Windows Practice Round 9
Project Glasswing / sshomcat: SSH · Apache · Tomcat
You're a cybersecurity engineer on the Frontier Red Team, and you've inherited Project Glasswing: the initiative securing the systems behind an unreleased Claude model, codenamed [REDACTED]. An unconfirmed entity breached this machine recently and left artifacts on the desktop that need investigating.
This box is also one of the team's core systems for remote access. Restore it to a secure state, resolve any remnants of the attack, and make sure the remote access path keeps working for the people who are supposed to be using it.
Anything not relevant to this project should be removed immediately. The only authorized browser on this system is Google Chrome.
critical services
A small Java backend (Tomcat) bridges a browser terminal to the local OpenSSH server over a WebSocket, fronted by Apache as a reverse proxy. All three legs of this chain are required for the service to actually work end to end.
| Component | Path |
|---|---|
| Apache (frontend / reverse proxy) | C:\xampp\apache\... |
| Tomcat (backend / API layer) | C:\xampp\tomcat\... |
| sshomcat webapp | C:\xampp\tomcat\webapps\sshomcat\ |
| Local OpenSSH server (sshd) | C:\ProgramData\ssh\ |
| Component | Important ports |
|---|---|
| Apache | 80, 443 |
| Tomcat | 8080, 8009 |
| OpenSSH (sshd) | 22 |
service uptime requirements
Keep all of the following reachable:
- The Apache frontend
- The Tomcat backend
- The local OpenSSH server
- The sshomcat bridge's own health endpoint
injects
Module Integration - there's a copy ofsshomcat-modules on the Desktop, a companion repo of optional add-on modules for the SSH bridge. Build the motd-banner module in it and get it actually loaded by the live service.
user auditing
| Administrators | Users |
|---|---|
| Anthropic (you) | Sonnet |
| OpenAI | GPT5 |
| Gemini | |
| Meta | Llama |
| Microsoft | Phi |
| xAI | Grok |
| Mistral | Codestral |
| Cohere | Command |
| Amazon | Nova |
| DeepSeek | R1 |
Bridge Operators is a custom group authorized to manage and restart the SSH bridge service. Correct membership:Anthropic and Sonnet.