Knight Squad Academy Jail

knightctf

Task: Escape a Python jail with strict AST filtering that blocks most builtins, attributes, subscripts, and common operations. Solution: Brute-force single-letter function names to discover hidden oracle functions L() (flag length), Q(i,x) (character comparison), and S() (full string check), then leak the flag character by character using Q() oracle.