room-ideas

[cobalt tree]

I would very love to see a learning path, rooms for analysing games. Find fails in client-server communication, read memory (find items, elements in UI), dupe item... For example, there was a Diablo 3 bot https://www.ros-bot.com/ reading the memory and performing actions, I would very love to know how to do this.

[somber crow]

That's really game hacking territory, a bit yikes for here

[cobalt tree]

Also, just an idea but the website tryhackme as a platform could be reused for many other learning purposes like programming learning paths, programming challenges, patterns etc just like stackoverflow, stackexchange. I love how the site is structured and gaining points for learning.

[somber crow]

The staff have said before that there's plenty of places to learn programming.

[cobalt tree]

ok

[topaz knot]

follow up to my question in #resources , maybe there is already a room but i will ask anyway, i had 2 job interviews that asked my about AD DC and i didn't show that i really understand it , i would be nice to have a room that describe windows server Services and AD DS in specifically ,domain controllers , and hierarchy such as , Tree, forest , bushes( that's a joke 🤦‍♂️ 😂 ) thanks

[quasi heron]

hey

[karmic raven]

There are already a plethora of existing and just released room already covering this topic

[sudden glade]

there should be an advanced learning path

consisting of all advanced rooms

maybe a senior penetration tester learning path

[thin merlin]

a ghidra beginner room would be cool, like the wireshark/nessus/etc have a quick overview 🙏

[grave vapor]

more linux advance function tutorial room

[fluid briar]

Elasticsearch from beginner to advanced (Modules)

[amber oak]

I read the 'find command' room was removed, and that it was a really good room. It would be good if it was replaced (another 'find command' room)

[tacit anvil]

There is no good room for PORT FORWARD in particular (such as local, remote, and dynamic port forward), and for Windows and Linux both. It would be extremely helpful to create this kind of room.

[somber crow]

Wreath

[tacit anvil]

ohh... Thanks

[marble current]

Gave +1 Rep to @somber crow

[oak spoke]

how to do brute force?

[uncut dock]

A room about macOS ?

[cunning thunder]

Good idea, although any VM for hands-on skills would be costly as it has to run on mac metal (hardware) and are billed for a 24 hour period at a minimum. 🙂

[uncut dock]

oh god i didn't think of that

[dire urchin]

you can do about type juggling in php lang it very good vuln to know about

[mental tinsel]

can anyone suggest me rooms for CTFS

?

[fleet flame]

sr but what's CTFS .-.

[tacit anvil]

capture the flag games, those are really fun. You need to exploit a system and read a file with a flag in it

[fleet flame]

thank you, it sounds amazing

[marble current]

Gave +1 Rep to @round scroll

[tacit anvil]

hackintosh?

[cunning thunder]

Not legal on AWS.

[tacit anvil]

oh ok

[tribal venture]

Can we make another room for the ones that are paid

Like same topic but free

[elder willow]

lol

[tribal venture]

Ya bcoz in cost 7200 in Indian rupee

[loud hornet]

Also keep a look out for giveaways when the bot is done.

[tribal venture]

When?

[loud hornet]

No idea.

[tribal venture]

[loud hornet]

I'm not working on it, so I can't give a time-frame xD

[forest summit]

damn it bella finish the bot quicker so shadow can do a giveaway of 10 month vouchersa

[sand pike]

@cunning thunder I have some questions on the public release process for new rooms, let me know if we can chat, or i if i can DM, thanks!

[marble current]

Gave +1 Rep to @cunning thunder

[cunning thunder]

Go ahead. 🙂

[vital wind]

How to create rooms?

[loud hornet]

Press the 3 dots on your account and then select develop room.

[vital wind]

Ok

Any room ideas for beginners?

[loud hornet]

No, sorry.

[tacit anvil]

It seems like there was a room, but it's retired

[forest summit]

any plans for a new linux priv esc room on dirtycred????

[safe urchin]

How can I create an ubuntu ssh server image with docker so that tryhackme allows it

[icy trellis]

Like you would normally?

[somber crow]

Use ubuntu server 20.04
Otherwise as normal

[safe urchin]

Alright thanks.

[marble current]

Gave +1 Rep to @somber crow

[safe urchin]

Cant find the image

[somber crow]

Then you're not using google

[safe urchin]

I just searched it on docker hub

Docker doesnt use systemd. I have the latest release of ubuntu running as a container rn and ssh does not start by default

[somber crow]

What?

The host OS needs to be 2004 not the container

[safe urchin]

I mean i searched the image

[safe urchin]

How does the host version changes anything

[somber crow]

TryHackMe only supports some versions

[forest summit]

another day.... another wishing for a new room on the find command to be released so people can quickly find files on linux again

[hybrid merlin]

👀 Write one 👀

[forest summit]

;_; shadow can't without plagirising the old one a lot

still feels weird that that room got marked as private as as far as shadow sees it has near 0 problems that need fixing to still be super useful for users

[hybrid merlin]

From a brief glance, it's a bit of an info dump with lots of questions. I assume there are other reasons, but dunno

[forest summit]

¯_(ツ)_/¯

shadow could not do better in explaining find though

shadow assumes

[cunning thunder]

Many issues with the room not being up to the current standard, one of which is it has no interactive element for hands-on skill practice. 🙂

[forest summit]

you know what.... if no new room gets made for the find command by december shadow might actually go through and try and create one

that will give shadow time to think about it and actually do other things they need to first

[topaz mortar]

What has that link to do with room ideas ?

[scenic prism]

lol bro you think its a room ideas

you are not able to read url ?

[topaz mortar]

First of all I'm not your bro.
Secondly, you are in the room ideas channel.

So again, what has that to do with room ideas ?

[scenic prism]

now its fine , bsdk

[topaz mortar]

You want to be straight on what bsdk means in english rather than kind of obfuscating it?
Or I have to look it up and come back to you again?

-warn 825161961657466930 Insulting with "bsdk", which is some sort of slang that can be looked up. The next time you insult anyone you will be removed from this discord

[marble current]

⚠ Warned rotash#5527

[valid roost]

team...is there any plan of launching a room on qradar and arcsight

[sand pike]

@remote socket @solid sky @storm canyon - I have a cool idea for a new koth box, already started on basic setup 😉 ... would love to find sometime in the next few weeks to sync up and chat about if/how I could help contribute some boxes for koth in the future ... let me know 😄

[icy trellis]

Please don’t ping Skidy:) talk to the KOTH staff about it and they can delegate.

[sand pike]

my b ... last i asked they mentioned to reach out to skidy 😛 - just wanna get the ball rolling, but no rush

[marsh cove]

Are y'all planning on putting captions in the videos any time soon? It'd be really helpful for me 😅

[somber crow]

Cc @cunning thunder big accessibility QA thing

[analog mesa]

@steady hornet

u ping the wrong holmes

[hybrid merlin]

I'll bring it up 🙂 We're trying to make sure all new rooms that have explanatory images have alt-text to go with them, so this is something that'd make sense as well. I'm not sure whether we'd be able to apply it to old videos/rooms but I could see it being a thing going forwards.

[sick comet]

Subtitles would make things really accessible +1

[steady hornet]

Ay, def, I did mention to ping skidy, but I meant in DMs. NP.
I'd love to discuss/chat about it but I am out of office/home due to some emergency, I'll ping back when I am around.

[cunning thunder]

In case you're not aware, when clicking on the "Watch on YouTube" feature, there's a CC closed-caption option that provides subtitles for videos that support it. 🙂

[marsh cove]

Good to know! The video I had to watch for one of the rooms didn’t have that option though

[hybrid merlin]

Do you remember which room?

[marsh cove]

The vulnerability room

[hybrid merlin]

https://tenor.com/view/do-you-have-any-idea-how-little-that-narrows-it-down-that-narrows-it-down-clear-now-its-clear-now-i-understand-now-gif-21256627 😛

[marsh cove]

https://tryhackme.com/room/vulnversity

if y'all do implement captions, would it be at all possible to have the text display under the video so the whole screen is visible? it'd be frustrating having captions cover up terminal input

i realize thats kinda a big ask, and probably for another day to deal with - so not biggie or anything. its just a nice idea :]

[hybrid merlin]

ah ok, looks like we hosted that before going to Youtube for a lot of new stuff. I'm not sure what the plan is with old content, I'll pass it on 🙂

[sterile hedge]

Hello everyone, can anyone give me idea, i build a room in my local lab on vmware workstation, but when I export the vulnerable machine in .ova format and then import on oracle box for just testing it working or not, so it just showing a blink no login screen coming, any one can give any guidance I am using the ubuntu server CLI based OS

also if i export from vmware work station in .ovf file then it create 3 file .ovf, .iso, and .vmx file

so how should i upload on tryhackme develop room options

[cloud wyvern]

Hello sir, I am your premium user .

Here I am stuck on one question. Please check it .

Who is TryHackMe's HTTPS certificate issued by?

for this question to find an answer i had done a lot of research and submitted all possible answers .So please help me . the question is wrong or anything else the right answer.

[sterile hedge]

You search on google you got it! Just checkout the issuer name of the certificate its already given on internet!

[icy trellis]

This isn’t the right chat but if you have any antivirus that uses web/ MITM protection, you won’t get the right answer

[hybrid merlin]

they got an answer in #room-help and told to ask there in future 🙂

[thorn edge]

I'd love a room explaining how to use Feroxbuster

[loud hornet]

That's a good idea...

[loud hornet]

I can't promise it will be a good room, but I'll certainly give it a bash, I have been thinking on doing a room.

[thorn edge]

https://tenor.com/view/thank-you-thanks-thank-you-so-much-keanu-reeves-gif-21952233

[icy trellis]

Problem with having a whole room on Ferox is that there might not be enough content to cover, it’s a similar problem with (iirc) Ciphey

[loud hornet]

noted

I'll try and flesh it out with adding something, but we will see how it goes, as it's my first room, I don't know how it will turn out, but I'm going to give it a shot.

Thanks for the tip.

[marble current]

Gave +1 Rep to @icy trellis

[sterile hedge]

Hello anyone can you help me out? I am trying to upload the .ova file from Vmware workstation it showing error can't covert on the TryHackme after uploading, even i tried with .ovf file also after export the VM from Vmware Workstation

[somber crow]

What operating system and version is it? Does the name of the ova contain special characters?

[agile plinth]

How long does it roughly take these days to get a room approved guys? My attempt has been stuck on the 'submitted' stage for a long time now?

[hybrid merlin]

The QA department is currently short staffed for the amount of rooms that are being made (they are hiring, so hopefully be sorted soon), so in-house content is currently being prioritised, what's your room and i may be able to give it a quick look over

[agile plinth]

Ah ok no problem thanks it's called SP1r1T. It's a basic room to help beginners understand some of the fundamental concepts etc...

[cunning thunder]

I've looked at your room submission. Please make sure to host the target on our platform, and not as an external website. 🙂

[agile plinth]

Hi Tim, ok no problem thanks. I'll get around to doing that at some point when I get chance then...

[sterile hedge]

thanks @somber crow I got my mistake update I am using the latest ubuntu 22.02, that's why its not working, Now I recreate the machine in older version and its working and Also hosted too. Thanks Again!

[marble current]

Gave +1 Rep to @somber crow

[sterile hedge]

Anyone tell How much time it will take to review a public room and after that it will become live to every user on the portal?

[somber crow]

There's no fixed time for room review, but after it's reviewed a release date will be set. After that release date, it will be available.

[sterile hedge]

great thanks for the info!

[edgy kettle]

In what way?

[icy trellis]

In what way what?

[edgy kettle]

That there's not enough content to cover with Ciphey.

Oh you mean with using the tool, nvm.

[icy trellis]

Yes:)

[edgy kettle]

I was thinking you were talking about different ciphers and encodings.

Because Ciphey supports 50.

[icy trellis]

Mhm:)

[edgy kettle]

I remember doing a room that was just a bunch of encoded/encrypted strings.

I liked it, although it was easy.

Depending on how hard making a room is, I could make one that teaches cryptography.

[tacit anvil]

he there i need fraind

[topaz mortar]

Please don't ask the same question over multiple channels.
Especially if a channel is not even used for that purpose.

[gloomy garden]

A room for linux persistence

[gloomy garden]

mostly of red team rooms are for windows it would be cool to make some others also for linux

[somber crow]

Do you know the market share relationship between the two OS? Especially in enterprise, and on workstations and AD environments.

[gloomy garden]

no, sorry if i'm ignorant, i was just guessing

[native raptor]

TL;DR: you ain't gonna see Linux very often. It happens, but much less commonly, and the techniques you'll use against it are generally (bar some weird Kerberos for Linux stuff) about the same as they are elsewhere on the site 🤷‍♂️

[gloomy garden]

cool

[manic holly]

Idea: Add more badges to feel the satisfaction of progress

[obtuse bramble]

More cryptography and steganography rooms like Cicada 3301 vol 1.

[loud hornet]

Have you done Madness ?

[hallow mango]

.

[obtuse bramble]

I'll need to check

[leaden grove]

Hello, how about a "source code analysis" room? Finding vulnerabilities in the source code. You have 20-50 lines of code and you have to specify the line number for question one about the task. In question 2 you have to answer the function name or parameter to be used for the "safer" variant. For further development you could build a room for PHP, C and many other languages.

[native raptor]

Not quite how you describe it, but there are a few source code analysis rooms already. My https://tryhackme.com/room/hipflask for example 🙂

[leaden grove]

good one, but done, more of this please 😉

[tender spindle]

I want to make some cloud focused rooms like an intro to aws room. Can I make a room that doesn't rely on a vm? I wanted to make a room that teaches people how to make their own aws instance configure it for proper settings and test their settings if it's configured properly from their own aws account. There wouldn't be a need for a vm because most of the work will be done on aws itself. A tryhackme room on it will have detailed instructions and screenshots explaining in detail how to do it.

[forest summit]

think you can do that kinda stuff for rooms as long as people don't need to pay for external stuff to complete the room

though asking for the room creation channel and going through some back and forth to refine the idea might be worth asking mods for

[cunning thunder]

Good idea. This is part of our road map for internal content development. 🙂

[tacit anvil]

I think a Cloud Security Room would be a Good idea. Cloud is one of the biggest technologies and everyone is going to Need it.

[near flicker]

I'd expect this to be for subscribers most likely, because the cloud providers have to be paid for hosting. I know O'Reilly for example now offer an Azure sandbox which is available for a limited amount of time after which it shuts down. However, I support this idea

It would be cool to have some rooms dedicated to the Defender 365 suite, Sentinel etc.

[hybrid merlin]

@tender vortex @cunning thunder new room when? https://thehackernews.com/2022/09/warning-new-unpatched-microsoft.html

[tender vortex]

Haha I'll have to give it a go! Saw the bug this morning but still investigating some details. The exploitation in the wild is scary. Gives me hafnium vibes all over again!

[tacit anvil]

I am subscriber, therefore for me it does not make any difference, but would be a Great idea

[tacit anvil]

Amazon for example offer a Sandbox for AWS as well I think

[dawn canyon]

Is it possible to build a network using the Develop space on THM or can I only build single machines ?

[somber crow]

You can build single machines that emulate networks with docker/lxc, but you can't use the THM networks feature

[dawn canyon]

How can I use THM networks feature ? I guess I have to have a strict room idea, how to contact THM for that if I do ?

[somber crow]

you can't use the THM networks feature

[hybrid merlin]

The networks require a fair amount of work AWS side in a dev environment, and getting them into THM is very much a manual process and a lot of QA needs to be done.

I highly doubt that you'll be able to do it.

[hybrid merlin]

If you want to simulate it, using docker instances in a single machine like a network you can probably do it that way.

[mortal pasture]

not room ideas but discord channel ideas, a channel idea channel itself and channels dedicated to discussing specific tools, not just paths and rooms like an nmap channel, a burp channel, metasploit, hydra, john, ... u get the idea. These would become good resources for using the tools themselves.

[somber crow]

That would add loads of channels on top of the existing massive number that we've got.

Just discuss in #infosec-general if it's not part of a tryhackme room

[mortal pasture]

ok but posting it there it'll get lost in general chat, of if you mean discussing specific tools, that will also get buried, specific tool-chaqnnels would create a good resource to look things up

[somber crow]

Discord is a terrible place for knowledgebases and Q/A.
It's unindexed, not on Google, all the rest. It's not designed for what you're trying to use it.

Documentation is there for your "resource to look things up", as is google

[mortal pasture]

ok the index thing makes sense, but just as you would browse a room channel for people having the same issues as you have you could browse a tool channel in a similar way, you'd immediately know where all tool x related discussions and stuff can be found

[somber crow]

Why should people look here for help with a tool rather than through the tool's official channels?

Room channels are also retired for a reason

[somber crow]

See here.

[mortal pasture]

hmmm havent subbed to any tool specific discords myself, yeah, perhaps I should check those out first, these channels here would be THM related tho, but i'll go see for tool specific discords

[somber crow]

I'm not talking about discord, I'm talking about reading documentation and using official forums, github issues for bugs, etc.

[mortal pasture]

ah, but that's different, i'm looking for chat channels to chat about them, not static resources

[somber crow]

So there's no need for indexing, there's no reason that can't be done in #infosec-general

Discord is absolutely not suitable for a resource for looking things up.

[soft glen]

Any chance for a Sliver C2 room??

[sick comet]

If your interested @waxen night Has a really great guide

https://notateamserver.xyz/sliver-101/

[waxen night]

:D

That title is going to age poorly in a few months since they’ve started writing one 😆

[manic holly]

a hackers movie inspired room

ctf

[somber crow]

https://tryhackme.com/room/kothhackers

[manic holly]

gonna give it a go cheers man

[eager cave]

Heyy

anyone up I need some help with room kiba

[somber crow]

@eager cave #room-hints

[forest bridge]

A room that teaches Networking hacking

[icy trellis]

Like Wreath, Holo, Throwback..?

[forest bridge]

Do they teach tools like airmon-ng and stuff

[somber crow]

That's not networking hacking, that's wifi hacking. There's a wifi hacking room.

[forest bridge]

Oh yeah sorry thats what i meant.

[manic holly]

another room like Vulnversity thats my favourite room i reckon so far anyway

[austere shore]

It came to my mind to create a complex recon room, where a thorough analysis of the system is required. But I'm not sure whether there is interest in this and if yes, what to do or to avoid. Make it more realistic or more challenging with obscure places? Any thoughts about it?

[forest summit]

sounds fun and interesting to shadow but dunno what would be required and how it should be done

[somber crow]

Root Me is very similar.

[hybrid merlin]

@cunning thunder are we getting a room on https://securelist.com/ongoing-exploitation-of-cve-2022-41352-zimbra-0-day/107703/ ? Looks like there's a metasploit module now.

If there's no internal plans I'll have a look at making one?

[hybrid merlin]

I started and Centos 8 and Zimbra aren't playing nicely together... might try oracle linux instead, while sticking to these VM's https://docs.aws.amazon.com/vm-import/latest/userguide/prerequisites.html#vmimport-operating-systems-windows

[cunning thunder]

Not that I know of so far. 😎

[forest summit]

robert so much like his job at THM that he can't stop making rooms for them

[lunar plank]

robert has spent too much time around the content devs 😄

[hybrid merlin]

Hmmm, we'll see then, might manage to make one

[cunning thunder]

Dewitt. 😄

[sick comet]

Sorry if this is the wrong channel, I wasn't sure in what channel to post it. For the room https://tryhackme.com/room/introtolan - I know that myself and others find the red dots circling around the text to be quite distracting and can be quite irritating. Are there any plans on making it more accessible?

[shrewd stratus]

Would like to see a crackmapexec room

[icy trellis]

Not sure if the tool is big enough to be covered on a whole room but I know it is used in a few rooms

[somber crow]

It absolutely is, I've been doing some deep dive on tooling lately and it's insane

[icy trellis]

It’s just impacket, smbmap, smbexec and a few other tools merged into one, no?

[somber crow]

Plus a whole load more than just smb, there's an absolute tonne of features

Especially password spraying and PTH focused

You can run mimikatz straight over smb

[pearl basin]

Is there a room which covers the report writing part of a penetest?

[somber crow]

Yes, multiple. Two from Muirland.

[shrewd stratus]

The tool has smb, ssh, winrm a lot, I saw that there is modules too which can add a lot, but those room that you said use the tool do you know the name of the room?

[pearl basin]

Can you point me to those room, james

[thorn edge]

I can't find this room now? Did it go away?

[loud hornet]

It's not finished.

[thorn edge]

ohh ok

[thorn edge]

a room on Out of Band(OOB) Remote Code Execution (RCE) would be great

[proper geode]

Okay, so I was looking for a room where I could learn hashcat tool but I found out there's none. So I think there should be a room made dedicated on hashcat's use syntax and stuff. What do you think , isn't it an important tool to learn?

[somber crow]

Is the syntax really that complicated?

The documentation is excellent

[proper geode]

john the ripper was no different either but it has a room dedicated to it, I am just saying because it makes the learning process easy. you first read some stuff then there's some question based on that which will give practice there and then only. You don't have to wonder here and there. If we can't demand and get what we need then what's the benefit of being subscriber.

[somber crow]

That was a community created room. Not a room made by THM staff.

[proper geode]

OHh I see

[somber crow]

I don't think there's enough ground to cover on hashcat. The only complicated bits are masks and rules which are basically the same as JTR

[proper geode]

ohk I'll try and go through the official documentation itself then. thanks for replying

[marble current]

Gave +1 Rep to @somber crow

[forest summit]

the crack the hash and crack the hash 2 room and password attacks room together gets you enough knowledge of both john and hashcat if you go through both using both tools

[proper geode]

okay thanks. I'm done with first and I'll try the second one soon.

[forest summit]

no problem

[sick comet]

"If we can't demand and get what we need then what's the benefit of being a subscriber"

You get a lot of benefits from being a subscriber, but sadly you can't always get what you want

[proper geode]

🤣 I knew someone will be, if not completely then at least kinda offended with this. You might be right, I'm sorry.

[golden fern]

not really a room idea. but it would be nice to adjust the level of screen the browser vm takes up.

when we open up the attackbox when inside a room.

[proper geode]

+1

[golden fern]

that the usual way.

[safe atlas]

More Rooms about Wifi

[low lake]

Enjoyed the ELK room, is there any plans on more ELK rooms? Such as creating and dealing with alerts

[valid roost]

Is there any room created on SASE and ZTNA? would be really helpfu;

[jovial hamlet]

we have etter-cap any explanation in meet in the middle attack

[obsidian urchin]

I would like to make a suggestion: a BeEF room

[loud hornet]

BeEF is out dated, and not commonly used.

[obsidian urchin]

What about a CyberChef room...

[opal ferry]

It could be interesting a cyberdefense room with auditd

[tacit anvil]

I was wondering if completion certificates could be used for continuing education credit with CompTIA. It would be great if this would become a possibility, a reality, TryHackMe!!

[fiery wigeon]

Hello guys!

Is there anyone started solving TJNull boxes? I just solved 2-3 machines

[somber crow]

This channel is for suggesting new tryhackme rooms

[kindred widget]

I created a room and it is submitted but has not been completed by anyone other than me so far. Is this a good place to post it for some feedback?

[loud hornet]

No, I've you published the room to be reviewed by QA, it's best to wait until they review it.

[kindred widget]

I suppose you're right, thanks for the reply!

[marble current]

Gave +1 Rep to @loud hornet

[tacit anvil]

Would you please create a room dedicated to Governance? Thanks!

[quaint robin]

Are there any rooms that focus on Relay-related technologies?

[spiral lily]

A option on tryhackme site to save rooms to your favorite/bookmark would be awesome 😄

[cunning thunder]

You may use the My Rooms page https://tryhackme.com/rooms It shows the rooms you've joined. 🙂

[steep coral]

Would be cool to have an ISO/IEC 27001 room or one that includes the standard for an ISMS

[icy trellis]

Oh God, I can't stand ISO/IEC

But good idea, #room-ideas ;)

[sick comet]

aren't we already in that channel

[icy trellis]

It was 3:30am, allow it

[sick comet]

okay very well....wtf were you even doing up at that time

[icy trellis]

👀

[gaunt carbon]

I have submitted a room with amazing OSINT challenge (based on treasure hunt) to get public ... 2days back.... so just wanted to know how long does it take to get public...

[loud hornet]

It will take how long it takes QA to work through the list.

[gaunt carbon]

Okay.

[mighty plover]

I was wondering how to build rooms etc. I have some crazy ideas that i think would be fun to complete. is there any documentation on it?

[topaz mortar]

Maybe that helps: https://help.tryhackme.com/room-creation

[mighty plover]

EPIC! thanks! must have overlooked it!

[proper geode]

Hey Instructors, Senior Mods. As the OWASP top 10 list has been updated in 2021, maybe it would be a good idea to update the OWASP room.. What do you think? Just a recommendation because I was about to go through the room and I saw it follows the old top 10 list that's why thought to draw your attention..

[loud hornet]

#feedback-and-ideas would be a better place for this, or even~~ #room-ideas ~~ my bad, this is room ideas 😂

As the mods on Discord are not site staff, (with the exception of 2/3)

[forest summit]

um scrubz this is #room-ideas

[loud hornet]

Oops! Lol.

[forest summit]

lol

[proper geode]

..🤣

[cunning thunder]

Good idea. 🙂

[gloomy warren]

Android and IOS (not cisco 😅 ) maybe

[neat bobcat]

JWT rooms

[late quail]

hi. At the new room https://tryhackme.com/room/introtosiem in attached website i can't go back to complete previous tasks. I had to restart VM (website)

[wise monolith]

Tia stop

Im giving you an official warning next time

Pleass use appropriate channels and google, dont go around spamming the same question all around unrelated channels

[late quail]

I dont remember that I was looking for degree symbol even if I passed that room

[wise monolith]

@mental cargo no

[mental cargo]

mb

[hybrid dragon]

I have uploaded a VM and it starts and allocates an ip to the VM in the room. But when I try to access it through ssh or through browser (http), it doesn't work. whaat might be the problem

[gritty barn]

there should be a room on squid proxy.

[tacit anvil]

Hey, can we get SOC level 2 pleas? I loved it , even tho i am more interested in red team but i learned alot from it. Thank you @gritty craterTryHackMe

[marble current]

Gave +1 Rep to @gritty crater

[tacit anvil]

When There is a Red Teamer Path on try Hack me, I think there should be a Proper Blue Teamer Path i mean accept SOC L1 a ANOTHER Proper Blue Teaming Path

[tacit anvil]

i just finished the cyberchef section on AOC2022 and i wish there was a whole room or module focused on things we can do with cyberchef.

the information i just learned from there was awesome guys thank you!

[forest summit]

guess you don't count #791764435991658556 then

[tacit anvil]

Ya i remember that and i had completed That
But i mean there should be s title like Blue Teamer too
Like there is A Red Teamer title

[cobalt inlet]

I’ve uploaded a machine but I can’t even ping the vm

[digital snow]

#room-hints

[graceful rivet]

https://tryhackme.com/room/avevasionshellcode
Task 9
"Are some packers detected as malicious by some AV solutions? (yea/nay)"
This implies that packers themselves are detected as malicious instead of stating that files packed with them might be flagged. Unless Im wrong and a simple messagebox in C later packed will be detected as malicious solely based on the fact that it has been packed.

[karmic raven]

Thats not really what it is stating. While mildly ambigious it is showing that just because a packer is used it can still be detected by AV or be used as part of an aggregate risk score to consider a suspicious file as malicious

For example in this threat report the binary has an increased entropy (A common sign of packing) that added to it's indicators. The more overall indicators or high aggregate score the more likely an AV or EDR is to detect a file.

@graceful rivet ^

[graceful rivet]

Oh thanks for clearing this up @karmic raven
This is really helpful ! Gonna keep it in mind

[marble current]

Gave +1 Rep to @karmic raven

[high nexus]

Would OSINT rooms be more feasible with offline instances of socials sites like wayback, or just using wayback? iirc there was discussion about the difficulty of osint rooms because things get buried or removed all the time. Or people comment and spoil.

[forest summit]

well it can work but it is not the easiest

[brisk fable]

CompTIA Security+ Room would be very welcome

[low trail]

maybe a room based on domain generation algorithms? dgas are very interesting they can have the weirdest names
attackers have use them before so it is security related to be able to identify them and block them (and be able to recognize them so to not click on them) (dgas are also used for legitimate purposes too to sell domain names to legitimate companies)
word based dgas are especially weird they can have funny sounding names sometimes (there are websites that generate word based domains and have them for sale for companies to buy)(i think it would be interesting to see what names thm gives to the examples, you can have fun and put sillly names)
theres other classifications for dgas too
could be helpful that maybe someone could predict future dga names or rules for them and block them in the firewall; and it would also spread awareness
this could be in the web security section

[rare hemlock]

Not sure if fits here or other # . To make THM certs shown in Role part of profile

[ionic sierra]

A path about mobile application pentesting (android) starting from the very basics (adb, apktool etc.).

[safe atlas]

There should be way to put a Room in something like a bookmark or TODO, so we know can save what we want to do

[celest arch]

Please a dark theme

[rotund rover]

Yes!

[forest summit]

check out the dark reader addon/extension/plugin for firefox and chrome... it basicly makes all websites have a dark theme and works great on tryhackme

[high nexus]

I forgot where, but I did see there was a way to check for all "started but incomplete" rooms

[forest summit]

log4shell room against a windows target would be interesting and unique

[sage gorge]

How about creating a path for bug bounty hunters (Methodology, tools, finding the suitable targets etc...)

[frank loom]

DevSecOps Path

[pale beacon]

IoT(mobile devices) PenTestPath

[somber crow]

IoT and mobile are pretty different

[pale beacon]

Thats true.
IoT PenTest path
Mobile Devices PenTest path

2 different now

[pale beacon]

I thaught mobile phones are a part of IoT

[silent dragon]

can we have a room designed that focuses on data carving, and foresnics

unless there is one already lol

[weary harbor]

would be cool to see some hardware trojan materials 😄

[elder lodge]

Hi, is there perhaps a room about the BEEF framework? Because I could not find it. Could be interesting if it does not exist yet. But if it does exist can someone give me a link to the room.

[somber crow]

There used to be, it's not so favoured anymore

[elder lodge]

Thanks 🙂

[marble current]

Gave +1 Rep to @somber crow

[nova cosmos]

@silent dragon +1

[nova cosmos]

data carving and memory dump analysis would be a big hit I think.

[silent dragon]

I agree

[night remnant]

I am actually looking into making some forensics rooms, so things like that are great ideas!

[nova cosmos]

Perhaps you could infect a Windows 10/11 system with a modern malware, like a keylogger/data exfiltration malware that's intended to be covert. Then run strings on it and have a room where users highlight sections of the output which are relevant.

Ie. Indicators of infection.

This saves you guys the extreme bandwidth that would be required to transmit realistic full memory dumps (8GB)

[silent dragon]

I also think that some rooms for the compliance standards should be developed. Similar to how the networking osi model room wAs

[somber crow]

Wreath, Hipflask

[jolly sierra]

I think that should be more rooms about networking, linux and python

[loud hornet]

If you search linux there is 9 pages of results.

[manic lion]

An info room dedicated to writing XPath queries and helping beginers get familiar with the syntax. 🙏

[elfin lichen]

is there any room on curl ? cant find anything and it seems quite essential

[broken snow]

hey guys, im kinda new to tryhackme, just starting out.
there is a lot of interesting rooms, so was thinking to save it for later, but cant see it? like a star or something to have it in our own rooms library to check it our later.
am i missing something or there is no option like that?

[loud hornet]

There isn't on THM, you could always use your bookmarks on your browser.

[broken snow]

also, just realised that not every room has an estimated finish time? it'd be good to know if ill be able to finish the room before work or uni. i know i can leave it and come back to it but i like to finish things when i start it and move on to the next thing next time im free.

[broken snow]

thats what im doing atm, still something to consider 😄

[loud hornet]

Peoples skills vary.

Someone can finish a room an hour, some can do it in 5.

Would depend on the room, IMO.

[broken snow]

of course, i understand that.
at least average time would be helpful

[loud hornet]

Lovely country on your PFP.

Very, bonnie.

[elfin meteor]

I cannot find a channel #path-ideas I'll leave my suggestion here as it seems to be the closest thing.
There is a lot of material on Windows in several rooms and Modules, maybe it could be all consolidated under a Windows security Larning Path?

[graceful rivet]

More of a discord channel idea.
Channel /w list of useful extensions like wappalyzer, darkview etc. with and option to submit ones users find in a format : Name:What it does:How it can benefit us in the CySec context

[somber crow]

This would be better implemented outside the discord, as something like a github repository, and then posted in #resources

[graceful rivet]

true dat. Thanks for responding

[marble current]

Gave +1 Rep to @somber crow

[graceful rivet]

Link to the room in the pinned form is broken. I take it that's not intended

[somber crow]

It's intended

[graceful rivet]

may I ask what was the room about?

[somber crow]

Authentication as the name suggests

[graceful rivet]

Mhm. Aight whatever

[topaz mortar]

Either they heard your request or it was already planned, but I think that's what you asked for 🙂
#announcements message

[broken snow]

yeyyy! lets leave it with "they heard me" 🙃

[tacit anvil]

I'm liking the Remediation section of the Web Fundamentals path I'm going through. If y'all can keep that up across all learning path rooms regardless of what path its under, that be awesome 🙂 🙂 Knowing how to fix the vulns is the other side of the battle

[tacit anvil]

if THM decides not to bring a room on BeeF/SET back, the closest i've been able to find so far is the book: The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy 2nd Edition

You also might find some nuggets in the vulnerable vm: WebGoat

[loud hornet]

I doubt they will, I don't think it's used much

[sick comet]

It's old and outdated, they also have a couple phishing rooms already.

[hushed finch]

Hello everyone

I want to upload Windows VM machine to my room.
I have a question about which type of virtual disk image I should upload? .iso, .vdi or what

[loud hornet]

.OVA

[loud hornet]

^ was for you.

[near delta]

He can't upload iso or vdi, as it was asked in questions, so I just narrowed it. Thanks for addition, I didn't know that before

[ivory panther]

hello guys is there anyone from the room creators can create a room that talks about openshift podman and some pentesting ideas

[turbid grove]

mimoza69 i like that idea also

[cedar echo]

basically needs to be ova

[sand iron]

Hello guys I'm now learning at the platform and I got an idea of a room, the idea is to create a room about how to type faster and it's benefits on time and effort for hackers

[native raptor]

What benefits

[icy trellis]

tbh, speed doesn't matter

[native raptor]

Same as coding, honestly. Typing fast for a long period just means you ain't using your brain.
Typing fast in short bursts then spending time thinking saves seconds, if that.

High WPM is a flex, but an entirely useless one.

[forest summit]

what point does shadow have useage for writing out their thoughts in very quick bursts on discord???

[native raptor]

Another situation where more thinking, less typing, is a solid philosophy

[forest summit]

yuups

[sand pike]

Typing in general is probably too broad... What about a room to share useful tools/techniques for aliases, scripts, and stuff to help save time and also documentation + reuse for future time savings? Just a thought, DM me if you wanna chat about it more 😁

[sick comet]

More shortcuts?

[turbid grove]

good point

[tawny rivet]

Hey. I got a room idea that I would like to see: How to manipulate the security feature Kerberos constrained delegation.

[tawny rivet]

Far from mainstream AD hacking but very useful to understand.

[native raptor]

Lmfao, that's, uh, about as mainstream as you get I'm afraid

[tawny rivet]

As "mainstream as you get" you say

I would disagree with that statement. But maybe you can point me to a room on THM that goes over just that?

[native raptor]

Whether something is covered on THM or not does not define whether it is a common misconfiguration or not. Constrained delegation ain't some arcane knowledge. Heck, even RBCD is well-known.
"Mainstream" would be how often something is seen, and consequently how much visibility it has. As far as AD abuses go, opportunities for delegation attacks aren't exactly uncommon.

If it isn't covered on THM then it probably should be though, for that reason.

[tawny rivet]

I agree with that. However I've not seen it on any platform. So you know, thus the comment

[native raptor]

I know for a fact HTB has it in at least a few places. Definitely covered extensively by both Offsec and ZPS. I would imagine also by Pentester Academy given they cover AD attacks.

[tawny rivet]

Ok! Need to check It out then.

Damn, impressive certs.

[tawny rivet]

Ok, PHP filter chaining ?

That's not mainstream, you have to give me that

[native raptor]

It's certainly less commonly discussed, yes, and almost certainly less commonly found. I'm a red teamer though, not a webapp pentester. You would have to speak to someone who works consistently with webapps to get a definitive answer there 🙂

[tawny rivet]

And a pretty new phenomena. Also, really cool shit

[native raptor]

It might help to consider "mainstream" as being whether your average colleague in the respective discipline is likely to be able to hold a conversation on the topic.
For example, if I say constrained delegation to a group of AD infrastructure pentesters or red team operators, I wouldn't expect to have to explain myself.

I suspect you would be right in saying that PHP filter chaining is not something that your average webapp pentester would be able to immediately recognise and discuss in-depth if it was brought up (I.e. making it a more niche topic), but again, I'm not a webapp tester. Can ask a couple tomorrow if you want the experiment though lmao

[tawny rivet]

Hahah why not 😉 But you seem to be well rounded. So I mean how often do you encounter filter chaining. I'm pentesting from a regulatory perspective. That "constrains" me a bit 😉

[native raptor]

I'm relatively well rounded in training, but again, my day-to-day work is active directory exploitation, red / purple team ops, and maldev.
That said, to my understanding filter chaining is used pretty much exclusively to exploit LFIs (I can think of another few uses for filters -- e.g. XXE -- but less commonly), so realistically speaking you're looking at "how common is an LFI"

Every webapp pentester should know what an LFI is, but whether they know filter chaining as a technique to exploit it is another matter, and a harder question to answer.

[tawny rivet]

Yeah that's true. And granted, LFI is more or less path traversal so we got that covered as well.

[native raptor]

Yeah, just a PHP specific extension of it

[tawny rivet]

SSRF might have some use for it

Really anything that would bypass sanitation I guess

[native raptor]

Mhm, assuming you could get the filters to execute (not entirely sure they would in things like your typical libcurl SSRF), that could work

I suspect you would struggle to get the app to treat it as anything other than a string in most instances there though.

[tawny rivet]

Hmm. Might have to setup a lab and try it out. Also, there is a lot of sloppy devs out there that would use sanitation as primary defense for sqlis

[native raptor]

True, but one would hope they were doing it with filter functions rather than concatenating user input into filter streams. That would be a lot more complex

[tawny rivet]

True.

Was thinking of a comment you made regarding RBCD.

You create a new object that would imitate, and inherit the privs of a DC right?

[native raptor]

Somewhat. You often create a new machine account, but it can work without if you already have one (or a service account) compromised.
It's basically a way to introduce a constrained delegation vulnerability by abusing write permissions over a target service, so it's a service that you would be compromising rather than a DC necessarily.

That said, if you happened to have GenericWrite (or an equivalent) over a service running on a DC then yes, that would get you access to it.

[tawny rivet]

Right. Thanks for an awesome chat.

[marble current]

Gave +1 Rep to @native raptor

[native raptor]

My pleasure, and same to you 🙂

[red plover]

Wellou

[ivory panther]

hello would anyone create a room about IBM QRadar SIEM
we got good rooms on splunk so it will be good if we had for QRadar too

[fringe marten]

@cunning thunder, Please could I chat in a private for my creative room? 🙂

[silver ridge]

Why don't anyone do a Room with out-of-band Sqli

[kindred widget]

I have a lot of ideas for some rooms but I am first wondering how to get my first 2 rooms I submitted to get reviewed? One of them has not been reviewed in 121 days

[fringe marten]

Did you see the tester evaluate or be prepared of your room accessible to the public? Did you email staff for that?

@kindred widget

Here we go. https://help.tryhackme.com/room-creation/the-room-review-process

Hope TryHackMe QA Staff will fix that on Monday. But I’m a member 🙂

[kindred widget]

I’ll read this over later today!! Thank you

[marble current]

Gave +1 Rep to @fringe marten

[languid ermine]

guys can i edit the privately uploaded room ?

[quasi birch]

if it's uploaded by you then Yes.

[languid ermine]

I mean edit with ssh or something.

[somber crow]

No, you'll need to upload a new VM image with the changes made

[worthy notch]

Hi Everyone, we have built an active directory pentesting lab, the VM that holds the lab infra is 70 GiB

It's hosted on Azure, Is there a method to get it directly to the THM platform from Azure

Because it's too large to download

[somber crow]

No, there is not

[worthy notch]

Do you know of an easier way we could get this to the THM platform

[somber crow]

Build it locally

[worthy notch]

Hi James, I don't have the system requirements to build it locally my goal is to give this to the THM community as a free lab, could you make a request to your Engineering team to help us out, thank you.

[somber crow]

I do not represent THM, but I understand the restrictions on building content as someone who has created a decent amount of content on THM

There is unfortunately little that can be done unless you're a THM employee, which neither of us are

[worthy notch]

Yes I understand what you trying to say, I will try contacting THM support and see what their response would be, thank you

[somber crow]

It'll be the same, but I wish you the best of luck

[cunning thunder]

Interesting idea. I've forwarded this to our content engineering team for you. 🙂

[worthy notch]

Thank you very much, looking forward to a positive reply

[marble current]

Gave +1 Rep to @cunning thunder

[graceful crane]

Hi y'all! I posted this in general, but I wanted to post it here too. I am developing a room called "Intro to ROP" which is a sequel to my Intro to Pwntools room, and I am looking for beta testers. If you are interested, please feel free to DM me. Thanks!

[sage sierra]

are there any rooms that help you understand how to research a given vulnerability for example, CVE-2023-25824.
On how to go about this and how to identify fixes etc.
I would love to learn this

[pastel spoke]

If you type CVE on the room search page and use the "walkthrough" filter, you can find a few rooms covering this topic. We also have a module https://tryhackme.com/module/recent-threats

[rustic void]

is there any rooms about fixing and modifying exploits ?

[amber oak]

i suggest a room about a technique called Wildcard Injection and/or exploining wildcard for privilege escalation

there are entire articles about it, but I believe it would be cool to have a room

[amber oak]

yes. the only room i saw it was Skynet, but i have solved just 80 rooms till now. so if there are more rooms with this technique, it's ok 🙂

i didn't know xD

[digital vigil]

A room about mobile security would be fantastic!

For example a room about mobile hardening, Android pentesting, etc.

It could be useful to learn new things about smartphone security as we use our phones everyday.

Let me what you think guys.

[sick comet]

https://tryhackme.com/room/androidhacking101
https://tryhackme.com/room/mma
https://tryhackme.com/room/iosforensics

[digital vigil]

Oh damn!

I didn't even see that

lol

thanks

[south shadow]

are they room about hardware hacking ?

[tawny rivet]

yo peeps

[sullen jay]

Guys,
Do you think of a QRadar room for the Cyber ​​Defense path?
I haven't found any labs that work well related to QRadar. Next to that, CyberDefenders has a lab but the VM is very problematic...

https://cyberdefenders.org/blueteam-ctf-challenges/39#nav-questions

[scarlet solstice]

Any plan on adding more series?

[forest summit]

think series is slowly getting faced out in favour of modules

[ivory panther]

OWASP Mobile Top 10
room idea

i wish if there was a path specially for malware researcher and analysis

[tacit anvil]

True, we only got one module for malware analysis

[cold sparrow]

Hello, We need room for CVE-2023-23397

[kind fern]

Mobile hacking. More updated than the ones above. iOS apps android apps

[spice plover]

hi

[formal tusk]

maybe heap exploit

[verbal reef]

That’s so sad I love the series😭

[forest summit]

shadow is not sure shadows comment is accurate but this is what it felt like to shadow at the time they made the comment

[native raptor]

What's your favourite series?
Bear in mind there is one right answer to this question

[verbal reef]

LMAO

[verbal reef]

What’s the correct answer?

[native raptor]

You tell me 😁

[verbal reef]

Pre security was pretty fun🙏

[manic holly]

a bug bounty pathway

[trail gale]

+++

[pastel spoke]

That's a learning path, not the same as a series. You can find series on the practice page

[sullen jay]

I really liked the SOC L1 path, it turned out really cool! Are there any plans to create a dedicated path for CTI?

[forest summit]

well creating paths need a lot of rooms and a lot of work... so maybe but be prepared to wait for a long time

shadow has very little to do with if and when paths release though

[fringe marten]

Jabba, Can I DM you about next creative room?

[icy trellis]

If you want :)

[fringe marten]

Thank you.

[marble current]

Gave +1 Rep to @icy trellis

[trail gale]

What does DM mean?!

Hello everyone!
I have idea for tryhackme, If tryhackme create path about bug bounty hunting I think it will be good for users

[fringe marten]

Direct message. It means private message.

[trail gale]

May I know what is creative room if it is not secret : )

[fringe marten]

Well My first creative rooms is OSINT challenge. It was submitted 2 months ago. Doesn’t matter if the review is still pending. I will make another ideas, But I am not working on them until first creation room is successfully shared publicly. 😅🥲

Sadly, our staff is not responding. :/

[plush heath]

Check out:
https://www.securitylearningacademy.com/local/navigator/index.php?search=qradar&level=top&courseTypes=Lab
https://community.ibm.com/community/user/security/blogs/nikhil-bhavsar1/2020/08/26/step-by-step-qradar-deployment-at-aws
https://qradar-demo.mybluemix.net/
Also, SIEM free module from Rangeforce.

K8s room/module with a badge would be nice 😊

[trail gale]

IMO I have found valid resources for bug bounty pathway, What if tryhackme adds Bug hunting pathway using portswigger's resource. I think it will be great!

[high venture]

https://www.youtube.com/watch?v=DDfUoQWnrfM
Would be cool to see a room/series of rooms focused on LLMs and ways to not only host but also exploit LLMs to find vulnerabilities;

Linked this video because normally the official chatgpt prevents using itself as a tool for bruteforcing and other things, but if you run it locally you can bypass a lot of the protections that are built into most LLMs like gpt4;

[warped dagger]

After submitting a room for review to be available for everyone, how long does it usually take for the review to be completed, should I expect some sort of confirmation that the room has been approved?

[icy trellis]

It's as long as a piece of string:)
Yes, you will receive an email if it is approved/ denied.

[warped dagger]

I see, thanks I'll have to wait then 😁

[tacit anvil]

I don't know if this is the correct channel for this but I'm trying my best, does anyone know if the new learning path will be available for subscribers? They made it sound like it would be only available for businesses/teams, if anyone has any info on this and they don't mind sharing then I'd like to know, Attacking and Defending AWS just sounds like a great opportunity to learn, I'm also biased because I've been studying AWS lately

[loud hornet]

It more than likely just be for business.

[lunar plank]

Yup, at the moment it is just for business & education users. It may be opened up to individuals in the future but that's a big may

[tacit anvil]

Is there a room for building, deploying, and then utilizing AI chat bots for social engineering and whatnot and exploiting servers/web applications?

Example room:

L1: Introduction

An introduction to chatbots and how they process and work internally
Building a chatbot with any suitable programming language such as js or python
Then deploying the chatbot on a local server

L2: Chatbot Security

Exploiting chatbots through malicious inputs
Protecting chatbots from attacks

L3: GPT and Advanced Chatbots

Brief introduction to GPT and its capabilities
Building an advanced chatbot using GPT
Then finally deploying the chatbot on a cloud server

L4: Social Engineering, Exploitation, and Payload forging with Chatbots

Using chatbots to perform social engineering attacks
Detecting and preventing social engineering attacks using chatbots

L5: Chatbot CTF Challenge

A scenario where users must use chatbots to solve a series of challenges and ultimately gain access to a vulnerable system/server

[bronze rain]

|| Can we have a room on Selinux, please? ||

[tough swan]

I wonder if there's any room or lessons for social engineering

[tough swan]

To my POV it's possible to extend Metasploit rooms with one which gives a clue how to obfuscate payload to make it less visible to anti-virus software and merge it with other working soft to make user to run it without suspicion.

[sage verge]

We need Azure rooms

[bronze rain]

Use of AI in CyberSecurity (Prompt Engineering).

[tacit anvil]

can we start promoting the use of rlwap -cAr?

for nc listeners

[forest summit]

eh

kinda already explained that that exists in the what the shell room

[smoky saffron]

Yeah

[smoky saffron]

Nice to meet you

[stable seal]

hello

[hallow drift]

Someone should make a room on how to make rooms. Unironically

[limpid bison]

Now that Brim has changed to Zui. A Zui room please

[tacit anvil]

What happened to the Linux privesc playground?

[somber crow]

The user who created it deleted the room
You can cause the same affect by just adding suid to every binary in /bin and /usr/bin

[tacit anvil]

Damn 😦
And ok thank you very much for that tip 😊😊😊

[marble current]

Gave +1 Rep to @somber crow

[trail gale]

I got an idea. I think tryhackme need Bug Bounty pathway. It will be great room for everyone

[icy trellis]

honestly, I don't think that having a whole pathway dedicated to bug bounties is worth it.
A room on bug bounties? Sure

[chrome pier]

Ehh, a module, on bug bounties

After that though, throw on enough other pre-made modules and you have a pathway right there

[icy trellis]

Bug bounties are great, but they don’t need that much coverage as you’re using red team skills

[sick comet]

Bug bounties is practically all web. There are tons of modules on that.

[chrome pier]

Yeah, making a pathway is probably not a ton of work, but the point is more to give guidance in terms of what to do, not so much it existing

The rooms already exist

[sick comet]

You mean more of a methodology?

[limpid bison]

unless i didn't fint it, there is no room on suricata IDS/IPS

[chrome pier]

As in, take a bunch of relevant rooms together, throw in a room or two for focusing on efficient scanning methodology and stuff yeah

From what I've seen, a lot of bug bounty hunting is more about picking targets and working efficiently before moving on

[tacit anvil]

Hey how about some real wifi action

[somber crow]

It's all virtual machines, you can't really do "real wifi" given that it's cloud

[opal fossil]

A room where there are 5-10 questions which need no answers because if someone is busy or can't do rooms for some reason, they get to keep their streak. I call it the streak room. I know there is a reason why that room doesn't exist but some people can't devote enough time to do a room for a few days but they usually do when they're free.

[icy trellis]

Whole point of a streak is to show your dedication

We introduced streak freezes to give users a break

[hallow drift]

Much appreciated ^

[manic holly]

yess so keen on wifi

[narrow mesa]

Anyone got any ideas for network storylines, will see what I can do. Potentially building something similar to the red team capstone and see where that goes (Obviously if THM Staff don’t mind)

[forest summit]

you got called in to try and get rid of intruders that have setup "ransomware" on the corporate network.. your goal is to reverse the encryption access and find how the network got breached

[trail gale]

Why always blue challenge is subscriber only while red challenge always free?!

[narrow mesa]

That actually sounds really cool. If you don’t mind, could I start developing it?

[sudden garnet]

networks can only be built by staff

[narrow mesa]

Ik, might developed it to make THM Staff lives easier

[sudden garnet]

but you can’t lol

the functionality is only available to staff

[night remnant]

blue challenges are usually with windows which requires a little more power than linux, so to be able to run these machines it costs a little more 😄

[trail gale]

I thought blue challenge only for blu team members red challenge only for red teamers

[night remnant]

no, everything is for everyone 😄

[forest summit]

doubt you could get it approved and spun up by staff on tryhackme but if you wanna try to build a network with that premise go for it

[sick comet]

If your talking about a THM room, the closest thing you could do would be with containers

[icy trellis]

I’ve already mentioned this, but they need to be careful with copyright.

Purposely mimicking the RTC setup for purposes of reproducing it won’t at all get approved

[forest summit]

???

[icy trellis]

What?

[forest summit]

shadow not understand the second sentence in your message... can you explain it???

[icy trellis]

They’ve expressed multiple times how they want to copy the RTC network for non-business users

This isn’t at all approved by TryHackMe and they could get into some more trouble than it’s worth

[forest summit]

oooh yeah that... shadow wondered why it was a problem if they made their own network with the blue team aspect shadow suggested

got confused with what you meant with RTC hence the major part of the confusion

[narrow mesa]

Was talking about Shadows Idea but I appreciate the advice nonetheless. Will consider options but doubt I will proceed cause do not fancy to push the wrong ideas around.

[cunning thunder]

Please note that community content creator submissions only allow for regular rooms. Network configuration is only an option for content that is built in-house.

[trail gale]

What if creating a room about bypassing windows virus defender ?🤔
Will tryhackme allow it? Because I am not sure it is ethical or not

[modest phoenix]

Check the red teaming path

[trail gale]

I am in that room

After learning about antivrus defenders in windows and its types, I thought about bypassing

[modest phoenix]

But that's what the module host evasions is about

[dense tendon]

A room about ransomware recovery : What should be done before disaster (backups for example), and what to do after (restore, and maybe trying to counter it with the "no more ransom" website) ?

[hallow drift]

Would anyone like an AWS room? Room on how yo set your own homelabs on AWS

[cunning thunder]

Unlikely to be reviewed, as we have a full fledged AWS learning path. 🙂

[hallow drift]

Right

[cunning thunder]

The harder part being making it interactive with a hands-on exercise on the AWS platform. AWS is truly something to learn by doing directly through the AWS console. 🙂

[green eagle]

Since I'll most likely have to have a closer look at MISP /w plugins and all that jazz... think that would be interesting content on thm aswell? Kinda supplementing the existing MISP room

[trail gale]

I am interesting tryhackme's privacy policy about rooms! I mean What if room about MiTM, DDOS, Game hacking, Mobila application hacking, Android & IOS hacking if it is okay, why not create : ) ?

[sick comet]

Not sure what you mean?

There are a lot of rooms on mobile

[loud hornet]

There is nothing ethical about DDoS.

[icy trellis]

When creating rooms, it is important for us to assess the legality of it.

Is it legal for us to teach? Maybe.

Should we be teaching it? That's where the problem comes. Just because it's legal, does not mean we should be teaching it. We are not 'gatekeeping' knowledge, but as a business there are things we can and cannot do.

Firstly, DDoS is not at all appropriate. Unless you are referring to "Denial of Service", of which is different, but still not appropriate. If you are a proper pentester, the likelihood of you peforming a denial of service attack is low. And if a company required a stress test, they would go to a company with the resources for it. Not a single pentester.

It is ethically questionable when you have the power to perform a DDoS attack and you yourself are not the owner of a large infrastructure.

Secondly, there are already MiTM attacks on TryHackMe. It is not easy to simulate all attacks in a virtual environment, but our community (and team of awesome Content Engineers) can usually get pretty creative to at least simulate what it would be like.

Game hacking. I'm not sure what you mean here. If you are referring to cheats to gain an unfair advantage. That is unethical. Once again, there are little actual reasons for you to understand how to hack games.

Do games have bug bounty programs? Yes. But still, there is little reason for us to teach it here. Especially as the complexity of game hacking is something you would look into later in your career. TryHackMe is for beginners.

'Mobile application hacking', now it just sounds like you're looking to be unethical. See reasons above.

I would like to make two things clear:

• Unethical behaviour is not tolerated here. I am not exactly calling you out here, but I hope this makes it clear. All of these topics are very... suspicious.

• Anything I say does not reflect TryHackMe's decisions. Nothing I say is 100% certain of an executive decision for TryHackMe. These are my own thoughts and opinions.

If any of this is wrong, inaccurate or does not make sense, please feel free to correct me or point it out

[nimble venture]

Maybe,make a room based on fighting against corruption in Brazil
Take for example the "scandal of the Leeches";
Where congressman in 2006 made a bidding fraud, overbilling ambulances in most brazilian cities over 120%.
Step 1: Implementation of solution: OSINT, to find about the operations, detect which congressman still haven't got arrested, which political parties still make part of new scandals,
Step 2: Simple solution with data architectures through blockchain to detect why and where the over billed ambulances are parked.
Step3: Implement regular smart contracts to prevent lobbying, with a new digital coin name Real DIgital.
Step 4 conclusion: Keep on fighting against corruption implementing data transparency and view how brazilian governments make it difficult to data scrap stuff.

[trail gale]

Thank you for explaining I understood you 100%. Yes it sound unethical I just asked it. I don't mean any cheating my pc and phone is low not worthy to game : ). I saw mind blowing bug bounty programs with games and mobile (XIaomi, android, IOS). Then I was thinking "why tryhackme or hackthebox has not teaching about these?". I asked DDOS and MITM with knowing it is unethical, because I always Interested this thinks which is never teached anywhere.

[marble current]

Gave +1 Rep to @icy trellis

[trail gale]

One more question. I am having a lot questions while learning in tryhackme but it is not related any room of tryhackme but it is related hacking (like technical help, advice) I want to ask to create channel in discord for that if possible

[loud hornet]

#site-support ?

[sage verge]

Need more blue team rooms that cover things like Azure Sentinel, Carbon Black, ArticWolf, Qradar.

[trail gale]

I was not sure that channel okay for questions which is not related tryhackme room, but thank you

[marble current]

Gave +1 Rep to @loud hornet

[icy trellis]

#infosec-general

[somber crow]

That's excessively political for tryhackme, politics is best avoided as it leaves a foul taste in the mouth

Well, real politics

[icy trellis]

Keep it English @tight grail

There’s no need to know about the topics that the user discussed as pentesters aren’t commonly asked to perform those techniques

[loud hornet]

If you're really that worried, you can hot glue gun the usb port.

[green eagle]

Re. Qradar: I really want to make a room on qradar siem, not sure how that'll pan out with the community edition though.
But good to know there's at least one other person interested 😄

[sage verge]

Telling you splunk is not even popular anymore in my area as it used to be. Its now all Microsoft 365 defender, Azure sentinel, Carbon Black, QRADAR

there is no platform atm that has hands on practice with those tools

😦

[drowsy parcel]

I`m trying to create a private room, Ive uploaded a ubuntu server as an .ova file and added it to my room but when I start the machine I cant ping it, any sugestions please ?

[loud hornet]

Have you allocated the correct resources to the machine?

[drowsy parcel]

I think I did, around 30gb of space, 4gb of ram, I even tested the .ova localy imported it into virtual box and was working fine managed to ping it

[loud hornet]

That could be the reason why, I don't think any of the target machines have 4GB of RAM.

[drowsy parcel]

Should I do 2 ?

[loud hornet]

@lunar plank could be one of the best people to ask, if they're not busy.

[drowsy parcel]

I`ve did 2gb of ram I also did 512ram still cant get a ping

[somber crow]

Does it ping on your local machine when deployed with 512mb? How long does it take to load up?

[drowsy parcel]

yeah managed to ping it but was a bit slow, I`ve given up thx anyway

[marble current]

Gave +1 Rep to @somber crow

[elfin lichen]

room based on explaining and securing top 25 bugs https://www.bleepingcomputer.com/news/security/mitre-releases-new-list-of-top-25-most-dangerous-software-bugs/

[strong hemlock]

Hey guys, has anyone solved PowerShell room from Offensive Sec chapter??

[unkempt marsh]

Dear admins, can I know how much time it would take to make rooms public (writeup accepted)?

[loud hornet]

There is over 200 rooms in the review line, could be a while

[nimble venture]

well, then make it looks like a company instead of politics

[unkempt marsh]

Ok thanks

[marble current]

Gave +1 Rep to @loud hornet

[smoky mirage]

Hi Everyone
I have joined 'internal' room using attackbox but I am not able to get Target IP.

in description they have mentioned that machine IP is the target IP. Is this correct?

[somber crow]

@smoky mirage Hi there, please ask in #room-help
This channel is for ideas for new tryhackme content

[smoky mirage]

sure thx

[wet laurel]

How about an intro to heap exploitation room?

[tight grail]

smart house ctf

[loud hornet]

Smart house?

Do you mean IoT's?

[autumn crystal]

can anyone suggest me btech final year project ideas in cyber security field

thanks a lot in advance

[tight grail]

I honestly don't know too many details, I heard that the smart home ctf will be half and half and it would be nice if there were educational resources from tryhackme and to learn and practice a bit

[forest summit]

well there is a section in the latest advent of cyber to hack a smart camera using some protocols a lot of smart home stuff use

[grim tinsel]

Can you please make some changes to save button on the rooms. It doesn't give you opposite options like when i saved a room, it doesn't tell me to unsaved when hover the cursor over it. To add more into it, Could you let user create a category or something of saved rooms so they can refere back easily when they want to. Thanks for such a wonderful website.@remote socket @cunning thunder @topaz mortar

[marble current]

Gave +1 Rep to @remote socket

[loud hornet]

There is an x in your saved rooms to remove it.

[topaz mortar]

You should also be able to click the Save Room button again, so it will remove the room again

[grim tinsel]

Thank you guys for you response. I mean at first glance I can not figure out so I use cursor and it shows same " Save room ". Also different icon for save and unsaved will quickly help to figure out. Like with saved room ✅️

Just a feedback👍 so take it lightly.

🙂

[crimson tangle]

Is there a BYOVD room already?

[gloomy echo]

Any body interested in making a room for firebase authentication mechanism

[slender vessel]

mac os hardening, (vm -) network hardening, kali linux hardening / initial kali security config, suricata, fail2ban, utm, system integrity protection are my ideas for rooms

[loud hornet]

I don't think MacOs can be done, as you can't put their software and OS on non-apple hardware.

[sick comet]

it'd have to be theory only for mac

pretty sure there is alredy some stuff on network security

not sure what you mean by "kali linux hardening"? its supposed to be a hacking distro...

I believe there are alredy rooms on IDS/IPS too

SIP sounds interesting

[sudden garnet]

it can be done but it's expensive in aws

[unkempt marsh]

What about building a C2 (command & control) framework in python or C# with most of the functionality like metasploit?

[light pagoda]

More scripting rooms! Automation, writing exploits, evading AV, debugging, creating new tools. Lua scripting in nmap

[coarse basin]

hi

hi everyone

[winter moat]

In room oscommandinjection task 2

THM, start use a .php sample, pretty nice BUT just bellow a new sample, just in phyton, why change, so comfussing.

Will someone explain the Phyton model too me in .php?

[carmine minnow]

both are like servers that have command injection functionality

the python one I assume(I dont use flask) after the http://domain:port/<its takes a shell command>

and that shell command gets executed using a subprocess shell which can do the same like the normal terminal

so in conclusion, python unlike php has to import a module to use os commands

[winter moat]

Thank you ☺️

[carmine minnow]

No problem

[slender vessel]

Hardening kali means how to make your kali fit for hacking e.g. install and config a firewall, check for rootkits, backdoors, and exploits, disable samba and openssh server if not needed or use fail2ban, disable root in older distros, basic log monitoring, things like kali-tweeks and other tips from kali docs. here is a list for mac os https://github.com/drduh/macOS-Security-and-Privacy-Guide

[sick comet]

https://tryhackme.com/room/linuxsystemhardening

[sick comet]

Im not sure if they'd do specific distros, but your welcome to do one if you want

[somber crow]

You don't need to do a lot of kali hardening. It's safe out-of-the-box, all those services are disabled. Firewall is not neccesary if the ports are all closed hehe

[light pagoda]

Scapy room! Also, more learning paths for certifications other than Pentest+

[scenic copper]

Hello everyone I am new to Tryhackme Website I can't understand where I started my career as a Penetration tester can anybody guide me please thank you.

[tacit rivet]

Go do the web fundamentals room first, into the other basic rooms that say easy then when you’ve finished all those start the penetration tester room that has 64hrs next to it

[storm tinsel]

android reverse engineering (especially dynamic analysis) with frida

i found no courses to learn re with frida

[forest summit]

intro to steganography

[wild acorn]

Osint pathway

[faint plaza]

Hi everybody, is it possible to propose/implement some ctf related to specific security solution.
Like ctf on hacking kubernetes ? I have some idea and i would like to share it

[forest summit]

chances some random person will go into and make room from your idea is not that high... the chances of you doing good if you make your own room from your idea is widely better

[faint plaza]

Yeah that what i want to do

I want to know how to share it for create a room in thm

[carmine lynx]

Hello guys, anyone knows how to solve this extra task in Linux Privesc room -Task 7- Sudo - Environment Variables:

[tacit anvil]

malware development path

[icy trellis]

Can you provide a use case?

[tacit anvil]

to learn it .

[icy trellis]

For what though? For what job role?

[tacit anvil]

malware analysis

[icy trellis]

Can you change your status, please? @tacit anvil

[tacit anvil]

how can i change it

@icy trellis

[icy trellis]

Your status on Discord

https://beebom.com/how-change-discord-status/amp/

[radiant crypt]

Hey Folks, I want to submit a room for THM community. Can someone please help me with this if they have a prior experience in creating rooms for the platform??
I also want to get started in building vulnerable VMs for the infosec community, but with vulnhub owned by OffSec now, is there an alternative on how can I make my VMs public?

[cedar echo]

Give me a sec I'll get you access to the creator's lounge

[uncut eagle]

Hey, i had submitted my room a month back ig... but still it shows status submitted, can uu guys confirm if this isnt any glitch or something...

[loud hornet]

There is a loooong list to go through.

[wind rock]

Web3 Room, where you learn exploits, wallets drains, the risks in web3 and more

[orchid hazel]

When I set up a room in TryHackMe and specify it as free, subscriber-only, or business, does it affect me as the creator in any way? Specifically, are there any rewards associated with creating a subscriber-only room?

Also when did i get access to creator's lounge 😄

Just submitted a room and can not wait to get other creator's feedback.

[loud hornet]

No.

[loud hornet]

Need to ask a mod for it.

[orchid hazel]

Okay. Thanks for your time : )

[orchid hazel]

Just out of curiosity, what will make me publish room for a special part of the users only ? 😄

[loud hornet]

Special part?

[orchid hazel]

Subscribers, or business users only.

[cedar echo]

That's more for internal use, but it's up to the creator really

[vast spear]

This is more of a path idea, but maybe a path focused on bug bounties, how to go about them, and just educating people about those principles?

[cedar echo]

could be a room tbh

the rest is already in the other paths

problem with bug bounties is that there's no real standard

[vast spear]

maybe I’ll make a room for it, just like a super basic one, idk

[orchid hazel]

Thanks for the answer : ). Is it possible to get access to creator's lounge or should the room get accepted first.

[marble current]

Gave +1 Rep to @cedar echo

[cedar echo]

Yeah it's possible

[marble current]

➕ Gave the role Creators-Lounge to _biggib

[cedar echo]

Done

[tacit anvil]

Good idea

[hoary shale]

Are there any prerequisites that someone must have before someone can create a room for other users? And is there somewhere aome reference what room topics are „allowed“?

[forest summit]

no prerequisites..... but there is helpful documentation to go through... think most topics are allowed as long as they are deemed ethical hacking

!docs room-creation

[soft hamlet]

TryHackMe

Get started with making TryHackMe rooms!

https://help.tryhackme.com/en/collections/3665114-tryhackme-for-users#room-creation

From TryHackMe with ❤!

[forest summit]

@hoary shale ⬆️

[hoary shale]

Thx! @forest summit

[arctic ether]

so this is not a room but it's about KOTH, the idea is to place voting system on private games for KOTH

[proven chasm]

Yes, maybe why not!

[waxen loom]

How about a room focusing on TAXXI and STIX contents'?

[icy trellis]

I am assuming you are not referring to the English rock band 😁

Could you provide more details?

[waxen loom]

https://oasis-open.github.io/cti-documentation/stix/intro.html

For example , STIX is a format used to exchange data in cyber intelligence. In the cyber intelligence room (one of the various tasks is mentioned) but would be better to deep this topic

Instead TAXXI is the protocol used to exchange this data

bad or good idea?

[icy trellis]

I haven’t seen it, certainly not a bad idea. Just not of how many people it would appeal to

[waxen loom]

more info there: https://www.cloudflare.com/learning/security/what-is-stix-and-taxii/

[errant thistle]

can you guys help me to decode this TGUE?O·S·K·MTUEGI·SYENFE·TOI···SRO·T·SF·OYT···O·T·KUMH·I·AE·NMK··

[tough dagger]

solved now pay me in two cups of coffee (espresso shots added) for the solution 😂

[tough dagger]

try cipher

[icy trellis]

Can you provide context?

[errant thistle]

😋

[icy trellis]

@errant thistle Please do not ignore me 🙂

[tough dagger]

Did you figure it out?

[proven chasm]

Are there anyone can solve it ?

[loud hornet]

Solve what?

[proven chasm]

@loud hornet

[loud hornet]

Until the user answers Jabba, I'm not touching it.

As I don't know where it has come from, it could be a job interview, exam or school work.

[proven chasm]

Okey, i understood.

[jaunty rain]

Are there any rooms for CI/CD exploitation ? Like repos credential stealing , iac? etc yet ?

[proven chasm]

I guess, there are two room on the thm, one of these is the "Intro to Pipeline Automation" and second the "Dependency Management", can you check out ?

[cedar echo]

I have one in the pipeline, but it's proving difficult to set up

[jaunty rain]

Something where you can go from exploiting a pipeline to spinning up an vm in a cloud environment to laterally enumerate and move around would be sick but maybe that’s asking too much 😅

[cedar echo]

That's probably a bit much

[jaunty rain]

Haha

[cedar echo]

I have to see if what I want to do is actually possible, tbh.

[jaunty rain]

Then I think basic enumerating repos for creds with some open source tools would be cool , add in some education about securing various pipelines and what to look for

What did you have in mind ?

[cedar echo]

Gonna keep that secret for now:)

[golden grotto]

I definitely think there should be more bug bounty rooms including one for project discovery tools like Nuclei and subfinder

[viral gazelle]

An idea for a blue team room: Reviewing and applying security baseline configurations for Windows and Linux, probably two rooms.

Windows could describe Microsoft Security Baselines and how the GPOs work, their impact and etc. Can mention NIST standards and CIS Benchmarks in passing.

Linux would be similar, but I’m not sure a good free baseline to use, although US Military STIG or OpenSCAP would be viable

Emphasis on, this may break legacy services, but hardens your environment to a significant degree. Stress that OSes are not configured securely by default

This is a problem I have at work, so I presume that it would be useful info for all

Possible concern: These baselines are so broad that it may be difficult to summarize unless you hit on the important points

[amber oak]

i discovered that there are sql injections entry points in various http headers beyond cookies. i suggest a room on this topic. for example, the http header X-Forwarded-For can be an entry point

[light pagoda]

This isn't a room-idea but it would be really neat to get an Ares bot. The Ares server has one.

https://github.com/bee-san/Ares

[sick comet]

@icy trellis Rust -> JavaScript ?

[icy trellis]

Que?

You mean convert it to something usable by the bot?

[sick comet]

yeah

[icy trellis]

I don't want to take power away from the other functions on the bot

[shy wing]

Are there any rooms fot GRC

[sick comet]

Here's an idea, instead of having a boot2root machine, you get root ssh credentials and have to patch up the vulnerabilities/ harden the machine, then when ready, an automated script would be ran to test the defence and see how they did .....does this seem doable?

[stray lodge]

I'm not certain about getting ssh credentials, but patching after getting access seems to be the format for KoTH? At least that's how I understood it when I read the mechanics.

[sick comet]

Yes, it is partly like koth but would be an actull room instead 🙂

Just like the first half of koth (getting root) is what the boot2root machines are already

[native raptor]

I'm 99% sure that's been done

[sick comet]

oo do show

[native raptor]

I am not sifting through the hundreds of rooms on the site looking for it lmao
I just remember a room where you had to fix bugs and check on a website (hosted on the same machine) for flags.
Someone else might remember what it was called

[sick comet]

fair enough 😄

[lunar plank]

are you thinking of this one? https://tryhackme.com/room/recovery

if so that one is realllllly good fun easily top 3 challenge rooms for me

[native raptor]

That's the one. Cheers Ben
cc @sick comet

[sick comet]

Ha cool, yeah would love to see some more of those types of rooms!

Thanks Ben

[forest summit]

think there was one of those in last advent of cyber too

[uncut eagle]

still no update

[loud hornet]

There's over 200 rooms for the team to go through.

[uncut eagle]

any estimated wait time u can give?

[loud hornet]

None, as I'm not staff.

[uncut eagle]

ah, okay thanks

[marble current]

Gave +1 Rep to @loud hornet

[forest summit]

welcome to the waiting club

[uncut eagle]

lol

[waxen loom]

how about a room on sql map tool? (i don't know if was already published something similar or not?

[loud hornet]

https://tryhackme.com/room/sqlmap
https://tryhackme.com/room/sqlilab

[waxen loom]

sorry I've not seen them befpre

before

[loud hornet]

You have?

[waxen loom]

correct

English is not my mother language sorry. I've forgotten the word "NOT".

[forest summit]

ooh neat that sqlmap room shadow should probably do too

[loud hornet]

Don't worry about your English, I was only asking so I can clarify. 🙂

[waxen loom]

Yeah, of course.

[loud hornet]

The rest of the rooms on THM with SqlMap are challenge rooms.

If you go to learn, you can search Sqlmap I'm not sure which rooms you may. or may not have done.

[timber glen]

hai, room Kenobi smbclient not connected it was "do_connect: Connection to 10.10.221.48 failed (Error NT_STATUS_IO_TIMEOUT)
" how to fix them

[ashen smelt]

#room-help For that

[timber glen]

it canot connect them how to solve them

[stray lodge]

If you can post your concern in the correct channel as @ashen smelt pointed out, we'd be glad to assist.

[timber glen]

Thks

[tacit anvil]

Any malware rooms?

[loud hornet]

There is some malware rooms, on the soc2 path, possibly soc1 also.

[velvet plaza]

I am looking to create my own room, could someone review my idea?
A few different vulnerabilities in wordpress plugin's to be exploited such as sqli, xss, directory traversal, file upload.
To showcase the mass amount of vulnerabilities that can be introduced via installing wordpress plugin's and not updating them

[cedar echo]

it's mostly been done before, but with the right presentation it might pass

[velvet plaza]

Any idea of which room to create, need some ideas.

[cedar echo]

Plenty, but my ideas may not mesh well with what you do best. Your room is your story to tell, not mine 🙂 so make the room you want to make 🙂

[velvet plaza]

What about a room themed after Star Trek's infamous unwinnable scenario "Kobayashi Maru", the only way to win it to think out of the box and partially cheat.

With a lot of depth such as multiple websites or surfaces

1. Getting access to the first login page by simply looking at the source code's comments
2. Use a IDOR to get access to another user which has more access
3. The more access panel has a SQLi
4. Once the user gets the database, the sites goes into lockdown and nothing else can be done
5. If security controls get bypassed, user has to first get the credentials to the DBMS with read access and to get write access, have to view the database to find a highly privileged user which has write access
6. Then disable 2fa on the admin account and log into the notes section as admin
7. Find ssh credentials for a service
8. Simple privilege escalation

In a alternative path a user can take which will require some out of the box unusual thinking (To actually do the room)
Gaining access to the security dashboard of the site (Some way, have to think about it) and disabling all monitoring controls (And add a 50 min wait time before staff gets suspicous)

OR
(Less time spent, Less skill, just out of the box thinking)

make a impossible path where every function alerts the security and they have to reset

and the only way is to do something out of the box and it disables security and gets root access directly

[cedar echo]

If you can make it work, go for it

[velvet plaza]

Although which one?

Or should I make 2 rooms

kobayashi maru cadet

kobayashi maru officer

[cedar echo]

Series are good too

[velvet plaza]

Will create the cadet room first

[exotic shell]

Does anyone know if THM will reach out of the room you submit isn't accepted? Mine has been sitting in a waiting for review status for a while.

[loud hornet]

IIRC, yes, Is it a walkthrough room? they're auto denied.

@cunning thunder can tell me I'm wrong though.

[exotic shell]

Nope its not a walkthrough. Its a CTF

I can always drop the link but I was just curious

[loud hornet]

Please don't drop the link if you have it in for review.

[exotic shell]

I just wanted to make sure I would atleast get notified if it wasnt approved. Peace of mind

[pastel spoke]

Hi, yes, you will get notified when the status has changed.

If it's refused you will get feedback

[sick comet]

It'd be really cool to see some rooms on bluetooth theory and CVEs! Especially the new BLUFF one (CVE 2023-24023)

[nimble citrus]

thm, you fooled me https://tryhackme.com/room/carhacking101

https://media.discordapp.net/attachments/538460649068691456/1125517933171458188/image0.gif

[forest summit]

oh a private room... haha

[nimble citrus]

maybe they tryna hide hints

[forest summit]

nah just means the room has not gone through the QA phase yet so it is not fully released

[nimble citrus]

i absolutely trust you

while it goes out, i go hack my own car

[forest summit]

please do not hack things you rely on

[nimble citrus]

that's smart

[native raptor]

In that case I think it's actually an ancient one. Was retired a good 3 years ago at least

[forest summit]

oh yeah... it looks old

[native raptor]

You letting yourself into rooms without permission there?

[forest summit]

not before you said you think this was an ancient one

[native raptor]

I can't give you permission to break into rooms 🤷‍♂️

[forest summit]

fair

already left it

[native raptor]

But yes, it's one of Dark's

One of his first ones

[forest summit]

yeah

shadow breaks into a lot of rooms for room testing though

after fontaene posts the links to them

otherwise don't really touch it

[native raptor]

You mean after an occupant of the residence tells you to let yourself in?

[forest summit]

yuups

[forest summit]

though technically we are using the same technique for the joining of advent of cyber side quest rooms

[loud hornet]

So opposite of the way I did it...

[nimble citrus]

tf
seems like kinda ancient dark art to get in hidden rooms

[loud hornet]

I'd advise against it.

[nimble citrus]

i'd advise against any ancient dark art

[native raptor]

Not really. It's proudly displayed in every room announcement in #announcements

[forest summit]

shadow has the super secret special invite code for cheese ctf

a room they helped create

[native raptor]

Oookaaaay?

[waxen loom]

how room about honeypot?

[tacit anvil]

@tacit anvil

[proven chasm]

Honeypot or honeypots

[waxen loom]

honeypot

[proven chasm]

Yes honeypot, there is.

[mossy harbor]

So how does one develop a custom Room? This page implies you can upload your own virtual machine, but doesn't give any specific details on how?
https://tryhackme.com/develop-rooms

[ashen smelt]

Then you can go here

This article may be able to help you out if you are looking to make a room yourself https://help.tryhackme.com/en/articles/6633511-creating-your-first-room

[proven chasm]

Is it article or like a walktrough ?

[nimble venture]

oh looks bad

looks not showing my room 😦

[loud hornet]

I'd strongly suggest not doing this.

[cunning thunder]

Remember, I mentioned in DM to share it privately with your friends, and not publicly in the Discord. 🙂

[loud hornet]

Crap, I had this in my clipboard to send you guys,

[covert fossil]

rooms for theory and kernel and electronics stuff

[tacit anvil]

Hi guys, Is there any free ctf about the “information gathering”?

[proven chasm]

it would be nice

[proven chasm]

PicoCTF

[covert fossil]

root you have very good taste

[proven chasm]

Ahh, thank you 🙂

[marble current]

Gave +1 Rep to @covert fossil (current: #987 - 3)

[light pagoda]

A machine learning challenge would be fun. Maybe breaking a captcha?

[stray lodge]

Something similar or a follow up to the ML ones of the Advent of Cyber 2023 challenges?

[light pagoda]

Exactly but instead of just learning about ML having an actual challenege. Perhaps some of the code could already be provided so it wasn't too hard.

[lunar plank]

🗒️ taking notes:)

[echo rapids]

I would like to chime in because a room about compiling programs would be great. Cool programs from github that require compiling in linux/windows....as well as using make/install...how that works, etc...I dont really understand it all and why it would be great to see a room if it doesnt exist already. Probably something to put in a beginner path too...

[proven chasm]

if you want to become a person about the linux compiling, make/install and about how that works, etc... that you can creating a linux distro for yourself from scratch. i honestly i do not want you to misunderstand me it is just a suggestion.

[echo rapids]

I'll come by github packages that require compiling or using the make/install commands....not setting up linux from scratch 🙂 I'm doing the Obfuscation principals/signature evasion tasks which do some guidance on compiling for those specific instances....i truly dont understand it though or why one compiler is used vs another.....There is a tool, Seatbelt, that requires compiling, same with Threathunter. Just a thought.....def not linux from scratch though. There are a buncha tools that require compiling/make/install...i guess maybe those are more of a programming thing

[covert fossil]

#announcements message @cunning thunder Please can i suggest that those challenge room tags would not spoil beginners right away as they'd automatically know what go-to method to use instead of having the pleasure to guess

Takes me great effort to look away from those as much as possible while selecting a good ctf room, since some of them likely expect u to find out the solution after proper enumeration black-box style.

[icy trellis]

Tags are there so that users can find rooms with specific techniques in order to pratice.
Everyone is free to learn their own way and whether you want to look at the tags or not is up to you 🙂

[formal granite]

I think a forensics room would be cool showing what you see from the targets side when many popular attacks are ran against you. What do you see when hydra or metasploit are ran against you? What do you see in your database after a sql injection? On your router, firewall events, logs, event viewer etc. Just kind of the process of how you determine what attack was ran on you and if your system was compromised.

[stray lodge]

There are a couple of forensics rooms in THM. Have you taken a look if those would be close to what you are looking for?

https://tryhackme.com/hacktivities?tab=search&page=1&free=all&order=most-popular&difficulty=all&type=all&searchTxt=Forensics

[formal granite]

I think I've done a few forensics rooms but I was just moreso curious what things like passive vs active nmap scans and those other attacks look like on the forensics side. Like what a passive nmap scan looks like as a target, what triggers on the targets side that makes it "loud". What do you see in logs when these script attacks get ran against you etc. I'm sure there is probably some forensics with intrusion softwares in the SOC pathway just haven't exactly seen what I am describing ig yet.

[native raptor]

How are you defining a "passive" nmap scan..?

[night remnant]

So you mean SIEM rooms where logs actively get in?👀

[formal granite]

I'm almost positive I originally saw this definition on thm of passive vs active and that active will trigger more stuff like firewalls, IDS, crash services, etc. so I mean in regard to that and what makes it "loud". https://cyberscope.netally.com/passive-and-active-vulnerability-scanning-cyberscope-explains/

[formal granite]

Kind of. But kind of both with intrusion systems, but also just where to look on a server for intrusions or other stuff hackers could have ran on the system without like an IDS.

I am seeing more nmap rooms than the last time I had looked so for that maybe I'll check those out and see what content those have in them.

[stray lodge]

I think what Muiri meant was that once you interact or send a request to the target, it can no longer be passive. By running nmap, you interact with the target by sending requests to it.

[native raptor]

If you did then it's wrong
Passive scanning is purely monitoring existing traffic / events. Nmap doesn't do that -- it sends network traffic. By nature it can only be active scanning

Although yes, from a network monitoring perspective grabbing a packet capture from a network interface is far less likely to throw alerts than active scanning. Host-based monitoring, ehhhhhh

[pastel spoke]

There are a few walkthrough and challenge rooms on log analysis, which show you what is logged when an attacker performs malicious activities. Have you looked at any of those?

[formal granite]

I've seen a few that don't go into any depth unless I missed the room you are talking about.

[echo rapids]

I made a suggestion about possibly creating a room to help with this (pic related) before, and now its a meme. Now that its a silly meme, maybe a room for compiling/building and when to use what type of compiler? Would also love to see stuff about using the make, make install, command too because that comes up. Pretty ignorant as to what the scope would be since I dont really understand it!

[icy trellis]

I feel like it could be apart of a bigger room or maybe a module? Unless someone wants to make a full theory room on compiling, compiler flags and debugging etc.

[forest summit]

gentoo does not run on aws right??? or that could make it semi easy with their package manager and compilation flags

[twilit zenith]

Cryptography room plz

[split berry]

Cellebrite Room, to learn how to use this forensics tools.

[lunar plank]

if I could get my hands on a license and UFED again you absolutely bet I would 🥺

[pseudo viper]

Spoofing or reverse engineering doxxing a service run by an adversary?

I can also create it...

[tacit anvil]

something about oauth

[vocal sequoia]

o365 session token vulnerability very popular right now

[soft oracle]

not a room, but a channel idea: Any chance you could add a channel on the server for creators to be able to help each other out? 🙂

[loud hornet]

There is already the Creators-lounge that you can request access to.

[soft oracle]

fantastic! Do I need to send in an application, or is it enough to request access here? 😊

[loud hornet]

You can ask me nicely :p

[marble current]

➕ Gave the role Creators-Lounge to wild_west

[soft oracle]

please pretty please oh access-god!

thank you! 🤩

[loud hornet]

There you go, it should be in your channel list, below bugs

[soft oracle]

thank you so much, I'll head right on over!

[waxen loom]

How about creating a romm explaning concepts about CVE,CVSS,and CPE. I think there is nothing similar on the platfom?

@loud hornet

[loud hornet]

I'm not TryHackMe Staff, I have no input in this, 🙂

Could be a good idea though.

[coral ravine]

There is a room on this Vulnerability Management

[waxen loom]

Sorry

[waxen loom]

But cover all this concepts in details?

[coral ravine]

Yep, https://tryhackme.com/r/room/vulnerabilitymanagementkj

[fierce rover]

I'm not sure if there are many rooms for Android, but I'd like to see a room for privilege Es. for an android phone that has both termux and sshDroid installed. I heard that is a very bad idea to keep both installed at the same time,I was wondering exactly how bad it really was

[waxen loom]

Very cool idea @fierce rover

[forest summit]

eugh rooting android phones

huge pita

[feral hemlock]

I have an incredibly silly idea, but what if there were rooms that had windows XP or even windows 95 boxes? Like, as a bit of a gag/practical joke. I imagine the process for rooting such an old box could be different as the ancient architecture might not support some exploits? Would be be sort of hilarious to go through a CTF only to realize you're working on a box running windows NT 3.1 or something from 1993.

[sage verge]

need a binary exploitation learning path

[turbid night]

Hey guys I need help to create a room how do I upload VM in to tryhackme it always gives errors I created WordPress vuln plugin in the VM and uploaded it but it doesn't work correctly

[forest summit]

when a moderator is online ask for access to creators lounge

you might need to verify before that though

[wind osprey]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 7, 2024, 6:14 PM

[turbid night]

thank you

[marble current]

Gave +1 Rep to @forest summit (current: #4 - 1736)

[tacit anvil]

IT HelpDesk rooms would be cool, troubleshooting, changing passwords, restarting printer spooler, etc.

[proven chasm]

Are there such rooms in the THM?

[coral ravine]

There are already rooms that go into these sort things not specifically related to helpdesk but you have active directory basics, windows fundamentals for password resets and there is a task that dives deep into the task manager on restarting services. Troubleshooting can vary as mainly it comes to doing research

[tacit anvil]

Ill check that out thanks 👍

[marble current]

Gave +1 Rep to @coral ravine (current: #60 - 115)

[proven chasm]

Absolutely to research

[dense tendon]

The idea I have is not a room but more like a path dedicated to reverse engineering (learning assembly, Ghidra, Frida, etc) and why not also on mobile security ? What is possible to do when you have a rooted / jailbroken phone, how to pentest mobile applications (can be useful for bug bounty / pentesting in a company), reverse engineering mobile applications (hooking, injecting code in it), bypassing applications that block you because your phone is rooted / jailbroken, etc

[forest summit]

well sadly enough the submissions of walkthrough/guide rooms is currently paused and they only accept ctf rooms

unless it is an in house made room

[proven chasm]

Yes

[dapper ember]

I did the history of malware room the other day, it goes back far. but misses a lot of stuff from recent decades. like sasser, dcom rpc, nimda and all the things that led to Windows Firewall/Defender and ASLR/UAC

Could I make a room expanding on these ?

[coral ravine]

Walkthrough rooms are now only created by Content Engineers

[sinful hatch]

Was wondering what kind of role that is, since I've seen a lot of them recently. Are those FTE?

[coral ravine]

There are some full time and some part time. Content engineers are the ones that create the walkthough rooms and help build the path ways with their rooms

[loud hornet]

I was told it was only full time positions being advertised 🤔

There is very few part time, and they're getting fewer.

[coral ravine]

Ahh yea, I meant there are still some current part time CEs

[sinful hatch]

This would be purely a walkthrough so I can't do it myself, but I believe a room on machine learning safety would interest a lot of people and be in the spirit of educating the public for the greater good. Topics like training data poisoning, model extraction, adversarial examples. Maybe a task on principles of ethical AI.

[tacit anvil]

ADCS attacks room?

[coral ravine]

https://tryhackme.com/r/room/adcertificatetemplates

[tacit anvil]

ty, BlackOut!

[coral ravine]

AD networks have them as well

[tacit anvil]

Nice, I'll take a look!

[proven chasm]

AD rooms?

[loud hornet]

There is ad rooms and networks already.

[proven chasm]

Ок

[regal tide]

I have used Proxyman/Burp to proxy traffic from mobile devices and have found that there are so many vulnerabilities in so many apps out in the world. Perhaps I’ve forgotten about a room that already covers this? Otherwise, I’d be happy to work on a room with this…

Lots of nice concepts with it, SSL pinning, API vulns (IDOR etc), IPA analysis, etc

Specifically I’m thinking non-jailbreak type of analysis

[proven chasm]

it would be big

[drifting dragon]

Hey

[proven chasm]

Hey

[sage verge]

need a drop down for blue team rooms and a drop down for red team rooms

[coral ravine]

What do you mean by drop down?

[sage verge]

as in a filter I guess

because there are rooms that are blue team that are not necesarily in a blue team path so would be handy to have that

rather than sifting through all rooms to find them

[stray lodge]

Ahh.. seems to be a search function rather than a room idea. You can post it in #feedback-and-ideas then.