crypto-attack-agent

Analyze encrypted application data to identify cryptographic security weaknesses.

54|5|Updated May 9, 2026

Search Tags:#jwt #security testing #cryptography #api security #javascript reverse engineering #encryption analysis

Ready to run

npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill crypto-attack-agent

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: crypto-attack-agent
Source: https://github.com/jinyimeng01/mastermind-bug-bounty/tree/main/agents/crypto_attack
Command: npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill crypto-attack-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security researchers analyze encrypted application data, reverse-engineer cryptographic implementations, and identify weaknesses that block authorized security assessments.

Core Features & Use Cases

Cryptographic Analysis: Detect encryption patterns, identify algorithms, extract keys and IVs, and analyze CryptoJS, AES, DES, RSA, and custom encoding implementations.
Attack Workflow Support: Guide JWT analysis, signature validation testing, encrypted payload inspection, and recovery of useful security testing data for bug bounty workflows.
Use Case: A security tester can use this Skill to examine a web application's JavaScript and API responses, identify encrypted fields, understand their protection mechanisms, and document findings during an authorized assessment.

Quick Start

Use the crypto attack skill to analyze the provided application data for encryption patterns, keys, algorithms, and JWT security issues.

Frequently Asked Questions about crypto-attack-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I analyze encrypted application data and identify cryptographic security weaknesses?▼

To analyze encrypted application data, apply automated workflows to detect encryption patterns, identify algorithms like AES or RSA, extract keys and IVs, and validate security issues within authorized testing scenarios.

What is the best way to reverse engineer JavaScript to find CryptoJS encryption implementations?▼

Reverse engineering JavaScript to find CryptoJS implementations involves inspecting web application client-side code to detect custom encoding, analyze encryption patterns, and extract cryptographic parameters for security validation.

How does JWT analysis work for API security testing?▼

JWT analysis for API security testing works by inspecting JSON Web Tokens to test signature validation, assess token security mechanisms, and document findings during authorized bug bounty assessments.

Can I extract encryption keys and IVs from API responses during an authorized assessment?▼

Yes, you can extract encryption keys and IVs from API responses by inspecting encrypted request and response data, identifying the applied cryptographic algorithms, and recovering testing data.

Does this approach support testing custom encoding implementations alongside standard AES and DES algorithms?▼

Yes, this approach supports testing custom encoding implementations alongside standard AES and DES algorithms by detecting varied cryptographic patterns and analyzing their specific protection mechanisms.