webPromedium

AquaCrypt

undutmaning

Task: Flask file sharing app with RSA signature verification, obfuscated verify function, 128-bit weak key. Solution: robots.txt enumeration, source code leak via /admin, deobfuscate verify function, factor small RSA modulus, forge PKCS#1 v1.5 signature.

$ ls tags/ techniques/
flaskrobots_txtobfuscationrsasource_code_leakweak_keypkcs1_v1_5signature_verification
source_code_leakrobots_txt_enumerationpython_deobfuscationrsa_small_key_factorizationpkcs1_signature_forgery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups