TryHackMeRoadmap

A list of 350+ free TryHackMe rooms💻 to kick off your cybersecurity learning, organized by topics for easy exploration and practical skill-building !💀💥

Last updated Jul 8, 2026

476

Stars

93

Forks

0

Issues

+3

Stars/day

Attention Score

89

View on GitHub ↗ Open in github.dev

Topics

#active-directory #andorid #burpsuite #ctf #cyrptography #digitalforensics #endpoint #forensics #forensics-tools #liunx #malware-analysis #networking #postexplotation #reverse-engineering #tryhackme #web #wifihacking #windows

Language breakdown

No language data available.

▸ Files click to expand

README

List of 350+ Free TryHackMe Rooms for Cybersecurity Enthusiasts 🌐

This repository contains a comprehensive list of 350+ free rooms available on TryHackMe (THM) to help you dive into the world of cybersecurity, whether you’re a beginner or looking to sharpen specific skills. TryHackMe offers guided, hands-on rooms that simulate real- world scenarios, making it a valuable resource for anyone interested in networksecurity, penetration testing, web application hacking, and more.

Features:

Organized by Skill Level: Rooms are grouped into beginner, intermediate, and advanced categories, helping you find the right place to start.
Diverse Topics: From basic Linux commands to advanced exploitation and network analysis, each room offers focused learning on key cybersecurity concepts.
Resources for Practice: Each room is self-contained, with step-by-step instructions, challenges, and hints, offering a practical way to learn and apply new skills.
Updated Regularly: This list will be updated as new rooms are released on TryHackMe, ensuring it stays a relevant tool for ongoing learning.

Why This List?

With this curated selection, you won’t need to sift through countless rooms to find relevant learning paths. This list makes it easier to start, progress, and complete targeted cybersecurity training, boosting your confidence and skills across different domains within the field.

TryHackMe Road Map

"Here's a list of 350+ free TryHackMe rooms🎉, organized by topic to help you easily explore different areas of cybersecurity like network security and web exploitation. All rooms are completely free—enjoy hacking and learning!"

Table of Contents

| Name of Topic | Number of Rooms | Number of Completed Rooms | | ------------------------------------------------- | :-------------: | :-----------------------: | | Introductory Rooms | 10 | | | Linux Fundamentals | 5 | 5 | | Windows Fundamentals | 3 | | | Basic Rooms | 9 | | | Reconnaissance | 10 | | | Scripting | 8 | | | Networking | 7 | | | Tooling | 17 | | | Crypto & Hashes | 5 | | | Steganography | 6 | | | Web | 27 | | | Android | 1 | | | Forensics | 5 | | | Wifi Hacking | 1 | | | Reverse Engineering | 11 | | | Malware Analysis | 7 | | | Privilege Escalation | 13 | | | Windows | 7 | | | Active Directory | 5 | | | PCAP Analysis | 4 | | | Buffer Overflow | 4 | | | Easy CTF | 58 | | | Medium CTF | 73 | | | Hard CTF | 38 | | | Misc | 35 | | | Special Events | 9 | | | Total Rooms: | 378 | |

Intro Rooms

[ ] TryHackMe | Welcome

[ ] TryHackMe | How to use TryHackMe

[ ] TryHackMe | Welcome

[ ] TryHackMe | Tutorial

[ ] TryHackMe | OpenVPN

[ ] TryHackMe | Learning Cyber Security

[ ] TryHackMe | Starting Out In Cyber Sec

[ ] TryHackMe | Introductory Researching

[ ] TryHackMe | CC: Pen Testing

[ ] TryHackMe | Regular expressions

Linux Fundamentals

[ ] TryHackMe | Learn Linux

[ ] TryHackMe | Linux Modules

[ ] TryHackMe | Linux Fundamentals Part 1

[ ] TryHackMe | Linux Fundamentals Part 2

[ ] TryHackMe | Linux Fundamentals Part 3

Windows Fundamentals

[ ] TryHackMe | Windows Fundamentals 1

[ ] TryHackMe | Windows Fundamentals 2

[ ] TryHackMe | Windows Fundamentals 3

Basics Rooms

[ ] TryHackMe | Basic Pentesting

[ ] TryHackMe | Pentesting Fundamentals

[ ] TryHackMe | Principles of Security

[ ] TryHackMe | The Hacker Methodology

[ ] TryHackMe | Physical Security Intro

[ ] TryHackMe | Linux Strength Training

[ ] TryHackMe | OpenVAS

[ ] TryHackMe | ISO27001

[ ] TryHackMe | UltraTech

Recon

[ ] TryHackMe | Passive Reconnaissance

[ ] TryHackMe | Active Reconnaissance

[ ] TryHackMe | Content Discovery

[ ] TryHackMe | OhSINT

[ ] TryHackMe | Shodan.io

[ ] TryHackMe | Google Dorking

[ ] TryHackMe | WebOSINT

[ ] TryHackMe | Sakura Room

[ ] TryHackMe | Red Team Recon

[ ] TryHackMe | Searchlight - IMINT

Scripting

[ ] TryHackMe | Python Basics

[ ] TryHackMe | Python Playground

[ ] TryHackMe | Intro PoC Scripting

[ ] TryHackMe | Peak Hill

[ ] TryHackMe | JavaScript Basics

[ ] TryHackMe | Bash Scripting

[ ] TryHackMe | Learn Rust

[ ] TryHackMe | Why Subscribe

Networking

[ ] TryHackMe | Introductory Networking

[ ] TryHackMe | What is Networking?

[ ] TryHackMe | Networking

[ ] TryHackMe | Intro to LAN

[ ] TryHackMe | HTTP in detail

[ ] TryHackMe | DNS in detail

[ ] TryHackMe | Dumping Router Firmware

Tooling

[ ] TryHackMe | Metasploit: Introduction

[ ] TryHackMe | Metasploit

[ ] TryHackMe | tmux

[ ] TryHackMe | REmux The Tmux

[ ] TryHackMe | Hydra

[ ] TryHackMe | Sublist3r

[ ] TryHackMe | Toolbox: Vim

[ ] TryHackMe | Introduction to OWASP ZAP

[ ] TryHackMe | Phishing: HiddenEye

[ ] TryHackMe | RustScan

[ ] TryHackMe | Nessus

[ ] TryHackMe | Nmap Live Host Discovery

[ ] TryHackMe | Nmap

[ ] TryHackMe | TShark

[ ] TryHackMe | ffuf

[ ] TryHackMe | Burp Suite: The Basics

[ ] TryHackMe | Burp Suite: Repeater

Crypto & Hashes

[ ] TryHackMe | Cryptography for Dummies

[ ] TryHackMe | Crack the hash

[ ] TryHackMe | Crack The Hash Level 2

[ ] TryHackMe | Agent Sudo

[ ] TryHackMe | Brute It

Steganography

[ ] TryHackMe | CC: Steganography

[ ] TryHackMe | Cicada-3301 Vol:1

[ ] TryHackMe | Musical Stego

[ ] TryHackMe | Madness

[ ] TryHackMe | Psycho Break

[ ] TryHackMe | Unstable Twin

Web

[ ] TryHackMe | HTTP in detail

[ ] TryHackMe | WebAppSec 101

[ ] TryHackMe | Vulnerabilities 101

[ ] TryHackMe | Walking An Application

[ ] TryHackMe | OWASP Top 10

[ ] TryHackMe | OWASP Juice Shop

[ ] TryHackMe | Web Scanning

[ ] TryHackMe | OWASP Mutillidae II

[ ] TryHackMe | WebGOAT

[ ] TryHackMe | DVWA

[ ] TryHackMe | VulnNet

[ ] TryHackMe | Juicy Details

[ ] TryHackMe | Vulnversity

[ ] TryHackMe | Injection

[ ] TryHackMe | LFI Basics

[ ] TryHackMe | Inclusion

[ ] TryHackMe | SQL Injection Lab

[ ] TryHackMe | SSTI

[ ] TryHackMe | SQL Injection

[ ] TryHackMe | Basic Pentesting

[ ] TryHackMe | OWASP Juice Shop

[ ] TryHackMe | Ignite

[ ] TryHackMe | Overpass

[ ] TryHackMe | Year of the Rabbit

[ ] TryHackMe | Develpy

[ ] TryHackMe | Jack-of-All-Trades

[ ] TryHackMe | Bolt

Android

[ ] TryHackMe | Android Hacking 101

Forensics

[ ] TryHackMe | Linux Server Forensics

[ ] TryHackMe | Forensics

[ ] TryHackMe | Memory Forensics

[ ] TryHackMe | Volatility

[ ] TryHackMe | Disk Analysis & Autopsy

Wi-Fi Hacking

[ ] TryHackMe | Wifi Hacking 101

Reverse Engineering

[ ] TryHackMe | Intro to x86-64

[ ] TryHackMe | Windows x64 Assembly

[ ] TryHackMe | Reverse Engineering

[ ] TryHackMe | Reversing ELF

[ ] TryHackMe | JVM Reverse Engineering

[ ] TryHackMe | CC: Radare2

[ ] TryHackMe | CC: Ghidra

[ ] TryHackMe | Aster

[ ] TryHackMe | Classic Passwd

[ ] TryHackMe | REloaded

Malware Analysis

[ ] TryHackMe | History of Malware

[ ] TryHackMe | MAL: Malware Introductory

[ ] TryHackMe | Basic Malware RE

[ ] TryHackMe | MAL: Researching

[ ] TryHackMe | Mobile Malware Analysis

[ ] TryHackMe | Carnage

[ ] TryHackMe | Dunkle Materie

PrivEsc

[ ] TryHackMe | Linux Privilege Escalation

[ ] TryHackMe | Linux PrivEsc

[ ] TryHackMe | Linux PrivEsc Arena

[ ] TryHackMe | Windows PrivEsc

[ ] TryHackMe | Windows PrivEsc Arena

[ ] TryHackMe | Linux Agency

[ ] TryHackMe | Sudo Security Bypass

[ ] TryHackMe | Sudo Buffer Overflow

[ ] TryHackMe | Blaster

[ ] TryHackMe | Ignite

[ ] TryHackMe | Kenobi

[ ] TryHackMe | c4ptur3-th3-fl4g

[ ] TryHackMe | Pickle Rick

Windows

[ ] TryHackMe | Investigating Windows

[ ] TryHackMe | Investigating Windows 2.0

[ ] TryHackMe | Investigating Windows 3.x

[ ] TryHackMe | Blueprint

[ ] TryHackMe | VulnNet: Active

[ ] TryHackMe | Anthem

[ ] TryHackMe | Blue

Active Directory

[ ] TryHackMe | Attacktive Directory

[ ] TryHackMe | Post-Exploitation Basics

[ ] TryHackMe | USTOUN

[ ] TryHackMe | Enterprise

[ ] TryHackMe | RazorBlack

PCAP Analysis

[ ] TryHackMe | h4cked

[ ] TryHackMe | Carnage

[ ] TryHackMe | CCT2019

[ ] TryHackMe | Overpass 2 - Hacked

BufferOverflow

[ ] TryHackMe | Buffer Overflow Prep

[ ] TryHackMe | Gatekeeper

[ ] TryHackMe | Chronicle

[ ] TryHackMe | Intro To Pwntools

Easy CTF

[ ] TryHackMe | GamingServer

[ ] TryHackMe | OverlayFS - CVE-2021-3493

[ ] TryHackMe | Psycho Break

[ ] TryHackMe | Bounty Hacker

[ ] TryHackMe | Fowsniff CTF

[ ] TryHackMe | RootMe

[ ] TryHackMe | AttackerKB

[ ] TryHackMe | Pickle Rick

[ ] TryHackMe | c4ptur3-th3-fl4g

[ ] TryHackMe | Library

[ ] TryHackMe | Thompson

[ ] TryHackMe | Simple CTF

[ ] TryHackMe | LazyAdmin

[ ] TryHackMe | Anonforce

[ ] TryHackMe | Ignite

[ ] TryHackMe | Wgel CTF

[ ] TryHackMe | Kenobi

[ ] TryHackMe | Dav

[ ] TryHackMe | Ninja Skills

[ ] TryHackMe | Ice

[ ] TryHackMe | LianYu

[ ] TryHackMe | The Cod Caper

[ ] TryHackMe | Blaster

[ ] TryHackMe | Encryption - Crypto 101

[ ] TryHackMe | Brooklyn Nine Nine

[ ] TryHackMe | Year of the Rabbit

[ ] TryHackMe | Jack-of-All-Trades

[ ] TryHackMe | Madness

[ ] TryHackMe | KoTH Food CTF

[ ] TryHackMe | Easy Peasy

[ ] TryHackMe | Tony the Tiger

[ ] TryHackMe | CTF collection Vol.1

[ ] TryHackMe | Smag Grotto

[ ] TryHackMe | Couch

[ ] TryHackMe | Source

[ ] TryHackMe | Overpass

[ ] TryHackMe | Gotta Catch'em All!

[ ] TryHackMe | Bolt

[ ] TryHackMe | Overpass 2 - Hacked

[ ] TryHackMe | kiba

[ ] TryHackMe | Poster

[ ] TryHackMe | Chocolate Factory

[ ] TryHackMe | Startup

[ ] TryHackMe | Chill Hack

[ ] TryHackMe | ColddBox: Easy

[ ] TryHackMe | GLITCH

[ ] TryHackMe | All in One

[ ] TryHackMe | Archangel

[ ] TryHackMe | Cyborg

[ ] TryHackMe | Lunizz CTF

[ ] TryHackMe | Badbyte

[ ] TryHackMe | Team

[ ] TryHackMe | VulnNet: Node

[ ] TryHackMe | VulnNet: Internal

[ ] TryHackMe | Atlas

[ ] TryHackMe | VulnNet: Roasted

[ ] TryHackMe | Cat Pictures

[ ] TryHackMe | Mustacchio

Medium CTF

[ ] TryHackMe | Mr Robot CTF

[ ] TryHackMe | GoldenEye

[ ] TryHackMe | StuxCTF

[ ] TryHackMe | Boiler CTF

[ ] TryHackMe | HA Joker CTF

[ ] TryHackMe | Biohazard

[ ] TryHackMe | Break it

[ ] TryHackMe | Willow

[ ] TryHackMe | The Marketplace

[ ] TryHackMe | Nax

[ ] TryHackMe | Mindgames

[ ] TryHackMe | Anonymous

[ ] TryHackMe | Blog

[ ] TryHackMe | Wonderland

[ ] TryHackMe | 0day

[ ] TryHackMe | Develpy

[ ] TryHackMe | CTF collection Vol.2

[ ] TryHackMe | CMesS

[ ] TryHackMe | Deja Vu

[ ] TryHackMe | hackerNote

[ ] TryHackMe | dogcat

[ ] TryHackMe | ConvertMyVideo

[ ] TryHackMe | KoTH Hackers

[ ] TryHackMe | Revenge

[ ] TryHackMe | harder

[ ] TryHackMe | HaskHell

[ ] TryHackMe | Undiscovered

[ ] TryHackMe | Break Out The Cage

[ ] TryHackMe | The Impossible Challenge

[ ] TryHackMe | Looking Glass

[ ] TryHackMe | Recovery

[ ] TryHackMe | Relevant

[ ] TryHackMe | Ghizer

[ ] TryHackMe | Mnemonic

[ ] TryHackMe | WWBuddy

[ ] TryHackMe | The Blob Blog

[ ] TryHackMe | Cooctus Stories

[ ] TryHackMe | One Piece

[ ] TryHackMe | toc2

[ ] TryHackMe | NerdHerd

[ ] TryHackMe | Kubernetes Chall TDI 2020

[ ] TryHackMe | The Server From Hell

[ ] TryHackMe | Jacob the Boss

[ ] TryHackMe | Unbaked Pie

[ ] TryHackMe | Bookstore

[ ] TryHackMe | Overpass 3 - Hosting

[ ] TryHackMe | battery

[ ] TryHackMe | Madeye's Castle

[ ] TryHackMe | En-pass

[ ] TryHackMe | Sustah

[ ] TryHackMe | KaffeeSec - SoMeSINT

[ ] TryHackMe | Tokyo Ghoul

[ ] TryHackMe | Watcher

[ ] TryHackMe | broker

[ ] TryHackMe | Inferno

[ ] TryHackMe | VulnNet: dotpy

[ ] TryHackMe | Wekor

[ ] TryHackMe | pyLon

[ ] TryHackMe | The Great Escape

[ ] TryHackMe | SafeZone

[ ] TryHackMe | NahamStore

[ ] TryHackMe | Sweettooth Inc.

[ ] TryHackMe | CMSpit

[ ] TryHackMe | Super-Spam

[ ] TryHackMe | That's The Ticket

[ ] TryHackMe | Debug

[ ] TryHackMe | Red Stone One Carat

[ ] TryHackMe | Cold VVars

[ ] TryHackMe | Metamorphosis

[ ] TryHackMe | SQHell

[ ] TryHackMe | Fortress

[ ] TryHackMe | CyberCrafted

[ ] TryHackMe | Road

Hard CTF

[ ] TryHackMe | Motunui

[ ] TryHackMe | Spring

[ ] TryHackMe | Brainpan 1

[ ] TryHackMe | Borderlands

[ ] TryHackMe | hc0n Christmas CTF

[ ] TryHackMe | Daily Bugle

[ ] TryHackMe | Retro

[ ] TryHackMe | Jeff

[ ] TryHackMe | Racetrack Bank

[ ] TryHackMe | Dave's Blog

[ ] TryHackMe | CherryBlossom

[ ] TryHackMe | CCT2019

[ ] TryHackMe | Iron Corp

[ ] TryHackMe | Carpe Diem 1

[ ] TryHackMe | Ra

[ ] TryHackMe | Year of the Fox

[ ] TryHackMe | For Business Reasons

[ ] TryHackMe | Anonymous Playground

[ ] TryHackMe | Misguided Ghosts

[ ] TryHackMe | Theseus

[ ] TryHackMe | Internal

[ ] TryHackMe | Year of the Dog

[ ] TryHackMe | You're in a cave

[ ] TryHackMe | Year of the Owl

[ ] TryHackMe | Year of the Pig

[ ] TryHackMe | envizon

[ ] TryHackMe | GameBuzz

[ ] TryHackMe | Fusion Corp

[ ] TryHackMe | Crocc Crew

[ ] TryHackMe | Uranium CTF

[ ] TryHackMe | Year of the Jellyfish

[ ] TryHackMe | Rocket

[ ] TryHackMe | Squid Game

[ ] TryHackMe | EnterPrize

[ ] TryHackMe | Different CTF

[ ] TryHackMe | VulnNet: dotjar

[ ] TryHackMe | M4tr1x: Exit Denied

[ ] TryHackMe | Shaker

Misc

[ ] TryHackMe | Introduction to Django

[ ] TryHackMe | Git Happens

[ ] TryHackMe | Meltdown Explained

[ ] TryHackMe | Splunk

[ ] TryHackMe | Linux Backdoors

[ ] TryHackMe | Jupyter 101

[ ] TryHackMe | Geolocating Images

[ ] TryHackMe | Tor

[ ] TryHackMe | tomghost

[ ] TryHackMe | DLL HIJACKING

[ ] TryHackMe | Intro to IoT Pentesting

[ ] TryHackMe | Attacking ICS Plant #1

[ ] TryHackMe | Attacking ICS Plant #2

[ ] TryHackMe | Printer Hacking 101

[ ] TryHackMe | DNS Manipulation

[ ] TryHackMe | Introduction to Flask

[ ] TryHackMe | MITRE

[ ] TryHackMe | magician

[ ] TryHackMe | JPGChat

[ ] TryHackMe | Baron Samedit

[ ] TryHackMe | CVE-2021-41773/42013

[ ] TryHackMe | Binary Heaven

[ ] TryHackMe | Git and Crumpets

[ ] TryHackMe | Polkit: CVE-2021-3560

[ ] TryHackMe | Hip Flask

[ ] TryHackMe | Bypass Disable Functions

[ ] TryHackMe | Wordpress: CVE-2021-29447

[ ] TryHackMe | Linux Function Hooking

[ ] TryHackMe | REvil Corp

[ ] TryHackMe | Sudo Buffer Overflow

[ ] TryHackMe | Sudo Security Bypass

[ ] TryHackMe | Solar, exploiting log4j

[ ] TryHackMe | Conti

[ ] TryHackMe | Dirty Pipe: CVE-2022-0847

[ ] TryHackMe | The find command

Special Events

[ ] TryHackMe | 25 Days of Cyber Security

[ ] [TryHackMe | Advent of Cyber 1 [2019]](https://tryhackme.com/room/25daysofchristmas)

[ ] [TryHackMe | Advent of Cyber 2 [2020]](https://tryhackme.com/room/adventofcyber2)

[ ] TryHackMe | Advent of Cyber 3 (2021)

[ ] TryHackMe | Advent of Cyber 2022

[ ] TryHackMe | Cyber Scotland 2021

[ ] TryHackMe | Hacker of the Hill #1

[ ] TryHackMe | Learn and win prizes

[ ] TryHackMe | Learn and win prizes #2

Information

Author❤️: UTTAM BODARA

License💀: MIT License

🔗 More in this category