category

Challenge

318 posts
crypto

SPG

AES+2

SPG: reconstruct the generator state, derive the AES material, and decrypt the final ciphertext.

crypto

Sugar Free Candies

Sugar Free Candies: model the crypto leak, recover the missing secret, and decrypt the flag.

web

Feedback Flux

XSS+1

Feedback Flux: use the client-side injection path to steal the needed proof and recover the flag.

crypto

Secure Singning

Xor+1

Secure Singning: derive the XOR key stream, invert the transform, and recover the flag.

rev

Shattered Tablet

Ghidra+1

Shattered Tablet: trace the binary, isolate the validation routine, and invert it to recover the flag.

crypto

Flip

TryHackMe+2

Flip: abuse the AES misuse, derive the missing key material, and decrypt the flag.

web

SQHell

TryHackMe+1

SQHell: exploit the SQL injection, extract the needed data, and reach the flag.

pwn

DearQA

TryHackMe+5

DearQA: shape the heap state, gain the needed write or leak, and pivot to flag access.