A fully reworked, 100% free and gamified fork of the original TryHackMe Roadmap. This repository retains all working, free TryHackMe rooms while seamlessly replacing every paywalled, broken, or restricted module with top-tier, interactive wargames, enterprise-grade academies, and local sandbox labs. Along the way, structured Job-Aligned Certification Checkpoints and Study Guides mark your path from beginner to industry hire.
Every module that triggers a subscription wall or fails on TryHackMe has been mapped to a permanent, un-paywalled gamified alternative:
- Linux Fundamentals (Parts 2 & 3) / System Shells ➡️ OverTheWire: Bandit (Levels 0–34) (SSH command-line wargame).
- Windows Fundamentals (Parts 2 & 3) / PowerShell Paths ➡️ Cmd Challenge (
cmd.fun) & Local Windows/WSL Administration Labs. - Web Security Paths / OWASP Modules ➡️ PortSwigger Web Security Academy (Interactive labs with flags).
- Binary Exploitation & Buffer Overflows ➡️ Pwnable.kr & Local Kali/Ghidra reversing tracks.
- Active Directory & Multi-Box Labs ➡️ Local 3-VM Home Lab (VirtualBox DC + Workstation + Kali).
- Introductory Rooms
- Linux Fundamentals & Free Alternatives
- Windows Fundamentals & Free Alternatives
- Basic Rooms
- Reconnaissance
- Scripting
- Networking
- Tooling
- Crypto & Hashes
- Steganography
- Web
- Android
- Forensics
- Wifi Hacking
- Reverse Engineering
- Malware Analysis
- Privilege Escalation
- Windows
- Active Directory
- PCAP Analysis
- Buffer Overflow
- Easy CTF
- Medium CTF
- Hard CTF
- Misc
- Special Events
- TryHackMe | Welcome
- TryHackMe | How to use TryHackMe
- TryHackMe | Tutorial
- TryHackMe | OpenVPN
- TryHackMe | Learning Cyber Security
- TryHackMe | Starting Out In Cyber Sec
- TryHackMe | Introductory Researching
- TryHackMe | CC: Pen Testing
- TryHackMe | Regular expressions
- TryHackMe | Learn Linux
- TryHackMe | Linux Modules
- TryHackMe | Linux Fundamentals Part 1
- 🔒
TryHackMe | Linux Fundamentals Part 2➡️ OverTheWire: Bandit (Levels 0–34) (100% Free gamified CLI terminal mastery)
- TryHackMe | Windows Fundamentals 1
- 🔒
TryHackMe | Windows Fundamentals 2➡️ Cmd Challenge & Local PowerShell / WSL Lab - 🔒
TryHackMe | Windows Fundamentals 3➡️ Local Windows VM Administration & Service Management
- TryHackMe | Basic Pentesting
- TryHackMe | Pentesting Fundamentals
- TryHackMe | Principles of Security
- TryHackMe | The Hacker Methodology
- TryHackMe | Physical Security Intro
- TryHackMe | Linux Strength Training
- TryHackMe | OpenVAS
- TryHackMe | ISO27001
- TryHackMe | UltraTech
🏆 JOB CERTIFICATION CHECKPOINT 1: Foundations
- CompTIA Network+ & Security+
- Recommended Study Guides & Resources:
- Professor Messer's Free YouTube Training Courses (Complete structured video series for Net+ and Sec+).
- CompTIA Official Study Guides (OSG) or Mike Chapple's Sybex study guides.
- Jason Dion Practice Exams (Udemy) for simulation practice.
- TryHackMe | Passive Reconnaissance
- TryHackMe | Active Reconnaissance
- TryHackMe | Content Discovery
- TryHackMe | OhSINT
- TryHackMe | Shodan.io
- TryHackMe | Google Dorking
- TryHackMe | WebOSINT
- TryHackMe | Sakura Room
- TryHackMe | Red Team Recon
- TryHackMe | Searchlight - IMINT
- TryHackMe | Python Basics
- TryHackMe | Python Playground
- TryHackMe | Intro PoC Scripting
- TryHackMe | Peak Hill
- TryHackMe | JavaScript Basics
- TryHackMe | Bash Scripting
- TryHackMe | Learn Rust
- TryHackMe | Introductory Networking
- TryHackMe | What is Networking?
- TryHackMe | Networking
- TryHackMe | Intro to LAN
- TryHackMe | HTTP in detail
- TryHackMe | DNS in detail
- TryHackMe | Dumping Router Firmware
- TryHackMe | Metasploit: Introduction
- TryHackMe | Metasploit
- TryHackMe | tmux
- TryHackMe | REmux The Tmux
- TryHackMe | Hydra
- TryHackMe | Sublist3r
- TryHackMe | Toolbox: Vim
- TryHackMe | Introduction to OWASP ZAP
- TryHackMe | Phishing: HiddenEye
- TryHackMe | RustScan
- TryHackMe | Nessus
- TryHackMe | Nmap Live Host Discovery
- TryHackMe | Nmap
- TryHackMe | TShark
- TryHackMe | ffuf
- TryHackMe | Burp Suite: The Basics
- TryHackMe | Burp Suite: Repeater
- TryHackMe | Cryptography for Dummies
- TryHackMe | Crack the hash
- TryHackMe | Crack The Hash Level 2
- TryHackMe | Agent Sudo
- TryHackMe | Brute It
- TryHackMe | CC: Steganography
- TryHackMe | Cicada-3301 Vol:1
- TryHackMe | Musical Stego
- TryHackMe | Madness
- TryHackMe | Psycho Break
- TryHackMe | Unstable Twin
- TryHackMe | HTTP in detail
- TryHackMe | WebAppSec 101
- TryHackMe | Vulnerabilities 101
- TryHackMe | Walking An Application
- TryHackMe | OWASP Top 10
- TryHackMe | OWASP Juice Shop
- TryHackMe | Web Scanning
- TryHackMe | OWASP Mutillidae II
- TryHackMe | WebGOAT
- TryHackMe | DVWA
- TryHackMe | VulnNet
- TryHackMe | Juicy Details
- TryHackMe | Vulnversity
- TryHackMe | Injection
- TryHackMe | LFI Basics
- TryHackMe | Inclusion
- TryHackMe | SQL Injection Lab
- TryHackMe | SSTI
- TryHackMe | SQL Injection
- TryHackMe | Basic Pentesting
- TryHackMe | Ignite
- TryHackMe | Overpass
- TryHackMe | Year of the Rabbit
- TryHackMe | Develpy
- TryHackMe | Jack-of-All-Trades
- TryHackMe | Bolt
- 🌟 PortSwigger Web Security Academy (Free enterprise-grade interactive web hacking labs replacing locked THM paths)
🏆 JOB CERTIFICATION CHECKPOINT 2: Junior Pentester & Web Application Focus
- CompTIA PenTest+ & BSCP (PortSwigger Certified Web Security Practitioner)
- Recommended Study Guides & Resources:
- PortSwigger Web Security Academy Material (100% free theory and labs directly preparing you for BSCP).
- CompTIA PenTest+ Certification Study Guide (Exam PT0-002/003) by Glen Clarke.
- TryHackMe Junior Penetration Tester Path (using free standalone room alternatives).
- TryHackMe | Linux Server Forensics
- TryHackMe | Forensics
- TryHackMe | Memory Forensics
- TryHackMe | Volatility
- TryHackMe | Disk Analysis & Autopsy
- TryHackMe | Intro to x86-64
- TryHackMe | Windows x64 Assembly
- TryHackMe | Reverse Engineering
- TryHackMe | Reversing ELF
- TryHackMe | JVM Reverse Engineering
- TryHackMe | CC: Radare2
- TryHackMe | CC: Ghidra
- TryHackMe | Aster
- TryHackMe | Classic Passwd
- TryHackMe | REloaded
- TryHackMe | History of Malware
- TryHackMe | MAL: Malware Introductory
- TryHackMe | Basic Malware RE
- TryHackMe | MAL: Researching
- TryHackMe | Mobile Malware Analysis
- TryHackMe | Carnage
- TryHackMe | Dunkle Materie
- TryHackMe | Linux Privilege Escalation
- TryHackMe | Linux PrivEsc
- TryHackMe | Linux PrivEsc Arena
- TryHackMe | Windows PrivEsc
- TryHackMe | Windows PrivEsc Arena
- TryHackMe | Linux Agency
- TryHackMe | Sudo Security Bypass
- TryHackMe | Sudo Buffer Overflow
- TryHackMe | Blaster
- TryHackMe | Ignite
- TryHackMe | Kenobi
- TryHackMe | c4ptur3-th3-fl4g
- TryHackMe | Pickle Rick
- TryHackMe | Investigating Windows
- TryHackMe | Investigating Windows 2.0
- TryHackMe | Investigating Windows 3.x
- TryHackMe | Blueprint
- TryHackMe | VulnNet: Active
- TryHackMe | Anthem
- TryHackMe | Blue
- TryHackMe | Attacktive Directory
- TryHackMe | Post-Exploitation Basics
- TryHackMe | USTOUN
- TryHackMe | Enterprise
- TryHackMe | RazorBlack
- 🌟 Local 3-VM Home Lab (VirtualBox DC + Workstation + Kali) (Free self-hosted Active Directory multi-box environment bypassing locked corporate cloud labs)
🏆 JOB CERTIFICATION CHECKPOINT 3: Blue Team & Practical Red Teaming
- CompTIA CySA+ & PNPT (Practical Network Penetration Tester)
- Recommended Study Guides & Resources:
- TCM Security Practical Ethical Hacking (PEH) & Lateral Movement/AD Courses (The foundational blueprint for passing the hands-on PNPT exam).
- CyberDefenders.org Labs (Hands-on SIEM, PCAP analysis, and forensic logs preparation for CySA+).
- TryHackMe | Buffer Overflow Prep
- TryHackMe | Gatekeeper
- TryHackMe | Chronicle
- TryHackMe | Intro To Pwntools
- 🌟 Pwnable.kr (Gamified binary exploitation & pwn wargame tracking)
- 🌟 Local Kali / Ghidra Reversing Track (Local reverse engineering practice using Ghidra and Pwntools)
- TryHackMe | GamingServer
- TryHackMe | OverlayFS - CVE-2021-3493
- TryHackMe | Psycho Break
- TryHackMe | Bounty Hacker
- TryHackMe | Fowsniff CTF
- TryHackMe | RootMe
- TryHackMe | AttackerKB
- TryHackMe | Pickle Rick
- TryHackMe | c4ptur3-th3-fl4g
- TryHackMe | Library
- TryHackMe | Thompson
- TryHackMe | Simple CTF
- TryHackMe | LazyAdmin
- TryHackMe | Anonforce
- TryHackMe | Ignite
- TryHackMe | Wgel CTF
- TryHackMe | Kenobi
- TryHackMe | Dav
- TryHackMe | Ninja Skills
- TryHackMe | Ice
- TryHackMe | Lian_Yu
- TryHackMe | The Cod Caper
- TryHackMe | Blaster
- TryHackMe | Encryption - Crypto 101
- TryHackMe | Brooklyn Nine Nine
- TryHackMe | Year of the Rabbit
- TryHackMe | Jack-of-All-Trades
- TryHackMe | Madness
- TryHackMe | KoTH Food CTF
- TryHackMe | Easy Peasy
- TryHackMe | Tony the Tiger
- TryHackMe | CTF collection Vol.1
- TryHackMe | Smag Grotto
- TryHackMe | Couch
- TryHackMe | Source
- TryHackMe | Overpass
- TryHackMe | Gotta Catch'em All!
- TryHackMe | Bolt
- TryHackMe | Overpass 2 - Hacked
- TryHackMe | kiba
- TryHackMe | Poster
- TryHackMe | Chocolate Factory
- TryHackMe | Startup
- TryHackMe | Chill Hack
- TryHackMe | ColddBox: Easy
- TryHackMe | GLITCH
- TryHackMe | All in One
- TryHackMe | Archangel
- TryHackMe | Cyborg
- TryHackMe | Lunizz CTF
- TryHackMe | Badbyte
- TryHackMe | Team
- TryHackMe | VulnNet: Node
- TryHackMe | VulnNet: Internal
- TryHackMe | Atlas
- TryHackMe | VulnNet: Roasted
- TryHackMe | Cat Pictures
- TryHackMe | Mustacchio
- TryHackMe | Mr Robot CTF
- TryHackMe | GoldenEye
- TryHackMe | StuxCTF
- TryHackMe | Boiler CTF
- TryHackMe | HA Joker CTF
- TryHackMe | Biohazard
- TryHackMe | Break it
- TryHackMe | Willow
- TryHackMe | The Marketplace
- TryHackMe | Nax
- TryHackMe | Mindgames
- TryHackMe | Anonymous
- TryHackMe | Blog
- TryHackMe | Wonderland
- TryHackMe | 0day
- TryHackMe | Develpy
- TryHackMe | CTF collection Vol.2
- TryHackMe | CMesS
- TryHackMe | Deja Vu
- TryHackMe | hackerNote
- TryHackMe | dogcat
- TryHackMe | ConvertMyVideo
- TryHackMe | KoTH Hackers
- TryHackMe | Revenge
- TryHackMe | harder
- TryHackMe | HaskHell
- TryHackMe | Undiscovered
- TryHackMe | Break Out The Cage
- TryHackMe | The Impossible Challenge
- TryHackMe | Looking Glass
- TryHackMe | Recovery
- TryHackMe | Relevant
- TryHackMe | Ghizer
- TryHackMe | Mnemonic
- TryHackMe | WWBuddy
- TryHackMe | The Blob Blog
- TryHackMe | Cooctus Stories
- TryHackMe | One Piece
- TryHackMe | toc2
- TryHackMe | NerdHerd
- TryHackMe | Kubernetes Chall TDI 2020
- TryHackMe | The Server From Hell
- TryHackMe | Jacob the Boss
- TryHackMe | Unbaked Pie
- TryHackMe | Bookstore
- TryHackMe | Overpass 3 - Hosting
- TryHackMe | battery
- TryHackMe | Madeye's Castle
- TryHackMe | En-pass
- TryHackMe | Sustah
- TryHackMe | KaffeeSec - SoMeSINT
- TryHackMe | Tokyo Ghoul
- TryHackMe | Watcher
- TryHackMe | broker
- TryHackMe | Inferno
- TryHackMe | VulnNet: dotpy
- TryHackMe | Wekor
- TryHackMe | pyLon
- TryHackMe | The Great Escape
- TryHackMe | SafeZone
- TryHackMe | NahamStore
- TryHackMe | Sweettooth Inc.
- TryHackMe | CMSpit
- TryHackMe | Super-Spam
- TryHackMe | That's The Ticket
- TryHackMe | Debug
- TryHackMe | Red Stone One Carat
- TryHackMe | Cold VVars
- TryHackMe | Metamorphosis
- TryHackMe | SQHell
- TryHackMe | Fortress
- TryHackMe | CyberCrafted
- TryHackMe | Road
🏆 JOB CERTIFICATION CHECKPOINT 4: Advanced Offensive Security
- OSCP (Offensive Security Certified Professional)
- Recommended Study Guides & Resources:
- OffSec PEN-200 Official Courseware & Lab Environment
- TJNull's HackTheBox & ProLabs Machine List (Curated mapping for OSCP-style box grinding).
- TryHackMe | Motunui
- TryHackMe | Spring
- TryHackMe | Brainpan 1
- TryHackMe | Borderlands
- TryHackMe | hc0n Christmas CTF
- TryHackMe | Daily Bugle
- TryHackMe | Retro
- TryHackMe | Jeff
- TryHackMe | Racetrack Bank
- TryHackMe | Dave's Blog
- TryHackMe | CherryBlossom
- TryHackMe | CCT2019
- TryHackMe | Iron Corp
- TryHackMe | Carpe Diem 1
- TryHackMe | Ra
- TryHackMe | Year of the Fox
- TryHackMe | For Business Reasons
- TryHackMe | Anonymous Playground
- TryHackMe | Misguided Ghosts
- TryHackMe | Theseus
- TryHackMe | Internal
- TryHackMe | Year of the Dog
- TryHackMe | You're in a cave
- TryHackMe | Year of the Owl
- TryHackMe | Year of the Pig
- TryHackMe | envizon
- TryHackMe | GameBuzz
- TryHackMe | Fusion Corp
- TryHackMe | Crocc Crew
- TryHackMe | Uranium CTF
- TryHackMe | Year of the Jellyfish
- TryHackMe | Rocket
- TryHackMe | Squid Game
- TryHackMe | EnterPrize
- TryHackMe | Different CTF
- TryHackMe | VulnNet: dotjar
- TryHackMe | M4tr1x: Exit Denied
- TryHackMe | Shaker
- TryHackMe | Introduction to Django
- TryHackMe | Git Happens
- TryHackMe | Meltdown Explained
- TryHackMe | Splunk
- TryHackMe | Linux Backdoors
- TryHackMe | Jupyter 101
- TryHackMe | Geolocating Images
- TryHackMe | Tor
- TryHackMe | tomghost
- TryHackMe | DLL HIJACKING
- TryHackMe | Intro to IoT Pentesting
- TryHackMe | Attacking ICS Plant #1
- TryHackMe | Attacking ICS Plant #2
- TryHackMe | Printer Hacking 101
- TryHackMe | DNS Manipulation
- TryHackMe | Introduction to Flask
- TryHackMe | MITRE
- TryHackMe | magician
- TryHackMe | JPGChat
- TryHackMe | Baron Samedit
- TryHackMe | CVE-2021-41773/42013
- TryHackMe | Binary Heaven
- TryHackMe | Git and Crumpets
- TryHackMe | Polkit: CVE-2021-3560
- TryHackMe | Hip Flask
- TryHackMe | Bypass Disable Functions
- TryHackMe | Wordpress: CVE-2021-29447
- TryHackMe | Linux Function Hooking
- TryHackMe | REvil Corp
- TryHackMe | Sudo Buffer Overflow
- TryHackMe | Sudo Security Bypass
- TryHackMe | Solar, exploiting log4j
- TryHackMe | Conti
- TryHackMe | Dirty Pipe: CVE-2022-0847
- TryHackMe | The find command
- TryHackMe | 25 Days of Cyber Security
- TryHackMe | Advent of Cyber 1 [2019]
- TryHackMe | Advent of Cyber 2 [2020]
- TryHackMe | Advent of Cyber 3 (2021)
- TryHackMe | Advent of Cyber 2022
- TryHackMe | Cyber Scotland 2021
- TryHackMe | Hacker of the Hill #1
- TryHackMe | Learn and win prizes
- TryHackMe | Learn and win prizes #2
🏆 JOB CERTIFICATION CHECKPOINT 5: Expert & Leadership Tier
- CompTIA SecurityX (CASP+) / CISSP & OSEP
- Recommended Study Guides & Resources:
- Destination Certification (Masterclass & YouTube Free Series) for CISSP.
- Official ISC2 CISSP CBK Study Guide.
- OffSec PEN-300 (Evasion Techniques and Breaching Defenses) for OSEP preparation.