TryHackMe on Notes by Nisha

Exploiting AlwaysInstallElevated for Windows Privilege Escalation

Tue, 06 May 2025 00:00:00 +0000

A walkthrough of exploiting the AlwaysInstallElevated misconfiguration on Windows to escalate from user to SYSTEM using a malicious MSI payload.

Anonymous Rooted: A TryHackMe Walkthrough

Mon, 03 Mar 2025 00:00:00 +0000

This walkthrough covers the TryHackMe ‘Anonymous’ room. I gain user-level access via FTP and a writable script, capture the user flag, and escalate to root via a SUID misconfiguration.

TryHackMe: Enumeration & Brute Force Room Walkthrough

Thu, 21 Nov 2024 00:00:00 +0000

Overview #

This walkthrough documents my experience completing the Enumeration & Brute Force room on TryHackMe. The room provides hands-on experience with various enumeration techniques, brute force attacks, and web application vulnerability exploitation. This write-up details my approach to each task and the key learning points along the way.

TryHackMe IDOR Room Walkthrough

Sat, 29 Jun 2024 00:00:00 +0000

Walkthrough of the Insecure Direct Object Reference (IDOR) room on TryHackMe, part of the Jr. Web Penetration Tester learning path.

🧭 Access the TryHackMe IDOR Room — Complete this room to practice real-world exploitation of Insecure Direct Object References in a safe lab environment.

Wireshark: The Basics - THM Walkthrough by Nisha

Tue, 05 Dec 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/wiresharkthebasics

Learning Objectives

Task 1 - Introduction #

Question: Which file is used to simulate the screenshots? Answer: http1.pcapng

<strong>Question: Which file is used to answer the questions? </strong>
<em> Answer: Exercise.pcapng </em></br>

Content Discovery - THM Walkthrough by Nisha

Fri, 13 Oct 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/contentdiscovery

In cybersecurity, discovering hidden or non-obvious content on web servers is critical for any aspiring ethical hacker. The “Content Discovery” room on TryHackMe offers a detailed, hands-on approach to mastering techniques for uncovering various types of web content that can reveal vulnerabilities or sensitive data. Ideal for learners looking to deepen their web penetration testing skills, this room enhances the ability to pinpoint potential entry points on a target website.