AOC 25 Days 9-13: Hashcat, Sentinel, XSS, & YARA

Crack encrypted PDF/ZIP archives, triage Linux privilege escalation in Microsoft Sentinel, exploit reflected/stored XSS, inspect phishing, and run YARA rules.

This multi-room technical walkthrough consolidates Days 9 through 13 of the TryHackMe Advent of Cyber 2025 track: Passwords - A Cracking Christmas, SOC Alert Triaging - Tinsel Triage, XSS - Merry XSSMas, Phishing - Phishmas Greetings, and YARA Rules - YARA mean one!.

Across these five operational scenarios, we analyze offline password cracking mechanics …