#room-bugs | TryHackMe | Page 20

oak mica Mar 18, 2021, 7:28 AM

#

good luck! also just a general tip, maybe default to the room-hints or room-help for a while, sometimes things that seem buggy are intentional!

#

(also ensure you read the entire documentation in case you miss a step and look like a goose honkpeace )

tribal pagoda Mar 18, 2021, 7:30 AM

#

Ok, thanks for the tips, yes, pretty new to THM. I found that sometimes you need to type singular/plural correctly to get it right, things to pay attention to.

#

got it now 🙂

obsidian flame Mar 18, 2021, 9:25 AM

#

tribal pagoda Ok, thanks for the tips, yes, pretty new to THM. I found that sometimes you need...

this depends on the answer tolerance really. if your answer is 90% correct it will accept it

twin bay Mar 18, 2021, 9:34 AM

#

https://tryhackme.com/room/vulnnet1 - The person who finished first - Zmiller2020 - Doesn't have any flags / tasks completed on the scoreboard

obsidian kiln Mar 18, 2021, 9:39 AM

#

@twin bay It's a caching thing. They didn't actually get the blood points -- they were just the tester for that room. The graphs aren't resetting properly

twin bay Mar 18, 2021, 9:42 AM

#

I was wondering how they managed to root the box in 6 minutes 🙂

agile void Mar 18, 2021, 1:38 PM

#

Hello, I had a problem in blue room , I found all flags but when i submit them it says they are wrong

#

any suggestions?

hazy tiger Mar 18, 2021, 1:38 PM

#

Screenshot?

agile void Mar 18, 2021, 1:38 PM

#

sure

hazy tiger Mar 18, 2021, 1:38 PM

#

You need to verify to post images btw

#

!docs verify

tropic flameBOT Mar 18, 2021, 1:38 PM

#

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

agile void Mar 18, 2021, 1:43 PM

#

the flag is in the screenshot

#

can i share it?

oak mica Mar 18, 2021, 1:43 PM

#

considering it doesn't work its probably not correct, so maybe spoiler it and share it 🙂

obsidian kiln Mar 18, 2021, 1:43 PM

#

Yes, we can delete it after 🙂

agile void Mar 18, 2021, 1:43 PM

#

ok

#

!docs verify

tropic flameBOT Mar 18, 2021, 1:43 PM

#

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

verbal sedge Mar 18, 2021, 1:44 PM

#

Follow the steps in that link ^

oak mica Mar 18, 2021, 1:46 PM

#

well, you are correct you need to copy the flag{} parts too

#

(most CTF's and flags on THM will have similar structures)

agile void Mar 18, 2021, 1:47 PM

#

I tried wwith {

hazy tiger Mar 18, 2021, 1:48 PM

#

Use the TryHackMe answer formatting as a hint on how your answer should look.

#

Symbols will show up in the answer format.

agile void Mar 18, 2021, 1:50 PM

#

i tried with spaces too

hazy tiger Mar 18, 2021, 1:51 PM

#

Look at the answer format.

#

Remove your answer.

#

It should say "Answer format: [symbols]"

agile void Mar 18, 2021, 1:52 PM

#

Got it

#

thanks 🙂

hazy tiger Mar 18, 2021, 1:52 PM

#

Happy hacking!

somber vessel Mar 18, 2021, 4:02 PM

#

I think this room is bugged https://tryhackme.com/room/uploadvulns. I'm on Task 11 I tried accessing my uploaded payload through the ||admin|| page and it always returns "Module not found", despite going back one directory level ../dir/file.extension

TryHackMe

TryHackMe | undefined

An online platform for learning and teaching cyber security, all through your browser.

austere ore Mar 18, 2021, 4:06 PM

#

https://tryhackme.com/room/uploadvulns this machine worked fine few hours ago, now it crashes instantly or almost instantly once you start running a gobuster attack on it, even with 2 threads or something pitiful like that. Few hours ago it could handle 200 threads just fine

#

I have rebooted that machine 4 times now, to no avail. Reconnected to THM network via Openvpn, cleaned my host file 4 times, nothing is running except openvpn and gobuster. No burpsuite, no proxy no nothing

warm maple Mar 18, 2021, 6:58 PM

#

hey, I think there https://tryhackme.com/room/linuxprivesc in "Weak File Permissions - Readable /etc/shadow " is a problem. Root user password *321 cracked by john and accepted pass is different *123 yell_cat

eternal summit Mar 18, 2021, 7:03 PM

#

warm maple hey, I think there https://tryhackme.com/room/linuxprivesc in "Weak File Permiss...

Refreshed?

warm maple Mar 18, 2021, 7:05 PM

#

eternal summit Refreshed?

yes

eternal summit Mar 18, 2021, 7:05 PM

#

Okay

#

Often people report answer tolerance as a room bug

warm maple Mar 18, 2021, 7:07 PM

#

I can show images, can I pm?

warm maple Mar 18, 2021, 7:10 PM

#

eternal summit Often people report answer tolerance as a room bug

oh you mean this is a tollerance..

eternal summit Mar 18, 2021, 7:11 PM

#

It's not

#

But refreshing was a way to check

light harbor Mar 19, 2021, 8:15 AM

#

In "CC: Pen Testing"
One question is for the flag to make a ping scan with nmap.
But "-sP" is not accepted

obsidian kiln Mar 19, 2021, 8:16 AM

#

-sP has been deprecated for years -- how old is your nmap?

light harbor Mar 19, 2021, 8:17 AM

#

v 7.91

#

Its still in the man page

obsidian kiln Mar 19, 2021, 8:18 AM

#

That's latest. It should be in the man page as an aside saying that older versions of nmap still use this

light harbor Mar 19, 2021, 8:21 AM

#

Googled it. Search in man page of nmap does not show a hit for "-sn".

obsidian kiln Mar 19, 2021, 8:23 AM

#

#

That is the latest version of the man page

light harbor Mar 19, 2021, 8:25 AM

#

I see. My version is from 2019. Doesnt get man pages update, when using "apt upgrade"? Im confused.

obsidian kiln Mar 19, 2021, 8:25 AM

#

#

They should get updated, yes

light harbor Mar 19, 2021, 8:26 AM

#

obsidian kiln

Yes. this one is not in my man pages. Okay, will have to check, why they did not update.
Thanks for your help.

obsidian kiln Mar 19, 2021, 8:26 AM

#

How odd. Np 👍

deep cedar Mar 19, 2021, 5:28 PM

#

whut ?

eternal summit Mar 19, 2021, 5:29 PM

#

deep cedar whut ?

Refresh

#

Answer tolerance

deep cedar Mar 19, 2021, 5:30 PM

#

eternal summit Answer tolerance

owo ok ^^

blissful lotus Mar 19, 2021, 8:14 PM

#

In room "Cyber Scotland 2021 " task #4 doesn't work (used site repairshop.sbrp is not available)
What can i do with that?

obsidian kiln Mar 19, 2021, 8:52 PM

#

blissful lotus In room "Cyber Scotland 2021 " task #4 doesn't work (used site repairshop.sbrp i...

Follow the instructions to add the site to your hosts file

glad plume Mar 19, 2021, 11:18 PM

#

https://tryhackme.com/room/attackingkerberos
In the attacking kerberos room, mimikatz gets deleted everytime i start a machine in the room

obsidian kiln Mar 19, 2021, 11:18 PM

#

@twin tapir room go borky

eternal summit Mar 19, 2021, 11:19 PM

#

I was doing that during the week

#

Was working fine

glad plume Mar 19, 2021, 11:19 PM

#

It'll maybe be usable for ~30min to an hour but then disappears from downlaods folder

#

happened two or three times already

glad plume Mar 19, 2021, 11:34 PM

#

mimikatz will exit and not in downloads folder anymore

twin tapir Mar 19, 2021, 11:47 PM

#

That’s usually because you did something defender didn’t like and it turned back on Real Time Protection because #windows

sharp wave Mar 20, 2021, 5:13 AM

#

so they hydra part in hackpark
task2 - the command they give you doesnt work and to fix it to make it work you have to change it entirely to where what the room gives you it hurts you more than it helps

mighty crescent Mar 20, 2021, 9:37 AM

#

I am in remux the termux room i choose wrong answers on purpose but it marks it as correct then refreshing page changing my answers to correct one

gleaming shadow Mar 20, 2021, 11:24 AM

#

Answer tolerance maybe?

#

How far off the correct response were you?

hazy tiger Mar 20, 2021, 11:31 AM

#

It's 100% answer tolerance.

twin bay Mar 21, 2021, 11:32 AM

#

https://tryhackme.com/room/bashscripting - Task 5 - previosu project - Should be "previous"

wanton tide Mar 21, 2021, 11:49 AM

#

#

In the powershell room, Task 4 Question "How many ports are listed as listening" the machines says 22 but the correct answer is 20

twin bay Mar 21, 2021, 1:22 PM

#

Works when I remote in

#

Task 4 Question "What is the path of the scheduled task called new-sched-task?" Answer is \, they want /

somber vessel Mar 21, 2021, 1:50 PM

#

[ERROR] ssh protocol error

Receiving this when trying to bruteforce SSH with hydra in room https://tryhackme.com/room/basicpentestingjt

desert plover Mar 21, 2021, 3:33 PM

#

Hello, Can someone help me with a room that i do? The room is Linux Agency

eternal summit Mar 21, 2021, 3:38 PM

#

This channel is for reporting bugs with rooms

glad badger Mar 21, 2021, 3:38 PM

#

twin bay https://tryhackme.com/room/bashscripting - Task 5 - `previosu project` - Should ...

Fixed. Thank you for reporting. 🙂

twin bay Mar 21, 2021, 6:29 PM

#

https://tryhackme.com/room/bpvolatility - Task 3 - On a normal system the grep statement above should return no output. - No visible grep statement in task or in previous solutions

crimson maple Mar 21, 2021, 6:39 PM

#

Learning Linux Part 1 room issue: Start machine button starts the attack box rather then starting the machine. Plus, the attack machine is blocked. Part 2 room is working without issues.

eternal summit Mar 21, 2021, 6:47 PM

#

crimson maple Learning Linux Part 1 room issue: Start machine button starts the attack box rat...

Are you sure?

#

Didn't start the attackbox for me, just didn't provide the in-browser access like it should

#

Ok, it did. Just took an extra minute

#

crimson maple Mar 21, 2021, 6:48 PM

#

Weird.. that’s didn’t happen for me

eternal summit Mar 21, 2021, 6:48 PM

#

I'd argue the bug here is a site bug - It didn't show the in browser access until I clicked a button along the top

crimson maple Mar 21, 2021, 6:49 PM

#

Okay, I’ll try again. Thanks @eternal summit

twin bay Mar 21, 2021, 7:43 PM

#

https://tryhackme.com/room/zer0logon

Task 3 - On line 9, we supply the the DC_Handle - Only 1 the should be there
Task 3 - As expected, most of the field nmes -> field names
Task 3 - about sloting it into the PoC -> slotting
Task 3 - save you the painsteaking effort -> painstaking
Task 3 - The hint for the first question refers to Task 2, Figure 3 - Task 2 - Impacket Installation has no figures

twin tapir Mar 21, 2021, 7:56 PM

#

@viral cobalt fix it fix it fix it

viral cobalt Mar 21, 2021, 8:11 PM

#

twin bay https://tryhackme.com/room/zer0logon - Task 3 - `On line 9, we supply the the DC...

all has been updated blobheart

calm kernel Mar 21, 2021, 8:24 PM

#

hi
I am on OWASP Top10
and machine is very slow
when I use a command it lasts 2 min loading and finally cannot laod
then I refresh it loads and executes the command instantly
I don't knopw why it happens I have good connection

eternal summit Mar 21, 2021, 8:25 PM

#

What box? There's like 9 in that room

calm kernel Mar 21, 2021, 8:26 PM

#

Task 5

#

but I've done another web-based machine before and it's the same

#

it's so slow

glad badger Mar 21, 2021, 10:51 PM

#

crimson maple Learning Linux Part 1 room issue: Start machine button starts the attack box rat...

The in-browser launches in split-view now, instead of above the tasks. This is a fairly recent change that has been implemented. In appearance it launches in a similar way as the AttackBox would. 🙂

crimson maple Mar 21, 2021, 10:52 PM

#

glad badger The in-browser launches in split-view now, instead of above the tasks. This is a...

Okay, got it. Thanks for letting me know!

glad badger Mar 21, 2021, 10:53 PM

#

crimson maple Okay, got it. Thanks for letting me know!

You're very welcome. 😎

eternal summit Mar 21, 2021, 10:54 PM

#

glad badger The in-browser launches in split-view now, instead of above the tasks. This is a...

Yeah, except it's kinda bugged RN and doesn't show up immediately

#

You gotta click another button first

glad badger Mar 21, 2021, 10:56 PM

#

Is it Learning Linux 1? I will try it and see if I can reproduce the problem.

eternal summit Mar 21, 2021, 10:56 PM

#

glad badger Is it Learning Linux 1? I will try it and see if I can reproduce the problem.

Yep, I repro'd it a bit ago

#

I've also pinged skidy somewhere to see if it's intended

glad badger Mar 21, 2021, 10:59 PM

#

Mine worked. That's strange.

eternal summit Mar 21, 2021, 11:02 PM

#

glad badger Mine worked. That's strange.

So if you've previously exited split view, it doesn't display the VM

#

Just the button to show split view

#

Like that

#

I don't know if that applies to fresh accounts

glad badger Mar 21, 2021, 11:03 PM

#

I'm now adding the AttackBox. It will show the selector at the bottom between the two.

eternal summit Mar 21, 2021, 11:03 PM

#

But I'd class this as a bug for this room for sure, seeing as it's confusing if you are expecting a machine to appear.

glad badger Mar 21, 2021, 11:05 PM

#

When you hit the Show Split View, is the instance still deployed, or does it redeploy?

#

I exited Split View, and it still shows the VM's active machine information.

eternal summit Mar 21, 2021, 11:07 PM

#

Yeah, it shows it. I just doesn't provide access

#

Remember, this is a lot of people's first room with in browser access

#

So if you need to do something special (click the Show Split View) button, it should be listed.

glad badger Mar 21, 2021, 11:09 PM

#

Beyond the blue button Show Split View ?

eternal summit Mar 21, 2021, 11:11 PM

#

What do you mean?

glad badger Mar 21, 2021, 11:11 PM

#

I thought the appearance of the Show Split View button is pretty clear to get back to the split-view.

eternal summit Mar 21, 2021, 11:12 PM

#

glad badger I thought the appearance of the `Show Split View` button is pretty clear to get ...

That's above the video though.

#

And it's not "getting back" if it never enters split view to start with

#

it never enters split view if you weren't in split view previously (Eg with the attackbox, or another room)

#

I click deploy, it does not enter split view.

glad badger Mar 21, 2021, 11:13 PM

#

You'll probably have to video that one 😄 It worked for me. 😄

eternal summit Mar 21, 2021, 11:14 PM

#

glad badger You'll probably have to video that one 😄 It worked for me. 😄

If I click deploy, it does not enter split view

#

This is because I previously exited split view on another session/room etc

glad badger Mar 21, 2021, 11:18 PM

#

Okay now I see the issue. It's a room-state problem. Question is how often that would occur.

eternal summit Mar 21, 2021, 11:18 PM

#

Enough to cause confusion

#

It happened to someone earlier, it happened to me

glad badger Mar 21, 2021, 11:19 PM

#

When a room deploys it should reset whatever value determines show split view

eternal summit Mar 21, 2021, 11:19 PM

#

It's a deviation from the expected behaviour, and it's something that new users are more likely to hit than experienced users given how often In Browser access to target VMs is used.

glad badger Mar 21, 2021, 11:20 PM

#

That should probably solve it.

#

Or reset it on terminate.

north gyro Mar 22, 2021, 2:44 AM

#

Waste water valve, or separator valve, cant make up my mind

#

hint contradicts the task

hardy dragon Mar 22, 2021, 5:11 PM

#

#

I am playing startup ctf on tryhackme but when i found suspicious.pcapng and i tried "file " command to check type of content but it shows me empty

zealous vortex Mar 22, 2021, 9:42 PM

#

I'm in the ccpentesting room, and there's a minor bug in the answer acceptance on gobuster question 5: how to specify username. It allows "-u", when really the arg is "-U", and -u specifies the target url.

#

same for the next one, regarding password (-P) allowing -p whch is proxy

eternal summit Mar 22, 2021, 9:44 PM

#

That's more of a platform bug TBH

#

Room creators get precisely 0 control over the answer tolerance

zealous vortex Mar 22, 2021, 9:45 PM

#

ah. So Perhaps not an easy fix, then. I noticed a while ago that answer comparisons seem to be case insensitive, which usually doesn't matter, but this is the first time I've noticed that it's actually meaningful (but again, minor)

mystic ruin Mar 23, 2021, 8:29 AM

#

In the Attacking ICS Plant #2 (Attacking ICS 2h) Room there is a Hint in the second flag. Specifically, it says "Open the feed pump, the outlet valve and the separator vessel valve while keeping the waste water valve closed." but the task is about letting the oil flow ONLY through the water valve.

The Hint should be corrected to this "Open the feed pump, the outlet valve and the waste water valve while keeping the separator vessel valve closed."

dusky junco Mar 23, 2021, 11:46 AM

#

mystic ruin In the Attacking ICS Plant #2 (Attacking ICS 2h) Room there is a Hint in the sec...

Thanks for catching this. I'll update the hint accordingly.

lunar vortex Mar 23, 2021, 1:08 PM

#

For the Intro to x86-64 room, the R2 VM has no login information or rdp access

eternal summit Mar 23, 2021, 1:12 PM

#

lunar vortex For the Intro to x86-64 room, the R2 VM has no login information or rdp access

It has login info

lunar vortex Mar 23, 2021, 1:12 PM

#

Ah.

eternal summit Mar 23, 2021, 1:12 PM

#

lunar vortex Mar 23, 2021, 1:14 PM

#

Yeah sorry I was only looking in the task with the machine

dusky junco Mar 23, 2021, 1:17 PM

#

For anyone who had issues with https://tryhackme.com/room/enterprise: We've doubled the resources that it deploys with for all users so it should be much more smoother. We increased the resources before the room was deployed but there was a bug on the back-end where it didn't exactly apply these (:

dusky junco Mar 23, 2021, 1:17 PM

#

dusky junco For anyone who had issues with https://tryhackme.com/room/enterprise: We've doub...

twin bay Mar 23, 2021, 1:54 PM

#

https://tryhackme.com/room/iosforensics - Task 5 - that we discussed in task 8 - It's safe to assume that someone currently doing Task 5 has yet to reach Task 8.

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

rose aspen Mar 24, 2021, 2:29 AM

#

nmap xmas scan. Free room, free machine, scan takes longer than free availability.

eternal summit Mar 24, 2021, 2:32 AM

#

wat

north gyro Mar 24, 2021, 3:05 AM

#

is the pastebin link broken in KaffeeSec - SoMeSINT or am i just doing it wrong?

dusky junco Mar 24, 2021, 3:18 AM

#

It should be updated @north gyro you may have to refresh the room /re-deploy the box...but I'm working very closely w/ the creator on this to get it resolved over the next day or so

north gyro Mar 24, 2021, 3:19 AM

#

thanks, just glad I'm not doing the same thing over and over expecting a different result

north gyro Mar 24, 2021, 3:27 AM

#

dusky junco It should be updated <@!398297084094316555> you may have to refresh the room /re...

scratch that, i was just doing it wrong

#

its fine, just needed to try harder

dusky junco Mar 24, 2021, 3:29 AM

#

Ah no worries

#

sometimes a bit of a fresh air/a break does wonders

#

Appreciate you reaching out though

nimble osprey Mar 24, 2021, 9:01 AM

#

Hello, I can't complete the tutorial room at All Rooms. When I press Join Room, it just redirects me to another one that's complete but it doesn't completes this one. https://tryhackme.com/room/tutorial -> not complete
https://tryhackme.com/room/howtousetryhackme -> complete
Joining room of tutorial redirects howtousetryhackme

twin bay Mar 24, 2021, 11:15 AM

#

https://tryhackme.com/room/sysmon -> Configuration preferences will vary depending on what SOC team so prepare to be flexible when monitoring. prepare to be flexible when monitoring. - Duplicated sentence.

dusky junco Mar 24, 2021, 12:20 PM

#

nimble osprey Hello, I can't complete the tutorial room at All Rooms. When I press Join Room, ...

It's an experiment we're running at the moment where certain users will land on either one of those two rooms purely on 50/50 basis atm (it's a tiny part of how we're trying to keep users engaged and making the site more approachable for everyone and anyone). If you've completed one of those rooms & are familiar with how things work I wouldn't worry too much (:

soft terrace Mar 24, 2021, 12:57 PM

#

In room https://tryhackme.com/room/passwordsecurity Task 5, question 3 are 2 typos

loud breach Mar 24, 2021, 1:01 PM

#

soft terrace In room https://tryhackme.com/room/passwordsecurity Task 5, question 3 are 2 typ...

it's haxxor style.. leave it alone 😛

soft terrace Mar 24, 2021, 1:02 PM

#

if so why is characters written correctly at the beginning happyPanda @loud breach

loud breach Mar 24, 2021, 1:03 PM

#

soft terrace if so why is characters written correctly at the beginning <:happyPanda:82372055...

I'm just kidding

soft terrace Mar 24, 2021, 1:04 PM

#

Don't worry. Me too

nimble osprey Mar 24, 2021, 1:05 PM

#

dusky junco It's an experiment we're running at the moment where certain users will land on ...

If you could link the completeness of the one to the other would be awesome, or just let us Join both rooms independently. It hurts me a bit seeing that uncompleted.

dusky junco Mar 24, 2021, 1:08 PM

#

New users will be signed up to the one that the data/results shows as the most useful but that's good to know @nimble osprey

loud breach Mar 24, 2021, 1:15 PM

#

I think there is a port mistake on this part.
It's work on port 5001. isn't it?
somesint room

twin bay Mar 24, 2021, 2:53 PM

#

@oblique hemlock https://tryhackme.com/room/passwordsecurity - Task 5 - numberOfCharachtersInSet - Characters (Twice)

twin bay Mar 24, 2021, 3:08 PM

#

You spelled it Charachters twice 🙂

undone drift Mar 24, 2021, 5:31 PM

#

Room: HackPark
Task 3

I guess that "undefined" is not intended, right? 🤭

eternal summit Mar 24, 2021, 5:50 PM

#

That's probably not so good...

wheat fractal Mar 24, 2021, 5:57 PM

#

wait how'd i get pinged

eternal summit Mar 24, 2021, 5:57 PM

#

-undelete -a

livid escarpBOT Mar 24, 2021, 5:57 PM

#

Up to 10 last deleted messages (last hour or 12 hours for premium):

none...

eternal summit Mar 24, 2021, 5:57 PM

#

@wheat fractal I saw someone ghostping you but I can't say who because no logs

wheat fractal Mar 24, 2021, 5:58 PM

#

eternal summit <@456226577798135808> I saw someone ghostping you but I can't say who because no...

ahh okay, it's all good.

timid imp Mar 24, 2021, 8:01 PM

#

I can't use the exploit of ||icecast|| in the ice room. I have installed on my host machine(windows) and on my vm kali linux and both don't work and my anti virus turned off. is there a other way to get ||reverce shell||?

eternal summit Mar 24, 2021, 8:15 PM

#

Check your firewall. Make sure the VPN is running directly in the kali VM.

#

There's no other way, because the room is designed to showcase that vulnerability

timid imp Mar 24, 2021, 8:22 PM

#

Oké

civic brook Mar 24, 2021, 9:37 PM

#

spelling mistake in Password Security, ripes should have an 'n' in it

glad badger Mar 24, 2021, 9:50 PM

#

civic brook spelling mistake in Password Security, ripes should have an 'n' in it

When did you encounter the word ripes, did you encounter this in the room today?

civic brook Mar 24, 2021, 9:51 PM

#

today

#

sorry hadn't refreshed it since yesterday, guess it got fixed

glad badger Mar 24, 2021, 9:52 PM

#

No worries. I fixed it yesterday. 🙂

civic brook Mar 24, 2021, 9:52 PM

#

I got very stuck on that

glad badger Mar 24, 2021, 9:53 PM

#

But now the room solution has to come fruition 🙂

soft iron Mar 24, 2021, 10:34 PM

#

Hello, simple url mistake on a link in the OWASPTop10 room on task 26, the link is pointing to ".../myprofile." instead of ".../myprofile" if ever you think it is worth fixing as it is a "reward" page

eternal summit Mar 24, 2021, 10:36 PM

#

A screenshot describing where would go a long way

soft iron Mar 24, 2021, 10:38 PM

#

dusky junco Mar 24, 2021, 10:39 PM

#

Oh ofc that's my section of the room LMAO

soft iron Mar 24, 2021, 10:39 PM

#

lol

dusky junco Mar 24, 2021, 10:39 PM

#

A patched box is soon™️ for that ty for the reminder but bare with

#

Updated -- please refresh (:

soft iron Mar 24, 2021, 10:41 PM

#

np, is it ok if to tell you guys here if there are minor things like these?

dusky junco Mar 24, 2021, 10:41 PM

#

Please do (:

#

Appreciate you taking the time to do so!

soft iron Mar 24, 2021, 10:41 PM

#

okidookee

twin tapir Mar 25, 2021, 1:37 AM

#

#

new room - pyLon, Image seems odd

#

#

Also just overall odd wording / grammatical errors

#

@north gyro I think this is you?

#

source code is also on your GitHub which Im not sure is an issue or not?

north gyro Mar 25, 2021, 1:40 AM

#

twin tapir <@!398297084094316555> I think this is you?

sorry, i know that there was grammatical errors, i just didn't want to change it in case it affected the release, first room you know

twin tapir Mar 25, 2021, 1:40 AM

#

ah no, you can change anything about a room at any time: In the queue, ready to be public, or public

north gyro Mar 25, 2021, 1:41 AM

#

the github is fine, I dont think it will lead to any hints though.

#

but at least you know what youre up against

#

well someone has solved it, did i expect anyone else to be the first, no

dusky junco Mar 25, 2021, 2:56 AM

#

https://tryhackme.com/room/pylonzf has been made private and locked for the time being. Working w/ the creator to get this out back into the public ASAP (: If you catch wind of people having the "This room has been locked" this is why. Apologies for the inconvenience this causes.

dusky junco Mar 25, 2021, 2:56 AM

#

dusky junco https://tryhackme.com/room/pylonzf has been made private and locked for the time...

raven plover Mar 25, 2021, 6:09 AM

#

minor thing in somesint, task 3:
Here is a guide on google dorking does not link anywhere

north gyro Mar 25, 2021, 11:52 AM

#

twin tapir ah no, you can change anything about a room at any time: In the queue, ready to ...

Well, if you can just change it after its been approved, that's kinda asking for trouble, if you ask me

eternal summit Mar 25, 2021, 11:53 AM

#

north gyro Well, if you can just change it after its been approved, that's kinda asking for...

Yeah, but you'll get complained at if you break stuff

obsidian kiln Mar 25, 2021, 12:09 PM

#

twin tapir ah no, you can change anything about a room at any time: In the queue, ready to ...

It's rude to not ask the tester if it's public though smh

#

At least with you it's always the testers telling you to fix stuff

glad badger Mar 25, 2021, 1:35 PM

#

north gyro Well, if you can just change it after its been approved, that's kinda asking for...

After a room is submitted to the test queue, it is advisable to coordinate any suggested changes with the assigned Room Tester/Lead Room Tester. Same goes for after a room is released and made public. Collaboration is valuable. 🙂

eternal summit Mar 25, 2021, 1:36 PM

#

Again, if you break stuff we'll complain at you and try to get it fixed

#

or in some cases, the room will just be made private till it's fixed

north gyro Mar 25, 2021, 1:38 PM

#

glad badger After a room is submitted to the test queue, it is advisable to coordinate any s...

Thanks, that's why I didn't change it

glad badger Mar 25, 2021, 1:43 PM

#

north gyro Thanks, that's why I didn't change it

You're welcome. Thank you for submitting content to TryHackMe. 🙂

sonic willow Mar 25, 2021, 1:44 PM

#

can room testers see changes? sort of like a version control type thing?

eternal summit Mar 25, 2021, 1:45 PM

#

Unfortunately no

glad badger Mar 25, 2021, 1:53 PM

#

sonic willow can room testers see changes? sort of like a version control type thing?

Not yet, it's on my wishlist. 😄

soft iron Mar 25, 2021, 5:02 PM

#

Phrasing mistake on OWASPTop10 Task 30; See yellow marker

glad badger Mar 25, 2021, 7:19 PM

#

soft iron Phrasing mistake on OWASPTop10 Task 30; See yellow marker

Fixed. Thank you for reporting. 🙂

north gyro Mar 25, 2021, 11:17 PM

#

ISO27001 room
Grammatical issue

topaz thorn Mar 25, 2021, 11:19 PM

#

That's a private room atm

#

They're recently trying to fix it up

north gyro Mar 25, 2021, 11:23 PM

#

it came up when i went to learn

#

#

is that a bug

obsidian kiln Mar 25, 2021, 11:50 PM

#

It was set to public quietly the other day 🙂

vast harbor Mar 26, 2021, 5:29 AM

#

from intro to research

#

#

that switch is for saving a file not opening one

somber vessel Mar 26, 2021, 8:08 AM

#

Task 12 in room https://tryhackme.com/room/wireshark instructions are outdated. Latest version of Wireshark isn't showing SSL on its list of Protocols, instead you can now find the RSA setting on the TLS

#

I'm using the Wireshark on Kali 2021.1 btw

obsidian kiln Mar 26, 2021, 10:05 AM

#

vast harbor

Is it?

#

Not in the Kali version it ain't

undone drift Mar 26, 2021, 10:25 AM

#

Room: Game Zone
Task 3.

I think is missing a to from there 🤭

twin bay Mar 26, 2021, 12:59 PM

#

https://tryhackme.com/room/hardeningbasicspart2 - Task 2 - Yey/Ney - GPG is based off of the OpenGPG standard - It's based off OpenPGP, not OpenGPG - But Yey is the expected answer.

#

This is further shown in Task 3 when they say This is where GPG comes in. GPG is actually directly based off of the OpenPGP standard.

novel fog Mar 26, 2021, 1:38 PM

#

Guys I just wanted to say the room Internal is broken... something is wrong with it.... you can't access the WP Login for example

#

I woud send screens but I can't for some reason

eternal summit Mar 26, 2021, 1:41 PM

#

It's not broken

novel fog Mar 26, 2021, 1:41 PM

#

3 hours wasted... whatever

eternal summit Mar 26, 2021, 1:41 PM

#

You probably just need to add something to /etc/hosts

#

!docs verify

tropic flameBOT Mar 26, 2021, 1:41 PM

#

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

eternal summit Mar 26, 2021, 1:41 PM

#

Follow that link to be able to post images.

obsidian kiln Mar 26, 2021, 1:44 PM

#

novel fog 3 hours wasted... whatever

#

Did you read this?

novel fog Mar 26, 2021, 1:46 PM

#

obsidian kiln

omg lol

#

ahhhhhhhhh ffs i didn't

#

well now i feel stupid and that cost me 3 hours so ..... yay

#

https://tenor.com/view/facepalm-really-stressed-mad-angry-gif-16109475

Tenor

obsidian kiln Mar 26, 2021, 1:47 PM

#

Always read the instructions 🙂

novel fog Mar 26, 2021, 1:47 PM

#

lmao

#

ok well thanks for the help

obsidian kiln Mar 26, 2021, 1:48 PM

#

Np! Happy hacking 😄

novel fog Mar 26, 2021, 1:48 PM

#

🙂

raven plover Mar 26, 2021, 2:02 PM

#

https://tryhackme.com/room/attackingics2
||flag1 available before performing task||

twin bay Mar 26, 2021, 5:06 PM

#

https://tryhackme.com/room/hardeningbasicspart2 - Task 14 (Intro) and Task 2 (Quiz) are swapped around - Task 2 should probably be between Task 12 and 13

ember mulch Mar 26, 2021, 5:27 PM

#

there is a bug in the room i am in

topaz thorn Mar 26, 2021, 5:27 PM

#

ember mulch there is a bug in the room i am in

Which one?

ember mulch Mar 26, 2021, 5:28 PM

#

network services

#

enumerating ftp

eternal summit Mar 26, 2021, 5:28 PM

#

Why do you think there's a bug?

ember mulch Mar 26, 2021, 5:28 PM

#

asks how many ports are open and there is only 1 open

eternal summit Mar 26, 2021, 5:28 PM

#

Scan again after like 5-10 minutes.

ember mulch Mar 26, 2021, 5:28 PM

#

Screen_Shot_2021-03-26_at_1.28.42_PM.png

#

ive already scanned like twice

eternal summit Mar 26, 2021, 5:29 PM

#

...

ember mulch Mar 26, 2021, 5:29 PM

#

this shouldnt be happening

eternal summit Mar 26, 2021, 5:29 PM

#

There is FTP and HTTP running, HTTP just takes a while to start

ember mulch Mar 26, 2021, 5:30 PM

#

that shouldnt be happening

eternal summit Mar 26, 2021, 5:31 PM

#

It's a known issue. It's not a big problem, and I also told you the fix for it yesterday I'm 90% sure.

ember mulch Mar 26, 2021, 5:32 PM

#

i know that, but still how am i suppose to learn properly when the boxes i am attacking aren't even giving me the correct info?

eternal summit Mar 26, 2021, 5:32 PM

#

They are. It just takes time to boot.

#

This is a known issue.

ember mulch Mar 26, 2021, 5:32 PM

#

ok, as long as its known

#

and they are working on it

#

thanks

eternal summit Mar 26, 2021, 5:33 PM

#

ember mulch and they are working on it

It's an incredibly minor issue, that's been known about for a long time. It's unlikely to get fixed.

ember mulch Mar 26, 2021, 5:34 PM

#

@eternal summit gotcha, thanks man

umbral oasis Mar 26, 2021, 6:02 PM

#

#

#

#

ey guys, any idea?

#

im unable to se the website

#

atomic briar Mar 26, 2021, 6:05 PM

#

umbral oasis im unable to se the website

Did you start Django? also I think this belongs in #room-help

umbral oasis Mar 26, 2021, 6:06 PM

#

atomic briar Did you start Django? also I think this belongs in <#522158539129618453>

yes I did

#

they say "It might take around 3 minutes to boot properly"

#

#

and doesn't work

atomic briar Mar 26, 2021, 6:09 PM

#

I'm guessing you probably need to build the webapp in Django to gain access to it, not sure. Someone who's done that room can probably help you in #room-help

umbral oasis Mar 26, 2021, 6:11 PM

#

i will ask there, thank you so much

atomic briar Mar 26, 2021, 6:36 PM

#

https://tryhackme.com/room/tmuxremux
This room has tons of grammatical errors and a few spelling errors. They aren't major but they make the room harder to understand than it should be.
Since there's so much text I've put my corrections in a pastebin file. I only got through Task 2, I can fix the rest of the room if needed.
https://pastebin.com/trLdUCTU

Pastebin

Room: https://tryhackme.com/room/tmuxremuxIssue: Grammatical errors...

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

zealous vortex Mar 27, 2021, 1:06 AM

#

Minor typo in johntheripper0 room. Task 6 "there is a change" should be "chance"

glad badger Mar 27, 2021, 1:16 AM

#

zealous vortex Minor typo in johntheripper0 room. Task 6 "there is a change" should be "chance"

Fixed. Thank you for reporting. 😎

zealous vortex Mar 27, 2021, 1:16 AM

#

no prob. I'm amazed how fast you guys are

strong kelp Mar 27, 2021, 10:16 AM

#

umbral oasis

The problem is here: -oN flag specifies the file you write to, but you put the IP

#

It sees the IP as the name of the file

undone drift Mar 28, 2021, 9:50 AM

#

Room: Pen Testing
Task 16

Hehe, it doesn't look like it is case sensitive 🤭

hazy tiger Mar 28, 2021, 10:07 AM

#

Hmm must be answer tolerance

undone drift Mar 28, 2021, 10:21 AM

#

yeah, I figure that this is needed but mentioning "Case sensitive" has nothing to do with the answer, in this case. I thought the answer was intended to be case sensitive 🤭 that's why I reported it

wheat fractal Mar 28, 2021, 12:08 PM

#

Hi guys, I'm having problems in Enterprise... can someone help?

eternal summit Mar 28, 2021, 3:05 PM

#

This channel is for reporting bugs with rooms, not for asking for help.

astral jewel Mar 28, 2021, 3:54 PM

#

Hey,

In room: "Google Dorking"
(https://tryhackme.com/room/googledorking)

The Website "ablog.com" is down.

Its only a Bug-Report 🙂

eternal summit Mar 28, 2021, 3:55 PM

#

astral jewel Hey, In room: "Google Dorking" (https://tryhackme.com/room/googledorking) The ...

Where is that referenced?

astral jewel Mar 28, 2021, 3:56 PM

#

eternal summit Where is that referenced?

Task 4 - First Question ("Where would "robots.txt" be located on the domain "ablog.com")

eternal summit Mar 28, 2021, 3:56 PM

#

I don't think you're meant to interact with the site.

#

It doesn't tell you to, it's applying theory

astral jewel Mar 28, 2021, 3:57 PM

#

Yeahr, its only little bit thinking 😄 - Thy for help

glacial wind Mar 28, 2021, 4:19 PM

#

I am trying to do a gobuster scan in https://tryhackme.com/room/rrootme but at the start I did the scan with too much threds so it crashed so I terminated this and tried to lower more and more the number of threds and every time it crashed I tried 5 and it crashed. what am I doing wrong?

turbid wing Mar 28, 2021, 4:28 PM

#

I don't know whether to report this..
I'm doing metasploit room rn ...while looking for write-up provided by @Mr.Holmes#3066 it redirects to dashboard ...just want to clarify whether it's intended or mistakenly submitted ...

eternal summit Mar 28, 2021, 4:28 PM

#

That was part of a CTF IIRC

turbid wing Mar 28, 2021, 4:29 PM

#

To me?

eternal summit Mar 28, 2021, 4:29 PM

#

Who else?

#

The title looks like a CTF flag, correct?

turbid wing Mar 28, 2021, 4:30 PM

#

Yes

eternal summit Mar 28, 2021, 4:31 PM

#

Exactly.

turbid wing Mar 28, 2021, 4:32 PM

#

So it is not a problem ryt

obsidian kiln Mar 28, 2021, 4:32 PM

#

@fossil relic Can I delete those now?

fossil relic Mar 28, 2021, 4:32 PM

#

Which ones?

#

Oh that

#

IIRC Dark said he deleted them after the event

#

no idea how they are still there.

obsidian kiln Mar 28, 2021, 4:39 PM

#

Gone now 🤷‍♂️

signal ridge Mar 28, 2021, 7:10 PM

#

Room: networkservices2
Task: 6
accepts wrong answer

topaz thorn Mar 28, 2021, 7:10 PM

#

That's answer tolerance, refresh and it will give you the correct answer

signal ridge Mar 28, 2021, 7:11 PM

#

strange, shouldn't it give an error saying wrong answer ?

obsidian kiln Mar 28, 2021, 7:12 PM

#

No -- it's there to make sure you don't type out very long answers, make a typo, then have to do the whole thing again

signal ridge Mar 28, 2021, 7:13 PM

#

cool, thanks

misty cave Mar 28, 2021, 9:34 PM

#

@hazy tiger Hey, just did your History of Malware room, all good, except "PERVADE" becomes "PREVADE" in the last paragraph and question of the ANIMAL section

hazy tiger Mar 28, 2021, 9:36 PM

#

Sorry? I'm not sure I understand what you mean 😄

misty cave Mar 28, 2021, 9:37 PM

#

it's a typo is all, the R and E have swapped order 🙂

hazy tiger Mar 28, 2021, 9:39 PM

#

Whoops! Good spot 😁 Refresh and they should be updated, thanks :D

misty cave Mar 28, 2021, 9:40 PM

#

Yup, all fixed 🙂 my day job means I spot all of those little things.

fierce summit Mar 29, 2021, 2:10 AM

#

Hello people I have a problem, my good answers are not counting at all 😄 my dashboard showing 0 answers today.

eternal summit Mar 29, 2021, 2:10 AM

#

#site-bugs as that's a site issue

fierce summit Mar 29, 2021, 2:12 AM

#

eternal summit <#559443389058252800> as that's a site issue

Thanks

remote hamlet Mar 29, 2021, 4:04 AM

#

@north gyro Grammatical discrepancies with the room information at the top.


Being able to analyse a file and determine its contents is important, once you extract the hidden file in the image there is further work to do.``` Has run-on sentences. 

Something like this reads better.
```This room contains steganography and may be difficult. If you are finding it difficult to overcome, read the hint for flag 1.

Being able to analyse a file and determine its contents is important. Once you extract the hidden file in the image, there will be further work to do.```

north gyro Mar 29, 2021, 4:48 AM

#

remote hamlet <@!398297084094316555> Grammatical discrepancies with the room information at th...

noted, and reflected, thanks

remote hamlet Mar 29, 2021, 4:48 AM

#

<3

topaz flare Mar 29, 2021, 8:56 AM

#

Room: John The Ripper
Task: 11
Instructs to use python3 to run ssh2john.py python3 /opt/john/ssh2john.py This throws an error with missing python modules.
python /opt/john/ssh2john.py However utilising python 2.7 instead works as intended

weary veldt Mar 29, 2021, 11:02 AM

#

any known issues with 'what the shell'? room is just spinning when I try and load the page. thanks

obsidian kiln Mar 29, 2021, 11:07 AM

#

@weary veldt that's a problem with your antivirus. Add an exclusion for the tryhackme.com domain

static holly Mar 29, 2021, 1:33 PM

#

Hi guys
Is there any known problem for the room "Mal: Malware Introductory"?
I've logged in over RDP and I'm in the task folder (damn slow...) but when I look in the properties it shows no MD5 hash as it should
In a picture there are 3 hashes and I got none

pine nova Mar 29, 2021, 1:45 PM

#

Hey hey! Wireshark 101 room - task 5 is saying to continue to task 5 not task 6 🙂

#

royal spruce Mar 29, 2021, 3:25 PM

#

The HackPark room is blocked at this stage...keeping this loading state eternally

#

#room-bugs #room-help

#

Can anybody fix the broken room?

potent wyvern Mar 29, 2021, 8:28 PM

#

#site-support Room linux fundamentals 2 task 11 completely bugged

eternal summit Mar 29, 2021, 8:32 PM

#

potent wyvern <#521771811768107008> Room linux fundamentals 2 task 11 completely bugged

wat

potent wyvern Mar 29, 2021, 10:52 PM

#

I did what i needed to do, set the variable, but i can't execute shiba2 still

eternal summit Mar 29, 2021, 10:52 PM

#

potent wyvern I did what i needed to do, set the variable, but i can't execute shiba2 still

#room-help
The room is not broken

potent wyvern Mar 29, 2021, 10:54 PM

#

I think it is, but if it is not I'll accept it

#

Maybe it is some problem in regard to the room + webattack?

eternal summit Mar 29, 2021, 10:56 PM

#

It is not broken.

#

If you would like help with it, please use #room-help
Otherwise, provide some evidence that it's broken here.

potent wyvern Mar 29, 2021, 10:57 PM

#

I'll do, i even ran the command in the hint, but nothing

#

Shiba2 won't execute

eternal summit Mar 29, 2021, 10:58 PM

#

Screenshots. But seriously, the room isn't broken. Please move to #room-help if you'd like help.

potent wyvern Mar 29, 2021, 11:01 PM

#

I re-did the same procedure, but now it worked

eternal summit Mar 29, 2021, 11:01 PM

#

You can break the binary if you run a command that ends in >> $USER

potent wyvern Mar 29, 2021, 11:02 PM

#

Ah, i see

#

Thanks you, thm staff the best & most prepared. Is there a badge for the "premium" users? my levels aren't counting up in discord too

eternal summit Mar 29, 2021, 11:03 PM

#

Re-verify with the bot

#

I'm not THM staff, just a discord moderator

potent wyvern Mar 29, 2021, 11:04 PM

#

It's okay. I'll re-verify then

grim python Mar 30, 2021, 1:07 AM

#

In "corp" I am unable to log into the Administrator account using the password. I got the second to last answer right that asks for the password so it should be correct. Im trying to login like I did for the other account for task 3 which worked.

eternal summit Mar 30, 2021, 1:15 AM

#

It's expired but you can definitely log in.

grim python Mar 30, 2021, 1:23 AM

#

I checked the guide and tried copy pasting the command (subbing in the target ip) but its not working and Ive tried multiple times to login, copy pasting the password and typing the password.

eternal summit Mar 30, 2021, 1:24 AM

#

Some RDP clients don't work well with it

grim python Mar 30, 2021, 1:25 AM

#

It worked for the login for the earlier question

grim python Mar 30, 2021, 1:41 AM

#

Its also the RDP client suggested by the attached writeup and pre installed on the attack box.

eternal summit Mar 30, 2021, 1:42 AM

#

If you have a windows install anywhere, try the real MS rdp client

grim python Mar 30, 2021, 1:47 AM

#

Same issue, can login as the other account but not the administrator

golden rivet Mar 30, 2021, 3:39 AM

#

Just “almost” finished this Room. Docker method worked perfect on my Kali VM. And I will try to use OpenVas more now to test as Nessus is not working good on my machine (takes forever to load plugins)

But I could not finish the room because first question on Task 7 is not accepting my answers. Funny because it accepted the scan end time which is right under the scan start time... any tips on why?

#

Oops forget about. Just noticed I was missing the comma. Rubber ducky effect. Tell someone your problem and then you find right away 🤣🤣

twin tapir Mar 30, 2021, 3:42 AM

#

bluba_roll

weary veldt Mar 30, 2021, 7:57 AM

#

obsidian kiln <@617777812161691658> that's a problem with your antivirus. Add an exclusion for...

thanks, will give it a try. strange it's just the one room though

north gyro Mar 30, 2021, 8:56 AM

#

Hi, my room pyLon is suffering an issue that i think is related to lack of resources for free users, but i cannot confirm it, is someone able to DM me in regards to this?

obsidian kiln Mar 30, 2021, 10:31 AM

#

weary veldt thanks, will give it a try. strange it's just the one room though

It's because of the plaintext payloads in the room, iirc. Wreath is the same.

somber vessel Mar 30, 2021, 10:59 AM

#

VM in room https://tryhackme.com/room/relevant crashes while I'm doing directory search using gobuster, happened 3 times already

twin tapir Mar 30, 2021, 12:32 PM

#

@somber vessel that might be intended? I’m not sure

twin tapir Mar 30, 2021, 12:33 PM

#

north gyro Hi, my room pyLon is suffering an issue that i think is related to lack of resou...

boop CMN or get access to #creators-lounge and ask there

north gyro Mar 30, 2021, 12:34 PM

#

twin tapir boop CMN or get access to <#626875976508506112> and ask there

thanks its done, turns out the problem was the vm, not the resources

wheat fractal Mar 30, 2021, 12:50 PM

#

Room: Network Services - Task 9. Question-1: How many ports are open on the target machine?. Issue: I found that the answer is ||2|| but my scan says it's not true

eternal summit Mar 30, 2021, 12:50 PM

#

Wait like 10 minutes

#

It'll open another port.

wheat fractal Mar 30, 2021, 1:15 PM

#

wheat fractal Room: Network Services - Task 9. Question-1: How many ports are open on the targ...

Solved. Thanks!

proven prism Mar 30, 2021, 4:28 PM

#

In Network Services 2, Task 6, answer 9, the suggested .txt file is not under the listed file path on the Attackbox. The file path should be "/usr/share/wordlists/SecLists/Usernames"

eternal summit Mar 30, 2021, 4:30 PM

#

@dusky junco ^ seclists on the AB

dusky junco Mar 30, 2021, 4:41 PM

#

Epic

eternal summit Mar 30, 2021, 4:41 PM

#

~~No it's something you should fix lmao~~

dusky junco Mar 30, 2021, 4:42 PM

#

Oh i know 😛

#

oh

wheat fractal Mar 30, 2021, 4:57 PM

#

Does anyone knows if the HackPark room will be available again? I notice that it's still looping in a loading state.

eternal summit Mar 30, 2021, 4:57 PM

#

Skidy is aware

#

it's a bug.

raven plover Mar 30, 2021, 5:01 PM

#

https://tryhackme.com/room/rpmetasploit, task 7, says autorout instead of autoroute after solving?
||run autorout -s 172.18.1.0/24 -n 255.255.255.0||

eternal summit Mar 30, 2021, 5:02 PM

#

Refresh

raven plover Mar 30, 2021, 5:02 PM

#

that solved it, thanks!

wheat fractal Mar 30, 2021, 6:54 PM

#

https://tryhackme.com/room/howwebsiteswork Task 1: The question "What term describes the way your browser renders a website?" is misleading. Suggestion: For a website request, which part does render the page?

twin bay Mar 30, 2021, 9:08 PM

#

https://tryhackme.com/room/malresearching - Task 4 - I've written more about how malware detects it is in a virtual environment and the possible routes it can take to escape on my blog. - The link takes you to https://oldblog.cmnatic.co.uk/posts/so-you-want-to-analyse-malware/ which is a 404 page (I suspect it should take you to blog, not oldblog)

misty girder Mar 30, 2021, 10:30 PM

#

https://www.tryhackme.com/room/easyctf - Task 5 - I'm unable to run the Python command, it doesn't work, after 2 hours of searching, i've look at the writeups and made the exact same manipulations and i keep having the same message File

I'm running from the attack box

here is the message, unable to go further than this even with python 2 or 3

"46635.py", line 25
print "[+] Specify an url target"
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("[+] Specify an url target")?

sonic willow Mar 30, 2021, 10:31 PM

#

python3 won't give that error

#

what error are you getting when using python3?

misty girder Mar 30, 2021, 10:33 PM

#

@sonic willow root@ip-10-10-125-37:~# python3 46635.py -u http://10.10.56.192/simple --crack -w /usr/share/wordlists/rockyou.txt

File "46635.py", line 25
print "[+] Specify an url target"
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("[+] Specify an url target")?

#

the .py exploit i got it from the internet and from kali too

sonic willow Mar 30, 2021, 10:33 PM

#

okay let's move over to #room-help, this isn't a bug with the room

wraith mortar Mar 30, 2021, 10:54 PM

#

asking this for a friend: he's doing the nmap room and he keeps getting ports filtered especially on FTP. I try myself and I don't get this, I get the expected outcome. Any reason why his nmap scan is not working?
He's connected to VPN etc

eternal summit Mar 30, 2021, 10:57 PM

#

wraith mortar asking this for a friend: he's doing the nmap room and he keeps getting ports fi...

VM dies after an hour. It's a known issue.

wraith mortar Mar 30, 2021, 11:01 PM

#

Thanks

#

If he extended the room it would be okay?

#

@eternal summit He did restart the room and it still wasn't working though?

eternal summit Mar 30, 2021, 11:02 PM

#

wraith mortar If he extended the room it would be okay?

No.

eternal summit Mar 30, 2021, 11:03 PM

#

wraith mortar <@!252418040388517888> He did restart the room and it still wasn't working thoug...

I'm not gonna troubleshoot via a game of telephone like this, but filtered means it isn't getting any response at all which is bad

wraith mortar Mar 30, 2021, 11:04 PM

#

Okay, but I just found it weird how I launched the room up myself and it worked straight away. He restarted the room and ran the same command and it is filtered. Very strange I thought

twin bay Mar 31, 2021, 1:28 AM

#

https://tryhackme.com/room/bof1 - Task 8 - With the sample python code, the closing " should be after the closing bracket - Not after the entire statement

wheat fractal Mar 31, 2021, 4:33 AM

#

eternal summit Skidy is aware

Thanks!

prisma rune Mar 31, 2021, 10:34 AM

#

https://tryhackme.com/room/yara
In Task 9 the Loki tool has to be used to can a file for vulnerability. Tried using the tool that is present in the VM that is provided in the question and something does not seem right. The tool throws errors

#

#

Tried running command with sudo as well. But still getting the same error

twin tapir Mar 31, 2021, 12:33 PM

#

eh it’s just complaining about one line in a file it should be fine

tired thorn Mar 31, 2021, 2:39 PM

#

the virtual machine in metasploit room (Windows Fundamentals module) is down

#

https://tryhackme.com/room/rpmetasploit

#

also the blue room

#

https://tryhackme.com/room/blue

#

is it in maintenance?

#

out of service for any reason?

eternal summit Mar 31, 2021, 2:42 PM

#

Room machines can't be down as they're not shared.
@lucid oasis people seem to have trouble deploying these VMs atm.

tired thorn Mar 31, 2021, 2:45 PM

#

yesterday this VM worked

#

today is different

eternal summit Mar 31, 2021, 2:47 PM

#

tired thorn today is different

I just pinged skidy, I'm sure he'll look into it when he can

tired thorn Mar 31, 2021, 2:48 PM

#

ty 😄

lucid oasis Mar 31, 2021, 2:57 PM

#

eternal summit Room machines can't be down as they're not shared. <@243160021674754048> people ...

Thanks for the ping, I think I know why - just passed this onto Ashu - looking into it now

lucid oasis Mar 31, 2021, 2:59 PM

#

tired thorn the virtual machine in metasploit room (Windows Fundamentals module) is down

Hey, can you explain the problem a little more? Do machines shutdown, or are they not deploying at all for you?

tired thorn Mar 31, 2021, 3:00 PM

#

hi @lucid oasis 😄

eternal summit Mar 31, 2021, 3:01 PM

#

People have been reporting that they don't get an IP

tired thorn Mar 31, 2021, 3:01 PM

#

it show this message but it doesnt start

eternal summit Mar 31, 2021, 3:01 PM

#

It displays 'starting machine' then just nothing

#

Yep

tired thorn Mar 31, 2021, 3:02 PM

#

its the only module that it happens I think

#

I've tried networking fundamentals and is all good

eternal summit Mar 31, 2021, 3:04 PM

#

Do you know if it happens on the furthernmap room?

tired thorn Mar 31, 2021, 3:15 PM

#

eternal summit Do you know if it happens on the furthernmap room?

no it doesn't

#

it works in nmap

tiny dragon Mar 31, 2021, 3:18 PM

#

should be ok now

#

let me know if they're any issues

echo vector Mar 31, 2021, 3:40 PM

#

Hi guys, the hackpark room, it keeps loading and it is part of learn path
never finishes loading

#

https://tryhackme.com/room/hackpark

tired thorn Mar 31, 2021, 3:46 PM

#

tiny dragon should be ok now

ty very much 😄

wheat fractal Mar 31, 2021, 9:13 PM

#

Hi, I found the last room flag "intro to x86-64", but when I try to put it in the replies it won't accept it. I also looked at a write-up that solved this room, because I thought I was wrong, but it solves it the same way. Can anyone help me?

topaz thorn Mar 31, 2021, 9:14 PM

#

You have to do something with the last flag and you will get the right answer

wheat fractal Mar 31, 2021, 9:34 PM

#

@topaz thorn ok, now it tell me Correct Password

#

but still, what i need to enter on the field

#

ok I'm stupid sorry

#

It works

topaz thorn Mar 31, 2021, 9:50 PM

#

Not at all took me a while to realise as well what I did wrong with that room

wheat fractal Mar 31, 2021, 10:53 PM

#

thank you, I needed to carefully re-watch the assembly code to understand the what I was doing wrong, it was a little frustrating but quite a lot of fun. I know that that's beginner stuff, but I had to start somewhere🙃 🙃

supple trench Apr 1, 2021, 8:43 AM

#

There has come new statistics regarding room yara, task 11 Valhalla, in the cyber defense learning path. the latest month overrules the intended month

supple trench Apr 1, 2021, 8:59 AM

#

The link #2 in task 4 in room "Intro to ISAC" to a list of member isacs is broken. it should be https://www.nationalisacs.org/member-isacs-3

natlcouncilofisacs

MEMBER ISACS | natlcouncilofisacs

soft terrace Apr 1, 2021, 9:04 AM

#

2nd link (https://oldblog.cmnatic.co.uk/posts/so-you-want-to-analyse-malware/) in task 4 in room https://tryhackme.com/room/malresearching return a 404 error

dusky junco Apr 1, 2021, 11:00 AM

#

soft terrace 2nd link (https://oldblog.cmnatic.co.uk/posts/so-you-want-to-analyse-malware/) ...

Fixed ty cc @twin bay

eternal summit Apr 1, 2021, 12:26 PM

#

@wheat fractal please don't post accepted answers. ls -lah list with hidden files.

wheat fractal Apr 1, 2021, 12:28 PM

#

sry, my bad. And thank you very much! @eternal summit

somber vessel Apr 1, 2021, 5:25 PM

#

VM in https://tryhackme.com/room/blaster does not have search history to answer one of the questions

#

round mantle Apr 1, 2021, 8:22 PM

#

#

what

rich cloak Apr 2, 2021, 1:13 AM

#

Not really a bug but https://tryhackme.com/room/linux1 seems to be missing [Section 1: Using SSH] or something like that. Planning to use this in a ethical hacking class this summer with some student new to linux and this would def confuse them.

eternal summit Apr 2, 2021, 1:57 AM

#

rich cloak Not really a bug but https://tryhackme.com/room/linux1 seems to be missing [Sect...

It has In-browser access

#

You get a shell side by side in the room

misty cave Apr 2, 2021, 1:57 AM

#

Hi @twin tapir, just done the wireshark room, and in Task 12 (HTTPS Traffic) the text says: "In order to load an RSA key navigate to Edit > Preferences > Protocols > SSL > [+], you will need to fill in the various sections on the menu with the following preferences".

it would seem that in Wireshark 3.4.4 (Latest version, was Pre-installed on my Kali) the workflow is different, and there is no SSL under the Protocols list. You can instead follow the same instructions, but enter the details in the "TLS" section of the Protocols.
e.g. "In some versions SSL is not in this list so we look for TLS instead, Edit > Preferences > Protocols > TLS > [+], you will need to fill in the various sections on the menu with the following preferences"

2021-04-02_02_18_36-kali_Working_snapshot_Running_-_Oracle_VM_VirtualBox___2.png

#

No SSL

2021-04-02_02_18_59-kali_Working_snapshot_Running_-_Oracle_VM_VirtualBox___2.png

eternal summit Apr 2, 2021, 1:58 AM

#

It's kinda buggy: if you've fullscreened the attackbox from split screen before then it doesn't show up and you need to click a button along the top @rich cloak

eternal summit Apr 2, 2021, 1:58 AM

#

misty cave No SSL

Wireshark calls the protocol different things in different versions. If it was changed, you would get the other half of people complaining that they can't find it because it's under the wrong name.

misty cave Apr 2, 2021, 2:06 AM

#

eternal summit Wireshark calls the protocol different things in different versions. If it was c...

would it be worth putting something in to say that?

eternal summit Apr 2, 2021, 2:06 AM

#

Maybe. That's up to Cry.

misty cave Apr 2, 2021, 2:06 AM

#

Fair 🙂

rich cloak Apr 2, 2021, 2:27 AM

#

eternal summit It's kinda buggy: if you've fullscreened the attackbox from split screen before ...

yup, found it. thanks.

wheat fractal Apr 2, 2021, 6:54 AM

#

HackPark is working fine again. Thank's for repairing it!

steady temple Apr 2, 2021, 8:52 AM

#

There is a bug in CC Pentesting when you come to use meteaploit against the machine. The machine that's deployed is not listening on any ports and metaploit fails.

#

I spent some time thinking it was my metasploit but I have now successfully it against another machine, so I'm confident there is something wrong with that machine.

dense stag Apr 2, 2021, 9:28 AM

#

steady temple There is a bug in CC Pentesting when you come to use meteaploit against the mach...

yes there is bug when we use metasploit exploit against the machine . i can't create the session.

steady temple Apr 2, 2021, 9:34 AM

#

I suggest moving on. You don't need to have completed this step to do the rest of the room. I just wish I could mark the room as complete.

strong kelp Apr 2, 2021, 9:47 AM

#

The part after . is it intended?

#

I mean, it does not make much sense

wheat fractal Apr 2, 2021, 2:38 PM

#

steady temple There is a bug in CC Pentesting when you come to use meteaploit against the mach...

It's working

dense stag Apr 2, 2021, 5:41 PM

#

wheat fractal It's working

That's good news!!

steady temple Apr 3, 2021, 4:28 PM

#

wheat fractal It's working

Thanks. Nice to get that one completed.

eternal summit Apr 3, 2021, 5:41 PM

#

strong kelp

That room is private

distant ice Apr 3, 2021, 8:26 PM

#

On this room: https://tryhackme.com/room/hackermethodology the link to nmap room (on Enumeration and Scanning Overview section) redirect to an error 404, i think i should link to https://tryhackme.com/room/furthernmap

dusky junco Apr 3, 2021, 8:36 PM

#

distant ice On this room: https://tryhackme.com/room/hackermethodology the link to nmap room...

Fixed! Nice catch! Thanks!

tidal path Apr 4, 2021, 12:20 AM

#

Hello, I am trying to join wreath room. I am not premium but apparently I should be able to access it with a 7 day streak?
I have a 7 day streak as you can see on the screenshot

obsidian kiln Apr 4, 2021, 12:22 AM

#

There's something up with the streaks just now @tidal path. Check your profile page? I suspect it'll tell you 6 days

#

#

Yeah -- TL;DR: the one at the top is one day ahead

lost stag Apr 4, 2021, 12:51 AM

#

Is there something wrong with the WebAppSec 101 room? When i start the machine the web server doesn't launch..
Tried to reset it without any luck. Port scan with nMap only reveals port 111 open.

undone drift Apr 4, 2021, 12:13 PM

#

I know that 99% of the time, it is not a bug in the room but now I am pretty confused about this room.

Room: Brainstorm
First task.

I have run Threader3000 and nmap and I get 3 ports open. Apparently, this is not the answer. I am this dumb? What I am doing so wrong that I am only finding 3 ports?

#

#

I even got the root flag but I can't get over this question 😄

lost stag Apr 4, 2021, 12:18 PM

#

Perhaps the room had services running in the past that is no longer running? Or that the answer simply is just set wrong..

undone drift Apr 4, 2021, 12:19 PM

#

Yeah, I'm thinking about that too. That's why I am here 🤭 I suppose this is a bug

lost stag Apr 4, 2021, 12:19 PM

#

According to writeups it shouldnt be more than these three.
It was easy to guess the answer though, even though that shouldnt be neccessary :p

obsidian flame Apr 4, 2021, 1:14 PM

#

undone drift I know that 99% of the time, it is not a bug in the room but now I am pretty con...

try

nmap -Pn -sV -T4 IP

strong kelp Apr 4, 2021, 2:01 PM

#

I think it should be a picture in the background

hasty bison Apr 4, 2021, 2:35 PM

#

Opera_Snapshot_2021-04-04_153506_tryhackme.com.png

glad badger Apr 4, 2021, 2:36 PM

#

hasty bison

Which room are you attempting to find?

hasty bison Apr 4, 2021, 2:36 PM

#

https://tryhackme.com/room/privescplayground

topaz thorn Apr 4, 2021, 2:38 PM

#

Are you on about the linux privesc room?

hasty bison Apr 4, 2021, 2:39 PM

#

Opera_Snapshot_2021-04-04_153905_tryhackme.com.png

topaz thorn Apr 4, 2021, 2:39 PM

#

Never seen that one before

glad badger Apr 4, 2021, 2:40 PM

#

Try /linuxprivesc

hasty bison Apr 4, 2021, 2:41 PM

#

i have that room as well

#

does this mean the other room has been removed ?

glad badger Apr 4, 2021, 2:41 PM

#

It looks like it, let me double check for you.

hasty bison Apr 4, 2021, 2:41 PM

#

okay

glad badger Apr 4, 2021, 2:43 PM

#

Yeah, that one looks like it is gone. There's also a second alternative: /linuxprivescarena

hasty bison Apr 4, 2021, 2:43 PM

#

yeah i hv both of them

#

how do i quit the room if its removed ?

glad badger Apr 4, 2021, 2:44 PM

#

Green Options button > Leave 🙂

hasty bison Apr 4, 2021, 2:44 PM

#

no i meant the one thats removed

#

all i see is that not found message

#

i also hv some rooms that i joined months ago and found out they arent free anymore, i cant quit them as well (there is no button)

glad badger Apr 4, 2021, 2:45 PM

#

I think you can't leave a removed room, but there's no harm of it showing up in My rooms.

#

By the way, there's also: https://tryhackme.com/room/commonlinuxprivesc

hasty bison Apr 4, 2021, 2:49 PM

#

alrightt ill check it out

obsidian kiln Apr 4, 2021, 3:19 PM

#

hasty bison i also hv some rooms that i joined months ago and found out they arent free any...

You'll be able to do it with some fancy burpsuite/console JS

#

There might even be something for it in #site-support

hasty bison Apr 4, 2021, 3:25 PM

#

oh yeah ill give that a try as well, thank you

wheat fractal Apr 4, 2021, 4:03 PM

#

Hello, I'm on room kafeesec , on task4, I have installed spiderfoot, but when trying a new scan I'm getting "Invalid target type" . I'm running kali linux just upgraded. Is this a known bug?

#

My bad, looks like the scan target needs to be set using quotes

eternal summit Apr 4, 2021, 4:47 PM

#

obsidian kiln There might even be something for it in <#521771811768107008>

#resources i believe.

severe monolith Apr 4, 2021, 6:47 PM

#

In the room linuxmodules, on that's what she sed, the titles ("The purple gang" and "The green gang") are mixed up. NOT A BUG I guess, but a bit confusing

obsidian kiln Apr 4, 2021, 6:58 PM

#

severe monolith In the room linuxmodules, on that's what she sed, the titles ("The purple gang" ...

Mixed up in what sense?

severe monolith Apr 4, 2021, 6:59 PM

#

The purple gang has modes s and y

#

Shouldn't the green gang have those?

obsidian kiln Apr 4, 2021, 6:59 PM

#

Oh, I getcha

#

Sorry -- was looking at the actual colours

#

Yep. @dusky junco

vast isle Apr 4, 2021, 8:23 PM

#

Hi - Currently completing OWASP-Juice-Shop, and I'm not able to complete Task 6, Q3, remove 5* review, but when I complete the steps and get onto the page, I'm not able to see any 5*, ony 4 and below.

I've terminated the box twice, but it appears the same. At this moment, I'm not able to complete Juice-Shop

compact shoal Apr 4, 2021, 9:02 PM

#

severe monolith Shouldn't the green gang have those?

Yeaa, u r right... I wonder why I didn't noti ced that earlier? ThinkingForever nvm, it's fixed. Thx for letting know ❤️

coral shell Apr 4, 2021, 9:14 PM

#

hi i have some problems with this room Memory Forensics when im tried to download the file i get failed i repeated 3 times get 300mb and i get failed

placid abyss Apr 4, 2021, 9:16 PM

#

Do you have space on your harddrive for the file?

coral shell Apr 4, 2021, 9:16 PM

#

yeah

#

i have 45 go

placid abyss Apr 4, 2021, 9:17 PM

#

Have you tried using a download manager for downloading it?

coral shell Apr 4, 2021, 9:18 PM

#

i dont have it

placid abyss Apr 4, 2021, 9:19 PM

#

The issue might be your browser from which your downloading it from..?

#

Try using a download manager (you can just search on Google for one)

coral shell Apr 4, 2021, 9:19 PM

#

yeah i know it but im using linux right now

#

thanks bty, i will try again

placid abyss Apr 4, 2021, 9:20 PM

#

There are download managers for Linux..... @coral shell

coral shell Apr 4, 2021, 9:21 PM

#

i didn't know, good

long flume Apr 5, 2021, 4:14 AM

#

Somewhere between a bug and feedback: my VM for this room on the Complete Beginner path is suuuuuuper slow https://tryhackme.com/room/intro2windows

I've had periods where it seems unresponsive for a few minutes. Part of it requires setting up some users and then logging in and testing stuff, but it takes several minutes to get through the login flow. Looking at the task manager from the admin account in my RDP session, it's constantly sitting at 99% CPU and roughly 95% memory. I think the VM might just be spec'd too low? (I'm RDPing at 1024x768 resolution, if that's relevant)

#

(It also says "Windows License is expired" in the corner, IDK if that's relevant tho)

topaz edge Apr 5, 2021, 11:44 AM

#

@tropic flame the room Kenobi doesn't work for me at all. I've been trying to work through it, and nothing I do works like the writeups I've read. help..?

eternal summit Apr 5, 2021, 11:44 AM

#

That's the bot

#

Try #room-help

dusky junco Apr 5, 2021, 12:40 PM

#

long flume Somewhere between a bug and feedback: my VM for this room on the Complete Beginn...

Thanks for reporting -- I've jottted this down to take a look at!

reef vapor Apr 5, 2021, 6:27 PM

#

Hey. "OWASP-Juice-Shop, Task 7, Perform a persistent XSS!" Doesn't return the flag for me
EDIT: It worked, I had alert('xss') instead of alert(xss)

indigo orchid Apr 5, 2021, 6:30 PM

#

In room/volatility, when I submit correct answer to this question, it doesnt accept it and says incorrect.
What process can be considered suspicious in Case 001?
I'm unable to complete the room. Just that one question remaining. Please help.

twin tapir Apr 5, 2021, 6:49 PM

#

that room isnt even out yet

#

what

indigo orchid Apr 5, 2021, 6:54 PM

#

i didnt even see how many days old that room was

#

but anyway, can you help with that issue? i can dm you what I think is the correct answer and you can let me know? @twin tapir

woeful cliff Apr 5, 2021, 8:17 PM

#

Hi! It's not exactly a bug but it could save you some bandwidth/traffic fee. In this room: https://tryhackme.com/room/networkservices2 the Task 6 Enumerating SMTP
recommends to use: /usr/share/seclists/Usernames,
but in your attack box image it is here: /usr/share/wordlists/SecLists/Usernames
I guess many folks will just clone / download the git repo instead of using this local copy. I would modify the description.

eternal summit Apr 5, 2021, 8:17 PM

#

Yeah, except the path provided is where it is installed in Kali

#

the attackbox should ideally be changed to match up cc @dusky junco

tired thorn Apr 5, 2021, 8:26 PM

#

Hi

#

I think the VM of Attacktive directory is bugged

#

I did it yesterday and nmap showed the service of the VM

#

with open ports

#

I did it this morning too and it cant describe the service and the open ports changed

#

today

#

eternal summit Apr 5, 2021, 8:28 PM

#

The VM won't have changed, most likely. Did you deploy a fresh machine? Using the IP you had before?

#

-sV and -A are redundant, -A does -sC -sV -O

tired thorn Apr 5, 2021, 8:29 PM

#

this was yesterday

tired thorn Apr 5, 2021, 8:29 PM

#

eternal summit The VM won't have changed, most likely. Did you deploy a fresh machine? Using th...

Yes I did

tired thorn Apr 5, 2021, 8:29 PM

#

eternal summit -sV and -A are redundant, -A does -sC -sV -O

I tried too but the results are kinda the same

#

different open ports

tired thorn Apr 5, 2021, 8:30 PM

#

tired thorn

Is strange because the service that nmap says is running is Oracle VB not Windows

eternal summit Apr 5, 2021, 8:31 PM

#

Looks just fine here

#

I blame your network

tired thorn Apr 5, 2021, 8:31 PM

#

eternal summit I blame your network

maybe

eternal summit Apr 5, 2021, 8:32 PM

#

Certainly not an issue with the room

tired thorn Apr 5, 2021, 8:32 PM

#

eternal summit Certainly not an issue with the room

ok ty for the info 😄

tired thorn Apr 5, 2021, 8:33 PM

#

eternal summit Looks just fine here

I tried the same as you...

#

I dont know why its happening this to me

eternal summit Apr 5, 2021, 8:34 PM

#

#site-support

#

The room is working correctly

tired thorn Apr 6, 2021, 12:46 AM

#

I am so stupid

#

I wasn't connected to the VPN facepalm

#

I don't know which device I was trying to hack 🤣

#

sorry If I was bothering you

twin bay Apr 6, 2021, 2:32 AM

#

https://tryhackme.com/room/sqlilab - Task 9 - The URL does not include the port (5000). Task 10 has this set up correctly (Visibly anyways - The hyperlink location is still incorrect)

summer pond Apr 6, 2021, 6:52 AM

#

https://tryhackme.com/room/brainstorm - it appears on task 1, that the expected answer for the number of open ports is incorrect (should be 3)

dusky junco Apr 6, 2021, 10:05 AM

#

eternal summit the attackbox should ideally be changed to match up cc <@!106094485129162752>

agreed -- noted for next push

wheat fractal Apr 6, 2021, 10:06 AM

#

@everyone

remote creek Apr 6, 2021, 11:48 AM

#

#room-help message

sudden basin Apr 6, 2021, 11:52 AM

#

rust room didnt open

#

its just stuck at this

wheat fractal Apr 6, 2021, 4:37 PM

#

dont know if it's quite correct place for it

#

#

this is correct answer , but it's not "restricting" ipv4 , it's 'forcing' to use ipv4

#

am i wrong ?

eternal summit Apr 6, 2021, 4:38 PM

#

Your choices are 4 or 6

wheat fractal Apr 6, 2021, 4:38 PM

#

yes

eternal summit Apr 6, 2021, 4:38 PM

#

Restricting it to ipv4 means use ipv4 only

wheat fractal Apr 6, 2021, 4:38 PM

#

ohh i see now

#

@eternal summit tanks 🙂

sonic tapir Apr 6, 2021, 5:42 PM

#

What's up with learn rust room? I see multiple people, including me can't load it.

#

frank creek Apr 6, 2021, 7:07 PM

#

Exact same issue. It actually gives me 2 flags, which are not the right ones

undone drift Apr 6, 2021, 7:22 PM

#

that tag, winpea it should be winPEAS

civic brook Apr 6, 2021, 9:10 PM

#

not sure if the answer is off or if there is something wrong with Volatility, correct answer keeps getting a incorrect

hazy tiger Apr 6, 2021, 9:11 PM

#

Try a cache refresh

civic brook Apr 6, 2021, 9:12 PM

#

still getting the incorrect

hazy tiger Apr 6, 2021, 9:13 PM

#

Hol' up

#

@twin tapir plss help

left tendon Apr 6, 2021, 9:27 PM

#

yeah broken for me too. should be right as it matches the process id

twin tapir Apr 6, 2021, 9:48 PM

#

I blame volatility

obsidian kiln Apr 6, 2021, 10:33 PM

#

twin tapir I blame volatility

I blame you

#

Go fix

left tendon Apr 7, 2021, 12:39 AM

#

yuuusss fixed. sweet sweet green completed. thanks @twin tapir

last roost Apr 7, 2021, 3:31 AM

#

Anyone else having problems with their AttackBox just shutting down? I've been trying to finish Blue for several hours now because my AttackBox keeps shutting down mid-exploit.

civic brook Apr 7, 2021, 3:46 AM

#

room is good, thanks for the good room Cry

dawn rover Apr 7, 2021, 4:31 AM

#

Room : https://www.tryhackme.com/room/uploadvulns
Task : 9
magic.uploadvulns.thm not loading

TryHackMe

TryHackMe | Cyber Security Training

An online platform for learning and teaching cyber security, all through your browser.

left tendon Apr 7, 2021, 4:46 AM

#

it loads when i try it @dawn rover did you add it to your hosts file?

dawn rover Apr 7, 2021, 4:46 AM

#

yes I did at the start of the room

#

wait I'll restart my machine and try again

#

It loads now , God I totally forgot about the hosts file

#

thanks @left tendon

analog zephyr Apr 7, 2021, 5:12 AM

#

https://www.tryhackme.com/room/rust can't access this room. It takes forever to load

TryHackMe

TryHackMe | Learn Rust

Learn Rust for someone who knows programming but doesn't know low level programming

verbal sedge Apr 7, 2021, 5:23 AM

#

analog zephyr https://www.tryhackme.com/room/rust can't access this room. It takes forever to ...

known issue and have been reported.

analog zephyr Apr 7, 2021, 5:29 AM

#

verbal sedge known issue and have been reported.

any fixes for now?

#

or any different way of accessing it for now?

verbal sedge Apr 7, 2021, 5:29 AM

#

they will fix it whenever they can. I have no info regarding that.

analog zephyr Apr 7, 2021, 5:30 AM

#

Thank you

twin bay Apr 7, 2021, 6:56 AM

#

https://tryhackme.com/room/linuxmodules - Task 12 - Whetheryou're - Should be 2 words

grim harness Apr 7, 2021, 8:28 AM

#

https://tryhackme.com/room/networkservices2 In the intro: "'Learn Linux' room (https://tryhackme.com/room/zthlinux)" The room zthlinux is made private and not accessible

eternal summit Apr 7, 2021, 10:13 AM

#

@obsidian kiln fixitfixit

#

Or wait

#

Maybe don't, I don't know what CMN is doing lately

glad badger Apr 7, 2021, 12:24 PM

#

twin bay https://tryhackme.com/room/linuxmodules - Task 12 - `Whetheryou're` - Should be ...

Fixed. Thank you for reporting. 🙂

grim harness Apr 7, 2021, 1:08 PM

#

https://tryhackme.com/room/networkservices2 task 4. the +s should be +sx, otherwise the task fails!

sonic willow Apr 7, 2021, 1:12 PM

#

grim harness https://tryhackme.com/room/networkservices2 task 4. the +s should be +sx, otherw...

i don't see a +s on task 4?

grim harness Apr 7, 2021, 1:15 PM

#

sonic willow i don't see a `+s` on task 4?

"Now, we're going to add the SUID bit permission to the bash executable we just copied to the share using "sudo chmod +[permission] bash". What letter do we use to set the SUID bit set using chmod?"

#

the answer to that question is a one letter answer, and it only accepts the s

#

yet if instead of +s the +sx is used, the assignment works, not if you use only +s

sonic willow Apr 7, 2021, 1:17 PM

#

it seems fine to me, the binary should already be executable and hence have the x flag, but i'll spin the room up now and check for you

oak mica Apr 7, 2021, 1:20 PM

#

I think it's to do with setting +s over-rides it being executable (+x) but i'm not 100% the "man ls" page for this is how I worked it out when I was confusing myself with it on a challenge in the past

#

's'
If the setuid or setgid bit and the corresponding executable bit are both set.

'S'
If the setuid or setgid bit is set but the corresponding executable bit is not set.

sonic willow Apr 7, 2021, 1:26 PM

#

yeah i'm not sure what is being asked

eternal summit Apr 7, 2021, 1:26 PM

#

The issue is that it was not executable before

#

Suid does not overwrite the executable permission, suid is an additional digit, you could use chmod 477

grim harness Apr 7, 2021, 1:46 PM

#

eternal summit The issue is that it was not executable before

Thanks for this, yes. And the room take 's' as the correct answer instead of sx, was the issue over here.

eternal summit Apr 7, 2021, 1:46 PM

#

grim harness Thanks for this, yes. And the room take 's' as the correct answer instead of sx,...

s is correct, if the permissions are correct to start

grim harness Apr 7, 2021, 1:47 PM

#

i've tried the whole thing twice, but it wasn't executable initially, apparently

paper basin Apr 7, 2021, 2:12 PM

#

https://tryhackme.com/room/openvas

Not quite a bug I don't think but when using the attack box for this room, Docker would not start without me running the following commands:

systemctl unmask docker.service
systemctl unmask docker.socket

I can then run the Docker service via "systemctl start docker.service"

#

Might be worth noting?

frozen pier Apr 7, 2021, 3:48 PM

#

I joined the new volatility room when it first came, didn't answer anything; today I can't go in , It says me I have to buy a subscription, but I don't have any, AND the worst thing I even can't leave the room, it just stands in My Rooms

#

Can someone help?

glad badger Apr 7, 2021, 3:50 PM

#

frozen pier I joined the new volatility room when it first came, didn't answer anything; tod...

Its release has been rescheduled. No worries about not being able to leave the room. 🙂

obsidian flame Apr 7, 2021, 4:58 PM

#

Hey @glad badger is it possible for you to relink that to the split version of zthlinux or even to the module?

eternal summit Apr 7, 2021, 5:01 PM

#

I think CMN is doing something about the foundwtional Linux content this week

obsidian flame Apr 7, 2021, 10:53 PM

#

Oki dokes, good to know

glad badger Apr 7, 2021, 11:00 PM

#

obsidian flame Hey <@!719230703161835633> is it possible for you to relink that to the split v...

I changed it to the Linux Fundamentals module. Good idea. 🙂 cc @versed jacinth

woeful cliff Apr 8, 2021, 6:36 AM

#

Dear Team, I'm practicing with this room: https://tryhackme.com/room/wireshark .
-Task 12 HTTPS traffic mentions Packet 11 while the picture is about Packet 36.
-"navigate to Edit > Preferences > Protocols > SSL > [+]" this option is now called TLS in WireShark.

left tendon Apr 8, 2021, 7:53 AM

#

is this room still bugged? https://tryhackme.com/room/csp

#

for reference, attack 5 and 6 require that the room machine have internet access

#

(which it doesnt 🙂 )

north gyro Apr 8, 2021, 10:32 AM

#

left tendon is this room still bugged? https://tryhackme.com/room/csp

I tried a week or so ago, and yes it's broken

grim harness Apr 8, 2021, 11:00 AM

#

@heavy spade my just updated msf6 cannot seems to find anything called socks5

obsidian kiln Apr 8, 2021, 11:08 AM

#

Ooookay, and why do you need to ping an admin for that? @grim harness

grim harness Apr 8, 2021, 11:09 AM

#

Ooh since it was his room, I thought it might make sense to do so. Sorry.

obsidian kiln Apr 8, 2021, 11:10 AM

#

I have a feeling MSF changed the syntax. Try anything that looks like socks_proxy and set it to socks5 in there

grim harness Apr 8, 2021, 11:13 AM

#

Ah, it looks crazy at it is there. I've been doing the https://tryhackme.com/room/rpmetasploit room, and there is the instruction to find socks5

twin tapir Apr 8, 2021, 12:53 PM

#

woeful cliff Dear Team, I'm practicing with this room: https://tryhackme.com/room/wireshark ....

Pictures aren’t representative of text usually.
I’ve swapped this back and forth a solid 5 times now, Ill probably just add a note for both when I get a sec since Wireshark doesn’t know which they want to refer to it as

obsidian flame Apr 8, 2021, 1:22 PM

#

obsidian kiln I have a feeling MSF changed the syntax. Try anything that looks like `socks_pro...

that's correct yes, they've previously had the socks5 option saying that it will be deprecated soon (when i was doing Throwback it was still there)

#

but that may be a solid 4 months ago

hardy jungle Apr 8, 2021, 8:45 PM

#

https://tryhackme.com/room/zthlinux doesnt load for me.

#

keeps loading

glad badger Apr 8, 2021, 9:03 PM

#

Which room linked to /zthlinux? @hardy jungle

woeful cliff Apr 9, 2021, 5:29 AM

#

twin tapir Pictures aren’t representative of text usually. I’ve swapped this back and fort...

very many thanks! 🙂 I'm sure it will help. I saw this ssl/tls misunderstanding came up in the room-help room.

hardy jungle Apr 9, 2021, 6:16 AM

#

glad badger Which room linked to /zthlinux? <@!424633431754801164>

Learn linux, yes linked to /zthlinux. I was already joined i already know linux so wanted to leave

woeful cliff Apr 9, 2021, 6:38 AM

#

hardy jungle Learn linux, yes linked to /zthlinux. I was already joined i already know linux ...

If you feel like you know Linux, you don't know it at all. (it's my opinion ofc)

hardy jungle Apr 9, 2021, 7:54 AM

#

Well i think learn linux box just learns you things like cd and cat and ls and all the standard things

woeful cliff Apr 9, 2021, 8:13 AM

#

hardy jungle Well i think learn linux box just learns you things like cd and cat and ls and a...

sry I got you wrong

gleaming shadow Apr 9, 2021, 9:19 AM

#

hey, for attackingics2, the second flag doesn't seem to work

#

will try reseting the box

#

and that somehow worked, probably a glitch in the matrix with the visuals

verbal sedge Apr 9, 2021, 9:35 AM

#

all of the writeup links are broken:
https://www.tryhackme.com/room/dnsmanipulation

gleaming shadow Apr 9, 2021, 12:45 PM

#

410 is a rare code indeed

blazing raven Apr 9, 2021, 1:32 PM

#

Hey, i think the ustoun box needs a resource boost it takes like 40 mins for the intended port to show up (Free users) the service is really slow too, since the Windows machines are up for like an hour or so its gonna make it hell for users to root the machine.
I completed the box last night trying to make the video walkthrough and its making it hell for me and i know a lot of people are stuck too probs because of that so thats why im asking, thanks.

mental bough Apr 9, 2021, 2:38 PM

#

Having a problem in linuxstrengthtraining - the final flag won't get accepted.
There seems to be an extra character after the left curl bracket ({*******} dunno if that'll show in discord).
I've tried brute-forcing that last character, which naturally isn't reflected in the flag within the box, but I've had no luck.

#

Right curl bracket*

glad badger Apr 9, 2021, 3:27 PM

#

mental bough Having a problem in linuxstrengthtraining - the final flag won't get accepted. ...

Try now 🙂 I removed the line return from the answer field. Thank you for reporting. 🙂

mental bough Apr 9, 2021, 3:42 PM

#

Thank you!

grim yoke Apr 9, 2021, 4:29 PM

#

blazing raven Hey, i think the ustoun box needs a resource boost it takes like 40 mins for the...

yes you are right , it takes 40 minutes for the intended port to show

neat magnet Apr 9, 2021, 4:30 PM

#

In the yara room the answer to Back to Valhalla, inspect the Info for this rule. Under Statistics what was the highest rule match per month in the last 2 years? (YYYY/M) has to be updated

proud pagoda Apr 9, 2021, 4:44 PM

#

Room: https://tryhackme.com/room/uploadvulns
Task: 5
Bug: in the screenshot of the gobuster command, the mode "dir" is written without the -m switch (maybe in the previous version was a command?)

eternal summit Apr 9, 2021, 4:45 PM

#

proud pagoda Room: https://tryhackme.com/room/uploadvulns Task: 5 Bug: in the screenshot of t...

#

Your gobuster is outdated, by quite a long way.

#

3.0 released in June 2019.

proud pagoda Apr 9, 2021, 6:07 PM

#

oh wow my bad then, thought so cause I had just installed it, better like this then, no bug

pearl oriole Apr 9, 2021, 7:29 PM

#

Trying this room. Found a web page with a youtube-video on it, but the video is dead. Is the video needed to get to the next step? https://www.tryhackme.com/room/lianyu

TryHackMe

TryHackMe | Lian_Yu

A beginner level security challenge

eternal summit Apr 9, 2021, 7:29 PM

#

Nope.

pearl oriole Apr 9, 2021, 7:29 PM

#

Ty

frigid plover Apr 9, 2021, 9:17 PM

#

https://tryhackme.com/room/johntheripper0
There is a "typo" (duplicate) in the beginning of Task 3.
"in order to in order to"

zealous vortex Apr 10, 2021, 1:55 AM

#

Minor typo in room "intro2windows", task 4, under disk cleanup: "just adding up to the computer disk space"

#

shortly below that, under "command-line tools" it says windows comes with 2, but actually lists 3.

spare idol Apr 10, 2021, 3:06 PM

#

I am having a problem open vulnersity website I just says and error message and I am using openvpn and are a free to play

eternal summit Apr 10, 2021, 3:07 PM

#

It doesn't run a webserver on port 80

#

Follow the instructions in the room

spare idol Apr 10, 2021, 3:08 PM

#

I can try again or else I am gonna show a screenshot off it

sonic willow Apr 10, 2021, 10:42 PM

#

https://tryhackme.com/room/allsignspoint2pwnage

#

aside from the first question in task 1, and task 4, every question is missing a question mark

twin bay Apr 11, 2021, 8:23 AM

#

https://tryhackme.com/room/webappsec101 - Typing test;whoami into the "Password Strength" box as an attempt to complete Task 6 crashes the web server requiring a box restart.

real snow Apr 11, 2021, 1:55 PM

#

AllSignsPoint2Pwnage is the slowest room on THM I think. Unstable as well.

obtuse adder Apr 11, 2021, 2:29 PM

#

This box (AllSignsPoint2Pwnage) should be deleted or fixed because it is OMEGA unstable and it dies after 30 min for no fucking reason.

austere kernel Apr 11, 2021, 2:50 PM

#

└─$ ssh -i id_rsa kenobi@10.10.78.26                                        1 ⨯
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for 'id_rsa' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "id_rsa": bad permissions
kenobi@10.10.78.26's password:

#

I can't use the private key in Kenobi

hazy tiger Apr 11, 2021, 2:51 PM

#

Try chmod 600 id_rsa

#

Then re-run ssh.

austere kernel Apr 11, 2021, 2:53 PM

#

I tried, doesn't work.

hazy tiger Apr 11, 2021, 2:53 PM

#

Any errors?

austere kernel Apr 11, 2021, 2:54 PM

#

┌──(kali㉿kali)-[/mnt/kenobiNFS/tmp]
└─$ sudo chmod 600 id_rsa                                                 130 ⨯
chmod: changing permissions of 'id_rsa': Read-only file system
                                                                                
┌──(kali㉿kali)-[/mnt/kenobiNFS/tmp]
└─$ ssh -i id_rsa kenobi@10.10.78.26                                        1 ⨯
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for 'id_rsa' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "id_rsa": bad permissions
kenobi@10.10.78.26's password:

#

It stays perm 0644

hazy tiger Apr 11, 2021, 2:55 PM

#

uhh wut

austere kernel Apr 11, 2021, 2:55 PM

#

Have the feeling I'm either really stupid orr...

#

I can try moving the key out of the mount 2 my desktop?

hazy tiger Apr 11, 2021, 2:56 PM

#

Oh

#

Yes, move it to your home machine 😄

austere kernel Apr 11, 2021, 2:56 PM

#

Thank God, I am so smart.

hazy tiger Apr 11, 2021, 2:57 PM

#

Haha, yeah you are!

glad badger Apr 11, 2021, 4:37 PM

#

real snow AllSignsPoint2Pwnage is the slowest room on THM I think. Unstable as well.

A performance boost for the room has been requested.

glad badger Apr 11, 2021, 4:38 PM

#

obtuse adder This box (AllSignsPoint2Pwnage) should be deleted or fixed because it is OMEGA u...

^^ See my previous post. In the meanwhile, try another room. 🙂

storm flax Apr 11, 2021, 5:00 PM

#

If I am doing a room and it asks a question which the answer is a domain name, but the domain name is now different to what the answer is, where would I go to get this fixed/updated?

The current answer to the question is a redirect to a different domain.

sonic willow Apr 11, 2021, 5:31 PM

#

storm flax If I am doing a room and it asks a question which the answer is a domain name, b...

is this the splunk room by any chance?

storm flax Apr 11, 2021, 5:32 PM

#

sonic willow is this the splunk room by any chance?

yes

sonic willow Apr 11, 2021, 5:35 PM

#

storm flax yes

okay, so the usual way is to just put the room name, task and question here and explain what's wrong, but i'll let dark know since i've seen this mentioned a few times

#

@heavy spade any chance you could update the last question on task 2 in the splunk room please?
https://tryhackme.com/room/bpsplunk
the current answer still works, but it redirects to a new subdomain (community), people have said it's hard to find by googling

storm flax Apr 11, 2021, 5:37 PM

#

sonic willow okay, so the usual way is to just put the room name, task and question here and ...

Well I wasn't reporting the issue, I was just asking where to report it at.

Also I couldn't find it in Google I guessed from the number of characters.

eternal summit Apr 11, 2021, 5:37 PM

#

storm flax Well I wasn't reporting the issue, I was just asking where to report it at. Als...

You were directed to here, which is where you report it

storm flax Apr 11, 2021, 5:38 PM

#

eternal summit You were directed to here, which is where you report it

I may have been directed here, but I wasn't reporting it here, I was asking where to report it at.

eternal summit Apr 11, 2021, 5:39 PM

#

Yes

#

I told you to report it here.

storm flax Apr 11, 2021, 5:39 PM

#

eternal summit I told you to report it here.

but I wasn't reporting it here, I was asking where to report it at.

eternal summit Apr 11, 2021, 5:39 PM

#

I understand. But prior to this, you asked in #site-support and you were told to report it here.

storm flax Apr 11, 2021, 5:42 PM

#

eternal summit I understand. But prior to this, you asked in <#521771811768107008> and you were...

#site-support message

You never said to report it here, you didn't specifically use those words, you just linked the channel and talked about bugs and said that usually it's not a bug.

eternal summit Apr 11, 2021, 5:42 PM

#

Where would I go to report it?
#roombugs

ancient token Apr 11, 2021, 10:03 PM

#

Hi, in the room https://tryhackme.com/room/catregex there is a mistake with one of the answers
Question: Match every possible IPv4 IP address (use metacharacters and groups)
Answer: (\d{1,3}.){3}\d{1,3}

I actually probe these because regular expression are interesting for me but this doesnt work, I build another synstaxis according theory and it works, not the rigth

#

#

So the error was my copy -paste? or is the wrong sintax

#

this one works too

zealous vortex Apr 11, 2021, 10:10 PM

#

there are regex tester sits online, if that helps. That's usually what I do when building a regex. you can input various test inputs that should get accepted and rejected

ancient token Apr 11, 2021, 10:11 PM

#

the room actually gives you a online site the explain the hole function

#

the point here is that i belied that the "rigth" answer is not the rigth answer😅

tranquil vessel Apr 11, 2021, 11:05 PM

#

obtuse adder This box (AllSignsPoint2Pwnage) should be deleted or fixed because it is OMEGA u...

I am not aware of any issue with 30 min shutdown, never hit when testing but will test again now. Part of the performance issue is with Windows Defender which is part of room ( AV Evasion ). @glad badger thanks for requesting the boost. If it still has issues I will modify the room and remove the console user task and auto login to reduces resources required.

late orchid Apr 12, 2021, 1:27 AM

#

doing the dogs cat room right now and i think theirs a small issue that im not sure if its intended

#

the log that im getting from LFI is very very very long

obsidian kiln Apr 12, 2021, 1:41 AM

#

The log will be different in each box @late orchid

#

Depending on what you did to it before getting the LFI

#

i.e. if you ran a directory fuzz on it, the log will be huge

late orchid Apr 12, 2021, 1:43 AM

#

obsidian kiln i.e. if you ran a directory fuzz on it, the log will be *huge*

ahhh my bad i misread one of them and was like was that even me? maybe running dirbuster twice was a bad idea 😆

#

is the alert also intended? in burp it opens just find but in the browser i get spammed by alerts saying nice and vulnerable as well as a ton of blank ones

jade idol Apr 12, 2021, 8:14 AM

#

In https://tryhackme.com/room/bufferoverflowprep on task 4 (OVERFLOW3 ), the questions are answerable and both EIP and Badchars can be obtained to complete the task, but when I try to go on to get shell I always fail. The payload will not generate with the confirmed badchard.

unique wigeon Apr 12, 2021, 11:37 AM

#

Hello everyone, I have experienced this for almost 3 days every time I want to play in the GLITCH room, I have tried resetting the machine several times but the results are still the same

wheat fractal Apr 12, 2021, 2:29 PM

#

https://tryhackme.com/room/dailybugle

Dumping the database in this room didn't work for me. Tried with SQLMap and Joomblah.py, sqlmap said that table '#__users' didn't exist (Also the majority of the "joomla" database couldn't be dumped) and joomblah gave me some error which I didn't save.

maiden spoke Apr 12, 2021, 3:19 PM

#

@unique wigeon You need to wait for the web application to start. Give it a couple of minutes and the error will go away.

digital plume Apr 12, 2021, 4:34 PM

#

the newest version of metasploit doesn't come with auxiliary/server/socks5 anymore. it has probably been renamed.
room is rpmetasploit

#

version
Framework: 6.0.39-dev-
Console  : 6.0.39-dev-

obsidian flame Apr 12, 2021, 5:04 PM

#

digital plume the newest version of metasploit doesn't come with auxiliary/server/socks5 anymo...

search for socks, you should find an auxiliary module for your task :), they removed it quite recently

late orchid Apr 12, 2021, 5:44 PM

#

trying to solve the chocolate factory room now

#

and it says that on the server their is a missing python library

#

and in the script the encrypted message is missing the B'' part so theirs a error

digital plume Apr 12, 2021, 6:10 PM

#

@obsidian flame the issue is that the answer required to complete the task doesn't show up anymore, not that I need a module that doesn't exist.
though I could guess the answer with the information provided without actually finding it through the provided command

obsidian flame Apr 12, 2021, 7:05 PM

#

digital plume <@!369112657871110145> the issue is that the answer required to complete the tas...

Ahh gotcha, now sorry for interfering, completed the room ages ago

devout osprey Apr 13, 2021, 10:10 AM

#

Solving Bolt room but port 8*** on http don't work and load indefinitely. My vpn is connected

remote hamlet Apr 13, 2021, 12:38 PM

#

@dusky junco Hey qt can I get you to take a look over the REmux room? There are a LOT of grammatical errors in that one. https://tryhackme.com/room/tmuxremux

agile void Apr 13, 2021, 6:32 PM

#

Hello guys , I have been stuck in this problem for a while now

#

when i enter a room and do an nmap scan port 80 shows its open

#

but when i try to access it on firefox it just keeps loading

sonic willow Apr 13, 2021, 6:37 PM

#

@agile void what room is this happening on please? is your browser trying to redirect to https? is there something causing your browser to hang eg. burp?

eternal summit Apr 13, 2021, 6:43 PM

#

What room? Every room? Does http://10.10.10.10 load?

agile void Apr 13, 2021, 6:43 PM

#

sonic willow <@!261360073773678594> what room is this happening on please? is your browser tr...

in glitch room

#

yes kind of every room, some rooms work fine tho but most keeps loading

eternal summit Apr 13, 2021, 6:44 PM

#

Does http://10.10.10.10 load and show your IP?

agile void Apr 13, 2021, 6:44 PM

#

let me check

#

yea yea

#

it opens

#

very fast

#

most of rooms keeps loading then opens but after so much time idk why

eternal summit Apr 13, 2021, 6:47 PM

#

Does it also show your VPN IP?

agile void Apr 13, 2021, 6:47 PM

#

yes it shows it

eternal summit Apr 13, 2021, 6:47 PM

#

Ok. Try the MTU fix pinned in #site-support but it's unlikely to help.

agile void Apr 13, 2021, 6:48 PM

#

sure thanks

amber drum Apr 14, 2021, 6:12 AM

#

Hi, recently I cant connect to THM's machine

#

ping 10.10.43.126                                                    2 ⨯
PING 10.10.43.126 (10.10.43.126) 56(84) bytes of data.
64 bytes from 10.10.43.126: icmp_seq=1 ttl=63 time=260 ms
64 bytes from 10.10.43.126: icmp_seq=2 ttl=63 time=278 ms
64 bytes from 10.10.43.126: icmp_seq=3 ttl=63 time=265 ms
64 bytes from 10.10.43.126: icmp_seq=4 ttl=63 time=252 ms
64 bytes from 10.10.43.126: icmp_seq=5 ttl=63 time=260 ms
64 bytes from 10.10.43.126: icmp_seq=6 ttl=63 time=249 ms
64 bytes from 10.10.43.126: icmp_seq=7 ttl=63 time=216 ms
64 bytes from 10.10.43.126: icmp_seq=8 ttl=63 time=257 ms
64 bytes from 10.10.43.126: icmp_seq=9 ttl=63 time=239 ms
64 bytes from 10.10.43.126: icmp_seq=10 ttl=63 time=218 ms
64 bytes from 10.10.43.126: icmp_seq=11 ttl=63 time=349 ms
64 bytes from 10.10.43.126: icmp_seq=12 ttl=63 time=260 ms
64 bytes from 10.10.43.126: icmp_seq=13 ttl=63 time=243 ms
64 bytes from 10.10.43.126: icmp_seq=14 ttl=63 time=224 ms
64 bytes from 10.10.43.126: icmp_seq=15 ttl=63 time=283 ms
64 bytes from 10.10.43.126: icmp_seq=16 ttl=63 time=264 ms
64 bytes from 10.10.43.126: icmp_seq=17 ttl=63 time=241 ms
64 bytes from 10.10.43.126: icmp_seq=18 ttl=63 time=225 ms
64 bytes from 10.10.43.126: icmp_seq=19 ttl=63 time=284 ms
64 bytes from 10.10.43.126: icmp_seq=20 ttl=63 time=259 ms
64 bytes from 10.10.43.126: icmp_seq=21 ttl=63 time=240 ms
64 bytes from 10.10.43.126: icmp_seq=22 ttl=63 time=222 ms
64 bytes from 10.10.43.126: icmp_seq=23 ttl=63 time=281 ms

#

i've tried connecting via ovenvpn also wouldnt help

summer hatch Apr 14, 2021, 9:57 AM

#

hey, I have a problem with the "owasp top 10" room at severity 7
the second to last question and the last one, it doesn't want to accept the answers. it doesn't tell me if it's good or not, isn't that normal?

eternal summit Apr 14, 2021, 10:37 AM

#

Check your antivirus

#

@summer hatch Usually it's antivirus blocking it

summer hatch Apr 14, 2021, 10:40 AM

#

eternal summit <@386880383293325314> Usually it's antivirus blocking it

okey thanks for your answer, I'll deactivate it for the room ^^

eternal summit Apr 14, 2021, 10:41 AM

#

What antivirus is it?

#

Skidy has been working with them to eliminate the false positives

summer hatch Apr 14, 2021, 10:44 AM

#

it's the basic antivirus, win def

eternal summit Apr 14, 2021, 10:44 AM

#

That's weird

summer hatch Apr 14, 2021, 10:58 AM

#

eternal summit That's weird

It's good, it's set by deactivating win def , thank you for answering me 🙂

eternal summit Apr 14, 2021, 10:59 AM

#

@lucid oasis this one's new, defender getting in the way now. This is probably more of an issue than avg/avast.

hazy tiger Apr 14, 2021, 11:22 AM

#

Hmm that's interesting 🤔

tardy lynx Apr 14, 2021, 4:18 PM

#

Corp room admin pw expired and changing it is a nightmare

glad badger Apr 14, 2021, 4:19 PM

#

tardy lynx Corp room admin pw expired and changing it is a nightmare

Can you please define nightmare in terms of the amount of time required?

eternal summit Apr 14, 2021, 4:21 PM

#

If you can type the password, like 5 minutes at most? Factoring in getting it wrong a couple times

tardy lynx Apr 14, 2021, 4:24 PM

#

you have to type the original one in and copy and paste doesn't seem to work on remmina or xfreerdp

dry valley Apr 14, 2021, 4:32 PM

#

yep

#

even with +clipboard

glad badger Apr 14, 2021, 4:33 PM

#

Typing _QuejVudId6 as the password? It's 11 characters.

tardy lynx Apr 14, 2021, 4:35 PM

#

dry valley yep

yep

glad badger Apr 14, 2021, 4:35 PM

#

The new password requirement can be derived from that: 11 characters, 1 special character, 1 numerical, 3 Uppercase (probably the policy has 1 Uppercase).

tardy lynx Apr 14, 2021, 4:42 PM

#

alright done

#

update if anyone needs to change windows password on remote windows machine but no gui net user username * is your friend

glad badger Apr 14, 2021, 4:48 PM

#

With xfreerdp, try adding the /p at the end with no password specified, it should prompt in the CLI.

tardy lynx Apr 14, 2021, 5:22 PM

#

glad badger With xfreerdp, try adding the `/p` at the end with no password specified, it sho...

would that allow me to change it before or after the client connects to the target machine? Clipboard failed when connected to the windows pw reset when you tried to login with the admin pw on the https://tryhackme.com/room/corp machine

lucid oasis Apr 14, 2021, 5:59 PM

#

eternal summit <@243160021674754048> this one's new, defender getting in the way now. This is p...

Thanks for letting me know:) If you see it happening again, I'll see if I can reach out to remove the false positive.

zealous vortex Apr 14, 2021, 11:38 PM

#

Minor typo/run-on sentence. Room: activedirectorybasics, task 5. Should be a period between "...to and from each other <.> when attacking an Active Directory..."

dark raptor Apr 15, 2021, 5:56 AM

#

STEEL MOUNTAIN ROOM: Anyone try this room lately using the path and tools laid out in the room? The procedure to overwrite the ASCService.exe file on the target w/the .exe file generated by msvenom and start a Netcat rev shell on my machine results in the screen-shot scenario below. With sc query, I can verify I am stopping the service before I execute the listener. When I sc start AdvancedSystemCareService9, it just times out. I have verified msfvenom created the correct .exe file for my tun0 ip and LPORT.

viral cobalt Apr 15, 2021, 6:07 AM

#

dark raptor STEEL MOUNTAIN ROOM: Anyone try this room lately using the path and tools laid o...

on msfvenom, did you do -f exe or -f exe-service

dark raptor Apr 15, 2021, 7:15 AM

#

Hey there-

#

I used -f exe (I copied the output in the room)

Screen_Shot_2021-04-15_at_12.18.35_AM.png

viral cobalt Apr 15, 2021, 7:23 AM

#

try exe-service

#

it's designed for unquoted service paths afaik

#

and as a tip, you can use LHOST=tun0

dark raptor Apr 15, 2021, 7:24 AM

#

oh very nice- I will try that- thank you. Else, I will do it manually with a Python script and server, OSCP style;)

viral cobalt Apr 15, 2021, 7:24 AM

#

or whatever your thm vpn interface happens to be

#

and generating executables w/ msfvenom is fully in scope, you only have to worry about Meterpreter/msf exploits

dark raptor Apr 15, 2021, 7:27 AM

#

yes I tried to rule out Meterpreter ip conflicts as it uses my tun0 to listen on this exploit, also uses my eth0 briefly to setup a server, then it stops the service. But as long as the ports are different, should be able to use the same ip addy right?

#

in other words, my netcat listener and meterpreter could both use my tun0 at the same time, because they are listening on different ports- am I correct?

viral cobalt Apr 15, 2021, 7:31 AM

#

dark raptor in other words, my netcat listener and meterpreter could both use my tun0 at the...

yes you can listen on the same interface on two different ports

dark raptor Apr 15, 2021, 7:31 AM

#

roger that! thanks again - back at it;)

#

btw- I am in awe of all your certs!!!! Mega Kudos to you!!💯

dark raptor Apr 15, 2021, 8:03 AM

#

got root! that exe-service was totally it! thanks again- perhaps they should update that screen shot in the room?

wheat fractal Apr 15, 2021, 10:41 AM

#

I can be wrong but I believe that the correct answer for the room hacking with powershell, Basic powershell commands, question 3 "how many cmdlets are installed on the system?", has changed...

#

On the box I found 6641 which is not the correct answer, I follow my method and then to be sure read a write up and with the method from it I still found 6641 and not the good answer the room requires.

elder aurora Apr 15, 2021, 1:53 PM

#

after 15 minutes from boot is normal that port on 1433 on Ustoun room is still closed ? Also this box becomes unreachable after about 1 hour

#

took about 27 min T_T

viral cobalt Apr 15, 2021, 2:06 PM

#

potentially needs the licensing fix?

eternal summit Apr 15, 2021, 2:07 PM

#

viral cobalt potentially needs the licensing fix?

Yep, I'm pretty sure CMN is aware of the licensing

#

And I can confirm the testing team is aware of the SQL issue

robust niche Apr 15, 2021, 6:21 PM

#

Any issues with the new SSTI room ? Tried accessing the url yesterday couldnt connect, now 7 minutes after boot cant connect either.

#

Ignore that, im stupid 😄

eternal summit Apr 15, 2021, 7:01 PM

#

@sonic willow worth adding a note that / will 404?

sonic willow Apr 15, 2021, 8:07 PM

#

eternal summit <@180392440945967104> worth adding a note that / will 404?

yeah i'll stick that on there aha

civic brook Apr 15, 2021, 9:57 PM

#

new WebEnum room is kicking an answer error for WP theme, not sure if it's me or not

loud breach Apr 15, 2021, 9:58 PM

#

civic brook new WebEnum room is kicking an answer error for WP theme, not sure if it's me or...

I was writing the same.. it's not an error, theme was updated recently, and set this answer 0.1 forward.

true granite Apr 15, 2021, 9:58 PM

#

AllSignsPoint2Pwnage seems to have something going on, after an hour it kicks you out even if you are a VIP and have 2 hours on the box. Not sure if that's been reported yet, but happened twice in a row.

obsidian kiln Apr 15, 2021, 10:01 PM

#

That indicates that it's thrown its license and need to have it applied again 🙂
It's a known issue

north gyro Apr 16, 2021, 3:09 AM

#

civic brook new WebEnum room is kicking an answer error for WP theme, not sure if it's me or...

i found that too, decrement the version that you find by 0.1

#

#

being nitpicky Thankfully for us, WPScan should say Thankfully for us, nikto

vivid dagger Apr 16, 2021, 4:04 AM

#

In Linux PrivEsc machine ssh is not working currently, yseterday too it was not working, also many of times the service starts after a delay of 5-6 mins. But right now after a delay of 10 mins also it is not working

echo shoal Apr 16, 2021, 7:31 AM

#

Any help with knockd and ufw not working on thw thm machine i uploaded but is working fine on the machine i made

brazen gulch Apr 16, 2021, 7:53 AM

#

Hey @dusky junco ! Thanks for making the Web Enumeration room.

Quick feedback: Task 4 first sentence refers to Dirbuster, which probably was meant to be Gobuster.

"dir" Mode
Dirbuster has a "dir" mode that allows the user to enumerate website directories.

https://tryhackme.com/room/webenumerationv2

lethal haven Apr 16, 2021, 10:59 AM

#

Hey @dusky junco Task 9 Question 2

WPScan says that this theme is out of date, what does it suggest is the number of the latest version?
which is ||2.0|| but it keep saying answer incorrect probably a bug

#

in the new room https://tryhackme.com/room/webenumerationv2

coral shell Apr 16, 2021, 11:16 AM

#

lethal haven Hey <@!106094485129162752> Task 9 Question 2 WPScan says that this theme is o...

the room is 108 days old, try previous version till they will add this as hint thanks

lethal haven Apr 16, 2021, 11:19 AM

#

coral shell the room is 108 days old, try previous version till they will add this as hint t...

Cool anytime man

dusky junco Apr 16, 2021, 11:22 AM

#

brazen gulch Hey <@!106094485129162752> ! Thanks for making the Web Enumeration room. Quick ...

Great point -- will resolve now thanks!

dusky junco Apr 16, 2021, 11:22 AM

#

lethal haven Hey <@!106094485129162752> Task 9 Question 2 WPScan says that this theme is o...

Ah yeah -- that's an oversight. I'll resolve that as well. TY for letting me know

dusky junco Apr 16, 2021, 11:22 AM

#

coral shell the room is 108 days old, try previous version till they will add this as hint t...

bingo -- oversight on my part thanks for helping out

coral shell Apr 16, 2021, 11:23 AM

#

dusky junco bingo -- oversight on my part thanks for helping out

you're welcome 🙂

karmic wing Apr 16, 2021, 12:44 PM

#

Hi @dusky junco, there a copy/paste issue on the Web Enumaration room (which I'm learning a lot from, btw). In the Nikto section, it talks about how WPScan is already installed.
"Installing Nikto

Thankfully for us, WPScan comes pre-installed on the latest versions of penetration testing systems such as Kali Linux and Parrot. If you are using an older version of Kali Linux (such as 2019) for example, Nikto is in the apt repository, so can be installed by a simple sudo apt update && sudo apt install nikto"

distant vine Apr 16, 2021, 1:51 PM

#

Hi @dusky junco, in the Web Enumeration room, when I installed seclists it installed to /usr/share/seclists/ instead of /usr/share/wordlists/SecLists/ as mentioned as an example for running gobuster in dns and vhost modes (Task 4).

eternal summit Apr 16, 2021, 1:52 PM

#

On Kali?

distant vine Apr 16, 2021, 1:52 PM

#

eternal summit On Kali?

Yeah

eternal summit Apr 16, 2021, 1:52 PM

#

I think one of those paths is for the attackbox

distant vine Apr 16, 2021, 1:53 PM

#

Ok

ashen pewter Apr 16, 2021, 3:23 PM

#

In the Network Services room while trying to use command smbclient (to log into annonymous of the machine). It sometimes works and sometimes not, and when it works it just crashes. says its a connection issue

#

What do i do?

rustic nebula Apr 16, 2021, 3:24 PM

#

ashen pewter What do i do?

restart machine

#

and try again'

ashen pewter Apr 16, 2021, 3:24 PM

#

i did

#

didnt work

eternal summit Apr 16, 2021, 3:25 PM

#

A network issue probably isn't a bug with the room. #site-support

ashen pewter Apr 16, 2021, 3:25 PM

#

o_connect: Connection to 10.10.218.111 failed (Error NT_STATUS_IO_TIMEOUT)

#

this is the error i recive

eternal summit Apr 16, 2021, 3:27 PM

#

Again. Not a bug with the room. #site-support

somber vessel Apr 16, 2021, 4:17 PM

#

VM in room https://tryhackme.com/room/allsignspoint2pwnage? goes into timeout after a while

eternal summit Apr 16, 2021, 4:22 PM

#

Yeah it has a licensing issue so it dies after an hour

somber vessel Apr 16, 2021, 5:46 PM

#

ah, that explains it. Thanks James

compact shoal Apr 17, 2021, 5:29 AM

#

Different ctf... I cracked the password for wp-login but it says incorrect... Any one with whom I can verify the password?? Coz username I got is corrwct...

compact shoal Apr 17, 2021, 7:08 AM

#

I have found a lead... Trying that... Will update if I get in... Saying, "NOT A BUG"

topaz thorn Apr 17, 2021, 8:53 AM

#

The room was tested

winged wraith Apr 17, 2021, 11:02 AM

#

https://tryhackme.com/room/linux1
Section 1 is missing so that you can't know how to log in to the deployed machine, as far as I can see.
I recommended this to a couple of class mates who have to learn basic linux, that's when I noticed.

eternal summit Apr 17, 2021, 11:04 AM

#

winged wraith https://tryhackme.com/room/linux1 Section 1 is missing so that you can't know ho...

It deploys in split screen so that you don't have to log in at all

winged wraith Apr 17, 2021, 11:05 AM

#

Oh, that's new, isn't it? My bad then. Very neat!

eternal summit Apr 17, 2021, 11:05 AM

#

Not very new

winged wraith Apr 17, 2021, 11:06 AM

#

Oh well

dusky junco Apr 17, 2021, 4:41 PM

#

distant vine Hi <@!106094485129162752>, in the Web Enumeration room, when I installed `seclis...

Hii yess -- this is why the room is built and advises you to use the THM attackbox -- that way it is uniform in that regard

#

Different paths for different OS's

#

If a room is built around the use of the attackbox is easier to support etc (:

distant vine Apr 17, 2021, 4:42 PM

#

Ok, thanks! 😄

dusky junco Apr 17, 2021, 4:43 PM

#

Appreciate it 😄 I should maybe add something like "the path may be different if you are not using the attackbox" just to make it clearer (:

foggy bloom Apr 17, 2021, 4:43 PM

#

Hello all! I am currently doing this room: https://tryhackme.com/room/attacktivedirectory and is it possible that the hash retrieved is not the right format? In Task 5, the question on hash type's answer seems to be different than the one retrieved

#

can I write spoilers here?

#

ok I just tried on local and the attackbox, maybe I'm just cursed with hash crackers -_-

marsh plinth Apr 17, 2021, 6:52 PM

#

foggy bloom Hello all! I am currently doing this room: https://tryhackme.com/room/attacktive...

md5 of sha256 ?

#

or what?

#

also can you tell me the syntax for hashcat or john your using?

eternal summit Apr 17, 2021, 7:14 PM

#

marsh plinth md5 of sha256 ?

Neither.

#

They're not cracking the hash yet either

marsh plinth Apr 17, 2021, 7:14 PM

#

ight

#

lemme check it

foggy bloom Apr 17, 2021, 7:29 PM

#

The hash seems to be the wrong version or something, my knowledge here is limited

eternal summit Apr 17, 2021, 7:45 PM

#

foggy bloom The hash seems to be the wrong version or something, my knowledge here is limite...

What did you get? What's happening? What do you think it's wrong?

foggy bloom Apr 17, 2021, 9:53 PM

#

eternal summit What did you get? What's happening? What do you think it's wrong?

The part in the hash that I believe is supposed to be 23 is 18. So the kerbrute section works but I have issues decoding it with hashcat or john. I think the could be an issue in the type of hash that is returned. I'd be happy to try again tomorrow if that issue persists. I've also tried decoding locally and on the attack box

rocky cloak Apr 17, 2021, 10:22 PM

#

https://www.tryhackme.com/room/webosint in Task 2, question: What country is listed for the registrant?

TryHackMe

TryHackMe | WebOSINT

Conducting basic open source intelligence research on a website

#

Panama is no longer correct answer

#

it should be Iceland, since mailing address for registrant is: Kalkofnsvegur 2, Reykjavik, Capital Region, 101, IS

zealous vortex Apr 17, 2021, 10:30 PM

#

Not sure if this is a room bug. In room rpmetasploit, task 5, there's a question "what is the name of the column on the far left side...". The question below it says enter "use" plus the number from the previous question, but the previous question is asking for column name, not exploit number

#

Just below this, II think there might be a bug in the instructions. It says to switch back to the icecast exploit, and run it, but that doesn't have/retain the LHOST setting.

#

setting that gets me the meterpreter session, but the 'jobs' command shows nothing, both in and out of msf (separate shell window). So perhaps I'm doing something wrong, or perhaps these instructions need to be updated.

eternal summit Apr 17, 2021, 10:37 PM

#

zealous vortex Not sure if this is a room bug. In room rpmetasploit, task 5, there's a question...

That's not a bug.

eternal summit Apr 17, 2021, 10:37 PM

#

zealous vortex Just below this, II think there might be a bug in the instructions. It says to s...

That one is a problem

eternal summit Apr 17, 2021, 10:37 PM

#

zealous vortex setting that gets me the meterpreter session, but the 'jobs' command shows nothi...

jobs will show a job if the exploit worked

zealous vortex Apr 17, 2021, 10:37 PM

#

in the meterpreter shell?

#

that gets me an 'unknown command' error. Running it in a kali shell window (not the one running msf) shows nada

#

the "use <number>" command is already done in the previous step, so I think the question specifically asking for it (with no entry for the field needed) might not be needed

eternal summit Apr 17, 2021, 10:41 PM

#

zealous vortex in the meterpreter shell?

jobs will work in msfconsole, but not in meterpreter.
If you didn't use run -j (If you used run or exploit) then it won't run as a job so logically, no job from it

zealous vortex Apr 17, 2021, 10:42 PM

#

eternal summit `jobs` will work in msfconsole, but not in meterpreter. If you didn't use `run -...

ahhhhh, okay. That should probably be added to the 3rd from last or 2nd from last question in this task.

eternal summit Apr 17, 2021, 10:43 PM

#

There's a few parts that need a revamp, but Dark's a busy guy

zealous vortex Apr 17, 2021, 10:43 PM

#

fair enough :). Not complaining, just learning and making noob mistakes 🙂

eternal summit Apr 17, 2021, 10:44 PM

#

No, it does 100% need some things fixing

zealous vortex Apr 17, 2021, 10:45 PM

#

Might just be that things changed since it was created 🤷‍♂️

eternal summit Apr 17, 2021, 10:46 PM

#

Some things, yeah.
Others were slightly off from the start.

zealous vortex Apr 17, 2021, 10:46 PM

#

gotcha

#

well, thanks for the help (as always) !

#

you've given me some extra info/context that helps explain it

zealous vortex Apr 17, 2021, 11:08 PM

#

same room, rpmetasploit, task 7, 2nd question. The 'search server/socks5' command returns nothing. Had to search for socks instead, and guess/reverse engineer the correct answer from the ones listed. I'm guessing the name just changed.

eternal summit Apr 17, 2021, 11:11 PM

#

Yep, that's another thing that needs an update

zealous vortex Apr 17, 2021, 11:11 PM

#

Thought so. Just figured I'd add it to the list if it wasn't already known

#

James, may I DM you?

eternal summit Apr 17, 2021, 11:20 PM

#

zealous vortex James, may I DM you?

Can I ask why, please?

zealous vortex Apr 17, 2021, 11:21 PM

#

Wanted to volunteer to help fix some of the 'low hanging fruit'/easier type issues

eternal summit Apr 17, 2021, 11:21 PM

#

That'd be something to talk to CMNatic or TimTaylor about

zealous vortex Apr 17, 2021, 11:22 PM

#

Thanks. I'll try to catch them at some point

wheat fractal Apr 18, 2021, 6:18 AM

#

Hi. The room 'network services' from the complete beginner course has a bug. Telnet does not always display the welcome message. Restarting he machine helps.

vague drift Apr 18, 2021, 11:27 PM

#

Hi guys, don't know if this is a bug or by design, but when I launch the machine in the Hacking with Powershell room (https://tryhackme.com/room/powershell) it always launches the attackbox at the same time. I'm OK with that, but the problem is that this attackbox does not have a side panel that I can use to copy/paste into the machine. Is it possible to get that added? It would be a great help to me and I think probably to others as well. Screen shot of missing side panel:
https://i.imgur.com/uUDu1T8m.png

eternal summit Apr 18, 2021, 11:57 PM

#

That is not the attackbox.

#

That is the target machine.

vague drift Apr 19, 2021, 12:12 AM

#

ack! Gotcha...I get that now...any way though to get the side panel functionality?

eternal summit Apr 19, 2021, 1:08 AM

#

Don't think so. I imagine you could RDP in.

vague drift Apr 19, 2021, 1:12 AM

#

ok, thanks...

crude zinc Apr 19, 2021, 2:00 PM

#

Hi everyone, I think I detected a bug in "Different CTF" room. As the room is under embarguo, can I DM someone to explain the bug ?

topaz thorn Apr 19, 2021, 2:08 PM

#

You can dm me if you want, as I tested the room, but I didn't come across any bug with the room

crude zinc Apr 19, 2021, 8:16 PM

#

I just wrote you

frigid plover Apr 19, 2021, 8:43 PM

#

Typo in Steel Mountain - https://tryhackme.com/room/steelmountain
Take close attention to the CanRestart option that is set to true. What is the name of the name of the service which shows up as an unquoted service path vulnerability?
duplicate the name of

buoyant dock Apr 19, 2021, 8:44 PM

#

crude zinc Hi everyone, I think I detected a bug in "Different CTF" room. As the room is un...

You can write me I made the room @crude zinc

proud pagoda Apr 19, 2021, 9:07 PM

#

Room: https://tryhackme.com/room/powershell
Task: 3
Question: 1

I don't know if it's a bug or it's done on purpose

obsidian kiln Apr 19, 2021, 9:30 PM

#

proud pagoda Room: https://tryhackme.com/room/powershell Task: 3 Question: 1 I don't know if...

That's a common thing on Windows

civic hornet Apr 20, 2021, 1:16 AM

#

On Advent of Cyber 2, Task 6, the cookie generated from a capital-S username is accepted for the answer, but not as a valid session cookie on the actual machine
the cookie generated from a lowercase-s username works as a session cookie

#

I can't check if it would work as an accepted answer for the question because I've already answered it "correctly" using the other cookie

eternal summit Apr 20, 2021, 1:17 AM

#

Refresh and it will replace it with the actual correct answer

#

THM's answer fields have some tolerance on them. Imagine how annoying it'd be to be 1char off on a 32char string that you had typed by hand.

civic hornet Apr 20, 2021, 1:19 AM

#

I see. I guess this is just an edge case where it actually leads to confusion 😆

#

thank you for that clarification

glass folio Apr 20, 2021, 4:43 AM

#

Typo's in the new Web enumeration room

oak mica Apr 20, 2021, 4:46 AM

#

how is that wrong?

#

I can't see any typos

glass folio Apr 20, 2021, 4:47 AM

#

The flags should start with -- , that is the case for all other examples commands

oak mica Apr 20, 2021, 4:48 AM

#

oh true, i thought you mean the word was wrong

#

but it should be -- you are correct, or -U or -P

glass folio Apr 20, 2021, 4:49 AM

#

Yeah