TryHackMe’s Advent of Cyber 2025 CTF
This room was released on day thirteen of the event and focuses on YARA rules used for detecting malicious behaviour. Task 1 Introduction Read some background information on why we are doing this. Spin up the Virtual Machine. Task 2…
This room was released on day twelve of the event and focuses on detecting phishing emails. Task 1 Introduction Read the story background. Start the Virtual Machine and navigate to the Email Inspector web page. Task 2 Spotting Phishing Emails Read…
This room was released on day eleven of the event and focuses on Cross Site Scripting (XSS). Task 1 Introduction Read a brief setup with a tiny bit of story. Spin up the Attack Box and a Virtual Machine. Task…
This room was released on day nine of the event and focuses on cracking passwords. Task 1 Introduction This section introduces some more story material. Launch the Virtual Machine. Task 2 Attacks Against Encrypted Files Read about password cracking methods. Change…
This room was released on day eight of the event and focuses on exploiting an AI agent. Task 1 Introduction This section tells you more background story. Launch the Attack Box and Virtual Machine. Task 2 Agentic AI Hack Read…
This room was released on day seven of the event and covered network discovery using nmap. Task 1 Introduction Read some more story material. Launch the Attack Box and Virtual Machine. Task 2 Discover Network Services We need to see…
This room was released on day six of the event and introduces malware analysis and some basic tools. Task 1 Introduction Read some more of the event story. Launch the Virtual Machine. Task 2 Malware Analysis Using Sandboxes Read about static and…
This room was released on day five of the event and introduces insecure direct object references (IDOR) and how to exploit them. Task 1 Introduction This section covers some more story material. Launch the Attack Box and Virtual Machine. Task 2 IDOR…
This room was released on day four of the event and introduces the idea of AI chatbots as a tool for analysing security logs. Task 1 Introduction This section introduces some more story line content. Start an Attack Box and Virtual…