site-support

[gusty minnow]

even closer

[gusty minnow]

i have it downloaded

[naive dust]

Is there a way to use my own personal kali linux virtualbox, and use it with the room machine, instead of using the attack box, or web kali?

[celest wadi]

yes, there is

download the openvpn config file from https://tryhackme.com/access

and use it with openvpn on kali to get connected

[knotty halo]

https://docs.tryhackme.com/docs/openvpn/troubleshooting/openvpn-troubleshooting/
https://tryhackme.com/access

[naive dust]

tq

[stark kettle]

anyone here?

[weary spindle]

Yes.

[knotty halo]

Nah. We're all just figments of your imagination. Nothing is real, nothing matters, nothing has value, you will die and rot, and when you die, we all will cease to "exist", for lack of a better word.

[merry shale]

why to use a virtualbox? dual-boot is a better option I think

[knotty halo]

Depends. Some machines can't spare the harddrive space, or the owner doesn't want to risk screwing up machine data, or half a billion other reasons.

[merry shale]

umm yep, but still its a better option ))

[weary spindle]

..Until you lose yours files.

[merry shale]

in my case, I havent lost any. my hdd is 1 TB and in 250 GB portion I run kali

[celest wadi]

that's some rick and morty, nihilistic stuff

[knotty halo]

Are we really having a disucssion on principles and preferences? I'd wager that #site-support isn't the place for that, now is it?

[weary spindle]

Just because it hasn't happened to you, doesn't mean it won't.

[merry shale]

actually, how can it happen?

[weary spindle]

Ask Zeeshan, it happened to him, he can tell you.

But I've also heard some cases of one of the OS deleting parts of a partition.

[knotty halo]

Plus, a VM I can run on my works virtualization cluster, which is infinitely more powerful and better-connected than my work-issued laptop. Half a TB of RAM, couple hundred TB of storage, the likes. Plus backup and highavailability, etc.

[celest wadi]

it's a bad idea generally

[knotty halo]

So, unless you have well-defined, specific use caes, dualbooting is meh at best.

[celest wadi]

really specific case, and not much applicable to the average joe

[merry shale]

hmm, I think there are no such risks if you do it correctly, I've done this in many times, done it to my friends laptops too, but havent faced that

[celest wadi]

I've been dual-booted for two years now and still am, it's very likely

[weary spindle]

There is.

Just like there is risks of your single boot OS corrupting.

[tall vale]

Hey all, I have not been able to get most machines to load in any browsers despite the OpenVpn room machine working just fine

[celest wadi]

can you curl 10.10.10.10/whoami to check if you're connected?

it should return your thm ip

[tall vale]

An IP was returned, how do I know its my THM IP?

[celest wadi]

ip a should show you a tun0 interface with the same ip

[tall vale]

The one that was returned is different than my eth0

[celest wadi]

yeh, check your tunnel tun0 one

[tall vale]

I did an echo

it said VPN down

damn

[celest wadi]

what did you try?

[tall vale]

if echo 'ifconfig tun0' | grep -q "00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00"
then
echo "VPN up"
else
echo "VPN down"
fi
exit 0

[celest wadi]

what is that even doing,

if you can curl your ip, you're connected

[tall vale]

Then I guess I am connected

[celest wadi]

yeh, it's likely some other issue

[tall vale]

Like I said, I could access the OpenVPN room

machine

but other machines are not working

[celest wadi]

which machine is it?

[tall vale]

vulnversity

[celest wadi]

ah mtu fix

is there more than one tun0 interface like tun1 tun2?

check with ip a s

don't remember but yeh, could be possible

[tall vale]

The network services room machine also did not work

Ok, I can still run nmap scans on the machines, but I cannot run gobuster

Well the actual webpages do not load. I mean I know you do not need them, but I would like to know why they do not load

How could I check

[celest wadi]

I can still run nmap scans on the machines,

you've answered this yourself

[tall vale]

https://tenor.com/view/star-wars-obi-wan-you-have-done-that-yourself-ewan-mcgregor-gif-17550781

scan almost done

nope, only ports are 21/22/139/445

So that means it isn't even a webpage?

[celest wadi]

not on port 80/443 etc.,

[tall vale]

I watched someone else do the vulnversity walkthrough and a webpage opened for them

I feel like a scrub right now

[weary spindle]

Vulnersity has a web page.

[weary spindle]

It has one.

[tall vale]

Is my firewall blocking me from accessing it?

I tried different browssers

[weary spindle]

No.

[vapid gorge]

Hi guys, I do follow instructions in room https://tryhackme.com/room/windows10privesc. Task 3. When I parste command sc config daclsvc binpath=""C:\PrivEsc\reverse.exe"" in powershell and got error
Set-Content : A positional parameter cannot be found that accepts argument 'binpath=\C:\PrivEsc\reverse.exe'.
At line:1 char:1

• sc config daclsvc binpath=""C:\PrivEsc\reverse.exe""

•   + CategoryInfo          : InvalidArgument: (:) [Set-Content], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell.Commands.SetContentComma
  

I do it again and check if have typo, but still stuck here

So, I need some help here

[weary spindle]

Use Nmap to find it.

[tall vale]

ok.. so I needed to specifiy :3333

AHHhhhhhh

[weary spindle]

There you go. 🙂

[tall vale]

it worked lol

I hate myself

thank you scrubs

[weary spindle]

You're welcome.

Happy Hacking!

[fossil pecan]

Hi guys i am having issue with connecting to server with openvpn it saying

2022-07-11 09:03:40 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10
2022-07-11 09:03:40 Cipher BF-CBC not supported
2022-07-11 09:03:40 Exiting due to fatal error

and some warnings

[celest wadi]

check pinned messages

also, @keen scroll sorry for stealing your script, had no idea it'd get pinned, thank you

[scenic torrent]

Gave +1 Rep to @keen scroll

[fossil pecan]

so the latest openvpn version has some bugs or not supported ?

[celest wadi]

yes

follow the second pinned msg

[fossil pecan]

thank you !

[pastel tinsel]

oh, my message got unpinned

guess they have fixed that now

[celest wadi]

[keen scroll]

Oh nevermind. It's all for the good

[celest wadi]

[fossil pecan]

sorry just saw your msg i have already tried second pinned msg solution its still giving same error

i will try the first one

[celest wadi]

nah, don't really need to do that

what's your openvpn version?

openvpn --version

[fossil pecan]

OpenVPN 2.5.7

[celest wadi]

yeh, do you have cipher or data-ciphers?

[fossil pecan]

data ciphers

[celest wadi]

use cipher regardless

[fossil pecan]

sould i put both cypher and data-ciphers

[celest wadi]

like that

[fossil pecan]

i used both its working now

[celest wadi]

if it works it works but best to only use the cipher AES-256-CBC line

[fossil pecan]

ok but it was giving me waring to use data-cipher before doing this

but i will check only cipher again

thank you so much

[crystal marlin]

Might want to ask in #exploiting-ad about that

Ah actually I don't even now if they'll be able to help reset, but I guess still worth a try

[wide mulch]

I mistakenly entered wrong port number but it accepted 😁 .

Oh wow, Magic

What's the logic behind. Can you please explain a bit.

[weary spindle]

So it's not too critical on typos.

[wide mulch]

Means it can accept a little wrong answer?

[weary spindle]

Sometimes.

[wide mulch]

Hmm interesting.

anyhow thanks @weary spindle & @gray loom for introducing THM answer tolerance feature.

[scenic torrent]

Gave +1 Rep to @weary spindle

[weary spindle]

+rep @gray loom

[scenic torrent]

Gave +1 Rep to @gray loom

[wide mulch]

@gray loom thanks

[weary spindle]

5 min cool down for rep points.

[wide mulch]

You was quick.

'&' doesn't work. Of course its not a compiler

Uhh not today 😁

[elfin urchin]

Hey gals & guys!

question!

how easy is it to hack someone who does not have a lot of protection?

[bronze vale]

Why do you ask?

[elfin urchin]

lol

funny story

my tinder date was cyber tech and he said he looked into me - and he know scary too many details

[gleaming quarry]

hi, someone know how to change payment details?

[elfin urchin]

now i want more protection :/ from creeps

@bronze vale lol

[bronze vale]

Block them and move on.
They probably just Googled your name lmao

[elfin urchin]

i know

but like in future

prevention 😄

and i know the general things

passwords n private things etc etc

anything else i should look out for?

VPN's?

are they worth it?

[bronze vale]

Keep your social media accounts on private, don't hand out personal information, make sure that your family members do not give out personal information to anyone, don't put your social media on your tinder profile, if they immediately say they're a hacker unmatch, don't click on any links at all

[bronze vale]

Completely useless in this situation.

[elfin urchin]

https://tenor.com/view/the-office-bow-michael-scott-steve-carell-office-gif-12985913

lol

wait

[bronze vale]

Also, you put your location in on Tinder so a VPN won't scramble your location regardless

[elfin urchin]

dont click on it

https://tenor.com/view/the-office-bow-michael-scott-steve-carell-office-gif-12985913

lmapo

[bronze vale]

You cannot embed as you're not verified

[elfin urchin]

it does not show gifs?

ah

[bronze vale]

But I'm aware of the gif:)

[elfin urchin]

lmao

im new to discord

lmao

haha

[bronze vale]

Haha, if that's their first interaction with you, they're a hacker for all the wrongs reasons imo

[elfin urchin]

yeahh

[bronze vale]

Personally I only tell her after I've taken over her network

[elfin urchin]

no he was very socially akward

lmao

like a lot

[elfin urchin]

hahahhaa

oh no

thats scary and cool at the same time

almost all

already are

but the thing is my phone broke lmao and now i cant access any social media 😄 which is good for me anyways haha

[slim frigate]

Ahm , can i get some help here 🙂

[elfin urchin]

with what? 😄 im a total expert 😉

[slim frigate]

I have installed CA of Burp Suite on the Firefox and set up the proxy on 127.0.0.1 ,
The browser still refuse to let me make any connection
could you help me on that

[elfin urchin]

ahhh yess ummm

have you tried turning on and off again? 😄

[weary spindle]

You must work in IT.

[elfin urchin]

haha

yeah 😄

[slim frigate]

Yeah

Bing is working

[weary spindle]

VM or OS?

[slim frigate]

Google is not

OS

[elfin urchin]

[slim frigate]

My system can not tolerate the VM 😦

[weary spindle]

or google.

[elfin urchin]

[slim frigate]

that's also possible 😂😂

i just typed "www.google.com

[elfin urchin]

lmao

thats not how it works

im a expert lmao

you guys are great!

thanks for helping out~!

[slim frigate]

sure one sec

Error

😂😂😂😂

damn..

[somber bay]

I have been trying to do some research regarding networking and although I feel I have a basic knowledge there is still a few questions I have, if anyone knows a lot about networking and would be down to dm me and help me out that would be appreciated

[slim frigate]

what did i do

[weary spindle]

Your hub.

[slim frigate]

God...

what should i do now

i can visit google with Chrome

but with firefox

it is dead

[weary spindle]

Turn. It. Off. And. On. Again.

[slim frigate]

did before , still the same

[weary spindle]

Can you visit bing in Firefox?

[elfin urchin]

awwwyeaaah! IM a ExperT!! 😄 😄

[slim frigate]

yeah

[stark kettle]

can i ask a general question in here?

[elfin urchin]

@gray loom

[slim frigate]

😂👍

[elfin urchin]

@stark kettle yes

[slim frigate]

yeah that's right

[weary spindle]

Have you tried clearing your cache/cookies?

[slim frigate]

i removed/install the whole firefox again

[elfin urchin]

ooh cache clearing works wonders, i recommend

[slim frigate]

How can i fix it

[weary spindle]

Yeah,

[stark kettle]

i live in an apartment and we all share 1 modem, is this dangerous?

[plush bay]

search online how to change dns

[crystal marlin]

Guys, lately this channel is getting used too much for topics not related to technical question to THM.
Please keep it to the right channels.

[plush bay]

for your operating system

[slim frigate]

Got it

[plush bay]

then try one like cloudflare or google or quad 9 for dns servers

[slim frigate]

i changed DNS recently

gonna remove it agian

[elfin urchin]

sorry! @crystal marlin

[plush bay]

oh sorry for keeping that none thm related content in here then

[slim frigate]

i apologize about it , Sure

Thank you bud

[scenic torrent]

Gave +1 Rep to @gray loom

[elfin urchin]

you guys are great! and i'm bored - if anyone is up to chat, I would be willing to chat tech haha. I mean tech support yes yes 😄

[weary spindle]

This channel is primarily for www.tryhackme.com

[elfin urchin]

its a website ?

[weary spindle]

Yeah, 🙂

Teaches Cyber security.

[elfin urchin]

lol, i know :3

[weary spindle]

So why did you ask if it was a website?

[crystal marlin]

If you want to chitchat, you are more then welcome in #general 🙂

[dense coyote]

just leveled up in thm. is there a way to update my role here?

[crystal marlin]

Just reverify with the bot

[dense coyote]

thanks!

[tall vale]

Hey all, I have been absolutely struggling to get my reverse shell to connect in the vulnversity room.

The ports match, my TryHackMe Tun0 IP is correct

do not have UFW

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[tall vale]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[tall vale]

rog

I am unsure on how many I have

when I do ip a, my tun0 does not even show up. its just eth0, docker, and lo

but when i do the http://10.10.10.10, that IP address is the one in my shell vim

on my windows

OS

should it be running in kali

ok

well we certainly dont want that

[lethal aurora]

Hey, I've emailed support twice now about changing my username. Still no response. Am I missing something here?

I think I've sent the first request ~2 weeks ago, and the last one was a few days ago

[kind yacht]

Hi team! I'm looking to get access to TryHackMe VPN through a restricted firewall, so they are asking me which IP/Protocols/Ports need to be whitelisted so we can connect through OpenVPN without any issue. Is there a place where I can find these?
Thanks in advance!

[livid breach]

ricerice1998#7391 is spamming scams via DM to this server's members

Don't follow any links he might send you

[zealous yoke]

-ban @deep kite spam garbage

[scenic torrent]

🔨 Banned ricerice1998#7391 indefinitely

[zealous yoke]

ty both((:

[inland sail]

Pento#3758 is spamming scam now also Pento#3758 has unique id 996186464406753382

[ruby egret]

I wasn't entirely sure where to put this but is there another smaller directory list rather than big.txt so i dont have to wait several minutes everytime to start a box

fair point lol, i've just always used big.txt and recently got involved in THM, just wanted to make sure most directories would fall under that

perfect thanks, im currently using seclists 😄

[gusty minnow]

hi

hydragyrum

the VM doesnt work

it keeps showing up as this

[fossil storm]

Hi, new to TryHackMe, im in the Network Services room and i followed the instructions to install OpenVPN. Unfortunately i think it messed up my internet settings on my laptop. Whether it says connected or disconnected in OpenVPN my normal internet connection is now not working. Not sure if the run as administrator instruction is what changed things or not. Please advise how i can get things back to normal

[fossil storm]

Thank you for your help, this worked

[scenic torrent]

Gave +1 Rep to @gray loom

[static wren]

@sharp bison I'm trying to solve a lab problem through connecting openvpn from my own machine.In my terminal it says 'Initialization successfully completed' but in tryhackme it doesn't show that vpn is connected.

I tried downloading and changing different vpn locations, but still the same result as before. I also tried changing from "cipher AES-256-CBC" to "data-ciphers AES-256-CBC", but still same result.

In this case how can I fix it?

[lusty glade]

Hello. Please how do I correct my name on my certificate? There's an error in the one I generated

[celest wadi]

you just pinged a discord bot, if it says initilization completed then it works, the https://tryhackme.com/access page is buggy and shouldn't be trusted
if curl 10.10.10.10/whoami gives you your thm ip, you're connected, if it's stuck you're not connected :)

[celest wadi]

you can't

once it's generated it can't be changed, you can change your full name in your profile so your next generated certificate has the correct one

(it's so people don't keep changing the name of a generated certificate and making one for 100 people with different names, not that they matter but yea)

[lusty glade]

Oh okay. Thank you

[static wren]

thanks. I will try "curl 10.10.10.10/whoami", but the question is "if It's stuck " what is the solution?

[scenic torrent]

Gave +1 Rep to @celest wadi

[celest wadi]

if it's stuck, check the openvpn if it's running, if there's multiple tun0 interfaces, etc., to see if somethings wrong

[static wren]

okay. thanks again

[scenic torrent]

Gave +1 Rep to @celest wadi

[little ivy]

I have some questions regarding Road warrior setup using Algo VPN. Should I bring the issue here or somewhere other Channel. Guide me please.

[crystal marlin]

Technical questions not related to TryHackMe you should ask in #infosec-general or #general

[little ivy]

👍

[pine flame]

Hi, I am not able to terminate a machine. When I click terminate machine, successfully terminated popup is displayed but the machine is not actually terminated.

Tried refreshing and logging off..nothing works

I was trying to terminate "Relevant" room.

[zealous yoke]

Hey there, what is your browser that you're using & the browser version (you can usually see this in the about section of your browser). I'll pass this onto our software team as a bug(:

[pine flame]

I am using Brave 1.40.107

I tried in chrome also

[zealous yoke]

Okie dokie let me pass that on. Thanks (:

You should be able to use this code-snippet in your browser console to terminate machines in the meanwhile (remember this will also terminate the attackbox). Or try firefox - I haven't heard any issues with firefox but only chromium-based browsers

@pine flame

Actually, out of curiosity, what is your OS as well (the OS that is running the browser)?

[pine flame]

I am using kali

bare metal

[zealous yoke]

2022.4? you can find out via cat /etc/os-release

[pine flame]

2022.1 actually

[zealous yoke]

Gotcha

Thanks(:

[pine flame]

@zealous yoke Thanks for helping out.

[scenic torrent]

Gave +1 Rep to @zealous yoke

[pine flame]

@zealous yoke Can i DM? I'm having some issue with my discord account. not able to verify my account to upload files in this chat.

[zealous yoke]

Yeah go for it thanks for asking

[scenic torrent]

Gave +1 Rep to @pine flame

[inner geyser]

Hello, I can't access the "https://LAB_WEB_URL.p.thmlabs.com" url from idor room. It gives me a 504 gateway timeout error. Please help!

[celest wadi]

[celest wadi]

you have to wait for it to change to an ip like https://10.10.10.10.p.thmlabs.com/

after starting the machine with the big green start button ofc

[inner geyser]

I did start the machine, but the IP didn't change :(
The machine has been started since like 40 mins

[celest wadi]

refresh the page :)

[inner geyser]

Okay I'll try that!

Still didn't change :(

[celest wadi]

can you show a screenshot? you'll have to verify your profile

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[inner geyser]

On it

oh I restarted my router and it changed nvm

thanks though!

[pine flame]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

What are the cmds/flags in using gobuster that doesn't show all the progress, but still show the (Remaining%). -z works however it too doesn't show (%) remain, so I just don't know how long to wait.

[zealous yoke]

You could probably pipe gobuster into pv if you want progress bars/percentage (assuming there isn't a config or switch for what you're looking for)

IDK how well it'd work though as a caveat; I haven't tried it myself

pv is better suited for things like scp, dd, etc

[naive dust]

@zealous yoke I will assume pv stated for pattern string, and verbose? However, not good. The (%) doesn't show up.
I not sure why my gobuster show the torrent of progress, while most blogs I saw in using gobuster just used dir, -u, -w.

[zealous yoke]

Mhhm. AFAIK pv works by looking at how much has already happened and what is left. Not quite sure the magic of the in-between personally. RE. > I saw in using gobuster just used dir, -u, -w

Could just be different versions? I honestly have no idea if gobuster shows percentage remaining (I don't recall it in how I use it)

[naive dust]

@gray loom They do, until I use -z . But I would still use this instead of seeing the torrent of progress, and then navigate up from thousand of them to see the relevant results.

[zealous yoke]

you're looking for an overall progress of the scan rather than the progress of a certain directory if I'm understanding right?

[naive dust]

@gray loom It should, but a bug?

[open adder]

Hello guys, I need help for a private ctf to test, does anyone have some expertise around pdf in ctf?

[sterile warren]

Hello everyone!! Hope you're doing good. I'm new here and just needed a little help with my openvpn for THM. Recently I've been getting "fatal error" message whenever I try to run. Any suggestions??

[jovial mango]

rerun the sudo openvpn <name of vpn file>.ovpn or regenerate vpn config file, hope it helps

[sterile warren]

I tried regenerating. Doesn't help. Also I'm running as root.

[jovial mango]

check pinned messages

[sterile warren]

Thank you!!!

[scenic torrent]

Gave +1 Rep to @jovial mango

[jovial mango]

your issue resolved?

[sterile warren]

Sorry It's still not. I'm running openvpn 2.5. The suggestion in the pins says I should not be affected but I am.

[crystal marlin]

Probably best to verify and show a screenshot of the openvpn output

But if it's the error I assume it is, then regenerating or changing server + regenerating your ovpn file probably solves the issue

[sterile warren]

Problem solved people. Thank you so much.

The issue was with the VPN. I changed servers

Sorry for distributing you all.

Apparently the <cert> </cert> tages were literally empty

Tags

Peace

[celest wadi]

was this the IN-Regular-1 server by any chance, I get empty tags too from that one, had to switch

[sterile warren]

Yes it was

[celest wadi]

[naive dust]

hello,
I tried to verify but it says that my token is already in use. I might have used an other account but I don't have access/use it anymore, is there any work around?

[weary spindle]

Mods.

Ask a mod. 🙂

[naive dust]

ok will do

[rotund basalt]

I believe there is an expired password causing issues with tryhackme.com/room/livingofftheland

[lofty rock]

hey guys
https://tryhackme.com/room/introtox8664
This room is private now ? 😦

[red badger]

Hey can someone help me with this when I am running openvpn with the THM VPN conf file I am getting this error
2022-07-12 14:25:21 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set. 2022-07-12 14:25:21 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers. 2022-07-12 14:25:21 OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022 2022-07-12 14:25:21 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10 2022-07-12 14:25:21 Cipher BF-CBC not supported 2022-07-12 14:25:21 Exiting due to fatal error

[jade crystal]

hey guys i need help, i lost the password for my gmail account and i tried to recreate a new password for my account but doesn't work. I need help

my recovery email for the email doesn't recieve any code

and my cell doesn't recieve any recovery sms

i tried but still don't work my recovery email, and the google contact is shit

okay, thanks for the reply anyway

[scenic torrent]

Gave +1 Rep to @gray loom

[gritty laurel]

Hello guys Im having issues connecting to the virtual machines on the site, I have downloaded the config file and ran it as root on my Kali machine, tryhackme says I'm succesfully connected via VPN but when I paste the IP of my machine to my browser it cannot be accesed?

I can visit 10.10.10.10

Im on the Practical Example of OS Security

Deploying the machine gives me an IP adress

Sure 1 sec

https://tryhackme.com/room/operatingsystemsecurity

task number 3

OMG!

I messed up

hahahaha

You are 100% right

I assumed there was a web server running but there is not

Geez im dumb

Anyways, thanks dude!

Yeah I did some other rooms where there was a web server running so I immediately thought there was going to be one

Thats what I get for not reading the instructions

and jumping a head

[hollow fable]

yo my vpn is not working i need help

[dawn timber]

whats it doing

[hollow fable]

not connecting refuses to connect

i can send screenshot

[dawn timber]

are you using kali

[versed wing]

I am in the OWASP Juice Shop room on task 7 "Where did that come from?" I am able to get the alert to pop up from the search bar XSS and also by adding a header to the Last Login IP XSS but I am not getting the green box for either that has the flag. I have tried restarting the session, the attack box and the target machine a few times. I even took a couple of days off and just came back and tried it again. If I am seeing the alert box, and according to the instructions, it seems like I should get the flag. At least that is how all the other flags in this room worked. Am I missing something or is this a bug of some sort? Also, if there is a better channel to post this question in, please let me know. I apologize for my noobiness in advance...

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[hollow fable]

yeah of course

how i verify pls

[dawn timber]

theres also a repository update is pinned messages to fix it too

[hollow fable]

this is the problem

[odd dove]

hello im experiencing 100% packet loss when i test for ping. Is there something im messing up on?

[hollow fable]

it connected alone but it takes so long

thank you so much for the help bro

[scenic torrent]

Gave +1 Rep to @gray loom

[odd dove]

a machine

im pinging the test machines ip

im on the tutorial one, for Jr. penetration testing it worked fine but the tutorial is not

im guessing i need to just use the attackbox

[celest wadi]

email official support for payment issues

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[timid rose]

anyone knows a quick fix for this??

[celest wadi]

"nc **-**lnvp 87"

the hypen - before lnvp is important

[timid rose]

jesus

i just woke up

thanks @celest wadi

[scenic torrent]

Gave +1 Rep to @celest wadi

[empty timber]

Hi, I am currently trying to do the Nessus module of pentest+ path and so trying to install Nessus Essentials using Kali Linux WSL but am getting the the following error: (Reading database ... 335850 files and directories currently installed.) Preparing to unpack Nessus-8.15.5-debian6_amd64.deb ... Unpacking nessus (8.15.5) over (8.15.5) ... Setting up nessus (8.15.5) ... Unpacking Nessus Scanner Core Components... System has not been booted with systemd as init system (PID 1). Can't operate. Failed to connect to bus: Host is down

You can start Nessus Scanner by typing /bin/systemctl start nessusd.service

I have tried /bin/systemctl start nessusd.service which hasn't worked. I have read about the issue with PID 1 and systemctl when using WSL and so have tried /sbin/service nessusd.service start when I get a 'No such file or directory error'.

It seems as though the PID / sytsemctl issue is quite well known but I just can't seem to figure out what I need to do.

Thanks in advance.

[weary spindle]

Do you have Nessus on your VM?

[empty timber]

I'm not sure. I have followed the instructions from theTHM room. Downloaded fromn Nessus and then unpacked in Kali which is when I encounter this problem.

[weary spindle]

In your own VM?

Because it's too big for the Attackbox.

It needs 30GB of space.

[empty timber]

I've done all of that on Kali on my own computer

Not in Attackbox

I even tried on another device and got the same issue.

[weary spindle]

I don't know much about WSL, I used my VM and was pretty much download, install then go.

[empty timber]

OK. Maybe I should try using a VM instead.

[weary spindle]

Which Nessus are you downloading?

[empty timber]

nessus_8.15.5-debian6_i386.deb

sorry, not i385 but amd64

[keen leaf]

Hello,

i need to reset my entire progress and start afresh..is that possible?

[empty timber]

No. I asked a couple of weeks ago and it can't be done. You can reset your progress on individual rooms by going into the room and clicking the settings cog but only lets you do a few and then asks for captchas, so takes a long time

[keen leaf]

oh..ok...

thank you

[empty timber]

No problem. As I say that's what I was told when I asked support but someone may know better than me!

[weary spindle]

Could always make a new account and delete your own @keen leaf

[willow cloud]

hi

my openvpn fatal exits

and i dont understand why

andrew@host:~/Downloads$ openvpn nbaandrew.ovpn
2022-07-13 15:29:42 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2022-07-13 15:29:42 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2022-07-13 15:29:42 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 22 2022
2022-07-13 15:29:42 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2022-07-13 15:29:42 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-07-13 15:29:42 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-07-13 15:29:42 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.129.195:1194
2022-07-13 15:29:42 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-07-13 15:29:42 UDP link local: (not bound)
2022-07-13 15:29:42 UDP link remote: [AF_INET]18.202.129.195:1194
2022-07-13 15:29:42 TLS: Initial packet from [AF_INET]18.202.129.195:1194, sid=18643b29 e8409fb6
2022-07-13 15:29:42 VERIFY OK: depth=1, CN=ChangeMe
2022-07-13 15:29:42 VERIFY KU OK
2022-07-13 15:29:42 Validating certificate extended key usage
2022-07-13 15:29:42 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2022-07-13 15:29:42 VERIFY EKU OK
2022-07-13 15:29:42 VERIFY OK: depth=0, CN=server
2022-07-13 15:29:43 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1586', remote='link-mtu 1602'
2022-07-13 15:29:43 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
2022-07-13 15:29:43 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2022-07-13 15:29:43 [server] Peer Connection Initiated with [AF_INET]18.202.129.195:1194
2022-07-13 15:29:44 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2022-07-13 15:29:44 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,comp-lzo no,route-gateway 10.8.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.8.5.128 255.255.0.0,peer-id 128'
2022-07-13 15:29:44 OPTIONS IMPORT: timers and/or timeouts modified
2022-07-13 15:29:44 OPTIONS IMPORT: compression parms modified
2022-07-13 15:29:44 OPTIONS IMPORT: --ifconfig/up options modified
2022-07-13 15:29:44 OPTIONS IMPORT: route options modified
2022-07-13 15:29:44 OPTIONS IMPORT: route-related options modified
2022-07-13 15:29:44 OPTIONS IMPORT: peer-id set
2022-07-13 15:29:44 OPTIONS IMPORT: adjusting link_mtu to 1625
2022-07-13 15:29:44 Using peer cipher 'AES-256-CBC'
2022-07-13 15:29:44 Data Channel: using negotiated cipher 'AES-256-CBC'
2022-07-13 15:29:44 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2022-07-13 15:29:44 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-07-13 15:29:44 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2022-07-13 15:29:44 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
2022-07-13 15:29:44 net_route_v4_best_gw query: dst 0.0.0.0
2022-07-13 15:29:44 net_route_v4_best_gw result: via 192.168.1.1 dev enp3s0
2022-07-13 15:29:44 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=enp3s0 HWADDR=a8:5e:45:13:66:68
2022-07-13 15:29:44 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2022-07-13 15:29:44 Exiting due to fatal error

[open adder]

There is someone very good with encodings? I need helpo do decypher a text

[crystal marlin]

Run it with sudo

[willow cloud]

oh

i forgot that

thanks

[wind knoll]

hey, im new. I wanted to know how can i copy paste something from the terminal to the answer box. im using the browser machine and ctrl+shift c and v dont work

can someone help me pls

[celest wadi]

https://media.discordapp.net/attachments/680459914828972076/980855675120939078/clipboard.gif

[wind knoll]

thank you

[naive dust]

Hi, I couldn't verify my account's token cause it says it's already connected to another account. I need some help on that

@crystal marlin

[crystal marlin]

Do you know your old account?

[naive dust]

I deleted my old discord account

[crystal marlin]

So you also don't know under which display name you have been in here with that old account?

[naive dust]

It's been 1 and a half years since then lol.

[crystal marlin]

Send me a DM with your token pls

[naive dust]

Sure

[austere field]

im struggling with maintaining a decent connection to a box. im running windows as host and using openvpn for the profile. my vm (kali) is running on vm workstation pro . i tried both a nat and bridged connection for my vm . i ran a nmap scan using zenmap on my windows host and i scan the box just fine but when i try to reach the box from the virtual machine (kali) i get no response back

[sharp sundial]

I'm practicing the Kenobi room, and in the room it tells me to the run the following command
sudo nmap -p 445 --script=smb-enum-shares.nse,smb-enum-users.nse <IP address of machine>
However, any time I try to use NMAP scripts (not sure how many are affected) while connected to OpenVPN it results in the following error (after successfully scanning the port)

NSE: [smb-enum-shares <IP>] SMB: Attempting to log into the system to enumerate shares
NSE: Starting smb-enum-users against <IP>.
NSE: [smb-enum-shares <IP>] SMB: Added account '' to account list
NSE: [smb-enum-shares <IP>] SMB: Added account 'guest' to account list
NSE: smb-enum-shares against <IP> threw an error!
/usr/bin/../share/nmap/nselib/smbauth.lua:377: OpenSSL error 50856204 in digital envelope routines: function (null): unsupported
stack traceback:
    [C]: in function 'openssl.encrypt'
    /usr/bin/../share/nmap/nselib/smbauth.lua:377: in upvalue 'lm_create_hash'
    /usr/bin/../share/nmap/nselib/smbauth.lua:652: in function 'smbauth.get_password_response'
    /usr/bin/../share/nmap/nselib/smbauth.lua:775: in function 'smbauth.get_security_blob'
    /usr/bin/../share/nmap/nselib/smb.lua:1360: in upvalue 'start_session_extended'
    /usr/bin/../share/nmap/nselib/smb.lua:1565: in function 'smb.start_session'
    /usr/bin/../share/nmap/nselib/smb.lua:380: in function 'smb.start_ex'
    (...tail calls...)
    /usr/bin/../share/nmap/nselib/msrpc.lua:4926: in function 'msrpc.enum_shares'
    /usr/bin/../share/nmap/nselib/smb.lua:3194: in function 'smb.share_get_list'
    /usr/bin/../share/nmap/scripts/smb-enum-shares.nse:110: in function </usr/bin/../share/nmap/scripts/smb-enum-shares.nse:105>
    (...tail calls...)

NSE: smb-enum-users against <IP> threw an error!
/usr/bin/../share/nmap/nselib/smbauth.lua:377: OpenSSL error 50856204 in digital envelope routines: function (null): unsupported
stack traceback:
    [C]: in function 'openssl.encrypt'
    /usr/bin/../share/nmap/nselib/smbauth.lua:377: in upvalue 'lm_create_hash'
    /usr/bin/../share/nmap/nselib/smbauth.lua:652: in function 'smbauth.get_password_response'
    /usr/bin/../share/nmap/nselib/smb.lua:1161: in upvalue 'start_session_basic'
    /usr/bin/../share/nmap/nselib/smb.lua:1567: in function 'smb.start_session'
    /usr/bin/../share/nmap/nselib/smb.lua:380: in function 'smb.start_ex'
    (...tail calls...)
    /usr/bin/../share/nmap/nselib/msrpc.lua:3792: in function 'msrpc.samr_enum_users'
    /usr/bin/../share/nmap/scripts/smb-enum-users.nse:171: in function </usr/bin/../share/nmap/scripts/smb-enum-users.nse:154>
    (...tail calls...)```

Any fixes I have come across have told me it was an issue with NodeJS? I'm not sure if NMap or OpenVPN used it so I downgraded to something below v17 like it asked, still did not work.

[celest wadi]

[celest wadi]

did you just use <IP> instead of an actual machine ip like 10.10.45.23

[sharp sundial]

Yes because I tried it against other hosts to see if it reproduced and I copied the command from my most recent

[celest wadi]

<IP> this is called a placeholder it means slap the ip you have in there and don't use this

[sharp sundial]

Oh no I mean I didn't run the command with <IP>. I copied my correct command and replaced the sensitive results, which was a host I personally own.

I don't want to just dish out the IP address on Discord

I had a correctly formatted IPv4 address in that field.

[celest wadi]

ah I see

well, this channel is for thm related tech support but using those nmap scripts seems to be messing up everything, try enumming manually with smbmap, smbclient, enum4linux etc.,:)

[sharp sundial]

You're right this is for THM related support, but I figured since THM has us connect to their network via OpenVPN that it would cover here. But thank you for letting me know and thank you for the alternatives I will definitely try those! However, if the problem persists should I try contacting some form of OpenVPN support instead?

[celest wadi]

uhh, no cuz if you're able to access the services, openvpn is working, nmap automated scripts aren't the end-all be-all, so best to try other things

[sharp sundial]

Well, those tools that you provided do work! Thank you for finding a fix, I now prefer this tool instead

[cold pine]

Are there any mods available to remove the discord token associated with this account? Thank you

[tawdry orbit]

Run the ovpn on Kali instead.

[austere field]

@tawdry orbiti tried running it via kali itself and i keep getting a fatal error

damn i forgot about that detail

thanks

thanks @gray loom

[scenic torrent]

Gave +1 Rep to @gray loom

[tawdry orbit]

sudo judo 😄

[tepid fossil]

some paths have up coming rooms, do we get the certificate if we do all available room?

[mossy kestrel]

Need some tech support with OpenVPN:

1. I have OpenVPN updated and installed on my Kali VM, I have the OVPN file downloaded, but I tried to open a VPN and it won't connect, and instead kept restarting the connection. Also realized it never opened a tun0 interface.
2. I ran the THM troubleshooting Python script, and now I am showing as having a tun0 interface with a 10.6.x.x /17 network, but I am still unable to ping any boxes on THM.

Is it something with my routing table that I would need to add/change? How can I go about troubleshooting this lol, help me. Some boxes are nearly impossible to do through the attached AttackBox/KaliVM.

[humble path]

Is it possible to change my username? I see that it's not editable in my profile section 😦

[celest wadi]

you have to email support for a username change request, make sure the new username isn't already taken like you can't have the username 0day :)

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[visual root]

I can't connect to vpn server

keep getting this

2022-07-13 23:45:07 TLS Error: TLS handshake failed
2022-07-13 23:45:07 SIGUSR1[soft,tls-error] received, process restarting
2022-07-13 23:45:07 Restart pause, 5 second(s)

[celest wadi]

check if you have multiple vpn connections, there should be only one tun0 interface with ip a,

[visual root]

hmmm, there's one running, and on thm says i'm connected using ovpn but it doesn't work still and i can't find any terminal running openvpn anyway to disconnect

[celest wadi]

so, there's "one running" but you can't "find any terminal running openvpn"?

[visual root]

Yup

that one show the same IP on thm and on thm it says i'm connected in same time i can't access the deployed machine or ping it and no terminal on my side running openvpn

[celest wadi]

the thm access page can be buggy, run sudo killall openvpn and run the openvpn command again to connect

[visual root]

yeah this killed the connection but now getting same error again

2022-07-14 00:00:02 TLS Error: TLS handshake failed
2022-07-14 00:00:02 SIGUSR1[soft,tls-error] received, process restarting
2022-07-14 00:00:02 Restart pause, 5 second(s)

ip a show only my eth0 and nothing else but openvpn can't connect still

[celest wadi]

are you running the openvpn command with sudo?

[visual root]

yeah

[celest wadi]

do you have any other vpn on?

if so, try disabling it

[visual root]

nope, i'm not using anyother vpns

guess it's country issue or smth 😢

openvpn connection works only if i have another vpn running, but not my bare connection

[mossy kestrel]

Literally having the same issue and tried to troubleshoot it above. Still no go

[next robin]

Hi, I'm not sure what happened here, but why did my streak reset ?

[next robin]

Hey I know how to solve this issue

[next robin]

The cipher is not added correctly or something, so I had to modify the .ovpn file manually
if you open the file you'll see cipher AES-256-CBC
just change it to data-ciphers AES-256-CBC

[naive dust]

greetings! for some days the page https://lab_web_url.p.thmlabs.com/ is not available. Not in the virtual Machine and not over VPN, i can't earn a badge. Can you help ?

[celest wadi]

you have to press the big green start machine button and wait for the url to have an ip in it like https://10.10.10.10.p.thmlabs.com :)

[naive dust]

i try it again, i contact you in vew minutes. merci

504 Gateway Time-out | nginx/1.14.0 (Ubuntu) {https://10.10.70.164.p.thmlabs.com/}

i tried this procedure for 3 Days, before it worked and i solved some challenges.
Please call the technitians to solve the server problem. 🙂

[celest wadi]

it's working tho, which room is it?

[naive dust]

Walking an Application (Pentesting Challenge easy)

[celest wadi]

https://10-10-52-226.p.thmlabs.com/

works for me

[naive dust]

i solved 3 of 4 Flags, another day it doesnt work anymore. I tried with the vm in the browser and with openvpn. i try it with your data

[celest wadi]

you manually typed that url

https://10-10-70-164.p.thmlabs.com/

[naive dust]

i understand, and i see the different: - not . i try it, thanks

[celest wadi]

fyi, I'm terminating this machine

[naive dust]

https://10-10-70-164.p.thmlabs.com/
after accept an invalid certifacte comes the following Message:
Error response
Error code: 405

Message: Method Not Allowed.

Error code explanation: 405 - Specified method is invalid for this resource.

[red badger]

Hey I am not able to connect to THM VPN server I am getting this error
2022-07-14 02:41:02 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set. 2022-07-14 02:41:02 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers. 2022-07-14 02:41:02 OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022 2022-07-14 02:41:02 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10 2022-07-14 02:41:02 Cipher BF-CBC not supported 2022-07-14 02:41:02 Exiting due to fatal error

[celest wadi]

restart the machine, and use the url that updates itself, basically follow the instructions in the room :)

[red badger]

although I am able to connect HTB

[celest wadi]

what's your openvpn version? openvpn --version

[brisk bough]

2.5.7

[celest wadi]

[brisk bough]

It says on the logs

[celest wadi]

damn

[naive dust]

i did it for 3 days, with all possible adresses, but i do it again.

[brisk bough]

@red badger try running the script I sent over in the other discord

[red badger]

OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 5 2022 library versions: OpenSSL 3.0.3 3 May 2022, LZO 2.10

[brisk bough]

See if that helps for starters

[celest wadi]

also, if you've used data-ciphers, replace them with cipher

[red badger]

thanks will try it out

[scenic torrent]

Gave +1 Rep to @brisk bough

[naive dust]

I need help verifying my other account and disabling this one

[celest wadi]

ask a mod

[naive dust]

is this here official support or helping we us among themselves?
i found no technical support page.
There IS a problem with the ACME-Test-Side. I'm not a rookie, i am an System-Engineer.
Maybe i'm wrong.... maybe...
but i'm sure, the ACME webside works not correctly.
i can ping p.thmlabs.com
i cannot ping lab_web_url.p.thmlabs.com
there comes various errors on the webpage
I was reset the vm, but i get the same ip after that.
https://lab_web_url.p.thmlabs.com or
https://10-10-10-10.p.thmlabs.com (10-10-10-10 is placeholder for the given ip)
and other combinations results in Errors

https://lab_web_url.p.thmlabs.com 504 Gateway timeout
https://p.thmlabs.com
Welcome to nginx!

If you see this page, the nginx web server is successfully installed and working. Further configuration is required.

For online documentation and support please refer to nginx.org.
Commercial support is available at nginx.com.

Thank you for using nginx.

Again: It worked for some day, but now nevermore

[celest wadi]

you are correct, this is not official

[naive dust]

🙂

[celest wadi]

if you want official thm support, contact through email

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[naive dust]

ah, thanks

[crystal marlin]

So what's the IP of your current target machine?

[naive dust]

thank you for your help, sorry, i don't want bother you.

[naive dust]

10.10.70.164

[crystal marlin]

I think that's the attackbox, where did you get that IP from ?

[naive dust]

you right, its the attackbox, it comes from tryhackme, moment please

nslookup says p.thmlabs.com has the ip 54.246.5.175

[crystal marlin]

Okay, so that's simply not the right IP to reach the ACME site.
You have to start the target machine by pressing the green "Start machine" button in one of the tasks of the room you are in.
Then there should appear a box like that:

[naive dust]

the vm is working fine. all is working. but not the site:
https://lab_web_url.p.thmlabs.com/
but thanks, i contact the support

(no more) 🙂

[crystal marlin]

Well, most likely they will refer you to this discord channel to get it solved first

So what's the full URL you are using now to reach the site?

[naive dust]

the order in the challenge says:
start the vm or use a vpn (i tried both), wait 2 Minutes (ok), start a browser and go on the website
https://lab_web_url.p.thmlabs.com/
it worked for some days, and i solved 3 of 4 challenges, but it was late. A day after it won't work anymore.
I can ignore that, but i want the badge!! 😄

[crystal marlin]

So that's the exact URL you are trying to reach "https://lab_web_url.p.thmlabs.com/" ?

[naive dust]

beside, how can you import a screenshot, or is this not possible on the discord website?
i give you the original text, moment please

[crystal marlin]

You have to verify first in order to be able to send screenshots

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[naive dust]

oh, there is a changing... moment... something new in the description

shame on me, its working. Either i read false the instruction, or there was a change last days. ... 🙂 But hey, its working...
Many Many thanks!!!!
😍

You are Awesome!! really... Good luck!

[crystal marlin]

Good luck to you too 😄
If you have issues with rooms, or technical issues like that, this discord is the place to ask 🙂
Just so you know, that might relieve the THM support a bit

[naive dust]

Okay Sir! 😋

[rancid zealot]

help

[crystal marlin]

How is that related to TryHackMe ?

[rancid zealot]

It is a hack

[crystal marlin]

To hack what?

[rancid zealot]

Arma 3 Singleplayer

[crystal marlin]

We do not help you with that here.

[rancid zealot]

Yes you do.

[pastel tinsel]

waves fingers like in star wars

[crystal marlin]

-mute 309387427913400321 Just here to ask for hacking a game.

[scenic torrent]

🔇 Muted Titus#7091 for 1 day

[stray cove]

-ban 309387427913400321 Asking for game hacks, we don't do that here

[scenic torrent]

🔨 Banned Titus#7091 indefinitely

[bronze vale]

-undelete -a

[hushed pivot]

Hi, I accidentally deleted a private room which I cloned (I did not expect that is was the original room I created) is there a chance that it could be recovered? 😦

[plush bay]

@bronze vale ⬆️ maybe you could help with this

[scarlet vigil]

Can anybody know that how many days it might take to review the THM profile for monthly hacker badge?

[bronze vale]

All deletion is permanent. We cannot recover any deleted data

[next robin]

@red badger

oh it's already in the pins

[bleak gorge]

hey i am 14 i want to learn programmering and hacking

[open adder]

hello

i have a problem with openvpn

how i can downgrade to 2.4 version ?

[celest wadi]

a script for that is pinned in this channel 👀

[open adder]

my bad

thanks mate

[celest wadi]

https://kali.download/kali/pool/main/o/openvpn
you can replace the provided link with your own version that you want from here

[open adder]

i have 2.5.7 version

and i have Cipher BF-CBC not supported 2.5.7 problem

with the script i have this error

wget: unable to resolve host address ‘kali.download’

[indigo oyster]

Comming this issue while connecting openvpn please resolve this issue

[glad egret]

Did you try regenerating your vpn config?

Nvm. Looks like a similar issue as above

[crystal marlin]

As far as I understood, that issue comes from openssl 3.x
So either you have to manually edit your /etc/ssl/openssl.cnf or wait for kali-defaults 2022.3.2 and kali-tweaks 2022.3.0 to hit the mirror.
You can read about that here: https://gitlab.com/kalilinux/packages/kali-tweaks/-/issues/27#note_1026250488
@open adder @indigo oyster

[thorn forge]

Hi, I'm running into issues with attackbox, I keep getting disconnected while having full internet connection (mainly when execution terminal commands)

[open adder]

i didn't understand, we only need to make '''apt update && apt full-upgrade'''

?

[lyric tree]

im having some trouble with the room chill hack. The bash script which im supposed to run wont work. it just echo's the first and last line of the script. what to do 🙌

[crystal marlin]

Basically yes, but you have to wait until the right versions are online.
Just check sudo apt update && apt search kali-defaults, once it's saying version 2022.3.2 you should be good to upgrade

Or change /etc/ssl/openssl.cnf manually meanwhile: https://gitlab.com/kalilinux/packages/kali-defaults/-/commit/d545748ae2d5c703000d7199565d8abf4131a3c8

[open adder]

#room-help

[open adder]

i'm in wsl2 btw

[crystal marlin]

Ye, that's not the right version yet.
They announced the packages to be updated within 24 hours, that was 12 hours ago.

[open adder]

ok

and what can i do now?

@crystal marlin

[crystal marlin]

Have you tried to change the vpn server already?
Or regenerate your .ovpn file on the tryhackme access page?
Not sure why, but I think that even solved the issue for some.

Other then that, wait for the packages to be updated, or manually change your openssl.cnf

[open adder]

i will search of to change openssl.cnf

[crystal marlin]

Ye, the link to the necessary changes is above, I think you can skip the changes for /etc/ssl/kali.cnf and just apply the changes from /usr/share/kali-defaults/etc/ssl/openssl.cnf to your /etc/ssl/openssl.cnf

[plush bay]

how to not get any tryhackme vpn problems: use an now kinda outdated version of ubuntu( 20.04 )

[crystal marlin]

Ah no, you have to change /etc/ssl/kali.cnf too I think

[open adder]

where i can file the kali.cnf to remplace ?

[crystal marlin]

Hm? You have to make the changes manually according to the changes here: https://gitlab.com/kalilinux/packages/kali-defaults/-/commit/d545748ae2d5c703000d7199565d8abf4131a3c8

But tbh, it might be easier to just wait a couple more hours until the package is updated ^^

[open adder]

i change the openssl.cnf file to /etc/ssl/

and for kali.cnf ?

[open adder]

you right

[pearl adder]

is there a way to change my username to show on labs with new name instead of login name

[autumn sky]

#860962855862927410 message

guys can you solve this please?

[autumn sky]

Check dm

[patent vale]

@autumn sky are you good with hashes/?

[autumn sky]

not that much

[patent vale]

can i show you a hash i'm having trouble with and you look at it

[autumn sky]

Introductory Networking : Task 2 :
When sending data over TCP, what would you call the "bite-sized" pieces of data?

is not working and i know the ans...

[autumn sky]

lemme see

[patent vale]

Hmm I can’t send pics in here

But look

[autumn sky]

dm bro

[patent vale]

e8f15cf32fc118a1a27b67adc564d5ba:$HEX[1c020000020000] --

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[patent vale]

thank you for letting me know Lassi

[scenic torrent]

Gave +1 Rep to @gray loom

[autumn sky]

thank you man

[scenic torrent]

Gave +1 Rep to @gray loom

[red badger]

Thanks buddy !!

[scenic torrent]

Gave +1 Rep to @next robin

[gleaming current]

is there a way to use wget to download task files?

or any other cli tool?

I am using WSL and I am just wondering if there's a link I can just paste into the terminal

[dusty sun]

Perhaps this isn't the right place to ask this but my kali VM is suddenly impersonating windows. I don't know how to switch it back.

I tried typing "VM" in my windows search to access settings. Wasn't paying attention and it typed it in the kali search and opened VIM

when it did that IDK what else happened but it immediately turned to windows

only info i can find on something similar is "kali-undercover" which does nothing

[placid mango]

Yeah, just run kali-undercover again and it should get back to normal. If you still have any issues ask in #infosec-general as this chat is for support related to site and vpn.

[crystal marlin]

Hey there, could you let me know if your issue got resolved after you do the upgrade?
Since the packages should be online now and I'm curious, thx 🙂

[scenic torrent]

Gave +1 Rep to @open adder

[empty timber]

Hi. I'm trying to get Nessus installed and running on my machine (Windows 10 64bit) but trying to install onto Kali. Kali has been installed using the Kali download through Microsoft store, setting up and then getting Kex GUI installed. All that works fine but when I download Nessus from tenable (Nessus-8.15.5-debian6_amd64.deb) it opens it, runs it but then says: "System has not been booted with systemd as init system (PID 1). Can't operate. Failed to connect to bus: Host is down
You can start Nessus Scanner by typing /bin/systemctl start nessusd.service"

From looking online this seems to be quite a common problem with Linux run through WSL but despite trying lots of suggestions, I just can't get it to work. If anyone understands this problem or has managed to sort it out themselves, I could really do with your help!

[rustic pewter]

Hello everyone!! I was trying to get a reverse shell. However, I think I'm using the wrong IP address. I try to do it on the web machine that tryhackme gives us and work, using the machine IP that appears on the top of the page, but if use my virtual machine I get nothing with nc -lvnp 1234. I tried the IP from ifconfig, didn't work. So I tried the OpenVPN IP and didn't work too.

[crystal marlin]

Are you using a Virtual Machine as your own attacking machine?

[rustic pewter]

yes

[crystal marlin]

And where is openvpn running?
Directly inside your Virtual Machine or on your host machine ?

[rustic pewter]

host

[crystal marlin]

Then that's the issue why you are not able to catch the rev shell.
Change that, it has to run directly inside your VM and **only **inside your VM

[rustic pewter]

okok thanks

[scenic torrent]

Gave +1 Rep to @crystal marlin

[rustic pewter]

It could be a dumb question. Why can I open the site in VM with the VPN running on the host? It should not work If the VPN is the host and not in the VM, right?

[crystal marlin]

Why not? Your VM is forwarding the packets to your host and your host has a route to the THM network

But considering a rev shell is just a "fresh connection" from the target machine back to your listening IP(the VPN IP), how would your host know to forward that connection to your VM

[rustic pewter]

okok

[open adder]

is it good ?

[wicked mesa]

hello guys

i migrated my vbox to vmware

and i cant install the tools

it says that i retained broken packets

i have cleaning and doing google stuff but nothing worked

someone knows how to fix that so i can get the vmware tools on the kali machine?

[weary spindle]

Have you converted the storage?

[wicked mesa]

when exporting?

[weary spindle]

This is also a non THM question, so ping me in #general.

[wicked mesa]

okay

[somber spindle]

is the point in the room that I do got added to this point as well?

[crystal marlin]

Well there seems to be an issue with your connection ?
Do you even have internet access in your VM ?

[open adder]

is not a vm but a wsl

[crystal marlin]

Oh okay, so do you even have internet connection in it?

[open adder]

i think

[crystal marlin]

What you mean you "think"? That's not a very convincing answer 😄

[glad oyster]

Type ping google.com in WSL

[open adder]

no response lmao

[somber spindle]

no internet then

[open adder]

ok

ok no internet

[high tundra]

Hello guys, I think the task order in this room is messed up

[weary spindle]

Which room?

[high tundra]

Hardening Basics Part 2

[round compass]

I am trying to re-download my VPN file and I am getting an Error 404, I did regenerate and wait but still Error 404

[glad egret]

Try going to the access page in a new window/private window.

[tribal sleet]

hi, I have completed all the rooms in the pentesting tool series but 2 rooms are showing as incomplete

[weary spindle]

This is a known problem, staff are aware and will be fixed in time.

That is the correct flag.

[merry shale]

I think this is a bug, and this should be fixed too.

[weary spindle]

Did you type or Copy/paste?

[merry shale]

I typed

[weary spindle]

Try copy and paste.

[merry shale]

what? I copy pasted and it accepted.

XD

[weary spindle]

Did you use small l or and I?

[merry shale]

capital letter

[weary spindle]

Strange, oh well.

You got it.

Now can you please delete the picture so you don't give the flag away.

[merry shale]

ok, thx for the help

[weary spindle]

[wispy lily]

Hello guys. I am doing follina msdt room. So i've a problem. When i transfer my payload to the windows machine task forces me to open Process Explorer where i should have WINWORD.EXE and msdt.exe. The thing is that i do not see the second process but i transferred my payload correctly. What are my options? Thanks

[celest wadi]

that room went private so there was likely a bug with it,

[wispy lily]

really?

if it bugs it explains everything!

[celest wadi]

yeh, might be but not necessarily

[wispy lily]

thanks. Did not know it. Thought i might be doint smth wrong

doing*

[thorn forge]

Bug: I received the "Intro to Web Hacking" badge without completing the Introduction to Web Hacking module. I did everything, besides the "SQL Injection" room and received it after "Command Injection" room.

[warm cobalt]

Any staff that could help with an issue, I purchased premium for a year in March and something caused it to disappear. I know what that something is but I don't know how to get it to restore my premium status.

[weary spindle]

!email

[sharp bison]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[weary spindle]

You need to E-mail for that sort of thing, unless Jabba picks it up in here.

[warm cobalt]

yeah I sent an email to my THM support contact but haven't heard back from them yet. I guess I can try the general support

[lethal aurora]

Has anyone ever gotten response from THM support?

I've contacted them through a form a few weeks ago and again recently. Still no response

[plush bay]

lots of people but jabba has a lot of emails to go throuhg

[lethal aurora]

Hm, still seems weird for CS to take weeks to respond. I've never seen that anywhere else 🤷

[plush bay]

if more then a week have passed try and send a new email to [e-mail]

considering there are 1222869 at last update of the count in discord.... users on tryhackme that means they probably get a lot of emails to filter through

and think it is only jabba doing that

[lethal aurora]

Yeah, I've sent an email to that address and I've got an automated response. I was using the website form previously.
Hopefully this time it goes along fine, thanks @plush bay

[scenic torrent]

Gave +1 Rep to @plush bay

[plush bay]

good luck

[onyx flicker]

hello

I got an issue with streaks

[silver badge]

Hello guys! I'm trying to ssh from my machine and it tells me I don't have the requirements can someone help!

Any ideas 💡

@gray loom I just download it Ubuntu and for the past year I was using tryhackme machine it had all the requirements, it’s hard to install every requirements. I’m stuck with ssh now

[tribal burrow]

did you enable/start sshd ?

[silver badge]

I did! But I will try again

[tribal burrow]

first google it.

[dapper spoke]

hi im on the final stage of attacktive room
i dont know why but it just hangs
i wait for a shell to appear and it juyst says timeout error

ive tried restarting machine

[upbeat fox]

Hello, I've been trying to download the task files onto the attackbox but I am unable to to go through the browser on the attackbox. It starts acting really funny when I go to the same THM page on my local machine. Anyone else have this issue. I can download these files onto my local machine but can't get them onto the attackbox. Only other thing I can think of is uploading the task files to google drive. Doesn't seem like an efficient choice. Thanks!

[coarse veldt]

Hi everyone, I am trying to connect to tryhackme via openvpn through kali in vmware, I run my openvpn config file, everything seems fine, the website shows that I am connected, I can access 10.10.10.10, but I cannot seem to get through to any of the spawnable machines via my vm, but the attackbox can communicate with them just fine.

[hollow terrace]

hi im student can i subscribe annually and pay every month? if yes how

[silver badge]

Okay

[stark kettle]

Im in chapter "how websites work" and then there is a question "what term best Describes the side your browser renners a website" the video says "front end" but I get a uh-oh

Client side is also uh-oh

[weary spindle]

Just select a monthly membership with student prices

[weary spindle]

!docs student

[sharp bison]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/billing/student-discount

From TryHackMe with ❤!

[ornate elk]

Can anyone help me I'm on a bank mission I'm typing the correct answer but it tells me it's not true
I can not send a picture here so if anyone can help send me a message for private

[weary spindle]

If you verify you're account you can attach screenshots.

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[weary spindle]

You need to send it to @sharp bison

[ornate elk]

That's the correct answer and it does not work

[weary spindle]

It's not the correct answer.

Read the task again.

Oh, no, it doesn't specifiy.* Actually, it does.

You're looking for a flag.

Not a total amount.

You can literally see it.

Do you have it now @ornate elk ?

[ornate elk]

Where?

[jovial mango]

Read congratulations prompt

[weary spindle]

The answer to the TryHackMe question is...

[jovial mango]

Read the last message of scrubs

And compare the screenshot you shared

[ornate elk]

I did it and it got me into it

[jovial mango]

This..

[weary spindle]

@ornate elk can I DM?

[ornate elk]

yes

[stark kettle]

Anyone? Im stuck now lol

In the guide video it also says "front end" and the answers obviously is "front end" but it doesnt work

[weary spindle]

can you link the room?

Hay @ornate elk, now you got the answer, can you please delete this image so it doesn't spoilt it for others.

[ornate elk]

yes

[weary spindle]

Thanks.

[scenic torrent]

Gave +1 Rep to @ornate elk

[silver badge]

Hey I googled it, added a port. But it won't let me ssh can you help

and can I dm you

[weary spindle]

It's not front end.

[silver badge]

I did

[stark kettle]

Then why does it say front end in the guide video

[stark kettle]

Tryhackme.com/room/howwebsiteswork

[silver badge]

Thanks! @gray loom

[scenic torrent]

Gave +1 Rep to @gray loom

[round compass]

That fixed the download error. My Openvpn is giving some weird errors and disconnecting and then reconnecting, I will reinstall it and see what happens

[bleak gorge]

hey how to downmload openvpn in linux

[glad oyster]

!docs vpn

[sharp bison]

TryHackMe

That topic does not exist!

Use !docs to list all of the available topics.

From TryHackMe with ❤!

[glad oyster]

!vpn

[sharp bison]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[near onyx]

@bleak gorge yea it’s probably already installed i would recommend putting Sudo openvpn “then the file”

[glad oyster]

https://www.kali.org/tools/openvpn/

[slim ridge]

suddenly two rooms i've completed ages ago are showing up when i click the "hide complete" in the search but going into them and manually veriyfying, every task is complete. i tried refreshing, leaving/entering the rooms and logging out/in but they are still there showing as incomplete. ideas?

[celest wadi]

copy the flags and re-submit them

unless it's the redirect bug

some rooms show as not completed cuz the originals redirect to newer ones while the site still shows the old ones

[slim ridge]

so, use the "restart progress" button and then resubmit the flags? a bit of a chore since these rooms are really big but ok

ok the rooms in question are https://tryhackme.com/room/burpsuitebasics ande https://tryhackme.com/room/metasploitintro

[celest wadi]

check #site-bugs , a bunch of rooms have been reported

yeh, I think those have that bug

[slim ridge]

huh. is this a new bug? i never had this problem until right now

[celest wadi]

yeh, the've made newer/updated rooms for the older content and they redirect you to the new ones, it's relatively recent

[slim ridge]

i found the discussion on it. understand the issue now. thank you!

[wintry fossil]

Is there a way to link my discord account to an other thm account?
I deleted my last account and can't find a way to figure out how to change link my new thm account

[weary spindle]

You need a senior mod for that.

Or Hydra.

[teal tartan]

hi

[wintry fossil]

Is there a way to make a ticket or smth in discord or I have to email them or what do I do-

[weary spindle]

Nope, just ask them when you see them on-line.

[teal tartan]

please help, in part: Intro to Offensive Security, I put the correct value, only that gave error message, how do I start over from scratch this part?

[weary spindle]

Is this the fake bank?

[teal tartan]

yes

[wintry fossil]

so dm ing them is a no no

[weary spindle]

That's rule 1.

[weary spindle]

Do you see a black box above the total?

[wintry fossil]

right- thanks

[teal tartan]

as it was not working, I ended up redoing and the value was more incorrect ainda.rs

[weary spindle]

However, if you close the machine and re-open it again, it will default.

[weary spindle]

It's not a numerical answer.

[teal tartan]

yes, restart?

[weary spindle]

Yes. 🙂

If you want.

[teal tartan]

how?

[weary spindle]

Click the cog beside help.

[teal tartan]

yes?

[weary spindle]

Yes.

[teal tartan]

after clicking help?

after cog?

reset progress

thsnks

thanks

my ingles is basic.rs

is value: $NaN.00?

incorrect

[weary spindle]

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[weary spindle]

Please can you verify your account, you can post screenshots.

[teal tartan]

one momento, i reset again...

[weary spindle]

You don't have to reset again.

But I can't show you until I see it's similar.

[naive dust]

Hey I have a question in room creation

I want to make a question only available for the first blood, then even if entered inaccessible.

Is there any option for that?

[teal tartan]

my god

[weary spindle]

😄 Please delete this.

[teal tartan]

kkkkkkkkkkkkkk

[weary spindle]

We don't want to spoil it for others. 😄

[teal tartan]

exist certificad?

after conclusion?

[weary spindle]

yes

[dapper spoke]

I got rid of the Remote path completion error but im still getting similar outputs

for example it would just get a shell but hang when i type in a command

and im stuck waiting

[dapper spoke]

Found another way using Psexec

[desert matrix]

how do I use another voucher when I have one active

[tribal burrow]

i think you cant

[desert matrix]

alright

[tribal burrow]

don't take me for sure. I talk from prevision expirience. I never be able to use 2x vouchers in same thing

[desert matrix]

yh, looking at my profile, no place to input the voucher

[naive dust]

Hello Guys
can anyone help me with this problem?
https://prnt.sc/0LKpYaJmxL_d
it was working in the morning but now it's not working
note: In windows its works normally https://prnt.sc/p67Q1R2jNKLz

[plush bay]

seems like the same issue that is described in the pins of this channel but seems weird because your version is not after 2.6

[tribal burrow]

redownload .ovpn file

[naive dust]

i think problem in kali environment but i don't know how to fix that

[naive dust]

I try but the same

[plush bay]

could also be because of openssl being updated but not openvpn

think someone else had this problem because of that

[tribal burrow]

open .ovpn file, find shiper line and change it like says in error

chiper^^

If you have updated your OpenVPN to 2.6 you can fix this by updating the 'cipher AES-256-CBC' line in your TryHackMe 'ovpn' file to 'data-ciphers AES-256-CBC'.

btw check pinned message in this room

[naive dust]

its already data-ciphers AES-256-CBC

https://prnt.sc/tF90adAWcDoM

[tribal burrow]

cehck the pinned mesaage.
try to put replace with chiper AES-256-CBC

[naive dust]

ok

[tribal burrow]

try restart openvpn also

[naive dust]

how can i do that?

[tribal burrow]

sudo systemctl restart openvpn.service

[broken bear]

While you can use systemd to manage openvpn, I would consider that to be a non-standard use case.
Do you really want the VM to be connected to the THM network whenever the VM is on?

[naive dust]

I don't understand the question

nvm sir

its get worked now

I stop service for 5 mins and open it again and it gets worked

thanks for help guys

[tribal burrow]

you dont need stop for 5 min. 5sec is enough and start again.

or restart is enugh for most of time

[naive dust]

got late cuz I was read the msg lol

[tribal burrow]

is all ok. now you know for next time 🙂

[naive dust]

next time if I get same error will do that

[tribal burrow]

great

[naive dust]

have a great day guys

bye

[hazy scroll]

Hello guy can anyone help with this problem?
I'm trying to connect to connect to the vpn needed to use the machines, however I never get the message of Initialization sequence completed and the Vpn didn't work
So I tried to troubleshoot the issue with the script from GitHub as recommended here https://docs.tryhackme.com/docs/openvpn/connecting/openvpn-connecting/ and I get this error
What can I do to fix this?

[lilac violet]

hey i'm a little confused about what | does for linux

for example, I know "sort [file name] | uniq -u" works

but what exactly does | do? (please ping when replying)

[tribal burrow]

man sort

check manual page it might help

[broken bear]

You should do the linux fundamentals room.

[lilac violet]

bad advice, it's not sort specific

[humble path]

It sends the output of one command, to the input of the next command. ls | grep file runs ls, sends the directory listing to grep, which does what it does (searches for file and displays the output) you can chain further pipes together to keep processing the output in programs as you want.

[smoky harbor]

Has another successfully connected with OpenVPN using Windows 11?

I show as successfully connected, but I cannot ping or connect to any boxes

I have no problem with Windows 10, Ubuntu, Kali, or Mac OS. But Win11 doesn't seem to work.

[smoky harbor]

This makes no sense to me. I can access THM network via WSL, but not Win11 itself

[formal snow]

I just got an email from THM that my Premium subscription has been canceled due to my request (it's not phishing...it looks like my sub really has been canceled). I did NOT request that it be canceled, and now I don't have access to paid content. Are there any THM admins on here that can help me with this?

[tribal burrow]

contact them

THM

[formal snow]

I replied to the email ([e-mail]) and copied support@sharp bison.com, but their turnaround time is 1-3 days! I was hoping to find a more direct communication channel.

[tribal burrow]

is weekend. in monday, or so, you get reply

[sleek jackal]

yeah, thats the proper channel. no other way of resolving it or any other channel to go through. if there was, everyone would use it for everything they ever had an issue with and nothing would ever get done on the stire.

[sleek jackal]

also check the payment information you provided. make sure its still valid. quickest way for any sub to get cancelled.

[formal snow]

Payment method is still valid. Regardless, I paid for a year on 26-Oct-2021, so my current sub should expire on 26-Oct-2022 (over 3 months from now).

[sleek jackal]

welp, looks like you gonna have to wait until THM support is online (not on Discord, actually available for the site) and then take it up with them. gl

[hollow plaza]

hi, i want to unverify this account, and switch to a different discord account

dm-ed mod 0Day, pending for his response

[naive dust]

For importing the PowerView module, the . .\PowerView.ps1 fail to be inputted, after I already done cd Downloads, and powershell -ep bypass.
The system won't let me type the rest of PowerView.ps1. I had try and it only let me type . .\PV.1, or ..\PV.1, which obviously fail.
Where is the clipboard located for window machine browser, so that I can copy paste the cmd?

[jovial jay]

Hello

idk if its just me, but i cant download the ovpn file

when i click download my configuration file, it just take me to /404

[tribal burrow]

try regenerate it

[worthy kelp]

Doing the burp intruder room and noticed I the target sub-tab is missing. I can't work out why this is. My proxy isn't populating the editor with the same set of values the instructions show either. Has anyone else experienced this?

[lament flicker]

https://drive.google.com/file/d/1mLsv4E8xvg6CHXFykQSIfKA0MpEHq_kc/view?usp=sharing

i got this error every time i try to connect to the machine from the attack box or from kali linux

[crystal marlin]

Maybe you are using a different version of Burp?
And did you just manually edit a request to GET /support/login ?
Or you sent the original request you made to intruder ?

[crystal marlin]

Probably best to verify so you can send screenshots directly in here

!docs verify

[sharp bison]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[crystal marlin]

Should be unlinked now

[lament flicker]

thx alot :3

[scenic torrent]

Gave +1 Rep to @crystal marlin

[lament flicker]

i got this error every time i try to connect to the machine from the attack box or from kali linux

[crystal marlin]

What room is that?

[lament flicker]

nmap

[crystal marlin]

Well there are several, share the link pls

[lament flicker]

https://tryhackme.com/room/furthernmap#

[crystal marlin]

You are not supposed to ssh into that target machine, it's just to be scanned with nmap.
If a room wants you to ssh into the target machine, it would be mentioned in one of the tasks

[worthy kelp]

I just used the version in the room machine. I just sent a request to the IP of the room's target machine and then sent that to intruder, which seems to be what they want you to do.

[lament flicker]

it mentioned in the first task

[crystal marlin]

Ye, it is mentioned that it's only to be scanned, not to ssh, you right ^^

[naive dust]

Oh the nmap room I love it

[lament flicker]

oh thx but i tried with other room with ssh same problem

[lament flicker]

:3

[naive dust]

Reset the machine?

[crystal marlin]

Well that rooms target machine is not the one you are using Burp on, so I assume you started the attackbox with the blue button.
Did you start the kali machine instead of the attackbox?

Because the kali machine might have an older version of Burp, so I would suggest using the attackbox

[lament flicker]

thx alot @crystal marlin @naive dust

[scenic torrent]

Gave +1 Rep to @crystal marlin

[crystal marlin]

Well if there is the same problem, then it's most likely the same case, you are not supposed to ssh into it

[naive dust]

Damn I didn’t get a +😭

Lmao

[crystal marlin]

• @naive dust