Rating:

use p=q^8, h such that it has order q. for signature set r=1 and s to a random number.

Original writeup (https://s3v3ru5.github.io/notes/tsgctf2021#thisisdsa).