I'm thrilled to announce that my TryHackMe room, "The Auditor's Return", is now live! 🚀

Instead of just solving challenges, I wanted to build one. This room is designed to teach security auditors the difference between a vulnerable application and a properly patched one.

What I built to make this happen:

· A custom Dockerized environment running two separate Python web servers (Vulnerable & Secure).

· Automated the Docker image build and publishing using GitHub Actions and GHCR.

· Routed public traffic to my local Termux environment using Cloudflare Tunnels.

· Designed the CTF narrative and tasks on the THM Author Dashboard.

If you want to test your AppSec skills (File Read, SQLi, XPath Injection), check it out here:

[Paste your TryHackMe URL here]

#TryHackMe #CyberSecurity #AppSec #Docker #Cloudflare #CTF #HumbuWandeme

Hey everyone,

Whenever I do a box that involves getting WP admin credentials, manually logging into the dashboard, navigating to plugins, and clicking "Upload" to drop a PHP reverse shell always felt too slow.

I wanted to automate the process from the terminal, so I spent some time figuring out the exact curl syntax to do it. It’s a great way to understand how WordPress handles authentication and CSRF protection under the hood.

The core workflow comes down to 3 steps:

1. The Login: Sending a POST request to wp-login.php and saving the session cookie (-c cookie.txt).
2. Grabbing the Nonce: WordPress uses a nonce for security on plugin uploads. You have to GET the plugin-install.php page with your cookie and grep/awk out the _wpnonce value.
3. The Payload Upload: Finally, using curl -F to send the malicious zip file as multipart/form-data, passing both the cookie and the nonce.

Automating this really helped me understand HTTP requests better rather than just relying on the browser.

If you want to see the exact bash commands and cURL syntax I used, I wrote a full breakdown on my blog here: [https://medium.com/@0xShell/beyond-the-browser-automating-authenticated-wordpress-plugin-uploads-with-curl-e357cfb3ff3e\].

Hope this helps speed up your workflow on your next box! Let me know if you guys have other ways you automate WP exploitation.

Do you how can i get a discount for monthly subscription?

Hey everyone! 👋

I've created a CTF team on TryHackMe, and I'm looking for people who want to team up for the upcoming "It's Downtime" event.

You don't need to be an expert or a top-ranked player. Whether you're a beginner or an experienced player, you're welcome to join as long as you're interested in learning, solving challenges, and working together. Just have basic cyber knowledge.

I also don't have much CTF experience so we'll learn together. 😉

DM me if interested.

Here is my THM profile btw :-
https://tryhackme.com/p/darklord.mg

Bruhh i did this room like 4 times but everytime i got at the end and complete the final mission it doesn't close i am stuck here lesson name is computer types pls someone help me with this

again one step closer

Writing this because I feel l can’t be the only one suffering some horrendous issues on the site and with the Echo chatbot overall. The lack of communication back from the support team has been woeful, the chatbot doesn’t seem to understand/comprehend requests that don’t fit the preprogrammed route it wants you to take and some of the rooms just straight up don’t connect even after multiple restarts of both AttackBox and VPN. Not sure what is going on and it seems suggestions for fixes are never responded to - can’t learn if things are broken and the chatbot is straight up not responding to suggestions

I wanted to see if Prolog could handle production-grade web traffic, so I built an HTTPS-secured WAF in SWI-Prolog. To test its limits, I deployed it on a free-tier GCP instance with only 1 GB RAM (roughly 450 MB available after OS overhead).

Surprisingly, the entire stack operates comfortably within this limit using Prolog's lightweight threads. I'd love to get some feedback on the architecture, and feel free to try and break it!

Hey everyone!

I'm a cybersecurity learner working on a small, unofficial WhatsApp community for TryHackMe learners.

The idea is to make useful cybersecurity resources easier to discover and keep up with, especially for students and beginners.

What I'd like to share:

Cybersecurity learning roadmaps and resources

TryHackMe learning tips and permitted room writeups

Workshops, meetups, and learning opportunities

Useful community updates

I'm hoping to build something genuinely helpful rather than just another group full of random messages.

I'd love your feedback: What resources or updates would actually make a cybersecurity learning community worth following?

If the subreddit rules allow community links, you can check it out here: https://whatsapp.com/channel/0029VbDvKaqCnA80S4Vhxb0u

Disclaimer: This is an independent community and is not affiliated with or endorsed by TryHackMe.

Thanks, and happy learning!

I am a final-year undergraduate CSE student. Due to my laziness, I have mostly focused only on academic studies. As a result, my CGPA is good, but in reality, I do not have many practical skills. At the moment, I feel like I have wasted a lot of my time.

I know Python, C, C++, Java, and JavaScript, but only at a basic level, just enough to pass my exams. Now I feel that I should develop some real skills. I am interested in cybersecurity, so after watching many videos about it, I started learning through TryHackMe.

However, after completing 47 rooms, I feel like I have not learned very much. Most of the time, I simply memorise the answers and complete the tasks rather than truly understanding the concepts. Because of this, I am worried that I am not making real progress.

Can someone please give me some advice on how to actually learn from TryHackMe and improve my cybersecurity skills efficiently?

Why does the Max plan show ₹79.82 per month? My current Premium plan costs ₹499 per month. If I upgrade to Max, will I be charged ₹79.82 every month?

I thought the Prompt Security and AI Supply Chain Security modules were good but the threat modeling and security control exercises was a bit unclear.

Also generally a long exam, probably took me around 8.5 hours to complete. You'll be writing a LOT.

Full length review here: https://meetcyber.net/an-honest-review-of-the-tryhackme-ai1-certification-e90e23bb9fed

I want to start my journey in cyber security but I do not have any specific degree on it or I am not in science group education. But I have a great curiosity about this field. I love computer and try to understand the system that how it works but somehow I get destruction all the time. I need a help that how I will crack this field or how to start the journey. What is the path that will be actually work not any inspiration not any overwhelming or like that.

Please help. As a friend support me to grow as real life scenario.

I will wait for your reply.

Thank you.

Hey, To start off ive done a few free cisco certs ,finished Pre-Sec and CybSec-101 from TryHackMe an im learning from youtube aswell , i feel like i dont know actual cybersecurity as in how to detedct inrusions how to mitigate ,identify or perform attacks how to use the tools in kali or the ones that i do know i dont actually know what it does im planning to take a a different approach like seeing tutorials in utube or sum and practising them (but how? do i do it by locally running attack victim VMs and how to do that )and starting sessions at the portswigger academy. I want to do ctfs yet know nothing that is an issue too

Hey everyone :)

I wanna get in to Cyber Sec, I have Little to 0 Experience in IT just Playing Video Games all my life.
I think to get in to Cyber Sec i I first need to unterstand the Basics of IT in general .
What are good Ressources to understand the Basics Like Networking, OS and so on.

Thanks in advance!

Not sure why there is an X over a day in the day streaks?