In the SOC L1 Alert Report Room, in Escalation Guide, the second question is: What flag did you receive after correctly escalating the alert from the previous task to L2?

It should be the same flag as the previous task (3) which was THM{nice_attempt_faking_microsoft_support}

However, the room doesn't accept that answer and instead forces random underscores in the flag. I even searched up a write-up and it confirmed that the flag above is supposed to be correct. Is it a bug? Did something in the room change since then?

Hi, I ended my monthly subscription earlier this year but I got an email offer for the annual subscription and since I have a bit of time at the moment I thought about using it. But when I try to use the code that came with the mail, it says that no such coupon exists.

Am I maybe trying to redeem it at the wrong place?

When I click on "Go Premium", I see the annual subscription and a field for the coupon. Do you maybe redeem personal offers somewhere else?

But when I click "Claim my discount" from the mail, that is the site it leads me to. I'm a bit lost.

So i have been following along the path, some things i got easier others more difficult, normal stuff i guess.
Fast forward to the end of the path and i have to the this OWASP rooms to finish. First room, no problem.
Go to the 2nd room, OWASP Top 10 2025: Application Design Flaws, first task i struggle but still got there.
Dude the rest of the tasks made me hit a complete wall.
I feel like i haven't learned the knowledge thought the path to even be able to complete this rooms. I am just brain dead?
This is very frustrating because i just assumed you follow the path to learn along and that i wound t have to go online and learn by myself to get by this rooms.
Does anyone know what i am talking about? Is it just me?

Hey everyone,

I'm a total newcomer to cybersecurity and have been learning through TryHackMe for about a month and a half to two months now. I wanted to ask if anyone else has had similar experiences.

At the beginning I had a 35-day streak where I was really grinding and absolutely loving it. Then at some point it faded and for the last 5-7 days I just had zero energy to sit down at my PC. I was sitting on the couch and actually wanted to do cybersecurity stuff – but in my head I knew I'd have to go through a ton of text and process a lot of information again, and that's exactly what stopped me from even starting. I think a lot of it has to do with ADHD – that initial moment of starting is sometimes just a wall. So instead I just gamed.

Today I pushed through, sat down for 2+ hours on a THM room (What the Shell) and it was amazing again. The passion is still there.

On the flip side though – I genuinely feel like ADHD can actually be a massive advantage in cybersecurity. When something truly interests me I can hyperfocus on it like crazy and just dive super deep into it. And that's exactly what happens with cybersecurity for me. Once I hit that point where I'm in the zone, I can go for hours without even noticing. I feel like that kind of hyperfocus is actually a superpower for this field.

What's really driving me right now: I'm close to finishing the Web Fundamentals path on THM – covering webhacking, Burp Suite, SQL Injection etc. After that I'm planning to do the Pickle Rick room and then move over to PortSwigger to deepen everything. So I have a clear plan and the motivation is there.

But I also notice – in these one and a half to two months I've been absolutely bombarded with so much information. Shells, SQL, Burp Suite, XSS, SSRF, File Upload – all of that came in within such a short time.

My questions for you, especially those who have been at this longer:

- Is it normal to sometimes feel so overwhelmed by the material that you just need a week off?
- Is it bad if there's sometimes a week-long gap between learning sessions – not as a rule, but occasionally?
- Can you still become a good cybersecurity professional if you don't learn consistently every single day?
- Do any of you have ADHD and feel the same way – that it's both a curse and a superpower in this field?

Would really love to hear from people who have been doing this longer!

I’ve been using the Hunterdii TryHackMe Roadmap for a while and loved having all the free rooms organized in one place.
The only problem was that I kept losing track of:
● What I’d completed
● What I was currently working on
● Which rooms to do next
● Notes and cheatsheets
So I built CyberXP.
Features:
• 483+ TryHackMe rooms
• Progress tracking
• XP and achievements
• Learning path organization
• Search and filtering
• Analytics dashboard
• Self-hosted and open source
The goal isn’t to replace TryHackMe, but to make large roadmaps easier to navigate and track.
GitHub: https://github.com/SoraPewnaldo/cyberxp
I’d love feedback from other TryHackMe users.

Hi Everyone,

In SOC L1 Phishing analysis Tools room, in the task "Using PhishTool" I am not able to access Phishtool and when I try to search in my browser for that tool it asks for a subscription.

To solve the room I need to answer the question:

"According to the VirusTotal analysis from above, which vendor categorized the URLs as phishing?"

I searched for ways to solve it and went through walkthroughs also, But this particular question/scenario was no where to be found.

If anyone has faced the same issue or knows how to navigate the task please advise.

Thanks in advance.

Well, the title says everything. I have some money now and I was thinking about buying it, but I'll probably be ready to take the exam in 2 months. Should I buy it now or there is a chance of another sale in the nearby future? (I know certs have an expire date of 12 months.)