🐀
0 pts earned
Pipeline Env
Premium Machine (Locked)
🧩 PipelineBreach
🖧 AD Network — PipelineBreach
Pipeline Git
Pipeline Env
🔒 Pipeline Registry
🔒 Pipeline Artifact
🔒 Pipeline Runner
Two credential leaks in one host: Flask /health dumps os.environ as JSON, and nginx serves the .env file directly. SSH password is in both. Node GTFObins gives root.
🩸 First user blood: 00x003
🩸 First root blood: 00x003
Internal machine — reachable only by pivoting from the entry host. It is not directly scannable from the internet, so external scans return filtered. This is by design, not an outage.
Target IP
Premium required
User Flag
Pending
Root Flag
Pending
