An online platform that makes it easy to break into and upskill in cyber security, all through your browser.

Joined November 2018
TryHackMe retweeted
We’re hosting a live webinar next Thursday, 22nd Oct at 9:00 AM EDT / 2:00 PM BST, on Hacking & Securing Apps Where Devs Ship AI Written Code. @springjben and @KevalJagani1 will cover the vulnerabilities AI tends to introduce, why it happens, and how to secure them. Register now, link in comment 👇
1
3
1
6
1,630
From solving TryHackMe rooms to meeting the community in person. Attended the first-ever TryHackMe Community Gathering in Delhi! Great conversations, new connections, and knowledge shared with fellow cybersecurity enthusiasts. Thanks to everyone who made it happen! @tryhackme
1
1
3
1,406
TryHackMe retweeted
Jira integration is now live on NoScope. Every finding now syncs directly to the Jira dashboard, with severity, evidence and remediation steps attached to each ticket.
2
5
1,289
With @trynoscope, you’ll soon be able to watch our AI pentester work in real time. See how the agent explores your web app, builds an attack graph, investigates potential vulnerabilities, and validates what it finds. You’ll have visibility into: • The agent’s reasoning and investigation • Every request it sends • The attack path it takes • Vulnerabilities it discovers and how it validates them • Attack classes including Recon, XSS, SSRF, IDOR, access control, and more AI pentesting shouldn’t be a black box. You should be able to see exactly what the agent did and how it found the vulnerability.
4
6
1
18
3,099
TryHackMe retweeted
Replying to @tryhackme
@tryhackme awesome seeing you at defcon 34
1
19
2,727
TryHackMe retweeted
We asked a Gitea server for a token we had no business getting. It said 200 OK. Here's how NoScope's AI agent found a 4-year-old flaw that exposed private container images on ~30,000 servers 🧵
3
6
1
20
2,648
TryHackMe retweeted
Prompt engineering is a really interesting topic ngl #AISecurity @tryhackme
2
2
12
2,389
TryHackMe retweeted
We're adding a badge for solving the NoScopeRCE room on TryHackMe. 2500+ people have solved it already, if you haven't, now's the time. Craft a sandbox escape payload using the returnClass binding, trigger it through the Extensions API, and chain it into a full reverse shell. No setup needed. Also see how NoScope autonomously found and validated CVE-2026-35482, and how to run it against a live target. Solve it, grab the badge, link in comments
1
4
17
3,366
TryHackMe retweeted
We recently found a critical RCE, and turned it into a free @tryhackme room. 1500+ people have already solved it. If you haven't tried it yet, it's worth a go. You'll craft a sandbox-escape payload using the returnClass binding, trigger it through the Extensions API, and upgrade to a full reverse shell, hands-on with no setup required. You'll also see how NoScope autonomously identified and validated CVE-2026-35482, and how to configure it to run a full automated pentest against a live target. Give it a try and let us know what you think. Link in the comments
1
3
10
2,535
TryHackMe retweeted
Last week we hosted webinar on, "AI is Accelerating Attacks: How to Evolve Your Pentest Methodology" with 1,400 people signed up. Thank you to everyone who joined! If you missed it (or want to rewatch), the full recording is up now: noscope.com/webinars/pentest… We covered how attackers are using AI to move faster than traditional security teams can respond, and why you should be evolving your pentest methodology in 2026.
1
4
12
1,854
TryHackMe retweeted
The Hacker News
@TheHackersNewsMay 28
A quick update on the Gitea vulnerability. Over 30,000 instances may still be exposed. The flaw (CVE-2026-27771) lets anyone pull private container images without authentication. Many organizations have not patched yet. If you run Gitea, check your version immediately and update to 1.26.2 or later. Temporary workaround: Enable REQUIRE_SIGNIN_VIEW.
The Hacker News
@TheHackersNewsMay 27
🚨 Gitea flaw exposes private container images without authentication. thehackernews.com/2026/05/gi… CVE-2026-27771 affects all Gitea versions before 1.26.2 and likely impacts 30,000+ deployments worldwide. Attackers can pull private images without an account or password. Update now or enable REQUIRE_SIGNIN_VIEW as a temporary workaround.
7
22
1
72
19,161
TryHackMe retweeted
For 4 years, any person on the internet could pull private container images from 30,000+ Gitea deployments. No account. No password. No credentials of any kind. NoScope discovered it. CVE-2026-27771. Here's the full story. 🧵
4
5
2
21
5,762
TryHackMe retweeted
Replying to @securestep9
@securestep9 will be joining the panel discussion at @tryhackme CTF event tomorrow in London! 🎉 Be sure to ask Sam more about OWASP and how you can get involved. #AI #CTF #community #opensource #appsec
Meet the speakers 🤝 Builders, creators & cyber leaders all joining us live in London 🇬🇧 Can’t make it in person? We’re streaming everything until 12PM: 🎤 Talks, 🛰️ panel & the ⚔️ live challenge. Livestream link will drop on the landing page👇 ▶️ tryhackme.com/ai-odyssey?utm…
1
3
14
3,861
TryHackMe retweeted
For anyone using Vercel, a few important steps to take after today’s incident: 1. Rotate your secrets 2. Move away from long-lived credentials 3. Review audit logs for any unusual access We’re offering a free pentest for Vercel users. Reach out to get started.
We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin: vercel.com/kb/bulletin/verce…
3
5
28
9,181
TryHackMe retweeted
❣️ 🐱 New room Swiper (Mobile, API Hacking) part o fLove at First Breach 2026 - Advanced Track From @tryhackme 🥞 Swiper is the app that really said "who needs a match when you can just bombard someone's profile with poetry? tryhackme.com/room/lafbctf20… #tryhackme #api
1
1
16
3,452
TryHackMe retweeted
Got another debrief from @tryhackme This makes me appreciate my efforts even my sleepless nights. It reminds me that I’m actually doing something right. Seeing what I did well and where I should improve gives me clarity and motivation. Yes… my skills are truly skyrocketing
5
10
42
3,247
TryHackMe retweeted
My first intro to pentesting started with the Jr Penetration Tester learning path on @TryHackMe It built my interest, got me curious, and ever since then I’ve been stuck on this journey. I’m documenting my progress more now and pursuing pentesting with full dedication!
20
16
292
10,606
🎄 AoC 2025 @tryhackme – Day 21: Command & Carol 🎄 Wareville was too quiet… so Sir Elfo unleashed RITA 🔍 PCAP ➡️ Zeek ➡️ RITA ➡️ 💥 Beaconing ✔️ DNS tunneling ✔️ Long shady connections ✔️ Turns out silence = C2 👀 Let analytics do the heavy lifting.
1
21
4,285