TryHackMe

What is TryHackMe?

TryHackMe is an online platform for learning cybersecurity hands-on through "rooms": short lessons that combine theory, questions and a vulnerable machine you deploy with one click. Its strength is how it guides complete beginners: it explains concepts before asking you to apply them and organises content into offensive and defensive learning paths. That is why it is usually the first platform recommended before moving on to tougher environments.

What TryHackMe is used for

• Learning the fundamentals: networking, Linux, Windows, web and basic security concepts with immediate exercises.
• Training in pentesting: enumeration, exploitation, privilege escalation, Active Directory.
• Training on the defensive side (Blue Team): log analysis, SIEM, incident response and SOC analyst work.
• Preparing for entry-level certifications such as the eJPT, thanks to machines of increasing difficulty.
• Competing in modes like King of the Hill or seasonal events (such as Advent of Cyber).

Getting started with TryHackMe

1. Create a free account at tryhackme.com.
2. Start with an introductory path (for example, the one for complete beginners or the introduction to cyber security). It teaches you how the platform works plus networking and Linux basics.
3. Choose how to attack machines: with the AttackBox (an in-browser attack machine, time-limited on the free plan) or with your own Kali/Parrot machine connected via VPN.
4. Work through each room answering the questions: every correct answer earns points and unlocks the next task.

To connect via VPN from your Linux machine, download your configuration file from the platform's access page and run:

sudo openvpn your-username.ovpn

Leave that terminal open and check connectivity with the target machine's IP:

ping -c 3 10.10.X.X
nmap -sC -sV -oN scan.txt 10.10.X.X

Machine IPs change on every deployment; use the one shown in the room. Only attack the machines you deploy on the platform.

Recommended learning path

1. Fundamentals: networking (TCP/IP, DNS, HTTP), basic Linux and Windows.
2. Essential tools: Nmap, Burp Suite, Metasploit and wordlists.
3. Web: rooms on the OWASP Top 10; complement them with the PortSwigger Web Security Academy.
4. Junior pentester path: the full methodology of a penetration test.
5. CTF-style machines of easy and medium difficulty without walkthroughs, taking notes as if writing a report.
6. Specialisation: advanced offensive work, Active Directory or, if defence appeals to you, the SOC analyst path.

Free or Premium

TryHackMe has a free plan with many open rooms and a subscription plan that unlocks every path, exclusive rooms, more AttackBox time and faster machines. Prices change and there are student discounts and occasional offers, so check current pricing on their website. A sensible approach is to squeeze the free content for a few weeks and pay only when a specific path justifies it.

Pro tips

• Do not just answer questions: understand why each step works. Many rooms can be "completed" without learning anything.
• Keep your own notes (Obsidian, CherryTree, Markdown) with commands and methodology; they will help in hands-on exams.
• Redo machines weeks later without the guide. If you cannot, you have not internalised it yet.
• When guided rooms start to feel too easy, move on to HackTheBox.

Pros and cons

Pros	Cons
Very beginner-friendly	The most complete content is paid
AttackBox: nothing to install	Too much guidance can create dependency
Offensive and defensive paths	Some rooms become outdated
Very active community	Free AttackBox time is limited

TryHackMe alternatives

• HackTheBox: more challenge and less hand-holding, ideal as the next step.
• OverTheWire: free wargames to master Linux.
• Root-Me: free challenges by category.
• VulnHub: downloadable vulnerable machines for your local lab.

Frequently asked questions

Is TryHackMe free?

It has a free plan with many rooms available and paid plans that unlock all content. Check current pricing on their website.

TryHackMe or HackTheBox to start?

For starting from scratch, TryHackMe is usually better thanks to its guided approach. HackTheBox fits better once you have a foundation and want less directed challenges.

Do I need Kali Linux to use TryHackMe?

No. You can use the AttackBox from your browser. Still, connecting your own Kali or Parrot via VPN is good practice to get used to your own environment.

Is what you do on TryHackMe legal?

Yes, as long as you only attack the machines the platform deploys for you. Using those techniques against other systems without permission is illegal.

If you want to reinforce what you learn with hands-on practice, command exercises and tracked challenges, try the Hackers en Acción Academy.