#room-ideas | TryHackMe | Page 3

sleek elbow Mar 5, 2020, 9:18 PM

#

with a really strict firewall

#

thats a Skidy/Ashu thing afaik

native raptor Mar 5, 2020, 9:19 PM

#

Yeah, thought it might be

#

Hmm. Still think it might be easier to just get them downloading it, but hey

somber crow Mar 5, 2020, 9:19 PM

#

Same as room banners

#

Step 1 download the software
Step 2 find some IOS images from perfectly legitmate sources

sleek elbow Mar 5, 2020, 9:24 PM

#

the only legitimate sources you can get them from are Cisco

stable hull Mar 5, 2020, 9:24 PM

#

You could try deploying it in a container on a locked down ububtu box with no other applications

sleek elbow Mar 5, 2020, 9:24 PM

#

Cisco is incredibly strict about image distribution

stable hull Mar 5, 2020, 9:26 PM

#

I reckon before you go deploying proprietary software you should get an official go ahead from Cisco since they use PT as core material in courses they sell

https://www.netacad.com/courses/packet-tracer/introduction-packet-tracer

Learn the Basics With Introduction to Packet Tracer Course | Networ...

Free Packet Tracer courses teach basics, visualizing & configuring networking devices for IT. Learn best practices for IT today.

native raptor Mar 5, 2020, 9:28 PM

#

From that perspective it is almost definitely better to get the users to sign up for themselves and download the software that way. It's free to do, and means that it's completely legitimate

stable hull Mar 5, 2020, 9:34 PM

#

Yep, that's their official means for distributing it and you're not risking getting a compromised version from some random site. You would be promoting the official site though. cans of worms and opening of such...

undone viper Mar 5, 2020, 10:45 PM

#

A Real web hacking room with advanced stuff like breaking filters and not a simple <IMG/src='x'onerror=prompt(1)>

mighty hearth Mar 6, 2020, 1:10 AM

#

How to used the windows command line cmd vs powershell

feral reef Mar 6, 2020, 9:06 AM

#

@mighty hearth who even uses cmd nowadays when you got powershell 5 6 7 and windows terminal?

native raptor Mar 6, 2020, 9:06 AM

#

o/
My desktop doesn't like powershell. Only use it when I absolutely have to.

#

Agree though. Powershell is much more useful.

feral reef Mar 6, 2020, 9:07 AM

#

he specified windows

#

do you use windows on your host?

native raptor Mar 6, 2020, 9:07 AM

#

My desktop is windows 😁

feral reef Mar 6, 2020, 9:07 AM

#

oh, alright then, my bad

#

i'll dm you

native raptor Mar 6, 2020, 9:08 AM

#

Go for it mate 😄

flint viper Mar 9, 2020, 1:20 AM

#

can we get a room for learning xss beef?

#

framework

raw moat Mar 9, 2020, 1:59 AM

#

I can try to put one together in the future @flint viper, I am working on a box right now. I like that idea though 🙂

flint viper Mar 9, 2020, 2:15 AM

#

gr8 would appreciate it

quartz grove Mar 9, 2020, 2:16 AM

#

I'm doing it rn

somber crow Mar 9, 2020, 2:17 PM

#

More Wordpress hacking

old abyss Mar 10, 2020, 6:27 PM

#

A few NodeJS servers, what about vulnerable golang servers?

somber crow Mar 10, 2020, 6:27 PM

#

@old abyss hackernote is Golang

#

What sort of vulns are you looking for? I could get on that

old abyss Mar 10, 2020, 6:30 PM

#

Nothing in particular as I don't know much about them, more of a general submission. NodeJS can be exploited with improper CMD set up so wondering what can be done with go

somber crow Mar 10, 2020, 7:35 PM

#

@old abysscmd as in?

#

I'm really interested, always looking for more work

old abyss Mar 10, 2020, 7:37 PM

#

using CMD env in url to execute commands etc... as an example as don't know of any others. I'll do a bit of reading on how Go servers are built and find any interesting vulns that could be made into rooms

somber crow Mar 10, 2020, 7:42 PM

#

Command injection @old abyss

#

That's applicable to anything that can run commands

#

Go included

raw moat Mar 10, 2020, 8:17 PM

#

https://www.emojicode.org/docs/guides/compile-and-run.html -- Ultimate torture room

tacit anvil Mar 10, 2020, 9:07 PM

#

@raw moat I'm not putting that in room submissions 😂😂😂

raw moat Mar 10, 2020, 9:09 PM

#

   🍰 name 🔡
   🍰 age 🚂
  🐈 👶 @name 🔡 🍇
     🍮 name @name
     🍮 age 0
   🍉
🍉```

wild merlin Mar 12, 2020, 7:35 PM

#

Java reverse engineering, I can provide help if needed

native raptor Mar 12, 2020, 7:39 PM

#

@wild merlin if you're good with it yourself, why not make the room and submit it for public evaluation 🙂

wild merlin Mar 12, 2020, 7:45 PM

#

@native raptor how do you make a room? Sorry, Im new...

native raptor Mar 12, 2020, 7:46 PM

#

📎 unknown.png

tacit anvil Mar 12, 2020, 7:46 PM

#

@wild merlinfollow the thm room creation guide

native raptor Mar 12, 2020, 7:46 PM

#

That's on the left hand side of the THM website

#

Hang on, this has already been written up?

#

Read the guide 😁

wild merlin Mar 12, 2020, 7:46 PM

#

I see thanks 🙂

tacit anvil Mar 12, 2020, 7:46 PM

#

Mgm

#

https://tryhackme.com/faq

TryHackMe | FAQ

TryHackMe is an online platform for learning and teaching cyber security.

#

@wild merlin

native raptor Mar 12, 2020, 7:47 PM

#

Huh, didn't know that existed

#

Must remember that

wild merlin Mar 12, 2020, 9:50 PM

#

ok I created something simple at https://tryhackme.com/room/jvmreverseengineering

TryHackMe | jvmreverseengineering

TryHackMe is an online platform for learning and teaching cyber security.

#

but apparently you have to make a writeup before you can publicise it

#

so Ill do that some time later

somber crow Mar 12, 2020, 9:51 PM

#

@wild merlin If it's a walkthrough, it doesn't need an official writeup

wild merlin Mar 12, 2020, 9:51 PM

#

its not

#

I might make a walkthrough another time

somber crow Mar 12, 2020, 9:52 PM

#

What the testers (like me) do is check the room over to make sure it all makes sense and everything works

wild merlin Mar 12, 2020, 9:52 PM

#

it should make sense but it gets very complicated at the end

native raptor Mar 12, 2020, 9:53 PM

#

You might want to include a bit of an introduction @wild merlin

#

For example, I've never done Java reverse engineering specifically. I don't have a clue what you're on about for some of that. I mean, with the experience I have, I would treat it exactly the same as any other kind of reverse engineering challenge.
In short, what makes the fact that it's Java special?

wild merlin Mar 12, 2020, 9:54 PM

#

Interesting good idea

#

where do I put that?

#

In the description field?

somber crow Mar 12, 2020, 9:55 PM

#

As a task

native raptor Mar 12, 2020, 9:55 PM

#

I'd be tempted to make a new task at the start

wild merlin Mar 12, 2020, 9:55 PM

#

ah ok good idea

native raptor Mar 12, 2020, 9:55 PM

#

Possibly also add a bit at the beginning of each of the established tasks as an intro to that task?

#

A good rule of thumb is that you should be trying to teach something new in each task. Certainly for the first few, a bit of a tutorial would be useful 😄

somber crow Mar 12, 2020, 9:56 PM

#

Also maybe talk a lil bit about javap

wild merlin Mar 12, 2020, 9:56 PM

#

I will, thank you for the advice, very helpful!

native raptor Mar 12, 2020, 9:57 PM

#

You're welcome 😄

wild merlin Mar 13, 2020, 10:58 AM

#

I added some introduction stuff, with a basic guide to the JVM instruction set, and ASM bytecode manipulation https://tryhackme.com/room/jvmreverseengineering

TryHackMe | jvmreverseengineering

TryHackMe is an online platform for learning and teaching cyber security.

#

Ill try and make a writeup

#

but it will take me a while to solve my own challenge too lol

native raptor Mar 13, 2020, 11:05 AM

#

Were you not taking notes when you made it?..

wild merlin Mar 13, 2020, 11:12 AM

#

No I mean of course I know the answer but writing a tool to reverse my obfuscation will be quite hard

dull adder Mar 13, 2020, 3:02 PM

#

@wild merlin nice room

wild merlin Mar 13, 2020, 3:12 PM

#

Thanks

dense dawn Mar 13, 2020, 8:07 PM

#

Snort room? Or "threat hunting" room where you look into shape copy files, or maybe bash history? Things like that? IDK I have only just started in this site, but I wanted to put in my ¢2

somber crow Mar 13, 2020, 8:07 PM

#

Shape copy files?

dense dawn Mar 13, 2020, 8:08 PM

#

Shadow lol

somber crow Mar 13, 2020, 8:08 PM

#

So you mean like blueteam/forensics?

native raptor Mar 13, 2020, 8:08 PM

#

25daysofchristmas covers a lot of the basic threat hunting stuff

somber crow Mar 13, 2020, 8:08 PM

#

I want to make some forensics content ngl

dense dawn Mar 13, 2020, 8:09 PM

#

Yeah stuff like that. Sans has a cheat sheet and I thought it would be cool to be able to have a spot to practice with that stuff. Maybe others could appreciate it too?

somber crow Mar 13, 2020, 8:10 PM

#

Post the cheatsheet in #resources

#

And I'll take a look at making some stuff

tacit anvil Mar 13, 2020, 8:36 PM

#

On the subject on forensics - What about digital devices rooms? Mobile phones, internet of things etc.

somber crow Mar 13, 2020, 8:36 PM

#

@tacit anvil What about those?

tacit anvil Mar 13, 2020, 8:37 PM

#

Hacking into devices

somber crow Mar 13, 2020, 8:37 PM

#

A lot of that is limited by what we can run on AWS but yep

dense dawn Mar 13, 2020, 10:34 PM

#

ok I uploaded the poster to the resources channel. Hope it helps. Thank you for being open to the idea. 😅

wild merlin Mar 14, 2020, 9:18 PM

#

Ok I finally finished the writeup

#

https://i.binclub.dev/k7s43a3x.pdf

#

thoughts?

#

Im writing it on a saturday night so its probably not best quality lol

lunar plank Mar 14, 2020, 9:47 PM

#

Re. Forensics I could make some content about it, what sort of stuff are people looking for specifically? File carving? Analysis from mobile devices and things?

wild merlin Mar 15, 2020, 10:49 PM

#

https://tryhackme.com/room/jvmreverseengineering ok I made the room public

TryHackMe | jvmreverseengineering

TryHackMe is an online platform for learning and teaching cyber security.

modest trail Mar 15, 2020, 10:54 PM

#

@wild merlin one of the staff will review it and provide any feedback before making it public

wild merlin Mar 15, 2020, 10:55 PM

#

Thanks

modest trail Mar 15, 2020, 10:55 PM

#

This is a quality control step so if feedback is provided for improvements

#

just whip James a few times

#

and he may do it

somber crow Mar 15, 2020, 10:55 PM

#

Nah, I won't

#

I took a look

wild merlin Mar 15, 2020, 10:55 PM

#

Lol

somber crow Mar 15, 2020, 10:55 PM

#

Got other rooms to review first

native raptor Mar 15, 2020, 10:56 PM

#

Oh, been meaning to ask, James. You have any idea where SoulBreaker's w3bquiz is in that queue? He was asking earlier

#

I would imagine a ways down the list, given it's relatively new to be submitted

somber crow Mar 15, 2020, 10:58 PM

#

Yeah it's in review

quartz grove Mar 15, 2020, 10:58 PM

#

I took that one, as there's a lot of stuff already in my DM's about it

#

And obv I was asleep

native raptor Mar 15, 2020, 10:59 PM

#

Ah, fair enough

somber crow Mar 15, 2020, 10:59 PM

#

Did you get a rule 1 break?

quartz grove Mar 15, 2020, 10:59 PM

#

No, they asked

modest trail Mar 15, 2020, 11:18 PM

#

James is so passionate about rule 1 😂

tacit anvil Mar 15, 2020, 11:19 PM

#

anyone: so I dmed <x>
James: ok but did you ask tho

flint viper Mar 17, 2020, 1:52 AM

#

Hey everyone i would really appreciate cloud learning material aws or google

somber crow Mar 17, 2020, 1:53 AM

#

Like AWS hacking? @flint viper

flint viper Mar 17, 2020, 3:20 AM

#

Ya but a introduction to aws environment with it hack would be better and then a series of them with better knowledge... if possible

somber crow Mar 17, 2020, 3:21 AM

#

I can't understand that sentence

flint viper Mar 17, 2020, 3:21 AM

#

I just want cloud material about how it works and it how its exploitation can be performed like if you dont configure the bucket this could happen

#

You could understand it like introduction to cloud environment because if few people are trying to hack cloud or find vulnerability in cloud they first need to know the basics of cloud

#

And then they would be able to identify weakness

somber crow Mar 17, 2020, 3:22 AM

#

Cloud machines are just normal machines, but elsewhere

flint viper Mar 17, 2020, 3:23 AM

#

Ya but their configuration is different if i am not wrong and exploitation techniques too?

native raptor Mar 17, 2020, 3:23 AM

#

EC2 instances are normal machines

#

But the AWS environment is very different

#

It's a whole different kettle of fish to normal hacking

#

So yeah, there is a market for that kind of room

#

But creating the resources for it would be tricky

flint viper Mar 17, 2020, 3:24 AM

#

Hmm aws bucket configuration and exploitation

native raptor Mar 17, 2020, 3:24 AM

#

There's a little of that over in 25daysofchristmas

#

Again, there's the problem that it's real world and no longer virtual though

flint viper Mar 17, 2020, 3:25 AM

#

Because i saw aws icon on website but then its empty when you click so i was just wondering about exploring that area

somber crow Mar 17, 2020, 3:25 AM

#

Yeah I've reported that quite a few times and it's not been removed

flint viper Mar 17, 2020, 3:26 AM

#

Blockchain material and exploitation would also be amazing

native raptor Mar 17, 2020, 3:26 AM

#

I know the guy in charge of AWS security consultancy. Might be able to reach out after COVID-19 dies down

#

I doubt he'll be able to do much though. They do run their own AWS CTF competition

flint viper Mar 17, 2020, 3:26 AM

#

Introduction to blockchain environment and exploit the environment

native raptor Mar 17, 2020, 3:26 AM

#

But I doubt they could provide the resources constantly for THM to use

flint viper Mar 17, 2020, 3:27 AM

#

Ya that's the problem people run aws ctf but they dont know how to play them thats what i was thinking to learn

native raptor Mar 17, 2020, 3:27 AM

#

What do you mean?

flint viper Mar 17, 2020, 3:27 AM

#

Like how to solve aws ctf challenge

native raptor Mar 17, 2020, 3:28 AM

#

Aye, so they run their security jam which costs about £2000 each time they do it in terms of resources

#

That's for about 8 hours

flint viper Mar 17, 2020, 3:28 AM

#

Like a walkthrough but dont completely step by step like other tutorial on THM website

native raptor Mar 17, 2020, 3:28 AM

#

Leaving it up indefinitely would be a problem

flint viper Mar 17, 2020, 3:28 AM

#

Hmm never thought about that

#

Can we get rooms for secure programming then?

#

I think it would be interesting?

somber crow Mar 17, 2020, 3:29 AM

#

Like looking at vulns and why they happen, code wise?

#

Have you done hackernote? I included psuedocode there and that was what I was going for

native raptor Mar 17, 2020, 3:30 AM

#

That's the big problem (even forgetting about the fact that AWS hacking would mean getting permission to use AWS as a pentesting target). It's Ok if you can limit what you're using, but if you're using everything to be able to get an idea of how to hack it, it gets reallyexpensive

#

Hmm. Are you meaning how to make a program secure?

somber crow Mar 17, 2020, 3:32 AM

#

@flint viper I'm interested by this idea, what do you mean?

sleek elbow Mar 17, 2020, 6:03 AM

#

https://cwe.mitre.org/data/definitions/699.html

CWE - CWE-699: Software Development (4.0)

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

#

this is a good start, probably

modest trail Mar 17, 2020, 6:05 AM

#

That would be a James room for sure

dense dawn Mar 17, 2020, 7:40 PM

#

Do we have an embedded object malware analysis room, specifically Microsoft documents that contain malicious embedded objects. I saw something similar in defcon 27, I had lots of fun, but would love to see more of that. Not sure if it's too niche. Just throwing an idea out there.

OA Labs on youthbe was an assistant in that class and offered great knowledge. Maybe he can have a THM friendly idea that isn't too involved and could be friendly to the THM room format.

I just finished burpuite into room and it reminded me of that class in Defcon. Once again, love the rooms. The material is awesome.

lunar plank Mar 17, 2020, 7:51 PM

#

I have content akin to that in the pipeline @dense dawn! At the moment I've got a room waiting to be released that goes through embedded objects in PDF files. However, stuff like word documents is next up :)

Glad you're enjoying the rest of the content though! And welcome!

#

When I say waiting to be released - it's been reviewed, its just waiting for the next content push

languid ibex Mar 17, 2020, 7:52 PM

#

finally! pdf inclusion

#

@lunar plank you da best

native raptor Mar 17, 2020, 7:53 PM

#

Looking forward to this one @lunar plank 😁

dense dawn Mar 17, 2020, 7:53 PM

#

Roger, thank you. Can't wait.

languid ibex Mar 17, 2020, 7:53 PM

#

samee ❗

lunar plank Mar 17, 2020, 7:54 PM

#

It's an introductory, so not very in-depth. Wanted to see how it would go down with users here before I went into that a lot more. But that's just increased the excuse to find the time to do it ten-fold 😛

#

There's also static analysis on Windows as well :^

#

Which turns out to be waiting for the next content push as well 😮 sweet

native raptor Mar 17, 2020, 7:56 PM

#

How many is that you've got in the release queue now?

lunar plank Mar 17, 2020, 7:56 PM

#

One that James is evaluating (after yours :^) and then two that are "Ready"

native raptor Mar 17, 2020, 7:57 PM

#

"Published"?

lunar plank Mar 17, 2020, 7:57 PM

#

*Ready

native raptor Mar 17, 2020, 7:57 PM

#

Ah, fair enough

#

Same as me then

#

So, between the two of us, there are six rooms waiting for release

#

Plus goodness know how many others

#

At least we ain't getting bored during quarantine 😁

lunar plank Mar 17, 2020, 7:58 PM

#

Hehe yup!

dense dawn Mar 17, 2020, 8:04 PM

#

The movie Hackers themed room, where you perform a realworld "hack" similar to the movie, haha, bonus points for movie references.

somber crow Mar 17, 2020, 8:06 PM

#

@dense dawn I tried that, it became hackernote when I couldn't plan the path right

#

my git repo for it is still thm-hackers

dense dawn Mar 17, 2020, 8:07 PM

#

Sorry, behind the game on these haha, let me play around some more before I come back.

somber crow Mar 17, 2020, 8:07 PM

#

I'd love to revisit it, themed rooms are real fun to make @dense dawn

feral egret Mar 19, 2020, 2:56 AM

#

I know I've already put in a request for buffer overflows, but would also tag onto that with seeing rooms that go over using tools like ghidra, r2, gdb (GEF, PEDA, PWNDBG). RE both 32-bit and 64-bit binaries, overflowing to both a specific function (yay flag) as well as overflowing into a shell similar to /room/bof1 but with more of a walkthrough feel of how exactly to do the overflow.

somber crow Mar 19, 2020, 2:58 AM

#

There's a ghidra room

#

A radare room

#

Gdb in there somewhere

final sun Mar 19, 2020, 3:36 AM

#

Sorry for late

#

@feral egret You can check https://github.com/D4mianWayne/PwnLand for some buffer overflow
Then, it's not updated enough.
There's a repo named nightmare by a guy named tuxedo(?), check it out. It's probably the thing you're looking for.

GitHub

D4mianWayne/PwnLand

Notes on pwning binaries and resources. Contribute to D4mianWayne/PwnLand development by creating an account on GitHub.

#

https://github.com/guyinatuxedo/nightmare

GitHub

guyinatuxedo/nightmare

Contribute to guyinatuxedo/nightmare development by creating an account on GitHub.

feral egret Mar 19, 2020, 2:18 PM

#

I'll definitely take a look at those @final sun thanks! Yes James, there's a single ghidra room with the basics of finding some variables, I was making a request in the hopes of expanding what THM is providing.

flint viper Mar 20, 2020, 2:23 AM

#

android pentesting content

#

testing the security of apps

#

if possible

somber crow Mar 20, 2020, 2:24 AM

#

There's a lil bit but it's really hard to run anything on AWS for that

#

I think there's 1 room with APK reversing in

native raptor Mar 20, 2020, 2:24 AM

#

https://tryhackme.com/room/androidhacking101

TryHackMe | androidhacking101

TryHackMe is an online platform for learning and teaching cyber security.

#

Thatta one ^^

languid ibex Mar 21, 2020, 7:11 PM

#

is anyone working on SQLi room at the moment?

tacit anvil Mar 21, 2020, 7:12 PM

#

Not that I'm aware of

#

It's been asked for though

languid ibex Mar 21, 2020, 7:12 PM

#

i know

#

i really want one too

tacit anvil Mar 21, 2020, 7:12 PM

#

Make it

#

:)

languid ibex Mar 21, 2020, 7:12 PM

#

yeah that's what i was thinking

#

it's been some time from my last rooms

#

i'll look into it

bleak wolf Mar 22, 2020, 2:02 PM

#

Please add video quality option to rooms that have video

bleak wolf Mar 24, 2020, 11:41 AM

#

Can a resources section be added categorized by topic. It may include YouTube Channels, Github Readings, Books, Blogs etc.

tacit anvil Mar 24, 2020, 10:12 PM

#

Will you please add a room on "recon-ng" (free) ? It will be helpful

native raptor Mar 24, 2020, 10:12 PM

#

I can take a look and add it to my list if you'd like?

#

Probably wouldn't be hugely long, but can write something up on it

tacit anvil Mar 24, 2020, 10:13 PM

#

Yeah sure. I just want to practice with real life example @native raptor

native raptor Mar 24, 2020, 10:14 PM

#

👍
I've got stuff to do just now, but I'll add it to my pile

tacit anvil Mar 24, 2020, 10:14 PM

#

ok. No problem.

modest trail Mar 24, 2020, 10:24 PM

#

Not sure if anyone has suggested this yet but snmp rooms?

radiant osprey Mar 24, 2020, 11:19 PM

#

sqlmap room ?

tacit anvil Mar 24, 2020, 11:19 PM

#

@radiant ospreycc Pentesting has a sqlmap section

radiant osprey Mar 24, 2020, 11:20 PM

#

Room?

tacit anvil Mar 24, 2020, 11:20 PM

#

https://tryhackme.com/room/ccpentesting

TryHackMe | ccpentesting

TryHackMe is an online platform for learning and teaching cyber security.

radiant osprey Mar 24, 2020, 11:21 PM

#

Ohh thanks

#

When learn windows room xd idk

worthy shadow Mar 27, 2020, 4:59 PM

#

+1 for learn windows room

feral reef Mar 27, 2020, 5:01 PM

#

we have a few windows rooms

worthy shadow Mar 27, 2020, 5:27 PM

#

but do you guys have a learn windows room ? xD

feral reef Mar 27, 2020, 5:30 PM

#

what do you mean by that

worthy shadow Mar 27, 2020, 5:33 PM

#

there is a how to linux room but no how to windows room

lunar plank Mar 27, 2020, 5:51 PM

#

Okay how about this, what would you like to learn about Windows specifically?

worthy shadow Mar 27, 2020, 6:08 PM

#

how to use it of course

lunar plank Mar 27, 2020, 6:10 PM

#

rubs head but ... use what part of it exactly? like powershell scripting? it's a GUI just like a desktop on linux - and no one's requested on how to use a desktop on Linux i.e. Gnome / XFCE

worthy shadow Mar 27, 2020, 6:12 PM

#

yes powershell would be nice

lunar plank Mar 27, 2020, 6:16 PM

#

Well in which case there's this room:
https://tryhackme.com/room/powershell @worthy shadow

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

worthy shadow Mar 27, 2020, 6:16 PM

#

uhh nice one thanks

somber crow Mar 27, 2020, 7:06 PM

#

I'd argue people are more likely to know Windows for daily use than Linux, but there are some Windows quirks when you're pentesting it and I'd argue that not so many people use the Windows/DOS command line

calm warren Mar 27, 2020, 11:35 PM

#

i'd like to request a netcat walkthrough

native raptor Mar 27, 2020, 11:37 PM

#

A netcat... walkthrough?

#

wdym @calm warren?

somber crow Mar 27, 2020, 11:37 PM

#

Also there's a bunch of different versions?

calm warren Mar 27, 2020, 11:37 PM

#

vent yeah

native raptor Mar 27, 2020, 11:38 PM

#

What would you be hoping to see in a nc walkthrough?

calm warren Mar 27, 2020, 11:39 PM

#

its helpful + there are ppl dont even know about it

native raptor Mar 27, 2020, 11:39 PM

#

Yes, those are the reasons to do it

#

But what kinda thing would you be hoping to see?

#

Using it to probe ports?

#

Reverse shells?

calm warren Mar 27, 2020, 11:45 PM

#

Reverse shells ofc

native raptor Mar 27, 2020, 11:45 PM

#

I mean, I can do a reverse shell room?

somber crow Mar 27, 2020, 11:45 PM

#

It's useful as a listener or for interacting with other services as well

native raptor Mar 27, 2020, 11:45 PM

#

Cover netcat, socat, shellupgrades, etc

somber crow Mar 27, 2020, 11:45 PM

#

@native raptor awesome

tacit anvil Mar 27, 2020, 11:45 PM

#

Go for it

native raptor Mar 27, 2020, 11:46 PM

#

Hehe, just when I finish one 🤦‍♂️
That shouldn't take hugely long though, so I'll cover it next

dull adder Mar 29, 2020, 4:43 AM

#

https://medium.com/@vartaisecurity/lab-building-guide-virtual-active-directory-5f0d0c8eb907

Medium

Lab Building Guide: Virtual Active Directory

This is a guide for building and configuring a vulnerable virtual Active Directory lab by hand.

#

labs for AD hacking

somber crow Mar 29, 2020, 4:43 AM

#

There is an AD hacking room, but issues with it are being fixed currently

quartz grove Mar 29, 2020, 4:44 AM

#

Also, networks soon ™️

somber crow Mar 29, 2020, 4:44 AM

#

basically, soon™️

sleek elbow Mar 29, 2020, 5:36 AM

#

as soon as BoF gets uploaded

final sun Mar 29, 2020, 12:29 PM

#

@sleek elbow Did you meant it for me? >_<

tacit anvil Mar 31, 2020, 2:55 AM

#

A room for navigating and possibly creating cloud-based servers

#

So you want like

#

An azure/aws/digital ocean tutorial

#

Yeah

crisp cloak Mar 31, 2020, 4:56 AM

#

Hi, I wish we could get a room explaining how to use burp suite / web app pen testing in details. I was a bit surprised doing the beginner path to not be so much guided on the juice shop part compared to the rooms I did so far. I'm currently watching / reading stuff on it in order to understand / finish the room .

somber crow Mar 31, 2020, 4:58 AM

#

There's a burp suite room

#

If you're a subscriber.
I can also reveal that there's a room for an alternative to burp suite that's in review at the moment

crisp cloak Mar 31, 2020, 4:58 AM

#

I'm a subscriber

somber crow Mar 31, 2020, 5:00 AM

#

Search for burp then @crisp cloak

crisp cloak Mar 31, 2020, 5:02 AM

#

Checking..

somber crow Mar 31, 2020, 5:03 AM

#

https://tryhackme.com/room/learnburp

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

crisp cloak Mar 31, 2020, 5:05 AM

#

yeah i did that one. it's mostly how to setup burp and intruder.

#

i was like meaning the other module also from burp like spidering ect..

#

actually, reviewing the room i just notice that i can learn some stuff from DVWA website .... 😄

limber venture Mar 31, 2020, 7:44 AM

#

hello i've seen a blockchain room is missing, any plans to add one?

languid ibex Mar 31, 2020, 7:58 AM

#

@limber venture what kind of blockchain room? like general explanation and analysis of the system?

limber venture Mar 31, 2020, 8:05 AM

#

yes but also exploitation/ chainalysis

languid ibex Mar 31, 2020, 8:07 AM

#

hmm good idea, thanks! might take into consideration

limber venture Mar 31, 2020, 8:09 AM

#

if you need help/consulting just hmu

#

just don't put a vulnerable erc smart contract as every blockchain puzzle in ctfs and such is indeed a solidity audit

rancid sonnet Mar 31, 2020, 11:17 PM

#

Requesting a "covering your tracks" room. e.g. deleting bash history, hiding your IP, OpSec, etc.

indigo moss Apr 1, 2020, 2:51 PM

#

samba exploit room please

somber crow Apr 1, 2020, 2:53 PM

#

@indigo moss Which?

#

There's been.... way too many

indigo moss Apr 1, 2020, 2:54 PM

#

euh for beginner

#

intro to samba exploit

native raptor Apr 1, 2020, 2:55 PM

#

Which exploit though? There are tonnes of them

somber crow Apr 1, 2020, 2:55 PM

#

There's also a room that goes over this that's in review rn

indigo moss Apr 1, 2020, 2:57 PM

#

something like this https://www.ctf.live/listing?labtype=beginner.network-challenges&subtype=beginner.network-challenges

#

#recon samba

#

There's also a room that goes over this that's in review rn
@somber crow interested to join

somber crow Apr 1, 2020, 2:58 PM

#

You can when everyone else can

#

When it gets approved

indigo moss Apr 1, 2020, 2:59 PM

#

ok

empty scroll Apr 1, 2020, 5:08 PM

#

more advanced networking topics ie Cisco common tasks ( turning on a port, vlans, basic subnetting & supernetting)

modest trail Apr 1, 2020, 5:09 PM

#

Why does it have to be cisco for subnetting and supernetting?

#

you know those are common networking concepts that aren't cisco exclusive

empty scroll Apr 1, 2020, 5:09 PM

#

cause cisco is 80% of the business i doubt many people run into juniper

somber crow Apr 1, 2020, 5:09 PM

#

Also this isn't really CCNA study material, it's cybersec

empty scroll Apr 1, 2020, 5:10 PM

#

cisco is now in the cyber buisness cisco cyber ops and security are growing

somber crow Apr 1, 2020, 5:11 PM

#

Ok but that doesn't change that enabling ports etc is CCNA study material

#

If you want the content to exist, you can make it

#

But we can't legally run IOS on anything

sleek elbow Apr 1, 2020, 5:17 PM

#

honestly

#

most internal networks I've been in

#

have ran (mostly) flat networks.

empty scroll Apr 1, 2020, 5:22 PM

#

that very interesting

#

that must of been one huge switch or router to handle a entire buisness

somber crow Apr 1, 2020, 5:27 PM

#

A bunch of switches doesn't mean subnetting

#

Normally a decent router yes

feral reef Apr 1, 2020, 5:27 PM

#

that's not how networks work

#

i mean you don't usually have huge switches and in most of the cases you get 2/4/6 switches for redundancy and depends on the actual needs

#

usually depends on the client's needs on how they need to be set up, you don't need to overcomplicate a network to make it work

noble thunder Apr 1, 2020, 7:12 PM

#

A box covering windows privesc - similar to the Linux one - perhaps mapped against the mitre attack map? That would be great 🙂

formal turtle Apr 1, 2020, 7:29 PM

#

We have a windows privesc box in the works :))

lunar plank Apr 1, 2020, 7:43 PM

#

I almost had a whole paragraph a month ago discussing about creating content for subnetting and visualising subnetting, vlans and trunks

#

No one seem to of been too keen into it but if that's changed I'm sure fellow creators can come up with a thing or 6

feral reef Apr 1, 2020, 8:08 PM

#

@lunar plank depends what kind of stuff you are willing to create about those topics. i can lend you a hand with them

noble thunder Apr 1, 2020, 10:27 PM

#

We have a windows privesc box in the works :))
@formal turtle fantastic thank-you

orchid quest Apr 2, 2020, 9:22 PM

#

More rooms about Linux would be awesome. would like to know linux like my ten fingers.

native raptor Apr 2, 2020, 9:22 PM

#

@orchid quest As in, Linux basics?

orchid quest Apr 2, 2020, 9:24 PM

#

@orchid quest As in, Linux basics?
@native raptor well it could start with basics, altho i would like to think im past basics.. let say few tasks about basics, and then some advanced stuff, but any content about linux is welcome

native raptor Apr 2, 2020, 9:25 PM

#

Rephrase -- you mean a more advanced version of zthlinux?

#

Have you done Linux Challenges?

orchid quest Apr 2, 2020, 9:25 PM

#

yes

#

i have done all linux rooms

#

Rephrase -- you mean a more advanced version of zthlinux?
@native raptor that would be great

tacit anvil Apr 2, 2020, 9:25 PM

#

Did I hear zthlinux part 2

native raptor Apr 2, 2020, 9:26 PM

#

Honestly at this point you're probably best just doing your own research. Once you understand the basics, you're past the point of really needing to be taught

#

Find something that you want to know, and go figure it out 😄

orchid quest Apr 2, 2020, 9:26 PM

#

😄

#

I love me some rooms 🙂 I have been a heavy game addict, so doing rooms keep my mind off of it, rooms are like game to me, but here I learn while playing.

native raptor Apr 2, 2020, 9:28 PM

#

That's a good shout 😁

#

How are you for challenges?

orchid quest Apr 2, 2020, 9:28 PM

#

im now doing Xmas room, im at the day 13

#

i love challenges as well

native raptor Apr 2, 2020, 9:29 PM

#

Hehe, I can highly recommend Cherryblossom, Willow, JOAT, Madness, Hackernote (obligatory for James)

#

I'm biased, granted

tacit anvil Apr 2, 2020, 9:30 PM

#

Nonamectf was pretty interesting

orchid quest Apr 2, 2020, 9:30 PM

#

I must say i love everything about THM, just sometimes i feel like a know not enough about linux, especialy when it comes to using commands like find

native raptor Apr 2, 2020, 9:30 PM

#

Ooh yeah, Noname was fun

orchid quest Apr 2, 2020, 9:30 PM

#

altho the room Find did give me a boost in that regard'

#

but still, when i google and find a right way to use find, i understand that i had no idea that i was supose to use it that way 🙂

#

maybe i just need time and practice

#

Hehe, I can highly recommend Cherryblossom, Willow, JOAT, Madness, Hackernote (obligatory for James)
@native raptor I will def try them out, after im done with Xmas room

native raptor Apr 2, 2020, 9:32 PM

#

😁

bright warren Apr 3, 2020, 10:36 PM

#

Which room should I prefer for metasploit

Rp: metasploit. Or ice

somber crow Apr 3, 2020, 10:37 PM

#

Wrong chat

somber crow Apr 4, 2020, 12:23 PM

#

Blue team content

#

Zeek is cool for pcap analysis

somber crow Apr 4, 2020, 7:14 PM

#

Cyberchef basics

grizzled folio Apr 5, 2020, 12:31 PM

#

windows privesc

native raptor Apr 5, 2020, 12:35 PM

#

In the pipeline ^^

old abyss Apr 5, 2020, 12:37 PM

#

Would boot/rootkits be possible in THM?

feral reef Apr 5, 2020, 1:24 PM

#

@lunar plank ^ something for you?

lunar plank Apr 5, 2020, 4:16 PM

#

Oooo

#

It is in my series - albeit the theory (how rootkits actually work and what makes them different). AWS for obvs won't allow that type of stuff to be hosted - but I could include memory forensics etc of post-rootkit/bootkits if that's what you're suggesting? @old abyss (also ty @feral reef )

somber crow Apr 5, 2020, 4:26 PM

#

Honestly the more blue team stuff the better

feral reef Apr 5, 2020, 4:59 PM

#

No worries ^^

plush vault Apr 6, 2020, 8:38 PM

#

Hey Team, maybe its a cool idea to make a room for learning how to maintain access

#

because i need to definitely get better at that.

#

might be nice 🙂

lunar plank Apr 6, 2020, 8:42 PM

#

I am committing to Blue team content. If any other creator wants to collab on some stuff ?

old abyss Apr 7, 2020, 7:48 AM

#

Any Active Directory related rooms?

formal turtle Apr 7, 2020, 8:34 AM

#

Should be coming out soon :)) /cc @sleek elbow

sleek elbow Apr 7, 2020, 1:53 PM

#

indeed, attacktive directory is ready to go again, it just needs an officisl writeup

arctic shard Apr 8, 2020, 9:42 AM

#

i've also looked to some walkthrough to look at the code, but nothing worked

#

wrong channel, sorry 😆

tacit anvil Apr 9, 2020, 4:55 AM

#

Idea: a room on nikto

somber crow Apr 9, 2020, 4:57 AM

#

@tacit anvil Maybe to go with zap?

tacit anvil Apr 9, 2020, 4:58 AM

#

consideration

lament star Apr 9, 2020, 12:08 PM

#

@lunar plank Please make an AV evasion room, MuirlandOracle told me to post this here

native raptor Apr 9, 2020, 12:11 PM

#

(Uh, translation: CMNatic, would an AV evasion room fit into your remit, and/or would you be interested in making one? 😛 )

lament star Apr 9, 2020, 12:11 PM

#

😄

lunar plank Apr 9, 2020, 12:12 PM

#

Good idea - I've got a good path of the series that I'm taking. However I'll consider it. Could you further expand on what you want to see from it? E.g. The theory on how AV checks for Malware? @lament star

#

(also ty @native raptor)

lament star Apr 9, 2020, 12:13 PM

#

Theory would be nice, but a practical example would be better

#

Bypassing sandboxes that kind of stuff

lunar plank Apr 9, 2020, 12:14 PM

#

I think I'm allowed to share it here, but here's a high-level of how the series / pathway is developing:

📎 Untitled_Diagram_1.png

#

Mhm okay, definitely food for thought. I'll scribble it down in my notes for it - I like the idea of it!

#

I'll just have to find the time (aka expect to wait a good month at the very least)

lament star Apr 9, 2020, 12:15 PM

#

That's fine

remote socket Apr 9, 2020, 1:06 PM

#

I think I'm allowed to share it here, but here's a high-level of how the series / pathway is developing:
@lunar plank Love this, keep this resource as when the pathway gets built, it will fit in perfectly!:)

lunar plank Apr 9, 2020, 1:08 PM

#

It seems to be going down a treat on here @remote socket ty for the encouragement 🙂

feral reef Apr 9, 2020, 3:43 PM

#

Why did i never thought about building a road map for my projects? I'll steal the idea.

modest trail Apr 9, 2020, 3:44 PM

#

I actually love that idea

feral reef Apr 9, 2020, 3:46 PM

#

Yeah. Never thought about it

modest trail Apr 9, 2020, 3:51 PM

#

That being said I've just created a Trello board for my stuff

feral reef Apr 9, 2020, 4:05 PM

#

draw.io for me

modest trail Apr 9, 2020, 4:05 PM

#

I just need to pick up a list of projects to actually make this board look like it has stuff in

#

😂

gloomy trail Apr 9, 2020, 6:07 PM

#

room on python exploitation exist or not

native raptor Apr 9, 2020, 6:10 PM

#

Python... exploitation?

#

What do you mean @gloomy trail?

gloomy trail Apr 9, 2020, 6:10 PM

#

i mean

#

does the tryhackme also have rooms like the course python exploitation by pentestor acvademy

native raptor Apr 9, 2020, 6:11 PM

#

I have no idea what's in that course. I'm assuming it's teaching you Python scripting?

gloomy trail Apr 9, 2020, 6:11 PM

#

i mean like solving htb machine by your own script

#

no the course is on the scripting on the shell attacks by python

native raptor Apr 9, 2020, 6:12 PM

#

Hackernote is good in terms of custom exploitation. My Willow also requires you to code for yourself, albeit as an indirect exploitation

#

Can you link to it?

#

Server is fine @gloomy trail 🙂
We try to avoid unrequested DMs where possible -- see the #rules 😄

#

I mean, can you send a link to the course?

#

I'll have a look at the content

gloomy trail Apr 9, 2020, 6:14 PM

#

oh

#

https://www.pentesteracademy.com/course?id=1

Python for Pentesters

Pentester Academy

native raptor Apr 9, 2020, 6:18 PM

#

So, uh, yeah, Python scripting essentially...
Yes, we have scripting rooms: https://tryhackme.com/room/scripting

#

That's the one totally devoted to it, but it also covers bash scripting

#

In terms of writing your own exploits, as a general rule that's something that comes from practice

#

The AoC (https://tryhackme.com/room/25daysofchristmas) has a few really nice little scripting challenges

gloomy trail Apr 9, 2020, 6:19 PM

#

hmmm

native raptor Apr 9, 2020, 6:20 PM

#

There's also this https://www.udemy.com/course/python-for-pentesters/?ranMID=39197&ranEAID=Z*nNMT6UOvY&ranSiteID=Z.nNMT6UOvY-zjMOdnY5BkZzm_F.ntry2g&LSNPUBID=Z*nNMT6UOvY&persist_locale=&locale=en_US&couponCode=FREEEDUCATION

#

I have no idea if that coupon is still valid

#

But it's a decent introduction

#

I've also added more scripting into #641573666353709085 🙂

steel fiber Apr 10, 2020, 9:33 PM

#

memes ( funny images that make you happy and reward you after a hard day of studying cyber security) and nsfw room

lunar plank Apr 10, 2020, 9:34 PM

#

I'm going to go with no as a creator imho

somber crow Apr 10, 2020, 9:34 PM

#

@steel fiber That's gonna be a deny. This is rooms for the site

#

memes go in #thm-community-media

#

nsfw goes in other servers. This server is strictly SFW

somber crow Apr 11, 2020, 9:10 AM

#

@versed veldt official warning. Stop posting discord links.

versed veldt Apr 11, 2020, 9:11 AM

#

Jojo

tacit anvil Apr 12, 2020, 1:06 AM

#

Would be cool to have a room for 'game hacking' (is that the term for it?), something like pwnie island but maybe a little less open. I know that would be a lot of work tho.

tacit anvil Apr 12, 2020, 5:53 AM

#

A room involving the basic steps in rooting a system. I know HTB has starting-point for that but it'd be nice if THM had something similar to help newer people

sleek elbow Apr 12, 2020, 6:00 AM

#

priv esc playground is a pretty good place to look to practice priv esc methods

tacit anvil Apr 12, 2020, 6:01 AM

#

My bad on the wording. Enumeration and foothold steps

#

It's not too difficult when in the machine, but getting there can be pretty confusing

split viper Apr 12, 2020, 6:37 PM

#

@tacit anvil search for the educational rooms. They guide you regarding enumeration, exploitation and priv esc

tacit anvil Apr 12, 2020, 6:38 PM

#

@split viper thank you

hard kraken Apr 13, 2020, 1:00 PM

#

its will be great if we have room or something like pentesterlab to practice on every web exploit

somber crow Apr 13, 2020, 1:40 PM

#

@hard kraken there's juiceshop, webgoat and wackopikco somewhere

tacit anvil Apr 13, 2020, 2:03 PM

#

Are there any free rooms that introduce pwn functions?

rough obsidian Apr 14, 2020, 9:42 PM

#

it would be cool to have more rooms with Networking related topics

feral reef Apr 15, 2020, 12:00 AM

#

@dull adder hey, can i pm you ? 🙂

dull adder Apr 15, 2020, 12:16 AM

#

Hey @feral reef okay

final sun Apr 15, 2020, 12:49 AM

#

@tacit anvil pwn functions?

tacit anvil Apr 15, 2020, 1:09 AM

#

@final sun for example: uploading or creating a shellcode

final sun Apr 15, 2020, 1:21 AM

#

As in how to create shellcode and how to execute it, I assume?

tacit anvil Apr 15, 2020, 2:06 AM

#

Yes

#

The pwntools docs describes the process of making it or importing it with the pwntools library, but a room where we actually make use of it interactively would be really beneficial

tacit anvil Apr 15, 2020, 2:52 PM

#

Possibility for a basic SQLInj. room? I mean a room that teaches everything from the beginning.

languid ibex Apr 15, 2020, 3:57 PM

#

@tacit anvil this was highly requested and might be coming in the nearest future :)

desert cloud Apr 15, 2020, 4:53 PM

#

I am Done with my room creation and official writup ! Can anyone help me publishing it??

languid ibex Apr 15, 2020, 4:55 PM

#

just submit it @desert cloud

#

it'll be reviewed

desert cloud Apr 15, 2020, 4:55 PM

#

How to submit?

languid ibex Apr 15, 2020, 4:56 PM

#

choose 'public' visibility in your room settings

desert cloud Apr 15, 2020, 4:57 PM

#

That is already Done

languid ibex Apr 15, 2020, 4:58 PM

#

does it say 'submitted' or 'evaluating'?

desert cloud Apr 15, 2020, 4:58 PM

#

Submitted

languid ibex Apr 15, 2020, 4:58 PM

#

alright, just wait for now

desert cloud Apr 15, 2020, 4:58 PM

#

By what time it will be published?

languid ibex Apr 15, 2020, 4:58 PM

#

can't tell

#

(i just don't know :)

feral reef Apr 15, 2020, 4:59 PM

#

after someone reviews it it might be pushed through

desert cloud Apr 15, 2020, 5:00 PM

#

Okay! No issue! So if there will be any mistakes
Will they ask me to rectify things or simply it will be rejected??

languid ibex Apr 15, 2020, 5:00 PM

#

you'll get some feedback

#

in case something is wrong

desert cloud Apr 15, 2020, 5:00 PM

#

Okay! Fine!

#

To whom i can talk to for this?

languid ibex Apr 15, 2020, 5:01 PM

#

you'll see it on the platform

desert cloud Apr 15, 2020, 5:02 PM

#

Okay!

clever fiber Apr 15, 2020, 5:37 PM

#

Join Fast

#

https://tryhackme.com/games/koth/join/9e3685357e55111f58ae7ceb

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

1 min Left

somber crow Apr 15, 2020, 5:50 PM

#

@clever fiber Wrong channel

tacit anvil Apr 16, 2020, 12:42 AM

#

@tacit anvil this was highly requested and might be coming in the nearest future :)
@languid ibex Okay. Thank You! 🙂

tacit anvil Apr 16, 2020, 5:35 AM

#

@tacit anvil the only issue being manual SQLi is kind of a hard topic to teach, as for it to make any sense you have to assume the user understands SQL on a high level

tacit anvil Apr 16, 2020, 6:26 AM

#

@tacit anvil the only issue being manual SQLi is kind of a hard topic to teach, as for it to make any sense you have to assume the user understands SQL on a high level
@tacit anvil exactly. I have no prior knowledge about sql so I can't really understand sqli.

#

Then a room on manual SQLI will be worthless to you @tacit anvil

tacit anvil Apr 16, 2020, 7:01 AM

#

;-;

tacit anvil Apr 16, 2020, 8:39 AM

#

@tacit anvil Learning SQL is useful anyway 😁

shy vault Apr 16, 2020, 8:42 AM

#

so would an sqlmap room be fine or its simple enough that it's unnecessary?

tacit anvil Apr 16, 2020, 8:43 AM

#

so would an sqlmap room be fine or its simple enough that it's unnecessary?
@shy vault That would be helpful. atleast for newbies like me.

#

@tacit anvil Learning SQL is useful anyway 😁
@tacit anvil whatever I learn, i learn through THM, idk why. IF THM makes a SQL room, i'll definitely learn that

#

THM should not be your only resource

#

Besides teaching enough SQL in a room to be able to use it competently will be quite difficult

#

any particular resource for SQL?

#

Personally I recommend setting up some tools that require SQL databases, and going from there

#

Syntax documentation can be found online

shy vault Apr 16, 2020, 8:48 AM

#

check w3schools

#

if i remember they have something for sql

tacit anvil Apr 16, 2020, 8:48 AM

#

They do

shy vault Apr 16, 2020, 8:48 AM

#

and codeacademy

tacit anvil Apr 16, 2020, 8:48 AM

#

Try setting up a MySQL server and playing with that @tacit anvil

#

For me the best way to learn is by experimentation and documentation

shy vault Apr 16, 2020, 8:50 AM

#

yeah that's true i forgot about sqlmap's documentation

#

thanks for your time and help

feral reef Apr 16, 2020, 9:19 AM

#

For me is having @tacit anvil by my side

tacit anvil Apr 16, 2020, 9:19 AM

#

<3 @feral reef

#

@tacit anvil Okay sir. I'd definitely try that. Thanks for the guidance mate.

steel fiber Apr 16, 2020, 2:13 PM

#

can we have a reverse enginnering room with applications that have debugger detectors and how do you like pass their traps so you can still run the program in the debugger

feral reef Apr 16, 2020, 2:14 PM

#

@final sun ^ something for you?

final sun Apr 16, 2020, 2:14 PM

#

Well

#

I got time till 3 may, it's time to work on the room

arctic shard Apr 16, 2020, 6:20 PM

#

what about a room on Nikto?

native raptor Apr 16, 2020, 8:05 PM

#

There are a few that cover it already 🙂

tacit anvil Apr 16, 2020, 8:20 PM

#

https://tryhackme.com/room/rpwebscanning

TryHackMe

TryHackMe | RP: Web Scanning

Part of the Red Primer series, intro to web scanning.

#

Is one

sick vine Apr 17, 2020, 11:29 AM

#

Room focus on Win32 Buffer Overflows 🙂

tacit anvil Apr 17, 2020, 6:04 PM

#

We have a couple rooms that feature buffer overflows @sick vine

#

Most 32 bit

#

The differences between windows and Linux bofs aren't that big iirc

sick vine Apr 17, 2020, 6:05 PM

#

thnx for the reply can you suggest me some for practice? @tacit anvil 🙂

tacit anvil Apr 17, 2020, 6:06 PM

#

https://tryhackme.com/room/thecodcaper

TryHackMe

TryHackMe | The Cod Caper

A guided room taking you through infiltrating and exploiting a Linux system.

sick vine Apr 17, 2020, 6:06 PM

#

thnx for help 🙂

#

it will help me understanding concept 🙂

tacit anvil Apr 17, 2020, 6:07 PM

#

https://tryhackme.com/room/bof1

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

hard kraken Apr 18, 2020, 4:39 AM

#

Are we have bash room ?

tacit anvil Apr 18, 2020, 4:51 AM

#

Bash coding or bash commands?

#

There's the Learn Linux room and you can learn shell scripting from just googling "learn shell scripting"

somber crow Apr 18, 2020, 5:03 AM

#

@tacit anvil you can learn almost anything with some research, doesn't mean there couldn't be a room made

tacit anvil Apr 18, 2020, 5:05 AM

#

True, my bad man. I agree that shell scripting should be a room, just wasn't sure whether they meant that or commands

languid ibex Apr 18, 2020, 7:26 AM

#

Bash scripting is actually a good idea lathink

sleek elbow Apr 18, 2020, 5:33 PM

#

agreed

#

id struggle making a bash room tho mainly because variables, loops and pipes are the only real bash things

#

it's mostly just chaining external binaries together to achieve and end goal

#

i.e.

for LINE in `cat /root/hosts.txt`; do host $LINE | grep -v "NX"; done

formal turtle Apr 18, 2020, 5:38 PM

#

yehh

#

anytime i need to look up some bash scripting stuff

somber crow Apr 18, 2020, 5:38 PM

#

It'd be nice to go over the basic structures though

formal turtle Apr 18, 2020, 5:38 PM

#

i open up this bad boy

#

https://learnxinyminutes.com/docs/bash/

Learn X in Y Minutes: Scenic Programming Language Tours

#

having a room on it is def a good idea though 🙂

hard kraken Apr 19, 2020, 12:07 AM

#

Ya i mean room for bash scripting.

rancid sonnet Apr 19, 2020, 1:45 AM

#

I posted a few weeks ago about a room called "Covering Your Tracks", or what have you. Basically a room teaching people how to go undetected(or at least covered from discovery) when performing some of the other rooms. Is there a thought on this?

native raptor Apr 19, 2020, 1:48 AM

#

I've put it in submissions 🙂

rancid sonnet Apr 19, 2020, 2:04 AM

#

Awesome, thank you @native raptor, I think a lot of people will enjoy it. 🙂

robust pike Apr 22, 2020, 10:17 AM

#

Are there any rooms relating to CORS vulnerabilities? I'd love to see more on this and more webapp vulnerabilities in general e.g SSTI, SSRF etc. That would be incredible. I'm already a subscriber, but I'd extend my subscription indefinitely for that kind of content

#

https://tryhackme.com/room/thecodcaper
@tacit anvil that's the funniest room description I've ever seen LOL

TryHackMe

TryHackMe | The Cod Caper

A guided room taking you through infiltrating and exploiting a Linux system.

formal turtle Apr 22, 2020, 10:49 AM

#

We have a room with SSTI, XXE, JWT vulns coming out soon :))

robust pike Apr 22, 2020, 10:50 AM

#

That's amazing, thanks @formal turtle

low lichen Apr 23, 2020, 12:41 AM

#

Is it possible to have room about SQLi which goes step-by-step?

tropic tartan Apr 23, 2020, 2:49 AM

#

Ohh, im not sure if this has already been done but something where we can get some hands on with SCADA controllers would be amazing

#

live stream a remote control arm or something that we could watch move around once we are in and playing with it, that would be cool

rigid hedge Apr 23, 2020, 10:53 AM

#

I have and idea about a room using cronjob to randomize ports and services available on the box for E.g will start with HTTP and SSH on default ports with a certain script Vuln and people have to rooted. the twist is every 20m~ish the cronjob run change the configuration and restart the service maybe starting new service like pure-FTPd.

modest trail Apr 23, 2020, 11:22 AM

#

Interesting concept that I've considered trying to create for a king of the hill box. The idea of a self patching or adaptive box would be sick

turbid nimbus Apr 23, 2020, 7:53 PM

#

Would it be possible to have a room for Maltego, or is it too dependent on third-party services?

somber crow Apr 23, 2020, 7:59 PM

#

Seeing as it's free it seems fine?

pliant depot Apr 24, 2020, 10:32 PM

#

is there room for attacks on cloud, aws and google cloud etc?

#

probably just aws actually as most companies move to there now.

tacit anvil Apr 26, 2020, 8:03 AM

#

If there's not a room on it yet, evil-winrm would be pretty useful to learn

crisp crown Apr 27, 2020, 6:10 AM

#

Thoughts on EEPROM hacking or similar hardware hacking? Or a digital forensic room? I could make the content.

#

For EEPROM hacking I could provide content of multiple types of laptops (Photos included of IC's on the MOBO) with OSINT questions and technical questions.

tacit anvil Apr 27, 2020, 10:23 AM

#

A room on CSRF?

tacit anvil Apr 27, 2020, 7:29 PM

#

That room is coming out soonTM @tacit anvil

tacit anvil Apr 27, 2020, 8:57 PM

#

ah ❤️

compact summit Apr 28, 2020, 6:44 AM

#

I'd love a room exploring wildcards in linux and the different ways they can be used in an exploit.

tacit anvil Apr 28, 2020, 12:45 PM

#

^that'd be really neat

#

A room covering defensive methodologies and general defense such as patching vulnerabilities and securing a network

tacit anvil Apr 28, 2020, 10:42 PM

#

there is only one room for active directory. Can anyone add some more?

native raptor Apr 28, 2020, 10:47 PM

#

Added to submissions 👍

tacit anvil Apr 29, 2020, 12:13 AM

#

room for GO language

#

🤔

somber crow Apr 29, 2020, 12:14 AM

#

What about it?

native raptor Apr 29, 2020, 12:14 AM

#

Preetty sure there already is one

somber crow Apr 29, 2020, 12:14 AM

#

There's kind of one

#

Using go tools and installing go

#

Rather than writing it

#

But this isn't a software dev platform

tacit anvil Apr 29, 2020, 12:15 AM

#

black hat go - have you read this book?

sleek elbow Apr 29, 2020, 12:43 PM

#

I've got so many AD rooms on the backend xP

#

just have to wait until my schedule lightens up. School semester is coming to an end relatively soon

feral reef Apr 29, 2020, 12:44 PM

#

@sleek elbow can we discuss what you're working on so we don't do the same thing?

sleek elbow Apr 29, 2020, 12:44 PM

#

Yep

feral reef Apr 29, 2020, 12:44 PM

#

pm?

white plover May 1, 2020, 2:24 AM

#

I think a room walkthrough of a tool like cherrytree or other prominent reporting tool would be good to have. I realized I never really organized the notes I took and now see the value in it but don't know the best way about it or all the shortcuts etc. Also a room about something like docker would be cool

native raptor May 1, 2020, 2:25 AM

#

@white plover CherryTree has a really good manual

#

The docker documentation is also pretty damn good

white plover May 1, 2020, 2:29 AM

#

I get that but at the same time it's more about exposure I suppose. I had heard of tmux but appreciated the walkthrough room and learned a lot and now can't see myself without it. Similarly there are things like git which could be tied to a ctf style thing where you find things hidden in commits, logs, blame,history,tags etc. git has great documentation but lots of people don't know more than how to clone. I understand though that it should possibly be reserved for tools that aren't widely known but useful or lack good documentation though just sharing my thoughts

somber crow May 1, 2020, 2:31 AM

#

Remember, you're welcome to make a room yourself too

tacit anvil May 1, 2020, 2:32 AM

#

What restrictions are there to making a room?

somber crow May 1, 2020, 2:33 AM

#

@tacit anvil https://docs.tryhackme.com/docs/room-creation/room-creation-getting-started

TryHackMe Documentation

Getting Started

tacit anvil May 1, 2020, 2:33 AM

#

Thanks

warm hull May 1, 2020, 4:39 AM

#

I was refered here from the general channel. I'm building a MITM attack exercise and I realize I cannot deploy 2 VMs at once. One is the Target User Windows VM and the other would be the Target Web Server. Then of course the attacker would be VPNd using Kali or whatever hacking distro.

#

I attempted this potential room idea using Blue and DVWA VMs. I dont know if the Blue VM has a default User/Password to RDP in.

somber crow May 1, 2020, 4:48 AM

#

@warm hull blue because exploitable or blue because windows?

warm hull May 1, 2020, 4:49 AM

#

Because its Windows. I need a VM a user can RDP into to play the 'User' role.

somber crow May 1, 2020, 4:50 AM

#

The windows base VM? @warm hull

warm hull May 1, 2020, 4:50 AM

#

Yes, I was actually asking about that one. I emailed education@soft hamlet about allowing me to clone it so I can modify it and include the DVWA as the target web site.

somber crow May 1, 2020, 4:52 AM

#

You should be able to do all that

#

Networks would make it much easier but I don't know the ETA on that

warm hull May 1, 2020, 4:52 AM

#

What is preventing me from deploying two VMs on the same subnet?

#

I would think that is simple to do.

somber crow May 1, 2020, 4:53 AM

#

They're all on the same network

#

But THM networks would make it all a lot easier

warm hull May 1, 2020, 4:54 AM

#

In essence this is what Im trying to accomplish....

📎 unknown.png

#

Of course, the WiFi AP and the Layer2/3 device are just for show. I dont really need that as part of this exercise.

somber crow May 1, 2020, 4:56 AM

#

So that's 3 machines

#

DVWA, kali, windows

warm hull May 1, 2020, 4:56 AM

#

Well, the attacker is using their Kali to VPN in to THM.

#

Yes.

somber crow May 1, 2020, 4:57 AM

#

So it's two machines

#

There is a DVWA room already out there that you could use

warm hull May 1, 2020, 4:57 AM

#

Yes, Im using that one.

somber crow May 1, 2020, 4:57 AM

#

Windows base has RDP also

warm hull May 1, 2020, 4:57 AM

#

Yes, that;s the one I hope to clone.

somber crow May 1, 2020, 4:57 AM

#

What customisations would you really need on the windows machine?

warm hull May 1, 2020, 4:58 AM

#

None. Just be able to access the Web Browser to access the DVWA.

somber crow May 1, 2020, 4:58 AM

#

So i don't see why you'd need to clone it?

warm hull May 1, 2020, 4:59 AM

#

As the attacker (Kali) is sending arpspoof requests to redirect the MAC of the User/Server back to the Attacker's MAC.

somber crow May 1, 2020, 4:59 AM

#

Yep. So why clone?

warm hull May 1, 2020, 4:59 AM

#

I dont see the Windows Base in the drop down.

somber crow May 1, 2020, 4:59 AM

#

You can just deploy the room

warm hull May 1, 2020, 4:59 AM

#

When I go to create a task, for example.

somber crow May 1, 2020, 5:00 AM

#

Yeah I get that

#

But it's a standalone room

#

https://tryhackme.com/room/windowsbase

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

Instead of uploading it yourself, you could just deploy that one?

#

They'll all be on the same network

warm hull May 1, 2020, 5:02 AM

#

Ah! I see what you mean. The reason I would clone it is to make it accessible to my students that do not have a subscription to THM.

#

I havent forced everyone to pay for a subscription so I took the liberty of doing that.

somber crow May 1, 2020, 5:03 AM

#

If you talk to skidy I'm sure you can sort something out

warm hull May 1, 2020, 5:03 AM

#

Sounds good. Will do. He's been really helpful these last few times I've reached out to @remote socket

somber crow May 1, 2020, 5:04 AM

#

I don't know how well a windoes VM will run on non subscriber level resources

warm hull May 1, 2020, 5:04 AM

#

Hey, thanks for all your feedback and suggestions. This is really cool. Been having a blast creating content and using what's avaiable to teach the fundamentals.

#

@somber crow

somber crow May 1, 2020, 5:05 AM

#

Check out http fundamentals

#

And wifi hacking 101

#

Wifi hacking is definitely free

#

I think HTTP fundamentals is sub only

warm hull May 1, 2020, 5:05 AM

#

Ah Nice!! WiFi Hacking is on my TODO.

somber crow May 1, 2020, 5:05 AM

#

I created those two, for reference

#

Hopefully more beginner content coming soon

warm hull May 1, 2020, 5:06 AM

#

For sure. Thanks again.

arctic shard May 1, 2020, 3:53 PM

#

What about a room to learn how to find and bypass a firewall? could be possible?

sleek elbow May 1, 2020, 4:11 PM

#

Bypassing firewalls is somethings thats relatively difficult

#

plus, if a ports marked as closed on a firewall, there isn't a ton we can really do about that

arctic shard May 1, 2020, 4:21 PM

#

plus, if a ports marked as closed on a firewall, there isn't a ton we can really do about that
@sleek elbow what about a WAF?

sleek elbow May 1, 2020, 4:21 PM

#

WAFs are a completely different story

arctic shard May 1, 2020, 4:22 PM

#

yes, i know. idk why i wrote firewall instead of WAF lol 😅

stuck latch May 1, 2020, 8:59 PM

#

@rocky gazelle i see you are working on my room, just want to let you know i updated / added the flags + questions now.

#

😉

rocky gazelle May 1, 2020, 9:44 PM

#

haha good!

native raptor May 2, 2020, 12:47 AM

#

Also not the right channel..

#

Try #room-help

sleek spruce May 2, 2020, 12:47 AM

#

😔👍🏽

orchid fossil May 5, 2020, 7:56 PM

#

a (guide) room based on exploiting vulnerable websockets

somber crow May 5, 2020, 7:57 PM

#

@orchid fossil That's an insanely broad topic

#

Do you mean BoFing them?

orchid fossil May 5, 2020, 7:58 PM

#

searched it up, but i dont think its what you mean

somber crow May 5, 2020, 7:58 PM

#

@orchid fossil Then explain what you mean.

orchid fossil May 5, 2020, 8:00 PM

#

ill send a link in a bit, i lost it. but the main idea is executing script through it

somber crow May 5, 2020, 8:00 PM

#

So you need RCE

#

So BoF or something

orchid fossil May 5, 2020, 8:02 PM

#

Any rooms on it?

somber crow May 5, 2020, 8:02 PM

#

There's a BoF room

#

That has a socket BoF

orchid fossil May 5, 2020, 8:02 PM

#

does "Bof" stand for buffer overflow?

somber crow May 5, 2020, 8:02 PM

#

yes.

orchid fossil May 5, 2020, 8:02 PM

#

ah very nice thank you

gaunt cosmos May 6, 2020, 3:03 AM

#

A walkthrough room on pivoting? Maybe with and without Metasploit, so we get an idea of other tools

somber crow May 6, 2020, 3:03 AM

#

Coming with Networks

#

Could do something with Docker sooner but that'd be Linux only

gaunt cosmos May 6, 2020, 3:04 AM

#

Ahh sweet, that’s cool 😃

somber crow May 6, 2020, 3:05 AM

#

Hopefully soon™️

gaunt cosmos May 6, 2020, 3:05 AM

#

🤞

outer jewel May 6, 2020, 12:10 PM

#

A Rastalabs, offshore type of room which has several boxes would be cool.

somber crow May 6, 2020, 2:51 PM

#

@outer jewel that sort of thing os coming woth networks

outer jewel May 6, 2020, 2:52 PM

#

Awesome 👍

#

When is that likely to be released?

somber crow May 6, 2020, 2:53 PM

#

Soon™

lunar plank May 6, 2020, 2:54 PM

#

And not a moment sooner

coral sequoia May 7, 2020, 6:11 AM

#

Bof done 🥰

#

what's next?

thorny pecan May 7, 2020, 12:14 PM

#

@remote socket i have submitted a room last week and requested to make it public. But its still under evaluating. Is there any issue with that?

languid ibex May 7, 2020, 12:23 PM

#

no

#

it’s just being evaluated

native raptor May 7, 2020, 12:51 PM

#

@thorny pecan which room? I can take a look for you

thorny pecan May 7, 2020, 12:52 PM

#

Its Forensic for CTF

native raptor May 7, 2020, 12:53 PM

#

@feral reef that's one of yours -- how's it doing on the list? 🙂

feral reef May 7, 2020, 1:16 PM

#

oh, damn, i'm sorry, i might've got busy with other stuff!!

#

i will review it by the end of the day and get back to you @thorny pecan

thorny pecan May 7, 2020, 1:30 PM

#

Okay

feral reef May 7, 2020, 6:16 PM

#

can i pm you @thorny pecan ?

thorny pecan May 7, 2020, 6:49 PM

#

@feral reef sure

loud sparrow May 8, 2020, 7:43 PM

#

Hello guys i hope for more learning / advanced topics on network pentesting also some enterprises pentesting like rooms(with pivoting and such on) thanks

native raptor May 8, 2020, 7:52 PM

#

Bit difficult without networks

#

Fortunately, those are coming soon!

lunar plank May 8, 2020, 7:54 PM

#

soon™️

prisma vale May 8, 2020, 8:16 PM

#

seems like a game changer! can't wait

lunar plank May 8, 2020, 8:17 PM

#

fo' sure

#

it looks real good

ornate cairn May 12, 2020, 3:26 AM

#

Binex :D

somber crow May 12, 2020, 3:28 AM

#

@ornate cairn soon™

#

Lot of binexp content

tacit jungle May 15, 2020, 11:38 AM

#

Hello @lunar plank Can I dm?

lunar plank May 15, 2020, 11:39 AM

#

Hey dude, can I ask if it's anything in particular? Or would you rather keep it over DM 🙂 @tacit jungle

tacit jungle May 15, 2020, 11:40 AM

#

I have submitted a vm and it isn't available for public

lunar plank May 15, 2020, 11:41 AM

#

Ah, you've submitted a room? Do you know the name / your THM username so I can see if it's in the queue?

#

Or did the VM fail to convert when uploading?

tacit jungle May 15, 2020, 11:42 AM

#

Deamon

lunar plank May 15, 2020, 11:42 AM

#

Oh yeah! Yeah I approved the room for release a couple of days ago 🙂

tacit jungle May 15, 2020, 11:42 AM

#

Yes

lunar plank May 15, 2020, 11:42 AM

#

They get pushed out according to the release schedule

#

I'll find the lil' bit about it one sec

tacit jungle May 15, 2020, 11:43 AM

#

May I know how long does it take?

#

This is my first vm and I am excited about it

lunar plank May 15, 2020, 11:44 AM

#

I bet hehe

#

I can't seem to find it on the website, but a rough guide is that Walkthrough rooms get pushed on a Wednesday IIRC, and a challenge room every friday

#

The admins pick what to release, but there's only a handful that are ready to push - two of them very recently so...Hopefully 🙂

tacit jungle May 15, 2020, 11:45 AM

#

Okay

lunar plank May 15, 2020, 11:46 AM

#

Can you reset my progress in the room in the mean whilst please? x)

tacit jungle May 15, 2020, 11:46 AM

#

Thank you so much @lunar plank

lunar plank May 15, 2020, 11:47 AM

#

No worries!

tacit jungle May 15, 2020, 11:47 AM

#

I have a question about my vm can I pm now?

lunar plank May 15, 2020, 11:48 AM

#

Yeah sure! 🙂 Thanks for double checking

hushed vector May 15, 2020, 6:42 PM

#

I was wondering if there are any social engineering rooms where you could spoof an email to gain certain information or even a chat bot. How do you prep for social engineering in the real world and would that work?

modest trail May 15, 2020, 6:51 PM

#

That's more phishing than SE I'd say

#

Would be really difficult to create

hushed vector May 15, 2020, 7:30 PM

#

It probably would. My other one was thinking of taking information from a phishing post on a social media site. Then again, I guess making a mock social media site takes ages too.

#

so for example, you found info about a user that had listed an account somewhere and on their social media they had those "ask your husband these 10 questions" that gave clues to broken authentication

loud sparrow May 15, 2020, 9:03 PM

#

i wish to see rooms emulating real-world enterprise network pentest scenarios with updated os / pivoting

lunar plank May 15, 2020, 9:04 PM

#

Pivoting / networks coming real soon™️ @loud sparrow 🙂

#

Believe me when they do ... there'll will be content haha

loud sparrow May 15, 2020, 9:05 PM

#

thats cool also a path that follows elearn security certs like PTS,PTP,PTX will be cool i mean as practicing those topics will help alot

robust pike May 15, 2020, 9:55 PM

#

Would it be possible to get a room on SAML exploits? I find it really fun and something that's often seen in the "real-world"

karmic raven May 15, 2020, 9:57 PM

#

I can’t wait for networks so many ideas floating around in my head

lunar plank May 15, 2020, 9:57 PM

#

+1 on that holy moly

feral reef May 15, 2020, 10:41 PM

#

thats cool also a path that follows elearn security certs like PTS,PTP,PTX will be cool i mean as practicing those topics will help alot
@loud sparrow i can create something for the PTS but we need to wait for the networking part to get added

open vine May 16, 2020, 12:14 AM

#

A room that is nearly impossible to exploit, and only lets you telnet or nc a port. If you remain a connection on the port without entering data for 50 minutes it outputs the flag. Made to teach you that not every machine is going to be easy to exploit, and the valuable lesson of knowing when to give up

native raptor May 16, 2020, 12:16 AM

#

Why not make that yourself?
You've just given it away here..
How is that hacking?

#

I mean, it would be trivially easy to make, but that's not exactly hacking, is it? 🙂

#

~~Which also makes it a good way to further hurt poor Skidy's wallet unnecessarily~~

sleek elbow May 16, 2020, 12:19 AM

#

if you buy Skidy a Rasp-Pi to host it on, I'm sure he wont have any issues hosting it LUL

tight night May 16, 2020, 12:19 AM

#

I'll host on mine. 😛

open vine May 16, 2020, 1:00 AM

#

It's a fun shower thought ¯_(ツ)_/¯

feral reef May 16, 2020, 1:00 AM

#

I can do that 😂

#

Definitely worth a first of April room prank

somber crow May 16, 2020, 1:11 AM

#

@feral reef But that's soooo far away

feral reef May 16, 2020, 1:13 AM

#

There was an xmas gtf last month

#

Everything is possible

open vine May 16, 2020, 1:28 AM

#

Ooh I won pretty high in that

feral reef May 16, 2020, 1:29 AM

#

I'll put your idea after my next 2 boxes

dense fern May 16, 2020, 8:41 AM

#

A OSCP exam like room, like a practice exam room?

gaunt cosmos May 16, 2020, 10:45 AM

#

A Guided room on SSRF?

tacit anvil May 16, 2020, 10:46 AM

#

Kinda surprised I didn't include it in zthweb tbh

gaunt cosmos May 16, 2020, 10:47 AM

#

Kinda surprised I didn't include it in zthweb tbh
@tacit anvil Me too haha,So I figured I'd post here

feral reef May 16, 2020, 11:00 AM

#

ZTHweb2 incoming @tacit anvil

tacit anvil May 16, 2020, 11:01 AM

#

You'll be testing@feral reef

#

And actually yeah lol

feral reef May 16, 2020, 11:04 AM

#

oh, i am not paid for this lol

tacit anvil May 16, 2020, 11:05 AM

#

Ur paid in love and cookies

robust pike May 16, 2020, 3:36 PM

#

@tacit anvil more rooms like zthweb would be good. Not finished with it yet, but such a great room

open vine May 16, 2020, 7:22 PM

#

Kinda surprised I didn't include it in zthweb tbh
@tacit anvil
Probably could've replaced JWT

native raptor May 16, 2020, 7:24 PM

#

But then you wouldn't have learnt about JWT...

somber crow May 16, 2020, 7:25 PM

#

@formal turtle Are you able to fix the typo on the badge?

formal turtle May 16, 2020, 7:30 PM

#

the badge for the zthobscurewebvulns rooms?

somber crow May 16, 2020, 7:31 PM

#

@formal turtle Yup

formal turtle May 16, 2020, 7:32 PM

#

yess

#

will be made live in the next push though 😄

somber crow May 16, 2020, 7:33 PM

#

Cheers

lapis lintel May 17, 2020, 2:23 PM

#

does anyone know pydictor? Its an social Engineering Dictionary Builder

karmic raven May 17, 2020, 2:24 PM

#

There’s already a custom word list room I’m pretty sure it’s outdated and could use some updating with automated tools but it gives you the background knowledge to build custom wordlists

lapis lintel May 17, 2020, 2:24 PM

#

whats the name of the room?

#

oh nvm its Custom Wordlists

lament star May 18, 2020, 12:42 PM

#

...

lunar plank May 18, 2020, 12:42 PM

#

That's not really what the join codes are for @spiral delta

spiral delta May 18, 2020, 12:43 PM

#

what are they for?

lunar plank May 18, 2020, 12:43 PM

#

Sharing with friends, students.

spiral delta May 18, 2020, 12:43 PM

#

oh sorry

lunar plank May 18, 2020, 12:43 PM

#

Rooms that you want to make public need to be reviewed

spiral delta May 18, 2020, 12:43 PM

#

How do I do that?

lunar plank May 18, 2020, 12:44 PM

#

pressing "Public: True" in manage section of your room

#

https://docs.tryhackme.com/docs/room-creation/the-review-process

TryHackMe Documentation

Private Rooms

spiral delta May 18, 2020, 12:44 PM

#

oh ok

#

I have to do a writeup tho

#

Do I have to create it myself

lunar plank May 18, 2020, 12:44 PM

#

If it's a challenge room, yahuh

spiral delta May 18, 2020, 12:45 PM

#

ok cool

#

thanks

lunar plank May 18, 2020, 12:45 PM

#

🙂

spiral delta May 18, 2020, 12:45 PM

#

🙂

#

how do I post the writeup

#

do I have to upload it to youtube

#

or just upload it to tryhackme

native raptor May 18, 2020, 12:46 PM

#

Writeups are usually text

#

(Speaking as one of the guys who might be reviewing it, please don't use a video for the official writeup)

spiral delta May 18, 2020, 12:47 PM

#

ok

native raptor May 18, 2020, 12:47 PM

#

Doing them as a private Google Doc is common

spiral delta May 18, 2020, 12:47 PM

#

Ok cool

#

should I upload photos as well

lunar plank May 18, 2020, 12:48 PM

#

As much detail would be nice but if it's fairly intuitive and detailed well in place of photos

#

should be okay 🙂

spiral delta May 18, 2020, 12:48 PM

#

ok thanks

native raptor May 18, 2020, 12:48 PM

#

Screenshots are helpful.
Realistically, it's there to make the process as streamlined as possible. We don't want to spend hours figuring it out, because there are lots of other rooms we need to get through

#

As long as it's descriptive enough, it's fine though 🙂

spiral delta May 18, 2020, 12:49 PM

#

ok thank you man

lunar plank May 18, 2020, 12:49 PM

#

Look forward to seeing it in the queue

native raptor May 18, 2020, 12:50 PM

#

^^

spiral delta May 18, 2020, 12:50 PM

#

🙂 thanks man

winter wyvern May 18, 2020, 12:54 PM

#

@spiral delta Can I DM you?

spiral delta May 18, 2020, 12:54 PM

#

yeah

spiral delta May 18, 2020, 8:43 PM

#

hey I have upload

#

I am trying to upload an ova box

#

but it says 0.00% percent the whole time and it doesn't upload

#

does anybody know how to fix this?

karmic raven May 18, 2020, 8:45 PM

#

is your computer time correct

#

also #site-support

wintry slate May 19, 2020, 11:00 PM

#

It would be cool to have a room that provides hands-on practice with scapy. Unless there is one already and I missed it.

lunar plank May 19, 2020, 11:10 PM

#

As in crafting packets and things? @wintry slate

#

I don’t think there’s anything but that’s a real neat idea tbh I could get on board with that

wintry slate May 19, 2020, 11:11 PM

#

@lunar plank Yeah, something to get more confortable with being able to use it practically and on the fly I suppose.

lunar plank May 19, 2020, 11:12 PM

#

Yeah that sounds neat

#

I’ll add that on my list at the least it’ll be cool!

#

Unless anyone else beats me to it

wintry slate May 19, 2020, 11:13 PM

#

Sweet!

#

Not sure if you all do testing for rooms prior to releasing them, but if you need someone to test it let me know haha.

native raptor May 19, 2020, 11:20 PM

#

Yep, we test them first 😁

tacit anvil May 19, 2020, 11:32 PM

#

That's actually pretty cool

outer jewel May 20, 2020, 8:47 AM

#

I think rooms aligned to the Mitre Att&ck framework would be cool. How to perform various techniques, initial access, execution, lateral movement etc.

#

I know there’s the Empire C2 room, maybe adding additional C2 platforms like Covenant, PoshC2 would also be an idea.

radiant imp May 20, 2020, 5:25 PM

#

I would love an umbraco based room, where you have to hack into Umbraco CMS

#

there is an exploit for v7.12.4

native raptor May 20, 2020, 5:26 PM

#

Why not make one?

#

Failing that, @feral reef this one's yours 😁

feral reef May 20, 2020, 5:53 PM

#

Yeah, umbraco is my thing @radiant imp , I can put something together, on my list of stuff. however bare in mind it is out of support and a lot of people migrated to a newer version which i am not entirely sure how I can create a misconfiguration. But, do bear with me. I might be able to pull something out

#

my own website is designed and built with Umbraco

radiant imp May 20, 2020, 5:54 PM

#

awesome! yeah im a webdeveloper and umbraco certified but i have no clue how to start building a good room

#

we can do this together if you want 😄

feral reef May 20, 2020, 5:55 PM

#

If @native raptor will be nice enough to put it in the #641573666353709085 so i won't forget about the request, I will get back to you after i finish the current rooms i am working on

radiant imp May 20, 2020, 5:55 PM

#

awesome!

#

Do you mind if i PM you?

feral reef May 20, 2020, 5:57 PM

#

nah, dude. feel free do dm me after you send a friend request

radiant imp May 20, 2020, 8:54 PM

#

Maybe as idea to hack "tryhackme.com" or an instance of it just for funzzz

somber crow May 20, 2020, 8:59 PM

#

@radiant imp There's a bug bounty program.

feral reef May 20, 2020, 9:02 PM

#

good luck not getting blocked by cloudflare

tight night May 20, 2020, 10:00 PM

#

rip

somber crow May 20, 2020, 10:13 PM

#

@tacit anvil Anything specific about SIP?

#

I can make some VOIP content over the summer

tacit anvil May 20, 2020, 10:44 PM

#

yknjow what would be cool

#

a box revolving around old software like win2000 or older

native raptor May 20, 2020, 10:45 PM

#

To see just how vulnerable it is?

#

I have no idea if AWS could be convinced to host that 😆
Worth a shot though

somber crow May 20, 2020, 10:46 PM

#

Ice?

feral reef May 20, 2020, 11:11 PM

#

The oldest I have is xp sp3

#

I maybe be able to find something on torrents

#

An sp1 to put the ms06 I think it's called the dcom one

tight night May 20, 2020, 11:12 PM

#

Turning the thing on is a vulnerability at this point.

feral reef May 20, 2020, 11:13 PM

#

Isn't that the point lol

#

I mean we could have something like a wayback room? Bringing artifacts to their glory? 😂

#

Word 2003 exploits

tight night May 20, 2020, 11:15 PM

#

Excel macro 😮

feral reef May 20, 2020, 11:16 PM

#

and unlocking password protected documents by changing extension to zip

#

supports sql 2000

#

xD

tight night May 20, 2020, 11:18 PM

#

If it doesn't include AOL Instant Messenger viruses being transferred to unsuspecting people as .jpg's it won't count.

feral reef May 20, 2020, 11:21 PM

#

anyone, i think it's a good thing to do as a special request if aws allows

#

a wayback machine of how easy it was to exploit stuff at those times

tacit anvil May 20, 2020, 11:45 PM

#

is winworld still up

#

https://winworldpc.com/home

WinWorld: Welcome

WinWorld is an online museum dedicated to providing free and open access to one of the largest archives of abandonware software and information on the web.

#

it totally is

#

has almost every old os/software since before XP

feral reef May 20, 2020, 11:46 PM

#

where did you get this link from lol

tacit anvil May 20, 2020, 11:46 PM

#

I've had it since I was 11 >_>

somber crow May 20, 2020, 11:48 PM

#

Remember, abandonware can still be considered piracy

tropic cave May 21, 2020, 1:43 AM

#

Is that only if Microsoft decided to pursue it though?

#

That's a serious question I honestly don't know how it works

upbeat dragon May 21, 2020, 3:00 AM

#

depends on the case but basically if a company still exists or someone else now owns the rights to a work they can go after you for it however that being said you could also try to take it to court and if you can show that they dont defend the copywrite you could win. Its why you see things like Nintendo going hard after fan games because if they dont then it could hurt them in a future court case. Also of course depends where you live and where they own the copywrite which is why copywrite is so fun to deal with

tropic cave May 21, 2020, 3:34 AM

#

is you a lawyar?

#

suh

upbeat dragon May 21, 2020, 4:46 AM

#

Lol no. I come from a five generation lawyer family you could imagine the joy when I went into CS

#

i did a semester of business law though it was probably the worst 4 months of my life

#

most dry thing i ever did

tacit anvil May 21, 2020, 10:56 AM

#

From what I’ve been keeping up with, the only OS Microsoft sent a DMCA to win world for was XP (because of the market share and technically Microsoft still offers it)

tropic cave May 22, 2020, 1:51 PM

#

A detailed walkthrough of Cutter and RE

lament star May 22, 2020, 1:53 PM

#

We have a walk-through for radare2 and cutter is just a GUI for r2

outer jewel May 22, 2020, 2:18 PM

#

Malware Development Room, Macros, Executables etc.

feral reef May 22, 2020, 2:21 PM

#

@lunar plank ^

#

it crosses a thin line between blackhat and redteaming though

lunar plank May 22, 2020, 2:23 PM

#

Yeah... I wouldn’t be too comfortable with that fine line tbh

#

More so I think it’d get vetoed either way 😅

feral reef May 22, 2020, 2:24 PM

#

yeah, i'm just thinking

#

probably on old version of software that are EOL?

#

just to showcase it?

lunar plank May 22, 2020, 2:25 PM

#

I’ll defo have a look and bring it up!

feral reef May 22, 2020, 2:25 PM

#

sure, i'm just thinking of not having real life applications

#

that's my main concern about this

lunar plank May 22, 2020, 2:25 PM

#

Yeah definitely

native raptor May 22, 2020, 2:25 PM

#

Yeah, probably better not teaching anything that's actually dangerous

lunar plank May 22, 2020, 2:25 PM

#

It’s the learning of the techniques that’s the issue

#

Doesn’t matter the platform

lament star May 22, 2020, 2:26 PM

#

Kernel level rootkits would be nice, but then again might cross the line into blackhat 🤔

native raptor May 22, 2020, 2:26 PM

#

Malware dev is a blackhat topic -- malware and scripting being two very different topics of course

#

I would say that's the line, between what we do, and what we don't

#

We teach stuff that could be used maliciously, but not stuff that can only be used maliciously

lunar plank May 22, 2020, 2:27 PM

#

Yeah I concur with that

#

It becomes a bit of a different ball game at that point

feral reef May 22, 2020, 2:28 PM

#

yeah, that's why i am saying

#

being aware of all the stuff might actually make it better than avoiding it

#

either way

lunar plank May 22, 2020, 2:29 PM

#

Yeah I agree with that

feral reef May 22, 2020, 2:29 PM

#

so, doesn't really make a difference

lunar plank May 22, 2020, 2:29 PM

#

There’s no reason I can’t discuss why they work although?

feral reef May 22, 2020, 2:29 PM

#

and it seems like a good addition to the malware series

somber crow May 22, 2020, 2:29 PM

#

Just teach us to remove kernel level malware from KoTH

feral reef May 22, 2020, 2:29 PM

#

but has to be approved from the Overseers

somber crow May 22, 2020, 2:29 PM

#

All we need

lunar plank May 22, 2020, 2:29 PM

#

Ahahahaha 😂😂

#

Now that Dan’s got a poc

#

I agree

lament star May 22, 2020, 2:30 PM

#

If it's a simple rootkit you can just use rmmod to remove it 🤔

somber crow May 22, 2020, 2:30 PM

#

myDonuts has a working one that's in use

#

Gotta find it first

lament star May 22, 2020, 2:31 PM

#

lsmod 😄

feral reef May 22, 2020, 2:31 PM

#

you guys talk stuff that's out of my league

lament star May 22, 2020, 2:31 PM

#

But a good rootkit would probably prevent itself from being listed by lsmod

feral reef May 22, 2020, 2:32 PM

#

you guys need a life

somber crow May 22, 2020, 2:32 PM

#

You're here too.

golden mountain May 22, 2020, 2:32 PM

#

a good one changes the name constantly Kappa

feral reef May 22, 2020, 2:32 PM

#

welp

#

i am WFH

#

what else can i do

lament star May 22, 2020, 2:32 PM

#

@golden mountain Or impersonate another module 🤔

feral reef May 22, 2020, 2:32 PM

#

other than dip in into channels

#

i mean, i do have 100ish rooms to finish to finish 100% THM

#

so let's just jump into steel mountain and see where's all the fuss about it kekw

tropic cave May 22, 2020, 2:47 PM

#

I'm definitely not the guy to probably talk at length about this but couldn't malware be used for white hat purposes? I mean would it ever be in scope on an actual pentest?

lament star May 22, 2020, 2:48 PM

#

👀

feral reef May 22, 2020, 2:49 PM

#

yes. in UK for CyberEssentials+

#

you need to send a payload in an email and if it bypasses the filter you fail the assessment

quartz grove May 22, 2020, 4:46 PM

#

For it to be a rkit it needs to not have an exit module

#

If there's no exit module then rmmod will fail

tacit anvil May 22, 2020, 5:01 PM

#

I would absolutely love a room for malware development, however I would also love to learn how to defend against malware and intrusions (for KotH)

kindred hill May 22, 2020, 5:04 PM

#

#ultratech1
#5 The software using the port 8080 is a REST api, how many of its routes are used by the web application?

i thing the port in question is wrong...

#

please advice

tacit anvil May 22, 2020, 5:07 PM

#

Perhaps a room to teach how to quietly pwn a system without raising AV or logs or such

native raptor May 22, 2020, 5:09 PM

#

That's been suggested (and highly demanded)

#

I have a feeling it'll end up in one of our dev piles sooner or later...

karmic raven May 22, 2020, 7:21 PM

#

well the problem is that av evasion / firewall bypassing is constantly changing there is not really a standard to it there is but there isn’t at the same time

tight night May 22, 2020, 7:31 PM

#

Yep. AV companies are constantly scraping public repositories to see what new and fun ways there is to obfuscate data. And there are only so many ways that the underlying system can interpret it.

tacit anvil May 22, 2020, 9:07 PM

#

Maybe have a custom basic AV that detects sigs and such, for the basis of being a stepping stone

nocturne rose May 24, 2020, 2:03 AM

#

I wouldn't say malware development can only be used for malicious activities. Such as a pentester using custom malware in an engagement and then providing guidance on how to detect it or at least log it for threat hunters. The mw developer will have a better way of presenting that surely.

outer jewel May 24, 2020, 11:54 AM

#

IPv6 hacking room

#

Windows based breakout room

tropic cave May 24, 2020, 1:19 PM

#

Like a VM escape?

outer jewel May 24, 2020, 2:07 PM

#

More like kiosk breakout

tropic cave May 24, 2020, 3:20 PM

#

Interesting

outer jewel May 24, 2020, 3:27 PM

#

C2 Matrix Room - https://howto.thec2matrix.com/

About C2 Matrix

Welcome to the C2 Matrix How-To site!!

#

How to use Docker room

#

Programming based rooms in addition to the existing Python room. C++, C#, Go etc

native raptor May 24, 2020, 3:32 PM

#

Remember it's a hacking site 🙂

#

The Python room is there to teach basic scripting (I think some shell scripting might be in the works too)

#

Things like docker escapes are good to cover though

karmic raven May 24, 2020, 3:35 PM

#

I don’t think that docker breakout are that extensive to make a whole room on though? There’s already a few challenges with them in there

#

and IPv6 is an interesting one there’s only a small number of good ipv6 attacks out there everything else if just like ddos but there is like mitm6 I think for something like that it would have to be part of a larger room rather than its own thing

native raptor May 24, 2020, 3:39 PM

#

A room covering different ways of breaking out could be cool

final sun May 25, 2020, 4:29 AM

#

A room with Sandbox Escaping techniques.

crimson tangle May 26, 2020, 4:32 PM

#

Would anyone be interested in an iOS reverse engineering room? As an iOS developer I would like/be able to make one. Not sure if people’d be interested

lament star May 26, 2020, 4:33 PM

#

Sounds fun 🤔

languid ibex May 26, 2020, 4:33 PM

#

That would be great actually! I was considering to study this recently

#

So make one 🤩

tropic cave May 26, 2020, 4:47 PM

#

Why does only iOS get the love? Can Android have a spot too?

somber crow May 26, 2020, 4:47 PM

#

@tropic cave That exists tho

tropic cave May 26, 2020, 4:47 PM

#

O

#

Bad ideas strike again

somber crow May 26, 2020, 4:47 PM

#

android hacking 101

tropic cave May 26, 2020, 4:48 PM

#

Well man I didn't know

#

I've honestly never gone through all the rooms. I should search tags though lol

gusty gust May 26, 2020, 4:57 PM

#

android reversing is waay easier than ios reversing lol

#

cause all android apps are just java and java can be decompiled

#

@crimson tangle i'd definitely like that haha

crimson tangle May 26, 2020, 5:22 PM

#

Nice! I’ll make one and checkout how I can submit it. I’ve got some cool ideas for a good room

somber crow May 26, 2020, 5:23 PM

#

@crimson tangle https://docs.tryhackme.com/docs/room-creation/room-creation-getting-started

TryHackMe Documentation

Getting Started

crimson tangle May 26, 2020, 5:24 PM

#

Thanks!

wintry slate May 26, 2020, 8:11 PM

#

I noticed there was some chatter about creating a room for bash scripting. Not sure if someone is already working on that but I'd be willing to help if needed.

tacit anvil May 26, 2020, 9:51 PM

#

@crimson tangle I think that would be an amazing room. I'm new to RE and would love to try something different than the typical RE labs. I'm excited for it!

open vine May 26, 2020, 9:53 PM

#

A more structured scripting basics room, all we have currently is 3 tasks that tell you what you need to code it to do

tropic cave May 26, 2020, 10:41 PM

#

@open vine bash scripting?

open vine May 26, 2020, 10:41 PM

#

Preferably, I was referring to the room about Python and bash

tropic cave May 26, 2020, 10:42 PM

#

Gatcha. I'm fairly decent in Python so if the current one isn't up to snuff I could do an updated one

sleek elbow May 26, 2020, 10:43 PM

#

@tropic cave it was released sub 2 months ago lol

#

https://tryhackme.com/room/introtopython

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

tropic cave May 26, 2020, 10:45 PM

#

Oh

#

Welp

#

Then what don't you like about it @open vine

#

I haven't checked it yet

open vine May 26, 2020, 10:46 PM

#

not that one

#

Let me see if I can find it in my rooms

#

https://tryhackme.com/room/scripting

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

tacit anvil May 27, 2020, 5:13 AM

#

@gusty gust Android is opensource.

#

IOS is not.

gusty gust May 27, 2020, 7:07 AM

#

i was talking about app reversing, not the system

simple gust May 27, 2020, 7:35 AM

#

Would a room based on attacking fake satelites be possible? That would be a cool concept.

outer jewel May 27, 2020, 9:16 AM

#

Building on from the new post exploitation room, a persistence room would be cool.

somber crow May 27, 2020, 9:35 AM

#

@outer jewel That's in #641573666353709085 already

#

Got a lot of votes

outer jewel May 27, 2020, 9:47 AM

#

👍

tropic cave May 27, 2020, 11:02 AM

#

@simple gust that would be hard to replicate as I'm sure very few of us know how a satellite works and that sorta falls in black hat territory

karmic raven May 27, 2020, 2:55 PM

#

ehh not really there’s already a ctf for hacking satellites - hack a sat I think it could be a cool idea it would just take a lot of research

karmic peak May 28, 2020, 1:13 PM

#

gotta know how to pentest satellites

#

specially since they're becoming cheaper to launch