Find the Leaked Token

Dig one leaked credential out of hundreds of log lines.

A intermediate Docker challenge worth 10 points. Solve it hands-on in a real Docker environment in your browser - no local setup, no fake shells.

The Challenge

Scenario: Debug code in auth-svc printed a live credential into the container logs, buried among normal traffic. Security needs it for revocation.

Tasks:

• Search the logs of auth-svc for the leaked token (format SG-xxxxxxxx)
• Write JUST the token to /root/token.txt

The token is randomized per attempt — no guessing.

Commands to learn: docker logs, piping logs to grep

Run check when done.