u/Middle-Mode3001

BreachLab (wargame I posted here 3 weeks ago) is still live and we now have Ghost (23 lvl, OverTheWire-style Linux privesc) + Phantom (32 lvl, container escape → K8s → cloud exfil).

Week one, a player DM'd a 4-line exploit for Ghost L22 — SUID-cat helper they chained to read the graduation flag without completing the chain. Patched in 40 minutes, same SSH session. Best DM I've ever got.

Persistent infra, one SSH connection, no signup, no browser:

ssh ghost0@204.168.229.209 -p 2222 # password: ghost0 ssh phantom0@204.168.229.209 -p 2223 # password: phantom0

Site + leaderboard + live operator count: → https://breachlab.org If you break something, DM. Fixing player-found bugs in 40 min is the whole point

New wargame just launched — Phantom track of BreachLab.

  ssh phantom0@204.168.229.209 -p 2223
  password: phantom0

Persistent infra (not ephemeral instances), chain-password format like
Bandit/OverTheWire. 32 levels covering Linux privesc → container escape → Kubernetes takeover → exfil. Real Docker stack, not simulators (except Leaky
Vessels emulator and K8s API which I built specifically to make the technique mandatory without leaving real CVEs on the host).

Bonus: Ghost track (Linux fundamentals, 23 levels) for warm-up.

  ssh ghost0@204.168.229.209 -p 2222                                        
  password: ghost0

Free, no signup, no paywall, no AI hints. Resource links per level — that's
it. 11 more tracks planned (web, crypto, AD, RE, etc).

Leaderboard + first-blood bonuses at breachlab.org/leaderboard if you register an account.

First 100 graduates of any track get permanent Founding Operative status —
breachlab.org/founding

Ghost L22 got popped by a player in week one — here's the 4-line bypass, patch, and the other 54 levels

BreachLab Phantom — new 32-level post-exploitation wargame, persistent infra, no signup