TryHackMe

How To Web Works? DNS in Detail HTTP in Detail How Websites Work Putting it all together 📝 Notes DNS in Detail What is DNS? Domain Hierarchy Record Types Making A Request Domain Hierarchy Root Domain, Top-Level Domain, Second-Level Domain, Subdomain Record Types A Record, AAAA Record, CNAME Record, MX Record, TXT Record Making A Request HTTP in Detail What is HTTP(S)? HTTP (HyperText Transfer Protocol) HTTPS (HyperText Transfer Protocol Secure) Requests And Responses URL (Uniform Resource Locator) Scheme, User, Host, Port, Path, Query, String, Fragment Making a Request GET / HTTP/1.1 HTTP Methods GET Request POST Request PUT Request DELETE Request HTTP Status Codes: Code Range Information 100 - 199 Information Response 200 - 299 Success 300 - 399 Redirection 400 - 499 Client Errors 500 - 599 Server Errors Common HTTP Status Codes: Status Code Information 200 OK 201 Created 301 Permanent Redirect 302 Temporary Redirect 400 Bad Request 401 Not Authorised 403 Forbidden 405 Method Not Allowed 404 Page Not Found 500 Internal Service Error 503 Service Unavailable Headers Common Request Headers User-Agent Content-Length Accept-Encoding Cookie Cookies Making Requests How Websites Work HTML (CSS, Javascript) JavaScript Sensitive Data Exposure HTML Injection HTML JavaScript Sensitive Data Exposure HTML Injection Putting it all together Other Components Load Balancers CDN (Content Delivery Networks) Databases WAF (Web Application Firewall) How Web Servers Work What is a Web Server? Virtual Hosts Static Vs Dynamic Content Scripting and Backend Languages 🐧 Conclusions These rooms were insightful and helped strengthen my foundational knowledge in the topic. I found the practical exercises especially useful in connecting theoretical concepts with real-world applications. Despite already having some background, I realized there’s still a lot to explore and master in this area. It was a valuable learning experience that motivated me to keep digging deeper. ...

Windows Command Line Basic System Information Network Troubleshooting File and Disk Management Task and Process Management Conclusion Windows PowerShell What Is PowerShell PowerShell Basics Navigating the File System and Working with Files Piping, Filtering, and Sorting Data System and Network Information Real-Time System Analysis Scripting Linux Shells Introduction to Linux Shells How To Interact With a Shell? Types of Linux Shells Shell Scripting and Components The Locker Script 📝 Notes Windows Command Line Basic System Information command set, PATH= C:\>set ALLUSERSPROFILE=C:\ProgramData C:\>systeminfo more, driverquery, driverquery | more Network Troubleshooting C:\>ipconfig C:\ipconfig /all C:\>ping target_name C:\>tracert example.com time-to-live (TTL) C:\>nslookup example.com C:\>netstat -a displays all established connections and listening ports -b shows the program associated with each listening port and established connection -o reveals the process ID (PID) associated with the connection -n uses a numerical form for addresses and port numbers sshd.exe C:\>netstat -abon File and Disk Management cd - current drive and directory dir - child directories dir /a - displays hidden and system files as well dir /s - displays files in the current directory and all subdirectories. C:\Users\ibuv4r.k>tree - visually represent the child directories and subdirectories del - deletes a file (del *.png) copy - copies a file to a new location (*.txt) move - oves a file to a new location type - displays the contents of a text file more - shows a file’s content one page at a time rmdir - delete a folder Task and Process Management tasklist taskkill /PID (pid) tasklist /FI (filter) Conclusion chkdsk - checks the file system and disk for errors, helping identify bad sectors or corrupt files driverquery sfc /scannow - scans and repairs corrupted system files Windows PowerShell What Is PowerShell From the official Microsoft page: “PowerShell is a cross-platform task automation solution made up of ...

Windows and AD Fundamentals Introduction System Configuration Change UAC Settings Computer Management System Information Resource Monitor Command Prompt Registry Editor Conclusion 📝 Notes 2. System Configuration System Configuration - MSConfig General Boot Services Startup Tools Task Manager - taskmgr 3. Change UAC Settings User Account Control - UAC User Account Control helps prevent potentially harmful programs from making changes our computers. 4. Computer Management Computer Management - compmgmt This utility has three primary sections: System Tools, Storage, and Services and Applications. ...

Windows Fundamentals 1 Introduction to Windows Windows Editions The Desktop (GUI) The File System The Windows\System32 Folders User Accounts, Profiles, and Permissions User Account Control Settings and the Control Panel Task Manager Conclusion 📝 Notes 1. Introduction to Windows Connect to virtual machine via Remote Desktop 2. Windows Editions Windows 10 will reach end of support on October 14, 2025 (This applies to the following editions: Home, Pro, Pro Education, Pro for Workstations) ...

Start Your Cyber Security Journey Offensive Security Intro What is Offensive Security? Hacking your first machine Careers in cyber security Defensive Security Introduction to Defensive Security Areas of Defensive Security Practical Example of Defensive Security 📝 Notes What is Offensive Security Intro? Beginning Your Learning Journey Hacking your first machine gobuster -u http://fakebank.thm -w wordlist.txt dir Careers in cyber security Penetration Tester, Red Teamer, Security Engineer Introduction to Defensive Security Preventing intrusions Detecting intrusions Blue teams are part of the defensive security landscape User cyber security awareness Documenting and managing assets Updating and patching systems Setting up preventative security devices Setting up logging and monitoring devices Areas of Defensive Security Security Operations Center (SOC) Vulnerabilities Policy violations Unauthorized activity Network intrusions Threat Intelligence Digital Forensics and Incident Response (DFIR) Digital Forensics Incident Response Malware Analysis Digital Forensics File System System memory System logs Network logs Incident Response Preparation Detection and Analysis Containment, Eradication, and Recovery Post-Incident Activity Malware Analysis virus is a piece of code Trojan Horse Ransomware Static analysis Dynamic analysis Practical Example of Defensive Security Simulating a SIEM 🐧 Conclusion: This was a very short introduction. ...

Explore offensive and defensive cyber security via interactive exercises and acquire the essential search skills to find information. Offensive Security Intro Hack your first website (legally in a safe environment) and experience an ethical hacker’s job. Defensive Security Intro Introducing defensive security and related topics, such as Threat Intelligence, SOC, DFIR, Malware Analysis, and SIEM. Search Skills Learn to efficiently search the Internet and use specialized search engines and technical docs. ...

This notes contains my personal notes and summaries from the TryHackMe platform, focusing on the SOC Level 1 path and Blue Team topics and SIEM basics. The goal is to document what I’ve learned, strengthen my cybersecurity knowledge, and build a practical portfolio others can follow. Tools that helped me along the way Address, Network Search https://www.abuseipdb.com/ https://wigle.net/index https://www.arin.net/ https://ipinfo.io/ Adversary Tactics and Techniques, Knowledge Base https://attack.mitre.org/ Analyze Headers https://toolbox.googleapps.com/apps/messageheader/analyzeheader https://mha.azurewebsites.net/ https://mailheader.org/ Blocklist Botnet https://feodotracker.abuse.ch/ Blocklist Programs https://threatfox.abuse.ch/ Blocklist SSL https://sslbl.abuse.ch/ Blocklist URL https://urlhaus.abuse.ch/ Crack, Hash https://crackstation.net/ https://md5hashing.net/ https://hashes.com/en/decrypt/hash https://hashcat.net/wiki/doku.php?id=example_hashes https://www.onlinehashcrack.com/hash-identification.php https://emn178.github.io/online-tools/ https://www.srihash.org/ Decoding, HEXA https://emn178.github.io/online-tools/base32_decode.html https://www.base64decode.org/ https://www.dcode.fr/cipher-identifier https://morsecode.world/international/translator.html https://gchq.github.io/CyberChef/ https://cyberchef.io/ https://regex101.com/r/zQ3mH7/1 Downloads-exe https://lolbas-project.github.io/ Education, certificates https://www.cybrary.it/catalog https://www.giac.org/certifications/security-essentials-gsec/ https://www.isc2.org/certifications/ccsp https://www.comptia.org/training/certmaster-learn/securitysection2 Encryption, Cryptography https://cryptii.com/pipes/caesar-cipher Error Codes https://hstechdocs.helpsystems.com/manuals/globalscape/cuteftpmacpro3/Numbered_FTP_status_and_error_codes.htm?ref=securitynguyen.com Exploit, Vulnerability Database https://www.exploit-db.com/ https://www.cve.org/ IP Calculator https://jodies.de/ipcalc Linux https://ubuntu.com/ https://www.linuxmint.com/ https://www.kali.org/ https://www.centos.org/ https://fishshell.com/ MAC Address Lookup https://maclookup.app Magic Number https://asecuritysite.com/forensics/magic Malware Databases https://malshare.com/ https://tdm.socprime.com/signup https://bazaar.abuse.ch/ https://user-agents.net/browsers Network Protocol Analyzers https://tshark.dev/ https://www.tcpdump.org/ https://www.wireshark.org/ https://nmap.org/man/hu/index.html https://www.snort.org/ (A site for sharing packet capture (pcap) files and malware) samples. https://www.malware-traffic-analysis.net/ OSINT https://github.com/laramies/theHarvester https://www.varonis.com/blog/what-is-osint https://hunter.io/ https://osintframework.com/ Other Search Engines https://search.censys.io/ https://www.shodan.io/ https://haveibeenpwned.com/ Phishing https://www.knowbe4.com/resource-center/phishing https://www.itgovernance.co.uk/blog/5-ways-to-detect-a-phishing-email https://cheapsslsecurity.com/blog/10-phishing-email-examples-you-need-to-see/ https://phishingquiz.withgoogle.com/ https://app.phishtool.com/ Ports https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml Protocol numbers https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml Reading, Magazine https://www.securitymagazine.com/articles/87787-hackers-attack-every-39-seconds Security News https://www.mandiant.com/resources/blog Threat Research https://talosintelligence.com/ https://oasis-open.github.io/cti-documentation/taxii/intro https://oasis-open.github.io/cti-documentation/ https://www.mandiant.com/resources https://www.recordedfuture.com/resources https://search.censys.io/ Threat Sharing https://www.circl.lu/doc/misp/ URL Extractor https://www.convertcsv.com/url-extractor.htm Virus Check On-Line https://metadefender.opswat.com/ https://www.virustotal.com/gui/home/upload https://app.any.run/ https://urlscan.io/ https://abuse.ch/ https://hybrid-analysis.com/ VirtualBox https://www.virtualbox.org/ WHOIS https://www.phishtool.com/ https://www.whois.com/whois/ https://mxtoolbox.com/ https://mxtoolbox.com/SuperTool.aspx Windows https://learn.microsoft.com/en-us/sysinternals/resources/windows-internals https://0xcybery.github.io/blog/Core-Processes-In-Windows-System https://learn.microsoft.com/hu-hu/sysinternals/ VMware https://profile.broadcom.com/web/registration WWW/Agents https://explore.whatismybrowser.com/useragents/explore/ https://outervision.com/power-supply-calculator https://securityheaders.com/ 🇭🇺 TCP IP Petrényi József TCP/IP - 1 óra alatt: ...

📝 Notes Windows Fundamentals 1 Introduction to Windows Windows Editions The Desktop (GUI) The File System FAT, HPFS, NTFS and Alternate Data Streams (ADS) The Windows\System32 Folders %windir% and System32 User Accounts, Profiles, and Permissions User Account Control Settings and the Control Panel Task Manager Windows Fundamentals 2 System Configuration MSConfig (General, Boot, Services, Startup, Tools) Change UAC Settings User Account Control (UAC) Computer Management Computer Management (compmgmt), Event Viewer, Event Logs, Device Manager System Information System Information (msinfo32) Resource Monitor Resource Monitor (resmon) Command Prompt command prompt (cmd), hostname, whoami, ipconfig, /?, netstat, net, net user, net help user Registry Editor Registry Editor (regedit) Windows Fundamentals 3 Windows Updates Windows Security Virus & threat protection Manage settings (Real-time protection, Cloud-delivered protection, Automatic sample submission, Controlled folder access, Exclusions, Notifications) Virus & threat protection updates (Check for updates) Ransomware protection (Controlled folder access) Firewall & network protection Domain, Private, and Public network. App & browser control Exploit protection (Control flow guard (CFG), Data Execution Prevention (DEP), Force randomization for images (Mandatory ASLR) Device security Core isolation (Memory Integrity) and Security processor Trusted Platform Module (TPM) BitLocker Volume Shadow Copy Service Create a restore point Perform system restore Configure restore settings Delete restore points 🐧 Conclusions The Windows Fundamentals 1–3 rooms were valuable even with my prior IT experience, as they reinforced and expanded my understanding of the Windows operating system from a security perspective. The modules provided structured insights into system configuration, user permissions, and built-in security tools like BitLocker, Defender, and the Windows Registry. Revisiting these topics helped me connect previous hands-on experience with core Blue Team concepts, making it easier to identify and interpret potential threats in a SOC environment. ...

Network Fundamentals What is Networking? Intro to LAN OSI Model Packets & Frames Extending Your Network 📝 Notes What is Networking? What is the Internet? Identifying Devices on a Network IP addresses (IPv4, IPv6), MAC addresses, Ping (ICMP) ICMP (Internet Control Message Protocol) Intro to LAN LAN Topologies Switches Routers Subnetting network address host address default gateway ARP Protocol ARP (Address Resolution) ARP Request and replay DCHP Protocol DHCP discover, offer, request, ACK Answers OSI Model Layers Physical - electrical, mechanical, and procedural interfaces Data Link - MAC (Media Access Control), Network Interface Card (NIC), Logical Link Control (LLC) Network-OSPF (Open Shortest Path First) and RIP (Routing Information Protocol) Transport - (TCP, UDP) Session - Communication direction full-duplex or half-duplex Presentation - Data Translation, Data Compression, Data Encryption/Decryption Application - HTTP, SMTP, FTP, Telnet Packets & Frames TCP/IP (The Three-Way Handshake) Source Port Destination Port Source IP Destination IP Sequence Number Acknowledgment Number Checksum Data Flags Practical — Handshake SYN, SYN/ACK, ACK, DATA, FIN UDP/IP - No three-way handshake Extending Your Network Port Forwarding Intranet Firewalls (permit, deny) permit, deny stateful, stateless VPN Basics PPP - Point to Point Protocol PPTP - Point to Point Tunnelling Protocol IPSec - Internet Protocol Security LAN Networing Devices Routers Switches VLAN (Virtual Local Area Network) 🐧 Conclusions Reviewing the OSI model is always a good idea, even for those already familiar with it. Understanding how each layer functions and interacts provides a strong foundation for diagnosing network issues and analyzing security events. This knowledge is especially useful in both offensive and defensive cybersecurity roles. It reinforces how data moves across systems, helping to make sense of complex communication processes. ...

🐧 Linux Fundamentals Part 1 Introduction A Bit of Background on Linux Interacting With Your First Linux Machine (In-Browser) Running Your First few Commands Interacting With the File-system! Searching for Files An Introduction to Shell Operators 🐧 Linux Fundamentals Part 2 Introduction Accessing Your Linux Machine Using SSH (Deploy) Introduction to Flags and Switches File-system Interaction Continued Permissions 101 Common Directories 🐧 Linux Fundamentals Part 3 Deploy Your Linux Machine Terminal Text Editors General/Useful Utilities Processes 101 Maintaining Your System: Automation Maintaining Your System: Package Management Maintaining Your System: Logs 📝 Notes 🐧 Linux Fundamentals Part 1 Accessing Your Linux Machine Using SSH (Deploy) ssh tryhackme@MACHINE_IP Introduction to Flags and Switches ls -a, ls –help, man, -h (human-readable) File-system Interaction Continued touch, mkdir, cp, mv, rm, file Permissions 101 ls -lh, read, write, execute, su, Common Directories /etc, /var, /root, /tmp Conclusions and Summaries 🐧 Linux Fundamentals Part 2 Introduction Accessing Your Linux Machine Using SSH (Deploy) practice exercises 🐧 Linux Fundamentals Part 3 Deploy Your Linux Machine Terminal Text Editors nano, vim General/Useful Utilities wget, cp, scp, Processes 101 ps, ps aux, kill, SIGTERM, SIGKILL, SIGSTOP Maintaining Your System: Automation crontab require 6 specific values (MIN, HOUR, DOM, MON, DOW, CMD) 0 *12 * * * cp -R /home/cmnatic/Documents /var/backups/ Maintaining Your System: Package Management Repositories (Adding and Removing) apt, dpkg, Maintaining Your System: Logs /var/log, access log, error log Conclusions & Summaries A little extra info This is just an important additional note, it wasn’t included in the curriculum. The next command is very rarely needed, but it may be needed. ...