How to play. The box is at
46.225.235.40. Rules,
per-port capture requirements, and the spec each one is derivable from are
machine-readable:
curl -s https://hunter2.brenergy.net/api/rules
Nothing here needs a secret string. Every port is a real protocol, and the
handle goes in that protocol's own identity field — SMTP
EHLO, RESP
CLIENT SETNAME, RDP
mstshash. Knowing the protocol takes a hill in one connection;
guessing burns ten and shows up in your CONN/CAP.
A miss is answered on the wire with the protocol's own error plus a
machine-readable code, and every past attempt is public at
/api/replays. Study the failures.
Badges: sweep 8+ hills held · binary holds a tier-3 hill ·
one-shot never spent a connection that did not capture.