#site-bugs | TryHackMe | Page 13

spiral flame May 1, 2020, 8:01 PM

#

Has it occurred to you that your flag might be wrong?

#

It's not flag 1

#

Delete the flag please.

#

It's a flag.

#

It's not flag 1 though.

young hatch May 1, 2020, 8:09 PM

#

Well, i mess up my copy/paste with the 2nd flag 😂 I can DM you the "should be" correct flag this time if you want
But it doesn't change the fact that the flag inside the file is incorrect. I even looked at writeups to be sure the flag is correct and even with this writeups, i can't complete the question. The flag i found (the correct one not the one i posted here with the wrong copy / paste) is the same as the one on writeups

spiral flame May 1, 2020, 8:09 PM

#

@young hatch The flag you posted is not flag 1, but it is a valid flag for the box

young hatch May 1, 2020, 8:11 PM

#

Yeah i know its the second as i just said before x) Its just that the flag contained in the "flag1.txt" does not validate the question 5 asking for flag1

spiral flame May 1, 2020, 8:11 PM

#

Try the standalone box.

young hatch May 1, 2020, 8:12 PM

#

can't, its a subscribers box 😦

versed yarrow May 1, 2020, 8:24 PM

#

hi, i give the right payload but flag doesnt appear "xss room ->filter evasion -> challenge 2"

#

📎 2020-05-01_23-22-26.mp4

ripe flax May 1, 2020, 9:41 PM

#

Hi, i dont know why but my machine is not deploying anymore

#

Anyone knows what can i do?

#

im connected but when i try to enter in the machine ip that i deployed it loads forever

spiral flame May 1, 2020, 9:43 PM

#

Some machines don't run a webserver so you can't access them using your browser

ripe flax May 1, 2020, 9:49 PM

#

i tryed a webserver room that i already have done, but still not working 😦

spiral flame May 1, 2020, 9:50 PM

#

Please go ask in #site-support as this doesn't appear to be a bug

ripe flax May 1, 2020, 9:50 PM

#

OK!

#

Thanks

frosty cape May 1, 2020, 11:32 PM

#

Hi, I think I found a bad answer for the Ice - T2 - #3. The real answer should be RHOSTS whereas RHOST is expected

#

I don't know if it's the right chan for that...

spiral flame May 1, 2020, 11:33 PM

#

They're both valid

frosty cape May 1, 2020, 11:40 PM

#

on metasploit ? because I take some time to understand that the answer wasn't with the S as it's shown in "show options"

#

Do you tell me that "set RHOST" is working under msf ? 😲

spiral flame May 1, 2020, 11:43 PM

#

Yes. That's valid.

frosty cape May 1, 2020, 11:45 PM

#

Cool I already learnt something here 😄 Sorry for bad feedback so

zinc hare May 2, 2020, 2:07 AM

#

Box:
Investigating Windows

Problem:
Answer format: MM/DD/YY should be MM/DD/YYYY

Refer to: https://en.wikipedia.org/wiki/Date_format_by_country

Date format by country

The legal and cultural expectations for date and time representation vary between countries, and it is important to be aware of the forms of all-numeric calendar dates used in a particular country to know what date is intended.
Writers have traditionally written abbreviated da...

spiral flame May 2, 2020, 2:08 AM

#

Answer format gives you the len

#

Should have noticed

zinc hare May 2, 2020, 2:08 AM

#

yy – two-digit year, e.g. 06
yyyy – four-digit year, e.g. 2006

spiral flame May 2, 2020, 2:08 AM

#

Yes

#

It's a mistake

#

But use the answer format

zinc hare May 2, 2020, 2:09 AM

#

Alright, just wasted tons of time on that question.

tawdry storm May 2, 2020, 3:40 AM

#

HI

#

i need help on Learn Lunux room

#

Step 4

spiral flame May 2, 2020, 3:41 AM

#

#room-help

tawdry storm May 2, 2020, 3:41 AM

#

i have installed Putty

#

Please help on on user name password of putty step 4

spiral flame May 2, 2020, 3:41 AM

#

#room-help

#

You're in the wrong chat.

frosty cape May 2, 2020, 12:11 PM

#

Hi, May be another bad answer or I miss something

#

In google Dorking - T3 - #5 => Expected answer is pgp.cmnatic.co.uk where as tryhackme has a better score in the seo analyser (83 vs 88)

rare swallow May 2, 2020, 12:13 PM

#

probably at the time of writing it was different

frosty cape May 2, 2020, 12:13 PM

#

May be this answer was OK when the room was created 😄

rare swallow May 2, 2020, 12:13 PM

#

yeah, agreed

#

@topaz venture ^

#

pinged the creator to update

frosty cape May 2, 2020, 12:14 PM

#

Congratz to TryHackMe developers who increased their SEO score 😄

topaz venture May 2, 2020, 12:15 PM

#

Thanks! I had to change the site as yeah the SEO changed for one of the sites

Obviously didnt think about that for the other question - will sort now. Ty @frosty cape and @rare swallow

#

I hazard a guess that it was me who made my seo score worse LMAO

rare swallow May 2, 2020, 12:16 PM

#

https://tenor.com/view/congrats-djkhlaed-player-yourself-foolingyourself-gif-4961672

Tenor

congrats

▶ Play video

topaz venture May 2, 2020, 12:19 PM

#

Mhm actually, I see the problem. I'll add a hint to use the screenshot used in the task as comparison - rather then what it currently is at @frosty cape

frosty cape May 2, 2020, 12:24 PM

#

Yeah, directly in the question should be better I think.

topaz venture May 2, 2020, 12:24 PM

#

Better idea

frosty cape May 2, 2020, 12:25 PM

#

You could have the same issue for #3 if you make your seo score worse again 😉

topaz venture May 2, 2020, 12:25 PM

#

I moved the answer to a domain that I don't need to touch to prevent that 🙂

#

ty for letting me know ^^

frosty cape May 2, 2020, 12:28 PM

#

You're welcome @topaz venture

blazing rose May 2, 2020, 3:58 PM

#

Hi

unkempt herald May 2, 2020, 9:30 PM

#

I think one of the flags in the linux challenge has permissions that aren't set up correctly

#

idk if you guys care about spoilers on the entry level stuff or if I should just use the "spoiler" tags

#

Any guidance so I don't break spoiler rules is appreciated

spiral flame May 2, 2020, 9:39 PM

#

@unkempt herald Spoiler tags, but don't post the actual flag contents preferably

unkempt herald May 2, 2020, 9:45 PM

#

Flag 17 - Linux Challenge: ||Method should involve downloading Alice's private keys and logging in with her account via SSH. However, Flag17.txt is fully readable* with Bob's account||

#

📎 SPOILER_unknown.png

spiral flame May 2, 2020, 9:46 PM

#

It mentions the flag is broken, does it not?

#

The private keys at least

unkempt herald May 2, 2020, 9:46 PM

#

I didn't have to do anything with the private keys or use Alice's account

spiral flame May 2, 2020, 9:47 PM

#

I'm just saying it's documented as broken

unkempt herald May 2, 2020, 9:47 PM

#

Oh I'm unaware of any documentation for that

spiral flame May 2, 2020, 9:47 PM

#

it says on the room

#

📎 unknown.png

unkempt herald May 2, 2020, 9:48 PM

#

oh well reading is important. I see it now

#

But still don't need to traverse to her account considering permissions of the file lets anyone read it

fresh tide May 2, 2020, 10:16 PM

#

Not a bug but on discord everybody should not be allowed to ping @ (everyone), Your choice though

orchid remnant May 2, 2020, 10:17 PM

#

@everyone

#

You can't @fresh tide

fresh tide May 2, 2020, 10:17 PM

#

oh ok

orchid remnant May 2, 2020, 10:17 PM

#

That's admin and above

fresh tide May 2, 2020, 10:17 PM

#

while typing it showed up so just to make sure

orchid remnant May 2, 2020, 10:17 PM

#

Yeah, that's kind of a leap of faith demonstrating that...

proper warren May 3, 2020, 12:00 AM

#

Its possible to join completed koth games

ripe ferry May 3, 2020, 12:27 AM

#

Where can I submit new college mail ? My college mail is not recognized as a student mail

covert kernel May 3, 2020, 2:47 AM

#

@ripe ferry email support@tryhackme.com

spiral flame May 3, 2020, 2:48 AM

#

@covert kernel (I sorted that in #general a while back since it wasn't a bug)

covert kernel May 3, 2020, 2:48 AM

#

(ah)

pearl fable May 3, 2020, 4:00 AM

#

Im sorry, idk if its a bug but im getting the goal and not the flag in XSS room

#

i already did it in different ways

#

in the 2nd and 3rd flag at bypass filters

spiral flame May 3, 2020, 4:49 AM

#

Draws in KoTH are possible but it allocates a winner

frozen thicket May 3, 2020, 10:11 AM

#

hello everyone. is it normal when i have deployed the LazyAdmin room the ip address is a network address??

📎 Screenshot_2020-05-03_at_12.06.51.png

olive drum May 3, 2020, 10:13 AM

#

it is normal

#

try pinging it

frozen thicket May 3, 2020, 10:14 AM

#

yes i can ping it, it seems strange to me

olive drum May 3, 2020, 10:15 AM

#

have you done any other rooms?

#

all the room machines are deployed inside a private network and therefore have an address of 10.10..

frozen thicket May 3, 2020, 10:16 AM

#

yes yes but it is the first time the last octect is 0. i don't even know that i can ping a network address

#

so, but if it is normal ok 🙂

olive drum May 3, 2020, 10:17 AM

#

i mean, you could redeploy the machine if it is bothering you :)

frozen thicket May 3, 2020, 10:18 AM

#

ahaha no no xD but thanks for the clarify

topaz venture May 3, 2020, 10:21 AM

#

It's all good - it looks a bit odd but it's valid. It's to do with subnetting, I'd assume THM uses either CIDR /22 or /23 for deploying instances if they've got 10.10.9.0 as a host ip 🙂

#

same way 10.10.9.255 could be a valid host address too ^^

frosty cape May 3, 2020, 1:27 PM

#

Hi, just to inform you that in cc room Task 16, there is an empty question

📎 unknown.png

frosty cape May 3, 2020, 1:55 PM

#

Still in /ccpentesting room : Task 21 (smbclient) #5. -P is not used to set the password (password is set via -U user%pass)

📎 unknown.png

#

man smbclient (but wxithout ma openvpn IP in the background this time 🤣 ):

📎 unknown.png

sour wigeon May 3, 2020, 3:05 PM

#

typo in https://tryhackme.com/room/juiceshop OWASP room. In task two, just after intercepting neverssl.com requests:

You may a;sp see lots of other request Burp picks up.
should probably be also

topaz trout May 3, 2020, 3:37 PM

#

Hi there, I'm working on the "Blue" room and after looking at the official write up and comparing my terminal the the writeups it seems that some terminology has changed with recent updates of metasploit I suppose. Task 2, Question 3 appears to no longer be correct compared to what metasploit shows. I can provide more details if you'd like, but Im trying not to be too specific as to give away the answer to a task

lunar umbra May 3, 2020, 3:54 PM

#

I completed all the rooms in introduction learning path and got 100% but for some reason the WAS isn't green. Although I've done all the rooms in it

pearl fable May 3, 2020, 4:34 PM

#

I get more "alert"s yesterday, and still doesnt give me the flag

#

i dont know if i've to keep trying, im frustrated right now

dapper python May 3, 2020, 7:47 PM

#

you should either word it a little bit better or give a hint out that it's similar to a function in excel
took me ages to understand what it's asked
from the context it points out to 'rename'
@rare swallow i need help with this 😦

rare swallow May 3, 2020, 7:47 PM

#

i'm slightly out of context here, what's up?

dapper python May 3, 2020, 7:48 PM

#

yea sorry... is for the splunk room

rare swallow May 3, 2020, 7:48 PM

#

lol haha, i'm not the creator of the room nor it is a bug ^^

#

check #room-help someone might lend you a hand over there

pearl mist May 3, 2020, 9:00 PM

#

hello

#

hello

spiral flame May 3, 2020, 9:01 PM

#

@pearl mist #general or #thm-community-media

hazy stratus May 3, 2020, 10:40 PM

#

@frozen thicket 10.10.15.0 isn't always a 'Network Address'. I don't know what subnet Skidy has allocated, but if I had to throw a guess it's likely a /23 or /22

spiral flame May 3, 2020, 10:41 PM

#

/16 I think

#

or /8

hazy stratus May 3, 2020, 10:41 PM

#

You think? that seems like an extremely large space

spiral flame May 3, 2020, 10:42 PM

#

Considering every time there's a new VPN server etc, it goes on 10.new.x.x

hazy stratus May 3, 2020, 10:42 PM

#

Just for the boxes, I mean

spiral flame May 3, 2020, 10:42 PM

#

Last two octets can vary, I think

frozen thicket May 3, 2020, 10:43 PM

#

Yes, i always worked with /24 but I think is bigger the network

sharp berry May 4, 2020, 1:50 AM

#

Last three octects vary

short jackal May 4, 2020, 4:24 AM

#

Hey @frosty cape , I have four unanswered emails (the oldest being from two weeks ago, the newest one from last week).
Could you/someone else take a look today?

spiral flame May 4, 2020, 4:27 AM

#

It's 5am rn

#

I can bring it up if you remind me in like 12 hours @short jackal

short jackal May 4, 2020, 4:28 AM

#

👍

spiral flame May 4, 2020, 4:28 AM

#

@short jackal this is responsible disclosure stuff right?

short jackal May 4, 2020, 4:30 AM

#

Two are bugs, one is a problem with a room and one is a reply to a thread for a bug that is being fixed

spiral flame May 4, 2020, 4:34 AM

#

Is the room made by "tryhackme"? @short jackal

short jackal May 4, 2020, 4:35 AM

#

It shows up as made by "ben" who's Skidy iirc

spiral flame May 4, 2020, 4:37 AM

#

Yep

#

Ok, fair enough

inland granite May 4, 2020, 6:46 AM

#

in day 9 (task 14) of the 25daysofchristmas room the ip doesnt seem to be responding

short jackal May 4, 2020, 6:46 AM

#

not responding to pings?

inland granite May 4, 2020, 6:46 AM

#

its fixed: 10.10.169.100. responds to ping, but not listening

#

fixed ip

#

not listening on 80

short jackal May 4, 2020, 6:47 AM

#

read the description

inland granite May 4, 2020, 6:47 AM

#

ignore me, im an idiot

fresh tide May 4, 2020, 10:51 AM

#

25daysofchristmas Task11Day6 Sq00ky account doesn't exist.(the twitter link)
https://twitter.com/MrS1n1st3r

topaz venture May 4, 2020, 11:23 AM

#

Invite link to the Discord on the little random quote on the website directs to a #staff channel? (https://discord.gg/72JvVaK)

The invite link under "Socials" -> "Discord" goes to #site-bugs (https://discord.gg/QgC6Tdk)

Would be good to get a standardised one that invites you to #general perhaps?

frosty cape May 4, 2020, 12:27 PM

#

^ Nice catch there, I've updated them locally, will be made live when I next push:)

#

Thanks for reporting that

topaz venture May 4, 2020, 12:29 PM

#

Neat, that'll be cool. Can update the Discord section on the docs once that gets pushed :^ ty

frosty cape May 4, 2020, 12:30 PM

#

good idea, thanks:)

fresh tide May 4, 2020, 1:00 PM

#

2 scheduled games that take me to 404 page:

📎 unknown.png

frosty cape May 4, 2020, 1:00 PM

#

Refresh and try now

modest lark May 4, 2020, 1:06 PM

#

I have completed the web application Security course under the complete beginner path, but it still shows as incomplete when i'm looking at the path.

frosty cape May 4, 2020, 1:06 PM

#

There might be a question not yet complete that was recently added to a room

modest lark May 4, 2020, 1:07 PM

#

Every course has a green tick

frosty cape May 4, 2020, 1:07 PM

#

Check the rooms manually

#

each one

modest lark May 4, 2020, 1:07 PM

#

Okay thanks

potent sapphire May 4, 2020, 1:56 PM

#

hello

#

how to decode with hashcat?

hazy stratus May 4, 2020, 2:08 PM

#

@potent sapphire you should read this article:
https://cryptokait.com/2020/02/24/password-cracking-with-hashcat/
and ask any other questions in #general. #site-bugs is for bugs. Not for help.

CryptoKait

Paul Buonopane

Password Cracking with Hashcat

Humans are bad at passwords. It’s true. We’re terrible at making them, we’re terrible at remembering them, and we’re terrible at assessing their quality. It’s diffi…

fresh flax May 4, 2020, 3:47 PM

#

.

potent sapphire May 4, 2020, 4:04 PM

#

aha thnxx

cinder wharf May 4, 2020, 5:53 PM

#

@short jackal what do you mean by dots and escaped single quotes for Task 8 on https://tryhackme.com/room/cryptochallenges ? I'm looking at the challenge now and the answer format doesn't make any sense to me.

TryHackMe

TryHackMe | Crypto Challenges

Are you good enough to break these encryption challenges?

short jackal May 4, 2020, 6:01 PM

#

the answer contains some characters that the decrypted plaintext doesn't
I emailed about this so I hope this should be fixed soon

cinder wharf May 4, 2020, 6:02 PM

#

you can see the answer?

short jackal May 4, 2020, 6:03 PM

#

🙊

cinder wharf May 4, 2020, 6:05 PM

#

well, hopefully it gets fixed soon like you said

short jackal May 4, 2020, 6:07 PM

#

speaking of cryptochallenges, points are broken there

#

users have points for the 0 point questions

cinder wharf May 4, 2020, 6:12 PM

#

I have 90 points less than everyone else on the scoreboard despite answering the same questions 🤷‍♂️

short jackal May 4, 2020, 6:14 PM

#

yeah, there are three questions which shouldn't give points but when the points changed they somehow were set

coarse bronze May 4, 2020, 8:34 PM

#

there seems to be a bug in the christmas challenge

#

when i do ls in ftp it's giving me error 500

olive drum May 4, 2020, 8:35 PM

#

ls does not work in ftp

orchid remnant May 4, 2020, 8:35 PM

#

Uh...
Doesn't it?

spiral flame May 4, 2020, 8:35 PM

#

it does for me

orchid remnant May 4, 2020, 8:35 PM

#

Pretty sure it does...

short jackal May 4, 2020, 8:35 PM

#

it should

orchid remnant May 4, 2020, 8:35 PM

#

That said, you may need to be in Passive mode

olive drum May 4, 2020, 8:36 PM

#

oh yeah

#

the mode.

coarse bronze May 4, 2020, 8:36 PM

#

the mode won't change

short jackal May 4, 2020, 8:36 PM

#

is the 500 error accompanied by a message like "bind address already in use"?

coarse bronze May 4, 2020, 8:36 PM

#

it's only stream

orchid remnant May 4, 2020, 8:36 PM

#

exit out and add a -p into the ftp command

coarse bronze May 4, 2020, 8:37 PM

#

it won't allow

#

"Passive mode refused. "

orchid remnant May 4, 2020, 8:37 PM

#

I think I remember needing binary mode in that challenge actually

#

It's usually passive mode though

coarse bronze May 4, 2020, 8:39 PM

#

nothing works

#

and without the file i can't log into the sql

#

i have nothing running on my end on port 21

#

can someone confirm if it's working for them ?

#

i'm using parrotOS

spiral flame May 4, 2020, 8:44 PM

#

Drop me the IP and I'll try and connect

coarse bronze May 4, 2020, 8:44 PM

#

10.10.18.220

#

i'm not sure if it's on the same network though ?

spiral flame May 4, 2020, 8:45 PM

#

Booting now

#

Huh?

#

It's all the same network

coarse bronze May 4, 2020, 8:45 PM

#

ohh cool

spiral flame May 4, 2020, 8:47 PM

#

@coarse bronze

📎 unknown.png

coarse bronze May 4, 2020, 8:48 PM

#

thanks

#

won't let me get the file

short jackal May 4, 2020, 8:51 PM

#

I had some problems with ftp on a room recently and I had to regenerate my vpn config to fix that

coarse bronze May 4, 2020, 8:52 PM

#

oof

#

wierd

#

everything else works though

short jackal May 4, 2020, 8:52 PM

#

yeah, everything worked except ftp

spiral flame May 4, 2020, 8:53 PM

#

Either regen or switch servers and regen

coarse bronze May 4, 2020, 8:54 PM

#

ninja can you give me the contents?

#

of the file

#

please

spiral flame May 4, 2020, 8:55 PM

#

Provide screenshots of it not working

#

And switch VPN servers and see if that fixes it

coarse bronze May 4, 2020, 8:59 PM

#

📎 unknown.png

spiral flame May 4, 2020, 9:01 PM

#

Switch VPN servers

coarse bronze May 4, 2020, 9:01 PM

#

on it

coarse bronze May 4, 2020, 9:25 PM

#

done good!

#

so weird though

#

why

polar sapphire May 5, 2020, 12:19 AM

#

It is still not really important but I am quite annoyed by the fact that I frist blooded this room but I am the last on the scoreboard.... https://tryhackme.com/room/yearoftherabbit

TryHackMe

TryHackMe | Year of the Rabbit

Time to enter the warren...

spiral flame May 5, 2020, 12:19 AM

#

@polar sapphire Yeah scoreboard is kinda buggy

polar sapphire May 5, 2020, 12:19 AM

#

:c 60 points

spiral flame May 5, 2020, 12:20 AM

#

You should have more but historical bloods are bugged @polar sapphire

#

It's in #685858111952781324

#

@polar sapphire technically you didn't blood it

#

It was released internally at Muri's uni first

#

@orchid remnant can confirm?

orchid remnant May 5, 2020, 12:31 AM

#

Mhm -- that's correct.
It was reset for release here, so Ekko would have got the first blood points and the position on the leaderboard, but it was given a dry run previously at a workshop I presented

spiral flame May 5, 2020, 12:32 AM

#

Yeah so it's definitely broken

orchid remnant May 5, 2020, 12:33 AM

#

Yep, definitely

spiral flame May 5, 2020, 12:33 AM

#

Ekko didn't get any of the bonus points either

#

So I think this is the same issue that we've had since the scoreboard reset

orchid remnant May 5, 2020, 12:33 AM

#

Mhm

#

Looks like it

polar sapphire May 5, 2020, 12:33 AM

#

ah

spiral flame May 5, 2020, 12:34 AM

#

@frosty cape You're aware of the blood and bonus points bugs right?

frosty cape May 5, 2020, 12:38 AM

#

No?

spiral flame May 5, 2020, 12:40 AM

#

I submitted it

#

basically, any bonus points were removed on the points change

#

And any bloods were removed

#

For anyone now completing the room, they get the bonus points

rotund forge May 5, 2020, 12:44 AM

#

Hi guys,
I'm doing the rpwebscanning room, Question #8 regarding XSS Alert in Zap.
I've done multiple scans (also tried to terminate the VM and use an other one) but I can't find the expected alert.
I've seen on DIscord that many people had this problem but I can't find how to solve this.

Does anyone knows how ?

Thank you.

#

📎 SPOILER_unknown.png

spiral flame May 5, 2020, 12:44 AM

#

@rotund forge The alert either appears or doesn't

#

It works reliably for me, but other people with the same VM and the same version of Zap have trouble

rotund forge May 5, 2020, 12:45 AM

#

Oh... okay
Should I report this as a bug somewhere or it can't be considered as one ?

spiral flame May 5, 2020, 12:46 AM

#

The room creator knows about it.

#

There's not much more we can do

rotund forge May 5, 2020, 12:46 AM

#

Okay, thank you !

covert kernel May 5, 2020, 5:24 AM

#

Access page openvpn not connected in the connected field but actively working

spiral flame May 5, 2020, 5:34 AM

#

@covert kernel yeah it's a known thing

#

Access is unreliable

#

I've been pestering skidy to add a disclaimer for... Months now

covert kernel May 5, 2020, 5:35 AM

#

Alright, thanks man

rare swallow May 5, 2020, 12:36 PM

#

please, remove the screenshot as it has an answer 🙂

orchid remnant May 5, 2020, 12:37 PM

#

Doesn't mean it's right.
I can tell you now that's the wrong answer

#

(And possibly the wrong wordlist)

viscid oracle May 5, 2020, 12:38 PM

#

Ohh,okay thanks

lethal gazelle May 5, 2020, 2:43 PM

#

ActiveDirectory method to dump ntds.dit?

hazy stratus May 5, 2020, 2:48 PM

#

read the secretsdump output 4head

rare swallow May 5, 2020, 2:49 PM

#

That is still not a bug

median sapphire May 5, 2020, 2:50 PM

#

@lethal gazelle As Chevalier stated this not a bug, if you need help with a room, then please post in #room-help or #room-hints

barren gazelle May 5, 2020, 3:36 PM

#

anyone use the Learn Linux room there seems to be issues with that room, the VM keeps crashing and is really slow, but also running one of the binary's gives me an error

spiral flame May 5, 2020, 3:37 PM

#

@barren gazelle if it gives you an error, it's because you're doing something wrong.

barren gazelle May 5, 2020, 3:44 PM

#

walkthrough says to run the binary, this is what I get
./shiba2
Segmentation fault (core dumped)

spiral flame May 5, 2020, 3:51 PM

#

@barren gazelle Not a bug. That's you doing something wrong.

barren gazelle May 5, 2020, 3:52 PM

#

lol yeah I was being a moron

#

not reading the question properly either

tawdry sigil May 5, 2020, 4:42 PM

#

yo

#

anyone a lead on investigatingwindows for the task name

#

im either blind or i cant seem to find it

spiral flame May 5, 2020, 4:42 PM

#

#room-help

tawdry sigil May 5, 2020, 4:42 PM

#

thx

jade beacon May 5, 2020, 6:11 PM

#

i'm not sure where to post this, but it seems that smbmap has issues authenticating null sessions, which is particularly confusing if you are following some of the walkthroughs (i.e., skynet).

spiral flame May 5, 2020, 6:11 PM

#

smbmap is just generally a bit weird

#

Null sessions aren't that widely supported

frosty cape May 5, 2020, 6:12 PM

#

Hello #685858111952781324 #site-bugs I think there is a regression due to the last deployment in the public profile yearly activity. The last case was on 2nd, May

📎 unknown.png

#

I think it's not on api side because the 3rd, 4th and 5th May are still returned.

📎 unknown.png

spiral flame May 5, 2020, 6:14 PM

#

Oooh yep

#

it just doesn't display

#

@frosty cape Submitted

sullen vessel May 5, 2020, 6:34 PM

#

Smalls suggestions regarding the description of Avenger's SQL injection:

The sentence "as ' 1=1 we could trick the query into authenticating us as the ' character would break the SQL query" is wrong, as the user input is not being concatenated in a string literal. "Breaking" is maybe not the best word, maybe go for "change query's semantic"?
The hint says "Have the username and password as ' or 1=1-- (include the apostrophe)"—the apostrophe is not needed at all. The resulting query will indeed authenticate the user (SELECT * FROM users WHERE username = ' or 1=1-- AND password = ' or 1=1--) but it does not really make sense!

spiral flame May 5, 2020, 6:34 PM

#

Is it not being concatenated in a string literal in the backend?

#

How can you tell?

sullen vessel May 5, 2020, 6:35 PM

#

nope, the query is con.query('SELECT * FROM users WHERE username = ' + username + ' AND password = ' + password)

spiral flame May 5, 2020, 6:35 PM

#

That's concatenation

sullen vessel May 5, 2020, 6:35 PM

#

when I say string literal, it's in a SQL string, not node ;)

#

by opposition to WHERE username = \''+something' , where the ' would be required.

spiral flame May 5, 2020, 6:36 PM

#

yeah honestly that's what I'd expect

#

"WHERE username ='"

#

Wait

#

The alternative query does make sense

#

SELECT * FROM users WHERE username = ' or 1=1-- AND password = ' or 1=1-- is basically
SELECT * FROM users WHERE username = 'somestring' or 1=1--

#

You're putting part of the query in quotes

#

@sullen vessel

orchid remnant May 5, 2020, 6:40 PM

#

Yeah, if there's no apostrophe there, you'll be inverting what should be in quotes with what shouldn't

#

The apostrophe is breaking the single quote that's already there

sullen vessel May 5, 2020, 6:40 PM

#

yes, but that 's what written in the hint

spiral flame May 5, 2020, 6:41 PM

#

Yeah which works

sullen vessel May 5, 2020, 6:41 PM

#

that's why I say it should be changed ;)

spiral flame May 5, 2020, 6:41 PM

#

Because you're putting the AND in quotes so you can just use the OR

sullen vessel May 5, 2020, 6:41 PM

#

it works but it does not make sense to tell people to use quotes for this thing

spiral flame May 5, 2020, 6:41 PM

#

I mean, you need an OR to bypass it

orchid remnant May 5, 2020, 6:41 PM

#

📎 unknown.png

sullen vessel May 5, 2020, 6:41 PM

#

(i'll be back in ~40 minutes to discuss it, sorry)

orchid remnant May 5, 2020, 6:42 PM

#

If that doesn't have an extra quote added into it, you're just putting the password as 1=1

#

Which will obviously only work if the password actually is 1=1

#

(Funny though that would be)

spiral flame May 5, 2020, 6:43 PM

#

wait

#

but SELECT * FROM Users WHERE username=Muri AND password=Veganism4TheWin wouldn't work, would it?

#

Because they need to be strings

#

I think the query logic is broken

#

inb4 I guessed muri's password

orchid remnant May 5, 2020, 6:44 PM

#

Correct -- the query will be SELECT * FROM Users WHERE username= 'Muri' AND password 'Veganism4TheWin'

#

Which is what the task shows just now

spiral flame May 5, 2020, 6:44 PM

#

It'd need to be

#

But they dumped the code from the backend

orchid remnant May 5, 2020, 6:44 PM

#

Also, damn, I need to go change my password

spiral flame May 5, 2020, 6:45 PM

#

So the code in the backend has no quotes

#

So it wouldn't work for valid users in the database

orchid remnant May 5, 2020, 6:45 PM

#

Do we have the code in the backend?

spiral flame May 5, 2020, 6:45 PM

#

I don't

#

Flan claimed to, so I'll trust that one

orchid remnant May 5, 2020, 6:45 PM

#

You get RCE in that one don't you?

#

I'll go take a look 😁

spiral flame May 5, 2020, 6:46 PM

#

I haven't done it

#

It said web so I skipped it

orchid remnant May 5, 2020, 6:46 PM

#

Think I did it at the Hackback

spiral flame May 5, 2020, 6:46 PM

#

HB1 or HB2

orchid remnant May 5, 2020, 6:47 PM

#

HB2, sorry

spiral flame May 5, 2020, 6:48 PM

#

Ah

orchid remnant May 5, 2020, 6:49 PM

#

Good grief they have this command execution locked down

#

@spiral flame @sullen vessel this is the source for it: javascript con.query('SELECT * FROM users WHERE username = ' + username + ' AND password = ' + password, function(error, results, fields) {

#

Immediately following by this line: // Made deliberately vulnerable.. Changed from con.query('SELECT * FROM users WHERE username = ? AND password = ?', [username, password] I might add

#

And that will definitely not work for SQLi unless you cancel out that single quote

spiral flame May 5, 2020, 7:13 PM

#

📎 unknown.png

orchid remnant May 5, 2020, 7:13 PM

#

Yeah, I mentioned that a while ago

#

It doesn't like GIFs

spiral flame May 5, 2020, 7:13 PM

#

thonk

orchid remnant May 5, 2020, 7:13 PM

#

At all

spiral flame May 5, 2020, 7:14 PM

#

It loads it as a PNG

orchid remnant May 5, 2020, 7:14 PM

#

Exactly

#

Does the same thing with mine

spiral flame May 5, 2020, 7:15 PM

#

Sounds like it's just inserting the userid and then .png

orchid remnant May 5, 2020, 7:15 PM

#

Mhm

spiral flame May 5, 2020, 7:15 PM

#

If you could control userid...

orchid remnant May 5, 2020, 7:15 PM

#

Hehe, we're thinking along the same lines here...

#

That's a difficult one to do though

#

You'd need to either create a new user account and get a room released publicly -- precisely 9 of us could enable that to happen, and none of us would

spiral flame May 5, 2020, 7:16 PM

#

Wait

orchid remnant May 5, 2020, 7:16 PM

#

Or be able to change your name having already released a room

#

Unless it shows up elsewhere

spiral flame May 5, 2020, 7:17 PM

#

📎 unknown.png

#

It's either username or userid?

#

Or maybe it's upload name?

orchid remnant May 5, 2020, 7:17 PM

#

Huh -- it can't be upload name, given it's interpreting GIF as PNG

#

Odd that it's using JPEG there though?

spiral flame May 5, 2020, 7:18 PM

#

Except it does handle gifs

#

Cryllic's room worked

orchid remnant May 5, 2020, 7:19 PM

#

Huh, so it did

#

In which case

#

What the heck is causing that?

spiral flame May 5, 2020, 7:19 PM

#

Spicy.

orchid remnant May 5, 2020, 7:20 PM

#

And overjt has a PNG

#

https://tryhackme-images.s3.amazonaws.com/user-avatars/75115a888c91d323a7a640d404849c77.png

spiral flame May 5, 2020, 7:20 PM

#

Yes

#

https://tryhackme-images.s3.amazonaws.com/user-avatars/4ed4c2f4c34a6a5c8792ce5455b6c4db.png

#

Access denied

#

But those point to (assumedly) different files

orchid remnant May 5, 2020, 7:21 PM

#

Mhm

#

I assume the one you posted there is from the notification bar?

#

The broken one

#

But that's weird that they'd save two copies of the same file -- especially when they already have the full scale one readily available

#

(And annoying that it's in the same folder)

#

https://tryhackme-images.s3.amazonaws.com/user-avatars/9e946af210ae86d6fbfda480d958b3fe.gif

#

https://tryhackme-images.s3.amazonaws.com/user-avatars/9e946af210ae86d6fbfda480d958b3fe.gif

spiral flame May 5, 2020, 7:23 PM

#

It does seem to be filename tho

#

Those are the same URL

orchid remnant May 5, 2020, 7:23 PM

#

They are

#

From two different places

#

One from the notification bar, from from his profile

#

Meaning it's meant to be pointing to the same URL, but in that case isn't

spiral flame May 5, 2020, 7:24 PM

#

Does your pfp work in the admin panel?

orchid remnant May 5, 2020, 7:24 PM

#

Presumably that one is just broken

#

It does, last I checked

#

Yep

spiral flame May 5, 2020, 7:25 PM

#

Overjt's works on the admin panel

#

Maybe no xss then

#

Sad

orchid remnant May 5, 2020, 7:26 PM

#

Yeah, looks like just a bad URL 😢

spiral flame May 5, 2020, 7:26 PM

#

I think it preserves the file title though

#

Wait

#

It's either username or a hash or something?

orchid remnant May 5, 2020, 7:26 PM

#

Where are you seeing that?
I've seen it preserved somewhere before actually, but it's usually not

spiral flame May 5, 2020, 7:27 PM

#

My pfp keeps my uname

#

But that might have been my upload title

orchid remnant May 5, 2020, 7:27 PM

#

Yes, it does indeed

spiral flame May 5, 2020, 7:27 PM

#

Updated it to the same thing

orchid remnant May 5, 2020, 7:27 PM

#

Difference there that I can see is that it's a Jpeg?

spiral flame May 5, 2020, 7:27 PM

#

And now it's the hash or something

orchid remnant May 5, 2020, 7:27 PM

#

Either that or the system is just nuts

#

Ah, so maybe the system changed?

spiral flame May 5, 2020, 7:28 PM

#

I think skidy changed how it works internally ye

orchid remnant May 5, 2020, 7:28 PM

#

That'd be it

#

Hmm, wonder how overjt's got messed up in notifications

spiral flame May 5, 2020, 7:29 PM

#

Maybe they changed it

orchid remnant May 5, 2020, 7:31 PM

#

Huh, that's an interesting proposition actually

sullen vessel May 5, 2020, 7:43 PM

#

So, what’s your conclusion for the sqli? @orchid remnant @spiral flame

orchid remnant May 5, 2020, 7:44 PM

#

con.query('SELECT * FROM users WHERE username = ' + username + ' AND password = ' + password, function(error, results, fields) {```

#

That's the code

#

Which, afaik, will not work without quoting out at the very least the username

spiral flame May 5, 2020, 7:45 PM

#

But it's true that that code wouldn't work for valid users

orchid remnant May 5, 2020, 7:47 PM

#

I have a feeling you might be right there

#

Oh, wait a second, I found some valid user accounts earlier

spiral flame May 5, 2020, 7:48 PM

#

If you got root, dump the db

sullen vessel May 5, 2020, 7:48 PM

#

what do you mean by "quoting out at the very least the username"?

orchid remnant May 5, 2020, 7:48 PM

#

As in, closing that quote earlier

sullen vessel May 5, 2020, 7:48 PM

#

there is no quote

orchid remnant May 5, 2020, 7:48 PM

#

Oh?

sullen vessel May 5, 2020, 7:48 PM

#

it's ', not \''

orchid remnant May 5, 2020, 7:48 PM

#

📎 unknown.png

#

What's that then?

spiral flame May 5, 2020, 7:49 PM

#

A JS string literal

#

The string is "SELECT * FROM users WHERE username = "

sullen vessel May 5, 2020, 7:49 PM

#

you definitely do not need a quote in the parameter username to do the injection

orchid remnant May 5, 2020, 7:49 PM

#

Well, yeah...
It's literally a quotation mark that needs to be closed though

sullen vessel May 5, 2020, 7:49 PM

#

nope

spiral flame May 5, 2020, 7:49 PM

#

No?

orchid remnant May 5, 2020, 7:49 PM

#

And yes, I agree, James -- I have a feeling that will be broken

spiral flame May 5, 2020, 7:49 PM

#

@orchid remnant The single quotes aren't part of the query

orchid remnant May 5, 2020, 7:49 PM

#

I know

#

Just testing it now

spiral flame May 5, 2020, 7:50 PM

#

What quotation mark needs to be closed though?

sullen vessel May 5, 2020, 7:50 PM

#

it would need to be closed if the code was con.query('SELECT * FROM users WHERE username = "' + username + '" AND password = "' + password + '"', function(error, results, fields) { , but it's not the case here

spiral flame May 5, 2020, 7:51 PM

#

BTW, " makes it clearer

#

Prevents you having to escape single quotes

sullen vessel May 5, 2020, 7:51 PM

#

true

#

as the effective SQL query would then be SELECT * FROM users WHERE username = "foo" AND password = "bar"

orchid remnant May 5, 2020, 7:52 PM

#

Ok, confirmed that it breaks for real users @spiral flame

#

Also confirmed that it does not work without the single quote

spiral flame May 5, 2020, 7:52 PM

#

@sullen vessel single quotes for sql

orchid remnant May 5, 2020, 7:52 PM

#

Although why, I can't actually see

sullen vessel May 5, 2020, 7:52 PM

#

what are your params @orchid remnant?

orchid remnant May 5, 2020, 7:53 PM

#

Using ' or 1=1 in both fields works

#

Dropping the single quote

#

Does not

sullen vessel May 5, 2020, 7:53 PM

#

yeah but that's wrong :P

spiral flame May 5, 2020, 7:53 PM

#

@orchid remnant sql SELECT * FROM users WHERE username = ' or 1=1-- AND password = ' or 1=1--

#

See what it's doin?

orchid remnant May 5, 2020, 7:53 PM

#

Just going back to read through the code

sullen vessel May 5, 2020, 7:53 PM

#

+1, coloration helps

orchid remnant May 5, 2020, 7:53 PM

#

Ah, yeah, that makes sense 😆

spiral flame May 5, 2020, 7:53 PM

#

That's why it works with both fields

orchid remnant May 5, 2020, 7:54 PM

#

Yep, definitely confirmed there

#

Just tried it with a single quote in the first field

spiral flame May 5, 2020, 7:54 PM

#

Anything with just a single single quote won't work hopefully

#

If it does, the plot thickens

orchid remnant May 5, 2020, 7:54 PM

#

Nope, that just worked perfectly with only a single quote

#

Although it makes sense

spiral flame May 5, 2020, 7:55 PM

#

wat

orchid remnant May 5, 2020, 7:55 PM

#

SELECT * FROM users WHERE username = 'AND password = ' or 1=1```

spiral flame May 5, 2020, 7:55 PM

#

ye

#

That makes sense

orchid remnant May 5, 2020, 7:55 PM

#

Mhm

#

That's from just adding a single quote

spiral flame May 5, 2020, 7:55 PM

#

But that's two single quotes

sullen vessel May 5, 2020, 7:55 PM

#

no, adding two

orchid remnant May 5, 2020, 7:56 PM

#

But keeping ' or 1=1 in the password field

#

Oh, I get what you're saying now

#

One per field

sullen vessel May 5, 2020, 7:56 PM

#

my whole point is that the description / hint is too complicated and vague, not that it's impossible using quotes

spiral flame May 5, 2020, 7:56 PM

#

So the hint is probably wrong, but only because the webapp is broken for legitmate users too

#

Nice.

orchid remnant May 5, 2020, 7:56 PM

#

Mhm, the webapp is definitely broken for legitimate users

spiral flame May 5, 2020, 7:56 PM

#

It's nodeJS, so it can be patched in the cloud without too much work

sullen vessel May 5, 2020, 7:57 PM

#

:)

spiral flame May 5, 2020, 7:57 PM

#

But an admin would have to do it

orchid remnant May 5, 2020, 7:57 PM

#

Don't yah just love when an intended exploit works purely by accident?..

sullen vessel May 5, 2020, 7:57 PM

#

so, my suggestion would be to change the description / hint (I can suggest something) and add single quotes around the params in the query

spiral flame May 5, 2020, 7:58 PM

#

@frosty cape Can you take a look at this?

#

I know it's an old room but it's also sub only official content~~ so should be slightly higher quality than this~~

sullen vessel May 5, 2020, 7:58 PM

#

and this room is made to be didactic, so…

#

while we are at it, i found another bug in another room :P

spiral flame May 5, 2020, 8:00 PM

#

🤦

sullen vessel May 5, 2020, 8:00 PM

#

On step 17 of linuxctf (Login to alice’s account using her private key and get flag 17.), are we supposed to read /home/alicem/.ssh/id_rsa ? It seems to be impossible from garry and bob: .ssh/id_rsa is indeed world-readable but .ssh is not world-traversable. In addition, /home/alice/flag* are all world-readable so you can get the flags without logging as alice.

spiral flame May 5, 2020, 8:00 PM

#

Oh yeah that's a known issue

orchid remnant May 5, 2020, 8:00 PM

#

The fix is in the task description

spiral flame May 5, 2020, 8:00 PM

#

Well, the SSH key is known broken

sullen vessel May 5, 2020, 8:00 PM

#

oh, i did not find it in the know issues

spiral flame May 5, 2020, 8:00 PM

#

But yeah the flag is readable and it shouldn't be

#

It's in the room

orchid remnant May 5, 2020, 8:00 PM

#

In the task description

sullen vessel May 5, 2020, 8:00 PM

#

hum ok

spiral flame May 5, 2020, 8:00 PM

#

It says "Alice's SSH key is broken"

sullen vessel May 5, 2020, 8:00 PM

#

:v

#

it's not very explicit, but ok

#

that's all for me

#

thanks for taking time giving a look at it!

spiral flame May 5, 2020, 8:02 PM

#

We love a good mystery

frosty cape May 5, 2020, 8:04 PM

#

I know it's an old room but it's also sub only official content~~ so should be slightly higher quality than this~~
@spiral flame Which room sorry?

#

Linuxctf?

spiral flame May 5, 2020, 8:04 PM

#

Avengers blog

#

The SQLi is uh

#

Spicy and broken

#

Reading back through the chat, basically the server side query doesn't work for legitimate users

#

And the content in the room to exploit it is (wrong? Misleading? Not as accurate as it could be?)

frosty cape May 5, 2020, 8:08 PM

#

Ah I see what you mean

#

I've put it on my to-do list

spiral flame May 5, 2020, 8:09 PM

#

Thanks

spiral flame May 5, 2020, 9:03 PM

#

Not a bug

#

#room-help

#

How certain are you?

#

📎 unknown.png

#

It's not empty

#

Other people have completed it.

#

ls -lah see if it is actually empty

#

Maybe that's not the flag.

#

The last flag is normally a root flag, not a www-data flag

#

Not 100% on this

#

But other people have completed it.

#

I would try a redeploy, and try searching harder

#

Then try a redeploy.

#

The last flag is a root flag

#

not a www-data flag.

#

I'm not convinced this isn't user error

#

I have the writeup in front of me

#

You created myflag didn't you?

#

In attempting to get the root flag.

#

So this is user error

#

You didn't get the root flag correctly

#

This is not a bug

#

Terminate. Redeploy.

echo terrace May 5, 2020, 9:21 PM

#

"What flag to you set to analyze the binary upon entering the r2 console (equivalent to running aaa once your inside the console) " possibly missing a question mark as well but bolded some typos in the question this is cc:radare2 task 2 question 1

spiral flame May 5, 2020, 9:24 PM

#

@covert kernel

#

fix pls

covert kernel May 5, 2020, 9:24 PM

#

ahhhh

#

I rush to the fix!

topaz venture May 5, 2020, 9:25 PM

#

cooctus

spiral flame May 5, 2020, 9:30 PM

#

Then try something different

#

Privesc

#

Not until you prove it's a mistake in the room

#

I don't appreciate the tone

#

It worked for others. The privesc isn't a bad one. Get a root shell.

#

Try harder is a mentality

#

I don't believe you

#

You should prove it with a root shell

#

No, I'm serious

#

Until that point, it seems like user error.

#

Are you running that script btw?

#

Yeah. Are you personally running it from your shell?

#

Then you're not understanding something

#

How is that script going to have access to the root flag?

#

Because other people have solved it and it very much seems like user error.

#

If you can prove it's a bug, then let me know

frosty cape May 5, 2020, 9:41 PM

#

Another bug: Filters aren't applied on Hacktivities page.
To reproduce:
1/ Filter something
2/ Go in a room
3/ Go to previous page

📎 unknown.png

frosty cape May 5, 2020, 10:42 PM

#

I think you're clicking filtered before the page is fully loaded

#

Try wait until all rooms appear

#

Then try

spiral flame May 5, 2020, 10:44 PM

#

@frosty cape Not clicking, it's going back

echo terrace May 5, 2020, 10:44 PM

#

I did the reproduction steps of filtering going into a room and going to the previous page (hackitivities) and for me the filter boxed was checked but not actually doing anything

spiral flame May 5, 2020, 10:44 PM

#

I think this is similar to the stuff I reported a while back

orchid remnant May 5, 2020, 10:46 PM

#

^^ I remember that

turbid osprey May 5, 2020, 11:02 PM

#

In the new room "Network Services" Task 7, Flag #2 ist bugged.
The welcome message is: ||SKIDY'S BACKDOOR. Type .HELP to view commands|| which can't be the flag, because the asteriks are totally different 😄

spiral flame May 5, 2020, 11:03 PM

#

Yeah it's bugged

tall maple May 6, 2020, 1:15 AM

#

@turbid osprey oh the issue i have rn lol

#

also, please fix the bug in alfred room i asked previously. while i was doing the room, there was a 4th task which says Coming Soon.. and room won't let me to complete it because of that 4th task. after couple of days, 4th task is gone and alfred still looks incomplete in my list.

unkempt herald May 6, 2020, 1:34 AM

#

Learn Linux: [Task 29] [Section 5: Advanced file Operations]

📎 unknown.png

orchid remnant May 6, 2020, 1:35 AM

#

Oi, @covert kernel

spiral flame May 6, 2020, 1:35 AM

#

@covert kernel

#

Fix

#

plz

orchid remnant May 6, 2020, 1:35 AM

#

Now

#

😁

covert kernel May 6, 2020, 1:46 AM

#

But

#

But

orchid remnant May 6, 2020, 1:46 AM

#

Now, Cooctus!

covert kernel May 6, 2020, 1:46 AM

#

Am going outside rn

#

Me fix

#

When me get home

plain willow May 6, 2020, 4:02 AM

#

can anyone guide me how to crack the hash and deciper the message in cicada room? did anyone solve it

spiral flame May 6, 2020, 4:03 AM

#

@plain willow #room-help

plain willow May 6, 2020, 4:03 AM

#

tq @spiral flame

heavy wyvern May 6, 2020, 10:15 AM

#

Both Windows and Linux have directories
As an extra to Scrubby's message https://discordapp.com/channels/521382216299839518/559443389058252800/707404987831025745
Even the command cd for Windows stands for Change Directory

📎 unknown.png

round cave May 6, 2020, 2:00 PM

#

HackPark room: “What is the name of the abnormal service running” The service is WScheduler.exe but that doesn’t get accepted. WindowsScheduler.exe is accepted instead. This may trip a lot of people up.

sullen vessel May 6, 2020, 3:06 PM

#

On ccpentesting, Tasks'8 How would you set SMBPass to "username"? should be How would you set SMBUser to "username"? (same for SMBPass)

spiral flame May 6, 2020, 3:14 PM

#

@covert kernel

sullen vessel May 6, 2020, 3:30 PM

#

On ccpentesting, Task 16, #12 is empty

spiral flame May 6, 2020, 3:39 PM

#

@covert kernel fix plz

covert kernel May 6, 2020, 3:51 PM

#

noots

#

Fixed task 16 but task 8 question 8 and 9 are fine

modest marlin May 6, 2020, 4:02 PM

#

also, please fix the bug in alfred room i asked previously. while i was doing the room, there was a 4th task which says Coming Soon.. and room won't let me to complete it because of that 4th task. after couple of days, 4th task is gone and alfred still looks incomplete in my list.
@tall maple I also have this problem!

tall maple May 6, 2020, 4:03 PM

#

@modest marlin yeah james told me that somehow the room is waiting for 4th task to become its normal state and seems like somebody workin on it

#

Unfortunately, it cant be fixed at the moment

#

But it will be

modest marlin May 6, 2020, 4:04 PM

#

ah thats fine. will just leave it until its fixed

#

bugs my OCD a bit xD

tall maple May 6, 2020, 4:04 PM

#

Yeah its buggin me either lol

sullen vessel May 6, 2020, 4:21 PM

#

@covert kernel: it's to make sure that everybody read the questions correctly? :)

spiral flame May 6, 2020, 4:22 PM

#

yes

#

It's designed to mess with you 😉

#

CC pentesting is.... like 3500 points

sullen vessel May 6, 2020, 4:31 PM

#

On ccradare2, Task3, response to #4 does not match with I get with radare2 4.4.0 (11) (@covert kernel)

covert kernel May 6, 2020, 4:31 PM

#

Yeah that room was made a while ago

#

Radare has had some updates which made some of the questions slightly off

spiral flame May 6, 2020, 4:32 PM

#

Fix it pars

#

https://giphy.com/gifs/shiba-D6InoH7TLxMsM

Giphy

#

do it for the shiba

covert kernel May 6, 2020, 4:33 PM

#

But

orchid remnant May 6, 2020, 4:33 PM

#

But nothing

#

!shibe

raw karmaBOT May 6, 2020, 4:33 PM

#

TryHackMe

!shibe

Shiba Inu

spiral flame May 6, 2020, 4:33 PM

#

https://giphy.com/gifs/shiba-xqF0Bzzc5leP6 happy taps

Giphy

sullen vessel May 6, 2020, 4:33 PM

#

it's not very important, people can bf i guess :)

covert kernel May 6, 2020, 4:35 PM

#

The answer isn't technically wrong

tall maple May 6, 2020, 5:05 PM

#

BUG in Network Services room on Task 7 - Question 2 fixed, fyi

echo terrace May 6, 2020, 5:05 PM

#

@sullen vessel how do you get 11? I just ran mine on version 4.5 and believe it gives me 12 unless i'm reading it wrong

sullen vessel May 6, 2020, 5:07 PM

#

 -- This is just an existentialist experiment.
[0x00000530]> aaaa
[x] Analyze all flags starting with sym. and entry0 (aa)
[x] Analyze function calls (aac)
[x] Analyze len bytes of instructions for references (aar)
[x] Check for objc references
[Warning: Skipping -4 section
[x] Check for vtables
[x] Type matching analysis for all functions (aaft)
[x] Propagate noreturn information
[x] Use -AA or aaaa to perform additional experimental analysis.
[x] Finding function preludes
[x] Enable constraint types analysis for variables
[0x00000530]> afl
0x00000530    1 42           entry0
0x00000560    4 50   -> 44   sym.deregister_tm_clones
0x000005a0    4 66   -> 57   sym.register_tm_clones
0x000005f0    5 50           sym.__do_global_dtors_aux
0x00000630    4 48   -> 42   entry.init0
0x000004f8    3 23           sym._init
0x000006e0    1 1            sym.__libc_csu_fini
0x000006e4    1 9            sym._fini
0x0000066b    1 7            sym.secret_func
0x00000680    4 93           sym.__libc_csu_init
0x00000660    1 11           main
[0x00000530]> afl |wc -l
      11

echo terrace May 6, 2020, 5:10 PM

#

is just aaa any different or debug mode? just running command now to check

sullen vessel May 6, 2020, 5:12 PM

#

it's a typo but still the same as aaa

echo terrace May 6, 2020, 5:13 PM

#

📎 SPOILER_radare2.PNG

spiral flame May 6, 2020, 5:15 PM

#

That last function

echo terrace May 6, 2020, 5:16 PM

#

I get something completely different running it through debug mode though

#

📎 SPOILER_radare2_1.PNG

#

so what are actually "functions"

spiral flame May 6, 2020, 5:17 PM

#

Constructs in assembly

onyx helm May 6, 2020, 5:29 PM

#

PoloMint's Network Services Room, under Task 9: Enumerating FTP section, should be "Anonymous" instead of "anon"

📎 unknown.png

#

Other than that, great room

unkempt herald May 6, 2020, 5:33 PM

#

RP: Metasploit [Task3] #10

📎 unknown.png

#

Should be "...about how to change the value of variables...."

rare swallow May 6, 2020, 9:37 PM

#

PLZ fix

📎 unknown.png

spiral flame May 6, 2020, 9:38 PM

#

@rare swallow Submitted

rare swallow May 6, 2020, 9:39 PM

#

thank you.

#

📎 unknown.png

#

📎 unknown.png

#

these guys are not in sync on https://tryhackme.com

📎 unknown.png

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

spiral flame May 6, 2020, 9:49 PM

#

They're at different stages

#

The whole page is wobbly

#

In the clouds

rare swallow May 6, 2020, 9:49 PM

#

so is my eyesight 😆

orchid remnant May 6, 2020, 9:50 PM

#

Maybe, uh, lay off the alcohol Chev?

rare swallow May 6, 2020, 9:51 PM

#

nah bruv, we good

#

we good

orchid remnant May 6, 2020, 9:51 PM

#

Oh good

#

More alcohol!

unkempt herald May 6, 2020, 10:15 PM

#

.png is not accepted as an image format for avatars? Is this by design?

spiral flame May 6, 2020, 10:15 PM

#

It seems to be?

unkempt herald May 6, 2020, 10:16 PM

#

Seems to be accepted or seems to be by design?

#

changing the file extension worked so it isn't a huge deal

spiral flame May 6, 2020, 10:16 PM

#

@unkempt herald PNG is accepted https://tryhackme-images.s3.amazonaws.com/user-avatars/686163e52545fa32d57c7e86759d87dc.png

unkempt herald May 6, 2020, 10:17 PM

#

📎 unknown.png

#

only happens with PNG files

#

jpg works though

#

hmm maybe it's this specifc PNG I have

#

I just tried another PNG and it uploaded

#

disregard

#

PEBCAK

rare swallow May 6, 2020, 10:44 PM

#

Nah, it's layer 8

covert kernel May 7, 2020, 5:32 AM

#

When trying to join koth public game

📎 unknown.png

cinder crow May 7, 2020, 5:44 AM

#

Dumping Router Firmware Task 3 Question 2 "Where" should be "What"

📎 rfirmware_task3_q2.png

sullen vessel May 7, 2020, 11:48 AM

#

introtoresearch, task 3, #4, "If I wanted to exploit a 2020 buffer overflow" but the cve was reserved in 2019

median sapphire May 7, 2020, 12:15 PM

#

@sullen vessel Not a bug, the CVE was published in 2020.

fierce condor May 7, 2020, 1:49 PM

#

Hey not sure if this is a common thing or not but when I spun up my http server to transfer a file over from my THM Browser kali box to the box I am working on. I had an external Chinese IP enumerating my box, I'm sure the internet is full of masscan's and such but I grabbed the requests that where happening if anyone wants to look at them.

orchid remnant May 7, 2020, 1:50 PM

#

Yeah, that happens when you've got public facing IPs with ports open

fierce condor May 7, 2020, 1:51 PM

#

are the thm kali boxes external facing?

rare swallow May 7, 2020, 1:51 PM

#

yes

orchid remnant May 7, 2020, 1:51 PM

#

Not much you can do about it unfortunately -- just change the password when you first log in, and don't leave anything valuable open

#

Mhm, that's why you can download stuff from the internet and connect without the VPN

fierce condor May 7, 2020, 1:52 PM

#

well there we go, I wasnt sure how the network infrastructure for them is routed

orchid remnant May 7, 2020, 1:52 PM

#

Ah, fair enough

#

It's also worth specifying to only serve the http server on the interface that's connected into the THM network

#

Shouldn't be a huge issue, it happening on all interfaces, but it's worth doing

fierce condor May 7, 2020, 1:53 PM

#

yea, i mean its a benifit of having a "throw away" box spun up, nothing sensitive on there really

orchid remnant May 7, 2020, 1:54 PM

#

Indeed

hazy stratus May 7, 2020, 2:45 PM

#

@cinder crow good catch, I'll fix that rn

#

Fixed.

frosty cape May 7, 2020, 4:41 PM

#

@rare swallow

📎 unknown.png

#

I can't replicate, whats your monitor size?

spiral flame May 7, 2020, 4:42 PM

#

@frosty cape

📎 unknown.png

#

1080p, non sub account

frosty cape May 7, 2020, 4:51 PM

#

Thanks, fixed locally (I think)

spiral flame May 7, 2020, 4:51 PM

#

height: 5em

#

Is it css flex?

frosty cape May 7, 2020, 4:51 PM

#

yes

spiral flame May 7, 2020, 4:51 PM

#

Flex is our lord and saviour

frosty cape May 7, 2020, 4:51 PM

#

indeedy

spiral flame May 7, 2020, 4:52 PM

#

It's the answer to essentially all of my CSS problems

sullen vessel May 7, 2020, 5:34 PM

#

room goldeneye, Task 2, #3, the question "Inspect port 55007, what services is configured to use this port?" does not make sense

#

it should be something like "Which command can you use to connect to this port?" instead

spiral flame May 7, 2020, 5:35 PM

#

nmap -sV -p55007

#

What's listening on that port

sullen vessel May 7, 2020, 5:35 PM

#

nope

spiral flame May 7, 2020, 5:35 PM

#

It does make sense to me.

sullen vessel May 7, 2020, 5:35 PM

#

the answer is telnet :>

spiral flame May 7, 2020, 5:35 PM

#

then telnet will be listening

sullen vessel May 7, 2020, 5:35 PM

#

no, it's a dovecot

spiral flame May 7, 2020, 5:36 PM

#

o that's email then

#

So thonk

sullen vessel May 7, 2020, 5:36 PM

#

🤷‍♂️

modest marlin May 7, 2020, 6:40 PM

#

Hello. Ran into an issue with a box today.
Room: Joker CTF
Task 1 Question 18: List the image installed on the lxd-service, what is the ALIAS of this image?

Running lxc image ls doesnt show any images running.

spiral flame May 7, 2020, 6:42 PM

#

@modest marlin Known bug.

#

It's hit or miss

modest marlin May 7, 2020, 6:42 PM

#

ah cool 🙂

spiral flame May 7, 2020, 6:42 PM

#

reexploit

modest marlin May 7, 2020, 6:43 PM

#

yeah i tried redeploying and doing it again but still wasnt there. will try again later

strong pumice May 7, 2020, 6:49 PM

#

I had to restart the box a few times before it showed.and then it went away quickly but you can priv esc without it if it doesn’t show up

autumn wave May 7, 2020, 7:43 PM

#

So, not sure this is a bug, but is there maybe a Mod/Admin that I could throw this by before I blurt it out here? It does have to do with access to a machine.

rare swallow May 7, 2020, 7:47 PM

#

@spiral flame ^

spiral flame May 7, 2020, 7:48 PM

#

@autumn wave Sure

autumn wave May 7, 2020, 7:48 PM

#

Ok to DM?

#

Thanks @spiral flame

daring forge May 7, 2020, 8:06 PM

#

I am very curios

autumn wave May 7, 2020, 8:07 PM

#

I did some exceptionally tryharder stuff.

analog garnet May 7, 2020, 8:59 PM

#

Avengers blog
@spiral flame I can verify the SQL Injection is broken. I tried every combination. I think the guys who completed the room, have the answers from the video.

spiral flame May 7, 2020, 8:59 PM

#

Nah you can get it working

orchid remnant May 7, 2020, 8:59 PM

#

Uh...

#

Yeah, promise you that works...

spiral flame May 7, 2020, 9:00 PM

#

It's not actually broken, it just won't work for valid users @analog garnet

orchid remnant May 7, 2020, 9:00 PM

#

Granted it's a complete and utter accident that it does work

#

But it works

analog garnet May 7, 2020, 9:00 PM

#

@spiral flame ah so i have to try with a random user?

spiral flame May 7, 2020, 9:00 PM

#

No

#

You have to try harder

#

this isn't #room-help

orchid remnant May 7, 2020, 9:01 PM

#

Uh...

spiral flame May 7, 2020, 9:01 PM

#

It's guided

#

Follow the guide

analog garnet May 7, 2020, 9:01 PM

#

ok. thanks 🙂

foggy radish May 8, 2020, 12:07 AM

#

Hi, I've a question about Buffer Overflow Room Task 8, it's broken?
I've tried everything and can't get the shell...

ornate moss May 8, 2020, 1:56 AM

#

What happened to monthly updates?

📎 unknown.png

open bridge May 8, 2020, 6:03 AM

#

hey!

#

i'm new here

#

and i need help

round cave May 8, 2020, 7:20 AM

#

Simple CTF seems really unstable, anyone else had this issue? Once a port scan is finished, the host stops responding and you have to redeploy.

pearl fable May 8, 2020, 7:23 AM

#

i did it a few days ago and it was really good

#

i mean, it wasnt unstable

round cave May 8, 2020, 7:23 AM

#

Hmm

pearl fable May 8, 2020, 7:24 AM

#

and i need help
@open bridge this is the room for bugs! if you need help, you can ask for it in community-help or hints

#

why do you say is stop responding?

slender laurel May 8, 2020, 7:29 AM

#

I don't know if this is a bug, but i've found something similar in another room. The answer there should've been Apache.....

📎 unknown.png

median sapphire May 8, 2020, 8:35 AM

#

@slender laurel Side effect of using regular expressions to check the answer.

neat lintel May 8, 2020, 9:33 AM

#

Jigsaw2 flag2 does not work properly, i just can't submit my correct flag,can someone help me

#

📎 unknown.png

#

📎 unknown.png

slender laurel May 8, 2020, 10:09 AM

#

@neat lintel I think you need to copy the entire text ex: "flag2{.........}"

olive drum May 8, 2020, 10:10 AM

#

no, the flag format is pure symbols

topaz venture May 8, 2020, 11:57 AM

#

Wrong username in https://tryhackme.com/room/networkservices T9: Instructed to login with "anon" but in fact to login to FTP anonymously with this box you have to use "anonymous"

📎 unknown.png

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

📎 unknown.png

frosty cape May 8, 2020, 11:58 AM

#

What happened to monthly updates?
@ornate moss Let me update them

topaz venture May 8, 2020, 11:58 AM

#

yesssss ^^

ornate moss May 8, 2020, 12:01 PM

#

thx dad

#

sorry, uncle

#

dark is my dad

rare swallow May 8, 2020, 12:28 PM

#

Room RP:TMUX - Banner is pointing to HTTP:// rather than HTTPS:// making the browser show the page as not secured

📎 unknown.png

#

📎 unknown.png

sly raft May 8, 2020, 12:31 PM

#

just fixed it 🙂

rare swallow May 8, 2020, 12:37 PM

#

thank you

rare swallow May 8, 2020, 1:03 PM

#

Hey @frosty cape could you check if my upload is being processed or not? It was stuck for a few minutes on 0.00% so i decided to refresh. and it's giving me this

📎 unknown.png

frosty cape May 8, 2020, 1:03 PM

#

It wont be, you'll have to log out and log back in.

#

I think @sly raft is working on that problem:)

rare swallow May 8, 2020, 1:17 PM

#

interesting even after relogging in it seems to not show any progress. still stuck on 0.00%

#

it's a smaller vm it's about 5gb

topaz venture May 8, 2020, 1:18 PM

#

I had the same issue @rare swallow logging out and going incognito seemed to fix it for me

rare swallow May 8, 2020, 1:19 PM

#

let me try that

#

browser @topaz venture ?

topaz venture May 8, 2020, 1:20 PM

#

Google chrome :^

rare swallow May 8, 2020, 1:20 PM

#

nah. still 0.00%

topaz venture May 8, 2020, 1:20 PM

#

idk if the issue is to do with sessions or something shrugs

#

mhhm that's odd

rare swallow May 8, 2020, 1:21 PM

#

📎 a22.png

topaz venture May 8, 2020, 1:21 PM

#

cooctus

rare swallow May 8, 2020, 1:23 PM

#

i'll leave it for a while

#

let's see if it updates itself or if it's borked

#

yeah, upload is not working i'll drop the vm on GDrive

olive drum May 8, 2020, 2:05 PM

#

No IP was given after deploying kali + no browser access

📎 unknown.png

#

re-deploying did help, but that ^ was super strange

modern vine May 8, 2020, 3:45 PM

#

Hi, icecast, fix the first answer of the "gain acess" part of the room.

#

You have to type "Execut" instead of "Exec"

spiral flame May 8, 2020, 3:46 PM

#

@modern vine refresh the page and you'll see what the actual answer was

frosty cape May 8, 2020, 4:50 PM

#

No IP was given after deploying kali + no browser access
@olive drum I will look into this, I think I know the issue

olive drum May 8, 2020, 4:55 PM

#

okay! thanks <3

worldly pagoda May 8, 2020, 5:03 PM

#

in Learning Path i'm done all Web Application Security , but its RED ?

olive drum May 8, 2020, 5:04 PM

#

@worldly pagoda check BurpSuite room

#

there's a question in connection task which is not green

worldly pagoda May 8, 2020, 5:05 PM

#

Oh yes , is it added after i completed task ?

olive drum May 8, 2020, 5:06 PM

#

mhm

#

had the same thing lately

autumn wave May 8, 2020, 6:04 PM

#

Network Service room, telnet exploitation task # 6 through 11. Task says to ping your local IP address, however it doesn't have the -c flag and runs infinitely. This prevents you from running the raw msfvenom shell command as the command is running on an infinite loop.

📎 unknown.png

spiral flame May 8, 2020, 6:06 PM

#

Oooh

#

@vernal dragon could you fix when you get a min?

olive drum May 8, 2020, 6:07 PM

#

Had to re-deploy the machine after having the same issue ^

autumn wave May 8, 2020, 6:10 PM

#

I redeployed, tried -c 5 with the ping and it worked fine.

#

Just needs an instruction change in the course I imagine. Thank you for looking into it!

vernal dragon May 8, 2020, 6:28 PM

#

@autumn wave Apologies for this, oversight on my part. It's now been fixed- thank you for the feedback!

autumn wave May 8, 2020, 6:28 PM

#

No worries. Was stumped while live streaming. Glad we got it sorted out. 🙂

vernal dragon May 8, 2020, 6:30 PM

#

Thank you @spiral flame for notifying me quickly, we've got a great Mod team. :)

spiral flame May 8, 2020, 6:31 PM

#

My reputation as a tester rides on that box

covert kernel May 8, 2020, 7:43 PM

#

vulnversity is bugged and is only awarding 8pts instead of 30pts for the task

spiral flame May 8, 2020, 7:44 PM

#

If the room type is a walkthrough room, you only get 25% of those points added to your account score.

#

📎 unknown.png

signal zenith May 8, 2020, 8:43 PM

#

I would like to report a bug with room Common Linux Privesc by Polominst.
Task 6, #4 accepts a wrong answer.

spiral flame May 8, 2020, 8:43 PM

#

Answer tolerance is unavoidable

#

You're allowed a small percentage of wrong characters

signal zenith May 8, 2020, 8:44 PM

#

Expected entry: username:passwordhash:0:0:root:/root:/bin/bash
What I entered new:hash :0:root:/root:/bin/bash

#

You're allowed a small percentage of wrong characters
@spiral flame ahh okej.

spiral flame May 8, 2020, 8:44 PM

#

But it looks like yours was correct?

#

Oh

#

You missed a :0

signal zenith May 8, 2020, 8:44 PM

#

jepp

spiral flame May 8, 2020, 8:44 PM

#

🇸🇪 ?

signal zenith May 8, 2020, 8:45 PM

#

so I get a message that the user is missing a password.
Jepp swed

spiral flame May 8, 2020, 8:45 PM

#

That's all the swedish I know

signal zenith May 8, 2020, 8:45 PM

#

Haha XD I didn't realise I wrote the wrong okey 😛

#

I have a recurring problem that I lose connection to an VM when there is about 13-14 minutes left on it.
Extending it before the 14 min mark seems to keep it active.

spiral flame May 8, 2020, 8:57 PM

#

@frosty cape Termination bug again

signal zenith May 8, 2020, 8:58 PM

#

Doesn't matter which room. If that helps.

frosty cape May 8, 2020, 9:01 PM

#

Hm, does this always happen? @signal zenith

signal zenith May 8, 2020, 9:03 PM

#

@frosty cape whenever I have an VM active in a room and I only have about 13-14 minutes left on it I lose connection to it. Pressing "Add 1 hour" only gives an error message that something went wrong.
I always have to then Temrinate the VM and restart it.

#

Happend to me about 10 minutes ago in Common Linux Privesc

frosty cape May 8, 2020, 9:08 PM

#

DMing you to fix this:)

signal zenith May 8, 2020, 10:30 PM

#

@frosty cape now it droped out

#

10 min left on the clock

#

Error message: Uh-oh! A problem occured. Please try again later.

#

After I press "Add 1 hour"

#

Lost connection via ssh and no respons on ping.

frosty cape May 8, 2020, 10:35 PM

#

hi

#

DM me:_

ornate moss May 9, 2020, 12:03 AM

#

Changing the Order By tag before the Hacktivities page has loaded cause it to not change when selecting a new option

#

📎 unknown.png

spiral flame May 9, 2020, 12:04 AM

#

@frosty cape You didn't fix all of them, this is the same thing that I reported a while back

ornate moss May 9, 2020, 12:04 AM

#

It also breaks the search

spiral flame May 9, 2020, 12:04 AM

#

Ye

#

It should disable them until the page loads

ornate moss May 9, 2020, 12:05 AM

#

This page seems to be the one that always has a bug haha

cinder crow May 9, 2020, 1:56 AM

#

The find command task 3 octal format permission link no longer works

sullen vessel May 9, 2020, 9:20 AM

#

on some profiles like https://tryhackme.com/p/Tqup3, the Rooms in count is wrong (Rooms in < Rooms completed)

median sapphire May 9, 2020, 9:22 AM

#

You can leave rooms after you completed them.

rare swallow May 9, 2020, 11:34 AM

#

@frosty cape bug or feature?(borderlands)

📎 unknown.png

worthy stag May 9, 2020, 11:36 AM

#

@rare swallow I'll sort this now

rare swallow May 9, 2020, 11:37 AM

#

cheerio

worthy stag May 9, 2020, 11:37 AM

#

Fixed

rare swallow May 9, 2020, 11:37 AM

#

^^

#

welcome back

worthy stag May 9, 2020, 11:38 AM

#

o/

#

Low profile since being back

rare swallow May 9, 2020, 11:38 AM

#

understood

turbid osprey May 9, 2020, 2:39 PM

#

Is ironcorp bugged? I can get a stable shell, but a meterpreter shell seems to be blocked and dies, even after I deactivated the firewall. Already talked with someone who rooted it and he can't get a meterpreter shell either

spiral flame May 9, 2020, 2:40 PM

#

Doesn't sound like a bug

#

Sounds intended

round cave May 9, 2020, 3:12 PM

#

@turbid osprey I just got root over a meterpreter shell

turbid osprey May 9, 2020, 3:17 PM

#

@round cave may I Pm you and ask a question regarding it?

sullen vessel May 9, 2020, 3:29 PM

#

i got issues with the web delivery module but a netcat did the job

round cave May 9, 2020, 3:46 PM

#

Yeah sure @turbid osprey

cinder crow May 9, 2020, 11:23 PM

#

thats a new one got this during mal:malware introductory I was just able to click through and access the machine however

📎 bug.png

spiral flame May 9, 2020, 11:24 PM

#

@frosty cape Did aws licensing break?

topaz venture May 9, 2020, 11:25 PM

#

O.o

spiral flame May 9, 2020, 11:26 PM

#

The boxes are uploaded without a license because AWS should sort that

frosty cape May 9, 2020, 11:33 PM

#

@frosty cape Did aws licensing break?
@spiral flame Ah hm, yeah we've configured it to handle this.

#

Maybe there is a bug

#

Looking into that now

topaz venture May 9, 2020, 11:49 PM

#

Lemme know if there's an issue with anything that I need to look at :^

#

it's aws but yaknow

frosty cape May 10, 2020, 12:08 AM

#

Yeah, I need my main pc to fix this, will be done Monday

#

I know the issue tho

spiral flame May 10, 2020, 12:08 AM

#

RIP

autumn wave May 10, 2020, 1:29 AM

#

@frosty cape I've been talking with Dark some about this. I've found it on a bunch of machines.

#

Sorry for the ping.

worldly pagoda May 10, 2020, 5:50 AM

#

i have a speed issue when connect ovpn where can i ask ?

frosty cape May 10, 2020, 10:45 AM

#

@frosty cape I've been talking with Dark some about this. I've found it on a bunch of machines.
@autumn wave I know what the issue is, just need to apply it to the boxes.

summer tree May 10, 2020, 11:01 AM

#

it's happening quite often on windows machines that the "Add 1 hour" does not work.
it did not work at all on HackPark for at least 3 times with me

#

the machine is reachable for about 5 minutes past the first 1h, then they're not available anymore. even if the time is showing 54 minutes+

frosty cape May 10, 2020, 11:23 AM

#

If you try to extend if after the expire time, it wont be possible.

#

@summer tree Are you ensuring you're extending before it expires (> 1m expire time)?

spiral flame May 10, 2020, 11:24 AM

#

People have reported it for hackpark before

#

It seems to die even if you extend it

frosty cape May 10, 2020, 11:25 AM

#

It shouldn't be machine specific as its just a timestamp on an object in the dB

#

Hm, when I am home I will test it myself just incase

sly raft May 10, 2020, 11:48 AM

#

@summer tree do you mean the box is unreachable or does the whole IP/deploy section just disappear?

spiral flame May 10, 2020, 11:53 AM

#

Hackpark pretends it's still up and dies

summer tree May 10, 2020, 11:55 AM

#

I mean that the box is unreachable. The ip/deploy section is still visible and shows the timer counting down.

spiral flame May 10, 2020, 11:56 AM

#

I'm gonna give it a go because you're not the first to report it

summer tree May 10, 2020, 11:56 AM

#

People have reported it for hackpark before
@spiral flame i guess I am having the same outcome.

sly raft May 10, 2020, 11:56 AM

#

hmm HackPark is known to be an unstable box - we're looking at getting this box replaced but it may take a while 🙂

autumn wave May 10, 2020, 11:56 AM

#

I can confirm it happens on Hackpark. I can extend, but literally it seems when it gets to 58 minutes left after an extension the machine falls out.

summer tree May 10, 2020, 11:56 AM

#

I had a similar problem with another box, was windows, on the same Path. I can check later which one was it

autumn wave May 10, 2020, 11:57 AM

#

This has happened every time I do it.

spiral flame May 10, 2020, 11:58 AM

#

I think skidy investigated

#

It gets the signal to extend and just doesn't

#

remind me in an hour

summer tree May 10, 2020, 12:04 PM

#

Hahah you just deployed it to test it out?

spiral flame May 10, 2020, 12:04 PM

#

It's got 2 hours on it

#

So it shouldn't die.

summer tree May 10, 2020, 12:10 PM

#

Ok

spiral flame May 10, 2020, 12:43 PM

#

15mins

summer tree May 10, 2020, 12:48 PM

#

After it hits the 1h mark, try letting it run for another 10 minutes. In my experience it did not stop working straight away, but like after 3-5 minutes

spiral flame May 10, 2020, 12:48 PM

#

📎 unknown.png

frosty cape May 10, 2020, 12:49 PM

#

Yes James:)

spiral flame May 10, 2020, 12:50 PM

#

I have an idea

#

Could there be a task scheduling a shutdown?

worldly pagoda May 10, 2020, 12:51 PM

#

can someone check speed test over ovpn ?for me ?

spiral flame May 10, 2020, 12:51 PM

#

Huh?

#

Oh

#

The VPN uses split tunnelling so you can't use any of the speedtest sites for it

worldly pagoda May 10, 2020, 12:52 PM

#

i put file on my Kali THM , when i download it inside Tunnel its so slow

#

but when i download it over internet speed is good

spiral flame May 10, 2020, 12:52 PM

#

VPN has overhead

worldly pagoda May 10, 2020, 12:53 PM

#

but different is so much over vpn imy download speed is about 100kb

frosty cape May 10, 2020, 12:53 PM

#

i put file on my Kali THM , when i download it inside Tunnel its so slow
@worldly pagoda If you use the Kali inbrowser machine on THM, you dont need the VPN

spiral flame May 10, 2020, 12:53 PM

#

Mine's faster than that.

worldly pagoda May 10, 2020, 12:53 PM

#

i know , but its normal ? i have low speed on vpn ?

#

can you test it ?

#

or can i change ovpn protol to tcp ?

spiral flame May 10, 2020, 12:55 PM

#

That would make the speeds worse

#

And the server isn't set up for TCP

summer tree May 10, 2020, 1:09 PM

#

How’s with HackPark? Still up?

spiral flame May 10, 2020, 1:09 PM

#

Just checking

#

Should port 80 be open?

summer tree May 10, 2020, 1:18 PM

#

Yes

spiral flame May 10, 2020, 1:19 PM

#

Then it died

#

I'm guessing scheduled task or something that shuts down

sullen vessel May 10, 2020, 1:21 PM

#

when deploying a machine, there is a single space on the left of the IP and it's annoying to remove it manually when ssh'ing into it :o)

📎 Capture_decran_2020-05-10_a_15.20.05.png

round cave May 10, 2020, 1:43 PM

#

On “Ha Joker”, flag 18, you’re asked to list the LXD images, however there isn’t any. Is that intended?

sullen vessel May 10, 2020, 1:46 PM

#

@round cave: https://discordapp.com/channels/521382216299839518/559443389058252800/708025926230736947

round cave May 10, 2020, 1:48 PM

#

👍

spiral flame May 10, 2020, 1:53 PM

#

@round cave Sometimes it'll show it without the name

signal zenith May 10, 2020, 4:06 PM

#

i know , but its normal ? i have low speed on vpn ?
@worldly pagoda It can be computer specific, network card specifik, network equipment specific, ISP specific. There are a lot of different factors that can affect your VPN speed.

spiral flame May 10, 2020, 4:25 PM

#

You can't remove an upvote, only change to a downvote

signal zenith May 10, 2020, 4:42 PM

#

Anyone I can ask some questions about the room Common Linux Privesc Task 9 #4?
I've read the hint and tried a bunch of things but can't seem to get the command syntaxt correct.

cinder crow May 10, 2020, 4:42 PM

#

#room-help or #room-hints

signal zenith May 10, 2020, 4:42 PM

#

ofc. I thought I was in the coorrect room 🙂

#

sorry

autumn wave May 10, 2020, 7:29 PM

#

ASCService.exe is modifiable in Steel Mountain, making the exploit not actually an unquoted service path when you can simply replace the executable with one named the same.

spiral flame May 10, 2020, 7:31 PM

#

@autumn wave Plus, I've never got the correct exploit working

#

AKA exe called "Advanced.exe"

autumn wave May 10, 2020, 7:31 PM

#

It works fine for me.

spiral flame May 10, 2020, 7:32 PM

#

Weird

#

I've only used the replace method

#

And the walkthrough for it isn't very clear since it uses the word replace

autumn wave May 10, 2020, 7:34 PM

#

Just tested.

📎 SPOILER_unknown.png

spiral flame May 10, 2020, 7:35 PM

#

💢

#

You sure it's not running the ASC exe?

autumn wave May 10, 2020, 7:37 PM

#

📎 unknown.png

#

My other payload isn't there.

spiral flame May 10, 2020, 7:37 PM

#

Ok

autumn wave May 10, 2020, 7:38 PM

#

📎 unknown.png

#

Hell, I just deleted it to make sure

spiral flame May 10, 2020, 7:39 PM

#

Just me then

#

I've tried it a few times

autumn wave May 10, 2020, 7:40 PM

#

Anyways, unquoted service path is pretty pointless if you can hijack the executable.

worthy stag May 10, 2020, 7:52 PM

#

annual reminder that dogcat is showing the wrong first blood on /releases. He was second to root, but has more points due to blooding more of the questions

short jackal May 10, 2020, 7:53 PM

#

Kappa

spiral flame May 10, 2020, 7:53 PM

#

@worthy stag Raised with skidy, broken down and possibly diagnosed

#

I think it's blood on all questions

worthy stag May 10, 2020, 7:53 PM

#

meh that's a poor way of doing it

#

full salt intended

spiral flame May 10, 2020, 7:55 PM

#

@worthy stag What's your preferred system? root blood only? User blood only? What about challenges that aren't user/root?

#

Asking because it makes it easier to fix

worthy stag May 10, 2020, 7:56 PM

#

for user/root bloods have it seperate, so there will be a user blood but that's not worth as much as a root blood

#

so if you get root you'll still be higher in points but only marginally

#

multiple rooms are the main thing but then again bloods shouldn't really have a place in rooms that have multiple flag submissions other than user/root

spiral flame May 10, 2020, 7:57 PM

#

Adding it for you to #544951750801752079

#

Will talk to skidy again about it too

trail stirrup May 10, 2020, 8:23 PM

#

Hi. The room: tonythetiger - should have a service on 8080, tried a few deployments, still not getting anything on 8080. Just 22 and 80. Can anyone check?

topaz venture May 10, 2020, 8:24 PM

#

Did you allow a good 5 minutes for that room? The service running on 8080 takes a lil' while to fully setup as it's a java application @trail stirrup

#

Most reliable way of exploiting that service is to wait until it loads in your browser before trying to exploit. Get's a bit iffy if you exploit it whilst it's setting up 🙂

trail stirrup May 10, 2020, 8:25 PM

#

Yep, it's like 10-11 mins now

topaz venture May 10, 2020, 8:25 PM

#

I'd suggest redeploying in which case

#

Just java apps being java apps with that box

trail stirrup May 10, 2020, 8:26 PM

#

:)). Ok will try again. Thanks

topaz venture May 10, 2020, 8:26 PM

#

gl hf! Lemme know how you get on

frosty cape May 10, 2020, 11:09 PM

#

Hi, I think Ifound an issue in the following room:
https://tryhackme.com/room/rppsempire
Task3, #7, the expected answer doesn't exist anymore

TryHackMe

TryHackMe | RP: PS Empire

Part of the Red Primer series, learn how to use this powerful post-exploitation framework.

cinder crow May 11, 2020, 12:29 AM

#

read the hint @frosty cape

📎 hint.png

shrewd marsh May 11, 2020, 12:29 AM

#

Hi! I was trying to upload a writeup and copied one of my writeup from medium:

#

https://tryhackme.com/thread/5eb89975f6b800761638fe72

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

orchid remnant May 11, 2020, 12:29 AM

#

URL encode the @ symbol

shrewd marsh May 11, 2020, 12:30 AM

#

But I think there is some problem in it.

orchid remnant May 11, 2020, 12:30 AM

#

Is the problem that the site won't accept it?

#

"Invalid URL" or something?

shrewd marsh May 11, 2020, 12:31 AM

#

I uploaded my write on the forum by creating the post.

orchid remnant May 11, 2020, 12:31 AM

#

That?

#

📎 unknown.png

shrewd marsh May 11, 2020, 12:31 AM

#

Yup but no content ...

orchid remnant May 11, 2020, 12:31 AM

#

@frosty cape -- bright ideas?

#

Why not submit it as a writeup on the room @shrewd marsh?

shrewd marsh May 11, 2020, 12:33 AM

#

It won't accept the link for medium. So I saw the option to make Writeups on Forum and thats why I uploaded it.

#

But it seems I broke someting lol

orchid remnant May 11, 2020, 12:33 AM

#

Try adding it to the room, but URL encode the @

shrewd marsh May 11, 2020, 12:34 AM

#

Ok, but what's the issue on forum ?

orchid remnant May 11, 2020, 12:34 AM

#

That, is a very good question

shrewd marsh May 11, 2020, 12:34 AM

#

I can't even reply to the post or flag it ..

#

lol this can be used as shit posting on forum...

orchid remnant May 11, 2020, 12:35 AM

#

My guess is that the site borked at the fact you seem to have copy and pasted it from medium

shrewd marsh May 11, 2020, 12:35 AM

#

I edited it after copy/paste

#

Are there any admins who can look into it whats going on ?

orchid remnant May 11, 2020, 12:36 AM

#

The length may also potentially have been a problem