Phantom Track
Level 6 → Level 7
Scheduled Sins
ACT I420 pts+50 first-blood bonus
Mission
Hijack a group-writable cron script running as flagkeeper6 every minute.
Why this matters in 2026
Scheduled tasks with loose permissions are a top-3 privilege-escalation vector on Linux. Systemd-timer and NFS scheduled-task variants are covered later in a dedicated privilege-escalation track.
Mitigation era: 2026-04 · rotation policy: levels may be refreshed as CVEs are patched out of distro defaults.
Connection Terminal
Use the password forphantom6 that you captured on the previous level, then:ssh [email protected] -p 2223SSH command copied to clipboard!
🩸
ACTIVE RECORDFirst Blood captured by