Moonlight reveals what daylight hides. The conservatory keeps five seals; the vault knows their order. Reverse what you can, listen on wss://${location.host}/ws with a binary frame, and trust no mannequin.
Flag format Lun4R{<8>_<8>_<8>_<8>_<8>}.
WebGL, canvas fingerprint & mouse entropy required before challenge.wasm loads. Move your cursor.
WASM: challenge.wasm per-team constant → compute_token(Date.now()>>12) → binary WS frame [0x43 0x48 0x47 | token_le32 | fingerprint]
Glazed in 2024. The glaziers left archives, backups, and half-finished tooling behind. Every surface of the conservatory looks translucent — only one is load-bearing. Follow the X-Hint headers.
Old admin panels, debug endpoints, build artifacts, and staging hosts are still wired into the domain. Some are real; most are mannequins. The moon keeps a ledger of everyone who pokes them.
→ /.git/logs/HEADFive panes hold the seal. Each pane is cut from a different material — one is TCP, one is DNS, one rides a WebSocket, one sits in object storage, one lives in the database. The vault knows the order.
Hints: /api/hintsSQLi works but DB is decoy.