TryHackMe Hacker Holidays 2026 — Day 13 — Prompt Injection to RCE

Hacking sounds fantacy but only in movies, reality is bit differet.

Crack your own WPA2 password, break WPS, and learn exactly where the legal line sits — before you touch a single tool

In many cases, parameters are not documented or directly exposed through a web application’s user interface. Some may support internal…

When user input becomes a weapon — and the application pulls the trigger.

Overview

https://portswigger.net/web-security/llm-attacks/lab-exploiting-llm-apis-with-excessive-agency

TP-Link Aginet Router Vulnerabilities: 5 Flaws Let Hackers Skip Login and Take Full Control

Solution

Easy Peasy: My First TryHackMe CTF Walkthrough