Jr Penetration Tester Path
39 rooms. 8 sections. The Jr Penetration Tester path from start to finish. Mostly harmless.
Offensive Security Intro
easyFirst room in the path. Introduces offensive security by hacking a fake bank application. You use GoBuster to discover a hidden /bank-transfer page, transfer $2000 from account 2276 to your account 8881, and the flag BANK-HACKED appears on your dashboard. Teaches the core concept: recon -> find vulnerability -> exploit.
Defensive Security Intro
easyIntroduction to defensive security. Covers SOC (Security Operations Center), Threat Intelligence, DFIR (Digital Forensics and Incident Response), and Malware Analysis. The practical exercise is a simulated SIEM dashboard where you identify a malicious alert, investigate suspicious IP 143.110.250.149 using IP-SCANNER.THM, confirm it's malicious, escalate to the SOC Team Lead, and block it on the firewall. Flag: THM{THREAT-BLOCKED}.
Careers in Cyber
easyOverview of cybersecurity career paths. Covers seven roles: Security Analyst, Security Engineer, Incident Responder, Digital Forensics Examiner, Malware Analyst, Penetration Tester, and Red Teamer. All questions are "read the above" — no answers required. Ends with a career quiz. Pure reading room to help students understand what roles exist and which path to pursue.