Enumerate port 22
#room-hints
patent token
white salmon
@wraith pivot @hazy sequoia Try googling "grep example regex"
verbal wedge
okay but enumerate it how lol
ive tried to implement ssh enumeration on my own boxes
and the scripts fail every time
patent token
||The port knock requirement on this machine doesn't work.||
||nmap -p- -v ipaddr should show you what you're looking for||
||or threader3000||
verbal wedge
shamelessplug
still no results using that scan bruh
and i can get to ||the ssh banner but thats it||
patent token
Yea. I'm not a fan of LOTR. Very CTF'y.
verbal wedge
unless i can curl them and stego
oblique cliff
@verbal wedge yes it’s just images. Enumerate
hazy sequoia
@wraith pivot @hazy sequoia Try googling "grep example regex"
@white salmon so the issue i think i'm having is with searching ALL the files. System hangs when it gets to particular files as if either they are so large it's taking forever to search or i'm just stuck.
white salmon
have you tried waiting
hazy sequoia
search takes so long the server times out
white salmon
That usually means you have to refine your search to be less broad.
oblique cliff
@hazy sequoia it’s trying to go into mounts and stuff it’s unable to go into. You need to pass a flag that prevents it from going into mounts
If you’re doing what I think you’re doing
verbal wedge
@oblique cliff im not sure what else to enumerate lol
white salmon
Usually whenever I use find, I always pass -xdev and 2>>/dev/null
those are almost required for using find in a humane way
hazy sequoia
If you’re doing what I think you’re doing
@oblique cliff i bet you i am. i havnt been able to find a flag that stops it from going too deep. I remember you had suggested that earlier but the information keeps eluding me, gonna take another look around
patent token
Ok. So maybe try that?
white salmon
You can always refine a find command deeper- you can narrow it down to file only, text files only, in certain directories, etc.
patent token
||You also have a picture that you can try some of the words on as a subdirectory||
verbal wedge
base64?
patent token
Try it?
verbal wedge
ugh son of a --
patent token
🙂
patent token
||Maybe hydra isn't the way||
verbal wedge
so dont need to brute force it?
patent token
What do login forms communicate with?
patent token
Where is user information stored?
patent token
And what do you know about data sanitation and user input?
verbal wedge
something something sql?
patent token
🙂
verbal wedge
nothing seems to be injectable
wicked kettle
Does this line in owasp10 "There may or may not be another hint hidden on the box, should you need it, but for the time being here's a starting point: boxes are boring, escape 'em at every opportunity." means that I've to get shell in order to obtain voucher?
verbal wedge
i used sqlmap
wicked kettle
That's okay as long as I get it.
verbal wedge
checking the POST parameters username and password
stuck fractal
@wicked kettle you can't get the code
patent token
It's been claimed. There is no voucher for you to get.
stuck fractal
It's no longer possible
patent token
||try sqlmap Nameless||
verbal wedge
i did lol
patent token
||use --level 3 as it's a cookie injection I believe||
verbal wedge
wtf is that
patent token
It's just an additional flag. The command should be pretty easy. ||sqlmap -r ipaddr --dbs --level 3||
wicked kettle
But the voucher must be written somewhere like flag, Right?
It's okay if it's claimed. As long as I reach there, like flag, i guess.
verbal wedge
im still lost lol
patent token
ok, no worries.
wicked kettle
me too lol
patent token
What command have you run specifically Nameless?
I can help better if you share it.
verbal wedge
||sqlmap -u http://10.10.169.202:1337/978345210/index.php --level 3 --dbs
||
stuck fractal
@wicked kettle You'd have had to email the email on the main page to "access the beta". The email now no longer replies with the sub code
verbal wedge
I actually gotta go. I'll give this a shot over the weekend or tmrw
patent token
Oh ok.
I used a write up for it the first time honestly.
Some good things to learn there.
wicked kettle
@stuck fractal Oh, I see so it was kinda first come first serve.
I thought I'd bypass the admin panel and pop up the shell.
lol
stuck fractal
As I said, not written anywhere and is no longer obtainable
wicked kettle
Understood sensei
verbal wedge
@patent token ah I see. I didn't know you could copy an entire burp request and save it like that
Good to know
patent token
🙂
wheat copper
Is john the ripper an ideal way to solve an NTLM hash in the c4ptur3th3fl4g room?
stuck fractal
IIRC you'll be cracking for a very very long time
wheat copper
That is what i figured - my hardware is old & small for that sort of job
stuck fractal
I mean it really doesn't matter about the hardware here
wheat copper
BUT - where am i supposed to go if i am not expeted to crack it myself?
stuck fractal
Maybe try some rainbow tables.
covert knot
Hello all, doing the CC: steganography room. Stuck on the last question of the final exam
wanton epoch
@patent token is the privesc path for gatekeeper to be done with ||Potato.exe ||? or is there something else that i'm missing?
green sorrel
lmao for the owasp thing I was confused asf actually contemplating whether we need to send something to that email address but it's already been claimed rip
also in that hint what does ||subcode|| actually refer to because I just changed my ||login|| cookie via burp from the one in the ||sqlite file||
stuck fractal
Subcode = subscription code
twilit sparrow
Anyone completed filter evasion task in Cross-site scripting lab ??
white salmon
What do you need help with?
twilit sparrow
Challenge 4
white salmon
Could you give a little more information than that please? Which Task, what methods have you already tried and exhausted etc.
trim haven
!rule 13
proud scarabBOT
Rule 13: When asking for help/tech support please perform research to your fullest ability. Mods and Community Mentors have the right to refuse helping those who have not done troubleshooting/research on their own first. Clearly phrase your questions as we (fortunately for all parties involved) cannot read your mind. Please include the room, task, and question number in your question if possible.
white salmon
able to go through all the phase of OWASP top 10 sensitive data exposure but the voucher was already claimed 😆
oblique cliff
@wanton epoch something You’re missing
lilac totem
Hello guys, i need some help with the challenge blog. I have a shell as user www-data, but I am completely lost. I don't know where to go to privesc. Am i in a rabbithole? Can someone give me a hint lol
I have tried to linpeas... find command, don't now where to go
indigo ridge
Hello guys, i need some help with the challenge blog. I have a shell as user www-data, but I am completely lost. I don't know where to go to privesc. Am i in a rabbithole? Can someone give me a hint lol
I have tried to linpeas... find command, don't now where to go
@lilac totem linpeas & linenum will help you out
btw.. a lot of hints are in this chat..just scroll up.. or use ctrl+f
lilac totem
ah thank you didn't see that
sorry
btw.. a lot of hints are in this chat..just scroll up.. or use ctrl+f
@indigo ridge okay i can't find anything to help lol. I have the wordpress database tried to do something iwth the hashed password of bjoel but nothing :/
is the mysql database somewhere to start something I have missed?
lilac totem
thats what I thought since the root flag is showed first
indigo ridge
yep
lilac totem
but I really don't have a clue of what I'm missing here lol
I think it is really easy but I can't find....
indigo ridge
just use ctrl +f and type the room name
you will get plenty of hints..whats the point of explaining same thing again.. just try it..
edgy gorge
any hints for Blog's Priv Esc ?
indigo ridge
any hints for Blog's Priv Esc ?
@edgy gorge same for you
indigo ridge
people had asked the same question.. including me.. how to privesc.. so there are answers just here in this chat
edgy gorge
um where 
indigo ridge
btw.. a lot of hints are in this chat..just scroll up.. or use ctrl+f
@indigo ridge .
lilac totem
So I guess in Blog it's the ||checker|| SUID
@shut pollen
I think this one
with the tag reverse engineering
lol
indigo ridge
try
shut pollen
Done and Dusted son @lilac totem
lilac totem
yes exactly what i'm gonna do, my message was for @edgy gorge
ahah lol
@indigo ridge omg I feel so dumb
this room trolled me till the end
indigo ridge
yeah
this room trolled me till the end
@lilac totem
white salmon
The file is pretty obscure but it reinforces the fact that you should enumerate a lot- and look hard
idle flame
Anybody did Blog here ?
white salmon
|| for reversing the binary in blog|| we cannot download it? I guess need to use gdb?
Many did where u at
idle flame
I cannot find the credentials for the wordpress login
white salmon
found usernames?
patent token
You don't need to download and RE it
Try something simpler on the the target machine.
idle flame
No, I'll check deeper
white salmon
|| aight trying strings and strace || on it
green sorrel
||Ghidra|| works well
patent token
Also unnecessary in this instance.
white salmon
You can run it in background while looking for something else maybe it gets something
wooden mist
|| for reversing the binary in blog|| we cannot download it? I guess need to use gdb?
@white salmon you can download it
blissful jasper
Hi! Im having problem with room 11, I have created the noot.txt and trying to run ./shiba1 but all I get is -bash: ./shiba1: No such file or directory
blissful jasper
I have checked the current directory and sub, but havnt moved up the tree
also, the room doesnt tell me I need to go searching for the binary or where it could be :/
twin stratus
@wooden mist Hey do you mind if I DM you for a hint regarding flag2 for carpe diem? I have no idea where to go from there...
wooden mist
sure
edgy gorge
OWASP 10
white salmon
Which task?
edgy gorge
What is the user's shell set as?
@edgy gorge can anyone help with this ?
white salmon
@edgy gorge Every user starts out with a specific shell by default- you should try seeing if that's maybe stored in a list somewhere.
edgy gorge
👍
white salmon
@rotund cedar I think you're looking at the wrong program- the questions require analysis of the bin if2, not if1
The ASM in your picture looks like the ASM for if1
np
sharp ether
hey there, how are u people?. looking how to popup machine ip addr from browser with js.., if someone can give a me a hint
white salmon
Have you tried googling it?
sharp ether
yes
white salmon
actually- if you're doing the XSS Playground room, the hint for that question should give you the exact function that makes it pop up.
white salmon
np- I had the same issue too 😅
balmy wedge
Owasp Top 10 [Task 12] [Day 3] hidden hint for a 1 month voucher. I have skimmed the web code and haven't found anything. I am not sure how deep I should be looking since this is a beginner challenge but should I be using any tools to find this or is it more obvious than I assume?
stuck fractal
You can't get the sub code anymore
stuck fractal
It wasn't on the box though.
stuck fractal
You had to email the address on the main page and ask
balmy wedge
omg lol, I love it. Thank you!
open storm
Hello world, any idea regarding the wordlist to use for the webgramming room, enum part ?
glossy basin
For directory enumeration?
white salmon
Hello, i need a hint for the #6 challenge in the room c4ptur3-th3-fl4g. ||Ebgngr zr 13 cynprf!||
stuck fractal
Have you considered some basic CTF techniques?
white salmon
What?
white salmon
No
stuck fractal
There's your hint then
open storm
@glossy basin yup, trying medium.txt so far but doesnt look like a success so far
stuck fractal
Dirbuster 2.3 medium would be my next step up
open storm
yes thats the one im using
limpid hatch
Need help with owasptop10 day 2 challenge
Logged in as " darren" but cant see the flag
stuck fractal
You can't
limpid hatch
How can i decrypt md5 hashes?
@white salmon just google it
stuck fractal
Room, task, question
limpid hatch
Help me with owasptop10 day 2 task 8
limpid hatch
Tried 3 times
stuck fractal
Then you're repeatedly doing something wrong
For example?
@white salmon What room, task and question?
open storm
@limpid hatch you just need to follow the explanations step by step
limpid hatch
All i did as instructed in text register user darren with quote space name qoute and then logged in with same user which i registered
limpid hatch
Ok thanks
stuck fractal
Much much easier to work out what you're doing wrong when we know what you're doing
upbeat wren
hey I have a question
please may someone point me in the correct direction as I cannot seem ti find the answer to this no matter how much I look
What is the very first CVE found in the VLC media player?
stuck fractal
Have you looked on CVE details for VLC?
upbeat wren
ye
upbeat wren
it has a CVE tho
im so confused
sry
the room tells you to look on e-db for all the prev questions
open storm
try cvedetails.com i guess
white salmon
If you are in kali use searchsploit
valid rune
i'm on learn linux task 21. i'm not really sure what i am supposed to do here. i tried doing export test1234=shiba2 but i think it was stupid move, because when doing echo $test1234 shiba2 shows up.
valid rune
password for shiba3 isn't showing up
toxic scarab
read the rest of the task instructions
valid rune
i did
stuck fractal
Did you run the binary?
valid rune
i did run ./shiba2 it gave me access denied.
toxic scarab
what user are you?
valid rune
shiba2
stuck fractal
Can you provide screenshots?
valid rune
stuck fractal
So you've broken the binary
You ran a command with >> $USER on the end at one stage
Which I did warn you about, in #site-support
You need to terminate the VM and try again
stuck fractal
huh?
valid rune
the one which i did earlier .. that you warned me about ?
stuck fractal
I warned you not to run any commands with >> $USER or > $USER
Because you wrote to the binary
You'll need to terminate the VM, deploy it again and SSH back in
valid rune
yah .. as i said earlier it was an unintentional mistake.
alright .. lemme try again now.
perfect .. it worked after termination 👍
white salmon
@upbeat wren can you tell the room name
stuck fractal
white salmon
stuck fractal
Don't delete it
Simply upload a file with the same name
It will replace it
And keep perms
white salmon
Oh thank you
open storm
Question: Is directory-list-2.3-medium.txt ok to be used against the webgramming room enum task ? It's running for a long time but still no 200 status code
kind tree
Blaster Room - When I RDP'ed into the target machine, the IE is not showing the browser history. I am not able to move forward because of that. Is this an issue which I have to solve or is this a system issue?
white salmon
I've googled this every which way possible but I think I'm looking for the wrong thing. Is "subcode" an abbreviated or shortened version of a larger term
trim haven
Blaster Room - When I RDP'ed into the target machine, the IE is not showing the browser history. I am not able to move forward because of that. Is this an issue which I have to solve or is this a system issue?
@kind tree known issue
You can move forward, check write ups for the CVE number
white salmon
Anyone offering hints for the OWASP Day 4 task?
warm schooner
Complete XXE room
white salmon
Well, it's specifically about this challange answer format itself, not the fundamentals.
stuck fractal
Refresh, it might be the question that was just updated
stuck fractal
Case sensitive
white salmon
<!ENTITY> is giving wrong too
white salmon
oh
sterile robin
Any one completed owasp top 10 xxe task today?
trim haven
Just ask your question...
torn pine
Room: Cross-Site Scripting - Task 8: Filter Evasion - Question 3: "The word hello is filtered, bypass it." .. I can't seem to figure out how to evate the filter of "Hello", which also is what i need the alert box to say.. :/
Any pointers?
toxic scarab
you've tried EVERY method on that cheatsheet? wow
torn pine
Well no.. I havent tried those that bypass the html tags directly, etc.
sterile robin
I don't know the answer of question 4 in task 14 and task 15> Any one completed owasp top 10 xxe task today?
@sterile robin
torn pine
I tried the String.fromCharCode ||<img src=x onerror=alert(String.fromCharCode(72,101,108,108,111))>|| .. which gives me "Hello" as an alert.. but there doesn't come any alert afterwards with the answer :/
languid tide
@sterile robin about Q4 read carefully the Syntax paragraph
sterile robin
both tasks?
torn pine
You didn't say which Q in Task 15
sterile robin
Q4 too
sterile robin
oh I meant 17 sorry
languid tide
Indeed.... No Q4 on task 15....
sterile robin
I know the answer but I can't seem to put it in there answer form
torn pine
You know the username, since you answered Q3, so do you know where ssh files are located?
What have you tried putting in?
sterile robin
read SYSTEM /home/falcon/. ssh/id_rsa
stuck fractal
Typo
desert charm
im going through the rooms i have joined and i got 1 left on the c4pture th3 flag
11FE61CE0639AC2A1E815D62D7DEEC53
torn pine
Whats an "shh" key 😮
stuck fractal
I tried the String.fromCharCode ||<img src=x onerror=alert(String.fromCharCode(72,101,108,108,111))>|| .. which gives me "Hello" as an alert.. but there doesn't come any alert afterwards with the answer :/
@torn pine So it's looking for a certain payload, that's the issue
trim haven
shh I don’t think they noticed their typo 
desert charm
Anyone that could help me?
torn pine
@stuck fractal I guess i've got to try some other stuff then 
stuck fractal
Anyone that could help me?
@desert charm Try some rainbow tables in ophcrack if that's ||NT or NTLM||
sterile robin
read SYSTEM /home/falcon/. ssh/id_rsa
@sterile robin it seems that there's ** I can't figure out what I can write in it
trim haven
Refresh your page and try again
sterile robin
Yep It works now..
trim haven
Yeah they refreshed the room haha
sterile robin
well.. what about Q4 in task 14?
trim haven
Uhhh what room
sterile robin
OK.. let me see
torn pine
"Above the line [..]"
torn pine
@stuck fractal This payload is killing me! Does the word "Hello" HAVE to be in it? Cause i've tried HTML entities and CharCodes, which both gives "Hello" in the alert, but the box clearly doesn't accept this.. :/
stuck fractal
It's been posted
torn pine
Great, thx.. i'll leave the room open then, and return to it soon(tm)
loud oracle
yeah i could not finish that box also and I found atleast 3 ways to print hello in an alert
tardy geyser
anyone complete "ZTH: Obscure Web Vulns" room, stuck on a question for csrf part (Task 9).
dense pike
Does anyone have a hint for today's OWASP challenge question 5? I've completed the rest but haven't been able to get it to pass back the credentials. (Solved it) I forgot about the Owasp site.
buoyant grove
nc <ip> <port>
oblique cliff
@tardy geyser whats up
wheat copper
Maybe try some rainbow tables.
@stuck fractal Mkay - i spent the last day learning how to crack an LM hash with a rainbow table. Now that i've done that; I'm stuck on the availability of Downloadable rainbow tables which support 25+ characters
I know what the value of my flag is because i cheated & googled it. BUT how do i crack an NTLM hash with a passphrase 25 chars long?
stuck fractal
Honestly, doesn't sound very feasible
wheat copper
Right?! i don't even know the theoretical size of a tableset that big - but i bet it's larger than my NAS
i was exploring generating my own with conveniently selected characters and punctuation.. but my CPU is so piddly. it could take months
dense pike
@wheat copper which room are you working on?
white salmon
https://tryhackme.com/room/ctf100 stage 6 flag79 I'm trying to crack hey_listen. I converted to a zip file, got the hash with zip2john, but the password is not in rockyou.txt
real storm
I confirmed that my syntax is correct, and the writeup for the one where we gotta crack molly's password says that it's like 900k lines far ahead in the original rockyou.txt =_= dafuq
real storm
I did solve that one
stuck fractal
It's on Dark's list of things to fix
real storm
Umm okay, so I'll just copy that flag for now.
hexed crescent
@white salmon Flag 79 is not a bruteforce exercise.
real storm
It's on Dark's list of things to fix
@stuck fractal And what about the ssh one? Is that far ahead too?
real storm
Alright, so I'm going through this then
stuck fractal
The fix will just be copying over the VM, or copying and changing the background image back
real storm
Processed 3k+ passes... o_O
white salmon
@hexed crescent can you give me a hint on how to get it?
hexed crescent
Search for a hidden file that has the encrypted Vim file password. @white salmon
white salmon
ok thank you
real storm
@stuck fractal
Over 7k passes and it still hasn't found it.
Shall I just copy and paste the other flag too? e.e
stuck fractal
Do what you want
real storm
That sounds cold v_v
real storm
It was trying with the correct credentials and the IP, so my syntax had to be right.
I've solved it before and I just wrote the command again to make sure I'm not forgetting hydra's syntax, but it's taking forever and I can't launch the next box until I finish this one, can I? o.o
white salmon
You can have up to three boxes running.
stuck fractal
It was trying with the correct credentials and the IP, so my syntax had to be right.
I've solved it before and I just wrote the command again to make sure I'm not forgetting hydra's syntax, but it's taking forever and I can't launch the next box until I finish this one, can I? o.o
@real storm Terminate the box
You can have up to three boxes running.
@white salmon subscribers can
winter bison
stuck on question 14 under nmap room
What if I want to run all scripts out of the vulnerability category
got it nevermind
covert basalt
any hint for blog room
white salmon
What Task? (Give the number!)
What question? (Number, maybe also basic details)
What have you tried?
What happened?
What didn't happen?
What did you expect to happen?
A picture paints a thousand words. Don't type a thousand words. Screenshots are awesome. Photos of your screen are not.
(If you want to paint a picture, we'll be impressed but a screenshot is really better)
ionic verge
Hey, need some help with ZTH room, Task 22 Q1 (XXE Challenge).
The question is "How many users are on the system?"
I was able to complete Q2 which was to read the /etc/passwd and got the username. but i can't for the life of me understand question 1... does it mean registered users? do i need to run an sql query? if so i am unable to use excpect://id , any idea how to answer it/
white salmon
Also, there's been a lot of people who need help with the Blog room. If you search in this room, you might find a lot of hints already.
covert basalt
Also, there's been a lot of people who need help with the
Blogroom. If you search in this room, you might find a lot of hints already.
@white salmon will search
white salmon
For sure! If you don't find a hint corresponding with your issue, then feel free to ask.
@ionic verge Registered users are often at the bottom of /etc/passwd. Try comparing your linux machine vs their machine and see if you can tell what users are "system users", which aren't the users that people normally use.
ionic verge
Hey, need some help with ZTH room, Task 22 Q1 (XXE Challenge).
The question is "How many users are on the system?"
I was able to complete Q2 which was to read the /etc/passwd and got the username. but i can't for the life of me understand question 1... does it mean registered users? do i need to run an sql query? if so i am unable to use excpect://id , any idea how to answer it/
@ionic verge damnnnnn never mind. just figured it out. its asking about the users in the /etc/passwd 🤦♂️
white salmon
Yeah, /etc/passwd is a file containing all users on a Linux machine.
ionic verge
i was thinking about users registered in the db or something, because i saw there is a mysql user
😆
thanks @white salmon
white salmon
np
covert basalt
i looked through the past messages and seem to find that i have to brute. I had been bruting the two usernames.Didn''t found anything
white salmon
Are you sure your bruteforce parameters are correct? Maybe try using a different bruteforce program?
covert basalt
i am using wpscan
white salmon
Bruteforce-able passwords on THM's machines are often aimed to be achievable in 5-15 minutes. If you don't get a hit after that, then that usually means the user is not brute forceable.
covert basalt
is there some script on the machine that will read the posts on blog
can someone please point me towards a correct direction in the blog room. I have two usernames and found some posts which are not visible on homepage though p paramter in url.
white salmon
what can you do with the usernames?
Already told you that if one user's account takes more than 5-15 minutes to brute force, then maybe it's not possible to brute force that one user's account.
But, you have two users right?
green sorrel
for the learn linux bonus privesc thing do we have to exploit the suid function of the shiba files
white salmon
Possibly, if it has a suidbit. But there's an easier way, you just need to look around a bit.
Maybe try looking at things from a different perspective :)
(that's a hint btw)
green sorrel
yaeh I sussed out all the files for the different users but can't find anything interesting
white salmon
Maybe it's not files you need to be checking, what else can you check really easily as a user to see if you can escalate things?
final mortar
maybe you can get -lucky
indigo ridge
room Lord of Root: how do i know the sequence of port knocking...? or how to open some port?
midnight monolith
emm, i surely didnt do this one
@indigo ridge
but if you have a set of numbers
i normaly run them against a permutation script to get all the possible sets
i use this guys here
#!/usr/bin/python3
# get all possible combinatins from a set of numbers
from itertools import permutations
import sys
import os
ports_list = sys.argv[1:]
perm = permutations(ports_list)
for i in list(perm):
u = os.popen("echo '%s'|tr -d '('|tr -d ')'|tr -d ','" % str(i)).read()
print(u.strip('\n'))
python3 permutation.py 444 333 555
444 333 555
444 555 333
333 444 555
333 555 444
555 444 333
555 333 444
thanks for this.. but here I don't even have a set
tidal sedge
midnight monolith
thanks for this.. but here I don't even have a set
@indigo ridge good luck with that
upbeat wren
hey i have a question
last task on the introtoresearch
how would i go about cding into the root dir
as i do not have correct perms
white salmon
Try searching up linux privilege escalation or linux enumerator
upbeat wren
it only has stuff about linux basics
yeyeye
ty
hey @white salmon im still a bit stuck is there a website you could point ne to
white salmon
Try https://gtfobins.github.io/ or https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS
For the second one, you'll have to upload that to the machine, then run the script
white salmon
Try looking up the scp command
white salmon
What do you need help with?
tacit owl
icant figure out value of car_8h
i read instrucation again and again but still not getting anything
oblique cliff
did you follow the steps it showed for if1?
tacit owl
yes
oblique cliff
can you tell us what youve done in terms of setting breakpoints and inspecting the variables?
white salmon
Take a screenshot please.
oblique cliff
we know the commands, we want to know exactly where youre doing these things 😄
where you set the breakpoint, etc
tacit owl
popq
tacit owl
yaa wait
white salmon
See if you can take a screenshot of how you're trying to check the var_8h register.
and what breakpoints you've placed in @main
oblique cliff
yea listen to him^
tacit owl
oblique cliff
he knows what hes talking about
oof screenshot not phone picture plz
that hurts my eyes and my jowls
oblique cliff
no, ask here, this is hte purpose of the channel
white salmon
Don't worry, I can see plenty enough from your screenshots.
tacit owl
thanks
white salmon
Are you trying to check var_8h or var_4h, because your screenshot shows you displaying the variable for var_4h
@ rbp-0x4 is var_4h
tacit owl
Opps sorry
white salmon
i squinted really hard
tacit owl
But i still not understand 😕
white salmon
The question is asking you for var_8h, so try checking that value instead.
tacit owl
0x8
white salmon
Yes, and the value will usually be at first address at the first byte.
tacit owl
Can i ping u Directly?
white salmon
Try reading through the task again, the answer is pretty much given to you, it's just stored in a variable and you have to display it
tacit owl
white salmon
Make sure your break point is before the popq so you get the right answer
That's not the right answer- you haven't gone through the program so the variable is still the initial value set.
Put a db at 0x560af5f9e637 and check again after reaching there.
tacit owl
Probably i miss something, thats why i can't get the right ans.
white salmon
that too pls
white salmon
You still haven't placed a breakpoint
@oblique cliff No, he's still looking at it before the final value
the task wants the final value that it gets set to
oblique cliff
@white salmon no he's not, nothing happens to the value after he sets his breakpoint
tacit owl
yes
white salmon
oh
oblique cliff
you need to convert it to decimal when submitting the answer
tacit owl
at both place hex values are same
oblique cliff
the only thing that happens after that breakpoint is he writes to the eax, pops a value and returns the value
no changes are made to the variables
white salmon
yeah sorry @oblique cliff is correct
tacit owl
Yup
white salmon
that's the correct answer- but you just need to convert it from hexadecimal
tacit owl
Finally i solved
keen willow
need hint on mrrobot room for second flag or to get into the box, i found ||fsociety.dict|| which looks rabbit hole, any clues ??
keen willow
what are dictionaries usually used for?
@oblique cliff i was doing it, looks like my connection is slow.
so i gave up. thanks, i try again.
on ||elliot|| username i guess ?
oblique cliff
dont know, but you can find out
keen willow
wpscan got nothing... ok i look for it.
oblique cliff
what is the error message on the login page when you try to log in
keen willow
||wordpress|| login right ?
oblique cliff
yes
keen willow
ERROR: The password you entered for the username ||elliot|| is incorrect. Lost your password? which means user is present.
oblique cliff
🙂
slow tree
Hey people, i'm on the blue room, but i can get through, i did everything until the command exploit, when i use it, i get lots of stuf, but it fails. Are there anything to change for it to work?
oblique cliff
@slow tree show your options, update your metasploit
solemn smelt
can you screenshot the options menu
slow tree
solemn smelt
options
oblique cliff
if you dont have an updated metasploit
windows/x64/meterpreter/reverse_tcp
windows/meterpreter/reverse_tcp
windows/shell/reverse_tcp
If one of these do not work, we will be glad to help assist further```Metasploit looks updated correctly
slow tree
oblique cliff
wrong lhost
stuck fractal
I can see the issue from the first screenshot
solemn smelt
^^
oblique cliff
needs to be tun0
stuck fractal
For those playing along at home, look for the line with Started reverse PAYLOAD TYPE handler on LHOST:LPORT
oblique cliff
pin^?
slow tree
oh, thanks 🙂
stuck fractal
I don't think it's worth a pin as it's something for people who help to learn
white salmon
Also, it's a pretty situational issue
white salmon
slow tree
should i change LPORT too?
dense pike
no
slow tree
oh, it worked, failed twice, but now i got a win, thank you 🙂
oblique cliff
only need to change the lport if the one you have chosen is being used by something else 🙂
solemn smelt
That’s EB for you
oblique cliff
but in that case youll get an error saying that port is being used
dense pike
I'm doing the blog room and currently have a meterpreter shell to the box. Am I supposed to upgrade the privilege's of the current w***-**** shell or use this access to find something I need to get in a different way?
white salmon
Have you tried enumerating the machine?
dense pike
I did a nmap scan.
white salmon
Since you have access to the shell, you can enumerate a machine further from there for possible privesc opportunities.
dense pike
ok thanks, let me try that a bit more
upbeat wren
hey i have a question
stuck fractal
Maybe lead with the question rather than stating that you have a question
stuck fractal
There's another good reason
upbeat wren
?
stuck fractal
If you'd asked the question rather than stating you have a question, it might help someone else in the future
dense pike
I'm trying to get one of those privilege scripts uploaded and am having trouble. I did paste the whole script into vim but the escape key isn't working. I also tried upload through meterpreter but got the error operation failed.
stuck fractal
Look into some other methods
upbeat wren
if u press escape then :
stuck fractal
There's hundreds of ways to get files onto a system
stuck fractal
Did you actually read their message?
dense pike
I know how vim works 🙂
upbeat wren
i meant press colon after trying to presss enter
thesame thing happaned to me
nice 🙂
btw im having a ton of trouble with
Now we're inside tmp, let's create an imitation executable. The format for what we want to do is:
echo "[whatever command we want to run]" > [name of the executable we're imitating]
What would the command look like to open a bash shell, writing to a file with the name of the executable we're imitating
apparently its not echo ~/bin/bash > ls
oblique cliff
First that path to bash is very wrong
oblique cliff
Second the room answer expects the echo statement to be in quotes
(You think wrong then)
oblique cliff
Waiting
upbeat wren
im sry
stuck fractal
I mean arguments for the echo command
upbeat wren
i didnt realise
oblique cliff
No sorry necessary
stuck fractal
My recommendation is stepping back for a minute and re-reading the info
Whenever you get stuck on a walkthrough
upbeat wren
fe
oblique cliff
Iron?
upbeat wren
fair enough lmao
btw the hint was
The command is actually just the path to the bash executable "/bin/bash".
oblique cliff
Look what you put and look at the hint
oblique cliff
Second the room answer expects the echo statement to be in quotes
I mean arguments for the echo command
white salmon
Why would you be redirecting the output into ls?
oblique cliff
Do single quotes instead
upbeat wren
nah this works
stuck fractal
Don't post answers
stuck fractal
Answers/flags directly bad
upbeat wren
yeye
white salmon
We're not sure what room, task, and question you're doing so dunno if it's correct
upbeat wren
it does work lol
stuck fractal
I'd recommend just plain not doing it
keen willow
brute-forceing mrrobot || wordpress|| credentials user ||elliot|| passwordlist ||fsociety.dict|| from last 30 mins. looks like a wrong direction.
oblique cliff
@keen willow not wrong direction, did you look in that dictionary at all
oblique cliff
did you notice anythin in that dictionary?
anything about the values that could possible help shorten the list? @keen willow
tribal ginkgo
How can we specify XML version and encoding in XML document?
in owasp top10 has anyone done this question
dense pike
@tribal ginkgo I'm pretty sure that's already listed in the xml section.
keen willow
anything about the values that could possible help shorten the list? @keen willow
@oblique cliff just figured that out. thanks mate.
proven pier
how do you find what port the web server is running on?
stuck fractal
Have you googled that question?
tribal ginkgo
got it
tribal ginkgo
how do you find what port the web server is running on?
@proven pier try nmap
proven pier
i am using nmap
stuck fractal
yes it says windows
@proven pier wat
proven pier
but that dosent fit the format of the question
the question i need help with is from vulniversity task 2 reconnaissance question 7
oblique cliff
look at all the output then and see if any of it fits the format of the question
stuck fractal
That question doesn't ask you for the OS
Why are you saying it tells you it's Windows?
Windows isn't a port
mild eagle
In mr robot I’ve found || found a dictionary and found a username but it takes forever to Brute-Force the password for wp login || can someone confirm that ?
white salmon
In dogcat room I got || ../html/dogs../flag || payload working basically can include file any hint on extension bypass? I tried || ../html/dogs../../../../../../etc/passwd%00|| also tried || ../html/dogs../../../../../../etc/passwd../..\.\..\ [repeated many times]|| and other variant of this payload.
@mild eagle Think about ways to reduce that time
proven pier
@stuck fractal because u asked me if i google the question
stuck fractal
Windows is not an answer to any question you've asked or I've asked
Might want to try again
white salmon
@mild eagle Are you sure you have the right username?
white salmon
I guess optimize the wordlist or wait until it gets a hit
Should take anywhere between 5-15 minutes depending on network speeds
proven pier
@stuck fractal then coold you clarafy because ure confuzing me
stuck fractal
@stuck fractal then coold you clarafy because ure confuzing me
@proven pier What are you doing? What did you find on google? Have you learned how to use nmap?
https://tryhackme.com/room/rpnmap do this first
white salmon
@mild eagle The password can also be obtained if you have watched the show and know elliots philosophy that if you watch people closely their password is like neon signs 😆
proven pier
@stuck fractal yes i did
@stuck fractal the only thing is nothing fits the format of for what im looking for
white salmon
@white salmon ||wpscan is much faster in bruteforcing wordpress|| compared to hydra
stuck fractal
Then you're doing something horrifyingly wrong. What are you doing? What did you find on google?
What Room? (Link, Room title, room code from URL)
What Task? (Give the number!)
What question? (Number, maybe also basic details)
What have you tried?
What happened?
What didn't happen?
What did you expect to happen?
A picture paints a thousand words. Don't type a thousand words. Screenshots are awesome. Photos of your screen are not.
(If you want to paint a picture, we'll be impressed but a screenshot is really better)
proven pier
@stuck fractal https://tryhackme.com/room/vulnversity [Task 2] Reconnaissance,
#7
What port is the web server running on?
i tried
keen willow
What Room? (Link, Room title, room code from URL)
What Task? (Give the number!)
What question? (Number, maybe also basic details)
What have you tried?
What happened?
What didn't happen?
What did you expect to happen?
A picture paints a thousand words. Don't type a thousand words. Screenshots are awesome. Photos of your screen are not.
(If you want to paint a picture, we'll be impressed but a screenshot is really better)
@stuck fractal somebody pin it
stuck fractal
@keen willow It is, but the questions are more tailored to the help chat
@proven pier You tried. What did you try?!?!
We can't help you if we don't know what you're doing
If you want help, you have to engage
It's a two way system, we need enough information to be able to help you. Help us to help you
proven pier
nmap -Sv (ip), nmap -sC, nmap --script-trace, nmap -A -sC -sV
stuck fractal
Ok, so?
What didn't happen?
What did you expect to happen?
A picture paints a thousand words. Don't type a thousand words. Screenshots are awesome. Photos of your screen are not.```what happend is the name of 6 ports came up PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 3.0.3
22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.7 (Ubuntu Linux; protocol 2.0)
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
445/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
3128/tcp open http-proxy Squid http proxy 3.5.12
3333/tcp open http Apache httpd 2.4.18 ((Ubuntu))
Service Info: Host: VULNUNIVERSITY; OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel, what did not happen it dident tell me the port the web server is running on
stuck fractal
yes it does
Do some research
Look at your results
Learning how to use a tool includes learning how to read the results
proven pier
@stuck fractal thank u for ure help i gtg im sorry if i sounded arragent im gonna take a look back at the room make sure i can read the results when i try the next time thank u again and again apologise, thank u for the clue
keen willow
no worries pal you are always welcome. come back with more knowledge and doubts.
@white salmon ||wpscan is much faster in bruteforcing wordpress|| compared to hydra
@white salmon looks like wpscan selects potential passwords based on wordpress password policy and eliminates all other from the password file before starting attack. can anyone verify that.
stuck fractal
There are options
white salmon
It does to xmlrpc.php
stuck fractal
XMLRPC, wp-login are two of them
white salmon
yeah xmlrpc seems fast
white salmon
With hydra I tried wp-login page and it was very slow for me
white salmon
With
graceful sun
am i missing something ? "Above the line is called XML prolog and it specifies the XML version and the encoding used in the XML document." --> the above line ---> <?xml version="1.0" encoding="UTF-8"?>
question:
How can we specify XML version and encoding in XML document?
*** ****** is it really not xml version? because its saying thats wrong but as far as the doc i can see its right?
toxic scarab
i'm hanging out here and waiting for the moment of realization that they just typed the answer as part of their question 🍿
stuck fractal
There's a line between reading and understanding
graceful sun
true
dense pike
For the ccpentesting room on Task 4 #14 I ran both big.txt and directorylist-2.3-medium.txt. Should those have found the file or is there a different list?
toxic scarab
it's so common that it's in every list i've tried. my guess is you're doing something else wrong with the command you're using
dense pike
ok good to know
dense pike
@toxic scarab can I DM you the command I'm using?
toxic scarab
sure
stuck fractal
If you mark it as a spoiler, you're good to post it here
Or #room-help if you're pretty damn sure you're doing it right. No need for marking as a spoiler there
dense pike
@stuck fractal Thanks good to know
covert basalt
in the blog room even though my image is being uploaded then also rce not trigerring
any ideas
dense pike
What exploit are you using @covert basalt ?
covert basalt
cve 2019 8942
dense pike
The metasploit module worked for me.
toxic scarab
look at the room tags for a hint
covert basalt
i am working with a python script
The metasploit module worked for me.
@dense pike
look at the room tags for a hint
@toxic scarab they say about cve 2019 8943
i don't see much difference
ooh metasploit worked
toxic scarab
also, @covert basalt !rule 1
covert basalt
i am sorry for that
toxic scarab
it was midnight for me
white salmon
Was that all for OWASP Day 5?
stuck fractal
There's a machine
valid rune
guys i'm on the flag part of learn linux room. is it considered cheating if googled how to get the flag ? (not find the straight answer, rather only the way to get to the flag).
valid rune
i tried, and still trying to get together the way how to get to it through the explanations from the room, but it's a lot, and sort of confusing (but very beneficial) .. but for this job, i might find a better way if i googled it.
white salmon
I'd say, as long as you actually practice and go through with the write-up, instead of just copy and pasting the answer.
And make sure you understand exactly how the author got that point as well.
valid rune
was this answer for me ? @white salmon
white salmon
@valid rune Yeah, it was for you
I honestly use write ups a lot to get a different perspective or alternative methods and solutions.
valid rune
i wasn't intending of copy and pasting the answer at all. what i meant is to look on how to look for this specific situation exactly. (example: everytime i try to cd to /root .. what i do is sudo cd /root but it says shiba4 is not in the subdoers file. this incident will be reported
white salmon
Sometimes, I don't even actually know the proper tools, and write-ups can help you answer that
valid rune
soo what i am saying is to google how to get to /root when in that case.
valid rune
soo you mean the write up would me much easier in this case ?
stuck fractal
The writeup is specific to the box
valid rune
gonna try my best with it .. after that i guess i'm gonna come for hints.
white salmon
With priv esc, it helps a lot to have a checklist/process for your enumeration
valid rune
yaahh i guess ill have to learn that the hard way 😆
keen willow
overpass initial ??
waxen walrus
can anyaone tell ETC IDOR challange ?
valid rune
still stuck on the flag on learn linux .. does it have something to do with changing something with the sudoers file ?
stuck fractal
You can't, unless you're root
valid rune
damn .. i'm back to square one 😪
worthy iris
hello again, I'm doing the steel mountain room and I'm following the instructions but I get this error, anyone know whats causing it?
stuck fractal
@worthy iris You have downloaded the web page, rather than the script
stuck fractal
when you're downloading stuff from github using whatever, use raw.githubsomethingorother URLs
clear cargo
I found the binary and the panel (tried sqli) for Overpass but can't get info for access, can someone help me?
stuck fractal
Have you looked at the JS?
clear cargo
Have you looked at the JS?
@stuck fractal yes, i see an api but the room says we dont need brute force xd
stuck fractal
No brute force
keen willow
@stuck fractal yes, i see an api but the room says we dont need brute force xd
@clear cargo you should check, how it works.
Any way to report spoiler in discord ?
keen willow
I meant to report, so moderators cud take action.
rotund skiff
im also stuck on overpass. when you say look at js are you talking about ||login.js||?
stuck fractal
We don't enforce spoilers as heavily as HTB
The general rule is don't dump answers/flags, and try to keep it to just hints in this channel
keen willow
im also stuck on overpass. when you say look at js are you talking about ||login.js||?
@rotund skiff there aren't so many.
odd idol
I am working on the overpass aswell. I am slowly getting there
worthy iris
hello, me again, I've been stuck on this part for super long and I'm out of thoughts so can I get help again?
Steel Mountain room
worthy iris
both if you would kindly
stuck fractal
@inland onyx I'd like you to fix this btw
So services have to let Windows know when they've started up properly. 1053 is when the service doesn't do that. You generated an exe payload, so it won't tell Windows because it's not a service
The proper fix is setting the payload to exe-service
The hacky alternative is using the Prepend Migrate payload option to get the payload to migrate before windows can kill the original process
wanton epoch
i have user on brainpan 1. trying to privesc for root. based on the enumeration i think that ||winbindd|| is probably what will help me escalate privs. am i going down the right rabbit hole or is there's something else that i should be focusing on?
valid rune
@wanton epoch you doing learn linux room ?
wanton epoch
no i'm doing brainpan 1
stuck fractal
brainpan no, they're not
valid rune
i'm doing learn linux and still stuck at the last part which is the flag .. tried almost every thing, read most of the --help and manuals xDD
stuck fractal
The last part is really tricky
valid rune
it is .. this is why i'm super stuck on it .. and i'm pretty sure that the way to do it is super easy that i'm going to feel stupid not knowing it.
stuck fractal
So let's walk through your logic so far. What have you looked at? The /root dir can only be accessed by root, so you need to become root.
valid rune
yes .. and since i get the shiba4 is not on the sudoers list i tried going to the etc/sudoers to play with it a bit.
but again, i can't because i'm not Groot
stuck fractal
So, maybe one user on the box is a sudoer?
valid rune
i think i know that it's noot but trying to figure out how to log in it
ripe hedge
@clear cargo there's no bruteforce on overpass, but look at what the JS does, and specifically what kind of response it's waiting for. Maybe we can guess that
clear cargo
@ripe hedge can i send u a msg?
ripe hedge
sure
white salmon
Well... I've tried pretty much everything I could think about, any hints?
ripe hedge
try the k word?
worthy iris
james, I was still stuck, but it turns out I had my listener in the background and so couldnt use the root account when I started the service, still get the 1053 but I no longer need to use that terminal
white salmon
I did :c
worthy iris
oops :<
unkempt aspen
did you check the key terms
white salmon
Uhm, I found out the answer, thanks x)
unkempt aspen
no prblm
valid rune
i'm now stuck on something really stupid
valid rune
almost figuring out the flag .. just something really dumb.
valid rune
something i can see .. but can't touch. literally that 😂
twin shale
how is that? lol
stuck fractal
Look for files belong to each user, take a look at ones that seem out of place
valid rune
i did find something interesting and i believe it could be the answer. i found ||.sudo_as_admin_successful|| on /home/nootnoot/ when i did the comman ls -al
i just can't open it.
stuck fractal
That file will be empty
valid rune
is it a clue though ?
stuck fractal
Eh, suggests that nootnoot might be a sudoer
valid rune
i found another file which isn't hidden under the name of ||ll|| on the same directory
stuck fractal
Keep looking
valid rune
but that other file when i read it was number from 1 to 1000
doesn't seem like something useful .. but i don't know.
stuck fractal
Yeah that's not useful
valid rune
i think i think i sort of looked everywhere.
stuck fractal
You haven't
Look for files belong to each user, take a look at ones that seem out of place
@stuck fractal
Use Find
valid rune
thanks for the hint .. will do now.
odd panther
any hints for overpass? I've got the user I'm not sure on the next pivot point.
stuck fractal
Do some basic privesc enumeration
stuck fractal
https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology and Resources/Linux - Privilege Escalation.md have a resource
green sorrel
do we have to bruteforce the admin page for overpass
odd panther
no
hardy pewter
Its about do a ||sqli|| , right?
mental ivy
Its about do a ||sqli|| , right?
@hardy pewter no
hardy pewter
Damn 😦
mental ivy
Damn 😦
@hardy pewter Read the JS files...
odd panther
I'm a try root tomorrow on overpass tired can't find the way up lol
stuck fractal
@green sorrel Don't use that word here
green sorrel
aight sorry
stuck fractal
If you don't like the box, #522158404614225920
fleet yarrow
could i get help on the learn linux room task 18 question 2
oblique cliff
@fleet yarrow if you ask a more specific question then sure 🙂
fleet yarrow
im not sure where im supposed to get the answer from
pallid glade
Find a list of environment variables
oblique cliff
@fleet yarrow either do that^ or google how to view the value of an environment variable
Both will work
fleet yarrow
ok thank you
clear cargo
@stuck fractal the root for overpass is editing the file (||etc||) or there is another way?
waxen iron
@stuck fractal - the prize in the room has been claimed - lots of newbies like me trying to learn and scratching our heads. a walkthgouh would be very helpful in helping us progress. from your comments earlier i only see the main.js but not sure where to go next. Thanks in advance
stuck fractal
You're not going to get a walkthrough
It's a challenge box
It's a new challenge box.
white salmon
It's a brand new room and also yeah, a challenge/event
stuck fractal
It's beginner/intermediate. It really shouldn't be your first THM challenge
(overpass is seperate)
waxen iron
10-4
waxen iron
yes i got redirected from owasp10 - which is quiet easy - but then this one is a different level for my experience
stuck fractal
I plan to release the writeups for overpass a week after release. You can wait for then, or ask for a hint in a slightly different way
Remember. Challenge.
Have you done some basic web enumeration?
Looking for hidden directories, things like that.
Go from there.
waxen iron
thanks for the prompt replies @stuck fractal - i totally understand , yes i ran dirb and nmap but didnt come across much useful. the admin page etc but no BF
stuck fractal
It's one of the top 10 vulns that's been covered so far
white salmon
So i am doing day3 again and.... whats a subcode?
white salmon
So its like whoever gets it first?
stuck fractal
You can no longer get the subscription code from day 3, but you can for overpass
white salmon
Really?!!!
stuck fractal
You had to email the address on the homepage for Day 3
The subscription code for overpass is redeemed
But it's still on the box
Day 3, it was never on the box
white salmon
Yeah i just landed on the page with the hint for day3
stuck fractal
You can no longer obtain the code
white salmon
All good. Thanks for the info 😀
white salmon
I found the api which does stuff... but is not doing anything with the parameter I am supplying in day5 . Is that a rabbit hole?
indigo ridge
why the http of room overpass is so slow.. directory like aboutus is taking so long to open..?
gobuster is also not working...
is this only for me?
umbral tree
hey guys im at the linux room at task 43 - the true ending and i just need to get into the /root/root directory and to do that i gotta have sudo permissions but unfortanetely none of the shiba users has it 😭 what can i do?
white salmon
You checked all the shiba users, which is the right step for sure.
Try checking all users ;)
umbral tree
found the flag 🙂 tnx!
white salmon
No problem, glad it worked out!
atomic shuttle
cam i pm you on ovepass? @green sorrel i have the ||api|| but have no idea what should i do next
green sorrel
sure
keen willow
I found the api which does stuff... but is not doing anything with the parameter I am supplying in day5 . Is that a rabbit hole?
@white salmon nops its not, you just have to see something else too.
worthy iris
hey guys, is there any rooms that deal with stuff such as secret.txt?
keen willow
hey guys, is there any rooms that deal with stuff such as secret.txt?
@worthy iris you mean CTFs
?
worthy iris
i meant, like how would i know what to do with it
keen willow
tell us what room it is, what you were doing in there, what you were expecting ?
worthy iris
i haven't reached a room like that, I'm just playing around with a vulnerable machine I downloaded and found it - so I wanted to know if theres a walkthrough that has something similar so I can learn off it
white salmon
That's usually what you have to figure out
Half the battle is knowing what to do with information that you find
keen willow
secret.txt is quite a general term, and basically a hint to achieve your task. maybe a hashed secret, which you may have to crack.
worthy iris
yeah I figured, I'll keep looking around thanks lads
eternal wadi
Can I PM you @keen willow for OverPass. I got some idea for the js but seems like not working haha
keen willow
Can I PM you @keen willow for OverPass. I got some idea for the js but seems like not working haha
@eternal wadi sure
quiet yarrow
Room = Networking
Question = 10
||A third predominant address type is typically reserved for the router, what is the name of this address type?||
Source =http://www.highteck.net/EN/Network/Addressing_the_Network-IPv4.html
I have googled everyting i can think of the only thing i can find is the above source but i still steam to not be able to find the answer if someone can give me a hint or point me in the right direction it would be very helpful
white salmon
@quiet yarrow A very big hint is, think of your own home router.