# Classroom

> Cybersecurity blog by Animesh Roy, CTF walkthroughs, malware analysis, penetration testing, and security research.

CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.

## Posts

- [TryHackMe Extract: gopher SSRF to middleware bypass](https://classroom.anir0y.in/post/thm-room-extract/): TryHackMe Extract walkthrough: gopher SSRF through preview.php, CVE-2025-29927 Next.js middleware bypass, PHP serialized cookie 2FA bypass.
- [TryHackMe Chaining Vulnerabilities: XSS to admin takeover](https://classroom.anir0y.in/post/thm-room-chainingvulnerabilitieszp/): TryHackMe Chaining Vulnerabilities walkthrough: combining default credentials, stored XSS, and CSRF to chain a full admin account takeover.
- [TryHackMe Tooling via Browser Automation: Selenium and Playwright](https://classroom.anir0y.in/post/thm-room-customtoolingviabrowserautomation/): TryHackMe Tooling via Browser Automation walkthrough: Selenium CSRF bypass, Tesseract CAPTCHA solving, Playwright with OWASP ZAP vulnerability scanning.
- [TryHackMe Custom Tooling using Burp: AES-CBC brute-force](https://classroom.anir0y.in/post/thm-room-customtoolingviaburp/): TryHackMe Custom Tooling using Burp walkthrough: building Burp extensions for AES-CBC brute-force, ROT13 encoding, and RSA-signed password changes.
- [TryHackMe Custom Tooling Using Python: brute-force to RCE](https://classroom.anir0y.in/post/thm-room-customtoolingpython/): TryHackMe Custom Tooling Using Python walkthrough: brute-force login, vulnerability scanning, RCE exploit, and task automation with Python requests.
- [TryHackMe CAPTCHApocalypse: automated CAPTCHA brute-force](https://classroom.anir0y.in/post/thm-room-captchapocalypse/): TryHackMe CAPTCHApocalypse walkthrough: RSA-encrypted login brute-force with automated Tesseract OCR CAPTCHA solving, per-request CSRF rotation handling.
- [TryHackMe Padding Oracles: AES-CBC byte-by-byte decryption](https://classroom.anir0y.in/post/thm-room-paddingoracles/): TryHackMe Padding Oracles walkthrough: PKCS7 padding, AES-CBC encryption and decryption, padding oracle attack theory, and PadBuster automation.
- [TryHackMe Attacking ECB Oracles: chosen-plaintext secret recovery](https://classroom.anir0y.in/post/thm-room-attackingecboracles/): TryHackMe Attacking ECB Oracles walkthrough: AES-ECB chosen-plaintext attack, block size and offset determination, byte-by-byte secret recovery from an oracle.
- [TryHackMe Length Extension Attacks: SHA-256 forging and escalation](https://classroom.anir0y.in/post/thm-room-lengthextensionattacks/): TryHackMe Length Extension Attacks walkthrough: SHA-256 internal state recovery, forged file signatures, cookie role escalation, and HMAC as the fix.
- [TryHackMe Breaking Crypto the Simple Way: RSA to AES bit-flip](https://classroom.anir0y.in/post/thm-room-breakingcryptothesimpleway/): TryHackMe Breaking Crypto the Simple Way walkthrough: RSA weak key factoring, HMAC dictionary attack, AES-CBC brute force, and bit-flip role escalation.
- [TryHackMe Mayhem: Havoc C2 PCAP forensics with AES-256-CTR decryption](https://classroom.anir0y.in/post/thm-room-mayhemroom/): TryHackMe Mayhem walkthrough: decrypt Havoc C2 Demon agent traffic with AES-256-CTR, recover attacker commands, exfiltrated credentials, and persistence.
- [TryHackMe Source Code Review PHP: XXE to deserialization RCE](https://classroom.anir0y.in/post/thm-room-sourcecodereviewsphp/): TryHackMe Source Code Review PHP walkthrough: XXE via LIBXML_NOENT, unserialize Monolog/RCE1, magic hash bypass, and Laravel framework review.
- [TryHackMe Web Frameworks .NET: ViewState RCE to Json.NET deser chain](https://classroom.anir0y.in/post/thm-room-webframeworksnet/): TryHackMe Web Frameworks .NET walkthrough: ViewState RCE via leaked machineKey, EF Core FromSqlRaw SQLi, mass assignment, and Json.NET deser.
- [TryHackMe Web Frameworks Python: Django leak to Flask session forgery](https://classroom.anir0y.in/post/thm-room-webframeworkspython/): TryHackMe Web Frameworks Python walkthrough: Django DEBUG SECRET_KEY leak, ORM extra() SQLi, Flask session forgery with flask-unsign, and Jinja2 SSTI to RCE.
- [TryHackMe Web Frameworks Java: Spring actuator to deserialization RCE](https://classroom.anir0y.in/post/thm-room-webframeworksjava/): TryHackMe Web Frameworks Java walkthrough: Spring actuator leak, UNION SQLi via JdbcTemplate, mass assignment overpost, and ysoserial deserialization RCE.
- [TryHackMe Web Frameworks Code Review: source-to-sink Flask audit](https://classroom.anir0y.in/post/thm-room-webframeworkscodereview/): TryHackMe Web Frameworks Code Review walkthrough: source-to-sink Flask audit with grep and Semgrep triage, then SQLi, SSTI, and path traversal exploitation.
- [TryHackMe El Bandito: H2.CL desync to steal bot credentials](https://classroom.anir0y.in/post/thm-room-elbandito/): TryHackMe El Bandito walkthrough: Spring Boot heapdump extraction and H2.CL desync via raw HTTP/2 frames to capture the bot's flag cookie.
- [TryHackMe HTTP Browser Desync: client-side smuggling via Werkzeug](https://classroom.anir0y.in/post/thm-room-requestsmugglingbrowserdesync/): TryHackMe HTTP Browser Desync walkthrough: Werkzeug CVE-2022-29361 keep-alive desync, form-based client-side smuggling, and XSS chaining to steal session cookies.
- [TryHackMe WebSocket Request Smuggling: proxy bypass via fake upgrades](https://classroom.anir0y.in/post/thm-room-wsrequestsmuggling/): TryHackMe WebSocket Request Smuggling walkthrough: broken WebSocket tunnel through Varnish, SSRF-based fake 101 injection to defeat Nginx proxy.
- [TryHackMe HTTP/2 Request Smuggling: CRLF injection and cache poisoning](https://classroom.anir0y.in/post/thm-room-http2requestsmuggling/): TryHackMe HTTP/2 Request Smuggling walkthrough: H2.CL desync, CVE-2019-19330 CRLF injection via literal HPACK encoding, web cache poisoning, and h2c smuggling.
- [TryHackMe HTTP Request Smuggling: CL.TE desync exploitation](https://classroom.anir0y.in/post/thm-room-httprequestsmuggling/): TryHackMe HTTP Request Smuggling walkthrough: CL.TE desync between ATS and Nginx to capture authenticated dashboard credentials via smuggled POST.
- [TryHackMe CORS and SOP: cross-origin data exfiltration](https://classroom.anir0y.in/post/thm-room-corsandsop/): TryHackMe CORS and SOP walkthrough: arbitrary origin reflection, bad regex bypass via subdomain, and null origin exploitation through sandboxed iframes.
- [TryHackMe DOM-Based Attacks: stored XSS via Vue v-html exploitation](https://classroom.anir0y.in/post/thm-room-dombasedattacks/): TryHackMe DOM-Based Attacks walkthrough: DOM tree fundamentals, source and sink analysis, stored XSS through Vue v-html, and weaponised birthday list exploitation.
- [TryHackMe CSRF: token bypass and SameSite cookie exploitation](https://classroom.anir0y.in/post/thm-room-csrfv2/): TryHackMe CSRF walkthrough: GET-based transfer exploit, double submit cookie token prediction, SameSite Lax bypass for logout and isBanned cookie attacks.
- [TryHackMe XSS: reflected, stored, and DOM-based scripting attacks](https://classroom.anir0y.in/post/thm-room-axss/): TryHackMe XSS walkthrough: reflected injection via copyparty CRLF, stored XSS sanitization in JavaScript and ASP.NET, and DOM-based client-side exploitation.
- [TryHackMe Include: from property injection to log poisoning RCE](https://classroom.anir0y.in/post/thm-room-include/): TryHackMe Include walkthrough: property injection to admin, SSRF credential theft, nested traversal LFI bypass, and SMTP log poisoning to RCE.
- [TryHackMe Prototype Pollution: injecting properties through the chain](https://classroom.anir0y.in/post/thm-room-prototypepollution/): TryHackMe Prototype Pollution walkthrough: JavaScript prototype chain exploitation for property injection, denial of service via toString override, and lodash abuse.
- [TryHackMe File Inclusion: from path traversal to code execution](https://classroom.anir0y.in/post/thm-room-filepathtraversal/): TryHackMe File Inclusion walkthrough: relative and absolute path traversal, PHP wrapper code execution via base64 decode, and log poisoning to RCE.
- [TryHackMe SSRF: forging requests from the server side](https://classroom.anir0y.in/post/thm-room-ssrfhr/): TryHackMe SSRF walkthrough: local config theft via file_get_contents, internal admin pivot, blind OOB phpinfo exfiltration, and memory crash DoS.
- [TryHackMe Whats Your Name: XSS, CSRF and SQLi chain](https://classroom.anir0y.in/post/thm-room-whatsyourname/): TryHackMe Whats Your Name walkthrough: stored XSS cookie theft, CSRF password reset via admin bot, UPDATEXML SQLi, and cross-subdomain session abuse.
- [TryHackMe Insecure Deserialisation: PHP Object Injection to RCE](https://classroom.anir0y.in/post/thm-room-insecuredeserialisation/): Walkthrough of TryHackMe Insecure Deserialisation: PHP cookie property tampering, object injection via __wakeup to a reverse shell, and PHPGGC gadget chains.
- [TryHackMe LDAP Injection: Auth Bypass to Blind Exfiltration](https://classroom.anir0y.in/post/thm-room-ldapinjection/): Walkthrough of TryHackMe LDAP Injection: tautology authentication bypass, enumerating every directory entry, and blind boolean injection to reach the dashboard flag.
- [TryHackMe Server-side Template Injection: SSTI to RCE](https://classroom.anir0y.in/post/thm-room-serversidetemplateinjection/): Walkthrough of TryHackMe Server-side Template Injection: confirming SSTI in Smarty, Pug, and Jinja2, then escaping each to RCE plus a Form Tools Smarty chain.
- [TryHackMe Injectics: SQLi Filter Bypass to Twig RCE](https://classroom.anir0y.in/post/thm-room-injectics/): Walkthrough of TryHackMe Injectics: bypassing the login SQLi keyword filter, stacked query injection, and a Twig sandbox escape via the sort filter for RCE.
- [TryHackMe ORM Injection: whereRaw and ORDER BY Injection](https://classroom.anir0y.in/post/thm-room-orminjection/): Walkthrough of TryHackMe ORM Injection: Laravel whereRaw raw query injection to dump admins and an ORDER BY json_extract break-out that leaks every user.
- [TryHackMe XXE Injection: File Read, SSRF, and Exfiltration](https://classroom.anir0y.in/post/thm-room-xxeinjection/): Walkthrough of TryHackMe XXE Injection: in-band XML External Entity file read, SSRF port scanning through the parser, and out-of-band DTD exfiltration.
- [TryHackMe NoSQL Injection: MongoDB Operator and Syntax](https://classroom.anir0y.in/post/thm-room-nosqlinjectiontutorial/): Walkthrough of TryHackMe NoSQL Injection: MongoDB operator injection to bypass login, blind regex password extraction, and where-clause syntax injection.
- [TryHackMe Advanced SQL Injection: Five Evasion Techniques](https://classroom.anir0y.in/post/thm-room-advancedsqlinjection/): Walkthrough of TryHackMe Advanced SQL Injection: second-order SQLi, keyword and space filter evasion, UNION out-of-band extraction, and header injection techniques.
- [TryHackMe Hammer: OTP Rate-Limit Bypass to JWT kid RCE](https://classroom.anir0y.in/post/thm-room-hammer/): Walkthrough of TryHackMe Hammer: leak a reset email from a log, bypass the OTP rate limit via X-Forwarded-For, forge a JWT from its kid key file, and get RCE.
- [TryHackMe Operation Promotion: SQLi, Command Injection, sudo find](https://classroom.anir0y.in/post/thm-room-operation-promotion/): Walkthrough of TryHackMe Operation Promotion: a SQLi admin login bypass, IDOR, command injection to www-data, a cracked jford password, and a sudo find root.
- [TryHackMe Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin](https://classroom.anir0y.in/post/thm-room-dead-drop/): Walkthrough of TryHackMe Dead Drop: SQLi login bypass, a Node require() RCE, an APK credential leak, and an AddSelf ACL abuse that pivots to Domain Admin.
- [TryHackMe Disgruntled: Linux Forensics of an Insider Logic Bomb](https://classroom.anir0y.in/post/thm-room-disgruntled/): Walkthrough of TryHackMe Disgruntled: a Linux forensics case tracing an insider through auth.log sudo history, bash history, and a cron logic bomb.
- [TryHackMe Silent Monitor: SQLi, Command Injection, KeePass to Root](https://classroom.anir0y.in/post/thm-room-silent-monitor/): Walkthrough of TryHackMe Silent Monitor: SQLi login bypass, newline command injection in a ping tool, a leaked service password, and a cracked KeePass vault to root.
- [TryHackMe Domino: IDOR to Forged JWT to RCE to Root](https://classroom.anir0y.in/post/thm-room-domino/): Walkthrough of TryHackMe Domino: weak creds, IDOR, forged session cookie and JWT, an RFI eval sink for RCE, SSH credential reuse, and a cron root privesc.
- [TryHackMe Re-Testing: Verify Fixes, Catch Patches](https://classroom.anir0y.in/post/thm-room-retesting/): Walkthrough of TryHackMe Re-Testing: re-test vs reassessment, pass/fail/risk-accepted outcomes, variant SQLi payloads, incomplete patches, and the re-test report.
- [TryHackMe Writing Pentest Reports: Structure and QA](https://classroom.anir0y.in/post/thm-room-writingpentestreports/): Walkthrough of TryHackMe Writing Pentest Reports: structure, technical vs business audience, vulnerability write-ups, appendices, QA, and static-app flags.
- [TryHackMe Planning and Scoping: Scope, RoE, Compliance](https://classroom.anir0y.in/post/thm-room-planningandscoping/): Walkthrough of TryHackMe Planning and Scoping: PTES, known and unknown environments, allowlist scope, Rules of Engagement, PCI DSS, GDPR, and BrightCart flag.
- [TryHackMe Threat Modeling for Pentesters: STRIDE to ATT&CK](https://classroom.anir0y.in/post/thm-room-threatmodelingforpentesters/): Walkthrough of TryHackMe Threat Modeling for Pentesters: STRIDE threat categories, DREAD scoring, PASTA stages, MITRE ATT&CK mapping, and Stratford capstone flag.
- [TryHackMe Python Pentesting Scripts: Recon Toolkit](https://classroom.anir0y.in/post/thm-room-pythonpentestingscripts/): Walkthrough of TryHackMe Python Pentesting Scripts: web directory enumeration, Scapy ARP and socket port scanning, hashlib cracking, and Paramiko SSH brute-forcing.
- [TryHackMe Python Building Scripts: Functions to a Checker](https://classroom.anir0y.in/post/thm-room-pythonbuildingscripts/): Walkthrough of TryHackMe Python Building Scripts: functions with return and defaults, try except error handling, file I/O, pip libraries, and a password checker.
- [TryHackMe Python Core Concepts: Types, Lists, Loops](https://classroom.anir0y.in/post/thm-room-pythoncoreconcepts/): Walkthrough of TryHackMe Python Core Concepts: data types, strings, lists and dictionaries, operators, and for and while loops, answer masks decoded.
- [TryHackMe DevSecOps Basics: Shifting Security Left](https://classroom.anir0y.in/post/thm-room-devsecopsbasics/): Walkthrough of TryHackMe DevSecOps Basics: the story from Waterfall to Agile to DevOps, shifting security left, DevSecOps culture, and the Fuel Trouble flag.
- [TryHackMe The Blue Team Perspective: Splunk BOTSv1 Triage](https://classroom.anir0y.in/post/thm-room-blueteamperspective/): Walkthrough of TryHackMe The Blue Team Perspective: triage the Wayne Corp breach in Splunk over the BOTSv1 dataset, mapped to NIST, MITRE, and the Pyramid of Pain.
- [TryHackMe LLM Pentesting: Fingerprint and Exploit an AI Assistant](https://classroom.anir0y.in/post/thm-room-llmpentesting/): Walkthrough of the TryHackMe LLM Pentesting room: fingerprint Ollama, extract the system prompt, and exploit the AIDEN assistant to recover the flag.
- [TryHackMe Cloud Security Fundamentals: SSRF to IMDS Chain](https://classroom.anir0y.in/post/thm-room-cloudsecurityfundamentals/): TryHackMe Cloud Security Fundamentals walkthrough: a guided chain from port scan to public bucket, SSRF to the IMDS, stolen creds and a wildcard IAM policy.
- [TryHackMe Mobile Application Security: MobSF Static Analysis](https://classroom.anir0y.in/post/thm-room-mobilesecurity/): Walkthrough of TryHackMe Mobile Application Security: MobSF static analysis of the Leaky Package APK and IPA, mapped to the OWASP Mobile Top 10.
- [TryHackMe Forward: Kerberoast Red Herring to RBCD](https://classroom.anir0y.in/post/thm-room-forwardchallenge/): TryHackMe Forward walkthrough: a Kerberoastable red herring, a KeePass credential reused across accounts, and resource-based constrained delegation to Administrator.
- [TryHackMe Proxy: Coerced Hash to Constrained Delegation](https://classroom.anir0y.in/post/thm-room-proxychallenge/): TryHackMe Proxy walkthrough: a writable SMB share that executes PowerShell, a coerced NetNTLMv2 hash, and Kerberos constrained delegation to Administrator on the DC.
- [TryHackMe Intro to AD Lateral Movement: PsExec to Pivot](https://classroom.anir0y.in/post/thm-room-introductiontoadlateralmovement/): TryHackMe Intro to AD Lateral Movement walkthrough: PsExec and Evil-WinRM remote execution, Pass-the-Hash credential reuse, and an SSH SOCKS pivot onto the DC.
- [TryHackMe Intro to Credential Harvesting: SAM to DCSync](https://classroom.anir0y.in/post/thm-room-introtocredentialharvesting/): TryHackMe Intro to Credential Harvesting walkthrough: SAM and LSA dumps with secretsdump, DPAPI vault looting, DCC2 cracking, DCSync and Pass-the-Hash to the DC.
- [TryHackMe AD Authenticated Enumeration: AS-REP to Graph](https://classroom.anir0y.in/post/thm-room-adauthenticatedenumeration/): TryHackMe AD Authenticated Enumeration walkthrough: AS-REP roasting with GetNPUsers and hashcat, net user enumeration, and BloodHound CE plus PowerView graphs.
- [TryHackMe AD Basic Enumeration: Null Sessions to First Creds](https://classroom.anir0y.in/post/thm-room-adbasicenumeration/): TryHackMe AD Basic Enumeration walkthrough: fping and nmap host discovery, anonymous SMB shares, LDAP and RPC null sessions, and CrackMapExec password spraying.
- [TryHackMe Intro to AD Breaching: Kerbrute to LDAP Passback](https://classroom.anir0y.in/post/thm-room-introductiontoactivedirectorybreaching/): TryHackMe Intro to AD Breaching walkthrough: Kerbrute enumeration, Git and Jenkins credential leaks, NetExec spraying, LDAP passback and NTLMv2 coercion.
- [TryHackMe Intro to AD Authentication: NetNTLM to Golden Ticket](https://classroom.anir0y.in/post/thm-room-introtoactivedirectoryauthentication/): TryHackMe Intro to AD Authentication walkthrough: NetNTLM challenge response, Kerberos tickets, NTLM cracking, Pass-the-Hash, Kerberoasting and a Golden Ticket.
- [TryHackMe Active Directory Basics: Build a Forest](https://classroom.anir0y.in/post/thm-room-winadbasicsrevamp/): TryHackMe Active Directory Basics walkthrough: promote a child domain controller, join a server, push a Restricted Groups GPO, and build a two-way forest trust.
- [TryHackMe Windows Jump: Guest to SYSTEM in Four Hops](https://classroom.anir0y.in/post/thm-room-windowsjump/): TryHackMe Windows Jump walkthrough: guest SMB share creds, an AutoLogon registry password, a weak service binary, and a writable SYSTEM task chain guest to SYSTEM.
- [TryHackMe Jump: FTP Uploads to Root Through a Trusted Pipeline](https://classroom.anir0y.in/post/thm-room-jump/): TryHackMe Jump walkthrough: anonymous FTP uploads run as recon_user, group writes reach dev_user, a PATH hijack on ps lands monitor_user, and sudo less gives root.
- [TryHackMe Linux Privilege Escalation: Automation Walkthrough](https://classroom.anir0y.in/post/thm-room-linprivauto/): TryHackMe Linux Privilege Escalation Automation walkthrough: LES, exploiting CVE-2025-32463 sudo-chwoot, pspy, and a sudo LD_PRELOAD root chain.
- [TryHackMe Linux Privilege Escalation: Basics Walkthrough](https://classroom.anir0y.in/post/thm-room-linprivbasics/): TryHackMe Linux Privilege Escalation Basics walkthrough: exploiting sudo, SUID, PATH hijacking, capabilities, cron and NFS across six target machines.
- [TryHackMe Linux Privilege Escalation: Enumeration Walkthrough](https://classroom.anir0y.in/post/thm-room-linprivenum/): TryHackMe Linux Privilege Escalation Enumeration walkthrough: manual OS, user, network and file enumeration on Ubuntu 24.04, answers explained.
- [TryHackMe The Clean Exit: Tracing Insider Exfiltration with KAPE](https://classroom.anir0y.in/post/thm-room-thecleanexit/): Walkthrough of TryHackMe The Clean Exit: using KAPE and Eric Zimmerman's tools to trace an insider's USB exfiltration and anti-forensic cleanup.
- [TryHackMe Host-Server Configuration Reviews: CIS Audit Walkthrough](https://classroom.anir0y.in/post/thm-room-hostserverconfigurationreviews/): Walk through TryHackMe Host-Server Configuration Reviews: CIS Benchmarks, DISA STIGs, and a SUID privilege escalation chain from a CIS audit report.
- [TryHackMe Metasploit Payload Generation: SMB Share to Meterpreter](https://classroom.anir0y.in/post/thm-room-metasploitpayloadgeneration/): Walkthrough of TryHackMe Metasploit Payload Generation: msfvenom, multi/handler, and a capstone chaining an SMB upload to a Meterpreter flag.
- [TryHackMe Shell Payload Generation & Delivery: msfvenom to Webshells](https://classroom.anir0y.in/post/thm-room-shellgenerationdelivery/): Walkthrough of TryHackMe Shell Payload Generation and Delivery: msfvenom staged and stageless payloads, multi/handler, and PHP webshell RCE.
- [TryHackMe BankGPT: Prompt-Leaking a Bank Chatbot's Secret Key](https://classroom.anir0y.in/post/thm-room-bankgpt/): Walkthrough of TryHackMe BankGPT: prompt-leaking a bank support chatbot's system prompt to extract its hardcoded secret API key.
- [TryHackMe Shells & Listeners Fundamentals: Netcat, Socat, TTY Shells](https://classroom.anir0y.in/post/thm-room-shellsfundamentals/): TryHackMe Shells & Listeners Fundamentals: catching netcat and socat reverse or bind shells, stabilising a full TTY, and wrapping shells in TLS with OpenSSL.
- [TryHackMe The Great Disappearing Act: HTTP Parameter Pollution to Root](https://classroom.anir0y.in/post/thm-room-thegreatdisappearingact/): TryHackMe The Great Disappearing Act walkthrough: Fakebook OSINT, HTTP parameter pollution on a JWT tier check, and a Docker SUID privesc chain to root.
- [TryHackMe Exploitation and Weaponisation: Proving Real Impact](https://classroom.anir0y.in/post/thm-room-exploitationandweaponisation/): TryHackMe Exploitation and Weaponisation walkthrough: controlled exploitation, chaining vulnerabilities, and proving real business impact.
- [TryHackMe Metasploit: Post-Exploitation, Meterpreter Loot](https://classroom.anir0y.in/post/thm-room-metasploitpostexploitation/): TryHackMe Metasploit: Post-Exploitation walkthrough: psexec foothold, Meterpreter commands, a SAM hashdump for jchambers, hashcat cracking, and the room flags.
- [TryHackMe Metasploit: The Basics, msfconsole and EternalBlue](https://classroom.anir0y.in/post/thm-room-metasploitthebasics/): TryHackMe Metasploit: The Basics walkthrough: exploits and payloads, msfconsole search, set and setg, running modules, sessions, and the EternalBlue example.
- [TryHackMe Checkmate: CUPP, SHA256, and SSH Password Cracking](https://classroom.anir0y.in/post/thm-room-checkmate/): TryHackMe Checkmate walkthrough: default creds, a company keyword, CUPP to crack Marco's social password, a SHA256 filename, and a pattern-based SSH brute-force.
- [TryHackMe Password Cracking: Hashcat, John, and rockyou](https://classroom.anir0y.in/post/thm-room-passwordcracking/): TryHackMe Password Cracking walkthrough: identify MD5, SHA-256, NTLM, and bcrypt hashes, then crack all four with Hashcat, John, and rockyou.txt.
- [TryHackMe Introduction to Wordlists: CeWL, crunch, ffuf, Hydra](https://classroom.anir0y.in/post/thm-room-introductiontowordlists/): TryHackMe Introduction to Wordlists walkthrough: scrape with CeWL, build usernames, crunch passwords, then find helios/ with ffuf and crack the login with Hydra.
- [TryHackMe Phishing Basics: SET Credential Harvesting and Spoofing](https://classroom.anir0y.in/post/thm-room-phishingbasics/): Walkthrough of the TryHackMe Phishing Basics room: social engineering psychology, email spoofing defences, and SET credential harvesting to phish Bob.
- [TryHackMe CVE-2026-42945 Nginx Rift: Heap Overflow to RCE](https://classroom.anir0y.in/post/thm-room-cve202642945/): Walkthrough of the TryHackMe CVE-2026-42945 Nginx Rift room: the is_args two-pass state mismatch that turns a rewrite/set heap overflow into unauthenticated RCE.
- [TryHackMe Fragnesia CVE-2026-46300: Page-Cache LPE to Root](https://classroom.anir0y.in/post/thm-room-cve202646300/): Walkthrough of TryHackMe Fragnesia, CVE-2026-46300. A Linux page-cache write LPE created by the Dirty Frag patch, taken from user karen to root via a corrupted su.
- [TryHackMe AD BadSuccessor: dMSA Abuse to Domain Admin](https://classroom.anir0y.in/post/thm-room-adbadsuccessor/): Walkthrough of TryHackMe AD BadSuccessor: finding OU write rights, forging a dMSA with SharpSuccessor and Rubeus, and reading the Domain Admin flag off the DC.
- [TryHackMe n8n CVE-2025-68613: Expression Injection to RCE](https://classroom.anir0y.in/post/thm-room-n8ncve202568613/): Walkthrough of the TryHackMe n8n CVE-2025-68613 room: an authenticated expression injection in n8n workflow evaluation escalates to RCE through child_process.
- [TryHackMe NoScope: Alf.io returnClass Sandbox Escape to RCE](https://classroom.anir0y.in/post/thm-room-noscoperce/): Walkthrough of TryHackMe NoScope: Finding RCE. Exploit the Alf.io returnClass Rhino sandbox escape (CVE-2026-35482) and read the flag by RCE on the box.
- [TryHackMe Basic Vulnerability Identification Techniques](https://classroom.anir0y.in/post/thm-room-basicvulnerabilityidentificationtechniques/): Walkthrough of the TryHackMe Basic Vulnerability Identification Techniques room: nmap enumeration, IDOR, anonymous FTP and SMB, then triaging findings by impact.
- [TryHackMe Trusted By Default: Service Account Abuse in Splunk](https://classroom.anir0y.in/post/thm-room-trustedbydefault/): Walkthrough of the TryHackMe Trusted By Default room: correlating IIS, Windows and Zeek logs in Splunk to trace service-account abuse from a web request to RDP.
- [TryHackMe Vulnerability Scanning Tools: Nmap, Nikto, OpenVAS](https://classroom.anir0y.in/post/thm-room-vulnerabilityscanningtools/): Walkthrough of the TryHackMe Vulnerability Scanning Tools room: Nmap service scans, a Nikto web check and an OpenVAS report that maps CVEs and the target OS.
- [TryHackMe Support: Five Weak Trust Boundaries to RCE](https://classroom.anir0y.in/post/thm-room-support/): Walkthrough of the TryHackMe Support challenge: a weak login, an md5 cookie flip, IDOR, readfile traversal for source disclosure and command injection to RCE.
- [TryHackMe API Pentesting: BOLA to Admin in Four Requests](https://classroom.anir0y.in/post/thm-room-apitesting/): Walkthrough of the TryHackMe API Pentesting room: JWT decoding, BOLA object id swapping, an unrated login endpoint and mass assignment to admin.
- [TryHackMe Broken Authentication: Four Ways Past a Login](https://classroom.anir0y.in/post/thm-room-brokenauthentication/): Walkthrough of the TryHackMe Broken Authentication room: ffuf username enumeration, login brute force, a reset parameter pollution flaw and cookie tampering.
- [TryHackMe Recruit: File Read to SQLi to Admin](https://classroom.anir0y.in/post/thm-room-recruitwebchallenge/): Walkthrough of the TryHackMe Recruit web challenge: a scoped file read leaks the HR password, then SQLi in the dashboard search escalates to admin.
- [TryHackMe XSS Introduction: Six Payload Contexts](https://classroom.anir0y.in/post/thm-room-xssintroduction/): Walkthrough of the TryHackMe XSS Introduction room: reflected, stored and DOM sinks, a blind XSS exfil over netcat, and six payload contexts to escape.
- [TryHackMe CSRF Introduction: Forging a Weak Token](https://classroom.anir0y.in/post/thm-room-csrfintroduction/): Walkthrough of the TryHackMe CSRF Introduction room: forging a POST form against StaffHub and reversing a weak base64 CSRF token to change a user role.
- [TryHackMe SQL Injection Introduction: Four Lab Levels](https://classroom.anir0y.in/post/thm-room-sqlinjectionintroduction/): Walkthrough of the TryHackMe SQL Injection Introduction room: four lab levels covering UNION extraction, login bypass, boolean-blind and time-based blind SQLi.
- [TryHackMe Web Server Attacks II: IIS Tilde and WebDAV](https://classroom.anir0y.in/post/thm-room-webserverattacks2/): TryHackMe Web Server Attacks II walkthrough: IIS fingerprinting, 8.3 tilde short name enumeration, WebDAV NTLM upload and ASP.NET misconfigurations.
- [TryHackMe Web Server Attacks I: Four Servers, One Host](https://classroom.anir0y.in/post/thm-room-webserverattacks/): TryHackMe Web Server Attacks I walkthrough: fingerprint Apache, Nginx, Node.js and Python http.server on one host, then loot every misconfiguration.
- [TryHackMe Modern Web Stacks: Four Stacks, Four CVEs](https://classroom.anir0y.in/post/thm-room-modernwebstacks/): TryHackMe Modern Web Stacks walkthrough: fingerprint four stacks, then exploit prototype pollution, CVE-2025-29927, CVE-2021-35042 and CVE-2021-41773.
- [TryHackMe Content Discovery: Gobuster and Framework Docs](https://classroom.anir0y.in/post/thm-room-contentdiscoveryx/): TryHackMe Content Discovery walkthrough: robots.txt, sitemap.xml, HTTP headers, framework docs and Gobuster dir, dns and vhost enumeration.
- [TryHackMe Walking An Application: Browser Dev Tools](https://classroom.anir0y.in/post/thm-room-walkinganapp/): TryHackMe Walking An Application walkthrough: finding every flag with only the browser developer tools, view source, inspector, debugger, network and storage.
- [TryHackMe Penetration Testing Frameworks: Pick the Right One](https://classroom.anir0y.in/post/thm-room-penetrationtestingframeworks/): TryHackMe Penetration Testing Frameworks walkthrough: OSSTMM, WSTG, NIST 800-115, PTES, ISSAF and MITRE ATT&CK, which to pick, and the flag from the static site.
- [TryHackMe Cyber Kill Chain: The Seven Phases Explained](https://classroom.anir0y.in/post/thm-room-cyberkillchain/): TryHackMe Cyber Kill Chain walkthrough: the Lockheed Martin seven phases from reconnaissance to actions on objectives, plus reading the flag from the JS bundle.
- [TryHackMe Dive Into Pentesting: Concepts, Ethics, Mindset](https://classroom.anir0y.in/post/thm-room-diveintopentesting/): TryHackMe Dive Into Pentesting walkthrough: the concepts, ethics, and mindset of a professional pentest, plus lifting the flag from the activity JS bundle.
- [TryHackMe Guided Pentest Infrastructure: UnrealIRCd to Root](https://classroom.anir0y.in/post/thm-room-guidedpentestinfrastructure/): TryHackMe Guided Pentest Infrastructure walkthrough: fingerprint UnrealIRCd 3.2.8.1, trigger the AB backdoor for a shell, escalate with looted root creds.
- [TryHackMe Guided Pentest Web: Chaining Four Bugs to RCE](https://classroom.anir0y.in/post/thm-room-guidedpentestweb/): TryHackMe Guided Pentest Web walkthrough: an IDOR user dump, a reset token printed in the response, an admin panel, and a .phtml upload bypass chained into RCE.
- [TryHackMe battery: Null Byte to XXE to Root](https://classroom.anir0y.in/post/thm-room-battery/): TryHackMe battery walkthrough: an ELF user oracle, a null-byte registration bypass, XXE source disclosure, and a swappable root-owned sudo script.
- [TryHackMe Conti: ProxyShell to Ransomware in Splunk](https://classroom.anir0y.in/post/thm-room-conti/): TryHackMe Conti walkthrough: tracing a ProxyShell Exchange compromise to ransomware in Splunk, from an attrib.exe web shell to process migration and 18 ransom notes.
- [TryHackMe Monday Monitor: Reading Sysmon in Wazuh](https://classroom.anir0y.in/post/thm-room-mondaymonitor/): TryHackMe Monday Monitor walkthrough: tracing an Atomic Red Team chain through Sysmon in Wazuh, from a renamed .xlsm download to mimikatz disguised as memotech.exe.
- [TryHackMe Building Wazuh Rules: Decoders and CDB Alerts](https://classroom.anir0y.in/post/thm-room-buildingwazuhrules/): TryHackMe Building Wazuh Rules walkthrough: writing decoders and rules, matching a CDB threat-intel list, and reading frequency alerts against live Wazuh data.
- [TryHackMe Servidae: Tracing a Compromised Workstation in ELK](https://classroom.anir0y.in/post/thm-room-servidae/): TryHackMe Servidae walkthrough: tracing a compromised workstation through Elastic, from a PDF lure to AlwaysInstallElevated, a curl brute force and CSV exfiltration.
- [TryHackMe MalBuster: Four Binaries, No Hand-Holding](https://classroom.anir0y.in/post/thm-room-malbuster/): TryHackMe MalBuster walkthrough: triaging four unknown PE binaries on REMnux with pefile, capa and hash OSINT, and two version-dependent answers.
- [TryHackMe MalDoc Static Analysis: PDF, Office and OneNote](https://classroom.anir0y.in/post/thm-room-maldoc/): TryHackMe MalDoc Static Analysis walkthrough: hex-encoded PDF JavaScript, a macro split across 15 concatenations, and a OneNote payload staged through the registry.
- [TryHackMe Script Static Analysis: Four Scripts, One PowerShell Prompt](https://classroom.anir0y.in/post/thm-room-scriptstaticanalysis/): TryHackMe Script Static Analysis walkthrough: a Node.js dropper among 253 decoys, shellcode gzipped before the XOR, a MachineGuid-keyed payload, and GlassWorm.
- [TryHackMe Threat Hunting With YARA: Four Modifiers and a Self-Match](https://classroom.anir0y.in/post/thm-room-threathuntingwithyara/): Walkthrough of TryHackMe Threat Hunting With YARA: hunting ROOTSAW and WINELOADER with Mandiant's own rules, the wide/base64/xor string modifiers that decide whether a rule fires at all, and the rule file that matches itself.
- [TryHackMe Basic Static Analysis: Six Samples, No Execution](https://classroom.anir0y.in/post/thm-room-staticanalysis1/): Walkthrough of TryHackMe Basic Static Analysis: FLOSS recovering a Dbgview.exe stackstring that strings.exe cannot see, imphash and ssdeep tying two samples together, capa mapping anti-VM and Run-key persistence to MBC B0012.001, and PEstudio flagging RPCRT4.dll for a single UuidCreate import.
- [TryHackMe Traffic Analysis Pitfalls: When the Wire Stops Talking](https://classroom.anir0y.in/post/thm-room-trafficanalysispitfalls/): Walkthrough of TryHackMe Traffic Analysis Pitfalls: ASN enrichment over CDN traffic, finding 6,946 QUIC sessions a TCP rule never sees, spotting a DoH switch from a silent UDP/53 host, and attributing a 847 MB exfil to EXCEL.EXE via Sysmon.
- [TryHackMe Response and Recovery: Containing an M365 Compromise From the Audit Log](https://classroom.anir0y.in/post/thm-room-responseandrecovery/): Walkthrough of TryHackMe Response and Recovery: scoping attacker post-compromise activity in the Nexus Financial M365 tenant through Unified Audit Logs, two alert-suppressing inbox rules, five SharePoint downloads, an anonymous sharing link to protonmail, and a riskLevel of none that explains the whole incident.
- [TryHackMe Volt Typhoon: Retracing an APT Through Three Log Sources](https://classroom.anir0y.in/post/thm-room-volttyphoon/): Walkthrough of TryHackMe Volt Typhoon: reconstructing a full living-off-the-land intrusion in Splunk from ADSelfService Plus, wmic and PowerShell logs, the password reset at 11:10:22, the voltyp-admin account, an ntdsutil AD database dump renamed to cl64.gif, a certutil-decoded ASPX web shell and four event logs cleared.
- [TryHackMe The Silent Transfer: A Capstone Hunt From One Snort Alert](https://classroom.anir0y.in/post/thm-room-operationsilenttransfer/): Walkthrough of TryHackMe The Silent Transfer: the Advanced Traffic Analysis capstone, pivoting from a single Snort Cobalt Strike alert through Zeek logs to the dropper domain, JA4 fingerprint, SMB sweep, RDP hop and a 312 MB archive exfiltrated to an external endpoint.
- [TryHackMe Advanced Packet Analysis: What the Logs Could Not Tell You](https://classroom.anir0y.in/post/thm-room-advancedpacketanalysis/): Walkthrough of TryHackMe Advanced Packet Analysis: triaging a SYN scan with TShark, decoding base64 C2 tasking, pulling cleartext FTP credentials, exporting and hashing malware from a PCAP, and reading JA4 fingerprints.
- [TryHackMe Network Monitoring with Zeek: One uid, Five Logs, One Intrusion](https://classroom.anir0y.in/post/thm-room-networkmonitoringwithzeek/): Walkthrough of TryHackMe Network Monitoring with Zeek: reading conn.log, dns.log, http.log, ssl.log and files.log with zeek-cut to find a Cobalt Strike beacon, DNS tunnel and 5 MB exfil POST, then tuning a Notice script from 23 alerts down to 10.
- [TryHackMe Post-Incident Activity: Turning an Incident Into Detection Rules](https://classroom.anir0y.in/post/thm-room-postincidentactivity/): Walkthrough of TryHackMe Post-Incident Activity: reconstructing the full Nexus Financial attack timeline across three M365 sourcetypes in Splunk, calculating dwell time, and converting the IOC tracker into correlated detection rules.
- [TryHackMe Detection and Analysis: Scoping a Nexus Financial Account Compromise](https://classroom.anir0y.in/post/thm-room-detectionandanalysis/): Walkthrough of TryHackMe Detection and Analysis: validating an L1 escalation in Splunk, tracing an M365 account compromise from phishing email to inbox rule, and scoping a second victim the alert never mentioned.
- [TryHackMe DetectMare: Five Broken Detections and a Red Team That Attacks Your Filters](https://classroom.anir0y.in/post/thm-room-detectmare/): Walkthrough of TryHackMe DetectMare: tuning five Sigma detections through a Detection-as-Code pipeline whose red-team check actively bypasses your exclusions, across an APT21 chain from a .docm lure to LSASS dumping, pass-the-hash and a password-protected rar.
- [TryHackMe Sigma Language: Write Once, Convert Everywhere, Tune the Rest](https://classroom.anir0y.in/post/thm-room-sigmalanguage/): Walkthrough of TryHackMe Sigma Language: rule anatomy on a real SigmaHQ rule, writing a recon detection from scratch, converting it to SPL, KQL and EQL with sigma-cli, and fixing six syntax bugs across three broken rules.
- [TryHackMe AI & Automation in Detection Engineering Walkthrough](https://classroom.anir0y.in/post/thm-room-aiautomationdetectioneng/): Walkthrough of TryHackMe AI & Automation in Detection Engineering: a full Detection-as-Code pull request review in TryGitMe, the three bugs that kept a print.exe rule at TP 0/6, and an AI copilot that writes a flawless DCSync rule for someone else's environment.
- [TryHackMe Intro to Detection Engineering Walkthrough](https://classroom.anir0y.in/post/thm-room-introtodetectioneng/): Walkthrough of TryHackMe Intro to Detection Engineering: the DE life cycle, precision vs recall, detection library decay, and all eight flags from the Senna assessment.
- [TryHackMe Monitoring AWS Workloads Walkthrough](https://classroom.anir0y.in/post/thm-room-monitoringawsworkloads/): Walkthrough of TryHackMe Monitoring AWS Workloads: Falco syscall telemetry on EC2 and inside containers, a command injection to reverse shell, and a Lambda function repurposed into a cryptomining launcher via SSM.
- [TryHackMe Monitoring AWS Services Walkthrough](https://classroom.anir0y.in/post/thm-room-monitoringawsservices/): Walkthrough of TryHackMe Monitoring AWS Services: a public S3 bucket policy and the filename brute force that followed, SSH open to the world on EC2, an Internet-exposed RDS instance that needed two changes, IAM discovery, and Denial of Wallet.
- [TryHackMe Monitoring AWS Logins Walkthrough](https://classroom.anir0y.in/post/thm-room-monitoringawslogins/): Walkthrough of TryHackMe Monitoring AWS Logins: console logins and MFAUsed, AKIA vs ASIA access keys, an S3 data-extortion attack, AssumeRole session names, and a Splunk integration authenticating as root.
- [TryHackMe Investigating with Splunk Walkthrough](https://classroom.anir0y.in/post/thm-room-investigatingwithsplunk/): Walkthrough of TryHackMe Investigating with Splunk: a homoglyph backdoor account, WMIC lateral movement, Sysmon registry artefacts, and decoding an Empire PowerShell stager to recover its C2 URL.
- [TryHackMe AWS Security Logging Walkthrough](https://classroom.anir0y.in/post/thm-room-awssecuritylogging/): Walkthrough of TryHackMe AWS Security Logging: CloudTrail console logins and bucket creation, three GuardDuty findings ending in an XMRig miner, CloudFront access logs, and the S3 data event that ties the intrusion together.
- [TryHackMe Cloud Security Pitfalls Walkthrough](https://classroom.anir0y.in/post/thm-room-cloudsecuritypitfalls/): Walkthrough of TryHackMe Cloud Security Pitfalls: IaaS/PaaS/SaaS, the Shared Responsibility Model, why cloud logging is the real obstacle to SIEM coverage, and both challenge flags.
- [TryHackMe Microsoft Intune Monitoring Walkthrough](https://classroom.anir0y.in/post/thm-room-msintunemonitoring/): Walkthrough of TryHackMe Microsoft Intune Monitoring: tracing a remote device wipe through the Intune audit log, PowerShell scripts running as SYSTEM via the Management Extension, and why one laptop has three different GUIDs.
- [TryHackMe SharePoint Online Monitoring Walkthrough](https://classroom.anir0y.in/post/thm-room-sharepointonlinemonitoring/): Walkthrough of TryHackMe SharePoint Online Monitoring: external sharing links, FileDownloaded exfiltration, OneNote phishing and a full SharePoint compromise investigation.
- [TryHackMe Exchange Online Monitoring Walkthrough](https://classroom.anir0y.in/post/thm-room-exchangeonlinemonitoring/): Walkthrough of TryHackMe Exchange Online Monitoring: malicious inbox rules, mailbox forwarding to external addresses, message trace analysis, and a full internal phishing investigation.
- [TryHackMe Entra ID Monitoring Walkthrough](https://classroom.anir0y.in/post/thm-room-entraidmonitoring/): Walkthrough of TryHackMe Entra ID Monitoring: password spraying vs throttled brute force, Identity Protection risk detections, Conditional Access blocks, MFA fatigue, and OAuth consent persistence.
- [TryHackMe M365 Monitoring Basics Walkthrough](https://classroom.anir0y.in/post/thm-room-m365monitoringbasics/): Walkthrough of TryHackMe M365 Monitoring Basics: Entra ID sign-in and audit logs, M365 unified audit logs, and one account takeover traced from password spray to business email compromise.
- [TryHackMe Ledger Walkthrough](https://classroom.anir0y.in/post/thm-room-ledger/): Walkthrough of TryHackMe Ledger: anonymous LDAP enumeration, a password left in a description field, and ESC1 on an AD CS certificate template for Domain Admin.
- [TryHackMe Detecting AD Post-Exploitation Walkthrough](https://classroom.anir0y.in/post/thm-room-detectingadpostexploitation/): Walkthrough of TryHackMe Detecting AD Post-Exploitation: rogue Domain Admin persistence, VSS shadow copy and event log deletion, WMIC ransomware fan-out, and wiper research questions.
- [TryHackMe Detecting AD Lateral Movement Walkthrough](https://classroom.anir0y.in/post/thm-room-detectingadlateralmovement/): Walkthrough of TryHackMe Detecting AD Lateral Movement: SMB and ADMIN$ access, PsExec service installation, RDP hop chains, and the Task 7 investigation challenge in Splunk.
- [TryHackMe Detecting AD Credential Attacks Walkthrough](https://classroom.anir0y.in/post/thm-room-detectingadcredentialattacks/): Walkthrough of TryHackMe Detecting AD Credential Attacks: Kerberoasting via RC4 service tickets, AS-REP roasting, LSASS dumping with procdump, DCSync via Event 4662, and NTDS.dit extraction.
- [TryHackMe Detecting AD Initial Access Walkthrough](https://classroom.anir0y.in/post/thm-room-detectingadinitialaccess/): Walkthrough of TryHackMe Detecting AD Initial Access: IIS web shell hunting via w3wp.exe process chains, OWA brute-force correlation, NPS VPN credential attacks, and the Task 8 investigation challenge.
- [TryHackMe Monitoring Active Directory Walkthrough](https://classroom.anir0y.in/post/thm-room-monitoringactivedirectory/): Walkthrough of TryHackMe Monitoring Active Directory: AD event IDs, stack counting for baselines, audit policy, and the new-employee onboarding investigation in Splunk.
- [TryHackMe Elastic: Using Elastic Defend Walkthrough](https://classroom.anir0y.in/post/thm-room-elasticdefend/): Walkthrough of TryHackMe Elastic: Using Elastic Defend: configure the integration, explore endpoint telemetry, and triage EDR alerts via the Elasticsearch API.
- [TryHackMe Elastic: Setting up a SOC Lab Walkthrough](https://classroom.anir0y.in/post/thm-room-elasticlab/): Walkthrough of TryHackMe Elastic: Setting up a SOC Lab with Elasticsearch, Kibana and Fleet, ingesting Apache and custom VPN logs to answer the data questions.
- [TryHackMe Defensive Security Trends: Keeping Up as an L2](https://classroom.anir0y.in/post/thm-room-defensivesecuritytrends/): Walkthrough of TryHackMe Defensive Security Trends: faster and complex attacks, valid accounts, supply chain, AI impact, and the Verizon DBIR research challenge.
- [TryHackMe Python for Pentesters Walkthrough](https://classroom.anir0y.in/post/thm-room-python-for-pentesters/): Walkthrough of TryHackMe Python for Pentesters: directory enumeration, port scanning, MD5/SHA256 hash cracking, and SSH brute-force against the live target.
- [TryHackMe Report Writing for SOC L2 Walkthrough](https://classroom.anir0y.in/post/thm-room-report-writing-soc-l2/): Walkthrough of TryHackMe Report Writing for SOC L2: writing for C-level, MSSP customers, and DFIR teams, plus the two report-correction simulations and their flags.
- [TryHackMe SOC L2 Alert Triage: The Senior Workflow](https://classroom.anir0y.in/post/thm-room-soc-l2-alert-triage/): Walkthrough of TryHackMe SOC L2 Alert Triage: the L1 vs L2 workflow, log analysis and the threat hunting loop, threat response, and the triage flag.
- [TryHackMe Senior Security Analyst Intro: The L2 Role](https://classroom.anir0y.in/post/thm-room-senior-security-analyst-intro/): Walkthrough of TryHackMe Senior Security Analyst Intro: what a SOC Level 2 analyst actually does, the L1 to L2 mindset shift, and the SIEM timeline challenge flag.
- [TryHackMe Threat Intel & Containment: Buying Time on the Adversary](https://classroom.anir0y.in/post/thm-room-threat-intel-and-containment/): Walkthrough of TryHackMe Threat Intel & Containment: pre-containment IOCs, controlled vs entire isolation, building threat intelligence, and a pcap practical.
- [TryHackMe Identification & Scoping: Working a Phishing Incident](https://classroom.anir0y.in/post/thm-room-identification-and-scoping/): Walkthrough of TryHackMe Identification & Scoping: triaging phishing tickets, using the Asset Inventory and Spreadsheet of Doom, and pivoting through IoCs.
- [TryHackMe Preparation: The First Phase of Incident Response](https://classroom.anir0y.in/post/thm-room-preparation/): Walkthrough of TryHackMe Preparation: the IR lifecycle, building a CSIRT, chain of custody and jump bags, and configuring Sysmon, SRP and audit-logging visibility.
- [TryHackMe Atomic Bird Goes Purple #2: Discover, Hide, Deface, Persist](https://classroom.anir0y.in/post/thm-room-atomic-bird-goes-purple-2/): Walkthrough of TryHackMe Atomic Bird Goes Purple #2: credential search, decoy accounts, rogue services, defacement, and registry-planted reverse shells.
- [TryHackMe Atomic Bird Goes Purple #1: Execute, Investigate, Detect](https://classroom.anir0y.in/post/thm-room-atomic-bird-goes-purple-1/): Walkthrough of TryHackMe Atomic Bird Goes Purple #1: running custom atomic tests and investigating the Sysmon and Aurora EDR artefacts they leave behind.
- [TryHackMe Atomic Red Team: Emulate ATT&CK, One Test at a Time](https://classroom.anir0y.in/post/thm-room-atomic-red-team/): Walkthrough of TryHackMe Atomic Red Team: driving Invoke-AtomicRedTeam, reading atomic YAMLs, and turning ATT&CK tests into Sysmon and Aurora EDR detections.
- [TryHackMe Intro to Threat Emulation: Emulate FIN7 and APT37](https://classroom.anir0y.in/post/thm-room-intro-threat-emulation/): Walkthrough of TryHackMe Intro to Threat Emulation: emulation vs simulation, TIBER-EU and Atomic Red Team, the five-step process, and emulating FIN7 and APT37.
- [TryHackMe Hunt Me II Typo Squatters: One MSI to Domain Admin](https://classroom.anir0y.in/post/thm-room-typo-squatters/): Walkthrough of TryHackMe Hunt Me II Typo Squatters: tracing a typosquatted 7-Zip MSI through LSASS dumping, DCSync, and ransomware in one Sysmon index.
- [TryHackMe Hunt Me I Payment Collectors: Phish to DNS Exfil](https://classroom.anir0y.in/post/thm-room-payment-collectors/): Walkthrough of TryHackMe Hunt Me I Payment Collectors: tracing a phish from an LNK lure through a powercat shell, PowerView recon, and DNS exfiltration.
- [TryHackMe Threat Hunting Endgame: Collection to Impact in Elastic](https://classroom.anir0y.in/post/thm-room-threat-hunting-endgame/): Walkthrough of TryHackMe Threat Hunting Endgame: hunting collection, ICMP exfiltration, and shadow-copy impact across custom case indices in Elastic.
- [TryHackMe Threat Hunting Pivoting: Chasing an AD Intrusion](https://classroom.anir0y.in/post/thm-room-threat-hunting-pivoting/): Walkthrough of TryHackMe Threat Hunting Pivoting: hunting discovery, service-based privilege escalation, DCSync, and Pass-the-Hash lateral movement in Elastic.
- [TryHackMe Threat Hunting Foothold: Hunt an Intrusion in Elastic](https://classroom.anir0y.in/post/thm-room-threat-hunting-foothold/): Walkthrough of TryHackMe Threat Hunting Foothold: reconstructing an intrusion across filebeat, winlogbeat, and packetbeat in the Elastic Stack with KQL.
- [TryHackMe Threat Hunting Introduction: Approaches, Targets, and APT-Serpent](https://classroom.anir0y.in/post/thm-room-threat-hunting-introduction/): Walkthrough of TryHackMe Threat Hunting Introduction: dwell time, the three hunting approaches and targets, the four hunting methods, and a proactive hunt against APT-Serpent in the practical.
- [TryHackMe Introduction to SOAR: Playbooks and Automation](https://classroom.anir0y.in/post/thm-room-introduction-to-soar/): Walkthrough of TryHackMe Introduction to SOAR: the SOC challenges it solves, its orchestration and automation, and building playbooks to speed investigations.
- [TryHackMe Aurora EDR: Sigma Detections in the Event Log](https://classroom.anir0y.in/post/thm-room-aurora-edr/): Walkthrough of TryHackMe Aurora EDR: how the Sigma-based agent uses ETW, its presets and response actions, and reading its detections in the Windows Event Log.
- [TryHackMe SigHunt: Nine Sigma Rules for a Ransomware Chain](https://classroom.anir0y.in/post/thm-room-sighunt/): Walkthrough of TryHackMe SigHunt: tune nine Sigma detection rules in the Sigma Validator to catch each stage of a ransomware attack chain and grab the flags.
- [TryHackMe Sigma: Detecting AnyDesk, Tasks, and Ransomware](https://classroom.anir0y.in/post/thm-room-sigma/): Walkthrough of TryHackMe Sigma: write Sigma rules, convert them with sigmac, and hunt an AnyDesk install, a rogue scheduled task, and ransomware in Kibana.
- [TryHackMe Threat Intelligence for SOC: IOC Hunting in Kibana](https://classroom.anir0y.in/post/thm-room-threat-intelligence-for-soc/): Walkthrough of TryHackMe Threat Intelligence for SOC: hunt an IOC list in Kibana to find a compromised host, sinkhole domains, and build ElastAlert rules.
- [TryHackMe Tactical Detection: IOCs, Sigma, and Tripwires](https://classroom.anir0y.in/post/thm-room-tactical-detection/): Walkthrough of TryHackMe Tactical Detection: turn unique and public IOCs into Sigma rules, translate them with Uncoder, and set Windows file tripwires.
- [TryHackMe Slingshot: Retracing a Web-Server Breach in ELK](https://classroom.anir0y.in/post/thm-room-slingshot/): Walkthrough of TryHackMe Slingshot: use Kibana and KQL to rebuild a web-server kill chain from Apache and ModSecurity logs, with every answer and flag.
- [TryHackMe Become a Defender: Map, Prioritize, Defend](https://classroom.anir0y.in/post/thm-room-become-a-defender/): Walkthrough of TryHackMe Become a Defender: map a client's infrastructure, prioritize critical systems, and defend in depth, with every answer and flag.
- [TryHackMe Become a Hacker: Gobuster and a Hydra Login Attack](https://classroom.anir0y.in/post/thm-room-become-a-hacker/): Walkthrough of TryHackMe Become a Hacker: enumerate a web app to find a hidden login, then chain it with a Hydra dictionary attack to log in and grab the flag.
- [TryHackMe Cryptography Concepts: Symmetric, Asymmetric, and HTTPS](https://classroom.anir0y.in/post/thm-room-cryptography-concepts/): Walkthrough of TryHackMe Cryptography Concepts: plaintext vs ciphertext, the Caesar cipher game, symmetric vs asymmetric encryption, and how HTTPS uses both.
- [TryHackMe The CIA Triad: Confidentiality, Integrity, Availability](https://classroom.anir0y.in/post/thm-room-the-cia-triad/): Walkthrough of TryHackMe The CIA Triad: what Confidentiality, Integrity, and Availability protect, every task answer, and the drag-and-drop flag exercise.
- [TryHackMe Management Wants a Word: A Four-Layer DFIR Decryption Chain](https://classroom.anir0y.in/post/thm-management-wants-a-word/): DFIR walkthrough of TryHackMe Management Wants a Word: peeling back DPAPI, a Chrome v10 password, a VeraCrypt volume, and a rasterised PDF to reach the flag.
- [TryHackMe New Hire Old Artifacts: Hunting an Intrusion in Splunk](https://classroom.anir0y.in/post/thm-room-new-hire-old-artifacts/): Walkthrough of TryHackMe New Hire Old Artifacts: a Splunk threat hunt over Sysmon logs, with the SPL for every answer and the full attack chain.
- [TryHackMe Database SQL Basics: SELECT, FROM, WHERE, ORDER BY](https://classroom.anir0y.in/post/thm-room-database-sql-basics/): Walkthrough of TryHackMe Database SQL Basics: databases, tables/rows/columns, and the SELECT, FROM, WHERE, ORDER BY clauses, with every Cafe SQL answer.
- [TryHackMe JavaScript Simple Demo: Guess the Number in Node.js](https://classroom.anir0y.in/post/thm-room-javascript-simple-demo/): Walkthrough of TryHackMe JavaScript Simple Demo: rebuilding Guess the Number in Node.js with let/const, console.log, parseInt, if/else if, and while.
- [TryHackMe Python Simple Demo: Building Guess the Number](https://classroom.anir0y.in/post/thm-room-python-simple-demo/): Walkthrough of TryHackMe Python Simple Demo: building a Guess the Number game with variables, print/int/input, if/elif/else conditionals, and a while loop.
- [TryHackMe Data Encoding: ASCII, Unicode, and the UTF Encodings](https://classroom.anir0y.in/post/thm-room-data-encoding/): Walkthrough of TryHackMe Data Encoding: ASCII and TryHackMe as bytes, Unicode code points, UTF-8/16/32, and every ASCII and Unicode task answer explained.
- [TryHackMe The Guestbook: A Two-Hour Prompt-Injection Rabbit Hole](https://classroom.anir0y.in/post/thm-room-guestbook/): Walkthrough of TryHackMe The Guestbook: the two-hour rabbit hole I fell into, then the real bug, VERA's cross-entry prompt injection to RCE and a Base64 flag.
- [TryHackMe Windows Basics: First Day and a Quarantined EICAR](https://classroom.anir0y.in/post/thm-room-windows-basics/): Walkthrough of TryHackMe Windows Basics: Server 2019 system specs, File Explorer, Settings, Task Manager, and recovering a quarantined EICAR file name.
- [TryHackMe Operating Systems Introduction: Kernel Space and a Flag](https://classroom.anir0y.in/post/thm-room-os-intro/): Walkthrough of TryHackMe Operating Systems Introduction: kernel vs user space, reading a MATE desktop's specs and filesystems, and a flag in a user's note.
- [TryHackMe Prompt Injection: Talking an AI Into a $1 Supercar](https://classroom.anir0y.in/post/thm-room-prompt-injection/): Walkthrough of TryHackMe Prompt Injection: direct injection to buy a $1 supercar and indirect injection that leaks a CEO email through a calendar event.
- [TryHackMe After Hours: Persistence Hiding in the WMI Repository](https://classroom.anir0y.in/post/thm-room-after-hours/): TryHackMe After Hours walkthrough: WMI fileless persistence in the CIM repository, a PowerShell loader, and a .NET payload inflated from a WMI property.
- [TryHackMe Infinity Pool: The Root Key Was in a Voicemail](https://classroom.anir0y.in/post/thm-room-infinity-pool/): Walkthrough of TryHackMe Infinity Pool: command injection to a web foothold, FreePBX UCP (CVE-2026-46376) to read an automation key from a voicemail, then root.
- [TryHackMe The Hollow Shell, A Zip Slip You Have to Restart to Feel](https://classroom.anir0y.in/post/thm-room-hollow-shell/): TryHackMe The Hollow Shell, Zip Slip arbitrary file write to RCE by bombing the gunicorn worker to bust Jinja's cached template.
- [TryHackMe AI System Reconnaissance — Fingerprinting the ML Stack](https://classroom.anir0y.in/post/thm-ai-system-reconnaissance/): Walkthrough of TryHackMe AI System Reconnaissance — scanning AI-specific ports, fingerprinting Triton and MLflow, and looting a Jupyter notebook.
- [TryHackMe Do Not Disturb, Four Doors, None of Them Locked](https://classroom.anir0y.in/post/thm-room-do-not-disturb/): Walkthrough of the TryHackMe room Do Not Disturb, NoSQL login bypass to EJS SSTI to RCE, a Node inspector for lateral movement, and the disk group for root.
- [TryHackMe CryptoCabana, A SAS Token and a Vault That Remembers](https://classroom.anir0y.in/post/thm-room-cryptocabana/): Walkthrough of TryHackMe CryptoCabana, an over-scoped Azure SAS token in client-side JS, a hidden container, and a Key Vault secret that outlived rotation.
- [TryHackMe Towel on the Sunbed, Racing a Once-a-Day Reward](https://classroom.anir0y.in/post/thm-room-towel-on-the-sunbed/): Walkthrough of the TryHackMe room Towel on the Sunbed, beating a once-per-24h staking reward with a TOCTOU race, and why naive threading loses it.
- [TryHackMe Overheard at Breakfast, An Email Is an Identity](https://classroom.anir0y.in/post/thm-room-overheard-at-breakfast/): Walkthrough of the TryHackMe room Overheard at Breakfast, turning an email dropped in casual chat into a forgotten Gravatar profile, and the flag in its bio.
- [TryHackMe Beach Bar, A Playlist That Runs Commands](https://classroom.anir0y.in/post/thm-room-beach-bar/): Walkthrough of the TryHackMe room Beach Bar, a demo DJ login, an unsafe PyYAML loader that turns a playlist into RCE, and root's password leaking via ps.
- [TryHackMe AI Threat Modelling, STRIDE, ATLAS and OWASP](https://classroom.anir0y.in/post/thm-room-ai-threat-modelling/): Walkthrough of the TryHackMe AI Threat Modelling room, adapting STRIDE for AI, enriching with MITRE ATLAS, and mapping OWASP LLM Top 10 risks to components.
- [TryHackMe Complimentary, Cognito Guest Keys to DynamoDB](https://classroom.anir0y.in/post/thm-room-complimentary/): Walkthrough of the TryHackMe room Complimentary, abusing a Cognito unauthenticated identity pool to get AWS keys and scan every guest record out of DynamoDB.
- [TryHackMe Room 404, Dumping Source From an Exposed .git](https://classroom.anir0y.in/post/thm-room-404/): Walkthrough of the TryHackMe room Room 404, finding an exposed .git directory on a staging server, mirroring it, and rebuilding the source to recover the flag.
- [TryHackMe The Concierge Knows Too Much, VERA Prompt Leak](https://classroom.anir0y.in/post/thm-room-concierge-knows-too-much/): Walkthrough of the TryHackMe room The Concierge Knows Too Much, impersonating a trusted guest to make an AI hotel concierge leak its own system prompt.
- [TryHackMe Packed Light, Keylogger C2 Hidden in Cookies](https://classroom.anir0y.in/post/thm-room-packed-light/): Walkthrough of the TryHackMe Packed Light room, spotting a beaconing keylogger in a pcap and decoding its stolen keystrokes out of HTTP Cookie headers.
- [TryHackMe Room Pentesting Fundamentals](https://classroom.anir0y.in/post/thm-room-pentesting-fundamentals/): A beginner walkthrough of the TryHackMe Pentesting Fundamentals room, what a pentest is, hacker ethics, methodologies (OSSTMM/OWASP/NIST), and box types.
- [TryHackMe Room Cloud Computing Fundamentals](https://classroom.anir0y.in/post/thm-room-cloud-computing-fundamentals/): A beginner walkthrough of the TryHackMe Cloud Computing Fundamentals room, what the cloud is, deployment types, and service models (IaaS, PaaS, SaaS).
- [20 PortSwigger Labs: SSTI to Access Control](https://classroom.anir0y.in/post/technique-20-portswigger-labs-one-session/): Speed-running 20 PortSwigger labs across 8 vuln classes — SSTI, SQLi, NoSQLi, path traversal, OS command injection, XXE, SSRF, and access control bypass.
- [30 More PortSwigger Labs: JWT, XSS, CSRF Bypass](https://classroom.anir0y.in/post/portswigger-session2-30-labs/): Session 2: 30 PortSwigger labs covering 5 JWT attacks, 16 XSS evasion techniques, 6 CSRF bypasses, NoSQL injection, GraphQL, and more.
- [30 PortSwigger Labs — Bug Bounty Marathon](https://classroom.anir0y.in/post/portswigger-30-labs-marathon/): 30 PortSwigger Web Security Academy labs solved in one session — SSRF, SQLi, SSTI, XXE, IDOR, CSRF, CORS, deserialization, and XSS, with key payloads.
- [7 PortSwigger Practitioner Labs: SSRF to Cache](https://classroom.anir0y.in/post/portswigger-practitioner-labs-7-techniques/): 7 PortSwigger Practitioner labs solved — blind SQLi, SSTI, access control bypass, file upload traversal, NoSQLi, CSRF bypass, and web cache deception.
- [Web App Pentesting: Injection & Client-Side](https://classroom.anir0y.in/post/tryhackme-webapp-pentesting-injection-clientside/): TryHackMe Web Application Pentesting notes — advanced SQL injection, XSS evasion, CSRF SameSite bypass, and SSRF, with bug bounty applicability for each.
- [TryHackMe Hammer: Auth Bypass to RCE Chain](https://classroom.anir0y.in/post/tryhackme-hammer/): TryHackMe Hammer walkthrough — chaining 5 bugs to RCE: directory fuzzing, email discovery in logs, OTP brute force via session rotation, and JWT kid abuse.
- [Exploiting Multi-Factor Auth — TryHackMe](https://classroom.anir0y.in/post/tryhackme-mfa-attacks/): A practical walkthrough of exploiting Multi-Factor Authentication weaknesses — OTP leakage, MFA bypass via logic flaws, and brute-forcing with logout evasion.
- [TryHackMe Server-side Template Injection (SSTI)](https://classroom.anir0y.in/post/tryhackme-serversidetemplateinjection/): TryHackMe SSTI room walkthrough — detecting template engines and exploiting Smarty, Pug, Jinja2, and Twig, plus mitigation strategies.
- [TryHackMe Multi-Factor Authentication](https://classroom.anir0y.in/post/tryhackme-multifactorauthentication/): TryHackMe Multi-Factor Authentication room walkthrough — understanding MFA, common vulnerabilities, OTP leakage, and bypassing auto-logout features.
- [Burp Academy: Server-Side Vulns (Apprentice)](https://classroom.anir0y.in/post/burp-academy-server-side-vulns-apprentice/): Walkthrough of 12 PortSwigger Apprentice server-side labs across 7 classes — path traversal, SQLi, SSRF, command injection, file upload, access control.
- [TryHackMe Web App Pentesting Path: Notes](https://classroom.anir0y.in/post/tryhackme-webapppentesting-path/): TryHackMe Web Application Pentesting path notes — injection attacks, server-side and client-side attacks, and HTTP request smuggling, condensed.
- [PortSwigger Academy: 39 Labs Solved](https://classroom.anir0y.in/post/burp-academy-practitioner-labs/): Complete walkthrough of 39 PortSwigger Web Security Academy labs covering SQLi, XSS, SSRF, API Testing, Race Conditions, and more.
- [Indian Banking Trojan: Fake eChallan to Takeover](https://classroom.anir0y.in/post/blog-dissecting-rto-echallan-banking-trojan/): Analysis of an Android banking trojan posing as an Indian RTO eChallan app — two-stage dropper, NP Protect packer, Firebase C2, SMS/USSD abuse, and UPI theft.
- [Traverse - TryHackMe Walkthrough](https://classroom.anir0y.in/post/traverse/): TryHackMe Traverse walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Traverse challenge room.
- [Try Hack Me Benign Room Walkthrough](https://classroom.anir0y.in/post/benign/): TryHackMe Benign walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Benign challenge room.
- [Try Hack Me Itsybitsy walkthrough](https://classroom.anir0y.in/post/itsybitsy/): TryHackMe ItsyBitsy walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the ItsyBitsy challenge room.
- [Log Analysis With SIEM - TryHackMe Walkthrough](https://classroom.anir0y.in/post/log-analysis-with-siem/): TryHackMe Log Analysis With SIEM walkthrough — practice Security Information and Event Management log analysis and threat detection.
- [Network Discovery Detection](https://classroom.anir0y.in/post/network-discovery-detection/): TryHackMe Network Discovery Detection walkthrough — practice network security fundamentals including scanning, enumeration, and protocol analysis.
- [Healthgpt](https://classroom.anir0y.in/post/healthgpt/): TryHackMe Healthgpt walkthrough — A safety-compliant AI assistant that has strict rules against revealing sensitive internal data.
- [Input Manipulation & Prompt Injection](https://classroom.anir0y.in/post/input-manipulation--prompt-injection/): Try Hack Me Room Input Manipulation & Prompt Injection solved by Animesh Roy. this is a walkthrough. read more...
- [TryHackMe Man in the Middle Detection](https://classroom.anir0y.in/post/thm-man-in-the-middle-detection/): TryHackMe Man in the Middle Detection walkthrough — This is a walkthrough;
- [User Enumeration in e-Jagriti findUser Endpoint](https://classroom.anir0y.in/post/owasp-e-jagriti-bug-report/): Exposing a User Enumeration Vulnerability in e-Jagriti's findUser Endpoint — OWASP bug bounty report by Animesh Roy.
- [Mastering Subnetting: A Practical Lab Guide](https://classroom.anir0y.in/post/blog-subnet-p1/): An in-depth guide to subnetting — learn the fundamentals, work through practical examples, and apply your skills with hands-on lab exercises to master it.
- [Automate Apache Guacamole with Docker on Ubuntu](https://classroom.anir0y.in/post/blog-automating-apache-guacamole-installation-with-docker-on-ubuntu/): Automate Apache Guacamole setup on Ubuntu with a Docker bash script — clientless VNC/RDP/SSH remote desktop, install checks, and easy credential access.
- [Share Folders Between Kali VM and Windows Host](https://classroom.anir0y.in/post/blog-how-to-enable-folder-share-in-kali-vm-and-windows-host/): A step-by-step guide to mounting a Windows folder in a Kali Linux VM using VMware and open-vm-tools, with troubleshooting tips for a smoother workflow.
- [Addressing Allegations: A Response to Claims](https://classroom.anir0y.in/post/blog-addressing-alligation/): Addressing recent allegations against anir0y.in — a transparent response clarifying misconceptions about darknet links and phishing claims.
- [The Curious Case of Mr. OSINT: Intrusion Tale](https://classroom.anir0y.in/post/blog-hax0r-stories-001/): The rise and fall of Haxor, an enigmatic hacker — Animesh Roy's story of the mysterious figure who captured the attention of the cybersecurity world.
- [Blog Tor Darknet Links](https://classroom.anir0y.in/post/blog-tor-darknet-links/): Curated list of verified Tor darknet links and onion services. Updated with safety warnings and phishing link removal notices.
- [How to Trust Imported GPG Keys](https://classroom.anir0y.in/post/blog-how-to-trust-imported-gpg-keys/): Learn how to trust imported GPG keys using the web of trust, keyserver, or manually. GPG, trust, imported keys, web of trust, keyserver, manual trust
- [AutoHackOS: An OS for Automobile Pentesting](https://classroom.anir0y.in/post/blog-autohackos/): AutoHackOS — a Linux-based OS for automobile pentesting with CAN bus analysis, wireless hacking, and vehicle vulnerability scanning tools.
- [Splunk for SOC: 80+ Security Use Cases](https://classroom.anir0y.in/post/soc-splunk101/): Explore 80+ practical Splunk use cases for SOC analysts. Learn to detect audit log tampering, large web uploads, and more with ready-to-use SPL queries.
- [Azure Front Door & App Gateway: Perf + Security](https://classroom.anir0y.in/post/blog-optimizing-web-application-performance-and-security-with-azure-front-door-and-application-gateway/): Optimize web app performance and security with Azure Front Door and Application Gateway — load balancing, WAF protection, and SSL, with configuration tips.
- [Blog | Watering Hole Attacks Scanbox Keylogger](https://classroom.anir0y.in/post/blog-watering-hole-attacks-scanbox-keylogger/): How watering hole attacks use infected websites to compromise devices — a look at the Scanbox keylogger, who it targets, and how to defend against it.
- [4 types of phishing](https://classroom.anir0y.in/post/blog-types-of-phishing/): Phishing explained — the four types (email, spear phishing, smishing, vishing), how each attack works, and practical tips to protect yourself and your org.
- [Smishing: SMS Phishing Threats and Protection](https://classroom.anir0y.in/post/smshingintro/): What smishing is, how SMS-based phishing works, common tactics used to steal your data, and the best ways to spot and protect yourself from these attacks.
- [BitLy url shortner](https://classroom.anir0y.in/post/bitly_url_shortner/): using BITLY URL API create your own URL shortner Script using Python.
- [BLOG | Shorten URL using TinyURL API](https://classroom.anir0y.in/post/tinyurl/): using TINY URL API create your own URL shortner Script using Python
- [Try Hack Me writeup | Osquery The Basics](https://classroom.anir0y.in/post/tryhackme-osquerythebasics/): TryHackMe writeup | Osquery The Basics walkthrough — learn endpoint monitoring with osquery SQL-based queries for process, network, and file system analysis.
- [Writeup |Try Hack Me PrintNightmare, again!](https://classroom.anir0y.in/post/tryhackme-printnightmareagain/): Try Hack Me Room rintNightmare, again solved by Animesh Roy. this is a walkthrough. read more...
- [TryHackMe Surfer](https://classroom.anir0y.in/post/tryhackme-surfer/): TryHackMe Surfer walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Surfer challenge room.
- [Android MalwareAnalysis](https://classroom.anir0y.in/post/android-malwareanalysis/): A curated list of Android malware analysis tools for static and dynamic analysis: ClassyShark, StaCoAn, SmaliSCA, maldrolyzer, Argus-SAF, DroidRA, and more.
- [Vulnerable Web Application is now available!](https://classroom.anir0y.in/post/blog-vwa/): Vulnerable Web Application is now available!
- [Try Hack Me Intermediate Nmap](https://classroom.anir0y.in/post/thm-intermediatenmap/): TryHackMe Intermediate Nmap walkthrough — master Nmap network scanning techniques including service detection, scripting engine, and firewall evasion.
- [Try Hack Me Phishing Emails 4](https://classroom.anir0y.in/post/tryhackme-phishingemails4/): TryHackMe Phishing Emails 4 walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads.
- [Try Hack Me Red Team Threat Intel](https://classroom.anir0y.in/post/tryhackme-redteamthreatintel/): TryHackMe Red Team Threat Intel walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [Basics of Ransomware](https://classroom.anir0y.in/post/what_is_ransomware/): All About the Ransomware and how it works!
- [OSINT Resources I](https://classroom.anir0y.in/post/osint_resources-i/): OSINT Tools for gathering information and actions forensic
- [Steganography with Steghide](https://classroom.anir0y.in/post/stegnography/): Steghide Is an open-source, command-line software that can encode and decode data into image files
- [Try Hack Me Operating System Security [WriteUp]](https://classroom.anir0y.in/post/tryhackme-operatingsystemsecurity/): TryHackMe Operating System Security walkthrough — understand operating system security fundamentals including hardening, access controls, and common weaknesses.
- [TryHackMe Oh My Webserver](https://classroom.anir0y.in/post/tryhackme-oh-my-webserver/): TryHackMe Oh My Webserver walkthrough — exploit web application vulnerabilities and practice common web attack techniques.
- [DVWA Docker Setup](https://classroom.anir0y.in/post/dvwa-docker-setup/): Set up DVWA (Damn Vulnerable Web Application) with Docker — quick install guide for practicing web application security testing.
- [Domain Enumeration Cheat Sheet](https://classroom.anir0y.in/post/notes-domainenum/): Active Directory domain enumeration cheat sheet — PowerShell commands for users, groups, GPOs, ACLs, and trust mapping.
- [TryHackMe Jr Security Analyst Intro](https://classroom.anir0y.in/post/tryhackme-jr-security-analyst-intro/): TryHackMe Jr Security Analyst Intro walkthrough — introduction to SOC analyst responsibilities, alert triage, and incident response fundamentals.
- [TryHackMe Phishing Emails 2](https://classroom.anir0y.in/post/tryhackme-phishingemails-2/): TryHackMe Phishing Emails 2 walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads.
- [Try Hack Me Phishing Emails 1](https://classroom.anir0y.in/post/phishingemails1tryoe/): TryHackMe Phishing Emails 1 walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads.
- [Try Hack Me Android Malware Analysis](https://classroom.anir0y.in/post/tryhackme-androidmalwareanalysis/): TryHackMe Android Malware Analysis walkthrough — Android malware analysis with Pithus (static and hunting)
- [Classroom | NFS Installation & enumeation](https://classroom.anir0y.in/post/classroom-nfs/): installation of NFS & Enumeation using Various tools.
- [Try Hack Me Road](https://classroom.anir0y.in/post/tryhackme-road/): TryHackMe Road walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Road challenge room.
- [Try Hack Me CyberCrafted](https://classroom.anir0y.in/post/tryhackme-cybercrafted/): TryHackMe CyberCrafted walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the CyberCrafted challenge room.
- [Try Hack Me REvil Corp](https://classroom.anir0y.in/post/tryhackme-revilcorp/): TryHackMe REvil Corp walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the REvil Corp challenge room.
- [Try Hack Me Phishing](https://classroom.anir0y.in/post/tryhackme-phishingyl/): TryHackMe Phishing walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads.
- [Try Hack Me Vulnerability Capstone[writeup]](https://classroom.anir0y.in/post/tryhackme-vulnerabilitycapstone/): TryHackMe Vulnerability Capstone walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [Try Hack Me Net Sec Challenge](https://classroom.anir0y.in/post/tryhackme-netsecchallenge/): TryHackMe Net Sec Challenge walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [DigitalOcean Account Setup](https://classroom.anir0y.in/post/ref-do/): Deploy faster & scale easier with an application server that saves your team time & money
- [TryHackMe Metasploit Meterpreter](https://classroom.anir0y.in/post/tryhackme-meterpreter/): A deep dive into Meterpreter and how in-memory payloads enable post-exploitation — the TryHackMe Metasploit Meterpreter room, solved by Animesh Roy.
- [Try Hack Me Exploit Vulnerabilities](https://classroom.anir0y.in/post/tryhackme-exploitingavulnerabilityv2.md/): TryHackMe Exploit Vulnerabilities walkthrough — identify and exploit vulnerabilities in target systems to gain unauthorized access.
- [Try Hack Me Vulnerabilities 101](https://classroom.anir0y.in/post/tryhackme-vulnerabilities101/): TryHackMe Vulnerabilities 101 walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [Try Hack Me Empline](https://classroom.anir0y.in/post/tryhackme-empline/): TryHackMe Empline walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Empline challenge room.
- [Install Openvas](https://classroom.anir0y.in/post/howto-install-openvas/): Step-by-step OpenVAS installation guide — set up the open-source vulnerability scanner for network security assessments.
- [Try Hack Me The Cod Caper](https://classroom.anir0y.in/post/tryhackme-thecodcaper/): TryHackMe The Cod Caper walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the The Cod Caper challenge room.
- [TryHackMe Introduction to Django](https://classroom.anir0y.in/post/tryhackme-django/): TryHackMe Introduction to Django walkthrough — learn Django web framework fundamentals including models, views, templates, and common security pitfalls.
- [TryHackMe Principles of Security](https://classroom.anir0y.in/post/tryhackme-principlesofsecurity/): TryHackMe Principles of Security walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [TryHackMe Wordpress CVE-2021-29447](https://classroom.anir0y.in/post/tryhackme-wordpresscve202129447/): TryHackMe WordPress CVE-2021-29447 walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [TryHackMe Intro to Windows](https://classroom.anir0y.in/post/tryhackme-intro2winold/): TryHackMe Intro to Windows walkthrough — explore Windows operating system fundamentals, security features, and common attack surfaces.
- [TryHackMe Bounty Hacker](https://classroom.anir0y.in/post/tryhackme-cowboyhacker/): TryHackMe Bounty Hacker walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Bounty Hacker challenge room.
- [TryHackMe Hacking with PowerShell](https://classroom.anir0y.in/post/tryhackme-powershell/): TryHackMe Hacking with PowerShell walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [TryHackMe Super-Spam](https://classroom.anir0y.in/post/tryhackme-superspamr/): TryHackMe Super-Spam walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Super-Spam challenge room.
- [TryHackMe Internal](https://classroom.anir0y.in/post/tryhackme-internal/): TryHackMe Internal walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Internal challenge room.
- [TryHackMe Mobile Malware Analysis](https://classroom.anir0y.in/post/tryhackme-mma/): TryHackMe Mobile Malware Analysis walkthrough — analyze malware samples using static and dynamic analysis techniques to understand malicious behavior.
- [TryHackMe Relevant](https://classroom.anir0y.in/post/tryhackme-relevant/): TryHackMe Relevant walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Relevant challenge room.
- [TryHackMe Linux Strength Training](https://classroom.anir0y.in/post/tryhackme-linuxstrengthtraining/): TryHackMe Linux Strength Training walkthrough — Guided room for beginners to learn/reinforce linux command line skills...
- [TryHackMe Sweettooth Inc.](https://classroom.anir0y.in/post/tryhackme-sweettoothinc/): TryHackMe Sweettooth Inc. walkthrough — Sweettooth Inc. needs your help to find out how secure their system is!
- [Giveaway July 2021](https://classroom.anir0y.in/post/giveaway-1/): Win a free 1-month TryHackMe subscription! July 2021 giveaway with 3 premium subscriptions up for grabs.
- [TryHackMe Agent Sudo Walkthrough - CTF Writeup](https://classroom.anir0y.in/post/tryhackme-agentsudoctf/): TryHackMe Room Agent Sudo, You found a secret server located under the deep sea. Your task is to hack inside the server and reveal the truth.
- [TryHackMe Overpass 2 - Hacked](https://classroom.anir0y.in/post/tryhackme-overpass2hacked/): TryHackMe Overpass 2 - Hacked walkthrough — investigate a compromised server, analyze attacker artifacts, and trace the intrusion timeline.
- [TryHackMe Baron Samedit](https://classroom.anir0y.in/post/tryhackme-sudovulnssamedit/): TryHackMe Baron Samedit walkthrough — A tutorial room exploring CVE-2021-3156 in the Unix Sudo Program.
- [TryHackMe Metamorphosis](https://classroom.anir0y.in/post/tryhackme-metamorphosis/): TryHackMe Metamorphosis walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Metamorphosis challenge room.
- [TryHackMe Crack the hash](https://classroom.anir0y.in/post/tryhackme-crackthehash/): TryHackMe Crack the hash walkthrough — Cracking hashes challenges.
- [TryHackMe Simple CTF](https://classroom.anir0y.in/post/tryhackme-easyctf/): TryHackMe Simple CTF walkthrough — solve CTF challenges covering enumeration, exploitation, and privilege escalation on a vulnerable target.
- [TryHackMe RazorBlack](https://classroom.anir0y.in/post/tryhackme-raz0rblack/): TryHackMe RazorBlack walkthrough — These guys call themselves hackers. Can you show them who's the boss ??
- [TryHackMe Linux Function Hooking](https://classroom.anir0y.in/post/tryhackme-linuxfunctionhooking/): TryHackMe Linux Function Hooking walkthrough — Learn about function hooking in Linux and have fun hooking functions
- [TryHackMe Ffuf](https://classroom.anir0y.in/post/tryhackme-ffuf/): TryHackMe Ffuf walkthrough — Ffuf stands for Fuzz Faster U Fool. It's a tool used for web enumeration, fuzzing, and directory brute forcing...
- [Try Hack Me Web Scanning](https://classroom.anir0y.in/post/tryhackme-rpwebscanning/): TryHackMe Web Scanning walkthrough — exploit web application vulnerabilities and practice common web attack techniques.
- [Awesome Red Teaming](https://classroom.anir0y.in/post/post-awesome-red-teaming/): Curated red teaming resources — MITRE ATT&CK-mapped tools and techniques for initial access, persistence, lateral movement, and evasion.
- [TryHackMe The find command](https://classroom.anir0y.in/post/tryhackme-thefindcommand/): TryHackMe The find command walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the The find command challenge room.
- [TryHackMe Tmux](https://classroom.anir0y.in/post/tryhackme-rptmux/): TryHackMe Tmux walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Tmux challenge room.
- [TryHackMe Crisis](https://classroom.anir0y.in/post/tryhackme-crisis/): TryHackMe Crisis walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Crisis challenge room.
- [TryHackMe Couch](https://classroom.anir0y.in/post/tryhackme-couch/): TryHackMe Couch walkthrough — hack into a vulnerable database server that stores data in JSON-based document formats, in this semi-guided challenge.
- [TryHackMe Inclusion](https://classroom.anir0y.in/post/tryhackme-inclusion/): TryHackMe Room inclusion, A beginner level LFI challenge. solved by Animesh Roy. this is a walkthrough. read more...
- [TryHackMe RootMe](https://classroom.anir0y.in/post/tryhackme-rrootme/): TryHackMe RootMe walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the RootMe challenge room.
- [TryHackMe Gitandcrumpets](https://classroom.anir0y.in/post/tryhackme-gitandcrumpets/): TryHackMe Gitandcrumpets walkthrough — exploit exposed Git repositories to extract secrets, credentials, and sensitive source code.
- [TryHackMe Postexploit](https://classroom.anir0y.in/post/tryhackme-postexploit/): TryHackMe Postexploit walkthrough — identify and exploit vulnerabilities in target systems to gain unauthorized access.
- [TryHackMe Hydra](https://classroom.anir0y.in/post/tryhackme-hydra/): TryHackMe Hydra walkthrough — learn brute-force password attacks using Hydra against SSH, FTP, and web login forms.
- [python pip2 Install](https://classroom.anir0y.in/post/pip2-install/): How to install pip2 for Python 2.7 on Kali Linux — quick installation script and usage guide for legacy Python modules.
- [TryHackMe Room Ice](https://classroom.anir0y.in/post/thm-room-ice/): TryHackMe Room Ice walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Ice challenge room.
- [TryHackMe Room Hackpark](https://classroom.anir0y.in/post/thm-room-hackpark/): TryHackMe Room Hackpark walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Hackpark challenge room.
- [TryHackME Room Kenobi](https://classroom.anir0y.in/post/thm-room-kenobi/): TryHackMe Room Kenobi walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Kenobi challenge room.
- [TryHackMe Room Vulnversity](https://classroom.anir0y.in/post/thm-room-vulnversity/): TryHackMe Room Vulnversity walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Vulnversity challenge room.
- [Thm Room Web Fundamentals](https://classroom.anir0y.in/post/thm-room-webfundamentals/): TryHackMe Thm Room Web Fundamentals walkthrough, exploit web application vulnerabilities and practice common web attack techniques.
- [Backdooring EXE Files](https://classroom.anir0y.in/post/cs-hijackputty-msfvenom/): Learn to backdoor EXE files with MSFVenom — embed Metasploit payloads into PuTTY and other executables for penetration testing.
- [TryHackMe Writeup REMnux - The Redux](https://classroom.anir0y.in/post/thm-room-malremnuxv2/): TryHackMe REMnux: The Redux walkthrough, step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained.
- [TryHackMe BasicMalwareRE Writeup](https://classroom.anir0y.in/post/thm-room-basicmalwarere/): TryHackMe BasicMalwareRE walkthrough, analyze malware samples using static and dynamic analysis techniques to understand malicious behavior.
- [Try Hack ME Room Malstrings](https://classroom.anir0y.in/post/thm-room-malstrings/): TryHackMe Room Malstrings walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Malstrings challenge room.
- [Try Hack ME Room Malware Introductory](https://classroom.anir0y.in/post/thm-room-malmalintroductory/): TryHackMe Room Malware Introductory walkthrough, analyze malware samples using static and dynamic analysis techniques to understand malicious behavior.
- [Try Hack Me Room History of Malware](https://classroom.anir0y.in/post/thm-room-historyofmalware/): TryHackMe Room History of Malware walkthrough, analyze malware samples using static and dynamic analysis techniques to understand malicious behavior.
- [Thm Room Autopsy](https://classroom.anir0y.in/post/thm-room-btautopsye0/): TryHackMe Thm Room Autopsy walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Thm Room Autopsy challenge room.
- [Investigating Windows](https://classroom.anir0y.in/post/investigatingwindows/): TryHackMe Investigating Windows walkthrough — explore Windows operating system fundamentals, security features, and common attack surfaces.
- [Try Hack me Room Volatility](https://classroom.anir0y.in/post/thm-room-bpvolatility/): TryHackMe Room Volatility walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Volatility challenge room.
- [Domino’s India Data Leak: 18 Cr Orders Exposed](https://classroom.anir0y.in/post/scripts-dominos/): Domino’s India Data Leak Of 18 Cr Orders Resurfaces; Customer Location, Mobile Numbers Exposed
- [Try Hack Me Room Attacking Kerberos](https://classroom.anir0y.in/post/thm-room-attackingkerberos/): TryHackMe Room Attacking Kerberos walkthrough, Learn how to abuse the Kerberos Ticket Granting Service inside of a Windows Domain Controller.
- [Try Hack Me Room Attacktivedirectory](https://classroom.anir0y.in/post/thm-room-attacktivedirectory/): TryHackMe Attacktive Directory walkthrough, step-by-step Active Directory enumeration, exploitation, and privilege escalation, with task answers.
- [Try Hack Me Room Osquery](https://classroom.anir0y.in/post/thm-room-osquery/): TryHackMe Room Osquery walkthrough, learn endpoint monitoring with osquery SQL-based queries for process, network, and file system analysis.
- [Try Hack Me Room Room Openvas](https://classroom.anir0y.in/post/thm-room-openvas/): Try Hack ME Room OpenVas walkthrough
- [Try Hack ME Room Zerologon](https://classroom.anir0y.in/post/thm-room-zerologon/): Try Hack ME Room Zerologon walkthrough
- [Cyber Security Interview Questions With Answers](https://classroom.anir0y.in/post/cyber-security-interview-questions-with-answers/): 50 cybersecurity interview questions with answers — cryptography, CIA triad, firewalls, IDS vs IPS, and more for job prep.
- [Active Directory Exploitation Cheat Sheet](https://classroom.anir0y.in/post/active-directory-exploitation-cheat-sheet/): Active Directory exploitation cheat sheet covering common attack techniques, enumeration, privilege escalation, and lateral movement in AD environments.
- [Notes OSIModel Explained](https://classroom.anir0y.in/post/notes-osimodel-explained/): OSI Model explained with Wireshark — understand all 7 layers through real packet analysis, from physical frames to application data.
- [Notes OSIModel](https://classroom.anir0y.in/post/notes-osimodel/): OSI Model overview — learn all 7 layers of the networking model, from physical to application, with clear explanations and examples.
- [Notes Stego](https://classroom.anir0y.in/post/notes-stego/): Steganography tools and techniques — Steghide, Foremost, binwalk, zsteg, and more for CTF challenges and hidden data extraction.
- [Forensic Tools](https://classroom.anir0y.in/post/ref-forensic/): Curated reference list of digital forensic tools for disk analysis, memory forensics, network capture, and incident response investigations.
- [Notes Gnupg](https://classroom.anir0y.in/post/notes-gnupg/): GPG encryption guide — generate keys, encrypt and sign messages, verify signatures, and manage keyrings with GNU Privacy Guard.
- [Msf Runscript](https://classroom.anir0y.in/post/msf-runscript/): Guide to writing custom Meterpreter scripts — create resource files, automate post-exploitation tasks, and build reverse shells.
- [Intro Bash](https://classroom.anir0y.in/post/intro-bash/): Bash scripting quick reference — variables, string operations, conditionals, loops, functions, and arrays for beginners.
- [Powershell Empire](https://classroom.anir0y.in/post/powershell-empire-install/): Installation guide for PowerShell Empire post-exploitation framework — setup, configuration, and generating your first HTTP listener.
- [Msfvenom Psh](https://classroom.anir0y.in/post/msfvenom-psh/): Create a Meterpreter reverse shell with PowerShell using MSFVenom — payload generation, listener setup, and session interaction.
- [MSFVenom Cheatsheet: Payloads & One-Liners](https://classroom.anir0y.in/post/msfvenom-cheatsheet/): A complete MSFVenom cheatsheet with one-liner payloads for Windows, Linux, macOS, and web shells. Includes examples for various formats and reverse shells.
- [Basic Linux](https://classroom.anir0y.in/post/excelr-basic-linux/): Basic Linux bash scripting exercises — hello world, age check, and practical shell scripting examples for beginners.
- [Ps Enc](https://classroom.anir0y.in/post/ps-enc/): Understanding PowerShell encoding techniques — Base64 encoding, obfuscation methods, and decoding strategies for security analysis.
- [Vulnerable Apps, Servers, and Websites!](https://classroom.anir0y.in/post/blog1/): Curated list of vulnerable apps, servers, and websites for practicing cybersecurity skills — VulnHub, HackTheBox, TryHackMe, and more.
- [Phishing Attack](https://classroom.anir0y.in/post/blog2/): Learn how phishing attacks work — types, techniques, real-world examples, and tools used in social engineering credential theft.
- [Introduction to  Vapt](https://classroom.anir0y.in/post/intro-vapt/): Introduction to VAPT — understand vulnerability assessment vs penetration testing, methodologies, deliverables, and testing types.
- [Volatility Installation in Linux](https://classroom.anir0y.in/post/vol2-installation/): Step-by-step guide to installing Volatility 2 on Linux for memory forensics, including dependencies, Python setup, and verification.
- [Splunk Sysmon Configuration](https://classroom.anir0y.in/post/splunk-sysmon/): Guide to configuring Sysmon with Splunk for enhanced endpoint visibility, log collection, and threat detection in Windows environments.
- [Mobile App pentesting](https://classroom.anir0y.in/post/learnings-mobileapppt/): Mobile app penetration testing cheat sheet — Android and iOS security tools, reverse engineering, SSL pinning bypass, and OWASP Top 10.
- [Keep Learning](https://classroom.anir0y.in/post/learnings/): Pentester learning roadmap — OS fundamentals, networking, Active Directory, web apps, recommended labs, and certifications like OSCP.
- [Metasploit Cheat Sheet](https://classroom.anir0y.in/post/metasploit-cheat-sheet/): Metasploit Framework cheat sheet — essential commands for exploits, payloads, sessions, meterpreter, and post-exploitation modules.
- [Free Certifications](https://classroom.anir0y.in/post/blog4/): Curated list of free cybersecurity and IT certifications — Google Cloud, Azure, CompTIA, Kubernetes, and more with direct links.
- [Awesome Powershell](https://classroom.anir0y.in/post/ref-powershell/): Comprehensive PowerShell cheat sheet with essential commands, scripting techniques, and security-focused one-liners for penetration testing.
- [SmartKnowner: SEP Batch](https://classroom.anir0y.in/post/2020-08-07-smartknowner-sep/): SmartKnower September batch cybersecurity internship covering OS basics, InfoSec fundamentals, and risk management training.
- [Verzeo: JULY Batch](https://classroom.anir0y.in/post/2020-08-07-verzeo-aug/): Verzeo August batch cybersecurity internship classroom with VM setup, Kali Linux, networking labs, and project resources.
- [SmartKnowner: AUG Batch](https://classroom.anir0y.in/post/2020-08-07-smartknowner-aug/): SmartKnower August batch cybersecurity internship classroom with VM setup, Kali Linux labs, and hands-on learning resources.
- [SmartKnowner: JULY Batch](https://classroom.anir0y.in/post/2020-08-07-smartknowner-july/): SmartKnower July batch cybersecurity internship classroom with VM installation, Kali Linux setup, and networking labs.
- [Verzeo JULY Batch](https://classroom.anir0y.in/post/2020-07-07-verzeo-july/): Verzeo July batch cybersecurity internship classroom resources, VM setup guides, networking labs, and project links.
- [Prequties for Training](https://classroom.anir0y.in/post/blog3/): Prerequisites for cybersecurity training — system requirements, VM setup with VirtualBox, Kali Linux, and course overview.

## More

- [All Posts](https://classroom.anir0y.in/post/)
- [Archives](https://classroom.anir0y.in/archives/)
- [About](https://classroom.anir0y.in/about/me/)
- [RSS Feed](https://classroom.anir0y.in/index.xml)
- [Sitemap](https://classroom.anir0y.in/sitemap.xml)