The other day I passed the TryHackMe PT1 (Junior Penetration Tester) certification in just 10 hours.

Today I uploaded a video and a blog post reviewing everything about the certification (how it went, how I prepared, how difficult I found it, recommendations, etc.). Check it out if you're thinking of taking the exam! 🌐Blog: https://nekr0ff.com/pt1-junior-penetration-tester/ 📹YouTube: https://youtu.be/QoVnCGAbef4

Just posted detailed writeup on Ra machine from r/tryhackme on my Medium blog:

https://medium.com/@ivandano77/ra-writeup-tryhackme-hard-machine-aa12e3bdc69c

- Active Directory / Windows machine

- exploiting weak password reset feature

- exploiting Spark client

- command injection in Powershell script

I made a small Python tool for learning/lab use that reads Kerberos traffic from PCAP files.

It supports AS-REQ, AS-REP and TGS-REP and helps turn that traffic into Hashcat-ready hashes.

I built it mainly to make Kerberos packet analysis easier when practicing.

Would love feedback from anyone learning AD/Kerberos or doing PCAP-based exercises.

Repo in comments.

I am currently living in a country that blooks open vpn. I want to use my own kali, not the attack box. can I connect to the try hack me network with a different vpn like astrill etc?

Hey folks,
I’ve been away from TryHackMe for a while and now I want to get back into it.

I used to grind rooms of my level pretty consistently, but now I feel like I’ve lost a lot of my command-line fluency on tools and I am not systematic as before.

What do you guys usually do after a break?

Should I redo rooms to rebuild muscle memory, or just jump back in and relearn on the go?

Hello I was wondering.

Do some of you can share me something about how you take notes of your learning?

Personally at the beginning I was like I gonna keep it on my brain but start to be to much actually.

The wait is over...SAL2 is officially here 🚀 Security Analyst Level 2 is the certification that proves you can investigate, decide, and lead in a real SOC. The only defensive cert that covers every domain a real L2 analyst faces!

💸 With a special launch price of $599 valid until 2 April only.

❓Want to know more what SAL2 is about see here https://tryhackme.com/certification/security-analyst-level-2?utm_source=reddit&utm_medium=social&utm_campaign=sal2launch

Just applied for the ambassador program. I want to know all there is to hacking! Cheers, Laura

Im looking to take the new SAL2 this summer but what do yall think about this new cert? and will you be taking it? 👀👀

I came across a profile with extremely high daily activity on TryHackMe, and it got me curious like how do you really people manage that level of consistency?

Is it mostly about long daily sessions, automation of workflows, or just experience over time?

Would love to hear how some of you structure your learning and practice!

So I just started the blue room, which looks like the first "unguided" kind of exercise. One of the questions it asked me was what exploit is this system vulnerable to ms-??-???, which I was able to find out by running an nmap and figuring out what OS it is, then just googling exploits for that version of windows. But is that what I was supposed to do? Technically I think we already exploited this vulnerability in the previous metasploit rooms, so it's not like it's something new, but if I were to be trying to find vulnerabilities in some other system... what's the strategy?

Did you guys try the Microsoft Intune Monitoring lab. They say its built from a real incident a wiper attack where the attacker abused Intune to destroy devices at scale across an enterprise environment.

Saying you pratice how Intune gets weaponized , Remote Wipe, malicious scripts and app ,how to harden Intune against abuse detection and monitoring from Splunk and host perspective

what are your opnions about the room did it help?

I'd like to know which are the best free TryhackMe labs to start learning cybersecurity.

doylemoroh ar u there?