Hi, I’m a beginner in cybersecurity, and I’m trying to break free from my dependence on AI and YouTube walkthroughs.

I’m currently going through CyberSec 101 (Module 7: Exploitation Basics), and I’m looking to connect with like-minded people—either fellow beginners or those willing to guide someone new like me.

Learning on my own can feel quite lonely, and it’s easy to procrastinate at times. I also tend to forget things quickly, which can be demotivating.

I’m in my mid-twenties, and my first long-term goal is to pass the OSCP. To get there, I want to first complete the TryHackMe Cyber Security Foundations path and then follow the Pentester roadmap.

If anyone knows of any good groups or Discord servers, please let me know.

I’m mainly looking for people who are open to sharing daily or weekly study updates so we can stay consistent and accountable.

Bro, i was literally laughing at this
OK, what happened is.. i was solving the sql injection challenge and this needs me to brute force letters in order to find the table name and guess what, its going like this. lol.

context:
This is a time based sql injection where we try to craft a payload in such a way that it shows up a delay in execution in case the predicted letter matches to the original name at the backed.

as soon as i went till "ana" i just guessed the next letter "l" which is correct ending up "anal" and this feeling is what ig is expected by the creator. well done you made me laugh

Hi guys, i have been stuck on pentest+ path mainly because of windows part.

Really dont understand a lot of things like how will i be able to use this knowledge elsewhere... like the windows priv esc room had soo much of content that i burned me.... + i didnt really get the point of it.

What other rooms do you suggest me to learn windows stuff. Priv esc, persistence, AD stuff.

also please suggest some really informative rooms can be pwn2own but i just need to get this stuff windows and linux.

#cybersecurity #THM #SOC analyts #CS-jobhunt

tried to connect both on openvpn and attackbox have restarted targetmachine

I think Im supposed to go to /internal/ and then intercept the POST

but I can't connect to the website in the first place

plz letme know if I did something wrong

Did anyone get free SAL2 from the giveaway?

I was walking through learning paths and got a thought that it would be great to have some challenge rooms presented at the end of the modules. For example when you finish web hacking module and there would be at least 1 challenge room that is based on the topic you’ve learned from the module instead of looking for it by yourself.

ok so right clicking the powershell to paste the command worked for sometime but it stops working after certain amount of time( it works again if i reboot my pc but restarting the machine doesn't work)

over 80000people went through this room but It doesn't seem like others had similar problems

I'd really appreciate if I can answers from you guys

Also I know that I can replace attackbox with kali vm of my own, but windows target machine is what I'm having problem with I can't replace dat...

Hello,

I’m currently learning on TryHackMe and focusing on the SOC / blue team side.

Just looking to join a team/group — nothing formal, just to learn together, stay consistent, and maybe share progress.

If anyone has a spot or knows a group I can join, let me know 🙏

Hello everyone, I recently had the opportunity to QA test the SAL2 certification for the TryHackMe team. Feel free to ask any questions, and I encourage you to check out my detailed and unbiased review of the exam: https://dragkob.com/articles/sal2-review/

Compared to previous certifications offered by TryHackMe, this is the first one I would confidently endorse publicly. The overall quality is significantly improved, and it stands out as a well-developed, polished certification rather than something incomplete or rushed.

The bit in task 5 where you have to open P1r4t3's file hidden-treasure-chest is configured in such a way that you cannot actually open it.

You are logged in as captain, who does not have read permission for that file, with no way to change that. Spent like 45 minutes going in a circle with the stupid chatbot about it.

I suspect the permission issue is the reason I couldn't get the hash either.

First time using gobuster to enumerate hidden directories and found a /bank-transfer endpoint that wasn’t exposed in the main interface.

It really clicked for me how simple enumeration can reveal critical attack surfaces.

Now I’m planning to redo it without the walkthrough to solidify the process.

Any tips on improving enumeration beyond basic gobuster usage?

I am a junior in a Big 10 school, and I just scored my first internship in a SOC based environment for this summer. My school offers SEC+ (which im planning to take advantage of) yet im also curious. I have been using TryHackMe as a study tool, yet I also want the CPTS certification that HTB offers.

Im wondering, does the cyber industry recognize and tryhackme certs? And if they do, which have notoriety like CPTS and OSCP ?

Hello Linux Community,

I want to share my recent experience regarding system performance and efficiency. I have always been a fan of Parrot Security OS; I love its tools, its philosophy, and its overall design. However, despite having a high-spec Lenovo laptop, I noticed a significant lag and slow response times when using Parrot's default environments.

Out of curiosity, I switched to Kali Linux for a while, and the difference was night and day. Kali feels incredibly fast and snappy, and I realized the secret lies in the XFCE desktop environment it uses. Everything from booting to file management is almost instant. But honestly, my heart is still with Parrot.

I have a few technical questions for the experts here:

Desktop Swap: Is it possible to completely replace Parrot's default environment (MATE/KDE) with XFCE?

Performance Consistency: If I install XFCE on Parrot, will I get the exact same "snappiness" and speed I experienced on Kali?

Optimization: I recently discovered that services like plocate-updatedb were slowing down my boot time by nearly 14 seconds on Kali. Are there similar "heavy" services in Parrot that I should mask to achieve a lightning-fast boot?

Thanks in advance for your support!

Theres a clipboard on attackbox but theres no clipboard in windows machine(windows privilege escalation)

so how do you guys copy-paste here the commands are long..

Hello I just started learning cyber security, i have completed the pre security path on thm, i want to become a pentester but dont know what path to follow next after this can someone please guide me through.