RatCTF
🏛️
Premium Vault
Time-windowed labs that have gone offline are archived here. Premium members can replay every retired machine, anytime — even after the window closes.
Also includes premium machines, walkthroughs, and tips.
A preview of the machines waiting for you.
Offline — window closed
Axferia's nameserver has been running in the corner of the datacenter since before anyone on the team can remember. Nobody touches it. Nobody audits it. The sysadmin who set it up left years ago — and took the hardening checklist with him.
Offline — window closed
Listeria started as a quick internal tool that was never meant to face the world. Then someone pointed a domain at it. A Friday afternoon deploy. No review. The developer responsible has since changed departments.
Offline — window closed
Bifrost was set up to bridge two legacy teams who couldn't agree on a file-sharing standard. So they ran both. Twice the surface, half the oversight. Somewhere in the middle of all that data lives a path forward.
Offline — window closed
Postmark handles internal mail for a small ops team. It was stood up fast, kept running through three infrastructure migrations, and never got the security hardening that was always on next quarter's roadmap.