# NimbusOps — Kill Chain (multi-flag) (CTF challenge)

> NimbusOps is a two-stage kill chain with TWO flags. First get a foothold — a debug endpoint the ops team forgot to disable leaks the 'recon' flag and a deploy key.

Canonical: https://codelivly.com/ctf/challenges/nimbusops-killchain

| | |
|---|---|
| Category | Web Exploitation |
| Difficulty | Medium |
| Points | 800 |
| Estimated time | 25 min |
| Type | Live instance |
| Solves | 36 |
| Author | Codelivly |

NimbusOps is a two-stage kill chain with TWO flags. First get a foothold — a debug endpoint the ops team forgot to disable leaks the 'recon' flag and a deploy key. Then use that key to reach the admin console for the 'access' flag. Submit each flag in the box; capture both to complete the challenge.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)
