Haystack

Awesome box. Initial foothold was a little too CTF style for my taste, but really enjoyed low priv → root through the elk stack. Highly recommend checking out the grok debugger when you get to that part.

Saw some other comments on here about port forwarding and “ssh black magic”, I did not have to do any port forwarding whatsoever on this.