TryHackMe – Farewell CTF Walkthrough

I completed a walkthrough of the Farewell capture the flag challenge from TryHackMe. You can read the full article at 64mm.com.

Synopsis

The farewell server will be decommissioned in less than 24 hours. Everyone is asked to leave one last message, but the admin panel holds all submissions. Can you sneak into the admin area and read every farewell message before the lights go out?

What Makes This Challenge Interesting

Farewell is a web exploitation challenge built around a realistic scenario — a legacy server on its way out, a public-facing submission form, and a restricted admin area sitting just out of reach. The time pressure framing adds urgency to what is otherwise a focused, methodical exercise in web application attack techniques.

Working through it covers skills that apply directly to real-world web assessments:

• Authentication bypass — finding weaknesses in how the admin panel validates access
• Input validation flaws — probing submission forms for injection opportunities
• Enumeration — mapping the application's structure to find hidden endpoints
• Privilege escalation — moving from a standard user context into the admin area

Why CTFs Matter for Real Security Work

Capture the flag challenges like Farewell are one of the best ways to sharpen offensive security skills in a legal, controlled environment. Each room isolates a specific class of vulnerability, letting you build muscle memory for the techniques that show up repeatedly in real penetration tests and compromise assessments.

For GEL LLC clients — especially small businesses and government contractors — understanding how attackers think is the foundation of a strong defense.

---

Read the full walkthrough at 64mm.com/tryhackme-farewell-ctf-walkthrough and try the room yourself at tryhackme.com.