skip to main content
hacking.communityplay in the sandbox.
all certifications
// HC-CRYP · advanced

Applied Cryptanalysis

Break the crypto the textbooks told you was safe.

4 of 5
labs to pass
3 hours
time limit
+600 XP
on passing

About this exam

A specialist credential for attacking real-world cryptographic mistakes: oracle attacks, weak modes, hash abuse, and nonce reuse. Recover plaintext and forge tokens.

Skills verified

Padding OracleECB weaknessesHash Length ExtensionIV ReuseToken Forgery

How the exam works

  1. 1
    Start when you're ready

    The clock starts the moment you begin and keeps running even if you close the tab — there's no pause.

  2. 2
    Capture 4 of 5 labs

    Open each lab, exploit it, and submit the flag it gives you. Solve any 4 within the 3-hour limit to pass.

  3. 3
    Proctored for integrity

    Leaving the exam tab is recorded and factored into an integrity score printed on your credential — the pass has to mean something.

  4. 4
    Earn a verifiable credential

    Pass and we mint a signed credential with a public verify page and a shareable certificate — provable, not self-reported. Plus +600 XP.

  5. 5
    Miss it? Cooldown, then retry

    If you don't reach the threshold, a short cooldown applies before you can retake — so the credential stays meaningful.

Exam labs (5)

Solve any 4 of these 5 to pass. Once you start, the clock runs even if you close the tab.

Weak XOR Crypto
crypto · easy
CBC Padding Oracle
crypto · hard
ECB Code-Book Attack (Block Recovery)
crypto · medium
Hash Length Extension
crypto · medium
AES-CTR IV Reuse
crypto · medium
// install app

Install hacking.community for fast access, offline reading, and push notifications. No app store needed.