4 min read
NDIAS Automotive/IoT CTF 2026 — Gate to the Past Writeup
An old IoT device SSHv2 session captured in a pcap, encrypted with AES-128-CBC. The 2007-era Debian OpenSSL weak PRNG (CVE-2008-0166) makes the Diffie-Hellman private exponent recoverable, so the whole session can be decrypted and the flag read off the wire.
#CTF#Cybersecurity#Network