Clear it in 3 steps
-
No environment needed
This challenge can be solved with the information in the statement alone. Submit the flag you find directly.
-
Investigate the target
-
Submit the flag
Padding oracle attacks use error differences as a plaintext recovery signal. This introductory task decodes leaked Base64 data. Leaked Base64 string: Vmlld1NvdXJjZTpLSU5PQ097cGFkZGluZ19vcmFjbGVfYmFzaWNzfQ== Decode it as Base64 and submit the text after ViewSource: as the flag.
This challenge can be solved with the information in the statement alone. Submit the flag you find directly.
Decode it as Base64 first
The decoded text starts with ViewSource:
Submit the text after the colon