🔍 Enumeration & Brute Force Attacks
✅ TryHackMe: Enumeration & Brute Force
In this room, I explored different techniques attackers use to gather information about a target. I practiced using tools like Hydra and Gobuster to brute-force services like SSH and directories — learning just how important strong passwords and secure configurations are.
Key Takeaway: Enumeration is often the first and most critical phase of any attack. A poorly configured system can leak more than expected.
🛠️ Introduction to Metasploit
✅ TryHackMe: Metasploit Intro
Metasploit is a powerful framework used for developing and executing exploit code. This room walked me through scanning, exploiting, and post-exploitation steps. I got hands-on experience launching exploits against vulnerable services and learned how to use Meterpreter for interactive access.
Key Takeaway: Metasploit simplifies exploitation but also teaches the importance of understanding vulnerabilities at a deeper level.
🔍 Host and Service Discovery
✅ TryHackMe: Lookup & Dig Dug
These rooms focused on DNS enumeration using tools like dig, nslookup, and whois. I explored how domain-related misconfigurations can reveal subdomains or sensitive records — key pieces of the puzzle for attackers.
Key Takeaway: DNS is often overlooked, but it’s a goldmine for open-source intelligence (OSINT).
⚡ Fuzzing & Directory Discovery
✅ TryHackMe: FFUF
In this room, I learned how to use FFUF, a fast web fuzzer, to discover hidden directories and files on web servers. It was eye-opening to see how simple wordlists can reveal poorly secured web endpoints.
Key Takeaway: Even well-designed websites can be exposed through hidden paths if not secured or monitored properly.
📰 Exploiting Web Applications
✅ TryHackMe: Publisher
This was one of the most exciting rooms. I explored how vulnerable web applications can be exploited using a combination of information disclosure, directory traversal, and more. It was a great way to tie together enumeration, fuzzing, and exploitation.
Key Takeaway: Web apps are rich attack surfaces. A simple misconfiguration or outdated plugin can open the doors to attackers.
📚 HTB Academy: Theory Meets Practice
✅ Module 39 & 54 (Linux Fundamentals & Enumeration)
The HTB Academy modules gave me strong theoretical foundations that supported my TryHackMe labs. I brushed up on Linux basics, file permissions, privilege escalation, and enumeration strategies across networks and services.
Key Takeaway: Knowing your operating system inside out is key — especially when you're trying to defend (or attack) it.
💡 Final Thoughts
This bootcamp gave me more than just practical skills — it helped me develop a hacker mindset. I learned to think critically, look deeper, and always question what’s running under the hood.
If you're someone who enjoys solving puzzles, thinking like an attacker, or just wants to learn how to protect digital systems — cybersecurity is for you.
Feel free to reach out if you're on a similar journey. Let’s connect and grow together in this exciting field! 🚀
🧠 Tools I used:
Hydra, Gobuster, FFUF
Metasploit Framework
dig, nslookup, whois
Burp Suite (lightly)
Linux CLI (a lot!)
Top comments (0)