q3st1on

Welcome to my blog! I post (occasionaly) about security and CTFS.

Recent Posts

Back in November of 2023 I found out about a 13-year-old basic padding oracle attack that was somehow completely new to me. A CBC padding oracle technique which I had not encountered before in a paper, a ctf, or CryptoHack. Thinking it was surely common knowledge I went to find a library that would do the work for me (yes, I know, I’m lazy) and found to my amazement none of the libraries I checked (tbf: all Python) even mentioned it.