https://x3ric.com/blog/tags/crypto/CTF notes, systems work, and writeups.Hugoen-usSat, 06 Jun 2026 21:41:13 +0200https://x3ric.com/blog/posts/HackTheBox-Flagportation-Challenge/https://x3ric.com/blog/posts/HackTheBox-Flagportation-Challenge/Sat, 06 Jun 2026 00:00:00 +0200challengehtbcryptoEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-400Curves-Challenge/https://x3ric.com/blog/posts/HackTheBox-400Curves-Challenge/Mon, 05 May 2025 09:20:00 +0800challengehtbcryptorsalatticeecc400Curves: turn the RSA leak into a lattice recovery, rebuild the secret values, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Down-the-Rabinhole-Challenge/https://x3ric.com/blog/posts/HackTheBox-Down-the-Rabinhole-Challenge/Sun, 16 Feb 2025 00:20:00 +0800challengehtbcryptorsaDown the Rabinhole: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-secure-source-Challenge/https://x3ric.com/blog/posts/HackTheBox-secure-source-Challenge/Sun, 16 Feb 2025 00:20:00 +0800challengehtbcryptoprnglatticeecchashsecure source: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-signup-Challenge/https://x3ric.com/blog/posts/HackTheBox-signup-Challenge/Sun, 16 Feb 2025 00:20:00 +0800challengehtbcryptohashsignup: reduce the hash constraint to a small search, test candidates, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Spooky-RSA-Challenge/https://x3ric.com/blog/posts/HackTheBox-Spooky-RSA-Challenge/Sun, 16 Feb 2025 00:20:00 +0800challengehtbcryptorsaSpooky RSA: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-TurboCipher-Challenge/https://x3ric.com/blog/posts/HackTheBox-TurboCipher-Challenge/Sun, 16 Feb 2025 00:20:00 +0800challengehtbcryptoTurboCipher: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-alphascii-clashing-Challenge/https://x3ric.com/blog/posts/HackTheBox-alphascii-clashing-Challenge/Thu, 13 Feb 2025 00:20:00 +0800challengehtbcryptohashalphascii clashing: reduce the hash constraint to a small search, test candidates, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Digital-Safety-Annex-Challenge/https://x3ric.com/blog/posts/HackTheBox-Digital-Safety-Annex-Challenge/Tue, 04 Feb 2025 00:20:00 +0800challengehtbcryptoecchashDigital-Safety-Annex: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Interception-Challenge/https://x3ric.com/blog/posts/HackTheBox-Interception-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptolatticehashInterception: model the leak as a small lattice problem, recover the secret, and verify the flag.https://x3ric.com/blog/posts/HackTheBox-Multipage-Recyclings-Challenge/https://x3ric.com/blog/posts/HackTheBox-Multipage-Recyclings-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptoaesMultipage Recyclings: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Not-that-random-Challenge/https://x3ric.com/blog/posts/HackTheBox-Not-that-random-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptoprnghashNot that random: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Nuclear-Sale-Challenge/https://x3ric.com/blog/posts/HackTheBox-Nuclear-Sale-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptoNuclear Sale: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-One-Step-Closer-Challenge/https://x3ric.com/blog/posts/HackTheBox-One-Step-Closer-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptorsaOne Step Closer: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Partial-Tenacity-Challenge/https://x3ric.com/blog/posts/HackTheBox-Partial-Tenacity-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptorsaPartial Tenacity: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Permuted-Challenge/https://x3ric.com/blog/posts/HackTheBox-Permuted-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptorsaaeshashPermuted: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-RLotto-Challenge/https://x3ric.com/blog/posts/HackTheBox-RLotto-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptoprngRLotto: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Weak-RSA-Challenge/https://x3ric.com/blog/posts/HackTheBox-Weak-RSA-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptorsaWeak RSA: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Whole-Lotta-Candy-Challenge/https://x3ric.com/blog/posts/HackTheBox-Whole-Lotta-Candy-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbcryptoaesxorWhole Lotta Candy: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Inside-the-Matrix-Challenge/https://x3ric.com/blog/posts/HackTheBox-Inside-the-Matrix-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptorsalatticeInside the Matrix: turn the RSA leak into a lattice recovery, rebuild the secret values, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Jenny-From-The-Block-Challenge/https://x3ric.com/blog/posts/HackTheBox-Jenny-From-The-Block-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptohashJenny From The Block: reduce the hash constraint to a small search, test candidates, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Living-with-Elegance-Challenge/https://x3ric.com/blog/posts/HackTheBox-Living-with-Elegance-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptoLiving with Elegance: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Lost-Modulus-Challenge/https://x3ric.com/blog/posts/HackTheBox-Lost-Modulus-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptorsaLost Modulus: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-LunaCrypt-Challenge/https://x3ric.com/blog/posts/HackTheBox-LunaCrypt-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptoxorLunaCrypt: derive the XOR key stream, invert the transform, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Mayday-Mayday-Challenge/https://x3ric.com/blog/posts/HackTheBox-Mayday-Mayday-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptolatticeMayday Mayday: model the leak as a small lattice problem, recover the secret, and verify the flag.https://x3ric.com/blog/posts/HackTheBox-MSS-Challenge/https://x3ric.com/blog/posts/HackTheBox-MSS-Challenge/Thu, 23 Jan 2025 09:20:00 +0800challengehtbcryptorsaaeshashMSS: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-AHS512-Challenge/https://x3ric.com/blog/posts/HackTheBox-AHS512-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoprnghashAHS512: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Arranged-Challenge/https://x3ric.com/blog/posts/HackTheBox-Arranged-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoaeslatticeecchashArranged: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-baby-quick-maffs-Challenge/https://x3ric.com/blog/posts/HackTheBox-baby-quick-maffs-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptobaby quick maffs: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Bank-er-smith-Challenge/https://x3ric.com/blog/posts/HackTheBox-Bank-er-smith-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptorsahashBank-er-smith: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-BBGun06-Challenge/https://x3ric.com/blog/posts/HackTheBox-BBGun06-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptorsaBBGun06: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Bloom-Bloom-Challenge/https://x3ric.com/blog/posts/HackTheBox-Bloom-Bloom-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoaeslatticehashBloom Bloom: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Brainys-Chyper-Challenge/https://x3ric.com/blog/posts/HackTheBox-Brainys-Chyper-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptorsaBrainy's Chyper: exploit the RSA structure, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Classic-yet-complicated-Challenge/https://x3ric.com/blog/posts/HackTheBox-Classic-yet-complicated-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptovigenereClassic, yet complicated: recover the Vigenere key from the ciphertext, decrypt the message, and verify the flag.https://x3ric.com/blog/posts/HackTheBox-ElElGamal-Challenge/https://x3ric.com/blog/posts/HackTheBox-ElElGamal-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoeccElElGamal: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Fast-Carmichael-Challenge/https://x3ric.com/blog/posts/HackTheBox-Fast-Carmichael-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoeccFast Carmichael: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-How-The-Columns-Have-Turned-Challenge/https://x3ric.com/blog/posts/HackTheBox-How-The-Columns-Have-Turned-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoHow The Columns Have Turned: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-I-know-Mag1k-Challenge/https://x3ric.com/blog/posts/HackTheBox-I-know-Mag1k-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoxorI know Mag1k: derive the XOR key stream, invert the transform, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Im-gRoot-Challenge/https://x3ric.com/blog/posts/HackTheBox-Im-gRoot-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptohashI'm gRoot: reduce the hash constraint to a small search, test candidates, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Iced-Tea-Challenge/https://x3ric.com/blog/posts/HackTheBox-Iced-Tea-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbcryptoaeseccIced Tea: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Android-in-the-Middle-Challenge/https://x3ric.com/blog/posts/HackTheBox-Android-in-the-Middle-Challenge/Tue, 07 Jan 2025 09:20:00 +0800challengehtbcryptoaeshashAndroid-in-the-Middle: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Baby-Time-Capsule-Challenge/https://x3ric.com/blog/posts/HackTheBox-Baby-Time-Capsule-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsaEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-BabyEncryption-Challenge/https://x3ric.com/blog/posts/HackTheBox-BabyEncryption-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Birds-of-randomness-Challenge/https://x3ric.com/blog/posts/HackTheBox-Birds-of-randomness-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsaprnglatticeeccEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Broken-Decryptor-Challenge/https://x3ric.com/blog/posts/HackTheBox-Broken-Decryptor-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoxorprngEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Embryonic-Plant-Challenge/https://x3ric.com/blog/posts/HackTheBox-Embryonic-Plant-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoaesprnghashEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Lost-Modulus-Again-Challenge/https://x3ric.com/blog/posts/HackTheBox-Lost-Modulus-Again-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsalatticeEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-LostKey-Challenge/https://x3ric.com/blog/posts/HackTheBox-LostKey-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsaaeslatticeecchashEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-POPO-Challenge/https://x3ric.com/blog/posts/HackTheBox-POPO-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Protein-Coockies-Challenge/https://x3ric.com/blog/posts/HackTheBox-Protein-Coockies-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Quantum-Safe-Challenge/https://x3ric.com/blog/posts/HackTheBox-Quantum-Safe-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsaEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Quick-Maffs-Challenge/https://x3ric.com/blog/posts/HackTheBox-Quick-Maffs-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptolatticeEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-ReMeeting-the-Wheel-Challenge/https://x3ric.com/blog/posts/HackTheBox-ReMeeting-the-Wheel-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsaaeshashEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-RSAisEasy-Challenge/https://x3ric.com/blog/posts/HackTheBox-RSAisEasy-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptorsaEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Signing-Factory-Challenge/https://x3ric.com/blog/posts/HackTheBox-Signing-Factory-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoprnghashSigning Factory: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-The-Last-Dance-Challenge/https://x3ric.com/blog/posts/HackTheBox-The-Last-Dance-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoxoreccEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-XorXorXor-Challenge/https://x3ric.com/blog/posts/HackTheBox-XorXorXor-Challenge/Fri, 13 Dec 2024 09:20:00 +0800challengehtbcryptoaesxorEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-JerryTok-Challenge/https://x3ric.com/blog/posts/HackTheBox-JerryTok-Challenge/Thu, 12 Dec 2024 09:20:00 +0800challengehtbcryptoeccEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Rhome-Challenge/https://x3ric.com/blog/posts/HackTheBox-Rhome-Challenge/Thu, 12 Dec 2024 09:20:00 +0800challengehtbcryptoaesprnghashEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Shamirs-Secret-Challenge/https://x3ric.com/blog/posts/HackTheBox-Shamirs-Secret-Challenge/Thu, 12 Dec 2024 09:20:00 +0800challengehtbcryptolatticeshamirEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-YALM-Challenge/https://x3ric.com/blog/posts/HackTheBox-YALM-Challenge/Thu, 12 Dec 2024 09:20:00 +0800challengehtbcryptorsalatticeEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Perfect-Synchronization-Challenge/https://x3ric.com/blog/posts/HackTheBox-Perfect-Synchronization-Challenge/Wed, 11 Dec 2024 09:20:00 +0800challengehtbcryptoaeseccvigenerePerfect Synchronization: recover the Vigenere key from the ciphertext, decrypt the message, and verify the flag.https://x3ric.com/blog/posts/HackTheBox-RsaCtfTool-Challenge/https://x3ric.com/blog/posts/HackTheBox-RsaCtfTool-Challenge/Mon, 09 Dec 2024 09:20:00 +0800challengehtbcryptoaeshashRsaCtfTool: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-CandyVault-Challenge/https://x3ric.com/blog/posts/HackTheBox-CandyVault-Challenge/Sat, 30 Nov 2024 09:20:00 +0800challengehtbcryptoCandyVault: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Optimus-Prime-Challenge/https://x3ric.com/blog/posts/HackTheBox-Optimus-Prime-Challenge/Sat, 30 Nov 2024 09:20:00 +0800challengehtbcryptoOptimus Prime: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Ancient-Encodings-Challenge/https://x3ric.com/blog/posts/HackTheBox-Ancient-Encodings-Challenge/Sat, 23 Nov 2024 09:20:00 +0800challengehtbcryptoAncient Encodings: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Flippin-Bank-Challenge/https://x3ric.com/blog/posts/HackTheBox-Flippin-Bank-Challenge/Sat, 23 Nov 2024 09:20:00 +0800challengehtbcryptoaesprngFlippin Bank: reconstruct the generator state, derive the AES material, and decrypt the final ciphertext.https://x3ric.com/blog/posts/HackTheBox-Gonna-Lift-Em-All-Challenge/https://x3ric.com/blog/posts/HackTheBox-Gonna-Lift-Em-All-Challenge/Sat, 23 Nov 2024 09:20:00 +0800challengehtbcryptoprngGonna Lift Em All: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-Binary-Basis-Challenge/https://x3ric.com/blog/posts/HackTheBox-Binary-Basis-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoBinary Basis: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Brevi-Moduli-Challenge/https://x3ric.com/blog/posts/HackTheBox-Brevi-Moduli-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptorsalatticeBrevi Moduli: turn the RSA leak into a lattice recovery, rebuild the secret values, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Hybrid-Unifier-Challenge/https://x3ric.com/blog/posts/HackTheBox-Hybrid-Unifier-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoaeshashHybrid Unifier: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Inizialization-Challenge/https://x3ric.com/blog/posts/HackTheBox-Inizialization-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoaesxorInizialization: abuse the AES misuse, derive the missing key material, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Read-Before-You-Sign-Challenge/https://x3ric.com/blog/posts/HackTheBox-Read-Before-You-Sign-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoRead Before You Sign: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Sekur-Julius-Challenge/https://x3ric.com/blog/posts/HackTheBox-Sekur-Julius-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoprngSekur Julius: reconstruct the PRNG state from the leak, replay it, and recover the flag.https://x3ric.com/blog/posts/HackTheBox-SPG-Challenge/https://x3ric.com/blog/posts/HackTheBox-SPG-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoaesprnghashSPG: reconstruct the generator state, derive the AES material, and decrypt the final ciphertext.https://x3ric.com/blog/posts/HackTheBox-Sugar-Free-Candies-Challenge/https://x3ric.com/blog/posts/HackTheBox-Sugar-Free-Candies-Challenge/Sat, 16 Nov 2024 09:20:00 +0800challengehtbcryptoSugar Free Candies: model the crypto leak, recover the missing secret, and decrypt the flag.https://x3ric.com/blog/posts/HackTheBox-Secure-Singning-Challenge/https://x3ric.com/blog/posts/HackTheBox-Secure-Singning-Challenge/Fri, 01 Nov 2024 09:20:00 +0800challengehtbcryptoxorhashSecure Singning: derive the XOR key stream, invert the transform, and recover the flag.https://x3ric.com/blog/posts/TryHackMe-Flip-Challenge/https://x3ric.com/blog/posts/TryHackMe-Flip-Challenge/Thu, 03 Oct 2024 09:20:00 +0800challengethmcryptoaesxorFlip: abuse the AES misuse, derive the missing key material, and decrypt the flag.