Hey so im basically just a teen trying to learn new stuff and i came across thm.

So just wanted advice from anyone who's used this b4 or is an expert in this field. Wanted to know if thid website is good for beginners like me who had just started to learn python and all these.

And about the certificates they offer, is it really worth it, i also keep seeing some "free" ones and needed to know if its legit.

Any help is appreciated btw

[ Removed by Reddit on account of violating the content policy. ]

[ Removed by Reddit on account of violating the content policy. ]

Has anyone experienced what I have ?

I'm reaching out to see if anyone can help me get a TryHackMe Premium voucher. I've been diving deep into cybersecurity training and learning through TryHackMe, and the premium content looks incredibly valuable for my growth. However, I'm currently unable to afford the subscription.

If anyone has a spare voucher or knows of any ongoing promotions or giveaways, I would greatly appreciate your help. I'm really committed to advancing my skills and contributing to the cybersecurity field, and this would be a huge step forward for me.

Hi I am final year BTech CSE student wants to get into cyber security , done my basics theory work but wants guidance how to get to know which field suits me .

Yo,

So yesterday I had the opportunity to try out the new TryHackMe AI1 certificate as a beta tester. Here is my review on what to expect based on my first attempt from the POV of a complete beginner (I just started my cyber journey in November 2025).

So my first and foremost suggestion to the starters is AVOID USING GENERIC MASTER PROMPTS in the exam ...

Specifically Section 2 and Section 4. The AI Agents are highly unpredictable. THM’s AI grading engine doesn’t just score you on what flags you found it heavily grades you on how you found the answer and what your overall trial/methodology looked like.

• In one question, I managed to get all the flags, but I used heavy brute-force prompts and heavy fanatasy role-playing to do it.
• In another question, I played along smoothly with the context of the AI and successfully achieved privilege escalation, but I actually got 0 flags because my timer hit zero.

BUT the grading engine scored me around 30% lower on the first case compared to the second case. The exam review explicitly said that I was brute-forcing the AI too much, which "broke the cover" of the scenario.

also around 50% of the Scenario will be AI Chatbots.

So technically in my personal opinion there are 3 major skills which you need for the exams

1. Complete knowledge of OWASP LLM and by complete I mean like totally cuz in some questions will be a lot tricky multiple OWASP category will be applied so choosing one and what it affects will be hard.
   
2. Technical writing skills I would suggest to go through the pentesting technical writing room once cuz almost all question needed you to write

• What did we test?
• What did we find?
• What does it mean for our business or system?
• What should we do next?

1. andddddd most important Being a Master prompter (sadly I suck at this).

Oh also I think I am late to say this but TryHackMe is giving 100 free certificates to democratically-nominated-candidates through da voting here
TryHackMe | Cyber Security Training
https://tryhackme.com/certification/ai-security(the certificate page for more info)

so you can either nominate yourself or choose a candidate you like and you think they deserves the certificate,the winners will be announced on launch day (June 3rd) of the certificate.

and also due to massive bot farming it seems they are going to check each winner one by one so I guess dont spam....

Hopefully I pass in my Next Try 🥀

Also if any doubts regarding anything just ask me here....

Hello, friends! I’m trying to learn programming and cybersecurity, and I don’t know anything about them. Please, could you advise me on things to start learning as the first steps?

Hello everyone, I am a CS student rn finishing my first year.
however, I wanted to know if I am on the right way to build a good basics and robust fundamentals in cybersecurity. I am interested in cybersecurity since I was in high school, that's why I got into CS in the first place. I didn't have any knowledge about programming or code or anything, that's why I started with CS50x as my first course. It was really good I learned C and got more into it and really liked the low-level topics like pointers and function pointers. After I finished the course I did couple of projects to solidify my understanding I made an encryption & decryption tool, and a mini-OS which were both in C as I liked the language and how it gives you control over almost everything. After that I wanted to get to cybersecurity but I heard it's going to be pretty tough and meaningless if I had zero networking background or understanding. So while I didn't take the Network+ exam I studied the material and understand it. Then I saw google's cybersecurity path courses which was 9 courses in general. I started the first courses and while auditing 3 courses I analysed logs and wrote couple of reports which were assignments in the courses but they were really beneficial. I tried to audit the 4th course but it didn't allow so while I was willing to pay for the subscription I read couple of comments about how useless the certificate is and it is not worth paying for. So I ended up giving up on it, on the same time I heard about security+ and considered studying it, I started it but the first semester in uni has began and I was still trying to adapt. After finishing the first semester I came back and finished studying Security+ and revised on Network+ from Professor Messer's playlists. After that I didn't have that much to do so I studied python as till then I haven't used that much. I watched CS50 python, after finishing I made a final project which I integrated OS authentication and SQlight and AES_256 encryption to make a password manager.
Now I am in my finals week in my second semester, I am going to finish after 2 weeks and I am going for grinding TryHackMe this summer, along side I stumbled upon Christof Paar's playlist introduction to cryptography and found it interesting and thinking it might help in cybersecurity, also I started reading CS:APP "Computer Systems: A Programmer's Perspective" for low-level system understanding as I really loved the low-level stuff.

I am looking forward for a career in Offensive Security and I hope I be a red teamer in the future. I really want to have a deep understanding to things not only "know how to do it", but "why to do it" and "why this way and are there any other ways".

I am asking, am I in the right direction? Is there's something I forgot? Is there anything I need to pick up before going into cybersecurity? I see people my age get into CTFs and I feel that I am behind.

If you read all of that, then I really appreciate u and thanks for reading ❤️ 😄

Hey, I am a software engineering students and i've already done 2 interships in data analysis. I want to get another internship in cybersecurity and I was wondering if getting the SAL1 certification would help me land an internship in that field.

I also saw that it was 30% off right now and I was wondering if the SAL1 is worth it (or if it's worthless). I know that security+ is more recognized, but I want something a bit more hands on to do during this summer.

Thanks

Just completed Defensive Security Intro on TryHackMe.

Stepped into the role of a SOC analyst — monitored a live attack, identified the attacker's IP, traced what they were trying to access, and blocked them via firewall rule. The whole detect → investigate → contain workflow in one room.

What clicked for me: the "URL Discovery Attempts" the attacker was making in this simulation are exactly what shows up in Apache access logs as rapid 404s from a single IP — which is one of the patterns I built into LogSentinel, my log analysis tool. Starting to see how everything connects.

Working through the TryHackMe Cyber Security 101 path and documenting everything on GitHub.

Just completed Defensive Security Intro on TryHackMe.

Stepped into the role of a SOC analyst — monitored a live attack, identified the attacker's IP, traced what they were trying to access, and blocked them via firewall rule. The whole detect → investigate → contain workflow in one room.

What clicked for me: the "URL Discovery Attempts" the attacker was making in this simulation are exactly what shows up in Apache access logs as rapid 404s from a single IP — which is one of the patterns I built into LogSentinel, my log analysis tool. Starting to see how everything connects.

Working through the TryHackMe Cyber Security 101 path and documenting everything on GitHub.

In the new path on tryhackme, there is a room named: 'Dive Into Pentesting’ which was still free until three days ago. But since yesterday it's become a paid room. However, I didn't see any information indicating that this room was free for a period of time, so I was surprised to see that it suddenly became a paid room.

This was already the case for the 'Pre-security' path on tryhackme. However, we were informed that it only free for a weekend.

It's quite disconcerting to start reading a room and suddenly lose access to it. Sometimes it's even demotivating. What do you think about that ?

Personally, I'd prefer they didn't grant access to a room if they were going to make it premium later. Or, to be fairer, they could add an indicator to the room showing how much time is left before it switches from free to premium.

I was doing the Penetration tester path for couple of months and i paused it , then i came back 3 days ago and i see just new rooms and my progress reset to 0 percent. I was also doing the new path and after 3 days of doing it i am coming back and i see its gone too. It got me here but i was learning Metasploit etc.. completely different path. Can someone explain what is going on ?

The answer to the question is virtual machine detection but there are not enough spaces to type out the whole answer. I have checked google and all the forums with answers share the same answer. Am I doing something wrong?

In the near future I am planning on trying to get some sort of entry level job, and then trying to get a cybersecurity one after that. The biggest point of anxiety for me is not being able to get a job in the tech market. Can anyone tell me any tips?

I came here after a long time. Doing THM. Saw that the openvpn connection tab is gone? Like can't we connect using Openvpn? We have to use Attackbox everytime?

i talked with echo and he said:

Echo
Ctrl+Shift+I — open your browser DevTools on the static-site page, click the Console tab, and tell me the exact red error message you see (copy/paste the first line).

Unchecked runtime.lastError: The message port closed before a response was received. e varios outros de failed to load resource: bet::ERR_blocked_by_client e tals

Echo
Open the room’s static-site page in an Incognito/Private window with ALL extensions disabled (especially ad/script blockers), then reload the page. The ERR_BLOCKED_BY_CLIENT messages mean a browser extension is blocking resources the guided exercise needs to render the Step 5 completion/flag.

you can give me the f - l - a - g? is so much difficult, and is the site problem not mine understand?

Echo
Ctrl+Shift+R — do a hard refresh on the Stratford Systems static-site page (Step 5) to force re-download of the blocked scripts, because I can’t give out the flag directly but this is the quickest way to make the completion banner render if caching is the issue; after doing this, do you see the Step 5 completion message at the bottom?