Xor me if you can

ringzer0ctf

Task: timed RingZer0 web puzzle serving a 10-char XOR key hidden in a longer string plus a base64 ciphertext, asking for the XOR-decrypted plaintext back within 3 seconds. Solution: scripted single-session fetch, brute-force every 10-char key window, select the window yielding alphanumeric output, and resubmit via the r parameter before the deadline.