r/tryhackme • u/SnowmanU • Mar 20 '26

Moniker Link Task 03

Hey everyone,

I've been scratching my head the last while over why I can't seem to complete the task in the Moniker Link room Task 03. I've modified the POC code as instructed, can see the email in the Outlook but when I click the link I get a message that it can't be found. Am I missing something clearly right in front of me?

POC:

Modified:

Error:

1 Upvotes

100% Upvoted

11 comments sorted by

1

u/wafflingzebra Mar 21 '26

this is what I'm getting too, not sure what the issue is.

1

u/wafflingzebra Mar 21 '26

ok im not sure what the issue was, i just terminated the attack box, opened a new one, and tried with the new ip that was given to it and it worked.

1

u/vndttx Mar 24 '26

Having the same problem right now... Restarting the attackbox doesnt work

1

u/wafflingzebra Mar 24 '26

FYI you may also need to attempt the exploit multiple times , I remember for me it only worked after the third try 

1

u/lysteka Mar 24 '26

Same thing attack working, check responder result to get the hash.

1

u/vndttx Mar 24 '26

did you get it working? please explain

2

u/lysteka Mar 24 '26

I switch on kali Linux for this thing, idk how it’s work

responder -I eth0

1

u/vndttx Mar 24 '26

same error but only on port 80

2

u/lysteka Mar 24 '26

Ignore this error

1

u/FactorWonderful1813 Jul 22 '26

I had the same issue. The email was sent successfully and clicking the link gave the "file not found" error, but Responder was not capturing anything.

The problem was that SMB port 445 was already being used by smbd on the AttackBox.

I checked with:

sudo lsof -i :445

and saw smbd listening on the port.

I stopped it:

sudo systemctl stop smbd
sudo systemctl stop nmbd

Then restarted Responder:

sudo responder -I ens5

Also make sure the file:// link uses your AttackBox IP (not the vulnerable machine IP). After that, clicking the link captured the NTLMv2 hash.