TryHackMe-Walkthroughs - 137+ TryHackMe walkthroughs covering web exploitat

项目说明

<di="center">
<img src=" height="150"></img>
</div>

<di="center">

!Platform
!Focus
!Level
!Labs
!License

</div>

---

TryHackMe Walkthroughs & Writeups

Writeups from every TryHackMe room I'. Steps I took, commands that worked and what I learned along the way.

Covers web exploitation, C, pri escalation, container escapes, binary exploitation, DFIR and AI/LLM security on Linux, Windows and Web. CVEs from 2004 to 2025.

---

Statistics

| Metric | Count |
|:---|:---:|
| Easy rooms | 82 |
| Medium rooms | 35 |
| Hard rooms | 8 |
| Info / Other | ~12 *(estimated — includes un-indexed rooms)* |
| Rooms in table | 127 |
| Total directories | 137+ |
| C | 20+ *(estimated)* |
| Platforms | Linux · Windows · Web |
| Acti | 2024 |

---

What You Will Learn

Exploitation

Web attacks: SQL injection, XSS, LFI/RFI, SSRF, IDOR, RCE, SSTI, authentication bypass

C exploitation using public proof-of-concepts and Metasploit modules

Password cracking and hash identification with Hashcat and John the Ripper

Network service exploitation: Samba, ProFtpd, SSH, Icecast, OpenClinic, FreeSWITCH

Pri Escalation

Linux: SUID binaries, PATH hijacking, cronjob abuse, kernel exploits, sudo misconfiguration

Windows: token impersonation, WinPEAS, unquoted service paths, registry escalation

Enumeration

Network scanning with nmap, subdomain and vhost enumeration

Directory brute-forcing with ffuf and Gobuster, DNS enumeration, OSINT

Specialised Topics

Container and Docker exploitation and escape

Acti enumeration and attacks

Digital forensics and memory analysis

Binary exploitation and reverse engineering

Cryptography, steganography, and encoding challenges

AI and LLM security: prompt injection and jailbreaking

---

Featured Rooms

| Room | Difficulty | Platform | Technique |
|---|:---:|:---:|---|
| Blue | Easy | Windows | EternalBlue (MS17-010) → Metasploit shell → hash cracking |
| Dogcat | Medium | Linux | LFI → log poisoning → RCE → Docker container escape |
| The Marketplace | Medium | Linux | Stored XSS → cookie theft → SQL injection → Docker socket escalation |
| ContainMe | Medium | Linux | SSH pivot → multi-hop container escape across internal network |
| Erlang/OTP SSH C | Easy | Linux | Pre-auth RCE in Erlang SSH — 2025 CVE in a lab en |
| Year of the Dog | Hard | Linux | Blind SQL injection → Gitea code execution → root |

---

Learning Focus Areas

Web Exploitation

SQL injection, XSS, LFI/RFI, SSRF, IDOR, SSTI, RCE, and authentication bypass.

The Marketplace · Dogcat · The London Bridge · Battery · CTF Collection Vol.2 · The Sticker Shop · Capture! · Wekor · MD2PDF

Pri Escalation — Linux

SUID abuse, PATH hijacking, cronjob exploitation, sudo misconfiguration.

Kenobi · Madness · Ea · Cheese CTF · Watcher · Oh My WebServer · Startup

Pri Escalation — Windows

Token impersonation, WinPEAS, unquoted service paths, Metasploit post-exploitation.

Alfred · Blue · HackPark · Steel Mountain · Ice · Blueprint · Flatline

C

Real-world CVEs in lab en, 2004 to 2025.

Erlang/OTP C · Roundcube C · Sil C · Annie C · Kiba C · Blue MS17-010 · Ice C

Cryptography & Steganography

Hash cracking, cipher analysis, encoding challenges, steganographic extraction.

Crack the Hash Level-1 · Crack The Hash Level-2 · Cicada-3301 Vol:1 · C4ptur3-th3-fl4g · W1seGuy · Cipher's Secret Message

Container & Cloud Security

Docker socket exploitation, container escape, multi-hop pi, cloud misconfiguration.

ContainMe · Dogcat · The Great Escape · The Marketplace · A Bucket of Phish

Binary Exploitation & Reverse Engineering

Buffer o, binary analysis, shellcode execution, reverse engineering.

Precision · Void Execution · 0x41haz · Compiled · Mindgames

Forensics & DFIR

memory analysis, log in, digital forensics.

Analysing Memory · Slingshot · Event Horizon · Directory · Dumping Router Firmware

AI & LLM Security

Prompt injection and LLM jailbreaking in a sandboxed lab.

E · E v2 · BankGPT

---

Walkthroughs

| Room Name | Difficulty | Type |Description | Room Type |
|:---:|:---:|---|---|---|
| 0day | Medium | Linux | Exploit Ubuntu, like a Turtle in a Hurricane | CTF |
| 0x41haz | Easy | Linux | Simple Re Challenge | Reverse Engineering |
| 25 Days of Cyber Security | Easy | Linux | Get started with Cyber Security in 25 Days - Learn the basics by doing a new, beginner friendly security challenge every day. | Learning |
| A Bucket of Phish | Easy | Linux | From the Hackfinity Battle CTF event. | cloud |
| Abusing Windows Internals | Hard | Windows | Le windows internals components to evade common detection solutions, using modern tool-agnostic approaches. | Learning |
| Agent Sudo | Easy | Linux | You found a secret ser under the deep sea. Your task is to hack inside the server and reveal the truth | CTF C |
| Alfred | Easy | Windows | Exploit Jenkins to gain an initial shell, then escalate your pri by exploiting Windows authentication tokens. | pri escalation impersonation |
| Analysing Memory | Medium | Windows |Learn how the Windows OS manages data in different files on disk. Explore how to extract and analyse data from those artefacts.|Forensics|
| Annie | Medium | Linux | Remote access comes in different flavors | AnyDesk 5.5.2 – Remote Code Execution C |
| Anonforce | Easy | Linux | boot2root machine for FIT and bsides guatemala CTF | CTF |
| Archangel | Easy | Linux | Boot2root, Web exploitation, Pri escalation, LFI | CTF |
| Basic-Pentesting | Easy | Linux | This is a machine that allows you to practise web app hacking and pri escalation | CTF |
| Battery | Medium | Linux | CTF designed by CTF lover for CTF lovers | Re-Registration Attack XML External Entity Sudo Abuse|
| Biteme | Medium | Linux | Stay out of my server! | CTF |
| Blue | Easy | Windows | Windows Exploitation Basics - Easy | MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption |
| Blueprint | Easy | Windows | Hack into this Windows machine and escalate your pri to Administrator. | osCommerce 2.3.4.1 - Remote Code Execution |
| Bounty Hacker | Easy | Linux | You talked a big game about being the most elite hacker in the solar system. Prove it and claim your right to the status of Elite Bounty Hacker!| CTF |
| Break Out The Cage | Easy | Linux | Help Cage bring back his acting career and in the nefarious goings on of his agent! | CTF |
| Brooklyn-Nine-Nine | Easy | Linux | This room is aimed for beginner le but anyone can try to hack this box. There are two main intended ways to root the box | CTF |
| Bugged | Easy | Linux | John likes to live in a very Internet connected world. Maybe too connected...| IoT Device hacking |
| C4ptur3-th3-fl4g | Easy | Linux | A beginner level CTF challenge | Decoding Messages Spectrograms Steganography Security through obscurity |
| CMesS | Medium | Linux | Can you root this Gila CMS box? | Gila CMS 1.10.9 |
| CTF collection Vol.2 | Medium | Linux | Sharpening up your CTF skill with the collection. The second is about web-based CTF. | CTF Cryptography |
| Capture! | Easy | Web | Can you bypass the login form? | Authentication Bypass |
| Careers in Cyber | Info | None | Learn about the different careers in cyber security | Guide |
| Cheese CTF | Easy | Linux | Inspired by the great cheese talk of THM!| CTF LFI RCE SUID |
| Chocolate_Factory | Easy | Linux | A Charlie And The Chocolate Factory themed room, revisit Willy Wonka's chocolate factory!| CTF |
| Cicada-3301 Vol:1 | Medium | Linux | A basic steganography and cryptography challenge room based on the Cicada 3301 challenges | Cryptography |
| Cipher's Secret Message | Easy | Any |Sharpen your cryptography skills by analyzing code to get the flag. | Caesar Decryption Crypto Challenge |
| Compiled | Easy | Any | Strings can only help you so far. | binary |
| ContainMe | Medium | Linux | Where am I ? Catch me | Container Escape|
| Corridor | Easy | Web | Can you escape the Corridor?| IDOR |
| Crack the Hash Level-1 | Easy | Any | Cracking hashes challenges | Cryptography|
| Crack The Hash Level-2 | Medium | Any | Ad cracking hashes challenges and wordlist generation | Cryptography|
| Cupid's Matchmaker | Easy | Web | Use your web exploitation skills against this matchmaking service.| XSS |
| CyberHeroes | Easy | Web | Want to be a part of the elite club of CyberHeroes? Prove your merit by finding a way to log in! | Broken Authentication |
| De | Easy | Web | Hunt through online de traces to uncover what was left behind. | OSINT |
| Dig Dug | Easy | Any | Turns out this machine is a DNS server - it's time to get your shovels out! |DNS Enumeration |
| Directory | Hard | Any | Do you have what it takes to crack this case? | DFIR |
| Dogcat | Medium | Linux | I made a website where you can look at pictures of dogs and/or cats! Exploit a PHP application via LFI and break out of a docker container. | CTF Web |
| Dumping Router Firmware | Medium | Linux | Have you ever been curious about how your router works? What OS it runs? What makes it tick? | Firmware Analysis |
| Ea | Easy | Linux | Listen closely, you might hear a password! | CTF , PATH hijacking |
| Erlang/OTP SSH_C | Easy | Linux | Learn about and exploit Erlang/OTP SSH C in a lab setup. | C |
| Event Horizon | Hard | Linux | Unearth the secrets beyond the Event Horizon. | DFIR |
| E | Easy | Linux | Practice your LLM hacking skills. | LLM hacking Prompt Injection |
| E v2 | Easy | Web | Put your LLM hacking skills to the test one more time. | Ad LLM hacking Prompt Injection |
| FFuF | Easy | Linux | Enumeration, fuzzing, and directory brute forcing using ffuf | Tool Guide |
| Flatline | Easy | Windows | How low are your morals? |FreeSWITCH openclinic|
| Game Buzz | Hard | Linux | Part of Incognito CTF | CTF |
| HackPark | Medium | Windows | Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your pri on this Windows machine! | Hydra, RCE & WinPEAS CTF|
| Hacker | Easy | Linux | Someone has compromised this ser! Can you get in and evade their countermeasures? | LFI |
| Hackfinity Battle | Medium | Any | Welcome to the Hackfinity Battle CTF! | Challenge |
| HaskHell | Medium | Linux | Teach your CS professor that his PhD isn't in security. | Python |
| Hidden Deep Into my Heart | Easy | Web | Find what's hidden deep inside this website. | Web Enumeration |
| Hijack | Easy | Linux | Misconfigs conquered, identities claimed. | Misconfiguration |
| Hydra | Easy | Linux | Learn about and use Hydra, a fast network logon cracker, to bruteforce and obtain a website's credentials | Tool Guide |
| Idor | Easy | Web |Learn how to find and exploit IDOR in a web application giving you access to data that you shouldn't have.| Learn idor |
| Ice | Easy | Windows | Deploy & hack into a Windows machine, exploiting a very poorly secured media server | Buffer o in Icecast 2.0.1 allows remote attackers to execute arbitrary code via an HTTP request C |
| Ignite | Easy | Linux | A new start-up has a few issues with their web server | CMS RCE |
| Inside a Computer System | Info | Web |This room covers the basic components of a computer system. |Info|
| Jacob the Boss | Easy | Linux | Find a way in and learn a little more. | C |
| Kenobi | Easy | Linux | Walkthrough on exploiting a Linux machine. Enumerate Samba for shares, manipulate a of proftpd and escalate your pri with path manipulation. | ProFtpd SUID |
| Kiba | Easy | Linux | Identify the critical security flaw in the data dashboard, that allows execute remote code execution. | C |
| Linux Shell | Easy | Linux | Learn about scripting and the different types of Linux shells. | Shell |
| Lo-Fi | Easy | Linux | Want to hear some lo-fi beats, to relax or study to? We've got you covered! | CTF LFI|
| Looking Glass | Medium | Linux | Step through the looking glass. A sequel to the Wonderland challenge room. | CTF |
| Lookup | Easy | Linux | Test your enumeration skills on this boot-to-root machine. | CTF elFinder PHP Connector exiftran Command Injection Path manipulation exploitation |
| Lo Locker | Easy | Web | Use your skills to access other users' letters. | IDOR |
| MD2PDF | Easy | Web | TopTierCon LTD is proud to present its latest product launch. | CTF |
| Madness | Easy | Linux | Will you be consumed by Madness? | CTF Steganography setuid |
| Metamorphosis | Medium | Linux | Part of Incognito CTF | CTF rsync SQL|
| Metasploit: Exploitation | Easy | Linux | Using Metasploit for scanning, assessment and exploitation. | Metasploit |
| Metasploit: Meterpreter | Easy | Linux | Take a deep dive into Meterpreter, and see how in-memory payloads can be used for post-exploitation. | Metasploit |
| Mindgames | Medium | Linux | Just a terrible idea... | Python C|
| Mr Robot CTF | Medium | Linux | Based on the Mr. Robot show, can you root this box? | CTF |
| Nax | Medium | Linux | Identify the critical security flaw in the most powerful and trusted network monitoring software on the market, that allows an authenticated user to execute remote code execution. | C Metasploit |
| Neighbour | Easy | Web | Check out our new cloud service, Authentication Anywhere. Can you find other user's secrets? | IDOR |
| Net Sec Challenge | Medium | Linux | Practice the skills you ha in the Network Security module.| nmap Hydra FTP|
| Ninja Skills | Easy | Linux | Practise your Linux skills and complete the challenges. | in|
| Oh My WebServer | Medium | Linux | Can you root me? | C |
| Pentesting Fundamentals | Easy | Any | Learn the important ethics and methodologies behind every pentest. | info |
| Pickle Rick | Easy | Linux | A Rick and Morty CTF. Help turn Rick back into a human!| CTF Web Cmd |
| Poster | Easy | Linux | The sys admin set up a rdbms in a safe way. | RDBMS Exploitation |
| Precision | Hard | Linux | Practice your ad Linux Exploit De skills. | Binary Exploitation |
| Principles of Security | Easy | Any | Learn the principles of information security that secures data and protects systems from abuse | info |
| Psyco Break | Easy | Linux | Help Sebastian and his team of in to withstand the dangers that come ahead. | CTF |
| Publisher | Easy | Linux | Test your enumeration skills on this boot-to-root machine | CTF C |
| Red Stone One Carat | Medium | Linux | First room of the Red Stone series. Hack ruby using ruby.| restricted rzsh shell |
| Red Team Fundamentals | Easy | Any |Learn about the basics of a red engagement, the main components and stakeholders in, and how red teaming differs from other cyber security engagements.|
| RootMe | Easy | Linux |A ctf for beginners, can you root me? | File Upload |
| Roundcube: C | Easy | Linux | Exploit C in a lab en. | C |
| Search Skills | Easy | Any |Learn to efficiently search the Internet and use specialized search engines and technical docs. | OSINT |
| Sil | Easy | Linux | Can you breach the server? | C |
| Simple CTF | Easy | Linux | Beginner level ctf | C Vim |
| Slingshot | Easy | Linux |Can you retrace an attacker's steps after they enumerate and compromise a web server?| Logs |
| smol | Medium | Linux |Test your enumeration skills on this boot-to-root machine. | CTF |
| Soupedecode 01 | Easy | Windows | Test your enumeration skills on this boot-to-root machine.| AD |
| Speed Chatting | Easy | Web | Can you hack as fast as you can chat? | RCE |
| Startup | Easy | Linux |Abuse traditional means. | CTF |
| Steel Mountain | Easy | Linux | Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows pri escalation enumeration and learn a new technique to get Administrator access. | C |
| The Greenholt Phish | Easy | Windows | VERA reads every guestbook entry as an instruction. You write something she really shouldn't act on.| SOC|
| The Guestbook | Medium | Web / AI | | AI |
| The Phishing Pond | Easy | Web | Catch the phish before the phish catches you. | Identifying Phishing Emails |
| The Great Escape | Medium | Linux | Our devs ha an awesome new site. Can you break out of the sandbox? | API Docker |
| The London Bridge | Medium | Linux | The London Bridge is falling down | SSRF C|
| The Marketplace | Medium | Linux | Can you take over The Marketplace's infrastructure? | XSS SQL Docker |
| The Server From Hell | Medium | Linux |Face a server that feels as if it was configured and deployed by Satan himself. Can you escalate to root? | CTF |
| The Sticker Shop | Easy | Linux | Can you exploit the sticker shop in order to capture the flag? | XSS |
| Tomghost | Easy | Linux | Identify recent to try exploit the system or read files that you should not ha to. | C–1938 |
| Toolbox: Vim | Easy | Lin/Win | Learn vim, a uni text editor that can be incredibly powerful when used properly. From basic text editing to editing of binary files, Vim can be an important arsenal in a security toolkit. | Tool Guide |
| TryHeartMe | Easy | Web |Access the hidden item in this 's gift shop. |CTF,Web Exploitation, JWT Manipulation|
| UltraTech | Medium | Linux | The basics of Penetration Testing, Enumeration, Pri Escalation and WebApp testing | CTF |
| | Medium | Web | Can you find in this new dating app? | LFI |
| Void Execution | Medium | Linux |Learn how to bypass restrictions in Linux exploit de. | Binary Exploitation |
| 101 | Easy | Any | Understand the flaws of an application and apply your researching skills on some databases. | Info |
| W1seGuy | Easy | Linux | A w1se guy 0nce said, the answer is usually as plain as day. | Cryptography |
| Watcher | Medium | Linux | A boot2root Linux machine utilising web exploits along with some common pri escalation techniques | LFI Cronjob|
| Web Application Security | Easy | Web | Learn about web applications and explore some of their common security issues. | Info |
| Web Application Basics | Easy | Web | Learn the basics of web applications: HTTP, URLs, request methods, response codes, and headers.| Info |
| Wekor | Medium | Linux | CTF challenge in SQLi, WordPress, vhost enumeration and recognizing internal services. | SQL WordPress Reverse Engineering |
| Welcome | Easy | Linux |Learn how to use a TryHackMe room to start your upskilling in cyber security. | Info |
| Wgel CTF | Easy | Linux | Can you exfiltrate the root flag? | CTF |
| Whiterose | Easy | Linux | Yet another Mr. Robot themed challenge. | EJS SSTI|
| Windows Fundamentals 1 | Info | Windows | In part 1 of the Windows Fundamentals module, we'll start our journey learning about the Windows desktop, the NTFS file system, UAC, the Control Panel, and more..| Windows |
| Wonderland | Medium | Linux | Fall down the rabbit hole and enter wonderland | Python |
| Year of the Dog | Hard | Linux | Always so polite... | Sqli Gitea |
| Year-of-the-Owl | Hard | Windows | The foolish owl sits on his throne... | CTF |
| Zeno | Medium | Linux | Do you have the same patience as the great stoic philosopher Zeno? Try it out!| Restaurant Management System 1.0 - Remote Code Execution |
| hc0n Christmas CTF | Hard | Linux | Hack the planet | CTF |

---

Additional Information

This repository may also include relevant supporting files for each room, such as exploit scripts, log samples, and scan output. These can be found within the respective room directories.

All walkthroughs are for educational purposes only. Always adhere to ethical hacking principles and the terms and conditions of the TryHackMe platform.

---

Contributing

Contributions are welcome. To add a walkthrough or improve an existing one, follow the standard GitHub workflow: fork the repository, make your changes, and submit a pull request.

---

*This collection is maintained by Esther7171.*

项目信息

开发语言：Python

Star 数：81

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕137+ TryHackMe walkthroughs covering web exploitation, privilege escalation, CVE analysis, container escapes, and AI/LLM security. Beginner to intermediate.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。