TryHackMe MD2PDF Walkthrough: Exploiting SSRF Through PDF Generation
This TryHackMe MD2PDF walkthrough explores how insecure Markdown-to-PDF rendering can be abused through HTML injection and SSRF to access a localhost-only resource.
-
-
Management Wants a Word Walkthrough: 5 Windows Forensics Steps | TryHackMe
The Management Wants a Word TryHackMe room explores a Windows forensic investigation involving KAPE artifacts, SAM and SYSTEM registry hives, DPAPI, Chrome credential storage, and a VeraCrypt container. Follow the complete forensic chain without revealing the final flag.
-
TryHackMe After Hours Walkthrough: Uncovering Hidden WMI Persistence
After Hours hides persistence where normal autorun checks may never find it. This walkthrough investigates raw Windows WMI repository artifacts, uncovers a malicious custom class, extracts an encoded .NET payload, and follows the attack chain without revealing the flag.
-
Hacker Holidays – Day 10 – The Hollow Shell
Learn how the TryHackMe The Hollow Shell room demonstrates a classic Zip Slip vulnerability through insecure archive extraction. This walkthrough covers reconnaissance, vulnerability discovery, arbitrary file write, and defensive best practices while intentionally omitting the challenge flag and exploit payload.
-
Hacker Holidays – Day 9 – CryptoCabana Walkthrough
A walkthrough of the TryHackMe CryptoCabana room demonstrating Azure Storage enumeration, Service Principal discovery, and Azure Key Vault exploration. The methodology is covered in detail while intentionally omitting the final flag.
-
Hacker Holidays –Day 7 – Do Not Disturb
Follow the trail of an attacker already inside the Byte Lotus platform. This Hacker Holidays 2026 walkthrough explores session management, server-side template injection, internal service enumeration, and privilege escalation techniques while focusing on methodology rather than challenge spoilers.
-
TryHackMe – Fool’s Mate Walkthrough
TryHackMe, Web Security, JavaScript, Client-Side Validation, API Testing, curl, DevTools, Penetration Testing, Beginner, RootNotebook
-
OSINT Trail Byte Lotus Walkthrough: Finding a Hidden Profile
A casual Discord chat between two Byte Lotus guests hides a complete OSINT trail. One email address and a vague mention of an old free profile tool are all it takes to uncover a forgotten public account—and the challenge’s hidden payoff.
-
Hacker Holidays 2026 – Day 5 – Beach Bar
Soft-opening credentials in an HTML comment, an unsafe YAML loader, and a root process leaking its password in plain sight. Here’s the full path from DJ login to root on TryHackMe’s Beach Bar (Hacker Holidays 2026).
-
Hacker Holidays 2026 – Day 4 Packed Light
A packet capture, a suspicious HTTP cookie, and a trail of Base64-encoded bytes. By identifying the covert channel and reconstructing the traffic, the hidden message could be recovered without ever appearing directly on the wire.