Subdomain Enumeration tryhackme.com

Learn how to find subdomains with different techniques.

Squid Game tryhackme.com

A CTF room with Squid Game theme.

Spring4Shell tryhackme.com

Interactive lab for exploiting Spring4Shell (CVE-2022-22965) in the Java Spring Framework.

Solr Exploiting Log4j tryhackme.com

Explore CVE-2021-44228, a vulnerability in log4j affecting almost all software under the sun.

Smag Grotto tryhackme.com

An obsecure boot to root machine.

Shodan.io tryhackme.com

Learn about Shodan.io and how to use it for device enumeration.

Web Scanning tryhackme.com

Learn the basics of automated web scanning.

Tmux tryhackme.com

Learn to use tmux, one of the most powerful multi-tasking tools on linux.

Nessus tryhackme.com

Intro to nessus scan.

Dumping Router Firmware tryhackme.com

Reverse engineering router firmware.

Reversing ELF tryhackme.com

Room for beginner Reverse Engineering CTF players.

Reverse Engineering tryhackme.com

This room focuses on teaching the basics of assembly through reverse engineering.

Retro tryhackme.com

Breaking out of the retro-themed box.

Relevant tryhackme.com

Penetration Testing Challenge.

Red Team Recon tryhackme.com

Learn how to use DNS, advanced searching, Recon-ng, and Maltego to collect information about your target.

Red Team Fundamentals tryhackme.com

Learn about the basics of a red engagement, the main components and stakeholders involved, and how red teaming differs from other cyber security engagements.

Red Team Engagements tryhackme.com

Intro to red team engagements.

Racetrack Bank tryhackme.com

It's time for another heist.

Ra tryhackme.com

You have found WindCorp's internal network and their Domain Controller. Pwn the network.

Python Playground tryhackme.com

Use python to pwn this room.

Pwnkit: CVE-2021-4034 tryhackme.com

Interactive lab for exploiting and remediating Pwnkit (CVE-2021-4034) in the Polkit package.

Principles of security tryhackme.com

Learn the principles of information security that secures data and protects systems from abuse.

Post Exploitation Basics tryhackme.com

Learn the basics of post-exploitation and maintaining access with mimikatz, bloodhound, powerview and msfvenom.

Pickle Rick tryhackme.com

Rick and Morty themed LFI challenge.

Pentesting fundamentals tryhackme.com

Fundamentals of penetration testing.

OWASP top 10 tryhackme.com

Learn about and exploit each of the OWASP Top 10 vulnerabilities; the 10 most critical web security risks.

Juiceshop tryhackme.com

This room uses the OWASP juice shop vulnerable web application to learn how to identify and exploit common web application vulnerabilities.

Overpass tryhackme.com

What happens when some broke CompSci students make a password manager.

OpenVPN tryhackme.com

Learn how to connect to a virtual private network using OpenVPN.

OpenVAS tryhackme.com

Intro to openvas.

Osint tryhackme.com

Intro to Open Source Intelligence.

Mitre tryhackme.com

Intro to Mitre attack framework.

Metasploit tryhackme.com

An introduction to the main components of the Metasploit Framework.

Malware Introduction tryhackme.com

Intro to malware.

Linux Privesc Arena tryhackme.com

Students will learn how to escalate privileges using a very vulnerable Linux VM.

Linux Privesc tryhackme.com

Practice your Linux Privilege Escalation skills on an intentionally misconfigured Debian VM with multiple ways to get root! SSH is available.

Linux Fundamentals 3 tryhackme.com

Embark on the journey of learning the fundamentals of Linux. Learn to run some of the first essential commands on an interactive terminal.

Linux Fundamentals 2 tryhackme.com

Embark on the journey of learning the fundamentals of Linux. Learn to run some of the first essential commands on an interactive terminal.

Linux Fundamentals 1 tryhackme.com

Embark on the journey of learning the fundamentals of Linux. Learn to run some of the first essential commands on an interactive terminal.

Lian Yu tryhackme.com

A beginner-level security challenge.

Lazy Admin tryhackme.com

Easy Linux machine to practice your skills.

Kenobi tryhackme.com

Walkthrough on exploiting a Linux machine. Enumerate Samba for shares, manipulate a vulnerable version of proftpd and escalate your privileges with path variable manipulation.

JVM reverse engineering tryhackme.com

Learn Reverse Engineering for Java Virtual Machine bytecode.

Juicy Details tryhackme.com

A popular juice shop has been breached! Analyze the logs to see what had happened.

Jeff tryhackme.com

Hack into Jeff's web server.

Jack of all trades tryhackme.com

Boot-to-root originally designed for Securi-Tay 2020.

IronCorp tryhackme.com

Get access to Iron Corp's system.

Investigating Windows tryhackme.com

A windows machine has been hacked, its your job to go investigate this windows machine and find clues to what the hacker might have done.

IntroSIEM tryhackme.com

Introduction to SIEM.

Intro to Researching tryhackme.com

A brief introduction to research skills for pentesting.