intermediate

Foothold: Nimbus Startup

Nimbus is a small startup with a lean stack. A beginner-friendly three-host chain: enumerate the perimeter, break the web app, then abuse the API to reach user data.

scopeIsolated, authorized simulation. Every organisation, host, account and dataset in this campaign is fictional and synthetic — no real systems, customers or personal data are involved. Only the linked hacking.community labs are in scope.

0 / 3 hosts compromised +450 XP

Each host is a real lab. Open it, solve it, and submit its flag here to compromise the host — that reveals the pivot intel and unlocks the next machine in the chain.

// difficulty curveramp

easymediumhard

Difficulty ramps up — early hosts are gentler, the final boxes are the hardest.

edge-gw198.51.100.7easy

Perimeter gateway

host 1

Map the exposed services and identify the web app worth attacking.

graded: the per-user flag (hc{…}) issued by “Nmap Service Recon” — Scan a target subnet, identify open ports, then probe the one running an old vulnerable service.
then: unlocks app-web

open Nmap Service Recon

app-web

Web application

host 2

compromise the previous host to unlock

app-api

Internal API

host 3

compromise the previous host to unlock