site-support

[weary spindle]

Are you on the VPN on VM?

[kindred finch]

yeah

[celest wadi]

https://tryhackme.com/api/user/update-timezone
This should update your country and redirect to your dashboard if it works :)

[bitter temple]

Hello everyone! I am making a ctf for my university. How can I add point for tasks?

if someone solve the task, some points will add him

[celest wadi]

For points to be given(for thm leaderboard), the room has to be public released

You can set the room to be public in the develop rooms tab but it has to go through a long vetting process to be made public

[bitter temple]

Can I do it with another method?
I need to room will be a private

[celest wadi]

No, only thm approved rooms can give thm points, otherwise everyone would just climb to the top with their own rooms

[bitter temple]

I understand. Thanks

[cunning parrot]

any problems with the holo network? i lost connection from one moment to the other to L-SRV01..

L-SRV01. seems to be down

we need one more reset vote in the 10.200.107.x instance pls.

[cunning parrot]

Reset is done, thx to whoever 👍

[marsh rampart]

Wreath is broken cant get vpn have tried logging out and logging back in, regenerated and waited with no luck everytime is 404

[weary spindle]

I just downloaded one.

[marsh rampart]

Tried many times

Even tried on different machine

Just tried on my phone and got 404

Tried on laptop 404

What good is network if u cant use it 🤷

[weary spindle]

The network isn't the problem.

[marsh rampart]

No its the vpn file obviously

Not getting generated properly

Even on the attack box it's not configured properly when you do ip a there is no connection

[weary spindle]

Leave the room, wait 15 min(s), re-join the room and download a script.

[marsh rampart]

Ill try

Doubt it will work though

[weary spindle]

Just make sure you wait 10-15 min(s)

[marsh rampart]

And what do i do if that doesnt work

[weary spindle]

🤷‍♂️

Lol.

I'm not support, staff or a mod.

So, after that and it doesn't work, I have no idea.

[marsh rampart]

Yea i figured

I did contact support about it

[deep thunder]

Am I allowed to use the THM attack box for Pico CTF?

[weary spindle]

Did it work?

[weary spindle]

Are you on the attackbox?

[eager fulcrum]

No

[deep thunder]

Oh rip

[plush bay]

make your own kali vm and use that instead

[deep thunder]

I wish I could, I only have access to school computers

[plush bay]

okay then that is a problem

depending on how much money you have you could either buy your own computer.... or get a vps to use for this purpose

[slim lava]

hello
i'm in the Content Discovery room > Task 12
and none of the three automation tools (ffuf, dirb or gobuster) are working

[stiff niche]

Hey everyone. I've completed a couple of rooms in the past two days, but when I try to share them on LinkedIn they don't display properly.

It only displays the main TryHackMe page.

Has this happened to anyone else? I just can't seem to share room badges.

[honest pasture]

I completed a room and missed sharing it on social media... is there any chance to reach the popup with the share links again?

[crystal marlin]

#room-help message

[honest pasture]

Shame on me; I did not even try to look for a shortcut like that.

[gloomy tangle]

hello. i´m with some problem trying to start machine in windows fundamentals. after machine login i receive a message error "the tryhackme remote server is not currently reachable. please check your network and try again.". i tried with remote desktop and also something wrong. i tried to start some other machines like linux and it starts ok. someone can help me?

[rancid bramble]

Anyone knows the validity of the coupon of the throwback labs like after how much time after the time of buying it expires?

[supple sonnet]

if someone cares, I'm sure you'll get an email asking you to stop. Until then, go for it.

[naive dust]

Hi, I sent a message through tryhackme support page a few days ago but haven't gotten a reply. I am having an issue with my streak showing a different number in multiple locations. So my avatar has 1 streak, but my streak in my friends list area is different, as well as on my questions answered section.

[plush matrix]

Can a site staff disconnect my account from my discord
OPSEC reasons

[wanton flicker]

Hi all, I just renewed my laptop, which do you think is better for using kali: hyper-v, virtualbox, or vmware? My laptop specs are windows 11 education, i7-11390H, RAM 16GB, SSD 1TB. I used to use kali directly on my old laptop.

[glad nest]

Yo anyone know how to add roles to your profile?

[naive dust]

Hello, I'm trying to work on a room and it appears my VPN connection likes to reset itself every few seconds, causing me to lose connection with the target machine.

[unique raft]

can anyone help me with Attackbox problem with ".
Most of the time when i have to use ", there is no response and i have to paste " instead of machine IP everytime. It's occurs everytime for kali linux but for the Parrot OS it's occur just now and then.
Any help?

[sleek jackal]

You probably don't wanna be doing anything hack related on school property. Just a bad idea unless you're in a class which specifically sanctions the activity as part of it's curriculum

[sleek jackal]

You're saying you have trouble with inputting double quotation marks?

[sleek jackal]

Try a different network if available or try redownloading the ovpn file. Are you connecting to your closest node?

[sleek jackal]

It's impossible to say as there are too many variables in play. Quality of hardware, age of hardware, os configuration, other applications, vm configuration, etc. The best thing to do would be download/install all three and see which works best for you

[sleek jackal]

Could be something on the back end or could be cached data in your browser. Try closing out ALL instances or THM on your machine, clear your cache (shift + f5 does it for Chrome) and sign out of your account. Then sign back in to a single tab and see what it says. I've had my laptop show one streak and then my PC show another inside the VM. The streak is kept server side and reported to your instance so it's whatever they have saved

[sleek jackal]

Like what? Usually staff hands them out. What type of role you looking for?

[glad nest]

actually a mod must have seen one of my messages cause I have seen my profile and now have the A+ role which is the certificate I currently hold. I also hold the ITIL4 foundations cert but I guess that cert isn't a role so could not be applied.

[meager turret]

Hi, I'm having a problem downloading my jr pen test certificate, It reads fetching certificate then no response

[naive scaffold]

quick question, I"m in the OpenVAS room, able to load the OpenVAS container in my own Kali box. I tried to run it in the attack box - ran out of disk i think: received an error message "docker: failed to register layer: Error processing tar file(exit status 1): write /var/lib/openvas/scap-data/scap.db: no space left on device.

[weary spindle]

Try clearing cookies/cache?

[meager turret]

Try'd using chrome instead of firefox and that worked? @weary spindle Thank you

[scenic torrent]

Gave +1 Rep to @weary spindle

[deep thunder]

My it teacher is fine with it as long as I use remote machines

[stray cove]

has anyone answered your query yet?

[deep thunder]

Thanks!

[scenic torrent]

Gave +1 Rep to @supple sonnet

[zealous yoke]

!tokenremove 568807992166711296

[sharp bison]

Done, no more entry with UID "568807992166711296".

[zealous yoke]

done @plush matrix cc @crystal marlin

[zealous yoke]

-undelete -a

[scenic torrent]

Up to 10 last deleted messages (last hour or 12 hours for premium):

12 minutes ago (Sat Apr 2 11:09:21 2022) robiul_awal#8845 (ID 697637165521305650): @CMNatic Brother!🥲

[zealous yoke]

@barren rain ?

[barren rain]

I've Mailed My Issue!🥲

Waiting For Reply From 9hr!🥲

[zealous yoke]

Okay?

Support isn't 24/7

It's currently the weekend

and I guarantee you, you're not the only one waiting for a response

So you just have to be more patient

[barren rain]

Will I Got Reply Today Or Not?🙂

[zealous yoke]

I have no idea

[barren rain]

Owh!🙂

Is There Any Other way To Get Back Lost Streak?🥲

[zealous yoke]

No, you need to wait for support

[barren rain]

Owh Okay!🥲

[light vale]

You're gonna get it mate don't worry just continue doing tasks and it will be added to the lost streak when they reset it, don't stress

[karmic tapir]

I would like to login in TryHackMe in my Kali machine but I don't see any Captcha field to fill.

[naive dust]

how do I enable viewing of the transport layer security in wireshark as shown ins this image?

mine looks like this

oh i'm dumb

they just changed the name

[celest wadi]

Click on a tcp packet

[jade otter]

Hello, I am creating my first room. Can someone help me with changing the banner? I can't seem to find it...

[severe temple]

Is there somehow a way to use Tryhackme on mobile? I used to work it on my Kali Distro (GUI) on mobile before but unfortunately Android 12 messed up a big chunk of Termux background services.
Running it straight on mobile is literally impossible with the split-view

[eager fulcrum]

Honestly SSH into the attackbox is the best way I've found

[naive dust]

For the learning paths is there an order for them? If not then what is the best order to learn them?

[plush bay]

not really a hard set order but the recommended one by shadow is the following:

1. pre security
2. junior pentester
3. web fundamentals
4. complete beginner
5. pentest plus
6. either cyber defense or offensive pentesting

[naive dust]

Thanks, appreciate it

[naive dust]

I've been running an nmap scan. A very basic one, with -Pn

It's been 45 minutes and I've made 32%... does anyone else have this issue?

[naive dust]

and it's progressively getting slower, it seems now... 40%

should be a lot faster than this. 5%-8% every 30 minutes

[naive dust]

aggressively slow...

[tight viper]

Was wondering if anyone was able to remove my token from this account.

[severe temple]

Best answer from Google:

"You are scanning empty space. The -Pn option (formerly -PN or -P0) tells Nmap to skip the host discovery step (colloquially called the "ping scan") and assume that every target address has a host listening on it. For the default TCP scan, that means that Nmap will scan 1000 different ports on every target address, regardless of whether any replies are received. When no reply is received for a probe, Nmap will wait a full timeout period (default starts at 1 second) and then retry a few times to ensure the packet was not dropped. Your valuable bandwidth (and therefore time) is wasted sending probes that will never get a response."

[weary spindle]

Use the flag -T4.

[severe temple]

That would be neat. Tried connecting to my room with the typical ssh [MyUsername@ip] but connection timed out every single time even the room was up and running. What am I missing?

Ah. I have to connect with the openVpn client first right? This.

However now I'm prompted with a password which doesn't seem to be my account-password 🙈

[crystal marlin]

Where you trying to ssh to, the attackbox ? If yes, you can find the password for the attackbox at the bottom of the split view, after pressing the "information" button.

[naive dust]

How do I authorize with Discord token here? 😦

[celest wadi]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

ty @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[weary spindle]

Do you know if the attackbox has Spark messenger?

[severe temple]

Thanks. Yeah I tried to ssh the server-ip for the room I was doing. When I enabled openVpn it seemed to be working as long as I had the password. Now I know where to find it. Thanks. :)

[scenic torrent]

Gave +1 Rep to @crystal marlin

[eager fulcrum]

Yikes, don't ever put in your account username and password outside the THM web sign in form.

[crystal marlin]

No I don't sry

[naive dust]

I'm only scanning one target so I don't fully understand... maybe I'm not grasping something

No CIDR, just a single host

idk. maybe increasing the timing will help

[crystal marlin]

What's the issue exactly?

[glossy urchin]

What command are you running?

[naive dust]

the scans are unacceptably slow. My connection is good. I'm assuming THM's is good as well.

[naive dust]

just -Pn -p- <TryHackMeTarget>

[crystal marlin]

Which room you are doing? Are you on your own machine or the attackbox?

[naive dust]

I've tried both. Usually, I use my own VM

[crystal marlin]

You have not answered my first question

[naive dust]

It's the final test for the Pentesring Crash course

[crystal marlin]

Is that machine not replying to ICMP pings?

Or why you using -Pn?

[naive dust]

I haven't used packet trace, so I'm not sure if it's replying or not. I'll have to look when I get home

but I'm using -Pn because 9/10 they drop me scans ("host is down": I guess firewall) so I just default to that option to avoid the pain and frustration

[crystal marlin]

Okay, so if it's saying the host seems down, it's not replying to the ping. But that option could make your scan slower, so I would not use that option by default, rather only if it's saying "host seems down"

Also, you could try adding -T4 or even -T4 --min-rate 10000 to your nmap command, this should be no problem with thm machines

Beside that, make sure you give the target machine enough time to fully boot

So I would always wait about 5 mins, sometimes even 10

[naive dust]

yeah, it responds when -Pn is enabled but it's painfully slow, unless it's only 1-2 ports

I've been scanning all 65k ports with it, which might be the problem

[crystal marlin]

Of course all 65k+ ports will take a bit, but the time you said seems way too long

So try the options I gave you, I guess that should solve it

[naive dust]

thank you

[crystal marlin]

Oh and one last thing, I just tried it, that machine should not need -Pn to be scanned

[naive dust]

thank the stars

[loud jolt]

I can't reach CORPORATE.local even when I pivoted
Rested the network and still same problem, any idea ?

In throwback network

[ashen scroll]

they need to fix the "reconnecting" problem. Im not sure if anyone else is having this issue but when im in the attackbox, it reconnects every 10 seconds making it super inconvenient to do the tasks

[heady oyster]

Hi,
Which Windows dist. is best suited for the Brainstorm room (https://tryhackme.com/room/brainstorm) ?
I’ve tried to run the chatserver.exe file on Windows Server 2003 (32 bit) OS but the file did not run. Any tips? Thanks in advance 😉

[celest wadi]

Running the file directly might be difficult unless you're on a windows 7 machine/VM, but you can run it directly in Immunity debugger(on any machine IIRC)

[heady oyster]

Okey , thanks for the help 🙂 👍

[scenic torrent]

Gave +1 Rep to @celest wadi

[wintry tiger]

hello all, I am just getting back into TryHackme.
finding a problem with the Blue room.
the first part of gaining access. using metasploit, I am using the correct host,
i set the payload suggested and it keeps failing.
I've also used the default payload and that is also failing.

can anyone help??

[] 10.10.190.6:445 - Sending egg to corrupted connection.
[] 10.10.190.6:445 - Triggering free of corrupted buffer.
[-] 10.10.190.6:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.190.6:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=FAIL-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.190.6:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[*] Exploit completed, but no session was created.

also using VPN and not the attackbox

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[wintry tiger]

ahh okay thanks.

[weary spindle]

I know it's an old room, but maybe the option for LHOST should be added, it's catching so many people out.

[tight viper]

Bump.

[barren birch]

Why?

[tight viper]

I have an old account I'd like to link to that I had.

[barren birch]

!tokenremove 921847751208226836

[sharp bison]

Done, no more entry with UID "921847751208226836".

[barren birch]

Sorted 🙂

[tight viper]

Appreciated Muiri!

[barren birch]

Np

[tight viper]

Says my token is already in use now

[barren birch]

DM me the token please

[tender heron]

Hey there, I'd like to use my real name in the profile (and so, also for the Certificates), but it contains a dash (-). The issue is, that the full name field strips away the dash and my certificate has a wrong name now - how can I fix that? I'd like to have a correct certificate... Who can help me with that, please?

(my workaround for the full name is currently a UTF-8 dash, but I'm not sure if that will occur correctly in future certificates)

[crystal marlin]

As far as I know, once the certificate is generated, it's not possible to be changed, also not via support.
Regarding future certs, you might want to send a mail to the support asking about the dash issue.

[wide moss]

Go to your profile and then click on the about me tab, there you fill the form with your full name and the problem should be solved 🙂

[wide moss]

yeah, u are right, once the certificate is generated, it's not possible to be changed!

[weary ferry]

Hey guys I recently completed a room but I didn’t get my streak renewed I was at 57 days and was wondering if I could be pointed the right direction for help

[wide moss]

hey guys, i use kali on a server and i connect via ssh, however, when i activate tryhackme vpn on my pc the ssh connection freezes, do you know how to solve this?

[sleek jackal]

activating the vpn is likely hanging the ssh connection. remember, you need to activate the vpn on the machine which you are running kali from. if you are on pc A and you ssh into pc B with kali on it, when you activate the vpn on pc A it won't do you any good. you need to activate the vpn on pc B where you are running kali since that is where you will be launching your attacks/scans/etc from. you would do better to either use a machine that has kali on it, create a vm with kali, or use the in browser version.

[sleek jackal]

you can email support but like so many before you, it isn't guaranteed that you will have your streak renewed. just a heads up

[sleek jackal]

a reconnecting message would imply something with the network connectivity between your machine and the THM server. just because you can load a YouTube video does not necessarily mean that you have a good connection to THM. Try resetting your modem/router and reconnecting to the site.

[blazing crypt]

Hi....is there an issue with the Attack Boxes at the moment....I have failed to connect.

ignore me all back and running now

[ashen scroll]

Happened to me too. The streak didn’t reset and it continued but I wasn’t given the lost day.

[ashen scroll]

Thank you for the reply. I do have spotty internet and they haven’t been able to fix it. We had the technician come in and everything. I don’t have this issue when I use vpn but the rooms that require windows get a little tricky since I think we need to use remmina. It’s a whole process to connect to it. But thank you for letting me know.

[scenic torrent]

Gave +1 Rep to @sleek jackal

[crystal marlin]

#site-support message

[crystal marlin]

#site-support message

[crystal marlin]

You use kali on a server but you start the vpn on your own pc? I'm not sure if I understand your set up

[delicate wolf]

hi, can i pay premium from UnionPay card?

[eager fulcrum]

It is apparently supported by the payment processor THM use.

[delicate wolf]

thanks, sorry for my question in the main channel, i don't know where these questions should be

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[sleek jackal]

Of course, anytime.

[sleek jackal]

They have two machines, one they use and another they ssh into which has Kali on it. While ssh'd in they start the VPN on the first machine and it hangs the ssh session. As I mentioned, they need to run the VPN on whatever machine they have Kali on.

[ashen scroll]

Tried it. but didnt get reply after the initial email they sent me. i just let go

[dawn flint]

Working through Wreath and trying use Burp to get the reverse shell from X.X.X.200 to X.X.X.150. Converted Powershell command using Ctrl + U yet I am not able to catch a reverse shell. Ncat shows it's listening on same port as in Burp script and only changed IP and Port. Any suggestions?

[wide moss]

Sorry, no... I start the vpn in the kali on server, but the connection ssh freeze when i do that.

[hallow bear]

Noobie here, working through the Network Services module and my "cat" command in the attack box is missing. how do i restore it?

[wide moss]

Try sudo apt install cat

[crystal marlin]

Include a screenshot please to see what exactly you are doing, it's very vague what you are describing.

[crystal marlin]

Verify and show a screenshot pls

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[hallow bear]

unable to locate package cat

[wide moss]

you will have to add a repository in kali to be able to download cat. But to speed up your process, use another similar command, like “more” or open it with your own text editor by typing the command nano your-filename

[broken bear]

In my experiences, a lot of commands and packages are stripped out to reduce the potential threat model of the server - it's more common than you'd think. In fact, there are distros that explicitly blacklist SSH as part of their intended use-case.

But to be missing from the attackbox makes me think that some shenanigans are happening to that VM instance....

[zealous yoke]

Are you doing the ftp section of network services

I almost promise you, you are logged in via FTP to the box. FTP does not have cat

@hallow bear

[broken bear]

Check out Project Atomic and CoreOS 🙂

[scenic torrent]

Gave +1 Rep to @broken bear

[hallow bear]

thank you, figuring that now. Having a lot of fun learning this but damn it gets frustrating

[scenic torrent]

Gave +1 Rep to @zealous yoke

[hallow bear]

Thanks a ton. I'm 44 and trying to learn something new, really appreciate it.

[zealous yoke]

You’re more then welcome (:

Keep on at it!

[bronze vale]

AttackBox Disconnected on Start-up
Hey! :)

If you have just started an AttackBox or machine and it has instantly displayed a "Disconnected" error message, please try terminating and re-deploying the machine.
In the meantime, we will be looking into a permanent fix for this issue.

Super sorry for the inconvenience this may have caused in your hacking adventure!

• Jabba

cc @crystal marlin @gray loom

[lime pond]

Just freshly generated a new OpenVPN file because I could establish a connection. Now I get a problem with messages like this:

• OpenSSL: error:0909006C:PEM routines:get_name:no start line
• OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
• Cannot load inline certificate file
  Any idea?

Ok, nevermind. I switched the server again and regenerated config -> now it works again

[primal solar]

Hello

my openvpn connects in the terminal but i cannot ping the machines

[weary spindle]

What are you trying to ping?

[primal solar]

The rootme machine

[weary spindle]

Have you started the machine?

[primal solar]

yes

well it worked at first time i started it

then somehow openvpn disconnected

[weary spindle]

Did it reconnect?

[primal solar]

and then when i connected again it shows initialization complete

but when i used the machine ip to ping the machine it showed no results

[primal solar]

Vpn connected but macchine didn't respond

i also changed the location and server

[weary spindle]

Is the machine still up?

[primal solar]

but nothing happened

[primal solar]

No i terminated it and started the pickle rick machine and it also did not respond

[weary spindle]

curl 10.10.10.10/whoami

And that, that should have been my first port of call.

curl second.

[primal solar]

well there is a docker0 but i don't use docker

[primal solar]

It gave == 10.18.23.99

[weary spindle]

Well, you have an IP.

What's the picklerick machine ip?

[primal solar]

10.10.58.58

? it shows the timer

[weary spindle]

Yeah, but if you're a free user it's best to give it 5 min(s) for everything to start working.

[primal solar]

okay ill wait

[weary spindle]

What is your pickle rick machine ip?

[primal solar]

10.10.58.58 this one

[primal solar]

well it has been around 9 minutes since i started and still no response

[primal solar]

it magically worked

well thanks

[weary spindle]

Happy hacking.

[primal solar]

now i will go check the root me machine

Thanks again

Have a nice week

[primal solar]

Hello again

WELL,

IT again stopped responding

I pinged , it returned back i even got to the machine but it just stopped in the middle

OR is it part of the challenge

because it keeps on sometimes respoding and denyin

??

[clear shore]

Hey, can somebody help me out? I keep getting a 404 every time I try to download the connection pack for Wreath. I've tried leaving the room and rejoining, regenerating, etc. Still nothing

[iron kiln]

Hi, I recently install kali linux ona dual boot with windows on a laptop, and I can't switch from intel gpu to nvidia gpu, Can somebody help me please?

[naive dust]

can i get some help with the openvpn

[wide moss]

I can try help… What’s the problem?

[naive dust]

so here it says that i am connected

but not here

[wide moss]

U are using the correct (and last) openvpn file configuration?

Try ping the ip of the serve

[naive dust]

yes cuz when i try to ping it worked

[wide moss]

Ok

[naive dust]

i think its a glitch

[wide moss]

Yeah

Update the page

[unborn steeple]

Thanks a lot, it works

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[wide moss]

If don’t work, try disconnect and connect again on your account

[naive dust]

i tried that many times today but it didnt work

and the machine stops responding some times when i am in

msfconsole

[forest yoke]

hello

My opnevpn doesn't work

sudo openvpn ovpn
2022-04-05 03:26:16 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2022-04-05 03:26:16 OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
2022-04-05 03:26:16 library versions: OpenSSL 1.1.1n 15 Mar 2022, LZO 2.10
2022-04-05 03:26:16 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-04-05 03:26:16 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-04-05 03:26:16 TCP/UDP: Preserving recently used remote address: [AF_INET]54.76.30.11:1194
2022-04-05 03:26:16 Socket Buffers: R=[212992->425984] S=[212992->425984]
2022-04-05 03:26:16 UDP link local: (not bound)
2022-04-05 03:26:16 UDP link remote: [AF_INET]54.76.30.11:1194

does it have an expiry date or something?

[white nebula]

hello, i have a problem connecting to holo all of a sudden.
i took a short break and the network shutdown, when i restart it again, i cannot connect to any of the machines. I tried to ping but the destination host is unreachable.
can anyone help me?

i would like to send pictures but looks like i cannot here

[forest yoke]

I have tried reinstalling the vpn but it still doesn't work

[white nebula]

update: it works after resetting the network. Lost a bunch of progress and now i im out of resets 😿

[crystal marlin]

I don't see no error in that output, so wait longer

[forest yoke]

ok, thanks

I'll try later

[tawny geyser]

Hi! I am working through Linux Fundamentals Part 3 Task 4.
It says to deploy a python http server
I have done that with python3 -m http.server but it's not establishing a connection I don't believe. It's just blank and I can't download the file to complete the task

Ahhh, bloody hell. Right, yep, understood. Sorry.

[noble gyro]

Question regarding allowed usage of AttackBox:

I'm currently doing Burp Suite room and practicing using Burp.

Is it allowed to use the tool to test a CTF challenge hosted by a friend?

[barren birch]

Only if the CTF is hosted on TryHackMe 🙂

(i.e. you may not use the AttackBox to target anything outwith the THM network)

[noble gyro]

This means that I can only test against VMs deployed on THM?

[barren birch]

If you are using the AttackBox, yes

[fierce tartan]

Hey guys, I’m having trouble connecting to the Hackpark room. The room page just keeps loading. I’ve tried 4 different browsers, 3 OSs with no chance. Can anyone please help?

[weary spindle]

Are you connected to the VPN?

[fierce tartan]

Yes everything is working fine

I can connect, load other rooms

[weary spindle]

Are you trying to access the IP in the web browser, yes?

[fierce tartan]

See the problem itself is the TryHackMe room page not loading, and without that I can’t even deploy the room

[weary spindle]

Ah!

I tried loading the page, but I can't view as it's a sub room.

[fierce tartan]

Gotcha! It’s been days now. But I’ll keep trying

[noble gyro]

Thank you!

[scenic torrent]

Gave +1 Rep to @barren birch

[naive dust]

does anyone know RSA-2048 encryption and can check some of my calculations?

[broken bear]

This channel is for technical support directly related to THM. You will likely have better luck in a different channel more relevant to your question.

[naive dust]

oh ok, thanks

[scenic torrent]

Gave +1 Rep to @broken bear

[lusty bone]

how do i get help with a task in a learning path? enumerating telnet....

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[lusty bone]

Well....the task asks me to run an Nmap scan on the machine in order to find open ports....pr9blem is the Nmap scab produces 0 open ports....

[dense trout]

The room jackofalltales isn't responding to me

no ping

[weary spindle]

What's your machine IP?

[dense trout]

10.10.95.151

[weary spindle]

Are you connected to the VPN?

[dense trout]

yes

Oh

It disconnected

[weary spindle]

Your vpn?

[dense trout]

yes

"Exiting due to fatal error"

[weary spindle]

There you go.

[dense trout]

Had to be in root

[weary spindle]

restart the VPN you should be golden.

[dense trout]

yep its all good now thanks

[mild saffron]

is thm down?

[naive mauve]

Down for me @mild saffron

[mild saffron]

rip was streaming throwback xD

[naive mauve]

NOOOOO

[signal hollow]

can someone ping me when thm is back up please?

[slow walrus]

Thm is back 👍

[signal hollow]

thanks! @slow walrus Let's get these flags!

[scenic torrent]

Gave +1 Rep to @slow walrus

[naive dust]

can i get some support with my openvpn

its not working

its been like that for a day

[steep sphinx]

hello can i ask if there is anywhere to report for incorrect answer check? meaning the answer is wrong in the room but THM puts as correct

[naive dust]

Good afternoon! I'm starting AttackBox machine but it doesn't displayed , what can I do

[crystal marlin]

Refresh the page with ctrl + F5 or check if there is a button above the tasks with "Show in splitview"

[naive dust]

I tried, but no result, and there's no button "Show in splitview"

or I need to buy Premium, cuz today I once started the machine

[crystal marlin]

Well if you already started the attackbox without being subscriber, you should get a message telling you that

Target machines can be used without limitation

[naive dust]

hmm

at the top of the web page, the button "Access machines" there the red light is on and there it says "You are disconnected"

but the "Active Machine Information" the timer of machine is going

[naive dust]

i refresh the page and redownloaded the open vpn file

but

nothing happend

do i need to clear cache or smth

is the website bugging

cuz it all started when my sub got cancelled

then i bought it again

but nothing is working

and even thought it says that i am connected in termenal it, it keeps disconnecting

and i cant do anything

do u know any staff who can help

0 too

?

[naive dust]

"You can start the free AttackBox once a day. For unlimited time and access to the Kali machine, you need to subscribe." this inscription in the section "My-machine" ((

my internet stopped working after deleting tun1

so i restarted my laptop

i will try now

[crystal marlin]

And that's correct, the target machine is a different machine then the attackbox, so I mentioned that to let you know you can access target machines unlimited, so if you set up your own kali in a VM for example, you could continue doing rooms without the need for the attackbox

[naive dust]

its still not working

[weary spindle]

You need to refresh the page.

[naive dust]

i did

[weary spindle]

For it to show up IIRC.

[naive dust]

many times

i restarted my laptop too

[crystal marlin]

What's the issue? The red box saying "Access Machines" ?

[naive dust]

did everything

[weary spindle]

Go to 10.10.10.10

[naive dust]

its pinging

but still red

in the website

[naive dust]

my account is bugged smh

[weary spindle]

It's not bugged...

[naive dust]

why is it still red then

[crystal marlin]

You are not answering the question the way I asked it. But I guess you refer to the red box. Lassi already mentioned to you that this is buggy and therefore not reliable, so just ignore it.

[naive dust]

i mean if you say so

[eager fulcrum]

The better solution is to kill the OpenVPN processes, not delete the adapters.

[eager fulcrum]

What's red in what website?

[naive dust]

its not showing on tryhackme.com that i am connected

then it disconnects from time to time

[naive dust]

and its getting annoying especially when i cant finish tasks cuz of it disconnecting

[eager fulcrum]

Absolutely ignore the access page, verify your connection with 10.10.10.10

If you have multiple instances of the VPN running, you will get disconnects

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[eager fulcrum]

That script is automated troubleshooting for it

[naive dust]

hm i will try it but thx

[lone light]

https://tenor.com/view/nick-young-question-mark-huh-what-confused-gif-4995479

[weary spindle]

Try a refresh.

[lone light]

hi im not that newbie

even tried ctrl+F5

[weary spindle]

Terminate and redeploy then 😄

[lone light]

shit you got me

trying

[lone light]

thanks

[scenic torrent]

Gave +1 Rep to @weary spindle

[lone light]

im a dumbass

[weary spindle]

It's the simple things we overlook when troubleshooting.

[lone light]

that's the thing I used to tell my clients when I worked at IT lol

so its funny

"have you tried to reboot it?"

[naive dust]

Seems that I cannot register my discord token again, as it was verified with my old discord account 😦 What should I do?

[weary spindle]

You'll need to ask a mod nicely if they can remove it.

[naive dust]

@torn citrus or others, can you, please, nicely, reset my discord token for user nerdface ? Thanks!

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

It's generally not a good idea to ping them either, I'm sure one of them will see it and do it for you, or ask when in passing conversation.

[naive dust]

Gotcha! Thanks a lot!

[naive dust]

Hi. In the following room Incident handling with Splunk, there is an error "bad gateway" when trying to access the splunk plattform in the attack box.

it is working now.

[warm dirge]

any know how to fix vpn problem whenever i try to use eternal blue for meterpreter exploitation room, it just go to connection time out

[crystal marlin]

I don't understand a couple of things. Why you ping from cmd? That means you are trying to ping from your host machine instead of from your kali machine?

Beside that, the first task mentioned that this machines does not reply to ICMP ping, so you won't get a reply regardless

Do you have openvpn running on your host machine, rather then directly inside your kali VM ?

[warm dirge]

i tried opening from both

at first i open from vm same thing happen when i ping in vm so i tried to use vpn on host and also on vpn on both side

but it gave back the same error

[warm dirge]

it is suppose to give back a meterpreter shell but the connection just died.

[crystal marlin]

So just to make sure, openvpn has to run directly inside your VM and only inside your VM, not simultaneously on your host machine too.
Beside that, go to the room page and refresh it, to make sure the target machine is still up, as sometimes the timer is not showing the correct time.

[warm dirge]

Yap i tried running it directly only inside my vm

I also terminate and launch machine again

But same error occurs

[crystal marlin]

If you check ip a s in your kali VM, do you only see a tun0 interface or any extra like tun1, tun2 etc. ?

[warm dirge]

Tun0 only

[crystal marlin]

What's the reply you get when running sudo ufw status ?

[warm dirge]

It say ufw command not found

[crystal marlin]

Can I see a screenshot of the "Active machine information" box from the room page?

[crystal marlin]

You started it just 1,5 minutes ago ?

[warm dirge]

nope

i extended it

[crystal marlin]

Do you have any personal VPN connection running on your host machine ?

[warm dirge]

no

[crystal marlin]

Can I try to run the exploit on your target machine myself?

[warm dirge]

ya sure

[crystal marlin]

Ok, was working just fine for me

I suggest you restart the target machine once more, since I ran the exploit on it already and the machine is messed up now

Wait about 5 - 10 mins after the restart to make sure it's fully booted

[warm dirge]

ah ok so i terminate it and start a new machine?

[crystal marlin]

And try to run sudo ip link set dev tun0 mtu 1200 in a terminal on your kali machine

[crystal marlin]

Yes, just terminate it and restart it

Or

Run the command I provided you first

Then try to run the exploit

In case it still fails, restart the target machine

[warm dirge]

ok sure thank you

i manage to get in now

thank you so much

[spark dome]

Hi.. Greetings from Mexico

[hasty copper]

Why is my monthly rank not working? I saythat I am #17 but there is no my name 🙄

[small thicket]

Question: how are streaks calculated? Since it seems it reset when I've been doing things daily.

Ah, that might be it. I did yesterdays stuff earlier in the day. Thank you!

[unique oak]

Is there construction going on for this room here?

I literally was working on a room called ZTH obscure web vulns. It was located around here:

Now it completely vanished entirely and somehow I have 99% done of a room I finished... a month ago file inclusion

I was working on this path last night and it looks entirely different. To be fair I reported how the last few rooms kind of got "rough" Can someone confirm if this room was completely updated? I noticed none of those "hard to understand" rooms are now in here. They were old and crusty as hell with some outdated python utilities

[weary spindle]

I've done that full thing, but I can't see what it is right now, I've not subbed.

[unique oak]

so weird.

Glad to see we fixed it up. Afte ryou get 75% and wondering why the hell the random JWT cracker that hasnt been updated for 5 years isnt working sucked lol

[plush bay]

huh you are right.... seems some rooms got removed

[unique oak]

I knew I wasnt the only one. There was only one related video on youtube for them lol

[plush bay]

shadow is still in the zth rooms and have them completed so yeah

dunno if they were marked as private

[unique oak]

It just seemed like nobody recently in staff tried to do them themselves or something recently.

It became hell at JWT part in ZTH . Had to watch some random guy complaining about it lol

got it working without the tools they advised to use in the room

I admit im a newbie. I dont want any answers handed to me. But please dont reccomend dead github tools that dont work with python 3.9 lol

( and not warn anyone until they spend 2 hours googling that it stopped working at python 3.7.2.4

[tawdry orbit]

The ZTH room is still public. Easiest way to find rooms is to go the /rooms page and search, which shows all the rooms you have joined on TryHackMe.

[unique oak]

thank you sir! glad to see someone saw my cries for help. Definitely felt there needed to be alot more rooms and even maybe some python rooms before ZTH lol

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[weary spindle]

Were they removed last night?

[unique oak]

can someone help me understand this?

basically i'm trying to do this... but if you use the parameter &x= it only cuts off server here

it doesn't seem to be cutting anything if anything it just seems to function like a normal string

even with &x=

[unique oak]

I got this figured out. Had to just simply copy and paste the url. I forgot Spring parsers can be misleading.

string parsers

I had a python PTSD moment as soon as i started hand typing it. Whats awesome is the solution is right in front of anyone working on this one

As soon as I was hand typing it I had horrible flash backs of why my string parsing utilities were double catting my my args and other horrible things lol

hahahaha exactly!!!

[obtuse ibex]

Hi all..
I was wondering if I could get some help with https://tryhackme.com/room/splunk2gcd5 400 series questions.. The unexpected filename for an american company question. I copy and paste the korean characters in the answer but I'm still getting an incorrect answer response

[desert kayak]

Is It possible to apply 'nasc.ac.in' for Student Discount?

[celest wadi]

It might not get automatically recognised but you can email support and ask for a student discount, they'll likely check the account/school to make sure it's a student one and apply it :)

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

I also think it would be great if there was a list of approved educational institutions for domains without .edu. It would prevent support from getting 40 emails at once from my class

Can anyone give me a ball park estimate of the fees I can expect if I want to use Classrooms with 100 students?

[upper snow]

Hi there! does one of you have experience with TP-Link Wifi Extenders? Especially the TP-WPA4220 🙂

[crystal marlin]

Hi, how is that related to tryhackme ?

[upper snow]

Hi, it is probably indirect. not quite with the THM tasks. I didn't find an off-topic or other channel for this question... and in general they directed me to this channel

[eager fulcrum]

You will want to email [e-mail] and they'll direct your query to the right people

[naive dust]

yup, I'm just hoping someone who's gone through that process could give me a ball park estimate as well

I searched "classrooms" on this Server and scrolled through the 268 results, I checked Reddit, tried a few different Google queries and couldn't find any feedback from previous users or find anything regarding costs.

[light vale]

Try it on #infosec-general i think it's the best bet to get an answer to this. But i'm sure google and youtube offer much more information than the users of this discord could offer...

[paper smelt]

This will only be an overview of how the pass the ticket attacks work as **THM does not currently support networks **but I challenge you to configure this on your own network.

You can run this attack on the given machine however you will be escalating from a domain admin to a domain admin because of the way the domain controller is set up.

Can i check if this lab from "Kerberos" will work? It is under Task 6 Pass the Ticket w/ mimikatz

THM does not currently support networks -> what does this mean

[eager fulcrum]

It's outdated

THM now supports networks, with Wreath, Throwback, and Holo

[craggy skiff]

Quick question ....why is there no "Docs" link from any of the menu options after logging in?

[runic herald]

How long do I have to wait for activating premium? Bought it few hours ago

[eager fulcrum]

This sounds like something to suggest in #feedback-and-ideas
Which docs are you referring to specifically?

[eager fulcrum]

Contact support via email: [e-mail]

[runic herald]

contacted, I have to wait 1-3 days

😄

[weak sky]

Hey! My THM profile is connected to my old discord account and when i type the bot it says this token is already used by someone. How can i connect my thm profile to this dc account?

[craggy skiff]

Hey.... it's more of reference to the information architecture to the logged in profile page .... none of the menus or links actually allow you to "discover" docs.tryhackme.com I can only find it if I drill into the Profile > Access > FAQ > "I can't get my VPN working" and then I find a link to docs

I'd have thought the document repo would be in one of the higher tier information architecture levels if not the primary one under clicking profile

I guess to illustrate my point ... try get to docs.tryhackme.com only using the user interface on the tryhackme.com site

[eager fulcrum]

Yeah that's definitely a feedback and ideas thing

[craggy skiff]

no worries 🙂

[craggy skiff]

It would seem I don't have permission to post in #feedback-and-ideas 😅

[eager fulcrum]

There's a form linked there - that feeds to the site devs/staff/team

[craggy skiff]

ah yes ! ... sorry

[weak sky]

I can verify it's my account with my e-mail address or something

[crystal marlin]

Do you still have access to that old discord account ?

[weak sky]

I haven't

But i know accounts name

[broken bear]

If you can message a mod from the old account, we can unlink that token

Otherwise, you'll have to wait for a Muiri to be free from whatever circle he has worked himself down into

[glossy nymph]

how do i start meterpreter on the target machine?

[weak sky]

Bro, i cant access my old account, it's istdabest#9109 and i can verify THM account is mine. I can prove w my email.

And i can message my token to u

[broken bear]

Don't do that

If you don't have access to the old discord account, it has to be Muiri. If you can't prove you don't own the account, I cannot unlink it.

[weak sky]

Ok, thanks anyway 😦

[karmic tapir]

I have just reinstalled my laptop and downloaded Virtual box with Kali Linux but it's incredibly slow, booting takes about 3-5 minutes and I don't have a clue what could be wrong. I've set 6 GB RAM and 4 cores of CPU

I think this laptop is powerful enough, last time before the reset it was much faster

[weary spindle]

What is your RAM total?

[karmic tapir]

16 GB and the CPU is I think also enough powerful i7-9750H

[weary spindle]

Strange, tried a new Kali VM?

Mine takes about 10 seconds.

[karmic tapir]

Yeah it's strange. I've newest version of VB and iso of Kali. I think the problem is somewhere in the access to hardware resources, but in the BIOS is Intel VT-x and VTD enabled.

On my desktop with older CPU and 4 GB of RAM in VB works everything correctly, I will try some tips from YouTube.

[broken bear]

What kind of hdd?

Loading a VM is always going to be pretty slow, because there is a lot of disk lookup that happens. If you can, pop open the resource monitor and take a look at what is going on with utilization

[sleek kayak]

Hello, I'm hoping to get some help with updating my certificate for finishing a pathway. I had put my "Full Name" as my username, but would like it to say my real name so that I can use it in looking for a job. Is tech support able to help?

[karmic tapir]

I have NVMe SSD, so it wouln't be a problem. I have installed the Kali from iso. so I could additionaly try to download pre-installed .ova file

[plush bay]

sadly that is a thingy that can't be changed by anyone.... not even by emailing support... you would have to make a new account to get the cert again with your real name on it

[sleek kayak]

damn, that is such a pain

i guess photoshop will have to do!

[plush bay]

yeah if you feel like using photoshop go for it.... as the certs don't really hold a lot of value last shadow heard

[sleek kayak]

yeah, its not like OSCP or anything, but hey, I'm looking for an entry level job

[plush bay]

guess shadow is lucky and happy that their handle will be known by the company or business shadow works for in the future

[sleek kayak]

btetter than nothing

[crude venture]

Is it my end or TryHackMe -- Linux Fundamentals 1 room won't load. It is generating a connection error -- remote server not reachable.

[crystal marlin]

Seems to work fine for me

[obtuse ibex]

Hi all..
I was wondering if I could get some help with https://tryhackme.com/room/splunk2gcd5 400 series questions.. The unexpected filename for an american company question. I copy and paste the korean characters in the answer but I'm still getting an incorrect answer response

[wide moss]

Hello, is there a way for me to connect 2 computers simultaneously on the tryhackme vpn?

[distant pawn]

Hello. A few days ago I had internet problems and made me lose my 32 day streak. I sent an email to [e-mail] about a week ago but I haven't gotten an answer. Can anyone help?

[obtuse ibex]

try [e-mail]

[wide mulch]

Try VMware workstation (community)

It's way better than a virtual box.

[balmy viper]

Hi, not really an issue with THM, but in an attempt to install exiftools on my kali box for the OHSINT challenge, I get the white screen that reads "Oh no! Something has gone wrong" display

Is there a way to repair or rollback the installation of said tool?

[naive dust]

Hi Everyone, i am facing Wifi Issue in my Raspberry Pi 4, Kali OS, it can't connect with Wifi, anyone help me ?

Thanks

[crystal marlin]

I suggest you ask in #infosec-general or #general as this doesn't sound like a technical question related to TryHackMe

[naive dust]

Ohk, Thanks 🙏

[scenic torrent]

Gave +1 Rep to @crystal marlin

[cold folio]

Why does my location/nationality keeps reseting to Afghanistan even if I enter a mobile phone and change it?

I get the "Horay! Thank you. Your details have been recorded", refresh page and its back to Afghanistan 😂

[crystal marlin]

#site-support message

[cold folio]

Thank you @crystal marlin !

[scenic torrent]

Gave +1 Rep to @crystal marlin

[craggy snow]

hi all, I'm using the attackbox and working my way through the John the Ripper room and I'm having trouble with rar2john. I'm getting the error message command not found. I've been using JTR fine up until now, any ideas?

[celest wadi]

run locate rar2john and then run rar2john with the full path that is provided, like
/usr/bin/john/rar2john

[craggy snow]

Thankyou very much! Still new to linux, there's lots to learn!

[craggy snow]

I have a follow up question, why does rar2john need to be used this way, but other commands, say john or zip2john can just be used as is

[celest wadi]

well, the path to rar2john isn't in your $PATH environment variable, If you want, you can add the path to rar2john in $PATH and use it like any other program

export PATH=/usr/share/john/:$PATH```

[craggy snow]

ah I see, so "under the hood" all the programmes are being run this way, just that rar2john hasn't been set up to do so, presumably because it's less common?

[celest wadi]

well, when you type a program name in the terminal, it looks for the program in your declared paths

if it doesn't find it, it says "command not found"

[craggy snow]

gothca, thankyou very much for your help!

[celest wadi]

echo $PATH should show you the paths where it looks for programs

[craggy snow]

ill have a poke around

[sleek jackal]

That's something only support can help with, no one here can reinstate a streak. Just hope they're understanding and have pity, but there's no guarantee.

[sleek jackal]

I can second that VMware works better for me too.

[sleek jackal]

Just try downloading your configuration file on two computers and try.

[manic heath]

Sorry guys, is there any way to change the username on thm?

[celest wadi]

email support and the'll change it :)

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[manic heath]

thanks ❤️

[scenic torrent]

Gave +1 Rep to @celest wadi

[tawdry adder]

Hey, just wondering, does the VM in the browser save any additional tools you install or if it's best to download OpenVPN on a linux instance and connecting via VPN with all your other tools installed?

[weary spindle]

No, the attackbox reverts back to the state you booted it up in.

[tawdry adder]

thank you❤️

[scenic torrent]

Gave +1 Rep to @weary spindle

[karmic tapir]

Thank you guys for your advice ❤️ @weary spindle @broken bear @wide mulch @sleek jackal I have figure out the solution of the problem, the CPU or VB cannot handle more than 2 cores. I had set 4 cores and that was the problem somehow.

[scenic torrent]

Gave +1 Rep to @weary spindle

[stiff ocean]

I get an error message while trying to connect to the tryhackme openvpn servers. I have tried this on many different operating systems like on xubuntu and parrot os, but the issue seems to be connected with the network configuration of vmware. If anyone has experience with this, or had the same problem as me, please respond.

[glad egret]

@stiff ocean Have you tried regenerating your config file?

[stiff ocean]

yes. many times

[crystal marlin]

And what exactly is the issue? I can not see any error in what you posted?

[stiff ocean]

opevpn hangs up after I try to connect to it.

[stiff ocean]

2022-04-08 18:04:04 UDP link remote: [AF_INET]18.202.129.195:1194. this is the last thing it shows

[crystal marlin]

Well then you might want to wait a bit longer until any error gets produced

[stiff ocean]

k. have already waited. im going to post the stuff that it shows.

[stiff ocean]

here is the full log

[crystal marlin]

This most likely happens due to one of these reasons: #site-support message

[stiff ocean]

I cant really see either of those problems. I am using another machine (not a vm) to connect to the openvpn servers, and it never showed me anything like it did on the vm.

[crystal marlin]

You mean you can connect to the tryhackme vpn just fine with a different machine and the same network ?

[stiff ocean]

yes. the only thing is that it cannot connect on vmware or virtualbox-

[crystal marlin]

Okay. My network is set to NAT in virtualbox and works just fine, have you tried setting it to that already?

[plush bay]

does the vpnscript help you???

!vpnscript

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[stiff ocean]

yes. it doesnt seem to work.

[crystal marlin]

Can you connect with the host machine where your virtualbox is running on ?

[stiff ocean]

i cant really figure it out now, since I dont have time to download ubuntu rn. It would most likely run openvpn just fine.

[crystal marlin]

Why would you have to download ubuntu ?

[stiff ocean]

lol i have never tested openvpn on a windows machine before. i have no idea how to do it.

[crystal marlin]

https://tryhackme.com/room/openvpn

[stiff ocean]

okay. i have installed the client and it doesn't seem to work. it just keeps loading in. now it just printed out "FAILURE".

[crystal marlin]

Okay, so it seems to have nothing to do with your VM

I suggest you check the link with the possible issues again and check in that direction

[stiff ocean]

which one?

[crystal marlin]

#site-support message

[stiff ocean]

okay, thanks.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[jolly plover]

Does Brazilian students have a student discount?

[muted oak]

If I host a competition in a room, do you know how many users can participate?

[remote umbra]

Heres a crazy question. Using Kali 2021.4a and wondering how do I fix the backup scrolling in my terminal? I have tried everything to include looking through my all my bash and zsh files and my settings throughout Kali.

[astral cape]

i installed fresh recently on my laptop, what do you mean by "backup scrolling"?

[plush bay]

the terminal emulator itself tends to have a scrolling option

[remote umbra]

So for instance, if I am running a tool like winPEAS where there is a lot of output (ignore out putting to a file for a second). Typically if you scroll back up you will get cut off from all the information. There is a setting in Linux (I can find it in another distros 😂 ) that you can adjust it, allowing you to continuously scroll up.

[astral cape]

ohh, ya i always set that high or unlimited "scrollback" or whatever ...

i'm on popos (similar to ubuntu and kali) here ...

i just uncheck that 😛

[remote umbra]

Yeah every other distro makes it easy but Kali 😂

[astral cape]

haha, i haven't gotten that much into it yet since reinstalling ..

[stable scaffold]

Hi!

I'm doing the Holo room right now....

But it port 80 of webserver is closed for some reason

I don't think I can continue like that

🙁

Any resolution?

[low nymph]

Hello Hello ! Anyone knoiws how can I unlink the discord token from my old discord account so I can link it to the new one ?

[weary spindle]

You need a mod for that, only they can do it.

[low nymph]

Is it cool to ping them here ?

[weary spindle]

Probably not ping them for that reason, I'm sure one of them will see it in here, or if they're in the room, just mention it.

[low nymph]

Thanks Scrubz 😘

[weary spindle]

0Days B0tnet could help you.

[fallen wing]

hello, got problem, black screen in virtual box, i think its due to no memory on hard disk, how to resolve that, do i need to delete full vm or not?

[weary spindle]

Which os are you trying to use?

[fallow knoll]

I dont know what the answer to this question is, does anybody know ?
Verbosity level one is good, but verbosity level two is better! How would you set the verbosity level to two?
(Note: it's highly advisable to always use at least this option)

[naive dust]

Thank you for responding, ill report it. Totally forgot about it

[scenic torrent]

Gave +1 Rep to @gray loom

[marble cobalt]

something happen with the vpn?
I can`t to connect

I try also to change my VPN server

nevermind, its working now 🙂

[fallen wing]

sry for late response its ubuntu

[sterile garnet]

Hi there, I wanted to know if it's possible to switch the tryhackme token linked to my discord account, the bot won't let me !verify with a new one

[celest wadi]

Probably ask in #general , a mod will remove your current token for you

[sterile garnet]

Thanks!

[full trout]

Yo uh i don't know how to say this

But my anti-virus says that I got redline stealer

How do I remove it from my computer?

I tried mtr and my antivirus and nothing happened

[dense mason]

Hello, my dashboard will not remove my 'Welcome Tasks' even though I have completed them

[prisma nest]

why multivpn not work in tryhackme ?

[minor wave]

Hey anyone know how I can fix: E: Unable to locate package open_vm_tools I am trying to share a folder with my kali on VMWare Fusion but get this error when following steps. I tried apt update & rebooting. And if I run:

└─# apt-cache search open-vm-tools                         
open-vm-tools - Open VMware Tools for virtual machines hosted on VMware (CLI)
open-vm-tools-desktop - Open VMware Tools for virtual machines hosted on VMware (GUI)
open-vm-tools-dev - Open VMware Tools for virtual machines hosted on VMware (development)
open-vm-tools-sdmp - Open VMware Tools for VMs hosted on VMware (Service Discovery Plugin)
                                                                                            

[crystal marlin]

Are you writing the package name with underscores ?

[minor wave]

yep apt install open_vm_tools

oh wait its dashes

alright ty good ser I am blind

+1 @crystal marlin

[rotund steppe]

hey I'm having trouble to ssh into thm rooms so I'm running kali on WSL and I can ping the room but when I try to ssh I get "Connection closed by 10.10.144.2 port 22" this happened after the "Encryption - Crypto 101" room I think it might be related to public/private key but I tried to uninstall and reinstall ssh and it didn't fix it does someone have the fix ?

[scenic wing]

I really like the online attack box... is it possible to get an image somewhere so I can create my own VM?

Or is it just Kali distro with MATE desktop?

[crystal marlin]

Which room are you trying to ssh into ?

[crystal marlin]

I think the attackbox is ubuntu

[rotund steppe]

at first Linux PrivEsc but i'm trying to debug with Linux Fundamentals Part 2 now since i know i used to be able to in this one

[light vale]

They can't give you the image a lot of people ask for it but it's not possible from what i understand.
I think that the prebuild kali image from the kali linux site is the most suitable, it has 99% of the tools already installed, you can set it up real quick and works great...

[crystal marlin]

Did you give the target machine enough time to fully boot ?

[rotund steppe]

i think so i can nmap it and see ssh

[crystal marlin]

Could you try again? Also can I try it on my own ? If yes, let me have the target machine IP pls

[rotund steppe]

yes of course the IP is 10.10.72.48 also with -vv i get "debug1: expecting SSH2_MSG_KEX_ECDH_REPLY" as a last message before it fails

[crystal marlin]

Seems to work just fine

What was your full ssh command?

[rotund steppe]

ssh tryhackme@10.10.72.48 -vv

[crystal marlin]

I'm not too familiar with WSL, but in case you can, is openvpn running directly inside it?

Also, do you have any personal vpn running on your host machine simultaneously ?

[rotund steppe]

yes it is I had a some issue with the VPN but with the troubleshooting script I'm good now and no I don't have a personal VPN

[crystal marlin]

So if you check ip a s do you only see a tun0 interface or any extra like tun1, tun2 etc?

[rotund steppe]

i have this one "4: tunl0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default qlen 1000
link/ipip 0.0.0.0 brd 0.0.0.0"
the other interfaces are not tunX

[crystal marlin]

Then run that command and try to ssh again afterwards: sudo ip link set dev tun0 mtu 1200

[rotund steppe]

THX youuu it worked do u have and idea of why was my MTU not right ?

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

Maybe you are on wifi or your internet connection in general isn't too good.
I guess there could be several reasons, so not sure why it needs that in your case

[rotund steppe]

ok well again thx a lot

[mystic cobalt]

Hello,
There's a problem in Attackbox; got this msg (Failed to connect to server)

[crystal marlin]

Wait a few minutes then try to refresh the page with ctrl + F5, if that doesn't solve it, restart the attackbox and try again

[mystic cobalt]

it worked when restarted it

[mystic cobalt]

Tysm

[naive dust]

Hi all - I am currently on the alfred box and via the attack box everything works fine and as expected with the jenkings. Actually I wanted to try it with my own machine and openVPN, but as soon as I click there on Save in the Job Configuration, the connection is being reset - did I miss something?

I terminated the box 3 times already

just as a sidenote

[eager fulcrum]

Try this

[naive dust]

ah thx! mom

great! worked! THANKS! 🙂

[naive dust]

Is it normal that a free room, Kenobi in this case, won't let me use the Web Based Kali machine?

It says I need to subscribe

[plush bay]

kinda yeah..... you only get a single hour of the attackbox/attack vm/web based kali machine a day if you are not subscribed

[naive dust]

ohhh I see

well I just subscribed, I didnt use my time

[plush bay]

fair enoughs then... enjoy your unlimted attackbox time

[naive dust]

Its complaining that I need to subscribe though, I can't use the Kali Browser based VM at all

[plush bay]

try refreshing the page

ctrl + F5

[naive dust]

OMG

it worked... thanks.

[plush bay]

no problem

[naive dust]

I'm giving THM homework to students and I have a subscription. A student sent me a screenshot of not being able to load the Kali Browser VM, so I created a new account to see if I could reproduce the steps... I'm going to tell that person to just reload lol

[plush bay]

also the attackbox is prefered instead of the kali vm from that drop down list to start attackbox

as the attackbox is updated with new tools a lot more frequently

also there is another option.... you can setup your own attack vm and connect using openvpn to hack however much you want on free rooms without paying

[naive dust]

most students had their Kali box set up. Fortunately there's the browser VM to help those who wait last minute and email me saying "my kali vm isnt working"

[plush bay]

fair

hope those students get through with it soon to keep being good in the class

[naive dust]

🤞

[naive dust]

If I have my machine encrypted (LVM w/ root encrypted) and I do a system backup to an external HDD, does it remain encrypted on that hard drive?

and then restore a brand new system with that? Would it create a clone of my old backup, LVM/encrypt and all?

I'm trying to secure my laptop and that includes backing it up for restore, later.

[plush bay]

don't think it will keep the encryption as when you move the files they are unencrypted

[naive dust]

damn

i'm trying to find a solution: system backup w/ encryption, in case I loose the HDD/ stolen.

[plush bay]

well there are lots of ways to encrypt files

[naive dust]

my thought process is : backup system, encrypt the drive so it can't be stolen, then transfer to a new computer and restore...

Would it at least keep the LVM? and i'm not sure if cryptsetup can be used after-install or not, to just manually encrypt the system

I know that it can change the disk-password, but other than that...

i'm not sure.

if it can, then I'm 1/2 way there

[plush bay]

well if you encrypted that drive during install and it is part of the install but can be removed it might keep encryption

[naive dust]

I see.

So, I just need to encrypt the external?

Install new (with LVM) and simply restore

[plush bay]

yeah worst case senario you just need to encrypt the external drive

veracrypt would be an option

[naive dust]

I've seen that name around a lot

i just need to figure out what/where the backup is stored and copy it somewhere... idk yet.

i dunno... i'm going to have to read on it.

[latent briar]

when ever i add 1 hour the machine it still expires does anyone know why

[plush bay]

reload the page

the message for it expiring is slightly bugged and shows up even if you extend the timer or have hit the terminate machine button

[latent briar]

Thanks

[plush bay]

no problem

[naive dust]

thanks for the info, Shadow

[plush bay]

no problem lemur

[verbal moss]

my vpn is on but I can t ping the machines.

I tried to do the nmap challenge thing

[astral cape]

ICMP is probably not configured to respond ... can you access via other ports? (or http, nc, etc)?

@verbal moss

[verbal moss]

oh I am dumb

apparently it works

on http

thanks

nvm

[astral cape]

👍 😛

[plush bay]

also a tip is the -Pn flag for nmap

that way nmap skips ping and then tries to see if ports are open

doing that can make you see if the device is up or not

[verbal moss]

yeah

I see

thank you

[plush bay]

there are some other host discovery options with nmap that you can also use but shadow don't feel like copy pasting the notes in here

[verbal moss]

kk

[plush bay]

could find those in the nmap module

[broken bear]

can you post output of ip a?

[verbal moss]

it s solved

[broken bear]

nvm, looks like it was just ICMP disabled

[verbal moss]

yeah

thanks

[naive dust]

Looking for some suggestions and maybe an answer to a question.

What's a good cloud service for system backup/restore? I signed up for a couple free trials and every one of them refuse to back up binaries, sbinaries along with a lot of other important parts.

I was pretty ticked off, to say the least. I've been searching for many hours. When I think of "backup", that means "everything". Including binaries, /var and everything else.

So, why do people refuse to allow these kinds of files/folders to their cloud service? and what are my options?

[broken bear]

Binaries usually doesn't get included in backups. Backups are usually irreplacable parts of the system, ie the userspace data files.
If you want to make a 'complete' backup in that way, you can package up everything with a byte-for-byte copy tool like dd

[naive dust]

I see

I hate the idea of losing all my installed programs, but I guess that's an option... pain, but I guess it's what I have to do.

just upload a timeshift to a regular cloud service or something

[broken bear]

The problem you're describing is the reason Infrastructure-as-Code tooling exists.

[naive dust]

just the name is above my head

what's that?

[broken bear]

Look into Ansible and Terraform

[naive dust]

ahh... I've heard of it

[broken bear]

What you are talking about is having a consistent system baseline, not a backup.

It's much easier to have a list of things you want to be installed than to have a huge cloud archive of disk images.

[naive dust]

I wanted a combination. Personal items like photos/music as well as system settings, programs and the sort

[broken bear]

segregate all that out

[naive dust]

i see....

[broken bear]

But regardless, this channel is for VPN and THM related. Please take it to #infosec-general

[naive dust]

Okay.

[west walrus]

Anyone else having issues with their streak resetting? I have a 250+ day streak, but when I answered a question it reset back to 1. Any way to fix this or anyone know who to contact?

[crystal marlin]

#site-support message

[west walrus]

Thank you, I appreciate it

[scenic torrent]

Gave +1 Rep to @crystal marlin

[naive dust]

i need help setting a fortnite account inactive

[crystal marlin]

You what ?

Can I DM you for a moment pls ?

[celest wadi]

mini-modding

[light vale]

Fornite Poggers

[glossy hull]

Good morning, ive lost my streak due to unforseen circumstances. What's the email to see about getting it back? TIA

[celest wadi]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[shy cloak]

First time trying a box on THM and tried to connect to openvpn but this pops up. I tried "sudo openvpn --dev eth0 username.ovpn" but same error. Any suggestions? Im using kali on VM

[weary spindle]

https://github.com/tryhackme/openvpn-troubleshooting

[lone light]

Hii
I want to setup my own vm using offsec kali, but it seems like it's using dynamic disk, how can I change it?
for better performance

[weary spindle]

Are you importing it?

Or just double clicking the download?

[lone light]

Downloaded this one, for vmware
https://help.offensive-security.com/hc/en-us/articles/360049796792-Kali-Linux-Virtual-Machine

My vm right now is working kind a slow, so I want to make a new one my ssd

[zealous yoke]

In honesty, there's very little noticable performance improvements using static > dynamic disk allocation unless you're talking about huuuge sizes

like terabytes

[lone light]

idk why it's working slow but right now I even have delay when typing

[zealous yoke]

change the location where the VM "unpacks to" your hypervisor will give you this option when importing

[weary spindle]

I dunno much about VMware, I know VMbox I was able to go through the steps of manually creating a Vm with fixed storage, and using the offsec kali as the boot up disk.

[zealous yoke]

you can do the same with vmware too (:

[weary spindle]

Oh really? I do plan on getting VM ware at some point, just to see what all the fuss is about xD

[lone light]

Offsec basically says just to double click the vmx file

[zealous yoke]

yup

so move wherever the vmx file (and the rest of the files) are stored to a location on your SSD

and then open the VMX from there

[lone light]

but how can I change it to static instead of dynamic ?

[zealous yoke]

To change there's a tool you can download from VMware and I think it needs a bit of CLI

I'm not 100% sure. But I've used the tool for converting disks and things -- I imagine it's the same tool. Worth a google though (:

Also, for future reference: #site-support is for tech suppport for the THM site specifically, not for things like troubleshooting vms

[lone light]

ok thnx i'll check it out

[zealous yoke]

#infosec-general or #quiet-conversation would be better in the future (quiet convo so that it doesn't get buried in #general)

[lone light]

sorry 😅

[zealous yoke]

all good (:

[naive dust]

It looks like my process has been reset? I was at 50% of the beginner course, but not im at 1?

Is it just me? or did this happen to everyone

[honest briar]

Hello @deep trellis Sir

I have recently deleted my old THM account and created a new

But I am unable to verify my new thm Discprd token

ok
So should I ping mods

Hello @torn citrus Sir

I have recently deleted my old THM account and created a new

But I am unable to verify my new thm Discprd token

[naive dust]

When it says "Alert! You have been locked out for 5 minutes", is it due to unsuccessful login attempts?

[eager fulcrum]

Yes

[naive dust]

Is the Kali Browser VM limited to 1h per day?

[light vale]

for non subscribers yes, if when you say Kali you are referring to the Attackbox, and the Attackbox is based on Ubuntu from what i know, it's not Kali

[naive dust]

hmmm, yes the built in browser VM

[light vale]

I think it's limited to one hour for non subscribers yes

[naive dust]

ok. thanks for the info

[light vale]

no worries

[eager fulcrum]

Yes, make your own Kali VM locally and VPN in

[naive dust]

Yeah, I'm helping a student configure it right now

[scenic matrix]

that link doesnt work

[naive dust]

typo

😛 It's http:// not htttp://

[scenic matrix]

oh ok thanks bro

[scenic torrent]

Gave +1 Rep to @warm oar

[naive dust]

The browser Kali VM is sooooo much better than configuring Kali locally for people who only have a 2 core laptop with 8gigs of ram with Windows 11

[scenic matrix]

i cant connect this ..can u help me?

[naive dust]

it's either the wrong IP, wrong username, wrong password or if you have the ssh key you need to specify the file

[eager fulcrum]

You say that. i had smooth VMs on my 2012 thinkpad with 8GB

[naive dust]

With Ubuntu I bet

[plush bay]

still dunno if sudo ssh is a good idea

[scenic matrix]

which one should i ssh top or bottom?

[plush bay]

bottom

[scenic matrix]

bottom username?

[eager fulcrum]

On Windows

[plush bay]

eugh

[eager fulcrum]

Were you told to SSH into that machine?

[naive dust]

Probably not 11. It's a crazy ressource hog

[plush bay]

the ip.... you probably don't know the username and ssh might not be what you are supposed to do

[weary spindle]

I said that earlier.

[eager fulcrum]

@naive dust I'd also recommend the attackbox over Kali, it's maintained

[naive dust]

Yeah, but the student I was helping out already went over his 1 hour limit

[eager fulcrum]

You don't get an additional hour

[naive dust]

exactly

[eager fulcrum]

So no, you were not told to ssh.

[eager fulcrum]

You don't get an additional hour of Kali

In fact, not sure you get access to the Kali at all

[weary spindle]

Unless they're talking about the Kali browser, which you will know as much as me how much it's out of date by.

[naive dust]

He was able to do half his homework until it kicked him off so yeah, there's 1 hour of the Kali based browser VM per 24 hours included in the free version

[eager fulcrum]

Attackbox isn't kali and I'm almost certain it's not an hour of each

[naive dust]

I'm not talking about Attackbox, but about the Kali based browser VM

The option on top of Attackbox

"Use Kali Linux Web-based Kali Machine"

[astral cape]

ya it just want's you to run some basic recon via HTTP (not ssh root)
can try this (or visit that url /robots.txt in attackbox/vpn browser)

curl http://10.10.136.186/robots.txt

[scenic matrix]

ok thanks

[scenic torrent]

Gave +1 Rep to @astral cape

[naive dust]

hey, i need a moderator to help me, i just created this new account and i want to unlink my THM to my old discord account and link it to this account, how can i do?

[gritty yarrow]

Can I please be given the email to get help or someone on here to look into this for me? THM is not acknowledging that I answered a question yesterday and my streak is gone.

[weary spindle]

You'll need to contact support, they can sort it out.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[broken bear]

Can you DM me from your old account?

[naive dust]

okay

@broken bearthank you 🙂

[gritty yarrow]

Thank you!

[daring palm]

Hi. I have an old 32-bit Acer laptop on which I can install a 32-bit version of Virtual Box on it. But, can a Metasploitable 2 or OWASP Broken Web Application be installed on that box? Or does it have to be 64-bit?

[broken bear]

I wouldn't touch 32b for anything these days. Even embedded and edge devices are running 64b for many applications.

[daring palm]

@broken bear The machine I use for pentesting exercises is 64-bit. I was thinking of using this laptop which is good for nothing else to setup
machines to attack.

[broken bear]

You're not going to find anything worthwhile to attack still running 32b apps. Anything on that platform is going to be ancient and not reflective of anything remotely modern. Also, this isn't related to THM and VPN support, so lets go to #infosec-general 🙂

[daring palm]

ok

[sick spruce]

my main discord account got ban

because it got hacked

and i deleted it

but now i'm not able to verify my this account using discord token because it's used in that account

[celest wadi]

Probably follow this
" your account has been compromised by a nitro scam. Please change your passwords and add mfa before emailing [e-mail]"

[old spade]

How do I change my default payment method?

[little ivy]

hello guys, If there anyone fimiliar with wireguard?

need some help

it says tech support.

So where should i ask this ? @naive dust

I really needs some help/

[agile jetty]

Hi, I achieved 30 day streak today, But i didn't get the 30 day streak badge is this normal ?

[crystal marlin]

Maybe get 1 or 2 more streak days, in case you don't get the badge send a mail to support, they'll add it for you

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[agile jetty]

thanks man

[scenic torrent]

Gave +1 Rep to @crystal marlin

[weary spindle]

Are you changing cards?

[old spade]

Id like to pay through paypal

My bank declines THM payments because it has hack in the name. 🥴

[weary spindle]

https://tryhackme.chargebeeportal.com/portal/v2/login?forward=portal_main

You can use this link.

[old spade]

awesome thanks so much

[raw peak]

i need some help with the web

[weary spindle]

What's up?

[raw peak]

may answer is not be submitted

it worked just fine yesterday

[weary spindle]

Ok, you would need to tell me two pieces of information.

Which room
Which Task.

[raw peak]

google dorking room

every task

[weary spindle]

Ok, give me an example.

[raw peak]

after i submit the answer it told me the answer was correct but when i refresh it's all gone

[weary spindle]

Oh.

I just thought you were not getting answers correct.

[raw peak]

you see my answer is all correct

[weary spindle]

Yeah.

[raw peak]

i don't have the tick either

after i finished the task

then after i reload they all just gone

[weary spindle]

This is quite probably a support related thing, however

One thing I can suggest is leaving the room, and rejoining.

Do you know how?

[raw peak]

i don't

tell me please

[weary spindle]

At the top there is a little cog.

[raw peak]

ok

[weary spindle]

Just hit leave, then you can rejoin.

[raw peak]

it's not working

[weary spindle]

you can't leave the room?

[raw peak]

i leaved and rejoined it

and the problem is not fixed

[weary spindle]

Ok, you will need to E-mail support then.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[raw peak]

ok i'll try

thank you anyway

[weary spindle]

You're welcome, sorry I couldn't help.

[dreamy bone]

Hi, I usually was able to connect to the Hacking Machines using openVPN on Windows - indicated by the green Network-Icon with a lock. On tryhackme.com the banner weas Green

But now I'm connected via OpenVPN, green symbol, connection established, but it says on tryhackme.com that I'm not connected.

[weary spindle]

10.10.10.10 ?

[dreamy bone]

10.18.76.155