Reach the Evidence Server
HardNetworking30-40 minBefore they left, whoever had access cut off every path to the evidence collector on the response subnet. Nothing looks deliberately broken at first glance — that's the point. The diagnosis is the challenge: walk the path a packet would take to the collector and find what was quietly cut at each layer, then rebuild it.
Your mission:
1. Get the collector's name resolving on this box again.
2. Make this box able to reach the collector's subnet — persistently; a fix that dies with the next reboot doesn't count.
3. Clear whatever is still blocking the collector's port, without loosening any rule that's supposed to be there.
4. Recover the flag to /root/case/flag.txt.
The collector's connection details are in the case paperwork under /root/case/ — start by actually reading it. See /root/case/brief.txt.
- Restore resolution for the evidence server's hostname
- Restore the persistent route to its subnet
- Remove the firewall override blocking its port
- Recover the flag once the full path is repaired
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.
