thm-community-media

[formal sparrow]

Awesome 😁

[mint solar]

TryHackMe sticker swags, when

[meager compass]

already exists in the merch shop :)

[glacial yacht]

https://youtu.be/K52hlk98soU

[graceful coral]

@graceful coral

[rocky iron]

Ey Latin America, today KOTH in stream at 930 pm gmt-5, CTF with consoles:
https://www.twitch.tv/hackorgame

[strange axle]

https://youtu.be/Yp3tKw2kvr4

https://youtu.be/vAZSyC1nh3c

[olive sundial]

Let me underline that it's important to pay close attention to details. There's a hidden thm code inside currently unclaimed

[tropic dust]

is that the first time chev face reveal? 👀

[olive sundial]

perhaps, i have linked too ya know

[olive sundial]

ghostping?

[proper heron]

If anyone wants to join the show we are doing VulnNet now at https://twitch.tv/sup3rhero1

[proper heron]

Back again after dinner break - join me for h4cked 🙂 link above

[tropic lava]

@willow patrol Hi, this channel is for Streams, videos, blog posts, etc of TryHackMe content so I've deleted your message.

[buoyant ruin]

In this video for our series Pop Pop Pop Another Server Drop, we are popping the Mr Robot vulnerable machine. Things learned in this lesson include:

1. Nmap for port scanning and arp scanning
2. Gobuster for directory busting
3. Wordpress hacking
4. Password cracking with john the ripper and WPScan
5. PHP reverse shells
6. Hashes
7. Netcat for reverse shells
8. TTY and how to use python to get a more stable shell
9. Basic BASH commands
10. SUID bit
11. Nmap interactive mode privilege escalation
    So let’s get popping!

https://www.youtube.com/watch?v=ABS91i3vR88

[proper heron]

Hacking some Windows on TryHackMe over at https://twitch.tv/sup3rhero1

[rocky iron]

Hi people, hi latin american people, today we have KOTH 930 GMT-5:
https://www.twitch.tv/hackorgame

[glacial yacht]

https://youtu.be/w50EujRY_V4

[glacial yacht]

Posting a bit late but hope it still helps some of you

https://youtu.be/8NMBqW2Lsl4

[iron shadow]

Hopefully this helps someone

https://www.youtube.com/watch?v=tUWCmpxWYdo

https://www.evernote.com/shard/s743/sh/3f51bb24-85f9-466b-7bd5-a875449bb09d/b24a9f12b50cca3a7465327ba2a77c4b

guide to go with it 🙂

[summer inlet]

http://blog.daanbreur.systems/writeups/2021/THM/ nice :)

[torn orchid]

https://mrzeeqa.gitbook.io/mrzeeqa/thm for fellow dutchmen

[glacial yacht]

https://youtu.be/DhvKw908Jks

[blissful narwhal]

https://youtu.be/oWbUrOJM5AM

[ocean nacelle]

https://www.twitch.tv/hey_its_lgg

We are live now! making cyber security defence path ~ Windows Logs

[blissful narwhal]

https://youtu.be/Nhu_2_SLny4

[graceful coral]

Nice video

Good explanation

[strange axle]

https://youtu.be/0vIPUKK_8qs

[rocky iron]

Ey today in my channel we have KOTH, ey people from latin america!, if someone wants to particpate, let me to know!;
https://www.twitch.tv/hackorgame

[tribal warren]

Hey @dry kestrel !
This channel is for TryHackMe only content 😄
You can post direct links to write-ups but this isn't the channel to promote your blog :<

If you would like, you can post it in #general -- just as long as you don't excessively promote it :))

[dry kestrel]

Ah, it's fine, i asked in general and was told i can post here lol.
Sorry for inconvenience :sweat_smile:

[tribal warren]

No problem :))

[humble light]

https://twitter.com/0xTib3rius/status/1385702182750724096

Tib3rius (@0xTib3rius)

Stream will start at 6pm EST (in about 50 minutes). We'll be doing the new Tribute room over on @RealTryHackMe.

Come join us! https://t.co/jbTYrOj3io

Twitter · Apr 23, 2021, 9:08 PM

[fickle estuary]

Is there a way i could DM OSINTDojo, creator of Sakura Room?

[wintry nebula]

He's not in this Discord it seems

[fickle estuary]

so it would seem

[wintry nebula]

Could probably try their Twitter?

[fickle estuary]

ya doing that

[tropic dust]

site dm

[fickle estuary]

It was regarding the badge system.

[umbral hatch]

I use my personal account on Discord 😆

[meager compass]

This looks fun https://www.reddit.com/r/tryhackme/comments/mydj02/professional_red_teamer_taking_on_viewers_in/

[proper heron]

Hey I am live hacking on TryHackMe over at https://twitch.tv/sup3rhero1

[tropic lava]

@dark condor As that is not tryhackme community media, I have deleted your message.

[proper heron]

Just about to start hacking on TryHackMe over at https://twitch.tv/sup3rhero1

[graceful coral]

#site-support

[strange axle]

https://t.co/b7bZOeAST1?amp=1

[rocky iron]

@here hi guys today we have KOTH, latin americans are invited, if someone wants to play with us, you are welcome:
https://www.twitch.tv/hackorgame

[tribal warren]

https://www.youtube.com/watch?v=g2CnIgjHeX8

8 minutes until it’s live!

[lofty crest]

where is the result of the OSCP draw?

[tropic lava]

They're currently removing cheaters

[lofty crest]

😆

[proper heron]

We are about to play some KOTH over at https://twitch.tv/sup3rhero1 Come and join us!

[proper heron]

Streaming some THM Hacking over at https://twitch.tv/sup3rhero1 Come and join us!

[blissful narwhal]

https://youtu.be/q5Nmrao5aIM

[uneven wigeon]

https://aksheet10.medium.com/brooklyn99-walkthrough-tryhackme-db684ea1b7ae

[rocky iron]

Hi Everyone, today it a KOTH day by streaming, eveyone is welcome!
https://www.twitch.tv/hackorgame

[plush moth]

This room was released way before this exploit. Would be beneficial for you, and anyone reading, to also know the intended route. It’s good you highlight a kernel exploit that will work, but the intended route can teach people more.

[tropic lava]

OverlayFS will work on honestly the majority of THM rooms, because it's so new

[graceful coral]

RootMe write up : https://www.notion.so/RootMe-a79e204f8e0643758b05132e7ff0ab08

[uneven wigeon]

@graceful coral nice 1

[flat plinth]

📋 "Hack your way in. Get the Flags. Don't get stung."

🐙 Me and ~1800 more hackers was trying to root the box for the chance to get the OSCP voucher and five One Month TryHackMe Subscription Vouchers. With this one I've learned so much that without this write-up everything I've learned would be lost forever. Hereby behold, my 7 days of struggle!

🔥 Read my #writeup of "Year of the Jellyfish" hosted by Try Hack Me.
https://ethicalme.hashnode.dev/thm-yotjf

[formal sparrow]

@flat plinth
Few things not quite correct there:

• The throttling with the public IP is your ISP -- not the box
• I didn't change the filter after the event: *.phtml by itself would never have worked. *.gif.phtml still will

Also, please submit to the room for review before sharing publicly 🙂

[flat plinth]

ahh didn't know we have to get through some review process before publishing

thanks for telling me that

[formal sparrow]

Nah, just courtesy to let the room creator have a look first

[flat plinth]

Ah, ok. I just think about it how I approach the challenge and to share with others what my thoughts were during the solving process. Like, I'm not doing the official review or something - it is more like my process and thoughts. But from the other hand I can get a immediate feedback on where my logic went wrong - so that's nice.

Thank you for indicating where I can correct the article

[vagrant scroll]

Some THM Wreath over here: https://www.twitch.tv/hey_its_lgg

[fallen ice]

Tooling then THM https://twitch.tv/ahaquer

[graceful coral]

https://defaltlibary.blogspot.com/2021/05/owasp-top-10-tryhackme.html

[graceful coral]

https://defaltlibary.blogspot.com/2021/05/pickle-rick-tryhackme.html

[graceful coral]

i liked it, great write up 😄

[fallen ice]

https://twitch.tv/ahaquer

[rocky iron]

Hi boyz/girlz today we have KOTH in channel, everybody is invited:
https://www.twitch.tv/hackorgame

[flat plinth]

I see we had the same idea this week 😄

📋 "Listen Morty... I need your help, I've turned myself into a pickle again and this time I can't change back!"

💡 Practical example of reverse shell usage and sudoer understanding.

🔥 Read my "Pickle Rick" write-up
👉 https://ethicalme.hashnode.dev/writeup-get-schwifty-pickle-rick

[graceful coral]

I read about it nice one man btw i try to use python payload didnt work

[flat plinth]

the port you are connecting to from the target machine could be a problem - I've got that issue on YotJF if I remember correctly

also depends what kind of problem you had

[graceful coral]

@flat plinth Python Payload didn't execute i finally use perl payload to done the shit. I use python payload not a python3 i think that might be the problem

[flat plinth]

well, maybe

[worldly fable]

I3 rice almost finshed looking good and minimilistic

[tawny seal]

a newbie makes his first hacking blog post: https://hermannc.dev/2021/05/30/tryhackme-overpass-2-hacked/

[tropic lava]

Is there a reason you haven't submitted this to the room?

[tawny seal]

Kinda wanted to see what people thought of it, and because I didn't know that was a thing to do 😄

[tropic lava]

I'd also appreciate it if you could remove the answers/any passwords

[tawny seal]

Sure, i left out the actual 'main' answer

Is the picture with the information included, but not called out acceptable? (like for question 2?)

[tropic lava]

I'd rather it wasn't there, like especially the password

[tawny seal]

oh yea, i'd definitely obfuscate passwords

this particular one didn't have any actual passwords

[tropic lava]

I made the room

Just this image here, I'd appreciate it if you blocked out the password just below. That sort of thing.

[tawny seal]

ooooohh, that password, sorry, i was thinking flag, sorry!

[tropic lava]

As for this bit, John is fussy. It needs --wordlist=/path

also be careful with i vs I, it's always I when you're saying like I did this

[tawny seal]

Ah true, my crappy lazy habits 🙂

Also, I JUST realized this was only part one 🤣

do you consider

So, right off the top, we see an HTTP GET request to /development/, and then a POST to /development/upload.php, which my gut instinct tells me would be the URL, but, as THM helpfully shows us, it's looking for a single world between slashes.

to be too close to an answer?

[tropic lava]

A little, but eh. Also, typo - world/word

[tawny seal]

🤦‍♂️

What I will probably do is complete the rest of the parts that i completely missed, and submit as one big post for the room

[graceful coral]

https://defaltlibary.blogspot.com/2021/05/vulnuniversity-tryhackme.html

[uneven wigeon]

good one @graceful coral

[graceful coral]

https://github.com/Defalt-cloud/CTF-Writeups/blob/main/TryHackMe/Basic Pentesting/Basic pentesting.md

[uneven wigeon]

good1 @graceful coral

[junior mantle]

Reversing ELF TryHackMe | Reverse Engineering | techy krish https://youtu.be/0RF-id8vUk0

[graceful coral]

https://defaltlibary.blogspot.com/2021/06/simple-ctf-tryhackme.html

https://defaltlibary.blogspot.com/2021/06/cat-pictures-tryhackme.html

[peak sentinel]

[graceful coral]

https://defaltlibary.blogspot.com/2021/06/bounty-hacker-tryhackme.html

[graceful coral]

Great box !! Such a madness
https://defaltlibary.blogspot.com/2021/06/madness-tryhackme.html

[tribal warren]

@orchid estuary Hey that isn't TryHackMe related 🙂

[graceful coral]

https://defaltlibary.blogspot.com/2021/06/mustacchio-tryhackme.html

[graceful coral]

great box from optional
https://defaltlibary.blogspot.com/2021/06/cmess-tryhackme.html

[spiral heart]

Complete walkthrough of c4ptur3-th3-fl4g room:
https://youtu.be/mdpnBG6TRW8

[gloomy ruin]

RootMe Walkthrough
https://www.youtube.com/watch?v=SQflsrtS21A&t=6s

Pickle Rick Walkthrough
https://www.youtube.com/watch?v=EaiIqKqGnpI

[uneven wigeon]

@gloomy ruin u dont need to download the vpn file everytime

only once (non sub)

is fine as well

[gloomy ruin]

I know, it is in the second video

I figured that out

[gloomy ruin]

what is no sub?

[uneven wigeon]

subscription

[gloomy ruin]

yes, no sub

I will get it once I am done with my grade 10

just gotta concentrate on study now

[spice kayak]

weeww 10th grade

[gloomy ruin]

Yup

[nocturne veldt]

Same mate

[gloomy ruin]

nice

[spice kayak]

Ok from pins 📌 I see that flags are not allowed to be shown . I have some doubts

1)for old rooms do I need to wait for the permission of the author of the room to publish the write-up ?
2) I see write-ups showing the flags for old rooms not the new ones is it ok with that? Coz it may need some lil bit more editing

[tropic lava]

@spice kayak Please do not include flags or passwords (also SSH keys probably count there) in your writeups.
You don't need permission from the creator but it's nice to. That's what submitting it to the room is for, in part.

[spice kayak]

ok

i will just dont cat the flags during recording ftw

[tropic lava]

You can wc them, or maybe md5sum them

[spice kayak]

yeah i also though if the same thing wc

[uneven wigeon]

https://aksheet10.medium.com/zth-web-2-walkthrough-7ab1c3523162

[graceful coral]

https://youtu.be/uIMC30s_TKQ

[uneven wigeon]

https://aksheet10.medium.com/pickle-rick-walkthrough-tryhackme-315ed4b04272

[weak quest]

How can I get the Act of Kindness badge? I thought I need to solve both of the wonderland room and I'll get it. I had to realize I've dove with them.

Is it a bug or I have to solve another room?

[tribal warren]

Act of kindness is a community badge

Being nice, purchasing vouchers for users, giveaways etc.

[weak quest]

oh

[tribal warren]

Usually you’re commended by a moderator to Skidy

[weak quest]

I thought somehows it connects to the wonderland series

Ty for the help

[tropic lava]

That'd be act of Malice or something, those rooms are just mean

[green jungle]

couch tryhackme writeup

https://github.com/nandk4552/nandk4552/blob/main/Couch Writeup TryHackme

[arctic geyser]

https://youtu.be/llMS_0ciFks can i have some traffic towards my channel brothers 😁

[edgy jacinth]

I did my second write up,

https://ekimik.medium.com/tryhackme-boiler-ctf-c498ae3040b8

Check it out and let me know for feedbacks!

[tepid cloud]

https://dovidfriedman.com/REAL-BLOG-POST-TRUST-ME

[stone prism]

im dead

that's amazing

[twin solar]

Lol here's my one: https://cybxrlxnd.blogspot.com/2021/07/looking-to-get-into-cyber-security-this.html

oh crap I missed an "or"

[tepid cloud]

It's not as "proffesshanoal" as mine.

[twin solar]

Your one is incredible, a true work of art

[tepid cloud]

Yeah

[twin solar]

Much info, many detail

[tepid cloud]

Can't wait till I get my 10 tickets

[twin solar]

https://tenor.com/view/sweating-nervous-paranoid-gif-4974019

[thin oak]

https://gist.github.com/Mercury-180/290c478a4966cf11252c579f2c5798fc

[flat plinth]

Here's mine!
https://blog.cyberethical.me/review-pre-security

Edit: that compression

[slate crescent]

le blog post https://blog.hydrashead.net/posts/cybersec-with-tryhackme/ 🙂

[uneven wigeon]

le blog https://aksheet10.medium.com/gifts-are-in-the-air-e8f9838dccac

[copper sinew]

https://medium.com/p/a089d746df2c Here is my blog post.

[arctic geyser]

can i use tryhackme content (images and animated videos) for creating content on youtube ?

[vagrant apex]

https://htmlhacker.medium.com/how-to-get-started-really-started-in-hacking-41d3b8d3d5d3

My post now in English

[real zodiac]

https://lupen.medium.com/bare-bones-of-learning-cyber-security-9e179d3d00f

[thin oak]

looks great, thanks!

[fallow remnant]

Gave +1 Rep to @real zodiac

[real zodiac]

thank you 😄

[fallow remnant]

Gave +1 Rep to @thin oak

[graceful coral]

https://www.youtube.com/watch?v=hQd33arI_80

[ancient tartan]

Hi all, this is my first Medium post for a TryHackMe room, Fowsniff CTF, would really appreciate any feedback:
https://thef1ash.medium.com/tryhackme-fowsniff-ctf-107ca257ca1c

[steep quarry]

Looks great

[plush moth]

https://www.twitch.tv/westar WESTAR IS STREAMING

[lethal egret]

Guess it's worth dropping here:
VulnNet: Roasted - Raw take (for the most part)
A great Windows box that utilises a bunch of AD wizardry
https://www.youtube.com/watch?v=5Db2ywExEGc

[dusky lichen]

ok i have a doubt can i write blogs / make viedos on subscriber only rooms ?? and networks ?? like throwback and holo

[tropic lava]

Yes

[dusky lichen]

ok thanks

[fallow remnant]

Gave +1 Rep to @tropic lava

[gloomy ruin]

https://www.youtube.com/watch?v=qxwaAwz578k

[proper heron]

I just started streaming! Check it out: https://www.twitch.tv/sup3rhero1 Let's look at some fresh rooms!

[zinc roost]

THM wallpaper pack when? 👀 .

[versed surge]

Ask CMN ;)

[cinder badger]

👀y e s

[formal iron]

Interesting idea

oooh I wanna make another one with the jetpack man 😮

[sly hedge]

Writeup for SweetTooth
https://manash01.medium.com/tryhackme-sweettooth-inc-non-port-forward-method-a658d587c481

[formal iron]

Dentists hate it 😄

Nice writeup though!

[sly hedge]

Thank you

[sly hedge]

I have submitted it on the room's page but can't see it there. Should I contact the room's creators for this? Sorry, this is my first time posting 😅

[brave hill]

Writeup for CMSpit

https://cyberjunnkie.medium.com/cmspit-ctf-tryhackme-d21b9b51291f

[formal iron]

Hey yeah, usually it is for the room creator to accept. Although, I'll take a look at the writeup and accept it if it is unique to other writeups (if there are other writeups) you should get an email from THM if I accept or reject it 😎

ooh there is like 8 pending, lemme sort through them real quick in order of when they submitted

[sly hedge]

Cool thanks ❤️

[proper heron]

Back doing some THM on stream in 10min https://twitch.tv/sup3rhero1

[formal iron]

I accepted it a while ago (basically just as I sent that message above) (:

[sly hedge]

🥳 just saw that mail :) thanks

[formal iron]

npnp!(:

[lethal egret]

Pain, suffering and memes in this VulnNet: Internal Raw Edit!
https://youtu.be/SuRMLj7YeuM

[gloomy ruin]

This is the followup of the first part of the room CC:Pentesting

https://www.youtube.com/watch?v=QRs34pVRWUc

[zinc roost]

If anyone is streaming some rooms tonight (UK time) please ping me, would be interested to see more experienced folks than me working through things.

[lethal egret]

Continuing Wreath as if it were an actual pentest! Come ask questions and join the fun https://twitch.tv/optionalCTF

[proper heron]

Come and join some free training using TryHackMe resources! https://twitch.tv/sup3rhero1

[flat plinth]

Write-up for final challenge in the Upload Vulnerabilities room.
Bypassing the simple upload form to get RCE on a server.

👉 https://blog.cyberethical.me/thm-uploadvulns

[formal sparrow]

It would be polite to get that accepted on the room before advertising it 🙂

Especially given I see at least one inaccuracy off the bat

Nginx is the load balancer / reverse proxy. Express is the backend.

[flat plinth]

thanks Muiri for correction, I really appreciate it
but, once again I don't feel like posting the writeup in the room because it is just my interpretation of the solution - are you guys chasing other people posting their writeups of rooms? when you google the "thm uploadvulns" phrase you can see that there are many writeups already, but not a single one in the room writeups - it is just a training one, nothing advances, so you can see the community don't stress much about providing the writeups at the official channel 🙂

[fallow remnant]

Gave +1 Rep to @formal sparrow

[flat plinth]

I don't find it being rude, to share the THM content and by doing so, giving appreciation to the platform by providing articles about it - I don't see a need to be it accepted on the THM first

[formal sparrow]

No, we're not chasing people for it -- you're getting asked because you're using the official Discord server to advertise your solution, rather than just posting it 😄

As a general rule it is polite to ask the room creator to approve it before going out of your way to advertise it. As you say, it's your own solution, so it's a case of making sure that the creator is happy with endorsing it as a solution on the room.
That's more the case for challenges than for walkthroughs, obviously -- Jewel just treads the line between them.

[flat plinth]

from that point of view.. that makes sense - but.. are really all content posted here is accepted beforehand?
and well if I make some mistakes - community can always contact me/write a comment, that's how it suppose to work, right? that way both sides can learn
first YOTJF, then Jewel - I must learn that finally 😛

[formal sparrow]

Mhm -- we try not to allow anything in here that isn't accepted on the room first

[flat plinth]

ok I understaind, but is it somewhere written down for new users?

[flat plinth]

damn, good point

removing the post until it got accepted

[lethal egret]

Wonderland Road to Top 50 Raw Edit
https://youtu.be/V19y1Sz3vmg

[proper heron]

Streaming some easy beginner friendly THM room over at https://twitch.tv/sup3rhero1

[limber coyote]

https://www.notion.so/kiwids/SOCKS-Proxy-Setup-07112c68fcc14aa1917505dcd6eeb35b

[tawny seal]

Question, regarding writing a blog post, I'm about to start /room/relevant, but it says writeups own't be accepted, but if i did as it suggests and write an actual report and post that to a blog? More of an ethics question than anything else.

[stone marsh]

well, ethically, if a creator asked you not to do that and you do it, its probably mildly unethical.

if it was unlisted/private write up I doubt it would be unethical but I assume other people have access to your blog

[tawny seal]

ok, thanks. I wasn't sure if the penetration report would still classify as a "writeup" since, from my brief research it's more of a conclusion/recommendations document, more than a how to (which if it would include, i wouldn't)

[stone marsh]

well a pen-test report needs an attack narrative which is 'what you did to gain access', basically the meat and potatoes of a writeup

I imagine that room creator has those requests because they would like their own guides to be the ones referred to, if you are doing something like that for potential employers to look at later I don't think it'd be too bad really

[tawny seal]

ok, yea, there is a guide

thank @stone marsh

[fallow remnant]

Gave +1 Rep to @stone marsh

[formal sparrow]

For your own blog, go ahead :)
Please keep flags/passwords out as a common courtesy, but blog post reports are good for résumés 😄
Just bear in mind that it won't be accepted to the room, and we won't advertise it in here (I.e. please don't post links to it in the Discord/subreddit). In terms of writing it though? Go for it. It's not like there isn't already an official walkthrough for it 🤷‍♂️

[tawny seal]

It might take me a year and a half to get through it though. first thing that's "freeform"

[graceful coral]

https://holliewhite.com/2021/08/30/How-to-get-started.html

[formal sparrow]

You are going to kill my eyes 😆

*Cue 240% zoom*

[tribal warren]

Looks fine on mobile

Seems like a you problem~

Trillium pfft

[formal sparrow]

Wrong image 😆

[tribal warren]

Haha, trying to squeeze it into the conversation, I see you

[formal sparrow]

@urban crescent how does it look on an ultra-wide? 👀

[tribal warren]

I see how that might be a problem

[cobalt plover]

I need glasses

[formal sparrow]

Same 😆

[urban crescent]

even smaller on mine

[formal sparrow]

Loving the content though

[graceful coral]

Displaying fine on mobile

Well written and accurate though, will recommend to anyone who wants to join infosec

[graceful coral]

amusingly

I wrote it on an UW and it looked fine to me

[graceful coral]

It looks like morse code if I try to zoom in

Beep Beep dash dash mofo

[graceful coral]

Display is fine on 24" 1080p monitor aswell

[torn orchid]

am trying to do wreath with as less help from the walkthrough in the room: https://www.twitch.tv/mrzeeqa, feel free to give me some feedback if you all don't mind

[formal sparrow]

You won't have much difficulty -- Wreath is a sandbox. It's not designed to be difficult. The only purpose for those machines is to follow along with the teaching material in the room -- otherwise it would take about 10 minutes to do, if that.

Trying to do it blind is entirely missing the point 😆

[torn orchid]

I didn't mention but i already did the network once while being guided, now i wanna try and see if i could do it without guideness

But i understand your point though. Wreath is actually a well explained walkthrough. So i'm challenging myself to see whether or not i understood what was being explained

[formal sparrow]

Ah, gotcha 👍

[torn orchid]

You did a great job i believe, already on the gitstack and haven't peaked at my answers. Your way of explaining can be longdreaded sometimes, but it's all coherent so it sticks for the most part

I remember wreath explained pivoting at one point, which made me come to the conclusion it's not necessary to upload a nmap binary on prod-serv, but rather i can use sshuttle to route the traffic via ssh specifying the id_rsa with --ssh-command

[torn orchid]

https://twitch.tv/mrzeeqa doing some ctfs

[spice palm]

@tropic lava

[crystal mesa]

https://www.twitch.tv/h8handles

[cloud wagon]

Hi, where can I ask questions about the progress of my thm room and other stuff about room creation?

[formal sparrow]

#creators-lounge @cloud wagon

[tropic dust]

You can ask one of the mods to give you role

nvrmnd

[cloud wagon]

Ty

[fallow remnant]

Gave +1 Rep to @formal sparrow

[tribal warren]

https://www.twitch.tv/0xtib3rius

THM KOTH live rn^^

[tropic dust]

i was about to post it...

[tribal warren]

😁

[teal totem]

i

am

going to give

this a shot

😎

https://www.youtube.com/watch?v=FX3h9xKrxrM

[mossy cliff]

wopah 🥺

[tranquil pumice]

Anyone know how can I share my profile on LinkedIn?

[tranquil pumice]

Oh that’s it lol. I thought I can share it directly from THM.🙈

[tribal warren]

@tropic lava

[tropic lava]

Done

[tribal warren]

Thanks:D

[ionic yarrow]

How can I upload gif image as profile pic in Try Hack Me ?

[stone marsh]

you can't anymore

[wide yacht]

Empline Writeup : https://mikadmin.fr/blog/tryhackme-empline/

[tropic lava]

@graceful coral Please try to keep it to just THM content here

[graceful coral]

Ah ok, will do.

[open estuary]

Hey guys Im trying a new method of self-study and streaming some THM study alongside of my OSCP prep. Feel free to drop in and chat, I want to get more engaged with the community! https://www.twitch.tv/gonski47?tt_medium=link_copied

[lime cosmos]

https://youtu.be/an6qEot7Djk

[uneven wigeon]

hey hey, its a nice one just a lil typo here

[tropic lava]

@queen jackal This channel is for Streams, videos, blog posts, etc of TryHackMe content

[queen jackal]

oh I'm sorry

is there any room where I could share that video about note taking for the CySA+ ?

[graceful coral]

#resources I guess

[frigid wind]

Hey so I made this for people that want their tryhackme badge on their github profile README for some reason if I just linked it with the aws link it wouldn't work so here is a github action that just downloads the image and uploads it on a repo you own to be linked in the README https://github.com/p4p1/tryhackme-badge-workflow

I don't really know where to posts this so ping me if it's not the correct channel

[formal sparrow]

Ironically, the issue that stops you from just embedding it directly has just been fixed

[frigid wind]

Hahaha no way 🙂

I just checked for me it hasn't been fixed for some reason well at least it exists for people that are interested 🙂

[formal sparrow]

Not sure it's been pushed yet, but it's definitely fixed in dev

#site-bugs message

[stable heron]

Just uploaded a new video about XSS, check it out
https://youtu.be/o9gkGV25B9A

[queen jackal]

Hey everyone! 😎

Just in case there's anyone here going through the latest TryHackMe Learning Path!

I just did a walkthrough for the first Room 🥳

Hope you enjoy it! 🍀 😊

https://www.youtube.com/watch?v=95cOZkQtNUc&t=237s

[formal iron]

awesome @queen jackal but a good consideration if you want to do youtube videos, is to consider whether images like that (the images/components in the thumbnail) are actually yours/you have the rights to use (:

[queen jackal]

you are absolutely right @formal iron ! I might have take that for granted, I'm sorry!
Do you know who I can contact from TryHackMe to ask for permission for future walkthroughs?
Thank you so much for your kind advice 🙂

[fallow remnant]

Gave +1 Rep to @formal iron

[tropic lava]

@stable heron this channel is for directly THM related content

[queen jackal]

@formal iron just sent you a message on twitter, asking for permission to do a walkthrough of your Room 🙂

[formal iron]

hello I will get to it when I'm out of my lectures (:

@queen jackal

[queen jackal]

Thank you!

[tropic lava]

You could walk through other content

[queen jackal]

Thank you for responding on Twitter Ben! @formal iron !
I really appreciate it 🥳

[fallow remnant]

Gave +1 Rep to @formal iron

[formal iron]

No thank you (:

[fallow remnant]

Gave +1 Rep to @queen jackal

[formal sparrow]

You missing a comma there, bud? 😆

[tame ledge]

Let’s eat, grandpa. vs Let’s eat grandpa.

[queen jackal]

Ahah xD

[formal iron]

Commas are evil

When I am on mobile

English standards and rules do not apply 😄

If you can depjyjer it then god speed

[oblique crow]

2nd writeup https://deltreey.blogspot.com/2021/10/tryhackme-simple-ctf-room.html

[queen jackal]

Here's the walkthrough of the second room from the newest learning path, Jr Penetration Tester 🙂

Hope you enjoy it!

https://www.youtube.com/watch?v=thD8JMEJ_I0&t=498s

[tropic lava]

@stable heron this channel is for THM related content

[oblique crow]

writeup #3 I'm having an awesome time https://deltreey.blogspot.com/2021/10/tryhackme-bounty-hacker-room.html

[oblique crow]

and another! https://deltreey.blogspot.com/2021/11/tryhackme-inclusion-room.html

[oblique crow]

https://deltreey.blogspot.com/2021/11/tryhackme-lazyadmin-room.html another ctf writeup

[vernal palm]

Anyone up for a new challenge! There is a competition happening right now! https://www.linkedin.com/posts/jackpalmercybersecurity_competition-prize-2-month-subscription-activity-6864289185528991744-1ngl

[lime cosmos]

https://youtu.be/hIkESyCcDfo

[strange pelican]

https://youtu.be/HnxJrnULWh0

[strange pelican]

https://youtu.be/cTz6f-7RUhQ

[silver topaz]

Finding and Fixing DOM-based XSS with Static Analysis
https://blog.mozilla.org/attack-and-defense/2021/11/03/finding-and-fixing-dom-based-xss-with-static-analysis/

[tropic lava]

@spiral heart Is this tryhackme related?

[formal iron]

xpost from #general but hello good morning

I will play some ETS2
And then
stream in vc
I need to look into/fix the Yara room

Since people seemed to enjoy last nights

[raw yoke]

https://www.youtube.com/watch?v=LMyrMYlpCx0

[tropic dust]

sharing third time? 🤔

[tropic lava]

@lime cosmos Please stop reposting the same video, it's turning into advertising.

[lime cosmos]

ok 🙂

[storm cave]

Hey I have uploaded the walkthrough of today's Day 5 challenge by two methods - one is the intended path and another by stealing cookie from target. 2nd method is at Timestamp 3:50.
https://www.youtube.com/watch?v=Y8Ny5y2FXcA

[graceful coral]

nice method 2

[wooden geyser]

https://tenor.com/view/cookies-gif-14785632

[queen jackal]

Hey everyone! I have a question
When we make a walkthrough, do we have to blur all the answers or just the flags?
Because some of the more beginner friendly answers are written on the question itself, or even on text above the question, so its almost impossible not to "read" the answers, before we even start the practical hacking part. So it's hard to bleep/blur everythin

What should we do?

[graceful coral]

Well, then you could write something like..."And here you should read the text :)" and only focus on describing the steps for the parts that involve something hands-on

[queen jackal]

That's actually one way to do it! Thank you @graceful coral

[fallow remnant]

Gave +1 Rep to @umbral charm

[tropic lava]

If it's an article, it's a bit easier. The main goal is to avoid answer dumps or people just copy/pasting answers

[queen jackal]

Got it! Maybe I should just focus more on the rooms that only have the practical approach and blur the flags in the end (?)

So that people can learn the methodology but have to put it the work to get the answers

[storm cave]

Hey this is my walkthrough on day7 of Advent of cyber
https://youtu.be/xlXDHqENMUo

[tropic lava]

@strange pelican Is this tryhackme related?

[strange pelican]

No Sorry, hahaha my fail, is for other community

[distant copper]

Starting a youtube to start doing walkthroughs etc, going to include write ups as well. Here is my first, youtube video is my first test 1. https://rubelefsky.medium.com/tryhackme-advent-of-cyber-3-walkthrough-day-1-idor-insecure-direct-object-references-54883eb74ee7

[distant copper]

https://rubelefsky.medium.com/tryhackme-aoc3-day-2-walkthrough-23e7d477b9f0

[distant copper]

https://link.medium.com/4pk3QalJZlb

[distant copper]

https://youtu.be/qW8oNTbpaqM

[graceful coral]

https://youtu.be/nomVI6DYtbI

[distant copper]

https://youtu.be/UVT1W1pKj1s

[storm cave]

For Day 17's task if you want list of regions go here https://github.com/darkoid/Cloud-Hacking/blob/main/AoC3-Day17/regions.txt

I have also added the script to list all answers automatically but you will need to find the AWS Access Key ID and other stuff from file

[storm cave]

https://youtu.be/WHFUYkdB0Vs

[mild crater]

Aren't auto scripts considered cheating?

[graceful coral]

Writing buffer overflows in Rust today
https://twitch.tv/mrglitchbyte

[storm cave]

https://youtu.be/isksBJz9-Co

[tropic lava]

AoC2? I've been here since Hackback2!

[oblique crow]

I guess we're not the same?

[tropic lava]

@heavy kindle This channel is for THM content like YouTube videos of THM rooms, or writeups.

[heavy kindle]

oh sry

[heavy kindle]

where do i put it then though

[fast gorge]

Looks really nice and professional.

[sullen charm]

What's that autocomplete action going on in your video?

[fast gorge]

I wanted this video to be clear, I re-recorded everytime I made a syntax error. Target of this video is people who currently dealing with #878393611929129000

[sullen charm]

I didn't realize kali had autocomplete though on your command line, that's cool

[fast gorge]

Yep, it is.

[graceful coral]

Learning more about buffer overflows today!

https://twitch.tv/mrglitchbyte

[sullen charm]

What music are you playing on your VOD that you don't get a copyright strike?

[graceful coral]

https://www.youtube.com/watch?v=ORBwkXsUNEs

There are a couple others I use

https://www.youtube.com/watch?v=VMAPTo7RVCo

And any of the Streambeats by Harris Heller

[sullen charm]

I currently have music during live streams, but the stream is separate so it doesn't get me schwacked in the vod

Glad to see in not the only one who has issues just getting started while I'm trying to stream. I gave ya a follow

[graceful coral]

Yeah thats always tricky, finding music that doesnt schwack you later. Youre definitely not the only one, I couldnt get RDP working for the life of me
Also followed you!

[graceful coral]

Its Wednesday Hackday. We're just going to hack something today.

https://twitch.tv/mrglitchbyte

[graceful coral]

Falling down the rabbit hole and entering wonderland today.
https://twitch.tv/mrglitchbyte

[pseudo coral]

God, I love the art sometimes. Most times, actually!

[ember verge]

wait what is this

can you give me the room link?

[uneven wigeon]

osi room

[formal sparrow]

Two things:
A) Answer dumps are not writeups. Indeed, there's an explicit instruction when you submit writeups to THM rooms that they should not contain answers. Besides that, it doesn't do you any favours to simply reveal answers. If you want your writeups to be respected + beneficial to you (and the community at large) they need to explain how you reached an answer, without revealing the answer itself.

B) Have you had those accepted on the rooms before posting them here? I would suspect not (for the above reason). As a heads up, if the writeups have not been accepted to the room, we don't give them an audience in here (especially if it's for community submitted rooms, out of respect for the creator -- although that doesn't apply here).

As a side note as well: writeups for walkthroughs are generally not a good idea. They tend to either be answer dumps (which are objectively bad), or the writeup author attempting to explain the content of the room themselves.
That latter one is fine to host on your own platform, but attempting to attach it to the room is... insulting, to say the least, because it tells the creator that you think they've done an inadequate job, thus necessitating your own explanation.

[graceful coral]

It be that way sometimes

[sullen charm]

I'm genuinely surprised more people don't share their journey, but maybe I'm weird

[gleaming sundial]

well, I've done plenty of ctfs but it's because of one critical reason(imshy)

[sullen charm]

Fair enough

I like having study buddies and like to see how other people make it through it all

[modern jolt]

I've posted a short explainer of the log4j vuln - https://youtu.be/wyp2tCBY8jw
A walkthrough of the Solar room is coming soon!

[tropic dust]

seems good.

[modern jolt]

Thanks! Trying to churn out some more content before I get back into studying in the next couple of days…

[fallow remnant]

Gave +1 Rep to @tropic dust

[graceful coral]

Do you have examples of what a write-up should be?

[tropic lava]

There are a few ways of going about it. The easiest is a walkthrough of the room explaining what you did and why. You can improve that by showing what didn't work and perhaps why it didn't work.
You could also write a full pentest report style format, if it's appropriate (boot2root etc)

[formal sparrow]

Not off the top off the top of my head (well, none that I didn't write).
As James said, it should basically be an explanation of your thought process when working on a challenge. What worked, what didn't work, why did you try what you did?
You explain how you reached the answers, without actually revealing the answers.

[graceful coral]

Ill give both your suggestions a try, I haven't submitted a write-up for a box yet but Id def like to!

Thanks! @tropic lava @formal sparrow

[fallow remnant]

Gave +1 Rep to @tropic lava

[graceful coral]

Hacking through THM's Wonderland, a rabbit's descent!
https://twitch.tv/mrglitchbyte

[graceful coral]

Finally finished the write-up for Wonderland!
https://www.glitchbyte.io/wonderland-thm-write-up/

[manic snow]

Bounty Hacker CTF (/cowboyhacker) write up: https://exploit.quest/tryhackme-bounty-hacker-ctf

RootMe CTF (/rrootme) write up: https://exploit.quest/tryhackme-rootme-ctf

[tropic lava]

Nice writeup!
||You could have placed your fake random in the current working directory though||

[graceful coral]

Thanks!
I eventually did as I was going back through everything

[gleaming sundial]

I loved this room, wish people would make more series, anime, novel based ctfs/rooms

[tropic lava]

You have to worry about copyright and licensing.

[gleaming sundial]

Ah the licensing bullshit, forgot about that, It was a pain finding a picture on the internet and seeing if it was publicly available whenever you wanted to make a simple video i.e

[graceful coral]

First Monday of the year started off right, with THM!
https://twitch.tv/mrglitchbyte

[graceful coral]

Can Pickle Rick be saved? Find out on the next episode of TryHackMeZ!
https://twitch.tv/mrglitchbyte

[graceful coral]

Wonderland Part 2: Into the Looking Glass. What will we learn today?
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Prep Day 15: Into the Looking Glass!
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Prep Day 16: Time to break the glass!
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Prep Day 17: Finishing and going over the Wonderland series on THM today.
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Day 18, Intro to PoC scripting and Rust!
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Day 19, Proof of Concept Scripting.
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Prep Day 20, starting on the PATH.
https://twitch.tv/mrglitchbyte

[graceful coral]

OSCP Prep Day 21, hack and slash through EternalBlue.
https://twitch.tv/mrglitchbyte

[sullen charm]

Another study session. Checked out the Welcome, RootMe, BountyHacker, and Skynet rooms https://www.twitch.tv/videos/1267310956

[modern jolt]

A full-length walkthrough of me completing the Solar room (approved and on the room walkthroughs list): https://youtu.be/25IvtwEwyp4

There are timestamps in the description for each section of the room.

[formal iron]

nice work (: 😎

[timber kraken]

hi guys

[sullen charm]

I like how nicely you labeled your timestamps

[waxen grove]

Report spam

[formal iron]

thanks @waxen grove it's been dealt with (:

[fallow remnant]

Gave +1 Rep to @waxen grove

[sullen charm]

tomghost - TryHackMe - Starters Series
https://twitch.tv/ancientreddragon

[sullen charm]

@manic snow I made this for you, I hope you enjoy it

[manic snow]

hahahahaha

you can call me haz btw (long story, hxz sounds more like hacks but is actually meant to be haz but i cba changing at this point)

that "zee" reminded me you were american

i normally hear "h x zed"

[formal sparrow]

Huh, I've been pronouncing it hiz

xz both being pronounced with z

[manic snow]

there we go

[formal sparrow]

Meh

Sorted @manic snow 😁

[sullen charm]

Yeah people pronounce my username 'ay-tee-eightch' instead of just saying ATHLETE. I thought people could recognize the L337 "hacker-speak" but i guess not

[manic snow]

💀 i've always pronounced it as athlete but never noticed the "leet"/1337

[sullen charm]

I wanted to create a box around the two 3s, in d&d ATH is short for Athletics, a proficiency you're often asked to roll during a game

[manic snow]

@sullen charm

now we can finally communicate without a language barrier

trust me you don't wanna see the code for that 💀

i got lazy

".shift()" twice 😂, probably should have made the test.split into a variable too

[sullen charm]

you wanna see lazy?

[manic snow]

😂

[manic snow]

aaaaa i didnt notice till now

[sullen charm]

I love it though, our respective countries should give us ambassadorships

[manic snow]

i agree

[graceful coral]

After a much needed break, we're hitting the ground running! https://twitch.tv/mrglitchbyte

[sullen charm]

Res - TryHackMe - Starters Series
https://twitch.tv/ancientreddragon

[stable nest]

Lumberjack Turtle - TryHackMe - Official Walkthrough

https://youtu.be/LDUoD85AVek

[gloomy ruin]

https://www.youtube.com/watch?v=pBrzpOyVY4U

Streaming the Ignite room on THM 😄

[tropic lava]

@sacred ferry Advertising other servers is strictly prohibited

[sacred ferry]

Okay im sorry.

[sullen charm]

I did some reading in Red Team Recon and got to play with DNS, built-in tools, and advanced searching (google-dorking). I'm going to try to do every Monday as a "Cyber Monday" study session. Gotta schedule time for things if we want to level up, right?
https://www.twitch.tv/videos/1282892512

[nimble whale]

https://www.youtube.com/channel/UC7hgvxOCLAFZRhDRbUSjAsw

[stable nest]

https://www.danaepp.com/post/how-to-approach-reverse-engineering-elf-x64-buffer-overflows-these-days

[gleaming sundial]

Great article, I had the same problem using python3 but I saw that A*39 also worked but your sys.stdout.buffer.write() makes more sense, thanks

[fallow remnant]

Gave +1 Rep to @stable nest

[sullen charm]

Blaster done, got through it despite the known room bug by using a bit of critical thinking https://www.twitch.tv/videos/1290781932

[languid slate]

Walkthrough of DearQA (PWN) with no flag reveal https://www.youtube.com/watch?v=XIBwx2ZEuwI

[sullen charm]

Completed Phishing Emails 1 on this glorious "Friday Night Phishing" https://www.twitch.tv/videos/1295144662

[wide yacht]

https://mikadmin.fr/blog/tryhackme-gallery/

[queen jackal]

Hey everyone! New walkthrough of Bounty Hacker!

ps: the user.txt and root.txt are blurred... so no copy pasta here 😅

https://www.youtube.com/watch?v=QOhsQQlKOSs

[stable nest]

For anyone who uses pwncat that wants to automatically exploit pwnkit, I've written a module you can use. You can grab it on Github at https://github.com/DanaEpp/pwncat_pwnkit . You can also see it in action at https://asciinema.org/a/n3DRuvT0hr8yslrXX7RsGG1LW

[slate girder]

Silver you are just a legend! Thanks!

[fallow remnant]

Gave +1 Rep to @stable nest

[slate girder]

I might change it a bit and make it fully self contained, lots of machines don’t have gcc installed so I think it would be a cool feature,

[stable nest]

My code already does that

Part of the pwncat framework

If gcc isn’t on the remote target it compiles it on your machine and then uploads it

[slate girder]

Oh cool than I have no improvements haha

[stable nest]

You must set the “cross” variable in pwncatrc so it knows which gcc to use locally

It will even compile to an arm target

It checks the remote arch and sets the -march flag in gcc

[gloomy ruin]

OH MY GOD!!

it's amazing!!

[tropic lava]

Is this TryHackMe content?

[chrome whale]

community media 🙈

media of the community ? idk sory sory ma bad

[tropic lava]

As the channel description, it's intended for THM content eg writeups

[chrome whale]

if I record a public tryhackme room and upload on youtube is fine or?

[tropic lava]

Unless the room says not to, it's fine

[mossy igloo]

https://sh3bu.github.io/posts/LumberjackTurtle/

[signal oar]

you will be good. I actually just got a notification on reddit, they are looking for streamers that record rooms.

[chrome whale]

👀 Well, I still didn't start with recording rooms. Planning to do tho.

[signal oar]

I would have to do a run through with the rooms, first. I still feel like it takes me forever to get through one.

[chrome whale]

well

[languid slate]

I am recording rooms, in fact

[languid slate]

(If this is considered spam I apologize beforehand)

[tropic lava]

Is this tryhackme content?

[languid slate]

What is considered tryhackme content? Videos referring exclusively to THM rooms?

[tropic lava]

Yeah, video walkthroughs of THM etc.

[languid slate]

In that case no, in this particular video I didn't refer to any specific room.

[tropic lava]

Okay, please keep this channel just for THM content, as the channel topic says.

[languid slate]

Sure thing 👍 it is support material for several rooms, but not room-specific

[solar jacinth]

My first video "writeup" premieres in ~20 minutes! - https://www.youtube.com/watch?v=XCksAoCN7qU

[lime crow]

That's cool :)

Great video.

[solar jacinth]

Thank you, I appreciate it! 🙂

[fallow remnant]

Gave +1 Rep to @lime crow

[mossy igloo]

https://sh3bu.github.io/posts/Napping/

[graceful coral]

My writeup video
https://youtu.be/n6yr_O3xdVg

My another writeup video (including supra)
https://youtu.be/mkxSO8irxbU

[dusty crow]

what is the name of the extension with usefull command ?

I found !

[sweet trout]

I made a comprehensive walkthrough for the Simple CTF challege with a python script for hash cracking. You can find it here https://medium.com/@n3phel1m/simple-ctf-tryhackme-ctf-walkthrough-451cb6361405

[copper crest]

would somebody like to create a nice icon for my upcoming Layer 2 (MAC Flooding and ARP Poisoning) room? 🙂 my self-made icon is somewhat lame 😄

[copper crest]

thx but it's really just a random pixabay pic and two filters/overlays ^^

[fallow remnant]

Gave +1 Rep to @ripe badge

[slate girder]

I’d say, remove the fire, and add more “futuristic” type stuff

[cursive edge]

adds a old lightbulb

[copper crest]

ok, I can try. what about a tsunami (for the mac FLOODING) ? jk

or what do you think about a depiction like this, for the MITM?

[worn lava]

I believe the WebOSINT room needs to be updated

the answers don't work, new number new nameserver etc

[cursive edge]

you are about the 15th person shadow has seen mention that problem in different channels

[worn lava]

ok

i should've known

but i don't work for thm so i didn't know

[formal sparrow]

Not at all :)
You are under no obligation to know, although typing keywords from the problem into the search bar can do wonders too 😄

[worn lava]

true

i was joking don’t worry

[dapper geyser]

https://dev.to/ionut11/thm-source-writeup-2p0f

My first writeup 🙂

[dapper geyser]

https://dev.to/ionut11/tryhackmethm-mrrobot-writeup-49eb

[edgy plume]

Going live to chill and solve some boxes. Come hang! https://www.twitch.tv/offftherecord

[edgy plume]

Back at it again tonight! ^

[mild wagon]

https://medium.com/@xJay/a-comprehensive-and-practical-guide-to-stack-based-buffer-overflows-ed510a4f587e

[languid slate]

I just uploaded a tutorial for pwn106 from PWN101 room. A thorough step-by-step guide to understand the format string vulnerability. How do format string vulnerabilities happen, why and how can we abuse them. https://www.youtube.com/watch?v=0-ulL3Y0MS8

[lament pike]

Is it ok to use screenshots of premium rooms in a writeup? Of the challenges and their solutions ofcourse not the theory concepts

[tame ledge]

Should be fine, no idea why no one replied to you till now

[languid slate]

I just published the tutorial for pwn107 from PWN101 room. An in-depth explanation about bypassing stack canaries and PIE/PIC by abusing a Format String vulnerability. We will understand what a canary is, what is its main purpose and how can we bypass it in order to hijack the program's execution flow. At the same time, we will dig into Position Independent Executable (PIE) or Position Independent Code (PIC) and learn how to bypass it as well, exploiting the same Format String vulnerability. Leaking addresses from the binary will allow us to get the dynamic binary's base address (its base address during execution) to finally perform a ret2win attack https://www.youtube.com/watch?v=FpKL2cAlJbM

[jaunty stratus]

Hi everyone! I stream TryHackMe most nights on Twitch. I'll be spending the next hour and a half (until midnight central time) working through the Throwback Network and working on Active Directory hacking. Would love to have some of you join me. I am live right now... see you soon!
https://twitch.tv/tyler_ramsbey

[midnight socket]

Hey I am making a research paper on RDP if anyone is willing to give me criticism I would greatly appreciate it!

[tropic lava]

@midnight socket this channel is for media of tryhackme content

[midnight socket]

oh my b

[languid slate]

I just published the tutorial for pwn108 (from the room PWN101). In this video we will see step by step how to overwrite GOT (Global Offset Table) entries by abusing a Format String vulnerability, hence hijacking the execution flow of the program. We will see in detail how to overwrite memory with the %n format specifier from the printf family of functions, understanding how to write 4 or less bytes with the values we desire at the address we want. Besides, bad chars of printf function will be also discussed, which define how the payload must be arranged. https://www.youtube.com/watch?v=9SWYvhY5dYw

[half epoch]

Hi everyone. I have a YouTube channel where I post a lot of content and writeups of TryHackMe rooms, but I also have other security related content. Feel free to take a peak and if you like it let me know 🙂

Here is just one video as an example of the room Mr. Phisher
https://youtu.be/IkzvybP046Q

[half epoch]

Check out my newest video:

https://youtu.be/pZAd_nskaq0

[sullen charm]

omg, remade the video but OBS crashed, causing audio sync issues and leaving off the final batch of answers. Today's not my day https://youtu.be/VCkRRyU_0-0

[half epoch]

Latests video about a room that bugged me out a lot. Its a crazy room I will say that. The video got rather long, but I decided to keep it. It shows some struggle, frustration and the person behind it. I hope you like it.
https://www.youtube.com/watch?v=uHg-7Mo7Vio&ab_channel=Securityinmind

[fallow remnant]

Gave +1 Rep to @half epoch

[half epoch]

Thanks 🙂 you made a fun box 📦

[fallow remnant]

Gave +1 Rep to @ripe badge

[half epoch]

Check out my newest video on a old room.
https://youtu.be/eytRMU-Scns

Enjoy 🙂

[little orbit]

I just did Overpass too! https://systemweakness.com/dthm-overpass-i-de0f1fdf2e2d

[half epoch]

Overpass 2 Hacked - the second video on the series:

https://youtu.be/gEid56eS0Wc

[half epoch]

Decided to record a morning video. I hope you like it 🙂

https://youtu.be/Qy65atT7qEs

[jaunty stratus]

Hey all -- I did video walkthroughs & explanations on every threat/room in the "Recent Threats" module. If you get stuck or would like some extra learning, I hope you find these helpful

CVE-2022-26923: https://www.youtube.com/watch?v=a-bCbIqGMCg
Spring4Shell: https://www.youtube.com/watch?v=iWdO9C5Aw_g
Log4J: https://www.youtube.com/watch?v=QDNPsupvAME&t
Dirty Pipe: https://www.youtube.com/watch?v=VfBTEpk2oz0&t
Pwnkit: https://www.youtube.com/watch?v=w5nBnvmYlf8&t
Print Nightmare: https://www.youtube.com/watch?v=FGivGdziLuA

[half epoch]

Check out my new video of the room called Annie. 🙂 Hope that you like it 🙂
https://www.youtube.com/watch?v=0q0FH1p9BfM&ab_channel=Securityinmind

[formal iron]

content machine 💪

[half epoch]

I have 58 videos on my YouTube channel about TryHackMe rooms. Im a fan 🙂

Take a look, its a playlist. 🙂
https://www.youtube.com/playlist?list=PLUhliCA9c5DHw0PH-EaPcIY-6q5shJ7pV

[cursive edge]

YAY thanks so much horror.... going to watch that later today

[fallow remnant]

Gave +1 Rep to @half epoch

[half epoch]

Hope you like it 🙂

[half epoch]

Another video that I just recorded, please let me know if you liked it 🙂

https://www.youtube.com/watch?v=OhIP0C9hxZQ&ab_channel=Securityinmind

[half epoch]

I had some extra time on my hands and I was browsing rooms about git. Found one 🙂

https://youtu.be/iCo7BsvbQOw

[tropic lava]

@graceful coral This channel is for tryhackme content

[half epoch]

Old room but new video. I felt like a piece of chocolate. Check it out 🙂

https://www.youtube.com/watch?v=yMftk9uJC90&ab_channel=Securityinmind

[half epoch]

Another old room but never too old. It will never grow old:

https://youtu.be/ftqmwgeABik

[proper echo]

Year of the jellyfish writeup using Pwnkit exploit for LPE.
https://blog.utkar5hm.tk/posts/yotj/

I've been writing write-ups for a while now. haven't posted anything here before, So you can checkout my other posts too.

[half epoch]

Another git room with bad git history. Check it out 🙂
https://youtu.be/ZxDUpwWyrbk

[main silo]

Hey there, it's great that you post all these videos about rooms.
If you could just wait 72 hours after the release of a new room before posting a walkthrough about it would be much appreciated.
It's fine for now, but just so you know 🙂

[half epoch]

Sure. How do I see how many hours old a room is?

It tells that the room "committed is 121 days old". I guess thats not true then 🙂

[main silo]

I guess the best would be to just go by the date when a room is released in #announcements

[slate crescent]

As mentioned, use the time since it was publicly announced as your guide here

[half epoch]

We just agreed on day 4. Thats safe.

Fontaene and i.

🙂

[slate crescent]

Sounds good

[jaunty stratus]

Here is a 3 part series where I work through the Exploiting AD room. Enjoy!

Exploiting AD (Part 1) -- https://youtu.be/KfbxgD9XK30
Exploiting AD (Part 2) -- https://youtu.be/ezdDMkMyHVM
Exploiting AD (Part 3) -- https://youtu.be/5tVDVptZH_w

[wide yacht]

https://mikadmin.fr/blog/tryhackme-olympus/