TheStickerShop Walkthrough
Today we are solving another easy-rated TryHackMe machine called TheStickerShop.
Tagged “Thm”
189 entries tagged “Thm”. Browse all tags
All entries
Oh My Webserver Walkthrough
Today we are solving another Linux-based TryHackMe machine called Oh My WebServer. This machine focuses on exploiting vulnerable web services, container breakout-style enumeration,
Investigation with Splunk Walkthrough
Today we are investigating another TryHackMe Defensive Security challenge where we are provided with Windows event logs that have already been ingested into Splunk.
Carnage Walkthrough
Today we are solving another Defensive Security challenge from TryHackMe called Carnage. In this challenge we are provided with a packet capture (PCAP) file from a real-world malwa
BreakOutTheCage Walkthrough
Today we are solving another TryHackMe machine called Break Out The Cage, a Linux-based challenge inspired by Nicolas Cage. The machine contains multiple stages including anonymous
Super Spammr Walkthrough
The infamous cosmic hacker Super-spam has returned. Originating from the planet Alpha Solaris IV, Super-spam's mission is to eliminate Linux systems across the galaxy and replace t
Bypass Disable Functions Walkthrough
This challenge focuses on bypassing PHP security restrictions, specifically the disablefunctions directive commonly configured in hardened PHP environments.
Tech Supp0rt Walkthrough
Today we are solving another TryHackMe machine named TechSupport.
REvil Walkthrough
One of the employees at Lockman Group reported that all of his files had suddenly been renamed with an unfamiliar extension. After a quick inspection, the IT department suspected r
NewHireOldArtifacts Walkthrough
We are working as a SOC Analyst for an MSSP called TryNotHackMe.
Jump Walkthrough
We are presented with a Linux machine that heavily relies on automation pipelines.
Develpy Walkthrough
Today we are solving another TryHackMe machine named DevelPy.
Corridor Walkthrough
Today we solved a very easy TryHackMe challenge focused on IDOR (Insecure Direct Object Reference).
Conti Walkthrough
Today we are investigating a ransomware incident involving Conti Ransomware, one of the most notorious Ransomware-as-a-Service (RaaS) operations.
Friday Overtime Walkthrough
It is a Friday evening at PandaProbe Intelligence when SwiftSpend Finance submits an urgent threat intelligence request.
Expose Walkthrough
The FTP server contained no useful files.
IronShade Walkthrough
Based on threat intelligence reports, an APT group known as IronShade has been actively targeting Linux servers across the region.
BluePrint Walkthrough
As usual, we begin with a full port scan to identify exposed services.
Operation Coldstart Walkthrough
Operation ColdStart is an easy Linux-based machine where our objective is to compromise the target, gain user access, and ultimately escalate privileges to root.
CacheMeOutside Challenge Walkthrough
Years after leaving the hacking scene, a retired hacker has unintentionally left traces of his identity scattered across the public internet.
Itsybitsy Walkthrough
During routine SOC monitoring, Analyst John observed an IDS alert indicating potential Command and Control (C2) communication originating from a user named Browne in the HR departm
IDE Walkthrough
Additional HTTP service on a high port.
Operation Promotion Walkthrough
You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a public-facing portal.
Light Walkthrough
The room provides the following information:.
Whiterose Walkthrough
Only SSH and HTTP are exposed.
Monday Monitor Walkthrough
Swiftspend Finance, a fintech company, has recently deployed Wazuh and Sysmon to strengthen endpoint monitoring and improve threat detection capabilities.
Glitch Walkthrough
At this point, web enumeration becomes the primary attack path.
Dreaming Walkthrough
Dreaming is a Linux-based machine that focuses on web enumeration, CMS assessment, credential discovery, database abuse, and privilege escalation through insecure permissions and s
Madness Walkthrough
Madness - an easy TryHackMe walkthrough with full steps and screenshots.
Phishing – Merry Clickmas Walkthrough
Goal: Run a phishing page, send a convincing email with SET, harvest creds, then check if those creds are reused on the email portal to find the toys count.
Linux CLI Shells Bells Walkthrough
In this challenge, we investigate suspicious activity on tbfc-web01, a Linux server responsible for processing Christmas wishlists. McSkidy, who left behind a cryptic trail of clue
Input Manipulation & Prompt Injection Walkthrough
This room introduces fundamental concepts in Large Language Model (LLM) security, specifically focusing on input manipulation and prompt injection attacks. Unlike traditional softw
TryHackMe Living Off the Land Attacks Writeup
Living Off the Land (LoL) attacks represent a sophisticated attack methodology where adversaries leverage pre-installed, legitimate Windows utilities instead of deploying custom ma
Elevating Movement Walkthrough
The Elevating Movement room simulates a post-compromise forensic investigation at DeceptiTech following a network collapse. This scenario focuses on the second attack stage where a
Sequence Walkthrough
This writeup mirrors exactly what was done, showing each command, page interaction, and how the tester progressed from a visitor to root. Follow along to see how each flag was obta
Linux Threat Detection 1 Walkthrough
Welcome to an in‑depth walkthrough of TryHackMe's Linux Threat Detection 1 room. This document mirrors the hands‑on investigation steps used to detect Linux attacks via log analysi
Intro to Credential Harvesting Walkthrough
When I began this room, I reminded myself of one important truth:.
Linux Logging for SOC Walkthrough
Linux is everywhere---from traditional servers to cloud-native.
Chaining Vulnerabilities Walkthrough
In the bustling digital bazaar of Valoria, every merchant’s stall is a web application, and every traveler’s purse is a user account. Few notice the tiny cracks between wooden boar
SOC Role in Blue Team Walkthrough
Goal: Learn where the SOC sits in an organization, what Blue Team does, how SOC roles are structured, and how a SOC L1 analyst can advance their career. The room mixes conceptual k
Invite Only Walkthrough
This room is designed to simulate the kind of real-world investigation SOC teams conduct when faced with potential intrusions. It combines file analysis, malware family identificat
AppSec IR Walkthrough
Welcome to the thrilling crossover of Application Security (AppSec) and Incident Response (IR)! In this room, we explored how attackers target applications, how security teams resp
Web Security Essentials Walkthrough
Web Security Essentials is a foundational TryHackMe room that introduces cybersecurity professionals to the multi-layered defense approach required for modern web application secur
Voyage Walkthrough
In this epic cyber-voyage, we’ll exploit Joomla!’s gossiping API, sneak into a container using a stolen map (aka credentials), conjure dark magic with Python pickle, and finally un
Session Forensics Walkthrough
The TryFlufMe (TFM) team called me in. Something wasn’t right.
Security Footage Walkthrough
The Security Footage challenge involves analyzing a network capture file (.pcap) to recover a lost security camera feed. The goal is to extract the video from the packet capture an
Pentesting Fundamentals Walkthrough
This introductory room teaches the foundational concepts and ethical framework behind penetration testing (“pentesting”). You’ll learn what pentesting is, the importance of ethics
Offensive Security Intro Walkthrough
In this beginner-friendly room, you're introduced to Offensive Security and get hands-on experience hacking a simulated web application—FakeBank—using the directory brute-forcing t
Malware Classification Walkthrough
Once upon a time in SOC land, I was handed the keys to a dashboard glowing red with alerts. My mission? Classify malware like a true cyber-detective and prove my worth. Spoiler: it
Junior Security Analyst Intro Walkthrough
Focus: Role overview, triage mindset, quick alert investigation, escalation, containment.
Introduction to EDR Walkthrough
Endpoint Detection and Response (EDR) extends beyond traditional antivirus by providing continuous endpoint telemetry, behavioral and anomaly detection, IOC-based matching, ATT&CK
File and Hash Threat Intel Walkthrough
File and Hash Threat Intel is a beginner-friendly blue team challenge on TryHackMe designed for SOC analysts and cybersecurity learners. This room teaches practical skills in malwa
Extract Walkthrough
The Extract room is TryHackMe's premium hard-level challenge that transforms you from a casual web surfer into a digital archaeologist, extracting secrets from digital libraries li
Defensive Security Intro Walkthrough
This room introduces the fundamentals of Defensive Security, also called Blue Team operations, focusing on safeguarding and monitoring networks and systems. You'll explore concepts
Cyborg Walkthrough
Directly fetch the Squid password file once discovered.
Crypto Failures Walkthrough
sudo apt install -y php-cli php-curl curl.
Contrabando Walkthrough
This ensures that requests to contrabando.thm resolve correctly.
AI ML Security Threats Walkthrough
Learn foundational concepts of Artificial Intelligence and Machine Learning.
Year of the Rabbit Walkthrough
and a css file...that we might as well check and oh...
Wonderland Walkthrough
weirdest book I ever read as a kid and even more as an adult.
WebAppSec101 Walkthrough
It is guided so We wont talk much.
Vulnversity Walkthrough
Welcome to your first lecture! if you wanna graduate from vulnversity you need to know some basics. Take a seat!
The Marketplace Walkthrough
we visit the website (port 80 and 32768 look identical).
The Codcaper Walkthrough
Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause.
Steel Mountain Walkthrough
I have been very busy this year and could not play much but decided to give a shot to.
Sakura room Walkthrough
A cool Osint room, and we love osint.
RootMe Walkthrough
That room is self-explanatory...its a big no sht sherlock.
RickandMorty Walkthrough
My very first ctf in the theme of one of my favorites cartoon.
Reversing Elf Walkthrough
the password is in the "strings" (you know what to do).
Psychobreak Walkthrough
the Evil within...a videogame classic! I like this theme already!
Post exploitation basics Walkthrough
Your machine IP is 10.10.148.206 (yours will differ).
Pokemon Walkthrough
I wanna be the very best...LIKE NO ONE EVER WAS!
Owasp top 10 Walkthrough
If you started to learn web exploitation recently you might have heard about them.
Overpass 3 Walkthrough
We obviously grab the backup files.
OverPass 2 Walkthrough
we are provided with a PCAP file...wireshark read those better.
One Piece Walkthrough
It's been a while I didn't play a CTF on TryHackMe. While searching for a fun room I found one named "One Piece".
Nax Walkthrough
After visiting the website we get a weird page with "elements".
Minotaur's labyrinth Walkthrough
First flag is in ftp .secret folder.
Looking Glass Walkthrough
WTF is all those open ports? This scan took me a bit...
Linux Strength Training Walkthrough
find/grep filesystem enumeration plus John cracking of GPG-encrypted files and hashes harvests reused credentials for lateral movement across users, then unrestricted sudo grants root.
Lian yu Walkthrough
Ha! the author is an arrowverse fan. cool!
LFI Walkthrough
Website and ssh that's a minimmum.
Lazy admin Walkthrough
Welcome to SweetRice - Thank your for install SweetRice as your website management system.
Kiba Walkthrough
Seems like there will be prototype pollution involved?
Kenobi Walkthrough
SMB1 disabled -- no workgroup available.
Intro to PwnTools Walkthrough
stack smashing detected : <unknown> terminated.
Insekube Walkthrough
Now there is some obvious command injection.
Ice Walkthrough
windows machines are less frequent thus my favorites.
Hackernote Walkthrough
A nice room that try to be realistic about web exploitation.
H4Cked Walkthrough
We are usually on the red side, trying to hack machines.
Git happens Walkthrough
we can dump the repo using git tools (dumper).
GamingServer Walkthrough
Heh another ctf in the gaming theme...looks like a RPG.
Gallery Walkthrough
Ok this one was easy so speedrun!
Flatline Walkthrough
The port 8021 got a weird service running.
easyCtf Walkthrough
fuzzing show a simple page with 301 code...we visited and got a simple page made with cms made simple (CMSMS).
Dogcat Walkthrough
gobuster show only a forbidden cats directory (there might be dogs too).
DearQA Walkthrough
This is a binary exploitation challenge with a buffer overflow vulnerabily.
Daily Bugle Walkthrough
I know I may not be ready yet but I want to see how hard things can get irl.
Ctf collection vol1 Walkthrough
Yeah this one is just base 64, please do not make a fool of yourself and just decode it.
Crash Course Pentesting Walkthrough
This is a guided room as it seems so I wont say much here.
Colddbox Walkthrough
Guess the CMS! lol lets check the hidden dir first.
Cicada 3301 Walkthrough
With visual-analyser add a spectrogram layer and get this qr code.
C4Ptur3 Th3 Fl4G Walkthrough
This room says capture the flag but its actually more a challenges room.
Buffer Overflow Prep Walkthrough
Buffer Overflow Prep - an easy TryHackMe walkthrough with full steps and screenshots.
Brooklyn nine nine Walkthrough
Haha a comedy classic. ok ftp first.
Bounty Hacker Walkthrough
Cool a ctf in the theme of cowboy bebop.
Blue Walkthrough
This is actually one of my favorites rooms.
Blog Walkthrough
And because it is wordpress (It could not be more obvious).
Basic Pentesting Walkthrough
It is a guided ctf. A basic introduction to classic pentesting (simplified).
Badbyte Walkthrough
classic go grab those ftp files (note.txt and idrsa).
B3dr0ck Walkthrough
OpenSSL> sclient -connect 10.10.19.11:54321 -cert certificate -key privatekey.
Atlas Walkthrough
they say its an easy windows room for beginners.
All in One Walkthrough
I like the concept of this machine alot. many ways to exploit.
Advent of Cyber 2021 Walkthrough
Oh boy it's christmas soon and tryhackme is bein awesome again!
0Day Walkthrough
Lol so many rabbit holes I fell into...
Day 24 Walkthrough
In this task, you will learn about:.
Day 23 Walkthrough
By finishing today’s task, you will learn about:.
Day 22 Walkthrough
Microservices architecture was adopted by companies like Netflix, which is a perfect example of the hypothetical company discussed above. Their need to scale up services dedicated
Day 21 Walkthrough
Reverse Engineering (RE) is the process of breaking something down to understand its function. In cyber security, reverse engineering is used to analyse how applications (binaries)
Day 20 Walkthrough
Before we dig deeper into Mayor Malware's intentions, we must learn a few essential things about C2 communication. Command and Control (C2) Infrastructure are a set of programs use
Day 19 Walkthrough
Even while penetration testing is becoming increasingly popular, game hacking only makes up a small portion of the larger cyber security field. With its 2023 revenue reaching appro
Day 18 Walkthrough
Artificial Intelligence (AI) is all the hype nowadays. Humans have been making machines to make their lives easier for a long time now. However, most machines have been mechanical
Day 17 Walkthrough
The two datasets are as follows:.
Day 16 Walkthrough
Azure is a CSP (Cloud Service Provider), and CSPs (others include Google Cloud and AWS) provide computing resources such as computing power on demand in a highly scalable fashion.
Day 15 Walkthrough
Before diving into Active Directory, let us understand how network infrastructures can be mapped out and ensure that access to resources is well managed. This is typically done thr
Day 14 Walkthrough
In today's task you will learn about:.
Day 13 Walkthrough
WebSockets let your browser and the server keep a constant line of communication open. Unlike the old-school method of asking for something, getting a response, and then hanging up
Day 12 Walkthrough
Conventional web applications are relatively easy to understand, identify, and exploit. If there is an issue in the code of the web application, we can force the web application to
Day 11 Walkthrough
Wi-Fi is the technology that connects our devices to the global network, the Internet.
Day 10 Walkthrough
Security is as strong as the weakest link. Many would argue that humans are the weakest link in the security chain. Is it easier to exploit a patched system behind a firewall or to
Day 9 Walkthrough
Governance, Risk, and Compliance (GRC) plays a crucial role in any organisation to ensure that their security practices align with their personal, regulatory, and legal obligations
Day 8 Walkthrough
Let's learn how to generate a shellcode to see what it looks like. To do this, we will use a tool called msfvenom to get a reverse shell.
Upload Vulns Walkthrough
To tackle file upload challenges, begin by examining the website to identify its technology and potential attack vectors (e.g. upload pages), using tools like Wappalyzer or Burpsui
Startup Walkthrough
Get a Reverse shell by uploading a PHP file via FTP and run it through the web page.
Retro Walkthrough
Use the credentials to login to the target via the open RDP Port 3389.
Juiceshop Walkthrough
K33p5 y0ur ju1cy 5plu773r 70 y0ur53lf!
Introduction To Defensive Security Walkthrough
A new field of forensics (the science of crime investigations) called digital forensics was born to examine crimes involving the usage of digital technologies like:.
Cyber Threat Intelligence Walkthrough
Cyber Threat Intelligence - an easy TryHackMe walkthrough with full steps and screenshots.
Chill Hack Walkthrough
Input a command to get a reverse shell.
Bolt Walkthrough
Once logged in, the Bolt version is at the bottom of the page.
Blaster Walkthrough
Run hhupd.exe to exploit the privilege escalation vulnerability present in the Windows Certificate Dialog box, a bug in the UAC mechanism.
Shadow Phishing 2 Walkthrough
Similar to the previous Phishing challenges, but with the addition of a good AntiVirus which can detect the msfvenom exe payload.
Void Execution Walkthrough
Going through the files, we understand that the binary reads shellcode from the user and executes it.
Serverless Walkthrough
Firstly, let's configure our AWS CLI.
Old Authentication Walkthrough
Same as before, we can first get the assembly code from the executable. (Or use Ghidra).
Sequel Dump Walkthrough
Going through the given .pcapng file, we can see that they have some sort of Blind SQL injection and the requests are URL encoded.
Hide and Seek Walkthrough
Firstly, we can assume ROOT since we can do sudo su.
Shadow Phishing Walkthrough
This one is similar to the Ghost Phishing Challenge, but this time we have to attach a Windows Executable.
Royal Router Walkthrough
We find that there is a D-link Router. We can try logging into the admin portal.
PassCode Walkthrough
Heading over to the site, we can view the contract's source code.
Infinity Shell Walkthrough
Since the challenge talks about a web application vulnerability, we can directly head to the website's directory to look for suspicious files.
Heist Walkthrough
Once again, we visit the site and view the Solidity source code.
Ghost Phishing Walkthrough
Opening the link and logging in with the given credentials, we see that there's an email asking for a "Detailed Report".
Flag Vault Walkthrough
Analyzing the given code, we see that the login() function calls the printflag() function upon successful login.
Evil GPT Walkthrough
This challenge shows an "AI Command Executor" which modifies the user input and executes the commands.
Encrypted Data Walkthrough
Then we can check the given S3 bucket. It contains a file, which we can download and view.
Dump Walkthrough
We are provided with a Local Security Authority Subsystem Service (LSASS) dump, which contains all the hashes of all the users.
Order Walkthrough
It's been given that the encryption is done using a repeating-key XOR cipher and that the message always starts with "ORDER".
Stolen Mount Walkthrough
We have a .pcapng which shows us the packets transmitted when the NFS server was infiltrated.
Compute Magic Walkthrough
First, we check the file type.
Cryptosystem Walkthrough
The given code contains the public key components n and e and the RSA-encrypted ciphertext c.
Cipher's Secret Message Walkthrough
Going throught the code, we can see that it shifts each character of the plaintext by its position in the message.
Day 7 Walkthrough
Care4Wares' infrastructure runs in the cloud, so they chose AWS as their Cloud Service Provider (CSP). Instead of their workloads running on physical machines on-premises, they run
Day 6 Walkthrough
A sandbox is an isolated environment where (malicious) code is executed without affecting anything outside the system. Often, multiple tools are installed to monitor, record, and a
Day 5 Walkthrough
XML is a commonly used method to transport and store data in a structured format that humans and machines can easily understand. Consider a scenario where two computers need to com
Day 4 Walkthrough
While it might be the utopian dream of every blue teamer, we will rarely be able to detect every attack or step in an attack kill chain. There are gaps in detection. But worry not!
set up SOC lab Walkthrough
In this room, you will be handed over two VMs, Linux and Windows, and your task will be to install Splunk on both machines.
Day 3 Walkthrough
In this section of the lesson, we will take a look at what tools and knowledge is required for the blue segment, that is the investigation of the attack itself using tools which en
Day 2 Walkthrough
In a SOC, events from different devices are sent to the SIEM, which is the single source of truth where all the information and events are aggregated. Certain rules are defined to
Day 1 Walkthrough
The website we are investigating is a YouTube to MP3 converter currently being shared amongst the organizers of SOC-mas. You've decided to dig deeper after hearing some concerning
Cyberlens Walkthrough
RustScan: Where scanning meets swagging. 😎.
Bugged Walkthrough
Let's do a little bit more of a vuln scan to view more information on that host machine.
Hacking with Powershell Walkthrough
Powershell is the Windows Scripting Language and shell environment built using the .NET framework. Most Powershell commands, called cmdlets, are written in .NET. Unlike other scrip
Lesson Learned? Walkthrough
From the enumeration gathered I found two services running and two different protocols.
Res Walkthrough
Scan the machine, how many ports are open?
Brute It Walkthrough
http on port 80, running on Apache httpd 2.4.29.
Valley Walkthrough
Please stop leaving notes randomly on the website.
Opacity Walkthrough
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn.
Agent sudo Walkthrough
How you redirect yourself to a secret page.
Mr Robot Walkthrough
Interesting ports found to be open:.
Wgel CTF Walkthrough
Interesting ports found to be open:.
Crash Course Pentesting: Final Exam Walkthrough
boy...that meme feels so old now.
Ignite Walkthrough
Interesting ports found to be open:.
Picklerick Walkthrough
Interesting ports found to be open:.
Ohsint Walkthrough
Interesting ports found to be open:.
Crack the hash Walkthrough
This is not a Capture The Flag. It's a room that has several hashes to be cracked. Description of the room:.
Overpass Walkthrough
Interesting ports found to be open:.
Inclusion Walkthrough
Interesting ports found to be open:.
Cowboyhacker Walkthrough
Interesting ports found to be open:.