Challenge · Easy

Tampered Tarball

One of last night's release artifacts does not match its published checksum, and it is already installed. Find it, get a clean copy and reinstall.

sha256sumchecksumsreleases

Practises the module Software supply chain security.

The ticket

ALERT: outbound connections from lab-01 to 203.0.113.9

The monitoring agent agent 2.1.0 was installed from /srv/releases yesterday. Since then the box talks to an address nobody knows. The vendor publishes checksums in SHA256SUMS.

Start the challenge →