site-support

[lusty hazel]

I donno the issue why thm throws hits in me😐😐

[urban wraith]

Sorry I thought this is the last room

[woeful mango]

saji

[woeful mango]

did u use vpns ip?

also try refreshing the config and downloading it again from the access page

[lusty hazel]

Did see

I can attach smippets

No permission here

[brisk bough]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[brisk bough]

verify first my friend

click the link

[broken bear]

Please verify and post some screenshots. Seeing the config, commands and errors will be way more helpful than trying to describe them

[brisk bough]

https://media.discordapp.net/attachments/706677870235484290/921802280515301457/IMG_20211218_220250_102.jpg
https://media.discordapp.net/attachments/706677870235484290/921802295329583165/IMG_20211218_220254_515.jpg

here, while he verifies I posted that from him

Good luck hope it gets sorted out 🙂

[lusty hazel]

Thanks brother

[brisk bough]

Do verify though, click the link from the bot

[lusty hazel]

Okay brother

Once again thanks

I'm trying to add virtual box

And lemme me try on virtual box kali vm

[upper silo]

i'm on a macbook and struggling to understand how i'm meant to right-click in attackbox, no combination of buttons ever seems to work

[livid ermine]

anyone know how i can put files/photos in here?

I don't see the plus sign

[upper silo]

nevermind, handled

[urban wraith]

by verifying your account

[naive dust]

Hi guys

I just wanted to inform you that day 17 video link don't work on https://tryhackme.com/room/adventofcyber3

https://www.youtube.com/watch?v=RAgvdpvKJa

[plush bay]

that second link works for shadow

[naive dust]

Cette vidéo n'est plus disponible = this video is no longer available

[plush bay]

oh shadow found the error: https://www.youtube.com/watch?v=RAgvdpvKJa0 is the correct link

it is missing a 0

[livid ermine]

thanks

[scenic torrent]

Gave +1 Rep to @urban wraith

[plush bay]

@naive dust ⬆️ so if you want to see the video tehre it is

[naive dust]

ty ❤️

but should be good for the admin to patch this

[plush bay]

yeah sent a report in #room-bugs it will most likely be easier to notice in there and get it fixed

also makes shadow happy that they made a youtube playlist where they save all the videos to find them again at a later date... did not know there was going to be links from the room in the old tasks

[modest sonnet]

hello, so i connected tryhackme profile from android OpenVPN, i can access to the 10.10.10.10 everything is fine but deployed machine doesn't respond to curl/browser. Im sure i waited more than 10 mins and tried couple times, re-deployed etc. And when i port scan the target machine, it shows http & ssh is open, i can also ping it.

[median mulch]

hi guys, i have been having issued with my vpn daily and i have to run the sudo ip link... every time i open my vm... also im having a very hard loading the sql injection walthrough on try hack me... i have also switched vpn servers as well.. I have downloaded the openvpn troubleshooting script and that always checks out

here is the output from that

but here are the results when i ping the room i am tryikng to access

the attackbox works and has no issues, i just dont prefer to use the attackbox...

[astral hemlock]

Hello, Money was deducted from my debit card, but premium account is not unlocked. How to contact support?

[median mulch]

good luck with that man

[crystal marlin]

Well there is the possibility you can ping a target machine from the attackbox while you are not able to ping it from your local machine, so to determine to have vpn issues based on ping isn't very meaningful.

#feedback-and-ideas

[crystal marlin]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[median mulch]

anything else than just trying another server?

its just an everyday issue

the 10.10.10.10 always works and says im connected and the script that i run never shows issues either

[crystal marlin]

Trying another server for what, the ping issue?

[median mulch]

no i cant connect to the examples for the room

[crystal marlin]

What room is it

[median mulch]

sql injection in jr pentester

attackbox works just fine

its on my end

[crystal marlin]

How are you connecting to that machine?

[median mulch]

through the browser and typing the ip address as was insturcted but i first did sudo openvpn path to file

[crystal marlin]

Could you give me the IP and I try if it's even working for me? And what's the error you get?

[median mulch]

10.10.86.203

the page just doesnt fully load

in a perpetual loop it seems

it will show some aspects of that page, but im not able to submit anything to get an error response

which i can on the attackbox

[crystal marlin]

Did you set the mtu setting already?

[median mulch]

yup

first thing i do ha

[crystal marlin]

And clearing cache?

[median mulch]

i have not done that

[naive dust]

i have one question

i have a probem with king phisher

on kali linbux

i can't fix problem with connection

[median mulch]

same thing

[naive dust]

can somebody give commands to get start this true ?

[crystal marlin]

What you trying to achieve with that tool?

[fast estuary]

hi, I am not getting the email for reset my account

do you know if there's any issue?

[crystal marlin]

Mh, anything in the dev tools console when opening the target machines page? Like errors or so.

[crystal marlin]

Also check ip a s to make sure there is only a tun0 interface and not any extra like tun1, tun2 etc.

[median mulch]

yeah only one tun0

the page finally loaded

i guess its just not a good connection or something. but thats not doable to wait 5 mins for a page to load ha

[crystal marlin]

Well you could try to put the mtu to 900 and see if that makes any difference

[spark ledge]

Hey

The attackbox is not working

I launched it and it says failed to connect to server

Room vulnerability capstone

[pulsar sparrow]

@spark ledge i had that problem this morning, wait a few minutes and refresh the page

[spark ledge]

I just did and it’s working, thank you

[scenic torrent]

Gave +1 Rep to @pulsar sparrow

[grave dirge]

I found a bug on flag submission (by mistake)

can't share here bc it has flag of today's challenge 😅

I'll allow DMs from server members, so any mod can DM me

[broken bear]

@tawdry orbit @candid yacht gentlepersons, I believe this is an item for your perusal ^^

[grave dirge]

There's VOD too, think that might be helpful.

[grave dirge]

well Ill keep them open, mods feel free to DM me

I'm going to sleep :D gn

[errant forge]

Are THM account usernames hardcoded or is it possible to change?

[smoky mango]

IIRC TryHackMe names are hardcoded so it's best to be careful when choosing a name

[errant forge]

Thanks for the clarity!

[scenic torrent]

Gave +1 Rep to @smoky mango

[smoky mango]

All good, glad to help out! 🙂

[lusty hazel]

I did try in both vmware and virtual box..... Kali instances no use

Day before last day this issue began

My thm activities are stopped 😐😐 including AOC3 help me up please guys

[tidal rose]

Anyone else having their connections go in and out? I've tried a few different rooms and restarting the machines for them, but it's still happening. It'll be up for about a minute or so, then inaccessible for a minute or so. Makes doing rooms very difficult

[delicate drift]

Hello, I have been trying to add my friends on THM. When I recieve the email to accept a request, it goes to a thm 404 page and won't add them.
I also can't resend invites as it says the request has already been sent.
Does anyone here have experience with this?

[vale flicker]

Hello, I'm new on THM and I can't download my configuration file.ovpn, it's always redirecting me to the 404 page 😦

[crystal marlin]

#site-support message

[crystal marlin]

You on the attackbox or your own machine?

[tidal rose]

My own machine

Using openvpn to connect on Kali Linux

[crystal marlin]

It's a kali VM ?

[vale flicker]

Thx that solved my issue
• Change VPN server and try downloading again

[scenic torrent]

Gave +1 Rep to @crystal marlin

[tidal rose]

No

[crystal marlin]

If you do ip a s you only have a tun0 interface or any extra like tun1, tun2 etc. ?

[tidal rose]

I just have eth0, wlan0 and tun0

[crystal marlin]

Have you tried sudo ip link set dev tun0 mtu 1200 already to see if that solves your issue?

[tidal rose]

Just tried that. I'll see if it fixes it

[tidal rose]

@crystal marlin that seemed to have fixed the issue. I'm able to do my scans now. Thanks so much!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[late tangle]

Who do i need to contact if something went wrong with the streak freezes from the jr pentest path? I got both freezes (1 and 7 days) and i took a day off on 20.11 and yesterday and my streak is gone 😭

[crystal marlin]

#site-support message

[late tangle]

Thanks!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[grave dirge]

I'm back btw 😅

[naive dust]

can someone help me with the aspect ration in kali linux

i keep changing it to 1920 1080

but it gets set to default every time i restart the machine

[late widget]

is it just kali?

or other images too

[eager fulcrum]

This channel is for VPN and other technical questions related to TryHackMe

[naive dust]

dm?

and yes

just kali

[late widget]

of course

[maiden pumice]

guys i have solved a room yesterday but now i got zeroed on my streak

[naive dust]

#site-support message

[last crown]

Room: webosint (https://tryhackme.com/room/webosint)
Task 2: What country is listed for the registrant?
Namecheap's address is updated to ["Kalkofnsvegur 2","Reykjavik","Capital Region","101","IS"] from Panama. Its time to update the Question's answer as well!

[eager fulcrum]

#room-bugs

[naive dust]

how does one copy from windows vm over web gui? ctrl + shift + c doesn't work and clipboard on left side isn't available on windows vm

[wise harbor]

Hey, so for the last week or so I have been unable to SSH into the tryhackme machine in Any room, I have tried multiple machines, uninstalled reinstalled, followed every guide I could find online. Opened port 22 on my router, in my firewall, disabled my firewall, but I still get port 22 time-out. I am connected to the VPN and clarified I am connected correctly but I just cannot find a fix.

Anyone have any advice?

I done an Nmap -P22 and got this:

[eager fulcrum]

You able to load http://10.10.10.10 in your browser?

[wise harbor]

Yep, I get the flag for the connection

This is the error exactly:

[eager fulcrum]

And the image?

[wise harbor]

Yeah:

[eager fulcrum]

Tried changing VPN server?

[wise harbor]

Yeah, and redoing the configuration files.

[eager fulcrum]

It won't have anything to do with your router so you should not open 22 on your router

It's over the VPN so your router can't even see what you're doing.

[wise harbor]

ah ok, ill change that then.

Just tried changing the config file too all available to me that are close to my region and still nothing. so I guess my last go to is this:

[eager fulcrum]

what if you nc 10.10.10.10 22 and press enter?

[wise harbor]

This is all I got for awhile, I pressed enter again and got: Protocol mismatch.

nope left it for a long while this time and thats all it gives me.

[crystal marlin]

Did you check ip a s if you only have a tun0 interface and not any extra like tun1, tun2 etc?

[eager fulcrum]

That means that port 22 isn't filtered.

[finite summit]

anyone else have a spotty VPN connection? Wanted to check to see if it was just me before I tear my network apart

[wise harbor]

I just seem to have tun0 do I need to unfilter port 22? sorry im literally at the Nmap part of the complete beginner section so I am starting to get very lost!

[crystal marlin]

Have you tried sudo ip link set dev tun0 mtu 1200 and then check again if you can ssh into the machine? If it doesn't solve your issue just put it back to 1500. Also, what room have you tried to ssh into?

[crystal marlin]

What you mean by that, what's the issue you are facing?

[wise harbor]

didn't seem to work, and I am currently trying to get into further Nmap but I tried also getting into the linux lesson 2 room just to see if maybe it was a room I wasn't meant to be able to ssh into in the first place, but same issues.

[stoic night]

how come i can't download any openvpn config? i get 404'd

[edgy depot]

I have also just stated to get this after regenerating config

[crystal marlin]

So you tried to get into furhter nmap room right now? As iirc that machine isn't supposed to ssh into

So try with linux fund 2

[edgy depot]

Yes, also been having issues, tried to regen cert and now get 404 when try to download config.

[wise harbor]

I swear I did this before and it didn't work.. im just.. going to go and put my head under the sand xD Kudo's thank you!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

#site-support message

[stoic night]

thanks, relogging fixed it

[simple needle]

should i keep openvpn terminal open and use a new terminal to run commands

because once openvpn has started

no new command line appears

[plush bay]

yes or use the terminals option to open a new tab in it

sure you can also background the openvpn running process but doing so could be problematic as you can forget to close it down and then cause problems down the line

[finite summit]

@edgy depot Thank you for the reply. Mine connects but drops and reconnects frequently. Makes some of the commands return bad results.

[scenic torrent]

Gave +1 Rep to @edgy depot

[clear hedge]

Hey! I just missed my 84 day streak by a couple of minutes! Is there any way I can get it back? :/

[simple needle]

okay thanks

[scenic torrent]

Gave +1 Rep to @plush bay

[simple needle]

noted

[lament trout]

mail support

[clear hedge]

Just did that thanks, fingers crossed!

[scenic torrent]

Gave +1 Rep to @lament trout

[lament trout]

#site-support message

[normal marsh]

Hello everyone. I've been trying to get Kali installed on my Ubuntu laptop as a dual boot, but decided first to try it as a VM through virtual box. It was working fine for a day. But now when I load up Kali on virtualbox, the mouse will randomly stop working. Everything else works, but the mouse won't click. I press the host button (right Ctrl) and nothing happens. Even if I minimize out of the virtualbox, my mouse still won't respond. Once I shutdown virtualbox then everything is back to normal. I have a VB Kali on my Windows desktop and this doesn't happen. Any ideas on a fix to this or maybe a virtualbox replacement for Ubuntu?

[clear hedge]

In terms of a replacement, you might wanna VMware. Works flawlessly for me.

[normal marsh]

I'll give that a shot. I really don't want to do a dual boot to get Kali set up.

[clear hedge]

Unless you have seperate drives for Linux and Windows, dual boot is a bad idea in my experience. A feature update from Windows almost always messes up the bootloader

[normal marsh]

My windows machine is working fine with the VB so no worries there for me, it's my Ubuntu laptop that keeps having the mouse issues with VB

[clear hedge]

Oh I see, I misread that, sorry!

[lusty hazel]

Is it fix the openvpn not syncing with Kali linux

[crystal marlin]

It's for certain connection issues, not sure what you mean with "not syncing"

[lusty hazel]

I've already uploaded snippets but I think missed by you brother.... It's the problem while connecting

@crystal marlin are you here brother?

[crystal marlin]

Is this all the output it produces ? Or is there some more coming when you wait a bit?

[lusty hazel]

Yeah after it nothing happens

I'm waiting

Please help me I'm encountering it for 3 days... No thm activities done😢😢

[crystal marlin]

Have you tried updating openvpn?

[lusty hazel]

Did already

The troubleshooting script also not working to me

[crystal marlin]

Is your date and time on your machine correct?

[lusty hazel]

Yes it's correct

I configured it after installing VM
Sudo dpkg-reconfigure tzdata

[crystal marlin]

And I guess you tried switching vpn server on the thm access page already and downloading the new ovpn file?

[lusty hazel]

Did brother

Everytime I downloaded after regenerating

[crystal marlin]

Oh god, that's quite a lot screenshots xD ..

Check sudo ufw status

[lusty hazel]

I took for all tries... I am so frustrated

[lusty hazel]

Before connecting or after connecting openvpn

[crystal marlin]

Doesn't matter

[lusty hazel]

Ufw is not installed

[quartz plover]

I have a virus on my pc named hacktool win32 remoteadmin and when my pc tries to delete it it dosent and when I rescan it appears
I found where it is and it said it was embedded into a kali Linux iso file I have
I can’t delete it either it just says discovered 0 items (0 bytes) and stays like that
And I’m im safe mode rn and I can’t delete it
And in safe mode I get this when I try to scan for virus’s

it says 0

so i restarted my pc and im out of safemode and i did another scan and it said it had 2 hacktool remoteadimins

and when i tried to take action it now says

feel free to keep working while we take action

and it has been saying that for like 5 min

can someone please help me

i am really scared and i dont want this to spread

[crystal marlin]

Mhh, well not sure then what's going on, maybe try to fully uninstall openvpn and then reinstall it

[quartz plover]

i went to threat protection history i saw the 2 viruses and pressed remove and they are just loading

[lusty hazel]

Ok I'll try

[supple sonnet]

because Kali contains hacking tools it's often flagged as viruses and or malware. Don't worry about it.

[quartz plover]

are you sure? because i cant delete the iso image and it hasint said this before either and now it is showind 2

[supple sonnet]

is the ISO mounted by chance?

[supple sonnet]

or in use by a virtual machine?

[quartz plover]

no it is not i deleted the machine

like the thing in it i pressed remvoe

[supple sonnet]

make sure you do a full shut down and restart

[quartz plover]

i did that

[supple sonnet]

open up cmd as administrator and type del kali.iso

or whatever the iso name is

[quartz plover]

it says it could not find it

Could Not Find C:\Users\alvar\kali-linux-2021.3a-installer-amd64.iso

wait its in my downloads

so

C:\Users\alvar\Downloads\kali-linux-2021.3a-installer-amd64.iso

[crystal marlin]

Not sure what the issue is then if you completely uninstalled openvpn and reinstalled it, sry :/

[lusty hazel]

Same😑😑😑

[quartz plover]

okay i did it and it did nothing

like it went to the next line

and nothing is happening

[supple sonnet]

does the file still exist?

[quartz plover]

ye

and i tried to delete it in safemode when i thought it wasint safe

and nothing

[supple sonnet]

how are you checking if it's deleted

[quartz plover]

going to the folder it was in

ie my downloads folder

[supple sonnet]

try running dir in the downloads folder and see if it's still there

[quartz plover]

elaborate

also in cmd i cant type

[supple sonnet]

dir c:\users\%username%\Downloads\

[quartz plover]

ima just restart cmd then

[lusty hazel]

@crystal marlin what should I do... I'm in top 1%,111 streaks.... Delete account is hard to me😢😢. I'm also a subscription added user

[supple sonnet]

is cmd hanging?

[quartz plover]

likeyeah i think i know what u mean

[supple sonnet]

because the Kali iso is relatively large

[quartz plover]

i mean

yeah

lol

[supple sonnet]

and it's probably still processing the request

[quartz plover]

fair

[upbeat bloom]

ps, this is a tech support for TryHackMe, not for your personal issues, although nanaisu is being nice.. if you ever do think you truly have a malware, it is best to reimage your system completely

[crystal marlin]

Dunno, maybe try using a different VM. Are us using VMware right now?

[lusty hazel]

Actually I did already in vmware and virtual box both

😭😭😭

[quartz plover]

thank you for letting me know i am sorry i didint know where elso to go :/

[scenic torrent]

Gave +1 Rep to @upbeat bloom

[crystal marlin]

And it was both time the exact same issue? Stuck at the UDP part?

[lusty hazel]

Yes of course

[upbeat bloom]

generally, you can ask in either #infosec-general or #general

[quartz plover]

well yeah i do see your point i just thought this channel was apropriate for this ig

[crystal marlin]

Are you connected via wifi?

[lusty hazel]

Yes brother

[crystal marlin]

You might want to try connecting via ethernet to see if that makes a difference.

[lusty hazel]

I did with my rj45

[crystal marlin]

And still same error, stuck at UDP ?

[lusty hazel]

Yessss🤕

Sajeeth Ahmad:
A perimeter firewall on the server's network is filtering out incoming OpenVPN packets (by default OpenVPN uses UDP or TCP port number 1194).
A software firewall running on the OpenVPN server machine itself is filtering incoming connections on port 1194. Be aware that many OSes will block incoming connections by default, unless configured otherwise.
A NAT gateway on the server's network does not have a port forward rule for TCP/UDP 1194 to the internal address of the OpenVPN server machine.
The OpenVPN client config does not have the correct server address in its config file. The remote directive in the client config file must point to either the server itself or the public IP address of the server network's gateway.
Another possible cause is that the windows firewall is blocking access for the openvpn.exe binary. You may need to whitelist (add it to the "Exceptions" list) it for OpenVPN to work.

You need to fix your tls handshake

**my LinkedIn connection suggested it. But I don't know how to do it and do in windows or Linux

[eager fulcrum]

Are you in Egypt?

[lusty hazel]

No I'm from Sri Lanka

[crystal marlin]

Strange, no idea then. Usually it's giving you any sort of info, like there is no reply within 60 seconds or similar to that. The last thing I can suggest for you to check out is that, but then I'm out of ideas. #site-support message

[lusty hazel]

sudo apt --fix-broken install

I tried after this command also... No changes

For my case htb and htb academy no issues they work all good and no errors

Actually, I didn't do anything with my windows firewall settings but how it blocks suddenly.... That's the confusion to me, also almost 3 months and 20 days it worked well and how it got blocked since day before yesterday @crystal marlin I'm so confused.....

[crystal marlin]

What you mean, so you solved it?

[lusty hazel]

Nope, if firewall block is the reason after all.. How if happen suddenly is my doubt

Also I have not done anything with my firewall settings

Another thing is in my Windows OS or Kali Linux VM where I have to whitelist port 1192

Boiling inside my head 🤕🤕

[latent parrot]

is there no dark mode ?

[plush bay]

nope no dark mode as an option on the website

[latent parrot]

oh

[plush bay]

use a browser plugin like dark reader instead

[latent parrot]

thx for the suggestion !!

[plush bay]

dark reader is probably one of the better options as it is open source too but enough talk about that

[latent parrot]

just added the extension it works thx

[eager fulcrum]

Neither. It's outbound, you won't be filtering outbound.

[hoary robin]

Hi, do u have student subscribe?

[random fractal]

Hello when I try to open a webpage hosted through the KOTH game, I am simply stuck with unable to connect, what am I doing wrong? however when I use a room normally it's fine

just found the issue only happens when using Firefox in kali and not chromium

[crystal marlin]

!docs student

[sharp bison]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/billing/student-discount

From TryHackMe with ❤!

[whole locust]

Greetings, if we know we have the right answer (and others write up confirm) but the submission won't work as it's "undefined" who can we contact about that?
Thank you

(specifically the Burpsuite)

[quasi maple]

hey, is anyone else having issue with getting the ip websites to load? im currently working on this module however nomater what i do i cant load the website https://tryhackme.com/room/contentdiscovery

[whole locust]

yeah I have an issue right now with a machine I still have time on

[crystal coral]

I accidentally timed out while in the middle of the "Further Nmap" room, and now it won't display the IP of the target machine.
(https://tryhackme.com/room/furthernmap)

[whole locust]

specifically the OWASP shop

[quasi maple]

for me the website does not load and when doing curl on it i get this
`curl http://10.10.87.91 -v

• Trying 10.10.87.91:80...
• TCP_NODELAY set
• connect to 10.10.87.91 port 80 failed: Connection timed out
• Failed to connect to 10.10.87.91 port 80: Connection timed out
• Closing connection 0
  curl: (28) Failed to connect to 10.10.87.91 port 80: Connection timed out`

[whole locust]

Can you terminate and restart it?

[crystal coral]

I tried restarting my machine, but that didn't seem to affect the ( MACHINE_IP ) text.

[pulsar sparrow]

refresh the page

[crystal coral]

Tried refreshing, still doesn't display the target machine's IP correctly.

[pulsar sparrow]

could dit be that you have another machine running that you did not terminate?

[crystal coral]

Hm... didn't think so, but I'll double-check.

If My Machine says "Machine Idle," does that count as an instance?

I'm going to try rebooting my host machine, just in case.

[drowsy sapphire]

how to upload image here

[quasi maple]

no matter what i do the THM does still not allow me to acces the websites or curl the ip addresses even tho thats what the task tells me to do. im slightly disapointed 😦

[wind wedge]

Are you connected to the VPN?

[quasi maple]

no i was tying to use the "attackbox" but that just crashes on me :/ Im working on "Content discovery" https://tryhackme.com/room/contentdiscovery

hmm now the attackbox all of a sudden worked. i was trying so many times to get one instance

[lusty hazel]

$ nmcli connection # Note the name of the VPN connection here
$ nmcli connection edit (connection_name)

set ipv4.never-default true
set ipv6.never-default true
save
quit

The thm recommended command, it's also not working

For <ip a> command it shows tun0 down but for <ifconfig> command not show up tun0 interface

[naive dust]

does any one hav problem while connecting to vpn

any server vpn

[pastel tinsel]

Check this @naive dust

[polar trellis]

Hi! I'm a subscriber and normally use the in-browser AttackBox or Kali machines. However there is sometimes quite some delay/lag with them (probably something my end). I was wondering, would it be better for me to use a VM (for example Virtual Box) and use OpenVPN in it?

I'm quite new to all of this 😄

[lusty hazel]

I'm asking for it for 4 days broh no solutions got yet

[plain gate]

I think the bot THM is buggy cause I'm subscribed and it s say NO!

[lusty hazel]

Actually thm is buggy in many times lol😂😂😂😑

Some bugs I could able to fix myself but this vpn issue helll

The troubleshooting script is not working and this command also. You can check screenshots that I've uploaded

@bronze vale

[loud marsh]

Why can't I react to any messages in this server?

[sand olive]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[sand olive]

Verification is required for that

@lusty hazel pretty sure something blocks your udp traffic.

Try connecting with phone hotspot and see if you are able to connect to vpn

[warm lintel]

https://tryhackme.com/room/uploadvulns

Is it normal to get 500 internal server error in this room, it will work for the first file upload but I can never upload anything after that without resetting the machine completely. Each time I'm just uploading a random small jpeg I found on the internet, i've tried changing images but the server keeps breaking after the first upload. Room seems completely unusable.

[polar trellis]

Hmm, I'm currently doing that room too Behemoth and haven't had that issue yet

[cerulean hearth]

Hi, when I try to accept my friends request (both of us have premium accounts) I get that 404 error. Any other way to accept his friend request?

[celest wadi]

I have the same problem

[spare blaze]

Good morning @cerulean hearth @celest wadi we have made a change to how friend links work. I am looking into your problem, it occurs when you click on the link you received by email, correct?

[cerulean hearth]

correct, when I click on the link in the mail I get the 404 page

[spare blaze]

Alright, thanks, I will have a look and will mention you here as soon as I have a solution. Please let me know if you manage to solve it in the meanwhile :)

[scenic torrent]

Gave +1 Rep to @cerulean hearth

[bitter hound]

Hello Support Team, My daily streak reset to 0 even if i had won 7 day streak freeze in the last tryhackme prize?

another question is where can i get the receipts for the last months payment?

[crystal marlin]

Didn't you received an email with the invoice attached?

[lusty hazel]

I did already..... When I'm left with nothing to do I asked here

[bitter hound]

Only for the first month

[crystal marlin]

On the bottom of that email should be a link to some subscription management page, maybe you can find an invoice there

[solemn anvil]

Hello, I have been completing the aoc rooms and still had my streak, then started another room and it went to 1

[bitter hound]

Got it thank you

[scenic torrent]

Gave +1 Rep to @crystal marlin

[bitter hound]

Hello Support Team, My daily streak reset to 0 even if i had won 7 day streak freeze in the last tryhackme prize?

[weary elbow]

Now Tools are outdated in
TryHackMe Linux
Needed to update manually 😕

[crystal marlin]

If you are talking about the browser based kali machine, as far as I know that's not maintained/updated anymore, so rather use the web based attackbox

[weary elbow]

I usually use kali ssh
In my vm caz my internet is slow
With ssh it's pretty easy to perform task without facing connectivity issues

[crystal marlin]

But with the outdated statement you were talking about the attackbox or kali machine provided from thm right? Regardless of you using it within the browser or connect via ssh.

[weary elbow]

Kali Machine

[crystal marlin]

Ok, ye then like I said, use the attackbox

[naive dust]

hi

i'm having some trouble with vouchers

my employer bought the wrong vouchers. Subscription vouchers instead of Throwback lab vouchers. Is there a way to swap them?

Tried to call the contact phone address but that didn't work

[crystal marlin]

You might want to send them an email with that question.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

thanks

[grizzled spade]

Hello, do any of the mods know if the friend invite feature on tryhackme works? A friend and I have sent an invite to each other but get directed to a 404 error.

[wary swallow]

hello, I am connected through VPN from my kali VM but I am unable to even ping the deployed machine. it's supposed to be a mongoDB machine (from advent)

I have tried to close the current machine and restart it, as well as restarting the VPN connection

[grim bridge]

You're sure it's the correct ip and not an auto complete mistake or a typo?

[crystal marlin]

Which advent of cyber, 3? Either way, using ping to verify if the connection or the target machine is up is not reliable. If the machine doesn't reply to ICMP pings you won't get that reply even tho the machine might be up and your vpn connection is good.

[wary swallow]

it's the machine for day 7, I am supposed to SSH into it (ssh thm@ip.2.3.4 -p 2222) but i don't get any response

[wary swallow]

yes, I am sure. I had a typo earlier but even after I fixed it doesn't connect to the machine

[crystal marlin]

So which AoC is it? As day 7 for AoC 3 seems to be something else

Ah nvm

It's the right day I was just off

[spare blaze]

@bitter hound @solemn anvil Hey guys, regarding your streak, do you mind sending an email to [e-mail] please? They will take good care of you there!

Hey guys @grizzled spade @cerulean hearth @celest wadi, the invite link feature should be fixed & working now! We're sorry about that & thank you for the reports and your patience! ❤️

[crystal marlin]

Can I try to connect to your target machine to see if it's working for me? If yes, let me have the IP pls

[wary swallow]

for sure. 10.10.155.45

I have 1:52 left, plenty of time to troubleshoot this 🙂

[crystal marlin]

Okay, works just fine for me. Can you open 10.10.10.10 in your machines browser?

[wary swallow]

no, I can't. I am restarting the VM.
I did check to see if my connection was good on the "instructions" page at THM website

[bitter hound]

Thank you

[scenic torrent]

Gave +1 Rep to @spare blaze

[crystal marlin]

Ye, let me know if the problem is still there in case it's not working after the restart and successful connecting to the thm vpn

[grizzled spade]

Thank you

[scenic torrent]

Gave +1 Rep to @spare blaze

[wary swallow]

so right now I can see 10.10.10.10 and connect through the browser to 10.10.155.45... but not through terminal

super odd, I never had issues connecting to boxes...

[crystal marlin]

Is openvpn running on your host machine or directly inside your VM?

[wary swallow]

directly on VM

[crystal marlin]

If you do ip a s do you only have a tun0 interface or any extra like tun1, tun2 etc?

[wary swallow]

I only have tun0

[crystal marlin]

Try sudo ip link set dev tun0 mtu 1200 and then ssh again into the machine

[wary swallow]

that worked. was the default too big and losing the connection packets?

[crystal marlin]

Don't know the cause, maybe your internet connection isn't that good.

[wary swallow]

that's weird, I have a 300mbps connection. it shouldn't be an issue

[crystal marlin]

Ye dunno then, at least it works now 🙂

[wary swallow]

true, I appreciate it @crystal marlin

@crystal marlin since I have your attention: once I am connected to the VPN through the VM I can't access the www, just the local tunnel addresses. any idea how to work around that?

[crystal marlin]

Huh? And when the vpn is off you can access it just normally ?

[wary swallow]

correct.

[crystal marlin]

Uhm, that's strange, anything that's not within the thm network shouldn't be routed through your vpn, so not quite sure what the cause for that is. Do you still have your eth0 up ?

[wary swallow]

I do have the eth0 up

[crystal marlin]

Tbh I don't know what causes that, maybe some kind of network setting in your VM software?

[wary swallow]

I checked the settings and it doesn't appear to have any weird setting

[naive dust]

Are you running OpenVPN from CLI or from Network Manager's GUI?

[crystal marlin]

Ok, ye then I don't know how to best troubleshoot that, maybe try updating your openvpn or google it, other then that I can only guess how to solve that, sry

[naive dust]

@crystal marlin I think if s/o imports the OpenVPN config file into the nm GUI then all traffic goes via the VPN, no?

[wary swallow]

I was running from network GUI (parrot OS)
From CLI I was getting "exiting due to fatal error"

[crystal marlin]

Never used that GUI to connect to the vpn, so no clue

[naive dust]

OK. Then I think it makes sense.

[crystal marlin]

Have you used sudo when running it from cli ?

[wary swallow]

I did earlier. I think I tried using with GUI because when running on CLI I can't connect to the machine via SSH. However, I can connect to the ip-address on browser.
If connected to GUI, I can connect to ip-address on browser and SSH, but no www lol

it's a lose lose situation haha

[crystal marlin]

Ye but the issue with not being able to ssh was solved with the mtu setting, so I would go with the cli again.

[wary swallow]

that's right. I ran the command again and ssh is a go.

Thank you all for the help!!

[crystal marlin]

+rep

[scenic torrent]

Gave +1 Rep to @lone karma

[wary swallow]

+rep

[scenic torrent]

Gave +1 Rep to @crystal marlin

[steel ingot]

hello everyone! i'm kinda late to the xmas challenge, but started it this past weekend, and am ready to catch up! i'm new to tryhackme and am getting familiar with the attack box. noticing it is very small when "side to side" with the challenge directions. my linux is not that great, and don't know if i have to have a solid understanding of linux to be able to debug certain issues that i've been having. regardless of it all, i'm pushing on through just to get a better understanding of things. also, when using certain programs such as oswap, they are asking me to update to the latest version. have any of you been getting these notifications as well? i updated, but have new to attackbox, so i don't really understand how to actually "see" the downloaded file, because the space is so small.... if someone can help me out that would be great, otherwise if there is a customer service or tech support rep, i'd appreciate it if someone can point me in the right direction 🙂

[lament trout]

@steel ingot can you show what command you run with the output that's asking you to update?

you gotta verify to send a screenshot

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[livid ibex]

i need to update my billing info is there a way to do that on the site? I dont see anything easy. do i need to cancel my sub first then sign up again?

[crystal marlin]

Check the bottom of one of your previous sub purchase emails, there should be a link to a sub management page, where I believe you can do that.

[steel ingot]

thank you, @lament trout . i just verified my account

[scenic torrent]

Gave +1 Rep to @lament trout

[lusty hazel]

@crystal marlin Have you found any troubleshooting mechanisms for my issue?

[crystal marlin]

I have not, sry. :/

[lusty hazel]

🤕🤕🤧

[lusty hazel]

This command is not working to me....
Says ask - -help dev set not found

@crystal marlin ,sorru for pinging you several times, I posted this photo in the morning now it's passed 18 hours... So that I re posted it

For
Ip a
It shows tun0 but not for
Ifconfig

Is there anyway to up the tun0

I've tried
Sudo openvpn - -mktun - - dev tun

Not worked

[crystal marlin]

I don't think you are supposed to set up tun0 on your own, it will be done by openvpn when you start the connection

[lusty hazel]

But, here it's down....

@crystal marlin can I dm you?

[crystal marlin]

A bit later yes, although I don't think I can help you anymore as I already tried with you everthing that would have come to my mind

[lusty hazel]

I give you my THM creds

[broken bear]

Don't do that

[lusty hazel]

You try in ur system to connect with openvpn, if connects I've to troubleshoot my laptop

[lusty hazel]

I'm so tired of trying different ways brother its 5 days 😩😩😩

[broken bear]

the openvpn tool should set up the tun0 interface. If it doesn't , there is something deeper going on. It's going to take time deeper investigation on your part in the logs to determine what it is

[lusty hazel]

However, I'm. New guy and now a days started network plus learning.. Don't have much experience in troubleshooting 😑😢😢

[broken bear]

Are you in a country that says you aren't allowed to use openvpn? I know there are more than a few.

[lusty hazel]

No, I'm from Sri Lanka

[crystal marlin]

We tried nearly everything of the common issues, so far I haven't seen the issue where the openvpn initialization gets stuck at the "UDP link remote" part and don't gives back any other error/info.

[broken bear]

did increasing verbosity give anything useful?

or regenerating the ovpn file for a different region?

[crystal marlin]

Haven't done that. He regenerated the file for nearly every other server and tried it.

[broken bear]

I'm not an expert on it, looking at my own ovpn file, default verb is 3. maybe cranking it up to 11 will yield some more info?

[crystal marlin]

Ye, sounds like something to try. Guess will do that with him when hes back online. 👍

[broken bear]

Cool. Do you know what kind of connection he's on? Both locally and to the WAN?

[crystal marlin]

Nope, don't know that. But he said it's working with the HTB vpn connection.

[broken bear]

WiFi in an apt complex could be causing issues, as the VPN uses UDP. If they are using a long range wireless broadband or mobile, my best guess would be instability. But if that were the case, there should be vpn client logs showing that.

At this point, my best suggestion is for them to nuke the kali VM and start over. We don't know what else has been done to the instance.

[crystal marlin]

He already tried it with 2 different VMs, so not sure what's going on there ^^.

[broken bear]

Sounds like it should be kicked up to actual support at this point. I don't know what else to try, looking back at the history of what you've tried.

From what I'm reading, many Sri Lankan ISPs are able to detect and kill OVPN sessions. Not sure of the legality of it, but that may be the problem.

[crystal marlin]

Ye but HTB is also using openvpn, right? As according to him it's working fine there.

[broken bear]

HTB also supports TLS though - looking at the UDP version to see if there are any significant differences

[static agate]

Hello, does THM allow Openvpn connections using TCP?

[plush bay]

would assume the answer is

yes

because only sending udp over the vpn seems like a very strange idea to even try

[static agate]

? I'm asking if I we're able to connect to the THM OpenVPN server not
using standard UDP port 1194... and instead use TCP

[plush bay]

well do not know enough about how openvpn works to be able to answer here

[pulsar sparrow]

@static agate dunno if they offer TCP, but if they did I would imagine its a different config file than the UDP one

[static agate]

no worries Shadow, thanks tho

[static agate]

Yeah, I looked around the site and didnt see anything.. just the troubleshotting script... lol I tried to tweak me ovpn file and that failed lol

[pulsar sparrow]

@plush bay most VPN configurations are UDP. A TCP VPN, while more secure, would be slower due o the nature of TCP

also TCP packets are firewalled more often than UDP

[static agate]

right

Appreciate the info

[tough barn]

hello, why I'm getting my streak reseted even though monday 20th isn't over yet?

I'm getting the points I'm making right now as points made on Tuesday (?) and it's just 18:30 here

[trim turret]

wazzup tech-support?

I got 3 days homeyz

I'm in Lesson 3 of Walking an Application. The sample web site that is used to check the source code appears to be a sample site.

[terse niche]

Seems like some of the servers in labs keep spending forever looking for google api's or cdn's. I put zero'd out DNS entries in my hosts but it doesn't seem to help.

as an example, one server in the owasp top 10 room is taking more than 5 mintues to load a page. Doesn't feel like it should, but figure I would ask.

[terse niche]

Just added the "options timeout:1" to my resolv.conf file. Things are snappy now.

[lusty hazel]

I use tcp for htb and htba

Those work fine and I'm pwning machines in htb

[lusty hazel]

I've tried with ethernet cable also, checked my firewall configurations as well nothing wrong there

Also tried to connect with mobile tethering and hot-spot

Left part is network troubleshooting... That one I do not know how to do

@broken bear

[broken bear]

THM VPN seems to be UDP only - does the UDP profile work for HTB?

[verbal forge]

I try it before and it fail for me idk if it’s because of my distros but the connections fail but the tcp wrk I have to look more into udp

[short glade]

it worked for me

btw, I have a problem starting machine from AoC3. It fails to spawn attackbox (even for the first time the day)

but at the top I see its IP

how can I access this machine over VPN?

VNC does not work

[lusty hazel]

Yes it works well to both tcp and udp

[lusty hazel]

You've to ssh to it from your vm

[short glade]

but there's not creds

[lusty hazel]

Otherwise use the Web-based attack machine

[lusty hazel]

Previous tasks creds try with them

[short glade]

attackbox fails to spawn

I'm specifically talking about Aoc3 Day19 machine

[lusty hazel]

You try in ur kali/parrot VM or windows

[lusty hazel]

For day 19 and 20 u don't need to open attack box

Green button attack machine is enough to answer the tasks

[short glade]

You mean "split view"?

If yes, this one fails too

[lusty hazel]

Yeah!

But if it fails.... Try asking thm forum

Forum-tryhackme

Try restarting your VM,

Or, log out account, re-login

[short glade]

actually solved. I tried on different network and it worked. Looks like my firewall was somehow killing the connection

thanks @lusty hazel for your assist anyway

[scenic torrent]

Gave +1 Rep to @lusty hazel

[lusty hazel]

Glad to hear happy hacking ❤️💐💐

[short glade]

Thanks!

[naive dust]

How can I abort nc running in a reverse shell without losing the shell? CTRL+C is stopping the shell, too

[celest wadi]

ctrl j backgrounds it, I believe

[naive dust]

Did not work for me. Found a different solution nc -lnvp XXXX &

@celest wadi I needed to run nc in a shell to transfer a file, so this worked.

[celest wadi]

yeh the & starts it as a process

[karmic estuary]

i'm trying to ssh to a machine through my kali vm and it's just hanging, i'm connected to the vpn, the port is 22 and I can see the website itself but not connect to the machine, it doesn't even show me the password prompt, does anyone have any idea why? i'm doing the wonderland room

[naive dust]

any error message? try adding -v to ssh for higher verbosity

[karmic estuary]

I didn't know ssh had verbose (never used it for that), well it was an mtu issue, I just changed it using sudo ifconfig tun0 mtu 1200

now it's working, tyty!

[naive dust]

You're welcome. 🙇‍♂️

[shrewd raft]

Problem loading page issue on all rooms.
For example on room OWASP Top 10 Task 5 when I try to 'navigate to http://10.10.88.152/evilshell.php' I receive the message "The connection has timed out The server at ... is taking too long to respond."
I have cleared caches, deleted history, tried on different browser and Reset Progress with no avail.
Please advise me.
Thank you!

[naive dust]

Can you ping 10.10.10.10?

[cold valley]

In the new Red Team Recon room, it appears that recon-ng is not working on the AttackBox. Mine errs out whenever I try to run it.

Errs on “import _builtin_” , line 14 in /usr/share/recon-ng/recon/core/base.py”
ModuleNotFoundError

[silver widget]

Hi

My account is not working properly. I can't use ssh in king of the hill machines

[cursive sapphire]

What does it say?

[naive dust]

add -v to it and post the error message here.

[silver widget]

Okay

Also

I can't download my openvpn configuration fike

File

It says lost in the matrix

[cursive sapphire]

Try changing the server

[silver widget]

It's working now

Thank you

[fringe sigil]

I accidentally reset the whole room thinking it would only reset day 21. Is there a way to get that back or would I have I have the do all the days again.

For AoC3

[crystal marlin]

I don't think you can revert the reset

[fringe sigil]

@crystal marlin damn ok 👍

[frozen cipher]

Hi, guys how do I troubleshoot this on linux machine?

https://gyazo.com/88816c367a28ab792eadbdf2edab43b7

[naive dust]

What are you trying to do?!?!

[frozen cipher]

I'm trying to connect to a machine through OPEN VPN

[limber hazel]

Can I ssh to an associated Attack box of a room? What would be the IP and credentials??

[flint wolf]

Hi guys, I'm not sure if I'm in the right place to ask these questions. I am trying to follow some channels on my tryHackme server and it tells me I don't have webhook permissions. I'm totally new to discord so will appreciate any help. I reached out to an Admin for help but he/she pointed me to google. I knew google was there before i asked. It's because I can;t even figure out the instructions on google

[broken bear]

wut? the attackbox is a THM hosted VM for you to you use with a browser in place of a local VM running openvpn

[limber hazel]

I know what it is!
The question is simple, can I access it using ssh???

[broken bear]

Can you post a screenshot of what you're trying to do? I definitely don't open sketchy looking links from unverified and unknown (to me) users on this discord

[broken bear]

If you are already using a VM, why would you want to SSH into the attackbox

[frozen cipher]

@broken bear https://gyazo.com/7e0c0551b02d73910976dca27780c5d5

[crystal marlin]

lol

[naive dust]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[broken bear]

Again, that's a sketchy link. Please verify and post a screenshot.

[frozen cipher]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[limber hazel]

I may have my own reasons...
the question is how to get access using ssh in to the attack box.

[broken bear]

AFAIK there are no user credentials to log into the attackbox. You use it from the guacamole web interface, or you use a VM to connect to the network.

[frozen cipher]

Okay, i think i figured out how to verify

this is what i get when i try to get access to the machine using openvpn

[crystal marlin]

I'm not a 100% sure, but I think you can, yes. Press the information button on the bottom of the attackbox, there you should find creds.

Yep, tried it right now and it seems to work, even with the public IP

[broken bear]

That looks like a default apache page. are there other instructions on what the URI to access the page is?

[frozen cipher]

I've followed the https://tryhackme.com/room/openvpn but that's all it says to do to connect to a machine using linux and openvpn

i'm confused on how to execute commands now on the machine I'm trying to connect to

https://gyazo.com/e1a88c1619fada0b08f50c2ddf31a716

[crystal marlin]

Btw @broken bear we finally got an error about the guy we were talking about yesterday. It's the TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) and most likely one of these reasons will apply then: #site-support message
But in case you want to see the log files with one time verbosity 6 and one time verbosity 11 let me know and I can DM them to you, as that's probably beyond my knowledge on how to interpret that 😄

[broken bear]

Yeah, same here honestly. Sounds like it needs to be escalated to whoever does the network configs. I looked up some stuff on Sri Lankan internets as well, it could be that the government has determined THM to be a banned site but somehow HTB is not.

[limber hazel]

Would you be please kind enough to guide me a little more. I could not find the IP and credentials to use

[crystal marlin]

Open the attackbox, the button is down there then:

[crisp jungle]

I can't get the bot to verify me. Gives me this error "I'm sorry but I couldn't find the specified token!"

[limber hazel]

Thankyou!!!!!

[crystal marlin]

You sure you copied the correct token? From your profile page in the "other" tab ?

[frozen cipher]

I've opened the openvpn connection successfully on linux but i'm confused on how to connect to the machine. using ssh tryhackme@ip-address doesn't do anything. any ideas?

[crystal marlin]

What room are you talking about?

[broken bear]

Open a new terminal and use the provided SSH creds.

[frozen cipher]

i'm in linux fundamentals 2 room, but i ran out of free time in AttackBox, so I tried to connect with my own linux machine

[broken bear]

If you CTRL+C the vpn connection, it dies

[frozen cipher]

ssh: connect to host yadayada connection timeout

[broken bear]

post ip a screenshot please

[frozen cipher]

https://gyazo.com/7684893d8d6d5ea77cff9d21345e2bd5

after a few timeouts i was able to connect

[crisp jungle]

Thanks I was using the wrong thing

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

Enter ip a s in your terminal and post a screenshot, that's what juun meant 🙂

[frozen cipher]

thank you @broken bear

[scenic torrent]

Gave +1 Rep to @broken bear

[frozen cipher]

oh, i'm a noob. thank you for the explanation

[broken bear]

you have many open vpn tunnels

from terminal, what's the output of ps aux | grep openvpn

[frozen cipher]

i've restarted my machine, started open vpn again and here is what i get running the command above

https://gyazo.com/2221d10eb2821025a5e768e4b07ea048

[broken bear]

ok, it looks like you have two ovpn processes running

[frozen cipher]

and it finally works. thank you @broken bear

[scenic torrent]

Gave +1 Rep to @broken bear

[frozen cipher]

how should I close the connection when I'm done with it, so I don't run into this problem next time?

[broken bear]

you should only have 1 openvpn process running at a time

if you run ip a s and you see more than 1 tunX device where X is a number, you are more than likely going to have problems

[frozen cipher]

got it, thank you

[crystal marlin]

You close the connection by pressing ctrl+c in the terminal where openvpn is running

[frozen cipher]

when I type ls -l and see all the specifications of the file, permissions, user, date etc. Where could I read more about all these specifications?
hope this is a right place to ask

[abstract grove]

is there a way to give my virtualbox access to my gpu so it can run hashcat3

[broken bear]

setting up passthrough is usually more pain than its worth to do

because it's not just partial making the GPU usable in the VM that way means you can't use it in the host

[bleak agate]

Anyone else having issues with connection from US-West-VIP-1? It continues to drop connection to the boxes I'm trying to access.

[abstract grove]

alright good to know

[naive dust]

https://tryhackme.com/room/linuxfundamentalspart1
In part 2 there is more about the file system.

[abstract grove]

yeah I’ve been having trouble with us-east. Somethings I get hmac authentication fail and the connection is lost

[errant gull]

Hello, I've been working on this question from 'Burp Suite' room for a long time and have yet to discover an answer. I followed the instructions and even examined the writeups, but I still couldn't figure it out.
Answer validation for this question seems to have some bug(?), since it is not accepting the correct response. Could you please look into this and provide me with a solution to this question?
Thank you in advance.
Task 9 --> Help! There's an Intruder!

Q-->
Finally, click 'Start attack'. What is the first payload that returns a 200 status code, showing that we have successfully bypassed authentication?

[crystal marlin]

What's the message you get? Something like "Wrong answer" Or "undefined" ?

[errant gull]

it was showing, "Uh-Oh! Undefined"

[crystal marlin]

Then it's most likely because you have bitdefender running on your machine

[errant gull]

oops.
I have been working on numerous labs with Bitdefender on my machine, and the issue occurred only on this question.
Anyway, thank you very much. Let me try disabling it and work on it again.

[crystal marlin]

Ye, seems bitdefender doesn't like that answer. There is one other answer I know of where he doesn't like that either.

[terse kraken]

I'm trying to download the vpn configuration file but it gives me error 404. Am I the only one?

[crystal marlin]

#site-support message

[terse kraken]

thank you 🙂

[round garden]

guys for some reason i cant start the attack machine, it says that i cant use more than one hour

i didnt even open it

[naive dust]

You would have to subscribe to get more time.

[round garden]

yes i know that but i didnt even used the attack machine today

[pulsar sparrow]

i believe they calculate in 24 hour blocks, not actual days

did you use it in the past 24 hours?

[round garden]

no

its been some days

i will try it again later,maybe i have activated by accident

Do i need to activate attack machine to connect from my terminal?

[naive dust]

Via your local VM?

[round garden]

yes

i have kali linux in my vm\

[naive dust]

No need to launch the AttackBox. But you have to launch the machine.

[round garden]

i have activated the machine

[naive dust]

No difference.

[naive dust]

Connected via sudo openvpn <your_file>?

[round garden]

i did it without the sudo command

but the terminal is showing my some errors, but the tryhackme site says that i am connected

[naive dust]

If you can ping from your Kali Terminal 10.10.10.10 you are good

What's the last line of your terminal output after running openvpn?

@round garden btw, hard to ping your name. Haven't greek keyboard layout installed :)

[round garden]

sorry for making you wait

[naive dust]

Kanena provlima.

[round garden]

the last line is saying " initialization sequence completed"

elinas eisai

[naive dust]

Seems like everything is fine.

[naive dust]

Peripou. Milao elinika.

[round garden]

the problem is that i cant type anything

[naive dust]

Where?

Oh!

You need to open a different terminal

This one needs to stay running

If you close it you'll lose your connection

[round garden]

i am trying to show you the screenshot from linux

[naive dust]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

You need to verify first to be able to upload screenshots

[naive dust]

Apo pou eise?

[round garden]

spoudazo sthn athina pliroforiki

[naive dust]

Ego genithika stin elada. Gia fton ton logo ta milao.

You solved your issue?

[round garden]

yes thank you very much

the problem was sudo

now i can use try hack me without the time restriction?

[naive dust]

As far as I know, yes. But some rooms I think are closed for non-subscribers.

[round garden]

thank you for your help

[naive dust]

But I might be mistaken, as I subscribed very early and haven't had the experience. Just give it a try :)

Good luck

[round garden]

do you think tryhackme is worth my time?

i am new to this

[open pawn]

how can i run parrot on windows?

i tried it through virtualbox but i cant find and .iso files

they only have ova

[naive dust]

I don't know what your goals are. But if you are in general interested in Cyber Security and are new to it, it's a fantastic platform!

@round garden I would recommend choosing one of the paths. Keeps you structured.

[pulsar sparrow]

@open pawn on the parrot download page, just click download, the virtual appliance link is for VM related files

[open pawn]

i went to iot and cloud appliances

[pulsar sparrow]

yeah way wrong place.

[open pawn]

o

where to then

[pulsar sparrow]

just go back to the main download page, pick the security edition and the first button that says download

[naive dust]

https://www.parrotsec.org/security-edition/

[open pawn]

does it have to be security edition or can i use home

[naive dust]

MATE is good enough

[pulsar sparrow]

if you want to use it for this site, security edition

the home edition wont have the tools you need

[open pawn]

is security edition home edition with extra tools?

[pulsar sparrow]

yes

[open pawn]

bet

so mate desktop and download

[pulsar sparrow]

ya, and in general when making VM's I use the .iso over whatever prepackaged thing they give.

[open pawn]

ok so one sec

also tor is a built in application on parrot security, right?

is parrot os safe to use for tor?

[broken bear]

The official parrot website should have download and install instructions

[open pawn]

i got it

[broken bear]

What are you hoping to get out of using TOR?

[gaunt lava]

parrot is great

dear support

I have a question which may be idiotic

but kinda means a lot to me

[broken bear]

Is this a tech-support related question, specific to THM as a platform?

[gaunt lava]

I fcked up my streak yesterday

yeah

is there any way to fix it?

[broken bear]

Email [e-mail]

[gaunt lava]

thanks

gonna do rn

[broken bear]

Remember that it goes to a mailbox checked by a human that has a fairly substantial backlog

[gaunt lava]

uff

well, I just hope it somehow works out

[open pawn]

whats the main reason to use tor

and i got parrot os working, im good

[uneven wind]

hi i need help why did my streak reset, yesterday i did answer questions

[sick hull]

Hi - where can i see a list of my active machines? I'm not able to start a machine as the prompt says i have another active machine running

[weary elbow]

Why it's not showing public IP

[weary night]

Hey, I'm trying to connect through open vpn using the configuration files which is getting connected but it is not showing in the ip of my machine in tryhackme webpage and because of which i am not able to complete the rooms. There is one more issue but i will ask this one gets solved.

[lament trout]

@weary night can you browse 10.10.10.10 after connecting to VPN?

[weary night]

yes

but still when i check the access page there it is showing not connected

[lament trout]

does the room you're trying to do work though? @weary night

[weary night]

no

[lament trout]

can you show what you're trying to do that doesn't work?

you gotta verify to send screenshot here.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[weary night]

okay

give me a min

[urban wraith]

Maybe you think openvpn is working but it's showing error message

Cause it happened to me once

I was trying to connect on both my host and guest os

[inland seal]

Hi! I am trying doing the day13 of AoC3. The rdp connection keeps breaking frequently when I am trying to solve it... Any solutions?

[vapid lily]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

Are you using the AttackBox or an RDP client on your machine?

[inland seal]

Tried both methods... for rdp client I used xfreerdp as well as remmina... But same results on all 3 methods...

[naive dust]

I've used remmina for that task and it worked fine. Perhaps playing with this configuration in remmina could help you.

[civic crest]

anybody have any ideas?

because it sure looks like I specified them

but it works (in directory mode) when I don't include the "dir"

[celest wadi]

can you try without the "" and :3333/

[civic crest]

I was trying it without the quotes, but how else am i supposed to specify port 3333

[celest wadi]

only the -w without quotes

[civic crest]

this is what i got to work

[celest wadi]

Yeh, thought so

[civic crest]

I thought that you had to specify dir mode

[celest wadi]

there's by default, I think

[civic crest]

huh, I had to specify it in the past

[celest wadi]

you've removed the quotes so this works

[civic crest]

it was also not working with the quotes

it was removing the "dir" at the beginning that made it work

[celest wadi]

do you know ffuf?

[harsh drift]

Alfred exploiting jenkins keep crashing when i use the powershell

[inland seal]

This solved it... Thanks!

[scenic torrent]

Gave +1 Rep to @lone karma

[urban wraith]

gobuster dir --url http://10.10.95.170/ --wordlist /usr/share/wordlists/wfuzz/general/common.txt -x /usr/share/wordlists/wfuzz/general/extensions_common.txt -t 400 --no-error
I use this as default syntax

[bronze ocean]

does anyone know how to run a c script with radare?

because i tried dc and it crashed

[celest wadi]

you have to compile c script to generate a binary

you open that with r2 -d <c binary>

[opaque lagoon]

how long do your nmap scans generally take when scanning every port (not checking service versions etc.)

[bronze ocean]

i actually have one,im doing the buffer overflow basics room,but when i run dc while analyzing the binary,it floods my terminal and crashes

[opaque lagoon]

I'm trying to estimate how long it'll be, so far it's been about half an hour

[urban wraith]

maybe 30 munites

[opaque lagoon]

Cheers, I'll give it a bit longer then

[celest wadi]

-p- takes more than 20mins depending on response time

[opaque lagoon]

yeah

[celest wadi]

you did aaa?

[bronze ocean]

yep

[opaque lagoon]

oooh, I saw a really good pdf on buffer overflows actually

[celest wadi]

dc runs until breakpoint right?

[opaque lagoon]

my uni sent it in the course discord, was really quite cool

[bronze ocean]

i think so,but i thought that without setting any breakpoints it just runs the program

because i need to input 15 bytes into a function

[celest wadi]

no no

it works with db

[bronze ocean]

ahh ok

but how can i pass arguments into the function of the binary?

[celest wadi]

"pdf @main" and set db at mem addr

[bronze ocean]

okay,but at the memory adress of what exactly?

[celest wadi]

it asks I think

when you run it with dc if it passes an input argument

[bronze ocean]

ok i will try that,thanks!

[celest wadi]

well before jne condition mybe but I'd have to look it up to know more

[bronze ocean]

https://tryhackme.com/room/bof1

it's this room

task 6

[celest wadi]

there's lots of documentation given about this

make sure you read it all before going to the challenges

[bronze ocean]

i actually read it

i did the intro to assembly as well

but i just forgot how dc

work

s

[bronze ocean]

I did and i understand the whole theory,just running the script made me go crazy tbh

[celest wadi]

yeh, it took me a lot of time learning about reverse engineering, too

[bronze ocean]

i've been wraping my head around the theory for 2 days,it felt overwhelming and i felt quite stupid when i didnt get it,but im gonna go further

[celest wadi]

Good luck!

[bronze ocean]

do you recommend any materials that could help me more?

because i really want to have a solid understanding of buffer overflows

and reverse engineering

as well

[celest wadi]

Most of what I learned was from reading web documentations of stuff I didn't get

but @opaque lagoon posted a book about it in #resources so you can check that out, I guess

[opaque lagoon]

yeah, you might have seen it but if not definitely is worth checking out 🙂

it has examples etc.

[spiral cypress]

Hey, unfortunately i can´t download my vpn configurations file. It always jumps to the error page 404. Anyone have an idea?

[lament trout]

@spiral cypress try changing the server?

[spiral cypress]

🙄 it works. Thanks

[young dove]

Could someone help me with my post in subs-room-help, I'm stuck

It's a fundamentals room

[untold birch]

Not sure if this qualifies as a technical issue, but I just lost my 22 day streak, and it's been 18 hours since I last completed a question... I got back to the site, still had the 22 displayed, answered a question and had it reset to 1

[lament trout]

highly unlikely that you lost it solving 2 questions within 18 hours, you can send a mail to support and ask them to retrieve it.

#site-support message

[untold birch]

I've done the AOC every day, which makes it even stranger

I'll do that. Thank you 🙂

[mystic reef]

Help pls 🙂 absoluetly no one of the subdomain enum tools works for me 😦

[naive dust]

Post the command you are running, and someone might be able to help you. :)

[mystic reef]

So I just tried to use "Sublist3r" . It runs as well BUT it wond find anything

then I tried to use wfuzz and subbrute

[naive dust]

I am not familiar with Sublist3r. I just use ffuf

[mystic reef]

same result

[naive dust]

Do you have ffuf installed on your machine? @mystic reef

[mystic reef]

thank you for the idea with ffuf 🙂 worked just fine!

[scenic torrent]

Gave +1 Rep to @lone karma

[devout trail]

how can i send a photo here

?

[stiff nebula]

click the plus sign and then select "upload a file"

or.. if you have it in your clipboard, just hit Ctrl+v

[devout trail]

static labs try hack me . cloud , sign in feature says
i dont have permission to create a account

[devout trail]

idk but its not showing in this server

[devout trail]

i dont have

idk

[stiff nebula]

interesting...

[devout trail]

like verify smth

?

beatbot ?

[stiff nebula]

oh, maybe thats the reason 😄

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[stiff nebula]

just follow the instructions and you should be good to go

[devout trail]

;)

[devout trail]

soooo this one

from

[lament trout]

that is the intended behavior of the page.

follow the further tasks.

[stiff nebula]

F12 in your browser

[devout trail]

oh , i thought that was bug lmao

[violet vale]

Are there any web attack boxes that run off a US based server?

[plucky portal]

I need to update my CC for my monthly membership but can't find where to do it on the website. Help?

[ruby comet]

Related to todays AoC-task: Have anyone had issues getting oledump.py to work on your own kali? - it says i require "olefileio" module to run but even tho i install that via pip it still gives the same error

tried both as my normal user / as sudo and with pip and pip3 - still nogo

[ruby comet]

nvm 🙂

If anyones cares: #!/usr/bin/env was set to "python" in the oledump.py file - changing it to python3 did the trick

[devout trail]

should i encode from here ?

i saw this in hints

so

[crisp cedar]

hey so. On the room https://tryhackme.com/room/weaponization I just cant access the port 8080

not from the attack box, not from the windows machine, not from my own using the vpn. The nmap only accuses port 3389 even after 5 mins, even after 30 mins, even after 1 hour

I've reseted it thrice and still cant access the portal for the last task

[crystal marlin]

Check one of your sub purchase emails, on the bottom of that email there should be a link to a sub management page, I think you can do that there.

[plucky portal]

Thanks - will do.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[plucky portal]

That did it - thanks!

[forest yoke]

hi guys

i am in the room of network services 2

thrid challenge

I did

mkdir /tmp/mount

but i get this kind of error

[crystal marlin]

Wrong share name

As well as you don't specify a directory to mount to

[bronze vale]

Also make sure you're using the right IP address, you should not at all be using the ip address in the hostname (root@ip-10-10-39-114)

[forest yoke]

how do i

[pulsar sparrow]

@forest yoke mount -t nfs <remote share> <local folder>

so like sudo mount -t nfs 10.20.30.40:someshare /mnt/mountpoint

also make sure someshare is the name of an actual share on the NFS server

the /mnt/mountpoint can really be anywhere you want (and the folder has to actually exist)

[forest yoke]

ohhh

i didnt notice

thank you so much

[vital summit]

im trying to connect to tryhackme through an open vpn on a VM for the first time and cant figure it out if anyone can help

[naive dust]

Since you're already in the Downloads folder just do sudo openvpn <yourfile.ovpn>

However if you still want to give the absolute path you need to put an extra ~ before the first / of your path

like ~/Downloads/yourfile.ovpn

[vital summit]

thank you so much

[scenic torrent]

Gave +1 Rep to @soft thunder

[naive dust]

anytime

[iron galleon]

I have been trying to upload a Ubuntu 18.04 VM (in the form of a vmdk file) and keep getting a conversion error. I want to get more information about what went wrong but the "Check prerequisites" link just redirects to the Upload page. Is there a way to see the error message? Thanks

[abstract reef]

hi guys , i don't know why can't display web pages for tryhackme machines after i deploy them , my openvpn well configured i tried to restart but nothing changes , otherwise i can ping the machine and can some stuffs like curl or nmap ........ 😢 anyone can help please !

[naive dust]

Please share a screenshot of your browser after trying to load a machine's site.

You would need to verify to upload screenshots.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[abstract reef]

@naive dust nothing appear jut keep loading with white page

[naive dust]

I understand right that you can communicate with the machine's IP in the terminal but not in the browser?

[abstract reef]

@naive dust iyes exactly

[naive dust]

Ok. Start your OpenVPN connection and try to go to 10.10.10.10 in your browser.

[abstract reef]

okay let me try it

[abstract reef]

worked fine , a flag appear
flag{connection_verified}

[wheat plaza]

Sooo.. I just lost my streak because I'm not on UK time. Is there any way to change it?

[naive dust]

To change your timezone?

[abstract reef]

everything works fine but the page still loading btw

[naive dust]

So, you are connected. I don't see why you should not be able to connect to machines.

[wheat plaza]

Yes, or any other option to not keep losing my streak

[abstract reef]

also it's still loading , is that normal ?

[naive dust]

https://tryhackme.com/api/user/update-timezone

[naive dust]

I don't know about that. Does it display at the bottom your VPN IP?

[wheat plaza]

What kind of sorcery is this? It came back!

[naive dust]

Glad for you, man

[abstract reef]

no that section is empty , there is no vpn ip

[naive dust]

Hm. Run ip a in your terminal and tell me if you see any tun0 interface

[wheat plaza]

And now it shows my country's flag! Thanks man, you just made my day!

[scenic torrent]

Gave +1 Rep to @lone karma

[abstract reef]

tun0 appears an ip address

[naive dust]

Do you have any other tun interfaces there? Like utunX or tun1 ?!?!

Are you running in a local VM?

OS?

[abstract reef]

vm

[naive dust]

Kali?

[abstract reef]

yes

[naive dust]

and tun0 is your only tun appearing?

[abstract reef]

i have lo , eth0 and tun0 that's all

[naive dust]

@abstract reef what happens if you ping 10.10.10.10 from your terminal?

(in a new terminal, let the openvpn running)

[abstract reef]

it pings fine

[naive dust]

@abstract reef so when you go in your browser to 10.10.10.10 at the bottom it should show the same IP as you saw in ip a
Try again, maybe

[abstract reef]

i try again but no showing any ip address

[naive dust]

Hm. I can not think of anything right now.
You are connected to the VPN, but your browser is malfunctioning.
Let's wait for someone to help you with that here.

[abstract reef]

okay , i hope because i really get tired of this problem , i tried also with windows but the same , feelsbad

[naive dust]

I just want to make sure. You are launching the browser from within the VM or from your host OS?

[abstract reef]

from my vm , i tried also to download openvpn on windows and the same problem appear

[frigid hatch]

How do we report an error? I could NEVER get the RDP session to connect... "CONNECTION ERROR
The remote desktop server has closed the connection because it conflicts with another connection. Please try again later.
Reconnect"