pt1

[thin kraken]

imho, no.

[copper cove]

what else should I cover first?

[thin kraken]

this one https://tryhackme.com/room/writingpentestreports

[copper cove]

yeah i found it, but it's strange that it got removed from the track

and i think there were some others that got removed

[thin kraken]

i found a really neat list the other day. hang on

[copper cove]

like an entire portion of the exam is AD and I don't see anything for AD in the prep materials except maybe this one

[thin kraken]

Web: Pickle Rick, Billing, Rabbit Store, Silver Platter, AVenger
Network: Blue, Net Sec Challenge, Stealth, Loopback, Linux LPE, Windows LPE
AD: Reset, Ledger, K2, AD: Authenticated Enumeration

Those rooms. Apparently. (I did those, and that still wasn't enough) .

[copper cove]

thanks!

dont know how i missed this but i found the list here https://tryhackme.com/certification/junior-penetration-tester/details

[copper cove]

nvm it was on this page that i had seen it ^

the exam is not proctored right?

how long did it take yall, the full 48 hrs?

[copper cove]

does this mean it's open everything except communication w others?

like can we consult thm curriculum during the exam

[thin kraken]

I gave up after 20

[thin kraken]

yep, plus chatgpt, google, exploit-db, whatever you want basically.

[copper cove]

aw what :(

[thin kraken]

eh. PT1 isn't my vibe.

The pentesting stuff i'm good at isn't represented in PT1.

binary RE, AWS / Azure compromises, etc.

[copper cove]

i'm dissapointed there's no linux section

[thin kraken]

there's linux challenges

ish.

but there's definitely, imho, a heavy windows bias.

also another thing that annoyed me tbh.

I'm of the age/experience/belief that windows is basically shite.

and not suitable for a server or desktop in a corporate/hosting/enterprise environment.

esp now that microsoft have linux toolchains for .net applications

[copper cove]

sounds about right

everything is unnecessarily more complicated than on linux

[thin kraken]

I've had jobs where the whole basis has been "get us the F off of windows because the license costs are killing us"

and it's acceptable to replace their AD with a RHEL box with 389 server or openldap and freeradius and replace their Panasonic PBX with Asterisk or Freeswitch, and take this company that are spending Tens of Thousands of Pounds a month on licenses for software and hardware, and switch them over to linux and unixes and stuff.

i worked for a while for a company who had like 600 windows desktops
to run Putty
to connect to a mainframe environment

That was it.. Their sole reason for having 600 licensed windowses
was to connect to something running AIX.

[elder python]

@ebon creek

[vagrant lynx]

you shld pm him, pasting the request here is the same as leaking exam.

you should remove it

[indigo marlin]

Passed it 🙈

[ebon creek]

I am not a staff member I can't help you with that , reach to official support channel on the email below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jul 29, 2025, 10:49 AM

[ebon creek]

Congrats 🙂 🚀 🔥

[keen sleet]

Would you like the PT1 role?

[indigo marlin]

hell yea

[hollow valley]

me too

i get Your session has expired

The SDK token provided in this verification process has expired. Please go back and try again.

[sleek maple]

For the web app section

[keen sleet]

Please do not mention any kind of attack and we require not to discuss the exam during your exam period.

Everything is on the website. If you don't find what you're looking for, then maybe it's because it shouldn't be here / doesn't exist.

[sleek maple]

Sry

[wheat glen]

guys is there some kind of free practice test for pt1 or eJPTv2? id like to practice for these exams

[keen sleet]

No.

[wheat glen]

😔

[grizzled torrent]

You're given two attempts though so you can use your first attempt to get familiar with the exam env. Its just a bonus if your pass it in the first attempt

[sleek maple]

During my exam the VPN server went down and I lost a lot of hours before support saw my ticket and I was able to regain access could I have another retake or at least a discount on buying a retake I was very disappointed by the whole ordeal

[vivid oak]

Hey all! I am getting session expired during ID verification, is there any fix for this? I tried reaching out to support on the site but it seems like they may be busy. 🙂

[slim matrix]

Hi, if there had faced same issue when clicked the start exam button like this
"Exam is under going maintenance, try again on an hour"

Well it's already 5 hour, so i can't start the exam

[keen sleet]

Not the channel for that. [e-mail]

[keen sleet]

cc @rapid bolt / @plush vector Is the maintenance supposed to be happening? I saw no announcement about it.

[slim matrix]

i had a screenshot of it, but i can't upload it here maybe from the channel settings

ohh my bad

i need verification first

[sleek maple]

Thx

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #30 - 334)

[ebon creek]

Does it work now , it should be fixed

[slim matrix]

Alright, in here already late night
I will start it tomorrow

[north plank]

Going to finally start mine tomorrow - every day keep putting it off!

[vivid oak]

If we are having an issue with the PT1 is the structured process to reach out to the [e-mail] email address or is there a more timely place we can reach out to support for exam issues?

[ebon creek]

Good luck 🙂

[ebon creek]

I don't think so 🙁

[keen sleet]

Check out the pinned messages if that helps.

[vivid oak]

Thank you! 🙂

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #30 - 335)

[vivid oak]

Looks like room for improvement on the customer success side.

[quiet ember]

Anyone know how long the provisioning of the test should take? I have been waiting ~20 minutes:

[vivid oak]

I've seen "almost there" for 4 hours. I think I'm almost there 😄

[quiet ember]

Yeah, I quit. Sent an email to support.

[vivid oak]

I also did this 4 hours ago 🙁

[vast flax]

Can I check in today and start the exam later on?

[quiet ember]

Yes, it looks like you can totally do that. Once you check in it gives you a video to watch then you can start the environment. It appears that once the environment actually starts, the countdown starts. So you can checkin then leave and come back to it when you are ready.

[vast flax]

Okay. I will try that later. Thanks

[lime fulcrum]

Gave +1 Rep to @quiet ember (current: #2012 - 2)

[vivid oak]

Were you able to get into the exam?

[quiet ember]

No, I closed out, sent the email and waiting for a response

[vivid oak]

Same! Good luck! 🤞

[tall shoal]

.

[copper cove]

does a reset in pt1 mean a penalty?

i hit reset thinking it wouldn't deduct anything but it said "your reset has been counted" or something similar which is ominous

[ebon creek]

No you won't get a penalty for that , it's probably a measure to prevent too many unnecessary resets

[gritty lantern]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Jul 31, 2025, 6:42 AM

[coral bone]

hello, one question... is the AD portion of the training material enought to pass the exam?

[balmy canopy]

I hope so, because I just finished the last challenge room (K2) and there was a lot to learn in K2, Ledger and AVenger, almost too much 😄

Probably need to go through them again before I take the exam

[keen sleet]

Yes.

[copper cove]

soo who's idea was it to put partial flags in PT1 😭

do i get half credit for half the flag

[copper cove]

annnd 90 mins later i found the other half 😮‍💨

[prime comet]

Nice 💪

[vagrant lynx]

Till now, I still don't understand the concept of partial flag. Does it mean you found the vulnerability but it return no flag or does it mean that when you exploit the vulnerability but it only return you half of the flag.

I didn't see this when I am doing the exam.

[copper cove]

you found and exploited it, but tryhackme feels you shouldnt get credit unless you bundle it with another exploit it seems

[vagrant lynx]

I see that special.

I alway thought the partial point is that you found a vulnerability but you can exploit it but it came with no flag.

[copper cove]

WAYYY too close for comfort wow

[snow radish]

When I try to do the check in for PT1 I get this error from onfido (Your verification is expired)
Is there a way to restart the check in process?

[ebon creek]

Congrats , great job 🙂 🚀 🔥 💪

[ebon creek]

Try to email support directly , use the address specified below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 1, 2025, 1:48 PM

[vivid oak]

Thank you for this! This was one of the best pieces of advice after I failed my first attempt. I adopted this mindset, signed up for PortSwigger academy and did a bunch of their labs. Got it on my 2nd attempt! 🙏

[lime fulcrum]

Gave +1 Rep to @safe musk (current: #32 - 324)

[last plank]

Hello everyone, I am currently preparing the exam and I would like to know if the report submitting is included in the 48h or we have a bit more time ?

[copper cove]

48hrs total

[midnight sonnet]

solving on ad-dc suddenly network cut I reset the machine still the same

[copper cove]

can I get the PT1 role?

[lime fulcrum]

➕ Gave the role PT1 to mr_mph

[golden leaf]

What if I don't meet this requirement? @ebon creek

[ebon creek]

It's a recommendation to use a desktop PC preferably with a wired connection but you can also use your laptop

[serene nymph]

Hello, just passed, can I get the role please?

[lime fulcrum]

➕ Gave the role PT1 to flo2699

[vast flax]

It is ok to wait an hour for this?

[round wagon]

I'm experiencing the same issue.
I've been waiting for over an hour, but it still hasn't started.

I contacted support, but they are outside of business hours, so I haven't received a reply.

[vast flax]

Have you tried refreshing?

[round wagon]

Yes, I tried reloading the page and clearing the cache.
also tried it on both Chrome and Edge.…

[vast flax]

Returning to the previous step and forth won't get it started either

😪

[light token]

There were a couple of reports earlier in the week

Im planning on taking days off to take the exam...this doesnt inspire that much confidence

[pseudo bramble]

when writting the summary in the reports of the exam we have to follow the summary structure that says in the reporting module? overview, results, impact, remediation?

[ebon creek]

Yeah this room is supposed to prepare you for writing a report 🙂
https://tryhackme.com/room/writingpentestreports

[midnight vale]

Hello guys, can someone tell me I got a voucher via a giveaway from TryHackMe . Does that mean there are two attempts, or is it only one attempt?

[vast flax]

You have two attempts

[midnight vale]

ohk thank you , now i can go for 1st one

[lime fulcrum]

Gave +1 Rep to @vast flax (current: #3067 - 1)

[tulip quest]

test

Hmm oh I have to ask for a role

I passed

Decent exam was fun.

Whatever the 10th flag was is kinda going to bug me though

[lime fulcrum]

➕ Gave the role PT1 to spooonge

[keen sleet]

Done.

[midnight sonnet]

How come that the AI missed to score my net pen flag in the user. I'm sure that I included it on the report and also I put it in the flag slot so my. 8/10 became 7/10 flags and I failed I did do proper reporting in detailed. Nevertheless I will not report on mail support cuz I have a friend who encountered same issue as me no score in the flag he reported it but took 2 weeks for the answer and a insurance of 'reassisment' so nevermind.
I'll comeback stronger on the second attempt next time.

[keen sleet]

Well the AI does not grade flags, so this is usually a user mistake.

The flag is static grading, AI has nothing to do with it.

The AI only grades the big text fields where you can type freely, nothing else like the CVSS, Vuln ID or flags.

[kindred oasis]

anyone has tips for the web app portion? just failed my first attempt cuz of the web

[midnight sonnet]

I'm confused why my netpen user flag was scored as 0. I wrote a detailed report on how I found it and I'm pretty sure I entered the flag correctly. I'm wondering if I made a small typo or formatting error when I submitted it.

[keen sleet]

An extra space or a typo will disqualify it, yes.
Not clicking "Save and continue" before switching to another section will disqualify it too as it will not be saved.

I'm talking about "Save" button under the exact section for the flag, not the save button for the entire part (Such as Web, AD or NetSec)

[midnight sonnet]

Ah, okay, I see now. It might have been an extra space. I do saved button before going to other domains.
Anyway, my voucher expires on the 30th. Would it be okay if I retake the exam on August 29th?

[unborn glacier]

Hey everyone, just passed PT1 🙂 How can I have the role? Thanks

[keen sleet]

Wouldn't recommend leaving it for last second to avoid problems.

[lime fulcrum]

➕ Gave the role PT1 to azkrath

[keen sleet]

Done.

[frozen minnow]

Bro, the same thing happened to me as you. I got 8/10 flags and one flag gave me 0 points in the web hacking section... I got a score of 693/750 on the exam and they stole a flag that I did find. I really think they stole it because of that flag and because of the report, because I summarized it.

For the next attempt, I'm going to write EVERYTHING in the report. I'm prepared, but I wouldn't want them to steal the flag again...

Do you know if screenshots can be uploaded to the report? Or is that not possible?

[keen sleet]

• Screenshots are not possible.
• Stealing flags is not possible. You're saying an automated robot that compares chains of strings decided to go AI-Mode and stole your flag?That is not possible.

The possible causes - based on other users who contacted support thinking their flags were stolen or graded 0 by AI - turned out to be:

• User mistakes (e.g. an extra space, an extra digit, or not clicking both save buttons)

[balmy canopy]

Perhaps it would be good for both exam takers and THM if there was a format validation on the flags?

[fierce wagon]

HELP!! Hey everyone, any particular resource that should be completed in any case to pass PT1 ? Open to suggestions !!

[vagrant lynx]

i think to be fair, for such scenario, you could deduct some point from the user but not give that user 0 point for it.

[keen sleet]

https://tryhackme.com/feedback
cc @balmy canopy

[distant trout]

1. Go to the website and read the entire PT1 webpage. Then find the recommended learning path, then do all of those rooms.
2. Read this entire discord thread. There are many many pieces of advice about the exam

[frozen minnow]

I understand the points you're making, but I want to clarify that I carefully reviewed my submission, and it wasn't a formatting error or a mistake in saving. I'm confident I entered the flag correctly, step by step, and yet the system still marked it as incorrect and gave me a 0.

I know these automated systems rely on string comparisons and strict validations, but I also know from my experience working with AI and automation that these systems are not infallible. AI can make mistakes too, and when it does, it directly and frustratingly impacts the user experience

Moreover, I'm not the only one this happened to. Several other users have reported the same issue here on Discord entering the correct flag and still receiving a 0 from the system. This further supports the idea that the issue isn't necessarily on the user's side and deserves a closer review

[midnight sonnet]

I'm not sure what happened. As far as I know, I double-checked each flag. I submitted a report as the exam requires. Perhaps the AI is in a beta or trial mode or some glitch don't know. I can't complain since it was a free voucher. I will retake the exam and focus on passing. I read some of negative feedback on that AI grading so next time I'm aware and fully do a super 31337 hacker mans report.

[frozen minnow]

I think the same as you, and I also got it for free and I have one more try left, for the next one I already know how to do it

[slow cypress]

do we get free months of THM if we buy pt1?

[drifting kayak]

yep, 3 if im not missing smth

[slow cypress]

How do we claimed it

I dont get the free months

[drifting kayak]

my friend got the 3 months automaticaly since the day he got the voucher for the exam

[pliant bear]

You should contact support using the bubble in the bottom corner on the site

[upper osprey]

did any1 take the PT1 certification is it tough?

[pliant bear]

The course is designed to teach you the skills and abilities you need to start your pentesting career. The certification exam is made to test your abilities to understand the role and to apply your skills in a realistic environment.

[upper osprey]

👍

[tight violet]

Interesting I didn't get that, I've been paying for it LOL

[tight violet]

@keen sleet Can you hook me up with the role?

[snow radish]

Should confidential information such as passwords be included into the report when I describe the attack path?

[keen sleet]

Doesn't really matter TBH.

[topaz oyster]

Hi, I'm taking the PT1 exam. After restarting the network, I can’t connect to any network in AttackBox and therefore can’t complete any of the tasks...I can't create a ticket because of the chatbot on THM

[pliant bear]

For a real client report, you would obfuscate/remove passwords in a report, just mentioning the account that was compromised, to reduce the risk of actual compromise if the report is accessed by someone unauthorised

[keen sleet]

Try through VPN from your Kali.

[topaz oyster]

I don't have

[keen sleet]

Check pinned message.

[snow radish]

Yup that's why I asked, I thought the AI would penalize me for that 😄

[topaz oyster]

If I was working on a machine and after a reboot it stopped working and none of the machines respond to nmap -Pn or ping this clearly isn’t an issue with my enumeration or actions taken

[keen sleet]

What's your VPN region?

[topaz oyster]

I use attackBox Eu-Vip-2

[topaz oyster]

Where can I see OVPN connection?

[keen sleet]

Oh then probably support is your only option.

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 6, 2025, 5:20 PM

[kindred oasis]

hi im in an exam now and im experiencing issues with the infrastructure but the report an issue button is not working

what should i do next?

[gritty lantern]

@kindred oasis

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 7, 2025, 12:48 PM

[autumn cobalt]

hi guys, beside the recommend room is there another room we can practice for the exam?

[ebon creek]

Red Team Capstone challenge

[autumn cobalt]

👍

[fading prawn]

I’m little more than 24hrs in the exam and trying many possible exploits that is aimed to where I believe it’s located but so far only completed the AD section of the exam… Banging my head for a good minute now 😅

[vagrant lynx]

One question, if after 2 week (10 working days) and still did not get back the result for manual review, should I send a email to support and ask them?

[quick zephyr]

Hi there

[somber onyx]

Hey can i ask one thing can i swap with pt1 and sal1

[fading prawn]

alright serious question, how do i receive the webapp flag after I know for a fact I found the vuln

[kindred oasis]

hi mods i just passed the exam how can i get the role?

[light token]

From what i understand theres many vulns but not all of them return flags

I think @keen sleet mentioned that on his guide

[fading prawn]

dang okay.... Im super stummed on the exam.

from what I'm getting at from taking the exam, you really do need a little more knowledge that what is provided in the recommended learning path

[fading prawn]

thank you @light token

[lime fulcrum]

Gave +1 Rep to @light token (current: #1228 - 4)

[light token]

Someone recommended the web exploit path as well... You might glance at it if u didnt yet

I havent taken it yet...web part is scaring me lol

[fading prawn]

ive actually been going back at it as little reference and I must be missing something. both the Web fundamentals as well as the jr penetration tester paster I have been using quite a bit for reference but i feel the web fundamentals are very much just the very very basics and yes hence fundamentals but makes me question just a little if you truly need to go a step further and complete the Web application pentesting path as well which is not in the recommend learning path

[balmy canopy]

I haven't tried the exam yet, but one thing that also worries me is that you probably need experience doing the techniques described in the recommended learning. If you just go through the rooms once, you might have seen the knowledge that are required, but you haven't developed the "sixth sense" or "hacker mindset" that you need to quickly understand what you should try at certain points.

I can feel this when I am doing, especially random medium challenge rooms, that I need to be exposed to more variants on how to enumerate or how to think about exploiting a vulnerability. So even though I have done all recommended learning, I still think I need to do more, before trying the PT1 exam.

The WebApp Pentest path gives you more experience, but perhaps you need to learn a lot of techniques that will not be used in this exam. But it is probably useful anyway. PT1 shouldn't be the last certification, it's just the beginning 🙂

[kindred oasis]

@keen sleet

[gritty lantern]

@kindred oasis

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 8, 2025, 2:22 PM

[kindred oasis]

done

[cunning wedge]

Hello ,I’m trying to set a deadline for learning and taking the pT1 exam what would the time frame would you suggest?

[snow radish]

If I put the vulnerability type wrong but everything else is right (included flag, report, reproduction steps) do I get the points or will it be discarded?

[keen sleet]

I think you should get points for only the flag. Not sure about the report etc.

Or not since the flag doesn't match the vuln ID.

[knotty sigil]

Hey i think the pt1 machine im doing is broken i guess, anyone i should contact, i dont wanna reset as i think i'd have to do all the expoits again to get the new flags

[snow radish]

You can reset the machine, the flags will remain the same

I'm on my second attempt and reset the machine several times, but the flags are the same

[keen sleet]

Multiple resets will hurt the exam more than it will help. 20 is a LOT.

[e-mail] - they do not work on week-ends.

[vast flax]

My network turned off out of the blue

How much time should I wait to have it turned on again?

So, the network turned itself again but I can't reach the machines of my Assessment

[keen sleet]

Probably go for a reset. If you respected the RoE and have problems contact support.

[knotty sigil]

how to submit a vuln without a flag

with a fake flag yeah ?

[keen sleet]

Yes.

[cunning wedge]

……

[coral bone]

One question …. I m doing the exam … but is it possible to use images in the report or we must use only text to explain How we exploited vulns?

[muted rover]

PT1 - Im probably no where near ready to take it yet ...
But was thinking on the buy now and train up for it then take it scenario to make use of a discount voucher
On checking the FAQ says exam expiry should give up to 12 months to train BUT could be different if using a voucher and to check the terms of the voucher

The voucher is just a link though - there dont seem to be any terms anywhere with the voucher
Does anyone know if I will I get 12 months from date of purchase to train up first with this voucher ?

[keen sleet]

Text only.

[coral bone]

Oook then i took lots of screens for nothing

[warm beacon]

I recently bought the exam and it said that it's valid until 10 august 2026 (next year)

just literally a couple hours ago

[coral bone]

Is 8 flag enough to pass ? I m missing 2 web flags:(

[keen sleet]

Very risky.

[still halo]

@novel coral @keen sleet @ebon creek I am taking my exam in the web part while exploiting a vulnerability i got the flag paramater with flag value:Placeholder flag what should be done now kindly help

[keen sleet]

DM me a SS.

[still halo]

Sure

[keen sleet]

Did it end up getting fixed for you?

[vast flax]

Yes, somehow it didn't happen when I tried another way

Only 1 flag remaining, I'm getting cooked for good

[keen sleet]

Good, it worked out in the end. Not sure why the network behaved that way. Did you respect the RoE?

[coral bone]

780 points only for flags and I m not considering report

Ah sorry passing is 75%

Ok it is borderline

I remembered 70%

[keen sleet]

A flag is 40 points.

Actually, depends on the section. A flag in web is 40 points. In NetSec is 36 and in AD is 74.

So a total of 452 points for flags only, not 780.

[coral bone]

In ad for 2 hosts compromises you get 220

So 2 flags 110 each

20 for the report on that sections

I m reading the scoring system

Maybe they changed valuation criteria ?

[tired grove]

Hey guys, can you guys tell us what is really not allowed in the exam? Is it just AI that is prohibited?

[wooden jackal]

IIRC from THM's Q&A webinar is that AI is allowed for your own research and maybe to help building your reports (but do not blindly copy paste generic stuff or, worse, hallucinations).
What is not allowed in terms of AI is "prompt injection to bypass the AI grader" as explained in this channel's pinned message.

[tired grove]

Oh okay thank you very much

[lime fulcrum]

Gave +1 Rep to @wooden jackal (current: #1057 - 5)

[keen sleet]

Incorrect. Both flags in AD makes a total of 148 points, not 220.

AD Section: {2 Flags - 220 points}

• You have a perfect overall summary. (20 points)
• You got both flags. (74 each)
• You have a perfect report description on the AI's judgement.
• You have perfect remediation action based on the AI's judgement.

[cinder patrol]

how many flags are there in PT1? 12?

The exam consists of 3 sections right each section contain 4 flags?

[keen sleet]

https://dragkob.notion.site/pt1-review-dragkob

[cinder patrol]

wow what a organized way you wrote! thank you sir

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #30 - 349)

[vast flax]

If I submit a report for a specific section, the exam ends?

[keen sleet]

The exam should only end once you submit the entire exam.

Make sure you have all the exam done before submitting entire sections. That's if you want to stay on the safe side.

[vast flax]

I passed

Nonetheless, I also have to inform that AI tore some points out even if I reviewed my reports

[midnight sonnet]

Passed 😪 😃

[keen sleet]

Congrats! No bugs this time right? 😉

[lime fulcrum]

➕ Gave the role PT1 to putty_killa

[midnight sonnet]

9 1/2 flag i thought it was a bug but i read the scoring so i understood it after.

[keen sleet]

No, there's a half flag system.

[midnight sonnet]

Yeah. I didnt bother to get the other half instead focus on the report 😬

[fading prawn]

Would anyone be willing to share any extra rooms that would possibly help with the network and web portions of the test. I took the test once but I feel like I’m truly missing a technique on some findings that aren’t fully working. I’m looking for more training outside the recommended path that I need to be looking at. Any help would be greatly appreciated

[vast flax]

I don't know if this may be useful, but you could follow Lainkusanagi's list of machines, which recommends a lot of THM rooms to do.
https://docs.google.com/spreadsheets/u/0/d/18weuz_Eeynr6sXFQ87Cd5F0slOj9Z6rt/htmlview?pli=1

[fading prawn]

Thank you @vast flax

[lime fulcrum]

Gave +1 Rep to @vast flax (current: #2026 - 2)

[fading prawn]

Any other information or tips would be helpful as well

[warm beacon]

Does anyone think taking the web app pentesting learning path is worth it? I read somewhere where they said to do it

[ebon creek]

Of course it is worth why wouldn't it be 🙂 ? I can't hurt to know more even if it's not necessarily needed for the certificate . But yeah in this case it is needed . Web App Pentesting is a big part of the pt1 exam 🙂

[warm beacon]

I see. But I do have to add that I’m in a time constraint. I have recently completed all of the required learning paths and would now go through the challenge rooms. I have set to take my exam sometime next week because of personal reasons. Do you think that’s a realistic goal? Thanks for your response!

[lime fulcrum]

Gave +1 Rep to @ebon creek (current: #1 - 5799)

[hollow wagon]

I passed yesterday. Overall it's a good exam (if you don't think about the unrealistic user simulation) and definitely provides more value than eJPT. Can't say about other certs (PJPT, PNPT, etc.) though because I haven't taken them.

[keen sleet]

BTW, we don't really allow discussing the exam, and specially once you're doing it. If you have bugs etc. you should contact the support team, but discussing the exam overall is not allowed.

[ebon creek]

Well web app vulns are a big part of the exam I would definiteltly recommend you to go through web app pentesting path

[ebon creek]

Congrats on passing the exam , great job 🙂 🚀

[balmy canopy]

My thought was that Web App Pentest path covers topics that are not relevant to PT1. Of course good to know them, but I think as a newbie (as me) that the topics in Jr Pen Test and Web Fundamentals are a lot to ingest on their own. And instead try to reinforce the knowledge by doing the rooms in Recommended Learning several times or finding similar topics on other platforms. Is it a mistake from TryHackMe not having the Web App Pentest path as recommended learning?

[amber parcel]

Hi, I have a quick question: Does the network reset during the exam change all flags, or does it just reset the lab to its initial status?

[keen sleet]

https://dragkob.notion.site/pt1-review-dragkob

[cinder patrol]

reset the lab bro

[prime reef]

Should I achieve the pass mark in each section of the exam? or it's enough to reach the scoring pass of 750?

[ebon creek]

It's enough to reach 750 I think

[vagrant lynx]

@keen sleet after sending for manual review, i passed, can give me the role when you are available. thanks

[keen sleet]

Done

[vagrant lynx]

thanks

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 353)

[lapis wedge]

Just an overall 750

[lapis wedge]

Can I get the role too, passed it this morning

[keen sleet]

Done.

[stray skiff]

hello, I am trying to start my exam but there is an error that says token expired and I am unable to check-in and continue further. Is there anyone who can help me with this issue? I wrote a ticket 3 days ago but there is still no answer and my voucher soon expires. What should I do?

[keen sleet]

Only thing you can do is wait for the support team to reply to you. Unfortunately replies have been very slow lately.

[prime reef]

When should I start the second attempt after the retake is available?

[mighty nimbus]

Hii

[idle hornet]

I'm have mailed the support on the 25th July regarding pt 1 manual check and no response in return yet 🫩it's been more than 2 weeks. What should I do.

[keen sleet]

There's very little I can do, but I will try to escalate internally.

[idle hornet]

Thanks, Please do it 😸

[coarse lake]

Dumb question, but guess I should ask.
I got the voucher to take the PT1 for free, which expired by the end of Aug.
I just failed the exam, and I'm aware of the retake option. Does the retake option also expire at end of Aug?

[stray skiff]

Is there a chance to escalate mine issue as well? My voucher expires by the end of August and I am afraid I might loose it

[keen sleet]

Only if you have been waiting for over 2 weeks as this is standard time.

[stray skiff]

Ok. It has been a week since I wrote. Hope will answer soon. Thanks for the information about that. I had no idea about their standard time for tickets

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 354)

[sour iron]

Is it still possible to get a free PT1 voucher by any chance?🥲🥲

[keen sleet]

Not for now.

[fading prawn]

currently on my second attempt. Results so far, I completed the Network portion and AD portion except for the report writing so far and I definitely would agree the WebApp portion is the most difficult of the three sections. I have enumerated and tried many exploits upon the webpage but only received 1 flag. Still have a good amount of time I just cant pin point exactly what I'm missing. Those that are prepping, really strengthen your webApp skills for sure. This coming from a person that holds a PWPA

[prime reef]

Does anyone have tips and recommended rooms and paths for the web app portion of the exam? just failed my first attempt cuz of the web

[ebon creek]

Check out this one 🙂
https://tryhackme.com/path/outline/webapppentesting

[prime reef]

Thanks! Another question: Is there a specific time frame in which I should start the second attempt?

[lime fulcrum]

Gave +1 Rep to @ebon creek (current: #1 - 5818)

[fading prawn]

it really is a tough one.

[prime reef]

@ebon creek

[ebon creek]

I am not sure , I think that you have time as long as your voucher is valid . Maybe @keen sleet have some more info 🙂

[prime reef]

Thanks!

[lime fulcrum]

Gave +1 Rep to @ebon creek (current: #1 - 5819)

[keen sleet]

Did you get the free voucher?

Or did you buy it?

[cinder patrol]

to pass how many flag needed?

[errant zephyr]

hey I want to know that PT1 exam ID verification needs web camera?

[keen sleet]

Yes.

You can also do it on a phone.

[keen sleet]

https://dragkob.notion.site/pt1-review-dragkob

[hollow wagon]

The main factor is whether the AI grader like your report. I would say 9/10 flags with a "good" report should be safe, but if you get 8 flags with a "great" report (in the AI's point of view), maybe you can also pass with that.

[jovial vapor]

Hello, I have a doubt regarding the reporting. If I chained x vulnerabilities to get a flag, which vuln should I report? The most consequential one?

[cinder patrol]

if i passed the PT1 am i eligible to use my retake?

[tame flower]

Is there any mod or team member that can help me with the xss poc? Returns xss failed

[vast flax]

The hint is on the RoE. Read it carefully and check thorough

[tame flower]

Is it necessary to be persistent/stored?

[keen sleet]

Yes.

Self DOM XSS doesn't count.

[tame flower]

Makes sense but there is no information regarding that

Thanks

[keen sleet]

It's pretty obvious IMO. A self dom XSS isn't a vulnerability, it's like opening the console and changing stuff on the website client-side and claiming it has been hacked.

[fading prawn]

Unfortunately the second time around I still wasn’t able to pass due to web app section, however I did do better than my first attempt overall on the test. Funny enough I was able to even find a flag and finish finding report on the test literally 2 minutes left on the clock.
Recommendations for those studying, do the “Web Application Fundamentals” and the “Web application Pentesting” rooms as I did catch myself referring back to each one trying to fish out nudges/help

[cinder patrol]

how can we get physical certificate?

[proud gale]

I am going to be taking the PT1 soon, is there any tools that are prohibited on the exam? The exam FAQ page seems pretty empty

Also for AD do we expect it to be blind or assumed breach?

[stray skiff]

hello, I am on my first attempt on my pt1 exam but having really big issue. Cannot connect to ANY target. I tried kali linux and the attack box but the results are the same. This is the output of the commands ip route | grep 10.200
10.200.48.0/24 via 10.50.46.1 dev lateralmovement metric 1000
10.200.150.0/24 via 10.50.46.1 dev lateralmovement
root@ip-10-10-187-231:~# nmap -Pn -p- --min-rate 2000 10.200.150.100
Starting Nmap 7.80 ( https://nmap.org ) at 2025-08-16 09:52 BST
Nmap scan report for trybankme.thm (10.200.150.100)
Host is up.
All 65535 scanned ports on trybankme.thm (10.200.150.100) are filtered

Nmap done: 1 IP address (1 host up) scanned in 67.06 seconds tried to restart the network but again, it is not working. Please, help me. My time is running and I do not want to fail also the network says it is offline when I move from the dashboard and the machine. What should I do?

[snow stone]

Hello yall,

Got the voucher for PT1 and I'm going to tackle the first try this weekend. From what I've heard the exam is pretty stable, but I want to ask if you experienced any issues with the environment and what will you recommend to use - the AttackBox or my own VM?

[cinder patrol]

ofc VM

[signal steppe]

hey guuys, i just submitted the pt1 exam and im really confused about the points that were taken from me by the AI, is is possible to ask for a manual revision or smth?

[snow stone]

from what I've read it is possible, make a ticket and explain them your concerns

[vagrant lynx]

How many point you get from the AI and how many flag you collected?

[signal steppe]

got 8 flags score 731, plus one vuln that i described but got no points out of it

[vagrant lynx]

I think 8 flag is very hard to pass but you can try. You need close to perfect reporting

[vagrant lynx]

Tbh, if you are using the free voucher, I will suggest to retake it again after the cool down as the manual review might take 2 week.

By that time, it might be too close to the expire date.

[signal steppe]

yeah i want to try, do i create a ticket or send a email?

[vagrant lynx]

Both is the same, it will end up emailing the support.

[signal steppe]

ok, thks so much

[harsh quest]

got stuck on the web, 1 vuln left

[shut mesa]

hi

[cloud tree]

Hello, when I go to check in for the exam, it says that my verification has expired. Does anyone know how I can fix this problem?

[stray skiff]

Hello, had the same problem here. Write a ticket to the support. They will reset it

[cloud tree]

thanks

[lone wraith]

any updates on physical certs or the special package for the first 100 to pass?

[light token]

Whats the cooldown period if we fail ?

[keen sleet]

3 days ~

[fast veldt]

Anyone

Online

[keen sleet]

?

[fast veldt]

Is pt1 internationally recognized?

Like compTIA or ceh

[keen sleet]

No.

[proud gale]

I'm experiencing a bunch of network timeouts on both the vpn and the attackbox.... is there a way to get support

[proud gale]

This is actually ridiculous how bad the exam network is… I cannot connect to any machine anymore

[proud gale]

also getting a lot of issues where after I take a screenshot the attackerbox just won't take inputs or defaults to holding command... this is actually a horrible exam experience

@keen sleet or @ebon creek any advice, this is actually impossible to work with now. My attackbox won't let me type or select, it has alt held down and won't let me do anything

[plush solstice]

Chat, I'm cooked, solved AD and network in 4 hours, spent the next 20 hours doing web only to find 1 flag... 20 hours left, hopefully a brain blast kicks in I CAN DO THIS

[proud gale]

atleast your machines work lmao

[shut mesa]

My name has been printed incorrectly on the certificate in PT1. Is it possible to get it corrected?

[ebon creek]

Sorry but I can't help you with that I am not a staff member , I don't have control over the configuration of machines/networks . If you have connection problems maybe you could try with changing the VPN server and regenerating vpn file

[ebon creek]

Fingers crossed 🙂 🤞

[ebon creek]

Reach out to support on the email below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 17, 2025, 6:27 AM

[torn girder]

Hehehe

[ebon creek]

I've forwarded your message to staff channel , if somebody is available today they will respond asap

[formal pumice]

@whole beacon My Network Pentest reverse shell is really slow. Windows machine. Other labs just works fine

And yes, reseted it, regenerated config file, none of them didn't work. Same issue yesterday too.

[proud gale]

Thanks, this is kinda crazy though that the cert exam is this unstable. I am wasting so much time on the exam just battling network errors

[lime fulcrum]

Gave +1 Rep to @ebon creek (current: #1 - 5831)

[proud gale]

I haven't been able to access the web section at all for more than 10 minutes without the attack box freezing, network issues, lack of connecting to the vpn, etc

[formal pumice]

@keen sleet Update. Not working at all.

@ebon creek @rain raptor

I've only 5 hours left and have to travel in between too

[ebon creek]

Sorry but I can't help you I am not a staff member I don't have a control over network configuration

[formal pumice]

So I'm doomed

[proud gale]

Yeah the network is cooked, idk why they have this exam out when it is so unstable

I have to reset the full network every ~10-15 minutes to make any progress

[ebon creek]

Well i forwarded your messages to staff report channel but they don't work on weekends + they may be in a different time zone than us

[proud gale]

The exam doesn't seem to work on weekends either 🤷

[little mica]

@ebon creek if this is the case then what will happen if the attendee gets failed? Asking this out of curiosity. As I am writing a review on THM PT1 examination.

Shall the attendees not start the examination over the weekends?

[ebon creek]

You should reach out to support on the email below , they'll probably you with some solution/compensation for inconvenience

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 17, 2025, 10:51 AM

[little mica]

@ebon creek Thanks a lot

[lime fulcrum]

Gave +1 Rep to @ebon creek (current: #1 - 5832)

[keen sleet]

Did you respect the RoE?

[tight violet]

Did they start shipping the physical certificates?

[keen sleet]

Highly doubt, I've been waiting for like 2.5 months now.

But it is known that the delivery of such stuff are very slow at THM. People have redeemed their prizes (On the profile tab) and haven't received anything for months. Disappointing, but that's how it is for now.

[tight violet]

True, it's not even limited to just the deliveries. I've been invited to meet with them twice and both times they've never shown up for the meeting.

[stray skiff]

Hello, I failed my exam. Since I won the voucher from the giveaway and the voucher was valid till 30 August, does anyone know since when my retake voucher is valid?

[little mica]

Reattempt you will be able to do after 48 hours

[harsh quest]

eeeh finally passed my PT1

[hasty maple]

Congrats 🎉

[plush solstice]

I now have 2 flags on the WEB, 2 left and I'm done, WERE SO CLOSE BOIS

[lusty bobcat]

Let's go! Good luck peeps, I hope I will be doing it soon, too. Right now I don't feel even close to be ready

[keen sleet]

Gave you the role.

[topaz oyster]

If the machines or the network don’t work during the exam, send them an email, they will compensate you with extra hours. I also couldn’t get it running for about 2 hours, got frustrated, and left. When I came back, they had replied and added extra hours to my exam.

The network, by the way, seemed to start working on its own after about 3 hours.

[gray tulip]

Today I gave the PT1 exam. I submitted the actual flag, but they gave me 0 points even though the flag was completely correct.

Only 1 Points needed to pass

[idle hornet]

@keen sleet thanks for the escalation, cleared it 😁

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 357)

[blissful cloak]

Hello!

[plush solstice]

Ended up getting 3 of the flags on the web app, and I passed! The last vuln will haunt me for the rest of my days...

[ebon creek]

Congrats , great job 🙂

[proud gale]

So far even with all the network instability and reset every few minutes I managed to get:

• 2.5 web flags
• all four network flags
• all ad flags
  Still got ~23 hours left but got to do all the reporting. Found plenty of vulns on the remainder of the web app just haven’t gotten the full 3rd flag or a flag for some of the other vulns

Think I’m in a good spot assuming the network starts behaving

Still probably should get extra time since the infra is super unstable

I think I’m cooked since I’m about to be on an airplane in a couple hours but we will see

[proud gale]

For the reporting is there a style guide we should follow or any guidelines on things like writing from an agnostic threat assessor? For work we write “the offensive security team found X…” but wanted to check as we are an individual

[ebon creek]

You will need to reach out to suppport on the email below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 18, 2025, 4:43 AM

[trim basalt]

Hello, I have received the pt1 free voucher. The email states that I have until August 30th to take the exam, so can I start the exam on the 29th?

[distant trout]

This exam is crazy hard. It does not match the training provided by THM at all. Pretty upsetting honestly.

[keen sleet]

Everything in the exam is totally fair. Only part I'd say is unfair compared to the training is the Web part.

[keen sleet]

[e-mail]

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 358)

[late linden]

Do we have to wait until UK time am 9? Are there no relevant personnel on duty now? Thanks

[keen sleet]

2-4 hours of overlap is the best you will get.

[proud gale]

Managed to pass the exam even will all the exam issues 😎

AI grader sucks lowkey tho

[plush solstice]

@keen sleet How do I get the PT1 role? I passed the exam recently!

[keen sleet]

Done.

[ebon creek]

@proud gale @plush solstice Congrats guys 🙂 🚀 🔥

[ebon creek]

Shouldn't take more than a week

?

Support is only available on the email below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 19, 2025, 8:54 AM

[late linden]

Alright. This AI has indeed affected the overall exam experience. But I appreciate your response.

[rapid bolt]

Just to be clear, the AI grader does not touch the flags, these are checked by traditional matching

[keen sleet]

Flags are just basic string matching. There's very little place for error. It's most likely a user-induced error: an extra space, character, not saving the flags correctly, etc.

[proud gale]

How do we get the welcome kit once we received our pass?

[keen sleet]

The welcome kit?

[cinder patrol]

@keen sleet i've passed my pt1 i can see i can retake

if i retake and get failed i'll consider fail?

also how I can get physical certificate if you could tell

[proud gale]

Quote from the website: Step 3
Get certified and get hired!
Access your digital certificate, celebrate your achievement with a Credly digital badge, and receive a physical welcome kit.

[keen sleet]

Oh that probably refers to the PT1 physical copy of the cert.

You can either order it or get it alongside other goodies for free if you are in the first 100 to pass PT1.

We have been waiting for around 2.5 months so I wouldn't get your hopes up for now.

[cinder patrol]

can anyone answer this ? and mod staff members

[keen sleet]

[e-mail] but they're not ready yet so no point.

[keen sleet]

cc @rapid bolt

[woeful escarp]

QQ: For the ones that have the opportunity to complete PT1 before August 31st by having a previous cert like OSCP, does it also include the premium 3 months of learning? If that's the case I've never had the premium activated on my account and was met with a paywall whenever I tried to visit the training/rooms.

[vast flax]

Where can we order the physical copy?

[gritty trail]

Hi guys, just why I can't reset the lab ? I asked to reset like some hours and go and still... not reset and can't click on the button agian :(.

[gritty trail]

Nvm finally reset I guess, rn I'm doing a break, I can click again on the button but yeah... +2h.

[rancid ember]

[fiery juniper]

How can we request the real certificate of pt1?

I want to buy it

[keen sleet]

You have been asked to wait at least a week, please stop pinging all the staff members. Manual PT1 reviews can take up to 14 days.

[keen sleet]

Not available for now.

[unreal frigate]

Hi, I passed a few days back I just wanted to know. Has already 100 people passed? Is there any chance for winning the physical cert( it looks awesome by the way)

[vagrant lynx]

what do you mean by winning the physical cert?

[unreal frigate]

There was a reward for first 100 people

[vagrant lynx]

oh really

lol

[vagrant lynx]

how u know if u are first 100

[unreal frigate]

😑

I am literally asking that

[vagrant lynx]

/is there a api

i see

[unreal frigate]

Yeah

🤣

PT1 is awesome probably best among the junior certs

[vagrant lynx]

hmm

exam i think is good for like tech interview

for job

but the AI grading system...

[unreal frigate]

I want PT2 to be on the level or above og PNPT/OSCP. Tryhackme is doing great

[vagrant lynx]

i have bad experience

[unreal frigate]

Thats the only down part probably

[vagrant lynx]

yes

[unreal frigate]

The AI grading

[vagrant lynx]

maybe a CPE system to renew the cert

also

[unreal frigate]

Other than that.my experience was smooth. No disturbance of the exam environment

[vagrant lynx]

most exam can do that too

at least for my experience

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 360)

[junior drum]

heya! did you take it finally?

[balmy canopy]

@junior drum Not yet. I am doing a real pentesting assignment right now (my first!!!), so the study has been postponed a couple of weeks. My plan is to take the exam in October.

[frosty stag]

Take a high quality image file to a professional printer and have them do one up for you.
Select the paper, fonts n stuff.

[hollow wyvern]

Hi in verification process error saying your session has expired

How to solve it

@lime fulcrum

[woven night]

Anybody know how to verify for PT1? Do I need a cam on my desktop computer?

Ok, saw this: #pt1 message

[hollow wyvern]

What about your session is it working because it says to me your session has been expired I mean the verification session

[tired ether]

Hello! I received an exam voucher for PT1 during the promotion (that expires on 30th Aug). Does that include a free retake as well or just one attempt? Would appreciate if anyone knows, thanks.

[woven night]

I'm not sure what you mean, but the cam is just needed for the verification of your ID. So, I guess if you already verified you self, it does not matter if the session is expired.

[woven night]

In the exam details you can see in one bullet point:

Attempts: 1 free retake (further retakes cost £100)

[broken copper]

Does the expiration date apply to the retake as well?

[snow stone]

ticket to the support is already submitted, but I wanted to check here if there is some faster way to resolve this problem.

found 2 vulns in the web part of the certificate, but seems that the script doesn't generate the flags correctly for the format the the report is expecting.. any thoughts on this?

[woven night]

I don't know.

[snow stone]

I think that it's the same, for the voucher for sure is

[snow stone]

any mod on here?

[ebon creek]

What is the issue 🙂 ?

[snow stone]

support contacted me about this one and said to reset the env and wait 5 minute - did that 3 times and waited more (one time 30 minutes) - the problem with the flags is still there and no more feedback (probably flooded with requests,but yeah).

I want to know if there is something I can do at my end to resolve the issue?

[bleak latch]

hey, im getting

Your session has expired

The SDK token provided in this verification process has expired. Please go back and try again

during my check in process

what am i supposed to do

[snow stone]

have you managed to check in successfully or not yet?

[bleak latch]

nope

still the same issue

[snow stone]

the only time i got this is when i was too slow for the selfie, at which point you get this error?

[bleak latch]

as soon as i click check in

it shows up , by some onfido security

i am doing it on pc, should i try switching to my phone?

[snow stone]

yeah try with the phone - scan the qr code and do it from there

[bleak latch]

same thing on phone

as soon as i click next step after typing my real name, it shows me SDK token provided has expired

Ahh man i was planning on giving it today because university starts next week, and they arent gonna reply till monday probably

pain

[snow stone]

not sure then what to advise you, except to open a ticket to the support and wait for them or someone in here to answer with some resolution

[bleak latch]

yeah i sent a mail

[bleak latch]

nvm, they replied so fast it got fixed

[snow stone]

and i'm still waiting

[bleak latch]

praying you get your reply soon my brother

all prayers your way

[hybrid spoke]

Anyone encounterd the "Answer is too short, ensure the answer follows this exact length:" while trynna submit a flag in the PT1, Report ?

It's expecting a format other then the flags given in Network section

[snow stone]

exaclty my problem

found 4 (for sure correct vulns) and the flag is not in the format it should be

[hybrid spoke]

I emailed the support still waiting for a response

[hybrid spoke]

Same

[snow stone]

please ping me if they give you a solution as from 12 hours - the only thing i got is "reset" and then "all is good, don't reset much" - but all is not great

[hybrid spoke]

HAHAHAHAHAH aight will do

[brave vault]

I have the same problem

anyone can help???

[brave vault]

i sent email to support but dont receive rely

[vagrant lynx]

their operate in a certain region/timezone

[brave vault]

i can not connect to vpn

anyone can help me

[late kettle]

Hi! I'm currently taking the exam, and I can't ping the workstation IP but I can ping the DC IP, anyone can help?

[autumn cobalt]

Will the new exam environment be the same or different one if we take the second attempt?

[hybrid spoke]

@snow stone 2 hours left for my exam and still haven't got an answer about this from support

any updates from ur side ?

[snow stone]

absolutely nothing, it's sad..

got little more than 20h myself but...

[hybrid spoke]

man I miss TCM's support!

[heavy gyro]

I have logged a ticket on a bug with the flag in my exam environment but have not receive a reply. Anyone knows how fast they would usually reply? Or if there is a support admin in the discord that would expedite or reach out to

[heavy gyro]

I think i am in the same situation as u…

[hybrid spoke]

I'm talking to support rn they said the flags are expected to be uuid when i got them as a hash

so confusing

[heavy gyro]

Mine is not even in a uuid format which is what it is expecting sigh

[hybrid spoke]

they are currently investigating @heavy gyro @snow stone

[snow stone]

nice, love to hear this

[heavy gyro]

Hope they compensate some time loss xD

[snow stone]

would be really nice if it's possible

[hybrid spoke]

Yess support told me they will extend time

[heavy gyro]

My ticket number is #29151599 if they want to group and resolve the issues together

[hybrid spoke]

I'm on a chat, can't see a ticket number

[snow stone]

Ticket ID #28810105 if it will be easier

[safe musk]

As long as you have proof of your actual flag values in your exam, so screenshots of the flag with the date, a manual review would give you the points. It looks like the flag generation system decided to not generate UUID flags for the network portion for one or two of the exam attempts. The team is investigating why. But as long as you have proof, the manual review will award you the points for the flag values. That's why we have the manual review process. But it can take up to 2 weeks for a review.

[hybrid spoke]

I have the screenshots but without a date, that means what ?

[safe musk]

Means we can only use the flag value to verify that the screenshot belongs to you. Each flag value is unique, so that should be okay. But better if you include the date then it is correlated to your exam date as well.

[hybrid spoke]

And that"s gonna take 2 weeks ?, if so and the generation system is fixed I'll just redo the Network portion

[snow stone]

I got the problem in all 3 domains - Network, Web and AD

[hybrid spoke]

😮

[safe musk]

I authenticated into your network and checked. Your flag values are correctly populated.

[snow stone]

I'm confused.. can you contact me in the ticket so you explain - as if they are correct then the report platform is broken

[safe musk]

Your message was: I got the problem in all 3 domains - Network, Web and AD

So what I did:

• Authenticated into your control server
• Checked your unique flags and verified that all of them are UUID, which they are
• Authenticated into your webapp and confirmed that it populated the same UUID 4 flags, which it did
• Authenticated into your netsec windows box and confirmed the user.txt flag is UUID, which it is
• Authenticated into your AD WRK machine and confirmed the flag.txt is UUID, which it is

So I'm not sure how you got this non-UUID problem in all three domains? Unless you are facing a different problem that isn't related to this issue?

[hybrid spoke]

Maybe that's as of now, check his logs from when he typed the flag values to confirm

from my side I still have the same issue, tried to redo one machine and still getting flag as a hash format the same one i got in the beginning

[safe musk]

Cause your flags are not UUID. So they won't change. As mentioned in my previous message, there was an issue in your exam with the flag generation so it gave MD5 instead of UUID. But as long as you have proof that they are your flags then you will get your points.

What's I'm trying to say here is that user's shouldn't just automatically jump to the conclusion that everyone is facing the same exact issue.

[hybrid spoke]

And if the system is generating md5 instead of uuid would that be my issue ?

u said if that's the case i can provide screenshots

but that will take 2 weeks ?

2 weeks for verifying the flags that the system gave it to me wrong

and to get my cert

??

[safe musk]

It is confirmed to be your issue. Team already checked.

If you can't submit those flags via the automated system (which the team it trying to do a fix for), then yes, manual review. And manual review takes up to 2 weeks, since we get a lot of requests and need to work through each.

[hybrid spoke]

issue fixed ig ?

just retested on the windows machine

[safe musk]

New values should have been pushed for both your Windows and Linux machine. So your two options is either just grab the four flags again and submit the correct ones. Or the manual review with the old flags

[hybrid spoke]

Flags grabbed

PT1 passed 🎉

[stray skiff]

Hello, guys, is there a chance to extend my voucher? To be clear, I won it in the giveaway and failed the first attempt.

[keen sleet]

[e-mail]

[snow stone]

congrats man!

[tame spire]

About to start the exam. With all the issues we keep hearing about, wish me good luck 🤞🏼

[keen sleet]

What did end up happening with your flags?

[snow stone]

nothing, still the same.. i just keep trying to find everything, need 3 more and then I'll hope for a manual review

they said my flags are not broken 🤷‍♂️

[frank falcon]

I took an exam 8 days ago, and still generating correct flags for the Network Section is not working? I have a second attempt, valid to the end of month, but I'm scared to use it, if problems with flags still exist.

[urban trench]

anyone had problems when submitting the exam got 0 points in summary or something?

[coral bone]

is the flag problem resolved ? i m planning to use my retake

[tough axle]

Hey, everyone. I'm going to attempt PT1 exam in a day or two. Wanted to ask a few things before I attempted it.

-> I know the exam is 48 hrs long. Does that time include reporting or not?
-> If the 48 hours does include the reporting work, how long would it ideally take to get done with the reporting task?
-> Also, what will I need for verification process and how long does that take?
-> And, how soon can I reattempt the exam in case of failure in the 1st attempt ?

Thanks, and please wish me luck. I'm not too confident about the web-app part, but I hope I make it. Cheers 🤞

[keen sleet]

Includes reporting. You need an ID. 2 days cooldown between attempts.

[deep turtle]

Hi guys, I am having trouble with verification process

[keen sleet]

[e-mail]

[deep turtle]

does it take a long time usually?

[deep turtle]

ah support will answer in 2 days , damn

[tough axle]

Thanks. Any idea how long should reporting take ? I'm trying to plan out my time within this 48hr duration.

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 365)

[keen sleet]

Not before tuesday. Monday is a holiday.

[mental oar]

Does PT1 include reverse engineering?

[keen sleet]

No.

[brave vault]

i have question if i fail PT1 and do retake so i can do retake in next 12 moth. right?

[noble glen]

HI, guys, I do have problem in starting in the exam, the id verification URL does not work porperly, showing your SDK token expired, already drafted mail to support team but I think they replies on monday to friday.
Can anyone help me on this?

@novel coral @keen sleet @ebon creek

[ebon creek]

I had the same problem , you will have to reach out to support only they can help you

[ebon creek]

You can do it before your voucher expires

[brave vault]

so my voucher with expires in the end of this month and i failed today so i need do before 31/8

right?

[ebon creek]

yeah

[brave vault]

yes thank you

[noble glen]

Ok,thank you.

other than mailing them. is there any other ways to contact the support team?

[noble sonnet]

Hi. I’m currently taking the exam and the AD Workstation is down. I have reset the network over 6 times. Is it from THM’s end or am I missing something?

[brave vault]

i have prolem with web PT1

I triggered xss sucess but when curl reponse is fail

[snow stone]

check the "Scoring" in the dashboard - maybe it can help you

[split folio]

Hi Good Morning Everyone

Currently writing my PT1

i need some help

anyone currently writing it ?

[kindred oasis]

you shouldn't be asking for help in a live exam

[split folio]

I'm not asking for answers

I'm asking for tips

[raw jay]

Hey I'm doing the pt1 now I am using attack box but can't seem to reach the trybankme ip i ping it it seems to be down I try to search the ip in a browser connection gets timed out anyone help

[junior drum]

have you generated the vpn file?

make sure the file has a size (many have a 0kb size at first, had it this morning)

[raw jay]

Im using attack box

[junior drum]

oh i dunno then sorry 🙁

[plush vector]

Unfortunately tips are not allowed either

[plush vector]

run tryconnectme in the attackbox

It will tell you what the issue is if you have any issues

[brave vault]

can i have question i see one xss vuln
the api when curl is http://ip/api/v1.0/xss
or another api ?

although web have vuln but i dont get any flag

[raw jay]

Is there anyone from try hackme that can help

[raw jay]

Anyone from tryhack me please help

[junior drum]

@raw jay better get a kali vm i think

it's the weekend, not sure they're working

[raw jay]

I downloaded the vpn file and tried to connect through that too using openvpn still cNt pin the target

I.p

[junior drum]

did you check the vpn file size?

too bad the report doesn't take markdown

[bleak rampart]

i am Facing issus on Verify your identity page

show error message
Your session has expired
The SDK token provided in this verification process has expired. Please go back and try again.

what to do Guys?

[raw jay]

Can't even reach the target i.p what exam is this

[junior drum]

shoot a mail to support

[bleak rampart]

I Mailed , But No responce Get

[sturdy saffron]

My PT1 voucher expires Aug 31. If I start my first attempt on Aug 25 (ends Aug 27), and then do the retake on Aug 30 after the 72h wait, will both attempts still count even though the retake runs past the expiry?

[desert terrace]

hello, i was wondering
do the flags reset also if i reset the network during the exam?

[agile plover]

In my case, it did not

[junior drum]

I wonder how many started the exam and thought "I don't have what it takes"

[strange ermine]

If I submit my first flag will it grade my reporting on it or does it only get scored at the end?

[junior drum]

scoring is done at the end

[bleak rampart]

In the PT1 exam, I’m facing issues on the ‘Verify Your Identity’ page. What should I d0 ?

Error Msg
Your session has expired
The SDK token provided in this verification process has expired. Please go back and try again.

[gusty flare]

Try logging in again

[bleak rampart]

I tried, logout and again login, i used diff bowers also

Please help me

[keen sleet]

[e-mail]

[broken perch]

im getting the same exact issue as you, were you able to figure it out? I tried all the solutions mentioned

[bleak rampart]

I Sented Mail , but there is no responces

[broken perch]

Yup same here, I emailed support, logged out, cleared my browser history and cache and getting the same issue too

[keen sleet]

It's the weekend; people don't work on the weekend.

No reply before Tuesday. Monday is a bank holiday as well.

[visual hazel]

Hi, is there any support for pt1 ?

NetSec servers are constantly going offline

[junior drum]

AD servers are slow as hell too

[sick python]

Probs gonna give up on this exam... the environment simply won't stay up :/

Restarted 3 times, and half the machines are bricked. Hope support can supply something when they're back online.

[junior drum]

https://tenor.com/view/never-give-up-fist-pump-motivation-motivational-gif-4892451

[final vine]

is it normal if I just shut down my pc ?

[midnight vale]

hello can someone help me how i can get fast support from thm team , i am facing technical issues in exam

[snow stone]

Not such a thing, especially during the weekends. Wait until Tuesday and use the email (don't use the chat follow-up)

[midnight vale]

ok

[plush vector]

What's the issue?

[midnight vale]

fixed

[junior drum]

erm... my flag changed as i was doing the assessement (and now it's not in the right format anymore) Oo did it happen to someone else?

[junior drum]

just saw that, i did get an md5 too on the reset...

[junior drum]

Well i'm amidst my exam and tbh, i find it quite frustrating that :

• networks are unstable as hell (resetting the netsec again cause the machine isn't responding anymore... again and for no reasons)
• flags are not fixed
• report is buggy and the formatting is quite difficult
• reports are definitly missing pictures
• AD is slow
• verification process buggy (i think that might be the most documented thing around)

I get that it's nice to have a 48hours format exam as many others, but at the least it would be awesome to provide a fully functioning environment or at least stable ... it really feels like juggling with machetes, porcelain and a drunk sailor here to keep it all working at once

[dawn estuary]

I exploited about 14hrs ago only to start reporting and now i'm seeing that the flag was not correct( was changed from the initial one😒😭) i had to exploit it all over again i hope it won't invalidate all my flags, exploting all 3 labs all over won't be nice

[junior drum]

Let me guess...netsec?

[dawn estuary]

Yess 😤

[sonic orbit]

URGENT - any mods available to help with flag submission for PT1 exam?

The flag from my windows netsec machine bears no resemblance to the correct format.

[junior drum]

Same...

[junior drum]

Same for a lot of people, md5 generated flag instead of uuid

[sonic orbit]

mine is literally just text, no uuid or md5

[dawn estuary]

I almost submited a user flag as root flag because of this stress lmao

[plush vector]

You may need to reset the environment

[dawn estuary]

It's the same for AD too c'mon guys 😭

[sonic orbit]

reset and it's now giving me an MD5 - this is ridiculous

[versed python]

The SDK token provided in this verification process has expired. Please go back and try again.

i am getting this eror can someone let me know how to solve it

[dawn estuary]

Is the attack box down too ??

[junior drum]

reset it again, i did and it turned back to uuid........................................................................................................

[sonic orbit]

yes, had to do same

[versed python]

The SDK token provided in this verification process has expired. Please go back and try again.
i am getting this eror can someone let me know how to solve it

anyone

[keen sleet]

[e-mail]

[vale granite]

guys if i buy PT1 voucher do i get option to like set up date when i will do exam or does it starts in 3 months after i have bought voucher?

i am confused

[desert terrace]

you can choose whenever you want within a year, you don't have to set up a date prior to taking the exam

[dawn estuary]

https://www.credly.com/badges/159dbe74-a771-487b-89f1-5bab50affe5f/public_url 🏃

[agile plover]

Congrats mate

[dawn estuary]

Thanks man 💪

[snow mango]

congrats Egzy!

[dawn estuary]

Thank you 💪

[lime fulcrum]

Gave +1 Rep to @snow mango (current: #835 - 7)

[tough axle]

Quick question. Do you folks reckon I can pass the exam with 4 netsec flags, 2 AD flags and 2 webapp flags (assuming my report is decent) ?

[sonic orbit]

sounds possible IMO

[vale granite]

is this room enough knowledge for writing pentest reports

for pt1

[remote portal]

The onfido site isn't working for me. tried several browsers

[grizzled torrent]

I would say try for one more web flag. If AI grades your report badly then this will be very important. If you want to pass with 8 flags then you need to be sure all your flags and vuln id are 100% correct and your report is on point following all the procedures detailed in the writing pentesting reports room

[keen sleet]

Unlikely you'll pass with 8. Rarely possible.

[strange ermine]

I am worried my network flags are not the correct format. Should any flags read just plain text?

It does looks like its in the wrong format

What do I do in this case?

[mighty mist]

If i reset the exam environment should i resubmit the flags?

[sonic orbit]

I had this earlier, had to do a reset of the environment and exploit again to get the correct flag

[strange ermine]

Will I have to redo all 4 flags? Only 2 of the flags are messed up.

[sonic orbit]

personally, I did just in case... up to you though

[strange ermine]

Were the flags the same or diffrent on the other set?

[sonic orbit]

It was the network ones that were messed up for me... AD was fine

[junior drum]

am i the only that have been cut from the network ?

is there an admin/mod that can help by any chance? i restarted the network, regenerated the vpn file and still nothing when i ping 10.10.10.10 i have a 100% packets lost whereas when i'm using the tryhackme general vpn file everything works fine ......

[junior drum]

any staff member please?

[cloud tree]

does anyone know if I reset the lab enviroment of the examen (PT1) the flags change?

[junior drum]

they do for some, and don't for others

[full pivot]

This test has been super buggy

Not a fan so far

[cloud tree]

I already exploited a vulnerability on the web app but I dont get any flag, does anyone know why?

[junior drum]

@plush vector sorry for pinging you, just to know if there's any support whatsoever or if I can just let it go, I've been out of the network for an hour, even the attack box is off of it and I have less than 10hours left, should I consider this failed ?

[plush vector]

No worries 🙂 - No, how many times have you reset the network or have you tried resetting the network?

[junior drum]

I don't recall tbh, I'm going to do it again

I've also regenerated the vpn file twice

[plush vector]

Try reset it, wait 10 mins and see if the attackbox will load back up

[junior drum]

Thx

still got nothing... i'm still out of the vpn connection, regenerated the vpn file, tried with the attackbox too...

[coral bone]

I do not know what to think … i m going to retry this exam because i failed with 729 … and i think that i mis a flag for a bug …. Hope the next try will be successfull

[junior drum]

@plush vector nothing at all 🙁

made a support ticket, it's going to be a wrap for me and that really is frustrating all the network issues, vms, flag bugs...

[plush vector]

Try run tryconnectme on the attackbox

[junior drum]

used the thm-troubleshoot script

shutting down my vpn i'll try on the attackbox again

[junior drum]

not working :

We will have to debug that! Let me run some diagnostics....

ran the script twice

And on Discord, please provide the output from:
  /root/Desktop/NetworkConfigs/logs/pt1-network-3.log
root@ip-10-10-229-152:~# cat /root/Desktop/NetworkConfigs/logs/pt1-network-3.log
cat: /root/Desktop/NetworkConfigs/logs/pt1-network-3.log: No such file or directory

and even a third time ... still the same

[torn girder]

They don't

[full pivot]

AD section is kicking my but

[junior drum]

At least you have access to it 😂

[warm sapphire]

lol you asking for help on a certificate exam?

[full pivot]

I messaged you. the web was also broken for me

[keen sleet]

You don't give a shit you're cheating in an exam?

[mighty mist]

??

[north plank]

Has anybody found that a user flag is missing in the exam environment that is described in the rules of engagement / deliverables? thanks

[torpid berry]

Anyone knows the intended way to submit a partial flag, as described in the RoE? It implies that that's a possibility, but then validation on the report fields actively block submission until it matches the expected format (which is a full flag).

[keen sleet]

You need 2 half flags to be able to submit the full flag.

You cannot submit a partial one.

Basically, a partial flag awards you no points.

[torpid berry]

What about an identified vuln with no flag?

If you identify a vulnerability but are unable to fully exploit it to receive the flag value, you can submit the vulnerability without the flag for partial credit.
For the same validation reasons as with a partial flag, it's not totally clear how you could "submit it for partial credit"

[final vine]

Could we get the physical certification after passing the exam ?

[glossy gulch]

Hey, so, I found an XSS but i can't retrieve the flag, I've been stuck here for a few hours now

[glossy gulch]

Nothing there

[keen sleet]

Not available yet.

[keen sleet]

That's reliant on the Vuln ID. If the Vuln ID is correct, but you couldn't find a way to get its flag, you'll get points. But it MUST be the Vuln ID that has a flag behind it.

[keen sleet]

It must be a stored XSS. Self-DOM XSS does not count.

[torpid berry]

Oh I see. thanks

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 368)

[sullen aspen]

Hi guys can someone help me with the gatekeeper

https://tryhackme.com/room/gatekeeper

[glossy gulch]

I passed that, but the web part is really hard, so I'm now doing the network pentest

[keen sleet]

Nice, best of luck.

[glossy gulch]

thanks for the hint btw

[glossy gulch]

thanks! 😄

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 369)

[heavy gyro]

Is it possible to ask for or get a manual review on the reporting aspects of the report? Like CVE, description etc.

[torn girder]

@keen sleet ib my man hahaha

[torn girder]

U can always raise a ticket

[junior drum]

Tada!!! I officially failed PT1 for.... VPN connection not working on THM side yeeeeeeey 🎉 🥳 🎉 🥳 🎉 🥳 🎉 🥳

[coral bone]

Buggiest cert ever

[coral bone]

I m experiencing a bug in network session and i m not able to go on … any admin available ?

Also the “ report issue” button does not work

[coral bone]

Now i can access to a machine but there is no flag

[languid shell]

I took my first attempt 2 days back. I'm totally disappointed with your support. For the first 8 hours I couldn't reach the web server. Then for 4 hours its performance was poor and It became unresponsive. It hardly handled 3 parallel requests. Adding on to it, the attack box reset frequently without any notice and every progress was lost. I can't believe my efforts went in vain.

[junior drum]

i shot them a mail yesterday, maybe everyone that has had a bad experience should too

having the 14 last hours with not working vpn network for that kind of exam is totally insane

[languid shell]

I kept mailing the [e-mail] during exam. They didn't care to reply back

[junior drum]

same ... guess i'm definitely going for CPTS then , got a retake but in the same conditions? no way on earth

[elder nova]

it's a bank holiday in the UK which would explain why. I think support's working hours are regular 9-5 Monday-Friday but i may be wrong 🙂

[left helm]

PT1 kicked my bug. Network wasn't bad, AD was alright but Web App I was pretty lost. Feels like a Bug Bounty cert.

[junior drum]

in that case don't allow users to pass 48hours exams on week ends when support is down

[elder nova]

yeah, that is not down to me, i'm not part of the staff, but you can always suggest there is someone on-call or standby to support users with the issues

[keen sleet]

Very bad take. A lot of very big cert vendors do the same.

[junior drum]

Well then does it mean it's fine that i failed the exam cause network was off because "others too" ?

i mean read the room, i'm not the sole soul to be quite upset about PT1 here

[keen sleet]

'[e-mail]' for the rest.

Without the quotation marks.

[coral bone]

I rebooted for the third time and i got the flags but i wasted lot of time

[gritty trail]

Question, I failed my first attempt but I will have to quickly make the second attempt soon otherwise I will not be able to pass it... I had contacted support with documents to discuss the problems I encountered when sending the report and the results. Can I make my second attempt at while they are looking about my documents or do I have to wait for a response?

[dawn estuary]

Congratulations man 🎉

[strange ermine]

What is the physical welcome kit? Has anyone received it?

[elder nova]

probably the most annoying part is the web, i've finished everything else in 4 hours with the exception of web

[keen sleet]

We don't really allow promotion in here.
If you want your article to be allowed to be published in here, please allow its access publicly and not to members-only.

[keen sleet]

Yeah you can.

[keen sleet]

Not available yet.

[gritty trail]

Alright, thanks,because I reported two vulnerabilities without flags and I got 0 points, and that's how I lost quite a few points., is this normal or not?

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 370)

[keen sleet]

Yes, this means that the vulnerabilities you found did not hold flags. They won't give points.

[gritty trail]

But yet it says that we win points?

"partial points" or did I misunderstand something?

[keen sleet]

The only way to get points without finding a flag is if the vulnerability you found actually has a flag behind it but you weren't able to retrieve it.

You'll get partial points only in this case.

[gritty trail]

Ah okay.

And also I had a vulnerability in my report and in the final results it changed the ID, was it the one I was supposed to put this one (from results) or is it a bug?

[junior drum]

Thanks man! The 34 lost hours i'm the most proud of ❤️ 😂

[lime fulcrum]

Gave +1 Rep to @dawn estuary (current: #3104 - 1)

[dawn estuary]

That feeling when you're about to submit 😂😬 I'm happy for you 🎉

[north plank]

@junior drum you will get it next time- i am 24 hours in - 4 hours for network and ad total and 20 hours staring at burpsuite!

[elder nova]

i feel you 😄

[coral bone]

I ve done AD and Network… but web is killing me

8/10 but without another web i lo not pass

[tulip violet]

Hey, I wanted to ask: if someone fails on the first attempt after starting the exam on the 30th, would they be allowed a second attempt?. Expiration date 31st Aug 2025.

[obtuse kite]

There's 2 free attempts on the cert.

[obtuse kite]

If you fail both attempts you'll have to buy the PT1 again.

[midnight vale]

yes same

[tulip violet]

Actually expiration date is 31st Aug.

[obtuse kite]

2025 or 2026? 👀

[tulip violet]

2025

haha !

[obtuse kite]

💀

hahaha

Then you will have to buy it again or try to it before 31th. You have 6 days.

[tulip violet]

Haha ! Thanks Will spit blood now !

[obtuse kite]

Sure.

[glossy gulch]

How many flags do I need to pass?

[obtuse kite]

As much as requested. On each section.

[glossy gulch]

No se donde dice :v

I have 6 out of 10 flags

[obtuse kite]

Has hecho AD?

[glossy gulch]

Sisi, me faltan 2 del web, 1 de network y 1 de AD

[obtuse kite]

AppSec/WebApp:
4 vulnerabilities and 4 flagsto submit.

NetSec
2 Hosts to compromise & 4 flags to submit.

Active Directory
2 Hosts to compromise & 2 flags to submit.

[obtuse kite]

Okay vas bien.

[obtuse kite]

Para passar el total tiene que sumar 750 o mas.

[autumn cobalt]

does 8 flag
web 2/4 network4/4 AD2/2 sufficeint to pass?

[north plank]

was trying to work this out myself!

18 hours to go!

[glossy gulch]

7 flags!!

I need 8 to pass right?

AppSec/WebApp:
I have 2/4

NetSec
I have 4/4

Active Directory
I have 1/2

[coral bone]

You need 9

I failed with 2 web 4 net and 2ad almost all points for report

One question if I found a vuln that does not Give flags can it be considered for partial points? It is a big vuln

[glossy gulch]

WHAT? LOL

They are 10 in total

[coral bone]

But does not think it was intended

[coral bone]

Yes …. A shame indeed

[glossy gulch]

Is hard asf tbh

[wide sigil]

hey

[gritty trail]

Depends if you're report is good.

You can loose a lot of points due to your report.

But if you did good, 8/10 flags is enough to pass.

[autumn cobalt]

I see, alright I do my best for the report thanks mate

[lime fulcrum]

Gave +1 Rep to @gritty trail (current: #3105 - 1)

[north plank]

convinced that web app isn;t giving out the flags

[coral bone]

zamir8989 i took almost all reports point and not passed with 8

[coral bone]

me too

[coral bone]

i'm finding lots of vulns but no flags

[keen sleet]

It means your ID was incorrect and it is showing you the correct one in the results.

[gritty trail]

Alr, thanks.

[lime fulcrum]

Gave +1 Rep to @keen sleet (current: #29 - 371)

[full pivot]

If you pass PT1 are you able to still re-take the exam with the retake? It looks like it will let you but I am not sure.

[karmic bay]

Nope

Even if the vulnerability has a major business impact, if it doesn't give a flag it apparently doesn't matter

[glossy gulch]

The AD is insane

[coral bone]

this is a nonsense

and they states that even if you do not get a flag they valuate a valid finding

[tough axle]

Hi, I just passed my first PT1 attempt! (https://www.credly.com/badges/6e373725-b8ac-4c6c-af26-de6ce73c8197). Can I get the PT1 role, please ?

[tulip violet]

People VPN is Not working for PT1, What's wrong ?

[tulip violet]

I Just started my exam and their VPN not working ! WTH

because of WSL ?

[glossy gulch]

just a quick question, if I press the reset button... the flags change or something?

I only need 2 web vulns

but I think my web env is bugged or smth

[ebon creek]

Try avoiding WSL for THM , many users reported problems with WSL and VPN connection . Use a VM instead

[tulip violet]

Okay thanks

[autumn cobalt]

🥲

[tulip violet]

It's not even working on VM

I already lost my 3 hours

[coral bone]

good morning, sorry to ping you, but i would like to know if finding a vulnerability ( such as an information disclosure, reflected xss , broken business logic , etc ) but without flag if documentated in the report will grant some points?

[coral bone]

is there someone who knows this ?

[balmy pecan]

Hey, I’m planning to go for the PT1. I’ve already done the Jr PT Path, the Web App Path, and quite a few challenges, but I noticed the cert also covers Active Directory skills. Since that’s not really in any of those paths and I don’t have much experience with it, is AD knowledge a required prerequisite for PT1?

[tulip violet]

Sir ?

It's not even working on VM

I tried your official script as well.

Tried changing data to my mobile hotspot.

still not working.

Tried manually chaning mtu.

Attackbox is extremely slow.

Now What ? Just stare on the screen to fail ?

[ebon creek]

Sorry but I can't help you with that , you will have to reach out to support on the email below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 26, 2025, 8:16 AM

[ebon creek]

Yes , check this module 🙂
https://tryhackme.com/module/hacking-active-directory

[tulip violet]

**It's already been 1.5 hours since I have reported this issue **

[tired ether]

Hi everyone, just wanted some clarification around the report for the exam. We only have text boxes, so I guess screenshots can't be used. Are we supposed to include code/commands that we used? There's no markdown so I'm not sure.

[balmy pecan]

thanks

[lime fulcrum]

Gave +1 Rep to @ebon creek (current: #1 - 5875)

[brave vault]

u will get score of vuln

[junior drum]

Failed my pt1 because of it, made a support request on Sunday, still no answer so don't bother and go do something else

[rare ice]

Hey, I have a quick question about the PT1 exam voucher. I won it in a giveaway for those that already are certified.

The exam voucher is valid until August 31st and includes one free retake. If I start the exam on August 31st (it's 48 hours), will I still be able to use the free retake afterwards?

[tulip violet]

I never used attackbox, Always used my machine but now try hack me is forcing me to use snail like machine

[junior drum]

You're lucky, I had no network on attack box either

[tulip violet]

It was same for me a, I was just sitting on my chair nothing was workinh

[north plank]

i wouldn't worry - have full working access and still siting on my chair with nothing working!

[tulip violet]

@normal wadi Do something for VPN !

[sudden stag]

@normal wadi @mighty crescent its been HOURS that my VPN wont connect and my cert time is being wasted

[junior drum]

Happened to me too, failed exam with 14 hours left on it

Send a mail to [e-mail]

[sudden stag]

thank you for your response, i really appreciate it

[lime fulcrum]

Gave +1 Rep to @junior drum (current: #2040 - 2)

[sudden stag]

turns out, the support is really shit and they wont even bother to take a look

[north plank]

sounds obvious, but you have tried regenerating the ovpn and making sure that you have killed any previous openvpn session : ps -awk |grep "openvpn" and then kill for the pid - also make sure your pc isn''t on same subnet as vpn ip address!

[sudden stag]

i have done this already, and i tried doing using two different PCs (my laptop and my PC)

it doesnt make a difference

[north plank]

have you previously used thm's vpn servers for rooms / lab. Does this still work?

[sudden stag]

i have a streak of 229 days, i have encountered issues like these a hundred times

what i can NOT afford is to have my certification time wasted over some bullshit connection issue like this

[junior drum]

read the last couple days in this chat you'll see... sorry to hear that but trust me, you better get over it, i've spent hours rambling here and to the support for no result

[sudden stag]

may I dm you?

[junior drum]

Sure

[coral bone]

i'm also waiting for a response from support ... it is a paid cert

[junior drum]

Just got a response for my Saturday morning check in process

[vivid remnant]

🙏🏻🙏🏻🙏🏻

[north plank]

unsurprising - didnt pass!

amazed how many points i lost on reporting (even with 2 more web vulns don't think i would have passed!)

would have been better for tryhackme to have published an example report for each section for a "test machine" to show what was expected in the report.

So my official take is PT1 is officially harder then OSEP for me!

[keen sleet]

Done.

[keen sleet]

#pt1 message

[keen sleet]

Yes, AD knowledge is required.

[keen sleet]

Yeah, no images needed.

[keen sleet]

Likely not unless it's bugged.

[tired ether]

I asked the support team about this and they said we have to take both attempts before the deadline.

[coral bone]

so i need to guess if a vulnerability is bugged on the system?

and in the passing criteria they states :

"For each of the vulnerabilities you find, we will score identification, classification,proof of exploitation and reporting separately."

"each of the vulns"

no to be polemic but it is strange that i need to guess if a vuln ( that is a vuln) will be considerated a vuln

and nobady has responded to my emails

[keen sleet]

It has never been bugged so no. The most broken it has ever been was it was giving a flag but not in the requested format.

[keen sleet]

Context is important, cherry picking quotes is not going to help. The exam has flags, so obviously, for each of the vulns holding a flag.

[vapid surge]

N

[keen sleet]

When did you send? Check UK working time hours, as well as the fact that today is the first working day this week. Yesterday was a bank holiday, and they do not work on week-ends too.

[coral bone]

true " for EACH of the vulns"

[coral bone]

yesterday morning

[keen sleet]

Yes... for each of the vulns that have a flag....

Again, context is important.

[coral bone]

sure .. so here the context is that i m taking a 48 hour exam without support.. lots of people failed it for beeing without support ... and we paid

[keen sleet]

Well, obviously they're not going to answer then. Technically your ticket has been waiting for just a few hours since today is the first work day.

[dry crater]

First attempt I had 3/4 flags on the network part, but I still failed the cert.
Just retook it and failed again… this time the network section was brutal, only 1/4 flags. 😓

[north plank]

@dry crater sorry to hear that. Just failed myself on the web app side - got 4 network and 2ad flags but lost quite a few points om reporting

[dry crater]

Yeah this time the Windows part was insanely hard. I was completely lost and even tried asking AI for help but still couldn’t get anywhere. Ended up spending almost a full day on it, really horrible experience

[torn girder]

for the exam?

[dry crater]

Yes…

[torn girder]

sed

[rare ice]

Can i take the exam on the 31st? In my understanding it expires after the expiration date.

[latent slate]

Is it possible to skip retake time?

@ebon creek

[ebon creek]

probably not

[latent slate]

can any staff help with that?

[ebon creek]

Send them an email on the address below

[gritty lantern]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Aug 26, 2025, 5:18 PM

[latent slate]

Reply will take 3 day