Projects
View on GitHub
Esther7171/TryHackMe-Walkthroughs
Esther7171/TryHackMe-Walkthroughs has 81 GitHub stars and 15 forks. GitHot measured 0 stars in 24 hours. Last checked 2026-11-15 04:20 UTC. Last push 2026-11-05.
Measured star growth
- in 24h
- 0
- in 7 days
- Collecting history
- in 15 days
- Collecting history
- in 1 month
- Collecting history
Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.
About
143 TryHackMe walkthroughs and writeups: web exploitation, privilege escalation, CVEs, container escapes, OSINT and more, step by step.
SecurityREADME.md
Original
TryHackMe Walkthroughs & Writeups
143 TryHackMe walkthroughs and writeups, one for every room I have completed: the steps I took, the commands that worked and what I learned along the way. Each room has its own folder under Room/ with a step-by-step writeup.
They cover web exploitation, CVE research, Linux and Windows privilege escalation, container escapes, binary exploitation, DFIR, OSINT and AI/LLM security, from beginner rooms to hard CTF boxes.
Read them on the website: deathesther.tech/writeups, with search, difficulty filters and flags hidden until you ask for them.
Rooms: 83 Easy, 36 Medium, 8 Hard, 16 Info. Rooms marked only flag hold the answers only; the full walkthrough is still to be written.
Walkthroughs
All 143 TryHackMe walkthroughs in this repository, A to Z. Each one is also on deathesther.tech/writeups with search and filters.
| Room | Difficulty | OS | Description | Topics |
|---|---|---|---|---|
| 0day | ${\color{#d29922}\textsf{Medium}}$ | Linux | Exploit Ubuntu, like a Turtle in a Hurricane | CTF only flag |
| 0x41haz | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Simple Reversing Challenge | Reverse Engineering |
| 25 Days of Cyber Security | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Get started with Cyber Security in 25 Days - Learn the basics by doing a new, beginner friendly security challenge every day. | Learning |
| A Bucket of Phish | ${\color{#3fb950}\textsf{Easy}}$ | Linux | From the Hackfinity Battle CTF event. | cloud only flag |
| Abusing Windows Internals | ${\color{#f85149}\textsf{Hard}}$ | Windows | Leverage windows internals components to evade common detection solutions, using modern tool-agnostic approaches. | Learning |
| Agent Sudo | ${\color{#3fb950}\textsf{Easy}}$ | Linux | You found a secret server located under the deep sea. Your task is to hack inside the server and reveal the truth | CTF CVE-2019-14287 |
| Alfred | ${\color{#3fb950}\textsf{Easy}}$ | Windows | Exploit Jenkins to gain an initial shell, then escalate your privileges by exploiting Windows authentication tokens. | privileges escalation via token impersonation |
| Analysing Volatile Memory | ${\color{#d29922}\textsf{Medium}}$ | Windows | Learn how the Windows OS manages volatile data in different files on disk. Explore how to extract and analyse volatile data from those artefacts. | Forensics |
| Annie | ${\color{#d29922}\textsf{Medium}}$ | Linux | Remote access comes in different flavors | AnyDesk 5.5.2 – Remote Code Execution CVE-2020-13160 |
| Anonforce | ${\color{#3fb950}\textsf{Easy}}$ | Linux | boot2root machine for FIT and bsides guatemala CTF | CTF |
| Archangel | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Boot2root, Web exploitation, Privilege escalation, LFI | CTF |
| Backtrack | ${\color{#8b949e}\textsf{Info}}$ | |||
| BankGPT | ${\color{#8b949e}\textsf{Info}}$ | A customer service assistant used by a banking system. | only flag |
|
| Basic-Pentesting | ${\color{#3fb950}\textsf{Easy}}$ | Linux | This is a machine that allows you to practise web app hacking and privilege escalation | CTF |
| Battery | ${\color{#d29922}\textsf{Medium}}$ | Linux | CTF designed by CTF lover for CTF lovers | Re-Registration Attack XML External Entity Sudo Abuse |
| Biblioteca | ${\color{#8b949e}\textsf{Info}}$ | Shhh. Be very very quiet, no shouting inside the biblioteca. | only flag |
|
| Biteme | ${\color{#d29922}\textsf{Medium}}$ | Linux | Stay out of my server! | CTF only flag |
| Blue | ${\color{#3fb950}\textsf{Easy}}$ | Windows | Windows Exploitation Basics - Easy | MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption |
| Blueprint | ${\color{#3fb950}\textsf{Easy}}$ | Windows | Hack into this Windows machine and escalate your privileges to Administrator. | osCommerce 2.3.4.1 - Remote Code Execution only flag |
| Bounty Hacker | ${\color{#3fb950}\textsf{Easy}}$ | Linux | You talked a big game about being the most elite hacker in the solar system. Prove it and claim your right to the status of Elite Bounty Hacker! | CTF |
| Break Out The Cage | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Help Cage bring back his acting career and investigate the nefarious goings on of his agent! | CTF |
| Brooklyn-Nine-Nine | ${\color{#3fb950}\textsf{Easy}}$ | Linux | This room is aimed for beginner level hackers but anyone can try to hack this box. There are two main intended ways to root the box | CTF |
| Bugged | ${\color{#3fb950}\textsf{Easy}}$ | Linux | John likes to live in a very Internet connected world. Maybe too connected... | IoT Device hacking |
| C4ptur3-th3-fl4g | ${\color{#3fb950}\textsf{Easy}}$ | Linux | A beginner level CTF challenge | Decoding Messages Spectrograms Steganography Security through obscurity |
| Capture! | ${\color{#3fb950}\textsf{Easy}}$ | Web | Can you bypass the login form? | Authentication Bypass |
| Careers in Cyber | ${\color{#8b949e}\textsf{Info}}$ | Learn about the different careers in cyber security | Guide |
|
| Cheese CTF | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Inspired by the great cheese talk of THM! | CTF LFI RCE SUID |
| CherryBlossom | ${\color{#8b949e}\textsf{Info}}$ | Boot-to-root with emphasis on crypto and password cracking. | SMB |
|
| Chocolate Factory | ${\color{#3fb950}\textsf{Easy}}$ | Linux | A Charlie And The Chocolate Factory themed room, revisit Willy Wonka's chocolate factory! | CTF |
| Cicada-3301 Vol:1 | ${\color{#d29922}\textsf{Medium}}$ | Linux | A basic steganography and cryptography challenge room based on the Cicada 3301 challenges | Cryptography |
| Cipher's Secret Message | ${\color{#3fb950}\textsf{Easy}}$ | Any | Sharpen your cryptography skills by analyzing code to get the flag. | Caesar Decryption Crypto Challenge |
| Clocky | ${\color{#8b949e}\textsf{Info}}$ | Time is an illusion. | ||
| CMesS | ${\color{#d29922}\textsf{Medium}}$ | Linux | Can you root this Gila CMS box? | Gila CMS 1.10.9 |
| Compiled | ${\color{#3fb950}\textsf{Easy}}$ | Any | Strings can only help you so far. | binary only flag |
| ContainMe | ${\color{#d29922}\textsf{Medium}}$ | Linux | Where am I ? Catch me | Container Escape |
| Corridor | ${\color{#3fb950}\textsf{Easy}}$ | Web | Can you escape the Corridor? | IDOR |
| Crack the Hash Level-1 | ${\color{#3fb950}\textsf{Easy}}$ | Any | Cracking hashes challenges | Cryptography |
| Crack The Hash Level-2 | ${\color{#d29922}\textsf{Medium}}$ | Any | Advanced cracking hashes challenges and wordlist generation | Cryptography |
| CTF collection Vol.2 | ${\color{#d29922}\textsf{Medium}}$ | Linux | Sharpening up your CTF skill with the collection. The second volume is about web-based CTF. | CTF Cryptography |
| Cupid's Matchmaker | ${\color{#3fb950}\textsf{Easy}}$ | Web | Use your web exploitation skills against this matchmaking service. | XSS |
| CyberHeroes | ${\color{#3fb950}\textsf{Easy}}$ | Web | Want to be a part of the elite club of CyberHeroes? Prove your merit by finding a way to log in! | Broken Authentication |
| Dev Diaries | ${\color{#3fb950}\textsf{Easy}}$ | Web | Hunt through online development traces to uncover what was left behind. | OSINT |
| Dig Dug | ${\color{#3fb950}\textsf{Easy}}$ | Any | Turns out this machine is a DNS server - it's time to get your shovels out! | DNS Enumeration |
| Directory | ${\color{#f85149}\textsf{Hard}}$ | Any | Do you have what it takes to crack this case? | DFIR |
| Dogcat | ${\color{#d29922}\textsf{Medium}}$ | Linux | I made a website where you can look at pictures of dogs and/or cats! Exploit a PHP application via LFI and break out of a docker container. | CTF Web only flag |
| Dumping Router Firmware | ${\color{#d29922}\textsf{Medium}}$ | Linux | Have you ever been curious about how your router works? What OS it runs? What makes it tick? | Firmware Analysis only flag |
| Eavesdropper | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Listen closely, you might hear a password! | CTF , PATH hijacking |
| Erlang/OTP SSH CVE-2025-32433 | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Learn about and exploit Erlang/OTP SSH CVE-2025-32433 in a lab setup. | CVE-2025-32433 |
| Event Horizon | ${\color{#f85149}\textsf{Hard}}$ | Linux | Unearth the secrets beyond the Event Horizon. | DFIR |
| Evil-GPT | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Practice your LLM hacking skills. | LLM hacking Prompt Injection |
| Evil-GPT v2 | ${\color{#3fb950}\textsf{Easy}}$ | Web | Put your LLM hacking skills to the test one more time. | Advanced LLM hacking Prompt Injection |
| FFuF | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Enumeration, fuzzing, and directory brute forcing using ffuf | Tool Guide |
| Flatline | ${\color{#3fb950}\textsf{Easy}}$ | Windows | How low are your morals? | FreeSWITCH openclinic |
| Game Buzz | ${\color{#f85149}\textsf{Hard}}$ | Linux | Part of Incognito CTF | CTF |
| Hacker v/s Hacker | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Someone has compromised this server already! Can you get in and evade their countermeasures? | LFI |
| Hackfinity Battle | ${\color{#d29922}\textsf{Medium}}$ | Any | Welcome to the Hackfinity Battle CTF! | Challenge only flag |
| HackPark | ${\color{#d29922}\textsf{Medium}}$ | Windows | Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine! | Hydra, RCE & WinPEAS CTF only flag |
| HaskHell | ${\color{#d29922}\textsf{Medium}}$ | Linux | Teach your CS professor that his PhD isn't in security. | Python |
| hc0n Christmas CTF | ${\color{#f85149}\textsf{Hard}}$ | Linux | Hack the planet | CTF |
| Hidden Deep Into my Heart | ${\color{#3fb950}\textsf{Easy}}$ | Web | Find what's hidden deep inside this website. | Web Enumeration |
| Hijack | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Misconfigs conquered, identities claimed. | Misconfiguration |
| Hydra | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Learn about and use Hydra, a fast network logon cracker, to bruteforce and obtain a website's credentials | Tool Guide |
| Ice | ${\color{#3fb950}\textsf{Easy}}$ | Windows | Deploy & hack into a Windows machine, exploiting a very poorly secured media server | Buffer overflow in Icecast 2.0.1 allows remote attackers to execute arbitrary code via an HTTP request CVE-2004-1561 |
| IDOR | ${\color{#3fb950}\textsf{Easy}}$ | Web | Learn how to find and exploit IDOR vulnerabilities in a web application giving you access to data that you shouldn't have. | Learn idor |
| Ignite | ${\color{#3fb950}\textsf{Easy}}$ | Linux | A new start-up has a few issues with their web server | CMS RCE only flag |
| Inside a Computer System | ${\color{#8b949e}\textsf{Info}}$ | Web | This room covers the basic components of a computer system. | Info |
| Introductory Networking | ${\color{#8b949e}\textsf{Info}}$ | An introduction to networking theory and basic networking tools | ||
| Jacob the Boss | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Find a way in and learn a little more. | CVE-2010-0738 |
| Kenobi | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Walkthrough on exploiting a Linux machine. Enumerate Samba for shares, manipulate a vulnerable version of proftpd and escalate your privileges with path variable manipulation. | ProFtpd SUID |
| Kiba | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Identify the critical security flaw in the data visualization dashboard, that allows execute remote code execution. | CVE-2019-7609 |
| Lian Yu | ${\color{#8b949e}\textsf{Info}}$ | A beginner level security challenge | Brute force Steganography Sudo |
|
| Linux Shells | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Learn about scripting and the different types of Linux shells. | Shell |
| Lo-Fi | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Want to hear some lo-fi beats, to relax or study to? We've got you covered! | CTF LFI |
| Looking Glass | ${\color{#d29922}\textsf{Medium}}$ | Linux | Step through the looking glass. A sequel to the Wonderland challenge room. | CTF |
| Lookup | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Test your enumeration skills on this boot-to-root machine. | CTF elFinder PHP Connector exiftran Command Injection vulnerability Path manipulation exploitation |
| Love Letter Locker | ${\color{#3fb950}\textsf{Easy}}$ | Web | Use your skills to access other users' letters. | IDOR |
| Madness | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Will you be consumed by Madness? | CTF Steganography setuid |
| MD2PDF | ${\color{#3fb950}\textsf{Easy}}$ | Web | TopTierConversions LTD is proud to present its latest product launch. | CTF |
| Metamorphosis | ${\color{#d29922}\textsf{Medium}}$ | Linux | Part of Incognito CTF | CTF rsync SQL only flag |
| Metasploit: Exploitation | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Using Metasploit for scanning, vulnerability assessment and exploitation. | Metasploit |
| Metasploit: Meterpreter | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Take a deep dive into Meterpreter, and see how in-memory payloads can be used for post-exploitation. | Metasploit |
| Mindgames | ${\color{#d29922}\textsf{Medium}}$ | Linux | Just a terrible idea... | Python C |
| mKingdom | ${\color{#8b949e}\textsf{Info}}$ | SMB Sudo |
||
| Mr Robot CTF | ${\color{#d29922}\textsf{Medium}}$ | Linux | Based on the Mr. Robot show, can you root this box? | CTF |
| Nax | ${\color{#d29922}\textsf{Medium}}$ | Linux | Identify the critical security flaw in the most powerful and trusted network monitoring software on the market, that allows an authenticated user to execute remote code execution. | CVE-2019-15949 Metasploit |
| Neighbour | ${\color{#3fb950}\textsf{Easy}}$ | Web | Check out our new cloud service, Authentication Anywhere. Can you find other user's secrets? | IDOR |
| Net Sec Challenge | ${\color{#d29922}\textsf{Medium}}$ | Linux | Practice the skills you have learned in the Network Security module. | nmap Hydra FTP |
| Ninja Skills | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Practise your Linux skills and complete the challenges. | investigation |
| Oh My WebServer | ${\color{#d29922}\textsf{Medium}}$ | Linux | Can you root me? | CVE-2021-41773 |
| Opacity | ${\color{#8b949e}\textsf{Info}}$ | Opacity is a Boot2Root made for pentesters and cybersecurity enthusiasts. | File upload SMB Brute force |
|
| Overheard at Breakfast | ${\color{#3fb950}\textsf{Easy}}$ | Two strangers. One conversation. One profile they never meant to reveal. | OSINT |
|
| Pentesting Fundamentals | ${\color{#3fb950}\textsf{Easy}}$ | Any | Learn the important ethics and methodologies behind every pentest. | info |
| Pickle Rick | ${\color{#3fb950}\textsf{Easy}}$ | Linux | A Rick and Morty CTF. Help turn Rick back into a human! | CTF Web Cmd only flag |
| Poster | ${\color{#3fb950}\textsf{Easy}}$ | Linux | The sys admin set up a rdbms in a safe way. | RDBMS Exploitation |
| Precision | ${\color{#f85149}\textsf{Hard}}$ | Linux | Practice your advanced Linux Exploit Development skills. | Binary Exploitation only flag |
| Principles of Security | ${\color{#3fb950}\textsf{Easy}}$ | Any | Learn the principles of information security that secures data and protects systems from abuse | info |
| Psycho Break | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Help Sebastian and his team of investigators to withstand the dangers that come ahead. | CTF |
| Publisher | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Test your enumeration skills on this boot-to-root machine | CTF CVE-2023-27372 |
| Putting it all together | ${\color{#8b949e}\textsf{Info}}$ | Learn how all the individual components of the web work together to bring you access to your favourite web sites. | ||
| Red Stone One Carat | ${\color{#d29922}\textsf{Medium}}$ | Linux | First room of the Red Stone series. Hack ruby using ruby. | restricted rzsh shell |
| Red Team Fundamentals | ${\color{#3fb950}\textsf{Easy}}$ | Any | Learn about the basics of a red engagement, the main components and stakeholders involved, and how red teaming differs from other cyber security engagements. | Active Directory Phishing OSINT |
| RootMe | ${\color{#3fb950}\textsf{Easy}}$ | Linux | A ctf for beginners, can you root me? | File Upload |
| Roundcube: CVE-2025-49113 | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Exploit CVE-2025-49113 in a lab environment. | CVE-2025-49113 only flag |
| Search Skills | ${\color{#3fb950}\textsf{Easy}}$ | Any | Learn to efficiently search the Internet and use specialized search engines and technical docs. | OSINT |
| Silver Platter | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Can you breach the server? | CVE-2024-36042 |
| Simple CTF | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Beginner level ctf | CVE-2019-9053 Vim |
| Slingshot | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Can you retrace an attacker's steps after they enumerate and compromise a web server? | Logs |
| Smol | ${\color{#d29922}\textsf{Medium}}$ | Linux | Test your enumeration skills on this boot-to-root machine. | CTF |
| Soupedecode 01 | ${\color{#3fb950}\textsf{Easy}}$ | Windows | Test your enumeration skills on this boot-to-root machine. | AD |
| Speed Chatting | ${\color{#3fb950}\textsf{Easy}}$ | Web | Can you hack as fast as you can chat? | RCE |
| Startup | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Abuse traditional vulnerabilities via untraditional means. | CTF |
| Steel Mountain | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration and learn a new technique to get Administrator access. | CVE-2014-6287 |
| The CIA Triad | ${\color{#8b949e}\textsf{Info}}$ | Understand the CIA Triad and how it shapes cyber security mindset. | ||
| The Great Escape | ${\color{#d29922}\textsf{Medium}}$ | Linux | Our devs have created an awesome new site. Can you break out of the sandbox? | API Docker |
| The Greenholt Phish | ${\color{#3fb950}\textsf{Easy}}$ | Windows | Use the knowledge attained to analyze a malicious email. | SOC |
| The Guestbook | ${\color{#d29922}\textsf{Medium}}$ | Web / AI | AI |
|
| The London Bridge | ${\color{#d29922}\textsf{Medium}}$ | Linux | The London Bridge is falling down | SSRF CVE-2018-18955 only flag |
| The Marketplace | ${\color{#d29922}\textsf{Medium}}$ | Linux | Can you take over The Marketplace's infrastructure? | XSS SQL Docker |
| The Phishing Pond | ${\color{#3fb950}\textsf{Easy}}$ | Web | Catch the phish before the phish catches you. | Identifying Phishing Emails |
| The Server From Hell | ${\color{#d29922}\textsf{Medium}}$ | Linux | Face a server that feels as if it was configured and deployed by Satan himself. Can you escalate to root? | CTF |
| The Sticker Shop | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Can you exploit the sticker shop in order to capture the flag? | XSS |
| Tomghost | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Identify recent vulnerabilities to try exploit the system or read files that you should not have access to. | CVE-2020–1938 |
| Toolbox: Vim | ${\color{#3fb950}\textsf{Easy}}$ | Linux / Windows | Learn vim, a universal text editor that can be incredibly powerful when used properly. From basic text editing to editing of binary files, Vim can be an important arsenal in a security toolkit. | Tool Guide |
| TryHeartMe | ${\color{#3fb950}\textsf{Easy}}$ | Web | Access the hidden item in this Valentine's gift shop. | CTF,Web Exploitation, JWT Manipulation |
| UltraTech | ${\color{#d29922}\textsf{Medium}}$ | Linux | The basics of Penetration Testing, Enumeration, Privilege Escalation and WebApp testing | CTF |
| Valenfind | ${\color{#d29922}\textsf{Medium}}$ | Web | Can you find vulnerabilities in this new dating app? | LFI |
| Void Execution | ${\color{#d29922}\textsf{Medium}}$ | Linux | Learn how to bypass restrictions in Linux exploit development. | Binary Exploitation only flag |
| Vulnerabilities 101 | ${\color{#3fb950}\textsf{Easy}}$ | Any | Understand the flaws of an application and apply your researching skills on some vulnerability databases. | Info |
| VulnNet Active | ${\color{#8b949e}\textsf{Info}}$ | SMB Hash cracking Metasploit |
||
| VulnNet Endgame | ${\color{#8b949e}\textsf{Info}}$ | only flag |
||
| W1seGuy | ${\color{#3fb950}\textsf{Easy}}$ | Linux | A w1se guy 0nce said, the answer is usually as plain as day. | Cryptography |
| Watcher | ${\color{#d29922}\textsf{Medium}}$ | Linux | A boot2root Linux machine utilising web exploits along with some common privilege escalation techniques | LFI Cronjob |
| Web Application Basics | ${\color{#3fb950}\textsf{Easy}}$ | Web | Learn the basics of web applications: HTTP, URLs, request methods, response codes, and headers. | Info |
| Web Application Security | ${\color{#3fb950}\textsf{Easy}}$ | Web | Learn about web applications and explore some of their common security issues. | Info |
| Wekor | ${\color{#d29922}\textsf{Medium}}$ | Linux | CTF challenge involving SQLi, WordPress, vhost enumeration and recognizing internal services. | SQL WordPress Reverse Engineering |
| Welcome | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Learn how to use a TryHackMe room to start your upskilling in cyber security. | Info only flag |
| Wgel CTF | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Can you exfiltrate the root flag? | CTF only flag |
| Whiterose | ${\color{#3fb950}\textsf{Easy}}$ | Linux | Yet another Mr. Robot themed challenge. | EJS SSTI |
| Windows Fundamentals 1 | ${\color{#8b949e}\textsf{Info}}$ | Windows | In part 1 of the Windows Fundamentals module, we'll start our journey learning about the Windows desktop, the NTFS file system, UAC, the Control Panel, and more.. | Windows |
| Wonderland | ${\color{#d29922}\textsf{Medium}}$ | Linux | Fall down the rabbit hole and enter wonderland | Python |
| Year of the Dog | ${\color{#f85149}\textsf{Hard}}$ | Linux | Always so polite... | Sqli Gitea only flag |
| Year-of-the-Owl | ${\color{#f85149}\textsf{Hard}}$ | Windows | The foolish owl sits on his throne... | CTF only flag |
| Zeno | ${\color{#d29922}\textsf{Medium}}$ | Linux | Do you have the same patience as the great stoic philosopher Zeno? Try it out! | Restaurant Management System 1.0 - Remote Code Execution |
Notes
Some room folders also hold supporting files such as exploit scripts and scan output. All walkthroughs are for educational purposes only: follow ethical hacking principles and the TryHackMe terms.
Maintained by Esther7171.