[ Donate ]

Ghost Track

Level 20 → Level 21

Cron Discovery · 630 pts · +50 first-blood bonus

First Blood Available

Commands you may need to solve this level

lscatfind

Why this matters in the real world

Cron is a privilege escalation gold mine and a persistence favorite. Every DFIR engineer checks cron directories in the first five minutes of a compromise investigation.

How to get to this level

Use the password for ghost20 that you captured on the previous level, then:

ssh ghost20@ghost.breachlab.org -p 2222

Log in to submit flags and track your progress on this level.