TryHackMe

Rooms, paths and standalone attack writeups

🏫

TryHackMe

Guided learning rooms, red team attack paths, advanced standalone rooms, and SOC analyst training.

Rank: Top 1% 120+ Rooms 15+ Badges

🔴 Red Team Path Rooms

🐧

RootMe

10.10.x.x
TryHackMe Challenge - Initial access vector & privilege escalation details
EasyWriteup →
🐧

Bounty Hacker

10.10.x.x
TryHackMe Challenge - Initial access vector & privilege escalation details
EasyWriteup →
🐧

Mr Robot CTF

10.10.x.x
TryHackMe Challenge - Initial access vector & privilege escalation details
EasyWriteup →
🐧

Creative

10.10.x.x
TryHackMe Challenge - Initial access vector & privilege escalation details
EasyWriteup →
🔴

Red Team Fundamentals

Path — Room 1
Red team structure · threat intelligence · OPSEC · C2 fundamentals
MediumNotes →
🔴

Red Team Engagements

Path — Room 2
Scoping, rules of engagement, mission planning, reporting templates
MediumNotes →
🔴

Compromising Active Directory

Standalone
Kerberoasting · AS-REP · LDAP enum · BloodHound · lateral movement
HardNotes →
🔴

Holo Network

Network Lab
Full red team op: initial access → C2 → pivoting → AD domain takeover
HardNotes →
🔴

Throwback Network

Network Lab
Multi-host corporate simulation · phishing → internal pivot → exfil
HardNotes →

🌐 Web Hacking Rooms

🌐

OWASP Top 10 (2021)

Free
All 10 categories with hands-on labs — Broken Access, SSRF, SSTI, etc.
EasyNotes →
🌐

SQL Injection Lab

Standalone
Union-based · blind boolean · time-based · SQLMap usage
MediumNotes →
🌐

Advent of Cyber (Web)

Annual
XSS · RCE via file upload · JWT manipulation · IDOR · SSRF
EasyNotes →
🌐

Attacking ICS Plant

Industrial
SCADA web panel exploitation · Modbus protocol abuse · HMI takeover
HardNotes →

🏢 Active Directory Rooms

🏢

Active Directory Basics

Free
LDAP structure · users/groups/GPOs · authentication flows · trusts
EasyNotes →
🏢

Attacktive Directory

10.10.x.x
AS-REP Roasting → Kerberoasting → Secretsdump → pass-the-hash
MediumNotes →
🏢

Post-Exploitation Basics

Path
BloodHound · token impersonation · Golden/Silver tickets · persistence
HardNotes →

🔬 Forensics & OSINT Rooms

🔬

Volatility

Memory
Memory forensics with Volatility 3 — processes, network, credentials
MediumNotes →
🔬

Autopsy

Disk
Disk image analysis · deleted file recovery · timeline analysis · artifact carving
MediumNotes →
🕵️

OhSINT

OSINT
Image EXIF metadata → GPS coords → social media → email → password
EasyNotes →
🕵️

Searchlight OSINT

OSINT
Advanced OSINT: domain footprinting · social graph analysis · geolocation
MediumNotes →