Building and Breaking Active Directory Basic

Walkthroughs require MAX now?

Is this the path they want to take?

Just subscribed to TryHackMe 2 weeks ago.

I'm currently learning like 2hrs a day. This really cured my depression ngl. I didn't know I still had this spark that was buried for too long.

I have no academic background in IT or any related to cybersecurity. i just know that I'm kinda techy. I tried to learn straight to hacking when I was in uni just for curiosity but I never went to the rabbit hole cause I graduated and found a job that was so stressful and I forgot I have something I really like.

I am no genius. I still struggle with basics but learning something I really like makes me look forward to it everyday. My goal isn't even to have a job in cybersec. I just wanna learn and understand the system. But if I find a job in the end it's a bonus. But maybe AI will take over.

That's all xoxo

Hello, I want to learn cybersecurity but I'm not sure what the free tier of tryhackme really teaches and if i should instead pay for premium. i wanna learn at least the basics

Hi everyone, I was introduced Cybersecurity in August and finished pre-security in approximately 19hrs and and like after a month i finished the pre-security path I started the Cybersecurity 101 path and I am in the Logs Fundamental room.

About the Leagues I wished it was optional it might be motivating some people but everyone sees the league differently, Some see it as a competition while others see it as a motivation.

Like me whenever the league is about to end I always don't want to get demoted and its crazy to see people's points triple overnight.

Does tryhackme subscription worth it
till now i was solving only free labs but now i'm solving a module where their are many paid labs and walkthrough

and to complete the module i need to buy pro subscription
so is it worth it or free labs are enought for practice for Offensive labs

Hi everyone! I started learning cybersecurity a few weeks ago using TryHackMe, and I've completed all the free rooms in Pre Security and Cyber Security 101.

However, I can't access the Premium rooms without a subscription. Is there any way to access or learn the content from those rooms for free?

I have exams coming up in a few months, so I'm worried that I won't have enough time to make the most of a Premium subscription right now.

My current plan is to wait until after my exams to subscribe to Premium, then go back and complete the rooms I've already studied before moving on to more advanced topics.

Do you think this is a good approach, or would you recommend doing something different in the meantime?

I'd really appreciate any advice or suggestions. Thanks in advance!

Hi all

So, I'm very early in the THM paths and I've noticed quite a few discrepancies between what the lesson tells me I should be seeing and what I'm actually seeing.

This is the latest:

By using "ls -1", the lesson says I should see important info about the files and directories, but I don't.

Am I doing something wrong?

Are errors like this normal in THM?

i submited a writeup to a room how long is it til it gets aproved or declined ?

Got to look at how DNS translates domain names to IP addresses, domain hierarchy, dns record types and so much more. On to the next.

tryhackme was very fast with this room

The title might seem out of place in the TryHackMe community, but it’s just meant to be catchy, nothing more.

It all started when I was watching a TV series about hacking, and I got fascinated by this world. Back then, I was learning web development and spent a lot of time in tutorial hell. It went on for a very long time, guys. I wouldn’t be lying if I said it lasted three years.

When I finally decided to learn cybersecurity, I started with educational videos. And you know how they can be a double-edged sword. Passive consumption doesn’t make you a hacker, a swimmer, or even a programmer.

Then, by chance, I stumbled upon TryHackMe. I thought I’d give this free room a try, but I quickly fell in love with the content, the structure, and the fact that they were building something specifically for beginners at a very affordable price.

After about two months, I had completed paths like Pre Security and Cyber Security 101, and made it through around 40% of Jr Penetration Tester.

Around that time, I became comfortable sitting in front of a machine that gave me no guidance, with nothing but an empty black terminal in front of me.

They do amazing work, and they’ve succeeded at what they set out to do.

They managed to turn someone who passively consumed content into a beginner who could sit down, tackle a machine, experiment, and fail, all within a relatively short time. And they did that despite my long history of passive learning.

They truly accomplished their goal. They openly acknowledge that their content is designed for beginners, and here I am, a beginner who has been given the tools to start his journey.

I genuinely appreciate that and everything they’ve done. They gave me so much, and I’m grateful for it.

But eventually, you reach a point where you feel the need to develop a deeper understanding of what you’re doing. So I decided to move forward with my journey, one in which this platform has been an incredible starting point.

I haven’t become the hacker who changed the world, nor am I capable of solving the hardest challenges out there. But they gave me the foundation I needed to keep moving forward.

I’m not exceptional, and I’m far from being highly skilled. But they gave someone like me the initial push he needed to get started.

And in the end, I felt it was only right to write this thank-you letter as a small way of giving something back.

Like many others I was curious to learn about the new BIG vulnerability affecting php . So i went to read tryhackme's room on it . It took me 2 paragraphs to feel something is a bit off , I've read and written(mainly for linkedin posts) a lot of LLM-generated text . And sure enough it was 100% AI generated !!!!!! WHAT A DISAPPOINTMENT

Hi everyone,

With Black Friday coming up next month, I’m planning my training budget for next year and wanted to ask two things: one about pricing, and another about whether THM actually fits the direction I’m taking in my career.

1. Black Friday Annual Pricing:

How much does the Annual Premium subscription usually cost during the Black Friday sale? I’ve seen posts mentioning a 40% discount in past years (bringing it down to around $75–$80 USD for the year). Is that the price range I should expect this November?

1. Is THM a good fit for my path? (A bit of context):

I’m currently on Year 3 of a 10-year career plan aiming for a CISO role or a senior InfoSec Governance (GRC) leadership position in the public sector. Right now, my profile looks like this:

Current role: For the past year, I’ve been working in Information Security within the government sector.

Education & Current Study: I hold a Master’s in Cybersecurity and a postgraduate specialization in InfoSec. I spend most of my time working with NIST guidelines and our national government security frameworks, and I’m sitting for the CISSP exam in 5 months.

Future direction: I’m still deciding whether to aim for an executive CISO track or become a high-level subject matter expert (SME) in Government InfoSec, Risk, and Data Privacy. Either way, my main goal is to master Information Security first while gradually building strong expertise in Data Protection/Privacy.

Why I’m asking:

About 8 months ago, I bought an annual subscription to a generalist tech platform here in Latin America (Platzi), and the ROI was terrible—the content was way too basic for what I needed.

I don't want to make another bad purchase this Black Friday. Since my day-to-day is heavily focused on InfoSec standards, NIST, risk, and government compliance—rather than being a full-time pentester—does getting a TryHackMe annual subscription for next year make sense for me?

Would the Blue Team / SOC / defensive paths help me build a stronger technical foundation for my Gov/InfoSec career, or would they just distract me from my CISSP and Privacy goals? If THM isn't the right fit for this path, what platforms or resources should I be aiming for instead?

Thanks a lot for reading and for any advice!

When you start learning cybersecurity, certifications quickly become part of the discussion. After gaining some basic knowledge of networking, Linux, Windows and security fundamentals, the next question is often: Which certification should I take first?

In this article, I reflect three entry-level penetration testing certifications based on materials, contains and exam:

Blog: https://www.kangafoo.de/which-entry-level-penetration-testing-certification-is-right-for-you/

What is your opinion? Which entry-cert did you chose or would you chose?

I accidentally upgraded from Premium annual plan to Max annual plan, thinking it would bring me to checkout page. I submitted the ticket in the website chat 9 hours ago just wondering how long it would usually take for the refund request to be done? I am just nervous as the upgrade costed alot of money.

EDIT: Ok I just received the response shortly after making this post. Idk if it was a coincidence or not but thank you to to the support staff

This is 3rd time in a single room, this is connecting to a remote machine for eternity.

Trying to break into the cybersecurity space and decided to get familiar with Siems by taking the SAL1 before the CYSA+. Any study tips?

Hey everyone,

Whenever I do a box that involves getting WP admin credentials, manually logging into the dashboard, navigating to plugins, and clicking "Upload" to drop a PHP reverse shell always felt too slow.

I wanted to automate the process from the terminal, so I spent some time figuring out the exact curl syntax to do it. It’s a great way to understand how WordPress handles authentication and CSRF protection under the hood.

The core workflow comes down to 3 steps:

1. The Login: Sending a POST request to wp-login.php and saving the session cookie (-c cookie.txt).
2. Grabbing the Nonce: WordPress uses a nonce for security on plugin uploads. You have to GET the plugin-install.php page with your cookie and grep/awk out the _wpnonce value.
3. The Payload Upload: Finally, using curl -F to send the malicious zip file as multipart/form-data, passing both the cookie and the nonce.

Automating this really helped me understand HTTP requests better rather than just relying on the browser.

If you want to see the exact bash commands and cURL syntax I used, I wrote a full breakdown on my blog here: [https://medium.com/@0xShell/beyond-the-browser-automating-authenticated-wordpress-plugin-uploads-with-curl-e357cfb3ff3e\].

Hope this helps speed up your workflow on your next box! Let me know if you guys have other ways you automate WP exploitation.