IAmMasterCraft retweeted
🚨 We’re giving away $1 MILLION in PT1 certs! 🚨
If you hold an eJPT, PJPT, or OSCP, apply now to be 1 of 3300 people to access TryHackMe’s PT1 certification!
📅 May 27–30 2025 only
🎯 Limited to 3,300 winners
👉Apply today! forms.gle/2KWE5JYxJLeCheJ36
Topped the league on @tryhackme, but the grind doesn't stop.
The hacking continues, the learning continues the coffee continues.
On to the next challenge!
#tryhackme #cybersecurity #hacking #learning
1
31
I just published 'My Experience Pen testing an E-Learning Platform'
Started with an anonymous FTP login.
Ended with root access.
Check the full gist of my first pentest 👇🏼👇🏼👇🏼:
medium.com/p/my-experience-p…
3
80
I'm diving down the rabbit hole of Cyber Security 101 with @tryhackme
Let’s see where this road leads with a 30-day challenge… 🔐💻
#CyberSecurity #infosec #EthicalHacking #Pentesting
32
3
348
Although I could not complete Cyber Security 101 in 30 days, I was able to cover
- basic intro to cyber security
- fundamentals of OS (Linux & windows)
- CLI Usage
- networking
- cryptography
- reconnaissance &enumeration
- web hacking & offensive security
56
Day 30 - Defensive Security
Defensive security is not just about blocking cyber attacks, it is all about having an understanding of what you have, watch and observe what happens to it, quickly respond to threats before things fall apart.
18
Day 29 of 30 - Shells
A shell is a command-line access to a target system, often after exploitation.
Things you can do with a shell include:
-Run commands
-Browse files
-Modify configurations
-Install malware
-Create users
-Exfiltrate data
-Move laterally
1
25
Day 28 of 30 - Directory brute-forcing with gobuster
Gobuster is a beast for discovering hidden paths, directories, and files on web servers it is fast, simple, and deadly when paired with the right wordlist.
1
1
23
Day 27 of 30 - Brute-forcing with Hydra
Hydra is a powerful tool for brute-forcing services like SSH, FTP, and web logins.
It is fast, it is scriptable and when misconfigurations exist, it produces results.
1
12
Day 26 of 30 - OWASP Top 10
- Broken Access Control
- Cryptographic Failures
- Injection
- Insecure Design
- Security Misconfiguration
1
1
18
Day 25 of 30 - Burp suite & features
Burp Suite is the toolkit for web & mobile app testing, features include: proxy, repeater, intruder, decoder, comparer, sequencer and extensions
21
Day 24 of 30 - HTTP Security Headers
These tiny lines of text can stop big attacks.
Security headers run silently in the background while defending against XSS, clickjacking, and data leaks
1
17
Day 23 of 30 - HTTP Status Codes
Every time you interact with a website, the server replies with a status code; a 3-digit number telling you if the request was successful, redirected, failed, or exploded.
1
1
17
Day 22 of 30 - Anatomy of URL
A URL is more than a web address, it's a map to online resources.
Knowing how to read it helps with security, development, and debugging.
4
15
5. Query String: appears after a ?
e.g: ?search=shoes
Vulnerable to injection attacks if not validated.
6. Fragment: comes after #, like #section3
Used to jump to page sections.
Can be manipulated in attacks, too.
7