Mission launch sequence armed
Public operators can step into the live sandbox immediately. The start route now frames the run as a checkpoint mission with visible reward pressure and the next unlock already in view.
Validate your foothold
Read the exact shell identity first so every later privilege clue has a clean baseline.
+250 XP
~45 min
Root flag, escalation notes, and a cleanup checklist.
Completion Badge
Rootline Operator
Clearance Upgrade
Host Elevation Clearance
Next Unlock
OWASP Top 10 - Web Exploitation
Objective Count
5 checkpoints
Recommended after clearing Network Recon foundations.
One move is live at a time. Stage the current command, read the result, and earn the next unlock.
0/250 XP
No chain yet
Lv.2 • Stage 1/5
20% charged
Only one move is armed. Stage it, read the output, then verify the exact clue you extracted.
Read the exact shell identity first so every later privilege clue has a clean baseline.
Notes persist in this browser immediately. Save the mission later if you want the protected member handoff.
No chain yet
Clear the first checkpoint to unlock your first debrief badge, XP drop, and the next sealed stage.
Read the exact shell identity first so every later privilege clue has a clean baseline.
Confirm the shell context before you enumerate privilege boundaries.
Future stage stays sealed until the current checkpoint is verified.
Future stage stays sealed until the current checkpoint is verified.
Future stage stays sealed until the current checkpoint is verified.
Future stage stays sealed until the current checkpoint is verified.
Read the exact shell identity first so every later privilege clue has a clean baseline.
Sign in only if you want to continue inside the protected workspace after this public sandbox run.
Stage one checkpoint at a time instead of dumping the whole walkthrough at once.
Read the terminal output closely. Each checkpoint stays sealed until the verification signal matches.
Clear this mission to unlock the next queue tile: OWASP Top 10 - Web Exploitation.
This public start flow lands in the same live mission workspace a member uses after auth. Authentication only gates saved notes, streak continuity, and the protected handoff inside /app/labs/linux-privilege-escalation.
Sign in when you want recruiter-facing proof, checkpoint history, saved streaks, and the protected next-mission queue.