#site-support
1 messages ยท Page 193 of 1
@vernal ruin i've tried it but it showed nothing
@viral iron Shows nothing ?
What do you mean
i am prompted for password for shiba1@ip and then it says permission denied
@mint flint are you doing learnlinux?
In attackbox ?
@haughty crest yep
Kinda weird ๐ค
Did you check the ip of the machine you deployed
ya and i have been connected to openvpn and everything else is fine
it says permission denied
(publickey, password)
@haughty crest
Idk then maybe someone else can help you with it
What IP are you using @mint flint
of the attackbox
You are using the wrong ip. Use the ip of machine you deployed other than attackbox.
can anyone help ?
Which room @mint flint ?
learn linux
You are using the wrong ip. Use the ip of machine you deployed other than attackbox.
^
@placid mango ok thnx ๐
Worked?
attackbox expired
first i have to deploy a machine?
And than i have to start attackbox?
Start attackbox, start learn linux and wait 4-5 mins and then type learn linux room ip on attackbox terminal to ssh.
@placid mango ๐
@vernal ruin it still the same i canโt access the openVPN
@viral iron Access the openvpn, or can't download the config ?
You said you couldn't download the config
Can you explain what do you mean by you can't "access" openvpn ?
So, you cannot download the vpn config files right?
Hi, I am working on the Blue box. and I am not getting a meterpreter session. IS restarted the box and try but it's not working kindly help me.
@verbal trout try to downgrade to msf 5
@verbal trout PRETTY sure it even mentions in the room itself that you might have to restart the box + exploit
if it should build incorrectly
@naive dust why its not working on msf6. can you please tell me.
MSF6 doesn't work
@bronze vale @verbal trout
then why is that the workaround unless he's just using his local machine on an openvpn token it shouldn't matter right?
downgrade to msf5
Ricky that has no files?
it's the link you posted its in the pinned messages
I had no problem with Blue but used the kali virtual box u get with Pro
but i guess if these guys are saying it's due to the MS version i guess that's it?
@naive dust Thanks after downgrade its work..
nice
I am facing issues with copy paste with my access machines
ctrl+shift+v is not working as it was in past
and this dual screen option kills me.. can i cancel this dual screen option ??
You need to allow access for you to be able to copy and paste
There is the access machines tab which you can have the attack box in a separate tab
@rigid bronze The little minus button at the bottom of the split screen
My username has a typo. Can I change it?
email support@tryhackme.com and then wait patiently as only 2 people monitor that email and there are lots of emails @mighty thorn
what should i do here, i am not connected to the server
Hey!
hello
Before we continue have you tried terminating a redeploying the machine
let me check but i guess i did
Does this happen on both the VMs or just the one?
Make sure to terminate all machines and deploy whichever one you need
it is connected now
Awesome!
thank you 
Is there a reset option for the rooms if I wanted to start a series over?
@wind wedge Thanks much! Happy hacking!
What time zone is the clock for THM? Specifically the clock for the streak counter? I was a couple hours late getting into my room yesterday and lost my streak... no biggie, but I want to avoid that in the future. Is it GMT? Thanks!
Itโs a 24 hour timer independent of clocks
Itโs 24 hours after your last question answered ^
Awesome, thank you!
hi guys just purchased premium, how do i conect from browser machine to the room? in this case is metasploit room
Deploy the machine from the room, use openvpn to connect your machine to connect to THM Network @royal marsh
!vpn
thanks
@royal marsh The browser machine does not require the VPN
You don't connect to the room.
You deploy the machine, then you hack your way in to it.
i have this discord account linked in to my tryhackme account. im going to use my other discord account so can i link it my other discord account or can someone help me about it
A moderator needs to remove the token from the other account so you can add it to your new account
thx for help
is the nmap server down or anything?, i am getting "hosts seems down" error multiple times
yeah i am connected to it
!vpnscript
i will try this thank you
I'm in 125 rooms, I've completed 107, but I only have 6 rooms left when i filter completed in my rooms. Is this based on rooms I have been in and possibly not completed or how does this makes sense?
I think this has been raised before, and I don't think we've ever had an answer
You may have to accept it as "magic"
You deploy the machine, then you hack your way in to it.
@eager fulcrum ye thats it thanks
I think this is more of a #room-help issue? Correct me if I'm wrong
oh i thought it was an issue on the server or something like that, i will ask there then. Thx
nope, i tried another payload and it show me the same internal error @bronze vale , can it be some kind of issue on the server? just guessing
The machines arenโt connected to TryHackMe
If itโs an internal error itโs on the VM not on TryHackMe
Check a writeup or wait for a response I havenโt completed the room :p
i will do that then thx anyways
msfdb init is telling me to run as a non root user
i create a different user and it says
Missing requirement: PostgreSQL does not appear to be installed or 'pg_ctl' is not in the environment path
Missing requirement: PostgreSQL does not appear to be installed or 'initdb' is not in the environment path
why does metasploit always give me issues
If you're using metasploit 6, last I checked it's buggy and isn't as stable as 5. Otherwise I know PostgreSQL was giving me troubles on my Kali box, Kali linux requires you to set up PostgreSQL before running metasploit. Do you see a listening flag on port 5432 if you run "ss -ant" in the command line?
https://www.kali.org/docs/tools/starting-metasploit-framework-in-kali/
Official documentation of Kali Linux, an Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments.
Hello, I am trying to use TryHackMe rooms from a DigitalOcean Ubuntu VPS
I try to ping any of the machines after I connect to the VPN using openvpn and I get this
PING 10.10.117.54 (10.10.117.54) 56(84) bytes of data.
From 10.10.0.5 icmp_seq=1 Destination Host Unreachable
From 10.10.0.5 icmp_seq=2 Destination Host Unreachable
From 10.10.0.5 icmp_seq=3 Destination Host Unreachable
From 10.10.0.5 icmp_seq=4 Destination Host Unreachable```
I can see it successfully connected to the VPN
and I can use the same file from my local bash (laptop) and I can ping normally and it works
this is the output for the openvpn tryhackme troubleshooting script
_____ _ _ _ __ __
|_ _| __ _ _| | | | __ _ ___| | _| \/ | ___
| || '__| | | | |_| |/ _` |/ __| |/ / |\/| |/ _ \
| || | | |_| | _ | (_| | (__| <| | | | __/
|_||_| \__, |_| |_|\__,_|\___|_|\_\_| |_|\___|
|___/
@MuirlandOracle
[-] Config not found in current directory
Please enter the path to your config: /root/pentesting/tryhackme/ozzy1717.ovpn
[+] Config Located successfully
[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum```
any ides what could be happening? is using Cloud VPS allowed?
Hi, I was hoping someone could offer some assistance. I just started the Linux Challenges but am having issues with the box. I'm connecting using open VPN from my KaliVM and haven't had any issues with any of the other boxes. However, if I do end up connecting I get to type about one command (ls -la) and everything in that terminal freezes. I can open a new terminal and ping the IP fine. Is this to be expected in this module or is something just not right?
!vpnscript
Thanks I'll check it out. I did end up running a new ssh tunnel from a new terminal and seems better...just slow, probably just me...
@violet vale I had the same issues with the Linux Challenges VM, I generated a new connection script for a different region and haven't had those issues anymore. Still slow when connecting but it doesn't freeze any.
@random creek, thank you!
I cannot get a stable RDP connection to the Blaster room. Coming from US-West-VIP-1, 25mbps via the VPN. I keep getting a 'network disconnect' message every 2-3 minutes.
Seems to be resolved now...
I hate metasploit alot
it doesnt ever work
so instead of getting to ms by msfdb init
i went into the tools that come with THM's kali and got into msf that way
low and behold I get another error
postgresql selected, no connection
this happened a couple months ago where I couldnt connect to the data base
@cyan kestrel did you start the postgresql database before starting the msf?
Hey can somebody remind me how to find my LOCALIP on tryhackme? Edit: nvm i found it sorry i was being lazy and didnt really search for it
i want help regarding verifivation
can anyone help me
Verification in discord?
can any one help me
am currently in owasp top10 room
when am opening the machine in my browser its showing like this , eventho am conneted to the vpn and am able to ping the machine also
#room-help please. Also, when room is deployed try to wait 3-5 mins to load it.
@haughty crest yes bot is showing "I'm sorry but I couldn't find the specified token!"
Just small question to Internal room:
Is it supposed to have incorrect domain names?
The service on the machine uses internal.thm as domain name but cannot resolve it so some things do look very strange.
(Since the roleplay was kinda serious, I'm not sure if this is intended or not :) )
You have to add internal.thm on hosts file for it to work.
Alright thanks. :)
@haughty crest yes bot is showing "I'm sorry but I couldn't find the specified token!"
@dark valve no idea why it doesn't work
Yeah try after sometime
If I already have an account with a personal email how can I get the student discount, it doesn't give it to me even when I switch the email on my account
is anyone using hashcat on the THM kali box? or are you all doing that on another machine
Don't use --force
Hi, i created a script to generate reverse shells and put the THM virtual IP into it. But when we use multiple vpn connections at the same time then the ip sometimes is assigned to tun0 and sometimes to tun1. how can i automate the process of finding the right ip
For what its worth, I was able to get hashcat working in the Kali vm using the steps here https://security.stackexchange.com/questions/147397/hashcat-with-kali-2-in-a-vm. Went ahead and put it on my main machine anyways since I probably wont want to do this every time I need to use it
Is this where is would ask how to get the student discount i googled it and used my school email (verified the email) but i live in Perth so maybe the email doesn't count somehow.
!docs student
@naive dust
thanks ๐
Banned. (Deleted the message)
l sent e-mail to support@tryhackme.com l cannot get respond. I am waiting for 4 days to change my id in thm
There's only 2 people managing the emails, you have to be patient
2 people trying to manage 205k? pls get sum support there ๐ฆ
You can say that in feedback.
things aren't always black and white. I'm sure Skidy and Ashu wish they could bring on someone full time for support, but cloud is expensive. I'm sure they spend nearly my monthly salary in bills
Can someone help me with OpenVPN troubleshooting?
!vpnscript
I get .a OpenSSL: error:0909006C:PEM routines:get_name:no start line.
did
twice
reboot
update && upgrade
just reboot host system, try vpn through host OS. Same error
Tried differente SSL versions
fixed ๐
it has to do with the EU-Regular-2 Server
Hi, i did some machines and it marked as finished but on the webpage I see the machine as not solved and I don't get the badge also, this is happeneds to Jenkins, blue etc. Can someone tell me why this happeneds
Iโm not a pro or anything but whatโs wrong with your OpenVPN @naive dust
@heady mountain It was fixed :)
Sorry, Didnโt see
Hey, I struggle with OWASP Juice Shop, with XSS flags, to be precise. Even though I succeeded in doing XSS, I received no flag whatsoever. Could someone help me out?
That is task 7, to be precise
I also restarted attackbox and the machine itself, but to no avail
Follow the exact stuff in the hints
all right, seems like I've been using wrong quotation marks, thank you!
one more thing - I fail to get to the /score-board/ site - could somebody help me?
hyy! i'm facing an enormous issues. when i run an exploit, msf told me that a shell have been created, but i cannot interact with it (even by using CTRL+Z -> sessions x). i'm trying to know if someone have dealed with the same issues
You tried sessions on its own right?
what do you mean ?
i tryed to use the virtual machine provided on rooms, and its seems to do not work either
hyy! i'm facing an enormous issues. when i run an exploit, msf told me that a shell have been created, but i cannot interact with it (even by using CTRL+Z -> sessions x). i'm trying to know if someone have dealed with the same issues
@edgy moon Can you show us?
how can i download nmap?
Hi peeps
Just signed up
Having some trouble with OpenVPN not connecting on my end
Windows?
Regenerate your file please
Make sure to press download again
If that doesn't work, switch servers and try again
hi, when im doing a ctf how can i copy something (ctrl +c ) and paste it on browser? thanks and sorry for stupid question
hi
does somebody know's how to connect a vpn or ovh trought hotspot to xbox?
free attackbox is only available to 1h day?
thanks
hello.. trying to get access to Kali box but the public ip is giving not-a-number error...
suggestions?
trying the ol' turn it off and on again isn't working lol ๐
got it sorted
After running this commandsudo openvpn --mktun --dev tun0 --user kali --group kali
I got this message when I ran the troubleshooting script
Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum
I'm not sure what the issue is.
when I try to connect to the deployed vm, I get this:
kali@kali:~/Downloads$ sudo openvpn Rvfx06.ovpn
Mon Oct 12 17:17:16 2020 OpenVPN 2.4.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 21 2020
Mon Oct 12 17:17:16 2020 library versions: OpenSSL 1.1.1g 21 Apr 2020, LZO 2.10
Mon Oct 12 17:17:16 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Mon Oct 12 17:17:16 2020 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Mon Oct 12 17:17:16 2020 Cannot load inline certificate file
Mon Oct 12 17:17:16 2020 Exiting due to fatal error
As you can see, I'm running from a kali vm
Any ideas would be appreciated
Regenerate your cert. Ditch those weird extra args.
I've tried that but I'll do it again.
the weird extra args were to setup a tunnel interface. the troubleshooting script was complaining that I didn't have one
same results
kali@kali:~/Downloads$ sudo openvpn Rvfx06.ovpn
Mon Oct 12 17:17:16 2020 OpenVPN 2.4.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 21 2020
Mon Oct 12 17:17:16 2020 library versions: OpenSSL 1.1.1g 21 Apr 2020, LZO 2.10
Mon Oct 12 17:17:16 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Mon Oct 12 17:17:16 2020 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Mon Oct 12 17:17:16 2020 Cannot load inline certificate file
Mon Oct 12 17:17:16 2020 Exiting due to fatal error
the weird extra args were to setup a tunnel interface. the troubleshooting script was complaining that I didn't have one
@sly junco it automatically does it
This is what I was getting before I setup the tun0 interface.
I interpreted what I see now as "progress"
but that's just my perspective
the result when I try to connect is the same as it was before though
It's just daying your not connected
yes.
even tried with the windows host and that didn't work either
same openssl errors
anyone else keep getting booted by VMs?
im on polobox.. and ssh connection keeps closing
my box is kali 2020.3 if that helps anyone looking at my issue
I'm 12minutes out from my vm expiring.
You can redeploy
Hey I had finished the Linux Fundamentals room in the Complete Beginner Learning path and the room is still read as in I didn't finish anything
That fixed it
hey i connected to the vpn via my own machine, but im on a different subnet than the machine i deployed within my room. Did i not download the correct openvpn file for my region?
@waxen patio You're not on a different subnet
You're on the same network
Just a different second octet.
if that were the case shouldnt i be able to ping the machine ive deployed?
@eager fulcrum
got it, fixed my issue. Ty @eager fulcrum

Missing requirement: PostgreSQL does not appear to be installed or 'pg_ctl' is not in the environment path
Missing requirement: PostgreSQL does not appear to be installed or 'initdb' is not in the environment path
This is in TryHackMe's Metasploit Room. Using non root user to command msfdb init.
@zealous yoke this is being fixed right?
Indeedy. Only had the chance to figure out the root cause last time but thereโs a few instances of PostgreSQL and metasploit needs to be set to use the right one
Fix will be with the nikto one during the day tomorrow now that I know root causes and can get the time to fix ๐
So should i work on another room until later this week ? ๐
or am i a noob who needs to make this happen?
@wind sinew You don't really need the database
Ok i will finish it up!!
Thx @eager fulcrum !!
Wait i actually do to complete the task the room wants me to do. nmap the database via ip address and one with port and a couple other tasks ๐ฆ
Yeah but you don't ever use it
So its more just a "task" in the TryHackMes Metasploit room? Not necessarily a fundamental use in the workplace?
I am a noob and apologize for any question of uncertainty
I can't answer that one
its ok i cant either hahahaha
I hope you have a good day/night @eager fulcrum thx for your time!
hello any admins ava
I am a bit confused with the first lab and connecting to the vpn which I have dwon
You don't need an admin
what I am saying is I know the virtual ip and my actual ip are different
Obviously
Follow the steps detailed in the room. Ask specific and accurate questions if you get stuck.
but when I load up the virtual machine this is required in the lab , the actual machine does not load up exactly
that is what I am asking
Yes it does, I just loaded it up fine rn
but when I load up the virtual machine this is required in the lab , the actual machine does not load up exactly
@delicate silo Please be more specific
"load up"
What, exactly, are you doing?
ok so under task 1 intro : I have to deploy the machine that's given for this specific room so I can complete the tasks
Yep. So you clicked the button. You've then deployed the machine. Move on to the next task.
You won't see the machine. It'll tell you the IP to connect to
anyone here use kali linux? i ran into a problem while trying to install it
Correct when it tells you to @delicate silo
oh my b
ok I got it , I read it incorrectly
@naive dust wut
Hello Im trying to add the path of ifconfig but when i reopen the terminal the path keeps disappearing from that PATH variable , any help how can I permanently put the ifconfig path
@stone mountain answered you in #room-help .
if i unsubscribe do i keep the month?
Yea you will keep it until it expires
thx
So Iโm starting the tutorial and deployed the machine
But what IP am I supposed to copy into the Firefox browser
The IP of the machine or???
the ip of the machine you deployed in the task
I typed in and comes up with error
The IP of the machine or???
@drifting osprey under Active Machine Information
Not the IP of the attackbox
Where is active machine information ?
It shows up when you click the deploy button in the room
The attackbox and the machines that you deploy in rooms are seperate
Hi! uhm i managed to persuade my friend to join THM, but i realise that the message function in THM is not working. I typed his username, and my message, the system would prompt me to add a username.
OWASP juiceShop task 7, q2 for the persistent XSS, Iโve done it many, many times and no flag ever comes up. What do I need to do as clearly there is a bug on this question to get the flag?
thanks! tried that method just now and it didnt work, but now its working HAHA
thank you once again :D

Hey Guys... My network is not getting enabled... i tried with restarting the network services and restart of the kali machine but status remain same..
any other suggestion pls
what do i do here? i am using the browser and i am subscribed
hey, I have just started noticing, that I do not get any points, but I am completing tasks. I took some screenshots of it, can someone tell me if I was doing anything wrong? ๐
some rooms dont give points
I am getting issue at the time of connecting to vpn server
and the error is 'Cannot load inline certificate file'
how can i fix it ?
some rooms dont give points
@toxic python seriously? bc it has never happened to me before
i try both but end up getting same error again.
Yes some rooms don't give points.
@bronze vale phh fuck me it can't be real that I just haven't noticed it ๐
Are you downloading the file each time?
yes
@deep trellis Sorry for pinging you but @hearty karma is having the "cannot load inline certificate file" error. They have regenerated the configuration file and attempted to switch servers but it hasn't fixed it. Would you be able to provide some support please
The actual error is this
I cannot read that.
Now
We will have to either wait for Skidy to provide some support or someone else to provide wisdom. If it isn't working on other servers there's literally nothing I can do
I am waiting for support
@hearty karma Please regenerate and redownload your configuration file.
Thanks Skidy
Hi ! I have this issue on Brave browser when I launch the attack Machine
I'm on linux Ubuntu: 20.04.1 LTS
I'm currently trying to download firefox again to test on it but It will be good if this can be fix :)
Thanks !
If I didnโt immediately share a room that I completed to LinkedIn, can I go back and share it after some time has passed?
Can you try on chrome please @river sentinel
I will ! But I'm not big fan of Chrome unfortunately, just want to share you the issue.
Thanks !
I agree, I used Firefox for years, I'm trying to check if it works on it, otherwise I will give it chance to Chrome. Thanks for your recommandations and help
Hi ! I have this issue on Brave browser when I launch the attack Machine
I'm on linux Ubuntu: 20.04.1 LTSI'm currently trying to download firefox again to test on it but It will be good if this can be fix :)
Thanks !
@river sentinel Hey, can you try opening it full screen? Does it work for you then? It think its an iFrame issue
Hehe @barren birch reset all the things
@deep trellis i tried but not getting result
Also switching the servers
But end up with the same error
@barren birch would you please help me reset my progres
That didn't go well
But end up with the same error
@hearty karma Whats your THM username?
@barren birch would you please help me reset my progres
@naive dust Dare I ask how many rooms you've done...
I guess 73
Um. No way.
Those things need to be reset manually... ๐
Are you a subscriber?
Yes i am a sub
hello, I am having a time out issue when trying to access the VM for the Burp Suite room. Does it just take longer than 20 min to get up and running?
@deep trellis please tell me you have a big red "Reset all" button?...
Nah, it's something only the room creator, an admin, or myself can do. It's done on a per room basis from the front end though
Kinda hoping Skidy can script it quickly on the back end (and preferably give me a big red button ๐ฅบ)
Okay let me not burden you guys, but it is something that you have to work on
Might be handy in the future
Just drop my request, thanks anyways
Prexe
Perfect, thanks ๐
Oh thank you
Can I get a DM?
@analog sand ???
yes i'm trying to do the learn linux and i'm getting a permission denied whe running ./shiba2
Use #room-help
ok thank you
@deep trellis miniconda
is it only me thats having problems with openvpn?
Yes.
!vpnscript
Oh
Regenerate your certificate.
I was too quick
i already did today
Did it fix it
Have you tried any other servers?
why do you guess? ๐ค
why not just regular thanks? did i miss something ๐
give me dramaaaaaaaaaaaaaaaaaaaa
@ivory brook tell meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
๐ญ
you okay buddy? rough day?
im fine im just curious why you said "thanks, ig" instead of just "thanks" lol
i felt like it lol
sorry bud, thats about as much as i can offer you ๐
but what does it mean ๐
have you been wronged?
doth thou need a hug?
cuz I am Blob, and can give hugs
i never recieved a virtual hug ๐
and i also think that this isnt the right place to do it
Ignore him
i'm back, as i said yesterday, i cannot proprely open a shell on metasploit. when i run exploit, it doesn't show anything excepted :
sure
btw make sure you have set a payload
haha @toxic python, they're all my mans, with saints
guyssssssssssssssssssss i already told them this stopppppppppppppp @feral dock @bronze vale
no
At what point did you tell them to set a payload smh
they dont need to set the payload they have a shell already
My point still stands
no it doesnt lol
bruh

i am getting something from id
then you already have a shell
its just not a meterpreter, so you dont get a prompt
but its a shell, nonetheless
You can upgrade the shell to a meterpreter using: sessions -u <session_id>
so i need to run shell_to_meterpreter as wel as i want a "normal" shell?
seems weird @feral dock, take a look
You can upgrade the shell to a meterpreter using:
sessions -u <session_id>
@toxic python
if you want a meterpreter shell you can either upgrade like ma1ware said or upload a meterpreter payload
wow
@bronze vale i mean amsfvenommeterpreter payload, not the payload of the exploit he ran
Guys, please..
ok anyway we have way too many people answering this dude im leaving this to @feral dock byeeeeeeeeeeeee
thanks @toxic python (buccs are the best)
@deep trellis miniconda
@hearty karma Try regenerating/redownloading/reimporting again on EU-Regular-2
@deep trellis please tell me you have a big red "Reset all" button?...
@barren birch Sadly not, I need to add the functionality for users to reset their own progress. Coming soon:)

no problem haha, i dived into your "joke"
oh!
i got my meterpreter
thanks guys, i'm getting back to my box
Is somebody checking the emails? Im potentially a customer, but waiting 1 week without any reply is bad :/
There are only 2 people answering the emails
Only 2 people manage the support email
Please be a bit patient
damn it blob
hey guys im doing the YearofthePig room and ssh is closed this my 4th reset still closed any idea why?
!vpnscript
Try this
hmm ok thnx ill check it out
Hey lads!
I'm semi new to this whole cyber security concept, and was wondering if there is maybe some one who knows their stuff pretty well which could help me figure out a path to take.
If someone could help me with that, I would greatly appreciate it.
My dms are open.
@naive dust #infosec-general
?
This is the tech support channel. You're not asking for THM related tech support. @naive dust
im having trouble with my vpn connection... i keep getting
2020-10-13 17:27:13 [server] Inactivity timeout (--ping-restart), restarting
but im in the process of running nikto and i have a running ping on the machine im using since this has been happening
whenever i get that timeout, my ping begins to fail
64 bytes from 10.10.126.150: icmp_seq=43 ttl=61 time=80.7 ms
64 bytes from 10.10.126.150: icmp_seq=44 ttl=61 time=81.3 ms
64 bytes from 10.10.126.150: icmp_seq=45 ttl=61 time=81.8 ms
^C
--- 10.10.126.150 ping statistics ---
116 packets transmitted, 45 received, 61.2069% packet loss, time 116823ms
and nikto fails
- ERROR: Error limit (20) reached for host, giving up. Last error: opening stream: can't connect (timeout): Transport endpoint is not connected
- Scan terminated: 20 error(s) and 6 item(s) reported on remote host
- End Time: 2020-10-13 17:28:33 (GMT-4) (187 seconds)
- 1 host(s) tested
any idea whats goin on there?
maybe the message is misleading, but i dont feel like i should be timing out for inactivity
!vpnscript
[+] Stable internet connection
[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[+] Connectivity checks completed!
[+] You are connected to the TryHackMe Network
Your TryHackMe IP address is: 10.6.26.247
Happy Hacking!
Delete and regenerate
Yesterday I had a bottleneck in the metasploit room. Everything was solved ( i was finally able to connect postgresql via database to proceed the tasks) because i used the openvpn tryhackme has gratefully provided. Thank you @sharp bison
๐ฅณ
@toxic python is recreating the ovpn file something that i should do regularly?
im just curious as i have ovpn files that ive been using for years
No sometimes they break tho
ok ill give it a try
Is there a reason why I can't copy into / out of the AttackBox?
First time using it
I think they have two separate clipboards
seems to be stable with the regenerated ovpn file, thanks guys
I think they have two separate clipboards
@stone echo enable clipboard access in your browser
software cause connection abort? @cosmic pantherh-support
You're going to have to give a lot more information than that
i
m stuck at
Flag 3 is located where bob's bash history gets stored.
would u like to helP?
#room-help and check writeups first, or use #room-hints.
It's very much not a tech support question. @naive dust
@midnight furnace since its been a week, I'd recommend following up with a reply to your first email. As others have said, it's only 2 people running the support email (the same two people who dev the platform and handle all the other stuff)
Hey , I am trying to upload a vm but after uploading the VM it said to go to your-material to check the status , but there was a message , error converting VM , any help please
did you verify the requirements per the VM creation docs and AWS' docs?
Hello Guys
Should I increase the number of thread when I want to bruteforce hidden directory with gobuster? Or just use the default?
What do I do if my Kali VM is suddenly refusing my password
hmm I can log into the console but not the desktop
Your VM or the THM VM
@barren birch any success
What's your TryHackMe username?
@barren birch
so I want to subscribe with paypal only for 1 month but thats not an option, why ?
cause it isn't
Because of PayPal fees
Hey plix is this normal?
@abstract owl You have not satisfied the condition. This is a room issue. Please follow the instructions, and use the appropriate help chat. Google error messages first before asking. Do your research.
is that for me? i'd guess no
It doesn't seem related, and I tagged the person who asked a question after you. That kinda implies it's totally unrelated.
anyone using windows powershell to ssh into the kali vm?
it works
nice ill consider subscribing then
sorry but @eager fulcrum who's suppose to assist me here?
Everyone here is a volunteer
You have to be patient.
i am
Patience is asking and waiting.
@fading temple Idk try ctrl + mouse scroll up.
I uploaded a machine on THM and and it was all good until i saw how slow the webpage was. Is this a recourse problem?
On VirtualBox it runs no problem
If you're not a subscriber, VMs that you deploy get 512mb RAM generally
(Unless the admins have specifically increased the resources on a specific VM)
You don't share VMs so you don't have to worry about that
cant ssh cant ping the machine
@undone bay are you connected to the opnvpn?
Connect to the VPN.
๐
10.x.x.x are LAN IPs
Do i need sub?
@umbral thunder That will mean that VMs you deploy will deploy with more resources.
Damn ok
Error: Failed to read the 'localStorage' property from 'Window': Access is denied for this document.
at Module.readSetting (https://vnc.tryhackme.tech/app/webutil.js:150:9)
at Object.initSetting (https://vnc.tryhackme.tech/app/ui.js:726:27)
at Object.initSettings (https://vnc.tryhackme.tech/app/ui.js:144:12)
at Object.start (https://vnc.tryhackme.tech/app/ui.js:59:12)
at https://vnc.tryhackme.tech/app/ui.js:47:27```
When trying to use the splitscreen vnc mode
Same with machine window
Use a different browser, like Chrome
I am using Chrome
Then check your extensions.
Been using the same computer and browser for 23 days and this is the first time it pops up
I restarted the machine and it still happens
Omg its my stupid school board whos blocking the vnc cookies you have to be kidding me
Hi! Does anyone know what time zone the daily streak is based out of?
24 hours after the last question answered
No
I try upload material and i can't
??
0% lifetime
??
when selecting my file and clicking the upload button, it does not go above 0%
I left it a long time and nothing.
Hi, i'm new at the web and i'm trying to get started on vulnversity, but when I try to connect to the first quest machine, with opnvpn connected, the browser doesn't find the ip, what can I do?
Keep working through the tasks
Not all machines run a webserver, and of those that do not all of them run it on port 80
So you can't simply but an IP into your browser and expect a webpage
so, what I have to do to connect to the ip
Keep working through the tasks like I said
You have to hack your way into the machine.
ok thanks
@eager fulcrum Who do you think I should talk to?
Try clearing cookies
Tryhackme recommended me to talk to @zealous yoke
Try again using chrome
TryHackMe recommended to talk me ? O.o
Cancel upload, try again in a new browser @vagrant blade
I did try upload material in chrome, firefox and brave
@naive dust Im having same issue. Are you on a school managed computer
Ok
Welp im on a shitty chromebook from school so have to use chrome and it doesnt work even though it has been for the past 23 days
@deep trellis Given the education focus, I think this might be a fairly serious issue
Organisation managed chrome installs don't seem to work with the VNC
I've put this high up on my to-dos for this week. I'll look into why the AttackBox doesn't like to be in the split screen view (but works fine full screened).
The splitscreen isnt the issue
Its cause just yesterday my IT department forced all third-party cookies to be blocked. Hence the reason why it cant open it
Which bugs me because I like doing tryhackme in class lol
If I go to fullscreen it works. Just not the in page viewer or splitscreen because it doesnt use the direct URL
The splitscreen isnt the issue
If I go to fullscreen it works. Just not the in page viewer or splitscreen because it doesnt use the direct URL
That sounds like splitscreen is the issue?
Well I think its just related to Cookies beings blocked for in-browser VNC. When I go to full screen and using the actual URL it works fine
I,m unable to download the openvpn file, 404 not found
someone with the same problem?
Regenerate the file, wait 30s and press download again
I try it, but it,s not working
okey the problem was my patience
thanks
Regenerate the file, wait 30s and press download again
@bronze vale
Hello can someone help me with connection to the website ?
I can't connect my pc to the website ? Is it normal ?
Looks like their end
Hi guys, anyone can help me with an enterprise plan? Is there such a thing?
@clever oyster You're going to want to email the admins
Does anyone know about why tryhackme might block kali pings?
That doesn't provide more information
But some machines (Windows ones) do not respond to pings.
I mean it does it in the test environment.
If I ping it, it responds to that machine.
What
If I ping it (the deployed box) using a tryhackme machine, it'll respond. If I ping with my machine, it'll result in 100% packet loss.
you're sure you're on the vpn right?
why i can't connect to the vpn?
I don't know, why can't you connect to the VPN?
Yes Iโm on the vpn
i guess because iโm from egypt
@pearl barn yea itโs blocked in Egypt
@toxic python do u know any way to bypass it?
Use the in browser machine
Yo I'm having issues initializing the Metasploit db to be able to use it on the "Metasploit" room. It says I cant be root while using it but I only have root access
I'm using the in browser machine aswell
alright thanks ๐
Thereโs nothing I/we can do to help you since your country blocks it.
The in browser machine is your best bet
yea i know
Yo Iโm having issues initializing the Metasploit db to be able to use it on the โMetasploitโ room. It says I cant be root while using it but I only have root access
@barren birch i donโt remember who handles this but have at it
It should already be initialised for the in browser machine
Are you using the AttackBox or Kali in browser @spice scaffold ?
The kali machine I do belive
"Use a browser-based Kali machine to access our machines"
So I should get "postgresql selected, no connection" then aswell right?
When I issue the "db_status" command in metasploit
Does anybody use THC Hydra? The cracking tool
@wooden musk Just ask your question, most people here have used hydra
@barren birch I've now gotten to the part where the db is being used, however it's not connected to it any ideas?
Try the AttackBox
Sorry I'm new, what exactly do you mean by that?
Screenshot the desktop of the box you're using?
That's the AttackBox, so the DB should already be initialised
(I think CMN is fixing it rn)
Ah super, thanks for sticking around for me โค๏ธ
Ok I have a problem some people found my ip address after a google meet raid
i have two acc and when i want to verify with secound acc i cant
You can't verify two accounts, you'll have to get MuirlandOracle to remove your token so you can put it on this account
@naive dust ^^
You have to get MuirlandOracle to do it
I know the root cause/issue that keeps on breaking the db msf5
There's two postgresql services. One for msf6 and one for msf5 from when I compiled it, I've told metasploit to use the msf5 version in the configs but it just decides not too sometimes
Working on it as we speak (:
Hey @naive dust any Mod can do it, feel free to DM me with your previous Discord name, your THM username and the reason as to why you're switching accounts please (:
How can I use tryhackme discourd token?
You have to dm the bot with your token by doing !verify <token>
Which channel should I verify on?
You have to dm the bot
ok thanks
hi the attackbox have any folder with persitence? so i can save some files
No
@sharp bison is the point earn on KOTH games not added to users progress?
@cold idol, um, A) you just pinged the bot
Which won't answer ๐
B) No, it isn't
Can someone help me? I'm trying to buy VIP, but it says card declined, but all the information I put is correct and it has more then enough to pay for it, why is it declining?
h e l pp
It's most likely your bank, you'll have to tell them, it's most likely because of 'hack' in the name
I have a problem with my local WordPress site can anyone help?
Is this related to TryHackMe
I donโt think that counts
@barren birch Sorry for the ping again lmao, may I have your opinion
On?
On my situation i guess
The whole conversation is there itโs like 4 messages long haha
I googled for help but it did not solve my issue
Am I being pinged because I know how to fix it, or because you don't know if this is the right channel ๐
Second one 
I've ran into an issue in a room where it would seem the application doesn't appear to be installed, or found when searching apt. Would someone be able to provide some direction?
hi im trying to open putty but when i try connect to the server it comes up with fatal error connection tined out does anyone know why?
@violet vale You're probably not meant to run it on that machine then
I'm guessing Common Linux Privesc
In which case, msfvenom is a hacking tool
It's not going to be installed in target machines. You need to run it on your own machine
@eager fulcrum, that makes good sense. Thanks much, happy hacking!
hi, how i can have student price for vip ?
!docs student
thx man
if i don't have email address from my school, does accept proof of my school ?
I think you have to email support@tryhackme.com then
The emails can take a lil' while to come through (i.e. 10 minutes)
Do anyone know when THM add the options to upload Ubuntu 20.04 files for the room creation
hey, how do I become eligible for the student discount, and is that also worldwide?
I'm not quite sure in which case, probably best to contact your email provider @modest bone. The "Hack" part of an email might be caught in an automatic filter somewhere
@zealous yoke i'm sorry i missed that
@coral fog no worries I accidentally typed it out ahaha
thank you for help
@modest bone Email a copy of your student status i.e. student card and they can apply it for you
(:
@zealous yoke i try to change my email to my student mail address, but it is saying i already have an account or the email address is not valid, as i can't find any emails in my school box i don't think i have an account with that mail address. I think the system trips over that the email is a sub domain but not sure
That happens sometimes, if you email support@tryhackme.com from your student email with your TryHackMe username, they can apply it manually. It might take a day or two
Especially as it's the weekend, but that should have you sorted all a-okay ๐
i do need to pay first right?
I'm a student too, but we have no official document to prove this and no students emails, so what can I do
No, you don't need to subscribe first. You can email them and they will apply the discount, Once it's applied on your profile it will remain (:
You can then subscribe with the discount ๐
ah oke i will e-mail them thxx
๐
@forest pond Email the address with whatever proof of being a student you have and are comfortable doing so i.e. letter headed report, student I.D, etc. They'll ask if you need to provide anything extra and ofc with your THM username
If there's no proof, there's no discount.
Anyway
Do anyone know when THM add the options to upload Ubuntu 20.04 files for the room creation
When AWS supports it
I broke my vmware kali's networking by powering off at the wrong time
and now in the network indicator at the bottom right
it shows "device not managed"
some relevant info:
kali@kali:~$ ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 00:0c:29:27:63:31 brd ff:ff:ff:ff:ff:ff
any ideas how I can fix this?
tried restarting the vm and windows
how do I change the PROMPT in a pre-installed zsh macOSX terminal?
can anyone help me figure out why Kali (win10 DL) is giving me this
I installed everything that I know of installing
WSL2 enable and installed
^ (Also, it will be a good idea to research the error code)
Thank you, I searched it but not didn't have the same solution as most
You need to upload your vm's in OVA format
Requirements for importing a VM into AWS EC2.
Iโve see the .vmdk there before multiple times it seems to go and off in the upload page but it 100% is an error because aws will have no clue what to do with it
Do anyone know how to install the Linux-kernel-headers on docker
@sinful summit you just need to export it as an OVA
When exporting as ovf, change the extension to ova @sinful summit
yeah, you just need to change the file extension while exporting
Hey guys I uploaded my machine on tryhackme and it was not able to convert the Ubuntu machine
Is the Ubuntu version the problem
It is running 18.4
Please ping me when you answer
I am running kali on my virtual box and I have set the network as shuch
Adapter 1 - bridged network
Adapter 2 - nat network(my virtual network)
And the problem is that i can't get the ether0 inet address which I guess should be assigned by my router but I am able to the ether1 inet address wiz the nat network
Is it because I am using both nat network and bridged network at the same time or its something else
Please ping when u answer
And I am running it on virtual box and not on vm workstation
yo
what is the best VM on macos?
Well presuming you have no limitations kali Linux for thm
Hey guys I uploaded my machine on tryhackme and it was not able to convert the Ubuntu machine
@umbral thunder
Can anyone help ?
I actually meant more is the Virtualbox the best for macos?
Itโs not really related to tech-support @pallid finch
Hey guys, how can I enable copy/paste between the kali in the attachbox and my own pc when I need to key in answers? I'm kinda new, thanks
Enable it in your browser, it's a permission
hi guys I can't seem to access the webpage when I launch the server
What OS are you on
Ninja does ubuntu server come with terminal view only?
linux
When going to http://10.10.10.10 do you see your tun0 IP?
yes
Can you screenshot the page you initiated OpenVPN on
@umbral thunder By default, yes.
hi guys I can't seem to access the webpage when I launch the server
@fervent pulsar What server?
That doesn't narrow it down in the slightest
There's 249 public rooms, most of which have machines attached
Yes. And you can if you can access 10.10.10.10
I cannot access this ip that I launched
Http doesn't meant port 80, you can run a service on any port. Work through the tasks.
Enable it in your browser, it's a permission
@eager fulcrum Thanks! Enabled it through the browser.
hey guys doing overpass room rn
got a problem with ssh key
says load pubkey "id_rsa": invalid format
entering the password does nothing
tried using different text editors
and adding a new line below too
like John Hammond said in his video
#room-help and please don't ask in multiple channels like that. It's spammy and annoying.
hi the attackbox have any folder with persitence? so i can save some files
No.
Hi, does anyone know how to deal with 443 timeout error when trying to clone the alpine guild repo for lxd priv esc when in ssh or nc?
The room machines do not have internet access
Oh shit really
You can work around this yourself.
Yea ty
I'll let you think about how.
Yeah for some reason, tried all possible passwords (even no passwords) to ssh into shiba1 but its not accepting the password I'm advised to login with?
Make sure you're sshing into yhe correct VM
Needs to be the VM that you deployed with the green deploy button in Task 1 of the Learn Linux room.
Yeah so, I'
The IP shows up under active machine information.
Woops two secs hahaha
Yeah so I connected via VPN, connected via the attack box on the task and still not working?
And Im connected via the IP on the top right of the attack box
That's the IP of the attackbox
When I say connected I mean SSH
You need to deploy the VM in the room
I've got u now, is that attack box button at the very top possible to be removed? Might confuse a lot of people
The attackbox allows you to skip the VPN
You use the attackbox to SSH into the VM provided
It states around 3 times the specifics there
Yeah I get that, but in task 4 it just states 'linux' not the actual attack box? I get what u mean but I wasnt too sure
Thx anyways
Wondering if it's possible to use my own kali VM to connect to do the courses, is that possible or do you have to use the online VM?
I got a error last time I tried to look it up, like a broken link or something
@deep trellis this question seems to come up weirdly often with the free attackbox now, it might be worth clarifying this?
thought it got removed
Nope.
well thank you ๐
TIL AttackBox is free?
For one hour a day
I think for an hour a day or something?
With no internet access on it
James types too fasttttttt
Hacker fingers.
Mobile too
That's pretty cool. I ended up paying for the subscription anyway ๐
Iโm also on mobile
what is the diff rly behind attackbox vs just connecting VPN through your own kali VM ?
oh thought it was kali
It's ubuntu.
Huh?
was just wondering because the free trial u can only do VM 1's per day, is it the same if u connect your own VM. like will you not be able to get into VPN or something
or the attackbox 1s per day
No, there aren't limits on using your own VM
You still have to extend all VMs, whether you're a sub or not.
yeah I suppose that is effort, probably better off buying a subscription to save u more time or?
@deep trellis this question seems to come up weirdly often with the free attackbox now, it might be worth clarifying this?
@eager fulcrum Is it that people are getting confused with which IP to use?
Or they don't know that they can VPN instead
Or deploying the attackbox instead of the target machine
There is a new update coming that will make it a lot clearer.
We're going to AB test it first
Open to suggestions on making it even more clearer
Streamer/recorder mode to hide the IP address on the navbar?
Otherwise
very exciting
I'll add that option in.
I would change "to access machines" to "to access target machines", to differentiate it from the "attack machine".
I would change "to access machines" to "to access target machines", to differentiate it from the "attack machine".
@tawdry orbit Great idea, changed locally - thanks
Skidy, is that using 10.10.10.10 or just the idea?
Hello! having trouble accessing the target machine on this room https://tryhackme.com/room/postexploit. The credentials provided are not valid... anyone else with the same issue?
An online platform for learning and teaching cyber security, all through your browser.
Skidy, is that using 10.10.10.10 or just the idea?
@eager fulcrum I included that in a slideout "help" menu.
Hello! having trouble accessing the target machine on this room https://tryhackme.com/room/postexploit. The credentials provided are not valid... anyone else with the same issue?
@fluid ore Is this the one shown in task 2?
An online platform for learning and teaching cyber security, all through your browser.
#site-support message the image above here
