TryHackMe Wrong Path — Building My First Boot2Root Room
A walkthrough of TryHackMe Wrong Path, a Linux Boot2Root challenge featuring command injection, legacy credentials, SSH key recovery, and PATH hijacking.
-
-
TryHackMe Recruit Walkthrough: SSRF, LFI, and SQL Injection
Learn how the TryHackMe Recruit challenge chains information disclosure, SSRF, local file access, credential exposure, and SQL injection to reach administrative access.
-
TryHackMe Support Walkthrough: From Web Enumeration to Remote Code Execution
A complete TryHackMe Support walkthrough covering web enumeration, credential discovery, browser storage manipulation, IDOR, path traversal, HTTP analysis, Burp Suite, and OS command injection.
-
TryHackMe MD2PDF Walkthrough: Exploiting SSRF Through PDF Generation
This TryHackMe MD2PDF walkthrough explores how insecure Markdown-to-PDF rendering can be abused through HTML injection and SSRF to access a localhost-only resource.
