Mission
Erase every forensic trace of 5 prior operators on this box before /opt/verify-clean.sh scores you. Six cleanup categories: auth.log, audit.log, bash_history, wtmp, btmp, lastlog. Fresh ephemeral per session — port 2226.
Why this matters in 2026
Cleanup on a box that has already seen production traffic. Selectively scrubbing *your* activity from mixed-operator logs is harder than wiping everything.
Mitigation era: 2026-04-24 · rotation policy: levels may be refreshed as CVEs are patched out of distro defaults.
Connection Terminal
Use the password forphantom15 that you captured on the previous level, then:ssh [email protected] -p 2226SSH command copied to clipboard!
This level runs on its own ephemeral container — each SSH connect spawns a fresh box that disappears on disconnect.
Flag Submission
Log in to submit flags and track progress.
🩸
ACTIVE RECORDFirst Blood captured by