Thm | Classroom

TryHackMe AD BadSuccessor: dMSA Abuse to Domain Admin

Active Directory

AD BadSuccessor: dMSA Abuse to Domain Admin

TryHackMe n8n CVE-2025-68613: Expression Injection to RCE

Jr Penetration Tester

n8n CVE-2025-68613: Expression Injection to RCE

TryHackMe NoScope: Alf.io returnClass Sandbox Escape to RCE

Jr Penetration Tester

NoScope: Alf.io returnClass Sandbox Escape to RCE

TryHackMe Basic Vulnerability Identification Techniques

Jr Penetration Tester

Basic Vulnerability Identification Techniques

TryHackMe Trusted By Default: Service Account Abuse in Splunk

DFIR

Trusted By Default: Service Account Abuse in Splunk

TryHackMe Vulnerability Scanning Tools: Nmap, Nikto, OpenVAS

Jr Penetration Tester

Vulnerability Scanning Tools: Nmap, Nikto, OpenVAS

TryHackMe Support: Five Weak Trust Boundaries to RCE

Jr Penetration Tester

Support: Five Weak Trust Boundaries to RCE

TryHackMe API Pentesting: BOLA to Admin in Four Requests

Jr Penetration Tester

API Pentesting: BOLA to Admin in Four Requests

TryHackMe Broken Authentication: Four Ways Past a Login

Jr Penetration Tester

Broken Authentication: Four Ways Past a Login

TryHackMe Recruit: File Read to SQLi to Admin

Web Application Security

Recruit: File Read to SQLi to Admin