https://tryhackme.com/room/AIforcyber-aoc2025-y9wWQ1zRgB
Room created by: tryhackme, cmnatic
“The lights glimmer and servers hum blissfully at The Best Festival Company (TBFC), melting the snow surrounding the data center. TBFC has continued its pursuit of AI excellence. After the past two years, they realized that Van Chatty, their in-house chatbot, wasn’t quite meeting their standards.
Unfortunately for the elves at TBFC, they are also not immune to performance metrics. The elves aim to find ways of increasing their velocity; something to manage the tedious, distracting tasks, which allows the elves to do the real magic.
TBFC, adventurous as ever, is trialing their brand new cybersecurity AI assistant, Van SolveIT, which is capable of helping the elves with all their defensive, offensive, and software needs. They decide to put this flashy technology to use as Christmas approaches, to identify, confirm, and resolve any potential vulnerabilities, before any nay-sayers can.”
Make sure you spin up the attack box and the target machine while you read the material. The benefits of AI in cybersecurity:
The room also goes over the obvious faults of AI, such as poor coding practices. Once you read over the material, it’s time to take on the challenge!
I ended up having to restart my chat as it seemed to have gotten hung up. After the second time, it still took a bit, so just have patience and let it do its thing. It will prompt you with instructions on how to set up a SQL injection.
Open your terminal and do so as instructed.
After you copy and paste the code that is given and before you save and close the nano file, make sure you are changing the ‘url path = “http://MACHINE_IP”‘ with your target machine IP address. If you do not know how to obtain that, you will find that in the THM room. Once you save your file with Ctrl + O and exit with Ctrl + X, cat your Python script file to make sure everything is good!
Everything looks good. Let’s go ahead and run it. I believe once we do, we will obtain one of our flags!
Moving on to stage 4!
Overall, a pretty simple room, but this shows the benefits for both the red team and the blue team, and how it can assist with best coding practices as well. The room covers the advantages and disadvantages of AI and hits home the idea that AI is here to stay. THM also links to another room for AI: https://tryhackme.com/room/defadversarialattacks.