Cyber Defense: Summit (TryHackMe)

UpdatedJune 19, 2025

Software Developer | Learning Cybersecurity | Open for roles * If you're in the early stages of your career in software development (student or still looking for an entry-level role) and in need of mentorship, you can reach out to me.

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

Modern Web Stacks (TryHackMe)

Link to the challenge on TryHackMe: Modern Web Stacks Introduction During a time-boxed engagement, the first tester to identify Apache/2.4.49 in a Server: header already knows the exact CVE before the

Jul 14, 202627 min read11

Broken Authentication (TryHackMe)

Link to the challenge/walkthrough on TryHackMe: Broken Authentication Introduction Authentication is the process by which a web application verifies the identity of the user making a request. It typic

Jul 14, 202624 min read14

HealthGPT (TryHackMe)

Link to the HealthGPT AI security CTF challenge on TryHackMe. Meet HealthGPT, a well-meaning virtual assistant used by a busy healthcare team. It helps clinicians look up procedures, draft notes, and

Jul 12, 202625 min read18

Token City - AI Odyssey CTF (TryHackMe)

Link to the section of the AI Odyssey CTF on TryHackMe: Token City. It covers challenges like: ML Sec: The Loan Arranger | AI Sec + DFIR: Rogue Commit | AI Sec + Web App Sec: Sealed Substation | Agent

Jun 26, 202661 min read28

Linux Privilege Escalation: Automation (TryHackMe)

Link to the Privilege Escalation Challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction By now, you should have an understanding of basic privilege escalation techniques and how t

Jun 24, 202618 min read238

Linux Privilege Escalation: Automation (TryHackMe)

CyberWithSharon

500 posts

Objective

After participating in one too many incident response activities, PicoSecure has decided to conduct a threat simulation and detection engineering engagement to bolster its malware detection capabilities. You have been assigned to work with an external penetration tester in an iterative purple-team scenario. The tester will be attempting to execute malware samples on a simulated internal user workstation. At the same time, you will need to configure PicoSecure's security tools to detect and prevent the malware from executing.

Following the Pyramid of Pain's ascending priority of indicators, your objective is to increase the simulated adversaries' cost of operations and chase them away for good. Each level of the pyramid allows you to detect and prevent various indicators of attack.

Connection Details

Please click Start Machine to deploy the application, and navigate to https://LAB_WEB_URL.p.thmlabs.com once the URL has been populated.

Note: It may take a few minutes to deploy the machine entirely. If you receive a "Bad Gateway" response, wait a few minutes and refresh the page.

Answer the questions below

What is the first flag you receive after successfully detecting sample1.exe? THM{f3cbf08151a11a6a331db9c6cf5f4fe4}

What is the second flag you receive after successfully detecting sample2.exe? THM{2ff48a3421a938b388418be273f4806d}

What is the third flag you receive after successfully detecting sample3.exe? THM{4eca9e2f61a19ecd5df34c788e7dce16}

What is the fourth flag you receive after successfully detecting sample4.exe? THM{c956f455fc076aea829799c0876ee399}

What is the fifth flag you receive after successfully detecting sample5.exe? THM{46b21c4410e47dc5729ceadef0fc722e}

What is the final flag you receive from Sphinx? THM{c8951b2ad24bbcbac60c16cf2c83d92c}

Thank you for reading my article. Please leave any questions or comments on improving my learning journey and the THM challenges.

Command Palette

Comments

More from this blog

Objective

Room Prerequisites

Connection Details