q3st1on

Welcome to my blog! I post (occasionaly) about security and CTFS.

Recent Posts

Back in November of 2023 I found out about a 13 year old basic padding oracle attack that was somehow completely new to me. A CBC padding oracle technique which I had not encountered before in a paper, a ctf, or cryptohack. Thinking it was surely common knowledge I went to find a library that would do the work for me (yes, I know, I’m lazy) and found to my amazement none of the libraries I checked (tbf: all python) even mentioned it.