Description
You are tasked with carrying out a red team exercise on a major company. After many days spent infiltrating your target’s network, you are very close to achieving your objective. You only need to access the company’s central server to succeed, but unfortunately it appears to be invulnerable.
Your only lead to compromise this machine is a mysterious service listening on port 1337. Fortunately, during your intrusion you previously discovered the file netsec.tar.xz, which seems to be a backup from this server.
To access the challenge, connect via SSH inside the company’s network:ssh -p 4000 ctf@localhost.
Once connected, the target server is reachable at address 192.168.2.2 on port 1337: nc 192.168.2.2 1337.
Files
- docker-compose.yml
-
netsec.tar.xz
20.53 MiB – 14285636e911082669ee327f7ce7ba6411c89bd32a3c3783c151b6805b606881
Author
Challenge Instructions
- First, download docker-compose.yml:
curl https://hackropole.fr/challenges/fcsc2026-pwn-netsec/docker-compose.public.yml -o docker-compose.yml - Launch the challenge by executing in the same folder:
docker compose up - Then, in another console, access the challenge with Netcat:
nc localhost 4000
In case you encounter problems, please consult the FAQ.
Flag
Submit your solution
You can submit your writeup for this challenge. Read the FAQ to learn how to proceed.
You need to be logged in to submit a writeup.