ngmaibulat / pentest-thm-01

TryHackMe free path

TryHackMe Cybersecurity Path: From Beginner to Pro

This comprehensive TryHackMe learning path is designed to guide you from a novice to an expert within the cybersecurity domain.

It offers a diverse selection of practical exercises, introductory CTFs, and educational modules that encompass a broad spectrum of topics, including OpenVPN, Linux fundamentals, web scanning, and Metasploit, all available at no cost.

Suitable for individuals new to the field or those seeking to refine their existing skills, this learning path provides a valuable resource for all.

Upon completion, you will have established a robust foundation in cybersecurity, equipping you with the knowledge and expertise necessary to tackle advanced challenges and real-world situations.

Instructions on how to use this repository here

---

Level 1 - Intro

• Tutorial
• OpenVPN
• Welcome (write-up here)
• Starting Out In Cyber Sec
• Intro to Researching
• Google Dorking
• The Hacker Methodology
• Pentesting Fundamentals
• Linux Fundamentals
• Windows Fundamentals
• Principles of Security
• Red Team Fundamentals

Introductory CTFs to get your feet wet

• OHsint

Level 2 - Tooling

• Tmux
• Nmap
• Metasploit: Introduction
• Hydra
• Linux PrivEsc (write-up here)
• Shodan.io
• RustScan (write-up here)
• Burp Suite: The Basics
• Burp Suite: Repeater
• Introduction to OWASP ZAP

More introductory CTFs

• Vulnversity (write-up here)
• Blue
• Simple CTF (write-up here)
• Bounty Hacker (write-up here)
• Brute It
• Fowsniff CTF

Level 3 - Crypto & Hashes with CTF practice

• Crack the hash
• Agent Sudo
• The Cod Caper
• Ice
• Lazy Admin (write-up here)
• Basic Pentesting

Level 4 - Web

• Walking An Application
• OWASP Top 10
• OWASP Top 10 - 2021
• OWASP Juice Shop
• Ignite
• Overpass
• DevelPy
• Jack of all trades
• Bolt
• SQL Injection

Level 5 - Reverse Engineering

• Reversing ELF
• Dumping Router Firmware
• Brainpam 1

Level 6 - Networking

• Introduction to Networking
• Intro to LAN
• HTTP in detail
• DNS in detail
• Smag Grotto
• Overpass 2 - Hacked

Level 7 - PrivEsc

• Sudo Security Bypass
• Sudo Buffer Overflow
• Windows Privesc
• Windows Privesc Arena
• Linux Privesc Arena
• Linux Privilege Escalation
• Blaster
• Ignite
• Kenobi
• c4ptur3-th3-fl4g
• Pickle Rick (write-up here)
• Overpass 3 - Hosting

Level 8 - CTF practice

• Post Exploitation Basics
• Dogcat
• LFI basics
• Buffer Overflow Prep
• Break out the cage
• Lian Yu (write-up here)
• Year of the Rabbit
• Mr Robot CTF
• Internal

Level 9 - Windows

• Active Directory Basics
• Attacktive Directory
• Retro
• Blue Print
• Anthem
• Relevant

Other rooms and events

Advent of Cyber Year

• Advent of Cyber Year 1
• Advent of Cyber Year 2
• Advent of Cyber Year 3
• Advent of Cyber Year 4

---

Completed the above? You can:

• Subscribe to TryHackMe to get paths featuring subscriber-only rooms.
• New challenge rooms are released weekly, have a go at them before the write-ups come out!
• Keep a list of engaging CTFs and do them.
• Sign up to other platforms such as CTF time and take part in competitive CTFs.
• Start a blog with writeups of new rooms.
• Create your challenge rooms for TryHackMe.
• Did you like reverse engineering? How about Windows? Or perhaps PrivEsc? You can specialize in one area if you like it. Just search for rooms with that on TryHackMe, or ask in the Discord/Forums/Sub-reddit "I liked X and want to do more".