What It Took to Hold #1 on TryHackMe for 4 Months
People assume a leaderboard streak comes down to raw skill. In practice it's closer to 80% consistency and 20% skill — showing up daily matters far more than any single hard room you clear.
The routine that worked for me: pick a fixed daily time block (even 45 minutes), work through rooms in order of what teaches something new rather than what scores the most points, and write a short note after every room — one or two lines on what the vulnerability actually was, not just that it was solved.
Points chasing burns people out fast. What kept the streak going was treating each room as a small deposit into a mental library, not just a leaderboard number. By month two, patterns started repeating across rooms — the same categories of misconfiguration, the same handful of privilege-escalation techniques — and solve times dropped naturally as a side effect, not the goal.
The other underrated factor: community. Being active in the room discussion threads means picking up techniques other people found that you would never have thought to try, and returning the favor compounds over time.
More Writeups
Breaking Down "Signal Intercept": A Base64 Primer
Why Base64 isn't encryption, how to recognize it in the wild, and the reasoning behind one of the CTF Arena challenges.
Building the CTF Arena Into This Portfolio
Notes on designing a self-contained OSINT/crypto CTF: hashing flags client-side, avoiding leaks in the JS bundle, and keeping the challenge list scalable.