crypto-attack

Analyze encrypted application data to identify cryptographic implementations and reverse engineering opportunities.

54|5|Updated May 9, 2026

Search Tags:#cryptography #reverse engineering #api security #rsa #aes #javascript analysis #encryption analysis

Ready to run

npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill crypto-attack

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: crypto-attack
Source: https://github.com/jinyimeng01/mastermind-bug-bounty/tree/main/skills/crypto_attack
Command: npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill crypto-attack

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security researchers identify, reverse engineer, and analyze encrypted or encoded application data that obscures API behavior, sensitive fields, and application logic.

Core Features & Use Cases

Encryption Detection: Detects common encryption and encoding patterns including AES, DES, RSA, Base64, Hex, hashes, JWT structures, and CryptoJS usage.
Key and Algorithm Analysis: Guides extraction of encryption logic, key sources, IV handling, cipher modes, and custom obfuscation patterns from application code.
Use Case: Analyze a web application's encrypted API requests and responses to understand data transformations, validate security controls, and identify cryptographic implementation issues.

Quick Start

Use the crypto-attack skill to analyze the attached JavaScript files and encrypted API responses for encryption algorithms, keys, and decoding workflows.

Frequently Asked Questions about crypto-attack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify encryption algorithms used in encrypted API traffic?▼

To identify encryption algorithms in encrypted API traffic, analyze application data to detect patterns like AES, DES, RSA, Base64, Hex, and JWT structures. This reveals the cryptographic workflows securing communication and highlights data transformations.

How do I extract AES or RSA encryption keys from JavaScript code?▼

Extract AES or RSA encryption keys from JavaScript code by analyzing application logic and CryptoJS usage to trace key sources, IV handling, and cipher modes. This reconstructs cryptographic implementations for security testing.

Can I analyze custom obfuscation patterns in web application data?▼

Yes, you can analyze custom obfuscation patterns in web application data by reverse engineering encoded data and JavaScript logic. This identifies non-standard cryptographic transformations and validates security controls.

What is the best way to reverse engineer encrypted API requests and responses?▼

The best way to reverse engineer encrypted API requests and responses involves detecting cryptographic implementations in application code, classifying encoding schemes, and extracting keys to decode encrypted traffic accurately.

Does JavaScript analysis work for reconstructing JWT and CryptoJS workflows?▼

Yes, JavaScript analysis works for reconstructing JWT and CryptoJS workflows by examining client-side code to identify token structures, hashing mechanisms, and encryption logic applied before data transmission.

When should I not use automated cryptographic implementation detection?▼

Automated cryptographic implementation detection may be insufficient when analyzing heavily obfuscated server-side encryption or proprietary binary protocols, requiring manual reverse engineering to uncover complex custom data transformations.