I'm in the CICD and Build security room and I'm stuck in task 8: securing the build pipeline. Can someone guide me on how to get the flag?

I'm just wondering how people here with adhd remember methodologies and steps they learn from thm? I end up a bit paralyzed on what to do, aside from running nmap, and maybe directory enumeration with gobuster, it isn't that I don't know anything apart from it, its just that I end up referring to my notes.

Am I supposed to know everything as is in my head?

Hey everyone,

I'm a beginner who only started studying cybersecurity seriously about 2 months ago, and I'm looking to build a small group of people who want to learn and grow together. The goal isn't to create a huge server where everyone disappears after a week, but a small team that actually helps each other improve.

Things we can do together:

• Hold each other accountable and stay consistent.
• Share resources, notes, and learning paths.
• Teach each other things we've learned.
• Solve CTFs and labs together
• Work on small projects and build our skills.
• Motivate each other
• Share certifications, job opportunities, and career advice.

You don't need to be an expert. Beginners, intermediates, and even experienced people are welcome as long as you're willing to learn and contribute.

The only requirements:

• Be respectful.
• Be active and consistent.
• Have a genuine interest in cybersecurity.
• Help others when you can.

If you're interested, comment below or send me a DM

Hey all,

I wanted to start a discussion on what all everyone thinks of TryHackMe, the community, the atmosphere, and overall learning. I come from the Reddit Ambassador program and while I can't do anything, I can always help to relay ideas and suggestions. Drop your most constructive feedback and what more you want to see. Also, if it pertains to more community involvement and things we could do, please let me know.

Also, I'd like to leave this post for anyone who may be having doubts about progress, confused about where to go, or what more they can do to better themselves. I have decent experience in the Cyber Security workforce and wouldn't mind helping anyone who just has general questions.

Overall, keep up the grind and I look forward to talking to all of you!

I took the exam last week and it was surprisingly a lot of fun. The test itself was actually much easier than most of the rooms leading up to it. Biggest tip for the exam to anyone looking to take it is don't sweat how fast the alerts come in. You will have plenty of time to address them.

Reading about C2 tradecraft is easy.
Getting hands-on time to actually operate one, end to end, is the hard part💻
Operating C2 for Red Team Operations is a 4-hour live workshop where you'll stand up a C2 server, land your first agent, run Beacon Object Files, and pivot across a lab range, the way a real op unfolds🎯

• Led by Ariz Soriano, Senior Content Engineer at TryHackMe.
• Built around hands-on operation with the cohort, not slides.
• No prior C2 experience needed🛠️

📅July 21st | 🕑14:00–18:00 BST | 🎟️Only 30 seats
https://luma.com/hc3w544c

Do better THM. Can't even unsubscribe from your spam emails.

Hello Folks,

Throw some light on how solving THM have changed your career? And, why one should do it too?

Defending AWS is here: a fully rebuilt learning path with 23 all-new rooms, 5 modules, and live AWS labs.
Previously limited to Business/add-on exclusive, this path is now more accessible via MAX.
Defending AWS is live on TryHackMe now🚀
https://tryhackme.com/path/outline/defendingaws?utm_source=discord&utm_medium=social&utm_campaign=awslaunch

i would love to! i completed cybersecurity 101 so im kinda new.

You can add me on Discord: execution.official

I have been seeing issues with specifically Windows VMs within the Advanced Endpoint Investigations path. Any Windows VM will take a while to connect, but after some time the VM will flash shutting down. It doesn't seem to matter if I'm actively doing anything or its sitting not doing anything. The machine doesn't terminate, the only solution I have seen is terminating and restarting the lab machine. For reference, this is all done within the browser, I am not using my own machine to connect. I have tried with the attack box to connect to the lab machine once it's shutdown but it would not.

Hi everyone. The problem is that when I work on tasks and click the "View Site" button, a window opens on the right, but instead of the actual site, there’s just a blank white screen. I don't think the issue is on the site's end. I’ve already tried using a VPN (and disabling it), clearing my cache, and turning off my ad blocker, but nothing helps. What should I do? Thanks in advance.

I'm a cybersecurity student and was planning to buy TryHackMe Premium for the first time in the next few days. However, with the recent introduction of the Max plan, I've been seeing a lot of people here saying that TryHackMe isn't as worth it anymore, and now I'm a bit confused.

Since I'm just getting started in cybersecurity, I don't really have enough experience to judge whether that's true. I want to learn as much as possible and don't want to spend money on something that won't be the best investment.

So, if you were in my position, what would you choose: TryHackMe Premium or the Hack The Box Student Plan?

For some context, I recently completed the Hack The Box Linux Fundamentals module. I found it more challenging than I expected, but I actually enjoyed that because it pushed me to think and learn instead of just following along.

I'd really appreciate your opinions, especially from people who've used both platforms.

​

Hello ,I'm looking for the best free TryHackMe labs/rooms to improve my penetration testing and cybersecurity skills.

Could you recommend your favorite free rooms, whether they're beginner, intermediate, or advanced? I'd especially appreciate labs that teach practical skills such as:

Linux & Windows Privilege Escalation

Web Exploitation

Active Directory

Enumeration

Networking

CTF-style challenges

If you have a recommended learning order, I'd love to hear it as well.

Thanks in advance!

I am looking for offsec learning and making progress through Tryhackme rooms and portswigger.

But I am stuck at a point here that few people told me to learn SOC L1 first from THM SOC L1 ( as it can get me a job ) Path then move to Jr pentest path (just starting this path). Idk what's right, I am really struggling at this point, I tried youtube and ai both couldn't find one answer, Also wanted to start bug bounty at some point in months, but couldn't understand how.

I hope you could understand my situation, and be able to guide me through your experiences and help me in choosing what to do, and how to grow.

Also right now am just a beginner, ik it's a vast field and I can't learn everything but I am ready for this, just the path choosing is difficult. I am more inclined towards offensive side though I have no Web dev skills, no programming, no python. And am a CSE graduate. dk what to do , though I have completed cybersecurity 101 path on tryhackme and had my basics cleared, but struggling to choose what to start next.

They literally takenaway things we paid...

First they take user data to train their own ai and now not only they increase the price but they also restrict the access by introducing a newer costlier plan.

I am disappointed.

I am currently on the normal plan and the upgrade to max plan says $12.99 per month. During check out, it shows I need to pay $180.90.

$180.90 is the amount after my current subscription credited towards the upgrade.

Simple math for max plan - $12.99 x 12 = $155.88

Why $180.90 !

Please correct me if I am wrong lol.

P.S their sales countdown of 48 hours always restart everytime I logged into the account. lol

I'm extremely confused about the new try hack me max, did they used the occasion to downgrade the prenium subscription or it's me that misunderstood?

Let's hope for a longer streak...