webeasy

OFD

spbctf

Task: Brute force receipt codes on a fiscal data website where signature is generated client-side. Solution: Recreate SHA256 signature from JavaScript, enumerate sequential IDs with multithreading to find the flag.

$ ls tags/ techniques/
api_brute_forceclient_side_signature_recreationmultithreaded_enumeration

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]