Skip to main content
TryHackMe | Hacktivities

1,528 results

Fools Mate, Revenge
room

Fools Mate, Revenge

Do you have what it takes to defeat me and claim your prize?

medium

Free Challenge
Fools Mate
room

Fools Mate

Can you bypass the engine?

easy

Free Challenge
CVE-2026-46331: pedit COW
room

CVE-2026-46331: pedit COW

Exploit pedit COW, a copy-on-write flaw in the Linux kernel's packet-editing action.

easy

MAX Walkthrough
Advanced Packet Analysis
room

Advanced Packet Analysis

Triage alerts, reassemble streams, extract files, and detect protocol abuse via Wireshark & TShark.

medium

MAX Walkthrough
CTI for Alert Triage
room

CTI for Alert Triage

Explore how security analysts can use CTI in their daily operations.

easy

MAX Walkthrough
Threat Hunting: Introduction
room

Threat Hunting: Introduction

Learn the foundational concepts, approaches, and techniques of threat hunting.

easy

Free Walkthrough
NoScope: Finding RCE
room

NoScope: Finding RCE

NoScope found an Alf.io RCE zero-day (CVE-2026-35482). Exploit it manually and watch AI solve it.

medium

Free Walkthrough
Senior Security Analyst Intro
room

Senior Security Analyst Intro

Explore the duties and exciting opportunities of a SOC Level 2 analyst.

easy

Free Walkthrough
The Oversharing Container
room

The Oversharing Container

A container without its own role inherits the host's. See how this is an issue of its own.

medium

MAX Walkthrough
The Leaky Metadata
room

The Leaky Metadata

IMDSv1 turns any SSRF bug into credential theft. Find it, fix it, and build without it.

medium

MAX Walkthrough
The Unpatched Instance
room

The Unpatched Instance

Patch debt accumulates silently. Learn to find, fix, and prevent it using Systems Manager.

medium

MAX Walkthrough
The Exposed Port
room

The Exposed Port

An open management port is a standing invitation. Find it, close it, and build without it.

medium

MAX Walkthrough
The Invisible Network
room

The Invisible Network

VPC Flow Logs were not enabled. The network was invisible.

medium

MAX Walkthrough
The Forgotten NACL
room

The Forgotten NACL

Security groups protect instances. NACLs protect subnets. This one was forgotten.

medium

MAX Walkthrough
The Not So Private Subnet
room

The Not So Private Subnet

The subnet is named private. The route table says otherwise. Find it, fix it, and build it right.

medium

MAX Walkthrough
The Shared Snapshot
room

The Shared Snapshot

Sharing is caring, but sometimes oversharing is a security breach.

medium

MAX Walkthrough
The Wide-Open Security Group
room

The Wide-Open Security Group

Learn how to ensure your Security Groups are well-scoped.

medium

MAX Walkthrough
The Blind Bucket
room

The Blind Bucket

You have locked the bucket and encrypted the data, but there is a missing ingredient.

medium

MAX Walkthrough
The Silence of the IAMs
room

The Silence of the IAMs

You cannot secure what you do not see. Understand why silent IAM changes can lead to security incidents.

medium

MAX Walkthrough
The Overpowered Role
room

The Overpowered Role

Investigate how an over-permissive role can be leveraged to escalate permissions and compromise an infrastructure.

medium

MAX Walkthrough
The Plain Bucket
room

The Plain Bucket

Learn to secure S3 data at rest by finding unencrypted buckets, fixing them, and building securely.

medium

MAX Walkthrough
The Forgotten Access Key
room

The Forgotten Access Key

An IAM user has long-lived, unrotated access keys. See how to identify, remediate, and prevent this security misconfiguration.

medium

MAX Walkthrough
The Leaky Bucket
room

The Leaky Bucket

Understand one of the most common S3 misconfigurations and learn how to remediate it.

medium

MAX Walkthrough
Showing 24 of 1528 results

We use cookies to ensure you get the best user experience. For more information see our cookie policy.