🐀
0 pts earned
Retrogate
Cleartext credentials over a legacy protocol — some habits never die. Authenticate through the old gateway, find what the sysadmin left behind, and walk the classic escalation path to root.
Premium
Walkthrough, Tips and Tricks
Walkthrough
Discover Telnet exposure and test recovered or guessed credentials for access. Enumerate user environment, credential stores, and shell history for escalation clues. Identify insecure SUID binaries and validate exploitability in this environment. Use a safe escalation path to root and collect the final proof.
Tips and Tricks
Legacy services often reuse weak credentials from nearby systems. Check shell history and local scripts early. Verify SUID behavior carefully before invoking payloads.