A recent TryHackMe room called Brooklyn Nine Nine provided a hands-on lesson in system penetration. The challenge began with an Nmap scan revealing open ports for FTP and SSH. Anonymous FTP access yielded a note hinting at a user's weak password, setting the stage for a classic brute-force attack against the SSH service.

The attacker used Hydra with the rockyou.txt wordlist to crack Jake's credentials quickly. Once inside as the user jake, basic enumeration of the /home directory uncovered a second user, holt, and the associated user flag. This phase reinforced that simple reconnaissance often reveals the path to deeper system access.

Privilege escalation was achieved by exploiting a sudo misconfiguration. Running `sudo -l` showed that jake could execute `/usr/bin/less` as root without a password. By leveraging this binary, the attacker accessed the root directory and captured the root flag, demonstrating how minor administrative oversights can compromise an entire system.

This room serves as a reminder that robust security requires defense in depth. Weak passwords and lax sudo permissions remain common vulnerabilities in real-world environments. For security professionals, these TryHackMe challenges are vital for understanding how attackers chain together small flaws to gain full control.