Navigating a height-128 2-isogeny volcano by lifting both endpoints to its unique CM crater
Recovering a 150-character AES-CBC secret through UTF-8 and JSON response oracles under a strict decoding barrier
Forcing RSA factor recovery to fail by choosing primes with matching small-base 2-adic residue behavior
DefCamp D-CTF Final
Recovering a 48-byte secret from a stateful AES-CBC encryption oracle by forcing block collisions across chained requests
The 3th HSACE CLUB LEAGUE Quals
Forging an AES-CBC subscription packet by flipping IV bytes to rewrite the subscriber identifier as 0xdeadbabe
Recovering reused AES-CTR plaintext by aligning consecutive ciphertexts one block apart and scoring printable XOR chains
![[SECCON CTF 14] Last Flight writeup](/_astro/seccon14.CPpgPmZa_tkyJ0.webp)
![[D-CTF] last for sus rngs](/_astro/d-ctf.C_wVRWf-_Z1f3OuT.webp)
![[H7CTF 2025] Kakashi's secrect jutsu writeup](/_astro/h7ctf.DX83Bz1u_1q0QBY.webp)
![[CLUB LEAGUE] pqs writeup](/_astro/club.BOG-ZyMo_1pDw9Q.webp)
![[SunshineCTF 2025] bits of space writeup](/_astro/sunshine.D8KoxPYW_Zaifty.webp)