Midnight Flag CTF 2026 – BlackBank Challenge Writeup

BlackBank is a black-box web exploitation challenge centered on predicting Node.js (V8) Math.random() output. The application is an Express.js banking platform with a companion webmail service, both protected behind session-based authentication. A second, high-value user account — Vladizlow — is protected by Two-Factor Authentication (2FA) that sends a numeric code via the internal mail system. The critical…

https://kore.one/midnight-flag-ctf-2026-blackbank-challenge-writeup/?utm_source=mastodon&utm_medium=jetpack_social

Midnight Flag CTF 2026 – BlackBank Challenge Writeup » kore.one

BlackBank is a black-box web exploitation challenge centered on predicting Node.js (V8) Math.random() output. The application is an Express.js banking platform with a companion webmail service, both protected behind session-based authentication. A second, high-value user account — Vladizlow — is protected by Two-Factor Authentication (2FA) that sends a numeric code via the internal mail system.

kore.one