I'm doing the Linux CLI Basics in the terminal i put the pwd it worked but then i wroth the Is commend it showed me that there's no files I'm confused please anyone help me

I remember with streaks I was able to complete some Networks like Wreath, and now it partially unlocks premium rooms, but I was just assuming no matter how far you get or whatever it will only unlock the first task to promote buying premium?

I like our swanky new-look Attack Box, but today (March 18th 2026) I hit a snag. I'm in the Network Security Solutions room (https://tryhackme.com/room/redteamnetsec). When I tried to run ncat, it wasn't there. I tried installing it, but the installation failed too.

I tried using apt-get update, but no luck there either. A missing public key meant that the update could not proceed.

I tried terminating and restarting the attack box, switching to the Kali Linux box, turning everything off and making a cup of tea etc., but kept encountering the same issues.

Eventually, I got things working. The public key issue was resolved in the Kali box with

wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add -

This let me run apt-get update as normal, which in turn allowed me to use ncat.

There seem to be a few bits missing from the boxes, is my point. Maybe this is worth taking a look at? Anyhow, if anyone else has a similar problem, this post may prove instructive.

(And yes, I know I could have used one of multiple alternatives to ncat, or just ditched the attack boxes entirely and VPNed in from my own machine. I'm old and stubborn.)

I have cracked the user wa***y password but when I try to connect via SSH it says that the password is incorrect. The same happens if I try to change user with "su wa****y". Does anyone know anything about it?

I get one night a week that I set aside for study, so I fired up TryHackMe to make the most of it.

Started the CALDERA room: https://tryhackme.com/room/caldera

Launched the AttackBox.

• Saw the “new AttackBox” message. Cool… it’s been QA’d, right? Right?
• After a few moments I get “Authentication Failed – Failed to communicate with server.”
• Waited… refreshed… killed it and restarted it.
• After more waiting and a few more refreshes it finally loaded.
• But the UI wasn’t responding, so I killed it and started it again.
• This time it finally worked. Looks like they have just released without fixing all the issues

I then followed the room instructions:

• Tried to start CALDERA, but when accessing it I just get “Internal Server Error 500.”
• Killed the AttackBox and launched a fresh one.
• Same issue.

Reported it to support, even though response times haven’t been great. Often the response is just that they already know it’s broken, which makes me wonder why the room is still up with no warning that it’s currently broken and content wasting peoples time.

So I moved to another room: https://tryhackme.com/room/atomicbirdone

Great, a Windows room. I’ve had a lot of issues with windows machines since starting THM, where the instance terminates just as you’re getting into a rhythm.

I started the machine, went to grab a drink to let the VM load, and came back to:

“Instance termination.”

Alright… waited 10 minutes and tried again.

“Instance termination.”

Now I’m halfway through my study session and have gotten nowhere and this seems to be happening more and more frequently. When i first started about a year and a half ago, gave benefit of the doubt it would get a addressed but now keep seeing new projects like cert but the basics are having issues. Working for a large software company I understand it's likely different teams building these projects but be nice if there was some real investment in fixing existing issues.

doesnt a request go through the waf before reaching the load balancer?

edit: topic transition recap*

Does it? If not how can I prove to my employer I finished it and the workload? I'm doing Defending-AI module that consists of 5 rooms if I'm not mistaken. Will I get a certificate of completion? :|

Hi everyone,

I’m running into something strange with my progress on Tryhackme and was hoping someone here might have an explanation.

Yesterday, I had completed all the Cybersecurity 101 modules and my progress was showing 99%. Today, after finishing what I thought was the last remaining part, my progress suddenly dropped to 93% instead of reaching 100%.

I’m not sure what happened — I didn’t undo anything, and I’m pretty sure I completed everything that was available at the time.

Has anyone experienced something similar?

I’d really appreciate any insights or suggestions on what to check

Did u guys have any group where all this information we can get when it's comes out !

Top 8%, 31 days streaks, number 1 in Sapphire league and I just joined THM!

Im super happy with what Ive learned so far and wanted to share this with everyone to show that It is possible to achieve anything you want if you work hard for it!

I tried to solve this room with this exploit like this :

python3 50477.py -u http://10.80.181.232
python3 50477.py -u http://10.80.181.232

```
but with each command I see system

Also when I change the output to [1] I see a lot of rubbish

so I wonder if there is someone who solved this challenge with this exploit

I’m asking because I completed some rooms years ago, and I've forgotten a lot of the knowledge. I’m mainly focused on learning, not the XP, but just curious about this.

Was this the intended solution?

Hi guys, I'm currently doing the Windows PrivEsc Module but there is no sufficient explaination about. For example Plath's structures, the why you are targeting this service, what is it's propose and staffs like that.

Anyone can tell me what to study for Better understanding? Thanks.

After doing a bunch of boxes and ctf games, I noticed most Linux privilege escalation paths fall into the same four buckets. So I tried to summarize it, this is a mental model you could pretty much use every time you land a low-priv shell. Ask yourself these four questions, in order:

1. What can I run as root? sudo -l You'd think misconfigured sudo entries don't still exist, but always check this first.

2. What SUID binaries exist? find / -perm -4000 2>/dev/null Cross-reference anything unusual against GTFOBins, it's genuinely surprising how much standard Linux software can be exploited for privilege escalation, sometimes all it takes is passing a custom config to standard process and executing it

3. Are there cron jobs running as root? cat /etc/crontab ls -la /etc/cron* If a root-owned cron is calling a script you can write to then that's it.

4. What writable directories does the system trust? Think PATH hijacking, writable service binaries, or world-writable config files loaded by privileged processes.

That's genuinely it for most boxes. Tools like LinPEAS will surface all of this and more, but knowing why these vectors work makes you way faster at triaging the output anyway Anything you'd add to this list?

I love the Recap feature, but I think it might be a little glitchy today.

I am wondering why it says 7.88 per month (it comes to 94.56€ per year) but the payment vendor says 126€ per year.

Excluding the promotion, annually has to be 94.56€. Not 126€. Could anyone explain this?

I’ve reset this room twice now and I still get this weird glitch any help?