TryHackMe rooms
Corresponding practice
- Identify each room-provided hash from structure and context before selecting a tool or mode.
- Record why Hashcat or John the Ripper is appropriate for each case.
- Start with a dictionary attack, then document one justified rule or mask change if needed.
- Attempt Checkmate independently and keep a hypothesis/evidence log.
Evidence to capture
- Hash identification and tool-selection table
- Sanitised commands using only room-provided hashes
- Checkmate decision log and defensive note on salts and password policy
What I learned
Explain the difference between online authentication attacks and offline hash cracking.
Problems and dead ends
Record incorrect hash modes, formats, or wordlist assumptions.
What I will revisit
Repeat one crack from raw evidence without using the room hint.