Blog topic // Curated
These spoiler-conscious TryHackMe walkthroughs document the investigation process behind each room, including the evidence, tools, commands, and security lessons that led to a solution. Flags remain masked so the focus stays on repeatable methodology rather than answer collection.
A walkthrough of Management Wants a Word, a TryHackMe Windows forensics room involving a KAPE dump, cracked local credentials, DPAPI master keys, Chrome secrets, and a VeraCrypt container hiding the flag.
A walkthrough of The Guestbook, a TryHackMe AI security challenge where VERA turns guestbook entries into manager-authorized shell commands.
A walkthrough of After Hours, a TryHackMe forensics challenge involving a Windows WMI repository, a custom class, raw DEFLATE, and a .NET payload.
A walkthrough of Infinity Pool, a TryHackMe Boot2Root room involving command injection, exposed internal configuration, FreePBX, and a root-owned automation API.
A beginner-friendly walkthrough of The Hollow Shell, a TryHackMe web challenge that combines a login leak, archive upload abuse, LFI, and server-side hook execution.
A beginner-friendly walkthrough of CryptoCabana, a TryHackMe Azure challenge involving a leaked SAS token, exposed service-principal credentials, and Key Vault secret versions.
A beginner-friendly walkthrough of Towel on the Sunbed, a TryHackMe web challenge involving a race condition in a daily reward mechanism.
A walkthrough of Do Not Disturb, a TryHackMe Boot2Root room involving NoSQL injection, EJS template injection, an exposed Node.js inspector, and disk-group privilege escalation.
A quick OSINT walkthrough of Overheard at Breakfast, a TryHackMe Hacker Holidays room about tracing an email address to a hidden Gravatar profile.
A beginner-friendly walkthrough of Beach Bar, a TryHackMe Linux challenge involving exposed credentials, unsafe YAML deserialization, and a password leaked through a root process.
A beginner-friendly walkthrough of Packed Light, a TryHackMe network forensics challenge about recovering XOR-encrypted keystrokes from HTTP cookies.
A beginner-friendly walkthrough of Complimentary, an AWS cloud security challenge involving Cognito guest credentials and an over-permissive DynamoDB role.
A beginner-friendly walkthrough of Room 404, a TryHackMe web challenge about directory enumeration and an exposed Git repository.
A beginner-friendly walkthrough of The Concierge Knows Too Much, an AI security challenge about identity spoofing and prompt disclosure.
A beginner-friendly OSINT walkthrough of The Brochure, the warmup room for TryHackMe’s Hacker Holiday series.
A beginner-friendly TryHackMe Digital Footprint OSINT walkthrough covering EXIF metadata, WARC archives, reverse-image search, and document metadata.