URL to the room: https://tryhackme.com/room/hh-donotdisturb-84a45644

Difficulty: Medium | Type: Cloud Security (AWS Exploitation)

Date: 03/08/2026

Exploring the Eternal Blue exploit and how to take advantage of the MS17–010 SMBv1 Remote Code Execution (RCE) vulnerability.

Chaining Authentication Bypass, Session Hijacking, and Server-Side Template Injection to Gain RCE

N-able says attackers bypassed N-central authentication, reached managed client devices and installed Cloudflare tunnels that survived server access revocation.

Widespread Impact Across Open-Source Core Stacks For decades, the architectural underpinnings of mobile networks relied upon implicit trust. However, as telecommunication operators migrated to clo…

Occasionally, two ostensibly disparate cyber threats are inextricably linked by a shared arsenal of tools; South Korean cybersecurity experts have recently discovered that overlapping infrastructu…

The Hidden Life of Cheap Streaming Devices An inexpensive set-top box connected to your television could be generating illicit revenue long after the screen goes dark, entirely without your knowle…

TL;DR SICK InspectorP6xx machine-vision sensors have a critical remote-access flaw. Tracked as CVE-2026-11841, it scores a CVSS of 9.4. An unauthenticated attacker on the network can reach interna…

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain two CUPS logic bugs to gain root. The researcher who reported it, Dallas Dubs, has al…

A simple parameter change. A completely different account. Zero barriers.

Machine: kobold.htb · OS: Linux (Ubuntu) · Difficulty: Easy

Description : Tiny packets. Odd hours. Suspiciously regular. Someone’s smuggling out the data equivalent of a hotel towel every night…

How an AI-driven breach exposed the dangerous limits of corporate guardrails.

HackerOne. LastPass. Huntress. The cybersecurity companies you trust to keep you safe were all breached through a single forgotten…

Hey everyone! I’m Muhammad Jilani (aka Silentzer0).

Beyond code flaws: Why understanding system weaknesses is the cornerstone of modern enterprise defense.

A submission can begin to unravel with one simple reviewer question: what exactly did you test? Vulnerability tables and severity scores…

As businesses increasingly depend on websites, cloud platforms, applications, and connected systems, protecting digital assets has become a…