TryHackMe Advent of Cyber 2025 Complete Guide, Overview & Daily WriteUps

Welcome to the TryHackMe Advent of Cyber 2025 hub!
This is your complete guide for the entire THM Advent of Cyber 2025 event – including the warm-up Prep Track, daily room explanations, challenge walkthroughs, and write-ups. Whether you’re just starting your cybersecurity journey or sharpening your penetration-testing skills, this resource will help you progress through every single day of the event.

What Is Advent of Cyber 2025?

Advent of Cyber 2025 (AoC 2025) is a free annual cybersecurity event hosted by TryHackMe throughout December.

Each day unveils a new security challenge or hands-on lab designed to teach real-world skills through a fun, story-driven format.

The event is completely free, beginner-friendly, and guided with hints, videos, and explanations making it one of the world’s most popular cybersecurity learning events.

Thousands of learners worldwide participate, making AoC an excellent starting point for anyone entering cybersecurity.

What You Will Learn in Advent of Cyber 2025?

AoC 2025 covers a wide range of practical cybersecurity topics, including:

• Linux & Windows basics
• Web exploitation
• Malware analysis
• Digital forensics
• Networking fundamentals
• Log analysis & SIEM
• OSINT
• Vulnerability detection
• Cryptography
• Red & blue team techniques
• Cloud & container security
• Incident response

Every room helps you build real technical skills that are useful for both beginners and professionals.

Rewards & Prizes (Advent of Cyber 2025)

TryHackMe offers one of the largest prize pools in the cybersecurity learning space.
For Advent of Cyber 2025:

• 💰 Prize Pool: Over $150,000 USD worth of prizes
• 🎉 Winners: Selected via raffle
• 🎟️ How to Enter: Every completed room counts as one raffle ticket
• 🎫 More Rooms = Higher Chance to Win
• 🧧 Eligibility: Free to join, open to users aged 16+ (as per TryHackMe T&C)
• 🏅 Certificates: Often awarded to participants who complete the event

Prizes typically include tech gadgets, swag, premium subscriptions, and more.

The Storyline Saving Wareville

Each year, AoC includes a festive story.
In Advent of Cyber 2025, the peaceful town of Wareville is once again in trouble.

Rumors mention:

• Troubles in the North Pole production lines
• SOC-mas traditions being threatened
• Investigations into digital incidents
• McSkidy and the TBFC team discovering new mysteries

Every daily challenge reveals another chapter in the story.

Advent of Cyber 2025 Prep Track

Before the main event starts, TryHackMe releases a Prep Track designed for true beginners.

This Prep Track includes:

• Basic Linux commands
• Password security
• User-agent investigations
• Malware behavior
• Breach checks
• Cyber hygiene fundamentals

Completing the Prep Track helps beginners build confidence before starting the event.

How Advent of Cyber 2025 Works

Here’s how the event is structured:

• 🎁 25 Days of Challenges
• 📅 New task released every day of December
• 🕵️ Hands-on practical labs
• 💡 Comes with hints & explanations
• 💻 Access challenges using:
  • AttackBox (browser-based VM)
  • Your own VPN setup (OpenVPN or WireGuard)
• ⭐ Each room teaches one cybersecurity topic
• 🎟️ Each completed room = 1 prize raffle entry

You do not need to complete tasks on the same day you can finish at your own pace.

Advent of Cyber 2025 Daily Write-Ups (All Days)

Below is the full index of all AoC 2025 challenges.
Each write-up link will be updated as soon as the solution is published on your website.

Day	Challenge Title	Write-Up Link
0	Advent of Cyber Prep Track (Warm-Up)	View WriteUp / Walkthroughs
1	Day 1 – Linux CLI – Shells Bells	View WriteUp / Walkthroughs
2	Day 2 – Phishing – Merry Clickmas	View WriteUp / Walkthroughs
3	Day 3 – Splunk Basics – Did you SIEM?	View WriteUp / Walkthroughs
4	Day 4 – AI in Security – old sAInt nick	View WriteUp / Walkthroughs
5	Day 5 – IDOR – Santa’s Little IDOR	View WriteUp / Walkthroughs
6	Day 6 – Malware Analysis – Egg-xecutable	View WriteUp / Walkthroughs
7	Day 7 – Network Discovery – Scan-ta Clause	View WriteUp / Walkthroughs
8	Day 8 – Prompt Injection – Sched-yule conflict	View WriteUp / Walkthroughs
9	Day 9 – Passwords – A Cracking Christmas	View WriteUp / Walkthroughs
10	Day 10 – SOC Alert Triaging – Tinsel Triage	View WriteUp / Walkthroughs
11	Day 11 – XSS – Merry XSSMas	View WriteUp / Walkthroughs
12	Day 12 – Phishing – Phishmas Greetings	View WriteUp / Walkthroughs
13	Day 13 – YARA Rules – YARA mean one!	View WriteUp / Walkthroughs
14	Day 14 – Containers – DoorDasher’s Demise	View WriteUp / Walkthroughs
15	Day 15 – Web Attack Forensics – Drone Alone	View WriteUp / Walkthroughs
16	Day 16 – Forensics – Registry Furensics	View WriteUp / Walkthroughs
17	Day 17 – CyberChef – Hoperation Save McSkidy	View WriteUp / Walkthroughs
18	Day 18 – Obfuscation – The Egg Shell File	View WriteUp / Walkthroughs
19	Day 19 – ICS/Modbus – Claus for Concern	View WriteUp / Walkthroughs
20	Day 20 – Race Conditions – Toy to The World	View WriteUp / Walkthroughs
21	Day 21 – Malware Analysis – Malhare.exe	View WriteUp / Walkthroughs
22	Day 22 – C2 Detection – Command & Carol	View WriteUp / Walkthroughs
23	Day 23 – AWS Security – S3cret Santa	View WriteUp / Walkthroughs
24	Day 24 – Exploitation with cURL – Hoperation Eggsploit	View WriteUp / Walkthroughs
25	Day 25 – Final AoC Challenge	Coming Soon

Who Should Join Advent of Cyber 2025?

AoC 2025 is perfect for:

• Absolute beginners
• Students
• IT professionals
• Ethical hackers
• Security analysts
• Anyone switching careers into cybersecurity

Because the challenges start simple and increase in difficulty, the event welcomes all skill levels.

Why Follow This Page?

This page on your website will include:

• Daily step-by-step write-ups
• Clear explanations for every task
• Screenshots, commands, and notes
• Answers to all challenge questions
• Context and learning resources
• Beginner-friendly breakdowns

Bookmark this page and follow along daily!

Important Notes

• Always follow TryHackMe’s rules
• Don’t share flags publicly
• Use write-ups only for learning, not cheating
• Practice responsibly
• Complete rooms on your own first before checking solutions

Key Skills You’ll Learn

• Linux and Windows command-line techniques
• Networking and TCP/IP basics
• Vulnerability assessment and exploitation
• Ethical hacking and penetration testing
• Cybersecurity problem-solving in real-world scenarios

Notes & Tips

• Always practice in TryHackMe’s safe environment.
• Do not share answers publicly; the goal is to learn, not just copy.
• Use this page as your central reference hub for all AOC 2025 content.
• Check back daily for new write-ups and updates.

Final Thoughts

THM Advent of Cyber 2025 is one of the best opportunities to learn hands-on cybersecurity in a guided, fun, and interactive way. Whether you’re preparing for certifications, starting a career, or leveling up your skills, AoC 2025 gives you practical, real cybersecurity experience.

Stay tuned – daily write-ups will be added to this page throughout the event.

Related Resources

CPENT v2 Labs Manuals and Training

TryHackMe CTF Writeups & Walkthrough Roadmap

1. What is TryHackMe Advent of Cyber 2025?

Advent of Cyber 2025 is a free, month-long cybersecurity event hosted by TryHackMe in December. It features daily hands-on challenges designed to teach real-world cybersecurity skills through an engaging, story-driven format.

2. Is Advent of Cyber 2025 free to participate?

Yes, the event is completely free to join. You only need a TryHackMe account to access the challenges and start learning.

3. Do I need prior cybersecurity knowledge to join AoC 2025?

No, beginners are welcome. The Prep Track and early challenges are designed to help new users build foundational knowledge before progressing to more advanced topics.

4. What is the Prep Track in Advent of Cyber 2025?

The Prep Track is a beginner-friendly warm-up path released before December. It covers basic concepts like Linux commands, password security, and cyber hygiene to prepare users for the main event.

5. How does the Advent of Cyber challenge system work?

Each day in December, a new challenge (room) is released. You can complete tasks at your own pace, and each completed room earns you a raffle entry for prizes.

6. What kind of topics are covered in AoC 2025?

The event includes a wide range of topics such as web exploitation, malware analysis, networking, digital forensics, OSINT, cryptography, cloud security, and incident response.

7. Can I complete challenges after December ends?

Yes, most rooms remain available even after the event ends, so you can continue learning and completing challenges at your convenience.

8. Are there rewards or certificates for completing AoC 2025?

Yes, participants can win prizes through a raffle system. Completing rooms increases your chances. Certificates are often awarded to users who complete the event.

9. Is it okay to use write-ups for solving challenges?

Write-ups should be used only for learning purposes after attempting the challenges yourself. Avoid using them to skip the learning process or share flags publicly.

10. What is the best way to succeed in Advent of Cyber 2025?

Stay consistent, complete challenges daily if possible, take notes, and practice what you learn. Engaging with the community and reviewing write-ups after solving challenges can greatly improve your understanding.