Alright, thank you :_)
#site-support
slim heath
scenic torrentBOT
Gave +1 Rep to @celest wadi
rigid sage
I was try to login to my thm account not happening, I try to forget password but email is not coming
I check spam email too but still no
weary spindle
if you have access to the account E-mail, you'll want to E-mail support from it, they can provide you help if the password reset E-mail doesn't come.
sharp bisonBOT
TryHackMe
vale field
hello
so the thing is ı can open the attack box
and its connected to ınternet for sure
but the thing is
ı cant open a spesific site
Acme IT Support
just started the attack box
and syste openned
where is the target machine
instructions says just wait for 2 min
after opening attack box
content discovery
ok ı did that
the problem is the site for the second challenge doesnt open
the acme ıt support thing
Take a look at the robots.txt file on the Acme IT Support website to see if they have anything they don't want to list - To do this open Firefox on the AttackBox, and enter the url: http://MACHINE_IP/robots.txt (this URL will update 2 minutes from when you start the machine in task 1)
ıt says that first ı have to open that site
ı started it
ı pressed start the machine button
ı tried that too.
😦
no red banner
ı closed everything
now
fırst ı have to click the blue button that says attack box
then the green button ?
nope
ı trıed it all
it says 504 bad gateway
yeah ıt does
the red banner comes
and the clock starts
sharp bisonBOT
TryHackMe
vale field
ım verified and subscribed
heady cave
how to claim student discount?
weary spindle
Change your email to a student E-mail, if it's not automatically recognised, E-mail support.
heady cave
not changed.. i did
weary spindle
E-mailed support?
heady cave
what is emailed support?
weary spindle
Have you E-mailed support?
ancient verge
can anyone tell me how to renew it with a new card
heady cave
Have you E-mailed support?
no!
sharp bisonBOT
TryHackMe
weary spindle
no!
Then give them an E-mail.
I think there was an E-mail related to Student discounts. but Support@tryhackme.com works too.
heady cave
ok thanks!!
ancient verge
how do i contact supprot my subscription hasnt renewed
weary spindle
sharp bisonBOT
TryHackMe
vale field
weary spindle
Try terminating the machine and then starting again.
celest wadi
you have to wait for the url to show an ip in it
weary spindle
you have to wait for the url to show an ip in it
Surely not longer than 25 min(s)?
celest wadi
lab_web_url gets replaced with the machine ip
celest wadi
Surely not longer than 25 min(s)?
a refresh would do it then
vale field
you have to wait for the url to show an ip in it
how long do ı have to wait
cause its been nearly 45 min
celest wadi
try refreshing
weary spindle
Try this
http://10.10.31.152/robots.txt
vale field
weary spindle
Yeah, on the task just press CTRL and F5
I think if it's the P lab one.replace the Lab_web_url part with 10-10-31-152
weary spindle
No, in the IP replace the . with -
vale field
ok.
vale field
from the last challenge
so what is the acme ıt support in there that says open that first ?
it was a site from the last challenge
ok
thank you for your help
if you guys ever come to istanbul you get a free coffee for your help from me
thank you again 🙂
silk marsh
IPV6 i think
finite aurora
Both represents your IP address
The former one in IPv4 format and later in IPv6 format
eager fulcrum
Both represents your IP address
The former one in IPv4 format and later in IPv6 ...
They're different addresses
They just both belong to you
It's not one address represented two different ways
finite aurora
They're different addresses
Yeah
But both are ips representing the host
Ofc they gonna be different cause of formats 👀
I think my words should have been wiser
slim heath
Both represents your IP address
The former one in IPv4 format and later in IPv6 ...
Thank you guys.
scenic torrentBOT
Gave +1 Rep to @finite aurora
civic mist
Hi , do someone have 5 minutes to help me on a Technical issue on BOF OSCP prep exercices ?
ebon flower
Hey folks. I am on task 13 of https://tryhackme.com/room/burpsuitebasics
Take a look around the site on http://MACHINE_IP/ -- we will be using this a lot throughout the module. Visit every page linked to from the homepage, then check your sitemap -- one endpoint should stand out as being very unusual!
I am using the browser based machine and best I can tell, this server isnt accessible.
It looks like i maybe cant post an image. The error is:
Error response
Error code: 405
Message: Method Not Allowed.
Error code explanation: 405 - Specified method is invalid for this resource.
I attempted the machine IP and http://localhost
naive dust
Are there any problems with connecting to machines?
Cannot connect from AttackBox and local Kali VM 😦
I can ping the machine, but no SSH connection.
Could do it yesterday 😦
As for example Linux PrivEsc
and suddenly it works now after 1 hour 😦 nvm, now it seems to work
─$ ssh user@10.10.33.126
Unable to negotiate with 10.10.33.126 port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss
Seems that issue is only from the Kali VM I have. Any ideas?
Perfect, thanks for the pushup, I learned something new today. But.. why 😦 ? Never had this before with THM.
scenic torrentBOT
Gave +1 Rep to @gray loom
mortal yoke
I finish a Room but the room not update with finished, helpme!
slim heath
Can't seem to figure this one out.
Tried smbclient //10.10.141.251/secret -u Anonymous -p* but something is wrong
crystal marlin
Room related question would fit better in #room-help or #room-hints .
Also always providing the room and the task you are on, helps a lot 🙂
Either way, that's not the share name you found during enum stage
atomic nest
how can i submit a suggestion / fix of a room ?
plush bay
#room-bugs for typos and other problems with rooms that can be fixed
scenic torrentBOT
Gave +1 Rep to @plush bay
left elk
Hello, I have an issue in the Question 2 and Task 14 from NMAP room, when I try nmap -p1-999 -sX [MACHINE_IP] it tells me that the host seems down, I don't know what to do (I'm connected to the VPN of thm), any idea ?
celest wadi
Hello, I have an issue in the Question 2 and Task 14 from NMAP room, when I try ...
can you check if you're connected with curl 10.10.10.10/whoami , it should show your ip
left elk
curl doesn't work : zsh: Input/Output error: curl
plush bay
that tells us you probably need to install curl
crystal marlin
Mh, I would say that is beyond just curl not being installed
left elk
What the heck, I can't do anything
I got always the same error "zsh: Input/Output error: apt"
plush bay
okay then guess something is broken bad
celest wadi
I got always the same error "zsh: Input/Output error: apt"
can you restart the machine and check again?
left elk
Yeah that's what i'm going to do
Ty for that, I didn't specify but i'm on Live USB, maybe it comes from that ?
agh
Okay so it was just broken, idk why but now it works and the curl too, so it showed my IP, what I have to do now ?
Yep I answered no
Yep but if it doesn't work, I can't answer to question 2 ?
oh yeah I tried with -Pn but it tells me that 900 scanned ports are in ignored states
Oh my bad I just tried 900 instead of 999, ty for your help !
vale basalt
hello, I have a problem to verify because my thm account is already linked to a discord account that I have no longer access
pls help me
sleek jackal
hello, I have a problem to verify because my thm account is already linked to a ...
how do you not have access to the Discord account any more?
vale basalt
because i lost my phone with the 2fa
vale basalt
how do you not have access to the Discord account any more?
:c
steel wren
in Walking An Application, the link that we are supposed to access is not working... error is the connection has timed out
sleek jackal
:c
...that really doesn't help me help you. I literally meant how do you not have access? Don't know the password? Forgot the email? Used a throwaway account? Got banned from this server on the account that you linked and are now trying to recover it? What is the account name? Not the nickname you used for the server, but the account name? Support is gonna need to know that.
vale basalt
...that really doesn't help me help you. I literally meant how do you not have a...
I lost my phone where I had the two factor autentication of the discord account
vale basalt
...that really doesn't help me help you. I literally meant how do you not have a...
thats why i don´t have acces
sleek jackal
then you would need to contact discord support to have them help you with removing two factor authentication from your account. as far as the token is concerned, you would need to email support@tryhackme.com
alternatively, you could just get your service provider to issue you a new sim card and port the number over and pop it into a new phone.
if you have a phone with a vSIM, then just activate a new phone.
if you cant afford a new phone, use an old one.
if you dont have an old one..... talk with support cuz thats a tough spot.
vale basalt
then you would need to contact discord support to have them help you with removi...
the problem is the google authenticator app don't let me recoverthe 2fa keys even if i have recover my old number
sleek jackal
and lemme guess... you didnt follow the instructions and keep a copy of your backup codes handy?
vale basalt
exactly
turbid vessel
hi guys i have a problem with the Blaster room
i can't find the history in the explorer browser
they are only today history
naive dust
Does anyone know how to make it so the windows 10 defender doesn't detect a malicious excel macro ?
weary spindle
Does anyone know how to make it so the windows 10 defender doesn't detect a mali...
This is more for THM related questions, you might get an answer in #infosec-general if it's not black hat stuff.
naive dust
Okay thank you
rapid ingot
hello, i have a problem downloading the configuration file for the OpenVPN. I enrolled in the OpenVPN room and went to the "access" link, where I saw a green button "download my configuration file" but when I click on it I'm being redirected to a 404 page (https://tryhackme.com/404) - how can i solve this problem?
crystal marlin
hello, i have a problem downloading the configuration file for the OpenVPN. I en...
rapid ingot
thanks! sorry I've missed it 😅
molten root
How would I go about installing linPEAS on Kali?
I cloned the github repository and I see three files "builder", "images", and "readme".
I don't see the linpeas.sh file anywhere.
I managed to start it up using this command:
curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh
Oh, I see.
Does that command just save me the trouble of installing it on my machine?
Oh, I'm so sorry I forgot to add I'm using Kali WSL2.
If I don't want to use the curl command to execute linPEAS and I just want to run it the old fashion way, how would I go about doing that?
The github pages aren't helping much.
Basically, not having to run the curl command.
I just want access to the linpeas.sh file.
Because for some reason, after cloning the repository, there's like three directories "builder", "images and a file called "read me".
Out of curiosity, after using curl to save the .sh file, where would it go?
As in, where would it be saved?
Whatever directory I've chosen?
Using cd?
Honestly, I'm trying to close the gap as fast as I can.
Definitely going to join a few Linux rooms after this one.
sleek jackal
Honestly, I'm trying to close the gap as fast as I can.
You have to walk before you run.
molten root
Would the Linux rooms provide me with an in-depth understanding of Linux? I've been looking for a decent Linux course for a while now.
sleek jackal
Definitely going to join a few Linux rooms after this one.
All of the fundamental skills you pick up along the way may seem trivial, but they are crucial to understanding how everything works together later
sleek jackal
Would the Linux rooms provide me with an in-depth understanding of Linux? I've b...
there are a number of rooms that all build on top of one another. Best choice would be to go to the Learn section and start doing the Learning Paths. This will give you a start to finish experience with some of the core concepts.
Also, simply immersing yourself in Linux is another good way. Load Ubuntu onto a system and start poking at it, see what you can do and what you can break. Google is your best friend
if you render it fubar, just erase it and start again. VMs are gold when it comes to this. Spin them up, delete them and do it again
molten root
I have to say, though, even with my limited knowledge of Linux, after using Kali for a few hours today, I think I've learned quite a bit.
molten root
if you render it fubar, just erase it and start again. VMs are gold when it come...
I have been poking around with Debian and Arch based distros.
Pop_OS and EndeavorOS, specifically.
Though, it would seem I haven't been poking around as much as I thought I was.
sleek jackal
yeah, no offense and not to be rude, but as lassi mentioned earlier, operations like curl and piping are pretty low level. if you dont have a decent handle on how to navigate around linux, then you might want to start there.
being able to find your way around comfortably is crucial
molten root
Guess I'll start with the Linux rooms then.
ashen crypt
craggy sierra
Hello guys, I am working on a MISP room and when I press the completed button it does not check the questions as completed and just resets the room if I refresh the page. I tried pressing completed button on different rooms and it is working.
And now I tried starting the machine and it got stuck on 00 and after I refreshed, the progress tracking was gone and I cant see the Indication of the machine being started or a button to stop it. However if I press start machine it tells me the machine is started.
crystal marlin
And now I tried starting the machine and it got stuck on 00 and after I refreshe...
Have you refreshed the page with ctrl + F5 already? So not just a normal refresh ?
craggy sierra
yep and now since I left the room in hopes that might do something now I cant rejoin
its only happening on this one room
if I press join room button it just refreshes
silver roost
Hi all, hope you're all well
I'm experiencing some difficulty with connecting to an attack target IP in the User ID Enumeration room
I have a machine running, but unable to ping or visit in the browser
crystal marlin
if I press join room button it just refreshes
Mh, not sure what's going on, if you are talking about that room: https://tryhackme.com/room/misp everything works just fine for me
craggy sierra
Did you do smth? It just started working
crystal marlin
Did you do smth? It just started working
No, I just joined the room, probably that's the magic I did 😄
craggy sierra
No, I just joined the room, probably that's the magic I did 😄
anyway thanks I guess
scenic torrentBOT
Gave +1 Rep to @crystal marlin
tawny junco
Not sure if this is the right channel, but I think the "Brute Force" section in the Authentication Bypass part of Introduction to Web Hacking, may have some errors. I've checked my syntax over and over, and it's not giving the expected results... I should get back one entry that is not a 200 response code, according to the lab, but I'm not getting any entries. I have no returned errors, and I am getting 200 responses, so the ffuf command is working as it should, just not getting what I need back to complete the lab.'
eager fulcrum
Not sure if this is the right channel, but I think the "Brute Force" section in ...
#room-hints please
This channel is for tech support directly related to the tryhackme site or VPN
silver roost
hi, via the attack box, and a kali VM
10.10.236.163/customers/signup
its working now
steel wren
no, it is attackbox
hybrid adder
tech support
my machine is running but I am not able to visit the ip of my ,machine from browser
weary spindle
Are you using the attackbox or your own VM?
hybrid adder
10.10.8.6, no not in vpn
weary spindle
You need to be connected to the VPN to enable access to all THM machines.
sharp bisonBOT
TryHackMe
weary spindle
Which room are you doing?
hardy storm
guys if i use the openVPN does it let me use attackbox for more than 1 hour a day and more than once (im a free user)
weary spindle
It's a virtual machine you can have, easiest way to put it would be like.. You can emulate another OS in your system.
hardy storm
yeah nah i dont
weary spindle
I'd suggest using one 🙂
The attackbox is handy, but I prefer my own VM as I can make changed and add tools etc to the VM.
The attackbox doesn't store anything, once you terminate the attackbox, it reverts back to the state it was booted up in.
Here is a quick 15 min video of VM's
brittle knoll
In the "Living Off the Land" room i have this problem when i try to connect in RDP:
hybrid adder
https://tryhackme.com/access
so I connected to VPN still issue persists
weary spindle
so I connected to VPN still issue persists
Which room are you doing?
weary spindle
hybrid adder
I have kali running on virtualbox inside that I have openVPn installed with profile running shared on trayhackme to access my machine
weary spindle
Just to confirm, you clicked there?
hybrid adder
just a silly doubt attack machine and VM provided to me are different? like attack machine are specifically designed for particular rooms ?
weary spindle
Attackbox is an Ubuntu based Virtual Machine.
The "start machine" starts VM's that you attack.
hybrid adder
cool, what is my machine for ?
weary spindle
Doing the attacking.
When you click start machine, you'll get that box.
The IP I have circled will become visible any interaction you do ( with the exception of reverse shells etc) you do it with that IP.
It will always be 10.10.xxx.xxx
after it changed it will be like that
and it will change accordingly within each task.
hybrid adder
this site, from where should I access it ? cause this will be my attack box so inside attackbox browser I need to access this site ?
weary spindle
If you're running a VM with the Openvpn running, use it there (close your attackbox)
Access it from a web browser
Or use the browser within burp
weary spindle
😄 excellent.
hidden saddle
Hello good people of respect🙋🏾
im new here...i would love to know a few things about hacking..
sleek jackal
@hidden saddle The site has almost everything you need to get started. The raw materials are there, you just gotta put in the long hours and the work to learn it and understand it.
Start doing rooms, try some challenges, set up your own home lab
hidden saddle
<@427859021446250496> The site has almost everything you need to get started. Th...
Thanks for response Lycan🫶🏽
scenic torrentBOT
Gave +1 Rep to @sleek jackal
hidden saddle
Start doing rooms, try some challenges, set up your own home lab
How do i do this?
sleek jackal
You sign up for the site. Just create an account. There are free rooms and subscription rooms. Plenty of free rooms to get you started
As far as a home lab is concerned, that take research and hands on work to do. If you have an old computer lying around, throw DVL on it and try poking it to see what happens
sleek jackal
The attackbox *is* handy, but I prefer my own VM as I can make changed and add t...
I prefer using my own too. Much faster and persistent storage.
hidden saddle
Link for DVL pls
sleek jackal
Link for DVL pls
That should get you started
Read up on it before you just throw it on a machine.
hidden saddle
https://en.m.wikipedia.org/wiki/Damn_Vulnerable_Linux
Can i still get the .iso even though its discountinued
wheat seal
Hello I am having an issue with an answer that appears 100% correct not working.
jovial mango
Hello I am having an issue with an answer that appears 100% correct not working.
Which room?
wheat seal
Metasploit: Exploitation
weary spindle
Metasploit: Exploitation
Which Task is wrong for you?
And can you link the room?
narrow stirrup
whyy cannot post pic heree
huhuhu
Hello I am having an issue with an answer that appears 100% correct not working.
this is problem
weary spindle
Ok, if you verify, We can help you better.
celest wadi
Ok, if you verify, We can help you better.
but why not today 
weary spindle
I was talking and typing.
narrow stirrup
how to get verified
weary spindle
!docs verify
sharp bisonBOT
TryHackMe
celest wadi
I was talking and typing.
don't talk and type smh
weary spindle
Follow those steps, ensuring your DM's are open to server people
wheat seal
It is the NLTM hash
weary spindle
What hash do you have?
narrow stirrup
where is token
weary spindle
where is token
In your profile
celest wadi
where is token
!docs verify
sharp bisonBOT
TryHackMe
celest wadi
It's all in there I mean
narrow stirrup
why
weary spindle
Take out the ||testing||
narrow stirrup
done it
weary spindle
Your answers are correct, you just have added information.
If you look at the number of * that will give you a hint on the answer.
weary spindle
can users not post screenshots here?
You need to be verified.
wheat seal
ah
weary spindle
!docs verify
sharp bisonBOT
TryHackMe
plush bay
can users not post screenshots here?
they can if they are verified
weary spindle
Follow those steps and you'll be verified in no time, (ensuring your DM's are open to server members)
wheat seal
oh
narrow stirrup
If you look at the number of * that will give you a hint on the answer.
hmmm
wheat seal
im dumb
weary spindle
The second half is normally the password hash.
wheat seal
haha
narrow stirrup
You have White-box testing, the answer is just ||white box||
yes tq
weary spindle
stupid flesh eyes
Happy hacking!
narrow stirrup
what is attack box
plush bay
what is attack box
a virtual machine with a lot of tools and stuff preinstalled that you can launch in your browser when using tryhackme..... you get 1 hour of useage of it a day unless you are a subscriber....
narrow stirrup
why only one hour
plush bay
because spinning it up and using it requires hardware and other server stuff that cost money.... hence limited to one hour for free users
and most of the time you can finish a room in one hour anyways
plush bay
at the top of the page when you are in a room there is this button that lets you start it......
narrow stirrup
cannot find mine
plush bay
there might also be another button that says show split view that lets you see your current attackbox instance
narrow stirrup
after get connected to openvpn
then how i can do virtual machine
then use for for openvpn
what for
okay
idle trail
Hey does anyone has a solution to make Splunk work in the Incident handling with Splunk Room???
getting a " This browser is not supported by Splunk.
Please refer to the list of Supported Browsers." message everytime
candid swan
Im on intro to digital forensics, on task 3 and cant seem to get the PDF info to answer who the author is. I keep using pdfinfo but what comes up doesn't match the terminal example. Not sure what I am doing wrong but I cant figure it out, please help!!!
eager fulcrum
Im on intro to digital forensics, on task 3 and cant seem to get the PDF info to...
#room-hints would be a better place to ask
This channel is for site and VPN related tech support
hasty dew
🤔
sharp bisonBOT
TryHackMe
feral merlin
Hello, I am facing a problem with Password Security room. I have completed it (a very interesting room btw), but it shows up in my Incompleted rooms and when I try to access it I get an error message Problem finding room.. and If this is an error on our behalf. Please contact us.
Can anyone help me with this?
celest wadi
Hello, I am facing a problem with `Password Security` room. I have completed it ...
yeh, that room was deleted afaik, but it still shows up on "my rooms" page 🤷♂️
brittle knoll
Hi, i have a problem with "Living Off the Land" room to access to the windows machine.
Link to the room: https://tryhackme.com/room/livingofftheland
viral field
Hello. May I ask the support why I lost '7 days streak freeze' after missing only 4 days in progress?
candid warren
My Linux (Parrot) been unable to connect to the internet since yesterday. My windows internet working but my Linux ain’t working. Any help?
weary spindle
This is more tech support for THM, you could try #infosec-general for help @candid warren
candid warren
This is more tech support for THM, you could try <#760623494681067551> for help ...
Thank you bro.
scenic torrentBOT
Gave +1 Rep to @weary spindle
dense elm
Its a Ubuntu 20.04 x64 setup .. I don't see any other prerequisites?
I am trying to upload a VM to create a new room. Anyone having some experience with this?
I can share my vagrant and setup file if its needed
bronze vale
I am trying to upload a VM to create a new room. Anyone having some experience w...
Server or Desktop?
dense elm
should be server I guess, i used ubuntu/focal64 image from Vagrant
bronze vale
should be server I guess, i used `ubuntu/focal64` image from Vagrant
I'm not familiar, does it come with a GUI/ User interface or is it purely terminal?
dense elm
Terminal
bronze vale
cc @zealous yoke Are we able to get the logs on why this won't convert?
dense elm
Tried with vmdk file too. same error!
dense elm
Any staff maybe knows to get error logs or something.. Any info why is it failing?
near apex
Hello 🙂 Is itat all possible to reset a path's progress so all rooms are pristine? If so, how?
runic bough
Hi there. I had an old discord account that i used my discord token on, but i deleted that account. i attempted to verify on this discord but it says it says the token has been used. is there anyway i can switch my thm discord account?
weary spindle
Hi there. I had an old discord account that i used my discord token on, but i de...
You need a mod to do it.
runic bough
You need a mod to do it.
do i dm a mod or how do i go about doing that properly?
weary spindle
do i dm a mod or how do i go about doing that properly?
Eh, just a ping is enough,
runic bough
@torn citrus @placid mango May i get a mod to help me with my discord token pls?
silent agate
hey everyone
crude sail
It it only for me the site is very laggy?
silent agate
It it only for me the site is very laggy?
it is
crude sail
I just got an error 504 gateway timeout
silent agate
same
naive dust
same here
keen plover
Same here, my entire group (all premium accounts) of students can't reach or load the Kali machines.
naive dust
yeah only getting a "Secure connection failed"
weary spindle
Robert asked to post #site-bugs
serene raptor
is the site down?
placid mango
<@291298445048676353> <@547312818916032524> May i get a mod to help me with my d...
What's your old Discord and TryHackMe account name?
runic bough
What's your old Discord and TryHackMe account name?
the old account name is L3pyrd (my name on here is a server profile name) and i forget the 4 digits. tryhackme acct is l3pyrd
indigo carbon
I'm getting an error saying VNC took too long to load - I cannot get an AttackBox to launch at all
Now it just says Failed to Connect to Server.
Hopefully this is temporary or otherwise this site is pretty useless.
runic bough
Now it just says Failed to Connect to Server.
Hopefully this is temporary or o...
it will be temporary im sure. tryhackme is pretty amazing... when its working lol
grand yacht
Could someone please check the room "Hacking with PowerShell". Machine attach to it is not staring. I tried couples of time
deep spire
There are site issues atm, We're working on it 🙂
indigo carbon
it will be temporary im sure. tryhackme is pretty amazing... when its working lo...
Lol. Ok. Thanks for the reply! I just got started and subscribed and was wondering what in the world I was doing wrong...
scenic torrentBOT
Gave +1 Rep to @runic bough
deep spire
Lol. Ok. Thanks for the reply! I just got started and subscribed and was wonderi...
You're not doing anything wrong 😄
runic bough
Lol. Ok. Thanks for the reply! I just got started and subscribed and was wonderi...
hmu if you need any assistance as a beginner! id say im intermediate. i need people to practice with anyway lol
indigo carbon
hmu if you need any assistance as a beginner! id say im intermediate. i need peo...
Ok great! Thanks for the offer!
indigo carbon
You're not doing anything wrong 😄
👍
deep spire
Fix should now be live, may take a while to roll out for some people
tender anvil
Is there any way i could change my username?
dense elm
Its a Ubuntu 20.04 x64 setup .. I don't see any other prerequisites?
Any staff up?
weary spindle
Is there any way i could change my username?
sharp bisonBOT
TryHackMe
weary spindle
Support will sort you out.
serene raptor
hey
this is keep on happening to me randomly i am using the attackbox
is there anyway to fix this
fallen cave
This is of what issue, can give more details
serene raptor
good question
i am running the AttackBox as usual and suddenly that happens
i tried closing the window and opening from the split view and still didnt work ,the only way is to terminate the machine
if there's tech staff that can give me insight
zealous yoke
I can share my vagrant and setup file if its needed
Hi, what is the filename of the .OVA that you upload? It needs to have no spaces i.e. MyVM.ova
runic bough
@eager fulcrum @stray cove @fallen juniper may i have a mod's help with authenticating my token? its stuck on my old discord account and i cant verify - the old account has been deleted
jade nacelle
Is anyone there
Interesting question
How to brute force Vhost to get key of challenge pentesterlab recon 11
eager fulcrum
@jade nacelle This channel is for directly tryhackme related tech support like site and VPN issues
dense elm
Hi, what is the filename of the .OVA that you upload? It needs to have no spaces...
It had spaces🥲
It worked without space
runic bough
<@762849261892665345> This channel is for directly tryhackme related tech suppor...
could i get some help when you get a chance? its about my discord token
viral field
Hello. May I ask the support why I lost '7 days streak freeze' after missing only 4 days in progress?
celest wadi
Hello. May I ask the support why I lost '7 days streak freeze' after missing onl...
you might want to email for official help,
sharp bisonBOT
TryHackMe
cursive cradle
i sent an invite to my friends email; where did the room go?
weary spindle
Which room?
cursive cradle
Which room?
it was an invite on the dashboard
sonic spear
hola, is it possible to reset my progress on a path? if so, will i lose my level?
quartz jay
Evening all. Is there a way to contact Tryhackme by mail. Maybe I'm missing a contact us tab?
Had to change my card on file for payment. Ran into issue not being charged.
crystal marlin
hola, is it possible to reset my progress on a path? if so, will i lose my level...
You can not reset the whole path itself, but each room in the path individually.
And no, you are not losing any level/points by resetting a room.
crystal marlin
Evening all. Is there a way to contact Tryhackme by mail. Maybe I'm missing a c...
sharp bisonBOT
TryHackMe
mighty phoenix
Hello. I'm trying to do Upload Vulnerabilities room. I keep getting timed out from all of the diffrent adresses (like jewel.uploadvulns.thm) I have terminated and reloaded the room, several time. Cleared cookies. checked /etc/hosts, firewalls. But the problem persists. I have maybe 2 minuts before the room times out, for 8min. I connect trought openvpn and use my own Kali. Anyone ells having these problems?
It might be a vpn issue ...
celest wadi
Hello. I'm trying to do Upload Vulnerabilities room. I keep getting timed out fr...
can you share the machine ip if you have it running?
mighty phoenix
I just terminated it, changed vpn and rebooted, gona try once more. I'll let you know in a few minuts, if the problem persists
eager fulcrum
I just terminated it, changed vpn and rebooted, gona try once more. I'll let you...
!vpnscript
sharp bisonBOT
TryHackMe
mighty phoenix
seems to be working now. thanks anyways
primal imp
Hello ! Does hydra support ssh key usage ? I'm trying to connect via ssh to a server using an openssh private key but I'm asked to fill a password using ssh -i path_to_key user@host. Hydra doesn't seem to specify the possibility to use a key or I may have used the key wrongly
primal imp
What is it ?
weary spindle
It's a message I posted, but it's in sub chat, hang on
Hydra has the ability to brute-force the following protocols: Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-POST, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTPS-POST, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, RTSP, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH (v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.
primal imp
Didn't see the sub chat, thanks ! I'll look further
hardy storm
why does the free version of attackbox not let me copy-paste stuff
plush bay
why does the free version of attackbox not let me copy-paste stuff
it does... follow this gif for how to copy and paste to and from the attack box
hardy storm
okay thank you!
mighty dawn
Hi there. doing the Walking An Application (or trying to) but the machine doesn't have connectivity.
weary spindle
free users don't have internet on their attackboxes.
mighty dawn
free users don't have internet on their attackboxes.
I mean, I can't access the: https://10-10-82-100.p.thmlabs.com
mighty dawn
ok, so that behavior is normal right? just wanted to confirm it.
bronze vale
ok, so that behavior is normal right? just wanted to confirm it.
Yup:)
That isn't on the same servers as our VPN, it's on a public server which requires internet access
mighty dawn
That isn't on the same servers as our VPN, it's on a public server which require...
thanks. for the clarification 🙂
scenic torrentBOT
Gave +1 Rep to @bronze vale
red badger
hey when I type in the web based kali Linux terminal it it is not getting typed prperly
Okay
hoary comet
zenith glacier
Hi. I need help to recover my account
I created an email and changed the email. After that, my OS crashed and now I don't remember the email
I installed the OS again but now I am in trouble please help me regards this
The account is still linked with my discord
@bronze vale
bronze vale
sharp bisonBOT
TryHackMe
zenith glacier
Ok
viral field
Does this portal have technical support at all? I sent an email and there is no confirmation or notification that it has been received and they are engaged in it, as they do in more serious companies.
weary spindle
Does this portal have technical support at all? I sent an email and there is no ...
The support team is small, the support team are better than some "serious" companies.
Everytime I have E-mailed I got an auto-reply advising me I will get an answer in 2-3 days, but it's usually faster than that.
Rule of thumb is if you have E-mailed and haven't had a reply after 7 days, send a follow up.
viral field
The support team is small, the support team are better than some "serious" compa...
Okay, I got it. Apparently support needs support)))
primal imp
Are you a sub?
It is a discord chat reserved to subs ? I don't really get ^^'
Oh it's a room, okay
weary spindle
It's a channel.
serene raptor
hey, not sure if it related to here
but i am on Enumerating NFS Task on Network Services 2
and when i change to the NFS mount if freeze the terminal and then i can't use it . i am using OpenVPN
i tried to ssh to the server as the task says
i happens when i try to cd to the folder and ls it
and i don't see the job i created for the openVPN but i do have interface listed
sharp bisonBOT
TryHackMe
bronze vale
hey, not sure if it related to here
but i am on Enumerating NFS Task on Network...
Can you send a screenshot of your OpenVPN output log, please?
serene raptor
i did reboot
i will try it again and the n
just to have real results as the issue happens
bronze vale
I am so sorry, I got sidetracked working
Can you send me a screenshot of it freezing please?
Evening all:)
I have answered all emails from before (and including) the 27th
If you have emailed before then and not received a response yet, I am really sorry!
Please email again and I will respond as soon as possible.
The only exceptions to this are:
- Vulnerability reports
- Job applications
heady cosmos
Hey 🙂
eager fulcrum
!vpnscript
sharp bisonBOT
TryHackMe
eager fulcrum
That'll do some troubleshooting for you, especially detecting multiple vpn connections at the same time
heady cosmos
Thanks very much I'll have a look through! It seems to be this particular box
thats a great script. Thanks @eager fulcrum and @barren birch !
scenic torrentBOT
Gave +1 Rep to @eager fulcrum
light spade
Doing the Authentication Bypass room and the link for the machine is not pulling up an active site. I've already reset by browser and tried in the AttackBox Firefox window as well. Is there something I need to do to reset something on my end?
light spade
Yeah its the one that gets linked in the different task list
Did it not like the /customers/reset? I just tried on AttackBox and it works, still not on normal browers. Thanks for your help
scenic torrentBOT
Gave +1 Rep to @gray loom
light spade
During the Content Discovery Lab I was using my web browser, not the Attack Box for the page source lesson
Don't recall, will definitely keep an eye out for it going through other rooms
quiet bison
hi .. im new to tryhackme .. n i was wondering y the labs r sooo slow ? im trying to use openvpn but like how does it work ? i have already setup the tunnel using my vmware kalibox .. but how like i can't do any nmap scan for the ip address given for the specific tasks
hasty vessel
Hey! Do Tryhackme vouchers have any expiration date?
serene raptor
@bronze vale hey. sorry for the ping
i am still stuck
i doubt that this is a VPN issue
looks more like room related
how should i proceed?
weary spindle
What room?
serene raptor
Network Services 2
weary spindle
Oh, the mount freezing?
serene raptor
yup
some times i can read the folder
somtimes the whole tmp freeze
not sure what to do
i think i will skip that room or atleast the vm
and i did run the VPN script and all is good
weary spindle
Were you using the attackbox or own VM?
weary spindle
Ah, I don't remember it freezing for me when I used my own VM.
serene raptor
it just not solution if i have to use it every time
i used the openvpn not attack box *
now i will try attack box to see if it any better
weary spindle
I know, I seen it there, it's because I was typing and reading, lol
serene raptor
😂 happens to me all the time lol
uneven swift
" Uh-oh! Non-subscribed user can only deploy the free AttackBox for 1 hour a day. Subscribe for unlimited access. " ... But i haven't used it for an hour...
zealous yoke
When you deploy it, it’s allocated to you for the hour, so you technically use “the hour”, even if you terminate it before the hour is up
It’s not like a “you can use it for an hour across the day” if that makes sense?
uneven swift
Understood, thank you!
wide mulch
I'm not able to access acmeitsupport.thm site using it's ip address
Anyone please guide
Ip address/customers/signup
lime geyser
Hello i need help to change my username because it contains my real name... I have had an issue in the past with the wrong name displayed on the certifications so i had to delete my account and recreate this one. I need to change my username please it's quite urgent for the reasons stated above. Thanks in advance
jovial mango
I'm not able to access acmeitsupport.thm site using it's ip address
Your have to add <IP address> domainname.thm in your hosts file, maybe it will work
wide mulch
Uhh okay let me try
wide mulch
Your have to add `<IP address> domainname.thm` in your hosts file, maybe it wil...
Host files of attack box?
quaint citrus
yes
sharp bisonBOT
TryHackMe
lime geyser
I already did, but as last time i didn't had any answers I wanted to try here 🙂
I meant last time when I had issues with certifications, but okay i'll wait thanks
scenic torrentBOT
Gave +1 Rep to @gray loom
inland knoll
I'm having an issue with establishing a meterpreter session. I've even watched a walkthrough for it (the guy used the same process). But Msf says "invalid session" every time. Here's the info for the target and my payload. I can't see what the problem is, and when it worked just fine yesterday...
This is in the "HackPark" room:
i think that was it.
just lhost and lport
Ohhh my. I think I know what it is, then... Shit
I didn't set the proper payload in msfconsole
Thank you for pointing that out to me
*headdesk
leaden goblet
hi, just wanna ask if we can tar something in windows and then untar it in linux?
inland knoll
Pretty sure, yeah. I think the format is universal
leaden goblet
so here is the thing:
- i tar a file in windows (vm) with this command: tar cfv archivo.tar sam
- i sent it via netcat to another vm (kali)
- and when i tried to untar it in kali with this command: (tar xvf archivo.tar)
- it tells me that this does not look like a tar archive
inland knoll
Forgot about S.S. metadata... You've discovered my name 😆
And yeah, that's odd... I'm not very knowledgeable on the subject. Hopefully someone can help you...
Sorry for the false response. I just assumed
broken bear
This isn't THM related, please ask the question in #infosec-general .
pliant parrot
Good evening, I am trying on my room (IDOR) to start the 7th task machine, but it tells me 'You can only deploy a maximum of 3 machines at a time.'. How can I see from where my apparently three machines started so I can terminate them please? Thank you very much. I hope I'm on the right channel 🙂
celest wadi
Good evening, I am trying on my room (IDOR) to start the 7th task machine, but i...
https://tryhackme.com/api/vm/running lists the running machines
pliant parrot
https://tryhackme.com/api/vm/running lists the running machines
Thank you very much!
scenic torrentBOT
Gave +1 Rep to @celest wadi
celest wadi
or you can also just use this to terminate all running machines
#site-support message
pliant parrot
I have another question 😊 How can I use RFI in File Inclusion without a webserver to get my code from? Thank you in advance 🙂 (Do I need to have an HTTP Server on my machine which could be visible from the target machine?)
Thank you! 😄
plush bay
and if you are doing that on tryhackme python3:s http.server module is nice for that purpose
broken bear
I have another question 😊 How can I use RFI in File Inclusion without a webserv...
Please ask this question in #room-hints or #room-help if it's for a specific room; otherwise, this isn't really a question for #site-support .
strong dock
hello
how do i connect in this room
and what is the diffrence
ty for your help😃
sudden elm
I am having connection issues. It doesnt mater which server I get the x through connected
sharp bisonBOT
TryHackMe
sterile dirge
I can't download my Wreath vpn config, I keep getting a 404 even after regenerating
plush bay
I can't download my Wreath vpn config, I keep getting a 404 even after regenerat...
have you hit the regen button waited 5 mins and tried again???
sterile dirge
Didn't wait 5min, more like 2 or 3
sudden elm
yeah maybe
Should I do it again and wait 5 minutes ..for some reason I also dont seem to be able t drop screenshots in
I just regenerated again and this time it gave me the green notification so I will wait 5 and see how I go
plush bay
!docs verify
sharp bisonBOT
TryHackMe
plush bay
@sudden elm ⬆️ if you follow this guide you can post screenshots
plush bay
nice another guru user
well that access page is not always accurate with you being connected... for example you could check curl 10.10.10.10/whoami instead to see your ip
sterile dirge
have you hit the regen button waited 5 mins and tried again???
Well over 5 minutes now 🙂 still 404
sterile dirge
Alright, thanks anyway ^^
plush bay
as those don't have alternative servers to choose from
for antman if they are going for just the regular vpn you can try another vpn server and it might work without 404
sudden elm
It seems to have sorted itself out now
plush bay
nice
sudden elm
thanks for your help
plush bay
no problem
signal granite
https://tryhackme.com/api/vm/running fixed my issue. I just needed to know which machines to close.
coral pagoda
Hello i cant seem to DM the bot
plush bay
Hello i cant seem to DM the bot
are your dm:s open to server members or have you limited it in discord settings???
chilly oriole
Hey support, I'm trying to download the openvpn config for Wreath but getting a 404 error. Any idea what's up?
crisp tinsel
Any chance THM will do some giveaways soon?
weary spindle
Hey support, I'm trying to download the openvpn config for Wreath but getting a ...
Try leaving the room for 15 minutes.
bold tinsel
bruh
what is the damn use for the
~/.profile
file ?
like i tried putting
export hi='hello';
but apparently this literally never works
why is it so ??? what is the use for this file then ?
can anyone suggest something ?
i need to know this and im hella confused
i wanna put something in a file that will get executed everytime I as a user -> login
lament sedge
try editing ~/.zshrc
lament sedge
bruh
what is the damn use for the
```~/.profile```
file ?
like i tried putting...
if you use bash shell then edit ~/.bashrc
lament sedge
bruh
what is the damn use for the
```~/.profile```
file ?
like i tried putting...
just read this https://linuxhint.com/set-environment-variable-zsh/
you can use command "printenv" to see your environment variables
surreal locust
I got problem with OpenVPN connectivity and i'm trying every step provided as a manual.
My problem was started for the last three days.
Is there actually a problem with the eu servers or is it something else. Please Help me.
celest wadi
I got problem with OpenVPN connectivity and i'm trying every step provided as a ...
!vpnscript
sharp bisonBOT
TryHackMe
celest wadi
run that and see if you get any errors
celest wadi
Can you ping 8.8.8.8 that's googles server
surreal locust
100% packet loss
celest wadi
Are you on a vm? that might not connected to the internet
surreal locust
i'm on the vm
celest wadi
Yeh, you'll have to connect to the Internet from the vm
Look up "VM Internet connection"
There should be a lot of fixes
surreal locust
i'm connected wired connection. Is it a problem with the settings ?
celest wadi
Yeh, it likely is
surreal locust
I cant ping but i can browsing lol whyyyyy?😆
bold tinsel
if you use bash shell then edit ~/.bashrc
Got it. Since i was using zsh, i made a .zprofile file and added variables there. It works. Thank you!
scenic torrentBOT
Gave +1 Rep to @lament sedge
weary spindle
I cant ping but i can browsing lol whyyyyy?😆
Which hypervisor are you using?
indigo carbon
Is the site down at the moment? Trying to go thru the Command Injection path but the "start machine" function fails
weary spindle
Works for me.
If you verify, you can provide a screenshot of your screen
!docs verify
sharp bisonBOT
TryHackMe
weary spindle
Yes Task 5
Or you can DM it to me.
indigo carbon
Ok thanks!
Ah. Disregard. I was being an idiot. Needed to launch the attack box first and go in from Firefox on that. Sorry for the trouble, but thanks for the help!
weary spindle
That room boots up a site that is available on the internet.
If you're a free user the attack box is yours to use for this hour.
indigo carbon
Ok. Weird. I could only get it to load thru the attack machine. I'm a subscriber
(a new one)
weary spindle
Ah, sorry.
You're not verified so I just assumed you weren't a sub. 🙂
Subs can load up attackboxes.
ember anchor
I cannot run gobuster -u
drowsy heart
I cannot run gobuster -u
you didn't supply a wordlist after -dir -u
gobuster dir -u http://fakebank.com -w (Insert path to wordlist)
drowsy heart
But “dir” not mentioned in instructions <:NotLikeThis:689847725969244171>
its mentioned in available commands first.
I understand where you are coming from, it would be helpful to have an example.
ember anchor
This is command, but possible need to dig more
drowsy heart
This is command, but possible need to dig more
looks like it uses dir by default. Not sure mate.
drowsy heart
have you got it to work?
ember anchor
Find
ember anchor
have you got it to work?
Yup 👍🏻
drowsy heart
/usr/share/wordlists/dirbuster
drowsy heart
are you on the kali machine or attack box
if you're on the attackbox you can click on Places>Wordlists at the top of the screen.
eager fulcrum
This is command, but possible need to dig more
cc @tawdry orbit wrong syntax still
eager fulcrum
I cannot run gobuster -u
You're not meant to do this in the attackbox, there's a specially provided thing to use
ember anchor
if you're on the attackbox you can click on Places>Wordlists at the top of the s...
Yes using attack machine
ember anchor
You're not meant to do this in the attackbox, there's a specially provided thing...
Ahh is it, how to find
eager fulcrum
I haven't done the room
I just know that the content within the room is wrong, and it teaches you a gobuster syntax that is massively outdated
weary spindle
I used Ferroxbuster for that room IIRC
coral pagoda
is there a way to disable the "competitive" element in the CTF games?
celest wadi
is there a way to disable the "competitive" element in the CTF games?
do you mean koth or ctf rooms, either way there's no feature to adjust the "diificulty" other than just doing easier rooms
eager fulcrum
I used Ferroxbuster for that room IIRC
I hope you weren't fuzzing fakebank.com
coral pagoda
do you mean koth or ctf rooms, either way there's no feature to adjust the "diif...
The CTF rooms and im not interested in changing the difficulty just turning of the competitive element
celest wadi
what competitive element? other than bloods for recently released ctf rooms there's nothing else 🤷♂️
coral pagoda
the large chart at the top comparing you too others
celest wadi
oh that, yeh afaik there's no way of turning that off
some rooms have it disabled by default tho
coral pagoda
okay i will try to train my autistic brain to ignore that then
celest wadi
the large chart at the top comparing you too others
so, a follow-up on this, if you intercept the request in burp and keep forwarding until you see GET /api/scoreboard delete that requests content and forward it, it doesn't show the chart
now you tell me if that's worth doing every time 🤷♂️
eager fulcrum
the large chart at the top comparing you too others
Yes you can, change it to a "simple room" in the room settings if you're the owner
You can't remove it yourself if you're not the creator
If you have ublock origin etc, you can block the element
coral pagoda
Thanks
weary spindle
I hope you weren't fuzzing fakebank.com
No, there was a task where you needed to find a dir
Not a dir, another page
trail obsidian
I have a gift subscription that I redeemed what if I don't use it will it still expire?
weary spindle
If you have redeemed it against your THM account, yes.
trail obsidian
That means it will ezpire in a month right?
cerulean cedar
I am having a problem while connecting to open vpn in the virtualbox while using kali 2022.2
anybody here to help?
weary spindle
Sure, what's up?
cerulean cedar
Sure, what's up?
Can i Dm you
weary spindle
No, the open chat is fine.
If you need to provide screeshots you could verify.
!docs verify
sharp bisonBOT
TryHackMe
glacial tinsel
Anyone been having issues with response times on ctf boxes? trying to attempt Relevant today, but it's coming back as unresponsive, no ping, not loading the webserver, nothing. I've moved VPN servers a couple times, regenerated my vpn profile and added/updated my hosts file with the new IP as I've terminated and started it again. But this has been happening to a few boxes recently, very hit & miss
drowsy tapir
Anyone been having issues with response times on ctf boxes? trying to attempt Re...
I had to reset that box two-four times. I only had that issue with Relevant.
cerulean cedar
Sure, what's up?
Issue Resolved
bronze vale
Me
dense geyser
Alright, can I DM?
bronze vale
Yup
inland knoll
Anyone been having issues with response times on ctf boxes? trying to attempt Re...
Sometimes they are a bit sketchy, especially the Windows machines
The specs on the EC2 instances are very low
deep spire
cc <@719230703161835633> wrong syntax **still**
Tim isn't in today, I've just had a look at it.
Looks like it's a version specific issue, and the command provided worked with the vm provided, but it's less than ideal. Looks like you can add dir onto the end of the command and it's valid in both that version and the up to date version on my machine, so i've gone with that as a fix
livid forge
Hey @weary spindle
weary spindle
Okay, the VPN is creating a tunnel to the THM machines.
When you start a machine up you'll get this.
livid forge
but i have attack box opened why should I need it?
livid forge
When you start a machine up you'll get this.
Yea ik that
livid forge
You only need to connect to the VPN if you're using your host OS or VM.
Oh oke
so i dont need it in my case
weary spindle
Not if you're working out the attackbox
livid forge
Okay thanks @weary spindle
scenic torrentBOT
Gave +1 Rep to @weary spindle
weary spindle
If your PC/Laptop can handle a VM.
wild oar
Hey, everyone! How is it going?
I'm having troubles to get the staff-session cookie on the XSS room, can someone help me?
I'm setting everything right but I keep the listening server running for almost an hour and nothing happens.
plush bay
Hey, everyone! How is it going?
I'm having troubles to get the staff-session coo...
the room is kinda bugged so you need to use the attackbox to catch the token using either a python web server or netcat
wild oar
the room is kinda bugged so you need to use the attackbox to catch the token usi...
Ok, I'm goona try it and get back to you
It worked, thanks a lot @plush bay !!!
scenic torrentBOT
Gave +1 Rep to @plush bay
plush bay
no problem
bright stratus
Hi i am doing Kerberos and i think this command isnt right, prooved it and didnt work
./kerbrute userenum --dc CONTROLLER.local -d CONTROLLER.local User.txt
worked like this
./kerbrute userenum --dc <ip> -d CONTROLLER.local User.txt
lunar glade
Hello, i,m new here. i am at https://tryhackme.com/room/walkinganapplication and i try to open https://10-10-107-215.p.thmlabs.com/ thru Atack box i get connection time out. Do i have to do something else? It's my first time usint Atack Box
crystal marlin
Hello, i,m new here. i am at https://tryhackme.com/room/walkinganapplication and...
Wait a bit longer, or try using the IP, instead of the URL, so just use 10.10.107.215 in your browser
celest wadi
Hello, i,m new here. i am at https://tryhackme.com/room/walkinganapplication and...
ahhhh, was too slow 
crystal marlin
Way too slow for me, yes 😄
lunar glade
thank you. Using https://10.10.107.215 i get Unable to connect. Using http://10.10.107.215 it just hangs loading but i get page title "Acme It support - home"
if finaly loaded using http
thank you both!
why i can't copy/paste from AttackBox to my webbrowser
?
lunar glade
i need to acces: https://static-labs.tryhackme.cloud/sites/thm-web-framework and i get time out. Do you know the ip of this server?
i don't think so but i could be wrong
but to add it to host don't i need the ip?
sorry
Attackbox
but now Attack Box lost connection all togheter
lunar glade
no, i have free account. But to get one flag it say to go to https://static-labs.tryhackme.cloud/sites/thm-web-framework.
celest wadi
yeh, just visit that site on your own machine
don't even need a vpn for that(I think)
lunar glade
ok, i thought it was a local site for tryhackme not accesible from outside
i must start to think like a hacker 😄
thank you
i can't get Attackbox to reconect. i will probably instal kali in vm and use vpn to connect
celest wadi
"attackbox doesn't have internet for free users"
also, as a free user you only get an hour of using attackbox
ornate cedar
Is it possible to get the JSESSIONID cookie through javascript?
celest wadi
yeh, through "xss"
lunar glade
"attackbox doesn't have internet for free users"
that might be my problem. i thought if i add 1 extra hour will work...
ornate cedar
I have tried through xss, i use document.cookie and it returns all cookies except for JSESSIONID
celest wadi
I have tried through xss, i use `document.cookie` and it returns all cookies exc...
is this for a thm room?
ornate cedar
This is for a bug bounty
celest wadi
ah, well we can't really help with that stuff
rocky trail
Hi, guys i need a streak restoration how can i get it back ?
sharp bisonBOT
TryHackMe
rocky trail
You'd need to contact support and ask them to do it nicely.
how long can i wait before contacting them ?
weary spindle
Now?
rocky trail
just saying i can't keep my streak up because i'm in Cisco Network academy and trying to build up my portfolio
do i ask them now for the maximum number of days i can get ?
before restoring it.
weary spindle
If you plan to stop I don't know how they will go about it.
weary spindle
Yeah.
bright stratus
?... i wanna know if there is a comptia here in discords thm. I am doing kerberos from comptia pentest+ and i dont know where put my questions
Thanks!!!💯
naive dust
I don't know why I can't download my openvpn configuration file
crystal marlin
I don't know why I can't download my openvpn configuration file
naive dust
https://discord.com/channels/521382216299839518/521771811768107008/8699897681114...
Oh thank you very much. I am sorry for disturbing you.
scenic torrentBOT
Gave +1 Rep to @crystal marlin
crystal marlin
Oh thank you very much. I am sorry for disturbing you.
No disturbance occurred 🙂
naive dawn
Hi im running kali on virtual box on windows 10 using NAT. I am trying to transfer a file from linux to the windows box where i have a shell, ive tried wget, curl, invoke -web request and nothing works however my http server does log the GET request, any help?
deep spire
Hi im running kali on virtual box on windows 10 using NAT. I am trying to trans...
what's your wget command? you might need to add -o filename to get it to output
naive dawn
powershell.exe Invoke-WebRequest -Uri "http://10.10.14.3:8081/winPEASx64.exe" -OutFile "C:\Users\kostas\Downloads\test.exe"
deep spire
hmm, you should be getting a file out if you have perms to write to that folder... unless it wants escaped \'s on the path? so \\
weary spindle
I've never experienced a BSoD with either hypervisor
austere field
Also virtualization is turned on from the bios
lament creek
Hi, i lost my 80+ steak even if i haven't missed a single day ;-;
oh
lol
never mind, it came back to normal
clear hedge
Hey folks! Trying to update Kali, but I constantly keep getting this out of space error. I have given 65gb for this VM and I'm still getting this error. Would appreciate any guidance here
long elm
Was anyone able to solve this room? https://tryhackme.com/room/btredlinejoxr3d I´m stuck on creating a standard collector in redline and it get´s stuck on creating a new analysis session aswell
is this room or bugged or so?
clear hedge
Was anyone able to solve this room? https://tryhackme.com/room/btredlinejoxr3d I...
try #room-help
long elm
@clear hedge Well that´s where i´m coming from .. but like nobody could help me or answer my question
@gray loom yes and i did wait even longer than 60 minutes still..
eager fulcrum
Stirve, you've been here long enough to know that this channel is for directly tryhackme related tech support like site and VPN issues
clear hedge
I did, most of it suggested clearing old install files etc, but I have a fresh install here, so I may have to expand a certain partition, idk which one though
eager fulcrum
I did, most of it suggested clearing old install files etc, but I have a fresh i...
This channel is for VPN and other technical questions related to TryHackMe
green hemlock
sharp bisonBOT
TryHackMe
supple cove
Hi, ive been having this problem with all the linux machines so far, can you please help me understand why I can't see the THM machine? I have a picture but I can't attach it.
weary spindle
Are you connected to the VPN?
supple cove
it's through attackbox
weary spindle
!docs verify
sharp bisonBOT
TryHackMe
weary spindle
And you'll be able to provide screenshots.
supple cove
here's what I see rather than:
I don't understand, what target machine?
I'm at linux fundamentals 3
yes
where do I do it?
I did, and it also didn't work, but I turned off the machine and somehow it opened by itself
Thanks! I'll try again
tender anvil
Can i use dashes (-) in my profile username?
dense robin
Hi, my vpn stopped working so I tried to generate a new one. But the VPN config download button leads to a 404 page
winter star
hey guys, im trying to output gobuster dirs ti a specific file, do i need to make the file first or can i just -o to it,
when i -o it gives me an error
this is the error i get
nevermind, im dumb, forgot my ujser account
finite aurora
Hi, my vpn stopped working so I tried to generate a new one. But the VPN config ...
Try changing the server and downloading again a few times
This happens sometimes
dense robin
Try changing the server and downloading again a few times
This happens sometime...
Thanks, I'll try next time I have a chance
scenic torrentBOT
Gave +1 Rep to @finite aurora
weary spindle
Can i use dashes (-) in my profile username?
No, only alpha-numeric characters.
fallen violet
Hi, can't download openvpn config for Wreath network, getting 404 error. Rejoining didn't help. How to fix this issue?
weary spindle
Leave the room for 15 min(s), it might work then.
naive dust
Hey I got the subscription but nothing happened, is their a delay when you buy it or do I gotta wait a day
weary spindle
No, it's instant.
naive dust
oh it still says go premium
weary spindle
IF it's successful in payment
naive dust
and it charged me
weary spindle
Try CTRL and F5.
sharp bisonBOT
TryHackMe
plush bay
yeah there is the support email
fallen violet
Leave the room for 15 min(s), it might work then.
so it didn't work(
weary spindle
Ah, that's good.
naive dust
thank you
hybrid adder
is there a way by which I can do copy, paste from browser(on my local machine) to kali VM provided by THM?
wide mulch
Yes there a clipboard, you can paste things in clipboard and can paste anywhere in VM
At most left you will see an arrow icon, just hover it and you will see a clipboard icon.
light path
i have a question
celest wadi
heady cosmos
seems to be an issue with the Linux Forensics room. Doesn't open split screen like the room suggests. Also can't SSH in
Did all that 🙂
think I just resolved it...
naive dust
Is there a spelling mistake in the answer to Linux Forensics Task 6 Q1?
naive dust
I don’t want to give the answer away. But I’m reading the bash history and looking at what I think is the answer but not correct. I’m sure I’m just wrong lol !
inland knoll
I've let my bank card lapse but have changed over to PayPal.
I'm guessing THM did not receive any payment from me as my card is now expired and I have received an email from THM about the lapse in payment.
Will switching my payment method automatically incure the payment? Or is there another step I need to take?
There was no feedback after switching
deep spire
I don’t want to give the answer away. But I’m reading the bash history and looki...
I think you're looking at the wrong users bash history. Also, try to keep these question to one channel, such as #room-hints #room-help or, where the room is new, its specific room (like #981546948853112842).
deep spire
I've let my bank card lapse but have changed over to PayPal.
I'm guessing THM d...
I'm not sure, that may need to be one for support via email, unless someone else knows better.
if a payment isn't showing in Paypal then it won't have taken one
inland knoll
Good point. I'll check PayPal
Ty for the pointer lol... "Duh"
Hopefully tomorrow it will go through. I don't want to lose any progress.
deep spire
Hopefully tomorrow it will go through. I don't want to lose any progress.
I would have thought it'd be instant if it was going to happen, but i also don't want to tell you to re-try and you get billed twice, because then you will need to go through support
inland knoll
I would have thought it'd be instant if it was going to happen, but i also don't...
Should I start a convo w/ Skidy||Someone else? I haven't found a ticket system or anything on the website
deep spire
Should I start a convo w/ Skidy||Someone else? I haven't found a ticket system o...
!support
inland knoll
nor modmail
deep spire
sharp bisonBOT
TryHackMe
deep spire
there we go 🙂
inland knoll
ty
bronze vale
Should I start a convo w/ Skidy||Someone else? I haven't found a ticket system o...
https://tryhackme.com/contact -- Ticket system is here
minor fjord
Hello, can I switch from a monthly premium subscription to an annual premium subscription?
deep spire
Hello, can I switch from a monthly premium subscription to an annual premium sub...
I think you can only do that by cancelling your subscription, waiting for it to expire, then set it to annual.
cyan wadi
Trying to update yarGen rules, THM machine Yara3011v2 is unable to ping www.bsk-consulting.de for the files.
eager fulcrum
nor modmail
Please bear in mind that mods are not site staff and do not handle site issues
onyx plume
Not sure this is the right place, but does anyone know how I could get an invoice/receipt for purchasing access to Throwback? I need one to submit for reimbursement for work.
inland knoll
Please bear in mind that mods are not site staff and do not handle site issues
I was hoping someone knew whether or not the payment would incure but yeah, I figured discord mods != Website staff.
Hopefully they are able to answer
Not sure how much time I have to fix it, either
eager fulcrum
Not sure this is the right place, but does anyone know how I could get an invoic...
Email support@tryhackme.com
lucid sentinel
Hi guys, anyone have experience using the friend/invite functions on the site? I sent my friend an invite & he said when he opened the link that it said something like page expired or not found. Then I tried again, but it seems you can only send an invite once. Then I asked him to invite me but I didn't receive anything at all. We tried via usernames & email.
I emailed support but I didn't hear from them yet
tired dock
I've been trying to type in the password "dragon" when doing practice example of os security but it's not letting me
crystal marlin
I've been trying to type in the password "dragon" when doing practice example of...
Are you talking about the ssh part ? If yes, it's not displaying you any characters like asterisk for security purpose, but it's still recognising that you enter a password. So just type the password and press enter.
eager fulcrum
I do not see any asterisk though
Yeah, you're not meant to.
tired dock
Oh
delicate bear
Hey, Iam doing Throwback and all the time get no logon servers CONNECTION_STATE_NLA - nla_recv_pdu() fail when trying to RDP on prod any idea?
tired dock
Yeah, you're not meant to.
I just tried to enter password and every time I hit enter. I get nothing. It just skips a line
eager fulcrum
Hey, Iam doing Throwback and all the time get no logon servers CONNECTION_STATE_...
#743859653343182930 is probably a better place
eager fulcrum
I just tried to enter password and every time I hit enter. I get nothing. It jus...
Verify with the bot and send a screenshot in #room-help please
!docs verify
sharp bisonBOT
TryHackMe
delicate bear
<#743859653343182930> is probably a better place
Thanks, and sory for wrong room, posted in throwback-network
scenic torrentBOT
Gave +1 Rep to @eager fulcrum
cyan wadi
Trying to update yarGen rules, THM machine Yara3011v2 is unable to ping www.bsk-...
Should I forward this to the site support email? I finished the Yara room because I didn't need to update the definitions, but its a definite issue.
onyx plume
Email support@tryhackme.com
FYI in case anyone else is wondering since this is not obvious at all to check your order history through THM you have to check a separate web app that isn't linked in your profile at all and I only found while looking through emails ""https://tryhackme.chargebeeportal.com""
Like why tf would you not link this within your users' profiles?? Baffling design...
cyan wadi
It is task 10 of the main yara room.
Ah gotcha. My bad! Thought I was missing something earlier today but I was just reading it wrong. Thanks for trying to help tho!
scenic torrentBOT
Gave +1 Rep to @gray loom
rocky cedar
Hi, do you know if it is possible to change my name on a tryhackme certificate? my pseudo is on it and I would like to put my name instead but i dont know how i can do this
Yup, that's what i did and now my certificates are good but you sure there's no way? :/
lone lotus
Hello Tech support. Have any issues about the throwback network been reported? My friend and I are on separate networks and it is running very poorly.
His is working better after a VM reboot, I'm going to try the same.
Ok working well. We just needed to reboot VMs. 😄 thanks for lending the ear
naive dust
hi
i've got some problems with the speed of the attack box. firefox wo.nt load the pages or it takes for ever. is there some thing i can do about it?
feral merlin
The Living Off the Land VM is buggy af. It fails to deploy rendering the room problematic.
weary spindle
i've got some problems with the speed of the attack box. firefox wo.nt load the ...
Are you a free user?
worldly viper
Hi, issue about owasp top ten's [Severity 2] Broken Authentication Practical, the site wont load no matter what I try. I tried to restart the machine 3 times, waited 10 minutes for it to load, even reconnected openvpn.
oh it loaded for me but the site is really slow
frail hatch
hey guys
i have a problem with VPN, i can't ping any machine
is this a right place to ask for help ?
btw i'm premium user, and still can't connect
frail hatch
i can ping 10.10.10.10 but i can't ping lab machines...
sharp bisonBOT
TryHackMe
astral fiber
Hello, how can i get my Points on the leaderboard if i'm not on top 50
celest wadi
Hello, how can i get my Points on the leaderboard if i'm not on top 50
you can not, simply
burnt temple
Hello
i am trying to find out if there is any spyware or some kind of malware in my desktop
i have scanned with bit defender and malware byte it said its all clean
but just wondering if its hiding or infected other app
okay
clear hedge
https://tryhackme.com/room/linuxprivesc
Hey! I'm trying to ssh into the machine as per the instructions given, but I get the following error
Can someone pls help me with this?
That worked, thanks! Weird, never had to do this before
And do I have to do this everytime I SSH?
frail hatch
guys i have a problem with this connections
nmap scan doesn't show up all ports
ftp doesn't work
when it should work
clear hedge
Oh ok, thanks!
scenic torrentBOT
Gave +1 Rep to @gray loom
frail hatch
I am not satisfied with the service of the platform
it's the same room
i payed sub, just to do brainstorm
and i can't even connect
2 days
maybe i'm doing something wrong, but I just downloaded vpn turn on machine, that's it
i watched all guides for this machine
and none of them have extended passive ftp
sour dove
hello everyone, i have been practicing on THM and read books. However, i dont have problem in CTF and answering the questions on THM, but i am very lost when it comes to exam types of stuff. for example, we had CTF challenge in the class last week but i couldnt get the basic as i was lost what i need to do and where to start. so can someone help putting me on the right direction as what i need to first, second, third and so on to be successful