Farewell 🔍 Recon First, I ran an nmap scan: Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-25 13:58 UTC Nmap scan report for ip-10-82-129-222.eu-west-1.compute.internal (10.82.129.222) Ho...

Padelify 🔍 Recon First, I ran an nmap scan: Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-25 03:45 UTC Nmap scan report for ip-10-81-157-135.eu-west-1.compute.internal (10.81.157.135) Ho...

Mr.Phisher 📥 Getting the Files 🕵️ First, I downloaded the challenge files through a local Python HTTP server: 💡 Opening the files, something looked suspicious. I also checked the strings — th...

Athena 🔍 Nmap Scan 🕵️ First, I ran a full port scan to discover open services: Nmap scan report for ip-10-80-186-138.eu-west-1.compute.internal (10.80.186.138) Host is up (0.00011s latency). Not...

Brooklyn Nine-Nine 🔍 Nmap Scan 🕵️ First, I ran an nmap scan to discover open ports and services: 📂 FTP Enumeration We can see the nmap scan results. Let’s try the FTP server: 💡 It contains a...

Lian Yu 🔍 First, I ran an nmap scan: 💡 We found a web directory, but the room prompt states it needs to be a number. I let the scan run, and if it didn’t find anything, I planned to use a numeric...

Heartbleed Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-15 07:05 UTC Nmap scan report for ip-10-82-120-36.eu-west-1.compute.internal (10.82.120.36) Host is up (0.00012s latency). Not show...

Dig Dug 🔍 Port & Service Discovery 🕵️ It took just one command. I did some research and used AI for help!

Curseforge 🔍 Reconnaissance & Enumeration 🕵️ First, I looked around: 💻 I tried running commands in the terminal: Jessie is the user: 🕵️ Privilege Escalation ⚡ Honestly, I don’t k...

Bounty Hacker 🔍 Port Discovery & FTP Login 🕵️ First, I found open ports: 🕵️ SSH Brute Force 💻 The writer of the note is lin. The room asks: ‘What service can you brute-force with the t...