skip to main content
hacking.communityplay in the sandbox.

Decrypt the Exfiltrated Database Backup

crypto · easy · +50 XP

XOR Cipher Basics

XOR (exclusive OR) is a bitwise operation often misused for "encryption" in real-world breaches. When you XOR plaintext with a repeating key, you get ciphertext. The beauty? XORing the ciphertext with the same key recovers the plaintext—it's perfectly reversible.

The Scenario

During incident response, you recovered a file backup.enc from an attacker's staging server. Logs show they used a short ASCII key to obfuscate it before upload. Your job: decode it.

Attack Vector

Use CyberChef (the "XOR" recipe with UTF8 key), Python (bytes([a ^ b for a, b in zip(data, itertools.cycle(key.encode()))])), or even openssl scripting. Try common keys like "secret", "password", or "backup"—attackers rarely use strong keys for quick obfuscation.

Your Mission

The encrypted blob below hides the flag. Decode it by XORing with the correct key to reveal the original text.

// graded hints — spend XP when stuck

Sign in to unlock escalating hints for this easy lab.

// captured payload · xor
0a0218131a024f020a1b1d15104c0119101101094e5a45413d075b0e11405b505a5c1445511c

XOR the bytes against the key `backup` (UTF-8, repeating).

// this payload is unique to your account — decode it, then submit the recovered hc{...} flag below

// submit flag
// no solves yet

// go deeper

// install app

Install hacking.community for fast access, offline reading, and push notifications. No app store needed.