RatCTF
🐀🐀🐀🐀 0 pts earned

CORP-WS01

🧩 CorpNet

🖧 AD Network — CorpNet

CORP-DC01 CORP-WS01

CORP-WS01 belongs to a developer who built the team's internal tools portal and deployed it from their own machine. It's domain-joined, always on, and only reachable from inside the network — pivot in through CORP-DC01 first. Reach it at corp-ws.default.svc.cluster.local (standard ports 22/80/445), or from the in-browser Pwnbox. Part of the CorpNet LDAP lab.

🩸 First user blood: wibateam 🩸 First root blood: wibateam
Internal machine — reachable only by pivoting from the entry host. It is not directly scannable from the internet, so external scans return filtered. This is by design, not an outage.
Target IP Log in to reveal
User Flag Pending
Root Flag Pending

Community

Community Hints

Grade A · 1000 pts Grade B · 700 pts Grade C · 400 pts Grade D · 200 pts + 150 credits on accept

Short, stage-specific nudges — directional, spoiler-light, no exact commands.

General

It is pointless to have the strongest safe in the world when the authentication davidkarpinski1 · B · 27 Jun 2026

Community

Community Walkthroughs

Grade A · 2500 pts Grade B · 1750 pts Grade C · 1000 pts Grade D · 500 pts + 300 credits on accept

🔒 Walkthroughs are spoilers — capture the root flag on this machine to unlock them for free.