TryHackMe

An online platform that makes it easy to break into and upskill in cyber security, all through your browser.

[TryHackMe @tryhackme]

You could go outside today. Or you could get root.
Just saying.

[TryHackMe @tryhackme]

📜 CPE credits and a certificate of participation, earned by driving a real C2 through the full kill chain.
Stand up an open-source C2, land an agent, run BOFs, and pivot across segments in a live lab range with Ariz Soriano and Andrea Brosio.
No prior C2 experience needed. Recording included.
📅 Oct 1, 3-7PM GMT+2
🎟️ https://t.co/4Re05c3EHl
🆓 Free teaser Sept 28: https://t.co/HW56mm0bUZ

[TryHackMe @tryhackme]

It's time to lock in! 🚀
Source: Echo said so.

[TryHackMe @tryhackme]

Hold an OSCP+? Your PT2 exam is on us 🔓 We're giving away 100 free exam vouchers to certified pentesters and all we ask for is an honest public review.

Fill in the form to enter. Share this with an OSCP+ holder who needs to know 👊 ▶️ https://t.co/KqRYO6mIKp
September 20 at 23:59 PM (UK time)

[TryHackMe @tryhackme]

@LagBoii It should be all fixed ✅

[TryHackMe @tryhackme]

Don’t freak out, but “I’ll do it later” has entered its final quarter.

[Progress Bar 2026 @ProgressBar202_]

2026 is 71% complete.

[TryHackMe @tryhackme]

@HegazySami51715 It should be all fixed ✅

[TryHackMe @tryhackme]

🧵 SQL Server isn't just a database. It's a Windows identity, a trust boundary, and a potential relay target all in one.

A restricted login with the right linked server mapping isn't contained, it's a stepping stone. Coerce the service account, relay the authentication, and what started as a database finding becomes operating system access.

Separate components. One attack chain.

Enumerate the trust paths before someone else does 🗄️

[TryHackMe @tryhackme]

💀 Most assessors find SQL Server and move on. The ones who don't know how to chain a linked server mapping into operating system command execution 👉 https://t.co/RJK5DB3Iw3

[TryHackMe @tryhackme]

Here's what you'll practice in SQL Server Trust Exploitation 👇

🔎 Enumerate an MSSQL login's effective identity, permissions, and trust paths
💻 Obtain an operating system callback through a PowerShell download cradle
🔗 Exploit a privileged linked server mapping and run commands on the remote host
🔑 Capture and relay outbound NTLM authentication to MSSQL

[TryHackMe @tryhackme]

Active Directory isn't a solved problem and this free webinar gets into exactly why. 🔓 Stefan and Andrea are going live 18 September to break down the real attack surface. Free to attend. Jump in on the day via the link 👉 https://t.co/KuMZxK2vFW

[TryHackMe @tryhackme]

This is not a drill 🔴 PT2 is LIVE 🔥 72 hours. 10 machines. Web, AD, Cloud + AI/LLM exploitation, all in one exam.
And getting in is only half the job: 30% of your mark comes from your report. 👀

🔥 30% off until 29 Sept: BREACHALL
🎁 3 months MAX free

Get PT2 Certified ➡️ https://t.co/C4ImWFrhRR

[TryHackMe @tryhackme]

Here's what you'll practice in NTLM Relay Attacks 👇

🔎 Understand why NTLM relay is more reliable than hash cracking against machine accounts
🛡️ Understand SMB signing and LDAP signing and which attack each one blocks
💀 Execute SMB relay for remote code execution

[TryHackMe @tryhackme]

🔑 NTLM has been deprecated for years. It's still firing thousands of times a day in every Active Directory environment. Every one of those exchanges is a relay opportunity 👉 https://t.co/1RO3LetB3H

[TryHackMe @tryhackme]

🧵 Microsoft shipped Kerberos in 1999. NTLM is still authenticating thousands of times a day in every Active Directory environment.

Legacy applications. UNC path resolutions. Service discovery fallbacks. Every one of those exchanges is a relay opportunity.

The attack doesn't crack the hash. It intercepts the challenge-response in flight and replays it somewhere else as the same account.

NTLM won't die. Make sure you know how to abuse it. 🔑

[TryHackMe @tryhackme]

it's monday already?

[TryHackMe @tryhackme]

Been putting off a career switch into cybersecurity because you feel unqualified? 🔓 See the 4 myths keeping mid-career switchers stuck and find out what actually matters 👊 Start today ▶️ https://t.co/lJ5pZnjnoK

[TryHackMe @tryhackme]

New things coming to, or now on, TryHackMe:
🎮 3D Learning Experiences: a more realistic & efficient way to learn
🗣️ Live Classes: instructor-led workshops delivered by experts
🏢 Live Breach Simulation Exercises: realistic, hands-on, IR training
📟 New profile page: fresh design and artwork customisation
📱 Mobile updates: improvements
📛 New certification: PT2, IR1
🚪 New content: Agentic AI Security, Incident Response Content & More
🛜 New networks: 4-5 new rooms with network environments
🐞 Many bug fixes: platform QoL updates + Window VM & VPN improvements
🤲 Study group test: new way to collaborate and learn together

[TryHackMe @tryhackme]

Apple gave you two screens. One for TryHackMe.
We don't know what the other one's for.

[Variety @Variety]

The iPhone Duo will start at $1999 (256GB).

Apple’s first foldable smartphone will be available on Oct. 23.

https://t.co/g9TlxmN6WW

[TryHackMe @tryhackme]

🧵 Here's what you'll investigate in Chameleon Escape

💀 Understand how a malicious custom map leads to remote code execution
🔎 Conduct a forensic investigation of a compromised machine
🧩 Identify key indicators of compromise and understand how the vulnerability was mitigated

[TryHackMe @tryhackme]

RECENT THREAT🚨 A custom map. A compromised machine. A real attack chain. Chameleon Escape just dropped, learn how it happened and what was left behind 👉https://t.co/h9K6HpVGnd

[TryHackMe @tryhackme]

🔎 Most people never think a custom map could hand an attacker remote code execution. Chameleon Escape shows exactly how it does!