Rating:

Use the flask cookie as a signing oracle to forge a valid signature for the SSH authentication.

Original writeup (https://bitsdeep.com/write-ups/kalmarctf-2024-one-key-to-rule-them-all/).