> ## Documentation Index > Fetch the complete documentation index at: https://rootea.es/llms.txt > Use this file to discover all available pages before exploring further. # All # TryHackMe — Rooms Catalog: **989 rooms** indexed from TryHackMe (of which 584 are free; the rest require a VIP subscription). Each room links to the official lab. ## Info (30) | Room | Type | Access | Skills | Official | | --------------------------------------------------------------------------- | ----------- | ------- | -------------------------------------------------------------------------------- | -------------------------------------------------------------- | | [AWS: Cloud 101](/en/tryhackme/rooms/cloud101aws) | Walkthrough | 🟢 Free | AWS: Cloud 101 An introduction to AWS and how cloud has changed computing. I am… | [Open](https://tryhackme.com/room/cloud101aws) | | [Baron Samedit](/en/tryhackme/rooms/sudovulnssamedit) | Walkthrough | 🟢 Free | Baron Samedit A tutorial room exploring CVE-2021-3156 in the Unix Sudo Program.… | [Open](https://tryhackme.com/room/sudovulnssamedit) | | [Becoming a First Responder](/en/tryhackme/rooms/becomingafirstresponder) | Walkthrough | 🔵 VIP | Becoming a First Responder Explaining how first responders work and what to do… | [Open](https://tryhackme.com/room/becomingafirstresponder) | | [Bypass Disable Functions](/en/tryhackme/rooms/bypassdisablefunctions) | Challenge | 🟢 Free | Bypass Disable Functions Practice bypassing disabled dangerous features that… | [Open](https://tryhackme.com/room/bypassdisablefunctions) | | [Careers in Cyber](/en/tryhackme/rooms/careersincyber) | Walkthrough | 🟢 Free | Careers in Cyber Learn about the different careers in cyber security. | [Open](https://tryhackme.com/room/careersincyber) | | [Container Vulnerabilities](/en/tryhackme/rooms/containervulnerabilities) | — | 🔵 VIP | Container Vulnerabilities | [Open](https://tryhackme.com/room/containervulnerabilities) | | [Cyber Scotland 2021](/en/tryhackme/rooms/cyberweek2021) | — | 🔵 VIP | Cyber Scotland 2021 | [Open](https://tryhackme.com/room/cyberweek2021) | | [Defensive Security Intro](/en/tryhackme/rooms/defensivesecurityintroezn39) | Walkthrough | 🟢 Free | Defensive Security Intro Introducing defensive security, where you will protect… | [Open](https://tryhackme.com/room/defensivesecurityintroezn39) | | [Dirty Pipe: CVE-2022-0847](/en/tryhackme/rooms/dirtypipe) | Walkthrough | 🟢 Free | SUID binaries | [Open](https://tryhackme.com/room/dirtypipe) | | [Extending Your Network](/en/tryhackme/rooms/extendingyournetwork) | Walkthrough | 🔵 VIP | Extending Your Network Learn about some of the technologies used to extend… | [Open](https://tryhackme.com/room/extendingyournetwork) | | [Hack2Win: How you can grab extra tickets](/en/tryhackme/rooms/hack2win) | Walkthrough | 🟢 Free | Hack2Win: How you can grab extra tickets Hack and win! Complete rooms, earn… | [Open](https://tryhackme.com/room/hack2win) | | [History of Malware](/en/tryhackme/rooms/historyofmalware) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/historyofmalware) | | [Intro to LAN](/en/tryhackme/rooms/introtolan) | Walkthrough | 🔵 VIP | Intro to LAN Learn about some of the technologies and designs that power… | [Open](https://tryhackme.com/room/introtolan) | | [Learn and win prizes](/en/tryhackme/rooms/tickets1) | Walkthrough | 🟢 Free | Learn and win prizes Complete rooms, win tickets. Get 3 of the same tickets and… | [Open](https://tryhackme.com/room/tickets1) | | [Linux Fundamentals Part 1](/en/tryhackme/rooms/linuxfundamentalspart1) | Walkthrough | 🟢 Free | Linux Fundamentals Part 1 Embark on the journey of learning the fundamentals of… | [Open](https://tryhackme.com/room/linuxfundamentalspart1) | | [Linux Fundamentals Part 2](/en/tryhackme/rooms/linuxfundamentalspart2) | Walkthrough | 🔵 VIP | Linux Fundamentals Part 2 Continue your learning Linux journey with part two.… | [Open](https://tryhackme.com/room/linuxfundamentalspart2) | | [Linux Fundamentals Part 3](/en/tryhackme/rooms/linuxfundamentalspart3) | Walkthrough | 🔵 VIP | Linux Fundamentals Part 3 Power-up your Linux skills and get hands-on with some… | [Open](https://tryhackme.com/room/linuxfundamentalspart3) | | [Operation Slither](/en/tryhackme/rooms/operationslither) | — | 🔵 VIP | Operation Slither | [Open](https://tryhackme.com/room/operationslither) | | [OverlayFS - CVE-2021-3493](/en/tryhackme/rooms/overlayfs) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/overlayfs) | | [Packets & Frames](/en/tryhackme/rooms/packetsframes) | Walkthrough | 🔵 VIP | Packets & Frames Understand how data is divided into smaller pieces and… | [Open](https://tryhackme.com/room/packetsframes) | | [Polkit: CVE-2021-3560](/en/tryhackme/rooms/polkit) | Walkthrough | 🟢 Free | Polkit: CVE-2021-3560 Walkthrough room for CVE-2021-3560 Click the green "Start… | [Open](https://tryhackme.com/room/polkit) | | [Pwnkit: CVE-2021-4034](/en/tryhackme/rooms/pwnkit) | Walkthrough | 🟢 Free | Pwnkit: CVE-2021-4034 Interactive lab for exploiting and remediating Pwnkit… | [Open](https://tryhackme.com/room/pwnkit) | | [REmux The Tmux](/en/tryhackme/rooms/tmuxremux) | Walkthrough | 🟢 Free | REmux The Tmux Updated, how to use tmux guide. Defaults and customize your… | [Open](https://tryhackme.com/room/tmuxremux) | | [Security Awareness](/en/tryhackme/rooms/securityawarenessintro) | Walkthrough | 🟢 Free | Security Awareness An introduction to security awareness; why its important,… | [Open](https://tryhackme.com/room/securityawarenessintro) | | [Sudo Buffer Overflow](/en/tryhackme/rooms/sudovulnsbof) | Walkthrough | 🟢 Free | Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/sudovulnsbof) | | [Sudo Security Bypass](/en/tryhackme/rooms/sudovulnsbypass) | Walkthrough | 🟢 Free | Sudo Security Bypass A tutorial room exploring CVE-2019-14287 in the Unix Sudo… | [Open](https://tryhackme.com/room/sudovulnsbypass) | | [Training Impact on Teams](/en/tryhackme/rooms/training) | Walkthrough | 🟢 Free | Training Impact on Teams Discover the impact of training on teams and… | [Open](https://tryhackme.com/room/training) | | [What is Networking?](/en/tryhackme/rooms/whatisnetworking) | Walkthrough | 🟢 Free | What is Networking? Begin learning the fundamentals of computer networking in… | [Open](https://tryhackme.com/room/whatisnetworking) | | [Windows Fundamentals 1](/en/tryhackme/rooms/windowsfundamentals1xbx) | Walkthrough | 🟢 Free | Windows Fundamentals 1 In part 1 of the Windows Fundamentals module, we'll… | [Open](https://tryhackme.com/room/windowsfundamentals1xbx) | | [Windows Fundamentals 3](/en/tryhackme/rooms/windowsfundamentals3xzx) | Walkthrough | 🟢 Free | Windows Fundamentals 3 In part 3 of the Windows Fundamentals module, learn… | [Open](https://tryhackme.com/room/windowsfundamentals3xzx) | ## Easy (447) | Room | Type | Access | Skills | Official | | -------------------------------------------------------------------------------------------- | ----------- | ------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------- | | [0x41haz](/en/tryhackme/rooms/0x41haz) | Challenge | 🟢 Free | 0x41haz Simple Reversing Challenge What is the password? THM\{} | [Open](https://tryhackme.com/room/0x41haz) | | [25 Days of Cyber Security](/en/tryhackme/rooms/learncyberin25days) | Walkthrough | 🟢 Free | Default credentials · Race Conditions · File Upload Vulnerabilities · Directory fuzzing · SMB (139/445) · SQL Injection · SUID binaries · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/learncyberin25days) | | [A Bucket of Phish](/en/tryhackme/rooms/hfb1abucketofphish) | Challenge | 🔵 VIP | A Bucket of Phish From the Hackfinity Battle CTF event. | [Open](https://tryhackme.com/room/hfb1abucketofphish) | | [Active Reconnaissance](/en/tryhackme/rooms/activerecon) | Walkthrough | 🟢 Free | Active Reconnaissance Learn how to use simple tools such as traceroute, ping,… | [Open](https://tryhackme.com/room/activerecon) | | [AD: Basic Enumeration](/en/tryhackme/rooms/adbasicenumeration) | Walkthrough | 🟢 Free | Active Directory · SMB (139/445) | [Open](https://tryhackme.com/room/adbasicenumeration) | | [Advent of Cyber 1 \[2019\]](/en/tryhackme/rooms/25daysofchristmas) | Walkthrough | 🟢 Free | SUID binaries · Directory fuzzing · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/25daysofchristmas) | | [Advent of Cyber 2 \[2020\]](/en/tryhackme/rooms/adventofcyber2) | Walkthrough | 🟢 Free | Default credentials · Race Conditions · File Upload Vulnerabilities · Directory fuzzing · SMB (139/445) · SQL Injection · SUID binaries · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/adventofcyber2) | | [Advent of Cyber 2022](/en/tryhackme/rooms/adventofcyber4) | Walkthrough | 🟢 Free | OS Command Injection · Active Directory · Cracking Hashes (hashcat / John) · File Upload Vulnerabilities · USB forensics · SMB (139/445) · SQL Injection · Access Control / IDOR · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/adventofcyber4) | | [Advent of Cyber 2023](/en/tryhackme/rooms/adventofcyber2023) | Walkthrough | 🟢 Free | Active Directory · Buffer Overflow (BoF / ROP) · USB forensics · Sudo abuse · Server-Side Request Forgery · Local File Inclusion (LFI) · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/adventofcyber2023) | | [Advent of Cyber 2024](/en/tryhackme/rooms/adventofcyber2024) | Walkthrough | 🟢 Free | Active Directory · LLM Attacks (Prompt Injection) · Cracking Hashes (hashcat / John) · Race Conditions · Remote Code Execution (RCE) · XML External Entity | [Open](https://tryhackme.com/room/adventofcyber2024) | | [Advent of Cyber 3 (2021)](/en/tryhackme/rooms/adventofcyber3) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) · Authentication Vulnerabilities · Default credentials · Directory / Path Traversal · SQL Injection · AS-REP Roasting · Directory fuzzing · Access Control / IDOR · Local File Inclusion (LFI) | [Open](https://tryhackme.com/room/adventofcyber3) | | [Agent T](/en/tryhackme/rooms/agentt) | Challenge | 🟢 Free | Agent T Something seems a little off with the server. What is the flag? Look… | [Open](https://tryhackme.com/room/agentt) | | [Alfred](/en/tryhackme/rooms/alfred) | Walkthrough | 🔵 VIP | Alfred Exploit Jenkins to gain an initial shell, then escalate your privileges… | [Open](https://tryhackme.com/room/alfred) | | [All in One](/en/tryhackme/rooms/allinonemj) | Challenge | 🟢 Free | All in One This is a fun box where you will get to exploit the system in… | [Open](https://tryhackme.com/room/allinonemj) | | [Android Analysis](/en/tryhackme/rooms/androidanalysis) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/androidanalysis) | | [Android Malware Analysis](/en/tryhackme/rooms/androidmalwareanalysis) | Walkthrough | 🟢 Free | Android Malware Analysis Android malware analysis with Pithus (static and… | [Open](https://tryhackme.com/room/androidmalwareanalysis) | | [Anonforce](/en/tryhackme/rooms/bsidesgtanonforce) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/bsidesgtanonforce) | | [Anthem](/en/tryhackme/rooms/anthem) | Challenge | 🟢 Free | Anthem Exploit a Windows machine in this beginner level challenge. | [Open](https://tryhackme.com/room/anthem) | | [Archangel](/en/tryhackme/rooms/archangel) | Challenge | 🟢 Free | Local File Inclusion (LFI) | [Open](https://tryhackme.com/room/archangel) | | [Atlas](/en/tryhackme/rooms/atlas) | Walkthrough | 🟢 Free | Atlas Hack the Atlas server in this beginner room covering Windows attack… | [Open](https://tryhackme.com/room/atlas) | | [Atlassian CVE-2022-26134](/en/tryhackme/rooms/cve202226134) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/cve202226134) | | [AttackerKB](/en/tryhackme/rooms/attackerkb) | Walkthrough | 🟢 Free | AttackerKB Learn how to leverage AttackerKB and learn about exploits in your… | [Open](https://tryhackme.com/room/attackerkb) | | [Attacking ICS Plant #1](/en/tryhackme/rooms/attackingics1) | Walkthrough | 🟢 Free | Attacking ICS Plant #1 Learn how to discover and attack ICS plants using modbus… | [Open](https://tryhackme.com/room/attackingics1) | | [Attacking Kerberos](/en/tryhackme/rooms/attackingkerberos) | Walkthrough | 🔵 VIP | Attacking Kerberos Learn how to abuse the Kerberos Ticket Granting Service… | [Open](https://tryhackme.com/room/attackingkerberos) | | [Auditing and Monitoring](/en/tryhackme/rooms/auditingandmonitoringse) | Walkthrough | 🔵 VIP | Auditing and Monitoring Learn about auditing, monitoring, logging, and SIEM. | [Open](https://tryhackme.com/room/auditingandmonitoringse) | | [Authentication Bypass](/en/tryhackme/rooms/authenticationbypass) | Walkthrough | 🔵 VIP | Authentication Vulnerabilities | [Open](https://tryhackme.com/room/authenticationbypass) | | [Autopsy](/en/tryhackme/rooms/btautopsye0) | Walkthrough | 🔵 VIP | Autopsy Learn how to use Autopsy to investigate artefacts from a disk image.… | [Open](https://tryhackme.com/room/btautopsye0) | | [Avengers Blog](/en/tryhackme/rooms/avengers) | Walkthrough | 🔵 VIP | OS Command Injection · SQL Injection | [Open](https://tryhackme.com/room/avengers) | | [AWS Basic Concepts](/en/tryhackme/rooms/awsbasicconcepts) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/awsbasicconcepts) | | [AWS Security - S3cret Santa](/en/tryhackme/rooms/cloudenum-aoc2025-y4u7i0o3p6) | Walkthrough | 🟢 Free | AWS Security - S3cret Santa Learn the basics of AWS enumeration. Run aws sts… | [Open](https://tryhackme.com/room/cloudenum-aoc2025-y4u7i0o3p6) | | [b3dr0ck](/en/tryhackme/rooms/b3dr0ck) | Challenge | 🟢 Free | b3dr0ck Server trouble in Bedrock. What is the barney.txt flag? Explore the… | [Open](https://tryhackme.com/room/b3dr0ck) | | [Badbyte](/en/tryhackme/rooms/badbyte) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) · Directory / Path Traversal | [Open](https://tryhackme.com/room/badbyte) | | [BankGPT](/en/tryhackme/rooms/bankgpt) | Challenge | 🟢 Free | BankGPT A customer service assistant used by a banking system. What is the… | [Open](https://tryhackme.com/room/bankgpt) | | [Bash Scripting](/en/tryhackme/rooms/bashscripting) | Walkthrough | 🟢 Free | Bash Scripting A Walkthrough room to teach you the basics of bash scripting… | [Open](https://tryhackme.com/room/bashscripting) | | [Basic Pentesting](/en/tryhackme/rooms/basicpentestingjt) | Challenge | 🟢 Free | Cracking Hashes (hashcat / John) · linPEAS · Directory fuzzing · SMB (139/445) · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/basicpentestingjt) | | [Bebop](/en/tryhackme/rooms/bebop) | Walkthrough | 🔵 VIP | Bebop Who thought making a flying shell was a good idea? | [Open](https://tryhackme.com/room/bebop) | | [Become a Defender](/en/tryhackme/rooms/becomeadefender) | Walkthrough | 🔵 VIP | Become a Defender Explore defensive security, cyber infrastructure, and how to… | [Open](https://tryhackme.com/room/becomeadefender) | | [Become a Hacker](/en/tryhackme/rooms/becomeahacker) | Walkthrough | 🔵 VIP | Become a Hacker Explore offensive security, the hacker mindset, and hack a web… | [Open](https://tryhackme.com/room/becomeahacker) | | [Become a Hacker](/en/tryhackme/rooms/becomeahackeroa) | Walkthrough | 🟢 Free | Become a Hacker Learn how TryHackMe can help you become a hacker. Which of the… | [Open](https://tryhackme.com/room/becomeahackeroa) | | [Billing](/en/tryhackme/rooms/billing) | Challenge | 🟢 Free | Billing Some mistakes can be costly. What is user.txt? What is root.txt? | [Open](https://tryhackme.com/room/billing) | | [Blaster](/en/tryhackme/rooms/blaster) | Walkthrough | 🟢 Free | Directory fuzzing | [Open](https://tryhackme.com/room/blaster) | | [Blue](/en/tryhackme/rooms/blue) | Walkthrough | 🟢 Free | MS08-067 (NetAPI) | [Open](https://tryhackme.com/room/blue) | | [Blueprint](/en/tryhackme/rooms/blueprint) | Challenge | 🟢 Free | Blueprint Hack into this Windows machine and escalate your privileges to… | [Open](https://tryhackme.com/room/blueprint) | | [Bolt](/en/tryhackme/rooms/bolt) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/bolt) | | [Break Out The Cage](/en/tryhackme/rooms/breakoutthecage1) | Challenge | 🟢 Free | Break Out The Cage Help Cage bring back his acting career and investigate the… | [Open](https://tryhackme.com/room/breakoutthecage1) | | [Breaking Crypto the Simple Way](/en/tryhackme/rooms/breakingcryptothesimpleway) | Walkthrough | 🟢 Free | Breaking Crypto the Simple Way Exploiting common cryptographic mistakes. I have… | [Open](https://tryhackme.com/room/breakingcryptothesimpleway) | | [Broken Access Control](/en/tryhackme/rooms/owaspbrokenaccesscontrol) | Walkthrough | 🟢 Free | Access Control / IDOR · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/owaspbrokenaccesscontrol) | | [Brooklyn Nine Nine](/en/tryhackme/rooms/brooklynninenine) | Challenge | 🟢 Free | Brooklyn Nine Nine This room is aimed for beginner level hackers but anyone can… | [Open](https://tryhackme.com/room/brooklynninenine) | | [Brute It](/en/tryhackme/rooms/bruteit) | Challenge | 🟢 Free | Cracking Hashes (hashcat / John) · Directory fuzzing | [Open](https://tryhackme.com/room/bruteit) | | [Buffer Overflows](/en/tryhackme/rooms/bof1) | Walkthrough | 🔵 VIP | Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/bof1) | | [Bugged](/en/tryhackme/rooms/bugged) | Challenge | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/bugged) | | [Bulletproof Penguin](/en/tryhackme/rooms/bppenguin) | Walkthrough | 🔵 VIP | SNMP Enumeration | [Open](https://tryhackme.com/room/bppenguin) | | [Burp Suite: Extensions](/en/tryhackme/rooms/burpsuiteextensions) | Walkthrough | 🔵 VIP | Burp Suite: Extensions Learn how to use Extensions to broaden the functionality… | [Open](https://tryhackme.com/room/burpsuiteextensions) | | [Bypass Really Simple Security](/en/tryhackme/rooms/bypassreallysimplesecurity) | Walkthrough | 🟢 Free | WordPress Exploitation | [Open](https://tryhackme.com/room/bypassreallysimplesecurity) | | [c4ptur3-th3-fl4g](/en/tryhackme/rooms/c4ptur3th3fl4g) | Challenge | 🟢 Free | c4ptur3-th3-fl4g A beginner level CTF challenge | [Open](https://tryhackme.com/room/c4ptur3th3fl4g) | | [CAPA: The Basics](/en/tryhackme/rooms/capabasics) | Walkthrough | 🔵 VIP | CAPA: The Basics Learn to use CAPA to identify malicious capabilities. | [Open](https://tryhackme.com/room/capabasics) | | [Capture!](/en/tryhackme/rooms/capture) | Challenge | 🟢 Free | Capture! Can you bypass the login form? | [Open](https://tryhackme.com/room/capture) | | [Cat Pictures](/en/tryhackme/rooms/catpictures) | Challenge | 🟢 Free | Cat Pictures I made a forum where you can post cute cat pictures! | [Open](https://tryhackme.com/room/catpictures) | | [Cat Pictures 2](/en/tryhackme/rooms/catpictures2) | Challenge | 🟢 Free | Cat Pictures 2 Now with more Cat Pictures! | [Open](https://tryhackme.com/room/catpictures2) | | [Cheese CTF](/en/tryhackme/rooms/cheesectfv10) | Challenge | 🟢 Free | Cheese CTF Inspired by the great cheese talk of THM! Start the VM. What is the… | [Open](https://tryhackme.com/room/cheesectfv10) | | [Chill Hack](/en/tryhackme/rooms/chillhack) | Challenge | 🟢 Free | Chill Hack User Flag Root Flag | [Open](https://tryhackme.com/room/chillhack) | | [Chocolate Factory](/en/tryhackme/rooms/chocolatefactory) | Challenge | 🟢 Free | Chocolate Factory A Charlie And The Chocolate Factory themed room, revisit… | [Open](https://tryhackme.com/room/chocolatefactory) | | [Cipher's Secret Message](/en/tryhackme/rooms/hfb1cipherssecretmessage) | Challenge | 🔵 VIP | Cipher's Secret Message Sharpen your cryptography skills by analyzing code to… | [Open](https://tryhackme.com/room/hfb1cipherssecretmessage) | | [Client-Server Basics](/en/tryhackme/rooms/clientserverbasics) | Walkthrough | 🔵 VIP | Client-Server Basics This room teaches the basics of the Client-Server model. | [Open](https://tryhackme.com/room/clientserverbasics) | | [Cloud Computing Fundamentals](/en/tryhackme/rooms/cloudcomputingfundamentals) | Walkthrough | 🟢 Free | Cloud Computing Fundamentals Discover how cloud computing helps businesses move… | [Open](https://tryhackme.com/room/cloudcomputingfundamentals) | | [Cloud Security Pitfalls](/en/tryhackme/rooms/cloudsecuritypitfalls) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/cloudsecuritypitfalls) | | [ColddBox: Easy](/en/tryhackme/rooms/colddboxeasy) | Challenge | 🟢 Free | ColddBox: Easy An easy level machine with multiple ways to escalate privileges.… | [Open](https://tryhackme.com/room/colddboxeasy) | | [Command Injection](/en/tryhackme/rooms/oscommandinjection) | Walkthrough | 🔵 VIP | OS Command Injection | [Open](https://tryhackme.com/room/oscommandinjection) | | [Committed](/en/tryhackme/rooms/committed) | Challenge | 🔵 VIP | Committed One of our developers accidentally committed some sensitive code to… | [Open](https://tryhackme.com/room/committed) | | [Common Attacks](/en/tryhackme/rooms/commonattacks) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/commonattacks) | | [Common Linux Privesc](/en/tryhackme/rooms/commonlinuxprivesc) | Walkthrough | 🔵 VIP | Common Linux Privesc A room explaining common Linux privilege escalation | [Open](https://tryhackme.com/room/commonlinuxprivesc) | | [Compromised Windows Analysis](/en/tryhackme/rooms/compromisedwindowsanalysis) | Walkthrough | 🟢 Free | Compromised Windows Analysis Learn about some key forensic artifacts and solve… | [Open](https://tryhackme.com/room/compromisedwindowsanalysis) | | [Computer Types](/en/tryhackme/rooms/computertypes) | Walkthrough | 🟢 Free | Computer Types Explore the different types of computers, from laptops to the… | [Open](https://tryhackme.com/room/computertypes) | | [Confluence CVE-2023-22515](/en/tryhackme/rooms/confluence202322515) | Walkthrough | 🟢 Free | Confluence CVE-2023-22515 Exploit CVE-2023-22515 to get admin access to… | [Open](https://tryhackme.com/room/confluence202322515) | | [Core Windows Processes](/en/tryhackme/rooms/btwindowsinternals) | Walkthrough | 🔵 VIP | Core Windows Processes Explore the core processes within a Windows operating… | [Open](https://tryhackme.com/room/btwindowsinternals) | | [Corp](/en/tryhackme/rooms/corp) | Walkthrough | 🔵 VIP | Kerberoasting | [Open](https://tryhackme.com/room/corp) | | [Corridor](/en/tryhackme/rooms/corridor) | Challenge | 🟢 Free | Access Control / IDOR | [Open](https://tryhackme.com/room/corridor) | | [Crack the hash](/en/tryhackme/rooms/crackthehash) | Challenge | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/crackthehash) | | [Creative](/en/tryhackme/rooms/creative) | Challenge | 🟢 Free | Creative Exploit a vulnerable web application and some misconfigurations to… | [Open](https://tryhackme.com/room/creative) | | [Cryptography Basics](/en/tryhackme/rooms/cryptographybasics) | Walkthrough | 🟢 Free | Cryptography Basics Learn the basics of cryptography and symmetric encryption.… | [Open](https://tryhackme.com/room/cryptographybasics) | | [Cryptography Concepts](/en/tryhackme/rooms/cryptographyconcepts) | Walkthrough | 🟢 Free | Cryptography Concepts This room provides an understanding of cryptography in… | [Open](https://tryhackme.com/room/cryptographyconcepts) | | [Cryptosystem](/en/tryhackme/rooms/hfb1cryptosystem) | Challenge | 🔵 VIP | Cryptosystem Learn public-key cryptography concepts by analyzing data. | [Open](https://tryhackme.com/room/hfb1cryptosystem) | | [CTF collection Vol.1](/en/tryhackme/rooms/ctfcollectionvol1) | Challenge | 🟢 Free | Steganography (Stego) | [Open](https://tryhackme.com/room/ctfcollectionvol1) | | [CupidBot](/en/tryhackme/rooms/lafb2026e6) | Challenge | 🟢 Free | LLM Attacks (Prompt Injection) | [Open](https://tryhackme.com/room/lafb2026e6) | | [Custom Alert Rules in Wazuh](/en/tryhackme/rooms/customalertrulesinwazuh) | Walkthrough | 🔵 VIP | Custom Alert Rules in Wazuh Learn how to create rules in Wazuh for your… | [Open](https://tryhackme.com/room/customalertrulesinwazuh) | | [Custom Tooling Using Python](/en/tryhackme/rooms/customtoolingpython) | Walkthrough | 🟢 Free | Prototype Pollution · SQL Injection · CSRF (Cross-Site Request Forgery) · Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/customtoolingpython) | | [CVE-2022-26923](/en/tryhackme/rooms/cve202226923) | Walkthrough | 🟢 Free | CVE-2022-26923 Walkthrough on the exploitation of CVE-2022-26923, a… | [Open](https://tryhackme.com/room/cve202226923) | | [Cyber Crisis Management](/en/tryhackme/rooms/cybercrisismanagement) | Walkthrough | 🔵 VIP | Cyber Crisis Management An introduction into cyber crisis management and how a… | [Open](https://tryhackme.com/room/cybercrisismanagement) | | [Cyber Kill Chain](/en/tryhackme/rooms/cyberkillchainzmt) | Walkthrough | 🟢 Free | Cyber Kill Chain The Cyber Kill Chain framework is designed for identification… | [Open](https://tryhackme.com/room/cyberkillchainzmt) | | [CyberChef: The Basics](/en/tryhackme/rooms/cyberchefbasics) | Walkthrough | 🟢 Free | CyberChef: The Basics This room is an introduction to CyberChef, the Swiss Army… | [Open](https://tryhackme.com/room/cyberchefbasics) | | [CyberLens](/en/tryhackme/rooms/cyberlensp6) | Challenge | 🟢 Free | CyberLens Can you exploit the CyberLens web server and discover the hidden… | [Open](https://tryhackme.com/room/cyberlensp6) | | [Cyborg](/en/tryhackme/rooms/cyborgt8) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/cyborgt8) | | [DarkMatter](/en/tryhackme/rooms/hfb1darkmatter) | Challenge | 🔵 VIP | DarkMatter Practice how to exploit a weak RSA implementation to recover the… | [Open](https://tryhackme.com/room/hfb1darkmatter) | | [Data Encoding](/en/tryhackme/rooms/dataencoding) | Walkthrough | 🟢 Free | Data Encoding Learn how computer encodes characters, from ASCII to Unicode's… | [Open](https://tryhackme.com/room/dataencoding) | | [Data Representation](/en/tryhackme/rooms/datarepresentation) | Walkthrough | 🟢 Free | Data Representation Learn about how computers represent numbers and colors. | [Open](https://tryhackme.com/room/datarepresentation) | | [Database SQL Basics](/en/tryhackme/rooms/databasesqlbasics) | Walkthrough | 🔵 VIP | Database SQL Basics Learn the basics of databases and SQL by writing simple… | [Open](https://tryhackme.com/room/databasesqlbasics) | | [Dav](/en/tryhackme/rooms/bsidesgtdav) | Challenge | 🟢 Free | Dav boot2root machine for FIT and bsides guatemala CTF user.txt root.txt | [Open](https://tryhackme.com/room/bsidesgtdav) | | [Dear QA](/en/tryhackme/rooms/dearqa) | Challenge | 🟢 Free | Dear QA Are you able to solve this challenge involving reverse engineering and… | [Open](https://tryhackme.com/room/dearqa) | | [Deja Vu](/en/tryhackme/rooms/dejavu) | Walkthrough | 🟢 Free | Deja Vu Exploit a recent code injection vulnerability to take over a website… | [Open](https://tryhackme.com/room/dejavu) | | [Detecting Web Attacks](/en/tryhackme/rooms/detectingwebattacks) | Walkthrough | 🟢 Free | Detecting Web Attacks Explore web attacks and detection methods through log and… | [Open](https://tryhackme.com/room/detectingwebattacks) | | [Detecting Web DDoS](/en/tryhackme/rooms/detectingwebddos) | Walkthrough | 🔵 VIP | Detecting Web DDoS Explore denial-of-service attacks, detection techniques, and… | [Open](https://tryhackme.com/room/detectingwebddos) | | [Detecting Web Shells](/en/tryhackme/rooms/detectingwebshells) | Walkthrough | 🔵 VIP | Detecting Web Shells Explore web shell detection by analyzing logs, file… | [Open](https://tryhackme.com/room/detectingwebshells) | | [Dev Diaries](/en/tryhackme/rooms/devdiaries) | Challenge | 🟢 Free | Dev Diaries Hunt through online development traces to uncover what was left… | [Open](https://tryhackme.com/room/devdiaries) | | [DFIR: An Introduction](/en/tryhackme/rooms/introductoryroomdfirmodule) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/introductoryroomdfirmodule) | | [Diamond Model](/en/tryhackme/rooms/diamondmodelrmuwwg42) | Walkthrough | 🔵 VIP | Diamond Model Learn about the four core features of the Diamond Model of… | [Open](https://tryhackme.com/room/diamondmodelrmuwwg42) | | [Dig Dug](/en/tryhackme/rooms/digdug) | Challenge | 🟢 Free | Dig Dug Turns out this machine is a DNS server - it's time to get your shovels… | [Open](https://tryhackme.com/room/digdug) | | [Digital Footprint](/en/tryhackme/rooms/osintchallengeiv) | Challenge | 🟢 Free | Digital Footprint Beginner friendly OSINT Challenge | [Open](https://tryhackme.com/room/osintchallengeiv) | | [Digital Forensics Fundamentals](/en/tryhackme/rooms/digitalforensicsfundamentals) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/digitalforensicsfundamentals) | | [Django: CVE-2025-64459](/en/tryhackme/rooms/djangocve202564459) | Walkthrough | 🟢 Free | SMB (139/445) | [Open](https://tryhackme.com/room/djangocve202564459) | | [DNS in Detail](/en/tryhackme/rooms/dnsindetail) | Walkthrough | 🟢 Free | DNS in Detail Learn how DNS works and how it helps you access internet… | [Open](https://tryhackme.com/room/dnsindetail) | | [DOM-Based Attacks](/en/tryhackme/rooms/dombasedattacks) | Walkthrough | 🔵 VIP | DOM-Based Attacks Learn about DOM-based vulnerabilities that can be leveraged… | [Open](https://tryhackme.com/room/dombasedattacks) | | [Dreaming](/en/tryhackme/rooms/dreaming) | Challenge | 🟢 Free | Dreaming Solve the riddle that dreams have woven. What is the Lucien Flag? What… | [Open](https://tryhackme.com/room/dreaming) | | [DVWA](/en/tryhackme/rooms/dvwa) | Walkthrough | 🟢 Free | DVWA Basic room for testing exploits against the Damn Vulnerable Web… | [Open](https://tryhackme.com/room/dvwa) | | [Easy Peasy](/en/tryhackme/rooms/easypeasyctf) | Challenge | 🟢 Free | Directory fuzzing · Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/easypeasyctf) | | [Empire](/en/tryhackme/rooms/rppsempire) | Walkthrough | 🟢 Free | Empire Learn how to use Empire and it's GUI Starkiller, a powerful… | [Open](https://tryhackme.com/room/rppsempire) | | [Enumeration](/en/tryhackme/rooms/enumerationpe) | Walkthrough | 🔵 VIP | Enumeration This room is an introduction to enumeration when approaching an… | [Open](https://tryhackme.com/room/enumerationpe) | | [Enumeration & Brute Force](/en/tryhackme/rooms/enumerationbruteforce) | Walkthrough | 🟢 Free | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/enumerationbruteforce) | | [Epoch](/en/tryhackme/rooms/epoch) | Challenge | 🔵 VIP | Epoch Be honest, you have always wanted an online tool that could help you… | [Open](https://tryhackme.com/room/epoch) | | [Eradication & Remediation](/en/tryhackme/rooms/eradicationandremediation) | Walkthrough | 🔵 VIP | Eradication & Remediation A look into the fourth phase of the Incident Response… | [Open](https://tryhackme.com/room/eradicationandremediation) | | [Erit Securus I](/en/tryhackme/rooms/eritsecurusi) | Walkthrough | 🔵 VIP | Erit Securus I Learn to exploit the BoltCMS software by researching exploit-db. | [Open](https://tryhackme.com/room/eritsecurusi) | | [Erlang/OTP SSH: CVE-2025-32433](/en/tryhackme/rooms/erlangotpsshcve202532433) | Walkthrough | 🟢 Free | Erlang/OTP SSH: CVE-2025-32433 Learn about and exploit Erlang/OTP SSH… | [Open](https://tryhackme.com/room/erlangotpsshcve202532433) | | [Eviction](/en/tryhackme/rooms/eviction) | Walkthrough | 🔵 VIP | Eviction Unearth the monster from under your bed. | [Open](https://tryhackme.com/room/eviction) | | [Evil-GPT](/en/tryhackme/rooms/hfb1evilgpt) | Challenge | 🔵 VIP | Evil-GPT Practice your LLM hacking skills. | [Open](https://tryhackme.com/room/hfb1evilgpt) | | [Evil-GPT v2](/en/tryhackme/rooms/hfb1evilgptv2) | Challenge | 🔵 VIP | Evil-GPT v2 Put your LLM hacking skills to the test one more time. | [Open](https://tryhackme.com/room/hfb1evilgptv2) | | [Exploit Vulnerabilities](/en/tryhackme/rooms/exploitingavulnerabilityv2) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/exploitingavulnerabilityv2) | | [Expose](/en/tryhackme/rooms/expose) | Challenge | 🔵 VIP | Expose Use your red teaming knowledge to pwn a Linux machine. | [Open](https://tryhackme.com/room/expose) | | [ffuf](/en/tryhackme/rooms/ffuf) | Walkthrough | 🟢 Free | Directory fuzzing | [Open](https://tryhackme.com/room/ffuf) | | [File and Hash Threat Intel](/en/tryhackme/rooms/fileandhashthreatintel) | Walkthrough | 🟢 Free | File and Hash Threat Intel This room seeks to teach on enriching file and hash… | [Open](https://tryhackme.com/room/fileandhashthreatintel) | | [Firewall Fundamentals](/en/tryhackme/rooms/firewallfundamentals) | Walkthrough | 🔵 VIP | Firewall Fundamentals Learn about firewalls and get hands-on with Windows and… | [Open](https://tryhackme.com/room/firewallfundamentals) | | [Flag Vault](/en/tryhackme/rooms/hfb1flagvault) | Challenge | 🔵 VIP | Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/hfb1flagvault) | | [Flag Vault 2](/en/tryhackme/rooms/hfb1flagvault2) | Challenge | 🔵 VIP | Flag Vault 2 Exploit a simple format string vulnerability. | [Open](https://tryhackme.com/room/hfb1flagvault2) | | [FlareVM: Arsenal of Tools](/en/tryhackme/rooms/flarevmarsenaloftools) | Walkthrough | 🔵 VIP | FlareVM: Arsenal of Tools Learn the arsenal of investigative tools in FlareVM. | [Open](https://tryhackme.com/room/flarevmarsenaloftools) | | [Flatline](/en/tryhackme/rooms/flatline) | Challenge | 🟢 Free | Flatline How low are your morals? | [Open](https://tryhackme.com/room/flatline) | | [Flip](/en/tryhackme/rooms/flip) | Challenge | 🟢 Free | Flip Hey, do a flip! | [Open](https://tryhackme.com/room/flip) | | [Forensic Imaging](/en/tryhackme/rooms/forensicimaging) | Walkthrough | 🟢 Free | Forensic Imaging Learn the basic concepts of forensic imaging. | [Open](https://tryhackme.com/room/forensicimaging) | | [Fowsniff CTF](/en/tryhackme/rooms/ctf) | Challenge | 🟢 Free | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/ctf) | | [Gallery](/en/tryhackme/rooms/gallery666) | Challenge | 🟢 Free | Gallery Try to exploit our image gallery system | [Open](https://tryhackme.com/room/gallery666) | | [Game Zone](/en/tryhackme/rooms/gamezone) | Walkthrough | 🔵 VIP | Game Zone Learn to hack into this machine. Understand how to use SQLMap, crack… | [Open](https://tryhackme.com/room/gamezone) | | [GamingServer](/en/tryhackme/rooms/gamingserver) | Challenge | 🟢 Free | GamingServer An Easy Boot2Root box for beginners | [Open](https://tryhackme.com/room/gamingserver) | | [Geolocating Images](/en/tryhackme/rooms/geolocatingimages) | Walkthrough | 🟢 Free | Geolocating Images Room to understand how to geolocate images | [Open](https://tryhackme.com/room/geolocatingimages) | | [Getting Started](/en/tryhackme/rooms/gettingstarted) | Walkthrough | 🟢 Free | Getting Started Get started with TryHackMe by hacking a fake social media… | [Open](https://tryhackme.com/room/gettingstarted) | | [GLITCH](/en/tryhackme/rooms/glitch) | Challenge | 🟢 Free | GLITCH Challenge showcasing a web app and simple privilege escalation. Can you… | [Open](https://tryhackme.com/room/glitch) | | [Gobuster: The Basics](/en/tryhackme/rooms/gobusterthebasics) | Walkthrough | 🔵 VIP | Directory fuzzing | [Open](https://tryhackme.com/room/gobusterthebasics) | | [Google Dorking](/en/tryhackme/rooms/googledorking) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/googledorking) | | [Governance & Regulation](/en/tryhackme/rooms/cybergovernanceregulation) | Walkthrough | 🟢 Free | Governance & Regulation Explore policies and frameworks vital for regulating… | [Open](https://tryhackme.com/room/cybergovernanceregulation) | | [Grep](/en/tryhackme/rooms/greprtp) | Challenge | 🔵 VIP | Grep A challenge that tests your reconnaissance and OSINT skills. | [Open](https://tryhackme.com/room/greprtp) | | [h4cked](/en/tryhackme/rooms/h4cked) | Challenge | 🟢 Free | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/h4cked) | | [Hacker vs. Hacker](/en/tryhackme/rooms/hackervshacker) | Challenge | 🟢 Free | Hacker vs. Hacker Someone has compromised this server already! Can you get in… | [Open](https://tryhackme.com/room/hackervshacker) | | [Hacking with PowerShell](/en/tryhackme/rooms/powershell) | Walkthrough | 🔵 VIP | Hacking with PowerShell Learn the basics of PowerShell and PowerShell Scripting | [Open](https://tryhackme.com/room/powershell) | | [Hardening Basics Part 1](/en/tryhackme/rooms/hardeningbasicspart1) | Walkthrough | 🔵 VIP | Hardening Basics Part 1 Learn how to harden an Ubuntu Server! Covers a wide… | [Open](https://tryhackme.com/room/hardeningbasicspart1) | | [Hardening Basics Part 2](/en/tryhackme/rooms/hardeningbasicspart2) | Walkthrough | 🔵 VIP | Hardening Basics Part 2 Continue learning about hardening | [Open](https://tryhackme.com/room/hardeningbasicspart2) | | [Hashing Basics](/en/tryhackme/rooms/hashingbasics) | Walkthrough | 🔵 VIP | Hashing Basics Learn about hashing functions and their uses in password… | [Open](https://tryhackme.com/room/hashingbasics) | | [HealthGPT](/en/tryhackme/rooms/healthgpt) | Challenge | 🔵 VIP | HealthGPT A safety-compliant AI assistant that has strict rules against… | [Open](https://tryhackme.com/room/healthgpt) | | [HeartBleed](/en/tryhackme/rooms/heartbleed) | Challenge | 🔵 VIP | HeartBleed SSL issues are still lurking in the wild! Can you exploit this web… | [Open](https://tryhackme.com/room/heartbleed) | | [Hide and Seek](/en/tryhackme/rooms/hfb1hideandseek) | Challenge | 🔵 VIP | Hide and Seek Conduct a live system analysis to uncover post-compromise… | [Open](https://tryhackme.com/room/hfb1hideandseek) | | [Hijack](/en/tryhackme/rooms/hijack) | Challenge | 🟢 Free | Hijack Misconfigs conquered, identities claimed. What is the user flag? What is… | [Open](https://tryhackme.com/room/hijack) | | [Hosted Hypervisors](/en/tryhackme/rooms/hostedhypervisors) | Walkthrough | 🟢 Free | Hosted Hypervisors Learn about Hosted Hypervisors, how to investigate them,… | [Open](https://tryhackme.com/room/hostedhypervisors) | | [How to use TryHackMe](/en/tryhackme/rooms/howtousetryhackme) | Walkthrough | 🟢 Free | How to use TryHackMe Start and access your first machine! Start the machine by… | [Open](https://tryhackme.com/room/howtousetryhackme) | | [How Websites Work](/en/tryhackme/rooms/howwebsiteswork) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/howwebsiteswork) | | [HTTP in Detail](/en/tryhackme/rooms/httpindetail) | Walkthrough | 🟢 Free | HTTP in Detail Learn about how you request content from a web server using the… | [Open](https://tryhackme.com/room/httpindetail) | | [HTTP Request Smuggling](/en/tryhackme/rooms/httprequestsmuggling) | Walkthrough | 🟢 Free | HTTP Request Smuggling | [Open](https://tryhackme.com/room/httprequestsmuggling) | | [Humans as Attack Vectors](/en/tryhackme/rooms/humansattackvectors) | Walkthrough | 🔵 VIP | Humans as Attack Vectors Understand why and how people are targeted in cyber… | [Open](https://tryhackme.com/room/humansattackvectors) | | [Hydra](/en/tryhackme/rooms/hydra) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/hydra) | | [Ice](/en/tryhackme/rooms/ice) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) · USB forensics | [Open](https://tryhackme.com/room/ice) | | [IDE](/en/tryhackme/rooms/ide) | Challenge | 🟢 Free | IDE An easy box to polish your enumeration skills! user.txt root.txt | [Open](https://tryhackme.com/room/ide) | | [Identity and Access Management](/en/tryhackme/rooms/iaaaidm) | Walkthrough | 🔵 VIP | Identity and Access Management Learn about identification, authentication,… | [Open](https://tryhackme.com/room/iaaaidm) | | [IDOR](/en/tryhackme/rooms/idor) | Walkthrough | 🔵 VIP | Access Control / IDOR | [Open](https://tryhackme.com/room/idor) | | [Incident Response Fundamentals](/en/tryhackme/rooms/incidentresponsefundamentals) | Walkthrough | 🔵 VIP | Incident Response Fundamentals Learn how to perform Incident Response in cyber… | [Open](https://tryhackme.com/room/incidentresponsefundamentals) | | [Infinity Shell](/en/tryhackme/rooms/hfb1infinityshell) | Challenge | 🔵 VIP | Infinity Shell Investigate and analyse the traces of an attack from an… | [Open](https://tryhackme.com/room/hfb1infinityshell) | | [Insekube](/en/tryhackme/rooms/insekube) | Walkthrough | 🟢 Free | Local File Inclusion (LFI) | [Open](https://tryhackme.com/room/insekube) | | [Inside a Computer System](/en/tryhackme/rooms/insideacomputer) | Walkthrough | 🟢 Free | Inside a Computer System This room covers the basic components of a computer… | [Open](https://tryhackme.com/room/insideacomputer) | | [Intermediate Nmap](/en/tryhackme/rooms/intermediatenmap) | Challenge | 🔵 VIP | Intermediate Nmap Can you combine your great nmap skills with other tools to… | [Open](https://tryhackme.com/room/intermediatenmap) | | [Intro PoC Scripting](/en/tryhackme/rooms/intropocscripting) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/intropocscripting) | | [Intro to Cloud Security](/en/tryhackme/rooms/introductiontocloudsecurityc6) | Walkthrough | 🔵 VIP | Intro to Cloud Security Learn fundamental concepts regarding securing a cloud… | [Open](https://tryhackme.com/room/introductiontocloudsecurityc6) | | [Intro to Cold System Forensics](/en/tryhackme/rooms/introtocoldsystemforensics) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/introtocoldsystemforensics) | | [Intro to Containerisation](/en/tryhackme/rooms/introtocontainerisation) | Walkthrough | 🟢 Free | Intro to Containerisation Learn about the technologies and benefits of… | [Open](https://tryhackme.com/room/introtocontainerisation) | | [Intro to Cross-site Scripting](/en/tryhackme/rooms/xss) | Walkthrough | 🔵 VIP | Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/xss) | | [Intro to Detection Engineering](/en/tryhackme/rooms/introtodetectionengineering) | Walkthrough | 🟢 Free | Intro to Detection Engineering Introduce the concept of detection engineering… | [Open](https://tryhackme.com/room/introtodetectionengineering) | | [Intro to Digital Forensics](/en/tryhackme/rooms/introdigitalforensics) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/introdigitalforensics) | | [Intro to Docker](/en/tryhackme/rooms/introtodockerk8pdqk) | Walkthrough | 🟢 Free | Intro to Docker Learn to create, build and deploy Docker containers! | [Open](https://tryhackme.com/room/introtodockerk8pdqk) | | [Intro to Endpoint Security](/en/tryhackme/rooms/introtoendpointsecurity) | Walkthrough | 🟢 Free | Intro to Endpoint Security Learn about fundamentals, methodology, and tooling… | [Open](https://tryhackme.com/room/introtoendpointsecurity) | | [Intro to GraphQL Hacking](/en/tryhackme/rooms/introtographqlhacking) | Walkthrough | 🔵 VIP | GraphQL Vulnerabilities | [Open](https://tryhackme.com/room/introtographqlhacking) | | [Intro to IoT Pentesting](/en/tryhackme/rooms/iotintro) | Walkthrough | 🟢 Free | Intro to IoT Pentesting A beginner friendly walkthrough for internet of things… | [Open](https://tryhackme.com/room/iotintro) | | [Intro to IR and IM](/en/tryhackme/rooms/introtoirandim) | Walkthrough | 🔵 VIP | Intro to IR and IM An introduction to Incident Response and Incident Management. | [Open](https://tryhackme.com/room/introtoirandim) | | [Intro to Kubernetes](/en/tryhackme/rooms/introtok8s) | Walkthrough | 🔵 VIP | Intro to Kubernetes An introduction to Kubernetes covering the basics of… | [Open](https://tryhackme.com/room/introtok8s) | | [Intro to Log Analysis](/en/tryhackme/rooms/introtologanalysis) | Walkthrough | 🟢 Free | Intro to Log Analysis An intro to log analysis, best practices, and essential… | [Open](https://tryhackme.com/room/introtologanalysis) | | [Intro to Logs](/en/tryhackme/rooms/introtologs) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/introtologs) | | [Intro To Pwntools](/en/tryhackme/rooms/introtopwntools) | Walkthrough | 🟢 Free | Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/introtopwntools) | | [Intro to SSRF](/en/tryhackme/rooms/ssrfqi) | Walkthrough | 🔵 VIP | Server-Side Request Forgery · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/ssrfqi) | | [Introduction to Antivirus](/en/tryhackme/rooms/introtoav) | Walkthrough | 🟢 Free | Introduction to Antivirus Understand how antivirus software works and what… | [Open](https://tryhackme.com/room/introtoav) | | [Introduction to AWS IAM](/en/tryhackme/rooms/introductiontoawsiam) | Walkthrough | 🟢 Free | Introduction to AWS IAM A Brief introduction to the importance of IAM and the… | [Open](https://tryhackme.com/room/introductiontoawsiam) | | [Introduction to CryptOps](/en/tryhackme/rooms/introductiontocryptops) | Walkthrough | 🟢 Free | Access Control / IDOR · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/introductiontocryptops) | | [Introduction to Django](/en/tryhackme/rooms/django) | Walkthrough | 🟢 Free | Introduction to Django How it works and why should I learn it? Read the above… | [Open](https://tryhackme.com/room/django) | | [Introduction to Flask](/en/tryhackme/rooms/flask) | Walkthrough | 🟢 Free | Introduction to Flask How it works and how can I exploit it? | [Open](https://tryhackme.com/room/flask) | | [Introduction to OWASP ZAP](/en/tryhackme/rooms/learnowaspzap) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/learnowaspzap) | | [Introduction to SIEM](/en/tryhackme/rooms/introtosiem) | Walkthrough | 🟢 Free | Introduction to SIEM Learn the fundamentals of SIEM and explore its features… | [Open](https://tryhackme.com/room/introtosiem) | | [Introduction to Windows API](/en/tryhackme/rooms/windowsapi) | Walkthrough | 🟢 Free | Introduction to Windows API Learn how to interact with the win32 API and… | [Open](https://tryhackme.com/room/windowsapi) | | [Introductory Networking](/en/tryhackme/rooms/introtonetworking) | Walkthrough | 🟢 Free | Introductory Networking An introduction to networking theory and basic… | [Open](https://tryhackme.com/room/introtonetworking) | | [Introductory Researching](/en/tryhackme/rooms/introtoresearch) | Walkthrough | 🟢 Free | Introductory Researching A brief introduction to research skills for pentesting. | [Open](https://tryhackme.com/room/introtoresearch) | | [Investigating Windows](/en/tryhackme/rooms/investigatingwindows) | Challenge | 🟢 Free | Investigating Windows A windows machine has been hacked, its your job to go… | [Open](https://tryhackme.com/room/investigatingwindows) | | [Invite Only](/en/tryhackme/rooms/invite-only) | Challenge | 🔵 VIP | Invite Only Extract insight from a set of flagged artefacts, and distil the… | [Open](https://tryhackme.com/room/invite-only) | | [iOS Analysis](/en/tryhackme/rooms/iosanalysis) | Walkthrough | 🔵 VIP | iOS Analysis Discover the forensic artefacts present within iOS. | [Open](https://tryhackme.com/room/iosanalysis) | | [iOS Forensics](/en/tryhackme/rooms/iosforensics) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/iosforensics) | | [IR Philosophy and Ethics](/en/tryhackme/rooms/irphilosophyethics) | Walkthrough | 🟢 Free | IR Philosophy and Ethics Addressing the Incident Response philosophy. DFIR… | [Open](https://tryhackme.com/room/irphilosophyethics) | | [IR Playbooks](/en/tryhackme/rooms/irplaybooks) | Walkthrough | 🟢 Free | IR Playbooks Learn the basics of creating and using IR playbooks. I have… | [Open](https://tryhackme.com/room/irplaybooks) | | [Jack-of-All-Trades](/en/tryhackme/rooms/jackofalltrades) | Challenge | 🟢 Free | Jack-of-All-Trades Boot-to-root originally designed for Securi-Tay 2020 User… | [Open](https://tryhackme.com/room/jackofalltrades) | | [John the Ripper: The Basics](/en/tryhackme/rooms/johntheripperbasics) | Walkthrough | 🔵 VIP | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/johntheripperbasics) | | [JPGChat](/en/tryhackme/rooms/jpgchat) | Challenge | 🟢 Free | Sudo abuse · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/jpgchat) | | [Junior Security Analyst Intro](/en/tryhackme/rooms/jrsecanalystintrouxo) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/jrsecanalystintrouxo) | | [Jupyter 101](/en/tryhackme/rooms/jupyter101) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/jupyter101) | | [Kali Machine](/en/tryhackme/rooms/kali) | Walkthrough | 🔵 VIP | Kali Machine Access your own Kali Machine | [Open](https://tryhackme.com/room/kali) | | [Kenobi](/en/tryhackme/rooms/kenobi) | Walkthrough | 🟢 Free | SMB (139/445) · SUID binaries | [Open](https://tryhackme.com/room/kenobi) | | [kiba](/en/tryhackme/rooms/kiba) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/kiba) | | [KoTH Food CTF](/en/tryhackme/rooms/kothfoodctf) | Challenge | 🟢 Free | KoTH Food CTF Practice Food KoTH alone, to get familiar with KoTH! Get all 8… | [Open](https://tryhackme.com/room/kothfoodctf) | | [L2 MAC Flooding & ARP Spoofing](/en/tryhackme/rooms/layer2) | Walkthrough | 🟢 Free | Web Cache Attacks (Poisoning / Deception) | [Open](https://tryhackme.com/room/layer2) | | [Lateral Movement and Pivoting](/en/tryhackme/rooms/lateralmovementandpivoting) | Walkthrough | 🔵 VIP | Port Forwarding / Pivoting | [Open](https://tryhackme.com/room/lateralmovementandpivoting) | | [LDAP Injection](/en/tryhackme/rooms/ldapinjection) | Walkthrough | 🔵 VIP | LDAP Injection Exploiting Lightweight Directory Access Protocol. | [Open](https://tryhackme.com/room/ldapinjection) | | [Learn Rust](/en/tryhackme/rooms/rust) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/rust) | | [Learning Cyber Security](/en/tryhackme/rooms/beginnerpathintro) | Walkthrough | 🟢 Free | Learning Cyber Security Get a short introduction to a few of the security… | [Open](https://tryhackme.com/room/beginnerpathintro) | | [Lessons Learned](/en/tryhackme/rooms/lessonslearned) | Walkthrough | 🔵 VIP | Lessons Learned A look into the fifth phase of the Incident Response framework:… | [Open](https://tryhackme.com/room/lessonslearned) | | [Lian\_Yu](/en/tryhackme/rooms/lianyu) | Challenge | 🟢 Free | Lian\_Yu A beginner level security challenge Deploy the VM and Start the… | [Open](https://tryhackme.com/room/lianyu) | | [Library](/en/tryhackme/rooms/bsidesgtlibrary) | Challenge | 🟢 Free | Library boot2root machine for FIT and bsides guatemala CTF | [Open](https://tryhackme.com/room/bsidesgtlibrary) | | [Light](/en/tryhackme/rooms/lightroom) | Challenge | 🟢 Free | Light Welcome to the Light database application! What is the admin username?… | [Open](https://tryhackme.com/room/lightroom) | | [Linux Backdoors](/en/tryhackme/rooms/linuxbackdoors) | Walkthrough | 🟢 Free | Linux Backdoors Learn all the different techniques used to backdoor a linux… | [Open](https://tryhackme.com/room/linuxbackdoors) | | [Linux CLI - Shells Bells](/en/tryhackme/rooms/linuxcli-aoc2025-o1fpqkvxti) | Walkthrough | 🟢 Free | Linux CLI - Shells Bells Explore the Linux command-line interface and use it to… | [Open](https://tryhackme.com/room/linuxcli-aoc2025-o1fpqkvxti) | | [Linux CLI Basics](/en/tryhackme/rooms/linuxclibasics) | Walkthrough | 🔵 VIP | Linux CLI Basics Get comfortable navigating through the Linux CLI. | [Open](https://tryhackme.com/room/linuxclibasics) | | [Linux File System Analysis](/en/tryhackme/rooms/linuxfilesystemanalysis) | Walkthrough | 🟢 Free | Linux File System Analysis Perform real-time file system analysis on a Linux… | [Open](https://tryhackme.com/room/linuxfilesystemanalysis) | | [Linux Incident Surface](/en/tryhackme/rooms/linuxincidentsurface) | Walkthrough | 🟢 Free | Linux Incident Surface Explore various areas of Incident Surface in Linux and… | [Open](https://tryhackme.com/room/linuxincidentsurface) | | [Linux Logging for SOC](/en/tryhackme/rooms/linuxloggingforsoc) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/linuxloggingforsoc) | | [Linux Modules](/en/tryhackme/rooms/linuxmodules) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/linuxmodules) | | [Linux Process Analysis](/en/tryhackme/rooms/linuxprocessanalysis) | Walkthrough | 🟢 Free | Linux Process Analysis Perform thorough process and application analysis to… | [Open](https://tryhackme.com/room/linuxprocessanalysis) | | [Linux Shells](/en/tryhackme/rooms/linuxshells) | Walkthrough | 🔵 VIP | Linux Shells Learn about scripting and the different types of Linux shells. | [Open](https://tryhackme.com/room/linuxshells) | | [Linux Strength Training](/en/tryhackme/rooms/linuxstrengthtraining) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/linuxstrengthtraining) | | [Linux: Local Enumeration](/en/tryhackme/rooms/lle) | Walkthrough | 🔵 VIP | Linux: Local Enumeration Learn to efficiently enumerate a linux machine and… | [Open](https://tryhackme.com/room/lle) | | [Living Off the Land Attacks](/en/tryhackme/rooms/livingoffthelandattacks) | Walkthrough | 🔵 VIP | Living Off the Land Attacks Learn to detect and analyse Living Off the Land… | [Open](https://tryhackme.com/room/livingoffthelandattacks) | | [LLM Output Handling and Privacy Risks](/en/tryhackme/rooms/outputhandlingandprivacyrisks) | Walkthrough | 🔵 VIP | LLM Output Handling and Privacy Risks Learn how LLMs handle their output and… | [Open](https://tryhackme.com/room/outputhandlingandprivacyrisks) | | [Log Operations](/en/tryhackme/rooms/logoperations) | Walkthrough | 🟢 Free | Log Operations Learn the operation process details. | [Open](https://tryhackme.com/room/logoperations) | | [Logs Fundamentals](/en/tryhackme/rooms/logsfundamentals) | Walkthrough | 🔵 VIP | Logs Fundamentals Learn what logs are and how to analyze them for effective… | [Open](https://tryhackme.com/room/logsfundamentals) | | [Lookback](/en/tryhackme/rooms/lookback) | Challenge | 🔵 VIP | Lookback You’ve been asked to run a vulnerability test on a production… | [Open](https://tryhackme.com/room/lookback) | | [Lookup](/en/tryhackme/rooms/lookup) | Challenge | 🟢 Free | Lookup Test your enumeration skills on this boot-to-root machine. | [Open](https://tryhackme.com/room/lookup) | | [Love Letter Locker](/en/tryhackme/rooms/lafb2026e2) | Challenge | 🟢 Free | Love Letter Locker Use your skills to access other users' letters. What is the… | [Open](https://tryhackme.com/room/lafb2026e2) | | [macOS Forensics: The Basics](/en/tryhackme/rooms/macosforensicsbasics) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/macosforensicsbasics) | | [Madness](/en/tryhackme/rooms/madness) | Challenge | 🟢 Free | Madness Will you be consumed by Madness? | [Open](https://tryhackme.com/room/madness) | | [magician](/en/tryhackme/rooms/magician) | Challenge | 🟢 Free | magician This magical website lets you convert image file formats user.txt… | [Open](https://tryhackme.com/room/magician) | | [MAL: Malware Introductory](/en/tryhackme/rooms/malmalintroductory) | Walkthrough | 🟢 Free | EternalBlue (MS17-010) | [Open](https://tryhackme.com/room/malmalintroductory) | | [MAL: REMnux - The Redux](/en/tryhackme/rooms/malremnuxv2) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/malremnuxv2) | | [MAL: Researching](/en/tryhackme/rooms/malresearching) | Walkthrough | 🟢 Free | MAL: Researching Understanding checksums, how to generate them and their use… | [Open](https://tryhackme.com/room/malresearching) | | [MAL: Strings](/en/tryhackme/rooms/malstrings) | Walkthrough | 🔵 VIP | MAL: Strings Investigating "strings" within an application and why these values… | [Open](https://tryhackme.com/room/malstrings) | | [Malware Analysis - Malhare.exe](/en/tryhackme/rooms/htapowershell-aoc2025-p2l5k8j1h4) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/htapowershell-aoc2025-p2l5k8j1h4) | | [Malware Classification](/en/tryhackme/rooms/malwareclassification) | Walkthrough | 🟢 Free | Malware Classification Learn how to identify, classify, and understand common… | [Open](https://tryhackme.com/room/malwareclassification) | | [Man-in-the-Middle Detection](/en/tryhackme/rooms/mitmdetection) | Walkthrough | 🔵 VIP | Man-in-the-Middle Detection Learn what MITM attack is, and how to identify the… | [Open](https://tryhackme.com/room/mitmdetection) | | [Memory Acquisition](/en/tryhackme/rooms/memoryacquisition) | Walkthrough | 🔵 VIP | Memory Acquisition Learn the techniques and best practices to acquire digitally… | [Open](https://tryhackme.com/room/memoryacquisition) | | [Memory Analysis Introduction](/en/tryhackme/rooms/memoryanalysisintroduction) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/memoryanalysisintroduction) | | [Memory Forensics](/en/tryhackme/rooms/memoryforensics) | Challenge | 🟢 Free | USB forensics · Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/memoryforensics) | | [Metasploit: Exploitation](/en/tryhackme/rooms/metasploitexploitation) | Walkthrough | 🔵 VIP | Metasploit: Exploitation Using Metasploit for scanning, vulnerability… | [Open](https://tryhackme.com/room/metasploitexploitation) | | [Metasploit: Introduction](/en/tryhackme/rooms/metasploitintro) | Walkthrough | 🟢 Free | Metasploit: Introduction An introduction to the main components of the… | [Open](https://tryhackme.com/room/metasploitintro) | | [Metasploit: Meterpreter](/en/tryhackme/rooms/meterpreter) | Walkthrough | 🔵 VIP | Metasploit: Meterpreter Take a deep dive into Meterpreter, and see how… | [Open](https://tryhackme.com/room/meterpreter) | | [Microservices Architectures](/en/tryhackme/rooms/microservicearchitectures) | Walkthrough | 🟢 Free | Microservices Architectures Explore the problems associated with building a… | [Open](https://tryhackme.com/room/microservicearchitectures) | | [Microsoft Windows Hardening](/en/tryhackme/rooms/microsoftwindowshardening) | Walkthrough | 🔵 VIP | Microsoft Windows Hardening To learn key attack vectors used by hackers and how… | [Open](https://tryhackme.com/room/microsoftwindowshardening) | | [mKingdom](/en/tryhackme/rooms/mkingdom) | Challenge | 🟢 Free | mKingdom Beginner-friendly box inspired by a certain mustache man. What is… | [Open](https://tryhackme.com/room/mkingdom) | | [Mobile Acquisition](/en/tryhackme/rooms/mobileacquisition) | Walkthrough | 🟢 Free | Mobile Acquisition Prepare for mobile acquisition with the challenges and… | [Open](https://tryhackme.com/room/mobileacquisition) | | [Mobile Malware Analysis](/en/tryhackme/rooms/mma) | Walkthrough | 🟢 Free | AS-REP Roasting | [Open](https://tryhackme.com/room/mma) | | [Monday Monitor](/en/tryhackme/rooms/mondaymonitor) | Challenge | 🔵 VIP | Monday Monitor Ready to test Swiftspend's endpoint monitoring? | [Open](https://tryhackme.com/room/mondaymonitor) | | [Moniker Link (CVE-2024-21413)](/en/tryhackme/rooms/monikerlink) | Walkthrough | 🟢 Free | Moniker Link (CVE-2024-21413) Leak user's credentials using CVE-2024-21413 to… | [Open](https://tryhackme.com/room/monikerlink) | | [Mother's Secret](/en/tryhackme/rooms/codeanalysis) | Challenge | 🔵 VIP | Mother's Secret Exploit flaws found in Mother's code to reveal its secrets. | [Open](https://tryhackme.com/room/codeanalysis) | | [Mouse Trap](/en/tryhackme/rooms/mousetrap) | Walkthrough | 🔵 VIP | Mouse Trap Follow Jom and Terry on their purple teaming adventures, emulating… | [Open](https://tryhackme.com/room/mousetrap) | | [Mr. Phisher](/en/tryhackme/rooms/mrphisher) | Challenge | 🔵 VIP | Mr. Phisher I received a suspicious email with a very weird looking attachment.… | [Open](https://tryhackme.com/room/mrphisher) | | [MS Sentinel: Deploy](/en/tryhackme/rooms/sentineldeploy) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/sentineldeploy) | | [MS Sentinel: Detect](/en/tryhackme/rooms/sentineldetect) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/sentineldetect) | | [MS Sentinel: Ingest Data](/en/tryhackme/rooms/sentinelingestdata) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/sentinelingestdata) | | [MS Sentinel: Just Looking](/en/tryhackme/rooms/justlooking) | Challenge | 🔵 VIP | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/justlooking) | | [Multi-Factor Authentication](/en/tryhackme/rooms/multifactorauthentications) | Walkthrough | 🔵 VIP | Multi-Factor Authentication Exploiting Multi-Factor Authentication. | [Open](https://tryhackme.com/room/multifactorauthentications) | | [Mustacchio](/en/tryhackme/rooms/mustacchio) | Challenge | 🟢 Free | Mustacchio Easy boot2root Machine | [Open](https://tryhackme.com/room/mustacchio) | | [n8n: CVE-2025-68613](/en/tryhackme/rooms/n8ncve202568613) | Walkthrough | 🔵 VIP | n8n: CVE-2025-68613 Learn how adversaries can exploit the CVE-2025-68613… | [Open](https://tryhackme.com/room/n8ncve202568613) | | [Neighbour](/en/tryhackme/rooms/neighbour) | Challenge | 🟢 Free | Neighbour Check out our new cloud service, Authentication Anywhere. Can you… | [Open](https://tryhackme.com/room/neighbour) | | [Network Discovery - Scan-ta Clause](/en/tryhackme/rooms/networkservices-aoc2025-jnsoqbxgky) | Walkthrough | 🟢 Free | Network Discovery - Scan-ta Clause Discover how to scan network ports and… | [Open](https://tryhackme.com/room/networkservices-aoc2025-jnsoqbxgky) | | [Network Security](/en/tryhackme/rooms/intronetworksecurity) | Walkthrough | 🔵 VIP | Network Security Learn about network security, understand attack methodology,… | [Open](https://tryhackme.com/room/intronetworksecurity) | | [Network Security Essentials](/en/tryhackme/rooms/networksecurityessentials) | Walkthrough | 🟢 Free | SMB (139/445) · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/networksecurityessentials) | | [Network Services](/en/tryhackme/rooms/networkservices) | Walkthrough | 🟢 Free | Anonymous FTP · SMB (139/445) | [Open](https://tryhackme.com/room/networkservices) | | [Network Services 2](/en/tryhackme/rooms/networkservices2) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) · SUID binaries | [Open](https://tryhackme.com/room/networkservices2) | | [Network Traffic Basics](/en/tryhackme/rooms/networktrafficbasics) | Walkthrough | 🟢 Free | SMB (139/445) | [Open](https://tryhackme.com/room/networktrafficbasics) | | [Networking Concepts](/en/tryhackme/rooms/networkingconcepts) | Walkthrough | 🟢 Free | Networking Concepts Learn about the ISO OSI model and the TCP/IP protocol… | [Open](https://tryhackme.com/room/networkingconcepts) | | [Networking Core Protocols](/en/tryhackme/rooms/networkingcoreprotocols) | Walkthrough | 🔵 VIP | Networking Core Protocols Learn about the core TCP/IP protocols. | [Open](https://tryhackme.com/room/networkingcoreprotocols) | | [Networking Essentials](/en/tryhackme/rooms/networkingessentials) | Walkthrough | 🔵 VIP | Networking Essentials Explore networking protocols from automatic configuration… | [Open](https://tryhackme.com/room/networkingessentials) | | [Networking Secure Protocols](/en/tryhackme/rooms/networkingsecureprotocols) | Walkthrough | 🔵 VIP | Networking Secure Protocols Learn how TLS, SSH, and VPN can secure your network… | [Open](https://tryhackme.com/room/networkingsecureprotocols) | | [NetworkMiner](/en/tryhackme/rooms/networkminer) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/networkminer) | | [Next.js: CVE-2025-29927](/en/tryhackme/rooms/nextjscve202529927) | Walkthrough | 🟢 Free | Next.js: CVE-2025-29927 Explore an authorisation bypass vulnerability in… | [Open](https://tryhackme.com/room/nextjscve202529927) | | [Ninja Skills](/en/tryhackme/rooms/ninjaskills) | Challenge | 🟢 Free | Ninja Skills Practise your Linux skills and complete the challenges. Which of… | [Open](https://tryhackme.com/room/ninjaskills) | | [NIS - Linux Part I](/en/tryhackme/rooms/nislinuxone) | Walkthrough | 🔵 VIP | NIS - Linux Part I Enhance your Linux knowledge with this beginner friendly… | [Open](https://tryhackme.com/room/nislinuxone) | | [Nmap Basic Port Scans](/en/tryhackme/rooms/nmap02) | Walkthrough | 🔵 VIP | Nmap Basic Port Scans Learn in-depth how nmap TCP connect scan, TCP SYN port… | [Open](https://tryhackme.com/room/nmap02) | | [Nmap: The Basics](/en/tryhackme/rooms/nmap) | Walkthrough | 🔵 VIP | Nmap: The Basics Learn how to use Nmap to discover live hosts, find open ports,… | [Open](https://tryhackme.com/room/nmap) | | [NoSQL Injection](/en/tryhackme/rooms/nosqlinjectiontutorial) | Walkthrough | 🟢 Free | SQL Injection · Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/nosqlinjectiontutorial) | | [OhSINT](/en/tryhackme/rooms/ohsint) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/ohsint) | | [Opacity](/en/tryhackme/rooms/opacity) | Challenge | 🟢 Free | Opacity Opacity is a Boot2Root made for pentesters and cybersecurity… | [Open](https://tryhackme.com/room/opacity) | | [OpenVAS](/en/tryhackme/rooms/openvas) | Walkthrough | 🟢 Free | OpenVAS Learn the basics of threat and vulnerability management using Open… | [Open](https://tryhackme.com/room/openvas) | | [OpenVPN](/en/tryhackme/rooms/openvpn) | Walkthrough | 🟢 Free | OpenVPN A guide to connecting to our network using OpenVPN. | [Open](https://tryhackme.com/room/openvpn) | | [Operating Systems: Introduction](/en/tryhackme/rooms/operatingsystemsintroduction) | Walkthrough | 🟢 Free | Operating Systems: Introduction Explore the basics of operating systems and the… | [Open](https://tryhackme.com/room/operatingsystemsintroduction) | | [Oracle 9](/en/tryhackme/rooms/oracle9) | Challenge | 🟢 Free | Oracle 9 My designation is Oracle 9, I carry with me a sealed transmission. | [Open](https://tryhackme.com/room/oracle9) | | [Order](/en/tryhackme/rooms/hfb1order) | Challenge | 🔵 VIP | Order Perform a known-plaintext attack to recover a repeating-key XOR key and… | [Open](https://tryhackme.com/room/hfb1order) | | [Osquery: The Basics](/en/tryhackme/rooms/osqueryf8) | Walkthrough | 🔵 VIP | Osquery: The Basics Let's cover the basics of Osquery. | [Open](https://tryhackme.com/room/osqueryf8) | | [Outlook NTLM Leak](/en/tryhackme/rooms/outlookntlmleak) | Walkthrough | 🟢 Free | Outlook NTLM Leak Leak password hashes from a user by sending them an email by… | [Open](https://tryhackme.com/room/outlookntlmleak) | | [Overpass](/en/tryhackme/rooms/overpass) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/overpass) | | [Overpass 2 - Hacked](/en/tryhackme/rooms/overpass2hacked) | Walkthrough | 🔵 VIP | Overpass 2 - Hacked Overpass has been hacked! Can you analyse the attacker's… | [Open](https://tryhackme.com/room/overpass2hacked) | | [OWASP Juice Shop](/en/tryhackme/rooms/owaspjuiceshop) | Walkthrough | 🟢 Free | SQL Injection · AS-REP Roasting · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/owaspjuiceshop) | | [OWASP Mutillidae II](/en/tryhackme/rooms/owaspmutillidae) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/owaspmutillidae) | | [OWASP Top 10 2025: Application Design Flaws](/en/tryhackme/rooms/owasptopten2025two) | Walkthrough | 🟢 Free | OWASP Top 10 2025: Application Design Flaws Learn about A02, A03, A06, and A10… | [Open](https://tryhackme.com/room/owasptopten2025two) | | [OWASP Top 10 2025: IAAA Failures](/en/tryhackme/rooms/owasptopten2025one) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/owasptopten2025one) | | [OWASP Top 10 2025: Insecure Data Handling](/en/tryhackme/rooms/owasptopten2025three) | Walkthrough | 🟢 Free | SSTI (Server-Side Template Injection) | [Open](https://tryhackme.com/room/owasptopten2025three) | | [PassCode](/en/tryhackme/rooms/hfb1passcode) | Challenge | 🔵 VIP | PassCode From the Hackfinity Battle CTF event. | [Open](https://tryhackme.com/room/hfb1passcode) | | [Pentesting Fundamentals](/en/tryhackme/rooms/pentestingfundamentals) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/pentestingfundamentals) | | [Phishing Analysis Fundamentals](/en/tryhackme/rooms/phishingemails1tryoe) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/phishingemails1tryoe) | | [Phishing Analysis Tools](/en/tryhackme/rooms/phishingemails3tryoe) | Walkthrough | 🔵 VIP | Phishing Analysis Tools Learn the tools used to aid an analyst to investigate… | [Open](https://tryhackme.com/room/phishingemails3tryoe) | | [Phishing Emails in Action](/en/tryhackme/rooms/phishingemails2rytmuv) | Walkthrough | 🟢 Free | Phishing Emails in Action Learn the different indicators of phishing attempts… | [Open](https://tryhackme.com/room/phishingemails2rytmuv) | | [Phishing Prevention](/en/tryhackme/rooms/phishingemails4gkxh) | Walkthrough | 🔵 VIP | Phishing Prevention Learn how to defend against phishing emails. | [Open](https://tryhackme.com/room/phishingemails4gkxh) | | [Physical Security Intro](/en/tryhackme/rooms/physicalsecurityintro) | Walkthrough | 🟢 Free | Physical Security Intro This room is an introduction to physical security… | [Open](https://tryhackme.com/room/physicalsecurityintro) | | [Pickle Rick](/en/tryhackme/rooms/picklerick) | Challenge | 🟢 Free | Pickle Rick A Rick and Morty CTF. Help turn Rick back into a human! What is the… | [Open](https://tryhackme.com/room/picklerick) | | [Post-Exploitation Basics](/en/tryhackme/rooms/postexploit) | Walkthrough | 🟢 Free | Kerberoasting · BloodHound | [Open](https://tryhackme.com/room/postexploit) | | [Poster](/en/tryhackme/rooms/poster) | Challenge | 🟢 Free | Poster The sys admin set up a rdbms in a safe way. What is the rdbms installed… | [Open](https://tryhackme.com/room/poster) | | [Printer Hacking 101](/en/tryhackme/rooms/printerhacking101) | Walkthrough | 🟢 Free | Printer Hacking 101 Learn about (and get hands on with) printer hacking and… | [Open](https://tryhackme.com/room/printerhacking101) | | [PrintNightmare, again!](/en/tryhackme/rooms/printnightmarec2bn7l) | Challenge | 🔵 VIP | PrintNightmare, again! Search the artifacts on the endpoint to determine if the… | [Open](https://tryhackme.com/room/printnightmarec2bn7l) | | [Probe](/en/tryhackme/rooms/probe) | Walkthrough | 🔵 VIP | Probe Use your baseline scanning skills to enumerate a secure network. | [Open](https://tryhackme.com/room/probe) | | [Protocols and Servers](/en/tryhackme/rooms/protocolsandservers) | Walkthrough | 🔵 VIP | Protocols and Servers Learn about common protocols such as HTTP, FTP, POP3,… | [Open](https://tryhackme.com/room/protocolsandservers) | | [Psycho Break](/en/tryhackme/rooms/psychobreak) | Walkthrough | 🟢 Free | Psycho Break Help Sebastian and his team of investigators to withstand the… | [Open](https://tryhackme.com/room/psychobreak) | | [Public Key Cryptography Basics](/en/tryhackme/rooms/publickeycrypto) | Walkthrough | 🔵 VIP | Public Key Cryptography Basics Discover how public key ciphers such as RSA work… | [Open](https://tryhackme.com/room/publickeycrypto) | | [Publisher](/en/tryhackme/rooms/publisher) | Challenge | 🟢 Free | Publisher Test your enumeration skills on this boot-to-root machine. | [Open](https://tryhackme.com/room/publisher) | | [Putting it all together](/en/tryhackme/rooms/puttingitalltogether) | Walkthrough | 🟢 Free | Putting it all together Learn how all the individual components of the web work… | [Open](https://tryhackme.com/room/puttingitalltogether) | | [Pyramid Of Pain](/en/tryhackme/rooms/pyramidofpainax) | Walkthrough | 🟢 Free | Pyramid Of Pain Learn what the Pyramid of Pain is and how it ranks indicators… | [Open](https://tryhackme.com/room/pyramidofpainax) | | [Pyrat](/en/tryhackme/rooms/pyrat) | Challenge | 🟢 Free | Pyrat Test your enumeration skills on this boot-to-root machine. | [Open](https://tryhackme.com/room/pyrat) | | [Python Basics](/en/tryhackme/rooms/pythonbasics) | Walkthrough | 🟢 Free | Python Basics Using a web-based code editor, learn the basics of Python and put… | [Open](https://tryhackme.com/room/pythonbasics) | | [Python for Pentesters](/en/tryhackme/rooms/pythonforcybersecurity) | Walkthrough | 🔵 VIP | Python for Pentesters Python is probably the most widely used and most… | [Open](https://tryhackme.com/room/pythonforcybersecurity) | | [Python: Simple Demo](/en/tryhackme/rooms/pythonsimpledemo) | Walkthrough | 🔵 VIP | Python: Simple Demo Explore what a basic Python program looks like. | [Open](https://tryhackme.com/room/pythonsimpledemo) | | [Race Conditions - Toy to The World](/en/tryhackme/rooms/race-conditions-aoc2025-d7f0g3h6j9) | Walkthrough | 🟢 Free | Race Conditions | [Open](https://tryhackme.com/room/race-conditions-aoc2025-d7f0g3h6j9) | | [React2Shell: CVE-2025-55182](/en/tryhackme/rooms/react2shellcve202555182) | Walkthrough | 🟢 Free | React2Shell: CVE-2025-55182 Explore the CVE-2025-55182 vulnerability in React… | [Open](https://tryhackme.com/room/react2shellcve202555182) | | [Red](/en/tryhackme/rooms/redisl33t) | Challenge | 🟢 Free | Red A classic battle for the ages. What is the first flag? What is the second… | [Open](https://tryhackme.com/room/redisl33t) | | [Red Team Engagements](/en/tryhackme/rooms/redteamengagements) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/redteamengagements) | | [Red Team Fundamentals](/en/tryhackme/rooms/redteamfundamentals) | Walkthrough | 🟢 Free | Red Team Fundamentals Learn about the basics of a red engagement, the main… | [Open](https://tryhackme.com/room/redteamfundamentals) | | [Registry Persistence Detection](/en/tryhackme/rooms/registrypersistencedetection) | Walkthrough | 🟢 Free | Registry Persistence Detection Learn to use the AutoRuns PowerShell module to… | [Open](https://tryhackme.com/room/registrypersistencedetection) | | [REMnux: Getting Started](/en/tryhackme/rooms/remnuxgettingstarted) | Walkthrough | 🔵 VIP | REMnux: Getting Started Learn how you can use the tools inside the REMnux VM. | [Open](https://tryhackme.com/room/remnuxgettingstarted) | | [Res](/en/tryhackme/rooms/res) | Challenge | 🔵 VIP | Res Hack into a vulnerable database server with an in-memory data-structure in… | [Open](https://tryhackme.com/room/res) | | [Retracted](/en/tryhackme/rooms/retracted) | Walkthrough | 🔵 VIP | Retracted Investigate the case of the missing ransomware. | [Open](https://tryhackme.com/room/retracted) | | [Reversing ELF](/en/tryhackme/rooms/reverselfiles) | Challenge | 🟢 Free | Reversing ELF Room for beginner Reverse Engineering CTF players What is the… | [Open](https://tryhackme.com/room/reverselfiles) | | [Risk Management](/en/tryhackme/rooms/seriskmanagement) | Walkthrough | 🔵 VIP | Risk Management Learn about framing, assessing, responding, and monitoring risk. | [Open](https://tryhackme.com/room/seriskmanagement) | | [RustScan](/en/tryhackme/rooms/rustscan) | Walkthrough | 🟢 Free | RustScan Learn how to use RustScan. Deploy the machine! Go to RustScan Repo .… | [Open](https://tryhackme.com/room/rustscan) | | [Search Skills](/en/tryhackme/rooms/searchskills) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/searchskills) | | [Searchlight - IMINT](/en/tryhackme/rooms/searchlightosint) | Challenge | 🟢 Free | Searchlight - IMINT OSINT challenges in the imagery intelligence category Did… | [Open](https://tryhackme.com/room/searchlightosint) | | [Secure GitOps](/en/tryhackme/rooms/securegitops) | Walkthrough | 🔵 VIP | Secure GitOps Learn how to secure the GitOps framework. | [Open](https://tryhackme.com/room/securegitops) | | [Security Operations](/en/tryhackme/rooms/securityoperations) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/securityoperations) | | [Session Management](/en/tryhackme/rooms/sessionmanagement) | Walkthrough | 🔵 VIP | Session Management Learn about session management and the different attacks… | [Open](https://tryhackme.com/room/sessionmanagement) | | [Shadow Trace](/en/tryhackme/rooms/shadowtrace) | Challenge | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/shadowtrace) | | [Shells Overview](/en/tryhackme/rooms/shellsoverview) | Walkthrough | 🔵 VIP | Shells Overview Learn about the different types of shells. | [Open](https://tryhackme.com/room/shellsoverview) | | [Shodan.io](/en/tryhackme/rooms/shodan) | Walkthrough | 🟢 Free | Shodan.io Learn about Shodan.io and how to use it for devices enumeration - is… | [Open](https://tryhackme.com/room/shodan) | | [Silver Platter](/en/tryhackme/rooms/silverplatter) | Challenge | 🟢 Free | Silver Platter Can you breach the server? | [Open](https://tryhackme.com/room/silverplatter) | | [Simple CTF](/en/tryhackme/rooms/easyctf) | Challenge | 🟢 Free | SQL Injection | [Open](https://tryhackme.com/room/easyctf) | | [SimpleHelp: CVE-2024-57727](/en/tryhackme/rooms/simplehelpcve202457727) | Walkthrough | 🔵 VIP | SimpleHelp: CVE-2024-57727 Learn how attackers can exploit CVE-2024-57727 and… | [Open](https://tryhackme.com/room/simplehelpcve202457727) | | [Skynet](/en/tryhackme/rooms/skynet) | Challenge | 🔵 VIP | Skynet A vulnerable Terminator themed Linux machine. | [Open](https://tryhackme.com/room/skynet) | | [Slingshot](/en/tryhackme/rooms/slingshot) | Walkthrough | 🔵 VIP | Slingshot Can you retrace an attacker's steps after they enumerate and… | [Open](https://tryhackme.com/room/slingshot) | | [Smag Grotto](/en/tryhackme/rooms/smaggrotto) | Challenge | 🟢 Free | Smag Grotto Follow the yellow brick road. | [Open](https://tryhackme.com/room/smaggrotto) | | [Snapped Phish-ing Line](/en/tryhackme/rooms/snappedphishingline) | Challenge | 🔵 VIP | Snapped Phish-ing Line Apply learned skills to probe malicious emails and URLs,… | [Open](https://tryhackme.com/room/snappedphishingline) | | [Sneaky Patch](/en/tryhackme/rooms/hfb1sneakypatch) | Challenge | 🔵 VIP | Sneaky Patch Investigate the potential kernel backdoor implanted within the… | [Open](https://tryhackme.com/room/hfb1sneakypatch) | | [Snyk Code](/en/tryhackme/rooms/snykcode) | Walkthrough | 🟢 Free | Snyk Code Securing code with Snyk - a junior application security engineer's… | [Open](https://tryhackme.com/room/snykcode) | | [Snyk Open Source](/en/tryhackme/rooms/snykopensource) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/snykopensource) | | [SOC L1 Alert Triage](/en/tryhackme/rooms/socl1alerttriage) | Walkthrough | 🟢 Free | SOC L1 Alert Triage Learn more about SOC alerts and build a systematic approach… | [Open](https://tryhackme.com/room/socl1alerttriage) | | [SOC Metrics and Objectives](/en/tryhackme/rooms/socmetricsobjectives) | Walkthrough | 🔵 VIP | SOC Metrics and Objectives Explore key metrics driving SOC effectiveness and… | [Open](https://tryhackme.com/room/socmetricsobjectives) | | [SOC Role in Blue Team](/en/tryhackme/rooms/socroleinblueteam) | Walkthrough | 🟢 Free | SOC Role in Blue Team Discover security roles and learn how to advance your SOC… | [Open](https://tryhackme.com/room/socroleinblueteam) | | [SOC Workbooks and Lookups](/en/tryhackme/rooms/socworkbookslookups) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/socworkbookslookups) | | [Source](/en/tryhackme/rooms/source) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/source) | | [Speed Chatting](/en/tryhackme/rooms/lafb2026e4) | Challenge | 🟢 Free | Speed Chatting Can you hack as fast as you can chat? What is the flag? | [Open](https://tryhackme.com/room/lafb2026e4) | | [Splunk: Dashboards and Reports](/en/tryhackme/rooms/splunkdashboardsandreports) | Walkthrough | 🔵 VIP | Splunk: Dashboards and Reports Explore reports, alerts, and dashboards with… | [Open](https://tryhackme.com/room/splunkdashboardsandreports) | | [SQL Fundamentals](/en/tryhackme/rooms/sqlfundamentals) | Walkthrough | 🔵 VIP | SQL Fundamentals Learn how to perform basic SQL queries to retrieve and manage… | [Open](https://tryhackme.com/room/sqlfundamentals) | | [SQLMAP](/en/tryhackme/rooms/sqlmap) | Walkthrough | 🟢 Free | Directory fuzzing | [Open](https://tryhackme.com/room/sqlmap) | | [SQLMap: The Basics](/en/tryhackme/rooms/sqlmapthebasics) | Walkthrough | 🔵 VIP | SQL Injection | [Open](https://tryhackme.com/room/sqlmapthebasics) | | [Starting Out In Cyber Sec](/en/tryhackme/rooms/startingoutincybersec) | Walkthrough | 🟢 Free | Starting Out In Cyber Sec Learn about the different career paths in Cyber… | [Open](https://tryhackme.com/room/startingoutincybersec) | | [Startup](/en/tryhackme/rooms/startup) | Challenge | 🟢 Free | Startup Abuse traditional vulnerabilities via untraditional means. What is the… | [Open](https://tryhackme.com/room/startup) | | [Steel Mountain](/en/tryhackme/rooms/steelmountain) | Walkthrough | 🔵 VIP | Steel Mountain Hack into a Mr. Robot themed Windows machine. Use metasploit for… | [Open](https://tryhackme.com/room/steelmountain) | | [Stolen Mount](/en/tryhackme/rooms/hfb1stolenmount) | Challenge | 🔵 VIP | Stolen Mount Analyse network traffic related to an unauthenticated file share… | [Open](https://tryhackme.com/room/hfb1stolenmount) | | [Supply Chain Attack: Lottie](/en/tryhackme/rooms/supplychainattacks) | Walkthrough | 🟢 Free | Supply Chain Attack: Lottie Learn about supply chain attacks and their various… | [Open](https://tryhackme.com/room/supplychainattacks) | | [Surfer](/en/tryhackme/rooms/surfer) | Challenge | 🔵 VIP | Surfer Surf some internal webpages to find the flag! | [Open](https://tryhackme.com/room/surfer) | | [Sysinternals](/en/tryhackme/rooms/btsysinternalssg) | Walkthrough | 🔵 VIP | Sysinternals Learn to use the Sysinternals tools to analyze Windows systems or… | [Open](https://tryhackme.com/room/btsysinternalssg) | | [Systems as Attack Vectors](/en/tryhackme/rooms/systemsattackvectors) | Walkthrough | 🔵 VIP | Systems as Attack Vectors Learn how attackers exploit vulnerable and… | [Open](https://tryhackme.com/room/systemsattackvectors) | | [TakeOver](/en/tryhackme/rooms/takeover) | Challenge | 🟢 Free | Subdomain Enumeration | [Open](https://tryhackme.com/room/takeover) | | [Tcpdump: The Basics](/en/tryhackme/rooms/tcpdump) | Walkthrough | 🔵 VIP | Tcpdump: The Basics Learn how to use Tcpdump to save, filter, and display… | [Open](https://tryhackme.com/room/tcpdump) | | [Team](/en/tryhackme/rooms/teamcw) | Challenge | 🟢 Free | Team Beginner friendly boot2root machine Deployed user.txt As the "dev" site is… | [Open](https://tryhackme.com/room/teamcw) | | [Tech\_Supp0rt: 1](/en/tryhackme/rooms/techsupp0rt1) | Challenge | 🟢 Free | Tech\_Supp0rt: 1 Hack into the scammer's under-development website to foil their… | [Open](https://tryhackme.com/room/techsupp0rt1) | | [The Case: Seven Minutes on the Seine](/en/tryhackme/rooms/thecasesevenminutesontheseine) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/thecasesevenminutesontheseine) | | [The CIA Triad](/en/tryhackme/rooms/theciatriad) | Walkthrough | 🟢 Free | The CIA Triad Understand the CIA Triad and how it shapes cyber security… | [Open](https://tryhackme.com/room/theciatriad) | | [The Game](/en/tryhackme/rooms/hfb1thegame) | Challenge | 🔵 VIP | The Game Practice your Game Hacking skills. | [Open](https://tryhackme.com/room/hfb1thegame) | | [The Game v2](/en/tryhackme/rooms/hfb1thegamev2) | Challenge | 🔵 VIP | The Game v2 Practice your Game Hacking skills. | [Open](https://tryhackme.com/room/hfb1thegamev2) | | [The Greenholt Phish](/en/tryhackme/rooms/phishingemails5fgjlzxc) | Challenge | 🔵 VIP | The Greenholt Phish Use the knowledge attained to analyze a malicious email. | [Open](https://tryhackme.com/room/phishingemails5fgjlzxc) | | [The Hacker Methodology](/en/tryhackme/rooms/hackermethodology) | Walkthrough | 🟢 Free | The Hacker Methodology Introduction to the Hacker Methodology What is the first… | [Open](https://tryhackme.com/room/hackermethodology) | | [The Lay of the Land](/en/tryhackme/rooms/thelayoftheland) | Walkthrough | 🔵 VIP | The Lay of the Land Learn about and get hands-on with common technologies and… | [Open](https://tryhackme.com/room/thelayoftheland) | | [The Phishing Pond](/en/tryhackme/rooms/phishingpond) | Challenge | 🟢 Free | The Phishing Pond Catch the phish before the phish catches you. What is the… | [Open](https://tryhackme.com/room/phishingpond) | | [The Sticker Shop](/en/tryhackme/rooms/thestickershop) | Challenge | 🟢 Free | The Sticker Shop Can you exploit the sticker shop in order to capture the flag?… | [Open](https://tryhackme.com/room/thestickershop) | | [The Witch's Cauldron](/en/tryhackme/rooms/cauldron) | Walkthrough | 🔵 VIP | The Witch's Cauldron Can you share Bob's secret recipe with Alice without Eve… | [Open](https://tryhackme.com/room/cauldron) | | [Thompson](/en/tryhackme/rooms/bsidesgtthompson) | Challenge | 🟢 Free | Thompson boot2root machine for FIT and bsides guatemala CTF | [Open](https://tryhackme.com/room/bsidesgtthompson) | | [Threat Hunting: Introduction](/en/tryhackme/rooms/introductiontothreathunting) | Walkthrough | 🟢 Free | Threat Hunting: Introduction Behind the scenes of Threat Hunting - mindset,… | [Open](https://tryhackme.com/room/introductiontothreathunting) | | [Threat Intelligence Tools](/en/tryhackme/rooms/threatinteltools) | Walkthrough | 🟢 Free | Threat Intelligence Tools Explore different OSINT tools used to conduct… | [Open](https://tryhackme.com/room/threatinteltools) | | [tmux](/en/tryhackme/rooms/rptmux) | Walkthrough | 🟢 Free | tmux Learn to use tmux, one of the most powerful multi-tasking tools on linux!… | [Open](https://tryhackme.com/room/rptmux) | | [Tomcat: CVE-2024-50379](/en/tryhackme/rooms/tomcatcve202450379) | Walkthrough | 🔵 VIP | Tomcat: CVE-2024-50379 Explore and learn about the Tomcat CVE-2024-50379… | [Open](https://tryhackme.com/room/tomcatcve202450379) | | [tomghost](/en/tryhackme/rooms/tomghost) | Challenge | 🟢 Free | tomghost Identify recent vulnerabilities to try exploit the system or read… | [Open](https://tryhackme.com/room/tomghost) | | [Tony the Tiger](/en/tryhackme/rooms/tonythetiger) | Challenge | 🟢 Free | Tony the Tiger Learn how to use a Java Serialisation attack in this boot-to-root | [Open](https://tryhackme.com/room/tonythetiger) | | [Toolbox: Vim](/en/tryhackme/rooms/toolboxvim) | Walkthrough | 🟢 Free | Toolbox: Vim Learn vim, a universal text editor that can be incredibly… | [Open](https://tryhackme.com/room/toolboxvim) | | [Tooling via Browser Automation](/en/tryhackme/rooms/customtoolingviabrowserautomation) | Walkthrough | 🔵 VIP | Tooling via Browser Automation Creating custom tooling for application testing… | [Open](https://tryhackme.com/room/customtoolingviabrowserautomation) | | [ToolsRus](/en/tryhackme/rooms/toolsrus) | Challenge | 🔵 VIP | Directory fuzzing | [Open](https://tryhackme.com/room/toolsrus) | | [Tor](/en/tryhackme/rooms/torforbeginners) | Walkthrough | 🟢 Free | Tor A beginner orienteered guide on using the Tor network | [Open](https://tryhackme.com/room/torforbeginners) | | [Traverse](/en/tryhackme/rooms/traverse) | Walkthrough | 🔵 VIP | Traverse Challenge your secure coding skills to restore a compromised website. | [Open](https://tryhackme.com/room/traverse) | | [Trooper](/en/tryhackme/rooms/trooper) | Walkthrough | 🔵 VIP | Trooper Use Cyber Threat Intelligence knowledge and skills to identify a threat… | [Open](https://tryhackme.com/room/trooper) | | [TryHack3M: Bricks Heist](/en/tryhackme/rooms/tryhack3mbricksheist) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/tryhack3mbricksheist) | | [TryHeartMe](/en/tryhackme/rooms/lafb2026e5) | Challenge | 🟢 Free | TryHeartMe Access the hidden item in this Valentine's gift shop. What is the… | [Open](https://tryhackme.com/room/lafb2026e5) | | [TShark Challenge I: Teamwork](/en/tryhackme/rooms/tsharkchallengesone) | Challenge | 🔵 VIP | TShark Challenge I: Teamwork Put your TShark skills into practice and analyse… | [Open](https://tryhackme.com/room/tsharkchallengesone) | | [TShark Challenge II: Directory](/en/tryhackme/rooms/tsharkchallengestwo) | Challenge | 🔵 VIP | TShark Challenge II: Directory Put your TShark skills into practice and analyse… | [Open](https://tryhackme.com/room/tsharkchallengestwo) | | [TShark: The Basics](/en/tryhackme/rooms/tsharkthebasics) | Walkthrough | 🔵 VIP | TShark: The Basics Learn the basics of TShark and take your protocol and PCAP… | [Open](https://tryhackme.com/room/tsharkthebasics) | | [Tutorial](/en/tryhackme/rooms/tutorial) | Walkthrough | 🟢 Free | Tutorial Learn how to use a TryHackMe room to start your upskilling in cyber… | [Open](https://tryhackme.com/room/tutorial) | | [U.A. High School](/en/tryhackme/rooms/yueiua) | Challenge | 🟢 Free | U.A. High School Welcome to the web application of U.A., the Superhero Academy. | [Open](https://tryhackme.com/room/yueiua) | | [Unified Kill Chain](/en/tryhackme/rooms/unifiedkillchain) | Walkthrough | 🟢 Free | Unified Kill Chain The Unified Kill Chain is a framework which establishes the… | [Open](https://tryhackme.com/room/unifiedkillchain) | | [Upload Vulnerabilities](/en/tryhackme/rooms/uploadvulns) | Walkthrough | 🔵 VIP | Upload Vulnerabilities Tutorial room exploring some basic file-upload… | [Open](https://tryhackme.com/room/uploadvulns) | | [Virtualization and Containers](/en/tryhackme/rooms/virtualizationandcontainers) | Walkthrough | 🔵 VIP | Virtualization and Containers Introduction to common virtualization… | [Open](https://tryhackme.com/room/virtualizationandcontainers) | | [Vulnerabilities 101](/en/tryhackme/rooms/vulnerabilities101) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/vulnerabilities101) | | [Vulnerability Scanner Overview](/en/tryhackme/rooms/vulnerabilityscanneroverview) | Walkthrough | 🔵 VIP | Vulnerability Scanner Overview Learn about vulnerability scanners and how they… | [Open](https://tryhackme.com/room/vulnerabilityscanneroverview) | | [VulnNet: Internal](/en/tryhackme/rooms/vulnnetinternal) | Challenge | 🟢 Free | VulnNet: Internal VulnNet Entertainment learns from its mistakes, and now they… | [Open](https://tryhackme.com/room/vulnnetinternal) | | [VulnNet: Roasted](/en/tryhackme/rooms/vulnnetroasted) | Challenge | 🟢 Free | VulnNet: Roasted VulnNet Entertainment quickly deployed another management… | [Open](https://tryhackme.com/room/vulnnetroasted) | | [Vulnversity](/en/tryhackme/rooms/vulnversity) | Walkthrough | 🟢 Free | Directory fuzzing · SUID binaries | [Open](https://tryhackme.com/room/vulnversity) | | [WAF: Introduction](/en/tryhackme/rooms/wafintroduction) | Walkthrough | 🟢 Free | SQL Injection · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/wafintroduction) | | [Walking An Application](/en/tryhackme/rooms/walkinganapplication) | Walkthrough | 🔵 VIP | Walking An Application Manually review a web application for security issues… | [Open](https://tryhackme.com/room/walkinganapplication) | | [Web Application Basics](/en/tryhackme/rooms/webapplicationbasics) | Walkthrough | 🟢 Free | Local File Inclusion (LFI) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/webapplicationbasics) | | [Web Application Security](/en/tryhackme/rooms/introwebapplicationsecurity) | Walkthrough | 🟢 Free | Web Application Security Learn about web applications and explore some of their… | [Open](https://tryhackme.com/room/introwebapplicationsecurity) | | [Web Enumeration](/en/tryhackme/rooms/webenumerationv2) | Walkthrough | 🔵 VIP | Directory fuzzing · WordPress Exploitation | [Open](https://tryhackme.com/room/webenumerationv2) | | [Web Security Essentials](/en/tryhackme/rooms/websecurityessentials) | Walkthrough | 🟢 Free | WordPress Exploitation | [Open](https://tryhackme.com/room/websecurityessentials) | | [WebGOAT](/en/tryhackme/rooms/webgoat) | Walkthrough | 🟢 Free | WebGOAT Simple testing room for beating on WebGOAT Deploy WebGOAT and have fun! | [Open](https://tryhackme.com/room/webgoat) | | [Welcome](/en/tryhackme/rooms/hello) | Walkthrough | 🟢 Free | Welcome Learn how to use a TryHackMe room to start your upskilling in cyber… | [Open](https://tryhackme.com/room/hello) | | [Wgel CTF](/en/tryhackme/rooms/wgelctf) | Challenge | 🟢 Free | Wgel CTF Can you exfiltrate the root flag? User flag Root flag | [Open](https://tryhackme.com/room/wgelctf) | | [What the Shell?](/en/tryhackme/rooms/introtoshells) | Walkthrough | 🔵 VIP | What the Shell? An introduction to sending and receiving (reverse/bind) shells… | [Open](https://tryhackme.com/room/introtoshells) | | [Whiterose](/en/tryhackme/rooms/whiterose) | Challenge | 🟢 Free | Whiterose Yet another Mr. Robot themed challenge. What's Tyrell Wellick's phone… | [Open](https://tryhackme.com/room/whiterose) | | [Wifi Hacking 101](/en/tryhackme/rooms/wifihacking101) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/wifihacking101) | | [Windows CLI Basics](/en/tryhackme/rooms/windowsclibasics) | Walkthrough | 🔵 VIP | Windows CLI Basics Explore what Windows CLI is, how to navigate, and interact… | [Open](https://tryhackme.com/room/windowsclibasics) | | [Windows Logging for SOC](/en/tryhackme/rooms/windowsloggingforsoc) | Walkthrough | 🟢 Free | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/windowsloggingforsoc) | | [Windows Network Analysis](/en/tryhackme/rooms/windowsnetworkanalysis) | Walkthrough | 🔵 VIP | Windows Network Analysis Discover networking artefacts using internal tooling… | [Open](https://tryhackme.com/room/windowsnetworkanalysis) | | [Windows PowerShell](/en/tryhackme/rooms/windowspowershell) | Walkthrough | 🔵 VIP | Windows PowerShell Discover the "Power" in PowerShell and learn the basics. | [Open](https://tryhackme.com/room/windowspowershell) | | [Wireshark 101](/en/tryhackme/rooms/wireshark) | Walkthrough | 🔵 VIP | Wireshark 101 Learn the basics of Wireshark and how to analyze various… | [Open](https://tryhackme.com/room/wireshark) | | [Wireshark: Packet Operations](/en/tryhackme/rooms/wiresharkpacketoperations) | Walkthrough | 🔵 VIP | Wireshark: Packet Operations Learn the fundamentals of packet analysis with… | [Open](https://tryhackme.com/room/wiresharkpacketoperations) | | [Wireshark: The Basics](/en/tryhackme/rooms/wiresharkthebasics) | Walkthrough | 🔵 VIP | Wireshark: The Basics Learn the basics of Wireshark and how to analyse… | [Open](https://tryhackme.com/room/wiresharkthebasics) | | [Wordpress: CVE-2021-29447](/en/tryhackme/rooms/wordpresscve202129447) | Challenge | 🟢 Free | WordPress Exploitation · Server-Side Request Forgery · Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/wordpresscve202129447) | | [Wreath](/en/tryhackme/rooms/wreath) | Walkthrough | 🔵 VIP | Wreath Learn how to pivot through a network by compromising a public facing web… | [Open](https://tryhackme.com/room/wreath) | | [Writing Pentest Reports](/en/tryhackme/rooms/writingpentestreports) | Walkthrough | 🟢 Free | Writing Pentest Reports Learn how to write professional pentesting reports that… | [Open](https://tryhackme.com/room/writingpentestreports) | | [x86 Architecture Overview](/en/tryhackme/rooms/x8664arch) | Walkthrough | 🟢 Free | x86 Architecture Overview A crash course in x86 architecture to enable us in… | [Open](https://tryhackme.com/room/x8664arch) | | [XSS](/en/tryhackme/rooms/axss) | Walkthrough | 🟢 Free | Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/axss) | | [XSS - Merry XSSMas](/en/tryhackme/rooms/xss-aoc2025-c5j8b1m4t6) | Walkthrough | 🟢 Free | Cross-Site Scripting (XSS) | [Open](https://tryhackme.com/room/xss-aoc2025-c5j8b1m4t6) | | [Yara](/en/tryhackme/rooms/yara) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/yara) | ## Medium (412) | Room | Type | Access | Skills | Official | | ----------------------------------------------------------------------------------------------- | ----------- | ------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------- | | [0day](/en/tryhackme/rooms/0day) | Challenge | 🟢 Free | 0day Exploit Ubuntu, like a Turtle in a Hurricane user.txt Hint's in the… | [Open](https://tryhackme.com/room/0day) | | [Active Directory Hardening](/en/tryhackme/rooms/activedirectoryhardening) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/activedirectoryhardening) | | [AD Certificate Templates](/en/tryhackme/rooms/adcertificatetemplates) | Walkthrough | 🟢 Free | AD Certificate Templates Walkthrough on the exploitation of misconfigured AD… | [Open](https://tryhackme.com/room/adcertificatetemplates) | | [AD: Authenticated Enumeration](/en/tryhackme/rooms/adauthenticatedenumeration) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/adauthenticatedenumeration) | | [AD: BadSuccessor](/en/tryhackme/rooms/adbadsuccessor) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/adbadsuccessor) | | [Advanced SQL Injection](/en/tryhackme/rooms/advancedsqlinjection) | Walkthrough | 🟢 Free | SQL Injection | [Open](https://tryhackme.com/room/advancedsqlinjection) | | [Advanced Static Analysis](/en/tryhackme/rooms/advancedstaticanalysis) | Walkthrough | 🔵 VIP | Advanced Static Analysis Learn how to identify code constructs and examine the… | [Open](https://tryhackme.com/room/advancedstaticanalysis) | | [AI Forensics](/en/tryhackme/rooms/aiforensics) | Walkthrough | 🟢 Free | USB forensics · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/aiforensics) | | [Airplane](/en/tryhackme/rooms/airplane) | Challenge | 🟢 Free | Airplane Are you ready to fly? What is user.txt What is root.txt | [Open](https://tryhackme.com/room/airplane) | | [Alert Triage With Elastic](/en/tryhackme/rooms/alerttriagewithelastic) | Walkthrough | 🔵 VIP | Alert Triage With Elastic Investigate alerts with Elastic by analyzing logs and… | [Open](https://tryhackme.com/room/alerttriagewithelastic) | | [Alert Triage With Splunk](/en/tryhackme/rooms/alerttriagewithsplunk) | Walkthrough | 🔵 VIP | Alert Triage With Splunk Use Splunk to triage alerts and investigate malicious… | [Open](https://tryhackme.com/room/alerttriagewithsplunk) | | [AllSignsPoint2Pwnage](/en/tryhackme/rooms/allsignspoint2pwnage) | Challenge | 🔵 VIP | AllSignsPoint2Pwnage A room that contains a rushed Windows based Digital Sign… | [Open](https://tryhackme.com/room/allsignspoint2pwnage) | | [Amazon EC2 - Attack & Defense](/en/tryhackme/rooms/amazonec2attackdefense) | Walkthrough | 🟢 Free | Amazon EC2 - Attack & Defense Learn about EC2 and how to compromise an EC2… | [Open](https://tryhackme.com/room/amazonec2attackdefense) | | [Analysing Volatile Memory](/en/tryhackme/rooms/analysingvolatilememory) | Walkthrough | 🔵 VIP | Analysing Volatile Memory Learn how the Windows OS manages volatile data in… | [Open](https://tryhackme.com/room/analysingvolatilememory) | | [Android Hacking 101](/en/tryhackme/rooms/androidhacking101) | Walkthrough | 🟢 Free | Android Hacking 101 Android Mobile Application Penetration Testing | [Open](https://tryhackme.com/room/androidhacking101) | | [Annie](/en/tryhackme/rooms/annie) | Challenge | 🟢 Free | Annie Remote access comes in different flavors. | [Open](https://tryhackme.com/room/annie) | | [Anonymous](/en/tryhackme/rooms/anonymous) | Challenge | 🟢 Free | Anonymous Not the hacking group | [Open](https://tryhackme.com/room/anonymous) | | [Anti-Reverse Engineering](/en/tryhackme/rooms/antireverseengineering) | Walkthrough | 🔵 VIP | Anti-Reverse Engineering Learn the techniques used by malware authors to bypass… | [Open](https://tryhackme.com/room/antireverseengineering) | | [APIWizards Breach](/en/tryhackme/rooms/apiwizardsbreach) | Walkthrough | 🟢 Free | APIWizards Breach Investigate a security breach at APIWizards Inc. | [Open](https://tryhackme.com/room/apiwizardsbreach) | | [AppSec IR](/en/tryhackme/rooms/appsecir) | Walkthrough | 🟢 Free | AppSec IR An introduction into the overlapping worlds of AppSec and IR. | [Open](https://tryhackme.com/room/appsecir) | | [APT28 in the Snare](/en/tryhackme/rooms/apt28inthesnare) | Walkthrough | 🔵 VIP | APT28 in the Snare Engage in a hands-on investigation tracing Fancy Bear’s… | [Open](https://tryhackme.com/room/apt28inthesnare) | | [APT28 Inception Theory](/en/tryhackme/rooms/apt28inceptiontheory) | Walkthrough | 🟢 Free | APT28 Inception Theory Dive into the world of Fancy Bear, a Russian cyber… | [Open](https://tryhackme.com/room/apt28inceptiontheory) | | [Aster](/en/tryhackme/rooms/aster) | Challenge | 🟢 Free | Aster Hack my server dedicated for building communications applications. | [Open](https://tryhackme.com/room/aster) | | [Athena](/en/tryhackme/rooms/4th3n4) | Challenge | 🟢 Free | Athena Break all security and compromise the machine. What is the user flag?… | [Open](https://tryhackme.com/room/4th3n4) | | [Atomic Bird Goes Purple #1](/en/tryhackme/rooms/atomicbirdone) | Walkthrough | 🔵 VIP | Atomic Bird Goes Purple #1 Time to simulate hunting and detecting activities to… | [Open](https://tryhackme.com/room/atomicbirdone) | | [Atomic Bird Goes Purple #2](/en/tryhackme/rooms/atomicbirdtwo) | Walkthrough | 🔵 VIP | Atomic Bird Goes Purple #2 Time to simulate hunting and detecting activities to… | [Open](https://tryhackme.com/room/atomicbirdtwo) | | [Attacking ICS Plant #2](/en/tryhackme/rooms/attackingics2) | Challenge | 🟢 Free | Attacking ICS Plant #2 Discover and attack ICS plants using modbus protocol… | [Open](https://tryhackme.com/room/attackingics2) | | [Attacktive Directory](/en/tryhackme/rooms/attacktivedirectory) | Challenge | 🟢 Free | Attacktive Directory 99% of Corporate networks run off of AD. But can you… | [Open](https://tryhackme.com/room/attacktivedirectory) | | [Aurora EDR](/en/tryhackme/rooms/auroraedr) | Walkthrough | 🔵 VIP | Aurora EDR Familiarise with the use of a Sigma-based EDR tool, Aurora. | [Open](https://tryhackme.com/room/auroraedr) | | [AV Evasion: Shellcode](/en/tryhackme/rooms/avevasionshellcode) | Walkthrough | 🔵 VIP | AV Evasion: Shellcode Learn shellcode encoding, packing, binders, and crypters. | [Open](https://tryhackme.com/room/avevasionshellcode) | | [AVenger](/en/tryhackme/rooms/avenger) | Challenge | 🔵 VIP | AVenger You’ve been asked to exploit all the vulnerabilities present. | [Open](https://tryhackme.com/room/avenger) | | [AWS API Gateway](/en/tryhackme/rooms/awsapigateway) | Walkthrough | 🟢 Free | WebSockets Vulnerabilities | [Open](https://tryhackme.com/room/awsapigateway) | | [AWS IAM Enumeration](/en/tryhackme/rooms/awsiamenumeration) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/awsiamenumeration) | | [AWS IAM Initial Access](/en/tryhackme/rooms/awsiaminitialaccess) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/awsiaminitialaccess) | | [AWS Lambda](/en/tryhackme/rooms/awslambda) | Walkthrough | 🟢 Free | AWS Lambda Learn the security aspects of Amazon's serverless service I'm ready… | [Open](https://tryhackme.com/room/awslambda) | | [AWS S3 - Attack and Defense](/en/tryhackme/rooms/awss3service) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) · WordPress Exploitation | [Open](https://tryhackme.com/room/awss3service) | | [AWS Security Logging](/en/tryhackme/rooms/awssecuritylogging) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/awssecuritylogging) | | [AWS VPC - Attack and Defense](/en/tryhackme/rooms/attackingdefendingvpcs) | Challenge | 🟢 Free | AWS VPC - Attack and Defense Learn the basics of AWS Virtual Private Cloud. | [Open](https://tryhackme.com/room/attackingdefendingvpcs) | | [AWS VPC - Data Exfiltration](/en/tryhackme/rooms/awsvpcdataexfiltration) | Challenge | 🟢 Free | AWS VPC - Data Exfiltration Exercise on compromising an existing VPC. Let's get… | [Open](https://tryhackme.com/room/awsvpcdataexfiltration) | | [Azure DevSecOps](/en/tryhackme/rooms/azuredevsecops) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/azuredevsecops) | | [Azure: Can you GA?](/en/tryhackme/rooms/canyouga) | Walkthrough | 🔵 VIP | Azure: Can you GA? Azure challenge for cloud pentesters: find the attack path… | [Open](https://tryhackme.com/room/canyouga) | | [Azure: Eyes Wide Shut](/en/tryhackme/rooms/eyeswideshut) | Challenge | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/eyeswideshut) | | [Azure: Hoppity Hop](/en/tryhackme/rooms/azhoppityhop) | Challenge | 🔵 VIP | Azure: Hoppity Hop Azure challenge for cloud pentesters: Can you find the… | [Open](https://tryhackme.com/room/azhoppityhop) | | [Backtrack](/en/tryhackme/rooms/backtrack) | Challenge | 🟢 Free | Backtrack Daring to set foot where no one has. What is the content of… | [Open](https://tryhackme.com/room/backtrack) | | [Baselines and Anomalies](/en/tryhackme/rooms/baselineanomalies) | Walkthrough | 🔵 VIP | Baselines and Anomalies Identify normal activity and hunt for anomalies. | [Open](https://tryhackme.com/room/baselineanomalies) | | [Basic Dynamic Analysis](/en/tryhackme/rooms/basicdynamicanalysis) | Walkthrough | 🔵 VIP | Basic Dynamic Analysis Learn how to analyze malware Dynamically by running them… | [Open](https://tryhackme.com/room/basicdynamicanalysis) | | [Basic Malware RE](/en/tryhackme/rooms/basicmalwarere) | Challenge | 🟢 Free | Basic Malware RE This room aims towards helping everyone learn about the basics… | [Open](https://tryhackme.com/room/basicmalwarere) | | [Basic Static Analysis](/en/tryhackme/rooms/staticanalysis1) | Walkthrough | 🔵 VIP | Basic Static Analysis Learn basic malware analysis techniques without running… | [Open](https://tryhackme.com/room/staticanalysis1) | | [battery](/en/tryhackme/rooms/battery) | Challenge | 🟢 Free | battery CTF designed by CTF lover for CTF lovers Base Flag : User Flag : Root… | [Open](https://tryhackme.com/room/battery) | | [Benign](/en/tryhackme/rooms/benign) | Challenge | 🔵 VIP | Benign Challenge room to investigate a compromised host. | [Open](https://tryhackme.com/room/benign) | | [Biblioteca](/en/tryhackme/rooms/biblioteca) | Challenge | 🔵 VIP | Biblioteca Shhh. Be very very quiet, no shouting inside the biblioteca. | [Open](https://tryhackme.com/room/biblioteca) | | [Binary Heaven](/en/tryhackme/rooms/binaryheaven) | Challenge | 🟢 Free | Binary Heaven Let us enjoy the heaven of binaries I've deployed the VM! What is… | [Open](https://tryhackme.com/room/binaryheaven) | | [Biohazard](/en/tryhackme/rooms/biohazard) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/biohazard) | | [biteme](/en/tryhackme/rooms/biteme) | Challenge | 🟢 Free | biteme Stay out of my server! What is the user flag? What is the root flag? | [Open](https://tryhackme.com/room/biteme) | | [Blizzard](/en/tryhackme/rooms/blizzard) | Walkthrough | 🔵 VIP | Blizzard A critical alert was triggered from a sensitive server. You are tasked… | [Open](https://tryhackme.com/room/blizzard) | | [Block](/en/tryhackme/rooms/blockroom) | Challenge | 🟢 Free | Block Encryption? What encryption? What is the username of the first person who… | [Open](https://tryhackme.com/room/blockroom) | | [Blog](/en/tryhackme/rooms/blog) | Challenge | 🟢 Free | WordPress Exploitation | [Open](https://tryhackme.com/room/blog) | | [Boiler CTF](/en/tryhackme/rooms/boilerctf2) | Challenge | 🟢 Free | Boiler CTF Intermediate level CTF File extension after anon login What is on… | [Open](https://tryhackme.com/room/boilerctf2) | | [Boogeyman 2](/en/tryhackme/rooms/boogeyman2) | Challenge | 🔵 VIP | Boogeyman 2 The Boogeyman is back. Are you still afraid of the Boogeyman? | [Open](https://tryhackme.com/room/boogeyman2) | | [Boogeyman 3](/en/tryhackme/rooms/boogeyman3) | Challenge | 🔵 VIP | Boogeyman 3 The Boogeyman emerges from the darkness again. | [Open](https://tryhackme.com/room/boogeyman3) | | [Bookstore](/en/tryhackme/rooms/bookstoreoc) | Challenge | 🟢 Free | Directory fuzzing | [Open](https://tryhackme.com/room/bookstoreoc) | | [Brainstorm](/en/tryhackme/rooms/brainstorm) | Challenge | 🔵 VIP | Brainstorm Reverse engineer a chat program and write a script to exploit a… | [Open](https://tryhackme.com/room/brainstorm) | | [Breaching Active Directory](/en/tryhackme/rooms/breachingad) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/breachingad) | | [Break it](/en/tryhackme/rooms/breakit) | Challenge | 🟢 Free | Break it Can you break the code? \[Super easy] MVQXG6K7MJQXGZJTGI====== \[Easy]… | [Open](https://tryhackme.com/room/breakit) | | [Breaking RSA](/en/tryhackme/rooms/breakrsa) | Challenge | 🟢 Free | Breaking RSA Hop in and break poorly implemented RSA using Fermat's… | [Open](https://tryhackme.com/room/breakrsa) | | [Breakme](/en/tryhackme/rooms/breakmenu) | Challenge | 🟢 Free | Breakme Break this secure system and get the flags, if you can. What is the… | [Open](https://tryhackme.com/room/breakmenu) | | [Brim](/en/tryhackme/rooms/brim) | Walkthrough | 🔵 VIP | Brim Learn and practice log investigation, pcap analysis and threat hunting… | [Open](https://tryhackme.com/room/brim) | | [broker](/en/tryhackme/rooms/broker) | Challenge | 🟢 Free | broker Paul and Max use a rather unconventional way to chat. They do not seem… | [Open](https://tryhackme.com/room/broker) | | [Brute](/en/tryhackme/rooms/ettubrute) | Challenge | 🔵 VIP | Brute You as well, Brutus? | [Open](https://tryhackme.com/room/ettubrute) | | [Burp Suite: Intruder](/en/tryhackme/rooms/burpsuiteintruder) | Walkthrough | 🔵 VIP | Burp Suite: Intruder Learn how to use Intruder to automate requests in Burp… | [Open](https://tryhackme.com/room/burpsuiteintruder) | | [Bypassing UAC](/en/tryhackme/rooms/bypassinguac) | Walkthrough | 🟢 Free | Bypassing UAC Learn common ways to bypass User Account Control (UAC) in Windows… | [Open](https://tryhackme.com/room/bypassinguac) | | [C2 Detection - Command & Carol](/en/tryhackme/rooms/detecting-c2-with-rita-aoc2025-m9n2b5v8c1) | Walkthrough | 🟢 Free | C2 Detection - Command & Carol Explore how to analyze a large PCAP and extract… | [Open](https://tryhackme.com/room/detecting-c2-with-rita-aoc2025-m9n2b5v8c1) | | [Cactus](/en/tryhackme/rooms/cactus) | Walkthrough | 🟢 Free | Cactus Bypass authentication and execute commands remotely on Cacti using… | [Open](https://tryhackme.com/room/cactus) | | [CAPTCHApocalypse](/en/tryhackme/rooms/captchapocalypse) | Challenge | 🔵 VIP | CAPTCHApocalypse When crypto interferes, automate. | [Open](https://tryhackme.com/room/captchapocalypse) | | [Carnage](/en/tryhackme/rooms/c2carnage) | Challenge | 🟢 Free | Carnage Apply your analytical skills to analyze the malicious network traffic… | [Open](https://tryhackme.com/room/c2carnage) | | [Chronicle](/en/tryhackme/rooms/chronicle) | Challenge | 🟢 Free | Chronicle Part of Incognito CTF user.txt root.txt | [Open](https://tryhackme.com/room/chronicle) | | [CI/CD and Build Security](/en/tryhackme/rooms/cicdandbuildsecurity) | Challenge | 🔵 VIP | CI/CD and Build Security Learn about CI/CD and build principles to safeguard… | [Open](https://tryhackme.com/room/cicdandbuildsecurity) | | [Classic Passwd](/en/tryhackme/rooms/classicpasswd) | Challenge | 🟢 Free | Classic Passwd Practice your skills in reversing and get the flag bypassing the… | [Open](https://tryhackme.com/room/classicpasswd) | | [Clocky](/en/tryhackme/rooms/clocky) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/clocky) | | [Cloud-based IaC](/en/tryhackme/rooms/cloudbasediac) | Walkthrough | 🔵 VIP | Cloud-based IaC Learn about infrastructure as code (IaC) using tools for cloud… | [Open](https://tryhackme.com/room/cloudbasediac) | | [Cluster Hardening](/en/tryhackme/rooms/clusterhardening) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/clusterhardening) | | [CMesS](/en/tryhackme/rooms/cmess) | Challenge | 🟢 Free | Directory fuzzing | [Open](https://tryhackme.com/room/cmess) | | [CMSpit](/en/tryhackme/rooms/cmspit) | Challenge | 🟢 Free | CMSpit This is a machine that allows you to practise web app hacking and… | [Open](https://tryhackme.com/room/cmspit) | | [Cold VVars](/en/tryhackme/rooms/coldvvars) | Challenge | 🟢 Free | Cold VVars Part of Incognito CTF User.txt The PATH may sometimes make a cross.… | [Open](https://tryhackme.com/room/coldvvars) | | [ContainMe](/en/tryhackme/rooms/containme1) | Challenge | 🟢 Free | ContainMe Where am I ? Catch me Read me and move onto the next task for the… | [Open](https://tryhackme.com/room/containme1) | | [ContAInment](/en/tryhackme/rooms/containment) | Challenge | 🟢 Free | ContAInment Can you help contain the ransomware threat with the help of AI? Can… | [Open](https://tryhackme.com/room/containment) | | [Content Security Policy](/en/tryhackme/rooms/csp) | Walkthrough | 🔵 VIP | Content Security Policy In this room you'll learn what CSP is, what it's used… | [Open](https://tryhackme.com/room/csp) | | [Conti](/en/tryhackme/rooms/contiransomwarehgh) | Challenge | 🟢 Free | IIS (Microsoft Web Server) | [Open](https://tryhackme.com/room/contiransomwarehgh) | | [ConvertMyVideo](/en/tryhackme/rooms/convertmyvideo) | Challenge | 🟢 Free | ConvertMyVideo My Script to convert videos to MP3 is super secure What is the… | [Open](https://tryhackme.com/room/convertmyvideo) | | [Cooctus Stories](/en/tryhackme/rooms/cooctusadventures) | Challenge | 🟢 Free | Cooctus Stories This room is about the Cooctus Clan Paradox is nomming cookies… | [Open](https://tryhackme.com/room/cooctusadventures) | | [Corp Website](/en/tryhackme/rooms/lafb2026e7) | Challenge | 🟢 Free | Corp Website lafb2026-e7 What is the user flag? What is the root flag? | [Open](https://tryhackme.com/room/lafb2026e7) | | [Crack The Hash Level 2](/en/tryhackme/rooms/crackthehashlevel2) | Challenge | 🟢 Free | Cracking Hashes (hashcat / John) · Directory fuzzing | [Open](https://tryhackme.com/room/crackthehashlevel2) | | [Credentials Harvesting](/en/tryhackme/rooms/credharvesting) | Walkthrough | 🔵 VIP | Credentials Harvesting Apply current authentication models employed in modern… | [Open](https://tryhackme.com/room/credharvesting) | | [Crylo](/en/tryhackme/rooms/crylo4a) | Walkthrough | 🟢 Free | Crylo Learn about the CryptoJS library and JavaScript-based client-side… | [Open](https://tryhackme.com/room/crylo4a) | | [Crypto Failures](/en/tryhackme/rooms/cryptofailures) | Challenge | 🟢 Free | Crypto Failures Implementing your own military-grade encryption is usually not… | [Open](https://tryhackme.com/room/cryptofailures) | | [CTF collection Vol.2](/en/tryhackme/rooms/ctfcollectionvol2) | Challenge | 🟢 Free | SQL Injection | [Open](https://tryhackme.com/room/ctfcollectionvol2) | | [CVE-2023-38408](/en/tryhackme/rooms/cve202338408) | Walkthrough | 🟢 Free | CVE-2023-38408 Learn how to move laterally abusing libraries' side effects in… | [Open](https://tryhackme.com/room/cve202338408) | | [Cyber Kill Chain](/en/tryhackme/rooms/cyberkillchain) | Walkthrough | 🟢 Free | Cyber Kill Chain Explore the Cyber Kill Chain by Lockheed Martin. | [Open](https://tryhackme.com/room/cyberkillchain) | | [CyberCrafted](/en/tryhackme/rooms/cybercrafted) | Challenge | 🟢 Free | CyberCrafted Pwn this pay-to-win Minecraft server! | [Open](https://tryhackme.com/room/cybercrafted) | | [Data Integrity & Model Poisoning](/en/tryhackme/rooms/modelpoisoning) | Walkthrough | 🔵 VIP | Data Integrity & Model Poisoning Understand how supply chain and model… | [Open](https://tryhackme.com/room/modelpoisoning) | | [Debug](/en/tryhackme/rooms/debug) | Challenge | 🟢 Free | Insecure Deserialization | [Open](https://tryhackme.com/room/debug) | | [Decryptify](/en/tryhackme/rooms/decryptify) | Challenge | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/decryptify) | | [Defending Adversarial Attacks](/en/tryhackme/rooms/defadversarialattacks) | Walkthrough | 🔵 VIP | Defending Adversarial Attacks Learn defence mechanisms to harden machine… | [Open](https://tryhackme.com/room/defadversarialattacks) | | [Detecting AD Initial Access](/en/tryhackme/rooms/detectingadinitialaccess) | Walkthrough | 🔵 VIP | IIS (Microsoft Web Server) | [Open](https://tryhackme.com/room/detectingadinitialaccess) | | [Detecting AD Lateral Movement](/en/tryhackme/rooms/detectingadlateralmovement) | Walkthrough | 🔵 VIP | SMB (139/445) | [Open](https://tryhackme.com/room/detectingadlateralmovement) | | [Detecting Adversarial Attacks](/en/tryhackme/rooms/idadversarialattacks) | Walkthrough | 🔵 VIP | Detecting Adversarial Attacks Learn how to identify and analyse adversarial… | [Open](https://tryhackme.com/room/idadversarialattacks) | | [Develpy](/en/tryhackme/rooms/bsidesgtdevelpy) | Challenge | 🟢 Free | Develpy boot2root machine for FIT and bsides Guatemala CTF | [Open](https://tryhackme.com/room/bsidesgtdevelpy) | | [Devie](/en/tryhackme/rooms/devie) | Challenge | 🔵 VIP | Devie A developer has asked you to do a vulnerability check on their system. | [Open](https://tryhackme.com/room/devie) | | [Dissecting PE Headers](/en/tryhackme/rooms/dissectingpeheaders) | Walkthrough | 🟢 Free | Dissecting PE Headers Learn about Portable Executable files and how their… | [Open](https://tryhackme.com/room/dissectingpeheaders) | | [DLL HIJACKING](/en/tryhackme/rooms/dllhijacking) | Walkthrough | 🟢 Free | DLL HIJACKING DLL HIJACKING with Invoke-PrintDemon Read the above Deploy DLL… | [Open](https://tryhackme.com/room/dllhijacking) | | [DockMagic](/en/tryhackme/rooms/dockmagic) | Challenge | 🔵 VIP | DockMagic In a land of magic, a wizard escaped from his confinement and embarks… | [Open](https://tryhackme.com/room/dockmagic) | | [Dodge](/en/tryhackme/rooms/dodge) | Challenge | 🔵 VIP | Port Forwarding / Pivoting | [Open](https://tryhackme.com/room/dodge) | | [dogcat](/en/tryhackme/rooms/dogcat) | Challenge | 🟢 Free | Local File Inclusion (LFI) | [Open](https://tryhackme.com/room/dogcat) | | [Dumping Router Firmware](/en/tryhackme/rooms/rfirmware) | Walkthrough | 🟢 Free | Steganography (Stego) · SMB (139/445) | [Open](https://tryhackme.com/room/rfirmware) | | [Dunkle Materie](/en/tryhackme/rooms/dunklematerieptxc9) | Challenge | 🟢 Free | Dunkle Materie Investigate the ransomware attack using ProcDOT. Provide the two… | [Open](https://tryhackme.com/room/dunklematerieptxc9) | | [DX1: Liberty Island](/en/tryhackme/rooms/dx1libertyislandplde) | Challenge | 🔵 VIP | DX1: Liberty Island Can you help the NSF get a foothold in UNATCO's system? | [Open](https://tryhackme.com/room/dx1libertyislandplde) | | [Dynamic Analysis: Debugging](/en/tryhackme/rooms/advanceddynamicanalysis) | Walkthrough | 🔵 VIP | Dynamic Analysis: Debugging Learn more advanced techniques of dynamic malware… | [Open](https://tryhackme.com/room/advanceddynamicanalysis) | | [Eavesdropper](/en/tryhackme/rooms/eavesdropper) | Challenge | 🟢 Free | Eavesdropper Listen closely, you might hear a password! | [Open](https://tryhackme.com/room/eavesdropper) | | [Elastic: Query Languages](/en/tryhackme/rooms/advancedelkqueries) | Walkthrough | 🔵 VIP | Elastic: Query Languages Search large datasets efficiently with advanced… | [Open](https://tryhackme.com/room/advancedelkqueries) | | [Empline](/en/tryhackme/rooms/empline) | Challenge | 🟢 Free | Empline Are you good enough to apply for this job? | [Open](https://tryhackme.com/room/empline) | | [Encryption - Crypto 101](/en/tryhackme/rooms/encryptioncrypto101) | Walkthrough | 🟢 Free | Encryption - Crypto 101 An introduction to encryption, as part of a series on… | [Open](https://tryhackme.com/room/encryptioncrypto101) | | [Entra ID Monitoring](/en/tryhackme/rooms/entraidmonitoring) | Walkthrough | 🟢 Free | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/entraidmonitoring) | | [Enumerating Active Directory](/en/tryhackme/rooms/adenumeration) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/adenumeration) | | [Evading Logging and Monitoring](/en/tryhackme/rooms/monitoringevasion) | Walkthrough | 🔵 VIP | Evading Logging and Monitoring Learn how to bypass common logging and system… | [Open](https://tryhackme.com/room/monitoringevasion) | | [ExfilNode](/en/tryhackme/rooms/exfilnode) | Challenge | 🔵 VIP | ExfilNode Continue hunting for the exfiltration footprints in the ex-employee's… | [Open](https://tryhackme.com/room/exfilnode) | | [Exploiting Active Directory](/en/tryhackme/rooms/exploitingad) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/exploitingad) | | [EXT Analysis](/en/tryhackme/rooms/extanalysis) | Walkthrough | 🔵 VIP | EXT Analysis Discover the forensic basics of the EXT file system. | [Open](https://tryhackme.com/room/extanalysis) | | [Extracted](/en/tryhackme/rooms/extractedroom) | Challenge | 🟢 Free | Extracted We need your help! What's the initial part of the password? Find the… | [Open](https://tryhackme.com/room/extractedroom) | | [Farewell](/en/tryhackme/rooms/farewell) | Challenge | 🔵 VIP | Farewell Use red-teaming techniques to bypass the WAF and obtain admin access… | [Open](https://tryhackme.com/room/farewell) | | [File Carving](/en/tryhackme/rooms/filecarving) | Walkthrough | 🔵 VIP | File Carving Learn about the forensic technique known as file carving. | [Open](https://tryhackme.com/room/filecarving) | | [File Inclusion](/en/tryhackme/rooms/fileinc) | Walkthrough | 🔵 VIP | Remote File Inclusion (RFI) · Local File Inclusion (LFI) · Directory / Path Traversal | [Open](https://tryhackme.com/room/fileinc) | | [File Inclusion, Path Traversal](/en/tryhackme/rooms/filepathtraversal) | Walkthrough | 🔵 VIP | Directory / Path Traversal | [Open](https://tryhackme.com/room/filepathtraversal) | | [Fixit](/en/tryhackme/rooms/fixit) | Walkthrough | 🔵 VIP | Fixit Fix the log parsing issue and analyze the logs in Splunk. | [Open](https://tryhackme.com/room/fixit) | | [Forensics - Registry Furensics](/en/tryhackme/rooms/registry-forensics-aoc2025-h6k9j2l5p8) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/registry-forensics-aoc2025-h6k9j2l5p8) | | [Forgotten Implant](/en/tryhackme/rooms/forgottenimplant) | Challenge | 🟢 Free | Forgotten Implant With almost no attack surface, you must use a forgotten C2… | [Open](https://tryhackme.com/room/forgottenimplant) | | [Fortress](/en/tryhackme/rooms/fortress) | Challenge | 🟢 Free | Fortress Hack this machine and reclaim the fortress from the Evil Overlord! | [Open](https://tryhackme.com/room/fortress) | | [Frank & Herby make an app](/en/tryhackme/rooms/frankandherby) | Challenge | 🟢 Free | Frank & Herby make an app Learn how the misconfiguration of containers can lead… | [Open](https://tryhackme.com/room/frankandherby) | | [Frank and Herby try again.....](/en/tryhackme/rooms/frankandherbytryagain) | Challenge | 🟢 Free | Frank and Herby try again..... Frank and Herby still don't know how to use… | [Open](https://tryhackme.com/room/frankandherbytryagain) | | [Friday Overtime](/en/tryhackme/rooms/fridayovertime) | Challenge | 🔵 VIP | Friday Overtime Step into the shoes of a Cyber Threat Intelligence Analyst and… | [Open](https://tryhackme.com/room/fridayovertime) | | [Gatekeeper](/en/tryhackme/rooms/gatekeeper) | Challenge | 🟢 Free | Gatekeeper Can you get past the gate and through the fire? | [Open](https://tryhackme.com/room/gatekeeper) | | [GeoServer: CVE-2025-58360](/en/tryhackme/rooms/geoservercve202558360) | Walkthrough | 🟢 Free | XML External Entity | [Open](https://tryhackme.com/room/geoservercve202558360) | | [Ghizer](/en/tryhackme/rooms/ghizerctf) | Challenge | 🟢 Free | Ghizer lucrecia has installed multiple web applications on the server. | [Open](https://tryhackme.com/room/ghizerctf) | | [GitLab CVE-2023-7028](/en/tryhackme/rooms/gitlabcve20237028) | Walkthrough | 🟢 Free | GitLab CVE-2023-7028 Learn to exploit a GitLab instance using CVE-2023-7028 and… | [Open](https://tryhackme.com/room/gitlabcve20237028) | | [GoldenEye](/en/tryhackme/rooms/goldeneye) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/goldeneye) | | [HA Joker CTF](/en/tryhackme/rooms/jokerctf) | Challenge | 🟢 Free | Brute Force / Rate-Limit Bypass · Directory fuzzing · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/jokerctf) | | [Hack Smarter Security](/en/tryhackme/rooms/hacksmartersecurity) | Challenge | 🟢 Free | Hack Smarter Security Can you hack the hackers? What is user.txt? Which… | [Open](https://tryhackme.com/room/hacksmartersecurity) | | [hackerNote](/en/tryhackme/rooms/hackernote) | Walkthrough | 🟢 Free | hackerNote A custom webapp, introducing username enumeration, custom wordlists… | [Open](https://tryhackme.com/room/hackernote) | | [HackPark](/en/tryhackme/rooms/hackpark) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/hackpark) | | [Hamlet](/en/tryhackme/rooms/hamlet) | Challenge | 🟢 Free | Hamlet A Shakespeare/Hamlet-inspired room in which you will explore an uncommon… | [Open](https://tryhackme.com/room/hamlet) | | [Hammer](/en/tryhackme/rooms/hammer) | Challenge | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/hammer) | | [harder](/en/tryhackme/rooms/harder) | Challenge | 🟢 Free | harder Real pentest findings combined Hack the machine and obtain the user Flag… | [Open](https://tryhackme.com/room/harder) | | [HaskHell](/en/tryhackme/rooms/haskhell) | Challenge | 🟢 Free | HaskHell Teach your CS professor that his PhD isn't in security. Get the flag… | [Open](https://tryhackme.com/room/haskhell) | | [Heist](/en/tryhackme/rooms/hfb1heist) | Challenge | 🔵 VIP | Heist From the Hackfinity Battle CTF event. | [Open](https://tryhackme.com/room/hfb1heist) | | [Hip Flask](/en/tryhackme/rooms/hipflask) | Walkthrough | 🟢 Free | DNS zone transfer · SSTI (Server-Side Template Injection) · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/hipflask) | | [Hunt Me I: Payment Collectors](/en/tryhackme/rooms/paymentcollectors) | Walkthrough | 🔵 VIP | Hunt Me I: Payment Collectors A Finance Director was recently phished. Can you… | [Open](https://tryhackme.com/room/paymentcollectors) | | [Hunt Me II: Typo Squatters](/en/tryhackme/rooms/typosquatters) | Walkthrough | 🔵 VIP | Hunt Me II: Typo Squatters One of your software developers unknowingly… | [Open](https://tryhackme.com/room/typosquatters) | | [IAM Credentials](/en/tryhackme/rooms/iamcredentials) | Challenge | 🟢 Free | IAM Credentials Learn how IAM handles credentials for authentication to AWS… | [Open](https://tryhackme.com/room/iamcredentials) | | [IAM Permissions](/en/tryhackme/rooms/iampermissions) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/iampermissions) | | [IAM Principals](/en/tryhackme/rooms/iamprincipals) | Walkthrough | 🟢 Free | IAM Principals An overview of the different types of actors in IAM Let's get… | [Open](https://tryhackme.com/room/iamprincipals) | | [Identification & Scoping](/en/tryhackme/rooms/identificationandscoping) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/identificationandscoping) | | [Incident Handling With Splunk](/en/tryhackme/rooms/splunk201) | Walkthrough | 🔵 VIP | Incident Handling With Splunk Learn to use Splunk for incident handling through… | [Open](https://tryhackme.com/room/splunk201) | | [Incident Response Process](/en/tryhackme/rooms/incidentresponseprocess) | Walkthrough | 🟢 Free | Incident Response Process Practice the NIST Incident Response lifecycle steps… | [Open](https://tryhackme.com/room/incidentresponseprocess) | | [Include](/en/tryhackme/rooms/include) | Challenge | 🔵 VIP | Include Use your server exploitation skills to take control of a web app. | [Open](https://tryhackme.com/room/include) | | [Inferno](/en/tryhackme/rooms/inferno) | Challenge | 🟢 Free | Inferno Real Life machine + CTF. The machine is designed to be real-life (maybe… | [Open](https://tryhackme.com/room/inferno) | | [Injectics](/en/tryhackme/rooms/injectics) | Challenge | 🔵 VIP | Injectics Use your injection skills to take control of a web app. | [Open](https://tryhackme.com/room/injectics) | | [Insecure Deserialisation](/en/tryhackme/rooms/insecuredeserialisation) | Walkthrough | 🟢 Free | Insecure Deserialisation Get in-depth knowledge of the deserialisation process… | [Open](https://tryhackme.com/room/insecuredeserialisation) | | [Intranet](/en/tryhackme/rooms/securesolacodersintra) | Challenge | 🔵 VIP | Intranet Welcome to the intranet! | [Open](https://tryhackme.com/room/securesolacodersintra) | | [Intro to C2](/en/tryhackme/rooms/introtoc2) | Walkthrough | 🔵 VIP | Intro to C2 Master C2 essentials to boost your Red Team skills and streamline… | [Open](https://tryhackme.com/room/introtoc2) | | [Intro to Credential Harvesting](/en/tryhackme/rooms/introtocredentialharvesting) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/introtocredentialharvesting) | | [Intro to Malware Analysis](/en/tryhackme/rooms/intromalwareanalysis) | Walkthrough | 🔵 VIP | Intro to Malware Analysis What to do when you run into a suspected malware. | [Open](https://tryhackme.com/room/intromalwareanalysis) | | [Intro to Threat Emulation](/en/tryhackme/rooms/threatemulationintro) | Walkthrough | 🟢 Free | Intro to Threat Emulation A look into threat emulation practices as a means of… | [Open](https://tryhackme.com/room/threatemulationintro) | | [Introduction To Honeypots](/en/tryhackme/rooms/introductiontohoneypots) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/introductiontohoneypots) | | [Introduction to SOAR](/en/tryhackme/rooms/soar) | Walkthrough | 🔵 VIP | Introduction to SOAR Learn the concepts and methodology surrounding security… | [Open](https://tryhackme.com/room/soar) | | [Intrusion Detection](/en/tryhackme/rooms/idsevasion) | Walkthrough | 🟢 Free | linPEAS | [Open](https://tryhackme.com/room/idsevasion) | | [Investigating Windows 2.0](/en/tryhackme/rooms/investigatingwindows2) | Challenge | 🟢 Free | Investigating Windows 2.0 In the previous challenge you performed a brief… | [Open](https://tryhackme.com/room/investigatingwindows2) | | [Investigating Windows 3.x](/en/tryhackme/rooms/investigatingwindows3) | Challenge | 🟢 Free | Investigating Windows 3.x Find the artifacts resident on the endpoint and sift… | [Open](https://tryhackme.com/room/investigatingwindows3) | | [IP and Domain Threat Intel](/en/tryhackme/rooms/ipanddomainthreatintel) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/ipanddomainthreatintel) | | [IR Timeline Analysis](/en/tryhackme/rooms/dfirtimelineanalysis) | Walkthrough | 🟢 Free | USB forensics · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/dfirtimelineanalysis) | | [IronShade](/en/tryhackme/rooms/ironshade) | Challenge | 🔵 VIP | IronShade Perform a compromise assessment on a Linux host and identify the… | [Open](https://tryhackme.com/room/ironshade) | | [ItsyBitsy](/en/tryhackme/rooms/itsybitsy) | Challenge | 🔵 VIP | ItsyBitsy Put your ELK knowledge together and investigate an incident. | [Open](https://tryhackme.com/room/itsybitsy) | | [Jacob the Boss](/en/tryhackme/rooms/jacobtheboss) | Challenge | 🟢 Free | Jacob the Boss Find a way in and learn a little more. user.txt root.txt | [Open](https://tryhackme.com/room/jacobtheboss) | | [JavaScript: Simple Demo](/en/tryhackme/rooms/javascriptsimpledemo) | Walkthrough | 🔵 VIP | JavaScript: Simple Demo Explore what a basic JavaScript program looks like. | [Open](https://tryhackme.com/room/javascriptsimpledemo) | | [Joomify: CVE-2023-23752](/en/tryhackme/rooms/joomify) | Walkthrough | 🟢 Free | Joomify: CVE-2023-23752 Learn how to exploit a Joomla CMS using CVE-2023-23752… | [Open](https://tryhackme.com/room/joomify) | | [Juicy](/en/tryhackme/rooms/juicy) | Challenge | 🔵 VIP | Juicy A friendly golden retriever who answers your questions. | [Open](https://tryhackme.com/room/juicy) | | [K8s Best Security Practices](/en/tryhackme/rooms/k8sbestsecuritypractices) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/k8sbestsecuritypractices) | | [K8s Runtime Security](/en/tryhackme/rooms/k8sruntimesecurity) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/k8sruntimesecurity) | | [KaffeeSec - SoMeSINT](/en/tryhackme/rooms/somesint) | Walkthrough | 🟢 Free | KaffeeSec - SoMeSINT An intro to SOCMINT (Social Media… | [Open](https://tryhackme.com/room/somesint) | | [KAPE](/en/tryhackme/rooms/kape) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/kape) | | [Keldagrim](/en/tryhackme/rooms/keldagrim) | Challenge | 🔵 VIP | Keldagrim The dwarves are hiding their gold! | [Open](https://tryhackme.com/room/keldagrim) | | [Kitty](/en/tryhackme/rooms/kitty) | Challenge | 🟢 Free | Kitty Map? Where we are going, we don't need maps. What is the user flag? What… | [Open](https://tryhackme.com/room/kitty) | | [KoTH Hackers](/en/tryhackme/rooms/kothhackers) | Challenge | 🟢 Free | KoTH Hackers The Hackers KoTH box, to allow you to practice alone! Capture all… | [Open](https://tryhackme.com/room/kothhackers) | | [KQL (Kusto): Advanced Queries](/en/tryhackme/rooms/kqlkustoadvancedqueries) | Walkthrough | 🔵 VIP | KQL (Kusto): Advanced Queries Learn about advanced KQL queries and how to… | [Open](https://tryhackme.com/room/kqlkustoadvancedqueries) | | [Kubernetes for Everyone](/en/tryhackme/rooms/kubernetesforyouly) | Challenge | 🟢 Free | Kubernetes for Everyone A Kubernetes hacking challenge for DevOps/SRE… | [Open](https://tryhackme.com/room/kubernetesforyouly) | | [Lambda - Data Exfiltration](/en/tryhackme/rooms/lambdadataexfiltration) | Walkthrough | 🟢 Free | Lambda - Data Exfiltration Try your hand and compromising Lambda functions to… | [Open](https://tryhackme.com/room/lambdadataexfiltration) | | [Legal Considerations in DFIR](/en/tryhackme/rooms/dfirprocesslegalconsiderations) | Walkthrough | 🟢 Free | USB forensics · IIS (Microsoft Web Server) | [Open](https://tryhackme.com/room/dfirprocesslegalconsiderations) | | [Length Extension Attacks](/en/tryhackme/rooms/lengthextensionattacks) | Walkthrough | 🔵 VIP | Length Extension Attacks Learn how hash functions enable attackers to extend… | [Open](https://tryhackme.com/room/lengthextensionattacks) | | [Linux Agency](/en/tryhackme/rooms/linuxagency) | Walkthrough | 🟢 Free | Linux Agency This Room will help you to sharpen your Linux Skills and help you… | [Open](https://tryhackme.com/room/linuxagency) | | [Linux Forensics](/en/tryhackme/rooms/linuxforensics) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/linuxforensics) | | [Linux Function Hooking](/en/tryhackme/rooms/linuxfunctionhooking) | Walkthrough | 🟢 Free | Linux Function Hooking Learn about function hooking in Linux and have fun… | [Open](https://tryhackme.com/room/linuxfunctionhooking) | | [Linux Live Analysis](/en/tryhackme/rooms/linuxliveanalysis) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/linuxliveanalysis) | | [Linux Logs Investigations](/en/tryhackme/rooms/linuxlogsinvestigations) | Walkthrough | 🔵 VIP | Linux Logs Investigations Explore Linux system logs for effective incident… | [Open](https://tryhackme.com/room/linuxlogsinvestigations) | | [Linux Memory Analysis](/en/tryhackme/rooms/linuxmemoryanalysis) | Walkthrough | 🔵 VIP | Linux Memory Analysis Learn how to investigate and find the footprints of a… | [Open](https://tryhackme.com/room/linuxmemoryanalysis) | | [Linux PrivEsc](/en/tryhackme/rooms/linuxprivesc) | Walkthrough | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/linuxprivesc) | | [Linux PrivEsc Arena](/en/tryhackme/rooms/linuxprivescarena) | Walkthrough | 🟢 Free | SUID binaries | [Open](https://tryhackme.com/room/linuxprivescarena) | | [Linux Server Forensics](/en/tryhackme/rooms/linuxserverforensics) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/linuxserverforensics) | | [Linux System Hardening](/en/tryhackme/rooms/linuxsystemhardening) | Walkthrough | 🔵 VIP | Linux System Hardening Learn how to improve the security posture of your Linux… | [Open](https://tryhackme.com/room/linuxsystemhardening) | | [Linux Threat Detection 1](/en/tryhackme/rooms/linuxthreatdetection1) | Walkthrough | 🟢 Free | Linux Threat Detection 1 Explore how attackers break into Linux systems and how… | [Open](https://tryhackme.com/room/linuxthreatdetection1) | | [Linux Threat Detection 3](/en/tryhackme/rooms/linuxthreatdetection3) | Walkthrough | 🔵 VIP | Linux Threat Detection 3 Cover the last stages of attacks on Linux and learn… | [Open](https://tryhackme.com/room/linuxthreatdetection3) | | [LocalPotato](/en/tryhackme/rooms/localpotato) | Walkthrough | 🟢 Free | LocalPotato Learn how to elevate your privileges on Windows using LocalPotato… | [Open](https://tryhackme.com/room/localpotato) | | [Lockdown](/en/tryhackme/rooms/lockdown) | Challenge | 🟢 Free | Lockdown Stay at 127.0.0.1. Wear a 255.255.255.0. | [Open](https://tryhackme.com/room/lockdown) | | [Log Analysis with SIEM](/en/tryhackme/rooms/loganalysiswithsiem) | Walkthrough | 🟢 Free | Log Analysis with SIEM Learn how SIEM solutions can be used to detect and… | [Open](https://tryhackme.com/room/loganalysiswithsiem) | | [Logless Hunt](/en/tryhackme/rooms/loglesshunt) | Walkthrough | 🔵 VIP | Logless Hunt Detect every attack step on a Windows machine even after threat… | [Open](https://tryhackme.com/room/loglesshunt) | | [Looking Glass](/en/tryhackme/rooms/lookingglass) | Challenge | 🟢 Free | Looking Glass Step through the looking glass. A sequel to the Wonderland… | [Open](https://tryhackme.com/room/lookingglass) | | [Looney Tunables](/en/tryhackme/rooms/looneytunes) | Walkthrough | 🟢 Free | Looney Tunables CVE-2023-4911: That's all Sec-Folks! | [Open](https://tryhackme.com/room/looneytunes) | | [Lumberjack Turtle](/en/tryhackme/rooms/lumberjackturtle) | Challenge | 🟢 Free | Lumberjack Turtle No logs, no crime... so says the lumberjack. | [Open](https://tryhackme.com/room/lumberjackturtle) | | [Lunizz CTF](/en/tryhackme/rooms/lunizzctfnd) | Challenge | 🟢 Free | Lunizz CTF Lunizz CTF | [Open](https://tryhackme.com/room/lunizzctfnd) | | [Madeye's Castle](/en/tryhackme/rooms/madeyescastle) | Challenge | 🟢 Free | Madeye's Castle A boot2root box that is modified from a box used in CuCTF by… | [Open](https://tryhackme.com/room/madeyescastle) | | [MalBuster](/en/tryhackme/rooms/malbuster) | Walkthrough | 🔵 VIP | MalBuster You are tasked to analyse unknown malware samples detected by your… | [Open](https://tryhackme.com/room/malbuster) | | [MalDoc: Static Analysis](/en/tryhackme/rooms/maldoc) | Walkthrough | 🔵 VIP | MalDoc: Static Analysis Perform detailed Static Analysis on malicious documents. | [Open](https://tryhackme.com/room/maldoc) | | [Masterminds](/en/tryhackme/rooms/mastermindsxlq) | Challenge | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/mastermindsxlq) | | [Message to Garcia](/en/tryhackme/rooms/messagetogarcia) | Challenge | 🔵 VIP | Message to Garcia Encryption and Key Management Challenge. | [Open](https://tryhackme.com/room/messagetogarcia) | | [Metamorphosis](/en/tryhackme/rooms/metamorphosis) | Challenge | 🟢 Free | Metamorphosis Part of Incognito CTF user.txt root.txt | [Open](https://tryhackme.com/room/metamorphosis) | | [Mindgames](/en/tryhackme/rooms/mindgames) | Challenge | 🟢 Free | Mindgames Just a terrible idea... User flag. user.txt Root flag. /root/root.txt | [Open](https://tryhackme.com/room/mindgames) | | [Minotaur's Labyrinth](/en/tryhackme/rooms/labyrinth8llv) | Challenge | 🟢 Free | Minotaur's Labyrinth The Minotaur threw a fit and captured some people in the… | [Open](https://tryhackme.com/room/labyrinth8llv) | | [MISP](/en/tryhackme/rooms/misp) | Walkthrough | 🔵 VIP | MISP Walkthrough on the use of MISP as a Threat Sharing Platform | [Open](https://tryhackme.com/room/misp) | | [MITRE](/en/tryhackme/rooms/mitre) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/mitre) | | [Mnemonic](/en/tryhackme/rooms/mnemonic) | Challenge | 🟢 Free | Mnemonic I hope you have fun. How many open ports? what is the ssh port number?… | [Open](https://tryhackme.com/room/mnemonic) | | [Monitoring AWS Logins](/en/tryhackme/rooms/monitoringawslogins) | Walkthrough | 🔵 VIP | Monitoring AWS Logins Explore AWS authentication, common IAM threats, and SIEM… | [Open](https://tryhackme.com/room/monitoringawslogins) | | [Monitoring AWS Services](/en/tryhackme/rooms/monitoringawsservices) | Walkthrough | 🔵 VIP | Monitoring AWS Services Discover common attacks on AWS services and learn how… | [Open](https://tryhackme.com/room/monitoringawsservices) | | [Monitoring AWS Workloads](/en/tryhackme/rooms/monitoringawsworkloads) | Walkthrough | 🔵 VIP | Monitoring AWS Workloads Learn how apps run in AWS and what you should know to… | [Open](https://tryhackme.com/room/monitoringawsworkloads) | | [Mr Robot CTF](/en/tryhackme/rooms/mrrobot) | Challenge | 🟢 Free | Mr Robot CTF Based on the Mr. Robot show, can you root this box? | [Open](https://tryhackme.com/room/mrrobot) | | [NahamStore](/en/tryhackme/rooms/nahamstore) | Challenge | 🟢 Free | CSRF (Cross-Site Request Forgery) · Local File Inclusion (LFI) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) · XML External Entity | [Open](https://tryhackme.com/room/nahamstore) | | [NanoCherryCTF](/en/tryhackme/rooms/nanocherryctf) | Challenge | 🔵 VIP | NanoCherryCTF Explore a double-sided site and escalate to root! | [Open](https://tryhackme.com/room/nanocherryctf) | | [Napping](/en/tryhackme/rooms/nappingis1337) | Challenge | 🔵 VIP | Napping Even Admins can fall asleep on the job | [Open](https://tryhackme.com/room/nappingis1337) | | [NerdHerd](/en/tryhackme/rooms/nerdherd) | Challenge | 🟢 Free | NerdHerd Hack your way into this easy/medium level legendary TV series "Chuck"… | [Open](https://tryhackme.com/room/nerdherd) | | [Net Sec Challenge](/en/tryhackme/rooms/netsecchallenge) | Challenge | 🔵 VIP | Net Sec Challenge Practice the skills you have learned in the Network Security… | [Open](https://tryhackme.com/room/netsecchallenge) | | [Network Discovery Detection](/en/tryhackme/rooms/networkdiscoverydetection) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/networkdiscoverydetection) | | [Network Security Protocols](/en/tryhackme/rooms/networksecurityprotocols) | Walkthrough | 🔵 VIP | Network Security Protocols Learn about secure network protocols at the… | [Open](https://tryhackme.com/room/networksecurityprotocols) | | [New Hire Old Artifacts](/en/tryhackme/rooms/newhireoldartifacts) | Challenge | 🔵 VIP | New Hire Old Artifacts Investigate the intrusion attack using Splunk. | [Open](https://tryhackme.com/room/newhireoldartifacts) | | [New York Flankees](/en/tryhackme/rooms/thenewyorkflankees) | Challenge | 🟢 Free | New York Flankees Can you, the rogue adventurer, break through Stefan's… | [Open](https://tryhackme.com/room/thenewyorkflankees) | | [Nmap Advanced Port Scans](/en/tryhackme/rooms/nmap03) | Walkthrough | 🔵 VIP | Nmap Advanced Port Scans Learn advanced techniques such as null, FIN, Xmas, and… | [Open](https://tryhackme.com/room/nmap03) | | [Nmap Live Host Discovery](/en/tryhackme/rooms/nmap01) | Walkthrough | 🟢 Free | Nmap Live Host Discovery Learn how to use Nmap to discover live hosts using ARP… | [Open](https://tryhackme.com/room/nmap01) | | [NoNameCTF](/en/tryhackme/rooms/nonamectf) | Challenge | 🔵 VIP | SSTI (Server-Side Template Injection) · Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/nonamectf) | | [NTFS Analysis](/en/tryhackme/rooms/ntfsanalysis) | Walkthrough | 🔵 VIP | NTFS Analysis Explore the NTFS file system, its layout, and important… | [Open](https://tryhackme.com/room/ntfsanalysis) | | [OAuth Vulnerabilities](/en/tryhackme/rooms/oauthvulnerabilities) | Walkthrough | 🔵 VIP | OAuth Authentication Vulnerabilities | [Open](https://tryhackme.com/room/oauthvulnerabilities) | | [Obfuscation - The Egg Shell File](/en/tryhackme/rooms/obfuscation-aoc2025-e5r8t2y6u9) | Walkthrough | 🟢 Free | Obfuscation - The Egg Shell File McSkidy keeps her focus on a particular alert… | [Open](https://tryhackme.com/room/obfuscation-aoc2025-e5r8t2y6u9) | | [Obscure](/en/tryhackme/rooms/obscured) | Challenge | 🟢 Free | Obscure A CTF room focused on web and binary exploitation. | [Open](https://tryhackme.com/room/obscured) | | [Oh My WebServer](/en/tryhackme/rooms/ohmyweb) | Challenge | 🟢 Free | Oh My WebServer Can you root me? | [Open](https://tryhackme.com/room/ohmyweb) | | [Ollie](/en/tryhackme/rooms/ollie) | Challenge | 🟢 Free | Ollie Meet the world's most powerful hacker dog! | [Open](https://tryhackme.com/room/ollie) | | [Olympus](/en/tryhackme/rooms/olympusroom) | Challenge | 🟢 Free | Olympus My first CTF ! | [Open](https://tryhackme.com/room/olympusroom) | | [On-Premises IaC](/en/tryhackme/rooms/onpremisesiac) | Walkthrough | 🔵 VIP | On-Premises IaC This room provides security guidance for on-premises… | [Open](https://tryhackme.com/room/onpremisesiac) | | [One Piece](/en/tryhackme/rooms/ctfonepiece65) | Challenge | 🟢 Free | One Piece A CTF room based on the wonderful manga One Piece. Can you become the… | [Open](https://tryhackme.com/room/ctfonepiece65) | | [OpenCTI](/en/tryhackme/rooms/opencti) | Walkthrough | 🔵 VIP | OpenCTI Provide an understanding of the OpenCTI Project | [Open](https://tryhackme.com/room/opencti) | | [ORM Injection](/en/tryhackme/rooms/orminjection) | Walkthrough | 🔵 VIP | ORM Injection Learn how to exploit injection vulnerabilities in an ORM-based… | [Open](https://tryhackme.com/room/orminjection) | | [Overpass 3 - Hosting](/en/tryhackme/rooms/overpass3hosting) | Challenge | 🟢 Free | Overpass 3 - Hosting You know them, you love them, your favourite group of… | [Open](https://tryhackme.com/room/overpass3hosting) | | [OWASP API Security Top 10 - 1](/en/tryhackme/rooms/owaspapisecuritytop105w) | Walkthrough | 🔵 VIP | OWASP API Security Top 10 - 1 Learn the basic concepts for secure API… | [Open](https://tryhackme.com/room/owaspapisecuritytop105w) | | [OWASP API Security Top 10 - 2](/en/tryhackme/rooms/owaspapisecuritytop10d0) | Walkthrough | 🔵 VIP | OWASP API Security Top 10 - 2 Learn the basic concepts for secure API… | [Open](https://tryhackme.com/room/owaspapisecuritytop10d0) | | [Padding Oracles](/en/tryhackme/rooms/paddingoracles) | Walkthrough | 🔵 VIP | Padding Oracles Learn how the padding works during encryption and master… | [Open](https://tryhackme.com/room/paddingoracles) | | [Padelify](/en/tryhackme/rooms/padelify) | Challenge | 🔵 VIP | Padelify Use red-teaming techniques to bypass the WAF and obtain admin access… | [Open](https://tryhackme.com/room/padelify) | | [PalsForLife](/en/tryhackme/rooms/palsforlife) | Challenge | 🟢 Free | PalsForLife Abuse a misconfigured Kubernetes cluster Flag 1 Must be hidden… | [Open](https://tryhackme.com/room/palsforlife) | | [Peak Hill](/en/tryhackme/rooms/peakhill) | Challenge | 🟢 Free | Peak Hill Exercises in Python library abuse and some exploitation techniques… | [Open](https://tryhackme.com/room/peakhill) | | [Persisting Active Directory](/en/tryhackme/rooms/persistingad) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/persistingad) | | [Phishing](/en/tryhackme/rooms/phishingyl) | Walkthrough | 🔵 VIP | Phishing Learn what phishing is and why it's important to a red team… | [Open](https://tryhackme.com/room/phishingyl) | | [Phishing - Phishmas Greetings](/en/tryhackme/rooms/spottingphishing-aoc2025-r2g4f6s8l0) | Walkthrough | 🟢 Free | Phishing - Phishmas Greetings Learn how to spot phishing emails from Malhare's… | [Open](https://tryhackme.com/room/spottingphishing-aoc2025-r2g4f6s8l0) | | [PowerShell for Pentesters](/en/tryhackme/rooms/powershellforpentesters) | Walkthrough | 🔵 VIP | PowerShell for Pentesters This room covers the principle uses of PowerShell in… | [Open](https://tryhackme.com/room/powershellforpentesters) | | [Preparation](/en/tryhackme/rooms/preparation) | Walkthrough | 🟢 Free | Preparation A look into the Preparation phase of the Incident Response. | [Open](https://tryhackme.com/room/preparation) | | [Pressed](/en/tryhackme/rooms/pressedroom) | Challenge | 🔵 VIP | Pressed A full-scale intrusion was recently detected within the network,… | [Open](https://tryhackme.com/room/pressedroom) | | [PrintNightmare](/en/tryhackme/rooms/printnightmarehpzqlp8) | Walkthrough | 🟢 Free | PrintNightmare Learn about the vulnerability known as PrintNightmare… | [Open](https://tryhackme.com/room/printnightmarehpzqlp8) | | [PrintNightmare, thrice!](/en/tryhackme/rooms/printnightmarec3kj) | Challenge | 🔵 VIP | PrintNightmare, thrice! The nightmare continues.. Search the artifacts on the… | [Open](https://tryhackme.com/room/printnightmarec3kj) | | [Prioritise](/en/tryhackme/rooms/prioritise) | Challenge | 🟢 Free | SQL Injection | [Open](https://tryhackme.com/room/prioritise) | | [Protocols and Servers 2](/en/tryhackme/rooms/protocolsandservers2) | Walkthrough | 🔵 VIP | Protocols and Servers 2 Learn about attacks against passwords and cleartext… | [Open](https://tryhackme.com/room/protocolsandservers2) | | [PS Eclipse](/en/tryhackme/rooms/posheclipse) | Challenge | 🔵 VIP | PS Eclipse Use Splunk to investigate the ransomware activity. | [Open](https://tryhackme.com/room/posheclipse) | | [Public Key Infrastructure](/en/tryhackme/rooms/publickeyinfrastructure) | Walkthrough | 🔵 VIP | Public Key Infrastructure Learn about Public Key Infrastructure and why it's… | [Open](https://tryhackme.com/room/publickeyinfrastructure) | | [PWN101](/en/tryhackme/rooms/pwn101) | Challenge | 🟢 Free | PWN101 Intermediate level binary exploitation challenges. | [Open](https://tryhackme.com/room/pwn101) | | [pyLon](/en/tryhackme/rooms/pylonzf) | Challenge | 🟢 Free | pyLon Can you penetrate the defenses and become root? | [Open](https://tryhackme.com/room/pylonzf) | | [Rabbit Store](/en/tryhackme/rooms/rabbitstore) | Challenge | 🟢 Free | Rabbit Store Demonstrate your web application testing skills and the basics of… | [Open](https://tryhackme.com/room/rabbitstore) | | [Race Conditions](/en/tryhackme/rooms/raceconditionsattacks) | Walkthrough | 🔵 VIP | Race Conditions | [Open](https://tryhackme.com/room/raceconditionsattacks) | | [Race Conditions Challenge](/en/tryhackme/rooms/raceconditions) | Challenge | 🟢 Free | Race Conditions | [Open](https://tryhackme.com/room/raceconditions) | | [RazorBlack](/en/tryhackme/rooms/raz0rblack) | Challenge | 🟢 Free | RazorBlack These guys call themselves hackers. Can you show them who's the boss… | [Open](https://tryhackme.com/room/raz0rblack) | | [Recovering Active Directory](/en/tryhackme/rooms/recoveringactivedirectory) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/recoveringactivedirectory) | | [Recovery](/en/tryhackme/rooms/recovery) | Challenge | 🟢 Free | Recovery Not your conventional CTF Flag 0 Flag 1 Flag 2 Flag 3 Flag 4 Flag 5 | [Open](https://tryhackme.com/room/recovery) | | [Red Stone One Carat](/en/tryhackme/rooms/redstoneonecarat) | Challenge | 🟢 Free | Red Stone One Carat First room of the Red Stone series. Hack ruby using ruby.… | [Open](https://tryhackme.com/room/redstoneonecarat) | | [Red Team OPSEC](/en/tryhackme/rooms/opsec) | Walkthrough | 🟢 Free | Red Team OPSEC Learn how to apply Operations Security (OPSEC) process for Red… | [Open](https://tryhackme.com/room/opsec) | | [Red Team Threat Intel](/en/tryhackme/rooms/redteamthreatintel) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/redteamthreatintel) | | [Redline](/en/tryhackme/rooms/btredlinejoxr3d) | Walkthrough | 🟢 Free | Redline Learn how to use Redline to perform memory analysis and to scan for… | [Open](https://tryhackme.com/room/btredlinejoxr3d) | | [Regular Expressions](/en/tryhackme/rooms/catregex) | Walkthrough | 🟢 Free | Regular Expressions Learn and practise using regular expressions. | [Open](https://tryhackme.com/room/catregex) | | [Relevant](/en/tryhackme/rooms/relevant) | Challenge | 🟢 Free | Relevant Penetration Testing Challenge User Flag Root Flag | [Open](https://tryhackme.com/room/relevant) | | [Request Smuggling: WebSockets](/en/tryhackme/rooms/wsrequestsmuggling) | Walkthrough | 🔵 VIP | HTTP Request Smuggling · WebSockets Vulnerabilities | [Open](https://tryhackme.com/room/wsrequestsmuggling) | | [ret2libc](/en/tryhackme/rooms/ret2libc) | Walkthrough | 🟢 Free | Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/ret2libc) | | [Revenge](/en/tryhackme/rooms/revenge) | Challenge | 🟢 Free | Revenge You've been hired by Billy Joel to get revenge on Ducky Inc...the… | [Open](https://tryhackme.com/room/revenge) | | [REvil Corp](/en/tryhackme/rooms/revilcorp) | Challenge | 🟢 Free | Cracking Hashes (hashcat / John) | [Open](https://tryhackme.com/room/revilcorp) | | [Road](/en/tryhackme/rooms/road) | Challenge | 🟢 Free | Road Inspired by a real-world pentesting engagement What is the user.txt flag?… | [Open](https://tryhackme.com/room/road) | | [SafeZone](/en/tryhackme/rooms/safezone) | Challenge | 🟢 Free | SafeZone CTF Designed by CTF lover for CTF lovers user flag root flag | [Open](https://tryhackme.com/room/safezone) | | [SAST](/en/tryhackme/rooms/sast) | Walkthrough | 🔵 VIP | SAST Learn about Static Application Security Testing. | [Open](https://tryhackme.com/room/sast) | | [Scripting](/en/tryhackme/rooms/scripting) | Challenge | 🔵 VIP | Scripting Learn basic scripting by solving some challenges! | [Open](https://tryhackme.com/room/scripting) | | [Secret Recipe](/en/tryhackme/rooms/registry4n6) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/registry4n6) | | [Secure Network Architecture](/en/tryhackme/rooms/introtosecurityarchitecture) | Walkthrough | 🟢 Free | Secure Network Architecture Learn about and implement security best practices… | [Open](https://tryhackme.com/room/introtosecurityarchitecture) | | [Security Footage](/en/tryhackme/rooms/securityfootage) | Challenge | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/securityfootage) | | [SeeTwo](/en/tryhackme/rooms/seetworoom) | Challenge | 🔵 VIP | SeeTwo Can you see who is in command and control? | [Open](https://tryhackme.com/room/seetworoom) | | [Sequence](/en/tryhackme/rooms/sequence) | Challenge | 🔵 VIP | Sequence Chain multiple vulnerabilities to take control of a system. | [Open](https://tryhackme.com/room/sequence) | | [Server-side Template Injection](/en/tryhackme/rooms/serversidetemplateinjection) | Walkthrough | 🔵 VIP | SSTI (Server-Side Template Injection) | [Open](https://tryhackme.com/room/serversidetemplateinjection) | | [Services](/en/tryhackme/rooms/services) | Challenge | 🔵 VIP | Services At your service. | [Open](https://tryhackme.com/room/services) | | [Session Forensics](/en/tryhackme/rooms/sessionforensics) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/sessionforensics) | | [SigHunt](/en/tryhackme/rooms/sighunt) | Challenge | 🔵 VIP | SigHunt You are tasked to create detection rules based on a new threat intel. | [Open](https://tryhackme.com/room/sighunt) | | [Signature Evasion](/en/tryhackme/rooms/signatureevasion) | Walkthrough | 🔵 VIP | Signature Evasion Learn how to break signatures and evade common AV, using… | [Open](https://tryhackme.com/room/signatureevasion) | | [Signed Messages](/en/tryhackme/rooms/lafb2026e8) | Challenge | 🟢 Free | Signed Messages Their messages are secret, unless you find the key. | [Open](https://tryhackme.com/room/lafb2026e8) | | [Snort](/en/tryhackme/rooms/snort) | Walkthrough | 🟢 Free | Snort Learn how to use Snort to detect real-time threats, analyse recorded… | [Open](https://tryhackme.com/room/snort) | | [Snort Challenge - Live Attacks](/en/tryhackme/rooms/snortchallenges2) | Challenge | 🔵 VIP | Snort Challenge - Live Attacks Put your snort skills into practice and defend… | [Open](https://tryhackme.com/room/snortchallenges2) | | [Snort Challenge - The Basics](/en/tryhackme/rooms/snortchallenges1) | Challenge | 🔵 VIP | Snort Challenge - The Basics Put your snort skills into practice and write… | [Open](https://tryhackme.com/room/snortchallenges1) | | [SOC Alert Triaging - Tinsel Triage](/en/tryhackme/rooms/azuresentinel-aoc2025-a7d3h9k0p2) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/azuresentinel-aoc2025-a7d3h9k0p2) | | [Solar, exploiting log4j](/en/tryhackme/rooms/solar) | Walkthrough | 🟢 Free | Solar, exploiting log4j Explore CVE-2021-44228, a vulnerability in log4j… | [Open](https://tryhackme.com/room/solar) | | [Source Code Security](/en/tryhackme/rooms/sourcecodesecurity) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/sourcecodesecurity) | | [Splunk 2](/en/tryhackme/rooms/splunk2gcd5) | Walkthrough | 🔵 VIP | Splunk 2 Part of the Blue Primer series. This room is based on version 2 of the… | [Open](https://tryhackme.com/room/splunk2gcd5) | | [Splunk 3](/en/tryhackme/rooms/splunk3zs) | Walkthrough | 🔵 VIP | Splunk 3 Part of the Blue Primer series. This room is based on version 3 of the… | [Open](https://tryhackme.com/room/splunk3zs) | | [Splunk Basics - Did you SIEM?](/en/tryhackme/rooms/splunkforloganalysis-aoc2025-x8fj2k4rqp) | Walkthrough | 🟢 Free | Directory / Path Traversal | [Open](https://tryhackme.com/room/splunkforloganalysis-aoc2025-x8fj2k4rqp) | | [Splunk: Data Manipulation](/en/tryhackme/rooms/splunkdatamanipulation) | Walkthrough | 🔵 VIP | Splunk: Data Manipulation Learn how to parse and manipulate data in Splunk. | [Open](https://tryhackme.com/room/splunkdatamanipulation) | | [SQHell](/en/tryhackme/rooms/sqhell) | Challenge | 🟢 Free | SQL Injection | [Open](https://tryhackme.com/room/sqhell) | | [SQL Injection](/en/tryhackme/rooms/sqlinjectionlm) | Walkthrough | 🟢 Free | SQL Injection | [Open](https://tryhackme.com/room/sqlinjectionlm) | | [SSDLC](/en/tryhackme/rooms/securesdlc) | Walkthrough | 🔵 VIP | SSDLC This room focuses on the Secure Software Development Lifecycle (S-SDLC),… | [Open](https://tryhackme.com/room/securesdlc) | | [SSRF](/en/tryhackme/rooms/ssrfhr) | Walkthrough | 🟢 Free | Server-Side Request Forgery | [Open](https://tryhackme.com/room/ssrfhr) | | [SSTI](/en/tryhackme/rooms/learnssti) | Walkthrough | 🟢 Free | SSTI (Server-Side Template Injection) | [Open](https://tryhackme.com/room/learnssti) | | [Stealth](/en/tryhackme/rooms/stealth) | Challenge | 🔵 VIP | Stealth Use your evasion skills to pwn a Windows target with an updated defence… | [Open](https://tryhackme.com/room/stealth) | | [STS Credentials Lab](/en/tryhackme/rooms/stscredentialslab) | Walkthrough | 🟢 Free | STS Credentials Lab Learn how to assume roles and get temporary credentials. | [Open](https://tryhackme.com/room/stscredentialslab) | | [StuxCTF](/en/tryhackme/rooms/stuxctf) | Challenge | 🟢 Free | StuxCTF Crypto, serealization, priv scalation and more ...! | [Open](https://tryhackme.com/room/stuxctf) | | [Super Secret TIp](/en/tryhackme/rooms/supersecrettip) | Challenge | 🟢 Free | Super Secret TIp Are you only good at one thing? You better be a matrix! | [Open](https://tryhackme.com/room/supersecrettip) | | [Super-Spam](/en/tryhackme/rooms/superspamr) | Challenge | 🟢 Free | Super-Spam Defeat the evil Super-Spam, and save the day!! | [Open](https://tryhackme.com/room/superspamr) | | [Supplemental Memory](/en/tryhackme/rooms/supplementalmemory) | Walkthrough | 🔵 VIP | Supplemental Memory Investigate lateral movement, credential theft, and… | [Open](https://tryhackme.com/room/supplementalmemory) | | [Sustah](/en/tryhackme/rooms/sustah) | Challenge | 🟢 Free | Sustah Play a game to gain access to a vulnerable CMS. Can you beat the odds?… | [Open](https://tryhackme.com/room/sustah) | | [Tactical Detection](/en/tryhackme/rooms/tacticaldetection) | Walkthrough | 🔵 VIP | Tactical Detection Establish a baseline knowledge of tactical detection,… | [Open](https://tryhackme.com/room/tacticaldetection) | | [Tardigrade](/en/tryhackme/rooms/tardigrade) | Walkthrough | 🔵 VIP | Tardigrade Can you find all the basic persistence mechanisms in this Linux… | [Open](https://tryhackme.com/room/tardigrade) | | [Tempest](/en/tryhackme/rooms/tempestincident) | Challenge | 🔵 VIP | Tempest You are tasked to conduct an investigation from a workstation affected… | [Open](https://tryhackme.com/room/tempestincident) | | [Templates](/en/tryhackme/rooms/templates) | Challenge | 🔵 VIP | Templates Pug is my favorite templating engine! I made this super slick… | [Open](https://tryhackme.com/room/templates) | | [That's The Ticket](/en/tryhackme/rooms/thatstheticket) | Challenge | 🟢 Free | That's The Ticket IT Support are going to have a bad day, can you get into the… | [Open](https://tryhackme.com/room/thatstheticket) | | [The Blob Blog](/en/tryhackme/rooms/theblobblog) | Challenge | 🟢 Free | The Blob Blog Successfully hack into bobloblaw's computer User Flag Root Flag | [Open](https://tryhackme.com/room/theblobblog) | | [The Docker Rodeo](/en/tryhackme/rooms/dockerrodeo) | Walkthrough | 🔵 VIP | The Docker Rodeo Learn a wide variety of Docker vulnerabilities in this guided… | [Open](https://tryhackme.com/room/dockerrodeo) | | [The Impossible Challenge](/en/tryhackme/rooms/theimpossiblechallenge) | Challenge | 🟢 Free | The Impossible Challenge ‌‌‌‌‍‌‌Hmm‌‌‌‌‍‬‌‍‌‌‌‌‍‌‌‌‌‌‍‌‌‌‌‌‍‍‌‌‌‌‍‬‌‌‌… | [Open](https://tryhackme.com/room/theimpossiblechallenge) | | [The London Bridge](/en/tryhackme/rooms/thelondonbridge) | Challenge | 🟢 Free | The London Bridge The London Bridge is falling down. What is the user flag?… | [Open](https://tryhackme.com/room/thelondonbridge) | | [The Marketplace](/en/tryhackme/rooms/marketplace) | Challenge | 🟢 Free | The Marketplace Can you take over The Marketplace's infrastructure? What is… | [Open](https://tryhackme.com/room/marketplace) | | [The Quest for Least Privilege](/en/tryhackme/rooms/thequestforleastprivilege) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/thequestforleastprivilege) | | [The Server From Hell](/en/tryhackme/rooms/theserverfromhell) | Challenge | 🟢 Free | The Server From Hell Face a server that feels as if it was configured and… | [Open](https://tryhackme.com/room/theserverfromhell) | | [Threat Hunting With YARA](/en/tryhackme/rooms/threathuntingwithyara) | Walkthrough | 🟢 Free | Threat Hunting With YARA This room focuses on using YARA for threat hunting. | [Open](https://tryhackme.com/room/threathuntingwithyara) | | [Threat Hunting: Endgame](/en/tryhackme/rooms/threathuntingendgame) | Walkthrough | 🔵 VIP | Threat Hunting: Endgame Learn how to hunt and discover suspicious activities… | [Open](https://tryhackme.com/room/threathuntingendgame) | | [Threat Hunting: Foothold](/en/tryhackme/rooms/threathuntingfoothold) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/threathuntingfoothold) | | [Threat Hunting: Pivoting](/en/tryhackme/rooms/threathuntingpivoting) | Walkthrough | 🔵 VIP | Port Forwarding / Pivoting | [Open](https://tryhackme.com/room/threathuntingpivoting) | | [toc2](/en/tryhackme/rooms/toc2) | Challenge | 🟢 Free | toc2 It's a setup... Can you get the flags in time? | [Open](https://tryhackme.com/room/toc2) | | [Tokyo Ghoul](/en/tryhackme/rooms/tokyoghoul666) | Challenge | 🟢 Free | Tokyo Ghoul Help kaneki escape jason room | [Open](https://tryhackme.com/room/tokyoghoul666) | | [TryHack3M: Sch3Ma D3Mon](/en/tryhackme/rooms/sch3mad3mon) | Walkthrough | 🟢 Free | SQL Injection · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/sch3mad3mon) | | [TryHack3M: Subscribe](/en/tryhackme/rooms/subscribe) | Challenge | 🔵 VIP | TryHack3M: Subscribe Can you help Hack3M reach 3M subscribers? | [Open](https://tryhackme.com/room/subscribe) | | [TryPwnMe One](/en/tryhackme/rooms/trypwnmeone) | Challenge | 🔵 VIP | TryPwnMe One A collection of Exploit Development challenges to practice the… | [Open](https://tryhackme.com/room/trypwnmeone) | | [TShark: CLI Wireshark Features](/en/tryhackme/rooms/tsharkcliwiresharkfeatures) | Walkthrough | 🔵 VIP | TShark: CLI Wireshark Features Take your TShark skills to the next level by… | [Open](https://tryhackme.com/room/tsharkcliwiresharkfeatures) | | [UltraTech](/en/tryhackme/rooms/ultratech1) | Challenge | 🟢 Free | UltraTech The basics of Penetration Testing, Enumeration, Privilege Escalation… | [Open](https://tryhackme.com/room/ultratech1) | | [Umbrella](/en/tryhackme/rooms/umbrella) | Challenge | 🟢 Free | Umbrella Breach Umbrella Corp's time-tracking server by exploiting… | [Open](https://tryhackme.com/room/umbrella) | | [Unbaked Pie](/en/tryhackme/rooms/unbakedpie) | Challenge | 🟢 Free | Unbaked Pie Don't over-baked your pie! | [Open](https://tryhackme.com/room/unbakedpie) | | [Undiscovered](/en/tryhackme/rooms/undiscoveredup) | Challenge | 🟢 Free | Undiscovered Discovery consists not in seeking new landscapes, but in having… | [Open](https://tryhackme.com/room/undiscoveredup) | | [Valenfind](/en/tryhackme/rooms/lafb2026e10) | Challenge | 🟢 Free | Valenfind Can you find vulnerabilities in this new dating app? What is the flag? | [Open](https://tryhackme.com/room/lafb2026e10) | | [Velociraptor](/en/tryhackme/rooms/velociraptorhp) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/velociraptorhp) | | [Void Execution](/en/tryhackme/rooms/hfb1voidexecution) | Challenge | 🔵 VIP | Void Execution Learn how to bypass restrictions in Linux exploit development. | [Open](https://tryhackme.com/room/hfb1voidexecution) | | [Volatility Essentials](/en/tryhackme/rooms/volatilityessentials) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/volatilityessentials) | | [Volt Typhoon](/en/tryhackme/rooms/volttyphoon) | Challenge | 🟢 Free | Volt Typhoon Investigate a suspected intrusion by the notorious APT group Volt… | [Open](https://tryhackme.com/room/volttyphoon) | | [Voyage](/en/tryhackme/rooms/voyage) | Challenge | 🔵 VIP | Voyage Chain multiple vulnerabilities to gain control of a system. | [Open](https://tryhackme.com/room/voyage) | | [VulnNet](/en/tryhackme/rooms/vulnnet1) | Challenge | 🟢 Free | VulnNet Can you take advantage of the misconfigurations made by VulnNet… | [Open](https://tryhackme.com/room/vulnnet1) | | [VulnNet: Active](/en/tryhackme/rooms/vulnnetactive) | Challenge | 🟢 Free | VulnNet: Active VulnNet Entertainment just moved their entire infrastructure...… | [Open](https://tryhackme.com/room/vulnnetactive) | | [VulnNet: dotjar](/en/tryhackme/rooms/vulnnetdotjar) | Challenge | 🟢 Free | VulnNet: dotjar VulnNet Entertainment never gives up... are you ready? What is… | [Open](https://tryhackme.com/room/vulnnetdotjar) | | [VulnNet: dotpy](/en/tryhackme/rooms/vulnnetdotpy) | Challenge | 🟢 Free | VulnNet: dotpy VulnNet Entertainment is back with their brand new website...… | [Open](https://tryhackme.com/room/vulnnetdotpy) | | [VulnNet: Endgame](/en/tryhackme/rooms/vulnnetendgame) | Challenge | 🟢 Free | VulnNet: Endgame Hack your way into this simulated vulnerable infrastructure.… | [Open](https://tryhackme.com/room/vulnnetendgame) | | [WAF: Exploitation Techniques](/en/tryhackme/rooms/wafexploitationtechniques) | Walkthrough | 🔵 VIP | WAF: Exploitation Techniques Learn to bypass Web Application Firewalls using… | [Open](https://tryhackme.com/room/wafexploitationtechniques) | | [Warzone 1](/en/tryhackme/rooms/warzoneone) | Challenge | 🔵 VIP | Warzone 1 You received an IDS/IPS alert. Time to triage the alert to determine… | [Open](https://tryhackme.com/room/warzoneone) | | [Warzone 2](/en/tryhackme/rooms/warzonetwo) | Challenge | 🔵 VIP | Warzone 2 You received another IDS/IPS alert. Time to triage the alert to… | [Open](https://tryhackme.com/room/warzonetwo) | | [Watcher](/en/tryhackme/rooms/watcher) | Challenge | 🟢 Free | Watcher A boot2root Linux machine utilising web exploits along with some common… | [Open](https://tryhackme.com/room/watcher) | | [Wazuh](/en/tryhackme/rooms/wazuhct) | Walkthrough | 🟢 Free | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/wazuhct) | | [Weaponization](/en/tryhackme/rooms/weaponization) | Walkthrough | 🔵 VIP | Weaponization Understand and explore common red teaming weaponization… | [Open](https://tryhackme.com/room/weaponization) | | [Weaponizing Vulnerabilities](/en/tryhackme/rooms/weaponizingvulnerabilities) | Walkthrough | 🔵 VIP | Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/weaponizingvulnerabilities) | | [Web Attack Forensics - Drone Alone](/en/tryhackme/rooms/webattackforensics-aoc2025-b4t7c1d5f8) | Walkthrough | 🟢 Free | OS Command Injection · USB forensics | [Open](https://tryhackme.com/room/webattackforensics-aoc2025-b4t7c1d5f8) | | [Wekor](/en/tryhackme/rooms/wekorra) | Challenge | 🟢 Free | Subdomain Enumeration · WordPress Exploitation · Sudo abuse · SQL Injection | [Open](https://tryhackme.com/room/wekorra) | | [When Hearts Collide](/en/tryhackme/rooms/lafb2026e1) | Challenge | 🟢 Free | When Hearts Collide Will you find your MD5 match? What is the flag obtained by… | [Open](https://tryhackme.com/room/lafb2026e1) | | [WhyHackMe](/en/tryhackme/rooms/whyhackme) | Challenge | 🟢 Free | WhyHackMe Dive into the depths of security and analysis with WhyHackMe. What is… | [Open](https://tryhackme.com/room/whyhackme) | | [Willow](/en/tryhackme/rooms/willow) | Challenge | 🟢 Free | Willow What lies under the Willow Tree? User Flag:… | [Open](https://tryhackme.com/room/willow) | | [Windows Applications Forensics](/en/tryhackme/rooms/windowsapplications) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/windowsapplications) | | [Windows Event Logs](/en/tryhackme/rooms/windowseventlogs) | Walkthrough | 🔵 VIP | Windows Event Logs Introduction to Windows Event Logs and the tools to query… | [Open](https://tryhackme.com/room/windowseventlogs) | | [Windows Forensics 1](/en/tryhackme/rooms/windowsforensics1) | Walkthrough | 🟢 Free | USB forensics · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/windowsforensics1) | | [Windows Forensics 2](/en/tryhackme/rooms/windowsforensics2) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/windowsforensics2) | | [Windows Incident Surface](/en/tryhackme/rooms/winincidentsurface) | Walkthrough | 🟢 Free | Windows Incident Surface Learn how to implement DFIR techniques to explore the… | [Open](https://tryhackme.com/room/winincidentsurface) | | [Windows Internals](/en/tryhackme/rooms/windowsinternals) | Walkthrough | 🔵 VIP | Windows Internals Learn and understand the fundamentals of how Windows operates… | [Open](https://tryhackme.com/room/windowsinternals) | | [Windows Local Persistence](/en/tryhackme/rooms/windowslocalpersistence) | Walkthrough | 🔵 VIP | Windows Local Persistence Learn the most common persistence techniques used on… | [Open](https://tryhackme.com/room/windowslocalpersistence) | | [Windows Memory & Network](/en/tryhackme/rooms/windowsmemoryandnetwork) | Walkthrough | 🔵 VIP | Windows Memory & Network Identify C2 traffic & post-exploit activity in Windows… | [Open](https://tryhackme.com/room/windowsmemoryandnetwork) | | [Windows Memory & Processes](/en/tryhackme/rooms/windowsmemoryandprocs) | Walkthrough | 🔵 VIP | Windows Memory & Processes Analyze a memory dump of a Windows host and uncover… | [Open](https://tryhackme.com/room/windowsmemoryandprocs) | | [Windows Memory & User Activity](/en/tryhackme/rooms/windowsmemoryanduseractivity) | Walkthrough | 🔵 VIP | Windows Memory & User Activity Trace user behavior, command execution, file… | [Open](https://tryhackme.com/room/windowsmemoryanduseractivity) | | [Windows PrivEsc](/en/tryhackme/rooms/windows10privesc) | Walkthrough | 🟢 Free | Windows PrivEsc Practice your Windows Privilege Escalation skills on an… | [Open](https://tryhackme.com/room/windows10privesc) | | [Windows PrivEsc Arena](/en/tryhackme/rooms/windowsprivescarena) | Walkthrough | 🟢 Free | Windows PrivEsc Arena Students will learn how to escalate privileges using a… | [Open](https://tryhackme.com/room/windowsprivescarena) | | [Windows Privilege Escalation](/en/tryhackme/rooms/windowsprivesc20) | Walkthrough | 🔵 VIP | Windows Privilege Escalation Learn the fundamentals of Windows privilege… | [Open](https://tryhackme.com/room/windowsprivesc20) | | [Windows Reversing Intro](/en/tryhackme/rooms/windowsreversingintro) | Walkthrough | 🟢 Free | Windows Reversing Intro Introduction to reverse engineering x64 Windows… | [Open](https://tryhackme.com/room/windowsreversingintro) | | [Windows Threat Detection 1](/en/tryhackme/rooms/windowsthreatdetection1) | Walkthrough | 🟢 Free | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/windowsthreatdetection1) | | [Windows Threat Detection 2](/en/tryhackme/rooms/windowsthreatdetection2) | Walkthrough | 🔵 VIP | Windows Threat Detection 2 Discover how to detect and analyze the first steps… | [Open](https://tryhackme.com/room/windowsthreatdetection2) | | [Windows Threat Detection 3](/en/tryhackme/rooms/windowsthreatdetection3) | Walkthrough | 🔵 VIP | Windows Threat Detection 3 Learn how threat actors manage to maintain access to… | [Open](https://tryhackme.com/room/windowsthreatdetection3) | | [Windows User Account Forensics](/en/tryhackme/rooms/windowsuseraccountforensics) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/windowsuseraccountforensics) | | [Windows User Activity Analysis](/en/tryhackme/rooms/windowsuseractivity) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/windowsuseractivity) | | [Windows x64 Assembly](/en/tryhackme/rooms/win64assembly) | Walkthrough | 🟢 Free | Windows x64 Assembly Introduction to x64 Assembly on Windows. Now that you have… | [Open](https://tryhackme.com/room/win64assembly) | | [Wireshark: Traffic Analysis](/en/tryhackme/rooms/wiresharktrafficanalysis) | Walkthrough | 🔵 VIP | Wireshark: Traffic Analysis Learn the basics of traffic analysis with Wireshark… | [Open](https://tryhackme.com/room/wiresharktrafficanalysis) | | [Wonderland](/en/tryhackme/rooms/wonderland) | Challenge | 🟢 Free | Wonderland Fall down the rabbit hole and enter wonderland. Obtain the flag in… | [Open](https://tryhackme.com/room/wonderland) | | [WWBuddy](/en/tryhackme/rooms/wwbuddy) | Challenge | 🟢 Free | WWBuddy Exploit this website still in development and root the room. Website… | [Open](https://tryhackme.com/room/wwbuddy) | | [XDR: Credential Access](/en/tryhackme/rooms/xdrcredentialaccess) | Walkthrough | 🔵 VIP | XDR: Credential Access Learn about techniques attackers use to steal account… | [Open](https://tryhackme.com/room/xdrcredentialaccess) | | [XDR: Defense Evasion](/en/tryhackme/rooms/xdrdefenseevasion) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/xdrdefenseevasion) | | [XDR: Execution](/en/tryhackme/rooms/xdrexecution) | Walkthrough | 🔵 VIP | XDR: Execution Investigate and prevent techniques that run malicious code on… | [Open](https://tryhackme.com/room/xdrexecution) | | [XDR: Introduction](/en/tryhackme/rooms/xdrintroduction) | Walkthrough | 🟢 Free | Access Control / IDOR | [Open](https://tryhackme.com/room/xdrintroduction) | | [XDR: Lateral Movement](/en/tryhackme/rooms/xdrlateralmovement) | Walkthrough | 🔵 VIP | Active Directory · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/xdrlateralmovement) | | [XDR: Privilege Escalation](/en/tryhackme/rooms/xdrprivesc) | Walkthrough | 🔵 VIP | XDR: Privilege Escalation Detect and investigate privilege escalation with… | [Open](https://tryhackme.com/room/xdrprivesc) | | [XXE Injection](/en/tryhackme/rooms/xxeinjection) | Walkthrough | 🔵 VIP | XML External Entity | [Open](https://tryhackme.com/room/xxeinjection) | | [YARA Rules - YARA mean one!](/en/tryhackme/rooms/yara-aoc2025-q9w1e3y5u7) | Walkthrough | 🟢 Free | YARA Rules - YARA mean one! Learn how YARA rules can be used to detect… | [Open](https://tryhackme.com/room/yara-aoc2025-q9w1e3y5u7) | | [You Got Mail](/en/tryhackme/rooms/yougotmail) | Challenge | 🔵 VIP | You Got Mail Test your recon and phishing skills in order to complete your… | [Open](https://tryhackme.com/room/yougotmail) | | [Zeek](/en/tryhackme/rooms/zeekbro) | Walkthrough | 🔵 VIP | Zeek Introduction to hands-on network monitoring and threat detection with Zeek… | [Open](https://tryhackme.com/room/zeekbro) | | [Zeek Exercises](/en/tryhackme/rooms/zeekbroexercises) | Challenge | 🔵 VIP | Zeek Exercises Put your Zeek skills into practice and analyse network traffic. | [Open](https://tryhackme.com/room/zeekbroexercises) | | [Zeno](/en/tryhackme/rooms/zeno) | Challenge | 🟢 Free | Zeno Do you have the same patience as the great stoic philosopher Zeno? Try it… | [Open](https://tryhackme.com/room/zeno) | ## Hard (93) | Room | Type | Access | Skills | Official | | --------------------------------------------------------------------------------------- | ----------- | ------- | -------------------------------------------------------------------------------- | --------------------------------------------------------------- | | [Abusing Windows Internals](/en/tryhackme/rooms/abusingwindowsinternals) | Walkthrough | 🔵 VIP | Abusing Windows Internals Leverage windows internals components to evade common… | [Open](https://tryhackme.com/room/abusingwindowsinternals) | | [Advent of Cyber '23 Side Quest](/en/tryhackme/rooms/adventofcyber23sidequest) | Challenge | 🟢 Free | Advent of Cyber '23 Side Quest Explore a series of advanced challenges… | [Open](https://tryhackme.com/room/adventofcyber23sidequest) | | [Advent of Cyber '24 Side Quest](/en/tryhackme/rooms/adventofcyber24sidequest) | Challenge | 🟢 Free | Advent of Cyber '24 Side Quest Explore a series of advanced challenges… | [Open](https://tryhackme.com/room/adventofcyber24sidequest) | | [Adventure Time](/en/tryhackme/rooms/adventuretime) | Challenge | 🟢 Free | Adventure Time A CTF based challenge to get your blood pumping... Content of… | [Open](https://tryhackme.com/room/adventuretime) | | [Anonymous Playground](/en/tryhackme/rooms/anonymousplayground) | Challenge | 🟢 Free | Anonymous Playground Want to become part of Anonymous? They have a challenge… | [Open](https://tryhackme.com/room/anonymousplayground) | | [Azure: Tapper](/en/tryhackme/rooms/tapper) | Challenge | 🔵 VIP | Azure: Tapper Azure challenge for cloud pentesters: Can you find the attack… | [Open](https://tryhackme.com/room/tapper) | | [Bandit](/en/tryhackme/rooms/bandit) | Challenge | 🔵 VIP | Bandit You’ve been asked to exploit all the vulnerabilities on multiple systems. | [Open](https://tryhackme.com/room/bandit) | | [Borderlands](/en/tryhackme/rooms/borderlands) | Challenge | 🟢 Free | Borderlands Compromise a perimeter host and pivot through this network. What is… | [Open](https://tryhackme.com/room/borderlands) | | [Brainpan 1](/en/tryhackme/rooms/brainpan) | Challenge | 🔵 VIP | Buffer Overflow (BoF / ROP) | [Open](https://tryhackme.com/room/brainpan) | | [Capture Returns](/en/tryhackme/rooms/capturereturns) | Challenge | 🟢 Free | Capture Returns The developers have improved their login form since last time.… | [Open](https://tryhackme.com/room/capturereturns) | | [Carpe Diem 1](/en/tryhackme/rooms/carpediem1) | Challenge | 🟢 Free | Carpe Diem 1 Recover your clients encrypted files before the ransomware timer… | [Open](https://tryhackme.com/room/carpediem1) | | [CherryBlossom](/en/tryhackme/rooms/cherryblossom) | Challenge | 🟢 Free | CherryBlossom Boot-to-root with emphasis on crypto and password cracking.… | [Open](https://tryhackme.com/room/cherryblossom) | | [Chrome](/en/tryhackme/rooms/chrome) | Challenge | 🟢 Free | Chrome Let us place all of our trust in a password manager. What is the first… | [Open](https://tryhackme.com/room/chrome) | | [Contrabando](/en/tryhackme/rooms/contrabando) | Challenge | 🟢 Free | Contrabando Never tell me the odds. What is the first flag? What is the second… | [Open](https://tryhackme.com/room/contrabando) | | [CRM Snatch](/en/tryhackme/rooms/crmsnatch) | Challenge | 🔵 VIP | CRM Snatch Investigate the fourth, Disk part of the Honeynet Collapse! | [Open](https://tryhackme.com/room/crmsnatch) | | [Custom Tooling using Burp](/en/tryhackme/rooms/customtoolingviaburp) | Walkthrough | 🔵 VIP | Custom Tooling using Burp Creating custom tooling for application testing using… | [Open](https://tryhackme.com/room/customtoolingviaburp) | | [Daily Bugle](/en/tryhackme/rooms/dailybugle) | Challenge | 🔵 VIP | Cracking Hashes (hashcat / John) · SQL Injection | [Open](https://tryhackme.com/room/dailybugle) | | [Dave's Blog](/en/tryhackme/rooms/davesblog) | Challenge | 🟢 Free | Dave's Blog My friend Dave made his own blog! | [Open](https://tryhackme.com/room/davesblog) | | [Dead End?](/en/tryhackme/rooms/deadend) | Challenge | 🔵 VIP | Dead End? You're given a memory image and a disk image - help us find the flag! | [Open](https://tryhackme.com/room/deadend) | | [Different CTF](/en/tryhackme/rooms/adana) | Challenge | 🟢 Free | Different CTF interesting room, you can shoot the sun How many ports are open ?… | [Open](https://tryhackme.com/room/adana) | | [DiskFiltration](/en/tryhackme/rooms/diskfiltration) | Challenge | 🔵 VIP | DiskFiltration Test your Windows investigation skills on a critical data… | [Open](https://tryhackme.com/room/diskfiltration) | | [Diskrupt](/en/tryhackme/rooms/diskrupt) | Challenge | 🔵 VIP | Diskrupt Fix the damaged disk, analyse the filesystem, and recover the deleted… | [Open](https://tryhackme.com/room/diskrupt) | | [DX2: Hell's Kitchen](/en/tryhackme/rooms/dx2hellskitchen) | Challenge | 🔵 VIP | DX2: Hell's Kitchen Can you help compromise a civilian machine that we believe… | [Open](https://tryhackme.com/room/dx2hellskitchen) | | [El Bandito](/en/tryhackme/rooms/elbandito) | Challenge | 🔵 VIP | El Bandito Can you help capture El Bandito before he leaves the galaxy? | [Open](https://tryhackme.com/room/elbandito) | | [Enterprise](/en/tryhackme/rooms/enterprise) | Challenge | 🟢 Free | Enterprise You just landed in an internal network. You scan the network and… | [Open](https://tryhackme.com/room/enterprise) | | [EnterPrize](/en/tryhackme/rooms/enterprize) | Challenge | 🟢 Free | EnterPrize Can you hack your way in? user.txt Something old will be your key.… | [Open](https://tryhackme.com/room/enterprize) | | [envizon](/en/tryhackme/rooms/envizon) | Challenge | 🟢 Free | Access Control / IDOR · OS Command Injection · File Upload Vulnerabilities | [Open](https://tryhackme.com/room/envizon) | | [Event Horizon](/en/tryhackme/rooms/eventhorizonroom) | Challenge | 🟢 Free | Event Horizon Unearth the secrets beyond the Event Horizon. The attacker was… | [Open](https://tryhackme.com/room/eventhorizonroom) | | [Exfilibur](/en/tryhackme/rooms/exfilibur) | Challenge | 🔵 VIP | Exfilibur You’ve been asked to exploit all the vulnerabilities present. | [Open](https://tryhackme.com/room/exfilibur) | | [Extract](/en/tryhackme/rooms/extract) | Challenge | 🔵 VIP | Extract Can you extract the secrets from the library? | [Open](https://tryhackme.com/room/extract) | | [FAT32 Analysis](/en/tryhackme/rooms/fat32analysis) | Walkthrough | 🟢 Free | FAT32 Analysis Examine the FAT32 filesystem from a forensic point of view. Are… | [Open](https://tryhackme.com/room/fat32analysis) | | [For Business Reasons](/en/tryhackme/rooms/forbusinessreasons) | Challenge | 🟢 Free | For Business Reasons In your network scan, you found an unknown VM.... | [Open](https://tryhackme.com/room/forbusinessreasons) | | [Forensics](/en/tryhackme/rooms/forensics) | Challenge | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/forensics) | | [Fusion Corp](/en/tryhackme/rooms/fusioncorp) | Challenge | 🟢 Free | Fusion Corp Fusion Corp said they got everything patched... did they? | [Open](https://tryhackme.com/room/fusioncorp) | | [GameBuzz](/en/tryhackme/rooms/gamebuzz) | Challenge | 🟢 Free | GameBuzz Part of Incognito CTF | [Open](https://tryhackme.com/room/gamebuzz) | | [Hack Back](/en/tryhackme/rooms/hackback) | Challenge | 🔵 VIP | Hack Back Can you get to the bottom of what's wrong with the machine? | [Open](https://tryhackme.com/room/hackback) | | [Hacking Hadoop](/en/tryhackme/rooms/hackinghadoop) | Walkthrough | 🟢 Free | Access Control / IDOR · Remote Code Execution (RCE) | [Open](https://tryhackme.com/room/hackinghadoop) | | [hc0n Christmas CTF](/en/tryhackme/rooms/hc0nchristmasctf) | Challenge | 🟢 Free | hc0n Christmas CTF hackt the planet What is the user flag? What is the root… | [Open](https://tryhackme.com/room/hc0nchristmasctf) | | [Holo](/en/tryhackme/rooms/hololive) | Walkthrough | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/hololive) | | [HTTP/2 Request Smuggling](/en/tryhackme/rooms/http2requestsmuggling) | Walkthrough | 🟢 Free | HTTP Request Smuggling | [Open](https://tryhackme.com/room/http2requestsmuggling) | | [Initial Access Pot](/en/tryhackme/rooms/initialaccesspot) | Challenge | 🔵 VIP | Initial Access Pot Investigate the first, Linux part of the Honeynet Collapse! | [Open](https://tryhackme.com/room/initialaccesspot) | | [Iron Corp](/en/tryhackme/rooms/ironcorp) | Challenge | 🟢 Free | Iron Corp Can you get access to Iron Corp's system? user.txt root.txt | [Open](https://tryhackme.com/room/ironcorp) | | [Jack](/en/tryhackme/rooms/jack) | Challenge | 🔵 VIP | WordPress Exploitation | [Open](https://tryhackme.com/room/jack) | | [Jurassic Park](/en/tryhackme/rooms/jurassicpark) | Challenge | 🔵 VIP | Jurassic Park A Jurassic Park CTF | [Open](https://tryhackme.com/room/jurassicpark) | | [K2](/en/tryhackme/rooms/k2room) | Challenge | 🔵 VIP | K2 Are you able to make your way through the mountain? | [Open](https://tryhackme.com/room/k2room) | | [Ledger](/en/tryhackme/rooms/ledger) | Challenge | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/ledger) | | [Lost in RAMslation](/en/tryhackme/rooms/lostinramslation) | Challenge | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/lostinramslation) | | [Love at First Breach 2026 - Advanced Track](/en/tryhackme/rooms/lafbctf2026-advanced) | Challenge | 🟢 Free | Love at First Breach 2026 - Advanced Track Go deeper into TryHeartMe's web of… | [Open](https://tryhackme.com/room/lafbctf2026-advanced) | | [M4tr1x: Exit Denied](/en/tryhackme/rooms/m4tr1xexitdenied) | Challenge | 🟢 Free | M4tr1x: Exit Denied Free your mind. Exit from the M4tr1x... | [Open](https://tryhackme.com/room/m4tr1xexitdenied) | | [macOS Forensics: Applications](/en/tryhackme/rooms/macosforensicsapplications) | Walkthrough | 🔵 VIP | USB forensics | [Open](https://tryhackme.com/room/macosforensicsapplications) | | [macOS Forensics: Artefacts](/en/tryhackme/rooms/macosforensicsartefacts) | Walkthrough | 🟢 Free | USB forensics | [Open](https://tryhackme.com/room/macosforensicsartefacts) | | [Misguided Ghosts](/en/tryhackme/rooms/misguidedghosts) | Challenge | 🟢 Free | Misguided Ghosts Collaboration between Jake and Blob! What is the user flag?… | [Open](https://tryhackme.com/room/misguidedghosts) | | [Moebius](/en/tryhackme/rooms/moebius) | Challenge | 🟢 Free | Moebius A place where you start at some point, and you have to go back to it in… | [Open](https://tryhackme.com/room/moebius) | | [Motunui](/en/tryhackme/rooms/motunui) | Challenge | 🟢 Free | Motunui Hack the island of Motunui. | [Open](https://tryhackme.com/room/motunui) | | [Mountaineer](/en/tryhackme/rooms/mountaineerlinux) | Challenge | 🟢 Free | Mountaineer Will you find the flags between all these mountains? | [Open](https://tryhackme.com/room/mountaineerlinux) | | [Operation Endgame](/en/tryhackme/rooms/operationendgame) | Challenge | 🟢 Free | Active Directory | [Open](https://tryhackme.com/room/operationendgame) | | [Password Attacks](/en/tryhackme/rooms/passwordattacks) | Walkthrough | 🔵 VIP | Password Attacks This room introduces the fundamental techniques to perform a… | [Open](https://tryhackme.com/room/passwordattacks) | | [Plotted-EMR](/en/tryhackme/rooms/plottedemr) | Challenge | 🟢 Free | Plotted-EMR Everything here is plotted! Ready? What is flag 1? What is… | [Open](https://tryhackme.com/room/plottedemr) | | [Plotted-LMS](/en/tryhackme/rooms/plottedlms) | Challenge | 🟢 Free | Plotted-LMS Everything here is plotted! What is the user.txt flag? What is the… | [Open](https://tryhackme.com/room/plottedlms) | | [Precision](/en/tryhackme/rooms/hfb1precision) | Challenge | 🔵 VIP | Precision Practice your advanced Linux Exploit Development skills. | [Open](https://tryhackme.com/room/hfb1precision) | | [Python Playground](/en/tryhackme/rooms/pythonplayground) | Challenge | 🟢 Free | Python Playground Be creative! | [Open](https://tryhackme.com/room/pythonplayground) | | [Ra](/en/tryhackme/rooms/ra) | Challenge | 🟢 Free | Ra You have found WindCorp's internal network and their Domain Controller. Can… | [Open](https://tryhackme.com/room/ra) | | [Ra 2](/en/tryhackme/rooms/ra2) | Challenge | 🔵 VIP | Ra 2 Just when they thought their hashes were safe... Ra 2 - The sequel! | [Open](https://tryhackme.com/room/ra2) | | [Rabbit Hole](/en/tryhackme/rooms/rabbitholeqq) | Challenge | 🟢 Free | Rabbit Hole It's easy to fall into rabbit holes. | [Open](https://tryhackme.com/room/rabbitholeqq) | | [Racetrack Bank](/en/tryhackme/rooms/racetrackbank) | Challenge | 🟢 Free | Racetrack Bank It's time for another heist. User flag What does the name of the… | [Open](https://tryhackme.com/room/racetrackbank) | | [Red Team Capstone Challenge](/en/tryhackme/rooms/redteamcapstonechallenge) | Challenge | 🔵 VIP | Red Team Capstone Challenge This room is the capstone challenge for the red… | [Open](https://tryhackme.com/room/redteamcapstonechallenge) | | [REloaded](/en/tryhackme/rooms/reloaded) | Challenge | 🟢 Free | Port Forwarding / Pivoting | [Open](https://tryhackme.com/room/reloaded) | | [Reset](/en/tryhackme/rooms/resetui) | Challenge | 🔵 VIP | Active Directory | [Open](https://tryhackme.com/room/resetui) | | [Retro](/en/tryhackme/rooms/retro) | Challenge | 🟢 Free | Directory fuzzing | [Open](https://tryhackme.com/room/retro) | | [Robots](/en/tryhackme/rooms/robots) | Challenge | 🟢 Free | Robots A (small) tribute to I. Asimov. What is the value of the user flag? What… | [Open](https://tryhackme.com/room/robots) | | [Rocket](/en/tryhackme/rooms/rocket) | Challenge | 🟢 Free | Rocket Get ready for blast off! No answer needed What is contained within the… | [Open](https://tryhackme.com/room/rocket) | | [Royal Router](/en/tryhackme/rooms/hfb1royalrouter) | Challenge | 🔵 VIP | Royal Router You will learn how to compromise an IoT device. | [Open](https://tryhackme.com/room/hfb1royalrouter) | | [Runtime Detection Evasion](/en/tryhackme/rooms/runtimedetectionevasion) | Walkthrough | 🔵 VIP | Runtime Detection Evasion Learn how to bypass common runtime detection… | [Open](https://tryhackme.com/room/runtimedetectionevasion) | | [Sandbox Evasion](/en/tryhackme/rooms/sandboxevasion) | Walkthrough | 🔵 VIP | Sandbox Evasion Learn about active defense mechanisms Blue Teamers can deploy… | [Open](https://tryhackme.com/room/sandboxevasion) | | [Sea Surfer](/en/tryhackme/rooms/seasurfer) | Challenge | 🟢 Free | Sea Surfer Ride the Wave! What is user.txt? What is root.txt? | [Open](https://tryhackme.com/room/seasurfer) | | [Second](/en/tryhackme/rooms/fearsecond) | Challenge | 🔵 VIP | Second You Shall Fear The Second Order. | [Open](https://tryhackme.com/room/fearsecond) | | [Sequel Dump](/en/tryhackme/rooms/hfb1sequeldump) | Challenge | 🔵 VIP | SQL Injection | [Open](https://tryhackme.com/room/hfb1sequeldump) | | [Set](/en/tryhackme/rooms/set) | Challenge | 🔵 VIP | Set Once again you find yourself on the internal network of the Windcorp… | [Open](https://tryhackme.com/room/set) | | [Spring](/en/tryhackme/rooms/spring) | Challenge | 🟢 Free | Spring Can you hack your way in to a Hello World application? What's the flag… | [Open](https://tryhackme.com/room/spring) | | [Temple](/en/tryhackme/rooms/temple) | Challenge | 🔵 VIP | Temple Can you gain access to the temple? | [Open](https://tryhackme.com/room/temple) | | [Tempus Fugit Durius](/en/tryhackme/rooms/tempusfugitdurius) | Challenge | 🔵 VIP | Tempus Fugit Durius The latin word Durius means "harder" | [Open](https://tryhackme.com/room/tempusfugitdurius) | | [The Bandit Surfer](/en/tryhackme/rooms/surfingyetiiscomingtotown) | Challenge | 🟢 Free | Remote File Inclusion (RFI) | [Open](https://tryhackme.com/room/surfingyetiiscomingtotown) | | [The Last Trial](/en/tryhackme/rooms/thelasttrial) | Challenge | 🔵 VIP | The Last Trial Investigate the sixth, macOS part of the Honeynet Collapse! | [Open](https://tryhackme.com/room/thelasttrial) | | [TryHack3M: Burg3r Bytes](/en/tryhackme/rooms/burg3rbytes) | Challenge | 🔵 VIP | TryHack3M: Burg3r Bytes They say these burgers are worth every penny. Can you… | [Open](https://tryhackme.com/room/burg3rbytes) | | [TryHack3M: TriCipher Summit](/en/tryhackme/rooms/tryhack3mencryptionchallenge) | Challenge | 🔵 VIP | TryHack3M: TriCipher Summit Reach the apex of this triple-crypto challenge! | [Open](https://tryhackme.com/room/tryhack3mencryptionchallenge) | | [TryPwnMe Two](/en/tryhackme/rooms/trypwnmetwo) | Challenge | 🔵 VIP | TryPwnMe Two Test yourself with our Exploit Development challenges and practice… | [Open](https://tryhackme.com/room/trypwnmetwo) | | [Uranium CTF](/en/tryhackme/rooms/uranium) | Challenge | 🟢 Free | Uranium CTF Uranium CTF What is the required password for the chat app? What is… | [Open](https://tryhackme.com/room/uranium) | | [Year of the Dog](/en/tryhackme/rooms/yearofthedog) | Challenge | 🟢 Free | Year of the Dog Always so polite... | [Open](https://tryhackme.com/room/yearofthedog) | | [Year of the Fox](/en/tryhackme/rooms/yotf) | Challenge | 🟢 Free | Year of the Fox Don't underestimate the sly old fox... | [Open](https://tryhackme.com/room/yotf) | | [Year of the Jellyfish](/en/tryhackme/rooms/yearofthejellyfish) | Challenge | 🟢 Free | Year of the Jellyfish Some boxes sting... | [Open](https://tryhackme.com/room/yearofthejellyfish) | | [Year of the Owl](/en/tryhackme/rooms/yearoftheowl) | Challenge | 🟢 Free | Year of the Owl The foolish owl sits on his throne... | [Open](https://tryhackme.com/room/yearoftheowl) | | [Year of the Pig](/en/tryhackme/rooms/yearofthepig) | Challenge | 🟢 Free | Year of the Pig Some pigs do fly... | [Open](https://tryhackme.com/room/yearofthepig) | | [Zero Logon](/en/tryhackme/rooms/zer0logon) | Walkthrough | 🔵 VIP | Zero Logon Learn about and exploit the ZeroLogon vulnerability that allows an… | [Open](https://tryhackme.com/room/zer0logon) | ## Insane (7) | Room | Type | Access | Skills | Official | | ------------------------------------------------------------- | --------- | ------- | ----------------------------------------------------------------------------- | -------------------------------------------------- | | [CCT2019](/en/tryhackme/rooms/cct2019) | Challenge | 🟢 Free | CCT2019 Legacy challenges from the US Navy Cyber Competition Team 2019… | [Open](https://tryhackme.com/room/cct2019) | | [Crocc Crew](/en/tryhackme/rooms/crocccrew) | Challenge | 🟢 Free | Crocc Crew Crocc Crew has created a backdoor on a Cooctus Corp Domain… | [Open](https://tryhackme.com/room/crocccrew) | | [Frosteau Busy with Vim](/en/tryhackme/rooms/busyvimfrosteau) | Challenge | 🟢 Free | Frosteau Busy with Vim Stay frosty! | [Open](https://tryhackme.com/room/busyvimfrosteau) | | [Osiris](/en/tryhackme/rooms/osiris) | Challenge | 🔵 VIP | Osiris Can you Quack it? | [Open](https://tryhackme.com/room/osiris) | | [Snowy ARMageddon](/en/tryhackme/rooms/armageddon2r) | Challenge | 🟢 Free | Snowy ARMageddon Assist the Yeti in breaching the cyber police perimeter! | [Open](https://tryhackme.com/room/armageddon2r) | | [Theseus](/en/tryhackme/rooms/theseus) | Challenge | 🟢 Free | Theseus The first installment of the SuitGuy series of very hard challenges.… | [Open](https://tryhackme.com/room/theseus) | | [You're in a cave](/en/tryhackme/rooms/inacave) | Challenge | 🟢 Free | You're in a cave A room with some ctf elements inspired in text based RPGs… | [Open](https://tryhackme.com/room/inacave) | *Last updated: 2026-05-09*