Part 1 of the "Hacking from Zero" series
Getting Started with TryHackMe: Your Complete Cybersecurity Learning Path (2025 Edition)
"The best way to learn hacking is to actually hack — in a safe, legal environment."
If you've ever wanted to break into cybersecurity but didn't know where to start, TryHackMe (THM) is likely the best platform you haven't used yet. It gamifies learning — think Duolingo, but for ethical hacking.
In this first blog of the Hacking from Zero series, I'll walk you through what TryHackMe is, why it works, and the exact learning path you should follow as a beginner progressing toward intermediate/advanced skills.
🔐 What Is TryHackMe?
TryHackMe is a browser-based cybersecurity training platform with hundreds of "rooms" — each focused on a specific skill, tool, or concept. You don't need to install complex software; everything runs in your browser via a virtual machine.
Why it's brilliant:
- No setup required (browser-based VMs)
- Guided, structured learning rooms
- Free tier with 100+ rooms
- Gamified XP and leaderboard system
- Covers beginner to advanced topics
🗺️ The Recommended Learning Path: Zero to Hacker
Here's the path I recommend for anyone starting from scratch. Think of it as 4 phases.
Phase 1 — The Foundation (Weeks 1–2)
Before you hack anything, you need to understand what you're working with.
| Room | Why It Matters |
|---|---|
| Pre-Security Path | Networking basics, Linux, the web — all in one place |
| Linux Fundamentals (Parts 1–3) | Linux is everywhere in hacking. Master the terminal. |
| Windows Fundamentals (Parts 1–3) | Half of real-world targets run Windows |
| How The Web Works | HTTP, DNS, how browsers talk to servers |
| Intro to Networking | IP addresses, TCP/IP, OSI model |
Goal: Be comfortable in a Linux terminal and understand how networks work.
Phase 2 — Your First Hacking Tools (Weeks 3–4)
Now you learn the core tools every hacker uses.
| Room | Key Tool/Concept |
|---|---|
| Nmap | Network scanning — find open ports |
| Metasploit: Introduction | Exploitation framework basics |
| Burp Suite: The Basics | Web application interception |
| Hydra | Password cracking |
| John The Ripper | Hash cracking |
Goal: Run your first scan, intercept web traffic, and crack your first hash.
Phase 3 — CTF & Real-World Rooms (Weeks 5–8)
This is where it gets fun. Start solving Capture-the-Flag (CTF) challenges on THM.
Recommended rooms:
- RootMe — Classic beginner room: file upload vulnerability + privilege escalation
- Basic Pentesting — SSH brute force, weak credentials
- OhSINT — Open-Source Intelligence gathering
- Pickle Rick — A fun Rick & Morty themed CTF
- Blue — EternalBlue exploit (MS17-010) on a Windows machine
Goal: Get your first root flag. Trust me, the dopamine hit is real.
Phase 4 — Specialisation (Weeks 9+)
At this point, you know if you're more interested in:
| Track | Rooms to Follow |
|---|---|
| Web Application Hacking | OWASP Top 10, SQL Injection, XSS, SSRF |
| Penetration Testing | Jr Penetration Tester Path |
| Digital Forensics | DFIR rooms, Volatility, Autopsy |
| Red Teaming | Red Team Fundamentals, Offensive Tooling |
| Blue Team / SOC | SOC Level 1 Path |
💡 Tips to Get the Most Out of TryHackMe
1. Write everything down. Keep a "hacking notebook" — Notion, Obsidian, or even a text file. Document commands you use, what they do, and why. This will become your personal cheat sheet.
2. Don't rush to hints. The struggle is the learning. Spend at least 20–30 minutes stuck on a problem before looking at hints or write-ups.
3. Read write-ups AFTER solving (or genuinely giving up). Write-ups on Medium and GitHub are gold. But reading them before trying kills the learning. Use them to understand how someone thought, not just what commands they ran.
4. Join the community. THM has a Discord with tens of thousands of members. The community is surprisingly helpful and beginner-friendly.
5. Track your streak. THM rewards daily logins. Even 15 minutes a day adds up fast.
🏆 What Can TryHackMe Lead To?
Many people use THM as a stepping stone toward:
- eJPT (eLearnSecurity Junior Penetration Tester) — ideal first cert
- CompTIA Security+ — entry-level industry cert
- OSCP (Offensive Security Certified Professional) — the gold standard in pentesting
- CEH (Certified Ethical Hacker)
The Jr Penetration Tester path on TryHackMe is specifically designed to prepare you for the eJPT exam.
🚀 What's Next in This Series?
In the next post, we're diving deep into Nmap — the most essential recon tool in any hacker's toolkit. We'll cover everything from basic scans to advanced service detection and script scanning.
- ✅ (You are here) Getting Started with TryHackMe — Learning Path Overview
- ✅ Nmap Deep Dive: The Hacker's Swiss Army Knife
- ✅ Networking Fundamentals Every Hacker Must Know
- ✅ TryHackMe Walkthrough: RootMe Room
- ✅ OSINT: How Hackers Find Information About You
📌 Final Thoughts
TryHackMe lowered the barrier to entry for cybersecurity learning dramatically. You don't need expensive courses or a home lab — you need a laptop, a browser, and consistency.
Start with Phase 1. Finish one room today. Come back tomorrow.
The hacker mindset is built one room at a time.