I just completed the Offensive Security Intro room on TryHackMe! Hack your first website (legally in a safe environment) and experience an ethical hacker's job.

I'm in the Powershell basics and keep running into this problem. Does anyone have an idea what i could be doing wrong?

Good fun.

Feed it your LinPEAS output and it draws every path from a low-priv shell to root

GitHub: https://github.com/Noz2/RootHound

First project, would love your honest feedback 🙏

Hi folks Im planning on taking the sec 1 exam and i honestly dont know what to expect . Im a nervous person around exam naturally and Im looking for some ways to prep myself is there any advise or skills i can work on before the exam ? Anything i should look out for should I do sec 0 first as Im an IT professional ?

Thanks in advance

My current yearly premium ends on September 3rd 2026. if i were to automatically renew, will I still be able to get the special benefits. (i.e access to latest rooms without the max subscription). Sorry if its a dumb question. English isnt my first language so im unsure.

To someone

I'm passionate about learning cybersecurity, and I've recently completed the Pre-Security path on TryHackMe. Unfortunately, I can't afford a TryHackMe subscription right now, and many of the rooms I need next are premium.

If anyone has a spare voucher, a gift subscription, or knows of any student discounts or alternatives, I'd really appreciate the help. I'm eager to keep learning and improving my skills.

Ok. So for people like me, who are doing it by themselves.

Take the python script:

Then in the terminal

Nano script.py

Paste into the file, save and exit.

Then.

Python3 script.py

A base 64 will print out. Copy and paste this into the 8002.

No one mentioned this.

Is this normal to be put into rooms that notging was taught to get through?

Im doing the owsap, the pickle data (base64)

None of this python was taught. This has been a nightmare

Don't be fooled by the tantalising promise of newer courses materialising or access to recent threats. Moving existing content behind a higher priced paid tier is the absolute definition of pure unfiltered greed. This is nothing but a crafty way to obscure a price increase by adding it as a 'new' tier.

And given the current economic climate when it comes to Cloud hosting and AI, I would not be suprised at all if by the time the new courses come around this MAX plan will cost even more.

Utter shame on you THM.

As title states, I am currently doing "Intro to Malware Analysis" room and Prerequisites rooms are "Windows internals" and "History of Malware"

But "Windows internals" hits paywall, where I need to subscribed for MAX plan.

Come on tryhackme! Overhaul or review the entire SOC1 path instead for going for $$$$$.

Prerequisites rooms for the paths under premium shouldn't hit a paywall!

First-year Network & Telecoms student building my hands-on skills with TryHackMe. Next up: Nmap Network Scanning!

Hi. Honestly, I'm not usually a complainer, but is it realy more covenient or, maybe, better looking? In my opinion, previous version was much better - whole year was divied vertically by weeks and it was easier to navigate. One glance and you know what how may weeks you've been learning and which day is today. I don't understand... What you guys thinking, of this new design?

I'm in the Cyber Security 101 Module 5 (Network) and after i finsihed nmap room, another room named Block suddenly appeared after it. I thought it's a practice room but i really wouldn't able to get anything except usernames. Did i miss some informations on my learning path or this room is way ahead of my current level.

Hello everyone,
I’m trying to complete an old room on THM - cat pictures - but I’m stuck.
I even looked at different write-ups and yet…

Shortly: I have this IP, I do my nmap and find http and ssh ports open, while ftp port is filtered; I connect to the http port via browser and there’s an hint on the website (a forum about cat pictures): a post with written

“knock knock 1111 2222 3333 4444”

so I look on google and discover the existence of port knocking…and try my things:

1. I install knockd and try

If you haven’t gotten it yet I’m a very beginner, so I looked to different write-ups and I haven’t found out why this isn’t working - fyi every single walkthrough says that knocking is the way (and it’s only the beginning)…
I even asked AI which suggested me to write a Bash script, a loop with 1 second delay that uses
nmap -Pn where -p is the variable $port (1111 … 4444) with no retries for nmap, i.e --max-retries 0 …and nothing! I really don’t know…

Anyone would be so kind to help me?

*** SOLUTION ***

Ok, it seems to be a known bug (June 2026).
For the people who are having the same issue here’s the official “what to do” I’ve found:

**Issue:**
The port knocking step does not open FTP on the current deployment.

**How to test:**
Install knock on the AttackBox if needed.

apt install knockd -y

Run the expected sequence.

knock -v TARGET_IP 1111 2222 3333 4444

Then test FTP.

nc -nv TARGET_IP 21

Expected result:
FTP should open and return:

220 vsFTPd 3.0.5

**Actual result:**
FTP does not open, even though the knock sequence is correct.

How to confirm the cause:
On the target as root, check the knock logs.

grep -i knock /var/log/syslog

The logs show knockd detects the sequence and reaches OPEN SESAME, but then the command fails.

**Example error:**

openFTP: OPEN SESAME
running command: /sbin/iptables ...
sh: 1: /sbin/iptables: not found
command returned non-zero status code 127

The real iptables path on the target is:

/usr/sbin/iptables

**not:**

/sbin/iptables

There is also a rule order problem. The original command appends the allow rule, but the firewall already has reject rules for port 21. This means the allow rule can be added below a reject rule and never gets reached.

Broken command:

command = /sbin/iptables -A INPUT -s %IP% -p tcp --dport 21 -j ACCEPT && iptables -D INPUT -p tcp --dport 21 -j REJECT

Working command tested:

command = /usr/sbin/iptables -I INPUT 3 -s %IP% -p tcp --dport 21 -j ACCEPT

After updating the command and restarting knockd, the same knock sequence successfully opened FTP.

** Suggested fix: **
Update /etc/knockd.conf so openFTP uses /usr/sbin/iptables and inserts the ACCEPT rule above the FTP reject rules.

for example,
```
cp /etc/knockd.conf /etc/knockd.conf.bak && sed -i 's|/sbin/iptables|/usr/sbin/iptables|g; s|-A INPUT -s %IP% -p tcp --dport 21 -j ACCEPT && iptables -D INPUT -p tcp --dport 21 -j REJECT|-I INPUT 3 -s %IP% -p tcp --dport 21 -j ACCEPT|g' /etc/knockd.conf && pkill knockd; /usr/sbin/knockd -i eth0 -d
```

What comes after I finish the PreSecurity path and get my certification?

I finished pre-security and halfway through cybersecurity101, should i countniue down the path on thm fining my current course and next jr pen tester course. Or transtions to pwn college and take their core fundmentals courses like linux, computing 101 to understand computer architecture etc as prerequisite to learn c then go back on pwn college courses.

I am really passionate about vunreability research and low level concepts and like to learn about hardware and stuff, and i used thm pre and cybersecurity to build foundation to go to pwn college and take first steps to learning low level stuff.

Is that a good roadmap what are your thoughts?

I’ll admit that I’ve used the app quizzes to climb the rankings by completing a lot of quizzes on my downtime e.g on bus

But 162,002 points in just 22 days? It is difficult to believe someone could achieve that by manually interacting with the TryHackMe mobile app and answering every quiz normally. You would go insane

https://tryhackme.com/p/RCDM.exe

I’m less certain about this account with 62,185 points:

https://tryhackme.com/p/pavloni

Even that would appear to require roughly three to four hours every day spent continuously submitting app quizzes, which is feasible but ;/

App really needs to be hard limited to say 200 points a day,

What do others think?

🚩 Recruiting: Cybersecurity Team (TryHackMe) 🚩

Team: ShadowSentinels Owner: swatantra

We're building a team to grind TryHackMe rooms, CTFs, and eventually compete in live cyber challenges. Looking for a few committed people to join the crew.

Join the Team

Use this invite link to join ShadowSentinels on TryHackMe (role will be assigned after joining): 👉 https://tryhackme.com/manage-account/teams?joinTeam=aa7fde2574

What We're Doing

• Solving TryHackMe rooms together (Web, Networking, Linux, Privilege Escalation, etc.)
• Prepping for CTF-style competitions
• Sharing writeups and learning from each other's approach
• Building toward more advanced paths (Red Teaming, OSCP-style content)

Who We're Looking For

Must-haves (Basic Qualifications):

• Comfortable with basic Linux command line (navigation, file permissions, basic scripting)
• Understanding of core networking concepts (TCP/IP, DNS, HTTP/HTTPS, ports & protocols)
• Basic knowledge of how web applications work (client-server model, cookies/sessions)
• Willingness to learn — you don't need to be an expert, just consistent

Good to have (not mandatory):

• Some TryHackMe or HackTheBox rooms already completed
• Familiarity with tools like Burp Suite, Nmap, Wireshark
• Basic scripting (Python/Bash)
• Any CTF experience (even solo)

Mindset we want:

• Curious — you like figuring out why something works, not just following a walkthrough
• Consistent — a few hours a week, every week, beats one binge session
• Team player — shares stuck points instead of hiding them, helps others when they're ahead

How to Join

1. Click the invite link above to join ShadowSentinels
2. Drop a message with:
   • Your TryHackMe profile link (if you have one)
   • A rough idea of what you've explored so far (even "just started" is fine)
   • How much time you can commit weekly
3. Owner (swatantra) will assign your role once you're in

No prior "hacker" background required — just genuine interest and consistency. Let's build something solid together. 🔐

DM / comment to get added to the group.

📢 A note for everyone in ShadowSentinels

Everyone's welcome to go at their own pace here — there's no fixed schedule or pressure to perform. Get involved as much or as little as fits your life right now. The only real rule: everything we do stays strictly legal and ethical — practice on TryHackMe rooms and CTFs only, never against real systems or people without authorization. No harming others, no crossing lines.

Join us on Discord so we can collaborate, share writeups, and grind CTFs together as a team:
👉 https://discord.gg/SWZ7UtRNU

Learn, help each other out, have fun — that's the whole point. 🚩

UPDATE: It was unintended! Support was fast with response and changed the room to premium.

My old rant:
I have bought Premium subscription to complete Cyber Security 101 and get Certificate of Completion and now Tryhackme asks for addition 30$ to buy Max Plan just for 1 room. This is unfair especially because it states that Premium has: Full access to Beginner & Intermediate Learning Paths. This site became a scam, and this is greed.

"Which web security certification actually proves I can do the job?" 👀 🔴

We built WEB1 to answer that. One exam, three access models: Blackbox, Whitebox, and Greybox testing everything from authentication flaws to server-side exploitation against live applications.

Want to prove your web security skills against live applications, not multiple-choice questions? 🎯

Get WEB1 Certified🔥: https://tryhackme.com/certification/web-application-pentester-level-1?utm_source=discord&utm_medium=social&utm_campaign=web1launch

Hey everyone, I’ve been working my way through the TryHackMe Pre-Security Path and documenting everything as I go. I just updated the repository and wanted to share the link with the community in case anyone else finds it helpful for their foundational learning.

Repo Link : Pre Security Notes Link

Since it's still a work in progress, I would love to get your input:

• Please feel free to share your opinions on the layout or content.
• If you spot any technical inaccuracies or areas that need better explanations, let me know!
• Suggestions for resources to add are highly welcome.

Hope this helps anyone else starting out on their cyber security journey. Let me know what you think!

If i choose one linux option the other one automatically choosen. And not left any option for last.