Pivot three hops to the vault

Network & Infrastructure Difficulty ~10 min +10 XP

You have a foothold on web01 inside an internal network. A secrets vault is somewhere on the same subnet, but you cannot reach it directly. Scan the network, pivot through the intermediate host with the key you find, recover the vault token, and read the flag the vault returns.

Play freely - sign up to submit your answer and earn XP.