Email support@tryhackme.com
#site-support
toxic python
hollow moon
Well, no premium for me today I guess 😦
naive dust
@bronze vale i was going to install vmware and there is about 40 different installations i can get, which one do you reccomend for a beginner?
bronze vale
If you’re talking about VMware downloads* I believe it’s called VMware workstation, which is the free version. Get recently released installer with a .iso file for Kali Linux
naive dust
alright cool i already got the iso thank you
naive dust
alright lol
flint hawk
VMWare Workstation is really great, but it has a 30 day trial
Like when it comes to issues, I've had none, but I remember having some weird stuff happen with VBox even with my short stint with it
bronze vale
VMware workstation player is the free sorry*
eager fulcrum
The IP of your attacking machine, for reverse shells and stuff, is your tun0 adapter IP
your openVPN IP
simple needle
my attacking machine meaning the ipv4 address?
eager fulcrum
Your attacking machine meaning the machine you're running the VPN on
simple needle
in the metasploit room, question 9 in task 5 says to set lhost as my tryhackme ip
Are you on a linux machine?
@eager fulcrum im on mac
eager fulcrum
Are you using a VM to attack or are you running metasploit on macos?
simple needle
im running metasploit on macos
eager fulcrum
Ok, you'll probably need to disable your firewall as well.
If you go to http://10.10.10.10/ it will tell you your VPN IP address
eager fulcrum
Yes, your exploit will not succeed
Because the reverse shell connection will be blocked
simple needle
okay
eager fulcrum
Most likely at least, it depends on the config
simple needle
disabling my firewall is dangerous tho is there any alternative solution?
Most likely at least, it depends on the config
@eager fulcrum i'll try the exploit just incase
eager fulcrum
disabling my firewall is dangerous tho is there any alternative solution?
@simple needle Not particularly, but there's a reason most people attack from a VM
It's just your device firewall, there's not that much risk associated with it. Attackers till can't talk to closed ports.
simple needle
i would attack from a vm but running just an iOS simulator slows the device a lot so a vm is most likely not gonna run
It's just your device firewall, there's not that much risk associated with it. Attackers till can't talk to closed ports.
@eager fulcrum okay thank you
eager fulcrum
I run a VM on a 2014 mid range business laptop happily.
sharp bear
If you have a tryhackme sub you can use the in browser kali or attack machine
simple needle
I run a VM on a 2014 mid range business laptop happily.
@eager fulcrum oh wow
If you have a tryhackme sub you can use the in browser kali or attack machine
@sharp bear yeah ik but i unfortunately dont have a sub
i turned off my firewall and ran the exploit but im getting the error: Handler not able to bind to 10.x.xxx.xx
eager fulcrum
VPN probably isn't running correctly then
I really really recommend creating a kali VM and using that. Run the VPN directly in Kali.
shy holly
what is the username for Nmap room
eager fulcrum
You're not meant to log in to that machine
shy holly
yes
eager fulcrum
yes
@shy holly What do you mean by that?
shy holly
I mean I am unable to login, and i need username and password for that machine a
eager fulcrum
You're not meant to log in to that machine
shy holly
Oh okay
sturdy wigeon
not sure if i missed something but why are the ip addresses not shown right away anymore?
sturdy wigeon
ohh... ok icic
final flame
Hello all, my apologies if this is not the correct place to ask, but how can I copy a flag from the in browser terminal to my own browser? I'm on a mac
eager fulcrum
There should be a button on the left hand side
Give the site access to your clipboard
final flame
yes sorry, this browser is in the room itself, in linux challenges
not my kali machine
eager fulcrum
SSH in.
final flame
ohhhh
eager fulcrum
You'll have a much better time.
naive dust
Im using parrot for refrence, How am i able to tell if my openVPN is setup correct and how do i run it if it is?
flint hawk
You mean as if you're connected to the network?
naive dust
yeah
naive dust
ah alright cool thanks
flint hawk
Once you run the command on Parrot, open up a new Terminal window and let it sit in the background doing its thing
naive dust
yeah its connected, thank you!
eager fulcrum
@naive dust @flint hawk http://10.10.10.10/ is good for testing your connection
Always up
naive dust
dope
flint hawk
I couldn't remember what the page was on the top of my head 😅
tribal tartan
@eager fulcrum VMWare worked 🙂
eager fulcrum
Well that's weird but good news
tribal tartan
Thanks for all your help yesterday, I appreciate it
eager fulcrum
I try my best
serene surge
Hi, room: Attacktive Directory, the Task 2 show how to install impacket. Kerbrute is also installed with the same repo, but i have discovered that the version of kerbrute is old, what to do? what's wrong?
supple sonnet
update it
serene surge
how? I mean which is the right procedure? the room show how to install impacket, if that is the main repo, how can i update it correctly?
minor fjord
Hello, is anyone responding to emails sent to hello@tryhackme.com?
wraith dragon
Hello, is anyone responding to emails sent to hello@tryhackme.com?
@minor fjord Same here. still waiting.
bronze vale
@minor fjord they’re quite busy but the admins will be trying their best to get through them all. There’s only three people.
minor fjord
Oh okay :/
sinful solar
the tryhackme bot wont verify
"Your message could not be delivered because you don't share a server with the recipient or you disabled direct messages on your shared server, recipient is only accepting direct messages from friends, or you were blocked by the recipient."
derp
reread it
flint hawk
Are you only sending !verify and your token?
sinful solar
nah its cause i block dms
flint hawk
Yeah that'll do it 😅
sinful solar
done 🙂
ionic lantern
hi, i need help with ssh, who can help me?
bronze vale
What do you need help with specifically? :)
ionic lantern
i use kali in virtual machine, so i installed openvpn and started it. after that in task i should deploy a machine and connect to it via ssh. so i tryed to and it didnt ask me about username or password, it just said that fingerprint created and added. so i tryed to connect to that ip but whatever i do it said - go away
i just dont kno wht to do already(((
bronze vale
Are you using ssh username@machineip as the format for ssh?
ionic lantern
im trying) but - wht username to use? it didnt ask and yes user@ip
bronze vale
Is this the learn Linux room?
ionic lantern
yeah must be
bronze vale
Both the username and password are shiba1 :)
bronze vale
Yeah it’s a little tough, happy hacking @ionic lantern
ionic lantern
i really thought that shiba1 was just for example)))
digital apex
i cant connect to my vpn
bronze vale
@digital apex have you changed VPN servers
bronze vale
@deep trellis
Could you assist please
User is getting a handshake failed error on OpenVPN
They have attempted to switch VPN server and redownload the configuration file.
bronze vale
Can you try typing killall openvpn and re-start it
digital apex
it says no process found
bronze vale
Hm okay
placid mango
Maybe try restarting your pc.
digital apex
its solved
bronze vale
It’s solved?
bronze vale
Oh okay awesome
digital apex
thx @bronze vale
digital apex
eu 1
bronze vale
Strange, okay thank you
minor fjord
Is there a way to change the discord related to the TryHackMe token?
minor fjord
I changed my Discord account and linked my old account ... This is the subject of my email but I still have no response
bronze vale
You’ll need to ping one of the mods and kindly ask them to remove the token off your old account :)
minor fjord
Okay, thanks you
ionic lantern
and again(( wht shell im using when logon?? echo says bash - wrong answer
vernal ruin
Room, Task
ionic lantern
welcom room/12
vernal ruin
Since when welcome room has Task #12
ionic lantern
well - it is learn linux (but in adress in link it is welcome room) / 12
ionic lantern
12
vernal ruin
You can't run su shiba2 ?
ionic lantern
How do you specify which shell is used when you login?
su shiba 2 is not the problem at all)
vernal ruin
Task 12 doesn't ask you to do that at all
But you can change the defualt shell after you login using chsh or just temporarily use another shell by just invoking it
ionic lantern
[Task 12] su
Now that we have our next user password, it seems like a good time to cover su. su is a command that allows you to change the user, without logging out and logging back in again. For example if you wanted to switch to shiba2 while you're the user shiba1, you would type su shiba2 . You would then be prompted for a password and if you entered shiba2's password you would then become shiba2
Note: Typing su on its own is equivalent to typing su root.
#1
How do you specify which shell is used when you login?
[Task 12] su
Now that we have our next user password, it seems like a good time to cover su. su is a command that allows you to change the user, without logging out and logging back in again. For example if you wanted to switch to shiba2 while you're the user shiba1, you would type su shiba2 . You would then be prompted for a password and if you entered shiba2's password you would then become shiba2
Note: Typing su on its own is equivalent to typing su root.
#1
How do you specify which shell is used when you login?
ionic lantern
answer -s ))
vernal ruin
Don't post answers here @ionic lantern 🙂
It's borked, halp
Restarted, regenerated, changed servers, looks like an issue at my end
bronze vale
@vernal ruin are you on EU1?
bronze vale
@deep trellis Is EU1 broken on your end? That’s the second person who’s got an issue with it
For now you’ll have to use Non-Eu servers :/ thats the fix for someone else
wind wedge
My eu1 broke so I switched back to EU2
This was like 10 mins ago
Just gets stuck halfway
bronze vale
Yeah Eu1 is borked, that’s my second ping to Skidy so I’ll just leave it for him to fix in his own time.
wind wedge
First it was EU2 now EU1
vernal ruin
I have tried with all the servers avaiable
vernal ruin
Is this how it should be ? Isn't the internal ip here
idk, it's just stuck at this point, looks like it doesn't know what to do with this server
bronze vale
I don’t have my Pc on to cross reference so I have no clue
I’ll check OpenVPN on my phone
Eu2 seems fine for me :/
vernal ruin
I literally tried every sever available to me, it's weird
vernal ruin
Check the pins #room-help
sinful coral
@vernal ruin it's technical problem
There should be browsing history
It's not here.
sinful coral
@vernal ruin ok
lofty shuttle
What makes a room subscriber-only or free?
Is it a choice the creator can make?
vernal ruin
https://discordapp.com/channels/521382216299839518/521771811768107008/748488740501979206 this hasn't been resolved yet 😦 and If I don't resolve it within 2 hours, I will loose my 76 streak
halp
bronze vale
You can do walkthrough rooms on your phone
bronze vale
Are you trying to download the setup file for kali @simple needle
vernal ruin
I may already have completed all the walkthroughs
bronze vale
I did ask around and nobody else has had issues with Eu2, are you sure you've tried all servers?
@zealous yoke Are you available to assist?
Skidy seems to be unavailable at the moment and some issues are occuring with the handshake on openvpn.
Eu1 has seemed to be causing the most issues.
bronze vale
Oh Skidy! :D
bronze vale
Multiple people are complaining about this
https://discordapp.com/channels/521382216299839518/521771811768107008/748488740501979206
Eu1 is the only server has been reported
deep trellis
Has this been reported in the last hour?
Because I saw the issue and fixed it in the background.
bronze vale
Quantum just re-reported it so I'm not sure
vernal ruin
Let me change servers for the last time rn and I will report back
deep trellis
Please regenerate your config too
bronze vale
Thank you Skidy btw ❤️
vernal ruin
Noted, thanks ♥️
simple needle
Are you trying to download the setup file for kali @simple needle
@bronze vale im trying to get the file for kali on virtual machine
deep trellis
Thank you Skidy btw ❤️
@bronze vale Thanks for dealing with it:) It should be fixed, I just double checked.
bronze vale
Awesome :)
vernal ruin
https://www.osboxes.org/kali-linux/ @simple needle
bronze vale
I was just going to throw the full download link
bronze vale
Sorry for being nice 👉 👈
vernal ruin
Excused
simple needle
This is more of a #general question but I will get the link for you
@bronze vale oh sorry
thanks btw
vernal ruin
I actually remembered the website on top of my head, so I just linked it quickly
simple needle
VBox or VMware?
@bronze vale box
bronze vale
Yeah should be on the site Quantum linked
bronze vale
https://cdimage.kali.org/kali-2020.3/kali-linux-2020.3-installer-amd64.iso
To instantly install newest kali 64bit btw
simple needle
I actually remembered the website on top of my head, so I just linked it quickly
@vernal ruin 😂
https://cdimage.kali.org/kali-2020.3/kali-linux-2020.3-installer-amd64.iso
To instantly install newest kali 64bit btw
@bronze vale oh okay im already downloading it but thanks
round orchid
What is the time frame for the daily streak resetting?
It seems like I lose my streak if I don't get to it by lunch time
vernal ruin
Imagine a timer, every time you answer a question, it resets and if the counter reaches 24 hours, you loose your streak
@round orchid
round orchid
So how long do I need to wait before I can answer another question to increase my streak?
Midnight UTC?
vernal ruin
You can answer anytime you want, and as soon as you answer, you have to answer the next question before 24 hours are over
round orchid
Then I would just need to answer 30 questions to get the 30 streak badge?
vernal ruin
@zealous yoke Is a new day* being calculated for everyone at the same time or it's different for everyone according to the first question they answered
Then I would just need to answer 30 questions to get the 30 streak badge?
I get the question, hold on
zealous yoke
You have 24 hours from the last time you answered a question before the streak will expire (:
e.g. if you answer a question at 13:00 UTC, you have until 13:00 UTC to answer another to count the streak
vernal ruin
Yeah I told him that, he want to know when does the "new" day starts
zealous yoke
Ah
Yeah it's 24 hours from your last answer
you could answer 10 questions in a day
the timer will set from the time that you answer the last question (:
vernal ruin
Okay Imagine this, I answered the first question 10:00 EST, and got 1 streak point. I answered another question at 15:00 EST and now I have until 15:00 EST next day to answer or I loose my streak. I have 1 streak point rn. He his asking that if now even if I answer another one at 16:00 EST and I have again 24 hours to answer, I don't get streak points just yet. So what's the "new" day for me to get the streak point. Is it 24 hours from the first question I answered that landed me streak of the day
@zealous yoke
zealous yoke
From my understanding it would be the first time you answer a question that would addition to your current count, and then then the last time you answer a flag that would set the timer to 24 hours until it expires
zealous yoke
That’s my latest understanding of how streaks works in all honestly
I’d love to be able to get the time to write something formal on the help site and get outlines it all in all honesty
deep dagger
Hi to everyone! I have a problem with the Blue tutorial. I thinks there is an issue, i've already reported it. Btw, if anyone has the same problem, I tried to perform a vuln scan with nmap and it appears the machine isn't vulnerable to ms17-010. In fact, when I try to exploit with metasploit it fails.
deep dagger
Yes, I'm connected. I set the RHOSTS well.
round orchid
@vernal ruin @zealous yoke To me it still sounds like I would be able to answer 30 questions (in one sitting) and be awarded the 30 day streak medal
vernal ruin
No, you won't. You can't get two streak points within 24 hours and you will looks streak completely if you don't answer the next one within 24 hours
round orchid
Ah I re-read it, now i see what you're saying, I understand
naive dust
How do I execute msfvenom if the command isn't found
round orchid
ok now for real tech support. In firefox it appears that I cannot paste my clipboard into the kali web session
toxic python
you have to allow clipboard access or something
zealous yoke
^ Yess
This is best done by opening it into a new tab by pressing "Full Screen"
you should get a pop up asking you to allow clipboard access (:
naive dust
use a different command that can be found
@toxic python
I tried to download from github but no success
toxic python
i have no clue what youre trying to do
i just answered your question with no context
lime mica
Hello, I wrote an email to the support two weeks ago about my account problems and my emails has not been answered till now but I’m not here to complain about that. I’m here to ask if I’m allowed to write a message to skidy? And ask him about my account problem?
toxic python
Uh, I think they'd rather not be tagged and just wait for the email. That being said there are 2 people answering all the emails they get so it's understandable that it's slow.
I suppose you can tag Skidy since he's on right now and if he has time to answer, he may
@lime mica
lime mica
Okay thanks
coral eagle
Hey I'm a student, but I don't have student mail id, I have my ID card though
toxic python
email support@tryhackme.com
coral eagle
Okay
zealous yoke
Unless it's absolutely critical, I'd recommend waiting for their response from support@tryhackme.com @lime mica there's only one (another person is away) answering the emails at the moment. I can assure you they're not ignoring, it's just rather a backlog if anything. Another email may not hurt, be ensure to enclude as many details to your problem as possible to aid in the response time ^^
tulip star
toxic python
“VPN and other technical question”. Is that a technical question?
I mean idc either way but okie 🤷🏿♂️
strong jay
So this might be a rough way too start out...but in the welcome room, I am just getting a 405 error when trying to view the webpage..
eager fulcrum
Which webpage? Screenshot?
strong jay
This is the welcome room machine
deep trellis
This is the welcome room machine
@strong jay you're pasting in your Kali machine
Paste in the welcome room deployed IP
strong jay
I am using the "Access on the in-browser Linux Machine"
eager fulcrum
Yep, you still need to deploy the machine in the welcome room
potent tangle
I cannot run my uploded machine, Im getting this error Problem converting VM. Check prerequisites.
Im trying to run Linux Mint, as I good remember i have setup static ip, machine have 15GB of storage, 2048 ram, Network adapter setup to NAT
eager fulcrum
@potent tangle I don't think that's on the supported list
I am using the "Access on the in-browser Linux Machine"
@strong jay The in browser linux machine is your attacking machine, the machines you deploy in rooms are the target machines
strong jay
Oh, okay. I see what you are saying. I was reading it as deploy the VM in the browser or OpenVPN but this is a step BEFORE that. Thank you.
Welp, hopefully attention to detail and reading comprehension doesn't play a huge part in this Ethical Hacking thing 😉
fast hornet
Hey guys, im trying to connect with openvpn but i dont think its working
by going to an ip address checker its still showing my normal one
it does say im connected though
wind wedge
The access page isn’t always accurate
fast hornet
stupid me figured it out, i am not connecting to my own ip, im connecting to the ip i get after clicking deploy
(but my ip still shows me as being at home)
i guess my usual internet traffic doesnt go through openvpn
wind wedge
If you go to http://10.10.10.10 it will tell you if you’re connected
young sage
ı have a problem
"ssh: connect to host 10.10.29.118 port 22: Connection timed out"
"shiba1@10.10.29.118: Permission denied (publickey)"
fast hornet
thanks
wind wedge
@young sage are you connected to the vpn
young sage
yeap
fast hornet
im in
young sage
wind wedge
That access page isn’t always correct
young sage
wind wedge
Try redeploying the machine
young sage
i did but it didn't
eager fulcrum
by going to an ip address checker its still showing my normal one
i guess my usual internet traffic doesnt go through openvpn
@fast hornet That's correct, it would be a privacy concern if it did
!multivpn
sharp bisonBOT
TryHackMe
fast hornet
yeah i was kinda worried about doing this on my main computer so i made a kali vm
i guess it wasnt necessary but at least now a bunch of the stuff is preinstalled
eager fulcrum
It's a real pain installing stuff on windows for it
young sage
what can I do
sharp bisonBOT
TryHackMe
young sage
password "shiba1" ?
toxic python
it says it in the room
toxic python
Oh I thought he was doing zthlinux since he thought the user was shiba1
eager fulcrum
To be fair they didn't make it clear at all
young sage
Paradon is okay. my head is gone
toxic python
I hope you find it
flint hawk
Do username change requests need a specific template/rules to follow? Do I need to email from the address linked on my THM account? Should I specify a list of usernames, with priority on if one is allowed or not?
Also how long is the queue on tickets? 👀
flint hawk
I guess my question is, are underscores allowed? 😅
solar basin
so I wanna use open vpn and im having issues connecting!
toxic python
Someone answered you in general
solar basin
yeah
still not working though
so when i connect i get an error saying there was a failure
hold on
i think i know what it is, im not using the server thats closest to me
flint hawk
I redirected them here since the problem seems to not be resolved with the OVPN room
solar basin
Windows 10
flint hawk
Okay, so you downloaded your configuration file, imported it into the OVPN application, and what is the failure message exactly? Can you take a screenshot of what you see?
supple sonnet
ideally you'd want to try this on Kali
solar basin
so i should just download it on Kali?
because it did say we have to use OpenVPN if we wanna use our own VPN connection
flint hawk
Wait, do you have a Kali VM already set up?
solar basin
yes
flint hawk
You don't run OVPN on Windows, just on Kali
flint hawk
You should be able to drag-and-drop your config file over to your VM and run it in Terminal with this command sudo openvpn --config <config path>. <config path> is where you specify where the config file is held.
Nah, OVPN is only used to talk to THM's servers.
After you run that command in Terminal, it's going to hang and at this point, hold down ctrl + shift + T to open a new tab in Terminal and you can continue on that way. The tab running OVPN is supposed to sit in the background.
solar basin
ok
flint hawk
After that, open this page http://10.10.10.10/ on your VM. If it loads, you're connected
solar basin
thank you!!!
flint hawk
No problem. Did you get it working?
flint hawk
OVPN is default installed on Kali
solar basin
oh okay!
i never got to use kali for personal use before
i did it in a simulator for an class i took online last semesyer
so it could only have so much simulated features
my apologies for the confusion!
flint hawk
Welcome to learning. You'll be confused a lot.
solar basin
school doesnt always teach you common sense and everything xD
i used testout for the class for college credit
flint hawk
We briefly touched on Pi VMs in one of my classes.
solar basin
and got the ethical hacker pro cert. I learned to use metasploit, john the ripper, ettercap, etc..
nice!
flint hawk
Well, you should be able to get up to speed quickly if you already have baseline knowledge of tools.
solar basin
alright so I clicked on VPN connections in Kali, and selected OpenVPN, let me send you a screenshot of what I have
I hope this is what i should be getting
im so used to windows
eager fulcrum
Don't use that
It will add broken routes
Just use the openvpn command line program, the OpenVPN room details how
solar basin
okay!
flint hawk
Click on this
flint hawk
Okay, so referencing the command I posted above sudo openvpn --config <config path> , (change config path to where the config file is) we will type it in and hit enter
When it does, your screen will probably look kinda like mine, but without the tabs
solar basin
got another error, says i need to define the TUN/TAP device
should i specify the file name?
toxic python
Yes
flint hawk
All right, open up http://10.10.10.10/ in your VM and see if you're connected
wind wedge
Try without —config
solar basin
i just did 🙂
gonna see how it goes
command went through the command line
still doesnt work
eager fulcrum
Did you close the terminal? If not, don't.
eager fulcrum
Please can you screenshot that for us?
eager fulcrum
Are you in Egypt by Amy chance?
solar basin
no in the US
eager fulcrum
Welp OK, that's not so normal. Is your Kali machine's system time accurate?
flint hawk
What about regenerating the config or grabbing a new one?
solar basin
i could try that!
round palm
How do I get the student discount?
flint hawk
Use your student email with your account. If you've already created your account, you can simply change your email.
round palm
Ok didnt work but found docs on it and just sent an email
woven zenith
Hi!
I am a new user and I am trying to complete my first room (Vulnversity). However I am experimenting some technical issues since the machine seems quite unresponsive. For instance even though I managed to "guess" the port open for web services, when scanning with nmap, this port appears as filtered. When trying to use GoBuster, the requests timeout.
I have doubled check that I am correctly connected using openVPN (both "server status" and "connected" are checked on the https://tryhackme.com/access page).
Does anyone have any tip for me?
Thanks a lot!
sharp bisonBOT
TryHackMe
vernal ruin
try this
woven zenith
Thanks a lot! Can you tell me where you found those instructions? I am running Windows 10 OS and I am assuming these commands are specific for linux systems
flint hawk
Is your attack machine W10 or a VM?
woven zenith
I am running Kali using WSL under W10. OpenVPN is running on W10. I cannot reach from any of the machines
vernal ruin
run the vpn inside wsl
flint hawk
Do not run OVPN on W10, run it on Kali
vernal ruin
Also, upgrade to wsl v2 if you are not already on it, cause wsl sucks
woven zenith
Do not run OVPN on W10, run it on Kali
@flint hawk Okay! Will do that immediately
Also, upgrade to wsl v2 if you are not already on it, cause wsl sucks
@vernal ruin I am already on wsl2, sorry for the imprecise earlier message
vernal ruin
Yup, It's all right
Make sure to disconnect the vpn running on Windows 10, before connecting to wsl
woven zenith
It seems to be working just fine! Thanks a lot!
vernal ruin
Awesome
red lance
Anyone around that can offer some help right now?
I
I'm doing the room "Steel Mountain". I got to the point where I need to use the exploit in metasploit, however, when I set LHOST it always uses eth0 instead of tun0
trying to figure out how to correct this
naive dust
I’m trying to add routes in kali
So, the 192.168.193.0/24 is the internal network; from this one, i am trying to reach other networks. One of the task is to find which ones and add a route to reach them.
To find the network, I have a wireshark file that show as from the 192.168.193.0/24 network's hosts, we can reach 2 web server, with these ip address:
10.86.74.7
10.85.174.87
So, what I have to do is to add a route from my internal network to this 2 others. The problem is that I have NOT the gateway of this network, cause "How many routers there are in the network" is one of the proposed question.
So, If i want execute these command:
ip route add -net 10.86.74.0/24 gateway_address dev tap0
ip route add -net 10.85.174.0/24 gateway_address dev tap0
what I miss is the gateway_address parameter. I tried to execute the command without this parameter, or:
ip route add -net 10.86.74.0/24 dev tap0
but, of course, I got the Destination Host Unreachable error when I try to ping one of the host.
So, my question is: how can I find the gateway address? May be the use of the Wireshark file? And if yes, what Is there something I can search for inside it?
vernal ruin
I'm doing the room "Steel Mountain". I got to the point where I need to use the exploit in metasploit, however, when I set LHOST it always uses eth0 instead of tun0
@red lance You can't specify the lhost ?
vernal ruin
What do you set it to
shy holly
my machine ip address keeps not connecting multiple times in 10 min, Like it works for few seconds and not works after few seconds, When I ping the ip address, it's working only some times but not responding most of time
please someone help with this
vernal ruin
!multivpn
sharp bisonBOT
TryHackMe
vernal ruin
@shy holly
vernal ruin
That's weird
red lance
[] Started reverse TCP handler on 192.168.243.128:4444
[] Using URL: http://0.0.0.0:8080/F7oEam
[*] Local IP: http://192.168.243.128:8080/F7oEam
red lance
ok
when it runs, it still shows my eth0 ip
192.168.243.120 is my eth0 IP
maybe I'm not understanding the output properly?
vernal ruin
ahem maybe don't reveal your real IP
vernal ruin
Try restarting metasploit
red lance
did that
vernal ruin
show me the options
red lance
msf5 exploit(windows/http/rejetto_hfs_exec) > show options
Module options (exploit/windows/http/rejetto_hfs_exec):
Name Current Setting Required Description
HTTPDELAY 10 no Seconds to wait before terminating web server
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
RPORT 80 yes The target port (TCP)
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the local machine or 0.0.0.0 to listen on all addresses.
SRVPORT 8080 yes The local port to listen on.
SSL false no Negotiate SSL/TLS for outgoing connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
TARGETURI / yes The path of the web application
URIPATH no The URI to use for this exploit (default is random)
VHOST no HTTP server virtual host
Payload options (windows/meterpreter/reverse_tcp):
Name Current Setting Required Description
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 192.168.243.128 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
0 Automatic
this is before I set my options
vernal ruin
Set you options
red lance
msf5 exploit(windows/http/rejetto_hfs_exec) > show options
Module options (exploit/windows/http/rejetto_hfs_exec):
Name Current Setting Required Description
HTTPDELAY 10 no Seconds to wait before terminating web server
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS 10.10.31.182 yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
RPORT 80 yes The target port (TCP)
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the local machine or 0.0.0.0 to listen on all addresses.
SRVPORT 8080 yes The local port to listen on.
SSL false no Negotiate SSL/TLS for outgoing connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
TARGETURI / yes The path of the web application
URIPATH no The URI to use for this exploit (default is random)
VHOST no HTTP server virtual host
Payload options (windows/meterpreter/reverse_tcp):
Name Current Setting Required Description
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 10.13.2.224 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
0 Automatic
vernal ruin
and what room is this
vernal ruin
msf5 exploit(windows/http/rejetto_hfs_exec) > show options
Module options (exploit/windows/http/rejetto_hfs_exec):
Name Current Setting Required Description
HTTPDELAY 10 no Seconds to wait before terminating web server
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS 10.10.31.182 yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
RPORT 80 yes The target port (TCP)
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the local machine or 0.0.0.0 to listen on all addresses.
SRVPORT 8080 yes The local port to listen on.
SSL false no Negotiate SSL/TLS for outgoing connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
TARGETURI / yes The path of the web application
URIPATH no The URI to use for this exploit (default is random)
VHOST no HTTP server virtual hostPayload options (windows/meterpreter/reverse_tcp):
Name Current Setting Required Description
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 10.13.2.224 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen portExploit target:
Id Name
0 Automatic
@red lance when you run this, it doesn't work ?
red lance
msf5 exploit(windows/http/rejetto_hfs_exec) > run
[] Started reverse TCP handler on 10.13.2.224:4444
[] Using URL: http://0.0.0.0:8080/EpOGob
[] Local IP: http://192.168.243.128:8080/EpOGob
[] Server started.
[] Sending a malicious request to /
/usr/share/metasploit-framework/modules/exploits/windows/http/rejetto_hfs_exec.rb:110: warning: URI.escape is obsolete
[] Server stopped.
[*] Exploit completed, but no session was created.
I'm confused why it shows my eth0 for Local IP
I assume thats why its failing
main kite
bronze vale
@red lance what did you set for your LHOST? You should write out the numbers rather than using the interface names
vernal ruin
Yeah he did
lament sequoia
Is the learn linux room supposed to have tasks?
It's just sitting in my rooms uncompleted
But can't see a way to complete
bronze vale
Leave and rejoin the room* @lament sequoia
crude sierra
hi guys. I just signed up and subscribed :)
when I try to open my kali browser based machine I get the following error:
any ideas?
bronze vale
Are you able to terminate and redeploy
bronze vale
Depends on what you prefer :3
crude sierra
well, what's the difference 😄
bronze vale
Attackbox I believe is optimised for rooms so it should have all tools you'll need (excluding hash cracking tools) iirc
It is fairly new
crude sierra
so terminating and deploying as kali instead of attackbox worked
bronze vale
Okay, would you be able to terminate again and try attackbox for me? I just want to make sure this is not an on going issue so we can resolve it now
crude sierra
sure thing
I can confirm the attackbox is also working now
so it was the classic "have you tried turning it off and on again?" problem 😄
bronze vale
Awesome! Thank you for doing that for me :) Enjoy the rest of your day and if you need any more site-related help, I should be here :)
Yeah it fixes most things haha
crude sierra
thanks! enjoy the rest of your day too
bronze vale
:)
sacred cipher
i keep getting this for vulnversity... the other rooms work fine, i can scan the server using nmap... but the webpage isnt opening up
flint hawk
You’re forgetting the port
Vulnersity’s web server isn’t just hosted at the IP. When you throw nmap at the address, you should be able to see a web server reporting at a port
lament sequoia
Thanks Bloke#2439, that worked
flint hawk
You need to include that port
Example of how it might look is 192.169.0.1:1. <IP>:<Port>
naive dust
Im having trouble trying to route to another network from my ip.
I really need help 😦
Its basically this
Ive tried ip route [network i want to add] via [my ip network]
naive dust
got ya !
hollow frigate
hey guys! i just logged into my account and found that i'm added to a koth game automatically? i did not click on any links and neither did i want to join a game! it just happened on its own!
azure swift
Anyone else having issues when launching MSF from their Kali box?
I just fired up the box. This also happened to me last night. Initially, there was a message about needing to upgrade gem bundler 1.17 (or something like that)
Attackbox works fine. Re-trying Kali for grins, though I know I terminated my Kali instance last night.
toxic python
You can google that issue and download the specific bundled version
There’s a GitHub thread that resolves that
I’d get it but I’m on my phone
azure swift
I had to download that last night
and again today...
so, this seems to be a recurring issue on the Kali instances
azure swift
shouldn't the machines be updated so we don't need to do this every time?
toxic python
Yes
@deep trellis are you available to take a look at this issue with the kali machine? 
azure swift
TY. I'm happy we at least have AttackBox as a fallback. I appreciate y'all doing what you do!
deep trellis
@deep trellis are you available to take a look at this issue with the kali machine?
@toxic python That's annoying, I've added it to my list of to-do's. Thanks for letting me know:)
azure swift
nothing like a to-do list to make you feel alive...
toxic python
Oh I think it’s just gem update —system I was thinking of a different error.
Here’s that one anyway:
trim timber
The thing is my Linux won't do full screen even if I do virtualbox-guest-x11
Need help
hidden inlet
my vpn keeps falling, what can i do? this only happens with the tryhackme vpn
toxic python
!multivpn
sharp bisonBOT
TryHackMe
sharp bisonBOT
TryHackMe
sacred matrix
Is there a way to change the username on Tryhackme?
golden crag
Is there a way to change the username on Tryhackme?
@sacred matrix in the future this will be possible on the site. Right now , you need to contact support and ask them nicely 🙂
sacred matrix
Thanks @golden crag for letting me know... I'll surely try that one!
golden crag
It's support@tryhackme.com for the email adres
sacred matrix
once again thanks @golden crag
cunning echo
While configuration to OpenVpn I can't connect please help
All TAP-windows adapters on this system are currently in use
eager fulcrum
@cunning echo please check the pins
cunning echo
@eager fulcrum ??
cunning echo
@eager fulcrum thanks got it...
cunning echo
How to check my MACHINE_IP for that room
After deployed it's taking too much time to show IP address
eager fulcrum
It takes a minute
You must wait that minute or two after clicking deploy
A machine has to boot.
eager fulcrum
The VPN does not affect you deploying VMs in rooms.
But your VPN should not be reconnecting constantly.
cunning echo
Just got load up thanks
sweet grove
In the Throwback network youre tasked to scan the THROWBACK-MAIL and identify the Apache Version. When you do an nmap scan it shows that the machine is not a linux machine and it is running Microsoft IIS httpd 10.0
cursive arrow
Im not able to load up certain websites from rooms, anyone have this issue before? iv tried redownloading vpn config file, and changing browsers but still aint workin. I can also connect to 10.10.10.10 just fine
eager fulcrum
Not all VMs run webservers, what rooms?
cursive arrow
yea it seems like the request goes through fine and i can ping the machine, but the page is just all white
eager fulcrum
Proxy running?
cursive arrow
im just on system proxy settings, should i be on something else?
this is the website
eager fulcrum
It looks like all the sites are constantly loading, I'd check your VPN and maybe try a different server or a regeneration
cursive arrow
Tried that and had no luck, the built in machine seems to work fine though so I can use that. Am curious as to what it is though
candid lily
Hi, I have a question in regards to the new OWASP Juice Shop that was implemented today.
Not sure what it is, but there is no question in regards to the submission.
Even if I hit submit it requires an answer, but there's no question in the first place?
eager fulcrum
Which task?
eager fulcrum
What's the error?
I'd assume that's the flag you're given when you log in as an admin, within Juice Shop
crystal osprey
You will need to refresh or go to the home page if it doesn't display the flag automatically
candid lily
@crystal osprey ty!
neat swift
Authentication failure
@naive dust I'm getting the same error -- any tips?
Disregard -- I just restarted it a few times and it works now. Not sure what the issue was.
wide furnace
hi, i think i'm having some problem with the platform, i just got 8 day streak, but i still haven't received the 7 day streak badge.
hi, i think i'm having some problem with the platform, i just got 8 day streak, but i still haven't received the 7 day streak badge.
@wide furnace Sorry if I'm on the wrong channel, I'm new, I'd appreciate your help
spring wing
Can anyone explain why I have uncompleted courses that I've already completed? I also lost 3% of course progress. It's not a good day! what happened?
mint nest
i got it
open hull
If possible to VNC into the machine. Besides using The browser client. It's good and all, but sort of a nightmare when using a tablet.
open hull
Hmm. I'm guessing they're using tiger VNC for it so I guess I'll just have to do some digging. Not a bad thing though. It's always good to learn by exploring.
eager fulcrum
It used to be guacamole. I'm not certain that it still is, but it might be.
See which services are running
open hull
Also what's the difference between the Kali linux machine and the tryhackme attack box machine?
Best I can tell the attack box is the non-sub one
woeful folio
Someone please help me to recharge one month subscription of tryhackme . I try all the payment method and non of them work.
I am from India
bronze vale
I answered you in #544951750801752079
You may have to email support
support@tryhackme.comalso this chat is for ideas not support 😄
@bronze vale
oak harness
Hi, I bought subscription for Throwback network, unable to download VPN configuration
bronze vale
@deep trellis
naive dust
I'm trying to log in through SSH in the learn linux room I'm using windows . I'm connected tot the Tryhackme network but I get the notice network timed out
bronze vale
SokolXP, Skidy or Ashu will have to help with that, they should be with you soon
I'm trying to log in through SSH in the learn linux room I'm using windows . I'm connected tot the Tryhackme network but I get the notice network timed out
@naive dust what are you using to SSH
naive dust
putty
bronze vale
Can you screenshot your putty screen please
naive dust
@bronze vale
oak harness
When i try to download vpn configuration i am getting this
@here Who from support is available?
bitter rivet
LOL
strange nexus
😦
tribal ferry
tardy citrus
Ping!!!!!!!!!!
fallen juniper
bitter rivet
big rip
deft fractal
?
vast chasm
vernal ruin
👀
tribal ferry
civic dragon
👀
fossil apex
-,-
unborn summit
👀
wintry trellis
gaunt thorn
hi
odd dragon
arctic kettle
💯
strange nexus
that's a good trick tho
graceful garden
Hahaha
lone quail
welp he will be removed soon 😄
bronze fable
nice
naive dust
:pingSock:
dusky grove
😂
novel glacier
👀
naive dust
Hi
radiant token
novel glacier
RIP
lyric gulch
radiant delta
You just gathered everyon here. lol
tired rampart
vast scroll
hello team
errant basalt
left gorge
BRUHHH
naive dust
Damn we need slow mode here
prisma quiver
tribal ferry
welp he will be removed soon 😄
@lone quail removing the owner?
amber kernel
rotund widget
naive dust
radiant delta
PLEASE be CAREFUL when quoting others who have used mentions
cyan locust
Who pinged me?
tribal ferry
Skidy owns the place lol
arctic kettle
😆
vernal ruin
xD the spam
wintry kettle
haha
cerulean mist
Skidy owns the place lol
@tribal ferry yes
odd dragon
rancid nymph
safe crypt
torn idol
Is the browser client image static (like a live cd) or persistent?
eager yew
naive dust
you turned tech-support into general chat Clap
toxic plaza
pinged everybody
cerulean mist
LOL
tribal ferry
naive dust
now that's what i call a privesc
amber kernel
Сдфз
lone quail
was a joke haha @tribal ferry haha
amber kernel
Clap
cerulean mist
HE ACCIDENTALLY PINGED HERE
naive dust
lol @eager yew
cerulean mist
ROFL
heady hull
nice
dusk dirge
arctic kettle
cerulean mist
good trick
near turtle
frail merlin
sakin lan
amber kernel
HOW
eager yew
median otter
civic vale
he hacked the system, we need to give him a role
vernal ruin
So that means members can tag @here
unborn summit
no
amber kernel
@here
slate terrace
lone quail
@vernal ruin nope
vernal ruin
vernal ruin
Then what just happened
left gorge
karmic flicker
Oh my god he played the system
vernal ruin
This is a freaking madhouse
errant basalt
@vernal ruin no, admin quoted member who tried to tag
shut mica
why ping man
errant basalt
because the admin quoted
pearl heath
its 2 am for me way to early
karmic flicker
Privesc happened
errant basalt
the tag worked
charred shuttle
was i summoned here ?
shut mica
😠
vernal ruin
@vernal ruin no, admin quoted member who tried to tag
@errant basalt ah xD
eager yew
jagged raft
when skidy quoted it worked
novel glacier
Then what just happened
@vernal ruin he replied back using here LOL
vast scroll
Then what just happened
@vernal ruin a mod quoted a member saying @here
fossil apex
owner > members
vernal ruin
median otter
amber kernel
he actually find a hole in a chat
cerulean mist
@everyone @deep trellis can you please qoute this message
radiant delta
Someone isn't able to download their VPN config ... that's what happened
arctic kettle
200 IQ Privesc
sand tapir
👀
eager yew
@naive dust so like just random shit now??? LOL
naive dust
Guys stop flooding the tech-support chat, it was a simple ping. 🙂
gloomy oyster
hello yo computa has a virus
feral dock
stray panther
@everyone @deep trellis can you please qoute this message
@cerulean mist nop bad boy
jagged raft
@everyone @deep trellis can you please qoute this message
@cerulean mist nice try
naive dust
@naive dust so like just random shit now??? LOL
@eager yew I think burning croissants perfectly represent this situation 😄
formal laurel
pulsar pier
who the hell pinged me just now?
radiant delta
Why is every server member tech support 🤨
naive dust
someone privesced mod
oak harness
@deep trellis I sent you DM
radiant delta
who the hell pinged me just now?
@pulsar pier someone who can't download their VPN config
novel glacier
XD
sleek terrace
who pinged
gloomy oyster
works best with @everyone
mortal vortex
who summoned me
arctic matrix
🏓
mortal vortex
oh crud
radiant delta
Why are all members tech support. I thought this channel is for the officials/staff only. lol
pulsar pier
why the hell did someone pinged me again 
radiant delta
who summoned me
@mortal vortex someone who can't download their VPN config
gloomy oyster
hello ur computer has a virus
gloomy oyster
@deep trellis type https://@everyone@getpinged.lol
agile dew
mortal vortex
I need that emoji in my life omg
eager yew
https://@everyone@getpinged.lol
fickle ice
What the hell?
signal rune
https://@everyone@getpinged.lol
radiant delta
STOP!
fickle ice
Did someone like hack this server or something
signal rune
it doesnt even work
outer matrix
O_e did i get pinged....looks like i showed up at a bad time....
fickle ice
I was spammed here
oak harness
Well i need support please
pulsar pier
dont ping skidy unless u have something important he is busy
naive dust
busy @everyoneing
eager yew
@oak harness
pulsar pier
and pls go #general to chit chat here is for #site-support
fickle rover
@naive dust I remember Stallman quoting something like that meme
pulsar pier
hai sinfulz
upper glade
It was an accidental @here due to an admin quoting someone that did @here, that's all.
pulsar pier
someone just pinged everyone
warm spear
I'm watching
outer reef
RIP
pulsar pier
not accidentally
outer reef
LOL
vocal meadow
Ah 😛
toxic plaza
skidy replied to a person who did @here
oak harness
It was me 😅
toxic plaza
outer reef
Thanks gang, I needed this today
eager yew
stop using @here
naive dust
sokolXP big brain high iq discord 0day privesc
rare roost
Hmm I still don't know what we can get from migrating process
warm spear
it's okay, I can mute
oak harness
sokolXP big brain high iq discord 0day privesc
@naive dust Challenge accepted
warm spear
stop using
@here
@eager yew hey! sorry for changing your name, I'm on mobile. someone will unmute you very soon (I said an hour since I understand the confusion of being pinged) ✨ :)
stone roost
frank tapir
oak harness
I hope someone will help me 😫
naive dust
what was your question again? (and please don't ping here)
flint hawk
Why was I called here?
oak harness
what was your question again? (and please don't ping here)
@naive dust Unable to download vpn configuration for Throwback Network
naive dust
@flint hawk somebody pinged everybody but it's over now
bronze vale
SokolXP I did reply
I’ll@ping Ashu this time but please be patient
@vapid dawn Throwback issue here, unable to download VPN Config
shadow jasper
I was summoned from the depths of the sea because of the ping
latent kindle
damn
vapid dawn
If you send me the 3rd octet of the network you're on, I'll take a look
R.e. whoever is having an issue with the throwback VPN config download
bronze vale
Thank you Ashu ❤️
@oak harness this is for you ^
upper glade
@oak harness You can find the 3rd octet of your network by going to the room (https://tryhackme.com/room/throwback) and looking at the IP's shown in the overview.
rare roost
It says I will have 20% discount if I'm subscribing as a Student
Hmm I'm 16 and is a High School Student
Am I qualified? ;p
oh ye I need edu email
bronze vale
!docs student
sharp bisonBOT
TryHackMe
warm spear
hey everyone, Skidy accidentally pinged @ here earlier. any more spam or mentions will result in a 1 hour mute :)
deep trellis
Oops, sorry about that guys.
Tried few times already
@oak harness on the network map in the throwback room, what IP address do you see?
bronze vale
hey everyone, Skidy accidentally pinged @ here earlier. any more spam or mentions will result in a 1 hour mute :)
@obtuse mason this is what happened, it was an accident dw :/
deep trellis
Thank you @deep trellis, Ashu is helping me
@oak harness ok:)
obtuse mason
lol.. nah, I am not mad king, so i don't get salty about pings
rare roost
!docs student
@bronze vale What about changing the email to .edu email? I created my account with regular Gmail Account
visual warren
Hey, I just connected this morning and saw that in my complete beginner paths, those 3 rooms got reset for no reason ... :/
What am I supposed to do to get them back ?
When I go in "my rooms" i can clearly see that I've already completed the OWASP per exemple ^^
Oh, they have been updated
deep trellis
Thank you @deep trellis, Ashu is helping me
@oak harness Did you get it fixed?
wind wedge
@visual warren That juice shop is an updated version that came out yesterday
oak harness
@deep trellis still not working
deep trellis
Yup, give me 2 more minutes.
naive dust
I'm trying to log in through SSH in the learn linux room I'm using windows . I'm connected tot the Tryhackme network but I get the notice network timed out I'm using putty toconnect through ssh
bronze vale
Could you show me your PUTTy screen please
naive dust
naive dust
bronze vale
Have you regenerated your configuration file?
naive dust
no how do i do that?
bronze vale
Go to https://tryhackme.com/access and there should be a button that will regenerate it. Then, redownload the file and open it in openvpn. Make sure you're keeping openvpn open.
naive dust
Also are you sure you're connecting to the right Room IP?
it should be the ip address at the top of the Learn Linux room
bronze vale
Are you able to ping that, smack?
bronze vale
You're probably not connected properly
Let me check
Yup, it works
It's your VPN then.
naive dust
it works now
bronze vale
Okie
naive dust
thanks for the help
bronze vale
How do you know it isn't working? Any errors?
nocturne ferry
no errors; connection gets established but cant ping anything
bronze vale
are you able to view http://10.10.10.10
bronze vale
I'm sorry?
nocturne ferry
i see the flag at 10.10.10.10
bronze vale
The VPN will not mess with your internet connection
Are you using the kali VPN manager?
nocturne ferry
it was working lastnight via vpn manager :/
bronze vale
It messes with your connection
sharp bisonBOT
TryHackMe
bronze vale
No, unless you're using windows
You can background the process but it may cause unintentional issues
sudo openvpn /path/to/file &
nocturne ferry
cheers
bronze vale
Just be aware that you may have to kill the tun0 process when logging off or booting up
nocturne ferry
ok
thank you
ah.. interestingly
restarting my vm, made the kali network manager vpn thing work
bronze vale
don't use it, it will still cause issues.
nocturne ferry
ok
if i run openvpn from terminal with & sign on the end, how can i kill the process?
golden crag
i never use the & sign, i just run it in seperate terminal. but im guessing you can kill the process with "sudo killall openvpn"
bronze vale
sudo pkill openvpn
sudo killall openvpn
That question was google-able ;)
naive dust
tbh I use openvpn3
Which runs it in the background fine (without &)
but it has a little more involvement to get working than openvpn
naive dust
How'd I reboot THM VMs
edgy moon
@naive dust if i correctly understood your question, by stop-it, and deploy again
cunning root
: )
restive kindle
ok. I MAY be very dumb and also blind. BUT. When i go to the access page and click "Download My Configuration File" i get redirected to "https://tryhackme.com/404". HELP
toxic python
@deep trellis I think this is a you thing
vapid dawn
regenerate your config file and wait for 10s and it should work 🙂
naive dust
yea but that changes ip which is inconvient \