New bug after the timer rework. Deploying the Kali machine really screws the expiration time. It's counting up on my screen
#site-bugs
floral tusk
ornate moss
Infinite kali machine
@frosty cape One of my class mates isn't getting the reset password email
frosty cape
Normally its because they're not entering the exact email they used to sign up
ornate moss
He says when he used the same email in the signup again and it says its in use
frosty cape
Weird, can you get him to email us please: support@tryhackme.com
We can help him sort it out
ornate moss
Sure can!
frosty cape
Thanks:)
ornate moss
Ok hes has sent the email :)
sly raft
^ replied to it π
@covert kernel i was unable to reproduce the bug you posted on the bug-submission
covert kernel
@floral tusk could you share how you got that bug to happen
floral tusk
Everytime I deploy a machine the timer starts at 0 and counts up. If I click the button to add an hour, the timer gets set to 60 and counts down like normal, except I only get 1 hour from the time 8 click the button
ornate moss
frosty cape
@sly raft
The machine has expired
So just needs a check to say "Machine Expired"
@ornate moss Did you get a popup saying "Machine Terminated"?
ornate moss
Yea
frosty cape
Yea, so thats a super easy fix. Thanks for letting us know π
ornate moss
:)
sly raft
ok thanks @floral tusk - will look into it :D
floral tusk
I see the same timer but it's right after starting it. It just counts up though. No termination
ornate moss
I keep having problems with the VPN not getting reverse TCP requests
It works fine on the kali room but not on local
spiral flame
@ornate moss make sure there's only one instance of the VPN connection running too
ps aux | grep openvpn
orchid remnant
And of course, the problem 99% of the time ^^ π
spiral flame
Weird stuff happens when you have 2+
orchid remnant
*cough* 36 *cough*
ornate moss
thorn briar
when reducing browser's width some of the content squeezed nicely but some content breaks the boundaries and I think that behavior should be punished 
icy turret
where can i locate the bookclub
dreamy mauve
heeeeey
I solved the seventh task from cryptopals, but I can not choose the format of the answer please tell me
rare swallow
@frosty cape is https://tryhackme.com/room/xss broken?
can't seem to get anything back with the payload specified and a few alterations from it? T3 #5
frosty cape
Its not broken, some payloads don't work. Try using more simple methods:)
rare swallow
then what's whe point of the script provided haha
rare swallow
yeah, tried a few different payloads but still doesn't return anything :/
wise lodge
Should say "finished OUR work"
olive drum
isn't it this one?
wise lodge
Ah ok, suppose that could be right π
wise lodge
the tmux one
rose kettle
isn't it this one?
@olive drum so i am stuck on the last question of task 3 of this room called tor. I think the *.onion site is no longer available (pls confirm ?)
spiral flame
People keep thinking it's down and it never is. This isn't a bug, it's #room-help
rose kettle
ohk ...
austere igloo
Not sure if this is just me being dense but I am in the attackdive directory room and everytime I deploy it I get a box with only 3 open ports. I waited like 10 minutes and no new services start. The other odd thing is one of ports is ssh which would be odd to see on a Windows box right? I checked the write up to make sure I wasnβt just being an idiot and it isnβt listed on there as open either. Anyone got same or is it just me.
spiral flame
@rose kettle ooh sorry, it was a bug. Thanks for reporting it
rose kettle
@spiral flameno worries I was mind bent for sooo long
floral tusk
Still having problems with the machine timer creating Kali boxes. It used to have a countdown until you could access the box, but that countdown now just counts up and doesn't show remaining time left. This makes it hard to tell when to add time to the box. Adding time proactively doesn't help because the button resets the remaining time to 1 hour instead of adding an hour. If I add an hour to the box right after it is created I can see a countdown from 1 hour but am no longer allowed to add time to the box
sly raft
can you DM me @floral tusk
spiral flame
@humble jay What do you mean?
spiral flame
The page won't load?
worthy stag
Oh yeah I have that too
tribal knoll
Refresh and switch to a different tab
worthy stag
Just clicked to check
worthy stag
Refresh and switch to a different tab
@tribal knoll Doesn't affect it
humble jay
i tried incognito
tribal knoll
oh
humble jay
i tried new browser
spiral flame
@frosty cape it borked
worthy stag
@frosty cape This one is you dad
tribal knoll
that's my usual fix for that
orchid remnant
Confirm -- it's dead
humble jay
?
spiral flame
Oh weird
frosty cape
@humble jay What room is this?
humble jay
no its for access to the kali
frosty cape
for my courswork
@humble jay Ah, really? can you DM me the link
humble jay
machine they provide me ;/
frosty cape
Are all rooms not working?
spiral flame
No, just kaliuop
https://tryhackme.com/room/kaliuop
@humble jay @frosty cape
Oh the description says use the regular kali lol
spiral flame
@humble jay It says please use https://tryhackme.com/room/kali instead in the description, it just gets truncated
humble jay
i just clocked that now
spiral flame
So there's a fix for the meantime
frosty cape
Fixed
spiral flame
I'm interested now
frosty cape
Its because Toby has locked the KaliUoP room
spiral flame
Ah
spiral flame
Can you leave a locked room?
Yes, sweet
@rugged ermine Nessus being nessus again, someone has a different answer for the Apache version
worthy stag
pog locked room hype
covert kernel
The nessus room was weird for me
I recall every answer it gave me being completely wrong
Then resetting the machine and everything being right
ornate moss
Searching in Hacktivites before it loads doesn't allow you to search after it does.
frosty cape
Oh right, will get on this:)
spiral flame
Also applies if you press back, weird stuff happens
frosty cape
Searching in Hacktivites before it loads doesn't allow you to search after it does.
@ornate moss Fixed
Also applies if you press back, weird stuff happens
@spiral flame What type? Works ok for me?
frosty cape
Ah okie
spiral flame
Can't reproduce, mainly because I can't remember how I broke it
frosty cape
Ok, if you do let me know
covert kernel
I am sorry, but I think Kenobi, task#2, is wrong or the answer is not properly formulated
It should be corrected or the question should be more clear
Mods, feel free to PM me and I can elaborate more
pale notch
Hey gang, when I terminate a "room" virtual machine and then re-deploy, is the re-deployed machine completely fresh, or is it the same machine I was just interacting with before termination?
sorry wrong room
spiral flame
@pale notchnot a bug, but completely fresh
frosty cape
@celest bronze because there is no wiggle anymore, it shows but they overlap exactly
So it doesn't appear to show
I'm going to change to barcharts anyway:)
Maybe, but sure yet
Or show score over time, like koth
orchid remnant
Long code blocks break the CSS in rooms:
Multi-line code blocks would be really nice
vague atlas
serious one
vague atlas
sure
copper lotus
Hello, I can't connect to Hackpark machine even I've tried to re-deploy machine. Are there any problems with that machine ?
spiral flame
@copper lotus how are you trying to connect? Are you connected to the VPN properly?
covert kernel
hello
spiral flame
@covert kernel wrong channel unless you havw a bug to report
rare swallow
@covert kernel wrong channel unless you havw a bug to report
@spiral flame lol
copper lotus
@spiral flame Hi James, I am using VPN. And yes, I can connect to others machine, but Hackpark, I can't
copper lotus
@spiral flame I try to access Hackpark's website, but it's usually get time out. Sometimes I can access, but after few minutes, it got time out again
spiral flame
Have you checked that you're only running a single openVPN connection?
copper lotus
@spiral flame yes, I am running only one openVPN connection. I rooted Steek Mountain few minutes ago, I don't think my VPN connection have issues
spiral flame
What are you connecting from?
copper lotus
from Vietnam
spiral flame
What OS etc?
frosty cape
@spiral flame Hi James, I am using VPN. And yes, I can connect to others machine, but Hackpark, I can't
@copper lotus How long ago did you deploy HackPark?
copper lotus
Kali Linux
frosty cape
It can take up to 5 minutes to deploy and configure.
copper lotus
copper lotus
I've deployed Hackpark again, let's wait a few minute then
frosty cape
^^
Give me the IP (DM), can then check if its you or TryHackMe (gunna take a stab here and say its most likely you tho)
orchid remnant
Gotta typo in Kenobi: T4Q3
I think, that might mean to say /bin/sh
Also had a request for that question to be reviewed generally. Apparently it's not going into enough detail about the attack vector
dense bridge
https://tryhackme.com/room/zthlinux
Am I doing something wrong? Am I not supposed to have a linux opening here?
I have bought the subscription
orchid remnant
Not all rooms have browser control @dense bridge
orchid remnant
There should be a task there on how to access it π
dense bridge
π will look into it
orchid remnant
<@&568449888682246145> am I meant to be able to do that?
spiral flame
@orchid remnant meant to tag admins? Maybe
orchid remnant
Aye. I have no idea why it would be allowed but it lets me do it π€·ββοΈ
Figured it was worth asking
covert kernel
I imagine it's allowed in case of emergenciea
orchid remnant
I mean, we'd usually just tag one of the admins (or some people do all three I suppose)
Not that it makes a huge difference, given we can do that anyway
Just wondered π
As long as you leave @Community Mentor off, Pars, I'm happy
tribal knoll
I mean
You're only pinging dark and ashu there
Skidy doesn't have red admin
skidy has blue admin
orchid remnant
Which makes it even stranger having it open
worthy stag
Sometimes you may just want to summon dark and ashu
grave flicker
orchid heart
@grave flicker tks π
jovial swift
In the room /room/zthlinux I think there is a small mistake in the description of chmod 455 Task 24
worthy stag
Ben I think the counter is messed up
Someone on uop room got this error
@frosty cape
worthy stag
Ours I believe
frosty cape
Which room? Ill check it out, dont think its room specific tho
worthy stag
Uop cw 2
orchid remnant
@covert kernel ^^
That is wrong
sly raft
ahhh that's weird
Do you know what browser?
and whether refreshing the page fixes it?
might re code the entire thing over the next few days
:))
worthy stag
he said refreshing didn't help it and issue continued
not sure of browser, I assume firefox on kali
covert kernel
@orchid remnant?
orchid remnant
chmod 455 in zthlinux. I didn't notice it before, but you've said that the user can execute only, group can read and execute, and world can read and execute.
Did you mean that user can read only?
orchid remnant
Thank @jovial swift π
covert kernel
@jovial swift Thank uuuuu
jovial swift
Np π
raven carbon
Tiny typo, in Linux Challenges, Task 3 Linux Functionality, #2, says 'were' instead of 'where'
thorn briar
rooms start with 3 hours now?
covert kernel
yeah they should only start with 1
thorn briar
was able to add +1 hour on 2:55h mark
spiral flame
yeah so your timezone is 3 hours out or something and it's messing with JS
spiral flame
typo @frosty cape
ornate moss
The kali room is very unstable as of late. Disconnected or lost connection when doing anything. Note: I have tried to see if this was just an issue with my computer or internet but after testing it on multiple computers and networks it give the same result. Now this wouldn't be a problem as I run my kali locally but scans which should take <10 mins to complete instead take over 1 hour.
somber wraith
found typo,
Chance should be change
covert kernel
hey there
I am a newbie here
I tried to deploy the machine
But it doesnot get deployed
Please help me
olive drum
@covert kernel Which room has such issue?
olive drum
Sure! If you have any questions later, feel free to ask
covert kernel
will do
covert kernel
hey...I got the value of the cookie and even decoded it but it says it's incorrrect when Isubmit it
I submit*
covert kernel
okay
covert kernel
a small question, how can you achieve higher highscores?
spiral flame
@covert kernel scores are based on how many people have answered the question before you. Complete lots of rooms, and be the first to complete new challenge rooms
covert kernel
π thx for the feedback
winter island
is alfred dead?
velvet belfry
hi
tulip shuttle
can you help me?, i don't get it
covert kernel
#room-help @tulip shuttle
worthy stag
Not sure why but I'm pretty sure the video player crashed my browser D:
rigid bolt
Hi everyone, I just wanted to contribute with another "fix" for day 13 challenge of the 25 days of christmas room series. Changing the default browser to chrome and to IE again, enabled to select the browser to perform the exploit correctly.
spiral flame
@rigid bolt It's not a bug, it's set up that way intentionally. That's not the actual fix
rigid bolt
Oh damn
spiral flame
@frosty cape finally reproduced the search bug
if you start typing before it loads the rooms, you have to reload the page to get search working
floral tusk
When looking at profiles on mobile, you can't see the activity graph thing because it gets cut off
orchid remnant
Mistake in Q4 of rsa:
It's asking for the totient, which is phi, not n.
topaz venture
When creating a room, it appears that if you have used the same room-code of a room that previously existed, the tasks appear to merge with your tasks.
I.e. I deleted a room, re-created it with the same room-code and the previous tasks duplicated into the room. You'll get two "Task 1" and "Task 2" respectively. Removing the duplicate "Task" i.e. "Task 1" will also remove the "Task 1" that you made
spiral flame
Interesting
topaz venture
Seeing what you said in creators lounge, it could be API latency in hindsight - especially as the website isn't running optimally at the moment
olive drum
is it just me.. or the website started working at least 30% slower
spiral flame
@olive drum loads of people have been using the platform, John Hammond hug of death
spiral flame
Load balancing is coming
shrewd olive
hello, i am new and i am having trouble in advent of cyber 6) task. I am trying to deploy the machine and nothings pops up although i did downlaod correctly the Vpn etc
is anyone willing to help me
olive drum
head over to #room-help
cunning ravine
tasks from paid rooms getting added to your incompleted tasks before going through the "why-subscribe" redirect page (idk about other rooms but had this problem with Learn Linux)
[EDIT : doesnt happen constantly tried with Kenobi and my list didn't get updated]
ocean reef
Per DarkStar's request, mentioning here that https://tryhackme.com/room/bof1 is 196 days old with nobody having 100% completion. No complaints about the room itself, just that it is a walkthrough with great information on the theory behind buffer overflows however doesn't touch much on the actual process of exploiting a buffer overflow. This is the reason I think there are no 100% completions. Most users I can see on the Scoreboard can get to the last two tasks but can't actually complete them.
spiral flame
Is it challenge or walkthrough?
spiral flame
searching "crack the hash" doesn't get me the room
celest bronze
@spiral flame I have put the root flag in twice for Alfred (it was one of the first rooms I completed) it randomly just disappeared again.
spiral flame
No need to tag me
celest bronze
I didn't notate it, I will for the future but any chance you can help me with this?
spiral flame
I can't fix that
spiral flame
I review the quality of rooms, I can't fix bugs with THM
floral tusk
Is the discord bot supposed to update your rank ever?
celest bronze
Would you mind giving me the flag, so I don't have to redo the entire room?
I would appreciate that.
orchid remnant
@floral tusk Use !verify again
spiral flame
@celest bronze Can't give out flags π
orchid remnant
James, for future reference, do you have the fix for that (flags disappearing)? I seem to remember seeing someone deal with it before. Might have been you?
celest bronze
Iβve literally helped people complete Alfred.
floral tusk
Ah, I see. Should the bot automatically update ranks every so often instead of having to do it yourself? Or is that not intended
celest bronze
Itβs not giving me anything I didnβt already have. Itβs my fault for not saving it!
covert kernel
oh
orchid remnant
Isn't saving it π
spiral flame
@orchid remnant Not being visible in the room, or on THM?
I haven't heard that issue before
orchid remnant
On THM
covert kernel
I was mistaken
spiral flame
@frosty cape something very broken, it deleting saved answers
orchid remnant
Huh. I'm sure I've seen someone deal with it
covert kernel
I posted in bug-submissions
celest bronze
Thank you
orchid remnant
There's a bug submissions?!
covert kernel
yeah
orchid remnant
Huh. The things you know π
celest bronze
For the bug report, see it says I completed the room. But the last question is unanswered again... Which means, I'd have to redo the entire room.
in my opinion, when this type of thing happens, I feel the flag should be given privately
It's not my fault it happened!
celest bronze
I can confirm that when I get the flag again.
spiral flame
I also wonder if it takes the points
celest bronze
Right, I wouldn't be able to see that.
I just asked someone that I helped though it, for it π
sly raft
Added an extra question to Alfred
Which is why the room looks like it's not complete for loads of people
celest bronze
spiral flame
@sly raft Did you delete the root flag question?
And the create a new one?
Actually, you would have had to
ocean reef
@sly raft After I sent you the updated info on Alfred with the payload not working properly, the answer to Task 2 #1 can't be found
They have to run the original msfvenom command to get teh proper payload
sly raft
what do you mean the answer can't be found?
ocean reef
The room was updated to have a different msfvenom payload command run. The new command generates a different sized payload than the original, which had issues.
Task 2 #1 asks for the size which is still set to the original size as the answer
So unless someone decides to run a msfvenom generation command specifically how it was originally written in the task information, they'll never get the correct answer without just guessing or being told
Sorry if pinging you was the wrong person, I just know you had me send you the original info of what did and didnβt work for the actual exploit
celest bronze
Yes
I had to complete the room with Covenant, and then I was given the correct MSFVenom payload to use (without encoding).
Now the root.txt flag is missing, which would mean I'd have to restart the entire room. I take notes now, but I didn't at that time.
spiral flame
@covert kernel @celest bronze So the reason the flag was deleted is because there's no way to add a question other than at the end. This meant the root flag question had to be deleted and thus the saved answer was too. It's affected everyone who did the box before the change was made
spiral flame
I don't think there's a fix for it, it was a destructive change
@frosty cape This is another reason we need to be able to rearrange tasks and delete tasks that aren't the final task
worthy stag
Think he has his hands full for the time being
spiral flame
Where?
weak rune
syn scan should be -sS not -sC I guess?
sly raft
@ocean reef good point - will change the q now π
weak rune
**sorry not in the room it is in the writeup of the room
worthy stag
The writeup screenshot you've just posted shows -sS
not -sC
so not really sure what you're getting at?
weak rune
after the answer it says -sC
spiral flame
Where?
weak rune
spiral flame
o
weak rune
also few paragraphs below it
ocean reef
Think he has his hands full for the time being
@worthy stag That's fine. Still sending the info so they're aware.
ocean reef
Ignore that, just realized you weren't responding to me π
orchid remnant
@vocal raptor -- Apparently there's a bug in the Shodan room. Ask @obtuse galleon π
obtuse galleon
@vocal raptor yes it is i can dm or here if u want
orchid remnant
Just post it here Mate. That's what the channel is for π
orchid remnant
(preferably blurred...)
obtuse galleon
ups
orchid remnant
Sorry. That's my fault π
orchid remnant
That ^^
topaz venture
Very nit-picky typo I've just noticed when creating a room: the tip when hovering over the two room types is missing a space between "The roomwill..." it's the same for both "Walkthrough" and "Challenge"
crystal escarp
advent day 17, for the flag1 it says if it takes longer than 30 tries something is wrong but the password is way deeper than 30 tries on rockyou.txt
spiral flame
Yeah that one was broken
orchid remnant
Known Issue, but it's never been fixed, and won't be now
spiral flame
I think it's fixed for a standalone version
orchid remnant
Yep
spiral flame
Would just need to be merged I think
crystal escarp
bc the hydra box is similiar but the web password is diff
orchid remnant
Yeah. It was fixed for the standalone
orchid remnant
crystal escarp
least*
orchid remnant
Use that instead of rockyou
orchid remnant
Hang on, you already used my list? π
crystal escarp
i used a short rockyou for that box bc the original was taking forever
i was like 4000 deep when it was saying 30 would be to many lol
crystal escarp
oh dang
hearty charm
hi everyone! i tried to use "cat .bashrc" but couldn't find the flag. help me please
jaunty matrix
Hi everybody! Got to know about this amazing service today and checked it out. I signed up, logged in, verified my account, set up the VPN, and joined many rooms. But when I hit 'deploy' the VM never loads up
I waited for about 30 mins or so but to no avail
jaunty matrix
The IP appears but no interface
Active Machine Info is available to me but no VM appears
topaz venture
Unless you're trying to access the "Kali VM" there is no browser interaction for the rooms, all you are given is the VM IP Address and expiry countdown π
like this:
jaunty matrix
Oh Ok
I thought that there would be a browser interaction for every room
Sorry I'm a newbie π
topaz venture
If you're able to connect to it through the VPN then any help you'd need would be best in #room-help. If you can't connect (check the access page to verify) then #site-support π
No worries!
Welcome to the platform
jaunty matrix
Thanks a ton!
strong mirage
Hello from NC!
covert kernel
Salve @strong mirage
strong mirage
Down for dev??
olive drum
yes
worthy gulch
Here's a bug for you :p
spiral flame
Flag doesn't render, hovering gives 2 Chinese characters
CSS class flag flag-ζ₯δΈ
quartz ocean
Yearly Activity is missing
orchid remnant
Have you done anything this year @quartz ocean?
orchid remnant
Worth checking π
Fair enough. Yeah, something's off there
Ooh
Wait up
It's lost all of march for everyone
@frosty cape -- something's up with Yearly Activity
No one has anything from February to March
Just checking a few more accounts now
No -- it's working going forward, but everything from February until yesterday seems to be missing
orchid remnant
Mhm. I remember it working until recently too
orchid remnant
March 17th appears to be when it starts working again
Specifically, after the load balancer update
That's mine, for example, and I know I've done a few rooms recently
Including Alfred yesterday (17th) afternoon
I mean, not the end of the world π
Just good to know about
frosty cape
Ah okay weird aha:)
quartz ocean
Not really complaining here, been a user for mere 2 weeks so I haven't lost much, au contraire π
Intermittent/blank history could become an issue in the long run if people start showing off their public THM profiles to potential employers -- just like devs do with their public GitHub profiles
As you grow bigger as a company (and I really hope you do because I like THM a lot), I don't think you guys will be able to afford losing such data. People might start considering their histories/assiduity very valuable. I mean, from a professional/career oriented point of view (Please take this as friendly constructive feedback only because it's all it is.) Keep up the good work, lads! π
frosty cape
Not really complaining here, been a user for mere 2 weeks so I haven't lost much, au contraire π
Intermittent/blank history could become an issue in the long run if people started showing off their public THM profiles to potential employers -- just like devs do with their public GitHub profiles
As you grow bigger as a company (and I really hope you do because I like THM a lot), I don't think you guys will be able to afford losing such data. People might start considering their histories/assiduity very valuable. I mean, from a professional/career oriented point of view (Please take this as friendly constructive feedback only because it's all it is.) Keep up the good work, lads! π
@quartz ocean The data is not lost, I have verified this:)
But thank you very much for your kind words
I'm looking into why its not displaying, I know the data is there as teachers use it to monitor their students progress.
And I can see data since the last few weeks
Looking into and will fix asap:)
spiral flame
We still can't leave subscriber rooms when you're a non sub
You need to verify if someone's a sub before adding them to a sub room with /jr/ links probably/
worthy gulch
Minor bug: The button to "add 1 hour" stays disabled if you click it when you couldn't add more time, even when enough time has passed that you now can add more time.
ocean stream
Euuh hey theree i hope your doing well ?
Soo i'm having this little problem idk what's going on xD
okay so i'm not even a subscriber and i have the linux challnges rooms upon my rooms and i don't remember joining it even with the jr link or idk how to call it or the room code ....
So that's it !! i hope it's not that big deal
spiral flame
If you create your own room, and it ends up sub only, you can't complete it
spiral flame
π you should be able to send in here @worthy gulch
worthy gulch
Yeah, I just realized It's cause I was being a dummy
Isn't this incorrect? HttpOnly means that the server-set cookies shouldn't be accessible by JS in the browser
spiral flame
@rugged ermine So I think RP Nessus is being weird again
rugged ermine
tired solar
HackPark, issues: Task 4, Question 2. the format is off. sysinfo does not display that answer in that format in anyway.
frosty cape
Ah really
Looking at it now
Which way does it display?
Changed & deleted to stop cheaters π
Thank you
Updated
Both questions
tired solar
thanks
spiral flame
@floral jewel Wrong chat.
spiral flame
What about it?
obtuse galleon
obtuse galleon
just after the login
spiral flame
What?
spiral flame
I can't understand what you're trying to say
obtuse galleon
when i got loged , this url pop
obtuse galleon
yeh
olive drum
after the login
obtuse galleon
y
spiral flame
Cannot reproduce
olive drum
don't worry about it
tribal knoll
My guess is session expired as you clicked on the bell or something
Probably a one off
hollow latch
https://tryhackme.com/room/linuxctf flag 16 should surely be marked as a bug, using the logic that its a common mount point despite the fact nothing is actually mounted there is absolutely ridiculous. You're sending people on a wild goose chase checking mounts in any ways they can only to eventually google the answer to find out its not even mounted, its just buried under a few directories.
topaz venture
The room is focused on using Linux syntax to find things
if you're looking for mount points (even though it is a common mount point) etc in that room then you should be able to find the flag irrespective in theory
hollow latch
the question says "Flag 16 lies within another system mount."
spiral flame
Also there's no feature to mark known issues yet
hollow latch
thats not even true
spiral flame
lmao
orchid remnant
Tried to mention you instead π
2
There are two places where things are mounted in Linux
The question is accurate
It's just in the "automatic" mount point, not the "manual" mount point
hollow latch
so you're saying /media is the automatic mount point and thats why it doesn't appear on things like mount and fstab ?
spiral flame
Ubuntu!
orchid remnant
/media is where things like USBs are automatically mounted to
twin steeple
hello guys it's a pleasure to be here
spiral flame
@twin steeple unless you're about to report a bug, wrong chat
topaz venture
but hey o/
hollow latch
im not sure you can really call it a system mount when nothing is mounted there, regardless of being the "automatic" mount
orchid remnant
What exactly does the question say?
hollow latch
Flag 16 lies within another system mount.
orchid remnant
Well, it's technically another system mount
Albeit simulated.
A system Mount isn't necessarily an unmounted partition.
Just another file system
topaz venture
^ in a real-world scenario, you can use mhddfs
hollow latch
well i get what ur saying
topaz venture
It's just that it's a simulated / virtual mount as Muirl was saying
hollow latch
but i feel it would be a much better question if you actually had to check what was mounted and find the flag that way
instead of essentially asking "
Flag 16 lies within another system mount, but its not actually mounted, all you need to know is the location of a common mount point"
orchid remnant
Ah, but then you wouldn't learn about default mount points. You would learn the commands, but not the infrastructure of a Linux machine.
hollow latch
then change it to be "flag 16 lies in the default mount location"
because that is just confusing af and no one is taking anything from that
i've put it past my friends and they were just as confused as me
orchid remnant
Yet, the hundreds of people who've already completed the room don't seem to have had a problem...
hollow latch
i searched #room-help and many had the same question
im not an idiot i just didn't expect the question to be so badly worded
spiral flame
Just because something is a common question, doesn't mean it's a bug
orchid remnant
I see two people who've asked
worthy gulch
It could mean it's a good prompt. Makes people think
orchid remnant
Out of 2066
That room is also notorious for making people think. It's a challenge, not a walkthrough
hollow latch
i wonder how many of those also googled the answer and then bashed their heads on their keyboard
spiral flame
Welcome to hacking
worthy gulch
If you want my honest and blunt opinion, I don't think IT is for you if it makes you bash your head on the keyboard >.>
orchid remnant
Don't do Madness, Cherryblossom or Willow
No matter what you do
Or CCT2019
I hear it's a killer
Jigsaw(2) might also be good ones to stay away from
spiral flame
Definitely do Madness. It doesn't require advanced techniques or knowledge
Just a lot of thinking
topaz venture
I spent a good few hours on CCT2019, couldn't get a start on the Wireshark
rare swallow
nah bruv, ctf 100
olive drum
ctf 100 v3
rare swallow
you're going to hate someone
ocean stream
i can't add more times and i'm excuting a brute force
@frosty cape sorry for tagging bro
olive drum
are you subscribed?
worthy gulch
Is "add 1 hour" still disabled if you refresh the site?
olive drum
also the timer has been bit buggy lately (just a bit)
spiral flame
Tags skidy
Tags skidy again to say sorry for tagging
worthy gulch
@spiral flame Sorry!
spiral flame
Not you
worthy gulch
I know this :)
spiral flame
@olive drum what do you mean? @olive drum @olive drum @olive drum
spiral flame
I know that only tagged you once. Didn't want to escalate
olive drum
frosty cape
i can't add more times and i'm excuting a brute force
@ocean stream Refresh your page
ocean stream
It workd after refreshing serval times
sorry for not answering guys i wasn't here
thanks god i didn't lose my progress espacially in brute-force
rare swallow
@frosty cape plz give me retro badge
orchid remnant
^^
rare swallow
did you get yours?
orchid remnant
Nope
sudden sequoia
It appears the expire time for me when I activated the Basic Pentesting room was higher than it is normally
sly raft
we'll be pushing the new expiry time soon π
ornate moss
the windows god has spoken!
south cobalt
hello
rose kettle
yo
orchid remnant
@rose kettle I brought that up to Skidy a few days ago. Good shout posting it again though π
rose kettle
ohk
frosty cape
Looking into it now
worthy gulch
Should've probably not done it on that machine :p
rare swallow
should've, but didn't
i like to risk it for a biscuit
@frosty cape can you restore me session :c
frosty cape
^ Connect RDP for now
Im going to make a button that reconnects.
Oh wait
I can give you your username and guac auth session if you want?
celest bronze
Typo π
acoustic hearth
openvpn room got duplicate questions
acoustic hearth
@frosty cape thanks. yeah, after refresh the page it's fixed.
tardy anvil
worthy stag
@tardy anvil not a bug. The site used a degree of regex when accepting answers
worthy gulch
I keep writing meterpeter
tribal knoll
meeterpreeter
worthy gulch
mreterpreter
frosty cape
^ Lazy I think not
weak rune
@worthy gulch do you work for TryHackMe
tribal knoll
no
worthy gulch
Told you, @rugged ermine People'd get confused!
weak rune
He owns it?
covert kernel
Skidy and Ashu
weak rune
@orchid remnant and you are an admin or something like that?
spiral flame
No
spiral flame
Community mentor
worthy gulch
And despite the similar color, I'm just some guy TM
weak rune
I am wondering out of all these hacker has anyone tried hacking tryhackme
worthy gulch
orange is regular guy
weak rune
π
worthy gulch
also orange is admin
I hacked tryhackme once when I had a machine with 2h20s on the clock by accident :p
weak rune
π
spiral flame
I've reported an XSS on THM, so literally hacked THM with Muirland
worthy gulch
XSS is the worst
spiral flame
Responsible disclosure y'all
tribal knoll
xss
"hack"
worthy gulch
#neveracceptuserinput
topaz venture
#neveracceptusers*
covert kernel
#neveracceptconnections
worthy gulch
The best way to make a machine hackerproof is with a hammer.
orchid remnant
This ^^
covert kernel
The best way to make a machine hackerproof is to not build it at all
orchid remnant
Ah, but to be a machine, it must already exist π€·ββοΈ
worthy gulch
This is true. Now it was never vulnerable to begin with.
orchid remnant
Otherwise it's just a concept
worthy gulch
Can you hack concepts?
topaz venture
but does anything exist
worthy gulch
no.
spiral flame
rooms that use backticks for code formatting no longer nicely display this
EG Ice task 4
worthy stag
Bug on the room editoring
When dragging a task from the bottom to top it swaps them around instead of slotting in
muted obsidian
olive drum
what do you mean
like a book?..
if you want video courses I can recommend cybrary.it
covert kernel
Hi, is there an issue with the day 11 of AoC ? I get a connection error when I try to 'ls' on the ftp server
Or is that intended and I should find another way ?
worthy gulch
ls on ftp..? :)
covert kernel
to list the files
olive drum
ls on ftp..? π
worthy gulch
but is it via an ftp connection?
worthy gulch
:D
covert kernel
Even Filezilla can't list files
worthy gulch
are you sure there are actually any files?
covert kernel
And the ftp server process the ls command, else it would have sent me an error for the command, not 425 connection error
The challenge is to find the name of the file on the server
worthy gulch
no
tribal knoll
multiple people are here
topaz venture
Is it re. a bug? @oak hare
tribal knoll
shoot your shot
oak hare
so i have question about christmas 2019
oak hare
i have the ssh credential but i get i error for the password
santa:rudolphrednosedreindeer
topaz venture
Can you add that into spoiler tags? @oak hare using || < message> ||
|| on both sides or whatever oops
tribal knoll
so || text ||
covert kernel
||message||
tribal knoll
@topaz venture you can escape chars using \
oak hare
covert kernel
You're connecting to user satan
oak hare
i want to connected to the ssh service i have all require information
tribal knoll
covert kernel
You're trying to connect to satan, not santa
oak hare
the user the passwd and the host but i think something wrong
tribal knoll
That's a typo
You put satan
The real user is santa
try santa@ instead @oak hare
oak hare
ok i get it
covert kernel
So do anyone has a solution for my issue on AoC day 11 ? I get a 425 connection error when I try to 'ls' on the ftp server
oak hare
sorry for inconvenience @tribal knoll @covert kernel
tribal knoll
What command / method are you using to connect to the FTP server? @covert kernel
covert kernel
both ftp on WSL or filezilla
tribal knoll
@oak hare dw about it, happy to sanity check
Have you tried using a browser? So ftp://ip in the address bar
spiral flame
You're trying to connect to satan, not santa
@covert kernel hahaha, that's great
tribal knoll
I'm not 100% on AoC, I didn't complete all of it
topaz venture
Was going to say, for that challenge I'd really encourage using the ftp linux command rather then filezilla @covert kernel
covert kernel
@tribal knoll Both firefox and Chrome have an issue trying to access the ftp
tribal knoll
I'll let @topaz venture or someone else take over here, I'm not too sure on this one
covert kernel
@topaz venture I tried to use ftp, but I get an error
spiral flame
!multivpn
raw karmaBOT
TryHackMe
topaz venture
also using OpenVPN to connect to THM with WSL is really-iffy iirc. Wanna move over to #room-help maybe and I'll help out?
spiral flame
oh WSL yep
thorn briar
do you get a strange page when you visit https://tryhackme.com/notifications/get?
this is where I got redirected after logging in
thorn briar
i got to the login page from twitter
if that of any help
(to the login page that lead to the notifications/get?
worthy gulch
What link from twitter?
frosty cape
this is where I got redirected after logging in
@thorn briar Fixing now:)
Fixed, will be made live in the next THM push
flat hornet
Hey. Not sure if I should post this here.
spiral flame
Well, is it a platform or room bug or are you looking for help?
flat hornet
I'm new here and I'm trying to make the Advent of Cyber room. I have virtualBox running Kali linux, I joined the room, I am connected to the server. I used ifconfig to check my ip. But when I try to connect to: http://<your_machines_ip>:3000 it doesn't work
orchid remnant
!multivpn
raw karmaBOT
TryHackMe
topaz venture
Also, have you given the room a couple (up-towards 5) minutes for it to fully boot? Think of it as turning on your PC @flat hornet
flat hornet
Yeah
orchid remnant
Oh, speaking of which @topaz venture -- fancy sending over that list of common issues you've been compiling. I'll collate 'em
topaz venture
Was hoping you'd do the same π I'll shoot 'em over when I get a chance x. @flat hornet as Muirl said, #site-support would be a good place - we can help you out over there
flat hornet
kk should I copy paste the text and go there?
topaz venture
Nah it's okay!
flat hornet
kk See you there and Thanks
spiral flame
@quick ore Not a bug, #room-hints
quick ore
oh sorry
spiral flame
Any hope of messing with the Access page?
brisk stream
guys - just thought i'd come on here and say thank-you for a brilliant service. I've got my OSCP code and I'm all ready to go , yet I do have apprehensions about my preparedness before the time begins. Your OSCP path is really helping and I am very appreciative. Brilliant and I can't wait to see how the service progresses. Many thanks.
spiral flame
covert kernel
This is the #site-bugs channel
You'll want to post that in the #522158404614225920 channel
brisk stream
Dude so sorry - I don't even know why it defaulted to me being in here!
covert kernel
You're good man :)
brisk stream
posted into feedback. No bugs so far, many thanks!
covert kernel
π
mellow sorrel
Hey
i think the port is wrong in this part of the cllaneg of ultratech1
there is no port 8080 only port 8081
so i think its a typo
Challenge name : Ultratech1
floral tusk
on the new room the cod caper, i missed my copy paste by 1 letter and still got the answers right
The first letter is missing in both boxes
worthy stag
@floral tusk not a bug, the site uses regex to determine answers.
spiral flame
There's some tolerance on it
covert kernel
Mhm it's not a bug it's a feature
spiral flame
Mix of both
hazy stratus
worthy stag
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
hybrid oyster
lwld
thorn briar
Uhh... this looks bad. This is me trying to open a link in gmail about me getting a badge on android phone
same in firefox browser
well it's not tryHACKYOU 
but really, you think hack in domain name causing it?
worthy stag
Yeah filters can be a problem sometimes
olive drum
esp android ones
thorn briar
its happening on windows firefox too
olive drum
never had such problem with any browser
check your security settings, might be something there
thorn briar
yes, my browser and add-ons are privacy oriented but now I have tried edge browser with default settings and got the same popup (first time using it not for chrome download! wohoo!)
covert kernel
Hello, got a problem withe the last exercise of day 9. The password hash is obviously in /etc/shadow, but I've got no permission whatsoever to the file and I'm not on the sudoer list. If someone could hint me in the right direction, that would be great π
slate idol
How're you folks
worthy gulch
You're more likely to get an answer if you try in #room-hints, @covert kernel :)
also, hello @slate idol! Feel free to chat me up in #general ;)
covert kernel
thanx @worthy gulch
topaz venture
Calm before the storm :^
worthy gulch
c;
covert kernel
Help
orchid remnant
??
covert kernel
i am stuck on an room
orchid remnant
celest bronze
Not a huge bug, but I referred two people. One Subscribed but didn't get any points as of yet.
Still says 2 tokens pending instead of 6.
frosty cape
Dyamn, not sure how the referrals got found as its not been advertised
orchid remnant
This is 0day...
frosty cape
@celest bronze its because they have not got more than 100 points
orchid remnant
He finds everything...
frosty cape
Weird it shows a number tho
running gobuster on the platform ey;)
There are a few pages I need to clear up
orchid remnant
Been wondering, what's that for Skidy?
olive drum
he runs a dir search everyday 
orchid remnant
Are there any benefits for people using that link?
covert kernel
There's a nice handy link
tribal knoll
Was that from back when VM running needed credits?
covert kernel
orchid remnant
Ooh, that could be it
frosty cape
I might make every page respond with random garbage to stop it
covert kernel
People will wfuzz then
orchid remnant
https://tryhackme.com/referrals @covert kernel
covert kernel
Mhm
olive drum
and what do tokens give
covert kernel
I fixed the link
orchid remnant
Uh, Skidy, there might be a problem with authentication there as well. Might have just accessed Pars' referals page
Lemme confirm
covert kernel
Also do you have a way to stop people from referring themselves and just doing a room @frosty cape
Like through alts
orchid remnant
Uh, yeah, definitely got no user validation. I can access 0days' as well
Not that it hugely matters
Doesn't give you any access or anything
covert kernel
It's not really sensitive information
frosty cape
Also do you have a way to stop people from referring themselves and just doing a room @frosty cape
@covert kernel good point and no.
bleak wraith
Nice room @topaz venture , thanks a lot.. I have a comment
topaz venture
Thanks! A comment? I'd like to hear. Is it a bug/issue or a #522158404614225920 comment?
bleak wraith
I'm not sure.. it's about task 13. you talk all time about IDA
even "For this room, we will be using IDA Freeware within the context of statistical analysis. Navigate to the directory "Tasks/Task 13" and open "install.exe" with IDA Freeware, following the instructions below:"
But to answer we have to use PEstudio.
It's this ok?
thick widget
#Advent of cyber
topaz venture
Oh okay, defo the right channel for that sort of thing - I'll have a look to double-check @bleak wraith. Thanks for letting me know
covert kernel
@topaz venture it seems some people are having trouble connecting to your room
Often having to try multiple times before it works
topaz venture
The room takes quite a while to boot-up even on subscriber resources it seems
covert kernel
Could you make a note of that in your intro task
topaz venture
Apologies for the oversight
covert kernel
It's all good, thanks for making such a good room
frosty cape
The room takes quite a while to boot-up even on subscriber resources it seems
@topaz venture The windows machine takes up to 5 minutes to come alive
So I set a timer for 5 minutes
Might be worth saying that.
There is a bug (now fixed) where if you refresh, it will stop it showing the 5 minute timer.
bleak wraith
Often having to try multiple times before it works
@covert kernel The room opens a terminal in browser, but take a while.
if you get a MSTSC conection before browser ends to load, you probably lost you original conection. (because browser take over the only allowed connection)
I have had to close browser conection and re-connect from mstsc.
Sorry my english()
bleak wraith
might be. Imho, the browser terminal is not neccesary.
topaz venture
I've stipulated that now @frosty cape ty. Also @bleak wraith I've sorted the issue you raised π
I remember re-writing that specific question before so I obviously didn't save it or something lmao
yikes
bleak wraith
wow.. nice moidification.. thank you.. @topaz venture
topaz venture
Thanks for pointing it out π
Was it fairly intuitive otherwise? I mean you managed to solve a wrongly-written question so π
bleak wraith
the question gave the clue.. so.. it was not a really challenging misterious task
Was it fairly intuitive otherwise? I mean you managed to solve a wrongly-written question so π
@topaz venture
Thanks for pointing it out π
@topaz venture my pleasure... i love this site.. 50days in it, and I learnt more than one year on other Boxes, you know what I mean.
bleak wraith
if it everything is on the right track, next Thursday I will be able to get paid subscription.
covert kernel
π
topaz venture
wicked! Very much worth it imho
olive drum
wicked! Very much worth it imho
i highly support that claim!
absolutely worth every $
covert kernel
I also highly support that claim
bleak wraith
indeed
wicked! Very much worth it imho
@topaz venture
orchid remnant
Hey @bleak wraith, you left me a nice comment on my Cherryblossom write-up, didn't you?
Have you had a chance to give Willow a shot yet?
Should probably move over to #general or #thm-community-media btw
wise epoch
@topaz venture can you check why PEStudio is going onto "Not Responding" on the VM when the files are loaded into it.
covert kernel
That may be a problem with the tool itself not the room
topaz venture
Is there a file / task in particular? @wise epoch
bleak wraith
Oh, my.. I was thinking only me had this problem..
bleak wraith
Is there a file / task in particular? @wise epoch
@topaz venture i had this issue on 13 but now it's no longer required.
wise epoch
@bleak wraith you can't even imagine how I did 12th one βοΈ
bleak wraith
(install.exe)
@bleak wraith you can't even imagine how I did 12th one βοΈ
@wise epoch 12 was nice for me..smooth
topaz venture
Mhm thatβs real bizarre. I did a lot of testing with those tools for that sort of thing...
wise epoch
Might have got weird after the VM was pushed.
topaz venture
Yeah. I'm gonna pull the room into private, sort out an alternative to using PEstudio as that's the re-occurring theme. Will get it fixed within the hour or so
topaz venture
Just sorting out alternatives @wise epoch
wise epoch
sure no worries @topaz venture :))
spiral flame
@vagrant needle refresh the page
spiral flame
they should go away
vagrant needle
@vagrant needle doesnt work....i'm trynna login again
frosty cape
Its most likely not going to work
I will look into this Monday
Out of interest, when you joined the room, how did you join? Did it lag?
Did you refresh the page again?
wise epoch
@topaz venture how much time?
vagrant needle
i dunno
topaz venture
Okay, regarding https://tryhackme.com/room/malwareanalysisprimer:
After a few intermittent issues with a specific tool, with @frosty cape being Skidy, I've re-written the task to use a different, much more responsive tool.
If you are in the room, re-deploy and refresh the room (Ctrl + R), there is new content regarding using this tool that should be all okay now. ( @wise epoch @bleak wraith thank you lads)
wise epoch
No worries! Thanks for the quick fix :))
topaz venture
If interacting through browser, the room will take a minimum of 5 minutes to connect. RDP a bit sooner, but still assume 5 minutes regardless
wise epoch
Done with the room :))
topaz venture
biggest sigh of relief
wise epoch
π€
orchid remnant
Have you made the room public again @topaz venture?
wise epoch
Yes it is public :))
orchid remnant
Aye, you were already in it though, weren't you?
New people joining are struggling to get in
topaz venture
Yeah it should be public now π
orchid remnant
Lovely
topaz venture
The box just seems to really take it's time when using the in-browser
wise epoch
Yeah it does take much time to load within the browser!
orchid remnant
There we go, he's in now
topaz venture
Skidy has made it so that even non-subs deploy with the same resources as a subscriber.
Even locally the VM takes a bit of time to deploy, seems like there's quite a lot going on during the boot-process
wise epoch
Yeah!
topaz venture
Well, the various socials that I am on are on my thm profile - and even then they're not hard to find :^)
we'll move to #thm-community-media though ^^
wise epoch
sure!
lament remnant
orchid remnant
Probably not something for #site-bugs @lament remnant?
orchid remnant
Do you have a bug to submit?
orchid remnant
Maybe keep it over in #general or #thm-community-media then please? π