!

#

Anything I need to do on my end to keep this from occurring? And one last thing, I thought I verified my email last night, but I'll go ahead and verify again? Or is that not necessary?

#

@deep trellis

deep trellis
#

It wont occur again

#

Just logout/login

regal axle
#

K thanks!

bright hedge
#

Hi all, subscribed yesterday and fired up my first Kali machine today. Wanted to follow along with the introtoresearch room.

I don't get results with searchsploit with the same (copy pasted) argument as the example in the room. I do get the result when I go to the exploitdb website.

I have internet. Pinged both Google and went to a random website.

Any idea what I'm doing wrong to not get any results?

latent fable
#

Have you tried simpler terms? Perhaps some spaces

bright hedge
#

I'm trying to replicate exactly what is done in the room as an example. I wouldn't know how to simplify it further than this.

If I for instance do 'searchsploit wordpress' I get a bunch of results.

Anyway, it's not impeding me now to continue, I can just use the ExploitDB website. Hopefully it's a glitch and the Kali in browser is as useful as I'm hoping it is.

Thanks for your answer, appreciated!

latent fable
#

oh, interesting. I haven't done the room

#

or at least I don't think I have :p

#

could you link it?

bright hedge
#

I'm updating searchsploit now. See if that helps. Wonder if I have to do that every time I fire up a Kali machine.

latent fable
#

yeah, sounds like it's something like that

#

ah, this room

#

yeah, something's definitely wrong with your searchsploit

bright hedge
#

Update fixed it. Now gives me same output as in the screenshot.

#

And a low disk space warning 🙂

outer anchor
#

Hey guys, I'm currently doing the 25daysofchristmas room but most of the machines I deploy look constantly offline even after several minutes. Do you know anything about it?

eager fulcrum
#

@outer anchor Day 13?

outer anchor
#

No I had problems with Day 11 and now with Day 12

eager fulcrum
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

eager fulcrum
#

Make sure you're VPN'd

outer anchor
#

It took me double the time to finish Day 11 due to this problem

#

VPN is fine, I also tried generating a new identity

#

Pinging the machines give me little to no response. Sometime they answer back for few seconds and then stop

eager fulcrum
#

multivpn applies though

#

Gives you connectivity issues if you're running more than 1

outer anchor
#

Gonna check that

#

Mmm i'm using one vpn config only and I also deleted the old interface that was saved, but nothing changed. I still get no answer back from the machine D:

eager fulcrum
#

One config isn't what matters

#

One session is what matters

outer anchor
#

So what should I exactly try?

eager fulcrum
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

eager fulcrum
#

Assuming you're on linux

#

If you're not on linux then ???

outer anchor
#

I'm on linux, eyah

#

yeah

#

Ok apparently it worked, thanks a lot @eager fulcrum !

eager fulcrum
#

It's a common issue

outer anchor
#

I'm still kinda noob here, so good to know

polar tree
#

Having a jolly weird time - my connection to my deployed machine works fine for maybe about 1h50 minutes, and then subsequently won't load - every single time without fail. Meaning I can't have a room deployed for more than about 1h50 mins. Just straight up won't load. Please advise. I've tried a new config file everything etc. etc. - just happens w/o fail. The VPN connection does not drop, just can't access the specific box.

eager fulcrum
#

Even if you extend the VM?

polar tree
#

yessir

eager fulcrum
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

eager fulcrum
#

Even if you extend twice? @polar tree

polar tree
#

nope 🙂

#

yes indeed

#

only the one open 🙂

bleak flint
#

excuse me

#

in task 5 from the linux challenges room, there is a question that says to download a file with scp or ftp or filezilla

#

but when I do the scp garry@ipaddress:/file /home/ and put the password letmein, it says wrong password

narrow charm
#

Hi there. I’m a new subscriber and I was wondering about accessing kali from the web. Every time I access the web I have to deploy the machine and I have to watch the time count down?

bleak flint
#

yep

leaden token
#

You can extend it right away so you'll have ~2h initially

narrow charm
#

So I have to go to the kill and connect then go back and find a nother room right ?

leaden token
#

You don't have to kill your Kali machine when doing different rooms

narrow charm
#

Everything is new I’m trying to figure it out. Thank you

leaden token
#

Yeah, that's fine, don't worry

#

So, you can do everything in your Kali machine and just change rooms without doing anything

narrow charm
#

Ok both can work.

#

Awesome thank you.

leaden token
#

Just terminate room's machines after finishing them, and that's all

narrow charm
#

Got it

bleak flint
#

@narrow charm and never forget to get your discord token to get verified :3

narrow charm
#

How I do that?

#

I’m sorry I’m new 😩

barren birch
narrow charm
#

@barren birch Thank you

barren birch
#

Np

naive dust
#

how can i delete an account?

leaden token
sudden quiver
#

once a vm expires, it's gone right? theres no way to get that environment back if you missed extending the time before expiration?

barren birch
#

Correct -- you can redeploy it, but it'll be reset

narrow charm
#

Can I copy and past a flag from web machine?

#

Please say yes the flag is too long 😩

eager fulcrum
#

...yes?

narrow charm
#

How?

eager fulcrum
#

Select it

#

I mean, your clipboard is shared between the browser VM and your PC

narrow charm
#

I can’t copy the flag and past to the answer. Keep showing the flag next command line

eager fulcrum
#

I don't understand

kind schooner
#

Hi, I'm trying to use a Python script found in exploit-db, but I cant see the results...

#

the script is for SQLi

#

anyone knows what is going on?

outer anchor
#

I can’t copy the flag and past to the answer. Keep showing the flag next command line
@narrow charm maybe control+shit+c ?

eager fulcrum
#

@kind schooner ...daily bugle?

kind schooner
#

im sorry, what?

#

i dunno what this is

#

oh

#

db

#

🤦🏼‍♂️

eager fulcrum
#

@kind schooner What room?

#

Daily bugle is a room, and I remember a similar sqli?

kind schooner
#

oh, i see

narrow charm
#

@outer anchor worked 🙏🏻 thank

kind schooner
#

its not on try hack me, but in Hacker101

#

but i had problems with this script before

outer anchor
#

@outer anchor worked 🙏🏻 thank
@narrow charm you're welcome dude 😄

kind schooner
#

on tryhackme

#

probably on simple ctf

#

yeah

#

simple ctf

#

if you go down on the page

#

you will se this image

#

i dont understand why my results is not showing...

kind schooner
#

I feel like I lost @eager fulcrum's attention after I mentioned that my error wasn't on tryhackme lol

rich loom
#

My openvpn worked for days then just stops its either connection failed or refused. Any suggestions

eager fulcrum
#

Show us the actual error message

#

and always check

#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

empty condor
#

Hi everyone! Maybe someone can help me with the Task 18 of the Advent of Cyber (retro web). I follow the instructions I've found, but for some reason I cannot trigger the exploit in the Windows machine, I've opened both browsers (Chrome and IE as instructed) then I do Run as Administrator on the file, click on the website of the Verisign but nothing happens. No website is loaded in IE nor in Chrome. I've even set up IE as default browser for the system but still, no matter how many times I repeat the process... no website is loaded in IE. Anyone can point me to what am I doing wrong?

#

I've read the archived channel, the medium article and search Discord for both Task 18 and Advent of Cyber and I could not find any tip to solve it, just to repeat it until it is triggered, and I've repeated it like 100 times using even different VMs

eager fulcrum
#

Wrong chat

empty condor
#

oups, sorry

#

is it community-help the right onw?

eager fulcrum
#

Yes

slim ravine
#

hi guys, do any of you have challenges connecting to the boxes using your PC ?

naive dust
#

@slim ravine May sound daft but have you connected to the Openvpn service?

feral dock
#

He is connected

naive dust
#

Yep just noticed, didn't see the image properley

#

puts head in hands.

slim ravine
#

yes i did @naive dust .

wide dock
#

Even i have the same connecting issues

slim ravine
#

and have tried connecting to a other machines, but seems to get the same results

wide dock
#

It randomly gets reconnected after a while

#

And also the box is super slow to access

long radish
#

how can i deploy a machine, i have openvpn connected but i have no clue how to access the machine

latent fable
#

click the "deploy" button :p

#

It'll be under one of the tasks

zealous yoke
#

:^

wide dock
#

hi guys, do any of you have challenges connecting to the boxes using your PC ?
@slim ravine I found that switching my vpn worked

slim ravine
#

@wide dock what could it be, an idea ?

rich loom
#

Ok my PuTTY says Network error: Connection refused. My openvpn a ays Its working and connected, but i can't pull up http://MACHINE_IP
I'm running on Windows 10

eager fulcrum
#

@rich loom you need to deploy

stark needle
eager fulcrum
#

MACHINE_IP is something for room creators, it'll autofill that once the VM is deployed @rich loom

#

@stark needle you didn't read the supported OS list, did you?

#

It's not a limitation from tryhackme, it's a limitation from aws

stark needle
eager fulcrum
#

@stark needle Read harder

stark needle
#

:))

eager fulcrum
#

It doesn't support any recent debians

#

And won't support kali

stark needle
#

ahhh

eager fulcrum
#

Debian 8 is the limit iirc

barren birch
#

Also, why the heck are you uploading Kali anyway?

stark needle
#

Why not?

eager fulcrum
#

Because there's already a kali VM.

stark needle
#

Ok..

eager fulcrum
#

@rich loom Ok, so you're doing a web ctf

#

And trying to SSH into it.

#

With creds from a different box

#

I'd like you to spot the problems there.

barren birch
#

@stark needle yeah, it would kinda defeat the purpose of the subscriber Kali if you could upload your own.

#

There is actually a way around it, but I'm not saying what it is

eager fulcrum
#

@barren birch bulli skidy

#

You'd need to give skidy the AMI image

barren birch
#

Oof -- nah 😂

eager fulcrum
#

So you'd need approval

barren birch
#

There is a way of doing it without

eager fulcrum
#

And to some how get Aws cli working with an OS it doesn't support

barren birch
#

Want me to DM you with it?

eager fulcrum
#

I want debian 10 CTF so bad yes

rich loom
#

@eager fulcrum WOW I had no idea that would be a issue. Thank you

eager fulcrum
#

You have to connect using the correct type of client

#

That room is quite clear

#

And doesn't mention SSH at all.

opal spear
#

When my VPN gets disconnected and I reconnect, do I automatically loose connectivity to the boxes I have started?

eager fulcrum
#

Connectivity yes, progress no

#

If the VM expires, then you lose progress

opal spear
#

But if Ilose connectivity to the box... then I'll need to reset it anyway to continue, no?

eager fulcrum
#

No?

#

Why would you?

stark needle
#

Ok guys I finally found the Kali machine, thank you for the support and sorry for being a noob :))

opal spear
#

I guess my question wasn't clear lol. What I was asking is if I end up having to reconnect to the VPN, should I again have access to the VMs I deployed? Or am I dropped into a different VLAN?

eager fulcrum
#

Same LAN

#

Unless the VM expired, you can still access it

opal spear
#

👍

rugged sequoia
#

Can I deploy a machine I have terminated again

eager fulcrum
#

@rugged sequoia You may need to reload the page to enable the button but yes you can

rugged sequoia
#

I tried but it didn't work

eager fulcrum
#

Didn't work how?

rugged sequoia
#

i solved the problem

#

thank u so much ^^

weak falcon
#

Not sure that this is the right channel to ask in. But I am looking to buy multiple licenses for my Computer Science Club(college level) . My question is: is there special group pricing or can I use one account and display that at the front of the classroom?

eager fulcrum
#

@deep trellis education@thm for this?

deep trellis
#

Yes please:)

eager fulcrum
#

@weak falcon please email education@tryhackme.com to discuss this, the admins will be happy to sort something with you

weak falcon
#

sounds good thank you! out of curiosity do you know what the average response time of that email is?

eager fulcrum
#

Skidy's around rn so shouldn't be too bad @weak falcon

weak falcon
#

beautiful, thank you for your help

eager fulcrum
#

Skidy and Ashu, the ones who run the business, are on UK time

void gull
#

Hi, I just had a quick question I am trying to use social engineering toolkit on kali Linux and when I make the credential harvester link it only works on my home internet, port 80 is open on my router but it still wont connect to anything that's not connected to my internet. Any help with getting it to work everywhere would be appreciated.

glacial anvil
#

research CGNAT

eager fulcrum
#

@void gull This is for questions related to THM

void gull
#

oh my bad

slim ravine
#

connecting from my pc

eager fulcrum
#

Unreachable, sounds like you might want to restart your openvpn connection

slim ravine
#

kk, @eager fulcrum . just did that, and have the same results.

hushed spoke
#

i connected to the site how do i open kali?

eager fulcrum
#

??

hushed spoke
#

i havent subscribed

#

do i need that?

eager fulcrum
#

Then you need to make your own kali VM if you want a kali VM

hushed spoke
#

how do i do tha?

eager fulcrum
#

Kali is a full operating system, based on linux

#

Google will help you here

#

how to make kali virtual machine

#

Virtualbox is free virtualisation software

hushed spoke
#

yu

#

ty

kind schooner
eager fulcrum
#

You asked the other day

kind schooner
#

yep

#

lol

eager fulcrum
#

Are you sure the exploit will affect that target?

#

You sure it's vulnerable?

kind schooner
#

yes, it happened to me when I was doing the simple CTF room

#

I saw on the writeups

#

and its the same thing as I did

#

but my results are simply not showing up

#

I looked at this one

leaden token
#

@kind schooner where did you get the exploit?

#

i remember someone was having the same issue a month ago

kind schooner
#

@leaden token exploit-db

#

this one

leaden token
#

the exploit is supposed to be written in python

#

and you have to use python for it ^

kind schooner
#

hm, ok , im gonna try this one

leaden token
#

yup, if you look at the blog, you can see it's the right one

kind schooner
#

@leaden token

lean pier
#

Hey, quick question about getting set up - I have a Kali VM of my own already, is it possible to use that for the tryhackme rooms? I'm a little confused by it all, I have no VPN experience

eager fulcrum
#

Yes you just need to connect to the VPN

#

preferably from the VM

#

!vpn

sharp bisonBOT
eager fulcrum
#

The VPN essentially puts you on TryHackMe's LAN

zealous yoke
#

I need to find the time to make a new PR with the updated process of the whole regular/vip server

#

But I just need to find time at this point

hushed spoke
#

should i just download the newest kali linux on their website to insert in virtualbox?

lean pier
#

@hushed spoke that's what I've done yeah

opal spear
#

Is it normal to loose connectivity to the deployed boxes after some time of being idle (even if they are being kept alive with the "Add 1 hour" button)?

eager fulcrum
#

No

opal spear
#

This has happened to me a couple of times now. Right now it's specifically with hackpark. I went to another room for a while (kept the hackpark box alive in the background). When I returned, scanning a port that I know is open is returning filtered. Last time this happened, terminating and re-deploying the box fixed it, but now it happened again.

#

I'm able to reach the box in the other room, so I know my connection is good (VPN).

lean pier
#

could it possibly be a virtualbox thing, if you're using that?

opal spear
#

Not a problem I've run into before (in other scenarios), and have used this setup for a while.

eager fulcrum
#

I didn't have it on vbox

naive dust
#

yo I was going to do the OWASP Juice Shop challenge but the juice shop website doesn't actually load. I'm connected and burp intercept is off

#

i waited about 20 mins then though the vm hanged so terminated and restarted but it still doesnt laod

#

nvm loaded now

final merlin
#

@vapid dawn carrying over from #site-bugs. deployed a kali machine. kali machine can't see the deployed victim machine(s)

barren birch
#

@final merlin Are you sure? Have you got a target machine up now?

final merlin
#

yes, and yes

barren birch
#

What's the IP of the target?

final merlin
#

kali VM is 54.154.106.0/24 subnet (I assume 24), and the victim machine is 10.10.174.168

barren birch
#

Whatever box that is, it's blocking ICMP

#

Inside the Kali VM, try nmap -Pn 10.10.174.168

final merlin
#

success. I didn't even think about ICMP blocking. this has occured on a couple rooms I've recently attempted. derp.

barren birch
#

Which box is this?

final merlin
#

Fowsniff CTF, the previous was the Rick and Morty themed one

barren birch
#

Hmm, those should both respond

#

Odd

final merlin
#

¯_(ツ)_/¯

barren birch
#

Well, hey, so long as it's working now 🤷‍♂️

#

I'll have a look and see if I can figure out why Linux boxes that didn't have a firewall are now blocking stuff

final merlin
#

appreciate the support

lofty sparrow
#

Hello guys

#

Im newbie, my english isnt fluid at all

#

I'm trying to connect to openvpn but I got this

#

Then, restar pause, 5 seconds

exotic vortex
#

Hi

#

How can i get some help with a room?

barren birch
#

No need to ask for help either -- just ask the question 🙂

exotic vortex
#

no one seems to know (its a subscription only room)

peak seal
#

Anyone use hashcat on cmd? I can't run it on my Kali VM, but it's so clunky on cmd...

eager fulcrum
#

@peak seal Powershell

peak seal
#

What improvements does that offer?

eager fulcrum
#

@peak seal Linux commands aliased by default, a nicer ui, generally better shell

peak seal
#

Oh, it aliases linux commands? Nice

eager fulcrum
#

Yea so ls will run dir etc

#

wget/curl are a lil weird

peak seal
#

Darn. I was hoping I could run a "md5sum" command, but doesn't recognize it

#

I know I can use certutil -hashfile, but I can't figure out how to get rid of the extra verbiage from the output.

eager fulcrum
#

@peak seal If you install git bash, you'll get md5sum

#

Ah but only in git bash unless you set your path up

peak seal
#

So, the silly kicker

#

I have Windows Subsystem for Linux set up, with Ubuntu. But I can't figure out how to install my hashcat into it. I ran the apt command, but it only installs hashcat 4.0 (current is 5.1)

eager fulcrum
#

Yeah I'd avoid hashcat on WSL

#

Probably won't have access to the hardware, similar to a VM

#

Just run from windows, easy

limber kernel
#

Heyy

peak seal
#

Yeah, I'm figuring it out

limber kernel
#

So I'm at task 12 day 7 in advent of cyber

#

And when I scanned the open tcp ports under 1000

peak seal
#

I just loved that I could pipe hashes into a text straight from the terminal, and it was nice and clean, without any extra verbiage

limber kernel
#

There are 11 ports open

#

But the answer is a one digit number

#

Any idea why?

peak seal
#

The question might be better asked in community-help. I'd help, but I'm still on level 3 >.> Which is why I'm talking about hashcat, heh

limber kernel
#

Welppppp

#

GoodLuck man

vocal wasp
#

@peak seal what about Linux sub systems on windows

#

you can install kali though the windows app store

eager fulcrum
#

WSL and hashcat?

peak seal
#

Huh. That's interesting. I already have it running on VirtualBox, though

#

And checking the WSL FAQ, they confirmed that GPU virtualization still is not a feature

eager fulcrum
#

You know you can use the windows binaries for it right?

vocal wasp
#

worth a shot

peak seal
#

Sorry, what do you mean?

vocal wasp
#

@peak seal if you install git bash you can git clone hash cat from github and use it that way

peak seal
#

I might try that, but I'm starting to get used to it in Powershell...maybe I can figure out some of the work arounds for the clunkiness. I just want to try to avoid installing different distributions and platforms for every piece of script that I wanna run

eager fulcrum
#

@vocal wasp No, Hashcat distributes windows binaries

#

As a download

vocal wasp
#

git bash just allows you to use git clone on windows

eager fulcrum
#

Hashcat and John also bug out if you run them in gitbash as a BTW

#

@vocal wasp You can download without cloning

#

On the hashcat website

peak seal
#

Yes, I got the binaries from the website, which is how I'm running it on Powershell

eager fulcrum
#

Not the repo

#

@peak seal So, what's the problem?

vocal wasp
#

@eager fulcrum I know but you can ssh with gitbash to so i keep it installed

eager fulcrum
#

You can SSH with powershell now @vocal wasp

vocal wasp
#

oh ok

#

neet

eager fulcrum
peak seal
#

There's no huge problem, like I said, I'm figuring it out. My biggest thing was how I wanted to use Linux's MD5sum feature, which hashes more efficiently than certutil, but not like I can't hash in Kali, and then copy/paste the results to Powershell

vocal wasp
#

oh you can't really see that

#

oh well

peak seal
#

I like the wolf ASCII

eager fulcrum
#

Cyberchef is nice for playing with hashing and encoding

vocal wasp
#

@peak seal the ascii is on my github if you want to use it for ssh MOTD

#

@eager fulcrum cyberchef is a good option but it doesn't cover everything

eager fulcrum
#

@vocal wasp 99%

#

I even found out how to do linewise functions

peak seal
#

I'll have to look into those! I'm a new student in cybersecurity, but I'm pretty much brand new to anything linux, powershell, hacking...I've pretty much just used computers for gaming my whole life

vocal wasp
#

@eager fulcrum just another tool to have in the toolbox

peak seal
#

It's interesting dealing with the frustrations of why things don't work properly, offset by the satisfaction of figuring it out, or a decent workaround

naive dust
#

well ubuntu machine switch my default layout to us

#

anyway to change to it_ I have tryed with user3@polobox:~$ setxkbmap -keymap it
Cannot open display "default display"

tall cloud
#

Is there any way to actually 100 % complete the rooms with the last question "task for not using metasploit"?

barren birch
#

@tall cloud Yes -- wait for optional to update ‘em. They will be updated soon 🙂

feral dock
gritty umbra
#

sorry, ill copy it!

flint pond
#

just subscribed is it preferable to connect through ovpn

barren birch
#

@flint pond you still need ovpn unless you use the subscriber kali

latent fable
#

it is. The kali VM on the website is great if you don't have access to your normal setup or haven't gotten your own setup yet

peak seal
#

Where can I see my available wordlists in hashcat?

barren birch
latent fable
#

hashcat can use any list - it doesn't have builtin lists

peak seal
#

Hm, sorry, not sure which one is better for this kind of question. I do have Kali, but it's on VM, so I use Powershell to run it instaed

barren birch
#

Bread is right -- it uses any list that's on your computer. Kali has some built in at /usr/share/wordlists

latent fable
#

powershell has hashcat? The more you know

barren birch
#

Just grab 'em from there

peak seal
#

Nah, I downloaded the binary and run it

barren birch
#

@latent fable there is an exe for hashcat

peak seal
#

^

latent fable
#

well yes, I know that now

peak seal
#

Thanks for the tips! Now to see if I can find that VM wordlist

latent fable
#

here's a cute trick i did when I couldn't choose which one to use... use them all!

peak seal
#

Oh gosh

latent fable
#

though of course this is a problem if the algorithm is heavy

peak seal
#

I'm still figuring out how hashcat works. I tried to have it work on just one word, and it took forever. I understand that part of the reason is that it gets throttled by the algorithm, but still not sure waht to do with it

latent fable
#

some hash+algorithm combos just can't be realistically broken

#

you'd get it eventually, but when? In 1000 years?

peak seal
#

Hm

#

I'm not even sure I can use my Kali's wordlist...don't think I can navigate to a VM's file system

barren birch
#

Probably easier to boot the VM and copy them out

#

Or SCP if you don't have shared folder or clipboards

peak seal
#

Yeah, just had the same thought

latent fable
#

(win)scp to the rescue

peak seal
#

Oo, a new tool..

barren birch
#

(win)scp to the rescue
@latent fable or drag and drop 😁

eager fulcrum
#

Rockyou.txt is available online though

latent fable
#

that's why I like winscp

barren birch
#

^^

eager fulcrum
#

Naive-hashcat

#

Top result for rockyou.txt

barren birch
#

If you only need rockyou then it's easiest to download it, yeah

peak seal
#

Yeah, but I have a whole wordlist directory for me to use already. Plus, I get to play with this new tool

latent fable
#

Always good to learn new tools

flint pond
#

Just read the rules understood thanks

latent fable
#

c:

peak seal
#

Hm. What's the functional difference between scp and putty?

eager fulcrum
#

Putty is a client for a bunch of protocols like ssh, telnet, serial

#

Scp is a program to do file copies

#

Securely

peak seal
#

Interesting. It just sets up an SSH to do so?

latent fable
#

scp runs over ssh, yes

peak seal
#

Hm. This looks like it will be tricky

latent fable
#

what does?

peak seal
#

Oh, just learning new things. I didn't actually think about how my VM isn't "on" my network, so I have to set that up now

#

This is all very interesting and strange to me that I'm bouncing around between Powershell, WSL Ubuntu, and Kali Linux VM

latent fable
#

WSL is awesome, but for many network things it sadly doesn't live up to spec

peak seal
#

Yeah, I mostly use it when I need to do something I can't do on Kali, but I find the Powershell too finicky, like piping words to a md5sum

#

Is there an advantage to keeping your VM on a NAT, instead of using the bridged network setting?

latent fable
#

probably not, no

peak seal
#

Probably defaults to NAT so you don't expose your VM to your network without consent, eh?

latent fable
#

what are you running your vm in?

peak seal
#

VirtualBox

latent fable
#

I don't really know much about virtualbox.

#

most here recommend vmware. I'm running hyperv atm, but will make the shift at some point

fading sun
#

Is it only me or does the Paths page take ages to load?

latent fable
#

it does

#

I brought it up before but it works for now

rotund spruce
#

With VirtualBox, NAT means VirtualBox itself is acting as the default gateway for the VM through your computer, in the same way your home router is acting as your PC's default gateway. Bridged just means your VM uses your home network's router/DHCP etc

peak seal
#

Mm, that makes sense, thanks

latent fable
#

Right. Wasn't sure if it was actually NATing, or just saying that it was

rotund spruce
#

Yeah VMware does have more features and better support in general, especially with the paid version

peak seal
#

And yeah, I see a lot of support for VMware now. The people I was first talking to, my brother and his engineer friends, all said they liked VBox

latent fable
#

but what year was that?

#

VBox used to be popular

rotund spruce
#

Yeah, it's NATted behind your computer

peak seal
#

I mean, the advice was new, but could be that they just like what they're used to

latent fable
#

creatures of habit :p

peak seal
#

I figure when I get more comfortable with how Linux and stuff work, I might experiment with new VMs and distributions, but I don't think that's the best use of my time currently

latent fable
#

Sounds like a good plan.

peak seal
#

For instance! Figuring out why I can't set up this port forward for ssh

rotund spruce
#

Vbox is still very popular and is perfectly fine for a lot of situations, plus it's free in every sense... There's also the issue that Oracle bought Sun so nobody knows if it might just disappear one day cos Oracle has disdain for Free/Open Source even though they benefit greatly from it

peak seal
#

That would be unfortunate

rotund spruce
#

@peak seal There's loads of good Linux resources online. The Linux Foundation's free intro course on edx is great, Kali has a free book/course on https://kali.training and I can point you to tonnes of other good resources

peak seal
#

If I'm setting up port forwarding on my VM to SSH, is the guest IP my desktop's IP?

#

@rotund spruce Yes, thanks! I've actually gone through the Mastering Kali a bit, but it kind of expects you to know a lot of basics. I'm at that burgeoning stage right now where I'll say "Ok, I'm going to learn X today" and while I'm in the process of doing so, I find 20 other things I don't know about and have to explore. So I'm kind of all over the place

#

Like what I'm doing right now, perfect example. I woke up and logged in saying "OK, I'm going to finish level 3 on the 25 Advent hactivity"..and now I'm here researching how to SSH to a VM, so that I can take the wordlist directory from Kali, so I can practice hashcat on my Powershell

rotund spruce
#

@peak seal That's perfectly fine. When you're learning something new, it can be easy to get distracted. Try scheduling say 2 hours that you're going to focus on a task and make sure that anything you're doing is related to that so you don't end up down a rabbit hole.

Just know it takes a while to learn and get comfortable with all this stuff

peak seal
#

Yes, I've come to terms with that. I had a pretty frustrating day yesterday, trying to figure out the best way for me to use hashcat, since the apt-get feature on my WSL only installs version 4.0, but just got to cool off and try again later

covert crow
#

anyone from india

latent fable
#

some is, yes

atomic bone
#

Anyone else experiencing All TAP Windows adapters on this system are currently in use issue with OpenVPN?

eager fulcrum
#

@covert crow if you're struggling with billing, there's paypal for 3mo or more

#

TryHackMe uses stripe, so not accepting a card is on Stripe's end, not ours

quick belfry
#

On alfred, there's a step 4 which is "coming soon..." but it won't let me fully complete the room as it's asking for an answer I can't get - killing my OCD 🙂 - anything I can do?

eager fulcrum
#

@quick belfry Wait for the room to be updated, they're adding metasploit free exploitation. You can leave the room if you want, it won't delete your progress

quick belfry
#

I guess I can come back to it once it's done - I just finished the other steps just now 🙂

peak seal
#

Ha! After all that, I finally got to SSH into my VM, and navigated to the folder with SCP...and Rockyou is the only wordlist that comes with Kali

eager fulcrum
#

Password list, yes

#

but there's a lot more reasons to use wordlists

small wraith
#

@peak seal actually the entire SecLists repo comes with Kali

#

Now, I would strongly suggest not using hashcat on kali, especially in a VM, which is a suggestion I appear to have to make a fair amount these days

#

but if you must, Find where the SecLists repo is placed, it includes plenty of wordlists you can use with hashcat

eager fulcrum
#

That's not the direction that's happening here

#

They're running hashcat on windows and just obtaining wordlists

small wraith
#

Oh ok

#

Then yeah, the SecLists repo is included and has many wordlists. It should be plenty to get started.

peak seal
#

@small wraith Oh, awesome, thanks

small wraith
#

yup

#

if you have hashcat troubles, just @ me

#

definitely one of the more active CTF discords for people using hashcat

#

pretty neat to see

latent fable
#

@rigid oxide ^ Do we need a Hashcat Ambassador role? :p

peak seal
#

But yes, the whole reason I was looking for the wordlists on Kali VM is because I was trying to take the wordlists from them and move them over to my host computer, so I can PowerShell it

small wraith
#

oh ok

#

you dont need powershell for hashcat fyi

#

in fact, i've not even tried running it from ps

#

though i know there are a few people who use ps for scripting attacks and things

latent fable
#

it should do the same to executables as cmd does

peak seal
#

I tried just running the .exe, but it just opens and closes really fast

barren birch
#

As in, double clicking it?..

peak seal
#

Yes

latent fable
#

hehe, yes. that doesn't work :)

barren birch
#

Yeah, it's a CLI application -- it's expecting arguments, and writing errors to a console that doesn't exist

peak seal
#

Right, that's what I read, and why I use it in PS

barren birch
#

Or, does exist, but doesn't persist

small wraith
#

yeah, cmd would work fine, but ps should also work

latent fable
#

the point is, you can use cmd -- doesn't have to be PS

peak seal
#

Oh, sure, but if I have PS, why bother with CMD?

latent fable
#

ps takes a moment to boot x)

small wraith
#

yeah, pretty much that

eager fulcrum
#

Not for me

#

On win7 it did

#

10 it's instant

small wraith
#

10 they may as well have replaced cmd with ps

#

in fact, the forcibly did in the shift right click menu

#

in win7, you can shift right click in a folder, and open a cmd window there

#

in win10, you can do the same but its powershell

#

for a bit you could put the cmd option back via a registry hack, but it seems to did away with that at some point so now only powershell is the option for shift rightclick

peak seal
#

HA~!

#

I JUST finished editing my register to include a Powershell launch on right cilck

small wraith
#

lol

peak seal
#

I didn't know you could shift click

small wraith
#

very few people know about it for some reason

#

its been around for a long time

peak seal
#

Also funny because I was like "I could have sworn I did this before"

#

Oh, right, seclists

small wraith
#

lol

peak seal
#

So I would still have to path to the specific txt file? Or can I just path to the seclists folder?

small wraith
#

for what

peak seal
#

When I'm using hashcat, for example

#

BAH! Damnit, Avast, leave me alone

small wraith
#

in hashcat you can do /path/*

#

and it will recurse through the folder and sub folders

peak seal
#

Ahhh, that's a good point

small wraith
#

so if you put the seclists folder in the hashcat folder

#

./seclists/*

#

will have hashcat try all the files in all the folders under /seclists/ as dictionaries

peak seal
#

Hm. Not sure what I did, but I can't seem to open my windows explorer

silent widget
#

Hi, after deploying a machine to some room what password should I use?

#

for ssh

#

and user

peak seal
#

ARGH! Damnit Avast, leave me to my nefarious ways

#

@small wraith I seem to have run into an issue when trying to unzip the Seclists. Can I message you with the error, see if you've seen it before? Hint, it's an issue creating the file name traversal list

small wraith
#

sure, or paste it here

#

others may have this issue

peak seal
small wraith
#

well thats... odd

peak seal
small wraith
#

ohhhhh

#

those are literal zip payloads

peak seal
#

Yes. As far as I know, I can't do a -apt-get in PS, so I have to grab the zip from github

small wraith
#

yeah

#

um

#

try 7zip to extract?

peak seal
#

Sure

small wraith
#

its typically a little more robust

peak seal
#

Hm. Same error, but this time it didn't leave a fragment behind

#

Hopefully it's nothing

small wraith
#

ok

#

having zip payloads in a repo that can be downloaded as a zip seems... poorly planned

peak seal
#

Is there a better way that I could do it?

small wraith
#

not really

#

which is why it seems poorly planned on their part

peak seal
#

Indeed. Oh well!

rich loom
#

I've been at this for over 24 hours and still no luck. please help

#

bioninja4@cyberdojo:~$ sudo openvpn '/home/bioninja4/Downloads/bioninja4.ovpn'
Thu Apr 9 15:16:28 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Thu Apr 9 15:16:28 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Thu Apr 9 15:16:28 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Apr 9 15:16:28 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Apr 9 15:16:28 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.129.195:1194
Thu Apr 9 15:16:28 2020 Socket Buffers: R=[212992->212992] S=[212992->212992]
Thu Apr 9 15:16:28 2020 UDP link local: (not bound)
Thu Apr 9 15:16:28 2020 UDP link remote: [AF_INET]18.202.129.195:1194
Thu Apr 9 15:16:28 2020 TLS: Initial packet from [AF_INET]18.202.129.195:1194, sid=5bbd4c11 8dbf0adc
Thu Apr 9 15:16:28 2020 VERIFY OK: depth=1, CN=ChangeMe
Thu Apr 9 15:16:28 2020 VERIFY KU OK
Thu Apr 9 15:16:28 2020 Validating certificate extended key usage
Thu Apr 9 15:16:28 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Apr 9 15:16:28 2020 VERIFY EKU OK
Thu Apr 9 15:16:28 2020 VERIFY OK: depth=0, CN=server
Thu Apr 9 15:17:28 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Apr 9 15:17:28 2020 TLS Error: TLS handshake failed
Thu Apr 9 15:17:28 2020 SIGUSR1[soft,tls-error] received, process restarting
Thu Apr 9 15:17:28 2020 Restart pause, 5 second(s)

eager fulcrum
#

There are two fixes for that

#

Regen your config, and check your time sync

rich loom
#

@eager fulcrum thank u

waxen patio
#

anyone have issues connecting to corp through rdesktop on kali?

formal crystal
#

hey guys , if i would like to change my username , who should i talk to , i made i mistake

eager fulcrum
#

Username changes coming soon

#

Not supported yet

rich loom
#

@rich loom

eager fulcrum
#

I think we pointed you at that before

#

But glad to ehar it's working

warm jolt
#

thats odd I can connect to a pc using smb in my windows file explorer but not within kali linux using psexec or any other. @eager fulcrum

eager fulcrum
#

That'll be a networking issue

#

Can you ping the remote host?

warm jolt
#

or a firewall?

#

lemme check

eager fulcrum
#

Firewall issue = networking

warm jolt
#

yeah I can ping it

#

it says status access denied

#

is it still the firewall? @eager fulcrum

eager fulcrum
#

This is for support with TryHackMe rooms

#

Well, tech support for TryHackMe

warm jolt
#

oh

#

nvm then

eager fulcrum
#

At least unless someone else can solve it

#

If it's something we can fix real quick, then we might help

latent fable
#

guess that means you won't fix me :c

naive dust
#

noobish question incoming: how to find out, what for a file extension is allowed on a http-upload form? 🙂 can i get a hint?

eager fulcrum
#

The room is a walkthrough @naive dust

#

It describes how

naive dust
#

ohh.. ohhh my gosh 🙂 and i googled my fingers bloody

#

thx

topaz chasm
#

Whenever I try to deploy a machine such as the "Learn Linnux" or the "Vulniversity" rooms, the room starts but does not actually respond to pings nor can i ssh into it etc. any idea why?

eager fulcrum
#

VPN

#

You need to be connected

topaz chasm
#

I am

eager fulcrum
#

Vulnversity isn't meant to be SSH'd into

topaz chasm
#

Yeah but i cant even ping into that one

eager fulcrum
#

But your VPN isn't working if you can't ping zth

topaz chasm
#

ping that one*

#

hm

#

Ill try and redo the whole vpn process

eager fulcrum
#

also

#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

topaz chasm
#

im on windows

naive dust
eager fulcrum
#

Don't use access

#

Not reliable

topaz chasm
#

my vpn says its connected tho

#

under the access pannel everything is green

#

it says "connected"

naive dust
#

you started it with sudo?

#

ohh

#

windows

topaz chasm
#

Im on windows but i ran as admin...

naive dust
#

dont know sorry im also a new guy 😉

topaz chasm
#

ok xD

untold ibex
#

I invited a friend to the site but he didn't click my referral, could he still be added as someone I referred?

latent fable
#

there's a referral system?

eager fulcrum
#

There is not. At least not one that I'm aware of

#

@untold ibex referrals?

untold ibex
#

Someone got me a referal link, let me try to find it

#

This?

#

Could an admin please verify this?

barren birch
#

Yeah, pretty sure the referral system isn't in use...

untold ibex
#

oh, you're a mod, didn't see that James

barren birch
#

It works

eager fulcrum
#

@deep trellis is this... actually a thing?

barren birch
#

But it's not actually used for anything

celest sapphire
#

lol there are referrals?

barren birch
#

Yeah, but they don't actually do anything

latent fable
#

does a counter go up?

untold ibex
#

not even the point system behind it?

barren birch
#

That's a feature that's not had anything done with it yet. It's not been officially released afaik, but it's up and running

#

Just not used for anything 🤷‍♂️

untold ibex
#

hmm

latent fable
#

so like 95% of the features I develop :p

untold ibex
#

It would be an incentive to get people to invite their friends etc

#

get them to subscribe etc

barren birch
#

Pretty sure that was the idea @untold ibex

#

It's just not been capitalised on yet

latent fable
#

just don't make that incentive too prominent. I always found that extremely offputting

barren birch
#

It's kinda in limbo -- it's been released, but it's not in use

untold ibex
#

but would it be possible, for my friend to be added as my referral incase the system does go live in the future?

#

I have his profile in my clipboard

barren birch
#

Not a clue there -- that's Admin level stuff. When Skidy turns off his Do not Disturb, ping him with it 🙂

#

Our powers end at the community I'm afraid: the actual techie side of things is all down to Skidy and Ashu

untold ibex
#

No problem!
Thanks for the help anyway!

eager fulcrum
#

I've pinged skidy

barren birch
#

Anytime 😄

eager fulcrum
#

He'll probably get back to it in a while

barren birch
#

Ooh, yeah, thanks James. There's already a ping in the conversation, so Skidy will hopefully get back to you when he sees it 😄

untold ibex
#

I'll keep an eye out, keep being awesome!

deep trellis
#

It was developed a while ago, I was going to have tokens redeem prizes or even swag, not sure how I can make use of it atm. But it's not "officially" active. :)

latent fable
#

inb4 don't invite your friends until the feature goes live :p

untold ibex
#

well sheet, I just did...

#

I'd love a tshirt XD

latent fable
#

I was joking ;)

untold ibex
#

I wasn't 😉

latent fable
#

tsk :D

novel flame
#

Hi all, quick question, when connected to OVP after 60 sec i cant access any website, its setting DNS in a waiy that wont allow me get outside the LAN, any ideas?

crystal osprey
#

Are you on windows or linux?

eager fulcrum
#

@novel flame THM's vpn config doesn't set your dns

crystal osprey
#
  • it uses its own adapter so it doesn't interfere with your network settings
undone valley
#

hi how do I get the student discount when buying pro thanks

barren birch
#

@undone valley If you have a recognised student email address (and are signed up with it) then it should be applied automatically.

#

If you're using your student address on the account and it's not applied automatically

#

They'll do it manually 🙂

undone valley
#

ok thanks

#

👍

wise hatch
#

Do forgotten password email usually take more than 15 minutes?

eager fulcrum
#

Check your junk mail

runic wave
#

Isit possible to change username and email or should I just create new acct?

#

I did not use my student email when i signed up for free svc, and my uname is a bit non desrcript

barren birch
#

Email, yes

#

Username, not yet

#

Although that's coming soon

runic wave
#

Gracias

#

Do u accept coin for subs?

barren birch
#

Coin?

runic wave
#

btc eth?

eager fulcrum
#

Nope

barren birch
#

Ah, no, we do not.
There's a secure card payment, or paypal.
That was talked about, however, is unlikely to implemented anytime soon

#

For a variety of reasons

runic wave
#

Ok, ty for being responsive

wise hatch
#

I might've accidentally fat-fingered the new email address. Still have not recieved anything in spam or regular inbox. Does entering a address try to verify from the old/new email?

barren birch
#

@wise hatch What exactly are you trying to do here?

waxen patio
#

im having issues connecting to corp via rdp

#

can anyone assist?

barren birch
#

What's the problem?

waxen patio
#

theres a complaint about trusting the ssl certificate and then a connection failure

barren birch
#

Are you using rdesktop by any mischance?

waxen patio
#

i am

wise hatch
#

Changing email address, but never recieved confirmation. Have since logged out for whatever reason, and now when trying to utilize the forgotten password service, to which I have not received an email via gmail.

waxen patio
#

i saw that people were having issues with it

barren birch
#

@waxen patio Give Remmina a shot

waxen patio
#

so ive tried xfreerdp instead

#

i will take a look at Remmina

barren birch
#

@wise hatch Hmm. Try it again. Failing that, email support@tryhackme.com -- they'll be able to sort it out, I would imagine 🙂

#

(bear in mind that they'll be asleep rn though 😄 )

waxen patio
#

@barren birch btw is the machine that corp displayed only accessible via the thm vpn?

barren birch
#

Yes

wise hatch
#

No worries, thank you.

barren birch
#

Np 🙂

waxen patio
#

@barren birch ty, remmina seemed to work!

barren birch
#

Perfect 🙂

waxen patio
#

although its behaving rather oddly

formal crystal
#

Username changes coming soon
@eager fulcrum when is soon?

atomic cloud
#

Hey people is the VPN being whacky for anyone else? I can establish the session and I get the two routes 10.8.0.0/16 and 10.10.0.0/16 but no connectivity to the machines I am deploying (Alfred fwiw)

Edit: Never mind just doesn't respond to ping... Love Windows. Not.

dark bear
#

I can't seem to setup or connect to OpenVPN. Using Kali Linux on a VirtualBox machine. After inputting the command as per instructed on the website, all it gives me is this result:

[1] 2951

dusky agate
#

remove & at the end and run it with sudo

dark bear
#

Like this?

sudo apt install openvpn && sudo openvpn /path-to-file/file-name.ovpn

#

Obviously changing the required parts

dusky agate
#

it's the first time?

dark bear
#

Yes

dusky agate
#

ok, do it

dark bear
#

That worked perfectly

#

Thanks

#

What does the & at the end represent then? @dusky agate

dusky agate
#

it run the process in background

dark bear
#

Ah ok

dusky agate
#

in the future if you didn't want to check update for openvpn you can use only sudo openvpn /path-to-file/file-name.ovpn

dark bear
#

Thanks

dark bear
#

Hmm. I cant seem to access the first machine for the Christmas task

#

TryHackMe says I'm connected to OpenVPN, green ticks etc

stone roost
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

dark bear
#

I deploy the Christmas machine, and it tells me to access it via http://my-machine-ip:3000

stone roost
#

did you deploy the room?

dark bear
#

Yes, It has the 1h timer counting down

stone roost
#

cool

#

do sudo if config on your own box now

#

check if you have multiple tun interfaces

dark bear
#

Sorry, whats the command?

#

I'm bare bottom n00b status

#

sudo if config

#

?

#

@stone roost

stone roost
#

yes

#

sudo ifconfig in your terminal

dark bear
#

Says command not found, but I reloaded the christmas page and now its loading

#

That was weird

untold ibex
#

ifconfig

#

not if config

#

or

#

ip addr

stone roost
#

my bad lol

#

doing too many things at once

dark bear
#

Thanks for the help guys.

#

I'll try continue the task now

stone roost
#

erm, did you get in?

dark bear
#

Yeah, learning how to decode the cookie now

unreal pine
#

hello

#

I'm experiencing some issues getting the vpn connection.

#

I followed the steps from the "how to connect" section. Tried to refresh it all, updated the app, it just hangs there attempting to connect for a long time.

#

Any ideas?

rotund spruce
#

Are you connecting from inside your VM or in your main OS? Make sure you only have one connection. Refresh and download the new file.

Follow the steps in this room :
https://tryhackme.com/room/openvpn

unreal pine
#

Are you connecting from inside your VM or in your main OS? Make sure you only have one connection. Refresh and download the new file.

Follow the steps in this room :
https://tryhackme.com/room/openvpn
@rotund spruce Thank you. did that a few minutes ago and it literally just connected (took it a couple of minutes). I'm using the main OS (W10).

#

Ty though

rotund spruce
#

@unreal pine I generally connect from inside my Kali VM but good to see you're in

long radish
#

Im doing RP:Metasploit, and i just deployed the machine and it asks me to type 'db_nmap -sV BOX-IP' but metaploit is not able to find any targets

tall cloud
#

Did you open the vpn

#

Connection

eager fulcrum
#

@long radish Did you actually put in the ip?

loud cairn
#

Hey there, I have deployed a machine in the "Learn Linux" room, but it is not working nor in the browser neither via openvpn

barren birch
#

@loud cairn What's the IP?

loud cairn
#

10.10.30.107

barren birch
#

Working fine for me. Are you connected to the VPN?

eager fulcrum
#

@loud cairn Wait, how are you trying to connect?

loud cairn
#

yes, assigned ip: 10.11.0.80

barren birch
#

Try !multivpn

loud cairn
#

from the browser tab

barren birch
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

eager fulcrum
#

You won't be able to open the IP in your browser

barren birch
#

Lazy bot

#

Yeah, don't rely on the browser tab to tell you that you're connected

#

It's not reliable

eager fulcrum
#

No

#

I think they're just opening the IP

#

Not SSHing

barren birch
#

Also, you'll need to connect with SSH

loud cairn
#

I dont have credentials for that

barren birch
#

Yes you do...
They're in the room

eager fulcrum
#

Keep reading

loud cairn
#

got it

#

grazie

mortal cairn
#

hi

eager fulcrum
#

@mortal cairn Can you please change your username? It's not appropriate

winged nacelle
#

Yo, is there a way to have dual monitors on kali, or does it not support that? On windows its works fine, just not in live boot which i believe is the problem. Thanks!

sudden quiver
#

hello friends, I am having issues connecting to VPN via WSL on Win10. it works fine from my main Win10 but getting this error on WSL:
ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)

#

should I redownload the config file or is this a known issue?

#

maybe I can just $ touch /dev/net/tun and retry sudo openvpn <configfile.ovpn> ? any thoughts?

eager fulcrum
#

WSL can't do it

#

It doesn't have access to the right networking stuff as it's not a proper linux install

olive pelican
#

Hi, do you recommend to re generate the vpn Config sometimes ? I was having a lot of disconnection lately

eager fulcrum
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

eager fulcrum
#

That's what'll be disconnecting you

sudden quiver
#

ahh, bummer. - thank you @eager fulcrum for saving me some time.

eager fulcrum
#

Make a kali VM @sudden quiver

#

Will be 10x better

olive pelican
#

I meant, because I got lot of disconnection, should I regenerate a VPN config and thy again

#

?

eager fulcrum
#

@olive pelican No

olive pelican
#

Okay

eager fulcrum
#

Just make sure you're not running multiple connections and then you'll stay connected

olive pelican
#

Okay

sudden quiver
#

@eager fulcrum everytime I have gone about it, I've had problems. I've tried USB persistent boot, and both virtual box and vmware. which do u suggest? currently limited to my laptop until parts to my build arrive.

eager fulcrum
#

Virtualbox works fine here

#

I've used virtualbox and VMware for kali on my laptop and my desktop

sudden quiver
#

alright, I will try again. and from what I've read recently in the past, I still want to connect my vpn on my main OS, rather than the VM, is that correct?

pale palm
#

is anyone else not ablt to SSH into machines rn?

eager fulcrum
#

@sudden quiver No, 100% connect from the VM

#

Otherwise you'll get issues catching reverse shells and a bunch more

sudden quiver
#

ahh, I see. I misunderstood then. Thank you.

barren birch
#

@pale palm Which machines?
Not all of them have SSH open...

pale palm
#

the common linux privesc room

barren birch
#

Ah, that one should have it open

pale palm
#

I'm gonna restart my machine, maybe that'll fix

eager fulcrum
#

Check your VPN

barren birch
#

If it's had a few minutes to boot up, try checking your VPN connection

pale palm
#

my VPN is good

barren birch
#

!multivpn

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

pale palm
#

I'll restart

eager fulcrum
#

is it good tho?

barren birch
#

Restarting will also work

sudden quiver
#

@eager fulcrum, "bridged adapter" network mode for the kali VM on VB?

eager fulcrum
#

NAT works

#

Genuinely doesn't matter for TryHackMe

tough tundra
#

Hello having problems connecting to open vpn. As its trying to connect, the status says tlc handshake failed. im on windows

#

nvm got it

pale palm
#

I regened and redownloaded my config file and now am getting

Fri Apr 10 23:32:49 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Fri Apr 10 23:32:49 2020 library versions: OpenSSL 1.1.1  11 Sep 2018, LZO 2.08
Fri Apr 10 23:32:49 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Fri Apr 10 23:32:49 2020 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Fri Apr 10 23:32:49 2020 Cannot load inline certificate file
Fri Apr 10 23:32:49 2020 Exiting due to fatal error
#

anyone know why?

naive dust
#

so uh

#

every time

#

i try to use termina

#

terminal

#

and i connect to ssh server

#

i just cant type

long radish
#

@eager fulcrum what do you mean actually put the ip in, sorry i am very new

eager fulcrum
#

Uhhh I don't remember the context now

#

You're gonna have to remind me

long radish
#

sorry

#

its the metaploit room

#

the first question asks you to deploy a machine and type in 'db_nmap -sV BOX-IP'

eager fulcrum
#

Yep, replace BOX-IP with the IP of the machine you deployed

long radish
#

OHHHHHH

eager fulcrum
#

And make sure you're connected to the VPN

long radish
#

OH MY GOD

#

thank u

#

u are an actual god

eager fulcrum
#

That used to be my site rank

#

Now it's level 998

long radish
#

i aspire to be you one day ❤️

eager fulcrum
#

Content creation is good fun

peak monolith
#

Hey there, y'all! I think I'm doing something terribly wrong and would love some assistance. I'm trying to get Hashcat running on my Linux terminal (working on a Windows 10 system), but when I run it I am getting the error "clGetPlatformIDs(): CL_PLATFORM_NOT_FOUND_KHR". Would anyone be able to assist me, please?

molten bolt
#

Not sure which channel to post; but. Is it just me or is THM really slow the last couple of days? To the point that all requests take a really long time or timeout

eager fulcrum
#

@peak monolith WSL?

#

@molten bolt It's being worked on

molten bolt
#

Ahh oke

#

Good that it's not just me

#

Understandably also, when I just got on there where only a few hundred users or so online at the time

eager fulcrum
#

Skidy and ashu are doing a big rewrite, site is growing massively atm

molten bolt
#

Yea

peak monolith
#

@eager fulcrum Actually a bona fide Windows 10 computer, but I got an Ubuntu terminal from the Windows store and have had good success in other, non-hacky tech areas so far

eager fulcrum
#

Yeah that's WSL

peak monolith
#

Oh, my bad

eager fulcrum
#

WSL isn't a full linux system, it doesn't get access to GPUs or a bunch of network stuff

#

Makes it a bit bad for hacking

#

You can run hashcat on Windows natively. Powershell.

peak monolith
#

Ahh, got'cha. Yeah, I might have to switch away from that, then

eager fulcrum
#

Make a kali VM, crack hashes outside of the VM on Windows

latent fable
#

WSL is bae otherwise

peak monolith
#

@latent fable I've loved my WSL so far!
@eager fulcrum Off to make a Kali VM it is. Thanks ~

eager fulcrum
#

Wsl is useful quite often, until you need a proper kernel

wide dock
#

The ovpn is too finicky for me. Stuck at UPD link remote this time. Other times it gets connected, but i dont get access to any box

vapid dawn
#

We're doing VPN maintenance :))

#

will be done in 1.5 hrs :))

wide dock
#

Ohhh cool

thorn badger
#

I am still facing issue after maintenance

eager fulcrum
#

@thorn badger you're going to need to give a little more detail

thorn badger
#

Sat Apr 11 14:22:05 2020 UDP link local: (not bound)
Sat Apr 11 14:22:05 2020 UDP link remote: [AF_INET]18.202.129.195:1194
Sat Apr 11 14:22:05 2020 TLS: Initial packet from [AF_INET]18.202.129.195:1194, sid=a6ff1513 d9db2308
^CSat Apr 11 14:22:20 2020 event_wait : Interrupted system call (code=4)
Sat Apr 11 14:22:20 2020 SIGINT[hard,] received, process exiting

eager fulcrum
#

You pressed control C

#

You killed it

#

Don't expect it not to die when you kill it

thorn badger
#

i killed because it was not working. Now, It's showing Apr 11 14:27:12 2020 Initialization Sequence Completed
still no response

vapid dawn
#

Hmm try leave it running

#

It should connect as usual

rapid thunder
#

can't ping machines

#

ah

eager fulcrum
#

Some machines don't respond to pings.

slim ravine
rapid thunder
#

I see ninja

eager fulcrum
#

@slim ravine don't background openVPN if you can help it

rapid thunder
#

just split your terminal and hide it

#

that's what i do

eager fulcrum
#

!multivpn for everyone

sharp bisonBOT
#
TryHackMe
• Step 1

Type ps aux | grep openvpn into your terminal and press enter

• Step 2

If there's more than one line (and the second doesn't have "grep" in it), do the following steps

• Step 3

Type killall openvpn into your terminal and press enter

• Step 4

Start the VPN with sudo openvpn <path-to-config>

slim ravine
#

kk @eager fulcrum thanks. will do that

slim ravine
#

still not working @eager fulcrum ,any alternatives . have been using the hosted kali for two days, and have to freshly install tools all the time. please can any one help me solved this issues, i will appreciate .

vapid dawn
#

Try regenerate your OpenVPN config file

thorn badger
#

@vapid dawn I regenerated already.

vapid dawn
#

send me your file @thorn badger

thorn badger
#

Okay wait

vapid dawn
#

^ I'd say follow this first

thorn badger
#

@vapid dawn it's working now. But slowly

minor hatch
#

Hi!
I still have problems with my OpenVPN:

Sat Apr 11 12:32:30 2020 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Sat Apr 11 12:32:30 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Sat Apr 11 12:32:30 2020 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Sat Apr 11 12:32:30 2020 Cannot load inline certificate file
Sat Apr 11 12:32:30 2020 Exiting due to fatal error
deep trellis
#

can you please regenerate your config file