NEED HELP?

It is normal to get stuck on a level from time to time.

Before reaching out for help, make sure you have read the level README carefully. If you are still stuck, you can ask in the chatrooms — but remember to follow the rules. Do not share flags or solutions.

If you don't know how to use a command, try man <command> or use a search engine to find out.

Flags

The flag you submit for level N is the same chain password you used to ssh into level N+1. Solve the level, recover the secret (it is almost always a file somewhere on the box), paste it on /submit for points.

The last level of each track ends at a graduation token (e.g. Gh0st_0p3r4t1v3) — that one is the flag for the final level and has no next-level SSH use.

Case-sensitive. Whitespace is trimmed.

First Blood

The first operative to submit a correct flag for a level gets a bonus on top of the base points (usually +50). After that, the first-blood slot is taken for good — everyone else only earns the base points for that level.

You can see who holds first blood for every level on the track page. Red FIRST BLOOD AVAILABLE means it is still up for grabs.

Discord

You can find our Discord server at https://discord.gg/xqTbW6juXt

Channels:
  #help           stuck on a level? ask here
  #ghost          Ghost track discussion
  #phantom        Phantom track discussion
  #specter        Specter track discussion
  #general        general talk
  #victories      share your wins
  #bugs           report platform issues
  #feedback       suggestions and ideas

SSH troubleshooting

The following commands may be useful:

# If SSH key changed warning appears
ssh-keygen -R "[204.168.229.209]:2222"
ssh-keygen -R "[204.168.229.209]:2223"
ssh-keygen -R "[204.168.229.209]:2224"
ssh-keygen -R "[204.168.229.209]:2225"
ssh-keygen -R "[204.168.229.209]:2226"
ssh-keygen -R "[204.168.229.209]:2227"
ssh-keygen -R "[204.168.229.209]:2228"
for p in 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243; do
  ssh-keygen -R "[204.168.229.209]:${p}"
done

# If connection is refused, check the port number for the level you're on.

# Ghost (track 1, foundation):
# Ghost L0-L21:    port 2222

# Phantom (track 2, post-exploitation):
# Phantom main:    port 2223   (L0-L8, L10-L12, L16-L29, L31 graduation)
# Phantom L9:      port 2228   (ephemeral — Stack Day, optional)
# Phantom L13:     port 2224   (ephemeral — Deep Roots)
# Phantom L14:     port 2225   (ephemeral — Shadow Mode)
# Phantom L15:     port 2226   (ephemeral — Clean Slate)
# Phantom L30:     port 2227   (ephemeral — Clean Exit)

# Specter I (track 3, OSINT — every level is ephemeral):
# Specter L0:      port 2230   (paper-trail)
# Specter L1:      port 2231   (search-operator)
# Specter L2:      port 2232   (code-hunter)
# Specter L3:      port 2233   (js-recon)
# Specter L4:      port 2234   (people-recon)
# Specter L5:      port 2235   (sock-puppet)
# Specter L6:      port 2236   (image-geo)
# Specter L7:      port 2237   (reverse-image)
# Specter L8:      port 2238   (travel-pattern)
# Specter L9:      port 2239   (corporate-intel)
# Specter L10:     port 2240   (dark-web)
# Specter L11:     port 2241   (telegram-intel)
# Specter L12:     port 2242   (adversarial-counter-intel)
# Specter L13:     port 2243   (berkeley-protocol — finale)

Support the project

BreachLab is free. If you find it valuable, consider donating to keep the servers running and new tracks coming.