#room-hints

wind fog Jul 24, 2020, 7:54 PM

#

nope, still gave me 300 results

trim haven Jul 24, 2020, 7:54 PM

#

No

#

find / -name '*release' 2>/dev/null

#

When using single quotes it's basically saying "only search for this string"

wind fog Jul 24, 2020, 7:55 PM

#

nope, still gave me 300 results 😭

trim haven Jul 24, 2020, 7:55 PM

#

Wut

wind fog Jul 24, 2020, 7:55 PM

#

📎 unknown.png

trim haven Jul 24, 2020, 7:55 PM

#

Oh shoot

#

my b

stuck fractal Jul 24, 2020, 7:56 PM

#

Escape the asterisk

wind fog Jul 24, 2020, 7:56 PM

#

any advice ninja?

stuck fractal Jul 24, 2020, 7:56 PM

#

Find treats it as a pattern

trim haven Jul 24, 2020, 7:56 PM

#

I misseed the \

#

find / -name '\*release' 2>/dev/null

wind fog Jul 24, 2020, 7:56 PM

#

so '\*release'?

trim haven Jul 24, 2020, 7:56 PM

#

Sorry I pasted what was on clipboard and not what I was typing on my commandline

#

find / -name '\*release' 2>/dev/null
@trim haven cough

wind fog Jul 24, 2020, 7:57 PM

#

A A A H G

📎 unknown.png

#

https://tenor.com/view/angry-anger-pixar-inside-out-aaah-gif-5628546

Tenor

trim haven Jul 24, 2020, 7:58 PM

#

Are you the wrong user

#

Let me check the room

#

You are not the correct user I believe.

wind fog Jul 24, 2020, 7:59 PM

#

i only have two, bob and garry

#

at least I think

trim haven Jul 24, 2020, 8:00 PM

#

HOld on

#

What task are you on

wind fog Jul 24, 2020, 8:00 PM

#

task 3

#

question 5

trim haven Jul 24, 2020, 8:01 PM

#

Switch to bob

#

And try again

oblique cliff Jul 24, 2020, 8:01 PM

#

you rang?

trim haven Jul 24, 2020, 8:02 PM

#

Wrong bob kekw

oblique cliff Jul 24, 2020, 8:02 PM

#

🤓

wind fog Jul 24, 2020, 8:02 PM

#

😮

#

nope, nothing for Bob either

trim haven Jul 24, 2020, 8:03 PM

#

I'll boot up the machine 1 second

wind fog Jul 24, 2020, 8:03 PM

#

gimme a sec

#

imma go take a dump

#

ill be back soon

trim haven Jul 24, 2020, 8:06 PM

#

You didn't read the question

#

You do not need to use find

#

The question states:
Can you find information about the system, such as the kernel version etc.

rose root Jul 24, 2020, 8:06 PM

#

Hi. Need some help with jack room. I foud credentials for one user, but this is low level one. He cant manage plugins or templates. Can you give me some hint what sould I do next?

trim haven Jul 24, 2020, 8:07 PM

#

By literally copying and pasting that into my browser I found a directory, then I was able to go into the directory and find the *release file.

stuck fractal Jul 24, 2020, 8:07 PM

#

Hi. Need some help with jack room. I foud credentials for one user, but this is low level one. He cant manage plugins or templates. Can you give me some hint what sould I do next?
@rose root Check the hints on the room, it points you at an exploit

trim haven Jul 24, 2020, 8:07 PM

#

Obama I'd suggest you research more...

rose root Jul 24, 2020, 8:08 PM

#

thanks

wind fog Jul 25, 2020, 12:17 AM

#

Hey lads

#

im on Linux challenges, task 4, and have gotten stuck on a question

#

📎 unknown.png

#

I've been researching C in linux for the past hour and still have no clue what I could do to find the flag

#

if someone could just give me a clue or a hint that would be great

stuck fractal Jul 25, 2020, 12:19 AM

#

strings look into that instead

wind fog Jul 25, 2020, 12:20 AM

#

thanks man, imma go research that now

#

cool got it, thanks for the hint man

rose jasper Jul 25, 2020, 2:05 AM

#

Room: Linux challenges
Flag - 26
How do I solve?
I tried using this but it is returning nothing
find / -size 32c -name “4bceb*” 2> /dev/null

oblique cliff Jul 25, 2020, 2:12 AM

#

have you done the room thefindcommand?

#

the -name flag is looking for the name of a file

#

so youre looking for a file of the name 4bceb, which isnt what you wanna be looking for

rose jasper Jul 25, 2020, 2:35 AM

#

Thanks
I haven’t read the question properly

hardy matrix Jul 25, 2020, 3:21 AM

#

im on the linux room and i don't have permission to use mkdir is there another command i could use?

stuck fractal Jul 25, 2020, 3:22 AM

#

You're the wrong user

#

Or in the wrong dir

final mortar Jul 25, 2020, 3:22 AM

#

You probably are logged in as the wrong user and dont have the permission to make a dir in that particular place

#

How are you so fast james NotLikeThis

stuck fractal Jul 25, 2020, 3:23 AM

#

Expensive keyboard

hardy matrix Jul 25, 2020, 3:24 AM

#

ill try on the other users

stuck fractal Jul 25, 2020, 3:25 AM

#

Go home

final mortar Jul 25, 2020, 3:26 AM

#

If you changed the user successfully, you may be in the old user's home directory which you dont have permission to access. cd ~ brings you to your home directory, or just cd

rocky forge Jul 25, 2020, 3:37 AM

#

BP-networking room predominant addres reserved for router

stuck fractal Jul 25, 2020, 3:38 AM

#

Google will find that

rocky forge Jul 25, 2020, 3:41 AM

#

I tried but all answer where going incorrect

stuck fractal Jul 25, 2020, 3:41 AM

#

Keep looking then

#

name for router ip in network that was easy

rocky forge Jul 25, 2020, 3:43 AM

#

No third predominant address type reserved for router

#

A third predominant address type is typically reserved for the router, what is the name of this address type?

#

Question 10

rocky forge Jul 25, 2020, 4:03 AM

#

Anybody know the answer of it

#

I have tried all possible answers

stuck fractal Jul 25, 2020, 4:04 AM

#

I have tried all possible answers
@rocky forge You have not

#

We do not give out answers here.

#

I have you an exact google search query that would have got you an answer

rocky forge Jul 25, 2020, 4:05 AM

#

Yeah itired exact query

stuck fractal Jul 25, 2020, 4:05 AM

#

Then try changing it slightly

#

The answer is very easily found on google

rocky forge Jul 25, 2020, 4:07 AM

#

Can share link where I can find it

final mortar Jul 25, 2020, 4:09 AM

#

https://google.com

Google

Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for.

autumn rivet Jul 25, 2020, 4:25 AM

#

For Overpass room. There's a golang code which seems to be the key but it's not loaded on opening any web page. Is there a way to run a go method in console

stuck fractal Jul 25, 2020, 4:25 AM

#

For Overpass room. There's a golang code which seems to be the key but it's not loaded on opening any web page. Is there a way to run a go method in console
@autumn rivet Golang is a compiled language, so no

#

But that's a huge rabbit hole

rocky forge Jul 25, 2020, 4:34 AM

#

I was not able find

random thunder Jul 25, 2020, 5:19 AM

#

What encoding is used for cookies?

stuck fractal Jul 25, 2020, 5:19 AM

#

https://stackoverflow.com/questions/25665703/encoding-scheme-used-for-cookies

Stack Overflow

Encoding scheme used for cookies

RFC 6265 Sec 6.1 specifies allowing atleast 4096 bytes per cookie.

Now in order to know the number of characters allowed per cookie, I need to know the character encoding being used for cookies, ...

dark salmon Jul 25, 2020, 6:13 AM

#

Hi i was trying introtox8664 im completely new, i understood some basics and started with radar2 If-statement-Continue section have 4 questions all are at same positions, i mean value of 3 variable before pop and return, i ds before the pop up and entered the value all 3 got success but the value of var_8h is not accepting, the value which i was getting is 60, before pop but it shows wring answer, can anyone help me?

white salmon Jul 25, 2020, 6:14 AM

#

Make sure you are reversing the correct file

#

It teaches you in file1 and asks you to reverse file2

dark salmon Jul 25, 2020, 6:15 AM

#

yeah i did on file 2 only

frank dirge Jul 25, 2020, 6:15 AM

#

Trying to complete the JVM Reverse Engineering room. Stuck with the Advanced String Obfuscation. Do I need to use virtually call the string functions from other code or I need to manually reverse engineer the code?

dark salmon Jul 25, 2020, 6:15 AM

#

because all other values are accepted bro

white salmon Jul 25, 2020, 6:15 AM

#

let me check 1 sec

#

60 is wrong answer try harder

#

Do you mind posting screenshot of the disassembly because I am not in my vm

dark salmon Jul 25, 2020, 6:21 AM

#

i need to check the value of var_8h before pop right? i checked by px @jagged scaffoldp-0x8, while assigning value it was 63 after performing And operation when i check by px @jagged scaffoldp-0x8 the value at 0th offset is 60, after pop operation i check for the same now it was 00

#

where i went wrong

#

📎 Screenshot_308.png

white salmon Jul 25, 2020, 6:26 AM

#

bruh

#

its 60 in hex

#

it means its 96

dark salmon Jul 25, 2020, 6:27 AM

#

oh this itself i dono, so what should i study for this?

stuck fractal Jul 25, 2020, 6:27 AM

#

"what is hexadecimal"

white salmon Jul 25, 2020, 6:28 AM

#

Its just how r2 displays it , actually its stored in binary

dark salmon Jul 25, 2020, 6:28 AM

#

Thanks bros

#

My questions may be very low levels but just now im started thats y

stuck fractal Jul 25, 2020, 6:29 AM

#

Not your bro.

trim haven Jul 25, 2020, 6:29 AM

#

Uh oh

white salmon Jul 25, 2020, 6:31 AM

#

@dark salmon You did good

trim haven Jul 25, 2020, 6:31 AM

#

We all start somewhere!

dark salmon Jul 25, 2020, 6:35 AM

#

😍

gaunt herald Jul 25, 2020, 7:28 AM

#

Since chat lest with room with introtox86_64
How to change the local variables? Or insert new lines of code? I remember someone in here gave the answer, but forgot 😁

white salmon Jul 25, 2020, 7:29 AM

#

You shouldn't need to change local variables or new lines of code in introtox86_64

#

Although if you're curious on how to do that, it's covered in the radare2 room

gaunt herald Jul 25, 2020, 7:30 AM

#

Then I need to reread the crackme2 <_<
Ooohhh, yeah!! I remember about it! Thanks!!

white salmon Jul 25, 2020, 7:31 AM

#

A big hint for crackme2 is that, the password is there, but the program does something to it

#

it only does one function to it if that helps

white salmon Jul 25, 2020, 10:25 AM

#

help for mr robot CTF im new in this and i want to learn about it can someone help me please?

gaunt herald Jul 25, 2020, 10:28 AM

#

https://tryhackme.com/room/zthlinux
Start somewhere low and then go on harder machines, if you got down a rabbit hole then use the hints, if no hints available on that task then look writeups

white salmon Jul 25, 2020, 10:33 AM

#

but there is a litle problem

#

i have a windows on my notebook

gaunt herald Jul 25, 2020, 10:34 AM

#

Okay

white salmon Jul 25, 2020, 10:35 AM

#

so i dont have to learn of Linux when i have windows?

wraith tapir Jul 25, 2020, 10:36 AM

#

The room you are trying to solve is linux based

white salmon Jul 25, 2020, 10:36 AM

#

i know

#

oh you mean the Mr Robot CTF is linux based?

wraith tapir Jul 25, 2020, 10:38 AM

#

yeah

white salmon Jul 25, 2020, 10:38 AM

#

oh sorry my bad

#

thanks for information

#

do you know som windows based room?

#

easy room please

gaunt herald Jul 25, 2020, 10:39 AM

#

Ice, blue

wraith tapir Jul 25, 2020, 10:39 AM

#

good for starters

#

+=Blaster

gaunt herald Jul 25, 2020, 10:40 AM

#

Well... you'll need to complete the 'rp: metasploit' room first to get a hand with it.

white salmon Jul 25, 2020, 10:40 AM

#

ok thank ya

#

sooo metasploit is tool like an NC or something like this?

gaunt herald Jul 25, 2020, 10:47 AM

#

Finish the metasploit room and you'll see :)

white salmon Jul 25, 2020, 10:47 AM

#

ok

white salmon Jul 25, 2020, 11:19 AM

#

ehhhhh i have a problems with the app

#

can someone help me please?

final mortar Jul 25, 2020, 11:20 AM

#

http://dontasktoask.com

Don't ask to ask, just ask

oblique cliff Jul 25, 2020, 11:21 AM

#

Can you be more specific please?

white salmon Jul 25, 2020, 11:21 AM

#

yes sorry

oblique cliff Jul 25, 2020, 11:21 AM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

white salmon Jul 25, 2020, 11:21 AM

#

ok sorry

#

i have problems with the ap Metalsploit in instaling proggres . The app instals but i cant see the app anywhere

trim haven Jul 25, 2020, 11:24 AM

#

Type msfconsole into a terminal

final mortar Jul 25, 2020, 11:24 AM

#

msfconsole -q blobknife

white salmon Jul 25, 2020, 11:24 AM

#

nothing happens

trim haven Jul 25, 2020, 11:25 AM

#

You haven’t installed it..?

#

sudo apt install metasploit

#

What OS are you running actually?

white salmon Jul 25, 2020, 11:25 AM

#

windows

trim haven Jul 25, 2020, 11:25 AM

#

Oh

#

Well I can’t help you there

white salmon Jul 25, 2020, 11:26 AM

#

can i somehow change OS on laptop??

trim haven Jul 25, 2020, 11:26 AM

#

https://www.google.co.uk/amp/s/blog.didierstevens.com/2017/08/14/using-metasploit-on-windows/amp/

Didier Stevens

Using Metasploit On Windows

In my previous post “Reading Memory Of 64-bit Processes” I used the Windows version of Metasploit so that I could do all tests with a single machine: running the Meterpreter client and …

#

You need to run the .bat executable

final mortar Jul 25, 2020, 11:26 AM

#

Why sink deeper in the hole though

#

Get a vm running

white salmon Jul 25, 2020, 11:26 AM

#

oh thanks

final mortar Jul 25, 2020, 11:28 AM

#

can i somehow change OS on laptop??
are you familiar with the concept of virtual machines ? If not you can search for Vmware and how to use it

oblique cliff Jul 25, 2020, 11:34 AM

#

@white salmon yea as they suggested I’d recommend using a kali vm at least to start 🙂

white salmon Jul 25, 2020, 11:36 AM

#

i have instaled kali

final mortar Jul 25, 2020, 11:36 AM

#

Why did you answered with windows when jabba asked for your os

white salmon Jul 25, 2020, 11:37 AM

#

bcs i dont using kali bcs i dont know how tothrow it back from kali to windows

final mortar Jul 25, 2020, 11:38 AM

#

What do you mean I dont know how to throw kali back to windows

#

You installed kali in a virtual machine ? on windows host ?

oblique cliff Jul 25, 2020, 11:40 AM

#

You can do all the exploiting on kali for now there’s no need to get anything back to your windows machine (for now)

white salmon Jul 25, 2020, 11:41 AM

#

sooo

#

i have to change the OS of my computer to kali yeah?

final mortar Jul 25, 2020, 11:42 AM

#

No one said that

#

I said to use a virtual machine, so you can use kali inside of your windows os

white salmon Jul 25, 2020, 11:43 AM

#

ohhhh

#

sry my bad

#

my english is bad at this

#

sooo i have to run a virtual machine with kali yeah?

final mortar Jul 25, 2020, 11:46 AM

#

Yes

white salmon Jul 25, 2020, 11:46 AM

#

but that costs money

final mortar Jul 25, 2020, 11:47 AM

#

Community version of VMware is free

#

VirtualBox, an alternative to VMware is free

white salmon Jul 25, 2020, 11:47 AM

#

thanks

final mortar Jul 25, 2020, 11:47 AM

#

Kali Linux is free

white salmon Jul 25, 2020, 11:48 AM

#

thank ya

grave rain Jul 25, 2020, 11:50 AM

#

Why do we have to install nessus in a vm

#

^just asking

#

Is it fine to install into an os like parrot?

#

Without the vm*

final mortar Jul 25, 2020, 11:53 AM

#

Yes

grave rain Jul 25, 2020, 11:53 AM

#

Thanks :)

#

So its just that windows isnt recommended right?

final mortar Jul 25, 2020, 11:54 AM

#

you can install on windows, but what's the point of separating your tools b/w Linux and windows when you have to use Linux anyways

grave rain Jul 25, 2020, 11:55 AM

#

Yaa obv wont do that

#

But in the room it said it was highly recommended in a vm and all

#

Anyways fine 👍

white salmon Jul 25, 2020, 11:59 AM

#

how i put kali in virtual box please?

trim haven Jul 25, 2020, 12:00 PM

#

Ask in #general

#

This is for rooms only.

white salmon Jul 25, 2020, 12:00 PM

#

oh sorry

oblique cliff Jul 25, 2020, 12:00 PM

#

@white salmon very googleable, lots of guides out there for that 🙂

white salmon Jul 25, 2020, 12:30 PM

#

im stuck in Metasploit Task 2 question 6

trim haven Jul 25, 2020, 12:30 PM

#

That's not helpful

oblique cliff Jul 25, 2020, 12:30 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

trim haven Jul 25, 2020, 12:31 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

oblique cliff Jul 25, 2020, 12:31 PM

#

hehe

white salmon Jul 25, 2020, 12:31 PM

#

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

trim haven Jul 25, 2020, 12:31 PM

#

Too fast for me, Sir tipsfedora I'll let you handle this.

white salmon Jul 25, 2020, 12:31 PM

#

i typed the stage?

oblique cliff Jul 25, 2020, 12:32 PM

#

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

white salmon Jul 25, 2020, 12:33 PM

#

the Metasploit cant connect to data service and i dont know why

oblique cliff Jul 25, 2020, 12:33 PM

#

so then youre stuck on question 5, not question 6, right?

white salmon Jul 25, 2020, 12:33 PM

#

sorry

#

yeah question 5

oblique cliff Jul 25, 2020, 12:34 PM

#

were you able to successfully complete all the questions before that?

white salmon Jul 25, 2020, 12:34 PM

#

yeah

oblique cliff Jul 25, 2020, 12:34 PM

#

so question 1, initialize the database, that worked?

white salmon Jul 25, 2020, 12:35 PM

#

yeah

oblique cliff Jul 25, 2020, 12:35 PM

#

can you show the output of when you do the db_status command please

white salmon Jul 25, 2020, 12:36 PM

#

yeah no problem

#

postgresql selected, no connection

#

print screan not working

#

but that it types

oblique cliff Jul 25, 2020, 12:39 PM

#

yea, thats all you need actually

white salmon Jul 25, 2020, 12:40 PM

#

what??

#

i dont get it

#

soo

oblique cliff Jul 25, 2020, 12:40 PM

#

the questions asked in the room

white salmon Jul 25, 2020, 12:40 PM

#

oh

#

ok

#

so this is right?

oblique cliff Jul 25, 2020, 12:41 PM

#

uh, im not sure what the connection status is supposed to be, but you can answer the questions in the room with what you see

#

@white salmon

white salmon Jul 25, 2020, 12:42 PM

#

oh sorry for losing your time

final mortar Jul 25, 2020, 12:43 PM

#

You can't loose his time, you can loose your time and you can waste him time

#

but you didn't wasted anyone's time 🙂 Keep asking

trim haven Jul 25, 2020, 12:43 PM

#

Learning is not wasting time :D

#

We're here by choice ask away ;)

final mortar Jul 25, 2020, 12:44 PM

#

Jabba help stuck

#

need to hack google

trim haven Jul 25, 2020, 12:44 PM

#

Uhh

#

Reverse the url then append it to a binary and hash it

tidal sedge Jul 25, 2020, 12:44 PM

#

blobhuh

trim haven Jul 25, 2020, 12:45 PM

#

Broke Malware's brain kekw

tidal sedge Jul 25, 2020, 12:45 PM

#

No your statement doesn't make any sense, how can they hack google by appending the url to a binary and hashing it? try harder 😀

trim haven Jul 25, 2020, 12:47 PM

#

You tell me 😭

final mortar Jul 25, 2020, 12:47 PM

#

🧐

oblique cliff Jul 25, 2020, 12:47 PM

#

worked for me last night 🤔

tidal sedge Jul 25, 2020, 12:47 PM

#

Send proof blobknife

trim haven Jul 25, 2020, 12:48 PM

#

Yeah here's your password-

oblique cliff Jul 25, 2020, 12:48 PM

#

deleted all my traces 👀

final mortar Jul 25, 2020, 12:48 PM

#

you are assuming he has a google account

trim haven Jul 25, 2020, 12:48 PM

#

I'm not assuming, I know 😎

final mortar Jul 25, 2020, 12:49 PM

#

( •̀ ω •́ )y

white salmon Jul 25, 2020, 12:51 PM

#

If he sent you proof, then that'd be incriminating himself, duh

tidal sedge Jul 25, 2020, 12:52 PM

#

He hasn't pleaded the fifth yet so 🤷

oblique cliff Jul 25, 2020, 1:12 PM

#

i plead the 50th

#

which is 10 times stronger than the 5th

final mortar Jul 25, 2020, 1:15 PM

#

blobhuh

dark salmon Jul 25, 2020, 1:18 PM

#

HI team i was newly working on reverse engineering, on this room i was trying to reverse the binary and to find the password, if you enter right password it prints some success message. but my problem is previous sections teaches me about the If conditions & Loops, initially i tried with general procedure of what they teaches but no luck for me, i dont need an answer, i need guidance can someone help me

#

📎 Screenshot_311.png

#

Room: introtox8664

heavy anvil Jul 25, 2020, 2:00 PM

#

you need to keep track of jump instructions

oblique cliff Jul 25, 2020, 2:01 PM

#

@dark salmon which part is that?

sharp ether Jul 25, 2020, 3:59 PM

#

Hey there

#

i am on toolsrus room

#

i m stucked in the part that is meant to be solved with nikto

trim haven Jul 25, 2020, 4:01 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on
At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?
What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

sharp ether Jul 25, 2020, 4:02 PM

#

"Use Nikto with the credentials you have found and scan the /manager/html directory on the port found above.

How many documentation files did Nikto identify?"

#

and i using the next cmd:
"nikto -id user:pass -h http://ipmachine/manager/html -p 1234"

#

and i get this output:
"- Nikto v2.1.5

Target IP: 10.10.28.208
Target Hostname: 10.10.28.208
Target Port: 80
Start Time: 2020-07-25 12:24:00 (GMT-3)

Server: Apache/2.4.18 (Ubuntu)
The anti-clickjacking X-Frame-Options header is not present.
No CGI Directories found (use '-C all' to force check all possible dirs)
Allowed HTTP Methods: OPTIONS, GET, HEAD, POST
6544 items checked: 0 error(s) and 2 item(s) reported on remote host
End Time: 2020-07-25 12:51:33 (GMT-3) (1653 seconds)

1 host(s) tested"

green prism Jul 25, 2020, 4:05 PM

#

@dark salmon for RE i could help you out, tho if you want someone more experienced ask @oblique cliff

oblique cliff Jul 25, 2020, 4:08 PM

#

If you want my master ask @white salmon but I’m always happy to help 🙂

white salmon Jul 25, 2020, 4:08 PM

#

👀

final mortar Jul 25, 2020, 4:08 PM

#

blobfingerguns

#

Only I can send blobfingerguns 😡

green prism Jul 25, 2020, 4:09 PM

#

@white salmon wait smackhack you into RE?

final mortar Jul 25, 2020, 4:09 PM

#

Dont tag anyone in a normal follow-up conversation 🙂 Thanks

white salmon Jul 25, 2020, 4:09 PM

#

yeah i did it maybe once or a lot

green prism Jul 25, 2020, 4:10 PM

#

that's pretty ambiguous

#

lol

white salmon Jul 25, 2020, 4:10 PM

#

kekw

green prism Jul 25, 2020, 4:10 PM

#

maybe that one time you did it made you understand it completely 🤔

#

quantum i'll keep that in mind

sharp ether Jul 25, 2020, 4:12 PM

#

and i using the next cmd:
"nikto -id user:pass -h http://ipmachine/manager/html -p 1234"
It wasn't working because i have to put the port inside the URL, solved

white salmon Jul 25, 2020, 4:13 PM

#

HI team i was newly working on reverse engineering, on this room i was trying to reverse the binary and to find the password, if you enter right password it prints some success message. but my problem is previous sections teaches me about the If conditions & Loops, initially i tried with general procedure of what they teaches but no luck for me, i dont need an answer, i need guidance can someone help me
@dark salmon
My biggest advice for RE if you're not comfortable reading static assembly code is to take advantage of the debugger and set breakpoints before critical points. You know it's a password check, so look for all the functions and parts of the code that seems to relate to "checking for a password". Identify the registers that contain your input, and identify the registers that also keep track of the password possibly

#

If you see a loop, that usually means some kind of function is being performed, possibly arithmetic or something, especially if it repeats more than once

#

it's good to inspect the registers before a loop, and after a loop to see what the difference is, and see if you can identify a pattern

green prism Jul 25, 2020, 4:14 PM

#

this is exactly what i did to solve the final task of the radare2 room

hasty slate Jul 25, 2020, 4:38 PM

#

@dark salmon
My biggest advice for RE if you're not comfortable reading static assembly code is to take advantage of the debugger and set breakpoints before critical points. You know it's a password check, so look for all the functions and parts of the code that seems to relate to "checking for a password". Identify the registers that contain your input, and identify the registers that also keep track of the password possibly
@white salmon i thought this was for the room RA, and was confused for quite a while.

#

kekw

white salmon Jul 25, 2020, 4:38 PM

#

LMAO

lone scroll Jul 25, 2020, 4:40 PM

#

hi, if i have a qustion about the room "learn linux"

#

where i can ask it?here?

green prism Jul 25, 2020, 4:41 PM

#

sure

lone scroll Jul 25, 2020, 4:41 PM

#

aehh ok..i`m new here and just want to know..

#

ok my qustion is about the task11

#

first, i don`t understant where i need the run the machine..how i need to run the shilba

#

i just make a TXT file in my machine and don`t get any password haha

stuck fractal Jul 25, 2020, 4:43 PM

#

Task 1, click the deploy button

#

Task 4, walks you through connecting to that machine

green prism Jul 25, 2020, 4:45 PM

#

usually tasks should be done in order

#

so you don't miss out on anything

lone scroll Jul 25, 2020, 4:47 PM

#

ok thanks

carmine sphinx Jul 25, 2020, 5:02 PM

#

hey, im at the "learn linux". i'm not understanding the consept of a file having a user and a group (i'm in the task 25). Like why would i change the user and not group, what would it change? Can someone explain it for me?

white salmon Jul 25, 2020, 5:04 PM

#

There is only one user for a file, but a group can have several different users in it.

#

A good practical example would be if you wanted to let everybody work on a project at once, you would put them in the same group and every directory/file that they're working with can be interacted with by other members in the same group (depending on the perms on the file/directory)

carmine sphinx Jul 25, 2020, 5:13 PM

#

hmmmm yeah makes sense, thanks alot 🙂

white salmon Jul 25, 2020, 5:18 PM

#

hey, im stuck at the task 5 question 1 in Metasploit can someone help me please?

stuck fractal Jul 25, 2020, 5:19 PM

#

What have you tried?

#

There's no answer

#

So why are you stuck?

white salmon Jul 25, 2020, 5:20 PM

#

because the comand does not working

stuck fractal Jul 25, 2020, 5:20 PM

#

That's far too vague

white salmon Jul 25, 2020, 5:21 PM

#

what?

stuck fractal Jul 25, 2020, 5:21 PM

#

because the comand does not working
@white salmon Explain.

white salmon Jul 25, 2020, 5:21 PM

#

oh

#

the comand output is Database not connected

#

but i have connected mi database

stuck fractal Jul 25, 2020, 5:22 PM

#

Clearly not tho

white salmon Jul 25, 2020, 5:23 PM

#

when i type db_stats output says

#

postgresql selected, no conection

stuck fractal Jul 25, 2020, 5:24 PM

#

So you're not connected to the database

white salmon Jul 25, 2020, 5:24 PM

#

but

#

i dont know how to repare it

stuck fractal Jul 25, 2020, 5:25 PM

#

#general for fixing your metasploit. That's outside the scope of the help channels here

white salmon Jul 25, 2020, 5:26 PM

#

ok

#

but in general is random chat

stuck fractal Jul 25, 2020, 5:36 PM

#

It's also help outside the scope of the help channels

#

Which your issue is now.

crystal glade Jul 25, 2020, 5:41 PM

#

@white salmon How about search on google it will help you solve the problem with metasploit

white salmon Jul 25, 2020, 5:54 PM

#

i have searched. nothing helps me

crystal glade Jul 25, 2020, 5:55 PM

#

btw you can use nmap

white salmon Jul 25, 2020, 7:09 PM

#

when i type nmap and hit enter it types unkown command :nmap

crystal glade Jul 25, 2020, 7:09 PM

#

check pm

#

@white salmon i texted you

robust nymph Jul 25, 2020, 7:43 PM

#

Hey folks, I'm on the new Brooklyn 99 room, getting this error back. ||steghide: can not uncompress data. compressed data is corrupted.|| Is this intended? If so any hints on how to fix the ||corrupted data||? Google is mostly showing me windows applications to solve it

gusty ermine Jul 25, 2020, 8:00 PM

#

@robust nymph try ||stegcracker||

robust nymph Jul 25, 2020, 8:09 PM

#

Didn't expect that to be the way, thank you @gusty ermine

gusty ermine Jul 25, 2020, 8:09 PM

#

no problem man

white salmon Jul 25, 2020, 8:15 PM

#

uh that's the other way

remote yarrow Jul 25, 2020, 8:18 PM

#

hello just with root that will is it the best idea to use GTOFBins

#

to get sudo

#

or there is other best website

stuck fractal Jul 25, 2020, 8:19 PM

#

programName priv esc into google

#

Varies by room

robust nymph Jul 25, 2020, 8:20 PM

#

Now I'm feeling really dumb, have creds to log in but I must be getting the username wrong? I've tried many variations of ||Holt, Holts, Jake, Amy|| Can't figure out where this password goes besides ||ssh||

white salmon Jul 25, 2020, 8:21 PM

#

What variations did you try

remote yarrow Jul 25, 2020, 8:21 PM

#

@stuck fractal thnx

robust nymph Jul 25, 2020, 8:21 PM

#

||Holts, Amy, Holt, Ray, Jake, holts, jake||

white salmon Jul 25, 2020, 8:22 PM

#

In that list one of them is right

robust nymph Jul 25, 2020, 8:22 PM

#

I guess that's not as many tries as I thought lol

#

Hmm okay

#

I'll keep trying thank you

white salmon Jul 25, 2020, 8:22 PM

#

Also it literally says which user has weak pass

robust nymph Jul 25, 2020, 8:23 PM

#

@white salmon could I pm you a question?

white salmon Jul 25, 2020, 8:23 PM

#

@white salmon could I pm you a question?
@robust nymph sure

carmine frigate Jul 25, 2020, 8:27 PM

#

hey did any one complete the "Brooklyn Nine Nine" room?

gusty ermine Jul 25, 2020, 8:27 PM

#

yep

carmine frigate Jul 25, 2020, 8:28 PM

#

im stuck on the stego part can you give me a hint?

gusty ermine Jul 25, 2020, 8:29 PM

#

||brooklin99.jpg||?

carmine frigate Jul 25, 2020, 8:29 PM

#

yes

#

i cant seem to find any info in the image

gusty ermine Jul 25, 2020, 8:29 PM

#

@robust nymph try ||stegcracker||

carmine frigate Jul 25, 2020, 8:36 PM

#

thanks!!

remote yarrow Jul 25, 2020, 9:04 PM

#

dm me for any question about brooklynninenine (rooted) Hints!!

rapid flower Jul 25, 2020, 9:29 PM

#

Easy peasy room... It is... Brooklyn 99... initial foothold matters though 😅

white salmon Jul 25, 2020, 9:30 PM

#

how do i access a directory that is locked?

#

i mean,without root account

rapid flower Jul 25, 2020, 9:31 PM

#

@white salmon privEsc

white salmon Jul 25, 2020, 9:32 PM

#

what's?

rapid flower Jul 25, 2020, 9:33 PM

#

You need to escalate your current privileges to root level

white salmon Jul 25, 2020, 9:34 PM

#

📎 Screenshot_176.png

#

i cannot do nothing so access this directory without root

rapid flower Jul 25, 2020, 9:35 PM

#

What challenge is that?

white salmon Jul 25, 2020, 9:35 PM

#

learn linux

stuck fractal Jul 25, 2020, 9:35 PM

#

Learn Linux task 43

white salmon Jul 25, 2020, 9:35 PM

#

final quest

stuck fractal Jul 25, 2020, 9:35 PM

#

You need to get root privileges

minor trellis Jul 25, 2020, 9:49 PM

#

does anyone have any hints for SET box? I'm dying here 😅

hardy matrix Jul 25, 2020, 10:02 PM

#

anyone have a hint for the last task in learn linux

trim haven Jul 25, 2020, 10:02 PM

#

Look for who owns what files

#

Maybe you can come up with a find command to aid your discovery.

hardy matrix Jul 25, 2020, 10:04 PM

#

thanks

#

thanks i got it

trim haven Jul 25, 2020, 10:12 PM

#

blobheart

arctic crystal Jul 25, 2020, 10:58 PM

#

Hey can anyone help me with Brooklyn 99

#

I'm not able to escalate my privilege

#

I want some hint on how to escalate my privilege

trim haven Jul 25, 2020, 11:06 PM

#

It is a new room, not many people have completed it. You might have to wait a while, whilst you're waiting keep trying!

scenic atlas Jul 25, 2020, 11:17 PM

#

Privesc on Brooklin99 it's pretty straightforward. Just keep trying and you'll get there

arctic crystal Jul 25, 2020, 11:35 PM

#

Yup got it

white salmon Jul 25, 2020, 11:39 PM

#

could I get a hint for the last bonus question on the Agent Sudo room?

oblique cliff Jul 25, 2020, 11:55 PM

#

Enumerate the machine more

#

Pretty sure you already saw it when you answered a previous question @white salmon

white salmon Jul 25, 2020, 11:56 PM

#

ohhhhh, you're right. didn't make the connection lol thanks

#

lol i'm lying i just didn't bother to read the message xD

teal merlin Jul 26, 2020, 1:54 AM

#

hi im new to this and trying to figure out how to find the answer this question "After accessing his account, what did the user mcinventory request?" i dont want the answer just some help on how to get to it. its on the 1st problem of the Christmas thing
thank you

stuck fractal Jul 26, 2020, 1:55 AM

#

Log in as that user

#

then you see it

teal merlin Jul 26, 2020, 1:56 AM

#

damn thats easy lol thank you

past edge Jul 26, 2020, 2:01 AM

#

hey guys i need help cracking password

#

📎 88469617-81358600-cec1-11ea-9ec9-e70fb71326cd.png

#

hashcat -a 0 -m 0 cc3a0280e4fc1415930899896574e118 /usr/share/wordlists/rockyou.txt.gz --force

#

and it says that i exhausted the keyspace

#

pls tell me what i do wrong

wooden mist Jul 26, 2020, 2:04 AM

#

rockyou.txt.gz

#

the text file is compressed

#

uncompress it first

past edge Jul 26, 2020, 2:04 AM

#

ah

#

okok

#

thankies

#

📎 unknown.png

#

it doesn't seem to fix the issue

#

@wooden mist

wooden mist Jul 26, 2020, 2:07 AM

#

don't use --force

#

it produces false-positives and false-negatives

#

if hashcat doesn't want to run without --force then use john

past edge Jul 26, 2020, 2:07 AM

#

is there a problem with my hashcat

#

?

#

it runs --benchmark just fine

#

📎 unknown.png

wooden mist Jul 26, 2020, 2:09 AM

#

¯_(ツ)_/¯

#

force is bad

past edge Jul 26, 2020, 2:09 AM

#

https://tenor.com/view/cute-cat-crying-tears-sad-emotional-gif-15881815

Tenor

red arch Jul 26, 2020, 4:17 AM

#

just finished Brooklyn99 Final, does the brooklyn99.jpeg have any meaning? ||I tried using steghide but it told me the compressed data is corrupted, also used some online tool for it and it gave me some gibberish. Im pretty sure its the second way to get root access, could you give me a hint?||

latent jungle Jul 26, 2020, 4:36 AM

#

Hi Team, I have a doubt in Basic Room called Goodle Dork Room -
What is an example of the type of contents that could be gathered from a website?

#

Any Hints can really Help me

#

Example of Type of Content - can be metadata or Any Text type or image or vedio

stuck fractal Jul 26, 2020, 4:37 AM

#

I recommend reading back through the material

latent jungle Jul 26, 2020, 4:37 AM

#

oh

stuck fractal Jul 26, 2020, 4:38 AM

#

Because it answers all those questions and it's an assessment of your reading skills

latent jungle Jul 26, 2020, 4:38 AM

#

I see Understood

#

Thank yoiu

crisp wigeon Jul 26, 2020, 4:57 AM

#

@red arch you can read the above chats for the second way

indigo ridge Jul 26, 2020, 5:06 AM

#

just finished Brooklyn99 Final, does the brooklyn99.jpeg have any meaning? ||I tried using steghide but it told me the compressed data is corrupted, also used some online tool for it and it gave me some gibberish. Im pretty sure its the second way to get root access, could you give me a hint?||
@red arch yes i just used that..

#

pretty simple

restive cloak Jul 26, 2020, 5:45 AM

#

Morning all (at least over here it is 🙂 ) I am just about to finish the Skynet piece but I would like a bit of advice. On the CMS login I found some commented out code that gives you the oportunity to reset password. I managed to get it to appear and added my skynet email address, but I never received an email. I tested the squirrel mail and it works fineas I can send and receive to myself. Should I continue try for practice or is this a bit of a rabbit hole?

latent jungle Jul 26, 2020, 6:35 AM

#

Because it answers all those questions and it's an assessment of your reading skills
@stuck fractal Got it !!! Super thanks

white salmon Jul 26, 2020, 11:26 AM

#

Have you guys had trouble with getting the Brainstorm exploit to work on the THM server but it works on a test machine?

oblique cliff Jul 26, 2020, 11:42 AM

#

@white salmon #685858111952781324 message

white salmon Jul 26, 2020, 11:45 AM

#

@oblique cliff, Sorry that link is taking me to a different place Every time.

#

Can you give me a screenshot please.

#

?

oblique cliff Jul 26, 2020, 11:46 AM

#

Brainstorm is unstable and/or broken

#

In bug submissions

white salmon Jul 26, 2020, 11:48 AM

#

Is the bug submissions just all the bugs that are attempting to be fixed right now.

#

?

torn pine Jul 26, 2020, 11:49 AM

#

It's bugs that are recognized and therefore submitted to the developers to be fixed in the near future

#

so they don't have to go through all the texts in these rooms to find what needs to be fixed

white salmon Jul 26, 2020, 11:49 AM

#

Okay thank you.

torn pine Jul 26, 2020, 11:49 AM

#

np

oblique cliff Jul 26, 2020, 11:50 AM

#

It means you can do the room if you want but it’s 50/50 if you get it working rn

white salmon Jul 26, 2020, 11:50 AM

#

Is the bug the test binary and service on the actual machine not matching up in addresses?

oblique cliff Jul 26, 2020, 11:51 AM

#

Brainstorm is unstable and/or broken

#

This is the bug

#

I don’t have why more information than you

#

I just know people can get it working locally and not remotely sometimes

white salmon Jul 26, 2020, 11:51 AM

#

Ok, that's all we have.

#

OK, thank you.

#

And also one of the qquestions ask how many ports are open.

#

I put in 3 but it says that it is wrong?

#

Is this known?

oblique cliff Jul 26, 2020, 11:59 AM

#

Yep

#

To both

torn pine Jul 26, 2020, 11:59 AM

#

Skip the room for now and return to it at a later time

white salmon Jul 26, 2020, 12:02 PM

#

Yep, will do.

broken cloud Jul 26, 2020, 12:09 PM

#

Anybody can help me what to use to view the web app souce code / I mean not the web page source code but that web app souce code any tool I can use!

white salmon Jul 26, 2020, 12:11 PM

#

@broken cloud
Right click, view page source?

#

In Firefox?

torn pine Jul 26, 2020, 12:13 PM

#

Anybody can help me what to use to view the web app souce code / I mean not the web page source code but that web app souce code any tool I can use!
@broken cloud I'm not sure what you mean.. Have you already got the source code downloaded? And just want to view it?

broken cloud Jul 26, 2020, 12:14 PM

#

@white salmon thanks for response. But The room says web application souce code has the default username and password

I check the page source but there was nthg there

twin stratus Jul 26, 2020, 12:14 PM

#

I was struggling a bit with bof1 caused by the different address spaces when launched in the debugger or shell as discussed in #room-help by @oblique cliff and @stuck fractal
So here's a litte rarun config to have the same environment in radare2 debugging mode, as if it would be if you start the program normally:

#!/usr/bin/rarun2

setenv=PATH=<PATH>
setenv=_=<file>
unsetenv=R2_BITS
unsetenv=TMPDIR
unsetenv=RABIN2_DEMANGLE
unsetenv=R2_ARCH
unsetenv=R2_IOVA
unsetenv=R2_XOFFSET
unsetenv=RABIN2_LANG
unsetenv=R2_FILE
unsetenv=RABIN2_PDBSERVER
unsetenv=R2_BSIZE
unsetenv=R2_ENDIAN
unsetenv=R2_COLOR
unsetenv=R2_SIZE
unsetenv=R2_DEBUG
unsetenv=R2_OFFSET

PATH has to be set to your user's current PATH variable and _ is set to the file you run (e.g. ./buffer-overflow-2)
save as <config>.rr2 and launch with
r2 -d <file> -r <config>.rr2

#

worked in my testing

📎 unknown.png

torn pine Jul 26, 2020, 12:16 PM

#

@broken cloud What room, task, question?

broken cloud Jul 26, 2020, 12:17 PM

#

Top 10 owsap--> task 20-->Q2

torn pine Jul 26, 2020, 12:19 PM

#

@broken cloud And where does it say that the web application source code has the default username password?

#

The task description is just a teaching description, and has nothing directly to do with the question.. but gives a very good pointer on what do to, to answer the question

#

And if youre referring to the hint, it says find the app's source code, which is just rightclick -> view page source as said earlier

broken cloud Jul 26, 2020, 12:24 PM

#

@torn pine thanks for the help . I didn't get anything from that I was doing that for a while so I thought I am doing something wrong so I thought to ask any if there is any chache here .
But as you said the hint refers to veiw page source than I think I should give it a one more try might I find the default username and password

gentle mural Jul 26, 2020, 12:31 PM

#

@broken cloud normally you cannot view the source code on the backend, but maybe the application is open source?

broken cloud Jul 26, 2020, 12:33 PM

#

If it is open source how can I view the source code@gentle mural

dapper iron Jul 26, 2020, 12:47 PM

#

I'm stuck at room "common linux privesc" Task9 #4, I have what I'm pretty sure to be the answer, but it does't accept it. According to the answer format i need to add one symbol but all symbols that make sense to me don't work. The hint only reveals what i already knew and googling has not led to an answer

trim haven Jul 26, 2020, 12:47 PM

#

Hm one second

dapper iron Jul 26, 2020, 12:47 PM

#

📎 Screenshot_from_2020-07-26_14-47-27.png

#

my answer:

echo ./bin/bash > ls

trim haven Jul 26, 2020, 12:48 PM

#

./bin/bash is trying to execute /bin/bash

dapper iron Jul 26, 2020, 12:48 PM

#

Yeah i originally took the . out, but the format makes me thinks it needs it

trim haven Jul 26, 2020, 12:48 PM

#

If you look at the hint, look at how /bin/bash is written

dapper iron Jul 26, 2020, 12:49 PM

#

Ah, right

#

Thank you

trim haven Jul 26, 2020, 12:49 PM

#

:D

dapper iron Jul 26, 2020, 12:50 PM

#

😅

broken cloud Jul 26, 2020, 12:52 PM

#

If it is open source how can I view the source code
Anyone who can help me with this!

trim haven Jul 26, 2020, 12:52 PM

#

If it is open source

#

It means that it is somewhere on the internet

#

So if it is on the internet

#

Maybe get a company name and google it 🤔

broken cloud Jul 26, 2020, 12:56 PM

#

Okk🌟

#

Btw is there anyone who has already solved this room?

trim haven Jul 26, 2020, 12:57 PM

#

Yes

#

Many people including myself

broken cloud Jul 26, 2020, 12:59 PM

#

So am I looking at the right place 🙄😅

trim haven Jul 26, 2020, 1:00 PM

#

What are you searching

broken cloud Jul 26, 2020, 1:08 PM

#

according to hint i am searching for default user and pass in view source code

📎 top10_Task20_hint.PNG

solemn smelt Jul 26, 2020, 1:11 PM

#

Just google ‘how to look at web pages source code’ @broken cloud

broken cloud Jul 26, 2020, 1:14 PM

#

i did and i always responce me with use ctrl+u or right cilck and select view page source

#

i refer different page but give me the same answer.

oblique cliff Jul 26, 2020, 1:18 PM

#

And have you tried those?

broken cloud Jul 26, 2020, 1:24 PM

#

use but didnt come accross anything that cout help me with default use and pass\

oblique cliff Jul 26, 2020, 1:24 PM

#

What happened when you tried them?

open storm Jul 26, 2020, 1:25 PM

#

@broken cloud owasp challenge ?

broken cloud Jul 26, 2020, 1:25 PM

#

YES

#

task20

open storm Jul 26, 2020, 1:27 PM

#

The source code is not necessary the one you can find by "ctrl+u".

#

for instance most cms have default passwords that you can find with a bit of OSINT

broken cloud Jul 26, 2020, 1:28 PM

#

ok that means i have to guess !

#

i look into main file changepw and mynotes

#

i also came across a comment with a js script on it

open storm Jul 26, 2020, 1:30 PM

#

No it means that you have to find it somewhere

broken cloud Jul 26, 2020, 1:31 PM

#

also when ever i click mynotes it redirect me to the main page

#

why is that

#

also there is a list with txt null on it

stuck fractal Jul 26, 2020, 1:38 PM

#

That's the page source

#

Not the webapp source

broken cloud Jul 26, 2020, 1:39 PM

#

yes

#

any idea how to view web app source

stuck fractal Jul 26, 2020, 1:40 PM

#

Have you tried looking on the internet for it?

broken cloud Jul 26, 2020, 1:40 PM

#

yes

stuck fractal Jul 26, 2020, 1:40 PM

#

Try again

#

You will find it

broken cloud Jul 26, 2020, 1:40 PM

#

show the same use crtl +u

stuck fractal Jul 26, 2020, 1:40 PM

#

False.

#

Keep looking on the internet. There's a common website used to share source code for open source apps. You can find it, I believe on you.

broken cloud Jul 26, 2020, 1:47 PM

#

i know of soucre forge

#

did you have done that that room

stuck fractal Jul 26, 2020, 1:57 PM

#

More than done that room

#

I created that challenge

cedar coral Jul 26, 2020, 2:06 PM

#

any one did WebGramming Subscribe ?

severe bloom Jul 26, 2020, 2:32 PM

#

Do anyone have problem downloading the backup file in the https://tryhackme.com/room/node1

TryHackMe

TryHackMe | Node 1

Node is a medium level boot2root challenge, originally created for HackTheBox.

trim haven Jul 26, 2020, 2:35 PM

#

What have you tried?

tidal sedge Jul 26, 2020, 2:35 PM

#

Yeah, that's a bug, I couldn't download it too

severe bloom Jul 26, 2020, 2:42 PM

#

wow that is strange

#

design that way??

trim haven Jul 26, 2020, 2:44 PM

#

No

#

A bug is usually unindented

tidal sedge Jul 26, 2020, 2:46 PM

#

Yeah, from what I gather it's a bug 🤷 Try downloading it using wget or curl

severe bloom Jul 26, 2020, 2:46 PM

#

ok i will

#

thanks

severe bloom Jul 26, 2020, 3:44 PM

#

wget and curl can't download it

#

dsame error

trim haven Jul 26, 2020, 5:16 PM

#

Hm it is strange

tacit owl Jul 26, 2020, 6:02 PM

#

hello

#

need help gamezone room stuck at Task 5 question 2

oblique cliff Jul 26, 2020, 6:04 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

minor trellis Jul 26, 2020, 6:05 PM

#

can anyone provide a hint for SET box I have question but don't want to post spoiler

tacit owl Jul 26, 2020, 6:05 PM

#

as per question i follow step run ssh -L 10000:localhost:10000 <username>@<ip>

#

but its give me a output

#

agent47@10.10.45.19's password:
bind: Address already in use
channel_setup_fwd_listener_tcpip: cannot listen to port: 10000
Could not request local forwarding.
Welcome to Ubuntu 16.04.6 LTS (GNU/Linux 4.4.0-159-generic x86_64)

Documentation: https://help.ubuntu.com
Management: https://landscape.canonical.com
Support: https://ubuntu.com/advantage

109 packages can be updated.
68 updates are security updates.

oblique cliff Jul 26, 2020, 6:17 PM

#

@tacit owl do you have something running on port 10000

tacit owl Jul 26, 2020, 6:19 PM

#

yes

oblique cliff Jul 26, 2020, 6:20 PM

#

You can’t bind something to port 10000 if you have something running on it

tacit owl Jul 26, 2020, 6:20 PM

#

i can curl that its give me a source code

oblique cliff Jul 26, 2020, 6:20 PM

#

No, do you have something running on your kali machine port 10000

tacit owl Jul 26, 2020, 6:20 PM

#

noo

#

even my remote macine give me a same error

oblique cliff Jul 26, 2020, 6:22 PM

#

Are you running that on your attacker machine or the victim machine?

tacit owl Jul 26, 2020, 6:22 PM

#

victim

#

oooh

oblique cliff Jul 26, 2020, 6:23 PM

#

Which one does the room say to run it on

tacit owl Jul 26, 2020, 6:23 PM

#

oppppps

#

local

oblique cliff Jul 26, 2020, 6:23 PM

#

🙂

tacit owl Jul 26, 2020, 6:23 PM

#

thank you

median monolith Jul 26, 2020, 7:12 PM

#

Hi, anyone for a little hint on Set?

worthy iris Jul 26, 2020, 7:12 PM

#

is there a way to get rockyou.txt to work with the owasp zap fuzzer? i think the file size just creates an instant error

stuck fractal Jul 26, 2020, 7:13 PM

#

is there a way to get rockyou.txt to work with the owasp zap fuzzer? i think the file size just creates an instant error
@worthy iris Try the first 50k lines, should work just fine

worthy iris Jul 26, 2020, 7:15 PM

#

perfect thanks

sinful beacon Jul 26, 2020, 7:34 PM

#

Can someone advise what is the question exactly at Metasploit 7? The command is 'use 6' but it didn't match...

#

📎 screenshot-tryhackme.com-2020.07.26-15_33_05.png

white salmon Jul 26, 2020, 7:35 PM

#

What's the name of the entire column?

sinful beacon Jul 26, 2020, 7:37 PM

#

6 exploit/multi/handler

#

oO

#

lol... Thank you 🙂

abstract apex Jul 26, 2020, 9:47 PM

#

hey,
i guess there's a problem with sshing in the machine in overpass challenge

#

i cracked the key using ssh2john and john and still can't access the machine

#

Can someone help?

tawdry tangle Jul 26, 2020, 9:48 PM

#

i've done it just fine, it's probably something with your method?

abstract apex Jul 26, 2020, 9:50 PM

#

i've done it just fine, it's probably something with your method?
@tawdry tangle i have the passwords but it says Permission denied, please try again.Permission denied, please try again.

#

password*

tawdry tangle Jul 26, 2020, 10:00 PM

#

i can't say with the limited info you've given me

white salmon Jul 26, 2020, 10:01 PM

#

Could you give a screenshot?

abstract apex Jul 26, 2020, 10:03 PM

#

📎 Capture_decran_2020-07-26_a_23.02.53.png

tawdry tangle Jul 26, 2020, 10:04 PM

#

you should fix what it says in the warning

white salmon Jul 26, 2020, 10:05 PM

#

It actually kinda tells you why it's not working

abstract apex Jul 26, 2020, 10:06 PM

#

didn't pay attention

#

thank you !

worthy iris Jul 26, 2020, 10:09 PM

#

I've got an issue with the authenticate, there's no cookie being made in my browser and thus I can't edit it

gentle mural Jul 26, 2020, 10:14 PM

#

Maybe there's a way to just create the cookie yourself?

worthy iris Jul 26, 2020, 10:20 PM

#

cheers

carmine sphinx Jul 27, 2020, 12:07 AM

#

hey everyone, im at the last task of "learn linux" room where i basically need to access a .txt file from /root but i dont have perms or something like that. I found already that "nootnoot as something called ".sudo_as_admin.successful", dont know if that's relevant. Can someone pls help or at least give me a hint?

wicked kettle Jul 27, 2020, 12:12 AM

#

Not getting reverse shell in de-seriolization chall. can somebody provide hint?

#

I've already tried encoding(base64) several revserse shell from pentestmoneky

#

used python script for encoding

stuck fractal Jul 27, 2020, 12:16 AM

#

I've already tried encoding(base64) several revserse shell from pentestmoneky
@wicked kettle That is not how the serialisation vuln is exploited, unless you mean using it in the python script provided

fresh quarry Jul 27, 2020, 12:52 AM

#

hi all gonna repeat a question I had that I abandoned and am coming back to

#

i'm on the authentication room on the step "JSON web token" I've gotten the JWT captured in burp, decoded and changed it, and got the new token. however when i go to change the cookie value, Firefox is giving me the error "No data present for selected host"

#

I've tried to resolve this in numerous ways -- I found a Firefox forum detailing a possible fix by logging in a new profile and restarting the browser --> no dice. Does anyone have a hint on how I can fix this so that I can finish the room?

hardy matrix Jul 27, 2020, 3:20 AM

#

I have this hex but dont know what to do with it (Blue/4/2)
aad3b435b51404eeaad3b435b51404ee:ffb43f0de35be4d9917ac0cc8ad57f8d

stuck fractal Jul 27, 2020, 3:21 AM

#

Research where you found it

#

And the room tells you what to do with it

hardy matrix Jul 27, 2020, 3:25 AM

#

okk

exotic canyon Jul 27, 2020, 7:15 AM

#

OWASP JUICE BOX TASK 4 INJECTION -Log in with the administrator's user account using SQL Injection
I am a bit confused as to how to verify if I am doing the task correct.

If I am doing it correctly should it let me login or only return [objectObject]

grizzled lichen Jul 27, 2020, 7:30 AM

#

U should get a response with a 200 status code

open storm Jul 27, 2020, 8:04 AM

#

Hi hi everyone, Wireshark CTFs, final task: I got the audio file with the child speaking about pumpkins and everything but I can't understand all that he is saying (Im not good enough in english for that) so if someone could help that would be much appreciated. By the way I can send the file if required 🙂 Thanks

trim haven Jul 27, 2020, 8:32 AM

#

@open storm If you want to DM me the audio file I can listen to it :)

white salmon Jul 27, 2020, 8:34 AM

#

You could also try finding if you can use google/amazon's auto-translate

gaunt herald Jul 27, 2020, 8:40 AM

#

jb, you can do the sqli without any tool

slate swift Jul 27, 2020, 10:28 AM

#

General question:
What sites do people use when checking is a service has known exploits that metaspoit can use.

Search from metaspoit is returning too many results and nothing really tells me what it is doing.

trim haven Jul 27, 2020, 10:30 AM

#

Exploit.db

#

CVE.details

#

Searchsploit is created by exploit.db as an easier way to find exploits on your local machine.

white salmon Jul 27, 2020, 10:31 AM

#

Also, enumeration tools help a lot

trim haven Jul 27, 2020, 10:31 AM

#

^

#

Versions, Software names and looking for file paths if you're exploiting a webserver

#

(some exploits require certain paths to work)

slate swift Jul 27, 2020, 10:32 AM

#

Yeah webserver. Maybe it's an upload exploit, I think I see one in the list. Thanks guys.

trim haven Jul 27, 2020, 10:32 AM

#

:)

#

By the way, be aware. Searching on popular websites might not show up anything. Sometimes just searching the general idea of the webserver you're exploiting may bring up exploits. Depends on how popular the framework/template is

wind fog Jul 27, 2020, 10:36 AM

#

Hello, please i need little hint for the nwebi challenge python :/ (manifold decoding)

trim haven Jul 27, 2020, 10:39 AM

#

Is it the final task?

wind fog Jul 27, 2020, 10:39 AM

#

yes, to intro python

trim haven Jul 27, 2020, 10:40 AM

#

Okay

#

What do you need a hint with exactly? :D

wind fog Jul 27, 2020, 10:41 AM

#

when i try to base32 decoded once base64 decoded i get the following error: raise binascii.Error ('Non-base32 digit found') from None
binascii.Error: Non-base32 digit found

trim haven Jul 27, 2020, 10:42 AM

#

Okay are you able to send a little snippet of the code?

#

I think I know your issue but I want to be sure

wind fog Jul 27, 2020, 10:43 AM

#

for i in range(5):
data = open("encodedflag.txt","r").read()
decoded64 = base64.b64decode(data)

for i in range (5):
decoded32 = base64.b32decode(decoded64)

print(decoded32)

trim haven Jul 27, 2020, 10:44 AM

#

Okay so

#

You're decoding it backwords

#

It was encoded base64, then base32, then base16 right? So in order to decode it you have to start from the end and work your way up

white salmon Jul 27, 2020, 10:45 AM

#

^

wind fog Jul 27, 2020, 10:45 AM

#

ohh ok T.T

white salmon Jul 27, 2020, 10:45 AM

#

If you look at your output, you should definitely notice that even though you followed the steps exactly, it still came out kinda weird

#

At that point, you should kinda think that "maybe it's in the wrong order"

#

Remember, usually real decoding isn't as black and white as this

trim haven Jul 27, 2020, 10:45 AM

#

The way I did it was by encoding my own string and seeing if I get a similar looking string to the encoded one

#

Then seeing how I encoded it I then reversed what I did to decode it

#

Smack you should see my code for this task it was like 13 lines long kekw

white salmon Jul 27, 2020, 10:46 AM

#

lmao

#

i wonder what my linecount was o.o

#

brb checking

trim haven Jul 27, 2020, 10:46 AM

#

Bee taught me a trick with functions and libraries

#

Super smart

white salmon Jul 27, 2020, 10:46 AM

#

oh nice

wind fog Jul 27, 2020, 10:46 AM

#

thank i try now :p

trim haven Jul 27, 2020, 10:47 AM

#

No worries

#

Any more issues come back, that task was a little tough

wind fog Jul 27, 2020, 10:47 AM

#

i'm starting in prog :/

white salmon Jul 27, 2020, 10:48 AM

#

Ah, I coded mines with readability more than linecount optimization

#

lmao

trim haven Jul 27, 2020, 10:49 AM

#

for i in range(5):
data = open("encodedflag.txt","r").read()
decoded64 = base64.b64decode(data)

for i in range (5):
decoded32 = base64.b32decode(decoded64)

print(decoded32)
@wind fog I'd also like to mention that you're decoding the same string over and over rather than saving it to a new variable 👀

white salmon Jul 27, 2020, 10:49 AM

#

this was mines o.o

trim haven Jul 27, 2020, 10:49 AM

#

Send it in dms

#

Just in case 👀

white salmon Jul 27, 2020, 10:50 AM

#

lmao

#

true

ashen matrix Jul 27, 2020, 10:51 AM

#

Is there a quick way to decode bcrypt or is brute force the only way? In relation to the Crack The Hash room

wind fog Jul 27, 2020, 10:51 AM

#

so would I have to implement a for loop in another directly?

white salmon Jul 27, 2020, 10:56 AM

#

Is there a quick way to decode bcrypt or is brute force the only way? In relation to the Crack The Hash room
@ashen matrix As I understand it, it needs to be brute force only given it's complexity.

slate swift Jul 27, 2020, 11:41 AM

#

Okay so I've looked up a walkthrough and I'm trying to understand how I was meant to figure out which exploit to use.

Room: Advent of Cyber
Day 10
Exploiting the webserver.

Everything I found from nnap pointed to upload exploit but there was no upload portal. Walkthrough points at struts exploit, but I have no idea how I was meant to figure that one out.

trim haven Jul 27, 2020, 11:42 AM

#

I’m presuming there was a website name and or Versions which they put into google

slate swift Jul 27, 2020, 11:43 AM

#

When I search tomcat/coyote jsp engine 1.1

Nothing points to struts

white salmon Jul 27, 2020, 11:44 AM

#

Usually that means you didn't enumerate well enough

#

Checking for struts version is a common enumeration thing for apache webservers

slate swift Jul 27, 2020, 11:49 AM

#

Hmmm, okay. Supporting doc suggests it should be far easier then doing any of that. Suggests it should be a simple launch metaspoit and search the service.

rapid flower Jul 27, 2020, 11:59 AM

#

any hints on DNS exfiltration question from Advent of Cyber?

#

I got the file... ran ||steghide|| but can't understand the poem

white salmon Jul 27, 2020, 11:59 AM

#

which task

rapid flower Jul 27, 2020, 12:00 PM

#

task 11 day 4

#

sorry day 6

slate swift Jul 27, 2020, 12:02 PM

#

I looked at the number of * and worked it out from that. But as for the actual thought pattern, I'm not sure if there actually is one. Hahaha

#

@rapid flower

white salmon Jul 27, 2020, 12:03 PM

#

I don't remember it properly but it has everything try reading it a lil. For question #3 answer starts with || RFC|| work it out with this hint

rapid flower Jul 27, 2020, 12:04 PM

#

ohkkk

slate swift Jul 27, 2020, 12:04 PM

#

Yeah, if you workout the thought process let me know. Hahahah

rapid flower Jul 27, 2020, 12:07 PM

#

is that poem of any use tho?

simple shoal Jul 27, 2020, 12:27 PM

#

Hi, i'm in the OWASP Juice shop room TASK 7 on the administration page.
i have to access another user's basket, and followed the hint telling me to look into the local storage.
I found a token seperated into 3 arrays but I don't know what to do with it :/

I thought about the Sequencer in Burp as it deals with session tokens but I'm kinda blocked

Any hint for me, please ? ^^

gaunt herald Jul 27, 2020, 12:30 PM

#

Sequncer? Maybe repeater

worthy iris Jul 27, 2020, 12:32 PM

#

||on the XSS site, after I hijack Jacks cookie, I can no longer access the page (it just redirects me) ||

gaunt herald Jul 27, 2020, 12:32 PM

#

Redeploy

worthy iris Jul 27, 2020, 12:33 PM

#

how would that help me in 'real world' cases though? surely theres another way

gaunt herald Jul 27, 2020, 12:35 PM

#

Wouldn't. Should've chosen a better payload in the first time.
Recommended for learning xss sure, but in a real life situation not so.

worthy iris Jul 27, 2020, 12:35 PM

#

its the recommended payload 😒

#

I think I thought of sth

simple shoal Jul 27, 2020, 12:41 PM

#

Thank you @gaunt herald for the help

worthy iris Jul 27, 2020, 12:41 PM

#

|| so what I did was press Esc as soon as the page loads, before the script can redirect me, isn't clean but it worked atleast || @gaunt herald

gaunt herald Jul 27, 2020, 12:42 PM

#

awesome :)

arctic crest Jul 27, 2020, 2:43 PM

#

Hello all, can anybody give me hints with Common Linux PrivEsc room? I'm stuck at Task 8 #4...
I tried msfvenom on kali machine browser, but the result is command not found

final mortar Jul 27, 2020, 2:46 PM

#

msfvenom is not installed on in-browser machine ?

#

Is that the issue

wraith tapir Jul 27, 2020, 2:47 PM

#

It's installed ig

tough mirage Jul 27, 2020, 2:47 PM

#

Hello all, can anybody give me hints with Common Linux PrivEsc room? I'm stuck at Task 8 #4...
I tried msfvenom on kali machine browser, but the result is command not found
@arctic crest Are you sure you are copying the command correctly?

final mortar Jul 27, 2020, 2:48 PM

#

You should not be copying command tho

tough mirage Jul 27, 2020, 2:49 PM

#

copy/replacing, same

arctic crest Jul 27, 2020, 2:58 PM

#

@arctic crest Are you sure you are copying the command correctly?
@tough mirage I tried input the whole command, the result command not found, then type only msfvenom -h, results command not found

#

msfvenom is not installed on in-browser machine ?
@final mortar i tried apt-get install but no luck Hehehehe

final mortar Jul 27, 2020, 2:59 PM

#

mefvenom comes preinstalled with metasploit

arctic crest Jul 27, 2020, 3:01 PM

#

Yeah, that makes me wondering why it doesn't work

#

First time i try the command in PuTTY, but command not found, then i try on kali in browser machine, the result is the same

trim haven Jul 27, 2020, 3:03 PM

#

Maybe the command is incorrect

final mortar Jul 27, 2020, 3:09 PM

#

@arctic crest Are you sure you are copying the command correctly?
maybe

arctic crest Jul 27, 2020, 3:10 PM

#

Maybe, i guess I'll try again later hehe

#

Thanks guys

green prism Jul 27, 2020, 3:25 PM

#

"Can you find information about the system, such as the kernel version etc. Find flag 15" /room/linuxctf Task 3 #5

#

I used lsb_release -a

#

dmesg

#

cat /proc/version

#

uname -r

#

hostnamectl

#

i'm missing something

oblique cliff Jul 27, 2020, 3:30 PM

#

did you look at the hint?

green prism Jul 27, 2020, 3:30 PM

#

*release

#

yes i did

oblique cliff Jul 27, 2020, 3:30 PM

#

did you look for a file called that?

green prism Jul 27, 2020, 3:31 PM

#

isn't this referring to the lsb_release?

oblique cliff Jul 27, 2020, 3:31 PM

#

no

#

https://superuser.com/questions/80251/how-to-know-which-linux-distribution-im-using

Super User

How to know which Linux Distribution I'm using?

uname -a gives

Linux xxxxxx.net 2.6.9-42.0.3.EL.wh1smp #1 SMP Fri Aug 14 15:48:17 MDT 2009 i686 i686 i386 GNU/Linux

How can I know this is Ubuntu/

green prism Jul 27, 2020, 3:34 PM

#

i see

#

thanks

#

i couldn't find this thread searching with "linux kernel version release command"

white salmon Jul 27, 2020, 3:53 PM

#

Hello everyone, I have a problem in the privesc room, I started Sharphound on the box and when I try to Invoke-Bloodhound it says "Invoke-Bloodhound : The term 'Invoke-Bloodhound' is not recognized as the name of a cmdlet etc etc. Someone can help me out? Thank you much.

#

📎 Capture_decran_2020-07-27_a_17.53.59.png

#

o.o

#

It's invoke-Bloodhound

#

you typed in invoke-SharpHound

#

Right, right, I tried both infacrt

stuck fractal Jul 27, 2020, 3:58 PM

#

Also you didn't load the script

white salmon Jul 27, 2020, 3:58 PM

#

in fact

stuck fractal Jul 27, 2020, 3:58 PM

#

You just ran it

#

If you want to run functions from the script, you have to specifically load it, which is . .\script

white salmon Jul 27, 2020, 3:59 PM

#

Ok thanks I will try

#

Same 😦

📎 Capture_decran_2020-07-27_a_17.59.44.png

stuck fractal Jul 27, 2020, 4:01 PM

#

Show the line where you loaded the script

white salmon Jul 27, 2020, 4:01 PM

#

Here

📎 Capture_decran_2020-07-27_a_18.01.20.png

stuck fractal Jul 27, 2020, 4:02 PM

#

Again, not loading it

#

. .\script.ps1

#

Dot space dot

white salmon Jul 27, 2020, 4:03 PM

#

It works 😄

#

Thank you. I never used PS in my life

tough mirage Jul 27, 2020, 4:16 PM

#

His problema isn't msfvenom

#

It's the code itself generated

#

Hello everyone, I have a problem in the privesc room, I started Sharphound on the box and when I try to Invoke-Bloodhound it says "Invoke-Bloodhound : The term 'Invoke-Bloodhound' is not recognized as the name of a cmdlet etc etc. Someone can help me out? Thank you much.
@white salmon you can also try with the .exe

white salmon Jul 27, 2020, 4:27 PM

#

@tough mirage ok, thank you !

stuck fractal Jul 27, 2020, 4:27 PM

#

His problema isn't msfvenom
@tough mirage they were running it on the target machine, they needed to run it on their attacking kali

tough mirage Jul 27, 2020, 4:43 PM

#

Ok, I didn't see that coming xD> @tough mirage they were running it on the target machine, they needed to run it on their attacking kali
@stuck fractal

sinful plaza Jul 27, 2020, 5:00 PM

#

guys any hint for https://tryhackme.com/room/theimpossiblechallenge room

TryHackMe

TryHackMe | The Impossible Challenge

‌‌‌‌‍‌‌Hmm‌‌‌‌‍‬‌‍‌‌‌‌‍‌‌‌‌‌‍‌‌‌‌‌‍‍‌‌‌‌‍‬‌‌‌‌‍‌‬‌‌‌‌‍‬‍‌‌‌‌‌‌‬‌‌‌‌‌‌‍‬‬‍‌‌‌‌‍‌‌‌‌‌‌‬‌‌‌‌‌‌‍‬‬‌‌‌‌‌‍‬‌‍‌‌‌‌‍‬‬‌‌‌‌‌‍‬‌‍‌‌‌‌‍‬‍‍‌‌‌‌‍‬‬‌‌‌‌‍‌‌‌‌‌‌‍‬‬

#

brute forcing not working

#

i have no idea how to extract file from a zip file any hint will help pls

#

☹️

white salmon Jul 27, 2020, 5:09 PM

#

i have no idea how to extract file from a zip file any hint will help pls
@sinful plaza Have you tried googling it

sinful plaza Jul 27, 2020, 5:09 PM

#

yes but no luck

white salmon Jul 27, 2020, 5:10 PM

#

What part of the extraction are you having trouble with?

#

Is the zip file encrypted with a passkey?

sinful plaza Jul 27, 2020, 5:10 PM

#

yes

white salmon Jul 27, 2020, 5:10 PM

#

Look up how to crack encrypted ZIP files with John the Ripper

sinful plaza Jul 27, 2020, 5:12 PM

#

have try that already not working

#

i think the flag is hidden in the zip file just like hiding txt file in an image

green prism Jul 27, 2020, 5:16 PM

#

Have a hard time interpreting this question: "Find flag 26 by searching the all files for a string that begins with 4bceb and is 32 characters long." /room/linuxctf task 4 #7
Is this asking for a filename starting with 4bceb that's 32 characters long or is there a file with a different name that CONTAINS a string with the same format?

#

Here's what I've tried
find / -name 4bceb* 2>/dev/null
find / -type f 2>/dev/null | grep 4bceb

oblique cliff Jul 27, 2020, 5:49 PM

#

The first one you’re trying to find a file of the name 4bceb

#

The second one you’re doing the same thing (cuz you’re grepping on the outputted file names)

#

What you want is to find files and then grep on the contents of the file

#

@green prism

green prism Jul 27, 2020, 5:50 PM

#

find / -type f 2>/dev/null | xargs cat | grep 4bceb ?

oblique cliff Jul 27, 2020, 5:57 PM

#

Uh. That looks like it’d might work theoretically give it a try

#

Although 1 your find command is gonna try to go into mounts which it doesn’t have permission to

#

So that part won’t work it’s gonna hang forever.

#

And then you can feed the output of find directly into a grep. But your way looks like it may work

#

Give it a shot @green prism

stuck fractal Jul 27, 2020, 5:59 PM

#

Is this asking for a filename starting with 4bceb that's 32 characters long or is there a file with a different name that CONTAINS a string with the same format?

#

A file that contains the string

rapid flower Jul 27, 2020, 6:00 PM

#

any hints on this... I thought it was base64... but it is not working

📎 unknown.png

stuck fractal Jul 27, 2020, 6:00 PM

#

Base64 typically has lower case

#

Maybe there's another that looks similar but is only upper case

white salmon Jul 27, 2020, 6:08 PM

#

Maybe there's another that looks similar but is only upper case
@stuck fractal ~~Base64 but with uppercase letters~~

stuck fractal Jul 27, 2020, 6:09 PM

#

Oh god that's a horrifying CTF "crypto" challenge idea

white salmon Jul 27, 2020, 6:09 PM

#

LMAO

stuck fractal Jul 27, 2020, 6:09 PM

#

Unknown case so you gotta brute force all the possible cases

white salmon Jul 27, 2020, 6:09 PM

#

get people researching it for a long time until somebody just goes "have you ever tried just making it lowercase"

#

oh god

#

I just realized what you mean too

rapid flower Jul 27, 2020, 6:15 PM

#

Maybe there's another that looks similar but is only upper case

#

wll look for that

lavish spire Jul 27, 2020, 6:19 PM

#

Where's the ctf please?

rapid flower Jul 27, 2020, 6:19 PM

#

https://tryhackme.com/jr/tryhackcit

Where's the ctf please?
@lavish spire

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

lavish spire Jul 27, 2020, 6:20 PM

#

Thank you!!

green prism Jul 27, 2020, 6:31 PM

#

@oblique cliff is there a better to do this?

crystal glade Jul 27, 2020, 6:32 PM

#

@sinful plaza Did you decode the letters and numbers below Download?

barren pike Jul 27, 2020, 6:43 PM

#

Hello, when trying to use Metasploit when i run the exploit i get Exploit completed, but no session was created.

oblique cliff Jul 27, 2020, 6:44 PM

#

@green prism the way you’re doing is fine. But you can grep on the content of a file from one pipe out of a find. It’d just be a bit more efficient

trim haven Jul 27, 2020, 6:44 PM

#

@barren pike Type options and screenshot the output please.

barren pike Jul 27, 2020, 6:46 PM

#

📎 Screen_Shot_2020-07-27_at_8.46.15_PM.png

trim haven Jul 27, 2020, 6:47 PM

#

Don't use run -j just type run see if that works.

barren pike Jul 27, 2020, 6:47 PM

#

Same output

tawdry tangle Jul 27, 2020, 6:48 PM

#

reset box, worked for me

barren pike Jul 27, 2020, 6:48 PM

#

I tried

trim haven Jul 27, 2020, 6:48 PM

#

Update your metasploit, sudo apt update; sudo apt install metasploit-framework

barren pike Jul 27, 2020, 6:49 PM

#

i am on mac

#

i will update

trim haven Jul 27, 2020, 6:50 PM

#

Oh okay you do you

barren pike Jul 27, 2020, 6:52 PM

#

Done

#

Same

tough mirage Jul 27, 2020, 6:52 PM

#

I have a little question here

#

Room: Game zone

#

There is a task where we have to figured out that the port 10000 has a service and i have to forward, cool, but, next the creator said "we can see that is blocked by firewall, using iptables"

stuck fractal Jul 27, 2020, 6:57 PM

#

Same
@barren pike Probably firewall

barren pike Jul 27, 2020, 6:57 PM

#

I am using the ip in access page on the site

tough mirage Jul 27, 2020, 6:57 PM

#

There is a task where we have to figured out that the port 10000 has a service and i have to forward, cool, but, next the creator said "we can see that is blocked by firewall, using iptables"
@tough mirage How ded he get to that if iptables only can be run by root, mmmm

stuck fractal Jul 27, 2020, 6:58 PM

#

I am using the ip in access page on the site
@barren pike Still probably your firewall blocking the connections

#

@tough mirage Is the service accessible from outside the box? Yes/No
Is the service accessible from inside the box? Yes/No

#

If No and Yes, it's probably either firewalled, or only listening on loopback

tough mirage Jul 27, 2020, 6:59 PM

#

In that case thats how he probably should explain no recommend a tools that can be only run by root

#

It's different the way you explain

crystal glade Jul 27, 2020, 7:01 PM

#

@barren pike change the RPORT to 445

#

you are using wrong port

stuck fractal Jul 27, 2020, 7:01 PM

#

@barren pike change the RPORT to 445
@crystal glade No

#

This is icecast, not blue

#

8000 is the correct port.

crystal glade Jul 27, 2020, 7:02 PM

#

445/tcp open microsoft-ds Windows 7 Professional 7601 Service Pack 1 microsoft-ds (workgroup: WORKGROUP)

#

no 8000 port maybe i'm wrong

stuck fractal Jul 27, 2020, 7:03 PM

#

Wat

#

445 is SMB

#

Icecast runs on port 8000, which means it's the correct RPORT here

barren pike Jul 27, 2020, 7:05 PM

#

I now get that

📎 Screen_Shot_2020-07-27_at_9.04.47_PM.png

crystal glade Jul 27, 2020, 7:08 PM

#

maybe expired?

white salmon Jul 27, 2020, 8:18 PM

#

Hi,
sorry If I sound rude or neglecting but I feel like my self-esteem is taking a hit here and I feel really, really stupid :(
I'm stuck on one of the first basic questions and I just don't understand what the right answer is?

I know (like I know, know) that passwords hash encrypted with SHA-512 is shown as $6$... but that's the wrong answer according to "Tryhackme"
Am I using the wrong format or is it in fact not SHA-512 the right answer?
I've tried "SHA-512_crypt, sha-512_crypt, SHA-512_Crypto, sha512_crypt" and so on... but still... always the wrong answer =/

The question?
If a password hash starts with $6$, what format is it (Unix variant)?

I'm not asking for the correct answer but rather some advise on how to proceed?
Any tips would be greatly appreciated <3

I'm scared that if I get stuck on one of these first basic questions, maybe Tryhackme is not for me? But I hope to be proved wrong.

stuck fractal Jul 27, 2020, 8:18 PM

#

If you check the answer format, it has a certain number of chars

dull palm Jul 27, 2020, 8:39 PM

#

Hey all, I am on intro to x8664, at the point [task 4] where you run PC @rbp-0x4, and then do. When I type ds, nothing happens, just returned to the same prompt

#

Px * autocorrect error

oblique cliff Jul 27, 2020, 8:43 PM

#

can you show a screenshot of all the commands youre running please

white salmon Jul 27, 2020, 8:43 PM

#

Actually, something did happen when you typed in ds

dull palm Jul 27, 2020, 8:44 PM

#

Sure, coming from photo from phone

white salmon Jul 27, 2020, 8:44 PM

#

ds advances your debugger to the next instruction

#

you have to type pdf @main to see where you are now at

dull palm Jul 27, 2020, 8:44 PM

#

📎 20200727_154424.jpg

white salmon Jul 27, 2020, 8:45 PM

#

ds doesn't really give you any output to tell you that it did something

#

you'll notice that your instruction marker has moved down a notch though

#

if you check @main again

oblique cliff Jul 27, 2020, 8:45 PM

#

leaving this to you @white salmon 👀

white salmon Jul 27, 2020, 8:45 PM

#

don't you know i have a monopoly on all RE help blobknife

dull palm Jul 27, 2020, 8:46 PM

#

Okay, sorry I thought the prompt would change.

white salmon Jul 27, 2020, 8:46 PM

#

Also actually wait

dull palm Jul 27, 2020, 8:46 PM

#

This is all newtonian me. Thanks

white salmon Jul 27, 2020, 8:46 PM

#

did you set up any breakpoints before you typed dc?

oblique cliff Jul 27, 2020, 8:46 PM

#

my bad 😊

white salmon Jul 27, 2020, 8:46 PM

#

you have to use dc first before ds will work

dull palm Jul 27, 2020, 8:46 PM

#

New to me* yes followed it twice

white salmon Jul 27, 2020, 8:46 PM

#

but if you don't set up any breakpoints with db, then the program will just advance to the end

dull palm Jul 27, 2020, 8:47 PM

#

Jge, jmp

#

Okay I think I figured it out, I did a pdf @main and got the same output as on the page. I just assumed that the prompt would change. I see now that it does not.

white salmon Jul 27, 2020, 8:59 PM

#

Yeah lmao

broken cloud Jul 27, 2020, 9:03 PM

#

hii guys still stuck in top 10 owsap task 20 any specific guide to look for

rapid flower Jul 27, 2020, 9:12 PM

#

hii guys still stuck in top 10 owsap task 20 any specific guide to look for
look for places where people store source-codes... documentation and stuff

stuck fractal Jul 27, 2020, 9:13 PM

#

There's a HUGE website for it

broken cloud Jul 27, 2020, 9:14 PM

#

i search for git hub with different query on opensouce project with login and so on

rapid flower Jul 27, 2020, 9:14 PM

#

i search for git hub with different query on opensouce project with login and so on
maybe you are not searching for the right thing

#

the thing you need to search is right there in front of you

broken cloud Jul 27, 2020, 9:42 PM

#

i get this result

📎 xyz.PNG

stuck fractal Jul 27, 2020, 9:42 PM

#

Titles are better than descriptions

broken cloud Jul 27, 2020, 9:43 PM

#

i also seached adding swaptheme featue of login feature

#

or* login feature

stuck fractal Jul 27, 2020, 9:43 PM

#

Titles are better than descriptions

#

You're trying subtle things

#

Try really obvious things

broken cloud Jul 27, 2020, 9:45 PM

#

kk thank a lot working on it😇

cloud wagon Jul 27, 2020, 9:49 PM

#

Hello guys... I am solving blue machine ...but I am unable to exploit that machine..?? Can anybody help me

oblique cliff Jul 27, 2020, 9:50 PM

#

@cloud wagon

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

cloud wagon Jul 27, 2020, 9:50 PM

#

📎 JPEG_20200728_032038.jpg

oblique cliff Jul 27, 2020, 9:51 PM

#

screenshot, not phone picture please

stuck fractal Jul 27, 2020, 9:51 PM

#

Also, from the start

cloud wagon Jul 27, 2020, 9:51 PM

#

Ohk... I am solving blue room....
And I am stuck on exploiting the machine

stuck fractal Jul 27, 2020, 9:52 PM

#

You've said that

oblique cliff Jul 27, 2020, 9:52 PM

#

yep, we've established that. Please show a screenshot of your options and the outcome

cloud wagon Jul 27, 2020, 9:58 PM

#

This is my exploit which I am using to exploit Blue machine

📎 Screenshot_2020-07-28_03-26-37.png

oblique cliff Jul 27, 2020, 9:59 PM

#

set your lhost to your tun0 ip address

#

right now its your local IP address, not you VPN IP address

#

also, update your metasploit your payload is defaulting to the wrong thing because your metasploit is outdated

cloud wagon Jul 27, 2020, 10:01 PM

#

@oblique cliff what is tun0 ip address..??

oblique cliff Jul 27, 2020, 10:01 PM

#

!multivpn

proud scarabBOT Jul 27, 2020, 10:01 PM

#

TryHackMe

Learn how to look for duplicate instance of your OpenVPN connection.

• Step 1

Make sure you have setup your VPN connection correctly https://tryhackme.com/room/openvpn

• Step 2

Type ps aux | grep openvpn into your terminal and press enter

• Step 3

If there's more than one line (that don't start with "grep" or sudo), do the following steps

• Step 4

Type sudo killall openvpn into your terminal and press enter

• Step 5

Start the VPN with sudo openvpn <path-to-config>

oblique cliff Jul 27, 2020, 10:01 PM

#

oops

#

!openvpn

#

ahhhhh whats the command

#

@stuck fractal halp

stuck fractal Jul 27, 2020, 10:02 PM

#

just vpn

oblique cliff Jul 27, 2020, 10:02 PM

#

!vpn

proud scarabBOT Jul 27, 2020, 10:02 PM

#

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

oblique cliff Jul 27, 2020, 10:02 PM

#

@cloud wagon

#

thank you

cloud wagon Jul 27, 2020, 10:02 PM

#

Still I not got solution @oblique cliff

#

what I have to make change in ..??

oblique cliff Jul 27, 2020, 10:03 PM

#

click on the link the bot just sent

#

https://discordapp.com/channels/521382216299839518/690557518837186560/737429666968764466

#

and follow the prompts

#

you need to connect to the VPN

#

and then you will have a tun0 IP address

cloud wagon Jul 27, 2020, 10:04 PM

#

yes ... I am connected to my vpn

stuck fractal Jul 27, 2020, 10:05 PM

#

To the VPN?

#

It needs to be the tryhackme VPN

cloud wagon Jul 27, 2020, 10:05 PM

#

📎 vpn.png

stuck fractal Jul 27, 2020, 10:05 PM

#

set your LHOST then

cloud wagon Jul 27, 2020, 10:05 PM

#

It already set to my ip address

stuck fractal Jul 27, 2020, 10:05 PM

#

It's set to a LAN IP

#

The target machine can't talk to that IP

#

It's not on that network

#

It has no way of talking to that IP

#

ip a s tun0

oblique cliff Jul 27, 2020, 10:06 PM

#

or do that

broken cloud Jul 27, 2020, 10:07 PM

#

am i looking for a tool that will help me pass the credential or a soucre code of an webapp like the one in machine ?

stuck fractal Jul 27, 2020, 10:07 PM

#

am i looking for a tool that will help me pass the credential or a soucre code of an webapp like the one in machine ?
@broken cloud You are looking for the source code of the exact webapp

cloud wagon Jul 27, 2020, 10:11 PM

#

Now I replaced my lhost ip with tun0 ip ,,,,,but still the problem is same blobhuh ... It get fails

stuck fractal Jul 27, 2020, 10:11 PM

#

Screenshot!

cloud wagon Jul 27, 2020, 10:12 PM

#

📎 fail.png

stuck fractal Jul 27, 2020, 10:12 PM

#

Of all of it

#

The start in particular

#

Update your mestasploit, it's out of date

cloud wagon Jul 27, 2020, 10:13 PM

#

hmmmm ..........If I try to use non-staged payload ..??? Will it solve my problem

stuck fractal Jul 27, 2020, 10:14 PM

#

Update. Your. Metasploit.

broken cloud Jul 27, 2020, 10:35 PM

#

any more simple query than this!

📎 xyz1.PNG

stuck fractal Jul 27, 2020, 10:35 PM

#

Yes

#

Much much simpler

#

Titles are better than descriptions
@stuck fractal

#

Try really obvious things

brave bloom Jul 27, 2020, 11:00 PM

#

about that blue room, I was also just on it, and even though I solved it I feel I've missed something important.. I've selected the exploit for eternalblue basically because the box was named "blue".. is there a more structured approach to finding the most adequate exploit based on the nmap results...?

stuck fractal Jul 27, 2020, 11:01 PM

#

vuln scans

white salmon Jul 27, 2020, 11:11 PM

#

There's also a metasploit scanner for windows machine, and specifically, a scanner for eternalblue.

#

Another key factor is just checking versions- a lot of Microsoft Windows SMB machines are vulnerable to it

#

Usually looking up any sort of key terms with version numbers into exploit-db or something can bring up something useful, including EternalBlue

odd panther Jul 27, 2020, 11:34 PM

#

Update your mestasploit, it's out of date
@stuck fractal Literally came into ask about this, seems my answer is resolved lol. Thank you! (Fail on Blue) I'll update... 🙂

stuck fractal Jul 27, 2020, 11:35 PM

#

MSF decided reverse_https was a good default choice

#

Except it never works on THM for some reason, IDK about off THM

odd panther Jul 27, 2020, 11:35 PM

#

oh, good info 😛

odd panther Jul 28, 2020, 12:22 AM

#

Blue room, Updated and using the ||windows/x64/meterpreter/reverse_tcp|| Is this correct to check (have done room before, just being a pain)

fresh quarry Jul 28, 2020, 12:23 AM

#

Still having problems: Authenticate-2 room, Task 4, Question 1: I still can't get to the cookies on the practice page. It looks like I am now able to access other sites' cookies, but not on the practice site. Any hints?

stuck fractal Jul 28, 2020, 12:24 AM

#

@odd panther yep

quiet yarrow Jul 28, 2020, 12:35 AM

#

Room: Intro to Python

Can anyone help me out i have tried to read the everything i can find on decoding base64 using python here are some of the places i have looked

https://i.vgy.me/3RgdVB.png
https://i.vgy.me/lIs1tX.png
https://i.vgy.me/YtRyY6.png

is there anyone that can give me a hint on where or not i am on the right path or point me in the right derection.

white salmon Jul 28, 2020, 12:36 AM

#

That's the correct module/library, yeah

#

Do you know how to program in Python?

quiet yarrow Jul 28, 2020, 12:37 AM

#

nope

odd panther Jul 28, 2020, 12:37 AM

#

I can help if you need

#

I'll wip you up an example

quiet yarrow Jul 28, 2020, 12:37 AM

#

first time ever touching it

white salmon Jul 28, 2020, 12:37 AM

#

You should definitely look up a more thorough and fleshed out Python guide

#

like an actual class or something

#

It's pretty easy to learn tbh

#

codeacademy has Python classes, Google also has one too

#

https://developers.google.com/edu/python

#

https://www.codecademy.com/learn/learn-python

quiet yarrow Jul 28, 2020, 12:39 AM

#

it is i have writen a few simple scritps i just think the decoding is a bit out of my scope right now

white salmon Jul 28, 2020, 12:39 AM

#

It isn't out of your scope

#

It's a lot easier than you think

quiet yarrow Jul 28, 2020, 12:39 AM

#

so i am on the right path i just need to start by learing the code first ?

white salmon Jul 28, 2020, 12:40 AM

#

Here's a hint on what you need to do : You need to know how to use a loop

quiet yarrow Jul 28, 2020, 12:40 AM

#

ohhhhhh ok

white salmon Jul 28, 2020, 12:40 AM

#

Also, how a method/function works

quiet yarrow Jul 28, 2020, 12:40 AM

#

i think i get it now

white salmon Jul 28, 2020, 12:40 AM

#

👍

#

Don't worry about making the code super optimized or anything

#

Just get the job done ;)

quiet yarrow Jul 28, 2020, 12:41 AM

#

ok thanks alot i think that just helped me out alot

white salmon Jul 28, 2020, 12:42 AM

#

@odd panther Please don't write out the code/answer for him- this room is for hints only.

odd panther Jul 28, 2020, 12:42 AM

#

@white salmon Very good point 🙂 thanks

white salmon Jul 28, 2020, 12:43 AM

#

Yeah, don't worry, @quiet yarrow if you need any more help don't be afraid to ask!

odd panther Jul 28, 2020, 12:43 AM

#

I get so excited to be able to help, but must remember better help is to teach!

craggy pulsar Jul 28, 2020, 12:44 AM

#

@white salmon Very good point 🙂 thanks
@odd panther Thank u!!!! 🙂 its good that you're excited to teach!!! 😄

white salmon Jul 28, 2020, 12:44 AM

#

Yeah don't worry, you had good intentions

#

your code didn't actually give out the answer too so that was good

odd panther Jul 28, 2020, 12:45 AM

#

Yes I won't give answers but your right he's better off to learn the fundamental's, will serve much better in the long run

craggy pulsar Jul 28, 2020, 12:45 AM

#

Yes I won't give answers but your right he's better off to learn the fundamental's, will server much better in the long run
@odd panther U can give answers if the user is like "I have smashed my head against my keyboard 500 times i have been trying for weeks someone please just help me"

white salmon Jul 28, 2020, 12:45 AM

#

have you seen a doctor for your head injury from smashing into the keyboard 500 times

odd panther Jul 28, 2020, 12:46 AM

#

I just like to help but need to help in a more structured way haha.

white salmon Jul 28, 2020, 12:47 AM

#

It's infinitely more satisfying when you teach somebody How to find the answer, and they end up finding it for themselves and figuring out the rest

odd panther Jul 28, 2020, 12:49 AM

#

Yeah, I work on a support desk, its my sole job to give answers as fast as possible I have to reign it in a bit, here at least for this lol

#

Also what language's do you know to code in?

white salmon Jul 28, 2020, 12:50 AM

#

I'm not particularly an expert at any language, but I know how to work with C, C++, Python, Java, Assembly, JS, and I guess Rust now lol

#

Oh and C#

odd panther Jul 28, 2020, 12:52 AM

#

I know c# the most started on it (8 year ago) stopped for a while, getting back into it now, but more python, powershell and I'm having to pick up some of the others for various tasks. python is fun 🙂

white salmon Jul 28, 2020, 12:52 AM

#

But Python and C++ are probably my most familiar languages

odd panther Jul 28, 2020, 12:52 AM

#

nice

fleet pike Jul 28, 2020, 5:25 AM

#

Is there some sort of etiquitte /acceptable activities list for practice room boxes?

stuck fractal Jul 28, 2020, 5:26 AM

#

You don't share your VMs with anyone else

#

When you click deploy, that instance is yours and only yours

and i get this output: "- Nikto v2.1.5

and i get this output:
"- Nikto v2.1.5