Switch branches/tags
Nothing to show
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
..
Failed to load latest commit information.
challenge
deployment
distfiles
solution
Makefile
README.md

README.md

Public Domain code used from:

Vulnerability:

  • Padding oracle, leading to shell command execution

This level exposes command-execution functionality, which is done using parameters that are encrypted by a secret key. However, due to a padding oracle vulnerability, those commands can be decrypted and changed.

My secret goal is for somebody to patch my poracle tool to support encryption of arbitrary text as well as decryption. :)