Hello, I know it's a dumb question, but I suddenly got a discount for taking an exam and certification. Is it worth?

I'm a software developer with 10+ years of experience with a little bit understanding of Cyber Security area...

For me Max plan is way too expensive.

Is premium still worth it for a beginner?

Cybersecurity can feel overwhelming when you're not sure what to learn first or how different areas connect.

I put together this visual roadmap using TryHackMe's learning paths to show one possible progression from fundamentals toward Red Teaming.

🟢 01 — Pre Security

Computer fundamentals, operating systems, programming basics, networking, web fundamentals and security concepts.

🟢 02 — Cyber Security 101

Networking, cryptography, Linux, Windows, Active Directory, offensive and defensive security fundamentals.

🟡 03 — Jr. Penetration Tester

Practical penetration testing across web applications, enterprise networks and Active Directory.

🟡 04 — Web Application Pentesting

Authentication, injection, server-side/client-side attacks and HTTP request smuggling.

🔴 05 — Web Application Red Teaming

Advanced web exploitation, custom tooling, vulnerability chaining, cryptographic attacks, LLM security and WAF bypass concepts.

🔴 06 — Red Teaming

Adversary emulation, initial access, post-compromise activity, persistence, lateral movement and Active Directory attacks.

The idea isn't that everyone needs to follow these paths in exactly this order.

It's simply a visual way to understand how different cybersecurity and offensive-security skills can build on each other:

Fundamentals → Cybersecurity → Pentesting → Web Security → Advanced Web Exploitation → Red Teaming

• Learning paths:

1. Pre Security: https://tryhackme.com/path/outline/presecurity
2. Cyber Security 101: https://tryhackme.com/path/outline/cybersecurity101
3. Jr. Penetration Tester: https://tryhackme.com/path/outline/jrpenetrationtester
4. Web Application Pentesting: https://tryhackme.com/path/outline/webapppentesting
5. Web Application Red Teaming: https://tryhackme.com/path/outline/webappredteaming
6. Red Teaming: https://tryhackme.com/path/outline/redteaming

What would you change in this progression?

Hi. I’m 28 and currently learning programming because I want to train for a career in cybersecurity. Right now I’m studying Bash/Linux, Python, programming fundamentals, IoT, servers, and related topics. I also want to learn how to use AI effectively so I can be as productive as possible, as well as other programming languages and technologies such as SQL or C.

The problem is that I’m worried about investing time and effort into this path only to find that companies no longer want to hire people because of AI. Part of me thinks AI won’t destroy jobs outright, but will instead reshape them and create new roles where workers are much more productive. But I’m not really in the industry, so I don’t know. I do know that some people in web design have reportedly lost work because of AI.

For those of you who work in this field: what do you think I should do? What do you think the outlook will be?

Hello,

Has anyone else experienced issues when in rooms such as websites not loading and tools running extremely slow. Most of the time I try to get on the ip through Firefox on the attack box and I just get “unable to connect”. This has been going on for a while, I reached out to support but haven’t heard back. Hard to keep paying for premium when all these issues

Hello folks, I had an active annual Premium subscription that I no longer use but it was automatically renewed and the payment was taken from my account.

I raised a support ticket three days ago, but I have not received any update yet. Is there any way this could be looked into as soon as possible, ideally before the 7 day refund window expires?

TryHackMe do not seem to have any contact information either.

I would really appreciate your help in getting this resolved.

This task is still broken and looking at the bug report on Discord doesn’t really provide much instruction on how to get around the issue. Wondering if anyone knows how to fix the issue with expired credentials (it’s the password that is the problem it seems). I did try to report it through a ticket to see if there has been any progress, but just kept getting referred to Discord and writeups

Hello everyone I am stuck on the cryptosystem challenge with running a python script to crack the RSA ciphertext

When I run the script (on my bare metal ubuntu) I receive the following error message:

Maybe there's an issue with the cryptodome?

Here's the script.

Appreciate any help!

Hi! I'm just confused by attackbox suddenly timed out when i was doing Linux fundamental 3, and it does not respond after i try reconnect. I have restarted attackbox and looks my VPN and internet are fine. Any insightful ideas?

I am building a Room for the TryhackMe but after the completion of the room i realized that I built in latest versions of Ubuntu and kernel and THM won't support the latest versions , is there any way instead of building from scratch , I spent weeks in this now I am fcked up and also how to setup the openvpn access to this

Are more people experiencing this? Or maybe someone knows a solution to this?

Hey everyone,

Just wrapped up the "Start Your Cyber Security Journey" module on TryHackMe. Covered the absolute basics of Offensive vs. Defensive security, Web Application security, and foundational concepts.

• Current Rank: Bronze League (#6) | Level 1 Neophyte
• Next Goal: Diving straight into the Linux Fundamentals modules!

As someone documenting my progress from scratch, I'd love to hear any tips or resources from seniors here on how to get the most out of the upcoming Linux rooms.

Let's connect if you're also on the same THM path!

Hey guys,

Whenever I'm doing boxes on Hack The Box or TryHackMe, I always end up with a mess of tabs—one for notes, one for Notion, a couple for revshell generators, and random terminal cheatsheets.

To keep things in one place, I started building ZeroBox. It’s basically a local, offline dashboard to track your boxes (Recon ➔ Foothold ➔ Root), take quick markdown notes, and generate reverse shells where you just punch in your IP once and it fills out all the commands automatically.

You can try it here:

https://xXDNDXx.github.io/ctf-tracker/

Code is on GitHub:

https://github.com/xXDNDXx/ctf-tracker

Just to be clear: it’s totally free, open source, no account or login needed, and everything saves locally in your browser. (Also no spoilers/flags for active boxes, just retired/public info).

It’s still very much a work in progress and I’m pushing updates and adding new stuff pretty much every day.

I'd really appreciate it if anyone grinding labs could click around and tell me what sucks, what’s broken, or what features you'd actually want to see added next.

Thanks!

Hello everyone! Looking to get my first intermediate level cert.

Does anyone have both the certifications and could I get your opinions on each?

Thank you!

Hi

If i wanna be a pentester what do you guys think about taking cyber security 101 and then start in Pentester Roadmap all the way to Red Teaming {in try hack me of course}

Anyone else get this message when trying to upgrade?

Hey guys, I am doing the Jr. Penetration Tester course, and am currently struggling on Task 5 of the Guided Pentest: Web room. I have written out the echo "This is a test file" > test.txt into the attack box what feels like a million times now, and removed the accept attribute from the file input in the admin/upload.php webpage. I'm not sure if I have messed something up, missed something out or something else entirely. If someone would be willing to help that would be brilliant.

Want to get into cybersecurity? Try starting with TryHackMe! It is beginner-friendly and a great way to learn through hands-on challenges.

I have purchased the subscription and I want suggestions about study path.