Hash

secure source: reconstruct the PRNG state from the leak, replay it, and recover the flag.

signup: reduce the hash constraint to a small search, test candidates, and recover the flag.

alphascii clashing: reduce the hash constraint to a small search, test candidates, and recover the flag.

Digital-Safety-Annex: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.

Interception: model the leak as a small lattice problem, recover the secret, and verify the flag.

Not that random: reconstruct the PRNG state from the leak, replay it, and recover the flag.

Permuted: exploit the RSA structure, recover the missing secret, and decrypt the flag.

Jenny From The Block: reduce the hash constraint to a small search, test candidates, and recover the flag.

MSS: exploit the RSA structure, recover the missing secret, and decrypt the flag.

AHS512: reconstruct the PRNG state from the leak, replay it, and recover the flag.

Arranged: abuse the AES misuse, derive the missing key material, and decrypt the flag.

Bank-er-smith: exploit the RSA structure, recover the missing secret, and decrypt the flag.

Bloom Bloom: abuse the AES misuse, derive the missing key material, and decrypt the flag.

I'm gRoot: reduce the hash constraint to a small search, test candidates, and recover the flag.

Android-in-the-Middle: abuse the AES misuse, derive the missing key material, and decrypt the flag.

Signing Factory: reconstruct the PRNG state from the leak, replay it, and recover the flag.

RsaCtfTool: abuse the AES misuse, derive the missing key material, and decrypt the flag.

Hybrid Unifier: abuse the AES misuse, derive the missing key material, and decrypt the flag.

SPG: reconstruct the generator state, derive the AES material, and decrypt the final ciphertext.

Secure Singning: derive the XOR key stream, invert the transform, and recover the flag.