room-bugs

[wheat fractal]

ok check. thx

@placid abyss nope meant the bug report ^^

[placid abyss]

huh

oh it was meant as a joke....

[wheat fractal]

^^

damn im to tired for jokes it seems 😄

[obsidian kiln]

@lucid oasis fixed an unintended in <https://tryhackme.com/room/jack

Any chance you could clone the box and update it in there?

[livid bane]

not a bug, but it feels like for the msf room question 7 should be underneath the last paragraph

[dusky junco]

I agree

I'll take a look when I get back from walking to the shops (:

[glass spade]

I think Blaster has some issues. (I've re-deployed the box to check if it's just a PEBKAC issue, and can replicate the issue)
For Task 2 Q1: I scanned more open ports than what the answer was. (process of elimination narrowed down the correct answer).
Task 3 Q1: The suggested method for gaining the info turns up with nothing, as there is no || history || before what has happened in that current session.

[eternal summit]

Those are both already reported, and Dark has said they won't be fixed

[glass spade]

ahhhh coolies!
Thanks 🙂

[umbral kite]

Yo, i've got a question....
Stuck on box Vulneversity, bcs task 4 i uploaded the reverse-shell and am listening on netcat

getting some error WARNING: Failed to daemonise. This is quite common and not fatal. Connection timed out (110

is this posible because i am using the newst version of kali

[eternal summit]

No, it won't be.

#room-help please

[umbral kite]

sorry, thank you

[dusky junco]

I've swapped those two bits of text around like you suggested @livid bane thanks for letting us know (:

[livid bane]

anytime amigo, awesome quick fix

[verbal spruce]

I completed the Forensics room but noticed that on Task #1 I got 0 points and on the scoreboard others got 30 points? Did I do something to get them deducted or is this a glitch? I have a feeling I messed something up. But wasn't sure.

[twin tapir]

@verbal spruce its due to point recalculation, dont worry about it

[verbal spruce]

ah ok. I wasn't sure if clicking the hint buttons after answering did something. Thanks!

[prime walrus]

Just for attacking ics1b just with the uncomplete answers its asking for a double digit answer if double i would have assumed it was 16. But per the actual question I would have answered as above. Did I get it wrong somewhere as I've tried many permutations of the answer

Sorry its a bit blurry but the 2nd registry is showing a 1 while nozzle is filling

[dusky junco]

I haven’t given that room a go just yet Sleepy, but I’ll take a look in the morning and see if the flags are mixed up or something (:

[prime walrus]

It's pretty easy and straight forward can be done in roughly 20 when you read through the material and give it a go. Scripts a well done and simple

[dusky junco]

Actually in the meanwhile could you PM the answer you’re trying? (I can see the flags for rooms so spoilers don’t exist for me lmao)

Ah, sounds like you got it in the end then? 😄

Also I’ve took a a screenshot but your image had other answers in especially as it’s a box that came out tonight 😄

I’ve still got a copy for troubleshooting in the morning

[modern rapids]

tmux room, any command put into the Attack box after about 10 minutes or so will Disconnect me

[green steppe]

help pls?

[compact meadow]

Hmm 🤔 The correct answer is ||6.6.1p1||

[topaz thorn]

and the other one should be 2

Must be when they updated it

[green steppe]

@obsidian kiln you updated it, it changed? 🙂

[obsidian kiln]

What's this?

That shouldn't have changed.

Which box is deploying there @green steppe?

Should be DVWA

[green steppe]

No idea 😛

[obsidian kiln]

It will show you at the top of the screen! 🤣

[green steppe]

i'm answering emails rn

someone emailed room help

[tiny ginkgo]

The webpage in the Exploit development room's box just freezes in the homepage. It doesn't loads completely. I have tried deploying the machine several time and tried connecting to it both from my computer as well as an attack box but the same thing happens.

[grave depot]

There is a bug in the first linux room. Unless you su as shiba2 you cant enter the envar in /xxxx/xxxxxx format

[eternal summit]

There is a bug in the first linux room. Unless you su as shiba2 you cant enter the envar in /xxxx/xxxxxx format
@grave depot Yes, that's not a bug

You're expected to change user when you're told to...

[dusky junco]

I'll take a look at this @tiny ginkgo

[tiny ginkgo]

Okay, Thanks. It also says that java must be installed in my browser when I try to visit webserver-ip/files 🤔?

[verbal spruce]

I believe that Question #1 on Task 4 of MAL: Strings needs updated or revised in some fashion. The answer differs than the result from Block Cypher.

[obsidian kiln]

Right, well, A) Please don't spoil answers

B) I'm not sure you've read the question

What is running on the highest port -- not what is the highest open port

i.e what service is it running

[oak seal]

This ^

[ancient aspen]

tnx @obsidian kiln

[lost needle]

https://tryhackme.com/room/introtoresearchgrxhmy task 3 "outwith the scope of this room" should be "outside the scope of this room"

[eternal summit]

@lost needle

That'll be Muirland

[lost needle]

huh, never heard that word. thx

so perhaps a Scottish person created the room.

[obsidian kiln]

Aye, a Scottish person did create the room... 🏴󠁧󠁢󠁳󠁣󠁴󠁿

[lost needle]

my appologies. I have however had occasion to learn this difference: https://www.bbcamerica.com/anglophenia/2014/07/brits-spell-realize-s

[obsidian kiln]

Because that's English 😆

[lost needle]

😉

[dusky junco]

Thanks @verbal spruce I've updated the answer for that - interesting that it's incremented

Ty for reporting

[verbal spruce]

np. I thought it strange too. btw, digging your 4n6 rooms.

[dusky junco]

Thanks, appreciate that (:

I'll find the time to "futureproof" that specific question so that the transactions incrementing (somehow!) won't break the question

[maiden sorrel]

The webpage in the Exploit development room's box just freezes in the homepage. It doesn't loads completely. I have tried deploying the machine several time and tried connecting to it both from my computer as well as an attack box but the same thing happens.
@tiny ginkgo hello. im seeing the problem you mentioned but after waiting about 5-6 minutes it finished loading. im not sure what happened this is the first time im seeing an issue with the site. fortunately the example exploit still works, ill look out for this and upload a new VM if necessary. thanks for reporting

[dusky junco]

Ah perfect @maiden sorrel, I was troubleshooting this just a few hours ago. I've asked for the resources to be bumped (so that it'll deploy w/ 2GB of RAM no matter user-type)

Feel free to PM me any info about what's running behind the scenes to see if this'll do the job (:

[silver dust]

Room: printerhacking101
Task: 2
Problem: Image is broken sometimes it does not even load

[lime zephyr]

hello

Im not sure whether its me thats bugging or the room Im currently in. Im in the intro to assembly room in the if-statement continued room

and question 1 and 2 dont make sense to me

I check the value of rbp-0x8 with px and it clearly tells me 08 as a value

[eternal summit]

I'd recommend asking in #room-help first them

[lime zephyr]

fair

sorry

[dusky junco]

Electron that usually means that your ISP/firewall is blocking the host of the images. Try setting your DNS to 1.1.1.1 or 8.8.8.8

@silver dust

[dusky junco]

If the images doesn't load for you even after changing DNS just @ me

[fathom jewel]

Not sure if it is a bug, but it seems Task 7 (Windows PrivEsc v1.0) doesn't work as described, only gives reverse shell on logging in

[dusky junco]

What is the URL/room code for this please?

[fathom jewel]

https://tryhackme.com/room/windows10privesc

[dusky junco]

thanksss - bare with

[fathom jewel]

Also another issue with the same task is when req query is issued in a reverse shell, the response is empty

possible workaround to this, adding /reg:64

[dusky junco]

Okay this is super helpful

I'll go through the room when I get 5 minutes (:

[fathom jewel]

If I will find anything else in there, will let you know 🙂

[dusky junco]

Appreciate iit!

[livid crane]

There is a small bug in

Anthem

Task 1 : Q4 (What is the possible password....)

The password is accepted even without the '!'

Seems small but the RDP password will need that '!'

[topaz thorn]

That's answer tolerance

[livid crane]

Cool

[fathom jewel]

@dusky junco Also few notes, it seems any reg query commands only goes through 32-bit values, to see the full list /reg:64 option should be used. Additionally in task9 there is no password in the registry directory or i'm just being blind ))

[indigo orchid]

This isn't a bug but the Free Path on blog lists Shodan room as free but when I visit the link, it says Owner has made this room private. So its not free anymore?

[eternal summit]

No, it's free

It's just private

@green steppe Can you update the blog post please?

[indigo orchid]

So I cannot access it then? Not sure how to access it

[eternal summit]

It was made private because the answers needed to be changed almost daily.

[indigo orchid]

ohh alright. can I get access to it or is it no longer accessible to anyone? sorry im just confused if I can or cannot complete that room. thats all im asking 😅

[eternal summit]

You can get access, you won't be able to complete it most likely because the answers constantly need to be changed

[green steppe]

@green steppe Can you update the blog post please?
@eternal summit the shodan room will be made public as soon as Cmn gets back to me :-(

[indigo orchid]

ohh no problem then. Ill continue with other rooms. Thank you!

If that room is ever made public again, can you guys post it in #announcements please?

[silver dust]

Electron that usually means that your ISP/firewall is blocking the host of the images. Try setting your DNS to 1.1.1.1 or 8.8.8.8
@dusky junco Hey Cmnatic I am using Clodflare DNS it is configured in my router's setting

[silver dust]

Room:Attacking ICS Plant #1
like other heading the highlighted text should be bold

[jaunty halo]

Hey theres a problem in https://tryhackme.com/room/forbusinessreasons

I've waited for twelve minutes and the web server still has not started

PORT   STATE  SERVICE VERSION
22/tcp closed ssh
80/tcp closed http

[eternal summit]

It's being looked in to by the testers @jaunty halo

[jaunty halo]

ok thanks

[jaunty halo]

@eternal summit have you guys found a possible work around

[eternal summit]

No, it's being looked in to.

[jaunty halo]

Ok thanks, sorry for the ping just wanted to check in

[inner lantern]

Maybe this is bug or what idk but i am not able to go to this site by IP in Vulnversity room , i am able to do Reconnaissance and all scans but not able to go to page can some one fix this ????

[verbal sedge]

@inner lantern there is no port 80, check your nmap scan results.

[brazen sonnet]

U need to connect through port 3333

And check if u are connected through vpn

@inner lantern

It may need some time to get ready

[stuck mist]

riseup

[inner lantern]

U need to connect through port 3333
@brazen sonnet i tried that but same result

Http is open on 3333 but when browsing its giving me this error

[wheat fractal]

are you connected to the vpn

[inner lantern]

Yess

[wheat fractal]

did you run the vpn script to be sure

[inner lantern]

I can pin i can scan

*ping

[floral remnant]

Hey there, the Hashing-Crypto 101 room has a broken link in task 6 which is required for the first question...What's the SHA1 sum for the amd64 Kali 2019.4 ISO? https://cdimage.kali.org/kali-images/kali-2019.4/
https://tryhackme.com/room/hashingcrypto101

[eternal summit]

@floral remnant They are still available

You have to go find them

[floral remnant]

Oh yeah...I got them

Just wanted to let you know about the broken link!

[eternal summit]

Changed to http://old.kali.org/kali-images/kali-2019.4/

[rugged marlin]

In Upload Vulnerabilties, overwrite.uploadvulns.thm is broken or cannot load. I am connected to thm vpn.

btw

[wheat fractal]

did you add it to your etc/hosts file

okay

[rugged marlin]

I'll try anyways

[wheat fractal]

it says it's mandatory

[rugged marlin]

I thought I already did

I have it in my /etc/hosts

Whoops

But still

[rugged marlin]

No worries, the echo thing didn't work.

LOL

[wheat fractal]

did you get it to work @rugged marlin ?

[rugged marlin]

Yes Thank you.

[wheat fractal]

okay good

[cobalt otter]

/room/hashingcrypto101, task 6, question 1
link to images reads one way but links differently, goes to cdimages.kali.org rather than old.kali.org

[dusky junco]

Updated this for you @eternal summit (::

[eternal summit]

@dusky junco I already did this

Last night.

[dusky junco]

Oh, I tried it at the timestamp above and it did the same 😳 wasn't sure if you're still moving and wouldn't get the second it took this weekend (:

[sinful island]

https://tryhackme.com/room/haskhell, when i try to upload .hs file it returns internal server error

[eternal summit]

I think that's probably an error on your part, have you tried redeploying it?

[sinful island]

ya i do

every time it returns error 500 code

[inner halo]

I am facing connectivity issues in simple ctf room

[rustic stump]

What kind of "Issues"

[inner halo]

Ip address is not connecting

Ping scan not working

Nmap,gobuster nothing works

Connected with Openvpn :)

[rustic stump]

Have you tried the basic connection troubleshooting ? (Type !vpnscript in #bot-commands
Does any other machines (Except Simple CTF) works for you ? If yes, let's s continue in #site-support
Can you visit https://10.10.10.10

[wheat fractal]

So i've been told to report advent of cyber I bugs here. AoC Day 24, task 1 is possible, while task 2 is impossible to answer. Let's focus on task 2. "Read the contents of the /root.txt file" task description says. Since I have wasted my time soo much trying to find way to complete this I eventually looked 2 different writeups for this challenge. The reason task 2 is impossible to answer is because there are no ways to execute code or to somehow inject JS shell and then through LFI to pop it for us. The creds found in database lead nowhere. The log file contains no 'root.txt' neither the final answer for task 2 which i remember is 'someELKfun'. Therefore task 2 is impossible, which means it has a bug. Correct me if i'm wrong.

[topaz thorn]

I don't think there is anything wrong with that task I thought it was only the Hydra task that was bugged and if it is then it most likely will be fixed after the upcoming AoC2 as CMNatic said it was on the top of his to do list

[molten willow]

Is this correct or nah?

[eternal summit]

Is what correct?

When you're posting here, you need to post the room name and hopefully the task and question number so that someone can fix it

[molten willow]

Oops sorry

Intro to windows room & task 4

[eternal summit]

Ok, what about it?

[molten willow]

Windows comes equipped with two command-line tools:

Yet 3 are mentioned. I wanna know if the 3 mentioned is a 3rd party tool or sumn

Of if it’s intentional

[eternal summit]

Yes, they're all correct

I'd assume the number is a typo

Windows Terminal is an optional download at this point I believe

[molten willow]

Ahh gotcha & thanks

[eternal summit]

That was really something you could have researched via google.

Before reporting it as a bug

[molten willow]

It’s the typo I was trying to verify

[verbal sedge]

Maybe it means these are the Command line tools from which two(CMD/Powershell) come pre installed?

[molten willow]

Or not

[molten willow]

This is more clear

[wheat fractal]

Hydra task isn't bugged. The hint about that challenge is clearly wrong.

[topaz thorn]

It is

[wheat fractal]

So the hint is 'If you've tried more than 30 passwords from RockYou.txt, you are doing something wrong!'

[topaz thorn]

That’s why they get told to do the standalone hydra room as they have the same flags

[wheat fractal]

So this is the password for molly on her website. At line 905677, while the hint just bamboozles you into thinking you're doing something wrong.

[eternal summit]

Yes it's bugged seeing as it breaks the 5 minute brute force rule. Yes it's known and being fixed.

[high palm]

Network Services 2 room question 2 hint What does your ' the 'Operating System do to access a physical drive? this hint has grammer issue

[obsidian flame]

@mystic ruin no need to DM me. You can just ping me in a room :)

What's up?

[tiny ginkgo]

Hello, In the room https://tryhackme.com/room/ccpentesting an opening parenthesis also got into this link to LinEnum which is making the link invalid.

[mystic ruin]

Hey there @obsidian flame , the credentials do not work.

The login fails

[dusky junco]

Heyo @high palm thanks for reporting. Updated...please refresh in your browser

I've also just fixed this @tiny ginkgo give your browser a refresh, ty!

[mystic ruin]

@obsidian flame the actual password is Infinity121. Please fox this on the information! Just found it with random tries.

[obsidian flame]

Yeah that's what it says in the tab too

if you ctrl+c/ ctrl+v it works

[mystic ruin]

I thought the * was part of the password. 😫

I am doing the room right now.

[obsidian flame]

oh, spacing, that's my bad

[mystic ruin]

Thanks for the great room!

[obsidian flame]

no worries, i'll fix the spacing now

[mystic ruin]

Yes, that is wat confused me, the space.

[obsidian flame]

owo

have a look now and let me know @mystic ruin (after you refresh)

[wheat fractal]

Revelant room got this "ping 10.10.102.215
PING 10.10.102.215 (10.10.102.215) 56(84) bytes of data.
From 10.10.66.240 icmp_seq=1 Destination Host Unreachable
From 10.10.66.240 icmp_seq=2 Destination Host Unreachable
From 10.10.66.240 icmp_seq=3 Destination Host Unreachable
From 10.10.66.240 icmp_seq=4 Destination Host Unreachable"

[twin tapir]

its a windows machine it more than likely doesnt respond to ICMP requests

[wheat fractal]

oh !

and so for nmap that doesn't work to ?

[twin tapir]

nmap relies by default on a ping scan to check the host is up

if the machine does not reply to ICMP requests then it will think its down

[wheat fractal]

ok tanks i will try the help room

[prime walrus]

https://tenor.com/view/scott-dude-what-confused-gif-14850522

[prime walrus]

Is there a way to get attackics fixed .

[north gyro]

image link is broken

[wheat fractal]

Room: Hardening Basics Part 2. Chapter 3 Intro task is collocated in the wrong position

Is at the very end of the room instead I think it should be as first

I am talking about Task 14 "~~~~~ Chapter 3: SSH and Encryption ~~~~~"

Just a typo in persistence 1, task 2 -> ...and LPORT is the port...

[obsidian kiln]

@clear fern

[clear fern]

What

Oh I see

Wtf

The task manager is always doing this to me

I'll fix

[twin tapir]

Task manager do be wack

[spiral abyss]

any idea why in buffer overflow room everytime i fuzz oscp.exe the machine close?

[eternal summit]

#room-help

[wanton charm]

Yo im in the OWASP juice shop room and downloading the package.json.bak doesnt show the flag

Yes i tried turning of burp

anyone know what gives?

[eternal summit]

#room-help

[wheat fractal]

Not a bug but I found this in the Kenobi room!

There's a typo under the Enumerating Samba for Shares tab where it says "refereed to"

[dusky junco]

Thanks @wheat fractal I've resolved this now (:

[eternal summit]

Upload Vulns Room - Task 8
Might be good to have a hint so that people know not to add the - in front of commands

[topaz edge]

On the Nmap room, the version should be updated. The answer and the actual version of port 22 are different.

[lethal dagger]

Room Post-Exploitation Basics needs update

set up after run neo4j console is compulsory. default credential won't work anymore

[obsidian kiln]

@twin tapir

[obsidian flame]

saw that

[twin tapir]

@lethal dagger I’ll take care of it when I get a second which honestly how my schedule is right now won’t be until the new year. Bloodhound just had a big update so I’ll work on updating it

[wheat fractal]

Not sure if i'm in the right channel but about the Docker Rodeo room, in task 5 question 2 we can input a wrong registry name, and it works (i did not tried with the valid one).

[acoustic fjord]

@wheat fractal refresh the page, I think it might be just the answer tolerance playing with you

it sometimes accepts answers that only slightly differ from the proper one

[wheat fractal]

Refreshed, and still good

I left the room and rejoined it to confirm

[acoustic fjord]

not really bug, it's just answer tolerance

[wheat fractal]

Wrong channel then, sorry

[acoustic fjord]

and the normal answer gets accepted properly :)

nah, not a problem

[lethal dagger]

thank you! looking forward to that

[west flax]

Hi,
I've reason to believe that there is a bug in this question over here.

https://tryhackme.com/room/networkservices# Task 7

I was able to run nc -lvp 8012 on my shell and establishing the reverse shell and capturing the flag... however that answer doesn't work on the app.

[topaz thorn]

look at the previous question

It wants you to use that port

[west flax]

Ah I see...

thanks

Thought for some reason I had to enter the port of the target machine, misunderstood what was actually done before then

[unique jasper]

I need help

Anyone on?

[topaz thorn]

Ask your question

[unique jasper]

Doing the OWASP room rn.. cant seem to submit this answer

[topaz thorn]

Try '

[unique jasper]

Sure

I did try that.. still gave me the same issue

[eternal summit]

#room-help

[unique jasper]

I thought this could be a bug.. my fault

[trim zephyr]

i think i found a bug in the owaspjuiceshop room. Task 4 Question 1.

i found the password can login but I dont get a flag. and looking at the score-board page i cant see this chalange.

[glad kettle]

When answering a question, there is a few second delay in which the room takes to respond if said answer is correct or not. As you can see here, there is no answer written because i had time to delete it before the room responded to my answer. (-n) I am assuming this applies to all rooms or it has something to do with my connection.

[glad kettle]

please lmk if anyone is able to do the same thing

[obsidian kiln]

@glad kettle it's because it's all done via AJAX. i.e. it's asynchronous. You have until the web request comes back to change the answer

But

It's client side only. Refresh the page and you'll see the correct answer is back again

[glad kettle]

ahh i see

thanks for the response

[obsidian kiln]

You're not actually changing anything. The correct answer is sent off to the API the moment you press that button

Np 👍

[glad kettle]

👍 understood

[trim zephyr]

have found a bug in the rpnessus room. task4 last question. this is my scan.

but is expecting Apache/..**

[wheat fractal]

the anwser is listed as one of the vulnerbilities

[trim zephyr]

in the basic network scan I only have SSH vuln's

found it.

its in the apache HTTP server version.

very confusing to be honest

[twin tapir]

@trim zephyr that question is confusing, just wait for the scan to finish. I also know that the room is under active updating rn

[trim zephyr]

Good to know that it is updating. Some questions did not work with the latest version of nessus. But the manual was to the rescue.

@twin tapir you have any idea for the bug message I made for the owaspjuiceshop?

Would love to finish that room so I can finish that chapter of the beginner pathway.

[plush urchin]

Hey guys, found a possible error in room "Network Services 2", task 2, last question.
Where it asks for latest NFS version, the defined correct answer is different than the actual microsoft docummentation written here https://docs.microsoft.com/en-us/windows-server/storage/nfs/nfs-overview

Let me know if I'm correct or is there somewhere else I can find this information.
Thanks!

[eternal summit]

The documentation there is wrong, if you google "latest nfs version" you'll see that

The documentation just shows support in different versions of windows

Doesn't show the latest version of nfs

[plush urchin]

ow nice! thanks!!

[mystic ruin]

Problem solved!

[obsidian flame]

Good good

[cobalt otter]

tasks are out of order in https://tryhackme.com/room/hardeningbasicspart2. Task 14 should be task 2 and task 2 should be task 10. Basically at the moment the intro to chapter three comes after chapter 4 and the quiz for chapter 3 come before any of the content for it

[mild rapids]

I think I found a bug. in the Network Services room in the FTP part, there is a question about how many ports are open. Using both rustscan and nmap it only shows a single port, 21, to be open. The answer there is 2 however
Link to the room: https://tryhackme.com/room/networkservices

[eternal summit]

Arguments?

[mild rapids]

nmap -A -p- IP only returned 21/TCP

rustscan -a IP -u 5000 only 21 as well

[eternal summit]

@mild rapids How long have you given it to boot? because it seemed to take about 5 minutes to get FTP up which is weird

[mild rapids]

I think it took around 2 min for me ? maybe a bit less

[eternal summit]

@mild rapids A little later, it has the correct number of ports open

@dusky junco I think this needs a resource boost, but I also think it shouldn't be running a webserver at all and that will slow it down

[trail merlin]

Hi I think there's an issue with OWASP Juice Shop room, task 7, question 2. I've tried repeatedly to generate the flag following the instructions and it will not generate. No issues with question 1 and 3.

[astral shoal]

some of the room seems to be broken

unstable connection

[timber bone]

This sounds like you having vpn problems

[green charm]

Hello
Is today's advent of cyber 2 challenge no more available ?
Or it's just me ?

Oh sorry, I just saw the dedicated channel

[wheat fractal]

Hello, the https://tryhackme.com/room/catregex room is a bit confusing. An example: Exercise 4 with the question:"Match all of the following filenames: File01, File2, file12, File20, File99"
I found the correct answer. The answer also agrees with File23 or file42 ...
The question is not well done. Suggestion: "You are looking for a pattern for the following combinations, the minimum is 1 and the maximum is 99.

[obsidian flame]

@frail vigil something for you? (you got mail)

[dense rapids]

@clear fern y revenge machine server is too slow.. idk y its happened to me

[clear fern]

It shouldn't be slow. It's had it's resources increased a few times

[dense rapids]

Owww. I tried to end this machine but I cant type keys .like laggy server every 10mins its happened to me

Terminal stuck and works after every 5min to 10 mins

[teal barn]

In the Breaking Windows Throwback is marked as free but is paid.

it's a mistake

[eternal summit]

Skidy and Ashu are aware

It's because it's not a subscriber room

[frail vigil]

Of course it agrees with File23 or file42. As I've said many times in the help channels today, you have to be specific but not too specific. In this case, that means being specific enough to match the filenames, without formulating unnecessarily long and complicated expressions that will match only the things that the task is asking. Your proposed alternate question doesn't help illustrate this point. You still have to wrap your head around charsets and repetitions and use those together to get the answer. Also, "minimum" and "maximum" are programming concepts. There's no way to do what you're thinking in regex.

[wheat fractal]

"I've said many times in the help channels today" <- That is enough argument that the task is poorly formulated. That is my opinion and therefore a bug report here.

[frail vigil]

No it's not, because this isn't the only question in the room, and frankly not one of the questions most people had trouble with. Don't get the impression that I'm not open to feedback because I am, but your suggestion is just not a good substitution. I know some of the questions aren't clear enough and I'm trying to find them all to fix them, based on this community's feedback. But if you check the help channels, not all feedback was helpful or constructive.

I'm still amending some stuff where I think it's necessary and I'm going to try to add notes or explanations where I can, not only to hint to the answer but also to explain the proper mindset for regex.

[wheat fractal]

Suggestion for: "Match all of the following filenames: File01, File2, file12, File20, File99" -> to ->
"Match all of the following filenames: File01, File2, File12, File20, File99. Other numbers are also possible ..."

That can also be a hint (Other numbers are also possible ...)

[frail vigil]

The point isn't to find an expression that matches only the things that I'm listing, or whatever else your expression could match. You literally used wildcards in the previous task. The point is to find an expression that's specific but not too specific, easy to write and read.

If someone has never encountered regex before, it's natural to find this at least a little hard, but using regex in real-world scenarios is equally hard or more. My point here is that in some cases, it's not only the room that is hard, it's regex in general.

I've added some more notes to help in the second task. you can go read them if you like.

[main plaza]

room linuxctf : once the room is 100% completed, it won't mark the room as completed.

#site-support message

[rigid cargo]

https://tryhackme.com/room/webfundamentals
Syntax/type-o on Task 5 -> Post -> Help
< should show up as <

[eternal summit]

Site Bug. I've asked Skidy to fix this as I can't fix it myself. Might give it a second go once the Markdown editor is ironed out.

[weak fox]

This is what the shell task 11. It's not a selectable bit of text either

[mystic ruin]

@tough linden in the Windows PrivEsc v1.0 I think I have found a bug.

Winlogon is disabled, so there is no default password set in order to complete Task 9. Can you perhaps see to it and confirm if there is indeed a problem?

You can see here that AutoAdminLogon is set to 0 (disabled).

This confirms it.

I could only retrieve the password with Mimicatz. I think there is a problem with this task.

[frozen sun]

Hi! There's a spelling mistake in the new Advent room. It says
if HTTP is stateless, then how to login systems work?

I think It was meant to say "how do login systems work"

[dusky junco]

Good find, fixed this (: @frozen sun thanks

[frozen sun]

np!

[timid wave]

Room stuck on loading, any tips?

[static dock]

Looks like there might be an issue with the Blaster 1.2 Room, Task 3. Hint suggests looking at browser history to find recent cve article. However in my machine it doesnt have anything that looks like whats in the writeups, Any ideas?

[obsidian flame]

https://discordapp.com/channels/521382216299839518/522158539129618453/744162487103914015 hope that helps

[outer sonnet]

@frail vigil in the regex room, i think both "Match "username: " in the beginning of a line" and " Match all of these emails while also adding the username and the domain name (not the TLD) in groups (use \w): [e-mail], [e-mail], [e-mail]" are broken?

[teal barn]

https://tryhackme.com/room/blaster - Task 2

How many ports are open on our target system?

The answer is ||2|| but when you do an nmap scan you find 15 open ports.

[frail vigil]

broken how?

[outer sonnet]

how do I add spoiler tags?

[teal barn]

||spoiler||

[outer sonnet]

|| spoilter ||

ok

|| the "Match "username: " in the beginning of a line" should be ^username:|| your answer has two trailing spaces

Notice the answer mask has 2 characters at the end

[obsidian flame]

that is something related to windows being windows, sometimes it opens more ports than it should. Some people tend to avoid nmap port related questions

[outer sonnet]

on the second one the " Match all of these emails while also adding the username and the domain name (not the TLD) in groups (use \w): [e-mail], [e-mail], [e-mail]" you need to be way more clear what you expect for the answer as there is so many possibilities. ||(\w+@\w+|username@domain).com$|| That answer is probably the closest to what I think you are asking?

[frail vigil]

cause that's not the answer. take another look at what's inside the quotes.

[teal barn]

between ||2|| and 15 there is a big gap, usually it's because room create launched the scan on top 1000 port when you scan with -p- but here even with top 1000 you find more than ||2||. The firewall must be disabled.

[frail vigil]

no, very far from it. 1. you don't need to specify EOF. 2. you put everything in one group, that's not what the question says. 3. there's a logical OR there, for some reason.

[outer sonnet]

||alright I added a \s and obviously that works, but wow that is unclear||

[frail vigil]

yeah, I've had a few like this, I'm going to add a note about it

I mean, the question isn't clear enough cause the space was hard to see

the answer format should be an immediate giveaway 😛

[outer sonnet]

your last question, even with your expanded explanation is still not clear on what is asked

[obsidian flame]

yup, possibly at the time of writing the room it was done with a firewall, and after testing the firewall was disabled, as far as I am aware i heard that there is some work going in the background to update blaster

[frail vigil]

what part isn't clear?

[outer sonnet]

The grouping the username and the domain name. What do you want on that. Also, (but i might be stupid) what is TLD?

[frail vigil]

that is a google question. TLD means top level domain, in this case ".com"

I'm saying, username and domain name in groups.

you put something in a group with ( parentheses ), so you should start from the simplest possible answer

also I still don't understand why you put a | in there

[teal barn]

https://tryhackme.com/room/blaster - Task 3
Question

When enumerating a machine, it's often useful to look at what the user was last doing. Look around the machine and see if you can find the CVE which was researched on this server. What CVE was it?
Hint
||Sometimes looking at the history in a user's web browser can be very insightful||
The IE history is totally empty, when I look at write-ups there is an history where I have to look at.
This mean the deployment is buggued.

[eternal summit]

Known issue

Being fixed

[frail vigil]

so as much as some things may still not be clear enough, and I have to fix them, I think you also didn't read the task descriptions carefully enough

I'm changing the question to be clear about everything going in its own group

[outer sonnet]

||\w+@\w+.com$ is the most basic thing||

[frail vigil]

spoilers

[eternal summit]

@teal barn Ok, so?

[frail vigil]

why are you adding a ||$|| in the end?

[eternal summit]

it's a known issue

It's being fixed

Just because it's not in the known issues panel, doesn't mean it's not a known issue

[teal barn]

it's not listed a a known issue 😦

[eternal summit]

Only the room creator (And I believe some staff) can add known issues. The issue is on Dark and CMN's list of things to fix. Trust me on that.

[outer sonnet]

cos based on the answer mask, it needs 4 characters at the end. I can do it without it

[teal barn]

Sad 😦 (that CMN and Dark can't add issues)

[frail vigil]

no, you are forgetting something else

[outer sonnet]

||\w+@\w+.com||

is pretty much what there should be

[frail vigil]

I mean no, you're forgetting 2 things, not one

pls read the task description again

I don't want to continue this discussion here cause we've settled on the fact that the question isn't clear enough

I'm trying to make it as clear as I can right now

further discussion on this belongs in #room-hints or #room-help

[outer sonnet]

I have gone through it, but I guess I will wait till the room is updated

[frail vigil]

it is

I saved the new question

maybe you need to review the whole thing cause every task builds on all the previous ones

[outer sonnet]

I now have it, now that it is only 3 characters after the .

but I still feel it is very ambigious

[frail vigil]

I didn't touch the answer field, the asterisks are calculated automatically

I mean I didn't change the answer

pls post the question* you see right not and tell me which part is ambiguous in your opinion

I asked you to match it (validate it) with regex. why should I change it to anything?

it's part of the question, and not the part that was unclear before.

[outer sonnet]

added spoiler sorry 😦

[frail vigil]

yeah, you match username the same way you match the other 2.

[outer sonnet]

it seems as if the [e-mail] e-mail is special and thats why you need a group

thats why I had the or flag for it

[frail vigil]

I'm still not getting this part. Anyway, it's not special, it's one of the 3 things you have to match.

is the question clear (particularly the part about groups) now?

[outer sonnet]

it reads better

my suggestion is to have the following 3 example mails [e-mail] [e-mail] [e-mail]

so you don't repeat the keywords you ask for in the e-mail names

[frail vigil]

again, that's part of the question. #room-help #room-hints

[outer sonnet]

Alright, I have no other suggestions. The room was really fun apart from the questions I raised

[dusky junco]

I'll add this as a known issue on the room. But yeah, as Ninja said, it's on my to-do list as AoC begins to kick off

[ancient sundial]

AoC Task 6 Question 5 accepts a wrong cookie value as correct.

[eternal summit]

That's answer tolerance

[ancient sundial]

But then the cookie isn't actually accepted as correct by the webserver...so it's just confusing for a beginner room.

[eternal summit]

It's a problem with THM as a whole

Answer kinda needs to exist, imagine if you typed that whole cookie out by hand into the answer box and got a single character wrong?

[ancient sundial]

Erm, I would say that should be counted as wrong, since it wouldn't actually work on the site. But accepting the answer as "not a bug, is a feature".

It definitely threw me off until I popped open Burp to really really send that wrong cookie and saw the "wrong cookie" message. Then I tried lowercase and it worked 🤷‍♂️

[eternal summit]

The hint on the room also tells you lowercase

[ancient sundial]

Ah damn, helpful if I had looked at the hints, lol

Well, don't mind me, day 1 works great 😄

[surreal stirrup]

Hi everyone

Blue machine is buged

[-] 10.10.121.105:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.121.105:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=FAIL-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.121.105:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

I have already restarted several times and I cannot make the connection.

im using vpn

[vocal zinc]

!dark

[tropic flame]

DarkStar7471

Blue Room is not broken.

[vocal zinc]

@wheat fractal oh come on

[surreal stirrup]

mfs6

[vocal zinc]

thats gotta be #764491023127674910

@glad badger @remote hamlet

[surreal stirrup]

on AttackBox is function

[vocal zinc]

plzzzzz

show options and screenshot @surreal stirrup

[surreal stirrup]

on mfs5

[wheat fractal]

for a thousand years

I lay dorment

who dares ping me

@vocal zinc

[vocal zinc]

[wheat fractal]

how may I help you

[vocal zinc]

#room-bugs message

read up

it was beautiful

[wheat fractal]

blue room is broken

that is all.

[vocal zinc]

no.

pars.

come on.

[wheat fractal]

ok

let me rephrase

[vocal zinc]

parsssssssssss

i wanna be in quotes moreeeeeeeee

plzzzzz

[wheat fractal]

the eternal blue exploit is a fickle mistress and may or may not work sometimes

just restart the machine

and keep trying

[vocal zinc]

😭

😡

[wheat fractal]

Blob

[surreal stirrup]

one million restarted

[wheat fractal]

you dont ask to be in quotes

it just happens

[vocal zinc]

@wheat fractal

how is that not quotes worthy

[wheat fractal]

Blob

you dont ask for it

it just happens

your time will come.

[vocal zinc]

pars

you're mean

[surreal stirrup]

It's working on AttackBox, but over VPN it doesn't work.

[wheat fractal]

mendel

my friend

my trusted companion

the eternal blue exploit, and msf in general

just sometimes does that

[surreal stirrup]

on attackbox is msf5

[vocal zinc]

ok first, if youre using msf6 and havent updated then its broken

[surreal stirrup]

im using msf6 here

[vocal zinc]

second, your vpn may not be working

[wheat fractal]

then dont use msf6

[vocal zinc]

third, pars is mean

and idk why hes being mean to me

[wheat fractal]

msf6 is in active development, and honestly you should stick to msf5

[vocal zinc]

all i do is show him luv

[timber bone]

Blob no quotes worthy

[surreal stirrup]

msf6, not buggy

connection vpn is buggy

I do not know why

The script is the same.

[timber bone]

Attack box may have different version of metasploit than your machine

Vpn is not buggy

[surreal stirrup]

yep

attackbox msf5

here msf6

[timber bone]

So downgrade it

[surreal stirrup]

On my VM Kali also does not work with msf5

[serene geyser]

Hey hopefully this is the right place to post this
I just completed the first challenge on Advent of Cyber 2
I go to click on Certificate and says I haven't completed it?
Anyone else run into this issue?
Sorry for big post
https://gyazo.com/ba3e9c6995a504b793e129e527454d6c
https://gyazo.com/826a655589ed37f9a4fb524c63de3aab
https://gyazo.com/4409db48b86822412e5d135c5eb1f761

[vocal zinc]

there is a task released every day until christmas

you cannot complete the room until the 25th

[serene geyser]

ohhhhhh ty

[vocal zinc]

its not.

[remote hamlet]

I don't have that kind of power just yet, bl0bby. Sorry :(

[vocal zinc]

[wheat fractal]

Hey in advent of cyber 2 where it is asked to enter santa's cookie . I entered cookie of random user still it get accepted as correct answer

[vocal zinc]

answer tolerance

[wheat fractal]

huh @vocal zinc ?

[vocal zinc]

Refresh and you’ll see the cookie has changed to the correct one

This is due to answer tolerance

[wheat fractal]

is it good idea to have answer tolerance?

its completely different answer

[eternal summit]

Yes. Imagine if you had to type out that final flag by hand and you got a single character wrong, that'd be hell to fix.

[wheat fractal]

oh gotcha

[twin bay]

Due to the leniancy of flags, the advent room accepts the incorrect hex value (Using S instead of s), whilst the site only accepts "s"
As such
2253616e7461227d (Capital S) is accepted, even though you need
2273616e7461227d (Lower case s)
Note the 3rd character

[obsidian flame]

That is the answer tolerance and it has been raised countless of times

[tiny ginkgo]

In the room https://tryhackme.com/room/lfibasics THis question expects No as an answer but The home page can be included using the lfi vulnerability just like the previous part of the walkthrough. I think the home.html file should be deleted from the html/ directory.

[wheat fractal]

not really a bug but little grammar typo in task 3 of linux fundamentals 3 "their" instead of "they're"

[elder fog]

this room doesn't want to work with browser attack boxes: https://tryhackme.com/room/furthernmap

[twin bay]

Not sure if it should be counted as a bug or not, but the Blaster rooms Remote Desktop session is ALARMINGLY slow - The boxes CPU is perma-capped at 100%, with any action taking 30+ seconds to do

[obsidian flame]

i guess you are not a subscriber?

[twin bay]

I am not, but taking 5-10 minutes to login, and a minute to do almost anything is a bit absurd

[obsidian flame]

Yeah, it's due to the fact that Windows boxes most of the times require extra resources to even work at bare minimum, but depending on the box you can always just simply evil-winrm to them or powershell

[twin bay]

Whilst I normally would, the room specifically requires remote desktop :/

[obsidian flame]

some of the boxes already have been booted with more resources, some of them have been missed. I know that blaster is in the works with CMN

[twin bay]

I did this box the first time it was released - It wasn't nearly this slow

[obsidian flame]

so it should be updated in the near future, that's what i know for certain

[twin bay]

CMN?

[obsidian flame]

CMNatic

[cursive idol]

Hey guys, maybe this is already a known issue, but just in case, looks like the ssh version of the attack box is different that what it takes as the answer, the nmap room still takes 6.6.1p1 as the correct answer which i think is outdated.

[zinc creek]

there's a typo in question 1 / task 21 in OWASP TOP10

[acoustic fjord]

I don't see a typo there, refresh the page and check if the typo still persists. It might just be answer tolerance accepting a slightly different answer from you

@zinc creek

[zinc creek]

the typos are the first 3 * in the answer, it's supposed to be 3 words, not 4

[acoustic fjord]

the full name is 4 words

not 3

[zinc creek]

just checked.... sorry my bad i didn't see, that it autofills "the" ^^

[acoustic fjord]

🙂

[zinc creek]

i searched for 20min about james and the sun because of these 3 * xD

[stone galleon]

is the advent of cyber room broken?
I have a valid cookie (I know because it was accepted), but it won't load the flag.
Also, I have another answer that I am confident is valid, but it isn't accepted.

[timber bone]

answer tolerance can accept slightly wrong answers

the username in the cookie needs to be all lowercase, thats probably your mistake

[teal barn]

@dusky junco What is AoC ?

[dusky junco]

Advent of Cyber - the event that's going on atm (:

[ruby swift]

adventofcyber2 / Task7's link is a lil drunk 😄

[dusky junco]

Thanks, will resolve

that pesky new task editor

[compact crescent]

Adventofcyber2/task7 spelling is off

[dusky junco]

This has been fixed, refreshing should update your view (:

[fringe geyser]

not really a BUG but a typo

task 5 on the advent "The Story" part
"Please note, tasks are released daily and will vary in difficult"
should be
"Please note, tasks are released daily and will vary in difficulty"

[hidden vault]

Hello, not really a bug, just a difficulty I am experiencing with one of the beginner paths. If someone would like to help, I will be happy to share

[eternal summit]

Probably best to use the help chats if you're struggling with a room?

[hidden vault]

Oh, sorry, I didn't saw that there was a chat, specifically designed for that

[mystic canyon]

found a typo on AoC2 : At the bottom of the dossier is a stick note containing the following message

stick = sticky

[dusky junco]

Thanks @mystic canyon updated (:

[crimson dust]

In Tor room the flag cannot be obtained because the provided onion link is dead

[dusky junco]

@next bluff This is yours IIRC?

[next bluff]

The link is working, just try again

Re-launch the browser

Or establish new connection

[dusky junco]

Sorry, can't check for myself atm otherwise I would before pinging

[wheat fractal]

Physical Security Intro -> the Video in the Introduction is missing.

[sonic remnant]

Hi!, guess I've found a bug in https://tryhackme.com/room/catregex Even the Answer is shown as correct, there's no match in "Cat" for that answer. Q: Match all of the following words (use the * sign): Cat, cats, catsss A: cats* < Correct, but NOT Correct

[frail vigil]

what do you mean not correct? @sonic remnant

[sonic remnant]

Cat (in uppercase C) is not a match for cats*

[frail vigil]

I just tried it and it's not being accepted. In any case, this is not a bug. THM allows you to make some small mistakes in the answer field, so if you posted something else, this is what probably happened. Refresh the page once and tell me what you see in that answer field. But let's continue the discussion in #room-help

[sonic remnant]

mmmmm ... after F5 the page it changed.... Now the answer is correct! magic.... May be a double submit bug then? jaja.. no worries. Not a big deal.. thanks!

[frail vigil]

It's not a bug. Like I told you, sometimes small mistakes can be accepted. But then when you refresh it shows the correct answer.

[sonic remnant]

I see. Oka, thanks again.

[wheat fractal]

I think there might be a potential bug in the nmap room. More specifically, in task 14, the user is supposed to use a XMas scan to scan the deployed machine. Such scan indicates that the machine is offline (even with the -Pn flag). If I use a regular tcp scan, however, it does give me the results I expect...

[timber bone]

does it says the machine if offline or it says the ports are filtered?

[visual pasture]

I think one of the rooms need to be updated (subject to correction)

[eternal summit]

It doesn't

Make sure you're looking at microsoft, not facebook

You're looking at facebook

[visual pasture]

ohhhhh

lol

[eternal summit]

It says look up microsoft 😉

[visual pasture]

your right !

my bad im watching tv and listening to a podcast 😆

[clever hornet]

owasp juice shop room - task 7, question 2..
executed the stored xss but doesn't trigger a flag.

[lethal dagger]

Room Find Command https://tryhackme.com/room/thefindcommand is broken

HTML not even redering correctly

<span style="font-weight:normal;">F</span><span style="font-weight:normal;">ind on the page direclty

[wheat fractal]

If I do the xmas scan it tells me its offline. If I do the tcp it tells me the ports are filtered (reason being no response)

[lethal dagger]

it might even be a security risk

[wheat fractal]

I dont know exactly what I changed (perhaps redeploying the machine), but things work as expected now...

[split pebble]

when using wpscan in the Mr.Robot room im getting the error "SSL peer certificate or SSH remote key was not OK"

[molten heron]

im currently doing the blue room and when i try to run the enternal blue exploit it fails not matter what. All my parameters are correct. How do i solve this?

[twin bay]

adventofcyber2 - Task 7 (Day 2)
We then have the resource that we're selecting -- in this case that is the homepage of the website: index.php. As a side note, all homepages must be called "index" in order to be correctly served by the web server without having to be specified fully. - That's just blatantly incorrect. nginx has an index parameter so you can name your index page whatever you want.

[wooden atlas]

Adventofcyber2 I'm on day 2. I deploy the machine but it's not responding. I've tried pinging to the machine ip still nothing. Can anyone please let me know what to do?

I'm using openvpn connecting using terminal

[eternal summit]

#site-support

[crimson dust]

@next bluff FYI

[next bluff]

check the hint

[tame pond]

Network Services 2 room, on deployed VM, home share with cappucino folder doesn't have any files within the folder, appears an SSH file or 2 should be there

For NFS excersize

[verbal prawn]

is it a bug or what about the advent room Second challenge ||i got access to the upload page with an empty value : ?id= ||

[past orbit]

I cant join advent cyber 2

When i press join room its reload site but no thing happen

[vocal zinc]

log out and back in and try again?

[silver dust]

Room:Nessu Task4:What web server type and version is reported by Nessus?
my scan shows 2.4.7

but that is not the answer

[past orbit]

I still have this problem

[vocal zinc]

@lucid oasis

[obsidian kiln]

Hey, you're meant to be performing a pentest on it -- no one ever said there was only one vulnerability 😛

Think of it as an easter egg

[verbal prawn]

ow thats niceee

[floral remnant]

*Christmas egg

[crimson dust]

tried everything site is not reachable for some reason can you doublechceck the onion url you have posted for the room ?

[next bluff]

Yes, it is down so that’s why i’ve put a flag in the hint

i am going to replace the website soon

[crimson dust]

sorry

will have a look at it

[next bluff]

alright

unfortunately I have no control over that onion website so i need to find a new one

[crimson dust]

this is true

[past orbit]

State line is there and iam not in room and cant join !!?

[wheat fractal]

Hi. Found a bug (or missspelling)
Room: room/networkservices2
Title: polomysql
Task 9 Enumerating MySQL
Run the exploit. By default it will test with the "select module()" command, what result does this give you?

(but module mysql_sql in default has "select version()" ) and answer is reqiured from this module <-- not 'select module()'

[granite prawn]

because it stays charging like this

[wheat fractal]

Hi
I'm trying to achieve the room Nessus. I have a problem when I try to validate the answer to the following question "What web server type and version is reported by Nessus?" in task 4. I checked the version Nessus found with nmap but I can't validate my answer 🙂

[glad badger]

Please re-post in #room-help @wheat fractal

[wheat fractal]

I did it, thanks !

[junior grotto]

Nmap room, Task12. Read through this script... The hint popped up after I submitted a valid answer. Before that there was only the green option to submit

[vivid cargo]

there is a little bit error in day 4 fuzz table

it shows --hh Don't show for a certain amount of words
it should be -hw

[thorn cloud]

Hye a small typo
Advent of Christmas 2 [Day 4]

Instead of word it should be chars

[mortal lodge]

Same Problem like PoluxBin
The Complete Beginner Pathway is endless loading....

[jade plover]

Actually -hh means bytes.

[obsidian kiln]

(Chars and Bytes are the same thing, practically speaking 😛)

I have fixed the task, however. Thank you

[queen sphinx]

I'm not sure I agree that chars and bytes are the same. Conceptually it's a big difference; it's the same as saying a uint32 is a 4 byte array.

[obsidian kiln]

A char is (traditionally) a byte being interpreted as ASCII.
It's the interpretation of it, which is why they are practically the same, but theoretically different concepts

By theory, yes, they are different. In practice they're represented identically, to the best of my knowledge

Having said with, given the majority of website are now using utf-8 over ASCII, you make a good point, given it will be looking for characters returned, which are not necessarily just one byte long

[queen sphinx]

It's an interesting question though - a word should be a 2B array, if it's a strict interpretation based on CPU architecture

[eternal summit]

Word depends on architecture

It's different on x86 etc

[obsidian kiln]

^^

[junior grotto]

"Network Services" room, Task1 there is a redirect link for 'Learn Linux' which has been changed to private

[mental granite]

AoC Day3 one of the instructions is

Go to the BurpSuite application and click the Proxy tab, then click the button "Intercept is on".

But clicking the button "intercept is on" actually turns it off

[civic brook]

Intercept is often on by default, but if not you may need to turn it on

[mental granite]

yeah, it was on by default for me, but strictly following the instructions has you turn it off when it's meant to be turned on

[civic brook]

many times you may want to turn it off initially as it will catch every request, then turn it on for the page you want

[eternal summit]

If it's on, it will mean you need to forward every request

They'll still get to the proxy history with it off, and it means you get a streamlined experience

It's better to have it off

[mental granite]

sure but the very next line indicates that they wanted you to turn it on:

3. Navigate to your chosen website, as you're intercepting your traffic, you will see BurpSuite has held your request and will not forward it on until you tell it to. Let's go to our web application and submit your details into a given form, in our case its a generic login form.

i was just suggesting the wording might want to be changed for ultra noobs

🤷‍♀️

[wary arch]

Hey this isn't a bug perse but for intro to shells room for the question "How would we get socat to listen on TCP port 8080?", the answer was like "TCP-L:8080 -" but can it also allow "socat TCP-L:8080 -"? I kept trying various things with "socat" in the front. Where do I submit feedback like this? Is this correct channel?

[solemn totem]

Hi guys, already posted this in room-help but did not get any answer. That's why I'm trying it here. I've done the Blue room before but it's been over half a year and I wanted to do it again due to documentation purposes. I'm stuck in Task 3. I use the correct post module ||post/multi/manage/shell_to_meterpreter||, I set the correct option ||SESSION||, I run it and get the following error: [-] Post failed: Rex::Post::Meterpreter::RequestError stdapi_sys_process_execute: Operation failed: The system cannot find the file specified. I tried it on my Parrot machine and I tried it on the THM attackbox. Each time with a different victim machine. sessions -u 1 throws the same error. Can someone tell me what's with that error?

[hazy tiger]

@solemn totem You already have a meterpreter shell you can’t use that module

[solemn totem]

Then why does this task say to convert a shell to meterpreter shell in metasploit?

[hazy tiger]

It’s outdated

[solemn totem]

Oh that makes sense. Thanks! Maybe someone should update the room tasks

[woeful hawk]

I'm pretty sure there's something funky with https://tryhackme.com/room/owasptop10 [Severity 4] XML External Entity - Exploiting and the question What are the first 18 characters for falcon's private key (I'm attempting it from the attack-box, if it should matter). I've updated the payload used in previous question with the path to the private-key (my answer got accepted) and I get nothing back. I've checked writeups and they're saying this is what they did. I've tried getting other files (e.g. /etc/group) too but only /etc/passwd seems to return anything.

[vital drift]

Not a bug i got it right

[woeful hawk]

Weird, I'll try again later and I guess ask in the help channel if it still doesn't work for me

[junior grotto]

Adding to yesterday's discovery, today got another missleading redirection

Network Services room: Task3, there is a link "part of the Red Primer series here" -> (old nmap room) /room/rpnmap <private>

[high meadow]

A typo here "To do this, we're doing going..."
Hacktivities: Vulnversity

[wheat fractal]

https://tryhackme.com/room/agentsudoctf Task 3, question for SSH password accepts ||hackerrules|| even though the password is ||hackerrules!||

[teal barn]

https://tryhackme.com/room/adventofcyber2 - Day 5 - Spell error then -> than

@wheat fractal The flag validation system is case insensitive and will strip some chars like trailing whitespaces, etc. so maybe ! is too

[eternal summit]

I'm relatively sure it's case sensitive

It will just be a matter of answer tolerance

[teal barn]

@eternal summit I can totally assure you it's case insensitive

At least now, it may was not in the past.

[wheat fractal]

Aye all possible, the thing is that the password is in a sentence so I would just assume that ||the exclamation mark|| wouldn't be part of it.
I am not sure about the case sensitivity, as I never created a room and there might be options that deal with that, but I definitely used lowercase ssh when a writeup or so used uppercase SSH.

[eternal summit]

You do not have options regarding case sensitivity or answer tolerance

[teal barn]

Yes it's insensitive by default

[wary arch]

Where do I go to report typos in rooms?

[hazy tiger]

Here

[ruby swift]

adventofcyber / Day 5

[lusty lintel]

Nmap room - Task 14

I think here it should be 1000 instead of 10000 because scanning above 1000 I find more open ports

[eternal summit]

There's a difference between nmap's top 1k and the first 1000 ports.

[lusty lintel]

the task talks about scanning the first 10000 ports

and there are more than 5 in the first 10k

[river summit]

I've tried to enter another box and the website on adventofcyber / Day 5 isn't loading

[tiny ginkgo]

I think there's A typo here in Day 5's Task in AOC2 ROom. Shouldn't it be "Intercepting"?

[glad badger]

The website isn't loading? If so, did you use port 8000?

[glad badger]

Thank you for reporting this. 🙂

[dusky junco]

Resolved, thanks (: ^

[wheat fractal]

seems to be a bug in the day 06 challenge. zap finds 6 alerts. right answer is different. so not to spoil it

[eternal summit]

That's an old version of zap, I know this because the XSS alert there is deprecated @wheat fractal

[wheat fractal]

ok thx

[wheat fractal]

https://tryhackme.com/room/thefindcommand this looks broken (task 3)

[vital drift]

Whats broken@wheat fractal

[wheat fractal]

dat html

[vital drift]

@eternal summit

[eternal summit]

Why?

[vital drift]

The find room is broken

[eternal summit]

I'm a discord moderator

I moderate the discord

[vital drift]

Anyway usually everyone mention you

[eternal summit]

For discord moderation stuff, sure

For things that are totally out of my control? No.

[vital drift]

Okay sorry

[eternal summit]

Please remember everyone here is a volunteer

[vital drift]

How can I ffix the website uh?🤨

I though u could😜

[twin tapir]

@vital drift how is it broken?

[vital drift]

Look at the html code </> @twin tapir

[pearl sentinel]

Day 6 AoC2 - How to detect XSS? "You can lunch ZAP"

[dusky junco]

Thanks @pearl sentinel, food on the mind it seems - resolved (:

[finite walrus]

I have some issues with Day 6 too : Explore the xss alerts that ZAP has identified...... when i click completed -> Uh-Oh your answer is correct

How many types of XSS are there in the scan? ... i can not enter the correct answer .. field is empty and it is telling me correct answer

zap finds also 6 alerts but for it seems like 2 is the correct answer here.

[wheat fractal]

i think dat's cos only 2 of them are "red"

[finite walrus]

the last question i can not click completed

and previous question seems incorrect too 😄

okay -> last one seems fixed when i refresh

a bit weird but okay now

[dusky junco]

That question have been removed ,please refresh your browser (:

[finite walrus]

@dusky junco thanks for the fix 🙂

[mellow grail]

room cross-site scripting > filter evasion > Challenge 3 doesn't give us the flag when we bypass the hello filter with html encoding https://i.imgur.com/pp1fr2w.png

hum.. even with base64 encoding, i can trigger an alert with Hello but i don't get the flag, is that normal ?

[mellow grail]

got the flag with a very simple payload that doesn't even bypass the filter for the challenge 3 and 4 on this room

[timid wave]

https://tryhackme.com/room/learnowaspzap - task 9 the git clone link is a mess

[obsidian kiln]

Ay yae ay
@dusky junco. Gotta job for you

[dusky junco]

Aye I see it, if I save the task all the formatting is gone although

[twin tapir]

the next week is just going to be cleanup from this damn editor

[junior grotto]

trychackme.com/room/networkservices Task6, I reDeployed a few times and all the time all ports are closed from all 65535 possibilities

Using just a normal nmap -A -p- <IP> as its advised in the describtion

[eternal summit]

How long did you give it to boot?

[junior grotto]

Like 10 min

After the same results I reDeployed and still the same

[eternal summit]

It won't have changed

[junior grotto]

I get 0 open ports and this looks like a wrong answer

Smth is definitely broken which doesnt allow to progress

Ok, nvm had some ssh missconfiguration on my side

[vapid scaffold]

So we just post our room bug out in the open? Or is there a process for this specific task? (first time and all)

[eternal summit]

You make sure it's not just user error (assuming it's not a typo) and then just describe the problem here

[vapid scaffold]

Appreciated - and this may be a typo thing - and it looks like it might have gotten fixed now. Should be all good now that I review, it had to do with the (-) in one of the answer strings form today's AoC

[fringe geyser]

apparently its just me, but as mentioned in #site-support day 5 in the advent, the sqlite server keeps saying server overloaded for me, but works fine for a friend.

been like that from launch till now

--btw this is resolved, its just not clear what page you are supposed to use it on, and its implied its the page you were just using--

[wheat fractal]

in ''Buffer Overflow Prep'' room the script provide fuzzer.py and exploit.py are all full of error

IntadationError due to the web page.

add those "space" in the script please 😁

[fringe geyser]

did you try python2

[wheat fractal]

yes

its just a "space" error

i work out of it but that really add up stuff on the room

i saw old version of the website and that error doesn't exit because the code was well prompt

Error of the code provide

on the right is the code provide

[gleaming shadow]

Not exactly a bug, but probably a major pain-point, in the zthobscurewebvulns room, there's a tool that is recommended that uses python2. Kali no longer packages python-pip and as such the dependencies are no longer installable.

you can still use a manual exploit but it's trickier

[obsidian kiln]

@gleaming shadow I would suggest reinstalling python-pip. You'll thank me later.

[gleaming shadow]

doesn't exist anymore

[obsidian kiln]

Of course it exists

[gleaming shadow]

at least not on the kali apt repo

[obsidian kiln]

It's just not in the repos

Do it manually. It's literally a case of downloading a python script and running it with python2

[gleaming shadow]

ugh manually installing pip is a pain, I'll go look that up later

but python2 is dead.

[obsidian kiln]

curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py && python2 get-pip.py

Literally that easy

Copy and paste into terminal. Job done

L'il research goes a long way 🙂

@wheat fractal https://github.com/muirlandoracle/stack-bof-fuzzer
Give that a shot

[gleaming shadow]

am looking, but my googling didn't find that script on the pip docs

[wheat fractal]

i look

[obsidian kiln]

https://pip.pypa.io/en/stable/installing/

It's literally the main install page

[gleaming shadow]

I'm just blind

though pip will no longer support python2 as of Jan 2021

[obsidian kiln]

So it says.
Someone will come up with a solution. It's easier than converting all those bloody exploits.

[gleaming shadow]

fair enough, but it's still a problem

though I suppose this is why Java is technically back compatible to forever

[wheat fractal]

@obsidian kiln thx

[wheat fractal]

there is a typo in the AoC2 Challenge 7 Example 2 should be ip.dst == and not ip src == ?!

[obsidian kiln]

@dusky junco

[dusky junco]

Resolved a little while ago, give the browser a refresh @wheat fractal thanks (:

[wheat fractal]

ip in question 3 is also wrong

ah its also resolved 😄

should refresh first xD

[willow mist]

Is DevGuru Room unavailable? Because I can't reach it

@dusky junco

[narrow totem]

I found some bugs in " the find command " Room

I saw some html codes 👀 . So I reported

[eternal summit]

Yes, the room creator pulled it

[willow mist]

Oh, so will it be available?

[topaz thorn]

Probably not

[wheat fractal]

What's the matter with that room?

[obsidian kiln]

Which room -- DevGuru?

[eternal summit]

The creator pulled it.

[obsidian kiln]

Nothing is wrong with the room. It's just politics

[wheat fractal]

as always

[mystic canyon]

AoC day 6 task 5: somehow the answer got changed to a 2 when it should be 5 unless im just a dummy lel

if you change the question to say how many types of XSS then it would be 2 but the way it is worded now is a little miss leading but i see now why it is 2

[honest crescent]

eeeeh I got an issue with OWASP Juice Shop In room rpburpsuite. I got no request with set-cookies as I had closed the thing for a bit as the proxy failed, so I can't do the sequencer task as it does something with continues when opening

[wheat fractal]

not really a bug but to be complete the table of rights in Linux Fundamentals P2 Task 12 should start with 0 as no perm instead with 1

[frail vigil]

the admins are looking into that. in the meantime, can you pls add your pic in a spoiler since it contains a bunch of answers?

[eternal summit]

@mystic canyon it's specifics the alerts relating to xss

[wary arch]

Advent of Cyber 2, today's Wireshark task, there's a typo. If this is a bit confusing - I don't blame you, just bare with me here should be "bear with me".

[dusky junco]

yikers thanks!

[obsidian kiln]

Naw

CMN is just very very lonely

[frail vigil]

cmn if you're lonely just bare with me

[glad badger]

Barely. 😄

[glass iron]

In vulnversity every file type uploaded to /internal returns Extension not allowed

[eternal summit]

@glass iron All except the explicitly allowed type are rejected.

Not a bug, it's the intended behaviour

[glass iron]

Might want to rephrase Q1 on task 4 then? Leaves it rather broad for common file types that are blocked

[eternal summit]

Common file types. The context is webapp pentesting.

[glass iron]

shrugs

[lethal dagger]

Room agentsudoctf Task 4 the name of incident

Isn't it be more accurate to be https://en.wikipedia.org/wiki/Roswell_UFO_incident ?

plus task5 doesn't have the (Bonus)

[quaint thunder]

There is a small typo in today's advent challenge, Day 8 on bonus part refers on Day 7.

[round viper]

In Task 18 of ZTH: Obscure Web Vulns (https://tryhackme.com/room/zthobscurewebvulns), whenever you put in the edited token, it becomes unable to connect and forces HTTPS

[glad badger]

Fixed. Thank you for reporting. 🙂

[eternal summit]

@crystal iris #778305825797177374

[crystal iris]

you said to put it in #room-bugs

[eternal summit]

Not to you, I didn't

[crystal iris]

oh right, just checked, sorry about that

[frozen sun]

Hey

a minor issue

always, please sned your reccomendations

some spelling mistakes on the tbfc blog webpage

[mossy zinc]

hey guys, is it normal that part of the section 4 is later on respect the section 5?

https://tryhackme.com/room/linux2

[hazy tiger]

@dusky junco This is quite strange 😁

[mossy zinc]

ah, the binary (the final challenge is before the section 5)

[restive plover]

room easyctf 46635.py has syntax error

[sudden basin]

hey ika

i also have this problem

maybe someone can help us

❤️

[restive plover]

maybe

maybe not

who knows

[eternal summit]

Seeing as the script wasn't written by the room creator, that's not a bug with the room

Chances are you're using python3 when you need to be using python2.

@restive plover @sudden basin

[solemn topaz]

hey In Todays (Day 8) AoC there is a typo I believe.
range on Usage example is 0-1000 but on Description it is 0-100

[vocal zinc]

@dusky junco

theres actually just a good amount of wrong stuff there actually. The example will scan all the ports. What you guys mean was either nmap -p0-100 or the top 1000 ports

the -p- makes it scan everything regardless of the arguments you give it after

@solemn topaz thanks

[solemn topaz]

ohh, good to know. You're welcome

This will NOT make me love less AoC2 and THM 😄

[vocal zinc]

haha yes, everyone is human 🙂

it'll be fixed in a bit

@green steppe do you have these omnipotent powers to fix other people's rooms

[green steppe]

uhhh

whos asking

and for why

[vocal zinc]

I am asking

#room-bugs message

@green steppe for that

[green steppe]

ah so

i can edit tasks

but thats AoC

and its also not my job

so im not sure if Ashu would be happy with that 😛

[vocal zinc]

i pinged cmn but he's a busy boi

so i wasn't sure whom else to contact

so i contacted you

because luv luv

[glass iron]

The AoC Day 8 challenge references the Day 7 challenge but lists it as the Day 8 challenge.

As a result of Elf McEager managing to recover christmas in **"Day 8 - The Grinch Really Did Steal Christmas"**, TBFC's website has been restored for all the elves to visit.

[solemn topaz]

I am connected via VPN, but this placeholder looks like not changing to assigned IP address, like under 8.7 Additional Scan Types, 8.9 Challenge, 2nd question.

[eternal summit]

@solemn topaz Did you click deploy?

It's not meant to show your IP.

[solemn topaz]

yes, that's why I can see other places with a given IP

[eternal summit]

It's meant to show the target machine's IP

@solemn topaz wat

What you just said doesn't make sense.

@solemn topaz Click the deploy button.

[solemn topaz]

Hope this will make more sense now for you: 🙂

[solemn topaz]

I think there is one more typo.
-example is not the same (missing 3rd octet)
-I think nmap require 4 octets as fixed IP address or fixed range or at least * for octet ,

[dusky junco]

Thanks @solemn topaz will resolve now (:

Appreciate that!

Regards to the MACHINE_IP, that is a value that gets filled when you deploy an Instance in the room (and countdown for the IP address to display expires)

[dusky junco]

Thanks (: This has been resolved

[dusky junco]

thanks (: fixing - the curse of the fat fingers

[eternal summit]

i think the brackets are breaking it

Because it doesn't replace in the places with () around it

[dusky junco]

yuppp gonna give it a whirl

Oh this editor :< I'e got no idea

[solemn topaz]

@dusky junco wouldn't it be like a placeholder (something like $MACHINE_IP in code or whatever placeholder it is using) that fills an IP ? and would be similar to the one that is updating "MACHINE_IP tbfc.blog" in next sentence?
ps. great job on the room , Thank you

[dusky junco]

Ayy it's done it now 😄 it was trying to HTML encode for some odd reason

thanks for letting me know (:

[dusky junco]

That is quite odd aye -- I'll swap those tasks around 😄 thanks

[wheat fractal]

in "musical stego" room the task2 is buggy it require specific software. i try a lot of things to make a good qr code and the scan give me a error

is there a thing to go around ? or to fix that ?

[thick gull]

Ive tried every combination of answers here but none seem to be accepted. Thoughts?

[eternal summit]

@thick gull use the payload, then enter the flag you're given. This isn't a bug

[thick gull]

smh

[wary arch]

Typos in today's advent challenge We'll quickly gaze over the basics” of getting started with Nmap, the scan types, and the syntax for these types accordingly. I think you meant graze and there's random " after basics.
Thankfully, TBFC has a wonderful up-skill program covering the use of Nmap for ElfMcEager to enrol in."enrol" should be enroll.

The vulnerable Instance attached to this task by pressing the "Deploy" button at the top-right of this task/day missing period

In a pentesting situation, you'd be inclined to use a lower value such as whereas in a lab environment

"inclined to use a lower value where as in a lab environment", such as should be removed

[dusky junco]

taking a look, apogolies

"whereas should of be within" thanks my dude. Justdoing the rest

Wait I thought enrol was valid o.o

Ah British english is "enrol" american is "enroll" 😄

Perfect, thanks for spotting those out @wary arch much appreciated

[steep cedar]

Hey guys in the introtosearch room on task 2 the 5th question on the $6$ hash it doesnt allow the answer if there is no blank space at the end

[covert thistle]

In the Active Directory Basis room, (https://tryhackme.com/room/activedirectorybasics)
There is a bug in the lab, in that the lab refers to the cheatsheet for PowerView 3. But the version on the lab machine itself is 2, and doesn't take any commands from the cheatsheet linked in the lab. Looks like h4rmj0y created version 3 about a month ago, and the lab is 130 days old, so that's probably why it's got PowerView 2 on the box still. Users could download the new PowerView or use the v2 cheatsheet as a workaround, but I guess the room creator can decide the path.

[fringe geyser]

just a heads up that androidhacking101 has a LOT of grammatical and spelling errors
theres even an image of a slide that clearly has the red squiggly line under it

[fringe geyser]

"Command for extract apk"
had me stuck for a while
what they meant was the command to copy the apk from the phone
nothing is being extracted

[naive eagle]

In the hackerNote room, the walkthrough for using hydra has a problem: it can only bruteforce successfully on this box if the header "Content-Type: application/json" is specified for the post requests

[lime yarrow]

in the Android 101 it asks for the package name for Black Hat US (supposed to be found via play store) but that package is not available for EU citizens. The package name happens to be the same as the one for Black Hat Europe

[topaz thorn]

Refresh it will give you the answer

[lime yarrow]

@fringe geyser agree. It is not that well described. I am pretty stuck at "Tool for convert dex file to smali code?" Normally I would use the smali tool for that or d2j-smali but that is not accepted

[lime yarrow]

@fringe geyser did you manage to answer the question about the convert dex file to smali question ?

[broken forum]

Not sure if that's the right place, found a mistake in a table of the Intro to x86-64 room (https://tryhackme.com/room/introtox8664). This is what it says:
(Quad Word exists twice and the suffix of the double precision type should be d)

This is what i think it should be

[eternal summit]

That's not correct, the login API route accepts both JSON and form data. You just need to provide correct headers for whatever you send.

[honest crescent]

eeeeh owasp top 10 level xss has an issue

[lime yarrow]

what issue? I did it a few days ago and did not notice

[honest crescent]

I did something that broke it for a bit

maybe was burp it seems

Eeeeehhh juice shop shows the answers

@green steppe the answers of juice shop are largely visible above the questions/how to do it (as opposed to hints)

[green steppe]

ah

the room

not my job

[honest crescent]

yep

[green steppe]

@dusky junco this is your job

[honest crescent]

okay

[green steppe]

😂

[honest crescent]

lol

[safe pecan]

Is the kiba room buged because I've found the cve but it doesn't work. It doesn't execute the code

[eternal summit]

It's not bugged, try the other payloads. @safe pecan

[safe pecan]

Ok, thanks. Already tried 3 different payloads but they didn't work but will try more playloads then

[bitter onyx]

Not a bug but I think there's a mistake here

[obsidian kiln]

@bitter onyx What's the mistake?

Slightly inaccurate, tbf, given 6 is read/write

Which room?

[bitter onyx]

Linux: Local Enumeration

[obsidian kiln]

What's the code in the URL? @bitter onyx

[bitter onyx]

https://tryhackme.com/room/lle

[honest crescent]

But read/write should be the case

1 sec there's another room too

[obsidian kiln]

I blame Paradox

[honest crescent]

Ah NVM

Not entirely sure though