webProeasy

OFD

spbctf

Task: Brute force receipt codes on a fiscal data website where signature is generated client-side. Solution: Recreate SHA256 signature from JavaScript, enumerate sequential IDs with multithreading to find the flag.

$ ls tags/ techniques/
api_brute_forceclient_side_signature_recreationmultithreaded_enumeration

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups