We're looking for 10 companies (such as CISOs/CTOs/founders/engineering-leaders) to beta test our new AI pentesting solution. Get (for free) a fully automated pentest of your web app.

We're building this under TryHackMe. In exchange for honest feedback (and a testimonial if we find real issues), you get a free pentest that typically covers >80% of most web apps.

Apply: https://forms.gle/KS2EPGcHhUrAsfyk9 (if you know someone, please forward this on!)

Note: We don't believe pentesters will be replaced - the role is evolving, and we're updating TryHackMe's training content to reflect changes we're seeing already happening in the industry.

Did some hands-on exercises today with directories using Command Prompt.
Learning by doing is way more fun than just reading about it.
Small steps, but it’s all stacking up. Let’s keep it rolling!

hey I'm currently stuck on this intro does anyone know how to get past this. I'm currently running this on on MAC OS on safari.

How to get it unbanned I contact support but no one response

I get access to the tryhackme machine using the ssh and now i have to access the root file.
The user tryhackme have not permission to read that file and now when i want to switch the user to root using 'su root' it ask for password of root which in not provided in any documentation.
now how do i get access to the root file?

Seeing all these discounts it's really starting to annoy me that openvpn keeps dropping out and the Kali attack box suck and is so slow. I don't understand how a company that knows so much about systems haven't gotten it efficient and effective enough that you can actually keep to the times required to do the rooms.

Am I doing something wrong?

Based in Australia 🇦🇺

Hey everyone,

I’ve just completed the CyberChef – Hoperation Save McSkidy room on TryHackMe.

It focuses on practical encoding and decoding challenges using CyberChef, wrapped in a fun, story-based scenario.

I found it really helpful for building confidence with data transformations and tool-based problem solving.

Room link:

https://tryhackme.com/room/encoding-decoding-aoc2025-s1a4z7x0c3

On to the next mission — breaching the Quantum Fortress 🚀

Like I get you're proud, but it's not that interesting for others to know that you just finished learning about basic linux syntax.

I just completed Neighbour room on TryHackMe. Check out our new cloud service, Authentication Anywhere. Can you find other user's secrets?

Hi Everyone,

Is there a way to get tryhackme premium on discounted prices?

Any discount coupons or vouchers?

So I completed pre security on thm. But I find i don't read alot of the content.i just go straight for the questions to get my streak and score. And this is for all rooms.

Anybody else do this?

I went to the practice room to start the practice challenges. But then as i was about to start, i was so lost and confused as i do not know where to start, i tried checking YouTube but I was completely lost as the youtubers i checked out where skipping a lot of steps. please I need on how to understand and get started on the practice rooms.

Started my TryHackMe journey recently, and today I hit a 3-day streak! 🔥

I know 3 days isn't a huge achievement, but for me, staying consistent is the important part.

Currently learning cybersecurity and working toward web penetration testing. 🧑‍💻🔐

Hopefully I can keep this streak going and look back after a few months to see how far I've come.

Day 3 — let's keep going! 🚀

Hi,

I’m a MERN stack developer (1.5 years at a startup, skilled in MongoDB, Express.js, React, Node.js) looking to switch to cybersecurity, specifically penetration testing. I’m prepping for eJPT and practicing on TryHackMe/Hack The Box.

Questions (India Focus):

1. Is penetration testing a good career move in India in 2025? What’s the demand for junior pentesters in India?

2. Is eJPT valued by Indian employers, or should I aim for CEH/Security+?

3. How can my MERN skills (e.g., web app dev) help in pentesting?

4. What’s the salary for entry-level pentesters? I’ve heard ₹5-10 LPA.

5. Tips to break into cybersecurity in India? How to handle competition?

Background:

• 1.5 years as MERN dev.

• Learning networking, Linux, and tools (Kali, Burp Suite, Nmap).

is this transition smart or foolish?

Thanks! 🙌

Hi all,

I've been tryin' to level up on my p3nt3sting skillset. I've been lurin' on this chan for a while. Do you guys reccomend this? I'm also looking at hackerone, bugcrowd, bughunters. Seems like this one is just as good as the others.

Thx for any tips.

Hey everyone,

My current career has me in the range of $130-160k/yr.. base salary. I have a family of four and to support my family, have savings, pay bills, maintain my house, go on vacations etc.. I cannot go below $135k/yr, especially not in this economy in the U.S.

With that said, I want to get into security due to the high demand and hopefully job/career security. More importantly being able to move overseas if and when I desire while maintaining this career. My security strength at this time is in identity access management and data leak protection. At this time I am not quick to leave my current career.

I’m very tempted to pay for the annual premium service but I fear there’s going to be roadblocks. I understand networks to an extent but programming? Forget it.

Starting from scratch, realistically will I have a chance? I’m weird about money, I don’t like it going to waste, it has to have purpose when I spend it, in this case ROI.

And if so, what route should I go that will sustain my salary needs but avoid programming unless it somehow teaches how to program for dummies (which I have a feeling I’ll fail at).

Please assist.

I see a lot of posts about people complaining about the VPN issues. Can someone explain why people don't just use the attackboxes instead? Am I missing out on something by just using the attackbox?

I took the annual subscription, before payment it showed "Get 6 months free with annual", but after payment I can see the next renewal is next year June. What about 6 months free ? How to claim the 6 months.

Not saying that I think it's a totally bad thing. but there are a number of rooms that I call "Cut and Paste" rooms. These are informational rooms, where all you have to do is read the text then go back and find the phrase needed to paste into the questions.
These are text book rooms. You read the info and then go back and find the answers in the text you just read. Yes you may learn from these, but they are easy points and when you find one it's an easy way to extend your daily streak.

Does companies recognize the certification?