cryptomedium

Gambler's Fallacy

uoftctf2026

Task: Casino game using Python's random.getrandbits(32) for server seeds, where the flag costs more money than the starting balance. Solution: Collected 624 server seeds to fully recover the Mersenne Twister state using randcrack, predicted the next seed, found a winning client_seed via brute force, then bet with minimal greed for a 49.5x multiplier to buy the flag.

$ ls tags/ techniques/
seed_bruteforcemt19937_state_recoveryprng_prediction

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]