site-support

[umbral delta]

mainly bc the question is "Conduct a thorough port scan scan of your choosing, how many ports are open ?" so i've to be sure

u say ? ok

[crystal marlin]

Not that I know of, the task even suggests to go for all ports

[stray cove]

I remember there being some shenanigans with that one

But you may be right

Well, so long as the NFS ports are open

[umbral delta]

the fact is, the result is suppose to be between 1-9

[stray cove]

Check that you have the correct VM launched as well

Each task has their own iirc

[umbral delta]

i'm gonna show u look

just to see if i'm stupid or there's a problem ahahaha

[stray cove]

What does the normal scan return?

[stray cove]

How many are on that one?

Signature looks off though

[timid rose]

anyone knows how to fix Open VPN not working on kali

[umbral delta]

i could do as u suggested but with verbosity lv 2

for more info

[timid rose]

how do i downgrade?

[crystal marlin]

Show another screen of your current active machine information box pls

[timid rose]

i will search it up first

[stray cove]

I don't think you have the right target

You may have the VM from a prior task

[umbral delta]

but the ip is right. i started the machine and the ip showed up

[umbral delta]

what u mean ?

[pulsar bane]

run openvpn --version | awk '{print $2} if it's 2.6 then replace the cipher AES-256-CBC sting in the .ovpn config with data-ciphers AES-256-CBC

[stray cove]

On the website

[crystal marlin]

The box like that

[stray cove]

What's the VM name?

[umbral delta]

waaait, so i gotta download openvpn on the machine ? ahahah

[bronze vale]

Does this allow you to connect?

[umbral delta]

i downloaded on the main OS (windows)

[timid rose]

what next?

[pulsar bane]

Yes it worked for me, i think the cipher option is deprecated (although I can't find any documentation re it)

[bronze vale]

I'll pass it on, thank you^ :)

[pulsar bane]

I can't see the output of your openvpn --version | awk '{print $2}' | head -n 1

[umbral delta]

u know what, i'll try with the ubuntu machine that the site provide, let's what happens.

[timid rose]

my bad

[pulsar bane]

Thanks in your .ovpn file replace the line cipher AES-256-CBC with data-ciphers AES-256-CBC the file is normally your THM username.ovpn

[scenic torrent]

Gave +1 Rep to @timid rose

[umbral delta]

is this robocop a good thing ? ahahaha

[timid rose]

ok will try

[crystal marlin]

I think you somehow scanned a machine on your local network.
Is openvpn running directly inside your VM or on your host machine, since you said you downloaded the config to your host machine?

[umbral delta]

host ( i downloaded for windows)

there was surely something wrong about that, it was my first time trying openvpn cuz sometime the machine on the site are really slow

so i need to figure out how it works

[crystal marlin]

Change that, it has to run directly inside your VM and not on your host machine

[umbral delta]

oooh thanks. i'll definitely try that. rtn i'm trying with the site machine.

i want to die 😭 look at the time.

[timid rose]

did it work becouse it is stuck on this

[umbral delta]

my connetion suck af

15 mins for a scan

[timid rose]

where u from

[umbral delta]

italy bro

😎

[pulsar bane]

Open a new terminal window and try access a machine on the THM network, with ping or something, as it looks like it's worked

[umbral delta]

and right now is not a good time. killnet is attacking heavily a lot of infrastructures.

but it's fine, anonymous italia is pushing back. there's a lot going on from weeks.

[crystal marlin]

If you are scanning from the attackbox, your connection itself doesn't matter since the attackbox and the target machine are basically next to each other.
You can speed up your scan by adding -T4 or even -T4 --min-rate 10000

[umbral delta]

i read about T4 on man page. still didn't try it.

when this will finish i'll use this option

[pearl bane]

Before we start on this challenge: if you don't already know the principles of SQLi, then it would be well worth your time checking out the room on the topic; however, full steps will be provided, so you do not need in-depth knowledge of the principles behind SQL Injection to complete this task.

Room on the topic: Owner has made this room private.

[umbral delta]

sorry, are u talking to me ?

[pulsar bane]

All looks good, you've got an IP

[timid rose]

im gonna check if it works xd

[pearl bane]

I got subscribed to THM, but still got this ... So What Should I Do?!

[umbral delta]

oh it was about u. 😁

[bronze vale]

What is your site username?

[umbral delta]

bro i love u. I got it finally

with t4 min range 10000 it's been so fast

i just run nmap -v -Pn -T4 --min-range-10000 -p- 10.10.228.232 and it worked

[timid rose]

your the best it works now!

[umbral delta]

i also found the port i was looking for that is running nfs service (it was the 2049 so out of the well known)

[timid rose]

+rep @pulsar bane

[scenic torrent]

Gave +1 Rep to @pulsar bane

[pulsar bane]

Awesome I'm glad 🙂

[crystal marlin]

Glad to hear 🙂
Just as a side note for help you might need in the future.
Always ask your question/explain your issue straight away (screenshots are always very helpful), you will get the best/fastest response that way 👍

[umbral delta]

i'll do it, thanks everyone.

[pearl bane]

hexmanyac

[echo skiff]

Hi All,
I have a question about how to change the name on your certification? Is it even possible? I wanted to have two certificates. One with my username and one with my real name. I could only pick one and now it does not let me change it. So can it be changed or is this another/new THM-room 😛

Thanks for you info.

[celest wadi]

once generated the name can't be changed, change your full name in your profile and it'll show on any new ones you get/generate :)

[hasty dew]

Hello good people, the website shows that I'm connected, but i'm not. Is that a problem? Also I can't connect anymore with my ovpn file.

[celest wadi]

check the pins in this channel

[hasty dew]

[hasty dew]

thank you

[scenic torrent]

Gave +1 Rep to @celest wadi

[echo skiff]

oke thats a pity, thought it would be possible to download it again and get the same options as the first time but it cant be done then 😦

[celest wadi]

yeh, it'd be a major flaw anyways, just generate the same one for 10 different people that way 🤷‍♂️

[sleek jackal]

yup, render the whole point of the cert useless.

[celest wadi]

but you could do the same for any official cert tho

[sleek jackal]

eh I like to put them on my LinkedIn. not entirely useless though i know they have no real-world application

[celest wadi]

[echo skiff]

Well yes that totally true 😛 didn't think of that way haha. I was just thinking for my work-profile my name would have been better.

yeah thats true hahaha

a nice hand drawn name on it 😛

[celest wadi]

[terse umbra]

how do i downgrade openvpn?

[hollow narwhal]

I am also having openvpn problems after my recent update/upgrade. error message reads: OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.

After fiddling with it and and two hours of research I am still coming up without a solution, please hit me with bright ideas fam.

[terse umbra]

yeh idk how to fix it

i have the same problem

the only info i have is this

#site-support message

[hollow narwhal]

Well, at least there is some situation awareness. Thanks for the assist ;p If I fix it, I will share.

[terse umbra]

thank you

[plush bay]

sounds a bit like it is because of outdated ciphers being used just like the older ssh problems some people have had

dunno how to fix it though

[hollow narwhal]

I'm not clear whether THM needs to fix the server/ovpn config or if I need to modify something on my end...like can I add AES-256-CBC?

error message implies that I can but I have not been successful. I'm not clear if I can run it with an argument or I need to edit a config file somewhere.

I'll keep trying and report back

[bronze vale]

23/06/2022 OpenVPN connectivity problems

Hey,

Recently OpenVPN has updated their client.
This update has outdated our configurations and will not allow you to connect to our servers.

To see if you are affected by this problem, follow these steps:

1. Type openvpn --version | awk '{print $2}' | head -n 1 into your terminal
   If it returns "2.6" or "2.6_git", this means you are using the newest version of OpenVPN.
   If it says something else, you are not affected. Please check the pins for other OpenVPN troubleshooting steps, or ask a community member for help.

2. If you are using version 2.6 of OpenVPN then, do the following:
   Replace the cipher AES-256-CBC line in your .ovpn config with data-ciphers AES-256-CBC

To do this, you can use the text editor of your choice, or simply type nano filename.ovpn into your terminal.
Make sure not to edit anything else, and save it with the same file name.

Then, re-run the VPN with openvpn filename.ovpn. Let me or any of our community mentors know if these steps have not worked for you and we will troubleshoot further.

[bronze vale]

@terse umbra @hollow narwhal @plush bay ^

[plush bay]

thank you jabba

[scenic torrent]

Gave +1 Rep to @bronze vale

[hollow narwhal]

Jalapeño to the rescue, thanks homie!

[fast basalt]

thanks @bronze vale

[scenic torrent]

Gave +1 Rep to @bronze vale

[plush bay]

luckly shadow is not affected by this problem as they still use a rather now old version of ubuntu

yes 20.04 is getting old

[orchid trail]

You deserve a Nobel prize man! It worked flawlessly ❤️ God bless you 🙏

[silk galleon]

works for me !

tryhackme will modify the access file, i mean if i download the file again, the error will be fixed ?

[bronze vale]

All the credit & commands used goes to @pulsar bane, all I did was verify that it was a working temporary solution:)

[orchid trail]

Probably not since the editing still needs to be done in order for the connection to work. I'd hold onto that file if I were you 😅😅

[silk galleon]

Thanks, 🙂 I said that because I'm giving a course for beginners and I didn't want to make them edit the file, hehe

[scenic torrent]

Gave +1 Rep to @orchid trail

[acoustic ingot]

hey once you leave the ThrowBack room will it automatically stop charging you the monthly fee ?

[bronze vale]

Throwback is a one-time payment

[acoustic ingot]

what I though it was a monthly fee ?

[subtle kestrel]

cant seem to run dirsearch or gobuster on the vmware machine for kali

[acoustic ingot]

do an apt update

it said I have 1 day of access left ?

[subtle kestrel]

ty

[scenic torrent]

Gave +1 Rep to @acoustic ingot

[bronze vale]

Mhm, then you're kicked out the room

[acoustic ingot]

ok thanks I wish it was a little more descriptive but thank you

[bronze vale]

You’re told before you pay

[acoustic ingot]

am I though ?

[zealous yoke]

yup

[smoky harbor]

Hey everyone. I'd like to ask a general question about THM. I have completed every room on THM. Each week when new ones come out, I do it within days of the room release. I don't first blood them... but I am still getting the full points. So how are people bumping me out of the TOP 20 leader board? If I am getting max points that can be earned (outside of first blood which @torn citrus usually gets).... how is it people are creepy past me? Where are they getting these extra points?

[celest wadi]

it's not from extra points, the've done old rooms already which are private now and the've come back a year later or something so they still have those old extra points that are inaccessible for us now

[smoky harbor]

I am looking at the Yearly activity of some of the people that passed me. They haven't even been on THM as long as me

[celest wadi]

well, let's see if I'm able to pass you, I'm at 28 rn

[smoky harbor]

I've done every room that has been made available to me since I started. https://tryhackme.com/p/SilverStr

[celest wadi]

I havn't done older rooms

[smoky harbor]

There are definitely rooms that got retired, because it says I have done 526 rooms, and I know I've done over 550.

[celest wadi]

yeh, a bunch of rooms I've done are private now too, maybe it's a bug or something

[smoky harbor]

Who knows. I'd definitely like to understand it better. Because if I am doing maximum effort and still losing, something is a foot.

Let the dude that just passed me only has 505 rooms complete. I don't get how he can have more points unless he has been first blooding. But spot checking the rooms as of late, he hasn't. So something doesn't seem right

It's my own learning journey. So in the end its not about the rooms themselves. Its about the gamification of the leaderboard I want to understand better.

[celest wadi]

nope

tried that a lot

[smoky harbor]

Sure. I didn't lose any points when they closed out old rooms. But when people are somewhat new to the platform (ieL RamghariaSaab) and they PASSED me and have completed less rooms... I wanna understand how thats possible.

Give out NEW points... I doubt it. Keep points you earned when they are public... yes.

I'm not whining. If people legitly beat me, they deserve the cred and the position on the leaderboard. If there is some way for me to do MORE on THM, I wanna know about it. Right now though, I've been bumped from the TOP 20 and I can't understand how.

[torn citrus]

I can suggest checking your “rooms” page for questions that have been added.

I did that recently and got a bunch of points on rooms that were marked as completed.

[smoky harbor]

Is that a thing? Questions get added after compleing it?

[torn citrus]

Yes quite frequently.

Especially the popular rooms in the paths.

[smoky harbor]

Holy crap. Didn't know that. There should be some sort of filter then that shows rooms that aren't really complete due to missing questions.

[torn citrus]

Yeah I had a script for it before, but unfortunately cloudflare makes it impossible.

So I did it one by one

[smoky harbor]

Good to know. I always leave a room once I complete it so I only have a few showing on my list. Guess maybe is a good time to rejoin every one of them so I can see if that finds anything. Of course that means I gotta redo a bunch of rooms to get the new flags, but hey.... good way to check my notes.

To all THM staff, please add that to the product backlog. "Search filter to show rooms with unanswered questions in rooms completed"

Would be killer

[celest wadi]

#feedback-and-ideas

[smoky harbor]

+rep @torn citrus

[scenic torrent]

Gave +1 Rep to @torn citrus

[smoky harbor]

I can't post in there for some reason

[celest wadi]

yeh, it's kinda annoying, you have to use the site feedback

[smoky harbor]

Ya. Just saw that

[bronze vale]

Not annoying, feedback goes directly to Skidy & Ashu, means we can filter out all the random chat and get to the actual ideas

-undelete -a

[scenic torrent]

Up to 10 last deleted messages (last hour or 12 hours for premium):

none...

[frail pike]

Hi, there seems to be an issue with the EU VPN server. Can someone confirm it?

[sharp wind]

Hello guys I'm currently trying to do the blue room in the windows/metasploit exploitation phase and I have a problem that I can't use the given exploit on them through openvpn in my vm, although I regenreted it already just in case. I can ping it and I can run the exploit correctly from the attackbox.

Is there anything I can do to make it work through openvpn?

[celest wadi]

check the pins in this channel, a bug with openvpn

[sharp wind]

oh

thanks I check it out

I have 2.5.6 so i shouldn't be affected

[celest wadi]

yeh, might be something else then

[sharp wind]

Btw I tried it on 2 different machines. It tries to send it to them but it fails

[celest wadi]

a side note, blue is notorious for not working always

I normally have to try a couple of times before it works

[sharp wind]

Okay then I think i judt try in the next 30 mins. And if nothing i just jump across the room. Metasploit isn't that big of a deal anyway.

[frail pike]

Update to my post above in case someone else might run into the same issue

There seems to be a problem with the recent release of OpenVPN 2.6.0 with Debian distro including kali
I resolved the issue by downgrading it back to OpenVPN 2.5.6-1. (http://archive-4.kali.org/kali/pool/main/o/openvpn/openvpn_2.5.6-1_amd64.deb)

[celest wadi]

Yeh, two fixes are pinned in this channel

[bronze vale]

English only, please^ :)

[manic briar]

Good evening, I have a small problem to connect to the VPN of tryhackme and since 2 days I have this problem, and did not find the solution

[wheat wagon]

Check the pinned messages on this channel.

[manic briar]

ok thanks I'll have a look, I'll come back to you if I still have the problem

[lofty rock]

Hi there I am having problems with openvpn while running it on kali virtual machine

Failed to open tun/tap interface"
Failed to negotiate cipher with server
failed to apply push options

What can I do to fix this ?

[glad egret]

What command are you running?

[lofty rock]

sudo openvpn <myname>.ovpn

[glad egret]

Try another config

[lofty rock]

which one ?

where to get another config ?

[glad egret]

*Regenerate

[lofty rock]

can't it be vm configs ?

vm is vmware fusion

[glad egret]

I don't think that matters

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

TryHackMe

That topic does not exist!

Use !docs to list all of the available topics.

From TryHackMe with ❤!

[glad egret]

!vpnscript
@lofty rock Try using this

[sharp bison]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[crystal marlin]

Check the pinned messages, this is most likely due to the new openvpn 2.6 version

[uneven plover]

Hi. I'm pretty new to TryHackMe but I've started having trouble with the attack box and active machine. Should the attack box and active machine VPN be the same?

So there's the two buttons - 'start machine' in whatever room you're in, then 'start attackbox' at the top. Should the IP at the very top of the screen that 'start attackbox' creates be the same as the one that 'start machine' activates?

Okie-dokie. Thanks for your help. I must be doing something wrong then... I was certain I was using the right enum4linux command, but it doesn't seem to be working. I'll work it out.

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[uneven plover]

I think I just worked it out. I was using a tag when I didn't need to which seemed to be causing some sort of error.

[versed abyss]

anyone can help with open vpn? getting this error: """failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server."""
but in the config file it is set to use CBC

[tidal wedge]

Hi , does someone use macos here ?

[old spade]

How do i copy and paste from my pc into the attack box? Does anyone else have trouble with this?

[celest wadi]

https://media.discordapp.net/attachments/692456966802374687/921063860318924800/clipboard.gif

[old spade]

Thank you!

[echo topaz]

if they have the same mhz you should be fine

DDR4 is not backward-compatible with DDR3 so a DDR4 DIMM will not fit on a DDR3 DIMM slot. Not only is the key notch of each DDR generation different (please refer to Figure 1 above), but the DDR4 pin size and arrangement is different from DDR3

-google

the messages you deleted asked if u can combine ddr3 with ddr4

anyway, let's leave it
sorry if I misunderstood your question, would u rephrase it?

[naive dust]

can u put ryzen cpu in Intel motherboard?

[echo topaz]

last time I checked, no
but you gotta research the architecture of the CPU, many are backwards compatible with other architectures

even intel from different gens won't be compatible with a modern motherboard that supposedly supports intel

[naive dust]

thx

[echo topaz]

https://www.cpu-world.com/Sockets/Socket_1150_LGA1150_H3.html

here you can look up any socket you want

pcbuilder is another good tool that I've used for my own build

[echo topaz]

https://pcbuilder.net/

[last geode]

hi, I am facing Issue with Openvpn can anyone help

It is showing like this, and not connecting to thm

[weary spindle]

Check the pinned messages.

[last geode]

Yeahh I changed that cipher

still its not working

This one

How to downgrade openvpn, In google it is showing for ubuntu but not for kali

[weary spindle]

Did you try looking for a download of openvpn_2.5.6-1_amd64.deb ?

[keen scroll]

Isn't it BF-CBC?

[last geode]

No how can I do that, I already have ovpn right

[weary spindle]

Remove it, then look a download of that specific version.

I have to head on out, I'm sure someone else can show you that if you can't google it.

[last geode]

but...

[keen scroll]

What does uname -a output?
You can select the package based on your distribution and architecture

[last geode]

Linux kali 5.18.0-kali2-amd64 #1 SMP PREEMPT_DYNAMIC Debian 5.18.5-1kali1 (2022-06-20) x86_64 GNU/Linux

[keen scroll]

openvpn_2.5.1-3_amd64.deb should work then

See that amd64

[last geode]

mine is 2.6_git

[keen scroll]

Yup, it is the current version. Aren't you downgrading?

[last geode]

Yeah, but how

[keen scroll]

You can uninstall the current one and install the one from using the .deb file

[last geode]

will try

Its not working

[keen scroll]

What's not working?
May you please switch to #quiet-conversation

[last geode]

ok

@deep spire help me with my vpn problem

It is showing like this

[deep spire]

can you show the command you ran?

and what version of OpenVPN you're on?

[last geode]

openvpn filename.ovpn

2.6_git

[deep spire]

are you root?

[last geode]

yeah

[deep spire]

which vpn server are you connecting to?

[last geode]

IN-Regular-1

[deep spire]

and you've updated the data-ciphers as per the pinned post?

[last geode]

Yes I did

[deep spire]

Hmmmm... I'm not sure then. You've mentioned trying to uninstall it and use an older version but not being able to. how was the current version installed?

[last geode]

I tried to uninstall current version but It didn't worked

and there are many files I was confused which one to download

[last geode]

.

[lofty rock]

the VPN file/configuration works okay on my main machine, but doesn't work on VM
^ @glad egret

[last geode]

Yeahh

[deep spire]

was it installed via apt, or?

[last geode]

dont know

I copy pasted commands from google

[deep spire]

Running commands you don't understand is never a good idea.
I'd check what distro you're using, and how packages are normally installed.

[versed abyss]

if you use the attackbox in full screen, you can copy and paste normally assuming you give the browser permissions to do so. just remmeber in the terminal you need to ctrl+shift+c/v for copy/paste

[deep spire]

ok, so with kali you should be able to do apt remove openvpn

[last geode]

What should I do

[deep spire]

how have you messed up your grub?

[last geode]

I did nothing

I just typed apt remove openvpn

[deep spire]

that's odd then... I'd suggest the first one, but no guarantees.

[last geode]

Which one ? How ?

[deep spire]

The other option is a clean Kali machine if it does mess up.
uh, dev/sda, press space maybe?

[keen scroll]

Isn't the first one like MBR and the second one /boot?

[versed abyss]

thank you

[scenic torrent]

Gave +1 Rep to @last geode

[deep spire]

It's been a while, no idea

[crystal marlin]

Yeah, that's very likely if your main machine has an older version of openvpn

[lofty rock]

my main is 2.5.7, the VM is 2.6_git

[last geode]

I think I removed openvpn

now which one to dwnload and how to install

[deep spire]

correct, now we need to get the right version, one sec

[keen scroll]

I think it is this one - https://kali.download/kali/pool/main/o/openvpn/openvpn_2.5.6-1_amd64.deb

[deep spire]

I'm gonna show the way to do it with apt, just easier

[crystal marlin]

Right, so again, check the pinned messages, there are 2 different solutions. either alter your openvpn file so that it works with 2.6 or downgrade the openvpn version on your VM

[last geode]

yeah please

[lofty rock]

thank you very much will try now

[scenic torrent]

Gave +1 Rep to @crystal marlin

[deep spire]

https://itsfoss.com/apt-install-specific-version/
apt install openvpn=2.5.6 (you might need a different number, but i think people have said that works.
You can check versions with apt list --all-versions package_name

[last geode]

NO

[deep spire]

so, we check using apt list --all-versions openvpn

[last geode]

how

[deep spire]

ok, lets try a couple of commands first
apt clean
apt update
I'm hoping the apt update might let you see old versions too?

[deep spire]

try list versions again

otherwise you will be installing from package, which is a lil bit harder

or from git

[last geode]

same

[keen scroll]

Sorry, but this shouldn't take too long 😅

cd /tmp
wget -O openvpn.deb https://kali.download/kali/pool/main/o/openvpn/openvpn_2.5.6-1_amd64.deb
sudo apt install ./openvpn.deb
rm openvpn.deb

[deep spire]

Fair, less complicated than going to https://github.com/OpenVPN/openvpn/tags, getting source and then
To Build and Install,
tar -zxf openvpn-<version>.tar.gz
cd openvpn-<version>
./configure
make
make install
or see the file INSTALL for more info.

[last geode]

Yeah I did this next ?

[keen scroll]

Yeah, but this method will work if the package repository has removed the required package (version)

[deep spire]

run your openvpn command, but you may need to cd back to downloads, and edit your data-ciphers AES-256-CBC line back to cipher AES-256-CBC

[last geode]

Yeah I did

Not connected

[keen scroll]

Try adding data-ciphers AES-256-CBC too, that's what I did in my configuration file.

[last geode]

its 2.5.6

[last geode]

yeah

[jolly hazel]

Thanks alot, I haven't read all of what @last geode have wrote, but it seems like ha have same problem as me (My Problem: Got cipher error when trying to connect to THM-VPN. Showed as connected on the website, but could not ping the victim machine.) I did as you suggested and downgraded openvpn from 2.6 to 2.5.6 and now it works.

[scenic torrent]

Gave +1 Rep to @keen scroll

[jolly hazel]

restart your vm if you have not done already

(kali machine)

and I just went with "cipher AES-256-CBC" in ovpn config

[last geode]

Try this, I did and no errors

[keen scroll]

Good to go then

[last geode]

🥲 not connected

[last geode]

hey i did all these in /tmp, means will be deleted after reboot right ?

[keen scroll]

Oh, I maybe incorrect, I think it doesn't show Connected for IN-Regular (an unreliable check)

[last geode]

Previously it was showing

for me

[crystal marlin]

Ye, the access page is not reliable to verify if your are connected

[celest wadi]

curl 10.10.10.10/whoami

[last geode]

it shows ip

[lofty rock]

I have tried all the VIP servers, no luck, one told Inline certificate is invalid, two others told tun0 interface does not exist and can't make it tho.
:/

[crystal marlin]

That means you are successfully connected

[last geode]

I think yes

[crystal marlin]

EU-VIP server? Or really all of them?

[last geode]

I started a machine and pinged, it responds I am connected right ?

[lofty rock]

EU-VIP-2 showed certificate problem, EU-VIP-1 and EU-WEST-VIP-1 showed can't make tun/tap

[keen scroll]

Ran as root?

[last geode]

But I did all in /tmp it will get deleted after reboot right ?

[lofty rock]

I am

[crystal marlin]

Show a screenshot of connecting to the ones with tun/tap issue pls

[keen scroll]

Yup, /tmp will be cleared. But you now have the correct version of openvpn

[crystal marlin]

Right, but I suggest you also don't rely on pinging a machine to verify, since some machines simply don't reply to ICMP pings

[crystal marlin]

That looks like the openvpn version issue ?

[last geode]

yup, so can I download a fresh file and connect to thm after a reboot ?

[keen scroll]

Add data-ciphers AES-256-CBC to your openvpn configuration file.

[last geode]

Exactly The same issue I faced 30 mins ago

[lofty rock]

there is that kind of line in config file

cipher AES-256-CBC

[last geode]

try downgrading as i did

[keen scroll]

Which file are you talking about?
If it is openvpn*.deb, no you don't need to anything now. Just don't upgrade openvpn. sudo apt-mark hold openvpn, this will prevent it from upgrading.
You will have to sudo apt-mark unhold openvpn (in future) to upgrade it

[crystal marlin]

Right, so simply alter that line to what infloop wrote

[celest wadi]

Interesting tricks as always

[keen scroll]

Yeah, I have learnt it for pipewire-media-session and some problematic packages 😅

[celest wadi]

👀

[lofty rock]

😮 IT WORKED

@keen scroll THANKS!

[scenic torrent]

Gave +1 Rep to @keen scroll

[weary spindle]

[keen scroll]

Lol, I just read the urgency mails for openvpn while upgrading. It helps 😄

[lofty rock]

But I don't really get it, why it said can't make tun/tap interface, but the problem was cipher

[last geode]

something happend after reboot

[keen scroll]

Perhaps negotiating with the remote server was part of creating the network interface (tun/tap)

[keen scroll]

Lol where's Robert??? 😅

[celest wadi]

[last geode]

Yeahh I did what he told

[last geode]

so is my system gone ?

[keen scroll]

No no, only the system loader

It isn't related to #site-support, please move to a general talk channel

[celest wadi]

Be glad you don't have a dual boot thats happened with me a lot

[last geode]

please tell me what can I do now for this

[celest wadi]

Just ls and you'll see a bunch of hd0 partitions

[last geode]

yeah

next ?

[celest wadi]

There's a lot of tutorials on "fixing grub rescue"

[weary spindle]

#SnapshotsForLife

[last geode]

I deleted Entire kali, I will reinstall again, It messed up

Started with openvpn issue and went until grup😔

[weary spindle]

In future, I'd suggest using snapshots.

[last geode]

I dont know how to use them, but will learn to use them

ahhhh some of my notes are also gone 😦

[last geode]

Google it, But I was unable to fix this 😦

[lofty rock]

guys is this a correct room to ask metasploit related technical issue questions ?

So I am exploiting eternalblue vulnerability from the room Metasploit: Exploitation, and after getting the session I have to do a hashdump to steal the hashes, the hashdump module on metasploit is a Ruby module, my VM and main machine are arm64, (but I can use arch -x86_64 if it is the issue), and with ruby modules I always get this kind of issues:

Post failed: NoMethodError undefined method `sys' for #<Session:shell
[-] Call stack:
[-]   /opt/metasploit-framework/embedded/framework/lib/msf/core/post/windows/priv.rb:250:in `block in capture_boot_key'
[-]   /opt/metasploit-framework/embedded/framework/lib/msf/core/post/windows/priv.rb:248:in `each'
[-]   /opt/metasploit-framework/embedded/framework/lib/msf/core/post/windows/priv.rb:248:in `capture_boot_key'
[-]   /opt/metasploit-framework/embedded/framework/modules/post/windows/gather/hashdump.rb:45:in `run'

Are you familiar with tis kind of problem? I have googled it a loot , a lot of people got this kind of issues, but no solution found

[lofty rock]

so this happened, when it was a simple CMD shell session with SYSTEM, hashdump didn't work with that sessions, I upgraded it to meterpreter it was also SYSTEM, and it worked . :/ How? Why ?

ahhh, I should read the INFO, the hashdump module says compatible session type meterpreter 🤦‍♀️

https://tenor.com/view/garfield-facepalm-cat-ugh-face-palms-gif-24766753

[manic heath]

Did you find a way to solve it? I have the same problem

Ok it works now, thanks ❤️

[scenic torrent]

Gave +1 Rep to @gray loom

[white stratus]

Hi im new at THM and I recently wanted to use my own linux and connect to rooms using VPN but I managed to do it once and since it keeps giving me next error in openvpn.

2022-06-24 17:46:23 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2022-06-24 17:46:23 ERROR: Failed to apply push options
2022-06-24 17:46:23 Failed to open tun/tap interface
2022-06-24 17:46:23 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2022-06-24 17:46:23 Restart pause, 5 second(s)

I searched on google how to solve this but i didnt understand how to solve it. Can you help me?

Thank you!!

[manic heath]

is anyone else having problems with upgrading exploitdb?
When I try to fetch the repository I get this message: "You are not permitted to download the file "exploitdb_20220615-0kali1_all.deb" because it is infected with the virus "JS/Generic.BS!exploit"."

I can fix it by just switching network, but do you know if that upgrade might be problematic?

on kali D:

Like I know it's my uni connection that blocks it, but It's the first time it does it

E: Failed to fetch http://kali.download/kali/pool/main/e/exploitdb/exploitdb_20220615-0kali1_all.deb 403 Forbidden [IP: #.#.#.# 80]

[broken bear]

Which AV popped you?

[manic heath]

if I try to open it up it shows that security alert

[broken bear]

windows defender?

[manic heath]

FortiGuard (on the network)

http://www.fortinet.com/ve?vn=JS%2FGeneric.BS!exploit

but the strange thing is that I've previously upgraded exploitdb with this network

[broken bear]

If you're doing this at work, you need to contact the network security team and get an exception made for you or otherwise negotiate the business case why you need it

[stiff rapids]

Hi im having issues with my vpn its been working fine until today where it wont connect and just keeps restarting ive tried different servers and getting the same resault with all of them. when on eu regular 2 it says im connected when im not if that helps

[manic heath]

check pinned messages

[stiff rapids]

ah thanks so much

[tiny cloud]

I've just installed neofetch but for some reason my GPU shows up like this.
I tried to update my pci id's (update-pciids) but that didn't really do anything.
Anyone know a fix?

WSL

aah

it's running a virtualized part of my gpu then?

Aah, is this something I can fill in myself? OCD will be triggered otherwise

Thanks for the help 😄

[tiny cloud]

When I try to use neofetch like the way I do in the top terminal it works. However when I use those same settings in the config file it does not.
Am I being an idiot?

[naive dust]

Hi guys, I am having a problem connecting the vm-guest kali with openvpn. I have tried the script thm-troubleshoot. When running, script echos "Confirming connectivity" and after a few seconds :"Something went wront -- please ask for further assistance in the TryHackMe Discord server..." So here I am. The Kali guest shows the correct IP, THM confirms OpenVPN Connection established. But the Website to be attacked is not reachable. Does someone has idea?

[tiny cloud]

Yeah wrong channel, sorry

[placid shoal]

My new Kali version has openvpn 2.6 , which is unable to connect to THM servers. Any advice ?

[naive dust]

Doesn't work. Blocked

done. what's next?

same, curl 10.10.10.10/whoami blocked

no just entering and nothing happens, need to ^C

[lyric sundial]

Hello, i can't connect to the vpn, when i try the console show me this error message ```2022-06-24 17:00:07 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2022-06-24 17:00:07 Exiting due to fatal error

I use the version 2.5.6

[deep spire]

are you running as root/sudo?

[lyric sundial]

thank you, you resolve my problem lmao

[scenic torrent]

Gave +1 Rep to @deep spire

[placid shoal]

Thanks !

[naive dust]

Hi guys. Another problem: (using THM AttackBox) nc -lnvp 4444 does not intercept anything. Output is "listening on [0.0.0.0] (family 0, port 4444)". Should be "listening on [any]". Isn't it?

[weary spindle]

Check pinned messages, it's a problem with 2.6

[naive dust]

when setting up Openvpn manually, I had cipher-errors....

[naive dust]

I'll try 🙂

[naive dust]

ERROR during cipher negoitation

[weary spindle]

Did you change the cipher?

[naive dust]

No

[weary spindle]

Check the pinned posts, you need to change it for 2.6

[naive dust]

Thank you! That solved my cipher problem 🙂

[scenic torrent]

Gave +1 Rep to @weary spindle

[solid path]

Thanks! Sorry for the late response but I was traveling yesterday. I will try one more time and then downgrade if that's the only option to get it working again.

[scenic torrent]

Gave +1 Rep to @balmy prism

[solid path]

Yes, it works after downgrade of openvpn. 👍

[sly mesa]

trying to update-crypto-policies on kali-linux

wait it seems to be a common problem I'm checking the pinned message

[sly mesa]

all good

[naive dust]

No need downgrade openvpn to 2.5.6. Version 2.6 works fine. See pinned posts

[last geode]

It is not working for me, I did as per the pinned message, how did you do that ?

[sly mesa]

mine didn't work at first either I had to reboot or to restart the openvpn service

[ancient wigeon]

Hello i decided to do a windows update and it gave me 2 errors 1 with pci sys (0xc0000098) and 1 0xc000000e

Does anyone know how to fix it because im stuck on it for a week

[sonic schooner]

Hi I was working if anyone can help me with logging into tryhackme through vmware using kali. I've seen a guy on you tube log in, but he seems to be doing differently to me and I can't workout what he's doing. Is there a step by step guide somewhere? (I haven't been able to find a helpful one on tryhackme).
Pretty much I'm running my ABCDE.ovpn file which is loading correctly, then I'm going into tryhackme opening the attackbox then deploying the 'Start Machine' depending on the task.

The guy on the video runs his .ovpn file then he doesn't use the attackbox at all, he has a 'Deploy' button, where my 'Start Machine' button is (it's the same spot).

[rich onyx]

Are you trying to deploy a room machine or start into the attackbox/kali box?

[sonic schooner]

deploy a room machine

[pallid arch]

hello i'm tring to write an automated script that scan my compony i wonder if nmap can give me diffrent type of output at same time for example if i scanned my compony the out put i'm looking for are normal,html,xml

[stoic hatch]

Where can I ask help about rooms that I have developed. How long does the review process take?

[celest wadi]

there's normally about 70 or 80 rooms lined up for review so, it can take some time

[toxic kindle]

anyone know how to copy files from a copy protected pendrive?

[tender root]

can anybody tell me if it is possible to change the username or the name on the certificates is possible or not

[celest wadi]

the names on the certificates can't be changed

[tender root]

on cert it shows the username right?

[celest wadi]

no, it shows your full name that's on your profile

if you didn't specify a full name it resorts to your username

[tender root]

oh that's a relife someone told me that it shows the username on cert. and my username is not that professional

[weary spindle]

These aren't really professional Certs.

[tender root]

i know that but my username is a little tacky that's why i was worried about it

[weary spindle]

Can't be worse than irscrubzz

[tender root]

its cryptoklaus

[weary spindle]

Well... The jury is out on it 😂

[tender root]

😂

[tiny cloud]

When I try to sudo openvpn my .ovpn file it gives me failed to apply push options and a bunch of other errors
I'm running kali on WSL, would that present itself as an issue?

Attackbox it is I guess then

I'm planning to clean my PC soon and switch to linux on there 😄

Yeah I have only 500gb on my laptop so I would have to think of how to take my important PC files and store them somewhere

Yeah good one

I'll just run a box on my PC then

Goal is to separate everything between PC and laptop

[glad oyster]

WSL2 is good (from my experiences)

[weary spindle]

Did you try the fix on the pinned messages?

do you have an old Download of Kali?

[timid rose]

hi im trying to connect to a SSH but it doenst work anyone knows how to fix?

[weary spindle]

Ah, 2.5.6

[weary spindle]

Which room are you doing?

[timid rose]

Common Linux Privesc

[last geode]

Connected to vpn ?

[timid rose]

ye

i think

let me check to be sure

[weary spindle]

Do you need to connect via ssh?

You are because it's asking for a password.

[timid rose]

yes

[weary spindle]

Not the actual passwor,d sorry

Yup, double checked, lol

Where does it give the credentials?

[timid rose]

it says im connected

[weary spindle]

Which task has the login credentials?

[timid rose]

4

i think

it is user3 and password is password

[weary spindle]

Ok, check your VPN output?

[timid rose]

wym

i can nmap the host

[weary spindle]

Look at your VPN output, is it still saying connected?

[timid rose]

ye

[weary spindle]

Because I just logged in to the machine using your target IP and got in fine.

Yeah, possibly.

[timid rose]

so restart kali?

[weary spindle]

No.

[timid rose]

that worked haha

you are the best thanks @gray loom

[scenic torrent]

Gave +1 Rep to @gray loom

[weary spindle]

On your machine maybe, with the machine you've booted up.

[last geode]

Hey, what does this command do

ohh

[timid rose]

wel

you fixed that

but now i cant acces google anymore

or even ping it

[rich onyx]

mtu are not something to mess with

[timid rose]

nah i dit the command u told me to do and now i cant download anything xd

yes im sure

i will try to fix it

@gray loom same problem again

now i can ping google again

but not ssh

what is this i change my mtu to 1200 i can ssh but no internet and when i put it on 1500 i can not connect to ssh but i have internet

nvm i fixed it i had nord vpn running aswell im a idiot jesus

[merry oriole]

Hey? I'm not able to change my Country even after I edit it from Profile

[burnt prism]

hi guys i was screwing around a thm machine then my virtualbox just crashed it seems like my windows defender is seeing my vm as a backdoor should i be worried??

[weary spindle]

https://tryhackme.com/api/user/update-timezone

Click this link (without a VPN) , it will take you to dashboard and change it.

[plush bay]

when you follow the directions scurbs gave be sure to not be connected to a vpn that changes your ip as that will make the country you are located in end up as the server the vpn is connected too

[daring stag]

Hey I have a problem with my VPN, it says I am connected to the network which I am not, and I am trying to disconnect from it to login with a new regenerated file.
Can someone help me?

[celest wadi]

ps aux | grep openvpn to check for any running openvpn processes

[daring stag]

I tried that, nothing in there

even ip a
no tun0

[celest wadi]

is this on the access page? or does curl 10.10.10.10/whoami give you your ip

[daring stag]

curl 10.10.10.10/whoami I don't know what this is, but on the access page it says I am logged in to the network and when I run my configuration file it's not connection

connecting*

[celest wadi]

yeh, that access page is buggy and shouldn't be trusted

the curl command is a lot more accurate

[daring stag]

curl to that IP

?

[celest wadi]

it's the thm access page ip?

[daring stag]

no, I have a different one
I figured out the bug, it happened when I tried to run the VPN file but it keeps on failing for some reason, but the access page say I am connected

This is the error

[celest wadi]

oh that

the fix is pinned in this channel

[merry oriole]

Thank You! :)

[scenic torrent]

Gave +1 Rep to @weary spindle

[celest wadi]

it's an openvpn issue,

[daring stag]

Oh I see thank you I will check in to that! 😄

[scenic torrent]

Gave +1 Rep to @celest wadi

[daring stag]

It fixed it thank you for the help!

[runic bough]

May i speak to a discord mod? Im having trouble with my auth token

for discord

@sand olive @torn citrus sorry for the ping youre the online mods atm

[sand olive]

Feel free to DM

[runic quest]

I am getting the same "OPTIONS ERROR: failed to negotiate cipher with server." error as SoundTrack & the link https://tryhackme.com/api/user/update-timezone just redirects to the dashboard (https://tryhackme.com/dashboard) - any ideas on how to get to this page?

[runic quest]

Unfortunately, the time-zone solution did not work for me. However, I was able to connect by editing the .ovpn file in a code editor and changing the word "cipher" to "data-ciphers".

I am not using a VPN - connecting straight from my Windows PC (I then run Kali in a VM)

USA - connecting to US-West server

[raven oyster]

I have an Problem with Question, I typed right answer but got Error, watched video, same answer "# How websites work"

[lofty rock]

Hey guys in Linux PrivEsc Room in the task 7, when it asks Which user shares the name of a great comic book writer?, the answer should be ||gerryconway||, but it accepts it the way in the screenshot 🤔

[raven oyster]

its the same question

[plush bay]

it is either only the first or last name

[lofty rock]

so it accepts even if the string contains the right answer ?

[plush bay]

oh wait did not see the image at first... yes it accepts the wrong answer if it is close enough to the correct one... the answers have tolerances

if you referesh the page it will correct itself to the correct answer

[lofty rock]

right, but why ?

[plush bay]

but why it accepts slightly wrong answers???

because retyping the whole thingy is a pain in the bum

[leaden goblet]

hello guys, i wanna download the vulnerable version of gitstack 2.3.10 so i can test some exploits on it

but i didn't manage to find it

any links please ?

[raven oyster]

done thx

[scenic torrent]

Gave +1 Rep to @gray loom

[zenith glacier]

I waited for 6 days

I need help and also reply from support which I am definitely not getting

@deep trellis I need help

[vestal cloud]

Hey all, I have tried to navigate to the /uploads directory in the "Upload Vulnerabiltes" room since yesterday. my scans aren't showing one exits - and while all the other aspects of the room works, i get a "not found" warning when i navigate to it. ive tried resetting the machinel, i.e. changed the IP i was connecting to, to no avail. Which leads me to believe there may be an internal error that exists? but Im a noob - any help appreciated. cheers

[bronze vale]

-mute 20m @zenith glacier You are not entitled to support. Please do not ping any staff or administrators.

[scenic torrent]

Mute <User:Mention/ID> <Duration:Duration> <Reason:Text>
Mute <User:Mention/ID> <Reason:Text> <Duration:Duration>
Mute <User:Mention/ID> <Duration:Duration>
Mute <User:Mention/ID> <Reason:Text>
Mute <User:Mention/ID>

Invalid arguments provided: No matching combo found

[bronze vale]

-mute @zenith glacier 20m You are not entitled to support. Please do not ping the administrators or complain in the discord.

[scenic torrent]

🔇 Muted Muhammad Bilal Younis#9400 for 20 minutes

[vestal cloud]

oh yeah, true, so i think i did - the path http://java.uploadvulns.thm works, but i cant seem to get http://java.uploadvulns.thm/uploads to work .. all other variations seem to work as well: http://java.uploadvulns.thm/assets (also same with shell.uploadvulns.thm, and others similarly)

when i enumerate/scan i dont get an uploads directory either -

oh, i see! thanks for the tip!= Lassi!!

https://tenor.com/view/face-palm-cant-believe-hugh-laurie-head-slap-house-gif-12137942

i see it now forehead-slap

[flat tide]

Getting this error when connecting: 2022-06-25 18:28:15 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.

Apparently server using some older ciphers? Can the vpns servers config be updated to gcm or something like that?

[eager fulcrum]

Check the pins here

[flat tide]

thanks, sry

[tribal burrow]

open vpn file and change 'cipher AES-256-CBC' to 'data-ciphers AES-256-CBC'

[zenith glacier]

@bronze vale I want my account back.

I did first email on 3 june

And followed the rules of 3 days wait like you said last time

[zenith glacier]

.

[zenith glacier]

I want to utilize my account annual subscription but support team is not helping like they should unfortunately

[winged patio]

Are you able to go on the website

[burnt pond]

reporting latest openvpn version "OpenVPN 2.6_git" is the worst! I have to manually removed and installed previous version 2.5.6 ( re-installation was painful )

[zenith glacier]

Are you asking me?

[winged patio]

Yes

[zenith glacier]

I went to website

I don't have access to mail now and my pc were crashed. The password of tryhackme were saved there

I sent a mail to support and they asked for some details

I sent the details but they did not give me the access

They said you can açcess account using mail. I thought they updated my mail and are talking about mail which I used for subscription

I tried to use forget password functionality

It did not work

I sent the mail again

And did not get answer

I sent the last mail 6 days ago

Can I expect any tech support person help?

[lime steeple]

Just checking if there is any issues this evening (my time) with the VPN to THM? Getting this error in the VPN connection terminal window: 2022-06-25 22:54:39 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2022-06-25 22:54:39 TLS Error: TLS handshake failed

[zenith glacier]

Are you saying this to me?

I am not using my account from last 25 days

I want to update my mail with the mail which I used for subscription

[lime steeple]

No, I am just posting a message in tech-support to ask the question.

[zenith glacier]

Ohh ok

[celest wadi]

Yeh, the fix is pinned in this channel

Openvpn updated and it outdated thm configuration, so need to modify your ovpn file

[native lark]

Yeah I know I've been having horrible trouble as well... I can connect but I can't interact with anything or do anything at all adding the data-ciphers change did not fix the problem...

I'm pretty sure with the update openVPN in order for it to work properly you have to disable the default that comes with 2.6 enabled_dco to no... Working on how to change it?...

[lime steeple]

Doh! Thanks I should have checked there first!

[scenic torrent]

Gave +1 Rep to @celest wadi

[pale flume]

Thanks, worked for me

[scenic torrent]

Gave +1 Rep to @tribal burrow

[burnt pond]

this is what I did to re-install openvpn sudo apt purge openvpn
get and download openvpn-2.5.7.tar.gz file
and the trick is to install some dependecies ( read the error msgs) and install as root ( it did not work with sudo )
and run ./configure && make && make install using root prompt

[celest wadi]

you don't need to downgrade openvpn necessarily, just change one word in your .ovpn file and it's sorted

[burnt pond]

true but if you search for this version OpenVPN 2.6_git there are lot of bugs and problems out there not only THM

[runic aurora]

Question regarding the CTF rooms: Do the scoreboards reset after a day or anything? Or does it consistently remain posted as it is?

[celest wadi]

nah, the scoreboard changes a lot when the room comes and then it just agrees on a random user solved order that stays as it is 🤷‍♂️
(only way to secure a position is to blood a ctf room, which gives extra points and you stay at the top)

[runic aurora]

Okay, thanks for the answer! Was looking into something..

[celest tinsel]

hello folks any idea how to access tiktok if its ban in my country tiktok website any solution?

[celest wadi]

you can't use it if its banned, that'd be illegal

[crystal marlin]

First of all this channel is for TryHackMe related tech support.
But more importantly, we are not going to help you circumvent restrictions

[celest tinsel]

man i wanna see videos of my fav model 😭

[celest wadi]

[crystal marlin]

Whatever the reason might be, it doesn't belong into this discord server 😉

[celest tinsel]

then where it belongs bro

[crystal marlin]

Simply not here.
So please stop asking about it.

[celest tinsel]

well so that's rude you cannot become a good mod sorry disqualified from the designation

[eager fulcrum]

That's incredibly inappropriate.
You're trying to do something illegal, which is against the rules here. You should be banned immediately for that.

[celest tinsel]

bro if using vpn is illegal then why people use it?

[eager fulcrum]

You're not helping your case here.

[celest tinsel]

and as i'm new to tech so i tried to ask that i didn't know that it is wrong or right

i heard people use vpn and download games and all

[eager fulcrum]

-mute @celest tinsel Stop asking for help doing something illegal. Don't insult mods when they're just doing their job. This mute is a chance for you to grow up and act like an adult.

[scenic torrent]

🔇 Muted LA BELVA#8933 for 1 day

[eager fulcrum]

-ban @celest tinsel Asking for help evading country blocks. Repeatedly insulting mods for asking them to stop. Muted, DMed with more insults immediately. You can appeal this ban when you're ready to act like an adult by emailling [e-mail]

[scenic torrent]

🔨 Banned LA BELVA#8933 indefinitely

[cloud beacon]

Same issue here since yesterday .

[eager fulcrum]

If it's TLS handshake failed, often it's a VPN block in place rather than the bad ciphers

Or a bad system time

[gilded verge]

can anyone help me with openvpn

022-06-26 14:23:38 net_route_v4_best_gw query: dst 0.0.0.0
2022-06-26 14:23:38 net_route_v4_best_gw result: via 10.0.3.2 dev eth1
2022-06-26 14:23:38 ROUTE_GATEWAY 10.0.3.2/255.255.255.0 IFACE=eth1 HWADDR=08:00:27:8b:e3:ad
2022-06-26 14:23:38 TUN/TAP device tun0 opened
2022-06-26 14:23:38 net_iface_mtu_set: mtu 1500 for tun0
2022-06-26 14:23:38 net_iface_up: set tun0 up
2022-06-26 14:23:38 net_addr_v4_add: 10.4.43.198/17 dev tun0
2022-06-26 14:23:38 net_route_v4_add: 10.10.0.0/16 via 10.4.0.1 dev [NULL] table 0 metric 1000
2022-06-26 14:23:38 net_route_v4_add: 10.3.0.0/16 via 10.4.0.1 dev [NULL] table 0 metric 1000
2022-06-26 14:23:38 OPTIONS IMPORT: timers and/or timeouts modified
2022-06-26 14:23:38 OPTIONS IMPORT: --ifconfig/up options modified
2022-06-26 14:23:38 OPTIONS IMPORT: route options modified
2022-06-26 14:23:38 OPTIONS IMPORT: route-related options modified
2022-06-26 14:23:38 OPTIONS IMPORT: peer-id set
2022-06-26 14:23:38 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2022-06-26 14:23:38 ERROR: Failed to apply push options
2022-06-26 14:23:38 Failed to open tun/tap interface
2022-06-26 14:23:38 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2022-06-26 14:23:38 Restart pause, 5 second(s)

this is the error which i am getting

[celest wadi]

the fix for that is pinned in this channel

[gilded verge]

how to replace cipher

[celest wadi]

it's all detailed in this message
#site-support message

[lament sedge]

2. If you are using version 2.6 of OpenVPN then, do the following:
   Replace the cipher AES-256-CBC line in your .ovpn config with data-ciphers AES-256-CBC

To do this, you can use the text editor of your choice, or simply type nano filename.ovpn into your terminal.
Make sure not to edit anything else, and save it with the same file name.

[gilded verge]

do i have to make that .ovpn file with in soecific folder

specific*

[lament sedge]

whatever folder your configuration file is in

[gilded verge]

i installed it directly with sudo apt-get install openvpn

so where should it be?

[lament sedge]

its the configuration file you downloaded from tryhackme

so it could be in your downloads folder or home folder

wherever you saved it

[gilded verge]

okk so i have to edit thm ovpn file

[lament sedge]

yeah

[gilded verge]

okk buddy

thanks

[lament sedge]

np

[lethal aurora]

Hey, I'd like to have my username changed. Can anyone help me with that?

[cloud beacon]

Thank you!

[scenic torrent]

Gave +1 Rep to @gray loom

[celest wadi]

you'll have to email support with your new username, make sure it's available

[lethal aurora]

Ok, thanks

[scenic torrent]

Gave +1 Rep to @celest wadi

[mystic spear]

hi, is there a problem with enumeratingAD lab as when generating VPN, just get 404 error with darth vader face

[celest wadi]

#enumerating-ad

that's a somewhat common error, you'lll need to give your netwrk subnet for the site people to check

[mystic spear]

thank you @celest wadi how does one contact site people

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

by messaging in that channel and waiting

[mystic spear]

okay thankyou

much appreciated

[proven fulcrum]

Guys the for juice shop ip/#/administration when logging in as admin the flag was shown once and it doesn't show again i didn't cancel too can't seem to get the flag again tried with another browser too

[weary spindle]

That's a nice name colour, Congrats!

[fierce copper]

hello guys i cant connect with thm vpn

i have been trying to connect with the vpn over 1 hour now, i changed a couple of servers - redownloaded the file a lot of times

made sure i had internet access on my vm , changed from bridged to nat and reverse, nothing works

first time that happens in the past couple of months i had no problems

[pastel tinsel]

hi, do you still have problems?

[bronze vale]

Check pins

[fierce copper]

I am restarting everything

I will try again in a few moments

Yesterday everything worked perfect amd i did not made any changes

[pastel tinsel]

Replace the cipher AES-256-CBC line in your .ovpn config with data-ciphers AES-256-CBC

[fierce copper]

yea this worked

i am confused

THANKS

[pastel tinsel]

did you by chance update your machine?

[fierce copper]

yea i was downloading some stuff earlier and i run an update just to be sure

[pastel tinsel]

okay, cause you accidentally also updated your openvpn, the newest version has some cipher changes which breaks the vpn configuration, so changing this line in the configuration helps fix it

[fierce copper]

oh ok thanks

[spring pilot]

Weirdly enough this doesnt work if you import the configuration file through Kali networking GUI option. Works fine for me via CLI but not GUI.

[bronze vale]

Don't use the GUI ever

It's super buggy and often causes routing issues.

[zenith glacier]

@bronze vale ?

I need to get access of my account

I am not getting reply from support mail

Also the reply I got 6 days ago was incomplete. The reply was login with email. But I clearly mentioned that I don't have access of that mail

[bronze vale]

How are you emailing from it if you do not have access?

[empty wren]

Is it normal to not get a response from their customer support email for 10 days? I've been following up and they haven't replied to any of my emails

[celest wadi]

if you send a follow-up email you get moved to the top, and they check from the bottom, so ...

[zenith glacier]

I am emailing from different mail

[bronze vale]

Did you read my last response?

[zenith glacier]

@bronze vale support asked for some details to confirm

[zenith glacier]

Yes

The email address you used is your current one.

I get the meaning now

@bronze vale thank you

[scenic torrent]

Gave +1 Rep to @bronze vale

[spring pilot]

Cool, good to know thanks mate.

[scenic torrent]

Gave +1 Rep to @bronze vale

[sterile cliff]

hi all

my kali linux installer download from the browser is very slow

it is taking me 3 days

other websites downloads are very fast

pls tell how to fix

[pastel tinsel]

you're trying to install the kali ISO?

[sterile cliff]

yes

bare metal

[celest wadi]

[pastel tinsel]

the ISO is big, that's why it takes long

[sterile cliff]

hehe

[sterile cliff]

so it takes 4 days?

before it took only 2 hours

[pastel tinsel]

depending on your internet speed

[celest wadi]

what about mirrors?

[sterile cliff]

200 mb/s

[sterile cliff]

mirror?

what is a mirror?

[celest wadi]

👀

[sterile cliff]

........

[celest wadi]

oh, thought kyootybella would explain but the've left

mirrors are different links for downloading something from different servers which may give faster speeds if you choose a server closer to your region, that gives you a faster connection

[pastel tinsel]

you brought it up, so you can explain it

[celest wadi]

I saw you typing

[sterile cliff]

so for kali how do i find mirrors?

https://tenor.com/view/scared-shocked-dog-cute-mirror-gif-10214837

[weary spindle]

http://http.kali.org/README.mirrorlist

[celest wadi]

they used to be on their website

[weary spindle]

Still is.

[sterile cliff]

thanks

[weary spindle]

[sterile cliff]

will see if this resolves it

:)

guys

sorry for asking but

i can't understand these

so can any one tell the one nearest to india

pls

[celest wadi]

just use the PK server, that should be closest if you can't find an IN one

[sterile cliff]

IN is india?

[celest wadi]

yes

[sterile cliff]

it is just downloading the readme file

:-|

[naive dust]

Hellos guys. I just bought a monthly subscription and i dont want it to renew automatically if i press the button that reads cancel subscription will it also cancel the subscription for this month?

[sterile cliff]

@celest wadi

sorry for ping

[celest wadi]

just browse around the site and you'll likely see mirrors for the kali ISOs, or you could also google on "how to download kali from mirrors"

[zealous yoke]

No, it won't cancel your subscription completely - it'll just stop it from automatically renewing

[naive dust]

@zealous yoke alright thanks 🙏

[scenic torrent]

Gave +1 Rep to @zealous yoke

[lime steeple]

Looking for help to install openvpn-2.5.6 to get around the current openvpn problem with THM. But when I follow tine configure, make and make install steps I am getting a number of errors: make[3]: *** [Makefile:431: install-includeHEADERS] Error 1
make[3]: Leaving directory '/home/kali/Downloads/openvpn-2.5.6/include'
make[2]: *** [Makefile:549: install-am] Error 2
make[2]: Leaving directory '/home/kali/Downloads/openvpn-2.5.6/include'
make[1]: *** [Makefile:610: install-recursive] Error 1
make[1]: Leaving directory '/home/kali/Downloads/openvpn-2.5.6'
make: *** [Makefile:916: install] Error 2
Any thoughts on how to resolve? I have google for sometime with no luck.

[zealous yoke]

I was manually building openvpn client versions very recently in light of the issues and it's honestly just quite a hassle with getting the right libraries. I'd suggest keeping to 2.6 and doing this fix from the pinned:

If you are using version 2.6 of OpenVPN then, do the following:
Replace the cipher AES-256-CBC line in your .ovpn config with data-ciphers AES-256-CBC
if you can't find anywhere to install an older version through a package manager / installer

[lime steeple]

Thanks I tried the data-ciphers with no success. And agreed it is a very big hassle trying to get the right libraries.

[scenic torrent]

Gave +1 Rep to @zealous yoke

[zealous yoke]

Mhm, adding the data-ciphers should work as long as it's 2.6. Some of the older versions will complain that data-ciphers is invalid. Let me boot up my VM that I was testing with

[lime steeple]

Thanks I have reinstalled 2.6-git and I see when connecting this : DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. Not sure it helps, but found it interesting 🙂

[zealous yoke]

your thmusername.ovpn needs to have this highlighted in red

if it does and it still isn't working, send me your VPN file over DM (:

[lime steeple]

Double checked and : resolv-retry infinite
nobind
explicit-exit-notify 3
persist-key
persist-tun
remote-cert-tls server
auth SHA512
data-ciphers AES-256-CBC
key-direction 1
verb 3
reneg-sec 0

[zealous yoke]

Let's go to DM if you wouldn't mind 👍

[zenith glacier]

@bronze vale there is a misunderstanding. The current email has test account of tryhackme which I use for tryhackme bug bounty program. I need my other account with username whose details are mentioned in email

@zealous yoke can you help me?

[lofty rock]

Hey guys, My VM and main machines are arm64 architecture and I need elf executable for x86_64 arch for the task 10 of inux PrivEsc, what can I possibly do to compile the c file with gcc but for x86_64 arch ? :/

[plush bay]

mac???

[lofty rock]

Mac m1 host, Kali guest

[plush bay]

yeah that is a huge ouchie

cross compiling is not an easy thing to do and definitely takes a lot of knowledge of how to

[lofty rock]

I have tried qemu for doing it , but it lets just to run already existing x86_64 command, on mac I can't compile it because it doesn't give me ELF files but O Mach files

[plush bay]

shadows main recommendation would be to get another computer that runs windows and uses the x86_64 arch( amd64 architecture according to linux )

[lofty rock]

but in Mac I can do arch -x86_64 gcc file.c , and get x86_64 executable but for macs

[plush bay]

yeah sadly m1 macs are a pain in the bum when it comes to doing a lot of ethical hacking

[lofty rock]

So I need another computer to solve this task ? 😄
No solution ?

[plush bay]

not that shadow has handy and knows how to do no sadly

unless you wanna throw the code at shadow and have them compile it

[lofty rock]

no worries, I will do something,
if anyone knows how to solve this technical issue on software level please ping me

[weary spindle]

I think Jabba uses an M1, they might be able to help if they're around?

[lofty rock]

I will try to emulate x86_64 with qemu meanwhile

[violet galleon]

Is there a way to change my username?

[weary spindle]

Yes, E-mail support who will change it for you.

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[marsh patrol]

When I open the Attackbox in full screen, it sometimes looks like this ,

and I have to refresh the page to get it to look like this

but then it keeps on reverting to the half size screen.

[blissful hollow]

hello when I try to scan a target

it says host may be down or blocking ping probes

I scan it without any flags like nmap [IP} however when I say -sS it does the scanning. Isn't sS the default one anyways why does it work?

[violet galleon]

Try adding -Pn to your scan

[weary spindle]

Are you on the VPN?

[blissful hollow]

yes

[weary spindle]

What room are you doing?

Possibly could be a windows room, and as above, would need the -Pn

[blissful hollow]

junior pentester metasploit explotation

I do the exact same command where a random guy on the same does

his works but mine does not

[weary spindle]

Double check your VPN script.

And what's your target machine IP?

[plush bay]

-sS is only the default if you are running nmap with sudo... Otherwise it defaults to -sT

[zealous yoke]

I can't, you need to deal with support through the official means (who are well aware) to recover your account

[zenith glacier]

I did the email 6 days ago

[naive dust]

Hi

This is a hacker server group

right?

[pastel tinsel]

#general

[celest wadi]

👀

[violet galleon]

Can anyone help with VPN issues? I tried troubleshooting and running the script with no luck. My vpn keeps dropping in and out. Here is what the log shows. And yes I have tried different servers, regen config files.

2022-06-26 14:57:53 TUN/TAP device tun0 opened
2022-06-26 14:57:53 net_iface_mtu_set: mtu 1500 for tun0
2022-06-26 14:57:53 net_iface_up: set tun0 up
2022-06-26 14:57:53 net_addr_v4_add: 10.11.76.178/16 dev tun0
2022-06-26 14:57:53 net_route_v4_add: 10.10.0.0/16 via 10.11.0.1 dev [NULL] table 0 metric 1000
2022-06-26 14:57:53 OPTIONS IMPORT: timers and/or timeouts modified
2022-06-26 14:57:53 OPTIONS IMPORT: --ifconfig/up options modified
2022-06-26 14:57:53 OPTIONS IMPORT: route options modified
2022-06-26 14:57:53 OPTIONS IMPORT: route-related options modified
2022-06-26 14:57:53 OPTIONS IMPORT: peer-id set
2022-06-26 14:57:53 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2022-06-26 14:57:53 ERROR: Failed to apply push options
2022-06-26 14:57:53 Failed to open tun/tap interface
2022-06-26 14:57:53 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2022-06-26 14:57:53 Restart pause, 40 second(s)

[celest wadi]

fix is pinned in this channel

it's an openvpn issue

[violet galleon]

Thank you so much I didn't even to think to check there!!!!

[scenic torrent]

Gave +1 Rep to @celest wadi

[normal holly]

hey guys
I am having trouble connecting with openvpn

I click import then select the file as I am supposed to

Then I click connect then it asks me for the hostname

[weary spindle]

Your GUI is out of date.

It's best you don't use the GUI as it's buggy.

[normal holly]

I am trying not to but it does anyway for some reason

[weary spindle]

Are you doing a room? or are you on a windows VM?

[normal holly]

I am trying to connect to a machine on tryhackme

[weary spindle]

Ah, just because of the watermark.

[normal holly]

So, what should I do?

[weary spindle]

Did you go through the steps in import?

[normal holly]

in the room you mean?

I went through the steps in the room

[weary spindle]

No, your host OS.

[normal holly]

I clicked on import then from local file

[weary spindle]

And click connect?

[normal holly]

yeah

[weary spindle]

That should have been you?

[weary spindle]

If not, you could try updating your openVPN app.

I'm in 3.3.4

[normal holly]

I've just downloaded it today

Ok I'll do it again

[weary spindle]

Try going to options, there should be an update there.

[spice saffron]

Hello! I have a strange issue when using openvpn with a kali linux virtual machine. My machine connects and I can ping the vulnerable machine, however neither firefox nor ssh will connect. Out of curiosity I tried Lynx and it worked just fine.

I was wondering if anyone else has run into this issue and whether or not someone has found a workaround.

I am running kali linux in VirtualBox with OSX as my host environment. This issue is not limited to one room.

[weary spindle]

M1?

[spice saffron]

Negative, Intel Core i7

[weary spindle]

I thought OSX was apple, oops!

[spice saffron]

it is Apple, but its a 2020

before they went to those damned M1 chips

[weary spindle]

Ah! I've never owned an apple product so pardon my ignorance on that one.

Which room are you doing?

[spice saffron]

When I buy a new machine I will be moving away from apple myself, due to the M1 chip.

I'm currently on Skynet. This issue however is not limited to that particular room

[weary spindle]

You got a target IP there?

[spice saffron]

target IP is 10.10.113.71

Until this point whenever this issue popped up I simply used the web based attack machine, however I have reached a point where I would like to start saving my work. The web based machines make that kinda hard to do

[weary spindle]

Yeah, they do.

Can you try ssh in to the machine again, but adding the -v flag.

also if you verify you can provide screenshots.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[spice saffron]

on it now.

[eager fulcrum]

In the pins here, there's an "MTU fix". Try that.

[spice saffron]

Copy. Thank you. on it now

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[marsh patrol]

Is that expected behavior, that the Attackbox in full screen keeps on reverting to the half size screen even while it is open in full screen?

[weary spindle]

James stole my thunder 😦 haha

[spice saffron]

Thank you so very much for your help. That indeed resolved the issue.

[scenic torrent]

Gave +1 Rep to @eager fulcrum

[eager fulcrum]

Go faster smh

[weary spindle]

I was on the phone 😂

[spice saffron]

@weary spindle Thank you for your help. It is appreciated.

[weary spindle]

It doesn't matter, they got the help, that's all that mattered.

[weary spindle]

Did it work?

[spice saffron]

Yup it did.

[weary spindle]

Great, Happy Hacking

[spice saffron]

It's a little funny. When I first ran into this issue, I remember google-ing it

and that was one of the solutions, however it did not mention tun0 or having openvpn working, so I just attempted changing mtu's on my eth0...

hopefully that gives both of y'all a chuckle

Thanks again guys

[weary spindle]

Nah, nothing to chuckle about, it's a learning experience. When I first started I did all my settings to my eth0 instead of tun0

[spice saffron]

Glad to hear I'm not alone.

[weary spindle]

You're not the first, you won't be the last

[dawn raft]

heya! i have an issue with openVpn, i've checked the pinned messages, and ran the script which gives me :

[+] OpenVPN is installed
[+] tun0 exists
[+] tun0 IP is in the correct range
[+] Only one instance of OpenVPN is running
[+] Confirming connectivity
[+] Connectivity checks completed!
[+] You are connected to the TryHackMe Network
Your TryHackMe IP address is: XXXX

Happy Hacking!```

Yet, on one of the tasks (the nmap part) i can't get it working on my linux (yet on my windows it works fine with the same ovpn config...) :

```sudo nmap -sS -p1-999 10.10.130.127
Starting Nmap 7.80 ( https://nmap.org ) at 2022-06-26 22:28 UTC
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.12 seconds```

And i really don't get what's going on Oo any idea? thanks!

@gray loom in the nmap part, yes i read it but using the -Pn flag gives different results than the ones expected, and the command works on my windows, so it should also be working on my linux, to take the command line issue out i just pinged the active machine and no ping on linux

https://tryhackme.com/room/furthernmap => task 14 ^^

Perform an Xmas scan on the first 999 ports of the target -- how many ports are shown to be open or filtered?

i don't have an issue with the task

it's been completed etc...

i'm jsut getting back at my issue with the vpn itself, it's not a task issue at all

hold on a sec, i'll show you an example with the attackbox itself ^^ it'll be more talkative 😄

i shoudl have the same resutls on the attackbox then on my computer, right?

(attackbox loading...)

So the command line i'll use for both (sorry but it really isn't a PEBKAC issue here :p) : sudo nmap -sX -p1-999 10.10.130.127 -vv

Result on my linux :

Initiating Ping Scan at 22:43
Scanning 10.10.130.127 [4 ports]
Completed Ping Scan at 22:43, 3.04s elapsed (1 total hosts)
Nmap scan report for 10.10.130.127 [host down, received no-response]
Read data files from: /usr/bin/../share/nmap
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.11 seconds
           Raw packets sent: 8 (304B) | Rcvd: 0 (0B)```

Result on my attackbox :

Initiating ARP Ping Scan at 23:44
Scanning 10.10.130.127 [1 port]
Completed ARP Ping Scan at 23:44, 0.22s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 23:44
Completed Parallel DNS resolution of 1 host. at 23:44, 0.00s elapsed
Initiating XMAS Scan at 23:44
Scanning ip-10-10-130-127.eu-west-1.compute.internal (10.10.130.127) [999 ports]
Completed XMAS Scan at 23:44, 21.09s elapsed (999 total ports)
Nmap scan report for ip-10-10-130-127.eu-west-1.compute.internal (10.10.130.127)
Host is up, received arp-response (0.00012s latency).
All 999 scanned ports on ip-10-10-130-127.eu-west-1.compute.internal (10.10.130.127) are open|filtered because of 999 no-responses
MAC Address: 02:69:AC:5E:16:03 (Unknown)

Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 21.45 seconds
           Raw packets sent: 1999 (79.948KB) | Rcvd: 1 (28B)

i mean i should have the same results, it shouldn't differ from one computer to another (vm or not)

with -Pn it is working yes, then it just means i might have lost the last two hours trying to fix a working vpn... thanks ^^

[gilded verge]

Can anyone help me out ?

I am connected to openvpn network but in thm its doesn't shows tha i am connected to internal network.

[gleaming flume]

I'm not exactly sure what that means, but you can verify so you can send screenshots and allow people to more easily help you

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[zenith glacier]

@bronze vale please help me to get access of my account

[bright stratus]

hi people, getting troubles with my vpn.... got erros and restart and pauses , but in THM site said that im connected but when i do a ping or nmap an ip doesnt work

2022-06-27 02:09:37 OPTIONS IMPORT: timers and/or timeouts modified
2022-06-27 02:09:37 OPTIONS IMPORT: --ifconfig/up options modified
2022-06-27 02:09:37 OPTIONS IMPORT: route options modified
2022-06-27 02:09:37 OPTIONS IMPORT: route-related options modified
2022-06-27 02:09:37 OPTIONS IMPORT: peer-id set
2022-06-27 02:09:37 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2022-06-27 02:09:37 ERROR: Failed to apply push options
2022-06-27 02:09:37 Failed to open tun/tap interface
2022-06-27 02:09:37 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2022-06-27 02:09:37 Restart pause, 20 second(s)

every restar the second are higher...now its on 300 seconds..

[crystal marlin]

Check the pinned messages in this channel, this is most likely due to openvpn version 2.6 that you are using

[bright stratus]

well it seems that i must downgrade cause have the 2.6_git version getting troubles

[crystal marlin]

That's one of the solutions in the pinned messages.
You can also go by the other one, up to you.
#site-support message

[bright stratus]

but there said that i should modify the file if the version is 2.6. For version 2.6_git should i downgrade right?

[crystal marlin]

I don't think there is a difference.
So I would first go with modifying the file, if that doesn't work out you can downgrade afterwards

[bright stratus]

doesnt work... still the same issue

do you know how can i downgrade?

[celest wadi]

yeh, there's a nifty script made by infloop

cd /tmp

wget -O openvpn.deb https://kali.download/kali/pool/main/o/openvpn/openvpn_2.5.6-1_amd64.deb

sudo apt install ./openvpn.deb
rm openvpn.deb

[bright stratus]

got it

[crystal marlin]

Mh, well I can't say for sure, maybe there is a difference, although I somewhat doubt it.
But since I saw you asking for help a couple of times already, I highly suggest to verify in order to be able to send screenshots, that would make helping easier 🙂

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[bright stratus]

the script from @keen scroll work! thanks @crystal marlin and @celest wadi for help me!🎉

[scenic torrent]

Gave +1 Rep to @crystal marlin

[celest wadi]

• @keen scroll

[scenic torrent]

Gave +1 Rep to @keen scroll

[keen scroll]

What did I do😅

[celest wadi]

you made script

[bright stratus]

• @celest wadi too

[celest wadi]

there's a cooldown, can only give rep every 5 mins or so

[bright stratus]

ill wait then

[celest wadi]

no need, it's the thought that counts

[keen scroll]

Oh, just so you know. openvpn will be upgraded when you update packages. So just follow the instructions in the pinned messages to update your openvpn configuration file instead

[bright stratus]

save me hahaha

[crystal marlin]

• @celest wadi we all set now 🙂

Oh, nvm xD

[celest wadi]

but I still have that apt-mark trick

[celest wadi]

cooldown smh

[celest wadi]

[keen scroll]

Congrats Fontaene
+rep @celest wadi here you go

[scenic torrent]

Gave +1 Rep to @celest wadi

[bright stratus]

oh.. ill see.. will read the instructions then...

• @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[pastel tinsel]

OpenVPN 2.6 Problems
for people who need help with the newest OpenVPN problem in OpenVPN 2.6 that doesn't have the correct cipher
here's a little oneliner to easily fix the problem

sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

Make sure you're in the same folder as the openVPN config file
This will automatically search and replace what is missing in the file and will fix your problem

If this doesn't work
If you have run the command but to no help won't fix your ssh/http and/or other service problems, but can ping the target IP
it's a MTU problem, run this command and change the mtu settings for the VPN interface

sudo ip link set dev tun0 mtu 1200

This will change your interface mtu to 1200 instead of 1500 and will fix your problems

[celest wadi]

the file extension is *.ovpn

[pastel tinsel]

miss click

[weary spindle]

+rep for people who need it.

[scenic torrent]

Gave +1 Rep to @pastel tinsel

[cosmic stag]

hi

i need some help bros

[weary spindle]

What's up? you don't need to call us bros though

[cosmic stag]

oh ok

when i start to use attackbox nothing appears

[deep spire]

refresh the page, it should appear. Or do you mean the split screen doesn't appear?

like this?

[cosmic stag]

exactly

the split screen doesn't appear

[deep spire]

there should be a bit near the top where you can press "Show Split View"

[deep spire]

But if you're seeing this just refresh the page

[cosmic stag]

"Show Split View"
not exist

[crystal marlin]

It's unclear to me what exactly you see on your screen, so if you could verify in order to be able to send screenshots, that would make things easier

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!