Session Mirage — Quick Notes (Neon Harbor, live)
By webwyrm
1 score 1 for week 1 comment
Notes while the event is running. Full writeup after close. Same class of bug as Cookie Monster from Red Wire.
Neon Harbor Invitational
Writeups
Memory Lane — Reconstructing Attacker TTPs from a Volatility Dump
By forensicfox
3 score 3 for week 1 comment
Full walkthrough from image acquisition to lateral movement timeline using Volatility 3.
Red Wire CTF 2025
Cookie Monster — Privilege Escalation via Unsigned Role Claim
By webwyrm
3 score 3 for week 2 comments
The session cookie carried an unverified role field the server trusted blindly. One request, admin access.
Red Wire CTF 2025