01 / 08 · signal
First packet
Paste recon into the membrane (V). httpx, nmap, URL dumps, a sitemap. Only what matches scope becomes a cell. The rest is a kill.
02 / 08 · surface
The edge grows
Hosts appear the way cells do: one, then a neighbor, because the first was lonely in DNS. What you can reach from outside is the only body that counts.
03 / 08 · foothold
A session writes
Auth is not the end of the hunt. It is the start of the exploit phase. Hold still and the field forgets. Move and it dreams a spine into the app.
04 / 08 · secrets
Loot has mass
Paste a JWT, a Set-Cookie, a JS chunk (T). Serum draws the secrets. Expiry is the pulse. Full values are copied, never written to disk.
- session
- scope
- residue
- canary
- afterimage
05 / 08 · lateral
Color is blood
Same tenant, next object. Staging to prod if the skin matches. Scroll and the palette migrates. A chain is scored on the end state, not the sum of parts.
06 / 08 · channel
Silence is also a reply
C2, exfil, a callback that should not exist. The bed is already in the room. M cuts it. A quiet channel is still a channel.
07 / 08 · impact
Prove it. Then stop.
Press. Feed the field a pulse. It will not thank you. It will change. Impact is the path you demonstrated, not the theoretical maximum.
08 / 08 · burn
No residue
Nothing here is stored on a server. A second visit is a different animal unless you carry the packet. Do not put a client name in the callsign.