site-support

[fierce pebble]

you have to brute force it

[lethal dust]

is there a specific part of the site where you see/downloads all the certificates youve gotten? since the beginner path is dissapearing soon

[fierce pebble]

beginner badges will disappear ?

[lethal dust]

not the badge, but the cert you get for completing the path

[fierce pebble]

ah

why ?

[lethal dust]

im just a collector, so it would be nice to have like...a seperate tab in the "badges" section so you can view and dl all your previous certificates

i looked around and didnt see anything, but i figured id ask

there are seperate badges for completing some rooms, but no path badge

[loud marsh]

carot

if you are using nano, ^ x means ctrl+x

[ember grove]

If there is a mod available tonight, just bumping this so I don't retype it

[mystic burrow]

Hey everyone, trying to use THM through my kali linux VM i just set up with virtual box. To do so, do I have to log in to THM through the VM and establish the VPN?

[mystic burrow]

I am following the instructions of downloading local configuration pack, then sudo apt install openvpn

i than see the file that I downloaded and type sudo openvpn /path/to/nameofthefile.ovpn

[eager raptor]

Perhaps you can provide a screenshot after running the above command.

[mystic burrow]

"error opening configuration file

In [CMD-LINE]:1

[eager raptor]

what if you run openvpn <filename.ovpn> in the directory it's in?

[mystic burrow]

zsh: parse error near \n

[eager raptor]

Weird. Maybe it didnt install correctly. Either way, openvpn has a Linux client you can snag. Might be worth a shot

[mystic burrow]

looking into that now, quite frustrating so far!

i get : zsh:parse error near \n

zsh:parse error near \n

yes

Not to my knowledge. Literally just got a refurbished desktop to learn and download Kali Linux

trying to access THM for the first time through my VM of kali

i get: /usr/local/sbin multiple times and local/games:/usr/games at the end

i did and got: bash:syntax error near unexpected token 'newline'

yes

i just tried it again, asked for my password

and got this error:

Options error: in [CMD-LINE]:1: Error opening configuration file: myfile.ovpn

its not, it is my THM username

i see configure file downloaded, and have been putting the downloaded name

same error

i ran sudo openvpn mshe170.ovpn

got asked for my password

and got an error

ok i changed my directory to downloads

and typed in sudo openvpn mshe170.ovpn

It looks like something was loading but it stopped

just spinning, not connecting to 10.10.10.10

with the same file?

same result

the end output is:

Verify OK: depth=0, CN=server

us-east

i am in northeast usa

doing it now

asks for PW and gets caught in the same spot

[vague lava]

Doesn't kali have network manager and can import an ovpn file?

[mystic burrow]

hold on

I think we may have hit paydirt

I downloaded multiple configuration files and just did the most recent

last line is Initilization Sequence Compelted

yes

Thank you, thank you so much

[vague lava]

Yea, latest kali uses xfce and it has the network manager icon in the taskbar

[mystic burrow]

Moving forward how would i reestablish the VPN the quickest way

same process?

Got it

Awesome, thank you again.

[vague lava]

For ease of future use @mystic burrow, you can use this in Kali. Then can reconnect from that same menu in the future

[gaunt mica]

whats this i cant download ovpn

[tight reef]

I'm not seeing the IP I need to attack in the burp suite lesson. I've tried restarting the VM, I've tried killing the session and signing back in, I've tried signing in on a new computer, I never get the IP. I am going through the class watching youtube videos, and I don't like it. What do I need to do to get the target IP so I can actually learn burp suite?

[naive dust]

cant access throwback machine although vpn is connected

[naive dust]

anybody can help

[naive dust]

time is being wasted , only one day is left

[celest wadi]

no, even subscribers can't access throwback, it's a separate paid network

[naive dust]

@celest wadi if you have it , please check it

if you can ping machines

[celest wadi]

no, I haven't purchased throwback, plz ask in #743859653343182930

[clear viper]

i wanted to know, when i will complete my course and get a certificate. will i be able to customise the certificate (name), because my THM username is ... well not my real name, and i haven't put my full name there

i am planning to put that certificate on my resume or many other places

[celest wadi]

#site-support message

also, thm certificates are "certificates of completion" so it's not a good idea to put them in your resume, you could list them in skills or extra sections tho :)

[clear viper]

thanks for your suggestion.

[scenic torrent]

Gave +1 Rep to @celest wadi

[clear viper]

and i also wanted to know, if i use a vpn to use THM site, that will have no impact on the certificate or anything else right? hopefully the certificate doesn't mention the country. (its a pretty dumb question, but i would still like an answer)

[celest wadi]

certificates do not mention your country

[clear viper]

and is my Full Name a part of my public profile or its just the username?

[celest wadi]

full name is private, username is public

[clear viper]

;okay, thanks for answering all of my questions 🙂

[hazy thunder]

Good morning everyhone

[naive dust]

~/Dropbox/Documents/TRYHACKME/vpn 20s ❯ sudo ../Throwback_AD/thm_vpn_ts_script.sh


         _____           _   _            _    __  __
        |_   _| __ _   _| | | | __ _  ___| | _|  \/  | ___
          | || '__| | | | |_| |/ _` |/ __| |/ / |\/| |/ _ \
          | || |  | |_| |  _  | (_| | (__|   <| |  | |  __/
          |_||_|   \__, |_| |_|\__,_|\___|_|\_\_|  |_|\___|
                   |___/

                                                @barren birch


[+] Stable internet connection
[+] OpenVPN is installed
[-] tun0 interface does not exist
Would you like the script to attempt a connection automatically (Y/n)? y
[+] Connecting....
[+] Connection Process completed successfully!
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[-] Something went wrong -- please ask for further assistance in the TryHackMe Discord server, subreddit, or forum

[onyx nexus]

Hello, could you help me?
I am also creating my room but when I upload my virtual machine, it does not finish converting and says it could not be processed to review the requirements, my machine weighs 2GB has 1GB of Ram and memory 12GB, is an Ubuntu the latest version, maybe you know what is happening?
Thanks.

[bronze vale]

Could you send a screenshot of your OpenVPN output log, please?

[bronze vale]

Are you uploading a server or desktop?

[onyx nexus]

Desktop

[naive dust]

this ip is reachable to public

[bronze vale]

You can only upload servers, desktops take up too much resources:)

[bronze vale]

#site-support message try this

[onyx nexus]

@bronze vale OK, thank you very much, I will try again

[scenic torrent]

Gave +1 Rep to @bronze vale

[naive dust]

Hey SC, I have a simple fix when this happens. Start another openvpn connection with "sudo openvpn /path/to/file.ovpn" then run the troubleshooter again. It will notice you have two instances of openvpn and ask you to fix the issue choose "y" and it will kill both instances and fix your problem at the same time.

I have a VM in an ova file that I downloaded and need to scan for a CTF I'm working on. How do I connect two VMs in VMware? I've been trying to figure it out for two days and can't get the vm to ping to anything or to anything in my virtual network.

[fading spoke]

Hello, I am in the OWASP Juice Shop room and I am having issues getting the flags displayed. Even though I complete the task successfully, the flag does not display. Tried disabling Burp proxy in browser and refreshing , rebooting the attackbox and performing the task again, but it just doesn't display (I am now talking about task 4, but I had problems also with previous ones).

Oh.. wait. I solved the problem terminating the OWASP-Juice-Shop machine and starting a new one

sorry for bothering.

[ember grove]

I may be crazy, but I've been fighting with the profile details section on the thm dashboard- it refuses to let me select US as my location based on phone number- it lets me set it, then save it, then I go to my public profile, and it's back to Afghanistan

I tried clearing my cache, and such- just incase it was that, but it seems like it is just broken

[celest wadi]

https://tryhackme.com/api/user/update-timezone this should update it but check if you're using a vpn and that your public ip shows your country

[ember grove]

The only VPN I am connected to is for work, and that's hosted in the same city as me- but I'll try turning it off to see if that updates it

[celest wadi]

https://www.whatismyip.com/ you can confirm with this :)

looks sus tho

[ember grove]

Yeah I didn't think it could be it since it isn't changing my public IP

It did update it though with the api link- so thank you!!

[vagrant slate]

Hello together,
I would like to know if it's allowed to f.e. document your tryhackme progress on a personal blog and therfore share also some pictures of the solutions?

[celest wadi]

most people make blogs about their progress through rooms but I don't think its a good idea to post solutions/flags to rooms

[sick coral]

Not sure if this belongs here or "room-help". Working on Cross-site Scripting Room "Understand how cross-site scripting occurs and how to exploit it.", but I am unable to get to the "XSS Playground" page. I have deployed the machine, and I do NOT have my OpenVPN connected as the instructions states it is not needed. The first time I tried it connected, but then it stopped, and I haven't been able to connect since. Any assistance will be greatly appreciated, thank you!

[sick coral]

Update: I tried to ping the machine address and nothing, so I turned OpenVPN on and re-pinged and I was able to reach it. So I then tried to re-connect to the machine IP and it worked. I believe this may need to be updated as it appears OpenVPN is needed...or maybe there is some setup within my VM/FireFox I am unaware about. I will repost this in "room-help".

[thorny wave]

I have a problem in linux fundamentals 3 , can't cat access log

[edgy anchor]

Are points frozen? I finished many questions but it didn't increase

[crystal marlin]

Which room?

[edgy anchor]

Sorry I mean this points, I finished OWASP Juice Shop room and it didn't increase

[crystal marlin]

Maybe you answered question that didn't require an actual answer. Or you reset the room ?

[edgy anchor]

Actually I came back to THM after several months, and start with this room and finished it, but the points are still the same as before.

[crystal marlin]

As I said, maybe you have done that room previously already and just reset the progress ?

[edgy anchor]

Nope, first time

[crystal marlin]

Okay, well then I don't know why it's not giving you points

[thorny wave]

@naive dust all log files belong to root

[crystal marlin]

Maybe it is due to the complete beginner path has been removed and therefore these rooms are not giving no points anymore, but that's just an assumption

[crystal marlin]

But they all have different permissions

[edgy anchor]

So points only for rooms that within a path?

[crystal marlin]

No

[thorny wave]

@crystal marlin my bad, thanks. I got the answer.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[edgy anchor]

Just rooms that was in an expired path are not giving any points?

:((

[crystal marlin]

As I said, that's just a guess, I could be totally wrong, so don't take that as right. I would simply try to answer questions in a different room and check again if your points increase

[crystal marlin]

If you haven't done that room, you could try if that one is giving you points, as it has easy questions to quickly check if it's increasing your points there or not: https://tryhackme.com/room/ccpentesting

[edgy anchor]

Yup, it gives me points

[edgy anchor]

Sadly :((

Can't they make them give points again? 🥺

[crystal marlin]

As I said, it's not for sure about the point with rooms that are in the complete beginner path, so don't take that as right. I would just keep on going and if you notice this happen again, ask in here.

[edgy anchor]

Ok :((

[sudden sparrow]

How to redeem vouchers?

[crystal marlin]

Just enter them ?

[sudden sparrow]

Where?

Found it! Thanks!

[brave estuary]

Hey how does the annual subscription of try hack me work ?

Is it like you pay 8 dollars a month or you have to pay 90 dollars total at once ?

[vale cloak]

can anyone help me out with RLwrap

[brittle ice]

#room-help

[crystal sequoia]

You can pay monthly or annually, its worth the money

[neat plank]

what is your problem?

[quiet wharf]

Is there any way to leave or rename a workspace on THM? I created one to test it out, but used random characters for the name.

[naive dust]

Either buddy, are you a student?

[brave estuary]

Yp

[steep wasp]

I am trying to do the CC:Pen Testing course but when entering the IP address i keep getting the Apache2 Ubuntu Default Page is this course down right now?

[naive dust]

URL?

[steep wasp]

for the course of the IP?

[eager raptor]

I'm sure that's intended. Quite a few boxes utilize the default Apache page

[naive dust]

Nah, the room on THM

[steep wasp]

https://tryhackme.com/room/ccpentesting

[crystal marlin]

You should include which task are you doing atm

[steep wasp]

apologies i am doing [Section 1 - Network Utilities] - nmap

[naive dust]

Yeah, that's supposed to take you to that page.

That part is really just focusing on scanning the machine ip.

[steep wasp]

Oh right i'm a little lost on where to start then 🙄 😂

[naive dust]

terminal > nmap xxx.xxx.xxx.xxx

[steep wasp]

Thanks.. thought it was something i had to do through the web browser.. thanks for the help

[scenic torrent]

Gave +1 Rep to @lament valve

[eager fulcrum]

For what it's worth, courses can't be down. Your instance is not shared, it starts when you click it and ends when you terminate it

[steep wasp]

Thanks for the heads up and sorry for the noob questions.. New to this lmao

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[hollow otter]

Welcome

[steep wasp]

I've signed myself up for a competition in cyber network Defense and now need to learn WireShark and Metasploit by the end of the months so though i would just get to grips with the pen testing topics so i can at least act like i know what i'm on about.

[naive dust]

THM have some good Metesploit and Wireshark rooms.

https://tryhackme.com/room/rpmetasploit

https://tryhackme.com/room/wireshark

[steep wasp]

Appreciate the help..

[steep wasp]

thanks

[scenic torrent]

Gave +1 Rep to @lament valve

[forest yoke]

guys

how do I install msfvenom

[neat plank]

sudo apt install metasploit-framework

this will include msfvenom and msfconsole

[forest yoke]

unable to locate package

[neat plank]

lol

[forest yoke]

ikr

[neat plank]

But why you machine don't have so many needed package?

[forest yoke]

I have no idea

It is a normal Ubuntu 20.04

[neat plank]

so is it up to date?

[forest yoke]

yes

I have just updated everything with Software Updater

[neat plank]

I have no idea

[forest yoke]

you don't know to locate the package?

[neat plank]

No i'm not

[forest yoke]

crap

thanks nontheless

[crystal marlin]

I would suggest you use something like kali linux, as this would solve a lot of your problems with installing packages etc. As far as I know that's not the first time you struggle with installing something

[forest yoke]

ok

can I install it from Ubuntu

[crystal marlin]

I think these things are outside of the scope of this channel, so you might want to google it or ask in #general

[forest yoke]

oh yeah

sorry

[forest yoke]

it does not let me import the .ova file

Failed to import appliance /home/hans/Downloads/kali-linux-2021.4a-virtualbox-amd64 (1).ova.

Result Code: NS_ERROR_INVALID_ARG (0x80070057)

wait

ignore me

i do not have enough space

[neat plank]

Oh ok :)

[forest yoke]

wait

how do I allocate more space

to my ubuntu partition

no

I have a dual boot

Ubuntu20.04/Windows 11

and when I installed ubuntu I only gave it 33gb

and now I want to give it more

[neat plank]

Why you don't use VM one Windows OS?

[forest yoke]

Is it better?

[neat plank]

Not better but it will make you step more easy

[forest yoke]

um

so I have reduces my windows partition

and I have 85 unallocated gigs

now I am on gparted

how can I assign them to linux

[vague lava]

You need to expand the ext4 partition

https://askubuntu.com/questions/421271/how-to-extend-ext4-with-gparted

I've found that when dual booting, using 2 separate drives for each is best when possible. Windows likes to get grabby about the boot process at times.

[forest yoke]

i dont have two

[naive dust]

It honestly seems like your laptop doesn't have the capabilities to have dual boot and VM's

But that's MY opinion.

[vague lava]

I figured, that's why i added "when possible"

[forest yoke]

in the second answer it says that I should mark the unallocated space with ext4

but how do I

[forest yoke]

i have honestly no idea

[naive dust]

Why do you need to dual boot?

[forest yoke]

I wanted to try ubuntu

[naive dust]

Why not just do it on a VM?

If you like it, install it.

[forest yoke]

i liked it so i did

im gonna go to the Ubuntu forum and ask

[hot ridge]

Hi guys I'm having troubles with kerbrute

I've downloaded it and when I try to run ./kerbrute -h it gives me permission denied

Ls -la gives me drwxrwrwx

And I'm not in the kerbrute folder

[crystal marlin]

d means that it is a directory

[hot ridge]

I've done that already

[hot ridge]

The command doesn't work at all in of the directory

[crystal marlin]

No I'm telling you that you are trying to execute a directory. You have to cd kerbrute into it

[hot ridge]

Sorry mistype, the command doesn't work in the directory

[crystal marlin]

So what's inside that directory then ?

[hot ridge]

@crystal marlin

[crystal marlin]

How did you download it ? Did you follow the installation guide on the github page?

[hot ridge]

Yes

I did a GitHub clone and a then did a go as directed on the GitHub page

[crystal marlin]

And you also ran the make command as shown ?

[hot ridge]

Yes

[crystal marlin]

Well I somewhat doubt that, as if you would have done that you should have a dist directory in there

So go to /home/kali/Downloads/kerbrute and then run make linux

[crystal marlin]

Okay, so after that finished you should have a dist directory in there

[hot ridge]

The make Linux made a dist directory pop up!

[hot ridge]

What should I do from here?

[crystal marlin]

Just go to the dist directory and then run the kerbrute binary for you architecture

[hot ridge]

Thank you!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[summer matrix]

Anyone here for some tech probs ?

[hot ridge]

Just ask your question

[summer matrix]

okaay , when i join a room (any rooms , iv been trying all day ) i got my openvpn and new ip and all that , i can ping the ip provided in the room and nmap it , but i can't seem to access the web pages

it just loads infinetly

i regenerated my openvpn

still nothing

[hot ridge]

What do you type in when going to the website?

[summer matrix]

http:// the ip : whatever port i want to use

and it loads endlessly

[hot ridge]

Might you have anything like a proxy enabled?

[summer matrix]

my foxyproxy if off

and i can acess HTB machines

[hot ridge]

What happens when you just type the IP in the search bar?

[summer matrix]

it loads forever

with no return

curl the same

i can ping the ip but with 280ms

[feral tendon]

ouch

[hot ridge]

You are only running openvpn?

[summer matrix]

ifconfig only shows eth0 and tun0

so yeah

[crystal marlin]

Does that also happen with accessing 10.10.10.10 ?

[summer matrix]

flag{connection_verified}

[crystal marlin]

So that's a no. Which room are you doing right now where that happens ?

[summer matrix]

im currently trying the cyborg room

[crystal marlin]

And your machine is a VM ?

[summer matrix]

tried also advent of cyber

VB kali

pickle rick too

i can't access any website

[crystal marlin]

And openvpn is only running inside that VM and not on your host machine simultaneously as well?

[summer matrix]

no just my vm

as i said tried with HTB and they work

[crystal marlin]

And no other personal vpn on your host machine ?

[summer matrix]

nope

😦

[crystal marlin]

You could try sudo ip link set dev tun0 mtu 1200

And then check again

[rocky adder]

👀 when all else fails - sudo ip link set dev tun0 mtu 1200 😂

[summer matrix]

hahahahah what does this do ?

okaay tried it

now im getting unable to connect

Firefox can’t establish a connection to the server at 10.10.123.116.

advent of cyber 1 BTW

"64 bytes from 10.10.123.116: icmp_seq=5 ttl=254 time=166 ms
"

[crystal marlin]

Can I try to access that machine myself ?

[rocky adder]

It sets the max packet size.

[summer matrix]

i dnt understand

[summer matrix]

sure

solved

[crystal marlin]

You sure that's the IP of the target machine and not the IP of the attackbox?

[summer matrix]

yeah im sure

i guess i have to wait after the machine has started

for the servuces to start

i can access the web page now

thank you all ❤️

[crystal marlin]

Alright

[hot ridge]

What would setting the max packet size do?

[rocky adder]

by setting it to 1200, you're lowering the packet size from it's default, which helps with poor internet connections. If you want a more technical answer I'd suggest googling it.

[hot ridge]

Thank you

[supple pebble]

hiii

i ,ean hello sir and madam

[summer matrix]

yo again

back to square one

""Firefox can’t establish a connection to the server at 10.10.251.11.""

[rocky adder]

The machine's take 2-5 minutes to fully boot up once started

[summer matrix]

yess

[summer matrix]

Yess im trying at 10 min

after launch

no just one tun0

the THM Ip

advent of cyber task 7

[vague lava]

Happened to me too in my own kali VM. Turned the vpn off and strangely I could connect to the web page

[edgy cliff]

Hello, Brand new here. I'm trying to use the split view but unable to view the whole page. I can't adjust the screen size to see exactly what is needed from me to complete the path. Please help and be kind. thank you

[crystal marlin]

There is a button for full screen on the bottom, did you saw that?

[edgy cliff]

No I didn't

or should i say I don;t see it

[crystal marlin]

Let me start up the attackbox to check myself, but at least there was one

[edgy cliff]

Thank you

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

You found it?

[edgy cliff]

no I haven;t

[edgy cliff]

I don't see or have any of those options

[crystal marlin]

Wait, are you having a machine open in split view or just a lab site? Which room and task are you doing ?

[edgy cliff]

I'm doing the first one where I am trying to hack bookface

[crystal marlin]

I don't know what the first one is, send me the room link pls

But it sounds like a lab page

[edgy cliff]

i think it is. one sec

https://tryhackme.com/room/beginnerpathintro

[crystal marlin]

Ah okay, the lab pages don't have no full screen button, but you could get the link out of the source code, but usually split view should be more then enough space to complete it without it being too small.

But here, I'll send you the link for it: https://static-labs.tryhackme.cloud/sites/bookface/bruteforce/

[edgy cliff]

thank you very much!!!

just tried it and I am able to view everything!!!

thanks again !

[crystal marlin]

You are welcome

[elfin kayak]

Whenever I try to log in the captcha hangs. This only started happening whe. I switched to firefox

[autumn crane]

Hello, I just recently completed the "Pre Security" learning path, I'd love to share my certification to LinkedIn but I only see a download option : /

[neat plank]

Yes, that will download the images of the certification

Download it and upload to linkedln

[forest yoke]

yo mates

I was able to give 90gb to Ubuntu

and I finallly installed virtualbox with kali

but I am getting this error code

Failed to open a session for the virtual machine Kali-Linux-2021.4a-virtualbox-amd64.

The virtual machine 'Kali-Linux-2021.4a-virtualbox-amd64' has terminated unexpectedly during startup with exit code 1 (0x1).

Result Code: NS_ERROR_FAILURE (0x80004005)
Component: MachineWrap
Interface: IMachine {85632c68-b5bb-4316-a900-5eb28d3413df}

I followed this tutorial: https://www.youtube.com/watch?v=ILwRmXx8kwg

[spiral kayak]

Got a real tricky question - I want to update my credit card information... Do I really need to hack the site and edit the database myself ? 😉
In my profile I can only "cancel subscription" and... I just wanna update my credit card...

[crystal marlin]

No, but you can simply check one of your previous sub confirmation emails, at the bottom of that email should be a link to the sub management page where you can update them.

[spiral kayak]

Not sure I have that in my inbox anymore... :/

Found it and updated - thx! @crystal marlin

[harsh tundra]

this is a question for #infosec-general, this channel is for tryhackme related technical issues

[eager raptor]

my bad. cheers for the heads up

[onyx bridge]

hello i have a problem when I launch attackbox after a minute it says disconnect

[naive dust]

I know that Ice is an old room, but is the room broken?

The history in the internet browser was empty, and the installer file needed that was in the recycle bin was on the desktop.

[broken bear]

IceCast exploits are pretty unstable, IIRC. Not quite as bad as eternal blue, but I remember having to attempt multiple times to get something stable.

[naive dust]

Ah, so if I want to do it, it will be more trial and error?

[broken bear]

It's been awhile, but not even trial and error. It's just unstable and doesn't always connect like you expect.

[naive dust]

Okay, thank you for the response. 🙂

[scenic torrent]

Gave +1 Rep to @broken bear

[elfin kayak]

Whenever I try to log in the captcha hangs. This only started happening whe. I switched to firefox

[serene lintel]

Hi guys, I need to talk to someone from the commercial area. I'm interested in educational account

[glad egret]

!docs student

[sharp bison]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/billing/student-discount

From TryHackMe with ❤!

[glad egret]

Try clearing the cache

[elfin kayak]

Did that

[serene lintel]

@glad egret sorry i explained it wrong, i represent a training institution that wants to use your lab

classrooms

iam a teacher

[naive dust]

Email

[e-mail]

https://tryhackme.com/classrooms

[serene lintel]

ok, thanks, i will do right now

[serene lintel]

in this page dont have how tosubscribe to lassrooms

[naive dust]

The Email will sort you out, if you email them.

[serene lintel]

ok, thanks

email sent

[devout pewter]

Getting "Uh-oh, this page has been lost in the matrix." when trying to download my VPN Config file from tryhackme.com/access 😦 Did not help to press regenerate

[glad egret]

Try a different server

[pure plinth]

ftp commands aren't not working for me in this room after connecting to anon ftp. https://tryhackme.com/room/brainstorm can someone help

[naive dust]

Working okay for me.

[plush bay]

reboot the target machine or wait a bit longer and see if it turns on after a while

[naive dust]

FTP takes a few min(s) to boot up.

[pure plinth]

sorry, i should've elaborated. when I try to list files with "dir" after connecting to anon ftp it doesn't work. can't do other things either

[plush bay]

ls instead of dir????

[shy thorn]

You could also try using the -p flag when connecting

[pure plinth]

still not working unfortunately "229 Entering Extended Passive Mode (|||49163|)
ftp: Can't connect to `10.10.34.82:49163': Connection timed out
"

┌──(kali㉿kali)-[~/thm/brainstormRoom]
└─$ ftp -p 10.10.34.82
Connected to 10.10.34.82.
220 Microsoft FTP Service
Name (10.10.34.82:kali): anonymous
331 Anonymous access allowed, send identity (e-mail name) as password.
Password:
230 User logged in.
Remote system type is Windows_NT.
ftp> dir
229 Entering Extended Passive Mode (|||49281|)

hangs on "entering extended passive mode" then times out

[pure plinth]

I can connect, the problem is that I can't execute any ftp commands

[crystal marlin]

Can I try to ftp into your target machine ?

[pure plinth]

sure, you're free to connect to it. hopefully you can figure out what the problem is: 10.10.34.82

[crystal marlin]

So as lassi suggested, did you try to connect without the -p flag?

So simply ftp 10.10.34.82 ?

[pure plinth]

yes

that's what i did initially, i have no problem connecting but I can't execute any commands without getting stuck on "Entering Extended Passive Mode"

[crystal marlin]

I understand your issue, I got the same error when connecting to the ftp with the -p flag, but without it it's working perfectly fine?

[pure plinth]

are you able to list files?

[crystal marlin]

Yes

[crystal marlin]

Could you send a screenshot where your initial ftp connection can be seen, as well as the error you receive after listing files/directory's ?

You will have to verify first to be able to send screenshots

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[elfin kayak]

Whenever I try to log in the captcha hangs. This only started happening whe. I switched to firefox tried clearing cache, same issue still occure

[crystal marlin]

Have you terminated the server now ?

Before your run the dir command, you could try to enter passive to either turn on or off the passive mode

[pure plinth]

omg that fixed it 😅 thank you so much

[scenic torrent]

Gave +1 Rep to @crystal marlin

[winged hawk]

I hope this is the right room but I have problems to login to Bloodhound on the Attackbox, when typing in neo4j:neo4j as creds he gives me a invalid credentials error. Can somebody help me?

[naive dust]

so I have until March 8th for my subscription to renew, I have cancelled the renewal but I am still in a premium status until March but all my progress has been wiped out. all the rooms that I have done and all my badges are gone. Can I know why?

[lost dagger]

Hello , I am a student and using my college email ID for my THM account. I didn't get student discount for THM premium hence I mailed the support team previously. They replied to pay $10 for 1st month and then the discount would be applied, 2nd month would be $6 and rest of the months would be $8. I paid $10 for the first month and mailed them. They replied saying that the discount was applied.

At present I completed my 1st month. But still the amount is being shown as $10.

[crystal marlin]

If that's the case, you probably best with sending them an email

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

I will thanks

[nimble tulip]

Is anyone here using annual plan with student subscription?

[jovial mango]

hellloooo

actually i am doing advent of cyber 2

and i had deployed the machine

i dont know why the website is not loading

even the ping is not working on that IP

what do i do?

[crystal marlin]

You should always include more details to your issue. Which task are you doing? Are you on the attackbox or your own machine? Etc.

[summer matrix]

same issue , just wait for 5 / 6 min for the machine to deploy

[edgy current]

Is there any significant security risk of logging into THM within the attackbox? I read somewhere that others were hacking into others attackboxes. Looking at the threat model it's probably not going to give them much, except email and phone number at worst

[polar vigil]

anyone else having a problem seeing images in /networkservices im getting nothing

[wild pine]

For some reason in the attackbox it will not let me use to CTRL key, I've tried changing the keyboard layout to my current keyboard and it still won't work. I never get the '^' when i press the CTRL key. I am currently doing Linux Fundamentals P3

[crystal marlin]

As far as I know there is no risk with the attackbox. With your own machine connected to the thm vpn there might be.

[crystal marlin]

No, are you using any personal VPN or a Pi-hole or similar ?

[polar vigil]

none of those not working on phone or laptop using broadband or 4g

[crystal marlin]

Did you try to clear cache already ?

[polar vigil]

just cleared and still no luck, used another browser + incognito and also not loading

[crystal marlin]

Is it not showing images in all of the tasks or just a specific one ?

[polar vigil]

looks to be just task 3 and 4

[crystal marlin]

Oh okay, well then it seems to be an issue on THM side, it's not showing them there for me either

[polar vigil]

okay, happy its not me. I'll work around it for now

[river cradle]

"Brainstorm" doesn't show any open ports, only filtered. I terminated the machine several times yesterday and still have the same issue. I did use -Pn with nmap.

[crystal marlin]

If you want I can try to scan the machine myself to verify, would need the IP in case you want me to

[hazy blade]

hello!,
Can the linuxfundamentals2 machine be accesed from my local pentesting VM?

I have this:

2022-02-15 12:51:39 Initialization Sequence Completed

but also:

ssh: connect to host 10.10.249.198 port 22: Connection refused

[crystal marlin]

Did you give the target machine enough time to fully boot? You sure you are using the IP of the target machine and not the one from the attackbox ?

[hazy blade]

I took the IP from the "Active Machine Information"

and is booted for 8 minutes now

oh wow

wait

just connected

that was an slow boot

😅

thanks!!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[hazy blade]

+rep @crystal marlin

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

Not a problem

[river cradle]

I appreciate your help, but it's fixed now. The VPN file for some reason was not working, and since I had a problem with room before I didn't check it.

[left obsidian]

How can I kick someone respectfully from the a team in THM? or if there's a way to add more than 4?

[gritty umbra]

I have a problem with my profile on the site how can help me with that so i can DM?

[crystal marlin]

You are probably best with explaining your issue here, maybe it's a simple to fix one

[limber stump]

Hey, for the Linux PrivEsc room. The cron jobs are not executing

Can’t seem to trigger a remote shell

[crystal marlin]

Did you check the permissions of the script file you want cron to execute ?

[limber stump]

Negative. Wasn’t implied in the room section

I thought all you had to do was edit the backup.py file and start nc listener on attack box

[gritty junco]

Hello guys! Where can I see my friend request? A friend invited me but I don't know how to accept him.

[crystal marlin]

Well, some stuff you need to do on your own 🙂

[crystal marlin]

Should come as an email

[limber stump]

Jfc did I really miss something like that? Yeesh

Would chmod +x backup.py worked?

[crystal marlin]

Try it 😉

[limber stump]

Lol trying now

Thanks

Son of a… wow I can’t believe I missed something so simple lmao

Thanks again

[gritty umbra]

why does it appear that I am from Afghanistan while I am registered as Saudi?

[neat plank]

Why are you just doing 53 rooms and you got 0x9, and me 57 rooms just 0x8

[gritty junco]

coz there are rooms with 5 questions and others with 50

[gritty junco]

https://www.reddit.com/r/tryhackme/comments/kdngxr/changing_country/

[crystal marlin]

#site-support message

[gritty umbra]

Thanks it's work 👍

[scenic torrent]

Gave +1 Rep to @crystal marlin

[neat plank]

Oh i see, thanks

[scenic torrent]

Gave +1 Rep to @gritty junco

[spark schooner]

what can i do now? this page isn't work

[neat plank]

wait

or ping the IP

[spark schooner]

not working

[neat plank]

How about terminate and start again?

[gritty junco]

are you connected to the VPN?

else you won't be able to reach the website

[spark schooner]

can you join the voice chanel ?

@gritty junco sir

[gritty junco]

I'm on class right now

How did you connect to the machines before? Your own VM or with AttackBox on THM.com?

[spark schooner]

my open vpn is running

[spark schooner]

Yes

[naive dust]

i can connect to the boxes just fine but then after a while the boxes stop working. anyone else having this issue?

[crystal marlin]

What box you are talking about and what you deem as "a while" ?

[naive dust]

i was doing overpass 2 and 3 but the issue seemed to fix itself. i would do all my enumeration get into the box start looking around and then it would just freeze out of nowhere and when i try to ping it i would get nothing.

[cinder timber]

I am having trouble with the splunk course

I connect to the OpenVPN and then RDP into the windows system for the course as instructed. I then am able to get access to the splunk instance in Chrome. One I noticed that is shows chrome is outdated and I am unable to update it becasue it doesn't appear that this VM has internet access. More importantly when trying to add the app from the desktop in Splunk 101 Task 3, I get an error connecting Connect timeout

@naive dustAre you able to assist?

I have tried terminating the machine and relaunching it and also clearing all browser history but still the same issue

[weak flax]

yo guys I submitted some writeups on some room but they are not yet there any idea why?

[hollow otter]

The room's creator/s have to accept it first

[weak flax]

ah okay

[ember shuttle]

hy i need to change my user name on thm, is there anyway to do that ?

[crystal marlin]

#site-support message

[naive dust]

Hello?

[thorny osprey]

I'm trying to manually add cookies in firefox but clicking the "+" button does nothing

Does anyone know why ?

[crystal marlin]

Have you highlighted the cookie drop down on the left side, or a domain?

[thorny osprey]

Yes

[thorny osprey]

it doesn't work on any website

I tried disabling the permanent private mode in the settings but no success

nevermind actually, disabling the private mode made it work on SOME websites, I don't know why it doesn't on the others but at least I can complete the rooms

[crisp jungle]

I'm having a problem where boxes freeze on me. I'm doing Ghostcat and the shell will freeze and become unresponsive. The rest of my PC is fine.

[small eagle]

👋 hi everyone!
Not sure if this is the right place to raise this question, but it feels more technical than anything else. Please feel free to delete/move if it is not the right channel.
I want to propose to my company to get a business subscription on tryhackme.
My question is:
Will I be able to transfer my current progress (as a single private customer) to the business account?
Moreover, will I be able to move back to a private customer subscription (and take my progress along with it) should my company decide to no longer continue with the subscription?

[crisp jungle]

why are all the boxes I try to use so slow? I mean slow as in unusable

[zenith glacier]

I emailed on [e-mail], when will I get response? I mean normally after how many hours we can get response?

[neat plank]

Just want, they'll response you as fast as they can

Please don't spam mail

[zenith glacier]

ok. are you from support team?

Still thanks

[unique sleet]

Don't hold your breath waiting for a response. I emailed them last week and still haven't heard from them...

[glad egret]

If it's been a week, send a follow up email. The support staff are very busy and do the best they can. Sometimes emails unfortunately and unintentionally, fall through the cracks

[lyric bramble]

I was trying to complete ohsint but the image isnt giving out any exif data

Its displays corrupt data
Any fix...????

[glad egret]

Try another site

[worn pine]

@online

I'm stuck with a ctf problem

[sturdy sundial]

can any one give me code to hack a wifi password

[exotic kayak]

I tried to login in to my account, but for some reason its not working and I'm not even getting the reset link. Does anyone have any idea why it's not working?

[worn pine]

The following is a commented code snippet of the php source code to which I don't have access to

And the aim is to find $ownername

<?php
include(DIR.'/ownerdetails.php');
extract($_GET);
if ($_SESSION['alive'] === $_COOKIE['dead'])
{
echo "meow meow";
}
else if ( sha1($_SESSION['alive']) == sha1($_COOKIE['dead']) )
{
echo $OwnerName;
}
?>

can someone please helpout

??

[neat plank]

Please don't spam

Someone will see and help you

Please wait

[split obsidian]

try grep

[split obsidian]

you can use this command "grep . meow meow"

[split obsidian]

or you need to dowload the file and echo it on your user account

[zenith glacier]

ok

[worn pine]

But I can't do it without the ownerdetails.php file which I don't have

[naive dust]

Support is busy as Alex said, wait a week, if no repsonse email again, not every other day, Support will get you know when they can.

[split obsidian]

idk more

[lyric bramble]

i used the exif tool

[glad egret]

Try an online tool

[naive dust]

Try deleting the image and redownloading?

Maybe the error was caused within the download.

[naive dust]

Hello. Is there any way I could change my username? What happened was I choose B@lr0g as the username, but the @ kinda disappeared 🙂

[simple ibex]

Hey guys, is there a way to contact customer support or something? My account says I'm not premium even though I've been paying for it

[glad egret]

Email: [e-mail]

[naive dust]

You can only use alpha-numeric characters for the username.

[static lily]

Hi, I lost access to my old discored account and therefore need a reset regarding the token. Could anyone help me please ?

[dusty nymph]

contact discord?

eyo hacker people, i need some help here. TryHackMe is not showing the captcha anymore and i know im not the only one. This needs to be publicly addressed, we cant even use it in our virtual machines. I've tried changing VPN, different user, some others from before and still nothing. if you've got anything, please tell. The captcha on tryhackme Login page doesnt show up at all and i keep getting "captcha failed" errors

[dusty nymph]

for anyone having captcha problems on linux, trying to login to tryhackme: try updating your firefox version

[solid bluff]

Any idea when the Complete Beginner pathway is being removed? Email said 14th Jan but it's still on there for me

[void ridge]

Hey guys/gals. I am trying to figure out of the room I am working on is having issues with its machine or if it is something on my end. I have partially used the machine to answer the first question but the second question when I try my answer keeps giving me a server error. FYI also I have looked up a walkthrough and they are typing in exactly what I am trying.

If anyone has the time to spin it up and test on their end that would be awesome

[void ridge]

NVM I found a work around 😛

[uneven wind]

hi, i added my full name to my profile a few hours ago and i still can't generate a certificate with my full name

[crystal marlin]

#site-support message

[uneven wind]

yes i added my full name into the Full Name section of my profile

[crystal marlin]

Yes, but certainly after you already generated it. That post states: If you did not put your first name into your profile before generating your certificate, your username will appear.

So you can not change it anymore unfortunately. But for any upcoming certs you will get, your full name will appear now, as you added it to your profile

[uneven wind]

oh shit

[uneven wind]

the only certificate i haven't generate is the Cyber Defense one, oh well i'm F

[candid wren]

Anyone else not seeing their level correctly displayed in other areas (like your public profile or the alert bell) as compared to the dashboard level widget?

[candid wren]

I second this question and want to also ask if I join my workplace do I lose my association with my college? Can we be in more than one workspace (please)?

I have approval to start a PO for this for my department at work, but I dont want to lose 1. my personal progress 2. my school workgroup.

[lament trout]

you sure you're seeing your current level and not the 'next level' on dashboard ?

[worn pine]

How to give php commands in the developer console in the browser??

I'm getting this uncaught type error cmd is not defined

[neat plank]

@worn pine https://bueltge.de/einfaches-php-debugging-in-browser-console/

Please translate this page to English for easy to read

[snow saffron]

Hi I recently deleted my oldacc so i just started fresh on new acc now. May I get one of the mods' help to unlink my discord token? thanks!

[worn pine]

Thanks

[scenic torrent]

Gave +1 Rep to @neat plank

[gritty umbra]

i have this Problem with openvpn

i try this and it doesn't work.

[naive dust]

Try including the full path to the file.

[bronze vale]

Use sudo

Read the error, it tells you what to do also

[gritty umbra]

same error with sudo

[lament trout]

sudo openvpn <name of the file>

[gritty umbra]

same error

[crystal marlin]

Have you altered your ovpn file after you downloaded it ?

[gritty umbra]

no

[crystal marlin]

Could you do head -n 20 Silverusty.ovpn and send a screenshot of that?

[gritty umbra]

ok

[crystal marlin]

Well, I gtg now, in case you provide the screenshot later on, I'll reply to you when I'm back.

[spare flare]

May be a sideeffect of not properly generated config. You can simply regenerate. If regenerating doesn't work. Try changing to another server and generate then it will surely work!

[naive dust]

Humm, ok. How can one add the missing a then? 🙂

[naive dust]

Contact [e-mail] and ask them to change your username. 🙂

[naive dust]

https://tenor.com/view/bruce-lee-bow-master-smile-gif-12365468

I'm on it. Thank you very much for the help.

[static lily]

The tryhackme discord token has nothing to do with discord

[static lily]

Any admin or moderator here who could do that ?

[naive dust]

A mod will get to it when they see it I'm sure.

[summer matrix]

hey guys anyone here for some help ?

im trying to upgrade a nc rev shell into a fully functional shell

ssty -raw echo gets me stuck in this weird indented command line that i cant get out of

any help ?

tried reset

but hitting enter brings up ^M

[dark canyon]

hi everyone, I cant reach out the wreath network, my vpn is all set, I was doing well until I timeout but now, I cant reach out anything, maybe staff's can help?

[keen scroll]

Are you using zsh as your shell?
Use this instead - stty -raw echo; fg

Also, you may discuss this in #room-help

[keen scroll]

Just as a minor check, did you check if the network is sleeping?
You will have to start it again, extend it while working on it

[limber stump]

Windows Privesc room keeps spinning indefinitely

[static lily]

@limber swan and @little berry, your room "Battery" is vulnerable to ||CVE-2021-4034|| and the ||PwnKit exploit|| will give straight root access. Since it is not quoted in any writeup, my guess is it wasn't expected.

[balmy estuary]

Hi Support, I appear to have lost contact with the Throwback lab. I have tried downloading a new ovpn file, but I am not able to ping anything on the network that I once could. I have also tried from the pwnbox but that also fails.

[fallow kernel]

Hello! Is there a known issue with the MacBook Pro (ARM) running a VM Kali accessing the room's machines? I've tried doing OpenVPN on an intel machine and it seems like it works perfectly fine but when I boot up a Parallels VM and connect it through OpenVPN, I can ping the 10.10.xx.xx but can not access it through firefox.

[static lily]

Hi, sorry for the repost, but I lost access to my old discored account and therefore need a reset regarding the token. Could anyone help me please ?

[neat lark]

how to connect my attackbox windows to my local machine with RDP

?

[gritty junco]

You cannot unlink or relink any of your accounts for security reasons. But try to contact the TryHackMe Admins or Mods if you need to change one of your accounts.

[static lily]

That's why I'm asking here since it is forbidden to dm whithout the authorization...

[crystal marlin]

Hey @zealous yoke would you be able to do the unlink in that case? I'm still unsure which one of the mods can do it in case of a lost discord account 😅

[sonic spear]

why isnt my activity updating? my little green box says ive only done 2 events today when I know I've done more... and my total activities for the year won't update either :/ i want my dark green box, man

[hollow hill]

yo

burp suite: the basics

is broken

specifically task 13

i cant get my machine ip into the scope

it just keeps listing 127.0.0.1:8080

[wintry glen]

You probably won’t help me but let me try, I’m trying to pull a prank on my best friend by making his chromebook go crazy, to do it I need to guess what’s his PIN code in his school supervision app on his chromebook, I can also access it via my mobile phone and via BlueStacks, while trying to access it, I found out his username and password, but the app sends a PIN code to his gmail, thankfully the school blocks it so it doesn’t appear, this PIN will be a 6 digit code like 087945 or 273713, I’m trying to guess it with some kind of brute force attack or dictionary attack, just so you know, this has no limit, so I can keep trying as much as I want to thankfully. Could anyone show me how to guess it using the BlueStacks app? Thanks.

P.D: I’m 100% sure he’ll be completely fine with this prank.

[eager fulcrum]

-ban @wintry glen Trying to hack a Google Account "as a prank" bypassing 2FA. Blatant blackhat. Ban appeals are [e-mail]

[scenic torrent]

🔨 Banned Johxnyy#4987 indefinitely

[strong dock]

hello

i cant get into the vm

i cant type in the password

[hollow hill]

anyone help me

with burp suiote

the basics

i cant get passed task 13

or adding my machine to scope

[unique dagger]

Hey was doing room OhSINT and running exif on the image just returns file is corrupted and all the writeups start there. New to the discord sorry if this is wrong channel.

[plush bay]

try downloading it again

[unique dagger]

i did 3 times

[plush bay]

okay meep it here you go then: ```
ExifTool Version Number : 11.88
File Name : WindowsXP.jpg
Directory : .
File Size : 229 kB
File Modification Date/Time : 2022:01:18 14:01:59+01:00
File Access Date/Time : 2022:01:18 14:02:27+01:00
File Inode Change Date/Time : 2022:01:18 14:02:23+01:00
File Permissions : rw-rw-r--
File Type : JPEG
File Type Extension : jpg
MIME Type : image/jpeg
XMP Toolkit : Image::ExifTool 11.27
GPS Latitude : 54 deg 17' 41.27" N
GPS Longitude : 2 deg 15' 1.33" W
Copyright : OWoodflint
Image Width : 1920
Image Height : 1080
Encoding Process : Baseline DCT, Huffman coding
Bits Per Sample : 8
Color Components : 3
Y Cb Cr Sub Sampling : YCbCr4:2:0 (2 2)
Image Size : 1920x1080
Megapixels : 2.1
GPS Latitude Ref : North
GPS Longitude Ref : West
GPS Position : 54 deg 17' 41.27" N, 2 deg 15' 1.33" W

[unique dagger]

lol thanks could've just gotten it from the writeups 🤣 just wanted to check if it was corrupted on server side so they could get it fixed.

or if it's just me

[plush bay]

don't think so unless it gone and corrupted itself in the last month

just checked again and it works flawlessly for shadow

[unique dagger]

wtf

[plush bay]

after redownloading the file

[unique dagger]

aight well meep me i guess

[plush bay]

shadow uses the libimage-exiftool-perl to exif the data in the terminal

most linux image viewers can also show you the exif data

[unique dagger]

idk i just downloaded exif from the aur

[sullen mauve]

Hello, was wondering if anyone knows why this is happening to me?

trying to work on the eternalblue box

im running a kali vm in vmware workstation

[unique dagger]

what exactly is happening? or is not happening?

[sullen mauve]

and running the vpn on that vm

[unique dagger]

that's just you setting the rhosts

[sullen mauve]

oh... it cut it off

hang on sorry

or.. no

expand what I posted

[unique dagger]

oh shit

[sullen mauve]

[*] 10.10.175.225:445 - Triggering free of corrupted buffer.
[-] 10.10.175.225:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.175.225:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=FAIL-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.175.225:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

this part specifially

[plush bay]

that exploit is a bit random if it works or not

reboot the target vm and try again

[sullen mauve]

googling seems to suggest I have to mess with the netowrk

did that

more than once

also tried to use bridged network on my kali vm

[plush bay]

unlucky streaks happen ¯_(ツ)_/¯

[sullen mauve]

hm

maybe but I tried again today from my work network and same same

[plush bay]

but yeah could be something in the network config too

[sullen mauve]

ah ok

tried a few things but no luck...

spent hours yesterday trying to get it to work. I

[plush bay]

even attackbox???

[sullen mauve]

no, didnt try that

i bet that would work

however... im trying to use my own environment for the sake of me being able to do it with what I have setup

[plush bay]

fair

[sullen mauve]

I will keep digging on google to see what I can find

if anyone else has seen this before let me know

[plush bay]

shadow still thinks it is just the exploit being finicky and bricking the target

[crystal marlin]

You aware that you are not using the correct LHOST in that snippet ?

[sullen mauve]

yes, I did not set lhost

however I did try that

and same same

I can set it and try again really quick

[crystal marlin]

Did you restart the target machine after setting the correct LHOST ?

[sullen mauve]

yes

but I havent tried it from the worknetwork so let me try

[crystal marlin]

If you check ip a s do you only see a tun0 interface or any extra like tun1, tun2 etc. ?

[sullen mauve]

only tun0

with the confirmed IP that tryhackme says that im coming from on openvpn

I just set tht as the lhost and it still did the same thing but I didnt reboot my vm or restart the tryhackme box

[crystal marlin]

Could you send a screenshot of your options in metasploit ?

[sullen mauve]

sure

[zealous yoke]

Hey yeah shoot me a DM @static lily and I’ll see how I can help out tomorrow when I get a chance (:

[crystal marlin]

Are you using a VM as attacking machine ?

[sullen mauve]

Yes

[crystal marlin]

And openvpn is only running inside that VM? Not on your host machine as well, or any personal VPN on your host ?

[sullen mauve]

correct

no other vpns are running

[crystal marlin]

If you check sudo ufw status what's the reply you get ?

[sullen mauve]

interesting....

the vpn was not connect to tryhackme and had a red dot indicating it was not connected from my host machine but I killed it and the exploit worked...

there was no way it was connected...

[magic vortex]

hello guys can i get a help

i have been having a problem for 2 days

iam unable to open http web pages

[sullen mauve]

@crystal marlin Thank you very much for you help

[scenic torrent]

Gave +1 Rep to @crystal marlin

[sullen mauve]

seems this may have been PEBKAC on my end of some sort

[magic vortex]

any one got any idea what the problem could be

[drowsy heart]

doing the Kenobi CTF and I am trying to use the smbget command that I am being told to use. I keep getting command not found. I tried to update and install but still saying command not found.

I looked at a writeup and copied the exact string that is being used that worked for someone else and its not working for me. I am using the THM attack box not my own machine.

[plush bay]

first you connect to smb

then you use get in the prompt it gives

[drowsy heart]

I am connected

[plush bay]

then in that smb prompt write get filename

[drowsy heart]

smbget -R smb://10.10.34.164/anonymous

this is my string

[plush bay]

wait let shadow check again

[drowsy heart]

I am literally copying the string from THM and a writeup. Not sure why its not working. But thanks for looking at the issue.

[plush bay]

is the ip in your command the target machine ip and not the attackbox ip

[drowsy heart]

I have tried both, its the smbget command that isn't working

smb: > smbget log.txt -R smb://10.10.34.164/anonymous
smbget: command not found

[plush bay]

oooh

exit

then type the smbget command

[drowsy heart]

ok its saying downloaded now

it should work now?

[plush bay]

yeah you should now have the files to check

[drowsy heart]

Ok, thank you! I tried doing this in another tab while SMB was running but I guess I just needed to exit it? I appreciate your help.

[plush bay]

¯_(ツ)_/¯

lacking in the details that you needed to exit before running the next command as the smb prompt don't accept a lot of commands

[drowsy heart]

I exited, downloaded smbget and tried it again and now I am getting smbget: command not found. I'm just going to boot up my laptop and do this from my machine, maybe it will make a difference?

[plush bay]

smbget should already be there without needing to be installed

as part of samba

[drowsy heart]

which is why I am confused as its saying its not

[plush bay]

did you start the attackbox or did you start the kali vm

[drowsy heart]

attackbox

But I have parrot on my laptop so I am going to use that

[raven citrus]

Hello, I deleted my previous discord account and it has role in this server. I have a new account right now and i want to get roles in here. But when i send the message to TryHackMe bot, it gives me this message "Sorry this token is already used by someone." How can i solve this problem?

[plush bay]

contact a discord moderator by pinging them here then follow their future instructions

[raven citrus]

Thank you

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

no problem

[raven citrus]

Hello @torn citrus, I have a problem here. Could you help me?

[fallow kernel]

Has anyone tried a room with a phone?

Or a device with an ARM architect

[spring ridge]

Does anyone know if it's possible to search for a specific topic on THM? I'm looking for Content Security Policies for example. Thanks!

[naive dust]

Try the search?

I don't know if a term like that will be picked up as room, or in a room.

[spring ridge]

Stupid me, I never noticed nor even used the Search function! And I found what I was looking for! HAHA! Thanks for waking me up! 😄

[scenic torrent]

Gave +1 Rep to @lament valve

[naive dust]

Hello I have a quick question I’m trying to use John the ripper on my attack box but I’m getting an error message showing this

“ cannot find John home invoke the program via Full or relative pathname”

[torn citrus]

Sure, what’s up?

[manic jackal]

I have a problem with the attackbot not connecting with linux through ssh

well I suppose I should explain the issue:

I am, first of all, new to THM, so I don't know how everything works. I am currently in Linux Fundamentals 2, and the second step requires using ssh to connect the attackbox to the Linux machine. However, when I enter it--> ssh tryhackme@10.10.85.210, It says that there is no route to host. What does this mean, and how can I fix this?

this Is a picture

[neat plank]

Try to terminate

And start again?

[manic jackal]

well I just used up all my attackbot time for today

so I can't...

Also I'm sure once you terminate it once you can't re-open attackbot for that day

[neat plank]

Oh I see

So did you try to use your VM?

[manic jackal]

What was VM again?

[neat plank]

It's Virtual Machine

[manic jackal]

Well the task required me to open attackbot

[neat plank]

OH hey

Let's try this.

sudo service apache2 start

[neat plank]

Try to do this sudo service apache2 start

[manic jackal]

In where?

[neat plank]

Attackbox

[manic jackal]

It didn't really work

[neat plank]

Type this sudo service apache2 start and enter

[manic jackal]

like this?

[neat plank]

oh ;-;

[manic jackal]

Oh well, I'm going to sleep soon, I'll try to fix it tommorow. Gn

[neat plank]

Hope next day you'll solve it

[manic jackal]

I just did thanks for trying to help. Somehow my attackbox is open after 1+ hours...

[scenic torrent]

Gave +1 Rep to @neat plank

[manic jackal]

welp now its not letting me enter a password but i need sleep

[neat plank]

The password when you ssh?

[raven citrus]

I have a problem:

I deleted my previous discord account and it has role in this server. I have a new account right now and i want to get roles in here. But when i send the message to TryHackMe bot, it gives me this message "Sorry this token is already used by someone." How can i solve this problem?

[main kiln]

If a password hash starts with $6$, what format is it (Unix variant)?

I am stuck with the last question of Task 2.

my answer is 'SHA512 encrypt', but incorrect

[turbid ferry]

Try to look example hashes and you'll find the name you are looking for https://hashcat.net/wiki/doku.php?id=example_hashes

[pulsar drift]

I completed this module but did not receive the badge

[neat plank]

Maybe that don't have a new badge?

[turbid ferry]

Seems like the badge is linked to the common attacks room, so maybe if you have done that room before the module and badge existed, you weren't awarded the badge. If that's the case you could try to reset that room and fill in the answers again and see if you would get the badge

[olive copper]

same problem on my side

[strong dock]

i cant connect useing the attackbox

it says

port 22: no route to host

[keen scroll]

Connect to which machine?
Which room, task, ...?

[strong dock]

linux fundamentals part 2

2 task

[strong dock]

wdym which machine?

[keen scroll]

What are you trying to connect to?
SSH into which machine, room?

[strong dock]

10.10.233.77

[keen scroll]

Has it been over about 5 minutes after you deployed the target machine?
It might be booting up

[strong dock]

i didnt wait

ill try again

it worked but i cant type in the password

[keen scroll]

Passwords aren't visible as you type them for security reasons

So no one around you reads them😆

[strong dock]

oooh

ty

[main kiln]

What is the username of who you're logged in as on your deployed Linux machine?

im using virtual box kali linux

please do suggest a solution

[crystal marlin]

I'm not sure if I understand your question. Which room and task is this refereed to?

[main kiln]

https://tryhackme.com/room/linuxfundamentalspart1

[crystal marlin]

You could enter whoami to see the user

[main kiln]

im unable to start the machine

[crystal marlin]

Why?

[main kiln]

need subscription

[crystal marlin]

Yes for the attackbox in case you have already used the attackbox today, but not for the target machine

The target machine can be started in task 3 with the green "Start machine" button

[main kiln]

thanks for ur support

its coming

[naive dust]

Hello I have a quick question I’m trying to use John the ripper on my attack box but I’m getting an error message showing this

“ cannot find John home invoke the program via Full or relative pathname”

How do I fix this?

[neat plank]

Maybe john is in /opt/

try to use /opt/john

@naive dust

[naive dust]

Thank you my friend 😁 I will try that next

[left obsidian]

hi

I have emailed the support team couple of days ago, still didn't get any reply

[torn citrus]

@barren birch I don't know how to remove an old token, so I tagged you.

[magic vortex]

guys can someone help me

i have been having this problem for 3 days

and yesterday i asked for help none answered or helped

http pages , ssh

i cant open them

ssh gives connections closed

http pages keep loading

i ping the room ip its working

i changed my openvpn config file different times and it didnt work

[barren birch]

DM me your token please 🙂

[crystal marlin]

Is this only occurring with THM rooms or any webpage in general ?

[magic vortex]

only with THM

[crystal marlin]

What room for example you are on right now where it's not working ?

[magic vortex]

yesterday i was doing the printer hacking 101

it kept taking long time to load

the http page

and when it loads it gives only some html text

[crystal marlin]

Are you using a VM as attacking machine ?

[magic vortex]

nope iam using kali linux as host machine

[crystal marlin]

If you check ip a s do you only see a tun0 interface or any extra like tun1, tun2 etc. ?

[magic vortex]

tun 0 tun1 tun2

as i can see they are the old openvpn ips

[crystal marlin]

Then most certainly that's the issue, in case you are not using any personal VPN simultaneously

Then do sudo killall openvpn then connect to the thm vpn again, wait a minute and do ip a s again to check if you now only got a tun0 interface or still any extra.

[magic vortex]

but when i check on thm vpn access it gives me on which one iam connected to

oki

i will try it rn

it just removed tun2

[crystal marlin]

So you only got tun0 now or ?

[magic vortex]

i used ip link deleted tun

i deleted all of them

i will retry now

[crystal marlin]

Well, it should work and I even guess it should be done with sudo killall openvpn

But ye, try it

[magic vortex]

ssh still takes long time to connect

iam using now the sudo security bypass room

ssh -p 2222 tryhackme@10.10.220.246 2 ⚙
Connection closed by 10.10.220.246 port 2222

[crystal marlin]

I would restart your attacking machine. When it's restarted check ip a s before connecting to the THM VPN to make sure there is no tun interface. After you verified that connect to the THM VPN, wait a minute and run ip a s again to check if there is only a tun0 interface or any extra. If you have done that we can go from there.

[magic vortex]

okay

[crystal marlin]

Gonna be afk now, will reply later in case it's still not working

[icy glade]

So I'm trying to get through rooms with my own VM. I have my OpenVPN started and can ping rooms once I start them, I can even complete nmaps. But.....having issues with ssh, using tools like dirsearch and gobuster. Really really confusing.

Literally just figured it out! Top tip, using a vpn at the same time as Try Hack Me VPN does not work lol

[gaunt mica]

anyone knows about this issue on burpsuite? that I have "pretty" grayed out on all machines I have

anyone willing to help?

[sonic spear]

still having issues with this. thankfully my streak is updating but not my green squares or total activities

[crystal marlin]

Most probably because your request has no body data to it which could be displayed "pretty"

[crystal marlin]

Which room are you doing ?

[sonic spear]

im doing the pre security path

[crystal marlin]

Okay, but which room are you doing

[sonic spear]

dns in detail

[crystal marlin]

Are your points increasing when you answer a question? So not the streak

[sonic spear]

yes they are increasing. so is my rank.

this is showing that im answering questions too. it just seems like my profile is having problems

[crystal marlin]

Can I have your profile link? You could send it to me via DM if you don't want to share it here

[naive dust]

Couldn't people just !rank his discord and get his profile?

[crystal marlin]

I don't know, never used that, can they?

[naive dust]

Aye. 🙂

[sonic spear]

lol, how do you do that?

[sonic spear]

ah got it

!rank @sonic spear

[naive dust]

Probably best leaving commands to #bot-commands

[sonic spear]

u right

[crystal marlin]

Well, not sure why that happens, I would send an email to the support to address that, best to be as detailed as possible, so letting them know what room you have done, that your points increased in that room etc.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[gaunt mica]

found out that "pretty features" doesnt have on GET request, but on POST requests we get that "pretty" feature

[sonic spear]

alright, thanks for the help!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[alpine bluff]

Can we change the name of our workspace?

[naive dust]

As far as I know, no, unless support can delete it.

Which I don't know about, I've never asked.

[pliant bolt]

Does anyone else have the problem where your machine expires even though you have an hour left? I feel like adding an hour doesn’t do anything so if you have 1:50:40 you really only have 50 mins 40 secs I’ve had this problem since I started on thm and I don’t know if it’s me or just a bug

[broken bear]

refresh the page after you add an hour

[pliant bolt]

Over a year of playing ctf’s and I never thought of that

[rich snow]

I just created a workspace. How can I invite others to it?

Also please reply or @ me if you respond :) Thanks

[zealous yoke]

They need to have the same domain in the email set on their profile i.e. [e-mail] then they visit https://tryhackme.com/workspace to invite themselves (:

[plush bay]

oh so how would it be handled if someone tried to create a workspace with @gmail.com

[olive jackal]

are there rooms/tasks/questions that when done, do not show up in the yearly activity overview ? Because I've done some of the "Python Basics" Room yesterday and it doesn't show, my streak however continued.

[zealous yoke]

it doesn't sorry I should've specified

there's a "blacklist" of domains that are considered invalid. Ones from email providers like google or yahoo fall into that

[plush bay]

good to know there are sanity checks indeed

[plush bay]

thanks for answering that

[scenic torrent]

Gave +1 Rep to @zealous yoke

[zealous yoke]

Imagine how big the workspace would be! 🤣

[zealous yoke]

'tis a good question

[plush bay]

out of nearly 955 000 users we could estimate at least 50% use a gmail email

[manic jackal]

Why does using ssh in linux break linux in the linux fundamentals

I literally can't type once I try to connect

[crystal marlin]

What you mean by that? Are you talking about the password prompt ?

[manic jackal]

like this part. I can't type in this prompt

[crystal marlin]

You can type, it's just not showing you any characters for security reasons

[manic jackal]

Oh oops

[manic jackal]

thanks

[scenic torrent]

Gave +1 Rep to @crystal marlin

[plush bay]

linux is weird like thats when it comes to password prompts

pretty much on all instances of linux it will not show any characters being typed when entering a password and you just gotta hope you get it right when hitting enter to confirm the password

[zealous yoke]

There is a setting that you change so that it does

but don't do that 😄

[plush bay]

yeah shadow knows

but mentioning that could be a security risk because people enable it

[sand spoke]

I am learning about socks5 ssh tunnel proxies and set one up(with putty), it is working however it is extremely slow. By my understanding a proxy does the same thing as a vpn however lacks encryption. I would think it would be faster as we are doing the same stuff minus the encryption, but this is not the case. I created a openvpn hosted on a vps, and my proxy on another in the same location. Can someone explain how the vpn is so much faster despite also encrypting the traffic? If this question should not be asked here please redirect me to where it could be, I couldn't find any network focused discord servers

[naive dust]

is there a way to show the settings you can select for modules in metasploit?

for example: im using the mysql_sql module and the sql option can be configured to show_databases

is there a way to get a list of what it can be changed to?

[celest wadi]

https://tryhackme.com/rooms :)

[forest yoke]

Guys
I need some help with an issue
I have Ubuntu 20.04 in dual boot with Windows 11
and I use Ubuntu as my main OS
I am trying to install kali with virtualbox
Only that I get a weird error code
Kernel driver not installed (rc=-1908)

The VirtualBox Linux kernel driver is either not loaded or not set up correctly. Please try setting it up again by executing

'/sbin/vboxconfig'

as root.

If your system has EFI Secure Boot enabled you may also need to sign the kernel modules (vboxdrv, vboxnetflt, vboxnetadp, vboxpci) before you can load them. Please see your Linux system's documentation for more information.

where: suplibOsInit what: 3 VERR_VM_DRIVER_NOT_INSTALLED (-1908) - The support driver is not installed. On linux, open returned ENOENT.
a guy suggested that I have installed virtualbox multiple times
and they told me to "purge" all other downloaded virtualboxes
I don't know how to "purge" something
This is the link of the post I made
https://forums.virtualbox.org/viewtopic.php?f=7&t=105269
virtualbox.org • View topic - Virtualbox not booting on Ubuntu 20.0...

I asked on the forum

[magic tapir]

yesterday i was able to access openvpn {before updating kali) and tried downloading file and changing server (by default for me it is IN-Regular-1) how to know about this - Your Firewall is blocking that port

• Your ISP is blocking the traffic from getting to our server

[crystal marlin]

On your kali machine you could try to check sudo ufw status

[magic tapir]

It's inactive

[crystal marlin]

Okay, well then I guess you have to check somewhere else, like if you are using a VM, maybe on your host machine is a firewall or on some other place. Maybe try to ask your ISP if traffic from openvpn gets blocked, if you are using wifi maybe the issue is there.

Or if it's a VM check the network settings of virtualbox or VMware or whatever you use

[chrome leaf]

is arcade-museum.com owned by the creator of the Retro room?
because people are spamming their image uploader with payloads

[magic tapir]

network of vm virtual box is adjusted to NAT'

[keen scroll]

@broken bear Hey, could you have a look at this post?😅
Looks odd from an unverified user

[chrome leaf]

https://www.arcade-museum.com/image_upload.php?game_id=10204

not sure what unverified is

[broken bear]

the retro THM room?

I believe they are unconnected.

[chrome leaf]

yes. apparently some people can't figure that out. lots of try hack me and powershell stuff on there

[broken bear]

But any time you have an upload on a public facing server, people are going to do bullshit

[chrome leaf]

a little strange that the room links right to it on the main page

"main" page

[broken bear]

I'll take a look at it now

@chrome leaf I'm looking at the THM retro room now, do you mean https://tryhackme.com/room/retro?

[chrome leaf]

Yes.

if you launch the machine and go to ||:80/retro|| there is a link in the first article that says "you can add a new image here"

[broken bear]

I will let the staff know

[chrome leaf]

thanks

[keen scroll]

Sorry, it seemed fishy of you (previously unverified) to talk about people attacking a public server😅