Phantom Track
Level 3 → Level 4
Inheritance
ACT I360 pts+50 first-blood bonus
Mission
Hijack a sudo command by abusing a permissive environment-variable allow-list in sudoers.
Why this matters in 2026
Environment-variable injection through sudo is the canonical loader-abuse pattern. RPATH and PATH siblings appear later in Flux (binary exploitation / exploit dev).
Mitigation era: 2026-04 · rotation policy: levels may be refreshed as CVEs are patched out of distro defaults.
Connection Terminal
Use the password forphantom3 that you captured on the previous level, then:ssh [email protected] -p 2223SSH command copied to clipboard!
🩸
ACTIVE RECORDFirst Blood captured by