Open Bucket at EuroPort Gates
REWARD +250 ptsBriefing
INTELEuroPort Container Terminal 4, 14:05 local. Driverless straddle carriers, automated stacking cranes, OCR cameras at the gates — thousands of containers a day, all moved by a cloud-synchronised telemetry queue.
Our external attack surface monitoring lit up on a routine perimeter sweep. A third-party logistics vendor — the one running the OCR cameras at the automated entry gates — left an S3-compatible object storage bucket world-readable. Anyone with the URL can walk the directory like it’s a shared drive.
Most of what’s in there is exactly what it claims to be: log files, camera captures, telemetry exports. One file isn’t. Somebody dropped a legacy backup archive into a root subfolder — the kind of thing an engineer uploads in a hurry and forgets about.
Operator, find the bucket. Parse the listing. Lift the archive. Pull the credential before anyone else does.
Objective
backup.zip and submit the credential hidden inside as the flag.
Capture the Flag
GRID-2026-XXXX