Mission
Harvest cloud credentials from the IMDS metadata service.
Why this matters in 2026
Every major cloud breach starts with IMDS. This is where Phantom ends and cloud begins.
Mitigation era: 2026-04 · rotation policy: levels may be refreshed as CVEs are patched out of distro defaults.
Connection Terminal
Use the password forphantom26 that you captured on the previous level, then:ssh [email protected] -p 2223SSH command copied to clipboard!
Flag Submission
Log in to submit flags and track progress.
🩸
ACTIVE RECORDFirst Blood captured by