site-support

[crystal marlin]

So restarting it again might be worth it

[turbid vessel]

wtf

can you explain me why it works?

works$

if i understand the target machine don't receive packets because it's too large ?

[crystal marlin]

So you received a session now ?

[turbid vessel]

yes thank you

but can you give me an explication please ?

[crystal marlin]

Well maybe your internet connection is not the best and therefore a smaller packet size helped, so I can't give you an exact explanation.

[turbid vessel]

ok ok anyway thank you dude

[buoyant sparrow]

Is anyone able to recommend a good note taking application? I have been using CherryTree but it has just lost my save file for a 2nd time

[light vale]

I use Obsidian but there are a lot of good ones, Notion, Evernote, Trilium, depends on your preferences, i tried most of them but ended up sticking with Obsidian...
Check some Youtube videos if you are not sure, to make an idea of them..

[buoyant sparrow]

Thanks, i will look them up 🙂

[scenic torrent]

Gave +1 Rep to @light vale

[light vale]

No worries

[ember kindle]

hi i would like to disconnect my token

need to link it to my new account

[neat plank]

DM to THM admins or mod

maybe they can help you

[ember kindle]

we are allowed to do that ?

[neat plank]

Yes

[ember kindle]

thank u

[neat plank]

The bot tell that

So i think we can

[stable harness]

How long should it take to start the attack box when premium?

[naive dust]

Not long.

But then, I haven't used it in months due to VM.

[stable harness]

VM ?

I just paid for premium but still having to wait 90 seconds for attack box and 60 seconds for ctf box to come online

[rocky adder]

It still takes time to boot those boxes up regardless. The difference however is that your attack box is faster and with no time limit anymore.
VM being Virtual Machine.

[hushed bronze]

do you use vpn on host and vm or just host

[crystal marlin]

Is this a question or you reply to someone ?

[hushed bronze]

question,

[crystal marlin]

You use the vpn only inside your VM, so not on the host and VM simultaneously nor just on the host.

[hushed bronze]

and is that for any time im using the VM?

not just for THM?

[crystal marlin]

Well this channel is for tech related questions to THM, so I assume your question was about using the THM vpn ?

[hushed bronze]

yes it was but then i got curious about overall use.

[crystal marlin]

I mean if you are using your VM for other things that have nothing to do with THM, there is no need to run the vpn as you anyways can only use it to connect to the thm network. So any site you browse that is outside the thm network, the traffic won't go via the vpn.

[hushed bronze]

i was talking about like a nordvpn.

[crystal marlin]

That's outside the scope of this channel, but I would also run it the same way, so directly inside your VM.

[hushed bronze]

thanks. sorry for the confusion

[simple needle]

hey

i need help with upgrading my reverse shell

i entered python -c 'import pty; pty.spawn("/bin/bash")'

then i backgrounded it using ctrl+z

then i entered stty raw -echo

then fg

then i pressed enter two times

but nothing happens

when i press enter

it just types in ^M

[bronze vale]

@simple needle Try stty raw -echo; fg and press enter twice instead of doing them separately

[simple needle]

okay i will

it worked thanks man

[bronze vale]

@nimble comet

[umbral junco]

Hi, i want to change my nationality in my profile in THM. I cannot change it in settings. What can i do to fix it?

[crystal marlin]

#site-support message

[umbral junco]

Thx 👍

[scenic torrent]

Gave +1 Rep to @crystal marlin

[mellow horizon]

Several pictures in the Throwback room do not seem to load due to an access denied error on pixabay. Where can I best report this

[quartz mulch]

Can I pause my subscription ?

[slow falcon]

are you having problems with the virtual machines?

tried 5 times, i have no internet problems , gonna try with another pc on another network

yeah i think it's my connection, can't connect to my other pc

fixed hehe

[bronze talon]

Hi, I am trying to access the OpenVPN file via the terminal and i get this message error 2022-01-23 23:43:07 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
2022-01-23 23:43:07 Exiting due to fatal error Using a (cloud server) docker Kali (Kasm) Any solutions? Thank you

[neat plank]

Maybe choose another vpn?

@bronze talon

[upbeat ether]

I normally use the Attackbox VM by web. When i use it through OpenVPN, does that mean that my PC is also on the THM network and other THM students (and profs?) can see, scan and potentially hack my PC?

[celest wadi]

delete it then 👀

[naive dust]

So why are you posting it?

[upbeat ether]

Sure, and there is no plastic in the ocean.

We never went to the moon.

[naive dust]

Always use a VM.

[celest wadi]

The openvpn is tight secure, but uhuh don't say all are "ethical hackers", literally anyone can sign up for free

[upbeat ether]

But what you are saying is : "Yes, you are right"

Because if so, then signing up for free and with a fake email, spinning up a box and get into other students PC's makes THM a perfect launchpad for attacks.

[naive dust]

If you want, I can send you a link about this in DM

[upbeat ether]

PLease

[naive dust]

Sent.

[upbeat ether]

Well, i would expect a platform like THM to be safe, but ok. My wrong perception.

[naive dust]

Everything is relative. Like using a knife is safe...

And what if someone asks for help here and (by mistake) posts his instance's IP?

[celest wadi]

It's not that easy tho, I've tried hacking my own thm ip through another machine, literally impossible

Yeh

[upbeat ether]

You know, on one side THM teaches you VERY VERY basic networking, Windows and Linux skill, therefor giving the impression that they are OK with having absolute beginners on their network. And from the other side they tell you "you have to know what you are doing when accessing a hacking platform". That just doesn't match.

You don't get my point.

Which is ok.

I was never good at explaining things that concern me.

that's good.

I AM not afraid of these things. I look at it from a conceptual point of view. You just cannot leave all students open to a potential 0-day, annoying scanning, etc. Even if it doesn't happen, apparently. It's a concept thing for me. What could go wrong if THM would give us our own isolated environment with endpoint, attackbox and target isolated from the rest of the network?

At least you would not get annoying but true articles and videos on the net telling people that the THM platform is crap and unsafe.

Anyway, we are going in circles. I have to go to my next customer meeting.

Keep up the good work!!

[surreal kelp]

Hello guys

I have to problems.

1. I'm trying to access the openvpn configuration file but they keep giving me the 404 error. I have tried deleting my browser history, my caches, cookies everything but nothing's changed.

2. I'm currently in beginner path and now doing Network services room but when I try to run a simple nmap scan for enumeration in the attackbox it gets stuck Starting nmap.

Any help would be massively appreciated because my streak is gone and I'm falling behing my learning objectives.

Thank you

[light vale]

Follow the instructions from the below link, it should work after....
#site-support message

[tired basin]

Hi guys, I'm unable to connect to thm network through openvpn, I downloaded and ran the Mandy's script (openvpn-troubleshooting script available in the GitHub) but it returns 'Something went wrong -- please ask for further assistance in the TryHackMe discord...' Can you help me?

[crystal marlin]

Verify and show a screenshot of the openvpn output you receive when trying to connect. So not the output from the troubleshooting script

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[tired basin]

I've verified

[crystal marlin]

Seems you can connected just fine, beside having multivpn. So just do sudo killall openvpn then connect to the vpn again, wait a minute and check ip a s to make sure you only have a tun0 interface and not any extra like tun1, tun2 etc.

[tired basin]

Okay but it's showing that I'm not connected in the access page..

[crystal marlin]

#site-support message

[tired basin]

Oh, Thank you!!

[timid rose]

how can i buy tryhack me premium? becouse it only gives me the option by paying with creditcard and i dont have one.

[crystal marlin]

Paypal should be available as well

[languid rover]

does anybody know how to configure nat on a cisco router?

[timid rose]

yes i only have a credit card option there aswell..

[crystal marlin]

I guess that's something you have to talk with paypal about

[timid rose]

ye i will i hope you guys add some more stuff in the future like ideal ans stuff.

[languid rover]

please help?

[crystal marlin]

I'm not staff or something. So for things like that you might want to use #feedback-and-ideas

[crystal marlin]

How is that related to THM ?

[languid rover]

i am sorry wrong discord

please dont ban me

i apologize for beeing in the wrong discord😟 😔

[crystal marlin]

I doubt you will get banned for that 😄

[languid rover]

okay thanks

[scenic torrent]

Gave +1 Rep to @crystal marlin

[marble cobalt]

Hi, I hope its fine to ask here because its not going to be why I can`t to connect to VPN..

So my question is, I make upgrade to my kali Linux machine, and I have ping to google, but my Firefox not working well...
I get this error on the picture. I try to ask google but I don`t find any answers.|

Someone here get the same error after he upgrade his machine?

[lofty quail]

How do I unsubscribe? Under Profile I read "Your subscription will end on: Feb x, yyyy" but there is no Cancel button

[bronze vale]

That means you subscribed with a voucher, it will cancel automatically at the end of the term 🙂

[marble cobalt]

https://tenor.com/view/peter-griffin-family-guy-oh-well-nevermind-then-nevermind-forget-it-gif-17476042

[sullen matrix]

Hi
I bought 3 voucher (6 month each). Money got debited.
And later, account got suspended and revoked the vouchers too

😑

[zealous yoke]

#site-support isn't the place to ask, this channel is for tech-support related to THM only. #general would be better. However as you're here, this could be due to:

1. low resources such as RAM or RAM available (i.e. too many apps or tabs open, chrome is notorious for this)
2. an extension / plugin could be causing the browser to crash

[sullen matrix]

I gave them as a giveaway, and now I am being pointed for getting their account suspended . Their Voucher got revoked. And now I can't access the page where my voucher info is shown

[marble cobalt]

nevermind, I fix it and my firefox is working well , thanks 🙂

[scenic torrent]

Gave +1 Rep to @zealous yoke

[sullen matrix]

I along with other user(who got the voucher from giveaway) mailed. But no reply.

[zealous yoke]

Hey, i'd recommend emailing [e-mail] regarding all of this and explaining your case as best you can. Provide receipts of your voucher purchase (such as billing and more usefully, the emailed receipts you get from THM.) I can't give you answer as to what'll be the outcome especially as I have no idea what the ban was caused by (and don't really want to know as I can't do anything about it anyway to be totally honest)

@sullen matrix

[sullen matrix]

I mailed. Waiting for reply.

Anyways, Thnx @zealous yoke

[zealous yoke]

Send an email every 24 hours (: they'll get back to you. Not ignoring you because they want to

👍

[sullen matrix]

😄

[zealous yoke]

It's also very likely in this case that a decision needs to be made / other people involved such as the owners

so it could be that support are waiting for the decision to be made before replying

[sullen matrix]

Understood 😁

[zealous yoke]

/ investigated (:

all the best!

[sullen matrix]

Thnx

[naive dust]

Hey dudes, is room hints active? I've got an older relative who's getting stuck a bit, and I'm not sure where I can point him to.

And actually not just room hints, but what ways can I help the person find better explanations for the topics they get stuck on? So like a solution is cool, but we need an alternative explanation. Maybe like YouTube search, or like what? Just trying to understand the topic from a different pov.
Any tips?

[crystal marlin]

Well it mostly depend on what he get stuck with. But google stuff to find answers is the most obvious one. Or using one of the support channels to ask your room specific question. #room-help #room-hints

[fierce vortex]

Like I was saying

I provided the correct path /Downloads/file

when I did the sudo openvpn /Downloads/file

[crystal marlin]

Hm?

[fierce vortex]

I'm trying to connect my VM to the tryhackme OpenVPN

but its giving me the options error...

[crystal marlin]

What directory are you in right now?

[fierce vortex]

the downloads

where the ovpn file is

[crystal marlin]

If you already inside the downloads folder you can not specify the path as /Downloads/file

[fierce vortex]

so do i just put the file name?

[crystal marlin]

Yes

[fierce vortex]

Yea it worked

So with that im connected to tryhackme vpn

and I can continue the rooms?

Nice

Thanks.

[crystal marlin]

If it successfully connected you, then you can yes. You can verify that by opening 10.10.10.10 in your machines browser.

[fierce vortex]

Its not loading....

Yea......

[crystal marlin]

Did you close the terminal where you ran the openvpn command or pressed ctrl + c in that terminal ?

[fierce vortex]

I need to have 2 open?

I did it all in one.

[crystal marlin]

Ye, just let the terminal where openvpn is running open and leave it alone

[fierce vortex]

I dont have it open

I only have one open

How do I disconnect?

God knows where I'm connected too.

[crystal marlin]

Ye, so just connect to the vpn in a terminal, then leave that terminal alone. For any other tasks you do, just use a new terminal.

You disconnect with ctrl + c in the terminal where openvpn is running.

[fierce vortex]

Nice.

All I did was clear

and sudo openvpn file

No longer need to touch the terminal correct?

[crystal marlin]

Ye, the terminal where openvpn is running.

[fierce vortex]

Yep I ran it

and 10.10.10.10 is still loading......

[crystal marlin]

Enter ip a s in a fresh terminal and show me the output with a screenshot pls

[fierce vortex]

no hack me plz XD

[crystal marlin]

That's it ? Then you are not connected

[fierce vortex]

Does it work even if I'm using express VPN in my main OS

Let me connect again

[crystal marlin]

Well probably not the best to use a vpn on your host machine as well, but you might noice if it causes issues. But at that point that's definitely not the reason.

[fierce vortex]

now I'm connected?

[crystal marlin]

Right, looks better now 🙂

[fierce vortex]

10.10.10.10 still loading...

[crystal marlin]

I mean, you are leaving the terminal where openvpn is running alone, right? You not pressing ctrl+c nor you close that terminal?

[fierce vortex]

nope

still open

[crystal marlin]

Check ip a s again

[fierce vortex]

Should I disconnect my OS vpn?

[crystal marlin]

Is there still a tun0 interface and not any extra like tun1, tun2 etc ?

[fierce vortex]

yea

tun0

and tun0 up

[crystal marlin]

Ok, well if the page still doesn't load then turn off the vpn on your host machine and try again

[fierce vortex]

Alright

it was express vpn

im in

does that mean Express VPN is just too gud?

[crystal marlin]

No, that probably means it's not the best to use a vpn over another vpn 😄

[fierce vortex]

thanks a lot

Now I can go beat some new knowledge into myself via Network Services 2 Room

[crystal marlin]

You are welcome and good luck 🙂

[naive dust]

yo why is my nmap scan taking so long (5 plus minutes)

sudo nmap 10.10.#.# -p- -sS -T5 -n

[crystal marlin]

What means 5+ mins? Does that mean 60 mins, or 6 mins or 30 mins etc. ?

[naive dust]

meaning it's been over 5 minutes

My scan just finished... took 12 minutes..

[crystal marlin]

Well there is a big difference if it's taking 60 mins or 12 mins. But 12 mins still sounds fine.

[naive dust]

whats the average scan time for full ports just using syn/ack

[crystal marlin]

Well that could vary pretty much, but up to 15 mins sometimes sounds still fine.

[naive dust]

Thanks 🙂

[scenic torrent]

Gave +1 Rep to @crystal marlin

[light chasm]

Hey all - very noob question here about the attackbox. I'm a THM subscriber and I'm trying to figure out if my attackbox is persistent...can you help me? Two tools I installed in a previous session of the attackbox seem to still be available on the command line in the attackbox but I'm not 100% if those tools (inix and remmina) are default installed on the ubuntu boxes anyway. Any insights?

I did try a bit of searching around for this answer but didn't really find any helpful articles or posts. Links are welcome if this is a solved problem / question. Thanks!

[zealous yoke]

Hey, no, your attackbox is not persistent (:

It books from a base image every deploy

Consider it like booting from a snapshot if you’re familiar with that aspect of VMs

[light chasm]

That's helpful - thanks! By any chance do you know for sure whether or not inix and remmina are a part of that attackbox image? I thought I had installed those custom but I booted up an attackbox this afternoon and those two tools seemed to be there and working already... it was weird (especially because I had assumed up until today that the attackboxes were, as you confirmed, not persistent)

[scenic torrent]

Gave +1 Rep to @zealous yoke

[zealous yoke]

It’s possible that inix Is a default thing, I’m not sure actually but I don’t remember ever installing that specifically

Remmina should definitely be installed on there though (that isn’t default)

[light chasm]

Fascinating - thanks for the insights here! Super helpful

[zealous yoke]

No worries (: more than welcome. All the best!

I maintain the attackbox so

Out of pure curiosity, what would you be using inix for?

Just to find out hardware specs?

[light chasm]

Legit! Feelin' lucky that I got directly to the right person! Yeah, I'm very (very) new to linux and I just didn't know where I could get all the system info in one dump. I googled a bit and people seemed to be recommending inix. I found it super useful!

And it was super easy to install. Then one easy command to get the dump

inix -F

[dark flower]

Hey I'm trying to connect through my openvpn3 service on linux, but it wont properly connect and is stuck with Status: Connection, Client Connecting

Any idea what could be the issue?

I can connect with my windows machine just fine

[warm birch]

Hi all Im having trouble connecting to US-East 1. I am getting this error after regenerating a VPN file and changing the region, any help?

[livid cradle]

I am still having trouble gaining remote access to secure shell to the Linux machine in task 14 of the “what the Shell?” room.

[fast urchin]

who here is in charge? who is it that can help me?

Or better put, where do I speak to a live person who can troubleshoot issues i am having?

The practical on the website DNS in Detail is not working properly. I cannot understand the subject matter as well. I don;t know how to get discord to let me voice chat. I want to speak to a person. How can I speak to someone? Does someone want bitcoin for money to help me? is the membership to tryhackme not enough? Do you want more money?

[zealous yoke]

Hi, that really isn’t the case. Everyone in the discord (bar THM staff and we don’t really frequent here for tech support, etc, outside of the emails) are volunteers

I’ve answered you #room-bugs message

It’s not a pay for support service — that’s not how we do things at all. It’s just a fact that there’s 900k users on the site and 113k discord users all who might have an issue with something at some point

I absolutely promise you that you’re maybe not getting the answer that you want because you aren’t paying enough

[plucky vault]

I apologize for the delay but this didn't resolve the issue

#site-support I am having one solid issue. My attack boxes no longer work. There's no error message and all I get is failed to connect to server. The hard refresh of the page didn't help and another browser didn't help either. Please assist when possible... It hasn't worked in a month and has hampered my training

[neat plank]

I suggest using VM

[queen bloom]

#site-support My THM account got banned and it asks me to reach out to support. I don't know what happened. Can any staff members help me out?

[zealous yoke]

Hey, sorry to hear that. Yes, you'll need to reach out to support and appeal your case the best you can. They'll be able to explain and help out. Bans aren't dealt with outside of that/here (:

[queen bloom]

Thank you for your information. I'll reach out the support team for solving my issue.

[scenic torrent]

Gave +1 Rep to @zealous yoke

[zealous yoke]

All the best!

[naive dust]

Why is there no response to job application emails?

[naive dust]

Hi! I have a question. I recently connected my student email so that I'll be eligible for the student discount, but I cannot verify it. I do not have access to its outlook so I cannot see any emails received. Can this be a problem?

[warm salmon]

Hi guys, just a noob question here. I'd like to cancel my personal subscription and use a voucher provided by my company instead. Is it possible to use the voucher without waiting for my current subscription date to end?

[naive dust]

As far as I know, when you cancel the subscription, you can continue premium until the subscription expires, it just doesn't renew. You can also keep the company voucher and use it after the premium ends. I don't know if the time is added in a row.

[warm salmon]

Alright, got it. Thank you for the info

[scenic torrent]

Gave +1 Rep to @lofty trellis

[fickle mauve]

Hello everyone does anyone know which email to contact to restore my premium and restore my account

[light vale]

[e-mail]

[icy delta]

whois function not working in the network vm

[crystal marlin]

What VM you are talking about ? The target machine or the attackbox ?

[naive dust]

Can't make an http server on port 80 with my attackbox, which is needed for an attack. Any way that I'm able to safely close the port?

[marsh umbra]

Guys how do i get student on thm

[keen scroll]

You could use any other port, is 80 a requirement?

[naive dust]

It is.

Box doesn't make requests to the attackbox otherwise.

[keen scroll]

You could run netstat -plta | grep 80 and then get the PID and kill -9 $PID
IIRC, there is a web server which runs on port 80

[marsh umbra]

We dont get student in our country at least for now how do i get discount then?

[naive dust]

Ah, it's not even the port.

"Address is already in use."

Yet...I can make an http server on quite literally every other port.

Nothing comes up in netstat.

[naive dust]

Are you trying to accomplish this with python's http.server?

[naive dust]

Mhm.

[naive dust]

Maybe try running ss -tulpn | grep 80

I killed it, disconnected from attackbox.

Lovely.

[celest wadi]

why not just transfer the files from your base/local system, python runs on windows/mac/linux 🤷‍♂️

[naive dust]

Can’t at the moment, loaner laptop. My motherboard died.

Was a good few years of use, now it’s just plastic and metal.

[celest wadi]

have u tried changing the port in the payload to 8000 or smthng

[naive dust]

I have.

I've done 8000, 8080, etc etc

No requests

[celest wadi]

what payload is this? also did you use http://<Ip>:8000/ or simply <IP>:8000

[naive dust]

It's a chron job, I just changed the hosts file.

Other friends were able to do it with port 80, never 8080 for some reason.

[celest wadi]

welp, that's as far as I know then
Good luck

[crystal marlin]

What about you ssh into the attackbox so you can just kill port 80 on it?

[naive dust]

That works. Cheers.

[ocean spindle]

Anyone know how to get the vpn connected on meow? My cmd doesn;t like the command

[slow falcon]

vulnversity is broken or am i doing something wrong? can't open the page

[naive dust]

1. Try ping to see if the box is up
2. Use nmap and see what port the web service is hosted

I haven't personally done this box so I don't know if it's hosted on a different port or if there is a webservice at all

[crude agate]

Hello stupid question, when I registered for some reason I was registered as being from Romania and I would like to change it for Canada. I tried updating my profile but I am being reverted back to Romania. Thanks userid is Mikadette

[naive dust]

Does anyone have any info about release date(s) of these rooms (all rooms are part of the cyber defense path): MISP, Suricata, Graylog, OpenEDR, Atomic Red Team, Windows Forensics, Reversing .NET apps.

[crystal marlin]

#site-support message

[teal zenith]

I lost my 30 day streak due to medical issue in family 😢 . Can someone help me rest it ?

[crystal marlin]

#site-support message

[bronze vale]

• Don’t use HTTPS

• There isn’t a Webserver on port 80, please perform an nmap scan and go to the correct port :)

[obtuse arch]

Can someone confirm that -> https://tryhackme.com/room/ccpentesting

-> Task 20, last question is a technical error. 99.9% sure I have the right answer however it keeps not accepting it.

FTR I am inputting "smbmap -u admin -p password -H 10.10.10.10 -x ipconfig"

[lament trout]

try using quotes around the strings?

[obtuse arch]

Thanks my error. had to be "admin" and "password"

[scenic torrent]

Gave +1 Rep to @lament trout

[tacit copper]

Hello, does anyone know how to download room's task files into the AttackBox?

[crystal marlin]

If the files only include text, you could just copy paste the file contents to the attackbox, or use scp to transfer them to it. If you are subscriber (has internet access on attackbox) upload them from your host machine to a file hoster and then download them inside your attackbox.

[zealous yoke]

No ETA yet I'm afraid, we got a whooole bunch of things other then those in the works at the moment too ((:

[mellow stream]

Who can I ask about a change to my account? specifically the country shown on my public profile?

Or does it only change, when I put my details into the "About" Section?

[proper ferry]

you can just go to https://tryhackme.com/api/user/update-timezone and it should change it

as this post says

[mellow stream]

ty

[scenic torrent]

Gave +1 Rep to @proper ferry

[proper ferry]

👍

[ember kindle]

hi, i would like to delink my token. the staff cant do that, the mods too, and i cant reach an admin
can someone help me with that please?

[celest wadi]

try contacing a "@""senior mod" then 🤷‍♂️

[ember kindle]

thank u

[scenic torrent]

Gave +1 Rep to @celest wadi

[naive dust]

how to embed tryhackme profile in github readme.md ??

[cedar drum]

the room named fileinc is having a bit of a glitch on task 4 question 1

every time I put in an answer that I think is right, it says "uh oh undefined"

[celest wadi]

you can only link your profile but if you have access to web source code(i.e, your site) you can insert a js script

[crystal marlin]

Are you running bitdefender on your machine ?

[cedar drum]

Yes actually

[crystal marlin]

Then that's causing the issue

[cedar drum]

ah

I added to exceptions, it's working

[naive dust]

i think we can get this like too
tryhackme-badges.s3.amazonaws.com/[username].png
but it's not updated!

[open shuttle]

hello, i am new here. I am trying to connect to the network via openvpn. Even though it "Initialization Sequence Completed", on the site it still says i am not connected. Any help would be lovely, thanks

[celest wadi]

Check this room for help
https://tryhackme.com/room/openvpn

[open shuttle]

yes, i have followed every step, yet it still says i am not connected

[crystal marlin]

#site-support message

[open shuttle]

Thank you, I was indeed connected, it just wasn't showing it.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[naive dust]

I want to delete my account by i forget which email i used even i forget the username. How can i cancel my account? Please i need help

[naive dust]

Alrighty then 🙂 Thanks!

[scenic torrent]

Gave +1 Rep to @zealous yoke

[crystal marlin]

Probably best to email support and search for something so they can figure out what your account is. Like maybe a previous subscription invoice number or similar.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

Anybody else having issues with their attackbox?

I can't seem to connect via the web client or SSH.

@crystal marlin I did it i hope that they can help because i am paying for two accounts the current one and the one that i lost

[naive dust]

You could also contact your bank to block that payment, and it'll most likely be canceled for non-payment.

@naive dust do you think it can work that way?

[naive dust]

I've done similar before. My bank just blocks payments for a specific company from a certain date to a certain date upon request.

You can always call and ask.

Can they block forever

[silent lark]

hi, can someone tell me how to show machine box into split screen ? when i click start box nothing shows

[slow falcon]

i used the correct port later and it didn't work either, tried different ways and it didn't worked
tried entering 10.10.171.173:4444 (for example, i dont remind the port) and nothing
tried using it with https and the port and nothing

[crystal marlin]

It depends which room are you doing

[crystal marlin]

So have you done an nmap scan on the target IP ?

[slow falcon]

yep

[crystal marlin]

And what was the result of that? Maybe put spoiler marks on that message or delete it after I have seen it pls

[slow falcon]

i don-t remember, and i'm in the middle of another room right now

[crystal marlin]

Okay? Well then dunno how to help you if you are not even on that machine right now.

[marsh pulsar]

Hi guys I just wanted to ask if I'm the only one facing this problem, in "advent of cyber 1" Day 9 "Request" I can't access the web page on the fixed IP "10.10.169.100:3000"

[candid cedar]

guys i am trying to use OpenVPN to connect to THM it's not working for some reason. I tried using thm- troubleshoot and I am getting this

[crystal marlin]

How do you know it's not working?

[vagrant iris]

did you download your openvpn configuration packet packet

[candid cedar]

i get this tls handshake fails

and it keeps repeating

i didnt regenerate my config file like 3 times so far

also changed the vpn server

[crystal marlin]

Most likely one of these reasons apply: #site-support message

[naive dust]

how do i access machine via vpn? im connected to vpn but after i dont know what to do to view the machine

im connected to the openvpn via the file i downloaded from the site*

nvm

[void ridge]

After editing my /etc/hosts do I need to restart anything to make it work correctly? I have just been fighting this for the past 2 hours and finally went to the place I know I should have asked first :S

[crystal marlin]

There should be no restart necessary. But what room are you doing ?

[void ridge]

Attacking Kerberos

[crystal marlin]

Oh okay, well I have not done that room. But regarding the hosts file, as far as I know you shouldn't have to restart anything in order for the hosts file to apply.

[rocky adder]

Every time I try to give a longer answer than is probably necessary Fontaene swoops in with the short n sweet approach 😅

[crystal marlin]

Oh, I'm sry 😅

[void ridge]

I can ping the IP associated with the edit and it is there, it just doesn't work with the name I set.

[void ridge]

Thank you 🙂

[scenic torrent]

Gave +1 Rep to @rocky adder

[crystal marlin]

If you are very stuck, you might want to check out a write up. For example John Hammond has a video about that room.

[rocky adder]

Can you share with us what exactly are you editing in /etc/hosts?

[void ridge]

I checked it out actually and he just did exactly as I did and his worked lol.

[void ridge]

I am adding the following:
10.10.xxx.xxx CONTROLLER.local

with the actual full IP instead of my censoring it.

[crystal marlin]

Are you on your own machine or the attackbox ?

[void ridge]

Own machine connected to VPN

[crystal marlin]

If you enter ip a s do you only see a tun0 interface or any extra like tun1, tun2 etc ?

[void ridge]

Only see tun0.

[crystal marlin]

Is your attacking machine a VM ? And if yes, is openvpn running only inside that VM or also on your host machine ?

[void ridge]

It is not a VM.

[void ridge]

The only thing I have not tried yet is rebooting.

[rocky adder]

I found a exact same problem that has been resolved here: https://community.hpe.com/t5/Networking/Ping-will-not-ping-host-name-in-etc-hosts-table/td-p/2487652#.YfHCPOpByUk

The issue lied within: /etc/nsswitch.conf

But it's completely out of my scope of knowledge of why what and how's.
Edit: could be a type, could be a misconfigure (/shrug)

[crystal marlin]

I mean as I said I have not done that room, but beside trying to ping, did you also try to enumerate the target machine with kerbrute?

[void ridge]

I did try to enumerate the machine and received this error every time.
2022/01/26 14:40:00 > [!] [e-mail] - failed to communicate with KDC. Attempts made with UDP (error sending to a KDC: error resolving KDC address: lookup CONTROLLER.local: no such host) and then TCP (error in getting a TCP connection to any of the KDCs)

That error is what started me on this interesting rabbit hole

[crystal marlin]

What if you try to use it like that: ./kerbrute userenum --dc 10.10.xxx.xxx -d CONTROLLER.local User.txt ? Just so you know, I basically have no idea about kerbrute, but just something I found online and maybe worth trying.

[void ridge]

Let me test that

[void ridge]

Ok.... that actually seemed to work.

Now I am confused

[crystal marlin]

Could you send a screenshot of cat /etc/hosts where that command and the output is visible ?

If you want you can send me via DM if you don't want to share it here

[rocky adder]

@void ridge Could you please paste the full line starting with hosts: within /etc/nsswitch.conf
The order is important.
hosts: files myhostname mdns4_minimal [NOTFOUND=return] dns
This means first check files, like /etc/hosts. Then check the system hostname. Then there is mdns4, this module searches the local LAN subnet using Multicast DNS (mDNS), then returns "not found". Basically *.local are some sort of exception that belong to mdns4's or something, Not fully sure. Long story short, change up the order, and you should be good. 😅 I really hope this is it, or I'll be disappointed.

[void ridge]

hosts: mymachines mdns4_minimal [NOTFOUND=return] resolve [!UNAVAIL=return] files myhostname dns

[void ridge]

What command?

[crystal marlin]

cat /etc/hosts

[void ridge]

oh sure. inc DM

[rocky adder]

There you go, files need to be 1st in line, so that it first checks the hostnames from your /etc/hosts.

[crystal marlin]

But I guess regarding to the explanation of MythicalMoon it seems the order is not right

[void ridge]

Ok let me make some changes to it real quick and test again

[rocky adder]

in your case there's a conflict/misconfiguration where it checks your local networks *.local's because of mdns4's which returns a Not found so it never gets to your files (/etc/hosts), where the actual *.local hostname you want is. Or something like that. I just read up on it so i'm no expert. 😂

[void ridge]

Amazing. It works like a charm now.

[rocky adder]

Thank god! Kek unintentional rep 😂

[scenic torrent]

Gave +1 Rep to @void ridge

[void ridge]

How does something like that change? I have edited hosts before and never had it not work.

Maybe an update messed it up?

[crystal marlin]

Well done figuring that out. +rep @rocky adder

[scenic torrent]

Gave +1 Rep to @rocky adder

[rocky adder]

it's because of the *.local tail of the hostname you wanted, if it literally had any other ending and not .local you wouldnt be having that issue

[void ridge]

+rep @crystal marlin Taking the time you did with me was a great help 🙂

[scenic torrent]

Gave +1 Rep to @crystal marlin

[void ridge]

I had spookysec.local in there from a previous room and it worked though lol

That is where I am thinking something changed on my system from the last time I used spookysec.local and now

why*

[rose granite]

i was having a problem with openvpn so i tried openvpn-troubleshooting but the message i got was **[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum **

can anyone help?

[zealous yoke]

Hello hello, there should be a more descript error. Can you send us a screenshot of your terminal when you try to connect via openvpn please? You'll need to verify to send images here -- they'd be most useful!

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

hey, can somebody please disconnect my thm tag from me?

[zealous yoke]

tyty, could you show us the output of when you run sudo openvpn /home/kali/Desktop/Downloads/AKREP003(1).ovpn (double check that I got the path and filename correct there!)

[zealous yoke]

Hey, can you DM please?

[rose granite]

it connects to vpn

bu doesnt acces to machines

[zealous yoke]

Oh cool okay that's something

What machine are you trying to access exactly (a room URL would be useful) and how? Trying to SSH? Visit in your browser? Can you ping the machine okay?

[naive dust]

I cannot dm you. Clyde does not approve 😉

Ok, worked.

[rose granite]

https://tryhackme.com/room/anthem

[crystal marlin]

Did you run an nmap scan on the target IP already? To ping is not reliable to check if you can connect to a target machine, especially when it's a windows machine as they might simply don't reply to ICMP ping

[rose granite]

should i try another machine?

[crystal marlin]

Right, so nmap is telling you to use the -Pn flag if the target machine is blocking ping probes.

[rose granite]

no output

[crystal marlin]

Because it's still running. If you add -vv to your command you can see progress. You can even enable the verbose mode while the scan is running by pressing v, the more often you press it the higher verbosity gets.

[rose granite]

oh ok...

[crystal marlin]

Okay, yet you have scanned only 1000 ports out of 65k+ ports 🙂

[rose granite]

nvm

[lean lark]

Hi ! When i run openvpn, the status of the access page remains unchanged, yet i can connect to the machines Do you know how to solve this problem ?

[zealous yoke]

Hello hello, don't rely on that page too much (it's not 100% accurate). Can you access http://10.10.10.10 in the browser in the device that you're connecting from?

[lean lark]

Yes and i see my ip, all works fine except the display on the access page

[zealous yoke]

Ah yeah - okie dokie -- take that as confirmation of it working

if you can access that page (on http://10.10.10.10) your vpn is working

the connected status on /access will update eventually

or maybe not...depends on the phase of the moon really

[lean lark]

Hum ... ok

Otherwise is it normal i have to pkill openvpn to be disconnected ?

I thought there would be an easier way, it's not complicated, but, i don't know

[zealous yoke]

Depends how you're running it. If it's in the background then I imagine you'd have to do that

Usually a Ctrl + c in the terminal after sudo openvpn <vpnfilehere> works, if not, sudo killall openvpn for me at least 👍

[lean lark]

Oh Ctrl C, thanks

[zealous yoke]

np!

[robust hazel]

This might just be user error but Ive had this reoccurring problem within the tryhackme rooms. Firstly for some reason terminating machines within the rooms hasn't been working for example once I'm done completing a task I hit terminate machine at the top and the little green message comes up saying that the machine has been terminated but if I try to start up the next one it says that I still have one running and refreshing the page shows that the machine that was supposed to be terminated is still running. This makes rooms like OWASP top 10 or really any room that has multiple different machines very frustrating because I have to wait 2 hours between every task. Secondly whenever I have the attackbox or kali machine running whether its in split view or the separate full screen tab the hint button just stops working.

[ancient violet]

so the machines for each room are limited to 1 hour a day for free members right?

[edgy mulch]

yeah you can only use them once a day

[ancient violet]

so what is the openvpn thing for?

[edgy mulch]

allows you to connect to the rooms using your own computer instead of the ones they offer

[ancient violet]

okay so i downloaded the config file and openvpn onto my linux machine but when i open the file the terminal just writes a bunch of stuff and looks at me

[edgy mulch]

mind showing?

[celest wadi]

https://tryhackme.com/room/openvpn
Might clear up some issues

[ancient violet]

thats exactl what i used to do it

yea sure one sec

[celest wadi]

Yeh you're connected

Go to 10.10.10.10 and you'll get a thm flag

[ancient violet]

do i ssh to that ?

[celest wadi]

In browser

[ancient violet]

yea it says im connected

[celest wadi]

Just go to http://10.10.10.10/

[ancient violet]

now i have the room open

on another tab

[celest wadi]

🥳

[ancient violet]

and im trying to get into the machine

but the terminal just stays like how i sent it

[celest wadi]

Open another terminal with ctrl shift T

[ancient violet]

i opened another terminal window on the linux machine

its showing hte local machine in that one

not the thm one

[celest wadi]

Which room is this, and what task are you on?

[edgy mulch]

well Idk in which room you are in but It depends on what you have to do, if you are already connected through vpn thats great but you can show us the instructions

[ancient violet]

okay it might be the room then , let me finish it and ill see if its the same thing on the next one

[jaunty marlin]

Im on Ipad. I wanted to do a bit TryHackMe while in class. I realized that the close button disappeared. Now Im left with this thing.

Damn cant post images

Wait a sec

Cant write the bot

[light vale]

Verify with the Discord bot before you can post pictures.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[jaunty marlin]

The "message" box just says that I cant write blocked users. I dont know if I somehow blocked the bot or the bot blocked me

Im stupid

[jaunty marlin]

This

Used the Attack box

Reloading page didnt help

[jaunty marlin]

Again: Did a room. Wanted to close the AttackBox. Close button wasnt there. Tried to use "shutdown" now its like this

The button appeared again

Closed it

[waxen bridge]

Task 9 in the Burp Suite room (as part of the Complete Beginner path), https://tryhackme.com/room/rpburpsuite, has a suggestion to go to the Learn Burpsuite room for further learning, https://tryhackme.com/room/learnburp. The link results in a message "The owner has made this room private". I suggest removing the link, or directing elsewhere, until the room is public again.

[naive dust]

can u tell me how to??

[celest wadi]

on github or your website?

[thick carbon]

Sorry to be pedantic but that's #room-bugs actually

[naive dust]

on github

[celest wadi]

for github, just your profile link

[lament trout]

@naive dust https://stackoverflow.com/questions/21340803/embed-javascript-in-github-readme-md

[naive dust]

but it won't show a profile badge right?

[celest wadi]

no, for that you need to insert javascript

[naive dust]

like....?

[celest wadi]

"""go to https://tryhackme.com/p/yourusernamehere and click "get profile badge id" it opens a window with the badge script for your username"""

[naive dust]

ohh it was right in front of me!! i knew how to embed but didn't know what to!!

[celest wadi]

it should be like this

[naive dust]

i got it thanks @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

[latent horizon]

Hey guys, why is that, that my country is set to afghanistan but my countrycode is from germany? 😄

[turbid ferry]

I don't know why it's wrong, but there is instruction how to update it #site-support message

[latent horizon]

Of course it is 😄 Thanks - that works like charm

[scenic torrent]

Gave +1 Rep to @turbid ferry

[keen yarrow]

guys i need help

i made the subscription but i stuck to pending payment page

and i cant enter to the premium rooms

what can i do?

[zealous yoke]

Hey, can you check the service that you paid your subscription from (i.e. paypal, your bank) to confirm that you've been debited? If you have, email [e-mail] with your username and the email associated and provide proof of payment, and assuming everything checks out we'll get subscriber status given to you

if you haven't been debited, could be a card issuer problem that you'd need to ask them about? @keen yarrow

[keen yarrow]

thanks mate

[severe kayak]

Hi, I am having issue with payment so is there anyone whom I can talk to about it

[zealous yoke]

Very limitedly here @severe kayak

The support is the best route, we don't really help with payment issues here because of obvious reasons

[severe kayak]

Can I have an email or anything

[zealous yoke]

What's the problem exactly?

sure thing (:

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[severe kayak]

I am planning to buy some gift cards but credit card is not an option and I want to see if THM support to provide invoice for bank transfer

Can u share this internally somehow

[zealous yoke]

Gift cards? Like our vouchers for subscriptions?

We don't do gift cards afaik

we support invoices but it's for our corporate & education clients. Uh. You might be able to email into support? I think it depends on how many you're looking to buy and things to be honest

[severe kayak]

It’s like 420$

Will that work

In 10$ gift card

[zealous yoke]

Oh do you mean gift cards like virtual cards as payment?

Sorry, I'm really confused as to what you mean as gift cards here -- we don't do them

[naive dust]

What about buying vouchers?

[naive dust]

Heelo, we have a team of 4. Now no new ones can join. But one of our team members is not active anymore. Is it possible for me as 'team captain'to remove one and if yes - how? I haven't found it yet.

[glad egret]

That's not a feature unfortunately

[naive dust]

Ok, is it possible for the THM supportteam to remove the team member that you know?

[glad egret]

That I don't know. Feel free to message [e-mail] though!

[bronze vale]

Please make sure not to make another purchase until you have spoken to me over email 🙂

Sometimes when you get to the pending page, you cannot access the rooms and your bank statement doesn’t show that you have paid, but that’s not the case and you get charged for every time you went through the payment window.

[lament trout]

@eager fulcrum

nvm

[waxen bridge]

Posted into the correct channel now. Thanks.

[scenic torrent]

Gave +1 Rep to @thick carbon

[molten axle]

Hi there, I just running through the Investigating Windows room and I keep getting the "Uh-oh" message when entering the right answer to the question "When did John log onto the system last?" I found the question both in the command line and through Event Viewer. I'm 99.9% sure it's the right answer too.

[glad egret]

@molten axle What are you putting?

[molten axle]

I'll DM you in a sec

[glad egret]

👍

[fallen dew]

hello,

So i was doing wreath box last night and suddenly i got disconnected

still now i am not able to ping or connect to server

even i voted for reset

if any one can help me with this?

any mod online?

<@&791417151272517662>

[eager fulcrum]

Please don't ping senior mods without a good reason

Mods are not site staff.

[fallen dew]

oh

i'm sorry

[fallen dew]

but can you help me with this?

[eager fulcrum]

#wreath-network is a channel dedicated to wreath

[fallen dew]

oh

thank you

[eager fulcrum]

I literally just said mods are not site staff. They don't have site powers. They can't do site stuff.

[azure wind]

hi iam trying https://tryhackme.com/room/postexploit but the powerview commands are not working even though i type exactly as in screenshots

any help

?

Thanks

[quick forum]

hello , can I change my username ?

thank you!

[scenic torrent]

Gave +1 Rep to @smoky berry

[candid cedar]

well its not stable it works sometimes and the rest it shows the tls hankshake fails is there a way to bypass that ?

[glad egret]

#room-help or #room-hints and send screenshots please

[ancient violet]

do I have to use openvpn to connect to the IP of my machine using SSH

or can I just go straight in my linux terminal and connect to it right away

[robust hazel]

not sure what im doing wrong but every time I try to run the local exploit suggester in meterpreter my machine just crashes lol

not sure why and its ONLY with that module

I know its common for this to crash your shell but the entire kali vm just dies lol

[severe stream]

Hello guys can anyone suggests ne how to write email to request penetrations testing for there company

[broken bear]

This is not a great place to request help for that. And it's definitely not related to THM VPN help.

[brave loom]

wonder if anyone is able to help , I'm doing Task 11 - the Jewel Challenge the upload vulnerabilities in the web fundamentals room, i was logged onto the box fine yesterday but this morning I'm having issues ( i'm connected to thm via my kali vm and the room machine has spun up and ive followed task 1 ), but for some reason when i load the jewel room today i'm getting a completely different machine, i'm getting the CSE Bookstore room. I've terminated the machine twice and re done task 1 but i still seem to get the same CSE site and not the jewels site. is there something I'm doing wrong ? any help would be appreciated as it worked fine last night

[crystal marlin]

Have you tried to ctrl + F5 the page already ?

[brave loom]

yeah I've done that a few times and cleared the cache in firefox itself, i've just spun it up again and it's the same ( when i navigate to the ip adress give i can see the list of the urls i'm meant to use , this CSE site is there for all the url's in this room)

[crystal marlin]

Then check your /etc/hosts file if you have duplicates in there. In case you have, get rid of all the duplicates so that only the current target machine IP and the host names are left.

[brave loom]

I'll take a quick now and let you know if that sorts it

[brave loom]

all sorted , etc/hosts was my issue. thank you for your help

[scenic torrent]

Gave +1 Rep to @crystal marlin

[jovial cedar]

I want to show my effort at THM in CPEs (credit points earned) for CISSP, etc... Is there a way to get all certficates or rooms at once? Or certain time amounts for these rooms?

[cloud orchid]

deployable machine in https://tryhackme.com/room/linuxfundamentalspart2# is dead 😉 unable to complete room due to dead machine 😄 tried twice both dead

Permissions 101 section

[jovial cedar]

and if I want to show a certificate, can I alter the name again?

[crystal marlin]

What you mean with dead? What have you tried to do ?

[crystal marlin]

#site-support message

[cloud orchid]

The machine has nothing in it like there no operating system installed I tried a few times and it still does not show an operating system which makes no sense as it want you to look for specific files, I linked my own shell using setup script from pins I'll try shortly as on 📱 atm

[crystal marlin]

No operating system installed ? Could you show me a screenshot of what exactly you mean pls ? As I somewhat doubt there is an issue with that room machine

[cloud orchid]

i cant now, as for some reason, even when i do not use the full hour, once i close it out and terminate the machine it wont let me connect again i would not be able to ss it until 12:00 midnight GMT

as not currently a subscriber

[crystal marlin]

Okay, well then once you can reproduce that issue then send a screenshot in here pls

[hard shadow]

hello
i had verified my discord token on old account which i lost acess to.
Isn't their any option to revoke old token and reverify new account?

[crystal marlin]

You have to reach out to a mod for that

[silk oak]

Hello, is anyone else having trouble when using the attack boxes that when you're asked in a room to install something, for example mySQL or secLists you just get "E: unable to locate package" error message. Is this fixable?

[glad egret]

The Attackbox doesn't have internet unless you're a subscriber

[silk oak]

yep, I have internet access, able to browse sites

[glad egret]

Would be good to have your own VM setup

From the Attackbox?

[silk oak]

yep, from the attackbox, its been working ok up till now, just becoming fustrating

[glad egret]

Can you verify and share a screenshot please?

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[silk oak]

Cant seem to attack a picture

[glad egret]

You'll need to verify

Click the link above

[silk oak]

ok cheers

[silk oak]

Here is the screenshot

[crystal marlin]

And the room is telling you that what you have to install is called "default-sql-client" ?

[silk oak]

yep, previous room have also instructed to install seclists - this is not installed on the attack box

[crystal marlin]

Which room and which task is this?

So for the sql one

[silk oak]

https://tryhackme.com/room/networkservices2

Task 9

[crystal marlin]

Ah, indeed. Then try sudo apt update first

Then try again

[silk oak]

No, still the same, after some googling it looks like the sources are not correct, there should be kali ones here...

[crystal marlin]

The attackbox is not kali linux

[silk oak]

ok, that explains that

is it locked down?

[crystal marlin]

Wait

You typed "sql-client" instead of "mysql-client"

[naive dust]

yo bro just to ask a quick question so basically currently my acc was almost hack the best way to do is it by changing my password
i had 2fa on also

[silk oak]

🤨 - that would explain it... Not enough beer consumed today - many thanks.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[naive dust]

Hey, whenver i'm in the attack machine i can't type @ symbol for some reason?
i'm using belgian period keyboard (azerty)

[naive dust]

When i change the lay out in the OS it doesn't affect it

i reconfigured it in the terminal, lets see if that worked

still doesn't work

i fixed it!

i reconfigured it in the terminal with the correct lay out for the keyboard i'm using

[zealous yoke]

Seclists is on the attackbox @silk oak

/usr/share/wordlists

[ancient violet]

If I ran the openvpn file in the background (With &), how can I bring it back into the foreground to cancel it?

I tried fg

[rigid narwhal]

Burp Suite: Other modules
Task 6 Comparer Example

I'm having problem loading the http:/machineIP/support/login

I've already started the room machine

MACHINE-IP.p.thmlabs.com/support/login worked!!
Well if someone can clarify why.. kinda lost
Thx in advance

[rocky adder]

do jobs, check the jobs id , then foreground it with fg %<job_id> when in doubt check the manual 😉

[ancient violet]

couldnt find a man page for fg

I tried killing the process with the PID but when I do ps aux , the openvpn process isn't listed in the listed processes

also , the openvpn process isn't showing in the jobs processes

jobs

i also tried doing ps aux

but couldnt find anything along the lines openvpn

or even in top

[rocky adder]

when you run sudo openvpn <path-to-conf> & it should show in ps aux, but its suspended in the tty output stage, the stage where you need to input password, cuz sudo, duh... so you cant kill the task cuz its not really running yet kinda... from my understanding. but you should still be able to see it with jobs and bring it to foreground with fg %1

and if you actually launch your vpn and then ctrl+z to background it, that works fine. Or look into tmux, a terminal manager/multiplexer or terminator or which ever else alternative

[ancient violet]

im gonna restart it and see if it shows up

so i did the sudo openvpn command with & at the end

ohh wait

lol

that process is running on my local machine isnt it

i was checking the processes on the THM machine this whole time lmao im so sorry

[rocky adder]

its not very efficient to do it with & at the end cuz youll need to foreground it anyway to input password, so its better to run it properly and when its running background it with ctrl+z

[ancient violet]

okay so i see two processes with open vpn now

which process do I kill for it to close it?

[rocky adder]

none of those included the actual config

[ancient violet]

they're the only processes there

[rocky adder]

kill both, doesnt matter, then run it properly xD Good luck soldier I'm off

[ancient violet]

i did ctrl + z and it says stopped does that look right?

yea it's still there

the website to check also says im connected

it says i dont have permission, do i just use sudo in front?

okay btw

its that second process i kill right?

okay and generally when killing processes, i dont have to do SIGTERM or SIGKILL?

ok i did that to both processes

so now when i run ps aux , it shouldnt be there anymore right?

since we killed the process?

[ancient violet]

they are stil there

okay, its weird because the website says i disconnected but the process is still running

[neat finch]

hello , what is the answer of bookface or what is the code?

Hack the BookFace account to reveal this task's answer!...

please

[fervent ether]

my openvpn isnt working i regenerate and still dont works

isnt connecting

idk why

[crystal marlin]

Could you post a screenshot of the openvpn output when trying to connect ?

[fervent ether]

just a sec im updating bc ye idk why too

its all fine

ig

but its say im not in

[crystal marlin]

So the only issue is the access page status? As in that case: #site-support message

[fervent ether]

but

why

ohhh

ok

idk

its work but in website its say isnt working

idk why

but yea

i press f5 five times

and it stills no acess or red flag connect

[crystal marlin]

Ye, I don't know either why it is like that. So you will have to reach out to THM support in case you want to ask about that.

But as long as you can access 10.10.10.10 you are successfully connected.

[fervent ether]

thanks on the same kkkk

[fervent ether]

ok thanks

[scenic torrent]

Gave +1 Rep to @crystal marlin

[fervent ether]

very apreciated

[smoky harbor]

Can anyone tell me how someone could go about getting their OVPN static IP changed?

Regenerating a new .ovpn doesn't do it.

Well, I take that back. It will give me a different IP if I switch VIP servers.

But I wanna keep connecting to the closest one to me.

[rigid narwhal]

I'm connected through OpenVPN and can't access the machine of the OWasp Juice SHop. I'm using a kali VM

The machine of the task is started

now it worked but it's taking too long
my internet seems ok

[naive dust]

Is this definitely the profile you have downloaded?

[indigo raft]

Hi I have one question. If I buy premium for one month, after it expires,
can I use the rooms I've already entered?

[small hedge]

when i connect with openvpn on my VM and when it gets to 2
022-01-29 05:42:44 Initialization Sequence Completed
can I close this ccause i can t type anything in it or i just open another tab in terminal ?

what if i close this tab ?

thanks

[scenic torrent]

Gave +1 Rep to @smoky berry

[zealous yoke]

Not if they're premium/subscriber-only rooms

[fervent ether]

Yes um sure i just change the name to import uk

[indigo raft]

thanks

[scenic torrent]

Gave +1 Rep to @zealous yoke

[proper ferry]

You can CTRL-Z then type bg and hit enter to make it run in the background.

If you don't wanna open a hundred terminals

[rocky lagoon]

hi ı am download openvpn file and conneted but web site dont access

[naive dust]

Which website?

[rocky lagoon]

solution

when i run metasploit in blue i get fail error

[crystal marlin]

If you verify your THM profile in discord you are able to send screenshots, that's going to make things much easier.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[crystal marlin]

Could you show a screenshot after entering options

[rocky lagoon]

ok

wait

@crystal marlin

[crystal marlin]

If you check ip a s in a different terminal, do you only see a tun0 interface or any extra like tun1, tun2 etc? Also does your tun0 IP match the LHOST ?

[naive dust]

Eternal Blue can be a pain to do also.

[silk oak]

Anyone lese have issues accessing the Windows room. Trying to complete https://tryhackme.com/room/activedirectorybasics but just keep getting the error "The remote desktop server has closed the connection because it conflicts with another connection. Please try again later." every time I try to RDP to the server?

[sinful valley]

Hey, I got a problem with the boilerctf2 - I was doing the ctf without any problems for ~90 minutes, then restarted it because I thought I destroyed something and now it stays up for about 3 minutes before it gets unreachable

I have to constantly destroy and restart the machine

Are there any problems with tryhackme atm causing that behaviour?

[ancient violet]

any reason why ssh ing to the tryhackme machine takes so long

its just starting at me

[edgy mulch]

I need some help, I was installing Parrot on a VM but when the installation is over it wont ask for any password and if I get logged out I dont know the password, most likely I did something wrong, so I would appreciate some guidance thanks !

[tight reef]

Hello, I'm having some issues with the nmap room. I'm in the practical section, but instead of giving me an IP to target, it says: ***Does the target (MACHINE_IP)respond to ICMP (ping) requests (Y/N)? *** How do I get it to refresh and give me an IP to target?

[hollow otter]

have you click the Start Machine button?

[tight reef]

Yes, the machine is up and running

OK, I restarted the machine. After about 30 seconds the IP appeared. Thank you @hollow otter

[scenic torrent]

Gave +1 Rep to @hollow otter

[hollow otter]

glhf

[tight reef]

Enjoying it thoroughly! This is a pretty good deal for $10/month

[echo dock]

not sure if this is the right room, but openvpn suddenly stopped working, when opening up the openvpn software nothing appears, uninstall, reinstall etc. any ideas?

never mind, just found it, had to clear the %temp% folder

[dull kraken]

My rank is not updated on the discord server

Here its showing master and my rank is on guru

[crisp jackal]

Hi any idea on how to make the certificate show my full name instead of my username?

[lament trout]

you can update it manually by re-verifying your discord token with the thm bot.

[lament trout]

#site-support message

[wide basin]

Is there a way to "reset" an active machine in a room? When I click on Terminate it says "Your machine has been terminated." but when I refresh the page I still see the machine is alive with the same IP address.

[upbeat bloom]

that is how you do it, although you do have the possibility of having another active machine going. Can you say what room it is and show a screenshot of where you see the IP including the room name it gives?

[crystal coral]

Hello everyone !
1 month ago, I bought a premium membership and today it got auto renewal. How can I stop auto renewal every month? if I cancel my subscription will I get a refund for this month auto renewal ?

[wide basin]

Is it possible to upload screenshots here?

[naive dust]

Hello! If you cancel now probably you won't get a refund but you can send email to [e-mail] and may they can help.

[naive dust]

If you verify your account you can send screenshots. Type "!verify docs" in bot commands to see how to do it.

[upbeat bloom]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[wide basin]

The room is "Thief"

[upbeat bloom]

so thats weird, I can't access that room, if you click terminate, can you post another screenshot?

[wide basin]

But when I refresh I see the same as in the previous screenshot, with the updated time counter

[upbeat bloom]

and it shows 14 minutes or is it less?

[wide basin]

Now It's 7 minutes. I guess I can just wait it out but it's annoying I can't probably reset...

[upbeat bloom]

it looks like somehow you got into a not yet deployed room

not sure if that is why the weirdness

[wide basin]

Not sure if it helps, but I got to this room through here -
https://www.reddit.com/r/oscp/comments/seg1oh/i_challenge_you_to_crack_this_machine_domain/

[upbeat bloom]

ahh ok that link works for me

[stray nebula]

I tried to use net cat to connect my window to the Kali Linux (which run in virtual machine on same windows). I could't make a reverse tcp connection from my Kali to windows

Command used in Kali :
nc -lvp 4444

Command use in windows cmd:
nc.exe <my eth0 inet IP address of my Kali Linux which runs in Virtual machine> 4444.

[stray nebula]

Where should I post this question

[crystal marlin]

If it's not related to a room or thm at all, I suggest #general or #infosec-general

[stray nebula]

Okay✌🏻

[barren birch]

That room hasn't gone through the TryHackMe review process, or been released publicly on the site. As such, it's not one that we can, or will help with. If the creator wishes to bypass the review process and release it publicly via their own channels then they are solely responsible for its maintenance and support 🤷‍♂️

[lament trout]

If a room hasn't gone through the THM review, could it be malicious?
And are the rooms that are reviewed, verified to not be malicious?

[oak patio]

Anyone else having trouble logging in to thm in Firefox? It's a user/pass Auth error but changing the password is no help, and I can log in no problem if I'm using chrome

[sinful iron]

Just logged in, no worries.

ANyhow, I'm redoing HackPark where we use hydra but the syntax is bad. Do you think the hydra syntax changed causing the page to be incorrect? Tried many variations of the syntax, all fails.

[barren birch]

Potentially 🤷‍♂️
THM offers no guarantees of anything for private rooms. They are entirely unendorsed by the company. The review process verifies that everything is above board, works, and irons out any bugs.

Private rooms are designed to be used by teachers, or for private events (e.g. a company using the platform to host recruitment challenges, or a private CTF with THM hosting the targets). In those contexts support is handled by whoever is running the room. Private rooms are not supposed to be shared publicly -- if they are, it's nothing to do with the company or the community.

(Although if someone is found to be uploading malicious stuff, they'll be removed from the platform immediately at the very least)

[thorny osprey]

Can someone enlighten me about the username's rules ? I'd like to change it but I'm not sure about what characters are autorized, the max length and such

so I'm writing an email but I can't really decide

[upbeat bloom]

just try not to be offensive is all that is asked

[naive dust]

ok

[worthy torrent]

hi
what is the best way to expierence thm?
For now I used the web based machines.
but they feel a bit laggy and just a moment ago in the burp room I needed to reset it and so I need to start all over again to do the setup
Do people usually use their own linux systems?

[keen scroll]

Kali Linux as a VM

[worthy torrent]

this means the one in the web site?

[keen scroll]

You own it, you update it, you control it😄
On your system

[worthy torrent]

ah get it

[keen scroll]

Also, refer to #general

[proper cargo]

Hello, today i decide to subscribe to premium but on my profile it says it will renew on 02/03/2022 again. Whys that?

[crystal marlin]

Because that's what a subscription does, it automatically renews?

But you can just press cancel if you don't want it to auto renew on that given date

[proper cargo]

Yea i know what renew is but i subscribed today for a month. Why would i get charged again in 4 days

[crystal marlin]

To me that date would mean 2nd march 2022 ?

[proper cargo]

ohhh haha. You are right, im from the states so I read it completely wrong. Now i understand. Thank you

[sand rampart]

Hello, I am trying to do nmap -sF on a target machine from my own kali through the VPN. when I do the -sF scan I get "All 1000 scanned ports on 10.10.221.40 are in ignored states" as a result. When I do the same scan with the attack box it works and shows the ports. anyone know how I can correct this issue?

I think it has something to do with nmap not showing open/filtered ports

[daring fossil]

what happens when you attempt to go to 10.10.10.10 on the VM?

[sand rampart]

same response

[daring fossil]

no i mean actually going to 10.10.10.10 in a browser in your VM

[sand rampart]

connection is verified with tryhackme

[worthy torrent]

I use OpenVPN via Kali vm
I can ping the IP of the OJuice Shop in Blur Suite room.
But I cannot access it via firefox.
Do I have to modify something?
I made the openvpn via terminal and left that one open

[random grove]

maybe it runs on a different port or needs a hostname

[worthy torrent]

that was it...the port...sorry and ty

[scenic torrent]

Gave +1 Rep to @random grove

[random grove]

you're welcome

[worthy torrent]

strange. it only worked once. no it seems to time out in firefox....

[keen wyvern]

this is a noob question but i cant bring up the site for content discovery on my attack machine . and when I do the curl https://static-labs.tryhackme.cloud/sites/favicon/images/favicon.ico | md5sum it just times out after 4 minutes and 20 seconds . sorry for asking but ive been stuck on that task for three days and I decided to ask for help

[keen wyvern]

on a side note I was able to do the next task no problem so I dont see what im doing wrong

[lament trout]

you can try running just curl https://static-labs.tryhackme.cloud/sites/favicon/images/favicon.ico and see if that works.

[worthy torrent]

I am still struggling to establish the openvpn connection for my kali vm.

I established the vpn connection to the network, but firefox won´t open a website due to

"The proxy server is refusing connections
Firefox is configured to use a proxy server that is refusing connections."

Preferences of Firefox is set to: use system proxy settings

Any help?

[worthy torrent]

solved. sorry. foxy proxy was still turned on

[limber mango]

Is there a way to see and terminate active machines? Apperantly i have 3 running machines in the same room, but unfortunatley i dont see that there's a machine even running, so i also can't terminate them. 😮

[crystal marlin]

#site-support message

[limber mango]

awesome,. cheers mate

[ember aurora]

Hello, I'm doing NahamSec's Udemy Labs and currently working on the first file upload lab. When I upload an image, it doesn't appear on the page.

[celest wadi]

I mean there's a room on thm about it
https://tryhackme.com/room/nahamstore

But this lab isn't in that room

[ember aurora]

https://tryhackme.com/room/nahamsecsudemylabs

[celest wadi]

That's a private room for people doing the udemy course

Better to ask for help on udemy imo 🤷‍♂️

[ember aurora]

Thank you!

[worthy torrent]

I am still struggeling with my setup for the burp suite

Kali on VM with openvpn. I do get 10.10.10.10

but it won´t connect to the machine of the room in firefox. Even when I turn intercept and foxy proxy off.

what to do?

[crystal marlin]

Which room and task are you doing ?

[worthy torrent]

i switched "use system proxy" on in firefox preferences.
the manual config is the same as burp.

[worthy torrent]

I now try Burp suite:the basics task 9

[crystal marlin]

And you said you can access 10.10.10.10 just fine, even while you have foxy proxy and intercept disabled but simply not the target machine?

If yes, can I try to access your target machine?

I would need the IP then in that case

[worthy torrent]

10.10.136.213. I can send a ping to it but no connection in firefox

[crystal marlin]

Works fine for me, just let me know pls if you can access 10.10.10.10 while intercept and foxy proxy is disabled?

[worthy torrent]

yes

[crystal marlin]

Check ip a s if you only have a tun0 interface or any extra like tun1, tun2 etc.

[worthy torrent]

I am a complete noob. I do not get ur Q.

[crystal marlin]

Looks fine. Did you try to ctrl + F5 the page or manually clear the cache already?

[worthy torrent]

I did now manually. No effect

[crystal marlin]

Then try sudo ip link set dev tun0 mtu 1200 in your terminal and try to ctrl + F5 the page again

[worthy torrent]

ty...worked...strange

[acoustic geyser]

Hey all signed up for Throwback gone to access page clicked in tab for networks to download VPN config file to access throwback network and no throwback config file only config file for hololive any ideas? Sent email to [e-mail] no one has got back to me any help appreciated

[deep spire]

did you send an email to help or support@sharp bison ?

[acoustic geyser]

@deep spire sent email and not heard anything back signed up on Saturday so lost 2 days access

@deep spire I’ve emailed support@sharp bison again see what happens

[rain moon]

´do sb have expierience in Kali Linux? Cause I´m new and I have a little problem. thanks!

[glad egret]

Don't ask to ask. Just ask your question. Is this related to THM?

[rain moon]

Ok sorry, So my question is how can I get this window:

Oh i think I can not uploud a picture

[glad egret]

You'll need to verify to send pictures

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[rain moon]

ok

[crystal marlin]

2 days, especially as it was weekend doesn't sound too long already tbh

[rain moon]

So Now haha. I want that my Kali linux looks like that:

but it looks like that

[finite aurora]

If you are talking about the names,
They are the names of the user and the host

The default for kali is kali as you can see

[rain moon]

ok so it is the absolut same? because mine has like 2 lines and his only 1

[finite aurora]

Yeah

All okay

That's just different because of interface

[rain moon]

Ok thanks! How can I get that other interface?

[finite aurora]

I think it depends on the desktop environment

[rain moon]

Ok thank you very much

[finite aurora]

👌

[rich tangle]

Anybody know how to setup Metasploit on Arch?

I've been having trouble finding resources on it and the material from other distros is not very helpful

[supple shadow]

Yo , on the Windows Priv Escalation in the Jnr Pentesting Room is there supposed to be login details ?

[crystal marlin]

Yes, it's further down the tasks, I guess they just forgot to add it in the first few

[supple shadow]

yahyah just found it on the jnr pentesting channel

Thanks

https://tenor.com/view/yes-sir-yes-boss-military-salute-giving-honor-rip-gif-23161689

[haughty quarry]

my profile is stuck on Afghanistan. I keep switching to U.S. but it doesn't save. Any ideas?

not a big deal but I'm not on the right leaderboards lol

[crystal marlin]

#site-support message

[haughty quarry]

ayyy thanks!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[supple lichen]

Is there a page I can go to that shows me all my running VMs? I sometimes get messages telling me my machines are going to expire long after I have terminated all machines

[glad egret]

I think it's a glitch

[light vale]

You can try this maybe ones not terminated
#site-support message

[supple lichen]

Thanks!

[scenic torrent]

Gave +1 Rep to @light vale

[sleek swift]

Hello, i have an issue with the task 5 from the TOP 10 owasp lab, who can i ask for help ?

[crystal marlin]

Best to simply ask the question straight away in #room-help

[sleek swift]

I was not sure which channel was the best, thanks for the answer 😉

[robust hazel]

hey so im on the attackbox and zip2john works but rar2john and ssh2john dont is there a command i can throw in to get these

[rich tangle]

Sorry I'm being annoying, but maybe some fresh eyes are here.

Anybody know how to get Metasploit setup on arch? I keep getting errors no matter what I try. I've uninstalled everything so I can have a clean slate to try again.

[light flame]

install those 2 tools on your machine locally and use them id say

[deep spire]

you might have better luck in #infosec-general 🙂

[rich tangle]

Thanks!

[naive dust]

Hi, I can´t access to my machine vía vpn, I get the message "port 22: connection timeout". ive downloaded the ovpn config file, ran it with openvpn... I used "ssh tryhackme@myip" changing myip

I can´t connect to ssh tryhackme@10.10.10.10

Any help pls?

[limber mango]

Is the machine already fully booted? Sometimes it takes them longer as the mentioned 1 minute

[zealous yoke]

why are you trying to connect to 10.10.10.10? That IP is reversed to a machine that you're absolutely not meant to SSH into

[naive dust]

Yes, it's already been more than 20 min

[zealous yoke]

@naive dust what room are you trying exactly? Can you share a link please/

[naive dust]

Ok

[naive dust]

https://tryhackme.com/room/networkservices this is the room

[zealous yoke]

Thanks

If you're using 10.10.10.10 thats definitely the wrong IP

you need to use the IP address of the machine that you deploy in that room

Also, I don't think that room asks you to SSH into the machine?

Read through the tasks and it will tel you what you need to do / how to access it

[naive dust]

I can't connect from my linux?

[rocky adder]

Yeah what @zealous yoke said, the room doesn't require you to SSH into it at any point, the machines are there for you to have something to enumerate for the task, therefore the port 22 on all of them is closed since you don't need to SSH into them.

[naive dust]

Ohhh

[zealous yoke]

well explained thanks ((:

[scenic torrent]

Gave +1 Rep to @rocky adder

[naive dust]

Ok thank you @zealous yoke @rocky adder

[scenic torrent]

Gave +1 Rep to @zealous yoke

[hot ridge]

Hey guys, this problem has been happening to me recently but everytime I try to load rockyou into burpsuite it freezes burpsuite

[celest wadi]

Rockyou has 14 million words/passwords

If you're bruteforcing creds, you're better off using cli tools like hydra or ffuf

[gleaming mortar]

Hey all. Trying to upgrade as student (20% discount) but can't find it. Has that been discontinued?

[hollow otter]

!docs student

[sharp bison]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/billing/student-discount

From TryHackMe with ❤!

[hollow otter]

^

[bitter temple]

Hello everyone! How can I get back my monkey?
I was automatically charged 10 dollars for a subscription, but I did not buy it

[eager fulcrum]

-unmute @bitter temple Do not attempt to ping everyone. Don't send unsolicited direct messages

[scenic torrent]

🔊 Unmuted Shelldon#2344

[eager fulcrum]

@bitter temple You will need to email [e-mail]

[spark schooner]

my macchine wasn't open .

what can i do

[hollow otter]

you mean your vm? your target machine is up

[spark schooner]

but why cannoti see it/

?

i want to use the macchine

but i cannot use it

[hollow otter]

it is written: This machine is for scanning only

so either you use attackbox or your own vm to scan it

[spark schooner]

VM always runs as a split on its right side. That is not going on now. How do I use it again?

[hollow otter]

click the Start AttackBox

[hollow otter]

attackbox

[spark schooner]

yeah its successfully done

thanks @hollow otter

[scenic torrent]

Gave +1 Rep to @hollow otter

[spark schooner]

what is this?

[hollow otter]

just rep point

[spark schooner]

I Don't know how gave this Rep 😅

[hollow otter]

everytime you reply/mention someone with the word containing thanks or similiar, bot will give rep point to the person

[naive dust]

Hi, got the same issue, just bought a 1-year subscription at $7.50 / month. It sums up to $90. I thought the same thing as you, that it was a wording issue. But going on a month-to-month subscription ($10), the amount would have been $120. So, if anything, it should have been 3 months free. Also, my dashboard shows an active subscription and even though I paid in USD, the page says that within 12 months I'll get charged 90 GBP. This latter issue is a display bug or something. But the 2 months thing is definitely pretty confusing to me too. Anyone able to shed some light on this? Thanks!

[scenic torrent]

Gave +1 Rep to @grand perch

[runic escarp]

Hey Guys, I am having issues accessing my Kali Linux Desktop. I was trying to share a folder from a windows folder to my VM, i accidentally named the folder "Desktop". Now i cant access my previous Desktop version. My Dekstop User is under Root and the Group is now called vboxsf. How can I switch it back to the previous version of my Desktop? Thanks in advance.

[lament trout]

https://www.reddit.com/r/tryhackme/comments/rr6rt1/thm_premium_yearly_subscription_cost/?utm_medium=android_app&utm_source=share

here's something I found when I was confused about the yearly sub thingy

although I must admit that the math is still confusing and I still don't understand it.