Capture the FlagMedium
Scheduled for Root
Lab for Scheduled Tasks: cron & systemd Timers
Scenario
Something on this box runs automatically as root. Scheduled tasks are the first place to look, both for privilege escalation and for what an attacker left behind. Enumerate the cron jobs, follow the one running as root to the script it calls, and read it.
Objective
Enumerate the scheduled tasks, find the script a root cron job runs, and read the flag inside it.
lab ~ scheduled for rootnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.