Luna CTF 2026 | hotwater

LUN4R-MU Timing Leak

22 Oct 2026 • 3 min read

The moonchace hardware challenge exposes a tiny VM ("LUN4R-MU") over TCP (103.49.131.90:31337) whose debugger accepts load $rN , load $rN 0($r0), batch … end, reset, and quit commands,…

LUNA1

KumoSec ChainVault

22 Oct 2026 • 3 min read

Web

Luna CTF hosted an EVM playground ("KumoSec ChainVault") behind a team-token API at http://103.49.131.90 with a JSON-RPC node at /chain/rpc. Two contracts exist: an AuditorRegistry…

LUNA1

auth-gw Biased-Nonce ECDSA

22 Oct 2026 • 2 min read

Crypto

The captured_tokens.json artifact contains ECDSA session-attestation signatures intercepted from "auth-gw" (VLAN 12) on secp256k1 with SHA-256. A leaked commit note in gen_notes.txt…

LUNA1

Shadow Consent

03 Oct 2026 • 3 min read

Forensics

Organization: Beacon Data Systems Incident Date: 2024-03-14 Analysis Date:** 2024-03-16

LUNA1