pre-security-legacy-path

[warped wind]

It should just look like this more or less

[sly spear]

Ahh okay I think I am miss understanding from the screenshot in the task

[tight ingot]

That screenshot is wrong

NO, that one is right.

It's this one.

[sly spear]

Wait so, am I meant to run wget somewhere else then?

[tight ingot]

Yes.

Your own terminal.(one not SSH'd in)

[warped wind]

You're meant to run the wget command from your attackbox directed at the victim machine. Not as that screenshot shows, which is running from the victim machine directed at the victim machine

[quartz jay]

How do I run a basic command? I don't have any preference, I just want to build up and become an Ethical hacker

[sly spear]

Okay I'm with you I believe hold on a sec

[warped wind]

A basic command in what? Linux Terminal, CMD, Powershell?

[tight ingot]

Have a read over #start-here

[quartz jay]

CMD

[sly spear]

Sorted thanks

[warped wind]

I'd do what Scrubz said and maybe checkout the Windows Fundamentals rooms on TryHackMe. I think Windows Fundametals 2 talks about the CMD a bit to get you going

[quartz jay]

Is it a website or something? Sorry im new to all this

[tight ingot]

Please delete the screenshot.

Thanks, it's just so we don't spoil the flag for others.

[warped wind]

Yes, this is the community discord server for the website tryhackme.com. Which is a learning platform for cybersecurity and ethical hacking

[sly spear]

Ahhh yes ofcourse my bad!

Thanks for the help both of you, going to stop here today as my brain is just not taking in information at all right now haha

[tight ingot]

+rep @warped wind

[somber current]

Gave +1 Rep to @warped wind (current: #50 - 136)

[quartz jay]

Thank you @warped wind

[somber current]

Gave +1 Rep to @warped wind (current: #50 - 137)

[karmic kettle]

thanks for the heads up, that was actually a great place to start with something comfortable.

[somber current]

Gave +1 Rep to @warped wind (current: #47 - 147)

[karmic kettle]

Networkchuck has a great video on cmd prompts, worth checking out!

[tight ingot]

In a linux enviorement?

[weary sigil]

in the OSI Model part, task 4 (Session layer) asks "What is the technical term for "small chunks of data"?" and the answer it wants is packets, but packets are actually Network layer PDU

[muted moth]

Can someone give me a hand with Ports, what happens if a port is in use? As I don’t understand this because multiple people would be using port 80 at a time so how can more people connect to it if it is in use? Thanks

[brave cobalt]

Typically, when a port is in use, you can't use it for another purpose. What do you mean by multiple people using port 80/443 at a time? Are you pertaining to people simultaneously accessing a website?

[outer cipher]

Hi guys! Newbie here.
I'm in the Windows Fundamentals rooms. I deploy the Windows machines but I can't use them browser-based: the gui doesn't load up in the splitview nor in a new tab. That's odd since they're up and working (they respond to ping and can be accessed via rdp on the AttackBox). Anyone else who's got the same problem? I'm getting crazy sorting it out.

[brave cobalt]

Can you send a screenshot so we can better assist you? You'll need to verify your account to do so.

[limber flint]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 19, 2024, 11:52 AM

[outer cipher]

Okay, just verified. Thank you for the doc 😄

[somber current]

Gave +1 Rep to @limber flint (current: #308 - 14)

[outer cipher]

These regard the 1st room

While these about the second one; almost the same as the previous one

[brave cobalt]

I tried to spin up the VM attached to that room and it worked for me. Did you try to wait a couple of minutes for it to load?

[outer cipher]

Yeah, I waited even 3-5 mins before interacting with it but nothing showed up

[brave cobalt]

Only thing I can think of is a reboot.

[outer cipher]

How do I do that?

Because I also asked to the support and it suggested me to do some things which didn't work either: disabling VPNs and browser extensions, clearing the cache and coockies, etc.

[brave cobalt]

I meant terminate the machine and start it again.

[outer cipher]

I already tried. Many times 😅

[brave cobalt]

How fast is your internet connection? Are you using a home connection, your school's or something else?

[outer cipher]

Pretty fast. Home connection on fiber.

I'm on a 5GHz wi-fi rather than a 2,4 one though

[rapid wharf]

guys as we all know that firewall operate in layer-3 and layer-4 but in tryhackme room it is showing layer-3 and layer-7 as correct

in osi model

[restive zealot]

I'm having the same issue. I get the sense that I am not seeing the correct screen. I'll provide a screenshot

I can't seem to get a screenshot in here either. Rip

[brave cobalt]

I think the intent on firewalls operating in layer 7 is for web application firewalls (WAF).

[somber tide]

What after pre-security ?

[brave cobalt]

There is a recommended path here:

#general message

[somber tide]

thanks

[somber current]

Gave +1 Rep to @brave cobalt (current: #19 - 365)

[muted moth]

Hi I’ve just done the command mv myfile myfolder

My question is how do I put my file back to the place it came from as in the home page?

[tight ingot]

Use the mv command.

[muted moth]

What about the destination?

[tight ingot]

Where you want it to be.

[muted moth]

Yeah that’s what I don’t know what to put, say I wanted to put it back to where it came from?

As in when I press ls the file will show with all the others

[tight ingot]

Where do you want it to go?

[muted moth]

The main page when I press Ls

The place it started

[tight ingot]

pwd

[muted moth]

That didn’t work unfortunately it just changed the name to pwd

[languid hound]

in HTTP in detail room at task 7 I can not do 2, 4 and 5. I guess I should do something with parameters but how?

[fast girder]

What is the flag that you obtained by following along?

[warped wind]

Is this from a room? If so then which one, which task and what exactly are you stuck on?

[steady rover]

hi all, I am new to tryhackme and currently working through the linux fundamentals part 2. I am stuck at the very beginning trying to log into my acct using the ssh command but I keep getting a response back in the terminal saying the access is denied. I have changed my password and made sure everything is being typed correctly. I am just stumped at what to do from here. If anyone has any advice it would be greatly appreciated. Thanks!

[warped wind]

What credentials are you trying to use to SSH in? It should be tryhackme:tryhackme iirc

[steady rover]

ohh okay i must have misunderstood, I was trying to use my own user and password

[warped wind]

Ah nah, you would never use your tryhackme account's information on one of the machines. The credentials will either be provided in the task or you might have to find some through enumeration/hacking in the challenge rooms. This is from Task 2 of that room though, it gives the creds.

[steady rover]

that's super helpful to know going forward. I definitely missed that portion of the text. thank you sm!

[somber current]

Gave +1 Rep to @warped wind (current: #46 - 153)

[warped wind]

np

[oak skiff]

I am doing the module "Walking an Application" and seem to be stuck on this part

"External files such as CSS, JavaScript and Images can be included using the HTML code. In this example, you'll notice that these files are all stored in the same directory. If you view this directory in your web browser, there is a configuration error. What should be displayed is either a blank page or a 403 Forbidden page with an error stating you don't have access to the directory. Instead, the directory listing feature has been enabled, which in fact, lists every file in the directory. Sometimes this isn't an issue, and all the files in the directory are safe to be viewed by the public, but in some instances, backup files, source code or other confidential information could be stored here. In this instance, we get a flag in the flag.txt file."

I cannot find the "flag.txt" file in the html code. Any help?

[warped wind]

In this example, you'll notice that these files are all stored in the same directory
Looking at the code what directory is stuff being stored in? Can you navigate to that directory and see anything interesting?

[oak skiff]

Yeah I just figured it out. Thanks!

[twilit kiln]

[] Started reverse TCP handler on 10.X.X.X:4444
[] Retrieving session ID and CSRF token...
[] Uploading and deploying 0UG2A7Yee9ujHk...
[] Executing 0UG2A7Yee9ujHk...
[-] Exploit aborted due to failure: unknown: Failed to execute the payload
[*] Exploit completed, but no session was created.

sorry wrong channel

[marsh veldt]

Hello! I have a small issue regarding connecting to the Windows fundamentals machine via RDP. I'm trying via kali using xfreerdp since for some reason I can't get remmina on kali as in the attack box, but also tried via the attack box with remmina and the screen stays black. I've tried troubleshooting with some solutions that I found on the internet but didn't seem to fix the issue. Can you please let me know if there are some flags that I have to put here or if there is something wrong with the machine itself(I'm connected to the VPN in the kali machine) I've tried restarting the machine a few times as well. My connection is good I'm on 1GBPS broadband. Any suggestions would be highly appreciated. Thank you in advance!

[brave cobalt]

When connecting to the target machine using your kali, are you connected to THM network via OpenVPN?

[marsh veldt]

Yes

I've also waited for a fair amount of time for the machine to load but it gives me a glimpse of a wallpaper then goes blank

[brave cobalt]

If you can share a screenshot, that will be helpful. You'll have to verify your account to do so.

[limber flint]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 31, 2024, 10:13 PM

[marsh veldt]

for some reason it worked now with the exact same command as before 🙂 sorry for the unncessary trouble :))

[knotty bluff]

hello, Im on the network fundamentals module and in the practical room i cant able to start a machine and open in a new page as it used to be in before modules like it has a option to start the machine and it will open on a new page but now it only has view site option and it opens in a split view .

is it possible to get the start machine option as before by changing any settings are it is normal in this module?

i wanted this option

[brave cobalt]

This depends on how the room was designed or how the room creator deems it better to teach the concept. If it has been updated, you will no longer have the option to start a target machine.

[knotty bluff]

okay

[knotty bluff]

i can only able to exit the split view ,how to possibly terminate this static labs ?

[tight ingot]

That's ok.

You can't terminate the websites as they're running 24/7

[knotty bluff]

lol

okay

[languid hound]

Hi👋 I have struggle at a question at Linux Fundamentals Part 2. At Task 4, there is a question as "On the deployable machine, what is the file type of "unknown1" in "tryhackme's" home directory?". But when I open the machine I'm at root and there is no file called as tryhackme's. How I can find the tyrhackme's home directory?

[tight ingot]

You need to ssh in to the machine

[languid hound]

sorry but I don't know how ssh to the machine

[tight ingot]

It tells you in the task

[languid hound]

oh, thank you I find it

[somber current]

Gave +1 Rep to @tight ingot (current: #2 - 1918)

[outer cipher]

Hi, who can I contact to as moderator in order to update my token linked to this account?

[brave cobalt]

Suggest to post this in #general to get more traction.

[marsh veldt]

Hey wassup

Wanna study together?

[small mango]

it's me

[knotty bluff]

i tired to login in the ssh module from linux fundamnetal part 2 room and it shows the password is wrong even though in the module instruction it said password and username both are tryhackme but its showing wrong password.

[tight ingot]

Wrong IP

You need to start the machine in task 1

[limber flint]

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Feb 9, 2024, 11:45 AM

[knotty bluff]

okay ,ill try that

[knotty bluff]

understood , thank you

[somber current]

Gave +1 Rep to @tight ingot (current: #2 - 1941)

[languid yarrow]

[drifting ember]

hello i am doing the "intro to offensive security" module, and when i run the command gobuster -u http://fakebank.com -w wordlist.txt dir i get an error: Error: error on parsing arguments: wordlist file "wordlist.txt" does not exist: stat wordlist.txt: no such file or directory
can anyone help me?

[tight ingot]

You're in the wrong machine. 🙂

[drifting ember]

wdym?

which machine should i use?

[tight ingot]

You're in the attackbox currently.

That room boots up a seperate machine.

[drifting ember]

i see, i havent noticed that button lol

thanks scrubz

[tight ingot]

Common mistake. 🙂

The error you got was becasue the wordlist wasn't in the directory, however this time it's in the Desktop

[drifting ember]

👍

[junior cobalt]

Um guys

Im currently on 35% on the pre security path

But i keep missing some sectors cause i cant pay premium

Now im at linux fundamentals 1 and im confused

[small mango]

can you tell what you confusing about ?

[junior cobalt]

well i think it's because i wasnt able to access some classes cause i dont have premium

[junior cobalt]

The 7th task in linux fundamental was by far the most confusing thing ive done so far

I wasnt able to undertand properly, although i watched the video attached to it to be able to answer the questions but i just feel bad i just did what was explained in the video without aactually understanding it myself

[small mango]

that's oke, sometimes when i got stuck i read some writeups to but i am learn the step by step on that and try to understand what i do. if i can not understand i ask on this discord channel;.

[dry sage]

Currently stuck on linux fundamentals part 2 Permissions 101. I switched to user2 but cant seem to find/access 'important' to answer the last question. Nothing I try points me to the file/contents. Any pointers?

EDIT: Nevermind, I feel dumb...

[forest furnace]

Im stuck in Windows Fundamentals 1 - Tassk 3 GUI last Test Question "Besides Clock and Network, what other icon is visible in the Notification Area?". I right klicked on all icons in the area and tried all names of icons according to the task text and one works. Any hint?

[tight ingot]

Right click > open ****** ******

[forest furnace]

Where please should I Right click and put in > open ** ** ? The started Windows machine doesn't gibe me any option in the notification area (right part of the task bar close to time and network icon)

[tight ingot]

Right click the notification area. It's should be at the top of the menu

[forest furnace]

The best i can get is a menu with a toorbar menu selection on the top; no entry field to enter open ** **

[tight ingot]

It's a type of center.

Discord ate my *

[forest furnace]

You lost me, I cant find any expression that resembles a time of center

[tight ingot]

Right click the notification area.

I can't screenshot, I'm on my phone.

[forest furnace]

ok. it is "action center". This is difficult to discover, as the green TryHackMe Help Cloud Icon obfuscates that area. And the way, the question is asked is somehow confusing. Anyway, thank you very much for the support.

[somber current]

Gave +1 Rep to @tight ingot (current: #2 - 1961)

[knotty bluff]

In the vimtoolbox room how to learn this tool ,its like the author provided left ,right, etc but there is no commands provided to complete the excercise also the author mentioned to use help command to learn about that but if i use help command like :help left like this i cant even understand wat to do in that guide

its like this but in that given guide i cant understand what to do to perform those navigation

so this room is basically look into the vim guide by yourself and perform the operation that im saying by knowing from the help command thats it i can say like that?

someone help?

[somber tide]

Someone help me with the first line couldn’t find the link

[upper bear]

which task?

[somber tide]

walking in web application

task 3

[knotty bluff]

should you show the task in ss

?

[somber tide]

yeah sure

this one

[knotty bluff]

whats wrong with this,can you elaborate the issue you are encountering

[somber tide]

difficulties in finding the flag from the html comment ? I didn't got this

this two also

[knotty bluff]

tried on attackbox?

[somber tide]

haven't tried ?

have you done it ?

[knotty bluff]

nah

[somber tide]

where are you ? yet

[knotty bluff]

Iam at linux fundamentals

[somber tide]

can i get your ig?

[knotty bluff]

ig?

[somber tide]

instagram

[knotty bluff]

im wanted to run the python http server module in background using & pipe operator but cant , is it possible anyway

[somber tide]

yeah

[knotty bluff]

how

[upper bear]

Have you viewed the page source?

[somber tide]

just put && in the last of the code

[somber tide]

yeah i do visit

[knotty bluff]

i did , but it is only &

see it on the ss

[upper bear]

You have to go to the webpage that the comment mentions

[somber tide]

run another task in the new terminal without killing the python process

[somber tide]

I'll check

thanks mite

[knotty bluff]

lol, yeah so it cant be run on the background

[somber tide]

sorry, I don't know

[knotty bluff]

cool

[knotty bluff]

is it possible to do this in tryhackme instance

it does have a internet now but the user account is not existed in sudoers like the username:tryhackme and password:tryhackme account

is there no way i can try this command in the instance?

[tight ingot]

You're not root.

Have you SSH'd in to a machine?

[knotty bluff]

yes

[knotty bluff]

understandable 👍

yo , I was completing the bash scripting room but in last task he does some condition which is to check whether the file is already in there and also it should be readable to execute a statement or else do something else kind of . i also did that but i already created bro.txt and changed my file(bro.txt) to read only by using chmod -w bro.txt so even though the bro.txt is not writable how it is executing the if statement

[knotty bluff]

for a better context please look at this ss to know my problem

[soft snow]

Because you are running it as root, e.g. just try echo 'test' >> bro.txt in your terminal, even when that file doesn't have the write permission, root can still write to it

[knotty bluff]

oh understood, thank you👍

[somber current]

Gave +1 Rep to @soft snow (current: #3 - 1811)

[knotty bluff]

Yo, any hint to complete the tasks in Regular expression room. i ran some charset in the regexr but it shows like this so how should i present this output and complete the thm task?

[knotty bluff]

Anyone pls

[simple swan]

try it without the / at the beginning and the /g at the end?

[knotty bluff]

cant able to erase that its like in default

[knotty bluff]

In regular expression room the task is to match all the specified filename in the task4(second ss) except File7 then how the answer is correct (first ss) [Ff]ile[^7] yeah it will output except File7 but they asked to satisfy the fourth question(second ss) also like it should find [Ff]ile[1-9] also

In the first ss question it will find the files except File7 but it doesnt able to find the file or File that are specifically within File1 to File9 and file1 to file9

so how it satisfied the question4 (second ss)?

[knotty bluff]

how this is the right answer for the regular expression (i found this in a walkthrough site), to find EOF$ at the end of the line why EOF\$$ is used like $ is used to find the end of the line that matches the string but why two dollars are added simultaneously although the string we need to find is "EOF$" in which it included the dollar itself but why after \$$

can anyone explain i also searched in chatgpt and also in that walkthrough but not explained this

?

[finite thunder]

My regex is not awesome but $ should mean end of line. Since you are looking for EOF$ at the end of the line you include the $ in the end. The \ is for escaping so $ is treated as normal $ character and is combined to EOF$ at the end of the line.

[knotty bluff]

okay👍, thanks

[somber current]

Gave +1 Rep to @finite thunder (current: #403 - 11)

[limber flint]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[fringe olive]

Hi

[knotty bluff]

Hello

[torn pond]

Do I need premium to complete this room

[tight ingot]

Room, no.

Path, yes.

[torn pond]

What is the difference,(I'm new and am seeing some levels which aren't free)

[tight ingot]

These are the learning paths, which contain rooms.

[torn pond]

Okk I understand thx

[knotty bluff]

I installed a tool named gimp from the apt respository but i dont know where it is presented in my machine

from where to see the download software from the apt respository

[finite thunder]

Did you try locate or find?

[small mango]

IMO locate must update the db first

[finite thunder]

Probably. Didn’t mention that one explicitly

[knotty bluff]

tried to connect my tryhackme OVA file but showing up like this

tried deleting the profile and redownloading and reconnecting but it loads so much time and pop up this error

any help?

[potent wedge]

use the command line to connect to the openvpn.... as the graphical versions are not supported
i.e
sudo openvpn /path/to/username.ovpn

[knotty bluff]

but im using windows

[potent wedge]

wait you are trying to connect to the vpn on your host???

[knotty bluff]

yes

sorry this is the first time im using

[potent wedge]

would not recommend that.... although tryhackme is mostly safe from bad hackers and people doing bad stuff you are still connecting your computer to a network full of hackers

look up how to install a kali linux vm... then try using the openvpn from inside the vm

[knotty bluff]

okay cool

[potent wedge]

good luck

[knotty bluff]

thank you👍

[knotty bluff]

i tried using reminna but its asking a password(login keyring)

[tight ingot]

Try Just hit cancel.

[potent wedge]

ah yes gnome keyring password prompts

[knotty bluff]

yeah but i didnt set any password or is there any default password for this?

[knotty bluff]

okay

[knotty bluff]

how to view the standard user acc password in lusrmgr.msc(local group and policy)?

i cant see password in any of the option

?

[brave cobalt]

Isn't it this one?

[knotty bluff]

what

[brave cobalt]

In the description field?

[knotty bluff]

is it the password?

[brave cobalt]

Have you tried using it?

[knotty bluff]

nope but i dont know the computers name in order to perform rdp

[tight ingot]

Ip.

Or scan the box

[knotty bluff]

okay

[knotty bluff]

workin

👍

[knotty bluff]

can i able to connect my physical hard drive to my attackbox?

[brave cobalt]

Physical hard drive? For what purpose?

[knotty bluff]

Just thought like whether is it possible to do that

[knotty bluff]

?

[marsh veldt]

Is blt1 course enough to crack the exam?

[knotty bluff]

wat exam

[marsh veldt]

Blue level team 1

[knotty bluff]

is that cert worth it ,like on demand and well recognised?

[marsh veldt]

Yeah

[knotty bluff]

cool , i think you should ask this in offtopic channel

[tight ingot]

Yes, but do you want to?

Probably not.

[knotty bluff]

Okay, cool

[tight ingot]

You could possibly set up one folder to share.

But if you're going to have to store hacks and what not, you'd need to whitelist it.

Then if you white list your folder, you're running the risk of the potential to be used against you.

[knotty bluff]

Oh I see, what if I restrict some access through NTFS

So badguys don't get to my drive and do stuffs

[knotty bluff]

Trying to do Windows Event Log room, but in that Vm's event viewer crashes with poping this error when i try to view the detail option of a log(event)

Im doing this because its in the rooms instruction

any help?

[drifting ember]

room: windows fundamentals 1
task 6: user accounts, profiles, and permissions
question: What is the account status?
question format: ******* ** *******
i cannot find an account that has 7 characters...

[simple swan]

pretty sure its talking about the account from the previous question

[drifting ember]

||```What is the name of the other user account?
tryhackmebilly

What groups is this user a member of?
Remote Desktop Users,Users

What built-in account is for guest access to the computer?
Guest

[simple swan]

that one at the bottom. what is the status of that account

[drifting ember]

like if it's an administrator or standard user?

[simple swan]

can you use it?

[drifting ember]

how can i check that? 😅

[simple swan]

is it enabled?

[drifting ember]

Guest is not shown in the "Other users" setting

[drifting ember]

How can i check whether a user is enabled or not?

[simple swan]

look at the properties

[drifting ember]

I found it, thank you!!!

[somber current]

Gave +1 Rep to @simple swan (current: #1326 - 2)

[marsh veldt]

im a bit curious in burpsuite that why do we have to right click and choose change request method instead of manually editing the GET method to POST method ? it is not working when im manually edit it

[neon acorn]

Hi, what happens when we log into an account on a Linux machine? Do we aim to 'hack' the remote computer or the user? I'm a bit baffled

when we use ssh

[fathom aurora]

Well technically, the user would be human so naturally we would try to manipulate them first. (Jk by the way)

Seriously though, you hack the remote machine to gain access to the user(s)

[simple swan]

its a real thing.
https://en.wikipedia.org/wiki/Social_engineering_(security)

[fathom aurora]

Lol, yeah I know quite a bit about social engineering actually

[tardy light]

hello

linux ssh isnt working

[radiant anvil]

does anyone know where i can talk to dis ownere rq

[brave cobalt]

Can you clarify? Talk to whom?

[radiant anvil]

wdym?

[opaque yacht]

I'm just getting started into Cybersec Field but I've little knowledge about somethings in IT

I got to know about TryHackMe as a good entry point in the Cybersec field. The platform suggested me to go with Pre Security path

I completed the 1st module - Intro to Cybersec and now onto the 2nd - Network Fundamentals (completed 1 concept in it too) but the rest in it are premium only

Idk much about TryHackMe, just exploring, what should I even be doing?

[vast lion]

Hello !!!! @opaque yacht If you want to evolve in cybersecurity, take out a subscription so you can have more content to practice with.

[copper basalt]

What layers of the OSI model do firewalls operate at?

The answer is Layer 3 and 4, but I can have firewall layer 7 and 2 too...

[brave cobalt]

You can look at the following and decide later on if you want to purchase a subscription:

https://github.com/winterrdog/tryhackme-free-rooms

https://tryhackme.com/r/resources/blog/free_path

https://tryhackme.com/r/resources/blog/free-offensive-security-training

[opaque yacht]

Is there any scholarship or fee waiving for students bcoz I'm one?

[opaque yacht]

Thank you are there any certificates involved in this ?

[somber current]

Gave +1 Rep to @brave cobalt (current: #15 - 450)

[brave cobalt]

THM does offer student discounts on subscriptions.

[opaque yacht]

Oh

[brave cobalt]

Certficate of completion you mean? Those are only available upon completion of learning paths or Advent of Cyber events.

[limber flint]

Student Discount

Article Link

https://help.tryhackme.com/en/articles/6494960-student-discount

Mar 5, 2024, 4:06 AM

[brave cobalt]

@opaque yacht ^

[opaque yacht]

Yea Thanks

[opaque yacht]

Certificate of completion or any certificate to prove my education?

[brave cobalt]

Depending on what you intend to use it for.

[opaque yacht]

Ohkay fine thanks

[somber current]

Gave +1 Rep to @brave cobalt (current: #15 - 451)

[foggy quarry]

just finished mine 😄 was actually really helpful ❤️

[bold kettle]

whats the difference between the learning paths and the modules?

i finished the introduction to cyber security and at 39% of pre secuirity, just wondering

[indigo sequoia]

I have a question on networking, when connecting to a modem or router they request for an ip from the dhcp server with your isp right? Does that still apply with your phone when using a sim card to connect to the internet? I don't fully understand how ips are assigned automatically, the static ips make sense

[potent wedge]

for the router at your home the dhcp is hosted locally and is not required to ask the isp

though the public ip of your router to the outside internet is indeed handed out by isps

and yes when you connect to data/lte with a sim card it contacts the phone towers and then the isp to ask for the stuff it needs to start the connection in a similar fashion to dhcp

[indigo sequoia]

OHHHHHH I forgot private ips even existed that's why I was confused, so private ips are hosted locally while public ips require the isp, Makes sense now

Thank you

[brave cobalt]

Modules are a collection of rooms with a particular theme such as nmap, vulnerabilities, privilege escalation, etc. For the most part (and to my knowledge) , modules are a part of the learning paths.

[potent wedge]

^ this is also true

a lot of the modules get backed into the learning paths

[bold kettle]

in the linux fundamental 1 room

the room is bugged

the terminal wont open with the machine and answers cannot be answered interactively, only to copy from the instructor video

[opaque yacht]

Yep it's a terminal copying cross platforms might not be possible sometimes rather just type it out

Also check your internet connection, because the room isn't bugged I just completed that room an hour ago

[foggy quarry]

some of them rooms don't seem to like edge :V

[marsh veldt]

Why is there a dedicated channel to this pathway???

[simple swan]

because people have questions

[potent wedge]

for help and questions

and for more detailed explainations

for people to pop their certs of completion

[bold kettle]

can someone please explain me what is the use of get? is it to download files from the target to the virtual machine? if yes, why is there a website address before the path? why not only the path?
and why would a user know the path to a file from a website in the first place?

wget*

[frosty tartan]

i assume that's because its trying to get something from a web server not a regular machine?

as for knowing the path, using tools and recon,
but I'd wait for someone more knowledgeable than myself to answer 🤣

[bold kettle]

no, the file that needs to be downloaded it from the target

i think the pyhton3 command opens a web server from the target machine that from it the wget downloads the file, not sure tho

[simple swan]

you use it to grab files from webservers. you can use either an ip address or a url.
you can use the command python3 -m http.server 1234 to create a webserver in the current directory on the specified port (port 1234 in this case). this makes is really simple to transfer files from the attack machine to the target and vice versa; just start the python webserver in the directory of a file you want to transfer, then on the other machine, use wget http://<python machine ip>:<port>/<filename> to transfer it over.

[bold kettle]

thanks

[somber current]

Gave +1 Rep to @simple swan (current: #405 - 11)

[bold kettle]

do you know also why systemd isnt my first proccess? as says in the guide?
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.1 0.5 102756 11408 ? Ss 14:44 0:04 /sbin/init
root 2 0.0 0.0 0 0 ? S 14:44 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? I< 14:44 0:00 [rcu_gp]

[frosty tartan]

init is similar i think

[simple swan]

sorry, no clue on that one. are you using the attack box or kali? might be a difference in the os (attackbox is ubuntu)

[frosty tartan]

"Init and Systemd are both init daemons but it is better to use the latter since it is commonly used in recent Linux Distros. Init uses service whereas Systemd uses systemctl to manage Linux services."
from git, so yeah looks like could be os dif

[bold kettle]

yea with the attack box

[tight ingot]

You can use wget on a url.

[bold kettle]

can someone help me with the answer for the question "windows fundamentals1" task 3, 3rd question

there is nothing that fits the answer format

[frosty tartan]

do you still have the machine open? if i remember correctly the answer isnt in the text

[bold kettle]

yea its open

[frosty tartan]

ok so look around in the notifications area

oh you have the answer now

[limber flint]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Mar 8, 2024, 9:27 PM

[young lake]

There are no URLs in that message.

[bold kettle]

windows fundamentals 3, task 8, can someone help please with the queston? i dont find the answer
anywhere

[frosty tartan]

the answer is in the linked documentation

[wanton geode]

Hi, I am not able to open the machine in Linux fundamentals 1 but I am able to open the attack box? Am I missing something?

[spice sage]

If my memory is not messed up, the Linux fundamental doesn't have an interactive machine, you have to connect to it via attack box, Kali Linux or OpenVPN

[wanton geode]

On the YouTube video I can he they have only the one interactive machine open, if I open mine the interactive machine gives me a network error but the attack box works fine. On the YouTube walktrough they do not use the attack box

[small mango]

If you use VPN run on terminal di not close or terminate that it’s will destroy the connection

[empty sonnet]

Hey all,
Can anyone help me with the task4
https://tryhackme.com/room/linuxfundamentalspart3

Im trying to download file from webserver but when I enter the | wget https://assets.tryhackme.com/additional/linux-fundamentals/part3/myfile.txt | command into the attacking machine, it's too slow and I did wait too but didnt get any response so I added -T5 to get it done but given network unreachable error. Any help please.

[wanton geode]

Hey man, thanks for your help but this thing kept on mucking around so I just followed the steps in the attack box (obviously not the same) and used the answers in the YouTube video. Fundamentals 2 and 3 work fine though. Cheers

[somber current]

Gave +1 Rep to @small mango (current: #216 - 24)

[wanton geode]

don't use that one use .falg.txt. I had the same thing

[empty sonnet]

Tried using flag.txt but still the same

[brave cobalt]

Have you started the python web server?

[empty sonnet]

No, before to that, I need to download files from webserver right

[ivory geyser]

did you start the python3 http server before doing wget, i was stuck there too, for this reason

[ivory geyser]

you need to start the python web server on the remote machine to wget a file from there

[tight ingot]

This is just an example.

You need to do the steps on the task, with the machine.

[scenic dawn]

already finishing osi model

[empty sonnet]

Yeah I tried taking different site as well

[crisp ferry]

I face problem in connecting to openvpn in my kali machine , can anyone here to help...

[marsh veldt]

Hello

What should I learn first for cybersecurity/ethical hacking,

[simple swan]

ah. I meant the learning path "pre-security".
this is just the discord room for that. 😛
https://tryhackme.com/path-action/presecurity/join

[crisp ferry]

ofcourse you'r right

[brave cobalt]

#start-here

[brave cobalt]

Did you manage to resolve this? Also, this maybe better posted in #site-support

[crisp ferry]

Thanks I resolve this problem successfully,

I gain knowledge from that and from my research

[wraith lily]

I was stuck here too because the green THM cloud covered the whole thing... I knew the bell was under there (I can see it on my own desktop task bar) but couldn't access it. finally had to go full screen on a wider external monitor for a tiny clickable portion to be available.

[crisp ferry]

I need help

In my kali linx , home directory there is a folder which is empty and if i remove it, it appears again on every reboot at same position

[woven tundra]

I want to install Kali Linux but I don't know if I should install it directly or on a virtual machine. I looked it up on YouTube and saw some of the YouTubers using a virtual machine but I still don't know the point. Can someone tell me why I shouldn't install Kali directly?

[tight ingot]

Kali isn't a stable OS to use as a daily driver, it's prone to breaking far more easily.

It's best to use this in a vm, where if it breaks you can revert to snapshots or build a new vm, which is much easier.

[woven tundra]

Thanks for your helpful comment 🙏

[somber current]

Gave +1 Rep to @tight ingot (current: #2 - 2067)

[crisp ferry]

Bro ! But this is not when i install kali linux, it appeared after at few months , and this is in another language , i think it's in chineese

[analog stone]

anyone know the rdc that's being used in the windows fundamentals modules?

is it just the basic ms rdc?

[tight ingot]

I think it's VNC.

[crisp ferry]

Dear RiSiN! Actually rdc is Remote Desktop Connection tool which being referred to most basic Microsoft Remote Desktop Connection tool , i hope understand my words.

[crisp ferry]

Bro you'r right but there's a cons of using kali linux in vm, this use more resources and slow then normal direct kali linux runing on system. If someone has less resources then , According to my reserch using kali on vm is not more efficent.

[crisp ferry]

Bro ! you'r question is the question which i ask from myself, because when first i touch kali linux

It is very bitter for me , as i utilize almost three days on it , i try again and again and when i tried i sleep near laptop and awade and then try again, ha ha , i just behave like elon musk, ha ha, until i successfull and i install kali after some research and painful times.

But I recommed , to learns who are new in this field , first of use Ubuntu OS , it is more lightweight and same as kali linux.

In hacking , Keep learning and stay Strong

[finite raven]

Hi,
for certain questions, it is requested to carry out actions such as looking in the log files or creating GPG keys, and you therefore need root rights or a user with additional rights but the basic tryahckme user doesn't have sudo rights so how to do it?

[crisp ferry]

bro you'r quesion is cool, ha ha , i have same question , okay i find the ans for you and for me , ha ha

[brave cobalt]

Which rooms are you working on? If you are using the Attackbox, you should have root access and if you have your own VM, you can add sudo in your command.

[finite raven]

@brave cobalt I am taking the Linux Fundamentals Part 3 course and I do not have root access with the tryhackme account when I connect by ssh to the remote server.

i use the attack Box

[brave cobalt]

Aahh.. you have root access on the Attackbox but only a regular user on the target.

You don't need to if I remember it correctly

[finite raven]

I have the prb with the course Maintaining Your System: Automation and Maintaining Your System: Logs. I can't see the content of the log and I can't download the GPG key and use commands like apt-key for examples

@brave cobaltYou're probably right. It must be that !!!! because we can do anything on the target

Thanks a lot.

[brave cobalt]

I remember that while you cannot view the log file used in the example, there is a log file you can view if you just do ls -la to see which one you have access to

[crisp ferry]

As we use THM attack box , we remember that we access only those area which are alloted to us by THM, so we cannot become root user, we bybass that if THM ask or allote us that to us, otherwise we can't do ...

inf0s3cw4nn4b3 , maybe you'r right , ls -la is used to view hidden files

[finite raven]

thank you for helping @crisp ferry and @brave cobalt you were right !!! you just had to work on the Attack box and not on the target.... We are root on the attack box so we can answer questions by executing the commands on the attack box.

[somber current]

Gave +1 Rep to @crisp ferry (current: #2029 - 1)

[finite raven]

Hi, guys, is the deployable Linux machine and the AttackBox or the Target. I am asked for the IP of the machine in the access.log file but apparently it is not the correct IP. Maybe I'm not on the right machine...

[finite raven]

we can't post images on the forum ??

[simple swan]

in order to post images, you need to first verify your THM account

[limber flint]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 19, 2024, 10:39 AM

[finite raven]

what is the machine that I have to connect to took for the apache2 logs on the deployable Linux machine

[simple swan]

the one on the left via ssh (10.10.240.164)

[finite raven]

thanks @simple swan but The problem is that I don't have root rights on this machine, so I can't see the content of the logs, if I'm not mistaken.

[somber current]

Gave +1 Rep to @simple swan (current: #260 - 19)

[simple swan]

what command are you using to view the content of the logs?

[finite raven]

cat or more on the file /var/log/apache2/access.log or access.log.1

[simple swan]

you should be able to read access.log.1

[finite raven]

indeed, thanks a lot

[hollow iris]

any idea why this is not working?
tryhackme@linux2:~$ /etc$ ls
-bash: /etc: Is a directory
tryhackme@linux2:~$
it should be like that
tryhackme@linux2:/etc$ ls
shadow passwd sudoers sudoers.d

[crisp ferry]

Bro it is not error

[hollow iris]

I know but why it is not working like they want

[crisp ferry]

Bro just give me mint i check it now

[tight ingot]

@crisp ferry

Can we please ask before DM'ing members, it's in the rules that you accepted.

Nothing, I just see you alot sending DM's to people without asking.

This was just a friendly talk, you're ok.

[raven hull]

Please guys I am finding something confusing about DNS

It says a second level domain is limited to 63 characters+ TLD (Top level domain)

Now the subdomain sits on the left hand side of the second domain. And it has the same restrictions like the second level domain with 63 characters

But I read again that the length must be kept to 253 characters or less

So I don't understand can someone explain to me please. Thank you

This is it please.Thank you

[simple swan]

its in the last bit. you can have multiple subdomains to the left of the main domain, each limited to a max of 63 chars. but the whole added together must be less than 253 chars

so if we had something like a.b.c.d.e.f.g.tryhackme.com
each of a, b, c, d, e, f and g are subdomains, and each must be less than 63 chars and the whole thing (a.b.c.d.e.f.g) must be less than 253 chars

[raven hull]

Wow thank you so much 😊👍

[somber current]

Gave +1 Rep to @simple swan (current: #224 - 23)

[raven hull]

@simple swan so a.b.c.d.e.f.g. tryhackme.com must not be more than 253 characters right?

Right?

[simple swan]

yh, the full thing, a.b.c.d.e.f.g.tryhackme.com

[raven hull]

Thank you

[somber current]

Gave +1 Rep to @simple swan (current: #219 - 24)

[fervent atlas]

anyone online

[upper bear]

Yes

[simple swan]

nope

[fervent atlas]

i currently working my way through How websites work. Currently at the JavaScript exercise. The second one where you have to enter java code

i was trying to send a screenshot

what is the button suppose to do ?

"Add the button HTML from this task that changes the element's text to "Button Clicked" on the editor on the right, update the code by clicking the "Render HTML+JS Code" button and then click the button."

when i try to put the code in it dosent load i follow the hint and i get to render but the button still dosent change the message

[spare valve]

When you click the button, it's supposed to display text that says "Button Clicked"

[spare valve]

Here's the button you're supposed to add
<button onclick='document.getElementById("demo").innerHTML = "Button Clicked";'>Click Me!</button>

Notice that you are using an ordinary html (button) tag with javascript in it. This is known as in-line scripting. The alternative would be to write all your javascript in another file and then reference it from there using "src = /path/to/javascript/file"

Since we're scripting in-line, all you have to do to complete this task is to replace this block here:
<script type="text/javascript">
// add your JavaScript here
</script>
with the button tag that already has javascript scripted in-line with it.

[fervent atlas]

Thanks you 🙏🏿

[junior bough]

I am going through the windows room and I have no idea on a question ||In the Control Panel, change the view to Small icons. What is the last setting in the Control Panel view? . I input Taskbar and Navigation as per the last setting, after chaning the icon size to small, but no luck||

well, I found it in the end but you had to || manipulate the control panel window size, different sizes give you a different last setting lol||

[shell echo]

Just completed pre-security 🙂

onto finish intro to cyber security then complete beginner

[spare valve]

Way to go bro

[shell echo]

thanks👍

[lament dune]

is " OSI Model " really matter in pentesting ?

[crisp ferry]

@lament dune OSI Model is essential to understanding network communicate ||and for finding vlunerablilities. Its most improtant if you choose network pentesting||

[small mango]

Yes, application is one of the OSI Model.

[gaunt kite]

is anyone else having a problem with the intro to lan task 1 website it wants you to open up

once you get pass the ring topology and it trys to go to the next one it blanks out

[brave cobalt]

Tried this just now and mine works. Did you try to do a Ctrl + F5?

[gaunt kite]

Yeah it worked

[gaunt kite]

Thanks

[somber current]

Gave +1 Rep to @brave cobalt (current: #14 - 476)

[gloomy sigil]

Having some trouble in the OSI model room on the layer six question. I know that they layer is meant to Standardize all data sent to it so I can be read in the same way regardless of origin, but the room wont accept any variation of standardize or translate

[raven hull]

If you read the question carefully you will know that the main purpose of the presentation layer is that it translate the data from the application layer

[gloomy sigil]

I tried translate as an input

[raven hull]

What did you put as the answer?

[gloomy sigil]

I tried:
Translate
Translation
Standardize
Standardization
and a few other things

[raven hull]

If you read the passage we'll you will see the answer

It acts as a translator for data from the application layer

Just put exactly what you Saw when reading it

I came across it also....I tried translate it didn't work, I looked at the passage again I saw translator I put exactly what I wrote there and it worked

[raven hull]

Please Let me know if you have gotten the answer

[gloomy sigil]

You were correct, i just had to use that very specific word

[marsh veldt]

Ahoy! I was in the "careers in cyber" section. I completed the careers quiz but still the room shows complete. I read all the career pathways thoroughly. Can anyone help me to get this room completed 😐

[rain raft]

you sure u completed all the questions?

[charred spoke]

hey guys

I am unable to find a cron job task timing for Task 6 on Linux Fundamentals Part 3.

I have run a crontab -e on the host I am SSH'd into

[tight ingot]

Scroll down to the bottom of the file.

[charred spoke]

all it says is
@reboot /var/opt/processes.sh

but the question asks "when will the crontab run?"

[tight ingot]

The answer is there 😉

[charred spoke]

hmm

got it lol

I took it literally

expected to see a time

thanks 😄

[cobalt anvil]

What is pre-security-pathway I feel like I am in a maze in this server 😬

[charred spoke]

I suggest doing Pre-sec and Intro to Cyber Security. Although both have overlapping content

[dense kestrel]

@reboot

what's your answer in this question: Which selection will hide/disable the search box... my answer is always wrong..

[barren terrace]

hello guys

what's your answer to this question

what's the flag obtained by following along

and which team focuses on defensive sec

both under intro to defensive sec

[violet whale]

blue team

[violet whale]

can you give more context?

[tight ingot]

You need to open the static site.

[steel latch]

hello
what's your answer to this question
what's the flag obtained by following along

[tight ingot]

You need to follow allong with the static site you can launch in the task.

[charred spoke]

not sure which question you are talking about

[whole orbit]

hello, im now at Linux Fundamentals Part 3, i want to ask a question?
it is just me or attackbox does not have phyton3 to use http.server?
i tried phyton3 -m http.server and it only response with command not found

thanks

[tight ingot]

You're spelling python wrong.

[whole orbit]

ah thanks, it works now

[whole orbit]

now im at Windows Fundamentals 1 and there's a question : What groups is this user a member of?

i went into lusrmgr.msc, find that member, right click and select properties, there's tab "Member Of" that list what groups that member is from, i type the answer ||"Remote Desktop Users and Users" (there's 2 group from that member)|| but the answer is incorrect

is that place is correct to find what group is that member is from? thanks

[whole orbit]

solved, just me need to weirdly reiterate the answer somehow

[kindred wind]

how to reslove the double click issue in linux?

[tough oar]

Double-click?

[untold scarab]

which OS? Inside Kali you can go into "Mouse and Touchpad" Settings, "Behavior" and there you can select the Double Click Time

[kindred wind]

In version 2024.1 there's is no behaviour settings , may be i think i don't know where it is

But I am sure it is not inside the settings

[untold scarab]

Which OS?

[summer oracle]

Besides Clock and Network, what other icon is visible in the Notification Area?

answer needs 6 word + 6 word

I'm stuck at this stupid question T_T

[upper bear]

Is this windows fundamentals 1?

[untold scarab]

sounds like it

[untold scarab]

||action center|| @summer oracle

[summer oracle]

I just finished Pre Security path, what next path should I take if i'm new

[potent wedge]

If you want shadows recommendations it is in this order
#pre-security-legacy-path 
#974406074444685322 
#junior-pentester-path 
#878393611929129000 (optional)
#pentest-plus-path (optional)
#web-fundamentals-path 
#soc-level-1-path 
#soc-level-2-path
#security-engineer-path
#devsecops-path
#offensive-pentesting-path 
#red-teaming-path 
#791764435991658556

#general message

the link at the end is to where this is pinned in the general channel

[summer oracle]

Thanks.
so "Junior pen path" before "Complete beginner path" ?

[somber current]

Gave +1 Rep to @potent wedge (current: #4 - 1721)

[potent wedge]

yes... they have a large overlap and junior pentester is newer and have more polish then complete beginner... you can still do both

[summer oracle]

Appreciate your input, will start with pen test jr then 😉

[potent wedge]

no problem and enjoy

[languid hound]

Hi, I have trouble at Windows Fundamentals 1 , task 8 settings and the control panel. I enter control panel but, I can't find anything about icons and their size.

[main yarrow]

top right

[languid hound]

Thank you, I just find it

[jade raft]

good afternoon, i have a question. In the path of extending your network, in the part of LAN devices, at the end it talks about Layer 3 Switches. Here they say that these departments can share a Switch and communicate with the Internet, but not with each other, the question would be, they do not communicate now, but they can communicate with each other, what happens is that the routing was not done so that there would be this communication, or there is no way for them to communicate? The IPs of the Sales department - 192.168.1.1, and the Finance department 192.198.2.1

[barren terrace]

while using burpsuite

what's alt for foxyproxy on chrome

[tight ingot]

I just use FoxyProxy, is there a reason you can't ?

[light arrow]

192.168.1.0/24 and 192.168.2.0/24 can communicate each other if allowed vlan to a trunk port is configured but if not, those two networks can not communicate between them

[jade raft]

thanks

[somber current]

Gave +1 Rep to @light arrow (current: #2066 - 1)

[placid folio]

hi everyone
is there anyone who can help me in learning pentesting

[untold scarab]

yes. Visit https://tryhackme.com. Its a great resource to learn pentesting

[marsh veldt]

Hi, In the windows Windows Fundamentals 1
How can i check the account status here, the answer in google says it is "disabled" but in the attackbox the account which it is referring to which is "tryhackmebilly". Can anyone help 😅

Question: What is the account status?

[light arrow]

You are already close to the answer. hint property

[marsh veldt]

Hi, ah thanks for the hint. Where can I check the status of the present. As I'm checking in properties of that account it's showing that account is enabled

[somber current]

Gave +1 Rep to @light arrow (current: #1376 - 2)

[marsh veldt]

Hi there, I was doodling in the Windows Fundamentals 2 section.
There mentioned "Launch the attached virtual machine. If you wish to access the virtual machine via Remote Desktop, use the credentials below."
My windows 11 home edition won' support remote desktop, could anyone suggest me from where I can access remote desktop connection for free 😄

Thankyou!

[zealous dove]

Microsoft Remote Desktop client? But might be easier to just use the in-browser virtual machine.

[pulsar ruin]

For the pre security pathway you have to subscribe to get to intro to LAN? Or have I done something wrong

[zealous dove]

It says you dont have to be subscriber for Intro To LAN room.

"Free Room. Anyone can deploy virtual machines in the room (without being subscribed)!"

[pulsar ruin]

Every time I press on it I get taken to “intro to lan is a premium room. Subscribe to join it now….

With the subscription fees

[potent wedge]

huh weird

either it is AB testing

or something is wrong

[pulsar ruin]

Icl i just left it for now I’m doing this OhSint room

[light arrow]

Did you download config file for VPN on access page? You can get to the page by clicking access link on your profile

[tight ingot]

You don't have Windows 2011 pro?

[tight ingot]

Intro to lan Isn't a free room anymore, they just haven't changed the description in the room yet.

https://tryhackme.com/r/resources/blog/free-offensive-security-training

Here is an up to date list of free rooms on TryHackMe.

[pulsar ruin]

Ah ok, Ty for the help

[somber current]

Gave +1 Rep to @tight ingot (current: #1 - 2214)

[signal thicket]

Hey folks, I'm really stuck with this problem in TryHackMe, can someone help me? I'm in the Windows Fundamentals 2 lesson

I answered all other questions but this one question :/ I can't find any answer

[signal thicket]

(nvm I got it finally... ah that was a tricky / confusing question!)

[errant arch]

Somebody help me in the agentSudo ctf in tryhackme.....I need to understand some sort of basics

[brave cobalt]

Were you able to sort it out?

[still moss]

Really stuck with this problem in TryHackMe, can someone help me? I'm in Snort Rule Structure with question number #9 , and the output 10 still incorrect

[errant arch]

for sure no

Hey folks.....anyone with the names of the rooms related with the server side request forgery and file inclusion challenges please

[errant arch]

That's reall great...cuz the same thing happened to me last time before I started the agent sudo room

[brave cobalt]

Have you tried to use the search feature?

[errant arch]

I will try that feature later on.....

[unborn bison]

Hello Everyone, I am Rajendra Mohan Navuluri, I am trying to complete OS security module , but when I am trying to give password as dragon to login to sammie linux box, it is throwing error, can someone please help me?

[tight ingot]

Hi, can you please not spam the same message over multiple channels.

Remember everyone here is a volunteer.

[unborn bison]

Sorry, But No one helped me , I am waiting for help

I will not do that again

[marsh veldt]

hello

who want to be friends and hack together

[exotic pulsar]

Hack what?

[smoky blade]

please what is the answer to this because I have tried >What do you need to access a web application?> a web server, application server, database and web browser

@smoky blade hi

[zealous dove]

If you look at the * you know the answer key. Answer is 7 letters. You basically already named it just now.

[smoky blade]

but I try all of them pls tell me the one

[zealous dove]

Got it?

[smoky blade]

yes

[heady leaf]

hy

[sweet ledge]

whats a good entry level job to pursure for red teaming?

[lost matrix]

Real Red Teaming? There are no entry level positions. 🙂

[sweet ledge]

what about fake red teaming then?

[sweet ledge]

whats a good path to get there then?

just do cyber sec stuff until im old and decrepit and then become red team latterally?

[lost matrix]

Learn attack surface foundations, security foundations, offensive methodologies, pentesting, become an expert in a security domain that lends itself to become part of Red Teaming engagements. 🥳

[sweet ledge]

get good a phishing, got it, thanks!

[night juniper]

Task 6 under linux fundamentals, I need help to understand the answer.

[potent wedge]

the first 3 letters is a common marker for flags on tryhackme and as such are THM

the {} are the same and then it just wants what is inside those curly brackets

[night juniper]

oh yeah I'm being dumb

ty

[potent wedge]

nah just maybe some sleep could help

no problem

[night juniper]

I'm tired and do need sleep haha just thought I'd get a little study in before bed

[turbid wren]

I enrolled in the pre-security but don't see it on my dashboard only intro to cyber, can you do two at a time?

[severe schooner]

You can work in as many paths you want simultaneously. Paths are only collections. If you for example finish one room that's part of two paths, it's gonna be completed in two paths.

[turbid wren]

But you can only see one in the dashboard?

Sorry to bother, just making sure I didn't miss something

[severe schooner]

I don't know that. Makes no difference in any case, you can always access the paths through the menu.

[turbid wren]

Okay, thanks for the info

[lost matrix]

Hello, glad to hear you like paths. Indeed, only the most recently joined path shows up on the /dashboard page. 🙂

[turbid wren]

Once we complete it does the other one show up? Bit OCD

[lost matrix]

Once you complete one, join the next one to have that one show up. 😄

[turbid wren]

Whoops, alright thanks a lot, one other question. Can I screen share and ask my Preply tutor about more indepth stuff? I haven't done it as I figured it's copy right law violation

[lost matrix]

Probably good to double check the Terms of Use page:
https://tryhackme.com/r/legal/terms-of-use

[turbid wren]

Personal Use only, got it. I'll just take notes

[lost matrix]

Have fun! 🥳

[torpid adder]

Why do the machines lag so much

[errant arch]

Hey folks......hope you are doing fine and great....i just need some help...for anyone who has managed to solve the Burpsuite Basics room task number 11....actually whenever i try to use the site map section soon after fowarding the intercepted request in one way or another I fail to get suspicious url which contain the flag....somebody to give me a brief explanation please and some other ways to encounter this task

[errant arch]

You mean the machine you are using to solve the challenges or the machines you are trying to exploit????????

[torpid adder]

The machine I am using to do the challenge @errant arch

[brave cobalt]

Will take a look when I get the chance and let you know if I figure something out.

[little violet]

hello, when i try to learn in pre security pathway, some rooms cant be accessed if you are not subscribed like linux fundamnetal 2 and 3, but i want to learn that, is there an alternative room for it?

[severe schooner]

You can search for free rooms here: https://tryhackme.com/r/hacktivities/search?page=1&kind=all&searchText=Linux&contentSubType=free

But Linux fundamentals 2 and 3 are free, so you should be able to access them.

[little violet]

huh

this is weird

[severe schooner]

Where do you face an error?

[little violet]

whenever i access linux fundamental 2 and 3 it says i need to subscribe

wait

i can't send an image here right? whenever i access linux fundamentals 2 and 3 and windows fundamentals from https://tryhackme.com/paths it redirects me to https://tryhackme.com/why-subscribe
and it says Linux Fundamentals part 2 is a premium room, ....

still cant access it, i just tried using my phone without logged in but i can access it 😭, whats happening

[severe schooner]

You can verify yourself here using the token from tryhackme.com, then you're allowed to send images.

That is weird. When I go to the bottom of Linux Fundamentals 2 I see this: https://tryhackme.com/r/room/linuxfundamentalspart2

[tight ingot]

Linux fundemental 2 and 3 are premium rooms

[little violet]

huh so it is premium?

[tight ingot]

Yes

[little violet]

alr i see, but i still can access the walkthrough without logging in ig, thanks

[little violet]

https://tryhackme.com/r/hacktivities/search?page=1&kind=all&searchText=Linux&contentSubType=free

so this search page is misleading then?

[tight ingot]

Yes, as some rooms need to be changed to sub, and vice versa.

[little violet]

okay thanks!

[tight ingot]

https://tryhackme.com/r/resources/blog/free-offensive-security-training

This link has up to date list of free rooms within TryHackMe.

[little violet]

woah thanks! thanks a lot

[solar pulsar]

need some assistance with Windows Fundamentals 1 task 6: what is the account status? I found the account, but I don't see any indication of the status. Thought maybe it was "standard user account" but that was not it...a pointer will be greatly appreciated...

[severe schooner]

From my local machine. The status is on the screenshot.

[solar pulsar]

thanks

I totally looked right past it!!!!

[severe schooner]

Not gonna be the last time, no worries.

Don't disable yourself over it.

[little violet]

hello i have a problem, why i cant connect to tryhackme ssh?i keep getting permission denied

[tight ingot]

Which room?

[little violet]

activerecon

[tight ingot]

Do you need to SSH in to the machine?

[little violet]

oh wait what do you mean? T-T

[tight ingot]

Does the task material give you SSH creds?

[little violet]

nope

[tight ingot]

Then chances are you don't need to SSH in, not all machines can be SSH'd in.

[little violet]

wait so sometimes i need ssh creds?

[tight ingot]

Yeah, if you need them, THM supply them, or there is clues found in on the machine if it's a CTF.

[little violet]

but there are 2 options, to access this machine you need to either attack box or use a vpn

[tight ingot]

Yeah. but that could be so you can interact with the web server or not.

[tight ingot]

Can you link the room?

[little violet]

https://tryhackme.com/r/room/activerecon

here is the link to the room

[tight ingot]

Yeah, you don't need to SSH in to either machine.

[little violet]

when i tried to use attack box it gives me different ip address than when i start from netcat

[tight ingot]

Attackbox and Start Machine are two different machines.

[little violet]

huh

[limber flint]

@little violet

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

May 20, 2024, 4:27 PM

[tight ingot]

The article above will explain it

[little violet]

i seee that makes sense now

but.... why it doesnt work before this,

i mean, i tried to nc task_machine 21
and it refuses, and now it works, T-T

[tight ingot]

Sometimes the machines need a few mins to launch services.

[little violet]

i see

oh wait now im confused there is a question "Start the VM and open the AttackBox. Once the AttackBox loads, use Netcat to connect to the VM port 21. What is the version of the running server?"
i did nc and the output like this, so why is the answer 0.17?
(Version 6.4/OpenBSD/Linux-ftpd-0.17)

i thought it is the 6.4 one

[tight ingot]

Which task?

[little violet]

netcat

[tight ingot]

Do you have an IP?

Or can you verify and show me?

[limber flint]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 20, 2024, 4:34 PM

[little violet]

huh wait why you ask about my ip? i only ask about the answer.. T-T

i edited my question @tight ingot

[tight ingot]

No.

The netcat has a separate version

[little violet]

hmmm,,, ok thanks

[tight ingot]

It's at the end.

[little violet]

i seee

[solar pulsar]

iin teh windowsfundamentals2 room, task 2. For the life of me I cannot get : What is the name of the service that lists System Internals as the manufacture? I thought sysinternals, that is a no. nad Whom is the windows license registered to? A nudge in teh right direction will be greatly appreciated. I have looked all thought the System Configuration and cannot seem to locate them

[zealous dove]

So you open the System Configuration (search MSconfig) and then select the tab Services. Now theres the list of all the services and their manufacture. If you scroll down at some point you will find Systen Internals as a manufactures. The answer to the question is the name of the service next (left) to it.

You will have to use the machine attached to the room (not your own windows machine).

[solar pulsar]

Thanks, found System internals...I am using the machine attached, but I do not see anything about the whom the licenese is registered to

[somber current]

Gave +1 Rep to @zealous dove (current: #338 - 14)

[zealous dove]

Now when you go to the tab Tools you will see tools you can launch. One of these tools can give you information about that windows. Launch that tool to see who its licensed to.

[solar pulsar]

awesome, thanks, was in the right place just needed to go furhter

[night juniper]

Hi, I'm stuck on linux fundamentals part 3 task 6. how do I view running crontabs? any help would be greatly appreciated.

[zealous dove]

Did you check out the hint?

[night juniper]

so I thought this was incorrect when I went to it earlier as I thought it was looking for a time/day/month. also didn't realise the answer required the @. But I have solved it now thank you.

[marsh veldt]

Hey does anyone know how I can find the exe file for something

for example

the command for control panel is " control.exe"

where can i go see that

[severe schooner]

RIght click => Open File Location

If it's something in the start menu

For a shortcut on the desktop it would be right click => properties

[marsh veldt]

Okay thank u

[night juniper]

pre security path completed moving onto intro to cyber

[marsh veldt]

I did intro to cyber security first 😂

And nice! I’m finishing windows fundamentals right now

After this I’m going to complete beginner

[serene valley]

Hi everyone

Is there any extra practice questions or flashcards to revise the learning path?

[grim otter]

anyone know a john lasseter?

he messaged me but I think he may be a bot or something

[wanton totem]

i'd love that as well for like everypath, there must be some out there that someone has made

[serene valley]

If you find any can you share

I think THM can create and implement such practice tests and sections for revision

[grim otter]

you could get the topics and ask chat gpt to do that. i got chat gpt to write programs using python to test my knowledge. they were like multiple choice. a pop up window would ask a single question and there would be a drop down box in the window with multiple answers. "correct" in green type and "incorrect" in red. you could have the option to show the correct answer should you get it wrong. it takes a little work but that is an option. What do you want to revise

[tight ingot]

We don't promote ChatGPT in this server, thanks 🙂

[somber current]

Gave +1 Rep to @grim otter (current: #2083 - 1)

[grim otter]

oh, how come

has my reputation just taken a nose diver?

[tight ingot]

Not really..

It's just confidantly wrong, and doesn;t encourage further research

[grim otter]

oh ok

[last moat]

@grim otter What model do you use for python ? I had some decent success with wizardcoder but it was very limited ( troubleshooting php7 to php8 code changes)

[grim otter]

I am sorry, model?

do you mean IDE

I am new to programming, I have visual studio (I think its called) and python IDE

[last moat]

You mentioned using chatgpt? Do you run the models locally or do you man like the online service?

[ember iris]

I actually wrote something that can deploy some AI models

https://gist.github.com/VTSTech/bb858a2039fe84cd35af4064c0aa44d8

[tight ingot]

Please don't cross post in multipe channels 🙂

[lusty cypress]

In Windows Fundamental 1 I am stuck with this Qs

What is the account description?

[serene valley]

That sounds like a nice idea but it will take too much time to plan and design that

[serene valley]

Is there any other way to do this? Practice the learning path questions and revise the topics in an efficient manner?

Btw, I have a doubt and wanted to clarify it

When using wget and scp commands for downloading files or copying them from one machine to another, how can we do it between a kali in VM and another machine outside of the host?

I used python -m http.server to host a server and allow other machine to download it
However, in wget command what should I put the address? If the address is the private address of the machine and the second machine is outside of the network (not same network) then it won't recognize the IP.

Even because my windows machine and vmware machines have the same public IP address, if use public IP address in wget command then it won't be able to recognize which location I am referring to.

What is the right way to do this between a local machine and another machine outside of our private network?

[glass token]

Hi everyone, I'm stuck on Windows fundamentals 1 and need help with Task 6, Task 8, and Task 9.

• Task 6: I failed all attempts. Can someone please point me in the right direction or assist?

• Task 8: In the Control Panel, change the view to small icons. What is the last setting in the Control Panel?

• Task 9: The question was, what is the keyboard shortcut to open Task Manager? My answer, Ctrl + Shift + Esc, was declined by the system.

Can someone please assist me?

[upper bear]

Task 6: Check the local users and groups

Task 8: a hint is, what security is default for Windows?

Task 9: They're not spaced, do it as Ctrl+Shift+Esc

[glass token]

Thanks buddy, i attempted 8 and 9 and was succesful. Please provide hints for Qns in task 6

[somber current]

Gave +1 Rep to @upper bear (current: #54 - 127)

[upper bear]

Seach computer management and take a look in the local users and groups > users > Look at the description

[hidden salmon]

no it doesnt work answer

[glass token]

Thanks buddy finally completed the room

[tame nimbus]

I’m having the same problem for 6

Can anyone help I can see the descriptions in the users and groups but still got it wrong

[severe schooner]

Are you on the THM Windows VM or on your local, personal computer?

[tame nimbus]

Vm

[severe schooner]

Have you opened lusrmgr.msc and opened users?

[tame nimbus]

Yes

[severe schooner]

Can you share a screenshot of that please?

Ideally after maximizing the window.

[tame nimbus]

i can send screen shot

cant

doesnt let me

[severe schooner]

You need to verify before.

[severe schooner]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[tame nimbus]

omg i figured it out

i was looking at the wrong thing the whole time

[south jackal]

You got it

[serene valley]

Hi

In Windows Fundamentals 3 room under the Bitlocker section (task), where can I find the correct answer for the following question:
What must a user insert on computers that DO NOT have a TPM version 1.2 or later?

I check and read the article from Microsoft doc using this link: https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/

They mentioned three possible answers:

1. PIN
2. Startup key
3. Password

But none of them are working
Can you help me out on how to find it?

[zealous dove]

"In addition to the TPM, BitLocker can lock the normal startup process until the user supplies a personal identification number (PIN) or inserts a removable device that contains a startup key."

It's one of the 3 you mentioned but missing a small part.

[serene valley]

Got it, thank you

[somber current]

Gave +1 Rep to @zealous dove (current: #292 - 17)

[turbid wren]

As a beginner should I learn front end or back end first with ethical hacking as a long term goal? Also doing Information Technology fundamentals but internet says so many things...

[severe schooner]

Neither. You should start with the basics of programming. If you plan to go into web app testing it would make sense to start with JavaScript (which is used on both "ends") but ultimately the choice of language doesn't matter.

[turbid wren]

@severe schooner Thanks CyberTerms

[somber current]

Gave +1 Rep to @severe schooner (current: #141 - 49)

[turbid wren]

@severe schooner What qualifies as the basics of programming? I would have guessed front end...

[severe schooner]

Things like variables, loops, conditionals, functions, possibly classes. That is not tied to either backend or front-end.

[turbid wren]

@turbid wren Thanks cyberterms, I'll write that down

[modest vessel]

hi friends what is the bigginer friendly bug bounty platform

[vocal flint]

Hello there, I am struggling with Windows fundamental 1 (User Accounts, Profiles, and Permissions) question number four (4) I take it that the question is related to question 3. If anyone have any idea should please help me.

[severe schooner]

It's the account description question? That's not referring to the guest account if you mean that.

[vocal flint]

would that be the administrator account ?

[severe schooner]

There's one other account mentioned in previous questions in the task, besides Guest.

[vocal flint]

Thank you!

[somber current]

Gave +1 Rep to @severe schooner (current: #72 - 87)

[serene plover]

Hi guys, i've a problem with a question in : Pre Security /Network Fundamentals /Extending Your Network => "What layers of the OSI model do firewalls operate at?" My response : "3,4,7" but it's not correct. Have you an idea why it's not the good response please 🙂

[brave cobalt]

Why do you say that it works at layers 3, 4 and 7?

Think about what is it intended for.

[serene plover]

mainly to handle Network and transport -> 3-4 ?

[brave cobalt]

FWs that can understand or interpret layer 7 traffic are a specialised kind of FWs - Web Application Firewall (WAF).

[serene plover]

ah ok I understand ^^ (3 and 4 are working) thx a lot 🙂

[willow spruce]

I am facing an Issue my Openvpn is now working

how can I share my screen shot here?

2024-06-13 01:34:10 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-13 01:34:10 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-06-13 01:34:10 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-06-13 01:34:10 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-13 01:34:10 library versions: OpenSSL 3.1.5 30 Jan 2024, LZO 2.10
2024-06-13 01:34:10 DCO version: N/A
2024-06-13 01:34:10 TCP/UDP: Preserving recently used remote address: [AF_INET]3.7.33.194:1194
2024-06-13 01:34:10 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-13 01:34:10 UDPv4 link local: (not bound)
2024-06-13 01:34:10 UDPv4 link remote: [AF_INET]3.7.33.194:1194
2024-06-13 01:34:11 TLS: Initial packet from [AF_INET]3.7.33.194:1194, sid=09e17cb3 f7d8e3ec
2024-06-13 01:34:11 VERIFY OK: depth=1, CN=ChangeMe
2024-06-13 01:34:11 VERIFY KU OK
2024-06-13 01:34:11 Validating certificate extended key usage
2024-06-13 01:34:11 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-06-13 01:34:11 VERIFY EKU OK
2024-06-13 01:34:11 VERIFY OK: depth=0, CN=server
2024-06-13 01:34:11 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256

2024-06-13 01:34:11 [server] Peer Connection Initiated with [AF_INET]3.7.33.194:1194
2024-06-13 01:34:11 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2024-06-13 01:34:11 TLS: tls_multi_process: initial untrusted session promoted to trusted
2024-06-13 01:34:12 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2024-06-13 01:34:13 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,route-gateway 10.17.0.1,topology subnet,ping 5,ping-restart 120,ifconfig 10.17.83.208 255.255.128.0,peer-id 148'
2024-06-13 01:34:13 OPTIONS IMPORT: --ifconfig/up options modified
2024-06-13 01:34:13 OPTIONS IMPORT: route options modified
2024-06-13 01:34:13 OPTIONS IMPORT: route-related options modified
2024-06-13 01:34:13 Using peer cipher 'AES-256-CBC'
2024-06-13 01:34:13 net_route_v4_best_gw query: dst 0.0.0.0
2024-06-13 01:34:13 net_route_v4_best_gw result: via 192.168.142.2 dev eth0
2024-06-13 01:34:13 ROUTE_GATEWAY 192.168.142.2/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:17:53:c0
2024-06-13 01:34:13 TUN/TAP device tun0 opened
2024-06-13 01:34:13 net_iface_mtu_set: mtu 1500 for tun0
2024-06-13 01:34:13 net_iface_up: set tun0 up
2024-06-13 01:34:13 net_addr_v4_add: 10.17.83.208/17 dev tun0
2024-06-13 01:34:13 net_route_v4_add: 10.10.0.0/16 via 10.17.0.1 dev [NULL] table 0 metric 1000
2024-06-13 01:34:13 Initialization Sequence Completed
2024-06-13 01:34:13 Data Channel: cipher 'AES-256-CBC', auth 'SHA512', peer-id: 148, compression: 'lzo'
2024-06-13 01:34:13 Timers: ping 5, ping-restart 120
2024-06-13 01:34:13 Protocol options: explicit-exit-notify 3

---

[brave cobalt]

You'll need to verify your account to do so.

[limber flint]

@willow spruce

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 13, 2024, 5:51 AM

[willow spruce]

what that means?

alright I will verify its not the problem the problem is my OpenVPN

[brave cobalt]

The article explains what it is for. One of the perks of verifying is being allowed to post screenshots

[brave cobalt]

The last few lines here indicate that you are connected. The access page is broken, but if you try to access http://10.10.10.10 using your browser and it shows your THM IP, then you should be good.

[willow spruce]

alright let me try

Thank you! I am connected!

[willow spruce]

@brave cobalt

[brave cobalt]

Yes?

[willow spruce]

thank you

[somber current]

Gave +1 Rep to @brave cobalt (current: #11 - 578)

[serene plover]

hi everybody, i'm looking for an response 🙂 i'm in : Windows Fundamentals 1 / The Desktop (GUI) / Answer the questions below : "'Besides Clock and Network, what other icon is visible in the Notification Area?" i really don't know what he want like response ...

[severe schooner]

Did you use the hint next to the question?

[tight ingot]

Right click the notification area.

[serene plover]

i'll try it 🙂

really I don't know what he wants hahaha 😂

[severe schooner]

right click on this area

[serene plover]

it's fine ^^' it was action center lol

[serene plover]

and the last one question for this chapter ^^ hi everybody, i'm looking for an response 🙂 i'm in : Windows Fundamentals 1 / User accournts, profiles, and permissions / answer the questions below / -> What is the account description? I've try : Disabled, copy the entire description. But no ...

[severe schooner]

You're not supposed to look at the guest user

[serene plover]

are you sure ? because the previous question was based on the guest account

thx a lot hah

[severe schooner]

You're not the first one asking this. Probably no need to spoil the answer here in chat though...

[serene plover]

ho sorry my bad

[amber basin]

what does id parameter do when you request an website?

[dusty agate]

can anyone help me with information on how to build a webcrawler
or to scrape a website using python

[lavish fjord]

hi guys,help please,,Devsecops CI/CD and build security ...task 2,,being trying to find the X values but im struggling ,any help or hints please..thankyou

[severe schooner]

It's sent to the web server as additional piece of data. It does nothing on its own, it's just a bit of text. The programmer decides if and what to do with it on the server.

[marsh veldt]

hello everyone

i need some help with proxychains

[tight ingot]

Why do you need help with proxy chains?

[marsh veldt]

Hello!

I was learning about alot of things in kali and wanted to know ways to protect myself

[marsh veldt]

also is the TOR browser basically protecting me and actually hides my traffic?

because i see it many times when using proxychains

[tight ingot]

If this isn't on THM, can you move to #general please

[marsh veldt]

Sure mb

[open glade]

hello everyone, I am facing an issue when I try to connect throught ssh to a machine.
I am well connected to the network throught the vpn connection, i can ping the machine, the port 22 is open but I can't connect with ssh :

$ ssh username@10.10...............
Connection closed by 10.10............ port 22

Do you have an idea ?

[tight ingot]

Which machine are you trying to connect to?

[open glade]

Im in "linux escalation privilege" but it's the same for all the machine i tried

you wan't the full ip ?

[tight ingot]

Are you using a VM or the attackbox?

[open glade]

My VM (it's a kali)

[tight ingot]

Are you on the VPN?

[open glade]

yes

[tight ingot]

Can you link the room?

[open glade]

You want the link of the room ? (english not my first language sry)

[tight ingot]

Yes please.

[open glade]

https://tryhackme.com/r/room/linprivesc

[tight ingot]

Which task are you doing?

[open glade]

path

[tight ingot]

Did you start the correct machine?

[open glade]

yep

[tight ingot]

What's your full IP?

[open glade]

10.10.193.229

[tight ingot]

I was able to log in.

Can you confirm you're on the VPN by visiting http://10.10.10.10 in the browser?

[open glade]

yes

[tight ingot]

ip a | "tun"

Do you only have one tunnel? (tun0)

[open glade]

the command not working but with ifconfig I got tun0 yes

[tight ingot]

Oh, you're on Windows...

Are you running the WSL?

Or are you running a VM with the VPN running in Windows?

[open glade]

yes vm kali on windows

[tight ingot]

That's the issue.

[open glade]

ah

[tight ingot]

You need to run the VPN in kali.

[open glade]

It is running on the vm

i launch it with "sudo openvpn path/fddfd/fdfd" on my kali terminal

[tight ingot]

Then minimise it?

the SSH connection should not be getting refused, do you have a personal VPN running on the host?

Can you verify and share a screesnhot

[limber flint]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 19, 2024, 9:43 AM

[open glade]

No vpn on the host

I share the screenshots as soon as possible (my manager call me for lunch) I will be back in one hour I think. Sorry and thank you for the time you already spend.

[tight ingot]

Oh, you're on a Org network?

[open glade]

No, phone’s network

[open glade]

I just verifed my account, what screenshot do you want ?

[open glade]

Thank you for your time @tight ingot yesterday. I changed my iptables rules and try again it worked.

[somber current]

Gave +1 Rep to @tight ingot (current: #1 - 2430)

[lavish fjord]

linux fundamental 3,task 5,Processes....i got the flag but is is being rejected ..please help ,what am i missing or doing wrong.thankyou

[brave cobalt]

What is the exact question being asked in the task?

[lavish fjord]

Locate the process that is running on the deployed instance (10.10.144.234). What flag is given?

[brave cobalt]

Ugh. If its looking for a process, I would look at the output of || ps aux || command or its variations

[lavish fjord]

if you mean " ps aux" command , i have run it before but i cant see anything or maybe you are suggesting a different command?

[brave cobalt]

Play around with the options or flags available in || ps || man page.

[lavish fjord]

thanks,,let me try again

[smoky portal]

hello

[tight ingot]

Please don't post the same message across multiple channels

[jaunty apex]

Ok Sir, will take care

[tame helm]

hi guys could someone help me with web fundamental part 1 user Accounts, Profiles, and Permissions question What is the account description i am stuck if somebody could tell me the ans i will be really thankfull

[shrewd mica]

can you share the link to the room?

[zealous dove]

We don't give out the answers but can help you find them. The question is not about the guest account but about an actual useraccount that you answered the name of in a previous question. The account description clearly stand out from all the other account descriptions.

[gray bone]

I'm having a bit of trouble with the Linux Fundamentals Part 2: Task 2,utilizing SSH command. I'm entering the command correctly, but it keeps displaying this:
"sh: connect to host 10.10.244.147 port 22: No route to host"
Is there a different IP address that the website just hasn't updated on the room yet?
I tried rebooting the VM, and reloading the website after clearing my cache. I also tried the IP address used in the video walkthrough (it was different from the instructions). I tried pining /22. Nothing seems to be working
Room Link: https://tryhackme.com/r/room/linuxfundamentalspart2

[zealous dove]

You will have to use the green Start Machine button. Then after 1 minute you will get an IP ti use.

[brave cobalt]

Are you connected to THM OpenVPN (if you're not using the Attackbox)?

[gray bone]

I did use the machine, and the Attack Box

[zealous dove]

Can you verify and show screenshots?

[gray bone]

Will the IP be displayed in the welcome message?

[limber flint]

@gray bone

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 28, 2024, 6:47 PM

[zealous dove]

The IP will be shown at the top of the room.

[gray bone]

I see it now thanks @zealous dove

now the password isn't working lol. I'd attach a screenshot, but I don't seem to have the option

[limber flint]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Jun 28, 2024, 7:09 PM

[zealous dove]

You need to verify to post screenshots.

[gray bone]

Thanks again

[zealous dove]

You are using the wrong IP.

[gray bone]

At first I was, but if you look at the bottom, I realized it

[zealous dove]

All I can see is that you are using the attackbox IP.

[gray bone]

I stepped away for about an hour, and I'm going to try again, but that was the IP listed at the top of the page when I was trying it before

It's doing it again

[zealous dove]

Based on your screenshot you did not start the machine.

[gray bone]

I clicked "Start Attack Box"

And I got the welcome message

Never mind you're right

[zealous dove]

So, you use the attackbox to attack, but what are you attacking.. another machine.

Whenever you see in the task text MACHINE_IP you know there's machine you have to start first and then the actual IP will show after 1 minute.

[gray bone]

Thank you, I feel dumb now lol. But seriously thanks

[zealous dove]

No worries. No need to feel dumb either.

Now you see what I mean with IP on top of the page. It's not the one you were thinking. Also I could have been more clear, i wasn't thinking about that IP.

[gray bone]

I have subnetted LANs and WANs, reconfigured old tech to run modern software, and used 4 different distros of Linux. The one thing that tripped me up was a big green button the says START MACHINE. Yeah, for the last 2 hours, I am an idiot lol

[gray bone]

If anyone is around I have another issue with Linux Fundamentals. I'm in part 3, and I'm just trying to SSH into the provided IP, but the password provided isn't working, and this time I'm copy pasting

[gray bone]

I tried pinging it and apparently the IP is down???

[brave cobalt]

Do check your SSH command. It should be ssh <user>@<IP> -p <port number if not in standard port -22>.

Also, you seem to have the incorrect target IP. It seems the correct one is 10.10.234.244

<user in the room's context is tryhackme

[gray bone]

Another case of me not reading closely

Thank you for the help

[ornate sky]

How are you able to find the IP address of the target machine? I am unable to do so, please help me

[brave cobalt]

It should appear once you've clicked on the green Start Machine button.

[ornate sky]

Thanks, I have found it now

[somber current]

Gave +1 Rep to @brave cobalt (current: #11 - 596)

[oak cypress]

help: I cannot find the answer for Window Fundamentals 3 - task 8
The question: What must a user insert on computers that DO NOT have a TPM version 1.2 or later?
I only found "the startup key" to fit the space.

[steel meteor]

reading and grasping instructions is so key in these rooms... I had been unable to complete Linux Fundamentals 3 in the past because I was looking through the Attackbox processes instead of the deployed instance you have to SSH into...

[oak cypress]

it's different from the other section, I have to read the Microsoft's Bitlocker overview page. That is also the hint. The only place they mention about don't have TPM is to: use a startup key or use a password.

I tried both, the website said it's wrong.

[zealous dove]

If you look at the * in the answer field you can see the amount of letters/words it needs. You are in the right direction with startup key just needs a bit more. Where is the startup key stored on?

[tight ingot]

You're so close.

[oak cypress]

Alright, thanks guys.
I swear that I didn't think of the word USB when I read the word 'removable drive'.
I was thinking of flashdrive (which is anotherr word for USB, yes) or like extenal disk.

[karmic wigeon]

Hey guys

I tried connecting through RDP to the windows machine in the windows fundamentals part. I connected to tryhackme vpn succesfully but when I try it doesnt work. I tried from attackbox and through my own linux vm too.

I tried pinging the windows machine and it doesnt work(doesnt show any erors, just doesnt send any packets, leaves an infinite blank output), but for some reason the windows machine can ping my IP.

I’ll attach the errors that I got when i tried to connect in a second.

ERROR: CredSSP: Initialize failed, do you have correct kerberos tgt initialized ?
Failed to connect, CredSSP required by server.```

I tried with xfreerdp and rdesktop both showed similar errors

and yes the ip username and password were correct i double checked

[tight ingot]

Windows blocks ICMP by default, use reminna it's bettee

Better

[karmic wigeon]

Will do once I get home and ill tell you if it worked. I suppose apt install reminna?

[tight ingot]

Yeah. It's also already on the attackbox

[karmic wigeon]

Oh and also any reason it blocks ICMP by default? Firewall/security reasons?

[tight ingot]

Windows implemented it for Security, but it Is a firewall rule.

[karmic wigeon]

Oh ok thanks

[karmic wigeon]

just tried it with remmina it worked thank you

[somber current]

Gave +1 Rep to @tight ingot (current: #1 - 2471)

[hollow stream]

learn

[quiet harness]

I need help with an attack box task

In the operating system security part

[zealous dove]

Just explain your issue, and somebody who can help will help.

[quiet harness]

Ok so when I am using the attack box where we hack into the Linux syster and the command goes like ssh sammie@UserIPadress and then we have to put the password which is 'dragon' or 'sammie' ...so when I put the password the machine says permission denied...the spelling is correct the password is correct the process is correct yet it says permission denied

[zealous dove]

If you verify on discord you can send a screenshot of what's happening.

[limber flint]

@quiet harness

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 3, 2024, 11:31 AM

[zealous dove]

This will make it easier to find the problem.

[quiet harness]

Okay done

I'll do it

[zealous dove]

Okey. So you are using the attsckbox IP instead of the target machine IP.

There's a green Start Machine button at the top of the task.

After 1 minute an IP will show at the top of the room.

[quiet harness]

ohhhhhh hold up let me do it rn

then update you

[slender hazel]

isn't it weird that in windows fundamentals 2 they ask you for the internet protocol configuration path in command prompt task?

also why the answer to the question "What is the name of the service that lists Systems Internals as the manufacturer?" is "psShutdown"?

[zealous dove]

Wdym why is that the answer? It's just an exercise to find your way around windows and that is the service with the listed manufacturer being System Internals.

[slender hazel]

is it really? thought it would be something more like msinfo32

[zealous dove]

It really is, if you follow along with the provided VM in the room.