I’ll admit that I’ve used the app quizzes to climb the rankings by completing a lot of quizzes on my downtime e.g on bus

But 162,002 points in just 22 days? It is difficult to believe someone could achieve that by manually interacting with the TryHackMe mobile app and answering every quiz normally. You would go insane

https://tryhackme.com/p/RCDM.exe

I’m less certain about this account with 62,185 points:

https://tryhackme.com/p/pavloni

Even that would appear to require roughly three to four hours every day spent continuously submitting app quizzes, which is feasible but ;/

App really needs to be hard limited to say 200 points a day,

What do others think?

I’ve started building a series of CTF rooms based on real-world business logic flaws, predictable systems, and unintended ways legitimate features have been exploited.

The focus is less on traditional vulnerabilities such as SQL injection or XSS, and more on situations where someone understood the rules, maths, or system behaviour better than the designers expected.

I’m looking for more real-world examples that could work as interactive CTF challenges, especially involving:

• Something that has a good story behind it
• Business logic flaws
• Poor use of randomness
• Predictable sequences or algorithms
• Pricing, gambling, reward, or loyalty-system mistakes
• Race conditions or timing flaws
• Features that worked as designed but could be abused unexpectedly

What real-world incidents, bugs, scams, game exploits, or unusual system failures would make a good room?

I started the series with creating these two rooms this week,

Calculated Luck

Inspired by the Winfall/Cash WinFall lottery loophole used by Jerry and Marge Selbee.

When the jackpot reached a certain threshold without a winner, the prize money rolled down into the lower prize tiers. During these draws, buying a sufficiently large number of tickets could have a positive expected return.

In the room, players monitor the jackpot, predict when a rolldown will occur, and invest at the right time to reach $1 million before the flaw is fixed.

It's not as great as I was hoping it would be, but I really like the story behind it and that really makes the room.

https://tryhackme.com/room/calculatedluck

Take It or Leave It

Inspired by fan analysis of early Deal or No Deal games that suggested some case-value sequences were reused or predictable between games.

In the room, the case values are shifted by a consistent amount between rounds rather than being independently shuffled. Players record two games, calculate the shift, predict the next layout, and use that information to keep the highest-value case.

I really like how this room turned out.

https://tryhackme.com/room/takeitorleaveit

* PS if someone could confirm the links above work, along with https://tryhackme.com/room/unhandledctfhub that would be amazing.

Thank you for your time,
Unhandled

What am i missing ?

Question: What command scans 10.10.10.5 for open ports with version detection?

Hint: Nmap flags control scanning behavior. The -A flag enables aggressive scanning including versions, while -sV specifically targets version detection.

Tried
----------------------
nmap -sV 10.10.10.5
nmap -sV -p- 10.10.10.5
nmap --open -sV -p- 10.10.10.5
nmap --open -sV 10.10.10.5
nmap -p- -sV 10.10.10.5
nmap -sV
nmap --open -A 10.10.10.5
nmap -A 10.10.10.5
nmap -A
nmap -A -p- 10.10.10.5

and all the above with sudo in front

and a bunch more i can't remember.