https://solvere.app/ctfs/thm/ Recent content in TryHackMe on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Sat, 20 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/ctfs/thm/ https://solvere.app/ctfs/thm/thestickershop/ Sat, 20 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/thestickershop/ Today we are solving another easy-rated TryHackMe machine called TheStickerShop. https://solvere.app/ctfs/thm/oh-my-webserver/ Fri, 19 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/oh-my-webserver/ Today we are solving another Linux-based TryHackMe machine called Oh My WebServer. This machine focuses on exploiting vulnerable web services, container breakout-style enumeration, https://solvere.app/ctfs/thm/investigation-with-splunk/ Fri, 19 Jun 2026 00:00:00 +0000 naval0505 thmforensicspowershellpersistencephp https://solvere.app/ctfs/thm/investigation-with-splunk/ Today we are investigating another TryHackMe Defensive Security challenge where we are provided with Windows event logs that have already been ingested into Splunk. https://solvere.app/ctfs/thm/carnage/ Thu, 18 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/carnage/ Today we are solving another Defensive Security challenge from TryHackMe called Carnage. In this challenge we are provided with a packet capture (PCAP) file from a real-world malwa https://solvere.app/ctfs/thm/breakoutthecage/ Thu, 18 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/breakoutthecage/ Today we are solving another TryHackMe machine called Break Out The Cage, a Linux-based challenge inspired by Nicolas Cage. The machine contains multiple stages including anonymous https://solvere.app/ctfs/thm/super-spammr/ Wed, 17 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/super-spammr/ The infamous cosmic hacker Super-spam has returned. Originating from the planet Alpha Solaris IV, Super-spam's mission is to eliminate Linux systems across the galaxy and replace t https://solvere.app/ctfs/thm/bypass-disable-functions/ Wed, 17 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/bypass-disable-functions/ This challenge focuses on bypassing PHP security restrictions, specifically the disablefunctions directive commonly configured in hardened PHP environments. https://solvere.app/ctfs/thm/tech-supp0rt/ Tue, 16 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/tech-supp0rt/ Today we are solving another TryHackMe machine named TechSupport. https://solvere.app/ctfs/thm/revil/ Tue, 16 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/revil/ One of the employees at Lockman Group reported that all of his files had suddenly been renamed with an unfamiliar extension. After a quick inspection, the IT department suspected r https://solvere.app/ctfs/thm/newhireoldartifacts/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/newhireoldartifacts/ We are working as a SOC Analyst for an MSSP called TryNotHackMe. https://solvere.app/ctfs/thm/jump/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/jump/ We are presented with a Linux machine that heavily relies on automation pipelines. https://solvere.app/ctfs/thm/develpy/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/develpy/ Today we are solving another TryHackMe machine named DevelPy. https://solvere.app/ctfs/thm/corridor/ Sun, 14 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/corridor/ Today we solved a very easy TryHackMe challenge focused on IDOR (Insecure Direct Object Reference). https://solvere.app/ctfs/thm/conti/ Sun, 14 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/conti/ Today we are investigating a ransomware incident involving Conti Ransomware, one of the most notorious Ransomware-as-a-Service (RaaS) operations. https://solvere.app/ctfs/thm/friday-overtime/ Sat, 13 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/friday-overtime/ It is a Friday evening at PandaProbe Intelligence when SwiftSpend Finance submits an urgent threat intelligence request. https://solvere.app/ctfs/thm/expose/ Sat, 13 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/expose/ The FTP server contained no useful files. https://solvere.app/ctfs/thm/ironshade/ Fri, 12 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/ironshade/ Based on threat intelligence reports, an APT group known as IronShade has been actively targeting Linux servers across the region. https://solvere.app/ctfs/thm/blueprint/ Fri, 12 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/blueprint/ As usual, we begin with a full port scan to identify exposed services. https://solvere.app/ctfs/thm/operation-coldstart/ Thu, 11 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/operation-coldstart/ Operation ColdStart is an easy Linux-based machine where our objective is to compromise the target, gain user access, and ultimately escalate privileges to root. https://solvere.app/ctfs/thm/cachemeoutside-challenge/ Thu, 11 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/cachemeoutside-challenge/ Years after leaving the hacking scene, a retired hacker has unintentionally left traces of his identity scattered across the public internet. https://solvere.app/ctfs/thm/itsybitsy/ Wed, 10 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/itsybitsy/ During routine SOC monitoring, Analyst John observed an IDS alert indicating potential Command and Control (C2) communication originating from a user named Browne in the HR departm https://solvere.app/ctfs/thm/ide/ Wed, 10 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/ide/ Additional HTTP service on a high port. https://solvere.app/ctfs/thm/operation-promotion/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thmwebcommand-injectionprivilege-escalationrcereverse-shellsqliapacheenum4linux https://solvere.app/ctfs/thm/operation-promotion/ You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a public-facing portal. https://solvere.app/ctfs/thm/light/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/light/ The room provides the following information:. https://solvere.app/ctfs/thm/whiterose/ Mon, 08 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/whiterose/ Only SSH and HTTP are exposed. https://solvere.app/ctfs/thm/monday-monitor/ Mon, 08 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/monday-monitor/ Swiftspend Finance, a fintech company, has recently deployed Wazuh and Sysmon to strengthen endpoint monitoring and improve threat detection capabilities. https://solvere.app/ctfs/thm/glitch/ Sun, 07 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/glitch/ At this point, web enumeration becomes the primary attack path. https://solvere.app/ctfs/thm/dreaming/ Sat, 06 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/dreaming/ Dreaming is a Linux-based machine that focuses on web enumeration, CMS assessment, credential discovery, database abuse, and privilege escalation through insecure permissions and s https://solvere.app/ctfs/thm/madness/ Sun, 28 Dec 2025 00:00:00 +0000 zer0ne-hub thm https://solvere.app/ctfs/thm/madness/ Madness - an easy TryHackMe walkthrough with full steps and screenshots. https://solvere.app/ctfs/thm/phishing-merry-clickmas/ Tue, 02 Dec 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/phishing-merry-clickmas/ Goal: Run a phishing page, send a convincing email with SET, harvest creds, then check if those creds are reused on the email portal to find the toys count. https://solvere.app/ctfs/thm/linux-cli-shells-bells/ Tue, 02 Dec 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/linux-cli-shells-bells/ In this challenge, we investigate suspicious activity on tbfc-web01, a Linux server responsible for processing Christmas wishlists. McSkidy, who left behind a cryptic trail of clue https://solvere.app/ctfs/thm/input-manipulation-prompt-injection/ Thu, 13 Nov 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/input-manipulation-prompt-injection/ This room introduces fundamental concepts in Large Language Model (LLM) security, specifically focusing on input manipulation and prompt injection attacks. Unlike traditional softw https://solvere.app/ctfs/thm/tryhackme-living-off-the-land-attacks-writeup/ Sat, 01 Nov 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/tryhackme-living-off-the-land-attacks-writeup/ Living Off the Land (LoL) attacks represent a sophisticated attack methodology where adversaries leverage pre-installed, legitimate Windows utilities instead of deploying custom ma https://solvere.app/ctfs/thm/elevating-movement/ Sat, 01 Nov 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/elevating-movement/ The Elevating Movement room simulates a post-compromise forensic investigation at DeceptiTech following a network collapse. This scenario focuses on the second attack stage where a https://solvere.app/ctfs/thm/sequence/ Wed, 24 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/sequence/ This writeup mirrors exactly what was done, showing each command, page interaction, and how the tester progressed from a visitor to root. Follow along to see how each flag was obta https://solvere.app/ctfs/thm/linux-threat-detection-1/ Wed, 24 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/linux-threat-detection-1/ Welcome to an in‑depth walkthrough of TryHackMe's Linux Threat Detection 1 room. This document mirrors the hands‑on investigation steps used to detect Linux attacks via log analysi https://solvere.app/ctfs/thm/intro-to-credential-harvesting/ Wed, 24 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/intro-to-credential-harvesting/ When I began this room, I reminded myself of one important truth:. https://solvere.app/ctfs/thm/linux-logging-for-soc/ Wed, 17 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/linux-logging-for-soc/ Linux is everywhere---from traditional servers to cloud-native. https://solvere.app/ctfs/thm/chaining-vulnerabilities/ Wed, 17 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/chaining-vulnerabilities/ In the bustling digital bazaar of Valoria, every merchant’s stall is a web application, and every traveler’s purse is a user account. Few notice the tiny cracks between wooden boar https://solvere.app/ctfs/thm/soc-role-in-blue-team/ Mon, 15 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/soc-role-in-blue-team/ Goal: Learn where the SOC sits in an organization, what Blue Team does, how SOC roles are structured, and how a SOC L1 analyst can advance their career. The room mixes conceptual k https://solvere.app/ctfs/thm/invite-only/ Mon, 15 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/invite-only/ This room is designed to simulate the kind of real-world investigation SOC teams conduct when faced with potential intrusions. It combines file analysis, malware family identificat https://solvere.app/ctfs/thm/appsec-ir/ Mon, 15 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/appsec-ir/ Welcome to the thrilling crossover of Application Security (AppSec) and Incident Response (IR)! In this room, we explored how attackers target applications, how security teams resp https://solvere.app/ctfs/thm/web-security-essentials/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/web-security-essentials/ Web Security Essentials is a foundational TryHackMe room that introduces cybersecurity professionals to the multi-layered defense approach required for modern web application secur https://solvere.app/ctfs/thm/voyage/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/voyage/ In this epic cyber-voyage, we’ll exploit Joomla!’s gossiping API, sneak into a container using a stolen map (aka credentials), conjure dark magic with Python pickle, and finally un https://solvere.app/ctfs/thm/session-forensics/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/session-forensics/ The TryFlufMe (TFM) team called me in. Something wasn’t right. https://solvere.app/ctfs/thm/security-footage/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/security-footage/ The Security Footage challenge involves analyzing a network capture file (.pcap) to recover a lost security camera feed. The goal is to extract the video from the packet capture an https://solvere.app/ctfs/thm/pentesting-fundamentals/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/pentesting-fundamentals/ This introductory room teaches the foundational concepts and ethical framework behind penetration testing (“pentesting”). You’ll learn what pentesting is, the importance of ethics https://solvere.app/ctfs/thm/offensive-security-intro/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/offensive-security-intro/ In this beginner-friendly room, you're introduced to Offensive Security and get hands-on experience hacking a simulated web application—FakeBank—using the directory brute-forcing t https://solvere.app/ctfs/thm/malware-classification/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thm https://solvere.app/ctfs/thm/malware-classification/ Once upon a time in SOC land, I was handed the keys to a dashboard glowing red with alerts. My mission? Classify malware like a true cyber-detective and prove my worth. Spoiler: it https://solvere.app/ctfs/thm/junior-security-analyst-intro/ Sun, 14 Sep 2025 00:00:00 +0000 Jery0843 thmsudobash https://solvere.app/ctfs/thm/junior-security-analyst-intro/ Focus: Role overview, triage mindset, quick alert investigation, escalation, containment.