TryHackMe Advent of Cyber 2: Day 2

[@pinglocalhost]

If you are running Kali Linux how do you have your terminal look like that at 14:08 at the bottom with the colors? Thank you.

[@mayankchauhan4788]

he is using tmux

[@scully1856]

@DarkSec I have been stuck on "WARNING: Failed to daemonise. This is quite common and not fatal. Connection refused (111)" Immediately after I try to run the script via the uploads page. On top of that, the port listener is not returning anything? I have changed the port number several times and re-uploaded the .php file and I consistently get this same error. Any ideas?

[@LuisHernandez-yb4yd]

I am having the same issues. Did you find a way to fix it?

[@scully1856]

@@LuisHernandez-yb4yd unfortunately not. I e been busy with finals and haven't had much more time to look into it. When I figure it out I'll post back here though

[@cybercowboy642]

Had the same issue. You are using the wrong IP address in the shell script upload file. Think about how traffic will get back to your local machine. HINT: need to run an ifconfig

[@scully1856]

@@cybercowboy642 thank you for the tip! I will check it out when I get back to my computer. I wish I could like your comment 100 times.

[@Francois-B-Arthanas]

This was great! Thank you @Dark

[@synack2165]

I know I am a little behind. Playing catchup. I ran into a couple issues but I was able to fight my way through them and figured it out. Good stuff!! Really enjoying these lessons.

[@austinthompson1314]

Awesome video Dark! Sucks I had to do it at x0.25 speed due to tryhackme's slow machines haha

[@ssh17hx0r]

These first two THM holiday rooms doesn't give me an indication that it's finished with the confetti and the "Congratulations" message, but it does say 100%. Since it matters for the prize drawings, is there a way to know that it's registering that the rooms have been completed? I couldn't find a place to make a ticket. So I'm posting here.

[@DarkSec]

That's because you're not 100% done. To obtain completion, you have to do all of the days and you still have 23 more to go haha

[@ssh17hx0r]

@@DarkSec That's what I was hoping! Thank you!

[@KieCodes]

Very nice small hack-snack! Loved it! Maybe here's a little tip for mac users. On chrome on mac os you can't select a *.jpg.php file and there is no dropdown menu like on windows to select *.* (or I didn't find it), but a way to get through this is to upload a *.jpg file and repeat the request with burp suite in order to change the filename in the request to .jpg.php.

[@audreymcnay3528]

I just figured out there's a similar option on Mac OS. Click "Options" on the bottom left of the finder window, then there's a dropdown where you can select "All Files" :)

[@KieCodes]

@@audreymcnay3528 Wow. never saw that. Thanks a lot!

[@marcotheitguy]

Excellent video though website never uploaded forme tried at different times and different attack boxes and always got same error: 405 - Specified method is invalid for this resource

[@JakeStPeter]

Thanks for the video Dark!

[@boxclever8030]

Cannot get netcat to find the connection, followed all these steps. Any ideas?

[@Drusher10]

had the same issue, i insert the ip that THM game me but couldnt connect :/

[@carldavenport1583]

@@Drusher10 I think the issue is he has netcat already set to connect from "any" IP. My netcat isn't listening for connection. Gotta figure out to get it to listen for any IP connection like his is already set to do.

[@sudarshanpatel8996]

you have been really very helpfull....THANK YOU VERY MUCH !!!

[@lommenthepocket3534]

Thanks @Dark - as always a pleasure 😊

[@cipher3966]

Did this stop working? Trying to practice but this step will not nmap, page won't load and does not ping

[@ssh17hx0r]

@DarkSec really fun room.

[@crystalmorton9500]

@DarkSec I'm subscribed to tryhackme, but when I deploy the VM it still only gives me an hour time limit.

[@DarkSec]

Oh thats just the auto termination I think, you should be able to extend the time

[@crystalmorton9500]

@@DarkSec thanks!

[@dalemanni24]

So, two things. First, after doing everything you did, I can't upload it to the site. No idea why, just doesn't allow me to do so. Second, I tried removing the ".php" which then allowed me to upload. After doing that, I can't run the script due to an error. I assume because I removed the ".php". Edit: I am an idiot.

[@DarkSec]

Bahaha didja find the drop down selector?

[@dalemanni24]

@@DarkSec Nope. Thought I had moved it from All Supported Types to All Files, but didn't.

[@nithinchowdarygarapati1604]

I really agree to your edit line.. :) Thats how I felt after seeing this video.. :(

[@DarkSec]

Hey at least ya found it :)

[@abdulhaqmohammed]

Hey How can i get a terminal like yours with the ip addresses in the bottom ??

[@DarkSec]

Check out the project OhMyTmux on github

[@abdulhaqmohammed]

@@DarkSec Does This work on kali linux?

[@DarkSec]

Mhmm

[@Nilicous]

I am greatful for this amazing video and these fun tasks. I've been given the opportunity to start a junior position at our security department this spring and I've made it my thing to complete this calendar and start learning more before then. I really appreciate the work that has been put into these starting assignments. They were easy to understand and felt engaging. They also left this aftertaste of wanting to know more. So yeah, really good!

[@Drusher10]

Have some questions on this: I have my own VB kali machine and i was inserting on my browser the IP of THM. Couldnt bring me the webpage you created therefore i couldnt complete the tanks. The copy .php file did it fairly easily. Any advice for the issuee?

[@rubenramos2814]

Hi, when i try to listen the port 1234 and i start the php shell in the website doesnt appear nothing, can u help me?

[@dr.b3276]

Please How do I copy into my current directory, I am using windows and kali in my VMware

[@0xR1SKY]

I'm proud of myself. I did it myself. BTW all the work you all put on this is really useful and I think it will help everyone. Thanks :)

[@Naigung]

I used the video because I couldnt figure out a question...my answer was plural. Whatever the video was great.

[@KohzmikYT]

are you a master hacker now :)

[@mohamedlourch]

hope you cover more stuffs in this channel .

[@DarkSec]

I certainly hope to! I think my plan is to go on a schedule of one walkthrough a week release or so after AoC2

[@aks3479]

I tried running the script but i got WARNING: Failed to daemonise. This is quite common and not fatal. php_network_getaddresses: getaddrinfo failed: Name or service not known (0)

[@samiul008]

Having same issue! Anybody found the workaround??

[@samiul008]

WARNING: Failed to daemonise. This is quite common and not fatal. Connection refused (111)

[@samiul008]

@Bergþór Olivert Thorstensen yes, i changed to correct port and ip address. Once executed,netcat shows listening but after clicking the script on the browser i get the same errorr in the browser. Could not get reverse shell by any means 😪

[@samiul008]

@Bergþór Olivert Thorstensen Thanks a lot! I was putting the wrong ip address :P Banging my own skull :D

[@Sokoto312]

hi all, i need your help. when i run the command to open netcat by nc -lvnp 443 nothing are going only its listenning on (0.0.0.0). i don't have the tunnel ip or vpn set on that THM only the THM IP and the docker ip are shown.

[@brandonkilgore4726]

it doesnt refresh to the upload page for me??????

[@danpizzytm4157]

thanks @dark

[@jpersson8718]

Hi! New to this and im trying to learn more, so this content is just awesome! But im so stuck on this one and after hours i cant understand why the site is just printing out my shell.jpg.php in text when im clicking on it and nothing show up in Nc? Maybe somebody can help me. Best regards!

[@DarkSec]

Hey! Please hop in the tryhackme discord and ask this in the advent of cyber chat :)

[@jpersson8718]

@@DarkSec Well once again it was my stupid brain that was unreliable. I had forgotten "

[@beebed1]

Can someone tell me what to do? Is this step not available if I use openvpn? I am using openvpn on Mac, sudo nc -p 1234 This code doesn't work. nc: missing port with option -l I seem to get an error. php file, you can write the green part at the top of the try hack me website. $port = 1234; When I go to /uploads/ and click on shell.jpeg.php, I get the error WARNING: Failed to daemonise. This is quite common and not fatal. Connection timed out (110)

[@camz_ridez4508]

when i try putting the cp /usr/share/webshells/php/php/reverse-shell.php ./shell.jpeg.php it says cannot start cp /usr/share/webshells/php/php/reverse-shell.php ./shell.jpeg.php no such file or directory

[@walterlensinas4404]

Hi, try with cp /usr/share/webshells/php/php/reverse-shell.php . and then change mannually the file extension to .png.php or .jpg.php

[@elizabethrasnick1361]

I'm hitting the same problem.

[@mavericks.9638]

hey Darksec, what laptop or computer do you recommend using a vm on because as soon as I open a web browser on my vm my main machine starts heating up and I hear the fan on loud af. im guessing its using too much ram, even though I've allocated 4gb of ram for the vm.

[@curtishoughton9347]

So I found if you just put ?id= without any id value after it, it will also let you access the uploads page. Not sure if it's an unintential bypass :)

[@screencastlover4566]

Hey mate, I found it as well (I didn't read the elf give code section :D) I think its not intentional, but they left it there, they did a huuge amount of work with everything, so yeah, why would they bother.

[@DarkSec]

From an internal perspective, I think we just missed that bypass haha

[@screencastlover4566]

@@DarkSec It's a good lesson for us in any case :D Anyway, thank you for your contribution, it was fun!

[@curtishoughton9347]

@@screencastlover4566 Yep that's exactly what I did, went ahead without reading, then wondered how to answer the first question XD. Lesson learnt, either way enjoying the advent of cyber challenges! :)

[@Sfhgscvg]

Uploads seem publicly accessible, no params needed. The param threw me off guard though, wrote a small script to brute force it and then proceeded reading the id in the assignment. - _- I actually thought of letting sqlmap loose too..

[@netwizs3083]

I tried executing the reverse shell script on the server, I got the following error:- PHP Warning: fsockopen(): unable to connect to (Connection refused).

[@RahulKr51]

nc -nvlp 4444

[@thomasstern4336]

Can you share your tmux script ? :)

[@DarkSec]

I have a lightly customized version of this: github.com/gpakosz/.tmux

[@dazman1973]

Yay I worked through this challenge without watching the video and worked out some of the solution myself, just verifying I had the commands right in the text. Very chuffed with myself. Thanks for the effort you guys are putting in to teach an old dog like me new tricks. Merry Christmas 🎄

[@BroodPitt]

.jpeg doesnt work as awnser :(

[@lisabartlett5258]

It's image

[@BroodPitt]

@@lisabartlett5258 ah 🥺😂 danke!

[@was3490]

Love it

[@aimetyuo548]

Please sir what is different between (A T) gmail.com and @gmail.com

[@aimetyuo548]

I try to get my own email: (A T) gmail.com and gmail rejected my request.

[@tekken-pakistan2718]

bruh xD

[@null_value89]

B R U H

[@chuckwoolson9339]

@@aimetyuo548 you have to append {pretty please} then it should work.

[@33minutes51]

he speak so fast

[@jaybell0819]

Who is better? John or Dark We"ll have this answer.......................... Maybe

[@DarkSec]

Fun fact, Jon is also my first name so its John versus Jon haha

[@jaybell0819]

@@DarkSec You guys are awesome btw.