initial commit
This commit is contained in:
antton committed
commit
109bb924dd
135 files changed
+2538
No files matched your search
@@ -0,0 +1,26 @@
|
||||
# Dangerous Capability
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 300
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
`lilith` did OSINT correlation for the op and left some "crypto tooling" lying around charon. One of those tools was granted a Linux capability it should never have had.
|
||||
|
||||
Use it to become the next user and read their flag.
|
||||
|
||||
\> NOTE: Heads up: charon is disposable. Every web-shell session is a fresh copy of the box, so grab each flag as you find it.
|
||||
|
||||
Submit the flag as `deadface{flag-text}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,26 @@
|
||||
# Foothold on Charon
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 10
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
DEADFACE runs an internal ops/staging box they call **charon** - it's where the crew coordinates their influence operation. We got you a foothold on it.
|
||||
|
||||
Open the web-shell by clicking the link below. You'll land at a shell as the `svc-deploy` service account. Get your bearings and find the flag that proves your foothold.
|
||||
|
||||
\> NOTE: Heads up: charon is disposable. Every web-shell session is a fresh copy of the box, so grab each flag as you find it.
|
||||
|
||||
Submit the flag as `deadface{flag-text}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,26 @@
|
||||
# Git Good
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 100
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
As `deephax`, you can see this member keeps a little tooling project in his home directory. `deephax` swears he scrubbed the credentials out of it.
|
||||
|
||||
He's wrong. Recover the password for the next member, become that user, and read their flag.
|
||||
|
||||
\> NOTE: Heads up: charon is disposable. Every web-shell session is a fresh copy of the box, so grab each flag as you find it.
|
||||
|
||||
Submit the flag as `deadface{flag-text}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,24 @@
|
||||
# Heavy is the Crown
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 500
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
You've reached `mort1cia`, the DEADFACE second-in-command. Only root is above you now — and root holds the master Kingmaker payload.
|
||||
|
||||
Read the final flag from root's home.
|
||||
|
||||
Submit as `deadface{...}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,26 @@
|
||||
# Lilith
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 250
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
`sunstalker` was granted a narrow permission "to help another member run a job." Narrow permissions on the wrong binary aren't narrow at all.
|
||||
|
||||
Become the next user and read their flag.
|
||||
|
||||
\> NOTE: Heads up: charon is disposable. Every web-shell session is a fresh copy of the box, so grab each flag as you find it.
|
||||
|
||||
Submit the flag as `deadface{flag-text}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,26 @@
|
||||
# Looking Back
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 30
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
Whichever member of DEADFACE used the `svc-deploy` account last was sloppy. There are many DEADFACE members who use this machine.
|
||||
|
||||
Access one of their accounts and read the flag in their home directory.
|
||||
|
||||
\> NOTE: Heads up: charon is disposable. Every web-shell session is a fresh copy of the box, so grab each flag as you find it.
|
||||
|
||||
Submit the flag as `deadface{flag-text}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,26 @@
|
||||
# Old Habits
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 350
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
`spookyboi` handled decryption for the crew and kept notes on the rest of the team. One of them: the DEADFACE second-in-command, `mort1cia` — who, apparently, *still* hasn't changed her password, and reuses the same personal one everywhere.
|
||||
|
||||
mort1cia has a past, and it was exposed elsewhere. Track down the password she's been assigned, become her, and read the flag.
|
||||
|
||||
Recover `mort1cia`'s password, become that user, and read her flag.
|
||||
|
||||
Submit as `deadface{...}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
@@ -0,0 +1,26 @@
|
||||
# On Schedule
|
||||
|
||||
**Category:** Hostbusters
|
||||
|
||||
**Points:** 200
|
||||
|
||||
## Description
|
||||
|
||||
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hostbusters.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
||||
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
||||
|
||||
|
||||
`gh0st404` maintains a nightly collector script on charon. Somebody else's account runs it on a schedule.
|
||||
|
||||
Use that to become the next user and read their flag.
|
||||
|
||||
\> NOTE: Heads up: charon is disposable. Every web-shell session is a fresh copy of the box, so grab each flag as you find it.
|
||||
|
||||
Submit the flag as `deadface{flag-text}`.
|
||||
|
||||
[Access Hostbusters](http://142.93.197.9:7682/)
|
||||
|
||||
## Services
|
||||
|
||||
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|
||||
- [http://142.93.197.9:7682](http://142.93.197.9:7682)
|
||||
Reference in new issue
Block a user