July Season: Ghost in the Machine
Three compromised boxes, three flags buried in the aftermath. Hunt the persistence, read the logs, and recover what the intruder left behind — all on sandboxes you fully control. Defensive practice only.
Archived season — playable for practice, no leaderboard points. Official write-ups are open.
The Quiet Cron
forensics · persistence · cron
Sudo Misery Loves Company
forensics · privesc · sudo
The Log Never Lies
forensics · log-analysis · ssh
Sudo Misery Loves Company
350 pts · decays to 150 · +75 first bloodAn analyst flagged that a low-privilege service account can somehow run a root shell. Someone widened its sudo rights and hid the change in plain sight. Track down the misconfiguration, understand how it grants escalation, and recover the flag it guards.
The live sandbox for this challenge isn't available yet — the brief is open.
Hints
Hints for this challenge unlock with Pro.Sign in or create an account.
Submit flag
Complete every objective in the lab and use Verify & grade, then submit the flag from that same box here.
Sign in to submit flags and get on the board.
Archived — solves are for practice, not the leaderboard.
Season standings
loading standings…