🏴☠️ Tom’s challenge: Snowcat RCE & Priv Esc
🗺️ Location: NetWars (Grand Hotel) - Area: netwars. Coordinates: 9, 6
Dialogue before Finishing ACT II
Hi, I’m Tom! I’ve worked for Counter Hack since its founding in 2010.
I love all things testing and QA, maintaining systems, logistics, and helping our customers have the best possible experience.
Outside of work, you’ll find me at my local community theater producing shows, helping with sound or video, or just hanging around.
Learn more about my background at TomHessman.com!
Well, I might have something developing. Come see me again soon, we’ll see.
Dialogue after Finishing ACT II
We’ve lost access to the neighborhood weather monitoring station.
There are a couple of vulnerabilities in the snowcat and weather monitoring services that we haven’t gotten around to fixing.
Can you help me exploit the vulnerabilities and retrieve the other application’s authorization key?
Enter the other application’s authorization key into the badge.
If Frosty’s plan works and everything freezes over, our customers won’t be having the best possible experience—they’ll be having the coldest possible experience! We need to stop this before the whole neighborhood becomes one giant freezer.
Dialogue after solving the challenge
Fantastic work! You’ve successfully exploited those vulnerabilities and retrieved the authorization key from the weather monitoring system.
Thanks for helping me get access back - our customers are going to have a much better experience now that we’ve got the weather station running again!
Dialogue after completing HHC2025
Fantastic! You’ve ensured the best possible experience for everyone by completing every challenge - that’s production-quality work right there!