webPromedium

wait

bluehensctf

Task: Flask login portal with a password-only form and a protected dashboard. Solution: exploit a timing side channel in access-code verification, recover the secret one character at a time with median response measurements, then log in and read the flag.

$ ls tags/ techniques/
flaskside_channelwerkzeugtiming_attackauthenticationpassword_oracle
response_time_medianingprefix_enumerationtiming_side_channel_exploitation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups