$ cat writeup.md…
$ cat writeup.md…
duckerz
Task: HMAC verification service with custom insecure_compare function that compresses 32-byte digest to 4 bytes via block_xor. Solution: Use oracle to get block_xor of target message, craft fake MAC with same compressed value by placing target bytes with zeros.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar