TryHackMe — Advent of Cyber ’24 Side Quest — Walkthrough

Explore a series of advanced challenges alongside the core Advent of Cyber event!

Difficulty: Hard

Task 4: T1: Operation Tiny Frostbite

4.1.What is the password the attacker used to register on the site? Answer: QU9DMjAyNHtUaW55X1R

4.2. What is the password that the attacker captured? Answer: pbnlfVGlueV9TaDNsbF

4.3. What is the password of the zip file transferred by the attacker? Answer: 9jYW5fRW5jcnlwVF9iVXR

4.4. What is McSkidy’s password that was inside the database file stolen by the attacker? Answer: faXRfSXNfTjB0X0YwMGxwcm8wZn0=

Task 5: T2: Yin and Yang

5.1. What is the flag for YIN? Answer: THM{Yin.cannot.exist.without.a.little.bit.of.Yang}

5.2. What is the flag for YANG? Answer: THM{Yang.also.needs.Yin.to.survive}

Task 6: T3: Escaping the Blizzard

6.1. What is the content of the file foothold.txt? Answer: THM{th1s-1s-jusT-th3-B3g1nn1ng}

6.2. What is the content of the file user.txt? Answer: THM{h4v1ng-fun-w1th-a-g00d-old-heap-overflowww-in-a-l4t3st-gl1bc}

6.3. What is the content of the file root.txt? Answer: THM{w00t-w00t-y0u-escap3-the-may0r-permits}

Task 7: T4: Krampus Festival

7.1. What is the content of flag.txt? Answer: THM{unlock_the_door_to_darkness_0nly_f0r_the_brave}

7.2. What is the content of user.txt? Answer: THM{krampu5_h00ked_y0ur_l00t}

7.3. What is the content of root.txt? Answer: THM{krampu5_&_p0tat0_5alad}

Task 8: T5: An Avalanche of Web Apps

8.1. What is the value of flag 1? Answer: THM{09a3f8918a32ea38a2c833c98214336a}

8.2. What is the value of flag 2? Answer: THM{647aff4143b04972ba816f040e9b81c2}

8.3. What is the value of flag 3? Answer: THM{ff2e079bc7bc3eb925478aa5bc2466a6}

8.4. What is the value of flag 4? Answer: THM{05a830d2f52649c96318cce20c562b63}

Task 9: The End?

9.1. What is the flag you get at the end of the survey? Please make sure to copy the flag before closing the tab! Answer: THM{bigger_and_maybe_not_as_mean_in_2025}

If you enjoyed the article, feel free to follow me for more walkthroughs and answers.

And you can also follow me on:

Linkedin: *Nayanjyoti Kumar*

GitHub: NayanjyotiKumar*(Nayanjyoti Kumar)*

Instagram: নয়ন জ্যোতি কুমাৰ (@_nayan.kumar__)