webmedium

Miss-Input

scarlet

Task: decrypt a XOR-encrypted hex string from a Next.js challenge with a WASM module. Solution: use known-plaintext attack with the RUSEC{...} flag format to derive key characters, determine key length via suffix constraint, and recover the full 12-character key "M151NPU7_G0D".

$ ls tags/ techniques/
javascriptknown_plaintextxorleet_speakwasmnext.js
known_plaintext_attackpattern_recognitionconstraint_propagationxor_key_recovery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]