July Season: Ghost in the Machine
Three compromised boxes, three flags buried in the aftermath. Hunt the persistence, read the logs, and recover what the intruder left behind — all on sandboxes you fully control. Defensive practice only.
Archived season — playable for practice, no leaderboard points. Official write-ups are open.
The Quiet Cron
forensics · persistence · cron
Sudo Misery Loves Company
forensics · privesc · sudo
The Log Never Lies
forensics · log-analysis · ssh
Sudo Misery Loves Company
350 pts · decays to 150 · +75 first bloodAn analyst flagged that a low-privilege service account can somehow run a root shell. Someone widened its sudo rights and hid the change in plain sight. Track down the misconfiguration, understand how it grants escalation, and recover the flag it guards.
The live sandbox for this challenge isn't available yet — brief and hints are open.
Hints
sudo -l is a start, but the interesting rule may be in a drop-in under /etc/sudoers.d, not the main sudoers file.
Submit flag
Sign in to submit flags and get on the board.
Archived — solves are for practice, not the leaderboard.
Season standings
loading standings…