---
title: "Discussion on \"Network Security: Protocols and Servers (TryHackMe)\" | Hashnode"
description: "Discussion on \"Network Security: Protocols and Servers (TryHackMe)\". This article will cover the Protocols and Servers write-up under the Jr Penetration Tester on THM.\nIntroduction\nThis room introduces the user to a few protocols commonly used, such as:\n\nHTTP\n\nFTP\n\nPOP3\n\nSMTP\n\nIMAP\n\n\nEach task about each protocol will..."
url: "https://hashnode.com/posts/network-security-protocols-and-servers-tryhackme/68050ddecab15856492165b8"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Network Security: Protocols and Servers (TryHackMe)](https://www.sharonjebitok.com/network-security-protocols-and-servers-tryhackme?utm_source=hashnode&utm_medium=feed)

This article will cover the Protocols and Servers write-up under the Jr Penetration Tester on THM. Introduction This room introduces the user to a few protocols commonly used, such as: HTTP FTP POP3 SMTP IMAP Each task about each protocol will...

Apr 20, 2025 · 18 min read · sharonjebitok.com  
Read the article

-   [#network-security](https://hashnode.com/tag/network-security)
-   [#protocols](https://hashnode.com/tag/protocols)
-   [#servers](https://hashnode.com/tag/servers)
-   [#tryhackme](https://hashnode.com/tag/tryhackme)
-   [#write-up](https://hashnode.com/tag/write-up)

## Written by

[Jebitok](https://hashnode.com/@w1t3r)

@w1t3r · Kenya

  
[View profile](https://hashnode.com/@w1t3r)

Software Developer \* Cyber security Research \* Open for roles

Software Developer | Learning Cybersecurity | Open for roles \* If you're in the early stages of your career in software development (student or still looking for an entry-level role) and in need of mentorship, you can reach out to me.

## Responses 1

Markdown supported · ⌘↵ to post

[kafre02](https://hashnode.com/@kafre02)

[Sep 24](https://hashnode.com/posts/network-security-protocols-and-servers-tryhackme/68050ddecab15856492165b8/comment/6ab52023c83e04e385b913ef)

You're laking the whole intro, which is pretty informative in my opninion

This term introduces several protocols commonly used across networks:

```
HTTP
FTP
POP3
SMTP
IMAP
```

These protocols form the foundation of how you browse the web, transfer files, and send and receive email. Understanding how they work at a low level is essential for anyone pursuing a career in cybersecurity, whether in penetration testing, network defense, or security engineering.

Each protocol task is designed to show what happens beneath the surface, which is usually hidden by a GUI (Graphical User Interface). You will “talk” using the above protocols with a simple Telnet client to understand what your GUI client is doing under the hood. The purpose is not to memorise the protocol commands but rather to observe the protocol while it is working. Why Learn These Protocols Today?

You might wonder why you are studying protocols that are decades old. There are several important reasons.

First, these protocols are still in use. While most public-facing services now use encrypted versions (HTTPS, SFTP, IMAPS), the underlying protocol mechanisms remain the same. The commands you send over HTTP are the same HTTP commands, wrapped in TLS encryption.

Second, you will encounter plaintext protocols during penetration tests and security assessments. Legacy systems, internal networks, IoT devices, and misconfigured services often still use unencrypted protocols. Recognising and exploiting these weaknesses is a core penetration-testing skill.

Third, understanding the protocol helps you understand the attacks. When you know how SMTP works, you understand why email spoofing is possible. When you understand HTTP, web application vulnerabilities make more sense. This foundational knowledge makes you a better security professional.

This room also discusses some of the insecurities inherent in these protocols. In particular, the focus is on passwords sent in cleartext. When credentials are transmitted without encryption, anyone with access to the network traffic can capture them. This was acceptable when these protocols were designed for trusted academic networks, but it is a serious vulnerability on modern networks.

In the following room, Protocols and Services 2, you will explore how these protocols can be secured using TLS encryption, and examine attacks such as sniffing, man-in-the-middle, and password attacks in more detail. Prerequisites

This room assumes a working understanding of TCP/IP, ports, and the client-server model. You should also be comfortable with the Linux terminal. If you need a refresher on any of these topics, complete the following first: