$ cat writeup.md…
$ cat writeup.md…
bluehensctf
Task: Flask login portal with a password-only form and a protected dashboard. Solution: exploit a timing side channel in access-code verification, recover the secret one character at a time with median response measurements, then log in and read the flag.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar