TryHackMe Recruit Walkthrough: SSRF, LFI, and SQL Injection
Learn how the TryHackMe Recruit challenge chains information disclosure, SSRF, local file access, credential exposure, and SQL injection to reach administrative access.
-
-
TryHackMe Compiled Walkthrough: My First Time Decompiling a Program
My first experience using Ghidra to decompile a TryHackMe binary, locate the main function, analyze scanf and strcmp, and work backward toward a hidden flag.
-
TryHackMe Walkthrough: Operation Promotion
One engagement stands between you and your next title. This is a complete walkthrough of the premium TryHackMe-style room Operation Promotion. It covers the full attack path from initial reconnaissance through SQL injection, command injection, reverse shell, credential cracking, and user flag capture, with notes on the privilege escalation stage that follows. Lab Setup &…
-
TryHackMe Byte Lotus — Exposed Git Repository
A hidden .git directory on the Byte Lotus web server turns a simple enumeration challenge into a lesson in source code disclosure. We’ll discover the exposed repository, reconstruct the application with Git, inspect the recovered source, and track down the hidden functionality—without spoiling the flag.