TryHackMe Free Content Catalog
TryHackMe Free Rooms
Direct access to all 83 free practical labs and walkthrough rooms on the TryHackMe platform.
83Free Rooms
5Difficulty Levels
30Topics
Showing 1 to 24 of 83 rooms
SOC L2 Alert Triage
🗺️ walkthrough
Learn how to triage escalated alerts and respond to cyber threats.
Security Analyst/ Blue Team
Security analysis
Blue
+7
Easy
45m3.4K
Start Room →
AI Security Threats
🗺️ walkthrough
Explore the vulnerabilities AI introduces, how attackers exploit it, and how defenders fight back.
Security Analyst/ Blue Team
Blue
Artificial Intelligence
+5
Easy
30m2.3K
Start Room →
Fools Mate, Revenge
⚔️ challenge
Do you have what it takes to defeat me and claim your prize?
Penetration Tester/ Red Team
Linux
Nmap
+9
Medium
1h2.1K
Start Room →
Threat Hunting: Introduction
🗺️ walkthrough
Learn the foundational concepts, approaches, and techniques of threat hunting.
Security Analyst/ Blue Team
Threat hunting
Splunk
+5
Easy
1h3.9K
Start Room →
Senior Security Analyst Intro
🗺️ walkthrough
Explore the duties and exciting opportunities of a SOC Level 2 analyst.
Security Analyst/ Blue Team
General Cyber
Security analysis
+7
Easy
30m3.5K
Start Room →
Detection Rules Development
🗺️ walkthrough
Explore the types of detection, how to use them in Elastic, and the process behind effective rules.
Security Analyst/ Blue Team
Security Engineer
Detection engineering
+6
Medium
1h 30m2.6K
Start Room →
Detection and Analysis
🗺️ walkthrough
Understand the Detection and Analysis phase of the Incident Response Lifecycle.
Security Analyst/ Blue Team
Incident response
Splunk
+4
Medium
1h3.7K
Start Room →
Preparation
🗺️ walkthrough
Understand the Preparation phase of the Incident Response lifecycle.
Security Analyst/ Blue Team
Incident response
Incident handling
+5
Easy
45m5.4K
Start Room →
Intro to Detection Engineering
🗺️ walkthrough
Learn what Detection Engineering is, how it works in a SOC, and the mindset required to build effective detections.
Security Analyst/ Blue Team
Detection engineering
Blue
+3
Easy
30m5.7K
Start Room →
CVE-2026-42945: Nginx Rift
🗺️ walkthrough
Exploit NGINX Rift, an unauthenticated heap overflow RCE in NGINX's rewrite module since 2008.
Security Analyst/ Blue Team
Penetration Tester/ Red Team
Linux
+4
Easy
30m4.7K
Start Room →
CVE-2026-46300: Fragnesia
🗺️ walkthrough
Exploit Fragnesia, an LPE that surfaced due to dirtyfrag's patch.
Security Analyst/ Blue Team
Penetration Tester/ Red Team
Linux
+4
Easy
30m3.9K
Start Room →
Content Discovery
🗺️ walkthrough
Discover hidden web content using manual techniques, OSINT, and Gobuster enumeration.
Penetration Tester/ Red Team
Linux
Web
+9
Easy
30m11.0K
Start Room →
Re-Testing
🗺️ walkthrough
Verify vulnerability remediations, spot incomplete fixes, and produce re-test reports for auditors.
Penetration Tester/ Red Team
Security Engineer
Application penetration testing
+6
Medium
1h 30m1.7K
Start Room →
Guided Pentest: Web
🗺️ walkthrough
Learn web app pentesting by chaining vulnerabilities from recon to full server compromise.
Penetration Tester/ Red Team
Application penetration testing
Web
+5
Easy
1h53.9K
Start Room →
Python: Core Concepts
🗺️ walkthrough
Build a foundational knowledge of Python core concepts.
General Cyber
Linux
Blue
+10
Easy
1h3.6K
Start Room →
CVE-2026-43284: Dirty Frag
🗺️ walkthrough
Exploit Dirty Frag, a chained Linux LPE that bypasses every major distro's defences.
Security Analyst/ Blue Team
Penetration Tester/ Red Team
Linux
+4
Easy
30m2.8K
Start Room →
Intro to AD Breaching
🗺️ walkthrough
Explore AD breaching including username enumeration, password spraying, coercion, and mitigations.
Penetration Tester/ Red Team
Impacket
Red
+5
Medium
1h4.0K
Start Room →
Understanding Vulnerability Databases
🗺️ walkthrough
Explore vulnerability databases, their importance, and practical usage during pentesting.
Penetration Tester/ Red Team
Security Engineer
Application penetration testing
+6
Easy
1h10.0K
Start Room →
AI Threat Modelling Assessment
⚔️ challenge
Put your AI threat modelling skills to the test using an interactive assessment application.
Security Analyst/ Blue Team
General Cyber
Blue
+5
Easy
15m13.8K
Start Room →
Securing AI Systems
🗺️ walkthrough
Map AI architecture, identify OWASP/ATLAS attack surfaces, and apply secure design to trust boundaries.
Security Engineer
Blue
AI
+4
Medium
1h13.0K
Start Room →
AI Threat Modelling
🗺️ walkthrough
Assess and mitigate enterprise AI/ML risks via systematic, defender-focused auditing.
Security Analyst/ Blue Team
Penetration Tester/ Red Team
General Cyber
+7
Medium
1h9.8K
Start Room →
AI Models & Data
🗺️ walkthrough
Explore how data is fundamental to AI security, and the models which power it.
Security Analyst/ Blue Team
General Cyber
Blue
+5
Medium
1h25.4K
Start Room →
Chain Reaction
🗺️ walkthrough
Hunt down an Axios chain attack before the chain reaction spreads.
Security Analyst/ Blue Team
Penetration Tester/ Red Team
Security Engineer
+12
Medium
1h 15m1.8K
Start Room →
Phishing Basics
🗺️ walkthrough
Explore phishing techniques and tools for penetration testing.
Penetration Tester/ Red Team
Penetration testing
Linux
+10
Easy
45m13.6K
Start Room →
Page 1 of 4
1 / 4