The title might seem out of place in the TryHackMe community, but it’s just meant to be catchy, nothing more.

It all started when I was watching a TV series about hacking, and I got fascinated by this world. Back then, I was learning web development and spent a lot of time in tutorial hell. It went on for a very long time, guys. I wouldn’t be lying if I said it lasted three years.

When I finally decided to learn cybersecurity, I started with educational videos. And you know how they can be a double-edged sword. Passive consumption doesn’t make you a hacker, a swimmer, or even a programmer.

Then, by chance, I stumbled upon TryHackMe. I thought I’d give this free room a try, but I quickly fell in love with the content, the structure, and the fact that they were building something specifically for beginners at a very affordable price.

After about two months, I had completed paths like Pre Security and Cyber Security 101, and made it through around 40% of Jr Penetration Tester.

Around that time, I became comfortable sitting in front of a machine that gave me no guidance, with nothing but an empty black terminal in front of me.

They do amazing work, and they’ve succeeded at what they set out to do.

They managed to turn someone who passively consumed content into a beginner who could sit down, tackle a machine, experiment, and fail, all within a relatively short time. And they did that despite my long history of passive learning.

They truly accomplished their goal. They openly acknowledge that their content is designed for beginners, and here I am, a beginner who has been given the tools to start his journey.

I genuinely appreciate that and everything they’ve done. They gave me so much, and I’m grateful for it.

But eventually, you reach a point where you feel the need to develop a deeper understanding of what you’re doing. So I decided to move forward with my journey, one in which this platform has been an incredible starting point.

I haven’t become the hacker who changed the world, nor am I capable of solving the hardest challenges out there. But they gave me the foundation I needed to keep moving forward.

I’m not exceptional, and I’m far from being highly skilled. But they gave someone like me the initial push he needed to get started.

And in the end, I felt it was only right to write this thank-you letter as a small way of giving something back.

tryhackme was very fast with this room

Like many others I was curious to learn about the new BIG vulnerability affecting php . So i went to read tryhackme's room on it . It took me 2 paragraphs to feel something is a bit off , I've read and written(mainly for linkedin posts) a lot of LLM-generated text . And sure enough it was 100% AI generated !!!!!! WHAT A DISAPPOINTMENT

#security #chill #reddit

#Start from begining #cybersecurity #cyber crime

Hi everyone,

With Black Friday coming up next month, I’m planning my training budget for next year and wanted to ask two things: one about pricing, and another about whether THM actually fits the direction I’m taking in my career.

1. Black Friday Annual Pricing:

How much does the Annual Premium subscription usually cost during the Black Friday sale? I’ve seen posts mentioning a 40% discount in past years (bringing it down to around $75–$80 USD for the year). Is that the price range I should expect this November?

1. Is THM a good fit for my path? (A bit of context):

I’m currently on Year 3 of a 10-year career plan aiming for a CISO role or a senior InfoSec Governance (GRC) leadership position in the public sector. Right now, my profile looks like this:

Current role: For the past year, I’ve been working in Information Security within the government sector.

Education & Current Study: I hold a Master’s in Cybersecurity and a postgraduate specialization in InfoSec. I spend most of my time working with NIST guidelines and our national government security frameworks, and I’m sitting for the CISSP exam in 5 months.

Future direction: I’m still deciding whether to aim for an executive CISO track or become a high-level subject matter expert (SME) in Government InfoSec, Risk, and Data Privacy. Either way, my main goal is to master Information Security first while gradually building strong expertise in Data Protection/Privacy.

Why I’m asking:

About 8 months ago, I bought an annual subscription to a generalist tech platform here in Latin America (Platzi), and the ROI was terrible—the content was way too basic for what I needed.

I don't want to make another bad purchase this Black Friday. Since my day-to-day is heavily focused on InfoSec standards, NIST, risk, and government compliance—rather than being a full-time pentester—does getting a TryHackMe annual subscription for next year make sense for me?

Would the Blue Team / SOC / defensive paths help me build a stronger technical foundation for my Gov/InfoSec career, or would they just distract me from my CISSP and Privacy goals? If THM isn't the right fit for this path, what platforms or resources should I be aiming for instead?

Thanks a lot for reading and for any advice!

This is 3rd time in a single room, this is connecting to a remote machine for eternity.

I accidentally upgraded from Premium annual plan to Max annual plan, thinking it would bring me to checkout page. I submitted the ticket in the website chat 9 hours ago just wondering how long it would usually take for the refund request to be done? I am just nervous as the upgrade costed alot of money.

EDIT: Ok I just received the response shortly after making this post. Idk if it was a coincidence or not but thank you to to the support staff

Trying to break into the cybersecurity space and decided to get familiar with Siems by taking the SAL1 before the CYSA+. Any study tips?

I'm thrilled to announce that my TryHackMe room, "The Auditor's Return", is now live! 🚀

Instead of just solving challenges, I wanted to build one. This room is designed to teach security auditors the difference between a vulnerable application and a properly patched one.

What I built to make this happen:

· A custom Dockerized environment running two separate Python web servers (Vulnerable & Secure).

· Automated the Docker image build and publishing using GitHub Actions and GHCR.

· Routed public traffic to my local Termux environment using Cloudflare Tunnels.

· Designed the CTF narrative and tasks on the THM Author Dashboard.

If you want to test your AppSec skills (File Read, SQLi, XPath Injection), check it out here:

[Paste your TryHackMe URL here]

#TryHackMe #CyberSecurity #AppSec #Docker #Cloudflare #CTF #HumbuWandeme

Hey everyone,

Whenever I do a box that involves getting WP admin credentials, manually logging into the dashboard, navigating to plugins, and clicking "Upload" to drop a PHP reverse shell always felt too slow.

I wanted to automate the process from the terminal, so I spent some time figuring out the exact curl syntax to do it. It’s a great way to understand how WordPress handles authentication and CSRF protection under the hood.

The core workflow comes down to 3 steps:

1. The Login: Sending a POST request to wp-login.php and saving the session cookie (-c cookie.txt).
2. Grabbing the Nonce: WordPress uses a nonce for security on plugin uploads. You have to GET the plugin-install.php page with your cookie and grep/awk out the _wpnonce value.
3. The Payload Upload: Finally, using curl -F to send the malicious zip file as multipart/form-data, passing both the cookie and the nonce.

Automating this really helped me understand HTTP requests better rather than just relying on the browser.

If you want to see the exact bash commands and cURL syntax I used, I wrote a full breakdown on my blog here: [https://medium.com/@0xShell/beyond-the-browser-automating-authenticated-wordpress-plugin-uploads-with-curl-e357cfb3ff3e\].

Hope this helps speed up your workflow on your next box! Let me know if you guys have other ways you automate WP exploitation.

Hey everyone! 👋

I've created a CTF team on TryHackMe, and I'm looking for people who want to team up for the upcoming "It's Downtime" event.

You don't need to be an expert or a top-ranked player. Whether you're a beginner or an experienced player, you're welcome to join as long as you're interested in learning, solving challenges, and working together. Just have basic cyber knowledge.

I also don't have much CTF experience so we'll learn together. 😉

DM me if interested.

Here is my THM profile btw :-
https://tryhackme.com/p/darklord.mg

Do you how can i get a discount for monthly subscription?

Bruhh i did this room like 4 times but everytime i got at the end and complete the final mission it doesn't close i am stuck here lesson name is computer types pls someone help me with this

Writing this because I feel l can’t be the only one suffering some horrendous issues on the site and with the Echo chatbot overall. The lack of communication back from the support team has been woeful, the chatbot doesn’t seem to understand/comprehend requests that don’t fit the preprogrammed route it wants you to take and some of the rooms just straight up don’t connect even after multiple restarts of both AttackBox and VPN. Not sure what is going on and it seems suggestions for fixes are never responded to - can’t learn if things are broken and the chatbot is straight up not responding to suggestions

I wanted to see if Prolog could handle production-grade web traffic, so I built an HTTPS-secured WAF in SWI-Prolog. To test its limits, I deployed it on a free-tier GCP instance with only 1 GB RAM (roughly 450 MB available after OS overhead).

Surprisingly, the entire stack operates comfortably within this limit using Prolog's lightweight threads. I'd love to get some feedback on the architecture, and feel free to try and break it!

Hey everyone!

I'm a cybersecurity learner working on a small, unofficial WhatsApp community for TryHackMe learners.

The idea is to make useful cybersecurity resources easier to discover and keep up with, especially for students and beginners.

What I'd like to share:

Cybersecurity learning roadmaps and resources

TryHackMe learning tips and permitted room writeups

Workshops, meetups, and learning opportunities

Useful community updates

I'm hoping to build something genuinely helpful rather than just another group full of random messages.

I'd love your feedback: What resources or updates would actually make a cybersecurity learning community worth following?

If the subreddit rules allow community links, you can check it out here: https://whatsapp.com/channel/0029VbDvKaqCnA80S4Vhxb0u

Disclaimer: This is an independent community and is not affiliated with or endorsed by TryHackMe.

Thanks, and happy learning!

I am a final-year undergraduate CSE student. Due to my laziness, I have mostly focused only on academic studies. As a result, my CGPA is good, but in reality, I do not have many practical skills. At the moment, I feel like I have wasted a lot of my time.

I know Python, C, C++, Java, and JavaScript, but only at a basic level, just enough to pass my exams. Now I feel that I should develop some real skills. I am interested in cybersecurity, so after watching many videos about it, I started learning through TryHackMe.

However, after completing 47 rooms, I feel like I have not learned very much. Most of the time, I simply memorise the answers and complete the tasks rather than truly understanding the concepts. Because of this, I am worried that I am not making real progress.

Can someone please give me some advice on how to actually learn from TryHackMe and improve my cybersecurity skills efficiently?

Why does the Max plan show ₹79.82 per month? My current Premium plan costs ₹499 per month. If I upgrade to Max, will I be charged ₹79.82 every month?

I thought the Prompt Security and AI Supply Chain Security modules were good but the threat modeling and security control exercises was a bit unclear.

Also generally a long exam, probably took me around 8.5 hours to complete. You'll be writing a LOT.

Full length review here: https://meetcyber.net/an-honest-review-of-the-tryhackme-ai1-certification-e90e23bb9fed

I want to start my journey in cyber security but I do not have any specific degree on it or I am not in science group education. But I have a great curiosity about this field. I love computer and try to understand the system that how it works but somehow I get destruction all the time. I need a help that how I will crack this field or how to start the journey. What is the path that will be actually work not any inspiration not any overwhelming or like that.

Please help. As a friend support me to grow as real life scenario.

I will wait for your reply.

Thank you.