RatCTF
🐀 0 pts earned

Corp Headers

🧩 SocialEngineeringSim

🖧 AD Network — SocialEngineeringSim

Corp Headers Corp Webcrawl Corp Docs Corp Logs 🔒 Corp OSINT

Every HTTP response includes an X-Debug-Pass header containing the SSH password in plaintext. A single curl -I reveals the credential. Root via sudo python3.

🩸 First user blood: trio 🩸 First root blood: trio
Machine online
Target IP Log in to reveal
User Flag Pending
Root Flag Pending

Community

Community Hints

Grade A · 1000 pts Grade B · 700 pts Grade C · 400 pts Grade D · 200 pts + 150 credits on accept

Short, stage-specific nudges — directional, spoiler-light, no exact commands.

Foothold

Port might be the issue dj_x · D · 25 Aug 2026

Community

Community Walkthroughs

Grade A · 2500 pts Grade B · 1750 pts Grade C · 1000 pts Grade D · 500 pts + 300 credits on accept

🔒 Community walkthroughs are spoilers — capture the root flag on this machine to unlock them.