site-support

[lime pond]

Hey, I am having problems connecting to the EU-VIP1 VPN Server.
My OpenVPN connection log is here: https://pastebin.com/bYqsVcn2
Switch servers result in same problem.

Any suggestions?

Thanks, works.

[scenic torrent]

Gave +1 Rep to @gray loom

[pastel crown]

yo can someone help me?

@gray loom

i tried installing burp on my own kali machine but its giving a few errors i cant find anything online about

sure one sec

It’s on one of my pi’s

So idk if that changes anything

oh mb ill ask over there thx

[sleek jackal]

I think something is wrong with the forums website. Only partially loading.

[compact summit]

having a issue on tryhackme.com with the openvpn server. keep losing connection, feel like i have tryed everything but cant get it to work very new to hacking and wanting to get good at it but this issue is really killing it for me, really would appreciate any help.

2022-07-05 22:53:43 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2022-07-05 22:53:43 Cannot find ovpn_dco netlink component: Object not found
2022-07-05 22:53:43 Note: Kernel support for ovpn-dco missing, disabling data channel offload.
2022-07-05 22:53:43 OpenVPN 2.6_git x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on May 30 2022
2022-07-05 22:53:43 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10
2022-07-05 22:53:43 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA2-512' for HMAC authentication

022-07-05 22:53:43 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA2-512' for HMAC authentication
2022-07-05 22:53:43 TCP/UDP: Preserving recently used remote address: [AF_INET]54.193.147.96:1194
2022-07-05 22:53:43 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-07-05 22:53:43 Note: enable extended error passing on TCP/UDP socket failed (IPV6_RECVERR): Protocol not available (errno=92)
2022-07-05 22:53:43 UDP link local: (not bound)
2022-07-05 22:53:43 UDP link remote: [AF_INET]54.193.147.96:1194
2022-07-05 22:53:43 TLS: Initial packet from [AF_INET]54.193.147.96:1194, sid=09f4a736 1c27241b
2022-07-05 22:53:43 VERIFY OK: depth=1, CN=ChangeMe
2022-07-05 22:53:43 VERIFY KU OK
2022-07-05 22:53:43 Validating certificate extended key usage
2022-07-05 22:53:43 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2022-07-05 22:53:43 VERIFY EKU OK
2022-07-05 22:53:43 VERIFY OK: depth=0, CN=server
2022-07-05 22:53:43 WARNING: 'auth' is used inconsistently, local='auth SHA2-512', remote='auth SHA512'
2022-07-05 22:53:43 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2022-07-05 22:53:43 [server] Peer Connection Initiated with [AF_INET]54.193.147.96:1194
2022-07-05 22:53:45 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2022-07-05 22:53:45 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route 10.1.0.0 255.255.0.0,route-metric 1000,route-gateway 10.13.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.13.45.126 255.255.128.0,peer-id 39'
2022-07-05 22:53:45 net_route_v4_best_gw query: dst 0.0.0.0
2022-07-05 22:53:45 net_route_v4_best_gw result: via 192.168.254.254 dev eth0
2022-07-05 22:53:45 ROUTE_GATEWAY 192.168.254.254/255.255.255.0 IFACE=eth0 HWADDR=10:62:e5:e2:bd:74
2022-07-05 22:53:45 TUN/TAP device tun0 opened

[uneven wind]

check the pinned messages

[scarlet thunder]

Hello everyone!

I have been stuck for quite long time in one room NMAP Task 14 (https://tryhackme.com/room/furthernmap) and on the beginning there was an IP address to connect to... but now it just says: MACHINE_IP

Is there an error on this room or am I doing something wrong? There was an IP address before... it looks like MACHINE_IP is a variable that has broken link to the database.

[weary spindle]

You need to start the machine.

[scarlet thunder]

Ooops! I'm starting it now... jesus... shame on me if it's this... Thanks 🙂

[weary spindle]

within 2 min(s) MACHINE_IP will change to 10.10.xxx.xxx

[scarlet thunder]

I have the machine started but no change yet...

[weary spindle]

Give it another minute. 🙂

[scarlet thunder]

no problem, I'll wait 🙂

[weary spindle]

If it doesn't change, refresh the page.

[scarlet thunder]

still the same 😦

[crystal marlin]

Did you press the green "Start Machine" button in task 1 or the blue "Start Attackbox" button ?

[scarlet thunder]

Blue one

Oops, I believe is the other one...

[crystal marlin]

That's the issue, the blue ones are the attacking machines, the green ones are the target machines

[scarlet thunder]

ohhhh I see... thanks a lot!! Hopefully it will work!

yeah!!! Thanks a bunch!!!

(I feel like an idiot...)

Completely forgot there was a target machine to start... arrrgghh!

[crystal marlin]

Nah, happens if you are not used to it 🙂

[scarlet thunder]

hehehe thanks 🙂 I'll get better! 🙂

[weary spindle]

That's on me.

I should have specified.

[scarlet thunder]

at this point I should have remember it but I left this lesson half done and I completely forgot it

[cloud edge]

Living off the land room, i am unable to access the machine, (i also tried from xfreerdp)

[cloud edge]

Phishing room , Gophish is unable to load dashboard, campaigns, user & groups and etc. Result : loading for ever....

[lucid pine]

Hello guys i was trying to run openvpn but its showing me error , can any body solve it

[crystal marlin]

Show the full output please, including the command you ran, not just a single line

[crystal marlin]

Did you alter your .ovpn file so that there is no line with dev tun ?

[lucid pine]

no i haven't changed it

[crystal marlin]

Could you show a screenshot of the first few lines ?

Other than that, just try to use sudo openvpn --config /yourconfig.ovpn --dev tun0

[lucid pine]

no its not working

[crystal marlin]

Not working could mean a lot, screenshot pls 🙂

[lucid pine]

its now worked

the .ovpn file is null nothing there

[grim current]

I did what you said but it still doesn't work

[weary spindle]

use sudo

and path to file.

[grim current]

already

How can I downgrade to version 2.5.6

[celest wadi]

It's pinned in this channel

The first pin 👀

[cloud edge]

I get the nginx error, and even if wait another 30 seconds and try again, its not working ! Thanks for the response

[scenic torrent]

Gave +1 Rep to @gray loom

[barren jewel]

Soooo about the OpenVPN.. I followed the steps as instructed yet I cannot connect

after adding data-ciphers AES-256-CBC it says --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

so after adding data-ciphers-fallback BF-CBC it says WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.7

[celest wadi]

You could try downgrading the openvpn version to a stable/working one

[barren jewel]

Both cases, it tries to connect and keeps loosing connection

[celest wadi]

If you want to, the script is pinned in this channel

[barren jewel]

2022-07-06 20:22:46 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2022-07-06 20:22:46 TLS Error: TLS handshake failed 2022-07-06 20:22:46 SIGUSR1[soft,tls-error] received, process restarting 2022-07-06 20:22:46 Restart pause, 5 second(s)

[barren jewel]

I did have 2.5.5 just 2 days ago and it worked just fine

After issues I went ahead with 2.6

[celest wadi]

Heh, the update messed up thm configuration

[barren jewel]

Issues again

[celest wadi]

AFAIK, 2.6.0 has issues, not the previous versions

[barren jewel]

didn't update. started having issues at 2.5.5 >> updated >> still isues at 2.5.6

[celest wadi]

2.5.6 works with thm,

It's what I've got going at least

[barren jewel]

yep it's not 2.6 it's 2.5.6 my bad

[celest wadi]

Can you confirm with openvpn --version?

There shouldn't be any errors with 2.5.6

[barren jewel]

OpenVPN 2.5.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 20 2022 library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 Originally developed by James Yonan etc etc

[celest wadi]

Try regenerating the vpn config file

[barren jewel]

2022-07-06 20:35:55 OpenSSL: error:0909006C:PEM routines:get_name:no start line 2022-07-06 20:35:55 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib 2022-07-06 20:35:55 Cannot load inline certificate file 2022-07-06 20:35:55 Exiting due to fatal error

This is really pissing me off.. even after regen the file I'm getting this

[celest wadi]

That's a new one

[barren jewel]

Before it tried to connect. now it won't even try

[crystal marlin]

That's a faulty config, have you used the EU VIP server by any chance?

Regardless, change vpn server and get a new one

[barren jewel]

no IN-Regular-1

[celest wadi]

Hey, I've got that one

Other regenerating and updating your system, not a lot of fixes I can think of

[barren jewel]

OHHHHHHHHHHHH it worked

[celest wadi]

🥳

[barren jewel]

thanks bro/sis

[scenic torrent]

Gave +1 Rep to @celest wadi

[late coral]

why I don't have permission to add photo here?

[crystal marlin]

You have to verify first

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[late coral]

i am solving lab of port swigger and trying to bruteforce login page hydra is able to find username but not password why?

username and password file are given in labs already

so there is no such chance that password will not contain in that file

@crystal marlin ?

@barren jewel ?

[crystal marlin]

The support channels are for TryHackMe related issues, so please ask in #infosec-general or #general if someone is willing to help

[late coral]

ok thanks

[hollow cradle]

hello

how do i get my certificate with my real name?

[weary spindle]

You put your real name in before you generate it.

[hollow cradle]

when i click the blue button, it just opens a new page with my username on the certificate

it doesnt give me the option to put my real name

[weary spindle]

Is your real name there?

[hollow cradle]

yes

[weary spindle]

Did you put your real name there after you generated it?

[hollow cradle]

maybe, I did this all a while ago

if that causes this, then probably

[weary spindle]

You can't change it after it's done.

You'll either have to stick with your username, or use photoshop.

[hollow cradle]

fr?

that really sucks man

[weary spindle]

I wouldn't worry too much about it, they're not professional. It's just a way of saying I took part in x as my hobby.

[hollow cradle]

well I originally generated it with a username because it was just for fun, now I want to put it on my linkedin profile, but I think my username is kind of childish

I want to do the link, so photoshop doesnt cut it

do you know if future certificates will use my full name?

because if not, i might honestly just get a new account

[slate nymph]

Yo guys im having trouble with tryhackme vpn? I know how to connect to opvn as I Have done it with HTB but im getting trouble now

S-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
2022-07-06 16:50:22 ERROR: Failed to apply push options
2022-07-06 16:50:22 Failed to open tun/tap interface
2022-07-06 16:50:22 SIGUSR1[soft,process-push-msg-failed] received, process restarting
2022-07-06 16:50:22 Restart pause, 40 second(s)

[hollow cradle]

did you do this https://www.tryhackme.com/room/openvpn

[slate nymph]

will do it now

[hollow cradle]

is your ovpn install fresh?

[slate nymph]

ye klatest

[weary spindle]

If your real name is set, yes.

[weary spindle]

Check the pinned posts.

[weary spindle]

First message should fix it, if not, roll back your VPN to 2.5.6

[slate nymph]

worked thank you

[hollow cradle]

as it says here, try downgrading to 2.5.6

ah okay

nvrm lol

[hollow cradle]

thanks man, take care

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

Happy Hacking!

[last geode]

I am running 2.5.6, still not working

changed the .ovpn file and checked, nothing works.

[weary spindle]

Have you checked the THM support script?

[last geode]

where ? what is that ?

[weary spindle]

https://github.com/tryhackme/openvpn-troubleshooting

Download and run that script (just like you would that one)

[last geode]

yeah, will do

um......

[crystal marlin]

Seems to be clear what you have to do?
Regenerate your vpn config, you might even have to change server

[last geode]

Done those

[crystal marlin]

From what to what server have you changed?

[last geode]

from IN to EU

tried others also

[crystal marlin]

And it always complained about inline certificate ?
Or different error on different servers?

[last geode]

does time zone matters ?

[crystal marlin]

Time zone don't, as far as I know, as long as you have the time set correct for your zone

But run the config directly please, so without the script so that we can see the output

[last geode]

how to run config directly ?

[crystal marlin]

So sudo openvpn yourusername.ovpn

[last geode]

ok

[twilit frigate]

Hello I'm not able to connect to Exploitation of AD lab can anyone help with this issue

[weary spindle]

#exploiting-ad I'll help you.

[last geode]

hey thanks, Now I am connected right, I changed the time zone.

[twilit frigate]

DM ?

[weary spindle]

No, go to the thread there.

[crystal marlin]

You changed the timezone to what?

Or the system time wasn't right ?

[last geode]

to EU

actually system time was something else

[crystal marlin]

So just that I know, the time for the timezone you had previously wasn't right?
Or was it?

[last geode]

NO It wasn't right

[crystal marlin]

Alright

[last geode]

thanks ❤️

[cloud edge]

If i remember correctly it was a 502, i tried again after some hours and it printed out a "Hmm. We are having trouble finding that site.", i tried again after some time and it worked ... idk 😄

[naive dust]

does anyone know how to fix it?

?

I'm sorry I don't speak English XD

oh tnx

[wary elm]

Thx for the pins, finally connected again after a long research which sadly only ended on the discord and not started there

[naive dust]

none of the help on the pages and messages with pin works

solutions don't work

how to edit the data line

the same

[celest wadi]

Well, this seems to be going in circles

[naive dust]

OpenVPN 2.6_git x86_64-pc-linux-gnu

vale lo intentare

gracias

works tnx

I'm sorry but I don't know much English

[naive dust]

just with that I solved it thank you very much

[scenic torrent]

Gave +1 Rep to @gray loom

[naive dust]

+10

[acoustic pier]

[teal tinsel]

Hi , I have replaced the above line in the openvpn config file but now issuing the ssh command, i get tryhackme@10.10.86.61: Permission denied (publickey).

that was a typo Content Discovery

OMG, feel so dumb now. Thanks so much !

[scenic torrent]

Gave +1 Rep to @gray loom

[teal tinsel]

👍

[pliant peak]

hello i need some help. i've done everything as it says in the pinned messages but i still cant open my thm VPN. Is there some additional stuff to do?

done, i was being dumb ahahaha

[teal tinsel]

What is the error message you are getting

[pliant peak]

sudo openvpn mora404.ovpn
2022-07-06 14:50:34 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2022-07-06 14:50:34 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2022-07-06 14:50:34 Cannot find ovpn_dco netlink component: Object not found
2022-07-06 14:50:34 Note: Kernel support for ovpn-dco missing, disabling data channel offload.
2022-07-06 14:50:34 OpenVPN 2.6_git x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on May 30 2022

same as this one

someone already posted before but the thing was my version for some reason is not 2.6 or 2.6.git

and i've already updated and stuff so i just changed "data-ciphers AES-256-CBC" to "cipher AES-256-CBC"

and now its running fine 🙂

[teal tinsel]

OK good

[sleek jackal]

ignore it and report the person.

Did you click the link?

[naive dust]

Nope I just wanted to see first

[sleek jackal]

Did a box come up asking you to verify yourself or anything?

[sleek jackal]

and why would you join this server and the first thing you post is in the tech support channel asking about a sketchy link? You haven't even been in the server an hour and you didn't even say hello in general chat or anywhere else. What made you decide to join this server?

[somber spindle]

[waxen sand]

he's in

[sleek jackal]

@zealous yoke

all yours

[naive dust]

I seen a verified mark by it and it talked about the thing i needed help with

[naive dust]

Yes I verified in this server

[broken bear]

@sleek jackal Ease up a bit. If you think something sketchy is going on, ping a mod first. Please don't minimod.

@naive dust Law enforcement usually doesn't like it when extortion or blackmail is happening - if you think you are a victim, your first move should be to contact law enforcement and get in touch with a lawyer

[naive dust]

Yeah i just knew a crowd of people that would have the tools to do something like this and didn’t know if they had Finally came up with a means to do it

I was just worried for a moment and now I realized it was irrational

[broken bear]

That said, what you've said sounds like a very common scam tactic. "I have bad photos of you from that time you sent them to a person off your contact list!" Typically this is nonsense, they got a contact list off some compromised service. Like skype, or your facebook friends list.

[naive dust]

He’s all good with me I don’t blame him lol

[naive dust]

Ok that’s what I thought but until today I never new about It

Also I seen this had some cybersecurity type stuff and I wanted to get into this at some point

[sleek jackal]

I'm just suspicious of everyone

[broken bear]

That's probably what it is. Haven't seen the message, so I don't know (nor do I particularly want to see the message).
If you think you are in any way in danger or someone is trying to extort or blackmail you, law enforcement is the way to go.

[sleek jackal]

its is a 2FA bypass scam.

[naive dust]

Lol I mean this is a server for ethical hacking

[naive dust]

Yeah that’s what my friend said

He said it would grab the token of my account and take my account

[sleek jackal]

you click the link but to connect to the server you need to 'verify' yourself. putting in your credentials bypasses the 2FA and grants them access to your account.

[broken bear]

We get a lot of people who show up and think that means someone here will hack their partner's instagram to check DMs to see if they are cheating.

[naive dust]

Yeah that’s what he said

[sleek jackal]

I would just delete the link from your message if it were me. Wouldn't want anyone who doesn't read the chat or know any better to get curious and hack themselves.

[naive dust]

Yeah that seems like that would be common

[sleek jackal]

again, that's just me.

[broken bear]

Yep.

[naive dust]

Nope it’s me too

[sleek jackal]

good deal

[naive dust]

Thanks guys!

[broken bear]

If the bot nukes a message, do not try to repost it by editing it to get around the filter

You got warned from the bot for posting the invite link, that should have been a red flag.

[naive dust]

Yeah I just thought it was for discord links in general I didn’t know y’all had a bot to weed out servers

[sleek jackal]

oh yeah... we got bots for everything up in here

[naive dust]

Seems like it

[waxen sand]

Lycan is the latest AI one added

may have been the twitter training that sparked the initial reaction to your question

[gleaming patio]

Hi guys, I'm having some troubele with the Phishing Lab

Where I need to place the defanged URL

it seems we need to remove the duplicate values because CyberChef displays duplicate values

but to be honest not sure how to identity those duplicate or extra values

anyone able to help me?

[naive dust]

Hi there, my discord id that was linked to my thm account got disabled and now I'm unable to link my thm account with this new discord account. Can anyone help me out?

[weary spindle]

@broken bear still around?

No, those messages were hours ago.

[weary spindle]

@zealous yoke Are you around?

[candid vessel]

Not able to set up the VPN connection. Can anyone help?

[celest wadi]

can you show your error plz?

[candid vessel]

I also tried the thm-troubleshoot script, changing the servers, regnerating the .ovpn file

nothing works

[celest wadi]

can you check what openvpn version you have with openvpn --version

[candid vessel]

okay

[celest wadi]

2.6.0 has errors with thm config

[celest wadi]

I meant the first words from the output

yeh, you've got 2.6.0

[candid vessel]

ohk

[celest wadi]

there's solutions pinned in this channel for fixes

[candid vessel]

Okay thanks

[celest wadi]

okay

[hasty bay]

Can someone form tech help me with Exploiting Active Directory I w8 2h and the state is this

[junior sandal]

Hi, Is anyone else having issues with the THM attack box? I'm trying to ssh into my target machine but I get a "connection failed" error.

Apologies, it says "Connection refused"

[celest wadi]

@zealous yoke I've been trying to use the IN-Regular-1 server but the config file just gives a bunch of errors, I checked and the "inline cert" and private key are empty, I've tried downloading it on two accounts and it's still empty, pinging you cause you might know how to fix it

[zealous yoke]

Let me take a look at this on our side (:

[celest wadi]

thanks :)

[scenic torrent]

Gave +1 Rep to @zealous yoke

[celest wadi]

P.S the eu regular ones work

[zealous yoke]

Does this happen even when pressing regenerate & waiting 30 seconds+?

[junior sandal]

@gray loom I'm busy with Netowrk services

[celest wadi]

yes, I've been trying for 30 mins or so and it's the same :/

[zealous yoke]

Alright thanks

Let me look into this

I see the problem

Raising this

[celest wadi]

thanks again :)

[dawn timber]

parallel_read returned NT_STATUS_IO_TIMEOUT ra room when try to get spark_2_8_3.deb does any on know how i can fix it

ls

[zealous yoke]

are you trying to transfer a file? What VPN server are you on?

[dawn timber]

im just using the thm ovpn

[zealous yoke]

but which server are you connected to? You can use https://tryhackme.com/access to see the server name

We have an issue with our IN-Regular-1 server atm

[dawn timber]

us-west-vip1

[zealous yoke]

Ah okay

Perhaps you just need to increase the timeout (especially if you're on a slow connection/long distance (the machine is running in ireland) you can use -t <seconds> to increase the timeout

[dawn timber]

im also using a kali vm

[celest wadi]

your connection is too slow

use the attackbox to download the file with smbclient

[dawn timber]

will i be able to cory the file over to me personal vm and if so do it scp the file

[celest wadi]

yes, you can copy it back, just setup a python http server and wget the downloaded file from the attackbox

[dawn timber]

ok ill try that

[zealous yoke]

yeah good shout Zeeshan

[celest wadi]

[dawn timber]

ty to both of you

[granite trout]

Hi ... Looking at the badges and specific the Security Awereness one ... I have completed the two modules on it. Shouldn't it unlock the badge ?

[surreal totem]

hey all
[5:09 PM]
2022-07-07 17:08:52 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2022-07-07 17:08:52 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2022-07-07 17:08:52 OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022
2022-07-07 17:08:52 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10
2022-07-07 17:08:52 Cipher BF-CBC not supported
2022-07-07 17:08:52 Exiting due to fatal error

[bronze vale]

Check the pins.

[dawn timber]

i got it to work ty so much for you help

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

no problem, I've had the same issue so I knew instantly :)

[dawn timber]

whats the bot syntax to give you rep

[celest wadi]

if you're using the IN-Regular server, then the config file has issues, switch to a different one

[celest wadi]

it's already done but it's + @dawn timber

[scenic torrent]

Gave +1 Rep to @dawn timber

[dawn timber]

cool ty again

[surreal totem]

Sure Zee, let me try that

seems you were right, was banging my head against an issue which was not on my end lol.

[celest wadi]

👍

[zealous yoke]

We're working on a fix for IN-Regular-1 as we speak (:

[surreal totem]

Great, Thanks 🙂

[tall flame]

hi, i am trying to connect to vpn with openvpn but it is not connecting. I tried other configs but it doesn't work. can anyone help?

can i send a photo ?

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[tall flame]

okay

[tall flame]

@brisk bough

Shall I apply what Zeeshan1234 does?

or Jalapeño | omn1j4bba

[brisk bough]

https://tenor.com/view/did-you-just-ping-me-gif-22421669

[celest wadi]

skill issue

[tall flame]

it worked, thank you men who helped

[granite trout]

Anyone ? 🙂

Is there any other module that i am missing here ?

[tawdry orbit]

Try to redo the second room by resetting progress and completing it a second time. Hopefully that will give you the badge. 🙂

[granite trout]

Sounds like a plan. ty

[scenic torrent]

Gave +1 Rep to @tawdry orbit

[cloud edge]

The living of the land room is still dead , for me (The remote desktop server has denied access to this connection. If you require access, please ask your system administrator to grant your account access, or check your system settings.)

[celest wadi]

if you think the room is broken, best to post in #room-bugs :)

[granite trout]

@tawdry orbit It did the trick 🙂

[zealous yoke]

@celest wadi issues re. IN-Regular-1 should be resolved now(:

[celest wadi]

it's still empty for me, I regenerated but no go

well, now the private key is there but no cert

[hasty dew]

did you guys fix the openvpn issue? it works fine now without changing the .ovpn files

[celest wadi]

kali updated(downgraded?) openvpn back to 2.5.7 so that might be it

[hasty dew]

thats cool

[celest wadi]

that's a lot of pepes 👀

[tepid fossil]

can someone explain the yearly activity system pls? does it counts only events? cause most of times it doesn't count in the yearly activity when I get my streak!

[crystal marlin]

Actually it's pretty straight forward

[tepid fossil]

are the Day Streak badges linked to events or streaks earned

[crystal marlin]

Streak

[slender granite]

The sed command has been removed from the sticky?

[plush kernel]

Don't know if this is the right place to ask, but my subscription ends today and I need to update the credit card being used and can't find a way/place to do that.

[crystal marlin]

Check one of the previous sub purchase emails you received, at the bottom of that email should be a link to a management page, I think you can update it there

[plush kernel]

actually, nevermind, I found a place I was able to do it from the email I received

[plush kernel]

thanks, I appreciate it, looks like I found it from the previous charge didn't work email.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[smoky magnet]

Is there a channel to contact Discord mods regarding issues about the Discord server itself ? I can't find any

[crystal marlin]

What issue ?

[smoky magnet]

Getting spam DMs from a user from this server (promotion of illegal stuff)

[crystal marlin]

Send me a DM with a screenshot of that pls

[deft birch]

Hello 👋 can anyone help me figure out how to change my country to the USA in my THM profile? Not that I’m feeling particularly patriotic or anything but now that I’ve tried changing my phone number’s country code and all that a dozen times, I figured it would be a good time to ask for assistance 😂

[plush bay]

check this message

@deft birch ⬆️

[deft birch]

Oh sweet thank you!! I was writing an email and thought “wait, discord!” and after I hit send I thought “wait, the pins!” because ofc it’s in the pins 😂 thanks!

[plush bay]

enjoy the old info by jabba

[mellow epoch]

I am getting this error while connecting to THM with openvpn

2022-07-08 03:50:09 OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.

[crystal marlin]

The first 2 pinned messages have a solution to this

[mellow epoch]

Alright that worked but now I cant access any machines

I tried accessing Openvpn machine

doesnt respond

timed-out

[spiral valley]

I've lost my streak despite completing questions on consecutive days

[marsh patrol]

Did you try refreshing the page? Sometimes that works for me.

[pure perch]

hi guys, im new to linux and i am not sure if I am doing this wrong.

I tried to ssh using given credentials but I cant get through.. what am i missing here? entered pass correctly..

[marsh patrol]

Does anyone else have this problem trying to use Attackbox in full-screen mode?

[pure perch]

thank you so much! I wasn't too clear on which machine was which. Thank you again! i completed the room!

[scenic torrent]

Gave +1 Rep to @gray loom

[sleek jackal]

that doesn't look like full-screen mode. what does the tray to the left give you?

[marsh patrol]

The tray on the left is for showing full screen in my browser. Meaning that I won't see the tabs on the top or the url.

The problem I am having is that every once on a while, the attackbox will forget that it is supposed to be full screen, and it will change its resolution to be half-sized. Usually the problem can be solved by dragging the tab somewhere else, which forces the attack box re-calibrate.

[marsh patrol]

Like this.

[sleek jackal]

to be honest it almost sounds like a browser issue

[acoustic sand]

how do i link my thm to this account instead of Aries2#5915?

[inland knoll]

you'll have to talk to one of the discord admins

[acoustic sand]

ah nevermind then don't wanna bother them

[acoustic sand]

thanks

[scenic torrent]

Gave +1 Rep to @inland knoll

[rocky ruin]

my monthly subscription is over still i am able to access premium features.How?

[celest wadi]

what premium features? on the site or discord

[naive dust]

How come I’m not levelling up?

[crystal marlin]

Because you already max lvl ?

[celest wadi]

[naive dust]

Oh yeah🤦‍♂️😂 I thought max was 15

[celest wadi]

if you want more info

!docs levels

[sharp bison]

TryHackMe

View all the TryHackMe levels & their point requirements

https://help.tryhackme.com/using-tryhackme/what-are-levels-on-tryhackme

From TryHackMe with ❤!

[deep spire]

Sounds like you have another window with the attackbox open somewhere. when that window refreshes the attackbox will resize. (happens to me on the regular, just refresh the bigger window

[junior sandal]

Hello,

So I'm currently running Kali as a VM, which has a stable connection. However, I'm unable to connect the kali machine the the THM OpenVPN.

After running > sudo openvpn [file_name].ovpn I can see the VPN IP address is shown but the command in the terminal keeps running, no session is actually established.

I have downloaded new .ovpn files and switched VPN servers but I'm still having issues.

Any ideas on how I can resolve this?

No..

[cobalt perch]

Hello, I managed to set the Sticky bit on bash but for some reason it stills opens up as www-data, why is that?

The owner is root and it should open up as root, doesn't it?

[celest wadi]

start the bash in your current directory as a process

if you just run ./bash it takes your real uid, guid instead of the euid (effective uid)

[jovial mango]

If i am not wrong you have to use -p

[cobalt perch]

I'm sorry, what do you mean as a process?

[jovial mango]

||./bash -p|| i guess it should work

[cobalt perch]

It did work! does the -p flag tells it to use the suid?

[celest wadi]

no there's no privileged mode, that would be security hole

[jovial mango]

Can you explain me too? About this -p?

[celest wadi]

read plz 🙂

[jovial mango]

Yeah i meant that but you know my weak english

[cobalt perch]

my english is also not the best and that explanation is quite difficult for me to understand

[jovial mango]

Thanks @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

best to read up on bash uids, effective uid, etc :)

[cobalt perch]

I will, thanks!

[junior sandal]

It's working now. Thanks

[scenic torrent]

Gave +1 Rep to @gray loom

[lyric tree]

Im am doing the beaching Active directory network, and i am supposed to use the responder tool for man in the middle attacks. But im getting a deprecation error saying setDaemon and ssl sockets are deprecated. any idea on how to fix this? there is no specefication on what version of python im supposed to use.

[compact summit]

hello again another issue with Openvpn again after update,

openvpn Goat73.ovpn
2022-07-08 09:23:58 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2022-07-08 09:23:58 OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022
2022-07-08 09:23:58 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10
2022-07-08 09:23:58 Cipher BF-CBC not supported
2022-07-08 09:23:58 Exiting due to fatal error

[celest wadi]

#breaching-ad :)

[compact summit]

any help would be very appreciated

[celest wadi]

can you show a screenshot of your ovpn file? specifcally from the <ca></ca> portion to check if it's empty

[celest wadi]

if it's something like this, then that's a bad config file

[celest wadi]

just saw this and it's working correctly as I get the same warnings but I was able to complete the tasks

[lyric tree]

yea, i let it run for 20 minutes and then finally it worked, thx anyway

[scenic torrent]

Gave +1 Rep to @celest wadi

[marsh patrol]

I always have another window with attackbox open, and that is the primary one that has the instructions I am following. It would be nice if opening attackbox in full-screen would stop the attack box from showing up in split-screen mode in the primary window. Is there any way to do that?

[inland knoll]

you should verify your thm with discord so you can upload screenshots

discord text is impossible to read

[deep spire]

Yup, press the Exit Split View button. if you need to go back into it there's a "Show split screen" button at the top of the room

[naive talon]

or at least best practices?

[marsh patrol]

Thanks. I always thought that the exit screen button would turn off the full-screen window.

[scenic torrent]

Gave +1 Rep to @deep spire

[naive talon]

oh ok

sorry I remove it and send in general thanks

[compact summit]

its not letting me upload a screenshot

[celest wadi]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[inland knoll]

verify

[celest wadi]

you'll have to verify your profile

[compact summit]

verify

[celest wadi]

what?

[inland knoll]

read the link above

[inland knoll]

how about the beginning?

[compact summit]

do you mean the second photo i sent

[inland knoll]

beginning of the file

oh nvm

[crystal marlin]

Show a full screenshot of the output you get when trying to connect to the VPN, including the command pls

[unborn inlet]

So I recently typed in an unknown IP and I have little to no knowledge on the area of the subject so im scared that typing in the unknown ip into my browser will hack me
Do I need to be worried?

[celest wadi]

try changing your vpn server to EU-Regular-2 and downloading the config again

[winged patio]

Put it in ip lookup or curl it

[crystal marlin]

Mh, not sure what the issue is, sry :/

[inland knoll]

yeah that's odd

[celest wadi]

I've gotten the same error but it was cuz of the bad config file

[inland knoll]

cipher negotiation failed

[celest wadi]

their's seems fine

[inland knoll]

config looks okay. Looks are deceiving i guess.

[compact summit]

thank you so much really appreciate it, that worked

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

[crystal marlin]

What worked? Changing server? And if so, what server did you use when it wasn't ?

[compact summit]

I changed the server to the EU-regular-2. And I think it was one of the US VIP2 ones

[naive dust]

Hello,
I am planning to buy premium yearly can someone please tell me if I take the yearly subscription it shows 72$ so is it one time transaction or it goes monthly

[weary spindle]

Annual is one time.

[ashen cipher]

I have turn off my firewall and also regenerate OpenVPN by changing server, though it's not work

[ashen cipher]

Anyone knows this issue how to solve?

Yup, there is no solution!

[celest wadi]

I almost know for a fact that the solution is in the pinned messages if you havn't done any changes to your vpn config file

your openvpn version is 2.6_git

[opal quartz]

Hi, I can´t connect through vpn. Anyone can help me?

I get the following error "ERROR: Failed to apply push options"

Failed to open tun/tap interface

[ashen cipher]

Yes,

[inland knoll]

follow the 2nd pinned message

[ashen cipher]

I have edit this. But not working

[inland knoll]

odd...

[weary spindle]

Tried rolling back Openvpn?

[ashen cipher]

Yup several times. Same problem.

[weary spindle]

Back to 2.5.6?

[ashen cipher]

ya

[inland knoll]

oh my...

[weary spindle]

Regen the vpn?

[ashen cipher]

Ya done. But same issue🤔

[celest wadi]

try the EU-Regular-2 server for the vpn config file, I had the same issues and it worked for me and another user 👀

[high tundra]

I have been doing the previous advents of cyber, and day9 from 2019 is impossible to complete

This IP is dead

[celest wadi]

yea, that one is borked IIRC

check writeups for solutions and such

[plush bay]

or ask shadow

[high tundra]

gimme the flag homies

[celest wadi]

the flags are literally public

won't share the sites but the're pretty easy to find ngl

[plush bay]

okay to dm it right???

[high tundra]

I already found it, but thank you anyways

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

oh okay

Robert was slightly looking into maybe fixing this task but seems it might take a lot longer or not happen at all

[ashen cipher]

Done this!
Not work. It kills my whole day😒

[crystal marlin]

Provide a screenshot of the openvpn output when using EU-Regular-2 pls

[hushed vigil]

does a daily streak change sth?

[weary spindle]

Huh?

[hushed vigil]

the

[weary spindle]

The icon? no.

[hushed vigil]

no

i mean the streak

[sleek jackal]

the number changes as you complete task on consecutive days. Miss a day and it goes to 0

[plush bay]

if it hits some milestones you get badges... also if it is above 45 you get 5% off swag in the swag shop

other then that as you are a subscriber no it does no change anything

[hushed vigil]

ah ok

[hushed vigil]

Thank you

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

no problem

[crystal marlin]

And that's the EU server, right?
Also, wait longer as there is no error message in the openvpn output yet

[ashen cipher]

Right

[crystal marlin]

Did the VPN ever work for you previously, or that's the first time you set it up ?

[ashen cipher]

Ya vpn worked well before. This problem happen when I switch for sometimes Hyper-V and again back on virtualbox

[crystal marlin]

Have you tried to change your network settings in virtualbox?

[ashen cipher]

And I have disabled hyper-v. Yes I have reset the whole network and also change the virtualbox network(Switch to Bridge, NAT and also make private NAT).

[crystal marlin]

With the current config?
As there might be a chance that the previous server you used had issues, so changing the network settings wouldn't have solved anything

So you might want to try changing the network settings again with the EU config to see if that helps

Beside that, make sure your system time is correct

[silver jackal]

on encryption 101 course it says download files.. it downloads to local machine.. whats best way to get it in kali browser vm?

use vm to log into try hackme and download from there? or copy and paste ?

[crystal marlin]

Copy paste for that room should work easily enough.
But you could also use scp with the credentials found when pressing the info button at the bottom of the browser kali

[silver jackal]

ok gonna look into the scp option was thinking that to but didnt know about the credentials

where is the info button at

got it iw as running in fullscreen tytytytyty

[ashen cipher]

Everything was right. No network issue. Nothing else. By disappointed I just randomly change the servers >generate>run. Huh! finally, this server worked.....

[hushed vigil]

☠️

[ashen cipher]

Anyway, @crystal marlin thank you for your time.

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

Mh strange, well but at least it's working now.
Not a problem 🙂

[ashen cipher]

Ya,😍 in my opinion, Tryhackme should give an eye to this issuse just to pop up the exact problem and where is the problem. Because It will help us to fix it quickly.

[civic hazel]

hello

i got fatal error when i try to connect vpn

[paper frost]

what do i do with my token?

[crystal marlin]

You verify

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[paper frost]

thank you

[scenic torrent]

Gave +1 Rep to @crystal marlin

[civic wren]

Hi there, I am trying to connect to the VPN with OpenVPN but it keeps failing and restarts

"Failed to apply push options"

[crystal marlin]

You should post a screenshot of the output, so to be sure what the issue is, but I suspect the cipher issue, therefore check the first 2 pinned messages

[civic wren]

@crystal marlin

[crystal marlin]

Yep, it's the cipher issue, so either downgrade openvpn (1st pin) or edit your .ovpn file (2nd pin)

[civic wren]

Thank you

I will try that out

@crystal marlin editing the .ovpn worked! THanks!

[scenic torrent]

Gave +1 Rep to @crystal marlin

[hallow heart]

error if you click on the link
Linux Fundamentals Part 3 The find command - https://tryhackme.com/room/thefindcommand

Owner has made this room private.
If this is an error on our behalf. Please contact us.

[naive dust]

I'd like to know if it's possible to restore a task when you're creating a room, or I'll have to write it all over again, the site bugged and the task 2 cloned into task 3... overwriting everything I did

[latent wolf]

hi there is this where i report a problem with logging in on the website im a subscriber

[celest wadi]

what does that even mean? what's the problem you have

[latent wolf]

i cant login into the website despite resetting my password..

just looking for help , thank you

[celest wadi]

if you have issues recovering your account, please contact official support through email, below is the email address

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[latent wolf]

thank you once againn

[elder falcon]

Hi, how do i fix:
[sudo] password for kali:
2022-07-09 03:16:41 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2022-07-09 03:16:41 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2022-07-09 03:16:41 OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022
2022-07-09 03:16:41 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10
2022-07-09 03:16:41 Cipher BF-CBC not supported
2022-07-09 03:16:41 Exiting due to fatal error

I regenerated the configuration file and downloaded it

[crystal marlin]

Which vpn server are you using ?

[elder falcon]

EU-Regular-1

[crystal marlin]

cc @zealous yoke I saw that error a couple of times now, while the config file was looking fine, changing the server solved it, so I guess there is an issue with the server itself ?

[elder falcon]

EU-VIP-1 is working

[spare flare]

How to list my all active machine. Anyone knows?

[weary spindle]

https://tryhackme.com/api/vm/running

[eager fulcrum]

This channel is for VPN and other technical questions related to TryHackMe

[high tundra]

In Advent of Cyber 2019, day 13 it is impossible to escalate the priveleges, using the CVE-2019-1388

as the machine only has one browser

[native sparrow]

hi, I signed up for a premium subscription, can I cancel the renewal of the next period?

[timid rose]

2022-07-09 07:26:45 read UDP [EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNREACH|EHOSTUNR]: No route to host (code=113)

this my open vpn giving me anyone knows what this means

[celest wadi]

is your vm connected to the internet?

[timid rose]

ye

i think let me make sure

it isa

[celest wadi]

can you give a screenshot of the exact error message? that is hard to understand

[timid rose]

ok

[timid rose]

it works for 2 mins

[celest wadi]

can you follow the second pinned message in this channel to see if it fixes anything?

[timid rose]

then that happends

ok

[timid rose]

idk if that worked xd

[celest wadi]

can you curl 10.10.10.10/whoami to check if you're connected?

it should return your ip

[timid rose]

it does now becouse it automaticly connected again

[celest wadi]

well, that's a weird error ngl

but if it works, it works

¯_(ツ)_/¯

[timid rose]

ye but the same error will be there again

look

im restarting my whole pc i think

[celest wadi]

yeh, but I mean, does this give your ip still?

[timid rose]

nope

[celest wadi]

ah damn

yeh, updating and restarting might be a good idea

[timid rose]

alr

alr i will let u know if it happends again

@celest wadi i might know the problem i have turned on openvpn on my client and my vmaware

that might be the issue?

[celest wadi]

yep

[timid rose]

ah

[celest wadi]

don't open more than one tunnel interfaces, it'll clog up the transmission and such

[timid rose]

alr

so only use it on my kali vm

[celest wadi]

yes, only where you need it directly

[novel inlet]

Does anyone know how I can install john on my pop_os! install?

When I try to install it with apt install john I get version 1.8.0 out of 2013

[celest wadi]

you could get the latest john from github? not ideal but likely works

[novel inlet]

To be honest, all of that compiling seems so annoying

[celest wadi]

no releases or something?

[novel inlet]

AFAIK no

only source code releases/tags

[celest wadi]

docker could work if it's supported or in something like an ubuntu container

[finite aurora]

Will adding kali lists in sources work?

[celest wadi]

well, not sure how popos works but debian doesn't like it, one of the first paragraphs on "don't break debian"

[plain pivot]

Hello people. Help. How do I copy a file from LINUX to WINDOWS OS?

[finite aurora]

So we shouldn't use parrot repos in kali or something like that?

[celest wadi]

again not sure what parrot is built on but if it's debian based like kali then there should be no issue

[finite aurora]

Is one of them your virtual machine?

[finite aurora]

Gotcha

[plain pivot]

I’m using a virtual machine installed on my windows. Or maybe I don’t understand you.

[celest wadi]

"bi-directional copy paste"

[weary spindle]

Vmware or Virtualbox?

[finite aurora]

You can create a mount folder then

[plain pivot]

It’s Virtual Box.

[weary spindle]

Then do as Zeesh said, you may or may not need to install the expansion pack.

[plain pivot]

I’ve tried doing the Settings from the virtual box, still did not work. I dragged and drop tho.

[weary spindle]

This is also not THM related, so you may get asked to move over to #general or #infosec-general next time.

[weary spindle]

Do you have the expansion pack?

[plain pivot]

Guide me doing that please.

[plain pivot]

No. I’m not sure.

[weary spindle]

https://www.virtualbox.org/wiki/Downloads

You need that part.

[plain pivot]

Okay. The “all supported platform” part?

I’ll click and download.

[weary spindle]

Yup.

You may need to restart VB and your VM to take effect, I can't remember.

[novel inlet]

Use shared folders in vmware

[weary spindle]

They're not on Vmware.

[novel inlet]

ah

[plain pivot]

I can see a shared folder in the settings on my virtual box. I don’t know how to handle it yet

[crystal marlin]

Please use #infosec-general or #general for further help since this is not a TryHackMe related technical question

[novel inlet]

In that case, shouldn't the channel be renamed to thm-tech-support?

Ngl I didn't know that either before I just read the channel description

and I've been here for over a year

[crystal marlin]

Well as you said, there is a channel description, I used to read them right when I got into this discord.

Otherwise you would have to change a lot of channels, like thm-room-hints, thm-room-help etc

[crude barn]

Hi, I had gone through the pentesting tools series and noticed that both the metasploit and burpsuite modules are not checked to complete the path. When I go to the modules individualy it shows 100%, and I recieved the badge for both. However, the series will not show complete. I have tried resetting the room progress and redoing them but this did not work as well. Is this a bug or have I missed a step?

[cloud edge]

My sub ends at: Sep 14, 2022, i can access paid rooms but when i go to the networks tab: You don't have access to any networks. My username: d2hvYW1p

[weary spindle]

Just a quick Q, are you doing it in the VPN page?

[weary spindle]

As the Networks are at the bottom of the Learn and you need to join the rooms before you can download their VPN.

[naive dust]

Hello, I'm not sure if this the right channel to ask in but is it possible to remove an associated THM token to an old discord account and associate it to a new discord account? Or would that require a whole new token altogether?

[acoustic sand]

that requires u to chat to admin

[naive dust]

Thanks. I appreciate the info.

[broken bear]

Best bet is to find the git repo and install from there.

[novel inlet]

Welp yeah

[broken bear]

Do you have access to the old discord account?

[novel inlet]

I did that and compiled it (it works now, although I need to run it with full path)

[broken bear]

do you know how PATH and symlinks works?

but really, this isn't a THM tech support question, so if you want to continue the discussion, it should go to #infosec-general @novel inlet

[novel inlet]

Yeah, realized that earlier today

[novel inlet]

Yeah

I tried running with symlinks but john kept whining about specifying a home dir in $JOHN but it didn't detect it

[naive dust]

Hi juun, I don't believe so anymore. I had attached it to a protonmail account but deleted the discord account forgetting about the token connection. I tried using the original email address I had used just to double check but there's nothing associated.

[broken bear]

IIRC the only mod who can unlink that token is @stray cove . One of the senior mods might, but I think the account lookup part is locked to the rest of us.

[stray cove]

I can do a lookup yeah

[naive dust]

Thank you. What information would you need from me?

[stray cove]

message me via the tryhackme messaging system @ Hydragyrum. should be the same avatar as here.

will need the token though

[naive dust]

Will do. Thank you both. I'll try and message you through there now.

[stray cove]

not here though

yeah ok

for info

[naive dust]

OK should have it now looking at the pfp's they match.

[stray cove]

looks good, token has been unlinked

[naive dust]

Awesome. Thank you all for the help.

[stray cove]

np

[humble breach]

Hi guys, has anyone had problems these days with Openvpn on Kali? It returns this error to me

WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2022-07-09 18:15:26 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2022-07-09 18:15:26 OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022
2022-07-09 18:15:26 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10
2022-07-09 18:15:26 Cipher BF-CBC not supported
2022-07-09 18:15:26 Exiting due to fatal error

[plush bay]

what is your openvpn version???

[humble breach]

all this after update of the Kali distro

[celest wadi]

try changing your vpn server to EU-Regular-2 and regenerating, that looks like a bad config file

[humble breach]

ok I'll try and let you know

[celest wadi]

if the error is still there, the fix for this is in the pinned messages of this channel

[humble breach]

nothing i changed EU-Regular-2 gives me this error on tryhackme

Uh-oh, this page has been lost in the matrix

[celest wadi]

hmm, that shouldn't happen, try using the US ones

[humble breach]

in Italy ? I don't believe but I try

i used this AU-Regular-1 it seems to work,

@celest wadiThank you for your help

👍

[surreal totem]

Hey Guys, is it a good idea to go through eJPT exam in wsl2 kali distro?

[sour maple]

Hey guys i recently got win11 and had to re-install wsl2

after that i can't stop vmmem from running even when i dont use it

when i wsl --shutdown it starts up automatically after like 15 secs

its taking a lot of memory any help guys??

[crystal marlin]

None of these are TryHackMe related technical questions, please use #infosec-general or #general guys 🙂 @surreal totem @sour maple

[pallid folio]

Im on the breaching AD room, and i cant seem to get the DNS working. My access page shows that i am connected through openvpn, and i set up all the DNS steps how the page told me to. When i NSlookup the dns test, it cant find the server. What should i do?

** server can't find thmdc.za.tryhackme.com: NXDOMAIN

[celest wadi]

have you changed, /etc/resolv.conf and /etc/systemd/resolved.conf ?

[pallid folio]

Yep i have 😦

[celest wadi]

done systemctl restart NetworkManager? try it again and share the contents of /etc/resolv.conf plz

[pallid folio]

Both show the THMDC ip

[pallid folio]

did the command a few times and everything stayed the same in the files

# Generated by NetworkManager search 1.1.1.1 nameserver 192.168.1.1 nameserver 10.200.48.101

[celest wadi]

the network may have died but that's a lower probability

[pallid folio]

that was in /etc/resolv.conf

[celest wadi]

place your thm nameserver at the top, I had some weird issues

[pallid folio]

Ok

Do i still keep the ..1.1

the 1.1

[celest wadi]

this might also be an issue

yeh, you obvioulsy need one for internet access and the like

[pallid folio]

ok

when i do the restart network manager it goes back to the bopttom

[celest wadi]

it shouldn't be search tho just nameserver 1.1.1.1

[weary spindle]

Network manager will make it go to default.

[pallid folio]

Hey its fixed 😄

not sure how lol

[pallid folio]

Search is 1.1.1.1 so i can access outside internet

I guess putting it on top worked 🤷‍♂️

thx @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[weary spindle]

Are you on VMware?

[celest wadi]

yeh, not entirely sure of the syntax there

[pallid folio]

virtualbox

[celest wadi]

you're welcome 🙂

[weary spindle]

Ah.

[pallid folio]

thx @weary spindle

thx @weary spindle

[weary spindle]

Rep won't work.

[pallid folio]

huh bot not working

[celest wadi]

there's a cooldown for 5 mins

[weary spindle]

5 min cool down, don't worry about it.

[pallid folio]

ah got it

[celest wadi]

• @weary spindle

[scenic torrent]

Gave +1 Rep to @weary spindle

[pallid folio]

how can u see someones rep

• @pallid folio

[celest wadi]

-rep @username in #bot-commands

[weary spindle]

Or leave out the username if you want to check your own.

[crystal marlin]

What's in your /etc/hosts ?

And you have the target machine started in the 2nd screenshot ?

Okay, because it's saying "Machine IP" so therefore I assume you have used the IP of the attackbox ?

Instead of the target machine

Are you connected to the thm vpn ?

Mh, can I have the current target machine IP to try myself ?

Ye that's fine

Mh, seems to work fine, could you do ip a s and check if there is only a tun0 interface or any extra like tun1, tun2 etc. ?

Okay, then that's most likely the issue.
You are only supposed to have tun0.
So do sudo killall openvpn
Then connect again to the vpn.
Wait a minute then check ip a s again if there is only a tun0 now.

[forest yoke]

guys

Where is the search bar in the Firefox debugger?

I can't find it

[crystal marlin]

Not a THM related tech question, but did you try Ctrl + F ?

[forest yoke]

Now I have tried it

But it doesn't seem to work like it does in the image

Take a look

[crystal marlin]

Is that a THM room ?

[forest yoke]

yes

[crystal marlin]

Okay, but what's not working?
You entered admin in the search bar and it found admin ?

[forest yoke]

Oh no

sorry

The image is from tryhackme itself

It is supposed to show what to do

oh no wait

it worked

I had to click on the code

and then press ctrl + f

thanks so much

[empty wren]

Hey I emailed tryhackme about 20 days ago and haven't had a response back from them at all. I'm trying to change my payment info without losing my current subscription.

[gaunt surge]

I'm using kali installed on a laptop and when I import the .ovpn file from the THM site I'm unable to access any machines but I get a THM ip. I've tracked it down to a cipher mismatch. I added "-data-ciphers AES-256-CBC" to the .ovpn file and if I run openvpn from CLI and point it to that file I get a good connection and can access other machines. If I import the edited file and connect through the tray icon, it doesn't work. What am I missing?

[glad oyster]

Check out the pinned msgs 🙂

[woeful hedge]

You won't lose anything if you let the subscription go. After it lapses, you can add new payment info

[gaunt surge]

Ah, thanks. So just better to downgrade then? The pinned message doesn't completely fix the problem.

[scenic torrent]

Gave +1 Rep to @glad oyster

[empty wren]

Alright I'll do that then. I gotta wait a year then 🤣

[woeful hedge]

Yep, you should be able to cancel, the sub will continue, and then when it expires you can redo the payment

[tranquil hearth]

hi can someone help me with openvpn problem?

[tranquil hearth]

already solved

[manic raft]

is the thm website down? I can't reach it in browser, ping it or trace route it.

[woeful hedge]

Nope, seems to work

!website

[sharp bison]

TryHackMe

TryHackMe:

https://tryhackme.com/

From TryHackMe with ❤!

[woeful hedge]

Are you going to this link? Check for typos

[manic raft]

yes, I also tried NSlookup and that couldn't resolve

all the other sites work fine though

hmm... I seem to be able to access it from a different browser though

I'll look further into it, thanks @woeful hedge

[scenic torrent]

Gave +1 Rep to @woeful hedge

[naive dust]

Hello I wanted to ask if i buy monthly subscription today and after 15 days i want to get annual subscription can i buy it with the existing monthly subscription or do i have to buy it after the monthly ends

[weary spindle]

You'll need to wait until the month end I think.

[glad oyster]

@gaunt surge Does this not fix the problem?

[merry shale]

how do I change my country in the platform

I'm trying to change my country code in about me section, but after submitting its going back to Ukraine

[celest wadi]

https://tryhackme.com/api/user/update-timezone

[merry shale]

this link is redirecting to dashboard

[celest wadi]

it worked then

[merry shale]

Im still ukrainian

[celest wadi]

you have a vpn running other than the thm one?

[merry shale]

no

[celest wadi]

give it some time and try again with the link, >90% it'll work

[merry shale]

even if it redirects to dashboard?

[celest wadi]

if it redirects to your dashboard, that means it worked

[merry shale]

how will it work later if its not working now? I dont have any vpns turned on, or dont have anything related to ukraine.

I changed my ip to US, and now its showing US in my profile. I think the platform is not identifying my country from my actual ip

[celest wadi]

your ISP may be giving you an ip that's in another location, in any case, look up "my public ip" and check what's your location from that ip to confirm if you're that much bothered with it 🙂

[merry shale]

nope, my public ip address location is outside the Ukraine.

Lets just wait a response from one of the thm staff

[celest wadi]

if you want official support, it'll happen mostly from email

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[merry shale]

got it, thanks

[scenic torrent]

Gave +1 Rep to @celest wadi

[weary spindle]

If you use a VPN, that will influence how the time is set.

[merry shale]

I was having the problem before turning on the vpn too, I just tried to find the problem by changing my ip. Turns out, platform showed US when I changed to us, but not showing my country when I use the actual ip

[scarlet vigil]

Hi guys, please can anybody help me regarding the issue of not getting monthly hacker badge even after getting top rank on monthly leaderboard globally previous month?
I sent an email on this issue to support email 10 days ago but didn't get a reply!
Should I sent an email again or wait for the reply?
Sorry for asking!
I know only a single person is handling lots of emails, I appreciate his work.
But I am confused, did my email missed for some reasons?

[plush bay]

@bronze vale ⬆️

[bronze vale]

Do you have proof that you were top of the leaderboard? Because I'm 90% sure the top of the leaderboard last month was MrSpud

[mighty charm]

Hi All , I want to be premium and I am a student. How can I get student discount ?

[scarlet vigil]

Yup, I have
He was absent for last 3 days
Let me share SS

By the way, thank you so much for your response

[scenic torrent]

Gave +1 Rep to @bronze vale

[bronze vale]

Have you been using writeups/ answer dumps to answer questions?

[scarlet vigil]

Nope, I did it by myself
I was doing hard work 2 months

I just learned from writeups

[bronze vale]

I'm going to have to review your account before I can apply the badge:)

[scarlet vigil]

Ok no worries

Thanks for your precious time😇

[light vale]

I've updated Kali and i am getting this error now when i'm trying to connect to the vpn any ideas why?

Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

Do i need to do this again with Bella's command?

Nvm i regenerated the vpn file and it works now, read above somebody had the same problem after updating Kali

[civic hazel]

its gived to me

just try download 2.vpn

and try again

[light vale]

I just regenerated the same vpn file download it again and it worked

[civic hazel]

nice !

[marsh patrol]

What are these flashing blue squares about?

[manic raft]

@woeful hedge I figured it out, there was a proxy misconfigured on my browser

[hallow heart]

Copy/Paste does not work from machine ? nothing can go outside of the box. Is here a way to fix it ? I use browser machine

[pastel tinsel]

#general message

[hallow heart]

ty, i manually enter command but it won't find anything but when copy/paste users found.. weird

[latent plume]

Hello

[naive dust]

anyone here experienced with pyarmor?

[latent plume]

I hope i’m asking my question in the right section. How many computers will be necessary for setting up a Homelab for a beginner and Cybersec learning?

[naive dust]

as a beginner i recommend building a homelab in vms

not actual computers yet

well that is on you

does it have to be?

[latent plume]

so only 1?

[latent plume]

To run Virtual Machine i need a computer

[tribal burrow]

VMs are great for practice in like owasp juice shop bwaap and so. And as you learn things you can practice in VMs since there are things learned in THM

[naive dust]

Where is the clipboard in window machine for me to copy paste between the site and it?

[tribal burrow]

did you enable bidirectional things copy/paste in VMs

[naive dust]

@tribal burrow There is a connection error (The remote desktop server has closed the connection because it conflicts with another connection. ). I dont get it after several min of trying.

[tribal burrow]

sry is late here. We talk about local VMs or THM rooms ?

[naive dust]

THM rooms. Im doing Windows Privilege Escalation

[tribal burrow]

It might due to same port you might have some connection

[naive dust]

Am I suppose to terminate the splitview machine, while using the full screen?

Nope. It kill both.

Oh I see. When going full screen, there was an option to allow clipboard function in the top left concern, but I didn't click ok.

Dont need to do the bidirectional things anymore.

Thk anyway.

[gusty minnow]

How can i send photos

cuz its disabled

[knotty halo]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[knotty halo]

@gusty minnow :Click the link. Follow the process. Register on THM, then DM the bot, et cetera. It's all explained there.

[gusty minnow]

ok

i did it

so

[gusty minnow]

what do i do

[knotty halo]

That... is not looking good. Dropping you straight into UEFI shell is something that shouldn't happen unless something is fucked.

What hypervisor are you running, what distro is that supposed to be?

[gusty minnow]

ah i put the wrong arm in

its supposed to be the linux one not the windows 11 one

lol

[gusty minnow]

i have no idea

this is UTM

i was supposed to put in UBUNTU

[knotty halo]

Huh. That's a new one.

[gusty minnow]

time to wait 5 hours

[knotty halo]

Cancel it, wrong one for THM.

[gusty minnow]

alr

[knotty halo]

Find out what's right for ya, pull Kali from here: https://www.kali.org/get-kali/#kali-virtual-machines

[gusty minnow]

which one then

[stray cove]

What's your host os?

[knotty halo]

Mac OS.

[stray cove]

M1?

[gusty minnow]

yep

[knotty halo]

FML.

[gusty minnow]

l o l

[stray cove]

What VM platform?

[gusty minnow]

UTM

ARM

[stray cove]

I need to google this

[gusty minnow]

im gonna go off

ill see yall latr

[knotty halo]

@stray cove

UTM employs Apple's Hypervisor virtualization framework to run ARM64 operating systems on Apple Silicon at near native speeds. On Intel Macs, x86/x64 operating system can be virtualized. In addition, lower performance emulation is available to run x86/x64 on Apple Silicon as well as ARM64 on Intel. For developers and enthusiasts, there are dozens of other emulated processors as well including: ARM32, MIPS, PPC, and RISC-V. Your Mac can now truly run anything.

[gusty minnow]

I can run anything?

[stray cove]

Ok then the arm version makes sense

[gusty minnow]

the raspberry one?

[knotty halo]

You can not. ARM's the right choice, in your case.

[stray cove]

Seems to do x64 emulation at a performance penalty

[gusty minnow]

the arm one

[stray cove]

But use arm

Yeah that one

[gusty minnow]

let me download

[stray cove]

Is there a 64 bit one though?

[gusty minnow]

yeah

the one underneath

[knotty halo]

@gusty minnow Pull the 64bit version.

[gusty minnow]

k

[stray cove]

The latter one yes

[gusty minnow]

64 bit

this gonna take hours

[knotty halo]

Good. I'ma go smoke.

[stray cove]

Ah it's a qemu wrapper

[gusty minnow]

whats that supposed to mean?

[stray cove]

Uses qemu under the hood

That's not a bad thing

[gusty minnow]

as long as its not bad im fine with it

cause i have no idea what im doing

still got stacks of storage

[knotty halo]

Ah, that's what we're here for. We don't bite (Though I sometimes drip of sarcasm). The THM Modules are gonna walk ya through everything.

Though I strongly recommend familiarizing yourself with Linux in general before diving in, mind ya.

[gusty minnow]

all i gotta do is wait for the download

[gusty minnow]

ive never useed linux

[stray cove]

Mac os has a POSIX compliant command line

Well ish but it's zsh

[gusty minnow]

which means....(sorry I dotn know anything about this)

[knotty halo]

Thank root they moved on from an outdated-as-all-hell bash version.

[stray cove]

You can do the intro to the cli modules directly on your PC 😉

[gusty minnow]

cool

[stray cove]

For the most part

[gusty minnow]

the linux thing is like an app not changing my entire computer right?

[stray cove]

Better to have the VM set up though

It's a virtual machine

[knotty halo]

Yup. Don't worry about breaking anything on your host, it's all contained.

[stray cove]

So you're basically pretending to have a whole other computer on your computer

[gusty minnow]

ok, this means no malaware and stuff right?

[gusty minnow]

that is so cool

[stray cove]

Should be alright on that front

[gusty minnow]

cool thanks!

[stray cove]

I strongly suggest that you practice your research skills, it'll be the single most important skill needed for hacking

[gusty minnow]

researching?

[stray cove]

How to use search engines, how to understand what you're reading, how to apply what you've learned to a totally novel problem

Research

Also critical thinking

[gusty minnow]

oh gosh this is like school all over again

ATL skils

[stray cove]

Yup

It never ends

[gusty minnow]

this

approaches to learning

literally the most annoying thing in the planet

[knotty halo]

It'll serve you well if you want to do well in this field, friend. Like Hydra said, one of the most essential and necessary skills.

[gusty minnow]

alright thanks

did u change ur profile to macinsight

lol

[knotty halo]

Eh?

[gusty minnow]

mac in sight

u definetly changed it when i said i was using a mac

[knotty halo]

LOL. Nah, I've been using that handle for years.

[gusty minnow]

so close