skip to main content
hacking.communityplay in the sandbox.

Default Creds in Cloud

cloud · easy · +30 XP

Target

POST /api/lab/cloud-default-creds-101/jenkins-login body {username, password} POST /api/lab/cloud-default-creds-101/jenkins-script body {session, groovy} (Script Console)

Goal: default creds are admin:admin. After login, post a Groovy script containing the literal Runtime.getRuntime().exec to the Script Console — the engine returns a shell + flag.

// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/cloud-default-creds-101/
// reuse on the cli
// submit flag
// no solves yet

// go deeper

// install app

Install hacking.community for fast access, offline reading, and push notifications. No app store needed.