Frolic

Enumeration

nmap -sC -sV -oA ./frolic 10.10.10.111

SSH, Samba, and nginx on port 9999 are exposed. The landing page references frolic.htb:1880, and directory enumeration on port 9999 discovers an /admin application.

Web puzzle and credentials

The admin login loads /admin/js/login.js. Reviewing the client-side script begins the original writeup's chain of encoded clues and recovered credentials.

http://10.10.10.111:9999/admin/js/login.js

The walkthrough continues through the nested web content until credentials and an executable foothold are recovered.

Privilege escalation

After obtaining a shell, the original walkthrough identifies a vulnerable local binary and develops a buffer-overflow exploit to reach root. Full payload construction and command output remain available in the linked CherryTree notes.