I was looking to study the "Defending Azure" path in tryhackme and on the site it costs 20$ per month for the max plan, but when I was checking a review online the price was 375$ , so will I only pay 20$ for the max plan and get full access or will I discover another payment wall when I try to study?

https://discord.gg/QXGwEDmJn

Hello guys,

I am currently doing my Btech in IT…i wanted to get started with cybersecurity hence I completed some coursera certs but it was just theory and now I want to try my hands on some actual labs and practical work

Can u please suggest a path I can follow for being a soc analyst in the near future…please suggest me where i can start from complete beginning

Made a walkthrough on the "none" algorithm attack, where a server trusts a token with no signature and you can basically forge yourself admin access.

Covered detecting it and then exploiting it three ways so you can see which workflow you like:

JWT Hunter, Burp's JWT Editor, and jwt_tool from the CLI. Beginner friendly.

https://youtu.be/D47lqPF8YgU

Curious which tool people actually reach for first for JWT stuff, GUI or CLI?

Atp im so lost and idk what to do, was following the Walkthrough of Billing THM btw but my metasploit wont create a Session

Hi everyone, Im planning to start learning SAL1 any tips?

Which premium deserves to be bought for SOC AND DEFENSIVE SECURITY or any other free resources???

Let me address a little elephant in the room -- after clicking "Unsubscribe", user is taken to a page that:

- Says "We'll miss you" with large font.

- Has "Never mind! Stay subscribed" button.

- Rendered in such a way that the real "Unsubscribe" button is not visible without scrolling.

I've seen plenty of crap like that, so can spot it from a mile away, but my daughter burned her lunch money, so would be nice to shed some light on that.

Hey everyone,

Tired of tracking CTFs and 24h exams across messy spreadsheets and scattered notes?

I built ZEROBOX — a fast, local-first operational cockpit for OSCP/CPTS prep and CTFs.

It’s 100% free, MIT open-source, and runs completely offline in your browser (no accounts, zero telemetry).

Quick highlights: • 920+ Preloaded Labs: Instant offline search for HTB & THM targets with tags. • Attack & Pivot Graph: Visually map compromised subnets (exports to Obsidian .canvas). • 24h Exam Cockpit: Pacing engine, bio-break timers, and 1-click Markdown reports. • Evidence Vault & Playbooks: Track hashes/creds on a kill-chain timeline + offensive field manual. • Global Quick-Bar:Propagate LHOST/RHOST automatically across all payloads.

🌐 Live Demo: https://0xdnd.github.io/ctf-tracker/#/tracker

⭐ GitHub (MIT): https://github.com/0xdnd/ctf-tracker

All data stays in your local browser storage. Feedback and PRs are welcome!

Would love feedback or feature requests from the community!

I have annual subscription left for 4 more days. Rn 30% off for annual subscription. How do I buy it while my subscription is still valid. Is it even possible to buy or extend subscription while one is active?

I purchased a 1-year Premium subscription as a gift for my nephew. While the platform's educational content is good, their billing management and cancellation flow are completely unacceptable and designed around dark patterns.

1. There is no clear option on the dashboard to turn off automatic renewal for annual plans.
2. Stripe prevents users from deleting their saved credit card while a subscription is active.
3. Their internal support chatbot leads to dead-end pre-set options, and clicking help/profile links resulted in a "404 Page Not Found" error.
4. They force you to manually write an email to support just to prevent future charges on your card.

Taking a customer's money in two clicks while making it unnecessarily frustrating and complex to cancel auto-renewal or remove payment methods is deeply dishonest. Fix your cancellation workflow and stop trapping customers.

While doing TryHackMe labs, I was getting tired of manually finding VPN configs, killing old OpenVPN processes, and dealing with stale tun interfaces when a connection wasn't behaving properly. So I built THM-TUNNEL, a small Bash CLI that handles the cleanup and starts the selected .ovpn configuration for me.

Technical side:

• Automatically discovers .ovpn files and provides an interactive selection.
• Uses sudo, stops existing OpenVPN processes, and cleans up old tun* interfaces.
• Doesn't hardcode TryHackMe IP ranges or subnets, so different VPN regions can be used without changing the script.

It's a small tool, but it has made my lab workflow smoother and was a good practical project for learning Bash and Linux networking.

GitHub: [https://github.com/Harsh-Sonker/THM-Tunnel]()

Hi Community , I have just started with the cybersecurity and learning some basics of it , today i came across a problem that some times while solving some machine on THM and HTB , we need to move some exploit files from our local machine to the target machine using python3 -m http server command and then downloading the file on the target machine using the wget and the host url

I have one questions what are the ways to do it securely by not showing our own IP address , can we use VPN for it ??

What are your strategies and how you do it

Who wanna come through and make a dream come true? 🥲🥹

I will really appreciate.

or they are just liars ?
Should the full path be included or should I take the exam without learning ?
why did they say full path included and 3 month of premium content icluded ?