#room-hints | TryHackMe | Page 61

lean crag Oct 7, 2020, 3:42 AM

#

📎 unknown.png

wintry yarrow Oct 7, 2020, 4:22 AM

#

Can you try to do it manually by backgrounding the current session and choosing module?

midnight spindle Oct 7, 2020, 7:42 AM

#

Hey guys , I'm stuck on Task 11 of ZTHWEB2 , any hint ?

#

I found the api but is doesn't work 😦

#

NVM ! GOT IT ! 😄

cobalt gate Oct 7, 2020, 9:08 AM

#

hi can i ask for some help on room ZTH: Obscure Web Vulns / [Section 4 - XXE]: Challenge i tried putting the xxe code example in the request and tryied whit xxe examples from https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XXE Injection also but i getnothing in burpsuite only reply with "sorry, abc is already registered" any suggestions are appreciated

GitHub

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

#

found it nvm

cold plover Oct 7, 2020, 9:20 AM

#

need a nudge for lazyadmin

wintry yarrow Oct 7, 2020, 9:21 AM

#

Sure. Where are you stuck?

cold plover Oct 7, 2020, 9:22 AM

#

nmap scan shows port 80 and ssh, i gobuster'd port 80 but no intersting finds

wintry yarrow Oct 7, 2020, 9:22 AM

#

Gobuster should show something interesting. Which wordlist did you use?

cold plover Oct 7, 2020, 9:23 AM

#

raft-large-words

cobalt gate Oct 7, 2020, 9:23 AM

#

use the rockyou wordlist

wintry yarrow Oct 7, 2020, 9:23 AM

#

No, rockyou please. Its not for web dir bust.

cold plover Oct 7, 2020, 9:23 AM

#

was about to say that

cobalt gate Oct 7, 2020, 9:23 AM

#

ups

cold plover Oct 7, 2020, 9:23 AM

#

lol

#

will try the classic directory-2.3-medium

wintry yarrow Oct 7, 2020, 9:25 AM

#

It'll show something interesting, I'm sure. 🙂

cold plover Oct 7, 2020, 9:25 AM

#

been switching to raft lately tbh and it was decent

#

but some rooms depend on the classic one probably

#

oh gotcha

#

ty

#

actually

#

raft showd that directory

#

but i have a bad habit of grep'ing for 200 in my gobuster results

wintry yarrow Oct 7, 2020, 9:28 AM

#

Sometimes medium list can't find anything so I try to stick with large one.

onyx atlas Oct 7, 2020, 9:38 AM

#

Anyone got any idea why is not going through

📎 Screenshot_2020-10-07_at_10.36.44.png

cold plover Oct 7, 2020, 9:49 AM

#

run that on the box

#

and put the answer there

#

i guess

#

@onyx atlas

white salmon Oct 7, 2020, 10:29 AM

#

@onyx atlas it doesn't ask for the command but just for the variable

onyx atlas Oct 7, 2020, 10:32 AM

#

Yes, Thank you

weary quarry Oct 7, 2020, 11:22 AM

#

hey hi guys i need a help in https://tryhackme.com/room/postexploit

TryHackMe

TryHackMe | Post-Exploitation Basics

Learn the basics of post-exploitation and maintaining access with mimikatz, bloodhound, powerview and msfvenom

#

📎 unknown.png

#

i have completed all , except this

white salmon Oct 7, 2020, 11:24 AM

#

it is between the users

weary quarry Oct 7, 2020, 11:24 AM

#

can i PM u to avoid spoilers @white salmon

white salmon Oct 7, 2020, 11:24 AM

#

yes

cold plover Oct 7, 2020, 12:12 PM

#

recovery nudge pls

lofty goblet Oct 7, 2020, 12:55 PM

#

Hi all - May I ask for some assistance please? I'm a bit stuck on one of the Vulnuniversity questions

woven mirage Oct 7, 2020, 12:55 PM

#

Ask your question

lofty goblet Oct 7, 2020, 12:56 PM

#

I've been following step by step, also looked at some videos - however I can not seem to get intruder query to accept any of the file types in this question

📎 unknown.png

stuck fractal Oct 7, 2020, 1:00 PM

#

How are you determining accept/reject?

woven mirage Oct 7, 2020, 1:00 PM

#

Send screenshot of your burp intruder request

lofty goblet Oct 7, 2020, 1:00 PM

#

In DM Termack?

woven mirage Oct 7, 2020, 1:01 PM

#

Here

lofty goblet Oct 7, 2020, 1:01 PM

#

📎 unknown.png

#

and these are the payloads

📎 unknown.png

stuck fractal Oct 7, 2020, 1:02 PM

#

How are you determining accept/reject?

lofty goblet Oct 7, 2020, 1:02 PM

#

Sorry ninja - It's good question - as the subject doesnt actrually tell you where to look - I've gone by this

#

📎 unknown.png

stuck fractal Oct 7, 2020, 1:03 PM

#

You're looking at the response

#

Whatever the URL encoding setting is, flip it

lofty goblet Oct 7, 2020, 1:05 PM

#

Apologies I'm going to be dumb here - what and where sorry 😦

stuck fractal Oct 7, 2020, 1:05 PM

#

There's a setting for intruder

#

For URL encoding specific characters

#

If it's on, turn it off

#

If it's off, turn it on

lofty goblet Oct 7, 2020, 1:06 PM

#

Cool - Just looking through the options now

#

aah

#

this one?

📎 unknown.png

#

(just unticked it)

stuck fractal Oct 7, 2020, 1:07 PM

#

Yea that one

lofty goblet Oct 7, 2020, 1:08 PM

#

wow... saying I feel stupid is an understatement - that makes sense too 😦

#

Thanks a bunch Ninja - much appreciated. I was pulling my hair out

cobalt gate Oct 7, 2020, 2:02 PM

#

hi can i ask a hint for room zthweb2 last task 11 ,i tried to fuzz different parameters with no luck

📎 unknown.png

#

any suggestions are appreciated

cobalt gate Oct 7, 2020, 2:45 PM

#

found it nvm

broken quail Oct 7, 2020, 6:36 PM

#

I was completing shodan room, but couldn't solve Task 4 number 5 question, top operating system. Any other way to solve this question? Also, hint wasn't that helpful for me.

#

Okay, I just solved it. No worries!

halcyon bison Oct 7, 2020, 7:13 PM

#

hi, i am trying the motunui room and i have wrote a script to bruteforce. But it's running for 2 hours now. Can somone tell me if i am wasting time or not? (the script is based on curl and rockyou.txt wordlist). If i am not clear enought tell me (sorry for the bad eng)

#

btw i am sure at 80% the script is right, cause i have made some testing before running it

stuck fractal Oct 7, 2020, 7:17 PM

#

Any brute force on tryhackme will take 5 minutes or less.

halcyon bison Oct 7, 2020, 7:20 PM

#

i see.. ahahah tnx

#

can i ask you t review my code (is like 6 line of bash)

stuck fractal Oct 7, 2020, 7:24 PM

#

I can't as I haven't done the box

halcyon bison Oct 7, 2020, 7:54 PM

#

uh kk

#

tnx

white salmon Oct 7, 2020, 8:27 PM

#

Hi all, can someone assist with the crypto1a || layouts ||aspect, I tried to think using crypto mindset and out of the box mindset but still stuck, ||I tried all I have single and thrice as indicated in lowercase||. Thx

stuck fractal Oct 7, 2020, 8:28 PM

#

What room?

white salmon Oct 7, 2020, 8:28 PM

#

CCT2019

#

First question of Last task

stuck fractal Oct 7, 2020, 8:29 PM

#

Rip ok there's not so many people that can help there

white salmon Oct 7, 2020, 8:31 PM

#

I see that @proven bridge has finished it. If you are around 😊

#

Waiting some help going back to it

proven bridge Oct 7, 2020, 9:14 PM

#

Sure, make sure you pay attention to the word ||thrice||

#

and layout means ⌨️

proven bridge Oct 7, 2020, 11:28 PM

#

@white salmon

elfin flume Oct 8, 2020, 12:43 AM

#

Someone can tell me one hint to Psycho Break, task 2, question 2 ?

stuck fractal Oct 8, 2020, 12:44 AM

#

No, because that's a brand new room

elfin flume Oct 8, 2020, 12:44 AM

#

Humm

stuck fractal Oct 8, 2020, 12:44 AM

#

Please wait 72 hours after release

elfin flume Oct 8, 2020, 12:44 AM

#

Okay, Thx 😄

lean crag Oct 8, 2020, 1:11 AM

#

either I've drank too much or something seems odd. working on blaster

stuck fractal Oct 8, 2020, 1:11 AM

#

If it's the history, check the pins in #room-help for the CVE

lean crag Oct 8, 2020, 1:11 AM

#

run nmap, see a number of ports open. answer is NOT what I found with an -sT scna

#

it's lower than what I get with the sT scan

#

second, nav to the IP address in my browser and only getting the IIS landing page

#

there is no other port that has web service running (NMAP to check)

stuck fractal Oct 8, 2020, 1:13 AM

#

Yeah so 1. Windows is weird with open port numbers

#

What about directory bruteforcing?

lean crag Oct 8, 2020, 1:14 AM

#

ran dirb

#

nada

stuck fractal Oct 8, 2020, 1:14 AM

#

Try harder

#

Different wordlist

#

Bigger one

lean crag Oct 8, 2020, 1:14 AM

#

k

#

one of the questions is asking the name of the main web page, though

#

there isn't one

#

wait

#

hang on

#

LOLZ

#

never mind

#

k, off to user a bigger wordlist and lick my wounds for my stupid web title page question

#

so why is Windows weird on open port numbers? I've not heard that before

stuck fractal Oct 8, 2020, 1:20 AM

#

It just is™️

steady elm Oct 8, 2020, 4:11 AM

#

Hello, i have been solving Psycho Break room and got stuck on Safeheaven, there are 4 images i did extensive stego upto my knowledge and check src files in source too only i got this on page source Search through me and find it. But i am not able to move forward. Any hints are highly appreciated

wintry yarrow Oct 8, 2020, 4:17 AM

#

Its a new room, so no hints or help is allowed till 72 hours passes.

white salmon Oct 8, 2020, 7:05 AM

#

Finally got the crypto1a and crypto1b flags, working on te last one crypto1c, thx @proven bridge for ||⌨️||

rough helm Oct 8, 2020, 6:38 PM

#

Hello, i don't understand this sentence "Split by comma and get the last element in the split"

#

can just somebody help me

oblique cliff Oct 8, 2020, 6:47 PM

#

split the text in the file by ,

#

and then the last thing in the split will be the flag

shut lion Oct 8, 2020, 10:17 PM

#

Hey guys, I need a hint for the ccpentesting room. Anyone mind being DM'ed?

eternal brook Oct 8, 2020, 10:19 PM

#

You can ask here someone will respond, anyways you can dm me:)

shut lion Oct 8, 2020, 10:40 PM

#

So I'm stuck at task 24 of the ccpentesting room. I've done the directory scan and found the secret directory but the files I find are forbidden files like .htaccess and .htpasswd, plus an empty index.html file. Are these the ones or there are others to find? Which wordlists would be best to use in this case to find them?

eternal brook Oct 8, 2020, 10:45 PM

#

Any standard wordlist would have found that directory.....you can try
/usr/share/wordlist/dirbuster/directory-list-2.3-medium.txt

#

@shut lion

shut lion Oct 8, 2020, 10:46 PM

#

@eternal brook alright, let me try again.

#

thanks

native leaf Oct 8, 2020, 10:47 PM

#

hello guys

#

i'm doing the owasp top 10

#

and i am trying to do the extra challenge of day 3

#

i found the email

#

and i got this

#

Hi,
Signups for the beta test of the senseandsensitivity program are now closed -- thank you to everyone who applied.
This also means that the subcode has unfortunately already been claimed.

#

does this mean that there is no more extra challenge

#

or should i try harder

stuck fractal Oct 8, 2020, 11:07 PM

#

You can't get the code anymore.

native leaf Oct 8, 2020, 11:48 PM

#

oh , okay

#

thank you very much

rigid fog Oct 9, 2020, 2:46 AM

#

Room XSS Playgound, task 8, #4: Why does the following answer works, but yields no flag? ||<img src="abc" onmouseover=alert(String.fromCharCode(72,101,108,108,111))>||

wintry yarrow Oct 9, 2020, 7:12 AM

#

No hints or helped allow for new rooms till 72 hours passes.

fathom mortar Oct 9, 2020, 8:15 AM

#

Hello in XSS playground room task5 i got document cookie with alert also i changed background but i didnt get any flag should i do something different or its bugged any hint?

astral smelt Oct 9, 2020, 8:19 AM

#

Try and look at inspect element

fathom mortar Oct 9, 2020, 8:46 AM

#

tbh i dont know what i did different but i got flag at the first one

#

still can not get flag at the 2nd one im giving img src, and hover event i can change background colour to red

white salmon Oct 9, 2020, 9:03 AM

#

in this channel only questions about tryhackme rooms. Try #general

stuck pendant Oct 9, 2020, 9:05 AM

#

dont ask such things ,this is something which requires a concent letter and other formalities,one cant simply go to any sites and just attempt even if it is your own

fathom mortar Oct 9, 2020, 9:10 AM

#

in this channel only questions about tryhackme rooms. Try #general
@white salmon its trykhackme room as i said at the top

white salmon Oct 9, 2020, 9:10 AM

#

Wasn't directed at you

fathom mortar Oct 9, 2020, 9:10 AM

#

oh sorry then

stuck pendant Oct 9, 2020, 9:15 AM

#

it was for the person who just deleted his msg @fathom mortar

tepid solar Oct 9, 2020, 11:58 AM

#

I am looking at room - Psycho Break - And i am currently stuck at decoding a piece of text to get the key to map , can anyone drop a hint which decoding method used.... I tried most of them - base64,rot13 rot 11 etc

#

Never mind got it

stuck fractal Oct 9, 2020, 12:07 PM

#

@tepid solar Please wait 3 days after release before asking for help

weary quarry Oct 9, 2020, 12:35 PM

#

hey hi team , i have rooted , JACK now , but i am confused y the information is not available in the perfect file https://tryhackme.com/room/jack

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

easy root , i have not faced an issue like this

#

please ping me

stuck fractal Oct 9, 2020, 12:36 PM

#

In the.... Perfect file?

weary quarry Oct 9, 2020, 12:37 PM

#

sorry that will reveal the answer

#

can i PM u

final mortar Oct 9, 2020, 12:37 PM

#

You can use the spoiler tags if you are worried about revealing answers

weary quarry Oct 9, 2020, 12:37 PM

#

OH

#

okay

#

for the ||cronjob , i will check for the /etc/crontab , but here there is nothing shows in that but after running the PSPY i have came to know thereis an cronjob running|| @stuck fractal

stuck fractal Oct 9, 2020, 12:39 PM

#

Yes

weary quarry Oct 9, 2020, 12:39 PM

#

is this any BUG ?

stuck fractal Oct 9, 2020, 12:39 PM

#

||System wide crontab is separate from individual users' crontabs. It's a security feature, not a bug. Root had their own private crontab.||

#

Not a bug.

weary quarry Oct 9, 2020, 12:40 PM

#

oh nice thanks

#

u made a day

#

thanks again

flint lintel Oct 9, 2020, 3:23 PM

#

I am feeling really stupid and having trouble clearing Learn Linux room

final mortar Oct 9, 2020, 3:24 PM

#

and ...

#

Do you have a question ?

flint lintel Oct 9, 2020, 3:25 PM

#

...

#

This is called room hints, is it not

stuck fractal Oct 9, 2020, 3:25 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on

At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?

What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

flint lintel Oct 9, 2020, 3:25 PM

#

Thanks

#

I am at the last task trying to get the flag, I have tried chmods greps and finds for anything that looks like root, and tried creating links to the file I need to get to.

stuck fractal Oct 9, 2020, 3:27 PM

#

You need to become root

#

You won't be able to get the flag unless you are root

flint lintel Oct 9, 2020, 3:28 PM

#

Oh

#

The flow of the room was to get the pw for the next user, so I was assuming the PW was in root.txt. Thanks.

stuck fractal Oct 9, 2020, 3:28 PM

#

The flag is in root.txt, which is what you need to put in to TryHackMe

flint lintel Oct 9, 2020, 3:29 PM

#

Gotcha, now I feel dumber lol

stuck fractal Oct 9, 2020, 3:29 PM

#

Don't beat yourself up over it

flint lintel Oct 9, 2020, 3:29 PM

#

Thank you!

flint lintel Oct 9, 2020, 4:04 PM

#

I got it thanks guys! (although not sure why the pw was in that file to begin with other than for learning purposes) haha

lavish wigeon Oct 9, 2020, 7:02 PM

#

i got question

#

What term can we use to look for login pages?

#

google dorking btw

#

tried inline, inurl attributes, none seems to work

final mortar Oct 9, 2020, 7:04 PM

#

Are you using the right parameter with the term

#

Also, it's none of the above

lavish wigeon Oct 9, 2020, 7:06 PM

#

im using login

#

as parameter

#

im googling 15 min already o.o

trim haven Oct 9, 2020, 7:07 PM

#

We usually don't help on research-based rooms

lavish wigeon Oct 9, 2020, 7:08 PM

#

oh aight, didnt kno

#

w

#

i just solved it

#

nevermind

flint lintel Oct 9, 2020, 7:09 PM

#

📎 unknown.png

trim haven Oct 9, 2020, 7:11 PM

#

Did the session just die randomly?

flint lintel Oct 9, 2020, 7:11 PM

#

I am working on the metasploit room, and the steps say to run the commands sessions and jobs. Does that screenshot show the exploit works?

#

No it timed out, but I was trying to run the sessions and jobs command while it was running, but couldnt figure out what to do next (tried opening a new terminal and a new msfconsole but nothing was in sessions or jobs)

trim haven Oct 9, 2020, 7:12 PM

#

If you type exploit -j it will run as a job but it will become a session when you get a connection, does that make sense?

#

And it says the session died so there will not be a session as it died.

flint lintel Oct 9, 2020, 7:13 PM

#

Oh run -j

trim haven Oct 9, 2020, 7:13 PM

#

the meterpreter > prompt means the session was opened correctly. You are able to type commands

flint lintel Oct 9, 2020, 7:13 PM

#

Nice

#

So running the exploit command, I wouldn't be able to see jobs and sessions as they are run though

trim haven Oct 9, 2020, 7:35 PM

#

You should be able to see the session

#

The job will be changed into a session

glad crag Oct 9, 2020, 7:38 PM

#

Hey guys, Im new at this

#

And I've been stoped for almost 2 hours with and "easy" question

#

Can you give me a hint? hehe

stuck fractal Oct 9, 2020, 7:39 PM

#

From the info you've given us? definitely not

glad crag Oct 9, 2020, 7:39 PM

#

I was just asking if any one was here to help me xd

#

The worst of it

#

is that is not a CFT or something

stuck fractal Oct 9, 2020, 7:40 PM

#

There are always people here, but you gotta directly ask your question

glad crag Oct 9, 2020, 7:40 PM

#

Okay, sorry

stuck fractal Oct 9, 2020, 7:40 PM

#

As long as it's a room on TryHackMe

glad crag Oct 9, 2020, 7:40 PM

#

Is a question in a Section of the CC: Pen Testing

#

If i dont have to ask that here i'll leave it xD

stuck fractal Oct 9, 2020, 7:41 PM

#

Just ask!

glad crag Oct 9, 2020, 7:41 PM

#

Task 8 [Section 3- Metasploit] the #8

#

I'm stucked here because I can't find it

stuck fractal Oct 9, 2020, 7:41 PM

#

It?

glad crag Oct 9, 2020, 7:42 PM

#

I mean I read all the options of the payload, of the module

#

And I cant find it

#

Or maybe I just dont understand the question

stuck fractal Oct 9, 2020, 7:42 PM

#

What option sets the payload to be sent to the target machine?

glad crag Oct 9, 2020, 7:42 PM

#

YES

#

I just need a hint

stuck fractal Oct 9, 2020, 7:43 PM

#

Something like EternalBlue is an exploit, it delivers a payload

#

There's an option to set what payload you deliver

#

It's a research question TBH

#

Do some googling

glad crag Oct 9, 2020, 7:43 PM

#

I've done it trust me

#

So the question is about changing the payload?

stuck fractal Oct 9, 2020, 7:44 PM

#

metasploit how to set payload

#

easy

#

It's literally "what option do you use to set the payload"

glad crag Oct 9, 2020, 7:44 PM

#

Okay im dumb, I was searching in the options of the pàyload

#

Sorry, Im not english and there are some things that I can missunderstood

#

Thanks James! And sorry for wasting your time

stuck fractal Oct 9, 2020, 7:44 PM

#

use google translate if you need to

#

It's not a waste of time if you learned something

glad crag Oct 9, 2020, 7:47 PM

#

Forgive me for being a mess, I always complicate my life unnecessarily. I got it now

pine vale Oct 9, 2020, 8:09 PM

#

Hello. New to this. I am working on Blue/Task 3 Escalate/Step #4 Run!
I continue to get a Post failed error. I have re-worked the room to this point and continue to get the same error.
I have read through many of the walkthrough guides and none address this. Thank you for any/all assistance!

📎 unknown.png

stuck fractal Oct 9, 2020, 8:14 PM

#

@pine vale You already had a meterpreter

#

You cannot convert a meterpreter into a meterpreter

pine vale Oct 9, 2020, 8:15 PM

#

Hmmm. Thanks. I guess the status was not clear to me.

final mortar Oct 9, 2020, 8:15 PM

#

msf has changed the default shell for that exploit since the room came out

pine vale Oct 9, 2020, 8:20 PM

#

When I first saw meterpreter > I was confused. pwd showed C:\Windows\system32, so I thought I was on track. But if Task 2 gets you there, then what is the aim of Task 3?

stuck fractal Oct 9, 2020, 8:21 PM

#

msf has changed the default shell for that exploit since the room came out
@final mortar

#

It used to give you a standard shell, it now gives you a meterpreter

pine vale Oct 9, 2020, 8:22 PM

#

Ah. So the Task steps are out of synch with msf? That makes sense. I appreciate this forum and the help!

stuck fractal Oct 9, 2020, 8:22 PM

#

No, the room just hasn't been updated

#

MSF isn't reliable, at all

#

Super unstable

pine vale Oct 9, 2020, 8:23 PM

#

Thanks.

white salmon Oct 9, 2020, 8:40 PM

#

damn year of the pig... no wonder there aren't anyone with initial flag. this will take more than 1 hour to even get into the dang thing

#

i mean... even writing a custom script to do this on the thm kali box and making it use all its threads possible... you sneaky sneaky devil you

#

@inland onyx can i send you a screen cap?

inland onyx Oct 9, 2020, 8:49 PM

#

Yes, you can 🙂

cedar notch Oct 9, 2020, 8:49 PM

#

I've been bruteforcing it for 2h now...

#

@inland onyx If its not gonna be bruteforce I'm gonna whoop ur ass

inland onyx Oct 9, 2020, 8:50 PM

#

Haha. That hint, for the record, means that if it takes more than two minutes then something has gone wrong

cedar notch Oct 9, 2020, 8:50 PM

#

😠

#

it went thorul cewl and THE hint

#

and nothing 😢

inland onyx Oct 9, 2020, 8:53 PM

#

Missing something still, perhaps then 😛

white salmon Oct 9, 2020, 9:25 PM

#

On the learn linux room I can not ssh into the server using username shiba1. I have a macbook can not download putty so I tried through terminal. Anybody have this issue?

stuck fractal Oct 9, 2020, 9:26 PM

#

@white salmon What happens when you try?

white salmon Oct 9, 2020, 9:27 PM

#

it says permission denied

stuck fractal Oct 9, 2020, 9:28 PM

#

What's the full error message?

white salmon Oct 9, 2020, 9:28 PM

#

permission denied. please try again

stuck fractal Oct 9, 2020, 9:28 PM

#

Permission denied (public key)?

#

Try 3 times.

#

Then screenshot the error message

white salmon Oct 9, 2020, 9:29 PM

#

Permission denied (publickey,password).

stuck fractal Oct 9, 2020, 9:29 PM

#

Ok, and you're typing the password shiba1 when prompted for a password?

white salmon Oct 9, 2020, 9:29 PM

#

yes

stuck fractal Oct 9, 2020, 9:29 PM

#

Where did you get the IP that you're using?

#

You need to deploy the machine in the room, not the attackbox

white salmon Oct 9, 2020, 9:30 PM

#

under my machine

stuck fractal Oct 9, 2020, 9:30 PM

#

The machine that you deploy in the room is separate from the attackbox

white salmon Oct 9, 2020, 9:30 PM

#

oh

stuck fractal Oct 9, 2020, 9:30 PM

#

The room emphasises this in 3 different places

white salmon Oct 9, 2020, 9:30 PM

#

how do you deploy in the room? There is no button to deploy in this one

stuck fractal Oct 9, 2020, 9:33 PM

#

There is

#

Make sure you're looking at the right task

white salmon Oct 9, 2020, 9:34 PM

#

It just says start attackbox

📎 Screen_Shot_2020-10-09_at_2.33.41_PM.png

stuck fractal Oct 9, 2020, 9:35 PM

#

Machines are attached to tasks

#

Not to rooms

#

Look at the tasks below the video.

white salmon Oct 9, 2020, 9:36 PM

#

got it. I appreciate the help. I am new to this

#

@white salmon new is best... means you care and want to learn and have a passion or hunger to explore as opposed to oldschool grumpy assholes . (no offense to oldschool grumpy assholes present)

#

I find this very interesting but hard at the same time

white salmon Oct 9, 2020, 10:11 PM

#

its a journey

#

i remember popping my first shell and being liek woh... what!?

flint lintel Oct 10, 2020, 1:45 AM

#

📎 unknown.png

#

On the VulnUniversity room, I can't seem to get the check to work

#

I have the right answer, but I am more concerned about wondering why it is showing the error "extension not accepted"

stuck fractal Oct 10, 2020, 1:47 AM

#

Check payload encoding

#

If it's on, turn it off and vice versa

flint lintel Oct 10, 2020, 1:47 AM

#

gasp

#

thankyouthankyouthankyou

stuck fractal Oct 10, 2020, 1:50 AM

#

blobfingerguns

#

I can never remember which way it needs to be set

#

Just that one of them works and one of them doesn't

flint lintel Oct 10, 2020, 1:51 AM

#

It throws me off that this is a free room but the pre-req room of burp suite is not

#

;_;

stuck fractal Oct 10, 2020, 1:52 AM

#

There's portswigger academy. Don't limit yourself to just THM.

flint lintel Oct 10, 2020, 1:53 AM

#

I will check it out! Prior to THM, I had only intercepted requests and just changed params- so this is really all fun in a whole new world

livid vault Oct 10, 2020, 3:07 AM

#

guys

#

📎 IMG_20201010_100529.jpg

#

wrong password?

#

📎 20201010_100746.jpg

final mortar Oct 10, 2020, 3:11 AM

#

You do get a free in-browser machine with this room, use that @livid vault

livid vault Oct 10, 2020, 3:13 AM

#

blank access in browser

📎 20201010_101318.jpg

#

haha

#

what password for ssh this challenge

📎 20201010_101351.jpg

final mortar Oct 10, 2020, 3:15 AM

#

Try Accessing in Browser @livid vault

livid vault Oct 10, 2020, 3:16 AM

#

cant be used

#

📎 20201010_102336.jpg

#

same @final mortar

final mortar Oct 10, 2020, 3:24 AM

#

Not Attack Box

#

This machine

📎 unknown.png

#

📎 unknown.png

#

Try This Green Access in Browser if isn't loading up properly

livid vault Oct 10, 2020, 3:35 AM

#

same

final mortar Oct 10, 2020, 3:45 AM

#

Same what

#

It comes pre logged in

prisma gull Oct 10, 2020, 7:02 AM

#

i am stuck on psycho break room on the keeper key.....i did some stego tools but nothing came up ....can anyone give me some hints

alpine lantern Oct 10, 2020, 8:16 AM

#

hey need help on : https://tryhackme.com/room/networkservices. Task 3 #6, i don't kow where i'm supposed to search 🙂

TryHackMe

TryHackMe | undefined

An online platform for learning and teaching cyber security, all through your browser.

white salmon Oct 10, 2020, 8:34 AM

#

It is in your enum4linux results

cedar coral Oct 10, 2020, 9:08 AM

#

any one on Year of the Pig, just for a sanity check

pine ermine Oct 10, 2020, 9:16 AM

#

Yes, @cedar coral

cedar coral Oct 10, 2020, 9:16 AM

#

can i DM bro?

pine ermine Oct 10, 2020, 9:16 AM

#

Yep, np

cold magnet Oct 10, 2020, 9:43 AM

#

Hi, I got a question about Year of the Pig, anybody able to help?

trim haven Oct 10, 2020, 9:47 AM

#

Rule 13 states we cannot help you for 72 hours unless instructed otherwise by the room creator

#

I haven’t checked the room but if it’s a challenge room we can’t help.

cold magnet Oct 10, 2020, 9:48 AM

#

no problem,

white salmon Oct 10, 2020, 10:24 AM

#

Hello guys!

For the room WWBuddy how do I properly add the passwords to change into pay load?

' or 1=1 -- a

paper sapphire Oct 10, 2020, 10:54 AM

#

hey guy soo can someone tell me hint on agent sudo room

#

I discovered that the secret site is a user-agent but I have no idea how I can access it 😐

fleet pike Oct 10, 2020, 11:03 AM

#

is YoTP a new version of yotf?

inland onyx Oct 10, 2020, 11:04 AM

#

No. They're both part of the same series

fleet pike Oct 10, 2020, 11:04 AM

#

yotf was crazy fun

inland onyx Oct 10, 2020, 11:04 AM

#

There are lots of them -- some still private

#

Two more waiting for release. Three more planned

paper sapphire Oct 10, 2020, 11:05 AM

#

I discovered that the secret site is a user-agent but I have no idea how I can access it 😐
@paper sapphire anyone help 😐

eternal brook Oct 10, 2020, 11:08 AM

#

Try using different user agents according to the naming scheme you see on the webpage.....

fleet pike Oct 10, 2020, 11:09 AM

#

Muirland: I thoroughly enjoyed yotf... You have a knack for good challenge rooms 🙂

weary quarry Oct 10, 2020, 12:04 PM

#

hey hi guys , i have ROOTED https://tryhackme.com/room/ice but i cant dump the ADMIN hash ?

TryHackMe

TryHackMe | Ice

Deploy & hack into a Windows machine, exploiting a very poorly secured media server.

#

can anyone he,p me in this

stuck fractal Oct 10, 2020, 12:10 PM

#

Show us what happens?

celest imp Oct 10, 2020, 12:44 PM

#

i am really stuck on Psycho Break room at step that needed to decode text for map key. i already tried ceaser, rot or shift but none of them work. is there anybody can give me a hint

astral smelt Oct 10, 2020, 12:53 PM

#

Intsall Ciphey

celest imp Oct 10, 2020, 1:02 PM

#

thx a lot

ancient acorn Oct 10, 2020, 1:42 PM

#

On the Learn Linux room i've tried everything I can think of to access /root/root.txt for the final task, I feel like I'm missing something obvious...any hints? Sorry I'm new

weary quarry Oct 10, 2020, 1:50 PM

#

Show us what happens?
@stuck fractal i have got the Nt/authority

#

but i dont know , same user Y it is enabling the SeDebugPrivilege Debug programs Enabled

#

and in other it is telling like SeDebugPrivilege Debug programs disabled

stuck fractal Oct 10, 2020, 1:51 PM

#

@celest imp Thats a brand new room so please don't ask for help yet. Give it 72 hours from release

weary quarry Oct 10, 2020, 1:52 PM

#

i have got the shell as DARK , in windows i have tried to dump , sut i cant becasue SeDebugPrivilege is disabled

#

but i have used some msfmodule , that throws the same user with SeDebugPrivilege is ENABLED

#

i am confused here

stuck fractal Oct 10, 2020, 1:52 PM

#

You need to be system

#

Then you need to migrate to a system process.

weary quarry Oct 10, 2020, 1:53 PM

#

after using the ps also it is not showing the nt/authority process

#

i dont know how windows/local/bypassuac_eventvwr this enables the SeDebugPrivilege (so i can take the hash fromthe mimikatz)

tight skiff Oct 10, 2020, 1:55 PM

#

Golden Eye Room: Task 2: 3rd Question: Inspect port 55007, what services is configured to use this port?
I have done nmap scan for this port and pop3 is running. But I'm not able to figure the answer.

loud flax Oct 10, 2020, 2:09 PM

#

on the anonymous playground room, got the funky looking code and im guessing its some sort of cipher as the hint says 'zA' = 'a' but im not too sure what to do with it

astral smelt Oct 10, 2020, 2:15 PM

#

You have to create a Python script for it to be decoded

loud flax Oct 10, 2020, 2:17 PM

#

yeah but im not too sure how'd it work

#

i see the 'a's in it line up with the username magna so i might be able to get the hE and the m for example to figure out this

#

aight i figured it out

#

its a damn smart cipher tho ill say

astral smelt Oct 10, 2020, 2:31 PM

#

Yea it is I got stuck on it for a long time

soft fulcrum Oct 10, 2020, 2:48 PM

#

im stuck on Task 2 Question 4 Psycho Break Room, can someone give me an advice?

stuck fractal Oct 10, 2020, 2:57 PM

#

Please wait a little longer

#

72 hours from release

soft fulcrum Oct 10, 2020, 3:01 PM

#

ok

red minnow Oct 10, 2020, 3:15 PM

#

Hi, i'm doing the "Psycho Break" room and i'm on the page where you have to escape Laura. Can someone give me a nudge?

stuck fractal Oct 10, 2020, 3:20 PM

#

Please wait a little longer

true prairie Oct 10, 2020, 7:17 PM

#

Hi, i'm doing the "Psycho Break" room and i'm on the page where you have to escape Laura. Can someone give me a nudge?
@red minnow oh man I'm stuck there too... Really don't know what to do..

hard raft Oct 10, 2020, 7:36 PM

#

I'm stuck with that too

ivory plinth Oct 10, 2020, 7:41 PM

#

lol seems to be a fun ride ahead .... i am stuck at the keepers key. Tried lots of stego stuff, but to no success, so really curious what i am missing 😆

true prairie Oct 10, 2020, 7:44 PM

#

72 hours should be over now 🤔

steady stratus Oct 10, 2020, 7:45 PM

#

Indeed it is

#

g,

#

Help/Hints about this room (in the respective channels) are okay now

true prairie Oct 10, 2020, 7:46 PM

#

A hint for the keepers key from my side.. It's not about the picutes on the site

ivory plinth Oct 10, 2020, 7:48 PM

#

@true prairie yeah I guesses so to, bc i tried everything on them. i was skimming through the JS files too :-/... can I DM u ?

true prairie Oct 10, 2020, 7:49 PM

#

@true prairie yeah I guesses so to, bc i tried everything on them. i was skimming through the JS files too :-/... can I DM u ?
@ivory plinth yeah of course no problem :)

true prairie Oct 10, 2020, 8:08 PM

#

Any hints for Psycho Break Task 2 Question 4? Can't escape Laura...

cerulean sky Oct 10, 2020, 8:09 PM

#

Same here ... @true prairie since last night .. Lol..

#

Just not giving up on it. Trying and trying and trying. But no luck so far.

true prairie Oct 10, 2020, 8:13 PM

#

Just not giving up on it. Trying and trying and trying. But no luck so far.
@cerulean sky yeah and I tried the weirdest things.. No success

#

Even looked up some gameplay videos on YouTube on what to do when encountering Laura

cerulean sky Oct 10, 2020, 8:14 PM

#

Hahahaha I did too..

grave rain Oct 10, 2020, 8:22 PM

#

Even looked up some gameplay videos on YouTube on what to do when encountering Laura
@true prairie i read the whole wiki 😆

true prairie Oct 10, 2020, 8:23 PM

#

@true prairie i read the whole wiki 😆
@grave rain yeah I went to the Wiki link below and thought: hmm well maybe I'll find something useful in here...

cerulean sky Oct 10, 2020, 8:25 PM

#

Same here guys.. I think I tried countless times to get past the task .. But it is kinda tricky... Yet i like the challenge.. The creator has made a quite a well-thought room..

#

I read the wiki page .. All of it ..

true prairie Oct 10, 2020, 8:26 PM

#

Same here guys.. I think I tried countless times to get past the task .. But it is kinda tricky... Yet i like the challenge.. The creator has made a quite a well-thought room..
@cerulean sky oh yeah! Overall until now an awesome room and very dynamic

cerulean sky Oct 10, 2020, 8:27 PM

#

Other than getting a clue I was more tempted to start playing the game on my PS.. I had it since 2017, never played but didn't know I will want to play the game due to a CTF machine I will get stuck in 2020.. Lol ..

grave rain Oct 10, 2020, 8:27 PM

#

Theres really a blurred line between a very well thought room and a random room

steady stratus Oct 10, 2020, 8:29 PM

#

Fo' sure

cerulean sky Oct 10, 2020, 8:29 PM

#

True indeed. The harder we try the better the room actually is .. The motive is to keep trying and get the box done leaving you with learning something new.. I think it's all about the journey to being a good cyber/infosec guy

steady stratus Oct 10, 2020, 8:30 PM

#

How do you think it falls? @grave rain between the "very well thought" and a "random room"?

grave rain Oct 10, 2020, 8:30 PM

#

It depends on how you see it i guess

#

Right now im stuck

#

So for me its random for now

#

When an answer pops up.. ill be like damn it was well thought

#

Even blurrier line in judging lols

steady stratus Oct 10, 2020, 8:31 PM

#

Okay - that makes sense

#

We're (i) debating on changing he difficulty rating so I'm just trying to collect communal thoughts

grave rain Oct 10, 2020, 8:32 PM

#

It definitely not an 'easy walkthrough' room haha

cerulean sky Oct 10, 2020, 8:32 PM

#

I am surprised that Psycho break is classified as easy ctf room .. I am sure it isn't easy box but definately medium..

steady stratus Oct 10, 2020, 8:33 PM

#

Granted our new rules for room testing / review would clasify that room differently but

true prairie Oct 10, 2020, 8:33 PM

#

When an answer pops up.. ill be like damn it was well thought
@grave rain Yeah but right now I don't know what to think. Maybe the answer is so simple yet so obvious. The room was a blast till this point. Now it's a bit of a bummer..

steady stratus Oct 10, 2020, 8:33 PM

#

I'm using the "old" rules for when that was submitted and reviewed

#

Okay, thanks y'all

#

I'm stuck on task 3 btw 😉

grave rain Oct 10, 2020, 8:34 PM

#

You give us hope man

cerulean sky Oct 10, 2020, 8:34 PM

#

Oh.. wow you went past task 2.. awesome.. keep going..

steady stratus Oct 10, 2020, 8:34 PM

#

I want to gather a community view/opinion before changing the difficulty rating as it's very subjective so

grave rain Oct 10, 2020, 8:34 PM

#

It looks easy if you know the solutions ngl

steady stratus Oct 10, 2020, 8:35 PM

#

Very much ahaha

grave rain Oct 10, 2020, 8:35 PM

#

Just directory bruteforcing and basic command injection

steady stratus Oct 10, 2020, 8:35 PM

#

It's that little click in the brain y'know?

#

aaah it makes sense but it's stupid

#

xD

grave rain Oct 10, 2020, 8:35 PM

#

But the little click makes all the difference

#

Hermit mode

steady stratus Oct 10, 2020, 8:36 PM

#

For surea hehe

#

Good luck!

grave rain Oct 10, 2020, 8:36 PM

#

You too luls

steady stratus Oct 10, 2020, 8:36 PM

#

I'm just keeping my ears for how others find it alongside the rare time I get to try it

cerulean sky Oct 10, 2020, 8:37 PM

#

May the force be with ya'all..BREAKING THE PSYCHO..

steady stratus Oct 10, 2020, 8:37 PM

#

So it's good to hear for me especially (:

grave rain Oct 10, 2020, 8:37 PM

#

When someone whos more pro in this field is stuck with you

#

Its better for us to hear haha

#

Makes us feel less nooby

steady stratus Oct 10, 2020, 8:38 PM

#

LMAO I'm qualified in a different type of forensics but this is close enough xD

#

For sure

grave rain Oct 10, 2020, 8:38 PM

#

Atleast not medical field hahaha

steady stratus Oct 10, 2020, 8:38 PM

#

Keep on at it folks! I'm dragging on behind with you all ❤️

cerulean sky Oct 10, 2020, 8:38 PM

#

https://tenor.com/view/joseph-oda-pick-myself-up-piece-by-piece-the-evil-within-jojo-tew-gif-9592510

Tenor

steady stratus Oct 10, 2020, 8:38 PM

#

Atleast not medical field hahaha
@grave rain Ahaha well, saying that 😛

#

You'd be surprised

grave rain Oct 10, 2020, 8:38 PM

#

Try me haha

#

Idk where antihypertensives fit in any of this

steady stratus Oct 10, 2020, 8:39 PM

#

I'm a HCP in the UK

grave rain Oct 10, 2020, 8:39 PM

#

Wuw

#

Im in india

steady stratus Oct 10, 2020, 8:39 PM

#

That ain't a d*rk swing but

grave rain Oct 10, 2020, 8:39 PM

#

Same profession technically

steady stratus Oct 10, 2020, 8:39 PM

#

Infosec attracts a very wide personality 😛

cerulean sky Oct 10, 2020, 8:39 PM

#

Im in UK too..

grave rain Oct 10, 2020, 8:40 PM

#

Its one of those subjects which is 100 percent self learn yk

#

You cant learn stuff like medicine self learn

steady stratus Oct 10, 2020, 8:40 PM

#

heheh somewhat 😛

#

I've been through plenty of exams for it

grave rain Oct 10, 2020, 8:40 PM

#

I mean who would even self learn medicine hahaha

steady stratus Oct 10, 2020, 8:41 PM

#

kekw

#

I only picked it up because my patience/knowlege of infosec was less at Uni lmao

red minnow Oct 10, 2020, 8:41 PM

#

I don't think you will be taken serious if you say you learned medicine by yourself

grave rain Oct 10, 2020, 8:42 PM

#

I didnt hear of infosec then

#

Kinda dumb

steady stratus Oct 10, 2020, 8:42 PM

#

Not at all (:

#

Very different skillsets

#

Medical you take fact as fact

grave rain Oct 10, 2020, 8:43 PM

#

I only picked it up because my patience/knowlege of infosec was less at Uni lmao
@steady stratus
This is weird haha

steady stratus Oct 10, 2020, 8:43 PM

#

Infosec - you don't

grave rain Oct 10, 2020, 8:43 PM

#

But medicine has its share of plot twists lol

steady stratus Oct 10, 2020, 8:43 PM

#

Hehee ain't it just huh @grave rain

grave rain Oct 10, 2020, 8:46 PM

#

@steady stratus id like to PM you something about nhs if thats fine by you

cerulean sky Oct 10, 2020, 8:46 PM

#

gtg.. Nice talking to ya all.. First time on Discord and its indeed a lot of fun to be here among so many like-minded people.. The community is awesome.. We surely come back !! See ya' guy.. Break the psycho or become one ... Lol ..

steady stratus Oct 10, 2020, 8:47 PM

#

Sure, go for it @grave rain (:

#

Thanks @cerulean sky! Best of luck with it all .... until the next time!

cerulean sky Oct 10, 2020, 8:48 PM

#

Until next time.. Sure.. !! 🙂

somber crag Oct 10, 2020, 9:05 PM

#

Hi guyz

#

Can I get a hint about the FTP passwd? on the psychobreak room

glossy tendon Oct 10, 2020, 9:54 PM

#

i think i might have overwritten the Learn Linux room Task 21 environment variable, any help getting back on track

woven mirage Oct 10, 2020, 10:40 PM

#

Redeploy the machine

#

When you redeploy you get a fresh machine without the modifications you made

soft fulcrum Oct 10, 2020, 10:57 PM

#

Hints already allowed for Psycho Room?

hollow holly Oct 10, 2020, 10:58 PM

#

hey @white salmonyone!
I'm doing the SQL Injection room, on task 7, and I'm having a really bad time trying to find the database's name
Can someone give me a hint? there's no write up for this room yet ...

soft fulcrum Oct 10, 2020, 10:58 PM

#

I just want to wonder what am i missing on Task 2 Quest 4 xd

hollow holly Oct 10, 2020, 11:00 PM

#

anyone?

woven mirage Oct 10, 2020, 11:01 PM

#

Search "query to select database name SQL"

#

Also, dont tag everyone, It doesnt work anyway and you Tagged poor ever instead :(

hollow holly Oct 10, 2020, 11:02 PM

#

nervermind!

#

I got it!

#

@woven mirage im sorry

#

it was my mistake!

#

poor ever xd

woven mirage Oct 10, 2020, 11:03 PM

#

No problem

hollow holly Oct 10, 2020, 11:03 PM

#

can I share how I did solve it here?

woven mirage Oct 10, 2020, 11:06 PM

#

Actually, this Channel is for hints so people are not supposed to post answers

hollow holly Oct 10, 2020, 11:08 PM

#

I was not going to give the answer

#

but ok ..

soft fulcrum Oct 10, 2020, 11:42 PM

#

Psycho Room Task 2 Question 4 (How to escape Laura), any hint?

hard raft Oct 10, 2020, 11:42 PM

#

Can anyone give me a hint on Psycho Break task 2 question 4 (escape Laura)?

soft fulcrum Oct 10, 2020, 11:43 PM

#

i think i know how to do it but miss something to complete it :/

hard raft Oct 10, 2020, 11:43 PM

#

lol, at once xD

soft fulcrum Oct 10, 2020, 11:43 PM

#

xd

hard raft Oct 10, 2020, 11:44 PM

#

i think i know how to do it but miss something to complete it :/
@soft fulcrum I'm stuck at it for 2 days and I don't have a clue how to do it

soft fulcrum Oct 10, 2020, 11:45 PM

#

yeah me too, i just have a thought but can be completely wrong

rugged sapphire Oct 10, 2020, 11:53 PM

#

I'm also stuck on Psycho Break, Task 2 Q4..
I can view contents of actual dir but all other commands tried are blocked..

cerulean sky Oct 11, 2020, 12:10 AM

#

Tried a lot to get past it. But no luck so far guys. Keep grinding. The hint is the keyword in the source code is the parameter and you can only run your most typed command , nothing else is permitted. Thats all so far.. Lol.. 🙂

noble tinsel Oct 11, 2020, 1:36 AM

#

has anyone done manual SQLi on uopeasy? trying to avoid sqlmap & need a nudge

noble locust Oct 11, 2020, 3:58 AM

#

Room - Common Linux Privsec

#

query -

#

Task 4 : enumeration

#

How many available shells are there on the system?

#

I ran grep '^[^#]' /etc/shells

#

It gave me these

#

/bin/bash
/bin/rbash
/bin/dash
/usr/bin/tmux
/usr/bin/screen
/bin/zsh
/usr/bin/zsh
/usr/bin/pwsh
/opt/microsoft/powershell/7/pwsh

#

totals to 10 in count

#

but the answer format is of single integer input

#

📎 has4pri.png

#

😕

stone oyster Oct 11, 2020, 4:23 AM

#

Hey folks, working on the Advent room, and I feel like I should be able to actually find the page for the first box but it keeps timing out. My Openvpn is running. I have Burp Suite open and Intercept off. I can get to places like Hotmail....but not the machine that I deployed.

#

THoughts?

final mortar Oct 11, 2020, 4:30 AM

#

!multivpn

proud scarabBOT Oct 11, 2020, 4:30 AM

#

TryHackMe

Learn how to look for duplicate instance of your OpenVPN connection.

• Step 1

Make sure you have setup your VPN connection correctly https://tryhackme.com/room/openvpn

• Step 2

Type ps aux | grep openvpn into your terminal and press enter

• Step 3

If there's more than one line (that don't start with "grep" or sudo), do the following steps

• Step 4

Type sudo killall openvpn into your terminal and press enter

• Step 5

Start the VPN with sudo openvpn <path-to-config>

final mortar Oct 11, 2020, 4:30 AM

#

!vpnscript

proud scarabBOT Oct 11, 2020, 4:30 AM

#

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

final mortar Oct 11, 2020, 4:30 AM

#

@stone oyster

noble locust Oct 11, 2020, 4:31 AM

#

chika..

stone oyster Oct 11, 2020, 4:32 AM

#

thx

sturdy dock Oct 11, 2020, 4:38 AM

#

can i get hint for pyschobreak room task2 question3?

true prairie Oct 11, 2020, 8:26 AM

#

but the answer format is of single integer input
@noble locust If you're still stuck try reading out only the /etc/shells file

#

Can I get a hint about the FTP passwd? on the psychobreak room
@somber crag The FTP username and password should be in the same file...

maiden violet Oct 11, 2020, 8:41 AM

#

Can anyone help me for Psycho Break Task 2 Question 3

stuck pendant Oct 11, 2020, 9:04 AM

#

any hint for psycho break escape laura?

true prairie Oct 11, 2020, 9:16 AM

#

Can anyone help me for Psycho Break Task 2 Question 3
@maiden violet Focus on enumerating the safe place :)

#

any hint for psycho break escape laura?
@stuck pendant I think a good hint is to imagine running away from her with the help of system known commands

white salmon Oct 11, 2020, 9:58 AM

#

im stucked with keepers key in psychobreak room

#

any hints ??

past oxide Oct 11, 2020, 10:02 AM

#

trying this lab
got stuck at what is the username of a logged on user?
i trided bruteforcing using dirsearch gobuster
but the username didnt came in the result
anyone?

#

https://tryhackme.com/room/webappsec101

TryHackMe

TryHackMe | WebAppSec 101

In this room, we will walk through how to testing an application in the perspective of a hacker/penetration tester

clear creek Oct 11, 2020, 10:12 AM

#

hello Guys,
I m stuck in the Psycho Break, where you have to decrypt a piece of text (task2.2)
I tried some bases, rot, ceasar, vigener,... I cant get it.
some hints? thx

red minnow Oct 11, 2020, 10:14 AM

#

@clear creek Hint: cipher

clear creek Oct 11, 2020, 10:17 AM

#

@red minnow thx I ll try some of them

white salmon Oct 11, 2020, 10:28 AM

#

hello Guys,
I m stuck in the Psycho Break, where you have to decrypt a piece of text (task2.2)
I tried some bases, rot, ceasar, vigener,... I cant get it.
some hints? thx
@clear creek altbash cipher

clear creek Oct 11, 2020, 11:01 AM

#

@white salmon yep found it. I never heard of it till now ^^

stuck pendant Oct 11, 2020, 11:55 AM

#

@white salmon dont give the direct answer let people try thats where they learn

white salmon Oct 11, 2020, 1:18 PM

#

Hello i'm in the linux challenge room task 4

#

"Analyse the flag 24 compiled C program. Find a command that might reveal human readable strings when looking in the source code."

#

📎 unknown.png

#

and i don't know why it doesn't work

#

(i'm with the good user for this operation (garry))

#

Can somebody help me? Thanks

red minnow Oct 11, 2020, 1:20 PM

#

try nano ?

white salmon Oct 11, 2020, 1:21 PM

#

📎 unknown.png

#

Nop it's a C program

#

can't read it like this*

red minnow Oct 11, 2020, 1:21 PM

#

strings then

white salmon Oct 11, 2020, 1:22 PM

#

Strings??*

red minnow Oct 11, 2020, 1:22 PM

#

strings file.c

oblique cliff Oct 11, 2020, 1:22 PM

#

Nop it's a C program
@white salmon for the record gedit wouldn’t have worked either it would’ve looked the same as that nano output

white salmon Oct 11, 2020, 1:22 PM

#

Aw thanks

#

i'm try to used strings

#

but

sullen glen Oct 11, 2020, 1:23 PM

#

Hello, guys I have a little problem to solve the skynet room 😄 I am trying to get back reverse php shell with the command : http://10.10.165.12/45kra24zxs28v3yd/administrator/alerts/alertConfigField.php?urlConfig=http://10.9.167.48/revShell.php, but I just get reverse shell from my machine to my machine 😄

white salmon Oct 11, 2020, 1:28 PM

#

Thanks you @red minnow strings work

trail pebble Oct 11, 2020, 1:29 PM

#

hey am doing psycho break and stuck on "i am having a terrible nightmare statement" can anyone give me a hint??

red minnow Oct 11, 2020, 1:30 PM

#

@trail pebble sure, pm me

white salmon Oct 11, 2020, 1:33 PM

#

sry

#

@trail pebble sure, pm me
@red minnow gimme hint too

sinful thicket Oct 11, 2020, 1:42 PM

#

@sullen glen check your dm buddy

iron sapphire Oct 11, 2020, 2:04 PM

#

can't wait to see the walkthroughs on 'Year of the Pig'

#

just wrote my first python script with concurrency

#

🤘

bleak gust Oct 11, 2020, 2:07 PM

#

Can someone share some hint for crypto1c from cct2019? Im out of ideas 😭

spiral yew Oct 11, 2020, 5:56 PM

#

On the Mr. Robot CTF box, for Key 2 there is a hint that says "white-colored font". I already got Key 2, but I did not understand the relevance of that hint since it did not involve white-font? I also checked the included write-ups with the box, and they all seemed to use a similar process I did. Would anyone be able to clarify what that meant?

echo salmon Oct 11, 2020, 6:45 PM

#

can someone give a hint on 'i am having a terrible nightmare statement' in psycho break room

white salmon Oct 11, 2020, 6:46 PM

#

can someone give a hint on 'i am having a terrible nightmare statement' in psycho break room
@echo salmon bruteforce

soft fulcrum Oct 11, 2020, 7:14 PM

#

any help to Escape Laura? Psycho Break Room

slim narwhal Oct 11, 2020, 7:18 PM

#

Need help to escape Laura also please :)

solar scroll Oct 11, 2020, 7:27 PM

#

need help in Break Room (terrible nightmare)

trim haven Oct 11, 2020, 7:28 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on
At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?
What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

#

Are you able to type dir

stuck fractal Oct 11, 2020, 7:29 PM

#

Please mark that as a spoiler or remove the passwords

white salmon Oct 11, 2020, 7:29 PM

#

ow sorry

#

Will do it the next time

trim haven Oct 11, 2020, 7:29 PM

#

You'll have to do it now

#

Just for the people who haven't completed the room

white salmon Oct 11, 2020, 7:30 PM

#

Okey i will delete it

#

@trim haven I will try to dir

trim haven Oct 11, 2020, 7:31 PM

#

You'll have to do it now
@trim haven Sorry I hope this didn't seem commanding, I meant it in a different way :(

white salmon Oct 11, 2020, 7:31 PM

#

No problem, i understand your point 🙂

soft fulcrum Oct 11, 2020, 7:31 PM

#

Hint for Task 2 Quest 4 Psycho Break Room pls

white salmon Oct 11, 2020, 7:36 PM

#

@trim haven dir also doesn't work

trim haven Oct 11, 2020, 7:37 PM

#

It seems like there is something wrong with your smbclient

white salmon Oct 11, 2020, 7:37 PM

#

I am getting these error message when i execute any command

#

NT_STATUS_INVALID_INFO_CLASS listing *

trail pebble Oct 11, 2020, 7:38 PM

#

On the Mr. Robot CTF box, for Key 2 there is a hint that says "white-colored font". I already got Key 2, but I did not understand the relevance of that hint since it did not involve white-font? I also checked the included write-ups with the box, and they all seemed to use a similar process I did. Would anyone be able to clarify what that meant?
@spiral yew

yes the thing u should know is written on that web page but the trick is fontcolor is white and the background too so u can't see that

spiral yew Oct 11, 2020, 7:38 PM

#

Hmm, I solved the whole box without that. I will go back and look around.

trail pebble Oct 11, 2020, 7:40 PM

#

there are obv multiple ways to get same data

gray garden Oct 11, 2020, 7:46 PM

#

Task 2 Quest 4 Psycho Break Room Escape Laura - is ||pkill|| a rabbit hole, spent all day on this and can only list the directory, no other commands seems to work - Would really welcome a hint on this one.

trail pebble Oct 11, 2020, 7:47 PM

#

need a hint for psycho break
am at task 5 sshing the user found in previous task....
just want to know is the password in rockyou ??

solar scroll Oct 11, 2020, 7:48 PM

#

@gray garden same for me

trail pebble Oct 11, 2020, 7:49 PM

#

Task 2 Quest 4 Psycho Break Room Escape Laura - is ||pkill|| a rabbit hole, spent all day on this and can only list the directory, no other commands seems to work - Would really welcome a hint on this one.
@gray garden
do you get the web shell format ?

stuck fractal Oct 11, 2020, 7:52 PM

#

need a hint for psycho break
am at task 5 sshing the user found in previous task....
just want to know is the password in rockyou ??
@trail pebble if you're brute forcing for more than 5 minutes, then you shouldn't be brute forcing

#

That's the rule here for box creators

gray garden Oct 11, 2020, 7:52 PM

#

@gray garden
do you get the web shell format ?
@trail pebble yes

trail pebble Oct 11, 2020, 7:52 PM

#

@trail pebble if you're brute forcing for more than 5 minutes, then you shouldn't be brute forcing
@stuck fractal
more than half an hour

#

@trail pebble yes
@gray garden
try listing contents of previous directory

stuck fractal Oct 11, 2020, 7:53 PM

#

Then you probably shouldn't be brute forcing.

#

The rule is 5 minutes.

trail pebble Oct 11, 2020, 7:57 PM

#

can you tell me the general limit for no of works coz my pc gets reqs like 200 tries/min

stuck fractal Oct 11, 2020, 8:01 PM

#

There isn't one

#

It's based on time

#

30 minutes is definitely too long.

gray garden Oct 11, 2020, 8:10 PM

#

@gray garden
try listing contents of previous directory
@trail pebble Thanks for the hint, but I must be missing a trick here somewhere:-)

trail pebble Oct 11, 2020, 8:10 PM

#

@trail pebble Thanks for the hint, but I must be missing a trick here somewhere:-)
@gray garden
can u list current directory ??

gray garden Oct 11, 2020, 8:11 PM

#

@gray garden
can u list current directory ??
@trail pebble Yes, no problem there

trail pebble Oct 11, 2020, 8:12 PM

#

results will reflect in the same page

gray garden Oct 11, 2020, 8:14 PM

#

results will reflect in the same page
@trail pebble As soon as I extend ls /[DIRECTORY], I get a 'Command not found'

trail pebble Oct 11, 2020, 8:14 PM

#

you are very close my friend

#

just remember relative path can be useful too sometimes

gray garden Oct 11, 2020, 8:17 PM

#

just remember relative path can be useful too sometimes
@trail pebble 🙂 I have it, thank you for your help, that is one hell of a string I need to decode

trail pebble Oct 11, 2020, 8:18 PM

#

the joy is the price for struggle blobheart

graceful valley Oct 12, 2020, 1:52 AM

#

Stuck on Blue room, following the guide but I can't get past task 2. I've checked LHOST and RHOSTS to make sure they're set correctly, but the exploit completes without creating sessions

#

Previously have done the Nmap and Metasploit rooms, believe I have everything set properly

flint lintel Oct 12, 2020, 2:24 AM

#

I am on blue room too, but I think I found an inconsistency rather than an issue

#

Stuck on Blue room, following the guide but I can't get past task 2. I've checked LHOST and RHOSTS to make sure they're set correctly, but the exploit completes without creating sessions
@graceful valley run the options command and see if you are missing anything

graceful valley Oct 12, 2020, 2:27 AM

#

@flint lintel Double checked all my vars, they seem all to be set correctly. Was able to connect after several tries, I'm attributing my problems to "This can occasionally fail, try running it a couple times" - found in the writeup

flint lintel Oct 12, 2020, 2:27 AM

#

I was also running into the same issues, but the PAYLOAD wasn't set right

final mortar Oct 12, 2020, 2:28 AM

#

Blue exploit is not prefect. It can not work sometimes, It can auto bork after a couple failed tries

graceful valley Oct 12, 2020, 2:28 AM

#

I don't even have a PAYLOAD option in my options list

flint lintel Oct 12, 2020, 2:28 AM

#

it won't show there

#

you have to type get PAYLOAD

graceful valley Oct 12, 2020, 2:28 AM

#

oh... well... that might be my next problem

flint lintel Oct 12, 2020, 2:28 AM

#

I had to set it with meterpreter/reverse_tcp

final mortar Oct 12, 2020, 2:29 AM

#

it won't show there
@flint lintel It will if it has failed atleast once

#

@graceful valley Screenshot your options please

graceful valley Oct 12, 2020, 2:29 AM

#

I'm giving up on it for the day, my brain is cooked

flint lintel Oct 12, 2020, 2:29 AM

#

My issue is that I immediately get a meterpreter shell, when the rest of the tasks guide me through upgrading a regular shell to meterpreter

#

📎 unknown.png

graceful valley Oct 12, 2020, 2:30 AM

#

Screenshot of my options

📎 CaptureBlue.PNG

#

I also got dumped right into the meterpreter shell

final mortar Oct 12, 2020, 2:31 AM

#

Metasploit now gives you a meterepreter shell directly @flint lintel It's just how it is now. You can skip the shell_to_metrepreter part

flint lintel Oct 12, 2020, 2:31 AM

#

Metasploit now gives you a meterepreter shell directly @flint lintel It's just how it is now. You can skip the shell_to_metrepreter part
@final mortar ah awesome, thanks

final mortar Oct 12, 2020, 2:32 AM

#

I also got dumped right into the meterpreter shell
@graceful valley Which is all right 🙂 Skip the conversion part in practical, but read through it

#

Screenshot of my options
@graceful valley So this works then. Right ?

graceful valley Oct 12, 2020, 2:33 AM

#

It did work, at least twice, though I run out of time, my machine expires, IRL gets in the way, and when I come back to it the struggle starts over

#

I'm going to take a break from it for the night, maybe read the writeup over and try again tomorrow

flint lintel Oct 12, 2020, 2:33 AM

#

It did work, at least twice, though I run out of time, my machine expires, IRL gets in the way, and when I come back to it the struggle starts over
@graceful valley once you repeat the process a few times, its pretty quick. I can get it down to sub-minute

graceful valley Oct 12, 2020, 2:34 AM

#

@flint lintel Yeah, I was getting pretty quick at the metasploit room

#

@flint lintel @final mortar Thanks for the help 🙂

flint lintel Oct 12, 2020, 2:35 AM

#

@flint lintel @final mortar Thanks for the help 🙂
@graceful valley all good!

vast wagon Oct 12, 2020, 2:59 AM

#

I need help in psycho break room with task 2 q3 "The keeper's key" where I get 4 images. I tried a lot of stego techniques but none worked. Anyone pls throw some hint.

vast wagon Oct 12, 2020, 3:14 AM

#

||"I think I'm having a terrible nightmare. Search through me and find it "|| help me in this

pale slate Oct 12, 2020, 3:48 AM

#

need a little help in Year of the Pig room foothold?

final mortar Oct 12, 2020, 3:50 AM

#

need a little help in Year of the Pig room foothold?
@pale slate New Room give it some time

#

Cap-L3v1 read the next question in the task for a hint maybe ?

drowsy sequoia Oct 12, 2020, 4:10 AM

#

Need a hint for task 2 questions 3 in psycho break, i think i got the nightmare but how to make it usable.

vast wagon Oct 12, 2020, 4:19 AM

#

Any hint for me @drowsy sequoia . I'm stuck on the same task.

drowsy sequoia Oct 12, 2020, 4:22 AM

#

Any hint for me @drowsy sequoia . I'm stuck on the same task.
@vast wagon sometimes what looks is the way is not the way you'll have to do a bit of digging on the other. Sidee.

#

Hope my hint gives you a source to start👍

viscid void Oct 12, 2020, 4:24 AM

#

Hey

drowsy sequoia Oct 12, 2020, 4:24 AM

#

Any hints for the next step.please

fleet pike Oct 12, 2020, 4:25 AM

#

So in YOTP. I have enumerated what appears to be a login page. embedded into that page is some strings .. ive had partial luck decoding this, I can get it back to plain english where i see things like "credentials" and a hell of an api fetch query. But I have found nothing on this site matches the constraints of what the page is asking for. What technique do i use from here, or Am i barking up the wrong tree.

#

Is this a "Feed it one pig, feed it two pigs, feed it -1 pigs" situation?

wintry yarrow Oct 12, 2020, 4:38 AM

#

@fleet pike hints and help are allowed after 72 hours from release of the room.

drowsy sequoia Oct 12, 2020, 4:39 AM

#

Need a hint for task 2 questions 3 in psycho break, i think i got the nightmare but how to make it usable.
@drowsy sequoia here please😂

copper widget Oct 12, 2020, 5:25 AM

#

I need help in psycho break room with task 2 q3 "The keeper's key" where I get 4 images. I tried a lot of stego techniques but none worked. Anyone pls throw some hint.
@vast wagon not about images

solar scroll Oct 12, 2020, 10:48 AM

#

have someone time for Psycho Break help?

clear creek Oct 12, 2020, 10:56 AM

#

depends where you re in ^^

solar scroll Oct 12, 2020, 10:56 AM

#

Task 2 #4, Laura...

clear creek Oct 12, 2020, 10:57 AM

#

look at the source code

solar scroll Oct 12, 2020, 10:58 AM

#

i find ||"shell"||

clear creek Oct 12, 2020, 10:59 AM

#

yep maybe you can use it some where you can write in it

weary quarry Oct 12, 2020, 12:48 PM

#

hey hi team , how to check for the sedebug status here

📎 unknown.png

ornate arrow Oct 12, 2020, 1:01 PM

#

have someone time for Psycho Break help?
@solar scroll ahah I'm stuck at Task2 #3

weary quarry Oct 12, 2020, 2:04 PM

#

i have got the answer but still not working , in https://tryhackme.com/room/ice

📎 unknown.png

TryHackMe

TryHackMe | Ice

Deploy & hack into a Windows machine, exploiting a very poorly secured media server.

solar scroll Oct 12, 2020, 2:53 PM

#

some one on Psycho Break Task2 #4, if find somthing

wintry yarrow Oct 12, 2020, 2:57 PM

#

@weary quarry if its saying wrong then your answer is wrong.

weary quarry Oct 12, 2020, 2:57 PM

#

yes i have rooted

#

i know it is ||remote code exec||

wintry yarrow Oct 12, 2020, 3:01 PM

#

Its wrong.

solar scroll Oct 12, 2020, 3:14 PM

#

some one on Psycho Break Task2 #4, if find somthing
@solar scroll have it

ionic marsh Oct 12, 2020, 3:58 PM

#

@weary quarry look harder.

#

@weary quarry search again.

weary quarry Oct 12, 2020, 3:59 PM

#

Sure

#

I hope treid all combinations

#

Never mind I havr rooted

final mortar Oct 12, 2020, 4:00 PM

#

Hey @weary quarry can you help me out then 🙂

weary quarry Oct 12, 2020, 4:01 PM

#

I have not done that machine @final mortar

final mortar Oct 12, 2020, 4:01 PM

#

Ah my bad

wintry yarrow Oct 12, 2020, 4:14 PM

#

72 hours are not passed since the release of room so no. You have to wait few more hours.

sick sun Oct 12, 2020, 4:17 PM

#

oh oke thanks

thorny atlas Oct 12, 2020, 4:53 PM

#

~~Anybody here done Revenge? I got root but can't seem to find the final flag~~
nvm got it

gilded pasture Oct 12, 2020, 8:04 PM

#

is it possibile to find xss on thm machines?

stuck fractal Oct 12, 2020, 8:05 PM

#

Yes

wise venture Oct 12, 2020, 10:20 PM

#

Hello, a quick query, looking at day 10 of Advent of Cyber, how do you come to find that its running a vulnerable version of struts? I am using nmap and it just shows me Apache/Coyote, am I missing something?

stuck fractal Oct 12, 2020, 10:20 PM

#

Tried nikto?

wise venture Oct 12, 2020, 10:20 PM

#

no, will try that now, thanks

#

@stuck fractal boom, cheers

granite flame Oct 13, 2020, 6:22 AM

#

Guys, i joined Smag Grotto room and i stucked in the middle. After that, i decided to look up some writeups and I had to put domain name into my /etc/hosts file. Why should i do that?

#

Can i just click it on my browser directly with the IP?

#

Guys, i joined Smag Grotto room and i stucked in the middle. After that, i decided to look up some writeups and I had to put domain name into my /etc/hosts file. Why should i do that?
@granite flame With the IP too

graceful dagger Oct 13, 2020, 7:08 AM

#

I've been stuck at the admin login page for Year of the Pig since it came out. I don't think I'm able to exploit the obfuscated js file I found, so I have a feeling this is a password guessing situation. The password hint specifically states the password should be a memorable word, then 2 numbers, then a special character. I have not found any to work, unless this is just some cruel rabbit hole

wise valley Oct 13, 2020, 7:12 AM

#

@plush estuary ^

plush estuary Oct 13, 2020, 7:13 AM

#

I got past that bit ok Myles

#

@graceful dagger Take a look at what happening with the password before its sent to the server

#

The password is also not in any password list

oblique cliff Oct 13, 2020, 12:04 PM

#

Can i just click it on my browser directly with the IP?
@granite flame you need to add it to your hosts file if it has virtual host routing like that box does

granite flame Oct 13, 2020, 12:52 PM

#

I am sorry. But what is actually virtual host?

oblique cliff Oct 13, 2020, 12:53 PM

#

https://www.google.com/search?q=what+is+virtual+host&ie=UTF-8&oe=UTF-8&hl=en-us&client=safari

granite flame Oct 13, 2020, 1:02 PM

#

Yeah, i have to google it first

#

Thankss..

opaque dagger Oct 13, 2020, 1:43 PM

#

OWASP juiceShop task 7, q2 for the persistent XSS, I’ve done it many, many times and no flag ever comes up. What do I need to do as clearly there is a bug on this question to get the flag? Also tried changing the settings in Firefox config:about browser.urlbar.JavaScript boleen to false with no joy.

atomic shuttle Oct 13, 2020, 2:37 PM

#

hi @plush estuary mind if i ask for some nudges on login page for yotp? been stuck there for quite a while now

#

yotpig room has passed 72 hours isnt it

astral smelt Oct 13, 2020, 2:44 PM

#

Muir made YOTP

stuck fractal Oct 13, 2020, 2:45 PM

#

Muir made YOTP
@astral smelt Yes, but cake was here with hints a little earlier

#

Like 8 hours ago lol

astral smelt Oct 13, 2020, 2:45 PM

#

Oh right

plush estuary Oct 13, 2020, 2:57 PM

#

@atomic shuttle You will need to make your own wordlist for this one :)

true prairie Oct 13, 2020, 3:07 PM

#

OWASP juiceShop task 7, q2 for the persistent XSS, I’ve done it many, many times and no flag ever comes up. What do I need to do as clearly there is a bug on this question to get the flag? Also tried changing the settings in Firefox config:about browser.urlbar.JavaScript boleen to false with no joy.
@opaque dagger I did this room just some hours ago. Everything should work out fine following the instructions

plush estuary Oct 13, 2020, 3:07 PM

#

Sometimes burp stops the flag from being shown, just disable it and you should see the flag

shut lion Oct 13, 2020, 4:15 PM

#

Hello guys. I'm stuck. In the room https://tryhackme.com/room/easyctf, The exploit https://www.exploit-db.com/exploits/46635 to perform SQLi on the CMS Made Easy site is not producing the results I expect. May someone explain how this exploit is to be run? I've been trying it but no reasonable output.

TryHackMe

TryHackMe | undefined

An online platform for learning and teaching cyber security, all through your browser.

Exploit Database

CMS Made Simple < 2.2.10 - SQL Injection

oblique cliff Oct 13, 2020, 4:25 PM

#

Can you show the output @shut lion

#

As well as how you’re running it

shut lion Oct 13, 2020, 4:28 PM

#

that's how I'm running it.

📎 Screenshot_from_2020-10-13_19-26-17.png

oblique cliff Oct 13, 2020, 4:29 PM

#

And the output?

wintry yarrow Oct 13, 2020, 4:29 PM

#

Go make lunch I'm here.

oblique cliff Oct 13, 2020, 4:30 PM

#

Thank you darky blobheart

shut lion Oct 13, 2020, 4:34 PM

#

And the output?
@oblique cliff ...and it's still running. that's for just calculating the salt. other times, none of the fields are found.

📎 Screenshot_from_2020-10-13_19-33-23.png

wintry yarrow Oct 13, 2020, 4:35 PM

#

It takes some time.

oblique cliff Oct 13, 2020, 4:36 PM

#

That’s wrong tho

trim haven Oct 13, 2020, 4:36 PM

#

try changing it from http://10.10.40.185/simple/admin to http://10.10.40.185/simple/ ?

oblique cliff Oct 13, 2020, 4:36 PM

#

Tell him how to fix

#

But also @wintry yarrow

wintry yarrow Oct 13, 2020, 4:36 PM

#

Also, try to change timer to 5 or something on code.

oblique cliff Oct 13, 2020, 4:36 PM

#

Ok grill is preheated. Byeeeee

trim haven Oct 13, 2020, 4:36 PM

#

Bye Blob

wintry yarrow Oct 13, 2020, 4:37 PM

#

Ty for the honor. blobheart

shut lion Oct 13, 2020, 4:37 PM

#

@trim haven @wintry yarrow let me implement your suggestions

#

thanks in advance

shut lion Oct 13, 2020, 4:59 PM

#

The advice has worked out for me 👍

wintry yarrow Oct 13, 2020, 5:00 PM

#

Great. 🙂

rose cape Oct 13, 2020, 5:52 PM

#

hey guys, im pushing through smaggrotto right now and im struggling with || getting a reverse shell from development.smag.thm/admin.php || ive tried || bash, python, perl, nc and even using curl to output writable directories to my localhost via requests|| no luck so far, im sure im missing something small and am being silly. a nudge would greatly be appreciated!

oblique cliff Oct 13, 2020, 5:53 PM

#

@rose cape could you show your syntax?

stuck fractal Oct 13, 2020, 5:53 PM

#

nc with mkfifo almost always works

oblique cliff Oct 13, 2020, 5:53 PM

#

i know at least 2 of those work

rose cape Oct 13, 2020, 5:53 PM

#

which method do you want me to show you

oblique cliff Oct 13, 2020, 5:54 PM

#

netcat

rose cape Oct 13, 2020, 5:55 PM

#

📎 unknown.png

#

📎 unknown.png

#

not popping anything

oblique cliff Oct 13, 2020, 5:56 PM

#

nc with mkfifo almost always works

rose cape Oct 13, 2020, 5:56 PM

#

omg

#

🤦‍♂️

oblique cliff Oct 13, 2020, 5:56 PM

#

blobhuh

rose cape Oct 13, 2020, 5:56 PM

#

yo thanks sorry about that

#

i skimmed over what ninja said just reacting with the cat knife thing lol

oblique cliff Oct 13, 2020, 5:57 PM

#

lmao

rose cape Oct 13, 2020, 5:57 PM

#

i should know by now ninja is the enlightened one blobfingerguns

oblique cliff Oct 13, 2020, 5:57 PM

#

its easy to skip over what @stuck fractal is saying and just react with blobknife

#

he gets that kinda reaction from people

rose cape Oct 13, 2020, 5:57 PM

#

lol

stuck fractal Oct 13, 2020, 5:57 PM

#

I'm correct weirdly often

tidal sedge Oct 13, 2020, 5:58 PM

#

i skimmed over what ninja said just reacting with the cat knife thing lol
@rose cape It's a blobknife!

rose cape Oct 13, 2020, 5:59 PM

#

omg my bad :(((((((((((

oblique cliff Oct 13, 2020, 5:59 PM

#

blobknife

#

how dare you

white salmon Oct 13, 2020, 9:35 PM

#

what's a good way to priv esc from sudoedit?

stuck fractal Oct 13, 2020, 9:35 PM

#

Room, task, question, have you done your research?

white salmon Oct 13, 2020, 9:36 PM

#

hmm, I don't want to spoil anything so is it k if I dm instead?

stuck fractal Oct 13, 2020, 9:37 PM

#

Not really

#

Mark it as a spoiler if you need to

white salmon Oct 13, 2020, 9:38 PM

#

kk, the room's year of the pig. I've gotten pretty far and I'm on the last step of exploitation right now

#

I'm fairly certain it's to deal with ||environment variables|| but I'm uncertain about it

gilded pasture Oct 13, 2020, 10:22 PM

#

can i ask a hint about Revenge?

ocean wind Oct 13, 2020, 10:42 PM

#

Hi , curious if anyone faced this in Retro , after getting reverse shell , can't get output of any command !

wicked granite Oct 13, 2020, 11:01 PM

#

Hi, im new to all this, how do i change options in metasploit, im doing eternal bule and i got stuck

white salmon Oct 13, 2020, 11:03 PM

#

Hi, im new to all this, how do i change options in metasploit, im doing eternal bule and i got stuck
@wicked granite set variable value

#

I recommend trying the metasploit room first, it's pretty good imo https://tryhackme.com/room/rpmetasploit

TryHackMe

TryHackMe | Metasploit

Learn to use Metasploit, a tool to probe and exploit vulnerabilities on networks and servers.

wicked granite Oct 13, 2020, 11:05 PM

#

sounds good

wicked granite Oct 13, 2020, 11:23 PM

#

Im stuck on T3 Q6 of rpmetasploit

#

what does it mean by netcat like feature

stuck fractal Oct 13, 2020, 11:24 PM

#

Do you know what netcat is?

wicked granite Oct 13, 2020, 11:24 PM

#

no

stuck fractal Oct 13, 2020, 11:24 PM

#

Well there's a great place to start then

wicked granite Oct 13, 2020, 11:25 PM

#

is it like network wide cat function?

stuck fractal Oct 13, 2020, 11:25 PM

#

Research it!

#

Research is a fundamental skill in cybersec

wicked granite Oct 13, 2020, 11:26 PM

#

yea, im reading on it rn

#

Hey james ty, i found the answer while it was right in my face

white salmon Oct 14, 2020, 1:51 AM

#

hey guys

stuck fractal Oct 14, 2020, 1:51 AM

#

Just ask directly.

white salmon Oct 14, 2020, 1:52 AM

#

i need a hint for Flag 3 is located where bob's bash history gets stored.

#

i tried diffrent command i googled it didn't work

stuck fractal Oct 14, 2020, 1:52 AM

#

Look for a file.

white salmon Oct 14, 2020, 2:10 AM

#

permission denied

#

sorry but which box are you doing right now?

wicked granite Oct 14, 2020, 2:25 AM

#

On the metasploit box, T5 Q9 do i replace where it says payload

white salmon Oct 14, 2020, 2:26 AM

#

yeah, otherwise it won't work

#

it's a meterpreter shell so if you tried catching it via nc it'll segfault iirc

#

set payload, not use payload

opaque monolith Oct 14, 2020, 11:24 AM

#

task11 linux tutorial?

stuck fractal Oct 14, 2020, 11:25 AM

#

What's up?

opaque monolith Oct 14, 2020, 11:25 AM

#

i know a bit of linux but something doesnt work

stuck fractal Oct 14, 2020, 11:26 AM

#

You're going to have to be MUCH less vague.

opaque monolith Oct 14, 2020, 11:26 AM

#

when i try to run a binary it writes permission denied

stuck fractal Oct 14, 2020, 11:26 AM

#

Show us.

#

Screenshot

opaque monolith Oct 14, 2020, 11:27 AM

#

📎 Screenshot_2020-10-14_142714.png

#

i do have ubuntu

#

i dual booted my pc

#

i had ubuntu first and then i downloaded win10

stuck fractal Oct 14, 2020, 11:27 AM

#

That's not the binary

#

You still need to SSH into the machine

#

You have skipped over that part.

opaque monolith Oct 14, 2020, 11:28 AM

#

oh

#

ok

stuck fractal Oct 14, 2020, 11:28 AM

#

You need to SSH into the VM that you deploy int he room

#

Not the attackbox

opaque monolith Oct 14, 2020, 11:30 AM

#

wdym

#

i downloaded putty rn

visual vessel Oct 14, 2020, 11:30 AM

#

There is a DEPLOY button on the 1st question for the machine

opaque monolith Oct 14, 2020, 11:30 AM

#

ik

visual vessel Oct 14, 2020, 11:31 AM

#

ssh into it with putty

fathom ridge Oct 14, 2020, 11:31 AM

#

instructions unclear

#

no wonder why everyone is stuck at the same place

stuck fractal Oct 14, 2020, 11:31 AM

#

The instructions are clear.

fathom ridge Oct 14, 2020, 11:31 AM

#

where does this /tmp/ stuff comes from then

#

it tells me no information about that

stuck fractal Oct 14, 2020, 11:31 AM

#

It's an example.

fathom ridge Oct 14, 2020, 11:32 AM

#

how am I supposed to know that lol

stuck fractal Oct 14, 2020, 11:32 AM

#

You're expected to do your own research as well.

fathom ridge Oct 14, 2020, 11:32 AM

#

then its like cheating

opaque monolith Oct 14, 2020, 11:32 AM

#

so i need shiba1and my pc ip?

stuck fractal Oct 14, 2020, 11:32 AM

#

They're literally screenshots to show examples of the command, how is that not an example?

fathom ridge Oct 14, 2020, 11:32 AM

#

i thought it tells me to do the same way

stuck fractal Oct 14, 2020, 11:32 AM

#

then its like cheating
@fathom ridge That's not how infosec works. Infosec is ALL about research

fathom ridge Oct 14, 2020, 11:32 AM

#

as in the pictures

stuck fractal Oct 14, 2020, 11:32 AM

#

i thought it tells me to do the same way
@fathom ridge It does not. Read the instructions.

opaque monolith Oct 14, 2020, 11:33 AM

#

?

fathom ridge Oct 14, 2020, 11:33 AM

#

Walah i quit bro

stuck fractal Oct 14, 2020, 11:33 AM

#

Bye.

opaque monolith Oct 14, 2020, 11:33 AM

#

so i need shiba1and my pc ip?
@opaque monolith is it k @stuck fractal

stuck fractal Oct 14, 2020, 11:33 AM

#

No

visual vessel Oct 14, 2020, 11:33 AM

#

Deploy the machine here, and get the Ip from there and put it into putty @opaque monolith

📎 unknown.png

stuck fractal Oct 14, 2020, 11:33 AM

#

You need to deploy the machine in the room

#

Get the IP from Active Machine Information

fathom ridge Oct 14, 2020, 11:34 AM

#

i did that

opaque monolith Oct 14, 2020, 11:34 AM

#

where is it?

#

activemachine info

stuck fractal Oct 14, 2020, 11:34 AM

#

it comes up when you click the deploy button

opaque monolith Oct 14, 2020, 11:36 AM

#

it worked!

#

i used the welcome machine

stuck fractal Oct 14, 2020, 11:36 AM

#

~~It does explicitly warn you about that~~

opaque monolith Oct 14, 2020, 11:36 AM

#

thx im dumb

#

is it arch?\

visual vessel Oct 14, 2020, 11:37 AM

#

ubuntu 18

stuck fractal Oct 14, 2020, 11:37 AM

#

is it arch?
@opaque monolith Never.

#

THM doesn't support uploading it, so you won't see an arch machine on THM ever.

#

it's possible but there's not much point

opaque monolith Oct 14, 2020, 11:38 AM

#

oh

#

ok

#

i have ubuntu 18.04

fathom ridge Oct 14, 2020, 11:38 AM

#

I just tried running the noot.txt

opaque monolith Oct 14, 2020, 11:38 AM

#

i dual booted it

fathom ridge Oct 14, 2020, 11:38 AM

#

it says permission denied

opaque monolith Oct 14, 2020, 11:38 AM

#

bruh

stuck fractal Oct 14, 2020, 11:39 AM

#

That's a blank text file

#

Why would that be executable as a binary?

#

You're told the name of the binary.

fathom ridge Oct 14, 2020, 11:39 AM

#

kekdead

#

this is too hard KEKSad

median reef Oct 14, 2020, 11:39 AM

#

don't quit

#

try some time later

stuck fractal Oct 14, 2020, 11:40 AM

#

There's no way to instantly become a master hacker

#

You need to learn, that takes work. And research.

opaque monolith Oct 14, 2020, 11:44 AM

#

putty isnt connecting

#

connection timed out

median reef Oct 14, 2020, 11:44 AM

#

screen shot

opaque monolith Oct 14, 2020, 11:44 AM

#

sure

median reef Oct 14, 2020, 11:44 AM

#

are you connected to openvpn?

stuck fractal Oct 14, 2020, 11:44 AM

#

Are you connected to the VPN?

opaque monolith Oct 14, 2020, 11:45 AM

#

no

stuck fractal Oct 14, 2020, 11:45 AM

#

(You can SSH into the machine from the attackbox)

#

im fiber
@opaque monolith That's not related.

opaque monolith Oct 14, 2020, 11:45 AM

#

yeah

#

im dumb

median reef Oct 14, 2020, 11:45 AM

#

you need to connect to thm network (using openvpn) if you are using your own personal machine

opaque monolith Oct 14, 2020, 11:47 AM

#

downloaded

#

how do i connect to thm?

stuck fractal Oct 14, 2020, 11:48 AM

#

!vpn

proud scarabBOT Oct 14, 2020, 11:48 AM

#

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

opaque monolith Oct 14, 2020, 11:52 AM

#

k

#

what happend to eu2 servers

stuck fractal Oct 14, 2020, 11:52 AM

#

Nothing

opaque monolith Oct 14, 2020, 11:53 AM

#

page lost in matrix

median reef Oct 14, 2020, 11:53 AM

#

refresh

stuck fractal Oct 14, 2020, 11:53 AM

#

@tacit roost if you're around, EU2 seems to be 404ing again

#

refresh
@median reef Nope

#

Regenerate, and try again

opaque monolith Oct 14, 2020, 11:54 AM

#

it does 04

stuck fractal Oct 14, 2020, 11:54 AM

#

Otherwise it's something on THM's side

opaque monolith Oct 14, 2020, 11:54 AM

#

404

#

ok

visual vessel Oct 14, 2020, 11:58 AM

#

try eu1

opaque monolith Oct 14, 2020, 11:59 AM

#

i did

#

it worked

#

ill just use ubuntu 18.04 next time

stuck fractal Oct 14, 2020, 12:01 PM

#

ill just use ubuntu 18.04 next time
@opaque monolith That doesn't really relate at all here

opaque monolith Oct 14, 2020, 12:02 PM

#

yay

#

ive done it

stuck fractal Oct 14, 2020, 12:03 PM

#

Please don't post answers or passwords

opaque monolith Oct 14, 2020, 12:03 PM

#

oh yeah

#

sry

#

wdym task12 by specify which shell?

stuck fractal Oct 14, 2020, 12:15 PM

#

It's asking about su

#

Read the manual

opaque monolith Oct 14, 2020, 12:15 PM

#

i did

stuck fractal Oct 14, 2020, 12:16 PM

#

It's in there.

#

You can scroll in the manual

opaque monolith Oct 14, 2020, 12:17 PM

#

📎 Screenshot_2020-10-14_151718.png

#

this ?

#

ok

#

i did it

#

sry again

stuck fractal Oct 14, 2020, 12:18 PM

#

Man pages are gold

#

Super useful

stuck fractal Oct 14, 2020, 2:00 PM

#

Please don't show answers @barren tulip

#

But you didn't change user when you were told to

barren tulip Oct 14, 2020, 2:01 PM

#

oopsies

#

oh hmm thanks

safe nova Oct 14, 2020, 2:38 PM

#

Hi, I am doing the OWASP TOP 10 room, Day 9, task 30, I have to search in exploit-database, but I dont know what I have to search

#

the hint is:

You know its a bookstore application, you should check for recent unauthenticated bookstore app rce's.

hollow maple Oct 14, 2020, 2:50 PM

#

@safe nova Well, if we know it`s a book store, try searchsploit something like "searchsploit book store", the description says it's a RCE, so it's easy, make sure you edit the exploit.
But, you need to find directory(ies) with gobuster or dirb or dirbuster ..., after that you will find more details about ..

white salmon Oct 14, 2020, 3:27 PM

#

https://tryhackme.com/room/rpburpsuite Task 11 #5 who can give me a hint ?

stuck fractal Oct 14, 2020, 3:29 PM

#

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

What room you are on
At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?
What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done
@white salmon

opaque monolith Oct 14, 2020, 3:49 PM

#

linux task 18 .2

#

when i did echo $home didnt show anything

stuck fractal Oct 14, 2020, 3:50 PM

#

Variables are case sensitive

opaque monolith Oct 14, 2020, 3:50 PM

#

and $Home

#

oh ok

#

lol

#

u wrote "home" in the question and u didnt mention case sensitive

stuck fractal Oct 14, 2020, 3:52 PM

#

I didn't write that

opaque monolith Oct 14, 2020, 3:52 PM

#

ok

opaque monolith Oct 14, 2020, 4:40 PM

#

can someone help with binary- shiba2?

stuck fractal Oct 14, 2020, 4:40 PM

#

Yeah, it's best to just ask directly and someone will help.

opaque monolith Oct 14, 2020, 4:44 PM

#

ok

#

so

#

i didnt find test1234

#

i tried ls -a |grep $test1234

stuck fractal Oct 14, 2020, 4:45 PM

#

It's an environment variable

#

That you need to create

#

It's not a file

opaque monolith Oct 14, 2020, 4:45 PM

#

ok

#

i created test1234

#

with export test1234=$USER

#

is it ok?

stuck fractal Oct 14, 2020, 4:52 PM

#

Try it and see

opaque monolith Oct 14, 2020, 5:03 PM

#

i tried to cat it

#

but it did something weird

stuck fractal Oct 14, 2020, 5:04 PM

#

Yep, don't cat a compiled binary

#

Some of the bytes will be weird characters, because it's raw binary rather than text

opaque monolith Oct 14, 2020, 5:07 PM

#

when i echoed it it wrote shiba2

stuck fractal Oct 14, 2020, 5:08 PM

#

You need to set the variable

#

Then run the binary

#

The binary will check the value of the variable and if it's set right you'll be given the password

opaque monolith Oct 14, 2020, 5:09 PM

#

wdym by setting it

stuck fractal Oct 14, 2020, 5:09 PM

#

IDk if you've done programming before

#

But setting a variable, putting a value in there

opaque monolith Oct 14, 2020, 5:10 PM

#

i did

stuck fractal Oct 14, 2020, 5:10 PM

#

yea

#

So then run the binary

#

And you'll get the password

opaque monolith Oct 14, 2020, 5:15 PM

#

i forgot to run

balmy crystal Oct 14, 2020, 6:42 PM

#

hello, could somebody help me ? i posted my issue on #room-help fi somebody could, ill be thankful (hope that`s the word)

lunar sorrel Oct 14, 2020, 7:49 PM

#

Someone around I can DM who has already completed Dave's Blog and has an understanding of ROP? I completed the room recently and I want to verify that I understand the exploit necessary for the final flag correctly.

thorny atlas Oct 14, 2020, 9:16 PM

#

@lunar sorrel I might help

#

if you still need it

drowsy sequoia Oct 15, 2020, 5:40 AM

#

Can i get any hints for revenge please

wicked granite Oct 15, 2020, 5:53 AM

#

Im on room blue and i keep getting the message "exploit completed, but no session was created"

drowsy sequoia Oct 15, 2020, 5:54 AM

#

Im on room blue and i keep getting the message "exploit completed, but no session was created"
@wicked granite have you checked your payload?

wicked granite Oct 15, 2020, 5:54 AM

#

no, how do i do that again?