room-ideas

[native raptor]

How does that have anything to do with staying safe? 🤔

[tacit anvil]

staying safe from police

i mean realistically if you're doing a pentest, you'd try to do what a regular hacker might do to try and get away with the cybercrime

[light lynx]

"DL/ML in depth" is not one room, if you are good at teaching you could get away with ~200k words 😛

[tacit anvil]

so id love a room that would teach us about that

[tacit anvil]

i had a feeling when i tried dipping into it myself

im playing around with openAI and gpt2

luckily i have a demonic gpu so i can use them without an issue

[light lynx]

You could make an ML room but you'd need some mathematics to go with it. For DL you'd need about 80% of the room to be mathematics 😆

[tacit anvil]

still waiting for their new text-to-image model to be public

i have a lot of AI courses on udemy

[full dove]

@light lynx checkout the Microsoft AI threat model lots of practical examples https://docs.microsoft.com/en-us/security/engineering/failure-modes-in-machine-learning
https://docs.microsoft.com/en-us/security/engineering/threat-modeling-aiml

[lunar plank]

Not necessarily, I think you can explain some models very well or atleast the overview of them without any complex maths that'll scare people away imho

It's the same with networking, if your content breaks down that initial barrier of the whole maths/numbers behind it - you're onto a winner

[light lynx]

using models sure, but optimising models / creating them you need to know maths?

[full dove]

getting memorized information from gpt-2
https://bair.berkeley.edu/blog/2020/12/20/lmmem/

[icy trellis]

They're not in the server anymore

[spare snow]

I am thinking about making a AD labs on tryhackme like Throwback

But, I have a issue that the Server 2019 or Server2016 evaluation is 180days

[native raptor]

@spare snow
A) Networks are currently restricted to being commissioned by TryHackMe -- the most you can do is upload single AD boxes (e.g. a DC and nothing else)
B) You upload Windows boxes without a license. AWS handles the licensing automatically :)

[sharp yacht]

Actually a discord room idea - can you please create #sh-help and #powershell-help ?

[coral ravine]

If you want to ask about powershell help that would be #general or #infosec-general

I wouldn't see the point of having a powershell help channel

[somber crow]

Or #programming for scripting

[left kestrel]

I'm making a room on SOCMINT (OSINT for social media intelligence), was wondering what people would prefer:
1️⃣ - Walkthrough room with in-depth explanations on tools and methods.
2️⃣ - CTF-style teaching the basics of tools/methods needed for the room and then giving you storyline-based challenges.

[lucid quail]

umm since there is already a room on osint i would prefere ctf style more rather than walkthrough 🤔

[lucid quail]

umm actually it is possible to make a network on one vm atleast i think so i dont know if its possible or not but if make use of docker containers running multiple of them on different ports can simulate a network couldn't it?

[karmic raven]

You ever tried putting Windows in docker?

[native raptor]

Yes -- it's possible to do that. There are several rooms already doing that.

But only Linux

[lucid quail]

yup

[native raptor]

Making Windows containers can only be done using Windows, and Docker for Windows works on top of Hyper-V

Which means nested virtualisation

Which means seriously expensive

[lucid quail]

i thinks its possible 🤔 but maybe not the gui only powershellish kinda stuff

[native raptor]

See above messages

Believe me, we've considered this 😆

[lucid quail]

lmao

lol

😂

i believe you

@native raptor also i was curious that does the vms ( rooms) scale automatically or is there a specific limit on amount of resources / active development

[native raptor]

Non-subs get 512Mb of RAM and 1 core. Subs get 1Gb of RAM and 2 cores.
Those are the defaults. Boxes can also be "bumped" to a higher tier individually. For example a lot of the DCs deploy with 4Gb of RAM and 4 cores (I think that's it for cores) across the board. That's an admin level decision though. Most Windows boxes can be boosted to 2Gb on request (i.e. if you're on good terms with the admins and ask nicely). Anything higher than that needs justification.

[lucid quail]

ah thanks for the info that seems a perfect balance and utilisation of resources

[spare snow]

I am developing an AD room for tryhackme can somebody give me some domain name ideas.
I am thinking of amazon.thm
But, the name is nearly like a FAANG company..

[karmic raven]

avoid using real company names typically so we don’t get in trouble

we can use pretty much anything .local, .com, .THM, etc

[spare snow]

I was thinking about some rain forests name like borneo.thm

[coral ravine]

That's not allowed

Nope need to avoid anything covid

[spare snow]

barbeque.thm is it okay

[coral ravine]

Yea that should be ok

[tribal jay]

Hey guys!

Anyone knows how to do some Bluetooth hacking?

It will be great if we had a tryhackme room for it

[cedar echo]

That is a serious pain in the behind.

[cedar echo]

how would that work though?

aside from netowrk dumps

[tough pasture]

does anyone want to work on a room with me?

I've just been working through some advanced privesc on linux, and seen a very cool method

[dense briar]

I would be interested

[magic rune]

WAPT and WAPTX preparation

[cunning thunder]

Check out https://tryhackme.com/module/web-hacking-1

[magic rune]

Thank you I'm done with this one

[magic rune]

I'm guessing WAPT and WAPTX preparation rooms
with sufficient methodology practice and more on intentionally vulnerable web applications?

like as a whole machine

[magic rune]

Mobile Application Penetration Testing rooms

[somber crow]

This doesn't seem like a room idea

[fervent hearth]

Need some help, My exploit seems stuck, anything am doing wrong?

[somber crow]

#room-help

[tacit anvil]

Obfuscation/deobfuscation , how it works, how deobfuscation works.

[native raptor]

I have some payload obfuscation in Wreath, if that's what you mean

[karmic raven]

That’s just not how it works

To my knowledge you can’t do any kind of permissions like that

[spare snow]

I am uploading a Windows Server 2019 machine but its showing an error converting VM check prerequisites

[somber crow]

#site-support

[spare snow]

Is it possible to like backup the server2019 configs using server manager and restoring it on a fresh install of server2019 on legacy boot...

[somber crow]

I've added you to #creators-lounge where you can ask questions and discuss room creation

[honest bluff]

Can I also be added please?

[native raptor]

Done @honest bluff

[storm canyon]

More roles? 👉👈

[glad monolith]

Is there room about steganography?

[fading oak]

several, is there something specific you are looking for

[tacit anvil]

Me too, please

What vpc service you run?

Or server

[compact locust]

Working on a room re-submission after fixing feedback, could a mod be so kind as to drop me in the Creators Lounge ?

[somber crow]

Done

[compact locust]

thank you

[spiral gull]

I’d love to see a few more rooms regarding sub domain enumeration.

[karmic raven]

Sublister

[autumn storm]

a room for getting started with king of the hill for begginers

it will be very cool cause then we can get more people playing

[karmic raven]

not really enough there to make a room IMO

we already have a nice blog post on it

[somber crow]

With foodctf you could automate some of it like the king tracking easily

[spiral frigate]

Hey thm staff,
I just have a little query about my recent room submission i.e. Linux Modules. Let me know whom to talk to regarding this issue.
Thanks😇

[icy trellis]

What issue? And you probably want to talk to Tim.

[spiral frigate]

Nm I just wanted to discuss about what else can I add, some suggestions... So uk.

[icy trellis]

If you have submitted a room, the room testers will review it.

[spiral frigate]

It's a walkthrough room... I added a few bits useful then I got rejected stating, "it's a great room, just add a little more to xxxxxx task"
I felt like there's not much I can add to that... I just wanna clarify what they meant in the feedback

[icy trellis]

May I ask who submitted that feedback?

[spiral frigate]

It's just written TryHackMe staff. Not a name... When I saw the room users... I kinda doubted that it must be someone named zmiller2020

[icy trellis]

Uhh, lemme get Tim to review this. @cunning thunder when you’re available would you be able to offer this user some assistance please? :)

[spiral frigate]

Sure... But I respect to whomsoever gave that feedback... I want to improve if that guy felt so... So lemme knw what else can I add

[icy trellis]

No offence to the room testers but I do think “add more to x task” is very vague and unfair.

Just want to make your life easier

[spiral frigate]

😅well I think they mean it because they want the room to do get more education to others... I mean whatever it is... On the other side it will benefit the users doing that room

[coral ravine]

@short latch ^^

[short latch]

I just got off work, let me get settled in and I'll explain what I mean

So these are both my comments, I want to apologize by not signing off on them, I'm really sorry for that. I absolutely love the additions you made to the room. My comment was particularly directed to the xargs section. The way you broke down a command with awk was phenomenal.

@spiral frigate tagging you so you can see.

As far as I see, you seem to have made additional changes to the room since my comments. I really, REALLY love this room and I feel that it being added to THM is a benefit and a net-positive to the site.

I definitely want to apologize if I did not properly convey what I meant.

[cunning thunder]

I see the room has been accepted, that's great news! @spiral frigate @short latch I'll have a look-over on the room today. The room overall looks very informative! 👍

[short latch]

Yeah its seriously a good one.

[lunar sage]

jabba

[spiral frigate]

Omg it's nothing to apologise sir, infact I feel obliged that you learnt somethings on your own. Thank you again for your suggested improvements😇

[spiral frigate]

Thanks again💗

[short latch]

Curious, is this your first room?

Its well put together.

[spiral frigate]

Yeps

[short latch]

Well dang, if this is your first one I can't wait to see what else you create. You've got this. 🙂

[spiral frigate]

Yeaa I kinda planned it out for a month so uk.

[spiral frigate]

I am gonna create a challenge room, I got some idea on that one... But will prolly wait as I have my college exams on the way.

[short latch]

Makes sense. Good luck on your exams.

[spiral frigate]

Thanks❣️

[sharp relic]

hi

[coral ravine]

Hey

[cedar echo]

Yo

[icy trellis]

Done

[tacit anvil]

Is there a Bug Hunters Methodology room ?

Would love to have one xD

[light lynx]

can i suggest a resource? The XSS rat is great and a good friend of mine 😄

[tacit anvil]

Is he a YouTuber?

@light lynx if you had to choose between Pentesting and Programming which would you choose 🤔

[light lynx]

yess

[light lynx]

neither, compsci is for me 🙂

pentesting & programming are two subsets of computer science, i believe that it's all the same 🙂

programming is about creation, and writing algorithms. Pentesting is about exploiting those algorithms, it's the same but different 😄

[tacit anvil]

I know that's where I'm stuck! I don't know which one to solely focus on

Do I want to build my own apps and exploits or do I want to do the exploiting lol

[somber crow]

Don't solely focus on either

[native raptor]

Do both

It's the only way you'll get better at either

They're two sides of the same coin. A hacker who can't develop will never be more than mediocre. A developer who can't hack (or at least think like a hacker) will leave vulnerabilities lying around.

[tacit anvil]

Sounds good thank u!!!

I will continue on my Cyber Security path and pick up programming on the side.

[light lynx]

its all the same 🙂

whether you build, or you exploit -- you are learning the same skills

just applied differently 😄

[tacit anvil]

That last part you said just clarified it for me to it's entirety 🙂

[tidal apex]

Visual Basic room for maldoc analysis

[coral ravine]

Remnux is a good room for that

[cloud pebble]

anybody looking for an azure sentinel room? I'm starting to work on one. Entry level into how to configure it, with a potential to follow up with a room around kusto

[lunar plank]

We have some SIEM tool-focused rooms in development rn but I can't see them being Azure Sentinel & Kusto

They'd be super cool additions!

Is there any chance a mod could add hackasaurus#3698 to #creators-lounge please? If you have any queries/concerns about the process or need anything extra from us as staff to get these rooms setup the best place to ask is there (:

Would love to see those rooms imho

@languid ibex by any chance as you're online?

[languid ibex]

sure

give me a second

[lunar plank]

thanks!!!!

[languid ibex]

done

[lunar plank]

❤️

[odd lagoon]

Well, I would like to see in all rooms and/or in order tool the points which are reward!!! So, I will able to pick the most award rooms first if ranking it's my main objective! Regards, Ilias.

[tacit anvil]

What cloud service rooms use?

[cedar echo]

aws

[somber crow]

Please do not ask the same question across multiple channels like that

[tacit anvil]

Sorry

[tacit anvil]

Thanks

[topaz marlin]

Is this the room that would be used to suggest improvements on current rooms?

[somber crow]

Not really

#room-bugs

[topaz marlin]

its not really a bug though the room that im on has a lot of good information but approaches it from the end to beginnigng would that still go there?

[somber crow]

Probably?

[topaz marlin]

okay il try and see xD

[rugged zinc]

Sounds like my experience with the RUSTSCAN room

[topaz marlin]

@rugged zinc yea its not really a big issue more that it would make it easy for others to learn in the future

[fading oak]

can I get added to creators-lounge, working on a room and want to try to get some ideas for a priv escalation

[native raptor]

Done

[fading oak]

thanks

[past wren]

Basics of OOP?

[karmic raven]

Just remember that at it’s core this is a cybersecurity site we need to tie everything into security somehow

[sudden garnet]

and i oop

[light lynx]

Oop you did it again.....

[tacit anvil]

maybe role student and room class and one teacher who teach program language..

[somber crow]

Can you clarify what you mean please? @tacit anvil

[tacit anvil]

my english not good so i will try

i mean good programer in this server will be "teacher"
like open a room that called class and every week he will learn new things in program language

[somber crow]

That doesn't sound feasible for a tryhackme room really.

[exotic shell]

I want to make a Magicians box. From the TV series The Magicians

Any ideas?

[karmic raven]

@exotic shell copyright

[exotic shell]

They have one?

Oh wait

I understand

[somber crow]

Whatever material you use, it needs to be usable for commercial use

[exotic shell]

How do you go about making a box? Just downloading virtual box and making it

[somber crow]

Licensed for commercial use

[tender spoke]

Why are Cyber Defence Rooms so low value in points?

Some take 1hour+ to complete properly and reward like 60 points

[cedar echo]

Most ctf rooms are like that as well

[somber crow]

Because they're walkthrough rooms and the maon like purpose of THM isn't points

[spare snow]

Hey is phineas and ferb copyrighted

I was thinking on a box with phineas and ferb theme

[somber crow]

Yes, by Disney

Basically any existing TV show etc will be copyrighted

[spare snow]

Ahh damn

Means I cant make box with the characters name ??

[somber crow]

Copyright is complicated

[trim musk]

maybe a dark-mode for tryhackme would be great !?

[somber crow]

This channel is for ideas for rooms

Try the feedback form on the site

[trim musk]

ah ty

[spring seal]

A room on using the developer tools in your browser

[somber crow]

I think that's in #641573666353709085

[spring seal]

so it is

[sterile prism]

a room where you are prompted to take a sip/shot and you find them like flags

[karmic raven]

while fun I see many issues with that but I dunno

[native raptor]

It's a child-safe environment, Sooooo, no drinking games in rooms

[dusty birch]

a room where you have to hack to get the real room , and then in the real room , there will be any general stuff . i mean just like HTB has a login page which is supposed to be hacked to get youself in , just like that why not have a room which is supposed to be hacked to get the real room

[native raptor]

Because... why?

That's not really how TryHackMe works. It's not one big challenge, it's lots of little training modules. Some are challenges, yes, some are walkthroughs.
It would take a fundamental change in the ethos of the company (not to mention the actual code in the site), to make that happen

[hazy kraken]

Hello, this is my first time here.
I think a room on VPN technologies and exploitation would be nice .

[pulsar gorge]

Is there an intro to .NET room yet? I was thinking of putting together one

[native raptor]

There is not @pulsar gorge. I'm sure it would be appreciated though 😁

[pulsar gorge]

Hmm or maybe an ETW room

[cedar echo]

ETW?

[pulsar gorge]

Event tracing for windows

It's how a lot of edr does monitoring now a days

[cedar echo]

👍

[pulsar gorge]

What would y'all want to see in a .NET room?

[light lynx]

Well, the first task should explain what it is and its uses 😄

[feral reef]

.net and maybe .net core as well

[pulsar gorge]

theoretically those are the same now 🤣

[earnest mountain]

Maybe a room abouth smbclient or sqlmap?

[cedar echo]

Should be some of those already

[feral reef]

ah, i haven't kept up with the development for quite some time so you might be right. As far as i aware .net was for windows development and .net core was for cross platform development.

The reason why i know about it this way was because of the powershell 5/6/7 where 6 was the core version

[tacit anvil]

experience is more important than points

[fading oak]

points vary between walkthrough rooms and challenge rooms

[tacit anvil]

Some rooms which leverages common applications like word, or excel, with macro’s.. or some rooms in which you can practice pivoting

[feral reef]

Throwback, HoloLive, Wrath, 3 networks with pivoting at a decent price. There are also some docker based rooms where pivoting is required 🙂

[tacit anvil]

@feral reef thanks for the info, will check it out..

[feral reef]

both HoloLive and Wrath are not yet available. HoloLive is going to be free for subscribers and Wrath free for everyone. Is my understanding correct @native raptor ?

[native raptor]

Pretty much, although it may have a couple of stipulations attached (e.g. subs might get smaller numbers in the network, or there might be a streak count required to access). That hasn't quite been decided yet 🙂

[feral reef]

Not sure if i'm being an idiot or not, but do we have a list of all the boxes that require pivoting?

[native raptor]

Not that I know of. Internal, For Business Reasons, Gamezone, Year of the Fox, Wreath, Holo, Throwback, Python Playground

That's off the top of my head

[pulsar gorge]

As of the new release in November there is only .NET core. However, I have been told by some people in the know that a lot of the .NET Framework differences will remain simply because it's too hard to rip out.

According to Microsoft though there is officially only a single .NET branch now

[tacit anvil]

When are these great new ‘network boxes’ going live?

[native raptor]

We were thinking about making a room testers lookup table for it though @feral reef

[feral reef]

there are these ones too:

could we possibly add pivot as a tag to the rooms you said

[native raptor]

Both Holo and Wreath are in testing just now. Wreath shouldn't take long. Holo, heck knows 😆

[native raptor]

Tempus Fugit too

[feral reef]

yeah, i know that a few of you have editor permissions would it be a good suggestion to have it added

[native raptor]

Potentially, although I'm hesitant to add tags to challenges that the creators didn't choose -- just in case they did it deliberately

Like, if they want to keep it secret

Theseus, for example

That's another pivoting one though

[feral reef]

that makes sense, possibly talk to the user or something?

[native raptor]

Yeah, potentially

[tacit anvil]

Cool! Its great like pivoting and exploring network boxes, as its so realistic and you learn so much of it..

[native raptor]

Pivoting is one of the three main teaching points of Wreath, so there's a lot of detail in it. 10-11 tasks worth

[feral reef]

oh damn, i didn't even know about that. I haven't been working with Microsoft products for the last 2 years and all these things you say are new to me lololol

[feral reef]

if you need a hand with that, i am happy to get in touch with the users

[tacit anvil]

Nice, looking forward checking this out!

[native raptor]

By all means ask 'em, yep 🙂

[feral reef]

mind dropping the list again over DM so we can keep track of the people that have been contacted?

i got some stuff to work on now and will get back to it once i'm done with work in 2 h

[native raptor]

Aye, I'll drop the ones I can remember

[karmic raven]

We’re waiting on one more section to push through some more of the testers

[native raptor]

Close then

This is gonna be neck and neck. Which one releases first 😁

[tacit anvil]

👏

[karmic raven]

It’s fine you can live in our shadow

[native raptor]

Easy stuff goes down better 🤷‍♂️

And I've covered a much wider range of stuff

[tacit anvil]

@native raptor are there any ‘bypassing protection’ rooms? Like practice beating defender or ids/ips stuff?

[karmic raven]

nah

[somber crow]

Wreath lmao

[native raptor]

I've got some easy AV evasion in Wreath

[karmic raven]

holo sits in background

[native raptor]

But that stuff changes so quickly that it's impossible to do anything in depth

[tacit anvil]

Ah yeah true, thats like daily changes..okay cool, thanks, looking forward to these new networks..

[cunning thunder]

Check out the Cyber Defence learning pathway, it outlines what's coming up for Blue Team oriented rooms (besides Networks). https://tryhackme.com/path-action/blueteam/join

[tacit anvil]

Yeah seen this path, looks promising! Looking forward for these rooms to launch

[dusty birch]

okay , thankz for a detailed exp 😄

[odd lagoon]

Suggestion to develop in site. You can make compare per members for instance head to head for rooms (for ranking or to follow progression of friend ).

[light lynx]

you can already do that if you're in the top 10 or find your friend on the leaderboard?

[cunning thunder]

Invite your friends on the Dashboard https://tryhackme.com/dashboard

[odd lagoon]

really? I'm 4th in my country and I want to see which rooms the 1st complete compared to me (Head to head). Is that possible? (obvious we are not friends )

[cunning thunder]

That's not a room idea though.

[odd lagoon]

yes that's why i say suggestion to site for development purpose 😛

[cunning thunder]

This channel is for room ideas though. 🙂

[odd lagoon]

I didn't find something for site and seems the only related to suggests an idea 😛

[coral ravine]

https://tryhackme.com/feedback

There is a feedback forum if you have any ideas on how the platform can improve

[odd lagoon]

ok 👍

[reef crypt]

Hi. Anyone else interested in reversing through gdb?

A room with something like that would be kind of cool

[spring seal]

There already the Radare2 room

[reef crypt]

Haven't checked it out, thanks!

[spring seal]

its pretty good

[spiral frigate]

No offense but gdb >>>>>>>>>> r2

[spring seal]

i bow to your superior knowledge, i've never really used gdb

[lunar plank]

Everyone picks their poison (:

[final sun]

Well, possible but once the room making system start supporting the markdown, sure enough.

[reef crypt]

No idea what you mean but yeah, let's see what happens

[reef crypt]

Never used R2 here, and tried to use others like ida etc but just got used to gdb, I like it

The manuals are gigantic though

[spring seal]

least you get a manual 🙂

[final sun]

r2 has it's own perks

[spring seal]

A room running the PacVim game designed to teach people vim, but with a twist! we reprogram it so its now how long you stay in, but how fast you can get out! the higher your tryhackme score, the more control characters are disabled.

[light lynx]

You had me until:

the higher your tryhackme score, the more control characters are disabled.
😆

[torn kettle]

Sorry to bug you all, in a windows VM when upload, is RDP port open a mandatory requirment?

Trying to build something thats is harder to enumerate

[native raptor]

For Windows you must have some way to access the machine left open. @lunar plank I assume WinRM would be equally suitable?

No, for now it needs RDP open @torn kettle

Maybe in the future WinRM will be fine

[spring seal]

well, the real idea was just a room running PacVim, but i realised it could just run in the attack box anyway.

[torn kettle]

Oh dear. Alright, I appericate you assistance!

[native raptor]

Not at all 🙂

[spring seal]

question for you bee, someone was asking me about their streak earlier, i know you can fix i but i didn't know if i should tell them to email support, or contact you personally..... and its not like its a big problem i'm happy just to say 'theres probably nothing that can be done but try .....'

[native raptor]

Tell 'em to contact support 🙂

[spring seal]

sound good, my policy will be contact support 'if your lucky, maybe they can help'

[karmic raven]

Why? I’m pretty sure Andrez and them have multiple windows machines without anything open?

[native raptor]

Licensing. If RDP isn't open then CMN/Skidy/whoever can't run the licensing script, which means not only do the boxes not work very well, we could also get in trouble from Microsoft.

And yeah, one of the Windcorp boxes doesn't have it open, and trust me that was a pain in the rear end to license 😆

[spring seal]

o that makes sense

[lunar plank]

I will give it a try via winrm and "quietening" the licensing fixes / making it more CLI friendly

[spring seal]

i guess we never think of windows having to have a public facing port open for licensing

[karmic raven]

CMN does kekw

petition to change CMNs title to professional licenser

[spring seal]

and a site license for 333000 users must be a killer!

[karmic raven]

Nah AWS handles all that makes it easy but the Windows boxes have been misbehaving lately

[native raptor]

For as long as anyone can remember

[karmic raven]

They were fine when I first came here

[spring seal]

you brought them with youi!

its ike the titanic, it was fine when i boarded

[karmic raven]

I scared the windows with my superior active directory

[spring seal]

light will set you free

[karmic raven]

@native raptor you think I can completely rebrand myself as light and no one will ever know who I truly am?

[native raptor]

i.e. you f'd up so badly that you broke everything

[native raptor]

No

[karmic raven]

I mean it did all start when throwback was in dev so I’d say how f’d up throwback is broke it

[native raptor]

I blame you for that

[lunar plank]

Hey side note -- does anyone have a winrm box uploaded

[karmic raven]

I think my reemaryland10gobrrv2 box might

[native raptor]

Yeah, I've definitely got one or two

Go against YOTO

[karmic raven]

@native raptor I hope you know this was named after you

[native raptor]

What is it...

[karmic raven]

When we called you maryland instead of muirland

[spring seal]

that doesn't even make sense

markl;and make cookies

theres no maryland oracle

[light lynx]

also hi @spring seal i see u on twitter a lot :))

[spring seal]

you better not be breating throwback before i buy it

[spring seal]

I know, i'm sorry for the confusion, I did try to ask for advise on what to tell people about extensions

[karmic raven]

I built it I can do what I want

[lunar plank]

hi I've been playing around with this (licensing patches that we (me) gotta do) out of curiosity are you going to be using standard desktop or just the standard w/ no gui, etc

[lunar plank]

Conclusion: I've got all the stuff that I need to do to work over winrm (so you don't need RDP enabled...just winrm at least pls 🥺 ) @torn kettle

[urban sand]

Hello. I don't know if this has been suggested before but maybe could there be a room about noSQLI?

[sudden garnet]

there's a couple challenges involving it but no walkthrough at the moment

[tacit anvil]

It would be nice to have reset account option imo

[somber crow]

#feedback-and-ideas the form there

This channel is for suggesting rooms, rather that site feature suggestions

[tacit anvil]

Oke thanks

[fast nymph]

Arduino and electronics >.>

[torn kettle]

Sorry for the late feedback. This machine I was working on was a full experience installation although I wanted to try to the GUI less version working for faster transfer from me to other people if I want to maintain the secrecy of the box (ctfs, personalized 1v1, private matches.)
What ever does end up happening, thanks for reaching out like you did. Shows that try hack me cares.

[simple gust]

Room idea: Elevator breaks down > you're stuck inside > you have just enough of a gap in the door for your laptop to grab the company wifi > it's not enough to connect to the mail server but you can reach the cached intranet page > you find a vuln that lets you deface the home page for the intranet and there is a service that checks for keywords in a marquee like "HELP. STUCK IN ELEVATOR" > you get rescued (given final flag) > you win the internet.

[spiral frigate]

wt... 🤣

[simple gust]

I was feeling a way, when I wrote that

[coral ravine]

Too much shodan Varg?

[native raptor]

Wanna collab?

[simple gust]

I thought you’d never ask!

[native raptor]

You design website and write the tasks, I'll implement and upload?

[simple gust]

Done and done

[native raptor]

Could even make it a nice simple webapp hacking tutorial?

[simple gust]

Something even I could potentially do, yes :)

[native raptor]

Awesome. Lemme know what kind of vulnerability you want and we can get cracking 😁

I know James has an XSS room in the works, so probably not that

[simple gust]

I’ll give it some thought today. Frustrating but fun is the aim.

[tough pasture]

any scope for a web injection walkthrough room?

sql, ldap, nosql, maybe ssti (although that's been covered a lot)

with some more advanced techniques covered such as manual blind sql etc.

I know there's a few rooms which do SQL, so was just wondering if there was space for another slightly broader one?

[somber crow]

I haven't seen an SSTI walkthrough room yet.

I know someone's making one.

[graceful locust]

There is a room that has a small part on it, it also has JWT and... XXE I think?

[coral ravine]

Yep zth:Obscure vulns

[tough pasture]

Ah right

Well, I'd be very happy to help create an SSTI walkthrough room if the person creating it right now is?

[dense briar]

unless its comissioned

[modest trail]

ETA on that room submission is 2 weeks or so. Very close to complete

Also sorry didn’t realise that was hours ago

[somber crow]

This channel doesn't move too fast, but @tough pasture ^ it's nearly ready

[tough pasture]

Ahh right, optional is working on it, I'm sure he's got it under wraps haha

thanks James for pointing that one out

@modest trail if you want anyone to test it let me know :)

[modest trail]

Sweet will give you a shout once it's finally polished up a bit and ready to release. Just need to finish the webapps for it and all should be ready 😄 Mind if I DM once it's done and ready?

[tough pasture]

Yeah of course, it would be great to check it out 😃

[hazy kraken]

It would be nice to have room(s) on advanced web attacks like on oauth, oracle attacks, second order sqli, ...
Sorry if this is not the proper channel to ask that

[hazy kraken]

@mystic badge does bash have the suid bit set to 1?

[somber crow]

This isn't a help channel @late parrot

[tawdry ravine]

need a room to go to celebrate licking a task

[somber crow]

??

[karmic raven]

You mean like a feedback channel for room creators

we used to have one

[tacit anvil]

it would be cool if there was a room for teaching static analysis of code and semgrep (https://semgrep.dev/)

[native raptor]

No semgrep, but I've got some code analysis in the Wreath network, when it comes out

[cedar echo]

Hey this is an interesting tool

I mean we use SonarQube at work, but this could be interesting offline

[sharp bough]

binexp stack overflow room

[native raptor]

@sharp bough You mean like https://tryhackme.com/room/bufferoverflowprep?..

Or any of the other BoF rooms

[sharp bough]

I mean a tutorial room for that topic

[native raptor]

You mean, like the first task in that room?

Although yes, I agree, a full tutorial on buffer overflows would be good

I believe Robin had something in the works for that. @pine olive maybe you'd like to touch base with him and see what's up there?

[sharp bough]

O.o

Nice 😄

[pine olive]

https://tryhackme.com/room/bof1 is also pretty good in terms of explaining the whole stack architecture, and about hand crafting an exploit. Though I found the windows bofs easier, this sure informed my understanding of bofs before that.

[pine olive]

I'll see what robin's up to 😄 defo in my topics of interest

[lament star]

interesting I messed around with Brakeman a while back 👀

[tawdry ravine]

a room to submit and evaluate essays

[native raptor]

And who, pray tell, is going to read through all the essays to evaluate them?

[tawdry ravine]

anyone who wants to

[native raptor]

Crowdsource it?

[tawdry ravine]

tbh i got the idea wrong. i thought this was for room ideas on the discord

but its room ideas on the website

[native raptor]

Correct

Discord "Rooms" are generally called "channels"

[cloud pebble]

It would be nice to have a section on the rooms that links to "similar rooms". For instance, if I complete a stego room and want to do more stego. A separate tab, within that room, that is auto-populated with similar rooms based on their tags would be really helpful for continuing practice.

[storm canyon]

Use search bar to search for stego?

[native raptor]

Put that in the feedback form on the site?

[cloud pebble]

yeah, that works, but this is more of a conveniance request right. maybe i don't remember the tag, or know all the tags that are offered, but i do remember a room that i liked

i can then just go to that room and pull more similar rooms to it

[cloud pebble]

for sure. just sent it through!

[native raptor]

Awesome

[dusty gyro]

might be a good idea to add rooms to folders, to allow for quick reference. I find some rooms really useful and would be good to allocate them to something like a "saved rooms" folder.

[native raptor]

Again, if you want to put that into the site feedback form, it will get reviewed there @dusty gyro 🙂

[cedar echo]

I added a similar feedback this morning

I hope it gets implemented

[cunning thunder]

An available option is: Join the ones that you like, and go to your Profile > My Rooms to see them listed in the order that you joined them. 🙂 If you want to keep the list tidy and not cluttered with completed rooms, leave the rooms that you have completed (or use the Filter completed option). That makes a Saved Rooms list. 🙂

[cedar echo]

I may be missing something but I don't see a "my rooms"

wait I'm dumb

I was not looking in the right place

[dusty gyro]

Thank you for the work around I'll try and do that 👍

[tough pasture]

@somber crow do you mind if I pm? it's just regarding rooms that have been done before, and you know the rooms better than anyone I know

[tacit anvil]

Heyy! It would be awesome if there would be a room about 'how to write reports' or 'how to document what we do efficiently and correctly' 🙂

[native raptor]

There's a task on that in Wreath

[tacit anvil]

O, good to know, thank you 🙂 I guess it will take me a while to get there.

[native raptor]

It's not released yet. Still in testing 🙂

[tacit anvil]

I am on defensive path now.

A, ok, hahha, but still, it is good to know that it will be on thm 🙂

[magic rune]

Web Fundamentals Extreme for WAPTX preparation

[karmic raven]

ok

so

You want us to make a course

For a course

https://tenor.com/view/yes-jack-black-nod-nodding-approve-gif-5561693

[cedar echo]

There are rooms on most of those subjects already

[tough pasture]

have we got any rooms on LDAP injections, or similar?

[magic rune]

I mean like something like a prep for the course
the Web fundamentals helped me alot in WAPT
so I was thinking an advanced version of that one

[tacit anvil]

Would a room about phreaking ever be a possibility? There probably wouldn't be any practical tasks but i think it would be cool, as hacking was born from phreaking.

[coral ravine]

That most likely wouldn't be accepted

[somber crow]

Why not? Phone phreaking has been patched everywhere and it's a super interesting topic

Can even integrate it with VoIP for some fun

[coral ravine]

Oh I didn't know it's been patched everywhere I didn't exactly know what that was til I googled it and thought it would be borderline gray hat as it says to make free long distance calls

Seems like a pretty cool idea to have a room on

[tacit anvil]

I think it would be a very interesting room. It was the first form of 'hacking' if i am correct

[somber crow]

It's a thing that'd be costing telco's money. They're gonna fix that because $$$$

[coral ravine]

Yea that makes sense

[fluid crystal]

Is there a room with an open JDWP(Java Debug Wire) port?

[tacit anvil]

Hi, is there any room fron practising port forwarding?

[dense briar]

dont think so but i think its in a few regular challenge rooms as part of the box

[somber crow]

Wreath will. Soooooon.

[novel quail]

Try baked pie

[tacit anvil]

nice thx

[tacit anvil]

Guys what do you think about rooms wich teach you how to write hacking tools with python&bash? It would be cool 🤷‍♂️

[tacit anvil]

New room idea 😁

[cedar echo]

there's a couple rooms on python and bash

the python one is pretty decent

intro: https://tryhackme.com/room/introtopython

https://tryhackme.com/room/scripting

challenge room there

[teal mortar]

It would be great to have a room based on Active Countermeasures threat hunting course or just a room based on the tool Rita. I just attended the workshop last day. 😅

[shy coral]

A log poisoning basics room or sumn

[modest trail]

Pretty sure the LFI room covers log poisoning

[cedar echo]

It does

[karmic raven]

@native raptor dialup noises?

[karmic plume]

send please a rooms privates

[coral ravine]

huh?

[karmic plume]

if you can send me private rooms, like for example ctf100

[coral ravine]

You can join them a /jr/ link

[karmic plume]

yo have anyone?

[somber crow]

You cannot use that command here. #bot-commands and verify. You also don't get points from private rooms.

[karmic plume]

Yes I know, but I would be interested in solving a private room

[somber crow]

Why?

[karmic plume]

every day you learn something new, right?

[somber crow]

You can do that with public rooms.

[karmic plume]

also.

[somber crow]

Private rooms aren't tested. There's over 300 public rooms to choose from.

[vernal delta]

Would a room about home router security befit THM? I know it's often the weakest point of any home network, and I'd think most members would benefit from learning how to secure their stuff. I'm thinking of a defense oriented room giving us tips and tools on how to interact with and configure generic modems and routing devices. Would that be within the scope of the site?

[somber crow]

Can you make it interactive?

[vernal delta]

To be clear, I'm not qualified to make the room, but don't think it has to be interactive to be informative and useful, like some other intro to networking rooms.

Now if it's possible to deploy and connect to a virtual router-type box, enumerate its services, and interact with it I would find that very interesting, but I can't tell if it's possible

[somber crow]

For the most part, rooms should be interactive. Rather than just quizzes on info etc.

[karmic raven]

ahhh

We could do something with PfSense but really it’s going to be hard to make a room about

This is also not a huge topic and can really be addressed in a paragraph or two of a blog post which plenty are already out there

[sudden garnet]

pfsense could be a huge topic though

[somber crow]

You can also emulate a home router image but IDK the licensing

[karmic raven]

It’s fairly straight forward and it’s a GUI. Trying to make a GUI room is a pain

[karmic raven]

Spooky yeeted firmware for a room I would assume same thing applies?

[vernal delta]

I'd have a lot of stupid questions to ask but don't want to bother y'all, I just imagined it'd be fun for a room to present itself in reverse from what we usually do. As a walkthrough it deploys unpatched and unsafe, but we'd have to secure it bit by bit, do software updates, modifying the gateway's default address, shutting down unnecessary ports, or out-of-the-box public facing samba shares and whatever other nightmares I can't think of, so that when the room's done we've made it better.

[tough pasture]

oo, that's a fun idea

so one for like patching a koth machine?

it's very interesting to dive around stuff config files, and quite cool seeing vulnerable services being patched.

[cedar echo]

If it's a web based interface it shouldn't be too hard

[tacit anvil]

This would be good on a phreaking room

[spiral frigate]

A docker room escaping another docker container built on it

[cedar echo]

how would that be different from a regular escape?

[spiral frigate]

Oh no I thought it would be confusing... Like "I just escaped the docker container why am I not getting the flag... Is that a rabbit hole?? Arghh I don't wanna solve room any more, let's go to room bugs and report for this as bug." May be their first rxn

Just an idea... For practicing, like if got into this in a real world situation.

[native raptor]

@spiral frigate if you mean nested docker containers, you're never going to see that in the real world -- it's absolutely horrible practice.

Docker container inside a VM maybe, but AWS won't let us do nested virtualisation, and VM escapes are very, very rare anyway

[spiral frigate]

Ahh, I see... alright 👍

[cedar echo]

yeah don't nest docker containers

[stray fulcrum]

VM escapes are rare but do you have any statistics about cross-VM-exfil in practice? e.g. exfiltrating an SSH/TLS private key from another VM on the same host via Spectre or shared memory or whatever

Docker in VMs is pretty standard though for self hosted solution (if you don't have the manpower for a Kubernetes/OpenShift cluster, you'll just install an ESXi, out VMs onto it and run Docker inside)

[cedar echo]

I think escaping the VM sandbox itself is very rare

cross-VM would be the same unless there's a network linking them

to escape Docker, you can abuse OS-level bugs

or misconfigurations of the sandbox

[fading oak]

so abusive

[icy trellis]

@fading oak ?

[cedar echo]

probably referring to OS level bugs andéor misconfigurations

nothing to see here, move along 🙂

[fading oak]

true, hydra was using abuse a lot

[coral ravine]

what?

[thorny talon]

nothing!!

[coral ravine]

...

[thorny talon]

i realised that stuff doesnt happen here

[stray fulcrum]

Huh, dropped just today: discovery of the first exfil of /etc/shadow of another VM via Spectre: https://twitter.com/thegrugq/status/1366567688575668225?s=20

thaddeus e. grugq (@thegrugq)

Congrats to @campuscodi on his new role at @TheRecord, @RecordedFuture ‘s media outlet. Looking forward to good things! https://t.co/mKm5fwQPgs

Twitter · Mar 2, 2021, 1:55 AM

[cedar echo]

Oh spectre. Surely that's all been patched by now

Cross VM can abuse hardware bugs too

[tacit anvil]

SELinux room

[scarlet solstice]

Is it possible to have more python learning rooms (cybersecurity related)? I learned better with THM, rather than watching youtube or reading through endless post tutorials.

[lethal goblet]

Same like having rooms on libraries related on sockets os pwntools and much more....

[scarlet solstice]

This sounds like a selfish request, but I think I will not be the only one who will enjoy learning and benefit from those security/hacking related libraries rooms.

[lethal goblet]

Wdym

[scarlet solstice]

just putting an idea for more python related rooms

[lethal goblet]

Fine...I'm also putting my idea ....the decision is upto thm...and there is nothing sounds as selfish request as understanding about sockets and os is beneficial ...

[midnight reef]

Pwntools docs are maginfied to their best as in u can just read the docs 🤷🙇

Same as in for socket there's a lotta resources layin around 🙇

[scarlet solstice]

wow thanks for pointing that out. Now i don't know why i am spending hours to learn and practice hacking/security related stuff on THM everyday.

[scarlet solstice]

What I am trying say there is that there are introductory room materials, which really helped beginners to get taste of the areas whatever they are studying, but there is no the next level stuff. I could be wrong in this though. I have been on THM for only less than a month.

[tacit anvil]

Add auto terminate as an option in rooms 🙂

[somber crow]

It's been discussed before and turned down

[tacit anvil]

reep

[idle knoll]

I'm very new to thm, so I haven't really deep dived into available boxes; therefore there might already be one or two. but maybe an ICS box? both offense and defense

[coral ravine]

There is already an ICS

let me quickly get the link

https://tryhackme.com/room/attackingics1

[hollow vault]

Hi everyone. What do you think about a room that explains port redirection and pivoting?

[cedar echo]

Wreath will probably have some

[hollow vault]

Yup, but I mean a dedicated room that explains the various methods and concepts in-depth

[cedar echo]

Wreath is an upcoming free network

But feel free to make a walkthrough room

[somber crow]

Wreath guides you through it

[cedar echo]

Out soon ™️

[hollow vault]

Got it 👌

[tacit anvil]

A history room!,,echo

[tired path]

A room featuring weaknesses in ssl and tls (POODLE, CRIME, BEAST), basically all the stuff testssl or sslyze report with an actual exploit to abuse the weaknesses.

[hardy tartan]

A room about different types of VPN's

[subtle grove]

hi

[pseudo patio]

Hi

I am new here

I can't join voice channels

[somber crow]

This channel is for suggesting tryhackme rooms.
In order to join voice you need to verify with the bot

[pseudo patio]

How can I verify?

[sudden garnet]

!docs verify

[soft hamlet]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[tough pasture]

any boot2root machines that use redis?

[somber crow]

Res

[storm canyon]

Sub only 😦

[dim cape]

Do you guys have a room for Man in the middle attack?

[mellow cosmos]

closest thing is borderlands, although might not be exactly what you are thinking

more of an intercept traffic thing

[dense briar]

postman on hackthebox

[spring hawk]

This may have been suggested before but a Linux+ Learning path or at least a more robust linux fundamentals room/path would be cool. More basic then lots of the paths but would be really good for beginners. I had to supplement THM for the linux stuff which was fine but would have loved some additional Linux stuff on THM too.

[tough pasture]

Yup, that's being rebooted by CMN

he was talking about it earlier today

if you catch him in a VC, he could elaborate on it I guess

he said there'd be ~5/6 rooms in it, with more detailed content I believe

[karmic raven]

This has already been discussed greatly in depth and honestly at this point I have no clue what the conclusion was but here is what I do know, we’re a hacking site, there’s already a bunch of options out there for Linux.

did he mention that today

I don’t even know at this point, we have a lot happening all at once

[tough pasture]

yup, like an hour ago or something like that

just after his talk

[merry yacht]

you know what would be cool?
a hacking escape room
you need to use sudo, export and more to get your way out

[coral ravine]

You mean like a container?

Because there are quite a few of them

[somber crow]

I think they just mean a themed room

So we have a room on Docker escapes, but maybe one on lxd and podman?

[tacit anvil]

For April fools make a room that is supposed to be really easy but make it near Inpossible to hack

[somber crow]

That just sounds mean

[tacit anvil]

April fools

[somber crow]

Not much of an april fool's

[tacit anvil]

Someone please make it anyway 😂

[somber crow]

It wouldn't get past the testing team.

[tacit anvil]

Aw

[lunar plank]

It's a funny themed idea but it'll very quickly expire in the long run

it's a lot of effort for both creator & room tester for it to be purely for a day event right

[karmic raven]

sounds like year of the owl @native raptor

I have an idea

but I dont know if it is even technically possible

Index with ADS over a browser

I dont know how the web server would respond to ADS

[subtle grove]

hi

[cedar echo]

I'm assuming poorly

[little jackal]

We definitely need more OSINT rooms!

[native raptor]

If you have a good idea for one, why not implement it? 🙂

Always great seeing more community content on the site

[little jackal]

I was just looking into how to do that. I didn't know I could make my own.

I just might.

[cunning thunder]

https://tryhackme.com/develop-rooms 🥳

[winter flame]

sherlock && phoneinfoga

[left kestrel]

You'll have your wish soon 😄

[left kestrel]

What would you like to see in a room like that, format-wise? I could totally see a place for phoneinfoga in my next room 😄

[icy trellis]

Why?

[tacit anvil]

creepy

[coral ravine]

Due to a lot of black hat stuff on the darkweb, this will not go through the testing stage

[sudden garnet]

room on onion routing? implementation, pros/cons?

[coral ravine]

That could be a pretty good idea

[karmic raven]

We already have a room on tor

[sturdy gust]

i think it would be cool if we had a room about Sherlock, u know the BBC tv show

[karmic raven]

Copyright

[somber crow]

I think even the original source material is still protected in weird ways

[dim gulch]

Im not knowledgable enough about making a room - I do have an idea about Windows Deployment Service tho

[noble fox]

you can read blog on making rooms on thm or watch darkstar talk or john hammond video for room creation

[sturdy gust]

Or maybe Scorpion

[karmic raven]

From looking at the exploits and attacks for it seems like it would be hard to virtualize. If you wanna DM your idea I can give you a good idea whether or not it’s even possible

[sleek elbow]

learn windows 👀

i.e. that could be its name

[cedar echo]

copyright is a bit of an issue with themed rooms like that

[sturdy gust]

Didn't they made a room about Tokyo Ghoul?

[cedar echo]

yeah that seems shifty IP wise

[sturdy gust]

and Mr Robot too

[somber crow]

"They" was a member of the community

Mr Robot was a vulnhub box

[sturdy gust]

Ohh alright

thanks anyway!

[bleak osprey]

Maybe an sort of how to use Security Onion? Seems like an nice opensource IDS/Monitoring/Analysing to me ?
Analyzing errors etc, sort of the same as splunk but for smaller companys more realistic to have in the arsenal ?

[sudden lion]

100% would love something on SO

[subtle grove]

[bleak osprey]

I think it would be cool to have an sort off networking security path ( blue team focused ).. Mainly going in depth over different types of VPN, WAFs and other next-gen security tools were network/security engineers need to work with on a day to day base ? Pretty sure that there are plenty of company's willing to supply the vm templates ?

( I would love to help with working this idea out more in detail tho 🙂 )

[shell prairie]

Hi i have an idea for room. If someone can make a room explains how to write a report. And make a good report after any pentest operation. Thanks

[native raptor]

Did you have a look at Wreath task 44?

[shell prairie]

Yeah of course that what im searching thanks 🙏🙏🙏

[cunning thunder]

Configuration of VPN infrastructure and WAFs or the monitoring of those? The latter could be part of: https://tryhackme.com/path-action/blueteam/join

[bleak osprey]

I think both would be nice!

[orchid elm]

Hey, I wanted to know how does tryhackme operates a ova file submitted. Like I want to create a tmux session to be available inside but according to specification a tmux session gets erased after reboot.

[karmic raven]

THM takes a VM file, typically OVA and uploads it to AWS to get converted to an AMI that can be deployed as needed by the room

[orchid elm]

So that means the box would be booted up every time from power off state

[karmic raven]

Yup

You could always automate stuff to run at boot however

[native raptor]

@orchid elm that would be a job for an autogen script running as a service 🙂

[orchid elm]

Yes, going after it now.

[karmic ember]

Might already be in place in one of the existing networks, or planned, but having a complex ICS type network would be really interesting. And/or stuff involving activedirectory

And while I'm still the village idiot here, I'd be happy to assist with creation/testing/debugging of stuff. Software engineer by trade, with a tiny bit of cybersecurity background.

[native raptor]

Throwback and Holo are both AD -- there are also definitely more of those planned. ICS is difficult to simulate, but there may be something planned along those lines 👀

[karmic ember]

"may be". Sneaky 🙂

Planning to do wreath this weekend (or at least start it). Throwback and holo sometime after. Definitely interested in more ICS related stuff, since I've kinda done some work there in the past. I see there are a couple rooms related to it (haven't done them yet, still working on the basics).

[sleek elbow]

oh were building something like that at work

[karmic ember]

an ICS sim?

[native raptor]

Reckon we could simulate ICS/SCADA on AWS Spooky?

Would be worth a shot 😁

[sleek elbow]

the gear itself? I've got no clue

[karmic ember]

Perhaps a basic REST service and a combination of a mocking framework?

[sleek elbow]

I'll tell you the vendors we work with would get super protective if their stuff was being emulated

imo, getting some of the guys from Dragos in here to write some proper ICS content would be the best idea

[karmic ember]

rather than emulating a specific vendor or protocol or piece of equipment, just having a theoretical knowledge would be helpful. Learning how to reverse engineer a protocol, etc.

[sleek elbow]

of course. I'd love to see more content on protocol RE

[karmic ember]

I'm hoping some of that is covered in the malware analysis/RE rooms, but haven't gotten that far yet

but after recently reading books about stuxnet and sandworm, I thought it'd make for a good network

[sleek elbow]

100%

you've given Muir some good ideas

[karmic ember]

\o/

Usually I'm good for being an example of what NOT to do. Happy I can be useful in this context 🙂

[native raptor]

Trust me, when Spooky says "good ideas", he means you've given me a great big stick to hit everyone with

[karmic ember]

Hm. Is that a good thing? 🙂 🤷‍♂️

[tough pasture]

not if your name starts with J and ends with Ovnn

just out of curiosity Buffer, do you have any protocol RE sites/resources that spring to mind - I've quite literally never heard of it, so would love to take a deeper look at it 😃

[karmic ember]

I don't, wish I did. I used to work with offensive specialists and picked up bits and pieces in conversation, but don't know enough to be very useful in that regard. Which is why I want to learn more.

[rigid cloak]

I hope to build a couple rooms in the future once I get better, but in the meantime I have ideas about what I hope is in the future.

Car hacking

satellite hacking

PCI

Hopefully I can contribute to the community soon.

[torn portal]

Room Idea:
Writing Pentest Reports, tips and tricks!

[sleek elbow]

iirc its covered in wreath

its a very difficult topic to make a room on imo

you need to switch from the CTF mindset to the vulnerability reporting, ranking, severity, etc mindset

[torn portal]

Ohh yee, I get it.

[hazy sage]

Are there any restrictions to creating new rooms?

[native raptor]

Legality mainly

!docs

!docs room-notes

[soft hamlet]

TryHackMe

Get started with making TryHackMe rooms!

https://help.tryhackme.com/room-creation

From TryHackMe with ❤!

[native raptor]

!docs room-review

[soft hamlet]

TryHackMe

Learn about the TryHackMe room review process!

https://help.tryhackme.com/room-creation/the-room-review-proccess

From TryHackMe with ❤!

[native raptor]

Legality and the stuff in there

[somber crow]

+quality

[dusty bobcat]

Hei, I want to try to create my first room 😁 and I was wondering what Ubuntu version is recommended for my vm?

[somber crow]

1804 server is the newest supported

You don't want to use desktop, it runs super slow on the resources it's given. 1804 desktop will not convert.

[dusty bobcat]

Aha okay so should I use server install image?

[somber crow]

Yep.

18.04.5 I think?

[dusty bobcat]

Ay, thank you :+1: I hope I'll be able to create a room that we all can enjoy and learn from :)

[karmic ember]

Is network creation something normal users can do as well, or is that an entirely differet process?

[native raptor]

Entirely different process, and needs a lot of input from the admins

[somber crow]

I believe they've said they'd like to open it up to regular users though

But I'd imagine that's a longer term thing

[native raptor]

Yeah. How the heck you would make the cost efficient I don't know. I've spent hours A) making those boxes as streamlined as possible to maximise the number of users, and B) talking to the admins about how many people we can stuff into each network, what the entry requirements should be, how many instances, etc, and we're still not exactly gonna make a profit from it.

I can't see how it would work, opening it up to everyone, although it would be really nice to see

[somber crow]

I imagine it'd involve close collaboration with CMN, and maybe gatekept behind a couple good quality room releases

[karmic ember]

Yeah, I kinda figured that would be the answer, was just curious

Would be awesome to have a more red team vs blue team scenario, but I don't see that being practical

[native raptor]

I mean, I'm currently brainstorming for the next one. I did actually consider a more blue team approach, but I am a very offensive minded person when it comes to security.

[somber crow]

You're just a very offensive person

[native raptor]

Also true

[karmic raven]

Def long term, the process is rather inefficient now

[karmic ember]

Something to look forward to I guess

[sudden garnet]

would something on the upload page before the upload process that has steps to reduce size and thus cost be useful? something like

- remove iso
- remove printers, unused disks etc
- remove snap (unless integral to the box)

etc
like just for normal machines, not networks

[native raptor]

Oh, it's not the AMI hosting that causes issues

[sudden garnet]

idk how the billing is, and how much of a difference these would make

ami?

[native raptor]

It's actually running the things

OVAs are converted into AMIs by EC2

That's the conversion bit of the upload

[sudden garnet]

does the size of the machine not contribute to the cost?

[native raptor]

It does, but not a lot

Remember there are also Windows machines around with 60gig hard disks attached to them on THM

[sudden garnet]

ah i see

[karmic ember]

I'm guessing the cost is in the vpc/subnets/etc that have to be created for each network instance

[native raptor]

That and actually running the boxes themselves

EC2 costs a fortune, especially on anything other than t2.micro

Pennies per minute quickly adds up -- especially when you're dealing with lots of boxes

[karmic ember]

And it has to be 'always on'? You can't do something like ECS or fargate?

[native raptor]

That's why the sleep function exists

[somber crow]

VMs, not containers, so no ECS

Same thing for Fargate.

[karmic ember]

yeah, was thinking that some stuff you might be able to containerize

[somber crow]

It's not an AWS pentesting lab, at the end of the day

[karmic ember]

true. But you could still hook a container into your subnet and vpc, on demand

[native raptor]

I wish Containers would be lovely

[karmic ember]

This is probably a bad idea for several reasons, but what about having different levels of subs? Or a "pay for what you use" type sub, that means the person running networks 20hr/day pays more than the person doing a few rooms a week.

[somber crow]

THM used to run on credit, and I know the admins are hesitant to tier anything

[native raptor]

That was actually considered at one point. The admins didn't want to tier it though

[karmic ember]

fair enough. Figured it would be a non-starter, just throwing out ideas

[lunar plank]

For a bit of context, there is 1,820 AMi's right now haha. Not all are uploads from users/boxes that you deploy (but I imagine that's <100 I can't really count it too well)

A "room dev 101" room is in the works for things like that (i.e. tips and tricks) but it's literally like the last item on my never ending list

And that's after a good clean-up too phew

[karmic ember]

Sounds like you need more code monkeys 🙂

[bleak osprey]

This wil probably break the community to.. Because the people that are always online and helping etc will be the ones that pay a lot

I think it was smart to ask money for the network and also fair towards the users and thm self

[sudden garnet]

a walkthrough room dedicated to hacking wordpress?

wpscan, how to read the output
malicious plugins
malicious themes

• other ways i dont know that exist

[somber crow]

Room submissions is gone, but it was in there

[sudden garnet]

ah rip

[somber crow]

It's a good idea and something I'd really like to see

[cunning thunder]

Hey @sudden garnet! Some of that is included in the Cyber Scotland 2021 room (Task 4), which certainly can be expanded upon further. 🙂 https://tryhackme.com/room/cyberweek2021

[somber crow]

I'd love to see that developed into a standalone box

[native raptor]

I would if I technically owned the material. It was done as a contract for SBRC and technically belongs to them

[somber crow]

So write similar content from scratch. It's faster once you've done it before 😉

[tacit anvil]

Hey admins, I and a friend have recently created a new room and it was published just few minutes ago, can u guys test it and evaluate it?

[somber crow]

It goes into the testing queue where it will be tested+evaluated by the room testers

[tacit anvil]

where can place it in the testing queue

[somber crow]

What do you mean?

[tacit anvil]

So you means once the room created and the box is uploaded its automatically in the testing queue

[native raptor]

Not seeing anything new in the queue. Did you set it to public?

[tacit anvil]

Yes

It's under

[native raptor]

What's the room code?

You sure?

That code does not exist

[tacit anvil]

One second please

[native raptor]

Found it

[tacit anvil]

Great btw, we where testing the flag submissions should we reset it

[native raptor]

So, it's not currently set to publicly accessible

Flick that switch and it will get added into the queue

[tacit anvil]

Alright

Done

[lament star]

@native raptor you leaked the room code

[jovial chasm]

Hello guys, i have suggestion, maybe not something that is in your business strategy, but still... 🙂 I was subscriber for more than half year. I will continue my subscription, but not for next few moths (btw, THM platform is awesome, thanks ). Anyway, i can see that subscription only rooms are now disabled and that is totally OK. But, I would appreciate access to walk-troughs that i finished, even VM attached to room could be disabled, but knowledge base that i could recall is gone. And as ex-subscriber i could have some advantage over non payers as appreciation for supporting platform. Just an idea, keep a good work going, thanks 😉

[icy trellis]

#feedback-and-ideas

[cedar echo]

This has been discussed before, no? Might warrant a faq entry

[icy trellis]

#feedback-and-ideas

[lament star]

[lament star]

#feedback-and-ideas

recursion

[lament star]

ah @icy trellis you there

[icy trellis]

I’m here

[lament star]

fast, you might actually beat ninja one day

[scarlet solstice]

There seems to be better free rooms than paid rooms. In my opinion, subscription only helps one to get certificate of completion of a path, plus gets to participate in networks like Wreath. Other than these, there aren't much differences between paid room and free rooms, such in style of rooms, tasks and the level of rooms. As a subscriber myself, I don't notice which room I am in whether it's a free or paid.
I understand that not many people will be on the same boat with me. THM is indeed more toward beginner-friendly platform, and without a doubt, it's a great learning platform for beginners like me.

In short, I just want to say if anyone is writing a room only for subscribers, make sure it's worth for paid students.

On the other hand, there might be things I am not seeing. I am only at level 8. I have't much explored medium and hard rooms yet. So feel free to tell me if I miss anything.

[somber crow]

In short, I just want to say if anyone is writing a room only for subscribers, make sure it's worth for paid students. - Usually, creators are paid for sub only rooms

So yeah, the admins are there to make sure it's "worth it"

[scarlet solstice]

I am now relieved to know there is a process for such. Thank you for the information.

[somber crow]

Something like wreath, I'd be willing to bet Muir got paid for.

[cunning thunder]

As a subscriber, you support the platform grow. Besides more rooms, you also get: 1. Unlimited time on the AttackBox, 2. Rooms deploy with more memory, 3. Access to Learning Paths. 🙂

[scarlet solstice]

Thanks, @cunning thunder. It's funny that I never noticed those features because I only active as a subscriber. Now I realized how dumb i sounded for expressing my doubts over benefits of a subscriber.

[cunning thunder]

No worries. Thank you for subscribing and enjoy the content! 😎

[ancient prawn]

I wanted to create a room and have a idea
But not sure if you guys would be interested
Actually it's from a bug that I founded in a website recently
Anyone willing to hear it in voice ?
If no ,
Where should I post it ?

tag me in case anyone replies

[cunning thunder]

The knowledge base documents on the TryHackMe site might be of help to you, especially the Room Review Process document. https://help.tryhackme.com/room-creation

[karmic ember]

Probably a bad suggestion, but just throwing it out there: What about rooms related to various wifi protocols? Bluetooth, BLE, etc? I see only a single room with a search for "wpa". I know that doing any kind of simulation on this solely within THM would be difficult, so it would probably require it to be more of a walkthrough with your own equipment, but it would be interesting (and related to reverse engineering communication protocols).

[somber crow]

So there's been some investigation into this, you can virtualise wifi now but it kinda sucks.
Making rooms where you need your own hardware to follow along kinda sucks, as someone who created the Wifi Hacking 101 room

[karmic ember]

Yeah, wifi is maybe harder- I personally have several extra routers/laptops/etc I use for my security labs, but I know most people don't. But I'd love to learn more about bluetooth, or just any protocol, really. NFC, whatever. Seems like there's some interesting attack surfaces there that don't get a lot of information

A lot of my interest in security is defensive in nature- how do I, as a developer, make my systems harder to hack/break/exploit/etc.

[somber crow]

Something I'd love to see is a walkthrough room that actually explains each vuln

Something like an application logic flaw, or unsafe handling of something

[karmic ember]

absolutely

A lot of what I've seen so far is more "copy/paste this command", without the background on what it's doing or why it works. With some notable exceptions (wreath, as an example, or the encryption 101 room you made)

and maybe that's just because I've been sticking to the path and the easy rooms

the file upload room was another good one, actually- that made me think of a lot of things I can do, as a developer, to prevent those attacks

[native raptor]

I love the fact that 2/3 of those rooms you just listed are mine

[karmic ember]

🤷‍♂️ you do a good job of going into the theory and background, I guess

for me, the "why/how" is just as interesting as the "what", maybe more so

And I don't want that to sound like I'm complaining about the content- I'm absolutely not, and have already learned a ton in my short time here. You folks are all awesome ❤️ 🙂

[gritty summit]

Walkthroughs are essential for learning, especially when you’re a beginner.
And I’ll disagree, I always see lots of detailed explanations surrounding the “copy paste this command” and I can honestly say I owe most of what I know/accomplished to TryHackMe walkthrough rooms.

[tacit anvil]

Hello, are there currently an rooms touching on the topic of email spoofing? I only found ctf GoldenEye with the "email" tag. Otherwise a room explaining SPFs, MX record, DKIMs etc could be pretty cool.

[karmic ember]

Totally agree that walkthrough rooms are essential for learning, just saying that in some/many cases, I want more background detail in those walkthroughs. Even if it's just optional links to further resources that don't count towards the room, it's extra information I can add to my notes.

[gritty summit]

They offer a loooooot of extra resources/links/materials in the walkthrough rooms.
Anyways, I guess they can’t please 100% of the audience, no platform does, but I’m confident to say that TryHackMe and INE are the best platforms out there now for learning/practicing/developing skills.... in my humble opinion, that is.

[karmic ember]

Yeah, like I said- I love the content here. Definitely not complaining

[tribal jay]

Hey guys

How does a room related to elearnsecurity courses sound?

So we can answer questions after reading the material instead of just reading the material

[icy trellis]

I believe they would need permission from the course creator.

[tribal jay]

Yes, of course

[tawny wave]

hello i'm creating my first room, i need just to upload the .ova file ?

[native raptor]

Yes 🙂

[tawny wave]

thanks! i'm creating the room then i'll post the link, hope you guys will enjoy it

[native raptor]

If you're trying to make it public, please set that option in the room manager rather than just posting the link -- public rooms go through a review process, then get released officially 🙂

[tawny wave]

ahh ok, didn't know ! thanks for explanation

[native raptor]

(Also just given you access to #creators-lounge so you can ask stuff there)

https://help.tryhackme.com/room-creation

[tawny wave]

ok i'll ask for joining #creators-lounge ! thanks again

[native raptor]

Np 🙂

[karmic ember]

Another random idea: oauth. What are some common attack methods, and how can we defend against them (configuration settings, IDS/IOC, etc.)

[karmic ember]

Another idea: what about DKIM and other email authentication systems? How to look at email headers, how to detect spoofed/phished stuff, that sort of thing

[karmic ember]

This article (and others like it) is what makes me curious about protocols and wanting to learn more: https://petapixel.com/2021/04/01/critical-vulnerability-affects-bluetooth-enabled-cameras/

(as someone who was written protocols in the past, I'm curious what steps I can take to make future protocols I might have to write more secure)

Possibly an idea for a network? Or maybe different services running on a single VM? https://labs.bishopfox.com/tech-blog/an-exploration-of-json-interoperability-vulnerabilities

Another idea: walkthroughs on properly configuring a certificate for a web server/email server/etc. ?

[somber crow]

I had a look at this and thought it was pretty neat. I think I forwarded it over to Muir. It'd be cool to see TBH. If you're a dev, I'd highly recommend trying out some room dev. It's good fun.

[karmic ember]

I do actually intend to create some rooms at some point, would love to, both for personal interest, and to give back to the community. Just not sure I have the necessary skills to do it (yet). Working on it 🙂

[somber crow]

For me, it tends to be sysadmin skills and webdev skills.

[karmic ember]

i figure web dev can't be that hard, minus javascript, which I try to avoid

[somber crow]

You can do some interesting stuff without frontend, but frontend is a great place to add flavour to your room

[karmic ember]

It's on my TODO list. Along with a million other things 🙂

I'd actually be totally game for helping to create a room(s), just not sure I'm ready to do one entirely on my own yet

I'm a software dev, but don't know a lot about security, so my knowledge areas might not have a lot of overlap with what's needed

[fading oak]

room creation is a lot of fun because you really have to research your exploits that you want to use and make sure they work

[karmic ember]

Yeah, and since I'm still a noob here, I'm not sure I'm qualified to be teaching the rest of the noobs 😉

at least not when it comes to exploits

[fading oak]

everyone is qualified to teach something, just play to your strengths

[karmic ember]

My strengths are in software dev, though, which doesn't seem to be applicable/appropriate for teaching here

[fading oak]

you can a walkthrough room, it doesn't have to be a challenge

[karmic ember]

true. If there's demand for it, I could try to put something together. Not sure what the focus would be. There's already lots of good resources for learning to write code in various ways/degrees/subjects/etc.

[somber crow]

A walkthrough of hacking a machine/webapp is a good start; it's how I started with boxdev.

[karmic ember]

Yeah, I feel like I'm not yet qualified to do that one. I'm still a noob in that regard 🙂

[karmic ember]

Probably a dangerous/unwise idea, given the amount of young people coming in and/or wanting to do unethical things, but a room on using something like CheatEngine could be interesting. I tried to create a college course on that some years back, but it got shot down. Would involve some assembly language knowledge, reverse engineering, memory management/understanding, etc.

A lot cheaper than IDA, probably easier to learn. But a room on IDA would also be interesting

[somber crow]

Ida freeware is good

[karmic ember]

I have hardly used it, and not in a couple years

[feral wyvern]

Hey all, was working through the John room when I realized that I need to update to the bleeding-edge version on github. I have no idea how to use git-hub and I know that pretty much everyone uses. I think a room that teaches how to use it would be a great addition to the "Complete Beginner Path" somewhere.

[karmic raven]

That room is planned but the one planning the path got tied up with other stuff

[karmic ember]

I know how that goes 🙂

[karmic ember]

Another idea: how to set up a home-network monitoring system. I.e. wireshark for not just the local device

[ripe cape]

https://github.com/docker/dockercraft 👀

is this a dumb idea? probably. but could be interesting?

also its old but probably still works (hopefully lol)

[sudden garnet]

i really hope a room on that doesn’t get released

[karmic ember]

This idea is even less practical than many that I've suggested: What about a red vs blue/koth style system where the defender is just modifying code to a web app/api- perhaps something similar to the in-browser html editor for the recent html basics room. So they'd have to find and rewrite the bad code before the attacker can exploit it. Things like sql injection, bad oauth authentication, etc.

[cedar echo]

My first room was on the fun you can have exposing a git repo

[karmic ember]

which room was that?

[cedar echo]

Git Happens

Still need to fix a bug with that one though...

Current version of Firefox broke the crypto library...but it's not important to completing the room

[karmic ember]

I haven't done that one yet. Adding it to the list

[lunar plank]

On Docker? Have you visited the docker rodeo 🤠

[sudden garnet]

no docker is great, i meant that docker/minecraft combo thing

[cedar echo]

I saw that thing... Blocker would be the Minecraft client I think

Also it's a stupid idea...

[tacit anvil]

@everyone

[halcyon arrow]

Hey guys i have a question, when you submit your ubuntu machine on TryHackMe to add it on a room, does it have to be a server image?

Can i not use a GUI version of ubuntu server for this case?

[somber crow]

Ubuntu Desktop 1804 will not convert

1604 desktop will, but I recommend against using anything with a desktop environment as it will be incredibly slow for any users.

[halcyon arrow]

Ahh i see, well thanks for the help 🙂

[ripe cape]

(except for windows 👀)

[trim charm]

hi everybody. is there a tutorial/doc or what have you for room creation? im keen to give it a go

or is it pretty self-explanatory through the thm ui?

[hoary latch]

AFAIK, it is not self-explanatory, you just make a machine, then get the ISO of it, then upload to THM

I may be wrong, because I did not check out the creation tab quite frequently

[trim charm]

but the sections, questions etc of the room itself? pretty straight forward?

thanks btw

[hoary latch]

Yeah, questions is straightforward I think

[somber crow]

There's a little tutorial on there I think?

[ripe cape]

export to ova not iso

https://help.tryhackme.com/room-creation/room-creation-overview

verryyy brief overview

actually wait

https://docs.google.com/document/d/1NKnCHpLJ5d92eOeo8GRxj1igGcaHWvxLM_8tvSAkTDc/edit?usp=sharing

there you go

[karmic ember]

This looks like it could make for an interesting walkthrough room: https://sixdub.medium.com/using-kaitai-to-parse-cobalt-strike-beacon-configs-f5f0552d5a6e Some sort of reverse engineering/protocol parsing guide

[karmic ember]

I know there are already some rooms on wireshark (and I think they are great), perhaps this might be a useful addition to that? https://unit42.paloaltonetworks.com/wireshark-tutorial-hancitor-followup-malware/

[sudden garnet]

since the wireshark is just an intro room, i think a room like that might fit into a module like this?
https://tryhackme.com/module/incident-response-and-forensics

as a standalone room, investigating windows is in there, so maybe rooms such as investigating <malware> would be nice

[vernal lance]

@somber crow may i dm?

[somber crow]

Why?

[vernal lance]

I wanted to ask something on a room i am planning to make.

[somber crow]

You can ask in #creators-lounge now

[vernal lance]

ive dropped it there

[tacit anvil]

can i get creators-lounge role aswell please? i'm currently working on a room and have some questions

[valid pawn]

not necessarily and room idea but an this is the site with my dark reader turned on, maybe an idea for in the future? Personally i end up doing rooms real late at night

[icy trellis]

#feedback-and-ideas

[lunar plank]

With Darkreader you can change the contrast/brightness settings @valid pawn i.e. this is what mine looks like but a site-wide "dark" mode has certainly been very much requested in the past

For perspective here are my individual settings

[karmic ember]

I was thinking about this specifically in relation to wreath, but it would apply to any network and probably to most rooms- what about having notifications from an IDS or firewall, so that if something you do triggers an alert, that you are notified about it. I.e.- training how how to evade those things and/or points penalty/reward for fewer alerts

[somber crow]

Maybe a room about it, sure

But urgh if that was expected for room creators to add...

[karmic ember]

yeah, doing that retroactively would obviously be tough

maybe an addition to the existing api

[somber crow]

What API?

[karmic ember]

I am assuming there's some sort of api that handles interaction with the back-end THM servers and the front end, and possibly the VMs.

[somber crow]

Not really

Nothing that would involve a firewall/IDS

[storm canyon]

another version of dark mode.

[karmic ember]

in the same way that you get a popup message for maintaining a streak or getting an answer right/wrong, you could hook into that from the room

[somber crow]

I really don't think making room creator's lives harder is a good idea by any means

[karmic ember]

I'm not asking for that :). Just throwing out ideas

[somber crow]

And having an IDS/Firewall would be something the room creator would need to do

[karmic ember]

yeah

[somber crow]

You could make a room about it, but you don't have that much control over points and you certainly can't hook in to the popups.

[karmic ember]

hm. well, just an idea. If it's not feasible, then it's not feasible

[somber crow]

It's feasible to do a room on it, just not in the way you're describing

Have the user hack a docker container etc, host OS runs an IDS, something custom that allows them to submit flags to a web interface there. Give them real flags for the THM site if they do it without tripping the IDS

[karmic ember]

ah, I see what you're saying

hm

that sort of thing would probably be a really good addition to the defensive security path- knowing what certain types of malicious activity are going to get flagged as

[trim charm]

whats a good linux distro / image to use for a room, if people have recommendations? something testable on docker, but which will also be smooth to upload to aws?

[native raptor]

Ubuntu Server 18.04.5 is the common one @trim charm

CentOS 8.2 is good

[trim charm]

ok cool thanks. no need for the desktop bits, obviously, but im thinking of using an uncommon language for the programmatic bits, and it should support those mainstream distros ta

*uncommon in ctfs

[native raptor]

👀

[bleak cloud]

Something like an thing how to prevent your OS for beeing hacked 🙂

[karmic raven]

you mean hardening, that’s already a thing

[kind dune]

Is there a room to learn every way to escalate to root privilage?

[coral ravine]

You have the linux priv and windows privesc rooms

[storm canyon]

https://tryhackme.com/room/linuxprivesc
https://tryhackme.com/room/linuxprivescarena

For Windows:
https://tryhackme.com/room/windows10privesc
https://tryhackme.com/room/windowsprivescarena

[kind dune]

Thanks!

[orchid elm]

Hey I am having error in ova file upload

I am uploading 1 file it shows as 2

I deleted the file and uploaded again and it is still same

@icy trellis

[cosmic harness]

do you think there could be any way to have an email where you have to find the password in a room without someone doing sh*t to it?

[native raptor]

@cosmic harness it would be a breach of ToS for any of the online companies, so no. Keep it within boxes unless it's passive.

You could deploy a mailserver inside a box though 🤷‍♂️

[cosmic harness]

yeah i got told that by jabba im making it rn

[karmic raven]

Spooks and I have done this numerous times either by deploying mail servers like squirrel mail or creating decoy pages that look like mail services like exchange

[cosmic harness]

yeah i just made a simple html css js mail login that alerts when it has been logged into that it was hacked and gives a flag bc im lazy lmfo

[sleek elbow]

lol

[severe scroll]

If I want to start making a room, can I just install Ubuntu server on a VM in any software? Like virtual box or VMware workstation? Or do I need to do something else? Thanks!

[somber crow]

Make sure it's ubuntu 1804 server

2004 will not convert

I don't think VMware player will allow exports?'

[severe scroll]

Ok. So I just need to create the VM, configure it to make it how I want it, then export it to an OVA?

[somber crow]

Mostly. There's articles about it on help.tryhackme.com

[severe scroll]

Ok thanks 😀

[karmic raven]

You can it’s janky though

Much harder than pro or vbox

[severe scroll]

So I'm best to use virtual box for making boxes then?

Unless I pay for workstation pro ☹️

[cosmic harness]

Is https://tryhackme.com/room/monkictf good enough of an idea or do I need to make it harder, less stupid sounding, and make the mail service better?

Or just entirely remove it?

[cedar echo]

Theres ovftools to export

[dire tangle]

Hey can I share my idea to THM staff because I can't create this room on my own, it's not a network room but it's also not a normal room that I can create on the website. It's aiming to the real world situation and 100% not a illegal stuff.

[native raptor]

@dire tangle I've given you access to #creators-lounge -- just ask in there and whoever has the answer will reply 🙂

[dire tangle]

Ok thanks @native raptor