Capture the FlagEasy
Spot the Implant
Lab for Persistence: Keeping Your Foothold
Scenario
This box was compromised and the intruder planted persistence. Your job (blue team) is to find it. A classic hiding spot: a second account that is secretly root. Check /etc/passwd.
Objective
Hunt for the backdoor account an intruder left to keep their access.
lab ~ spot the implantnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.