Completed another one! This might be better than I thought. The format of TryHackMe's website-- the design of the website reminds me of Duolingo which I've been learning French on.

🤔🤷🏽‍♀️😊

I'm in senior year and I'm looking for sites to practice for majoring in cyber security. I'll probably post my achievements here since TryHackMe is urging me to...maybe give myself some credit

Yay!

if you wanna join drop your user

Does tryhackme subscription worth it
till now i was solving only free labs but now i'm solving a module where their are many paid labs and walkthrough

and to complete the module i need to buy pro subscription
so is it worth it or free labs are enought for practice for Offensive labs

OH MY GOSH....this was hard for me. I'm more into coding, I'm horrible at assembling things.

but hey, I did it!

Hi everyone! I started learning cybersecurity a few weeks ago using TryHackMe, and I've completed all the free rooms in Pre Security and Cyber Security 101.

However, I can't access the Premium rooms without a subscription. Is there any way to access or learn the content from those rooms for free?

I have exams coming up in a few months, so I'm worried that I won't have enough time to make the most of a Premium subscription right now.

My current plan is to wait until after my exams to subscribe to Premium, then go back and complete the rooms I've already studied before moving on to more advanced topics.

Do you think this is a good approach, or would you recommend doing something different in the meantime?

I'd really appreciate any advice or suggestions. Thanks in advance!

Hi all

So, I'm very early in the THM paths and I've noticed quite a few discrepancies between what the lesson tells me I should be seeing and what I'm actually seeing.

This is the latest:

By using "ls -1", the lesson says I should see important info about the files and directories, but I don't.

Am I doing something wrong?

Are errors like this normal in THM?

i submited a writeup to a room how long is it til it gets aproved or declined ?

Yay! Pretty easy but i think it is pretty fun.

Got to look at how DNS translates domain names to IP addresses, domain hierarchy, dns record types and so much more. On to the next.

The title might seem out of place in the TryHackMe community, but it’s just meant to be catchy, nothing more.

It all started when I was watching a TV series about hacking, and I got fascinated by this world. Back then, I was learning web development and spent a lot of time in tutorial hell. It went on for a very long time, guys. I wouldn’t be lying if I said it lasted three years.

When I finally decided to learn cybersecurity, I started with educational videos. And you know how they can be a double-edged sword. Passive consumption doesn’t make you a hacker, a swimmer, or even a programmer.

Then, by chance, I stumbled upon TryHackMe. I thought I’d give this free room a try, but I quickly fell in love with the content, the structure, and the fact that they were building something specifically for beginners at a very affordable price.

After about two months, I had completed paths like Pre Security and Cyber Security 101, and made it through around 40% of Jr Penetration Tester.

Around that time, I became comfortable sitting in front of a machine that gave me no guidance, with nothing but an empty black terminal in front of me.

They do amazing work, and they’ve succeeded at what they set out to do.

They managed to turn someone who passively consumed content into a beginner who could sit down, tackle a machine, experiment, and fail, all within a relatively short time. And they did that despite my long history of passive learning.

They truly accomplished their goal. They openly acknowledge that their content is designed for beginners, and here I am, a beginner who has been given the tools to start his journey.

I genuinely appreciate that and everything they’ve done. They gave me so much, and I’m grateful for it.

But eventually, you reach a point where you feel the need to develop a deeper understanding of what you’re doing. So I decided to move forward with my journey, one in which this platform has been an incredible starting point.

I haven’t become the hacker who changed the world, nor am I capable of solving the hardest challenges out there. But they gave me the foundation I needed to keep moving forward.

I’m not exceptional, and I’m far from being highly skilled. But they gave someone like me the initial push he needed to get started.

And in the end, I felt it was only right to write this thank-you letter as a small way of giving something back.

tryhackme was very fast with this room

Like many others I was curious to learn about the new BIG vulnerability affecting php . So i went to read tryhackme's room on it . It took me 2 paragraphs to feel something is a bit off , I've read and written(mainly for linkedin posts) a lot of LLM-generated text . And sure enough it was 100% AI generated !!!!!! WHAT A DISAPPOINTMENT

#security #chill #reddit

#Start from begining #cybersecurity #cyber crime

Hi everyone,

With Black Friday coming up next month, I’m planning my training budget for next year and wanted to ask two things: one about pricing, and another about whether THM actually fits the direction I’m taking in my career.

1. Black Friday Annual Pricing:

How much does the Annual Premium subscription usually cost during the Black Friday sale? I’ve seen posts mentioning a 40% discount in past years (bringing it down to around $75–$80 USD for the year). Is that the price range I should expect this November?

1. Is THM a good fit for my path? (A bit of context):

I’m currently on Year 3 of a 10-year career plan aiming for a CISO role or a senior InfoSec Governance (GRC) leadership position in the public sector. Right now, my profile looks like this:

Current role: For the past year, I’ve been working in Information Security within the government sector.

Education & Current Study: I hold a Master’s in Cybersecurity and a postgraduate specialization in InfoSec. I spend most of my time working with NIST guidelines and our national government security frameworks, and I’m sitting for the CISSP exam in 5 months.

Future direction: I’m still deciding whether to aim for an executive CISO track or become a high-level subject matter expert (SME) in Government InfoSec, Risk, and Data Privacy. Either way, my main goal is to master Information Security first while gradually building strong expertise in Data Protection/Privacy.

Why I’m asking:

About 8 months ago, I bought an annual subscription to a generalist tech platform here in Latin America (Platzi), and the ROI was terrible—the content was way too basic for what I needed.

I don't want to make another bad purchase this Black Friday. Since my day-to-day is heavily focused on InfoSec standards, NIST, risk, and government compliance—rather than being a full-time pentester—does getting a TryHackMe annual subscription for next year make sense for me?

Would the Blue Team / SOC / defensive paths help me build a stronger technical foundation for my Gov/InfoSec career, or would they just distract me from my CISSP and Privacy goals? If THM isn't the right fit for this path, what platforms or resources should I be aiming for instead?

Thanks a lot for reading and for any advice!

This is 3rd time in a single room, this is connecting to a remote machine for eternity.

I accidentally upgraded from Premium annual plan to Max annual plan, thinking it would bring me to checkout page. I submitted the ticket in the website chat 9 hours ago just wondering how long it would usually take for the refund request to be done? I am just nervous as the upgrade costed alot of money.

EDIT: Ok I just received the response shortly after making this post. Idk if it was a coincidence or not but thank you to to the support staff

Trying to break into the cybersecurity space and decided to get familiar with Siems by taking the SAL1 before the CYSA+. Any study tips?

I'm thrilled to announce that my TryHackMe room, "The Auditor's Return", is now live! 🚀

Instead of just solving challenges, I wanted to build one. This room is designed to teach security auditors the difference between a vulnerable application and a properly patched one.

What I built to make this happen:

· A custom Dockerized environment running two separate Python web servers (Vulnerable & Secure).

· Automated the Docker image build and publishing using GitHub Actions and GHCR.

· Routed public traffic to my local Termux environment using Cloudflare Tunnels.

· Designed the CTF narrative and tasks on the THM Author Dashboard.

If you want to test your AppSec skills (File Read, SQLi, XPath Injection), check it out here:

[Paste your TryHackMe URL here]

#TryHackMe #CyberSecurity #AppSec #Docker #Cloudflare #CTF #HumbuWandeme

Hey everyone,

Whenever I do a box that involves getting WP admin credentials, manually logging into the dashboard, navigating to plugins, and clicking "Upload" to drop a PHP reverse shell always felt too slow.

I wanted to automate the process from the terminal, so I spent some time figuring out the exact curl syntax to do it. It’s a great way to understand how WordPress handles authentication and CSRF protection under the hood.

The core workflow comes down to 3 steps:

1. The Login: Sending a POST request to wp-login.php and saving the session cookie (-c cookie.txt).
2. Grabbing the Nonce: WordPress uses a nonce for security on plugin uploads. You have to GET the plugin-install.php page with your cookie and grep/awk out the _wpnonce value.
3. The Payload Upload: Finally, using curl -F to send the malicious zip file as multipart/form-data, passing both the cookie and the nonce.

Automating this really helped me understand HTTP requests better rather than just relying on the browser.

If you want to see the exact bash commands and cURL syntax I used, I wrote a full breakdown on my blog here: [https://medium.com/@0xShell/beyond-the-browser-automating-authenticated-wordpress-plugin-uploads-with-curl-e357cfb3ff3e\].

Hope this helps speed up your workflow on your next box! Let me know if you guys have other ways you automate WP exploitation.