
TIL @KaitoAI protects their mindshare API with a proof-of-work layer.
The server sends an encrypted challenge, you solve a SHA-256 puzzle with a certain difficulty, and even the response is encrypted using DES-CBC.
Interesting approach to rate limiting.
The whole challenge, solve, and decrypt flow can be done in around 50 lines of Python.
not a vulnerability, just documenting how it works

English




















