Writeups

A collection of writeups from TryHackMe rooms and challenges I've completed. Each one covers the full methodology — recon, exploitation, and remediation — with flags omitted per TryHackMe's publishing guidelines.

Note: All flags, passwords, and cracked hashes have been redacted or omitted. Target IPs are shown as TARGET.

Title Category Difficulty Room

• Evil Inc. — Full Attack Chain Web / AD / Privilege Escalation — Jackpot Overflow
• b1t_recovery Crypto — Jackpot Overflow
• Sigma Detection Rules — POWDER WOLF SOC / Detection Engineering — Jackpot Overflow
• Lost Fortune Web / LFI Easy Jackpot Overflow
• Stolen Jackpot Network Forensics / Reverse Engineering — Jackpot Overflow

(Room links assumed to be the same event based on shared theming — double check and correct any that belong to a different room.)

Structure

Each writeup follows a consistent format:

Recon — how the target/challenge was enumerated Vulnerability — the underlying weakness being exploited Exploitation — step-by-step walkthrough with commands and payloads Flag — omitted, but confirmed captured Lessons / Remediation — how the issue could be detected or fixed in a real environment

Disclaimer All techniques described in this repo were performed against intentionally vulnerable machines provided by TryHackMe for educational purposes. Nothing here should be used against systems you don't own or have explicit permission to test.