🐀🐀🐀🐀🐀 0 pts earned

VAULTNET-WS01

Premium Machine (Locked)

🧩 VaultNet

🖧 AD Network — VaultNet

🔒 VAULTNET-DC01 VAULTNET-WS01 🔒 VAULTNET-DB01

An internal employee web portal running on the VaultNet segment — not reachable from the internet. The file upload utility skips extension and MIME validation entirely. Chain pivot access, unrestricted upload, and a world-writable cron script to go from anonymous to root. Part of the VaultNet AD lab.

Machine may be having trouble (checked 11m ago)
Target IP Premium required
User Flag Pending
Root Flag Pending