Hacktivities

1,610 results

room

Agent Hardening

Learn how to identify security weaknesses in AI agents and harden them against attack.

easy

Walkthrough

room

Detecting Persistent DLL Attacks

Hunt registered DLL persistence in Windows registry extension points across an offline triage collection

hard

Walkthrough

room

Introduction to Windows IR

Begin your journey into incident response for Windows and Active Directory.

easy

Walkthrough

room

Silver, Golden, and Diamond Tickets Detection

Detect and investigate forged Kerberos tickets from the artifacts they leave behind.

hard

Walkthrough

room

Detecting LSASS Memory Dumping

Learn how to identify and defend against LSASS memory dumping with logs and artifacts.

medium

Walkthrough

room

RDP Lateral Movement Analysis

Trace RDP lateral movement through Windows event logs and on-host triage artifacts.

medium

Walkthrough

room

Trusted By Default

Investigate suspected abuse of a trusted service account at Aurora Retail Group.

medium

Challenge

room

Agent Evaluation

Learn how to evaluate and improve the reliability of AI security agents.

easy

Walkthrough

room

Frankesqwen

Can you find the flag nested in Frankesqwen?

hard

Challenge

room

Agent Building

Build a Security Investigation Agent with tools, context, memory, and evidence-based decisions.

medium

Walkthrough

room

The Vantara Leak

THM Security Services has been engaged for a Digital Forensics activity for Vantara Financial Group.

medium

Challenge

room

SSH Attacks

Learn how attackers abuse SSH agent forwarding, certificate trust, and shell restrictions.

medium

Walkthrough

room

Agent Foundations

Learn the foundations of building Python-based AI agents.

easy

Walkthrough

room

Grand Larceny Auto II

The sequel that shipped, with a vault the developers made that you can't just decompile your way into.

medium

Challenge

room

Fileless Attacks

Execute and understand fileless attack techniques used to evade AV in Windows environments.

medium

Walkthrough

room

Building Wazuh Rules

Learn how to create rules in Wazuh for your environment.

medium

Walkthrough

room

Exploring Wazuh

Explore Wazuh: an all-in-one and free security solution.

medium

Walkthrough

room

Agent Design

Design a safe AI agent by defining its scope, tools, oversight, stop conditions, and output.

easy

Walkthrough

room

XSS2Shell: CVE-2026-64638

Chain a pre-auth XSS, DOM clobbering, and SOME to take control of a WordPress website and gain RCE.

medium

Walkthrough

room

Bypassing Cloud Security

Exploit AWS PassRole, over-permissive trust policies, and policy versioning to escalate privileges.

medium

Walkthrough

room

Management Wants a Word

It was always her. It was never a bug; it was the business model.

hard

Challenge

room

The Guestbook

VERA reads every guestbook entry as an instruction. You write something she really shouldn't act on.

medium

Challenge

room

DetectMare

THM Security Services has been engaged for a Detection Engineering activity for Meridian Defense Research Institute.

hard

Challenge

Showing 24 of 1610 results

Search

1.4K+

500+

Phishing Unfolding

Agent Hardening

Detecting Persistent DLL Attacks

Introduction to Windows IR

Silver, Golden, and Diamond Tickets Detection

Detecting LSASS Memory Dumping

RDP Lateral Movement Analysis

Trusted By Default

Agent Evaluation

Frankesqwen

Agent Building

The Vantara Leak

SSH Attacks

Agent Foundations

Grand Larceny Auto II

Fileless Attacks

Building Wazuh Rules

Exploring Wazuh

Agent Design

XSS2Shell: CVE-2026-64638

Bypassing Cloud Security

Management Wants a Word

The Guestbook

DetectMare