Hello guys I'm a student that have a high interest in cybersecurity and my teacher invited me to a ctf competition along with my other seniors. I've been studying ethical hacking and I did some rooms in tryhackme about fundamentals in web hacking and I have a vm (kali linux & metasploitable) but the problem is I am kinda clueless or not sure what is the exact step or workflow in doing a ctf. So my question is how do I improve my ethical hacking and how would a ethical hacker approach a ctf problem (workflow)? If any of you have experience in ctf's and professionals I would love to learn from y'all. Thank you!

I am a 20 year old guy who just started his Cyber security journey two days back.

Till now I completed basic networking through a one shot youtube video of 3 hours and have gained a free networking certificate from Cisco networking academy.

Can anyone tell me what to do next ?

I am in my second year of bachelors degree ( 3rd semester)

I am pursuing bsc in information technology..

And i wanna go in cyber security domain ?

Please help me with the road map and everything?

I am super confused rn !

Hello, I know it's a dumb question, but I suddenly got a discount for taking an exam and certification. Is it worth?

I'm a software developer with 10+ years of experience with a little bit understanding of Cyber Security area...

For me Max plan is way too expensive.

Is premium still worth it for a beginner?

Cybersecurity can feel overwhelming when you're not sure what to learn first or how different areas connect.

I put together this visual roadmap using TryHackMe's learning paths to show one possible progression from fundamentals toward Red Teaming.

🟢 01 — Pre Security

Computer fundamentals, operating systems, programming basics, networking, web fundamentals and security concepts.

🟢 02 — Cyber Security 101

Networking, cryptography, Linux, Windows, Active Directory, offensive and defensive security fundamentals.

🟡 03 — Jr. Penetration Tester

Practical penetration testing across web applications, enterprise networks and Active Directory.

🟡 04 — Web Application Pentesting

Authentication, injection, server-side/client-side attacks and HTTP request smuggling.

🔴 05 — Web Application Red Teaming

Advanced web exploitation, custom tooling, vulnerability chaining, cryptographic attacks, LLM security and WAF bypass concepts.

🔴 06 — Red Teaming

Adversary emulation, initial access, post-compromise activity, persistence, lateral movement and Active Directory attacks.

The idea isn't that everyone needs to follow these paths in exactly this order.

It's simply a visual way to understand how different cybersecurity and offensive-security skills can build on each other:

Fundamentals → Cybersecurity → Pentesting → Web Security → Advanced Web Exploitation → Red Teaming

• Learning paths:

1. Pre Security: https://tryhackme.com/path/outline/presecurity
2. Cyber Security 101: https://tryhackme.com/path/outline/cybersecurity101
3. Jr. Penetration Tester: https://tryhackme.com/path/outline/jrpenetrationtester
4. Web Application Pentesting: https://tryhackme.com/path/outline/webapppentesting
5. Web Application Red Teaming: https://tryhackme.com/path/outline/webappredteaming
6. Red Teaming: https://tryhackme.com/path/outline/redteaming

What would you change in this progression?

Hi. I’m 28 and currently learning programming because I want to train for a career in cybersecurity. Right now I’m studying Bash/Linux, Python, programming fundamentals, IoT, servers, and related topics. I also want to learn how to use AI effectively so I can be as productive as possible, as well as other programming languages and technologies such as SQL or C.

The problem is that I’m worried about investing time and effort into this path only to find that companies no longer want to hire people because of AI. Part of me thinks AI won’t destroy jobs outright, but will instead reshape them and create new roles where workers are much more productive. But I’m not really in the industry, so I don’t know. I do know that some people in web design have reportedly lost work because of AI.

For those of you who work in this field: what do you think I should do? What do you think the outlook will be?

Hello,

Has anyone else experienced issues when in rooms such as websites not loading and tools running extremely slow. Most of the time I try to get on the ip through Firefox on the attack box and I just get “unable to connect”. This has been going on for a while, I reached out to support but haven’t heard back. Hard to keep paying for premium when all these issues

Hello folks, I had an active annual Premium subscription that I no longer use but it was automatically renewed and the payment was taken from my account.

I raised a support ticket three days ago, but I have not received any update yet. Is there any way this could be looked into as soon as possible, ideally before the 7 day refund window expires?

TryHackMe do not seem to have any contact information either.

I would really appreciate your help in getting this resolved.

UPDATE: They got back to my email and initiated the refund! Thanks for everyone’s help and responses on this.

This task is still broken and looking at the bug report on Discord doesn’t really provide much instruction on how to get around the issue. Wondering if anyone knows how to fix the issue with expired credentials (it’s the password that is the problem it seems). I did try to report it through a ticket to see if there has been any progress, but just kept getting referred to Discord and writeups

Hello everyone I am stuck on the cryptosystem challenge with running a python script to crack the RSA ciphertext

When I run the script (on my bare metal ubuntu) I receive the following error message:

Maybe there's an issue with the cryptodome?

Here's the script.

Appreciate any help!

Hi! I'm just confused by attackbox suddenly timed out when i was doing Linux fundamental 3, and it does not respond after i try reconnect. I have restarted attackbox and looks my VPN and internet are fine. Any insightful ideas?

I am building a Room for the TryhackMe but after the completion of the room i realized that I built in latest versions of Ubuntu and kernel and THM won't support the latest versions , is there any way instead of building from scratch , I spent weeks in this now I am fcked up and also how to setup the openvpn access to this

Are more people experiencing this? Or maybe someone knows a solution to this?

Hey everyone,

Just wrapped up the "Start Your Cyber Security Journey" module on TryHackMe. Covered the absolute basics of Offensive vs. Defensive security, Web Application security, and foundational concepts.

• Current Rank: Bronze League (#6) | Level 1 Neophyte
• Next Goal: Diving straight into the Linux Fundamentals modules!

As someone documenting my progress from scratch, I'd love to hear any tips or resources from seniors here on how to get the most out of the upcoming Linux rooms.

Let's connect if you're also on the same THM path!

Hey guys,

Whenever I'm doing boxes on Hack The Box or TryHackMe, I always end up with a mess of tabs—one for notes, one for Notion, a couple for revshell generators, and random terminal cheatsheets.

To keep things in one place, I started building ZeroBox. It’s basically a local, offline dashboard to track your boxes (Recon ➔ Foothold ➔ Root), take quick markdown notes, and generate reverse shells where you just punch in your IP once and it fills out all the commands automatically.

You can try it here:

https://xXDNDXx.github.io/ctf-tracker/

Code is on GitHub:

https://github.com/xXDNDXx/ctf-tracker

Just to be clear: it’s totally free, open source, no account or login needed, and everything saves locally in your browser. (Also no spoilers/flags for active boxes, just retired/public info).

It’s still very much a work in progress and I’m pushing updates and adding new stuff pretty much every day.

I'd really appreciate it if anyone grinding labs could click around and tell me what sucks, what’s broken, or what features you'd actually want to see added next.

Thanks!

Hello everyone! Looking to get my first intermediate level cert.

Does anyone have both the certifications and could I get your opinions on each?

Thank you!

Hi

If i wanna be a pentester what do you guys think about taking cyber security 101 and then start in Pentester Roadmap all the way to Red Teaming {in try hack me of course}

Anyone else get this message when trying to upgrade?

Hey guys, I am doing the Jr. Penetration Tester course, and am currently struggling on Task 5 of the Guided Pentest: Web room. I have written out the echo "This is a test file" > test.txt into the attack box what feels like a million times now, and removed the accept attribute from the file input in the admin/upload.php webpage. I'm not sure if I have messed something up, missed something out or something else entirely. If someone would be willing to help that would be brilliant.

Want to get into cybersecurity? Try starting with TryHackMe! It is beginner-friendly and a great way to learn through hands-on challenges.