but will double check
#site-bugs
sly raft
vocal raptor
Not sure if this is a bug (HTB does the same) but when double clicking on an IP address & copying, it gives you a space in front of the IP (" 10.10.51.192").
mortal root
https://www.mail-tester.com/ is what I use for this kinda stuff @sly raft
acoustic saddle
has anyone done game zone
im doing again exactily what the simple walkthough says but getting errors so i dont understand why thats happening when im following it step by step
woops wrong form
worthy stag
@acoustic saddle be sure to only post in the help channel for this.
acoustic saddle
yeah ... when discord opens it sends me right to this page.... i would think it would send me to where i left off so i just started to type my bad
tidal kiln
all of the images linked in runcescape under Task 3 seem to be broken
prime trellis
Hello, i have this on my dashboard, can't join to the undefined room i think it was removed.
sly raft
that's really helpful @mortal root - thanks 🙂
frosty cape
@prime trellis Thats really weird, will take a look this evening - thanks for reporting
vocal raptor
Is this a bug? I can find the room in my rooms
hazy stratus
Box is down for maintence atm
frosty cape
@spiral flame Search should work on titke
And Attacktive Directory can't be found as its not public (its down for maintenance)
spiral flame
Ah right
ornate moss
It would seem when you boot the kali vm and you get the signin screen. That they machine sometimes doesn't get an associated ip from AWS.
This was just an observation
spiral flame
That's kinda funky
rugged ermine
You have to give it a minute
rugged ermine
Are you connected to the vpn correctly?
wintry cliff
Yep
It worked like 10 minutes ago
And then went down
I tried clicking on "Extend by 1 hour" but didn't work
I tried terminating the VM and starting a new. Didn't work
rugged ermine
Try rebooting your Kali machine, the issue is unlikely to be on our end since that room is pretty popular and you wouldn't be the only one saying something (not to be blunt)
wintry cliff
Ok. I'll try that
rugged ermine
Verify as well that you have only one vpn connection to tryhackme open
you can verify your connection on the access page
Pulling up my kali machine quickly to verify that there isn't an issue on the site end
wintry cliff
Verify as well that you have only one vpn connection to tryhackme open
My Kali* is off yet it says connected
I'll try restarting it
Pulling up my kali machine quickly to verify that there isn't an issue on the site end
Appreciate your help!
soft rivet
rugged ermine
Yeah the site looks ok, it's probably the vpn that's being weird
hollow pecan
Anyone tell about network pentesting ctfs platform?
prime trellis
@prime trellis Thats really weird, will take a look this evening - thanks for reporting
@frosty cape the room is https://tryhackme.com/room/bsidesgtopenmind
frosty cape
Eyy @spiral flame 100%
spiral flame
Yeah but I don't know what it's in 😄
frosty cape
What do you mean?
Its a getting started room guide
Maybe I should make that more clear
spiral flame
Yeah, it felt like it was part of a path
frosty cape
Oh right, Ill make it more clear
orchid remnant
Also, not sure if this has been mentioned, but in the "Use an uploaded file" option of create a task:
safe stump
I know this has been asked before, but is there any way to have debian/ubuntu images that are less than 2 years out of date running on the VMs?
spiral flame
@safe stump 1804 is LTS.
The restriction comes from AWS CLI which is what coverts your OVAs to AMI images to allow them to run on AWS
safe stump
You're absolutely right about ubuntu! I just meant debian, sorry
Debian claim there is a Buster (Debian 10) image: https://wiki.debian.org/Cloud/AmazonEC2Image/Buster
But the wiki is known for being rather... wishful sometimes
@spiral flame
spiral flame
Yea, but the issue is THM can't convert it
tribal knoll
The AMI marketplace != conversion
If the box is made on AWS, you can make pretty much anything that AWS and your wallet permits
spiral flame
You'd have to get skidy to spin up an instance for you and dev in the cloud (which is possible if you have something cool)
Or do it on your own cloud
frail wolf
sup peeps new to tryhackme just making myself known and trying to become "woke"
safe stump
Thanks for the help! I'll work on it locally, and see if I can bodge it into ubuntu
tribal knoll
np
spiral flame
@jmav3rick87#5325 wrong chat
frail wolf
my bad
orchid remnant
Anything we can do about those not lining up?
spiral flame
Oh that's upsetting
prime trellis
I'm not a VIP user and i have this:
How i can leave to Linux Challenges ? it redirects me to https://tryhackme.com/why-subscribe
frosty cape
Yeah, unfortunately that is a subscriber only room - sometimes we make paid rooms free for the weekend.
fast fossil
room "xss", Task 8 "Filter Evasion" - #3 and #4 (still) not giving flags despite multiple successful methods of exploit
rare swallow
@frosty cape may i plz get the badge for retro ;-;
orchid remnant
There's a badge for Retro!? Could I get that added too please? And preferably the extra points that must have been added since I completed it. This graph is driving me nuts:
orchid remnant
Haha. Ah, the joys of completing it early...
rare swallow
and struggling for ages because the bug is clunky
bleak wraith
further,... I think it is a picture missing
prime trellis
The room Crypto, fun? doesn't have 2 files in the first task 1.
orchid remnant
Getting a really weird bug when adding a question to a task. The question is also added to every other task in the room, although the duplicates disappear on refresh.
spiral flame
Yep, I've had that
covert kernel
I've had it to
orchid remnant
Task Creation: For some reason the "Save" button stops working if you put the first letter of words in a mnemonic in bold.
Which is really weird, because that's the same thing I've been doing when expanding acronyms and it's never taken exception to it before.
frosty cape
What do you mean sorry?
Stops working as in the save doesnt update the task
or you cant click save or?
orchid remnant
The hover effects work, but nothing else. The actual onclick action fails: no "Saved" message, and no actual saving of the information
It also just dropped a bunch of information I'd typed up in another task that had supposedly saved, so it's being a bit temperamental today.
orchid remnant
Yep. Gimme a second I'll just re-bold them
frosty cape
Thanks
ah
Its because
The entity is too large
That task must be huge
Are you including images on it?
Try to use Imgur is possible and use image links.
orchid remnant
Should just be text
frosty cape
Yeah ok
Ill see if I can make the request larger
See whats limiting it
Ooo, yeah I can increase it
orchid remnant
It's interesting that it's only happening when adding the <b></b> tags as well. I'll try removing them and just adding a bunch of random information
frosty cape
OKay great 🙂
orchid remnant
You've got a line break feature in this!?
spiral flame
@orchid remnant I'd 100% recommend typing up questions and answers in Cherry Tree or something first
orchid remnant
Yeah, definitely a request length thing @frosty cape -- doing the same when I add a few lines of random information.
Oh, don't worry, I am @spiral flame 😄
Not a huge issue when it forgets the stuff -- just need to copy it in again
graceful bough
I don't know if it's the right channel for this but it might apply for some people : https://security.stackexchange.com/questions/226059/nmap-with-snmp-brute-script-freezes-at-33-33
I've recently had a problem with the snmp-brute script in nmap, turns out there was a bug in the script. It is now fixed on the official SVN repository (and Git mirror). However I don't know if the changes have been pushed to the apt repository for Kali (or other Debian-based distros)
covert kernel
This is more for off topic @graceful bough
This channel specifically is for bugs affecting the site
Or rooms
graceful bough
Oh sorry ^^
spiral flame
Who created alfred? It's a walkthrough but there's a step missing in order to read the root flag
It's come up a bunch in roomshelp
idle knoll
I've having constant issues with connectivity to hackpark (both front end and reverse shell) and it loads very slowly. Is this a known issue or could this just be my side?
orchid remnant
There's a mistake in the Port Knocking room (knockknock) T1Q4, expected answer is 1000 less than it should be
Or, at the very least, I can't get it working with the expected answer, and can with the answer that it looks like it should be from the pcap file
nocturne roost
Didn’t receive “Monthly Hacker” badge yet 
tribal knoll
It's done manually iirc
nocturne roost
Oh
cloud tundra
maybe i've found a bug, but i need to DM an admin for this. @frosty cape can i dm you?
topaz venture
Didn’t receive “Monthly Hacker” badge yet
@nocturne roost Congrats!!
nocturne roost
Thanks!😝
frosty cape
You have the badge now:)
pseudo meadow
@frosty cape is there a bug with the Docker badge?
frosty cape
In what way?
pseudo meadow
In that I've completed the room but didn't get the badge. Are there other criteria?
orchid remnant
If you complete a room before it's given a badge, it doesn't get added automatically @pseudo meadow. That might be it?
I know there are a couple like that for me.
pseudo meadow
@orchid remnant I'm pretty sure the badge was out by the time i started the room. It's just a strange one 😛 getting the room done was fun since I'd spent ages pre-xmas learning Docker/Kubernetes/Ansible
orchid remnant
Ah, fair enough 😁
urban flame
@pseudo meadow, some badges need updating as they may have been released after room completion
pseudo meadow
@urban flame yeah that's cool :) i know there was talk about it a while back and it's not an urgent issue ☺
urban flame
docker-shell hangs and timeouts my connection lol
Please do haha Really intrigued by the box
tribal knoll
It's a lot of late night jank and botching together
Thankfully this isn't one of my partnered rooms
urban flame
It's a lot of late night jank and botching together
@tribal knoll said every programmer ever
tribal knoll
This one especially
There was originally gonna be another vuln, but I gave up on it
tribal knoll
tbf the exploit code might still be on the box for the second vuln
It was trying to make it work with no privellages
Which is ironic, considering there's like 20 entries for /bin/bash in the sudoers file on startup 
That was another bug where I didn't want to go through the upload process again so I tried to fix it in the tasks and walkthrough by getting people to reset before they could notice
urban flame
resetting is a good option
tribal knoll
It's a shame docker-restore doesn't actually work then
urban flame
It may work, it gives output but that's just an echo so could be broken
tribal knoll
OH
Run sudo docker-restore
That might do it
I think you can run docker-restore as sudo, but not cp
But then cp inherits superuser from restore
urban flame
Prob why it still returns the correct output
tribal knoll
It's just a bash script without any error handling because I didn't expect any errors, so yeah
urban flame
Ah! Yeah that worked
hot plover
Is it possible to make your profile private on tryhackme.com?
topaz venture
Hey if you need confirmation of such css problem, I'll happily take some badges!
warm osprey
orchid remnant
Hi @warm osprey,
Maybe move this over to #general?
Bugs isn't really the place for it.
I'll give you a ping over there
spiral flame
these don't line up
vagrant tusk
hello
good morning
i have problem with the alfred machine
someone can help me ?
spiral flame
Wrong chat.
spiral flame
Tell me why that's wrong
spiral flame
quotes doesn't fix it
spiral flame
Few of these now
covert kernel
What task is that @spiral flame
spiral flame
18
covert kernel
Fixed @spiral flame
spiral flame
Nitpicky, but you don't execute to a file
Feel like this might be worded better? I don't know what it's asking as it's not rf
24 and 26 respectively @covert kernel
spiral flame
My binary doesn't have a flag for it so thonk
covert kernel
Weird
spiral flame
Task 32, another blank question
covert kernel
Ill delete the question
spiral flame
I've got most of them that I can get without deploying the box lmao
covert kernel
Yeah
Most of these don't need the vm
As anyone that knows linux can figure these out
spiral flame
@covert kernel this is the man for RM btw
there's no absolutely everything?
oh
I get it
It's just weirdly worded
covert kernel
I removed the question
covert kernel
Noot :)
All those blank questions were weird tho
Also you should try to get the true ending
It may trip you up a bit
spiral flame
I only had a little while to do it
covert kernel
Ah
spiral flame
I mean I could try it from my phone, but that doesn't really do it justice
Also I'll delete my messages that had answers
worthy stag
Error on hacktivities when sorting for "newest" it won't show up with the latest room if it was initially created on the site before being made public e.g. ZTH: Linux is on second page as was made 36 days ago
spiral flame
Known issue, I think the fix is on it's way
It's because publish date isn't tracked
worthy stag
Eh haven't seen it posted as usually have bugs muted
frosty cape
Yeah, I need to change the search to published date, not created.
But I updated the rooms creation date
To make it appear:)
cloud tundra
in task 24 on Linux Room, the table says 1 = x, 2 = w, 3 = r; in the text, later, it says The digit 1 means the file can be read, the digit 2 means it can be written to, and the digit 4 means it can be executed.
orchid remnant
Tried accessing the Windows Base machine -- got an unauthorised user error (which I'm assuming means that room isn't meant to be public). After receiving the error, the Guacamole Kali VM also stopped working, requiring authentication. Worked on redeploy, but there's something up there.
frosty cape
Yeah there is a weird bug when deploying & accessing 2 machines. Looking into it as we speak:)
frosty cape
Yes:)
orchid remnant
Lovely
shy cobalt
little issue regarding the time displayed on the website ... in my profile i've set the country to my actual location, but the time is off by one hour. my location is austria, maybe because of DST?
spiral flame
It picks it up from your browser
Timezones are complicated, a change to a countdown has been suggested and is hopefully coming
shy cobalt
browser time is correct (checked with browserspy.dk), tryhackme is 1hr ahead nonetheless
tame inlet
Mistake
The file can be executed and written to by the user that owns the file ###it is not chmod 341 . it is about linux room challenge
orchid remnant
That is right @tame inlet
-wxr----x
Write and execute for the user = wx = 0,2,1 = 3
Read only by group = r-- = 4, 0, 0 = 4
Executable by everyone = --x = 0, 0, 1 = 1
covert kernel
^
tame inlet
ok
topaz venture
covert kernel
hi
fickle locust
When you change your email account on tryhackme, you still get news letters on both emails
orchid remnant
Second that ^^
covert kernel
Triple that ^^
sly raft
will look into that :))
spiral flame
@white totem #room-help and you'll need more detail than that
white totem
fk sorry im tired af and missed the room
spiral flame
Duplicated writeup
spiral flame
Is this an American date? Could this maybe be either YYYY-MM-DD or pick up the local format?
frosty cape
Ah yes, thanks for reporting those. Will fix them:)
dawn vessel
We love the MM/DD/YYYY format 🙂
topaz venture
no
covert kernel
America should just annex Britain
Just annex the world and make everyone use freedom units
tribal knoll
ye no, you didn't like it when we did it to you
ain't gonna work the other way round smh
spiral flame
woah, reign in the politics
topaz venture
I like the idea of points being measured in "freedom units"
spiral flame
Just use the standardised date.
tribal knoll
History innit
topaz venture
banter fam
spiral flame
this is bugs chat
dawn vessel
Life is not easy in the real world 😉
bleak wraith
I'm looking for lollava.. Paradox, is it you?
covert kernel
Si @bleak wraith
covert kernel
They are
Uh
you see that's actually intended, I left it there so one could see how it's supposed to be done and if they wanted to replicate it
In all seriousness just go with it I guess
bleak wraith
I do not need to create it. it was there..
ok
just this part "how you create that is up to you" confused me..
covert kernel
Sorry
So the directory is already made?
Did you experience this @orchid remnant?
bleak wraith
whatever.. nice room, dude.. thank you so much.
covert kernel
Thank you :)
orchid remnant
Yeah, think that might be what I asked you about yesterday @covert kernel -- all the passwords are stored in a world-readable directory
covert kernel
No I think he's saying
For the binary where it asks you to create a directory
It's already there
bleak wraith
no.. the diretory and the file is already there.
orchid remnant
Ooh, hang on, lemme check that. Sorry, didn't read that right
tribal knoll
Can confirm what he's saying, I had the same
bleak wraith
created 22 feb
covert kernel
Ok
ripe helm
anyone got root flag on linux challenge?
ripe helm
yeah
orchid remnant
Confirm @covert kernel. Definitely there initially
ornate moss
noNameCTF: running tplmap with the --bind-shell will stop the port 9090 from responding
Only solution is to re-open the box
ornate moss
that just with nc?
ornate moss
its still breaking
ornate moss
the whole port stops responding
worthy stag
what command are you running for tplmap?
ornate moss
||./tplmap.py -u 'http://10.10.34.61:9090/40b5dffec4e39b7a3e9d261d2fc4a038/?hackme=' --reverse-shell 10.10.34.61 1337||
ornate moss
yea ill try that
worthy stag
huh?
just setup a nc listener
it should receive the callback
failing that time to do it manually
which actually is really fun
ornate moss
ooh how fun?
warped osprey
||./tplmap.py -u 'http://10.10.34.61:9090/40b5dffec4e39b7a3e9d261d2fc4a038/?hackme=' --reverse-shell 10.10.34.61 1337||
@ornate moss great spoiler :v
worthy stag
Just about to record a youtube walkthrough of noname @warped osprey should have it ready in the coming days 🙂
warped osprey
Nice
ornate moss
ok got the first flag
just using --bind-shell seems to work
@warped osprey sorry, did you want me to delete it?
eternal temple
im getting a very annoying bug with one of the rooms
spiral flame
What room?
eternal temple
blue
spiral flame
haha, what's the issue?
eternal temple
the connection keeps dropping
spiral flame
head on over to #site-support
graceful fox
hello is this discord channel only for the tryhackme community?
reef forge
my room bugged, I got suddenly got disconnected from my reverse shell and I can't access the room anymore I did try restarting the room but still problem.
spiral flame
Probably your VPN
reef forge
I also reconnected my openvpn
ok I disconnected my VPN, still saying I'm connected, how can I fix this ?
spiral flame
Access page doesn't update immediately @reef forge
reef forge
It's almost over 5 minutes now , It should says disconnected now, yet still saying I'm connected. I restarded my machine to kill processes.
spiral flame
Yeah don't rely on the access page
spiral flame
Are you VPN'd?
spiral flame
Are you properly connected?
reef forge
I was connected while ago and got disconnected.
Ops , the room for me seems to be up now. Idk what caused it but It's up now.
spiral flame
They take a hot minute to boot @reef forge
reef forge
yeah seems like, thanks! @spiral flame
eternal temple
finished a room but never got a badge
i think i know the source of the bug, the questions that require no answers are still counted as part of the room which means that you will never be able to finish the room as you cannot fill the empty fields that do not require answers
spiral flame
That's not it
When you click complete, those mark as completed
The room will show as completed unless you missed one
eternal temple
i just manged to do that, for some reason when i was doing it earlier it didnt work
why not just already include those empty fields as part of the progress
spiral flame
Huh? They are included
wise epoch
@rugged ermine @frosty cape whom to report a "Security Issue"?
@sly raft
@spiral flame
sly raft
send an email to hello@tryhackme.com
wise epoch
Got It!
Can it be a PDF?
I along @rare swallow are making a little report on a tiny issue we found!
wise epoch
Isn't it be looking for hello instead of helo in the above room - Task[10]
https://tryhackme.com/room/zthlinux
There's an answer tolerance thing?...
Here was me thinking the only thing it did was lax capitalisation rules
orchid remnant
Huh. How odd
frosty cape
@wise epoch @rare swallow Daymn, nice bug report.
Thanks for reporting
Fixing this asap
wise epoch
You are welcome @frosty cape ❤️
rare swallow
@frosty cape can i dm you?
frosty cape
Yes:)
wise epoch
My thanks to @rare swallow and especially to you for being so quick!
spiral flame
Sorry Skidy, more CSS
rare swallow
@frosty cape anytime 😘
frosty cape
Sorry Skidy, more CSS
@spiral flame Ooo, yeah ill fix that
Thanks for letting me know
crystal escarp
There is a write up error on the last question for crack the hash I think.
topaz venture
Just to clarify, Task #2 Question #4? @crystal escarp
I've completed the room, and it looks okay to me at least 🙂
topaz venture
For room https://tryhackme.com/room/crackthehash?
crystal escarp
Yeah
crystal escarp
The first two write ups say use mode 1100
topaz venture
I mean HMAC-SHA1 -> 160 IIRC
crystal escarp
Yeah
spiral flame
Writeups are out of our control
crystal escarp
Gotcha. Didn’t know. It’ll throw ppl off for sure if they are lost and trying to figure it out lol
topaz venture
Oh yeah it's 473 days old so, you could be reading a write-up that's just as old and they may of changed it hehe
Writeups are external to THM in that sense
crystal escarp
Could be. Bc the third write uses 110 🤷♂️
orchid remnant
Which write-up @crystal escarp?
crystal escarp
Deskel and glarisant use 1100
Sckull uses 110 but they could be out of date. Didn’t think about that.
orchid remnant
@tawdry totem ^^
topaz venture
Oh, Sckull's is the third
orchid remnant
DesKel isn't around much just now, but he might be able to update
crystal escarp
I don’t really care I figured out the right one on my own so it’s all good. Made me work for it.
orchid remnant
Good attitude 😁
crystal escarp
😉
topaz venture
Good job, thanks for reporting regardlessly though!
crystal escarp
No problem.
I work on the blue team right now but pentesting is what I want to do eventually. Blue team is so boring.
Great stuff here.
topaz venture
Hehehe, boring in comparison sure 😛
THM is imho a great way to get into the red-team side of things!
spiral flame
lil bit of blueteam on there, but mostly redteam focussed
topaz venture
The community on here is great too... so any issues are usually resolved rather quickly and efficiently
crystal escarp
Yeah hackthebox is nice but it’s hard to learn unless you follow a video and that’s no fun.
Yeah friendly, I expected most to be rude when you ask a question but it’s the opposite.
orchid remnant
The community here is great
We're kinda suffering from an influx of help just now (and a few trolls popping up, which I don't think I've ever seen before here)
But generally speaking the community is great
Hopefully things will settle down a bit soon 😄
crystal escarp
🙂 Well going to find another fun box, peace.
orchid remnant
Go for it 😁
topaz venture
Nice! GL HF, there's always #room-help should needs be :^^
ornate moss
uh what
rare swallow
@spiral flame or someone, could they provide with the text format of a voucher code, plz ?
spiral flame
A couple alphanumeric digits
rare swallow
a couple means 2 lol
spiral flame
6 mixed case alphanumeric characters @rare swallow
rare swallow
Thank you ❤️
rare swallow
What Cyber Games @frosty cape it's poiting to a 404
rare swallow
cool, thanks
i dropped you an email on hello@tryhackme.com @frosty cape , let me know what you think
ancient crater
hey i need help
i am solving the Blue challenge https://tryhackme.com/room/blue
the shell exploit works
but not the shell_to_meterpreter
ancient crater
oh sorry
orchid remnant
No problem 😄
ancient crater
i thought the machine might not be vulnerable
orchid remnant
Nah, it's just unpredictable
spiral flame
Turns out it's a metasploit issue not a Blue issue
Dark's reputation is safe on this one
covert kernel
Mhm
orchid remnant
What, the redirect @covert kernel? 😄
spiral flame
So you can change the font for the description section of tasks
But not for the questions
But the questions will use a different font if they're pasted with it
Eg from google docs
spiral flame
Uploading to THM slows down the rest of the site massively for you due to the throttling, you basically DoS yourself
spiral flame
One thing now, it doesn't seem to select a task by default for editing on Manage Rooms
But one is "selected" in the dragging section
Also, what happened
Might be because I'm uploading and that's impacting API requests
Yep I think it's the API requests being very slow
spiral flame
Room hint on Ice recon should be changed, -sC no longer tells you the service that's listening on 8000 (Task 2 Q 4) @rugged ermine
-sV will do it
rugged ermine
lemme update that now, good catch @spiral flame
spiral flame
Wasn't me, it was @sinful plover so credit to them
sinful plover
if you look at the hint before you add the answer usually the asterisks match the length of the word, in that case there's 7 asterisks space 4 asterisks space 8 asterisks but the answer is 4 space 4 space 8
spiral flame
@sinful plover oh, maybe execute instead of exec
sinful plover
ah, but the hint points to the Vulnerability Type on cvedetails which lists it as exec, just thinking of n00bs like me 🙂
sinful plover
Task4 question 4 the answer works if you enter ||x86|| but the system clearly is ||x64|| when you run the sysinfo command
spiral flame
Oh poor dark
sinful plover
lol, i am done with Ice now..😆
orchid remnant
@warped osprey you've got a typo in NoName for the record. Root flag starts with "THN," not "THM"
Great box btw 😁
warped osprey
@warped osprey you've got a typo in NoName for the record. Root flag starts with "THN," not "THM"
@orchid remnant ahha yep
orchid remnant
Ah, sorry, did you already know? 😅
warped osprey
@worthy stag report this
orchid remnant
Oops, fair enough 👍
Hey, it works. We know what you mean 😄
@hollow arch is there meant to be a HTTP server running on your new box?
Because, uh, there doesn't appear to be
warped osprey
@orchid remnant I hope next boot2root machine it's more interesting.
and thanks for the feedback.
orchid remnant
No problem 😁
I can't comment on the next ones being interesting, given I have no idea if it's one of my submitted ones that will get picked 😆
warped osprey
xD
orchid remnant
Hey, if it is one of mine, I hope it will be interesting at least
I'm biased though
sly raft
@orchid remnant is there a bug with the XXE box?
hazy stratus
how long have you given the box?
orchid remnant
Just going on an hour and a half
I'll rescan it now, but all I was getting was SSH
Same with @frigid path
orchid remnant
And from the fact he's not got the last question, I would guess that @urban flame hasn't got it working either
Aye. Just done a new scan @sly raft. Same results. SSH and nothing else
hazy stratus
you've tried scanning all tcp ports asw?
spiral flame
Well, sounds like I should deploy it
hazy stratus
doit
hazy stratus
yeah, you woulda grabbed it
orchid remnant
I am now going to try nmap -A -p- -vv <target-ip> but I don't hold much hope
spiral flame
@orchid remnant huh, you have the answer tho
hazy stratus
me thinks someone forgot a systemctl enable apache2
orchid remnant
Yep ^^
Oh, it gives you the answer to the second last answerable question in the question after it @spiral flame
The username is easy. The password you have to exploit for
spiral flame
you have q5
orchid remnant
That... Looks like a bug
spiral flame
orchid remnant
Definitely a bug. Good thing we're already in #site-bugs
orchid remnant
You're doing the testing 😁
spiral flame
That's not a dig at the admins, just weird that we missed this
Not yet
feature needs implementing
orchid remnant
Yeah, I know 😄
Couldn't resist though
It is weird
There are a lot of little interesting things in that room. It's really interesting content, but there's also the giving a flag in the subsequent question. You'd think that would be caught too
orchid remnant
Cool 👍
sly raft
Might take until tomorrow because different timezone
but most of the room should be doable
orchid remnant
Yep, it's really just the last task that's broken. Rest of the room is great 😄
hazy stratus
if you guys need room testers, I hear @tribal knoll has nothing going on except seeing a stupid amount of raid shadow legends adverts
frosty cape
I thought rooms were tested thoroughly...
@spiral flame They can only be tested so much
hazy stratus
spiral flame
@frosty cape I mean, walk it through once it's deployed?
hazy stratus
yeah, thats what i was thinking
tribal knoll
it burns
frosty cape
Ah, @sly raft reviewed this one (sorry to throw you under the bus there bud)
hazy stratus
it seems like a huge oversight
orchid remnant
There's also an answer given in a question. Feels like there might be a better way to word that one?
Obviously much less important than the box working though
sly raft
yep that's my bad - sorry about that
tribal knoll
I remember reviewing a room from the same person that had issues
spiral flame
Wait, you get to review rooms already? @tribal knoll
tribal knoll
I did some for dark when he was moving
spiral flame
ah
frosty cape
I'm going to do the code for room reviewer's this weekend, so Sunday more people can get involved.
spiral flame
awesome
orchid remnant
Will that program be expanding any further at any point in the future, would you imagine @frosty cape?
frosty cape
Yes, as we have more rooms created, more and more will need to be reviewd.
But for now 2 more is what we need:)
orchid remnant
Yeah, reckon you've probably got more than enough with James and Dan 😁
I'd be interested in applying in the future though -- let us know when it scales up a bit! 😄
frigid path
ah, this is where the bugs get submitted. lol...the new room xxe is up now. Thank you for fixing it.
worldly pagoda
Hi guys today i join tryhackme 🙂
frosty cape
Eyy, welcome:)
olive drum
Welcome 
worldly pagoda
My enter not work in Terminal , with Kali Browser ?
frosty cape
What do you mean?
worldly pagoda
i can't hit ENTER
worldly pagoda
How ?
frosty cape
I am not sure, you asked it like a question
Try RDP'ing into the machine using a RDP Client
And not in browser
That might make it slightly smoother?
frosty cape
In the Kali room tasks
spiral flame
Vulnversity, T4Q5. www-data is actually running the web server, the user it wants is not but is another user on the system
Either the question should be reworded or the answer changed
worldly pagoda
i try connect with RDP , it connected but i have Black screen
frosty cape
Give it a few mins
worldly pagoda
ok
rare swallow
Hei @frosty cape did you get a chance to look over my messages?
worldly pagoda
am i should change root password ?
spiral flame
It's a VM with a public IP
With services open
With potential default credentials
On AWS ip ranges.
Yes. You should.
worldly pagoda
yes , but why not mentioned on Kali room
and if i Terminate it and deploy again , new VM has been Created ?
spiral flame
yes
worldly pagoda
thnaks ,
spiral flame
I mean technically the password isn't a default
worldly pagoda
i got it .
worldly pagoda
is there any timezone i can see when my VM Terminate ?
covert kernel
<3 <3 @frosty cape
worldly pagoda
@frosty cape Good news , also its good add auto add 1 hour check mark i forgot to add 1 hour before terminate and it gone
frosty cape
Yeah it should alert you
worldly pagoda
you mean alert will be add ?
frosty cape
Its already added, but if your time is messed up it wont show
Will be fixed next few days
worldly pagoda
thanks 🙂
gritty umbra
Hi guys. Advent of Cyber only has port 111 open! Am I missing something?
orchid remnant
Which day @gritty umbra?
gritty umbra
Day 1 😀
orchid remnant
How long has it been up for?
gritty umbra
a few minutes
orchid remnant
Give it another couple (they can take up to five on the outside), then try redeploying?
orchid remnant
Ah, perfect 😁
gritty umbra
thank u
orchid remnant
Np!
sinful plover
has anyone addressed the T2Q2 hackpark hydra command? The supplied command format (hydra -l <user> -P /usr/share/wordlists/<wordlist> <ip> http-post-form) doesn't work after filling in the blanks with usable info (hydra -l admin -P /usr/share/wordlists/fasttrack.txt 10.10.8.103 http-post-form) and gives the error:
[WARNING] You must supply the web page as an additional option or via -m, default path set to /
[ERROR] the variables argument needs at least the strings ^USER^, ^PASS^, ^USER64^ or ^PASS64^: (null)
The learner is then supposed to figure out how to fill in what's missing somehow? Just curious if this has been asked/answered already.
fervent grotto
envoyer moi svp le lien tryHackMe
spiral flame
@remote laurel can we get a translator?
fervent grotto
please send me tryhackm lien
spiral flame
@fervent grotto https://tryhackme.com/ ?
fervent grotto
tkank you
orchid remnant
@frosty cape Got a bug in https://tryhackme.com/room/thefindcommand
T3Q6 Looks to have been changed. The current answer is very definitely not the right one.
orchid remnant
Yep ^^
frosty cape
It looks okay to me?
orchid remnant
Could I DM you with a screenshot of the answer and command @frosty cape? It, uh, looks a little odd
spiral flame
@orchid remnant Can I dm you a breakdown of my answer?
orchid remnant
Course, go for it 😄
sinful plover
envoyer moi svp le lien tryHackMe
@fervent grotto https://tryhackme.com/room/hackpark
spiral flame
I learnt a new french word though, so that's nice
@covert kernel Can you update your message? The question's wording could be clarified, as it means others as in u/g/o rather than a unix group, and it's definitely missing the file extension
Actually this points at a slightly more serious issue
covert kernel
@spiral flame what message
spiral flame
In bugs submissions
covert kernel
Oh
spiral flame
There's a platform bug it turns out
covert kernel
Ok
spiral flame
So it's only the clarification
frosty cape
There's a platform bug it turns out
@spiral flame oh what's this?
spiral flame
MuirlandOracle and I are discussing it rn
orchid remnant
Possible XSS
spiral flame
Can I shoot you a DM?
orchid remnant
If we can get it working
covert kernel
Oh well that's no good
frosty cape
Okay yeah DM me please
spiral flame
Haven't got it working, but I have a definite issue
frosty cape
Oki, DM away:)
covert kernel
@orchid remnant and @spiral flame good job on your discovery
spiral flame
It's such a rush
orchid remnant
I've got to take the dogs out, but after that, I'm with you on that one
worthy stag
Interested to know what field you found this in
covert kernel
Presumably the field to answering questions
worthy stag
Oh dang
frail vessel
Well done lads, one more thing like that and you can join ya Boi in the Bug rank
orchid remnant
Thought it was three?
frail vessel
I'm not sure tbh, just keep going 😂
rare swallow
it's 3 as far as i am aware
orchid remnant
@frosty cape your new filter might be too strict... 😄
I've got an answer in a room that contains < >
Not being accepted, even as a copy and paste straight from the answer page
worthy stag
minor bug - informative: Users can modify the university when creating a team by intercepting the request and modifying it to whatever they want. Lack of sanitisation maybe?
ornate moss
university 
frosty cape
@frosty cape your new filter might be too strict... 😄
I've got an answer in a room that contains < >
@orchid remnant Huh?
minor bug - informative:
Users can modify the university when creating a team by intercepting the request and modifying it to whatever they want. Lack of sanitisation maybe?
@worthy stag Noted
Just spoken to Ashu, we're going to bring another part-time developer on-board. So you will see lots of these get fixed soon. I'll introduce the new THM guy on discord in the next few weeks.
orchid remnant
@orchid remnant Huh?
@frosty cape
One of the answers in a room I've been working on is ||ping <target>||
It's accepted in the task creation screen, but can't be entered in the normal question answering view.
Pulls an incorrect answer, even when copied and pasted directly from the answer page.
frosty cape
@frosty cape
One of the answers in a room I've been working on is ||ping <target>||
It's accepted in the task creation screen, but can't be entered in the normal question answering view.
@orchid remnant Ah okay, thats high on my list to fix
Thanks for reporting
orchid remnant
Perfect 🙂
spiral flame
I had this when looking for the XSS. Some strings would be valid on creation but make the question unanswerable
orchid remnant
@frosty cape is MACHINE_IP meant to work in questions, or just task descriptions?
Because if it's meant to work in questions, it doesn't appear to be
orchid remnant
My introtonetworking for Ashu
Traceroute task
Chance I'm just messing the syntax up
topaz venture
Do you have it in a code block?
opal elk
Hi all
orchid remnant
No -- although that might be it 😁
Can you actually put code blocks in questions?
opal elk
I'm new to security
topaz venture
Yeah I believe so! @orchid remnant But if not, that'll be the reason why - MACHINE_IP needs to be in a code code block to work 🙂
orchid remnant
Well that failed
covert kernel
Lol
topaz venture
As it turns, you can do it in the task description, not the question by the seems
seems to be limited formatting options for the actual question text
spiral flame
That'd be a nice thing to add
orchid remnant
That, wouldn't surprise me
Possibly not though, given apparently they need to be in code blocks
covert kernel
Yeah
orchid remnant
Don't think that's ever been possible?
covert kernel
Machine IP needs to be in code blocks
spiral flame
I mean it works in the description without code blocks
frosty cape
Works for me
orchid remnant
In that room @frosty cape?
frosty cape
Ah
spiral flame
Haven't tried it as part of a question
frosty cape
Ill update so it works with <code> tags
orchid remnant
Oh, update it so we can use code tags in questions, Skidy?
spiral flame
only works in code tags, or? @frosty cape
frosty cape
Without tags
Im updating the code to include it:?)
Wait it works for both
With me
orchid remnant
7
frosty cape
@orchid remnant On the questions, you only have a limited HTML editor
So things like <code> don't work
And then, the <code> is treat like a string
So it wont identify it
orchid remnant
Oh, I know -- I tried adding that at CMNatic's suggestion when it didn't work the first time
Just in case
orchid remnant
Text or background?
frosty cape
Nay worries
main shore
Hello
orchid remnant
Same ^^
orchid remnant
Uh, I can assure you, that was just from trying to login...
Firefox mobile browser
worldly pagoda
why sometimes Paste not work on Browser ?
rare swallow
ctrl shift v if you are talking about kali @worldly pagoda
orchid remnant
If you're meaning ll then yeah, you don't need it @covert kernel
Also, #room-help
worldly pagoda
@rare swallow no i mean other
why i can't access http://10.10.123.52:3333/
i connect to vpn , and have ping
but web server not up
orchid remnant
Is there a webserver on that port @worldly pagoda?
worldly pagoda
yes
orchid remnant
Which room is it?
orchid remnant
And it came up in the nmap scan I take it?
worldly pagoda
[Task 4] Compromise the webserver
orchid remnant
I take it you've scanned the server with nmap and it found the webserver?
Sometimes they take a little while to fully start up
worldly pagoda
i scanned again
[Task 4] Compromise the webserver
3333/tcp open http Apache httpd 2.4.18 ((Ubuntu))
orchid remnant
Hmm, OK, that should be working then. Can you curl it?
curl http://10.10.123.52:3333
spiral flame
Are you connected to the VPN from your host, or from your kali VM?
but on my box not opened
@worldly pagoda what do you mean?
worldly pagoda
@spiral flame on my Computer i can't access to that web address but in kali linux i have access , i have ping on my computer
spiral flame
Are you connected to the VPN on your computer?
Where are you using kali? @worldly pagoda
Ping working doesn't mean you're pinging the right host.
worldly pagoda
yes i connect vpn on my Computer
orchid remnant
Is that the VM, or the Host?
spiral flame
Where's kali running?
worldly pagoda
i connect to Kali with RDP
worldly pagoda
yes
orchid remnant
You don't need the VPN at all then
But it makes it even weirder that you can't access the site.
worldly pagoda
yes really weirder
orchid remnant
You said that curl works, yes?
spiral flame
@orchid remnant they can't access the site from their computer
worldly pagoda
from kali yes
worldly pagoda
yes but kali was not Smooth and i wont use at my pc anyway np i continue with kali on thm
spiral flame
Not a bug, head to #site-support
orchid remnant
Sounds like a VPN issue then. Probably the classic more than one connection simultaneously.
That would work with the Kali VM given you're not using the VPN through it, but would explain why it doesn't work locally.
worldly pagoda
to get Reverse PHP shell on kali linux am i should do something ?
orchid remnant
What do you mean @worldly pagoda?
As in, how do you catch the reverse shell connection?
worldly pagoda
any firewall or something ?
orchid remnant
No, there's no firewall. Not on the Kali machines anyway
spiral flame
worldly pagoda
worldly pagoda
@orchid remnant Thanks
autumn garnet
I need help with the escalation privilege in Blue
@worldly pagoda could you help me bro?
spiral flame
@autumn garnet you too, #room-help
autumn garnet
Thanks
karmic cypress
Hi, just for improvement purpose, it is painful to relaunch an attacked computer and go for the same actions just because of focusing on other pages
karmic cypress
Not really, after an half day on thm, my guess is that after a certain time without interacting with the box, it terminates automatically
spiral flame
Boxes terminate 1 hour after you click deploy. @karmic cypress
You can extend it with the extend button.
Extends by 1 hour, but you can only extend it when it has less than an hour left
Timezone detection is currently a little broken, but this is being changed to a countdown soon
covert kernel
@spiral flame I noticed that . If I open tryhackme from my physical machine , it detects the time zone correctly
If I open it from my own Kali Vm, the time zone looks out of wack, like early morning or 12 hrs before
@karmic cypress I’m having the same problem. The VM terminates itself for no reason. But I haven’t clock it , I will tomorrow . If it terminates after an hour and that’s normal that may explain , if not , I think there’s a bug
That's because the Kali vm isn't synced to your timezone I believe
Fortunately
Actually, I thought the same but it’s set to central time , I’m in Texas
This bug is now irrelevant as the timezone countdown has been replaced with a regular countdown :)
Ok
What about the machine dying itself ?
So nothing is linked to your timezones
That's not a bug
Thm does that for every machine
You can keep extending it as needed though
Ok, so what’s the max time ? 1 hr ?
Yea
Ohh ok, I’ll check tomorrow and see if is stable
And you can keep extending as needed
I thought it was more , I was using the deadline and it says was gonna expire tomorrow morning and all of the sudden died on me
But that was hours ago
Yep now that we have a countdown
You don't have to worry about timezone shenanigans
Yep, I see a countdown now
Cool. I’ll check tomorrow then, thanks for the update
Np :)
Good night (or good day , not sure where you are )
😃
covert kernel
ToolRus Room: Tasks #8 Kali and macOS, nikto can't find the Ektron CMS version information. (macOS take more than 1 hours with nothing in return). Please check the room again.
Also, I exploit tomcat_mgr_uploads and try to find on the VMs, but It doesn't have find or locate command. So worthless trying.
spiral flame
It's from hello@tryhackme.com for me
Same as all the others
But I think what JKR is saying is the sender field says "hello" rather than "TryHackMe"
worthy stag
aye jkr isn't dead
frosty cape
But I think what JKR is saying is the sender field says "hello" rather than "TryHackMe"
@spiral flame Ah right, yeah thats weird because AWS SES should send it from the same email/sender
spiral flame
I get them all from "hello"
covert kernel
Same
spiral flame
That's what's being said
frosty cape
But I think what JKR is saying is the sender field says "hello" rather than "TryHackMe"
@spiral flame ah yee
Yeah yeah
I get ya
❤️
<TryHackMe>
frosty cape
Minor, email sender isn't TryHackMe for subscription cancellation emails
@mortal root
Will go be made live tomorrow - Thanks for letting me know
mortal root
aye jkr isn't dead
@worthy stag You can blame a dissertation and finding post-uni apartments for that one :p
strange raft
nvmmmmmm
feral echo
Uhm. For the room RP: Web Scanning --> Task 3, Question 8 --> OWASP does not report that anymore. Maybe it has something to do with the version.
And in ToolsRUS, Nikto does not find Ektron anymore. I've tried it on 3 machines, ran nikto with -id, as in the writeup.
orchid remnant
Can't speak for the first one @feral echo, but the second one is a known bug. I think fixing it is on the To-Do list. In the meantime, if you DM me with the command you used, I'll check it. If it looks like it should give you the answer, I'll tell it to you.
left fossil
Hey hello
can anyine help me please
I am new to tryandhackme how to setup for free
spiral flame
@left fossil #site-support
loud folio
i am currently trying to the cruck the hash box. When, i am trying to break the bcrypt hash with john the ripper it says that the estimated completion time is in one monthe! (note that i am using john inside a vm). Anyone knows a faster approach?
spiral flame
Yes
It's a 4 character password
Use hashcat incremental with 4 lowercase characters
Bcrypt is designed to be hard to break
left fossil
Hey guys I am learning nmap scanning Do I have to perform these scan on tryhackme.com site.
spiral flame
@loud folio #room-help @left fossil and you
These aren't bugs
Use the right channel please
silent turtle
anyone knows the format of input in blue machine number of ports open i found the ports but its not excepting the input
can anyone help?
celest bronze
@silent turtle #room-help
feral echo
anyone knows the format of input in blue machine number of ports open i found the ports but its not excepting the input
@silent turtle I believe it said ports under 1000
silent turtle
@feral echo they are 135,139,445 and udpports are 123,137,138and 500 but it shows its incorrect
feral echo
Try entering the tcp only
silent turtle
@feral echo only tcp ports are 135,139 and 145 but its showing incorrect to that too
feral echo
... enter the number of them... :) How many are there, in total? A single digit.
silent turtle
@feral echo lol i was dumb thanks a lot
@feral echo do we have to find all port vunerablility or just those three port that we mentioned sorry for bothering a lot its my first machine here.
silent turtle
okay thanks