Hey everyone,

I got tired of losing track of which TryHackMe rooms taught what, having random Notion pages everywhere, and forgetting where I saved creds or hashes from older boxes. So I built a free browser tool called ZeroBox for myself and figured other people here might find it useful too.

Live app: https://ctftracker.com/

GitHub (source-available): https://github.com/0xdnd/ctf-tracker

What's in it:

- 451 TryHackMe rooms already loaded (plus Hack The Box, Proving Grounds, and VulnHub, or you can add your own custom rooms).

- Kanban, table, grid, or graph view with filters for Linux/Windows privesc, web, beginner rooms, and OSCP-style prep.

- Built-in Markdown notes, a loot vault for creds/hashes, an 8-phase checklist, and 131 reverse shell one-liners where you set LHOST/LPORT once and it fills them in.

- Bulk import so you can paste the THM rooms you already finished instead of clicking them off one by one.

- Runs offline in your browser with no account, no ads, and no app tracking. Your notes and progress stay on your device (with JSON backup export/import).

Just to be upfront: this is an independent side project (not affiliated with TryHackMe), it doesn't auto-sync with your THM profile, and there are no spoilers or flag answers in it.

If you check it out, I'd love to hear what feels useful or what's missing for THM.

I’ve been on THM for a few years now and I’m getting with understanding the materials but I need a path of CTFS that utilize all the material of the Hiler into one room so I can be more prepared than to getting a career

I am selling my THM yearly subscription for a month in half of the actual price, if anyone is interested lmk.

You can use it for learning.

I have a Premium subscrption but i don't have the access to the rooms and paths that are now MAX plan and it clearly states :

"MAX is here, but don’t worry... Your current Premium subscription includes access to all content except Cloud until July 2027. Learn more about this here, or upgrade to MAX for cloud, more advanced paths, and the persistent AttackBox."

I tried with the bot for suport but like all the bots it was not of a help. Thanks.

Hey folks,

Are there any social channels for THM Advent of cyber chat? Would love to have some people to chat to, learn, banter while doing the rooms through out the month. Kind of lonely on my current remote security engineering team 😞

Many thanks.

If you're a beginner or at an intermediate level in Cybersecurity and genuinely interested in learning, exploring, and growing in this field, feel free to DM me.

Let's connect, share knowledge, collaborate, and grow together!

BODY:

Disclosure: I'm the creator. It's free, with no ads and no payment details.

I'm a third-year BTech student working towards a SOC L1 role, studying with TryHackMe and YouTube. The part I wanted more practice at was what comes after the alert fires: checking the evidence, deciding true or false positive, writing it up for L2, and knowing when to escalate.

So I built ShiftLab, a browser simulator:

• 51 fictional alerts, Beginner to AI-era

• Logs, mail headers and playbooks to investigate

• A four-part report (what happened, confirmed, not known, next steps) that gets coached, not just scored

What I'd like to know from people who are further along:

1. Does the evidence feel realistic or too clean?

2. Is anything confusing?

3. What would you want in a model L1 report?

First alert needs no signup: https://shiftlab.blueteam-labs.workers.dev/?ref=reddit-thm

Mods, happy to take this down if it isn't allowed. Thanks!

I cancelled my subscription and they continued to charge my card and won't refund me. Steer clear from these thieves.

Ok so I am 18 I finished my coursera 8 course certification in a little under 3 months and Study a ton and I want an overnight job and I was wondering what should be my next step and how should I break in while I’m 19 I study really hard and am willing to put in the work I just need help tbh any help is appreciated I also have a lot of python labs on my GitHub as well I understand basic python

Can I complete the Advent of Cyber tasks out of order? For example, can I do Task 3 before Task 1 or Task 2, since the tasks seem to be independent of each other? Or do I have to follow the order in which they are presented?

The room is rated as easy, but I still struggled to complete it hahaha. What a crazy experience! 😂

Basically, the challenge involves exploiting an insecure Java deserialization vulnerability (CVE-2015-7501).

Throughout the room, you'll encounter an environment based on JBoss, a Java application server, and use tools from the Java exploitation ecosystem, such as ysoserial, to generate payloads and exploit the vulnerability.

It's definitely worth checking out! But here's a tip: it's a good idea to understand the concepts of serialization and deserialization before starting, as this will help you understand what's happening during the exploitation process.

https://tryhackme.com/room/tonythetiger