🐀
0 pts earned
Blacksite Tools
Premium Machine (Locked)
🧩 BlacksiteWebapp
🖧 AD Network — BlacksiteWebapp
A Flask network tools page passes user input directly into os.popen(). The MOTD contains SSH credentials for the service account. A SUID /bin/bash gives instant root.
🩸 First user blood: davidkarpinski1
🩸 First root blood: davidkarpinski1
Part of the BlacksiteWebapp set — it is not listed on the main challenges page, but its ports are open to you. Connect straight to the target IP and ports below; no pivot needed.
Target IP
Premium required
User Flag
Pending
Root Flag
Pending
