All rooms Sign in
Penetration TestingLesson + challenge Live machinePremium

Launch Day

One exposed tool, one reused password, one rushed deploy — all the way to root.

A full boot-to-root against a startup's rushed deploy: a command-injection web foothold, a reused DB password that is also the ops SSH password (lateral move), and a writable root job for the final escalation. Multi-stage, per-instance secrets.

Difficulty
Hard
Estimated time
75 min
Points
450 pts
Completions
Completed by 1 player
Authors
By Cyber Academy 4 U
Create a free account to startSign in

What you will learn

  • Find and exploit a command-injection web foothold
  • Loot on-disk configuration for secrets
  • Move laterally using reused credentials
  • Escalate to root via a writable file run by a privileged job
  • Operate a complete foothold -> lateral -> privesc chain

What is inside

  1. Task 1 · Launch Day1 question

Sign in to read the tasks, start the machine and answer the questions.