🐀
0 pts earned
Blacksite Tools
Premium Machine (Locked)
🧩 BlacksiteWebapp
🖧 AD Network — BlacksiteWebapp
A Flask network tools page passes user input directly into os.popen(). The MOTD contains SSH credentials for the service account. A SUID /bin/bash gives instant root.
🩸 First user blood: davidkarpinski1
🩸 First root blood: davidkarpinski1
Internal machine — reachable only by pivoting from the entry host. It is not directly scannable from the internet, so external scans return filtered. This is by design, not an outage.
Target IP
Premium required
User Flag
Pending
Root Flag
Pending
