Ghost Track

Level 20 → Level 21

Cron Discovery
630 pts+50 first-blood bonus

Commands you may need to solve this level

lscatfind

Why this matters in the real world

Cron is a privilege escalation gold mine and a persistence favorite. Every DFIR engineer checks cron directories in the first five minutes of a compromise investigation.

Connection Terminal

Use the password for ghost20 that you captured on the previous level, then:
ssh [email protected] -p 2222
SSH command copied to clipboard!

Flag Submission

Log in to submit flags and track your progressLog In
🩸
First Blood captured by
ACTIVE RECORD