pwnmedium
Birdy
spbctf
Task: guess an 8-byte secret value on a fork-based server where the secret persists across connections. Solution: brute-force the secret byte-by-byte using partial reads — send N bytes and detect correct guesses from server responses, then send the full secret with print_flag=1.
$ ls tags/ techniques/
byte_by_byte_brute_forcepartial_read_exploitationfork_based_server_persistence
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]