Dig Dug is an easy TryHackMe challenge focused on DNS enumeration. The goal is to query a specific DNS server correctly in order to retrieve a hidden flag stored in a DNS record.

Brooklyn Nine Nine is a beginner friendly CTF room designed for people who are starting their hacking journey

In this challenge, we focus on **analyzing phishing emails** and learning how to identify the common tricks used by attackers

In this room we’re given a web application that looks simple at first glance but hides a vulnerability related to file inclusion and path traversal

In this challenge, we’re given a target machine and asked to explore the application to identify weaknesses and progress toward the objective

This challenge demonstrates a classic IDOR vulnerability. Poor access control allows attackers to modify user input and access resources they are not authorized to view

This Rick and Morty themed room requires us to exploit a vulnerable web server and find three hidden ingredients to help Rick create his potion and turn himself back into a human

Hashes don’t fix IDOR proper access control does