#site-support

1 messages ยท Page 283 of 1

cosmic stag
crystal marlin
cosmic stag
pastel tinsel
#

!docs verify

sharp bisonBOT
shy zinc
#

Hi, can someone help me out, Iโ€™m kind of freaking out right now

pastel tinsel
shy zinc
#

Okay I dont know your community very well so I apologize. My bank info was stolen and used to make transaction on tryhackme.com and I dont know who to contact on their website

pastel tinsel
#

@bronze vale

shy zinc
#

Thank you so much

celest wadi
#

don't trust virustotal on everything tho, I've visited the link and it's literally just an image

unknown.png
#

here is virustotal flagging localhost as malicious

pastel tinsel
shy zinc
#

Iโ€™ll wait and email them on this email. Thank you so much

bronze vale
shy zinc
#

I will

pastel tinsel
toxic cedar
#

I'm having trouble using this solution.

vivid jackal
#

Guys I upgraded my kali os now I can't connect to tryhackme via openvpn

toxic cedar
#

I am in the correct directory, too.

pastel tinsel
toxic cedar
#

I am not getting an error, just key output.

celest wadi
pastel tinsel
pastel tinsel
toxic cedar
#

Yeah, it's the cipher issue.

#

One moment.

vivid jackal
scenic torrentBOT
#

Gave +1 Rep to @celest wadi

toxic cedar
#

nvm i fixed it

craggy skiff
#

Howdy ... I keep getting getting errors from Kali openvpn when using the THM .ovpn configuration. specifically it's complaining about the cipher negotiation advising that openvpn 2.6 ignores the "cipher AES-256-CBC" option in the configuration and that the local agent cofnig file needs amending ... I've spent about 30 mins searching around and can't really find the openvpn local config file to amend ... can anyone help?

pastel tinsel
celest wadi
#

(in the directory of your ovpn file)

craggy skiff
#

what's the outcome?... is it just inserting the ciphers line back in with AES-256-CBC?

celest wadi
#

suprisingly, it seems only kali has this issue, ubuntu works

pastel tinsel
#

version 2.6 uses the line data-ciphers instead of just cipher to declare what encryption they are using in the connection, this is what is giving the cipher problem as version 2.6 can't figure out cipher for some reason

celest wadi
#

if only kali knew, that 2.5.6 is the right way sadglas

craggy skiff
#

ah thank you ๐Ÿ™‚

pastel tinsel
#

you're welcome

#

there will be a proper fix soon, but this is a temporary fix until then

weary spindle
#

I can't wait for MW2.

violet pivot
#

Hello guys.

#

Can I ask any questions here?

craggy skiff
violet pivot
#

I'm in a weird dillema at the current moment.

violet pivot
#

Most of my dad's accounts got breached.

#

I was helping him secure them by changing the passwords, running malware scans, etc.

#

The usual.

#

So turns out, that there was some sort of phishing/spamware that had access to his Facebook account.

#

It send a very suspicious link to all of his contacts through messenger.

weary spindle
#

Report to facebook.

violet pivot
#

I ran the link through ScanURL, Phishing Tank and Virus Total.

violet pivot
#

But my dad really wants to find out what the link is for some reason.

violet pivot
#

Which is weird.

#

My dad then forced me to run the link on my PC (I was extremely reluctant)

#

And after running the link, MalwareBytes and McCafee detected no malware.

#

And the link was an "https" link.

#

Not an "http" link.

#

So I'm extremely confused here.

#

On how this would work for phishing.

#

Cause I doubt that it's not a malicious link.

#

Anyone got an idea on what's going on here?

#

And btw it's just showing a weird loading animation after opening it.

craggy skiff
#

Probably re-direct this to the general chat as this is technical support specifically in the context to TryHackMe functionality i.e. connecting and using their services.

as for your situation... just apologies to the contacts it got sent to advise them it's malicious, close the chapter and leave it alone ... unless it's your day job to reverse engineer indicators of compromise or do digital forensics incident response it's far too much time and effort to even get a tangible answer

violet pivot
#

My dad is forcing me to "Reverse Engineer the link"

#

And he's said "Either do it or give me your PC and let me do it"

#

And I KNOW he'll fuck my PC up beyond oblivion if I let him "Reverse Engineer" the link from here.

naive dust
#

is anyone else having issues connecting to the servers

crystal marlin
naive dust
#

It goes 100% then just shows connecting

#

after a few mins it prompt msg "Can't connect to server" then restarts

crystal marlin
naive dust
#

Yes!

crystal marlin
# naive dust Yes!

Mh, I guess there is no real fix to that.
So just give it some time, refresh the page after a couple of minutes (maybe even with Ctrl + F5)

Or if it's still not working after some time, restart the attackbox

naive dust
#

Ok thank you.

#

I'll just wait a bit

proven shadow
#

Restarted it multiple times and already tried connecting using putty, but there is no public IP showing

#

Oh lucky me..it works

crystal marlin
#

There you go then ๐Ÿ˜„

#

Was just spinning up an attackbox to see myself

proven shadow
#

This discord server looks sick tbh

craggy skiff
#

Sorry to ask ... does anyone know where the config file on Kali so so I can amend some of my openvpn settings ... seems I keep getting disconnected when controls packets are sent:

2022-06-27 16:06:46 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1589', remote='link-mtu 1602'
2022-06-27 16:06:46 WARNING: 'auth' is used inconsistently, local='auth SHA2-512', remote='auth SHA512'
2022-06-27 16:06:46 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'

pastel tinsel
#

Try to change the settings to what it says in remote

craggy skiff
#

I'm unsure of the syntax of the config file .. just added those in and errors with "un-recognised options"

pastel tinsel
#

What file did you change and can you send a screenshot of how it's looking

craggy skiff
#

it's the .ovpn file provided by THM

pastel tinsel
#

Okay, that's the correct one to change

craggy skiff
pastel tinsel
#

I am not at my pc right now to check my config, but @deep spire might be able to check against a working one

deep spire
#

I'll have a look

pastel tinsel
#

Thz, I am first home in like 45 minutes, so I can only do basic from the top of my head support ๐Ÿ˜…

craggy skiff
deep spire
#

Not seeing keysize or mtu in the .ovpn file i opened... What version of openvpn are you using @craggy skiff , What command are you running, and what are you connecting to?

deep spire
craggy skiff
#

2.6

#

the .ovpn was fresh this morning from THM

pastel tinsel
#

Can you try regenerate one real quick?

craggy skiff
#

command: sudo openvpn /etc/openvpn/client/bitbyte.ovpn

#

sure

crystal marlin
#

A fresh one has given you mtu 1602 ?

pastel tinsel
#

It gave 1589 they changed it to 1602 cause the remote said it used that and i told them to change it

craggy skiff
pastel tinsel
#

Then run the sed command in pinned and try now

#

sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

crystal marlin
pastel tinsel
craggy skiff
#

connects again ... but I'm getting drop outs when TLS control packets are received

#

assuming it's those 3 warnings about mtu, auth and keysize

#

well more around the mtu as that's more relatable to a stable connection

pastel tinsel
#

Can you try Uninstall and install v2.5.7

crystal marlin
# craggy skiff

It seems you are having multi vpn, at least in that screenshot

#

Since it's creating tun1

pastel tinsel
#

Oh

#

Couldn't see that cause on phone, don't mind my message

craggy skiff
#

fresh kali install this morning following the apple M1 guidance from their site

crystal marlin
#

Just do sudo killall openvpn
Then connect again to the vpn

craggy skiff
#

but I've not configured anything else unless it's vmware fusions vm-tools

#

Don't judge me on the FFXIV ๐Ÿ˜„ I like it haha

crystal marlin
# craggy skiff

Looks better now, so just try if you have any connection issues still

craggy skiff
#

Ok ... will give it a go and see if it remains stable

#

still concerned that it's spitting those warnings

#

from what i've been reading it suggests the .ovpn syntax isn't correct

#

well for the client sorry

crystal marlin
craggy skiff
#

will have to just chow down on my Aero and let me worries bubble away

jovial dagger
#

Guys everytime i click the link after i start the machine it says it took to long time for the page to response(when i paste it in browser).. how can i solve it

pastel tinsel
#

Can you verify and send a picture of the problem

#

!docs verify

sharp bisonBOT
jovial dagger
#

ok i will thx

pastel tinsel
#

Have you connected to a VPN

jovial dagger
#

Ahh no

pastel tinsel
#

This should help

jovial dagger
#

Am using brave

#

what i remember they use proxy

#

right

pastel tinsel
#

That is a different thing

jovial dagger
#

I didn't know that it could be proxy or vpn that did all

pastel tinsel
#

No worries

#

In the link that I sent you'll see a guide for windows

jovial dagger
#

Ok thx if anything i will tell u

pastel tinsel
#

No problem

whole helm
#

Is there a fix to this yet?

naive dust
#

Splunk 2 Task6 Q4 won't accept my answer which I have confirmed elsewhere is correct. It is probably because it contains characters not on the English keyboard but I can't see any way to work around that

pastel tinsel
# whole helm

use this command
sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

whole helm
#

thanks

#

I had to do sudo killall openvpn before to make that work too

#

its not showing my ip in the top bar which is weird though

#

usually it does

pastel tinsel
#

Idk why that doesn't anymore

whole helm
#

Strange. anyway thanks @pastel tinsel

scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
#

Might be the new update

whole helm
#

what was there an update to?

weary spindle
pastel tinsel
#

Openvpn

weary spindle
whole helm
#

oh i see

pastel tinsel
#

It updated to v2.6

naive dust
jovial dagger
#

thx so much it worked

plush bay
#

oh huh...... don't recall how shadow did it but they did somehow

#

probably

tepid fossil
#

?

celest wadi
#

you can just use the compiled binaries on their github page :)

plush bay
#

yuup that is what shadow did

tepid fossil
#

it says use this command but it's not working

go get github.com/ropnop/kerbrute
plush bay
#

this explains why it is in the git folder

celest wadi
#

just get the amd64 linux one and you're good to go

tepid fossil
#

do I just have to clone it?

celest wadi
#

nah, just click on it

tepid fossil
#

thanks

plush bay
#

click the button or copy the link and wget it

tepid fossil
plush bay
#

well you need to mark the file as executable too

#

with chmod +x kerbrutefilethingy

tepid fossil
#

can u pls show me the steps

plush bay
#

this is assuming you are trying to run it on kali linux which honestly you should

celest wadi
#

nah, those commands should work on any major linux distro

plush bay
celest wadi
#

yeh, don't use windows

tepid fossil
scenic torrentBOT
#

Gave +1 Rep to @plush bay

plush bay
celest wadi
#

you might want to copy that binary to /usr/bin/ or /bin so you don't have to manually run it every time

plush bay
#

because if the executable is not on the PATH variable in linux you need to tell the shell where the executable is exactly.... ./kerbrute_linux_amd64 here means run this executable in this folder

tepid fossil
#

so if I move it to /usr/bin/ it show work using kerbrute?

#

nice, thank for all help guys

plush bay
#

you're welcome

#

normally shadow would place it in opt and add that opt to the path variable but there are lots of ways to add programs to the path

celest wadi
#

it's a throwaway vm ya'll, not a prod server

#

you'd just pwnkit it smh

foggy elm
#

Even after restarting this room (https://tryhackme.com/room/furthernmap) multiple times, I can't seem to access the ip it gives me. I am connected with openvpn, but it seems to be broken, and I can't ping the ip on both my vm and host machine. Is this just me, or is the room broken?

celest wadi
#

there's been a pretty common issue with openvpn recently

foggy elm
celest wadi
#

the end of the ouput from that one

plush bay
#

so if shadow gets the above correctly you are connected to the vpn on your host machine instead of your kali vm???

celest wadi
#

๐Ÿ‘€

foggy elm
#

uh I'm connected on both lol

celest wadi
#

that's a bad idea

pastel tinsel
#

Only connect with one

foggy elm
#

does it matter which one?

pastel tinsel
#

If 2 is connected it breaks

plush bay
#

yes

celest wadi
#

it creates a single tunnel

plush bay
#

connect on the vm

pastel tinsel
#

Yes, the kali vm

foggy elm
#

ok

celest wadi
#

lot of violet rn ๐Ÿ‘€

plush bay
#

yuupsd

#

we fighting over the rep point

crystal marlin
#

I'm just watching ๐Ÿ‘€

foggy elm
#

it seems to be connected on my vm

celest wadi
celest wadi
celest wadi
plush bay
#

if it gives you a ip that means you are connected

foggy elm
plush bay
#

!openvpn

celest wadi
plush bay
#

.... okay

celest wadi
#

!vpnscript

sharp bisonBOT
inland violet
#

Hi. I'm getting too many machines error when spinning up an attackbox on the web

plush bay
celest wadi
#

!vpn

sharp bisonBOT
celest wadi
#

bonk, got it

foggy elm
#

lol so many links

#

i'll check

plush bay
#

nice zeeshan

crystal marlin
plush bay
#

2 of the links are the same

inland violet
celest wadi
inland violet
#

Is there a way to kill old instances?

celest wadi
#

check the running machines from there and go back to the rooms and terminate them

crystal marlin
celest wadi
#

or there's the js

plush bay
#

this explains how to kill all running vms so that you can start them in the room you are in without manually doing so

foggy elm
inland violet
#

Thanks

plush bay
#

darn fontaene was quicker

celest wadi
plush bay
#

if it says initialisation sequence complete it is running

#

and that is where you should leave it and open another terminal tab or terminal window

foggy elm
# celest wadi the last few lines

2022-06-27 14:16:34 ROUTE_GATEWAY 10.0.2.2/255.255.255.0 IFACE=eth0 HWADDR=08:00:27:64:44:52
2022-06-27 14:16:34 TUN/TAP device tun0 opened
2022-06-27 14:16:34 net_iface_mtu_set: mtu 1500 for tun0
2022-06-27 14:16:34 net_iface_up: set tun0 up
2022-06-27 14:16:34 net_addr_v4_add: 10.6.33.33/17 dev tun0
2022-06-27 14:16:34 net_route_v4_add: 10.10.0.0/16 via 10.6.0.1 dev [NULL] table 0 metric 1000
2022-06-27 14:16:34 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2022-06-27 14:16:34 Initialization Sequence Completed

plush bay
#

well then you are connected

celest wadi
#

yeh, it's running fine

#

might still have multiple instances

plush bay
#

can you open another terminal and run curl 10.10.10.10/whoami now????

foggy elm
#

ok

plush bay
#

if that gives you a single line of output with an ip you are connected and should probably not have any problems

foggy elm
#

wait a second was I not supposed to stop the command that opened the vpn

plush bay
#

nope you are not supposed to stop the command that run the vpn

#

you are meant to leave it running in the background as long as you wanna hack on tryhackme

foggy elm
#

ohh maybe that's what I'm doing wrong

plush bay
#

could be yeah

foggy elm
plush bay
#

nice

#

that ip is your kali vm:s ip on the tryhackme network which means it is the ip you would use in a reverse shell

#

and as long as you don't get a new vpn file it will stay the same

foggy elm
#

ok nice

plush bay
#

now that you are connected try and reach your target machine again

foggy elm
#

I still can't ping it :(

plush bay
#

is it a windows machine???

foggy elm
#

umm idk?

#

I'm trying to do this to learn nmap lol

plush bay
#

okay then..... try using nmap with the -pN flag against it

#

also recommend -F to speed it up imensly for us to trouble shoot

foggy elm
#

as a note I haven't been able to connect to other ips with the same room

plush bay
#

oh woops

#

wrong flag capitalisation

#

it should have been -Pn

foggy elm
plush bay
#

TADA

#

it worked

foggy elm
#

the machine is working?

plush bay
#

if you know how to read nmap results that is

#

yuup it is

#

or you would not have gotten the results that those ports are open

#

this should tell you some of the task question answers too

foggy elm
#

when I tried pinging it before it said all the ports were closed lol

#

that's weird but its working now

#

ty

plush bay
#

no problem

#

hope you learnt a lot from this and that your journey becomes a bit easier now

plush bay
foggy elm
#

oops

plush bay
#

hence learning some alternatives to ping with nmap to see if the host is there is useful

#

if this room is not enough for your nmap learning there is the nmap module that teaches you host discovery tricks

foggy elm
#

oke tyty

plush bay
#

good luck and have a fun learning journey

naive dust
#

I am having kali issues and was wondeering if someone could ofer there assistance

lofty rock
naive dust
pastel tinsel
#

what error is it giving you?

naive dust
#

Options error: In [CMD-LINE]:1: Error opening configuration file: /home/downloads/jupiter3.ovpn

lofty rock
naive dust
#

OpenVPN 2.6_git x86_64-pc-linux-gnu

lofty rock
naive dust
lofty rock
pastel tinsel
#

not with that error message

pastel tinsel
#

!docs verify

sharp bisonBOT
lofty rock
naive dust
pastel tinsel
#

just give a screenshot of the error message

naive dust
#

there

pastel tinsel
#

yup

crystal marlin
#

What, tbh that seems to be just the wrong path, no ?

pastel tinsel
crystal marlin
#

But what directory should be /home/downloads?
Shouldn't it be /home/jupiter/Downloads ?

pastel tinsel
#

oh yeah

naive dust
#

now how do I disconnect??

pastel tinsel
#

ctrl+c

naive dust
#

thanks

scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

naive dust
#

I have another issue but its not really tryhackme related

pastel tinsel
#

+rep

scenic torrentBOT
#

Gave +1 Rep to @smoky berry

naive dust
#

+rep @pastel tinsel

scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

naive dust
#

+rep

#

+rep @naive dust

pastel tinsel
#

yup

quaint gull
#

heey, i regnerate a new config, but have still a problem

unknown.png
crystal marlin
quaint gull
crystal marlin
# quaint gull

Regenerate your openvpn file and download it again, you might even have to change server

quaint gull
#

okay, i'll try

#

I switched to EU-2 but i can't download a config

unknown.png
#

@crystal marlin thanks, EU-3 is working for me

scenic torrentBOT
#

Gave +1 Rep to @crystal marlin

weary sinew
#

hey guys, anyone here using RDP to connect to the attack box? it's kinda usefull as you can use keyboard shortcuts for example.

I tried connect to the attackbox using Remmina but the refresh rate is like 0.5 fps which make it ... kindof a pain in the ass to use. Any suggestions?

junior spoke
#

Hi, can i ask a question if u are there ?

pastel tinsel
#

sure

junior spoke
#

If i can, i try to use hydra on a challenge, but at the begining it put 2800 tries per minutes

#

I canceled like ร  moron and now its 90

#

I reboot the VM, my computer my command but nothing to do...

#

And sorry for my english i have an excuse : i am french ๐Ÿ˜”๐Ÿ˜‰

#

I googled that and they say we can us GPU on hydra, but its remotely attack so i dont know if its possible for that

#

I dont know if i must to say what is the room because i dont know if its a spoil for the people here

#

And i dont know if i am in the good channel on discord...

spring pilot
#

Hi folks, can anyone give me a sensible answer to using nano across a shell. I'm doing the IDE room and everytime I use Nano as the text editor it just corrupts and does nothing. I cannot for the life of me figure it out.. I end up having to cancel the shell and start the chain again. I can get no further and I can find any sensible answer on google. The writeups all use nano so it's my fault...

plush bay
#

then set the rows and columns

#

tput lines && tput cols will write out the rows and columns if you run it in your terminal while not in the target machine shell

#

stty rows <num> columns <cols> will set the rows and columns when you have stablised the shell

spring pilot
plush bay
#

well if you have stablised the shell you could use ctrl + c or ctrl + x to exit nano

#

sorry only ctrl + x

#

also don't forget to export the term variable

spring pilot
#

I used the "python2 -c import" etc etc then the "export TERM" etc etc then "stty raw".. that's as far as I went. Doing that doesnt let me use any commands in nano.

plush bay
#

export TERM=xterm-256color

#

oh yeah for nano it needs the rows and columns to act like you expect

#

for other stuff it is not nescarily needed

spring pilot
#

hmm interesting, I just used "export TERM=xterm" I've never used the 256 color tag previously.

plush bay
#

that just means it will default to use colours from the bashrc file

#

so not really nescary but useful to shadow

spring pilot
#

OK that's good to know. Thanks for your assistance ๐Ÿ™‚

plush bay
#

no problem

#

also can shadow recommend to you to verify your discord with the bot using the following link to be able to send pictures here and show of you tryhackme level

#

!docs verify

sharp bisonBOT
plush bay
#

@spring pilot โฌ†๏ธ

spring pilot
#

Cool, have done that now.

plush bay
#

oooh nice already a wizard

spring pilot
#

A wizard who obviously didn't read the whole "shell stabilisation" room ๐Ÿ˜„

#

Because the columns steps are at the end after the socat section...

#

A very lazy boy indeed.

plush bay
#

well we live and we learn

polar jolt
#

I keep getting an error that I can only have three machines started... but I can't find out an easy way to see what machines I have started so I can terminate them, is there any way to do this?

weary spindle
weary spindle
polar jolt
#

Sure do

weary spindle
# 
fetch('/api/vm/running')
  .then(r => r.json())
  .then(vms =>
    vms.forEach(vm =>
      fetch('/api/vm/terminate', {
        method: 'POST',
        body: JSON.stringify({ code: vm.roomId }),
        headers: {
          'csrf-token': csrfToken,
          'Content-Type': 'application/json'
        }
      })
    )
  )
#

If you paste that in the console for the browser, it will close all machines that are running.

polar jolt
#

csrfToken is not defined

weary spindle
#

Intersting, I got a different error. kek

#

But the link above should show you wish machines you have running.

polar jolt
#

oh yes

#

then I can go to the rooms and terminate

#

sweet, got it

weary spindle
#

Yeah, manually.

polar jolt
#

yep!

weary spindle
#

When that code works it usually just closes them all.

polar jolt
#

makes sense, thanks for the help!

weary spindle
#

I just tried there again (whilst on a THM page) and the code worked, oh well, glad you got there in the end.

blob Happy Hacking blobdance

weary sinew
#

hey guys, any tips for either:
lowering latency when connecting to the attackBox via RDP? (other than changing color depth, I already did that)
OR
capturing all keys when using the attackbox, from web browser?

Thx ๐Ÿ™‚

weary spindle
weary sinew
# weary spindle Capturing all keys?

like being able to use keyboard shortcuts, to change desktops, resize window, etc
Like using the windows key in the attack box, or using ctrl+alt + "right arrow"

weary spindle
plush bay
#

as doing that over vnc and rdp for the attackbox and windows targets is not easily possible

weary sinew
weary sinew
#

errrf

plush bay
#

or kali with just 2 gigs of ram and 1 cpu

weary sinew
#

guys ๐Ÿ˜† nooo

plush bay
#

well the attackbox is over vnc

weary sinew
#

best for me is RDP or just using an attackbox that would capture keystrokes ^^

#

na i want gui. I prefer attackbox moar than no gui

weary sinew
plush bay
#

well maybe you can connect via vnc to the attackbox from your main pc using a vnc tool or you can use ssh from the my-machine page

weary sinew
plush bay
weary sinew
plush bay
#

but getting the gui over and allowing copy pasting and other keyboard shortcuts is gonna be a pain

weary sinew
#

I already downgraded color depth, any more suggestions?

plush bay
#

yuup get a new better computer

#

other then that not much no

weary sinew
#

๐Ÿค”

weary spindle
#

Upgrade.

plush bay
#

you can't make the web browser version accept ctrl c and ctrl v sorry

#

which leaves you with the option of trying to get vnc to work nicely

weary sinew
weary sinew
plush bay
#

everyone that uses it in the browser instance

weary sinew
#

I meant, through a RDP client ๐Ÿ™ƒ

plush bay
#

vnc != rdp

weary sinew
plush bay
#

remmina

#

or how ever it is spelt

weary sinew
plush bay
#

yeah as shadow assume that has a vnc mode

#

could be wrong

#

never really used vnc

weary sinew
plush bay
#

ยฏ_(ใƒ„)_/ยฏ

weary sinew
#

mmh okay but keystrokes are usefull and good laptops expensives ๐Ÿ˜ข

plush bay
#

a good laptop will last you multiple years and let you run whatever software you want on it

weary sinew
#

yeah I know ๐Ÿ™„ I just do not have money RN

plush bay
#

eh christmas is just 6 months away

#

wishing for money or a new computer is doable

#

worst case senario you just get money

weary sinew
#

I'm too used to em

#

it's not just the c+v c+v

plush bay
#

it is your own problem if you can't adapt... and being able to adapt quickly to change is going to help you on your hacking journey

weary sinew
#

๐Ÿคฆโ€โ™‚๏ธ

plush bay
#

yeah that was maybe a bit harsh

lofty rock
#

Hey guys,
This is linux privesc task 11,
I have compiled nfs.c file with gcc nfs.c -o nfs -w , and moved the executable to mountpoint , when I try to execute it in ssh mode, it says not found the file, don't get the problem :/

unknown.png
tawny lantern
#

hi

#

why is it not opening the website as a part of the authentication bypass room?

#

like its not showing up. so weird

#

the IP only shows up as a "CUSTOMERS_IP"

#

nevermind I solved it

#

just had to terminate other instances of the server

west ivy
#

having troubles connecting to openvpn, any ideas?

unknown.png unknown.png
frank sundial
reef rivet
#

can anyone help me retrieve my account in fb i forgot the password and the sim i used to activate the acc is gone idk how to retrive T^T

pastel tinsel
pastel tinsel
pastel tinsel
frank sundial
sand tendon
#

Hi folks, I am unable to connect to boxes with openvpn. Is there a known issue with connecting with Openvpn on Linux?

pastel tinsel
sand tendon
pastel tinsel
#

If you can verify your account and send a screenshot it would be great

#

!docs verify

sharp bisonBOT
pastel tinsel
#

This way it's easier to see what the problem is and figure out what to do to fix it

hushed harness
#

I can't connect to the vpn ... It was working till last day but today it is not connecting ..... I've tried to regenarate and even change the server but still the problem occurs.... anybody please help me... It's my 104 day streak and I don't want to lose it...

pastel tinsel
sand tendon
#

I think there's a general issue connecting if you're running OpenVPN version 2.6.

pastel tinsel
#

Yes there is, there's some changes in the config

sand tendon
#

Any mitigations I can do from my end?

pastel tinsel
#

use this command
sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

#

That will change the config to have the right cipher that it tells you is missing

hushed harness
#

great

#

this killed my error

#

thanks a lot ๐Ÿ™‚

pastel tinsel
#

You're welcome

inland knoll
#

i change my mind. Sed is my new favorite

pastel tinsel
inland knoll
#

friendship ended with nano

icy drum
#

I may be doing something wrong

Screenshot_from_2022-06-28_03-50-57.png
#

nvm, got it.

wind socket
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
wicked shuttle
#

I only have a question to ask if possible . My subscription will end at the beginning of 'octobre' and I wanted to know if the payment for next year will pass automatically or do I need to remake it by myself , and thank you for answering my question .

crystal marlin
wicked shuttle
crystal marlin
wicked shuttle
celest wadi
#

!email

sharp bisonBOT
#
TryHackMe
Contact us for support, teaching enquires and more!

support@tryhackme.com

From TryHackMe with โค!
pastel tinsel
#

Contact support with the email that you had the account on

#

If you remember the email

celest wadi
wicked shuttle
#

I understand thank u so much guys โค๏ธ

heavy acorn
#

what do we use to remote to a windows box from the attackbox, ive been away for a while and used to use rdesktop but thats not avaiable anymore

celest wadi
#

xfreerdp

heavy acorn
scenic torrentBOT
#

Gave +1 Rep to @celest wadi

pastel tinsel
jaunty spruce
willow badger
#

Hey i am not able to connect using openvpn something is wrong

pastel tinsel
#

use this command
sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

pastel tinsel
willow badger
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
willow badger
#

cool

#

thanks

pastel tinsel
#

no worries

lofty rock
celest wadi
pastel tinsel
#

did you chmod +x it?

lofty rock
lofty rock
celest wadi
#

it means everyone(every user) can run that

lofty rock
#

yes yes

celest wadi
#

can you show a specific ls -la nfs?

lofty rock
celest wadi
#

๐Ÿ‘

pastel tinsel
lofty rock
#

oh I have screenshot from yesterday's here is the file output

unknown.png
pastel tinsel
#

can you also give me a screenshot of uname -a

lofty rock
#

I have made the executable in intel processor computer, then transferred it to m1's vmware fusion kali , which OS's uname -a ?

#

Executable made in intel processor machine
Connected/mounted the shared directory in Vmware fusion arm64 kali machine

pastel tinsel
#

that's the problem

#

those are all different binaries trying to run it which can't make it run

lofty rock
#

I am running it by ssh-ing to the thm machine

celest wadi
lofty rock
#

which is intel proc

celest wadi
#

it's saying it can't find the file

pastel tinsel
lofty rock
#

That was interesting

celest wadi
pastel tinsel
#

well, when you don't have 32bit compatible libraries

celest wadi
lofty rock
#

Maybe you have that libraries 32 bit

#

that's why it is running

celest wadi
#

32 bit programs should run on 64 bit OSs

#

the reverse isn't true

lofty rock
#

but can't understand then this problem

celest wadi
#

as I've said give more details

pastel tinsel
#

aka have libraries that can run the 32 bit

celest wadi
#

yeh, obviously no arm amd mix

pastel tinsel
#

@lofty rock try and compile it in the kali vm

lofty rock
#

the kali vm is arm64
the elf file will be arm64

#

a sec I will show you

pastel tinsel
#

just try it ๐Ÿ˜„

#

then we'll see if that is also a problem

lofty rock
#

kali vm

Linux kali 5.16.0-kali7-arm64 #1 SMP Debian 5.16.18-1kali1 (2022-04-01) aarch64 GNU/Linux

Kali not vm

Linux kali 5.18.0-kali2-686-pae #1 SMP PREEMPT_DYNAMIC Debian 5.18.5-1kali1 (2022-06-20) i686 GNU/Linux
pastel tinsel
#

no worries, try to do the task and just compile the program in your vm that you use as attackbox

lofty rock
# 
$ ./thm
-sh: 4: ./thm: Exec format error
pastel tinsel
#

what folder did you mount?

lofty rock
#

/tmp

pastel tinsel
#

that's the wrong one

#

iirc

#

try backups folder

lofty rock
# 
/tmp *(rw,sync,insecure,no_root_squash,no_subtree_check)

It has no_root_squash

pastel tinsel
#

hmmm

#

give me a second I'll do the task myself real quick

#

when running the file, are you ssh on the target machine and running it as karen?

lofty rock
#

yes

pastel tinsel
#

hmm, can you show the script?

#

cause I just got it to work

lofty rock
pastel tinsel
#

that's a whole different kinda script

#

and it's flag7 for task 11

lofty rock
#

a sec

#

okay I have changed it to flag7, same exec format error

pastel tinsel
#

all you need for task 11 is this

unknown.png
#

it shows in the task ๐Ÿ˜„

lofty rock
#

but, why can't I cat that file when s bit is set ?

#

Why is it exec format error ?

pastel tinsel
#

I don't know, I haven't looked at that script before

celest wadi
lofty rock
celest wadi
#

can you show it plz

lofty rock
lofty rock
lofty rock
pastel tinsel
#

how do you compile it?

lofty rock
pastel tinsel
#

hmm, something breaks

lofty rock
#

I guess that cat script would also work

pastel tinsel
#

give me a second and I'll send you my compiled script

lofty rock
#

I am already downloading kali 64 bit image ๐Ÿ˜‚ I am done with this

pastel tinsel
lofty rock
#

okay it executed , but I became from karen to karen

#

I am messed

#

so the thing is it works with onnly 64 bit intel executables

#

and chmod +s nfs, chmod+x nfs, I become from karen to karen

#

I am really sorry for your time, I am just trying to understand

celest wadi
pastel tinsel
celest wadi
pastel tinsel
lofty rock
pastel tinsel
#

Yes๐Ÿ˜Š

lofty rock
#

It worked perfectly in thm attackbox

#

I made .c code with setgid setuid and bin bash, and became root

#

do you get what was the problem ?

pastel tinsel
#

It's just up above

lofty rock
pastel tinsel
lofty rock
#

even that 32bit one ?

#

which theoretically should work on 64 bit

pastel tinsel
#

Probably, have to look more into it to give a more concrete answer

lofty rock
#

okay I see,
however thank you a loot, for your time

#

+1 rep @pastel tinsel

#

how does this work ? xD

pastel tinsel
#

No problem, we are here to help

lofty rock
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

slim trail
#

Need help please

pastel tinsel
slim trail
#

Openvpn not getting connected

pastel tinsel
#

use this command
sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

slim trail
#

6-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2022-06-28 20:34:07 ERROR: Failed to apply push options
2022-06-28 20:34:07 Failed to open tun/tap interface
2022-06-28 20:34:07 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2022-06-28 20:34:07 Restart pause, 10 second(s)

#

thanks let me try ill get back to you'

pastel tinsel
#

After using it try again

slim trail
#

it works like magic

#

thanks

#

you are a god

pastel tinsel
#

You're welcome

celest wadi
#

๐Ÿ‘€ ๐Ÿ‘€

pastel tinsel
#

It's a common problem

#

Since the new update of openvpn

slim trail
#

i was searching for solution

#

couldnt find one

celest wadi
pastel tinsel
#

Yeah, I should publish it

celest wadi
#

it should be pretty common

slim trail
#

yeah you should

#

thanks again bri

#

*bro

pastel tinsel
#

Should it be another time

#

(meaning if there's another problem I'll gladly help)

celest wadi
slim trail
#

okay thanks

vagrant heath
#

hello

weary spindle
#

HHello

pastel tinsel
#

Hi

river flame
#

Hi My openvpn is connected but I cannot open victim machine

#

Tried troubleshooting with tryhackme script on github but no luck

weary spindle
#

Can you verify and please send screenshots?

#

!docs verify

sharp bisonBOT
river flame
#

Please help

zealous yoke
stuck island
#

Hey good people. qq, how do you add your cert title to the account?

#

Yeah for discord. Thanks

scenic torrentBOT
#

Gave +1 Rep to @gray loom

crystal marlin
celest wadi
#

oh I didn't realize you can do that now ๐Ÿ‘€

pastel tinsel
crystal marlin
pastel tinsel
celest wadi
pastel tinsel
celest wadi
lofty rock
#

Hey guys, can I bother you again ?

celest wadi
lofty rock
celest wadi
#

not me

pastel tinsel
#

shoot

celest wadi
#

oof, this is going to be long

lofty rock
#

I am on Windowd privesc room ,
this one is going to be really stupid question,
on task 4, I have rdp-ed to the Windows machine, did this command to change the scheduled task:

 echo "c:\tools\nc64.exe -e cmd.exe <my ip> 9999" > C:\tasks\schtask.bat

And ran the scheduled task to be executed now:

 schtasks /run /tn vulntask

I don't get the reverse shell both in my machine and attacker box THM machine.
But I do get the shell when I simple run nc command:

C:\tools\nc64.exe -e cmd.exe <my ip> 9999
celest wadi
#

use double slashes

#

pretty common mistake

#

oh sorry

#

that's the other task

#

hmm, there's more help in #987074227335233607 but make sure you foolow the instructions to a tee

lofty rock
#

it is not working telling me there is no "-e" option

stuck island
#

Certain versions of netcat do not support "-e" for security reasons

#

Try googling for an alternative when you encounter that scenario.

lofty rock
#

it is supporting I have tried it without task scheduler it works fine

#

guys it was done with cmd prompt

#

with powershell it doesn't work

#

idunno why

celest wadi
#

the're getting help in the other channel and that flag is incorrect

lofty rock
echo pecan
#

When connecting to the throwback network I encounter this problem

#

When connected, it says 2022-06-28 22:12:13 Restart pause, 5 second(s)

#

Trying to regenerate files didn't help me

celest wadi
echo pecan
#

is it not working at the moment?

#

@celest wadi

celest wadi
#

yeh, the new version openvpn has a bug

echo pecan
celest wadi
#

run this command in your ovpn file directory to see if it fixes it:

sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn
echo pecan
#

You suggest finding an older version of the package?

celest wadi
#

not necessarily needed

#

you can just update the ciphers in the file

echo pecan
#

wow thanks

#

You really are a wizard.

celest wadi
echo pecan
#

I had in mind to edit the config

#

But apparently I'm too lazy and you pushed me to do it)))

celest wadi
#

well, it works now so that's good

pastel tinsel
celest wadi
pastel tinsel
#

!docs verify

sharp bisonBOT
celest wadi
# pastel tinsel DON'T TAKE CREDIT FOR MY COMMAND

well, that was a pain doing it in awk but this command works the same, it doesn't even modify the original files so the're intact

awk '{sub(/cipher/,"data-cipher"); print}' *.ovpn > working.ovpn
pastel tinsel
celest wadi
#

it's so if anything goes wrong or they need the original

pastel tinsel
#

sed 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn > fixed.ovpn

#

done

celest wadi
#

yeh, but mine is better

#

(that was a joke)

#

spending more time finding ways to automate a basic one word fix, this is my kind of fun

pastel tinsel
plush bay
#

NERDS

#

which is a good thingy

pastel tinsel
plush bay
#

learning awk and sed would be good for shadow

rain prairie
#

sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn -> quicker way using edit file in place

sinful violet
#

Getting error: Unable to negotiate with {IP} port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss

Linux PrivEsc room

crystal marlin
sinful violet
scenic torrentBOT
#

Gave +1 Rep to @crystal marlin

teal lark
#

I'm trying to log in but there's no captcha to click on (even if my username and password are correct)

unknown.png
#

am I missing something?

pastel tinsel
teal lark
#

yes

#

I tried to disable the adblocker for the THM site but the captcha won't show

pastel tinsel
#

Try ctrl+f5

ornate sail
pale crypt
#

hi guys ! Is there an admin available ? I have an issue with openvpn .. ^^

pastel tinsel
pale crypt
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
teal lark
#

I've disabled the adblocker

#

deleted cookies

#

restarted the browser

#

and still can't see the captcha

pastel tinsel
#

Tried a different browser?

teal lark
#

oh finally!

#

I'm in

pastel tinsel
#

Did it work with changing browser +

teal lark
#

nope

#

just clearing all cookies

pastel tinsel
#

Fair

crystal marlin
ornate sail
#

Ok sorry ๐Ÿ™‚

coral pagoda
#

Task 4 instructs you to download and install impacket <0.9.20 but the GetUsersSPN.py is not right

#

it is riddled with errors

#

i have corrected 13 errors in the code so far and no dice

river flame
thin quartz
fleet rover
#

My friend posted this on LinkedIn


Hey TryHackMe, I would like to upload a set of 6 VMs to my created room, of couse if possible I want to make it public so more people can enjoy my room! It is an Active Directory set. I uploaded them respectively, but I got convertion error after that. I tried to reach out to Support Team few days ago, but I have not received any update.  I appreciate your attention.

Who could he reach out to?

grave oar
#

I am the creator, thanks for spreading my issue. I appreciate it!

smoky harbor
#

@stray cove Can you or one of the mods get @grave oar creators lounge role so he can get some help with his vm upload issues? I expect he might need some additional help setting up an AD network.

grave oar
#

Thank you buddy

smoky harbor
grave oar
#

Yes I read it. Some VM are Windows Server 2019 Evaluation version, I did not see the guide mention it. So Evaluation version is not accepted?

smoky harbor
#

Iโ€™m not sure. The AWS docs say Microsoft Windows Server 2019 (Standard, Datacenter). Doesnโ€™t mention if Eval mode is a non-starter. Would you know @tawdry orbit?

pastel tinsel
pastel tinsel
stray cove
#

I can get the role hang on

#

Ok done

#

As for windows vms, I think thm takes care of the licensing

vivid jackal
zealous yoke
red wind
#

Hi there, I am doing the "Breaching Active Directory" network and am on Task 6. I have connected to the JUMP server and am trying to retrieve the bcd file from the mdt server, but the tftp command hangs for about a minute and then says "Connect Request Failed"
I've confirmed I can ping the mdt server from the jmp server.
Is the tftp service maybe not running?

timid rose
celest wadi
red wind
#

Cheers, this is just he initial conf file that is small, but I'll head there see if someone knows

celest wadi
# timid rose welp

can you show a more zoomed in picture of the openvpn error? also are you sure that there's not multiple instances running, check with this if there's multiple ones
ip a should give only one tun0 interface
ps aux | grep openvpn should only be two processes

pastel tinsel
# timid rose welp

Run this script
sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

celest wadi
#

I don't see a ciphers error

pastel tinsel
#

first line

celest wadi
#

weird, thought it'd be at the bottom

pastel tinsel
#

also run the openvpn command with sudo

timid rose
#

cheers

pastel tinsel
timid rose
#

rep @celest wadi

#

+rep @pastel tinsel

scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

timid rose
#

+rep @celest wadi

celest wadi
timid rose
#

sorry for the 2nd tag

#

and still doenst work gg

pastel tinsel
#

there's a 5 min timeout after a rep

#

so it's not to be abused

lavish delta
celest wadi
#

it's done already dude

proper hamlet
#

I have a problem with my account and I cannot log in. It's been a month trying to contact the support team of TryHackMe and no one answers my emails. Can someone help me??

weary spindle
#

..support.

#

๐Ÿ™‚

proper hamlet
weary spindle
#

!email

sharp bisonBOT
#
TryHackMe
Contact us for support, teaching enquires and more!

support@tryhackme.com

From TryHackMe with โค!
light vale
weary spindle
#

Try that one.

proper hamlet
#

Ok, I will try. Thank you very much.

naive dust
#

Iโ€™ve heard that TryHackMe offer student discounts for the subscription, is their someone I can talk about that?

pastel tinsel
#

!email

sharp bisonBOT
#
TryHackMe
Contact us for support, teaching enquires and more!

support@tryhackme.com

From TryHackMe with โค!
naive dust
#

Thank you

crystal marlin
#

!docs student

sharp bisonBOT
pastel tinsel
#

that too

crystal marlin
#

If you haven't checked that out already

novel burrow
#

Hey , i have a problem i installed openvpn2.5.6 and i can connect but my problem when i try to access machine an write ip in the browser or using curl it keeps waiting without any response

pastel tinsel
novel burrow
pastel tinsel
#

you sure the target is running?

novel burrow
pastel tinsel
#

try out this command
sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

#

should fix the problem

#

sometimes that can fix it, but if not it's a different error

novel burrow
pastel tinsel
#

try see if you have access to the machine now?

novel burrow
#

no i can't

pastel tinsel
#

hmm

#

what room is it?

novel burrow
#

owasp top 10

#

i tried another room but the same problem

pastel tinsel
#

can you try regenerate a vpn?

novel burrow
pastel tinsel
#

try without first

novel burrow
#

ok

novel burrow
pastel tinsel
#

and still errors trying to access the site?

#

what about ping?

novel burrow
#

i can't access and ping executes successfully

#

it was working for a week but i don't know why this happened so i installed another vm but still the same problem

pastel tinsel
#

might be some routing problem with http

novel burrow
#

openvpn version was 2.6 but i downgrade it to 2.5.6 as the pinned messages said

pastel tinsel
#

yeah, we have found some new fixes

novel burrow
#

attackbox working correctly

zenith glacier
#

Is anyone from support available. Someone who can help me recover my account?

celest wadi
#

๐Ÿ‘€

#

That would only happen through email

zenith glacier
#

I did an email

celest wadi
#

I know you've had troubles with email but that's the way

pastel tinsel
#

please wait then, it's only 1 person who gets a whole lot of messages all day

zenith glacier
#

I am waiting from last 25 days that support will help

#

I am still waiting

#

I hope that this time I get access of my account again

novel burrow
pastel tinsel
novel burrow
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

novel burrow
#

I will try thank you

grave oar
scenic torrentBOT
#

Gave +1 Rep to @stray cove

stray cove
slender granite
#

I am having same issue, neither the sed nor MTU solutions seem to fix. HTTP requests not resolving, nmap scans not working etc. ๐Ÿ˜ฆ

#

Oh, nevermind it was an obvious one. I'd backgrounded the ovpn process and then when I went to re-start ovpn in new terminal without realising it broke something.

#

User error. ๐Ÿ˜ฆ

celest wadi
#

sudo token reuse vulnerability right there

shy mortar
#

sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

Reposting, this command worked to get my VPN back up and running correctly. According to the errors the OpenVPN server was looking for the CBC ciphers in my issue, so this solved that.

bronze vale
#

Check pins^

shy mortar
#

Ah, my bad

bronze vale
#

Not a problem:)

obtuse umbra
scenic torrentBOT
#

Gave +1 Rep to @shy mortar

jovial dagger
#

At what level would i be after finishing all free rooms(Like could try to hack myself and it would work... approximately )

#

My phone

#

Send myself an email and yah

#

But you got what i mean

#

you right but just an example

#

Ok thx for ur time

inner peak
#

Hello, i want to change my account username but it's locked. Need help about this.

sharp bisonBOT
#
TryHackMe
Contact us for support, teaching enquires and more!

support@tryhackme.com

From TryHackMe with โค!
inner peak
#

Thank you.

jagged rose
#

Does anyone know if the verification bot is having issues atm?

Keep getting the following message.
"Your message could not be delivered. This is usually because you don't share a server with the recipient or the recipient is only accepting direct messages from friends. You can see the full list of reasons here (Redacted Link as I don't think I have permissions to post one)"

Could it be because my Discord account is so new?

crystal marlin
jagged rose
#

Sent it another DM and it resolved itself

#

I feel like the users I work with now lol

#

raise a ticket and all of a sudden the problem is solved

#

Cheers anyways mate ๐Ÿ™‚

cloud plaza
#

Thank you to the team for pinning the solution to the openvpn issue

pastel tinsel
#

You're welcome

weary swan
#

why do some of my files have a padlock on it and why cant i delete them

naive dust
#

Phew

fast basalt
#

does anyone knows what and how to fix this?i tried googling it but there's no relevancy

virtualbox_error.PNG
latent jolt
#

openvpn keeps failing to connect. First time I've ever seen this (been using it for months without any issues) . I've rebooted. Anyone know what the issue might be? Not finding the answer readily online, googling for the error message.

Screenshot_from_2022-06-29_21-15-17.png
tepid fossil
#

Any idea how to copy a file from windows to Linux machine over SSH? used this command but it's not working

#

I connected to target machine with SSh and now I want to copy a file but I keep getting error or connection refused

zenith glacier
#

@bronze vale please help me recover my account

broken bear
tepid fossil
broken bear
# tepid fossil what do u mean? Pinned msgs are only about openvpn

Sorry, wrong reply. If SCP isn't working, double check your formatting. Typically SCP is included in bash, so unless you have the windows bash or equivalent that command won't work. If you post the error message that will be much more informative than just the command.

broken bear
tepid fossil
#

Idk why this is not working! the command is simple and right and it should be working!

latent jolt
scenic torrentBOT
#

Gave +1 Rep to @broken bear

broken bear
vernal briar
#

2022-06-30 01:30:15 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2022-06-30 01:30:15 Exiting due to fatal error
when im trying to connect to openvpn
im inside my downloads directory and the command is
openvpn mooshking.ovpn

crystal marlin
vernal briar
#

that did it, thank you!! โค๏ธ i love when its something easy, can i ask tho. if im sys admin why aren't commands ran automaticly by sudo

crystal marlin
bronze vale
zenith glacier
gritty wren
#

hello guys I have a problem here in SSRF room from JR-penetration test path

#

the site in task two doesn't work at all there is no error appears or anything it just freezes

i tried to reset progress and remove the browser cookies but still nothing ****

weary spindle
#

Can you explain more?

Can you interact with the static site at all?

gritty wren
weary spindle
split wyvern
#

Hi All, i get the following error when i connect with SSH:
Unable to negotiate with [IP] port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss

#

so far i had no problems with connecting through SSH...

pastel tinsel
#

what are you trying to connect to?

elfin depot
#

can we have full vod on thm's twitch @barren birch?

split wyvern
#

@pastel tinsel to the Linux PrivEsc room

pastel tinsel
split wyvern
#

yes i did

celest wadi
#

and what?.. lemonthink

split wyvern
#

I found this command but i am not sure if I should use it... ๐Ÿ™‚
ssh -oHostKeyAlgorithms=+ssh-dss [username]@[IP]

pastel tinsel
#

try it out

#

what is the worst that can happen? maybe that it doesn't work ๐Ÿ˜„

split wyvern
#

ok that is working

#

but can you explain why this was required?

celest wadi
#

deprecated algorithms

split wyvern
#

ok let me google that one ๐Ÿ™‚

pastel tinsel
#

the room was created a long time ago using an older version of SSH than what is used now, because of that the algorithms have changed and is not using the same as before, meaning you have to specify it

celest wadi
#

here comes a big one

#

version of SSH that is used now,

celest wadi
split wyvern
#

ok so this is a RSA (1024 bits or lower) encryption which is no longer supported by default for my version of SSH... do i explain that correctly? ๐Ÿ™‚

celest wadi
#

yes, more or less

barren birch
split wyvern
#

๐Ÿ˜ƒ thanks @celest wadi @pastel tinsel

scenic torrentBOT
#

Gave +1 Rep to @celest wadi

celest wadi
#
  • @pastel tinsel
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
split wyvern
#

๐Ÿ‘

barren birch
#

I mean, either way the answer is: if it's not on the Twitch then you'll need to ask one of the admins. There were full recordings made for everything that was streamed recently, which I passed on to Skidy/Ashu before leaving ๐Ÿ™‚

#

Hydra probably also has those now actually, thinking about it -- they were in my THM Google Drive which I believe was just transferred over

naive dust
soft dagger
#

openvpn issues today? cant connect kali or osx on ovpn, sudo'd command too. any ideas?

pastel tinsel
soft dagger
scenic torrentBOT
#

Gave +1 Rep to @pastel tinsel

pastel tinsel
worldly viper
#

I just recently finished the pentest+ path for 10% off the exam but apparently the code given is expired

#

Im grateful for the awesome rooms but I feel like its kind of misleading to advertise the room like that

willow badger
#

Hey i am doing some thm but john the ripper tool is causing some issues

#

Warning: only loading hashes of type "tripcode", but also saw type "descrypt"
Use the "--format=descrypt" option to force loading hashes of that type instead
This is the error message can anybody help?

#

There is a lot of warning like this i dont know what is going on

celest wadi
willow badger
#

yes but Use the "--format=descrypt" option to force loading hashes of that type instead" this is one of the many options i just pasted one line of error message

#

i am doing bruteit from THM