Exploiting AlwaysInstallElevated for Windows Privilege Escalation
·2 mins
A walkthrough of exploiting the AlwaysInstallElevated misconfiguration on Windows to escalate from user to SYSTEM using a malicious MSI payload.
TryHackMe
Anonymous Rooted: A TryHackMe Walkthrough
This walkthrough covers the TryHackMe ‘Anonymous’ room. I gain user-level access via FTP and a writable script, capture the user flag, and escalate to root via a SUID misconfiguration.
TryHackMe: Enumeration & Brute Force Room Walkthrough
Overview #
This walkthrough documents my experience completing the Enumeration & Brute Force room on TryHackMe. The room provides hands-on experience with various enumeration techniques, brute force attacks, and web application vulnerability exploitation. This write-up details my approach to each task and the key learning points along the way.
TryHackMe IDOR Room Walkthrough
Walkthrough of the Insecure Direct Object Reference (IDOR) room on TryHackMe, part of the Jr. Web Penetration Tester learning path.
🧠Access the TryHackMe IDOR Room — Complete this room to practice real-world exploitation of Insecure Direct Object References in a safe lab environment.
Wireshark: The Basics - THM Walkthrough by Nisha
Room Link: https://tryhackme.com/r/room/wiresharkthebasics
Learning Objectives
Task 1 - Introduction #
Question: Which file is used to simulate the screenshots? Answer: http1.pcapng
<strong>Question: Which file is used to answer the questions? </strong>
<em> Answer: Exercise.pcapng </em></br>
Content Discovery - THM Walkthrough by Nisha
·5 mins
Room Link: https://tryhackme.com/r/room/contentdiscovery
In cybersecurity, discovering hidden or non-obvious content on web servers is critical for any aspiring ethical hacker. The “Content Discovery” room on TryHackMe offers a detailed, hands-on approach to mastering techniques for uncovering various types of web content that can reveal vulnerabilities or sensitive data. Ideal for learners looking to deepen their web penetration testing skills, this room enhances the ability to pinpoint potential entry points on a target website.