2.3 KiB
Bedside Manner
Category: Brain Scans
Points: 15
Description
<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/brainscans.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail"></iframe> <sup>Created By: <code>@syyntax</code></sup>
<div style=" border: 1px solid #d97706; border-left: 5px solid #d97706; background-color: #fffbeb; color: #78350f; padding: 16px 18px; margin: 20px 0; border-radius: 6px; font-family: Arial, sans-serif; line-height: 1.5; " role="alert"> <strong style="display: block; margin-bottom: 6px; font-size: 1.05rem;"> ⚠ Warning </strong> <span> This is an experimental series of challenges designed to introduce players to the niche field of medical device penetration testing. This series is supposed to simulate physical access to the device. As such, please do not conduct port scans or any kind of brute forcing - they are not needed for this series of challenges. </span> </div>
DEADFACE is taking credit for an attack that compromised patient data at St Dymphna's Medical Center. Somehow, DEADFACE acquired sensitive patient records from the medical center that used the device. Funny thing is, the device that housed the data is internal without access to the internet. Which means DEADFACE would have had to have physically infiltrated the medical center!
The medical center sent us security camera footage of two individuals who told staff they were with IT, but when we asked the IT department, they said they have no idea who they were.
We're giving you access to the device we believe was compromised. We're asking you to conduct a medical device penetration test on the machine to identify vulnerabilities so we can determine if (and how) the device was compromised.
Your first task is to identify any lingering strings developer's may have left in the device's kiosk web browser.