room-hints

[desert knot]

flag xx lies within another system mount. what does it means ?

lies = fake right ?

[median compass]

what room & task are you on?

in this content lies == resides/lives/exists

[desert knot]

https://tryhackme.com/room/linuxctf task 3

[median compass]

so any drive/device that gets added to a linux filesystem is attached at a 'mount point'. you can see what's mounted by typing mount. Specifically here you should look for removable devices which are added under /media

[desert knot]

this is really interesting but am i found this flag wrong way ?

[median compass]

nope, that's the way, well done

[desert knot]

thank you so much ^^

[stuck fractal]

@median compass that's a bit more than a hint IMO

Just saying where the flag is...

[median compass]

fair enough james, I was perhaps a little short on inspiration in the moment

[balmy wedge]

Advent calendar 2 Day 1 Question 3

In what format is the value of this cookie encoded?

I have put ||hexidecimal|| but it doesn't seem to be working

I am honestly not sure what else it would be since I used cyberchef to get that

[woven mirage]

one letter off

[balmy wedge]

spelled wrong?

[woven mirage]

yeeee

[balmy wedge]

but ma wiki lol

u right tho

lol

thanks man

[median compass]

yeah, that's wrong

good job

[balmy wedge]

Is it spelled wrong in wiki or in the question?

I have never thought this hard about how to spell it lol

[median compass]

in the wiki, i've never heard of it being called hexi, always hexa

[balmy wedge]

you're right

[median compass]

and wiki has hexadecimal too wikipedia.org/wiki/Hexadecimal

[balmy wedge]

I google everywhere else and it's ||hexa||

lmao

||hexi|| listed the hint from the question and ||hexa|| did not adding to further confusion. Thanks for the help though!

[daring knot]

Can anyone help about catregex room?

Match all of the following filenames: File1, File2, file3, file4, file5, File7, file9
DONE!

Question 2: Match all of the filenames of question 4, except "File7" (use the ^ symbol)
Resposta 2: ?

[median compass]

so for the first of those you used a generic kinda regex right? I mean, it would match more than just the file names given

for the second question then just concentrate on the one you don't want

[daring knot]

🤔

[median compass]

well, would it match ||file08|| for example?

the first one I mean

my point is just that for the second one you shouldn't worry about what it WILL match, only to exclude what you don't want

[daring knot]

humm... I´ll try. let you know if worked.

still researching. rs

[median compass]

how do you exclude something?

there's a specific character for that

[daring knot]

In the room we learned about the hat ^

but I'm guessing it's only for the begining.

[median compass]

nope

[daring knot]

humm...

[median compass]

it means one thing at the start of a string, i.e. that the regex shiould look for this pattern at the beginning of a string only

and another elsewhere

in Task 2 it talks about this

[chrome bane]

If its în brackets [] it exclude something, if its without [] îs for beginning

[median compass]

you don't get onto the other meaning until Task5

[daring knot]

gonna check other tasks.

[median compass]

that's a spoiler @chrome bane, this is room-hints

[chrome bane]

My bad, I am sorry, wont happen again

[median compass]

no worries, we've all done it now and then 🙂

[daring knot]

Still didn't get it! ehehehe Sorry.

Then, there is a way to exclude characters from a charset with the ^ hat symbol, and include everything else.
[^k]ing will match ring, sing, $ing, but not king.

From the room, is the answer explained here? rs

That's it! Tks brows! Got it.

[wind peak]

Greetings everyone. I’m looking for a hint with Linux challenges Task 4, find flag 26 by searching the all files for a string that begins with 4bceb and is 32 characters long. Been on this for 2 days now and I think it’s time I ask for help

I’m not aware that you can literally search all files for that string

[median compass]

you need a regex and then you can use grep

i suggest something like regex101 to help build your regex

[wind peak]

Thank you I’ll go google it

[median compass]

good luck!

[wind peak]

Still not getting it. I googled regex and it told me to use ls -l | grep 4bceb

That returns nothing

I can’t be burnt out already I just started

I’m overlooking something I’m sure

[gusty turtle]

Doing ls -l | grep 4bceb you will get filenames with 4bceb in their name

[wind peak]

Oh so it doesn’t actually search inside the files

[median compass]

exactly ^^ this, what you want is to search the text inside the files

[wind peak]

Dang it lol

[median compass]

this is the hardest question in the whole room imho

so it will take a little time if you want to figure it out by yourself

there's two hints i'd give

the first is to look and read the man grep output, that will show you how to search all the files

[daring knot]

Match bat, bats, hat, hats, but not rat or rats (use the hat symbol)

Now I'm stuck at this one! LOL

[median compass]

and the second is to spend some time on that regex101 site and build yourself a good regex

[daring knot]

I was testing here https://regexr.com/

[median compass]

you have all the bits you need for this edell

yes, that site does the same thing as the one I suggested, you can use either

[daring knot]

😉 tks, will read the room again. rs

[wind peak]

Ima take a break and let my mind rest for a bit

[median compass]

inside your matching pattern add the bits you want and then the bits you don't

[wind peak]

Cuz grep “4bceb” *.txt doesn’t return anything either

It will make sense soon

[gusty turtle]

You need to search inside the file, I guess

[wind peak]

Yes I know but which file. They leave you in the dark right there

So I’m trying to do a blanket search of every txt file in the system

[median compass]

that's what you're trying to find @wind peak

did you do the two things I suggested?

[wind peak]

Yeah and if you tell me that’s not a hint that’s the answer

I’m looking into it @median compass

[daring knot]

done task 3!

[wind peak]

😑

[severe bane]

I need a hint for Linux Fundamentals 2 Task 9 Binary -shiba2

[oblique cliff]

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

• What room you are on
• At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?
• What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done

[wind peak]

So the -r searches recursively but I still can’t find it lol

Burnt out

Taking a break

[median compass]

taking breaks is good and you have half of it there, a good regex then is the other part. It is a slow process though you should be warned, might take over an hour to find the one file

[agile fulcrum]

Can someone help me with this question, I can't find it?

Why are NULL, FIN and Xmas scans generally used?

[wind peak]

Oh I legit keep canceling the search @median compass . Didn’t expect it to take that long

[stuck fractal]

if you read back through the text, it explains why

[agile fulcrum]

I've reread it like 100 times. I am missing it

[median compass]

there is a faster way too @wind peak, it is more complex though, you can use find to pipe file names through to grep via xargs. If you google it you should find it. You're still going to want that regex though for the grep

[agile fulcrum]

I know it has to do with stealth

[stuck fractal]

It doesn't

Xmas tree scans are super easy to detect

Because the flags are set in a weird way

It's not for stealth

[desert knot]

• https://tryhackme.com/room/nislinuxone - Task2 named ls Question 6: How do you do a recursive ls? - i used ls --help and got answer of -R . And it said Your answer is incorrect. ls -R is not right?

[median compass]

look at the template for the answer, it's a lot longer than -R

[stuck fractal]

Long form flag.

And it expects the full command

[wind peak]

Ima just get some food and let the search run lol

[median compass]

for a lot of command switches there'll be a short and long form, so e.g. -h and --help do the same thing usually

[agile fulcrum]

Got it!! jesus, overthinking it!!

[wind peak]

I’m such a far way from getting OSCP. I’m glad I’m prepping for it 1st with THM

Search seems stuck @median compass is that normal?

[median compass]

it's a long slow process

[wind peak]

Okay it started moving again

Time to grab some food lol

[median compass]

like I said, using grep by itself can take over an hour

[wind peak]

Wow the faster way is literally the only way to do it lmao. I can’t scroll all the way up

So this is pointless. What if it found it already

😂

Or when it finds it will it be the very last result

🧐

[median compass]

ok, so you shouldn't EVER run a find without this at the end 2>/dev/null

that redirects errors to the bin so you don't see them

learn that off, you should use it a LOT

[woven mirage]

if you run find in your home directory you probably wont have permission denieds

[oblique cliff]

i mean if your find command isnt returning anything cuz of syntax errors you need to see the error sometimes

[median compass]

don't think they go to stderr though do they blob?

[wind peak]

Finally got it

[median compass]

scratch that, totally right of course blob 🙂

[wind peak]

I broke down the file system into chunks and grepd them 1 by 1

Thanks for the hints

[median compass]

this is the faster way, just for your reference, || find / -xdev -type f -print0 2>/dev/null | xargs -0 grep -E '<regex>' 2>/dev/null ||

[woven mirage]

thats a big command

[median compass]

that's what they say 🙂

[wind peak]

That looks like some serious Spanish to me

Not even Spanish cuz I know a lil Spanish

Now I’m stuck again. How do I run a file owned by root without root password

😑

Makes no sense to me

[stuck fractal]

You don't need root's password for that?

[wind peak]

Oh?

[stuck fractal]

You just run it like you would any other file

Most binaries on a Linux system are owned by root

[median compass]

look at the file privs with ls -la

[stuck fractal]

And you're running those just fine

[wind peak]

When I tried to run it it said permission denied

[median compass]

how do regular users get to execute restricted commands?

there's a command you use for that

[wind peak]

But that didn’t work either

Unless my syntax is crap

[median compass]

ok, that's a spolier, we have || on either side to hide that

so do a ||man sudo|| and look for a way to check what you can do

[wind peak]

Okay I got it

Thanks

Might as well hammer away while I’m waiting on my lunch to come

General question here. Am I doing this wrong? I feel like I should have ran through the OSCP course to learn what I need to then use HTB and THM and whatever else to practice.

I feel like I’m just missing certain information

Could be burnout kicking my booty but I dunno

[median compass]

you have to start somewhere and everyone comes to this subject with holes in their skillset. You just have to look for info in the areas you have weakness and put the effort in to bring your skills up, there's really no shortcut I'm afraid

[wind peak]

I see

[median compass]

remember you can always go away from a room and come back to finish it later when you're ready

there may be other rooms that walkthrough something you're struggling with

and if you go do those and then come back, could be that you'll get it instantly

[wind peak]

Hmm

[median compass]

and of course there's a whole internet of other resources, research is a critical skill for this

[wind peak]

I think my lack of Linux knowledge overall is stressing me

Maybe I should run through a full Linux course 1st then come back?

Or try other rooms as you say

I was just following the learning path so I assumed

[median compass]

that's an option too, only you can decide what you need, afraid i can't help you there. there are plenty of rooms here where you can pick up the linux basics, could certainly be good to do those before doing challenges for linux

[wind peak]

Yeah that’s what I’m thinking because I’m looking at some of these questions and I’m 100% lost as what to do

[night fractal]

maybe download a Linux ISO and run it in a VM, then try doing all your daily stuff in it, that way you'll naturally research lots of stuff

my Linux knowledge grew largely after I finally got my dual booted Arch Linux up and running

[chrome bane]

Could i get some hints on "Regular Expression" room task 5 last question ("Match all of these emails while also adding the username and the domain name (not the TLD) in groups (use \w): [e-mail], [e-mail], [e-mail]"). I tried many things in the past hours, i feel lost. The rest of the room was quite easy.

[median compass]

did you try doing 1, 2 & 3 here @wind peak https://tryhackme.com/module/linux-fundamentals

so a group involves surrounding the thing you're looking for with parentheses (). Make a regex for the username, that's just one or more of any character. Then you have a natural separator followed by basically the same things again for the domain

then a .com and one last operator

[chrome bane]

fml

didnt put .com at the end

solved

[orchid scaffold]

Can anyone give me a hint for task 43: Bonus challenge in learn Linux room

[chrome bane]

wasted 2 hours on that now i can start aoc, thanks allFun

[median compass]

look for files belonging to all the users you've found through the task @orchid scaffold, one of them should be in an odd interesting location and stand out for you

this is a good thing to do in general when enumerating just in case people have left stuff where they shouldn't

[orchid scaffold]

Thanks, I'll look harder

[prime lichen]

Hey guys! Not sure if this is the correct place to ask, but i'm having somewhat of a brainfart in the networkservices room (following the beginner pathway)
It asks for the name of the machine (using enum4linux, SMB enumaration) but the output of the 'Machine Enumeration' of enum4linux gives an internal error: not implemented in this version of enum4Linux

Tried updating my installation, but i seem to have the latest release... I'm kinda puzzled, am i looking in the wrong place?

[wind peak]

So I have no idea how I ended up in the Linux challenges room. @median compass . I didn’t do any of the Linux fundamentals rooms lmao

No wonder it seemed so overwhelming lol

[prime lichen]

Nevermind, just noticed that the machine name is mentioned in the Nbtstat information section of the output 😄 (just me, talking to myself)

[sweet hound]

any very basic hints for Learning Linux final challenge? Just need a push in the right direction

[stuck fractal]

Users generally create files in their home directory

look for out of place files

[errant totem]

could someone help me with nessus room, its last question, the hint says its under resources, but i can't find, im stuck, please help

[empty nacelle]

This is gonna be a very HTB like hint, but
"The answer is right in front of you"
(Just looking at the screenshots)

[errant totem]

Lol wtf, and i was stuck a full day, thanks

[slim egret]

Guys I’m on Linux fundamentals 2 on task 9 is it just me or does this task not make sense

[woven mirage]

you need to create en environment variable called test1234 and set its value to $USER

and then run the shiba2 binary

@slim egret

[zenith scaffold]

Hi. I was doing the nmap room and deployed the ftp-anon script on the FTP server at port 21.

If the result is filtered due to no-respone, does this mean nmap can login succesfully?

[woven mirage]

whats the full command you used?

[zenith scaffold]

nmap --script=ftp-anon.nse 10.10.9.202 -Pn -vvv -p21

[woven mirage]

try adding -sV to the end maybe?

[zenith scaffold]

Hmm..Ok but do you mind me asking why would that change the output on that port?

[stuck fractal]

Filtered generally means VPN or firewall issue

[zenith scaffold]

ah, ok

So you're saying I need to check if it's indeed firewall or if it's open

and I assume I can do this with the -sV

[woven mirage]

no -sV is not for evading firewall, i said to try it because i don't understand nmap deeply and i know that -sV gives more output about the service and when i don't know how to help people i try to tell things that i would try if i was stuck in the same place, that's why i said it with a question mark, because i'm not sure if it would help :p

[zenith scaffold]

Well, I just ran it with -sV

and still get the same output

21/tcp filtered ftp no-response

which apparently means that nmap can login on that port?!

[stuck fractal]

No

It means it can't determine if the port is open

!vpnscript

[proud scarab]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[random wraith]

any one finished recent regex room ?
i am stuck at last 2 in Task 5

[lucid rivet]

Stuck in Linux fundamentals 2 on Binary - shiba2

Here's what I did:
export test1234=$USER
echo $test1234
shiba2
. /shiba2
cat: /etc/home/shiba3: Permission denied

[stuck fractal]

You've broken the binary at some point

Probably by using a command ending in >> $USER

That wrote to the end of the binary, and removed the SUID bit. The SUID bit here is a special permission on a program that allows it to do some things it wouldn't normally be able to

Terminate and redeploy the VM

[lucid rivet]

Thanks!

[digital edge]

hi alll i was just dong "basics of pentesting" there a part where claims i found and IRSA KEY but i never came accross it ? was the the nmap scan sapose to find it ?

[stuck fractal]

It won't, no

[digital edge]

i dont know i feel like i wont learn if i dont know what the write ups are talking about some seem to drift some where and then come to the task at hand...which make me more confused is it just me?

[stuck fractal]

#room-help is the place to ask if you'd like clarification of something you see in a writeup

[digital edge]

ok im working on vulnuniversity and i cant get the reverseshell.php to connect

why would it be stuck like that

[graceful valley]

did you type shell?

[digital edge]

what syntax?

[soft fulcrum]

can somone give me an hint for Question 5 Regular Expressions Room?

cant figure out, i tried all the ways that came up in my mind

[cedar palm]

What task?

[true slate]

So basically

I suck with hashes

[night fractal]

k

[remote gate]

@soft fulcrum what task?

[night fractal]

what room and task are you stuck on? @true slate

[true slate]

Im doing ignite and I got a hash and salt from the SQL database file (that I found with pwncat) and I think it is a SHA-1 from hashid and some websites but cant seem to get the right command for hashcat to crack it

[oblique cliff]

google hashcat example commands

and it gives basically the exact command you need for each hash type

[soft fulcrum]

@remote gate task 2

[remote gate]

@soft fulcrum its kinda hard to see but you have to match the space after the :

[night fractal]

or you can do hashcat --help | grep HASHNAME

[oblique cliff]

but also, long story short you just need hashcat -a 0 -m {hash mode} hash.file .../rockyou.txt -O

[true slate]

how do I include the hash

SOrry

not hash slat

salt*

I cant type

and I dont wanna talk about it

[night fractal]

it's ok

[true slate]

I suck with hashes so thats probably a stupid question

[night fractal]

we all make typos

[soft fulcrum]

Let me see if i got it, thx anyways @remote gate

[remote gate]

if you don't get it and need a hint pm me

[soft fulcrum]

Ok ty mate :)

[night fractal]

if you wanna include salt it's a different mode then just the regular SHA-1, and you need to do hashcat -a 0 -m {hash mode} hash:salt

[oblique cliff]

there are no stupid questions, except maybe is this a stupid question? @true slate

[true slate]

fair

[oblique cliff]

yea just look at the help menu, it's really good for syntax stuff if you know what to look for

[night fractal]

yeah

[true slate]

ah okay I will try that I knew how to crack a normal hash but I have never had to do it with a salt surprisingly

[night fractal]

--help and man pages can help a lot

[true slate]

I looked at it before I asked of course but I was probably just doing my thing where I just look at my screen and read it but dont process it

thanks for the help guys

[night fractal]

yeah, it's not a common thing in lots of boxes to see password cracking including salt (as far as I can tell at least), try doing this room for getting better with hashes https://tryhackme.com/room/crackthehash

[oblique cliff]

you're very welcome !tux

[night fractal]

yw

[true slate]

already did that room but took a break, waiting for them to add the reset feature and im gonna go back through a lot of the rooms

[night fractal]

understandable

tbh, cybersec is just so broad you can easily forget lots of stuff if you don't do them for a certain amount of time

[feral sphinx]

@cedar palm did you just type something at me, all i got was a gray bar

[cedar palm]

Yeah it's a spoiler

Just click on ||it|| to see

[feral sphinx]

it's gone

[naive garnet]

Pulling my hair out on the regex room for all the wrong reasons
||Match all of the following filenames: ab0001, bb0000, abc1000, cba0110, c0000 (don't use a metacharacter)||
Keeps rejecting valid answers, can't figure out what it wants me to be using

[gusty turtle]

What have you tried so far?

[naive garnet]

I thought it wanted ||[a-c]{1,3}[01]{4}|| but that doesn't work

let me know if I should delete that

[gusty turtle]

You are almost right.

[naive garnet]

why did it not accept my answer, wow

that is such a petty difference even for a regex test lol

[gusty turtle]

Your regex is correct, but there can only be one answer for a question🙂

[naive garnet]

Having similar problems with almost every challenge

[orchid root]

I have a task : tell the file name which contains stringpassword

I tried cat file* | grep "password"

But it doesn't shows the file name

[wintry yarrow]

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

• What room you are on
• At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?
• What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done.

[white salmon]

I'm stuck at the last email regex question in the catregex room.
I've tried:
\w+@\w+\.com?
(\w|\d)+@\w+\.com?

[short bobcat]

is anyone done regular expression room created by concatenate

??

[white salmon]

@short bobcat Me

[short bobcat]

so what is the answer for that "

Match all of the following filenames: ab0001, bb0000, abc1000, cba0110, c0000 (don't use a metacharacter)
"

[magic gale]

hello

room furthernmap task no 14

There is a reason given for this -- what is it?

please give me answer for this

[rugged wasp]

I need some help in regular expression room

[white salmon]

we don't give answer @magic gale

[magic gale]

oh @white salmon

[white salmon]

did you run the scan as directed in the hint?

[magic gale]

i have completed all tasks but except task 14 and only 1 question

I tried but did not get an answer

that's why

[short bobcat]

im solving this

lets solve it together

[rugged wasp]

Dm

[white salmon]

could you show the output of that command? @magic gale

[magic gale]

yaa sure

[white salmon]

it is right in the output after not shown

[white salmon]

it is right in the output after not shown

[magic gale]

yaaa

[white salmon]

It gives a reason for not shown

[magic gale]

any idea mr @white salmon

u mean -- not-shown this is a answer :-p

hahah i m kidding

[white salmon]

nope

read your output

there is a reason why 995 ports are not shown

[thin bison]

And ten minutes later someone asks for the literal answer to something, lol 😄

[torn karma]

Anyone still working the regex room?

[thin bison]

Pls put your answers in spoilers. You're in the right track. As for the pipe (the or symbol), it really has no place there.

I'm not on my pc but if you post the task I can help

[torn karma]

im also working the email one. that and the "2f0h@f0j0%! a)K!F49h!FFOK" task.

this is where im at in the email ||^\w+@\w+.com$||

im just trying to figure out what im overlooking i guess

[thin bison]

For the first one, I'm literally telling you in the question which meta characters to use. I don't think this warrants further hints

[torn karma]

fair enough

[thin bison]

As for the email, I never said it's a whole line (from beginning to end), just emails. Also I asked you to put some stuff in groups

It's all on the task description, you don't need to Google or anything

[white salmon]

I got it done. Thanks.

[torn karma]

i appreciate it, ill go back over

[thin bison]

Also read up on the dot again

.

In regex that's a wildcard

[torn karma]

the paste removed the escape. i have it there

[gaunt ember]

I'm working on Linux Challenges and I'm a little stuck on Flag 16. I see there's a volume that's unmounted but I can't figure out how to mount it. It's not in fstab, and neither of the users I've discovered so far may use sudo so... What am I missing?

[clear saddle]

Hello room, I have all but one question (#9) answered in the NIS-Linux part1 room. the question is "

How would you read all files with extension .bak using xargs?"

any hints appreciated

[gaunt ember]

Take the *nix philosophy and decompose your problem into two parts maybe? (Trying really hard not to give anything away...)

There are tools that do one single thing, and do it well. Maybe you can chain them together? (I could be way off base here, I'm not familiar with that room...)

[clear saddle]

gonna research *nix philosophy BRB

[gaunt ember]

https://en.wikipedia.org/wiki/Unix_philosophy#:~:text=The Unix philosophy is documented,%2C as yet unknown%2C program. - I mean, no subtle hints there, just trying to guide your thinking into decomposing the problem.

The Unix philosophy is documented by Doug McIlroy in the Bell System Technical Journal from 1978: Make each program do one thing well. To do a new job, build afresh rather than complicate old programs by adding new "features". Expect the output of every program to become the input to another, as yet unknown, program.

[torn karma]

thats a pretty solid way to put the mentality

[gaunt ember]

Nvm, figured it out.

[torpid hull]

Doing the Hardening2 room, I struggle with “This is a random, arbitrary number, used as the session key, that is used to encrypt GPG.” Can someone please help me?

[short bobcat]

hey is anyone done with empire machine ??

[white salmon]

Hello guys I'm in linux challenges task 2 I found the flag6 and I get the flag but when I put it it tells me it's wrong

[median compass]

what are the last 3 chars of the flag you found @white salmon?

[white salmon]

89b

[median compass]

so go back and check again that you're capturing the whole string there, I think you're missing some characters at the end

sometimes if your terminal window isn't wide enough you might truncate a string accidentally

[pulsar willow]

Use of uninitialized value $users in print at ./enum4linux.pl line 874.
Use of uninitialized value $users in pattern match (m//) at ./enum4linux.pl line 877. i ma getting this error in in enum4linux tool any one can help me ?? how to resolve this

[median compass]

you could redirect your grep into a file with ... > flag6.grep and then cat that separately to see it easier perhaps

what parameters are you executing the command with @pulsar willow?

[pulsar willow]

enum4linux -a 10.10.21.154 @median compass

[median compass]

and what room/task/question are you working on?

[white salmon]

@median compass ok that's work thanks

[pulsar willow]

Network Services room

What would be the correct syntax to access an SMB share called "secret" as user "suit" on a machine with the IP 10.10.10.2 on the default port?

[median compass]

did you try googling that? or man smbclient? I can tell you but you should try working it out yourself first

[white salmon]

I think you are looking at the wrong tool.

[median compass]

so are you trying task3 question 3 with enum4linux?

[pulsar willow]

Ohk

[median compass]

or task 4 question 1 with smbclient?

[pulsar willow]

I am not getting profiles

[median compass]

cause the syntax to use smbclient is explained in Task4

you're not getting what? where are profiles talked about?

[steep sundial]

anyone solving the Regular expressions room?

[woven mirage]

I solved, ask your question

[steep sundial]

Match all of the following filenames: File01, File2, file12, File20, File99

||[F,f]ile.{1,2} | [F,f]ile\d{1,2}||

still stuck... after to awnsers

two*

[topaz drum]

@steep sundial dont't use ||,||

in the || [fF]||

[steep sundial]

ok 😛

thanks a lot

[topaz drum]

the devil is in the detail 🙂

[soft fulcrum]

someone can give me an hint for Task 4 Question 4 Regular Expressions Room?

[median compass]

whats your best guess so far?

[soft fulcrum]

[abc]{3,b}(dont know if thats right)[01]{4}

[steep sundial]

{3,b} you have to put minnumber,maxnumber

of the letters that you decalre earlier

[median compass]

re-read the example at the top of that task, it's {from,to} for repetitions

[soft fulcrum]

ah ok yeah got it thx mates

[steep sundial]

repetitions of course

[steep sundial]

Match all of these emails while also adding the username and the domain name (not the TLD) in separate groups (use \w): [e-mail], [e-mail], [e-mail]
Stuck on last the regex site says that is correct my answer but counting the letters doesn't match|| \w+.\w+.com||

||(\w+).(\w+).com||

[unborn stag]

I am on the same one 😢

(hello|username|dummy_email)@(tryhackme|domain|xyz).com

I had this but it is waaay to long ahah

Ok got it

[steep sundial]

16.1 is the format... xmm

[unborn stag]

Want a clue ?

[steep sundial]

ofc

[daring knot]

me too! in the same task!

[unborn stag]

So there is something wrong with ur dots

A dot is a random character

If u want a real dot, what should u add

And if you can be more precise than "a random character" U should go for the specific character

[steep sundial]

done 😄

do you want the awnser?

[unborn stag]

hope my hints weren't to easy

[steep sundial]

lol easy mistake I made 🙂

[unborn stag]

Yup !

[mild spindle]

Morning folks. Working through 'Networking Services 2' and I am hung up on the stupidest thing. "What is a common application of MySQL?". I have read through the documentation, and I am pretty sure the answer is along the lines of PHP database, but the answer layout is **** *** ******** or 4/3/8. I can not for the life of me pin down what the first 4 are.

[median compass]

re-read the text above the question @mild spindle, specifically the section marked What runs MySQL?

[mild spindle]

See, I knew it was going to be like that. Waaaaay over thought it. Thank you.

[daring knot]

I do. 🙂

[median compass]

the email one @daring knot?

[daring knot]

yes. "Match all of these emails while also adding the username and the domain name (not the TLD) in separate groups (use \w): [e-mail], [e-mail], [e-mail]"

[median compass]

what's your best guess so far?

[daring knot]

should I put here?

[median compass]

yup, in spoiler tags (surround with || )

[daring knot]

here ||(\w*)@(\w*)\w*|| first time I use this, and didn't knwo yet how to do it! eheheheh

[median compass]

no, double pipes, ||

[daring knot]

ops

done

[median compass]

there you go

ok, so you have the basic structure there, that's a good start

how long of a username will your first part ||(\w)|| match?

you can check with regex101.com or regexr, put the email addresses in the text box and see how much is matched

[daring knot]

Various regex I tested here matched all emails from the question.

Should it match only before .com? (because of the TLD observation?)

[median compass]

ok, so you want one or more of any character for user and domain right?

[daring knot]

• = one or more

[median compass]

and then just finish with the common part of each for the TLD

not forgetting how to specify a literal .

[daring knot]

\w

[median compass]

yup you have the parts you need there now

[daring knot]

Matches at regexr, but THM doesnt acceps ||(\w)@(\w).(\w)+|| what's wrong?

Let me check the literal .

[median compass]

but you didn't change the regex for user and domain

[daring knot]

humm...

Still not going ||(\w)+@(\w)+.(\w)+||

[median compass]

-> so you want one or more of any character for user and domain
-> + = one or more

[daring knot]

the inverted slash and the dot doesn't get preserved here in discord.

[median compass]

but your group must match all the chars, so username is everything in the ()

[daring knot]

humm...

[median compass]

and at the end you don't need regex, just use the common ending they all have

[daring knot]

finally! 🙂 the + had to be inside ()

tk so much!

[hidden roost]

hi, i need hint on regular expressions task 4 question 4...
i made the regex but it is not accepted... it doesn't have metacharacters as told...

[gusty turtle]

What have you tried so far?

You are almost correct.||{min,max}||

[hidden roost]

done thanks. 👍

[warped sinew]

Also struggling with Reg Expressions Task 4 Q4. Success in regexr.com, but my query is much shorter than the recommended format

[thin bison]

@steep sundial spoilers please 🙂

[thin bison]

guys, please post the body of the question when you want a hint on it. otherwise I have to open the room every time to answer you

(same with everyone else)

[warped sinew]

Match all of the following filenames: ab0001, bb0000, abc1000, cba0110, c0000 (don't use a metacharacter)

[thin bison]

alright

[warped sinew]

Sorry @thin bison

[thin bison]

no problem, what did you try? put it in a spoiler

|| spoiler ||

[warped sinew]

I have tried ||a?b?c?[01]{0,4}|| and ||a?b?c?0{0,}1{0,}||

[thin bison]

this || a?b?c? || is a very inefficient way to do what you're thinking. there's a much simpler way (read task 2).
the other stuff are both wrong, but you have the correct idea in the first one.

[warped sinew]

Thanks

[thin bison]

you'll also need something like this || {* , *} || in the first part, cause there are different numbers of letters.

I hope this makes sense

[warped sinew]

Thank you @thin bison . I shall keep trying

Got it! Gracias!!

[warped sinew]

Did you ever have any success with the regex match string problem?

[summer sonnet]

can i get hint for room unbaked pie

[astral smelt]

That room has only just came out please wait 72 hours before asking for hints

[hidden roost]

@thin bison

Match the string in quotes (use the * sign and the \s, \S metacharacters): "2f0h@f0j0%! a)K!F49h!FFOK"

i created a regex with \s\S and * matching the text but its not 10 characters, while the characters should be 10... can i get a hint.
|| \S asterisk \s asterisk ||

[summer sonnet]

it's already 57 days old

[stuck fractal]

It's not

That's not the release date

[astral smelt]

That's when the room was made

[summer sonnet]

ok may be

[stuck fractal]

No, it is.

Please wait 72 hours before asking for help or hints

[summer sonnet]

ok ok just chill
i will ask after 72 hours

that's it

[stuck fractal]

You decided to argue, please don't do that in future

[summer sonnet]

no i am not arguing i actually don't know that the room is released today

ok whatever let it be

thank u for information

[warped sinew]

I am struggling with this one, too. Your solution results in 2 matches for the string, instead one. I have created a handful of variants, but none are 10 characters, and none are the correct solution

[hidden roost]

|| [\S]asterisk[\s]asterisk ||
how about this one its 10 characters and matching each string.

[haughty token]

Any hint how to regex "File01, File2, file12, File20, File99" ? I created ~10 possibilities but none is the correct one

[hidden roost]

there are two sections the alphabets and numbers.

[haughty token]

The correction is 13 chars long. My last one is this ||[\w]*\d\d{0,2}||

[hidden roost]

use part of the solution that you have already done in previous questions.

[warped sinew]

That can return empty matches. Very dangerous

[warped sinew]

I have tried bracketing the whitespace search with ||\S*\s+\S*|| or ||\S+\s+\S*|| or ||\S+\s*\S+|| etc... but nada no far.

[thin bison]

guys I have no control over the number of asterisks. the correct answer has 9 characters. the thing is that you shouldn't try to match the asterisks by any means necessary. only try to do that if you think you are forgetting something.

generally, try to "cook" the easiest, simplest regex you can think of

also, a note. metacharacters don't need to go in a [charset]. they can but they don't need to. I see many people doing this

[thin bison]

post your solution in a || spoiler||

[warped sinew]

Oh dear. Everything went "BOOM!" (500 error)

[thin bison]

I definitely didn't cover how to do this in the regex room

[haughty token]

need a pause from this one. regex101 shows me that I'm correct but there must be another solution

[thin bison]

yes, that definitely can happen. do you want to post your solution? if it's correct regex but not the correct answer, I can tell you you're on the right track and also give you a hint towards the answer if you want.

[haughty token]

That's very nice from you: ||\S+\d{0,2}||

[warped sinew]

Thank you @thin bison . I discarded the solution to the "2f0h@f0j0%! a)K!F49h!FFOK" match because regexr gave me a warning. Plugged it in now, and all is good. Thanks!

[thin bison]

well it will work, but you're not being specific enough.

if the strings you want to match have similar patterns, you should try to translate that to regex

these strings definitely have a pattern

[haughty token]

You mean something like ||[Ff]ile\d{0,2}|| ?

[thin bison]

yep

the last part isn't quite right though

[haughty token]

alright, will work with this. thanks! ❤️

Solved it. Looking at the solution it's really an easy one

[thin bison]

well, everything looks easy in retrospect

good job

[hidden roost]

i got the solution but i think i tried it before and it didn't work ... anyways thanks for the hints @thin bison

[thin bison]

I don't know if that's possible but glad you solved it nevertheless

[warped sinew]

That's why I keep a list of everything I try as I try it.

[hidden roost]

i ,kind of, manually brute force it sometimes .
therefore can't keep a list of all. but keeping a list is a good idea.

[white salmon]

Hi people. Anyone finished the nmap room in the beginner's path? Task 14 demands scanning a deployed machine. But nmap tells me such machine is offline (even when I use the -Pn flag to avoid using the icmp protocol)... Help is appreciated

[stuck fractal]

Are you connected to the VPN?

Can you load http://10.10.10.10/ ?

[white salmon]

I m using the attack machine...

hm... interesting. The task says use an XMas scan (which dont seem to work), but using a regular tcp scan does the job

[deep robin]

Hey guys

i am stuck on this one question in the furthernmap room
Why are NULL, FIN and Xmas scans generally used?

[stuck fractal]

It's in the text

And it's not stealth

[deep robin]

got it thanks

i kept trying answers around stealth 🙂

[steep sundial]

Apologies. Done.

[stuck fractal]

#778305825797177374

[white salmon]

Uh so Koth, how do I connect to the IP, ,there ain't no attackbox

[stuck fractal]

You can deploy an attackbox under your profile

Or make your own VM or bare metal kali install and VPN in

[white salmon]

Oh alright. thanks. but now I'm confused as how to find the flags? There arne't any directions or anything

[stuck fractal]

KoTH are like challenge rooms

I recommend completing a good number of challenge rooms on TryHackMe first

There are 2 KoTH boxes available as standalone rooms too, Hackers and FoodCTF

FoodCTF is the easier one

[white salmon]

I'm only doing it cause im with friend

Friend's gonna destroy me 😦

hey! i'm in "Internal room" and in the login pagePHP

but i keep been redirect on internal.thm

[stuck fractal]

Add it to /etc/hosts

[white salmon]

how to do that ?

[stuck fractal]

That's a research question

[white salmon]

thx

[small bronze]

Can someone tell me how to solve this deamonise issue. I'm unable to get a reverse shell

[oblique cliff]

Do you have a listener

On port 4444

And is that your correct tun0 ip

[stuck fractal]

The daemonise is not the issue

The issue is the connection refused

[stuck fractal]

It's splitscreen, so attackbox

[oblique cliff]

I saw after

[small bronze]

yes I have tried changing the port also

also the ip is correct

[stuck fractal]

What IP did you use?

[manic citrus]

Anyone able to give me a pointer on the physical security room Adam Rite question ? It's the last question and been bugging me for weeks 😥

[stuck fractal]

https://www.youtube.com/watch?v=vXrlZJKpK0o this is the vid I found

Watching it through to see if it's useful

[manic citrus]

@stuck fractal thanks,will watch it

[stuck fractal]

Ok it's interesting but it doesn't describe the mitigation

[spark owl]

Is anyone available to help me with “Network Services- Learn about, then enumerate and exploit a variety of network services and misconfigurations” I am stuck on getting the SMB flag, ive downloaded the id_rsa ssh key but i keep getting prompted for a password. Im pretty stuck :/

[stuck fractal]

@manic citrus That won't help, but it might give you a jumping off point
As might this https://www.sparrowslockpicks.com/category_s/62.htm

[stuck fractal]

Can you show us what happens when you try? And what you're doing?

[spark owl]

@stuck fractal trying to ssh into server: ssh -i id_rsa johncactus@10.10.204.89 . It states: load pubkey “id_rsa”: invalid format. Ive tried regenerating it, re-downloading it, etc. No luck unfortunately

[stuck fractal]

Wrong name

Invalid format doesn't matter, it will say that even on a successful login

You can't regenerate that key, seeing as it's on the remote system

You're getting Connection Closed right?

[spark owl]

I tried three other usernames found from the enum4life tool

[stuck fractal]

You have the right person

But you have the wrong username for them

[spark owl]

Hmm thats the part im missing then, could it be a windows SAM name?

[stuck fractal]

No

Read through the files on SMB and make some educated guesses

[spark owl]

Okay thanks ill take another peek, i couldnt find any other files besides the work from home info

[stuck fractal]

That's all you need

But use the information in that file to create some educated guesses and try them out

[spark owl]

I am completely stuck, i have tried the following:

JohnCactus
JCactus
JohnC
JohnCactusPOLO

Its been an hour at least lol

[stuck fractal]

1. it's going to be lowercase because it's a Unix username

Why are you assuming it's both first and last?

[spark owl]

So used to windows its learning curve for me to get back on unix systems. I appreciate the help. I got it. Thank you!

Almost always first initial -lastname in active directory which was throwing me off immensely

[gloomy cedar]

Wondering if someone could help me out on "Network Services - Learn about, then enumerate and exploit a variety of network services and misconfigurations". I'm sure it's just some sort of syntax error on my end, but I cannot for the life of me get the "get" command to work after connecting via smbclient initially. I've looked up a write-up and copied the syntax verbatim, but I keep getting a "Error opening local file Working From Home Information.txt". Picture attached of my syntax and what I've tried.

[viscid osprey]

any hint on why this is not working, the only thing I could think of is my path, because the hash is in the hash.txt file.

[wintry yarrow]

#room-hints is here for people who want a "pointer" towards the room they are completing, and not necessarily a spoiler. As such, when asking a question, be sure to include:

• What room you are on
• At what stage are you stuck exactly? Enumerating? Exploiting? Priv esc?
• What techniques / tools have you tried so far? Just so that we know how to hint you in the right direction without repeating what you've already done.

[rugged wasp]

Have anyone done "unbaked pie" room

[plain field]

Hello All ... I'm on a nmap question it's made me crazy...
Room-Nmap/Task8/Question2. I'm on it since 30min ..... Heellllppp.

Why are NULL, FIN and Xmas scans generally used?

---

Ok I have it

[pastel sedge]

yp

has it been out for 72 hours though?

[rugged wasp]

Can i dm u?@pastel sedge

[pastel sedge]

sure @rugged wasp

[forest sleet]

anyone working on REGEX room ?

[frail rain]

Room: Regex
Question: Match all of the following filenames: ab0001, bb0000, abc1000, cba0110, c0000 (don't use a metacharacter)
My solution: ||[a-c]{1,3}[0-1]{4}||, this should've worked normally but its def not the best answer, just need to know am on a correct path or no

[forest sleet]

I am facing a similar problem

@frail rain try pythex.org to test you regex solutions

[frail rain]

ive tested my solutions on site linked with the room 🙂

[forest sleet]

i have tried many solutions as well, but they are not accepted for some reason

[frail rain]

because there can be n solutions to one problem

The right answer is typically the most efficient regex for that question.

[forest sleet]

yeah right

[frail rain]

where are you stuck tho?

i will help, if ive done that question 🙂

[forest sleet]

task2 question4

[frail rain]

what have you tried till now?

[forest sleet]

[Ff]ile[0-9^68]

[Ff]ile[1234578]

and a few more permutations somewhere around these two

[frail rain]

your first part is correct but for the second one try not to be too specific

the solution is right there in front of you

[forest sleet]

the ^ operator doesnt seem to be working for some reason in the first part

[frail rain]

you dont need the hat operator

[forest sleet]

ok

[frail rain]

am quoting the doc written in the room:
"1. Be specific. Here's an example: you could match any character from a to c using the [a-z] charset. But if the question only requires you to match characters from a to c, you should use the [a-c] charset, not [a-z].
2. Don't be too specific. In contrast to the previous example, if a question requires you to match a, c, f, r, s, z, at that point, the expression that matches those specific characters would get longer and more complicated. So, it would make more sense to use [a-z], because it is short and simple."

[forest sleet]

ok

I get what you are trying to point

I got it

Thanks man

[frail rain]

[forest sleet]

👍

[rugged wasp]

You are on right track,

[thin bison]

did you get it after all? you were very close. that regex was correct.

[frail rain]

oh no, i took a break

[thin bison]

correct as in it works, but the right answer is a little different

ay, finally someone took my advice 😛

[frail rain]

oh yeah i got that,

[thin bison]

hope this room doesn't get you from slightly disappointed to very 😄 lol

[frail rain]

i hope that too lmao

[hidden roost]

in regex room , the email part
||(\w+_?@)(\w+.com)||
this matches all the emails but still not accepted... any hints for what concatenate think is the best solution for it?

[astral swift]

Any nudge on “unbaked pie”

[astral smelt]

That room has only came out please wait 72 hours before asking for hints

[astral swift]

Thanks 🙂

[tender compass]

°°

[thin bison]

pls read again what exactly I'm asking you to put into groups

also you need to read up on metacharacters again because there's a mistake in there

[hidden roost]

Got it Thanks for your reply...

[frail rain]

I got the answer :), guess taking a break really worked lol

[gloomy cedar]

That makes total sense! Thanks dude.

[jovial sentinel]

hello. In Steel Mountain, task 3. I managed to upload the script into the machine but that command is failing. I understand that the problem is somewhere in the script but I assumed this should work 🤔

[stuck fractal]

@jovial sentinel You downloaded the webpage, not the script

Click 'View Raw' and use that address for wget

[jovial sentinel]

🙈 oops. Thank you

[autumn kite]

guys i need help with the Simple CTF

[woven mirage]

What have you tried, where are you stuck

[heady anchor]

i helped him in dm 😁

[tired bough]

Hi hackers. I am stuck in the Nmap section at the question " Search for "smb" scripts in the /usr/share/nmap/scripts/ directory using either of the demonstrated methods.
What is the filename of the script which determines the underlying OS of the SMB server?" Can somebody help me please. Many thanks in advance.

[median compass]

did you go to that directory /usr/share/nmap/scripts in a terminal @tired bough? if you look at the scripts there you'll see they have a common format, scripts that target a particular service generally start with the name of that service. In your case the service is smb. That narrows down the set of services to 20/30ish, now in that smaller set, what script could be looking at discovering the OS version?

[white salmon]

In Nmap room of MuirlandOracle can anyone help me :
There is a reason given for this -- what is it?

[stuck fractal]

It's in the text

[tired bough]

Hi brother. I did try the command "grep smb /usr/share/nmap/scripts/scripts.db" and one file has been shown in red which is "smb-cabapilities" it wasn't the right answer tho!

[median compass]

try the way I suggested perhaps?

[elfin mesa]

I cant open it in browser. Any hints pls

[median compass]

but it isn't what? that does match the addresses you're given

scratch that, you're missing a \

since . has a meaning you can't put it in without escaping it

[frail rain]

yeah yeah

i forgot to add that while pasting it here

wait

nvm

[median compass]

ok, well then I don't get the issue, that is the right regex

[frail rain]

it was actually

lmao

i didnt meant to put that here

[frail rain]

okay now am stuck with 2 problems

imma take anathor 48 hr break for these

[thin bison]

it wasn't the right answer, even with the dot escape

cause I asked for 2 specific things to go in groups, not the whole thing

[median compass]

it turned out it was correct @thin bison, just a typo i think

you were brave to do a regex room 🙂

[thin bison]

if it was accepted it was due to thm's answer tolerance, but that wasn't the right answer even if it is correct regex. refreshing the page will reveal the right right answer (if that makes sense)

[median compass]

once the \. was in place it was the right answer I'm pretty sure no?

or the right right answer even

[thin bison]

no, that's what I said

it wasn't right cause the whole thing was in 2 groups

2 specific things are supposed to go in a group, not the whole thing

[whole parcel]

I'm trying to do the Blue room, and I've found the appropriate exploit and trying to run it, but it's failing every single time I run it. I've tried waiting 5 minutes, 10 minutes, 30 minutes for the system to be up before trying it, but it runs the exploit and fails to produce results every time. I'm using a Kali Linux VM I spun up. Am I just extraordinarily unlucky, or am I doing something wrong?

[oblique cliff]

show options and screenshot

chances are your LHOST is wrong

[whole parcel]

...Oh

Thank you, this was driving me up a wall

Yeah I had it set to my local IP and not the VPN IP

[oblique cliff]

🥳

[rose root]

Hi. I need some hint for https://tryhackme.com/room/catregex room. Last subtask from Task 4. Tried with .*\w+ but it doesnt work. Please help. Also tested on https://regexr.com/ and works fine

[oblique cliff]

theyre looking for something a bit more specific than an asterisk i believe 🙂

[short bobcat]

which question from task4?

[rose root]

last one

[short bobcat]

okay

first that . is optional then search for the word

[rose root]

.*

optional

cant type with backslash

[short bobcat]

you have only one dot

[short bobcat]

yah

.

\.

[short bobcat]

"." this is optional

go up and see for optional character

replace with *

[rose root]

• • 0 or more times.

this means optional form me 😛

[short bobcat]

but there is one file named "notes1"

[rose root]

right

?

this is optional

now is good

thanks

[short bobcat]

done??

[rose root]

yes

[short bobcat]

Okay

did you have starkiller installed

[rose root]

starkiller?

[short bobcat]

its a program

[rose root]

nope

program for regex?

[short bobcat]

noo its a program for empire machine

[frail rain]

Well the question said: adding the username and the domain name (not the TLD) in separate groups.
so
||group(Meta char+) @ group (Meta char+) {esc char .} com||,
shoudlv'e worked

[median compass]

what you just wrote, only with a + in each group after the metachar does work

[frail rain]

Yeah.. Maybe i just away with THM's answer tolerance, but still i wanna know what the actual answer was.

[thin bison]

If I understand what you're writing, then yes, it will work, but it's confusing

but yes, the format is || (regex)@(regex).com ||

[frail rain]

Yes i was correct after all

[thin bison]

what do you mean? 😛

[frail rain]

I meant the format was correct, lets not worry about this now.

[true slate]

yo yo yo so I dont know if this is the tool messing up or me not knowing how to use it but heres my command
wfuzz -z /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-5000.txt --hc 404 -u http://FUZZ.cmess.thm
and it keeps returning with

********************************************************

Target: http://FUZZ.cmess.thm/
Total requests: 4997

=====================================================================
ID           Response   Lines    Word       Chars       Payload                                                                                                                                                                      
=====================================================================


Total time: 0
Processed Requests: 0
Filtered Requests: 0
Requests/sec.: 0

 /usr/lib/python3/dist-packages/wfuzz/wfuzz.py:78: UserWarning:Fatal exception: Pycurl error 6: Could not resolve host: www.cmess.thm

any help would be appreciated

trying to fuzz out the subdomain of http://cmess.thm

[steady stratus]

Do you have cmess.thm mapped to an active IP in your /etc/hosts?

[true slate]

yep

[median compass]

you need to specify an IP and a URL when fuzzing vhosts

you have cmess.thm in your /etc/hosts but you don't have any subdomains in there so it can't resolve them

[true slate]

so I need to edit hosts or my command?

[median compass]

your command, look for a switch that lets you specify an IP

[true slate]

okay I get what you're saying

working perfectly now thank you

[true slate]

https://tenor.com/view/im-back-baby-kuzco-emperors-new-groove-gif-8291749

https://tenor.com/view/nope-baby-run-nevermind-gif-11893441

[white salmon]

im in the the physical security intro and stuck on task 4 - what is the piece that allows locking lugs to retract when the core is turneed? first of all is it lugs or should it be plugs? im not a native speaker and for the love of it all i cant get the solution figured out. need help here pls

[median compass]

the only hint I can give you is to check out bosnianbills videos on youtube, feels like I watched half the internet on that room and i'm still missing a couple!

[white salmon]

ok thx

[white salmon]

ok now this is my last question which needs an answer. this is killing me 😄

[white salmon]

I'm working on linux fundamentals 3 rn. I'm having trouble finding the shiba4 binary after using: find /* | grep "shiba4" .

I'm also in the root of the file system

task 7

[woven mirage]

you can do it in a better way

instead of using grep

you can specify the name of the file you want to find

also, you dont need to use /* too look all directories, you can just specify the root dir since find looks recursively

like this find /

[white salmon]

grep is all i've learned at this point besides -type or -name

[woven mirage]

well

with -name you specify the name of what you want to find dont you?

[white salmon]

find / | grep "shiba4" worked, but for some reason if i didn't CTRL + C immediately the location would be lost in a sea of "permission denied"

[woven mirage]

it's because you dont have permission to see some of the folders

you can hide these messages by adding 2>/dev/null in the end of your command

[white salmon]

Ah, thanks. I would scroll up and all the results wouldn't show lmao

[woven mirage]

the 2 means it's getting standard error stream

> redirects to a file

/dev/null is like a void, that just throws away anything you give to it

but its better using find / -name shiba4 instead of using find united with grep

[white salmon]

wym "untied"

[woven mirage]

find / -name shiba4 better than find / | grep "shiba4"

[white salmon]

@woven mirage appreciate the help 🙌

[dusk imp]

Termack

ya there? :3

[woven mirage]

helloooo!

[oblique cliff]

Termy is always here

Hence his community mentorship-ness

[dusk imp]

I'm missing something in wonderland

but i don't know what it is

mind you, I'm on step 2.

[woven mirage]

blob best mentor

[dusk imp]

Blob legit is my mentor tho

I missed him sooo much.

[woven mirage]

what have you tried, and where exactly are you stuck?

[dusk imp]

can i pm?

should I pm you blob?

[oblique cliff]

That room everything is more straightforward thank you think

James is mean that way

[dusk imp]

hm

[oblique cliff]

Boi why are you asking to PM 🤬

Just do it or a kill you

[dusk imp]

haha

[woven mirage]

@oblique cliff you didnt blobhearted my message where i say you are best mentor

[oblique cliff]

Yes I did

[bright steeple]

keep saying unable to find C:\mona\oscp\bytearray.bin

[solemn smelt]

have you downloaded mona

[bright steeple]

i have to download it? i just connect to the vm provided via xfreerdp

nvm figured it out

[nova patio]

because it stays charging like this

[stuck fractal]

@nova patio please don't spam the same thing across multiple channels like that

[nova patio]

ok

[dusk imp]

@stuck fractal Wonderland was fun.

[stuck fractal]

Good

Sorry for Looking Glass

[dusk imp]

I haven't started it yet

but apology preaccepted.

granted, if it's anything like Muirs rooms, you'll know how I feel about you.

[stuck fractal]

Oh it's nothing like Muir's rooms. It's just partially designed to bully you. Muir sets out for difficulty, this box was designed to hurt you emotionally.

[dusk imp]

Oh see, that I can handle quite easily because I'm already very very broken

[night fractal]

no attack mode?

[charred fable]

hi everyone 😄 im on the linux fundamentals 3 room and struggling a little on one of the find a binary, its asking to find a binary called shiba4 however, everytime i use the find command or ls command i cannot see the binary anywhere on the system ? any hints ?

[glad hornet]

Try using the find command together with the grep command on all files. It will search through all files and filter out your grep keywords.

[charred fable]

thanks @glad hornet I'll give that a go

[glad hornet]

Could anyone assist me on this question from the network service room? Been stuck awhile. How do I connect to the server (I have the username and password) ? Do I smbclient into one of the shares? Tried netlogon and IPC$, wasn't successful

[charred fable]

can you ssh into the server ?

[glad hornet]

ahhh of course...it meant to ssh into the server. Thanks. Basic understanding still somewhat lacking..

[charred fable]

no problem 🙂 mine too!

[night fractal]

actually it's kinda better to just add -name in your find command instead of grepping it

[charred fable]

I can only seem to find a directory rather than a binary

[night fractal]

you can try forcing to files only with -type f

but it should find binaries too by default

[charred fable]

i must be missing something i think

[night fractal]

I mean, if you can do find / -name bash and it returns /bin/bash then it means you're finding binaries too

a really simple check

[charred fable]

i just cannot seem to find the binary file anywhere

got it 🙂

thanks for the hints 😄

[night fractal]

you're welcome 😄

btw, I don't know if someone already told you this, but you can redirect all the errors to /dev/null for a clean output like this find / -name NAME 2>/dev/null

[charred fable]

yeah i found that on google ... i think if you combine it with the grep you can use -v ??

i did however use 2>/dev/null

[night fractal]

-v would return all lines that do not match the given expression

so you could technically do find / | grep -v denied

and it would reject all the Permission denied messages

[charred fable]

yeah thats what i was getting at, or -v "permission denied"

[night fractal]

but just sending stderror to /dev/null is kinda cleaner and somewhat faster since no extra programs are being run

[charred fable]

that makes sense

[rustic sphinx]

Hiya, Im just having a bit of trouble with johntheripper.

I used "ssh2john" and converted the rsa to a .txt with the hash, used john for_john.txt --wordlist=wordlist

And it just outputs No hashes loaded

Here is the RSA

and

hash

[white salmon]

@rustic sphinx show a screenshot of your command

[rustic sphinx]

Okay, here is a screenshot

Any ideas?

[white salmon]

I miss your for_john file

[rustic sphinx]

?

[white salmon]

in your command

[rustic sphinx]

you want the ssh2john command?

[white salmon]

replace rsa with for_john.txt

[rustic sphinx]

tried that

same result

[white salmon]

you want to crack the ssh2john hash, not the rsa file

[rustic sphinx]

that is the hash

[white salmon]

john for-john.txt -w=wordlist

[rustic sphinx]

Look at th screenshot

I just posted

I did the .txt hash

same result

[white salmon]

change the order

[rustic sphinx]

did that

I dont think it has anything to do with the order

[white salmon]

what room is that @rustic sphinx

[rustic sphinx]

basic pen testing

the thing is

I was watching john hammonds walkthough

did the same exatc command for the john as he did

[white salmon]

dope@UDP:/mnt/c/Users/HACK/Downloads$ john for_john.txt -w=/usr/share/wordlists/rockyou.txt Using default input encoding: UTF-8 Loaded 1 password hash (SSH [RSA/DSA/EC/OPENSSH (SSH private keys) 32/64])

[rustic sphinx]

Yup I think its something to do with my john

I tried reinstall it same result

It happens with every hash I input into john

so um

any ideas

[white salmon]

use the attackbox maybe

or build a new john from source

[rustic sphinx]

I dont really want to use the attack box as im not a sub

Alrighty ill do that

[white salmon]

https://github.com/openwall/john get this one and follow the doc/INSTALL

[rustic sphinx]

@white salmon Should I get bleeding jumbo?

[white salmon]

yes

[rustic sphinx]

yesss

that worked

guess I just needed it to install from source

not "apt get install john"

[white salmon]

john installed with kali worked fine for me

yeah ubuntu is weird sometimes

[night fractal]

stuff happens man, worked fine for me on arch tho and ppl say that thing is unstable

[dusk imp]

Someone willing to help me with unbaked?

because, i think I've found something, although I'm working on something rn.

[white salmon]

wonna trade hints 😄 i'm getting nowhere withe mine. damn last answer

[white salmon]

https://tenor.com/view/pray-beg-please-homer-the-simpsons-gif-15706311

[stuck fractal]

I have an idea

Let me check it on the site

Nope ok

[white salmon]

i had so many ideas. i ran out a long time. now i hunt the internet for lockterms with 8 letters. this is so hard as a non native speaker to find the right part. and searching for locking lugs always brings me locking lug nuts for cars. argh!!!

[median compass]

the part in question is actually very commonly to be found on pictures and in explanations of car locks

[white salmon]

i will lock into that. thx again

[white salmon]

https://tenor.com/view/thanks-thank-you-dwight-gif-3898407

[median compass]

lol, most welcome

[white salmon]

i finally found it. and i would never geussed it or found it without your hint(s) 😉

[gilded quail]

I am also stuck here. EDIT: Solved

[humble forum]

Im stuck in nmap room with the Task 8: NULL,FIN,Xmas. Why are <those types> scans generally used? ******** *******

[stuck fractal]

Check the text above

And it aint stealth.

Because xmas scans are super easy to detect

[humble forum]

Wow, got it after a little more thinking about it. Thanks @stuck fractal for the tip!

[charred fable]

how would you open a file if you have used SNB to a vunerable port?

[autumn kite]

hey guys

im stuck at the Linux walkthrough room

Task 24

nvm i found it

[mossy oriole]

hey guys, im stuck at the latest NMAP room, Task 14

[autumn kite]

i think i could help u with that

[mossy oriole]

thank you man

[autumn kite]

oh im sorry man i have done another nmap room

[glacial gust]

if you follow the hint, you will get that answer

[mossy oriole]

I follow the hint but I don't understand what they want to write

[tender compass]

Is this the New Nmap room 0r the Old one??

[mossy oriole]

new one

[tender compass]

Oh Sorry I haven't done it yet

[frail rain]

when you do the -vv scan theres a reason given, you have to put that

[balmy wedge]

Question 2 for today's advent calendar. Is there special formatting? I feel like I am missing something and have over thought it. I am entering ||wfuzz -c -z file,big/txt http://shibes.xyz/api.php||

[stuck fractal]

#778305825797177374

[balmy wedge]

perfect, thanks man

[stuck fractal]

@wintry sorrel That's not correct CIDR notation for the network

Look up how to write networks in CIDR notation

[wintry sorrel]

Oh... Thanks man

[graceful prism]

what is the answer for this question in the nmap room?

[stuck fractal]

We don't provide answers @graceful prism

We provide help and hints

[graceful prism]

I tried to search here: https://nmap.org/nsedoc/

But I dont know what to do next

[stuck fractal]

Find the documentation for the script.

[humble forum]

Try man nmap and look for the scripts segment

[graceful prism]

Thats what I found

[stuck fractal]

Keep looking

You need to find the documentation for that script

[humble forum]

Check what you have learned in earlier tasks while "using" scripts with nmap

[stuck fractal]

It's a research question

wat

1. don't post answers

2. try things

[graceful prism]

It worked thanks

[odd halo]

has anyone joined the dev group room yet?

[white salmon]

Hi people. I am in the network services room. In task 7, we are supposed to telnet into a remote machine and then execute a ping into the local (attacker machine) from the telnet session. We should also use the tcpdump tool to check whether the ping actually arrives. But tcpdump does not show anything... I appreciate any help...

[strange river]

@odd halo yea

[odd halo]

@strange river i’m having a hard time getting the initial foothold. I found a hash in a .git folder. am i on the right track?

[strange river]

@odd halo yes

[odd halo]

@strange river i spent a lot of time trying to crack it. is it time wasted ?

okay thx for the hint!

[strange river]

👍 🙂

[ancient island]

i have this doubt too hehe

[strange river]

Well the box assumes you have access to quantum 🙃

[odd halo]

well like @strange river said i looked at the git folder and found good stuff. but still got overwhelmed by the objects that i found since i’m not a lot familiar with git folders @ancient island

but now it’s just a matter of searching

[ancient island]

i found some interestings things, but i'm stuck

so close, but too far hahah

[odd halo]

ahahahahah feel u

[dusk imp]

Anyone got a small hint for me for unbakedpie?

I've got a few things that just haven't worked.

[cedar axle]

Where are you stuck? Has it been 72 hrs yet?

[dusk imp]

man, this room has been around for 59 days

[stuck fractal]

Yes, it has been

It was silent released

[stuck fractal]

That's the creation date, not release date

[dusk imp]

ahhh

it's doing my brain in.

slowly that is.

my google fu is not strong enough i guesssss.

[cedar axle]

I need a hint on where u are stuck so I can give you a hint

[dusk imp]

well, pm me as there's no writeups for this room and I don't wanna spoil anything.

[jolly knot]

Hi stuck in task9 of windows privesc v1.0

[cedar axle]

@jolly knot do u have a link for the room?

[nocturne relic]

any hints on devguru ?

[white salmon]

not for the first 72 hours

[stuck fractal]

@white salmon The creator has said it's open for hints

And provided some

[white salmon]

okay didn't know that

[nocturne relic]

so anyone give me some hints pl

[stuck fractal]

There are some a little further up

[glossy radish]

Hey do anyone know this answer

What is the very first CVE found in the VLC media player?

[white salmon]

google it

[glossy radish]

i did but every entry is a wrong one

[white salmon]

which room?