#site-bugs | TryHackMe | Page 7

frosty cape Dec 19, 2019, 6:14 PM

#

It has not upgraded you to level 13

#

I will investigate

glass kindle Dec 19, 2019, 6:14 PM

#

Well I think the start of level13 is 100k

#

The right side just hasn't updated since I got into level12.

frosty cape Dec 19, 2019, 6:58 PM

#

Whats your username on THM @glass kindle ?

glass kindle Dec 19, 2019, 7:27 PM

#

It's haruue @frosty cape

rare swallow Dec 19, 2019, 8:11 PM

#

we seeing double now 😄

📎 unknown.png

vocal raptor Dec 19, 2019, 9:35 PM

#

@frosty cape the l and the 1 are the same for 0xD, whereas in Haruue's screenshot they are clearly 2 different letters 🙂

📎 unknown.png

#

unless i'm level 113

frosty cape Dec 19, 2019, 9:38 PM

#

@vocal raptor

#

Yours is right

#

As there are no more levels

vocal raptor Dec 19, 2019, 9:38 PM

#

No, I meant the "l" in level is the same as the "1" 🙂

#

it says "leve113"

#

whereas in @glass kindle 's screenshot, level is not spelt with a 1 🙂

frosty cape Dec 19, 2019, 9:40 PM

#

Oh yeah!

#

I'll add a space 🙂

#

and change that

#

Thanks good spot btw

#

@rare swallow Fixing that bug too

#

@vocal raptor Its the way your font is showing on your browser

#

They're very very slightly different

#

@glass kindle @rare swallow Both your identified bugs have been fixed.

glass kindle Dec 19, 2019, 9:53 PM

#

📎 thm_fixed.png

#

👍

frosty cape Dec 19, 2019, 10:05 PM

#

Thanks again everyone for reporting bugs!

rare swallow Dec 20, 2019, 2:53 PM

#

👌

earnest brook Dec 20, 2019, 4:35 PM

#

I'm not a subscriber, earlier this year i joined these two rooms but i cant leave them now

📎 unknown.png

spiral flame Dec 20, 2019, 7:55 PM

#

The latest day in Advent challenge has a root flag which is useless

vocal raptor Dec 20, 2019, 8:15 PM

#

i think it's a troll

#

i saw some people laughing about it yesterday

plucky leaf Dec 20, 2019, 8:21 PM

#


color.txt

us-city.txt

country.txt```

#

can't access those links

#

the pastebins links are not loading

#

room password cracking

vocal raptor Dec 20, 2019, 8:23 PM

#

those seem like very normal wordlists you can find on github, can you search for them? 🙂

#

i cant imagine any of them are longer than rockyou haha

plucky leaf Dec 20, 2019, 8:24 PM

#

ye that's what im doing here

#

it was just a heads up about it

glass kindle Dec 20, 2019, 8:24 PM

#

📎 pasetbin-down.png

#

It's just pastebin, not the links themselves.

plucky leaf Dec 20, 2019, 8:25 PM

#

oh okay

#

tho

📎 Screenshot_from_2019-12-20_22-25-27.png

glass kindle Dec 20, 2019, 8:26 PM

#

Cache perhaps? Doesn't load for me or downforeveryoneorjustme.com

vocal raptor Dec 20, 2019, 8:30 PM

#

yeah its probably cached

spiral flame Dec 20, 2019, 8:32 PM

#

@glass kindle You mistyped

#

Pasetbin

#

But dead for me here

spiral flame Dec 20, 2019, 10:24 PM

#

@rugged ermine So... the root flag on Retro is actually root.txt.txt

#

I feel betrayed because that caused me 10x more pain that it should have

strange raft Dec 20, 2019, 10:26 PM

#

LOL

#

I didn't even notice that when i did it

#

that's amazing and it better not be a bug

rugged ermine Dec 20, 2019, 10:27 PM

#

Oh that's a typo haha

livid goblet Dec 20, 2019, 10:29 PM

#

lol

rugged ermine Dec 20, 2019, 10:36 PM

#

whoopsie lol ¯_(ツ)_/¯

spiral flame Dec 21, 2019, 9:30 PM

#

@tribal knoll In RunC escape, the images aren't loading for me

#

Also @frosty cape that VM needs some more resources imo, logging in takes a while

earnest brook Dec 22, 2019, 6:54 AM

#

I don't know if this really a bug.

#

but earlier today i opened cyberadvant room on firefox on my both host and vm, after I finished the challenge, I noticed my rank points.

#

after couple of hours I realized that the room still opened on my host browser, I submitted the challenge solution again on my host (I don’t know why O.o), then my points updated with the latter (I lost some points).

fading laurel Dec 22, 2019, 8:45 AM

#

@earnest brook if you can load a website from a room on your browser after you have terminated the machine, it could be loading from cache. although I didn't understand exactly what happened with your points. can you elaborate a little?

earnest brook Dec 22, 2019, 9:23 AM

#

@fading laurel what im trying to say is that i opened cyberadvant room on my host firefox to see today's tasks while my vm booting

#

after my vm started i opened the room on vm without closing the room or firfox on my host

#

after finishing the challenge on my vm, i looked at my points, it was ~(10160), after ~2hrs i closed my vm, to see that the room still open on my host's browser, i submitted the solutions again, then reload the page, lloking at my points it was ~(10070)

#

if I submitted the solution earlier, any submission came later should not be accepted, right?

fading laurel Dec 22, 2019, 9:29 AM

#

I can't answer that, you'll have to wait for one of the admins to see it. I just chipped in to tell you about browser cache to eliminate that

cloud tundra Dec 22, 2019, 3:01 PM

#

idk if i'm in the right place, but the title of Task 23 in CC: Pen Testing is "privilege esalation".

covert kernel Dec 22, 2019, 3:01 PM

#

Ima jist

#

K

#

Fixed

rare swallow Dec 22, 2019, 8:42 PM

#

it seems that the images are broken in: https://tryhackme.com/room/runcescape

TryHackMe | runcescape

TryHackMe is a platform for learning and teaching cyber security.

#

📎 unknown.png

tribal knoll Dec 22, 2019, 8:46 PM

#

Ih

#

Uh

#

Ohno

#

That bad, but I can't fix until tomorrow

#

Never not using Imgur again

covert kernel Dec 22, 2019, 8:53 PM

#

Litterally use imgur for all room pics

tribal knoll Dec 22, 2019, 8:54 PM

#

I cut a corner

#

Never cut corners

#

Ah

#

That's why

#

My sharex server provider had a drive failure

#

So data loss happened

rare swallow Dec 22, 2019, 8:55 PM

#

oki dokes 🙂

#

thank you ❤️

cloud tundra Dec 23, 2019, 7:09 AM

#

@covert kernel will hate me 😂

#

CC: Pen Testing Task 3 #6 there is no text in the question

covert kernel Dec 23, 2019, 4:16 PM

#

Huh

#

Wat

cloud tundra Dec 23, 2019, 4:17 PM

#

📎 unknown.png

covert kernel Dec 23, 2019, 4:17 PM

#

@cloud tundra whats the task called

cloud tundra Dec 23, 2019, 4:18 PM

#

Netcat

covert kernel Dec 23, 2019, 4:18 PM

#

The issue has been fixed

cloud tundra Dec 23, 2019, 4:19 PM

#

however i've completed the room. and i loved it.

covert kernel Dec 23, 2019, 4:20 PM

#

:)

covert kernel Dec 23, 2019, 4:54 PM

#

Every time I forget to select a room, while making a task, it disables the button and does not enable it when I select a room

#

📎 Screenshot_2019-12-23_11-54-25.png

#

I end up having to delete the disabled='' from the html element

chilly seal Dec 23, 2019, 7:13 PM

#

Not sure if it's a bug, but in the room Ice on Task 5 #2 it says:

In order to interact with lsass we need to be 'living in' a process that is the same architecture as the lsass service (x64 in the case of this machine) and a process that has the same permissions as lsass.

#

But Ice is x86

#

I might just be misunderstanding this though

frosty cape Dec 23, 2019, 7:14 PM

#

Ah okay, thanks @covert kernel will fix that soon

spiral flame Dec 23, 2019, 8:58 PM

#

@chilly seal is it not x86-64?

vocal raptor Dec 24, 2019, 12:22 AM

#

Bug: when you complete a room, the creator adds a new task, you haven't completed the room until all tasks are done but under "my rooms" and "hacktivities" both show as completed

frosty cape Dec 24, 2019, 12:46 AM

#

Yeah, I could reset the 'complete' room - not sure if I can see this as a bug hm

#

But yeah I guess it is

#

Thanks for pointing this out mind

fervent gust Dec 25, 2019, 3:28 AM

#

The links on the bottom, specifically goals, do not show up when logged in. Not sure whether this is a bug or needs to be a suggestion but please add a link to /goals in the side panel so that it's accessible to users who are logged in.

rare swallow Dec 25, 2019, 9:06 PM

#

when searching for the advent calendar no results are showing when looking for the following

📎 unknown.png

#

but if you look for christmas or cyber it shows up

rugged ermine Dec 25, 2019, 10:14 PM

#

Oh its searching the tags

#

We might need to update the tags on the room

rare swallow Dec 25, 2019, 11:23 PM

#

@rugged ermine then you should look at implementing advance search: normal search to look for room names, advanced for tags, created date, etc. That will come in handy one day

#

not sure htb has something like that, so the more features we have the more you can showcase/advertise the platform

raw karmaBOT Dec 26, 2019, 1:21 PM

#

TryHackMe

New issue

This is the input you are about to create:

Name

TryHackMe Kali Box

Description

THM Kali Boxes are lagging
-- Created by: Ashu

#

Issue has been created by @sly raft!

rare swallow Dec 26, 2019, 1:39 PM

#

@sly raft you might want to add that the kali box sometimes gets the caps lock stuck for no reason and i can't find a way to remove so i have to hold down shift

fast fossil Dec 27, 2019, 5:34 AM

#

Room = powershell: Task 3, Question 3 - answer is not correct for the machine's current state

fast fossil Dec 27, 2019, 5:55 AM

#

actually scratch that...wrong window

#

but the powershell room could use more than 512MB RAM

earnest brook Dec 27, 2019, 2:54 PM

#

minor bug

📎 aa.webm

raw karmaBOT Dec 27, 2019, 6:15 PM

#

TryHackMe

New issue

This is the input you are about to create:

Name

Hacktivities Pagination

Description

Pagination doesn't update when changing filters on the Hacktivities page
-- Created by: Ashu

#

Issue has been created by @sly raft!

rare swallow Dec 27, 2019, 8:34 PM

#

VIM room

📎 unknown.png

delicate dragon Dec 28, 2019, 3:34 AM

#

@rare swallow ?

rare swallow Dec 28, 2019, 10:06 AM

#

Just an empty question with no answer @delicate dragon

delicate dragon Dec 28, 2019, 10:06 AM

#

Which room?

rare swallow Dec 28, 2019, 10:21 AM

#

https://tryhackme.com/room/toolboxvim

TryHackMe | toolboxvim

TryHackMe is a platform for learning and teaching cyber security.

#

@delicate dragon this one

delicate dragon Dec 28, 2019, 11:40 AM

#

Strange

rare swallow Dec 28, 2019, 11:54 AM

#

on task 2

tired solar Dec 30, 2019, 1:50 PM

#

I think day 17 on the 25daysofchristmas challenge has a bug. I manually tried all the 30 passwords and still did not get in.

cloud tundra Dec 30, 2019, 3:00 PM

#

The hint is wrong @tired solar

#

The correct psw is over 900k

tired solar Dec 30, 2019, 3:00 PM

#

Oh well then

#

@cloud tundra thanks

still bison Dec 30, 2019, 3:10 PM

#

Im new to this and teally want to learn is there anyone who has time to chat wity me ti helo me through allnof this

spiral flame Dec 30, 2019, 9:17 PM

#

@still bison Read through the accompanying material

#

But also not here

#

Try the CyberAdvent challenges

tired solar Dec 30, 2019, 10:26 PM

#

@cloud tundra is it really in the 900k rangd, I've been at this for 4 hours now

cloud tundra Dec 30, 2019, 10:27 PM

#

@tired solar the best option is to find the flag in another way

spiral flame Dec 30, 2019, 10:56 PM

#

@tired solar known issue for that room

tired solar Dec 30, 2019, 10:56 PM

#

Yea just should be fixed

spiral flame Dec 30, 2019, 10:57 PM

#

Not likely to happen with a lot of these

tired solar Dec 30, 2019, 10:57 PM

#

I should not spend more than 20min brute forcing

spiral flame Dec 30, 2019, 10:57 PM

#

Yep. It's a known issue though. Best way is to move on to the SSH and then find it from there

tired solar Dec 30, 2019, 10:58 PM

#

Ok I got the ssh one quickly. I'll jump back on it through ssh

#

Thanks

spiral flame Dec 30, 2019, 11:59 PM

#

Sorting by newest in Hacktivities should sort by release date

plush cedar Dec 31, 2019, 12:29 AM

#

hello, I have a learning path on 100% and nothing happens. I cannot see other learning paths (if there).
Should I "leave path" ?

spiral flame Dec 31, 2019, 12:32 AM

#

You have to leave the path in order to see the others

plush cedar Dec 31, 2019, 12:32 AM

#

ah ok 😄

vocal raptor Jan 1, 2020, 12:32 AM

#

Hey! I have issues with FTP on ctf100. This is the 4th time this exact same FTP issue has happened, Ashu said it might be because of my IP address (during cyber advent). This is the 5th time I haven't been able to do something because of my IP address. (The extra time was that CTF100 wouldn't recognise my IP address). Can whatever bug this is be fixed please? 🙂 For FTP, I cannot do anything at all related to FTP on some rooms. I get "500 Illegal PORT command." on every command. Per cyber advent, I have tried wget, file browser, internet browser, and ftp. It's definitely not because I don't know how it works. Pls fix :(((

#

PS: I can replicate this on 4 devices, on entirely different networks, with new VPN configs, and a brand new install of Kali. I'm 100% sure this isn't happening because I don't know how something works, I'm 100% sure this is a genuine bug that other people have faced too

#

My THM IP address doesn't ever change, so the bug will always be the same ^^

spiral flame Jan 1, 2020, 1:14 AM

#

1 other person had that issue.

rigid ember Jan 1, 2020, 9:31 AM

#

If you create a new account on TryHackMe and use that VPN does that experience the same issue as this will be a different IP

olive drum Jan 1, 2020, 10:41 AM

#

You don't have to create a new account. You can regenerate your VPN package in "access" tab

vocal raptor Jan 1, 2020, 1:30 PM

#

I've had at least 2 people DM me with the same problem. And regenerating a new VPN does not change anything, as your THM IP address will always be the exact same. A new account will fix this issue, as your IP address will have changed 🙂

#

however the idea of creating new accounts until I win the IP address lottery sucks

#

What would be ideal is dynamic IP addresses, so I can just reconnect my VPN until I eventually do win the TryHackMe IP Address Lottery ™️

frosty cape Jan 1, 2020, 1:55 PM

#

Yeah, regenerating your config file won't change your IP address. Your account is normally linked to an addrese

#

Is this something you want to change? Not sure why you would need your connection IP address changed mind?

#

Aha win TryHackMe up address lottery

#

Lel

#

Fyi, this year we will have quality control in rooms

#

To mitigate bugs :9

#

Might be because of your IP address? I think it's because of the box if you've tried with diffetent OpenVPN config files

#

I'll take a look anyhow :)

spiral flame Jan 1, 2020, 6:37 PM

#

This text is a little misleading, as you need to be a sub to do anything in the room? (Not just to deploy VMs in there)

📎 unknown.png

spiral flame Jan 1, 2020, 11:10 PM

#

UoP Easy has a serious mistake

#

📎 unknown.png

#

The final cracked password isn't in Rockyou.

elder pumice Jan 1, 2020, 11:16 PM

#

THM: your not at number to us...

#

Also THM:

#

📎 Untitled.png

tribal knoll Jan 1, 2020, 11:17 PM

#

That's discords fault

elder pumice Jan 1, 2020, 11:20 PM

#

oh ... i say delete the #648878292551598080 since it doesn't work anyways and then reimplement it when they get the bug fixed. After a quick google search i found this https://help.mee6.xyz/en/article/welcome-messages-1y1t3dx/. TLDR You could disable to welcome messages and enable a private direct message on login.

MEE6 Helpdesk

Welcome messages

You can ask MEE6 to send a message when new users join your server.

spiral flame Jan 1, 2020, 11:25 PM

#

Mistake in Fowsniff CTF

#

Username is different to one it says to use

#

It says to use the sender of one email, but actually it's the sender of the other

covert kernel Jan 6, 2020, 4:26 AM

#

@frosty cape

#

There seems to be an issue with uploading files

#

My files stay at 100% and then hang for a couple minutes and say an error has occurred

worthy stag Jan 6, 2020, 4:29 AM

#

I also had this just a moment ago

#

reuploading now to see if it works this time

covert kernel Jan 6, 2020, 4:31 AM

#

Still broken for me

worthy stag Jan 6, 2020, 4:34 AM

#

ah well that kinda sucks

#

guess we'll just have to wait until tomorrow when it hopefully get's fixed

fervent gust Jan 6, 2020, 6:27 AM

#

You can't login with your username anymore. Only with your email.

#

However it still says you can login with username / email.

spiral flame Jan 6, 2020, 7:35 AM

#

I think I complained about this a while back

frosty cape Jan 6, 2020, 8:39 AM

#

Ahh, I'll test the VM upload issue!

frosty cape Jan 6, 2020, 9:32 AM

#

Found the issue, I am uploading the fixed code

worthy stag Jan 6, 2020, 11:17 AM

#

Weirdly enough I left a vm uploading overnight shortly after saying that and it was successful

rare swallow Jan 6, 2020, 11:19 AM

#

@worthy stag how big was your vm? i was having issues with 10GB ova

worthy stag Jan 6, 2020, 11:34 AM

#

only 1.8GB

#

but still had the issue the first two times

covert kernel Jan 6, 2020, 9:11 PM

#

@frosty cape I still cant upload any files :(

frosty cape Jan 6, 2020, 9:11 PM

#

@covert kernel Whats the error?

#

In your console

covert kernel Jan 6, 2020, 9:11 PM

#

Wait

frosty cape Jan 6, 2020, 9:11 PM

#

Development console

covert kernel Jan 6, 2020, 9:11 PM

#

I can it just doesnt show it updated

#

Uploaded

frosty cape Jan 6, 2020, 9:12 PM

#

Oh?

#

What happens?

covert kernel Jan 6, 2020, 9:12 PM

#

It stays at 100% and does nothing but the material is there

frosty cape Jan 6, 2020, 9:12 PM

#

Oh weird hm

#

Ill investigate

covert kernel Jan 6, 2020, 9:12 PM

#

Yea its still hanging at 100

#

But I can download the material from my page

#

It just finished and said "An error occurred"

frosty cape Jan 6, 2020, 9:44 PM

#

Yeah weird hm

#

I will look into this

raw karmaBOT Jan 6, 2020, 10:12 PM

#

TryHackMe

New issue

This is the input you are about to create:

Name

UI Upload Bug

Description

Hangs at 100%/throws error even when material is uploaded
-- Created by: Ashu

#

Issue has been created by @sly raft!

fervent gust Jan 9, 2020, 7:11 AM

#

I think this may have something to do with the recent update where subscriber machines have better specs

#

📎 unknown.png

#

📎 unknown.png

spiral flame Jan 9, 2020, 7:29 AM

#

Oof, CPU is 2.3GHz and RAM is 4GB

#

Also that should NOT say "memory"

#

Skidy, I'm VERY disappointed

#

(only mostly joking)

frosty cape Jan 9, 2020, 10:08 AM

#

Hm - I will look into this, perhaps the "subscriber" resource tag is overriding the original VM specified resources. Will take a look this evening

patent wedge Jan 9, 2020, 3:15 PM

#

retro box privesc method not working please help

spiral flame Jan 9, 2020, 5:17 PM

#

@patent wedge not a bug, intended issue that there's a fix for. Look around in #room-help and #650425164894568455

covert kernel Jan 9, 2020, 5:22 PM

#

^ not a bug its a feature

fervent gust Jan 10, 2020, 6:17 PM

#

📎 unknown.png

#

Task 4 has a bit of a weird hint

#

existsx2F;has

tribal knoll Jan 10, 2020, 6:20 PM

#

%2F is / , so might be linked to that

#

don't quote me on it though

tribal creek Jan 10, 2020, 7:13 PM

#

retro privesc not working

worthy stag Jan 10, 2020, 7:14 PM

#

It does work it’s just awkward

#

More from @rugged ermine

tribal creek Jan 10, 2020, 7:14 PM

#

i inistialised the google chrome and ie

#

and even changed default browser many times

#

trying to force the link to open in ie

worthy stag Jan 10, 2020, 7:14 PM

#

It does work. You’re just having the same issue I had

tribal creek Jan 10, 2020, 7:14 PM

#

so what u did to fix ?

worthy stag Jan 10, 2020, 7:14 PM

#

Reset the room after an attempt

#

Then try again. I haven’t got it working as gave up wasting time on it but it is still working as a number of people have tested it

tribal creek Jan 10, 2020, 7:15 PM

#

oh okay ill try

rugged ermine Jan 10, 2020, 7:28 PM

#

If you get incredibly stuck and understand specifically what I'm teaching here I can also just give you the flag

#

The main goal here is that exploits are not consistent in real life and this one, while mostly consistent, takes some trial and error. That's why it was optional in the event

tribal creek Jan 10, 2020, 7:33 PM

#

tried reset the box many times ... even with ur solution still didnt work
and i rly want to submit and go the next machine

📎 unknown.png

rugged ermine Jan 10, 2020, 7:50 PM

#

|| 7958b569565d7bd88d10c6f22d1c4063 ||

#

@worthy stag @tribal creek

tribal creek Jan 10, 2020, 7:56 PM

#

much thnx @rugged ermine what next machine do u recommend ?

rugged ermine Jan 10, 2020, 7:57 PM

#

Have you done Blue and Ice?

tribal creek Jan 10, 2020, 8:06 PM

#

not yet

#

i'll start it now

#

but when i think of blue always i think of eternal blue

fervent gust Jan 10, 2020, 11:23 PM

#

📎 unknown.png

#

Seems like it's messed up on quite a few pages

tame inlet Jan 12, 2020, 11:36 AM

#

hi ! cannot connect to rdp host on retro room
@everyone

frosty cape Jan 12, 2020, 11:56 AM

#

@fervent gust Yeah I need to fix that, added to my list, thanks for repoting

wise epoch Jan 12, 2020, 8:36 PM

#

ctfcollectionvol1 -> A sounding QR @tawdry totem

📎 Screenshot_1.png

spiral flame Jan 12, 2020, 8:44 PM

#

ooof

rare swallow Jan 12, 2020, 9:01 PM

#

loool

covert kernel Jan 12, 2020, 11:27 PM

#

Hah

elder pumice Jan 13, 2020, 3:05 AM

#

DarkStar @frosty cape Make the room tags standard... example... there are four reverse engineering rooms on thm ... The tags are "reverseengineering", "Reverse Engineering", & "reverse engineering" so the search does not always work correctly... crossposting this in #522158404614225920

plush tapir Jan 13, 2020, 7:50 AM

#

I don't know if it is an actual bug or if I don't understand the score "system" I finished the room https://tryhackme.com/room/metasploit and I only won 314 (the first two tasks are showed on the chart). Is it because the room is very old or is it an actual bug? Thank you in advance for your answer.

📎 Screenshot_from_2020-01-13_02-34-24.png

TryHackMe | Why Subscribe

TryHackMe is a platform for learning and teaching cyber security.

worthy stag Jan 13, 2020, 8:05 AM

#

You tried refreshing that bad boy

plush tapir Jan 13, 2020, 8:16 AM

#

Yes, I refreshed and logged off but it didn't change

frosty cape Jan 13, 2020, 6:18 PM

#

@plush tapir Its most likely because I changed how many points you get per question, before that others got much more.

wise epoch Jan 13, 2020, 6:59 PM

#

Seems like @raw karma BOT isn't accepting !verfiy command!

spiral flame Jan 13, 2020, 7:08 PM

#

Maybe because it's !verify and done via dms

wise epoch Jan 13, 2020, 7:14 PM

#

Did that @spiral flame

#

@spiral flame

📎 Screenshot_1.png

tribal knoll Jan 13, 2020, 7:16 PM

#

@remote laurel

spiral flame Jan 13, 2020, 7:20 PM

#

bot ded

#

lol

#

@tribal knoll Rank is also dead

remote laurel Jan 13, 2020, 7:22 PM

#

I'll check

tribal knoll Jan 13, 2020, 7:22 PM

#

Yeah, I'm wired into my own thing atm

remote laurel Jan 13, 2020, 7:24 PM

#

Weird stuff, I restarted the bot

#

@wise epoch retry now? It seems to be fine

#

I think something crashed the bot, I gotta investigate this

wise epoch Jan 13, 2020, 7:25 PM

#

Not working @remote laurel

remote laurel Jan 13, 2020, 7:25 PM

#

Yeah I see that

#

It's weird

#

What's your rank?

#

It seems to be crashing only for u

#

weird, I'll check

wise epoch Jan 13, 2020, 7:28 PM

#

@remote laurel 0xD

#

Seems odd to me - BUG HERE as well!

📎 Screenshot_2.png

#

ROOM: https://tryhackme.com/room/webappsec101

TryHackMe | webappsec101

TryHackMe is a platform for learning and teaching cyber security.

#

TASK4 - Q4

plush tapir Jan 13, 2020, 8:40 PM

#

@frosty cape Ok, it just looks weird that only the first tasks are displayed on the chart.

📎 Screenshot_from_2020-01-13_15-36-55.png

spiral flame Jan 13, 2020, 8:40 PM

#

Nope

#

It does everything

plush tapir Jan 13, 2020, 8:42 PM

#

Well, not for me. I've finished the room and only the first ones are displayed here

rare swallow Jan 13, 2020, 8:50 PM

#

give it some time

plush tapir Jan 13, 2020, 10:14 PM

#

I will, hope it will get fixed ^^ Thanks

frosty cape Jan 13, 2020, 10:20 PM

#

@plush tapir Which room for you?

plush tapir Jan 14, 2020, 8:03 AM

#

@frosty cape https://tryhackme.com/room/metasploit

TryHackMe | Why Subscribe

TryHackMe is a platform for learning and teaching cyber security.

tribal creek Jan 14, 2020, 8:41 PM

#

ctfcollectionvol1 : A sounding QR

📎 unknown.png

plush cedar Jan 14, 2020, 8:54 PM

#

Hello,
I have a problem with time settings I guess.
When I deploy any room+extend with 1h,
It appears "vm expiring soon" and "vm expired".

Do you compare the time with the time on my PC? Because that seems to be the problem

frosty cape Jan 14, 2020, 8:54 PM

#

Hi @plush cedar oh really?

#

Does the VM actually expire?

plush cedar Jan 14, 2020, 8:57 PM

#

Yes

#

Can I send a demo in DM?

frosty cape Jan 14, 2020, 8:59 PM

#

Yes please

frosty cape Jan 14, 2020, 9:49 PM

#

For all that are wondering, that bug has now been fixed.

spiral flame Jan 14, 2020, 9:50 PM

#

Oh cool

#

Timezones are complicated

frosty cape Jan 14, 2020, 9:50 PM

#

Yeah, its annoying, but learnt something new tho

spiral flame Jan 14, 2020, 9:51 PM

#

I'm mildly interested if you have a TL;DR of the issue

frosty cape Jan 14, 2020, 9:53 PM

#

Yeah sure,it was pretty simple, my server returns a date (in the timezone its in), just had a function that converts to local timezone, updated the code client side. Not that complicated, but learnt about JS local time conversion.

plush cedar Jan 14, 2020, 9:54 PM

#

Much appreciated upvote

frosty cape Jan 14, 2020, 9:54 PM

#

no worries, if it effected you

#

It must have others too

#

So

#

Thank you for letting me know

plush cedar Jan 14, 2020, 9:54 PM

#

Np :)

spiral flame Jan 14, 2020, 9:55 PM

#

So in summary, JS doing JS things?

frosty cape Jan 14, 2020, 9:55 PM

#

yup

uneven narwhal Jan 15, 2020, 2:05 AM

#

Hi

spiral flame Jan 15, 2020, 2:29 AM

#

(that doesn't go here)

tawdry totem Jan 15, 2020, 1:42 PM

#

@tribal creek Sounding QR patched, sorry

spiral flame Jan 16, 2020, 11:38 AM

#

Does google actually properly index THM's writeups section? Doing SEO on my site and wondering if that's why I see no links

frosty cape Jan 16, 2020, 5:07 PM

#

Not sure hm

#

How would one even go about checking

#

Using Google Dorks?

spiral flame Jan 16, 2020, 5:11 PM

#

Dorks is google's exploit/hacking database, not SEO related

#

I assume you have search console etc set up for tryhackme?

ocean reef Jan 16, 2020, 6:35 PM

#

Not sure if it's a bug or just slow notifications or something, but was just informed today that NinjaJc01 "has released a new walkthrough room, Wifi Hacking 101". The room's been out for 13 days now though

spiral flame Jan 16, 2020, 6:44 PM

#

Yep, I got one via email. It's because it was reapproved @ocean reef

worthy stag Jan 16, 2020, 6:46 PM

#

^

ocean reef Jan 16, 2020, 7:34 PM

#

Was it removed and re-added or something?

spiral flame Jan 16, 2020, 8:22 PM

#

Nope, rooms now require approval and mine came out just before. I think it was approved now and technically re released? @ocean reef

ocean reef Jan 16, 2020, 8:49 PM

#

Oh gotcha, guess that means we’ll be getting those notifications for all the older rooms too?

rugged ermine Jan 16, 2020, 8:52 PM

#

Only a few, it's just because of some minor updates that were made

#

Some of my rooms popped up like that since I made them cloneable

covert kernel Jan 17, 2020, 5:38 AM

#

I cant seem to upload a vm

#

Every upload attempt just immediate gives me an error

spiral flame Jan 17, 2020, 11:55 AM

#

I think search is broken

frosty cape Jan 17, 2020, 11:55 AM

#

Oof

spiral flame Jan 17, 2020, 11:55 AM

#

Search for metasploit brings up my room

frosty cape Jan 17, 2020, 11:56 AM

#

I updated the search yesterday - Ah you're talking about SEO?

#

yeah if a room is re-released, it will notify you 🙂

spiral flame Jan 17, 2020, 11:58 AM

#

@frosty cape nope, talking about room search

#

📎 Screenshot_20200117-115829.png

#

Searched metasploit

#

First few are relevant

frosty cape Jan 17, 2020, 11:58 AM

#

Yeah thats right 🙂

spiral flame Jan 17, 2020, 11:59 AM

#

Rest are not

frosty cape Jan 17, 2020, 11:59 AM

#

📎 unknown.png

spiral flame Jan 17, 2020, 12:00 PM

#

frosty cape Jan 17, 2020, 12:00 PM

#

I only get 1 page

spiral flame Jan 17, 2020, 12:00 PM

#

Then it's broken in firefox mobile

#

Maybe check it in desktop, or I might later

frosty cape Jan 17, 2020, 12:00 PM

#

omg

#

Its really broken on FireFox

#

📎 unknown.png

#

But searching Metsploit on FireFox gives me the same

spiral flame Jan 17, 2020, 12:04 PM

#

Cross browser testing!

frosty cape Jan 17, 2020, 12:05 PM

#

Yeah, really annoying

#

Fixing now

spiral flame Jan 17, 2020, 12:05 PM

#

Thanks

#

Haha

#

Browser compatibility is a fun game.

#

Let's hope no one opens it on safari

frosty cape Jan 17, 2020, 12:06 PM

#

Only supported in FireFox 68

void crown Jan 17, 2020, 12:36 PM

#

Hi, the notification section doesn't quite sit properly when screen size is smaller (e.g. split screen) . Currently on a 13 inch display, with firefox split to the left half of screen.

📎 unknown.png

spiral flame Jan 17, 2020, 12:36 PM

#

That's an oof

void crown Jan 17, 2020, 12:36 PM

#

oof indeed

#

should mention that this only happens when the nav bar is open

frosty cape Jan 17, 2020, 12:43 PM

#

Fixed

#

Refresh your page

#

And try again

void crown Jan 17, 2020, 12:46 PM

#

epic, all good now 👍 thanks!

#

love the notification system btw

frosty cape Jan 17, 2020, 12:47 PM

#

Thanks! 😄

covert kernel Jan 18, 2020, 2:36 AM

#

I still cant upload vms @frosty cape

#

;-;

frosty cape Jan 18, 2020, 10:24 AM

#

@covert kernel Ah really?

#

What seems to be the problem?

#

Just gets stuck?

#

Or it says Error?

covert kernel Jan 18, 2020, 1:17 PM

#

@frosty cape yeah just immediate error

frosty cape Jan 18, 2020, 1:36 PM

#

What does your console error say?

covert kernel Jan 18, 2020, 3:56 PM

#

Bad request

covert kernel Jan 19, 2020, 2:43 PM

#

What should I try?

frosty cape Jan 19, 2020, 3:11 PM

#

Hmm, can you upload it to Google Drive

#

I will download it and upload it

#

I have not had any problems

#

So its a really weird bug

#

I will add it to my to-do list tho

#

Thanks for reporting it

covert kernel Jan 19, 2020, 5:22 PM

#

Kk

#

Ill send the vm when I get home

frosty cape Jan 19, 2020, 5:39 PM

#

ty x

covert kernel Jan 19, 2020, 5:42 PM

#

<3 @frosty cape

tribal creek Jan 19, 2020, 8:31 PM

#

for webappsec , is this by default or a bug happening when creating the user

📎 unknown.png

worthy stag Jan 19, 2020, 8:32 PM

#

Basically saying it can’t open create.php

#

So likely it’s been moved

frosty cape Jan 19, 2020, 8:49 PM

#

Weird, no machine has been updated

#

So you're probably looking at the wrong place? Not sure though, I didn't make that room

tribal creek Jan 19, 2020, 11:00 PM

#

|it happens when i press on create user ||

📎 unknown.png

delicate dragon Jan 20, 2020, 2:15 AM

#

Isn't that LFI vulnerability?

#

Yep, since it's trying to open a stream. It definitely looks like LFI

#

@tribal creek

covert kernel Jan 20, 2020, 3:47 AM

#

@frosty cape ignore previous bug reports, it wasnt a bug with the site I was just being stupid

orchid remnant Jan 21, 2020, 11:32 AM

#

Consistently getting a false positive CSRF warning when logging into the website on phone. Those are the same details I use on desktop with no problems.

📎 Screenshot_20200121-113030.jpg

frosty cape Jan 21, 2020, 11:33 AM

#

Would you mind trying with another browser?

#

I've tested it and it seems to work for me - what is the one you're currently using?

orchid remnant Jan 21, 2020, 11:35 AM

#

Firefox just now. Will do 👍

#

Yep, looks like it's just Firefox. I've got it working in Brave, Opera, Duckduckgo and the 1password inbuilt browser.

frosty cape Jan 21, 2020, 11:40 AM

#

Hm okay thanks

#

I will take a look and see if I can source the issue

#

What version of FireFox?

orchid remnant Jan 21, 2020, 11:41 AM

#

If the app details are to be believed, 68.4.1

frosty cape Jan 21, 2020, 12:21 PM

#

Thank you

spiral flame Jan 21, 2020, 12:30 PM

#

Weird, I haven't had that issue on Firefox mobile

abstract bolt Jan 21, 2020, 3:20 PM

#

Not sure if it's been suggested yet, but might we be able to update the pre-loaded Kali image or does it break something?

covert kernel Jan 21, 2020, 3:48 PM

#

Its been suggested and is planned to be implemented soon @abstract bolt

abstract bolt Jan 21, 2020, 3:48 PM

#

@covert kernel thank you 🙂

#

I've just developed a list of things I hit on when I start the box up

ocean reef Jan 21, 2020, 7:58 PM

#

Going through ctf100 and I'm on Flag 56. Not sure if anyone else had this issue but ||secret.zip is an empty file for me||

ocean reef Jan 21, 2020, 9:40 PM

#

On that note, I noticed that unzipping the ||429E.zip|| gives me ||need PK compat. v5.1 (can do v4.6)||. Going to do some digging but that may be my issue

#

Doesn't seem like it

#

Found my issue for anyone that may have something similar happen. ||It's not super obvious that the password from zip2john 429E.zip > hash; john hash results in a password that needs to be used to actually unzip the files. My machine did not run john properly with just "john hash" so I noticed that there is a password in one of the screenshots in teh write-up that is used here. After running 7z x 429E.zip, it prompted for a password which I then entered. This then put data in the files in Moreflag||

rare swallow Jan 21, 2020, 10:01 PM

#

i think that's the point of @tawdry totem work

ocean reef Jan 21, 2020, 10:13 PM

#

I'd agree if his write-up followed that extra information, mine was more of an issue with my machine not cracking passwords like it should. I blame the hardware on that point though

rare swallow Jan 21, 2020, 10:14 PM

#

yeah, you should ask in the rooms help

#

because it seems like it was designed to be that way, imo

ocean reef Jan 21, 2020, 10:14 PM

#

But it wasn't an issue of not knowing what to do

rare swallow Jan 21, 2020, 10:14 PM

#

i understand that

ocean reef Jan 21, 2020, 10:14 PM

#

It was a bug, but not on the room's end

rare swallow Jan 21, 2020, 10:15 PM

#

did you use your own box?

ocean reef Jan 21, 2020, 10:15 PM

#

For...

rare swallow Jan 21, 2020, 10:15 PM

#

the task itself

ocean reef Jan 21, 2020, 10:15 PM

#

Yes

rare swallow Jan 21, 2020, 10:20 PM

#

alright, idk then

#

everything up to date?

ocean reef Jan 21, 2020, 10:21 PM

#

Yeah, I got it all figured out. But going through all these CTFs and awesome rooms here I've realized that Parrot OS on a MacBook 2012 doesn't tend to crack hashes or passwords very well 😛

covert kernel Jan 21, 2020, 10:39 PM

#

Not with that attitude

elder pumice Jan 22, 2020, 1:29 AM

#

@rugged ermine @frosty cape for the love of all that is my ocd can you please align the email change button next to the email.

#

📎 email_change_button.jpg

frosty cape Jan 22, 2020, 1:30 AM

#

Ohhhh

#

Thats weird

#

Your monitor must be small

elder pumice Jan 22, 2020, 1:30 AM

#

laptop

frosty cape Jan 22, 2020, 1:31 AM

#

I will fix that ya

elder pumice Jan 22, 2020, 1:31 AM

#

thnks my ocd thanks your great skill

frosty cape Jan 22, 2020, 1:33 AM

#

Fixed locally, will be pushed inthe next update

fleet hill Jan 22, 2020, 8:11 AM

#

Juice shop guide link dead for me

📎 unknown.png

#

📎 unknown.png

tribal knoll Jan 22, 2020, 8:13 AM

#

https://bkimminich.gitbooks.io/pwning-owasp-juice-shop/content/

fleet hill Jan 22, 2020, 8:14 AM

#

click the "here" link? I should've highlighted

#

Hopefully it's not my end. Networks been weird today. Dead link is the least of my worries, you've got a great thing going on with the site. Can't wait to get into it.

tribal knoll Jan 22, 2020, 1:58 PM

#

@frosty cape how am I supposed to connect to https://tryhackme.com/room/introtox8664 ?

TryHackMe | introtox8664

TryHackMe is a platform for learning and teaching cyber security.

spiral flame Jan 22, 2020, 2:01 PM

#

@tribal knoll ```The username of the machine attached to the next task is tryhackme and the password is reismyfavl33t. To access the machine, SSH into it on port 22.

Here are a few things to note before beginning the room:```

tribal knoll Jan 22, 2020, 2:01 PM

#

I'm blind

#

mb

spiral flame Jan 22, 2020, 2:01 PM

#

it was in the intro

rotund wasp Jan 23, 2020, 8:46 AM

#

there is a user with 533572 points with 0 room solved, is it some testing or bug?

#

user testeptional.

spiral flame Jan 23, 2020, 9:10 AM

#

Yeah that's Optional breaking THM @rotund wasp

#

@frosty cape I think you've been made aware of the exploit

rotund wasp Jan 23, 2020, 10:27 AM

#

@spiral flame thank you!

frosty cape Jan 23, 2020, 11:23 AM

#

His points have been removed

#

Thanks for letting me know

spiral flame Jan 23, 2020, 11:24 AM

#

@frosty cape It was a PoC, pretty sure it was the private rooms exploit.

tribal knoll Jan 23, 2020, 11:24 AM

#

Nah

#

Can confirm it is much worse

frosty cape Jan 23, 2020, 12:11 PM

#

Thanks to @tribal knoll and @worthy stag for reporting this problem, I have rectified the issue and rolled back the users points.

Its also worth noting, I am rewarding both Sherlock and Optional for reporting this, rather than exploiting it to get #1 on the leaderboards (not that he needs it at place #2).

Thanks to everyone who points it out too. I can't trust any of you ey 😉

rare swallow Jan 23, 2020, 12:34 PM

#

📎 unknown.png

frosty cape Jan 23, 2020, 12:34 PM

#

check again

rare swallow Jan 23, 2020, 12:34 PM

#

we're back up

frosty cape Jan 23, 2020, 12:34 PM

#

Just uploaded patch for THM

rare swallow Jan 23, 2020, 12:35 PM

#

that's good, but when can we buy swag ?

frosty cape Jan 23, 2020, 12:35 PM

#

So it will go down for 5 seconds

rare swallow Jan 23, 2020, 12:35 PM

#

i want some stickers and a tshirt ;-;

frosty cape Jan 23, 2020, 12:35 PM

#

So, I am going to do a "Level based shop" at 25k users.

spiral flame Jan 23, 2020, 12:35 PM

#

What are we at now?

frosty cape Jan 23, 2020, 12:35 PM

#

14.5k

spiral flame Jan 23, 2020, 12:36 PM

#

Also can I get a big sticker?

#

I need to fix a crack in a pc case

rare swallow Jan 23, 2020, 12:36 PM

#

xD

spiral flame Jan 23, 2020, 12:36 PM

#

8cm*6cm ish

frosty cape Jan 23, 2020, 12:36 PM

#

Jesus

#

One big sticker

rare swallow Jan 23, 2020, 12:36 PM

#

try turning it off and on again

spiral flame Jan 23, 2020, 12:36 PM

#

I'm probably getting a defcon one otherwise

rare swallow Jan 23, 2020, 12:36 PM

#

awww

spiral flame Jan 23, 2020, 12:37 PM

#

6x8cm is smol

frosty cape Jan 23, 2020, 12:37 PM

#

I'll make a bunch of cool merch, but at 25k users.

rare swallow Jan 23, 2020, 12:37 PM

#

do the initial members ge something special ;-----;

frosty cape Jan 23, 2020, 12:37 PM

#

Also, it will be level based.

#

So you can only get certain merch at certain levels

tribal knoll Jan 23, 2020, 12:37 PM

#

Are we getting new levels soon?

rare swallow Jan 23, 2020, 12:37 PM

#

loooool

frosty cape Jan 23, 2020, 12:37 PM

#

I might add in 7 new levels

rare swallow Jan 23, 2020, 12:38 PM

#

if that's the case we can't downgrade to get all ;-;

frosty cape Jan 23, 2020, 12:38 PM

#

Or

#

I might re-do levels

#

Because having 20 levels

#

Is kinda a lot

rare swallow Jan 23, 2020, 12:38 PM

#

redo levels and put cool badges on the profile

frosty cape Jan 23, 2020, 12:38 PM

#

Badges on profiles?

#

Watcha mean

rare swallow Jan 23, 2020, 12:38 PM

#

borders i want to say

frosty cape Jan 23, 2020, 12:38 PM

#

Can you give me an example?

#

I don't really get what you're saying

rare swallow Jan 23, 2020, 12:39 PM

#

📎 8fa264c06892963f6d51840faceaa5f4.png

frosty cape Jan 23, 2020, 12:39 PM

#

Oh right, around your avatar?

tribal knoll Jan 23, 2020, 12:39 PM

#

kekw

rare swallow Jan 23, 2020, 12:39 PM

#

yeah, like, cool flex

#

but idk, might not be the best thing

#

you're the smart guy here, come up with something 1337

frosty cape Jan 23, 2020, 12:46 PM

#

📎 Peek_2020-01-23_12-46.gif

#

How about that

#

Different colours

supple island Jan 23, 2020, 4:53 PM

#

That would be awesome, I mean borders

rare swallow Jan 23, 2020, 6:06 PM

#

Yiss. Anything to flex better

#

But i still don't agree with level based market @frosty cape . The people that higher levels won't be able to purchase the stuff they might like from lower levels

spiral flame Jan 23, 2020, 6:07 PM

#

Huh

#

Nah

#

Opposite

rare swallow Jan 23, 2020, 6:08 PM

#

What about the ability of converting points into store currency to buy cool merch and we pay delivery?

#

?

spiral flame Jan 23, 2020, 6:08 PM

#

High ranks will get access to more merch

rare swallow Jan 23, 2020, 6:08 PM

#

Oh

#

I was thinking it's limited to the level

#

For level x you get 3 items and then when you progress you don't get access to those anymore you get a different set

frosty cape Jan 23, 2020, 7:19 PM

#

Nah, so if you're level 1, you can get all basic & level 1 merch, level 2 gets you all of level 1, and the basic

rare swallow Jan 23, 2020, 7:19 PM

#

oh, okay

#

sorry i got confused, then i agree with you

rotund wasp Jan 24, 2020, 5:47 AM

#

hello. I can't access Attacktive Directory challange. When i click deploy, it doesn't deploy and give IP info. Instead Deploy button still lit when i refresh the page.

hazy stratus Jan 24, 2020, 5:50 AM

#

hmm, I think I might know why that is

#

I may need to re-create the VM for the box if it's true

pure geyser Jan 25, 2020, 2:50 AM

#

hello dears

#

why the server is down

pure geyser Jan 25, 2020, 6:10 PM

#

white coloured font mr robot ?

frosty cape Jan 25, 2020, 6:11 PM

#

@pure geyser The server is down?

#

What do you mean?

pure geyser Jan 25, 2020, 6:11 PM

#

i didnt figure out the white font hint mr robot ?

covert kernel Jan 25, 2020, 6:12 PM

#

#room-help @pure geyser

#

This channel is for technical bugs with the site or rooms

ebon karma Jan 25, 2020, 6:25 PM

#

is the musicalstego still working? The link I got says the file is deleted

frosty cape Jan 25, 2020, 6:25 PM

#

refresh your page and try again

#

If it doesn't work, Ill take a further look

olive drum Jan 25, 2020, 6:32 PM

#

musicalstego works fine (just checked)

ebon karma Jan 25, 2020, 6:45 PM

#

indeed, thanks

mossy willow Jan 26, 2020, 9:55 AM

#

the hint for task 4.4 here is looking a bit odd

📎 unknown.png

#

for https://tryhackme.com/room/webappsec101

TryHackMe | webappsec101

TryHackMe is a platform for learning and teaching cyber security.

remote laurel Jan 26, 2020, 1:22 PM

#

@hazy stratus I have the same issue with the Attacktive Directory room, btw

tribal knoll Jan 26, 2020, 1:28 PM

#

Symbols get encoded weird

#

Mainly slashes and apostrophes

frozen tide Jan 26, 2020, 1:28 PM

#

hello there

#

am having some issues with task 4 in https://tryhackme.com/room/introtox8664

TryHackMe | introtox8664

TryHackMe is a platform for learning and teaching cyber security.

#

i'm pretty sure the answer to #1 is 60 but it not correct and idk why

#

but also im big noob so it prob that

tribal knoll Jan 26, 2020, 1:30 PM

#

you might have more luck in #room-help

frozen tide Jan 26, 2020, 1:30 PM

#

cool will do

frosty cape Jan 26, 2020, 3:33 PM

#

@mossy willow Ah yes, I need to fix that bug

snow swallow Jan 26, 2020, 5:22 PM

#

Hello guys

#

I dont understand the answer format how i submit the answer

frosty cape Jan 26, 2020, 5:48 PM

#

The answer format just tells you what the answer looks like

#

To get the formatting correct

covert kernel Jan 26, 2020, 5:49 PM

#

I clarified it in general @frosty cape, I believe hes got it now

frosty cape Jan 26, 2020, 5:49 PM

#

Thanks Paradox 🙂

covert kernel Jan 26, 2020, 5:49 PM

#

:)

ocean reef Jan 26, 2020, 8:46 PM

#

Just a heads up that musicalstego's #4 accepts incorrect answers which messes with following tasks.

#

Didn't see a @pcmhdhp otherwise I'd ping the room creator

tribal knoll Jan 26, 2020, 9:03 PM

#

@covert kernel

#

m00 is pchdhp

arctic jolt Jan 26, 2020, 10:03 PM

#

#2 on Steel Mountain.. I m going crazy, tried all I could think of and would appreciate a hint, assuming its not broken 😛

olive drum Jan 26, 2020, 10:05 PM

#

@arctic jolt #room-help

arctic jolt Jan 26, 2020, 10:05 PM

#

ty

covert kernel Jan 26, 2020, 10:26 PM

#

evening

#

Good evening @covert kernel

#

😁

#

@covert kernel does thou wish to report a bug

#

No I was having troubke cracking this password taking to long haha

#

Ab

#

Ah

#

If thou wishes for help #room-help is always avaliable :)

rotund wasp Jan 27, 2020, 7:36 AM

#

Hello. I cant deploy room in Attacktive Directory. It just wont boot up.

frosty cape Jan 27, 2020, 12:15 PM

#

What do you mean? @rotund wasp - when you click deploy, does it just hang, do you get a machine IP?

rotund wasp Jan 27, 2020, 12:17 PM

#

@frosty cape . when i click deploy it just dont give me IP address, also if I refresh the page 'Deploy' buttom is still lit. When i click nothing same thing. I just subscribed thought maybe it will fix it 🙂

ocean reef Jan 27, 2020, 3:35 PM

#

I think I saw someone post about this before but this is the hint for Task 4 #4 on webappsec101.

📎 SPOILER_unknown.png

#

Should just be ||https://github.com/danielmiessler/SecLists/blob/master/Usernames/Names/names.txt||

frosty cape Jan 27, 2020, 3:43 PM

#

Fixing tonight when back home thanks:)

spiral flame Jan 27, 2020, 3:50 PM

#

This occurs for quite a few rooms with special characters in the hints

hazy stratus Jan 27, 2020, 4:21 PM

#

@frosty cape I have an idea as to why that might be, if it's the case you'll need to spin up a windows box for me

solar vapor Jan 27, 2020, 5:49 PM

#

how can access OWASP Juice Shop after Doploy 😩

spiral flame Jan 27, 2020, 5:50 PM

#

@solar vapor Near the top of the room, there will be a box with a 10.10.x.x IP address. Connect to the THM VPN and then you can use that IP address in a browser etc

solar vapor Jan 27, 2020, 5:55 PM

#

Error

Failed to connect to

#

I got this message

spiral flame Jan 27, 2020, 5:57 PM

#

Where?

solar vapor Jan 27, 2020, 5:58 PM

#

when use ip in browser

spiral flame Jan 27, 2020, 5:58 PM

#

Head over to #site-support

frosty cape Jan 28, 2020, 12:11 PM

#

@ocean reef that bug has been fixed

light whale Jan 28, 2020, 2:52 PM

#

Kenobi room, question how much ports are open. The answer expects to run nmap without any args and not nmap -p-. If you do so there are more open ports

worthy stag Jan 28, 2020, 2:54 PM

#

Ran nmap -sC-sV <ip> and it worked

light whale Jan 28, 2020, 3:01 PM

#

@worthy stag yes. Thats what I am saying. If you omit p, it takes the default value (top ports). If you use -p- you scan all ports.

#

The questions asks how many ports are opened. It should ask how many are opened in a default nmap scan.

worthy stag Jan 28, 2020, 3:16 PM

#

Not really a bug

#

Just requires feedback

cloud tundra Jan 28, 2020, 3:30 PM

#

idk if it's a bug, but the linuxctf room has a mispelled file name and has the x-flag set but it's not an executable file

fresh wing Jan 28, 2020, 4:29 PM

#

stealthcopterctfprimer1 Networking#8 has probably a bug: ||flag says spaces but solution requires _||

fresh wing Jan 28, 2020, 7:14 PM

#

HA Joker CTF Task#18 command should print images, but doesn't

spiral flame Jan 28, 2020, 7:31 PM

#

Can confirm, but it's intermittent

#

After a redeploy I had the images there

#

I think messing about with LXD might cause them to go missing

fresh wing Jan 28, 2020, 7:34 PM

#

i just redeployed, same result, idk, will try again later

vocal raptor Jan 28, 2020, 11:29 PM

#

@olive drum Your Tor room - it's spelt "Tor", when I wrote a chapter of my book on Tor they got very (and I mean, overly aggressively) angry about it. While Tor acts as a privacy network now, its original purpose was for the use of "secure communication" and was created by the US Naval Research Labs for this purpose, released in public a few years later. Might be worth talking about bridge relays too (prevents censorship of Tor. As it is entirely open source you can block all known nodes (since Tor is not a fully P2P network, it has some centralised service name resolution servers (about 7 of them to be exact) and these contain the list of every known Tor node)).

For pentesting, Tor does not make at any point any way to hide you from the fact you are using Tor. To find out if someone is using Tor, you basically just need to ask them (its a bit more complicated, but the Tor devs have made it explicitly clear that they do not want to hide people using Tor

"makes all Tor users look the same." this is by far the most important aspect of Tor, and one that not many people understand. I like this!

"looking to hide their IP address" yes, assuming that you are connecting to a safe guard node (which you can prove)

#

other than that, great room 🙂

spiral flame Jan 28, 2020, 11:30 PM

#

@vocal raptor There's a nice talk on it, there are private bridges that you can ask for

#

Which is how a lot of tor in china works

vocal raptor Jan 28, 2020, 11:30 PM

#

yes, i know :p you have to email using a yahoo email address too

#

to get them

#

or some wweird russian one iirc?

#

my uni has blocked tor

#

like completely

#

i have to use a vpn > tor if i want to use tor :p

#

sucks so much

#

i had an assignment on Tor, and i couldnt even access the website to read the white paper

#

its even more annoying because i live in uni halls and they don't block porn, gambling, nazi websites or the likes but do block Tor

#

((in fact tor is the only one they have blocked that i have found so far))

spiral flame Jan 28, 2020, 11:41 PM

#

I think gmail worked

#

My uni do research on Tor

spiral flame Jan 29, 2020, 1:29 AM

#

@frosty cape I found a mild issue with THM's logins

#

Explained it to Dark

frosty cape Jan 29, 2020, 1:46 AM

#

Oh really?

spiral flame Jan 29, 2020, 1:46 AM

#

Yea

#

Can shoot over a DM if you want

#

I think it's a little more srs than I thought but not too bad

#

@frosty cape

frosty cape Jan 29, 2020, 1:47 AM

#

Ah weird

#

Yes please

tawny halo Jan 29, 2020, 2:57 AM

#

its my first time using it

#

and firefox is telling me that it's having trouble connecting

#

I know my openVPN is good

#

and so is my IP

#

is anyone else having these issues?

spiral flame Jan 29, 2020, 2:58 AM

#

OpenVPN room, go try it @tawny halo

tawny halo Jan 29, 2020, 2:58 AM

#

?

spiral flame Jan 29, 2020, 2:58 AM

#

It might be that the VM doesn't run a webserver. Or doesn't on port 80. Or it hasn't started yet. Many reasons

#

There's a room for getting everything working and making sure it's all good

tawny halo Jan 29, 2020, 2:59 AM

#

I'm using the webgramming room

spiral flame Jan 29, 2020, 2:59 AM

#

The OpenVPN room.

tawny halo Jan 29, 2020, 2:59 AM

#

what is the openVPN room

#

I'm confused sorry

frosty cape Jan 29, 2020, 2:59 AM

#

https://tryhackme.com/room/openvpn

TryHackMe | openvpn

TryHackMe is a platform for learning and teaching cyber security.

#

Thanks for suggesting that James

spiral flame Jan 29, 2020, 3:00 AM

#

Idk ports etc for webgramming but iirc it's seperate challenges so it's unlikely to use standard ports.

tawny halo Jan 29, 2020, 3:03 AM

#

hmm

#

the access page says I'm all good

#

but when I try to curl into my ip onto port 21001

#

it says access denied

#

rather connection refuse

#

wait wut

#

now its working

#

hmm

#

weird

#

actually

#

it seems like the connection keeps cutting

ocean reef Jan 29, 2020, 4:41 AM

#

@frosty cape In our adventure to get me removed from /room/gamezone before I was subscribed, I think we broke it for now that I'm subscribed...

#

📎 unknown.png

olive drum Jan 29, 2020, 6:18 AM

#

@vocal raptor Thanks for the information! Ye you right, obviously, Tor wouldn’t be so useful on the professional scale because even most of the websites nowadays can detect that you are using Tor and simply blacklist you.

covert kernel Jan 29, 2020, 8:09 AM

#

g'day

#

try hack me

frosty cape Jan 29, 2020, 11:29 AM

#

@ocean reef You're now unbanned from the room 🙂

spiral flame Jan 29, 2020, 1:59 PM

#

@frosty cape I got a bug

#

The wifi hacking room on my profile links to binex

frosty cape Jan 29, 2020, 1:59 PM

#

plz send a link

#

Ahh they all link to Binex

#

lol

#

myb

spiral flame Jan 29, 2020, 1:59 PM

#

lol

olive drum Jan 29, 2020, 2:00 PM

#

lol

#

same

#

links to binex

spiral flame Jan 29, 2020, 2:00 PM

#

Yep

#

All of them do

olive drum Jan 29, 2020, 2:01 PM

#

bug confirmed

frosty cape Jan 29, 2020, 2:12 PM

#

Fixed 🙂

#

Thanks for reporting

worthy stag Jan 29, 2020, 2:20 PM

#

😂

rare swallow Jan 29, 2020, 2:44 PM

#

@frosty cape the icons and names are the other way round 😄

📎 unknown.png

frosty cape Jan 29, 2020, 2:45 PM

#

omg, thats so weird

#

Legit not sure how that happened

rare swallow Jan 29, 2020, 2:45 PM

#

xD

#

just noticed, because i know @tawdry totem 's photo

frosty cape Jan 29, 2020, 2:47 PM

#

https://tryhackme.com/releases

TryHackMe | Regular Releases

TryHackMe is a platform for learning and teaching cyber security.

#

Fixed

#

Thanks for letting me know

rare swallow Jan 29, 2020, 2:47 PM

#

cheerio

ocean reef Jan 29, 2020, 7:07 PM

#

Potential bug in gamezone. On Task 4 #2, going through using john atm. Unzipped john and ran ||john hash.txt --wordlist=/usr/share/wordlists/rockyou.txt --format=Raw-SHA256|| but getting ||Warning: invalid UTF-8 seen reading /usr/share/wordlists/rockyou.txt|| it then fails to find the password. Also had ||sqlmap attempts to crack the hash with /usr/share/wordlists/rockyou.txt which also failed||

#

Anyone able to test it? Using the kali VM for this

spiral flame Jan 29, 2020, 7:08 PM

#

Invalid utf is a known thing

#

It's a bug with rockyou

#

But it worked for me, idk if that's the right format?

#

Try Crackstation

ocean reef Jan 29, 2020, 7:09 PM

#

Bugger, will do

#

Yep, worked just fine

pale tiger Jan 29, 2020, 8:24 PM

#

hi

ocean reef Jan 29, 2020, 10:31 PM

#

@spiral flame Mind if I DM you about the rockyou stuff real quick?

spiral flame Jan 29, 2020, 10:31 PM

#

Uh, maybe?

#

I mean go ahead, might not read it tonight

ocean reef Jan 29, 2020, 11:00 PM

#

For anyone that cares, apparently rockyou.txt.gz works with Hydra, though rockyou.txt.gz won't work with hashcat/john 😛

worthy stag Jan 29, 2020, 11:55 PM

#

just tar -xvf rockyou.txt.gz done

#

works with everything after

#

but yeah hydra will take a txt.gz

worthy stag Jan 30, 2020, 3:49 PM

#

Have something big that needs attention

frail vessel Jan 30, 2020, 3:50 PM

#

Juicy

#

Like really, really juicy

worthy stag Jan 30, 2020, 3:52 PM

#

like thic with three c's juicy

lofty apex Jan 30, 2020, 6:23 PM

#

https://tryhackme.com/room/attacktivedirectory bug - VMs not booting

TryHackMe | attacktivedirectory

TryHackMe is a platform for learning and teaching cyber security.

#

@hazy stratus I'm assuming it's your room by the name?

frosty cape Jan 30, 2020, 6:36 PM

#

^^ yeah

#

@frail vessel @worthy stag Thank you for finding and reporting the stored XSS vulnerability. This has now been fixed.

#

As a way to say thank you and be transparent to our community, I would like to publically award you a bug bounty for reporting this safely.

frail vessel Jan 30, 2020, 6:39 PM

#

The entire site right now

📎 ovation.jpeg

frosty cape Jan 30, 2020, 6:40 PM

#

Can you both email ben@tryhackme.com with your username's and method to pay you (PayPal address or debit/credit card)

worthy stag Jan 30, 2020, 6:47 PM

#

The question is, do I get bug hunter yet? 😢

frosty cape Jan 30, 2020, 7:00 PM

#

https://tryhackme.com/p/Optional

TryHackMe | Optional

TryHackMe is a platform for learning and teaching cyber security.

#

Congrats Optional ❤️

worthy stag Jan 30, 2020, 7:00 PM

#

❤️

ocean reef Jan 30, 2020, 7:11 PM

#

Grats haha

worthy stag Jan 30, 2020, 11:44 PM

#

contributor badge size different in /badges

📎 never_unsee.PNG

#

a few on this page that are like it

ocean reef Jan 31, 2020, 6:09 PM

#

At this point, I think I should be in #site-bugs . Alfred Task 3 #4 says to find root.txt in C:\Windows\System32\config\ however it doesn't exist.

#

Tried ||search -d C:\Windows\System32\config\ -r recurse -f root.txt as well as -f *.txt. Both find nothing.|| Lastly tried doing a recursive search from just C:\ and found nothing as well

spiral flame Jan 31, 2020, 6:13 PM

#

@ocean reef ah, yes. I remember this.

#

I don't think you have permissions to view it without migrating process.

#

It's there.

ocean reef Jan 31, 2020, 6:14 PM

#

I'm running as System though 🤔

#

omg

#

Wow, that really was it

spiral flame Jan 31, 2020, 6:16 PM

#

@ocean reef yep, I remembered it

ocean reef Jan 31, 2020, 6:16 PM

#

Well thank you for that, did not realize running as system in one process =/= same privs as system in another process

spiral flame Jan 31, 2020, 6:19 PM

#

@ocean reef yep it's a bit weird

vocal raptor Jan 31, 2020, 7:57 PM

#

@tribal knoll rip the images in task 3 https://tryhackme.com/room/runcescape

TryHackMe | runcescape

TryHackMe is a platform for learning and teaching cyber security.

split barn Feb 1, 2020, 11:07 AM

#

im having issues with the blue machine port 445 seems to be filtered

fresh wing Feb 1, 2020, 2:15 PM

#

https://tryhackme.com/room/hitctf

TryHackMe | hitctf

TryHackMe is a platform for learning and teaching cyber security.

#

just one question

#

why does such a room still exist?

frosty cape Feb 1, 2020, 2:16 PM

#

Ah, in the past anyone could release a room without it being reviewed

#

Now that all public rooms are reviewed before going public

fresh wing Feb 1, 2020, 2:16 PM

#

ah okay

frosty cape Feb 1, 2020, 2:16 PM

#

Bad rooms shouldn't occur anymore

#

I made the room private

#

Thanks for reporting

fresh wing Feb 1, 2020, 2:16 PM

#

nice

#

np :)

#

and another question, i see, i can leave rooms with "Options" on the top right

#

but i joined a random room and it appeared to be paid-only

#

and i can't leave it now, as i get redirected to /why-subscribe with 302 immediately

spiral flame Feb 1, 2020, 2:18 PM

#

You couldn't have joined if you were't subscribed

fresh wing Feb 1, 2020, 2:18 PM

#

weird

spiral flame Feb 1, 2020, 2:18 PM

#

But that's a known thing that @frosty cape was meant to fix lol

fresh wing Feb 1, 2020, 2:18 PM

#

it's on "My Rooms" page somehow

#

okay

worthy stag Feb 1, 2020, 2:19 PM

#

You can join if you aren’t a sub @spiral flame just need the room code

fresh wing Feb 1, 2020, 2:19 PM

#

@worthy stag but i can't leave it anymore?

spiral flame Feb 1, 2020, 2:20 PM

#

Well that sounds like it needs fixing

worthy stag Feb 1, 2020, 2:20 PM

#

Yeah I had this issue a while back

drifting galleon Feb 1, 2020, 3:06 PM

#

when creating a kali instance it hangs when i select UK keyboard

stark ivy Feb 1, 2020, 3:50 PM

#

hello rowbot

frosty cape Feb 1, 2020, 4:02 PM

#

Kali machine freezes when keyboard layout selected
Join random room, stop non-vip users joining vip rooms.

#

On my to-do list

fresh wing Feb 1, 2020, 4:40 PM

#

<3

#

there are btw at least 2 buggy rooms, idk if there is some official bug tracker or something?

spiral flame Feb 1, 2020, 4:41 PM

#

It's been discussed

vocal raptor Feb 1, 2020, 4:55 PM

#

When creating a task, if you don't assign to a room, click "create task" you get this error. If you then try to assign it to a room, it is impossible to click "create task"

📎 unknown.png

#

Which I'm slightly salty that my 30 mins of work was deleted because I had to refresh the page as there was no way to click "create task" once you have selected a roon ;-;

spiral flame Feb 1, 2020, 4:59 PM

#

My process for creating content involves typing it up elsewhere first

frosty cape Feb 1, 2020, 5:38 PM

#

@vocal raptor I am so sorry about that! Putting that to the top of my to-do list

tidal kiln Feb 2, 2020, 2:35 AM

#

anyone else not seeing a way to enroll in the oscp path under tryhackme.com/paths?

#

i'm just seeing red/blue primer series like always

orchid remnant Feb 2, 2020, 2:48 AM

#

If you're already enrolled in the primer series then you won't be able to see any of the other paths. That might be it @tidal kiln?

tidal kiln Feb 2, 2020, 3:00 AM

#

yep, once i left i was able to see other paths

#

also on torforbeginners room, the onion site listed in #3.3 appears to be down

ornate moss Feb 2, 2020, 8:02 AM

#

Vm's that I deploy seem to stop responding after 1 hour
edit: and shutdown

#

Re-opening the vm solves this issue

spiral flame Feb 2, 2020, 10:34 AM

#

@tidal kiln people were reporting that, but at the same time other people reported it was ok

#

@ornate moss yes, intended behaviour. Unless you extend them, they die.

ornate moss Feb 2, 2020, 10:41 AM

#

yea but it shoud expire 12 hours from when I launch it right?

#

if not then thats also a bug

worthy stag Feb 2, 2020, 10:45 AM

#

@ornate moss you get an expiration time once you deploy. It’s one hour and you can instantly extend for another hour.

#

Not sure where you found 12 hours

ornate moss Feb 2, 2020, 10:45 AM

#

wait ill send a screenshot

#

📎 unknown.png

#

📎 unknown.png

#

??

worthy stag Feb 2, 2020, 10:48 AM

#

It goes off your virtual machines time so chances are that’s off

#

Intended behaviour is one hour

ornate moss Feb 2, 2020, 10:49 AM

#

yea that is weird

#

I usually get about 300ms when pinging the vms so maybe that could be a factor

spiral flame Feb 2, 2020, 10:56 AM

#

@ornate moss it just means the time it's displaying is in the wrong timezone

#

@frosty cape we got another timezone bug

frosty cape Feb 2, 2020, 11:46 AM

#

@ornate moss Very weird hm.

#

I will take a look

#

Thanks for letting me know

fossil haven Feb 3, 2020, 3:34 AM

#

Why is the leader board all screwed up. Completing rooms only changes the overall leaderboard. Not the leader board for the month?

worthy stag Feb 3, 2020, 3:35 AM

#

@fossil haven monthly leaderboard is now only boxes released this month

fossil haven Feb 3, 2020, 3:35 AM

#

@worthy stag how do you filter by month

worthy stag Feb 3, 2020, 3:36 AM

#

That isn't a thing but is a great idea to add

fossil haven Feb 3, 2020, 3:36 AM

#

@worthy stag well than idk what boxes to complete for the month

#

oh well

worthy stag Feb 3, 2020, 3:37 AM

#

@fossil haven Jack and Shodan.io are the two released so far this month I believe

fossil haven Feb 3, 2020, 3:38 AM

#

@worthy stag it seems like the only way to know if they are in the current month is to click on them. The task will show the posted date.

#

Would be nice to have a filter option a user clicks on hacktivities though

#

mmmmmm

worthy stag Feb 3, 2020, 3:38 AM

#

Have recommended in #544951750801752079 as it would make logical sense

#

the feature has only been configured this way since today so it's fresh so will require development

#

but will be better in the long run

fossil haven Feb 3, 2020, 3:42 AM

#

@worthy stag just thought it was a bug because it seems like there isn't any docs for the leader board. Unless I'm blind. Will post there in the future for ideas

drifting galleon Feb 3, 2020, 2:15 PM

#

anyone having problems with the vpn?

#

Unroutable control packet received from [AF_INET]18.202.129.195:1194 (si=3 op=P_CONTROL_V1)

frosty cape Feb 3, 2020, 3:03 PM

#

Weird, mine has no problems

#

Have you had this problem before?

orchid remnant Feb 3, 2020, 3:03 PM

#

Sorted it over in #522158404614225920 @frosty cape. There were multiple VPN connections open simultaneously.

frosty cape Feb 3, 2020, 3:09 PM

#

Ahhh yeah thats normally the issue

#

Thanks for helping sort that out

vocal raptor Feb 3, 2020, 10:31 PM

#

@frosty cape having trouble uploading a .jpg for a task, been trying for quite some time. Maybe 20 - 30 uploads attempted. I keep on getting "An error occured. Please refresh the page and try again."

#

its a 36kb .jpeg file

worthy stag Feb 3, 2020, 10:46 PM

#

@vocal raptor why not host on imgur?

vocal raptor Feb 3, 2020, 10:47 PM

#

Because I really don't want Google to index it

#

Unless there's something on Imgur for that haha

#

actually wait i can just use github i guess

worthy stag Feb 3, 2020, 10:48 PM

#

can always just title it something really obscure and it won't affect it

#

github works too but can be indexed if it becomes popular

vocal raptor Feb 3, 2020, 10:49 PM

#

yeah it'll still index 😦

#

maybe thm will accept a zip folder

#

Nope 😦 Maybe my uni is blocking uploading to thm or something

#

i cant upload anything at all 😦

spiral flame Feb 3, 2020, 10:55 PM

#

VPN?

frosty cape Feb 3, 2020, 10:56 PM

#

@vocal raptor Ah yes

#

Just found the problem

#

Uploading fix now

#

Sorry about that

vocal raptor Feb 3, 2020, 10:58 PM

#

haha its ok 🙂

#

and i did just try on a vpn

#

my uni blocks so much it wouldnt surprise me if they blocked uploading to thm

#

can't even access the tor white paper which is needed for an assignment 😂😂

frosty cape Feb 3, 2020, 11:00 PM

#

@vocal raptor

#

Try upload again

#

Fixed it

#

omg lol

#

Deploy Kali machine at uni

#

Then you have no restrictions

vocal raptor Feb 3, 2020, 11:02 PM

#

not a bad idea

#

just do my dissertation in the kali vm

covert kernel Feb 4, 2020, 6:18 AM

#

starts typing essay in cherry tree
kali machine terminates
omegalul

vocal raptor Feb 4, 2020, 6:01 PM

#

When you click on order by, set to newest. click on a room, then press back button it is still "order by newest" however what is on the screen is the default most popular and you can no longer "order by" unless you refresh

oblique kelp Feb 4, 2020, 7:39 PM

#

can anyone help with an issue deploying my machine?

frosty cape Feb 4, 2020, 8:04 PM

#

Sure, lets move over to #site-support

orchid remnant Feb 5, 2020, 12:38 PM

#

Is this abnormal or am I missing something?
Adding code snippets to a new room.

📎 unknown.png

frosty cape Feb 5, 2020, 12:38 PM

#

Yeah thats weord hm

orchid remnant Feb 5, 2020, 12:39 PM

#

I mean, definitely not a huge problem or anything, but slightly amusing nonetheless.

light whale Feb 5, 2020, 1:41 PM

#

EDIT: nevermind 🙂

spiral flame Feb 5, 2020, 1:44 PM

#

Not a bug

orchid remnant Feb 5, 2020, 1:49 PM

#

Got another one, @frosty cape
Not sure precisely what caused it, although I could hazard a guess if pushed.

📎 unknown.png

spiral flame Feb 5, 2020, 1:49 PM

#

Wait, what room?

orchid remnant Feb 5, 2020, 1:49 PM

#

That's one I'm working on. Just a preview, but it's doing the same thing in the task editor

spiral flame Feb 5, 2020, 1:50 PM

#

If you have an exploit for that sudo vuln, DM me

orchid remnant Feb 5, 2020, 1:52 PM

#

Not yet -- only the proof of concept, same as you. I saw the conversation you had in #room-ideas earlier. I'm writing up the theory just now, and testing the POC when I get access to VMware in a bit. Waiting for the exploit before submitting though.

spiral flame Feb 5, 2020, 1:53 PM

#

If you find a working exploit, my DMs are open.

orchid remnant Feb 5, 2020, 1:53 PM

#

Likewise. It's a full root shell you're going for, yeah?

spiral flame Feb 5, 2020, 1:53 PM

#

Command execution as root, via that vuln

#

Doesn't matter if it's full shell etc, you could pop a rev shell or something probably

orchid remnant Feb 5, 2020, 1:54 PM

#

Fair enough, sorry - misread what you said earlier!
Have you tried the POC by the way?

spiral flame Feb 5, 2020, 1:54 PM

#

It's just a segfault

orchid remnant Feb 5, 2020, 1:57 PM

#

Just looked at the exploit-db entry: so it is.
Handy.
I'll keep an eye out for a working exploit. Let us know if you find one too

spiral flame Feb 5, 2020, 1:57 PM

#

I'll keep looking

urban flame Feb 5, 2020, 3:24 PM

#

My mistake, being a tad blind. Could someone add a space between Level and the level number please?

📎 unknown.png

#

Firefox CSS for dashboard is also off, looks somewhat different in Chrome

📎 unknown.png

frosty cape Feb 5, 2020, 4:58 PM

#

Oof

#

Yeah fixing now

urban flame Feb 5, 2020, 5:25 PM

#

Cheers, for a second I thought the level said 110 and 111, would have been awesome to be that high haha

frosty cape Feb 5, 2020, 5:34 PM

#

Aha, I'll change it

winged abyss Feb 6, 2020, 12:24 AM

#

Hey guys

flat maple Feb 6, 2020, 1:18 AM

#

Seems to be a bug with the leaderboards. I thought they changed it so that the monthly leaderboard would only count points earned from rooms released during that month. The scores on the monthly leaderboard are much more than the total points you can earn from the rooms released this month so far. Unless that change has not been made.

frosty cape Feb 6, 2020, 3:32 AM

#

Hi @flat maple read "How points work" https://tryhackme.com/faq

TryHackMe | FAQ

TryHackMe is a platform for learning and teaching cyber security.

#

Essentially, for the monthly leaderboard, you get points for new challenges 100%, old challenges 25%, new walkthroughs 25%

#

Hope that clears your question up

#

Hi @winged abyss 🙂

winged abyss Feb 6, 2020, 3:33 AM

#

Hi @frosty cape 🙃

flat maple Feb 6, 2020, 3:34 AM

#

@frosty cape Thanks for the link, was missing the last part of the info about old rooms still counting but for 25%

frosty cape Feb 6, 2020, 3:34 AM

#

Yeah, no worries

tribal creek Feb 6, 2020, 8:14 PM

#

@sly raft

sly raft Feb 6, 2020, 8:19 PM

#

Hey @tribal creek

#

How can i help? :))

olive drum Feb 7, 2020, 2:35 PM

#

@topaz venture thanks for a wonderful room on Jupyter! I found a small mistake tho. It the room [Task 8] it says "navigate to task 8 directory", while on the server it appers to be named "task 7". It doesn't affect anything significantly, just a small typo

topaz venture Feb 7, 2020, 4:45 PM

#

Thank you @olive drum! Slight oversight. I'm going over it all with a fresh pair of eyes 🙂

olive drum Feb 7, 2020, 4:50 PM

#

animewave

topaz venture Feb 7, 2020, 8:20 PM

#

Renamed all the directories to a much more logical sense, re-uploaded the VM and reflected these changes in the rooms' tasks. Thanks for spotting @olive drum o/

kind flint Feb 8, 2020, 8:29 AM

#

@covert kernel I believe you are the creator of customwordlists. I am having issues with getting results, not sure why, fcrackzip fails to find a password. zip2john gives an error. when trying to use unzip I get oot@kali:~/Downloads/Flags_Part1# unzip flag1.txt.zip
Archive: flag1.txt.zip
skipping: flag1.txt need PK compat. v5.1 (can do v4.6)
zip2john
ver 81.9 flag1.txt.zip/flag1.txt is not encrypted, or stored with non-handled compression type

covert kernel Feb 8, 2020, 6:20 PM

#

DM me with more information @kind flint

fickle locust Feb 9, 2020, 1:23 AM

#

@olive drum Onion link on 'TOR for beginners' down. Hope it get´s back up soon. Thanks!

olive drum Feb 9, 2020, 9:28 AM

#

It is not down! working fine

#

Just try pressing Ctrl+L do build a new connection and you’ll see it @fickle locust

fickle locust Feb 9, 2020, 2:29 PM

#

Yeah working perfectly now, thanks! @olive drum

olive drum Feb 9, 2020, 3:32 PM

#

Np animewave

deft jackal Feb 9, 2020, 8:20 PM

#

there is a badge for this section not listed , LINUX badge

📎 unknown.png

spiral flame Feb 9, 2020, 8:23 PM

#

It doesn't list any badges, those are seperate?

deft jackal Feb 9, 2020, 8:46 PM

#

for example in this section i get burp badge

📎 unknown.png

frosty cape Feb 9, 2020, 9:55 PM

#

@deft jackal We're re-doing the beginner path, so ignore the badge bit for now

olive drum Feb 10, 2020, 6:34 AM

#

it is showing the new room twice

📎 Screen_Shot_2020-02-10_at_8.33.54.png

tribal knoll Feb 10, 2020, 6:35 AM

#

They're different rooms

olive drum Feb 10, 2020, 6:45 AM

#

i am blind sorry

#

got distracted by icons

orchid remnant Feb 10, 2020, 9:55 AM

#

@olive drum did wonder about that. It's because they're the same series. I think I'll change the colour in one of them

frosty cape Feb 10, 2020, 10:15 AM

#

@orchid remnant Yeah different colours would be cool

orchid remnant Feb 10, 2020, 10:25 AM

#

There we go!

📎 unknown.png

frosty cape Feb 10, 2020, 10:31 AM

#

Perf

spiral flame Feb 10, 2020, 10:33 AM

#

📎 unknown.png

frosty cape Feb 10, 2020, 10:34 AM

#

Oof

#

Thanks

#

Fixed locally, will push live tonight

spiral flame Feb 10, 2020, 12:50 PM

#

📎 unknown.png

#

I think this calc is wrong?

frosty cape Feb 10, 2020, 2:41 PM

#

Oh it's not sorry, I competed your room then reset my progress

#

So it's displaying as a completed ueer

spiral flame Feb 10, 2020, 2:42 PM

#

Interesting

bronze peak Feb 10, 2020, 8:40 PM

#

i saw this today in my email when one of the guys i know left my team

📎 unknown.png

#

should be "You lost a member"

frosty cape Feb 10, 2020, 8:49 PM

#

Ahh good spot

#

I want to re-do teams at some point

#

I am not a fan of how its created on profiles

#

I want there to be a team panel

#

And there be a team leaderboard etc..

#

2020 Team Rebrand 🙂

bronze peak Feb 11, 2020, 8:30 AM

#

Yeah that would be great and maybe for now just up the amount of members we can have in a team lol its restrcted to four and there is 6 of us in total that wanna get in to a team together 🙂 thank you!

bronze peak Feb 11, 2020, 9:55 AM

#

TMUX room just seen it says "up" rather than "us"

📎 unknown.png

rare swallow Feb 11, 2020, 11:59 AM

#

https://blog.tryhackme.com/company/hackback2019.html/ doesn't work @frosty cape

frosty cape Feb 11, 2020, 11:59 AM

#

Oh right, where are you getting that link from?

rare swallow Feb 11, 2020, 12:23 PM

#

hackback2019

urban flame Feb 11, 2020, 5:28 PM

#

Is that a bug? The user points > rank points. Guessing highest rank with points so it can't update any higher

📎 unknown.png

worthy stag Feb 11, 2020, 5:29 PM

#

Yeah it's not a bug. It'll just grow now @urban flame

urban flame Feb 11, 2020, 5:31 PM

#

Added an idea submission based on that post, could be something cool

#

Makes it more competitive

spiral flame Feb 12, 2020, 12:51 AM

#

📎 unknown.png

spiral flame Feb 12, 2020, 4:12 PM

#

@frosty cape The editor removes <h2> tags

#

I want headers!

frosty cape Feb 12, 2020, 4:28 PM

#

Updated, will be live soon

fickle locust Feb 12, 2020, 7:10 PM

#

@frosty cape I´ve completed the blue machine and didn´t get the badge

urban flame Feb 12, 2020, 7:12 PM

#

@fickle locust that happens with some rooms, if you have completed the room before the badge was released, it won't update

#

@frosty cape, that's defo one to fix, especially as profile badges are a thing now 🙂

fickle locust Feb 12, 2020, 7:13 PM

#

Okay cheers

urban flame Feb 12, 2020, 7:14 PM

#

I think I'm missing 4 or 5 atm

frosty cape Feb 12, 2020, 7:30 PM

#

Ill write a script to check every user this weekend 🙂

dire sable Feb 13, 2020, 7:55 AM

#

a

covert kernel Feb 13, 2020, 11:50 AM

#

Hi guys, I just want to ask you about room Blue.. There is not possible to run exploit ms17_010_eternalblue. Every try ends with
[+] 10.10.135.179:445 - ETERNALBLUE overwrite completed successfully (0xC000000D)!
[] 10.10.135.179:445 - Sending egg to corrupted connection.
[] 10.10.135.179:445 - Triggering free of corrupted buffer.
[-] 10.10.135.179:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.135.179:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=FAIL-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.135.179:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[*] Exploit completed, but no session was created.

Do you know how to configure vpn/metasploit to work this exploit?

spiral flame Feb 13, 2020, 12:13 PM

#

@covert kernel Yeah it's a dodgy exploit

#

Try updating msf

#

Or the THM kali machine if you can

#

I went through 3 kali installs for it

kind compass Feb 14, 2020, 1:03 AM

#

Hi, this machine is not deploying right, it only says that it's deployed but it doesn't start, I've been waiting for an hour, I also tried yesterday

📎 Captura_de_Pantalla_2020-02-13_a_las_18.59.32.png

orchid remnant Feb 14, 2020, 1:13 AM

#

Hehe. All this time and that's still catching people out.

#

@kind compass it's working just fine. That machine blocks ICMP requests -- it's got a firewall on it.

#

Try adding -Pn to your nmap scan 😁

kind compass Feb 14, 2020, 1:22 AM

#

@orchid remnant Hahahaha OMG!!! I'll never forget this I promise, thank you

orchid remnant Feb 14, 2020, 1:22 AM

#

Hehe, You're welcome 😄

acoustic saddle Feb 14, 2020, 4:03 AM

#

Now we know the request type and have a URL for the login form, we can get started brute-forcing an account.

Run the following command but fill in the blanks:

hydra -l <username> -P /usr/share/wordlists/<wordlist> <ip> http-post-form

Guess a username, choose a password wordlist and gain credentials to a user account!

#

thats not how you brute a website login from what i am seeing. it spits out 2 errors when done in exactly that format just wanted to post here

spiral flame Feb 14, 2020, 9:22 AM

#

@acoustic saddle fill in the blanks and it should work

orchid remnant Feb 14, 2020, 9:30 AM

#

@acoustic saddle I'm heading into a lecture in about half an hour, but if you DM me with exactly what you're trying I'll give you a nudge in the right direction.

olive drum Feb 14, 2020, 2:35 PM

#

📎 Screen_Shot_2020-02-14_at_16.35.05.png

frosty cape Feb 14, 2020, 3:44 PM

#

@olive drum Thanks, updated

#

Changes will be live this evening

tidal kiln Feb 15, 2020, 3:25 AM

#

having trouble getting to websites in Kali VM tonight. can't apt install stuff, can't browse to google.com

#

anyone else?

olive drum Feb 15, 2020, 4:36 AM

#

the internet is disabled until tomorrow i think

tidal kiln Feb 15, 2020, 4:39 AM

#

ahh yes, turning off the ol' internet switch

supple ruin Feb 15, 2020, 3:43 PM

#

I have this issues when use multi/http/struts2_content_type_ognl to exploit CVE-2017-5638
--->> [-] Exploit aborted due to failure: bad-config: Server returned HTTP 404, please double check TARGETURI

#

help me please

worthy stag Feb 15, 2020, 3:45 PM

#

Set the targeturi properly

#

It returns the error

supple ruin Feb 15, 2020, 3:46 PM

#

I set it TARGETURI /struts2-showcase/

timid locust Feb 15, 2020, 5:12 PM

#

Hey peeps

#

Anyone from Ports?

spiral flame Feb 15, 2020, 5:12 PM

#

Wrong chat, but loads of people are from UoP @timid locust

timid locust Feb 15, 2020, 5:13 PM

#

Which chat then?

tribal knoll Feb 15, 2020, 5:13 PM

#

#521382216304033794

spiral flame Feb 15, 2020, 5:13 PM

#

or #thm-community-media

timid locust Feb 15, 2020, 5:13 PM

#

Thanks

vocal raptor Feb 16, 2020, 3:27 AM

#

@frosty cape your THM emails are going to spam on Protonmail:

#

This email has failed its domain's authentication requirements. It may be spoofed or improperly forwarded!

#

"Learn more"

#

https://protonmail.com/support/knowledge-base/email-has-failed-its-domains-authentication-requirements-warning/

ProtonMail Support

Email has failed its domain’s authentication requirements warning -...

Sometimes you may notice a bright red warning message at the top of an incoming email that says, “This email has failed its domain’s authentication requirements. It may be spoofed or improperly forwarded!” This article explains what this message means and what to do when you s...

#

Specifically, Proton thinks you failed one of these:

#

(SPF, DKIM, or DMARC

sly raft Feb 16, 2020, 3:31 AM

#

really

#

Athays strange

#

**that's

#

will check it out later today - thanks for flagging it :)

vocal raptor Feb 16, 2020, 3:37 AM

#

Idk if its causing it cause protonmail lists 3 things it doesnt like about this email, but the email authentication stuff is in red so

📎 unknown.png

sly raft Feb 16, 2020, 3:39 AM

#

As far as I know, we have our domain Auth done properly