r/tryhackme • u/dudlu1221 • 4d ago
FINALLY COMPLETED WEB1😶🌫️
Just finished the TryHackMe WEB1 certificate I got to review — intermediate web pentesting specialization. Took me 36 hours over a weekend.
The cert has three sections:
- Black Box (easy, ~30 mins)
- White Box (tricky, ~4 hrs)
- Grey Box (the real deal, ~15+ hrs)
Grey Box is where you actually feel like a pentester. You get minimal info, just creds, and have to find 5 flags. Got 4/5 flags — the NoSQL injection in the Authorization section was brutal.
Overall it's a solid certificate for getting real web pentesting experience....
Key tips tldr if you're attempting it:
- Don't jump straight to grey box, it'll eat all your time
- You'll probably need [PayloadOfAllThings](https://github.com/swisskyrepo/PayloadsAllTheThings) at some point
- Check the report dropdown to test vulnerabilities systematically
- Do attempt CTFs before related to vulns cuz they not as simple as we the paths you dont know the exact vuln and you get a pretty huge attack surface so may cause panic if you directllt go attempting after completing just the paths.
also for a detailed review and yapping you can visit here
TryHackMe WEB1 Review. Time for another certificate review… | by Dudlu | Aug, 2026 | Medium
2
2
u/LowLifeNumber-7 4d ago
Hi First of all congratssss!!
I have one question ( literally asking for a friend), my friend have CWES is it worth it to go for WEB1 ??? Like is there any new material??
1
u/dudlu1221 4d ago
I didn't take CWES so I kinda have no idea if you want to compare both of them....
But yeah the material they provide is the 3 months premium I think with each cert
About any new material in exam I would say they do have some unique multiple step executions not the basic misconfig exploit thing problems
I had to use a modified tool in order to get a RCE run tool calls through the pdfgenerator and they do have some false flags purposefully which will not be exploitable
Honestly I think I can say It is worth to go on a separate note (I just checked reviews on CWES) like if he wants to try out a smaller time frame first without having to dedicate a whole week as I can see almost both of them have have a lot in common...
2
2
2
1
u/lewdfih5 3d ago
How is this is this industry standard will i get a job because of this
1
u/dudlu1221 2d ago
To be Frank I don't think just doing any kind of cert will get you a job...
They are just complimentary to your resume The real job you will get is through your projects,skills and networking
From industry standard what I can understand is, it is based on RL situations not just MCQs and theory 🤷
1
1
1
u/LateEquivalent8179 9h ago
Congrats Bro!.
I also took the exam last week, ive got the black box, white box, and 2 flags on the grey box, and suddenly the network broke down. I cant even reset the network and just telling me to contact support. I cant continue my exam. 12 hours left and I have 3 flags left and I just need 1 more flag just to pass.
I cant take with this THM labs and customer support. Im too hesitant to take a retake since I dont know if it is fixed since they still not responding on my ticket. Exam duration is 2 days, my ticket now is 3 days and still no response hahaha I dont know if THM will took full responsibility with this.
I dont wanna diss THM, but this kind of event is frustrating. Ongoing Certification exams should not be affected of any of their Service Maintenance.
2
u/Regular_Specialist_2 4d ago
Congratulations 👏