room-ideas

[coral obsidian]

I had never seen something like that, do you have an example?

[karmic shore]

The MSDN issue came up in the windows event logs room on Task 4, the other 2 I came across just now on pyramidofpain (didn't realize it was a beginner room when I started). https://imgur.com/a/T8JFhxG
There have been other weird question wording issues I noticed but can't recall.

[coral obsidian]

true, but for the url thing, my method is looking at the answer format that just gives it to you, the wording is a bit off but I don't think it should be a big challenge to get past it.

[karmic shore]

I spent 15 minutes on that one going "WTF" thinking the task was linking me to the wrong report, trying to find URLs in the HTTP Requests tab with zero records

[hoary nimbus]

Hello, i dont know if it's related to here, but can the room "OWASP TOP 10" be updated to the recent update of OWASP? (2021), things have changed....

[somber crow]

It was for an event, and much of the top 10 is the same

[tacit anvil]

I would like to see more red teaming with corporate environment like AD and Cloud technologies, thank you

[sleek elbow]

definitely wip

[rapid kelp]

Who could I talk to about creating a room? I'd like to ask some things about the process

[native raptor]

-arole @rapid kelp Creators-Lounge

[marble current]

➕ Gave the role Creators-Lounge to Razvi#1603

[native raptor]

Enjoy 🙂

[rapid kelp]

Thank you 🙂

[twilit sable]

Hi great people, I think it would be great to see a room called Year of the Tiger as this year is the year of the tiger and adding it to New Year series.

[native raptor]

The one I have in development is a bird
But yes, I think a tiger has got to come next

[pearl silo]

is this the same one from two months ago 👀
#room-ideas message

[native raptor]

Yes -- I have zero time right now

[tacit anvil]

Uni work /Securi-tay stuff piling?

[native raptor]

That and another tonne 😆
Fortunately I enjoy being busy

[idle depot]

Not really an idea but I really like the AD rooms a lot

I'd love even more rooms covering it in detail (and explaining the theory rather)

I haven't been able to find the right resources to learn more about AD so 🤷

[cunning thunder]

Quite a few planned for 2022.

[trail willow]

you can download win server eval license 180 days and set up your own domain controller, it's pretty useful to learn more if you are intresnted

[candid anchor]

how about a room for training around https://frida.re ? I'm watching a webinar on friTap (https://github.com/fkie-cad/friTap) specifically and it sounds pretty interesting...

[junior dune]

I propose a Learning Path about Reverse with some android/ios and with malware and some differents arch
I would love do this one

[brave aspen]

beef-xss tutorial room?

[native raptor]

Beef isn't really used anymore 🙂

[tacit anvil]

The joys of NC doing a video.

[coral obsidian]

I agree!

[pearl silo]

boo!, windows rooms bad, linux good

[tacit anvil]

It's a very good idea. And also i think those rooms, could get better with some videos

[warm osprey]

room idea: Introduction to Log Parser, if it's still a good tool

[lethal heron]

Room Idea : MITM attack towards telnet xP

[tacit anvil]

A room based around malware development

[icy trellis]

What's your goal/ purpose for this room?

[tacit anvil]

Practice for those who want to become red team operators or maybe those who want to have a deeper understanding of how malware works and see how it is created. I am not asking for the room to show you how to create ransomware or trojans just going over the fundamentals of malware development.

[icy trellis]

Ethicalities come into play when a website offers grey area topics, hence why I asked.

[tacit anvil]

Yes I understand 😄

It is good in my opinion to have a understanding of malware and how it works so you are not completely clueless and blindsided if a attack happens to you or your business.

[icy trellis]

Henceforth why we offer the Defense Path and malware analysis rooms 😉

[tacit anvil]

haha that is right I did not think about that for some reason

sorry

[grand nymph]

Room Idea: Cyber Threat Intelligence (beginner and advanced)

Room Idea: Cyber Threat Hunting

[karmic raven]

@grand nymph What more do you want? We already have multiple rooms spanning both of those topics

[grand nymph]

A bit more of Structured Analysis techniques and report writing.
Maybe attribution of threat actors
And all in all a little deeper into the topic

[karmic shore]

A room explaining different types of AD trust relationships would be interesting. It's apparently a part of the SSCP material

also not as interesting for me but perhaps a blockchain/crypto 101 room as it relates to cyber threats

[native raptor]

Do we care if the crypto gets hacked..?

[karmic shore]

haha nah. more like what is a bitcoin address, privkey/pubkey stuff, how could you follow some coins on the blockchain, what is a mixer, different types of cryptos like eth or privacy coins, etc. I'm working on trying to throw something together actually I think its a neat idea and there is nothing about it rn

smart contract hacking would be an epic room but way over my head

looking at it from a blue team/forensics/investigation angle

[pearl silo]

a room about cobalt strike(c2)..., not sure if that's taboo here but would be a cool room!

[native raptor]

It would be a very cool room, and it's something that would be great, but Cobalt Strike costs a lot

[pearl silo]

yes, out of all the popular c2s like powershell and metasploit, it's the only commercial one :/

[native raptor]

Nah, there are a bunch of really good commercial ones

Cobalt Strike is just the most famous

Also remember that Metasploit has a professional version too

[sudden garnet]

maybe a room on cs just as a reference guide for when people have access to it at work?

[candid crow]

This isn’t room related, but would be super helpful. A “wish list” would be a nice feature. I keep seeing all of these new rooms that I want to do, but once it comes time to do them I can’t remember the name and end up searching and picking something interesting. I can use browser favorites but that’s kind of a pain.

[somber crow]

My Rooms keeps track of rooms that you've joined

They just broke the site and it sorts backwards now.

[candid crow]

Ah okay. I guess that’s close enough. I didn’t think of that. I assumed maybe you’d get kicked or something if you joined a different one. I’ll just start joining all of the interesting ones.

[tacit anvil]

An alternative is creating a THM bookmark folder and bookmark all the room URL's you want to look at later.

[tired fjord]

how can i upload a banner for the room?

it wants a link

[pearl silo]

imgur?

[tired fjord]

okay thanks

+rep @pearl silo

[marble current]

Gave +1 Rep to @pearl silo

[ivory panther]

is there a room that teaches about docker on thm??

i was searching for a room that would be like introduction to docker and how to use it but i didnt find

i wonder if there will be a room about it soon

[pearl silo]

https://tryhackme.com/room/dockerrodeo :)

[ivory panther]

Thanks i thought its a challenge to solve

[marble current]

Gave +1 Rep to @pearl silo

[narrow abyss]

I have an idea, but I do not know the idea.

[hard yew]

More rooms on Post-exploitation!

[hard yew]

The ones we do have focus more on windows

[runic dagger]

I suggest adding a task in the Overpass 2 room to "undeface" the website and return it back to normal once you have access to root @somber crow

[icy trellis]

I feel like it’s a little out of scope for the room, no?

[safe fiber]

A room for the recently updated OWASP 🐝 top 10 would be fantastic💡

[somber crow]

Not much has changed, the original owasp top 10 was for an event. I did raise it with Skidy a while back, but it didn't seem likely.
It would be pretty cool though.

[junior dune]

A learning path about reverse 😉

[somber crow]

That'd be very difficult to test, short of a service running as root or a rootkit.
I don't see much value added to the room, especially when you consider everyone would need to go back and complete the new task.

[somber crow]

Like the active directory basics room?

[somber crow]

I'm pointing out that it exists.

[opaque willow]

Is there any room about simple router hacking? If not then i would like to make a room on this topic.

[coral obsidian]

There isn’t! The closest I can think of is printer hacking and router firmware analysis, just make sure your room is ethical and isn’t much of a gateway to malicious usage of the provided tools!

[stoic wren]

Any Room on recon methodology

[opaque willow]

Nah i was just thinking to make one to spread awareness about how to secure up the routers and etc . Not much tho

So can anybody help me out to create coz this will be my first time creating a room

[coral obsidian]

It is pretty much making the documentation more friendly, making some questions and if you’re up for the challenge creating a VM with the routers firmware.

[opaque willow]

Ah i would go with the vm thing on later rooms coz i dont know about making one so just starting out with simple things

[opaque willow]

if any mod/staff is seeing my msg then its a request to provide me the creators tag to get some help from the more experienced content creators.

[somber crow]

The creators lounge is not overly for help.
Room creation is something you should do once you have a good understanding of the topic, a good understanding of securing systems, and a good understanding of sysadmin.
You can, and you might get, help with the tryhackme side of it, but it relies on independent research and troubleshooting a lot more than typical hacking does

You've been added to the lounge though.

[opaque willow]

oh thanks

[ashen osprey]

I'd like a room on being stealthy & covert, with things like AV evasion, not triggering IDPS/SIEM/IOC scanners

[pearl silo]

Any rooms/ctfs on bluetooth would be nice, kinda suprised there's nothing on thm already :/

[lunar plank]

For it to be anything interactive and not just pure text based this would require simulating/replicating bluetooth in the cloud

[pearl silo]

Yeh, I realise it can't be setup with a conventional vm but it's still a major part of tech

[tacit anvil]

Make one!

Zeesh.

[pearl silo]

Read Ben's Post ^

I don't have the resources or the knowledge really

[plush light]

a room about how to type 'kill' commands faster than the sysadmin battling you in real time for control of the box just like in kevin mitnick or something

[ashen osprey]

As a privesc, have sudoedit runnable without a password while $EDITOR isn't set by default. The user has to export EDITOR=vim. Now many people know about sudoedit I think.

[delicate basalt]

this one is good

[inland osprey]

Might already be a room, I'm sure this might of been brought up because ideas are cheap and I'm not that smart.
Simply, a room that teachers people how to prevent getting hacked by showing how some professional harden Linux or Windows PC's. Maybe have different degree's of security throughout the room to explain the person doing how to prevent different threats and costs of say using different tools on convenience.
Maybe take it a step further and talk about general OPSEC ideas.
Might be a bit different to a traditional CTF box but I have seen some of these type of rooms education rooms on THM, so I think a defensive prevention room might be a cool concept.

[forest summit]

a room on the new kernel exploit (dirtypipe) would be amazing..... if there is not one already in the works

[native raptor]

There may or may not be one already in the works, but it's not my focus until Sunday

[forest summit]

looking forward to see it if there is one in the works..... otherwise it is just wait until shadow understand this good enough in 5 years to make a room themselves for it

[native raptor]

That was code for "there is one in the works"

[somber crow]

Muir I think you misread that, they're looking forward to seeing the product if it's in the works

[native raptor]

I know -- I was commenting on the uncertainty of "if"

[soft glen]

How about a defense room using Security Onion 2, winlogbeats, sysmon, and some injects? Perhaps logging mechanism could be placed on windows hosts through out the TryHackMe environment which forward all host logs to a central Security Onion 2 SIEM which defense analysts could analyze to craft custom queries?

[soft glen]

I could totally set that up

[runic dagger]

is there a room that's about patching misconfigured services? if not, I think that'd be very cool and useful

[fierce gulch]

💡 A Riddler themed box would be awesome, based around The Batman (2022) villain.

[pearl silo]

copyright is a big issue for the people who make rooms, tho :/

[fierce gulch]

Makes sense, I thought since there's Mr Robot rooms and Rick and Morty rooms there was some loophole or something

[merry pine]

A room introducing the basics on eBPF?

[short lagoon]

What ever happened to the Atomic Red Team room? Can i propose that as a new idea

[tacit anvil]

There is an atomic red team room, which is in development?

[cunning thunder]

Great idea. It is planned. 😎

[short lagoon]

I know the frame exists for the room so I figured something was happening but it said coming soon for so long thought I would give the tree a little shake as a status check🤙

[somber yacht]

So I plan on making a room, do I just export my virtualbox vm then upload?

or does anyone have a way they typically take their VM to save the state of it

[native raptor]

Yeah, just export as an OVA then upload 🙂

[tacit anvil]

we really need a room about bettercap

[soft beacon]

can we get some cloud security rooms?

[viral mural]

Can we have a room related to GRC and Information Security Management?

[random flicker]

Agreed, this would be dope af

[tacit anvil]

grep room

[somber crow]

https://tryhackme.com/room/catregex

[tacit anvil]

https://tryhackme.com/room/nislinuxone this one too

[somber crow]

Ok, so the content exists... I know the content exists, this channel is for asking for new rooms/suggesting ideas for new rooms

[tacit anvil]

then ignore my suggestion....

[somber crow]

This channel is for suggesting new rooms on tryhackme, rather than new discord channels

[tacit anvil]

ups sorry

[vale canopy]

not a room idea, but you guys should add a learning path with only free rooms

so new people can go through that path, then maybe subscribe

[pearl silo]

!docs free-path

[soft hamlet]

TryHackMe

What rooms should you do? A free guide for beginners

https://blog.tryhackme.com/free_path

From TryHackMe with ❤!

[vale canopy]

yeah just make that into a learning path on the site

cuz it took me a long time to find that blog page

[pearl silo]

¯_(ツ)_/¯

[sudden glade]

there should be more wifi hacking rooms and python hacking rooms

etc

I think

is that ok?

[somber crow]

Incredibly difficult to make interactive WiFi hacking rooms on THM though.

[lament star]

@golden mountain

[golden mountain]

Ezpz

[native raptor]

Remind me to talk to you about that at some point. I have some nasty little ideas...

[golden mountain]

Nah go away. I'm not letting you use it for your cursed boxes

[native raptor]

Szy / Muir collab?

[golden mountain]

Reeeeee just said no

[timber magnet]

Like simulated WiFi?
https://wireless.wiki.kernel.org/en/users/drivers/mac80211_hwsim

[native raptor]

💔

[somber crow]

Yeah, it works

[timber magnet]

I couldn't react to your posts😅
Thank you anyway 🙂

[marble current]

Gave +1 Rep to @somber crow

[jagged gust]

Good-looking skin before the same interesting soul one in a million

[native raptor]

Quick question: What the heck?

[jagged gust]

I don't understand what you are talking about

[native raptor]

Same 😆
Dare I ask why you're wandering around the bugs channels asking for personal information?

[brave aspen]

yaml deserialization

[restive finch]

Have fun completing the challenges of wargames!
https://youtu.be/-qICcu7voLE

[outer current]

They made a great room for Log4j, maybe if this get confirmed - https://github.com/BobTheShoplifter/Spring4Shell-POC it would be a nice room?

[native raptor]

Aside from the lack of PoC or confirmation 😆

When those are out then yeah

[lament star]

There is a poc out there just as an fyi

It's by a chinese security researcher

but a little too early for a room on this ngl

[keen vessel]

advanced threat hunting in windows defender atp

[glass sentinel]

The CVE was posted for the above CVE-2022-22965 which is Spring4Shell, different from another RCE on SpringCloud CVE-2022-22963

To be honest it would be great to do have TryHackMe touch on both.

[glass sentinel]

Maybe a module on Kusto Query Languages

[lunar plank]

Yeah we've talked about it internally, but I think we're kinda waiting to see impact or a bit more concrete stuff. I think there was a bit of arugment on who found it and what it exactly applies to when we looked

Plus we're all tied up in other things atm, but it'd be cool to see a community room on it. I don't think it's exactly "reserved" internally atm

last that I know of atleast

@glass sentinel

[glass sentinel]

Yeah I agree a lot was convoluted initially, also the complexity of exploitation is way different than Log4j which needs to be considered in its severity, it’s definitely bad but not log4j bad from what I’ve seen out there.

[keen vessel]

That would be dope, securityweekly had a webinar on it a couple weeks ago. It was amazing but i want more. :)

[spark adder]

hello

i am new here

[loud hornet]

Hi new here.

[light saddle]

IM DAD.

[astral oriole]

anyone seriously interested in testing my upcoming Layer 2 room with **MAC Flooding **and ARP Poisoning (MITM) (walkthrough themed)? It has 2 boxes and takes at least 1 hour if you play around and do stuff yourself instead just copy pasting. Would really appreciate your help! 🙂 (pls DM me)

[agile sonnet]

Heyo, THM should do a ranking system for the writeups

[somber crow]

This channel is aimed at ideas for new content, please submit this in the form linked in #feedback-and-ideas

[agile sonnet]

Sorry man

[eternal vortex]

can we get a room/lab to practice denial of service attacks?

[somber crow]

There are very very few ethical uses for those

[sand pike]

finished creating my first room! wanna come up with more ideas 😄
https://tryhackme.com/jr/b3dr0ck

[spark copper]

Nice room

[sand pike]

thanks! i'm working on polishing a bit more now

put it together really quick 😛

need to give some more context/hints early, and lock down a bit more to force the pathways

[spark copper]

I just have done the room

It was a good experience

Thanks!

[forest summit]

is there a room on photorec for foresnic recovery of files??? if not would anyone feel like making one???

if it is even doable

[spark copper]

There is overpass

[somber crow]

That doesn't have photorec in though?

[sand pike]

Just uploaded newest version, a little more helpful context/hints and locked down some easier access methods 😄

[forest summit]

shadow is also more looking for an informative room to learn how to use photorec

[real hamlet]

hey there! I've seen a few people mention that they would like to have a Security Onion (https://github.com/Security-Onion-Solutions/securityonion) room.

I would be happy to advise / help work on this if there is interest!

[sand pike]

https://giphy.com/gifs/mrw-training-bottles-d4zHnLjdy48Cc

[coral obsidian]

If you know the episode it makes it so much worse haha

[wet badger]

are there any rooms that replicate some of the infamous bug bounty finds?

[coral obsidian]

I think the closest is maybe Naham Store?

It doesn't replicate but it does have lots of Bug Bounty stuff

[wet badger]

Not seeing that room.

[pearl silo]

https://tryhackme.com/jr/nahamstore :)

remember this room is almost a full blown crash course in bug bounty so it'll take some time
almost 2 months in my case

[pseudo comet]

Is it possible to get a few room on Scada systems and/or satellite systems? I know theres already two room on scada but some more would be really cool.

[wind nymph]

would love to have another windows priv esc room 🙂

https://github.com/kagancapar/CVE-2022-29072

[lunar plank]

That looks rather fun

If there's a patch out for the vuln I'll happily make a room

research time @wind nymph 😎

there's a non-official fix but mhhm should wait a bit longer and see waht 7zip do really

[sand pike]

https://giphy.com/gifs/reactionseditor-interesting-hmm-3oKIPbNb1vWdftiVLq

[forest summit]

will wait for a fix to come but would definitely also like to see a room on that privilege escalation

[lunar plank]

CVE has changed to disputed https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29072

[forest summit]

oh that is an interesting development

[coral obsidian]

It seems like it could be done via a UAE bypass to me, Idk though

Ohhhh

I think from what I read, it could have been a fake report, done by changing the registery

[sand oxide]

i'd love a cobalt strike room

[native raptor]

You gonna pay for the license?

[loud hornet]

[low obsidian]

python any help

[tacit anvil]

Web cache poisoning

[true robin]

This could be an interesting room: https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/

[unreal hawk]

It would be nice to have a room on the new KrbRelay attack. Who has the time?

https://github.com/Dec0ne/KrbRelayUp

[lunar plank]

let me take a look into this (:

[lunar plank]

yeah seems cool but I don't have the time for it for another 2/3 weeks so if anyone wants to grab it maybe

[unreal hawk]

Maybe together? I like to learn to setup rooms.
Are there standard server / workstation images available? Some kind of library to use?

[forest summit]

!docs room-notes

[soft hamlet]

TryHackMe

Get started with making TryHackMe rooms!

https://help.tryhackme.com/room-creation

From TryHackMe with ❤!

[forest summit]

@unreal hawk ⬆️

[tender spindle]

@native raptor Hey i have a room/multiple room path idea. Ive been learning alot of aws recently for a job and I want to make a aws room/path which explains
how to make a aws account
create an ec2 instance
harden its security through aws tools firewalls and best practices
and demonstrate a handful of aws/cloud specific tools on the instance created .
We will not be able to turn it own virtual machine and will rely on the tryhackme user to make their own virtual machine through aws.
Can we tell users to purposely make their instances vulnerable for this exercise and then tell them explicitly to terminate it when they are done or should we tell them to just harden it the best way they can and test it?
Are there any legal issues or potential problem with this room as a concept ?
What needs to be done to make sure this gets approved as a public room ?

[native raptor]

Question for ya @cunning thunder

[karmic raven]

I would just wait and see what we have planned before attempting to do gymnastics to make a room work

[cunning thunder]

Hello, do you mean a room that requires to utilize AWS credentials? 🙂

[tender spindle]

@cunning thunderyes it would require aws credentials specficially the tryhackme users credentials. a user using this room would make their own account and instance labeled tryhackme or something similar to distinguish between a regular instance and other instances. we will also recommend to terminate the instance whenever they arent using it or are done with it

There will be no virtualc machine uploaded to tryhackme due to technical and legal issues. i dont believe aws will let us have a vm image of their amis and have all the gui setup and cli setup they have for their site and api they use to set up their vms so we will have to rely on what aws has for the virtualization

[meager mauve]

somebody should make a room on this browser extension

just because it has a lot of useful things in one spot

[karmic raven]

It’s just reiterating information that already is there. What would be the point? You’re just giving a GUI to something that is already covered in a room

[native raptor]

Lots of rooms

Also, it's a browser extension -- you don't get much more intuitive than that 😆

[meager mauve]

yeah youre right

[soft beacon]

CVE-2022-1388 room?

[somber crow]

You'd need an affected F5 appliance

[coral obsidian]

I think it could be pretty easily implemented (the vulnerability)

[karmic raven]

Trying to deploy vulnerable appliances on AWS is particularly annoying

[sudden garnet]

does it not cost a fuck ton tho

[cunning thunder]

Cheapest for F5 Big IP VE is about 8 dollars per 24 hours.

[native raptor]

So about 50c for a 2 hour deployment

[sudden garnet]

what do normal boxes cost?

[native raptor]

Unless it's like the Macs and restricts you to 24 hours minimum

[native raptor]

A... lot less than that

Would have to be sub only at the very least

And that's also the cheapest tier, which is rarely nice to use

[karmic raven]

We could do it but it wouldn’t be a normal thing. I.e. Throwback uses a pfsense deployment which is similar in price

[cunning thunder]

Oh the 8 dollars is just the F5 software license, add to that the EC2 cost of running the m4.large instance which is another 3 dollars a day. 😄

[sudden garnet]

holy guacamole

[meager mauve]

do you think the names of the machines shouldnt be provided in king of the hill?

that way everybody has a fair chance and its more realistic

[somber crow]

You will immediately find out what machine it is on even basic enumeration, it makes no difference

[meager mauve]

the people that played on the same machine multiple times have already enumerated before and they use the same information once they see the machine name

[somber crow]

Yes, but anyone who has played before will recognise the open ports etc within seconds.

It makes no practical difference

[meager mauve]

i think it would require to enumerate every game

[somber crow]

You can even just use the SSH fingerprints of each box to immediately identify which one

[meager mauve]

yeah youre right

but it makes it pretty easy for people knowing the machine name

[tacit anvil]

guys i have a found a bug inside a room

[somber crow]

It's exactly as easy as performing an nmap scan though.

[somber crow]

#room-bugs

[tacit anvil]

there's no answer

[somber crow]

Please post it in #room-bugs
It does not go in this channel.

[meager mauve]

atleast it gives everyone the opportunity to perform a nmap scan

some people dont need to do any of that more than 1 time

[somber crow]

What's the point in that?
You find out the information stupidly fast anyway, there's no reason not to provide it.

[meager mauve]

they already know everything just by the machine name

[tacit anvil]

Yes, I wrote there, and I did not receive a response, and I did not get my reward even on the site!!

[somber crow]

There's not enough KoTH boxes to make it matter. You'd need many times the amount.

[somber crow]

It doesn't go here. Use the correct channel please. It is very simple.

[meager mauve]

even if there was more koth boxes if they give the machine name then people who have already done enumeration are going to get an advantage right away

do you agree

[tacit anvil]

I know, but I'm writing here just to get help from you because you are a staff

[somber crow]

Anyone who has done the box before will be at the same advantage whether or not the VM name is shown.
They'll know immediately on literally any enumeration

[somber crow]

I am not staff. I am a discord moderator.
Please stop asking in this channel, you have been told many times.

[tacit anvil]

anyway I apologize for the disturbance

[meager mauve]

but the point is that they should have to enumerate everytime

[somber crow]

But they don't have to, because the machines do not change.

It is pointless to remove the name because people already know what each machine is like.

Showing the name offers no real advantage other than shaving off 10 seconds of nmapping.

[meager mauve]

if i already know the admin password

and username for a box

why would i do any enumeration

[somber crow]

Now that's a very different issue which has been countered for the Dynamic KoTH boxes.

But it does not relate to displaying the machine name.

It literally does not matter if the machine name is displayed or not

[meager mauve]

because they could go to the webpage or look at the ports and recognize it right away right

youre right

i just dont like it either way because it would seem more realistic to just be given the ip address

[somber crow]

If there were many many more boxes, it might make a difference.

[meager mauve]

yeah and make every machine dynamic

make a startup command or something that changes the password

to a random one

[somber crow]

Do you realise how much work and cost this involves?

[somber crow]

This is already in place on some machines, and isn't much of an obstacle

A KoTH machine is a decent amount of work to build, and as such costs. Making a lot of boxes costs a lot of money.

[meager mauve]

no i dont know but i want to make them at some point when i learn more

and i want to make rooms when i learn more

[tight sigil]

Besides "Bookstore" are there any rooms on learning API security/exploiting APIs? I tried searching around and think its a good topic.

[forest grail]

are there rooms on ARM exploitation or PowerPC? because I think that'd be a great room

[coarse oriole]

Are there any rooms on intercepting emails? I always read about how you are not supposed to send sensitive information via email, and I would like to know how attackers can read emails.

[somber crow]

Very difficult to implement on AWS without emulation, and nested virtualization which is sometimes required is extortionately expensive

[pulsar willow]

I was searching for a room for desync attack. I heard about the attack lately and want to explore it. So add it if possible.

[upbeat haven]

i'm not too sure which channel to ask this on, but what is the best way to make/export a linux machine while making a room, i used an ubuntu desktop in vbox and when i tested it on the room i am making it is very very slow

[somber crow]

Don't use Ubuntu Desktop, a GUI is resource intensive

[upbeat haven]

ubuntu server it is then

[somber crow]

For what it's worth, 22.04 is unlikely to convert

So I'd recommend 20.04 for now

[upbeat haven]

yeah i noticed that

even 20.04 did not convert so i had been using 18

[somber crow]

20.04 desktop wouldn't

[upbeat haven]

okay, thanks for the help

[soft glen]

Any thoughts on a room where we could use Velociraptor for DFIR on new exploits such as printnightmare, krbrelay, or some sort of windows compromise?

[meager mauve]

http://flaws.cloud/

http://flaws2.cloud/

can you make a path or room like this please? about cloud security and vulnerabilities

[cunning thunder]

Yes we can. 👍

[meager mauve]

thank you

[marble current]

Gave +1 Rep to @cunning thunder

[meager mauve]

can you make it where we get a little points towards our level if we win a koth game?

please

[somber crow]

That's been raised before and always denied because it's easily farmable

Dedicate the KoTH time to solving challenge rooms instead

[lethal rover]

hey guys i just created a room is it mandatory to add official write-up to make my room public?

[lunar plank]

If it is a challenge room, yes (:

you can use things like google drive to share the writeup with testers without making it publicly accessible and spoiling the challenge

[lethal rover]

if i provide video is it ok?

as write-up

[native raptor]

Ew, please don't

Technically, yes, but the testers will hate you for it

No one wants to watch a video when they need to quickly reference something. They aren't looking for a full how-to guide, they're looking for something they can use to quickly verify stuff

[lethal rover]

ok thanks guys

[lethal rover]

guys im just wanna ask show much time its take to make public my room yesterday i just submit offical write-up?

[distant seal]

there should be a room about ASM

that would be a great concept.

[somber crow]

Like intro to x86-64 ?

[lethal rover]

i can make it

[distant seal]

Yeah

[foggy galleon]

Module for learning Russian

You can usually pick up a language somewhat faster if you're learning it in the context of something you're already studying

Im not entirely serious about this as a room suggestion but I would probably go through it

[icy trellis]

Rooms usually are Cyber Security related, language learning is a little out of our scope 😅

[meager mauve]

Can someone make a room how to use beef framework

[loud hornet]

BeEF isn't used anymore.

[meager mauve]

what do you mean?

used by who?

[somber crow]

Most people.

[meager mauve]

i was just asking because i seen a video on udemy of someone getting a meterpreter shell on a windows 11 computer from using beef

[somber crow]

If you understand XSS, you will understand how that works.
More importantly, how that doesn't work.
Udemy is not a good source of information, the majority of the content on there is awful.

[low trail]

a ctf inspired by bad hollywood portrayals of hacking (ie not like mr robot)
could be an april fools module
so there could be directory names that are movie-like
and there could be a badge for completing this that is also a bogus hollywood hacking title like you see in the movies 😂

im not sure how cinematic you could make this using real tools maybe there could be a part like in the hydra lab where you can login to a localhost website that has a cinematic ui that gives hints (like you click a button that says "hacking time!" and it takes you to a page with a flag on it)(the server py file could have a themed name too)

of course the password should also be something like what you see in the movies (so it might not necessarily be one of hte ones in rockyou.txt ) and it could be stored in a wordlist with a name like "TOP SECRET.txt"

[tawdry yacht]

Are there any rooms which teach attacking cloud services? Such as S3 buckets / azure environments?

[cedar echo]

I think there was an example for Advent of Cyber 2021

[tawdry yacht]

do we have access to previous releases of AoC?

[cedar echo]

they should be open

[spiral lily]

is this really in the making?

[loud hornet]

Yes.

[spiral lily]

Awesome

[sharp lotus]

Hey I think a walkthrough type room covering LDAP and LDAP attacks would be great, been looking for some content around LDAP for awhile

[astral oriole]

I know somebody who hold an awesome talk about EDR tampering on a BSides conference and he would be willing to help build a room based on his research. On the con the slides were blurred due to legal (IP) concerns about the EDR vendor. Does THM offer any legal consulting regarding room content and intelectual property issues?

[somber crow]

Tendancy is to err on the side of caution

[lethal rover]

hello team i just submit a ctf for publishing now its under Evaluating but i want to change name of my ctf is it good idea or not ?

[zinc vigil]

How to connect to the machine in the hacking with powershell room?

[somber crow]

@zinc vigil #room-help please

[forest summit]

a room on: CVE-2022-30190 when it finally gets patched maybe???

might be hard as it uses microsoft office products to work

[sudden glade]

there should also be advanced learning paths

I think an advanced web hacking and bug bounty path would be perfect

like right now I feel like once I get through beginner and then intermediate pathways (hasn't happened yet) that I am gonna have to graduate to something harder

we have a lot of good beginner stuff

and intermediate

but I think that just having something more advanced would be helpful for people who are trying to become advanced

right now it feels like once I complete THM and PortSwigger than I'm gonna have to graduate to HTB and PentesterLab

so yeah

[lunar plank]

we're working on more advanced stuff @sudden glade (I cannot say way what -- but stay tuned) paths take a long time to develop and QA. But we hear y'all 💪

[sudden glade]

sweet

I think there should be a bug bounty room

[sudden garnet]

bug bounty is just web and there's a web pathway

[sudden glade]

sorry let me rephrase that

there should be an advanced web hacking pathway

that is beyond basic web skills

I think we should try to partner with Offensive Security and make an OSWA and OSWE learning path or with SANS and have learning paths that cover all of SANS web penetration testing training

[native raptor]

Very, very unlikely to happen given Offsec and SANS are both training providers. There is literally no logical reason for them to recommend someone else's product over their own.

Also, you know OSWE (if not OSWA as well, can't remember) is whitebox testing, right?
Much more likely to use that in a pentest or CVE-hunting than bug bounty

[random loom]

Hi, I'm developing a room. There's a WordPress site is running on my uploaded VM. But after starting the VM, cannot access to the website and it shows error message as "Error establishing a database connection"
Any suggestions to fix this error. Thanks

[somber crow]

SSH into your VM and troubleshoot it there.

Room creation relies on strong systems administration skills

[random loom]

I have configured the VM in localhost. In the localhost the website is working fine. After uploading to THM, the website has that error

[somber crow]

My advice still applies.

[random loom]

Thanks. How can I ssh credentials to the uploaded VM?

[marble current]

Gave +1 Rep to @somber crow

[random loom]

How can I *get

[somber crow]

They're the same as they were before

It hasn't changed them

[random loom]

Thanks

[marble current]

Gave +1 Rep to @somber crow

[wet laurel]

Anything Hardware and embedded security please!

[quasi briar]

please make rooms on mobile pentesting

[flint thunder]

Some rooms on Cyber Defense paths like Redline and Autopsy lag so much it's a pain to do them tbh, I spent a lot more time waiting than doing something...

CPU is always at 100% no matter what

[icy trellis]

Isn’t a room idea^ #room-bugs #feedback-and-ideas

[flint thunder]

my bad didn't see feedback, my brain is melting

[lusty mauve]

LMAO YES!

⬆️

[tacit anvil]

so true would be nice

[wet laurel]

Basically IoT 101 right?

Because security cameras 101 is still super broad. What do you want done to them? Hacked remotely? Reverse engineer the firmware?

[lusty mauve]

Anything, I remember cameras back then being vulnerable to password attacks because all their software was very bad

[wet laurel]

so you want the firmware extracted, reverse engineered, and inspected for password vulnerabilities?

[lusty mauve]

yeah would be cool

what about a krabby patty secret formula hackbox

[hidden fossil]

the firmware room on thm helped me with working with cameras using binwalk

[tough verge]

so rapid7 add to metasploit ms-word rce follina CVE-2022-30190 https://github.com/rapid7/metasploit-framework/commit/c751ef46c9f79bdb9cc81077f8d4fcd56df56e44 will this helps to create room with PoC? perfect candidate for *Recent Threats * module

[sudden glade]

Why not have a network hacking learning path or a wireless and wired hacking learning path?

It could cover everything from basic through enterprise

if we can do basic wifi hacking in a room why can't this be a thing?

[wet laurel]

🤔

[somber crow]

The basic wifi hacking room isn't as interactive as it should be. You can do virtualised wifi, but it's difficult

[heady oasis]

is there a follina room in the mits?

[pearl silo]

wait, are you the guy who made the m4trix room, if so, loved it

[heady oasis]

I am yes and thanks @pearl silo

[marble current]

Gave +1 Rep to @pearl silo

[cedar echo]

Nothing that I've seen

If you want to make one it's currently open bar

[karmic raven]

There are plans for one.

[karmic raven]

Not exactly

[cedar echo]

Ah I was not aware

[heady oasis]

darn, i wanted to snap it up fast. well im looking forward to it. I hope it has some nice attack and defence practical in there.

[hybrid merlin]

I poked someone about it yesterday, as it didn't look like there was any movement

[forest summit]

can shadow say they are excited and looking forward to that room on follina???

[loud hornet]

I've messed around with it, It seems fun.

[arctic nymph]

Is there a room that teaches you hydra?

[loud hornet]

Yeah

https://tryhackme.com/room/hydra

[arctic nymph]

Yeah I just found that but I found it wasn't overly informative. I could just be not doing enough research tho idk

[somber crow]

There's not much to hydra

[arctic nymph]

I'm doing the hackpark room and I'm just really confused on a hydra command

[somber crow]

Hydra is pretty much the worst tool you can use for that

The room really shouldn't suggest it

[agile sonnet]

I had an ideia, THM should add to all the rooms how long it takes to complete on average

idk if this is possible

just random thought

[forest summit]

probably better sending that in the feedback form from #feedback-and-ideas as it is not really a room idea

but agree that would probably be a decently nice feature

and there is already timers involved anyways for the target vm:s so probably easy to track it to some extent using that

[agile sonnet]

Next time, I will use that, thanks

[marble current]

Gave +1 Rep to @forest summit

[agile sonnet]

Id love to have that

[cunning thunder]

This is already specified for each room, but it is an internal feature for now. 🙂

[forest summit]

oooh thanks for the info on that

[agile sonnet]

oooh, spoiler alert

[marble current]

Gave +1 Rep to @cunning thunder

[loud hornet]

Are you around for a PM?

DM*

[cunning thunder]

Go ahead. 👍

[royal mauve]

more rooms for post exploitation please

[hoary condor]

More rooms for API hacking

[cedar echo]

Yeah but it's an estimate given by the room creator

[cunning thunder]

Ah yes, it is an estimate. When calculating the average from the join room time, we would get a skewed statistic, because a good amount of users join rooms and don't start it (or save it for later). 🙂

[cedar echo]

also true

[low lake]

Would be cool to see a room for M365 Defender which could be added to the cyber defense learning path.

[lunar plank]

What are you looking for exactly? I.e. Bypassing M365 defender?, what it is? How to use it? etc

[low lake]

Mainly how to use it, I’m going into a SOC role and the training material they’ve gave me before starting is mainly documentation and videos, would be cool to have a room to go and actually use it in scenarios related to roles like SOC

[hallow kelp]

Any questions on these, happy to help, I work as a SOC analyst and I use the likes of Microsoft 365 Defender and all the other products. it's definitely worth a look into in building a walkthrough.

[loud python]

if ur ever free to discuss Microsoft Defender for Business I would love to

Currently writing a WiKi for my team and then need to start implementing it across a few networks

and no one else on my team knows anything about it or can be bothered looking into it

lots of weight on my shoulders as a Junior lmao

[torn frost]

I'ld suggest a room to explain how to abuse symbolic links (cf James Forshaw's work) in Windows to PrivEsc

It's so powerfull

[coral ravine]

Bufferovwrflow prep

Introduction to x86

[tacit anvil]

That's not in-depth.

That room teaches you to be a script kiddie.

Throws you a bunch of scripts and tools, yet doesn't teach you how to do it yourself.

[coral ravine]

Still teaches you how to do it and it’s pretty in depth especially if you watch the video with it

You also have the basic buffer overflow room that teaches you it as well

[dull basalt]

does anyone know why the x86-64 room is now private and not accessible ?

[pearl silo]

The're probably planning on replacing it with site made content or the room itself was just outdated 🤷‍♂️

[manic stirrup]

There is this one https://www.tryhackme.com/room/androidhacking101

[tacit anvil]

Kubernetes?

[pearl silo]

there's already 5 or 6 of those rooms, search "kubernetes" on here :)
https://tryhackme.com/hacktivities?tab=search

[soft glen]

A mythic C2 room would be awesome!! Maybe Sliver too???

[tacit anvil]

Cool cool thanks

[marble current]

Gave +1 Rep to @pearl silo

[tacit anvil]

C2 vs C2 "control the botnet" would be cool

As a room, a KOTH and team vs team

[round mirage]

I have an idea for a challenge. but, I am worried about the legality of it.
it's a real world scenario. but, the way to go around it is ughh.

Can I DM u the idea?

Done

[maiden pebble]

hey anyone looked into mail services for rooms? that would be pretty common idea right?

[dawn onyx]

Any Palo Alto stuff?

[somber crow]

No lol

Lost access to all the content

[dawn onyx]

Dang. Sorry for going back so far haha. I was looking for topics before suggesting a repeat

[tacit anvil]

would be cool to have an off-topic channel and gaming channel so we don't get yelled in general chat about offtopic convo

[somber crow]

There is one. It's #general meaning general chatter. It just helps if you're not actively trying to cause trouble...

[vapid cove]

I guess this is the place for ideas 🙂 . For sure the next hot battlegrounds will be cloud infrastructures, mobile, OT/IOT. no surprise I guess . I don't know how easy would be to simulate those environment on THM platfrom and build learning tracks around those topics.