hash length extension on a dot product oracle, and CSS injection + PDF beacon exfiltration
cheesing a crypto with a timing side-channel
writeups from corCTF 2025
cold
