Challenge

dirbuster found /r/a/b/b/i/t/ with creds. sudo -u rabbit python3.6 walrus_and_the_carpenter.py imported random, so a local random.py gave a shell as rabbit. The SUID teaParty called date by relative path, so a PATH-hijacked date gave hatter.

perl -e 'use POSIX qw(setuid); POSIX::setuid(0); exec "/bin/sh";'

Root.