https://th3b0ywh0l1v3d.github.io/tags/aes-cbc/ Recent content in Aes-Cbc on Th3B0yWh0L1v3d — Security Writeups Hugo en-us Tue, 09 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/thm/flip-dat-bit/ Tue, 09 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/thm/flip-dat-bit/ A TCP service hands you the AES-CBC ciphertext of your own input and asks you to return a ciphertext that decrypts to contain admin credentials — solved with a single-byte XOR flip. https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/web/heart-part-7/ Sat, 06 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/web/heart-part-7/ A Kendrick-themed Flask app chains UNION-based SQLi to leak admin creds, an admin panel exposes an internal cipher microservice, and a Heartbleed-style over-read bleeds the AES-256 master key from heap memory to decrypt the flag.