Tryhackme on Notes by Nisha

Exploiting AlwaysInstallElevated for Windows Privilege Escalation

Tue, 06 May 2025 00:00:00 +0000

A walkthrough of exploiting the AlwaysInstallElevated misconfiguration on Windows to escalate from user to SYSTEM using a malicious MSI payload.

LazyAdmin TryHackMe Walkthrough

Thu, 27 Mar 2025 00:00:00 +0000

A complete walkthrough of the LazyAdmin room on TryHackMe, demonstrating enumeration, exploitation, and privilege escalation.

Anonymous Rooted: A TryHackMe Walkthrough

Mon, 03 Mar 2025 00:00:00 +0000

This walkthrough covers the TryHackMe ‘Anonymous’ room. I gain user-level access via FTP and a writable script, capture the user flag, and escalate to root via a SUID misconfiguration.

Escalate and Defend: Linux Kernel Exploit Walkthrough

Fri, 11 Oct 2024 00:00:00 +0000

A dual perspective walkthrough of TryHackMe’s Linux Privilege Escalation room (Kernel Exploits), including offensive steps and defense strategies mapped to the MITRE ATT&CK Framework.

TryHackMe IDOR Room Walkthrough

Sat, 29 Jun 2024 00:00:00 +0000

Walkthrough of the Insecure Direct Object Reference (IDOR) room on TryHackMe, part of the Jr. Web Penetration Tester learning path.

🧭 Access the TryHackMe IDOR Room — Complete this room to practice real-world exploitation of Insecure Direct Object References in a safe lab environment.

Steel Mountain - TryHackMe Walkthrough by Nisha

Sun, 16 Jun 2024 00:00:00 +0000

Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration and learn a new technique to get Administrator access.

Hacking Kenobi: From Anonymous Access to Root like a Rebel

Fri, 14 Jun 2024 00:00:00 +0000

A complete walkthrough of the Kenobi TryHackMe room, covering enumeration, exploiting ProFTPD, and privilege escalation using SUID PATH hijacking.

TryHackMe Ice - Walkthrough by Nisha

Tue, 04 Jun 2024 00:00:00 +0000

Deploy & hack into a Windows machine, exploiting a very poorly secured media server.

Room Link: https://tryhackme.com/r/room/ice

Task 1 - Connect #

Get connected to the TryHackMe network using OpenVPN. Make sure to first download your configuration file from your access page.

TryHackMe Ignite Room Walkthrough: Exploiting Fuel CMS 1.4.1 RCE

Sun, 17 Mar 2024 00:00:00 +0000

Walkthrough of TryHackMe’s Ignite room where we exploit a Remote Code Execution vulnerability in Fuel CMS 1.4.1 (CVE-2018-16763). Learn the steps of enumeration, exploitation, privilege escalation, and defense strategies.

Walking An Application - THM Walkthrough by Nisha

Wed, 27 Sep 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/walkinganapplication

In the "Walking An Application" room on TryHackMe, you will learn how to manually assess a web application for security vulnerabilities using only the built-in tools available in your web browser. Automated security tools and scripts often miss many potential vulnerabilities and valuable information. This room emphasizes the importance of manual review to identify and understand these overlooked issues.

Introduction to Offensive Security - THM Walkthrough by Nisha

Mon, 18 Sep 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/introtooffensivesecurity

Task 1 - What is Offensive Security? #

Question: Which of the following options better represents the process where you simulate a hacker’s actions to find vulnerabilities in a system?

Introduction to Defensive Security - THM Walkthrough by Nisha

Wed, 03 May 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/defensivesecurity

Task 1 - Introduction to Defensive Security #

Learning Objectives: Offensive security primarily aims at breaking into systems through various methods like exploiting bugs, abusing insecure setups, and bypassing access control policies. This is the realm of red teams and penetration testers.