blockchaineasy

Honor Among Thieves

hackthebox

Task: Solidity contract with private encrypted flag and hash, need to call talk() with correct key. Solution: Read private storage via eth_getStorageAt, find successful transaction via Voice(5) event, extract XOR key from transaction input data.

$ ls tags/ techniques/
blockchainsolidityprivate_storageevent_logsxor_encryptiontransaction_eavesdropping
xor_key_recoveryevent_log_analysisstorage_slot_readingtransaction_data_extraction
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]