cryptomedium
Goracle
hackerlab
Task: a Go server encrypts the flag with AES-CBC and exposes encrypt/decrypt JSON commands. Solution: reverse the binary to confirm a PKCS#7 padding oracle, then recover the remote flag block-by-block with a CBC padding-oracle attack.
$ ls tags/ techniques/
cbc_padding_oracle_attackgo_binary_reverse_engineeringbytewise_plaintext_recovery
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub to get started.
$ssh [email protected]