webProhard
165 - Klimat Kontrol (Climate Control)
duckerz
Task: escalate to admin on a Flask app using custom JWT tokens signed with Lamport one-time signatures. Solution: register ~25 users to collect enough signatures to recover both secret keys for all 128 bit positions, then forge an admin token.
$ ls tags/ techniques/
bit_manipulationjwt_forgerylamport_key_recoverysignature_collection
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]UUIDY— duckerz
- [web][Pro]Лысина админа (Admin's Bald Head)— duckerz
- [web][Pro]bawker— bluehensctf
- [web][Pro]Print on Demand (Печать по запросу)— duckerz
- [web][Pro]Code Control— undutmaning