What Is The AttackBox?
The TryHackMe AttackBox is a cloud-based Ubuntu virtual machine that lets you complete tasks directly in your browser, no setup required. It comes pre-installed with the tools needed for most rooms, making it your all-in-one virtual computer for learning and practising cyber security.
Free users can use the AttackBox for up to one hour per day. For unlimited use, a premium subscription is required. Alternatively, free users can connect via VPN for extended access using their own machine.
How Do I Deploy The AttackBox?
Select the Start AttackBox button at the top of any room. In some rooms, you can also start it from the Set up your virtual environment task card. Your AttackBox will load in the split-screen view, and once it's ready you'll see the home screen.
In some rooms, you can start the AttackBox directly from the Set up your virtual environment task card:
Your AttackBox will start loading in the split-screen view:
Once it is fully loaded, you should see the home screen:
Here are the main options available in your AttackBox:
Find your IP address: shown at the top of the AttackBox or inside the terminal
Open in a new tab: expand the AttackBox to full-screen for a better experience
Extend time: add more time before the session expires (the default is 2 hours)
Shut down: power off the virtual machine when you're done
Exit split view: collapse the split-screen layout (closing the room page won't shut down the AttackBox)
The AttackBox Or Split Screen Won't Load
If the split screen stays blank, keeps loading, or shows an error, try these in order:
Give it a few minutes. The AttackBox can take up to 2 to 3 minutes to start.
Open it in a new tab. Use the Open in a new tab option; this often works when the split view doesn't.
Refresh the room page. Your AttackBox keeps running, so you won't lose it.
Turn off browser extensions, especially ad blockers and privacy tools, or try a private window.
Try another browser, such as Chrome or Firefox.
Check your network. Work, school and some public networks block the connection the AttackBox uses. Try another network, such as a mobile hotspot.
Restart it. Shut down the AttackBox, wait a minute, then start it again.
Still not working? Open the Messenger and select Rooms & machines, then AttackBox or split screen. A screenshot of what you see helps us a lot.
What is the Persistent AttackBox?
The Persistent AttackBox is available on the MAX Plan. It always resumes from where you left off, so you can save your files and install your own apps to personalise your AttackBox.
To enable it, go to your access settings and switch the toggle on.
Important: Difference between AttackBox and attached machines
To solve some tasks, you'll need to start machines that are attached to that task. This target machine is the system you're attacking, not your AttackBox, and it has a different IP address. Both usually sit on the same network, which lets your AttackBox reach the target.
In some rooms, you may not need the AttackBox at all. For example, a room teaching a specific tool may give you an in-browser VM with that tool already installed. This will be clearly mentioned in the task.
Important: The AttackBox stays the same across rooms (unless it's updated), while the target VMs change with each room or task. If you connected via SSH in one room, don't assume you'll do the same in the next.
Important: The AttackBox stays the same across rooms (unless it is updated), while the target VMs will change based on the room or task. So, if you connected via SSH in one room, do not assume you will do the same in the next as each room may require different steps or tools.
Can I Copy And Paste Into The AttackBox?
Use the clipboard icon at the top left of the AttackBox screen to copy and paste between your own machine and the AttackBox:
Click once to copy text into the remote clipboard
Click twice to open a window where you can view and edit the remote clipboard
For more options, like saving screenshots or sending Ctrl+Alt+Delete, use the dropdown menu at the top right.
TryHackMe