TryHackMe Support: Five Weak Trust Boundaries to RCE
Jr Penetration Tester

Support: Five Weak Trust Boundaries to RCE

September 6, 2026 · 8 min
TryHackMe API Pentesting: BOLA to Admin in Four Requests
Jr Penetration Tester

API Pentesting: BOLA to Admin in Four Requests

September 6, 2026 · 9 min
TryHackMe Broken Authentication: Four Ways Past a Login
Jr Penetration Tester

Broken Authentication: Four Ways Past a Login

September 2, 2026 · 7 min
TryHackMe XSS Introduction: Six Payload Contexts
Jr Penetration Tester

XSS Introduction: Six Payload Contexts

September 1, 2026 · 7 min
TryHackMe CSRF Introduction: Forging a Weak Token
Jr Penetration Tester

CSRF Introduction: Forging a Weak Token

September 1, 2026 · 6 min
TryHackMe SQL Injection Introduction: Four Lab Levels
Jr Penetration Tester

SQL Injection Introduction: Four Lab Levels

September 1, 2026 · 7 min
TryHackMe Web Server Attacks II: IIS Tilde and WebDAV
Jr Penetration Tester

Web Server Attacks II: IIS Tilde and WebDAV

August 31, 2026 · 8 min
TryHackMe Web Server Attacks I: Four Servers, One Host
Jr Penetration Tester

Web Server Attacks I: Four Servers, One Host

August 31, 2026 · 6 min
TryHackMe Modern Web Stacks: Four Stacks, Four CVEs
Jr Penetration Tester

Modern Web Stacks: Four Stacks, Four CVEs

August 31, 2026 · 7 min
TryHackMe Content Discovery: Gobuster and Framework Docs
Jr Penetration Tester

Content Discovery: Gobuster and Framework Docs

August 31, 2026 · 7 min