AES-CTR IV Reuse
crypto · medium · +45 XP
Target
GET /api/lab/iv-reuse-101/ciphertexts (2 hex ciphertexts; same key + IV)
POST /api/lab/iv-reuse-101/submit body {plaintext_a}
Goal: c1 ⊕ c2 = p1 ⊕ p2. p2 is a known crib: 'GET /admin HTTP/1.1\r\n'. XOR c1⊕c2⊕p2 recovers p1. Submit p1 (the secret request).
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/iv-reuse-101/
// reuse on the cli
// submit flag
// no solves yet
7 of 17 · crypto