deadface-challenges/de-monne-breach/borrowed-script/README.md

Borrowed Script

Category: De Monne Breach

Points: 100

Description

<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/demonnebreach.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail"></iframe> ^{Created By: <code>@syyntax</code>}

The workstation obtained telemetry.ps1 from another machine before scheduling it. What internal IPv4 address supplied the script? Submit the source username and the IP address.

Submit the flag as deadface{username@IP}.

Use the memory dump evidence from Who Goes There?

Services

• https://deadface.sfo3.cdn.digitaloceanspaces.com